@intelligo-dev/core 1.0.0-beta.1

package/dist/db/schema/usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../../../src/db/schema/usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAcH;;;;;;GAMG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoDxB,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsBxB,CAAC;AAEF;;;;;;;;;GASG;AAEH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoCxB,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0B5B,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqB/B,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgCtB,CAAC;AAGF,MAAM,MAAM,SAAS,GAAG,OAAO,UAAU,CAAC,YAAY,CAAC;AACvD,MAAM,MAAM,eAAe,GAAG,OAAO,UAAU,CAAC,YAAY,CAAC;AAC7D,MAAM,MAAM,WAAW,GAAG,OAAO,YAAY,CAAC,YAAY,CAAC;AAC3D,MAAM,MAAM,iBAAiB,GAAG,OAAO,YAAY,CAAC,YAAY,CAAC;AACjE,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,YAAY,CAAC;AAC5D,MAAM,MAAM,kBAAkB,GAAG,OAAO,YAAY,CAAC,YAAY,CAAC;AAClE,MAAM,MAAM,WAAW,GAAG,OAAO,YAAY,CAAC,YAAY,CAAC;AAC3D,MAAM,MAAM,iBAAiB,GAAG,OAAO,YAAY,CAAC,YAAY,CAAC;AACjE,MAAM,MAAM,cAAc,GAAG,OAAO,gBAAgB,CAAC,YAAY,CAAC;AAClE,MAAM,MAAM,oBAAoB,GAAG,OAAO,gBAAgB,CAAC,YAAY,CAAC;AACxE,MAAM,MAAM,yBAAyB,GAAG,OAAO,mBAAmB,CAAC,YAAY,CAAC;AAChF,MAAM,MAAM,+BAA+B,GACzC,OAAO,mBAAmB,CAAC,YAAY,CAAC"}

package/dist/db/schema/usage.js

@@ -0,0 +1,224 @@
+/**
+ * Usage Tracking Database Schema
+ *
+ * Tables for tracking per-request token consumption and aggregated monthly usage.
+ * Used by the quota enforcement engine to check limits before AI requests
+ * and record consumption atomically after completion.
+ *
+ * Pattern: snake_case columns in PostgreSQL, camelCase TypeScript API (via Drizzle mapping)
+ */
+import { pgTable, text, timestamp, integer, real, index, unique, jsonb, } from "drizzle-orm/pg-core";
+import { organization, users } from "./auth";
+/**
+ * Usage Records table - Per-request token tracking (QUOTA-05)
+ *
+ * Every AI request creates one record with input/output/total tokens,
+ * the model used, and the agent that handled it. This provides the
+ * detailed breakdown for per-model and per-agent reporting (QUOTA-07).
+ */
+export const usageRecords = pgTable("usage_records", {
+    id: text("id").primaryKey(),
+    workspaceId: text("workspace_id")
+        .notNull()
+        .references(() => organization.id, { onDelete: "cascade" }),
+    userId: text("user_id")
+        .notNull()
+        .references(() => users.id, { onDelete: "cascade" }),
+    type: text("type").notNull(), // "ai_tokens", "api_call"
+    model: text("model"), // "gpt-4o", "gpt-4o-mini"
+    agent: text("agent"), // "career-advisor", "sesh"
+    inputTokens: integer("input_tokens").notNull().default(0),
+    outputTokens: integer("output_tokens").notNull().default(0),
+    totalTokens: integer("total_tokens").notNull().default(0),
+    /**
+     * Raw provider USD cost snapshot (kept under legacy column name for back-compat).
+     * Do NOT use for arithmetic — floating-point accumulation causes sub-cent
+     * discrepancies over many records. Use chargedMnt (integer MNT) for all math.
+     */
+    cost: real("cost").notNull().default(0),
+    /** Snapshot of billing margin multiplier applied to this request */
+    marginMultiplier: real("margin_multiplier").notNull().default(0),
+    /** Snapshot of USD→MNT FX rate used for conversion */
+    fxRate: real("fx_rate").notNull().default(0),
+    /** Authoritative MNT amount deducted from balance */
+    chargedMnt: integer("charged_mnt").notNull().default(0),
+    /** Request correlation id for log tracing */
+    requestId: text("request_id"),
+    /**
+     * Owning execution (@intelligo-dev/executions). No FK: the executions
+     * table is owned by another package and this column is written by
+     * the settlement path, which may run before or after the execution
+     * row's terminal update.
+     */
+    executionId: text("execution_id"),
+    /** Conversation/chat id for grouping in usage dashboards */
+    conversationId: text("conversation_id"),
+    metadata: text("metadata"), // JSON string for additional data
+    recordedAt: timestamp("recorded_at").notNull().defaultNow(),
+}, (table) => [
+    index("usage_records_workspace_id_idx").on(table.workspaceId),
+    index("usage_records_workspace_recorded_at_idx").on(table.workspaceId, table.recordedAt),
+    index("usage_records_workspace_type_idx").on(table.workspaceId, table.type),
+    index("usage_records_conversation_id_idx").on(table.conversationId),
+    index("usage_records_execution_id_idx").on(table.executionId),
+]);
+/**
+ * Monthly Usage table - Aggregated monthly totals for fast quota checks
+ *
+ * Instead of SUM(totalTokens) on every request, we increment a counter atomically.
+ * One row per workspace per billing period. The usage_records table provides
+ * the detailed breakdown for reporting; this table provides O(1) quota checks.
+ */
+export const monthlyUsage = pgTable("monthly_usage", {
+    id: text("id").primaryKey(),
+    workspaceId: text("workspace_id")
+        .notNull()
+        .references(() => organization.id, { onDelete: "cascade" }),
+    periodStart: timestamp("period_start").notNull(),
+    periodEnd: timestamp("period_end").notNull(),
+    tokensUsed: integer("tokens_used").notNull().default(0),
+    /** MNT-denominated total charged this period — authoritative for plan quota */
+    chargedMnt: integer("charged_mnt").notNull().default(0),
+    requestCount: integer("request_count").notNull().default(0),
+    updatedAt: timestamp("updated_at").notNull().defaultNow(),
+}, (table) => [
+    unique("monthly_usage_workspace_period_unique").on(table.workspaceId, table.periodStart),
+    index("monthly_usage_workspace_id_idx").on(table.workspaceId),
+]);
+/**
+ * Trial Credits table - One-time trial credit allocation per workspace (TRIAL-01)
+ *
+ * Each new workspace receives 100K trial tokens on creation.
+ * The unique constraint on workspace_id enforces one trial per workspace (TRIAL-07).
+ * Trial credits are separate from purchased credits (credit_balances).
+ * They act as a fallback when plan quota is exceeded or credit balance is zero.
+ *
+ * Status flow: active → depleted (credits hit 0) or active → converted (paid plan)
+ */
+// Run drizzle-kit push to apply index
+export const trialCredits = pgTable("trial_credits", {
+    id: text("id").primaryKey(),
+    workspaceId: text("workspace_id")
+        .notNull()
+        .unique()
+        .references(() => organization.id, { onDelete: "cascade" }),
+    initialCredits: integer("initial_credits").notNull().default(100000),
+    creditsUsed: integer("credits_used").notNull().default(0),
+    creditsRemaining: integer("credits_remaining").notNull().default(100000),
+    /** MNT-denominated trial grant (replaces token-denominated columns above) */
+    initialCreditsMnt: integer("initial_credits_mnt").notNull().default(5000),
+    creditsUsedMnt: integer("credits_used_mnt").notNull().default(0),
+    creditsRemainingMnt: integer("credits_remaining_mnt")
+        .notNull()
+        .default(5000),
+    status: text("status").notNull().default("active"), // active|depleted|converted|expired
+    provisionedAt: timestamp("provisioned_at").notNull().defaultNow(),
+    trialEndDate: timestamp("trial_end_date"), // 14 days from provisioning
+    depletedAt: timestamp("depleted_at"),
+    convertedAt: timestamp("converted_at"),
+    createdByIp: text("created_by_ip"),
+    createdByEmail: text("created_by_email"),
+    /**
+     * Canonical form of createdByEmail used by the per-email abuse
+     * check. Stored alongside the raw value so `SELECT count(*)`
+     * can use an index instead of a full-table scan + JS filter.
+     * See packages/billing/src/trial.ts:normalizeEmailForAbuseCheck.
+     */
+    normalizedEmail: text("normalized_email"),
+}, (table) => [
+    index("trial_credits_expiry_idx").on(table.status, table.trialEndDate),
+    index("trial_credits_normalized_email_idx").on(table.normalizedEmail),
+]);
+/**
+ * Rate Limit Entries table - Sliding window rate limiting (QUOTA-10)
+ *
+ * One row per (workspace, endpoint, minute bucket), with a counter.
+ * Each request upserts the row and atomically increments `count`, so N
+ * concurrent requests observe 1..N and exactly `limit` are admitted.
+ *
+ * An earlier version used ON CONFLICT DO NOTHING, which admitted
+ * exactly ONE request per minute on every plan — the per-plan limit was
+ * never consulted. See packages/billing/src/rate-limit.ts.
+ *
+ * Old buckets are deleted by the billing-maintenance cron.
+ *
+ * Database-backed rate limiting is the correct choice for <10K users
+ * (no Redis dependency, per architecture decisions).
+ */
+export const rateLimitEntries = pgTable("rate_limit_entries", {
+    id: text("id").primaryKey(),
+    workspaceId: text("workspace_id")
+        .notNull()
+        .references(() => organization.id, { onDelete: "cascade" }),
+    endpoint: text("endpoint").notNull().default("chat"),
+    requestedAt: timestamp("requested_at").notNull().defaultNow(),
+    /** Floored minute bucket for unique constraint enforcement */
+    minuteBucket: timestamp("minute_bucket").notNull(),
+    /** Requests observed in this bucket — incremented via upsert */
+    count: integer("count").notNull().default(1),
+}, (table) => [
+    index("rate_limit_entries_window_idx").on(table.workspaceId, table.endpoint, table.requestedAt),
+    unique("rate_limit_entries_unique_bucket_idx").on(table.workspaceId, table.endpoint, table.minuteBucket),
+]);
+/**
+ * Notification History table - Tracks sent notifications for deduplication
+ *
+ * Records each notification sent (quota warnings, trial alerts) with a
+ * period-based deduplication key. The unique constraint on
+ * (workspaceId, type, periodKey) prevents sending the same notification
+ * twice in the same billing period.
+ *
+ * Phase 14 will update the channel from "console" to "email" and use
+ * Resend for actual delivery. For now, notifications are logged to console.
+ */
+export const notificationHistory = pgTable("notification_history", {
+    id: text("id").primaryKey(),
+    workspaceId: text("workspace_id")
+        .notNull()
+        .references(() => organization.id, { onDelete: "cascade" }),
+    type: text("type").notNull(), // "quota_warning_80", "quota_warning_100", "trial_warning_20", "trial_depleted"
+    periodKey: text("period_key").notNull(), // "2026-02" for monthly, "trial" for one-time
+    sentAt: timestamp("sent_at").notNull().defaultNow(),
+    channel: text("channel").notNull().default("console"), // "console" now, "email" in Phase 14
+    metadata: text("metadata"), // JSON string for additional context
+}, (table) => [
+    unique("notification_history_dedup_unique").on(table.workspaceId, table.type, table.periodKey),
+    index("notification_history_workspace_id_idx").on(table.workspaceId),
+]);
+/**
+ * User Quotas table — per-user, per-action usage counters.
+ *
+ * One row per user (not per period — one-time payment model). Counters
+ * live in the `usage` JSONB map and increment atomically in SQL, so a
+ * quota check is O(1) with no SUM over usage_records.
+ */
+export const userQuotas = pgTable("user_quotas", {
+    id: text("id").primaryKey(),
+    userId: text("user_id")
+        .notNull()
+        .unique()
+        .references(() => users.id, { onDelete: "cascade" }),
+    workspaceId: text("workspace_id")
+        .notNull()
+        .references(() => organization.id, { onDelete: "cascade" }),
+    plan: text("plan").notNull().default("free"), // free | standard | pro
+    /**
+     * Per-action counter map, keyed by the product's own action slugs
+     * (`usage["chat"] = 42`). This is the only counter storage.
+     *
+     * Three career-specific integer columns — chat_messages_used,
+     * assessments_used, reports_used — used to sit beside it, written
+     * by every product and read in preference to this map. Migration
+     * 0038 backfilled them into the map and dropped them: a public
+     * schema naming one vertical's actions meant no other vertical
+     * could add a counter without a migration to Intelligo (ADR-0004).
+     */
+    usage: jsonb("usage").notNull().default({}),
+    totalCostUsd: real("total_cost_usd").notNull().default(0),
+    createdAt: timestamp("created_at").notNull().defaultNow(),
+    updatedAt: timestamp("updated_at").notNull().defaultNow(),
+}, (table) => [
+    index("user_quotas_user_id_idx").on(table.userId),
+    index("user_quotas_workspace_id_idx").on(table.workspaceId),
+]);
+//# sourceMappingURL=usage.js.map

package/dist/db/schema/usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.js","sourceRoot":"","sources":["../../../src/db/schema/usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,OAAO,EACP,IAAI,EACJ,SAAS,EACT,OAAO,EACP,IAAI,EACJ,KAAK,EACL,MAAM,EACN,KAAK,GACN,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAE7C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CACjC,eAAe,EACf;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;SAC9B,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC7D,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;SACpB,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtD,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,0BAA0B;IACxD,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,0BAA0B;IAChD,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,2BAA2B;IACjD,WAAW,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,WAAW,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD;;;;OAIG;IACH,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACvC,oEAAoE;IACpE,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,sDAAsD;IACtD,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,qDAAqD;IACrD,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,6CAA6C;IAC7C,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B;;;;;OAKG;IACH,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC,4DAA4D;IAC5D,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACvC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,kCAAkC;IAC9D,UAAU,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CAC5D,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;IAC7D,KAAK,CAAC,yCAAyC,CAAC,CAAC,EAAE,CACjD,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,UAAU,CACjB;IACD,KAAK,CAAC,kCAAkC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC;IAC3E,KAAK,CAAC,mCAAmC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;IACnE,KAAK,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;CAC9D,CACF,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CACjC,eAAe,EACf;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;SAC9B,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC7D,WAAW,EAAE,SAAS,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;IAChD,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IAC5C,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,+EAA+E;IAC/E,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,YAAY,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CAC1D,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,MAAM,CAAC,uCAAuC,CAAC,CAAC,EAAE,CAChD,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,WAAW,CAClB;IACD,KAAK,CAAC,gCAAgC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;CAC9D,CACF,CAAC;AAEF;;;;;;;;;GASG;AACH,sCAAsC;AACtC,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CACjC,eAAe,EACf;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;SAC9B,OAAO,EAAE;SACT,MAAM,EAAE;SACR,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC7D,cAAc,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IACpE,WAAW,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,gBAAgB,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IACxE,6EAA6E;IAC7E,iBAAiB,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACzE,cAAc,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,mBAAmB,EAAE,OAAO,CAAC,uBAAuB,CAAC;SAClD,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;IAChB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,oCAAoC;IACxF,aAAa,EAAE,SAAS,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACjE,YAAY,EAAE,SAAS,CAAC,gBAAgB,CAAC,EAAE,4BAA4B;IACvE,UAAU,EAAE,SAAS,CAAC,aAAa,CAAC;IACpC,WAAW,EAAE,SAAS,CAAC,cAAc,CAAC;IACtC,WAAW,EAAE,IAAI,CAAC,eAAe,CAAC;IAClC,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC;IACxC;;;;;OAKG;IACH,eAAe,EAAE,IAAI,CAAC,kBAAkB,CAAC;CAC1C,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,0BAA0B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC;IACtE,KAAK,CAAC,oCAAoC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC;CACtE,CACF,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CACrC,oBAAoB,EACpB;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;SAC9B,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC7D,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IACpD,WAAW,EAAE,SAAS,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IAC7D,8DAA8D;IAC9D,YAAY,EAAE,SAAS,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;IAClD,gEAAgE;IAChE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;CAC7C,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,+BAA+B,CAAC,CAAC,EAAE,CACvC,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,WAAW,CAClB;IACD,MAAM,CAAC,sCAAsC,CAAC,CAAC,EAAE,CAC/C,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,YAAY,CACnB;CACF,CACF,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CACxC,sBAAsB,EACtB;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;SAC9B,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC7D,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,gFAAgF;IAC9G,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,EAAE,8CAA8C;IACvF,MAAM,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACnD,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,qCAAqC;IAC5F,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,qCAAqC;CAClE,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,MAAM,CAAC,mCAAmC,CAAC,CAAC,EAAE,CAC5C,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,SAAS,CAChB;IACD,KAAK,CAAC,uCAAuC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;CACrE,CACF,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAC/B,aAAa,EACb;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;SACpB,OAAO,EAAE;SACT,MAAM,EAAE;SACR,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACtD,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;SAC9B,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC7D,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,wBAAwB;IACtE;;;;;;;;;;OAUG;IACH,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3C,YAAY,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACzD,SAAS,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CAC1D,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;IACjD,KAAK,CAAC,8BAA8B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;CAC5D,CACF,CAAC"}

package/dist/db/validate.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Database Connection Validation
+ *
+ * Validates that the database is connected and tables exist before allowing the app to start.
+ */
+export interface DatabaseValidationResult {
+    isConnected: boolean;
+    tablesExist: boolean;
+    error?: string;
+}
+/**
+ * Check if database connection is valid and tables exist
+ */
+export declare function validateDatabaseConnection(): Promise<DatabaseValidationResult>;
+/**
+ * Validate database or throw error (for startup validation)
+ */
+export declare function requireDatabaseConnection(): Promise<void>;
+//# sourceMappingURL=validate.d.ts.map

package/dist/db/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/db/validate.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,wBAAsB,0BAA0B,IAAI,OAAO,CAAC,wBAAwB,CAAC,CA8BpF;AAED;;GAEG;AACH,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC,CAqB/D"}

package/dist/db/validate.js

@@ -0,0 +1,58 @@
+/**
+ * Database Connection Validation
+ *
+ * Validates that the database is connected and tables exist before allowing the app to start.
+ */
+import { db } from "./client";
+import { sql } from "drizzle-orm";
+/**
+ * Check if database connection is valid and tables exist
+ */
+export async function validateDatabaseConnection() {
+    try {
+        // Test database connection
+        await db.execute(sql `SELECT 1`);
+        // Check if auth tables exist
+        const result = await db.execute(sql `
+      SELECT COUNT(*) as table_count
+      FROM information_schema.tables
+      WHERE table_schema = 'public'
+      AND table_name IN ('users', 'sessions', 'accounts', 'verifications')
+    `);
+        const tableCount = Number(result.rows[0]?.table_count ?? 0);
+        const tablesExist = tableCount === 4;
+        return {
+            isConnected: true,
+            tablesExist,
+            error: tablesExist
+                ? undefined
+                : "Auth tables do not exist. Run 'pnpm --filter @intelligo-dev/core db:push' to create them.",
+        };
+    }
+    catch (error) {
+        return {
+            isConnected: false,
+            tablesExist: false,
+            error: error instanceof Error ? error.message : "Unknown database error",
+        };
+    }
+}
+/**
+ * Validate database or throw error (for startup validation)
+ */
+export async function requireDatabaseConnection() {
+    const result = await validateDatabaseConnection();
+    if (!result.isConnected) {
+        throw new Error(`❌ Database connection failed: ${result.error}\n\n` +
+            `Make sure DATABASE_URL is configured in .env.local\n` +
+            `Example: DATABASE_URL=postgres://user:pass@host/db`);
+    }
+    if (!result.tablesExist) {
+        throw new Error(`❌ Database tables do not exist.\n\n` +
+            `Run the following commands to set up the database:\n` +
+            `  1. pnpm --filter @intelligo-dev/core db:push\n` +
+            `  2. pnpm --filter @intelligo-dev/core db:seed (optional - creates admin user)`);
+    }
+    console.log("✓ Database connection validated");
+}
+//# sourceMappingURL=validate.js.map

package/dist/db/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/db/validate.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,UAAU,CAAC;AAC9B,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAQlC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B;IAC9C,IAAI,CAAC;QACH,2BAA2B;QAC3B,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,UAAU,CAAC,CAAC;QAEhC,6BAA6B;QAC7B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;;;;;KAKlC,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,CAAC,CAAC,CAAC;QAC5D,MAAM,WAAW,GAAG,UAAU,KAAK,CAAC,CAAC;QAErC,OAAO;YACL,WAAW,EAAE,IAAI;YACjB,WAAW;YACX,KAAK,EAAE,WAAW;gBAChB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,2FAA2F;SAChG,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,WAAW,EAAE,KAAK;YAClB,WAAW,EAAE,KAAK;YAClB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB;SACzE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC7C,MAAM,MAAM,GAAG,MAAM,0BAA0B,EAAE,CAAC;IAElD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,iCAAiC,MAAM,CAAC,KAAK,MAAM;YACjD,sDAAsD;YACtD,oDAAoD,CACvD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,qCAAqC;YACnC,sDAAsD;YACtD,kDAAkD;YAClD,gFAAgF,CACnF,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;AACjD,CAAC"}

package/dist/db/workspace-queries.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Workspace-Scoped Query Helpers (WORK-06: Data Isolation)
+ *
+ * DATA ISOLATION MODEL:
+ * - Phase 10 workspace/team operations use Better-Auth organization plugin API exclusively.
+ *   These APIs provide inherent data isolation — all operations are scoped to the
+ *   authenticated user's session and active organization. No raw DB queries needed.
+ *
+ *   Better-Auth API isolation guarantees:
+ *   - auth.api.listOrganizations() — returns ONLY organizations the authenticated user belongs to
+ *   - auth.api.getFullOrganization() — returns ONLY the active organization (set via session)
+ *   - auth.api.createInvitation() — requires organizationId from requireWorkspace() (authenticated context)
+ *   - auth.api.removeMember() — scoped to the organizationId from requireWorkspace()
+ *   - All other org API methods operate on the authenticated user's session context
+ *
+ * - Future phases (11+) will add product-specific tables (conversations, knowledge_bases,
+ *   usage_logs, etc.) that contain a workspaceId column. ALL queries on these tables
+ *   MUST use the helpers below to enforce workspace-scoped data isolation.
+ *
+ * USAGE PATTERN (for future phases):
+ *   import { withWorkspaceFilter } from "@intelligo-dev/core/db/workspace-queries";
+ *   import { requireWorkspace } from "@intelligo-dev/auth";
+ *
+ *   const { workspace } = await requireWorkspace();
+ *   const conversations = await db
+ *     .select()
+ *     .from(conversationsTable)
+ *     .where(withWorkspaceFilter(conversationsTable.workspaceId, workspace.id));
+ */
+import { type SQL } from "drizzle-orm";
+import type { PgColumn } from "drizzle-orm/pg-core";
+/**
+ * Creates a workspace-scoped WHERE condition for any table with a workspaceId column.
+ * Use this in all custom Drizzle queries to enforce data isolation (WORK-06).
+ *
+ * @param workspaceIdColumn - The workspaceId column from the table schema
+ * @param workspaceId - The active workspace ID from requireWorkspace()
+ * @returns SQL condition: workspaceId = ?
+ *
+ * @example
+ * ```typescript
+ * const { workspace } = await requireWorkspace();
+ * const conversations = await db
+ *   .select()
+ *   .from(conversationsTable)
+ *   .where(workspaceEq(conversationsTable.workspaceId, workspace.id));
+ * ```
+ */
+export declare function workspaceEq(workspaceIdColumn: PgColumn, workspaceId: string): SQL;
+/**
+ * Combines a workspace scope condition with additional WHERE conditions.
+ * Convenience helper to ensure workspaceId is always the first filter.
+ *
+ * @param workspaceIdColumn - The workspaceId column from the table schema
+ * @param workspaceId - The active workspace ID from requireWorkspace()
+ * @param additionalConditions - Extra WHERE conditions to AND together
+ * @returns Combined SQL condition: workspaceId = ? AND ...
+ *
+ * @example
+ * ```typescript
+ * const { workspace } = await requireWorkspace();
+ * const activeConversations = await db
+ *   .select()
+ *   .from(conversationsTable)
+ *   .where(
+ *     withWorkspaceFilter(
+ *       conversationsTable.workspaceId,
+ *       workspace.id,
+ *       eq(conversationsTable.status, "active")
+ *     )
+ *   );
+ * ```
+ */
+export declare function withWorkspaceFilter(workspaceIdColumn: PgColumn, workspaceId: string, ...additionalConditions: SQL[]): SQL;
+//# sourceMappingURL=workspace-queries.d.ts.map

package/dist/db/workspace-queries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-queries.d.ts","sourceRoot":"","sources":["../../src/db/workspace-queries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAW,KAAK,GAAG,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,WAAW,CACzB,iBAAiB,EAAE,QAAQ,EAC3B,WAAW,EAAE,MAAM,GAClB,GAAG,CAEL;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,mBAAmB,CACjC,iBAAiB,EAAE,QAAQ,EAC3B,WAAW,EAAE,MAAM,EACnB,GAAG,oBAAoB,EAAE,GAAG,EAAE,GAC7B,GAAG,CAEL"}

package/dist/db/workspace-queries.js

@@ -0,0 +1,78 @@
+/**
+ * Workspace-Scoped Query Helpers (WORK-06: Data Isolation)
+ *
+ * DATA ISOLATION MODEL:
+ * - Phase 10 workspace/team operations use Better-Auth organization plugin API exclusively.
+ *   These APIs provide inherent data isolation — all operations are scoped to the
+ *   authenticated user's session and active organization. No raw DB queries needed.
+ *
+ *   Better-Auth API isolation guarantees:
+ *   - auth.api.listOrganizations() — returns ONLY organizations the authenticated user belongs to
+ *   - auth.api.getFullOrganization() — returns ONLY the active organization (set via session)
+ *   - auth.api.createInvitation() — requires organizationId from requireWorkspace() (authenticated context)
+ *   - auth.api.removeMember() — scoped to the organizationId from requireWorkspace()
+ *   - All other org API methods operate on the authenticated user's session context
+ *
+ * - Future phases (11+) will add product-specific tables (conversations, knowledge_bases,
+ *   usage_logs, etc.) that contain a workspaceId column. ALL queries on these tables
+ *   MUST use the helpers below to enforce workspace-scoped data isolation.
+ *
+ * USAGE PATTERN (for future phases):
+ *   import { withWorkspaceFilter } from "@intelligo-dev/core/db/workspace-queries";
+ *   import { requireWorkspace } from "@intelligo-dev/auth";
+ *
+ *   const { workspace } = await requireWorkspace();
+ *   const conversations = await db
+ *     .select()
+ *     .from(conversationsTable)
+ *     .where(withWorkspaceFilter(conversationsTable.workspaceId, workspace.id));
+ */
+import { eq, and } from "drizzle-orm";
+/**
+ * Creates a workspace-scoped WHERE condition for any table with a workspaceId column.
+ * Use this in all custom Drizzle queries to enforce data isolation (WORK-06).
+ *
+ * @param workspaceIdColumn - The workspaceId column from the table schema
+ * @param workspaceId - The active workspace ID from requireWorkspace()
+ * @returns SQL condition: workspaceId = ?
+ *
+ * @example
+ * ```typescript
+ * const { workspace } = await requireWorkspace();
+ * const conversations = await db
+ *   .select()
+ *   .from(conversationsTable)
+ *   .where(workspaceEq(conversationsTable.workspaceId, workspace.id));
+ * ```
+ */
+export function workspaceEq(workspaceIdColumn, workspaceId) {
+    return eq(workspaceIdColumn, workspaceId);
+}
+/**
+ * Combines a workspace scope condition with additional WHERE conditions.
+ * Convenience helper to ensure workspaceId is always the first filter.
+ *
+ * @param workspaceIdColumn - The workspaceId column from the table schema
+ * @param workspaceId - The active workspace ID from requireWorkspace()
+ * @param additionalConditions - Extra WHERE conditions to AND together
+ * @returns Combined SQL condition: workspaceId = ? AND ...
+ *
+ * @example
+ * ```typescript
+ * const { workspace } = await requireWorkspace();
+ * const activeConversations = await db
+ *   .select()
+ *   .from(conversationsTable)
+ *   .where(
+ *     withWorkspaceFilter(
+ *       conversationsTable.workspaceId,
+ *       workspace.id,
+ *       eq(conversationsTable.status, "active")
+ *     )
+ *   );
+ * ```
+ */
+export function withWorkspaceFilter(workspaceIdColumn, workspaceId, ...additionalConditions) {
+    return and(eq(workspaceIdColumn, workspaceId), ...additionalConditions);
+}
+//# sourceMappingURL=workspace-queries.js.map

package/dist/db/workspace-queries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-queries.js","sourceRoot":"","sources":["../../src/db/workspace-queries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,EAAE,EAAE,GAAG,EAAY,MAAM,aAAa,CAAC;AAGhD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,WAAW,CACzB,iBAA2B,EAC3B,WAAmB;IAEnB,OAAO,EAAE,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,mBAAmB,CACjC,iBAA2B,EAC3B,WAAmB,EACnB,GAAG,oBAA2B;IAE9B,OAAO,GAAG,CAAC,EAAE,CAAC,iBAAiB,EAAE,WAAW,CAAC,EAAE,GAAG,oBAAoB,CAAE,CAAC;AAC3E,CAAC"}

package/dist/documents/classifier.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Document title classifier registry.
+ *
+ * Vertical product packages register their title patterns here; the
+ * document persistence API (./service.ts) uses the same registry to
+ * derive agent labels and the "report" filter. Kept in its own module
+ * with zero imports so client-safe code and tests can load it without
+ * dragging in the server-only persistence chain (db).
+ *
+ * Ported from @intelligo-dev/agents/documents/classifier (ADR-0009) —
+ * unchanged.
+ */
+export type DocumentPatternEntry = {
+    /** Stable product slug — same one used across product configs. */
+    productSlug: string;
+    /** Human-readable agent label rendered in the documents UI. */
+    agentLabel: string;
+    /** Case-insensitive substring patterns; document matches if its
+     *  lowercased title contains ANY of these. */
+    patterns: string[];
+};
+export declare function registerDocumentPatterns(entry: DocumentPatternEntry): void;
+export declare function classifyDocumentTitle(title: string): {
+    productSlug: string | null;
+    agentLabel: string;
+};
+/** Returns true when the document looks like it belongs to any registered product. */
+export declare function isProductDocument(title: string, productSlug?: string): boolean;
+export declare function listRegisteredDocumentPatterns(): readonly DocumentPatternEntry[];
+export declare function clearDocumentPatternRegistry(): void;
+//# sourceMappingURL=classifier.d.ts.map

package/dist/documents/classifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifier.d.ts","sourceRoot":"","sources":["../../src/documents/classifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,oBAAoB,GAAG;IACjC,kEAAkE;IAClE,WAAW,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB;kDAC8C;IAC9C,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC;AAIF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,CAE1E;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG;IACpD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;CACpB,CAQA;AAED,sFAAsF;AACtF,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAKT;AAED,wBAAgB,8BAA8B,IAAI,SAAS,oBAAoB,EAAE,CAEhF;AAED,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD"}

package/dist/documents/classifier.js

@@ -0,0 +1,41 @@
+/**
+ * Document title classifier registry.
+ *
+ * Vertical product packages register their title patterns here; the
+ * document persistence API (./service.ts) uses the same registry to
+ * derive agent labels and the "report" filter. Kept in its own module
+ * with zero imports so client-safe code and tests can load it without
+ * dragging in the server-only persistence chain (db).
+ *
+ * Ported from @intelligo-dev/agents/documents/classifier (ADR-0009) —
+ * unchanged.
+ */
+const registry = [];
+export function registerDocumentPatterns(entry) {
+    registry.push(entry);
+}
+export function classifyDocumentTitle(title) {
+    const lower = title.toLowerCase();
+    for (const entry of registry) {
+        if (entry.patterns.some((p) => lower.includes(p))) {
+            return { productSlug: entry.productSlug, agentLabel: entry.agentLabel };
+        }
+    }
+    return { productSlug: null, agentLabel: "AI Assistant" };
+}
+/** Returns true when the document looks like it belongs to any registered product. */
+export function isProductDocument(title, productSlug) {
+    const { productSlug: matched } = classifyDocumentTitle(title);
+    if (!matched)
+        return false;
+    if (productSlug)
+        return matched === productSlug;
+    return true;
+}
+export function listRegisteredDocumentPatterns() {
+    return registry;
+}
+export function clearDocumentPatternRegistry() {
+    registry.length = 0;
+}
+//# sourceMappingURL=classifier.js.map

package/dist/documents/classifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifier.js","sourceRoot":"","sources":["../../src/documents/classifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAYH,MAAM,QAAQ,GAA2B,EAAE,CAAC;AAE5C,MAAM,UAAU,wBAAwB,CAAC,KAA2B;IAClE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAa;IAIjD,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;AAC3D,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,WAAoB;IAEpB,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC9D,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,WAAW;QAAE,OAAO,OAAO,KAAK,WAAW,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,8BAA8B;IAC5C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;AACtB,CAAC"}

package/dist/documents/errors.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Document service error type.
+ *
+ * Mirrors `@intelligo-dev/auth`'s `WorkspaceServiceError` exactly (see that
+ * file's doc comment for the full rationale): the documents service
+ * (./service.ts) throws this for every failure it recognizes rather
+ * than returning an ad-hoc `{ success, error }` envelope — that
+ * shaping is a transport concern (a Server Action, a route handler)
+ * and belongs one layer up, alongside revalidatePath/Sentry/i18n, none
+ * of which this package may depend on (core's dependency allowlist is
+ * empty — see tests/architecture/dependency-direction.test.ts).
+ */
+/**
+ * - `not_found` — no document (or no version of it) exists at the
+ *   given id within the actor's workspace/user scope.
+ * - `forbidden` — a document with this id exists but is owned by a
+ *   different user within the same workspace.
+ * - `invalid_input` — a caller-supplied argument failed a basic
+ *   invariant (e.g. an unparsable or out-of-window delete timestamp).
+ * - `database_error` — the underlying insert/update did not return the
+ *   row it was expected to.
+ */
+export type DocumentServiceErrorCode = "not_found" | "forbidden" | "invalid_input" | "database_error";
+export declare class DocumentServiceError extends Error {
+    readonly code: DocumentServiceErrorCode;
+    readonly cause?: unknown;
+    constructor(code: DocumentServiceErrorCode, message: string, options?: {
+        cause?: unknown;
+    });
+}
+export declare function isDocumentServiceError(error: unknown): error is DocumentServiceError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/documents/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/documents/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;;;;;;GASG;AACH,MAAM,MAAM,wBAAwB,GAChC,WAAW,GACX,WAAW,GACX,eAAe,GACf,gBAAgB,CAAC;AAErB,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IAIxC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;gBAGvB,IAAI,EAAE,wBAAwB,EAC9B,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAUhC;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,oBAAoB,CAE/B"}

package/dist/documents/errors.js

@@ -0,0 +1,27 @@
+/**
+ * Document service error type.
+ *
+ * Mirrors `@intelligo-dev/auth`'s `WorkspaceServiceError` exactly (see that
+ * file's doc comment for the full rationale): the documents service
+ * (./service.ts) throws this for every failure it recognizes rather
+ * than returning an ad-hoc `{ success, error }` envelope — that
+ * shaping is a transport concern (a Server Action, a route handler)
+ * and belongs one layer up, alongside revalidatePath/Sentry/i18n, none
+ * of which this package may depend on (core's dependency allowlist is
+ * empty — see tests/architecture/dependency-direction.test.ts).
+ */
+export class DocumentServiceError extends Error {
+    constructor(code, message, options) {
+        super(message);
+        this.name = "DocumentServiceError";
+        this.code = code;
+        if (options?.cause !== undefined) {
+            this.cause = options.cause;
+        }
+        Object.setPrototypeOf(this, DocumentServiceError.prototype);
+    }
+}
+export function isDocumentServiceError(error) {
+    return error instanceof DocumentServiceError;
+}
+//# sourceMappingURL=errors.js.map

package/dist/documents/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/documents/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAkBH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAO7C,YACE,IAA8B,EAC9B,OAAe,EACf,OAA6B;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,IAA4B,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACtD,CAAC;QACD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;CACF;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAc;IAEd,OAAO,KAAK,YAAY,oBAAoB,CAAC;AAC/C,CAAC"}