draken 0.1.6 → 0.3.0

package/dist/db/evidence.js

@@ -0,0 +1,110 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EvidenceReader = exports.recordPointer = void 0;
+exports.encodeEvidence = encodeEvidence;
+const normalize_1 = require("../sync/normalize");
+const jsonl_1 = require("../sync/jsonl");
+const registry_1 = require("../sources/registry");
+const retained_text_1 = require("./retained-text");
+const pointers = new WeakMap();
+const UNAVAILABLE_EVIDENCE = 'Original session evidence is unavailable or changed. Restore the original session file; Draken does not keep a text copy.';
+const recordPointer = (row) => ({ record_offset: row.record_offset, record_bytes: row.record_bytes, record_hash: row.record_hash });
+exports.recordPointer = recordPointer;
+function encodeEvidence(item, pointer) {
+    const { text: _text, unavailable: _unavailable, ...metadata } = item;
+    return JSON.stringify({ ...metadata, source_key: (0, normalize_1.sourceKey)(item), source_pointer: pointer });
+}
+/** Frozen membership, attribution and projection; original bytes stay in pi.
+ * Share one reader per snapshot/request rather than reopening a file per item. */
+class EvidenceReader {
+    db;
+    reader;
+    paths = new Map();
+    constructor(db, root = (0, registry_1.getSourceRoots)(), cache) {
+        this.db = db;
+        this.reader = new jsonl_1.RecordReader(root, cache);
+    }
+    project(item, pointer) {
+        if (pointer.version !== 1 && pointer.version !== 2)
+            throw new Error('Unknown frozen pointer version');
+        const source = pointer.version === 1 ? { agent: 'pi', external_id: item.session_id, parser_version: 1 } : pointer.source;
+        if (pointer.version === 2 && (!(0, registry_1.validIdentity)(source) || (0, registry_1.sessionId)(source) !== item.session_id))
+            throw new Error('Frozen source identity changed');
+        if (item.agent && item.agent !== source.agent)
+            throw new Error('Frozen agent attribution changed');
+        if (!this.paths.has(item.session_id))
+            this.paths.set(item.session_id, this.db.prepare('SELECT path FROM agent_sessions WHERE id=?').get(item.session_id)?.path);
+        const paths = [...new Set([this.paths.get(item.session_id), item.source_path].filter((value) => Boolean(value)))];
+        for (const file of paths) {
+            try {
+                const original = this.reader.read(item.session_id, file, pointer.original, item.entry_id, item.event_key, pointer.normalization, undefined, source);
+                if (original.role !== item.role || original.timestamp !== item.timestamp)
+                    throw new Error('Frozen attribution changed');
+                let text = original.text;
+                if (pointer.edit) {
+                    const edit = this.reader.read(item.session_id, file, pointer.edit, pointer.edit.entry_id, pointer.edit.event_key, pointer.edit.normalization, undefined, source);
+                    if (edit.type !== 'context_edit' || edit.target_id !== item.entry_id || edit.replacement === null)
+                        throw new Error('Invalid frozen edit');
+                    text = edit.replacement;
+                }
+                if (pointer.clip) {
+                    if (pointer.clip.limit !== 2000)
+                        throw new Error('Unknown frozen excerpt limit');
+                    text = (0, normalize_1.cleanText)(text, pointer.clip.limit, pointer.clip.normalization);
+                }
+                if ((0, normalize_1.digest)(text) !== pointer.text_hash)
+                    throw new Error('Frozen projection changed');
+                return text;
+            }
+            catch { /* A recorded old path may still resolve after a file move. */ }
+        }
+        throw new Error(UNAVAILABLE_EVIDENCE);
+    }
+    read(value, tolerateUnavailable = false) {
+        const encoded = typeof value === 'string' ? JSON.parse(value) : value;
+        if (!encoded.source_pointer)
+            return (0, retained_text_1.thawEvidence)(this.db, encoded); // Legacy migration/import reader only.
+        const { source_pointer, source_key, ...metadata } = encoded;
+        let item;
+        try {
+            item = { ...metadata, text: this.project(metadata, source_pointer) };
+        }
+        catch (error) {
+            if (!tolerateUnavailable)
+                throw error;
+            item = { ...metadata, text: '', source_key, unavailable: UNAVAILABLE_EVIDENCE };
+        }
+        pointers.set(item, source_pointer);
+        return item;
+    }
+    freeze(item) {
+        const previous = pointers.get(item);
+        if (previous) {
+            if (this.project(item, previous) !== item.text)
+                throw new Error('Frozen evidence changed');
+            return encodeEvidence(item, previous);
+        }
+        const row = this.db.prepare('SELECT e.*,s.agent,s.external_id FROM agent_entries e JOIN agent_sessions s ON s.id=e.session_id WHERE e.session_id=? AND e.entry_id=?').get(item.session_id, item.entry_id);
+        if (!row || row.event_key !== item.event_key || !row.record_hash)
+            throw new Error('Cannot freeze evidence without its verified source record');
+        const pointer = { version: row.agent === 'pi' ? 1 : 2, ...(row.agent !== 'pi' ? { source: { agent: row.agent, external_id: row.external_id, parser_version: row.parser_version ?? 1 } } : {}), original: (0, exports.recordPointer)(row), normalization: row.normalization ?? 2, text_hash: (0, normalize_1.digest)(item.text) };
+        if (row.effective_id !== null) {
+            const edit = this.db.prepare('SELECT * FROM agent_entries WHERE id=? AND session_id=?').get(row.effective_id, item.session_id);
+            if (!edit || edit.target_id !== item.entry_id || !edit.record_hash)
+                throw new Error('Cannot freeze an unverified context edit');
+            pointer.edit = { ...(0, exports.recordPointer)(edit), entry_id: edit.entry_id, event_key: edit.event_key, normalization: edit.normalization ?? 2 };
+        }
+        try {
+            this.project(item, pointer);
+        }
+        catch {
+            pointer.clip = { limit: 2000, normalization: 2 };
+            this.project(item, pointer);
+        }
+        pointers.set(item, pointer);
+        return encodeEvidence(item, pointer);
+    }
+    close() { this.reader.close(); this.paths.clear(); }
+}
+exports.EvidenceReader = EvidenceReader;
+//# sourceMappingURL=evidence.js.map

package/dist/db/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../src/db/evidence.ts"],"names":[],"mappings":";;;AAoBA,wCAGC;AArBD,iDAA4F;AAC5F,yCAA0F;AAC1F,kDAAoH;AACpH,mDAA+C;AAY/C,MAAM,QAAQ,GAAG,IAAI,OAAO,EAA2B,CAAC;AACxD,MAAM,oBAAoB,GAAG,2HAA2H,CAAC;AAClJ,MAAM,aAAa,GAAG,CAAC,GAAkB,EAAiB,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;AAA5J,QAAA,aAAa,iBAA+I;AACzK,SAAgB,cAAc,CAAC,IAAc,EAAE,OAAsB;IACnE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC;IACrE,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,IAAA,qBAAS,EAAC,IAAI,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED;kFACkF;AAClF,MAAa,cAAc;IAGL;IAFZ,MAAM,CAAe;IACrB,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IACtD,YAAoB,EAAqB,EAAE,OAAkB,IAAA,yBAAc,GAAE,EAAE,KAA0B;QAArF,OAAE,GAAF,EAAE,CAAmB;QAAoE,IAAI,CAAC,MAAM,GAAG,IAAI,oBAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAC3J,OAAO,CAAC,IAAc,EAAE,OAAsB;QAC5C,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACtG,MAAM,MAAM,GAAmB,OAAO,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAO,CAAC;QAC1I,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAA,wBAAa,EAAC,MAAM,CAAC,IAAI,IAAA,oBAAS,EAAC,MAAM,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAClJ,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACnG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAS,EAAE,IAAI,CAAC,CAAC;QACzK,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnI,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;gBACpJ,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBACxH,IAAI,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;gBACzB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;oBACjB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;oBACjK,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;wBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;oBAC1I,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;gBAC1B,CAAC;gBACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;oBACjB,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI;wBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;oBACjF,IAAI,GAAG,IAAA,qBAAS,EAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBACzE,CAAC;gBACD,IAAI,IAAA,kBAAM,EAAC,IAAI,CAAC,KAAK,OAAO,CAAC,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBACrF,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC,CAAC,8DAA8D,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,CAAC,KAAmC,EAAE,mBAAmB,GAAG,KAAK;QACnE,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACtE,IAAI,CAAC,OAAO,CAAC,cAAc;YAAE,OAAO,IAAA,4BAAY,EAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,uCAAuC;QAC3G,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC;QAC5D,IAAI,IAAc,CAAC;QACnB,IAAI,CAAC;YAAC,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,QAAoB,EAAE,cAAc,CAAC,EAAE,CAAC;QAAC,CAAC;QACzF,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,mBAAmB;gBAAE,MAAM,KAAK,CAAC;YACtC,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,oBAAoB,EAAc,CAAC;QAC9F,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAClD,CAAC;IACD,MAAM,CAAC,IAAc;QACnB,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC3F,OAAO,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wIAAwI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAQ,CAAC;QACjN,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/I,MAAM,OAAO,GAAkB,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAA,qBAAa,EAAC,GAAG,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,IAAI,CAAC,EAAE,SAAS,EAAE,IAAA,kBAAM,EAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClT,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,yDAAyD,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAQ,CAAC;YACtI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,WAAW;gBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAChI,OAAO,CAAC,IAAI,GAAG,EAAE,GAAG,IAAA,qBAAa,EAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,CAAC,EAAE,CAAC;QACxI,CAAC;QACD,IAAI,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAAC,CAAC;QACpC,MAAM,CAAC;YAAC,OAAO,CAAC,IAAI,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAAC,CAAC;QACxF,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAAC,OAAO,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC;IACD,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;CACrD;AA9DD,wCA8DC"}

package/dist/db/pointer-migration.d.ts

@@ -0,0 +1,7 @@
+import type Database from 'better-sqlite3';
+export declare function entryTable(name: string, legacy?: boolean): string;
+/** Atomic representation migration. No scans, model calls, review or source-file writes.
+ * Unverifiable historical imports are preserved once, not discarded or guessed.
+ */
+export declare function migratePointers(db: Database.Database): void;
+//# sourceMappingURL=pointer-migration.d.ts.map

package/dist/db/pointer-migration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pointer-migration.d.ts","sourceRoot":"","sources":["../../src/db/pointer-migration.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAK3C,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,UAAO,GAAG,MAAM,CAiB9D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAgE3D"}

package/dist/db/pointer-migration.js

@@ -0,0 +1,117 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.entryTable = entryTable;
+exports.migratePointers = migratePointers;
+const fs_1 = __importDefault(require("fs"));
+const source_files_1 = require("../sync/source-files");
+const normalize_1 = require("../sync/normalize");
+const retained_text_1 = require("./retained-text");
+function entryTable(name, legacy = true) {
+    return `CREATE TABLE IF NOT EXISTS ${name} (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    session_id TEXT NOT NULL REFERENCES agent_sessions(id),
+    entry_id TEXT NOT NULL, parent_id TEXT, timestamp TEXT NOT NULL,
+    type TEXT NOT NULL, role TEXT NOT NULL, event_key TEXT NOT NULL,
+    is_activity INTEGER NOT NULL, active INTEGER NOT NULL DEFAULT 0,
+    present INTEGER NOT NULL DEFAULT 1, target_id TEXT,
+    record_offset INTEGER, record_bytes INTEGER, record_hash TEXT,
+    text_length INTEGER NOT NULL DEFAULT 0, replacement_length INTEGER NOT NULL DEFAULT 0,
+    effective_length INTEGER NOT NULL DEFAULT 0, effective_id INTEGER,
+    normalization INTEGER NOT NULL DEFAULT 2,
+    ${legacy ? `legacy_text_ref TEXT REFERENCES retained_text(key),
+    legacy_replacement_ref TEXT REFERENCES retained_text(key),
+    effective_legacy_ref TEXT REFERENCES retained_text(key),` : ''}
+    UNIQUE(session_id,entry_id)
+  )`;
+}
+/** Atomic representation migration. No scans, model calls, review or source-file writes.
+ * Unverifiable historical imports are preserved once, not discarded or guessed.
+ */
+function migratePointers(db) {
+    const version = db.prepare("SELECT value FROM sync_settings WHERE key='storage_schema'").get()?.value;
+    if (version === 'pointer-v1' || version === 'pointer-v2')
+        return;
+    if (version)
+        throw new Error('Unknown canonical storage version; existing data was not converted');
+    db.transaction(() => {
+        const columns = db.prepare('PRAGMA table_info(agent_entries)').all();
+        if (columns.some(column => column.name === 'text')) {
+            const sequence = db.prepare("SELECT seq FROM sqlite_sequence WHERE name='agent_entries'").get()?.seq || 0;
+            db.exec(entryTable('agent_entries_pointer'));
+            const insert = db.prepare(`INSERT INTO agent_entries_pointer
+        (id,session_id,entry_id,parent_id,timestamp,type,role,event_key,is_activity,active,present,target_id,
+         record_offset,record_bytes,record_hash,text_length,replacement_length,effective_length,effective_id,legacy_text_ref,legacy_replacement_ref,effective_legacy_ref)
+        VALUES (@id,@session_id,@entry_id,@parent_id,@timestamp,@type,@role,@event_key,@is_activity,@active,@present,@target_id,
+         @record_offset,@record_bytes,@record_hash,@text_length,@replacement_length,@effective_length,@effective_id,@legacy_text_ref,@legacy_replacement_ref,@effective_legacy_ref)`);
+            for (const session of db.prepare('SELECT id,path,file_identity,byte_offset,leaf_id FROM agent_sessions').all()) {
+                const originals = db.prepare('SELECT * FROM agent_entries WHERE session_id=? ORDER BY id').all(session.id);
+                const wanted = new Set(originals.map(row => row.entry_id));
+                const found = new Map();
+                let fd;
+                try {
+                    fd = (0, source_files_1.openSessionFile)(session.path, (0, source_files_1.getSessionRoot)(), session.file_identity);
+                    (0, source_files_1.verifySessionHeader)(fd, session.id);
+                    for (const pointer of (0, source_files_1.fileRecords)(fd, Math.min(fs_1.default.fstatSync(fd).size, session.byte_offset))) {
+                        if (!wanted.has(pointer.value?.id))
+                            continue;
+                        const entry = (0, normalize_1.normalizeEntry)(pointer.value);
+                        if (entry)
+                            found.set(entry.entry_id, { record_offset: pointer.record_offset, record_bytes: pointer.record_bytes, record_hash: pointer.record_hash, entry });
+                    }
+                }
+                catch {
+                    found.clear();
+                } // Retain old text when a source cannot be safely verified.
+                finally {
+                    if (fd !== undefined)
+                        fs_1.default.closeSync(fd);
+                }
+                const byId = new Map(originals.filter(row => row.present).map(row => [row.entry_id, row]));
+                const branch = [], visited = new Set(), edits = new Map();
+                let leaf = session.leaf_id;
+                while (leaf && byId.has(leaf) && !visited.has(leaf)) {
+                    visited.add(leaf);
+                    const entry = byId.get(leaf);
+                    branch.push(entry);
+                    leaf = entry.parent_id;
+                }
+                for (const edit of branch.reverse())
+                    if (edit.active && edit.type === 'context_edit' && edit.target_id)
+                        edits.set(edit.target_id, edit);
+                for (const row of originals) {
+                    const edit = row.active ? edits.get(row.entry_id) : undefined;
+                    const effectiveId = edit && (edit.replacement || '') === row.effective_text ? edit.id : null;
+                    const pointer = found.get(row.entry_id);
+                    const verified = pointer && pointer.entry.event_key === row.event_key && pointer.entry.text === row.text && pointer.entry.replacement === row.replacement;
+                    insert.run({ ...row,
+                        record_offset: verified ? pointer.record_offset : null, record_bytes: verified ? pointer.record_bytes : null, record_hash: verified ? pointer.record_hash : null,
+                        text_length: row.text.length, replacement_length: row.replacement?.length || 0, effective_length: row.effective_text.length, effective_id: effectiveId,
+                        legacy_text_ref: !verified && row.text ? (0, retained_text_1.retainText)(db, row.text) : null,
+                        legacy_replacement_ref: !verified && row.replacement !== null ? (0, retained_text_1.retainText)(db, row.replacement) : null,
+                        effective_legacy_ref: !effectiveId && row.effective_text && row.effective_text !== row.text ? (0, retained_text_1.retainText)(db, row.effective_text) : null,
+                    });
+                }
+            }
+            const before = db.prepare('SELECT COUNT(*) n FROM agent_entries').get().n;
+            if (db.prepare('SELECT COUNT(*) n FROM agent_entries_pointer').get().n !== before)
+                throw new Error('Pointer migration did not preserve every session entry');
+            db.exec('DROP TABLE agent_entries; ALTER TABLE agent_entries_pointer RENAME TO agent_entries');
+            if (!db.prepare("UPDATE sqlite_sequence SET seq=MAX(seq,?) WHERE name='agent_entries'").run(sequence).changes && sequence)
+                db.prepare('INSERT INTO sqlite_sequence(name,seq) VALUES(?,?)').run('agent_entries', sequence);
+        }
+        db.exec('CREATE INDEX IF NOT EXISTS agent_entries_pending ON agent_entries(active,is_activity,present); CREATE INDEX IF NOT EXISTS agent_entries_event ON agent_entries(event_key)');
+        const update = db.prepare('UPDATE sync_items SET evidence_json=? WHERE sync_id=? AND event_key=?');
+        for (const row of db.prepare('SELECT sync_id,event_key,evidence_json FROM sync_items').all()) {
+            update.run((0, retained_text_1.freezeEvidence)(db, (0, retained_text_1.thawEvidence)(db, row.evidence_json)), row.sync_id, row.event_key);
+        }
+        for (const row of db.prepare('SELECT id,context_json FROM syncs').all()) {
+            const context = JSON.parse(row.context_json).map(item => JSON.parse((0, retained_text_1.freezeEvidence)(db, (0, retained_text_1.thawEvidence)(db, item))));
+            db.prepare('UPDATE syncs SET context_json=? WHERE id=?').run(JSON.stringify(context), row.id);
+        }
+        db.prepare("INSERT OR REPLACE INTO sync_settings VALUES('storage_schema','pointer-v1')").run();
+    })();
+}
+//# sourceMappingURL=pointer-migration.js.map

package/dist/db/pointer-migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pointer-migration.js","sourceRoot":"","sources":["../../src/db/pointer-migration.ts"],"names":[],"mappings":";;;;;AAMA,gCAiBC;AAKD,0CAgEC;AA5FD,4CAAoB;AAEpB,uDAA6H;AAC7H,iDAAyE;AACzE,mDAA2E;AAE3E,SAAgB,UAAU,CAAC,IAAY,EAAE,MAAM,GAAG,IAAI;IACpD,OAAO,8BAA8B,IAAI;;;;;;;;;;;MAWrC,MAAM,CAAC,CAAC,CAAC;;6DAE8C,CAAC,CAAC,CAAC,EAAE;;IAE9D,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAAC,EAAqB;IACnD,MAAM,OAAO,GAAI,EAAE,CAAC,OAAO,CAAC,4DAA4D,CAAC,CAAC,GAAG,EAAU,EAAE,KAAK,CAAC;IAC/G,IAAI,OAAO,KAAK,YAAY,IAAI,OAAO,KAAK,YAAY;QAAE,OAAO;IACjE,IAAI,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACnG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QAClB,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,EAAwB,CAAC;QAC3F,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;YACnD,MAAM,QAAQ,GAAI,EAAE,CAAC,OAAO,CAAC,4DAA4D,CAAC,CAAC,GAAG,EAAU,EAAE,GAAG,IAAI,CAAC,CAAC;YACnH,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC;;;;oLAIoJ,CAAC,CAAC;YAChL,KAAK,MAAM,OAAO,IAAI,EAAE,CAAC,OAAO,CAAC,sEAAsE,CAAC,CAAC,GAAG,EAAW,EAAE,CAAC;gBACxH,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC,4DAA4D,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAU,CAAC;gBACpH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC3D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsD,CAAC;gBAC5E,IAAI,EAAsB,CAAC;gBAC3B,IAAI,CAAC;oBACH,EAAE,GAAG,IAAA,8BAAe,EAAC,OAAO,CAAC,IAAI,EAAE,IAAA,6BAAc,GAAE,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;oBAC5E,IAAA,kCAAmB,EAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;oBACpC,KAAK,MAAM,OAAO,IAAI,IAAA,0BAAW,EAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,YAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;wBAC5F,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;4BAAE,SAAS;wBAC7C,MAAM,KAAK,GAAG,IAAA,0BAAc,EAAC,OAAO,CAAC,KAAK,CAAC,CAAC;wBAC5C,IAAI,KAAK;4BAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;oBAC9J,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAAC,CAAC,CAAC,2DAA2D;wBAC9E,CAAC;oBAAC,IAAI,EAAE,KAAK,SAAS;wBAAE,YAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC;gBACnD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC3F,MAAM,MAAM,GAAU,EAAE,EAAE,OAAO,GAAG,IAAI,GAAG,EAAU,EAAE,KAAK,GAAG,IAAI,GAAG,EAAe,CAAC;gBACtF,IAAI,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;gBAC3B,OAAO,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;oBAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAAC,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC;gBAAC,CAAC;gBACtJ,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE;oBAAE,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,IAAI,IAAI,CAAC,SAAS;wBAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBACxI,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;oBAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC9D,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,KAAK,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC7F,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;oBACxC,MAAM,QAAQ,GAAG,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,GAAG,CAAC,WAAW,CAAC;oBAC1J,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG;wBACjB,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;wBAChK,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,EAAE,GAAG,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW;wBACtJ,eAAe,EAAE,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,0BAAU,EAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;wBACxE,sBAAsB,EAAE,CAAC,QAAQ,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,IAAA,0BAAU,EAAC,EAAE,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;wBACtG,oBAAoB,EAAE,CAAC,WAAW,IAAI,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,cAAc,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,0BAAU,EAAC,EAAE,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI;qBACxI,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAI,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,EAAU,CAAC,CAAC,CAAC;YACnF,IAAK,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,EAAU,CAAC,CAAC,KAAK,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YACtK,EAAE,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;YAC/F,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sEAAsE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,OAAO,IAAI,QAAQ;gBAAE,EAAE,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC,GAAG,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;QAC5N,CAAC;QACD,EAAE,CAAC,IAAI,CAAC,2KAA2K,CAAC,CAAC;QACrL,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,uEAAuE,CAAC,CAAC;QACnG,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,OAAO,CAAC,wDAAwD,CAAC,CAAC,GAAG,EAAW,EAAE,CAAC;YACtG,MAAM,CAAC,GAAG,CAAC,IAAA,8BAAc,EAAC,EAAE,EAAE,IAAA,4BAAY,EAAC,EAAE,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAClG,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC,GAAG,EAAW,EAAE,CAAC;YACjF,MAAM,OAAO,GAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAA,8BAAc,EAAC,EAAE,EAAE,IAAA,4BAAY,EAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5H,EAAE,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAChG,CAAC;QACD,EAAE,CAAC,OAAO,CAAC,4EAA4E,CAAC,CAAC,GAAG,EAAE,CAAC;IACjG,CAAC,CAAC,EAAE,CAAC;AACP,CAAC"}

package/dist/db/retained-text.d.ts

@@ -0,0 +1,8 @@
+import type Database from 'better-sqlite3';
+import type { Evidence } from '../types';
+/** Immutable canonical text shared by frozen evidence and unresolvable legacy imports. */
+export declare function retainText(db: Database.Database, text: string): string;
+export declare function retainedText(db: Database.Database, key: string): string;
+export declare function freezeEvidence(db: Database.Database, item: Evidence): string;
+export declare function thawEvidence(db: Database.Database, value: string | Record<string, any>): Evidence;
+//# sourceMappingURL=retained-text.d.ts.map

package/dist/db/retained-text.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retained-text.d.ts","sourceRoot":"","sources":["../../src/db/retained-text.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAGzC,0FAA0F;AAC1F,wBAAgB,UAAU,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAKtE;AACD,wBAAgB,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAIvE;AACD,wBAAgB,cAAc,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,CAG5E;AACD,wBAAgB,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,QAAQ,CAOjG"}

package/dist/db/retained-text.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.retainText = retainText;
+exports.retainedText = retainedText;
+exports.freezeEvidence = freezeEvidence;
+exports.thawEvidence = thawEvidence;
+const normalize_1 = require("../sync/normalize");
+/** Immutable canonical text shared by frozen evidence and unresolvable legacy imports. */
+function retainText(db, text) {
+    const key = (0, normalize_1.digest)(text);
+    db.prepare('INSERT OR IGNORE INTO retained_text(key,text) VALUES(?,?)').run(key, text);
+    if (retainedText(db, key) !== text)
+        throw new Error('Retained evidence hash mismatch');
+    return key;
+}
+function retainedText(db, key) {
+    const row = db.prepare('SELECT text FROM retained_text WHERE key=?').get(key);
+    if (!row || (0, normalize_1.digest)(row.text) !== key)
+        throw new Error('Retained evidence is missing or damaged');
+    return row.text;
+}
+function freezeEvidence(db, item) {
+    const { text, ...metadata } = item;
+    return JSON.stringify({ ...metadata, text_ref: retainText(db, text) });
+}
+function thawEvidence(db, value) {
+    const item = typeof value === 'string' ? JSON.parse(value) : value;
+    // Imported older snapshots and test fixtures remain readable, never silently rewritten on read.
+    if (typeof item.text === 'string')
+        return item;
+    const { text_ref, ...metadata } = item;
+    if (typeof text_ref !== 'string')
+        throw new Error('Frozen evidence has no content reference');
+    return { ...metadata, text: retainedText(db, text_ref) };
+}
+//# sourceMappingURL=retained-text.js.map

package/dist/db/retained-text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retained-text.js","sourceRoot":"","sources":["../../src/db/retained-text.ts"],"names":[],"mappings":";;AAKA,gCAKC;AACD,oCAIC;AACD,wCAGC;AACD,oCAOC;AAzBD,iDAA2C;AAE3C,0FAA0F;AAC1F,SAAgB,UAAU,CAAC,EAAqB,EAAE,IAAY;IAC5D,MAAM,GAAG,GAAG,IAAA,kBAAM,EAAC,IAAI,CAAC,CAAC;IACzB,EAAE,CAAC,OAAO,CAAC,2DAA2D,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACvF,IAAI,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACvF,OAAO,GAAG,CAAC;AACb,CAAC;AACD,SAAgB,YAAY,CAAC,EAAqB,EAAE,GAAW;IAC7D,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,GAAG,CAAC,GAAG,CAAiC,CAAC;IAC9G,IAAI,CAAC,GAAG,IAAI,IAAA,kBAAM,EAAC,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACjG,OAAO,GAAG,CAAC,IAAI,CAAC;AAClB,CAAC;AACD,SAAgB,cAAc,CAAC,EAAqB,EAAE,IAAc;IAClE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC;IACnC,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;AACzE,CAAC;AACD,SAAgB,YAAY,CAAC,EAAqB,EAAE,KAAmC;IACrF,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACnE,gGAAgG;IAChG,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAgB,CAAC;IAC3D,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC;IACvC,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9F,OAAO,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAc,CAAC;AACvE,CAAC"}

package/dist/db/schema.d.ts

@@ -1,10 +1,6 @@
 import Database from 'better-sqlite3';
-/**
- * Get the draken data directory
- * Uses DRAKEN_DATA_DIR env var if set, otherwise ~/.draken
- * Works cross-platform (Windows, macOS, Linux)
- */
 export declare function getDataDir(): string;
 export declare function getDb(): Database.Database;
+export declare function initSchema(database: Database.Database): void;
 export declare function closeDb(): void;
 //# sourceMappingURL=schema.d.ts.map

package/dist/db/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/db/schema.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAKtC;;;;GAIG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAKnC;AAOD,wBAAgB,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAczC;AA2CD,wBAAgB,OAAO,IAAI,IAAI,CAK9B"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/db/schema.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAQtC,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAID,wBAAgB,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAazC;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAuL5D;AAED,wBAAgB,OAAO,IAAI,IAAI,CAG9B"}

package/dist/db/schema.js

@@ -5,81 +5,232 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getDataDir = getDataDir;
 exports.getDb = getDb;
+exports.initSchema = initSchema;
 exports.closeDb = closeDb;
 const better_sqlite3_1 = __importDefault(require("better-sqlite3"));
 const path_1 = __importDefault(require("path"));
 const os_1 = __importDefault(require("os"));
 const fs_1 = __importDefault(require("fs"));
-/**
- * Get the draken data directory
- * Uses DRAKEN_DATA_DIR env var if set, otherwise ~/.draken
- * Works cross-platform (Windows, macOS, Linux)
- */
+const pointer_migration_1 = require("./pointer-migration");
+const snapshot_pointers_1 = require("./snapshot-pointers");
+const agent_migration_1 = require("./agent-migration");
 function getDataDir() {
-    if (process.env.DRAKEN_DATA_DIR) {
-        return process.env.DRAKEN_DATA_DIR;
-    }
-    return path_1.default.join(os_1.default.homedir(), '.draken');
+    return path_1.default.resolve(process.env.DRAKEN_DATA_DIR || path_1.default.join(os_1.default.homedir(), '.draken'));
 }
-const DATA_DIR = getDataDir();
-const DB_PATH = path_1.default.join(DATA_DIR, 'draken.db');
 let db = null;
 function getDb() {
     if (!db) {
-        // Ensure data directory exists
-        if (!fs_1.default.existsSync(DATA_DIR)) {
-            fs_1.default.mkdirSync(DATA_DIR, { recursive: true });
-        }
-        db = new better_sqlite3_1.default(DB_PATH);
+        const dir = getDataDir();
+        fs_1.default.mkdirSync(dir, { recursive: true, mode: 0o700 });
+        db = new better_sqlite3_1.default(path_1.default.join(dir, 'draken.db'));
+        // Set mode before SQLite creates WAL/SHM sidecars, which inherit database permissions.
+        fs_1.default.chmodSync(path_1.default.join(dir, 'draken.db'), 0o600);
         db.pragma('journal_mode = WAL');
-        initSchema(db);
-        console.log(`Database: ${DB_PATH}`);
+        db.pragma('foreign_keys = ON');
+        db.pragma('busy_timeout = 5000');
+        try {
+            initSchema(db);
+        }
+        catch (error) {
+            db.close();
+            db = null;
+            throw error;
+        }
     }
     return db;
 }
-function initSchema(db) {
-    // Create tables
-    db.exec(`
-    CREATE TABLE IF NOT EXISTS projects (
-      id INTEGER PRIMARY KEY AUTOINCREMENT,
-      name TEXT NOT NULL,
+function initSchema(database) {
+    database.transaction(() => {
+        (0, agent_migration_1.renameAgentTables)(database);
+        const pointerOnly = database.prepare("SELECT 1 FROM sqlite_schema WHERE name='sync_settings'").get()
+            && database.prepare("SELECT value FROM sync_settings WHERE key='storage_schema'").get()?.value === 'pointer-v2';
+        // Existing project/task tables are untouched. The explicit pointer migration
+        // below changes representation transactionally, not historical evidence.
+        database.exec(`
+    CREATE TABLE IF NOT EXISTS sync_settings (
+      key TEXT PRIMARY KEY,
+      value TEXT NOT NULL
+    );
+    CREATE TABLE IF NOT EXISTS agent_sessions (
+      id TEXT PRIMARY KEY,
       path TEXT NOT NULL UNIQUE,
-      dockerfile_exists INTEGER DEFAULT 0,
-      created_at DATETIME DEFAULT CURRENT_TIMESTAMP
+      cwd TEXT NOT NULL,
+      name TEXT NOT NULL DEFAULT '',
+      included INTEGER NOT NULL DEFAULT 1,
+      missing INTEGER NOT NULL DEFAULT 0,
+      modified_at TEXT NOT NULL,
+      file_identity TEXT NOT NULL DEFAULT '',
+      byte_offset INTEGER NOT NULL DEFAULT 0,
+      boundary_hash TEXT NOT NULL DEFAULT '',
+      prefix_hash TEXT NOT NULL DEFAULT '',
+      leaf_id TEXT
+    );
+    ${pointerOnly ? '' : 'CREATE TABLE IF NOT EXISTS retained_text (key TEXT PRIMARY KEY, text TEXT NOT NULL);'}
+    ${(0, pointer_migration_1.entryTable)('agent_entries', !pointerOnly)};
+    CREATE INDEX IF NOT EXISTS agent_entries_pending ON agent_entries(active, is_activity, present);
+    CREATE INDEX IF NOT EXISTS agent_entries_event ON agent_entries(event_key);
+    CREATE TABLE IF NOT EXISTS syncs (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      status TEXT NOT NULL DEFAULT 'open' CHECK(status IN ('open', 'completed', 'discarded')),
+      created_at TEXT NOT NULL,
+      completed_at TEXT,
+      briefing TEXT NOT NULL DEFAULT '',
+      decisions TEXT NOT NULL DEFAULT '',
+      carry_forward TEXT NOT NULL DEFAULT '',
+      context_json TEXT NOT NULL DEFAULT '[]',
+      memory_json TEXT NOT NULL DEFAULT '[]',
+      remaining_count INTEGER NOT NULL DEFAULT 0
+    );
+    -- Snapshots can be opened independently. Inclusion is not review/coverage.
+    DROP INDEX IF EXISTS one_open_sync;
+    CREATE TABLE IF NOT EXISTS sync_items (
+      sync_id INTEGER NOT NULL REFERENCES syncs(id),
+      event_key TEXT NOT NULL,
+      evidence_json TEXT NOT NULL,
+      PRIMARY KEY(sync_id, event_key)
+    );
+    CREATE INDEX IF NOT EXISTS sync_items_event ON sync_items(event_key);
+    CREATE TABLE IF NOT EXISTS sync_presentations (
+      sync_id INTEGER PRIMARY KEY REFERENCES syncs(id),
+      request_id TEXT UNIQUE,
+      memory_inputs_json TEXT NOT NULL DEFAULT '[]',
+      recap TEXT NOT NULL DEFAULT '',
+      recap_hash TEXT NOT NULL DEFAULT '',
+      recap_state TEXT NOT NULL DEFAULT 'empty',
+      recap_error TEXT NOT NULL DEFAULT ''
+    );
+    CREATE TABLE IF NOT EXISTS sync_recap_cache (
+      key TEXT PRIMARY KEY,
+      summary TEXT NOT NULL,
+      created_at TEXT NOT NULL
+    );
+    CREATE TABLE IF NOT EXISTS sync_coverage (
+      event_key TEXT PRIMARY KEY,
+      sync_id INTEGER NOT NULL REFERENCES syncs(id)
+    );
+    CREATE TABLE IF NOT EXISTS summary_cache (
+      key TEXT PRIMARY KEY,
+      kind TEXT NOT NULL,
+      model TEXT NOT NULL,
+      prompt_version TEXT NOT NULL,
+      output_json TEXT NOT NULL,
+      created_at TEXT NOT NULL
     );
-
-    CREATE TABLE IF NOT EXISTS tasks (
+    CREATE TABLE IF NOT EXISTS sync_tree_nodes (
+      sync_id INTEGER NOT NULL REFERENCES syncs(id),
+      key TEXT NOT NULL,
+      kind TEXT NOT NULL,
+      label TEXT NOT NULL,
+      status TEXT NOT NULL DEFAULT 'pending',
+      children_json TEXT NOT NULL,
+      source_count INTEGER NOT NULL,
+      error TEXT NOT NULL DEFAULT '',
+      PRIMARY KEY(sync_id, key)
+    );
+    CREATE TABLE IF NOT EXISTS sync_runs (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      sync_id INTEGER NOT NULL REFERENCES syncs(id),
+      status TEXT NOT NULL DEFAULT 'running',
+      stage TEXT NOT NULL DEFAULT 'Planning',
+      summary_model TEXT NOT NULL,
+      final_model TEXT NOT NULL,
+      invocations INTEGER NOT NULL DEFAULT 0,
+      max_invocations INTEGER NOT NULL,
+      processed_entries INTEGER NOT NULL DEFAULT 0,
+      total_entries INTEGER NOT NULL,
+      cache_hits INTEGER NOT NULL DEFAULT 0,
+      error TEXT NOT NULL DEFAULT '',
+      question TEXT,
+      started_at TEXT NOT NULL,
+      completed_at TEXT
+    );
+    CREATE INDEX IF NOT EXISTS sync_runs_sync ON sync_runs(sync_id, id);
+    CREATE TABLE IF NOT EXISTS voice_calls (
+      id TEXT PRIMARY KEY,
+      sync_id INTEGER NOT NULL REFERENCES syncs(id),
+      status TEXT NOT NULL DEFAULT 'active',
+      model TEXT NOT NULL,
+      started_at TEXT NOT NULL,
+      ended_at TEXT,
+      end_reason TEXT NOT NULL DEFAULT ''
+    );
+    CREATE UNIQUE INDEX IF NOT EXISTS one_voice_call ON voice_calls(status) WHERE status = 'active';
+    CREATE TABLE IF NOT EXISTS voice_turns (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      call_id TEXT NOT NULL REFERENCES voice_calls(id),
+      request_id TEXT NOT NULL,
+      question TEXT NOT NULL,
+      answer TEXT NOT NULL DEFAULT '',
+      evidence_json TEXT NOT NULL DEFAULT '[]',
+      heard_text TEXT NOT NULL DEFAULT '',
+      status TEXT NOT NULL DEFAULT 'thinking',
+      error TEXT NOT NULL DEFAULT '',
+      messages_saved INTEGER NOT NULL DEFAULT 0,
+      started_at TEXT NOT NULL,
+      completed_at TEXT,
+      model_ms INTEGER,
+      first_audio_ms INTEGER,
+      UNIQUE(call_id, request_id)
+    );
+    CREATE INDEX IF NOT EXISTS voice_turns_call ON voice_turns(call_id, id);
+    CREATE TABLE IF NOT EXISTS live_calls (
+      id TEXT PRIMARY KEY,
+      sync_id INTEGER NOT NULL REFERENCES syncs(id),
+      status TEXT NOT NULL DEFAULT 'active',
+      started_at TEXT NOT NULL,
+      ended_at TEXT,
+      end_reason TEXT NOT NULL DEFAULT ''
+    );
+    CREATE UNIQUE INDEX IF NOT EXISTS one_live_call ON live_calls(status) WHERE status = 'active';
+    CREATE TABLE IF NOT EXISTS live_messages (
       id INTEGER PRIMARY KEY AUTOINCREMENT,
-      project_id INTEGER NOT NULL,
-      prompt TEXT NOT NULL,
-      status TEXT DEFAULT 'pending',
-      container_id TEXT,
-      logs TEXT,
-      created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
-      completed_at DATETIME,
-      FOREIGN KEY (project_id) REFERENCES projects(id) ON DELETE CASCADE
+      call_id TEXT NOT NULL REFERENCES live_calls(id),
+      request_id TEXT NOT NULL,
+      role TEXT NOT NULL CHECK(role IN ('user', 'assistant')),
+      text TEXT NOT NULL DEFAULT '',
+      sources_json TEXT NOT NULL DEFAULT '[]',
+      status TEXT NOT NULL DEFAULT 'streaming',
+      observed_audio_ms INTEGER NOT NULL DEFAULT 0,
+      first_audio_ms INTEGER,
+      started_at TEXT NOT NULL,
+      UNIQUE(call_id, request_id)
+    );
+    CREATE INDEX IF NOT EXISTS live_messages_call ON live_messages(call_id, id);
+    CREATE TABLE IF NOT EXISTS sync_messages (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      sync_id INTEGER NOT NULL REFERENCES syncs(id),
+      role TEXT NOT NULL CHECK(role IN ('user', 'assistant')),
+      content TEXT NOT NULL,
+      created_at TEXT NOT NULL
     );
-
-    CREATE INDEX IF NOT EXISTS idx_tasks_project_id ON tasks(project_id);
-    CREATE INDEX IF NOT EXISTS idx_tasks_status ON tasks(status);
   `);
-    // Migration: Add session_id column if it doesn't exist
-    try {
-        db.exec(`ALTER TABLE tasks ADD COLUMN session_id TEXT`);
-    }
-    catch { /* Column already exists */ }
-    // Migration: Add parent_task_id column if it doesn't exist
-    try {
-        db.exec(`ALTER TABLE tasks ADD COLUMN parent_task_id INTEGER REFERENCES tasks(id) ON DELETE SET NULL`);
-    }
-    catch { /* Column already exists */ }
-    // Create index on session_id (after migration ensures column exists)
-    db.exec(`CREATE INDEX IF NOT EXISTS idx_tasks_session_id ON tasks(session_id)`);
+        const columns = new Set(database.prepare('PRAGMA table_info(syncs)').all().map(column => column.name));
+        for (const [name, definition] of Object.entries({
+            snapshot_version: 'INTEGER NOT NULL DEFAULT 1',
+            snapshot_at: 'TEXT',
+            model_config_json: "TEXT NOT NULL DEFAULT '{}'",
+            compression_complete: 'INTEGER NOT NULL DEFAULT 0',
+        })) {
+            if (!columns.has(name))
+                database.exec(`ALTER TABLE syncs ADD COLUMN ${name} ${definition}`);
+        }
+        const runColumns = new Set(database.prepare('PRAGMA table_info(sync_runs)').all().map(column => column.name));
+        if (!runColumns.has('metrics_json'))
+            database.exec("ALTER TABLE sync_runs ADD COLUMN metrics_json TEXT NOT NULL DEFAULT '[]'");
+        if (!runColumns.has('request_id'))
+            database.exec('ALTER TABLE sync_runs ADD COLUMN request_id TEXT');
+        database.exec('CREATE UNIQUE INDEX IF NOT EXISTS sync_run_request ON sync_runs(request_id) WHERE request_id IS NOT NULL');
+        database.prepare('UPDATE syncs SET snapshot_at = created_at WHERE snapshot_at IS NULL').run();
+        (0, pointer_migration_1.migratePointers)(database);
+        (0, snapshot_pointers_1.migrateSnapshotPointers)(database);
+        (0, agent_migration_1.migrateAgents)(database);
+        const sessionColumns = new Set(database.prepare('PRAGMA table_info(agent_sessions)').all().map(column => column.name));
+        if (!sessionColumns.has('scanned_bytes'))
+            database.exec('ALTER TABLE agent_sessions ADD COLUMN scanned_bytes INTEGER NOT NULL DEFAULT -1');
+    })();
 }
 function closeDb() {
-    if (db) {
-        db.close();
-        db = null;
-    }
+    db?.close();
+    db = null;
 }
 //# sourceMappingURL=schema.js.map