things-api 0.16.0 → 0.18.0

package/dist/contracts.d.ts

@@ -14,7 +14,7 @@ export declare const API_VERSION = 1;
  * Package version, surfaced by `things --version` and the MCP serverInfo.
  * Kept in lockstep with package.json by a contract test.
  */
-export declare const PKG_VERSION = "0.16.0";
+export declare const PKG_VERSION = "0.18.0";
 /**
  * Stable exit-code contract for the `things` CLI (mirrored by MCP error
  * codes). Part of the public API surface consumed by agents and scripts —
@@ -219,7 +219,7 @@ export interface OkEnvelope<T> {
  * `blocked:drift` maps to exit code 5 (DriftBlocked); every other `blocked:*`
  * maps to exit code 4 (Blocked).
  */
-export type ErrorCode = "usage" | "not-found" | "ambiguous" | "unsupported" | "environment" | "unexpected" | "bounce-aborted" | "verify-failed" | "blocked" | `verify-failed:${string}` | `blocked:${string}`;
+export type ErrorCode = "usage" | "not-found" | "ambiguous" | "unsupported" | "environment" | "unexpected" | "bounce-aborted" | "verify-failed" | "blocked" | "interrupted" | `verify-failed:${string}` | `blocked:${string}`;
 export interface ErrorEnvelope {
     apiVersion: typeof API_VERSION;
     ok: false;
@@ -270,6 +270,13 @@ export interface ErrorEnvelope {
             cause?: unknown;
             failed?: unknown;
             completed?: unknown[];
+            signal?: string;
+            op?: string;
+            uuid?: string | null;
+            step?: string;
+            outcome?: "uncertain";
+            recheck?: string;
+            tracePath?: string;
         };
     };
     meta: EnvelopeMeta;

package/dist/contracts.js

@@ -13,7 +13,7 @@ export const API_VERSION = 1;
  * Package version, surfaced by `things --version` and the MCP serverInfo.
  * Kept in lockstep with package.json by a contract test.
  */
-export const PKG_VERSION = "0.16.0";
+export const PKG_VERSION = "0.18.0";
 /**
  * Stable exit-code contract for the `things` CLI (mirrored by MCP error
  * codes). Part of the public API surface consumed by agents and scripts —

package/dist/contracts.js.map

@@ -1 +1 @@
-{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC;AAE7B;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,QAAQ,CAAC;AAEpC;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,eAAe;IACf,EAAE,EAAE,CAAC;IACL,4DAA4D;IAC5D,UAAU,EAAE,CAAC;IACb,kEAAkE;IAClE,KAAK,EAAE,CAAC;IACR,uGAAuG;IACvG,YAAY,EAAE,CAAC;IACf,wFAAwF;IACxF,OAAO,EAAE,CAAC;IACV,gGAAgG;IAChG,YAAY,EAAE,CAAC;IACf,6DAA6D;IAC7D,WAAW,EAAE,CAAC;IACd,kFAAkF;IAClF,WAAW,EAAE,CAAC;CACN,CAAC;AA2UX,MAAM,UAAU,UAAU,CAAI,IAAY,EAAE,IAAO,EAAE,IAAkB;IACrE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAA6B,EAAE,IAAkB;IAC7E,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC5E,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAA6B,EAAK;IAChE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,CAAC;IACpC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,OAA4C;IACtE,OAAO,WAAW,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAmB,OAAsB;IACvE,OAAO,iBAAiB,OAAO,CAAC,MAAM,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAsD;IAEtD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,EAAE,CAAC;QACvE,OAAO,QAAQ,CAAC,YAAY,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC;IAClD,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC;QAAE,OAAO,QAAQ,CAAC,WAAW,CAAC;IAC1D,OAAO,QAAQ,CAAC,YAAY,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC;AAE7B;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,QAAQ,CAAC;AAEpC;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,eAAe;IACf,EAAE,EAAE,CAAC;IACL,4DAA4D;IAC5D,UAAU,EAAE,CAAC;IACb,kEAAkE;IAClE,KAAK,EAAE,CAAC;IACR,uGAAuG;IACvG,YAAY,EAAE,CAAC;IACf,wFAAwF;IACxF,OAAO,EAAE,CAAC;IACV,gGAAgG;IAChG,YAAY,EAAE,CAAC;IACf,6DAA6D;IAC7D,WAAW,EAAE,CAAC;IACd,kFAAkF;IAClF,WAAW,EAAE,CAAC;CACN,CAAC;AAyVX,MAAM,UAAU,UAAU,CAAI,IAAY,EAAE,IAAO,EAAE,IAAkB;IACrE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAA6B,EAAE,IAAkB;IAC7E,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC5E,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAA6B,EAAK;IAChE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,CAAC;IACpC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,OAA4C;IACtE,OAAO,WAAW,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAmB,OAAsB;IACvE,OAAO,iBAAiB,OAAO,CAAC,MAAM,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAsD;IAEtD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,EAAE,CAAC;QACvE,OAAO,QAAQ,CAAC,YAAY,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC;IAClD,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC;QAAE,OAAO,QAAQ,CAAC,WAAW,CAAC;IAC1D,OAAO,QAAQ,CAAC,YAAY,CAAC;AAC/B,CAAC"}

package/dist/db/baselines/db-v26.js

@@ -6,13 +6,17 @@
  */
 export const DB_V26 = {
     databaseVersion: 26,
-    // Recomputed 2026-07-10: manifest gained TMSettings.logInterval and
-    // TMSettings.manualLogDate (the log-move boundary — completion ≠ logged);
-    // verified identical from the live library (doctor) and the fixture DDL.
+    // Recomputed 2026-08-23: manifest gained TMTask.rt1_instanceCreationStartDate
+    // and TMTask.rt1_instanceCreationCount (the spawn cursor + tally the
+    // projection-day helper reads — src/db/schema.ts says why); both columns are
+    // pre-existing in v26 and v27 alike, so this is a manifest widening, not a
+    // schema change, and DB_V27 shares the constant.
+    // Prior (2026-07-10 — TMSettings.logInterval + TMSettings.manualLogDate):
+    //   sha256:784bd2f6533e6f85e053b0ec68958083d4ebca11c152ad1d2935178240d4c52b
     // Prior (2026-07-04, Phase 10b/10c — rt1_instanceCreationPaused +
     // deadlineSuppressionDate):
     //   sha256:5526059b10ffffe1b67f796d031857d030403bd5b747374646a2803a55c0e5c3
-    fingerprint: "sha256:784bd2f6533e6f85e053b0ec68958083d4ebca11c152ad1d2935178240d4c52b",
+    fingerprint: "sha256:d2b7e98c6d384ef1ecd256b1410a11652e80c5860cc48370ec9b4d6956c7d4df",
     // Things 3.22.12 (build 32212016) ships the IDENTICAL DB v26 schema (fingerprint
     // byte-identical) and an identical Things.sdef — a behavioral-only update, re-certified
     // 2026-08-03 against golden-v2 (drift-runbook step 3; assumption-register *Confirmed under*).

package/dist/db/baselines/db-v26.js.map

@@ -1 +1 @@
-{"version":3,"file":"db-v26.js","sourceRoot":"","sources":["../../../src/db/baselines/db-v26.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,MAAM,GAAa;IAC9B,eAAe,EAAE,EAAE;IACnB,oEAAoE;IACpE,0EAA0E;IAC1E,yEAAyE;IACzE,kEAAkE;IAClE,4BAA4B;IAC5B,4EAA4E;IAC5E,WAAW,EAAE,yEAAyE;IACtF,iFAAiF;IACjF,wFAAwF;IACxF,8FAA8F;IAC9F,sBAAsB,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;CAC/C,CAAC"}
+{"version":3,"file":"db-v26.js","sourceRoot":"","sources":["../../../src/db/baselines/db-v26.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,MAAM,GAAa;IAC9B,eAAe,EAAE,EAAE;IACnB,8EAA8E;IAC9E,qEAAqE;IACrE,6EAA6E;IAC7E,2EAA2E;IAC3E,iDAAiD;IACjD,0EAA0E;IAC1E,4EAA4E;IAC5E,kEAAkE;IAClE,4BAA4B;IAC5B,4EAA4E;IAC5E,WAAW,EAAE,yEAAyE;IACtF,iFAAiF;IACjF,wFAAwF;IACxF,8FAA8F;IAC9F,sBAAsB,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;CAC/C,CAAC"}

package/dist/db/baselines/db-v27.d.ts

@@ -0,0 +1,42 @@
+import type { Baseline } from "../fingerprint.ts";
+/**
+ * Schema baseline for Meta.databaseVersion = 27 (Things 3.23).
+ *
+ * Captured 2026-08-22 from a live Things 3.23 library: tables, columns, and
+ * triggers are byte-identical to v26 (fingerprint equal; every extra column
+ * pre-existing), and the migration's DDL delta is INDEX-ONLY — invisible to
+ * the fingerprint by design (indexes steer the query planner, not data
+ * semantics). The migration DID move data, re-measured in a clock-pinned lab
+ * clone and confirmed against a live 3.23 library — docs/lab/gv4-323-campaign.md
+ * §2.1–§2.3, which CORRECTS the first host-side reading in
+ * docs/lab/dbv27-migration-diff.md:
+ *   - `rt1_nextInstanceStartDate` is SCOPED TO TEMPLATES, not retired: nulled on
+ *     every non-template row, retained byte-identical on every repeating template
+ *     that carried one (live host: 0 of 21,962 non-templates, 73 of 114 templates)
+ *     — which is exactly what the new partial index is for. The 3.23 app still
+ *     maintains the cache, so `src/model/template-projection.ts` is right to
+ *     prefer it and derive only when it is absent.
+ *   - the counter move is a `-1` sentinel → computed `0` back-fill on the row
+ *     classes that never held a real count (leaf counts on `type=0`, checklist
+ *     counts on `type=1`/`type=2`); rows carrying real counts were untouched. It
+ *     is NOT a leaf self-count. Consumers that read `-1` as "unknown" now see a
+ *     genuine 0.
+ *   - the strictly-forward spawn-cursor rewrite did NOT reproduce in the lab
+ *     (`rt1_instanceCreationStartDate` byte-unchanged); the host's move is best
+ *     explained as cursor catch-up to "now" on first launch, not a schema rewrite.
+ * So writes re-enable on this baseline while doctor's passive behavioral notice
+ * keeps pointing at the re-certification (drift-runbook steps 2–3: new golden +
+ * lab:regress + assumption-register walk) until `certified-app-version` moves
+ * to 3.23.
+ *
+ * The shared fixture DDL (test/fixtures/schema-v26.sql — one file for both
+ * generations, the tables being identical) reproduces this fingerprint exactly
+ * (asserted by test/unit/fingerprint.test.ts). That fixture stamps
+ * `Meta.databaseVersion = 27` and carries the v27 index set; the simulator's
+ * `SIMULATED_DATABASE_VERSION` fence is pinned to 27 in lockstep.
+ *
+ * The hash is DB_V26's by construction — the two versions' depended shape is
+ * identical — so a manifest widening (2026-08-23: the template spawn cursor +
+ * tally) moves both baselines through the one constant.
+ */
+export declare const DB_V27: Baseline;

package/dist/db/baselines/db-v27.js

@@ -0,0 +1,47 @@
+import { DB_V26 } from "./db-v26.js";
+/**
+ * Schema baseline for Meta.databaseVersion = 27 (Things 3.23).
+ *
+ * Captured 2026-08-22 from a live Things 3.23 library: tables, columns, and
+ * triggers are byte-identical to v26 (fingerprint equal; every extra column
+ * pre-existing), and the migration's DDL delta is INDEX-ONLY — invisible to
+ * the fingerprint by design (indexes steer the query planner, not data
+ * semantics). The migration DID move data, re-measured in a clock-pinned lab
+ * clone and confirmed against a live 3.23 library — docs/lab/gv4-323-campaign.md
+ * §2.1–§2.3, which CORRECTS the first host-side reading in
+ * docs/lab/dbv27-migration-diff.md:
+ *   - `rt1_nextInstanceStartDate` is SCOPED TO TEMPLATES, not retired: nulled on
+ *     every non-template row, retained byte-identical on every repeating template
+ *     that carried one (live host: 0 of 21,962 non-templates, 73 of 114 templates)
+ *     — which is exactly what the new partial index is for. The 3.23 app still
+ *     maintains the cache, so `src/model/template-projection.ts` is right to
+ *     prefer it and derive only when it is absent.
+ *   - the counter move is a `-1` sentinel → computed `0` back-fill on the row
+ *     classes that never held a real count (leaf counts on `type=0`, checklist
+ *     counts on `type=1`/`type=2`); rows carrying real counts were untouched. It
+ *     is NOT a leaf self-count. Consumers that read `-1` as "unknown" now see a
+ *     genuine 0.
+ *   - the strictly-forward spawn-cursor rewrite did NOT reproduce in the lab
+ *     (`rt1_instanceCreationStartDate` byte-unchanged); the host's move is best
+ *     explained as cursor catch-up to "now" on first launch, not a schema rewrite.
+ * So writes re-enable on this baseline while doctor's passive behavioral notice
+ * keeps pointing at the re-certification (drift-runbook steps 2–3: new golden +
+ * lab:regress + assumption-register walk) until `certified-app-version` moves
+ * to 3.23.
+ *
+ * The shared fixture DDL (test/fixtures/schema-v26.sql — one file for both
+ * generations, the tables being identical) reproduces this fingerprint exactly
+ * (asserted by test/unit/fingerprint.test.ts). That fixture stamps
+ * `Meta.databaseVersion = 27` and carries the v27 index set; the simulator's
+ * `SIMULATED_DATABASE_VERSION` fence is pinned to 27 in lockstep.
+ *
+ * The hash is DB_V26's by construction — the two versions' depended shape is
+ * identical — so a manifest widening (2026-08-23: the template spawn cursor +
+ * tally) moves both baselines through the one constant.
+ */
+export const DB_V27 = {
+    databaseVersion: 27,
+    fingerprint: DB_V26.fingerprint,
+    knownThingsAppVersions: ["3.23"],
+};
+//# sourceMappingURL=db-v27.js.map

package/dist/db/baselines/db-v27.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-v27.js","sourceRoot":"","sources":["../../../src/db/baselines/db-v27.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAM,CAAC,MAAM,MAAM,GAAa;IAC9B,eAAe,EAAE,EAAE;IACnB,WAAW,EAAE,MAAM,CAAC,WAAW;IAC/B,sBAAsB,EAAE,CAAC,MAAM,CAAC;CACjC,CAAC"}

package/dist/db/baselines/index.js

@@ -1,4 +1,5 @@
 import { DB_V26 } from "./db-v26.js";
+import { DB_V27 } from "./db-v27.js";
 /** All known-good schema baselines, keyed by Meta.databaseVersion. */
-export const BASELINES = [DB_V26];
+export const BASELINES = [DB_V26, DB_V27];
 //# sourceMappingURL=index.js.map

package/dist/db/baselines/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/db/baselines/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,sEAAsE;AACtE,MAAM,CAAC,MAAM,SAAS,GAAwB,CAAC,MAAM,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/db/baselines/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,sEAAsE;AACtE,MAAM,CAAC,MAAM,SAAS,GAAwB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC"}

package/dist/db/locate.d.ts

@@ -1,6 +1,9 @@
+/** The Things group container, relative to $HOME (also the grant-ceremony target). */
+export declare const THINGS_GROUP_CONTAINER = "Library/Group Containers/JLMPQHK86H.com.culturedcode.ThingsMac";
 export interface LocateResult {
     path: string;
-    source: "option" | "env" | "container";
+    /** "deputy" = resolved by the things-deputy broker (its handshake names the container db). */
+    source: "option" | "env" | "container" | "deputy";
     /** Additional candidate paths that also matched (warn when >1). */
     otherCandidates: string[];
 }

package/dist/db/locate.js

@@ -7,7 +7,9 @@
 import { globSync, statSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
-const CONTAINER_GLOB = join("Library/Group Containers/JLMPQHK86H.com.culturedcode.ThingsMac", "ThingsData-*/Things Database.thingsdatabase/main.sqlite");
+/** The Things group container, relative to $HOME (also the grant-ceremony target). */
+export const THINGS_GROUP_CONTAINER = "Library/Group Containers/JLMPQHK86H.com.culturedcode.ThingsMac";
+const CONTAINER_GLOB = join(THINGS_GROUP_CONTAINER, "ThingsData-*/Things Database.thingsdatabase/main.sqlite");
 export class ThingsDbNotFoundError extends Error {
     constructor(searched) {
         super(`Things database not found (searched ${searched}). ` +

package/dist/db/locate.js.map

@@ -1 +1 @@
-{"version":3,"file":"locate.js","sourceRoot":"","sources":["../../src/db/locate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,cAAc,GAAG,IAAI,CACzB,gEAAgE,EAChE,yDAAyD,CAC1D,CAAC;AASF,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,QAAgB;QAC1B,KAAK,CACH,uCAAuC,QAAQ,KAAK;YAClD,8DAA8D;YAC9D,oDAAoD,CACvD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,UAAU,cAAc,CAAC,OAA4C;IACzE,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;IACzE,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;IAC/D,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,IAAI,OAAO,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACtF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,OAAO,GAAG,OAAO;SACpB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;SACxD,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;IACxE,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,WAAW;QACnB,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;KAC7D,CAAC;AACJ,CAAC"}
+{"version":3,"file":"locate.js","sourceRoot":"","sources":["../../src/db/locate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,sFAAsF;AACtF,MAAM,CAAC,MAAM,sBAAsB,GACjC,gEAAgE,CAAC;AAEnE,MAAM,cAAc,GAAG,IAAI,CACzB,sBAAsB,EACtB,yDAAyD,CAC1D,CAAC;AAUF,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,QAAgB;QAC1B,KAAK,CACH,uCAAuC,QAAQ,KAAK;YAClD,8DAA8D;YAC9D,oDAAoD,CACvD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,UAAU,cAAc,CAAC,OAA4C;IACzE,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;IACzE,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;IAC/D,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,IAAI,OAAO,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACtF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,OAAO,GAAG,OAAO;SACpB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;SACxD,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;IACxE,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,WAAW;QACnB,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;KAC7D,CAAC;AACJ,CAAC"}

package/dist/db/schema.d.ts

@@ -8,7 +8,7 @@
  * - docs/atlas/schema-v26.md documents the semantics of every entry.
  */
 export declare const DEPENDED_TABLES: {
-    readonly TMTask: readonly ["uuid", "type", "status", "stopDate", "trashed", "title", "notes", "creationDate", "userModificationDate", "start", "startDate", "startBucket", "reminderTime", "deadline", "deadlineSuppressionDate", "index", "todayIndex", "todayIndexReferenceDate", "area", "project", "heading", "untrashedLeafActionsCount", "openUntrashedLeafActionsCount", "checklistItemsCount", "openChecklistItemsCount", "rt1_repeatingTemplate", "rt1_recurrenceRule", "rt1_nextInstanceStartDate", "rt1_instanceCreationPaused", "repeater"];
+    readonly TMTask: readonly ["uuid", "type", "status", "stopDate", "trashed", "title", "notes", "creationDate", "userModificationDate", "start", "startDate", "startBucket", "reminderTime", "deadline", "deadlineSuppressionDate", "index", "todayIndex", "todayIndexReferenceDate", "area", "project", "heading", "untrashedLeafActionsCount", "openUntrashedLeafActionsCount", "checklistItemsCount", "openChecklistItemsCount", "rt1_repeatingTemplate", "rt1_recurrenceRule", "rt1_nextInstanceStartDate", "rt1_instanceCreationPaused", "rt1_instanceCreationStartDate", "rt1_instanceCreationCount", "repeater"];
     readonly TMArea: readonly ["uuid", "title", "visible", "index"];
     readonly TMTag: readonly ["uuid", "title", "shortcut", "usedDate", "parent", "index"];
     readonly TMTaskTag: readonly ["tasks", "tags"];

package/dist/db/schema.js

@@ -38,6 +38,15 @@ export const DEPENDED_TABLES = {
         "rt1_recurrenceRule",
         "rt1_nextInstanceStartDate",
         "rt1_instanceCreationPaused",
+        // The spawn cursor and the spawn tally became load-bearing reads when the
+        // projection-day helper (src/model/template-projection.ts, #520/#522)
+        // started DERIVING a template's next occurrence from the decoded rule when
+        // the cached `rt1_nextInstanceStartDate` is absent: the cursor is where the
+        // derivation starts, the count is what an ends-AFTER rule is measured
+        // against. In the manifest, their loss in a future migration is a drift
+        // block with remediation instead of a raw SQLite error mid-read.
+        "rt1_instanceCreationStartDate",
+        "rt1_instanceCreationCount",
         "repeater",
     ],
     TMArea: ["uuid", "title", "visible", "index"],

package/dist/db/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/db/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,MAAM,EAAE;QACN,MAAM;QACN,MAAM;QACN,QAAQ;QACR,UAAU;QACV,SAAS;QACT,OAAO;QACP,OAAO;QACP,cAAc;QACd,sBAAsB;QACtB,OAAO;QACP,WAAW;QACX,aAAa;QACb,cAAc;QACd,UAAU;QACV,yBAAyB;QACzB,OAAO;QACP,YAAY;QACZ,yBAAyB;QACzB,MAAM;QACN,SAAS;QACT,SAAS;QACT,2BAA2B;QAC3B,+BAA+B;QAC/B,qBAAqB;QACrB,yBAAyB;QACzB,uBAAuB;QACvB,oBAAoB;QACpB,2BAA2B;QAC3B,4BAA4B;QAC5B,UAAU;KACX;IACD,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC;IAC7C,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC;IACnE,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE;QACf,MAAM;QACN,OAAO;QACP,QAAQ;QACR,UAAU;QACV,OAAO;QACP,MAAM;QACN,cAAc;QACd,sBAAsB;KACvB;IACD,UAAU,EAAE;QACV,MAAM;QACN,8BAA8B;QAC9B,oBAAoB;QACpB,aAAa;QACb,eAAe;KAChB;IACD,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC;CACd,CAAC;AAIX,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAoB,CAAC;AAE3E;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,4BAA4B;IACtD,eAAe,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,8BAA8B;IAC1D,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,2BAA2B;IACtD,oBAAoB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,kBAAkB;IAChD,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACxB,wBAAwB,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;CAC3B,CAAC;AAEX,iFAAiF;AACjF,MAAM,UAAU,CAAC,CAAC,UAAkB;IAClC,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;AACjD,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,UAAU,CAAC,KAAoB;IAC7C,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClD,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/db/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,MAAM,EAAE;QACN,MAAM;QACN,MAAM;QACN,QAAQ;QACR,UAAU;QACV,SAAS;QACT,OAAO;QACP,OAAO;QACP,cAAc;QACd,sBAAsB;QACtB,OAAO;QACP,WAAW;QACX,aAAa;QACb,cAAc;QACd,UAAU;QACV,yBAAyB;QACzB,OAAO;QACP,YAAY;QACZ,yBAAyB;QACzB,MAAM;QACN,SAAS;QACT,SAAS;QACT,2BAA2B;QAC3B,+BAA+B;QAC/B,qBAAqB;QACrB,yBAAyB;QACzB,uBAAuB;QACvB,oBAAoB;QACpB,2BAA2B;QAC3B,4BAA4B;QAC5B,0EAA0E;QAC1E,sEAAsE;QACtE,2EAA2E;QAC3E,4EAA4E;QAC5E,sEAAsE;QACtE,wEAAwE;QACxE,iEAAiE;QACjE,+BAA+B;QAC/B,2BAA2B;QAC3B,UAAU;KACX;IACD,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC;IAC7C,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC;IACnE,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE;QACf,MAAM;QACN,OAAO;QACP,QAAQ;QACR,UAAU;QACV,OAAO;QACP,MAAM;QACN,cAAc;QACd,sBAAsB;KACvB;IACD,UAAU,EAAE;QACV,MAAM;QACN,8BAA8B;QAC9B,oBAAoB;QACpB,aAAa;QACb,eAAe;KAChB;IACD,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC;CACd,CAAC;AAIX,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAoB,CAAC;AAE3E;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,4BAA4B;IACtD,eAAe,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,8BAA8B;IAC1D,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,2BAA2B;IACtD,oBAAoB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,kBAAkB;IAChD,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACxB,wBAAwB,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;CAC3B,CAAC;AAEX,iFAAiF;AACjF,MAAM,UAAU,CAAC,CAAC,UAAkB;IAClC,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;AACjD,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,UAAU,CAAC,KAAoB;IAC7C,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClD,CAAC"}

package/dist/deputy/bridge-worker.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/deputy/bridge-worker.js

@@ -0,0 +1,79 @@
+/**
+ * Worker half of the synchronous deputy bridge (see bridge.ts). Owns the
+ * long-lived socket to the deputy and services one request at a time: the main
+ * thread posts a request on the message port and blocks in Atomics.wait; this
+ * worker performs the socket round-trip, posts the response back, and bumps the
+ * shared counter to wake the main thread.
+ */
+import { connect } from "node:net";
+import { workerData } from "node:worker_threads";
+const { socketPath, sab, port } = workerData;
+const flag = new Int32Array(sab);
+let socket = null;
+let buffer = "";
+let pendingLine = null;
+let pendingError = null;
+function resetSocket(err) {
+    socket = null;
+    buffer = "";
+    const reject = pendingError;
+    pendingLine = null;
+    pendingError = null;
+    reject?.(err);
+}
+function ensureSocket() {
+    if (socket !== null)
+        return Promise.resolve(socket);
+    return new Promise((resolve, reject) => {
+        const sock = connect(socketPath);
+        sock.setEncoding("utf8");
+        sock.once("connect", () => {
+            socket = sock;
+            resolve(sock);
+        });
+        sock.on("data", (chunk) => {
+            buffer += chunk;
+            const nl = buffer.indexOf("\n");
+            if (nl < 0)
+                return;
+            const line = buffer.slice(0, nl);
+            buffer = buffer.slice(nl + 1);
+            const deliver = pendingLine;
+            pendingLine = null;
+            pendingError = null;
+            deliver?.(line);
+        });
+        sock.on("error", (err) => {
+            if (socket === null)
+                reject(err);
+            resetSocket(err);
+        });
+        sock.on("close", () => {
+            resetSocket(new Error("deputy closed the connection"));
+        });
+    });
+}
+async function roundTrip(request) {
+    const sock = await ensureSocket();
+    const line = await new Promise((resolve, reject) => {
+        pendingLine = resolve;
+        pendingError = reject;
+        sock.write(`${JSON.stringify(request)}\n`);
+    });
+    return JSON.parse(line);
+}
+port.on("message", ({ bridgeId, request }) => {
+    void roundTrip(request)
+        .then((response) => ({ bridgeId, response: response }))
+        .catch((err) => ({
+        bridgeId,
+        error: err instanceof Error ? err.message : String(err),
+    }))
+        .then((envelope) => {
+        port.postMessage(envelope);
+        Atomics.add(flag, 0, 1);
+        Atomics.notify(flag, 0);
+    });
+});
+port.start();
+//# sourceMappingURL=bridge-worker.js.map

package/dist/deputy/bridge-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge-worker.js","sourceRoot":"","sources":["../../src/deputy/bridge-worker.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,OAAO,EAAe,MAAM,UAAU,CAAC;AAChD,OAAO,EAAoB,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAQnE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,UAAwB,CAAC;AAC3D,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;AAEjC,IAAI,MAAM,GAAkB,IAAI,CAAC;AACjC,IAAI,MAAM,GAAG,EAAE,CAAC;AAChB,IAAI,WAAW,GAAoC,IAAI,CAAC;AACxD,IAAI,YAAY,GAAkC,IAAI,CAAC;AAEvD,SAAS,WAAW,CAAC,GAAU;IAC7B,MAAM,GAAG,IAAI,CAAC;IACd,MAAM,GAAG,EAAE,CAAC;IACZ,MAAM,MAAM,GAAG,YAAY,CAAC;IAC5B,WAAW,GAAG,IAAI,CAAC;IACnB,YAAY,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,YAAY;IACnB,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QACjC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YACxB,MAAM,GAAG,IAAI,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAChC,MAAM,IAAI,KAAK,CAAC;YAChB,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,EAAE,GAAG,CAAC;gBAAE,OAAO;YACnB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC9B,MAAM,OAAO,GAAG,WAAW,CAAC;YAC5B,WAAW,GAAG,IAAI,CAAC;YACnB,YAAY,GAAG,IAAI,CAAC;YACpB,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAC9B,IAAI,MAAM,KAAK,IAAI;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YACjC,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACpB,WAAW,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAAgC;IACvD,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACzD,WAAW,GAAG,OAAO,CAAC;QACtB,YAAY,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;AACrC,CAAC;AAOD,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAkB,EAAE,EAAE;IAC3D,KAAK,SAAS,CAAC,OAAO,CAAC;SACpB,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAmC,EAAE,CAAC,CAAC;SACjF,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,CAAC;QACxB,QAAQ;QACR,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;KACxD,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;QACjB,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACxB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AACH,IAAI,CAAC,KAAK,EAAE,CAAC"}

package/dist/deputy/bridge.d.ts

@@ -0,0 +1,14 @@
+export declare class DeputySyncBridge {
+    private readonly worker;
+    private readonly flag;
+    private readonly port;
+    private seq;
+    constructor(socketPath: string);
+    /**
+     * Send one request and block until its response (or the deadline). Late
+     * responses from a previously timed-out request are drained and discarded by
+     * the id match, so one timeout never poisons the next call.
+     */
+    request(payload: Record<string, unknown>, timeoutMs: number): Record<string, unknown>;
+    close(): void;
+}

package/dist/deputy/bridge.js

@@ -0,0 +1,70 @@
+/**
+ * Synchronous bridge to the deputy for callers that cannot await — the
+ * DatabaseSync-shaped read facade and the sync consent probes. A dedicated
+ * worker thread owns the socket; the main thread posts a request, blocks in
+ * Atomics.wait on a shared counter, then drains the port with
+ * receiveMessageOnPort. One request is in flight at a time by construction
+ * (the main thread is blocked while it waits).
+ *
+ * The bridge must NOT be used for long-running osascript drives — blocking the
+ * event loop would suspend the drive watchdog and signal handlers. Async
+ * dispatch rides client.ts instead.
+ */
+import { MessageChannel, receiveMessageOnPort, Worker, } from "node:worker_threads";
+import { DeputyRequestError } from "./protocol.js";
+export class DeputySyncBridge {
+    worker;
+    flag;
+    port;
+    seq = 0;
+    constructor(socketPath) {
+        const sab = new SharedArrayBuffer(4);
+        this.flag = new Int32Array(sab);
+        const channel = new MessageChannel();
+        this.port = channel.port1;
+        // Live TS source runs the .ts twin; the published build runs the emitted
+        // .js next to this module (same trick as src/cli/version.ts).
+        const ext = import.meta.url.endsWith(".ts") ? "ts" : "js";
+        this.worker = new Worker(new URL(`./bridge-worker.${ext}`, import.meta.url), {
+            workerData: { socketPath, sab, port: channel.port2 },
+            transferList: [channel.port2],
+        });
+        // The bridge must never keep the CLI process alive on its own.
+        this.worker.unref();
+    }
+    /**
+     * Send one request and block until its response (or the deadline). Late
+     * responses from a previously timed-out request are drained and discarded by
+     * the id match, so one timeout never poisons the next call.
+     */
+    request(payload, timeoutMs) {
+        const id = `s${++this.seq}`;
+        let seen = Atomics.load(this.flag, 0);
+        // oxlint-disable-next-line require-post-message-target-origin -- worker_threads port, no targetOrigin
+        this.port.postMessage({ bridgeId: id, request: payload });
+        const deadline = Date.now() + timeoutMs;
+        for (;;) {
+            let received = receiveMessageOnPort(this.port);
+            while (received !== undefined) {
+                const message = received.message;
+                if (message.bridgeId === id) {
+                    if (message.error !== undefined) {
+                        throw new DeputyRequestError("bridge-io", message.error);
+                    }
+                    return message.response ?? {};
+                }
+                received = receiveMessageOnPort(this.port);
+            }
+            const remaining = deadline - Date.now();
+            if (remaining <= 0) {
+                throw new DeputyRequestError("bridge-timeout", `the deputy did not answer within ${timeoutMs}ms`);
+            }
+            Atomics.wait(this.flag, 0, seen, remaining);
+            seen = Atomics.load(this.flag, 0);
+        }
+    }
+    close() {
+        void this.worker.terminate();
+    }
+}
+//# sourceMappingURL=bridge.js.map

package/dist/deputy/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../src/deputy/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EACL,cAAc,EAEd,oBAAoB,EACpB,MAAM,GACP,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,OAAO,gBAAgB;IACV,MAAM,CAAS;IACf,IAAI,CAAa;IACjB,IAAI,CAAc;IAC3B,GAAG,GAAG,CAAC,CAAC;IAEhB,YAAY,UAAkB;QAC5B,MAAM,GAAG,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,cAAc,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC;QAC1B,yEAAyE;QACzE,8DAA8D;QAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,mBAAmB,GAAG,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YAC3E,UAAU,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE;YACpD,YAAY,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;SAC9B,CAAC,CAAC;QACH,+DAA+D;QAC/D,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED;;;;OAIG;IACH,OAAO,CAAC,OAAgC,EAAE,SAAiB;QACzD,MAAM,EAAE,GAAG,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACtC,sGAAsG;QACtG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,SAAS,CAAC;YACR,IAAI,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,OAAO,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,OAAO,GAAG,QAAQ,CAAC,OAIxB,CAAC;gBACF,IAAI,OAAO,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;oBAC5B,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;wBAChC,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;oBAC3D,CAAC;oBACD,OAAO,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;gBAChC,CAAC;gBACD,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACxC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBACnB,MAAM,IAAI,kBAAkB,CAC1B,gBAAgB,EAChB,oCAAoC,SAAS,IAAI,CAClD,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;YAC5C,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,KAAK;QACH,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;IAC/B,CAAC;CACF"}

package/dist/deputy/client.d.ts

@@ -0,0 +1,19 @@
+export declare class DeputyAsyncClient {
+    private socket;
+    private buffer;
+    private seq;
+    private readonly pending;
+    private readonly socketPath;
+    constructor(socketPath: string);
+    private ensureSocket;
+    private onData;
+    private failAll;
+    /**
+     * Send one request; resolves with the raw response object (protocol errors
+     * included — the caller inspects `ok`). Rejects only on transport failure or
+     * client-side deadline (`timeoutMs` should exceed any deputy-side timeout so
+     * the deputy's own honest answer wins).
+     */
+    request(payload: Record<string, unknown>, timeoutMs: number): Promise<Record<string, unknown>>;
+    close(): void;
+}

package/dist/deputy/client.js

@@ -0,0 +1,104 @@
+/**
+ * Async deputy client for event-loop-friendly callers: the applescript vector
+ * and the ui vector's step runner. Long osascript drives ride this client so
+ * timers (drive watchdog) and signal handlers keep running; synchronous
+ * callers ride bridge.ts instead. One shared socket, requests matched by id.
+ */
+import { connect } from "node:net";
+import { DeputyRequestError } from "./protocol.js";
+export class DeputyAsyncClient {
+    socket = null;
+    buffer = "";
+    seq = 0;
+    pending = new Map();
+    socketPath;
+    constructor(socketPath) {
+        this.socketPath = socketPath;
+    }
+    ensureSocket() {
+        if (this.socket !== null)
+            return Promise.resolve(this.socket);
+        return new Promise((resolve, reject) => {
+            const sock = connect(this.socketPath);
+            sock.setEncoding("utf8");
+            sock.once("connect", () => {
+                this.socket = sock;
+                // An idle deputy connection must never keep the CLI process alive.
+                sock.unref();
+                resolve(sock);
+            });
+            sock.on("data", (chunk) => this.onData(chunk));
+            sock.on("error", (err) => {
+                if (this.socket === null)
+                    reject(err);
+                this.failAll(err);
+            });
+            sock.on("close", () => this.failAll(new Error("deputy closed the connection")));
+        });
+    }
+    onData(chunk) {
+        this.buffer += chunk;
+        for (;;) {
+            const nl = this.buffer.indexOf("\n");
+            if (nl < 0)
+                return;
+            const line = this.buffer.slice(0, nl);
+            this.buffer = this.buffer.slice(nl + 1);
+            let parsed;
+            try {
+                parsed = JSON.parse(line);
+            }
+            catch {
+                continue;
+            }
+            const id = typeof parsed["id"] === "string" ? parsed["id"] : null;
+            const entry = id !== null ? this.pending.get(id) : undefined;
+            if (id === null || entry === undefined)
+                continue;
+            this.pending.delete(id);
+            clearTimeout(entry.timer);
+            entry.resolve(parsed);
+        }
+    }
+    failAll(err) {
+        this.socket = null;
+        this.buffer = "";
+        const waiting = [...this.pending.values()];
+        this.pending.clear();
+        for (const entry of waiting) {
+            clearTimeout(entry.timer);
+            entry.reject(err);
+        }
+    }
+    /**
+     * Send one request; resolves with the raw response object (protocol errors
+     * included — the caller inspects `ok`). Rejects only on transport failure or
+     * client-side deadline (`timeoutMs` should exceed any deputy-side timeout so
+     * the deputy's own honest answer wins).
+     */
+    async request(payload, timeoutMs) {
+        const sock = await this.ensureSocket();
+        const id = `a${++this.seq}`;
+        // Wake the socket handle while a request is in flight (see unref above).
+        sock.ref();
+        try {
+            return await new Promise((resolve, reject) => {
+                const timer = setTimeout(() => {
+                    this.pending.delete(id);
+                    reject(new DeputyRequestError("client-timeout", `the deputy did not answer within ${timeoutMs}ms`));
+                }, timeoutMs);
+                this.pending.set(id, { resolve, reject, timer });
+                sock.write(`${JSON.stringify({ ...payload, id })}\n`);
+            });
+        }
+        finally {
+            if (this.pending.size === 0)
+                sock.unref();
+        }
+    }
+    close() {
+        this.socket?.destroy();
+        this.socket = null;
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/deputy/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/deputy/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,OAAO,EAAe,MAAM,UAAU,CAAC;AAEhD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAQnD,MAAM,OAAO,iBAAiB;IACpB,MAAM,GAAkB,IAAI,CAAC;IAC7B,MAAM,GAAG,EAAE,CAAC;IACZ,GAAG,GAAG,CAAC,CAAC;IACC,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IACrC,UAAU,CAAS;IAEpC,YAAY,UAAkB;QAC5B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAEO,YAAY;QAClB,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;gBACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,mEAAmE;gBACnE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACvD,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;gBAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;gBACtC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,KAAa;QAC1B,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;QACrB,SAAS,CAAC;YACR,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,EAAE,GAAG,CAAC;gBAAE,OAAO;YACnB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACxC,IAAI,MAA+B,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,MAAM,EAAE,GAAG,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAClE,MAAM,KAAK,GAAG,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7D,IAAI,EAAE,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YACjD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACxB,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,GAAU;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CACX,OAAgC,EAChC,SAAiB;QAEjB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACvC,MAAM,EAAE,GAAG,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,yEAAyE;QACzE,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,OAAO,CAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACpE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACxB,MAAM,CACJ,IAAI,kBAAkB,CACpB,gBAAgB,EAChB,oCAAoC,SAAS,IAAI,CAClD,CACF,CAAC;gBACJ,CAAC,EAAE,SAAS,CAAC,CAAC;gBACd,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;gBACjD,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YACxD,CAAC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;gBAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;CACF"}

package/dist/deputy/db-facade.d.ts

@@ -0,0 +1,18 @@
+/**
+ * A DatabaseSync-shaped READ facade over the deputy's `sql` verb. The read
+ * layer types against node:sqlite's DatabaseSync and only ever prepares
+ * SELECT/PRAGMA statements consumed via `.all()` / `.get()`; this facade
+ * implements exactly that surface synchronously (through the bridge) and
+ * throws a teaching error on anything else — never a silent no-op. WAL
+ * freshness is preserved: the deputy holds one read-only connection outside
+ * any transaction, so every statement sees a fresh snapshot exactly like a
+ * local connection (docs/design/architecture.md §0).
+ */
+import type { DatabaseSync } from "node:sqlite";
+/**
+ * Build the facade. The cast is confined to this one construction site: the
+ * object structurally implements the read subset, a Proxy turns any other
+ * member access into a teaching error, and symbol probes (inspect, iterators)
+ * stay undefined so logging never explodes.
+ */
+export declare function createDeputyDbFacade(env?: NodeJS.ProcessEnv): DatabaseSync;