mixdog 0.7.17 → 0.8.0

package/src/runtime/memory/lib/trace-store.mjs

@@ -0,0 +1,734 @@
+const __mixdogMemoryStderrWrite = process.stderr.write.bind(process.stderr);
+function __mixdogMemoryLog(...args) {
+  if (process.env.MIXDOG_QUIET_MEMORY_LOG) return true;
+  return __mixdogMemoryStderrWrite(...args);
+}
+
+// trace-store.mjs — native-PG trace analytics store for mixdog 0.4.0.
+// Uses pg-adapter (schema='trace') so trace_events live in the trace schema.
+// Isolated from memory schema; shares the same PG instance.
+
+import { ensurePgInstance, checkedConnect } from './pg/adapter.mjs'
+import { resolve } from 'path'
+
+const dbs = new Map()
+const opening = new Map()
+const partitionTimers = new Map()
+
+// ---------------------------------------------------------------------------
+// Schema bootstrap
+// ---------------------------------------------------------------------------
+
+// Guard: if a non-partitioned trace_events exists, drop it.
+// Trace is regenerable observability data; drop on schema repair to avoid
+// stale dependent pollution (indexes are NOT renamed with the table, so RENAME
+// would leave old index names bound to the replaced table, making subsequent
+// CREATE INDEX IF NOT EXISTS a no-op on the new partitioned root).
+async function maybeDropLegacyTable(client) {
+  const r = await client.query(`
+    SELECT c.relname
+    FROM   pg_class c
+    JOIN   pg_namespace n ON n.oid = c.relnamespace
+    WHERE  n.nspname = 'trace'
+      AND  c.relname = 'trace_events'
+      AND  c.relkind = 'r'           -- ordinary (non-partitioned) table only
+      AND  c.oid NOT IN (
+             SELECT partrelid FROM pg_partitioned_table
+           )
+  `)
+  if (r.rows.length > 0) {
+    await client.query(`DROP TABLE trace.trace_events CASCADE`)
+  }
+}
+
+async function init(client) {
+  await maybeDropLegacyTable(client)
+
+  // Partitioned root.
+  // PK is (id, ts) because PostgreSQL requires the partition key (ts) to be
+  // part of every unique/primary constraint on a partitioned table.
+  // BIGSERIAL is kept (vs GENERATED ALWAYS AS IDENTITY) for compatibility with
+  // the existing pg-adapter helpers that may inspect sequence names.
+  await client.query(`
+    CREATE TABLE IF NOT EXISTS trace_events (
+      id                 BIGSERIAL,
+      ts                 BIGINT NOT NULL,
+      session_id         TEXT,
+      iteration          INTEGER,
+      kind               TEXT NOT NULL,
+      role               TEXT,
+      model              TEXT,
+      tool_name          TEXT,
+      tool_ms            INTEGER,
+      input_tokens       INTEGER,
+      output_tokens      INTEGER,
+      cached_tokens      INTEGER,
+      cache_write_tokens INTEGER,
+      duration_ms        INTEGER,
+      error_message      TEXT,
+      payload            JSONB NOT NULL,
+      parent_span_id     BIGINT,
+      entry_id           BIGINT,
+      PRIMARY KEY (id, ts)
+    ) PARTITION BY RANGE (ts)
+  `)
+
+  // Default catch-all partition — ensures no INSERT is lost even before named
+  // monthly partitions exist.  Rows here cannot be auto-rerouted once a covering
+  // partition is added, so ensureCurrentAndNextMonthPartitions() is called on
+  // every boot to pre-create upcoming months before rollover.
+  await client.query(`
+    CREATE TABLE IF NOT EXISTS trace_events_default
+      PARTITION OF trace_events DEFAULT
+  `)
+
+  // Previous-month partition — created in init only (not on every boot).
+  await client.query(`
+    DO $$
+    DECLARE
+      prev_start  BIGINT := extract(epoch from date_trunc('month', now() - interval '1 month'))::BIGINT * 1000;
+      prev_end    BIGINT := extract(epoch from date_trunc('month', now()))::BIGINT * 1000;
+      prev_name   TEXT   := 'trace_events_' || to_char(now() - interval '1 month', 'YYYY_MM');
+    BEGIN
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_class c
+        JOIN pg_namespace n ON n.oid = c.relnamespace
+        WHERE n.nspname = 'trace' AND c.relname = prev_name
+      ) THEN
+        EXECUTE format(
+          'CREATE TABLE %I PARTITION OF trace_events FOR VALUES FROM (%s) TO (%s)',
+          prev_name, prev_start, prev_end
+        );
+      END IF;
+    END $$
+  `)
+
+  // BRIN on ts — ~1000× smaller than btree for append-only timeseries; ideal
+  // for time-window range scans where rows arrive in roughly ts order.
+  await client.query(`CREATE INDEX IF NOT EXISTS idx_trace_ts_brin      ON trace_events USING BRIN (ts) WITH (pages_per_range = 32)`)
+  await client.query(`CREATE INDEX IF NOT EXISTS idx_trace_kind_ts     ON trace_events(kind, ts DESC)`)
+  await client.query(`CREATE INDEX IF NOT EXISTS idx_trace_session     ON trace_events(session_id, ts)`)
+  await client.query(`CREATE INDEX IF NOT EXISTS idx_trace_role_ts     ON trace_events(role, ts DESC)`)
+  await client.query(`CREATE INDEX IF NOT EXISTS idx_trace_model_ts    ON trace_events(model, ts DESC)`)
+  await client.query(`CREATE INDEX IF NOT EXISTS idx_trace_tool        ON trace_events(tool_name) WHERE kind = 'tool'`)
+  // Span-tree and cross-schema recall↔trace correlation — partial indexes so
+  // they cover only the (small) fraction of rows where these FKs are set.
+  // No FK constraints: self-FKs on partitioned tables are fragile, and
+  // entry_id crosses schema boundaries (memory.entries).
+  await client.query(`CREATE INDEX IF NOT EXISTS idx_trace_parent      ON trace_events(parent_span_id) WHERE parent_span_id IS NOT NULL`)
+  await client.query(`CREATE INDEX IF NOT EXISTS idx_trace_entry       ON trace_events(entry_id)       WHERE entry_id IS NOT NULL`)
+
+  // Current + next month created on every boot (see ensureCurrentAndNextMonthPartitions).
+  await ensureCurrentAndNextMonthPartitions(client)
+}
+
+// ---------------------------------------------------------------------------
+// Bridge-specific analytic tables (added post-init via initBridgeTables)
+// ---------------------------------------------------------------------------
+
+// Called once per openTraceDatabase boot (after the advisory lock is released).
+// Safe to call concurrently — all DDL is IF NOT EXISTS.
+export async function initBridgeTables(client) {
+  // ── bridge_calls: one row per tool invocation ─────────────────────────────
+  await client.query(`
+    CREATE TABLE IF NOT EXISTS bridge_calls (
+      id           BIGSERIAL PRIMARY KEY,
+      session_id   TEXT        NOT NULL,
+      iteration    INT,
+      ts           TIMESTAMPTZ NOT NULL,
+      tool_name    TEXT,
+      tool_kind    TEXT,
+      tool_ms      INT,
+      tool_args    JSONB
+    )
+  `)
+  await client.query(`CREATE INDEX IF NOT EXISTS idx_bc_session   ON bridge_calls (session_id, iteration)`)
+  await client.query(`CREATE INDEX IF NOT EXISTS idx_bc_ts        ON bridge_calls USING BRIN (ts)`)
+  await client.query(`CREATE INDEX IF NOT EXISTS idx_bc_tool_name ON bridge_calls (tool_name)`)
+  // Expression indexes covering the two actual query patterns (md5 dedup + path lookup).
+  // The old GIN index had no @> callers and was write-heavy; dropped in favour of these.
+  await client.query(`CREATE INDEX IF NOT EXISTS idx_bc_args_md5  ON bridge_calls (session_id, tool_name, md5(tool_args::text))`)
+  await client.query(`CREATE INDEX IF NOT EXISTS idx_bc_args_path ON bridge_calls (session_id, tool_name, (tool_args->>'path'), ts, id)`)
+  await client.query(`DROP INDEX IF EXISTS idx_bc_args`)
+
+  // ── bridge_llm: one row per LLM usage event ───────────────────────────────
+  await client.query(`
+    CREATE TABLE IF NOT EXISTS bridge_llm (
+      id                 BIGSERIAL PRIMARY KEY,
+      session_id         TEXT        NOT NULL,
+      iteration          INT,
+      ts                 TIMESTAMPTZ NOT NULL,
+      model              TEXT,
+      input_tokens       INT,
+      output_tokens      INT,
+      cached_tokens      INT,
+      cache_write_tokens INT,
+      prompt_tokens      INT,
+      response_id        TEXT
+    )
+  `)
+  await client.query(`CREATE INDEX IF NOT EXISTS idx_bl_session ON bridge_llm (session_id, iteration)`)
+  await client.query(`CREATE INDEX IF NOT EXISTS idx_bl_ts      ON bridge_llm USING BRIN (ts)`)
+  await client.query(`CREATE INDEX IF NOT EXISTS idx_bl_model   ON bridge_llm (model)`)
+
+  // ── bridge_sessions: denormalised summary upserted on each insert ─────────
+  await client.query(`
+    CREATE TABLE IF NOT EXISTS bridge_sessions (
+      session_id          TEXT        PRIMARY KEY,
+      role                TEXT,
+      model               TEXT,
+      started_at          TIMESTAMPTZ,
+      last_seen_at        TIMESTAMPTZ,
+      tool_calls          INT         NOT NULL DEFAULT 0,
+      llm_calls           INT         NOT NULL DEFAULT 0,
+      max_iteration       INT         NOT NULL DEFAULT 0,
+      total_input_tokens  BIGINT      NOT NULL DEFAULT 0,
+      total_output_tokens BIGINT      NOT NULL DEFAULT 0
+    )
+  `)
+}
+
+// ---------------------------------------------------------------------------
+// insertBridgeCalls — batch insert tool rows + upsert session summary
+// ---------------------------------------------------------------------------
+const TOOL_ARGS_MAX_BYTES = 65536  // 64 KB cap; oversized → sha256 + truncated preview
+
+import { createHash as _createHash } from 'crypto'
+function _capToolArgsSync(args) {
+  if (args == null) return null
+  const raw = typeof args === 'string' ? args : JSON.stringify(args)
+  if (Buffer.byteLength(raw, 'utf8') <= TOOL_ARGS_MAX_BYTES) {
+    if (typeof args !== 'string') return args
+    // tool_args is JSONB in PG; round-trip parse for string inputs, but a
+    // plain non-JSON string (e.g. a bare path) would otherwise throw and
+    // fail the whole insert batch. Treat unparseable as the raw string.
+    try { return JSON.parse(raw) } catch { return raw }
+  }
+  return { _oversized: true, sha256: _createHash('sha256').update(raw).digest('hex'), preview: raw.slice(0, 512) }
+}
+
+export async function insertBridgeCalls(db, events) {
+  if (!Array.isArray(events) || events.length === 0) return { calls: 0, llm: 0 }
+  const toolRows = []
+  const llmRows  = []
+  for (const ev of events) {
+    let ts = ev.ts; if (typeof ts === 'string') ts = Date.parse(ts); ts = Number(ts); if (!Number.isFinite(ts)) ts = Date.now()
+    const tsIso = new Date(ts).toISOString()
+    const sid = ev.session_id ?? ev.sessionId ?? null
+    if (!sid) continue
+    const iter = ev.iteration != null ? Number(ev.iteration) : null
+    if (ev.kind === 'tool') {
+      const tool_name = ev.tool_name ?? ev.toolName ?? null
+      const tool_kind = ev.tool_kind ?? ev.toolKind ?? null
+      const tool_ms   = ev.tool_ms   ?? ev.toolMs   ?? null
+      const tool_args = ev.tool_args ?? ev.toolArgs  ?? null
+      toolRows.push({ session_id: sid, iteration: iter, ts: tsIso, tool_name, tool_kind, tool_ms: tool_ms != null ? Number(tool_ms) : null, tool_args: _capToolArgsSync(tool_args) })
+    } else if (ev.kind === 'usage_raw' || (ev.input_tokens != null && ev.output_tokens != null)) {
+      llmRows.push({ session_id: sid, iteration: iter, ts: tsIso, model: ev.model ?? null,
+        input_tokens:        ev.input_tokens        ?? ev.inputTokens        ?? null,
+        output_tokens:       ev.output_tokens       ?? ev.outputTokens       ?? null,
+        cached_tokens:       ev.cached_tokens       ?? ev.cachedTokens       ?? null,
+        cache_write_tokens:  ev.cache_write_tokens  ?? ev.cacheWriteTokens   ?? null,
+        prompt_tokens:       ev.prompt_tokens       ?? ev.promptTokens       ?? null,
+        response_id:         ev.response_id         ?? ev.responseId         ?? null,
+      })
+    }
+  }
+
+  // Wrap all three inserts in a single transaction — one flush/fsync.
+  // checkedConnect ensures search_path = trace, public on fresh connections;
+  // raw _pool.connect() leaves search_path at PG default and bridge_* lookups
+  // resolve in the wrong schema.
+  const client = await checkedConnect(db._pool, 'trace')
+  try {
+    await client.query('BEGIN')
+
+  if (toolRows.length > 0) {
+    await client.query(
+      `INSERT INTO bridge_calls (session_id,iteration,ts,tool_name,tool_kind,tool_ms,tool_args)
+       SELECT u.session_id, u.iteration::int, u.ts::timestamptz,
+              u.tool_name, u.tool_kind, u.tool_ms::int, u.tool_args::jsonb
+       FROM unnest($1::text[],$2::int[],$3::text[],$4::text[],$5::text[],$6::int[],$7::text[])
+            AS u(session_id,iteration,ts,tool_name,tool_kind,tool_ms,tool_args)`,
+      [
+        toolRows.map(r => r.session_id),
+        toolRows.map(r => r.iteration),
+        toolRows.map(r => r.ts),
+        toolRows.map(r => r.tool_name),
+        toolRows.map(r => r.tool_kind),
+        toolRows.map(r => r.tool_ms),
+        toolRows.map(r => r.tool_args != null ? JSON.stringify(r.tool_args) : null),
+      ],
+    )
+  }
+
+  if (llmRows.length > 0) {
+    await client.query(
+      `INSERT INTO bridge_llm (session_id,iteration,ts,model,input_tokens,output_tokens,cached_tokens,cache_write_tokens,prompt_tokens,response_id)
+       SELECT u.session_id, u.iteration::int, u.ts::timestamptz,
+              u.model, u.input_tokens::int, u.output_tokens::int,
+              u.cached_tokens::int, u.cache_write_tokens::int,
+              u.prompt_tokens::int, u.response_id
+       FROM unnest($1::text[],$2::int[],$3::text[],$4::text[],$5::int[],$6::int[],$7::int[],$8::int[],$9::int[],$10::text[])
+            AS u(session_id,iteration,ts,model,input_tokens,output_tokens,cached_tokens,cache_write_tokens,prompt_tokens,response_id)`,
+      [
+        llmRows.map(r => r.session_id),
+        llmRows.map(r => r.iteration),
+        llmRows.map(r => r.ts),
+        llmRows.map(r => r.model),
+        llmRows.map(r => r.input_tokens),
+        llmRows.map(r => r.output_tokens),
+        llmRows.map(r => r.cached_tokens),
+        llmRows.map(r => r.cache_write_tokens),
+        llmRows.map(r => r.prompt_tokens),
+        llmRows.map(r => r.response_id),
+      ],
+    )
+  }
+
+  // Upsert session summaries — accumulate from tool+llm rows in this batch
+  const sessionMap = new Map()
+  for (const r of toolRows) {
+    const s = sessionMap.get(r.session_id) ?? { tool_calls: 0, llm_calls: 0, max_iteration: 0, total_input: 0n, total_output: 0n, ts0: r.ts, ts1: r.ts, role: null, model: null }
+    s.tool_calls += 1
+    if (r.iteration != null && r.iteration > s.max_iteration) s.max_iteration = r.iteration
+    if (r.ts < s.ts0) s.ts0 = r.ts; if (r.ts > s.ts1) s.ts1 = r.ts
+    sessionMap.set(r.session_id, s)
+  }
+  for (const r of llmRows) {
+    const s = sessionMap.get(r.session_id) ?? { tool_calls: 0, llm_calls: 0, max_iteration: 0, total_input: 0n, total_output: 0n, ts0: r.ts, ts1: r.ts, role: null, model: null }
+    s.llm_calls += 1
+    s.total_input  += BigInt(r.input_tokens ?? 0)
+    s.total_output += BigInt(r.output_tokens ?? 0)
+    if (r.model) s.model = r.model
+    if (r.iteration != null && r.iteration > s.max_iteration) s.max_iteration = r.iteration
+    if (r.ts < s.ts0) s.ts0 = r.ts; if (r.ts > s.ts1) s.ts1 = r.ts
+    sessionMap.set(r.session_id, s)
+  }
+  // Also pick up role from preset_assign events in the same batch
+  for (const ev of events) {
+    if (ev.kind === 'preset_assign' && ev.role) {
+      const sid = ev.session_id ?? ev.sessionId ?? null
+      if (!sid) continue
+      const s = sessionMap.get(sid)
+      if (s) s.role = ev.role
+    }
+  }
+  // Fix 5 — upsert sessions for preset_assign-only batches (no tool/llm rows yet)
+  for (const ev of events) {
+    if (ev.kind !== 'preset_assign') continue
+    const sid = ev.session_id ?? ev.sessionId ?? null
+    if (!sid) continue
+    if (sessionMap.has(sid)) continue  // already populated from tool/llm rows above
+    let ts = ev.ts; if (typeof ts === 'string') ts = Date.parse(ts); ts = Number(ts); if (!Number.isFinite(ts)) ts = Date.now()
+    const tsIso = new Date(ts).toISOString()
+    sessionMap.set(sid, {
+      tool_calls: 0, llm_calls: 0, max_iteration: 0,
+      total_input: 0n, total_output: 0n,
+      ts0: tsIso, ts1: tsIso,
+      role: ev.role ?? null, model: ev.model ?? null,
+    })
+  }
+
+  // Coalesce bridge_sessions upserts: batch all sessions in one unnest INSERT.
+  // Also within the same transaction.
+  if (sessionMap.size > 0) {
+    const sids = [], roles = [], models = [], ts0s = [], ts1s = [],
+          tcalls = [], lcalls = [], maxiters = [], tinputs = [], toutputs = []
+    for (const [sid, s] of sessionMap) {
+      sids.push(sid); roles.push(s.role); models.push(s.model)
+      ts0s.push(s.ts0); ts1s.push(s.ts1)
+      tcalls.push(s.tool_calls); lcalls.push(s.llm_calls)
+      maxiters.push(s.max_iteration)
+      tinputs.push(String(s.total_input)); toutputs.push(String(s.total_output))
+    }
+    await client.query(`
+      INSERT INTO bridge_sessions (session_id, role, model, started_at, last_seen_at, tool_calls, llm_calls, max_iteration, total_input_tokens, total_output_tokens)
+      SELECT u.session_id, u.role, u.model,
+             u.started_at::timestamptz, u.last_seen_at::timestamptz,
+             u.tool_calls::int, u.llm_calls::int, u.max_iteration::int,
+             u.total_input_tokens::bigint, u.total_output_tokens::bigint
+      FROM unnest($1::text[],$2::text[],$3::text[],$4::text[],$5::text[],$6::int[],$7::int[],$8::int[],$9::text[],$10::text[])
+           AS u(session_id,role,model,started_at,last_seen_at,tool_calls,llm_calls,max_iteration,total_input_tokens,total_output_tokens)
+      ON CONFLICT (session_id) DO UPDATE SET
+        role                = COALESCE(EXCLUDED.role, bridge_sessions.role),
+        model               = COALESCE(EXCLUDED.model, bridge_sessions.model),
+        started_at          = LEAST(bridge_sessions.started_at, EXCLUDED.started_at),
+        last_seen_at        = GREATEST(bridge_sessions.last_seen_at, EXCLUDED.last_seen_at),
+        tool_calls          = bridge_sessions.tool_calls + EXCLUDED.tool_calls,
+        llm_calls           = bridge_sessions.llm_calls  + EXCLUDED.llm_calls,
+        max_iteration       = GREATEST(bridge_sessions.max_iteration, EXCLUDED.max_iteration),
+        total_input_tokens  = bridge_sessions.total_input_tokens  + EXCLUDED.total_input_tokens,
+        total_output_tokens = bridge_sessions.total_output_tokens + EXCLUDED.total_output_tokens
+    `, [sids, roles, models, ts0s, ts1s, tcalls, lcalls, maxiters, tinputs, toutputs])
+  }
+
+    await client.query('COMMIT')
+  } catch (err) {
+    try { await client.query('ROLLBACK') } catch {}
+    throw err
+  } finally {
+    client.release()
+  }
+
+  return { calls: toolRows.length, llm: llmRows.length }
+}
+
+// Idempotently ensure partitions exist for the current and next calendar month.
+// Called from both init() and openTraceDatabase() so the next-month partition
+// is always pre-created before rollover; rows never land in the default partition
+// for a range that has a covering monthly partition.
+async function ensureCurrentAndNextMonthPartitions(client) {
+  await client.query(`
+    DO $$
+    DECLARE
+      cur_start  BIGINT := extract(epoch from date_trunc('month', now()))::BIGINT * 1000;
+      cur_end    BIGINT := extract(epoch from date_trunc('month', now() + interval '1 month'))::BIGINT * 1000;
+      next_start BIGINT := extract(epoch from date_trunc('month', now() + interval '1 month'))::BIGINT * 1000;
+      next_end   BIGINT := extract(epoch from date_trunc('month', now() + interval '2 months'))::BIGINT * 1000;
+      cur_name   TEXT   := 'trace_events_' || to_char(now(), 'YYYY_MM');
+      next_name  TEXT   := 'trace_events_' || to_char(now() + interval '1 month', 'YYYY_MM');
+    BEGIN
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_class c
+        JOIN pg_namespace n ON n.oid = c.relnamespace
+        WHERE n.nspname = 'trace' AND c.relname = cur_name
+      ) THEN
+        EXECUTE format(
+          'CREATE TABLE %I PARTITION OF trace_events FOR VALUES FROM (%s) TO (%s)',
+          cur_name, cur_start, cur_end
+        );
+      END IF;
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_class c
+        JOIN pg_namespace n ON n.oid = c.relnamespace
+        WHERE n.nspname = 'trace' AND c.relname = next_name
+      ) THEN
+        EXECUTE format(
+          'CREATE TABLE %I PARTITION OF trace_events FOR VALUES FROM (%s) TO (%s)',
+          next_name, next_start, next_end
+        );
+      END IF;
+    END $$
+  `)
+}
+
+async function isBootstrapComplete(client) {
+  try {
+    // Harden the check: require (a) root is partitioned, (b) schema-version
+    // columns parent_span_id and entry_id exist, (c) idx_trace_ts_brin exists,
+    // (d) at least one named-month OR default partition exists.
+    // A partial failed init (crashed after CREATE TABLE, before indexes) returns
+    // false here, triggering a full re-run rather than silently booting broken.
+    const r = await client.query(`
+      SELECT 1 WHERE
+        -- (a) partitioned root exists
+        EXISTS (
+          SELECT 1 FROM pg_class c
+          JOIN pg_namespace n ON n.oid = c.relnamespace
+          JOIN pg_partitioned_table pt ON pt.partrelid = c.oid
+          WHERE n.nspname = 'trace' AND c.relname = 'trace_events'
+        )
+        -- (b) schema-version columns present
+        AND EXISTS (
+          SELECT 1 FROM pg_attribute a
+          JOIN pg_class c ON c.oid = a.attrelid
+          JOIN pg_namespace n ON n.oid = c.relnamespace
+          WHERE n.nspname = 'trace' AND c.relname = 'trace_events'
+            AND a.attname IN ('parent_span_id', 'entry_id')
+            AND a.attnum > 0 AND NOT a.attisdropped
+          HAVING count(*) = 2
+        )
+        -- (c) BRIN index exists
+        AND EXISTS (
+          SELECT 1 FROM pg_indexes
+          WHERE schemaname = 'trace' AND indexname = 'idx_trace_ts_brin'
+        )
+        -- (d) at least one partition (named-month or default catch-all) exists
+        AND EXISTS (
+          SELECT 1 FROM pg_inherits i
+          JOIN pg_class cp ON cp.oid = i.inhparent
+          JOIN pg_namespace n ON n.oid = cp.relnamespace
+          WHERE n.nspname = 'trace' AND cp.relname = 'trace_events'
+        )
+    `)
+    return r.rows.length > 0
+  } catch {
+    return false
+  }
+}
+
+// Advisory lock key — session-scoped, prevents cross-process bootstrap races.
+const BOOTSTRAP_LOCK_KEY = `hashtext('mixdog.trace_bootstrap')`
+
+// ---------------------------------------------------------------------------
+// openTraceDatabase
+// ---------------------------------------------------------------------------
+
+export async function openTraceDatabase(dataDir) {
+  const key = resolve(dataDir)
+
+  if (dbs.get(key)) return dbs.get(key)
+  if (opening.has(key)) return opening.get(key)
+
+  const promise = (async () => {
+    // pg-adapter with schema='trace' sets search_path=trace,public per connection.
+    const { db } = await ensurePgInstance(dataDir, { schema: 'trace' })
+
+    // Acquire a dedicated pool client for bootstrap so the advisory lock is
+    // session-scoped to exactly one connection (advisory locks are per-session).
+    // The client is released in finally — in both success and error paths.
+    const client = await db._pool.connect()
+    try {
+      // Set search_path on the dedicated client to match the pool default.
+      await client.query(`SET search_path = trace, public`)
+      // Session-scoped advisory lock — bounded so a stuck holder can't hang
+      // boot indefinitely. Try non-blocking first; on contention, set a
+      // 30s lock_timeout for the blocking acquire and surface a clear error
+      // instead of an unbounded wait.
+      const tryAcquire = await client.query(`SELECT pg_try_advisory_lock(${BOOTSTRAP_LOCK_KEY}) AS locked`)
+      if (!tryAcquire.rows[0]?.locked) {
+        // SET LOCAL only persists inside an explicit transaction — without
+        // BEGIN/COMMIT PG resets it immediately, so pg_advisory_lock() would
+        // wait unbounded. Wrap the lock_timeout + blocking acquire so the
+        // 30s ceiling actually applies.
+        await client.query('BEGIN')
+        try {
+          await client.query(`SET LOCAL lock_timeout = '30s'`)
+          await client.query(`SELECT pg_advisory_lock(${BOOTSTRAP_LOCK_KEY})`)
+          await client.query('COMMIT')
+        } catch (err) {
+          try { await client.query('ROLLBACK') } catch {}
+          // lock_timeout fires as 55P03 (lock_not_available); surface with context.
+          throw new Error(`trace-store bootstrap advisory lock timed out (30s): ${err?.message || err}`)
+        }
+      }
+      try {
+        // Re-check after acquiring the lock: another process may have completed
+        // init while we were waiting.
+        if (!(await isBootstrapComplete(client))) {
+          await init(client)
+        } else {
+          // Init already done by another process; still ensure upcoming partitions
+          // are pre-created for this boot.
+          await ensureCurrentAndNextMonthPartitions(client)
+        }
+      } finally {
+        await client.query(`SELECT pg_advisory_unlock(${BOOTSTRAP_LOCK_KEY})`)
+      }
+    } finally {
+      client.release()
+    }
+    // Bridge-specific analytic tables — idempotent, no advisory lock needed.
+    await initBridgeTables(db)
+
+    dbs.set(key, db)
+
+    // Periodically ensure current + next-month partitions exist so a
+    // long-running process never hits the default catch-all partition at
+    // month rollover. Fires every 12 h — well ahead of any boundary.
+    const _partitionEnsureInterval = setInterval(async () => {
+      const c = await db._pool.connect()
+      try {
+        await c.query(`SET search_path = trace, public`)
+        await ensureCurrentAndNextMonthPartitions(c)
+      } catch (err) {
+        __mixdogMemoryLog(`[trace-store] periodic partition ensure failed: ${err?.message ?? err}\n`)
+      } finally {
+        c.release()
+      }
+    }, 12 * 60 * 60 * 1000)
+    _partitionEnsureInterval.unref?.()
+    partitionTimers.set(key, _partitionEnsureInterval)
+
+    return db
+  })()
+
+  opening.set(key, promise)
+  try {
+    return await promise
+  } finally {
+    opening.delete(key)
+  }
+}
+
+// ---------------------------------------------------------------------------
+// insertTraceEvents — batch INSERT
+// ---------------------------------------------------------------------------
+
+const TRACE_COLS = [
+  'ts', 'session_id', 'iteration', 'kind', 'role', 'model',
+  'tool_name', 'tool_ms', 'input_tokens', 'output_tokens',
+  'cached_tokens', 'cache_write_tokens', 'duration_ms',
+  'error_message', 'payload', 'parent_span_id', 'entry_id',
+]
+
+// ---------------------------------------------------------------------------
+// Cross-request trace_events write queue (100ms / 500-row flush window)
+// ---------------------------------------------------------------------------
+
+const TRACE_QUEUE_FLUSH_MS  = 100
+const TRACE_QUEUE_MAX_ROWS  = 500
+
+// Per-db queue state (keyed by db object identity via WeakMap).
+const _traceQueues = new WeakMap()
+
+function _getQueue(db) {
+  let q = _traceQueues.get(db)
+  if (!q) {
+    q = { pending: [], timer: null, flushPromise: null }
+    _traceQueues.set(db, q)
+  }
+  return q
+}
+
+async function _flushQueue(db, q) {
+  // When a flush is already running, callers reuse its promise — but enqueues
+  // that arrive during that flush schedule a fresh timer that fires here and
+  // is consumed by the early return. Reschedule a follow-up flush so events
+  // queued mid-flush don't sit until the next unrelated enqueue.
+  if (q.flushPromise) {
+    if (q.pending.length > 0) _scheduleFlush(db, q)
+    return q.flushPromise
+  }
+  const wrappers = q.pending.splice(0)
+  if (wrappers.length === 0) return { inserted: 0 }
+  const MAX_RETRIES = 3
+  q.flushPromise = (async () => {
+    try {
+      const allEvents = wrappers.flatMap(w => w.events)
+      return await _insertTraceEventsDirect(db, allEvents)
+    } catch (err) {
+      for (const w of wrappers) w.attempts += 1
+      const keep = wrappers.filter(w => w.attempts < MAX_RETRIES)
+      const dropped = wrappers.filter(w => w.attempts >= MAX_RETRIES)
+      if (dropped.length > 0) {
+        __mixdogMemoryLog(`[trace-queue] dropped ${dropped.reduce((n, w) => n + w.events.length, 0)} events after ${MAX_RETRIES} retries: ${err?.message}\n`)
+      }
+      q.pending.unshift(...keep)
+      __mixdogMemoryLog(`[trace-queue] flush error: ${err?.message}\n`)
+      throw err
+    } finally {
+      q.flushPromise = null
+      // Drain any events that landed in the queue while this flush ran.
+      if (q.pending.length > 0) _scheduleFlush(db, q)
+    }
+  })()
+  return q.flushPromise
+}
+
+function _scheduleFlush(db, q) {
+  if (q.timer) return
+  q.timer = setTimeout(async () => {
+    q.timer = null
+    _flushQueue(db, q).catch(err =>
+      __mixdogMemoryLog(`[trace-queue] flush error: ${err?.message}\n`)
+    )
+  }, TRACE_QUEUE_FLUSH_MS)
+  q.timer.unref?.()
+}
+
+// ---------------------------------------------------------------------------
+// Exit drain — flush pending trace events before process exit.
+// Issue 4: timer is unref()'d so it won't prevent exit; register drain handlers.
+// ---------------------------------------------------------------------------
+
+const _registeredExitDbs = new WeakSet()
+
+export function registerTraceExitDrain(db) {
+  if (_registeredExitDbs.has(db)) return
+  _registeredExitDbs.add(db)
+
+  async function drainOnExit() {
+    const q = _traceQueues.get(db)
+    if (!q || q.pending.length === 0) return
+    try {
+      if (q.timer) { clearTimeout(q.timer); q.timer = null }
+      if (q.flushPromise) await q.flushPromise.catch(() => {})
+      if (q.pending.length > 0) await _insertTraceEventsDirect(db, q.pending.splice(0).flatMap(w => w.events))
+    } catch (e) {
+      __mixdogMemoryLog(`[trace-queue] exit drain failed: ${e?.message}\n`)
+    }
+  }
+
+  process.on('exit', () => {
+    const q = _traceQueues.get(db)
+    if (q?.pending.length) __mixdogMemoryLog(`[trace-queue] exit with ${q.pending.length} unflushed events\n`)
+  })
+
+  process.on('SIGTERM', async () => { await drainOnExit(); process.exit(0) })
+
+  process.once('beforeExit', drainOnExit)
+}
+
+/**
+ * Enqueue events for async batched insert. Returns immediately; flush happens
+ * within TRACE_QUEUE_FLUSH_MS or when TRACE_QUEUE_MAX_ROWS is reached.
+ * Callers that need a synchronous result should use insertTraceEvents directly.
+ */
+export function enqueueTraceEvents(db, events) {
+  if (!Array.isArray(events) || events.length === 0) return
+  const q = _getQueue(db)
+  q.pending.push({ events: [...events], attempts: 0 })
+  // Row cap counts pending EVENTS, not wrappers — a single wrapper with
+  // >TRACE_QUEUE_MAX_ROWS events would otherwise sit until the timer.
+  const pendingEvents = q.pending.reduce((n, w) => n + w.events.length, 0)
+  if (pendingEvents >= TRACE_QUEUE_MAX_ROWS) {
+    // Flush immediately when row cap reached — don't wait for timer.
+    if (q.timer) { clearTimeout(q.timer); q.timer = null }
+    _flushQueue(db, q).catch(err =>
+      __mixdogMemoryLog(`[trace-queue] flush error: ${err?.message}\n`)
+    )
+  } else {
+    _scheduleFlush(db, q)
+  }
+}
+
+// Renamed internal: direct DB insert without queuing (used by queue flusher and
+// the existing intra-request multi-row path where immediate persistence matters).
+async function _insertTraceEventsDirect(db, events) {
+  return insertTraceEvents(db, events)
+}
+
+export async function insertTraceEvents(db, events) {
+  if (!Array.isArray(events) || events.length === 0) return { inserted: 0 }
+
+  const valuePlaceholders = []
+  const params = []
+  let p = 1
+
+  for (const ev of events) {
+    let ts = ev.ts
+    if (typeof ts === 'string') ts = Date.parse(ts)
+    ts = Number(ts)
+    if (!Number.isFinite(ts)) ts = Date.now()
+
+    const payload = ev.payload != null ? ev.payload : {}
+
+    const cols = [
+      ts,
+      ev.session_id ?? null,
+      ev.iteration != null ? Number(ev.iteration) : null,
+      String(ev.kind ?? 'unknown'),
+      ev.role ?? null,
+      ev.model ?? null,
+      ev.tool_name ?? null,
+      ev.tool_ms != null ? Number(ev.tool_ms) : null,
+      ev.input_tokens != null ? Number(ev.input_tokens) : null,
+      ev.output_tokens != null ? Number(ev.output_tokens) : null,
+      ev.cached_tokens != null ? Number(ev.cached_tokens) : null,
+      ev.cache_write_tokens != null ? Number(ev.cache_write_tokens) : null,
+      ev.duration_ms != null ? Number(ev.duration_ms) : null,
+      ev.error_message ?? null,
+      typeof payload === 'string' ? payload : JSON.stringify(payload),
+      ev.parent_span_id != null ? Number(ev.parent_span_id) : null,
+      ev.entry_id != null ? Number(ev.entry_id) : null,
+    ]
+    valuePlaceholders.push(`(${cols.map(() => `$${p++}`).join(', ')})`)
+    params.push(...cols)
+  }
+
+  const sql = `INSERT INTO trace_events (${TRACE_COLS.join(', ')}) VALUES ${valuePlaceholders.join(', ')}`
+  await db.query(sql, params)
+  return { inserted: events.length }
+}