@intelligo-dev/core 1.0.0-beta.1

package/dist/identity/service.js

@@ -0,0 +1,179 @@
+/**
+ * Identity Service — Server-only
+ *
+ * Privacy-facing reads and mutations over the user identity graph:
+ * fact listing/deletion, a full-identity data export, and the
+ * memory-audit trail that records every mutation to a user's facts,
+ * memories, and synthesized profile snapshot. Ported from Ignite's
+ * `actions/identity.ts` (ADR-0008/ADR-0009 precedent — see
+ * `../documents/service.ts` and `../conversations/service.ts` for the
+ * same move): the tables (`user_facts`, `user_memories`,
+ * `user_profile_snapshots`, `user_memory_audit`) always lived in
+ * `@intelligo-dev/core`'s schema (`../db/schema/identity.ts`, documented
+ * there as "a platform-level memory primitive — separate from any
+ * single product"); only the service layer sat in the product
+ * application.
+ *
+ * What did NOT come with it (stays product/agents-side):
+ *   - `updateMyFactImportance` and the `synthesizeProfile()` re-trigger
+ *     Ignite's `deleteMyFact` ran after deleting — synthesis is
+ *     `@intelligo-dev/agents`' concern (deprecated, dissolving under
+ *     ADR-0008), and this package cannot depend on it. `deleteFact`
+ *     below does not touch the cached snapshot; a caller that also
+ *     owns a synthesis engine re-triggers it after calling this.
+ *
+ * Callers pass a resolved actor (workspaceId, userId) rather than this
+ * module resolving one itself — `@intelligo-dev/core` cannot depend on
+ * `@intelligo-dev/auth` (see tests/architecture/dependency-direction.test.ts).
+ * Every query filters by workspaceId AND userId internally; the actor
+ * is never trusted to have done that itself.
+ *
+ * Every mutation writes a `user_memory_audit` row via the internal
+ * `recordMemoryAudit` (./audit.ts). See that file's doc comment for
+ * why the writer lives here rather than in `@intelligo-dev/audit`, which
+ * is where ADR-0008 names its destination — the allowlist only grants
+ * audit -> core, never core -> audit
+ * (tests/architecture/dependency-direction.test.ts), so
+ * `@intelligo-dev/audit` exports the event *contract* only.
+ *
+ * Failure is reported by throwing `IdentityServiceError` rather than
+ * returning a `{ success, error }` envelope — see ./errors.ts.
+ *
+ * This module is SERVER-ONLY. Do not import from client components.
+ */
+import { and, desc, eq } from "drizzle-orm";
+import { db } from "../db";
+import { userFacts, userMemories, userProfileSnapshots, userMemoryAudit, } from "../db/schema";
+import { recordMemoryAudit } from "./audit";
+import { IdentityServiceError } from "./errors";
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+/**
+ * Verify fact ownership and return the row. Throws
+ * IdentityServiceError("not_found") for both a missing fact and one
+ * owned by a different user/workspace — a fact belonging to someone
+ * else should be indistinguishable from one that doesn't exist at all
+ * (same reasoning as `../conversations/service.ts`'s
+ * `verifyConversation`).
+ */
+async function verifyFact(actor, factId) {
+    const [fact] = await db
+        .select()
+        .from(userFacts)
+        .where(eq(userFacts.id, factId))
+        .limit(1);
+    if (!fact ||
+        fact.userId !== actor.userId ||
+        fact.workspaceId !== actor.workspaceId) {
+        throw new IdentityServiceError("not_found", "Fact not found");
+    }
+    return fact;
+}
+// ---------------------------------------------------------------------------
+// Reads
+// ---------------------------------------------------------------------------
+/** List the actor's facts, most important and most confident first. */
+export async function listFacts(actor) {
+    return db
+        .select()
+        .from(userFacts)
+        .where(and(eq(userFacts.userId, actor.userId), eq(userFacts.workspaceId, actor.workspaceId)))
+        .orderBy(desc(userFacts.importance), desc(userFacts.confidence));
+}
+const MAX_AUDIT_LIMIT = 200;
+/**
+ * Read the actor's memory-audit trail, most recent first. Optionally
+ * scoped to a single target (e.g. one fact's history).
+ */
+export async function getAuditTrail(actor, options) {
+    const limit = Math.min(Math.max(1, options?.limit ?? MAX_AUDIT_LIMIT), MAX_AUDIT_LIMIT);
+    const baseClause = and(eq(userMemoryAudit.userId, actor.userId), eq(userMemoryAudit.workspaceId, actor.workspaceId));
+    return db
+        .select()
+        .from(userMemoryAudit)
+        .where(options?.targetId
+        ? and(baseClause, eq(userMemoryAudit.targetId, options.targetId))
+        : baseClause)
+        .orderBy(desc(userMemoryAudit.createdAt))
+        .limit(limit);
+}
+// ---------------------------------------------------------------------------
+// Mutations
+// ---------------------------------------------------------------------------
+/**
+ * Delete a fact and record the deletion in the audit trail. Throws
+ * `invalid_input` for an empty id and `not_found` for anything outside
+ * the actor's scope (see `verifyFact`). Does NOT re-trigger profile
+ * synthesis — see the module doc comment.
+ */
+export async function deleteFact(actor, factId) {
+    if (!factId || factId.trim().length === 0) {
+        throw new IdentityServiceError("invalid_input", "factId is required");
+    }
+    const existing = await verifyFact(actor, factId);
+    await db.delete(userFacts).where(eq(userFacts.id, factId));
+    await recordMemoryAudit({
+        userId: actor.userId,
+        workspaceId: actor.workspaceId,
+        targetKind: "fact",
+        targetId: factId,
+        action: "delete",
+        actorKind: "user",
+        actorId: actor.userId,
+        beforeValue: existing,
+        reason: "user requested deletion",
+    });
+}
+// ---------------------------------------------------------------------------
+// Export — full identity dump for GDPR / "download my data"
+// ---------------------------------------------------------------------------
+/**
+ * Aggregate the actor's full identity graph — facts, memories, latest
+ * profile snapshot, and full audit trail — for a data-export flow.
+ * Records its own audit row (action "export"): the export operation
+ * audits itself, same as the ported Ignite implementation.
+ */
+export async function exportIdentity(actor) {
+    // Recorded before the reads so the export's own audit row is part of
+    // the export — the trail a user downloads should show that download.
+    await recordMemoryAudit({
+        userId: actor.userId,
+        workspaceId: actor.workspaceId,
+        targetKind: "snapshot",
+        targetId: actor.userId,
+        action: "export",
+        actorKind: "user",
+        actorId: actor.userId,
+        reason: "user requested data export",
+    });
+    const [facts, memories, snapshotRows, audit] = await Promise.all([
+        db
+            .select()
+            .from(userFacts)
+            .where(and(eq(userFacts.userId, actor.userId), eq(userFacts.workspaceId, actor.workspaceId))),
+        db
+            .select()
+            .from(userMemories)
+            .where(and(eq(userMemories.userId, actor.userId), eq(userMemories.workspaceId, actor.workspaceId))),
+        db
+            .select()
+            .from(userProfileSnapshots)
+            .where(and(eq(userProfileSnapshots.userId, actor.userId), eq(userProfileSnapshots.workspaceId, actor.workspaceId)))
+            .limit(1),
+        db
+            .select()
+            .from(userMemoryAudit)
+            .where(and(eq(userMemoryAudit.userId, actor.userId), eq(userMemoryAudit.workspaceId, actor.workspaceId)))
+            .orderBy(desc(userMemoryAudit.createdAt)),
+    ]);
+    return {
+        exportedAt: new Date().toISOString(),
+        user: { id: actor.userId, workspaceId: actor.workspaceId },
+        facts,
+        memories,
+        snapshot: snapshotRows[0] ?? null,
+        audit,
+    };
+}
+//# sourceMappingURL=service.js.map

package/dist/identity/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/identity/service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAC3B,OAAO,EACL,SAAS,EACT,YAAY,EACZ,oBAAoB,EACpB,eAAe,GAChB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAGhD,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;;;;GAOG;AACH,KAAK,UAAU,UAAU,CACvB,KAAoB,EACpB,MAAc;IAEd,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE;SACpB,MAAM,EAAE;SACR,IAAI,CAAC,SAAS,CAAC;SACf,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;SAC/B,KAAK,CAAC,CAAC,CAAC,CAAC;IAEZ,IACE,CAAC,IAAI;QACL,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAC5B,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,EACtC,CAAC;QACD,MAAM,IAAI,oBAAoB,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAoB;IAClD,OAAO,EAAE;SACN,MAAM,EAAE;SACR,IAAI,CAAC,SAAS,CAAC;SACf,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAClC,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAC7C,CACF;SACA,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAoB,EACpB,OAA+C;IAE/C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,IAAI,eAAe,CAAC,EAC9C,eAAe,CAChB,CAAC;IAEF,MAAM,UAAU,GAAG,GAAG,CACpB,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EACxC,EAAE,CAAC,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CACnD,CAAC;IAEF,OAAO,EAAE;SACN,MAAM,EAAE;SACR,IAAI,CAAC,eAAe,CAAC;SACrB,KAAK,CACJ,OAAO,EAAE,QAAQ;QACf,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjE,CAAC,CAAC,UAAU,CACf;SACA,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;SACxC,KAAK,CAAC,KAAK,CAAC,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAoB,EACpB,MAAc;IAEd,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAEjD,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IAE3D,MAAM,iBAAiB,CAAC;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,MAAM;QAClB,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;QAChB,SAAS,EAAE,MAAM;QACjB,OAAO,EAAE,KAAK,CAAC,MAAM;QACrB,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,yBAAyB;KAClC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,4DAA4D;AAC5D,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAoB;IAEpB,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,iBAAiB,CAAC;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,KAAK,CAAC,MAAM;QACtB,MAAM,EAAE,QAAQ;QAChB,SAAS,EAAE,MAAM;QACjB,OAAO,EAAE,KAAK,CAAC,MAAM;QACrB,MAAM,EAAE,4BAA4B;KACrC,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC/D,EAAE;aACC,MAAM,EAAE;aACR,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAClC,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAC7C,CACF;QACH,EAAE;aACC,MAAM,EAAE;aACR,IAAI,CAAC,YAAY,CAAC;aAClB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EACrC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAChD,CACF;QACH,EAAE;aACC,MAAM,EAAE;aACR,IAAI,CAAC,oBAAoB,CAAC;aAC1B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAC7C,EAAE,CAAC,oBAAoB,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CACxD,CACF;aACA,KAAK,CAAC,CAAC,CAAC;QACX,EAAE;aACC,MAAM,EAAE;aACR,IAAI,CAAC,eAAe,CAAC;aACrB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EACxC,EAAE,CAAC,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CACnD,CACF;aACA,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;KAC5C,CAAC,CAAC;IAEH,OAAO;QACL,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;QAC1D,KAAK;QACL,QAAQ;QACR,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,IAAI;QACjC,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/identity/types.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Shared types for the identity service.
+ */
+import type { UserFact, UserMemory, UserProfileSnapshot, UserMemoryAuditRow } from "../db/schema";
+export type { UserFact, UserMemory, UserProfileSnapshot, UserMemoryAuditRow };
+/** Resolved actor identity — every query is scoped to this pair. */
+export type IdentityActor = {
+    workspaceId: string;
+    userId: string;
+};
+/**
+ * Full identity dump for a GDPR-style "download my data" flow: every
+ * fact and memory the actor owns, their latest synthesized profile
+ * snapshot (if one exists), and their complete memory-audit trail.
+ */
+export type IdentityExport = {
+    exportedAt: string;
+    user: {
+        id: string;
+        workspaceId: string;
+    };
+    facts: UserFact[];
+    memories: UserMemory[];
+    snapshot: UserProfileSnapshot | null;
+    audit: UserMemoryAuditRow[];
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/identity/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/identity/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,QAAQ,EACR,UAAU,EACV,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,cAAc,CAAC;AAEtB,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,CAAC;AAE9E,oEAAoE;AACpE,MAAM,MAAM,aAAa,GAAG;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACrC,KAAK,EAAE,kBAAkB,EAAE,CAAC;CAC7B,CAAC"}

package/dist/identity/types.js

@@ -0,0 +1,5 @@
+/**
+ * Shared types for the identity service.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/identity/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/identity/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export declare const version = "0.0.0";
+export * from "./db";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,UAAU,CAAC;AAG/B,cAAc,MAAM,CAAC"}

package/dist/index.js

@@ -0,0 +1,11 @@
+export const version = "0.0.0";
+// Re-export database client
+export * from "./db";
+// Email module -- use subpath import: @intelligo-dev/core/email
+// Notifications module -- use subpath import: @intelligo-dev/core/notifications
+// Conversations module -- use subpath import: @intelligo-dev/core/conversations
+// Documents module -- use subpath import: @intelligo-dev/core/documents
+// Identity module -- use subpath import: @intelligo-dev/core/identity
+// Logger -- use subpath import: @intelligo-dev/core/logger
+// Env -- use subpath import: @intelligo-dev/core/env
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAE/B,4BAA4B;AAC5B,cAAc,MAAM,CAAC;AAErB,gEAAgE;AAChE,gFAAgF;AAChF,gFAAgF;AAChF,wEAAwE;AACxE,sEAAsE;AACtE,2DAA2D;AAC3D,qDAAqD"}

package/dist/logger.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Structured Logger with PII Redaction (Pino-backed)
+ *
+ * A structured logger that:
+ * - Uses pino for high-performance JSON logging in production
+ * - Redacts PII in production (emails, workspace IDs, UUIDs)
+ * - Passes through unredacted in development for debugging
+ * - Maintains the same API as the previous custom logger
+ *
+ * Usage:
+ * ```typescript
+ * import { createLogger } from "@intelligo-dev/core/logger";
+ * const log = createLogger("MyModule");
+ * log.info("User created", { email: "user@example.com" });
+ * // Production: {"level":30,"module":"MyModule","msg":"User created","email":"u***@example.com"}
+ * // Development: {"level":30,"module":"MyModule","msg":"User created","email":"user@example.com"}
+ * ```
+ */
+import pino from "pino";
+/**
+ * Field name fragments whose values are always replaced with [REDACTED]
+ * regardless of environment. These cover credentials and secrets — never
+ * appropriate to log even in development. Email/id redaction is a
+ * separate concern (production-only PII protection).
+ *
+ * Exported so a consumer's Sentry PII scrubber
+ * shares the same field list — a secret name added here is stripped
+ * from both the log stream and the Sentry event in one move.
+ */
+export declare const CREDENTIAL_KEY_FRAGMENTS: readonly ["password", "passwd", "secret", "token", "apikey", "api_key", "authorization", "auth_header", "cookie", "session_token", "session_secret", "credit_card", "creditcard", "card_number", "cvv"];
+/** True when `key` contains any credential fragment (case-insensitive substring). */
+export declare function isCredentialKey(key: string): boolean;
+declare class Logger {
+    private pino;
+    constructor(context: string);
+    info(message: string, data?: Record<string, unknown>): void;
+    warn(message: string, data?: Record<string, unknown>): void;
+    error(message: string, data?: Record<string, unknown>): void;
+    debug(message: string, data?: Record<string, unknown>): void;
+}
+export declare function createLogger(context: string): Logger;
+/**
+ * Create a logger that writes to a custom pino destination.
+ * Used for testing — allows capturing log output in a writable stream.
+ * @internal
+ */
+export declare function _createLoggerWithStream(context: string, stream: pino.DestinationStream): Logger;
+export { Logger };
+export declare const logger: Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AA0BxB;;;;;;;;;GASG;AACH,eAAO,MAAM,wBAAwB,yMAgB3B,CAAC;AAEX,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGpD;AAiDD,cAAM,MAAM;IACV,OAAO,CAAC,IAAI,CAAc;gBAEd,OAAO,EAAE,MAAM;IAI3B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAQpD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAQpD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAQrD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAOtD;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,IAAI,CAAC,iBAAiB,GAC7B,MAAM,CAiBR;AAED,OAAO,EAAE,MAAM,EAAE,CAAC;AAClB,eAAO,MAAM,MAAM,QAAsB,CAAC"}

package/dist/logger.js

@@ -0,0 +1,183 @@
+/**
+ * Structured Logger with PII Redaction (Pino-backed)
+ *
+ * A structured logger that:
+ * - Uses pino for high-performance JSON logging in production
+ * - Redacts PII in production (emails, workspace IDs, UUIDs)
+ * - Passes through unredacted in development for debugging
+ * - Maintains the same API as the previous custom logger
+ *
+ * Usage:
+ * ```typescript
+ * import { createLogger } from "@intelligo-dev/core/logger";
+ * const log = createLogger("MyModule");
+ * log.info("User created", { email: "user@example.com" });
+ * // Production: {"level":30,"module":"MyModule","msg":"User created","email":"u***@example.com"}
+ * // Development: {"level":30,"module":"MyModule","msg":"User created","email":"user@example.com"}
+ * ```
+ */
+import pino from "pino";
+const isProduction = process.env.NODE_ENV === "production";
+/**
+ * Redact email addresses in production.
+ * user@example.com -> u***@example.com
+ */
+function redactEmail(email) {
+    if (!isProduction)
+        return email;
+    const [local, domain] = email.split("@");
+    if (!local || !domain)
+        return "***@***";
+    return `${local[0]}***@${domain}`;
+}
+/**
+ * Redact IDs in production (workspace IDs, UUIDs).
+ * ws_abc123def456 -> ws_a...f456
+ * 550e8400-e29b-41d4-a716-446655440000 -> 550e...0000
+ */
+function redactId(id) {
+    if (!isProduction)
+        return id;
+    if (id.length <= 8)
+        return id;
+    return `${id.slice(0, 4)}...${id.slice(-4)}`;
+}
+/**
+ * Field name fragments whose values are always replaced with [REDACTED]
+ * regardless of environment. These cover credentials and secrets — never
+ * appropriate to log even in development. Email/id redaction is a
+ * separate concern (production-only PII protection).
+ *
+ * Exported so a consumer's Sentry PII scrubber
+ * shares the same field list — a secret name added here is stripped
+ * from both the log stream and the Sentry event in one move.
+ */
+export const CREDENTIAL_KEY_FRAGMENTS = [
+    "password",
+    "passwd",
+    "secret",
+    "token",
+    "apikey",
+    "api_key",
+    "authorization",
+    "auth_header",
+    "cookie",
+    "session_token",
+    "session_secret",
+    "credit_card",
+    "creditcard",
+    "card_number",
+    "cvv",
+];
+/** True when `key` contains any credential fragment (case-insensitive substring). */
+export function isCredentialKey(key) {
+    const lower = key.toLowerCase();
+    return CREDENTIAL_KEY_FRAGMENTS.some((needle) => lower.includes(needle));
+}
+function redactData(data) {
+    const redacted = {};
+    for (const [key, value] of Object.entries(data)) {
+        // Always-redacted fields: credentials, tokens, secrets — these
+        // never appear in logs, even in dev. Catches accidental
+        // log.info("login attempt", { password: ... }) drift.
+        if (isCredentialKey(key)) {
+            redacted[key] = "[REDACTED]";
+            continue;
+        }
+        // PII redaction (email/id) is production-only so dev debugging
+        // still works against real values.
+        if (!isProduction) {
+            redacted[key] = value;
+            continue;
+        }
+        if (typeof value === "string") {
+            if (key.toLowerCase().includes("email")) {
+                redacted[key] = redactEmail(value);
+            }
+            else if (key.toLowerCase().includes("id") ||
+                key.toLowerCase().includes("workspace")) {
+                redacted[key] = redactId(value);
+            }
+            else {
+                redacted[key] = value;
+            }
+        }
+        else {
+            redacted[key] = value;
+        }
+    }
+    return redacted;
+}
+/** Base pino instance */
+const baseLogger = pino({
+    level: isProduction ? "info" : "debug",
+    formatters: {
+        level(label) {
+            return { level: label };
+        },
+    },
+    timestamp: isProduction ? pino.stdTimeFunctions.isoTime : false,
+});
+class Logger {
+    constructor(context) {
+        this.pino = baseLogger.child({ module: context });
+    }
+    info(message, data) {
+        if (data) {
+            this.pino.info(redactData(data), message);
+        }
+        else {
+            this.pino.info(message);
+        }
+    }
+    warn(message, data) {
+        if (data) {
+            this.pino.warn(redactData(data), message);
+        }
+        else {
+            this.pino.warn(message);
+        }
+    }
+    error(message, data) {
+        if (data) {
+            this.pino.error(redactData(data), message);
+        }
+        else {
+            this.pino.error(message);
+        }
+    }
+    debug(message, data) {
+        if (data) {
+            this.pino.debug(redactData(data), message);
+        }
+        else {
+            this.pino.debug(message);
+        }
+    }
+}
+export function createLogger(context) {
+    return new Logger(context);
+}
+/**
+ * Create a logger that writes to a custom pino destination.
+ * Used for testing — allows capturing log output in a writable stream.
+ * @internal
+ */
+export function _createLoggerWithStream(context, stream) {
+    const customBase = pino({
+        level: isProduction ? "info" : "debug",
+        formatters: {
+            level(label) {
+                return { level: label };
+            },
+        },
+        timestamp: false,
+    }, stream);
+    const instance = new Logger(context);
+    // Override the internal pino child with one writing to custom stream
+    instance.pino = customBase.child({ module: context });
+    return instance;
+}
+export { Logger };
+export const logger = createLogger("app");
+//# sourceMappingURL=logger.js.map

package/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;AAE3D;;;GAGG;AACH,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IAChC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,MAAM,EAAE,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,EAAU;IAC1B,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAC7B,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,SAAS;IACT,eAAe;IACf,aAAa;IACb,QAAQ;IACR,eAAe;IACf,gBAAgB;IAChB,aAAa;IACb,YAAY;IACZ,aAAa;IACb,KAAK;CACG,CAAC;AAEX,qFAAqF;AACrF,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,UAAU,CAAC,IAA6B;IAC/C,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,+DAA+D;QAC/D,wDAAwD;QACxD,sDAAsD;QACtD,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,QAAQ,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;YAC7B,SAAS;QACX,CAAC;QAED,+DAA+D;QAC/D,mCAAmC;QACnC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACtB,SAAS;QACX,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxC,QAAQ,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC;iBAAM,IACL,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAChC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EACvC,CAAC;gBACD,QAAQ,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACxB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,yBAAyB;AACzB,MAAM,UAAU,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;IACtC,UAAU,EAAE;QACV,KAAK,CAAC,KAAK;YACT,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC1B,CAAC;KACF;IACD,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;CAChE,CAAC,CAAC;AAEH,MAAM,MAAM;IAGV,YAAY,OAAe;QACzB,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,IAA8B;QAClD,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,IAA8B;QAClD,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,IAA8B;QACnD,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,IAA8B;QACnD,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAe,EACf,MAA8B;IAE9B,MAAM,UAAU,GAAG,IAAI,CACrB;QACE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;QACtC,UAAU,EAAE;YACV,KAAK,CAAC,KAAK;gBACT,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAC1B,CAAC;SACF;QACD,SAAS,EAAE,KAAK;KACjB,EACD,MAAM,CACP,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;IACrC,qEAAqE;IACpE,QAAgB,CAAC,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,OAAO,EAAE,MAAM,EAAE,CAAC;AAClB,MAAM,CAAC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC"}

package/dist/notifications/index.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Notifications Module
+ *
+ * CRUD operations for user notifications. These are used by server actions
+ * in the consumer application to power the notification bell, list, and
+ * mark-as-read functionality.
+ *
+ * Notifications are user-scoped (not workspace-scoped) so a user can see
+ * all their notifications across workspaces.
+ */
+import type { CreateNotificationParams } from "./types";
+export type { NotificationType, CreateNotificationParams } from "./types";
+export { triggerQuotaNotification, triggerTrialNotification, triggerPaymentFailedNotification, triggerTeamMemberJoinedNotification, } from "./triggers";
+/**
+ * Create a new notification for a user
+ *
+ * Serializes metadata to JSON string if provided.
+ * Returns the created notification.
+ */
+export declare function createNotification(params: CreateNotificationParams): Promise<{
+    id: string;
+    createdAt: Date;
+    userId: string;
+    metadata: string | null;
+    workspaceId: string | null;
+    type: string;
+    title: string;
+    message: string;
+    isRead: boolean;
+} | undefined>;
+/**
+ * Get unread notifications for a user
+ *
+ * Returns notifications where isRead is false, ordered by newest first.
+ * Parses metadata JSON string back to object.
+ */
+export declare function getUnreadNotifications(userId: string, limit?: number): Promise<({
+    id: string;
+    userId: string;
+    workspaceId: string | null;
+    type: string;
+    title: string;
+    message: string;
+    isRead: boolean;
+    metadata: string | null;
+    createdAt: Date;
+} & {
+    metadata: Record<string, unknown> | null;
+})[]>;
+/**
+ * Get all notifications for a user (read and unread)
+ *
+ * Returns notifications ordered by newest first.
+ * Parses metadata JSON string back to object.
+ */
+export declare function getNotifications(userId: string, limit?: number): Promise<({
+    id: string;
+    userId: string;
+    workspaceId: string | null;
+    type: string;
+    title: string;
+    message: string;
+    isRead: boolean;
+    metadata: string | null;
+    createdAt: Date;
+} & {
+    metadata: Record<string, unknown> | null;
+})[]>;
+/**
+ * Get count of unread notifications for a user
+ *
+ * Used for the notification bell badge number.
+ */
+export declare function getNotificationCount(userId: string): Promise<number>;
+/**
+ * Mark a single notification as read
+ *
+ * Security: requires both notificationId and userId to ensure
+ * users can only mark their own notifications.
+ */
+export declare function markAsRead(notificationId: string, userId: string): Promise<void>;
+/**
+ * Mark all unread notifications as read for a user
+ */
+export declare function markAllAsRead(userId: string): Promise<void>;
+//# sourceMappingURL=index.d.ts.map

package/dist/notifications/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/notifications/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,SAAS,CAAC;AAGxD,YAAY,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,SAAS,CAAC;AAG1E,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,gCAAgC,EAChC,mCAAmC,GACpC,MAAM,YAAY,CAAC;AAEpB;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,wBAAwB;;;;;;;;;;eAcxE;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,KAAK,GAAE,MAAW;;;;;;;;;;;cAoFD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;MAxEhD;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW;;;;;;;;;;;cAgEtD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;MAvDhD;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAS1E;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,iBAUtE;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE,MAAM,iBAOjD"}