@astragenie/astramemory-local 0.7.2

package/dist/doctor/hardening-checks.js

@@ -0,0 +1,182 @@
+/**
+ * hardening-checks.ts — doctor checks matching `reinstall`'s assertions (W1.3).
+ *
+ * Doctor must be able to see everything reinstall warns about, so a user who
+ * only runs doctor still learns about: stranded legacy databases, lingering
+ * plaintext encryption backups, a service serving a different build than the
+ * repo, zombie instance locks, and accumulating poison jobs.
+ */
+import { existsSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+import { legacyDataDir } from '../config/datadir.js';
+import { readLockInfo } from '../service/instance-lock.js';
+import { PKG_VERSION } from '../server/lib/wire-meta.js';
+export function getHardeningChecks(opts) {
+    return [
+        checkStrandedLegacyDb(opts.dataDir),
+        checkPreEncryptionBak(opts.dataDir),
+        checkServedVersion(opts.port),
+        checkZombieLock(opts.dataDir),
+        checkPoisonJobs(opts.openDbReadonly),
+        checkPendingProposals(opts.openDbReadonly),
+    ];
+}
+/** Consolidation proposals waiting for review — silent pile-up is the failure
+ *  mode of a scheduled consolidation cadence with no reviewer. */
+function checkPendingProposals(openDbReadonly) {
+    return {
+        name: 'Consolidation proposals reviewed',
+        async run() {
+            let db = null;
+            try {
+                db = await openDbReadonly();
+                const row = db.prepare(`SELECT COUNT(*) AS n FROM consolidation_proposals WHERE status = 'pending'`).get();
+                if (row.n === 0)
+                    return { ok: true, message: 'no pending consolidation proposals' };
+                return {
+                    ok: false,
+                    message: `${row.n} consolidation proposal(s) awaiting review (borderline near-duplicates, 0.94-0.97 similarity)`,
+                    fix: "Review with 'astramem-local consolidate proposals' then accept/reject",
+                };
+            }
+            catch (err) {
+                return { ok: true, message: `proposal check skipped: ${err instanceof Error ? err.message : String(err)}` };
+            }
+            finally {
+                try {
+                    db?.close();
+                }
+                catch { /* ignore */ }
+            }
+        },
+    };
+}
+/** Legacy data dir still holds a database that is NOT the one being served. */
+function checkStrandedLegacyDb(dataDir) {
+    return {
+        name: 'No stranded legacy database',
+        async run() {
+            const legacy = legacyDataDir();
+            const legacyDb = join(legacy, 'memory.sqlite');
+            if (legacy === dataDir || !existsSync(legacyDb)) {
+                return { ok: true, message: 'no legacy database present' };
+            }
+            const st = statSync(legacyDb);
+            const kb = Math.round(st.size / 1024);
+            return {
+                ok: false,
+                message: `legacy dir still holds a ${kb}KB database: ${legacyDb} (mtime ${st.mtime.toISOString()})`,
+                fix: `Verify the served DB at ${join(dataDir, 'memory.sqlite')} contains your real data, then delete the legacy dir`,
+            };
+        },
+    };
+}
+/** Plaintext pre-encryption backup lingering next to the encrypted DB. */
+function checkPreEncryptionBak(dataDir) {
+    return {
+        name: 'No plaintext pre-encryption backup',
+        async run() {
+            const bak = join(dataDir, 'memory.sqlite.pre-encryption.bak');
+            if (!existsSync(bak))
+                return { ok: true, message: 'no pre-encryption backup present' };
+            const ageDays = (Date.now() - statSync(bak).mtimeMs) / (24 * 60 * 60 * 1000);
+            return {
+                ok: false,
+                message: `PLAINTEXT copy of the database still on disk (${ageDays.toFixed(1)}d old): ${bak}`,
+                fix: 'serve auto-deletes it after 7 days; delete manually once the encrypted DB is verified',
+            };
+        },
+    };
+}
+/** Daemon serves a different build than the one running doctor. */
+function checkServedVersion(port) {
+    return {
+        name: 'Served version matches this build',
+        async run() {
+            let body;
+            try {
+                const res = await fetch(`http://127.0.0.1:${port}/version`, { signal: AbortSignal.timeout(2000) });
+                body = (await res.json());
+            }
+            catch {
+                return { ok: true, message: 'daemon not reachable — version check skipped' };
+            }
+            if (body.version === PKG_VERSION) {
+                return { ok: true, message: `daemon serving v${body.version} (matches build)` };
+            }
+            return {
+                ok: false,
+                message: `daemon serves v${body.version} but this build is v${PKG_VERSION} — a different install is running`,
+                fix: "Run 'astramem-local reinstall' from the build you want (stale global installs shadow the repo build)",
+            };
+        },
+    };
+}
+/** daemon.lock held by a dead or unresponsive process. */
+function checkZombieLock(dataDir) {
+    return {
+        name: 'Instance lock healthy',
+        async run() {
+            const holder = readLockInfo(dataDir);
+            if (!holder)
+                return { ok: true, message: 'no daemon.lock (daemon not running)' };
+            let alive = true;
+            try {
+                process.kill(holder.pid, 0);
+            }
+            catch {
+                alive = false;
+            }
+            if (!alive) {
+                return {
+                    ok: false,
+                    message: `daemon.lock held by dead pid ${holder.pid} — stale (self-heals on next serve)`,
+                    fix: "Start the daemon ('astramem-local service start' or 'reinstall'); the stale lock is stolen automatically",
+                };
+            }
+            try {
+                const res = await fetch(`http://127.0.0.1:${holder.port}/health`, { signal: AbortSignal.timeout(2000) });
+                if (res.ok)
+                    return { ok: true, message: `lock held by pid ${holder.pid}, daemon healthy on :${holder.port}` };
+            }
+            catch {
+                /* fall through */
+            }
+            return {
+                ok: false,
+                message: `daemon.lock pid ${holder.pid} is alive but /health on :${holder.port} is unresponsive (zombie)`,
+                fix: `Kill pid ${holder.pid} and restart the service`,
+            };
+        },
+    };
+}
+/** Poisoned jobs accumulating in the queue. */
+function checkPoisonJobs(openDbReadonly) {
+    return {
+        name: 'No poisoned jobs',
+        async run() {
+            let db = null;
+            try {
+                db = await openDbReadonly();
+                const row = db.prepare(`SELECT COUNT(*) AS n FROM jobs WHERE state = 'poison'`).get();
+                if (row.n === 0)
+                    return { ok: true, message: 'no poisoned jobs' };
+                return {
+                    ok: false,
+                    message: `${row.n} poisoned job(s) in the queue (retries exhausted or deterministic failure)`,
+                    fix: "Inspect with 'astramem-local queue'; purged automatically after 30 days",
+                };
+            }
+            catch (err) {
+                return { ok: true, message: `poison check skipped: ${err instanceof Error ? err.message : String(err)}` };
+            }
+            finally {
+                try {
+                    db?.close();
+                }
+                catch { /* ignore */ }
+            }
+        },
+    };
+}
+//# sourceMappingURL=hardening-checks.js.map

package/dist/doctor/hardening-checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hardening-checks.js","sourceRoot":"","sources":["../../src/doctor/hardening-checks.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AASzD,MAAM,UAAU,kBAAkB,CAAC,IAAwB;IACzD,OAAO;QACL,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC;QACnC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC;QACnC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7B,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;QAC7B,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC;QACpC,qBAAqB,CAAC,IAAI,CAAC,cAAc,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED;kEACkE;AAClE,SAAS,qBAAqB,CAAC,cAAiC;IAC9D,OAAO;QACL,IAAI,EAAE,kCAAkC;QACxC,KAAK,CAAC,GAAG;YACP,IAAI,EAAE,GAAc,IAAI,CAAC;YACzB,IAAI,CAAC;gBACH,EAAE,GAAG,MAAM,cAAc,EAAE,CAAC;gBAC5B,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CACpB,4EAA4E,CAC7E,CAAC,GAAG,EAAmB,CAAC;gBACzB,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC;oBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;gBACpF,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,GAAG,GAAG,CAAC,CAAC,+FAA+F;oBAChH,GAAG,EAAE,uEAAuE;iBAC7E,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,2BAA2B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAC9G,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC;oBAAC,EAAE,EAAE,KAAK,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,SAAS,qBAAqB,CAAC,OAAe;IAC5C,OAAO;QACL,IAAI,EAAE,6BAA6B;QACnC,KAAK,CAAC,GAAG;YACP,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;YAC/C,IAAI,MAAM,KAAK,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;YAC7D,CAAC;YACD,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;YACtC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,4BAA4B,EAAE,gBAAgB,QAAQ,WAAW,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG;gBACnG,GAAG,EAAE,2BAA2B,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,sDAAsD;aACrH,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,SAAS,qBAAqB,CAAC,OAAe;IAC5C,OAAO;QACL,IAAI,EAAE,oCAAoC;QAC1C,KAAK,CAAC,GAAG;YACP,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,kCAAkC,CAAC,CAAC;YAC9D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;YACvF,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC7E,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,iDAAiD,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,GAAG,EAAE;gBAC5F,GAAG,EAAE,uFAAuF;aAC7F,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO;QACL,IAAI,EAAE,mCAAmC;QACzC,KAAK,CAAC,GAAG;YACP,IAAI,IAA0B,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,UAAU,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACnG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyB,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC;YAC/E,CAAC;YACD,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;gBACjC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,IAAI,CAAC,OAAO,kBAAkB,EAAE,CAAC;YAClF,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,kBAAkB,IAAI,CAAC,OAAO,uBAAuB,WAAW,mCAAmC;gBAC5G,GAAG,EAAE,sGAAsG;aAC5G,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,0DAA0D;AAC1D,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,KAAK,CAAC,GAAG;YACP,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;YACjF,IAAI,KAAK,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,GAAG,KAAK,CAAC;YAChB,CAAC;YACD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,gCAAgC,MAAM,CAAC,GAAG,qCAAqC;oBACxF,GAAG,EAAE,0GAA0G;iBAChH,CAAC;YACJ,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,MAAM,CAAC,IAAI,SAAS,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACzG,IAAI,GAAG,CAAC,EAAE;oBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,oBAAoB,MAAM,CAAC,GAAG,wBAAwB,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YAChH,CAAC;YAAC,MAAM,CAAC;gBACP,kBAAkB;YACpB,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,mBAAmB,MAAM,CAAC,GAAG,6BAA6B,MAAM,CAAC,IAAI,2BAA2B;gBACzG,GAAG,EAAE,YAAY,MAAM,CAAC,GAAG,0BAA0B;aACtD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,+CAA+C;AAC/C,SAAS,eAAe,CAAC,cAAiC;IACxD,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,KAAK,CAAC,GAAG;YACP,IAAI,EAAE,GAAc,IAAI,CAAC;YACzB,IAAI,CAAC;gBACH,EAAE,GAAG,MAAM,cAAc,EAAE,CAAC;gBAC5B,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,uDAAuD,CAAC,CAAC,GAAG,EAAmB,CAAC;gBACvG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC;oBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;gBAClE,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,GAAG,GAAG,CAAC,CAAC,4EAA4E;oBAC7F,GAAG,EAAE,yEAAyE;iBAC/E,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,yBAAyB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAC5G,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC;oBAAC,EAAE,EAAE,KAAK,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/doctor/probes/embed-probe.d.ts

@@ -0,0 +1,19 @@
+import type { EmbedProvider } from '../../contracts/embed.js';
+import type { CheckResult } from '../types.js';
+/**
+ * Embed probe: sends a real embedding call to the configured provider.
+ *
+ * Validates that the provider is reachable, the model is loaded, and the
+ * returned vector matches the expected dim. A dim mismatch indicates a
+ * provider misconfiguration (wrong model, wrong dimensions parameter for
+ * Azure, or a stale config after an un-migrated `embedding.dim` edit)
+ * before it silently corrupts vector search.
+ *
+ * FEAT-409: `expectedDim` defaults to `provider.dim` — the provider was
+ * itself constructed from config.embedding.dim (providers/index.ts), so
+ * this stays config-derived without every caller needing to thread it
+ * through explicitly. Pass it explicitly to check against a DIFFERENT
+ * expectation (e.g. the schema dim of a DB the provider hasn't been
+ * pointed at yet).
+ */
+export declare function embedProbe(provider: EmbedProvider, timeoutMs?: number, expectedDim?: number): Promise<CheckResult>;

package/dist/doctor/probes/embed-probe.js

@@ -0,0 +1,47 @@
+/**
+ * Embed probe: sends a real embedding call to the configured provider.
+ *
+ * Validates that the provider is reachable, the model is loaded, and the
+ * returned vector matches the expected dim. A dim mismatch indicates a
+ * provider misconfiguration (wrong model, wrong dimensions parameter for
+ * Azure, or a stale config after an un-migrated `embedding.dim` edit)
+ * before it silently corrupts vector search.
+ *
+ * FEAT-409: `expectedDim` defaults to `provider.dim` — the provider was
+ * itself constructed from config.embedding.dim (providers/index.ts), so
+ * this stays config-derived without every caller needing to thread it
+ * through explicitly. Pass it explicitly to check against a DIFFERENT
+ * expectation (e.g. the schema dim of a DB the provider hasn't been
+ * pointed at yet).
+ */
+export async function embedProbe(provider, timeoutMs = 5000, expectedDim = provider.dim) {
+    try {
+        const start = Date.now();
+        const vecs = await Promise.race([
+            provider.embed(['ping']),
+            new Promise((_, rej) => setTimeout(() => rej(new Error('timeout')), timeoutMs)),
+        ]);
+        const latency = Date.now() - start;
+        const vec = vecs[0];
+        if (!vec || vec.length !== expectedDim) {
+            return {
+                ok: false,
+                message: `${provider.name}: dim ${vec?.length ?? 0}, expected ${expectedDim}`,
+                fix: 'Misconfigured embed provider — check model and dimensions setting',
+            };
+        }
+        return {
+            ok: true,
+            message: `${provider.name}/${provider.model} returned ${expectedDim}-dim in ${latency}ms`,
+        };
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return {
+            ok: false,
+            message: `${provider.name}: ${msg}`,
+            fix: 'Check provider config + model',
+        };
+    }
+}
+//# sourceMappingURL=embed-probe.js.map

package/dist/doctor/probes/embed-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embed-probe.js","sourceRoot":"","sources":["../../../src/doctor/probes/embed-probe.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAAuB,EACvB,SAAS,GAAG,IAAI,EAChB,cAAsB,QAAQ,CAAC,GAAG;IAElC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAC9B,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;YACxB,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAC5B,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CACvD;SACF,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAEnC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACvC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,SAAS,GAAG,EAAE,MAAM,IAAI,CAAC,cAAc,WAAW,EAAE;gBAC7E,GAAG,EAAE,mEAAmE;aACzE,CAAC;QACJ,CAAC;QAED,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,aAAa,WAAW,WAAW,OAAO,IAAI;SAC1F,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,KAAK,GAAG,EAAE;YACnC,GAAG,EAAE,+BAA+B;SACrC,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/doctor/probes/llm-chat-probe.d.ts

@@ -0,0 +1,11 @@
+import type { LLMProvider } from '../../contracts/llm.js';
+import type { CheckResult } from '../types.js';
+/**
+ * LLM chat probe: sends a real 1-token chat request to the configured provider.
+ *
+ * This replaces surface-only `/api/tags` checks — the model may be listed but
+ * unloaded, or the name may mismatch (qwen2.5-coder vs qwen2.5-coder:7b).
+ * A real chat call exercises the full path: model loaded, prompt handled,
+ * response non-empty.
+ */
+export declare function llmChatProbe(provider: LLMProvider, timeoutMs?: number): Promise<CheckResult>;

package/dist/doctor/probes/llm-chat-probe.js

@@ -0,0 +1,41 @@
+/**
+ * LLM chat probe: sends a real 1-token chat request to the configured provider.
+ *
+ * This replaces surface-only `/api/tags` checks — the model may be listed but
+ * unloaded, or the name may mismatch (qwen2.5-coder vs qwen2.5-coder:7b).
+ * A real chat call exercises the full path: model loaded, prompt handled,
+ * response non-empty.
+ */
+export async function llmChatProbe(provider, timeoutMs = 5000) {
+    try {
+        const start = Date.now();
+        const result = await Promise.race([
+            provider.chat([{ role: 'user', content: '1' }], {
+                maxTokens: 1,
+                temperature: 0,
+            }),
+            new Promise((_, rej) => setTimeout(() => rej(new Error('timeout')), timeoutMs)),
+        ]);
+        const latency = Date.now() - start;
+        if (!result.text || result.text.trim().length === 0) {
+            return {
+                ok: false,
+                message: `${provider.name}/${provider.model}: empty response`,
+                fix: 'Check model is loaded (ollama run <model>) and responding',
+            };
+        }
+        return {
+            ok: true,
+            message: `${provider.name}/${provider.model} responded in ${latency}ms`,
+        };
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return {
+            ok: false,
+            message: `${provider.name}/${provider.model}: ${msg}`,
+            fix: 'Check provider config and model availability',
+        };
+    }
+}
+//# sourceMappingURL=llm-chat-probe.js.map

package/dist/doctor/probes/llm-chat-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-chat-probe.js","sourceRoot":"","sources":["../../../src/doctor/probes/llm-chat-probe.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAqB,EACrB,SAAS,GAAG,IAAI;IAEhB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE;gBAC9C,SAAS,EAAE,CAAC;gBACZ,WAAW,EAAE,CAAC;aACf,CAAC;YACF,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAC5B,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CACvD;SACF,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAEnC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,kBAAkB;gBAC7D,GAAG,EAAE,2DAA2D;aACjE,CAAC;QACJ,CAAC;QAED,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,iBAAiB,OAAO,IAAI;SACxE,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,KAAK,GAAG,EAAE;YACrD,GAAG,EAAE,8CAA8C;SACpD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/doctor/probes/plugin-coexistence.d.ts

@@ -0,0 +1,14 @@
+import type { CheckResult } from '../types.js';
+/**
+ * Plugin coexistence probe: detects silent URL mismatches between the running
+ * daemon and any plugin config that might route traffic elsewhere.
+ *
+ * Checks:
+ * 1. MEMORY_API_URL env — if set, must point at this daemon's loopback:port.
+ * 2. Common .mcp.json locations — if found, the mcpServers.memory.url must
+ *    point at this daemon's port, not a SaaS endpoint or different port.
+ *
+ * Risk addressed: spec risk #4 — user with both SaaS and local plugin config
+ * gets silent ambiguity about which backend their queries hit.
+ */
+export declare function pluginCoexistenceProbe(daemonPort: number): Promise<CheckResult>;

package/dist/doctor/probes/plugin-coexistence.js

@@ -0,0 +1,60 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+/**
+ * Plugin coexistence probe: detects silent URL mismatches between the running
+ * daemon and any plugin config that might route traffic elsewhere.
+ *
+ * Checks:
+ * 1. MEMORY_API_URL env — if set, must point at this daemon's loopback:port.
+ * 2. Common .mcp.json locations — if found, the mcpServers.memory.url must
+ *    point at this daemon's port, not a SaaS endpoint or different port.
+ *
+ * Risk addressed: spec risk #4 — user with both SaaS and local plugin config
+ * gets silent ambiguity about which backend their queries hit.
+ */
+export async function pluginCoexistenceProbe(daemonPort) {
+    const indicators = [];
+    // ── 1. MEMORY_API_URL env ──────────────────────────────────────────────────
+    const envUrl = process.env.MEMORY_API_URL;
+    if (envUrl) {
+        const pointsHere = envUrl.includes(`127.0.0.1:${daemonPort}`) ||
+            envUrl.includes(`localhost:${daemonPort}`);
+        if (!pointsHere) {
+            indicators.push(`MEMORY_API_URL=${envUrl} (not pointing at this daemon at :${daemonPort})`);
+        }
+    }
+    // ── 2. Scan likely .mcp.json locations ────────────────────────────────────
+    const candidates = [
+        join(homedir(), '.claude', 'plugins', 'memory-plugin', '.mcp.json'),
+        join(process.cwd(), '.mcp.json'),
+        join(homedir(), 'mega', 'astramemory-plugin', '.mcp.json'),
+    ];
+    for (const candidate of candidates) {
+        if (existsSync(candidate)) {
+            try {
+                const raw = readFileSync(candidate, 'utf8');
+                const content = JSON.parse(raw);
+                const memUrl = content.mcpServers?.['memory']?.url;
+                if (memUrl &&
+                    !memUrl.includes(`127.0.0.1:${daemonPort}`) &&
+                    !memUrl.includes(`localhost:${daemonPort}`)) {
+                    indicators.push(`Plugin .mcp.json at ${candidate} points at ${memUrl}, not this daemon`);
+                }
+            }
+            catch {
+                // JSON parse errors are non-fatal — file may be from another plugin
+            }
+        }
+    }
+    // ── Result ────────────────────────────────────────────────────────────────
+    if (indicators.length > 0) {
+        return {
+            ok: false,
+            message: `Plugin config does not point at this daemon: ${indicators.join('; ')}`,
+            fix: `Set MEMORY_API_URL=http://127.0.0.1:${daemonPort} and update plugin .mcp.json`,
+        };
+    }
+    return { ok: true, message: 'Plugin config aligned with daemon port' };
+}
+//# sourceMappingURL=plugin-coexistence.js.map

package/dist/doctor/probes/plugin-coexistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-coexistence.js","sourceRoot":"","sources":["../../../src/doctor/probes/plugin-coexistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAOlC;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,UAAkB;IAElB,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,8EAA8E;IAC9E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAC1C,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,UAAU,GACd,MAAM,CAAC,QAAQ,CAAC,aAAa,UAAU,EAAE,CAAC;YAC1C,MAAM,CAAC,QAAQ,CAAC,aAAa,UAAU,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,UAAU,CAAC,IAAI,CACb,kBAAkB,MAAM,qCAAqC,UAAU,GAAG,CAC3E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW,CAAC;QACnE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,WAAW,CAAC;KAC3D,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;gBAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC;gBACnD,IACE,MAAM;oBACN,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,UAAU,EAAE,CAAC;oBAC3C,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,UAAU,EAAE,CAAC,EAC3C,CAAC;oBACD,UAAU,CAAC,IAAI,CACb,uBAAuB,SAAS,cAAc,MAAM,mBAAmB,CACxE,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,oEAAoE;YACtE,CAAC;QACH,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,gDAAgD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAChF,GAAG,EACD,uCAAuC,UAAU,8BAA8B;SAClF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;AACzE,CAAC"}

package/dist/doctor/runner.d.ts

@@ -0,0 +1,17 @@
+import type { Check, CheckResult } from './types.js';
+export interface CheckResultWithName extends CheckResult {
+    name: string;
+}
+/**
+ * Run all checks, catching any unexpected errors and surfacing them as failures.
+ */
+export declare function runChecks(checks: Check[]): Promise<CheckResultWithName[]>;
+/**
+ * Format results as a human-readable table for terminal output.
+ */
+export declare function formatTable(results: CheckResultWithName[]): string;
+/**
+ * Format results as machine-readable JSON.
+ * Shape: { checks: [{name, ok, message, fix?}], summary: {ok: N, fail: M} }
+ */
+export declare function formatJson(results: CheckResultWithName[]): string;

package/dist/doctor/runner.js

@@ -0,0 +1,53 @@
+/**
+ * Run all checks, catching any unexpected errors and surfacing them as failures.
+ */
+export async function runChecks(checks) {
+    const results = [];
+    for (const check of checks) {
+        try {
+            const result = await check.run();
+            results.push({ name: check.name, ...result });
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            results.push({ name: check.name, ok: false, message: `Error: ${message}` });
+        }
+    }
+    return results;
+}
+/**
+ * Format results as a human-readable table for terminal output.
+ */
+export function formatTable(results) {
+    const lines = [];
+    for (const r of results) {
+        const icon = r.ok ? '✓' : '✗';
+        lines.push(`  ${icon} ${r.name}: ${r.message}`);
+        if (!r.ok && r.fix) {
+            lines.push(`      fix: ${r.fix}`);
+        }
+    }
+    return lines.join('\n');
+}
+/**
+ * Format results as machine-readable JSON.
+ * Shape: { checks: [{name, ok, message, fix?}], summary: {ok: N, fail: M} }
+ */
+export function formatJson(results) {
+    const checks = results.map(r => {
+        const entry = {
+            name: r.name,
+            ok: r.ok,
+            message: r.message,
+        };
+        if (r.fix !== undefined)
+            entry.fix = r.fix;
+        return entry;
+    });
+    const summary = {
+        ok: results.filter(r => r.ok).length,
+        fail: results.filter(r => !r.ok).length,
+    };
+    return JSON.stringify({ checks, summary }, null, 2);
+}
+//# sourceMappingURL=runner.js.map

package/dist/doctor/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/doctor/runner.ts"],"names":[],"mappings":"AAMA;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAe;IAC7C,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,OAA8B;IACxD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,OAA8B;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAC7B,MAAM,KAAK,GAA4B;YACrC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC;QACF,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG;QACd,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM;QACpC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM;KACxC,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACtD,CAAC"}

package/dist/doctor/types.d.ts

@@ -0,0 +1,12 @@
+export interface CheckResult {
+    ok: boolean;
+    message: string;
+    /** Optional shell command / instruction to fix the issue */
+    fix?: string;
+}
+export interface Check {
+    /** Short unique identifier used in output table and JSON */
+    name: string;
+    /** Execute the check and return a result */
+    run(): Promise<CheckResult>;
+}

package/dist/doctor/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/doctor/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/doctor/types.ts"],"names":[],"mappings":""}

package/dist/entity/backfill.d.ts

@@ -0,0 +1,30 @@
+/**
+ * runEntityBackfill — FEAT-402 AC-7. One-shot pass that extracts + links
+ * entities for the pre-existing corpus WITHOUT re-distilling memory text:
+ * memories.text/normalized_text/hash are never touched, only entities +
+ * memory_entities rows are written.
+ *
+ * Candidate selection (`memories NOT IN memory_entities`) makes this
+ * idempotent by construction, same shape as the tag-hygiene backfill
+ * (src/tag-hygiene/backfill.ts): a memory that already has at least one
+ * entity link is never re-selected, so re-running on a fully-linked corpus
+ * is a pure no-op scan. A memory whose extraction genuinely found nothing
+ * (or failed/was budget-skipped) stays a candidate for the next run since it
+ * never received a link — no separate "tried and found nothing" state is
+ * needed for slice 1.
+ */
+import type { DB } from '../storage/db.js';
+import type { LLMProvider } from '../contracts/index.js';
+export interface EntityBackfillOptions {
+    dryRun: boolean;
+    limit?: number;
+    capUsd: number;
+}
+export interface EntityBackfillResult {
+    scanned: number;
+    linked: number;
+    entitiesLinked: number;
+    skipped: number;
+    dryRun: boolean;
+}
+export declare function runEntityBackfill(db: DB, provider: LLMProvider, opts: EntityBackfillOptions): Promise<EntityBackfillResult>;

package/dist/entity/backfill.js

@@ -0,0 +1,55 @@
+/**
+ * runEntityBackfill — FEAT-402 AC-7. One-shot pass that extracts + links
+ * entities for the pre-existing corpus WITHOUT re-distilling memory text:
+ * memories.text/normalized_text/hash are never touched, only entities +
+ * memory_entities rows are written.
+ *
+ * Candidate selection (`memories NOT IN memory_entities`) makes this
+ * idempotent by construction, same shape as the tag-hygiene backfill
+ * (src/tag-hygiene/backfill.ts): a memory that already has at least one
+ * entity link is never re-selected, so re-running on a fully-linked corpus
+ * is a pure no-op scan. A memory whose extraction genuinely found nothing
+ * (or failed/was budget-skipped) stays a candidate for the next run since it
+ * never received a link — no separate "tried and found nothing" state is
+ * needed for slice 1.
+ */
+import { BudgetTracker } from '../budget/tracker.js';
+import { EntityRepo } from '../storage/entities.js';
+import { extractEntitiesForText } from './extract-entities.js';
+export async function runEntityBackfill(db, provider, opts) {
+    const limitClause = opts.limit !== undefined ? ` LIMIT ${Math.max(1, opts.limit)}` : '';
+    const rows = db
+        .prepare(`
+      SELECT m.id, m.text
+      FROM memories m
+      LEFT JOIN memory_entities me ON me.memory_id = m.id
+      WHERE me.memory_id IS NULL
+      ORDER BY m.created_at ASC${limitClause}
+    `)
+        .all();
+    const budget = new BudgetTracker(db);
+    const entityRepo = new EntityRepo(db);
+    let linked = 0;
+    let entitiesLinked = 0;
+    let skipped = 0;
+    for (const row of rows) {
+        const entities = await extractEntitiesForText(row.text, provider, budget, opts.capUsd);
+        if (entities.length === 0) {
+            skipped++;
+            continue;
+        }
+        if (!opts.dryRun) {
+            entityRepo.linkEntitiesForMemory(row.id, entities);
+        }
+        linked++;
+        entitiesLinked += entities.length;
+    }
+    return {
+        scanned: rows.length,
+        linked,
+        entitiesLinked,
+        skipped,
+        dryRun: opts.dryRun,
+    };
+}
+//# sourceMappingURL=backfill.js.map

package/dist/entity/backfill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backfill.js","sourceRoot":"","sources":["../../src/entity/backfill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAqB/D,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAM,EACN,QAAqB,EACrB,IAA2B;IAE3B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CAAC;;;;;iCAKoB,WAAW;KACvC,CAAC;SACD,GAAG,EAAiB,CAAC;IAExB,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAEtC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACvF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,UAAU,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,EAAE,CAAC;QACT,cAAc,IAAI,QAAQ,CAAC,MAAM,CAAC;IACpC,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,MAAM;QACpB,MAAM;QACN,cAAc;QACd,OAAO;QACP,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC;AACJ,CAAC"}

package/dist/entity/extract-entities.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Entity-only LLM extraction (FEAT-402 AC-7) — used by the `entity-backfill`
+ * command to extract entities from ALREADY-DISTILLED memory text, without
+ * re-running the full 8-stage distill pipeline (no re-chunking, no atom
+ * re-extraction, memory text and hash untouched). Distill-time extraction
+ * (stage 5, src/distill/stages/05-extract.ts) instead emits entities inline
+ * on each atom in the SAME LLM call — this module exists only for the
+ * backfill's one-shot pass over pre-existing rows that predate that stage.
+ *
+ * Deliberately lenient: unlike stage 5's extractChunk (which throws
+ * DeterministicError on parse failure and poisons the job), a bad response
+ * here just returns [] and lets the caller log + move on. The corpus is
+ * scanned by "not yet linked" (src/entity/backfill.ts), so a memory that got
+ * an empty/failed extraction this run remains a valid candidate on the next
+ * run — the backfill is naturally resumable without a checkpoint table.
+ */
+import type { LLMProvider } from '../contracts/index.js';
+import { type AtomEntity } from '../distill/prompts/extract.js';
+import { BudgetTracker } from '../budget/tracker.js';
+export declare const ENTITY_ONLY_SYSTEM_PROMPT = "You identify named things mentioned in a short piece of durable knowledge extracted from an AI coding agent transcript.\n\nOutput STRICT JSON matching:\n{\n  \"entities\": [\n    { \"name\": \"<named thing mentioned>\", \"kind\": \"product\" | \"tech\" | \"person\" | \"org\" | \"repo\" | \"concept\" }\n  ]\n}\n\nkind is one of:\n- product: a named product or app (e.g. \"AstraMemory\", \"GitHub Copilot\")\n- tech: a language/framework/library/tool/protocol (e.g. \"Postgres\", \"TypeScript\", \"sqlite-vec\")\n- person: a named individual\n- org: a company or organization\n- repo: a named git repository or codebase\n- concept: a named pattern, architecture, or idea (e.g. \"bitemporal model\", \"CRDT\")\n\nList every specific named thing the text is ABOUT \u2014 not every word. If nothing specific is named, return {\"entities\": []}.";
+/**
+ * Extract entities from one piece of already-distilled memory text.
+ * Returns [] (never throws) on budget-exceeded, transport, or parse failure
+ * — callers decide whether/how to surface that (the backfill CLI counts it
+ * as "skipped", not "failed").
+ */
+export declare function extractEntitiesForText(text: string, provider: LLMProvider, budget: BudgetTracker, capUsd: number): Promise<AtomEntity[]>;