@memtensor/memos-local-openclaw-plugin 1.0.4-beta.4 → 1.0.4-beta.6

package/dist/hub/server.js

@@ -1,747 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.HubServer = void 0;
-const fs = __importStar(require("fs"));
-const http = __importStar(require("http"));
-const path = __importStar(require("path"));
-const crypto_1 = require("crypto");
-const auth_1 = require("./auth");
-const user_manager_1 = require("./user-manager");
-class HubServer {
-    opts;
-    server;
-    remoteHitMap = new Map();
-    userManager;
-    authStatePath;
-    authState;
-    static RATE_WINDOW_MS = 60_000;
-    static RATE_LIMIT_DEFAULT = 60;
-    static RATE_LIMIT_SEARCH = 30;
-    rateBuckets = new Map();
-    constructor(opts) {
-        this.opts = opts;
-        this.userManager = new user_manager_1.HubUserManager(opts.store, opts.log);
-        this.authStatePath = path.join(opts.dataDir, "hub-auth.json");
-        this.authState = this.loadAuthState();
-    }
-    checkRateLimit(userId, endpoint) {
-        const key = `${userId}:${endpoint}`;
-        const now = Date.now();
-        const limit = endpoint === "search" ? HubServer.RATE_LIMIT_SEARCH : HubServer.RATE_LIMIT_DEFAULT;
-        const bucket = this.rateBuckets.get(key);
-        if (!bucket || now - bucket.windowStart > HubServer.RATE_WINDOW_MS) {
-            this.rateBuckets.set(key, { count: 1, windowStart: now });
-            return true;
-        }
-        bucket.count++;
-        return bucket.count <= limit;
-    }
-    async start() {
-        if (!this.teamToken) {
-            throw new Error("team token is required to start hub mode");
-        }
-        if (this.server?.listening) {
-            return `http://127.0.0.1:${this.port}`;
-        }
-        this.server = http.createServer(async (req, res) => {
-            try {
-                await this.handle(req, res);
-            }
-            catch (err) {
-                const code = err?.statusCode ?? 500;
-                const message = code === 413 ? "request_body_too_large" : "internal_error";
-                this.opts.log.warn(`hub server error: ${String(err)}`);
-                res.statusCode = code;
-                res.setHeader("content-type", "application/json");
-                res.end(JSON.stringify({ error: message }));
-            }
-        });
-        await new Promise((resolve, reject) => {
-            const onError = (err) => {
-                this.server?.off("listening", onListening);
-                reject(err);
-            };
-            const onListening = () => {
-                this.server?.off("error", onError);
-                resolve();
-            };
-            this.server.once("error", onError);
-            this.server.once("listening", onListening);
-            this.server.listen(this.port, "0.0.0.0");
-        });
-        const bootstrap = this.userManager.ensureBootstrapAdmin(this.authSecret, "admin", this.authState.bootstrapAdminUserId, this.authState.bootstrapAdminToken);
-        if (bootstrap.token) {
-            this.authState.bootstrapAdminUserId = bootstrap.user.id;
-            this.authState.bootstrapAdminToken = bootstrap.token;
-            this.saveAuthState();
-            this.opts.log.info(`memos-local: bootstrap admin token persisted to ${this.authStatePath}`);
-        }
-        return `http://127.0.0.1:${this.port}`;
-    }
-    async stop() {
-        if (!this.server)
-            return;
-        const server = this.server;
-        this.server = undefined;
-        await new Promise((resolve) => server.close(() => resolve()));
-    }
-    get port() {
-        return this.opts.config.sharing?.hub?.port ?? 18800;
-    }
-    get teamName() {
-        return this.opts.config.sharing?.hub?.teamName ?? "";
-    }
-    get teamToken() {
-        return this.opts.config.sharing?.hub?.teamToken ?? "";
-    }
-    get authSecret() {
-        return this.authState.authSecret;
-    }
-    loadAuthState() {
-        try {
-            const raw = fs.readFileSync(this.authStatePath, "utf8");
-            const parsed = JSON.parse(raw);
-            if (parsed.authSecret)
-                return parsed;
-        }
-        catch { }
-        const initial = { authSecret: (0, crypto_1.randomBytes)(32).toString("hex") };
-        fs.mkdirSync(path.dirname(this.authStatePath), { recursive: true });
-        fs.writeFileSync(this.authStatePath, JSON.stringify(initial, null, 2), "utf8");
-        return initial;
-    }
-    saveAuthState() {
-        fs.mkdirSync(path.dirname(this.authStatePath), { recursive: true });
-        fs.writeFileSync(this.authStatePath, JSON.stringify(this.authState, null, 2), "utf8");
-    }
-    embedChunksAsync(chunkIds, chunks) {
-        const embedder = this.opts.embedder;
-        if (!embedder)
-            return;
-        const texts = chunks.map(c => c.summary || (c.content ? c.content.slice(0, 500) : ""));
-        embedder.embed(texts).then((vectors) => {
-            for (let i = 0; i < vectors.length; i++) {
-                if (vectors[i]) {
-                    this.opts.store.upsertHubEmbedding(chunkIds[i], new Float32Array(vectors[i]));
-                }
-            }
-            this.opts.log.info(`hub: embedded ${vectors.filter(Boolean).length}/${chunkIds.length} shared chunks`);
-        }).catch((err) => {
-            this.opts.log.warn(`hub: embedding shared chunks failed: ${err}`);
-        });
-    }
-    embedMemoryAsync(memoryId, summary, content) {
-        const embedder = this.opts.embedder;
-        if (!embedder)
-            return;
-        const text = summary || content.slice(0, 500);
-        embedder.embed([text]).then((vectors) => {
-            if (vectors[0]) {
-                this.opts.store.upsertHubMemoryEmbedding(memoryId, new Float32Array(vectors[0]));
-                this.opts.log.info(`hub: embedded shared memory ${memoryId}`);
-            }
-        }).catch((err) => {
-            this.opts.log.warn(`hub: embedding shared memory failed: ${err}`);
-        });
-    }
-    async handle(req, res) {
-        const url = new URL(req.url || "/", `http://127.0.0.1:${this.port}`);
-        const routePath = url.pathname;
-        if (req.method === "GET" && routePath === "/api/v1/hub/info") {
-            return this.json(res, 200, {
-                teamName: this.teamName,
-                version: "0.0.0",
-                apiVersion: "v1",
-            });
-        }
-        if (req.method === "POST" && routePath === "/api/v1/hub/join") {
-            const body = await this.readJson(req);
-            if (!body || body.teamToken !== this.teamToken) {
-                return this.json(res, 403, { error: "invalid_team_token" });
-            }
-            const username = String(body.username || `user-${(0, crypto_1.randomUUID)().slice(0, 8)}`);
-            const existingUsers = this.opts.store.listHubUsers();
-            const existingUser = existingUsers.find(u => u.username === username);
-            if (existingUser) {
-                if (existingUser.status === "active") {
-                    const token = (0, auth_1.issueUserToken)({ userId: existingUser.id, username: existingUser.username, role: existingUser.role, status: "active" }, this.authSecret);
-                    this.userManager.approveUser(existingUser.id, token);
-                    return this.json(res, 200, { status: "active", userId: existingUser.id, userToken: token });
-                }
-                if (existingUser.status === "pending") {
-                    return this.json(res, 200, { status: "pending", userId: existingUser.id });
-                }
-                if (existingUser.status === "rejected") {
-                    this.userManager.resetToPending(existingUser.id);
-                    this.opts.log.info(`Hub: rejected user "${username}" (${existingUser.id}) re-applied, reset to pending`);
-                    return this.json(res, 200, { status: "pending", userId: existingUser.id });
-                }
-            }
-            const user = this.userManager.createPendingUser({
-                username,
-                deviceName: typeof body.deviceName === "string" ? body.deviceName : undefined,
-            });
-            this.opts.log.info(`Hub: user "${username}" (${user.id}) registered as pending, awaiting admin approval`);
-            return this.json(res, 200, { status: "pending", userId: user.id });
-        }
-        if (req.method === "POST" && routePath === "/api/v1/hub/registration-status") {
-            const body = await this.readJson(req);
-            if (!body || body.teamToken !== this.teamToken) {
-                return this.json(res, 403, { error: "invalid_team_token" });
-            }
-            const userId = String(body.userId || "");
-            if (!userId)
-                return this.json(res, 400, { error: "missing_user_id" });
-            const user = this.opts.store.getHubUser(userId);
-            if (!user)
-                return this.json(res, 404, { error: "not_found" });
-            if (user.status === "pending") {
-                return this.json(res, 200, { status: "pending" });
-            }
-            if (user.status === "rejected") {
-                return this.json(res, 200, { status: "rejected" });
-            }
-            if (user.status === "active") {
-                const token = (0, auth_1.issueUserToken)({ userId: user.id, username: user.username, role: user.role, status: user.status }, this.authSecret);
-                return this.json(res, 200, { status: "active", userToken: token });
-            }
-            return this.json(res, 200, { status: user.status });
-        }
-        // All endpoints below require authentication + rate limiting
-        const auth = this.authenticate(req);
-        if (!auth)
-            return this.json(res, 401, { error: "unauthorized" });
-        const endpointKey = routePath.replace(/^\/api\/v1\/hub\//, "").replace(/\/[^/]+\/bundle$/, "/bundle");
-        if (!this.checkRateLimit(auth.userId, endpointKey)) {
-            return this.json(res, 429, { error: "rate_limit_exceeded", retryAfterMs: HubServer.RATE_WINDOW_MS });
-        }
-        if (req.method === "GET" && routePath === "/api/v1/hub/me") {
-            const user = this.opts.store.getHubUser(auth.userId);
-            if (!user)
-                return this.json(res, 401, { error: "unauthorized" });
-            return this.json(res, 200, user);
-        }
-        if (req.method === "POST" && routePath === "/api/v1/hub/me/update-profile") {
-            const body = await this.readJson(req);
-            if (!body)
-                return this.json(res, 400, { error: "invalid_body" });
-            const newUsername = String(body.username || "").trim();
-            if (!newUsername || newUsername.length < 2 || newUsername.length > 32) {
-                return this.json(res, 400, { error: "invalid_username", message: "Username must be 2-32 characters" });
-            }
-            if (this.userManager.isUsernameTaken(newUsername, auth.userId)) {
-                return this.json(res, 409, { error: "username_taken", message: "Username already in use" });
-            }
-            const updated = this.userManager.updateUsername(auth.userId, newUsername);
-            if (!updated)
-                return this.json(res, 404, { error: "not_found" });
-            const newToken = (0, auth_1.issueUserToken)({ userId: updated.id, username: newUsername, role: updated.role, status: updated.status }, this.authSecret);
-            this.userManager.approveUser(updated.id, newToken);
-            this.opts.log.info(`Hub: user "${auth.userId}" renamed to "${newUsername}"`);
-            return this.json(res, 200, { ok: true, username: newUsername, userToken: newToken });
-        }
-        if (req.method === "GET" && routePath === "/api/v1/hub/admin/pending-users") {
-            if (auth.role !== "admin")
-                return this.json(res, 403, { error: "forbidden" });
-            return this.json(res, 200, { users: this.userManager.listPendingUsers() });
-        }
-        if (req.method === "POST" && routePath === "/api/v1/hub/admin/approve-user") {
-            if (auth.role !== "admin")
-                return this.json(res, 403, { error: "forbidden" });
-            const body = await this.readJson(req);
-            const token = (0, auth_1.issueUserToken)({ userId: String(body.userId), username: String(body.username || ""), role: "member", status: "active" }, this.authSecret);
-            const approved = this.userManager.approveUser(String(body.userId), token);
-            if (!approved)
-                return this.json(res, 404, { error: "not_found" });
-            return this.json(res, 200, { status: "active", token });
-        }
-        if (req.method === "POST" && routePath === "/api/v1/hub/admin/reject-user") {
-            if (auth.role !== "admin")
-                return this.json(res, 403, { error: "forbidden" });
-            const body = await this.readJson(req);
-            const rejected = this.userManager.rejectUser(String(body.userId));
-            if (!rejected)
-                return this.json(res, 404, { error: "not_found" });
-            return this.json(res, 200, { status: "rejected" });
-        }
-        if (req.method === "GET" && routePath === "/api/v1/hub/admin/users") {
-            if (auth.role !== "admin")
-                return this.json(res, 403, { error: "forbidden" });
-            const users = this.opts.store.listHubUsers().filter(u => u.status === "active");
-            return this.json(res, 200, { users: users.map(u => ({ id: u.id, username: u.username, role: u.role, status: u.status })) });
-        }
-        // ── Group management ──
-        if (req.method === "GET" && routePath === "/api/v1/hub/groups") {
-            if (auth.role !== "admin")
-                return this.json(res, 403, { error: "forbidden" });
-            const groups = this.opts.store.listHubGroups();
-            return this.json(res, 200, { groups });
-        }
-        if (req.method === "POST" && routePath === "/api/v1/hub/groups") {
-            if (auth.role !== "admin")
-                return this.json(res, 403, { error: "forbidden" });
-            const body = await this.readJson(req);
-            const name = String(body.name || "").trim();
-            if (!name)
-                return this.json(res, 400, { error: "name_required" });
-            const groupId = (0, crypto_1.randomUUID)();
-            this.opts.store.upsertHubGroup({
-                id: groupId,
-                name,
-                description: String(body.description || ""),
-                createdAt: Date.now(),
-            });
-            return this.json(res, 201, { id: groupId, name });
-        }
-        const groupDetailMatch = routePath.match(/^\/api\/v1\/hub\/groups\/([^/]+)$/);
-        if (groupDetailMatch) {
-            const groupId = decodeURIComponent(groupDetailMatch[1]);
-            if (req.method === "GET") {
-                if (auth.role !== "admin")
-                    return this.json(res, 403, { error: "forbidden" });
-                const group = this.opts.store.getHubGroupById(groupId);
-                if (!group)
-                    return this.json(res, 404, { error: "not_found" });
-                const members = this.opts.store.listHubGroupMembers(groupId);
-                return this.json(res, 200, { ...group, members });
-            }
-            if (req.method === "PUT") {
-                if (auth.role !== "admin")
-                    return this.json(res, 403, { error: "forbidden" });
-                const existing = this.opts.store.getHubGroupById(groupId);
-                if (!existing)
-                    return this.json(res, 404, { error: "not_found" });
-                const body = await this.readJson(req);
-                this.opts.store.upsertHubGroup({
-                    id: groupId,
-                    name: String(body.name || existing.name).trim(),
-                    description: String(body.description ?? existing.description),
-                    createdAt: existing.createdAt,
-                });
-                return this.json(res, 200, { ok: true });
-            }
-            if (req.method === "DELETE") {
-                if (auth.role !== "admin")
-                    return this.json(res, 403, { error: "forbidden" });
-                const deleted = this.opts.store.deleteHubGroup(groupId);
-                if (!deleted)
-                    return this.json(res, 404, { error: "not_found" });
-                return this.json(res, 200, { ok: true });
-            }
-        }
-        const groupMembersMatch = routePath.match(/^\/api\/v1\/hub\/groups\/([^/]+)\/members$/);
-        if (groupMembersMatch) {
-            const groupId = decodeURIComponent(groupMembersMatch[1]);
-            if (req.method === "POST") {
-                if (auth.role !== "admin")
-                    return this.json(res, 403, { error: "forbidden" });
-                const group = this.opts.store.getHubGroupById(groupId);
-                if (!group)
-                    return this.json(res, 404, { error: "group_not_found" });
-                const body = await this.readJson(req);
-                const userId = String(body.userId || "");
-                if (!userId)
-                    return this.json(res, 400, { error: "userId_required" });
-                const user = this.opts.store.getHubUser(userId);
-                if (!user)
-                    return this.json(res, 404, { error: "user_not_found" });
-                this.opts.store.addHubGroupMember(groupId, userId);
-                return this.json(res, 200, { ok: true });
-            }
-            if (req.method === "DELETE") {
-                if (auth.role !== "admin")
-                    return this.json(res, 403, { error: "forbidden" });
-                const body = await this.readJson(req);
-                const userId = String(body.userId || "");
-                if (!userId)
-                    return this.json(res, 400, { error: "userId_required" });
-                this.opts.store.removeHubGroupMember(groupId, userId);
-                return this.json(res, 200, { ok: true });
-            }
-        }
-        if (req.method === "POST" && routePath === "/api/v1/hub/tasks/share") {
-            const body = await this.readJson(req);
-            if (!body?.task)
-                return this.json(res, 400, { error: "invalid_payload" });
-            const task = { ...body.task, sourceUserId: auth.userId };
-            this.opts.store.upsertHubTask(task);
-            const chunks = Array.isArray(body.chunks) ? body.chunks : [];
-            const chunkIds = [];
-            for (const chunk of chunks) {
-                this.opts.store.upsertHubChunk({ ...chunk, sourceUserId: auth.userId });
-                chunkIds.push(chunk.id);
-            }
-            // Async embedding: don't block the response
-            if (this.opts.embedder && chunkIds.length > 0) {
-                this.embedChunksAsync(chunkIds, chunks);
-            }
-            return this.json(res, 200, { ok: true, chunks: chunkIds.length });
-        }
-        if (req.method === "POST" && routePath === "/api/v1/hub/tasks/unshare") {
-            const body = await this.readJson(req);
-            this.opts.store.deleteHubTaskBySource(auth.userId, String(body.sourceTaskId));
-            return this.json(res, 200, { ok: true });
-        }
-        if (req.method === "POST" && routePath === "/api/v1/hub/memories/share") {
-            const body = await this.readJson(req);
-            if (!body?.memory)
-                return this.json(res, 400, { error: "invalid_payload" });
-            const m = body.memory;
-            const sourceChunkId = String(m.sourceChunkId || "");
-            if (!sourceChunkId)
-                return this.json(res, 400, { error: "missing_source_chunk_id" });
-            const existing = this.opts.store.getHubMemoryBySource(auth.userId, sourceChunkId);
-            const memoryId = existing?.id ?? (0, crypto_1.randomUUID)();
-            const visibility = "public";
-            const resolvedGroupId = null;
-            const now = Date.now();
-            this.opts.store.upsertHubMemory({
-                id: memoryId,
-                sourceChunkId,
-                sourceUserId: auth.userId,
-                role: String(m.role || "assistant"),
-                content: String(m.content || ""),
-                summary: String(m.summary || ""),
-                kind: String(m.kind || "paragraph"),
-                groupId: resolvedGroupId,
-                visibility,
-                createdAt: existing?.createdAt ?? now,
-                updatedAt: now,
-            });
-            if (this.opts.embedder) {
-                this.embedMemoryAsync(memoryId, String(m.summary || ""), String(m.content || ""));
-            }
-            return this.json(res, 200, { ok: true, memoryId, visibility });
-        }
-        if (req.method === "POST" && routePath === "/api/v1/hub/memories/unshare") {
-            const body = await this.readJson(req);
-            const sourceChunkId = String(body?.sourceChunkId || "");
-            if (!sourceChunkId)
-                return this.json(res, 400, { error: "missing_source_chunk_id" });
-            this.opts.store.deleteHubMemoryBySource(auth.userId, sourceChunkId);
-            return this.json(res, 200, { ok: true });
-        }
-        if (req.method === "GET" && routePath === "/api/v1/hub/memories") {
-            const limit = Number(url.searchParams.get("limit") || 40);
-            const memories = this.opts.store.listVisibleHubMemories(auth.userId, limit);
-            return this.json(res, 200, { memories });
-        }
-        if (req.method === "GET" && routePath === "/api/v1/hub/tasks") {
-            const limit = Number(url.searchParams.get("limit") || 40);
-            const tasks = this.opts.store.listVisibleHubTasks(auth.userId, limit);
-            return this.json(res, 200, { tasks });
-        }
-        if (req.method === "GET" && routePath === "/api/v1/hub/skills/list") {
-            const limit = Number(url.searchParams.get("limit") || 40);
-            const skills = this.opts.store.listVisibleHubSkills(auth.userId, limit);
-            return this.json(res, 200, { skills });
-        }
-        if (req.method === "POST" && routePath === "/api/v1/hub/search") {
-            const body = await this.readJson(req);
-            const query = String(body.query || "");
-            const maxResults = Number(body.maxResults || 10);
-            const ftsHits = this.opts.store.searchHubChunks(query, { userId: auth.userId, maxResults: maxResults * 2 });
-            const memFtsHits = this.opts.store.searchHubMemories(query, { userId: auth.userId, maxResults: maxResults * 2 });
-            // Track which IDs are memories vs chunks
-            const memoryIdSet = new Set(memFtsHits.map(({ hit }) => hit.id));
-            // Attempt vector search and RRF merge if embedder is available
-            let mergedIds;
-            if (this.opts.embedder) {
-                try {
-                    const [queryVec] = await this.opts.embedder.embed([query]);
-                    if (queryVec) {
-                        const allEmb = this.opts.store.getVisibleHubEmbeddings(auth.userId);
-                        const memEmb = this.opts.store.getVisibleHubMemoryEmbeddings(auth.userId);
-                        const scored = [];
-                        const cosineSim = (vec) => {
-                            let dot = 0, nA = 0, nB = 0;
-                            for (let i = 0; i < queryVec.length && i < vec.length; i++) {
-                                dot += queryVec[i] * vec[i];
-                                nA += queryVec[i] * queryVec[i];
-                                nB += vec[i] * vec[i];
-                            }
-                            return nA > 0 && nB > 0 ? dot / (Math.sqrt(nA) * Math.sqrt(nB)) : 0;
-                        };
-                        for (const e of allEmb)
-                            scored.push({ id: e.chunkId, score: cosineSim(e.vector) });
-                        for (const e of memEmb) {
-                            scored.push({ id: e.memoryId, score: cosineSim(e.vector) });
-                            memoryIdSet.add(e.memoryId);
-                        }
-                        scored.sort((a, b) => b.score - a.score);
-                        const topScored = scored.slice(0, maxResults * 2);
-                        const K = 60;
-                        const rrfScores = new Map();
-                        ftsHits.forEach(({ hit }, idx) => {
-                            rrfScores.set(hit.id, (rrfScores.get(hit.id) ?? 0) + 1 / (K + idx + 1));
-                        });
-                        memFtsHits.forEach(({ hit }, idx) => {
-                            rrfScores.set(hit.id, (rrfScores.get(hit.id) ?? 0) + 1 / (K + idx + 1));
-                        });
-                        topScored.forEach(({ id }, idx) => {
-                            rrfScores.set(id, (rrfScores.get(id) ?? 0) + 1 / (K + idx + 1));
-                        });
-                        mergedIds = [...rrfScores.entries()].sort((a, b) => b[1] - a[1]).slice(0, maxResults).map(([id]) => id);
-                    }
-                    else {
-                        mergedIds = [...ftsHits.map(({ hit }) => hit.id), ...memFtsHits.map(({ hit }) => hit.id)].slice(0, maxResults);
-                    }
-                }
-                catch {
-                    mergedIds = [...ftsHits.map(({ hit }) => hit.id), ...memFtsHits.map(({ hit }) => hit.id)].slice(0, maxResults);
-                }
-            }
-            else {
-                mergedIds = [...ftsHits.map(({ hit }) => hit.id), ...memFtsHits.map(({ hit }) => hit.id)].slice(0, maxResults);
-            }
-            const ftsMap = new Map(ftsHits.map(({ hit }) => [hit.id, hit]));
-            const memFtsMap = new Map(memFtsHits.map(({ hit }) => [hit.id, hit]));
-            const hits = mergedIds.map((id, rank) => {
-                const isMemory = memoryIdSet.has(id);
-                if (isMemory) {
-                    let mhit = memFtsMap.get(id);
-                    if (!mhit) {
-                        const visibleHit = this.opts.store.getVisibleHubSearchHitByMemoryId(id, auth.userId);
-                        if (!visibleHit)
-                            return null;
-                        mhit = visibleHit;
-                    }
-                    const remoteHitId = (0, crypto_1.randomUUID)();
-                    this.remoteHitMap.set(remoteHitId, { chunkId: id, type: "memory", expiresAt: Date.now() + 10 * 60 * 1000, requesterUserId: auth.userId });
-                    return {
-                        remoteHitId, summary: mhit.summary, excerpt: mhit.content.slice(0, 240), hubRank: rank + 1,
-                        taskTitle: null, ownerName: mhit.owner_name || "unknown", groupName: mhit.group_name,
-                        visibility: mhit.visibility, source: { ts: mhit.created_at, role: mhit.role },
-                    };
-                }
-                let hit = ftsMap.get(id);
-                if (!hit) {
-                    const visibleHit = this.opts.store.getVisibleHubSearchHitByChunkId(id, auth.userId);
-                    if (!visibleHit)
-                        return null;
-                    hit = visibleHit;
-                }
-                const remoteHitId = (0, crypto_1.randomUUID)();
-                this.remoteHitMap.set(remoteHitId, { chunkId: id, type: "chunk", expiresAt: Date.now() + 10 * 60 * 1000, requesterUserId: auth.userId });
-                return {
-                    remoteHitId, summary: hit.summary, excerpt: hit.content.slice(0, 240), hubRank: rank + 1,
-                    taskTitle: hit.task_title, ownerName: hit.owner_name || "unknown", groupName: hit.group_name,
-                    visibility: hit.visibility, source: { ts: hit.created_at, role: hit.role },
-                };
-            }).filter(Boolean);
-            return this.json(res, 200, { hits, meta: { totalCandidates: hits.length, searchedGroups: [], includedPublic: true } });
-        }
-        if (req.method === "GET" && routePath === "/api/v1/hub/skills") {
-            const hits = this.opts.store.searchHubSkills(String(url.searchParams.get("query") || ""), {
-                userId: auth.userId,
-                maxResults: Number(url.searchParams.get("maxResults") || 10),
-            }).map(({ hit }) => ({
-                skillId: hit.id,
-                name: hit.name,
-                description: hit.description,
-                version: hit.version,
-                visibility: hit.visibility,
-                groupName: hit.group_name,
-                ownerName: hit.owner_name || "unknown",
-                qualityScore: hit.quality_score,
-            }));
-            return this.json(res, 200, { hits });
-        }
-        if (req.method === "POST" && routePath === "/api/v1/hub/skills/publish") {
-            const body = await this.readJson(req);
-            const metadata = body?.metadata ?? {};
-            const sourceSkillId = String(metadata.id || "");
-            if (!sourceSkillId)
-                return this.json(res, 400, { error: "missing_skill_id" });
-            const existing = this.opts.store.getHubSkillBySource(auth.userId, sourceSkillId);
-            const skillId = existing?.id ?? (0, crypto_1.randomUUID)();
-            const visibility = "public";
-            this.opts.store.upsertHubSkill({
-                id: skillId,
-                sourceSkillId,
-                sourceUserId: auth.userId,
-                name: String(metadata.name || sourceSkillId),
-                description: String(metadata.description || ""),
-                version: Number(metadata.version || 1),
-                groupId: null,
-                visibility,
-                bundle: JSON.stringify(body?.bundle ?? {}),
-                qualityScore: metadata.qualityScore == null ? null : Number(metadata.qualityScore),
-                createdAt: existing?.createdAt ?? Date.now(),
-                updatedAt: Date.now(),
-            });
-            return this.json(res, 200, { ok: true, skillId, visibility });
-        }
-        const skillBundleMatch = req.method === "GET" ? routePath.match(/^\/api\/v1\/hub\/skills\/([^/]+)\/bundle$/) : null;
-        if (skillBundleMatch) {
-            const skill = this.opts.store.getHubSkillById(decodeURIComponent(skillBundleMatch[1]));
-            if (!skill)
-                return this.json(res, 404, { error: "not_found" });
-            return this.json(res, 200, {
-                skillId: skill.id,
-                metadata: {
-                    id: skill.sourceSkillId,
-                    name: skill.name,
-                    description: skill.description,
-                    version: skill.version,
-                    qualityScore: skill.qualityScore,
-                },
-                bundle: JSON.parse(skill.bundle),
-            });
-        }
-        if (req.method === "POST" && routePath === "/api/v1/hub/skills/unpublish") {
-            const body = await this.readJson(req);
-            this.opts.store.deleteHubSkillBySource(auth.userId, String(body?.sourceSkillId || ""));
-            return this.json(res, 200, { ok: true });
-        }
-        // ── Admin: shared tasks & skills management ──
-        if (req.method === "GET" && routePath === "/api/v1/hub/admin/shared-tasks") {
-            if (auth.role !== "admin")
-                return this.json(res, 403, { error: "forbidden" });
-            const tasks = this.opts.store.listAllHubTasks();
-            return this.json(res, 200, { tasks });
-        }
-        const adminTaskDeleteMatch = req.method === "DELETE" ? routePath.match(/^\/api\/v1\/hub\/admin\/shared-tasks\/([^/]+)$/) : null;
-        if (adminTaskDeleteMatch) {
-            if (auth.role !== "admin")
-                return this.json(res, 403, { error: "forbidden" });
-            const taskId = decodeURIComponent(adminTaskDeleteMatch[1]);
-            const deleted = this.opts.store.deleteHubTaskById(taskId);
-            if (!deleted)
-                return this.json(res, 404, { error: "not_found" });
-            return this.json(res, 200, { ok: true });
-        }
-        if (req.method === "GET" && routePath === "/api/v1/hub/admin/shared-skills") {
-            if (auth.role !== "admin")
-                return this.json(res, 403, { error: "forbidden" });
-            const skills = this.opts.store.listAllHubSkills();
-            return this.json(res, 200, { skills });
-        }
-        const adminSkillDeleteMatch = req.method === "DELETE" ? routePath.match(/^\/api\/v1\/hub\/admin\/shared-skills\/([^/]+)$/) : null;
-        if (adminSkillDeleteMatch) {
-            if (auth.role !== "admin")
-                return this.json(res, 403, { error: "forbidden" });
-            const skillId = decodeURIComponent(adminSkillDeleteMatch[1]);
-            const deleted = this.opts.store.deleteHubSkillById(skillId);
-            if (!deleted)
-                return this.json(res, 404, { error: "not_found" });
-            return this.json(res, 200, { ok: true });
-        }
-        if (req.method === "GET" && routePath === "/api/v1/hub/admin/shared-memories") {
-            if (auth.role !== "admin")
-                return this.json(res, 403, { error: "forbidden" });
-            const memories = this.opts.store.listAllHubMemories();
-            return this.json(res, 200, { memories });
-        }
-        const adminMemoryDeleteMatch = req.method === "DELETE" ? routePath.match(/^\/api\/v1\/hub\/admin\/shared-memories\/([^/]+)$/) : null;
-        if (adminMemoryDeleteMatch) {
-            if (auth.role !== "admin")
-                return this.json(res, 403, { error: "forbidden" });
-            const memoryId = decodeURIComponent(adminMemoryDeleteMatch[1]);
-            const deleted = this.opts.store.deleteHubMemoryById(memoryId);
-            if (!deleted)
-                return this.json(res, 404, { error: "not_found" });
-            return this.json(res, 200, { ok: true });
-        }
-        if (req.method === "POST" && routePath === "/api/v1/hub/memory-detail") {
-            const body = await this.readJson(req);
-            const hit = this.remoteHitMap.get(String(body.remoteHitId));
-            if (!hit || hit.expiresAt < Date.now())
-                return this.json(res, 404, { error: "not_found" });
-            if (hit.requesterUserId !== auth.userId)
-                return this.json(res, 403, { error: "forbidden" });
-            if (hit.type === "memory") {
-                const mem = this.opts.store.getHubMemoryById(hit.chunkId);
-                if (!mem)
-                    return this.json(res, 404, { error: "not_found" });
-                return this.json(res, 200, { content: mem.content, summary: mem.summary, source: { ts: mem.createdAt, role: mem.role } });
-            }
-            const chunk = this.opts.store.getHubChunkById(hit.chunkId);
-            if (!chunk)
-                return this.json(res, 404, { error: "not_found" });
-            return this.json(res, 200, {
-                content: chunk.content,
-                summary: chunk.summary,
-                source: { ts: chunk.createdAt, role: chunk.role },
-            });
-        }
-        return this.json(res, 404, { error: "not_found" });
-    }
-    authenticate(req) {
-        const header = req.headers.authorization;
-        if (!header || !header.startsWith("Bearer "))
-            return null;
-        const token = header.slice("Bearer ".length);
-        const payload = (0, auth_1.verifyUserToken)(token, this.authSecret);
-        if (!payload)
-            return null;
-        const user = this.opts.store.getHubUser(payload.userId);
-        if (!user || user.status !== "active")
-            return null;
-        const hash = (0, crypto_1.createHash)("sha256").update(token).digest("hex");
-        if (user.tokenHash !== hash)
-            return null;
-        return {
-            userId: user.id,
-            username: user.username,
-            role: user.role,
-            status: user.status,
-        };
-    }
-    static MAX_BODY_BYTES = 10 * 1024 * 1024; // 10 MB
-    async readJson(req) {
-        const chunks = [];
-        let totalBytes = 0;
-        for await (const chunk of req) {
-            const buf = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-            totalBytes += buf.length;
-            if (totalBytes > HubServer.MAX_BODY_BYTES) {
-                req.destroy();
-                throw Object.assign(new Error("request body too large"), { statusCode: 413 });
-            }
-            chunks.push(buf);
-        }
-        const raw = Buffer.concat(chunks).toString("utf8");
-        return raw ? JSON.parse(raw) : {};
-    }
-    json(res, statusCode, body) {
-        res.statusCode = statusCode;
-        res.setHeader("content-type", "application/json");
-        res.end(JSON.stringify(body));
-    }
-}
-exports.HubServer = HubServer;
-//# sourceMappingURL=server.js.map