limen-ai 1.0.0

package/dist/kernel/database/database_lifecycle.js

@@ -0,0 +1,404 @@
+/**
+ * SQLite database lifecycle implementation.
+ * S ref: §3.1, §3.4, §3.6, I-01, I-05, C-05, FM-05
+ *
+ * Phase: 1 (Kernel) -- Build Order 1
+ * Foundation: everything else depends on this.
+ *
+ * §3.1: SQLite foundation -- single-file database.
+ * §3.4: WAL mode, ACID transactions, crash recovery.
+ * §3.6: Entire engine state in dataDir. Backup = cp -r.
+ * I-01: Only production dependency is better-sqlite3.
+ * I-05: Database never in inconsistent state.
+ * C-05: Forward-only migrations.
+ * FM-05: WAL mode + busy timeout + foreign keys.
+ */
+import Database from 'better-sqlite3';
+import { mkdirSync, existsSync, copyFileSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+import { createHash } from 'node:crypto';
+// ─── Genesis hash: SHA-256 of empty string ───
+// Anchors the audit chain. Well-known constant per SDD A06-3.
+const GENESIS_HASH = 'e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855';
+/** Default busy timeout in milliseconds. S ref: FM-05. */
+const DEFAULT_BUSY_TIMEOUT_MS = 5000;
+/**
+ * Create a DatabaseConnection wrapping a better-sqlite3 instance.
+ * S ref: §3.4 (ACID), I-05 (transactional consistency), FM-05 (WAL + busy timeout)
+ */
+function createConnection(db, dataDir, schemaVersion, tenancyMode, onClose) {
+    const conn = {
+        dataDir,
+        schemaVersion,
+        tenancyMode,
+        /** §3.4: Execute within transaction. Automatic rollback on throw. I-05. */
+        transaction(fn) {
+            const txn = db.transaction(fn);
+            return txn();
+        },
+        /** §3.4: Run prepared statement. */
+        run(sql, params) {
+            const stmt = db.prepare(sql);
+            const result = params ? stmt.run(...params) : stmt.run();
+            return { changes: result.changes, lastInsertRowid: result.lastInsertRowid };
+        },
+        /** §3.4: Query with results. */
+        query(sql, params) {
+            const stmt = db.prepare(sql);
+            return (params ? stmt.all(...params) : stmt.all());
+        },
+        /** §3.4: Single result. */
+        get(sql, params) {
+            const stmt = db.prepare(sql);
+            return (params ? stmt.get(...params) : stmt.get());
+        },
+        /** I-05: Graceful close with WAL checkpoint. FO-003: Cleanup tracking map. */
+        close() {
+            try {
+                db.pragma('wal_checkpoint(TRUNCATE)');
+                db.close();
+                onClose?.();
+                return { ok: true, value: undefined };
+            }
+            catch (err) {
+                return {
+                    ok: false,
+                    error: {
+                        code: 'DATABASE_CLOSE_FAILED',
+                        message: err instanceof Error ? err.message : String(err),
+                        spec: 'I-05',
+                    },
+                };
+            }
+        },
+    };
+    return conn;
+}
+/**
+ * Get current schema version from core_migrations table.
+ * Returns 0 if the table does not exist yet.
+ */
+function getCurrentSchemaVersion(db) {
+    try {
+        const row = db.prepare(`SELECT MAX(version) as version FROM core_migrations WHERE status = 'applied'`).get();
+        return row?.version ?? 0;
+    }
+    catch {
+        // Table doesn't exist yet
+        return 0;
+    }
+}
+/**
+ * Create the core_migrations table if it does not exist.
+ * S ref: C-05 (forward-only migrations), C-09 (core_ prefix)
+ */
+function ensureMigrationsTable(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS core_migrations (
+      version     INTEGER PRIMARY KEY,
+      name        TEXT    NOT NULL,
+      checksum    TEXT    NOT NULL,
+      applied_at  TEXT    NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ','now')),
+      duration_ms INTEGER NOT NULL DEFAULT 0,
+      status      TEXT    NOT NULL DEFAULT 'applied' CHECK (status IN ('applied','failed'))
+    );
+  `);
+}
+// ─── DatabaseLifecycle Implementation ───
+/**
+ * Create a DatabaseLifecycle implementation.
+ * S ref: §3.1, §3.4, §3.6, I-01, I-05, C-05, FM-05
+ */
+export function createDatabaseLifecycle() {
+    /** Map of open databases for cleanup tracking */
+    const openDatabases = new Map();
+    return {
+        /**
+         * Open database, configure WAL mode, set pragmas, return connection.
+         * S ref: §3.4 (WAL mode), §3.6 (dataDir), I-05 (consistent state), FM-05 (busy timeout)
+         */
+        open(config) {
+            try {
+                const { dataDir, tenancy, busyTimeoutMs = DEFAULT_BUSY_TIMEOUT_MS } = config;
+                // §3.6: Create dataDir if it doesn't exist
+                if (!existsSync(dataDir)) {
+                    mkdirSync(dataDir, { recursive: true });
+                }
+                const dbPath = join(dataDir, 'limen.db');
+                const db = new Database(dbPath);
+                // §3.4: WAL mode for crash safety
+                db.pragma('journal_mode = WAL');
+                // FM-05: Busy timeout to prevent SQLITE_BUSY
+                db.pragma(`busy_timeout = ${busyTimeoutMs}`);
+                // I-05: Foreign key enforcement
+                db.pragma('foreign_keys = ON');
+                // Performance: synchronous NORMAL is safe with WAL
+                db.pragma('synchronous = NORMAL');
+                // CF-022 DB-01: Production PRAGMAs for operational hardening
+                db.pragma('journal_size_limit = 67108864'); // 64MB WAL journal cap
+                db.pragma('cache_size = -20000'); // 20MB page cache (negative = KiB)
+                db.pragma('mmap_size = 268435456'); // 256MB memory-mapped I/O
+                // Ensure core_migrations table exists
+                ensureMigrationsTable(db);
+                const schemaVersion = getCurrentSchemaVersion(db);
+                // CF-022 DB-03: Validate no failed migrations on startup.
+                // A failed migration indicates the schema is in an unknown state
+                // and must not be used until resolved.
+                try {
+                    const failedRow = db.prepare(`SELECT version, name FROM core_migrations WHERE status = 'failed' LIMIT 1`).get();
+                    if (failedRow) {
+                        return {
+                            ok: false,
+                            error: {
+                                code: 'SCHEMA_INVALID',
+                                message: `Failed migration detected: v${failedRow.version} (${failedRow.name}). Database schema is in unknown state.`,
+                                spec: 'C-05, I-05',
+                            },
+                        };
+                    }
+                }
+                catch {
+                    // core_migrations table may not exist yet (first open) — that's fine
+                }
+                // Track for cleanup
+                openDatabases.set(dataDir, db);
+                // FO-003: Pass cleanup callback to remove stale entry when connection is closed
+                const conn = createConnection(db, dataDir, schemaVersion, tenancy.mode, () => {
+                    openDatabases.delete(dataDir);
+                });
+                return { ok: true, value: conn };
+            }
+            catch (err) {
+                return {
+                    ok: false,
+                    error: {
+                        code: 'DATABASE_OPEN_FAILED',
+                        message: err instanceof Error ? err.message : String(err),
+                        spec: '§3.4, I-05',
+                    },
+                };
+            }
+        },
+        /**
+         * Run all pending forward-only migrations.
+         * Each migration runs in its own transaction.
+         * Checksum verification prevents tampered migration files.
+         * S ref: C-05 (forward-only migrations)
+         */
+        migrate(conn, migrations) {
+            try {
+                const db = openDatabases.get(conn.dataDir);
+                if (!db) {
+                    return {
+                        ok: false,
+                        error: { code: 'DATABASE_NOT_OPEN', message: 'No open database for this connection', spec: '§3.4' },
+                    };
+                }
+                const currentVersion = getCurrentSchemaVersion(db);
+                // Sort migrations by version
+                const sorted = [...migrations].sort((a, b) => a.version - b.version);
+                // Filter to only pending migrations
+                const pending = sorted.filter(m => m.version > currentVersion);
+                const applied = [];
+                for (const migration of pending) {
+                    // C-05: Verify checksum
+                    const computedChecksum = createHash('sha256').update(migration.sql).digest('hex');
+                    if (computedChecksum !== migration.checksum) {
+                        return {
+                            ok: false,
+                            error: {
+                                code: 'MIGRATION_CHECKSUM_MISMATCH',
+                                message: `Migration ${migration.version} (${migration.name}): expected checksum ${migration.checksum}, got ${computedChecksum}`,
+                                spec: 'C-05',
+                            },
+                        };
+                    }
+                    const startTime = performance.now();
+                    try {
+                        // Each migration in its own transaction
+                        db.transaction(() => {
+                            db.exec(migration.sql);
+                            db.prepare(`INSERT INTO core_migrations (version, name, checksum, duration_ms, status)
+                 VALUES (?, ?, ?, ?, 'applied')`).run(migration.version, migration.name, migration.checksum, 0);
+                        })();
+                        const durationMs = Math.round(performance.now() - startTime);
+                        // Update duration after the fact
+                        db.prepare('UPDATE core_migrations SET duration_ms = ? WHERE version = ?')
+                            .run(durationMs, migration.version);
+                        applied.push({ version: migration.version, name: migration.name, durationMs });
+                    }
+                    catch (err) {
+                        // Record failed migration
+                        try {
+                            db.prepare(`INSERT OR REPLACE INTO core_migrations (version, name, checksum, status)
+                 VALUES (?, ?, ?, 'failed')`).run(migration.version, migration.name, migration.checksum);
+                        }
+                        catch {
+                            // Best effort to record failure
+                        }
+                        return {
+                            ok: false,
+                            error: {
+                                code: 'MIGRATION_FAILED',
+                                message: `Migration ${migration.version} (${migration.name}) failed: ${err instanceof Error ? err.message : String(err)}`,
+                                spec: 'C-05',
+                            },
+                        };
+                    }
+                }
+                const newVersion = getCurrentSchemaVersion(db);
+                return {
+                    ok: true,
+                    value: {
+                        applied: applied.length,
+                        currentVersion: newVersion,
+                        migrations: applied,
+                    },
+                };
+            }
+            catch (err) {
+                return {
+                    ok: false,
+                    error: {
+                        code: 'MIGRATION_ERROR',
+                        message: err instanceof Error ? err.message : String(err),
+                        spec: 'C-05',
+                    },
+                };
+            }
+        },
+        /**
+         * Verify current schema matches expected version.
+         * S ref: C-05 (migration integrity verification)
+         */
+        verifySchema(conn) {
+            try {
+                const db = openDatabases.get(conn.dataDir);
+                if (!db) {
+                    return {
+                        ok: false,
+                        error: { code: 'DATABASE_NOT_OPEN', message: 'No open database for this connection', spec: '§3.4' },
+                    };
+                }
+                const currentVersion = getCurrentSchemaVersion(db);
+                const rows = db.prepare(`SELECT version FROM core_migrations WHERE status = 'applied' ORDER BY version`).all();
+                // Detect gaps in applied migrations
+                const missingMigrations = [];
+                if (rows.length > 0) {
+                    for (let v = 1; v <= currentVersion; v++) {
+                        if (!rows.some(r => r.version === v)) {
+                            missingMigrations.push(v);
+                        }
+                    }
+                }
+                return {
+                    ok: true,
+                    value: {
+                        valid: missingMigrations.length === 0,
+                        currentVersion,
+                        expectedVersion: currentVersion,
+                        missingMigrations,
+                    },
+                };
+            }
+            catch (err) {
+                return {
+                    ok: false,
+                    error: {
+                        code: 'SCHEMA_VERIFY_FAILED',
+                        message: err instanceof Error ? err.message : String(err),
+                        spec: 'C-05',
+                    },
+                };
+            }
+        },
+        /**
+         * Export entire database to .limen archive.
+         * S ref: §3.6 ("limen export produces single .limen archive for transfer")
+         */
+        export(conn, outputPath) {
+            try {
+                const db = openDatabases.get(conn.dataDir);
+                if (!db) {
+                    return {
+                        ok: false,
+                        error: { code: 'DATABASE_NOT_OPEN', message: 'No open database for this connection', spec: '§3.6' },
+                    };
+                }
+                // Checkpoint WAL before export
+                db.pragma('wal_checkpoint(TRUNCATE)');
+                // Copy database file
+                const dbPath = join(conn.dataDir, 'limen.db');
+                copyFileSync(dbPath, outputPath);
+                const stats = statSync(outputPath);
+                return {
+                    ok: true,
+                    value: {
+                        path: outputPath,
+                        sizeBytes: stats.size,
+                    },
+                };
+            }
+            catch (err) {
+                return {
+                    ok: false,
+                    error: {
+                        code: 'EXPORT_FAILED',
+                        message: err instanceof Error ? err.message : String(err),
+                        spec: '§3.6',
+                    },
+                };
+            }
+        },
+        /**
+         * Get database health status.
+         * S ref: I-05 (consistency check)
+         */
+        health(conn) {
+            try {
+                const db = openDatabases.get(conn.dataDir);
+                if (!db) {
+                    return {
+                        ok: false,
+                        error: { code: 'DATABASE_NOT_OPEN', message: 'No open database for this connection', spec: 'I-05' },
+                    };
+                }
+                // CF-022 DB-02: quick_check instead of integrity_check for health hot path.
+                // integrity_check is O(n) full database scan — too slow for routine health checks.
+                // quick_check validates B-tree structure without verifying row content.
+                const integrityResult = db.pragma('quick_check');
+                const integrityOk = integrityResult.length === 1 && integrityResult[0]?.quick_check === 'ok';
+                // Page info
+                const pageCount = db.pragma('page_count')[0]?.page_count ?? 0;
+                const freePages = db.pragma('freelist_count')[0]?.freelist_count ?? 0;
+                // WAL size (pages)
+                const walCheckpoint = db.pragma('wal_checkpoint(PASSIVE)');
+                const walSize = walCheckpoint[0]?.log ?? 0;
+                const schemaVersion = getCurrentSchemaVersion(db);
+                return {
+                    ok: true,
+                    value: {
+                        status: integrityOk ? 'healthy' : 'unhealthy',
+                        walSize,
+                        pageCount,
+                        freePages,
+                        schemaVersion,
+                        integrityOk,
+                    },
+                };
+            }
+            catch (err) {
+                return {
+                    ok: false,
+                    error: {
+                        code: 'HEALTH_CHECK_FAILED',
+                        message: err instanceof Error ? err.message : String(err),
+                        spec: 'I-05',
+                    },
+                };
+            }
+        },
+    };
+}
+export { GENESIS_HASH };
+//# sourceMappingURL=database_lifecycle.js.map

package/dist/kernel/database/database_lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database_lifecycle.js","sourceRoot":"","sources":["../../../src/kernel/database/database_lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC,gDAAgD;AAChD,8DAA8D;AAC9D,MAAM,YAAY,GAAG,kEAAkE,CAAC;AAExF,0DAA0D;AAC1D,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC;;;GAGG;AACH,SAAS,gBAAgB,CACvB,EAAqB,EACrB,OAAe,EACf,aAAqB,EACrB,WAA8C,EAC9C,OAAoB;IAEpB,MAAM,IAAI,GAAuB;QAC/B,OAAO;QACP,aAAa;QACb,WAAW;QAEX,2EAA2E;QAC3E,WAAW,CAAI,EAAW;YACxB,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAC/B,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;QAED,oCAAoC;QACpC,GAAG,CAAC,GAAW,EAAE,MAAkB;YACjC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACzD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;QAC9E,CAAC;QAED,gCAAgC;QAChC,KAAK,CAAI,GAAW,EAAE,MAAkB;YACtC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAQ,CAAC;QAC5D,CAAC;QAED,2BAA2B;QAC3B,GAAG,CAAI,GAAW,EAAE,MAAkB;YACpC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAkB,CAAC;QACtE,CAAC;QAED,8EAA8E;QAC9E,KAAK;YACH,IAAI,CAAC;gBACH,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;gBACtC,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,EAAE,EAAE,CAAC;gBACZ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YACxC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE;wBACL,IAAI,EAAE,uBAAuB;wBAC7B,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;wBACzD,IAAI,EAAE,MAAM;qBACb;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;IAEF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAAC,EAAqB;IACpD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CACpB,8EAA8E,CAC/E,CAAC,GAAG,EAA4C,CAAC;QAClD,OAAO,GAAG,EAAE,OAAO,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;QAC1B,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,EAAqB;IAClD,EAAE,CAAC,IAAI,CAAC;;;;;;;;;GASP,CAAC,CAAC;AACL,CAAC;AAED,2CAA2C;AAE3C;;;GAGG;AACH,MAAM,UAAU,uBAAuB;IACrC,iDAAiD;IACjD,MAAM,aAAa,GAAG,IAAI,GAAG,EAA6B,CAAC;IAE3D,OAAO;QACL;;;WAGG;QACH,IAAI,CAAC,MAAsB;YACzB,IAAI,CAAC;gBACH,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,GAAG,uBAAuB,EAAE,GAAG,MAAM,CAAC;gBAE7E,2CAA2C;gBAC3C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBACzB,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1C,CAAC;gBAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBACzC,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAEhC,kCAAkC;gBAClC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBAEhC,6CAA6C;gBAC7C,EAAE,CAAC,MAAM,CAAC,kBAAkB,aAAa,EAAE,CAAC,CAAC;gBAE7C,gCAAgC;gBAChC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;gBAE/B,mDAAmD;gBACnD,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;gBAElC,6DAA6D;gBAC7D,EAAE,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC,CAAC,uBAAuB;gBACnE,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAY,mCAAmC;gBAChF,EAAE,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAU,0BAA0B;gBAEvE,sCAAsC;gBACtC,qBAAqB,CAAC,EAAE,CAAC,CAAC;gBAE1B,MAAM,aAAa,GAAG,uBAAuB,CAAC,EAAE,CAAC,CAAC;gBAElD,0DAA0D;gBAC1D,iEAAiE;gBACjE,uCAAuC;gBACvC,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAC1B,2EAA2E,CAC5E,CAAC,GAAG,EAAmD,CAAC;oBACzD,IAAI,SAAS,EAAE,CAAC;wBACd,OAAO;4BACL,EAAE,EAAE,KAAK;4BACT,KAAK,EAAE;gCACL,IAAI,EAAE,gBAAgB;gCACtB,OAAO,EAAE,+BAA+B,SAAS,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,yCAAyC;gCACrH,IAAI,EAAE,YAAY;6BACnB;yBACF,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,qEAAqE;gBACvE,CAAC;gBAED,oBAAoB;gBACpB,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAE/B,gFAAgF;gBAChF,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE;oBAC3E,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAChC,CAAC,CAAC,CAAC;gBACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACnC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE;wBACL,IAAI,EAAE,sBAAsB;wBAC5B,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;wBACzD,IAAI,EAAE,YAAY;qBACnB;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED;;;;;WAKG;QACH,OAAO,CAAC,IAAwB,EAAE,UAA4B;YAC5D,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC3C,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,sCAAsC,EAAE,IAAI,EAAE,MAAM,EAAE;qBACpG,CAAC;gBACJ,CAAC;gBAED,MAAM,cAAc,GAAG,uBAAuB,CAAC,EAAE,CAAC,CAAC;gBAEnD,6BAA6B;gBAC7B,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;gBAErE,oCAAoC;gBACpC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,cAAc,CAAC,CAAC;gBAE/D,MAAM,OAAO,GAAiE,EAAE,CAAC;gBAEjF,KAAK,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;oBAChC,wBAAwB;oBACxB,MAAM,gBAAgB,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAClF,IAAI,gBAAgB,KAAK,SAAS,CAAC,QAAQ,EAAE,CAAC;wBAC5C,OAAO;4BACL,EAAE,EAAE,KAAK;4BACT,KAAK,EAAE;gCACL,IAAI,EAAE,6BAA6B;gCACnC,OAAO,EAAE,aAAa,SAAS,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,wBAAwB,SAAS,CAAC,QAAQ,SAAS,gBAAgB,EAAE;gCAC/H,IAAI,EAAE,MAAM;6BACb;yBACF,CAAC;oBACJ,CAAC;oBAED,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;oBACpC,IAAI,CAAC;wBACH,wCAAwC;wBACxC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;4BAClB,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;4BACvB,EAAE,CAAC,OAAO,CACR;gDACgC,CACjC,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;wBAClE,CAAC,CAAC,EAAE,CAAC;wBAEL,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;wBAE7D,iCAAiC;wBACjC,EAAE,CAAC,OAAO,CAAC,8DAA8D,CAAC;6BACvE,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;wBAEtC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;oBACjF,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,0BAA0B;wBAC1B,IAAI,CAAC;4BACH,EAAE,CAAC,OAAO,CACR;4CAC4B,CAC7B,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;wBAC/D,CAAC;wBAAC,MAAM,CAAC;4BACP,gCAAgC;wBAClC,CAAC;wBAED,OAAO;4BACL,EAAE,EAAE,KAAK;4BACT,KAAK,EAAE;gCACL,IAAI,EAAE,kBAAkB;gCACxB,OAAO,EAAE,aAAa,SAAS,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,aAAa,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;gCACzH,IAAI,EAAE,MAAM;6BACb;yBACF,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,MAAM,UAAU,GAAG,uBAAuB,CAAC,EAAE,CAAC,CAAC;gBAE/C,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,KAAK,EAAE;wBACL,OAAO,EAAE,OAAO,CAAC,MAAM;wBACvB,cAAc,EAAE,UAAU;wBAC1B,UAAU,EAAE,OAAO;qBACpB;iBACF,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE;wBACL,IAAI,EAAE,iBAAiB;wBACvB,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;wBACzD,IAAI,EAAE,MAAM;qBACb;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED;;;WAGG;QACH,YAAY,CAAC,IAAwB;YACnC,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC3C,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,sCAAsC,EAAE,IAAI,EAAE,MAAM,EAAE;qBACpG,CAAC;gBACJ,CAAC;gBAED,MAAM,cAAc,GAAG,uBAAuB,CAAC,EAAE,CAAC,CAAC;gBACnD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACrB,+EAA+E,CAChF,CAAC,GAAG,EAAgC,CAAC;gBAEtC,oCAAoC;gBACpC,MAAM,iBAAiB,GAAa,EAAE,CAAC;gBACvC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,cAAc,EAAE,CAAC,EAAE,EAAE,CAAC;wBACzC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;4BACrC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;wBAC5B,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,KAAK,EAAE;wBACL,KAAK,EAAE,iBAAiB,CAAC,MAAM,KAAK,CAAC;wBACrC,cAAc;wBACd,eAAe,EAAE,cAAc;wBAC/B,iBAAiB;qBAClB;iBACF,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE;wBACL,IAAI,EAAE,sBAAsB;wBAC5B,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;wBACzD,IAAI,EAAE,MAAM;qBACb;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED;;;WAGG;QACH,MAAM,CAAC,IAAwB,EAAE,UAAkB;YACjD,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC3C,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,sCAAsC,EAAE,IAAI,EAAE,MAAM,EAAE;qBACpG,CAAC;gBACJ,CAAC;gBAED,+BAA+B;gBAC/B,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;gBAEtC,qBAAqB;gBACrB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBAC9C,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;gBAEjC,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;gBAEnC,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,KAAK,EAAE;wBACL,IAAI,EAAE,UAAU;wBAChB,SAAS,EAAE,KAAK,CAAC,IAAI;qBACtB;iBACF,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE;wBACL,IAAI,EAAE,eAAe;wBACrB,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;wBACzD,IAAI,EAAE,MAAM;qBACb;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED;;;WAGG;QACH,MAAM,CAAC,IAAwB;YAC7B,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC3C,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,sCAAsC,EAAE,IAAI,EAAE,MAAM,EAAE;qBACpG,CAAC;gBACJ,CAAC;gBAED,4EAA4E;gBAC5E,mFAAmF;gBACnF,wEAAwE;gBACxE,MAAM,eAAe,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAmC,CAAC;gBACnF,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,KAAK,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE,WAAW,KAAK,IAAI,CAAC;gBAE7F,YAAY;gBACZ,MAAM,SAAS,GAAI,EAAE,CAAC,MAAM,CAAC,YAAY,CAAmC,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,CAAC,CAAC;gBACjG,MAAM,SAAS,GAAI,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAuC,CAAC,CAAC,CAAC,EAAE,cAAc,IAAI,CAAC,CAAC;gBAE7G,mBAAmB;gBACnB,MAAM,aAAa,GAAG,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAA+D,CAAC;gBACzH,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;gBAE3C,MAAM,aAAa,GAAG,uBAAuB,CAAC,EAAE,CAAC,CAAC;gBAElD,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,KAAK,EAAE;wBACL,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;wBAC7C,OAAO;wBACP,SAAS;wBACT,SAAS;wBACT,aAAa;wBACb,WAAW;qBACZ;iBACF,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE;wBACL,IAAI,EAAE,qBAAqB;wBAC3B,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;wBACzD,IAAI,EAAE,MAAM;qBACb;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,YAAY,EAAE,CAAC"}

package/dist/kernel/database/migrations.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Forward-only migration definitions for Phase 1.
+ * S ref: C-05 (forward-only migrations), C-09 (namespace prefixes)
+ *
+ * Phase: 1 (Kernel)
+ * Creates all 20 tables defined in the Synthesized SDD Section 5.
+ *
+ * Migration version 1: Core foundation (audit, encryption, vault, config, processing, task archive)
+ * Migration version 2: RBAC (policies, roles, role assignments)
+ * Migration version 3: Retention (retention policies, retention runs)
+ * Migration version 4: Events (obs_events, subscriptions, webhook deliveries)
+ * Migration version 5: HITL (approval queue, batch reviews)
+ * Migration version 6: Metering (interaction accounting, rate limits)
+ */
+import type { MigrationEntry } from '../interfaces/index.js';
+/**
+ * Get all Phase 1 migrations.
+ * S ref: C-05 (forward-only), C-09 (namespace prefixes on all tables)
+ */
+export declare function getPhase1Migrations(): MigrationEntry[];
+//# sourceMappingURL=migrations.d.ts.map

package/dist/kernel/database/migrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../../src/kernel/database/migrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAoY7D;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,cAAc,EAAE,CAStD"}