draken 0.1.6 → 0.3.0

package/dist/memory/storage.js

@@ -0,0 +1,116 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.initHistoryStorage = initHistoryStorage;
+/** One physical passage/vector, many scoped occurrences. `chunks` and
+ * `embedding_cache` are read views, not additional text/vector stores. */
+function initHistoryStorage(db, fingerprint) {
+    const version = 'history-index-v3-contentless';
+    if (db.prepare("SELECT 1 FROM sqlite_schema WHERE type='table' AND name='meta'").get()) {
+        const get = db.prepare('SELECT value FROM meta WHERE key=?');
+        // A cold prepared-only voice lookup must not perform even no-op schema
+        // writes. Real migrations/model changes still take the transactional path.
+        if (get.get('schema')?.value === version
+            && get.get('model')?.value === fingerprint
+            && get.get('covered-tails-removed')?.value === '1')
+            return;
+    }
+    db.exec("CREATE TABLE IF NOT EXISTS meta(key TEXT PRIMARY KEY,value TEXT NOT NULL)");
+    const prior = db.prepare("SELECT value FROM meta WHERE key='schema'").get()?.value;
+    if ((prior && !['history-index-v1', 'history-index-v2-pointers', version].includes(prior)) || (!prior && db.prepare("SELECT 1 FROM sqlite_schema WHERE name IN ('records','chunks','vectors','passages')").get()))
+        throw new Error('Unknown history storage version; existing data was not reset');
+    db.transaction(() => {
+        db.exec(`
+      CREATE TABLE IF NOT EXISTS records(ref TEXT PRIMARY KEY,json TEXT NOT NULL,session_id TEXT,sync_id INTEGER,at TEXT,group_id TEXT NOT NULL,position INTEGER NOT NULL);
+      CREATE INDEX IF NOT EXISTS records_group ON records(group_id,at,position);
+      CREATE TABLE IF NOT EXISTS passages(id INTEGER PRIMARY KEY AUTOINCREMENT,hash TEXT NOT NULL UNIQUE,body TEXT,embedded INTEGER NOT NULL DEFAULT 0);
+      CREATE TABLE IF NOT EXISTS chunk_links(id INTEGER PRIMARY KEY AUTOINCREMENT,ref TEXT NOT NULL REFERENCES records(ref) ON DELETE CASCADE,offset INTEGER NOT NULL,passage_id INTEGER NOT NULL REFERENCES passages(id));
+      CREATE INDEX IF NOT EXISTS links_ref ON chunk_links(ref);
+      CREATE INDEX IF NOT EXISTS links_passage ON chunk_links(passage_id);
+      CREATE VIRTUAL TABLE IF NOT EXISTS passage_vectors USING vec0(embedding float[384] distance_metric=cosine);
+    `);
+        if (prior === 'history-index-v1') {
+            const sequence = db.prepare("SELECT seq FROM sqlite_sequence WHERE name='chunks'").get()?.seq || 0;
+            const insert = db.prepare('INSERT OR IGNORE INTO passages(hash,body) VALUES(?,?)');
+            const id = db.prepare('SELECT id,body FROM passages WHERE hash=?');
+            const link = db.prepare('INSERT INTO chunk_links(id,ref,offset,passage_id) VALUES(?,?,?,?)');
+            for (const row of db.prepare('SELECT * FROM chunks ORDER BY id').all()) {
+                insert.run(row.hash, row.body);
+                const passage = id.get(row.hash);
+                if (passage.body !== row.body)
+                    throw new Error('Conflicting passage hash');
+                link.run(row.id, row.ref, row.offset, passage.id);
+            }
+            if (!db.prepare("UPDATE sqlite_sequence SET seq=MAX(seq,?) WHERE name='chunk_links'").run(sequence).changes && sequence)
+                db.prepare('INSERT INTO sqlite_sequence(name,seq) VALUES(?,?)').run('chunk_links', sequence);
+            const cache = db.prepare('SELECT embedding FROM embedding_cache WHERE hash=?');
+            const vector = db.prepare('SELECT embedding FROM vectors WHERE rowid=?');
+            const save = db.prepare('INSERT INTO passage_vectors(rowid,embedding) VALUES(?,?)');
+            // Cache-only rows are retained too; ordinary admission refresh may later
+            // prune genuinely unreferenced data, just as before this migration.
+            for (const row of db.prepare('SELECT hash FROM embedding_cache').all())
+                insert.run(row.hash, null);
+            for (const passage of db.prepare('SELECT id,hash FROM passages ORDER BY id').all()) {
+                let bytes = cache.get(passage.hash)?.embedding;
+                for (const row of db.prepare('SELECT id FROM chunks WHERE hash=? AND embedded=1').all(passage.hash)) {
+                    const saved = vector.get(BigInt(row.id))?.embedding;
+                    if (!saved || (bytes && !saved.equals(bytes)))
+                        throw new Error('Existing embeddings disagree; migration refused');
+                    bytes ||= saved;
+                }
+                if (!bytes)
+                    continue;
+                if (bytes.length !== 1536 || [...new Float32Array(Uint8Array.from(bytes).buffer)].some(value => !Number.isFinite(value)))
+                    throw new Error('Invalid retained embedding');
+                save.run(BigInt(passage.id), bytes);
+                db.prepare('UPDATE passages SET embedded=1 WHERE id=?').run(passage.id);
+            }
+            // Preserve the external-content FTS index and occurrence IDs, including
+            // its document frequencies. Only its backing table becomes a join view.
+            db.exec('DROP TRIGGER IF EXISTS chunks_insert; DROP TRIGGER IF EXISTS chunks_delete; DROP TABLE chunks; DROP TABLE vectors; DROP TABLE embedding_cache');
+            if (!db.prepare("SELECT 1 FROM meta WHERE key='covered-tails-removed'").get()) {
+                const remove = db.prepare('DELETE FROM chunk_links WHERE id=?');
+                for (const row of db.prepare(`SELECT c.id,c.offset,r.json FROM chunk_links c JOIN records r ON r.ref=c.ref
+          WHERE c.offset>0 AND NOT EXISTS(SELECT 1 FROM chunk_links n WHERE n.ref=c.ref AND n.offset>c.offset)
+          AND EXISTS(SELECT 1 FROM chunk_links p WHERE p.ref=c.ref AND p.offset=c.offset-700)`).all()) {
+                    const text = JSON.parse(row.json).text;
+                    if (typeof text === 'string' && row.offset + 100 >= text.length) {
+                        // External-content FTS needs an explicit delete before its link is removed.
+                        const body = db.prepare('SELECT body FROM passages p JOIN chunk_links c ON p.id=c.passage_id WHERE c.id=?').get(row.id).body;
+                        db.prepare("INSERT INTO words(words,rowid,body) VALUES('delete',?,?)").run(row.id, body);
+                        remove.run(row.id);
+                    }
+                }
+            }
+            db.exec("UPDATE records SET json=json_remove(json,'$.text')");
+        }
+        if (db.pragma('table_info(passages)').some(column => column.name === 'body')) {
+            if (db.prepare('SELECT 1 FROM chunk_links c JOIN passages p ON p.id=c.passage_id WHERE p.body IS NULL LIMIT 1').get())
+                throw new Error('A stored search passage is missing; conversion refused');
+            // FTS retains token postings/positions, not original passage strings.
+            // Re-tokenize existing inputs only; vector bytes and IDs do not change.
+            db.exec(`CREATE VIRTUAL TABLE words_source USING fts5(body,content='',contentless_delete=1);
+        INSERT INTO words_source(rowid,body) SELECT c.id,p.body FROM chunk_links c JOIN passages p ON p.id=c.passage_id;
+        DROP TRIGGER IF EXISTS links_insert; DROP TRIGGER IF EXISTS links_delete;
+        DROP VIEW IF EXISTS chunks; DROP TABLE IF EXISTS words;
+        ALTER TABLE words_source RENAME TO words;
+        ALTER TABLE passages DROP COLUMN body;`);
+        }
+        db.exec(`
+      CREATE VIEW IF NOT EXISTS chunks AS SELECT c.id,c.ref,c.offset,p.hash,p.embedded FROM chunk_links c JOIN passages p ON p.id=c.passage_id;
+      CREATE VIEW IF NOT EXISTS embedding_cache AS SELECT p.hash,v.embedding FROM passages p JOIN passage_vectors v ON v.rowid=p.id;
+      CREATE VIRTUAL TABLE IF NOT EXISTS words USING fts5(body,content='',contentless_delete=1);
+      CREATE TRIGGER IF NOT EXISTS links_delete AFTER DELETE ON chunk_links BEGIN DELETE FROM words WHERE rowid=old.id; END;
+      CREATE TRIGGER IF NOT EXISTS passage_delete AFTER DELETE ON passages BEGIN DELETE FROM passage_vectors WHERE rowid=old.id; END;
+    `);
+        const oldModel = db.prepare("SELECT value FROM meta WHERE key='model'").get()?.value;
+        if (oldModel && oldModel !== fingerprint) {
+            // A real fingerprint change invalidates derived passages, never canonical records.
+            db.exec('DELETE FROM records; DELETE FROM passages');
+        }
+        const metadata = db.prepare('INSERT INTO meta(key,value) VALUES(?,?) ON CONFLICT(key) DO UPDATE SET value=excluded.value WHERE meta.value!=excluded.value');
+        metadata.run('schema', version);
+        metadata.run('model', fingerprint);
+        db.prepare("INSERT OR IGNORE INTO meta VALUES('covered-tails-removed','1')").run();
+    })();
+}
+//# sourceMappingURL=storage.js.map

package/dist/memory/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/memory/storage.ts"],"names":[],"mappings":";;AAIA,gDAgGC;AAlGD;0EAC0E;AAC1E,SAAgB,kBAAkB,CAAC,EAAqB,EAAE,WAAmB;IAC3E,MAAM,OAAO,GAAG,8BAA8B,CAAC;IAC/C,IAAI,EAAE,CAAC,OAAO,CAAC,gEAAgE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;QACvF,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;QAC7D,uEAAuE;QACvE,2EAA2E;QAC3E,IAAK,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAmC,EAAE,KAAK,KAAK,OAAO;eACrE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAmC,EAAE,KAAK,KAAK,WAAW;eACzE,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAmC,EAAE,KAAK,KAAK,GAAG;YAAE,OAAO;IAClG,CAAC;IACD,EAAE,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;IACrF,MAAM,KAAK,GAAI,EAAE,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC,GAAG,EAAU,EAAE,KAAK,CAAC;IAC5F,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,kBAAkB,EAAE,2BAA2B,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,qFAAqF,CAAC,CAAC,GAAG,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IACnS,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QAClB,EAAE,CAAC,IAAI,CAAC;;;;;;;;KAQP,CAAC,CAAC;QACH,IAAI,KAAK,KAAK,kBAAkB,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAI,EAAE,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC,GAAG,EAAU,EAAE,GAAG,IAAI,CAAC,CAAC;YAC5G,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,uDAAuD,CAAC,CAAC;YACnF,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;YACnE,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,mEAAmE,CAAC,CAAC;YAC7F,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,EAAW,EAAE,CAAC;gBAChF,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBAAC,MAAM,OAAO,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAQ,CAAC;gBACxE,IAAI,OAAO,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;gBAC3E,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oEAAoE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,OAAO,IAAI,QAAQ;gBAAE,EAAE,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;YACtN,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC;YAC/E,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC;YACzE,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC;YACpF,yEAAyE;YACzE,oEAAoE;YACpE,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,EAAW;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC5G,KAAK,MAAM,OAAO,IAAI,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,EAAW,EAAE,CAAC;gBAC5F,IAAI,KAAK,GAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAS,EAAE,SAA+B,CAAC;gBAC9E,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAU,EAAE,CAAC;oBAC7G,MAAM,KAAK,GAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAS,EAAE,SAA+B,CAAC;oBACnF,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;oBAClH,KAAK,KAAK,KAAK,CAAC;gBAClB,CAAC;gBACD,IAAI,CAAC,KAAK;oBAAE,SAAS;gBACrB,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBACxK,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;gBAAC,EAAE,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC/G,CAAC;YACD,wEAAwE;YACxE,wEAAwE;YACxE,EAAE,CAAC,IAAI,CAAC,+IAA+I,CAAC,CAAC;YACzJ,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC9E,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;gBAChE,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,OAAO,CAAC;;8FAEyD,CAAC,CAAC,GAAG,EAAW,EAAE,CAAC;oBACvG,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;oBACvC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;wBAChE,4EAA4E;wBAC5E,MAAM,IAAI,GAAI,EAAE,CAAC,OAAO,CAAC,kFAAkF,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAS,CAAC,IAAI,CAAC;wBACtI,EAAE,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;wBAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC/G,CAAC;gBACH,CAAC;YACH,CAAC;YACD,EAAE,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QAChE,CAAC;QACD,IAAK,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;YACrG,IAAI,EAAE,CAAC,OAAO,CAAC,+FAA+F,CAAC,CAAC,GAAG,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YACjM,sEAAsE;YACtE,wEAAwE;YACxE,EAAE,CAAC,IAAI,CAAC;;;;;+CAKiC,CAAC,CAAC;QAC7C,CAAC;QACD,EAAE,CAAC,IAAI,CAAC;;;;;;KAMP,CAAC,CAAC;QACH,MAAM,QAAQ,GAAI,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,EAAU,EAAE,KAAK,CAAC;QAC9F,IAAI,QAAQ,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YACzC,mFAAmF;YACnF,EAAE,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,QAAQ,GAAG,EAAE,CAAC,OAAO,CAAC,8HAA8H,CAAC,CAAC;QAC5J,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACpE,EAAE,CAAC,OAAO,CAAC,gEAAgE,CAAC,CAAC,GAAG,EAAE,CAAC;IACrF,CAAC,CAAC,EAAE,CAAC;AACP,CAAC"}

package/dist/memory/types.d.ts

@@ -0,0 +1,89 @@
+export interface HistoryRecord {
+    ref: string;
+    kind: 'session' | 'snapshot' | 'discussion' | 'decisions' | 'carry_forward';
+    session_id: string | null;
+    sync_id: number | null;
+    origin_ref: string | null;
+    title: string;
+    workspace: string;
+    role: string;
+    at: string | null;
+    qualification: string;
+    text: string;
+    /** Comparable only within one original source session. */
+    sequence?: number;
+}
+export interface HistoryQuery {
+    question: string;
+    session_id?: string;
+    session_ids?: string[];
+    kind?: 'sources' | 'conversation';
+    recent?: boolean;
+    /** Bounded status follow-ups; intended for the larger text-answer packet. */
+    reconcile?: boolean;
+    topics?: string[];
+    sync_id?: number;
+    before?: string;
+}
+export interface HistoryResults {
+    mode: 'hybrid';
+    results: (HistoryRecord & {
+        offset: number;
+        score: number;
+        lead?: string;
+    })[];
+    limitations: string;
+    reconciliation?: {
+        checked_narratives: number;
+        omitted_narratives: number;
+        omitted_threads: number;
+        threads: {
+            earlier_ref: string;
+            later_refs: string[];
+            matched_terms: string[];
+            other_candidates: number;
+        }[];
+        qualification: string;
+    };
+}
+export interface HistoryPage {
+    record: HistoryRecord;
+    offset: number;
+    total: number;
+    neighbors: HistoryRecord[];
+}
+export interface HistoryUpdate {
+    stage: 'scanning' | 'downloading' | 'loading' | 'indexing' | 'searching' | 'reading';
+    completed: number;
+    total: number;
+    reused: number;
+    parallelism?: {
+        workers: number;
+        threads: number;
+    };
+    remaining_seconds: number | null;
+    downloaded_bytes: number;
+    download_total_bytes: number;
+}
+export interface HistoryProgress {
+    active: boolean;
+    background?: boolean;
+    queued: number;
+    elapsed_ms: number;
+    updated_at: number | null;
+    work: HistoryUpdate | null;
+}
+export type ReportHistory = (update: HistoryUpdate) => void;
+export declare const historyUpdate: (stage: HistoryUpdate["stage"], fields?: Partial<Omit<HistoryUpdate, "stage">>) => HistoryUpdate;
+export interface Embedder {
+    readonly fingerprint: string;
+    ready(): boolean;
+    setup(report?: ReportHistory, allowDownload?: boolean): Promise<void>;
+    embed(text: string, query: boolean): Promise<Float32Array>;
+    embedMany?(texts: string[], parallel?: boolean): Promise<Float32Array[]>;
+    readonly parallelism?: {
+        workers: number;
+        threads: number;
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/memory/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/memory/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,YAAY,GAAG,WAAW,GAAG,eAAe,CAAC;IAC5E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AACD,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,IAAI,CAAC,EAAE,SAAS,GAAG,cAAc,CAAC;IAClC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AACD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,EAAE,CAAC,aAAa,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IAC9E,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE;QACf,kBAAkB,EAAE,MAAM,CAAC;QAC3B,kBAAkB,EAAE,MAAM,CAAC;QAC3B,eAAe,EAAE,MAAM,CAAC;QACxB,OAAO,EAAE;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,EAAE,CAAC;YAAC,aAAa,EAAE,MAAM,EAAE,CAAC;YAAC,gBAAgB,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QAC5G,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;CACH;AACD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,aAAa,EAAE,CAAC;CAC5B;AACD,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,UAAU,GAAG,aAAa,GAAG,SAAS,GAAG,UAAU,GAAG,WAAW,GAAG,SAAS,CAAC;IACrF,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AACD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,EAAE,aAAa,GAAG,IAAI,CAAC;CAC5B;AACD,MAAM,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;AAC5D,eAAO,MAAM,aAAa,GAAI,OAAO,aAAa,CAAC,OAAO,CAAC,EAAE,SAAQ,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAM,KAAG,aAEhH,CAAC;AACH,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,KAAK,IAAI,OAAO,CAAC;IACjB,KAAK,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,aAAa,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC3D,SAAS,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IACzE,QAAQ,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7D"}

package/dist/memory/types.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.historyUpdate = void 0;
+const historyUpdate = (stage, fields = {}) => ({
+    stage, completed: 0, total: 0, reused: 0, remaining_seconds: null, downloaded_bytes: 0, download_total_bytes: 0, ...fields,
+});
+exports.historyUpdate = historyUpdate;
+//# sourceMappingURL=types.js.map

package/dist/memory/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/memory/types.ts"],"names":[],"mappings":";;;AAgEO,MAAM,aAAa,GAAG,CAAC,KAA6B,EAAE,SAAgD,EAAE,EAAiB,EAAE,CAAC,CAAC;IAClI,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC,EAAE,GAAG,MAAM;CAC3H,CAAC,CAAC;AAFU,QAAA,aAAa,iBAEvB"}

package/dist/memory/worker.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=worker.d.ts.map

package/dist/memory/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../src/memory/worker.ts"],"names":[],"mappings":""}

package/dist/memory/worker.js

@@ -0,0 +1,84 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const better_sqlite3_1 = __importDefault(require("better-sqlite3"));
+const index_1 = require("./index");
+const embedding_pool_1 = require("./embedding-pool");
+const types_1 = require("./types");
+const registry_1 = require("../sources/registry");
+// A private IPC child, not an HTTP service or tool runner. Native SQLite/vector
+// work and embedding WASM cannot block the dashboard or audio event loop.
+process.umask(0o077);
+const directory = process.argv[2];
+if (!process.send || !directory || !path_1.default.isAbsolute(directory) || !process.argv[3])
+    process.exit(1);
+const roots = (0, registry_1.sourceRoots)(JSON.parse(process.argv[3]));
+const folder = path_1.default.join(directory, 'memory');
+fs_1.default.mkdirSync(folder, { recursive: true, mode: 0o700 });
+const source = new better_sqlite3_1.default(path_1.default.join(directory, 'draken.db'), { readonly: true, fileMustExist: true });
+source.pragma('query_only = ON');
+source.pragma('busy_timeout = 5000');
+const file = path_1.default.join(folder, 'index.sqlite'), db = new better_sqlite3_1.default(file);
+fs_1.default.chmodSync(file, 0o600);
+const model = new embedding_pool_1.EmbeddingPool(path_1.default.join(folder, 'model'));
+const index = new index_1.HistoryIndex(db, source, model, roots);
+let busy = false;
+process.on('message', async (message) => {
+    if (busy || !message || !Number.isSafeInteger(message.id))
+        return;
+    busy = true;
+    try {
+        let lastSent = 0, stage = '';
+        const report = progress => {
+            const now = Date.now();
+            if (progress.stage !== stage || now - lastSent >= 250 || (progress.total > 0 && progress.completed === progress.total)) {
+                stage = progress.stage;
+                lastSent = now;
+                process.send?.({ id: message.id, progress });
+            }
+        };
+        let value;
+        if (message.method === 'prepare') {
+            await index.prepare({ before: message.before }, report, true);
+            value = null;
+        }
+        else if (message.method === 'search')
+            value = await index.search(message.query, report);
+        else if (message.method === 'search-prepared')
+            value = await index.search(message.query, report, true);
+        else if (message.method === 'read' || message.method === 'read-prepared') {
+            report((0, types_1.historyUpdate)('reading'));
+            value = index.read(message.ref, message.offset, message.method === 'read-prepared' ? message.before : undefined);
+        }
+        else
+            throw new Error('Unknown history operation');
+        process.send?.({ id: message.id, value });
+    }
+    catch {
+        // Never emit private source text, a model input, filesystem error or rejected
+        // request diagnostics. The parent provides action-specific recovery wording.
+        process.send?.({ id: message.id, error: true });
+    }
+    finally {
+        busy = false;
+    }
+});
+async function close() {
+    // Let SQLite finish its normal checkpoint on orderly retirement. Abrupt exit
+    // still leaves committed WAL work recoverable; no VACUUM or history pruning.
+    try {
+        await model.close();
+        db.close();
+        source.close();
+    }
+    finally {
+        process.exit(0);
+    }
+}
+process.once('SIGTERM', close);
+process.once('disconnect', close);
+//# sourceMappingURL=worker.js.map

package/dist/memory/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/memory/worker.ts"],"names":[],"mappings":";;;;;AAAA,4CAAoB;AACpB,gDAAwB;AACxB,oEAAsC;AACtC,mCAAuC;AACvC,qDAAiD;AACjD,mCAA4D;AAC5D,kDAAkD;AAElD,gFAAgF;AAChF,0EAA0E;AAC1E,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACrB,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,cAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpG,MAAM,KAAK,GAAG,IAAA,sBAAW,EAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvD,MAAM,MAAM,GAAG,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC9C,YAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACvD,MAAM,MAAM,GAAG,IAAI,wBAAQ,CAAC,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;AACxG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;AACvE,MAAM,IAAI,GAAG,cAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,EAAE,GAAG,IAAI,wBAAQ,CAAC,IAAI,CAAC,CAAC;AACxE,YAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1B,MAAM,KAAK,GAAG,IAAI,8BAAa,CAAC,cAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAC5D,MAAM,KAAK,GAAG,IAAI,oBAAY,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACzD,IAAI,IAAI,GAAG,KAAK,CAAC;AACjB,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAY,EAAE,EAAE;IAC3C,IAAI,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QAAE,OAAO;IAClE,IAAI,GAAG,IAAI,CAAC;IACZ,IAAI,CAAC;QACH,IAAI,QAAQ,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAkB,QAAQ,CAAC,EAAE;YACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,IAAI,GAAG,GAAG,QAAQ,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvH,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;gBAAC,QAAQ,GAAG,GAAG,CAAC;gBACvC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC,CAAC;QACF,IAAI,KAAK,CAAC;QACV,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC;QAAC,CAAC;aAC7G,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;YAAE,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;aACnF,IAAI,OAAO,CAAC,MAAM,KAAK,iBAAiB;YAAE,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;aAClG,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;YAAC,MAAM,CAAC,IAAA,qBAAa,EAAC,SAAS,CAAC,CAAC,CAAC;YAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;;YAC5N,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;QAC9E,6EAA6E;QAC7E,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;YAAS,CAAC;QAAC,IAAI,GAAG,KAAK,CAAC;IAAC,CAAC;AAC7B,CAAC,CAAC,CAAC;AACH,KAAK,UAAU,KAAK;IAClB,6EAA6E;IAC7E,6EAA6E;IAC7E,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AACvF,CAAC;AACD,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AAC/B,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC"}

package/dist/npm-cli.d.ts

@@ -0,0 +1,4 @@
+/** Run npm's JS entry under the current Node, never a Windows command shim or
+ * a shell command. Paths with spaces/metacharacters remain individual argv. */
+export declare function npmCli(env?: NodeJS.ProcessEnv, node?: string): string;
+//# sourceMappingURL=npm-cli.d.ts.map

package/dist/npm-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-cli.d.ts","sourceRoot":"","sources":["../src/npm-cli.ts"],"names":[],"mappings":"AAGA;+EAC+E;AAC/E,wBAAgB,MAAM,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,IAAI,SAAmB,GAAG,MAAM,CAkB5F"}

package/dist/npm-cli.js

@@ -0,0 +1,36 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.npmCli = npmCli;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+/** Run npm's JS entry under the current Node, never a Windows command shim or
+ * a shell command. Paths with spaces/metacharacters remain individual argv. */
+function npmCli(env = process.env, node = process.execPath) {
+    const candidates = [env.npm_execpath,
+        path_1.default.join(path_1.default.dirname(node), 'node_modules/npm/bin/npm-cli.js'),
+        path_1.default.resolve(path_1.default.dirname(node), '../lib/node_modules/npm/bin/npm-cli.js')];
+    for (const directory of (env.PATH || '').split(path_1.default.delimiter).filter(Boolean)) {
+        for (const name of ['npm', 'npm.cmd']) {
+            try {
+                const file = fs_1.default.realpathSync(path_1.default.join(directory, name));
+                candidates.push(file, path_1.default.join(path_1.default.dirname(file), 'node_modules/npm/bin/npm-cli.js'), path_1.default.join(directory, 'node_modules/npm/bin/npm-cli.js'));
+            }
+            catch { /* Try the other known npm installation layouts. */ }
+        }
+    }
+    const found = candidates.find(file => {
+        try {
+            return file && path_1.default.basename(file) === 'npm-cli.js' && fs_1.default.statSync(file).isFile();
+        }
+        catch {
+            return false;
+        }
+    });
+    if (!found)
+        throw new Error('npm was not found. Install Node.js 22.19+ with npm, then run setup again.');
+    return found;
+}
+//# sourceMappingURL=npm-cli.js.map

package/dist/npm-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-cli.js","sourceRoot":"","sources":["../src/npm-cli.ts"],"names":[],"mappings":";;;;;AAKA,wBAkBC;AAvBD,4CAAoB;AACpB,gDAAwB;AAExB;+EAC+E;AAC/E,SAAgB,MAAM,CAAC,MAAyB,OAAO,CAAC,GAAG,EAAE,IAAI,GAAG,OAAO,CAAC,QAAQ;IAClF,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,YAAY;QAClC,cAAI,CAAC,IAAI,CAAC,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,iCAAiC,CAAC;QAChE,cAAI,CAAC,OAAO,CAAC,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,wCAAwC,CAAC,CAAC,CAAC;IAC9E,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,cAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/E,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,YAAE,CAAC,YAAY,CAAC,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;gBACzD,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,cAAI,CAAC,IAAI,CAAC,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,iCAAiC,CAAC,EACpF,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iCAAiC,CAAC,CAAC,CAAC;YAC7D,CAAC;YAAC,MAAM,CAAC,CAAC,mDAAmD,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACnC,IAAI,CAAC;YAAC,OAAO,IAAI,IAAI,cAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,YAAY,IAAI,YAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IACpH,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IACzG,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/pi/runtime.d.ts

@@ -0,0 +1,34 @@
+export declare const PI_VERSION = "1.5.0";
+export declare const PI_PACKAGE = "@earendil-works/pi-coding-agent";
+export declare const isolatedFlags: string[];
+import type { PiSetupStatus } from '../types';
+export declare function piPaths(): {
+    root: string;
+    agent: string;
+    home: string;
+    work: string;
+    selected: string;
+};
+export declare function managedEnvironment(): NodeJS.ProcessEnv;
+/** Refuse symlinked private subdirectories, without creating anything during GET/status. */
+export declare function privateDirectory(directory: string, create?: boolean): void;
+export declare function executable(name: string): string | undefined;
+export declare function selectedPi(): {
+    source: "managed";
+    binary: string;
+    prefix: string[];
+    env: NodeJS.ProcessEnv;
+    agent: string;
+} | {
+    source: "external";
+    binary: string;
+    prefix: string[];
+    env: {
+        [key: string]: string | undefined;
+        TZ?: string | undefined;
+    };
+    agent: string;
+};
+export declare function stopPiChecks(): Promise<void>;
+export declare function piSetupStatus(fresh?: boolean): Promise<PiSetupStatus>;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/pi/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/pi/runtime.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,UAAU,UAAU,CAAC;AAClC,eAAO,MAAM,UAAU,oCAAoC,CAAC;AAC5D,eAAO,MAAM,aAAa,UAA0K,CAAC;AACrM,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,wBAAgB,OAAO;;;;;;EAGtB;AAKD,wBAAgB,kBAAkB,IAAI,MAAM,CAAC,UAAU,CAKtD;AAED,4FAA4F;AAC5F,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,UAAQ,GAAG,IAAI,CAUxE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAK3D;AAED,wBAAgB,UAAU;;;;;;;;;;;;;;;EA0BzB;AAID,wBAAsB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAMlD;AAmDD,wBAAgB,aAAa,CAAC,KAAK,UAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,CAOnE"}

package/dist/pi/runtime.js

@@ -0,0 +1,210 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isolatedFlags = exports.PI_PACKAGE = exports.PI_VERSION = void 0;
+exports.piPaths = piPaths;
+exports.managedEnvironment = managedEnvironment;
+exports.privateDirectory = privateDirectory;
+exports.executable = executable;
+exports.selectedPi = selectedPi;
+exports.stopPiChecks = stopPiChecks;
+exports.piSetupStatus = piSetupStatus;
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const child_process_1 = require("child_process");
+const schema_1 = require("../db/schema");
+const store_1 = require("../sync/store");
+exports.PI_VERSION = '1.5.0';
+exports.PI_PACKAGE = '@earendil-works/pi-coding-agent';
+exports.isolatedFlags = ['--no-session', '--no-tools', '--no-extensions', '--no-mcp', '--no-skills', '--no-prompt-templates', '--no-themes', '--no-context-files', '--no-approve', '--offline'];
+function piPaths() {
+    const root = path_1.default.join((0, schema_1.getDataDir)(), 'pi');
+    return { root, agent: path_1.default.join(root, 'agent'), home: path_1.default.join(root, 'home'), work: path_1.default.join(root, 'workspace'), selected: path_1.default.join(root, 'selected.json') };
+}
+// Managed children must not inherit unrelated provider keys, pi ownership, custom
+// model URLs, preload hooks or the user's global pi configuration. A private HOME
+// also prevents ambient cloud-credential lookup. This is not an OS sandbox.
+function managedEnvironment() {
+    const paths = piPaths(), env = {};
+    for (const key of ['PATH', 'PATHEXT', 'SYSTEMROOT', 'WINDIR', 'COMSPEC', 'LANG', 'LC_ALL', 'TERM', 'COLORTERM', 'TMPDIR', 'TMP', 'TEMP'])
+        if (process.env[key])
+            env[key] = process.env[key];
+    return { ...env, HOME: paths.home, USERPROFILE: paths.home, APPDATA: path_1.default.join(paths.home, 'AppData', 'Roaming'), LOCALAPPDATA: path_1.default.join(paths.home, 'AppData', 'Local'),
+        PI_CODING_AGENT_DIR: paths.agent, PI_OFFLINE: '1', PI_SKIP_VERSION_CHECK: '1', PI_TELEMETRY: '0' };
+}
+/** Refuse symlinked private subdirectories, without creating anything during GET/status. */
+function privateDirectory(directory, create = false) {
+    const base = (0, schema_1.getDataDir)(), relative = path_1.default.relative(base, directory);
+    if (!relative || relative.startsWith('..') || path_1.default.isAbsolute(relative))
+        throw new Error('Invalid private pi directory');
+    if (create)
+        fs_1.default.mkdirSync(base, { recursive: true, mode: 0o700 });
+    let current = base;
+    for (const part of relative.split(path_1.default.sep)) {
+        current = path_1.default.join(current, part);
+        try {
+            const stat = fs_1.default.lstatSync(current);
+            if (stat.isSymbolicLink() || !stat.isDirectory())
+                throw new Error('Private pi directories must not be symlinks or files');
+            if (create)
+                fs_1.default.chmodSync(current, 0o700);
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+            if (create)
+                fs_1.default.mkdirSync(current, { mode: 0o700 });
+            else
+                return;
+        }
+    }
+}
+function executable(name) {
+    const candidates = name.includes('/') || name.includes('\\') ? [path_1.default.resolve(name)]
+        : (process.env.PATH || '').split(path_1.default.delimiter).filter(Boolean).flatMap(dir => process.platform === 'win32'
+            ? ['', '.exe', '.cmd', '.bat'].map(ext => path_1.default.join(dir, name + ext)) : [path_1.default.join(dir, name)]);
+    return candidates.find(file => { try {
+        fs_1.default.accessSync(file, process.platform === 'win32' ? fs_1.default.constants.F_OK : fs_1.default.constants.X_OK);
+        return fs_1.default.statSync(file).isFile();
+    }
+    catch {
+        return false;
+    } });
+}
+function selectedPi() {
+    const paths = piPaths();
+    if (!process.env.DRAKEN_PI_BIN && fs_1.default.existsSync(paths.selected)) {
+        privateDirectory(paths.root);
+        privateDirectory(paths.agent);
+        privateDirectory(paths.home);
+        privateDirectory(paths.work);
+        for (const name of ['auth.json', 'settings.json', 'models.json', 'models-store.json', 'trust.json']) {
+            try {
+                if (fs_1.default.lstatSync(path_1.default.join(paths.agent, name)).isSymbolicLink())
+                    throw new Error('Private pi configuration files must not be symlinks');
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    throw error;
+            }
+        }
+        if (fs_1.default.lstatSync(paths.selected).isSymbolicLink() || fs_1.default.statSync(paths.selected).size > 1024)
+            throw new Error('Invalid private pi selection; run draken setup to repair it.');
+        const selected = JSON.parse(fs_1.default.readFileSync(paths.selected, 'utf8'));
+        if (selected.version !== 1 || typeof selected.runtime !== 'string' || !/^\d+\.\d+\.\d+-[a-f0-9]{16}$/.test(selected.runtime))
+            throw new Error('Invalid private pi selection; run draken setup to repair it.');
+        const runtime = path_1.default.join(paths.root, 'runtime', selected.runtime);
+        privateDirectory(runtime);
+        const cli = path_1.default.join(runtime, 'node_modules', exports.PI_PACKAGE, 'dist', 'cli.js');
+        if (!fs_1.default.existsSync(cli))
+            throw new Error('Private pi is incomplete. Run draken setup; credentials will be kept.');
+        const relative = path_1.default.relative(fs_1.default.realpathSync(runtime), fs_1.default.realpathSync(cli));
+        if (relative.startsWith('..') || path_1.default.isAbsolute(relative))
+            throw new Error('Private pi executable is outside its runtime');
+        return { source: 'managed', binary: process.execPath, prefix: [cli], env: managedEnvironment(), agent: paths.agent };
+    }
+    const name = process.env.DRAKEN_PI_BIN || 'pi', binary = executable(name) || name;
+    const env = { ...process.env };
+    delete env.PI_SESSION_ID;
+    delete env.PI_SESSION_FILE;
+    // npm's Windows command shims cannot be spawned without a shell. Resolve only
+    // the known pi package next to the shim; never evaluate .cmd text.
+    const candidate = /\.cmd$/i.test(binary) ? path_1.default.join(path_1.default.dirname(binary), 'node_modules', exports.PI_PACKAGE, 'dist', 'cli.js') : '';
+    return { source: 'external', binary: candidate && fs_1.default.existsSync(candidate) ? process.execPath : binary,
+        prefix: candidate && fs_1.default.existsSync(candidate) ? [candidate] : [], env,
+        agent: process.env.PI_CODING_AGENT_DIR || path_1.default.join(os_1.default.homedir(), '.pi', 'agent') };
+}
+const checks = new Set();
+let checksStopping = false;
+async function stopPiChecks() {
+    checksStopping = true;
+    await Promise.all([...checks].map(child => new Promise(resolve => {
+        const timer = setTimeout(() => child.kill('SIGKILL'), 1000);
+        timer.unref();
+        child.once('close', () => { clearTimeout(timer); resolve(); });
+        child.kill('SIGTERM');
+    })));
+}
+/** Bounded protocol-only subprocess. Never return raw stderr or credential output. */
+async function inspect(args) {
+    if (checksStopping)
+        throw new Error('Pi status checks are stopping');
+    const pi = selectedPi();
+    return new Promise((resolve, reject) => {
+        const child = (0, child_process_1.spawn)(pi.binary, [...pi.prefix, ...args], { env: { ...pi.env, PI_OFFLINE: '1', PI_SKIP_VERSION_CHECK: '1' },
+            cwd: fs_1.default.existsSync((0, schema_1.getDataDir)()) ? (0, schema_1.getDataDir)() : os_1.default.tmpdir(), shell: false, stdio: ['ignore', 'pipe', 'ignore'] });
+        checks.add(child);
+        let text = '', failed = false, kill;
+        const terminate = () => { failed = true; child.kill('SIGTERM'); kill = setTimeout(() => child.kill('SIGKILL'), 1000); kill.unref(); };
+        const timer = setTimeout(terminate, 8000);
+        timer.unref();
+        child.stdout.setEncoding('utf8');
+        child.stdout.on('data', chunk => { if (failed)
+            return; if (Buffer.byteLength(text) + Buffer.byteLength(chunk) > 8192)
+            terminate();
+        else
+            text += chunk; });
+        child.once('error', error => { clearTimeout(timer); if (kill)
+            clearTimeout(kill); reject(error); });
+        child.once('close', code => { checks.delete(child); clearTimeout(timer); if (kill)
+            clearTimeout(kill); if (failed)
+            reject(new Error('Pi status check did not finish safely'));
+        else
+            resolve({ code, text }); });
+    });
+}
+async function diagnose() {
+    let selected;
+    try {
+        selected = selectedPi();
+    }
+    catch {
+        return { source: 'managed', state: 'error', version: null, agent_dir: piPaths().agent, models: [], message: 'Private pi is incomplete or its selection is invalid. Run draken setup to repair it; credentials are retained.' };
+    }
+    const result = { source: selected.source, state: 'missing', version: null, agent_dir: selected.agent, models: [], message: '' };
+    try {
+        const version = await inspect(['--version']), match = /^(\d+)\.(\d+)\.(\d+)\s*$/.exec(version.text.trim());
+        if (version.code !== 0 || !match || Number(match[1]) < 1 || (Number(match[1]) === 1 && Number(match[2]) < 4)) {
+            return { ...result, state: 'incompatible', message: 'Pi 1.4+ is required. Run draken setup for the pinned private runtime, or update your explicit DRAKEN_PI_BIN.' };
+        }
+        result.version = match[0].trim();
+        const models = (0, store_1.defaultModels)();
+        for (const model of [...new Set([models.summary, models.final])]) {
+            const check = await inspect(['auth', 'check', '--model', model, '--json', '--no-refresh']);
+            let state = 'unavailable';
+            try {
+                const value = JSON.parse(check.text);
+                if (check.code === 0 && value.status === 'ready')
+                    state = 'configured';
+                else if (check.code === 1 && value.status === 'not_ready' && value.reason === 'credentials_not_configured')
+                    state = 'needs_login';
+            }
+            catch { /* Unsupported model/status protocol, not known-ready. */ }
+            result.models.push({ model, state });
+        }
+        result.state = result.models.every(model => model.state === 'configured') ? 'configured' : result.models.some(model => model.state === 'unavailable') ? 'error' : 'needs_login';
+        result.message = result.state === 'configured' ? 'Pi credentials are configured. Model access and billing are not verified by this local check.'
+            : result.state === 'needs_login' ? 'Run draken login in a terminal on this server, then use /login in pi. Sign in to the provider used by the configured summary models.'
+                : 'Pi could not resolve the configured models or credentials. Run draken doctor and check model configuration; no provider or model was substituted.';
+    }
+    catch (error) {
+        result.state = error.code === 'ENOENT' ? 'missing' : 'error';
+        result.message = result.state === 'missing' ? 'Summarization needs pi. Run draken setup to install a private copy, then draken login.' : 'Pi status could not be checked. Run draken doctor in a terminal on this server.';
+    }
+    return result;
+}
+let cached;
+function piSetupStatus(fresh = false) {
+    const key = JSON.stringify([(0, schema_1.getDataDir)(), process.env.DRAKEN_PI_BIN, process.env.PATH, process.env.PI_CODING_AGENT_DIR, (0, store_1.defaultModels)()]);
+    if (cached?.key === key && (cached.pending || !fresh && cached.until > Date.now()))
+        return cached.value;
+    const value = diagnose();
+    const entry = { key, until: Date.now() + 30_000, pending: true, value };
+    cached = entry;
+    void value.then(() => { entry.pending = false; }, () => { entry.pending = false; });
+    return value;
+}
+//# sourceMappingURL=runtime.js.map