elepha 0.1.0

package/dist/storage/db.js

@@ -0,0 +1,312 @@
+// SQLite connection + schema management. Single local DB file, zero config.
+import { mkdirSync } from 'node:fs';
+import path from 'node:path';
+import Database from 'better-sqlite3';
+import { elephaHome } from '../config/paths.js';
+import { hardenDir, hardenFile } from '../security/file-permissions.js';
+import { CONSENT_GRANDFATHERED_AT_KEY, canonicalizeConsentRoots, grandfatherConsentRoots } from './consent-store.js';
+export function defaultDbPath() {
+    const override = process.env.ELEPHA_DB_PATH?.trim();
+    return override ? path.resolve(override) : path.join(elephaHome(), 'elepha.db');
+}
+const SCHEMA = `
+CREATE TABLE IF NOT EXISTS projects (
+  id            INTEGER PRIMARY KEY,
+  path          TEXT NOT NULL UNIQUE,
+  display_name  TEXT,
+  git_root      TEXT,
+  git_remote    TEXT,
+  git_root_commit TEXT,
+  first_seen_at TEXT NOT NULL,
+  last_seen_at  TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS sessions (
+  id               INTEGER PRIMARY KEY,
+  tool             TEXT NOT NULL CHECK (tool IN ('claude-code','codex')),
+  native_id        TEXT NOT NULL,
+  segment_index    INTEGER NOT NULL DEFAULT 0,
+  project_id       INTEGER NOT NULL REFERENCES projects(id),
+  source_path      TEXT NOT NULL,
+  cursor           TEXT,
+  started_at       TEXT NOT NULL,
+  last_ingested_at TEXT NOT NULL,
+  surface          TEXT CHECK (surface IN ('cli','desktop')),
+  git_branch       TEXT,
+  kind             TEXT CHECK (kind IN ('main','subagent','fork','adjudicator')),
+  last_turn_at     TEXT,
+  trailing_branch  TEXT,
+  trailing_files   TEXT NOT NULL DEFAULT '[]',
+  rendered_chars   INTEGER DEFAULT 0,
+  rendered_turns   INTEGER DEFAULT 0,
+  title            TEXT,
+  custom_title     TEXT,
+  first_prompt_search TEXT,
+  git_commit_count INTEGER,
+  UNIQUE (tool, native_id, segment_index)
+);
+CREATE INDEX IF NOT EXISTS idx_sessions_project ON sessions(project_id);
+
+CREATE TABLE IF NOT EXISTS memories (
+  id              INTEGER PRIMARY KEY,
+  project_id      INTEGER NOT NULL REFERENCES projects(id),
+  session_id      INTEGER NOT NULL REFERENCES sessions(id),
+  turn_index      INTEGER NOT NULL,
+  tool            TEXT NOT NULL,
+  turn_started_at TEXT NOT NULL,
+  decisions       TEXT NOT NULL,
+  files_touched   TEXT NOT NULL,
+  pending_items   TEXT NOT NULL,
+  superseded_at   TEXT,
+  created_at      TEXT NOT NULL,
+  summarizer_status TEXT NOT NULL DEFAULT 'unknown',
+  reingested_at   TEXT,
+  has_external_content INTEGER NOT NULL DEFAULT 0 CHECK (has_external_content IN (0,1)),
+  UNIQUE (session_id, turn_index)
+);
+CREATE INDEX IF NOT EXISTS idx_memories_project_time ON memories(project_id, turn_started_at);
+
+-- Session-level rollups. Additive: turn rows in memories are never deleted
+-- after rollup, and a rollup can always be rebuilt from them.
+--
+-- rollup_state is the crux. "Closed" is a heuristic (file idle), never a
+-- guarantee: Codex Desktop reopens a session days later and appends to the
+-- original rollout file. So final -> live -> final -> live must be safe to
+-- repeat any number of times, and re-processing the same turns must not
+-- double-count. rolled_up_through_turn_index is the high-water mark that makes
+-- the incremental merge idempotent - it advances in the SAME transaction as
+-- the content it accounts for.
+CREATE TABLE IF NOT EXISTS session_rollups (
+  session_id                   INTEGER PRIMARY KEY REFERENCES sessions(id),
+  project_id                   INTEGER NOT NULL REFERENCES projects(id),
+  tool                         TEXT    NOT NULL,
+  title                        TEXT    NOT NULL,
+  summary                      TEXT    NOT NULL,
+  decisions                    TEXT    NOT NULL,  -- JSON [{what, why}]
+  pending_items                TEXT    NOT NULL,  -- JSON string[]
+  files_touched                TEXT    NOT NULL,  -- JSON string[], case-insensitively deduped
+  turn_count                   INTEGER NOT NULL,
+  started_at                   TEXT    NOT NULL,
+  ended_at                     TEXT    NOT NULL,
+  kind                         TEXT    NOT NULL,  -- 'primary' | 'subagent'
+  parent_session_id            INTEGER REFERENCES sessions(id),
+  summarizer_status            TEXT    NOT NULL,
+  rollup_state                 TEXT    NOT NULL,  -- 'live' | 'final'
+  rolled_up_through_turn_index INTEGER NOT NULL,
+  computed_at                  TEXT    NOT NULL,
+  rollup_version               INTEGER NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_rollups_project ON session_rollups(project_id, ended_at);
+CREATE INDEX IF NOT EXISTS idx_rollups_parent ON session_rollups(parent_session_id);
+
+CREATE TABLE IF NOT EXISTS consent_roots (
+  id         INTEGER PRIMARY KEY,
+  ulid       TEXT NOT NULL UNIQUE,
+  path       TEXT NOT NULL UNIQUE,
+  state      TEXT NOT NULL CHECK (state IN ('approved', 'denied', 'pending')),
+  decided_at TEXT NOT NULL,
+  source     TEXT NOT NULL CHECK (source IN ('discovery', 'cli', 'grandfathered')),
+  nudged_at  TEXT
+);
+CREATE INDEX IF NOT EXISTS idx_consent_roots_state ON consent_roots(state);
+
+CREATE TABLE IF NOT EXISTS meta (
+  key   TEXT PRIMARY KEY,
+  value TEXT NOT NULL
+);
+
+-- Security Rule 4 quote-back guard. One row per successfully recorded injection.
+CREATE TABLE IF NOT EXISTS injections (
+  id                INTEGER PRIMARY KEY,
+  tool              TEXT NOT NULL,
+  native_session_id TEXT NOT NULL,
+  injected_at       TEXT NOT NULL,
+  injection_id      TEXT NOT NULL,   -- ULID embedded in the sentinel
+  body_hash         TEXT NOT NULL,   -- sha256 of the normalized body
+  body              TEXT NOT NULL,   -- needed for near-verbatim comparison
+  UNIQUE (tool, native_session_id, body_hash)
+);
+CREATE INDEX IF NOT EXISTS idx_injections_session ON injections(tool, native_session_id);
+
+-- The ordered session ids behind elepha:select:<n>. One row is the complete
+-- last list shown to one native chat, including an intentionally empty list.
+CREATE TABLE IF NOT EXISTS shown_session_lists (
+  tool              TEXT NOT NULL CHECK (tool IN ('claude-code','codex')),
+  native_session_id TEXT NOT NULL,
+  session_ids       TEXT NOT NULL,
+  PRIMARY KEY (tool, native_session_id)
+);
+
+-- A purge is absolute for a transcript. A later daemon sweep must not
+-- recreate any segment from a file whose history was deliberately removed.
+CREATE TABLE IF NOT EXISTS purged_transcripts (
+  tool      TEXT NOT NULL,
+  native_id TEXT NOT NULL,
+  purged_at TEXT NOT NULL,
+  PRIMARY KEY (tool, native_id)
+);
+
+-- Capture-off sessions observed under an explicit denial stay excluded even
+-- if that root is later approved. This stores identity only; transcript
+-- content remains solely in the provider's on-disk file.
+CREATE TABLE IF NOT EXISTS incognito_transcripts (
+  tool          TEXT NOT NULL,
+  native_id     TEXT NOT NULL,
+  tombstoned_at TEXT NOT NULL,
+  PRIMARY KEY (tool, native_id)
+);
+`;
+/**
+ * No migration framework exists yet (single-table-additive product, pre-1.0).
+ * Columns added after the initial CREATE TABLE need an idempotent ALTER TABLE
+ * here, guarded by a PRAGMA table_info check, since ALTER TABLE ADD COLUMN
+ * has no IF NOT EXISTS form and CREATE TABLE IF NOT EXISTS is a no-op against
+ * an already-existing table.
+ */
+function migrate(db) {
+    migrateSessionsTable(db);
+    const projectColumns = db.pragma('table_info(projects)').map((c) => c.name);
+    if (!projectColumns.includes('git_root_commit')) {
+        db.exec('ALTER TABLE projects ADD COLUMN git_root_commit TEXT');
+    }
+    const consentColumns = db.pragma('table_info(consent_roots)').map((c) => c.name);
+    if (!consentColumns.includes('nudged_at')) {
+        db.exec('ALTER TABLE consent_roots ADD COLUMN nudged_at TEXT');
+    }
+    db.prepare(`INSERT OR IGNORE INTO meta (key, value)
+         SELECT @key, @value
+         WHERE EXISTS (SELECT 1 FROM consent_roots)
+           AND NOT EXISTS (SELECT 1 FROM meta WHERE key = @key)`).run({ key: CONSENT_GRANDFATHERED_AT_KEY, value: new Date().toISOString() });
+    // The gap comparison needs the prior closed turn's timestamp.
+    // Keep it on the session row with the rest of the trailing window: using
+    // last_ingested_at would compare wall-clock daemon activity, not transcript
+    // time, and querying memories here would make every turn scan its history.
+    const sessionColumns = db.pragma('table_info(sessions)').map((c) => c.name);
+    if (!sessionColumns.includes('last_turn_at')) {
+        db.exec('ALTER TABLE sessions ADD COLUMN last_turn_at TEXT');
+    }
+    if (!sessionColumns.includes('rendered_chars')) {
+        // Existing rows need a transcript backfill. NULL means that transcript
+        // is unavailable, while new rows receive the SCHEMA default of zero.
+        db.exec('ALTER TABLE sessions ADD COLUMN rendered_chars INTEGER');
+    }
+    if (!sessionColumns.includes('rendered_turns')) {
+        // Existing rows need the same renderer-derived backfill as
+        // rendered_chars. NULL means the transcript was unavailable.
+        db.exec('ALTER TABLE sessions ADD COLUMN rendered_turns INTEGER');
+    }
+    if (!sessionColumns.includes('title')) {
+        db.exec('ALTER TABLE sessions ADD COLUMN title TEXT');
+    }
+    if (!sessionColumns.includes('custom_title')) {
+        db.exec('ALTER TABLE sessions ADD COLUMN custom_title TEXT');
+    }
+    if (!sessionColumns.includes('first_prompt_search')) {
+        // Historical rows stay visibly unindexed until the explicit transcript
+        // backfill can derive their first stored user prompt.
+        db.exec('ALTER TABLE sessions ADD COLUMN first_prompt_search TEXT');
+    }
+    // This is the count at segment open. Historical rows deliberately remain
+    // unknown: recording today's count would manufacture stale-gate evidence.
+    if (!sessionColumns.includes('git_commit_count')) {
+        db.exec('ALTER TABLE sessions ADD COLUMN git_commit_count INTEGER');
+    }
+    const columns = db.pragma('table_info(memories)').map((c) => c.name);
+    if (!columns.includes('summarizer_status')) {
+        db.exec(`ALTER TABLE memories ADD COLUMN summarizer_status TEXT NOT NULL DEFAULT 'unknown'`);
+    }
+    if (!columns.includes('reingested_at')) {
+        db.exec('ALTER TABLE memories ADD COLUMN reingested_at TEXT');
+    }
+    if (!columns.includes('has_external_content')) {
+        db.exec('ALTER TABLE memories ADD COLUMN has_external_content INTEGER NOT NULL DEFAULT 0 CHECK (has_external_content IN (0,1))');
+    }
+    // Substantiveness is computed at read time. Older databases retain this
+    // inert NOT NULL column until their next open; fresh databases never get it.
+    const rollupColumns = db.pragma('table_info(session_rollups)').map((c) => c.name);
+    if (rollupColumns.includes('substantive')) {
+        db.exec('ALTER TABLE session_rollups DROP COLUMN substantive');
+    }
+}
+/**
+ * Sessions are unique by tool, native id, and segment index, with
+ * surface/git_branch/kind/trailing_branch/trailing_files. SQLite has no
+ * ALTER TABLE ... DROP/ADD CONSTRAINT, so a constraint change needs a full
+ * table rebuild - the destructive-operations rule applies even though this
+ * runs unconditionally at openDb() time, not behind a CLI --apply flag,
+ * because it is purely additive to the row set (same ids, same row count)
+ * and gated by foreign_key_check before commit.
+ */
+function migrateSessionsTable(db) {
+    const columns = db.pragma('table_info(sessions)').map((c) => c.name);
+    if (columns.includes('segment_index')) {
+        if (!columns.includes('git_commit_count')) {
+            db.exec('ALTER TABLE sessions ADD COLUMN git_commit_count INTEGER');
+        }
+        return; // already migrated (or a fresh DB that got the final SCHEMA directly)
+    }
+    db.pragma('foreign_keys = OFF');
+    const rebuild = db.transaction(() => {
+        db.exec(`
+      CREATE TABLE sessions_new (
+        id               INTEGER PRIMARY KEY,
+        tool             TEXT NOT NULL CHECK (tool IN ('claude-code','codex')),
+        native_id        TEXT NOT NULL,
+        segment_index    INTEGER NOT NULL DEFAULT 0,
+        project_id       INTEGER NOT NULL REFERENCES projects(id),
+        source_path      TEXT NOT NULL,
+        cursor           TEXT,
+        started_at       TEXT NOT NULL,
+        last_ingested_at TEXT NOT NULL,
+        surface          TEXT CHECK (surface IN ('cli','desktop')),
+        git_branch       TEXT,
+        kind             TEXT CHECK (kind IN ('main','subagent','fork','adjudicator')),
+        last_turn_at     TEXT,
+        trailing_branch  TEXT,
+        trailing_files   TEXT NOT NULL DEFAULT '[]',
+        UNIQUE (tool, native_id, segment_index)
+      );
+    `);
+        db.exec(`
+      INSERT INTO sessions_new (id, tool, native_id, segment_index, project_id, source_path, cursor, started_at, last_ingested_at, trailing_files)
+      SELECT id, tool, native_id, 0, project_id, source_path, cursor, started_at, last_ingested_at, '[]'
+      FROM sessions;
+    `);
+        db.exec('DROP TABLE sessions;');
+        db.exec('ALTER TABLE sessions_new RENAME TO sessions;');
+        db.exec('CREATE INDEX IF NOT EXISTS idx_sessions_project ON sessions(project_id);');
+    });
+    rebuild();
+    const violations = db.pragma('foreign_key_check');
+    if (Array.isArray(violations) && violations.length > 0) {
+        throw new Error(`sessions table rebuild left ${violations.length} foreign-key violation(s): ${JSON.stringify(violations)}`);
+    }
+    db.pragma('foreign_keys = ON');
+    // Preserve rebuilt rows and add the nullable historical baseline only
+    // after the constraint migration is done.
+    db.exec('ALTER TABLE sessions ADD COLUMN git_commit_count INTEGER');
+}
+export function openDb(dbPath = defaultDbPath()) {
+    if (dbPath !== ':memory:') {
+        mkdirSync(path.dirname(dbPath), { recursive: true });
+        hardenDir(path.dirname(dbPath));
+    }
+    const db = new Database(dbPath);
+    db.pragma('journal_mode = WAL');
+    db.pragma('foreign_keys = ON');
+    db.exec(SCHEMA);
+    migrate(db);
+    grandfatherConsentRoots(db);
+    canonicalizeConsentRoots(db);
+    if (dbPath !== ':memory:') {
+        // WAL mode creates -wal/-shm sidecars as a side effect of the pragma
+        // above; harden every file that actually exists on disk, not just
+        // the main DB file - a leaked WAL still holds deleted content
+        // (the purge path checkpoints WAL before deletion).
+        hardenFile(dbPath);
+        hardenFile(`${dbPath}-wal`);
+        hardenFile(`${dbPath}-shm`);
+    }
+    return db;
+}
+//# sourceMappingURL=db.js.map

package/dist/storage/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../src/storage/db.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAE5E,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,4BAA4B,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAErH,MAAM,UAAU,aAAa;IACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IACpD,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,WAAW,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkJd,CAAC;AAEF;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,EAAqB;IAClC,oBAAoB,CAAC,EAAE,CAAC,CAAC;IAEzB,MAAM,cAAc,GAAI,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACzG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC9C,EAAE,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,cAAc,GAAI,EAAE,CAAC,MAAM,CAAC,2BAA2B,CAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9G,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACxC,EAAE,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;IACnE,CAAC;IACD,EAAE,CAAC,OAAO,CACN;;;gEAGwD,CAC3D,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,4BAA4B,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAE9E,8DAA8D;IAC9D,yEAAyE;IACzE,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAM,cAAc,GAAI,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACzG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAC3C,EAAE,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC7C,uEAAuE;QACvE,qEAAqE;QACrE,EAAE,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC7C,2DAA2D;QAC3D,6DAA6D;QAC7D,EAAE,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,EAAE,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAC3C,EAAE,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAClD,uEAAuE;QACvE,sDAAsD;QACtD,EAAE,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;IACxE,CAAC;IACD,yEAAyE;IACzE,0EAA0E;IAC1E,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC/C,EAAE,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,OAAO,GAAI,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACzC,EAAE,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACrC,EAAE,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAC5C,EAAE,CAAC,IAAI,CAAC,uHAAuH,CAAC,CAAC;IACrI,CAAC;IAED,wEAAwE;IACxE,6EAA6E;IAC7E,MAAM,aAAa,GAAI,EAAE,CAAC,MAAM,CAAC,6BAA6B,CAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/G,IAAI,aAAa,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACxC,EAAE,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;IACnE,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAAC,EAAqB;IAC/C,MAAM,OAAO,GAAI,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAA6B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClG,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACxC,EAAE,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,CAAC,sEAAsE;IAClF,CAAC;IAED,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QAChC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;KAmBX,CAAC,CAAC;QACC,EAAE,CAAC,IAAI,CAAC;;;;KAIX,CAAC,CAAC;QACC,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAChC,EAAE,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QACxD,EAAE,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,CAAC;IAEV,MAAM,UAAU,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,+BAA+B,UAAU,CAAC,MAAM,8BAA8B,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAChI,CAAC;IACD,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC/B,sEAAsE;IACtE,0CAA0C;IAC1C,EAAE,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,MAAM,GAAW,aAAa,EAAE;IACnD,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QACxB,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAChC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC/B,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChB,OAAO,CAAC,EAAE,CAAC,CAAC;IACZ,uBAAuB,CAAC,EAAE,CAAC,CAAC;IAC5B,wBAAwB,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QACxB,qEAAqE;QACrE,kEAAkE;QAClE,8DAA8D;QAC9D,oDAAoD;QACpD,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,UAAU,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC;QAC5B,UAAU,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC"}

package/dist/storage/external-agent-import-purge.js

@@ -0,0 +1,182 @@
+// Purges Codex rollouts created by OpenAI's "Import from another agent".
+// Identification is structural and source-backed: every stored Codex
+// source_path is re-read through CodexAdapter.classifySession(), which checks
+// event_msg.payload.turn_id for the external-import-turn- prefix.
+import { isReadableProviderSource } from '../config/paths.js';
+import { errorMessage } from '../util/error.js';
+function count(db, table) {
+    return db.prepare(`SELECT COUNT(*) AS count FROM ${table}`).get().count;
+}
+function storeCounts(db) {
+    return {
+        projects: count(db, 'projects'),
+        sessions: count(db, 'sessions'),
+        memories: count(db, 'memories'),
+        rollups: count(db, 'session_rollups'),
+    };
+}
+function placeholders(values) {
+    return values.map(() => '?').join(',');
+}
+function affectedRollupCount(db, sessionIds) {
+    if (sessionIds.length === 0) {
+        return 0;
+    }
+    const marks = placeholders(sessionIds);
+    return db
+        .prepare(`SELECT COUNT(*) AS count FROM session_rollups WHERE session_id IN (${marks}) OR parent_session_id IN (${marks})`)
+        .get(...sessionIds, ...sessionIds).count;
+}
+function emptiedProjects(db, sessionIds, projectIds) {
+    if (sessionIds.length === 0 || projectIds.length === 0) {
+        return [];
+    }
+    const sessionMarks = placeholders(sessionIds);
+    const projectMarks = placeholders(projectIds);
+    return db
+        .prepare(`SELECT p.id, p.path
+                 FROM projects p
+                 WHERE p.id IN (${projectMarks})
+                   AND NOT EXISTS (
+                       SELECT 1 FROM sessions s
+                       WHERE s.project_id = p.id AND s.id NOT IN (${sessionMarks})
+                   )
+                   AND NOT EXISTS (
+                       SELECT 1 FROM memories m
+                       WHERE m.project_id = p.id AND m.session_id NOT IN (${sessionMarks})
+                   )
+                 ORDER BY p.id`)
+        .all(...projectIds, ...sessionIds, ...sessionIds);
+}
+/** Read-only preview. Every currently referenced Codex transcript is re-read from disk. */
+export async function planExternalAgentImportPurge(db, adapter) {
+    const sourcePaths = db.prepare("SELECT DISTINCT source_path FROM sessions WHERE tool = 'codex' ORDER BY source_path").all().map((row) => row.source_path);
+    const importedSourcePaths = [];
+    const issues = [];
+    for (const sourcePath of sourcePaths) {
+        if (!isReadableProviderSource('codex', sourcePath)) {
+            issues.push({ sourcePath, reason: 'source transcript is missing' });
+            continue;
+        }
+        try {
+            const classification = await adapter.classifySession(sourcePath);
+            if (classification.exclusion === 'external-agent-import') {
+                importedSourcePaths.push(sourcePath);
+            }
+        }
+        catch (error) {
+            issues.push({ sourcePath, reason: errorMessage(error) });
+        }
+    }
+    const rows = importedSourcePaths.length === 0
+        ? []
+        : db
+            .prepare(`SELECT s.id, s.native_id, s.segment_index, s.project_id, p.path AS project_path, s.source_path
+                       FROM sessions s
+                       JOIN projects p ON p.id = s.project_id
+                       WHERE s.tool = 'codex' AND s.source_path IN (${placeholders(importedSourcePaths)})
+                       ORDER BY s.id`)
+            .all(...importedSourcePaths);
+    const countMemories = db.prepare('SELECT COUNT(*) AS count FROM memories WHERE session_id = ?');
+    const sessions = rows.map((row) => ({
+        id: row.id,
+        nativeId: row.native_id,
+        segmentIndex: row.segment_index,
+        projectId: row.project_id,
+        projectPath: row.project_path,
+        sourcePath: row.source_path,
+        memoryRows: countMemories.get(row.id).count,
+    }));
+    const sessionIds = sessions.map((session) => session.id);
+    const projectIds = [...new Set(sessions.map((session) => session.projectId))];
+    const memoryRowsAffected = sessions.reduce((sum, session) => sum + session.memoryRows, 0);
+    const rollupsAffected = affectedRollupCount(db, sessionIds);
+    const emptiedProjectsAfterPurge = emptiedProjects(db, sessionIds, projectIds);
+    const before = storeCounts(db);
+    return {
+        sourcePathsScanned: sourcePaths.length,
+        importedSourcePaths,
+        sessions,
+        memoryRowsAffected,
+        rollupsAffected,
+        emptiedProjects: emptiedProjectsAfterPurge,
+        issues,
+        before,
+        resulting: {
+            projects: before.projects - emptiedProjectsAfterPurge.length,
+            sessions: before.sessions - sessions.length,
+            memories: before.memories - memoryRowsAffected,
+            rollups: before.rollups - rollupsAffected,
+        },
+    };
+}
+function assertPlanStillMatches(db, plan) {
+    const sessionIds = plan.sessions.map((session) => session.id);
+    const currentSessionIds = plan.importedSourcePaths.length === 0
+        ? []
+        : db
+            .prepare(`SELECT id FROM sessions
+                           WHERE tool = 'codex' AND source_path IN (${placeholders(plan.importedSourcePaths)})
+                           ORDER BY id`)
+            .all(...plan.importedSourcePaths).map((row) => row.id);
+    if (currentSessionIds.join(',') !== sessionIds.join(',')) {
+        throw new Error('session rows changed after preview');
+    }
+    const memoryRows = sessionIds.length === 0
+        ? 0
+        : db
+            .prepare(`SELECT COUNT(*) AS count FROM memories WHERE session_id IN (${placeholders(sessionIds)})`)
+            .get(...sessionIds).count;
+    if (memoryRows !== plan.memoryRowsAffected) {
+        throw new Error('memory rows changed after preview');
+    }
+    if (affectedRollupCount(db, sessionIds) !== plan.rollupsAffected) {
+        throw new Error('rollups changed after preview');
+    }
+}
+/** Applies exactly the previewed row ids in one transaction. */
+export function applyExternalAgentImportPurge(db, plan) {
+    if (plan.issues.length > 0) {
+        throw new Error(`cannot apply with ${plan.issues.length} unreadable or missing source transcript(s)`);
+    }
+    const sessionIds = plan.sessions.map((session) => session.id);
+    if (sessionIds.length === 0) {
+        return;
+    }
+    const marks = placeholders(sessionIds);
+    const apply = db.transaction(() => {
+        assertPlanStillMatches(db, plan);
+        db.prepare(`DELETE FROM session_rollups WHERE session_id IN (${marks}) OR parent_session_id IN (${marks})`).run(...sessionIds, ...sessionIds);
+        db.prepare(`DELETE FROM memories WHERE session_id IN (${marks})`).run(...sessionIds);
+        db.prepare(`DELETE FROM sessions WHERE id IN (${marks})`).run(...sessionIds);
+        if (plan.emptiedProjects.length > 0) {
+            const projectIds = plan.emptiedProjects.map((project) => project.id);
+            db.prepare(`DELETE FROM projects WHERE id IN (${placeholders(projectIds)})`).run(...projectIds);
+        }
+    });
+    apply();
+    db.pragma('wal_checkpoint(TRUNCATE)');
+}
+/** Re-reads remaining Codex source paths and validates counts plus foreign keys. */
+export async function verifyExternalAgentImportPurge(db, adapter, plan) {
+    const errors = [];
+    const counts = storeCounts(db);
+    for (const key of ['projects', 'sessions', 'memories', 'rollups']) {
+        if (counts[key] !== plan.resulting[key]) {
+            errors.push(`${key} count is ${counts[key]}, expected ${plan.resulting[key]}`);
+        }
+    }
+    const violations = db.pragma('foreign_key_check');
+    if (violations.length > 0) {
+        errors.push(`foreign_key_check returned ${violations.length} violation(s)`);
+    }
+    const remaining = await planExternalAgentImportPurge(db, adapter);
+    if (remaining.sessions.length > 0) {
+        errors.push(`${remaining.sessions.length} session row(s) still reference external-agent import turns`);
+    }
+    if (remaining.issues.length > 0) {
+        errors.push(`${remaining.issues.length} remaining Codex source transcript(s) could not be verified`);
+    }
+    return { ok: errors.length === 0, errors, counts };
+}
+//# sourceMappingURL=external-agent-import-purge.js.map

package/dist/storage/external-agent-import-purge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-agent-import-purge.js","sourceRoot":"","sources":["../../src/storage/external-agent-import-purge.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,qEAAqE;AACrE,8EAA8E;AAC9E,kEAAkE;AAIlE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAwDhD,SAAS,KAAK,CAAC,EAAqB,EAAE,KAA+D;IACjG,OAAQ,EAAE,CAAC,OAAO,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC,GAAG,EAAwB,CAAC,KAAK,CAAC;AACnG,CAAC;AAED,SAAS,WAAW,CAAC,EAAqB;IACtC,OAAO;QACH,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC;QAC/B,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC;QAC/B,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC;QAC/B,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,iBAAiB,CAAC;KACxC,CAAC;AACN,CAAC;AAED,SAAS,YAAY,CAAC,MAA0B;IAC5C,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,mBAAmB,CAAC,EAAqB,EAAE,UAAoB;IACpE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,CAAC;IACb,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACvC,OACI,EAAE;SACG,OAAO,CAAC,sEAAsE,KAAK,8BAA8B,KAAK,GAAG,CAAC;SAC1H,GAAG,CAAC,GAAG,UAAU,EAAE,GAAG,UAAU,CACxC,CAAC,KAAK,CAAC;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,EAAqB,EAAE,UAAoB,EAAE,UAAoB;IACtF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO,EAAE,CAAC;IACd,CAAC;IACD,MAAM,YAAY,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAC9C,OAAO,EAAE;SACJ,OAAO,CACJ;;kCAEsB,YAAY;;;oEAGsB,YAAY;;;;4EAIJ,YAAY;;+BAEzD,CACtB;SACA,GAAG,CAAC,GAAG,UAAU,EAAE,GAAG,UAAU,EAAE,GAAG,UAAU,CAAiC,CAAC;AAC1F,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAC9C,EAAqB,EACrB,OAA8C;IAE9C,MAAM,WAAW,GACb,EAAE,CAAC,OAAO,CAAC,qFAAqF,CAAC,CAAC,GAAG,EAGxG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAChC,MAAM,mBAAmB,GAAa,EAAE,CAAC;IACzC,MAAM,MAAM,GAA+B,EAAE,CAAC;IAE9C,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACnC,IAAI,CAAC,wBAAwB,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;YACjD,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC,CAAC;YACpE,SAAS;QACb,CAAC;QACD,IAAI,CAAC;YACD,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;YACjE,IAAI,cAAc,CAAC,SAAS,KAAK,uBAAuB,EAAE,CAAC;gBACvD,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACzC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GACN,mBAAmB,CAAC,MAAM,KAAK,CAAC;QAC5B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAE,EAAE;aACE,OAAO,CACJ;;;sEAGgD,YAAY,CAAC,mBAAmB,CAAC;qCAClE,CAClB;aACA,GAAG,CAAC,GAAG,mBAAmB,CAAqB,CAAC;IAC/D,MAAM,aAAa,GAAG,EAAE,CAAC,OAAO,CAAC,6DAA6D,CAAC,CAAC;IAChG,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAChC,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,UAAU,EAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAuB,CAAC,KAAK;KACrE,CAAC,CAAC,CAAC;IACJ,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,kBAAkB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC1F,MAAM,eAAe,GAAG,mBAAmB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAC5D,MAAM,yBAAyB,GAAG,eAAe,CAAC,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAE/B,OAAO;QACH,kBAAkB,EAAE,WAAW,CAAC,MAAM;QACtC,mBAAmB;QACnB,QAAQ;QACR,kBAAkB;QAClB,eAAe;QACf,eAAe,EAAE,yBAAyB;QAC1C,MAAM;QACN,MAAM;QACN,SAAS,EAAE;YACP,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,yBAAyB,CAAC,MAAM;YAC5D,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM;YAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,kBAAkB;YAC9C,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,eAAe;SAC5C;KACJ,CAAC;AACN,CAAC;AAED,SAAS,sBAAsB,CAAC,EAAqB,EAAE,IAA6B;IAChF,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9D,MAAM,iBAAiB,GACnB,IAAI,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC;QACjC,CAAC,CAAC,EAAE;QACJ,CAAC,CACK,EAAE;aACG,OAAO,CACJ;sEAC4C,YAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC;uCACrE,CAChB;aACA,GAAG,CAAC,GAAG,IAAI,CAAC,mBAAmB,CACvC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjC,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,UAAU,GACZ,UAAU,CAAC,MAAM,KAAK,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,CAAC,CACK,EAAE;aACG,OAAO,CAAC,+DAA+D,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC;aACnG,GAAG,CAAC,GAAG,UAAU,CACzB,CAAC,KAAK,CAAC;IAClB,IAAI,UAAU,KAAK,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,mBAAmB,CAAC,EAAE,EAAE,UAAU,CAAC,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACrD,CAAC;AACL,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,6BAA6B,CAAC,EAAqB,EAAE,IAA6B;IAC9F,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,MAAM,CAAC,MAAM,6CAA6C,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9D,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;IACX,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QAC9B,sBAAsB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACjC,EAAE,CAAC,OAAO,CAAC,oDAAoD,KAAK,8BAA8B,KAAK,GAAG,CAAC,CAAC,GAAG,CAC3G,GAAG,UAAU,EACb,GAAG,UAAU,CAChB,CAAC;QACF,EAAE,CAAC,OAAO,CAAC,6CAA6C,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;QACrF,EAAE,CAAC,OAAO,CAAC,qCAAqC,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;QAC7E,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACrE,EAAE,CAAC,OAAO,CAAC,qCAAqC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;QACpG,CAAC;IACL,CAAC,CAAC,CAAC;IACH,KAAK,EAAE,CAAC;IACR,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;AAC1C,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAChD,EAAqB,EACrB,OAA8C,EAC9C,IAA6B;IAE7B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,CAAU,EAAE,CAAC;QACzE,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,aAAa,MAAM,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnF,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAc,CAAC;IAC/D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,8BAA8B,UAAU,CAAC,MAAM,eAAe,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAClE,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,6DAA6D,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,6DAA6D,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACvD,CAAC"}

package/dist/storage/first-prompt-search-backfill.js

@@ -0,0 +1,76 @@
+// Re-derives the bounded body-search document for each stored segment from
+// its first retained turn. It never changes turns, boundaries, or rollups.
+import { isReadableProviderSource } from '../config/paths.js';
+import { applyBackfill, planBackfill } from './backfill-runner.js';
+import { firstPromptSearch } from './first-prompt-search.js';
+async function deriveFirstPrompt(session, adapter, firstStoredIndex) {
+    if (!isReadableProviderSource(session.tool, session.source_path)) {
+        return undefined;
+    }
+    try {
+        for await (const turn of adapter.parseTurns(session.source_path, undefined, { closeTrailingOnIdle: true })) {
+            if (turn.turnIndex === firstStoredIndex) {
+                return firstPromptSearch(turn.userMessage);
+            }
+        }
+    }
+    catch {
+        return undefined;
+    }
+    return undefined;
+}
+const deriver = {
+    load(db) {
+        const sessions = db
+            .prepare('SELECT id, tool, native_id, source_path, first_prompt_search FROM sessions ORDER BY id')
+            .all();
+        const firstIndexes = db
+            .prepare('SELECT session_id, MIN(turn_index) AS turn_index FROM memories GROUP BY session_id')
+            .all();
+        return { sessions, state: new Map(firstIndexes.map((row) => [row.session_id, row.turn_index])) };
+    },
+    async derive({ adapters, session, state }) {
+        const firstStoredIndex = state.get(session.id);
+        if (firstStoredIndex === undefined) {
+            return undefined;
+        }
+        const after = await deriveFirstPrompt(session, adapters[session.tool], firstStoredIndex);
+        if (after === undefined) {
+            return {
+                sessionId: session.id,
+                nativeId: session.native_id,
+                tool: session.tool,
+                sourcePath: session.source_path,
+                before: session.first_prompt_search,
+                after: session.first_prompt_search,
+                transcriptMissing: true,
+            };
+        }
+        if (session.first_prompt_search === after) {
+            return undefined;
+        }
+        return {
+            sessionId: session.id,
+            nativeId: session.native_id,
+            tool: session.tool,
+            sourcePath: session.source_path,
+            before: session.first_prompt_search,
+            after,
+            transcriptMissing: false,
+        };
+    },
+    shouldWrite: (change) => !change.transcriptMissing,
+    write(db, change) {
+        db.prepare('UPDATE sessions SET first_prompt_search = ? WHERE id = ?').run(change.after, change.sessionId);
+        return {};
+    },
+};
+/** Shows first-prompt search changes without writing. */
+export async function planFirstPromptSearchBackfill(db, adapters) {
+    return planBackfill(db, adapters, deriver);
+}
+/** Applies only readable sessions' derived first-prompt search documents in one transaction. */
+export async function applyFirstPromptSearchBackfill(db, adapters) {
+    return applyBackfill(db, adapters, deriver);
+}
+//# sourceMappingURL=first-prompt-search-backfill.js.map

package/dist/storage/first-prompt-search-backfill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"first-prompt-search-backfill.js","sourceRoot":"","sources":["../../src/storage/first-prompt-search-backfill.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,2EAA2E;AAG3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EAAE,aAAa,EAAwB,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AA0B7D,KAAK,UAAU,iBAAiB,CAAC,OAAoB,EAAE,OAAuB,EAAE,gBAAwB;IACpG,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/D,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,CAAC;QACD,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACzG,IAAI,IAAI,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;gBACtC,OAAO,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC/C,CAAC;QACL,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,MAAM,OAAO,GAA+E;IACxF,IAAI,CAAC,EAAE;QACH,MAAM,QAAQ,GAAG,EAAE;aACd,OAAO,CAAC,wFAAwF,CAAC;aACjG,GAAG,EAAmB,CAAC;QAC5B,MAAM,YAAY,GAAG,EAAE;aAClB,OAAO,CAAC,oFAAoF,CAAC;aAC7F,GAAG,EAAuD,CAAC;QAChE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACrG,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE;QACrC,MAAM,gBAAgB,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/C,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACzF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO;gBACH,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,QAAQ,EAAE,OAAO,CAAC,SAAS;gBAC3B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,UAAU,EAAE,OAAO,CAAC,WAAW;gBAC/B,MAAM,EAAE,OAAO,CAAC,mBAAmB;gBACnC,KAAK,EAAE,OAAO,CAAC,mBAAmB;gBAClC,iBAAiB,EAAE,IAAI;aAC1B,CAAC;QACN,CAAC;QACD,IAAI,OAAO,CAAC,mBAAmB,KAAK,KAAK,EAAE,CAAC;YACxC,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO;YACH,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,QAAQ,EAAE,OAAO,CAAC,SAAS;YAC3B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,OAAO,CAAC,WAAW;YAC/B,MAAM,EAAE,OAAO,CAAC,mBAAmB;YACnC,KAAK;YACL,iBAAiB,EAAE,KAAK;SAC3B,CAAC;IACN,CAAC;IACD,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,iBAAiB;IAClD,KAAK,CAAC,EAAE,EAAE,MAAM;QACZ,EAAE,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3G,OAAO,EAAE,CAAC;IACd,CAAC;CACJ,CAAC;AAEF,yDAAyD;AACzD,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAC/C,EAAY,EACZ,QAA0C;IAE1C,OAAO,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAChD,EAAY,EACZ,QAA0C;IAE1C,OAAO,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC"}

package/dist/storage/first-prompt-search.js

@@ -0,0 +1,7 @@
+import { FIRST_PROMPT_SEARCH_CAP } from '../config/constants.js';
+import { stripShellSyntax } from '../security/sanitize.js';
+/** Stores a bounded inert search document while preserving the prompt's leading ask. */
+export function firstPromptSearch(userMessage) {
+    return stripShellSyntax(userMessage).slice(0, FIRST_PROMPT_SEARCH_CAP);
+}
+//# sourceMappingURL=first-prompt-search.js.map

package/dist/storage/first-prompt-search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"first-prompt-search.js","sourceRoot":"","sources":["../../src/storage/first-prompt-search.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,wFAAwF;AACxF,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACjD,OAAO,gBAAgB,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;AAC3E,CAAC"}

package/dist/storage/injection-store.js

@@ -0,0 +1,37 @@
+import { createHash } from 'node:crypto';
+import { normalizeForNearVerbatim } from '../security/self-ingestion.js';
+export class InjectionStore {
+    stmts;
+    constructor(db) {
+        this.stmts = {
+            insertInjection: db.prepare(`INSERT OR IGNORE INTO injections (tool, native_session_id, injected_at, injection_id, body_hash, body)
+                 VALUES (@tool, @native_session_id, @injected_at, @injection_id, @body_hash, @body)`),
+            injectionsForSession: db.prepare(`SELECT * FROM injections
+                 WHERE tool = ? AND native_session_id = ? AND injected_at <= ?
+                 ORDER BY injected_at ASC, id ASC`),
+        };
+    }
+    /** Stores a future injection's exact body once; normalized-hash uniqueness makes repeats safe. */
+    recordInjection(input) {
+        const bodyHash = createHash('sha256').update(normalizeForNearVerbatim(input.body)).digest('hex');
+        const result = this.stmts.insertInjection.run({
+            tool: input.tool,
+            native_session_id: input.nativeSessionId,
+            injected_at: input.injectedAt,
+            injection_id: input.injectionId,
+            body_hash: bodyHash,
+            body: input.body,
+        });
+        if (result.changes > 0) {
+            return true;
+        }
+        // INSERT OR IGNORE is not proof: SQLite can ignore for a different
+        // constraint or a damaged statement. A repeated body is durable only
+        // when the exact scoped row is observable before stdout is written.
+        return this.injectionsForSession(input.tool, input.nativeSessionId, input.injectedAt).some((row) => row.body_hash === bodyHash && row.body === input.body);
+    }
+    injectionsForSession(tool, nativeSessionId, atOrBefore) {
+        return this.stmts.injectionsForSession.all(tool, nativeSessionId, atOrBefore);
+    }
+}
+//# sourceMappingURL=injection-store.js.map

package/dist/storage/injection-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection-store.js","sourceRoot":"","sources":["../../src/storage/injection-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAqBzE,MAAM,OAAO,cAAc;IACN,KAAK,CAAkE;IAExF,YAAY,EAAY;QACpB,IAAI,CAAC,KAAK,GAAG;YACT,eAAe,EAAE,EAAE,CAAC,OAAO,CACvB;oGACoF,CACvF;YACD,oBAAoB,EAAE,EAAE,CAAC,OAAO,CAC5B;;kDAEkC,CACrC;SACJ,CAAC;IACN,CAAC;IAED,kGAAkG;IAClG,eAAe,CAAC,KAA2B;QACvC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjG,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC;YAC1C,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,iBAAiB,EAAE,KAAK,CAAC,eAAe;YACxC,WAAW,EAAE,KAAK,CAAC,UAAU;YAC7B,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,SAAS,EAAE,QAAQ;YACnB,IAAI,EAAE,KAAK,CAAC,IAAI;SACnB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,mEAAmE;QACnE,qEAAqE;QACrE,oEAAoE;QACpE,OAAO,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CACtF,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CACjE,CAAC;IACN,CAAC;IAED,oBAAoB,CAAC,IAAc,EAAE,eAAuB,EAAE,UAAkB;QAC5E,OAAO,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE,UAAU,CAAmB,CAAC;IACpG,CAAC;CACJ"}