Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

state

package

Go to main page

Versions in this module

v0

v0.1.2

Jul 13, 2026

Changes in this version

+ const WCKRotationPendingMetaKey

+ func TimestampNow() string

+ func ValidateDBFileReadOnly(ctx context.Context, path string) error

type AgentRun

+ RunnerStartedAt int64

+ SandboxBackend string

+ SandboxLimitations string

+ SandboxMode string

+ type EnvProfileParams struct

+ BlobRef string

+ Mode string

+ Name string

+ Provider string

+ Refs map[string]string

+ VarNames []string

+ type EnvProfileRef struct

+ Mode string

+ Name string

+ NamespaceID string

+ Path string

+ Provider string

+ VarNames []string

+ type SandboxViolation struct

+ Backend string

+ Detail string

+ ObservedAt string

+ Operation string

+ Path string

+ RunID string

+ Source string

type SnapshotEntry

+ Env *SnapshotEntryEnv

+ type SnapshotEntryEnv struct

+ BlobRef string

+ Mode string

+ Name string

+ Provider string

+ Refs map[string]string

+ SourceEventDeviceID string

+ SourceEventHLC int64

+ SourceEventID string

+ VarNames []string

+ type SnapshotTrustRow struct

+ DeviceID string

+ TrustState string

type Store

+ func OpenSnapshot(ctx context.Context, path string) (*Store, error)

+ func (s *Store) CountRunsWithSandboxViolations(ctx context.Context) (int, error)

+ func (s *Store) DeleteLocalMeta(ctx context.Context, key string) error

+ func (s *Store) EnvProfilesForBlobRef(ctx context.Context, ref string) ([]EnvProfileRef, error)

+ func (s *Store) InsertSandboxViolations(ctx context.Context, vs []SandboxViolation) error

+ func (s *Store) RunningAgentRunsByWorktree(ctx context.Context, worktreeID string) ([]AgentRun, error)

+ func (s *Store) SandboxViolationsByRun(ctx context.Context, runID string) ([]SandboxViolation, error)

+ func (s *Store) SnapshotTrust(ctx context.Context) ([]SnapshotTrustRow, error)

type Tx

+ func (tx *Tx) ApplyRemoteDeviceTrustTx(ctx context.Context, deviceID, trustState string) (bool, error)

+ func (tx *Tx) CurrentKeyEpochTx(ctx context.Context) (int64, error)

+ func (tx *Tx) DeleteLocalMetaTx(ctx context.Context, key string) error

+ func (tx *Tx) EnvProfileSourceCoords(ctx context.Context, namespaceID string) (hlc int64, deviceID, eventID string, ok bool, err error)

+ func (tx *Tx) GetLocalMetaTx(ctx context.Context, key string) (string, bool, error)

+ func (tx *Tx) MarkEncryptedBindingsNeedingRotationTx(ctx context.Context) (int, error)

+ func (tx *Tx) SetDeviceTrustStateTx(ctx context.Context, deviceID, trustState string) error

+ func (tx *Tx) SetLocalMetaTx(ctx context.Context, key, value string) error

+ func (tx *Tx) SetWCKRotationPendingTx(ctx context.Context, epoch int64) error

+ func (tx *Tx) UpsertEnvProfileTx(ctx context.Context, namespaceID string, p EnvProfileParams, event Event) (EnvProfile, error)

+ type WCKRotationPendingRecord struct

+ Epoch int64

+ Since time.Time

v0.1.2-rc.1

Jul 13, 2026

v0.1.1

Jul 5, 2026

v0.1.1-rc.1

Jul 5, 2026

v0.1.0

Jul 5, 2026

Changes in this version

+ var ErrDivergentEvent = errors.New("event id already exists with different immutable content")

+ var ErrEventHashChain = errors.New("event prev_event_hash chain break")

+ var ErrEventVerification = errors.New("event verification failed")

+ var ErrNotInitialized = errors.New("workspace is not initialized; run devstrap init")

+ var ErrWorkspaceIDMismatch = errors.New("workspace id mismatch")

+ func ContentHash(payloadJSON string) string

+ func EffectiveKeyCustody(recorded devicekeys.Custody) devicekeys.Custody

+ func EventSignaturePayload(event Event) []byte

+ func EventSignaturePayloadV2(event Event) []byte

+ func ValidateDBFile(ctx context.Context, path string) error

+ type AgentRun struct

+ BaseRef string

+ BaseSHA string

+ Branch string

+ DiffSummary string

+ Engine string

+ ID string

+ LogPath string

+ NamespaceID string

+ PolicyID string

+ RunnerPID int

+ Status string

+ Task string

+ TestSummary string

+ WorktreeID string

+ type Conflict struct

+ DetailsJSON string

+ ID string

+ NamespaceID string

+ Status string

+ Type string

+ type Device struct

+ Arch string

+ Hostname string

+ ID string

+ Name string

+ OS string

+ PublicKey string

+ SigningPublicKey string

+ TrustState string

+ type DraftSnapshot struct

+ BlobRef string

+ ByteSize int64

+ FileCount int64

+ ID string

+ NamespaceID string

+ SourceEventDeviceID string

+ SourceEventHLC int64

+ SourceEventID string

+ type DraftSnapshotRef struct

+ ByteSize int64

+ FileCount int64

+ NamespaceID string

+ Path string

+ type EnvProfile struct

+ ID string

+ Mode string

+ Name string

+ Provider string

+ WorkspaceID string

+ type Event struct

+ ContentHash string

+ CreatedAt string

+ DeviceID string

+ DeviceSig string

+ HLC int64

+ ID string

+ PayloadJSON string

+ PrevEventHash string

+ Seq int64

+ Type string

+ WorkspaceID string

+ type GitRepo struct

+ CloneFilter string

+ DefaultBranch string

+ ForgeKind string

+ LFSPolicy string

+ NamespaceID string

+ RemoteKey string

+ RemoteURL string

+ type HeldKey struct

+ Epoch int64

+ KID string

+ Origin string

+ type KeyGrantWait struct

+ Epoch int64

+ FirstSeen time.Time

+ KID string

+ type NamespaceEntry struct

+ DisplayName string

+ ID string

+ MaterializationPolicy string

+ Path string

+ PathKey string

+ SourceEventDeviceID string

+ SourceEventHLC int64

+ SourceEventID string

+ Status string

+ Type string

+ type ProjectStatus struct

+ DefaultBranch string

+ DirtyState string

+ ForgeKind string

+ LFSPolicy string

+ LocalPath string

+ MaterializationState string

+ RemoteKey string

+ RemoteURL string

+ type RenameOutcome int

+ const RenameApplied

+ const RenameSourceMissing

+ const RenameStale

+ const RenameTargetConflict

+ type SecretBinding struct

+ EncryptedValueRef string

+ EnvProfileID string

+ ID string

+ NeedsRotation bool

+ ProviderRef string

+ Required bool

+ VarName string

+ type SkippedEvent struct

+ DeviceID string

+ EventID string

+ FirstSeenAt time.Time

+ HLC int64

+ Reason string

+ Seq int64

+ type SnapshotChainAnchor struct

+ ContentHash string

+ DeviceID string

+ HLC int64

+ Seq int64

+ type SnapshotEntry struct

+ DisplayName string

+ Draft *SnapshotEntryDraft

+ Git *SnapshotEntryGit

+ MaterializationPolicy string

+ Path string

+ PathKey string

+ SourceEventDeviceID string

+ SourceEventHLC int64

+ SourceEventID string

+ Status string

+ Type string

+ type SnapshotEntryDraft struct

+ BlobRef string

+ ByteSize int64

+ FileCount int64

+ SourceEventDeviceID string

+ SourceEventHLC int64

+ SourceEventID string

+ type SnapshotEntryGit struct

+ DefaultBranch string

+ ForgeKind string

+ LFSPolicy string

+ RemoteKey string

+ RemoteURL string

+ type SnapshotTombstone struct

+ PathKey string

+ SourceEventDeviceID string

+ SourceEventID string

+ TombstoneHLC int64

+ type Store struct

+ func Open(ctx context.Context, path string) (*Store, error)

+ func (s *Store) ActiveKeyEpochAge(ctx context.Context) (int64, time.Time, error)

+ func (s *Store) AdvanceHubCursor(ctx context.Context, hubID string, hlc int64) error

+ func (s *Store) AdvanceHubDeviceCursor(ctx context.Context, hubID, deviceID string, seq int64) error

+ func (s *Store) AdvancePushSeqCursor(ctx context.Context, hubID string, seq int64) error

+ func (s *Store) AgentRunByID(ctx context.Context, id string) (AgentRun, error)

+ func (s *Store) AllBlobRefs(ctx context.Context) ([]string, error)

+ func (s *Store) ApprovedDeviceSigningKey(ctx context.Context, deviceID string) (string, bool, error)

+ func (s *Store) ApprovedRecipients(ctx context.Context) ([]string, error)

+ func (s *Store) Backup(ctx context.Context, outputPath string) error

+ func (s *Store) BlobRefCount(ctx context.Context) (map[string]int, error)

+ func (s *Store) ChainAnchorsForFloors(ctx context.Context, floors map[string]int64) ([]SnapshotChainAnchor, error)

+ func (s *Store) ClearAllBindingRotation(ctx context.Context) (int, error)

+ func (s *Store) ClearPendingHubDelete(ctx context.Context, ref string) error

+ func (s *Store) ClearRotationForProject(ctx context.Context, namespaceID string) (int, error)

+ func (s *Store) Close() error

+ func (s *Store) ConflictByID(ctx context.Context, id string) (Conflict, error)

+ func (s *Store) CountAgentRunsByStatus(ctx context.Context, status string) (int, error)

+ func (s *Store) CountOpenConflicts(ctx context.Context) (int, error)

+ func (s *Store) CountSecretBindingsNeedingRotation(ctx context.Context) (int, error)

+ func (s *Store) CountTombstonesBelowHLC(ctx context.Context, beforeHLC int64) (int, error)

+ func (s *Store) CurrentDevice(ctx context.Context) (Device, error)

+ func (s *Store) CurrentHLC(ctx context.Context) (int64, error)

+ func (s *Store) CurrentKeyEpoch(ctx context.Context) (int64, error)

+ func (s *Store) Down() error

+ func (s *Store) DraftBlobRefs(ctx context.Context) ([]string, error)

+ func (s *Store) DraftProjectLimits(ctx context.Context, namespaceID string) (int64, int64, error)

+ func (s *Store) DraftSnapshotsForBlobRef(ctx context.Context, ref string) ([]DraftSnapshotRef, error)

+ func (s *Store) EnsureDevice(ctx context.Context, name string) (Device, error)

+ func (s *Store) EnsureDraftProject(ctx context.Context, namespaceID string) error

+ func (s *Store) EnsureRemoteDevice(ctx context.Context, deviceID string) error

+ func (s *Store) EnsureWorkspace(ctx context.Context, name, rootPath string) error

+ func (s *Store) EnsureWorkspaceWithID(ctx context.Context, workspaceID, name, rootPath string) error

+ func (s *Store) EnvBlobRefs(ctx context.Context) ([]string, error)

+ func (s *Store) EnvProfileForProject(ctx context.Context, namespaceID string) (EnvProfile, []SecretBinding, error)

+ func (s *Store) EventByID(ctx context.Context, id string) (Event, error)

+ func (s *Store) ForeignKeyCheck(ctx context.Context) (string, error)

+ func (s *Store) GCTombstones(ctx context.Context, beforeHLC int64) (int, error)

+ func (s *Store) GetLocalMeta(ctx context.Context, key string) (string, bool, error)

+ func (s *Store) HasHubDeviceCursors(ctx context.Context, hubID string) (bool, error)

+ func (s *Store) HeldKeyEpochs(ctx context.Context) ([]int64, error)

+ func (s *Store) HeldKeys(ctx context.Context) ([]HeldKey, error)

+ func (s *Store) HubCursor(ctx context.Context, hubID string) (int64, error)

+ func (s *Store) HubDeviceCursors(ctx context.Context, hubID string) (map[string]int64, error)

+ func (s *Store) InsertAgentRun(ctx context.Context, run AgentRun) (AgentRun, error)

+ func (s *Store) InsertConflict(ctx context.Context, namespaceID, typ, detailsJSON string) error

+ func (s *Store) InsertEvent(ctx context.Context, event Event) error

+ func (s *Store) InsertLocalEvent(ctx context.Context, event Event) (Event, error)

+ func (s *Store) InsertLocalEventTx(ctx context.Context, tx *Tx, event Event) (Event, error)

+ func (s *Store) InsertWorktree(ctx context.Context, wt Worktree) (Worktree, error)

+ func (s *Store) KeyCustody(ctx context.Context) (devicekeys.Custody, error)

+ func (s *Store) LatestDraftSnapshot(ctx context.Context, namespaceID string) (*DraftSnapshot, error)

+ func (s *Store) ListAgentRuns(ctx context.Context) ([]AgentRun, error)

+ func (s *Store) ListDevices(ctx context.Context) ([]Device, error)

+ func (s *Store) ListProjects(ctx context.Context) ([]ProjectStatus, error)

+ func (s *Store) ListWorktrees(ctx context.Context) ([]Worktree, error)

+ func (s *Store) LocalPendingEvents(ctx context.Context, afterHLC int64) ([]Event, error)

+ func (s *Store) LocalPendingEventsBySeq(ctx context.Context, afterSeq int64) ([]Event, error)

+ func (s *Store) MarkEncryptedBindingsNeedingRotation(ctx context.Context) (int, error)

+ func (s *Store) MarkWorktreeRemoved(ctx context.Context, id string) error

+ func (s *Store) Migrate() error

+ func (s *Store) NoteMissingKeyGrant(ctx context.Context, epoch int64, kid string) (time.Time, error)

+ func (s *Store) NoteSkippedEvent(ctx context.Context, ev Event, reason string) (time.Time, error)

+ func (s *Store) OpenConflicts(ctx context.Context) ([]Conflict, error)

+ func (s *Store) OpenConflictsByType(ctx context.Context, typ string) ([]Conflict, error)

+ func (s *Store) OpenKeyGrantWaits(ctx context.Context) ([]KeyGrantWait, error)

+ func (s *Store) OpenSkippedEvents(ctx context.Context) ([]SkippedEvent, error)

+ func (s *Store) PendingEvents(ctx context.Context) ([]Event, error)

+ func (s *Store) PendingHubDeletes(ctx context.Context) ([]string, error)

+ func (s *Store) ProjectByID(ctx context.Context, id string) (ProjectStatus, error)

+ func (s *Store) ProjectByPath(ctx context.Context, path string) (ProjectStatus, error)

+ func (s *Store) PruneDraftSnapshots(ctx context.Context, keep int) (int, error)

+ func (s *Store) PushSeqCursor(ctx context.Context, hubID string) (int64, error)

+ func (s *Store) QueuePendingHubDelete(ctx context.Context, ref string) error

+ func (s *Store) QuickCheck(ctx context.Context) (string, error)

+ func (s *Store) RecordDraftSnapshot(ctx context.Context, namespaceID, blobRef string, byteSize, fileCount int64, ...) error

+ func (s *Store) RecordKeyCustody(ctx context.Context, c devicekeys.Custody) error

+ func (s *Store) RecordKeyEpoch(ctx context.Context, epoch int64, kid, origin string) error

+ func (s *Store) RecordKeyGrant(ctx context.Context, epoch int64, kid string, recipient, sourceEventID string, ...) error

+ func (s *Store) RenameDevice(ctx context.Context, deviceID, name string) error

+ func (s *Store) ResolveConflict(ctx context.Context, id, resolutionJSON string) error

+ func (s *Store) RetainedBlobRefs(ctx context.Context, keep int) ([]string, error)

+ func (s *Store) RunningAgentRunsWithPID(ctx context.Context) ([]AgentRun, error)

+ func (s *Store) SaveCapturedEnvProfile(ctx context.Context, namespaceID, name string, varNames []string, ...) (EnvProfile, error)

+ func (s *Store) SaveProviderEnvProfile(ctx context.Context, namespaceID, name, provider string, ...) (EnvProfile, error)

+ func (s *Store) SetDevicePublicKey(ctx context.Context, deviceID, publicKey string) error

+ func (s *Store) SetDeviceSigningPublicKey(ctx context.Context, deviceID, publicKey string) error

+ func (s *Store) SetDeviceTrustState(ctx context.Context, deviceID, trustState string) error

+ func (s *Store) SetLocalMeta(ctx context.Context, key, value string) error

+ func (s *Store) SetProjectForgeKind(ctx context.Context, namespaceID, kind string) error

+ func (s *Store) SkeletonProjects(ctx context.Context) ([]ProjectStatus, error)

+ func (s *Store) SnapshotEntries(ctx context.Context) ([]SnapshotEntry, error)

+ func (s *Store) SnapshotTombstones(ctx context.Context) ([]SnapshotTombstone, error)

+ func (s *Store) Summary(ctx context.Context) (Summary, error)

+ func (s *Store) UpdateAgentRunResult(ctx context.Context, id, status, diffSummary, testSummary string) error

+ func (s *Store) UpdateAgentRunStatus(ctx context.Context, id, status string) error

+ func (s *Store) UpdateBlobRef(ctx context.Context, oldRef, newRef string) error

+ func (s *Store) UpdateGitDefaultBranch(ctx context.Context, namespaceID, branch string) error

+ func (s *Store) UpdateKeyKid(ctx context.Context, epoch int64, kid string) error

+ func (s *Store) UpdateProjectLocalState(ctx context.Context, namespaceID, localPath, materialization, dirty string) error

+ func (s *Store) UpsertDevice(ctx context.Context, device Device) error

+ func (s *Store) UpsertProject(ctx context.Context, params UpsertProjectParams) (NamespaceEntry, error)

+ func (s *Store) VerifyRemoteEvent(ctx context.Context, event Event) error

+ func (s *Store) Version() (int64, error)

+ func (s *Store) WithTx(ctx context.Context, fn func(*Tx) error) error

+ func (s *Store) WorkspaceID(ctx context.Context) (string, error)

+ func (s *Store) WorktreeByID(ctx context.Context, id string) (Worktree, error)

+ type Summary struct

+ DeviceID string

+ ProjectCount int

+ Projects []ProjectStatus

+ RootPath string

+ WorkspaceID string

+ WorkspaceName string

+ type Tx struct

+ func (tx *Tx) ClearSkippedEventTx(ctx context.Context, eventID string) error

+ func (tx *Tx) EnsureRemoteDeviceTx(ctx context.Context, deviceID string) error

+ func (tx *Tx) InsertConflict(ctx context.Context, namespaceID, typ, detailsJSON string) error

+ func (tx *Tx) InsertEvent(ctx context.Context, event Event) (bool, error)

+ func (tx *Tx) ProjectByPath(ctx context.Context, path string) (ProjectStatus, error)

+ func (tx *Tx) ProjectByPathKey(ctx context.Context, pathKey string) (ProjectStatus, error)

+ func (tx *Tx) ReceiveRemoteHLC(ctx context.Context, remoteHLC int64) error

+ func (tx *Tx) RecordDraftSnapshotTx(ctx context.Context, namespaceID, blobRef string, byteSize, fileCount int64, ...) error

+ func (tx *Tx) RecordKeyGrantTx(ctx context.Context, epoch int64, kid string, recipient string, event Event) error

+ func (tx *Tx) RenameProject(ctx context.Context, oldPath, newPath string, event Event) (RenameOutcome, error)

+ func (tx *Tx) ResolveConflict(ctx context.Context, id, resolutionJSON string) error

+ func (tx *Tx) ResolveConflictByFingerprint(ctx context.Context, typ, detailsJSON, resolutionJSON string) error

+ func (tx *Tx) ResolveOpenConflictsByEventID(ctx context.Context, typ, eventID, resolutionJSON string) error

+ func (tx *Tx) TombstoneByPathKey(ctx context.Context, pathKey string, hlc int64) error

+ func (tx *Tx) TombstoneHLC(ctx context.Context, path string) (int64, bool, error)

+ func (tx *Tx) TombstoneProject(ctx context.Context, path string, hlc int64) error

+ func (tx *Tx) UpsertChainAnchor(ctx context.Context, deviceID string, anchorSeq int64, contentHash string, ...) error

+ func (tx *Tx) UpsertProject(ctx context.Context, params UpsertProjectParams) (NamespaceEntry, error)

+ type UpsertProjectParams struct

+ DefaultBranch string

+ DirtyState string

+ ForgeKind string

+ LFSPolicy string

+ LocalPath string

+ MaterializationPolicy string

+ MaterializationState string

+ Path string

+ RemoteKey string

+ RemoteURL string

+ SourceEventDeviceID string

+ SourceEventHLC int64

+ SourceEventID string

+ Type string

+ type Worktree struct

+ BaseRef string

+ BaseSHA string

+ Branch string

+ CreatedBy string

+ DeviceID string

+ DirtyState string

+ ID string

+ NamespaceID string

+ Path string

+ Status string

v0.1.0-rc.2

Jul 5, 2026

v0.1.0-rc.1

Jul 5, 2026