patchwork-os 1.2.0-beta.2.canary.603 → 1.2.0-beta.2.canary.604

package/README.md

@@ -62,7 +62,7 @@ patchwork-os init
 
 `init` scaffolds `~/.patchwork`, seeds local-only recipes, and registers Patchwork's PreToolUse hook in `~/.claude/settings.json`. Restart Claude Code afterwards — it reads hooks at session start.
 
-**Prereqs:** Node 22+. macOS, Linux, and native Windows (no WSL).
+**Prereqs:** Node 22.5+. macOS, Linux, and native Windows (no WSL).
 
 Two things worth knowing before you start:
 

package/dist/runStore/sqliteRunRepository.d.ts

@@ -0,0 +1,92 @@
+/**
+ * The SQLite run store — ADR-0022.
+ *
+ * Held to the SAME contract as the JSONL incumbent
+ * (`describeRunRepositoryContract`), which is the entire point: the migration's
+ * safety argument is "this behaves like the store we already trust", and that
+ * is only checkable if one set of assertions covers both.
+ *
+ * ## Why SQLite at all
+ *
+ * `runs.jsonl` is the autonomy gate's trust evidence and an append-only text
+ * file with no integrity properties. It failed three ways in eight weeks, each
+ * silently — #1324 (`seq` collides across processes), #1340 (in-flight steps
+ * never written), #1341 (a concurrent reader made `completeRun` a no-op). The
+ * fixes grew a file lock, byte AND line caps, an archive tier and an upsert
+ * reconciliation path into `runLog.ts`: a database, reimplemented, losing.
+ * `runLog.ts:753` documents a lost write we chose to live with.
+ *
+ * ## Identity
+ *
+ * `task_id` is the PRIMARY KEY, not `seq`. That is the #1324 fix landing as a
+ * schema constraint rather than a convention: `seq` is a PER-INSTANCE counter
+ * handed out by eight construction sites, so 142 of 145 seqs in the live log
+ * were shared by unrelated runs. Here the database refuses to store two runs
+ * under one identity, instead of a reader silently discarding one.
+ *
+ * `seq` is still carried, still per-instance, and `getBySeq` is still
+ * ambiguous — preserved deliberately, because a migration that also changes the
+ * domain model cannot be verified by comparing old against new. #1360 fixes
+ * that separately, once the stores agree.
+ *
+ * ## What is NOT here
+ *
+ * No byte cap, no line cap, no rotation, no archive tier. Retention becomes a
+ * policy decision against a queryable store rather than a byte budget fighting
+ * a 24-hour durability window — which is the collision that starved the trust
+ * ledger. Nothing calls this yet; dual-write and shadow-read come next.
+ */
+import type { Logger } from "../logger.js";
+import type { RecipeRun, RunQuery, RunStepResult } from "../runLog.js";
+import type { CompleteRunInput, RunRepository, StartRunInput } from "./runRepository.js";
+export interface SqliteRunStoreOptions {
+    /** Directory holding runs.db. Created if missing. */
+    dir: string;
+    logger?: Logger;
+    /** Test hook — default Date.now. */
+    now?: () => number;
+    /** Test seam for liveness. Default: real process check. */
+    isAlive?: (pid: number | undefined) => boolean;
+}
+export declare class SqliteRunRepository implements RunRepository {
+    private readonly opts;
+    private readonly db;
+    private readonly now;
+    private readonly isAlive;
+    private seq;
+    private closed;
+    constructor(opts: SqliteRunStoreOptions);
+    /**
+     * Release the database handle. Idempotent, and never throws.
+     *
+     * Callers close defensively (teardown paths, error paths, a shutdown that
+     * may already have run), and a store whose cleanup can itself fail turns
+     * "we tidied up" into a new failure mode. On Windows this is not cosmetic:
+     * an open handle prevents the file being unlinked at all.
+     */
+    close(): void;
+    private maxSeq;
+    /**
+     * Flip runs whose owning process is provably gone to `interrupted`, folding
+     * in the evidence they managed to persist.
+     *
+     * ONLY when the owner is gone. Running this unconditionally is exactly
+     * #1341: a concurrent reader declared a live sibling's runs dead, and because
+     * `completeRun` no-ops on a non-running row, the real completion was never
+     * written — a successful run recorded `interrupted, steps: 0`.
+     */
+    private sweepInterrupted;
+    private stepsFor;
+    private rowToRun;
+    startRun(input: StartRunInput): number;
+    /** Resolve a per-instance `seq` to a task id. Ambiguous by construction — see
+     *  the class docs and #1360. Newest wins, which is the least surprising of
+     *  several wrong answers. */
+    private taskIdForSeq;
+    updateRunSteps(seq: number, stepResults: RunStepResult[]): void;
+    completeRun(seq: number, input: CompleteRunInput): void;
+    query(q?: RunQuery): RecipeRun[];
+    getBySeq(seq: number): RecipeRun | null;
+    getChildSeqs(parentSeq: number): number[];
+    size(): number;
+}

package/dist/runStore/sqliteRunRepository.js

@@ -0,0 +1,350 @@
+/**
+ * The SQLite run store — ADR-0022.
+ *
+ * Held to the SAME contract as the JSONL incumbent
+ * (`describeRunRepositoryContract`), which is the entire point: the migration's
+ * safety argument is "this behaves like the store we already trust", and that
+ * is only checkable if one set of assertions covers both.
+ *
+ * ## Why SQLite at all
+ *
+ * `runs.jsonl` is the autonomy gate's trust evidence and an append-only text
+ * file with no integrity properties. It failed three ways in eight weeks, each
+ * silently — #1324 (`seq` collides across processes), #1340 (in-flight steps
+ * never written), #1341 (a concurrent reader made `completeRun` a no-op). The
+ * fixes grew a file lock, byte AND line caps, an archive tier and an upsert
+ * reconciliation path into `runLog.ts`: a database, reimplemented, losing.
+ * `runLog.ts:753` documents a lost write we chose to live with.
+ *
+ * ## Identity
+ *
+ * `task_id` is the PRIMARY KEY, not `seq`. That is the #1324 fix landing as a
+ * schema constraint rather than a convention: `seq` is a PER-INSTANCE counter
+ * handed out by eight construction sites, so 142 of 145 seqs in the live log
+ * were shared by unrelated runs. Here the database refuses to store two runs
+ * under one identity, instead of a reader silently discarding one.
+ *
+ * `seq` is still carried, still per-instance, and `getBySeq` is still
+ * ambiguous — preserved deliberately, because a migration that also changes the
+ * domain model cannot be verified by comparing old against new. #1360 fixes
+ * that separately, once the stores agree.
+ *
+ * ## What is NOT here
+ *
+ * No byte cap, no line cap, no rotation, no archive tier. Retention becomes a
+ * policy decision against a queryable store rather than a byte budget fighting
+ * a 24-hour durability window — which is the collision that starved the trust
+ * ledger. Nothing calls this yet; dual-write and shadow-read come next.
+ */
+import { mkdirSync } from "node:fs";
+import path from "node:path";
+import { DatabaseSync } from "node:sqlite";
+import { isEvidenceBearing } from "../runStepLedger.js";
+/**
+ * Is the process that owns a running row still alive?
+ *
+ * Byte-for-byte the same rule as `runLog.ts`, including its judgement calls:
+ * `EPERM` counts as alive (the process exists, it just belongs to someone
+ * else), and an ABSENT pid returns false so rows predating `ownerPid` keep
+ * being recovered. "We don't know" is not evidence of a live owner.
+ *
+ * Divergence here would be invisible and would desynchronise the two stores
+ * during dual-write in the one area — sweeping live runs — that #1341 proves
+ * is dangerous.
+ */
+function defaultIsAlive(pid) {
+    if (typeof pid !== "number" || !Number.isInteger(pid) || pid <= 0) {
+        return false;
+    }
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (err) {
+        return err?.code === "EPERM";
+    }
+}
+const SCHEMA = `
+CREATE TABLE IF NOT EXISTS runs (
+  task_id         TEXT PRIMARY KEY,
+  seq             INTEGER NOT NULL,
+  recipe_name     TEXT NOT NULL,
+  trigger         TEXT NOT NULL,
+  status          TEXT NOT NULL,
+  created_at      INTEGER NOT NULL,
+  started_at      INTEGER,
+  done_at         INTEGER,
+  duration_ms     INTEGER,
+  model           TEXT,
+  output_tail     TEXT,
+  error_message   TEXT,
+  parent_seq      INTEGER,
+  manual_run_id   TEXT,
+  owner_pid       INTEGER,
+  had_step_errors INTEGER,
+  step_results    TEXT,
+  extra           TEXT
+);
+CREATE INDEX IF NOT EXISTS runs_created_at ON runs(created_at DESC);
+CREATE INDEX IF NOT EXISTS runs_seq        ON runs(seq);
+CREATE INDEX IF NOT EXISTS runs_parent     ON runs(parent_seq);
+CREATE INDEX IF NOT EXISTS runs_recipe     ON runs(recipe_name);
+
+-- In-flight evidence. Separate table for the same reason #1340 used a separate
+-- FILE: these rows arrive per step, and mixing them into the run record made
+-- durability compete with retention.
+CREATE TABLE IF NOT EXISTS run_steps (
+  task_id TEXT NOT NULL,
+  step_id TEXT NOT NULL,
+  at      INTEGER NOT NULL,
+  step    TEXT NOT NULL,
+  PRIMARY KEY (task_id, step_id)
+);
+`;
+/** Columns carried verbatim as JSON rather than promoted to columns. Nothing
+ *  queries them; giving each a column would be schema churn for no reader. */
+const EXTRA_KEYS = [
+    "assertionFailures",
+    "inboxOutputs",
+    "budgetWarnings",
+    "tokenTotals",
+    "budgetTotals",
+];
+export class SqliteRunRepository {
+    opts;
+    db;
+    now;
+    isAlive;
+    seq = 0;
+    closed = false;
+    constructor(opts) {
+        this.opts = opts;
+        this.now = opts.now ?? Date.now;
+        this.isAlive = opts.isAlive ?? defaultIsAlive;
+        mkdirSync(opts.dir, { recursive: true, mode: 0o700 });
+        this.db = new DatabaseSync(path.join(opts.dir, "runs.db"));
+        // WAL: a reader must not block the writer, and vice versa. The whole
+        // reason this store exists is that eight construction sites touch one
+        // ledger concurrently.
+        this.db.exec("PRAGMA journal_mode=WAL");
+        this.db.exec("PRAGMA foreign_keys=ON");
+        this.db.exec(SCHEMA);
+        this.seq = this.maxSeq();
+        this.sweepInterrupted();
+    }
+    /**
+     * Release the database handle. Idempotent, and never throws.
+     *
+     * Callers close defensively (teardown paths, error paths, a shutdown that
+     * may already have run), and a store whose cleanup can itself fail turns
+     * "we tidied up" into a new failure mode. On Windows this is not cosmetic:
+     * an open handle prevents the file being unlinked at all.
+     */
+    close() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        try {
+            this.db.close();
+        }
+        catch (err) {
+            this.opts.logger?.warn?.(`[sqlite-runstore] close failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    maxSeq() {
+        const r = this.db.prepare("SELECT MAX(seq) AS m FROM runs").get();
+        return typeof r?.m === "number" ? r.m : 0;
+    }
+    /**
+     * Flip runs whose owning process is provably gone to `interrupted`, folding
+     * in the evidence they managed to persist.
+     *
+     * ONLY when the owner is gone. Running this unconditionally is exactly
+     * #1341: a concurrent reader declared a live sibling's runs dead, and because
+     * `completeRun` no-ops on a non-running row, the real completion was never
+     * written — a successful run recorded `interrupted, steps: 0`.
+     */
+    sweepInterrupted() {
+        const rows = this.db
+            .prepare("SELECT task_id, owner_pid, created_at FROM runs WHERE status='running'")
+            .all();
+        const now = this.now();
+        const flip = this.db.prepare("UPDATE runs SET status='interrupted', done_at=?, duration_ms=?, step_results=? WHERE task_id=?");
+        for (const r of rows) {
+            const pid = typeof r.owner_pid === "number" ? r.owner_pid : undefined;
+            if (this.isAlive(pid))
+                continue;
+            const taskId = String(r.task_id);
+            const createdAt = Number(r.created_at);
+            const recovered = this.stepsFor(taskId);
+            flip.run(now, now - createdAt, recovered.length > 0 ? JSON.stringify(recovered) : null, taskId);
+        }
+    }
+    stepsFor(taskId) {
+        const rows = this.db
+            .prepare("SELECT step FROM run_steps WHERE task_id=? ORDER BY at ASC, rowid ASC")
+            .all(taskId);
+        const out = [];
+        for (const r of rows) {
+            try {
+                out.push(JSON.parse(String(r.step)));
+            }
+            catch {
+                // A single unparseable row must not destroy the rest of a run's
+                // evidence — the failure mode this whole subsystem exists to prevent.
+                this.opts.logger?.warn?.(`[sqlite-runstore] skipping unparseable step row for ${taskId}`);
+            }
+        }
+        return out;
+    }
+    rowToRun(r) {
+        const extra = r.extra ? JSON.parse(String(r.extra)) : {};
+        const steps = r.step_results
+            ? JSON.parse(String(r.step_results))
+            : undefined;
+        const run = {
+            seq: Number(r.seq),
+            taskId: String(r.task_id),
+            recipeName: String(r.recipe_name),
+            trigger: String(r.trigger),
+            status: String(r.status),
+            createdAt: Number(r.created_at),
+            doneAt: Number(r.done_at ?? 0),
+            durationMs: Number(r.duration_ms ?? 0),
+            ...(r.started_at != null && { startedAt: Number(r.started_at) }),
+            ...(r.model != null && { model: String(r.model) }),
+            ...(r.output_tail != null && { outputTail: String(r.output_tail) }),
+            ...(r.error_message != null && { errorMessage: String(r.error_message) }),
+            ...(r.parent_seq != null && { parentSeq: Number(r.parent_seq) }),
+            ...(r.manual_run_id != null && { manualRunId: String(r.manual_run_id) }),
+            ...(r.owner_pid != null && { ownerPid: Number(r.owner_pid) }),
+            ...(r.had_step_errors != null && {
+                hadStepErrors: Boolean(r.had_step_errors),
+            }),
+            ...(steps ? { stepResults: steps } : {}),
+            ...extra,
+        };
+        return run;
+    }
+    startRun(input) {
+        const seq = ++this.seq;
+        this.db
+            .prepare(`INSERT INTO runs (task_id, seq, recipe_name, trigger, status, created_at,
+                           started_at, model, parent_seq, manual_run_id, owner_pid)
+         VALUES (?,?,?,?,'running',?,?,?,?,?,?)
+         ON CONFLICT(task_id) DO UPDATE SET
+           seq=excluded.seq, status='running', created_at=excluded.created_at,
+           started_at=excluded.started_at, owner_pid=excluded.owner_pid`)
+            .run(input.taskId, seq, input.recipeName, input.trigger, input.createdAt, input.startedAt ?? null, input.model ?? null, input.parentSeq ?? null, input.manualRunId ?? null, input.ownerPid ?? process.pid);
+        return seq;
+    }
+    /** Resolve a per-instance `seq` to a task id. Ambiguous by construction — see
+     *  the class docs and #1360. Newest wins, which is the least surprising of
+     *  several wrong answers. */
+    taskIdForSeq(seq) {
+        const r = this.db
+            .prepare("SELECT task_id FROM runs WHERE seq=? ORDER BY created_at DESC LIMIT 1")
+            .get(seq);
+        return r ? String(r.task_id) : null;
+    }
+    updateRunSteps(seq, stepResults) {
+        const taskId = this.taskIdForSeq(seq);
+        if (!taskId)
+            return;
+        const cur = this.db
+            .prepare("SELECT status FROM runs WHERE task_id=?")
+            .get(taskId);
+        if (!cur || cur.status !== "running")
+            return;
+        const now = this.now();
+        const ins = this.db.prepare("INSERT INTO run_steps (task_id, step_id, at, step) VALUES (?,?,?,?) ON CONFLICT(task_id, step_id) DO NOTHING");
+        for (const step of stepResults) {
+            if (!step?.id)
+                continue;
+            // Same scope as the JSONL ledger: non-reversible, or any error. A
+            // reversible step carries no trust evidence, and persisting everything
+            // would buy durability with retention — the trade that starved the
+            // ledger in the first place.
+            if (!isEvidenceBearing(step))
+                continue;
+            ins.run(taskId, step.id, now, JSON.stringify(step));
+        }
+    }
+    completeRun(seq, input) {
+        const taskId = this.taskIdForSeq(seq);
+        if (!taskId)
+            return;
+        const cur = this.db
+            .prepare("SELECT status FROM runs WHERE task_id=?")
+            .get(taskId);
+        // No-op on an already-terminal row, matching the incumbent.
+        if (!cur || cur.status !== "running")
+            return;
+        const extra = {};
+        for (const k of EXTRA_KEYS) {
+            const v = input[k];
+            if (v !== undefined)
+                extra[k] = v;
+        }
+        const hadStepErrors = input.stepResults.some((s) => s?.status === "error");
+        this.db
+            .prepare(`UPDATE runs SET status=?, done_at=?, duration_ms=?, step_results=?,
+                         output_tail=?, error_message=?, had_step_errors=?, extra=?
+         WHERE task_id=?`)
+            .run(input.status, input.doneAt, input.durationMs, JSON.stringify(input.stepResults), input.outputTail ?? null, input.errorMessage ?? null, hadStepErrors ? 1 : 0, Object.keys(extra).length > 0 ? JSON.stringify(extra) : null, taskId);
+    }
+    query(q = {}) {
+        const where = [];
+        const args = [];
+        if (q.recipe !== undefined) {
+            where.push("recipe_name = ?");
+            args.push(q.recipe);
+        }
+        if (q.status !== undefined) {
+            where.push("status = ?");
+            args.push(q.status);
+        }
+        if (q.trigger !== undefined) {
+            where.push("trigger = ?");
+            args.push(q.trigger);
+        }
+        if (q.since !== undefined) {
+            where.push("created_at >= ?");
+            args.push(q.since);
+        }
+        if (q.after !== undefined) {
+            where.push("seq > ?");
+            args.push(q.after);
+        }
+        if (q.manualRunId !== undefined) {
+            where.push("manual_run_id = ?");
+            args.push(q.manualRunId);
+        }
+        const sql = `SELECT * FROM runs${where.length ? ` WHERE ${where.join(" AND ")}` : ""}` +
+            // seq as tiebreak so equal createdAt still yields a deterministic order —
+            // several contract cases share a timestamp.
+            " ORDER BY created_at DESC, seq DESC" +
+            (q.limit !== undefined ? " LIMIT ?" : "");
+        if (q.limit !== undefined)
+            args.push(q.limit);
+        const rows = this.db.prepare(sql).all(...args);
+        return rows.map((r) => this.rowToRun(r));
+    }
+    getBySeq(seq) {
+        const r = this.db
+            .prepare("SELECT * FROM runs WHERE seq=? ORDER BY created_at DESC LIMIT 1")
+            .get(seq);
+        return r ? this.rowToRun(r) : null;
+    }
+    getChildSeqs(parentSeq) {
+        const rows = this.db
+            .prepare("SELECT seq FROM runs WHERE parent_seq=? ORDER BY seq ASC")
+            .all(parentSeq);
+        return rows.map((r) => Number(r.seq));
+    }
+    size() {
+        const r = this.db.prepare("SELECT COUNT(*) AS n FROM runs").get();
+        return Number(r?.n ?? 0);
+    }
+}
+//# sourceMappingURL=sqliteRunRepository.js.map

package/dist/runStore/sqliteRunRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqliteRunRepository.js","sourceRoot":"","sources":["../../src/runStore/sqliteRunRepository.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAS3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAiBxD;;;;;;;;;;;GAWG;AACH,SAAS,cAAc,CAAC,GAAuB;IAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QAClE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAQ,GAA6B,EAAE,IAAI,KAAK,OAAO,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoCd,CAAC;AAEF;8EAC8E;AAC9E,MAAM,UAAU,GAAG;IACjB,mBAAmB;IACnB,cAAc;IACd,gBAAgB;IAChB,aAAa;IACb,cAAc;CACN,CAAC;AAIX,MAAM,OAAO,mBAAmB;IAOD;IANZ,EAAE,CAAe;IACjB,GAAG,CAAe;IAClB,OAAO,CAAuC;IACvD,GAAG,GAAG,CAAC,CAAC;IACR,MAAM,GAAG,KAAK,CAAC;IAEvB,YAA6B,IAA2B;QAA3B,SAAI,GAAJ,IAAI,CAAuB;QACtD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC;QAC9C,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,EAAE,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;QAC3D,qEAAqE;QACrE,sEAAsE;QACtE,uBAAuB;QACvB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACxC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACvC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACtF,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,MAAM;QACZ,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,GAAG,EAAS,CAAC;QACzE,OAAO,OAAO,CAAC,EAAE,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;;;OAQG;IACK,gBAAgB;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN,wEAAwE,CACzE;aACA,GAAG,EAAW,CAAC;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC1B,gGAAgG,CACjG,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,SAAS;YAChC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,CAAC,GAAG,CACN,GAAG,EACH,GAAG,GAAG,SAAS,EACf,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EACvD,MAAM,CACP,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,MAAc;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN,uEAAuE,CACxE;aACA,GAAG,CAAC,MAAM,CAAU,CAAC;QACxB,MAAM,GAAG,GAAoB,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAkB,CAAC,CAAC;YACxD,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;gBAChE,sEAAsE;gBACtE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,uDAAuD,MAAM,EAAE,CAChE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,QAAQ,CAAC,CAAM;QACrB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY;YAC1B,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAqB;YACzD,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,GAAG,GAAc;YACrB,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;YAClB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACzB,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;YACjC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAe;YACxC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAc;YACrC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;YAC/B,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;YAC9B,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC;YACtC,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,IAAI,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,IAAI,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,IAAI,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,CAAC,CAAC,eAAe,IAAI,IAAI,IAAI;gBAC/B,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;aAC1C,CAAC;YACF,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,GAAG,KAAK;SACT,CAAC;QACF,OAAO,GAAG,CAAC;IACb,CAAC;IAED,QAAQ,CAAC,KAAoB;QAC3B,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;;;wEAKgE,CACjE;aACA,GAAG,CACF,KAAK,CAAC,MAAM,EACZ,GAAG,EACH,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,SAAS,IAAI,IAAI,EACvB,KAAK,CAAC,KAAK,IAAI,IAAI,EACnB,KAAK,CAAC,SAAS,IAAI,IAAI,EACvB,KAAK,CAAC,WAAW,IAAI,IAAI,EACzB,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAC9B,CAAC;QACJ,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;iCAE6B;IACrB,YAAY,CAAC,GAAW;QAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE;aACd,OAAO,CACN,uEAAuE,CACxE;aACA,GAAG,CAAC,GAAG,CAAoB,CAAC;QAC/B,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtC,CAAC;IAED,cAAc,CAAC,GAAW,EAAE,WAA4B;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,yCAAyC,CAAC;aAClD,GAAG,CAAC,MAAM,CAAoB,CAAC;QAClC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO;QAE7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACzB,8GAA8G,CAC/G,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,EAAE,EAAE;gBAAE,SAAS;YACxB,kEAAkE;YAClE,uEAAuE;YACvE,mEAAmE;YACnE,6BAA6B;YAC7B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;gBAAE,SAAS;YACvC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,WAAW,CAAC,GAAW,EAAE,KAAuB;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,yCAAyC,CAAC;aAClD,GAAG,CAAC,MAAM,CAAoB,CAAC;QAClC,4DAA4D;QAC5D,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO;QAE7C,MAAM,KAAK,GAAQ,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAI,KAAwB,CAAC,CAAC,CAAC,CAAC;YACvC,IAAI,CAAC,KAAK,SAAS;gBAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,aAAa,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC;QAE3E,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;yBAEiB,CAClB;aACA,GAAG,CACF,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,UAAU,EAChB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,EACjC,KAAK,CAAC,UAAU,IAAI,IAAI,EACxB,KAAK,CAAC,YAAY,IAAI,IAAI,EAC1B,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACrB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAC5D,MAAM,CACP,CAAC;IACN,CAAC;IAED,KAAK,CAAC,IAAc,EAAE;QACpB,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAc,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,GAAG,GACP,qBAAqB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YAC1E,0EAA0E;YAC1E,4CAA4C;YAC5C,qCAAqC;YACrC,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAI,IAAgB,CAAU,CAAC;QACrE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,QAAQ,CAAC,GAAW;QAClB,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE;aACd,OAAO,CACN,iEAAiE,CAClE;aACA,GAAG,CAAC,GAAG,CAAoB,CAAC;QAC/B,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC;IAED,YAAY,CAAC,SAAiB;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,0DAA0D,CAAC;aACnE,GAAG,CAAC,SAAS,CAAU,CAAC;QAC3B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,IAAI;QACF,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,GAAG,EAAS,CAAC;QACzE,OAAO,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3B,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "patchwork-os",
-  "version": "1.2.0-beta.2.canary.603",
+  "version": "1.2.0-beta.2.canary.604",
   "description": "Your personal AI runtime, local-first. Patchwork OS gives any AI model a consistent set of tools, YAML recipes, a delegation policy with approval queue, and a durable trace memory — all on your machine, all under your policy.",
   "type": "module",
   "main": "dist/index.js",
@@ -89,7 +89,7 @@
     "README.md"
   ],
   "engines": {
-    "node": ">=22.0.0"
+    "node": ">=22.5.0"
   },
   "scripts": {
     "build": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\" && tsc && (node scripts/postinstall.mjs || true)",