syncpoint-ai 0.1.0

package/dist/server/application/wake-engine/use-cases.js

@@ -0,0 +1,109 @@
+import { WakeRequestStatus } from "../../../governance/index.js";
+import { ConstraintViolationError, EventType, ForbiddenError, InternalError } from "../../../kernel/index.js";
+import { getWakeRequest, listQueuedWakeRequests, listWakeRequests, listWakeRequestsByAgent, updateWakeRequestStatus, } from "../../repositories/_exports/orchestration.js";
+import { logEvent } from "../../repositories/_shared.js";
+import { collaborationCoordinator } from "../collaboration-coordinator.js";
+import { wakeEngineState } from "./state.js";
+export function wakeList(input) {
+    if (input.agentId) {
+        const all = listWakeRequestsByAgent(input.agentId);
+        if (input.status)
+            return all.filter(w => w.status === input.status);
+        return all;
+    }
+    if (input.sessionId) {
+        const all = listWakeRequests(input.sessionId);
+        if (input.status)
+            return all.filter(w => w.status === input.status);
+        return all;
+    }
+    return listQueuedWakeRequests();
+}
+export function wakeGet(id) {
+    return getWakeRequest(id);
+}
+export function wakeAck(id) {
+    return updateWakeRequestStatus(id, WakeRequestStatus.DISPATCHED);
+}
+export function wakeStart(id) {
+    const wr = getWakeRequest(id);
+    const blockCheck = collaborationCoordinator.execution.checkAgentBlock({
+        agentId: wr.targetAgentId,
+        taskId: wr.taskId ?? undefined,
+        sessionId: wr.sessionId,
+    });
+    if (blockCheck.blocked) {
+        const gateIds = blockCheck.blockingGates.map(g => g.id).join(", ");
+        throw new ForbiddenError("wake_start", `Agent blocked by sync gate(s): ${gateIds}. Acknowledge before starting wake.`);
+    }
+    if (wr.taskId) {
+        try {
+            const decision = collaborationCoordinator.execution.evaluateReadiness({
+                agentId: wr.targetAgentId,
+                taskId: wr.taskId,
+                action: "wake_start",
+            }).constraintDecision;
+            if (!decision.permitted) {
+                const reasons = decision.blockers.map(b => b.message).join("; ");
+                throw new ConstraintViolationError(["wake_constraint"], `Constraint violation: ${reasons}`);
+            }
+        }
+        catch (err) {
+            if (err instanceof Error && err.message.startsWith("Constraint violation:"))
+                throw err;
+            throw new InternalError(`Cannot start wake: projection unavailable (${err instanceof Error ? err.message : "unknown error"})`);
+        }
+    }
+    return updateWakeRequestStatus(id, WakeRequestStatus.RUNNING);
+}
+export function wakeDone(id, resultSummary) {
+    const wr = updateWakeRequestStatus(id, WakeRequestStatus.DONE, resultSummary);
+    wakeEngineState.processing = true;
+    try {
+        logEvent(EventType.WAKE_DONE, "wake_request", id, resultSummary ?? "");
+    }
+    finally {
+        wakeEngineState.processing = false;
+    }
+    return wr;
+}
+export function wakeFail(id, resultSummary) {
+    const wr = updateWakeRequestStatus(id, WakeRequestStatus.FAILED, resultSummary);
+    wakeEngineState.processing = true;
+    try {
+        logEvent(EventType.WAKE_FAILED, "wake_request", id, resultSummary ?? "");
+    }
+    finally {
+        wakeEngineState.processing = false;
+    }
+    return wr;
+}
+export function wakeSkip(id, resultSummary) {
+    return updateWakeRequestStatus(id, WakeRequestStatus.SKIPPED, resultSummary);
+}
+export function wakeNext(agentId) {
+    const blockCheck = collaborationCoordinator.execution.checkAgentBlock({ agentId });
+    if (blockCheck.blocked)
+        return null;
+    const all = listWakeRequestsByAgent(agentId);
+    const queued = all.filter(w => w.status === WakeRequestStatus.QUEUED);
+    if (queued.length === 0)
+        return null;
+    const wr = queued[0];
+    if (wr.taskId) {
+        try {
+            const decision = collaborationCoordinator.execution.evaluateReadiness({
+                agentId: wr.targetAgentId,
+                taskId: wr.taskId,
+                action: "wake_start",
+            }).constraintDecision;
+            if (!decision.permitted)
+                return null;
+        }
+        catch {
+            return null;
+        }
+    }
+    return wr;
+}
+//# sourceMappingURL=use-cases.js.map

package/dist/server/application/wake-engine/use-cases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-cases.js","sourceRoot":"","sources":["../../../../_build/src/server/application/wake-engine/use-cases.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAE9G,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,gBAAgB,EAChB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAG7C,MAAM,UAAU,QAAQ,CAAC,KAAoB;IAC3C,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,uBAAuB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC;QACpE,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC;QACpE,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,sBAAsB,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,EAAU;IAChC,OAAO,cAAc,CAAC,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,EAAU;IAChC,OAAO,uBAAuB,CAAC,EAAE,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,EAAU;IAClC,MAAM,EAAE,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,wBAAwB,CAAC,SAAS,CAAC,eAAe,CAAC;QACpE,OAAO,EAAE,EAAE,CAAC,aAAa;QACzB,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,SAAS;QAC9B,SAAS,EAAE,EAAE,CAAC,SAAS;KACxB,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,UAAU,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,IAAI,cAAc,CAAC,YAAY,EAAE,kCAAkC,OAAO,qCAAqC,CAAC,CAAC;IACzH,CAAC;IAED,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,wBAAwB,CAAC,SAAS,CAAC,iBAAiB,CAAC;gBACpE,OAAO,EAAE,EAAE,CAAC,aAAa;gBACzB,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,MAAM,EAAE,YAAY;aACrB,CAAC,CAAC,kBAAkB,CAAC;YACtB,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACxB,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjE,MAAM,IAAI,wBAAwB,CAAC,CAAC,iBAAiB,CAAC,EAAE,yBAAyB,OAAO,EAAE,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,uBAAuB,CAAC;gBAAE,MAAM,GAAG,CAAC;YACvF,MAAM,IAAI,aAAa,CAAC,8CAA8C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC;QACjI,CAAC;IACH,CAAC;IAED,OAAO,uBAAuB,CAAC,EAAE,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,EAAU,EAAE,aAAsB;IACzD,MAAM,EAAE,GAAG,uBAAuB,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC9E,eAAe,CAAC,UAAU,GAAG,IAAI,CAAC;IAClC,IAAI,CAAC;QAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,cAAc,EAAE,EAAE,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,eAAe,CAAC,UAAU,GAAG,KAAK,CAAC;IAAC,CAAC;IAC/H,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,EAAU,EAAE,aAAsB;IACzD,MAAM,EAAE,GAAG,uBAAuB,CAAC,EAAE,EAAE,iBAAiB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAChF,eAAe,CAAC,UAAU,GAAG,IAAI,CAAC;IAClC,IAAI,CAAC;QAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,cAAc,EAAE,EAAE,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,eAAe,CAAC,UAAU,GAAG,KAAK,CAAC;IAAC,CAAC;IACjI,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,EAAU,EAAE,aAAsB;IACzD,OAAO,uBAAuB,CAAC,EAAE,EAAE,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,MAAM,UAAU,GAAG,wBAAwB,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACnF,IAAI,UAAU,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAEpC,MAAM,GAAG,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACtE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;IACtB,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,wBAAwB,CAAC,SAAS,CAAC,iBAAiB,CAAC;gBACpE,OAAO,EAAE,EAAE,CAAC,aAAa;gBACzB,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,MAAM,EAAE,YAAY;aACrB,CAAC,CAAC,kBAAkB,CAAC;YACtB,IAAI,CAAC,QAAQ,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IAC1B,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/server/application/wake-engine-service.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Wake Engine Service — event-driven auto-wake orchestration.
+ *
+ * Listens to EventBus events, resolves which session they belong to,
+ * computes wake targets using the pure core engine, and creates WakeRequests.
+ *
+ * This is the runtime that turns SyncPoint from "tell me what to do next"
+ * into "automatically generate who should be woken, with what context."
+ */
+import "./_scope-matchers.js";
+export type { WakeEngineOptions, WakeEngineStats, WakeListInput, } from "./wake-engine/types.js";
+export { wakeEngineStart, wakeEngineStop, wakeEngineStats, processOrchestrationEvent, } from "./wake-engine/engine.js";
+export { wakeList, wakeGet, wakeAck, wakeStart, wakeDone, wakeFail, wakeSkip, wakeNext, } from "./wake-engine/use-cases.js";
+//# sourceMappingURL=wake-engine-service.d.ts.map

package/dist/server/application/wake-engine-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wake-engine-service.d.ts","sourceRoot":"","sources":["../../../_build/src/server/application/wake-engine-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,sBAAsB,CAAC;AAC9B,YAAY,EACV,iBAAiB,EACjB,eAAe,EACf,aAAa,GACd,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,eAAe,EACf,cAAc,EACd,eAAe,EACf,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,QAAQ,EACR,OAAO,EACP,OAAO,EACP,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,QAAQ,GACT,MAAM,4BAA4B,CAAC"}

package/dist/server/application/wake-engine-service.js

@@ -0,0 +1,13 @@
+/**
+ * Wake Engine Service — event-driven auto-wake orchestration.
+ *
+ * Listens to EventBus events, resolves which session they belong to,
+ * computes wake targets using the pure core engine, and creates WakeRequests.
+ *
+ * This is the runtime that turns SyncPoint from "tell me what to do next"
+ * into "automatically generate who should be woken, with what context."
+ */
+import "./_scope-matchers.js";
+export { wakeEngineStart, wakeEngineStop, wakeEngineStats, processOrchestrationEvent, } from "./wake-engine/engine.js";
+export { wakeList, wakeGet, wakeAck, wakeStart, wakeDone, wakeFail, wakeSkip, wakeNext, } from "./wake-engine/use-cases.js";
+//# sourceMappingURL=wake-engine-service.js.map

package/dist/server/application/wake-engine-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wake-engine-service.js","sourceRoot":"","sources":["../../../_build/src/server/application/wake-engine-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,sBAAsB,CAAC;AAO9B,OAAO,EACL,eAAe,EACf,cAAc,EACd,eAAe,EACf,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,QAAQ,EACR,OAAO,EACP,OAAO,EACP,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,QAAQ,GACT,MAAM,4BAA4B,CAAC"}

package/dist/server/application/write-permit-service.d.ts

@@ -0,0 +1,43 @@
+import { WriteIntent, ResourceRef, WriteDecision, WritePermit, WriteResourceHash } from "../../kernel/index.js";
+export interface WriteCheckInput {
+    actorId: string;
+    taskId: string;
+    sessionId?: string;
+    resources: ResourceRef[];
+    intent: WriteIntent;
+    operationId?: string;
+    baseHashes?: WriteResourceHash[];
+}
+export interface WritePrepareInput extends WriteCheckInput {
+    ttlSeconds?: number;
+    singleUse?: boolean;
+}
+export interface FileMutation {
+    resource: ResourceRef;
+    content?: string;
+    contentBase64?: string;
+    delete?: boolean;
+}
+export interface WriteApplyInput {
+    permitId: string;
+    mutations: FileMutation[];
+}
+export interface WriteCheckResult {
+    decision: WriteDecision;
+    baseHashes: WriteResourceHash[];
+}
+export interface WritePrepareResult extends WriteCheckResult {
+    permit: WritePermit;
+}
+export interface WriteApplyResult {
+    permit: WritePermit;
+    applied: Array<{
+        locator: string;
+        sha256?: string;
+        exists: boolean;
+    }>;
+}
+export declare function writeCheck(input: WriteCheckInput): WriteCheckResult;
+export declare function writePrepare(input: WritePrepareInput): WritePrepareResult;
+export declare function writeApply(input: WriteApplyInput): WriteApplyResult;
+//# sourceMappingURL=write-permit-service.d.ts.map

package/dist/server/application/write-permit-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-permit-service.d.ts","sourceRoot":"","sources":["../../../_build/src/server/application/write-permit-service.ts"],"names":[],"mappings":"AAGA,OAAO,EAA6B,WAAW,EAAiE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAyB1M,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,WAAW,EAAE,CAAC;IACzB,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,iBAAiB,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,iBAAkB,SAAQ,eAAe;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,WAAW,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,YAAY,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,aAAa,CAAC;IACxB,UAAU,EAAE,iBAAiB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,kBAAmB,SAAQ,gBAAgB;IAC1D,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACvE;AAKD,wBAAgB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,gBAAgB,CAEnE;AAqCD,wBAAgB,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,kBAAkB,CA4BzE;AAiBD,wBAAgB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,gBAAgB,CAsEnE"}

package/dist/server/application/write-permit-service.js

@@ -0,0 +1,252 @@
+import fs from "node:fs";
+import path from "node:path";
+import { evaluateConstraints } from "../../governance/index.js";
+import { ForbiddenError, EventType, WriteIntent, WriteDecisionReason, WritePermitStatus, evaluateWriteDecision } from "../../kernel/index.js";
+import { safeResolve, readResourceHash, resolveBaseHashes, resolveRootDir, normalizeFileLocator, atomicWriteFile, sameResource, } from "./file-io.js";
+import { createWritePermit, getOperation, getWritePermit, listActiveResourceClaims, listActiveSyncGates, updateWritePermit, } from "../repositories/_exports/protocol.js";
+import { logEvent, now } from "../repositories/_shared.js";
+import { buildProjection } from "./reality-projection-service.js";
+import { sgReconcileActive } from "./sync-gate-service.js";
+import { recordAuthorizedWrite } from "./backing-store-reconciliation-service.js";
+import { temporarilyUnlockForWrite } from "./file-permission-guard.js";
+const DEFAULT_EDITOR_TTL_SECONDS = 30;
+const DEFAULT_BATCH_TTL_SECONDS = 300;
+export function writeCheck(input) {
+    return writeCheckAtRoot(normalizeWriteInput(input), resolveRootDir());
+}
+function writeCheckAtRoot(input, root) {
+    const baseHashes = input.baseHashes ?? resolveBaseHashes(input.resources, root);
+    const decision = evaluateWriteDecision({
+        actorId: input.actorId,
+        taskId: input.taskId,
+        sessionId: input.sessionId,
+        resources: input.resources,
+        intent: input.intent,
+        operation: input.operationId ? getOperation(input.operationId) : undefined,
+        activeClaims: listActiveResourceClaims({ sessionId: input.sessionId }),
+        activeGates: activeGates(input.taskId, input.sessionId),
+        constraintDecision: writeConstraintDecision(input),
+    });
+    logEvent(EventType.WRITE_PERMIT_REQUESTED, "write_permit", input.operationId ?? "check", JSON.stringify({
+        actorId: input.actorId,
+        taskId: input.taskId,
+        sessionId: input.sessionId ?? "",
+        resources: input.resources,
+        intent: input.intent,
+        permitted: decision.permitted,
+    }));
+    if (!decision.permitted) {
+        logEvent(EventType.WRITE_PERMIT_DENIED, "write_permit", input.operationId ?? "check", JSON.stringify(decision));
+    }
+    return { decision, baseHashes };
+}
+export function writePrepare(input) {
+    const root = resolveRootDir();
+    const normalized = normalizeWriteInput(input);
+    const result = writeCheckAtRoot(normalized, root);
+    const ttl = input.ttlSeconds ?? (input.intent === WriteIntent.BULK ? DEFAULT_BATCH_TTL_SECONDS : DEFAULT_EDITOR_TTL_SECONDS);
+    const permit = createWritePermit({
+        actorId: normalized.actorId,
+        taskId: normalized.taskId,
+        sessionId: normalized.sessionId,
+        resources: normalized.resources,
+        intent: input.intent,
+        operationId: normalized.operationId,
+        guardedRoot: root,
+        baseHashes: result.baseHashes,
+        expiresAt: new Date(Date.now() + ttl * 1000).toISOString(),
+        singleUse: input.singleUse ?? true,
+        status: result.decision.permitted ? WritePermitStatus.ISSUED : WritePermitStatus.DENIED,
+        decision: result.decision,
+    });
+    logEvent(result.decision.permitted ? EventType.WRITE_PERMIT_ISSUED : EventType.WRITE_PERMIT_DENIED, "write_permit", permit.id, JSON.stringify({ actorId: normalized.actorId, taskId: normalized.taskId, resources: normalized.resources, decision: result.decision }));
+    return { ...result, permit };
+}
+function normalizeWriteInput(input) {
+    // Normalize file locators to match the format stored by rcClaim (via resolveResourcePath).
+    // This ensures overlap comparison between write-permit resources and stored claims works.
+    const root = resolveRootDir();
+    return {
+        ...input,
+        resources: input.resources.map(r => ({
+            ...r,
+            locator: r.type === "file" ? normalizeFileLocator(r.locator, root) : r.locator,
+        })),
+    };
+}
+export function writeApply(input) {
+    let permit = getWritePermit(input.permitId);
+    const root = resolveRootDir();
+    // Normalize mutation locators to match the permit's normalized locators
+    const normalizedMutations = input.mutations.map(m => ({
+        ...m,
+        resource: {
+            ...m.resource,
+            locator: m.resource.type === "file" ? normalizeFileLocator(m.resource.locator, root) : m.resource.locator,
+        },
+    }));
+    const denial = validatePermitForApply(permit, normalizedMutations, root);
+    if (denial) {
+        const decision = { permitted: false, reason: WriteDecisionReason.BLOCKED, blockers: [denial], warnings: [] };
+        permit = updateWritePermit(permit.id, { status: WritePermitStatus.REVOKED, decision });
+        logEvent(EventType.WRITE_BLOCKED, "write_permit", permit.id, JSON.stringify(decision));
+        throw new ForbiddenError("write", denial.message);
+    }
+    const revalidated = revalidatePermitDecision(permit);
+    if (!revalidated.permitted) {
+        permit = updateWritePermit(permit.id, { status: WritePermitStatus.REVOKED, decision: revalidated });
+        logEvent(EventType.WRITE_BLOCKED, "write_permit", permit.id, JSON.stringify(revalidated));
+        throw new ForbiddenError("write", `Write permit no longer valid: ${revalidated.blockers.map(blocker => blocker.message).join("; ")}`);
+    }
+    const preparedMutations = preflightMutations(permit, normalizedMutations, root);
+    if ("denial" in preparedMutations) {
+        const decision = {
+            permitted: false,
+            reason: WriteDecisionReason.BLOCKED,
+            blockers: [preparedMutations.denial],
+            warnings: [],
+        };
+        permit = updateWritePermit(permit.id, { status: WritePermitStatus.REVOKED, decision });
+        logEvent(EventType.WRITE_BLOCKED, "write_permit", permit.id, JSON.stringify(decision));
+        throw new ForbiddenError("write", preparedMutations.denial.message);
+    }
+    const applied = [];
+    const locatorsToWrite = preparedMutations.mutations.map(m => m.mutation.resource.locator);
+    const unlock = temporarilyUnlockForWrite(root, locatorsToWrite);
+    try {
+        for (const { mutation, target, content } of preparedMutations.mutations) {
+            if (mutation.delete) {
+                // Use rmSync with force to avoid a separate existsSync check
+                try {
+                    fs.rmSync(target, { force: true });
+                }
+                catch { /* file may already be gone */ }
+            }
+            else {
+                fs.mkdirSync(path.dirname(target), { recursive: true });
+                atomicWriteFile(target, content);
+            }
+            applied.push({ locator: mutation.resource.locator, ...readResourceHash(root, mutation.resource) });
+            recordAuthorizedWrite(root, mutation.resource.locator);
+        }
+        // TODO: Consider migrating to fs.promises + Promise.all for parallel I/O
+        // when the calling context supports async.
+    }
+    finally {
+        unlock.restore();
+    }
+    if (permit.singleUse) {
+        permit = updateWritePermit(permit.id, {
+            status: WritePermitStatus.CONSUMED,
+            consumedAt: now(),
+        });
+        logEvent(EventType.WRITE_PERMIT_CONSUMED, "write_permit", permit.id, JSON.stringify({ applied }));
+    }
+    logEvent(EventType.WRITE_APPLIED, "write_permit", permit.id, JSON.stringify({ applied }));
+    return { permit, applied };
+}
+function activeGates(taskId, sessionId) {
+    sgReconcileActive({ taskId, sessionId });
+    return listActiveSyncGates({ taskId, sessionId });
+}
+function revalidatePermitDecision(permit) {
+    return evaluateWriteDecision({
+        actorId: permit.actorId,
+        taskId: permit.taskId,
+        sessionId: permit.sessionId || undefined,
+        resources: permit.resources,
+        intent: permit.intent,
+        operation: permit.operationId ? getOperation(permit.operationId) : undefined,
+        activeClaims: listActiveResourceClaims({ sessionId: permit.sessionId || undefined }),
+        activeGates: activeGates(permit.taskId, permit.sessionId || undefined),
+        constraintDecision: writeConstraintDecision({
+            actorId: permit.actorId,
+            taskId: permit.taskId,
+            sessionId: permit.sessionId || undefined,
+            resources: permit.resources,
+            intent: permit.intent,
+            operationId: permit.operationId || undefined,
+            baseHashes: permit.baseHashes,
+        }),
+    });
+}
+function writeConstraintDecision(input) {
+    try {
+        const projection = buildProjection({
+            taskId: input.taskId,
+            workingResources: input.resources.map(resource => resource.locator),
+            workingResourceRefs: input.resources,
+        });
+        return evaluateConstraints({
+            action: "operation_apply",
+            projection,
+            touchedResources: input.resources,
+        });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return { permitted: false, blockers: [], warnings: [], runtimeUnavailable: { message } };
+    }
+}
+function validatePermitForApply(permit, mutations, currentRoot) {
+    if (permit.status !== WritePermitStatus.ISSUED) {
+        return { type: "permit_status", id: permit.id, message: `Write permit is not issued: ${permit.status}` };
+    }
+    if (new Date(permit.expiresAt).getTime() <= Date.now()) {
+        updateWritePermit(permit.id, { status: WritePermitStatus.EXPIRED });
+        return { type: "permit_expired", id: permit.id, message: `Write permit expired at ${permit.expiresAt}` };
+    }
+    if (!permit.decision.permitted) {
+        return { type: "permit_denied", id: permit.id, message: "Write permit decision denied the write." };
+    }
+    if (!permit.guardedRoot) {
+        return { type: "permit_root", id: permit.id, message: "Write permit is missing its guarded root binding." };
+    }
+    if (permit.guardedRoot !== currentRoot) {
+        return { type: "permit_root", id: permit.id, message: "Write permit guarded root does not match the current project root." };
+    }
+    if (mutations.length === 0) {
+        return { type: "mutation", id: permit.id, message: "write.apply requires at least one mutation." };
+    }
+    if (mutations.length > 1 && permit.intent !== WriteIntent.BULK) {
+        return { type: "intent", id: permit.id, message: "Multiple mutations require intent 'bulk'." };
+    }
+    for (const mutation of mutations) {
+        if (mutation.delete && permit.intent !== WriteIntent.DELETE && permit.intent !== WriteIntent.BULK) {
+            return { type: "intent", id: mutation.resource.locator, message: "Delete mutations require intent 'delete' or 'bulk'." };
+        }
+        if (!permit.resources.some(resource => sameResource(resource, mutation.resource))) {
+            return { type: "resource", id: mutation.resource.locator, message: `Mutation resource is not covered by permit: ${mutation.resource.locator}` };
+        }
+    }
+    return null;
+}
+function preflightMutations(permit, mutations, root) {
+    const prepared = [];
+    for (const mutation of mutations) {
+        if (mutation.resource.type !== "file") {
+            return { denial: { type: "resource", id: mutation.resource.locator, message: `Controlled write apply currently supports file resources only: ${mutation.resource.type}` } };
+        }
+        let target;
+        let current;
+        try {
+            target = safeResolve(root, mutation.resource.locator);
+            current = readResourceHash(root, mutation.resource);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            return { denial: { type: "path", id: mutation.resource.locator, message } };
+        }
+        const base = permit.baseHashes.find(hash => sameResource(hash.resource, mutation.resource));
+        if (base && (base.exists !== current.exists || base.sha256 !== current.sha256)) {
+            return { denial: { type: "hash_precondition", id: mutation.resource.locator, message: `File changed since permit was issued: ${mutation.resource.locator}` } };
+        }
+        const content = mutation.contentBase64 !== undefined
+            ? Buffer.from(mutation.contentBase64, "base64")
+            : Buffer.from(mutation.content ?? "", "utf8");
+        prepared.push({ mutation, target, content });
+    }
+    return { mutations: prepared };
+}
+// File I/O utilities (safeResolve, readResourceHash, etc.) extracted to file-io.ts
+//# sourceMappingURL=write-permit-service.js.map

package/dist/server/application/write-permit-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-permit-service.js","sourceRoot":"","sources":["../../../_build/src/server/application/write-permit-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,qBAAqB,EAA8D,MAAM,uBAAuB,CAAC;AAC1M,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,cAAc,EACd,wBAAwB,EACxB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAClF,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AA2CvE,MAAM,0BAA0B,GAAG,EAAE,CAAC;AACtC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAEtC,MAAM,UAAU,UAAU,CAAC,KAAsB;IAC/C,OAAO,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAsB,EAAE,IAAY;IAC5D,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAChF,MAAM,QAAQ,GAAG,qBAAqB,CAAC;QACrC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;QAC1E,YAAY,EAAE,wBAAwB,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;QACtE,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC;QACvD,kBAAkB,EAAE,uBAAuB,CAAC,KAAK,CAAC;KACnD,CAAC,CAAC;IAEH,QAAQ,CACN,SAAS,CAAC,sBAAsB,EAChC,cAAc,EACd,KAAK,CAAC,WAAW,IAAI,OAAO,EAC5B,IAAI,CAAC,SAAS,CAAC;QACb,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC9B,CAAC,CACH,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACxB,QAAQ,CAAC,SAAS,CAAC,mBAAmB,EAAE,cAAc,EAAE,KAAK,CAAC,WAAW,IAAI,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAwB;IACnD,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;IAC7H,MAAM,MAAM,GAAG,iBAAiB,CAAC;QAC/B,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;QAC1D,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;QAClC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM;QACvF,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC,CAAC;IAEH,QAAQ,CACN,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,EACzF,cAAc,EACd,MAAM,CAAC,EAAE,EACT,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CACvI,CAAC;IAEF,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,mBAAmB,CAA4B,KAAQ;IAC9D,2FAA2F;IAC3F,0FAA0F;IAC1F,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,OAAO;QACL,GAAG,KAAK;QACR,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACnC,GAAG,CAAC;YACJ,OAAO,EAAE,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO;SAC/E,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAID,MAAM,UAAU,UAAU,CAAC,KAAsB;IAC/C,IAAI,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,wEAAwE;IACxE,MAAM,mBAAmB,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpD,GAAG,CAAC;QACJ,QAAQ,EAAE;YACR,GAAG,CAAC,CAAC,QAAQ;YACb,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO;SAC1G;KACF,CAAC,CAAC,CAAC;IACJ,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC;IACzE,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,QAAQ,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC7G,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvF,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvF,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,WAAW,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QACpG,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;QAC1F,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE,iCAAiC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxI,CAAC;IAED,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC;IAChF,IAAI,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG;YACf,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,mBAAmB,CAAC,OAAO;YACnC,QAAQ,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC;YACpC,QAAQ,EAAE,EAAE;SACb,CAAC;QACF,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvF,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvF,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,OAAO,GAAiE,EAAE,CAAC;IACjF,MAAM,eAAe,GAAG,iBAAiB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,yBAAyB,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IAEhE,IAAI,CAAC;QACH,KAAK,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,iBAAiB,CAAC,SAAS,EAAE,CAAC;YACxE,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,6DAA6D;gBAC7D,IAAI,CAAC;oBAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,8BAA8B,CAAC,CAAC;YACtF,CAAC;iBAAM,CAAC;gBACN,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxD,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACnG,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzD,CAAC;QACD,yEAAyE;QACzE,2CAA2C;IAC7C,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE;YACpC,MAAM,EAAE,iBAAiB,CAAC,QAAQ;YAClC,UAAU,EAAE,GAAG,EAAE;SAClB,CAAC,CAAC;QACH,QAAQ,CAAC,SAAS,CAAC,qBAAqB,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACpG,CAAC;IACD,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAC1F,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,SAAkB;IACrD,iBAAiB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACzC,OAAO,mBAAmB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAmB;IACnD,OAAO,qBAAqB,CAAC;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS;QACxC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;QAC5E,YAAY,EAAE,wBAAwB,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC;QACpF,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS,CAAC;QACtE,kBAAkB,EAAE,uBAAuB,CAAC;YAC1C,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS;YACxC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,SAAS;YAC5C,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAsB;IACrD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,eAAe,CAAC;YACjC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,gBAAgB,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;YACnE,mBAAmB,EAAE,KAAK,CAAC,SAAS;SACrC,CAAC,CAAC;QACH,OAAO,mBAAmB,CAAC;YACzB,MAAM,EAAE,iBAAiB;YACzB,UAAU;YACV,gBAAgB,EAAE,KAAK,CAAC,SAAS;SAClC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,kBAAkB,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAmB,EAAE,SAAyB,EAAE,WAAmB;IACjG,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB,CAAC,MAAM,EAAE,CAAC;QAC/C,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,+BAA+B,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IAC3G,CAAC;IACD,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACvD,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,iBAAiB,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,2BAA2B,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;IAC3G,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IACtG,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,mDAAmD,EAAE,CAAC;IAC9G,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;QACvC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,oEAAoE,EAAE,CAAC;IAC/H,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;IACrG,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;QAC/D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IACjG,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;YAClG,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;QAC3H,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAClF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,+CAA+C,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QAClJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAmB,EAAE,SAAyB,EAAE,IAAY;IACtF,MAAM,QAAQ,GAAG,EAAE,CAAC;IACpB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,kEAAkE,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;QAC9K,CAAC;QACD,IAAI,MAAc,CAAC;QACnB,IAAI,OAA6C,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACtD,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;QAC9E,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5F,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/E,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,yCAAyC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC;QACjK,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,KAAK,SAAS;YAClD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC;YAC/C,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;QAChD,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED,mFAAmF"}

package/dist/server/db-migrations.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Database migration functions extracted from db.ts.
+ *
+ * Each function is idempotent — safe to call on an already-migrated database.
+ * All functions are called by runMigrations() in db.ts.
+ */
+import Database from "better-sqlite3";
+/**
+ * Purpose: Normalizes the legacy `peer_contract` table by splitting its JSON
+ * `participants` column into dedicated child tables (participant, responsibility,
+ * interface_spec, resource_boundary, dependency).
+ *
+ * Idempotency: Skips if the `participants` column no longer exists.
+ */
+export declare function runPeerContractNormalizationMigration(db: Database.Database, sqlPath: string): void;
+/**
+ * Purpose: Creates indexes on foreign key columns across join tables
+ * (resource_claim_resource, sync_gate_resource, operation_resource,
+ * write_permit_resource) to accelerate FK-based lookups.
+ *
+ * Idempotency: Checks for each index before creation.
+ */
+export declare function runFkIndexesMigration(db: Database.Database): void;
+/**
+ * Purpose: Creates the `agent_registry_entry` table from an external SQL file
+ * and ensures its unique index on `agent_id` exists. Supports the agent
+ * registration and discovery subsystem.
+ *
+ * Idempotency: Skips table creation if it already exists; adds index if missing.
+ */
+export declare function runAgentRegistryEntryMigration(db: Database.Database, sqlPath: string): void;
+/**
+ * Purpose: Creates composite indexes on frequently queried columns across
+ * core tables (resource_claim, sync_gate, checkpoint, checkpoint_review, event)
+ * to accelerate common query paths: by actor+status, session, task, and time ranges.
+ *
+ * Idempotency: Checks for each index before creation.
+ */
+export declare function runQueryPathIndexesMigration(db: Database.Database): void;
+/**
+ * Purpose: Creates the `agent_message` table from an external SQL file.
+ * Stores inter-agent messages for the collaboration protocol.
+ *
+ * Idempotency: Skips if the table already exists.
+ */
+export declare function runAgentMessageMigration(db: Database.Database, sqlPath: string): void;
+/**
+ * Purpose: Creates the `state_transition_log` table with indexes on entity,
+ * agent, and timestamp columns. Provides an audit trail for all entity state
+ * transitions in the system.
+ *
+ * Idempotency: Skips if the table already exists.
+ */
+export declare function runStateTransitionLogMigration(db: Database.Database): void;
+/**
+ * Purpose: Adds `scope`, `function_name`, `line_start`, and `line_end` columns
+ * to all resource join tables. Enables fine-grained resource scoping beyond
+ * file-level (e.g., function-level, line-range).
+ *
+ * Idempotency: Checks each column before adding; skips missing tables.
+ */
+export declare function runResourceScopeMigration(db: Database.Database): void;
+/**
+ * Purpose: Adds incremental snapshot support columns (`version`, `content_hash`,
+ * `is_delta`, `base_snapshot_id`) to the `context_snapshot` table. Enables
+ * delta-based snapshots that reference a base snapshot instead of storing full
+ * copies every time.
+ *
+ * Idempotency: Checks each column before adding; skips if table is missing.
+ */
+export declare function runContextSnapshotIncrementalMigration(db: Database.Database): void;
+/**
+ * Purpose: Adds a monotonically increasing `seq` column and index to the `event`
+ * table. Enables ordered event replay and catch-up subscriptions by sequence number.
+ *
+ * Idempotency: Checks for column before adding; skips if table is missing.
+ */
+export declare function runEventSeqMigration(db: Database.Database): void;
+/**
+ * Purpose: Creates runtime-only tables: `memory_version` (optimistic concurrency
+ * control for project memory) and the FTS5 full-text search index.
+ */
+export declare function ensureRuntimeOnlyTables(db: Database.Database): void;
+//# sourceMappingURL=db-migrations.d.ts.map

package/dist/server/db-migrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-migrations.d.ts","sourceRoot":"","sources":["../../_build/src/server/db-migrations.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAwBtC;;;;;;GAMG;AACH,wBAAgB,qCAAqC,CACnD,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,OAAO,EAAE,MAAM,GACd,IAAI,CAqBN;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAajE;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,OAAO,EAAE,MAAM,GACd,IAAI,CAYN;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAoBxE;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,OAAO,EAAE,MAAM,GACd,IAAI,CAMN;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAkB1E;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAwBrE;AAED;;;;;;;GAOG;AACH,wBAAgB,sCAAsC,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAelF;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAOhE;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAUnE"}