synomem 0.9.6 → 0.10.0

package/dist/storage.js

@@ -1,4 +1,12 @@
-import { chmodSync, closeSync, existsSync, lstatSync, linkSync, mkdirSync, mkdtempSync, openSync, rmdirSync, unlinkSync, } from 'node:fs';
+import { actorDirectoryBinding, actorDirectoryKey, parseActorDirectoryKey, } from './actor-directory.js';
+import { SqlBookmarkRepository, bookmarkTables } from './bookmarks.js';
+import { SqlNotificationRepository, notificationTables } from './notifications.js';
+import { SqlParticipationRepository, participationStatements, participationTables, } from './participation-repository.js';
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { randomBytes } from 'node:crypto';
+import { SignedCursorCodec, cursorFilter, exactSequence } from './cursors.js';
+import { recordVisibilityPredicate, resolveAuthority } from './policy.js';
+import { chmodSync, closeSync, existsSync, lstatSync, linkSync, mkdirSync, mkdtempSync, openSync, readFileSync, readSync, rmdirSync, unlinkSync, } from 'node:fs';
 import { ulid } from 'ulid';
 import { basename, dirname, join, resolve } from 'node:path';
 import { DatabaseSync } from 'node:sqlite';
@@ -8,7 +16,7 @@ import { assertNoSymlinkEscape, atomicWriteFile, ensureDirectory, readJsonFile,
 import { dueInstant } from './projections.js';
 import { actorSchema, eventSchema, profileSchema, topicProfileSchema } from './schemas.js';
 /** The schema version this file writes and expects. */
-const SUPPORTED_SCHEMA_VERSION = 8;
+const SUPPORTED_SCHEMA_VERSION = 9;
 const migrationV1 = `
 CREATE TABLE IF NOT EXISTS schema_migrations (
   version INTEGER PRIMARY KEY,
@@ -35,7 +43,8 @@ CREATE TABLE IF NOT EXISTS events (
   created_at TEXT NOT NULL,
   actor_kind TEXT NOT NULL,
   actor_id TEXT NOT NULL,
-  recipient_agent_id TEXT,
+  recipient_kind TEXT NOT NULL DEFAULT 'agent',
+  recipient_id TEXT,
   kudos_id TEXT,
   visibility TEXT,
   idempotency_key TEXT,
@@ -47,7 +56,7 @@ ON events(actor_kind, actor_id, idempotency_key)
 WHERE type = 'kudos.given' AND idempotency_key IS NOT NULL;
 
 CREATE INDEX IF NOT EXISTS events_type_created ON events(type, created_at, id);
-CREATE INDEX IF NOT EXISTS events_recipient ON events(recipient_agent_id, created_at, id);
+CREATE INDEX IF NOT EXISTS events_recipient ON events(recipient_id, created_at, id);
 CREATE INDEX IF NOT EXISTS events_kudos_id ON events(kudos_id, created_at, id);
 
 CREATE TABLE IF NOT EXISTS projection_manifest (
@@ -83,7 +92,8 @@ CREATE TABLE kudos_current (
   kudos_id TEXT PRIMARY KEY,
   given_sequence INTEGER NOT NULL UNIQUE,
   created_at TEXT NOT NULL,
-  recipient_agent_id TEXT NOT NULL,
+  recipient_kind TEXT NOT NULL DEFAULT 'agent',
+  recipient_id TEXT NOT NULL,
   recipient_display_name TEXT NOT NULL,
   actor_kind TEXT NOT NULL,
   actor_id TEXT NOT NULL,
@@ -96,7 +106,7 @@ CREATE TABLE kudos_current (
   revocation_status TEXT NOT NULL,
   updated_sequence INTEGER NOT NULL
 ) STRICT;
-CREATE INDEX kudos_current_recipient ON kudos_current(recipient_agent_id, given_sequence DESC);
+CREATE INDEX kudos_current_recipient ON kudos_current(recipient_id, given_sequence DESC);
 CREATE INDEX kudos_current_actor ON kudos_current(actor_kind, actor_id, given_sequence DESC);
 CREATE INDEX kudos_current_status ON kudos_current(status, revocation_status, given_sequence DESC);
 `;
@@ -243,17 +253,20 @@ CREATE TABLE items_current (
   topic_ids_json TEXT NOT NULL DEFAULT '[]' CHECK (json_valid(topic_ids_json)),
   visibility TEXT NOT NULL,
   status TEXT NOT NULL,
-  recipient_agent_id TEXT,
+  recipient_kind TEXT NOT NULL DEFAULT 'agent',
+  recipient_id TEXT,
   recipient_display_name TEXT,
-  owner_agent_id TEXT,
+  owner_kind TEXT,
+  owner_id TEXT,
   owner_display_name TEXT,
-  assignee_agent_id TEXT,
+  assignee_kind TEXT,
+  assignee_id TEXT,
   assignee_display_name TEXT
 ) STRICT;
 CREATE INDEX items_current_kind_sequence ON items_current(kind, created_sequence DESC);
-CREATE INDEX items_current_recipient ON items_current(recipient_agent_id, created_sequence DESC);
-CREATE INDEX items_current_owner ON items_current(owner_agent_id, created_sequence DESC);
-CREATE INDEX items_current_assignee ON items_current(assignee_agent_id, created_sequence DESC);
+CREATE INDEX items_current_recipient ON items_current(recipient_id, created_sequence DESC);
+CREATE INDEX items_current_owner ON items_current(owner_id, created_sequence DESC);
+CREATE INDEX items_current_assignee ON items_current(assignee_id, created_sequence DESC);
 CREATE INDEX items_current_status ON items_current(kind, status, created_sequence DESC);
 
 CREATE TRIGGER events_append_only_update
@@ -261,26 +274,7 @@ BEFORE UPDATE ON events BEGIN SELECT RAISE(ABORT, 'events are append-only'); END
 CREATE TRIGGER events_append_only_delete
 BEFORE DELETE ON events BEGIN SELECT RAISE(ABORT, 'events are append-only'); END;
 `;
-const CONTEXT_BUDGET_BYTES = 24_576;
-function encodeCursor(kind, sequence) {
-    return Buffer.from(JSON.stringify({ v: 1, kind, sequence }), 'utf8').toString('base64url');
-}
-function decodeCursor(cursor, kind) {
-    try {
-        const value = JSON.parse(Buffer.from(cursor, 'base64url').toString('utf8'));
-        if (value.v !== 1 ||
-            value.kind !== kind ||
-            typeof value.sequence !== 'number' ||
-            !Number.isSafeInteger(value.sequence) ||
-            value.sequence < 0) {
-            throw new Error('invalid cursor');
-        }
-        return value.sequence;
-    }
-    catch {
-        throw new SynomemError('INVALID_INPUT', `Invalid ${kind} cursor.`);
-    }
-}
+const CONTEXT_BUDGET_BYTES = 24576;
 function itemSummaryFromRow(row) {
     return {
         id: row.item_id,
@@ -297,9 +291,11 @@ function itemSummaryFromRow(row) {
         topicIds: JSON.parse(row.topic_ids_json),
         visibility: row.visibility,
         status: row.status,
-        ...(row.recipient_agent_id ? { recipientAgentId: row.recipient_agent_id } : {}),
-        ...(row.owner_agent_id ? { ownerAgentId: row.owner_agent_id } : {}),
-        ...(row.assignee_agent_id ? { assigneeAgentId: row.assignee_agent_id } : {}),
+        ...(row.recipient_id ? { recipient: { kind: row.recipient_kind, id: row.recipient_id } } : {}),
+        ...(row.owner_id ? { owner: { kind: row.owner_kind ?? 'agent', id: row.owner_id } } : {}),
+        ...(row.assignee_id
+            ? { assignee: { kind: row.assignee_kind ?? 'agent', id: row.assignee_id } }
+            : {}),
     };
 }
 /**
@@ -330,7 +326,7 @@ function summaryFromRow(row) {
         kind: 'kudos',
         createdAt: row.created_at,
         updatedAt: row.created_at,
-        recipientAgentId: row.recipient_agent_id,
+        recipient: { kind: row.recipient_kind, id: row.recipient_id },
         recipientDisplayName: row.recipient_display_name,
         actor: {
             kind: row.actor_kind,
@@ -345,7 +341,58 @@ function summaryFromRow(row) {
         revocationStatus: row.revocation_status,
     };
 }
+const databaseWriteTails = new Map();
 export class SynomemStorage {
+    notifications = this.makeNotifications();
+    makeNotifications() {
+        const workspaceId = () => this.config.workspaceId;
+        return new SqlNotificationRepository({
+            get workspaceId() {
+                return workspaceId();
+            },
+            query: async (sql, values) => this.prepare(sql).all(...values),
+            execute: async (sql, values) => {
+                this.prepare(sql).run(...values);
+            },
+            codec: () => this.cursorCodec,
+            canRead: async (id, actor) => this.canActorReadItem(id, actor),
+            visibility: (actor) => recordVisibilityPredicate(actor, this.boundActor && this.boundActor.kind === actor.kind && this.boundActor.id === actor.id
+                ? this.authority
+                : resolveAuthority(), false, 'i.'),
+        });
+    }
+    bookmarks = this.makeBookmarks();
+    makeBookmarks() {
+        const workspaceId = () => this.config.workspaceId;
+        return new SqlBookmarkRepository({
+            get workspaceId() {
+                return workspaceId();
+            },
+            query: async (sql, values) => this.prepare(sql).all(...values),
+            execute: async (sql, values) => {
+                this.prepare(sql).run(...values);
+            },
+            codec: () => this.cursorCodec,
+            canRead: async (id, actor) => this.canActorReadItem(id, actor),
+            visibility: (actor) => recordVisibilityPredicate(actor, this.boundActor && this.boundActor.kind === actor.kind && this.boundActor.id === actor.id
+                ? this.authority
+                : resolveAuthority(), false, 'i.'),
+        });
+    }
+    participation = this.makeParticipation();
+    makeParticipation() {
+        const workspaceId = () => this.config.workspaceId;
+        return new SqlParticipationRepository({
+            get workspaceId() {
+                return workspaceId();
+            },
+            query: async (sql, values) => this.prepare(sql).all(...values),
+            execute: async (sql, values) => {
+                this.prepare(sql).run(...values);
+            },
+            codec: () => this.cursorCodec,
+        });
+    }
     home;
     storageDirectory;
     databasePath;
@@ -353,10 +400,15 @@ export class SynomemStorage {
     readOnly;
     config = defaultConfig;
     database;
+    cursorCodec;
+    authority;
+    boundActor;
     configOverrides;
-    validatedEventSequence = 0;
-    transactionTail = Promise.resolve();
+    validatedEventSequence = 0n;
+    transactionState = new AsyncLocalStorage();
     constructor(options) {
+        this.authority = resolveAuthority(options.authority);
+        this.boundActor = options.actor;
         this.home = resolve(options.home);
         // The home is the storage directory; see configLocation in backend.ts.
         this.storageDirectory = this.home;
@@ -365,6 +417,9 @@ export class SynomemStorage {
         this.readOnly = options.readOnly;
         this.configOverrides = options.config;
     }
+    setAuthority(authority) {
+        this.authority = resolveAuthority(authority);
+    }
     init() {
         try {
             if (this.configOverrides?.backend?.kind === 'remote') {
@@ -378,10 +433,29 @@ export class SynomemStorage {
             if (lstatSync(this.home).isSymbolicLink()) {
                 throw new SynomemError('UNSAFE_PATH', 'The configured Synomem home cannot be a symbolic link.');
             }
-            if (!this.readOnly)
-                ensureDirectory(this.storageDirectory);
             assertNoSymlinkEscape(this.home, this.storageDirectory);
+            if (existsSync(this.databasePath)) {
+                // The SQLite header stores PRAGMA user_version at byte 60. A read-only
+                // SQLite connection can still create/delete shared-memory sidecars in
+                // WAL mode, changing directory metadata before we refuse legacy data.
+                // Read only the header to keep the export-only guard truly inert.
+                const handle = openSync(this.databasePath, 'r');
+                const header = Buffer.alloc(100);
+                let size = 0;
+                try {
+                    size = readSync(handle, header, 0, header.length, 0);
+                }
+                finally {
+                    closeSync(handle);
+                }
+                if (size < 100 || header.toString('ascii', 0, 16) !== 'SQLite format 3\0')
+                    throw new SynomemError('UNSUPPORTED_SCHEMA', 'This database header is malformed; use raw recovery.');
+                const version = header.readUInt32BE(60);
+                if (version > 0 && version !== SUPPORTED_SCHEMA_VERSION)
+                    throw new SynomemError('UNSUPPORTED_SCHEMA', 'This home is export-only. Preserve its raw events and create a fresh human-participation home.');
+            }
             if (!this.readOnly) {
+                ensureDirectory(this.storageDirectory);
                 chmodSync(this.storageDirectory, 0o700);
             }
             const fileConfig = existsSync(this.configPath) ? readJsonFile(this.configPath) : undefined;
@@ -411,6 +485,15 @@ export class SynomemStorage {
                 enableForeignKeyConstraints: true,
             });
             this.database.exec('PRAGMA busy_timeout = 5000; PRAGMA foreign_keys = ON;');
+            const keyPath = join(this.home, 'cursor-key');
+            assertNoSymlinkEscape(this.home, keyPath);
+            if (!existsSync(keyPath)) {
+                if (this.readOnly)
+                    throw new SynomemError('CONFIG_INVALID', 'The home cursor key is missing.');
+                atomicWriteFile(keyPath, randomBytes(32).toString('base64url'), 0o600);
+            }
+            const key = Buffer.from(readFileSync(keyPath, 'utf8'), 'base64url');
+            this.cursorCodec = new SignedCursorCodec({ keyId: 'home', key });
             if (!this.readOnly) {
                 this.database.exec('PRAGMA journal_mode = WAL; PRAGMA synchronous = FULL;');
                 this.migrate();
@@ -430,9 +513,35 @@ export class SynomemStorage {
             throw asSynomemError(error);
         }
     }
+    prepare(sql) {
+        const statement = this.db().prepare(sql);
+        statement.setReadBigInts(true);
+        return statement;
+    }
+    binding(purpose, viewer, filters) {
+        return {
+            purpose,
+            workspaceId: this.config.workspaceId,
+            actor: { kind: viewer.kind, id: viewer.id },
+            filter: cursorFilter(filters),
+        };
+    }
+    encodeCursor(binding, sequence, watermark = this.maxEventSequence()) {
+        return this.cursorCodec.encode(binding, {
+            sequence: exactSequence(sequence),
+            watermark: exactSequence(watermark),
+        });
+    }
+    decodeCursor(token, binding) {
+        const value = this.cursorCodec.decode(token, binding, exactSequence(this.maxEventSequence()));
+        return { sequence: BigInt(value.sequence), watermark: BigInt(value.watermark) };
+    }
     migrate() {
         const db = this.db();
         const version = Number(db.prepare('PRAGMA user_version').get().user_version);
+        if (version > 0 && version < 9 && db.prepare('SELECT 1 FROM events LIMIT 1').get()) {
+            throw new SynomemError('UNSUPPORTED_SCHEMA', 'This populated legacy home is export-only. Export its raw events and explicitly create a new human-participation home.');
+        }
         if (version > SUPPORTED_SCHEMA_VERSION) {
             throw new SynomemError('UNSUPPORTED_SCHEMA', `Database schema version ${version} is newer than this package supports.`);
         }
@@ -514,9 +623,26 @@ export class SynomemStorage {
                 db.exec('PRAGMA user_version = 8');
             });
         }
+        if (Number(db.prepare('PRAGMA user_version').get().user_version) ===
+            8) {
+            this.transactionSync(() => {
+                db.exec(`ALTER TABLE items_current ADD COLUMN workspace_id TEXT;
+${notificationTables}
+${bookmarkTables}
+${participationTables}
+CREATE TABLE mutation_receipts(actor_kind TEXT NOT NULL,actor_id TEXT NOT NULL,key_hash TEXT NOT NULL,operation TEXT NOT NULL,request_hash TEXT NOT NULL,result_json TEXT,event_id TEXT,created_at TEXT NOT NULL,PRIMARY KEY(actor_kind,actor_id,key_hash)) STRICT;
+          CREATE INDEX mutation_receipts_retention ON mutation_receipts(created_at) WHERE result_json IS NOT NULL;
+          CREATE TABLE human_actors (id TEXT PRIMARY KEY, handle TEXT NOT NULL UNIQUE, display_name TEXT NOT NULL, status TEXT NOT NULL CHECK(status IN ('active','inactive'))) STRICT;
+          CREATE INDEX items_current_owner_actor ON items_current(owner_kind,owner_id,created_sequence DESC);
+          CREATE INDEX items_current_recipient_actor ON items_current(recipient_kind,recipient_id,created_sequence DESC);
+          CREATE INDEX items_current_assignee_actor ON items_current(assignee_kind,assignee_id,created_sequence DESC);`);
+                db.prepare('INSERT INTO schema_migrations(version,applied_at) VALUES(9,?)').run(new Date().toISOString());
+                db.exec('PRAGMA user_version=9');
+            });
+        }
     }
     assertSchemaSupported() {
-        const version = Number(this.db().prepare('PRAGMA user_version').get().user_version);
+        const version = Number(this.prepare('PRAGMA user_version').get().user_version);
         if (version !== SUPPORTED_SCHEMA_VERSION) {
             if (version >= 1 && version < SUPPORTED_SCHEMA_VERSION) {
                 throw new SynomemError('UNSUPPORTED_SCHEMA', `Database schema version ${version} requires migration. Open this home once with readOnly: false, then retry the read-only client.`);
@@ -534,6 +660,8 @@ export class SynomemStorage {
             throw new SynomemError('READ_ONLY', 'This Synomem client is read-only.');
     }
     transaction(operation) {
+        if (this.transactionState.getStore())
+            return Promise.resolve().then(operation);
         const execute = async () => {
             this.assertWritable();
             const db = this.db();
@@ -541,7 +669,7 @@ export class SynomemStorage {
             try {
                 db.exec('BEGIN IMMEDIATE');
                 began = true;
-                const result = await operation();
+                const result = await this.transactionState.run(true, operation);
                 db.exec('COMMIT');
                 began = false;
                 this.restrictDatabaseFiles();
@@ -559,8 +687,14 @@ export class SynomemStorage {
                 throw asSynomemError(error);
             }
         };
-        const result = this.transactionTail.then(execute, execute);
-        this.transactionTail = result.then(() => undefined, () => undefined);
+        const prior = databaseWriteTails.get(this.databasePath) ?? Promise.resolve();
+        const result = prior.then(execute, execute);
+        const tail = result.then(() => undefined, () => undefined);
+        databaseWriteTails.set(this.databasePath, tail);
+        void tail.then(() => {
+            if (databaseWriteTails.get(this.databasePath) === tail)
+                databaseWriteTails.delete(this.databasePath);
+        });
         return result;
     }
     transactionSync(operation) {
@@ -588,14 +722,18 @@ export class SynomemStorage {
             throw asSynomemError(error);
         }
     }
-    insertEvent(event) {
+    async insertEvent(event) {
+        if (!this.transactionState.getStore()) {
+            await this.transaction(() => this.insertEvent(event));
+            return;
+        }
         const parsed = eventSchema.parse(event);
         const recipientAgentId = parsed.type === 'kudos.given' ||
             parsed.type === 'kudos.acknowledged' ||
             parsed.type === 'memo.sent' ||
             parsed.type === 'memo.read' ||
             parsed.type === 'memo.archived'
-            ? parsed.recipientAgentId
+            ? parsed.recipient?.id
             : null;
         const kudosId = parsed.type === 'kudos.acknowledged' || parsed.type === 'kudos.revoked'
             ? parsed.kudosId
@@ -603,53 +741,46 @@ export class SynomemStorage {
         const visibility = 'visibility' in parsed ? parsed.visibility : null;
         const idempotencyKey = parsed.idempotencyKey ?? null;
         const kind = eventKind(parsed) ?? null;
-        const sequence = Number(this.db().prepare('SELECT COALESCE(MAX(sequence), 0) + 1 AS next FROM events').get().next);
-        this.db()
-            .prepare(`INSERT INTO events(
+        const sequence = this.prepare('SELECT COALESCE(MAX(sequence),0)+1 AS next FROM events').get().next;
+        this.prepare(`INSERT INTO events(
           id, schema_version, type, created_at, actor_kind, actor_id,
-          recipient_agent_id, kudos_id, visibility, idempotency_key, payload, sequence,
+          recipient_id, kudos_id, visibility, idempotency_key, payload, sequence,
           workspace_id, aggregate_id, aggregate_version, item_kind
-        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
-            .run(parsed.id, parsed.schemaVersion, parsed.type, parsed.createdAt, parsed.actor.kind, parsed.actor.id, recipientAgentId, kudosId, visibility, idempotencyKey, JSON.stringify(parsed), sequence, parsed.workspaceId, parsed.aggregateId, parsed.aggregateVersion, kind);
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(parsed.id, parsed.schemaVersion, parsed.type, parsed.createdAt, parsed.actor.kind, parsed.actor.id, recipientAgentId, kudosId, visibility, idempotencyKey, JSON.stringify(parsed), sequence, parsed.workspaceId, parsed.aggregateId, parsed.aggregateVersion, kind);
         this.applyEventToCurrent(parsed, sequence);
         this.applyEventToItems(parsed, sequence);
+        this.prepare('UPDATE items_current SET workspace_id=? WHERE item_id=?').run(parsed.workspaceId, parsed.aggregateId);
+        for (const command of participationStatements(parsed, sequence, this.config.workspaceId))
+            this.prepare(command.sql).run(...command.values);
+        await this.notifications.apply(parsed, sequence);
     }
     applyEventToCurrent(event, sequence) {
         if (event.type === 'kudos.given') {
-            this.db()
-                .prepare(`INSERT INTO kudos_current(
-            kudos_id, given_sequence, created_at, recipient_agent_id, recipient_display_name,
+            this.prepare(`INSERT INTO kudos_current(
+            kudos_id, given_sequence, created_at, recipient_id, recipient_display_name,
             actor_kind, actor_id, actor_display_name, title, tags_json, topic_ids_json, visibility,
             status, revocation_status, updated_sequence
-          ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'unacknowledged', 'active', ?)`)
-                .run(event.id, sequence, event.createdAt, event.recipientAgentId, event.recipientDisplayName, event.actor.kind, event.actor.id, event.actor.displayName ?? null, event.title, JSON.stringify(event.tags ?? []), JSON.stringify(event.topicIds ?? []), event.visibility, sequence);
+          ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'unacknowledged', 'active', ?)`).run(event.id, sequence, event.createdAt, event.recipient?.id, event.recipientDisplayName, event.actor.kind, event.actor.id, event.actor.displayName ?? null, event.title, JSON.stringify(event.tags ?? []), JSON.stringify(event.topicIds ?? []), event.visibility, sequence);
+            this.prepare('UPDATE kudos_current SET recipient_kind=? WHERE kudos_id=?').run(event.recipient.kind, event.id);
         }
         else if (event.type === 'kudos.acknowledged') {
-            this.db()
-                .prepare("UPDATE kudos_current SET status = 'acknowledged', updated_sequence = ? WHERE kudos_id = ?")
-                .run(sequence, event.kudosId);
+            this.prepare("UPDATE kudos_current SET status = 'acknowledged', updated_sequence = ? WHERE kudos_id = ?").run(sequence, event.kudosId);
         }
         else if (event.type === 'kudos.revoked') {
-            this.db()
-                .prepare("UPDATE kudos_current SET revocation_status = 'revoked', updated_sequence = ? WHERE kudos_id = ?")
-                .run(sequence, event.kudosId);
+            this.prepare("UPDATE kudos_current SET revocation_status = 'revoked', updated_sequence = ? WHERE kudos_id = ?").run(sequence, event.kudosId);
         }
     }
     applyEventToItems(event, sequence) {
         const insert = (values) => {
-            this.db()
-                .prepare(`INSERT INTO items_current(
+            this.prepare(`INSERT INTO items_current(
           item_id, kind, created_sequence, updated_sequence, created_at, updated_at,
           actor_kind, actor_id, actor_display_name, title, tags_json, topic_ids_json, visibility, status,
-          recipient_agent_id, recipient_display_name, owner_agent_id, owner_display_name,
-          assignee_agent_id, assignee_display_name, due_at
-        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
-                .run(event.aggregateId, values.kind, sequence, sequence, event.createdAt, event.createdAt, event.actor.kind, event.actor.id, event.actor.displayName ?? null, values.title, JSON.stringify(values.tags ?? []), JSON.stringify(values.topicIds ?? []), values.visibility, values.status, values.recipientAgentId ?? null, values.recipientDisplayName ?? null, values.ownerAgentId ?? null, values.ownerDisplayName ?? null, values.assigneeAgentId ?? null, values.assigneeDisplayName ?? null, values.dueAt ?? null);
+          recipient_id, recipient_display_name, owner_id, owner_display_name,
+          assignee_id, assignee_display_name, due_at
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(event.aggregateId, values.kind, sequence, sequence, event.createdAt, event.createdAt, event.actor.kind, event.actor.id, event.actor.displayName ?? null, values.title, JSON.stringify(values.tags ?? []), JSON.stringify(values.topicIds ?? []), values.visibility, values.status, values.recipient?.id ?? null, values.recipientDisplayName ?? null, values.owner?.id ?? null, values.ownerDisplayName ?? null, values.assignee?.id ?? null, values.assigneeDisplayName ?? null, values.dueAt ?? null);
         };
         const updateStatus = (status) => {
-            this.db()
-                .prepare('UPDATE items_current SET status = ?, updated_sequence = ?, updated_at = ? WHERE item_id = ?')
-                .run(status, sequence, event.createdAt, event.aggregateId);
+            this.prepare('UPDATE items_current SET status = ?, updated_sequence = ?, updated_at = ? WHERE item_id = ?').run(status, sequence, event.createdAt, event.aggregateId);
         };
         if (event.type === 'kudos.given') {
             insert({
@@ -659,7 +790,7 @@ export class SynomemStorage {
                 topicIds: event.topicIds,
                 visibility: event.visibility,
                 status: 'unacknowledged',
-                recipientAgentId: event.recipientAgentId,
+                recipient: event.recipient,
                 recipientDisplayName: event.recipientDisplayName,
             });
         }
@@ -675,7 +806,7 @@ export class SynomemStorage {
                 topicIds: event.topicIds,
                 visibility: event.visibility,
                 status: 'unread',
-                recipientAgentId: event.recipientAgentId,
+                recipient: event.recipient,
                 recipientDisplayName: event.recipientDisplayName,
             });
         }
@@ -691,7 +822,7 @@ export class SynomemStorage {
                 topicIds: event.topicIds,
                 visibility: event.visibility,
                 status: 'active',
-                ownerAgentId: event.ownerAgentId,
+                owner: event.owner,
                 ownerDisplayName: event.ownerDisplayName,
             });
         }
@@ -712,10 +843,8 @@ export class SynomemStorage {
             });
         }
         else if (event.type === 'post.edited') {
-            this.db()
-                .prepare(`UPDATE items_current SET title = ?, tags_json = ?, topic_ids_json = ?,
-         updated_sequence = ?, updated_at = ? WHERE item_id = ?`)
-                .run(event.title, JSON.stringify(event.tags ?? []), JSON.stringify(event.topicIds ?? []), sequence, event.createdAt, event.postId);
+            this.prepare(`UPDATE items_current SET title = ?, tags_json = ?, topic_ids_json = ?,
+         updated_sequence = ?, updated_at = ? WHERE item_id = ?`).run(event.title, JSON.stringify(event.tags ?? []), JSON.stringify(event.topicIds ?? []), sequence, event.createdAt, event.postId);
         }
         else if (event.type === 'post.archived') {
             updateStatus('archived');
@@ -723,25 +852,19 @@ export class SynomemStorage {
         else if (event.type === 'post.acknowledged') {
             // One row per actor per post: acknowledging twice is the same statement,
             // not a second one.
-            this.db()
-                .prepare(`INSERT INTO post_acknowledgments
+            this.prepare(`INSERT INTO post_acknowledgments
              (post_id, actor_kind, actor_id, actor_display_name, note, acknowledged_at)
            VALUES (?, ?, ?, ?, ?, ?)
            ON CONFLICT(post_id, actor_kind, actor_id) DO UPDATE SET
              note = excluded.note,
-             acknowledged_at = excluded.acknowledged_at`)
-                .run(event.postId, event.actor.kind, event.actor.id, event.actor.displayName ?? null, event.note ?? null, event.createdAt);
+             acknowledged_at = excluded.acknowledged_at`).run(event.postId, event.actor.kind, event.actor.id, event.actor.displayName ?? null, event.note ?? null, event.createdAt);
         }
         else if (event.type === 'post.acknowledgment.withdrawn') {
-            this.db()
-                .prepare('DELETE FROM post_acknowledgments WHERE post_id = ? AND actor_kind = ? AND actor_id = ?')
-                .run(event.postId, event.actor.kind, event.actor.id);
+            this.prepare('DELETE FROM post_acknowledgments WHERE post_id = ? AND actor_kind = ? AND actor_id = ?').run(event.postId, event.actor.kind, event.actor.id);
         }
         else if (event.type === 'note.revised') {
-            this.db()
-                .prepare(`UPDATE items_current SET title = ?, tags_json = ?, topic_ids_json = ?, visibility = ?,
-         updated_sequence = ?, updated_at = ? WHERE item_id = ?`)
-                .run(event.title, JSON.stringify(event.tags ?? []), JSON.stringify(event.topicIds ?? []), event.visibility, sequence, event.createdAt, event.aggregateId);
+            this.prepare(`UPDATE items_current SET title = ?, tags_json = ?, topic_ids_json = ?, visibility = ?,
+         updated_sequence = ?, updated_at = ? WHERE item_id = ?`).run(event.title, JSON.stringify(event.tags ?? []), JSON.stringify(event.topicIds ?? []), event.visibility, sequence, event.createdAt, event.aggregateId);
         }
         else if (event.type === 'note.archived')
             updateStatus('archived');
@@ -753,16 +876,14 @@ export class SynomemStorage {
                 topicIds: event.topicIds,
                 visibility: event.visibility,
                 status: event.requiresAcceptance ? 'assigned' : 'open',
-                assigneeAgentId: event.assigneeAgentId,
+                assignee: event.assignee,
                 assigneeDisplayName: event.assigneeDisplayName,
                 ...((due) => (due ? { dueAt: due } : {}))(dueInstant(event.due)),
             });
         }
         else if (event.type === 'task.updated') {
-            this.db()
-                .prepare(`UPDATE items_current SET title = ?, tags_json = ?, topic_ids_json = ?, visibility = ?, due_at = ?,
-         updated_sequence = ?, updated_at = ? WHERE item_id = ?`)
-                .run(event.title, JSON.stringify(event.tags ?? []), JSON.stringify(event.topicIds ?? []), event.visibility, dueInstant(event.due) ?? null, sequence, event.createdAt, event.aggregateId);
+            this.prepare(`UPDATE items_current SET title = ?, tags_json = ?, topic_ids_json = ?, visibility = ?, due_at = ?,
+         updated_sequence = ?, updated_at = ? WHERE item_id = ?`).run(event.title, JSON.stringify(event.tags ?? []), JSON.stringify(event.topicIds ?? []), event.visibility, dueInstant(event.due) ?? null, sequence, event.createdAt, event.aggregateId);
         }
         else if (event.type === 'task.accepted')
             updateStatus('open');
@@ -772,6 +893,8 @@ export class SynomemStorage {
             updateStatus('completed');
         else if (event.type === 'task.reopened')
             updateStatus('open');
+        else if (event.type === 'task.decision_overridden')
+            updateStatus(event.nextStatus);
         else if (event.type === 'task.canceled')
             updateStatus('canceled');
         else if (event.type === 'todo.created') {
@@ -785,16 +908,14 @@ export class SynomemStorage {
                 topicIds: event.topicIds,
                 visibility: 'private',
                 status: 'open',
-                ownerAgentId: event.actor.id,
+                owner: event.owner,
                 ...(event.actor.displayName ? { ownerDisplayName: event.actor.displayName } : {}),
                 ...((due) => (due ? { dueAt: due } : {}))(dueInstant(event.due)),
             });
         }
         else if (event.type === 'todo.updated') {
-            this.db()
-                .prepare(`UPDATE items_current SET title = ?, tags_json = ?, topic_ids_json = ?, due_at = ?,
-         updated_sequence = ?, updated_at = ? WHERE item_id = ?`)
-                .run(event.title, JSON.stringify(event.tags ?? []), JSON.stringify(event.topicIds ?? []), dueInstant(event.due) ?? null, sequence, event.createdAt, event.aggregateId);
+            this.prepare(`UPDATE items_current SET title = ?, tags_json = ?, topic_ids_json = ?, due_at = ?,
+         updated_sequence = ?, updated_at = ? WHERE item_id = ?`).run(event.title, JSON.stringify(event.tags ?? []), JSON.stringify(event.topicIds ?? []), dueInstant(event.due) ?? null, sequence, event.createdAt, event.aggregateId);
         }
         else if (event.type === 'todo.completed')
             updateStatus('completed');
@@ -804,15 +925,24 @@ export class SynomemStorage {
             updateStatus('canceled');
         else if (event.type === 'todo.archived')
             updateStatus('archived');
+        if ('recipient' in event) {
+            this.prepare('UPDATE items_current SET recipient_kind=? WHERE item_id=?').run(event.recipient.kind, event.aggregateId);
+        }
+        if ('owner' in event) {
+            this.prepare('UPDATE items_current SET owner_kind=?,owner_id=? WHERE item_id=?').run(event.owner.kind, event.owner.id, event.aggregateId);
+        }
+        if ('assignee' in event) {
+            this.prepare('UPDATE items_current SET assignee_kind=? WHERE item_id=?').run(event.assignee.kind, event.aggregateId);
+        }
     }
     rebuildItemsCurrentIndex() {
-        this.db().prepare('DELETE FROM items_current').run();
-        const rows = this.db()
-            .prepare('SELECT id, payload, sequence FROM events ORDER BY sequence ASC')
-            .all();
+        this.prepare('DELETE FROM items_current').run();
+        const rows = this.prepare('SELECT id, payload, sequence FROM events ORDER BY sequence ASC').all();
         for (const row of rows) {
             try {
-                this.applyEventToItems(this.parseEvent(row), row.sequence);
+                const event = this.parseEvent(row);
+                this.applyEventToItems(event, row.sequence);
+                this.prepare('UPDATE items_current SET workspace_id=? WHERE item_id=?').run(event.workspaceId, event.aggregateId);
             }
             catch (error) {
                 if (!(error instanceof SynomemError))
@@ -820,11 +950,20 @@ export class SynomemStorage {
             }
         }
     }
+    rebuildParticipationCurrentIndex() {
+        for (const table of ['thread_entries', 'reactions_current', 'replies_current'])
+            this.prepare(`DELETE FROM ${table} WHERE workspace_id=?`).run(this.config.workspaceId);
+        for (const row of this.rawEventRows()) {
+            const event = this.parseEvent(row);
+            const sequence = this.prepare('SELECT sequence FROM events WHERE id=?').get(event.id).sequence;
+            for (const command of participationStatements(event, sequence, this.config.workspaceId))
+                if (!command.sql.includes('thread_members'))
+                    this.prepare(command.sql).run(...command.values);
+        }
+    }
     rebuildKudosCurrentIndex() {
-        this.db().prepare('DELETE FROM kudos_current').run();
-        const rows = this.db()
-            .prepare('SELECT id, payload, sequence FROM events ORDER BY sequence ASC')
-            .all();
+        this.prepare('DELETE FROM kudos_current').run();
+        const rows = this.prepare('SELECT id, payload, sequence FROM events ORDER BY sequence ASC').all();
         for (const row of rows) {
             try {
                 this.applyEventToCurrent(this.parseEvent(row), row.sequence);
@@ -836,19 +975,26 @@ export class SynomemStorage {
         }
     }
     nextAggregateVersion(aggregateId) {
-        return Number(this.db()
-            .prepare('SELECT COALESCE(MAX(aggregate_version), 0) + 1 AS next FROM events WHERE workspace_id = ? AND aggregate_id = ?')
-            .get(this.config.workspaceId, aggregateId).next);
+        return Number(this.prepare('SELECT COALESCE(MAX(aggregate_version), 0) + 1 AS next FROM events WHERE workspace_id = ? AND aggregate_id = ?').get(this.config.workspaceId, aggregateId).next);
     }
     listKudosSummaries(input, viewer) {
+        const binding = this.binding('kudos-list', viewer, {
+            ...input,
+            cursor: undefined,
+            limit: undefined,
+            offset: undefined,
+        });
+        const changesBinding = this.binding('kudos-changes', viewer, { kinds: ['kudos'] });
+        const position = input.cursor ? this.decodeCursor(input.cursor, binding) : undefined;
+        const high = position?.watermark ?? this.maxEventSequence();
         const where = [];
         const parameters = [];
         const add = (clause, ...values) => {
             where.push(clause);
             parameters.push(...values);
         };
-        if (input.recipientAgentId)
-            add('recipient_agent_id = ?', input.recipientAgentId);
+        if (input.recipient?.id)
+            add('recipient_kind=? AND recipient_id = ?', input.recipient.kind, input.recipient.id);
         if (input.actorId)
             add('actor_id = ?', input.actorId);
         if (input.actorKind)
@@ -868,32 +1014,23 @@ export class SynomemStorage {
             add('created_at >= ?', input.from);
         if (input.to)
             add('created_at <= ?', input.to);
-        if (viewer.kind !== 'human') {
-            if (viewer.kind === 'agent') {
-                add(`(visibility != 'private' OR recipient_agent_id = ? OR
-            (actor_kind = ? AND actor_id = ?))`, viewer.id, viewer.kind, viewer.id);
-            }
-            else {
-                add(`(visibility != 'private' OR (actor_kind = ? AND actor_id = ?))`, viewer.kind, viewer.id);
-            }
-        }
+        const privacy = recordVisibilityPredicate(viewer, this.authority, true);
+        add(privacy.sql, ...privacy.values);
         const baseWhere = where.length ? `WHERE ${where.join(' AND ')}` : '';
-        const total = Number(this.db()
-            .prepare(`SELECT COUNT(*) AS count FROM kudos_current ${baseWhere}`)
-            .get(...parameters).count);
-        const cursorSequence = input.cursor ? decodeCursor(input.cursor, 'list') : undefined;
+        const total = Number(this.prepare(`SELECT COUNT(*) AS count FROM kudos_current ${baseWhere}`).get(...parameters).count);
+        const cursorSequence = position?.sequence;
         const pageWhere = [...where];
         const pageParameters = [...parameters];
         if (cursorSequence !== undefined) {
             pageWhere.push('given_sequence < ?');
             pageParameters.push(cursorSequence);
         }
+        pageWhere.push('given_sequence<=? AND updated_sequence<=?');
+        pageParameters.push(high, high);
         const sqlWhere = pageWhere.length ? `WHERE ${pageWhere.join(' AND ')}` : '';
         const offset = cursorSequence === undefined ? input.offset : 0;
-        const rows = this.db()
-            .prepare(`SELECT * FROM kudos_current ${sqlWhere}
-         ORDER BY given_sequence DESC LIMIT ? OFFSET ?`)
-            .all(...pageParameters, input.limit + 1, offset);
+        const rows = this.prepare(`SELECT * FROM kudos_current ${sqlWhere}
+         ORDER BY given_sequence DESC LIMIT ? OFFSET ?`).all(...pageParameters, input.limit + 1, offset);
         const items = [];
         let bytes = 2;
         let contextLimited = false;
@@ -910,50 +1047,47 @@ export class SynomemStorage {
         const hasMore = contextLimited || rows.length > items.length;
         const last = items.at(-1);
         const lastRow = last ? rows[items.length - 1] : undefined;
-        const watermark = encodeCursor('change', this.maxEventSequence());
+        const watermark = this.encodeCursor(changesBinding, high, high);
         return {
             items,
             total,
             limit: input.limit,
             offset,
-            ...(hasMore && lastRow ? { nextCursor: encodeCursor('list', lastRow.given_sequence) } : {}),
+            ...(hasMore && lastRow
+                ? { nextCursor: this.encodeCursor(binding, lastRow.given_sequence, high) }
+                : {}),
             hasMore,
             watermark,
             contextLimited,
         };
     }
     listKudosChanges(after, limit, viewer) {
-        const afterSequence = after ? decodeCursor(after, 'change') : 0;
+        const binding = this.binding('kudos-changes', viewer, { kinds: ['kudos'] });
+        const afterSequence = after ? this.decodeCursor(after, binding).sequence : 0n;
         const highWatermark = this.maxEventSequence();
-        const privacy = viewer.kind === 'human'
-            ? ''
-            : viewer.kind === 'agent'
-                ? `AND (k.visibility != 'private' OR k.recipient_agent_id = ? OR
-            (k.actor_kind = ? AND k.actor_id = ?))`
-                : `AND (k.visibility != 'private' OR (k.actor_kind = ? AND k.actor_id = ?))`;
-        const parameters = [afterSequence, highWatermark];
-        if (viewer.kind === 'agent')
-            parameters.push(viewer.id, viewer.kind, viewer.id);
-        else if (viewer.kind === 'system')
-            parameters.push(viewer.kind, viewer.id);
+        const predicate = recordVisibilityPredicate(viewer, this.authority, true, 'k.');
+        const privacy = `AND ${predicate.sql}`;
+        const parameters = [
+            afterSequence,
+            highWatermark,
+            ...predicate.values,
+        ];
         parameters.push(limit + 1);
-        const rows = this.db()
-            .prepare(`SELECT e.id AS event_id, e.sequence, e.type, e.created_at AS event_created_at, e.payload, k.*
+        const rows = this.prepare(`SELECT e.id AS event_id, e.sequence, e.type, e.created_at AS event_created_at, e.payload, k.*
          FROM events e
          JOIN kudos_current k ON k.kudos_id = CASE
            WHEN e.type = 'kudos.given' THEN e.id ELSE e.kudos_id END
          WHERE e.sequence > ? AND e.sequence <= ?
            AND e.type IN ('kudos.given', 'kudos.acknowledged', 'kudos.revoked')
            ${privacy}
-         ORDER BY e.sequence ASC LIMIT ?`)
-            .all(...parameters);
+         ORDER BY e.sequence ASC LIMIT ?`).all(...parameters);
         const items = [];
         let bytes = 2;
         let contextLimited = false;
         let consumed = 0;
         let lastConsumedSequence = afterSequence;
         for (const row of rows.slice(0, limit)) {
-            const sequence = Number(row.sequence);
+            const sequence = row.sequence;
             let actor;
             try {
                 const payload = JSON.parse(row.payload);
@@ -965,14 +1099,14 @@ export class SynomemStorage {
                 continue;
             }
             const item = {
-                cursor: encodeCursor('change', sequence),
-                sequence,
+                cursor: this.encodeCursor(binding, sequence, highWatermark),
+                sequence: exactSequence(sequence),
                 eventId: row.event_id,
                 type: row.type,
                 createdAt: row.event_created_at,
                 actor,
                 kudosId: row.kudos_id,
-                recipientAgentId: row.recipient_agent_id,
+                recipient: { kind: row.recipient_kind, id: row.recipient_id },
                 summary: summaryFromRow(row),
             };
             const itemBytes = Buffer.byteLength(JSON.stringify(item), 'utf8') + 1;
@@ -986,17 +1120,26 @@ export class SynomemStorage {
             lastConsumedSequence = sequence;
         }
         const hasMore = contextLimited || rows.length > consumed;
-        const nextCursor = encodeCursor('change', hasMore ? lastConsumedSequence : highWatermark);
+        const nextCursor = this.encodeCursor(binding, hasMore ? lastConsumedSequence : highWatermark, highWatermark);
         return {
             items,
             limit,
             nextCursor,
             hasMore,
-            watermark: encodeCursor('change', highWatermark),
+            watermark: this.encodeCursor(binding, highWatermark, highWatermark),
             contextLimited,
         };
     }
     listItemSummaries(input, viewer) {
+        const binding = this.binding('item-list', viewer, {
+            ...input,
+            cursor: undefined,
+            limit: undefined,
+            offset: undefined,
+        });
+        const changesBinding = this.binding('item-changes', viewer, { kinds: input.kinds ?? [] });
+        const position = input.cursor ? this.decodeCursor(input.cursor, binding) : undefined;
+        const high = position?.watermark ?? this.maxEventSequence();
         const where = [];
         const parameters = [];
         const add = (clause, ...values) => {
@@ -1006,8 +1149,8 @@ export class SynomemStorage {
         if (input.kinds?.length) {
             add(`kind IN (${input.kinds.map(() => '?').join(', ')})`, ...input.kinds);
         }
-        if (input.participantAgentId) {
-            add('(recipient_agent_id = ? OR owner_agent_id = ? OR assignee_agent_id = ?)', input.participantAgentId, input.participantAgentId, input.participantAgentId);
+        if (input.participant?.id) {
+            add('((recipient_kind=? AND recipient_id=?) OR (owner_kind=? AND owner_id=?) OR (assignee_kind=? AND assignee_id=?))', input.participant.kind, input.participant.id, input.participant.kind, input.participant.id, input.participant.kind, input.participant.id);
         }
         if (input.actorId)
             add('actor_id = ?', input.actorId);
@@ -1044,40 +1187,22 @@ export class SynomemStorage {
         if (input.overdueAsOf) {
             add(`(due_at IS NOT NULL AND due_at < ? AND status IN ('assigned', 'open'))`, input.overdueAsOf);
         }
-        /*
-         * A todo is hidden from other agents, never from the human operating this home: humans are
-         * exempt from every private-record rule here (they are this store's administrators), and the
-         * hosted API grants the same to workspace owners and admins. Agents and system actors see only
-         * their own todos.
-         */
-        if (viewer.kind !== 'human') {
-            add(`(kind != 'todo' OR (owner_agent_id = ? AND ? = 'agent') OR (actor_id = ? AND actor_kind = ?))`, viewer.id, viewer.kind, viewer.id, viewer.kind);
-        }
-        if (viewer.kind !== 'human') {
-            if (viewer.kind === 'agent') {
-                add(`(visibility != 'private' OR (actor_kind = ? AND actor_id = ?) OR
-          recipient_agent_id = ? OR owner_agent_id = ? OR assignee_agent_id = ?)`, viewer.kind, viewer.id, viewer.id, viewer.id, viewer.id);
-            }
-            else {
-                add(`(visibility != 'private' OR (actor_kind = ? AND actor_id = ?))`, viewer.kind, viewer.id);
-            }
-        }
+        const privacy = recordVisibilityPredicate(viewer, this.authority);
+        add(privacy.sql, ...privacy.values);
         const baseWhere = where.length ? `WHERE ${where.join(' AND ')}` : '';
-        const total = Number(this.db()
-            .prepare(`SELECT COUNT(*) AS count FROM items_current ${baseWhere}`)
-            .get(...parameters).count);
-        const cursorSequence = input.cursor ? decodeCursor(input.cursor, 'items') : undefined;
+        const total = Number(this.prepare(`SELECT COUNT(*) AS count FROM items_current ${baseWhere}`).get(...parameters).count);
+        const cursorSequence = position?.sequence;
         const pageWhere = [...where];
         const pageParameters = [...parameters];
         if (cursorSequence !== undefined) {
             pageWhere.push('created_sequence < ?');
             pageParameters.push(cursorSequence);
         }
+        pageWhere.push('created_sequence<=? AND updated_sequence<=?');
+        pageParameters.push(high, high);
         const sqlWhere = pageWhere.length ? `WHERE ${pageWhere.join(' AND ')}` : '';
         const offset = cursorSequence === undefined ? input.offset : 0;
-        const rows = this.db()
-            .prepare(`SELECT * FROM items_current ${sqlWhere} ORDER BY created_sequence DESC LIMIT ? OFFSET ?`)
-            .all(...pageParameters, input.limit + 1, offset);
+        const rows = this.prepare(`SELECT * FROM items_current ${sqlWhere} ORDER BY created_sequence DESC LIMIT ? OFFSET ?`).all(...pageParameters, input.limit + 1, offset);
         const items = [];
         let bytes = 2;
         let contextLimited = false;
@@ -1099,15 +1224,16 @@ export class SynomemStorage {
             limit: input.limit,
             offset,
             ...(hasMore && lastRow
-                ? { nextCursor: encodeCursor('items', lastRow.created_sequence) }
+                ? { nextCursor: this.encodeCursor(binding, lastRow.created_sequence, high) }
                 : {}),
             hasMore,
-            watermark: encodeCursor('change', this.maxEventSequence()),
+            watermark: this.encodeCursor(changesBinding, high, high),
             contextLimited,
         };
     }
     listItemChanges(after, limit, viewer, kinds) {
-        const afterSequence = after ? decodeCursor(after, 'change') : 0;
+        const binding = this.binding('item-changes', viewer, { kinds: kinds ?? [] });
+        const afterSequence = after ? this.decodeCursor(after, binding).sequence : 0n;
         const highWatermark = this.maxEventSequence();
         const where = ['e.sequence > ?', 'e.sequence <= ?', 'e.item_kind IS NOT NULL'];
         const parameters = [afterSequence, highWatermark];
@@ -1115,30 +1241,20 @@ export class SynomemStorage {
             where.push(`e.item_kind IN (${kinds.map(() => '?').join(', ')})`);
             parameters.push(...kinds);
         }
-        if (viewer.kind !== 'human') {
-            if (viewer.kind === 'agent') {
-                where.push(`(i.visibility != 'private' OR (i.actor_kind = ? AND i.actor_id = ?) OR
-          i.recipient_agent_id = ? OR i.owner_agent_id = ? OR i.assignee_agent_id = ?)`);
-                parameters.push(viewer.kind, viewer.id, viewer.id, viewer.id, viewer.id);
-            }
-            else {
-                where.push(`(i.visibility != 'private' OR (i.actor_kind = ? AND i.actor_id = ?))`);
-                parameters.push(viewer.kind, viewer.id);
-            }
-        }
+        const privacy = recordVisibilityPredicate(viewer, this.authority, false, 'i.');
+        where.push(privacy.sql);
+        parameters.push(...privacy.values);
         parameters.push(limit + 1);
-        const rows = this.db()
-            .prepare(`SELECT e.id AS event_id, e.sequence, e.type, e.created_at AS event_created_at,
+        const rows = this.prepare(`SELECT e.id AS event_id, e.sequence, e.type, e.created_at AS event_created_at,
        e.payload, i.* FROM events e JOIN items_current i ON i.item_id = e.aggregate_id
-       WHERE ${where.join(' AND ')} ORDER BY e.sequence ASC LIMIT ?`)
-            .all(...parameters);
+       WHERE ${where.join(' AND ')} ORDER BY e.sequence ASC LIMIT ?`).all(...parameters);
         const items = [];
         let bytes = 2;
         let contextLimited = false;
         let consumed = 0;
         let lastConsumedSequence = afterSequence;
         for (const row of rows.slice(0, limit)) {
-            const sequence = Number(row.sequence);
+            const sequence = row.sequence;
             let actor;
             try {
                 actor = actorSchema.parse(JSON.parse(row.payload).actor);
@@ -1149,8 +1265,8 @@ export class SynomemStorage {
                 continue;
             }
             const item = {
-                cursor: encodeCursor('change', sequence),
-                sequence,
+                cursor: this.encodeCursor(binding, sequence, highWatermark),
+                sequence: exactSequence(sequence),
                 eventId: row.event_id,
                 type: row.type,
                 createdAt: row.event_created_at,
@@ -1173,22 +1289,18 @@ export class SynomemStorage {
         return {
             items,
             limit,
-            nextCursor: encodeCursor('change', hasMore ? lastConsumedSequence : highWatermark),
+            nextCursor: this.encodeCursor(binding, hasMore ? lastConsumedSequence : highWatermark, highWatermark),
             hasMore,
-            watermark: encodeCursor('change', highWatermark),
+            watermark: this.encodeCursor(binding, highWatermark, highWatermark),
             contextLimited,
         };
     }
     getItemSummary(id) {
-        const row = this.db()
-            .prepare('SELECT * FROM items_current WHERE item_id = ?')
-            .get(id);
+        const row = this.prepare('SELECT * FROM items_current WHERE item_id = ?').get(id);
         return row ? itemSummaryFromRow(row) : undefined;
     }
     getReadableItemEvents(id) {
-        const rows = this.db()
-            .prepare('SELECT id, payload FROM events WHERE aggregate_id = ? ORDER BY sequence ASC')
-            .all(id);
+        const rows = this.prepare('SELECT id, payload FROM events WHERE aggregate_id = ? ORDER BY sequence ASC').all(id);
         const events = [];
         for (const row of rows) {
             try {
@@ -1201,13 +1313,9 @@ export class SynomemStorage {
         return events;
     }
     currentIndexHealth() {
-        const given = Number(this.db()
-            .prepare("SELECT COUNT(*) AS count FROM events WHERE type = 'kudos.given'")
-            .get().count);
-        const indexed = Number(this.db().prepare('SELECT COUNT(*) AS count FROM kudos_current').get()
-            .count);
-        const stateMismatches = Number(this.db()
-            .prepare(`SELECT COUNT(*) AS count
+        const given = Number(this.prepare("SELECT COUNT(*) AS count FROM events WHERE type = 'kudos.given'").get().count);
+        const indexed = Number(this.prepare('SELECT COUNT(*) AS count FROM kudos_current').get().count);
+        const stateMismatches = Number(this.prepare(`SELECT COUNT(*) AS count
              FROM kudos_current k
              WHERE k.status != CASE WHEN EXISTS (
                SELECT 1 FROM events e
@@ -1216,24 +1324,18 @@ export class SynomemStorage {
              OR k.revocation_status != CASE WHEN EXISTS (
                SELECT 1 FROM events e
                WHERE e.type = 'kudos.revoked' AND e.kudos_id = k.kudos_id
-             ) THEN 'revoked' ELSE 'active' END`)
-            .get().count);
+             ) THEN 'revoked' ELSE 'active' END`).get().count);
         return { given, indexed, stateMismatches };
     }
     itemIndexHealth() {
-        const created = Number(this.db()
-            .prepare(`SELECT COUNT(*) AS count FROM events WHERE type IN
-       ('kudos.given', 'memo.sent', 'note.created', 'post.created', 'task.created')`)
-            .get().count);
-        const indexed = Number(this.db().prepare('SELECT COUNT(*) AS count FROM items_current').get()
-            .count);
+        const created = Number(this.prepare(`SELECT COUNT(*) AS count FROM events WHERE type IN
+       ('kudos.given', 'memo.sent', 'note.created', 'post.created', 'task.created')`).get().count);
+        const indexed = Number(this.prepare('SELECT COUNT(*) AS count FROM items_current').get().count);
         return { created, indexed };
     }
     migrationState() {
-        const schemaVersion = Number(this.db().prepare('PRAGMA user_version').get().user_version);
-        const appliedVersions = this.db()
-            .prepare('SELECT version FROM schema_migrations ORDER BY version')
-            .all().map((row) => Number(row.version));
+        const schemaVersion = Number(this.prepare('PRAGMA user_version').get().user_version);
+        const appliedVersions = this.prepare('SELECT version FROM schema_migrations ORDER BY version').all().map((row) => Number(row.version));
         return { schemaVersion, appliedVersions };
     }
     /**
@@ -1245,27 +1347,23 @@ export class SynomemStorage {
      * ambiguous now.
      */
     aliasIdentityConflicts() {
-        return this.db()
-            .prepare(`SELECT x.alias, x.agent_id AS agentId
+        return this.prepare(`SELECT x.alias, x.agent_id AS agentId
          FROM aliases x
          JOIN agents a ON lower(a.id) = x.normalized_alias
                        OR lower(a.handle) = x.normalized_alias
         WHERE a.id != x.agent_id
-        ORDER BY x.alias`)
-            .all();
+        ORDER BY x.alias`).all();
     }
     maxEventSequence() {
-        return Number(this.db().prepare('SELECT COALESCE(MAX(sequence), 0) AS sequence FROM events').get().sequence);
+        return this.prepare('SELECT COALESCE(MAX(sequence),0) AS sequence FROM events').get().sequence;
     }
     getEvent(id) {
-        const row = this.db().prepare('SELECT id, payload FROM events WHERE id = ?').get(id);
+        const row = this.prepare('SELECT id, payload FROM events WHERE id = ?').get(id);
         return row ? this.parseEvent(row) : undefined;
     }
     getEventByIdempotency(actorKind, actorId, key) {
-        const row = this.db()
-            .prepare(`SELECT id, payload FROM events
-         WHERE actor_kind = ? AND actor_id = ? AND idempotency_key = ?`)
-            .get(actorKind, actorId, key);
+        const row = this.prepare(`SELECT id, payload FROM events
+         WHERE actor_kind = ? AND actor_id = ? AND idempotency_key = ?`).get(actorKind, actorId, key);
         return row ? this.parseEvent(row) : undefined;
     }
     getEvents() {
@@ -1278,11 +1376,9 @@ export class SynomemStorage {
         return this.scanEvents().events;
     }
     getReadableSynomemEvents(kudosId) {
-        const rows = this.db()
-            .prepare(`SELECT id, payload FROM events
+        const rows = this.prepare(`SELECT id, payload FROM events
          WHERE (type = 'kudos.given' AND id = ?) OR kudos_id = ?
-         ORDER BY sequence ASC`)
-            .all(kudosId, kudosId);
+         ORDER BY sequence ASC`).all(kudosId, kudosId);
         const events = [];
         for (const row of rows) {
             try {
@@ -1310,9 +1406,7 @@ export class SynomemStorage {
         return { events, invalid };
     }
     assertEventCompatibility() {
-        const rows = this.db()
-            .prepare('SELECT id, payload, sequence FROM events WHERE sequence > ? ORDER BY sequence ASC')
-            .all(this.validatedEventSequence);
+        const rows = this.prepare('SELECT id, payload, sequence FROM events WHERE sequence > ? ORDER BY sequence ASC').all(this.validatedEventSequence);
         const invalid = [];
         for (const row of rows) {
             try {
@@ -1330,16 +1424,18 @@ export class SynomemStorage {
         throw new SynomemError(first.error.code, `Cannot write while canonical event ${first.id} is unsupported or malformed; upgrade Synomem or inspect with synomem doctor and export.`, { eventIds: invalid.map((item) => item.id) });
     }
     rawEventRows() {
-        return this.db()
-            .prepare('SELECT id, payload FROM events ORDER BY sequence ASC')
-            .all();
+        return this.prepare('SELECT id, payload FROM events ORDER BY sequence ASC').all();
     }
     parseEvent(row) {
         try {
-            let value = JSON.parse(row.payload);
+            const value = JSON.parse(row.payload);
             if (typeof value === 'object' && value !== null) {
                 const candidate = value;
                 const supportedTypes = new Set([
+                    'reply.created',
+                    'reply.deleted',
+                    'reaction.added',
+                    'reaction.removed',
                     'agent.created',
                     'agent.updated',
                     'topic.created',
@@ -1365,6 +1461,7 @@ export class SynomemStorage {
                     'task.accepted',
                     'task.rejected',
                     'task.canceled',
+                    'task.decision_overridden',
                     'todo.created',
                     'todo.updated',
                     'todo.completed',
@@ -1372,36 +1469,10 @@ export class SynomemStorage {
                     'todo.canceled',
                     'todo.archived',
                 ]);
-                if ((typeof candidate.schemaVersion === 'number' && candidate.schemaVersion > 1) ||
+                if ((typeof candidate.schemaVersion === 'number' && candidate.schemaVersion > 2) ||
                     (typeof candidate.type === 'string' && !supportedTypes.has(candidate.type))) {
                     throw new SynomemError('UNSUPPORTED_EVENT', `Event ${row.id} was written by a newer or incompatible Synomem version.`);
                 }
-                const legacy = candidate;
-                if (legacy.workspaceId === undefined)
-                    legacy.workspaceId = 'legacy-local';
-                if (legacy.aggregateId === undefined) {
-                    legacy.aggregateId =
-                        legacy.kudosId ??
-                            legacy.memoId ??
-                            legacy.noteId ??
-                            legacy.taskId ??
-                            (typeof legacy.agentId === 'string' ? legacy.agentId : undefined) ??
-                            (typeof legacy.agent === 'object' && legacy.agent !== null
-                                ? legacy.agent.id
-                                : undefined) ??
-                            legacy.id;
-                }
-                if (legacy.aggregateVersion === undefined) {
-                    legacy.aggregateVersion =
-                        String(legacy.type).endsWith('.given') ||
-                            String(legacy.type).endsWith('.sent') ||
-                            String(legacy.type).endsWith('.created')
-                            ? 1
-                            : 2;
-                }
-                if (legacy.visibility === 'local')
-                    legacy.visibility = 'workspace';
-                value = legacy;
             }
             return eventSchema.parse(value);
         }
@@ -1413,21 +1484,121 @@ export class SynomemStorage {
             });
         }
     }
+    canActorReadItem(id, actor) {
+        const target = this.getActor(actor);
+        if (!target || target.status !== 'active')
+            return false;
+        const authority = this.boundActor && this.boundActor.kind === actor.kind && this.boundActor.id === actor.id
+            ? this.authority
+            : resolveAuthority();
+        const predicate = recordVisibilityPredicate(actor, authority);
+        return !!this.prepare(`SELECT 1 FROM items_current WHERE item_id=? AND (${predicate.sql})`).get(id, ...predicate.values);
+    }
+    getMutationReceipt(actorKind, actorId, keyHash) {
+        const row = this.prepare('SELECT operation,request_hash,result_json,event_id,created_at FROM mutation_receipts WHERE actor_kind=? AND actor_id=? AND key_hash=?').get(actorKind, actorId, keyHash);
+        return row
+            ? {
+                operation: row.operation,
+                requestHash: row.request_hash,
+                resultJson: row.result_json,
+                createdAt: row.created_at,
+                ...(row.event_id ? { eventId: row.event_id } : {}),
+            }
+            : undefined;
+    }
+    insertMutationReceipt(actorKind, actorId, keyHash, receipt) {
+        this.prepare('INSERT INTO mutation_receipts(actor_kind,actor_id,key_hash,operation,request_hash,result_json,event_id,created_at) VALUES(?,?,?,?,?,?,?,?)').run(actorKind, actorId, keyHash, receipt.operation, receipt.requestHash, receipt.resultJson, receipt.eventId ?? null, receipt.createdAt);
+    }
+    compactMutationReceipts(before) {
+        this.assertWritable();
+        return Number(this.prepare('UPDATE mutation_receipts SET result_json=NULL WHERE rowid IN (SELECT rowid FROM mutation_receipts WHERE created_at<? AND result_json IS NOT NULL ORDER BY created_at LIMIT 1000)').run(before).changes);
+    }
+    getActor(ref) {
+        if (ref.kind === 'agent') {
+            const profile = this.getAgent(ref.id);
+            return profile
+                ? {
+                    kind: 'agent',
+                    id: profile.id,
+                    handle: profile.handle,
+                    displayName: profile.displayName,
+                    status: profile.status === 'archived' ? 'inactive' : 'active',
+                }
+                : undefined;
+        }
+        const row = this.prepare('SELECT id,handle,display_name,status FROM human_actors WHERE id=? OR lower(handle)=lower(?)').get(ref.id, ref.id);
+        return row
+            ? {
+                kind: 'human',
+                id: row.id,
+                handle: row.handle,
+                displayName: row.display_name,
+                status: row.status,
+            }
+            : undefined;
+    }
+    actorCounts(target, viewer) {
+        const policy = recordVisibilityPredicate(viewer, this.authority, false, 'i.');
+        const kudos = this.prepare(`SELECT COUNT(*) AS count FROM kudos_current k JOIN items_current i ON i.item_id=k.kudos_id WHERE i.workspace_id=? AND k.recipient_kind=? AND k.recipient_id=? AND k.revocation_status!='revoked' AND (${policy.sql})`).get(this.config.workspaceId, target.kind, target.id, ...policy.values);
+        const useful = this.prepare(`SELECT COUNT(*) AS count FROM reactions_current c JOIN items_current i ON i.workspace_id=c.workspace_id AND i.item_id=c.root_id LEFT JOIN replies_current r ON r.workspace_id=c.workspace_id AND r.reply_id=c.target_id WHERE c.workspace_id=? AND c.code='useful' AND (${policy.sql}) AND ((c.target_id=i.item_id AND i.actor_kind=? AND i.actor_id=?) OR (r.deleted_at IS NULL AND json_extract(r.author_json,'$.kind')=? AND json_extract(r.author_json,'$.id')=?))`).get(this.config.workspaceId, ...policy.values, target.kind, target.id, target.kind, target.id);
+        return { kudosReceived: Number(kudos.count), usefulReceived: Number(useful.count) };
+    }
+    listActors(input = {}, viewer) {
+        const query = (input.query ?? '').toLowerCase();
+        const binding = actorDirectoryBinding(this.config.workspaceId, viewer, input);
+        const position = input.cursor
+            ? this.cursorCodec.decode(input.cursor, binding, '0')
+            : undefined;
+        const after = position?.id ? parseActorDirectoryKey(position.id) : undefined;
+        const source = `(
+      SELECT 'human' AS kind,id,handle,display_name,status FROM human_actors
+      UNION ALL SELECT 'agent' AS kind,id,json_extract(profile_json,'$.handle') AS handle,display_name,
+      CASE WHEN json_extract(profile_json,'$.status')='archived' THEN 'inactive' ELSE 'active' END AS status FROM agents
+    )`;
+        const filter = `status='active' AND (? IS NULL OR kind=?) AND (?='' OR instr(lower(id||' '||handle||' '||display_name),?)>0)`;
+        const values = [input.kind ?? null, input.kind ?? null, query, query];
+        const total = this.prepare(`SELECT COUNT(*) AS count FROM ${source} WHERE ${filter}`).get(...values);
+        const rows = this.prepare(`SELECT kind,id,handle,display_name,status FROM ${source} WHERE ${filter}${after ? ' AND (kind,handle,id)>(?,?,?)' : ''} ORDER BY kind,handle,id LIMIT ?`).all(...values, ...(after ?? []), (input.limit ?? 20) + 1);
+        const limit = input.limit ?? 20;
+        const hasMore = rows.length > limit;
+        const items = rows.slice(0, limit).map((row) => ({
+            kind: row.kind,
+            id: row.id,
+            handle: row.handle,
+            displayName: row.display_name,
+            status: row.status,
+        }));
+        return {
+            items,
+            total: Number(total.count),
+            limit,
+            hasMore,
+            ...(hasMore
+                ? {
+                    nextCursor: this.cursorCodec.encode(binding, {
+                        sequence: '0',
+                        watermark: '0',
+                        id: actorDirectoryKey(items.at(-1)),
+                    }),
+                }
+                : {}),
+        };
+    }
+    registerHuman(actor) {
+        this.assertWritable();
+        this.prepare('INSERT INTO human_actors(id,handle,display_name,status) VALUES(?,?,?,?) ON CONFLICT(id) DO UPDATE SET handle=excluded.handle,display_name=excluded.display_name,status=excluded.status').run(actor.id, actor.handle, actor.displayName, actor.status);
+    }
     insertAgent(profile) {
         const parsed = profileSchema.parse(profile);
-        this.db()
-            .prepare(`INSERT INTO agents(id, handle, status, display_name, profile_json, created_at, updated_at)
-         VALUES (?, ?, ?, ?, ?, ?, ?)`)
-            .run(parsed.id, parsed.handle, parsed.status, parsed.displayName, JSON.stringify(parsed), parsed.createdAt, parsed.createdAt);
+        this.prepare(`INSERT INTO agents(id, handle, status, display_name, profile_json, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?)`).run(parsed.id, parsed.handle, parsed.status, parsed.displayName, JSON.stringify(parsed), parsed.createdAt, parsed.createdAt);
         this.insertAliases(parsed.id, parsed.aliases ?? []);
     }
     updateAgent(profile, updatedAt) {
         const parsed = profileSchema.parse(profile);
-        this.db()
-            .prepare(`UPDATE agents SET handle = ?, status = ?, display_name = ?, profile_json = ?,
-           updated_at = ? WHERE id = ?`)
-            .run(parsed.handle, parsed.status, parsed.displayName, JSON.stringify(parsed), updatedAt, parsed.id);
-        this.db().prepare('DELETE FROM aliases WHERE agent_id = ?').run(parsed.id);
+        this.prepare(`UPDATE agents SET handle = ?, status = ?, display_name = ?, profile_json = ?,
+           updated_at = ? WHERE id = ?`).run(parsed.handle, parsed.status, parsed.displayName, JSON.stringify(parsed), updatedAt, parsed.id);
+        this.prepare('DELETE FROM aliases WHERE agent_id = ?').run(parsed.id);
         this.insertAliases(parsed.id, parsed.aliases ?? []);
     }
     getAgent(idOrAlias) {
@@ -1446,31 +1617,25 @@ export class SynomemStorage {
      */
     resolveAgent(query) {
         const normalized = query.trim().toLowerCase();
-        const rows = this.db()
-            .prepare(`SELECT DISTINCT a.profile_json
+        const rows = this.prepare(`SELECT DISTINCT a.profile_json
            FROM agents a
            LEFT JOIN aliases x ON x.agent_id = a.id
           WHERE lower(a.id) = ? OR lower(a.handle) = ? OR x.normalized_alias = ?
-          ORDER BY a.id ASC`)
-            .all(normalized, normalized, normalized);
+          ORDER BY a.id ASC`).all(normalized, normalized, normalized);
         const candidates = rows.map((row) => profileSchema.parse(JSON.parse(row.profile_json)));
         return candidates.length === 1 ? { match: candidates[0], candidates } : { candidates };
     }
     /* -------------------------------------------------------------------- topics */
     insertTopic(topic) {
         const parsed = topicProfileSchema.parse(topic);
-        this.db()
-            .prepare(`INSERT INTO topics(id, display_name, status, created_at, updated_at)
-         VALUES (?, ?, ?, ?, ?)`)
-            .run(parsed.id, parsed.displayName, parsed.status, parsed.createdAt, parsed.createdAt);
+        this.prepare(`INSERT INTO topics(id, display_name, status, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?)`).run(parsed.id, parsed.displayName, parsed.status, parsed.createdAt, parsed.createdAt);
         this.insertTopicAliases(parsed.id, parsed.aliases ?? []);
     }
     updateTopic(topic, updatedAt) {
         const parsed = topicProfileSchema.parse(topic);
-        this.db()
-            .prepare('UPDATE topics SET display_name = ?, status = ?, updated_at = ? WHERE id = ?')
-            .run(parsed.displayName, parsed.status, updatedAt, parsed.id);
-        this.db().prepare('DELETE FROM topic_aliases WHERE topic_id = ?').run(parsed.id);
+        this.prepare('UPDATE topics SET display_name = ?, status = ?, updated_at = ? WHERE id = ?').run(parsed.displayName, parsed.status, updatedAt, parsed.id);
+        this.prepare('DELETE FROM topic_aliases WHERE topic_id = ?').run(parsed.id);
         this.insertTopicAliases(parsed.id, parsed.aliases ?? []);
     }
     getTopic(idOrAlias) {
@@ -1478,31 +1643,23 @@ export class SynomemStorage {
     }
     listTopics(status) {
         const rows = (status
-            ? this.db()
-                .prepare('SELECT * FROM topics WHERE status = ? ORDER BY display_name ASC')
-                .all(status)
-            : this.db()
-                .prepare('SELECT * FROM topics ORDER BY display_name ASC')
-                .all());
+            ? this.prepare('SELECT * FROM topics WHERE status = ? ORDER BY display_name ASC').all(status)
+            : this.prepare('SELECT * FROM topics ORDER BY display_name ASC').all());
         return rows.map((row) => this.topicFromRow(row));
     }
     /** Resolves a name case-insensitively, reporting ambiguity instead of guessing. */
     resolveTopic(query) {
         const normalized = query.trim().toLowerCase();
-        const rows = this.db()
-            .prepare(`SELECT DISTINCT t.*
+        const rows = this.prepare(`SELECT DISTINCT t.*
            FROM topics t
            LEFT JOIN topic_aliases x ON x.topic_id = t.id
           WHERE lower(t.id) = ? OR lower(t.display_name) = ? OR x.alias = ?
-          ORDER BY t.id ASC`)
-            .all(normalized, normalized, normalized);
+          ORDER BY t.id ASC`).all(normalized, normalized, normalized);
         const candidates = rows.map((row) => this.topicFromRow(row));
         return candidates.length === 1 ? { match: candidates[0], candidates } : { candidates };
     }
     topicFromRow(row) {
-        const aliasRows = this.db()
-            .prepare('SELECT alias FROM topic_aliases WHERE topic_id = ? ORDER BY alias ASC')
-            .all(row.id);
+        const aliasRows = this.prepare('SELECT alias FROM topic_aliases WHERE topic_id = ? ORDER BY alias ASC').all(row.id);
         const aliases = aliasRows.map((aliasRow) => aliasRow.alias);
         return {
             id: row.id,
@@ -1514,17 +1671,13 @@ export class SynomemStorage {
     }
     insertTopicAliases(topicId, aliases) {
         for (const alias of aliases) {
-            this.db()
-                .prepare('INSERT INTO topic_aliases(alias, topic_id) VALUES (?, ?)')
-                .run(alias.trim().toLowerCase(), topicId);
+            this.prepare('INSERT INTO topic_aliases(alias, topic_id) VALUES (?, ?)').run(alias.trim().toLowerCase(), topicId);
         }
     }
     /* -------------------------------------------------------- post acknowledgment */
     listPostAcknowledgments(postId) {
-        const rows = this.db()
-            .prepare(`SELECT actor_kind, actor_id, actor_display_name, note, acknowledged_at
-           FROM post_acknowledgments WHERE post_id = ? ORDER BY acknowledged_at ASC`)
-            .all(postId);
+        const rows = this.prepare(`SELECT actor_kind, actor_id, actor_display_name, note, acknowledged_at
+           FROM post_acknowledgments WHERE post_id = ? ORDER BY acknowledged_at ASC`).all(postId);
         return rows.map((row) => ({
             actor: {
                 kind: row.actor_kind,
@@ -1544,16 +1697,12 @@ export class SynomemStorage {
      * newcomer of ignoring something written before it arrived.
      */
     postRoster(postId) {
-        const post = this.db()
-            .prepare("SELECT created_at FROM items_current WHERE item_id = ? AND kind = 'post'")
-            .get(postId);
+        const post = this.prepare("SELECT created_at FROM items_current WHERE item_id = ? AND kind = 'post'").get(postId);
         if (!post)
             return undefined;
         const acknowledged = this.listPostAcknowledgments(postId);
         const acknowledgedIds = new Set(acknowledged.map((entry) => entry.actor.id));
-        const eligible = this.db()
-            .prepare('SELECT id, display_name, created_at FROM agents ORDER BY id ASC')
-            .all();
+        const eligible = this.prepare('SELECT id, display_name, created_at FROM agents ORDER BY id ASC').all();
         const outstanding = eligible
             .filter((agent) => agent.created_at <= post.created_at && !acknowledgedIds.has(agent.id))
             .map((agent) => ({ id: agent.id, displayName: agent.display_name }));
@@ -1562,11 +1711,9 @@ export class SynomemStorage {
     }
     /* ------------------------------------------------------- runtime bindings */
     listRuntimeBindings(agentId) {
-        const rows = this.db()
-            .prepare(`SELECT id, agent_id, installation_id, runtime, profile, capabilities_json,
+        const rows = this.prepare(`SELECT id, agent_id, installation_id, runtime, profile, capabilities_json,
                 bound_at, last_seen_at
-           FROM agent_runtime_bindings WHERE agent_id = ? ORDER BY bound_at ASC`)
-            .all(agentId);
+           FROM agent_runtime_bindings WHERE agent_id = ? ORDER BY bound_at ASC`).all(agentId);
         return rows.map((row) => ({
             id: row.id,
             agentId: row.agent_id,
@@ -1579,18 +1726,14 @@ export class SynomemStorage {
         }));
     }
     bindRuntime(binding) {
-        this.db()
-            .prepare(`INSERT INTO agent_runtime_bindings(
+        this.prepare(`INSERT INTO agent_runtime_bindings(
            id, agent_id, installation_id, runtime, profile, capabilities_json, bound_at
          ) VALUES (?, ?, ?, ?, ?, ?, ?)
          ON CONFLICT(agent_id, runtime, COALESCE(profile, ''), COALESCE(installation_id, ''))
-         DO UPDATE SET capabilities_json = excluded.capabilities_json`)
-            .run(binding.id, binding.agentId, binding.installationId ?? null, binding.runtime, binding.profile ?? null, JSON.stringify(binding.capabilities ?? {}), binding.boundAt);
+         DO UPDATE SET capabilities_json = excluded.capabilities_json`).run(binding.id, binding.agentId, binding.installationId ?? null, binding.runtime, binding.profile ?? null, JSON.stringify(binding.capabilities ?? {}), binding.boundAt);
     }
     unbindRuntime(bindingId) {
-        const result = this.db()
-            .prepare('DELETE FROM agent_runtime_bindings WHERE id = ?')
-            .run(bindingId);
+        const result = this.prepare('DELETE FROM agent_runtime_bindings WHERE id = ?').run(bindingId);
         return Number(result.changes) > 0;
     }
     /**
@@ -1598,9 +1741,7 @@ export class SynomemStorage {
      * the runtime is reachable now, and never that a delivery succeeded.
      */
     touchRuntimeBinding(agentId, runtime, at) {
-        this.db()
-            .prepare('UPDATE agent_runtime_bindings SET last_seen_at = ? WHERE agent_id = ? AND runtime = ?')
-            .run(at, agentId, runtime);
+        this.prepare('UPDATE agent_runtime_bindings SET last_seen_at = ? WHERE agent_id = ? AND runtime = ?').run(at, agentId, runtime);
     }
     /**
      * Writes an agent's aliases, refusing any that would make a name ambiguous.
@@ -1614,33 +1755,25 @@ export class SynomemStorage {
     insertAliases(agentId, aliases) {
         for (const alias of aliases) {
             const normalized = alias.trim().toLowerCase();
-            const conflictingAgent = this.db()
-                .prepare('SELECT id FROM agents WHERE lower(id) = ? AND id != ?')
-                .get(normalized, agentId);
+            const conflictingAgent = this.prepare('SELECT id FROM agents WHERE lower(id) = ? AND id != ?').get(normalized, agentId);
             if (conflictingAgent) {
                 throw new SynomemError('ALIAS_CONFLICT', `Alias "${alias}" is already the canonical ID of agent ${conflictingAgent.id}. Aliases must resolve to exactly one agent.`);
             }
-            const conflictingAlias = this.db()
-                .prepare('SELECT agent_id FROM aliases WHERE normalized_alias = ? AND agent_id != ?')
-                .get(normalized, agentId);
+            const conflictingAlias = this.prepare('SELECT agent_id FROM aliases WHERE normalized_alias = ? AND agent_id != ?').get(normalized, agentId);
             if (conflictingAlias) {
                 throw new SynomemError('ALIAS_CONFLICT', `Alias "${alias}" already belongs to agent ${conflictingAlias.agent_id}. Aliases must resolve to exactly one agent.`);
             }
-            this.db()
-                .prepare('INSERT INTO aliases(alias, agent_id, normalized_alias) VALUES (?, ?, ?)')
-                .run(alias, agentId, normalized);
+            this.prepare('INSERT INTO aliases(alias, agent_id, normalized_alias) VALUES (?, ?, ?)').run(alias, agentId, normalized);
         }
     }
     listAgents() {
-        const rows = this.db()
-            .prepare('SELECT profile_json FROM agents ORDER BY id ASC')
-            .all();
+        const rows = this.prepare('SELECT profile_json FROM agents ORDER BY id ASC').all();
         return rows.map((row) => profileSchema.parse(JSON.parse(row.profile_json)));
     }
     replaceProjectionManifest(paths, generatedAt) {
         this.transactionSync(() => {
-            this.db().prepare('DELETE FROM projection_manifest').run();
-            const insert = this.db().prepare('INSERT INTO projection_manifest(path, generated_at) VALUES (?, ?)');
+            this.prepare('DELETE FROM projection_manifest').run();
+            const insert = this.prepare('INSERT INTO projection_manifest(path, generated_at) VALUES (?, ?)');
             for (const path of paths)
                 insert.run(path, generatedAt);
         });
@@ -1652,16 +1785,14 @@ export class SynomemStorage {
      */
     replaceAgentProjectionManifest(directory, paths, generatedAt) {
         this.transactionSync(() => {
-            this.db()
-                .prepare('DELETE FROM projection_manifest WHERE path LIKE ? OR path LIKE ?')
-                .run(`${directory}/%`, `${directory}\\%`);
-            const insert = this.db().prepare('INSERT INTO projection_manifest(path, generated_at) VALUES (?, ?)');
+            this.prepare('DELETE FROM projection_manifest WHERE path LIKE ? OR path LIKE ?').run(`${directory}/%`, `${directory}\\%`);
+            const insert = this.prepare('INSERT INTO projection_manifest(path, generated_at) VALUES (?, ?)');
             for (const path of paths)
                 insert.run(path, generatedAt);
         });
     }
     projectionManifest() {
-        return this.db().prepare('SELECT path FROM projection_manifest ORDER BY path').all().map((row) => row.path);
+        return this.prepare('SELECT path FROM projection_manifest ORDER BY path').all().map((row) => row.path);
     }
     /**
      * Re-point manifest paths from one agent directory to another.
@@ -1680,8 +1811,8 @@ export class SynomemStorage {
         const rows = this.projectionManifestEntries().filter((entry) => prefixes.some((prefix) => entry.path.startsWith(prefix)));
         if (!rows.length)
             return;
-        const remove = this.db().prepare('DELETE FROM projection_manifest WHERE path = ?');
-        const insert = this.db().prepare('INSERT OR REPLACE INTO projection_manifest(path, generated_at) VALUES (?, ?)');
+        const remove = this.prepare('DELETE FROM projection_manifest WHERE path = ?');
+        const insert = this.prepare('INSERT OR REPLACE INTO projection_manifest(path, generated_at) VALUES (?, ?)');
         for (const row of rows) {
             remove.run(row.path);
             insert.run(`${nextHandle}${row.path.slice(previousHandle.length)}`, row.generatedAt);
@@ -1689,16 +1820,14 @@ export class SynomemStorage {
     }
     /** The manifest with the time each path was written, newest first. */
     projectionManifestEntries() {
-        return this.db()
-            .prepare('SELECT path, generated_at FROM projection_manifest ORDER BY generated_at DESC')
-            .all().map((row) => ({ path: row.path, generatedAt: row.generated_at }));
+        return this.prepare('SELECT path, generated_at FROM projection_manifest ORDER BY generated_at DESC').all().map((row) => ({ path: row.path, generatedAt: row.generated_at }));
     }
     integrityCheck() {
-        const rows = this.db().prepare('PRAGMA integrity_check').all();
+        const rows = this.prepare('PRAGMA integrity_check').all();
         return rows.map((row) => Object.values(row)[0] ?? 'unknown');
     }
     journalMode() {
-        const row = this.db().prepare('PRAGMA journal_mode').get();
+        const row = this.prepare('PRAGMA journal_mode').get();
         return Object.values(row)[0] ?? 'unknown';
     }
     async backup(destination) {