@massa-ai/core 1.2.1

package/dist/controllers/search-controller.js

@@ -0,0 +1,314 @@
+/**
+ * Search Controller
+ *
+ * Orchestration layer for project search operations.
+ * Extracts preview generation, glob filtering, and auto-reindex
+ * coordination from the SearchProjectTool.
+ */
+import { logger, config } from "@massa-ai/shared";
+import { ContextualSearchRLM } from "../services/search/contextual-search-rlm.js";
+import { eventBus } from "../services/events/event-bus.js";
+import { LLMJudgeReranker } from "../services/search/reranker.js";
+import { minimatch } from "minimatch";
+import { validateFilters } from "../services/search/filter-validation.js";
+// ── Controller ───────────────────────────────────────────────
+export class SearchController {
+    static instance = null;
+    contextualSearch;
+    constructor() {
+        this.contextualSearch = new ContextualSearchRLM();
+    }
+    static getInstance() {
+        if (!SearchController.instance) {
+            SearchController.instance = new SearchController();
+        }
+        return SearchController.instance;
+    }
+    /** Expose the underlying search engine for direct use by ContextController. */
+    getSearchEngine() {
+        return this.contextualSearch;
+    }
+    // ── Main search use case ───────────────────────────────────
+    async searchProject(input) {
+        const { query, projectId, projectPath, maxResults = 10, minScore = (() => { const v = Number(process.env.SEARCH_MIN_SCORE ?? "0.3"); return Number.isFinite(v) ? Math.min(1, Math.max(0, v)) : 0.3; })(), responseMode = "summary", autoReindex = false, include, exclude, explainScores = false, boostFiles, sessionId, } = input;
+        const startTime = Date.now();
+        logger.info("Starting project search", {
+            query,
+            projectId,
+            maxResults,
+            autoReindex,
+            explainScores,
+        });
+        // Admission preflight (M10): two-tier gate before any retrieval.
+        //   Tier 1 — HARD-FAIL: no index metadata → throw, caller wraps as
+        //            success:false. Replaces the prior silent `results:[]` path.
+        //   Tier 2 — WARN: indexed but stale (needs projectPath) → search proceeds,
+        //            `staleWarning` attached to the returned result.
+        const admission = await this.contextualSearch.checkSearchAdmission(projectId, projectPath);
+        if (!admission.admitted) {
+            throw new Error(admission.error ?? `Project '${projectId}' is not indexed`);
+        }
+        const staleWarning = admission.stale ?? null;
+        // Auto-reindex if requested
+        let reindexInfo = null;
+        if (autoReindex && projectPath) {
+            reindexInfo = await this.handleAutoReindex(projectId, projectPath);
+        }
+        // Execute search
+        let degradations = [];
+        const results = await this.contextualSearch.search(query, projectId, {
+            maxResults,
+            minScore,
+            explainScores,
+            includeFilters: include,
+            excludeFilters: exclude,
+            sessionId,
+            onDegradations: (entries) => {
+                degradations = entries.slice(0, 10);
+            },
+        });
+        logger.info("Project search completed", {
+            projectId,
+            resultCount: results.length,
+            totalLatencyMs: Date.now() - startTime,
+        });
+        // Wave 5 FR-18 / N16 / AC-15: server-side revalidation of client filter
+        // hints BEFORE filterByPatterns consumes them. Caps include+exclude,
+        // validates glob syntax (teaching error on invalid), and downgrades
+        // contradictions (same pattern in both → drop exclude, emit downgrade).
+        // filterByPatterns uses the cleaned (post-downgrade) patterns. The
+        // downgrade records are attached to the response (additive).
+        const filterValidation = validateFilters(include, exclude, config.get("filterValidation").maxFilterPatterns);
+        // Apply glob filters
+        const filteredResults = this.filterByPatterns(results, filterValidation.include, filterValidation.exclude);
+        if (filteredResults.length < results.length) {
+            logger.info("Results filtered by patterns", {
+                before: results.length,
+                after: filteredResults.length,
+                include: filterValidation.include,
+                exclude: filterValidation.exclude,
+            });
+        }
+        // Apply centrality/graph boost: files identified by Symbol Graph prefilter
+        // get a 30% score multiplier, then re-sort
+        const boostedResults = boostFiles && boostFiles.length > 0
+            ? this.applyBoost(filteredResults, boostFiles)
+            : filteredResults;
+        // Phase 7a: LLM-judge rerank of the top-K window (after centrality boost).
+        // Default-off via config.search.rerank.enabled; silent-degrades to the
+        // boosted order on LLM off/{ok:false}/throw. Never throws.
+        const rerankCfg = config.get("search").rerank;
+        let rerankedResults = boostedResults;
+        if (rerankCfg?.enabled) {
+            const reranker = new LLMJudgeReranker();
+            rerankedResults = await reranker.rerank(query, boostedResults);
+            eventBus.publish("search:reranked", {
+                query,
+                projectId,
+                // The RRF stream count (2 = vector+keyword, 3 = +HyDE/qu) is owned by
+                // ContextualSearchRLM; at the controller layer we report the fused
+                // result count. Phase-2 still emits its own pre-rerank search:reranked
+                // with the precise streamCount; this post-rerank emit adds source.
+                streamCount: 2,
+                resultCount: rerankedResults.length,
+                source: "llm-judge",
+            });
+        }
+        // N4 (WAVE4-N4): the reachable set is the post-filter, post-rerank list
+        // BEFORE the final `.slice(0, maxResults)` clamps the displayed page. This
+        // is the "pre-clamp reachable count" per spec AC 3. `results_shown` is the
+        // page length after the slice. `results_omitted = results_total - results_shown`.
+        const results_total = rerankedResults.length;
+        const formattedResults = rerankedResults.slice(0, maxResults).map((r) => {
+            const meta = (r.metadata ?? {});
+            const base = {
+                id: r.id,
+                score: r.score,
+                filePath: meta.filePath,
+                lineStart: meta.lineStart,
+                lineEnd: meta.lineEnd,
+                language: meta.language,
+                preview: this.generatePreview(r, query),
+            };
+            if (r.explanation)
+                base.explanation = r.explanation;
+            if (responseMode === "full" || responseMode === "enriched") {
+                base.content = r.content;
+                base.chunkIndex = meta.chunkIndex;
+                base.totalChunks = meta.totalChunks;
+            }
+            if (responseMode === "enriched") {
+                if (meta.parentSymbol)
+                    base.parentSymbol = meta.parentSymbol;
+                if (meta.fileImports)
+                    base.fileImports = meta.fileImports;
+            }
+            return base;
+        });
+        // Emit search:completed for hook subscribers (e.g. SearchSessionHook)
+        eventBus.publish("search:completed", {
+            query,
+            projectId,
+            sessionId,
+            results: formattedResults.map((r) => ({
+                filePath: r.filePath,
+                score: r.score,
+                lineStart: r.lineStart,
+                lineEnd: r.lineEnd,
+            })),
+            durationMs: Date.now() - startTime,
+            resultCount: formattedResults.length,
+        });
+        // Generate intelligent recommendations
+        const recommendations = [];
+        // Add reindex recommendations
+        if (reindexInfo?.deferred) {
+            recommendations.push("Indexing deferred to keep this search responsive");
+            recommendations.push("Run index(projectPath, projectId) and poll get_index_status(jobId)");
+        }
+        // Add usage recommendations based on response mode
+        if (responseMode === "summary" && formattedResults.length > 0) {
+            recommendations.push("Use responseMode='enriched' to get full content + file imports + parentSymbol without extra tool calls");
+            if (formattedResults.length >= 3)
+                recommendations.push("Use optimized_context(query) for compressed multi-file context");
+        }
+        if (responseMode === "full")
+            recommendations.push("Try responseMode='enriched' — same content plus fileImports and parentSymbol");
+        if (responseMode === "enriched" && formattedResults.length > 0)
+            recommendations.push("Enriched mode: content + fileImports + parentSymbol included. Use chunkIndex/totalChunks to navigate adjacent chunks.");
+        // Add project-specific recommendations
+        if (formattedResults.length === 0) {
+            recommendations.push("Try lowering minScore (current: " + minScore + ") or different query terms");
+            recommendations.push("Check if project is indexed: list_projects()");
+        }
+        return {
+            query,
+            projectId,
+            responseMode,
+            tokenSavings: responseMode === "summary" ? "~70% vs full mode" : "none",
+            indexStatus: reindexInfo || { wasStale: false, reindexed: false },
+            recommendations,
+            filters: {
+                applied: filterValidation.include.length > 0 ||
+                    filterValidation.exclude.length > 0 ||
+                    false,
+                include: filterValidation.include,
+                exclude: filterValidation.exclude,
+                totalResults: results.length,
+                filteredResults: filteredResults.length,
+            },
+            results: formattedResults,
+            // N4 (WAVE4-N4): top-level totals for the clamped results list.
+            results_total,
+            results_shown: formattedResults.length,
+            results_omitted: Math.max(0, results_total - formattedResults.length),
+            ...(degradations.length > 0 ? { degradations: [...degradations] } : {}),
+            // Wave 5 FR-18 / AD-W5-012: observable filter downgrade records.
+            // Additive — present only when validateFilters reconciled a
+            // contradiction (same pattern in both include and exclude).
+            ...(filterValidation.downgrades.length > 0
+                ? { filter_downgrades: filterValidation.downgrades }
+                : {}),
+            ...(staleWarning
+                ? {
+                    warning: `Index may be stale (reason: ${staleWarning.reason}). Results reflect the indexed snapshot, not the current files.`,
+                    stale: staleWarning,
+                }
+                : {}),
+        };
+    }
+    // ── Helpers ────────────────────────────────────────────────
+    async handleAutoReindex(projectId, projectPath) {
+        const freshnessStart = Date.now();
+        const info = await this.contextualSearch.ensureFreshIndex(projectId, projectPath, {
+            allowFullReindex: false,
+            maxSyncFiles: config.get("search").autoReindexMaxFiles,
+        });
+        logger.info("Index freshness check completed", {
+            projectId,
+            latencyMs: Date.now() - freshnessStart,
+            wasStale: info.wasStale,
+            reindexed: info.reindexed,
+            reason: info.reason,
+            deferred: info.deferred || false,
+            filesPending: info.filesPending || 0,
+        });
+        return info;
+    }
+    generatePreview(result, _query) {
+        if (result.metadata?.context?.preview)
+            return result.metadata.context.preview;
+        const content = result.content || "";
+        const allLines = content.split("\n");
+        if (!allLines.some((l) => l.trim()))
+            return "(empty)";
+        const lang = result.metadata?.language || "";
+        const isCode = /^(ts|tsx|js|jsx|mjs|cjs|py|go|rs|java|kt|swift|dart|cpp|c|cs|rb|php)$/.test(lang);
+        if (isCode) {
+            const bodyLines = allLines.filter((l) => {
+                const t = l.trim();
+                return t && !t.startsWith("// File:") && !t.startsWith("// Section:");
+            });
+            const sigLines = [];
+            for (const line of bodyLines) {
+                const t = line.trim();
+                if (sigLines.length === 0 && (t.startsWith("//") || t.startsWith("/*") || t.startsWith("*") || t.startsWith("@")))
+                    continue;
+                if (sigLines.length === 0 && t.startsWith("import "))
+                    continue;
+                sigLines.push(line.trimEnd());
+                if (t.endsWith("{") || t.endsWith("=>") || t.endsWith(";"))
+                    break;
+                if (sigLines.length >= 8)
+                    break;
+            }
+            if (sigLines.length > 0)
+                return sigLines.join("\n");
+        }
+        const meaningful = allLines.find((l) => {
+            const t = l.trim();
+            return t && !t.startsWith("import ") && !t.startsWith("//") && !t.startsWith("#") && !t.startsWith("/*") && !t.startsWith("*");
+        }) || allLines.find((l) => l.trim()) || allLines[0];
+        const preview = meaningful.trimEnd();
+        return preview.length > 150 ? preview.substring(0, 147) + "..." : preview;
+    }
+    filterByPatterns(results, include, exclude) {
+        return results.filter((result) => {
+            const filePath = result.metadata?.filePath || "";
+            if (!filePath)
+                return !include?.length;
+            if (exclude && exclude.length > 0) {
+                for (const pattern of exclude) {
+                    if (minimatch(filePath, pattern))
+                        return false;
+                }
+            }
+            if (include && include.length > 0) {
+                for (const pattern of include) {
+                    if (minimatch(filePath, pattern))
+                        return true;
+                }
+                return false;
+            }
+            return true;
+        });
+    }
+    /**
+     * Apply a 30% score boost to results whose filePath is in boostFiles.
+     * Re-sorts by boosted score descending.
+     */
+    applyBoost(results, boostFiles) {
+        const boostSet = new Set(boostFiles);
+        const BOOST_FACTOR = 1.3;
+        return results
+            .map((r) => {
+            const filePath = r.metadata?.filePath || r.filePath || "";
+            const boosted = boostSet.has(filePath)
+                ? { ...r, score: Math.min(1, r.score * BOOST_FACTOR) }
+                : r;
+            return boosted;
+        })
+            .sort((a, b) => b.score - a.score);
+    }
+}
+//# sourceMappingURL=search-controller.js.map

package/dist/controllers/search-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-controller.js","sourceRoot":"","sources":["../../src/controllers/search-controller.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAClF,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAElE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AA4F1E,gEAAgE;AAEhE,MAAM,OAAO,gBAAgB;IACnB,MAAM,CAAC,QAAQ,GAA4B,IAAI,CAAC;IAChD,gBAAgB,CAAsB;IAE9C;QACE,IAAI,CAAC,gBAAgB,GAAG,IAAI,mBAAmB,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YAC/B,gBAAgB,CAAC,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACrD,CAAC;QACD,OAAO,gBAAgB,CAAC,QAAQ,CAAC;IACnC,CAAC;IAED,+EAA+E;IAC/E,eAAe;QACb,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAED,8DAA8D;IAE9D,KAAK,CAAC,aAAa,CAAC,KAAyB;QAC3C,MAAM,EACJ,KAAK,EACL,SAAS,EACT,WAAW,EACX,UAAU,GAAG,EAAE,EACf,QAAQ,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAChJ,YAAY,GAAG,SAAS,EACxB,WAAW,GAAG,KAAK,EACnB,OAAO,EACP,OAAO,EACP,aAAa,GAAG,KAAK,EACrB,UAAU,EACV,SAAS,GACV,GAAG,KAAK,CAAC;QAEV,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE;YACrC,KAAK;YACL,SAAS;YACT,UAAU;YACV,WAAW;YACX,aAAa;SACd,CAAC,CAAC;QAEH,iEAAiE;QACjE,mEAAmE;QACnE,yEAAyE;QACzE,4EAA4E;QAC5E,6DAA6D;QAC7D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAChE,SAAS,EACT,WAAW,CACZ,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,YAAY,SAAS,kBAAkB,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC;QAE7C,4BAA4B;QAC5B,IAAI,WAAW,GAAG,IAAI,CAAC;QACvB,IAAI,WAAW,IAAI,WAAW,EAAE,CAAC;YAC/B,WAAW,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACrE,CAAC;QAED,iBAAiB;QACjB,IAAI,YAAY,GAAiC,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE;YACnE,UAAU;YACV,QAAQ;YACR,aAAa;YACb,cAAc,EAAE,OAAO;YACvB,cAAc,EAAE,OAAO;YACvB,SAAS;YACT,cAAc,EAAE,CAAC,OAAO,EAAE,EAAE;gBAC1B,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtC,CAAC;SACF,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;YACtC,SAAS;YACT,WAAW,EAAE,OAAO,CAAC,MAAM;YAC3B,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACvC,CAAC,CAAC;QAEH,wEAAwE;QACxE,qEAAqE;QACrE,oEAAoE;QACpE,wEAAwE;QACxE,mEAAmE;QACnE,6DAA6D;QAC7D,MAAM,gBAAgB,GAAG,eAAe,CACtC,OAAO,EACP,OAAO,EACN,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAoC,CAAC,iBAAiB,CACrF,CAAC;QAEF,qBAAqB;QACrB,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAgB,CAC3C,OAAO,EACP,gBAAgB,CAAC,OAAO,EACxB,gBAAgB,CAAC,OAAO,CACzB,CAAC;QAEF,IAAI,eAAe,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;gBAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,KAAK,EAAE,eAAe,CAAC,MAAM;gBAC7B,OAAO,EAAE,gBAAgB,CAAC,OAAO;gBACjC,OAAO,EAAE,gBAAgB,CAAC,OAAO;aAClC,CAAC,CAAC;QACL,CAAC;QAED,2EAA2E;QAC3E,2CAA2C;QAC3C,MAAM,cAAc,GAAG,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;YACxD,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,UAAU,CAAC;YAC9C,CAAC,CAAC,eAAe,CAAC;QAEpB,2EAA2E;QAC3E,uEAAuE;QACvE,2DAA2D;QAC3D,MAAM,SAAS,GAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAwC,CAAC,MAAM,CAAC;QACtF,IAAI,eAAe,GAAG,cAAc,CAAC;QACrC,IAAI,SAAS,EAAE,OAAO,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACxC,eAAe,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;YAC/D,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE;gBAClC,KAAK;gBACL,SAAS;gBACT,sEAAsE;gBACtE,mEAAmE;gBACnE,uEAAuE;gBACvE,mEAAmE;gBACnE,WAAW,EAAE,CAAC;gBACd,WAAW,EAAE,eAAe,CAAC,MAAM;gBACnC,MAAM,EAAE,WAAW;aACpB,CAAC,CAAC;QACL,CAAC;QAED,wEAAwE;QACxE,2EAA2E;QAC3E,2EAA2E;QAC3E,kFAAkF;QAClF,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC;QAE7C,MAAM,gBAAgB,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACtE,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;YAC3D,MAAM,IAAI,GAAoB;gBAC5B,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,QAAQ,EAAE,IAAI,CAAC,QAAkB;gBACjC,SAAS,EAAE,IAAI,CAAC,SAA+B;gBAC/C,OAAO,EAAE,IAAI,CAAC,OAA6B;gBAC3C,QAAQ,EAAE,IAAI,CAAC,QAA8B;gBAC7C,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC;aACxC,CAAC;YACF,IAAI,CAAC,CAAC,WAAW;gBAAE,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;YACpD,IAAI,YAAY,KAAK,MAAM,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;gBAC3D,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;gBACzB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAgC,CAAC;gBACxD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAiC,CAAC;YAC5D,CAAC;YACD,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;gBAChC,IAAI,IAAI,CAAC,YAAY;oBAAE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAsB,CAAC;gBACvE,IAAI,IAAI,CAAC,WAAW;oBAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAqB,CAAC;YACtE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,sEAAsE;QACtE,QAAQ,CAAC,OAAO,CAAC,kBAAkB,EAAE;YACnC,KAAK;YACL,SAAS;YACT,SAAS;YACT,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpC,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,OAAO,EAAE,CAAC,CAAC,OAAO;aACnB,CAAC,CAAC;YACH,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAClC,WAAW,EAAE,gBAAgB,CAAC,MAAM;SACrC,CAAC,CAAC;QAEH,uCAAuC;QACvC,MAAM,eAAe,GAAa,EAAE,CAAC;QAErC,8BAA8B;QAC9B,IAAK,WAAmB,EAAE,QAAQ,EAAE,CAAC;YACnC,eAAe,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;YACzE,eAAe,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QAC7F,CAAC;QAED,mDAAmD;QACnD,IAAI,YAAY,KAAK,SAAS,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9D,eAAe,CAAC,IAAI,CAAC,wGAAwG,CAAC,CAAC;YAC/H,IAAI,gBAAgB,CAAC,MAAM,IAAI,CAAC;gBAAE,eAAe,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;QAC3H,CAAC;QACD,IAAI,YAAY,KAAK,MAAM;YAAE,eAAe,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAC;QAClI,IAAI,YAAY,KAAK,UAAU,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC;YAAE,eAAe,CAAC,IAAI,CAAC,uHAAuH,CAAC,CAAC;QAE9M,uCAAuC;QACvC,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,eAAe,CAAC,IAAI,CAAC,kCAAkC,GAAG,QAAQ,GAAG,4BAA4B,CAAC,CAAC;YACnG,eAAe,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QACvE,CAAC;QAED,OAAO;YACL,KAAK;YACL,SAAS;YACT,YAAY;YACZ,YAAY,EAAE,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM;YACvE,WAAW,EAAE,WAAW,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE;YACjE,eAAe;YACf,OAAO,EAAE;gBACP,OAAO,EACL,gBAAgB,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;oBACnC,gBAAgB,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;oBACnC,KAAK;gBACP,OAAO,EAAE,gBAAgB,CAAC,OAAO;gBACjC,OAAO,EAAE,gBAAgB,CAAC,OAAO;gBACjC,YAAY,EAAE,OAAO,CAAC,MAAM;gBAC5B,eAAe,EAAE,eAAe,CAAC,MAAM;aACxC;YACD,OAAO,EAAE,gBAAgB;YACzB,gEAAgE;YAChE,aAAa;YACb,aAAa,EAAE,gBAAgB,CAAC,MAAM;YACtC,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,GAAG,gBAAgB,CAAC,MAAM,CAAC;YACrE,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,iEAAiE;YACjE,4DAA4D;YAC5D,4DAA4D;YAC5D,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;gBACxC,CAAC,CAAC,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,UAAU,EAAE;gBACpD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,YAAY;gBACd,CAAC,CAAC;oBACE,OAAO,EAAE,+BAA+B,YAAY,CAAC,MAAM,iEAAiE;oBAC5H,KAAK,EAAE,YAAY;iBACpB;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED,8DAA8D;IAEtD,KAAK,CAAC,iBAAiB,CAC7B,SAAiB,EACjB,WAAmB;QAEnB,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CACvD,SAAS,EACT,WAAW,EACX;YACE,gBAAgB,EAAE,KAAK;YACvB,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,mBAAmB;SACvD,CACF,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;YAC7C,SAAS;YACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc;YACtC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAG,IAAY,CAAC,QAAQ,IAAI,KAAK;YACzC,YAAY,EAAG,IAAY,CAAC,YAAY,IAAI,CAAC;SAC9C,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,eAAe,CAAC,MAAW,EAAE,MAAe;QAC1C,IAAI,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;QAC9E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9D,MAAM,IAAI,GAAI,MAAM,CAAC,QAAQ,EAAE,QAAmB,IAAI,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,uEAAuE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClG,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE;gBAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YACxE,CAAC,CAAC,CAAC;YACH,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBACtB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;oBAAE,SAAS;gBAC5H,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;oBAAE,SAAS;gBAC/D,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9B,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,MAAM;gBAClE,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC;oBAAE,MAAM;YAClC,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE;YAC7C,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACjI,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;QACrC,OAAO,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;IAC5E,CAAC;IAGD,gBAAgB,CACd,OAAc,EACd,OAAkB,EAClB,OAAkB;QAElB,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;YAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC;YACjD,IAAI,CAAC,QAAQ;gBAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;YAEvC,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;oBAC9B,IAAI,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC;wBAAE,OAAO,KAAK,CAAC;gBACjD,CAAC;YACH,CAAC;YAED,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;oBAC9B,IAAI,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC;wBAAE,OAAO,IAAI,CAAC;gBAChD,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,OAAc,EAAE,UAAoB;QAC7C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;QACrC,MAAM,YAAY,GAAG,GAAG,CAAC;QAEzB,OAAO,OAAO;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACpC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,YAAY,CAAC,EAAE;gBACtD,CAAC,CAAC,CAAC,CAAC;YACN,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC;aACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC"}

package/dist/data/audit/operation-log-contract.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Operation Log — audit attribution for destructive operations.
+ *
+ * M8 introduced an `operation_log` table so every destructive entry point
+ * (project reset, memory purge, workspace delete, …) records who/when/what/
+ * scope/result for later attribution. Auth is API-key-only today, so the
+ * actor is whatever the API layer can derive from the request; richer
+ * identity (signed-in user, agent headers, etc.) plugs in via the same
+ * `ActorContext` seam without rewriting call sites.
+ */
+/**
+ * Stable identity seam for whoever triggered a destructive op.
+ *
+ * Today the only source is the API key (actor_type="api_key", actor_id =
+ * key id when one can be derived, else "unknown"). Future identity sources
+ * (X-Actor-User, JWT subject, MCP agent id, …) construct their own
+ * `ActorContext` and pass it to `recordOperation` — no call-site changes.
+ *
+ * NEVER put secrets in `actorId`. It is logged verbatim and stored in a
+ * long-lived audit table, so it must be a non-secret identifier.
+ */
+export interface ActorContext {
+    /** Free-form actor class — "api_key" today, "user" / "agent" / "system" later. */
+    actorType: string;
+    /** Non-secret identifier; "unknown" when no identity is available. */
+    actorId: string;
+}
+/** Canonical "no identity available" context used when none was provided. */
+export declare const UNKNOWN_ACTOR: ActorContext;
+/** Outcome of the destructive operation being audited. */
+export type OperationResult = "success" | "failure" | "partial";
+/**
+ * Input shape for `OperationLogRepository.recordOperation`.
+ *
+ * `scope` and `meta` are JSONB blobs: `scope` describes WHAT was touched
+ * (e.g. `{ scopes: ["vectors","symbols","memories"], projectId }`) while
+ * `meta` carries optional telemetry (deleted counts, durations, etc.).
+ * `error` is only meaningful when `result` !== "success".
+ */
+export interface RecordOperationInput {
+    actorType?: string;
+    actorId?: string;
+    projectId?: string | null;
+    op: string;
+    scope?: Record<string, unknown> | null;
+    result: OperationResult;
+    meta?: Record<string, unknown> | null;
+    error?: string | null;
+}
+/** Row returned by `OperationLogRepository.list` / future read paths. */
+export interface OperationLogRow {
+    id: string;
+    occurredAt: number;
+    actorType: string;
+    actorId: string;
+    projectId: string | null;
+    op: string;
+    scope: Record<string, unknown>;
+    result: OperationResult;
+    meta: Record<string, unknown>;
+    error: string | null;
+}
+/** Repository contract — the pg implementation is the only one today. */
+export interface OperationLogRepository {
+    recordOperation(input: RecordOperationInput): Promise<void>;
+    listByProject(projectId: string, limit?: number): Promise<OperationLogRow[]>;
+}
+//# sourceMappingURL=operation-log-contract.d.ts.map

package/dist/data/audit/operation-log-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-log-contract.d.ts","sourceRoot":"","sources":["../../../src/data/audit/operation-log-contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;GAUG;AACH,MAAM,WAAW,YAAY;IAC3B,kFAAkF;IAClF,SAAS,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,6EAA6E;AAC7E,eAAO,MAAM,aAAa,EAAE,YAG1B,CAAC;AAEH,0DAA0D;AAC1D,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;AAEhE;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACvC,MAAM,EAAE,eAAe,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACtC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,yEAAyE;AACzE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,EAAE,eAAe,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,yEAAyE;AACzE,MAAM,WAAW,sBAAsB;IACrC,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;CAC9E"}

package/dist/data/audit/operation-log-contract.js

@@ -0,0 +1,16 @@
+/**
+ * Operation Log — audit attribution for destructive operations.
+ *
+ * M8 introduced an `operation_log` table so every destructive entry point
+ * (project reset, memory purge, workspace delete, …) records who/when/what/
+ * scope/result for later attribution. Auth is API-key-only today, so the
+ * actor is whatever the API layer can derive from the request; richer
+ * identity (signed-in user, agent headers, etc.) plugs in via the same
+ * `ActorContext` seam without rewriting call sites.
+ */
+/** Canonical "no identity available" context used when none was provided. */
+export const UNKNOWN_ACTOR = Object.freeze({
+    actorType: "api_key",
+    actorId: "unknown",
+});
+//# sourceMappingURL=operation-log-contract.js.map

package/dist/data/audit/operation-log-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-log-contract.js","sourceRoot":"","sources":["../../../src/data/audit/operation-log-contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAoBH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,aAAa,GAAiB,MAAM,CAAC,MAAM,CAAC;IACvD,SAAS,EAAE,SAAS;IACpB,OAAO,EAAE,SAAS;CACnB,CAAC,CAAC"}

package/dist/data/audit/operation-log-factory.d.ts

@@ -0,0 +1,4 @@
+import { OperationLogRepositoryPg } from "./operation-log-pg.js";
+/** Backend-neutral entry point. PostgreSQL is mandatory. */
+export declare function getOperationLogRepository(): OperationLogRepositoryPg;
+//# sourceMappingURL=operation-log-factory.d.ts.map

package/dist/data/audit/operation-log-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-log-factory.d.ts","sourceRoot":"","sources":["../../../src/data/audit/operation-log-factory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEjE,4DAA4D;AAC5D,wBAAgB,yBAAyB,IAAI,wBAAwB,CAGpE"}

package/dist/data/audit/operation-log-factory.js

@@ -0,0 +1,8 @@
+import { requirePostgresDatabaseUrl } from "@massa-ai/shared/config";
+import { OperationLogRepositoryPg } from "./operation-log-pg.js";
+/** Backend-neutral entry point. PostgreSQL is mandatory. */
+export function getOperationLogRepository() {
+    requirePostgresDatabaseUrl();
+    return OperationLogRepositoryPg.getInstance();
+}
+//# sourceMappingURL=operation-log-factory.js.map

package/dist/data/audit/operation-log-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-log-factory.js","sourceRoot":"","sources":["../../../src/data/audit/operation-log-factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEjE,4DAA4D;AAC5D,MAAM,UAAU,yBAAyB;IACvC,0BAA0B,EAAE,CAAC;IAC7B,OAAO,wBAAwB,CAAC,WAAW,EAAE,CAAC;AAChD,CAAC"}

package/dist/data/audit/operation-log-pg.d.ts

@@ -0,0 +1,34 @@
+/**
+ * OperationLogRepository — PostgreSQL implementation (raw SQL).
+ *
+ * Raw SQL mirrors the rest of the data layer (memory/keyword/symbol repos)
+ * to avoid the Prisma 7.7.0 + @prisma/adapter-pg + Bun isObjectEnumValue
+ * incompatibility documented in `memory-repository-pg.ts`.
+ *
+ * FAIL-SAFE CONTRACT: `recordOperation` MUST NEVER throw back at a
+ * destructive call site. An audit-log failure (DB down, malformed JSON,
+ * pool exhaustion, …) is logged and swallowed so the destructive op the
+ * row describes still completes. Without this guarantee, a broken audit
+ * table would block every reset/purge — which defeats the purpose of an
+ * audit trail that must always let the primary action run.
+ */
+import type { OperationLogRepository, OperationLogRow, RecordOperationInput } from "./operation-log-contract.js";
+export declare class OperationLogRepositoryPg implements OperationLogRepository {
+    private static instance;
+    private prisma;
+    private constructor();
+    static getInstance(): OperationLogRepositoryPg;
+    /** Test-only singleton reset. */
+    static resetInstance(): void;
+    private getClient;
+    /**
+     * Insert one audit row. Fail-safe: any error is logged and swallowed so
+     * the destructive caller always proceeds. The returned promise resolves
+     * (never rejects) — callers can `await` it for ordering without a
+     * try/catch, or fire-and-forget it.
+     */
+    recordOperation(input: RecordOperationInput): Promise<void>;
+    /** Read path — most-recent-first. Throws on DB error (read-only callers). */
+    listByProject(projectId: string, limit?: number): Promise<OperationLogRow[]>;
+}
+//# sourceMappingURL=operation-log-pg.d.ts.map

package/dist/data/audit/operation-log-pg.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-log-pg.d.ts","sourceRoot":"","sources":["../../../src/data/audit/operation-log-pg.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,OAAO,KAAK,EACV,sBAAsB,EACtB,eAAe,EACf,oBAAoB,EACrB,MAAM,6BAA6B,CAAC;AA0DrC,qBAAa,wBAAyB,YAAW,sBAAsB;IACrE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAyC;IAChE,OAAO,CAAC,MAAM,CAAgB;IAE9B,OAAO;IAIP,MAAM,CAAC,WAAW,IAAI,wBAAwB;IAO9C,iCAAiC;IACjC,MAAM,CAAC,aAAa,IAAI,IAAI;IAI5B,OAAO,CAAC,SAAS;IAKjB;;;;;OAKG;IACG,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IA6BjE,6EAA6E;IACvE,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;CAWhF"}

package/dist/data/audit/operation-log-pg.js

@@ -0,0 +1,125 @@
+/**
+ * OperationLogRepository — PostgreSQL implementation (raw SQL).
+ *
+ * Raw SQL mirrors the rest of the data layer (memory/keyword/symbol repos)
+ * to avoid the Prisma 7.7.0 + @prisma/adapter-pg + Bun isObjectEnumValue
+ * incompatibility documented in `memory-repository-pg.ts`.
+ *
+ * FAIL-SAFE CONTRACT: `recordOperation` MUST NEVER throw back at a
+ * destructive call site. An audit-log failure (DB down, malformed JSON,
+ * pool exhaustion, …) is logged and swallowed so the destructive op the
+ * row describes still completes. Without this guarantee, a broken audit
+ * table would block every reset/purge — which defeats the purpose of an
+ * audit trail that must always let the primary action run.
+ */
+import { logger } from "@massa-ai/shared";
+import { getPrismaClient } from "../../services/query/prisma-client.js";
+import { UNKNOWN_ACTOR } from "./operation-log-contract.js";
+function toRow(row) {
+    const scope = row.scope && typeof row.scope === "object"
+        ? row.scope
+        : {};
+    const meta = row.meta && typeof row.meta === "object"
+        ? row.meta
+        : {};
+    const occurredAt = row.occurred_at instanceof Date
+        ? row.occurred_at.getTime()
+        : Number(row.occurred_at);
+    return {
+        id: String(row.id),
+        occurredAt,
+        actorType: row.actor_type,
+        actorId: row.actor_id,
+        projectId: row.project_id,
+        op: row.op,
+        scope,
+        result: row.result,
+        meta,
+        error: row.error,
+    };
+}
+function scopeJson(scope) {
+    try {
+        return JSON.stringify(scope ?? {});
+    }
+    catch {
+        return "{}";
+    }
+}
+function metaJson(meta) {
+    try {
+        return JSON.stringify(meta ?? {});
+    }
+    catch {
+        return "{}";
+    }
+}
+export class OperationLogRepositoryPg {
+    static instance = null;
+    prisma;
+    constructor() {
+        logger.info("OperationLogRepositoryPg initialized (PostgreSQL, raw SQL)");
+    }
+    static getInstance() {
+        if (!OperationLogRepositoryPg.instance) {
+            OperationLogRepositoryPg.instance = new OperationLogRepositoryPg();
+        }
+        return OperationLogRepositoryPg.instance;
+    }
+    /** Test-only singleton reset. */
+    static resetInstance() {
+        OperationLogRepositoryPg.instance = null;
+    }
+    getClient() {
+        if (!this.prisma)
+            this.prisma = getPrismaClient();
+        return this.prisma;
+    }
+    /**
+     * Insert one audit row. Fail-safe: any error is logged and swallowed so
+     * the destructive caller always proceeds. The returned promise resolves
+     * (never rejects) — callers can `await` it for ordering without a
+     * try/catch, or fire-and-forget it.
+     */
+    async recordOperation(input) {
+        const actorType = input.actorType ?? UNKNOWN_ACTOR.actorType;
+        const actorId = input.actorId ?? UNKNOWN_ACTOR.actorId;
+        const projectId = input.projectId ?? null;
+        const scope = scopeJson(input.scope);
+        const meta = metaJson(input.meta);
+        const error = input.error ?? null;
+        try {
+            await this.getClient().$executeRaw `
+        INSERT INTO operation_log (
+          actor_type, actor_id, project_id, op, scope, result, meta, error
+        ) VALUES (
+          ${actorType}, ${actorId}, ${projectId}, ${input.op},
+          ${scope}::jsonb, ${input.result}, ${meta}::jsonb, ${error}
+        )
+      `;
+        }
+        catch (err) {
+            // FAIL-SAFE: never propagate. The destructive op that triggered this
+            // audit row MUST complete regardless of audit-table health.
+            logger.warn("OperationLog: recordOperation failed (best-effort, swallowed)", {
+                op: input.op,
+                projectId,
+                result: input.result,
+                error: err.message,
+            });
+        }
+    }
+    /** Read path — most-recent-first. Throws on DB error (read-only callers). */
+    async listByProject(projectId, limit = 100) {
+        const rows = await this.getClient().$queryRaw `
+      SELECT id, occurred_at, actor_type, actor_id, project_id,
+             op, scope, result, meta, error
+      FROM operation_log
+      WHERE project_id = ${projectId}
+      ORDER BY occurred_at DESC
+      LIMIT ${limit}
+    `;
+        return rows.map(toRow);
+    }
+}
+//# sourceMappingURL=operation-log-pg.js.map

package/dist/data/audit/operation-log-pg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-log-pg.js","sourceRoot":"","sources":["../../../src/data/audit/operation-log-pg.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAoB5D,SAAS,KAAK,CAAC,GAAuB;IACpC,MAAM,KAAK,GACT,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;QACxC,CAAC,CAAE,GAAG,CAAC,KAAiC;QACxC,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,IAAI,GACR,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QACtC,CAAC,CAAE,GAAG,CAAC,IAAgC;QACvC,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,UAAU,GACd,GAAG,CAAC,WAAW,YAAY,IAAI;QAC7B,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE;QAC3B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC9B,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,UAAU;QACV,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK;QACL,MAAM,EAAE,GAAG,CAAC,MAAmC;QAC/C,IAAI;QACJ,KAAK,EAAE,GAAG,CAAC,KAAK;KACjB,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAoC;IACrD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAkC;IAClD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,OAAO,wBAAwB;IAC3B,MAAM,CAAC,QAAQ,GAAoC,IAAI,CAAC;IACxD,MAAM,CAAgB;IAE9B;QACE,MAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,wBAAwB,CAAC,QAAQ,EAAE,CAAC;YACvC,wBAAwB,CAAC,QAAQ,GAAG,IAAI,wBAAwB,EAAE,CAAC;QACrE,CAAC;QACD,OAAO,wBAAwB,CAAC,QAAQ,CAAC;IAC3C,CAAC;IAED,iCAAiC;IACjC,MAAM,CAAC,aAAa;QAClB,wBAAwB,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC3C,CAAC;IAEO,SAAS;QACf,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,eAAe,CAAC,KAA2B;QAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,aAAa,CAAC,SAAS,CAAC;QAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC;QACvD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC;QAC1C,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC;QAElC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,WAAW,CAAA;;;;YAI5B,SAAS,KAAK,OAAO,KAAK,SAAS,KAAK,KAAK,CAAC,EAAE;YAChD,KAAK,YAAY,KAAK,CAAC,MAAM,KAAK,IAAI,YAAY,KAAK;;OAE5D,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,qEAAqE;YACrE,4DAA4D;YAC5D,MAAM,CAAC,IAAI,CAAC,+DAA+D,EAAE;gBAC3E,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,SAAS;gBACT,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAG,GAAa,CAAC,OAAO;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,KAAK,GAAG,GAAG;QAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,SAAS,CAAsB;;;;2BAI5C,SAAS;;cAEtB,KAAK;KACd,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC"}

package/dist/data/db-connection.d.ts

@@ -0,0 +1,10 @@
+/** PostgreSQL connection pool shared by persistence services. */
+import { Pool } from "pg";
+export interface DbConfig {
+    connectionString: string;
+    poolSize: number;
+}
+export declare function getDbConfig(): DbConfig;
+export declare function getPgPool(): Promise<Pool>;
+export declare function closeConnections(): Promise<void>;
+//# sourceMappingURL=db-connection.d.ts.map

package/dist/data/db-connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-connection.d.ts","sourceRoot":"","sources":["../../src/data/db-connection.ts"],"names":[],"mappings":"AAAA,iEAAiE;AAEjE,OAAO,EAAE,IAAI,EAAmB,MAAM,IAAI,CAAC;AAI3C,MAAM,WAAW,QAAQ;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAID,wBAAgB,WAAW,IAAI,QAAQ,CAKtC;AAED,wBAAsB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAY/C;AAED,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAKtD"}