@codemem/server 0.46.0-alpha.1 → 0.46.0-alpha.2

package/dist/index.js

@@ -1,6 +1,6 @@
 import { existsSync, readFileSync } from "node:fs";
 import { dirname, isAbsolute, join, posix, resolve, win32 } from "node:path";
-import { ACCESS_CLEANUP_OP_TYPE, CODEMEM_CONFIG_ENV_OVERRIDES, CodememConfigMutationError, CoordinatorReciprocalApprovalRequestChangedError, DEFAULT_TIME_WINDOW_S, LEGACY_SHARED_REVIEW_SCOPE_ID, LOCAL_DEFAULT_SCOPE_ID, LOCAL_SYNC_CAPABILITY, LOCAL_SYNC_FEATURES, LegacyTeamSetupAdditiveConvergenceError, LegacyTeamSetupRosterCapacityError, MEMORY_FILTER_FIELD_TYPES, MEMORY_FILTER_NAMES, MEMORY_KIND_DESCRIPTIONS, MemoryStore, ObserverClient, PROMPT_TRANSPORT_PROTOCOL_RANGE, REMEMBER_MEMORY_KINDS, RawEventIngestValidationError, RecipientPolicyEdgeRequestError, RecipientPolicyTeamRenameError, RemoteCoordinatorRequestError, SCOPE_MEMBERSHIP_REVOCATION_LIMITATION, SYNC_AUTHORIZATION_REFRESH_HEADER, SYNC_CAPABILITY_HEADER, SYNC_FEATURES_HEADER, SYNC_SCOPE_QUERY_PARAM, VERSION, VERSION as VERSION$1, VIEWER_IDENTITY_TARGET_KEYS, VIEWER_SERVICE_DISCRIMINATOR, addSyncScopeToBoundary, analyzeProjectScopeMappingChangeGuardrails, applyLegacyTeamSetupCompletionManifest, applyLegacyTeamSetupCompletionManifestAndReturnActivation, applyReplicationOps, areLegacyTeamSetupCompletionPolicyFactsAdditivelyCompatible, automaticRecallHealth, buildAuthHeaders, buildBaseUrl, buildDirectPeerAuthHeaders, buildDistillReport, buildFilterClausesWithContext, buildRawEventEnvelopeFromCodexHook, buildRawEventEnvelopeFromHook, buildRawEventEnvelopeFromPiEvent, buildViewerIdentityTarget, canonicalCoordinatorLegacyTeamCompletionManifestJson, canonicalMemoryKind, canonicalWorkspaceIdentity, claimRecipientPolicyActorMutations, claimRecipientPolicyPublicationMutation, cleanupNonces, clearLegacyTeamSetupDeviceDecision, clonePromptPackAttempt, coerceObserverCommand, commitDeviceIdentityBindings, commitRecipientPolicyEdges, containLegacyTeamSetupCompletionConflict, coordinatorArchiveGroupAction, coordinatorCreateAddDeviceInviteAction, coordinatorCreateGroupAction, coordinatorCreateInviteAction, coordinatorCreateLegacyTeamCompletionAction, coordinatorCreateScopeAction, coordinatorDisableDeviceAction, coordinatorEnableDeviceAction, coordinatorGetLegacyTeamCompletionAction, coordinatorGrantScopeMembershipAction, coordinatorImportInviteAction, coordinatorListBootstrapGrantsAction, coordinatorListConsumedTeamInvitesAction, coordinatorListDevicesAction, coordinatorListGroupsAction, coordinatorListJoinRequestsAction, coordinatorListLegacyTeamCompletionsAction, coordinatorListReviewedRecipientInviteEvidenceAction, coordinatorListScopeMembershipsAction, coordinatorListScopesAction, coordinatorRemoveDeviceAction, coordinatorRenameDeviceAction, coordinatorRenameGroupAction, coordinatorReviewJoinRequestAction, coordinatorRevokeBootstrapGrantAction, coordinatorRevokeScopeMembershipAction, coordinatorStatusSnapshot, coordinatorUnarchiveGroupAction, coordinatorUpdateScopeAction, countShareableProjectMemories, createCoordinatorReciprocalApproval, decodeInvitePayload, dedupeOrderedIds, defaultSpaceScopeIdForGroup, deleteProjectScopeSettingsMapping, deriveLegacyTeamSetupCompletionManifest, detectInstallKind, deterministicPolicyTeamId, diagnoseStalePeerReceivedRows, discoverLegacyTeamCandidates, ensureDeviceIdentity, executeShareProvisioning, extractInvitePayload, extractReplicationOps, filterReplicationOpsForSyncWithStatus, fingerprintPublicKey, formatHostPort, friendlyDeviceName, fromJson, getCodememConfigPath, getCodememEnvOverrides, getCoordinatorEnrollmentReconciliationIssueSummary, getCoordinatorGroupPreference, getLegacyTeamSetupDraft, getRecipientPolicyAuthorityState, getSemanticIndexDiagnostics, getSyncResetState, getUpdateStatus, ingestRawEvents, inspectFreshLegacyTeamSetupActivation, inspectLegacyTeamSetupActivation, inviteTokenDigest, isAutomaticRecallMeasurement, isLegacyTeamCandidateSelectable, isLegacyTeamSetupProjectMappingIdentity, isPeerTrustBindingCompatible, isProjectSyncEnablementError, isScopedSyncCapability, judgeDistillReport, legacyTeamCandidateId, legacyTeamCandidateProjectInventory, legacyTeamCanonicalProjectRef, legacyTeamDeviceRef, legacyTeamResolvedProjectRef, legacyTeamSetupApiErrorCode, listAuthorizedScopesForPeer, listCoordinatorJoinRequests, listDeviceIdentityInventory, listInboundScopeRejections, listLegacyRecipientPolicyProjections, listMaintenanceJobs, listObserverProviderOptions, listPerPeerScopeSyncState, listProjectScopeCandidates, listProjectScopeInventory, listProjectScopeSettingsMappings, listRecipientPolicyIntent, listRecipientPolicyReview, listSharingDomainSettingsScopes, loadMemorySnapshotPageForPeer, loadReplicationOpsForPeer, lookupCoordinatorPeers, memoryFilterValueMatchesType, mergeAddresses, migrateRecipientPolicyIntent, mutateCodememConfigFile, negotiateSyncCapability, normalizeAddress, normalizeHumanPresentationName, normalizeSyncCapability, normalizeSyncFeatures, normalizeTeammateName, parseAcceptedProjectIntent, parsePositiveMemoryId, parseReassignScopePayload, parseRecipientPolicyEdgeCommitRequest, parseStrictInteger, parseSyncScopeRequest, persistShareOperation, personalScopeGrantStatusForPeer, planShareOperation, previewDeviceIdentityBindings, previewLegacyTeamSetupActivation, previewRecipientPolicyEdges, previewRecipientPolicyOnboarding, previewRecipientPolicyOnboardingFromReviewedIntent, probeAvailableCredentials, projectMatchesFilter, projectShareLifecycle, promptPackArtifactFingerprint, readCodememConfigFile, readCoordinatorSyncConfig, reassignProjectScopeInventoryProject, recipientInviteAuthoritativeIdentityId, recipientPolicyDigest, recipientReviewedIntentDigest, reconcileCoordinatorEnrollmentSnapshot, reconcileRecipientPolicyProject, reconcileShareOperationAcceptance, reconstructLegacyTeamSetupCompletionManifest, recordAutomaticRecall, recordHighestObservedDirectSignatureVersion, recordNonce, recordPromptPackArtifacts, recordPromptPackTerminal, refreshAuthorizedCoordinatorPeerTrust, refreshConfiguredScopeMembershipCache, refreshLegacyTeamCandidate, rejectInboundScopeFailures, renameRecipientPolicyTeam, replayLegacyTeamSetupActivation, requestJson, requireLegacyTeamSetupAccessDeltaWithinLimit, resolveDbPath, resolveProject, resolveProjectRoot, resolveRecipientPolicyReview, resolveRecipientPolicyReviewBulk, runSyncPass, schema, serializeRecipientPolicyCoordinatorGroupMutation, serializeRecipientPolicyPublicationMutation, serializeRecipientPolicyTeamMutation, setLegacyTeamSetupDeviceAssignment, setLegacyTeamSetupDeviceDecision, setLegacyTeamSetupProjectMapping, storeVectors, summarizeInboundScopeRejections, summaryLikeSqlPredicate, supportsSyncFeature, syncScopeResetRequiredPayload, toJson, tryUpdateRetrievalDelivery, updatePeerAddresses, upsertCoordinatorGroupPreference, upsertProjectScopeSettingsMapping, validateLegacyTeamSetupCompletionManifest, validateLegacyTeamSetupCompletionManifestBinding, validateRawEvents, verifyDirectPeerSignature, verifyRecipientReviewedIntent, verifySignature } from "@codemem/core";
+import { ACCESS_CLEANUP_OP_TYPE, CODEMEM_CONFIG_ENV_OVERRIDES, CodememConfigMutationError, CoordinatorReciprocalApprovalRequestChangedError, DEFAULT_TIME_WINDOW_S, LEGACY_SHARED_REVIEW_SCOPE_ID, LOCAL_DEFAULT_SCOPE_ID, LOCAL_SYNC_CAPABILITY, LOCAL_SYNC_FEATURES, LegacyTeamSetupAdditiveConvergenceError, LegacyTeamSetupRosterCapacityError, MEMORY_FILTER_FIELD_TYPES, MEMORY_FILTER_NAMES, MEMORY_KIND_DESCRIPTIONS, MemoryStore, ObserverClient, PROMPT_TRANSPORT_PROTOCOL_RANGE, REMEMBER_MEMORY_KINDS, RawEventIngestValidationError, RecipientPolicyEdgeRequestError, RecipientPolicyTeamRenameError, RemoteCoordinatorRequestError, SCOPE_MEMBERSHIP_REVOCATION_LIMITATION, SYNC_AUTHORIZATION_REFRESH_HEADER, SYNC_CAPABILITY_HEADER, SYNC_FEATURES_HEADER, SYNC_SCOPE_QUERY_PARAM, VERSION, VERSION as VERSION$1, VIEWER_IDENTITY_TARGET_KEYS, VIEWER_SERVICE_DISCRIMINATOR, addSyncScopeToBoundary, analyzeProjectScopeMappingChangeGuardrails, applyLegacyTeamSetupCompletionManifest, applyLegacyTeamSetupCompletionManifestAndReturnActivation, applyReplicationOps, areLegacyTeamSetupCompletionPolicyFactsAdditivelyCompatible, automaticRecallHealth, buildAuthHeaders, buildBaseUrl, buildDirectPeerAuthHeaders, buildDistillReport, buildFilterClausesWithContext, buildPiFlushSignalFromEvent, buildRawEventEnvelopeFromCodexHook, buildRawEventEnvelopeFromHook, buildRawEventEnvelopeFromPiEvent, buildViewerIdentityTarget, canonicalCoordinatorLegacyTeamCompletionManifestJson, canonicalMemoryKind, canonicalWorkspaceIdentity, claimRecipientPolicyActorMutations, claimRecipientPolicyPublicationMutation, cleanupNonces, clearLegacyTeamSetupDeviceDecision, clonePromptPackAttempt, coerceObserverCommand, commitDeviceIdentityBindings, commitRecipientPolicyEdges, containLegacyTeamSetupCompletionConflict, coordinatorArchiveGroupAction, coordinatorCreateAddDeviceInviteAction, coordinatorCreateGroupAction, coordinatorCreateInviteAction, coordinatorCreateLegacyTeamCompletionAction, coordinatorCreateScopeAction, coordinatorDisableDeviceAction, coordinatorEnableDeviceAction, coordinatorGetLegacyTeamCompletionAction, coordinatorGrantScopeMembershipAction, coordinatorImportInviteAction, coordinatorListBootstrapGrantsAction, coordinatorListConsumedTeamInvitesAction, coordinatorListDevicesAction, coordinatorListGroupsAction, coordinatorListJoinRequestsAction, coordinatorListLegacyTeamCompletionsAction, coordinatorListReviewedRecipientInviteEvidenceAction, coordinatorListScopeMembershipsAction, coordinatorListScopesAction, coordinatorRemoveDeviceAction, coordinatorRenameDeviceAction, coordinatorRenameGroupAction, coordinatorReviewJoinRequestAction, coordinatorRevokeBootstrapGrantAction, coordinatorRevokeScopeMembershipAction, coordinatorStatusSnapshot, coordinatorUnarchiveGroupAction, coordinatorUpdateScopeAction, countShareableProjectMemories, createCoordinatorReciprocalApproval, decodeInvitePayload, dedupeOrderedIds, defaultSpaceScopeIdForGroup, deleteProjectScopeSettingsMapping, deriveLegacyTeamSetupCompletionManifest, detectInstallKind, deterministicPolicyTeamId, diagnoseStalePeerReceivedRows, discoverLegacyTeamCandidates, ensureDeviceIdentity, executeShareProvisioning, extractInvitePayload, extractReplicationOps, filterReplicationOpsForSyncWithStatus, fingerprintPublicKey, formatHostPort, friendlyDeviceName, fromJson, getCodememConfigPath, getCodememEnvOverrides, getCoordinatorEnrollmentReconciliationIssueSummary, getCoordinatorGroupPreference, getLegacyTeamSetupDraft, getRecipientPolicyAuthorityState, getSemanticIndexDiagnostics, getSyncResetState, getUpdateStatus, ingestRawEvents, inspectFreshLegacyTeamSetupActivation, inspectLegacyTeamSetupActivation, inviteTokenDigest, isAutomaticRecallMeasurement, isLegacyTeamCandidateSelectable, isLegacyTeamSetupProjectMappingIdentity, isPeerTrustBindingCompatible, isProjectSyncEnablementError, isScopedSyncCapability, judgeDistillReport, legacyTeamCandidateId, legacyTeamCandidateProjectInventory, legacyTeamCanonicalProjectRef, legacyTeamDeviceRef, legacyTeamResolvedProjectRef, legacyTeamSetupApiErrorCode, listAuthorizedScopesForPeer, listCoordinatorJoinRequests, listDeviceIdentityInventory, listInboundScopeRejections, listLegacyRecipientPolicyProjections, listMaintenanceJobs, listObserverProviderOptions, listPerPeerScopeSyncState, listProjectScopeCandidates, listProjectScopeInventory, listProjectScopeSettingsMappings, listRecipientPolicyIntent, listRecipientPolicyReview, listSharingDomainSettingsScopes, loadMemorySnapshotPageForPeer, loadReplicationOpsForPeer, lookupCoordinatorPeers, memoryFilterValueMatchesType, mergeAddresses, migrateRecipientPolicyIntent, mutateCodememConfigFile, negotiateSyncCapability, normalizeAddress, normalizeHumanPresentationName, normalizeSyncCapability, normalizeSyncFeatures, normalizeTeammateName, parseAcceptedProjectIntent, parsePositiveMemoryId, parseReassignScopePayload, parseRecipientPolicyEdgeCommitRequest, parseStrictInteger, parseSyncScopeRequest, persistShareOperation, personalScopeGrantStatusForPeer, planShareOperation, previewDeviceIdentityBindings, previewLegacyTeamSetupActivation, previewRecipientPolicyEdges, previewRecipientPolicyOnboarding, previewRecipientPolicyOnboardingFromReviewedIntent, probeAvailableCredentials, projectMatchesFilter, projectShareLifecycle, promptPackArtifactFingerprint, readCodememConfigFile, readCoordinatorSyncConfig, reassignProjectScopeInventoryProject, recipientInviteAuthoritativeIdentityId, recipientPolicyDigest, recipientReviewedIntentDigest, reconcileCoordinatorEnrollmentSnapshot, reconcileRecipientPolicyProject, reconcileShareOperationAcceptance, reconstructLegacyTeamSetupCompletionManifest, recordAutomaticRecall, recordHighestObservedDirectSignatureVersion, recordNonce, recordPromptPackArtifacts, recordPromptPackTerminal, refreshAuthorizedCoordinatorPeerTrust, refreshConfiguredScopeMembershipCache, refreshLegacyTeamCandidate, rejectInboundScopeFailures, renameRecipientPolicyTeam, replayLegacyTeamSetupActivation, requestJson, requireLegacyTeamSetupAccessDeltaWithinLimit, resolveDbPath, resolveProject, resolveProjectRoot, resolveRecipientPolicyReview, resolveRecipientPolicyReviewBulk, runSyncPass, schema, serializeRecipientPolicyCoordinatorGroupMutation, serializeRecipientPolicyPublicationMutation, serializeRecipientPolicyTeamMutation, setLegacyTeamSetupDeviceAssignment, setLegacyTeamSetupDeviceDecision, setLegacyTeamSetupProjectMapping, storeVectors, summarizeInboundScopeRejections, summaryLikeSqlPredicate, supportsSyncFeature, syncScopeResetRequiredPayload, toJson, tryUpdateRetrievalDelivery, updatePeerAddresses, upsertCoordinatorGroupPreference, upsertProjectScopeSettingsMapping, validateLegacyTeamSetupCompletionManifest, validateLegacyTeamSetupCompletionManifestBinding, validateRawEvents, verifyDirectPeerSignature, verifyRecipientReviewedIntent, verifySignature } from "@codemem/core";
 import { serveStatic } from "@hono/node-server/serve-static";
 import { Hono } from "hono";
 import { createMiddleware } from "hono/factory";
@@ -2675,21 +2675,26 @@ function resolveRawEventInboxDirectory(dbPath, homeDir = homedir()) {
 	const target = createHash("sha256").update(resolve(dbPath)).digest("hex").slice(0, 24);
 	return join(homeDir, ".codemem", INBOX_DIRECTORY_NAME, target);
 }
-function entryContent(request, flushBoundary) {
+function entryContent(request, flushBoundary, boundary) {
 	return {
 		version: 1,
 		request,
-		flush_boundary: flushBoundary
+		flush_boundary: flushBoundary,
+		...boundary ? { boundary: {
+			source: boundary.source,
+			stream_id: boundary.streamId,
+			...boundary.id ? { id: boundary.id } : {}
+		} } : {}
 	};
 }
-function storedEntry(request, flushBoundary, enqueueOrder) {
+function storedEntry(request, flushBoundary, boundary, enqueueOrder) {
 	return {
-		...entryContent(request, flushBoundary),
+		...entryContent(request, flushBoundary, boundary),
 		enqueue_order: enqueueOrder.toString()
 	};
 }
 function entryContentId(entry) {
-	return contentId(JSON.stringify(entryContent(entry.request, entry.flushBoundary)));
+	return contentId(JSON.stringify(entryContent(entry.request, entry.flushBoundary, entry.boundary)));
 }
 function inboxFileName(enqueueOrder, id) {
 	return `${enqueueOrder.toString().padStart(24, "0")}-${id}.json`;
@@ -2749,10 +2754,17 @@ async function ensurePrivateDirectory(path) {
 function parseStoredEntry(serialized) {
 	const parsed = JSON.parse(serialized);
 	if (parsed.version !== 1 || typeof parsed.enqueue_order !== "string" || !/^[1-9]\d*$/u.test(parsed.enqueue_order) || parsed.request == null || typeof parsed.request !== "object" || Array.isArray(parsed.request) || typeof parsed.flush_boundary !== "boolean") throw new Error("invalid raw-event inbox entry");
+	const storedBoundary = parsed.boundary;
+	if (storedBoundary !== void 0 && (typeof storedBoundary.source !== "string" || storedBoundary.source.trim() === "" || typeof storedBoundary.stream_id !== "string" || storedBoundary.stream_id.trim() === "" || storedBoundary.id !== void 0 && (typeof storedBoundary.id !== "string" || storedBoundary.id.trim() === ""))) throw new Error("invalid raw-event inbox boundary");
 	return {
 		entry: {
 			request: parsed.request,
-			flushBoundary: parsed.flush_boundary
+			flushBoundary: parsed.flush_boundary,
+			...storedBoundary ? { boundary: {
+				source: storedBoundary.source,
+				streamId: storedBoundary.stream_id,
+				...storedBoundary.id ? { id: storedBoundary.id } : {}
+			} } : {}
 		},
 		enqueueOrder: BigInt(parsed.enqueue_order)
 	};
@@ -2803,7 +2815,8 @@ var FileRawEventInbox = class {
 		const flushBoundary = options.flushBoundary === true;
 		const id = entryContentId({
 			request,
-			flushBoundary
+			flushBoundary,
+			boundary: options.boundary
 		});
 		await ensurePrivateDirectory(this.directory);
 		const entries = await readdir(this.directory, { withFileTypes: true });
@@ -2823,7 +2836,7 @@ var FileRawEventInbox = class {
 			throw error;
 		}
 		const enqueueOrder = await this.allocateEnqueueOrder(entries);
-		const serialized = JSON.stringify(storedEntry(request, flushBoundary, enqueueOrder));
+		const serialized = JSON.stringify(storedEntry(request, flushBoundary, options.boundary, enqueueOrder));
 		const destination = join(this.directory, inboxFileName(enqueueOrder, id));
 		const temporary = join(this.directory, `.${id}.${process.pid}.${randomUUID()}.tmp`);
 		try {
@@ -3024,10 +3037,11 @@ function createViewerRawEventInbox(options) {
 		onCorruptEntries: options.onCorruptEntries,
 		onBacklog: options.onBacklog,
 		onBacklogRecovered: options.onBacklogRecovered,
-		processEntry: async ({ request, flushBoundary }) => {
+		processEntry: async ({ request, flushBoundary, boundary }) => {
 			const result = ingestRawEvents(store, request);
 			nudgeRawEventSessions(options.sweeper, result.sessions);
-			if (flushBoundary && isClaudeBoundaryEnvelope(request)) await flushRawEventBoundarySessions(options.sweeper, result.sessions);
+			if (boundary) await options.sweeper?.flushBoundary(boundary.streamId, boundary.source);
+			else if (flushBoundary && isClaudeBoundaryEnvelope(request)) await flushRawEventBoundarySessions(options.sweeper, result.sessions);
 		}
 	});
 	return {
@@ -3155,15 +3169,94 @@ async function enqueueRawEventRequest(options) {
 	if (!target.ok) return options.c.json(target.body, target.status);
 	const validation = validateRawEvents(options.request);
 	try {
-		await options.inbox.enqueue(validation.request, { flushBoundary: options.flushBoundary });
+		await options.inbox.enqueue(validation.request, options.boundary ? {
+			flushBoundary: options.flushBoundary,
+			boundary: options.boundary
+		} : { flushBoundary: options.flushBoundary });
 	} catch (error) {
 		return boundedInboxErrorResponse(options.c, error);
 	}
+	const accepted = options.acceptedCount ?? validation.received;
 	return options.c.json({
-		accepted: validation.received,
-		queued: validation.received
+		accepted,
+		queued: accepted
 	}, 202);
 }
+function piEventName(payload) {
+	for (const key of [
+		"piEvent",
+		"pi_event",
+		"event",
+		"type"
+	]) {
+		const value = payload[key];
+		if (typeof value === "string" && value.trim()) return value.trim();
+	}
+	return "";
+}
+function piInboxBoundary(payload, envelope, signal) {
+	if (!["session_before_compact", "session_shutdown"].includes(piEventName(payload))) return;
+	const streamId = envelope?.session_stream_id ?? signal?.session_id;
+	if (!streamId) return;
+	const envelopeTimestamp = envelope?.payload.timestamp;
+	const id = typeof envelopeTimestamp === "string" ? envelopeTimestamp : signal?.ts;
+	return {
+		source: "pi",
+		streamId,
+		...id ? { id } : {}
+	};
+}
+async function postPiHookRequest(c, getStore, sweeper, inbox, inboxTarget) {
+	const result = await parseJsonObjectBody(c, MAX_RAW_EVENTS_BODY_BYTES);
+	if (result instanceof Response) return result;
+	const payload = result;
+	try {
+		const target = validateViewerTarget(inbox && inboxTarget ? inboxTarget : getStore(), payload, { requirePairedTargets: true });
+		if (!target.ok) return c.json(target.body, target.status);
+		const untargeted = untargetedPayload(payload);
+		const envelope = buildRawEventEnvelopeFromPiEvent(untargeted);
+		const signal = buildPiFlushSignalFromEvent(untargeted);
+		const boundary = piInboxBoundary(untargeted, envelope, signal);
+		if (envelope === null && signal === null) return c.json({
+			inserted: 0,
+			skipped: 1
+		});
+		if (inbox) return await enqueueRawEventRequest({
+			c,
+			getStore,
+			inbox,
+			inboxTarget,
+			payload,
+			request: envelope ? {
+				...envelope,
+				source: "pi"
+			} : {
+				source: "pi",
+				session_stream_id: signal?.session_id,
+				events: []
+			},
+			flushBoundary: false,
+			...boundary ? {
+				boundary,
+				acceptedCount: 1
+			} : {}
+		});
+		if (envelope === null) return c.json({
+			inserted: 0,
+			skipped: 1
+		});
+		const ingestResult = await ingestNormalizedEnvelope(getStore(), sweeper, {
+			...envelope,
+			source: "pi"
+		});
+		return c.json({
+			inserted: ingestResult.inserted,
+			skipped: ingestResult.skipped
+		});
+	} catch (error) {
+		return boundedIngestErrorResponse(c, error);
+	}
+}
 async function postRawEventRequest(c, getStore, sweeper, inbox, inboxTarget) {
 	const result = await parseJsonObjectBody(c, MAX_RAW_EVENTS_BODY_BYTES);
 	if (result instanceof Response) return result;
@@ -3197,6 +3290,81 @@ async function ingestNormalizedEnvelope(store, sweeper, envelope, flushBoundary
 	if (flushBoundary && isClaudeBoundaryEnvelope(envelope)) await flushRawEventBoundarySessions(sweeper, result.sessions);
 	return result;
 }
+async function postClaudeHookRequest(c, getStore, sweeper, inbox, inboxTarget, transcriptDiagnostics) {
+	const result = await parseJsonObjectBody(c, MAX_RAW_EVENTS_BODY_BYTES);
+	if (result instanceof Response) return result;
+	const payload = result;
+	try {
+		const target = validateViewerTarget(inbox && inboxTarget ? inboxTarget : getStore(), payload, { requirePairedTargets: true });
+		if (!target.ok) return c.json(target.body, target.status);
+		let transcriptOutcome = null;
+		const envelope = buildRawEventEnvelopeFromHook(untargetedPayload(payload), {
+			transcriptPolicy: {
+				trust: "restricted",
+				approvedRoots: [claudeTranscriptRoot()]
+			},
+			onTranscriptOutcome: (outcome) => {
+				transcriptOutcome = outcome;
+				transcriptDiagnostics.record("claude", outcome);
+			}
+		});
+		if (envelope === null) return c.json(transcriptSkipResponse(transcriptOutcome));
+		const flushBoundary = c.req.header("x-codemem-boundary-flush") === "1";
+		if (inbox) return await enqueueRawEventRequest({
+			c,
+			getStore,
+			inbox,
+			inboxTarget,
+			payload,
+			request: { ...envelope },
+			flushBoundary
+		});
+		const ingestResult = await ingestNormalizedEnvelope(getStore(), sweeper, envelope, flushBoundary);
+		return c.json({
+			inserted: ingestResult.inserted,
+			skipped: ingestResult.skipped
+		});
+	} catch (error) {
+		return boundedIngestErrorResponse(c, error);
+	}
+}
+async function postCodexHookRequest(c, getStore, sweeper, inbox, inboxTarget, transcriptDiagnostics) {
+	const result = await parseJsonObjectBody(c, MAX_RAW_EVENTS_BODY_BYTES);
+	if (result instanceof Response) return result;
+	const payload = result;
+	try {
+		const target = validateViewerTarget(inbox && inboxTarget ? inboxTarget : getStore(), payload, { requirePairedTargets: true });
+		if (!target.ok) return c.json(target.body, target.status);
+		let transcriptOutcome = null;
+		const envelope = buildRawEventEnvelopeFromCodexHook(untargetedPayload(payload), {
+			transcriptPolicy: {
+				trust: "restricted",
+				approvedRoots: [codexTranscriptRoot()]
+			},
+			onTranscriptOutcome: (outcome) => {
+				transcriptOutcome = outcome;
+				transcriptDiagnostics.record("codex", outcome);
+			}
+		});
+		if (envelope === null) return c.json(transcriptSkipResponse(transcriptOutcome));
+		if (inbox) return await enqueueRawEventRequest({
+			c,
+			getStore,
+			inbox,
+			inboxTarget,
+			payload,
+			request: { ...envelope },
+			flushBoundary: false
+		});
+		const ingestResult = await ingestNormalizedEnvelope(getStore(), sweeper, envelope);
+		return c.json({
+			inserted: ingestResult.inserted,
+			skipped: ingestResult.skipped
+		});
+	} catch (error) {
+		return boundedIngestErrorResponse(c, error);
+	}
+}
 function rawEventsRoutes(getStore, sweeper, inbox, inboxTarget) {
 	const app = new Hono();
 	const transcriptDiagnostics = createTranscriptDiagnostics();
@@ -3248,89 +3416,9 @@ function rawEventsRoutes(getStore, sweeper, inbox, inboxTarget) {
 		});
 	});
 	app.post("/api/raw-events", (c) => postRawEventRequest(c, getStore, sweeper, inbox, inboxTarget));
-	app.post("/api/claude-hooks", async (c) => {
-		const result = await parseJsonObjectBody(c, MAX_RAW_EVENTS_BODY_BYTES);
-		if (result instanceof Response) return result;
-		const payload = result;
-		try {
-			const store = getStore();
-			const target = validateViewerTarget(store, payload, { requirePairedTargets: true });
-			if (!target.ok) return c.json(target.body, target.status);
-			let transcriptOutcome = null;
-			const envelope = buildRawEventEnvelopeFromHook(untargetedPayload(payload), {
-				transcriptPolicy: {
-					trust: "restricted",
-					approvedRoots: [claudeTranscriptRoot()]
-				},
-				onTranscriptOutcome: (outcome) => {
-					transcriptOutcome = outcome;
-					transcriptDiagnostics.record("claude", outcome);
-				}
-			});
-			if (envelope === null) return c.json(transcriptSkipResponse(transcriptOutcome));
-			const ingestResult = await ingestNormalizedEnvelope(store, sweeper, envelope, c.req.header("x-codemem-boundary-flush") === "1");
-			return c.json({
-				inserted: ingestResult.inserted,
-				skipped: ingestResult.skipped
-			});
-		} catch (err) {
-			return boundedIngestErrorResponse(c, err);
-		}
-	});
-	app.post("/api/codex-hooks", async (c) => {
-		const result = await parseJsonObjectBody(c, MAX_RAW_EVENTS_BODY_BYTES);
-		if (result instanceof Response) return result;
-		const payload = result;
-		try {
-			const store = getStore();
-			const target = validateViewerTarget(store, payload, { requirePairedTargets: true });
-			if (!target.ok) return c.json(target.body, target.status);
-			let transcriptOutcome = null;
-			const envelope = buildRawEventEnvelopeFromCodexHook(untargetedPayload(payload), {
-				transcriptPolicy: {
-					trust: "restricted",
-					approvedRoots: [codexTranscriptRoot()]
-				},
-				onTranscriptOutcome: (outcome) => {
-					transcriptOutcome = outcome;
-					transcriptDiagnostics.record("codex", outcome);
-				}
-			});
-			if (envelope === null) return c.json(transcriptSkipResponse(transcriptOutcome));
-			const ingestResult = await ingestNormalizedEnvelope(store, sweeper, envelope);
-			return c.json({
-				inserted: ingestResult.inserted,
-				skipped: ingestResult.skipped
-			});
-		} catch (err) {
-			return boundedIngestErrorResponse(c, err);
-		}
-	});
-	app.post("/api/pi-hooks", async (c) => {
-		const result = await parseJsonObjectBody(c, MAX_RAW_EVENTS_BODY_BYTES);
-		if (result instanceof Response) return result;
-		const payload = result;
-		try {
-			const store = getStore();
-			const target = validateViewerTarget(store, payload, { requirePairedTargets: true });
-			if (!target.ok) return c.json(target.body, target.status);
-			const envelope = buildRawEventEnvelopeFromPiEvent(untargetedPayload(payload));
-			if (envelope === null) return c.json({
-				inserted: 0,
-				skipped: 1
-			});
-			const ingestResult = await ingestNormalizedEnvelope(store, sweeper, {
-				...envelope,
-				source: "pi"
-			});
-			return c.json({
-				inserted: ingestResult.inserted,
-				skipped: ingestResult.skipped
-			});
-		} catch (err) {
-			return boundedIngestErrorResponse(c, err);
-		}
-	});
+	app.post("/api/claude-hooks", (c) => postClaudeHookRequest(c, getStore, sweeper, inbox, inboxTarget, transcriptDiagnostics));
+	app.post("/api/codex-hooks", (c) => postCodexHookRequest(c, getStore, sweeper, inbox, inboxTarget, transcriptDiagnostics));
+	app.post("/api/pi-hooks", (c) => postPiHookRequest(c, getStore, sweeper, inbox, inboxTarget));
 	return app;
 }
 //#endregion