kiokuko-dsh 0.1.0

package/dist/ledger/promotion.js

@@ -0,0 +1,310 @@
+import { randomUUID } from 'node:crypto';
+import { withImmediateTransaction } from '../db/transaction.js';
+import { KiokukoError } from '../errors.js';
+import { readEntry, recordEntryInTransaction } from '../memory/entries.js';
+import { findSecret } from '../memory/secrets.js';
+import { canonicalContentHash, canonicalJson, validateRecordInput, } from '../serialization/validate.js';
+import { MAX_EVENT_PAYLOAD_BYTES, MAX_ID_LENGTH } from './types.js';
+const CONFIRMATION_REQUIRED = 'Explicit promotion confirmation is required';
+const INVALID_INPUT = 'Invalid ledger promotion input';
+const PROPOSAL_NOT_FOUND = 'Ledger proposal not found';
+const INVALID_PROPOSAL = 'Invalid memory proposal';
+const PROPOSAL_SECURITY_REJECTED = 'Proposal content was rejected by memory security policy';
+const PROMOTION_CONFLICT = 'Ledger promotion conflicts with existing provenance';
+const CANONICAL_TIMESTAMP = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u;
+const MAX_REFERENCE_BYTES = 2 * 1024;
+const PROMOTION_CONFIDENCE = 0.25;
+// The proposal payload is deliberately limited to curated memory content fields.
+const PROPOSAL_FIELDS = new Set(['kind', 'title', 'body', 'summary', 'scope', 'tags']);
+const PROMOTION_INPUT_FIELDS = new Set(['workspace', 'runId', 'proposalEventId', 'deliveryId', 'actor', 'createdAt', 'confirmed']);
+function validation(message) {
+    throw new KiokukoError('VALIDATION_ERROR', message);
+}
+function notFound() {
+    throw new KiokukoError('NOT_FOUND', PROPOSAL_NOT_FOUND);
+}
+function conflict() {
+    throw new KiokukoError('CONFLICT', PROMOTION_CONFLICT);
+}
+function invalidProposal() {
+    throw new KiokukoError('VALIDATION_ERROR', INVALID_PROPOSAL);
+}
+function securityRejected() {
+    throw new KiokukoError('SECURITY_REJECTION', PROPOSAL_SECURITY_REJECTED);
+}
+function isPlainObject(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+function boundedString(value) {
+    if (typeof value !== 'string' || value.length === 0 || value.length > MAX_ID_LENGTH || /\p{Cc}/u.test(value))
+        validation(INVALID_INPUT);
+    return value;
+}
+function canonicalTimestamp(value) {
+    if (typeof value !== 'string' || !CANONICAL_TIMESTAMP.test(value))
+        validation(INVALID_INPUT);
+    const parsed = new Date(value);
+    if (!Number.isFinite(parsed.getTime()) || parsed.toISOString() !== value)
+        validation(INVALID_INPUT);
+    return value;
+}
+function parseInput(value) {
+    if (!isPlainObject(value) || Object.keys(value).some((key) => !PROMOTION_INPUT_FIELDS.has(key)))
+        validation(INVALID_INPUT);
+    if (value.confirmed !== true)
+        throw new KiokukoError('VALIDATION_ERROR', CONFIRMATION_REQUIRED);
+    const workspace = boundedString(value.workspace);
+    const runId = boundedString(value.runId);
+    const proposalEventId = boundedString(value.proposalEventId);
+    const actor = boundedString(value.actor);
+    const createdAt = canonicalTimestamp(value.createdAt);
+    const deliveryId = value.deliveryId === undefined ? undefined : boundedString(value.deliveryId);
+    return { workspace, runId, proposalEventId, ...(deliveryId === undefined ? {} : { deliveryId }), actor, createdAt };
+}
+function parseProposalPayload(payload, input, reference) {
+    if (!isPlainObject(payload) || [...Object.keys(payload)].some((key) => !PROPOSAL_FIELDS.has(key)))
+        invalidProposal();
+    let snapshot;
+    try {
+        const serialized = canonicalJson(payload);
+        if (Buffer.byteLength(serialized, 'utf8') > MAX_EVENT_PAYLOAD_BYTES)
+            invalidProposal();
+        snapshot = JSON.parse(serialized);
+    }
+    catch (error) {
+        if (error instanceof KiokukoError)
+            throw error;
+        invalidProposal();
+    }
+    if (findSecret(canonicalJson(snapshot)))
+        securityRejected();
+    try {
+        const validated = validateRecordInput({
+            workspace: input.workspace,
+            kind: snapshot.kind,
+            status: 'candidate',
+            title: snapshot.title,
+            body: snapshot.body,
+            summary: snapshot.summary,
+            scope: snapshot.scope,
+            provenance: { type: 'ledger_promotion', reference },
+            trustLevel: 'untrusted',
+            confidence: PROMOTION_CONFIDENCE,
+            tags: snapshot.tags,
+            createdBy: input.actor,
+            actor: input.actor,
+        });
+        return {
+            workspace: validated.workspace,
+            kind: validated.kind,
+            status: 'candidate',
+            title: validated.title,
+            body: validated.body,
+            summary: validated.summary,
+            scope: validated.scope,
+            provenance: validated.provenance,
+            trustLevel: 'untrusted',
+            confidence: PROMOTION_CONFIDENCE,
+            tags: validated.tags,
+            createdBy: input.actor,
+            actor: input.actor,
+        };
+    }
+    catch (error) {
+        if (error instanceof KiokukoError && error.code === 'SECURITY_REJECTION')
+            securityRejected();
+        invalidProposal();
+    }
+}
+function loadSource(database, input) {
+    const event = database.prepare(`
+    SELECT e.sequence, e.event_type, e.payload_json
+      FROM ledger_events AS e
+      JOIN ledger_runs AS r ON r.run_id = e.run_id AND r.workspace = ?
+     WHERE e.run_id = ? AND e.event_id = ?
+  `).get(input.workspace, input.runId, input.proposalEventId);
+    if (!event || event.event_type !== 'memory.proposed')
+        notFound();
+    let payload;
+    try {
+        payload = JSON.parse(event.payload_json);
+    }
+    catch {
+        invalidProposal();
+    }
+    let deliveryId = null;
+    let intakeId = null;
+    if (input.deliveryId !== undefined) {
+        const delivery = database.prepare(`
+      SELECT cd.delivery_id, cd.through_sequence, cd.intake_session_id
+        FROM context_deliveries AS cd
+        JOIN ledger_runs AS r ON r.run_id = cd.run_id AND r.workspace = ?
+       WHERE cd.run_id = ? AND cd.delivery_id = ?
+    `).get(input.workspace, input.runId, input.deliveryId);
+        if (!delivery)
+            notFound();
+        // Policy: a delivery relates to a proposal only when its ledger cursor includes that event.
+        if (delivery.through_sequence < event.sequence)
+            conflict();
+        deliveryId = delivery.delivery_id;
+        intakeId = delivery.intake_session_id;
+    }
+    return { sequence: event.sequence, payload, deliveryId, intakeId };
+}
+function buildReference(input, source) {
+    const value = { eventId: input.proposalEventId, runId: input.runId };
+    if (source.deliveryId !== null)
+        value.deliveryId = source.deliveryId;
+    if (source.intakeId !== null)
+        value.intakeId = source.intakeId;
+    const reference = canonicalJson(value);
+    if (Buffer.byteLength(reference, 'utf8') > MAX_REFERENCE_BYTES)
+        validation(INVALID_INPUT);
+    return reference;
+}
+function sameOptional(left, right) {
+    return left === right;
+}
+function linkView(row) {
+    return {
+        linkId: row.link_id,
+        runId: row.run_id,
+        eventId: row.event_id,
+        deliveryId: row.delivery_id,
+        entryId: row.entry_id,
+        createdAt: row.created_at,
+        untrusted: true,
+    };
+}
+function readExistingLink(database, input, entryId) {
+    return database.prepare(`
+    SELECT link_id, run_id, event_id, delivery_id, entry_id, created_at
+      FROM ledger_memory_links
+     WHERE run_id = ? AND event_id = ? AND entry_id = ?
+  `).get(input.runId, input.proposalEventId, entryId);
+}
+function contentIdentity(value) {
+    return canonicalJson({
+        kind: value.kind,
+        title: value.title,
+        body: value.body,
+        summary: value.summary,
+        scope: value.scope,
+        tags: value.tags,
+    });
+}
+function findSameContentEntry(database, input, memoryInput) {
+    const rows = database.prepare(`
+    SELECT id
+      FROM entries AS e
+      JOIN entry_revisions AS r ON r.entry_id = e.id AND r.revision = e.current_revision
+     WHERE e.workspace = ? AND r.kind = ? AND r.title = ? AND r.body = ? AND r.summary IS ?
+  `).all(input.workspace, memoryInput.kind, memoryInput.title, memoryInput.body, memoryInput.summary ?? null);
+    const expected = contentIdentity({
+        kind: memoryInput.kind,
+        title: memoryInput.title,
+        body: memoryInput.body,
+        summary: memoryInput.summary ?? null,
+        scope: memoryInput.scope ?? {},
+        tags: memoryInput.tags ?? [],
+    });
+    for (const row of rows) {
+        const entry = readEntry(database, { workspace: input.workspace, entryId: row.id });
+        if (contentIdentity(entry) === expected)
+            return entry;
+    }
+    return undefined;
+}
+function promotePreparedInTransaction(database, prepared) {
+    const current = loadSource(database, prepared.input);
+    const currentReference = buildReference(prepared.input, current);
+    const currentMemoryInput = parseProposalPayload(current.payload, prepared.input, currentReference);
+    const currentHash = canonicalContentHash({
+        kind: currentMemoryInput.kind,
+        title: currentMemoryInput.title,
+        body: currentMemoryInput.body,
+        summary: currentMemoryInput.summary ?? null,
+        scope: currentMemoryInput.scope ?? {},
+        provenance: currentMemoryInput.provenance ?? {},
+        tags: currentMemoryInput.tags ?? [],
+    });
+    if (currentHash !== prepared.contentHash || currentReference !== prepared.reference)
+        conflict();
+    const hashExisting = database.prepare(`
+    SELECT id, status, trust_level
+      FROM entries AS e
+      JOIN entry_revisions AS r ON r.entry_id = e.id AND r.revision = e.current_revision
+     WHERE e.workspace = ? AND r.content_hash = ?
+  `).get(prepared.input.workspace, prepared.contentHash);
+    const contentExisting = hashExisting === undefined
+        ? findSameContentEntry(database, prepared.input, prepared.memoryInput)
+        : undefined;
+    const existing = hashExisting ?? (contentExisting === undefined ? undefined : {
+        id: contentExisting.id,
+        status: contentExisting.status,
+        trust_level: contentExisting.trustLevel,
+    });
+    if (existing && (existing.status !== 'candidate' || existing.trust_level !== 'untrusted'))
+        conflict();
+    const sourceLink = database.prepare(`
+    SELECT link_id, run_id, event_id, delivery_id, entry_id, created_at
+      FROM ledger_memory_links
+     WHERE run_id = ? AND event_id = ?
+  `).get(prepared.input.runId, prepared.input.proposalEventId);
+    if (sourceLink) {
+        if (!existing || sourceLink.entry_id !== existing.id || !sameOptional(sourceLink.delivery_id, prepared.source.deliveryId))
+            conflict();
+        const entry = readEntry(database, { workspace: prepared.input.workspace, entryId: existing.id });
+        return { entry, link: linkView(sourceLink), untrusted: true };
+    }
+    if (existing) {
+        const exactLink = readExistingLink(database, prepared.input, existing.id);
+        if (exactLink && sameOptional(exactLink.delivery_id, prepared.source.deliveryId)) {
+            const entry = readEntry(database, { workspace: prepared.input.workspace, entryId: existing.id });
+            return { entry, link: linkView(exactLink), untrusted: true };
+        }
+        conflict();
+    }
+    const entry = recordEntryInTransaction(database, prepared.memoryInput, { now: prepared.input.createdAt });
+    const linkId = randomUUID();
+    database.prepare(`
+    INSERT INTO ledger_memory_links (link_id, run_id, event_id, delivery_id, entry_id, created_at)
+    VALUES (?, ?, ?, ?, ?, ?)
+  `).run(linkId, prepared.input.runId, prepared.input.proposalEventId, prepared.source.deliveryId, entry.id, prepared.input.createdAt);
+    const link = database.prepare(`
+    SELECT link_id, run_id, event_id, delivery_id, entry_id, created_at
+      FROM ledger_memory_links
+     WHERE link_id = ?
+  `).get(linkId);
+    if (!link)
+        throw new KiokukoError('INTEGRITY_ERROR', 'Ledger promotion link could not be read back');
+    return { entry, link: linkView(link), untrusted: true };
+}
+function preparePromotion(database, value) {
+    const input = parseInput(value);
+    const source = loadSource(database, input);
+    const reference = buildReference(input, source);
+    const memoryInput = parseProposalPayload(source.payload, input, reference);
+    const contentHash = canonicalContentHash({
+        kind: memoryInput.kind,
+        title: memoryInput.title,
+        body: memoryInput.body,
+        summary: memoryInput.summary ?? null,
+        scope: memoryInput.scope ?? {},
+        provenance: memoryInput.provenance ?? {},
+        tags: memoryInput.tags ?? [],
+    });
+    return { input, memoryInput, contentHash, reference, source };
+}
+export function promoteLedgerProposal(database, input) {
+    const prepared = preparePromotion(database, input);
+    return withImmediateTransaction(database, () => promotePreparedInTransaction(database, prepared));
+}
+export function promoteLedgerProposalInTransaction(database, input) {
+    const prepared = preparePromotion(database, input);
+    return promotePreparedInTransaction(database, prepared);
+}
+//# sourceMappingURL=promotion.js.map

package/dist/ledger/promotion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"promotion.js","sourceRoot":"","sources":["../../src/ledger/promotion.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAA2C,MAAM,sBAAsB,CAAC;AACpH,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,mBAAmB,GAEpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEpE,MAAM,qBAAqB,GAAG,6CAA6C,CAAC;AAC5E,MAAM,aAAa,GAAG,gCAAgC,CAAC;AACvD,MAAM,kBAAkB,GAAG,2BAA2B,CAAC;AACvD,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AACnD,MAAM,0BAA0B,GAAG,yDAAyD,CAAC;AAC7F,MAAM,kBAAkB,GAAG,qDAAqD,CAAC;AACjF,MAAM,mBAAmB,GAAG,gDAAgD,CAAC;AAC7E,MAAM,mBAAmB,GAAG,CAAC,GAAG,IAAI,CAAC;AACrC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,iFAAiF;AACjF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AACvF,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AAqEnI,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,QAAQ;IACf,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,QAAQ;IACf,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,0BAA0B,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,aAAa,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,aAAa,CAAC,CAAC;IACxI,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,aAAa,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK;QAAE,UAAU,CAAC,aAAa,CAAC,CAAC;IACpG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAE,UAAU,CAAC,aAAa,CAAC,CAAC;IAC3H,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI;QAAE,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,CAAC;IAChG,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAChG,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACtH,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAgB,EAAE,KAA8B,EAAE,SAAiB;IAC/F,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAE,eAAe,EAAE,CAAC;IACrH,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,uBAAuB;YAAE,eAAe,EAAE,CAAC;QACvF,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAY,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY;YAAE,MAAM,KAAK,CAAC;QAC/C,eAAe,EAAE,CAAC;IACpB,CAAC;IACD,IAAI,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAAE,gBAAgB,EAAE,CAAC;IAE5D,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,mBAAmB,CAAC;YACpC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,IAAI,EAAG,QAAoC,CAAC,IAAI;YAChD,MAAM,EAAE,WAAW;YACnB,KAAK,EAAG,QAAoC,CAAC,KAAK;YAClD,IAAI,EAAG,QAAoC,CAAC,IAAI;YAChD,OAAO,EAAG,QAAoC,CAAC,OAAO;YACtD,KAAK,EAAG,QAAoC,CAAC,KAAK;YAClD,UAAU,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE;YACnD,UAAU,EAAE,WAAW;YACvB,UAAU,EAAE,oBAAoB;YAChC,IAAI,EAAG,QAAoC,CAAC,IAAI;YAChD,SAAS,EAAE,KAAK,CAAC,KAAK;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;QACH,OAAO;YACL,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,UAAU,EAAE,WAAW;YACvB,UAAU,EAAE,oBAAoB;YAChC,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,SAAS,EAAE,KAAK,CAAC,KAAK;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB;YAAE,gBAAgB,EAAE,CAAC;QAC7F,eAAe,EAAE,CAAC;IACpB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,QAAwB,EAAE,KAA8B;IAC1E,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC;;;;;GAK9B,CAAC,CAAC,GAAG,CAAW,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IACtE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,KAAK,iBAAiB;QAAE,QAAQ,EAAE,CAAC;IAEjE,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAY,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,eAAe,EAAE,CAAC;IACpB,CAAC;IAED,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC;;;;;KAKjC,CAAC,CAAC,GAAG,CAAc,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACpE,IAAI,CAAC,QAAQ;YAAE,QAAQ,EAAE,CAAC;QAC1B,4FAA4F;QAC5F,IAAI,QAAQ,CAAC,gBAAgB,GAAG,KAAK,CAAC,QAAQ;YAAE,QAAQ,EAAE,CAAC;QAC3D,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC;QAClC,QAAQ,GAAG,QAAQ,CAAC,iBAAiB,CAAC;IACxC,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,cAAc,CAAC,KAA8B,EAAE,MAAsB;IAC5E,MAAM,KAAK,GAAe,EAAE,OAAO,EAAE,KAAK,CAAC,eAAe,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IACjF,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI;QAAE,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACrE,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;QAAE,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC/D,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,mBAAmB;QAAE,UAAU,CAAC,aAAa,CAAC,CAAC;IAC1F,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,IAAmB,EAAE,KAAoB;IAC7D,OAAO,IAAI,KAAK,KAAK,CAAC;AACxB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY;IAC5B,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,KAAK,EAAE,GAAG,CAAC,MAAM;QACjB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAwB,EAAE,KAA8B,EAAE,OAAe;IACjG,OAAO,QAAQ,CAAC,OAAO,CAAC;;;;GAIvB,CAAC,CAAC,GAAG,CAAU,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,eAAe,CAAC,KAOxB;IACC,OAAO,aAAa,CAAC;QACnB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAwB,EAAE,KAA8B,EAAE,WAA6B;IACnH,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC;;;;;GAK7B,CAAC,CAAC,GAAG,CACJ,KAAK,CAAC,SAAS,EACf,WAAW,CAAC,IAAI,EAChB,WAAW,CAAC,KAAK,EACjB,WAAW,CAAC,IAAI,EAChB,WAAW,CAAC,OAAO,IAAI,IAAI,CAC5B,CAAC;IACF,MAAM,QAAQ,GAAG,eAAe,CAAC;QAC/B,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,OAAO,EAAE,WAAW,CAAC,OAAO,IAAI,IAAI;QACpC,KAAK,EAAE,WAAW,CAAC,KAAK,IAAI,EAAE;QAC9B,IAAI,EAAE,WAAW,CAAC,IAAI,IAAI,EAAE;KAC7B,CAAC,CAAC;IACH,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACnF,IAAI,eAAe,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;IACxD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,4BAA4B,CAAC,QAAwB,EAAE,QAA2B;IACzF,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG,cAAc,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACnG,MAAM,WAAW,GAAG,oBAAoB,CAAC;QACvC,IAAI,EAAE,kBAAkB,CAAC,IAAI;QAC7B,KAAK,EAAE,kBAAkB,CAAC,KAAK;QAC/B,IAAI,EAAE,kBAAkB,CAAC,IAAI;QAC7B,OAAO,EAAE,kBAAkB,CAAC,OAAO,IAAI,IAAI;QAC3C,KAAK,EAAE,kBAAkB,CAAC,KAAK,IAAI,EAAE;QACrC,UAAU,EAAE,kBAAkB,CAAC,UAAU,IAAI,EAAE;QAC/C,IAAI,EAAE,kBAAkB,CAAC,IAAI,IAAI,EAAE;KACpC,CAAC,CAAC;IACH,IAAI,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,gBAAgB,KAAK,QAAQ,CAAC,SAAS;QAAE,QAAQ,EAAE,CAAC;IAEhG,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC;;;;;GAKrC,CAAC,CAAC,GAAG,CAAmB,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IACzE,MAAM,eAAe,GAAG,YAAY,KAAK,SAAS;QAChD,CAAC,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC;QACtE,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,QAAQ,GAAG,YAAY,IAAI,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5E,EAAE,EAAE,eAAe,CAAC,EAAE;QACtB,MAAM,EAAE,eAAe,CAAC,MAAM;QAC9B,WAAW,EAAE,eAAe,CAAC,UAAU;KACxC,CAAC,CAAC;IACH,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,WAAW,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW,CAAC;QAAE,QAAQ,EAAE,CAAC;IAEtG,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC;;;;GAInC,CAAC,CAAC,GAAG,CAAU,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAEtE,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC,QAAQ,IAAI,UAAU,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;YAAE,QAAQ,EAAE,CAAC;QACtI,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QACjG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAChE,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1E,IAAI,SAAS,IAAI,YAAY,CAAC,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YACjF,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YACjG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC/D,CAAC;QACD,QAAQ,EAAE,CAAC;IACb,CAAC;IAED,MAAM,KAAK,GAAG,wBAAwB,CAAC,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAC1G,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC;;;GAGhB,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrI,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC;;;;GAI7B,CAAC,CAAC,GAAG,CAAU,MAAM,CAAC,CAAC;IACxB,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,8CAA8C,CAAC,CAAC;IACrG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAwB,EAAE,KAAc;IAChE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,oBAAoB,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,oBAAoB,CAAC;QACvC,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,OAAO,EAAE,WAAW,CAAC,OAAO,IAAI,IAAI;QACpC,KAAK,EAAE,WAAW,CAAC,KAAK,IAAI,EAAE;QAC9B,UAAU,EAAE,WAAW,CAAC,UAAU,IAAI,EAAE;QACxC,IAAI,EAAE,WAAW,CAAC,IAAI,IAAI,EAAE;KAC7B,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAwB,EAAE,KAAc;IAC5E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACnD,OAAO,wBAAwB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,4BAA4B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,QAAwB,EAAE,KAAc;IACzF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACnD,OAAO,4BAA4B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC1D,CAAC"}

package/dist/ledger/query.d.ts

@@ -0,0 +1,41 @@
+import type { SqliteDatabase } from '../db/adapter.js';
+import { type JsonObject, type JsonValue, type Redaction, type RunRecord } from './types.js';
+export interface LedgerRunView extends Omit<RunRecord, 'title' | 'metadata'> {
+    title: string | null;
+    metadata: JsonObject;
+    untrusted: true;
+}
+export interface LedgerRunsPage {
+    items: LedgerRunView[];
+    nextCursor: string | null;
+}
+export interface ReadLedgerRunInput {
+    workspace: string;
+    runId: string;
+}
+export interface LedgerEventView {
+    eventId: string;
+    runId: string;
+    sequence: number;
+    sourceEventId: string | null;
+    sourceSequence: number | null;
+    eventType: string;
+    sourceType: string | null;
+    actor: string;
+    outcome: string | null;
+    occurredAt: string | null;
+    ingestedAt: string;
+    payload: JsonValue;
+    redaction: Redaction[];
+    previousHash: string;
+    eventHash: string;
+    untrusted: true;
+}
+export interface LedgerEventsPage {
+    items: LedgerEventView[];
+    nextCursor: number | null;
+}
+export declare function listLedgerEvents(database: SqliteDatabase, input: unknown): LedgerEventsPage;
+export declare function readLedgerRun(database: SqliteDatabase, input: unknown): LedgerRunView;
+export declare function listLedgerRuns(database: SqliteDatabase, input: unknown): LedgerRunsPage;
+//# sourceMappingURL=query.d.ts.map

package/dist/ledger/query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../../src/ledger/query.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAa,MAAM,kBAAkB,CAAC;AAElE,OAAO,EAKL,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,SAAS,EAGf,MAAM,YAAY,CAAC;AAmDpB,MAAM,WAAW,aAAc,SAAQ,IAAI,CAAC,SAAS,EAAE,OAAO,GAAG,UAAU,CAAC;IAC1E,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,UAAU,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,SAAS,CAAC;IACnB,SAAS,EAAE,SAAS,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAwPD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAwB3F;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,GAAG,aAAa,CAYrF;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,GAAG,cAAc,CAgCvF"}