openworkgraph 0.3.1 → 0.3.2

package/README.md

@@ -1,64 +1,64 @@
-# OpenWorkgraph
-
-OpenWorkgraph 是基于无限画布思想的软件开发工作流产品，同时面向其他领域的工作组织与协作。
-
-## 快速开始
-
-打开 [OpenWorkgraph 官方编辑器](https://workgraph.giarld.com/)，按照页面提供的引导完成配置即可开始使用。
-
-## 本地构建与运行
-
-### Agent Service
-
-在仓库根目录构建协议包和 Agent Service：
-
-```sh
-npm run build
-```
-
-构建完成后，以前台方式运行 Agent Service：
-
-```sh
-node agent-service/dist/cli.js start
-```
-
-### Web Client
-
-在仓库根目录构建 Web Client，并通过 Vite Preview 在 `http://127.0.0.1:4173` 运行生产构建：
-
-```sh
-npm --prefix web-client run build
-npm --prefix web-client run preview -- --host 127.0.0.1 --port 4173
-```
-
-打开 Web Client 后，填写运行时地址并点击“生成客户端码”。在运行时所在机器执行以下命令，输入浏览器显示的 8 位客户端码，核对来源和公钥指纹后确认；浏览器会轮询批准状态，完成私钥证明和通讯凭据交换后自动连接：
-
-```sh
-node agent-service/dist/cli.js pair --client-code '<客户端码>'
-```
-
-客户端码显示为连续 8 位数字，例如 `12345678`，中间没有空格，5 分钟有效。终端默认输出英文可读的批准结果；仅脚本需要解析时加 `--output-json`（非交互批准还需 `--yes`）。
-
-一机只运行一个服务。`--data-dir` 仅用于 `start` 和 `serve`；启动成功后自动记住目录，配对、查看状态、停止、日志和备份命令都无需再填写。停服后运行 `start` 会沿用原目录，首次启动未指定时使用用户主目录下的 `.openworkgraph`。重复启动会明确拒绝，不提供服务选择或切换步骤。
-
-无需手填 `--origin`，不强制 HTTPS，支持可信局域网普通 HTTP。HTTP 不加密，请勿暴露公网。
-
-### 检查与测试
-
-```sh
-npm test
-npm --prefix web-client run typecheck
-npm --prefix web-client test
-npm --prefix web-client run build
-npm --prefix web-client run test:e2e
-```
-
-以上命令在仓库根目录执行；Web 构建输出为 `web-client/dist/`，浏览器测试使用已安装的 Chrome。
-
-## 参考依据与致谢
-
-Web UI 参考了 [basketikun/infinite-canvas](https://github.com/basketikun/infinite-canvas) 的视觉风格和画布交互，感谢原作者 basketikun。该项目采用 [MIT License](https://github.com/basketikun/infinite-canvas/blob/d213a74614e0e4bd8a26383d1e1e907249e9c61b/LICENSE)；复用其代码或其他适用内容时，应保留原版权与许可声明。第三方素材若有独立授权，以其各自许可为准。
-
-## 许可证
-
-本项目采用 [MIT License](LICENSE)。第三方来源的版权与许可声明按原始归属保留。
+# OpenWorkgraph
+
+OpenWorkgraph 是基于无限画布思想的软件开发工作流产品，同时面向其他领域的工作组织与协作。
+
+## 快速开始
+
+打开 [OpenWorkgraph 官方编辑器](https://workgraph.giarld.com/)，按照页面提供的引导完成配置即可开始使用。
+
+## 本地构建与运行
+
+### Agent Service
+
+在仓库根目录构建协议包和 Agent Service：
+
+```sh
+npm run build
+```
+
+构建完成后，以前台方式运行 Agent Service：
+
+```sh
+node agent-service/dist/cli.js start
+```
+
+### Web Client
+
+在仓库根目录构建 Web Client，并通过 Vite Preview 在 `http://127.0.0.1:4173` 运行生产构建：
+
+```sh
+npm --prefix web-client run build
+npm --prefix web-client run preview -- --host 127.0.0.1 --port 4173
+```
+
+打开 Web Client 后，填写运行时地址并点击“生成客户端码”。在运行时所在机器执行以下命令，输入浏览器显示的 8 位客户端码，核对来源和公钥指纹后确认；浏览器会轮询批准状态，完成私钥证明和通讯凭据交换后自动连接：
+
+```sh
+node agent-service/dist/cli.js pair --client-code '<客户端码>'
+```
+
+客户端码显示为连续 8 位数字，例如 `12345678`，中间没有空格，5 分钟有效。终端默认输出英文可读的批准结果；仅脚本需要解析时加 `--output-json`（非交互批准还需 `--yes`）。
+
+一机只运行一个服务。`--data-dir` 仅用于 `start` 和 `serve`；启动成功后自动记住目录，配对、查看状态、停止、日志和备份命令都无需再填写。停服后运行 `start` 会沿用原目录，首次启动未指定时使用用户主目录下的 `.openworkgraph`。重复启动会明确拒绝，不提供服务选择或切换步骤。
+
+无需手填 `--origin`，不强制 HTTPS，支持可信局域网普通 HTTP。HTTP 不加密，请勿暴露公网。
+
+### 检查与测试
+
+```sh
+npm test
+npm --prefix web-client run typecheck
+npm --prefix web-client test
+npm --prefix web-client run build
+npm --prefix web-client run test:e2e
+```
+
+以上命令在仓库根目录执行；Web 构建输出为 `web-client/dist/`，浏览器测试使用已安装的 Chrome。
+
+## 参考依据与致谢
+
+Web UI 参考了 [basketikun/infinite-canvas](https://github.com/basketikun/infinite-canvas) 的视觉风格和画布交互，感谢原作者 basketikun。该项目采用 [MIT License](https://github.com/basketikun/infinite-canvas/blob/d213a74614e0e4bd8a26383d1e1e907249e9c61b/LICENSE)；复用其代码或其他适用内容时，应保留原版权与许可声明。第三方素材若有独立授权，以其各自许可为准。
+
+## 许可证
+
+本项目采用 [MIT License](LICENSE)。第三方来源的版权与许可声明按原始归属保留。

package/dist/builtin-skills.d.ts

@@ -35,12 +35,20 @@ export declare class BuiltinSkills {
     private cached;
     catalog(refresh?: boolean): Promise<SkillCatalog>;
     installed(): Promise<SkillCatalogItem[]>;
+    /** Local records plus already-known update information; never refresh the source. */
+    installedCatalog(): Promise<SkillCatalog>;
     private versionDirectory;
+    /** UI reads only the installed schema and manifest, without hashing package contents. */
+    packageMetadata(skillId: string, packageVersion?: string): Promise<{
+        config: SkillConfigSchema;
+        item: SkillCatalogItem;
+    }>;
     packageEntry(skillId: string, packageVersion?: string): Promise<{
         path: string;
         config: SkillConfigSchema;
         item: SkillCatalogItem;
     }>;
+    private readPackageEntry;
     /** Holds the same cross-process lock as updates while a configuration write uses its schema. */
     withPackageEntry<T>(skillId: string, expectedVersion: string, work: (entry: {
         path: string;

package/dist/builtin-skills.js

@@ -343,12 +343,27 @@ export class BuiltinSkills {
         return { items: [...result.values()].sort((a, b) => a.name.localeCompare(b.name)), stale: !!error, ...(error ? { error } : {}) };
     }
     async installed() { await this.initialize(); return Object.values((await this.state()).items).filter(item => item.installed); }
+    /** Local records plus already-known update information; never refresh the source. */
+    async installedCatalog() {
+        const items = await this.installed();
+        const cache = await this.readJson('catalog-' + key(JSON.stringify(this.source)) + '.json');
+        const versions = new Map((cache?.packages ?? []).map(pkg => [pkg.item.skillId, pkg.item.packageVersion]));
+        return { items: items.map(item => ({ ...item, updateAvailable: versions.has(item.skillId) && versions.get(item.skillId) !== item.packageVersion })).sort((a, b) => a.name.localeCompare(b.name)), stale: false };
+    }
     versionDirectory(id, version) {
         if (!id || id.length > 1024 || !/^[a-f0-9]{64}$/.test(version))
             throw new ServiceError('INVALID_REQUEST', '技能身份或包版本无效。');
         return 'versions/' + key(id) + '/' + version;
     }
+    /** UI reads only the installed schema and manifest, without hashing package contents. */
+    async packageMetadata(skillId, packageVersion) {
+        const { config, item } = await this.readPackageEntry(skillId, packageVersion, false);
+        return { config, item };
+    }
     async packageEntry(skillId, packageVersion) {
+        return this.readPackageEntry(skillId, packageVersion, false);
+    }
+    async readPackageEntry(skillId, packageVersion, verifyIntegrity) {
         await this.initialize();
         const current = (await this.state()).items[skillId];
         const version = packageVersion ?? (current?.installed ? current.packageVersion : undefined);
@@ -359,13 +374,15 @@ export class BuiltinSkills {
         if (!manifest || manifest.version !== 1 || manifest.item.skillId !== skillId || manifest.item.packageVersion !== version)
             throw new ServiceError('NOT_FOUND', '技能固定包版本不可用。');
         validatePackageFiles({ directory: manifest.item.directory, files: manifest.files });
-        if (packageDigest(manifest.files) !== version)
-            throw new ServiceError('INVALID_REQUEST', '技能包元数据摘要无效。');
-        for (const file of manifest.files) {
-            const path = await this.checked(relative + '/package/' + file.path);
-            const stat = await fs.stat(path);
-            if (!stat.isFile() || stat.size !== file.size || gitBlobSha(await fs.readFile(path)) !== file.sha)
-                throw new ServiceError('INVALID_REQUEST', '已安装技能包完整性校验失败。');
+        if (verifyIntegrity) {
+            if (packageDigest(manifest.files) !== version)
+                throw new ServiceError('INVALID_REQUEST', '技能包元数据摘要无效。');
+            for (const file of manifest.files) {
+                const path = await this.checked(relative + '/package/' + file.path);
+                const stat = await fs.stat(path);
+                if (!stat.isFile() || stat.size !== file.size || gitBlobSha(await fs.readFile(path)) !== file.sha)
+                    throw new ServiceError('INVALID_REQUEST', '已安装技能包完整性校验失败。');
+            }
         }
         const config = parseSkillConfig(await fs.readFile(await this.checked(relative + '/package/config.json'), 'utf8'));
         return { path: await this.checked(relative + '/package/SKILL.md'), config, item: current?.installed && current.packageVersion === version ? current : manifest.item };
@@ -389,18 +406,18 @@ export class BuiltinSkills {
             if (manifest.version !== 1 || manifest.item.skillId !== skillId || manifest.item.packageVersion !== packageVersion)
                 throw new ServiceError('INVALID_REQUEST', '技能包元数据无效。');
             validatePackageFiles({ directory: manifest.item.directory, files: manifest.files });
-            if (packageDigest(manifest.files) !== packageVersion)
-                throw new ServiceError('INVALID_REQUEST', '技能包元数据摘要无效。');
             const file = manifest.files.find(file => file.path === path);
             if (!file)
                 throw new ServiceError('NOT_FOUND', '技能包资源不存在。');
             const target = await this.checked(relative + '/package/' + path);
             const stat = await fs.stat(target);
-            if (!stat.isFile() || stat.size !== file.size)
-                throw new ServiceError('INVALID_REQUEST', '技能资源完整性校验失败。');
+            if (!stat.isFile())
+                throw new ServiceError('INVALID_REQUEST', '技能资源不是普通文件。');
+            if (stat.size > SKILL_LIMITS.fileBytes)
+                throw new ServiceError('PAYLOAD_TOO_LARGE', '技能资源超过大小限制。');
             const bytes = await fs.readFile(target);
-            if (gitBlobSha(bytes) !== file.sha)
-                throw new ServiceError('INVALID_REQUEST', '技能资源完整性校验失败。');
+            if (bytes.length > SKILL_LIMITS.fileBytes)
+                throw new ServiceError('PAYLOAD_TOO_LARGE', '技能资源超过大小限制。');
             return bytes;
         }
         const { cache, error } = await this.cached();
@@ -478,7 +495,7 @@ export class BuiltinSkills {
                 if (!existing)
                     await fs.rename(await this.checked(staging), await this.checked(target));
                 else
-                    await this.packageEntry(skillId, item.packageVersion);
+                    await this.readPackageEntry(skillId, item.packageVersion, true);
                 deadline.check();
                 state.items[skillId] = item;
                 await this.atomicJson('installed.json', state);

package/dist/graphs.js

@@ -188,19 +188,19 @@ export class Graphs {
     activeNode(nodeId) { return Boolean(this.db.prepare(`SELECT 1 FROM runs WHERE node_id=? AND status NOT IN (${TERMINAL_RUN_STATUSES.map(() => '?').join(',')}) LIMIT 1`).get(nodeId, ...TERMINAL_RUN_STATUSES)); }
     activeExecutionChainNodeIds(scope) {
         const terminal = TERMINAL_RUN_STATUSES.map(() => '?').join(',');
-        const rows = this.db.prepare(`
-      SELECT DISTINCT member.node_id
-      FROM runs member
-      JOIN run_runtime member_rt ON member_rt.run_id=member.id
-      WHERE member.graph_id=?
-        AND json_extract(member_rt.details,'$.chainBatch') IN (
-          SELECT json_extract(active_rt.details,'$.chainBatch')
-          FROM runs active
-          JOIN run_runtime active_rt ON active_rt.run_id=active.id
-          WHERE active.graph_id=?
-            AND active.status NOT IN (${terminal})
-            AND json_extract(active_rt.details,'$.chainBatch') IS NOT NULL
-        )
+        const rows = this.db.prepare(`
+      SELECT DISTINCT member.node_id
+      FROM runs member
+      JOIN run_runtime member_rt ON member_rt.run_id=member.id
+      WHERE member.graph_id=?
+        AND json_extract(member_rt.details,'$.chainBatch') IN (
+          SELECT json_extract(active_rt.details,'$.chainBatch')
+          FROM runs active
+          JOIN run_runtime active_rt ON active_rt.run_id=active.id
+          WHERE active.graph_id=?
+            AND active.status NOT IN (${terminal})
+            AND json_extract(active_rt.details,'$.chainBatch') IS NOT NULL
+        )
     `).all(scope.graphId, scope.graphId, ...TERMINAL_RUN_STATUSES);
         return new Set(rows.map(row => String(row['node_id'])));
     }
@@ -271,10 +271,10 @@ export class Graphs {
             const hashes = this.db.prepare('SELECT DISTINCT v.sha256 FROM canvas_resource_versions v JOIN canvas_resources r ON r.id=v.resource_id WHERE r.graph_id=?').all(id).map(row => String(row['sha256']));
             // Keep request hashes as non-replayable tombstones: retries cannot recreate
             // a deleted graph or disclose old snapshots through cached responses.
-            this.db.prepare(`UPDATE idempotency SET response='null',invalidated=1 WHERE
-        json_extract(response,'$.graphId')=? OR json_extract(response,'$.resource.graphId')=?
-        OR json_extract(response,'$.runId') IN (SELECT id FROM runs WHERE graph_id=?)
-        OR json_extract(response,'$.id') IN (SELECT id FROM runs WHERE graph_id=?)
+            this.db.prepare(`UPDATE idempotency SET response='null',invalidated=1 WHERE
+        json_extract(response,'$.graphId')=? OR json_extract(response,'$.resource.graphId')=?
+        OR json_extract(response,'$.runId') IN (SELECT id FROM runs WHERE graph_id=?)
+        OR json_extract(response,'$.id') IN (SELECT id FROM runs WHERE graph_id=?)
         OR EXISTS(SELECT 1 FROM json_each(response,'$.runIds') j WHERE j.value IN (SELECT id FROM runs WHERE graph_id=?))`).run(id, id, id, id, id);
             this.db.prepare('DELETE FROM asset_references WHERE run_id IN (SELECT id FROM runs WHERE graph_id=?) OR node_id IN (SELECT id FROM nodes WHERE graph_id=?)').run(id, id);
             this.db.prepare('DELETE FROM canvas_resource_references WHERE graph_id=?').run(id);

package/dist/persistence/asset-business-schema.js

@@ -1,36 +1,36 @@
 /** Additive schema 6 fragment. No legacy resource conversion or file migration. */
-export const ASSET_BUSINESS_SCHEMA = `
-CREATE TABLE resource_uploads (
- id TEXT PRIMARY KEY, project_id TEXT NOT NULL REFERENCES projects(id),
- name TEXT NOT NULL, mime TEXT NOT NULL, bytes INTEGER NOT NULL CHECK(bytes >= 0),
- expected_sha256 TEXT, received INTEGER NOT NULL DEFAULT 0 CHECK(received >= 0 AND received <= bytes),
- state TEXT NOT NULL DEFAULT 'uploading' CHECK(state IN ('uploading','finished')),
- sha256 TEXT REFERENCES blobs(sha256), created_at INTEGER NOT NULL,
- CHECK((state='finished' AND sha256 IS NOT NULL) OR (state='uploading' AND sha256 IS NULL))
-) STRICT;
-CREATE TABLE resource_upload_chunks (
- upload_id TEXT NOT NULL REFERENCES resource_uploads(id), offset INTEGER NOT NULL CHECK(offset >= 0),
- bytes INTEGER NOT NULL CHECK(bytes > 0), sha256 TEXT NOT NULL, path TEXT NOT NULL UNIQUE,
- PRIMARY KEY(upload_id,offset)
-) STRICT;
-CREATE TABLE resource_blob_files (sha256 TEXT PRIMARY KEY REFERENCES blobs(sha256), path TEXT NOT NULL UNIQUE) STRICT;
-CREATE TABLE resource_file_deletions (path TEXT PRIMARY KEY, created_at INTEGER NOT NULL, completed INTEGER NOT NULL DEFAULT 0 CHECK(completed IN (0,1))) STRICT;
-CREATE TABLE resource_read_leases (id TEXT PRIMARY KEY, sha256 TEXT NOT NULL REFERENCES blobs(sha256)) STRICT;
-CREATE TABLE resource_maintenance_leases (id TEXT PRIMARY KEY, kind TEXT NOT NULL CHECK(kind IN ('backup','drain')), created_at INTEGER NOT NULL) STRICT;
-CREATE TABLE resource_representations (
- sha256 TEXT NOT NULL REFERENCES blobs(sha256), processor TEXT NOT NULL, version INTEGER NOT NULL CHECK(version > 0),
- state TEXT NOT NULL CHECK(state IN ('ready','unsupported','failed')), mime TEXT NOT NULL, text TEXT, reason TEXT,
- PRIMARY KEY(sha256,processor,version)
-) STRICT;
-CREATE TRIGGER resource_blob_file_immutable BEFORE UPDATE ON resource_blob_files BEGIN SELECT RAISE(ABORT,'immutable blob file'); END;
-CREATE TRIGGER resource_asset_ref_reset AFTER UPDATE OF asset_id ON asset_references BEGIN
- UPDATE assets SET unreferenced_since=NULL WHERE id IN (OLD.asset_id,NEW.asset_id);
-END;
-CREATE TRIGGER resource_no_rebind_deleted_asset BEFORE UPDATE OF asset_id,asset_version ON asset_references
- WHEN (NEW.asset_id!=OLD.asset_id OR NEW.asset_version!=OLD.asset_version) AND (SELECT deleted_at FROM assets WHERE id=NEW.asset_id) IS NOT NULL
- BEGIN SELECT RAISE(ABORT,'deleted assets reject new references'); END;
-CREATE TRIGGER resource_output_added AFTER INSERT ON outputs BEGIN UPDATE assets SET unreferenced_since=NULL WHERE id=NEW.asset_id; END;
-CREATE TRIGGER resource_output_removed AFTER DELETE ON outputs BEGIN UPDATE assets SET unreferenced_since=NULL WHERE id=OLD.asset_id; END;
-CREATE TRIGGER resource_output_changed AFTER UPDATE OF asset_id ON outputs BEGIN UPDATE assets SET unreferenced_since=NULL WHERE id IN (OLD.asset_id,NEW.asset_id); END;
+export const ASSET_BUSINESS_SCHEMA = `
+CREATE TABLE resource_uploads (
+ id TEXT PRIMARY KEY, project_id TEXT NOT NULL REFERENCES projects(id),
+ name TEXT NOT NULL, mime TEXT NOT NULL, bytes INTEGER NOT NULL CHECK(bytes >= 0),
+ expected_sha256 TEXT, received INTEGER NOT NULL DEFAULT 0 CHECK(received >= 0 AND received <= bytes),
+ state TEXT NOT NULL DEFAULT 'uploading' CHECK(state IN ('uploading','finished')),
+ sha256 TEXT REFERENCES blobs(sha256), created_at INTEGER NOT NULL,
+ CHECK((state='finished' AND sha256 IS NOT NULL) OR (state='uploading' AND sha256 IS NULL))
+) STRICT;
+CREATE TABLE resource_upload_chunks (
+ upload_id TEXT NOT NULL REFERENCES resource_uploads(id), offset INTEGER NOT NULL CHECK(offset >= 0),
+ bytes INTEGER NOT NULL CHECK(bytes > 0), sha256 TEXT NOT NULL, path TEXT NOT NULL UNIQUE,
+ PRIMARY KEY(upload_id,offset)
+) STRICT;
+CREATE TABLE resource_blob_files (sha256 TEXT PRIMARY KEY REFERENCES blobs(sha256), path TEXT NOT NULL UNIQUE) STRICT;
+CREATE TABLE resource_file_deletions (path TEXT PRIMARY KEY, created_at INTEGER NOT NULL, completed INTEGER NOT NULL DEFAULT 0 CHECK(completed IN (0,1))) STRICT;
+CREATE TABLE resource_read_leases (id TEXT PRIMARY KEY, sha256 TEXT NOT NULL REFERENCES blobs(sha256)) STRICT;
+CREATE TABLE resource_maintenance_leases (id TEXT PRIMARY KEY, kind TEXT NOT NULL CHECK(kind IN ('backup','drain')), created_at INTEGER NOT NULL) STRICT;
+CREATE TABLE resource_representations (
+ sha256 TEXT NOT NULL REFERENCES blobs(sha256), processor TEXT NOT NULL, version INTEGER NOT NULL CHECK(version > 0),
+ state TEXT NOT NULL CHECK(state IN ('ready','unsupported','failed')), mime TEXT NOT NULL, text TEXT, reason TEXT,
+ PRIMARY KEY(sha256,processor,version)
+) STRICT;
+CREATE TRIGGER resource_blob_file_immutable BEFORE UPDATE ON resource_blob_files BEGIN SELECT RAISE(ABORT,'immutable blob file'); END;
+CREATE TRIGGER resource_asset_ref_reset AFTER UPDATE OF asset_id ON asset_references BEGIN
+ UPDATE assets SET unreferenced_since=NULL WHERE id IN (OLD.asset_id,NEW.asset_id);
+END;
+CREATE TRIGGER resource_no_rebind_deleted_asset BEFORE UPDATE OF asset_id,asset_version ON asset_references
+ WHEN (NEW.asset_id!=OLD.asset_id OR NEW.asset_version!=OLD.asset_version) AND (SELECT deleted_at FROM assets WHERE id=NEW.asset_id) IS NOT NULL
+ BEGIN SELECT RAISE(ABORT,'deleted assets reject new references'); END;
+CREATE TRIGGER resource_output_added AFTER INSERT ON outputs BEGIN UPDATE assets SET unreferenced_since=NULL WHERE id=NEW.asset_id; END;
+CREATE TRIGGER resource_output_removed AFTER DELETE ON outputs BEGIN UPDATE assets SET unreferenced_since=NULL WHERE id=OLD.asset_id; END;
+CREATE TRIGGER resource_output_changed AFTER UPDATE OF asset_id ON outputs BEGIN UPDATE assets SET unreferenced_since=NULL WHERE id IN (OLD.asset_id,NEW.asset_id); END;
 `;
 //# sourceMappingURL=asset-business-schema.js.map

package/dist/persistence/plugin-schema.js

@@ -6,33 +6,33 @@
  * explicit recovery metadata; this migration cannot infer those mutations.
  * Ambiguous preexisting read_only rows stay original, never auto-unlocked.
  */
-export const PLUGIN_SCHEMA = `
-ALTER TABLE nodes ADD COLUMN read_only_reason TEXT NOT NULL DEFAULT 'none'
-  CHECK(read_only_reason IN ('none','missing_plugin','original'));
-UPDATE nodes SET read_only_reason='original' WHERE read_only=1;
-CREATE TABLE node_version_schemas (
-  node_id TEXT NOT NULL,
-  version INTEGER NOT NULL CHECK(version > 0),
-  schema_version INTEGER NOT NULL CHECK(schema_version > 0),
-  PRIMARY KEY(node_id,version),
-  FOREIGN KEY(node_id,version) REFERENCES node_versions(node_id,version) ON DELETE CASCADE
-) STRICT;
-INSERT INTO node_version_schemas(node_id,version,schema_version)
-  SELECT v.node_id,v.version,n.schema_version FROM node_versions v JOIN nodes n ON n.id=v.node_id;
-CREATE TRIGGER node_version_schema_capture AFTER INSERT ON node_versions BEGIN
-  INSERT INTO node_version_schemas(node_id,version,schema_version)
-    SELECT NEW.node_id,NEW.version,schema_version FROM nodes WHERE id=NEW.node_id;
-END;
-CREATE TRIGGER node_version_schema_immutable BEFORE UPDATE ON node_version_schemas BEGIN
-  SELECT RAISE(ABORT,'immutable node version schema');
-END;
-CREATE TRIGGER node_version_schema_delete_guard BEFORE DELETE ON node_version_schemas
-WHEN EXISTS(SELECT 1 FROM node_versions WHERE node_id=OLD.node_id AND version=OLD.version) BEGIN
-  SELECT RAISE(ABORT,'retained node version requires schema history');
-END;
-CREATE TRIGGER node_current_schema_guard BEFORE UPDATE OF schema_version,current_version ON nodes
-WHEN EXISTS(SELECT 1 FROM node_version_schemas s WHERE s.node_id=NEW.id AND s.version=NEW.current_version AND s.schema_version!=NEW.schema_version) BEGIN
-  SELECT RAISE(ABORT,'current node schema does not match version history');
-END;
+export const PLUGIN_SCHEMA = `
+ALTER TABLE nodes ADD COLUMN read_only_reason TEXT NOT NULL DEFAULT 'none'
+  CHECK(read_only_reason IN ('none','missing_plugin','original'));
+UPDATE nodes SET read_only_reason='original' WHERE read_only=1;
+CREATE TABLE node_version_schemas (
+  node_id TEXT NOT NULL,
+  version INTEGER NOT NULL CHECK(version > 0),
+  schema_version INTEGER NOT NULL CHECK(schema_version > 0),
+  PRIMARY KEY(node_id,version),
+  FOREIGN KEY(node_id,version) REFERENCES node_versions(node_id,version) ON DELETE CASCADE
+) STRICT;
+INSERT INTO node_version_schemas(node_id,version,schema_version)
+  SELECT v.node_id,v.version,n.schema_version FROM node_versions v JOIN nodes n ON n.id=v.node_id;
+CREATE TRIGGER node_version_schema_capture AFTER INSERT ON node_versions BEGIN
+  INSERT INTO node_version_schemas(node_id,version,schema_version)
+    SELECT NEW.node_id,NEW.version,schema_version FROM nodes WHERE id=NEW.node_id;
+END;
+CREATE TRIGGER node_version_schema_immutable BEFORE UPDATE ON node_version_schemas BEGIN
+  SELECT RAISE(ABORT,'immutable node version schema');
+END;
+CREATE TRIGGER node_version_schema_delete_guard BEFORE DELETE ON node_version_schemas
+WHEN EXISTS(SELECT 1 FROM node_versions WHERE node_id=OLD.node_id AND version=OLD.version) BEGIN
+  SELECT RAISE(ABORT,'retained node version requires schema history');
+END;
+CREATE TRIGGER node_current_schema_guard BEFORE UPDATE OF schema_version,current_version ON nodes
+WHEN EXISTS(SELECT 1 FROM node_version_schemas s WHERE s.node_id=NEW.id AND s.version=NEW.current_version AND s.schema_version!=NEW.schema_version) BEGIN
+  SELECT RAISE(ABORT,'current node schema does not match version history');
+END;
 `;
 //# sourceMappingURL=plugin-schema.js.map

package/dist/persistence/resource-schema.js

@@ -1,44 +1,44 @@
 /** Additive only: legacy asset references, outputs and snapshot JSON are preserved. */
-export const RESOURCE_SCHEMA = `
-ALTER TABLE assets ADD COLUMN name TEXT NOT NULL DEFAULT '';
-ALTER TABLE assets ADD COLUMN current_version INTEGER NOT NULL DEFAULT 0 CHECK(current_version >= 0);
-UPDATE assets SET current_version=COALESCE((SELECT MAX(version) FROM asset_versions WHERE asset_id=assets.id),0);
-CREATE INDEX assets_project_name ON assets(project_id,name);
-CREATE UNIQUE INDEX runs_id_graph ON runs(id,graph_id);
-CREATE TABLE canvas_resources (
-  id TEXT PRIMARY KEY, project_id TEXT NOT NULL, graph_id TEXT NOT NULL, name TEXT NOT NULL,
-  current_version INTEGER NOT NULL CHECK(current_version > 0), UNIQUE(id,graph_id),
-  FOREIGN KEY(graph_id,project_id) REFERENCES graphs(id,project_id),
-  FOREIGN KEY(id,current_version) REFERENCES canvas_resource_versions(resource_id,version) DEFERRABLE INITIALLY DEFERRED
-) STRICT;
-CREATE TABLE canvas_resource_versions (
-  resource_id TEXT NOT NULL REFERENCES canvas_resources(id) DEFERRABLE INITIALLY DEFERRED,
-  version INTEGER NOT NULL CHECK(version > 0), sha256 TEXT NOT NULL REFERENCES blobs(sha256), mime TEXT NOT NULL,
-  representation_version INTEGER, PRIMARY KEY(resource_id,version)
-) STRICT;
-CREATE TRIGGER canvas_version_immutable BEFORE UPDATE ON canvas_resource_versions BEGIN SELECT RAISE(ABORT,'immutable canvas resource version'); END;
-CREATE TRIGGER canvas_binding_immutable BEFORE UPDATE OF project_id,graph_id ON canvas_resources WHEN NEW.project_id != OLD.project_id OR NEW.graph_id != OLD.graph_id BEGIN SELECT RAISE(ABORT,'canvas resource binding immutable'); END;
-CREATE TABLE canvas_resource_references (
-  id TEXT PRIMARY KEY, resource_id TEXT NOT NULL, resource_version INTEGER NOT NULL, graph_id TEXT NOT NULL,
-  owner_kind TEXT NOT NULL CHECK(owner_kind IN ('graph','node','snapshot','history')),
-  node_id TEXT, run_id TEXT,
-  CHECK((owner_kind='graph' AND node_id IS NULL AND run_id IS NULL) OR (owner_kind='node' AND node_id IS NOT NULL AND run_id IS NULL) OR (owner_kind IN ('snapshot','history') AND node_id IS NULL AND run_id IS NOT NULL)),
-  FOREIGN KEY(resource_id,resource_version) REFERENCES canvas_resource_versions(resource_id,version),
-  FOREIGN KEY(resource_id,graph_id) REFERENCES canvas_resources(id,graph_id),
-  FOREIGN KEY(node_id,graph_id) REFERENCES nodes(id,graph_id),
-  FOREIGN KEY(run_id,graph_id) REFERENCES runs(id,graph_id)
-) STRICT;
-CREATE INDEX canvas_refs_resource ON canvas_resource_references(resource_id,resource_version);
-CREATE TRIGGER frozen_resource_reference_immutable BEFORE UPDATE ON canvas_resource_references WHEN OLD.owner_kind IN ('snapshot','history') BEGIN SELECT RAISE(ABORT,'frozen resource reference'); END;
-CREATE TABLE canvas_outputs (
-  run_id TEXT NOT NULL, graph_id TEXT NOT NULL, output_key TEXT NOT NULL, resource_id TEXT NOT NULL, resource_version INTEGER NOT NULL,
-  PRIMARY KEY(run_id,output_key), FOREIGN KEY(resource_id,resource_version) REFERENCES canvas_resource_versions(resource_id,version),
-  FOREIGN KEY(resource_id,graph_id) REFERENCES canvas_resources(id,graph_id), FOREIGN KEY(run_id,graph_id) REFERENCES runs(id,graph_id)
-) STRICT;
-CREATE TRIGGER no_new_canvas_asset_link BEFORE INSERT ON asset_references WHEN NEW.node_id IS NOT NULL BEGIN SELECT RAISE(ABORT,'canvas nodes must use independent canvas resources'); END;
-CREATE TRIGGER no_rebind_canvas_asset_link BEFORE UPDATE OF asset_id,asset_version,node_id ON asset_references WHEN NEW.node_id IS NOT NULL BEGIN SELECT RAISE(ABORT,'legacy canvas asset references cannot be rebound'); END;
-CREATE TRIGGER no_new_deleted_asset_reference BEFORE INSERT ON asset_references WHEN (SELECT deleted_at FROM assets WHERE id=NEW.asset_id) IS NOT NULL BEGIN SELECT RAISE(ABORT,'deleted assets reject new references'); END;
-CREATE TRIGGER asset_reference_added AFTER INSERT ON asset_references BEGIN UPDATE assets SET unreferenced_since=NULL WHERE id=NEW.asset_id; END;
-CREATE TRIGGER asset_reference_removed AFTER DELETE ON asset_references BEGIN UPDATE assets SET unreferenced_since=NULL WHERE id=OLD.asset_id; END;
+export const RESOURCE_SCHEMA = `
+ALTER TABLE assets ADD COLUMN name TEXT NOT NULL DEFAULT '';
+ALTER TABLE assets ADD COLUMN current_version INTEGER NOT NULL DEFAULT 0 CHECK(current_version >= 0);
+UPDATE assets SET current_version=COALESCE((SELECT MAX(version) FROM asset_versions WHERE asset_id=assets.id),0);
+CREATE INDEX assets_project_name ON assets(project_id,name);
+CREATE UNIQUE INDEX runs_id_graph ON runs(id,graph_id);
+CREATE TABLE canvas_resources (
+  id TEXT PRIMARY KEY, project_id TEXT NOT NULL, graph_id TEXT NOT NULL, name TEXT NOT NULL,
+  current_version INTEGER NOT NULL CHECK(current_version > 0), UNIQUE(id,graph_id),
+  FOREIGN KEY(graph_id,project_id) REFERENCES graphs(id,project_id),
+  FOREIGN KEY(id,current_version) REFERENCES canvas_resource_versions(resource_id,version) DEFERRABLE INITIALLY DEFERRED
+) STRICT;
+CREATE TABLE canvas_resource_versions (
+  resource_id TEXT NOT NULL REFERENCES canvas_resources(id) DEFERRABLE INITIALLY DEFERRED,
+  version INTEGER NOT NULL CHECK(version > 0), sha256 TEXT NOT NULL REFERENCES blobs(sha256), mime TEXT NOT NULL,
+  representation_version INTEGER, PRIMARY KEY(resource_id,version)
+) STRICT;
+CREATE TRIGGER canvas_version_immutable BEFORE UPDATE ON canvas_resource_versions BEGIN SELECT RAISE(ABORT,'immutable canvas resource version'); END;
+CREATE TRIGGER canvas_binding_immutable BEFORE UPDATE OF project_id,graph_id ON canvas_resources WHEN NEW.project_id != OLD.project_id OR NEW.graph_id != OLD.graph_id BEGIN SELECT RAISE(ABORT,'canvas resource binding immutable'); END;
+CREATE TABLE canvas_resource_references (
+  id TEXT PRIMARY KEY, resource_id TEXT NOT NULL, resource_version INTEGER NOT NULL, graph_id TEXT NOT NULL,
+  owner_kind TEXT NOT NULL CHECK(owner_kind IN ('graph','node','snapshot','history')),
+  node_id TEXT, run_id TEXT,
+  CHECK((owner_kind='graph' AND node_id IS NULL AND run_id IS NULL) OR (owner_kind='node' AND node_id IS NOT NULL AND run_id IS NULL) OR (owner_kind IN ('snapshot','history') AND node_id IS NULL AND run_id IS NOT NULL)),
+  FOREIGN KEY(resource_id,resource_version) REFERENCES canvas_resource_versions(resource_id,version),
+  FOREIGN KEY(resource_id,graph_id) REFERENCES canvas_resources(id,graph_id),
+  FOREIGN KEY(node_id,graph_id) REFERENCES nodes(id,graph_id),
+  FOREIGN KEY(run_id,graph_id) REFERENCES runs(id,graph_id)
+) STRICT;
+CREATE INDEX canvas_refs_resource ON canvas_resource_references(resource_id,resource_version);
+CREATE TRIGGER frozen_resource_reference_immutable BEFORE UPDATE ON canvas_resource_references WHEN OLD.owner_kind IN ('snapshot','history') BEGIN SELECT RAISE(ABORT,'frozen resource reference'); END;
+CREATE TABLE canvas_outputs (
+  run_id TEXT NOT NULL, graph_id TEXT NOT NULL, output_key TEXT NOT NULL, resource_id TEXT NOT NULL, resource_version INTEGER NOT NULL,
+  PRIMARY KEY(run_id,output_key), FOREIGN KEY(resource_id,resource_version) REFERENCES canvas_resource_versions(resource_id,version),
+  FOREIGN KEY(resource_id,graph_id) REFERENCES canvas_resources(id,graph_id), FOREIGN KEY(run_id,graph_id) REFERENCES runs(id,graph_id)
+) STRICT;
+CREATE TRIGGER no_new_canvas_asset_link BEFORE INSERT ON asset_references WHEN NEW.node_id IS NOT NULL BEGIN SELECT RAISE(ABORT,'canvas nodes must use independent canvas resources'); END;
+CREATE TRIGGER no_rebind_canvas_asset_link BEFORE UPDATE OF asset_id,asset_version,node_id ON asset_references WHEN NEW.node_id IS NOT NULL BEGIN SELECT RAISE(ABORT,'legacy canvas asset references cannot be rebound'); END;
+CREATE TRIGGER no_new_deleted_asset_reference BEFORE INSERT ON asset_references WHEN (SELECT deleted_at FROM assets WHERE id=NEW.asset_id) IS NOT NULL BEGIN SELECT RAISE(ABORT,'deleted assets reject new references'); END;
+CREATE TRIGGER asset_reference_added AFTER INSERT ON asset_references BEGIN UPDATE assets SET unreferenced_since=NULL WHERE id=NEW.asset_id; END;
+CREATE TRIGGER asset_reference_removed AFTER DELETE ON asset_references BEGIN UPDATE assets SET unreferenced_since=NULL WHERE id=OLD.asset_id; END;
 `;
 //# sourceMappingURL=resource-schema.js.map