@intelligo-dev/core 1.0.0-beta.1

package/dist/email/templates/verify-email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-email.js","sourceRoot":"","sources":["../../../src/email/templates/verify-email.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAe3C,MAAM,UAAU,gBAAgB,CAAC,EAC/B,QAAQ,EACR,eAAe,EACf,MAAM,GAAG,IAAI,GACS;IACtB,MAAM,IAAI,GACR,MAAM,KAAK,IAAI;QACb,CAAC,CAAC;YACE,OAAO,EAAE,gCAAgC;YACzC,OAAO,EAAE,sBAAsB;YAC/B,QAAQ,EAAE,eAAe;YACzB,IAAI,EAAE,oDAAoD;YAC1D,MAAM,EAAE,sBAAsB;YAC9B,IAAI,EAAE,8GAA8G;SACrH;QACH,CAAC,CAAC;YACE,OAAO,EAAE,2BAA2B;YACpC,OAAO,EAAE,mBAAmB;YAC5B,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,gEAAgE;YACtE,MAAM,EAAE,cAAc;YACtB,IAAI,EAAE,mGAAmG;SAC1G,CAAC;IAER,OAAO,CACL,MAAC,UAAU,IAAC,OAAO,EAAE,IAAI,CAAC,OAAO,aAC/B,KAAC,IAAI,IAAC,KAAK,EAAE,YAAY,YAAG,IAAI,CAAC,OAAO,GAAQ,EAChD,MAAC,IAAI,IAAC,KAAK,EAAE,aAAa,aACvB,IAAI,CAAC,QAAQ,OAAG,QAAQ,SACpB,EACP,KAAC,IAAI,IAAC,KAAK,EAAE,aAAa,YAAG,IAAI,CAAC,IAAI,GAAQ,EAC9C,KAAC,MAAM,IAAC,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW,YAC9C,IAAI,CAAC,MAAM,GACL,EACT,KAAC,IAAI,IAAC,KAAK,EAAE,SAAS,YAAG,IAAI,CAAC,IAAI,GAAQ,IAC/B,CACd,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,MAAM,YAAY,GAAwB;IACxC,KAAK,EAAE,SAAS;IAChB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,GAAG;IACf,UAAU,EAAE,MAAM;IAClB,MAAM,EAAE,UAAU;CACnB,CAAC;AAEF,MAAM,aAAa,GAAwB;IACzC,KAAK,EAAE,SAAS;IAChB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,MAAM,EAAE,UAAU;CACnB,CAAC;AAEF,MAAM,WAAW,GAAwB;IACvC,eAAe,EAAE,SAAS;IAC1B,YAAY,EAAE,KAAK;IACnB,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE,cAAc;IACvB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,GAAG;IACf,UAAU,EAAE,MAAM;IAClB,OAAO,EAAE,WAAW;IACpB,cAAc,EAAE,MAAM;IACtB,SAAS,EAAE,QAAiB;IAC5B,SAAS,EAAE,KAAK;CACjB,CAAC;AAEF,MAAM,SAAS,GAAwB;IACrC,KAAK,EAAE,SAAS;IAChB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,MAAM;CAClB,CAAC"}

package/dist/email/templates/welcome.d.ts

@@ -0,0 +1,7 @@
+export interface WelcomeEmailProps {
+    userName: string;
+    dashboardUrl: string;
+    locale?: "en" | "mn";
+}
+export declare function WelcomeEmail({ userName, dashboardUrl, locale, }: WelcomeEmailProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=welcome.d.ts.map

package/dist/email/templates/welcome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"welcome.d.ts","sourceRoot":"","sources":["../../../src/email/templates/welcome.tsx"],"names":[],"mappings":"AAUA,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACtB;AAED,wBAAgB,YAAY,CAAC,EAC3B,QAAQ,EACR,YAAY,EACZ,MAAa,GACd,EAAE,iBAAiB,2CA8BnB"}

package/dist/email/templates/welcome.js

@@ -0,0 +1,51 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Button, Text } from "@react-email/components";
+import { BaseLayout } from "./base-layout";
+export function WelcomeEmail({ userName, dashboardUrl, locale = "en", }) {
+    const text = locale === "mn"
+        ? {
+            preview: `Тавтай морил, ${userName}!`,
+            heading: "Intelligo-д тавтай морил",
+            greeting: "Сайн байна уу",
+            body: "Бүртгүүлсэнд баярлалаа! Та одоо AI хэрэгслүүдийг ашиглаж бүтээмжээ нэмэгдүүлэх бэлэн боллоо.",
+            button: "Хянах самбар руу очих",
+        }
+        : {
+            preview: `Welcome to Intelligo, ${userName}!`,
+            heading: "Welcome to Intelligo",
+            greeting: "Hi",
+            body: "Thanks for signing up! You're all set to start using AI-powered tools to boost your productivity.",
+            button: "Go to Dashboard",
+        };
+    return (_jsxs(BaseLayout, { preview: text.preview, children: [_jsx(Text, { style: headingStyle, children: text.heading }), _jsxs(Text, { style: bodyTextStyle, children: [text.greeting, " ", userName, ","] }), _jsx(Text, { style: bodyTextStyle, children: text.body }), _jsx(Button, { href: dashboardUrl, style: buttonStyle, children: text.button })] }));
+}
+// ---------------------------------------------------------------------------
+// Inline Styles
+// ---------------------------------------------------------------------------
+const headingStyle = {
+    color: "#18181b",
+    fontSize: "22px",
+    fontWeight: 700,
+    lineHeight: "30px",
+    margin: "0 0 16px",
+};
+const bodyTextStyle = {
+    color: "#18181b",
+    fontSize: "15px",
+    lineHeight: "24px",
+    margin: "0 0 12px",
+};
+const buttonStyle = {
+    backgroundColor: "#7c3aed",
+    borderRadius: "6px",
+    color: "#ffffff",
+    display: "inline-block",
+    fontSize: "15px",
+    fontWeight: 600,
+    lineHeight: "100%",
+    padding: "12px 24px",
+    textDecoration: "none",
+    textAlign: "center",
+    marginTop: "8px",
+};
+//# sourceMappingURL=welcome.js.map

package/dist/email/templates/welcome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"welcome.js","sourceRoot":"","sources":["../../../src/email/templates/welcome.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAc3C,MAAM,UAAU,YAAY,CAAC,EAC3B,QAAQ,EACR,YAAY,EACZ,MAAM,GAAG,IAAI,GACK;IAClB,MAAM,IAAI,GACR,MAAM,KAAK,IAAI;QACb,CAAC,CAAC;YACE,OAAO,EAAE,iBAAiB,QAAQ,GAAG;YACrC,OAAO,EAAE,0BAA0B;YACnC,QAAQ,EAAE,eAAe;YACzB,IAAI,EAAE,8FAA8F;YACpG,MAAM,EAAE,uBAAuB;SAChC;QACH,CAAC,CAAC;YACE,OAAO,EAAE,yBAAyB,QAAQ,GAAG;YAC7C,OAAO,EAAE,sBAAsB;YAC/B,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,mGAAmG;YACzG,MAAM,EAAE,iBAAiB;SAC1B,CAAC;IAER,OAAO,CACL,MAAC,UAAU,IAAC,OAAO,EAAE,IAAI,CAAC,OAAO,aAC/B,KAAC,IAAI,IAAC,KAAK,EAAE,YAAY,YAAG,IAAI,CAAC,OAAO,GAAQ,EAChD,MAAC,IAAI,IAAC,KAAK,EAAE,aAAa,aACvB,IAAI,CAAC,QAAQ,OAAG,QAAQ,SACpB,EACP,KAAC,IAAI,IAAC,KAAK,EAAE,aAAa,YAAG,IAAI,CAAC,IAAI,GAAQ,EAC9C,KAAC,MAAM,IAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,YAC3C,IAAI,CAAC,MAAM,GACL,IACE,CACd,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,MAAM,YAAY,GAAwB;IACxC,KAAK,EAAE,SAAS;IAChB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,GAAG;IACf,UAAU,EAAE,MAAM;IAClB,MAAM,EAAE,UAAU;CACnB,CAAC;AAEF,MAAM,aAAa,GAAwB;IACzC,KAAK,EAAE,SAAS;IAChB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,MAAM,EAAE,UAAU;CACnB,CAAC;AAEF,MAAM,WAAW,GAAwB;IACvC,eAAe,EAAE,SAAS;IAC1B,YAAY,EAAE,KAAK;IACnB,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE,cAAc;IACvB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,GAAG;IACf,UAAU,EAAE,MAAM;IAClB,OAAO,EAAE,WAAW;IACpB,cAAc,EAAE,MAAM;IACtB,SAAS,EAAE,QAAiB;IAC5B,SAAS,EAAE,KAAK;CACjB,CAAC"}

package/dist/email/templates/workspace-invitation.d.ts

@@ -0,0 +1,10 @@
+export interface WorkspaceInvitationEmailProps {
+    inviterName: string;
+    workspaceName: string;
+    role: string;
+    acceptUrl: string;
+    declineUrl: string;
+    locale?: "en" | "mn";
+}
+export declare function WorkspaceInvitationEmail({ inviterName, workspaceName, role, acceptUrl, declineUrl, locale, }: WorkspaceInvitationEmailProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=workspace-invitation.d.ts.map

package/dist/email/templates/workspace-invitation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-invitation.d.ts","sourceRoot":"","sources":["../../../src/email/templates/workspace-invitation.tsx"],"names":[],"mappings":"AAUA,MAAM,WAAW,6BAA6B;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;CACtB;AAED,wBAAgB,wBAAwB,CAAC,EACvC,WAAW,EACX,aAAa,EACb,IAAI,EACJ,SAAS,EACT,UAAU,EACV,MAAa,GACd,EAAE,6BAA6B,2CA4C/B"}

package/dist/email/templates/workspace-invitation.js

@@ -0,0 +1,79 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Button, Section, Text } from "@react-email/components";
+import { BaseLayout } from "./base-layout";
+export function WorkspaceInvitationEmail({ inviterName, workspaceName, role, acceptUrl, declineUrl, locale = "en", }) {
+    const text = locale === "mn"
+        ? {
+            preview: `${inviterName} таныг ${workspaceName} руу урьсан байна`,
+            heading: "Та урьигдсан байна!",
+            body: "таныг ажлын орчинд",
+            as: "нэртэй",
+            invitedYou: "урьж байна",
+            acceptButton: "Урилга хүлээн авах",
+            declineButton: "Татгалзах",
+            note: "Энэ урилга 7 хоногийн дараа хүчингүй болно.",
+        }
+        : {
+            preview: `${inviterName} invited you to join ${workspaceName}`,
+            heading: "You're invited!",
+            body: "has invited you to join the workspace",
+            as: "as a",
+            invitedYou: "",
+            acceptButton: "Accept Invitation",
+            declineButton: "Decline",
+            note: "This invitation expires in 7 days.",
+        };
+    return (_jsxs(BaseLayout, { preview: text.preview, children: [_jsx(Text, { style: headingStyle, children: text.heading }), _jsxs(Text, { style: bodyTextStyle, children: [_jsx("strong", { children: inviterName }), " ", text.body, " ", _jsxs("strong", { children: ["\u2018", workspaceName, "\u2019"] }), " ", text.as, " ", _jsx("strong", { children: role }), text.invitedYou ? ` ${text.invitedYou}` : "", "."] }), _jsxs(Section, { style: buttonGroupStyle, children: [_jsx(Button, { href: acceptUrl, style: acceptButtonStyle, children: text.acceptButton }), _jsx(Button, { href: declineUrl, style: declineButtonStyle, children: text.declineButton })] }), _jsx(Text, { style: noteStyle, children: text.note })] }));
+}
+// ---------------------------------------------------------------------------
+// Inline Styles
+// ---------------------------------------------------------------------------
+const headingStyle = {
+    color: "#18181b",
+    fontSize: "22px",
+    fontWeight: 700,
+    lineHeight: "30px",
+    margin: "0 0 16px",
+};
+const bodyTextStyle = {
+    color: "#18181b",
+    fontSize: "15px",
+    lineHeight: "24px",
+    margin: "0 0 12px",
+};
+const buttonGroupStyle = {
+    marginTop: "8px",
+};
+const acceptButtonStyle = {
+    backgroundColor: "#7c3aed",
+    borderRadius: "6px",
+    color: "#ffffff",
+    display: "inline-block",
+    fontSize: "15px",
+    fontWeight: 600,
+    lineHeight: "100%",
+    padding: "12px 24px",
+    textDecoration: "none",
+    textAlign: "center",
+    marginRight: "12px",
+};
+const declineButtonStyle = {
+    backgroundColor: "transparent",
+    border: "1px solid #d4d4d8",
+    borderRadius: "6px",
+    color: "#71717a",
+    display: "inline-block",
+    fontSize: "15px",
+    fontWeight: 600,
+    lineHeight: "100%",
+    padding: "12px 24px",
+    textDecoration: "none",
+    textAlign: "center",
+};
+const noteStyle = {
+    color: "#71717a",
+    fontSize: "13px",
+    lineHeight: "20px",
+    marginTop: "20px",
+};
+//# sourceMappingURL=workspace-invitation.js.map

package/dist/email/templates/workspace-invitation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-invitation.js","sourceRoot":"","sources":["../../../src/email/templates/workspace-invitation.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEhE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAiB3C,MAAM,UAAU,wBAAwB,CAAC,EACvC,WAAW,EACX,aAAa,EACb,IAAI,EACJ,SAAS,EACT,UAAU,EACV,MAAM,GAAG,IAAI,GACiB;IAC9B,MAAM,IAAI,GACR,MAAM,KAAK,IAAI;QACb,CAAC,CAAC;YACE,OAAO,EAAE,GAAG,WAAW,UAAU,aAAa,mBAAmB;YACjE,OAAO,EAAE,qBAAqB;YAC9B,IAAI,EAAE,oBAAoB;YAC1B,EAAE,EAAE,QAAQ;YACZ,UAAU,EAAE,YAAY;YACxB,YAAY,EAAE,oBAAoB;YAClC,aAAa,EAAE,WAAW;YAC1B,IAAI,EAAE,6CAA6C;SACpD;QACH,CAAC,CAAC;YACE,OAAO,EAAE,GAAG,WAAW,wBAAwB,aAAa,EAAE;YAC9D,OAAO,EAAE,iBAAiB;YAC1B,IAAI,EAAE,uCAAuC;YAC7C,EAAE,EAAE,MAAM;YACV,UAAU,EAAE,EAAE;YACd,YAAY,EAAE,mBAAmB;YACjC,aAAa,EAAE,SAAS;YACxB,IAAI,EAAE,oCAAoC;SAC3C,CAAC;IAER,OAAO,CACL,MAAC,UAAU,IAAC,OAAO,EAAE,IAAI,CAAC,OAAO,aAC/B,KAAC,IAAI,IAAC,KAAK,EAAE,YAAY,YAAG,IAAI,CAAC,OAAO,GAAQ,EAChD,MAAC,IAAI,IAAC,KAAK,EAAE,aAAa,aACxB,2BAAS,WAAW,GAAU,OAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAC9C,uCAAgB,aAAa,cAAiB,OAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAC5D,2BAAS,IAAI,GAAU,EACtB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,SACxC,EACP,MAAC,OAAO,IAAC,KAAK,EAAE,gBAAgB,aAC9B,KAAC,MAAM,IAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,iBAAiB,YAC9C,IAAI,CAAC,YAAY,GACX,EACT,KAAC,MAAM,IAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,kBAAkB,YAChD,IAAI,CAAC,aAAa,GACZ,IACD,EACV,KAAC,IAAI,IAAC,KAAK,EAAE,SAAS,YAAG,IAAI,CAAC,IAAI,GAAQ,IAC/B,CACd,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,MAAM,YAAY,GAAwB;IACxC,KAAK,EAAE,SAAS;IAChB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,GAAG;IACf,UAAU,EAAE,MAAM;IAClB,MAAM,EAAE,UAAU;CACnB,CAAC;AAEF,MAAM,aAAa,GAAwB;IACzC,KAAK,EAAE,SAAS;IAChB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,MAAM,EAAE,UAAU;CACnB,CAAC;AAEF,MAAM,gBAAgB,GAAwB;IAC5C,SAAS,EAAE,KAAK;CACjB,CAAC;AAEF,MAAM,iBAAiB,GAAwB;IAC7C,eAAe,EAAE,SAAS;IAC1B,YAAY,EAAE,KAAK;IACnB,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE,cAAc;IACvB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,GAAG;IACf,UAAU,EAAE,MAAM;IAClB,OAAO,EAAE,WAAW;IACpB,cAAc,EAAE,MAAM;IACtB,SAAS,EAAE,QAAiB;IAC5B,WAAW,EAAE,MAAM;CACpB,CAAC;AAEF,MAAM,kBAAkB,GAAwB;IAC9C,eAAe,EAAE,aAAa;IAC9B,MAAM,EAAE,mBAAmB;IAC3B,YAAY,EAAE,KAAK;IACnB,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE,cAAc;IACvB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,GAAG;IACf,UAAU,EAAE,MAAM;IAClB,OAAO,EAAE,WAAW;IACpB,cAAc,EAAE,MAAM;IACtB,SAAS,EAAE,QAAiB;CAC7B,CAAC;AAEF,MAAM,SAAS,GAAwB;IACrC,KAAK,EAAE,SAAS;IAChB,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,MAAM;CAClB,CAAC"}

package/dist/env.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Environment Variable Validation
+ *
+ * Validates required environment variables at startup.
+ * Fail-fast approach: missing critical env vars throw immediately
+ * rather than failing at runtime when the feature is first used.
+ *
+ * Usage: Import and call validateEnv() in app layout or middleware.
+ * Note: Some vars are optional for local dev (STRIPE_*, RESEND_API_KEY).
+ */
+export declare function validateEnv(): {
+    valid: boolean;
+    errors: string[];
+    warnings: string[];
+};
+/**
+ * Log validation results. Call during app initialization.
+ * Throws on missing required vars; logs warnings for optional vars.
+ */
+export declare function assertEnv(): void;
+//# sourceMappingURL=env.d.ts.map

package/dist/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA2EH,wBAAgB,WAAW,IAAI;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CA8CA;AAED;;;GAGG;AACH,wBAAgB,SAAS,IAAI,IAAI,CAgBhC"}

package/dist/env.js

@@ -0,0 +1,129 @@
+/**
+ * Environment Variable Validation
+ *
+ * Validates required environment variables at startup.
+ * Fail-fast approach: missing critical env vars throw immediately
+ * rather than failing at runtime when the feature is first used.
+ *
+ * Usage: Import and call validateEnv() in app layout or middleware.
+ * Note: Some vars are optional for local dev (STRIPE_*, RESEND_API_KEY).
+ */
+const ENV_VARS = [
+    {
+        name: "DATABASE_URL",
+        required: true,
+        description: "PostgreSQL connection string",
+    },
+    {
+        name: "AUTH_SECRET",
+        required: true,
+        description: "Better-Auth session encryption key",
+        minLength: 32,
+    },
+    {
+        name: "NEXT_PUBLIC_APP_URL",
+        required: true,
+        description: "Application base URL for auth and redirects",
+    },
+    {
+        name: "OPENAI_API_KEY",
+        required: false,
+        description: "OpenAI API key (AI chat features)",
+    },
+    {
+        name: "STRIPE_SECRET_KEY",
+        required: false,
+        description: "Stripe API key (billing features)",
+    },
+    {
+        name: "STRIPE_WEBHOOK_SECRET",
+        required: false,
+        description: "Stripe webhook signature secret",
+    },
+    {
+        name: "NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY",
+        required: false,
+        description: "Stripe publishable key (billing UI)",
+    },
+    {
+        name: "RESEND_API_KEY",
+        required: false,
+        description: "Resend API key (email features)",
+    },
+    {
+        name: "LOOPS_API_KEY",
+        required: false,
+        description: "Loops API key (email features; templates mapped via LOOPS_TRANSACTIONAL_ID_*)",
+    },
+    {
+        name: "EMAIL_PROVIDER",
+        required: false,
+        description: "Explicit email provider selection (resend | loops | console)",
+    },
+    // Cron endpoints (e.g. /api/cron/trial-expiry) gate on a Bearer
+    // header equal to CRON_SECRET. The secret is optional in dev so
+    // local cron testing isn't blocked, but production MUST set it
+    // and the value must be at least 32 chars to resist guessing.
+    {
+        name: "CRON_SECRET",
+        required: false,
+        description: "Shared secret for /api/cron/* Bearer auth",
+        minLength: 32,
+    },
+];
+export function validateEnv() {
+    const errors = [];
+    const warnings = [];
+    for (const envVar of ENV_VARS) {
+        const value = process.env[envVar.name];
+        if (!value || value.trim() === "") {
+            if (envVar.required) {
+                errors.push(`Missing required env var: ${envVar.name} — ${envVar.description}`);
+            }
+            else {
+                warnings.push(`Missing optional env var: ${envVar.name} — ${envVar.description}`);
+            }
+            continue;
+        }
+        if (envVar.minLength && value.length < envVar.minLength) {
+            const msg = `${envVar.name} is shorter than ${envVar.minLength} chars — too weak for ${envVar.description}`;
+            if (envVar.required) {
+                errors.push(msg);
+            }
+            else {
+                warnings.push(msg);
+            }
+        }
+    }
+    // Production safety checks
+    if (process.env.NODE_ENV === "production") {
+        if (process.env.STRIPE_SECRET_KEY?.startsWith("sk_test_")) {
+            warnings.push("STRIPE_SECRET_KEY is a test key in production environment");
+        }
+        if (!process.env.CRON_SECRET || process.env.CRON_SECRET.length < 32) {
+            // Promote to error in production — an unset or weak cron secret
+            // means the cron endpoints are wide open to anyone who guesses
+            // the path.
+            errors.push("CRON_SECRET must be set (≥32 chars) in production for /api/cron/* auth");
+        }
+    }
+    return { valid: errors.length === 0, errors, warnings };
+}
+/**
+ * Log validation results. Call during app initialization.
+ * Throws on missing required vars; logs warnings for optional vars.
+ */
+export function assertEnv() {
+    const { valid, errors, warnings } = validateEnv();
+    for (const warning of warnings) {
+        console.warn(`[Env] ${warning}`);
+    }
+    if (!valid) {
+        console.error("[Env] Missing required environment variables:");
+        for (const error of errors) {
+            console.error(`  - ${error}`);
+        }
+        throw new Error(`Missing ${errors.length} required environment variable(s). See logs above.`);
+    }
+}
+//# sourceMappingURL=env.js.map

package/dist/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAUH,MAAM,QAAQ,GAAa;IACzB;QACE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,8BAA8B;KAC5C;IACD;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,oCAAoC;QACjD,SAAS,EAAE,EAAE;KACd;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,6CAA6C;KAC3D;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,mCAAmC;KACjD;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,mCAAmC;KACjD;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,iCAAiC;KAC/C;IACD;QACE,IAAI,EAAE,oCAAoC;QAC1C,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,qCAAqC;KACnD;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,iCAAiC;KAC/C;IACD;QACE,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,KAAK;QACf,WAAW,EACT,+EAA+E;KAClF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,8DAA8D;KAC5E;IACD,gEAAgE;IAChE,gEAAgE;IAChE,+DAA+D;IAC/D,8DAA8D;IAC9D;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,2CAA2C;QACxD,SAAS,EAAE,EAAE;KACd;CACF,CAAC;AAEF,MAAM,UAAU,WAAW;IAKzB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAClC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CACT,6BAA6B,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,WAAW,EAAE,CACnE,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CACX,6BAA6B,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,WAAW,EAAE,CACnE,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;YACxD,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,oBAAoB,MAAM,CAAC,SAAS,yBAAyB,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5G,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1D,QAAQ,CAAC,IAAI,CACX,2DAA2D,CAC5D,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACpE,gEAAgE;YAChE,+DAA+D;YAC/D,YAAY;YACZ,MAAM,CAAC,IAAI,CACT,wEAAwE,CACzE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS;IACvB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,CAAC;IAElD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC/D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,WAAW,MAAM,CAAC,MAAM,oDAAoD,CAC7E,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/identity/audit.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Memory-audit write — the ADR-0008 destination, reconciled with the
+ * allowlist.
+ *
+ * ADR-0008 names `@intelligo-dev/audit` as `recordMemoryAudit`'s
+ * destination. `tests/architecture/dependency-direction.test.ts` only
+ * grants the audit -> core edge (`audit: ["@intelligo-dev/core"]`);
+ * `@intelligo-dev/core`'s own allowlist entry is empty
+ * (`core: []` — see `../documents/service.ts`'s doc comment for the
+ * same constraint against `@intelligo-dev/auth`). This module — part of
+ * `@intelligo-dev/core/identity`, which owns `user_memory_audit` alongside
+ * the rest of the identity graph (see `../db/schema/identity.ts`) —
+ * therefore cannot import `@intelligo-dev/audit` to call a writer defined
+ * there.
+ *
+ * `@intelligo-dev/audit` exports the event *contract* only
+ * (`packages/audit/src/memory-audit.ts`, re-exported from its index).
+ * This file is the faithful, in-package port of the write itself,
+ * ported verbatim from `@intelligo-dev/agents/memory/audit.ts` (ADR-0008),
+ * kept local so `./service.ts`'s mutations (`deleteFact`,
+ * `exportIdentity`) never cross the disallowed core -> audit edge.
+ * Not re-exported from `./index.ts`: it is this module's own
+ * implementation detail, not identity's public API.
+ */
+import type { AuditTargetKind, AuditAction, AuditActorKind, UserMemoryAuditRow } from "../db/schema";
+export type RecordMemoryAuditInput = {
+    userId: string;
+    workspaceId: string;
+    targetKind: AuditTargetKind;
+    targetId: string;
+    action: AuditAction;
+    actorKind: AuditActorKind;
+    actorId?: string;
+    beforeValue?: unknown;
+    afterValue?: unknown;
+    reason?: string;
+};
+export declare function recordMemoryAudit(input: RecordMemoryAuditInput): Promise<UserMemoryAuditRow>;
+//# sourceMappingURL=audit.d.ts.map

package/dist/identity/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/identity/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,OAAO,KAAK,EACV,eAAe,EACf,WAAW,EACX,cAAc,EACd,kBAAkB,EACnB,MAAM,cAAc,CAAC;AAGtB,MAAM,MAAM,sBAAsB,GAAG;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,eAAe,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,cAAc,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CA2B7B"}

package/dist/identity/audit.js

@@ -0,0 +1,51 @@
+/**
+ * Memory-audit write — the ADR-0008 destination, reconciled with the
+ * allowlist.
+ *
+ * ADR-0008 names `@intelligo-dev/audit` as `recordMemoryAudit`'s
+ * destination. `tests/architecture/dependency-direction.test.ts` only
+ * grants the audit -> core edge (`audit: ["@intelligo-dev/core"]`);
+ * `@intelligo-dev/core`'s own allowlist entry is empty
+ * (`core: []` — see `../documents/service.ts`'s doc comment for the
+ * same constraint against `@intelligo-dev/auth`). This module — part of
+ * `@intelligo-dev/core/identity`, which owns `user_memory_audit` alongside
+ * the rest of the identity graph (see `../db/schema/identity.ts`) —
+ * therefore cannot import `@intelligo-dev/audit` to call a writer defined
+ * there.
+ *
+ * `@intelligo-dev/audit` exports the event *contract* only
+ * (`packages/audit/src/memory-audit.ts`, re-exported from its index).
+ * This file is the faithful, in-package port of the write itself,
+ * ported verbatim from `@intelligo-dev/agents/memory/audit.ts` (ADR-0008),
+ * kept local so `./service.ts`'s mutations (`deleteFact`,
+ * `exportIdentity`) never cross the disallowed core -> audit edge.
+ * Not re-exported from `./index.ts`: it is this module's own
+ * implementation detail, not identity's public API.
+ */
+import { db } from "../db";
+import { userMemoryAudit } from "../db/schema";
+import { IdentityServiceError } from "./errors";
+export async function recordMemoryAudit(input) {
+    const [row] = await db
+        .insert(userMemoryAudit)
+        .values({
+        id: crypto.randomUUID(),
+        userId: input.userId,
+        workspaceId: input.workspaceId,
+        targetKind: input.targetKind,
+        targetId: input.targetId,
+        action: input.action,
+        actorKind: input.actorKind,
+        actorId: input.actorId,
+        beforeValue: input.beforeValue,
+        afterValue: input.afterValue,
+        reason: input.reason,
+        createdAt: new Date(),
+    })
+        .returning();
+    if (!row) {
+        throw new IdentityServiceError("database_error", "Failed to record memory audit event");
+    }
+    return row;
+}
+//# sourceMappingURL=audit.js.map

package/dist/identity/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/identity/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAO/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAehD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAA6B;IAE7B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,CAAC,eAAe,CAAC;SACvB,MAAM,CAAC;QACN,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;QACvB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,IAAI,IAAI,EAAE;KACtB,CAAC;SACD,SAAS,EAAE,CAAC;IAEf,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,oBAAoB,CAC5B,gBAAgB,EAChB,qCAAqC,CACtC,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/identity/errors.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Identity service error type.
+ *
+ * Mirrors `../documents/errors.ts` and `../conversations/errors.ts`
+ * exactly (see either's doc comment for the full rationale): the
+ * identity service (./service.ts) throws this for every failure it
+ * recognizes rather than returning an ad-hoc `{ success, error }`
+ * envelope. Shaping to a transport-facing envelope (plus
+ * Sentry/logging/revalidatePath) is the caller's job, one layer up.
+ */
+/**
+ * - `not_found` — no fact exists at the given id within the actor's
+ *   workspace/user scope. Covers both "no such fact" and "a fact that
+ *   belongs to a different user in the same workspace" — the two are
+ *   deliberately indistinguishable to the caller (same reasoning as
+ *   `../conversations/service.ts`'s `verifyConversation`: an id alone
+ *   should never reveal whose data exists behind it).
+ * - `invalid_input` — a caller-supplied argument failed a basic
+ *   invariant (e.g. an empty fact id).
+ * - `database_error` — the underlying insert did not return the row it
+ *   was expected to.
+ */
+export type IdentityServiceErrorCode = "not_found" | "invalid_input" | "database_error";
+export declare class IdentityServiceError extends Error {
+    readonly code: IdentityServiceErrorCode;
+    readonly cause?: unknown;
+    constructor(code: IdentityServiceErrorCode, message: string, options?: {
+        cause?: unknown;
+    });
+}
+export declare function isIdentityServiceError(error: unknown): error is IdentityServiceError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/identity/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/identity/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,wBAAwB,GAChC,WAAW,GACX,eAAe,GACf,gBAAgB,CAAC;AAErB,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IAIxC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;gBAGvB,IAAI,EAAE,wBAAwB,EAC9B,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAUhC;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,oBAAoB,CAE/B"}

package/dist/identity/errors.js

@@ -0,0 +1,25 @@
+/**
+ * Identity service error type.
+ *
+ * Mirrors `../documents/errors.ts` and `../conversations/errors.ts`
+ * exactly (see either's doc comment for the full rationale): the
+ * identity service (./service.ts) throws this for every failure it
+ * recognizes rather than returning an ad-hoc `{ success, error }`
+ * envelope. Shaping to a transport-facing envelope (plus
+ * Sentry/logging/revalidatePath) is the caller's job, one layer up.
+ */
+export class IdentityServiceError extends Error {
+    constructor(code, message, options) {
+        super(message);
+        this.name = "IdentityServiceError";
+        this.code = code;
+        if (options?.cause !== undefined) {
+            this.cause = options.cause;
+        }
+        Object.setPrototypeOf(this, IdentityServiceError.prototype);
+    }
+}
+export function isIdentityServiceError(error) {
+    return error instanceof IdentityServiceError;
+}
+//# sourceMappingURL=errors.js.map

package/dist/identity/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/identity/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAmBH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAO7C,YACE,IAA8B,EAC9B,OAAe,EACf,OAA6B;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,IAA4B,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACtD,CAAC;QACD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;CACF;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAc;IAEd,OAAO,KAAK,YAAY,oBAAoB,CAAC;AAC/C,CAAC"}

package/dist/identity/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Identity Module (ADR-0008/ADR-0009 precedent)
+ *
+ * Privacy-facing reads and mutations over the user identity graph:
+ * fact listing/deletion, full-identity export, and the memory-audit
+ * trail. See ./service.ts for the full module doc comment, including
+ * what stayed agents-side (profile re-synthesis) and why the
+ * memory-audit writer lives in this module rather than in
+ * `@intelligo-dev/audit`.
+ *
+ * Use via subpath import: @intelligo-dev/core/identity
+ */
+export { listFacts, deleteFact, exportIdentity, getAuditTrail, } from "./service";
+export { IdentityServiceError, isIdentityServiceError, type IdentityServiceErrorCode, } from "./errors";
+export type { IdentityActor, IdentityExport, UserFact, UserMemory, UserProfileSnapshot, UserMemoryAuditRow, } from "./types";
+//# sourceMappingURL=index.d.ts.map

package/dist/identity/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,SAAS,EACT,UAAU,EACV,cAAc,EACd,aAAa,GACd,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,KAAK,wBAAwB,GAC9B,MAAM,UAAU,CAAC;AAElB,YAAY,EACV,aAAa,EACb,cAAc,EACd,QAAQ,EACR,UAAU,EACV,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,SAAS,CAAC"}

package/dist/identity/index.js

@@ -0,0 +1,15 @@
+/**
+ * Identity Module (ADR-0008/ADR-0009 precedent)
+ *
+ * Privacy-facing reads and mutations over the user identity graph:
+ * fact listing/deletion, full-identity export, and the memory-audit
+ * trail. See ./service.ts for the full module doc comment, including
+ * what stayed agents-side (profile re-synthesis) and why the
+ * memory-audit writer lives in this module rather than in
+ * `@intelligo-dev/audit`.
+ *
+ * Use via subpath import: @intelligo-dev/core/identity
+ */
+export { listFacts, deleteFact, exportIdentity, getAuditTrail, } from "./service";
+export { IdentityServiceError, isIdentityServiceError, } from "./errors";
+//# sourceMappingURL=index.js.map

package/dist/identity/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,SAAS,EACT,UAAU,EACV,cAAc,EACd,aAAa,GACd,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,oBAAoB,EACpB,sBAAsB,GAEvB,MAAM,UAAU,CAAC"}

package/dist/identity/service.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Identity Service — Server-only
+ *
+ * Privacy-facing reads and mutations over the user identity graph:
+ * fact listing/deletion, a full-identity data export, and the
+ * memory-audit trail that records every mutation to a user's facts,
+ * memories, and synthesized profile snapshot. Ported from Ignite's
+ * `actions/identity.ts` (ADR-0008/ADR-0009 precedent — see
+ * `../documents/service.ts` and `../conversations/service.ts` for the
+ * same move): the tables (`user_facts`, `user_memories`,
+ * `user_profile_snapshots`, `user_memory_audit`) always lived in
+ * `@intelligo-dev/core`'s schema (`../db/schema/identity.ts`, documented
+ * there as "a platform-level memory primitive — separate from any
+ * single product"); only the service layer sat in the product
+ * application.
+ *
+ * What did NOT come with it (stays product/agents-side):
+ *   - `updateMyFactImportance` and the `synthesizeProfile()` re-trigger
+ *     Ignite's `deleteMyFact` ran after deleting — synthesis is
+ *     `@intelligo-dev/agents`' concern (deprecated, dissolving under
+ *     ADR-0008), and this package cannot depend on it. `deleteFact`
+ *     below does not touch the cached snapshot; a caller that also
+ *     owns a synthesis engine re-triggers it after calling this.
+ *
+ * Callers pass a resolved actor (workspaceId, userId) rather than this
+ * module resolving one itself — `@intelligo-dev/core` cannot depend on
+ * `@intelligo-dev/auth` (see tests/architecture/dependency-direction.test.ts).
+ * Every query filters by workspaceId AND userId internally; the actor
+ * is never trusted to have done that itself.
+ *
+ * Every mutation writes a `user_memory_audit` row via the internal
+ * `recordMemoryAudit` (./audit.ts). See that file's doc comment for
+ * why the writer lives here rather than in `@intelligo-dev/audit`, which
+ * is where ADR-0008 names its destination — the allowlist only grants
+ * audit -> core, never core -> audit
+ * (tests/architecture/dependency-direction.test.ts), so
+ * `@intelligo-dev/audit` exports the event *contract* only.
+ *
+ * Failure is reported by throwing `IdentityServiceError` rather than
+ * returning a `{ success, error }` envelope — see ./errors.ts.
+ *
+ * This module is SERVER-ONLY. Do not import from client components.
+ */
+import type { UserFact, UserMemoryAuditRow } from "../db/schema";
+import type { IdentityActor, IdentityExport } from "./types";
+/** List the actor's facts, most important and most confident first. */
+export declare function listFacts(actor: IdentityActor): Promise<UserFact[]>;
+/**
+ * Read the actor's memory-audit trail, most recent first. Optionally
+ * scoped to a single target (e.g. one fact's history).
+ */
+export declare function getAuditTrail(actor: IdentityActor, options?: {
+    limit?: number;
+    targetId?: string;
+}): Promise<UserMemoryAuditRow[]>;
+/**
+ * Delete a fact and record the deletion in the audit trail. Throws
+ * `invalid_input` for an empty id and `not_found` for anything outside
+ * the actor's scope (see `verifyFact`). Does NOT re-trigger profile
+ * synthesis — see the module doc comment.
+ */
+export declare function deleteFact(actor: IdentityActor, factId: string): Promise<void>;
+/**
+ * Aggregate the actor's full identity graph — facts, memories, latest
+ * profile snapshot, and full audit trail — for a data-export flow.
+ * Records its own audit row (action "export"): the export operation
+ * audits itself, same as the ported Ignite implementation.
+ */
+export declare function exportIdentity(actor: IdentityActor): Promise<IdentityExport>;
+//# sourceMappingURL=service.d.ts.map

package/dist/identity/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/identity/service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAUH,OAAO,KAAK,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGjE,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAuC7D,uEAAuE;AACvE,wBAAsB,SAAS,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAWzE;AAID;;;GAGG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,aAAa,EACpB,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9C,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAqB/B;AAMD;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAoBf;AAMD;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC,cAAc,CAAC,CA+DzB"}