@codemem/server 0.30.0 → 0.31.1

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,KAAK,eAAe,EAAiB,OAAO,EAAE,MAAM,eAAe,CAAC;AAE1F,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAEN,KAAK,0BAA0B,EAC/B,MAAM,yBAAyB,CAAC;AAQjC,OAAO,EAAE,OAAO,EAAE,CAAC;AAKnB,uFAAuF;AACvF,wBAAgB,QAAQ,IAAI,WAAW,CAKtC;AAED,mDAAmD;AACnD,wBAAgB,UAAU,IAAI,IAAI,CAGjC;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IAC1B,YAAY,CAAC,EAAE,MAAM,WAAW,CAAC;IACjC,OAAO,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACjC,oBAAoB,CAAC,EAAE;QACtB,OAAO,CAAC,EAAE,0BAA0B,CAAC;QACrC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,wBAAwB,CAAC,EAAE,MAAM,CAAC;QAClC,4BAA4B,CAAC,EAAE,MAAM,CAAC;KACtC,CAAC;IACF,oBAAoB,CAAC,EAAE,MAAM;QAC5B,KAAK,EACF,UAAU,GACV,SAAS,GACT,UAAU,GACV,OAAO,GACP,UAAU,GACV,iBAAiB,GACjB,iBAAiB,GACjB,IAAI,CAAC;QACR,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACvB,GAAG,IAAI,CAAC;CACT;AAED,wBAAgB,SAAS,CAAC,IAAI,CAAC,EAAE,UAAU,8EAuD1C;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,IAAI,CAAC,EAAE,UAAU,8EA8B9C"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,KAAK,eAAe,EAAiB,OAAO,EAAE,MAAM,eAAe,CAAC;AAE1F,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAEN,KAAK,0BAA0B,EAC/B,MAAM,yBAAyB,CAAC;AAQjC,OAAO,EAAE,OAAO,EAAE,CAAC;AAKnB,uFAAuF;AACvF,wBAAgB,QAAQ,IAAI,WAAW,CAKtC;AAED,mDAAmD;AACnD,wBAAgB,UAAU,IAAI,IAAI,CAGjC;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IAC1B,YAAY,CAAC,EAAE,MAAM,WAAW,CAAC;IACjC,OAAO,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACjC,oBAAoB,CAAC,EAAE;QACtB,OAAO,CAAC,EAAE,0BAA0B,CAAC;QACrC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,wBAAwB,CAAC,EAAE,MAAM,CAAC;QAClC,4BAA4B,CAAC,EAAE,MAAM,CAAC;KACtC,CAAC;IACF,oBAAoB,CAAC,EAAE,MAAM;QAC5B,KAAK,EACF,UAAU,GACV,SAAS,GACT,UAAU,GACV,OAAO,GACP,UAAU,GACV,iBAAiB,GACjB,iBAAiB,GACjB,IAAI,CAAC;QACR,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACvB,GAAG,IAAI,CAAC;CACT;AAED,wBAAgB,SAAS,CAAC,IAAI,CAAC,EAAE,UAAU,8EA6D1C;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,IAAI,CAAC,EAAE,UAAU,8EA8B9C"}

package/dist/index.js

@@ -1,6 +1,6 @@
 import { existsSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
-import { CODEMEM_CONFIG_ENV_OVERRIDES, DEFAULT_TIME_WINDOW_S, LEGACY_SHARED_REVIEW_SCOPE_ID, LOCAL_DEFAULT_SCOPE_ID, LOCAL_SYNC_CAPABILITY, MemoryStore, SYNC_SCOPE_QUERY_PARAM, VERSION, VERSION as VERSION$1, addSyncScopeToBoundary, analyzeProjectScopeMappingChangeGuardrails, applyReplicationOps, buildBaseUrl, buildFilterClausesWithContext, buildRawEventEnvelopeFromHook, canonicalMemoryKind, cleanupNonces, coordinatorArchiveGroupAction, coordinatorCreateGroupAction, coordinatorCreateInviteAction, coordinatorCreateScopeAction, coordinatorDisableDeviceAction, coordinatorEnableDeviceAction, coordinatorGrantScopeMembershipAction, coordinatorImportInviteAction, coordinatorListBootstrapGrantsAction, coordinatorListDevicesAction, coordinatorListGroupsAction, coordinatorListJoinRequestsAction, coordinatorListScopeMembershipsAction, coordinatorListScopesAction, coordinatorRemoveDeviceAction, coordinatorRenameDeviceAction, coordinatorRenameGroupAction, coordinatorReviewJoinRequestAction, coordinatorRevokeBootstrapGrantAction, coordinatorRevokeScopeMembershipAction, coordinatorStatusSnapshot, coordinatorUnarchiveGroupAction, coordinatorUpdateScopeAction, createCoordinatorReciprocalApproval, deleteProjectScopeSettingsMapping, ensureDeviceIdentity, extractReplicationOps, filterReplicationOpsForSyncWithStatus, fingerprintPublicKey, fromJson, getCodememConfigPath, getCodememEnvOverrides, getCoordinatorGroupPreference, getSemanticIndexDiagnostics, getSyncResetState, isSummaryLikeMemory, listCoordinatorJoinRequests, listInboundScopeRejections, listMaintenanceJobs, listObserverProviderOptions, listProjectScopeCandidates, listProjectScopeSettingsMappings, listSharingDomainSettingsScopes, loadMemorySnapshotPageForPeer, loadReplicationOpsForPeer, lookupCoordinatorPeers, mergeAddresses, negotiateSyncCapability, normalizeSyncCapability, parseStrictInteger, parseSyncScopeRequest, personalScopeGrantStatusForPeer, probeAvailableCredentials, readCodememConfigFile, readCoordinatorSyncConfig, recordNonce, rejectInboundScopeFailures, requestJson, resolveDbPath, runSyncPass, schema, stripJsonComments, stripPrivateObj, stripTrailingCommas, summarizeInboundScopeRejections, syncScopeResetRequiredPayload, updatePeerAddresses, upsertCoordinatorGroupPreference, upsertProjectScopeSettingsMapping, verifySignature, writeCodememConfigFile } from "@codemem/core";
+import { CODEMEM_CONFIG_ENV_OVERRIDES, DEFAULT_TIME_WINDOW_S, LEGACY_SHARED_REVIEW_SCOPE_ID, LOCAL_DEFAULT_SCOPE_ID, LOCAL_SYNC_CAPABILITY, MemoryStore, SYNC_SCOPE_QUERY_PARAM, VERSION, VERSION as VERSION$1, addSyncScopeToBoundary, analyzeProjectScopeMappingChangeGuardrails, applyReplicationOps, buildBaseUrl, buildFilterClausesWithContext, buildRawEventEnvelopeFromHook, canonicalMemoryKind, canonicalWorkspaceIdentity, cleanupNonces, coordinatorArchiveGroupAction, coordinatorCreateGroupAction, coordinatorCreateInviteAction, coordinatorCreateScopeAction, coordinatorDisableDeviceAction, coordinatorEnableDeviceAction, coordinatorGrantScopeMembershipAction, coordinatorImportInviteAction, coordinatorListBootstrapGrantsAction, coordinatorListDevicesAction, coordinatorListGroupsAction, coordinatorListJoinRequestsAction, coordinatorListScopeMembershipsAction, coordinatorListScopesAction, coordinatorRemoveDeviceAction, coordinatorRenameDeviceAction, coordinatorRenameGroupAction, coordinatorReviewJoinRequestAction, coordinatorRevokeBootstrapGrantAction, coordinatorRevokeScopeMembershipAction, coordinatorStatusSnapshot, coordinatorUnarchiveGroupAction, coordinatorUpdateScopeAction, createCoordinatorReciprocalApproval, deleteProjectScopeSettingsMapping, ensureDeviceIdentity, extractReplicationOps, filterReplicationOpsForSyncWithStatus, fingerprintPublicKey, fromJson, getCodememConfigPath, getCodememEnvOverrides, getCoordinatorGroupPreference, getSemanticIndexDiagnostics, getSyncResetState, isSummaryLikeMemory, listCoordinatorJoinRequests, listInboundScopeRejections, listMaintenanceJobs, listObserverProviderOptions, listProjectScopeCandidates, listProjectScopeInventory, listProjectScopeSettingsMappings, listSharingDomainSettingsScopes, loadMemorySnapshotPageForPeer, loadReplicationOpsForPeer, lookupCoordinatorPeers, mergeAddresses, negotiateSyncCapability, normalizeSyncCapability, parseStrictInteger, parseSyncScopeRequest, personalScopeGrantStatusForPeer, probeAvailableCredentials, readCodememConfigFile, readCoordinatorSyncConfig, reassignProjectScopeInventoryProject, recordNonce, rejectInboundScopeFailures, requestJson, resolveDbPath, runSyncPass, schema, stripJsonComments, stripPrivateObj, stripTrailingCommas, summarizeInboundScopeRejections, syncScopeResetRequiredPayload, updatePeerAddresses, upsertCoordinatorGroupPreference, upsertProjectScopeSettingsMapping, verifySignature, writeCodememConfigFile } from "@codemem/core";
 import { serveStatic } from "@hono/node-server/serve-static";
 import { Hono } from "hono";
 import { createMiddleware } from "hono/factory";
@@ -1771,6 +1771,20 @@ function missingGuardrailConfirmations(warnings, confirmedTokens) {
 	const confirmed = new Set(confirmedTokens);
 	return warnings.filter((warning) => warning.requires_confirmation && (!warning.confirmation_token || !confirmed.has(warning.confirmation_token)));
 }
+function parseViewerProjectMappingInput(body) {
+	const id = optionalViewerInteger(body, "id");
+	const priority = optionalViewerInteger(body, "priority");
+	if (Number.isNaN(id)) throw new Error("id must be an integer");
+	if (Number.isNaN(priority)) throw new Error("priority must be an integer");
+	return {
+		id,
+		workspace_identity: optionalViewerStrictString(body, "workspace_identity"),
+		project_pattern: optionalViewerStrictString(body, "project_pattern"),
+		scope_id: optionalViewerStrictString(body, "scope_id") ?? "",
+		priority,
+		source: optionalViewerStrictString(body, "source") ?? "user"
+	};
+}
 function coordinatorAdminMutationStatus(message) {
 	if (message.includes("scope_not_found") || message.includes("membership_not_found") || message.includes("group_not_found") || message.includes("Group not found") || message.includes("Scope not found") || message.includes("device_not_enrolled_for_scope_group") || message.includes("device must be enrolled")) return 404;
 	if (message.includes("not active") || message.includes("scope_not_active") || message.includes("group_archived") || message.includes("Group is archived")) return 409;
@@ -2454,18 +2468,228 @@ function recentScopeRejectionsByPeer(store) {
 	return map;
 }
 function legacySharedReviewSummary(store) {
-	const row = store.db.prepare(`SELECT COUNT(*) AS memory_count,
-			        MAX(updated_at) AS last_updated_at
-			 FROM memory_items
-			 WHERE scope_id = ?
-			   AND active = 1
-			   AND deleted_at IS NULL`).get(LEGACY_SHARED_REVIEW_SCOPE_ID);
-	const memoryCount = Number(row?.memory_count ?? 0);
+	const rows = legacySharedReviewRows(store);
+	const memoryCount = rows.length;
+	const lastUpdatedAt = rows.reduce((current, row) => row.updated_at && (!current || row.updated_at > current) ? row.updated_at : current, null);
+	const ownedBySelf = store.buildOwnershipPredicate();
+	const candidatesByIdentity = new Map(listProjectScopeCandidates(store.db, { limit: null }).map((candidate) => [candidate.workspace_identity, candidate]));
+	const groupsByIdentity = /* @__PURE__ */ new Map();
+	for (const row of rows) {
+		const identity = canonicalWorkspaceIdentity({
+			cwd: row.cwd,
+			gitBranch: row.git_branch,
+			gitRemote: row.git_remote,
+			project: row.project,
+			workspaceId: row.workspace_id
+		});
+		const candidate = candidatesByIdentity.get(identity.value);
+		const resolvedScope = candidate?.resolved_scope_id ?? null;
+		const suggestedScope = resolvedScope && resolvedScope !== LOCAL_DEFAULT_SCOPE_ID && resolvedScope !== LEGACY_SHARED_REVIEW_SCOPE_ID ? resolvedScope : candidate?.suggested_scope_id;
+		const existing = groupsByIdentity.get(identity.value);
+		const isOwnedBySelf = ownedBySelf(row);
+		const rowUpdatedAt = row.updated_at ?? null;
+		if (existing) {
+			existing.memory_count += 1;
+			if (isOwnedBySelf) existing.reassignable_memory_count += 1;
+			else existing.peer_owned_memory_count += 1;
+			if (rowUpdatedAt && (!existing.last_updated_at || rowUpdatedAt > existing.last_updated_at)) existing.last_updated_at = rowUpdatedAt;
+			continue;
+		}
+		groupsByIdentity.set(identity.value, {
+			workspace_identity: identity.value,
+			identity_source: identity.source,
+			display_project: identity.displayProject ?? row.project ?? row.cwd ?? identity.value,
+			memory_count: 1,
+			reassignable_memory_count: isOwnedBySelf ? 1 : 0,
+			peer_owned_memory_count: isOwnedBySelf ? 0 : 1,
+			last_updated_at: rowUpdatedAt,
+			suggested_scope_id: suggestedScope ?? null,
+			suggestion_reason: suggestedScope ? candidate?.suggestion_reason ?? "Existing project mapping can be reviewed as a destination, but legacy data is not promoted automatically." : null
+		});
+	}
+	const totalGroupCount = groupsByIdentity.size;
+	const groups = [...groupsByIdentity.values()].sort((left, right) => right.memory_count - left.memory_count || (right.last_updated_at ?? "").localeCompare(left.last_updated_at ?? "") || left.workspace_identity.localeCompare(right.workspace_identity));
+	const targetScopes = listSharingDomainSettingsScopes(store.db).filter((scope) => scope.scope_id !== LOCAL_DEFAULT_SCOPE_ID && scope.scope_id !== LEGACY_SHARED_REVIEW_SCOPE_ID).map((scope) => ({
+		authority_type: scope.authority_type,
+		label: scope.label || scope.scope_id,
+		scope_id: scope.scope_id
+	}));
 	return {
 		scope_id: LEGACY_SHARED_REVIEW_SCOPE_ID,
 		memory_count: memoryCount,
 		has_data: memoryCount > 0,
-		last_updated_at: row?.last_updated_at ?? null
+		last_updated_at: lastUpdatedAt,
+		groups,
+		total_group_count: totalGroupCount,
+		target_scopes: targetScopes
+	};
+}
+function legacySharedReviewRows(store) {
+	return store.db.prepare(`SELECT m.id,
+			        m.rev,
+			        m.active,
+			        m.deleted_at,
+			        m.updated_at,
+			        m.scope_id,
+			        s.project,
+			        s.cwd,
+			        s.git_remote,
+			        s.git_branch,
+			        m.workspace_id,
+			        m.actor_id,
+			        m.origin_device_id,
+			        m.metadata_json
+			 FROM memory_items m
+			 LEFT JOIN sessions s ON s.id = m.session_id
+			 WHERE m.scope_id = ?
+			   AND m.active = 1
+			   AND m.deleted_at IS NULL`).all(LEGACY_SHARED_REVIEW_SCOPE_ID);
+}
+function legacySharedReviewConfirmationToken(input) {
+	const ownedBySelf = input.store.buildOwnershipPredicate();
+	const payload = input.rows.map((row) => {
+		const ownership = ownedBySelf(row) ? "local" : "peer";
+		return `${row.id}:${row.rev ?? 0}:${row.scope_id ?? ""}:${ownership}`;
+	}).sort().join(",");
+	return Buffer.from(`${input.workspaceIdentity}|${input.scopeId}|${payload}`, "utf8").toString("base64url");
+}
+function projectInventoryRowsForWorkspace(store, workspaceIdentity) {
+	return store.db.prepare(`SELECT m.id,
+			        m.rev,
+			        s.project,
+			        s.cwd,
+			        s.git_remote,
+			        s.git_branch,
+			        m.workspace_id,
+			        m.actor_id,
+			        m.origin_device_id,
+			        m.metadata_json
+			 FROM memory_items m
+			 LEFT JOIN sessions s ON s.id = m.session_id
+			 WHERE m.active = 1
+			   AND m.deleted_at IS NULL`).all().filter((row) => {
+		return canonicalWorkspaceIdentity({
+			cwd: row.cwd,
+			gitBranch: row.git_branch,
+			gitRemote: row.git_remote,
+			project: row.project,
+			workspaceId: row.workspace_id
+		}).value === workspaceIdentity;
+	});
+}
+function projectForgetConfirmationToken(store, rows) {
+	const ownedBySelf = store.buildOwnershipPredicate();
+	const payload = rows.map((row) => {
+		const ownership = ownedBySelf(row) ? "local" : "peer";
+		return `${row.id}:${row.rev ?? 0}:${ownership}`;
+	}).sort().join(",");
+	return Buffer.from(payload, "utf8").toString("base64url");
+}
+function forgetProjectInventoryLocalMemories(store, input) {
+	if (!input.workspaceIdentity.trim()) throw new Error("workspace_identity must be a non-empty string");
+	const rows = projectInventoryRowsForWorkspace(store, input.workspaceIdentity);
+	if (rows.length === 0) throw new Error("project identity not found");
+	const ownedBySelf = store.buildOwnershipPredicate();
+	const localRows = rows.filter((row) => ownedBySelf(row));
+	const confirmationToken = projectForgetConfirmationToken(store, rows);
+	const preview = {
+		confirmation_token: confirmationToken,
+		local_owned_memory_count: localRows.length,
+		peer_owned_memory_count: rows.length - localRows.length,
+		workspace_identity: input.workspaceIdentity
+	};
+	if (!input.confirmed) return {
+		confirmed: false,
+		...preview
+	};
+	if (input.confirmationToken !== confirmationToken) throw new Error("project memories changed before cleanup; refresh and try again");
+	store.db.transaction(() => {
+		for (const row of localRows) store.forget(row.id);
+	})();
+	return {
+		confirmed: true,
+		forgotten_memory_count: localRows.length,
+		...preview
+	};
+}
+function assertLocalDeviceScopeMembership(store, scopeId) {
+	if (scopeId === LOCAL_DEFAULT_SCOPE_ID) return;
+	if (!store.db.prepare(`SELECT 1
+			 FROM scope_memberships sm
+			 JOIN replication_scopes rs ON rs.scope_id = sm.scope_id
+			 WHERE sm.scope_id = ?
+			   AND sm.device_id = ?
+			   AND sm.status = 'active'
+			   AND rs.status = 'active'
+			   AND sm.membership_epoch >= rs.membership_epoch
+			 LIMIT 1`).get(scopeId, store.deviceId)) throw new Error(`local device is not a member of Sharing domain ${scopeId}`);
+}
+function legacySharedReviewRowsForWorkspace(store, workspaceIdentity) {
+	return legacySharedReviewRows(store).filter((row) => {
+		return canonicalWorkspaceIdentity({
+			cwd: row.cwd,
+			gitBranch: row.git_branch,
+			gitRemote: row.git_remote,
+			project: row.project,
+			workspaceId: row.workspace_id
+		}).value === workspaceIdentity;
+	});
+}
+function reassignableLegacySharedReviewRows(store, rows) {
+	const reassignableRows = rows.filter((row) => store.memoryOwnedBySelf(row));
+	if (reassignableRows.length === 0) throw new Error("This legacy review group contains only peer-owned memories; this device cannot reassign them to a Sharing domain.");
+	const currentRows = store.db.prepare(`SELECT id, scope_id, active, deleted_at
+			 FROM memory_items
+			 WHERE id IN (${reassignableRows.map(() => "?").join(",")})`).all(...reassignableRows.map((row) => row.id));
+	const currentById = new Map(currentRows.map((row) => [Number(row.id), row]));
+	for (const row of reassignableRows) {
+		const current = currentById.get(row.id);
+		if (current?.scope_id !== LEGACY_SHARED_REVIEW_SCOPE_ID || current.active !== 1 || current.deleted_at) throw new Error("legacy shared review group changed before reassignment; refresh and try again");
+	}
+	return reassignableRows;
+}
+function legacySharedReviewReassignmentPreview(store, input) {
+	if (!input.workspaceIdentity.trim()) throw new Error("workspace_identity must be a non-empty string");
+	if (!input.scopeId.trim()) throw new Error("scope_id must be a non-empty string");
+	if (input.scopeId === LOCAL_DEFAULT_SCOPE_ID) throw new Error("local-default is not a valid target for legacy shared review reassignment");
+	if (input.scopeId === LEGACY_SHARED_REVIEW_SCOPE_ID) throw new Error("legacy-shared-review is a review bucket, not an assignable Sharing domain");
+	const targetScope = listSharingDomainSettingsScopes(store.db).find((scope) => scope.scope_id === input.scopeId);
+	if (!targetScope) throw new Error(`scope_id ${input.scopeId} is not an active Sharing domain`);
+	assertLocalDeviceScopeMembership(store, input.scopeId);
+	const rows = legacySharedReviewRowsForWorkspace(store, input.workspaceIdentity);
+	if (rows.length === 0) throw new Error("legacy shared review group not found");
+	const reassignableRows = reassignableLegacySharedReviewRows(store, rows);
+	const peerDeviceIds = [...new Set(rows.map((row) => String(row.origin_device_id ?? "").trim()).filter((deviceId) => deviceId && deviceId !== store.deviceId))].sort();
+	return {
+		affected_peer_device_count: peerDeviceIds.length,
+		affected_peer_device_ids: peerDeviceIds.slice(0, 5),
+		confirmation_token: legacySharedReviewConfirmationToken({
+			rows,
+			scopeId: input.scopeId,
+			store,
+			workspaceIdentity: input.workspaceIdentity
+		}),
+		memory_count: rows.length,
+		reassignable_memory_count: reassignableRows.length,
+		scope_id: input.scopeId,
+		skipped_memory_count: rows.length - reassignableRows.length,
+		target_scope_label: targetScope.label || targetScope.scope_id,
+		warning: "This changes future sync authorization for reassignable local memories. It does not erase data already copied to peers under legacy-shared-review.",
+		workspace_identity: input.workspaceIdentity
+	};
+}
+function reassignLegacySharedReviewGroup(store, input) {
+	const preview = legacySharedReviewReassignmentPreview(store, input);
+	if (input.confirmationToken !== preview.confirmation_token) throw new Error("legacy shared review group changed before reassignment; refresh and try again");
+	const rows = reassignableLegacySharedReviewRows(store, legacySharedReviewRowsForWorkspace(store, input.workspaceIdentity));
+	store.db.transaction(() => {
+		for (const row of rows) store.reassignMemoryScope(row.id, input.scopeId);
+	})();
+	return {
+		ok: true,
+		...preview,
+		reassigned_memory_count: rows.length,
+		legacy_shared_review: legacySharedReviewSummary(store)
 	};
 }
 var SYNC_DIRECTION_WINDOW_SECONDS = 1440 * 60;
@@ -3162,32 +3386,104 @@ function syncRoutes(getStore, getSyncRuntimeStatus) {
 			local_default_scope_id: LOCAL_DEFAULT_SCOPE_ID
 		});
 	});
-	app.put("/api/sync/sharing-domains/project-mappings", async (c) => {
+	app.get("/api/sync/projects", (c) => {
+		const store = getStore();
+		const limit = Math.max(1, queryInt(c.req.query("limit"), 50));
+		const offset = Math.max(0, queryInt(c.req.query("offset"), 0));
+		return c.json(listProjectScopeInventory(store.db, {
+			identitySource: c.req.query("identity_source"),
+			limit,
+			offset,
+			query: c.req.query("q"),
+			scopeId: c.req.query("scope_id"),
+			status: c.req.query("status")
+		}));
+	});
+	app.post("/api/sync/projects/reassign-project", async (c) => {
+		const store = getStore();
+		const body = await parseViewerJsonBody(c);
+		if (!body) return c.json({ error: "invalid json" }, 400);
+		try {
+			const workspaceIdentity = optionalViewerStrictString(body, "workspace_identity") ?? "";
+			const project = optionalViewerStrictString(body, "project") ?? "";
+			const result = reassignProjectScopeInventoryProject(store.db, {
+				project,
+				workspaceIdentity
+			});
+			return c.json({
+				ok: true,
+				...result
+			});
+		} catch (error) {
+			const message = error instanceof Error ? error.message : String(error);
+			return c.json({ error: message }, message.includes("not found") ? 404 : 400);
+		}
+	});
+	app.post("/api/sync/projects/forget", async (c) => {
+		const store = getStore();
+		const body = await parseViewerJsonBody(c);
+		if (!body) return c.json({ error: "invalid json" }, 400);
+		try {
+			const workspaceIdentity = optionalViewerStrictString(body, "workspace_identity") ?? "";
+			const confirmationToken = optionalViewerStrictString(body, "confirmation_token");
+			const confirmed = body.confirmed === true;
+			const result = forgetProjectInventoryLocalMemories(store, {
+				confirmationToken,
+				confirmed,
+				workspaceIdentity
+			});
+			if (!confirmed) return c.json({
+				error: "project_forget_confirmation_required",
+				preview: result
+			}, 409);
+			return c.json({
+				ok: true,
+				...result
+			});
+		} catch (error) {
+			const message = error instanceof Error ? error.message : String(error);
+			return c.json({ error: message }, message.includes("not found") ? 404 : 400);
+		}
+	});
+	app.post("/api/sync/legacy-shared-review/reassign", async (c) => {
 		const store = getStore();
 		const body = await parseViewerJsonBody(c);
 		if (!body) return c.json({ error: "invalid json" }, 400);
 		try {
-			const id = optionalViewerInteger(body, "id");
-			const priority = optionalViewerInteger(body, "priority");
-			if (Number.isNaN(id)) return c.json({ error: "id must be an integer" }, 400);
-			if (Number.isNaN(priority)) return c.json({ error: "priority must be an integer" }, 400);
-			const workspaceIdentity = optionalViewerStrictString(body, "workspace_identity");
-			const projectPattern = optionalViewerStrictString(body, "project_pattern");
+			const workspaceIdentity = optionalViewerStrictString(body, "workspace_identity") ?? "";
 			const scopeId = optionalViewerStrictString(body, "scope_id") ?? "";
-			const source = optionalViewerStrictString(body, "source") ?? "user";
+			const confirmationToken = optionalViewerStrictString(body, "confirmation_token");
+			const confirmedOldCopies = body.confirmed_old_copies === true;
+			const preview = legacySharedReviewReassignmentPreview(store, {
+				scopeId,
+				workspaceIdentity
+			});
+			if (!confirmedOldCopies) return c.json({
+				error: "legacy_review_confirmation_required",
+				message: preview.warning,
+				preview
+			}, 409);
+			return c.json(reassignLegacySharedReviewGroup(store, {
+				confirmationToken,
+				scopeId,
+				workspaceIdentity
+			}));
+		} catch (error) {
+			const message = error instanceof Error ? error.message : String(error);
+			return c.json({ error: message }, message.includes("not found") ? 404 : 400);
+		}
+	});
+	app.put("/api/sync/sharing-domains/project-mappings", async (c) => {
+		const store = getStore();
+		const body = await parseViewerJsonBody(c);
+		if (!body) return c.json({ error: "invalid json" }, 400);
+		try {
 			const confirmedGuardrailTokens = optionalViewerStringList(body, "confirmed_guardrail_tokens");
-			const mappingInput = {
-				id,
-				workspace_identity: workspaceIdentity,
-				project_pattern: projectPattern,
-				scope_id: scopeId,
-				priority,
-				source
-			};
+			const mappingInput = parseViewerProjectMappingInput(body);
 			const analysis = analyzeProjectScopeMappingChangeGuardrails(store.db, mappingInput);
-			if (analysis.requested_workspace_identity?.startsWith("unmapped:") && scopeId !== LOCAL_DEFAULT_SCOPE_ID) return c.json({
+			if (analysis.requested_workspace_identity?.startsWith("unmapped:")) return c.json({
 				error: "unmapped_project_local_only",
-				message: "Unmapped projects need a stable path, git remote, or workspace id before assigning a non-local Sharing domain.",
+				message: "Unmapped projects need a stable path, git remote, or workspace id before assigning a Sharing domain.",
 				guardrail_warnings: analysis.warnings
 			}, 400);
 			const missingConfirmations = missingGuardrailConfirmations(analysis.warnings, confirmedGuardrailTokens);
@@ -3211,6 +3507,45 @@ function syncRoutes(getStore, getSyncRuntimeStatus) {
 			return c.json({ error: error instanceof Error ? error.message : String(error) }, 400);
 		}
 	});
+	app.put("/api/sync/sharing-domains/project-mappings/bulk", async (c) => {
+		const store = getStore();
+		const body = await parseViewerJsonBody(c);
+		if (!body) return c.json({ error: "invalid json" }, 400);
+		try {
+			const rawMappings = body.mappings;
+			if (!Array.isArray(rawMappings) || rawMappings.length === 0) return c.json({ error: "mappings must be a non-empty array" }, 400);
+			const mappingInputs = rawMappings.map((raw) => {
+				if (raw == null || typeof raw !== "object" || Array.isArray(raw)) throw new Error("each mapping must be an object");
+				return parseViewerProjectMappingInput(raw);
+			});
+			const analyses = mappingInputs.map((mappingInput) => analyzeProjectScopeMappingChangeGuardrails(store.db, mappingInput));
+			const unmapped = analyses.find((analysis) => analysis.requested_workspace_identity?.startsWith("unmapped:"));
+			if (unmapped) return c.json({
+				error: "unmapped_project_local_only",
+				message: "Unmapped projects need a stable path, git remote, or workspace id before assigning a Sharing domain.",
+				guardrail_warnings: unmapped.warnings
+			}, 400);
+			const missingConfirmations = analyses.flatMap((analysis) => missingGuardrailConfirmations(analysis.warnings, []));
+			if (missingConfirmations.length > 0) {
+				const missingCodes = [...new Set(missingConfirmations.map((warning) => warning.code))];
+				const missingTokens = [...new Set(missingConfirmations.map((warning) => warning.confirmation_token))].filter((token) => typeof token === "string" && token.length > 0);
+				return c.json({
+					error: "guardrail_confirmation_required",
+					required_guardrails: missingCodes,
+					required_guardrail_tokens: missingTokens,
+					guardrail_warnings: analyses.flatMap((analysis) => analysis.warnings)
+				}, 409);
+			}
+			const saveMappings = store.db.transaction(() => mappingInputs.map((mappingInput) => upsertProjectScopeSettingsMapping(store.db, mappingInput)));
+			return c.json({
+				ok: true,
+				mappings: saveMappings(),
+				guardrail_warnings: analyses.flatMap((analysis) => analysis.warnings)
+			});
+		} catch (error) {
+			return c.json({ error: error instanceof Error ? error.message : String(error) }, 400);
+		}
+	});
 	app.delete("/api/sync/sharing-domains/project-mappings/:id", (c) => {
 		const store = getStore();
 		const id = Number(c.req.param("id"));
@@ -4706,6 +5041,10 @@ function createApp(opts) {
 	app.route("/", rawEventsRoutes(storeFactory, sweeper));
 	app.route("/", syncRoutes(storeFactory, getSyncRuntimeStatus));
 	const staticRoot = process.env.CODEMEM_VIEWER_STATIC_DIR ?? join(import.meta.dirname ?? ".", "../static");
+	app.use("/assets/*", async (c, next) => {
+		c.header("Cache-Control", "no-cache");
+		await next();
+	});
 	app.use("/assets/*", serveStatic({
 		root: staticRoot,
 		rewriteRequestPath: (path) => path.replace(/^\/assets/, "")
@@ -4715,6 +5054,7 @@ function createApp(opts) {
 	const indexHtml = readFileSync(indexPath, "utf-8");
 	app.get("*", (c) => {
 		if (c.req.path.startsWith("/api/")) return c.json({ error: "not found" }, 404);
+		c.header("Cache-Control", "no-store");
 		return c.html(indexHtml);
 	});
 	return app;