@noodleseed/one 0.122.0 → 0.124.0

package/node_modules/@noodle-borg/knowledge-operations/dist/publication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publication.js","sourceRoot":"","sources":["../src/publication.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,kBAAkB,EAElB,oBAAoB,EACpB,yBAAyB,EACzB,cAAc,GAMf,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAA2B,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AASlG,oFAAoF;AACpF,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,MAAM,CAAoC;IAEnD,YAAY,MAAyC;QACnD,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,8BAA8B,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAqCD,6FAA6F;AAC7F,MAAM,sBAAsB,GAAG,KAAK,CAAC;AACrC,mEAAmE;AACnE,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEzC,MAAM,UAAU,0BAA0B,CACxC,MAA8B,EAC9B,OAKC;IAED,MAAM,KAAK,GAAG,IAAI,kBAAkB,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,yBAAyB,CAAC;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAiE,CAAC;IAC9F,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,oFAAoF;IACpF,KAAK,UAAU,gBAAgB,CAC7B,MAA0B,EAC1B,SAAqC,EACrC,kBAA2B;QAE3B,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,OAAO,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;YACzE,CAAC;YAAC,MAAM,CAAC;gBACP,oFAAoF;gBACpF,mCAAmC;YACrC,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAqB,EAAE,CAAC;QACvC,KAAK,MAAM,UAAU,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YACtE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,IAAI,yBAAyB,CAAC;oBAClC;wBACE,IAAI,EAAE,6BAA6B;wBACnC,IAAI,EAAE,aAAa,SAAS,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE;wBACtD,OAAO,EACL,sBAAsB,UAAU,CAAC,IAAI,wBAAwB;4BAC7D,4DAA4D;qBAC/D;iBACF,CAAC,CAAC;YACL,CAAC;YACD,SAAS,CAAC,IAAI,CAAC;gBACb,UAAU,EAAE;oBACV,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,GAAG,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClF,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,KAAK,EAAE,UAAU,CAAC,KAAK;iBACxB;gBACD,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;aAClD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,6EAA6E;IAC7E,KAAK,UAAU,YAAY,CACzB,KAAqB,EACrB,aAAqB,EACrB,UAAkB;QAElB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACjE,IAAI,OAAO,EAAE,UAAU,KAAK,UAAU;YAAE,OAAO;QAC/C,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;QAClE,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YACrC,MAAM,IAAI,cAAc,CACtB,OAAO,EACP,0BAA0B,MAAM,CAAC,UAAU,0BAA0B,UAAU,EAAE,CAClF,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,KAAK,GAAyB;QAClC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU;YAC5C,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACvF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBACvE,MAAM,IAAI,yBAAyB,CAAC;oBAClC;wBACE,IAAI,EAAE,uBAAuB;wBAC7B,IAAI,EAAE,WAAW;wBACjB,OAAO,EAAE,uDAAuD,sBAAsB,CAAC,MAAM,CAAC,EAAE;qBACjG;iBACF,CAAC,CAAC;YACL,CAAC;YACD,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC/E,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;gBAClE,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;oBAC7C,MAAM,IAAI,yBAAyB,CACjC,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;wBAC5B,IAAI,EAAE,gCAAgC;wBACtC,IAAI,EAAE,aAAa,SAAS,CAAC,IAAI,EAAE;wBACnC,OAAO,EACL,kFAAkF;4BAClF,oDAAoD,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,IAAI;4BAC9F,sCAAsC,SAAS,CAAC,IAAI,EAAE;qBACzD,CAAC,CAAC,CACJ,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,OAAO,GAAuB,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,KAAK,MAAM,SAAS,IAAI,aAAa,EAAE,CAAC;oBACtC,MAAM,KAAK,GAAmB,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;oBACpF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,YAAY,CACnD,KAAK,EACL,SAAS,CAAC,IAAI,EACd,YAAY,CACb,CAAC;oBACF,MAAM,WAAW,GAAG,oBAAoB,CACtC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CACvD,CAAC;oBACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;oBAC1E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,iBAAiB,CACzD,KAAK,EACL,SAAS,CAAC,IAAI,EACd,WAAW,CACZ,CAAC;oBACF,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;oBAChF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;oBACnE,MAAM,QAAQ,GAAsB,MAAM,IAAI,MAAM,CAAC;oBACrD,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;wBAC/B,KAAK;wBACL,aAAa,EAAE,SAAS,CAAC,IAAI;wBAC7B,WAAW;wBACX,QAAQ;qBACT,CAAC,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE;wBACrD,QAAQ,EAAE,QAAQ;wBAClB,QAAQ,EAAE,MAAM,CAAC,UAAU;qBAC5B,CAAC,CAAC;oBACH,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,MAAM,IAAI,yBAAyB,CAAC;4BAClC;gCACE,IAAI,EAAE,+BAA+B;gCACrC,IAAI,EAAE,aAAa,SAAS,CAAC,IAAI,EAAE;gCACnC,OAAO,EAAE,uBAAuB,SAAS,CAAC,IAAI,kDAAkD;6BACjG;yBACF,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;oBAC1E,OAAO,CAAC,IAAI,CAAC;wBACX,SAAS;wBACT,KAAK;wBACL,UAAU,EAAE,QAAQ,CAAC,UAAU;wBAC/B,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC9E,KAAK;qBACN,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC5C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QACjC,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY;YAC/B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACtC,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,CACjC,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,SAAS,CAAC,IAAI,EACtB,OAAO,CAAC,UAAU,EAClB,YAAY,CACb,CAAC;gBACF,MAAM,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;gBAC9E,YAAY,CAAC,MAAM,CAAC,sBAAsB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY;YACjC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACtC,IAAI,OAAO,CAAC,kBAAkB,KAAK,SAAS;oBAAE,SAAS;gBACvD,oFAAoF;gBACpF,mFAAmF;gBACnF,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,CACjC,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,SAAS,CAAC,IAAI,EACtB,OAAO,CAAC,kBAAkB,EAC1B,YAAY,CACb,CAAC;gBACF,YAAY,CAAC,MAAM,CAAC,sBAAsB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,IAAI;YACf,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACtC,MAAM,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,YAAY;YACzB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YACnE,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;gBAChC,YAAY,CAAC,MAAM,CAAC,sBAAsB,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO;YACjD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,UAA8B,CAAC;YACnC,IAAI,MAAM,KAAK,SAAS,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,SAAS,IAAI,sBAAsB,EAAE,CAAC;gBACzF,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,UAAU,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC;gBACnF,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,UAAU,KAAK,SAAS;gBAAE,OAAO,EAAE,CAAC;YACxC,MAAM,YAAY,CAAC,KAAK,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;YACrD,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC;QAED,KAAK,CAAC,KAAK;YACT,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YAC3B,IAAI,EAAE,GAAG,SAAS,GAAG,iBAAiB;gBAAE,OAAO;YAC/C,SAAS,GAAG,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YACpC,MAAM,MAAM,CAAC,aAAa,CAAC,cAAc,EAAE,CAAC;QAC9C,CAAC;KACF,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAqB,EAAE,aAAqB;IAC1E,OAAO,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,IAAI,aAAa,EAAE,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAuC,EACvC,MAA0B,EAC1B,YAAoB,EACpB,UAA6D,EAC7D,OAAyB;IAEzB,IAAI,KAAK,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/E,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC;QAC/B,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAClE,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC"}

package/node_modules/@noodle-borg/knowledge-operations/dist/routes.d.ts

@@ -0,0 +1,38 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import { type DocumentTextCodec, type KnowledgeScope } from '@noodle-borg/knowledge';
+import type { KnowledgeStagingStore } from './staging-store.js';
+export interface KnowledgeTenantRef {
+    readonly org: string;
+    readonly app: string;
+    readonly env: string;
+}
+export interface KnowledgeRouteDeps {
+    readonly staging: KnowledgeStagingStore;
+    /** Managed-config feature gate (`NOODLE_KNOWLEDGE_ENABLED`), resolved org → app → env. */
+    readonly knowledgeEnabled: (tenant: KnowledgeTenantRef) => Promise<boolean>;
+    /** Whole-set content-hash reuse: an unchanged component needs no uploads at all. */
+    readonly findRevisionByContentHash: (scope: KnowledgeScope, componentName: string, contentHash: string) => Promise<{
+        readonly revisionId: string;
+    } | undefined>;
+    readonly maxBodyBytes: number;
+    /** Seals staged bytes at rest; the service injects its secret-box codec. */
+    readonly codec?: DocumentTextCodec;
+    /** Operator read surface (list/status); wired by `wireKnowledge`, absent in bare handlers. */
+    readonly status?: import('./status-routes.js').KnowledgeStatusDeps;
+}
+export declare function knowledgeTenantKey(tenant: KnowledgeTenantRef): string;
+/** The one command that turns the feature on for a tenant; every fail-closed error names it. */
+export declare function knowledgeEnableCommand(tenant: KnowledgeTenantRef): string;
+/**
+ * `POST /v1/orgs/{o}/apps/{a}/envs/{e}/knowledge/preflight` — diff declared document hashes
+ * against transient staging and published revisions; respond with exactly the hashes that
+ * still need bytes. Descriptors only; no contents cross this route.
+ */
+export declare function handleKnowledgePreflight(req: IncomingMessage, res: ServerResponse, tenant: KnowledgeTenantRef, deps: KnowledgeRouteDeps): Promise<void>;
+/**
+ * `PUT /v1/orgs/{o}/apps/{a}/envs/{e}/knowledge/documents/{sha256}` — raw UTF-8 bytes,
+ * verified against the addressed hash before sealing into transient staging (ADR 0202 D5:
+ * the service verifies declared length and hash before publication).
+ */
+export declare function handleKnowledgeDocumentUpload(req: IncomingMessage, res: ServerResponse, tenant: KnowledgeTenantRef, sha256: string, deps: KnowledgeRouteDeps): Promise<void>;
+//# sourceMappingURL=routes.d.ts.map

package/node_modules/@noodle-borg/knowledge-operations/dist/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EACL,KAAK,iBAAiB,EAGtB,KAAK,cAAc,EACpB,MAAM,wBAAwB,CAAC;AAQhC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAEhE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,0FAA0F;IAC1F,QAAQ,CAAC,gBAAgB,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5E,oFAAoF;IACpF,QAAQ,CAAC,yBAAyB,EAAE,CAClC,KAAK,EAAE,cAAc,EACrB,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,MAAM,KAChB,OAAO,CAAC;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;IAC1D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC;IACnC,8FAA8F;IAC9F,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,oBAAoB,EAAE,mBAAmB,CAAC;CACpE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAErE;AAED,gGAAgG;AAChG,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAKzE;AAYD;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,IAAI,CAAC,CAsCf;AAED;;;;GAIG;AACH,wBAAsB,6BAA6B,CACjD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,kBAAkB,EAC1B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,IAAI,CAAC,CA0Bf"}

package/node_modules/@noodle-borg/knowledge-operations/dist/routes.js

@@ -0,0 +1,100 @@
+/**
+ * Knowledge control-plane route handlers (ADR 0202 as amended). The service dispatch
+ * authorizes the request and parses the tenant path, then delegates here; these handlers own
+ * validation, the feature gate, staging, and wire shapes — never auth.
+ */
+import { createHash } from 'node:crypto';
+import { documentsContentHash, identityDocumentTextCodec, } from '@noodle-borg/knowledge';
+import { MAX_DOCUMENT_BYTES } from '@noodle-borg/knowledge/limits';
+import { knowledgePreflightRequestSchema, } from '@noodle-borg/wire-contracts';
+import { readBody, sendJson } from './http.js';
+export function knowledgeTenantKey(tenant) {
+    return `${tenant.org}/${tenant.app}/${tenant.env}`;
+}
+/** The one command that turns the feature on for a tenant; every fail-closed error names it. */
+export function knowledgeEnableCommand(tenant) {
+    return (`noodle variables set NOODLE_KNOWLEDGE_ENABLED --value true --runtime cloud ` +
+        `--scope env --org ${tenant.org} --app ${tenant.app} --env ${tenant.env}`);
+}
+function sendGateClosed(res, tenant) {
+    sendJson(res, 403, {
+        code: 'knowledge_not_enabled',
+        error: 'knowledge is not enabled for this org/app/env',
+        fix: knowledgeEnableCommand(tenant),
+    });
+}
+const SHA256_HEX = /^[0-9a-f]{64}$/;
+/**
+ * `POST /v1/orgs/{o}/apps/{a}/envs/{e}/knowledge/preflight` — diff declared document hashes
+ * against transient staging and published revisions; respond with exactly the hashes that
+ * still need bytes. Descriptors only; no contents cross this route.
+ */
+export async function handleKnowledgePreflight(req, res, tenant, deps) {
+    if (!(await deps.knowledgeEnabled(tenant)))
+        return sendGateClosed(res, tenant);
+    const body = await readBody(req, deps.maxBodyBytes);
+    if (!body.ok)
+        return sendJson(res, body.status, { error: body.error });
+    let request;
+    try {
+        const parsed = knowledgePreflightRequestSchema.safeParse(JSON.parse(body.body.toString('utf8')));
+        if (!parsed.success)
+            throw new Error(parsed.error.issues[0]?.message ?? 'invalid request');
+        request = parsed.data;
+    }
+    catch (error) {
+        return sendJson(res, 400, {
+            code: 'invalid_knowledge_request',
+            error: `invalid knowledge preflight request: ${error.message}`,
+        });
+    }
+    const tenantKey = knowledgeTenantKey(tenant);
+    const scope = { org: tenant.org, app: tenant.app, env: tenant.env };
+    const missing = [];
+    const seen = new Set();
+    for (const component of request.components) {
+        const hashes = component.documents.map((document) => document.sha256);
+        const published = await deps.findRevisionByContentHash(scope, component.name, documentsContentHash(hashes));
+        if (published !== undefined)
+            continue;
+        for (const sha256 of hashes) {
+            if (seen.has(sha256))
+                continue;
+            seen.add(sha256);
+            if (!(await deps.staging.has(tenantKey, sha256)))
+                missing.push(sha256);
+        }
+    }
+    const response = { ok: true, missing };
+    return sendJson(res, 200, response);
+}
+/**
+ * `PUT /v1/orgs/{o}/apps/{a}/envs/{e}/knowledge/documents/{sha256}` — raw UTF-8 bytes,
+ * verified against the addressed hash before sealing into transient staging (ADR 0202 D5:
+ * the service verifies declared length and hash before publication).
+ */
+export async function handleKnowledgeDocumentUpload(req, res, tenant, sha256, deps) {
+    if (!(await deps.knowledgeEnabled(tenant)))
+        return sendGateClosed(res, tenant);
+    if (!SHA256_HEX.test(sha256)) {
+        return sendJson(res, 400, {
+            code: 'invalid_knowledge_request',
+            error: 'document address must be a lowercase hex sha256',
+        });
+    }
+    const body = await readBody(req, Math.min(deps.maxBodyBytes, MAX_DOCUMENT_BYTES));
+    if (!body.ok)
+        return sendJson(res, body.status, { error: body.error });
+    const actual = createHash('sha256').update(body.body).digest('hex');
+    if (actual !== sha256) {
+        return sendJson(res, 400, {
+            code: 'knowledge_document_hash_mismatch',
+            error: 'uploaded bytes do not match the addressed content hash',
+        });
+    }
+    const codec = deps.codec ?? identityDocumentTextCodec;
+    await deps.staging.put(knowledgeTenantKey(tenant), sha256, await codec.seal(body.body), body.body.length);
+    const response = { ok: true, sha256 };
+    return sendJson(res, 200, response);
+}
+//# sourceMappingURL=routes.js.map

package/node_modules/@noodle-borg/knowledge-operations/dist/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAEL,oBAAoB,EACpB,yBAAyB,GAE1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAGL,+BAA+B,GAChC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AA0B/C,MAAM,UAAU,kBAAkB,CAAC,MAA0B;IAC3D,OAAO,GAAG,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;AACrD,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,sBAAsB,CAAC,MAA0B;IAC/D,OAAO,CACL,6EAA6E;QAC7E,qBAAqB,MAAM,CAAC,GAAG,UAAU,MAAM,CAAC,GAAG,UAAU,MAAM,CAAC,GAAG,EAAE,CAC1E,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAmB,EAAE,MAA0B;IACrE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,+CAA+C;QACtD,GAAG,EAAE,sBAAsB,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAEpC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,GAAoB,EACpB,GAAmB,EACnB,MAA0B,EAC1B,IAAwB;IAExB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACvE,IAAI,OAAiE,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,+BAA+B,CAAC,SAAS,CACtD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CACvC,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,iBAAiB,CAAC,CAAC;QAC3F,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,IAAI,EAAE,2BAA2B;YACjC,KAAK,EAAE,wCAAyC,KAAe,CAAC,OAAO,EAAE;SAC1E,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAmB,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;IACpF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,yBAAyB,CACpD,KAAK,EACL,SAAS,CAAC,IAAI,EACd,oBAAoB,CAAC,MAAM,CAAC,CAC7B,CAAC;QACF,IAAI,SAAS,KAAK,SAAS;YAAE,SAAS;QACtC,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC/B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACjB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAA+B,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACnE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,GAAoB,EACpB,GAAmB,EACnB,MAA0B,EAC1B,MAAc,EACd,IAAwB;IAExB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC/E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,IAAI,EAAE,2BAA2B;YACjC,KAAK,EAAE,iDAAiD;SACzD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAClF,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpE,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,IAAI,EAAE,kCAAkC;YACxC,KAAK,EAAE,wDAAwD;SAChE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,yBAAyB,CAAC;IACtD,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CACpB,kBAAkB,CAAC,MAAM,CAAC,EAC1B,MAAM,EACN,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,CACjB,CAAC;IACF,MAAM,QAAQ,GAA4B,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC/D,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC"}

package/node_modules/@noodle-borg/knowledge-operations/dist/search-port.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Adapts the knowledge search executor to the runtime's deployment-bound port shape
+ * (structurally typed against `@noodle-borg/runtime`'s `KnowledgeSearchPort`): tenant and
+ * component set are bound once per deployment; failures become typed refusals, never partial
+ * answers, and no provider detail crosses the port.
+ */
+import { type SearchHit } from '@noodle-borg/knowledge';
+import type { KnowledgeSearchComponent, KnowledgeSearchExecutor } from './executor.js';
+import type { KnowledgeTenantRef } from './routes.js';
+export interface BoundKnowledgeSearchPort {
+    enabled(): Promise<boolean>;
+    search(componentName: string, request: {
+        readonly query: string;
+        readonly limit?: number;
+    }): Promise<{
+        readonly ok: true;
+        readonly hits: readonly SearchHit[];
+    } | {
+        readonly ok: false;
+        readonly reason: 'budget_exhausted' | 'not_enabled' | 'provider_error';
+        readonly message: string;
+    }>;
+}
+export type KnowledgeSearchPortFactory = (tenant: {
+    readonly org: string;
+    readonly app: string;
+    readonly env: string;
+}, components: readonly KnowledgeSearchComponent[]) => BoundKnowledgeSearchPort;
+export declare function knowledgeSearchPortFactory(executor: KnowledgeSearchExecutor): KnowledgeSearchPortFactory;
+export declare function bindKnowledgeSearchPort(executor: KnowledgeSearchExecutor, tenant: KnowledgeTenantRef, components: readonly KnowledgeSearchComponent[]): BoundKnowledgeSearchPort;
+//# sourceMappingURL=search-port.d.ts.map

package/node_modules/@noodle-borg/knowledge-operations/dist/search-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-port.d.ts","sourceRoot":"","sources":["../src/search-port.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAA8C,KAAK,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACpG,OAAO,KAAK,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACvF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,WAAW,wBAAwB;IACvC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,CACJ,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3D,OAAO,CACN;QAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,SAAS,EAAE,CAAA;KAAE,GAC1D;QACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;QACnB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,GAAG,aAAa,GAAG,gBAAgB,CAAC;QACvE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,CACJ,CAAC;CACH;AAED,MAAM,MAAM,0BAA0B,GAAG,CACvC,MAAM,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAC5E,UAAU,EAAE,SAAS,wBAAwB,EAAE,KAC5C,wBAAwB,CAAC;AAE9B,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,uBAAuB,GAChC,0BAA0B,CAE5B;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,uBAAuB,EACjC,MAAM,EAAE,kBAAkB,EAC1B,UAAU,EAAE,SAAS,wBAAwB,EAAE,GAC9C,wBAAwB,CAuB1B"}

package/node_modules/@noodle-borg/knowledge-operations/dist/search-port.js

@@ -0,0 +1,36 @@
+/**
+ * Adapts the knowledge search executor to the runtime's deployment-bound port shape
+ * (structurally typed against `@noodle-borg/runtime`'s `KnowledgeSearchPort`): tenant and
+ * component set are bound once per deployment; failures become typed refusals, never partial
+ * answers, and no provider detail crosses the port.
+ */
+import { KnowledgeError, SearchBudgetExhaustedError } from '@noodle-borg/knowledge';
+export function knowledgeSearchPortFactory(executor) {
+    return (tenant, components) => bindKnowledgeSearchPort(executor, tenant, components);
+}
+export function bindKnowledgeSearchPort(executor, tenant, components) {
+    return {
+        enabled: () => executor.enabled(tenant),
+        async search(componentName, request) {
+            const component = components.find((candidate) => candidate.name === componentName);
+            if (component === undefined) {
+                return { ok: false, reason: 'provider_error', message: 'unknown knowledge component' };
+            }
+            try {
+                const hits = await executor.search(tenant, component, request);
+                return { ok: true, hits };
+            }
+            catch (error) {
+                if (error instanceof SearchBudgetExhaustedError) {
+                    return { ok: false, reason: 'budget_exhausted', message: error.message };
+                }
+                if (error instanceof KnowledgeError) {
+                    const reason = error.layer === 'request' ? 'not_enabled' : 'provider_error';
+                    return { ok: false, reason, message: error.message };
+                }
+                return { ok: false, reason: 'provider_error', message: 'knowledge search failed' };
+            }
+        },
+    };
+}
+//# sourceMappingURL=search-port.js.map

package/node_modules/@noodle-borg/knowledge-operations/dist/search-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-port.js","sourceRoot":"","sources":["../src/search-port.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAkB,MAAM,wBAAwB,CAAC;AAwBpG,MAAM,UAAU,0BAA0B,CACxC,QAAiC;IAEjC,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,QAAiC,EACjC,MAA0B,EAC1B,UAA+C;IAE/C,OAAO;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;QACvC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO;YACjC,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;YACnF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;YACzF,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;gBAC/D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,0BAA0B,EAAE,CAAC;oBAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC3E,CAAC;gBACD,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;oBACpC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC;oBAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;gBACvD,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;YACrF,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/knowledge-operations/dist/service-wiring.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Composition helpers the service calls from its (size-pinned) bootstrap files, so the thin
+ * dispatch stays thin: store construction, schema setup, and route-deps assembly live here.
+ */
+import { type CompiledKnowledgeComponent, type DocumentTextCodec, type KnowledgeRevisionStore, type SearchBudgetCeilings, type SearchBudgetStore } from '@noodle-borg/knowledge';
+import type { Pool } from 'pg';
+import { type StringSecretBox } from './codec.js';
+import { type KnowledgeSearchExecutor } from './executor.js';
+import { type ManagedGoogleKnowledge } from './managed-google.js';
+import { type KnowledgeDeployHooks } from './publication.js';
+import type { KnowledgeRouteDeps, KnowledgeTenantRef } from './routes.js';
+import { type KnowledgeSearchPortFactory } from './search-port.js';
+import { type KnowledgeStagingStore } from './staging-store.js';
+export interface KnowledgeServiceStores {
+    readonly staging: KnowledgeStagingStore;
+    readonly revisionStore: KnowledgeRevisionStore;
+    readonly codec?: DocumentTextCodec;
+    /** Org-pooled monthly site-search spend control (per-app sub-caps). */
+    readonly budgetStore?: SearchBudgetStore;
+    /** Managed Noodle-owned Google project; absent means the sites tier is dark. */
+    readonly google?: ManagedGoogleKnowledge;
+}
+/** In-memory stores with the identity codec — the no-persistence service default. */
+export declare function defaultKnowledgeStores(): KnowledgeServiceStores;
+/** Durable stores sharing the service's Postgres pool and secret-box custody. */
+export declare function createPostgresKnowledgeStores(pool: Pool, secretBox?: StringSecretBox, env?: NodeJS.ProcessEnv): Promise<KnowledgeServiceStores>;
+/** Budget ceilings from managed config with the ratified v0 defaults (2000 org / 1000 app). */
+export declare function budgetCeilingsResolver(resolveVariables: (tenant: KnowledgeTenantRef) => Promise<Record<string, string>>): (tenant: KnowledgeTenantRef) => Promise<SearchBudgetCeilings>;
+/** Assemble route deps over the service's managed-config resolver (`NOODLE_KNOWLEDGE_ENABLED`). */
+export declare function buildKnowledgeRouteDeps(stores: KnowledgeServiceStores, resolveVariables: (tenant: KnowledgeTenantRef) => Promise<Record<string, string>>, maxBodyBytes: number): KnowledgeRouteDeps;
+/**
+ * One-call composition for the service: resolve stores, build route deps, and register the
+ * deploy-coupled publication hooks on the registry (structurally typed; no service import).
+ */
+export declare function wireKnowledge(registry: {
+    setKnowledgeDeployHooks(hooks: KnowledgeDeployHooks, search?: KnowledgeSearchPortFactory): void;
+    getActiveByTenant(ref: {
+        org: string;
+        app: string;
+        env: string;
+    }): Promise<{
+        readonly served: {
+            readonly artifact: {
+                readonly server: ActiveServerKnowledge;
+            };
+        };
+    } | undefined>;
+}, stores: KnowledgeServiceStores | undefined, resolveVariables: (tenant: KnowledgeTenantRef) => Promise<Record<string, string>>, maxBodyBytes: number): KnowledgeRouteDeps & {
+    readonly executor: KnowledgeSearchExecutor;
+};
+interface ActiveServerKnowledge {
+    readonly knowledge?: readonly CompiledKnowledgeComponent[] | undefined;
+    readonly deploymentId?: string | undefined;
+}
+export {};
+//# sourceMappingURL=service-wiring.d.ts.map

package/node_modules/@noodle-borg/knowledge-operations/dist/service-wiring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-wiring.d.ts","sourceRoot":"","sources":["../src/service-wiring.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,iBAAiB,EAGtB,KAAK,sBAAsB,EAG3B,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,EAAE,KAAK,eAAe,EAA0B,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAiC,KAAK,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAC5F,OAAO,EACL,KAAK,sBAAsB,EAI5B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAA8B,KAAK,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAC1E,OAAO,EAAE,KAAK,0BAA0B,EAA8B,MAAM,kBAAkB,CAAC;AAC/F,OAAO,EAEL,KAAK,qBAAqB,EAE3B,MAAM,oBAAoB,CAAC;AAG5B,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,sBAAsB,CAAC;IAC/C,QAAQ,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC;IACnC,uEAAuE;IACvE,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAC;IACzC,gFAAgF;IAChF,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC;CAC1C;AAED,qFAAqF;AACrF,wBAAgB,sBAAsB,IAAI,sBAAsB,CAM/D;AAED,iFAAiF;AACjF,wBAAsB,6BAA6B,CACjD,IAAI,EAAE,IAAI,EACV,SAAS,CAAC,EAAE,eAAe,EAC3B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,sBAAsB,CAAC,CAgBjC;AAED,+FAA+F;AAC/F,wBAAgB,sBAAsB,CACpC,gBAAgB,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAChF,CAAC,MAAM,EAAE,kBAAkB,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAU/D;AAED,mGAAmG;AACnG,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,sBAAsB,EAC9B,gBAAgB,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EACjF,YAAY,EAAE,MAAM,GACnB,kBAAkB,CAUpB;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,EAAE;IACR,uBAAuB,CAAC,KAAK,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE,0BAA0B,GAAG,IAAI,CAAC;IAChG,iBAAiB,CAAC,GAAG,EAAE;QACrB,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;KACb,GAAG,OAAO,CACP;QAAE,QAAQ,CAAC,MAAM,EAAE;YAAE,QAAQ,CAAC,QAAQ,EAAE;gBAAE,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAA;aAAE,CAAA;SAAE,CAAA;KAAE,GACtF,SAAS,CACZ,CAAC;CACH,EACD,MAAM,EAAE,sBAAsB,GAAG,SAAS,EAC1C,gBAAgB,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EACjF,YAAY,EAAE,MAAM,GACnB,kBAAkB,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAA;CAAE,CAmErE;AAED,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,0BAA0B,EAAE,GAAG,SAAS,CAAC;IACvE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C"}

package/node_modules/@noodle-borg/knowledge-operations/dist/service-wiring.js

@@ -0,0 +1,129 @@
+/**
+ * Composition helpers the service calls from its (size-pinned) bootstrap files, so the thin
+ * dispatch stays thin: store construction, schema setup, and route-deps assembly live here.
+ */
+import { InMemoryKnowledgeRevisionStore, InMemorySearchBudgetStore, PostgresKnowledgeRevisionStore, PostgresSearchBudgetStore, } from '@noodle-borg/knowledge';
+import { secretBoxDocumentCodec } from './codec.js';
+import { createKnowledgeSearchExecutor } from './executor.js';
+import { managedGoogleFromEnv, managedSiteProvisioned, managedSiteSearchFor, } from './managed-google.js';
+import { createKnowledgeDeployHooks } from './publication.js';
+import { knowledgeSearchPortFactory } from './search-port.js';
+import { InMemoryKnowledgeStagingStore, PostgresKnowledgeStagingStore, } from './staging-store.js';
+/** In-memory stores with the identity codec — the no-persistence service default. */
+export function defaultKnowledgeStores() {
+    return {
+        staging: new InMemoryKnowledgeStagingStore(),
+        revisionStore: new InMemoryKnowledgeRevisionStore(),
+        budgetStore: new InMemorySearchBudgetStore(),
+    };
+}
+/** Durable stores sharing the service's Postgres pool and secret-box custody. */
+export async function createPostgresKnowledgeStores(pool, secretBox, env = process.env) {
+    const codec = secretBox === undefined ? undefined : secretBoxDocumentCodec(secretBox);
+    const staging = new PostgresKnowledgeStagingStore(pool);
+    const revisionStore = new PostgresKnowledgeRevisionStore(pool, codec);
+    const budgetStore = new PostgresSearchBudgetStore(pool);
+    await staging.ensureSchema();
+    await revisionStore.ensureSchema();
+    await budgetStore.ensureSchema();
+    const google = managedGoogleFromEnv(env);
+    return {
+        staging,
+        revisionStore,
+        budgetStore,
+        ...(codec === undefined ? {} : { codec }),
+        ...(google === undefined ? {} : { google }),
+    };
+}
+/** Budget ceilings from managed config with the ratified v0 defaults (2000 org / 1000 app). */
+export function budgetCeilingsResolver(resolveVariables) {
+    return async (tenant) => {
+        const variables = await resolveVariables(tenant);
+        const org = Number(variables.NOODLE_KNOWLEDGE_SEARCH_BUDGET_ORG_MONTHLY ?? '2000');
+        const app = Number(variables.NOODLE_KNOWLEDGE_SEARCH_BUDGET_APP_MONTHLY ?? '1000');
+        return {
+            org: Number.isFinite(org) ? Math.max(0, Math.floor(org)) : 2000,
+            app: Number.isFinite(app) ? Math.max(0, Math.floor(app)) : 1000,
+        };
+    };
+}
+/** Assemble route deps over the service's managed-config resolver (`NOODLE_KNOWLEDGE_ENABLED`). */
+export function buildKnowledgeRouteDeps(stores, resolveVariables, maxBodyBytes) {
+    return {
+        staging: stores.staging,
+        knowledgeEnabled: async (tenant) => (await resolveVariables(tenant)).NOODLE_KNOWLEDGE_ENABLED === 'true',
+        findRevisionByContentHash: (scope, componentName, contentHash) => stores.revisionStore.findByContentHash(scope, componentName, contentHash),
+        maxBodyBytes,
+        ...(stores.codec === undefined ? {} : { codec: stores.codec }),
+    };
+}
+/**
+ * One-call composition for the service: resolve stores, build route deps, and register the
+ * deploy-coupled publication hooks on the registry (structurally typed; no service import).
+ */
+export function wireKnowledge(registry, stores, resolveVariables, maxBodyBytes) {
+    const resolved = stores ?? defaultKnowledgeStores();
+    const deps = buildKnowledgeRouteDeps(resolved, resolveVariables, maxBodyBytes);
+    const google = resolved.google;
+    const ceilings = budgetCeilingsResolver(resolveVariables);
+    const hooks = createKnowledgeDeployHooks(resolved, {
+        knowledgeEnabled: deps.knowledgeEnabled,
+        ...(google === undefined
+            ? {}
+            : { siteProvisioned: (tenant) => managedSiteProvisioned(google, tenant) }),
+    });
+    const executor = createKnowledgeSearchExecutor({
+        hooks,
+        knowledgeEnabled: deps.knowledgeEnabled,
+        ...(resolved.budgetStore === undefined
+            ? {}
+            : { budget: { store: resolved.budgetStore, ceilings } }),
+        ...(google === undefined
+            ? {}
+            : { siteSearchFor: (tenant) => managedSiteSearchFor(google, tenant) }),
+    });
+    registry.setKnowledgeDeployHooks(hooks, knowledgeSearchPortFactory(executor));
+    const status = {
+        revisionStore: resolved.revisionStore,
+        knowledgeEnabled: deps.knowledgeEnabled,
+        ...(google === undefined
+            ? {}
+            : {
+                siteProvisioningState: async (tenant) => (await managedSiteProvisioned(google, tenant))
+                    ? 'ready'
+                    : 'missing',
+            }),
+        ...(resolved.budgetStore === undefined
+            ? {}
+            : {
+                budget: async (tenant) => {
+                    const bounds = await ceilings(tenant);
+                    const state = await resolved.budgetStore?.peek({ org: tenant.org, app: tenant.app }, bounds);
+                    if (state === undefined)
+                        return undefined;
+                    return {
+                        year: state.year,
+                        month: state.month,
+                        orgConsumed: state.orgConsumed,
+                        appConsumed: state.appConsumed,
+                        orgCeiling: state.orgCeiling,
+                        appCeiling: state.appCeiling,
+                        blocked: state.orgCeiling <= 0 ||
+                            state.appCeiling <= 0 ||
+                            state.orgConsumed >= state.orgCeiling ||
+                            state.appConsumed >= state.appCeiling,
+                    };
+                },
+            }),
+        activeKnowledge: async (tenant) => {
+            const target = await registry.getActiveByTenant(tenant);
+            const server = target?.served.artifact.server;
+            const components = server?.knowledge;
+            if (components === undefined || components.length === 0)
+                return undefined;
+            return { components, deploymentId: server?.deploymentId ?? '' };
+        },
+    };
+    return { ...deps, status, executor };
+}
+//# sourceMappingURL=service-wiring.js.map

package/node_modules/@noodle-borg/knowledge-operations/dist/service-wiring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-wiring.js","sourceRoot":"","sources":["../src/service-wiring.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAGL,8BAA8B,EAC9B,yBAAyB,EAEzB,8BAA8B,EAC9B,yBAAyB,GAG1B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAwB,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,6BAA6B,EAAgC,MAAM,eAAe,CAAC;AAC5F,OAAO,EAEL,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,0BAA0B,EAA6B,MAAM,kBAAkB,CAAC;AAEzF,OAAO,EAAmC,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAC/F,OAAO,EACL,6BAA6B,EAE7B,6BAA6B,GAC9B,MAAM,oBAAoB,CAAC;AAa5B,qFAAqF;AACrF,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,OAAO,EAAE,IAAI,6BAA6B,EAAE;QAC5C,aAAa,EAAE,IAAI,8BAA8B,EAAE;QACnD,WAAW,EAAE,IAAI,yBAAyB,EAAE;KAC7C,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,IAAU,EACV,SAA2B,EAC3B,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,KAAK,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,IAAI,6BAA6B,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,IAAI,8BAA8B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACtE,MAAM,WAAW,GAAG,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;IAC7B,MAAM,aAAa,CAAC,YAAY,EAAE,CAAC;IACnC,MAAM,WAAW,CAAC,YAAY,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO;QACL,OAAO;QACP,aAAa;QACb,WAAW;QACX,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QACzC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,sBAAsB,CACpC,gBAAiF;IAEjF,OAAO,KAAK,EAAE,MAAM,EAAE,EAAE;QACtB,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,0CAA0C,IAAI,MAAM,CAAC,CAAC;QACnF,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,0CAA0C,IAAI,MAAM,CAAC,CAAC;QACnF,OAAO;YACL,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YAC/D,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;SAChE,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,uBAAuB,CACrC,MAA8B,EAC9B,gBAAiF,EACjF,YAAoB;IAEpB,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CACjC,CAAC,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,wBAAwB,KAAK,MAAM;QACtE,yBAAyB,EAAE,CAAC,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,EAAE,CAC/D,MAAM,CAAC,aAAa,CAAC,iBAAiB,CAAC,KAAK,EAAE,aAAa,EAAE,WAAW,CAAC;QAC3E,YAAY;QACZ,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,QAUC,EACD,MAA0C,EAC1C,gBAAiF,EACjF,YAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,IAAI,sBAAsB,EAAE,CAAC;IACpD,MAAM,IAAI,GAAG,uBAAuB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,0BAA0B,CAAC,QAAQ,EAAE;QACjD,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,GAAG,CAAC,MAAM,KAAK,SAAS;YACtB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;KAC7E,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,6BAA6B,CAAC;QAC7C,KAAK;QACL,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,GAAG,CAAC,QAAQ,CAAC,WAAW,KAAK,SAAS;YACpC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,CAAC;QAC1D,GAAG,CAAC,MAAM,KAAK,SAAS;YACtB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;KACzE,CAAC,CAAC;IACH,QAAQ,CAAC,uBAAuB,CAAC,KAAK,EAAE,0BAA0B,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAwB;QAClC,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,GAAG,CAAC,MAAM,KAAK,SAAS;YACtB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,qBAAqB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CACtC,CAAC,MAAM,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBAC5C,CAAC,CAAE,OAAiB;oBACpB,CAAC,CAAE,SAAmB;aAC3B,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,WAAW,KAAK,SAAS;YACpC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;oBACvB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACtC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,IAAI,CAC5C,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,EACpC,MAAM,CACP,CAAC;oBACF,IAAI,KAAK,KAAK,SAAS;wBAAE,OAAO,SAAS,CAAC;oBAC1C,OAAO;wBACL,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,WAAW,EAAE,KAAK,CAAC,WAAW;wBAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;wBAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;wBAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;wBAC5B,OAAO,EACL,KAAK,CAAC,UAAU,IAAI,CAAC;4BACrB,KAAK,CAAC,UAAU,IAAI,CAAC;4BACrB,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,UAAU;4BACrC,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,UAAU;qBACxC,CAAC;gBACJ,CAAC;aACF,CAAC;QACN,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAChC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC9C,MAAM,UAAU,GAAG,MAAM,EAAE,SAAS,CAAC;YACrC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;YAC1E,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC;QAClE,CAAC;KACF,CAAC;IACF,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC"}

package/node_modules/@noodle-borg/knowledge-operations/dist/staging-store.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Encrypted transient document staging (ADR 0202 D5): deploy uploads land here, sealed and
+ * content-addressed by tenant + sha256, until the deploy transaction publishes them into a
+ * revision. Entries are TTL-bounded — an upload that never publishes is swept, so plaintext
+ * never persists outside the sealed revision store.
+ */
+import type { Pool } from 'pg';
+/** How long staged bytes may wait for their deploy transaction before being swept. */
+export declare const STAGING_TTL_MS: number;
+export interface KnowledgeStagingStore {
+    /** Store sealed bytes. Re-uploading the same tenant+hash is idempotent. */
+    put(tenantKey: string, sha256: string, sealed: Buffer, bytes: number): Promise<void>;
+    has(tenantKey: string, sha256: string): Promise<boolean>;
+    /** Sealed bytes for a staged document, if present and unexpired. */
+    get(tenantKey: string, sha256: string): Promise<Buffer | undefined>;
+    /** Remove entries older than the TTL. Returns the removed count. */
+    sweepExpired(): Promise<number>;
+}
+export declare class InMemoryKnowledgeStagingStore implements KnowledgeStagingStore {
+    private readonly entries;
+    private readonly now;
+    constructor(now?: () => Date);
+    put(tenantKey: string, sha256: string, sealed: Buffer): Promise<void>;
+    has(tenantKey: string, sha256: string): Promise<boolean>;
+    get(tenantKey: string, sha256: string): Promise<Buffer | undefined>;
+    sweepExpired(): Promise<number>;
+    private key;
+}
+export declare class PostgresKnowledgeStagingStore implements KnowledgeStagingStore {
+    #private;
+    constructor(pool: Pool, now?: () => Date);
+    ensureSchema(): Promise<void>;
+    put(tenantKey: string, sha256: string, sealed: Buffer, bytes: number): Promise<void>;
+    has(tenantKey: string, sha256: string): Promise<boolean>;
+    get(tenantKey: string, sha256: string): Promise<Buffer | undefined>;
+    sweepExpired(): Promise<number>;
+}
+//# sourceMappingURL=staging-store.d.ts.map

package/node_modules/@noodle-borg/knowledge-operations/dist/staging-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"staging-store.d.ts","sourceRoot":"","sources":["../src/staging-store.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAE/B,sFAAsF;AACtF,eAAO,MAAM,cAAc,QAAiB,CAAC;AAE7C,MAAM,WAAW,qBAAqB;IACpC,2EAA2E;IAC3E,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrF,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,oEAAoE;IACpE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpE,oEAAoE;IACpE,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACjC;AAED,qBAAa,6BAA8B,YAAW,qBAAqB;IACzE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2D;IACnF,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;gBAErB,GAAG,GAAE,MAAM,IAAuB;IAIxC,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIxD,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAOnE,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAYrC,OAAO,CAAC,GAAG;CAGZ;AAED,qBAAa,6BAA8B,YAAW,qBAAqB;;gBAI7D,IAAI,EAAE,IAAI,EAAE,GAAG,GAAE,MAAM,IAAuB;IAKpD,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAa7B,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASpF,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIxD,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAUnE,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;CAQtC"}

package/node_modules/@noodle-borg/knowledge-operations/dist/staging-store.js

@@ -0,0 +1,77 @@
+/** How long staged bytes may wait for their deploy transaction before being swept. */
+export const STAGING_TTL_MS = 60 * 60 * 1000;
+export class InMemoryKnowledgeStagingStore {
+    entries = new Map();
+    now;
+    constructor(now = () => new Date()) {
+        this.now = now;
+    }
+    async put(tenantKey, sha256, sealed) {
+        this.entries.set(this.key(tenantKey, sha256), { sealed, stagedAt: this.now().getTime() });
+    }
+    async has(tenantKey, sha256) {
+        return (await this.get(tenantKey, sha256)) !== undefined;
+    }
+    async get(tenantKey, sha256) {
+        const entry = this.entries.get(this.key(tenantKey, sha256));
+        if (entry === undefined)
+            return undefined;
+        if (this.now().getTime() - entry.stagedAt > STAGING_TTL_MS)
+            return undefined;
+        return entry.sealed;
+    }
+    async sweepExpired() {
+        const cutoff = this.now().getTime() - STAGING_TTL_MS;
+        let removed = 0;
+        for (const [key, entry] of this.entries) {
+            if (entry.stagedAt < cutoff) {
+                this.entries.delete(key);
+                removed += 1;
+            }
+        }
+        return removed;
+    }
+    key(tenantKey, sha256) {
+        return `${tenantKey}#${sha256}`;
+    }
+}
+export class PostgresKnowledgeStagingStore {
+    #pool;
+    #now;
+    constructor(pool, now = () => new Date()) {
+        this.#pool = pool;
+        this.#now = now;
+    }
+    async ensureSchema() {
+        await this.#pool.query(`
+      CREATE TABLE IF NOT EXISTS knowledge_staging_documents (
+        tenant_key text NOT NULL,
+        sha256 text NOT NULL,
+        ciphertext bytea NOT NULL,
+        bytes integer NOT NULL,
+        staged_at timestamptz NOT NULL,
+        PRIMARY KEY (tenant_key, sha256)
+      )
+    `);
+    }
+    async put(tenantKey, sha256, sealed, bytes) {
+        await this.#pool.query(`INSERT INTO knowledge_staging_documents (tenant_key, sha256, ciphertext, bytes, staged_at)
+       VALUES ($1, $2, $3, $4, $5)
+       ON CONFLICT (tenant_key, sha256) DO UPDATE SET staged_at = $5`, [tenantKey, sha256, sealed, bytes, this.#now()]);
+    }
+    async has(tenantKey, sha256) {
+        return (await this.get(tenantKey, sha256)) !== undefined;
+    }
+    async get(tenantKey, sha256) {
+        const cutoff = new Date(this.#now().getTime() - STAGING_TTL_MS);
+        const result = await this.#pool.query(`SELECT ciphertext FROM knowledge_staging_documents
+       WHERE tenant_key = $1 AND sha256 = $2 AND staged_at >= $3`, [tenantKey, sha256, cutoff]);
+        return result.rows[0]?.ciphertext;
+    }
+    async sweepExpired() {
+        const cutoff = new Date(this.#now().getTime() - STAGING_TTL_MS);
+        const result = await this.#pool.query('DELETE FROM knowledge_staging_documents WHERE staged_at < $1', [cutoff]);
+        return result.rowCount ?? 0;
+    }
+}
+//# sourceMappingURL=staging-store.js.map

package/node_modules/@noodle-borg/knowledge-operations/dist/staging-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"staging-store.js","sourceRoot":"","sources":["../src/staging-store.ts"],"names":[],"mappings":"AAQA,sFAAsF;AACtF,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAY7C,MAAM,OAAO,6BAA6B;IACvB,OAAO,GAAG,IAAI,GAAG,EAAgD,CAAC;IAClE,GAAG,CAAa;IAEjC,YAAY,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QAC5C,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,MAAc,EAAE,MAAc;QACzD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,MAAc;QACzC,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,SAAS,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,MAAc;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5D,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,QAAQ,GAAG,cAAc;YAAE,OAAO,SAAS,CAAC;QAC7E,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,cAAc,CAAC;QACrD,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,QAAQ,GAAG,MAAM,EAAE,CAAC;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACzB,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,GAAG,CAAC,SAAiB,EAAE,MAAc;QAC3C,OAAO,GAAG,SAAS,IAAI,MAAM,EAAE,CAAC;IAClC,CAAC;CACF;AAED,MAAM,OAAO,6BAA6B;IAC/B,KAAK,CAAO;IACZ,IAAI,CAAa;IAE1B,YAAY,IAAU,EAAE,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QACxD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;;;;;;;;;KAStB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,MAAc,EAAE,MAAc,EAAE,KAAa;QACxE,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACpB;;qEAE+D,EAC/D,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAChD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,MAAc;QACzC,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,SAAS,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,MAAc;QACzC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,cAAc,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACnC;iEAC2D,EAC3D,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAC5B,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,cAAc,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACnC,8DAA8D,EAC9D,CAAC,MAAM,CAAC,CACT,CAAC;QACF,OAAO,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;IAC9B,CAAC;CACF"}

package/node_modules/@noodle-borg/knowledge-operations/dist/status-routes.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Operator surface (ADR 0202 as amended): `knowledge list` and `knowledge status <name>` are
+ * the whole v0 CLI-facing read surface. Responses say "versioned documents" versus "live site"
+ * lifecycle truth — active revision, declaring deployment, provisioning state — and never
+ * contents, credentials, or raw provider payloads.
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { CompiledKnowledgeComponent, KnowledgeRevisionStore } from '@noodle-borg/knowledge';
+import type { KnowledgeBudgetState } from '@noodle-borg/wire-contracts';
+import { type KnowledgeTenantRef } from './routes.js';
+export interface KnowledgeStatusDeps {
+    readonly revisionStore: KnowledgeRevisionStore;
+    readonly knowledgeEnabled: (tenant: KnowledgeTenantRef) => Promise<boolean>;
+    /** The active deployment's compiled knowledge components, or undefined when none is active. */
+    readonly activeKnowledge: (tenant: KnowledgeTenantRef) => Promise<{
+        readonly components: readonly CompiledKnowledgeComponent[];
+        readonly deploymentId: string;
+    } | undefined>;
+    /** Managed site datastore readiness; absent until the Google slice binds a checker. */
+    readonly siteProvisioningState?: (tenant: KnowledgeTenantRef) => Promise<'ready' | 'missing'>;
+    /** Current month's search-budget state (the amendment's honest operator-visible counters). */
+    readonly budget?: (tenant: KnowledgeTenantRef) => Promise<KnowledgeBudgetState | undefined>;
+}
+/** `GET /v1/orgs/{o}/apps/{a}/envs/{e}/knowledge` */
+export declare function handleKnowledgeList(_req: IncomingMessage, res: ServerResponse, tenant: KnowledgeTenantRef, deps: KnowledgeStatusDeps): Promise<void>;
+/** `GET /v1/orgs/{o}/apps/{a}/envs/{e}/knowledge/{name}/status` */
+export declare function handleKnowledgeStatus(_req: IncomingMessage, res: ServerResponse, tenant: KnowledgeTenantRef, componentName: string, deps: KnowledgeStatusDeps): Promise<void>;
+//# sourceMappingURL=status-routes.d.ts.map

package/node_modules/@noodle-borg/knowledge-operations/dist/status-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-routes.d.ts","sourceRoot":"","sources":["../src/status-routes.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,0BAA0B,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACjG,OAAO,KAAK,EACV,oBAAoB,EAIrB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,KAAK,kBAAkB,EAA0B,MAAM,aAAa,CAAC;AAE9E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,aAAa,EAAE,sBAAsB,CAAC;IAC/C,QAAQ,CAAC,gBAAgB,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5E,+FAA+F;IAC/F,QAAQ,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,OAAO,CAC7D;QACE,QAAQ,CAAC,UAAU,EAAE,SAAS,0BAA0B,EAAE,CAAC;QAC3D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;KAC/B,GACD,SAAS,CACZ,CAAC;IACF,uFAAuF;IACvF,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC9F,8FAA8F;IAC9F,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;CAC7F;AA8BD,qDAAqD;AACrD,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,eAAe,EACrB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,IAAI,CAAC,CAef;AAED,mEAAmE;AACnE,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,eAAe,EACrB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,kBAAkB,EAC1B,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,IAAI,CAAC,CAyBf"}