ocr-provenance-mcp 1.0.0

package/dist/services/ocr/processor.js

@@ -0,0 +1,259 @@
+/**
+ * OCR Processing Orchestrator
+ *
+ * Complete pipeline: Document -> OCR -> Provenance -> Store -> Status Update
+ * FAIL-FAST: No fallbacks, errors propagate immediately
+ */
+import { v4 as uuidv4 } from 'uuid';
+import { DatalabClient } from './datalab.js';
+import { OCRError } from './errors.js';
+import { backoffSleep } from '../../utils/backoff.js';
+import { ProvenanceType } from '../../models/provenance.js';
+/**
+ * SDK version for provenance - hardcoded since we can't easily get it at runtime
+ * Update this when datalab-sdk version changes
+ */
+const DATALAB_SDK_VERSION = '1.0.0';
+function parseMaxConcurrent() {
+    const raw = process.env.DATALAB_MAX_CONCURRENT ?? '3';
+    const parsed = parseInt(raw, 10);
+    if (Number.isNaN(parsed)) {
+        throw new Error(`Invalid numeric env var DATALAB_MAX_CONCURRENT: "${raw}"`);
+    }
+    return parsed;
+}
+export class OCRProcessor {
+    client;
+    db;
+    maxConcurrent;
+    defaultMode;
+    constructor(db, config = {}) {
+        this.db = db;
+        this.client = new DatalabClient(config);
+        this.maxConcurrent = config.maxConcurrent ?? parseMaxConcurrent();
+        this.defaultMode = config.defaultMode ?? 'balanced';
+    }
+    /**
+     * Process single document through OCR
+     *
+     * Pipeline:
+     * 1. Get document from database (FAIL if not found)
+     * 2. Update status to 'processing'
+     * 3. Call Datalab OCR via Python worker
+     * 4. Create OCR_RESULT provenance record
+     * 5. Store OCR result in database
+     * 6. Update document status to 'complete'
+     *
+     * On failure: Update status to 'failed' with error message
+     */
+    async processDocument(documentId, mode, ocrOptions) {
+        const ocrMode = mode ?? this.defaultMode;
+        const startTime = Date.now();
+        // 1. Get document (FAIL-FAST: throw if not found)
+        const document = this.db.getDocument(documentId);
+        if (!document) {
+            throw new OCRError(`Document not found: ${documentId}`, 'OCR_FILE_ERROR');
+        }
+        // 2. Update status to 'processing'
+        this.db.updateDocumentStatus(documentId, 'processing');
+        try {
+            // 3. Generate provenance ID and call OCR (with 1 retry on timeout)
+            const ocrProvenanceId = uuidv4();
+            let ocrResult;
+            let images;
+            let jsonBlocks = null;
+            let metadata = null;
+            let pageOffsets = [];
+            let extractionJson = null;
+            let docTitle = null;
+            let docAuthor = null;
+            let docSubject = null;
+            for (let attempt = 1; attempt <= 2; attempt++) {
+                try {
+                    const response = await this.client.processDocument(document.file_path, documentId, ocrProvenanceId, ocrMode, ocrOptions);
+                    ocrResult = response.result;
+                    images = response.images;
+                    jsonBlocks = response.jsonBlocks;
+                    metadata = response.metadata;
+                    pageOffsets = response.pageOffsets;
+                    extractionJson = response.extractionJson;
+                    docTitle = response.docTitle;
+                    docAuthor = response.docAuthor;
+                    docSubject = response.docSubject;
+                    break;
+                }
+                catch (error) {
+                    if (attempt === 1 && error instanceof OCRError && error.category === 'OCR_TIMEOUT') {
+                        console.error(`[WARN] OCR timeout on attempt 1 for ${documentId}, retrying...`);
+                        continue;
+                    }
+                    if (attempt === 1 && error instanceof OCRError && error.category === 'OCR_RATE_LIMIT') {
+                        const retryAfter = error.retryAfter;
+                        if (retryAfter !== undefined && retryAfter > 0) {
+                            console.error(`[WARN] OCR rate limited on attempt 1 for ${documentId}, server says wait ${retryAfter}s`);
+                            await new Promise((resolve) => setTimeout(resolve, retryAfter * 1000));
+                        }
+                        else {
+                            console.error(`[WARN] OCR rate limited on attempt 1 for ${documentId}, using exponential backoff`);
+                            await backoffSleep(0);
+                        }
+                        continue;
+                    }
+                    throw error;
+                }
+            }
+            // TypeScript: guaranteed assigned after loop or thrown
+            ocrResult = ocrResult;
+            images = images;
+            // 4. Create OCR_RESULT provenance record
+            const provenance = this.createOCRProvenance(ocrProvenanceId, document, ocrResult, ocrMode);
+            this.db.insertProvenance(provenance);
+            // 5. Store OCR result
+            this.db.insertOCRResult(ocrResult);
+            // 6. Update document status
+            this.db.updateDocumentOCRComplete(documentId, ocrResult.page_count, ocrResult.processing_completed_at);
+            // Capture image count for logging
+            const imageCount = Object.keys(images).length;
+            if (imageCount > 0) {
+                console.error(`[INFO] Captured ${imageCount} images from Datalab`);
+            }
+            return {
+                success: true,
+                documentId,
+                ocrResultId: ocrResult.id,
+                provenanceId: ocrProvenanceId,
+                pageCount: ocrResult.page_count,
+                textLength: ocrResult.text_length,
+                durationMs: Date.now() - startTime,
+                images: imageCount > 0 ? images : undefined,
+                jsonBlocks,
+                metadata,
+                pageOffsets: pageOffsets.length > 0 ? pageOffsets : undefined,
+                extractionJson: extractionJson ?? undefined,
+                docTitle: docTitle ?? undefined,
+                docAuthor: docAuthor ?? undefined,
+                docSubject: docSubject ?? undefined,
+            };
+        }
+        catch (error) {
+            // Update status to 'failed' and re-throw (FAIL-FAST: callers must handle)
+            const errorMsg = error instanceof Error ? error.message : String(error);
+            this.db.updateDocumentStatus(documentId, 'failed', errorMsg);
+            // Re-throw as OCRError if not already one
+            if (error instanceof OCRError) {
+                throw error;
+            }
+            throw new OCRError(`OCR processing failed for ${documentId}: ${errorMsg}`, 'OCR_API_ERROR');
+        }
+    }
+    /**
+     * Process all pending documents.
+     *
+     * H-2 fix: Before processing, recover any documents stuck in 'processing'
+     * status for longer than 30 minutes (indicates a prior server crash).
+     * These are reset to 'pending' so they get re-processed.
+     */
+    async processPending(mode) {
+        const startTime = Date.now();
+        const ocrMode = mode ?? this.defaultMode;
+        // H-2: Recover stale 'processing' documents (crashed mid-OCR)
+        this.recoverStaleProcessingDocuments();
+        const pending = this.db.listDocuments({ status: 'pending' });
+        if (pending.length === 0) {
+            return {
+                processed: 0,
+                failed: 0,
+                remaining: 0,
+                totalDurationMs: 0,
+                results: [],
+            };
+        }
+        const results = [];
+        // Process in batches for concurrency control
+        for (let i = 0; i < pending.length; i += this.maxConcurrent) {
+            const batch = pending.slice(i, i + this.maxConcurrent);
+            const batchResults = await Promise.all(batch.map(async (doc) => {
+                try {
+                    return await this.processDocument(doc.id, ocrMode);
+                }
+                catch (error) {
+                    // processDocument already marks doc as 'failed' before throwing
+                    const errorMsg = error instanceof Error ? error.message : String(error);
+                    return {
+                        success: false,
+                        documentId: doc.id,
+                        error: errorMsg,
+                        durationMs: 0,
+                    };
+                }
+            }));
+            results.push(...batchResults);
+        }
+        const processed = results.filter((r) => r.success).length;
+        const failed = results.length - processed;
+        const remaining = this.db.listDocuments({ status: 'pending' }).length;
+        return {
+            processed,
+            failed,
+            remaining,
+            totalDurationMs: Date.now() - startTime,
+            results,
+        };
+    }
+    /**
+     * H-2: Recover documents stuck in 'processing' status after a server crash.
+     * Any document that has been 'processing' for longer than 30 minutes is
+     * assumed to be orphaned from a crash and is reset to 'pending'.
+     */
+    recoverStaleProcessingDocuments() {
+        const conn = this.db.getConnection();
+        const staleRows = conn
+            .prepare(`SELECT id FROM documents WHERE status = 'processing'
+         AND modified_at < datetime('now', '-30 minutes')`)
+            .all();
+        for (const row of staleRows) {
+            console.error(`[WARN] Recovering stale 'processing' document ${row.id} (stuck >30min, likely server crash). Resetting to 'pending'.`);
+            this.db.updateDocumentStatus(row.id, 'pending');
+        }
+        if (staleRows.length > 0) {
+            console.error(`[INFO] Recovered ${staleRows.length} stale 'processing' document(s) to 'pending' status.`);
+        }
+    }
+    /**
+     * Create OCR_RESULT provenance record
+     */
+    createOCRProvenance(id, document, ocrResult, mode) {
+        const now = new Date().toISOString();
+        return {
+            id,
+            type: ProvenanceType.OCR_RESULT,
+            created_at: now,
+            processed_at: ocrResult.processing_completed_at,
+            source_file_created_at: null,
+            source_file_modified_at: document.modified_at,
+            source_type: 'OCR',
+            source_path: document.file_path,
+            source_id: document.provenance_id,
+            root_document_id: document.provenance_id,
+            location: null,
+            content_hash: ocrResult.content_hash,
+            input_hash: document.file_hash,
+            file_hash: document.file_hash,
+            processor: 'datalab-ocr',
+            processor_version: DATALAB_SDK_VERSION,
+            processing_params: {
+                mode,
+                output_format: 'markdown,json',
+                request_id: ocrResult.datalab_request_id,
+                paginate: true,
+            },
+            processing_duration_ms: ocrResult.processing_duration_ms,
+            processing_quality_score: ocrResult.parse_quality_score,
+            parent_id: document.provenance_id,
+            parent_ids: JSON.stringify([document.provenance_id]),
+            chain_depth: 1,
+            chain_path: JSON.stringify(['DOCUMENT', 'OCR_RESULT']),
+        };
+    }
+}
+//# sourceMappingURL=processor.js.map

package/dist/services/ocr/processor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"processor.js","sourceRoot":"","sources":["../../../src/services/ocr/processor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,aAAa,EAA4B,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAqB,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAGtD,OAAO,EAAE,cAAc,EAAyB,MAAM,4BAA4B,CAAC;AA0CnF;;;GAGG;AACH,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAEpC,SAAS,kBAAkB;IACzB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,GAAG,CAAC;IACtD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,oDAAoD,GAAG,GAAG,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,OAAO,YAAY;IACN,MAAM,CAAgB;IACtB,EAAE,CAAkB;IACpB,aAAa,CAAS;IACtB,WAAW,CAAmC;IAE/D,YAAY,EAAmB,EAAE,SAA0B,EAAE;QAC3D,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,kBAAkB,EAAE,CAAC;QAClE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,UAAU,CAAC;IACtD,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,eAAe,CACnB,UAAkB,EAClB,IAAuC,EACvC,UAQC;QAED,MAAM,OAAO,GAAG,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,kDAAkD;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,QAAQ,CAAC,uBAAuB,UAAU,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAC5E,CAAC;QAED,mCAAmC;QACnC,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAEvD,IAAI,CAAC;YACH,mEAAmE;YACnE,MAAM,eAAe,GAAG,MAAM,EAAE,CAAC;YACjC,IAAI,SAAoB,CAAC;YACzB,IAAI,MAA8B,CAAC;YACnC,IAAI,UAAU,GAAmC,IAAI,CAAC;YACtD,IAAI,QAAQ,GAAmC,IAAI,CAAC;YACpD,IAAI,WAAW,GAAiB,EAAE,CAAC;YACnC,IAAI,cAAc,GAA+C,IAAI,CAAC;YACtE,IAAI,QAAQ,GAAkB,IAAI,CAAC;YACnC,IAAI,SAAS,GAAkB,IAAI,CAAC;YACpC,IAAI,UAAU,GAAkB,IAAI,CAAC;YAErC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC9C,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAChD,QAAQ,CAAC,SAAS,EAClB,UAAU,EACV,eAAe,EACf,OAAO,EACP,UAAU,CACX,CAAC;oBACF,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC;oBAC5B,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;oBACzB,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;oBACjC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;oBAC7B,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;oBACnC,cAAc,GAAG,QAAQ,CAAC,cAAc,CAAC;oBACzC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;oBAC7B,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;oBAC/B,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;oBACjC,MAAM;gBACR,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,YAAY,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;wBACnF,OAAO,CAAC,KAAK,CAAC,uCAAuC,UAAU,eAAe,CAAC,CAAC;wBAChF,SAAS;oBACX,CAAC;oBACD,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,YAAY,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;wBACtF,MAAM,UAAU,GAAI,KAA2B,CAAC,UAAU,CAAC;wBAC3D,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;4BAC/C,OAAO,CAAC,KAAK,CACX,4CAA4C,UAAU,sBAAsB,UAAU,GAAG,CAC1F,CAAC;4BACF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC;wBACzE,CAAC;6BAAM,CAAC;4BACN,OAAO,CAAC,KAAK,CACX,4CAA4C,UAAU,6BAA6B,CACpF,CAAC;4BACF,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;wBACxB,CAAC;wBACD,SAAS;oBACX,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;YAED,uDAAuD;YACvD,SAAS,GAAG,SAAU,CAAC;YACvB,MAAM,GAAG,MAAO,CAAC;YAEjB,yCAAyC;YACzC,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YAC3F,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;YAErC,sBAAsB;YACtB,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;YAEnC,4BAA4B;YAC5B,IAAI,CAAC,EAAE,CAAC,yBAAyB,CAC/B,UAAU,EACV,SAAS,CAAC,UAAU,EACpB,SAAS,CAAC,uBAAuB,CAClC,CAAC;YAEF,kCAAkC;YAClC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;YAC9C,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;gBACnB,OAAO,CAAC,KAAK,CAAC,mBAAmB,UAAU,sBAAsB,CAAC,CAAC;YACrE,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,UAAU;gBACV,WAAW,EAAE,SAAS,CAAC,EAAE;gBACzB,YAAY,EAAE,eAAe;gBAC7B,SAAS,EAAE,SAAS,CAAC,UAAU;gBAC/B,UAAU,EAAE,SAAS,CAAC,WAAW;gBACjC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,MAAM,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBAC3C,UAAU;gBACV,QAAQ;gBACR,WAAW,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;gBAC7D,cAAc,EAAE,cAAc,IAAI,SAAS;gBAC3C,QAAQ,EAAE,QAAQ,IAAI,SAAS;gBAC/B,SAAS,EAAE,SAAS,IAAI,SAAS;gBACjC,UAAU,EAAE,UAAU,IAAI,SAAS;aACpC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,0EAA0E;YAC1E,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxE,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAE7D,0CAA0C;YAC1C,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;gBAC9B,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,QAAQ,CAAC,6BAA6B,UAAU,KAAK,QAAQ,EAAE,EAAE,eAAe,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,cAAc,CAAC,IAAuC;QAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC;QAEzC,8DAA8D;QAC9D,IAAI,CAAC,+BAA+B,EAAE,CAAC;QAEvC,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO;gBACL,SAAS,EAAE,CAAC;gBACZ,MAAM,EAAE,CAAC;gBACT,SAAS,EAAE,CAAC;gBACZ,eAAe,EAAE,CAAC;gBAClB,OAAO,EAAE,EAAE;aACZ,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAoB,EAAE,CAAC;QAEpC,6CAA6C;QAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;YACvD,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,GAAG,CACpC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBACtB,IAAI,CAAC;oBACH,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBACrD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,gEAAgE;oBAChE,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACxE,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,UAAU,EAAE,GAAG,CAAC,EAAE;wBAClB,KAAK,EAAE,QAAQ;wBACf,UAAU,EAAE,CAAC;qBACG,CAAC;gBACrB,CAAC;YACH,CAAC,CAAC,CACH,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;QAChC,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;QAE1C,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAEtE,OAAO;YACL,SAAS;YACT,MAAM;YACN,SAAS;YACT,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACvC,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACK,+BAA+B;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI;aACnB,OAAO,CACN;0DACkD,CACnD;aACA,GAAG,EAA2B,CAAC;QAElC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CACX,iDAAiD,GAAG,CAAC,EAAE,+DAA+D,CACvH,CAAC;YACF,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,KAAK,CACX,oBAAoB,SAAS,CAAC,MAAM,sDAAsD,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,mBAAmB,CACzB,EAAU,EACV,QAAkB,EAClB,SAAoB,EACpB,IAAsC;QAEtC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,OAAO;YACL,EAAE;YACF,IAAI,EAAE,cAAc,CAAC,UAAU;YAC/B,UAAU,EAAE,GAAG;YACf,YAAY,EAAE,SAAS,CAAC,uBAAuB;YAC/C,sBAAsB,EAAE,IAAI;YAC5B,uBAAuB,EAAE,QAAQ,CAAC,WAAW;YAC7C,WAAW,EAAE,KAAK;YAClB,WAAW,EAAE,QAAQ,CAAC,SAAS;YAC/B,SAAS,EAAE,QAAQ,CAAC,aAAa;YACjC,gBAAgB,EAAE,QAAQ,CAAC,aAAa;YACxC,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,UAAU,EAAE,QAAQ,CAAC,SAAS;YAC9B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,SAAS,EAAE,aAAa;YACxB,iBAAiB,EAAE,mBAAmB;YACtC,iBAAiB,EAAE;gBACjB,IAAI;gBACJ,aAAa,EAAE,eAAe;gBAC9B,UAAU,EAAE,SAAS,CAAC,kBAAkB;gBACxC,QAAQ,EAAE,IAAI;aACf;YACD,sBAAsB,EAAE,SAAS,CAAC,sBAAsB;YACxD,wBAAwB,EAAE,SAAS,CAAC,mBAAmB;YACvD,SAAS,EAAE,QAAQ,CAAC,aAAa;YACjC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;YACpD,WAAW,EAAE,CAAC;YACd,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;SACvD,CAAC;IACJ,CAAC;CACF"}

package/dist/services/provenance/agent-metadata.d.ts

@@ -0,0 +1,82 @@
+/**
+ * PROV-AGENT Metadata Builder
+ *
+ * Builds agent metadata for provenance records.
+ * Records model names, versions, parameters for AI operations.
+ * Records user context for user-triggered actions.
+ *
+ * CRITICAL: NEVER use console.log() - stdout is reserved for JSON-RPC protocol.
+ *
+ * @module services/provenance/agent-metadata
+ */
+export interface AgentMetadata {
+    agent_type: 'ai_model' | 'user' | 'system';
+    model_name?: string;
+    model_version?: string;
+    temperature?: number;
+    max_tokens?: number;
+    token_count?: {
+        input: number;
+        output: number;
+    };
+    confidence?: number;
+    user_id?: string;
+    session_id?: string;
+    client_type?: string;
+    duration_ms?: number;
+}
+/**
+ * Build agent metadata for OCR processing operations.
+ *
+ * @param params - OCR operation parameters
+ * @returns Serialized JSON string of agent metadata
+ */
+export declare function buildOCRAgentMetadata(params: {
+    mode: string;
+    durationMs: number;
+    pageCount: number;
+}): string;
+/**
+ * Build agent metadata for embedding generation operations.
+ *
+ * @param params - Embedding operation parameters
+ * @returns Serialized JSON string of agent metadata
+ */
+export declare function buildEmbeddingAgentMetadata(params: {
+    model: string;
+    device: string;
+    batchSize: number;
+    chunkCount: number;
+    durationMs: number;
+}): string;
+/**
+ * Build agent metadata for VLM (Vision Language Model) operations.
+ *
+ * @param params - VLM operation parameters
+ * @returns Serialized JSON string of agent metadata
+ */
+export declare function buildVLMAgentMetadata(params: {
+    model: string;
+    tokensUsed?: number;
+    confidence?: number;
+    durationMs?: number;
+}): string;
+/**
+ * Build agent metadata for user-triggered actions.
+ *
+ * @param params - User action parameters
+ * @returns Serialized JSON string of agent metadata
+ */
+export declare function buildUserAgentMetadata(params: {
+    userId?: string;
+    sessionId?: string;
+    action: string;
+}): string;
+/**
+ * Build agent metadata for system-triggered actions (migrations, background tasks).
+ *
+ * @param action - Description of the system action
+ * @returns Serialized JSON string of agent metadata
+ */
+export declare function buildSystemAgentMetadata(action: string): string;
+//# sourceMappingURL=agent-metadata.d.ts.map

package/dist/services/provenance/agent-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-metadata.d.ts","sourceRoot":"","sources":["../../../src/services/provenance/agent-metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAMD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,MAAM,CAQT;AAMD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,MAAM,CAaT;AAMD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,MAAM,CAWT;AAMD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,MAAM,CAOT;AAMD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAK/D"}

package/dist/services/provenance/agent-metadata.js

@@ -0,0 +1,106 @@
+/**
+ * PROV-AGENT Metadata Builder
+ *
+ * Builds agent metadata for provenance records.
+ * Records model names, versions, parameters for AI operations.
+ * Records user context for user-triggered actions.
+ *
+ * CRITICAL: NEVER use console.log() - stdout is reserved for JSON-RPC protocol.
+ *
+ * @module services/provenance/agent-metadata
+ */
+// ═══════════════════════════════════════════════════════════════════════════════
+// OCR AGENT METADATA
+// ═══════════════════════════════════════════════════════════════════════════════
+/**
+ * Build agent metadata for OCR processing operations.
+ *
+ * @param params - OCR operation parameters
+ * @returns Serialized JSON string of agent metadata
+ */
+export function buildOCRAgentMetadata(params) {
+    const metadata = {
+        agent_type: 'ai_model',
+        model_name: 'datalab-ocr',
+        model_version: params.mode,
+        duration_ms: params.durationMs,
+    };
+    return JSON.stringify({ ...metadata, page_count: params.pageCount });
+}
+// ═══════════════════════════════════════════════════════════════════════════════
+// EMBEDDING AGENT METADATA
+// ═══════════════════════════════════════════════════════════════════════════════
+/**
+ * Build agent metadata for embedding generation operations.
+ *
+ * @param params - Embedding operation parameters
+ * @returns Serialized JSON string of agent metadata
+ */
+export function buildEmbeddingAgentMetadata(params) {
+    const metadata = {
+        agent_type: 'ai_model',
+        model_name: params.model,
+        model_version: '1.5',
+        duration_ms: params.durationMs,
+    };
+    return JSON.stringify({
+        ...metadata,
+        device: params.device,
+        batch_size: params.batchSize,
+        chunks_processed: params.chunkCount,
+    });
+}
+// ═══════════════════════════════════════════════════════════════════════════════
+// VLM AGENT METADATA
+// ═══════════════════════════════════════════════════════════════════════════════
+/**
+ * Build agent metadata for VLM (Vision Language Model) operations.
+ *
+ * @param params - VLM operation parameters
+ * @returns Serialized JSON string of agent metadata
+ */
+export function buildVLMAgentMetadata(params) {
+    const metadata = {
+        agent_type: 'ai_model',
+        model_name: params.model,
+        confidence: params.confidence,
+        duration_ms: params.durationMs,
+    };
+    if (params.tokensUsed) {
+        metadata.token_count = { input: 0, output: params.tokensUsed };
+    }
+    return JSON.stringify(metadata);
+}
+// ═══════════════════════════════════════════════════════════════════════════════
+// USER AGENT METADATA
+// ═══════════════════════════════════════════════════════════════════════════════
+/**
+ * Build agent metadata for user-triggered actions.
+ *
+ * @param params - User action parameters
+ * @returns Serialized JSON string of agent metadata
+ */
+export function buildUserAgentMetadata(params) {
+    return JSON.stringify({
+        agent_type: 'user',
+        user_id: params.userId,
+        session_id: params.sessionId,
+        action: params.action,
+    });
+}
+// ═══════════════════════════════════════════════════════════════════════════════
+// SYSTEM AGENT METADATA
+// ═══════════════════════════════════════════════════════════════════════════════
+/**
+ * Build agent metadata for system-triggered actions (migrations, background tasks).
+ *
+ * @param action - Description of the system action
+ * @returns Serialized JSON string of agent metadata
+ */
+export function buildSystemAgentMetadata(action) {
+    return JSON.stringify({
+        agent_type: 'system',
+        action,
+    });
+}
+//# sourceMappingURL=agent-metadata.js.map

package/dist/services/provenance/agent-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-metadata.js","sourceRoot":"","sources":["../../../src/services/provenance/agent-metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAoBH,kFAAkF;AAClF,qBAAqB;AACrB,kFAAkF;AAElF;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAIrC;IACC,MAAM,QAAQ,GAAkB;QAC9B,UAAU,EAAE,UAAU;QACtB,UAAU,EAAE,aAAa;QACzB,aAAa,EAAE,MAAM,CAAC,IAAI;QAC1B,WAAW,EAAE,MAAM,CAAC,UAAU;KAC/B,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,kFAAkF;AAClF,2BAA2B;AAC3B,kFAAkF;AAElF;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAM3C;IACC,MAAM,QAAQ,GAAkB;QAC9B,UAAU,EAAE,UAAU;QACtB,UAAU,EAAE,MAAM,CAAC,KAAK;QACxB,aAAa,EAAE,KAAK;QACpB,WAAW,EAAE,MAAM,CAAC,UAAU;KAC/B,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,GAAG,QAAQ;QACX,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,gBAAgB,EAAE,MAAM,CAAC,UAAU;KACpC,CAAC,CAAC;AACL,CAAC;AAED,kFAAkF;AAClF,qBAAqB;AACrB,kFAAkF;AAElF;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAKrC;IACC,MAAM,QAAQ,GAAkB;QAC9B,UAAU,EAAE,UAAU;QACtB,UAAU,EAAE,MAAM,CAAC,KAAK;QACxB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,WAAW,EAAE,MAAM,CAAC,UAAU;KAC/B,CAAC;IACF,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,QAAQ,CAAC,WAAW,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,kFAAkF;AAClF,sBAAsB;AACtB,kFAAkF;AAElF;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAItC;IACC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,UAAU,EAAE,MAAM;QAClB,OAAO,EAAE,MAAM,CAAC,MAAM;QACtB,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,kFAAkF;AAClF,wBAAwB;AACxB,kFAAkF;AAElF;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACrD,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,UAAU,EAAE,QAAQ;QACpB,MAAM;KACP,CAAC,CAAC;AACL,CAAC"}

package/dist/services/provenance/chain-hash.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Hash-Chain Verification for Provenance
+ *
+ * Creates a tamper-evident Merkle-like chain where each provenance record
+ * includes SHA-256(content_hash + parent.chain_hash).
+ *
+ * CRITICAL: NEVER use console.log() - stdout is reserved for JSON-RPC protocol.
+ *
+ * @module services/provenance/chain-hash
+ */
+import type Database from 'better-sqlite3';
+export interface ChainVerificationResult {
+    valid: boolean;
+    total_records: number;
+    verified: number;
+    broken_at: string | null;
+    error?: string;
+}
+export interface BackfillResult {
+    updated: number;
+    errors: number;
+}
+/**
+ * Compute chain hash for a provenance record.
+ *
+ * Chain hash = SHA-256(content_hash + ":" + parent_chain_hash)
+ * For root records (no parent): SHA-256(content_hash)
+ *
+ * @param contentHash - The content hash of the current record
+ * @param parentChainHash - The chain hash of the parent record, or null for roots
+ * @returns Hex-encoded SHA-256 chain hash
+ */
+export declare function computeChainHash(contentHash: string, parentChainHash: string | null): string;
+/**
+ * Verify the chain hash integrity for all provenance records of a root document.
+ *
+ * Walks the provenance chain in depth-first order, recomputing each chain_hash
+ * from (content_hash, parent.chain_hash) and comparing against the stored value.
+ *
+ * Pre-v32 records without chain_hash are considered valid (unverifiable).
+ *
+ * @param conn - Database connection
+ * @param rootDocumentId - The root document provenance ID to verify
+ * @returns Verification result with record counts and any breakage point
+ */
+export declare function verifyChainHashes(conn: Database.Database, rootDocumentId: string): ChainVerificationResult;
+/**
+ * Backfill chain hashes for existing provenance records that don't have them.
+ *
+ * Processes records in depth-first order (chain_depth ASC) so that parent
+ * chain hashes are available when computing child hashes.
+ *
+ * @param conn - Database connection
+ * @returns Count of updated records and errors
+ */
+export declare function backfillChainHashes(conn: Database.Database): BackfillResult;
+//# sourceMappingURL=chain-hash.d.ts.map

package/dist/services/provenance/chain-hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain-hash.d.ts","sourceRoot":"","sources":["../../../src/services/provenance/chain-hash.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAM3C,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,OAAO,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAMD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAK5F;AAMD;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,QAAQ,CAAC,QAAQ,EACvB,cAAc,EAAE,MAAM,GACrB,uBAAuB,CAkDzB;AAMD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,GAAG,cAAc,CA6C3E"}

package/dist/services/provenance/chain-hash.js

@@ -0,0 +1,131 @@
+/**
+ * Hash-Chain Verification for Provenance
+ *
+ * Creates a tamper-evident Merkle-like chain where each provenance record
+ * includes SHA-256(content_hash + parent.chain_hash).
+ *
+ * CRITICAL: NEVER use console.log() - stdout is reserved for JSON-RPC protocol.
+ *
+ * @module services/provenance/chain-hash
+ */
+import { createHash } from 'crypto';
+// ═══════════════════════════════════════════════════════════════════════════════
+// HASH COMPUTATION
+// ═══════════════════════════════════════════════════════════════════════════════
+/**
+ * Compute chain hash for a provenance record.
+ *
+ * Chain hash = SHA-256(content_hash + ":" + parent_chain_hash)
+ * For root records (no parent): SHA-256(content_hash)
+ *
+ * @param contentHash - The content hash of the current record
+ * @param parentChainHash - The chain hash of the parent record, or null for roots
+ * @returns Hex-encoded SHA-256 chain hash
+ */
+export function computeChainHash(contentHash, parentChainHash) {
+    const input = parentChainHash
+        ? `${contentHash}:${parentChainHash}`
+        : contentHash;
+    return createHash('sha256').update(input).digest('hex');
+}
+// ═══════════════════════════════════════════════════════════════════════════════
+// CHAIN VERIFICATION
+// ═══════════════════════════════════════════════════════════════════════════════
+/**
+ * Verify the chain hash integrity for all provenance records of a root document.
+ *
+ * Walks the provenance chain in depth-first order, recomputing each chain_hash
+ * from (content_hash, parent.chain_hash) and comparing against the stored value.
+ *
+ * Pre-v32 records without chain_hash are considered valid (unverifiable).
+ *
+ * @param conn - Database connection
+ * @param rootDocumentId - The root document provenance ID to verify
+ * @returns Verification result with record counts and any breakage point
+ */
+export function verifyChainHashes(conn, rootDocumentId) {
+    const records = conn.prepare(`
+    SELECT id, content_hash, chain_hash, parent_id
+    FROM provenance
+    WHERE root_document_id = ?
+    ORDER BY chain_depth ASC, created_at ASC
+  `).all(rootDocumentId);
+    if (records.length === 0) {
+        return { valid: true, total_records: 0, verified: 0, broken_at: null };
+    }
+    // Build a map for fast parent lookups
+    const recordMap = new Map(records.map(r => [r.id, r]));
+    let verified = 0;
+    for (const record of records) {
+        if (!record.chain_hash) {
+            // Records without chain_hash are pre-v32 (valid, just unverifiable)
+            verified++;
+            continue;
+        }
+        const parentRecord = record.parent_id ? recordMap.get(record.parent_id) : null;
+        const parentChainHash = parentRecord?.chain_hash ?? null;
+        const expectedHash = computeChainHash(record.content_hash, parentChainHash);
+        if (record.chain_hash !== expectedHash) {
+            return {
+                valid: false,
+                total_records: records.length,
+                verified,
+                broken_at: record.id,
+                error: `Chain hash mismatch at ${record.id}: expected ${expectedHash}, got ${record.chain_hash}`,
+            };
+        }
+        verified++;
+    }
+    return {
+        valid: true,
+        total_records: records.length,
+        verified,
+        broken_at: null,
+    };
+}
+// ═══════════════════════════════════════════════════════════════════════════════
+// BACKFILL
+// ═══════════════════════════════════════════════════════════════════════════════
+/**
+ * Backfill chain hashes for existing provenance records that don't have them.
+ *
+ * Processes records in depth-first order (chain_depth ASC) so that parent
+ * chain hashes are available when computing child hashes.
+ *
+ * @param conn - Database connection
+ * @returns Count of updated records and errors
+ */
+export function backfillChainHashes(conn) {
+    const records = conn.prepare(`
+    SELECT id, content_hash, parent_id, chain_hash
+    FROM provenance
+    WHERE chain_hash IS NULL
+    ORDER BY chain_depth ASC, created_at ASC
+  `).all();
+    let updated = 0;
+    let errors = 0;
+    const hashMap = new Map();
+    // Also load existing chain hashes for parent lookups
+    const existing = conn.prepare('SELECT id, chain_hash FROM provenance WHERE chain_hash IS NOT NULL').all();
+    for (const r of existing) {
+        hashMap.set(r.id, r.chain_hash);
+    }
+    const updateStmt = conn.prepare('UPDATE provenance SET chain_hash = ? WHERE id = ?');
+    for (const record of records) {
+        try {
+            const parentChainHash = record.parent_id
+                ? (hashMap.get(record.parent_id) ?? null)
+                : null;
+            const chainHash = computeChainHash(record.content_hash, parentChainHash);
+            updateStmt.run(chainHash, record.id);
+            hashMap.set(record.id, chainHash);
+            updated++;
+        }
+        catch (error) {
+            console.error(`[ChainHash] Failed to backfill ${record.id}: ${error instanceof Error ? error.message : String(error)}`);
+            errors++;
+        }
+    }
+    return { updated, errors };
+}
+//# sourceMappingURL=chain-hash.js.map