@intelligo-dev/core 1.0.0-beta.1 → 1.0.0-beta.14

package/dist/env.js

@@ -1,13 +1,11 @@
 /**
- * Environment Variable Validation
- *
- * Validates required environment variables at startup.
- * Fail-fast approach: missing critical env vars throw immediately
- * rather than failing at runtime when the feature is first used.
- *
- * Usage: Import and call validateEnv() in app layout or middleware.
- * Note: Some vars are optional for local dev (STRIPE_*, RESEND_API_KEY).
+ * Startup validation of environment variables: a missing required variable
+ * throws immediately instead of when its feature is first used. Some are
+ * optional in development (STRIPE_*, RESEND_API_KEY).
  */
+// Only variables the framework itself reads. A model provider's key is
+// absent on purpose: which provider a deployment calls is the product's
+// choice, and its SDK reports a missing key on the first request.
 const ENV_VARS = [
     {
         name: "DATABASE_URL",
@@ -15,9 +13,9 @@ const ENV_VARS = [
         description: "PostgreSQL connection string",
     },
     {
-        name: "AUTH_SECRET",
+        name: "BETTER_AUTH_SECRET",
         required: true,
-        description: "Better-Auth session encryption key",
+        description: "Better-Auth session encryption key (AUTH_SECRET is accepted as a legacy alias)",
         minLength: 32,
     },
     {
@@ -25,11 +23,6 @@ const ENV_VARS = [
         required: true,
         description: "Application base URL for auth and redirects",
     },
-    {
-        name: "OPENAI_API_KEY",
-        required: false,
-        description: "OpenAI API key (AI chat features)",
-    },
     {
         name: "STRIPE_SECRET_KEY",
         required: false,
@@ -40,11 +33,6 @@ const ENV_VARS = [
         required: false,
         description: "Stripe webhook signature secret",
     },
-    {
-        name: "NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY",
-        required: false,
-        description: "Stripe publishable key (billing UI)",
-    },
     {
         name: "RESEND_API_KEY",
         required: false,
@@ -60,10 +48,8 @@ const ENV_VARS = [
         required: false,
         description: "Explicit email provider selection (resend | loops | console)",
     },
-    // Cron endpoints (e.g. /api/cron/trial-expiry) gate on a Bearer
-    // header equal to CRON_SECRET. The secret is optional in dev so
-    // local cron testing isn't blocked, but production MUST set it
-    // and the value must be at least 32 chars to resist guessing.
+    // Cron endpoints gate on a Bearer header equal to CRON_SECRET. Optional
+    // in development; production should set at least 32 characters.
     {
         name: "CRON_SECRET",
         required: false,
@@ -75,7 +61,15 @@ export function validateEnv() {
     const errors = [];
     const warnings = [];
     for (const envVar of ENV_VARS) {
-        const value = process.env[envVar.name];
+        let value = process.env[envVar.name];
+        // Better-Auth reads BETTER_AUTH_SECRET then AUTH_SECRET; the CLI, the
+        // scaffold and this validator use the former.
+        if (envVar.name === "BETTER_AUTH_SECRET" &&
+            !value &&
+            process.env.AUTH_SECRET) {
+            value = process.env.AUTH_SECRET;
+            warnings.push("AUTH_SECRET is set but BETTER_AUTH_SECRET is not — rename it; AUTH_SECRET is a legacy alias");
+        }
         if (!value || value.trim() === "") {
             if (envVar.required) {
                 errors.push(`Missing required env var: ${envVar.name} — ${envVar.description}`);
@@ -95,23 +89,39 @@ export function validateEnv() {
             }
         }
     }
+    // Resend rejects a send without a sender on a verified domain, and the
+    // framework has no domain of its own to fall back on. Loops takes the
+    // sender from each template, so only Resend is checked.
+    const emailProvider = process.env.EMAIL_PROVIDER?.toLowerCase();
+    const sendsThroughResend = Boolean(process.env.RESEND_API_KEY?.trim()) &&
+        emailProvider !== "loops" &&
+        emailProvider !== "console";
+    if (sendsThroughResend && !process.env.EMAIL_FROM?.trim()) {
+        warnings.push('RESEND_API_KEY is set but EMAIL_FROM is not — every email fails until EMAIL_FROM names a sender on a domain verified with Resend, e.g. "Acme <noreply@acme.com>"');
+    }
     // Production safety checks
     if (process.env.NODE_ENV === "production") {
+        const appUrl = process.env.NEXT_PUBLIC_APP_URL?.trim();
+        if (appUrl && !appUrl.startsWith("https://")) {
+            warnings.push(`NEXT_PUBLIC_APP_URL is ${appUrl}, not an https URL — auth callbacks, email links and secure cookies are built from it`);
+        }
+        if (!process.env.RESEND_API_KEY && !process.env.LOOPS_API_KEY) {
+            warnings.push("No email provider (RESEND_API_KEY or LOOPS_API_KEY) — sign-ups are not email-verified and emails only reach the server console");
+        }
         if (process.env.STRIPE_SECRET_KEY?.startsWith("sk_test_")) {
             warnings.push("STRIPE_SECRET_KEY is a test key in production environment");
         }
         if (!process.env.CRON_SECRET || process.env.CRON_SECRET.length < 32) {
-            // Promote to error in production — an unset or weak cron secret
-            // means the cron endpoints are wide open to anyone who guesses
-            // the path.
-            errors.push("CRON_SECRET must be set (≥32 chars) in production for /api/cron/* auth");
+            // A warning, not an error: the framework ships no cron route of its
+            // own, and the maintenance route refuses to serve without it.
+            warnings.push("CRON_SECRET unset or shorter than 32 chars — required by any /api/cron/* route you mount");
         }
     }
     return { valid: errors.length === 0, errors, warnings };
 }
 /**
- * Log validation results. Call during app initialization.
- * Throws on missing required vars; logs warnings for optional vars.
+ * Call during app initialization. Throws on missing required variables;
+ * logs warnings for optional ones.
  */
 export function assertEnv() {
     const { valid, errors, warnings } = validateEnv();

package/dist/env.js.map

@@ -1 +1 @@
-{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAUH,MAAM,QAAQ,GAAa;IACzB;QACE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,8BAA8B;KAC5C;IACD;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,oCAAoC;QACjD,SAAS,EAAE,EAAE;KACd;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,6CAA6C;KAC3D;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,mCAAmC;KACjD;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,mCAAmC;KACjD;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,iCAAiC;KAC/C;IACD;QACE,IAAI,EAAE,oCAAoC;QAC1C,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,qCAAqC;KACnD;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,iCAAiC;KAC/C;IACD;QACE,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,KAAK;QACf,WAAW,EACT,+EAA+E;KAClF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,8DAA8D;KAC5E;IACD,gEAAgE;IAChE,gEAAgE;IAChE,+DAA+D;IAC/D,8DAA8D;IAC9D;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,2CAA2C;QACxD,SAAS,EAAE,EAAE;KACd;CACF,CAAC;AAEF,MAAM,UAAU,WAAW;IAKzB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAClC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CACT,6BAA6B,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,WAAW,EAAE,CACnE,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CACX,6BAA6B,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,WAAW,EAAE,CACnE,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;YACxD,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,oBAAoB,MAAM,CAAC,SAAS,yBAAyB,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5G,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1D,QAAQ,CAAC,IAAI,CACX,2DAA2D,CAC5D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACpE,gEAAgE;YAChE,+DAA+D;YAC/D,YAAY;YACZ,MAAM,CAAC,IAAI,CACT,wEAAwE,CACzE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS;IACvB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,CAAC;IAElD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC/D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,WAAW,MAAM,CAAC,MAAM,oDAAoD,CAC7E,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH,uEAAuE;AACvE,wEAAwE;AACxE,kEAAkE;AAClE,MAAM,QAAQ,GAAa;IACzB;QACE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,8BAA8B;KAC5C;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,IAAI;QACd,WAAW,EACT,gFAAgF;QAClF,SAAS,EAAE,EAAE;KACd;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,6CAA6C;KAC3D;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,mCAAmC;KACjD;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,iCAAiC;KAC/C;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,iCAAiC;KAC/C;IACD;QACE,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,KAAK;QACf,WAAW,EACT,+EAA+E;KAClF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,8DAA8D;KAC5E;IACD,wEAAwE;IACxE,gEAAgE;IAChE;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,2CAA2C;QACxD,SAAS,EAAE,EAAE;KACd;CACF,CAAC;AAEF,MAAM,UAAU,WAAW;IAKzB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrC,sEAAsE;QACtE,8CAA8C;QAC9C,IACE,MAAM,CAAC,IAAI,KAAK,oBAAoB;YACpC,CAAC,KAAK;YACN,OAAO,CAAC,GAAG,CAAC,WAAW,EACvB,CAAC;YACD,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;YAChC,QAAQ,CAAC,IAAI,CACX,6FAA6F,CAC9F,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAClC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CACT,6BAA6B,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,WAAW,EAAE,CACnE,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CACX,6BAA6B,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,WAAW,EAAE,CACnE,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;YACxD,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,oBAAoB,MAAM,CAAC,SAAS,yBAAyB,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5G,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,sEAAsE;IACtE,wDAAwD;IACxD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,EAAE,CAAC;IAChE,MAAM,kBAAkB,GACtB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;QAC3C,aAAa,KAAK,OAAO;QACzB,aAAa,KAAK,SAAS,CAAC;IAC9B,IAAI,kBAAkB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;QAC1D,QAAQ,CAAC,IAAI,CACX,kKAAkK,CACnK,CAAC;IACJ,CAAC;IAED,2BAA2B;IAC3B,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC;QACvD,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7C,QAAQ,CAAC,IAAI,CACX,0BAA0B,MAAM,uFAAuF,CACxH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YAC9D,QAAQ,CAAC,IAAI,CACX,gIAAgI,CACjI,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1D,QAAQ,CAAC,IAAI,CACX,2DAA2D,CAC5D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACpE,oEAAoE;YACpE,8DAA8D;YAC9D,QAAQ,CAAC,IAAI,CACX,0FAA0F,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS;IACvB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,CAAC;IAElD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC/D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,WAAW,MAAM,CAAC,MAAM,oDAAoD,CAC7E,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/identity/audit.d.ts

@@ -1,28 +1,11 @@
 /**
- * Memory-audit write — the ADR-0008 destination, reconciled with the
- * allowlist.
- *
- * ADR-0008 names `@intelligo-dev/audit` as `recordMemoryAudit`'s
- * destination. `tests/architecture/dependency-direction.test.ts` only
- * grants the audit -> core edge (`audit: ["@intelligo-dev/core"]`);
- * `@intelligo-dev/core`'s own allowlist entry is empty
- * (`core: []` — see `../documents/service.ts`'s doc comment for the
- * same constraint against `@intelligo-dev/auth`). This module — part of
- * `@intelligo-dev/core/identity`, which owns `user_memory_audit` alongside
- * the rest of the identity graph (see `../db/schema/identity.ts`) —
- * therefore cannot import `@intelligo-dev/audit` to call a writer defined
- * there.
- *
- * `@intelligo-dev/audit` exports the event *contract* only
- * (`packages/audit/src/memory-audit.ts`, re-exported from its index).
- * This file is the faithful, in-package port of the write itself,
- * ported verbatim from `@intelligo-dev/agents/memory/audit.ts` (ADR-0008),
- * kept local so `./service.ts`'s mutations (`deleteFact`,
- * `exportIdentity`) never cross the disallowed core -> audit edge.
- * Not re-exported from `./index.ts`: it is this module's own
- * implementation detail, not identity's public API.
+ * Writes `user_memory_audit` rows. Core may not import
+ * `@intelligo-dev/audit` (only audit -> core is allowed), so the write lives
+ * here and audit exports only the event contract. Internal to identity; not
+ * re-exported.
  */
-import type { AuditTargetKind, AuditAction, AuditActorKind, UserMemoryAuditRow } from "../db/schema";
+import { db } from "../db/index.js";
+import type { AuditTargetKind, AuditAction, AuditActorKind, UserMemoryAuditRow } from "../db/schema/index.js";
 export type RecordMemoryAuditInput = {
     userId: string;
     workspaceId: string;
@@ -35,5 +18,9 @@ export type RecordMemoryAuditInput = {
     afterValue?: unknown;
     reason?: string;
 };
-export declare function recordMemoryAudit(input: RecordMemoryAuditInput): Promise<UserMemoryAuditRow>;
+/**
+ * `writer` is the transaction of the mutation being audited, so the
+ * change and its record commit or fail together.
+ */
+export declare function recordMemoryAudit(input: RecordMemoryAuditInput, writer?: Pick<typeof db, "insert">): Promise<UserMemoryAuditRow>;
 //# sourceMappingURL=audit.d.ts.map

package/dist/identity/audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/identity/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,OAAO,KAAK,EACV,eAAe,EACf,WAAW,EACX,cAAc,EACd,kBAAkB,EACnB,MAAM,cAAc,CAAC;AAGtB,MAAM,MAAM,sBAAsB,GAAG;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,eAAe,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,cAAc,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CA2B7B"}
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/identity/audit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAE3B,OAAO,KAAK,EACV,eAAe,EACf,WAAW,EACX,cAAc,EACd,kBAAkB,EACnB,MAAM,cAAc,CAAC;AAGtB,MAAM,MAAM,sBAAsB,GAAG;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,eAAe,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,cAAc,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,sBAAsB,EAC7B,MAAM,GAAE,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAM,GACrC,OAAO,CAAC,kBAAkB,CAAC,CA2B7B"}

package/dist/identity/audit.js

@@ -1,32 +1,18 @@
 /**
- * Memory-audit write — the ADR-0008 destination, reconciled with the
- * allowlist.
- *
- * ADR-0008 names `@intelligo-dev/audit` as `recordMemoryAudit`'s
- * destination. `tests/architecture/dependency-direction.test.ts` only
- * grants the audit -> core edge (`audit: ["@intelligo-dev/core"]`);
- * `@intelligo-dev/core`'s own allowlist entry is empty
- * (`core: []` — see `../documents/service.ts`'s doc comment for the
- * same constraint against `@intelligo-dev/auth`). This module — part of
- * `@intelligo-dev/core/identity`, which owns `user_memory_audit` alongside
- * the rest of the identity graph (see `../db/schema/identity.ts`) —
- * therefore cannot import `@intelligo-dev/audit` to call a writer defined
- * there.
- *
- * `@intelligo-dev/audit` exports the event *contract* only
- * (`packages/audit/src/memory-audit.ts`, re-exported from its index).
- * This file is the faithful, in-package port of the write itself,
- * ported verbatim from `@intelligo-dev/agents/memory/audit.ts` (ADR-0008),
- * kept local so `./service.ts`'s mutations (`deleteFact`,
- * `exportIdentity`) never cross the disallowed core -> audit edge.
- * Not re-exported from `./index.ts`: it is this module's own
- * implementation detail, not identity's public API.
+ * Writes `user_memory_audit` rows. Core may not import
+ * `@intelligo-dev/audit` (only audit -> core is allowed), so the write lives
+ * here and audit exports only the event contract. Internal to identity; not
+ * re-exported.
  */
-import { db } from "../db";
-import { userMemoryAudit } from "../db/schema";
-import { IdentityServiceError } from "./errors";
-export async function recordMemoryAudit(input) {
-    const [row] = await db
+import { db } from "../db/index.js";
+import { userMemoryAudit } from "../db/schema/index.js";
+import { IdentityServiceError } from "./errors.js";
+/**
+ * `writer` is the transaction of the mutation being audited, so the
+ * change and its record commit or fail together.
+ */
+export async function recordMemoryAudit(input, writer = db) {
+    const [row] = await writer
         .insert(userMemoryAudit)
         .values({
         id: crypto.randomUUID(),

package/dist/identity/audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/identity/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAO/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAehD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAA6B;IAE7B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,CAAC,eAAe,CAAC;SACvB,MAAM,CAAC;QACN,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;QACvB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,IAAI,IAAI,EAAE;KACtB,CAAC;SACD,SAAS,EAAE,CAAC;IAEf,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,oBAAoB,CAC5B,gBAAgB,EAChB,qCAAqC,CACtC,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/identity/audit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAO/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAehD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAA6B,EAC7B,SAAoC,EAAE;IAEtC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,MAAM;SACvB,MAAM,CAAC,eAAe,CAAC;SACvB,MAAM,CAAC;QACN,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;QACvB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,IAAI,IAAI,EAAE;KACtB,CAAC;SACD,SAAS,EAAE,CAAC;IAEf,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,oBAAoB,CAC5B,gBAAgB,EAChB,qCAAqC,CACtC,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/identity/errors.d.ts

@@ -1,20 +1,12 @@
 /**
- * Identity service error type.
- *
- * Mirrors `../documents/errors.ts` and `../conversations/errors.ts`
- * exactly (see either's doc comment for the full rationale): the
- * identity service (./service.ts) throws this for every failure it
- * recognizes rather than returning an ad-hoc `{ success, error }`
- * envelope. Shaping to a transport-facing envelope (plus
- * Sentry/logging/revalidatePath) is the caller's job, one layer up.
+ * Thrown by the identity service for every failure it recognizes. Shaping
+ * it into a transport envelope is the caller's job.
  */
 /**
  * - `not_found` — no fact exists at the given id within the actor's
  *   workspace/user scope. Covers both "no such fact" and "a fact that
- *   belongs to a different user in the same workspace" — the two are
- *   deliberately indistinguishable to the caller (same reasoning as
- *   `../conversations/service.ts`'s `verifyConversation`: an id alone
- *   should never reveal whose data exists behind it).
+ *   belongs to a different user in the same workspace" — deliberately
+ *   indistinguishable, so an id never reveals whose data exists behind it.
  * - `invalid_input` — a caller-supplied argument failed a basic
  *   invariant (e.g. an empty fact id).
  * - `database_error` — the underlying insert did not return the row it

package/dist/identity/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/identity/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,wBAAwB,GAChC,WAAW,GACX,eAAe,GACf,gBAAgB,CAAC;AAErB,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IAIxC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;gBAGvB,IAAI,EAAE,wBAAwB,EAC9B,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAUhC;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,oBAAoB,CAE/B"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/identity/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;GASG;AACH,MAAM,MAAM,wBAAwB,GAClC,WAAW,GAAG,eAAe,GAAG,gBAAgB,CAAC;AAEnD,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IAGxC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;gBAGvB,IAAI,EAAE,wBAAwB,EAC9B,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAUhC;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,oBAAoB,CAE/B"}

package/dist/identity/errors.js

@@ -1,12 +1,6 @@
 /**
- * Identity service error type.
- *
- * Mirrors `../documents/errors.ts` and `../conversations/errors.ts`
- * exactly (see either's doc comment for the full rationale): the
- * identity service (./service.ts) throws this for every failure it
- * recognizes rather than returning an ad-hoc `{ success, error }`
- * envelope. Shaping to a transport-facing envelope (plus
- * Sentry/logging/revalidatePath) is the caller's job, one layer up.
+ * Thrown by the identity service for every failure it recognizes. Shaping
+ * it into a transport envelope is the caller's job.
  */
 export class IdentityServiceError extends Error {
     constructor(code, message, options) {

package/dist/identity/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/identity/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAmBH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAO7C,YACE,IAA8B,EAC9B,OAAe,EACf,OAA6B;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,IAA4B,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACtD,CAAC;QACD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;CACF;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAc;IAEd,OAAO,KAAK,YAAY,oBAAoB,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/identity/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAeH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAM7C,YACE,IAA8B,EAC9B,OAAe,EACf,OAA6B;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,IAA4B,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACtD,CAAC;QACD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;CACF;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAc;IAEd,OAAO,KAAK,YAAY,oBAAoB,CAAC;AAC/C,CAAC"}

package/dist/identity/index.d.ts

@@ -1,16 +1,9 @@
 /**
- * Identity Module (ADR-0008/ADR-0009 precedent)
- *
- * Privacy-facing reads and mutations over the user identity graph:
- * fact listing/deletion, full-identity export, and the memory-audit
- * trail. See ./service.ts for the full module doc comment, including
- * what stayed agents-side (profile re-synthesis) and why the
- * memory-audit writer lives in this module rather than in
- * `@intelligo-dev/audit`.
- *
- * Use via subpath import: @intelligo-dev/core/identity
+ * Privacy-facing reads and mutations over the user identity graph: fact
+ * listing and deletion, the profile snapshot's write, full-identity
+ * export, and the memory-audit trail.
  */
-export { listFacts, deleteFact, exportIdentity, getAuditTrail, } from "./service";
-export { IdentityServiceError, isIdentityServiceError, type IdentityServiceErrorCode, } from "./errors";
-export type { IdentityActor, IdentityExport, UserFact, UserMemory, UserProfileSnapshot, UserMemoryAuditRow, } from "./types";
+export { listFacts, deleteFact, saveProfileSnapshot, exportIdentity, getAuditTrail, } from "./service.js";
+export { IdentityServiceError, isIdentityServiceError, type IdentityServiceErrorCode, } from "./errors.js";
+export type { IdentityActor, IdentityExport, SaveProfileSnapshotInput, UserFact, UserMemory, UserProfileSnapshot, UserMemoryAuditRow, } from "./types.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/identity/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,SAAS,EACT,UAAU,EACV,cAAc,EACd,aAAa,GACd,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,KAAK,wBAAwB,GAC9B,MAAM,UAAU,CAAC;AAElB,YAAY,EACV,aAAa,EACb,cAAc,EACd,QAAQ,EACR,UAAU,EACV,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,SAAS,EACT,UAAU,EACV,mBAAmB,EACnB,cAAc,EACd,aAAa,GACd,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,KAAK,wBAAwB,GAC9B,MAAM,UAAU,CAAC;AAElB,YAAY,EACV,aAAa,EACb,cAAc,EACd,wBAAwB,EACxB,QAAQ,EACR,UAAU,EACV,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,SAAS,CAAC"}

package/dist/identity/index.js

@@ -1,15 +1,8 @@
 /**
- * Identity Module (ADR-0008/ADR-0009 precedent)
- *
- * Privacy-facing reads and mutations over the user identity graph:
- * fact listing/deletion, full-identity export, and the memory-audit
- * trail. See ./service.ts for the full module doc comment, including
- * what stayed agents-side (profile re-synthesis) and why the
- * memory-audit writer lives in this module rather than in
- * `@intelligo-dev/audit`.
- *
- * Use via subpath import: @intelligo-dev/core/identity
+ * Privacy-facing reads and mutations over the user identity graph: fact
+ * listing and deletion, the profile snapshot's write, full-identity
+ * export, and the memory-audit trail.
  */
-export { listFacts, deleteFact, exportIdentity, getAuditTrail, } from "./service";
-export { IdentityServiceError, isIdentityServiceError, } from "./errors";
+export { listFacts, deleteFact, saveProfileSnapshot, exportIdentity, getAuditTrail, } from "./service.js";
+export { IdentityServiceError, isIdentityServiceError, } from "./errors.js";
 //# sourceMappingURL=index.js.map

package/dist/identity/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,SAAS,EACT,UAAU,EACV,cAAc,EACd,aAAa,GACd,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,oBAAoB,EACpB,sBAAsB,GAEvB,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,SAAS,EACT,UAAU,EACV,mBAAmB,EACnB,cAAc,EACd,aAAa,GACd,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,oBAAoB,EACpB,sBAAsB,GAEvB,MAAM,UAAU,CAAC"}

package/dist/identity/service.d.ts

@@ -1,48 +1,18 @@
 /**
- * Identity Service — Server-only
+ * Server-only reads and mutations over the user identity graph: fact
+ * listing and deletion, the profile snapshot's write, a full data export,
+ * and the memory-audit trail.
  *
- * Privacy-facing reads and mutations over the user identity graph:
- * fact listing/deletion, a full-identity data export, and the
- * memory-audit trail that records every mutation to a user's facts,
- * memories, and synthesized profile snapshot. Ported from Ignite's
- * `actions/identity.ts` (ADR-0008/ADR-0009 precedent — see
- * `../documents/service.ts` and `../conversations/service.ts` for the
- * same move): the tables (`user_facts`, `user_memories`,
- * `user_profile_snapshots`, `user_memory_audit`) always lived in
- * `@intelligo-dev/core`'s schema (`../db/schema/identity.ts`, documented
- * there as "a platform-level memory primitive — separate from any
- * single product"); only the service layer sat in the product
- * application.
+ * `deleteFact` does not touch the cached profile snapshot; profile synthesis
+ * is the product's AI code, so a caller that owns it re-triggers it and
+ * stores the result with `saveProfileSnapshot`.
  *
- * What did NOT come with it (stays product/agents-side):
- *   - `updateMyFactImportance` and the `synthesizeProfile()` re-trigger
- *     Ignite's `deleteMyFact` ran after deleting — synthesis is
- *     `@intelligo-dev/agents`' concern (deprecated, dissolving under
- *     ADR-0008), and this package cannot depend on it. `deleteFact`
- *     below does not touch the cached snapshot; a caller that also
- *     owns a synthesis engine re-triggers it after calling this.
- *
- * Callers pass a resolved actor (workspaceId, userId) rather than this
- * module resolving one itself — `@intelligo-dev/core` cannot depend on
- * `@intelligo-dev/auth` (see tests/architecture/dependency-direction.test.ts).
- * Every query filters by workspaceId AND userId internally; the actor
- * is never trusted to have done that itself.
- *
- * Every mutation writes a `user_memory_audit` row via the internal
- * `recordMemoryAudit` (./audit.ts). See that file's doc comment for
- * why the writer lives here rather than in `@intelligo-dev/audit`, which
- * is where ADR-0008 names its destination — the allowlist only grants
- * audit -> core, never core -> audit
- * (tests/architecture/dependency-direction.test.ts), so
- * `@intelligo-dev/audit` exports the event *contract* only.
- *
- * Failure is reported by throwing `IdentityServiceError` rather than
- * returning a `{ success, error }` envelope — see ./errors.ts.
- *
- * This module is SERVER-ONLY. Do not import from client components.
+ * Callers pass a resolved actor (workspaceId, userId); core cannot depend on
+ * `@intelligo-dev/auth`. Every query filters by both ids. Every mutation
+ * writes a `user_memory_audit` row. Failures throw `IdentityServiceError`.
  */
-import type { UserFact, UserMemoryAuditRow } from "../db/schema";
-import type { IdentityActor, IdentityExport } from "./types";
+import type { UserFact, UserMemoryAuditRow, UserProfileSnapshot } from "../db/schema/index.js";
+import type { IdentityActor, IdentityExport, SaveProfileSnapshotInput } from "./types.js";
 /** List the actor's facts, most important and most confident first. */
 export declare function listFacts(actor: IdentityActor): Promise<UserFact[]>;
 /**
@@ -56,15 +26,27 @@ export declare function getAuditTrail(actor: IdentityActor, options?: {
 /**
  * Delete a fact and record the deletion in the audit trail. Throws
  * `invalid_input` for an empty id and `not_found` for anything outside
- * the actor's scope (see `verifyFact`). Does NOT re-trigger profile
- * synthesis — see the module doc comment.
+ * the actor's scope. Does not re-trigger profile synthesis.
  */
 export declare function deleteFact(actor: IdentityActor, factId: string): Promise<void>;
 /**
- * Aggregate the actor's full identity graph — facts, memories, latest
- * profile snapshot, and full audit trail — for a data-export flow.
- * Records its own audit row (action "export"): the export operation
- * audits itself, same as the ported Ignite implementation.
+ * The actor's full identity graph — facts, memories, latest profile
+ * snapshot and audit trail — for a "download my data" flow. Records its own
+ * audit row (action "export").
  */
 export declare function exportIdentity(actor: IdentityActor): Promise<IdentityExport>;
+/**
+ * Store the actor's synthesized profile — one row per user per workspace,
+ * inserted on the first synthesis and replaced on every later one. The
+ * version is bumped in the same statement (`ON CONFLICT … version + 1`),
+ * so two syntheses racing each other get two versions rather than one
+ * overwriting the other's number; it starts at 1.
+ *
+ * A field left `undefined` keeps what the row holds (null on insert); an
+ * explicit `null` clears it. `synthesizedAt` defaults to now. Records an
+ * audit row (`snapshot`, `create` or `update`) in the same transaction,
+ * attributed to `input.actorKind` — `system_job` unless the caller says
+ * otherwise. Throws `invalid_input` for an empty summary.
+ */
+export declare function saveProfileSnapshot(actor: IdentityActor, input: SaveProfileSnapshotInput): Promise<UserProfileSnapshot>;
 //# sourceMappingURL=service.d.ts.map

package/dist/identity/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/identity/service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAUH,OAAO,KAAK,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGjE,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAuC7D,uEAAuE;AACvE,wBAAsB,SAAS,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAWzE;AAID;;;GAGG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,aAAa,EACpB,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9C,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAqB/B;AAMD;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAoBf;AAMD;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC,cAAc,CAAC,CA+DzB"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/identity/service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAUH,OAAO,KAAK,EACV,QAAQ,EACR,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,cAAc,CAAC;AAGtB,OAAO,KAAK,EACV,aAAa,EACb,cAAc,EACd,wBAAwB,EACzB,MAAM,SAAS,CAAC;AA4BjB,uEAAuE;AACvE,wBAAsB,SAAS,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAWzE;AAID;;;GAGG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,aAAa,EACpB,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9C,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAqB/B;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAC9B,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAwBf;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC,cAAc,CAAC,CA+DzB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,aAAa,EACpB,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,mBAAmB,CAAC,CAkE9B"}