@legioncodeinc/nectar 0.0.1

package/dist/api/router.d.ts

@@ -0,0 +1,172 @@
+/**
+ * Nectar's in-repo router seam over `node:http` (PRD-008a).
+ *
+ * This is nectar's OWN minimal, zero-runtime-dependency analogue of the
+ * `basePath` router honeycomb gets from Hono. It MIRRORS honeycomb's
+ * `ROUTE_GROUPS` + `group()` accessor + permission-middleware-inheritance
+ * pattern (`honeycomb/src/daemon/runtime/server.ts:68-106`, `:205-328`) across
+ * the process boundary (`ADR-0002`, mirror-not-import) rather than importing
+ * Hono, honoring nectar's zero-runtime-dependency invariant (`AGENTS.md`).
+ *
+ * Reconciliation with PRD-002a: PRD-002a originally sketched a Hono daemon
+ * bound via `@hono/node-server`; the shipped PRD-002 diverged to a zero-runtime
+ * `node:http` server (`src/server.ts`, only `/health`). PRD-008 follows the
+ * shipped reality, so the `ROUTE_GROUPS`-equivalent list, the `RouteGroup`
+ * handle, and the permission-middleware mount are nectar's own abstraction
+ * layered over `node:http`, not a Hono app.
+ *
+ * The load-bearing property (honeycomb's a-AC-6): a route group's middleware is
+ * mounted at bootstrap for the group prefix, and handlers attach LATER against a
+ * live route table, so an endpoint filled after boot still runs the
+ * already-mounted permission gate without re-wiring auth. An unfilled path under
+ * a mounted group falls through to the root 501 scaffold, never a
+ * 404-with-no-auth.
+ */
+import type { IncomingMessage } from "node:http";
+/** The `/api/hive-graph` group base path (decision #34, mirrors honeycomb's `/api/graph`). */
+export declare const HIVE_GRAPH_GROUP = "/api/hive-graph";
+/**
+ * Max POST/PUT/PATCH request body accepted before the dispatcher rejects with
+ * `413 payload_too_large`. A sane 1 MiB cap: the search/build/projection bodies
+ * are small JSON control payloads; no endpoint here streams bulk data. Bounds
+ * memory so a hostile client cannot exhaust the loopback daemon.
+ */
+export declare const MAX_REQUEST_BODY_BYTES = 1048576;
+/**
+ * A route-group spec, mirroring honeycomb's `RouteGroupSpec`
+ * (`honeycomb/src/daemon/runtime/server.ts:57-61`). `protect` mounts the
+ * permission gate on the group prefix; `session` would additionally mount the
+ * runtime-path middleware ahead of permission (nectar has no session-capture
+ * surface today, so every current group is `session: false`).
+ */
+export interface RouteGroupSpec {
+    readonly path: string;
+    readonly protect: boolean;
+    readonly session: boolean;
+}
+/**
+ * The frozen `ROUTE_GROUPS`-equivalent list (decision #34). `/api/hive-graph`
+ * is `protect: true` (session-protected daemon routes) and `session: false`
+ * (permission only, like honeycomb's `/api/graph` at
+ * `honeycomb/src/daemon/runtime/server.ts:84`; the DEFAULT-flagged session bit
+ * is resolved to `false` since these are operator graph endpoints, not
+ * memory-capture surfaces). The daemon's own diagnostics endpoints (`/health`,
+ * and `/api/status` if PRD-002 ever ships it) are NOT in this list: they are
+ * unprotected and owned by the daemon bootstrap, not PRD-008.
+ */
+export declare const ROUTE_GROUPS: readonly RouteGroupSpec[];
+/** A fully-serialized HTTP response the dispatcher writes to the socket. */
+export interface RouteResponse {
+    readonly status: number;
+    readonly body: string;
+    readonly contentType: string;
+}
+/**
+ * The per-request context handed to a route handler. Carries the request shape
+ * (method/path/query/headers/body) AND the response helpers (`json`), mirroring
+ * the `c` context honeycomb's handlers receive.
+ */
+export interface RouteContext {
+    readonly method: string;
+    /** The pathname with the query string stripped. */
+    readonly path: string;
+    readonly rawUrl: string;
+    readonly query: URLSearchParams;
+    readonly headers: NodeJS.Dict<string | string[]>;
+    /**
+     * The parsed JSON request body, or `undefined` when the body is empty. Throws
+     * a plain `Error` when the body is present but not valid JSON (the handler
+     * catches it and surfaces a structured error, never an unhandled throw).
+     */
+    body(): unknown;
+    /** Build a JSON response (default status 200). */
+    json(body: unknown, status?: number): RouteResponse;
+}
+/** A route handler attached to a group; may be async. Never expected to throw (the dispatcher guards anyway). */
+export type RouteHandler = (ctx: RouteContext) => RouteResponse | Promise<RouteResponse>;
+/** A permission-gate rejection: the fail-closed 401/403 honeycomb's gate produces. */
+export interface PermissionRejection {
+    readonly status: 401 | 403;
+    readonly body: unknown;
+}
+/**
+ * The permission-gate seam mounted on every `protect: true` group. Returns
+ * `null` to allow the request through, or a {@link PermissionRejection} to
+ * fail it closed BEFORE the handler runs. This is the seam 008a scaffolds;
+ * the RBAC/authenticator policy internals are the mirrored honeycomb pattern
+ * and are not designed here. Nectar's loopback daemon defaults to
+ * {@link allowAllPermission} (open on `127.0.0.1`); a future RBAC policy
+ * attaches here.
+ */
+export type PermissionGate = (ctx: RouteContext, spec: RouteGroupSpec) => PermissionRejection | null | Promise<PermissionRejection | null>;
+/** The default gate for nectar's loopback daemon: allow every request through. */
+export declare const allowAllPermission: PermissionGate;
+/**
+ * A route-group handle: nectar's zero-dependency analogue of honeycomb's Hono
+ * `basePath` router. `.get`/`.post` register a handler at a subpath RELATIVE to
+ * the group base (`/search`, not `/api/hive-graph/search`); the group base is
+ * prepended when the handler is stored on the shared live route table.
+ */
+export interface RouteGroup {
+    readonly base: string;
+    get(subpath: string, handler: RouteHandler): RouteGroup;
+    post(subpath: string, handler: RouteHandler): RouteGroup;
+}
+/** The root 501 scaffold for an unfilled path under a mounted group (mirrors honeycomb's `notFound`). */
+export declare function notImplementedScaffold(path: string): RouteResponse;
+/**
+ * The nectar router: holds the frozen group specs, the shared live route table,
+ * and the permission gate. Constructed side-effect free at daemon assembly
+ * (importing/constructing binds no socket); handlers attach to it via `group()`
+ * either before or after the socket binds (the table is consulted per request,
+ * so late attachment is picked up — the "keeps the binding live" property).
+ */
+export declare class NectarRouter {
+    private readonly specs;
+    private readonly permission;
+    /** `${METHOD} ${fullPath}` -> handler. */
+    private readonly routes;
+    constructor(specs?: readonly RouteGroupSpec[], permission?: PermissionGate);
+    /**
+     * Return the {@link RouteGroup} handle for a known group base, or `undefined`
+     * for an unknown group path (mirrors honeycomb's accessor contract,
+     * `honeycomb/src/daemon/runtime/server.ts:205-214`). Handlers register at
+     * paths relative to the group and inherit its already-mounted middleware.
+     */
+    group(path: string): RouteGroup | undefined;
+    /** The group spec whose base the request path sits under (exact base or `${base}/...`), or undefined. */
+    matchGroup(path: string): RouteGroupSpec | undefined;
+    /**
+     * Dispatch a request whose path is under a mounted group. Returns `undefined`
+     * when the path is under NO group (the caller then serves its own 404,
+     * preserving the shipped daemon's `not_found` for non-group paths). For a
+     * matched group: runs the permission gate first (protect groups), then the
+     * handler behind it; an unfilled path falls to the 501 scaffold; a handler
+     * that throws unexpectedly is caught and surfaced as a 500 data body, never
+     * crashing the request pipeline.
+     */
+    dispatch(ctx: RouteContext): Promise<RouteResponse | undefined>;
+}
+/** Raised by {@link buildRouteContext} when the request body exceeds {@link MAX_REQUEST_BODY_BYTES}. */
+export declare class BodyTooLargeError extends Error {
+    constructor();
+}
+/**
+ * Raised by {@link RouteContext.body} when the request body is present but not
+ * valid JSON (NEC-042 item 1 / AC-018l.8). A distinct type so a handler (or the
+ * dispatcher backstop) maps it to a 400 client error rather than the generic 500
+ * `handler_error`. Thrown CONSISTENTLY: once the parse fails, every later
+ * `body()` call rethrows this same error rather than silently returning
+ * `undefined` from a poisoned cache.
+ */
+export declare class MalformedJsonError extends Error {
+    constructor();
+}
+/**
+ * Read a request body up to the cap and build a {@link RouteContext}. Reading
+ * the (bounded) body up front keeps the context synchronous for handlers and
+ * enforces the size cap before any handler runs. Rejects with
+ * {@link BodyTooLargeError} when the body exceeds {@link MAX_REQUEST_BODY_BYTES}.
+ */
+export declare function buildRouteContext(req: IncomingMessage, path: string, rawUrl: string): Promise<RouteContext>;
+//# sourceMappingURL=router.d.ts.map

package/dist/api/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/api/router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEjD,8FAA8F;AAC9F,eAAO,MAAM,gBAAgB,oBAAoB,CAAC;AAElD;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,UAAY,CAAC;AAEhD;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY,EAAE,SAAS,cAAc,EAEhD,CAAC;AAEH,4EAA4E;AAC5E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IACjD;;;;OAIG;IACH,IAAI,IAAI,OAAO,CAAC;IAChB,kDAAkD;IAClD,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC;CACrD;AAED,iHAAiH;AACjH,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,YAAY,KAAK,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;AAEzF,sFAAsF;AACtF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,cAAc,GAAG,CAC3B,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,cAAc,KACjB,mBAAmB,GAAG,IAAI,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;AAEtE,kFAAkF;AAClF,eAAO,MAAM,kBAAkB,EAAE,cAA2B,CAAC;AAE7D;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,UAAU,CAAC;IACxD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,UAAU,CAAC;CAC1D;AAUD,yGAAyG;AACzG,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAElE;AAQD;;;;;;GAMG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4B;IAClD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAiB;IAC5C,0CAA0C;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmC;gBAE9C,KAAK,GAAE,SAAS,cAAc,EAAiB,EAAE,UAAU,GAAE,cAAmC;IAK5G;;;;;OAKG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAoB3C,yGAAyG;IACzG,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAIpD;;;;;;;;OAQG;IACG,QAAQ,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;CAuBtE;AAED,wGAAwG;AACxG,qBAAa,iBAAkB,SAAQ,KAAK;;CAK3C;AAED;;;;;;;GAOG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;;CAK5C;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAyD3G"}

package/dist/api/router.js

@@ -0,0 +1,212 @@
+/** The `/api/hive-graph` group base path (decision #34, mirrors honeycomb's `/api/graph`). */
+export const HIVE_GRAPH_GROUP = "/api/hive-graph";
+/**
+ * Max POST/PUT/PATCH request body accepted before the dispatcher rejects with
+ * `413 payload_too_large`. A sane 1 MiB cap: the search/build/projection bodies
+ * are small JSON control payloads; no endpoint here streams bulk data. Bounds
+ * memory so a hostile client cannot exhaust the loopback daemon.
+ */
+export const MAX_REQUEST_BODY_BYTES = 1_048_576;
+/**
+ * The frozen `ROUTE_GROUPS`-equivalent list (decision #34). `/api/hive-graph`
+ * is `protect: true` (session-protected daemon routes) and `session: false`
+ * (permission only, like honeycomb's `/api/graph` at
+ * `honeycomb/src/daemon/runtime/server.ts:84`; the DEFAULT-flagged session bit
+ * is resolved to `false` since these are operator graph endpoints, not
+ * memory-capture surfaces). The daemon's own diagnostics endpoints (`/health`,
+ * and `/api/status` if PRD-002 ever ships it) are NOT in this list: they are
+ * unprotected and owned by the daemon bootstrap, not PRD-008.
+ */
+export const ROUTE_GROUPS = Object.freeze([
+    Object.freeze({ path: HIVE_GRAPH_GROUP, protect: true, session: false }),
+]);
+/** The default gate for nectar's loopback daemon: allow every request through. */
+export const allowAllPermission = () => null;
+function jsonResponse(body, status = 200) {
+    return {
+        status,
+        body: JSON.stringify(body ?? null),
+        contentType: "application/json; charset=utf-8",
+    };
+}
+/** The root 501 scaffold for an unfilled path under a mounted group (mirrors honeycomb's `notFound`). */
+export function notImplementedScaffold(path) {
+    return jsonResponse({ error: "not_implemented", path }, 501);
+}
+function joinBase(base, subpath) {
+    const sub = subpath.startsWith("/") ? subpath : `/${subpath}`;
+    if (sub === "/")
+        return base;
+    return `${base}${sub}`;
+}
+/**
+ * The nectar router: holds the frozen group specs, the shared live route table,
+ * and the permission gate. Constructed side-effect free at daemon assembly
+ * (importing/constructing binds no socket); handlers attach to it via `group()`
+ * either before or after the socket binds (the table is consulted per request,
+ * so late attachment is picked up — the "keeps the binding live" property).
+ */
+export class NectarRouter {
+    specs;
+    permission;
+    /** `${METHOD} ${fullPath}` -> handler. */
+    routes = new Map();
+    constructor(specs = ROUTE_GROUPS, permission = allowAllPermission) {
+        this.specs = specs;
+        this.permission = permission;
+    }
+    /**
+     * Return the {@link RouteGroup} handle for a known group base, or `undefined`
+     * for an unknown group path (mirrors honeycomb's accessor contract,
+     * `honeycomb/src/daemon/runtime/server.ts:205-214`). Handlers register at
+     * paths relative to the group and inherit its already-mounted middleware.
+     */
+    group(path) {
+        const spec = this.specs.find((s) => s.path === path);
+        if (spec === undefined)
+            return undefined;
+        const register = (method, subpath, handler) => {
+            this.routes.set(`${method} ${joinBase(spec.path, subpath)}`, handler);
+        };
+        const handle = {
+            base: spec.path,
+            get(subpath, handler) {
+                register("GET", subpath, handler);
+                return handle;
+            },
+            post(subpath, handler) {
+                register("POST", subpath, handler);
+                return handle;
+            },
+        };
+        return handle;
+    }
+    /** The group spec whose base the request path sits under (exact base or `${base}/...`), or undefined. */
+    matchGroup(path) {
+        return this.specs.find((s) => path === s.path || path.startsWith(`${s.path}/`));
+    }
+    /**
+     * Dispatch a request whose path is under a mounted group. Returns `undefined`
+     * when the path is under NO group (the caller then serves its own 404,
+     * preserving the shipped daemon's `not_found` for non-group paths). For a
+     * matched group: runs the permission gate first (protect groups), then the
+     * handler behind it; an unfilled path falls to the 501 scaffold; a handler
+     * that throws unexpectedly is caught and surfaced as a 500 data body, never
+     * crashing the request pipeline.
+     */
+    async dispatch(ctx) {
+        const spec = this.matchGroup(ctx.path);
+        if (spec === undefined)
+            return undefined;
+        if (spec.protect) {
+            const rejection = await this.permission(ctx, spec);
+            if (rejection !== null)
+                return jsonResponse(rejection.body, rejection.status);
+        }
+        const handler = this.routes.get(`${ctx.method} ${ctx.path}`);
+        if (handler === undefined)
+            return notImplementedScaffold(ctx.path);
+        try {
+            return await handler(ctx);
+        }
+        catch (err) {
+            // A malformed JSON body is a client error (400), not a server fault (500).
+            if (err instanceof MalformedJsonError) {
+                return jsonResponse({ error: "invalid_json", reason: err.message }, 400);
+            }
+            const reason = err instanceof Error ? err.message : String(err);
+            return jsonResponse({ error: "handler_error", reason }, 500);
+        }
+    }
+}
+/** Raised by {@link buildRouteContext} when the request body exceeds {@link MAX_REQUEST_BODY_BYTES}. */
+export class BodyTooLargeError extends Error {
+    constructor() {
+        super("request body exceeds the maximum allowed size");
+        this.name = "BodyTooLargeError";
+    }
+}
+/**
+ * Raised by {@link RouteContext.body} when the request body is present but not
+ * valid JSON (NEC-042 item 1 / AC-018l.8). A distinct type so a handler (or the
+ * dispatcher backstop) maps it to a 400 client error rather than the generic 500
+ * `handler_error`. Thrown CONSISTENTLY: once the parse fails, every later
+ * `body()` call rethrows this same error rather than silently returning
+ * `undefined` from a poisoned cache.
+ */
+export class MalformedJsonError extends Error {
+    constructor() {
+        super("request body is not valid JSON");
+        this.name = "MalformedJsonError";
+    }
+}
+/**
+ * Read a request body up to the cap and build a {@link RouteContext}. Reading
+ * the (bounded) body up front keeps the context synchronous for handlers and
+ * enforces the size cap before any handler runs. Rejects with
+ * {@link BodyTooLargeError} when the body exceeds {@link MAX_REQUEST_BODY_BYTES}.
+ */
+export function buildRouteContext(req, path, rawUrl) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let size = 0;
+        let aborted = false;
+        req.on("data", (chunk) => {
+            if (aborted)
+                return; // over-cap: drain remaining data, never buffer it
+            size += chunk.length;
+            if (size > MAX_REQUEST_BODY_BYTES) {
+                // Stop buffering and reject, but do NOT destroy the socket: the server
+                // still needs to write the 413 response back to the client. Remaining
+                // request data is drained (discarded) by the `aborted` guard above.
+                aborted = true;
+                chunks.length = 0;
+                reject(new BodyTooLargeError());
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on("error", (err) => {
+            if (!aborted)
+                reject(err);
+        });
+        req.on("end", () => {
+            if (aborted)
+                return;
+            const raw = Buffer.concat(chunks).toString("utf8");
+            let parsed;
+            let parsedOnce = false;
+            // Cache the thrown state too, so a malformed body rethrows CONSISTENTLY
+            // instead of poisoning the cache: the pre-fix code set `parsedOnce` BEFORE
+            // parsing, so after one throw every later `body()` returned `undefined`
+            // silently (NEC-042 item 1 / AC-018l.8).
+            let parseError;
+            const queryString = rawUrl.includes("?") ? rawUrl.slice(rawUrl.indexOf("?") + 1) : "";
+            resolve({
+                method: (req.method ?? "GET").toUpperCase(),
+                path,
+                rawUrl,
+                query: new URLSearchParams(queryString),
+                headers: req.headers,
+                body() {
+                    if (parseError !== undefined)
+                        throw parseError;
+                    if (parsedOnce)
+                        return parsed;
+                    const trimmed = raw.trim();
+                    try {
+                        parsed = trimmed === "" ? undefined : JSON.parse(trimmed);
+                    }
+                    catch {
+                        parseError = new MalformedJsonError();
+                        throw parseError;
+                    }
+                    parsedOnce = true; // set only AFTER a successful parse
+                    return parsed;
+                },
+                json: jsonResponse,
+            });
+        });
+    });
+}
+//# sourceMappingURL=router.js.map

package/dist/api/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/api/router.ts"],"names":[],"mappings":"AA0BA,8FAA8F;AAC9F,MAAM,CAAC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAElD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAAC;AAehD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,YAAY,GAA8B,MAAM,CAAC,MAAM,CAAC;IACnE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;CACzE,CAAC,CAAC;AAsDH,kFAAkF;AAClF,MAAM,CAAC,MAAM,kBAAkB,GAAmB,GAAG,EAAE,CAAC,IAAI,CAAC;AAc7D,SAAS,YAAY,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG;IAC/C,OAAO;QACL,MAAM;QACN,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC;QAClC,WAAW,EAAE,iCAAiC;KAC/C,CAAC;AACJ,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,OAAe;IAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;IAC9D,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC7B,OAAO,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC;AACzB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,YAAY;IACN,KAAK,CAA4B;IACjC,UAAU,CAAiB;IAC5C,0CAA0C;IACzB,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAE1D,YAAY,QAAmC,YAAY,EAAE,aAA6B,kBAAkB;QAC1G,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAY;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACrD,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,OAAe,EAAE,OAAqB,EAAQ,EAAE;YAChF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACxE,CAAC,CAAC;QACF,MAAM,MAAM,GAAe;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,CAAC,OAAO,EAAE,OAAO;gBAClB,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;gBAClC,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,OAAO;gBACnB,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;gBACnC,OAAO,MAAM,CAAC;YAChB,CAAC;SACF,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,yGAAyG;IACzG,UAAU,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IAClF,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,QAAQ,CAAC,GAAiB;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAEzC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACnD,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,YAAY,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEnE,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,2EAA2E;YAC3E,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;gBACtC,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;YAC3E,CAAC;YACD,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;CACF;AAED,wGAAwG;AACxG,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C;QACE,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C;QACE,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAoB,EAAE,IAAY,EAAE,MAAc;IAClF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,OAAO;gBAAE,OAAO,CAAC,kDAAkD;YACvE,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,sBAAsB,EAAE,CAAC;gBAClC,uEAAuE;gBACvE,sEAAsE;gBACtE,oEAAoE;gBACpE,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;gBAClB,MAAM,CAAC,IAAI,iBAAiB,EAAE,CAAC,CAAC;gBAChC,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACtB,IAAI,CAAC,OAAO;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,OAAO;gBAAE,OAAO;YACpB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnD,IAAI,MAAe,CAAC;YACpB,IAAI,UAAU,GAAG,KAAK,CAAC;YACvB,wEAAwE;YACxE,2EAA2E;YAC3E,wEAAwE;YACxE,yCAAyC;YACzC,IAAI,UAA0C,CAAC;YAC/C,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,OAAO,CAAC;gBACN,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE;gBAC3C,IAAI;gBACJ,MAAM;gBACN,KAAK,EAAE,IAAI,eAAe,CAAC,WAAW,CAAC;gBACvC,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,IAAI;oBACF,IAAI,UAAU,KAAK,SAAS;wBAAE,MAAM,UAAU,CAAC;oBAC/C,IAAI,UAAU;wBAAE,OAAO,MAAM,CAAC;oBAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;oBAC3B,IAAI,CAAC;wBACH,MAAM,GAAG,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBAC5D,CAAC;oBAAC,MAAM,CAAC;wBACP,UAAU,GAAG,IAAI,kBAAkB,EAAE,CAAC;wBACtC,MAAM,UAAU,CAAC;oBACnB,CAAC;oBACD,UAAU,GAAG,IAAI,CAAC,CAAC,oCAAoC;oBACvD,OAAO,MAAM,CAAC;gBAChB,CAAC;gBACD,IAAI,EAAE,YAAY;aACnB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/api/status-query.d.ts

@@ -0,0 +1,49 @@
+/**
+ * The `/api/hive-graph/status` read model (PRD-008c).
+ *
+ * Produces the coarse, cheap pipeline status an operator and the dashboard
+ * read: queue depth (latest-pending-per-nectar count), the `describe_status`
+ * breakdown (one counter per REAL enum value, W-1 closed — all six values kept
+ * distinct, never collapsed into a single `skipped` bucket), and the cumulative
+ * cost counter. Aggregate counts only, no full scan (mirrors honeycomb's coarse
+ * `/health` posture). Fail-soft: a missing table on a fresh workspace degrades
+ * to empty counts + `degraded: true`, never a 500 (mirrors the per-arm
+ * fail-soft at `honeycomb/src/daemon/runtime/memories/recall.ts:24-35`).
+ */
+import { type DescribeStatus } from "../hive-graph/model.js";
+import type { QueryScope, StorageQuery, StorageRow } from "../hive-graph/search-types.js";
+/** The `describe_status` breakdown: one counter per real enum value (all six kept distinct). */
+export type DescribeStatusCounts = Record<DescribeStatus, number>;
+/** The `/api/hive-graph/status` response shape (PRD-008c). */
+export interface HiveGraphStatus {
+    readonly queueDepth: number;
+    readonly describeStatus: DescribeStatusCounts;
+    readonly costSpentUsd: number;
+    readonly degraded: boolean;
+}
+/** A zeroed counter for every real `describe_status` value (the honest empty breakdown). */
+export declare function emptyDescribeStatusCounts(): DescribeStatusCounts;
+/** Aggregate count of version rows grouped by `describe_status`, scoped by tenancy. */
+export declare function buildDescribeStatusCountSql(scope: QueryScope): string;
+/**
+ * Latest-pending-per-nectar rows, scoped by tenancy. The queue depth is the row
+ * count of this result (one row per nectar whose latest version is pending),
+ * mirroring the enricher's pending-work query shape
+ * (`src/enricher/pending-query.ts` `buildPendingWorkSql`).
+ */
+export declare function buildQueueDepthSql(scope: QueryScope): string;
+/** Fold GROUP BY rows into the six-value breakdown; unknown values are ignored (schema is the source of truth). */
+export declare function parseDescribeStatusCounts(rows: readonly StorageRow[]): DescribeStatusCounts;
+export interface ReadHiveGraphStatusOptions {
+    /** The cumulative brooding/enricher cost counter (from the daemon's health cost slice). */
+    readonly costSpentUsd?: number;
+}
+/**
+ * Read the pipeline status over the injected {@link StorageQuery}. Fail-soft:
+ * a missing table (fresh workspace) returns the degraded empty status, never
+ * throwing (AC-008c.2.2). A non-missing-table storage failure also degrades
+ * rather than crashing the status read. `costSpentUsd` is supplied by the
+ * daemon's in-memory cost counter (there is no durable cost table to query).
+ */
+export declare function readHiveGraphStatusOverStorage(storage: StorageQuery, scope: QueryScope, options?: ReadHiveGraphStatusOptions): Promise<HiveGraphStatus>;
+//# sourceMappingURL=status-query.d.ts.map

package/dist/api/status-query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-query.d.ts","sourceRoot":"","sources":["../../src/api/status-query.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAqB,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAKhF,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAI1F,gGAAgG;AAChG,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;AAElE,8DAA8D;AAC9D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,oBAAoB,CAAC;IAC9C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,4FAA4F;AAC5F,wBAAgB,yBAAyB,IAAI,oBAAoB,CAIhE;AAUD,uFAAuF;AACvF,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAQrE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAU5D;AAED,mHAAmH;AACnH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,SAAS,UAAU,EAAE,GAAG,oBAAoB,CAW3F;AAOD,MAAM,WAAW,0BAA0B;IACzC,2FAA2F;IAC3F,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;GAMG;AACH,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,YAAY,EACrB,KAAK,EAAE,UAAU,EACjB,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,eAAe,CAAC,CAoB1B"}

package/dist/api/status-query.js

@@ -0,0 +1,103 @@
+/**
+ * The `/api/hive-graph/status` read model (PRD-008c).
+ *
+ * Produces the coarse, cheap pipeline status an operator and the dashboard
+ * read: queue depth (latest-pending-per-nectar count), the `describe_status`
+ * breakdown (one counter per REAL enum value, W-1 closed — all six values kept
+ * distinct, never collapsed into a single `skipped` bucket), and the cumulative
+ * cost counter. Aggregate counts only, no full scan (mirrors honeycomb's coarse
+ * `/health` posture). Fail-soft: a missing table on a fresh workspace degrades
+ * to empty counts + `degraded: true`, never a 500 (mirrors the per-arm
+ * fail-soft at `honeycomb/src/daemon/runtime/memories/recall.ts:24-35`).
+ */
+import { DESCRIBE_STATUSES } from "../hive-graph/model.js";
+import { HIVE_GRAPH_VERSIONS_TABLE } from "../hive-graph/schema.js";
+import { isMissingTableError } from "../hive-graph/deeplake-heal.js";
+import { TransportError } from "../hive-graph/deeplake-transport.js";
+import { sLiteral, sqlIdent } from "../hive-graph/sql-guards.js";
+const HIVE_GRAPH_VERSIONS = sqlIdent(HIVE_GRAPH_VERSIONS_TABLE.name);
+/** A zeroed counter for every real `describe_status` value (the honest empty breakdown). */
+export function emptyDescribeStatusCounts() {
+    const counts = {};
+    for (const status of DESCRIBE_STATUSES)
+        counts[status] = 0;
+    return counts;
+}
+function tenancyPredicate(scope) {
+    return (`${sqlIdent("org_id")} = ${sLiteral(scope.orgId)} AND ` +
+        `${sqlIdent("workspace_id")} = ${sLiteral(scope.workspaceId)} AND ` +
+        `${sqlIdent("project_id")} = ${sLiteral(scope.projectId)}`);
+}
+/** Aggregate count of version rows grouped by `describe_status`, scoped by tenancy. */
+export function buildDescribeStatusCountSql(scope) {
+    const statusCol = sqlIdent("describe_status");
+    return (`SELECT ${statusCol}, COUNT(*) AS n ` +
+        `FROM "${HIVE_GRAPH_VERSIONS}" ` +
+        `WHERE ${tenancyPredicate(scope)} ` +
+        `GROUP BY ${statusCol}`);
+}
+/**
+ * Latest-pending-per-nectar rows, scoped by tenancy. The queue depth is the row
+ * count of this result (one row per nectar whose latest version is pending),
+ * mirroring the enricher's pending-work query shape
+ * (`src/enricher/pending-query.ts` `buildPendingWorkSql`).
+ */
+export function buildQueueDepthSql(scope) {
+    const nectarCol = sqlIdent("nectar");
+    const seqCol = sqlIdent("seq");
+    const statusCol = sqlIdent("describe_status");
+    return (`SELECT ${nectarCol}, MAX(${seqCol}) AS seq ` +
+        `FROM "${HIVE_GRAPH_VERSIONS}" ` +
+        `WHERE ${statusCol} = ${sLiteral("pending")} AND ${tenancyPredicate(scope)} ` +
+        `GROUP BY ${nectarCol}`);
+}
+/** Fold GROUP BY rows into the six-value breakdown; unknown values are ignored (schema is the source of truth). */
+export function parseDescribeStatusCounts(rows) {
+    const counts = emptyDescribeStatusCounts();
+    const known = new Set(DESCRIBE_STATUSES);
+    for (const row of rows) {
+        const status = typeof row["describe_status"] === "string" ? row["describe_status"] : "";
+        if (!known.has(status))
+            continue;
+        const raw = row["n"];
+        const n = typeof raw === "number" ? raw : Number(raw);
+        if (Number.isFinite(n))
+            counts[status] = n;
+    }
+    return counts;
+}
+function isMissingTable(err) {
+    if (err instanceof TransportError && isMissingTableError(err))
+        return true;
+    return err instanceof Error && /table does not exist|no such table|relation .* does not exist/i.test(err.message);
+}
+/**
+ * Read the pipeline status over the injected {@link StorageQuery}. Fail-soft:
+ * a missing table (fresh workspace) returns the degraded empty status, never
+ * throwing (AC-008c.2.2). A non-missing-table storage failure also degrades
+ * rather than crashing the status read. `costSpentUsd` is supplied by the
+ * daemon's in-memory cost counter (there is no durable cost table to query).
+ */
+export async function readHiveGraphStatusOverStorage(storage, scope, options = {}) {
+    const costSpentUsd = options.costSpentUsd ?? 0;
+    try {
+        const [statusRows, queueRows] = await Promise.all([
+            storage.query(buildDescribeStatusCountSql(scope), scope),
+            storage.query(buildQueueDepthSql(scope), scope),
+        ]);
+        return {
+            queueDepth: queueRows.length,
+            describeStatus: parseDescribeStatusCounts(statusRows),
+            costSpentUsd,
+            degraded: false,
+        };
+    }
+    catch (err) {
+        if (isMissingTable(err)) {
+            return { queueDepth: 0, describeStatus: emptyDescribeStatusCounts(), costSpentUsd, degraded: true };
+        }
+        // Any other storage failure also degrades (coarse status never 500s the daemon).
+        return { queueDepth: 0, describeStatus: emptyDescribeStatusCounts(), costSpentUsd, degraded: true };
+    }
+}
+//# sourceMappingURL=status-query.js.map

package/dist/api/status-query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-query.js","sourceRoot":"","sources":["../../src/api/status-query.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,iBAAiB,EAAuB,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAGjE,MAAM,mBAAmB,GAAG,QAAQ,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;AAarE,4FAA4F;AAC5F,MAAM,UAAU,yBAAyB;IACvC,MAAM,MAAM,GAAG,EAAoC,CAAC;IACpD,KAAK,MAAM,MAAM,IAAI,iBAAiB;QAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAiB;IACzC,OAAO,CACL,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO;QACvD,GAAG,QAAQ,CAAC,cAAc,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO;QACnE,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAC3D,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,2BAA2B,CAAC,KAAiB;IAC3D,MAAM,SAAS,GAAG,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAC9C,OAAO,CACL,UAAU,SAAS,kBAAkB;QACrC,SAAS,mBAAmB,IAAI;QAChC,SAAS,gBAAgB,CAAC,KAAK,CAAC,GAAG;QACnC,YAAY,SAAS,EAAE,CACxB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAiB;IAClD,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAC9C,OAAO,CACL,UAAU,SAAS,SAAS,MAAM,WAAW;QAC7C,SAAS,mBAAmB,IAAI;QAChC,SAAS,SAAS,MAAM,QAAQ,CAAC,SAAS,CAAC,QAAQ,gBAAgB,CAAC,KAAK,CAAC,GAAG;QAC7E,YAAY,SAAS,EAAE,CACxB,CAAC;AACJ,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,yBAAyB,CAAC,IAA2B;IACnE,MAAM,MAAM,GAAG,yBAAyB,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,iBAAiB,CAAC,CAAC;IACjD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,iBAAiB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,iBAAiB,CAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QACpG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QACjC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,MAAM,CAAC,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,MAAwB,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,GAAG,YAAY,cAAc,IAAI,mBAAmB,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3E,OAAO,GAAG,YAAY,KAAK,IAAI,gEAAgE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACpH,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,OAAqB,EACrB,KAAiB,EACjB,UAAsC,EAAE;IAExC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAChD,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;YACxD,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;SAChD,CAAC,CAAC;QACH,OAAO;YACL,UAAU,EAAE,SAAS,CAAC,MAAM;YAC5B,cAAc,EAAE,yBAAyB,CAAC,UAAU,CAAC;YACrD,YAAY;YACZ,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,cAAc,EAAE,yBAAyB,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACtG,CAAC;QACD,iFAAiF;QACjF,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,cAAc,EAAE,yBAAyB,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACtG,CAAC;AACH,CAAC"}

package/dist/brood-guard.d.ts

@@ -0,0 +1,24 @@
+/**
+ * The shared in-process brood guard (PRD-018g / NEC-011 AC-018g.1/.2).
+ *
+ * ONE guard instance, owned by the daemon composition root, is shared by every
+ * path that can start a brood - the boot auto-brood and the API's
+ * `POST /api/hive-graph/build` handler - so at most one brood runs per daemon at
+ * a time (no concurrent double-brood, no double-mint). The same instance also
+ * lets the enricher cycle observe that a brood is active (`active()`) and pause,
+ * so it never describes rows the brood is mid-describe on.
+ *
+ * This lives in its own module (not `daemon.ts`) so both `daemon.ts` and
+ * `api/hive-graph-api.ts` can import it without a circular dependency.
+ */
+export interface BroodGuard {
+    /** Begin a brood if none is in flight. Returns true on acquisition, false if one is already active. */
+    tryAcquire(): boolean;
+    /** End the in-flight brood, allowing the next acquisition. Idempotent. */
+    release(): void;
+    /** True while a brood is in flight. */
+    active(): boolean;
+}
+/** Build a fresh, unheld {@link BroodGuard}. */
+export declare function createBroodGuard(): BroodGuard;
+//# sourceMappingURL=brood-guard.d.ts.map

package/dist/brood-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"brood-guard.d.ts","sourceRoot":"","sources":["../src/brood-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,UAAU;IACzB,uGAAuG;IACvG,UAAU,IAAI,OAAO,CAAC;IACtB,0EAA0E;IAC1E,OAAO,IAAI,IAAI,CAAC;IAChB,uCAAuC;IACvC,MAAM,IAAI,OAAO,CAAC;CACnB;AAED,gDAAgD;AAChD,wBAAgB,gBAAgB,IAAI,UAAU,CAe7C"}

package/dist/brood-guard.js

@@ -0,0 +1,19 @@
+/** Build a fresh, unheld {@link BroodGuard}. */
+export function createBroodGuard() {
+    let inFlight = false;
+    return {
+        tryAcquire() {
+            if (inFlight)
+                return false;
+            inFlight = true;
+            return true;
+        },
+        release() {
+            inFlight = false;
+        },
+        active() {
+            return inFlight;
+        },
+    };
+}
+//# sourceMappingURL=brood-guard.js.map

package/dist/brood-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brood-guard.js","sourceRoot":"","sources":["../src/brood-guard.ts"],"names":[],"mappings":"AAsBA,gDAAgD;AAChD,MAAM,UAAU,gBAAgB;IAC9B,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO;QACL,UAAU;YACR,IAAI,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC3B,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,QAAQ,GAAG,KAAK,CAAC;QACnB,CAAC;QACD,MAAM;YACJ,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC"}