@nxuss/lemma 1.17.0 → 1.18.0

package/dist/esm/cloud/v2/routes/memories.js

@@ -0,0 +1,238 @@
+/**
+ * Lemma API v2 — POST /v2/memories, DELETE /v2/memories/:id (Lane C)
+ *
+ * Stores a memory with claims[] + evidence (hashes the client already computed —
+ * the server has no client filesystem, see plan §0). Also owns the freshness-state
+ * helpers shared with routes/recall.ts and routes/verify.ts, and the zod request
+ * validation shared across all /v2 routes.
+ *
+ * Ownership: Lane C. Reads (never edits): src/contracts/**, src/cloud/store/**,
+ * src/cloud/identity/**, src/subconscious/freshness/** (Lane A's SuppliedEvidenceResolver).
+ */
+import crypto from 'crypto';
+import { z } from 'zod';
+import { LemmaApiError } from '../../../contracts/errors';
+import { SuppliedEvidenceResolver } from '../../../subconscious/freshness/SuppliedEvidenceResolver';
+// ─── Limits (plan §"LANE C" entregable 4) ─────────────────────────────────────
+export const MAX_CLAIMS = 50;
+export const MAX_VERIFY_IDS = 200;
+export const MAX_BODY_BYTES = 1000000; // 1 MB, enforced by app.ts's body parser
+// ─── Shared zod validation ─────────────────────────────────────────────────────
+export const EvidenceSchema = z.object({
+    files: z.record(z.string(), z.string()),
+    symbols: z.record(z.string(), z.string()),
+    symbolsNormalized: z.record(z.string(), z.string()),
+    branch: z.string().optional(),
+    commit: z.string().optional(),
+});
+export const CreateMemoryRequestSchema = z.object({
+    claims: z
+        .array(z.object({
+        text: z.string().min(1),
+        filePaths: z.array(z.string()).optional(),
+        symbols: z.array(z.object({ filePath: z.string(), symbolName: z.string() })).optional(),
+    }))
+        .min(1)
+        .max(MAX_CLAIMS),
+    evidence: EvidenceSchema,
+    derivedFrom: z.array(z.string()).optional(),
+});
+/** Turns the first zod issue into the API's stable invalid_request shape — never a raw zod dump. */
+export function zodToApiError(error) {
+    const issue = error.issues[0];
+    const field = issue?.path?.length ? issue.path.join('.') : undefined;
+    return new LemmaApiError({
+        code: 'invalid_request',
+        status: 400,
+        message: issue ? (field ? `${field}: ${issue.message}` : issue.message) : 'invalid request',
+        field,
+    });
+}
+function isStoredMemory(v) {
+    return (typeof v === 'object' &&
+        v !== null &&
+        Array.isArray(v.claims));
+}
+/**
+ * Builds the persisted claims from the request: each claim only tracks the
+ * files/symbols it explicitly declared, hashed from the top-level `evidence`
+ * bundle the client supplied. A declared path/symbol with no matching hash in
+ * `evidence` is a malformed request (the client can't establish a baseline it
+ * never sent) — this throws `invalid_request` naming the missing field, it never
+ * silently stores an untracked claim.
+ */
+export function buildClaims(body) {
+    return body.claims.map((c) => {
+        const fileHashes = {};
+        const symbolHashes = {};
+        const symbolNormalizedHashes = {};
+        for (const p of c.filePaths ?? []) {
+            const hash = body.evidence.files[p];
+            if (hash === undefined) {
+                throw new LemmaApiError({
+                    code: 'invalid_request',
+                    status: 400,
+                    message: `claim declares filePaths "${p}" but evidence.files has no hash for it`,
+                    field: 'evidence.files',
+                });
+            }
+            fileHashes[p] = hash;
+        }
+        for (const s of c.symbols ?? []) {
+            const key = `${s.filePath}::${s.symbolName}`;
+            const hash = body.evidence.symbols[key];
+            if (hash === undefined) {
+                throw new LemmaApiError({
+                    code: 'invalid_request',
+                    status: 400,
+                    message: `claim declares symbol "${key}" but evidence.symbols has no hash for it`,
+                    field: 'evidence.symbols',
+                });
+            }
+            symbolHashes[key] = hash;
+            const normalized = body.evidence.symbolsNormalized[key];
+            if (normalized !== undefined)
+                symbolNormalizedHashes[key] = normalized;
+        }
+        const claim = {
+            id: crypto.createHash('sha1').update(c.text.trim().toLowerCase()).digest('hex').substring(0, 10),
+            text: c.text.trim(),
+        };
+        if (Object.keys(fileHashes).length > 0)
+            claim.fileHashes = fileHashes;
+        if (Object.keys(symbolHashes).length > 0)
+            claim.symbolHashes = symbolHashes;
+        if (Object.keys(symbolNormalizedHashes).length > 0)
+            claim.symbolNormalizedHashes = symbolNormalizedHashes;
+        return claim;
+    });
+}
+/**
+ * Same hash-compare invariant as `TheBrainV2.checkClaimFreshness`, reimplemented
+ * for the wire `Evidence` shape: keys here are already the exact path/`path::symbol`
+ * strings the client uses (see contracts/evidence.ts), so — unlike the local Brain —
+ * there is no `path.relative(process.cwd(), abs)` to do. Fail-closed: a resolver
+ * `null` (tracked path the client omitted) always maps to `unverified`, never `fresh`.
+ */
+function claimState(claim, resolver) {
+    const staleFiles = [];
+    const cosmeticChanges = [];
+    const unverified = [];
+    const symbolCoveredPaths = new Set(Object.keys(claim.symbolHashes || {}).map((key) => key.substring(0, key.lastIndexOf('::'))));
+    for (const [p, storedHash] of Object.entries(claim.fileHashes || {})) {
+        if (symbolCoveredPaths.has(p))
+            continue;
+        const current = resolver.hashFile(p);
+        if (current === null) {
+            unverified.push(p);
+            continue;
+        }
+        if (current !== storedHash)
+            staleFiles.push(p);
+    }
+    for (const [key, storedHash] of Object.entries(claim.symbolHashes || {})) {
+        const sep = key.lastIndexOf('::');
+        const p = key.substring(0, sep);
+        const symbolName = key.substring(sep + 2);
+        const current = resolver.hashSymbol(p, symbolName);
+        if (current === null) {
+            unverified.push(key);
+            continue;
+        }
+        if (current.raw === storedHash)
+            continue;
+        const storedNormalized = claim.symbolNormalizedHashes?.[key];
+        if (storedNormalized && current.normalized === storedNormalized) {
+            cosmeticChanges.push(key);
+            continue;
+        }
+        staleFiles.push(key);
+    }
+    const state = unverified.length > 0 ? 'unverified' : staleFiles.length > 0 ? 'stale' : 'fresh';
+    return { state, staleFiles, cosmeticChanges };
+}
+/**
+ * Aggregates a memory's claims into one `MemoryState`. Precedence is worst-case
+ * fail-closed: any claim `unverified` ⇒ the memory is `unverified` (even if other
+ * claims are provably stale); otherwise any claim `stale` ⇒ `stale`; otherwise
+ * `fresh`. A memory whose claims track nothing is always `fresh` (nothing to go
+ * stale) — same as `TheBrainV2.checkClaimFreshness` for an evidence-less claim.
+ *
+ * `contradicted` is not produced here: detecting two stored claims about the same
+ * subject diverging is not part of this lane's acceptance criteria (see plan §3,
+ * Lane C) — noted under lane-notes/C.md ## decisions.
+ */
+export function computeMemoryState(claims, currentEvidence) {
+    const resolver = new SuppliedEvidenceResolver(currentEvidence ?? { files: {}, symbols: {}, symbolsNormalized: {} });
+    const staleFiles = new Set();
+    const cosmeticChanges = new Set();
+    let anyUnverified = false;
+    let anyStale = false;
+    for (const claim of claims) {
+        const result = claimState(claim, resolver);
+        result.staleFiles.forEach((f) => staleFiles.add(f));
+        result.cosmeticChanges.forEach((f) => cosmeticChanges.add(f));
+        if (result.state === 'unverified')
+            anyUnverified = true;
+        else if (result.state === 'stale')
+            anyStale = true;
+    }
+    const state = anyUnverified ? 'unverified' : anyStale ? 'stale' : 'fresh';
+    return { state, staleFiles: [...staleFiles], cosmeticChanges: [...cosmeticChanges] };
+}
+/** POST /v2/memories */
+export function createMemoryHandler(deps) {
+    return async (req, res, next) => {
+        try {
+            const parsed = CreateMemoryRequestSchema.safeParse(req.body);
+            if (!parsed.success)
+                throw zodToApiError(parsed.error);
+            const body = parsed.data;
+            const claims = buildClaims(body);
+            const tenant = req.tenant;
+            const queryText = body.claims.map((c) => c.text).join(' ');
+            const stored = {
+                claims,
+                ...(body.derivedFrom ? { derivedFrom: body.derivedFrom } : {}),
+                query: queryText,
+                response: queryText,
+                createdAt: Date.now(),
+            };
+            const id = await deps.store.put(tenant.id, stored);
+            // Wire response is {id, claims: [{id, text}]} per openapi.yaml — the hashes in
+            // `claims` are the server's internal freshness state, never echoed back.
+            const response = {
+                id,
+                claims: claims.map((c) => ({ id: c.id, text: c.text })),
+            };
+            res.status(201).json(response);
+        }
+        catch (err) {
+            next(err);
+        }
+    };
+}
+/** DELETE /v2/memories/:id */
+export function forgetMemoryHandler(deps) {
+    return async (req, res, next) => {
+        try {
+            const tenant = req.tenant;
+            const id = req.params.id;
+            const existing = await deps.store.get(tenant.id, id);
+            if (!existing) {
+                // Same 404 whether the id never existed or belongs to another tenant —
+                // never reveal existence across tenant boundaries.
+                throw new LemmaApiError({ code: 'not_found', status: 404, message: 'memory not found' });
+            }
+            await deps.store.delete(tenant.id, id);
+            const response = { forged: [id] };
+            res.json(response);
+        }
+        catch (err) {
+            next(err);
+        }
+    };
+}
+export { isStoredMemory };
+export default createMemoryHandler;
+//# sourceMappingURL=memories.js.map

package/dist/esm/cloud/v2/routes/memories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memories.js","sourceRoot":"","sources":["../../../../../src/cloud/v2/routes/memories.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,CAAC,EAAiB,MAAM,KAAK,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAU1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,0DAA0D,CAAC;AAGpG,iFAAiF;AAEjF,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,CAAC;AAC7B,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,CAAC;AAClC,MAAM,CAAC,MAAM,cAAc,GAAG,OAAS,CAAC,CAAC,yCAAyC;AAElF,kFAAkF;AAElF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACzC,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAA+B,CAAC;AAEjC,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,MAAM,EAAE,CAAC;SACN,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QACzC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;KACxF,CAAC,CACH;SACA,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,UAAU,CAAC;IAClB,QAAQ,EAAE,cAAc;IACxB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAEH,oGAAoG;AACpG,MAAM,UAAU,aAAa,CAAC,KAAe;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,OAAO,IAAI,aAAa,CAAC;QACvB,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,iBAAiB;QAC3F,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAeD,SAAS,cAAc,CAAC,CAAU;IAChC,OAAO,CACL,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,KAAK,IAAI;QACV,KAAK,CAAC,OAAO,CAAE,CAAkB,CAAC,MAAM,CAAC,CAC1C,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,IAAyB;IACnD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3B,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,MAAM,YAAY,GAA2B,EAAE,CAAC;QAChD,MAAM,sBAAsB,GAA2B,EAAE,CAAC;QAE1D,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACpC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,IAAI,aAAa,CAAC;oBACtB,IAAI,EAAE,iBAAiB;oBACvB,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,6BAA6B,CAAC,yCAAyC;oBAChF,KAAK,EAAE,gBAAgB;iBACxB,CAAC,CAAC;YACL,CAAC;YACD,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QACvB,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,IAAI,aAAa,CAAC;oBACtB,IAAI,EAAE,iBAAiB;oBACvB,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,0BAA0B,GAAG,2CAA2C;oBACjF,KAAK,EAAE,kBAAkB;iBAC1B,CAAC,CAAC;YACL,CAAC;YACD,YAAY,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;YACzB,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACxD,IAAI,UAAU,KAAK,SAAS;gBAAE,sBAAsB,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;QACzE,CAAC;QAED,MAAM,KAAK,GAAgB;YACzB,EAAE,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;YAChG,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE;SACpB,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC;QACtE,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,YAAY,GAAG,YAAY,CAAC;QAC5E,IAAI,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,sBAAsB,GAAG,sBAAsB,CAAC;QAC1G,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAQD;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,KAAkB,EAAE,QAAkC;IACxE,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAChC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAC5F,CAAC;IAEF,KAAK,MAAM,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;QACrE,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,UAAU;YAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;QACzE,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChC,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACnD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,KAAK,UAAU;YAAE,SAAS;QACzC,MAAM,gBAAgB,GAAG,KAAK,CAAC,sBAAsB,EAAE,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,gBAAgB,IAAI,OAAO,CAAC,UAAU,KAAK,gBAAgB,EAAE,CAAC;YAChE,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,KAAK,GACT,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IACnF,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;AAChD,CAAC;AAQD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAqB,EAAE,eAAqC;IAC7F,MAAM,QAAQ,GAAG,IAAI,wBAAwB,CAC3C,eAAe,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,CACrE,CAAC;IAEF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC3C,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,KAAK,KAAK,YAAY;YAAE,aAAa,GAAG,IAAI,CAAC;aACnD,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO;YAAE,QAAQ,GAAG,IAAI,CAAC;IACrD,CAAC;IAED,MAAM,KAAK,GAAgB,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IACvF,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC,GAAG,eAAe,CAAC,EAAE,CAAC;AACvF,CAAC;AAQD,wBAAwB;AACxB,MAAM,UAAU,mBAAmB,CAAC,IAAkB;IACpD,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7D,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAA2B,CAAC;YAEhD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,MAAM,GAAI,GAA4B,CAAC,MAAM,CAAC;YACpD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAE3D,MAAM,MAAM,GAAiB;gBAC3B,MAAM;gBACN,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,SAAS;gBACnB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC;YAEF,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACnD,+EAA+E;YAC/E,yEAAyE;YACzE,MAAM,QAAQ,GAAyB;gBACrC,EAAE;gBACF,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;aACxD,CAAC;YACF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,8BAA8B;AAC9B,MAAM,UAAU,mBAAmB,CAAC,IAAkB;IACpD,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAI,GAA4B,CAAC,MAAM,CAAC;YACpD,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAEzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,uEAAuE;gBACvE,mDAAmD;gBACnD,MAAM,IAAI,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3F,CAAC;YAED,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAmB,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,cAAc,EAAE,CAAC;AAC1B,eAAe,mBAAmB,CAAC"}

package/dist/esm/cloud/v2/routes/recall.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Lemma API v2 — POST /v2/recall (Lane C)
+ *
+ * Search returning per-result freshness state. `searchCandidates` does the
+ * ranking (Lane B's BM25 store); this route only resolves each candidate's
+ * freshness against the client's `currentEvidence`, reusing the same
+ * fail-closed comparator as /v2/verify (see routes/memories.ts).
+ *
+ * Ownership: Lane C.
+ */
+import type { RequestHandler } from 'express';
+import { z } from 'zod';
+import type { BrainStore } from '../../../contracts/store';
+export declare const DEFAULT_RECALL_LIMIT = 10;
+export declare const MAX_RECALL_LIMIT = 100;
+export declare const RecallRequestSchema: z.ZodObject<{
+    query: z.ZodString;
+    currentEvidence: z.ZodOptional<z.ZodObject<{
+        files: z.ZodRecord<z.ZodString, z.ZodString>;
+        symbols: z.ZodRecord<z.ZodString, z.ZodString>;
+        symbolsNormalized: z.ZodRecord<z.ZodString, z.ZodString>;
+        branch: z.ZodOptional<z.ZodString>;
+        commit: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    limit: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export interface RecallDeps {
+    store: Pick<BrainStore, 'searchCandidates' | 'listByIds'>;
+}
+/** POST /v2/recall */
+export declare function recallHandler(deps: RecallDeps): RequestHandler;
+export default recallHandler;
+//# sourceMappingURL=recall.d.ts.map

package/dist/esm/cloud/v2/routes/recall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recall.d.ts","sourceRoot":"","sources":["../../../../../src/cloud/v2/routes/recall.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAI3D,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,eAAO,MAAM,gBAAgB,MAAM,CAAC;AAEpC,eAAO,MAAM,mBAAmB;;;;;;;;;;iBAI9B,CAAC;AAEH,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,kBAAkB,GAAG,WAAW,CAAC,CAAC;CAC3D;AAED,sBAAsB;AACtB,wBAAgB,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,cAAc,CA2C9D;AAED,eAAe,aAAa,CAAC"}

package/dist/esm/cloud/v2/routes/recall.js

@@ -0,0 +1,47 @@
+import { z } from 'zod';
+import { computeMemoryState, EvidenceSchema, isStoredMemory, zodToApiError } from './memories';
+export const DEFAULT_RECALL_LIMIT = 10;
+export const MAX_RECALL_LIMIT = 100;
+export const RecallRequestSchema = z.object({
+    query: z.string().min(1),
+    currentEvidence: EvidenceSchema.optional(),
+    limit: z.number().int().positive().max(MAX_RECALL_LIMIT).optional(),
+});
+/** POST /v2/recall */
+export function recallHandler(deps) {
+    return async (req, res, next) => {
+        try {
+            const parsed = RecallRequestSchema.safeParse(req.body);
+            if (!parsed.success)
+                throw zodToApiError(parsed.error);
+            const body = parsed.data;
+            const tenant = req.tenant;
+            const limit = body.limit ?? DEFAULT_RECALL_LIMIT;
+            const candidates = await deps.store.searchCandidates(tenant.id, body.query, limit);
+            const memories = await deps.store.listByIds(tenant.id, candidates.map((c) => c.id));
+            const results = [];
+            for (const candidate of candidates) {
+                const memory = memories.get(candidate.id);
+                // Scoped to the same tenant that searchCandidates just scoped to; a miss
+                // here means it was deleted between the two calls — skip it rather than
+                // invent a state for an id that no longer resolves.
+                if (!isStoredMemory(memory))
+                    continue;
+                const { state, staleFiles, cosmeticChanges } = computeMemoryState(memory.claims, body.currentEvidence);
+                results.push({
+                    id: candidate.id,
+                    state,
+                    ...(staleFiles.length > 0 ? { staleFiles } : {}),
+                    ...(cosmeticChanges.length > 0 ? { cosmeticChanges } : {}),
+                });
+            }
+            const response = { results, query: body.query };
+            res.json(response);
+        }
+        catch (err) {
+            next(err);
+        }
+    };
+}
+export default recallHandler;
+//# sourceMappingURL=recall.js.map

package/dist/esm/cloud/v2/routes/recall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recall.js","sourceRoot":"","sources":["../../../../../src/cloud/v2/routes/recall.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAqB,MAAM,YAAY,CAAC;AAElH,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AACvC,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAEpC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,eAAe,EAAE,cAAc,CAAC,QAAQ,EAAE;IAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;CACpE,CAAC,CAAC;AAMH,sBAAsB;AACtB,MAAM,UAAU,aAAa,CAAC,IAAgB;IAC5C,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvD,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAqB,CAAC;YAE1C,MAAM,MAAM,GAAI,GAA4B,CAAC,MAAM,CAAC;YACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,oBAAoB,CAAC;YAEjD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACnF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CACzC,MAAM,CAAC,EAAE,EACT,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC5B,CAAC;YAEF,MAAM,OAAO,GAAqB,EAAE,CAAC;YACrC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAC1C,yEAAyE;gBACzE,wEAAwE;gBACxE,oDAAoD;gBACpD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;oBAAE,SAAS;gBAEtC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,kBAAkB,CAC9D,MAAuB,CAAC,MAAM,EAC/B,IAAI,CAAC,eAAe,CACrB,CAAC;gBAEF,OAAO,CAAC,IAAI,CAAC;oBACX,EAAE,EAAE,SAAS,CAAC,EAAE;oBAChB,KAAK;oBACL,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChD,GAAG,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC3D,CAAC,CAAC;YACL,CAAC;YAED,MAAM,QAAQ,GAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,eAAe,aAAa,CAAC"}

package/dist/esm/cloud/v2/routes/scrub.d.ts

@@ -0,0 +1,13 @@
+import type { ScrubRequest, ScrubResponse } from "../../../contracts/api-v2.types";
+import { StatelessScrubber } from "../../scrub";
+export interface ScrubRouter {
+    method: "POST";
+    path: "/v2/scrub";
+    /** Process a parsed request body. Throws LemmaApiError on invalid requests. */
+    handle(body: ScrubRequest): ScrubResponse;
+    /** Fully self-contained scrub adapter (exposed for direct use and tests). */
+    scrubber: StatelessScrubber;
+}
+export declare function scrubRouter(): ScrubRouter;
+export default scrubRouter;
+//# sourceMappingURL=scrub.d.ts.map

package/dist/esm/cloud/v2/routes/scrub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrub.d.ts","sourceRoot":"","sources":["../../../../../src/cloud/v2/routes/scrub.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EACV,YAAY,EACZ,aAAa,EACd,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,WAAW,CAAC;IAClB,+EAA+E;IAC/E,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,aAAa,CAAC;IAC1C,6EAA6E;IAC7E,QAAQ,EAAE,iBAAiB,CAAC;CAC7B;AAED,wBAAgB,WAAW,IAAI,WAAW,CAgEzC;AAED,eAAe,WAAW,CAAC"}

package/dist/esm/cloud/v2/routes/scrub.js

@@ -0,0 +1,79 @@
+/**
+ * Lemma API v2 — POST /v2/scrub (Lane F)
+ *
+ * Stateless privacy firewall endpoint: text (or serialized agent tool-call JSON)
+ * in → scrubbed text out + an inventory of `{ type, offset, length }` findings.
+ *
+ *   - mode="mask"   (default) rewrites the payload, redacting secrets.
+ *   - mode="detect" returns the payload untouched and only reports findings.
+ *
+ * ZERO persistence of the payload; the body and any detected secret value never
+ * appear in responses or logs.
+ *
+ * Framework coupling: the /v2 HTTP layer is owned by Lane C (mountRoutes). This
+ * router is framework-agnostic on purpose — Lane C wires the parsed JSON body
+ * into `handle(body)` and maps throws to HTTP. See lane-notes/F.md ## handoff.
+ *
+ * Ownership: Lane F.
+ */
+import { LemmaApiError } from "../../../contracts/errors";
+import { StatelessScrubber } from "../../scrub";
+export function scrubRouter() {
+    const scrubber = new StatelessScrubber();
+    const handle = (body) => {
+        if (body === null || typeof body !== "object" || Array.isArray(body)) {
+            throw new LemmaApiError({
+                code: "invalid_request",
+                status: 400,
+                message: "request body must be a JSON object",
+            });
+        }
+        const mode = body.mode ?? "mask";
+        if (mode !== "mask" && mode !== "detect") {
+            throw new LemmaApiError({
+                code: "invalid_request",
+                status: 400,
+                message: `mode must be "mask" or "detect", got: ${String(mode)}`,
+                field: "mode",
+            });
+        }
+        const hasText = typeof body.text === "string";
+        const hasJson = typeof body.toolCallJson === "string";
+        if (!hasText && !hasJson) {
+            throw new LemmaApiError({
+                code: "invalid_request",
+                status: 400,
+                message: 'provide at least one of "text" or "toolCallJson"',
+                field: "text",
+            });
+        }
+        const findings = [];
+        const res = { findings };
+        if (hasText) {
+            const out = scrubber.scrub(body.text, mode);
+            res.text = out.text;
+            findings.push(...out.findings);
+        }
+        if (hasJson) {
+            const raw = body.toolCallJson;
+            let out;
+            try {
+                out = scrubber.scrubToolCallJson(raw, mode);
+            }
+            catch {
+                throw new LemmaApiError({
+                    code: "invalid_request",
+                    status: 400,
+                    message: "toolCallJson is not valid JSON",
+                    field: "toolCallJson",
+                });
+            }
+            res.toolCallJson = out.toolCallJson;
+            findings.push(...out.findings);
+        }
+        return res;
+    };
+    return { method: "POST", path: "/v2/scrub", handle, scrubber };
+}
+export default scrubRouter;
+//# sourceMappingURL=scrub.js.map

package/dist/esm/cloud/v2/routes/scrub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrub.js","sourceRoot":"","sources":["../../../../../src/cloud/v2/routes/scrub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAK1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAWhD,MAAM,UAAU,WAAW;IACzB,MAAM,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAEzC,MAAM,MAAM,GAAG,CAAC,IAAkB,EAAiB,EAAE;QACnD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,aAAa,CAAC;gBACtB,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,oCAAoC;aAC9C,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC;QACjC,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzC,MAAM,IAAI,aAAa,CAAC;gBACtB,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,yCAAyC,MAAM,CAAC,IAAI,CAAC,EAAE;gBAChE,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;QAC9C,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC;QAEtD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,aAAa,CAAC;gBACtB,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,kDAAkD;gBAC3D,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAA8B,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAkB,EAAE,QAAQ,EAAE,CAAC;QAExC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAe,EAAE,IAAI,CAAC,CAAC;YACvD,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,IAAI,CAAC,YAAuB,CAAC;YACzC,IAAI,GAAG,CAAC;YACR,IAAI,CAAC;gBACH,GAAG,GAAG,QAAQ,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,aAAa,CAAC;oBACtB,IAAI,EAAE,iBAAiB;oBACvB,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,gCAAgC;oBACzC,KAAK,EAAE,cAAc;iBACtB,CAAC,CAAC;YACL,CAAC;YACD,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACjE,CAAC;AAED,eAAe,WAAW,CAAC"}

package/dist/esm/cloud/v2/routes/usage.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Lemma API v2 — GET /v2/usage (Lane C)
+ *
+ * Real metering: Lane E owns the ledger and its `computeUsage` math, this route
+ * only scopes the query to the authenticated tenant and reports it verbatim.
+ * Never adds, estimates or rounds a number here.
+ *
+ * Ownership: Lane C.
+ */
+import type { RequestHandler } from 'express';
+import type { UsageLedger } from '../../metering';
+export interface UsageDeps {
+    usageLedger: Pick<UsageLedger, 'computeUsage'>;
+}
+/** GET /v2/usage */
+export declare function usageHandler(deps: UsageDeps): RequestHandler;
+export default usageHandler;
+//# sourceMappingURL=usage.d.ts.map

package/dist/esm/cloud/v2/routes/usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../../../../../src/cloud/v2/routes/usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAGlD,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;CAChD;AAED,oBAAoB;AACpB,wBAAgB,YAAY,CAAC,IAAI,EAAE,SAAS,GAAG,cAAc,CAU5D;AAED,eAAe,YAAY,CAAC"}

package/dist/esm/cloud/v2/routes/usage.js

@@ -0,0 +1,15 @@
+/** GET /v2/usage */
+export function usageHandler(deps) {
+    return async (req, res, next) => {
+        try {
+            const tenant = req.tenant;
+            const report = await deps.usageLedger.computeUsage({ tenantId: tenant.id });
+            res.json(report);
+        }
+        catch (err) {
+            next(err);
+        }
+    };
+}
+export default usageHandler;
+//# sourceMappingURL=usage.js.map

package/dist/esm/cloud/v2/routes/usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.js","sourceRoot":"","sources":["../../../../../src/cloud/v2/routes/usage.ts"],"names":[],"mappings":"AAkBA,oBAAoB;AACpB,MAAM,UAAU,YAAY,CAAC,IAAe;IAC1C,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAI,GAA4B,CAAC,MAAM,CAAC;YACpD,MAAM,MAAM,GAAkB,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3F,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,eAAe,YAAY,CAAC"}

package/dist/esm/cloud/v2/routes/verify.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Lemma API v2 — POST /v2/verify (Lane C)
+ *
+ * Batch ids + currentEvidence → per-id state, no search round trip. `currentEvidence`
+ * is required by the frozen contract (docs/api/openapi.yaml VerifyRequest) — unlike
+ * /v2/recall there is no "no evidence supplied" case to default.
+ *
+ * An id that doesn't resolve (unknown, or owned by another tenant — `listByIds` is
+ * tenant-scoped so both look identical) maps to `unverified`. `MemoryState` (frozen
+ * in src/contracts/api-v2.types.ts) has no `unknown` member, so this is the
+ * fail-closed answer within the actual contract, and it never reveals whether the
+ * id exists under a different tenant.
+ *
+ * Ownership: Lane C.
+ */
+import type { RequestHandler } from 'express';
+import { z } from 'zod';
+import type { BrainStore } from '../../../contracts/store';
+export declare const VerifyRequestSchema: z.ZodObject<{
+    ids: z.ZodArray<z.ZodString>;
+    currentEvidence: z.ZodObject<{
+        files: z.ZodRecord<z.ZodString, z.ZodString>;
+        symbols: z.ZodRecord<z.ZodString, z.ZodString>;
+        symbolsNormalized: z.ZodRecord<z.ZodString, z.ZodString>;
+        branch: z.ZodOptional<z.ZodString>;
+        commit: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export interface VerifyDeps {
+    store: Pick<BrainStore, 'listByIds'>;
+}
+/** POST /v2/verify */
+export declare function verifyHandler(deps: VerifyDeps): RequestHandler;
+export default verifyHandler;
+//# sourceMappingURL=verify.d.ts.map

package/dist/esm/cloud/v2/routes/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../../../src/cloud/v2/routes/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAI3D,eAAO,MAAM,mBAAmB;;;;;;;;;iBAG9B,CAAC;AAEH,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;CACtC;AAED,sBAAsB;AACtB,wBAAgB,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,cAAc,CAmC9D;AAED,eAAe,aAAa,CAAC"}

package/dist/esm/cloud/v2/routes/verify.js

@@ -0,0 +1,39 @@
+import { z } from 'zod';
+import { computeMemoryState, EvidenceSchema, isStoredMemory, MAX_VERIFY_IDS, zodToApiError } from './memories';
+export const VerifyRequestSchema = z.object({
+    ids: z.array(z.string().min(1)).min(1).max(MAX_VERIFY_IDS),
+    currentEvidence: EvidenceSchema,
+});
+/** POST /v2/verify */
+export function verifyHandler(deps) {
+    return async (req, res, next) => {
+        try {
+            const parsed = VerifyRequestSchema.safeParse(req.body);
+            if (!parsed.success)
+                throw zodToApiError(parsed.error);
+            const body = parsed.data;
+            const tenant = req.tenant;
+            const memories = await deps.store.listByIds(tenant.id, body.ids);
+            const results = body.ids.map((id) => {
+                const memory = memories.get(id);
+                if (!isStoredMemory(memory)) {
+                    return { id, state: 'unverified' };
+                }
+                const { state, staleFiles, cosmeticChanges } = computeMemoryState(memory.claims, body.currentEvidence);
+                return {
+                    id,
+                    state,
+                    ...(staleFiles.length > 0 ? { staleFiles } : {}),
+                    ...(cosmeticChanges.length > 0 ? { cosmeticChanges } : {}),
+                };
+            });
+            const response = { results };
+            res.json(response);
+        }
+        catch (err) {
+            next(err);
+        }
+    };
+}
+export default verifyHandler;
+//# sourceMappingURL=verify.js.map

package/dist/esm/cloud/v2/routes/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../../../../src/cloud/v2/routes/verify.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAqB,MAAM,YAAY,CAAC;AAElI,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;IAC1D,eAAe,EAAE,cAAc;CAChC,CAAC,CAAC;AAMH,sBAAsB;AACtB,MAAM,UAAU,aAAa,CAAC,IAAgB;IAC5C,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvD,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAqB,CAAC;YAE1C,MAAM,MAAM,GAAI,GAA4B,CAAC,MAAM,CAAC;YACpD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAEjE,MAAM,OAAO,GAAqB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;gBACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;gBACrC,CAAC;gBAED,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,kBAAkB,CAC9D,MAAuB,CAAC,MAAM,EAC/B,IAAI,CAAC,eAAe,CACrB,CAAC;gBAEF,OAAO;oBACL,EAAE;oBACF,KAAK;oBACL,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChD,GAAG,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC3D,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAmB,EAAE,OAAO,EAAE,CAAC;YAC7C,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,eAAe,aAAa,CAAC"}

package/dist/esm/cloud/v2/server.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Lemma API v2 — HTTP server (Lane C)
+ *
+ * Boots the /v2 app alongside, and without touching, the intact v1 server
+ * (src/cloud/server.ts:42 listens on LEMMA_CLOUD_PORT/3100 — untouched). v2
+ * listens on its own port so both can run side by side during the swarm cutover.
+ *
+ * Wiring: DATABASE_URL present ⇒ Postgres-backed store/identity/rate-limiter
+ * (Lane B / Lane D); absent ⇒ local file-backed store + in-memory identity/rate
+ * limiter, so `startV2Server()` also works with zero external services for dev.
+ *
+ * KNOWN GAP (see lane-notes/C.md ## handoff): UsageLedger has no durable backend
+ * yet (Lane E ships only `InMemoryLedgerStore`) — usage counters reset on
+ * restart until a Postgres-backed `AppendOnlyStore` lands.
+ *
+ * Ownership: Lane C.
+ */
+import type { Server } from 'http';
+export interface StartV2ServerOptions {
+    port?: number;
+    /** Overrides the DATABASE_URL-presence check — pass explicitly in tests. */
+    databaseUrl?: string;
+}
+/** Starts the /v2 HTTP server. Resolves with the underlying `http.Server` once listening. */
+export declare function startV2Server(options?: StartV2ServerOptions): Promise<Server>;
+export default startV2Server;
+//# sourceMappingURL=server.d.ts.map

package/dist/esm/cloud/v2/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../../src/cloud/v2/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAcnC,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AA6BD,6FAA6F;AAC7F,wBAAgB,aAAa,CAAC,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAAC,MAAM,CAAC,CAYjF;AAED,eAAe,aAAa,CAAC"}