Moves _QueueStore → bot_bottle/queue_store.py (public QueueStore) and
_AuditStore → bot_bottle/audit_store.py (public AuditStore). Removes
the public queue_db_path() function; QueueStore resolves the DB path
via host_db_path() on the host, or via the SUPERVISE_DB_PATH env var
in the sidecar container (internal mechanism, not public API).

Adds queue_store.py and audit_store.py to Dockerfile.sidecars so the
sidecar bundle picks them up. Updates __all__ in supervise.py.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

@@ -89,2 +88,4 @@
 QUEUE_DIR_IN_CONTAINER = "/run/supervise/queue"
 DEFAULT_POLL_INTERVAL_SEC = 0.5
+HOST_DB_FILENAME = "bot-bottle.db"
+QUEUE_DB_FILENAME = "supervise.db"

@@ -305,0 +289,4 @@
+    current_file_hash=hashlib.sha256(payload.encode("utf-8")).hexdigest(),
+    now=datetime.datetime.now(datetime.timezone.utc),
+)
+_sv.write_proposal(Path(queue_dir), proposal)

@@ -112,0 +109,4 @@
+    return bot_bottle_root() / HOST_DB_FILENAME
+
+
+def queue_db_path() -> Path:

@@ -429,0 +507,4 @@
+            pass
+
+
+class _AuditStore:

@@ -0,0 +10,4 @@
+    from .supervise import AuditEntry
+
+
+def _sv() -> object:

@@ -0,0 +16,4 @@
+    propagate correctly in both flat (sidecar / sys.path-injection tests) and
+    package contexts."""
+    import sys
+    sv_name = "supervise" if __name__ == "audit_store" else "bot_bottle.supervise"

@@ -0,0 +26,4 @@
+    return _m
+
+
+def _audit_entry_from_row(row: sqlite3.Row) -> AuditEntry:

@@ -0,0 +39,4 @@
+    )
+
+
+def _host_db_path() -> Path:

@@ -0,0 +96,4 @@
+        with self._connect() as conn:
+            conn.execute(
+                """
+                CREATE TABLE IF NOT EXISTS supervise_audit_entries (

@@ -0,0 +50,4 @@
+        status=row["status"],
+        notes=row["notes"],
+        final_file=row["final_file"],
+    )

@@ -0,0 +205,4 @@
+        conn.row_factory = sqlite3.Row
+        return conn
+
+    def _init(self) -> None:

@@ -0,0 +41,4 @@
+- Adding forge orchestration state tables.
+- Adding egress metering or budget tables.
+- Changing the supervise TUI workflow or remediation behavior.
+- Introducing a third-party ORM or migration framework.

@@ -0,0 +10,4 @@
+    from .supervise import AuditEntry
+
+
+def get_supervise_mod() -> object:

@@ -0,0 +16,4 @@
+    propagate correctly in both flat (sidecar / sys.path-injection tests) and
+    package contexts."""
+    import sys
+    sv_name = "supervise" if __name__ == "audit_store" else "bot_bottle.supervise"

@@ -0,0 +26,4 @@
+    return _m
+
+
+# One entry per schema version: _MIGRATIONS[0] brings a fresh DB (user_version=0)

@@ -0,0 +39,4 @@
+        component TEXT NOT NULL,
+        operator_action TEXT NOT NULL,
+        operator_notes TEXT NOT NULL,
+        justification TEXT NOT NULL,

@@ -0,0 +96,4 @@
+        return m.AuditEntry(  # type: ignore[attr-defined]
+            timestamp=row["timestamp"],
+            bottle_slug=row["bottle_slug"],
+            component=row["component"],

@@ -0,0 +50,4 @@
+    )
+    """,
+    # v2 — responses table
+    """

@@ -0,0 +205,4 @@
+                WHERE queue_key = ? AND proposal_id = ?
+                """,
+                (self.queue_key, proposal_id),
+            )

@@ -0,0 +41,4 @@
+- Migrating old JSON queue files or JSONL audit logs.
+- Adding forge orchestration state tables.
+- Adding egress metering or budget tables.
+- Changing the supervise TUI workflow or remediation behavior.