@codemem/server 0.31.0 → 0.31.1

package/dist/index.js

@@ -1771,6 +1771,20 @@ function missingGuardrailConfirmations(warnings, confirmedTokens) {
 	const confirmed = new Set(confirmedTokens);
 	return warnings.filter((warning) => warning.requires_confirmation && (!warning.confirmation_token || !confirmed.has(warning.confirmation_token)));
 }
+function parseViewerProjectMappingInput(body) {
+	const id = optionalViewerInteger(body, "id");
+	const priority = optionalViewerInteger(body, "priority");
+	if (Number.isNaN(id)) throw new Error("id must be an integer");
+	if (Number.isNaN(priority)) throw new Error("priority must be an integer");
+	return {
+		id,
+		workspace_identity: optionalViewerStrictString(body, "workspace_identity"),
+		project_pattern: optionalViewerStrictString(body, "project_pattern"),
+		scope_id: optionalViewerStrictString(body, "scope_id") ?? "",
+		priority,
+		source: optionalViewerStrictString(body, "source") ?? "user"
+	};
+}
 function coordinatorAdminMutationStatus(message) {
 	if (message.includes("scope_not_found") || message.includes("membership_not_found") || message.includes("group_not_found") || message.includes("Group not found") || message.includes("Scope not found") || message.includes("device_not_enrolled_for_scope_group") || message.includes("device must be enrolled")) return 404;
 	if (message.includes("not active") || message.includes("scope_not_active") || message.includes("group_archived") || message.includes("Group is archived")) return 409;
@@ -2454,60 +2468,47 @@ function recentScopeRejectionsByPeer(store) {
 	return map;
 }
 function legacySharedReviewSummary(store) {
-	const row = store.db.prepare(`SELECT COUNT(*) AS memory_count,
-			        MAX(updated_at) AS last_updated_at
-			 FROM memory_items
-			 WHERE scope_id = ?
-			   AND active = 1
-			   AND deleted_at IS NULL`).get(LEGACY_SHARED_REVIEW_SCOPE_ID);
-	const memoryCount = Number(row?.memory_count ?? 0);
+	const rows = legacySharedReviewRows(store);
+	const memoryCount = rows.length;
+	const lastUpdatedAt = rows.reduce((current, row) => row.updated_at && (!current || row.updated_at > current) ? row.updated_at : current, null);
+	const ownedBySelf = store.buildOwnershipPredicate();
 	const candidatesByIdentity = new Map(listProjectScopeCandidates(store.db, { limit: null }).map((candidate) => [candidate.workspace_identity, candidate]));
-	const groupRows = store.db.prepare(`SELECT s.project,
-			        s.cwd,
-			        s.git_remote,
-			        s.git_branch,
-			        m.workspace_id,
-			        COUNT(*) AS memory_count,
-			        MAX(m.updated_at) AS last_updated_at
-			 FROM memory_items m
-			 LEFT JOIN sessions s ON s.id = m.session_id
-			 WHERE m.scope_id = ?
-			   AND m.active = 1
-			   AND m.deleted_at IS NULL
-			 GROUP BY s.project, s.cwd, s.git_remote, s.git_branch, m.workspace_id
-			 ORDER BY memory_count DESC, last_updated_at DESC`).all(LEGACY_SHARED_REVIEW_SCOPE_ID);
 	const groupsByIdentity = /* @__PURE__ */ new Map();
-	for (const group of groupRows) {
+	for (const row of rows) {
 		const identity = canonicalWorkspaceIdentity({
-			cwd: group.cwd,
-			gitBranch: group.git_branch,
-			gitRemote: group.git_remote,
-			project: group.project,
-			workspaceId: group.workspace_id
+			cwd: row.cwd,
+			gitBranch: row.git_branch,
+			gitRemote: row.git_remote,
+			project: row.project,
+			workspaceId: row.workspace_id
 		});
 		const candidate = candidatesByIdentity.get(identity.value);
 		const resolvedScope = candidate?.resolved_scope_id ?? null;
 		const suggestedScope = resolvedScope && resolvedScope !== LOCAL_DEFAULT_SCOPE_ID && resolvedScope !== LEGACY_SHARED_REVIEW_SCOPE_ID ? resolvedScope : candidate?.suggested_scope_id;
 		const existing = groupsByIdentity.get(identity.value);
-		const memoryCount = Number(group.memory_count ?? 0);
-		const lastUpdatedAt = group.last_updated_at ?? null;
+		const isOwnedBySelf = ownedBySelf(row);
+		const rowUpdatedAt = row.updated_at ?? null;
 		if (existing) {
-			existing.memory_count += memoryCount;
-			if (lastUpdatedAt && (!existing.last_updated_at || lastUpdatedAt > existing.last_updated_at)) existing.last_updated_at = lastUpdatedAt;
+			existing.memory_count += 1;
+			if (isOwnedBySelf) existing.reassignable_memory_count += 1;
+			else existing.peer_owned_memory_count += 1;
+			if (rowUpdatedAt && (!existing.last_updated_at || rowUpdatedAt > existing.last_updated_at)) existing.last_updated_at = rowUpdatedAt;
 			continue;
 		}
 		groupsByIdentity.set(identity.value, {
 			workspace_identity: identity.value,
 			identity_source: identity.source,
-			display_project: identity.displayProject ?? group.project ?? group.cwd ?? identity.value,
-			memory_count: memoryCount,
-			last_updated_at: lastUpdatedAt,
+			display_project: identity.displayProject ?? row.project ?? row.cwd ?? identity.value,
+			memory_count: 1,
+			reassignable_memory_count: isOwnedBySelf ? 1 : 0,
+			peer_owned_memory_count: isOwnedBySelf ? 0 : 1,
+			last_updated_at: rowUpdatedAt,
 			suggested_scope_id: suggestedScope ?? null,
 			suggestion_reason: suggestedScope ? candidate?.suggestion_reason ?? "Existing project mapping can be reviewed as a destination, but legacy data is not promoted automatically." : null
 		});
 	}
 	const totalGroupCount = groupsByIdentity.size;
-	const groups = [...groupsByIdentity.values()].sort((left, right) => right.memory_count - left.memory_count || (right.last_updated_at ?? "").localeCompare(left.last_updated_at ?? "") || left.workspace_identity.localeCompare(right.workspace_identity)).slice(0, 20);
+	const groups = [...groupsByIdentity.values()].sort((left, right) => right.memory_count - left.memory_count || (right.last_updated_at ?? "").localeCompare(left.last_updated_at ?? "") || left.workspace_identity.localeCompare(right.workspace_identity));
 	const targetScopes = listSharingDomainSettingsScopes(store.db).filter((scope) => scope.scope_id !== LOCAL_DEFAULT_SCOPE_ID && scope.scope_id !== LEGACY_SHARED_REVIEW_SCOPE_ID).map((scope) => ({
 		authority_type: scope.authority_type,
 		label: scope.label || scope.scope_id,
@@ -2517,28 +2518,18 @@ function legacySharedReviewSummary(store) {
 		scope_id: LEGACY_SHARED_REVIEW_SCOPE_ID,
 		memory_count: memoryCount,
 		has_data: memoryCount > 0,
-		last_updated_at: row?.last_updated_at ?? null,
+		last_updated_at: lastUpdatedAt,
 		groups,
 		total_group_count: totalGroupCount,
 		target_scopes: targetScopes
 	};
 }
-function assertLocalDeviceScopeMembership(store, scopeId) {
-	if (scopeId === LOCAL_DEFAULT_SCOPE_ID) return;
-	if (!store.db.prepare(`SELECT 1
-			 FROM scope_memberships sm
-			 JOIN replication_scopes rs ON rs.scope_id = sm.scope_id
-			 WHERE sm.scope_id = ?
-			   AND sm.device_id = ?
-			   AND sm.status = 'active'
-			   AND rs.status = 'active'
-			   AND sm.membership_epoch >= rs.membership_epoch
-			 LIMIT 1`).get(scopeId, store.deviceId)) throw new Error(`local device is not a member of Sharing domain ${scopeId}`);
-}
-function legacySharedReviewRowsForWorkspace(store, workspaceIdentity) {
+function legacySharedReviewRows(store) {
 	return store.db.prepare(`SELECT m.id,
+			        m.rev,
 			        m.active,
 			        m.deleted_at,
+			        m.updated_at,
 			        m.scope_id,
 			        s.project,
 			        s.cwd,
@@ -2552,7 +2543,89 @@ function legacySharedReviewRowsForWorkspace(store, workspaceIdentity) {
 			 LEFT JOIN sessions s ON s.id = m.session_id
 			 WHERE m.scope_id = ?
 			   AND m.active = 1
-			   AND m.deleted_at IS NULL`).all(LEGACY_SHARED_REVIEW_SCOPE_ID).filter((row) => {
+			   AND m.deleted_at IS NULL`).all(LEGACY_SHARED_REVIEW_SCOPE_ID);
+}
+function legacySharedReviewConfirmationToken(input) {
+	const ownedBySelf = input.store.buildOwnershipPredicate();
+	const payload = input.rows.map((row) => {
+		const ownership = ownedBySelf(row) ? "local" : "peer";
+		return `${row.id}:${row.rev ?? 0}:${row.scope_id ?? ""}:${ownership}`;
+	}).sort().join(",");
+	return Buffer.from(`${input.workspaceIdentity}|${input.scopeId}|${payload}`, "utf8").toString("base64url");
+}
+function projectInventoryRowsForWorkspace(store, workspaceIdentity) {
+	return store.db.prepare(`SELECT m.id,
+			        m.rev,
+			        s.project,
+			        s.cwd,
+			        s.git_remote,
+			        s.git_branch,
+			        m.workspace_id,
+			        m.actor_id,
+			        m.origin_device_id,
+			        m.metadata_json
+			 FROM memory_items m
+			 LEFT JOIN sessions s ON s.id = m.session_id
+			 WHERE m.active = 1
+			   AND m.deleted_at IS NULL`).all().filter((row) => {
+		return canonicalWorkspaceIdentity({
+			cwd: row.cwd,
+			gitBranch: row.git_branch,
+			gitRemote: row.git_remote,
+			project: row.project,
+			workspaceId: row.workspace_id
+		}).value === workspaceIdentity;
+	});
+}
+function projectForgetConfirmationToken(store, rows) {
+	const ownedBySelf = store.buildOwnershipPredicate();
+	const payload = rows.map((row) => {
+		const ownership = ownedBySelf(row) ? "local" : "peer";
+		return `${row.id}:${row.rev ?? 0}:${ownership}`;
+	}).sort().join(",");
+	return Buffer.from(payload, "utf8").toString("base64url");
+}
+function forgetProjectInventoryLocalMemories(store, input) {
+	if (!input.workspaceIdentity.trim()) throw new Error("workspace_identity must be a non-empty string");
+	const rows = projectInventoryRowsForWorkspace(store, input.workspaceIdentity);
+	if (rows.length === 0) throw new Error("project identity not found");
+	const ownedBySelf = store.buildOwnershipPredicate();
+	const localRows = rows.filter((row) => ownedBySelf(row));
+	const confirmationToken = projectForgetConfirmationToken(store, rows);
+	const preview = {
+		confirmation_token: confirmationToken,
+		local_owned_memory_count: localRows.length,
+		peer_owned_memory_count: rows.length - localRows.length,
+		workspace_identity: input.workspaceIdentity
+	};
+	if (!input.confirmed) return {
+		confirmed: false,
+		...preview
+	};
+	if (input.confirmationToken !== confirmationToken) throw new Error("project memories changed before cleanup; refresh and try again");
+	store.db.transaction(() => {
+		for (const row of localRows) store.forget(row.id);
+	})();
+	return {
+		confirmed: true,
+		forgotten_memory_count: localRows.length,
+		...preview
+	};
+}
+function assertLocalDeviceScopeMembership(store, scopeId) {
+	if (scopeId === LOCAL_DEFAULT_SCOPE_ID) return;
+	if (!store.db.prepare(`SELECT 1
+			 FROM scope_memberships sm
+			 JOIN replication_scopes rs ON rs.scope_id = sm.scope_id
+			 WHERE sm.scope_id = ?
+			   AND sm.device_id = ?
+			   AND sm.status = 'active'
+			   AND rs.status = 'active'
+			   AND sm.membership_epoch >= rs.membership_epoch
+			 LIMIT 1`).get(scopeId, store.deviceId)) throw new Error(`local device is not a member of Sharing domain ${scopeId}`);
+}
+function legacySharedReviewRowsForWorkspace(store, workspaceIdentity) {
+	return legacySharedReviewRows(store).filter((row) => {
 		return canonicalWorkspaceIdentity({
 			cwd: row.cwd,
 			gitBranch: row.git_branch,
@@ -2564,7 +2637,7 @@ function legacySharedReviewRowsForWorkspace(store, workspaceIdentity) {
 }
 function reassignableLegacySharedReviewRows(store, rows) {
 	const reassignableRows = rows.filter((row) => store.memoryOwnedBySelf(row));
-	if (reassignableRows.length === 0) throw new Error("legacy shared review group has no locally owned memories to reassign");
+	if (reassignableRows.length === 0) throw new Error("This legacy review group contains only peer-owned memories; this device cannot reassign them to a Sharing domain.");
 	const currentRows = store.db.prepare(`SELECT id, scope_id, active, deleted_at
 			 FROM memory_items
 			 WHERE id IN (${reassignableRows.map(() => "?").join(",")})`).all(...reassignableRows.map((row) => row.id));
@@ -2590,6 +2663,12 @@ function legacySharedReviewReassignmentPreview(store, input) {
 	return {
 		affected_peer_device_count: peerDeviceIds.length,
 		affected_peer_device_ids: peerDeviceIds.slice(0, 5),
+		confirmation_token: legacySharedReviewConfirmationToken({
+			rows,
+			scopeId: input.scopeId,
+			store,
+			workspaceIdentity: input.workspaceIdentity
+		}),
 		memory_count: rows.length,
 		reassignable_memory_count: reassignableRows.length,
 		scope_id: input.scopeId,
@@ -2601,8 +2680,11 @@ function legacySharedReviewReassignmentPreview(store, input) {
 }
 function reassignLegacySharedReviewGroup(store, input) {
 	const preview = legacySharedReviewReassignmentPreview(store, input);
+	if (input.confirmationToken !== preview.confirmation_token) throw new Error("legacy shared review group changed before reassignment; refresh and try again");
 	const rows = reassignableLegacySharedReviewRows(store, legacySharedReviewRowsForWorkspace(store, input.workspaceIdentity));
-	for (const row of rows) store.reassignMemoryScope(row.id, input.scopeId);
+	store.db.transaction(() => {
+		for (const row of rows) store.reassignMemoryScope(row.id, input.scopeId);
+	})();
 	return {
 		ok: true,
 		...preview,
@@ -3337,6 +3419,32 @@ function syncRoutes(getStore, getSyncRuntimeStatus) {
 			return c.json({ error: message }, message.includes("not found") ? 404 : 400);
 		}
 	});
+	app.post("/api/sync/projects/forget", async (c) => {
+		const store = getStore();
+		const body = await parseViewerJsonBody(c);
+		if (!body) return c.json({ error: "invalid json" }, 400);
+		try {
+			const workspaceIdentity = optionalViewerStrictString(body, "workspace_identity") ?? "";
+			const confirmationToken = optionalViewerStrictString(body, "confirmation_token");
+			const confirmed = body.confirmed === true;
+			const result = forgetProjectInventoryLocalMemories(store, {
+				confirmationToken,
+				confirmed,
+				workspaceIdentity
+			});
+			if (!confirmed) return c.json({
+				error: "project_forget_confirmation_required",
+				preview: result
+			}, 409);
+			return c.json({
+				ok: true,
+				...result
+			});
+		} catch (error) {
+			const message = error instanceof Error ? error.message : String(error);
+			return c.json({ error: message }, message.includes("not found") ? 404 : 400);
+		}
+	});
 	app.post("/api/sync/legacy-shared-review/reassign", async (c) => {
 		const store = getStore();
 		const body = await parseViewerJsonBody(c);
@@ -3344,6 +3452,7 @@ function syncRoutes(getStore, getSyncRuntimeStatus) {
 		try {
 			const workspaceIdentity = optionalViewerStrictString(body, "workspace_identity") ?? "";
 			const scopeId = optionalViewerStrictString(body, "scope_id") ?? "";
+			const confirmationToken = optionalViewerStrictString(body, "confirmation_token");
 			const confirmedOldCopies = body.confirmed_old_copies === true;
 			const preview = legacySharedReviewReassignmentPreview(store, {
 				scopeId,
@@ -3355,6 +3464,7 @@ function syncRoutes(getStore, getSyncRuntimeStatus) {
 				preview
 			}, 409);
 			return c.json(reassignLegacySharedReviewGroup(store, {
+				confirmationToken,
 				scopeId,
 				workspaceIdentity
 			}));
@@ -3368,23 +3478,8 @@ function syncRoutes(getStore, getSyncRuntimeStatus) {
 		const body = await parseViewerJsonBody(c);
 		if (!body) return c.json({ error: "invalid json" }, 400);
 		try {
-			const id = optionalViewerInteger(body, "id");
-			const priority = optionalViewerInteger(body, "priority");
-			if (Number.isNaN(id)) return c.json({ error: "id must be an integer" }, 400);
-			if (Number.isNaN(priority)) return c.json({ error: "priority must be an integer" }, 400);
-			const workspaceIdentity = optionalViewerStrictString(body, "workspace_identity");
-			const projectPattern = optionalViewerStrictString(body, "project_pattern");
-			const scopeId = optionalViewerStrictString(body, "scope_id") ?? "";
-			const source = optionalViewerStrictString(body, "source") ?? "user";
 			const confirmedGuardrailTokens = optionalViewerStringList(body, "confirmed_guardrail_tokens");
-			const mappingInput = {
-				id,
-				workspace_identity: workspaceIdentity,
-				project_pattern: projectPattern,
-				scope_id: scopeId,
-				priority,
-				source
-			};
+			const mappingInput = parseViewerProjectMappingInput(body);
 			const analysis = analyzeProjectScopeMappingChangeGuardrails(store.db, mappingInput);
 			if (analysis.requested_workspace_identity?.startsWith("unmapped:")) return c.json({
 				error: "unmapped_project_local_only",
@@ -3412,6 +3507,45 @@ function syncRoutes(getStore, getSyncRuntimeStatus) {
 			return c.json({ error: error instanceof Error ? error.message : String(error) }, 400);
 		}
 	});
+	app.put("/api/sync/sharing-domains/project-mappings/bulk", async (c) => {
+		const store = getStore();
+		const body = await parseViewerJsonBody(c);
+		if (!body) return c.json({ error: "invalid json" }, 400);
+		try {
+			const rawMappings = body.mappings;
+			if (!Array.isArray(rawMappings) || rawMappings.length === 0) return c.json({ error: "mappings must be a non-empty array" }, 400);
+			const mappingInputs = rawMappings.map((raw) => {
+				if (raw == null || typeof raw !== "object" || Array.isArray(raw)) throw new Error("each mapping must be an object");
+				return parseViewerProjectMappingInput(raw);
+			});
+			const analyses = mappingInputs.map((mappingInput) => analyzeProjectScopeMappingChangeGuardrails(store.db, mappingInput));
+			const unmapped = analyses.find((analysis) => analysis.requested_workspace_identity?.startsWith("unmapped:"));
+			if (unmapped) return c.json({
+				error: "unmapped_project_local_only",
+				message: "Unmapped projects need a stable path, git remote, or workspace id before assigning a Sharing domain.",
+				guardrail_warnings: unmapped.warnings
+			}, 400);
+			const missingConfirmations = analyses.flatMap((analysis) => missingGuardrailConfirmations(analysis.warnings, []));
+			if (missingConfirmations.length > 0) {
+				const missingCodes = [...new Set(missingConfirmations.map((warning) => warning.code))];
+				const missingTokens = [...new Set(missingConfirmations.map((warning) => warning.confirmation_token))].filter((token) => typeof token === "string" && token.length > 0);
+				return c.json({
+					error: "guardrail_confirmation_required",
+					required_guardrails: missingCodes,
+					required_guardrail_tokens: missingTokens,
+					guardrail_warnings: analyses.flatMap((analysis) => analysis.warnings)
+				}, 409);
+			}
+			const saveMappings = store.db.transaction(() => mappingInputs.map((mappingInput) => upsertProjectScopeSettingsMapping(store.db, mappingInput)));
+			return c.json({
+				ok: true,
+				mappings: saveMappings(),
+				guardrail_warnings: analyses.flatMap((analysis) => analysis.warnings)
+			});
+		} catch (error) {
+			return c.json({ error: error instanceof Error ? error.message : String(error) }, 400);
+		}
+	});
 	app.delete("/api/sync/sharing-domains/project-mappings/:id", (c) => {
 		const store = getStore();
 		const id = Number(c.req.param("id"));