submit io.pilot.sqlite v3.45.2 — native SQLite CLI (durable OLTP, complements duckdb)

[philip638]

App submission

App id: io.pilot.sqlite
Version: 3.45.2
Publisher: ed25519:hwWVhfcM90EjXJhCL2D+4Ji4ngW2Hp8H7sjTPqGFgMs= (Vulture Labs / Pilot Protocol — to be added to pilot-protocol/catalog publishers/registry.json)

SQLite 3.45.2 as a native SQL database for agents: a zero-server, single-file, transactional (OLTP) SQL engine delivered to the host and fronted as typed methods. The durable, on-disk complement to io.pilot.duckdb (in-memory OLAP) — fills the "no embedded transactional DB / durable agent memory" gap.

Methods: sqlite.query (→ JSON rows), sqlite.script (stdin), sqlite.schema, sqlite.tables, sqlite.exec (verbatim CLI passthrough), sqlite.version, + auto sqlite.help.

Automated gate

• pilot-app verify passes locally (bundle sha, manifest valid + signed, sqlite.help present, id/version consistent). Bundle ships manifest.json + bin/ + install.json + install.sh.

Native binary delivery

The four sqlite3 binaries are hosted on a publisher-controlled GitHub release via the assets[].url escape hatch (no R2/GCP access on the publisher side), each sha256-pinned in the signed manifest so integrity is verified on download:

• https://github.com/philip638/pilot-sqlite-artifacts release v3.45.2 — darwin arm64/amd64, linux arm64/amd64.
• linux binaries are static musl (zig cc), run on any Linux host; darwin from the SQLite public-domain amalgamation.
• Verified end-to-end: a real install extracts the tarball, StageAssets fetches from the release, verifies the sha, stages $APP/sqlite3, and execs it (reports 3.45.2; queries work).

Note for maintainers: happy to move the binaries to Pilot R2 if preferred — the publisher has no R2/GCP access, hence the GitHub-release host. Swapping to derived R2 URLs is a one-line assets: change + re-sign once uploaded.

Maintainer checklist (SPEC §7.2)

• Publisher identity added to the registry.
• Grants proportional. This app declares broad fs.read:* + fs.write:* — proportional to a general-purpose on-host SQL database that reads/writes the DB files the agent names — plus the standard native-cli set (proc.exec→sqlite3, fs.write $APP staging, net.dial github.com to fetch). App is guarded. Please bless consciously.
• Description accurate.
• Asset host acceptable (publisher GitHub release; see note above).

/cc @TeoSlayer for review.

[philip638]

@TeoSlayer requesting your review on this native SQLite app submission. Key things to eyeball: the broad fs.read:*/fs.write:* grants (proportional to a general-purpose local SQL DB) and the GitHub-release asset host (publisher has no R2 access — glad to migrate to R2 if you prefer).