kiokuko-dsh 0.1.0

package/dist/context/delivery.js

@@ -0,0 +1,886 @@
+import { withImmediateTransaction } from '../db/transaction.js';
+import { KiokukoError } from '../errors.js';
+import { CONTEXT_RANKING_VERSION, CONTEXT_RANKING_COMPONENTS, CONTEXT_RANKING_COMPONENTS_V2, CONTEXT_SELECTION_REASON_ORDER, } from './ranking.js';
+import { canonicalContentHash, canonicalJson } from '../serialization/validate.js';
+import { effectiveRetrievalScope, hasExplicitApplicability, } from '../memory/structured-memory.js';
+import { readEntry } from '../memory/entries.js';
+import { isRetrievableEntry } from '../memory/hybrid-retrieval.js';
+import { entryOriginMatchesWorkspace, isContextEntryOrigin } from './origin.js';
+import { RUN_STATUSES } from '../ledger/types.js';
+import { RECOMMENDATION_POLICY_VERSION } from './recommendations.js';
+import { readRunIntakeLink } from '../akinator/store.js';
+import { readContextRunProfileBinding } from './run-state.js';
+const MAX_IDENTIFIER_BYTES = 256;
+const MAX_ITEMS = 100;
+const MAX_SCORE_COMPONENT = 1_000_000;
+const MAX_CHAR_BUDGET = 100_000;
+const MAX_LIMIT = 100;
+const DEFAULT_LIMIT = 100;
+const DELIVERY_CURSOR_VERSION = 1;
+// The persisted score schema is the mode discriminant: v1 is the generic
+// broker contract and v2 is the scoped broker contract.
+const GENERIC_DELIVERY_POLICY_VERSION = `${CONTEXT_RANKING_VERSION}+${RECOMMENDATION_POLICY_VERSION}`;
+const SCOPED_DELIVERY_POLICY_VERSION = 'context-ranking-v6';
+// v2/v3 used the legacy identity and intake binding. Retired v4/v5 deliveries
+// retain the strict full identity and profile binding used when they were written,
+// but the scoped broker never reuses them after a policy advance.
+const LEGACY_SCOPED_DELIVERY_POLICY_VERSIONS = new Set(['context-ranking-v2', 'context-ranking-v3']);
+const READABLE_SCOPED_DELIVERY_POLICY_VERSIONS = new Set([
+    ...LEGACY_SCOPED_DELIVERY_POLICY_VERSIONS,
+    'context-ranking-v4',
+    'context-ranking-v5',
+]);
+const VALIDATION_MESSAGE = 'Context delivery input is invalid';
+const NOT_FOUND_MESSAGE = 'Context delivery target was not found';
+const CONFLICT_MESSAGE = 'Context delivery conflicts with existing record';
+const DATABASE_MESSAGE = 'Context delivery database operation failed';
+const INTEGRITY_MESSAGE = 'Stored context delivery is invalid';
+function fail(code, message) {
+    throw new KiokukoError(code, message);
+}
+function validation() {
+    return fail('VALIDATION_ERROR', VALIDATION_MESSAGE);
+}
+function notFound() {
+    return fail('NOT_FOUND', NOT_FOUND_MESSAGE);
+}
+function conflict() {
+    return fail('CONFLICT', CONFLICT_MESSAGE);
+}
+function databaseFailure() {
+    return fail('DATABASE_ERROR', DATABASE_MESSAGE);
+}
+function integrity() {
+    return fail('INTEGRITY_ERROR', INTEGRITY_MESSAGE);
+}
+function scopedIdentityIntegrity() {
+    return fail('INTEGRITY_ERROR', 'Stored scoped context character accounting is invalid');
+}
+function isKiokukoError(error) {
+    return error instanceof KiokukoError;
+}
+const SQLITE_CONSTRAINT_PRIMARY_KEY = 1_555;
+const SQLITE_CONSTRAINT_UNIQUE = 2_067;
+const NO_UNIQUENESS_FAILURES = new Set();
+const SQLITE_OPERATIONAL_PRIMARY_CODES = new Set([5, 6, 7, 8, 9, 10, 13, 14, 15, 22, 23]);
+const SQLITE_INTEGRITY_PRIMARY_CODES = new Set([11, 24, 26]);
+const DELIVERY_UNIQUENESS_FAILURES = new Set([
+    'UNIQUE constraint failed: context_deliveries.delivery_id',
+    'UNIQUE constraint failed: context_delivery_entries.delivery_id, context_delivery_entries.entry_id',
+]);
+function nodeSqliteFailure(error) {
+    if (!(error instanceof Error))
+        return null;
+    const failure = error;
+    if (failure.code !== 'ERR_SQLITE_ERROR'
+        || typeof failure.errcode !== 'number'
+        || !Number.isSafeInteger(failure.errcode)
+        || failure.errcode < 0)
+        return null;
+    return failure;
+}
+function normalizeDatabaseError(error, uniquenessFailures = NO_UNIQUENESS_FAILURES) {
+    if (isKiokukoError(error))
+        throw error;
+    const failure = nodeSqliteFailure(error);
+    if (failure === null)
+        throw error;
+    if ((failure.errcode === SQLITE_CONSTRAINT_PRIMARY_KEY || failure.errcode === SQLITE_CONSTRAINT_UNIQUE)
+        && uniquenessFailures.has(failure.message))
+        conflict();
+    const primaryResultCode = failure.errcode & 0xff;
+    if (SQLITE_INTEGRITY_PRIMARY_CODES.has(primaryResultCode))
+        integrity();
+    if (SQLITE_OPERATIONAL_PRIMARY_CODES.has(primaryResultCode))
+        databaseFailure();
+    throw error;
+}
+function isPlainObject(value) {
+    try {
+        if (typeof value !== 'object' || value === null || Array.isArray(value))
+            return false;
+        const prototype = Object.getPrototypeOf(value);
+        return prototype === Object.prototype || prototype === null;
+    }
+    catch {
+        return false;
+    }
+}
+function isCanonicalArrayIndex(value) {
+    if (value === '0')
+        return true;
+    if (!/^[1-9]\d*$/u.test(value))
+        return false;
+    const index = Number(value);
+    return Number.isSafeInteger(index) && index < 4_294_967_295 && String(index) === value;
+}
+function ownKeys(value) {
+    let keys;
+    try {
+        keys = Reflect.ownKeys(value);
+        if (keys.some((key) => typeof key === 'symbol'))
+            validation();
+        for (const key of keys) {
+            const descriptor = Object.getOwnPropertyDescriptor(value, key);
+            if (descriptor === undefined || !('value' in descriptor))
+                validation();
+        }
+    }
+    catch (error) {
+        if (isKiokukoError(error))
+            throw error;
+        validation();
+    }
+    return keys;
+}
+function assertCloneableInput(value) {
+    try {
+        structuredClone(value);
+    }
+    catch {
+        validation();
+    }
+}
+function objectInput(value, fields, requireAll) {
+    if (!isPlainObject(value))
+        validation();
+    const keys = ownKeys(value);
+    assertCloneableInput(value);
+    const allowed = new Set(fields);
+    if (keys.some((key) => !allowed.has(key)))
+        validation();
+    if (requireAll && fields.some((field) => !keys.includes(field)))
+        validation();
+    return value;
+}
+function arrayInput(value) {
+    if (!Array.isArray(value))
+        validation();
+    try {
+        if (Object.getPrototypeOf(value) !== Array.prototype)
+            validation();
+        const keys = ownKeys(value);
+        assertCloneableInput(value);
+        if (!keys.includes('length') || keys.some((key) => key !== 'length' && (!isCanonicalArrayIndex(key) || Number(key) >= value.length)))
+            validation();
+        for (let index = 0; index < value.length; index += 1) {
+            const descriptor = Object.getOwnPropertyDescriptor(value, String(index));
+            if (descriptor === undefined || !('value' in descriptor))
+                validation();
+        }
+    }
+    catch (error) {
+        if (isKiokukoError(error))
+            throw error;
+        validation();
+    }
+    return value;
+}
+function hasOwn(value, field) {
+    return Object.prototype.hasOwnProperty.call(value, field);
+}
+function readField(value, field) {
+    const descriptor = Object.getOwnPropertyDescriptor(value, field);
+    if (descriptor === undefined || !('value' in descriptor))
+        validation();
+    return descriptor.value;
+}
+function boundedIdentifier(value) {
+    if (typeof value !== 'string' || value.trim().length === 0 || /[\p{C}]/u.test(value) || Buffer.byteLength(value, 'utf8') > MAX_IDENTIFIER_BYTES)
+        validation();
+    return value;
+}
+function boundedStoredIdentifier(value) {
+    if (typeof value !== 'string' || value.trim().length === 0 || /[\p{C}]/u.test(value) || Buffer.byteLength(value, 'utf8') > MAX_IDENTIFIER_BYTES)
+        integrity();
+    return value;
+}
+function nonNegativeSafeInteger(value) {
+    if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < 0)
+        validation();
+    return value;
+}
+function positiveSafeInteger(value) {
+    if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < 1)
+        validation();
+    return value;
+}
+function validatedScoreSchemaVersion(value, onInvalid) {
+    if (typeof value !== 'number' || !Number.isSafeInteger(value) || (value !== 1 && value !== 2))
+        onInvalid();
+    return value;
+}
+function deliveryPolicyVersion(version) {
+    return version === 1 ? GENERIC_DELIVERY_POLICY_VERSION : SCOPED_DELIVERY_POLICY_VERSION;
+}
+function storedDeliveryPolicyMatches(version, policyVersion) {
+    return policyVersion === deliveryPolicyVersion(version)
+        || version === 2 && READABLE_SCOPED_DELIVERY_POLICY_VERSIONS.has(policyVersion);
+}
+function storedNonNegativeSafeInteger(value) {
+    if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < 0)
+        integrity();
+    return value;
+}
+function storedPositiveSafeInteger(value) {
+    if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < 1)
+        integrity();
+    return value;
+}
+function hash(value) {
+    if (typeof value !== 'string' || !/^[0-9a-f]{64}$/u.test(value))
+        validation();
+    return value;
+}
+function storedHash(value) {
+    if (typeof value !== 'string' || !/^[0-9a-f]{64}$/u.test(value))
+        integrity();
+    return value;
+}
+function timestamp(value) {
+    if (typeof value !== 'string' || !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u.test(value))
+        validation();
+    const parsed = Date.parse(value);
+    if (!Number.isFinite(parsed) || new Date(parsed).toISOString() !== value)
+        validation();
+    return value;
+}
+function storedTimestamp(value) {
+    if (typeof value !== 'string' || !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u.test(value))
+        integrity();
+    const parsed = Date.parse(value);
+    if (!Number.isFinite(parsed) || new Date(parsed).toISOString() !== value)
+        integrity();
+    return value;
+}
+function booleanValue(value) {
+    if (typeof value !== 'boolean')
+        validation();
+    return value;
+}
+function storedBoolean(value) {
+    if (value !== 0 && value !== 1)
+        integrity();
+    return value === 1;
+}
+function scoreComponentsForVersion(value, version) {
+    const components = version >= 2 ? CONTEXT_RANKING_COMPONENTS_V2 : CONTEXT_RANKING_COMPONENTS;
+    const object = objectInput(value, components, true);
+    const keys = ownKeys(object);
+    if (keys.length !== components.length || components.some((component) => !keys.includes(component)))
+        validation();
+    const result = {};
+    for (const component of components) {
+        const score = readField(object, component);
+        if (typeof score !== 'number' || !Number.isSafeInteger(score) || !Number.isFinite(score) || score < -MAX_SCORE_COMPONENT || score > MAX_SCORE_COMPONENT)
+            validation();
+        result[component] = score;
+    }
+    return result;
+}
+function storedScoreComponents(value, version) {
+    try {
+        return scoreComponentsForVersion(value, version);
+    }
+    catch {
+        integrity();
+    }
+}
+function selectionReasons(value) {
+    const array = arrayInput(value);
+    if (array.length === 0)
+        validation();
+    const result = [];
+    let previousIndex = -1;
+    for (const item of array) {
+        if (typeof item !== 'string')
+            validation();
+        const reasonIndex = CONTEXT_SELECTION_REASON_ORDER.indexOf(item);
+        if (reasonIndex < 0 || reasonIndex <= previousIndex)
+            validation();
+        previousIndex = reasonIndex;
+        result.push(item);
+    }
+    return result;
+}
+function storedSelectionReasons(value) {
+    try {
+        return selectionReasons(value);
+    }
+    catch {
+        integrity();
+    }
+}
+function validateDeliveryItems(value, scoreSchemaVersion) {
+    const array = arrayInput(value);
+    if (array.length > MAX_ITEMS)
+        validation();
+    const entries = new Set();
+    return array.map((item, index) => {
+        const object = objectInput(item, ['entryId', 'entryRevision', 'rank', 'scoreComponents', 'selectionReasons', 'origin'], false);
+        const entryId = boundedIdentifier(readField(object, 'entryId'));
+        if (entries.has(entryId))
+            validation();
+        entries.add(entryId);
+        const entryRevision = positiveSafeInteger(readField(object, 'entryRevision'));
+        const rank = positiveSafeInteger(readField(object, 'rank'));
+        if (rank !== index + 1)
+            validation();
+        const origin = object.origin === undefined ? undefined : isContextEntryOrigin(object.origin) ? object.origin : validation();
+        return {
+            entryId,
+            entryRevision,
+            rank,
+            scoreComponents: scoreComponentsForVersion(readField(object, 'scoreComponents'), scoreSchemaVersion),
+            selectionReasons: selectionReasons(readField(object, 'selectionReasons')),
+            ...(origin === undefined ? {} : { origin }),
+        };
+    });
+}
+function validateContextDeliveryInput(value) {
+    try {
+        const object = objectInput(value, [
+            'workspace', 'deliveryId', 'runId', 'throughSequence', 'intakeSessionId', 'taskProfileHash',
+            'queryHash', 'policyVersion', 'charBudget', 'charCount', 'truncated',
+            'createdAt', 'items', 'scoreSchemaVersion',
+        ], false);
+        for (const field of ['workspace', 'deliveryId', 'runId', 'throughSequence', 'intakeSessionId', 'taskProfileHash', 'queryHash', 'policyVersion', 'charBudget', 'charCount', 'truncated', 'createdAt', 'items']) {
+            if (!hasOwn(object, field))
+                validation();
+        }
+        const workspace = boundedIdentifier(readField(object, 'workspace'));
+        const deliveryId = boundedIdentifier(readField(object, 'deliveryId'));
+        const runId = boundedIdentifier(readField(object, 'runId'));
+        const throughSequence = nonNegativeSafeInteger(readField(object, 'throughSequence'));
+        const rawIntakeSessionId = readField(object, 'intakeSessionId');
+        const intakeSessionId = rawIntakeSessionId === null ? null : boundedIdentifier(rawIntakeSessionId);
+        const taskProfileHash = hash(readField(object, 'taskProfileHash'));
+        const queryHash = hash(readField(object, 'queryHash'));
+        const policyVersion = boundedIdentifier(readField(object, 'policyVersion'));
+        const charBudget = readField(object, 'charBudget');
+        if (typeof charBudget !== 'number' || !Number.isSafeInteger(charBudget) || charBudget < 1 || charBudget > MAX_CHAR_BUDGET)
+            validation();
+        const charCount = readField(object, 'charCount');
+        if (typeof charCount !== 'number' || !Number.isSafeInteger(charCount) || charCount < 0 || charCount > charBudget)
+            validation();
+        const truncated = booleanValue(readField(object, 'truncated'));
+        const createdAt = timestamp(readField(object, 'createdAt'));
+        const parsedScoreSchemaVersion = validatedScoreSchemaVersion(object.scoreSchemaVersion === undefined ? 1 : object.scoreSchemaVersion, validation);
+        if (policyVersion !== deliveryPolicyVersion(parsedScoreSchemaVersion))
+            validation();
+        const items = validateDeliveryItems(readField(object, 'items'), parsedScoreSchemaVersion);
+        return {
+            workspace,
+            deliveryId,
+            runId,
+            throughSequence,
+            intakeSessionId,
+            taskProfileHash,
+            queryHash,
+            policyVersion,
+            charBudget,
+            charCount,
+            truncated,
+            createdAt,
+            items,
+            ...(object.scoreSchemaVersion === undefined ? {} : { scoreSchemaVersion: parsedScoreSchemaVersion }),
+        };
+    }
+    catch {
+        validation();
+    }
+}
+function validateReadInput(value) {
+    try {
+        const object = objectInput(value, ['workspace', 'deliveryId'], true);
+        return {
+            workspace: boundedIdentifier(readField(object, 'workspace')),
+            deliveryId: boundedIdentifier(readField(object, 'deliveryId')),
+        };
+    }
+    catch {
+        validation();
+    }
+}
+function encodeCursor(cursor) {
+    return Buffer.from(JSON.stringify(cursor), 'utf8').toString('base64url');
+}
+function parseCursor(value) {
+    if (value === undefined)
+        return undefined;
+    try {
+        if (typeof value !== 'string' || !/^[A-Za-z0-9_-]+$/u.test(value))
+            validation();
+        const decoded = Buffer.from(value, 'base64url');
+        if (decoded.toString('base64url') !== value)
+            validation();
+        const parsed = JSON.parse(decoded.toString('utf8'));
+        if (!isPlainObject(parsed))
+            validation();
+        const keys = ownKeys(parsed);
+        if (keys.length !== 3 || keys[0] !== 'version' || keys[1] !== 'createdAt' || keys[2] !== 'deliveryId')
+            validation();
+        if (readField(parsed, 'version') !== DELIVERY_CURSOR_VERSION)
+            validation();
+        const createdAt = timestamp(readField(parsed, 'createdAt'));
+        const deliveryId = boundedIdentifier(readField(parsed, 'deliveryId'));
+        const cursor = { version: DELIVERY_CURSOR_VERSION, createdAt, deliveryId };
+        if (encodeCursor(cursor) !== value)
+            validation();
+        return cursor;
+    }
+    catch {
+        validation();
+    }
+}
+function validateListInput(value) {
+    try {
+        const object = objectInput(value, ['workspace', 'runId', 'cursor', 'limit'], false);
+        if (!hasOwn(object, 'workspace') || !hasOwn(object, 'runId'))
+            validation();
+        const workspace = boundedIdentifier(readField(object, 'workspace'));
+        const runId = boundedIdentifier(readField(object, 'runId'));
+        const rawLimit = hasOwn(object, 'limit') ? readField(object, 'limit') : undefined;
+        const limit = rawLimit === undefined ? DEFAULT_LIMIT : rawLimit;
+        if (typeof limit !== 'number' || !Number.isSafeInteger(limit) || limit < 1 || limit > MAX_LIMIT)
+            validation();
+        const cursor = parseCursor(hasOwn(object, 'cursor') ? readField(object, 'cursor') : undefined);
+        return { workspace, runId, limit, ...(cursor === undefined ? {} : { cursor }) };
+    }
+    catch {
+        validation();
+    }
+}
+function canonicalDeliveryBody(input) {
+    return canonicalJson({
+        workspace: input.workspace,
+        deliveryId: input.deliveryId,
+        runId: input.runId,
+        throughSequence: input.throughSequence,
+        intakeSessionId: input.intakeSessionId,
+        taskProfileHash: input.taskProfileHash,
+        queryHash: input.queryHash,
+        policyVersion: input.policyVersion,
+        charBudget: input.charBudget,
+        charCount: input.charCount,
+        truncated: input.truncated,
+        createdAt: input.createdAt,
+        items: input.items.map((item) => ({
+            entryId: item.entryId,
+            entryRevision: item.entryRevision,
+            rank: item.rank,
+            scoreComponents: item.scoreComponents,
+            selectionReasons: item.selectionReasons,
+            ...(item.origin === undefined ? {} : { origin: item.origin }),
+        })),
+        scoreSchemaVersion: input.scoreSchemaVersion ?? 1,
+    });
+}
+export function scopedDeliveryId(input) {
+    return `context-${canonicalContentHash({
+        kind: 'scoped-context-delivery-v1',
+        workspace: input.workspace,
+        runId: input.runId,
+        throughSequence: input.throughSequence,
+        intakeSessionId: input.intakeSessionId,
+        taskProfileHash: input.taskProfileHash,
+        queryHash: input.queryHash,
+        policyVersion: input.policyVersion,
+        charBudget: input.charBudget,
+        charCount: input.charCount,
+        truncated: input.truncated,
+        createdAt: input.createdAt,
+        scoreSchemaVersion: input.scoreSchemaVersion ?? 1,
+        items: input.items.map((item) => ({
+            entryId: item.entryId,
+            entryRevision: item.entryRevision,
+            rank: item.rank,
+            scoreComponents: item.scoreComponents,
+            selectionReasons: item.selectionReasons,
+            ...(item.origin === undefined ? {} : { origin: item.origin }),
+        })),
+    })}`;
+}
+export function legacyScopedDeliveryId(input) {
+    return `context-${canonicalContentHash({ runId: input.runId, queryHash: input.queryHash })}`;
+}
+function storedScopedDeliveryIdentityMatches(input) {
+    if (LEGACY_SCOPED_DELIVERY_POLICY_VERSIONS.has(input.policyVersion)) {
+        return input.deliveryId === legacyScopedDeliveryId(input);
+    }
+    return input.deliveryId === scopedDeliveryId(input);
+}
+function selectHeaderByDeliveryId(database, deliveryId) {
+    return database.prepare(`
+    SELECT cd.delivery_id, cd.run_id, cd.through_sequence, cd.intake_session_id,
+           cd.task_profile_hash, cd.query_hash, cd.policy_version,
+           cd.char_budget, cd.char_count, cd.truncated, cd.created_at, cd.score_schema_version,
+           lr.workspace AS run_workspace, lr.last_sequence AS run_last_sequence
+      FROM context_deliveries AS cd
+      LEFT JOIN ledger_runs AS lr ON lr.run_id = cd.run_id
+     WHERE cd.delivery_id = ?
+  `).get(deliveryId);
+}
+function strictCurrentEntry(database, workspace, entryId, requireStructuredScope) {
+    try {
+        return readEntry(database, { workspace, entryId }, { requireStructuredScope });
+    }
+    catch (error) {
+        if (isKiokukoError(error) && error.code === 'INTEGRITY_ERROR')
+            integrity();
+        throw error;
+    }
+}
+function assertRunForWrite(database, input) {
+    const run = database.prepare('SELECT run_id, status, last_sequence FROM ledger_runs WHERE run_id = ? AND workspace = ?')
+        .get(input.runId, input.workspace);
+    if (!run)
+        notFound();
+    if (typeof run.run_id !== 'string')
+        integrity();
+    if (typeof run.status !== 'string' || !RUN_STATUSES.includes(run.status))
+        integrity();
+    const lastSequence = storedNonNegativeSafeInteger(run.last_sequence);
+    if (run.status !== 'active' || input.throughSequence !== lastSequence)
+        conflict();
+    let binding;
+    try {
+        binding = readContextRunProfileBinding(database, input.runId, input.throughSequence);
+    }
+    catch (error) {
+        if (isKiokukoError(error) && (error.code === 'NOT_FOUND' || error.code === 'INTEGRITY_ERROR'))
+            integrity();
+        throw error;
+    }
+    if (binding.workspace !== input.workspace)
+        integrity();
+    if (input.intakeSessionId !== binding.intakeSessionId)
+        notFound();
+    if (input.taskProfileHash !== binding.profileHash)
+        conflict();
+    for (const item of input.items) {
+        const candidate = database.prepare(`
+      SELECT e.id, e.workspace, r.workspace AS revision_workspace
+        FROM entry_revisions AS r
+        JOIN entries AS e ON e.id = r.entry_id
+       WHERE r.entry_id = ? AND r.revision = ?
+    `).get(item.entryId, item.entryRevision);
+        if (!candidate || candidate.id !== item.entryId)
+            notFound();
+        if (typeof candidate.workspace !== 'string' || candidate.workspace.length === 0)
+            integrity();
+        const entryWorkspace = candidate.workspace;
+        const origin = item.origin ?? 'project';
+        if (candidate.revision_workspace !== entryWorkspace)
+            integrity();
+        const entry = strictCurrentEntry(database, entryWorkspace, item.entryId, origin !== 'project');
+        if (entry.revision !== item.entryRevision)
+            conflict();
+        if (!isRetrievableEntry(database, entry) || entry.status === 'superseded')
+            conflict();
+        if (!entryOriginMatchesWorkspace({ origin, runWorkspace: input.workspace, entryWorkspace: entry.workspace }))
+            notFound();
+        if (origin === 'global') {
+            if (entry.workspace !== 'global' || entry.scope.visibility !== 'global' || effectiveRetrievalScope(entry.scope) !== 'global')
+                notFound();
+        }
+        else if (origin === 'ecosystem') {
+            if (!hasOwn(entry.scope, 'retrievalScope')
+                || effectiveRetrievalScope(entry.scope) !== 'ecosystem'
+                || !hasExplicitApplicability(entry.scope))
+                notFound();
+        }
+    }
+}
+function validateStoredJson(value) {
+    if (typeof value !== 'string')
+        integrity();
+    let parsed;
+    try {
+        parsed = JSON.parse(value);
+    }
+    catch (error) {
+        if (error instanceof SyntaxError || error instanceof RangeError)
+            integrity();
+        throw error;
+    }
+    let canonical;
+    try {
+        canonical = canonicalJson(parsed);
+    }
+    catch (error) {
+        if (error instanceof RangeError
+            || (error instanceof KiokukoError && error.code === 'VALIDATION_ERROR'))
+            integrity();
+        throw error;
+    }
+    if (canonical !== value)
+        integrity();
+    return parsed;
+}
+function validateStoredHeader(row, workspace) {
+    const deliveryId = boundedStoredIdentifier(row.delivery_id);
+    const runId = boundedStoredIdentifier(row.run_id);
+    const runWorkspace = boundedStoredIdentifier(row.run_workspace);
+    if (runWorkspace !== workspace)
+        notFound();
+    const lastSequence = storedNonNegativeSafeInteger(row.run_last_sequence);
+    const throughSequence = storedNonNegativeSafeInteger(row.through_sequence);
+    if (throughSequence > lastSequence)
+        integrity();
+    const rawIntakeSessionId = row.intake_session_id;
+    const intakeSessionId = rawIntakeSessionId === null ? null : boundedStoredIdentifier(rawIntakeSessionId);
+    const taskProfileHash = storedHash(row.task_profile_hash);
+    const queryHash = storedHash(row.query_hash);
+    const policyVersion = boundedStoredIdentifier(row.policy_version);
+    const scoreSchemaVersion = validatedScoreSchemaVersion(row.score_schema_version, integrity);
+    if (!storedDeliveryPolicyMatches(scoreSchemaVersion, policyVersion))
+        integrity();
+    const charBudget = storedPositiveSafeInteger(row.char_budget);
+    if (charBudget > MAX_CHAR_BUDGET)
+        integrity();
+    const charCount = storedNonNegativeSafeInteger(row.char_count);
+    if (charCount > charBudget)
+        integrity();
+    const truncated = storedBoolean(row.truncated);
+    const createdAt = storedTimestamp(row.created_at);
+    return {
+        workspace,
+        deliveryId,
+        runId,
+        throughSequence,
+        intakeSessionId,
+        taskProfileHash,
+        queryHash,
+        policyVersion,
+        charBudget,
+        charCount,
+        truncated,
+        createdAt,
+        items: [],
+        ...(scoreSchemaVersion > 1 ? { scoreSchemaVersion } : {}),
+    };
+}
+function selectDeliveryEntries(database, deliveryId) {
+    return database.prepare(`
+    SELECT cde.delivery_id, cde.entry_id, cde.entry_revision, cde.rank,
+           cde.score_components_json, cde.selection_reason_json, cde.origin_scope,
+           e.workspace AS entry_workspace, r.workspace AS revision_workspace
+      FROM context_delivery_entries AS cde
+      LEFT JOIN entry_revisions AS r
+        ON r.entry_id = cde.entry_id AND r.revision = cde.entry_revision
+      LEFT JOIN entries AS e ON e.id = r.entry_id
+     WHERE cde.delivery_id = ?
+     ORDER BY cde.rank ASC, cde.entry_id ASC
+  `).all(deliveryId);
+}
+function validateStoredEntries(database, header) {
+    const rows = selectDeliveryEntries(database, header.deliveryId);
+    if (rows.length > MAX_ITEMS)
+        integrity();
+    // Migration 009 may remove an invalid entry from a released delivery,
+    // leaving a historical rank gap. New writes still require contiguous ranks.
+    const allowsRankGaps = LEGACY_SCOPED_DELIVERY_POLICY_VERSIONS.has(header.policyVersion);
+    const entryIds = new Set();
+    let previousRank = 0;
+    let expectedRank = 1;
+    return rows.map((row) => {
+        const deliveryId = boundedStoredIdentifier(row.delivery_id);
+        const entryId = boundedStoredIdentifier(row.entry_id);
+        if (deliveryId !== header.deliveryId || entryIds.has(entryId))
+            integrity();
+        entryIds.add(entryId);
+        const entryWorkspace = boundedStoredIdentifier(row.entry_workspace);
+        const origin = isContextEntryOrigin(row.origin_scope) ? row.origin_scope : integrity();
+        if (!entryOriginMatchesWorkspace({ origin, runWorkspace: header.workspace, entryWorkspace }))
+            integrity();
+        const entryRevision = storedPositiveSafeInteger(row.entry_revision);
+        const revisionWorkspace = boundedStoredIdentifier(row.revision_workspace);
+        if (revisionWorkspace !== entryWorkspace)
+            integrity();
+        const rank = storedPositiveSafeInteger(row.rank);
+        if (allowsRankGaps ? rank <= previousRank : rank !== expectedRank)
+            integrity();
+        previousRank = rank;
+        expectedRank += 1;
+        const scoreValue = validateStoredJson(row.score_components_json);
+        const reasonValue = validateStoredJson(row.selection_reason_json);
+        const score = storedScoreComponents(scoreValue, header.scoreSchemaVersion ?? 1);
+        const reasons = storedSelectionReasons(reasonValue);
+        if (canonicalJson(score) !== row.score_components_json || canonicalJson(reasons) !== row.selection_reason_json)
+            integrity();
+        return { entryId, entryRevision, rank, scoreComponents: score, selectionReasons: reasons, ...(origin === 'project' ? {} : { origin }) };
+    });
+}
+function assertStoredProfileBinding(database, header) {
+    let binding;
+    try {
+        binding = readContextRunProfileBinding(database, header.runId, header.throughSequence);
+    }
+    catch (error) {
+        if (isKiokukoError(error) && (error.code === 'NOT_FOUND' || error.code === 'INTEGRITY_ERROR'))
+            integrity();
+        throw error;
+    }
+    if (binding.workspace !== header.workspace
+        || header.intakeSessionId !== binding.intakeSessionId
+        || header.taskProfileHash !== binding.profileHash)
+        integrity();
+}
+function assertLegacyStoredIntakeBinding(database, header) {
+    if (header.intakeSessionId === null)
+        return;
+    let link;
+    try {
+        link = readRunIntakeLink(database, { workspace: header.workspace, runId: header.runId });
+    }
+    catch (error) {
+        if (isKiokukoError(error) && (error.code === 'NOT_FOUND' || error.code === 'INTEGRITY_ERROR'))
+            integrity();
+        throw error;
+    }
+    if (link.workspace !== header.workspace || link.sessionId !== header.intakeSessionId)
+        integrity();
+}
+function assertStoredDeliveryBinding(database, header) {
+    if (LEGACY_SCOPED_DELIVERY_POLICY_VERSIONS.has(header.policyVersion)) {
+        assertLegacyStoredIntakeBinding(database, header);
+        return;
+    }
+    assertStoredProfileBinding(database, header);
+}
+function readStoredDelivery(database, workspace, deliveryId) {
+    const row = selectHeaderByDeliveryId(database, deliveryId);
+    if (!row)
+        notFound();
+    if (row.run_workspace === null || row.run_workspace === undefined)
+        integrity();
+    if (row.run_workspace !== workspace)
+        notFound();
+    const header = validateStoredHeader(row, workspace);
+    assertStoredDeliveryBinding(database, header);
+    const items = validateStoredEntries(database, header);
+    const complete = { ...header, items };
+    if ((header.scoreSchemaVersion ?? 1) === 2 && !storedScopedDeliveryIdentityMatches(complete))
+        scopedIdentityIntegrity();
+    const view = {
+        ...complete,
+        items: items.map((item) => ({ ...item, scoreComponents: { ...item.scoreComponents }, selectionReasons: [...item.selectionReasons], untrusted: true })),
+        untrusted: true,
+    };
+    return view;
+}
+function writeContextDelivery(database, input, options = {}) {
+    if ((input.scoreSchemaVersion ?? 1) === 2 && input.deliveryId !== scopedDeliveryId(input))
+        validation();
+    assertRunForWrite(database, input);
+    const existing = selectHeaderByDeliveryId(database, input.deliveryId);
+    if (existing) {
+        if (existing.run_workspace !== input.workspace)
+            conflict();
+        const stored = readStoredDelivery(database, input.workspace, input.deliveryId);
+        if (canonicalDeliveryBody(stored) === canonicalDeliveryBody(input)) {
+            options.assertBeforePersist?.();
+            return stored;
+        }
+        conflict();
+    }
+    options.assertBeforePersist?.();
+    database.prepare(`
+    INSERT INTO context_deliveries (
+      delivery_id, run_id, through_sequence, intake_session_id, task_profile_hash, query_hash,
+      policy_version, external_sync_summary_json, char_budget, char_count, truncated, created_at, score_schema_version
+    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+  `).run(input.deliveryId, input.runId, input.throughSequence, input.intakeSessionId, input.taskProfileHash, input.queryHash, input.policyVersion, '{}', input.charBudget, input.charCount, input.truncated ? 1 : 0, input.createdAt, input.scoreSchemaVersion ?? 1);
+    for (const item of input.items) {
+        database.prepare(`
+      INSERT INTO context_delivery_entries (
+        delivery_id, entry_id, entry_revision, rank, score_components_json, selection_reason_json, origin_scope
+      ) VALUES (?, ?, ?, ?, ?, ?, ?)
+    `).run(input.deliveryId, item.entryId, item.entryRevision, item.rank, canonicalJson(item.scoreComponents), canonicalJson(item.selectionReasons), item.origin ?? 'project');
+    }
+    return readStoredDelivery(database, input.workspace, input.deliveryId);
+}
+export function recordContextDeliveryInTransaction(database, input, options = {}) {
+    const validated = validateContextDeliveryInput(input);
+    if (options.assertBeforePersist !== undefined && typeof options.assertBeforePersist !== 'function')
+        validation();
+    try {
+        return writeContextDelivery(database, validated, options);
+    }
+    catch (error) {
+        normalizeDatabaseError(error, DELIVERY_UNIQUENESS_FAILURES);
+    }
+}
+export function recordContextDelivery(database, input, options = {}) {
+    const validated = validateContextDeliveryInput(input);
+    if (options.assertBeforePersist !== undefined && typeof options.assertBeforePersist !== 'function')
+        validation();
+    try {
+        return withImmediateTransaction(database, () => writeContextDelivery(database, validated, options));
+    }
+    catch (error) {
+        normalizeDatabaseError(error, DELIVERY_UNIQUENESS_FAILURES);
+    }
+}
+export function readContextDelivery(database, input) {
+    const validated = validateReadInput(input);
+    try {
+        return readStoredDelivery(database, validated.workspace, validated.deliveryId);
+    }
+    catch (error) {
+        normalizeDatabaseError(error);
+    }
+}
+export function listContextDeliveries(database, input) {
+    const validated = validateListInput(input);
+    try {
+        const run = database.prepare('SELECT run_id, workspace, last_sequence FROM ledger_runs WHERE run_id = ? AND workspace = ?').get(validated.runId, validated.workspace);
+        if (!run)
+            notFound();
+        if (run.run_id !== validated.runId || run.workspace !== validated.workspace)
+            integrity();
+        storedNonNegativeSafeInteger(run.last_sequence);
+        const parameters = [validated.runId, validated.workspace];
+        let cursorClause = '';
+        if (validated.cursor !== undefined) {
+            cursorClause = ' AND (cd.created_at < ? OR (cd.created_at = ? AND cd.delivery_id > ?))';
+            parameters.push(validated.cursor.createdAt, validated.cursor.createdAt, validated.cursor.deliveryId);
+        }
+        parameters.push(validated.limit + 1);
+        const rows = database.prepare(`
+      SELECT cd.delivery_id, cd.run_id, cd.through_sequence, cd.intake_session_id,
+             cd.task_profile_hash, cd.query_hash, cd.policy_version,
+             cd.char_budget, cd.char_count, cd.truncated, cd.created_at, cd.score_schema_version,
+             lr.workspace AS run_workspace, lr.last_sequence AS run_last_sequence
+        FROM context_deliveries AS cd
+        LEFT JOIN ledger_runs AS lr ON lr.run_id = cd.run_id
+       WHERE cd.run_id = ? AND lr.workspace = ?${cursorClause}
+       ORDER BY cd.created_at DESC, cd.delivery_id ASC
+       LIMIT ?
+    `).all(...parameters);
+        const pageRows = rows.slice(0, validated.limit);
+        const items = pageRows.map((row) => {
+            const header = validateStoredHeader(row, validated.workspace);
+            assertStoredDeliveryBinding(database, header);
+            const storedItems = validateStoredEntries(database, header);
+            const complete = { ...header, items: storedItems };
+            if ((header.scoreSchemaVersion ?? 1) === 2 && !storedScopedDeliveryIdentityMatches(complete))
+                scopedIdentityIntegrity();
+            return {
+                ...complete,
+                items: storedItems.map((item) => ({ ...item, scoreComponents: { ...item.scoreComponents }, selectionReasons: [...item.selectionReasons], untrusted: true })),
+                untrusted: true,
+            };
+        });
+        const last = pageRows.at(-1);
+        const nextCursor = rows.length > validated.limit && last !== undefined
+            ? encodeCursor({ version: DELIVERY_CURSOR_VERSION, createdAt: storedTimestamp(last.created_at), deliveryId: boundedStoredIdentifier(last.delivery_id) })
+            : null;
+        return { items, nextCursor };
+    }
+    catch (error) {
+        normalizeDatabaseError(error);
+    }
+}
+//# sourceMappingURL=delivery.js.map