@pellux/goodvibes-daemon-sdk 0.33.37 → 0.33.38

package/dist/integration-route-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"integration-route-types.d.ts","sourceRoot":"","sources":["../src/integration-route-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,YAAY,EAAE,kBAAkB,EAAE,CAAC;AAEnC,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,IAAI;QACV,QAAQ,CAAC,UAAU,EAAE;YACnB,QAAQ,CAAC,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SACjD,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,4BAA4B;IAC3C,WAAW,IAAI,OAAO,CAAC;IACvB,kBAAkB,IAAI,OAAO,CAAC;IAC9B,eAAe,IAAI,OAAO,CAAC;IAC3B,qBAAqB,IAAI,OAAO,CAAC;IACjC,wBAAwB,IAAI,OAAO,CAAC;IACpC,mBAAmB,IAAI,OAAO,CAAC;IAC/B,gBAAgB,IAAI,OAAO,CAAC;IAC5B,iBAAiB,IAAI,OAAO,CAAC;IAC7B,iBAAiB,IAAI,OAAO,CAAC;IAC7B,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,mBAAmB,IAAI,OAAO,CAAC;IAC/B,yBAAyB,IAAI,OAAO,CAAC;IACrC,qBAAqB,IAAI,OAAO,CAAC;IACjC,mBAAmB,IAAI,OAAO,CAAC;IAC/B,uBAAuB,IAAI,OAAO,CAAC;IACnC,oBAAoB,IAAI,OAAO,CAAC;IAChC,UAAU,IAAI,SAAS,OAAO,EAAE,CAAC;IACjC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC5D,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,kBAAkB,EAAE,GAAG,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtG,eAAe,IAAI,2BAA2B,GAAG,IAAI,CAAC;CACvD;AAED,MAAM,WAAW,0BAA0B;IACzC,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,kCAAkC;IACjD,aAAa,IAAI,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IAC7C,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACzD,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3B,WAAW,IAAI,OAAO,CAAC;IACvB,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,2BAA2B;IAC1C,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9C;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC;IAC/E,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IACtC,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACzD,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1C,4BAA4B,IAAI,OAAO,CAAC;CACzC;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,cAAc,EAAE,0BAA0B,CAAC;IACpD,QAAQ,CAAC,kBAAkB,EAAE,4BAA4B,GAAG,IAAI,CAAC;IACjE,QAAQ,CAAC,uBAAuB,EAAE,2BAA2B,CAAC;IAC9D,QAAQ,CAAC,cAAc,EAAE,kBAAkB,CAAC;IAC5C,QAAQ,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC;IACzE,QAAQ,CAAC,eAAe,EAAE,kCAAkC,CAAC;IAC7D,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,QAAQ,GAAG,IAAI,CAAC;IACzD,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;CACxC"}
+{"version":3,"file":"integration-route-types.d.ts","sourceRoot":"","sources":["../src/integration-route-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,YAAY,EAAE,kBAAkB,EAAE,CAAC;AAEnC,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,IAAI;QACV,QAAQ,CAAC,UAAU,EAAE;YACnB,QAAQ,CAAC,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SACjD,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,4BAA4B;IAC3C,WAAW,IAAI,OAAO,CAAC;IACvB,kBAAkB,IAAI,OAAO,CAAC;IAC9B,eAAe,IAAI,OAAO,CAAC;IAC3B,qBAAqB,IAAI,OAAO,CAAC;IACjC,wBAAwB,IAAI,OAAO,CAAC;IACpC,mBAAmB,IAAI,OAAO,CAAC;IAC/B,gBAAgB,IAAI,OAAO,CAAC;IAC5B,iBAAiB,IAAI,OAAO,CAAC;IAC7B,iBAAiB,IAAI,OAAO,CAAC;IAC7B,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,mBAAmB,IAAI,OAAO,CAAC;IAC/B,yBAAyB,IAAI,OAAO,CAAC;IACrC,qBAAqB,IAAI,OAAO,CAAC;IACjC,mBAAmB,IAAI,OAAO,CAAC;IAC/B,uBAAuB,IAAI,OAAO,CAAC;IACnC,oBAAoB,IAAI,OAAO,CAAC;IAChC,UAAU,IAAI,SAAS,OAAO,EAAE,CAAC;IACjC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC5D,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,kBAAkB,EAAE,GAAG,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtG,eAAe,IAAI,2BAA2B,GAAG,IAAI,CAAC;CACvD;AAED,MAAM,WAAW,0BAA0B;IACzC,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,kCAAkC;IACjD,aAAa,IAAI,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IAC7C,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACzD,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3B,WAAW,IAAI,OAAO,CAAC;IACvB,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,WAAW,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,EAAE,CAAC;CACxD;AAED,MAAM,WAAW,2BAA2B;IAC1C,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9C;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC;IAC/E,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IACtC,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACzD,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1C,4BAA4B,IAAI,OAAO,CAAC;CACzC;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,cAAc,EAAE,0BAA0B,CAAC;IACpD,QAAQ,CAAC,kBAAkB,EAAE,4BAA4B,GAAG,IAAI,CAAC;IACjE,QAAQ,CAAC,uBAAuB,EAAE,2BAA2B,CAAC;IAC9D,QAAQ,CAAC,cAAc,EAAE,kBAAkB,CAAC;IAC5C,QAAQ,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC;IACzE,QAAQ,CAAC,eAAe,EAAE,kCAAkC,CAAC;IAC7D,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,QAAQ,GAAG,IAAI,CAAC;IACzD,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;CACxC"}

package/dist/integration-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"integration-routes.d.ts","sourceRoot":"","sources":["../src/integration-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,cAAc,CAAC;AAEnE,OAAO,KAAK,EAAE,6BAA6B,EAAoD,MAAM,8BAA8B,CAAC;AA6DpI,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,6BAA6B,GACrC,8BAA8B,CA4IhC"}
+{"version":3,"file":"integration-routes.d.ts","sourceRoot":"","sources":["../src/integration-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,cAAc,CAAC;AAEnE,OAAO,KAAK,EAAE,6BAA6B,EAAoD,MAAM,8BAA8B,CAAC;AA8DpI,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,6BAA6B,GACrC,8BAA8B,CAqJhC"}

package/dist/integration-routes.js

@@ -1,5 +1,5 @@
 import { jsonErrorResponse } from './error-response.js';
-import { createRouteBodySchema, createRouteBodySchemaRegistry, readOptionalStringField, readStringArrayField, } from './route-helpers.js';
+import { createRouteBodySchema, createRouteBodySchemaRegistry, readBoundedPositiveInteger, readOptionalStringField, readStringArrayField, } from './route-helpers.js';
 const MAX_LOCAL_AUTH_ROLES = 32;
 const integrationBodySchemas = createRouteBodySchemaRegistry({
     embeddingDefault: createRouteBodySchema('POST /api/memory/embedding/default', (body) => {
@@ -43,7 +43,7 @@ export function createDaemonIntegrationRouteHandlers(context) {
         getIntegrationSession: () => withHelpers(context.integrationHelpers, (helpers) => Response.json(helpers.getSessionSnapshot())),
         getIntegrationTasks: () => withHelpers(context.integrationHelpers, (helpers) => Response.json(helpers.getTaskSnapshot())),
         getIntegrationAutomation: () => withHelpers(context.integrationHelpers, (helpers) => Response.json(helpers.getAutomationSnapshot())),
-        getIntegrationSessions: () => withHelpers(context.integrationHelpers, (helpers) => Response.json(helpers.getSessionBrokerSnapshot())),
+        getIntegrationSessions: (url) => handleGetIntegrationSessions(context.integrationHelpers, url),
         getDeliveries: () => withHelpers(context.integrationHelpers, (helpers) => Response.json(helpers.getDeliverySnapshot())),
         getDelivery: (deliveryId) => {
             const runtimeStore = context.integrationHelpers?.getRuntimeStore() ?? null;
@@ -84,6 +84,15 @@ export function createDaemonIntegrationRouteHandlers(context) {
         getIntelligence: () => withHelpers(context.integrationHelpers, (helpers) => Response.json(helpers.getIntelligenceSnapshot())),
         getMemoryDoctor: async () => Response.json(await context.memoryRegistry.doctor()),
         getMemoryVectorStats: () => Response.json({ vector: context.memoryRegistry.vectorStats() }),
+        getMemoryReviewQueue: (url) => {
+            const limit = readBoundedPositiveInteger(url.searchParams.get('limit'), 10, 1_000);
+            const rawScope = url.searchParams.get('scope');
+            if (rawScope !== null && rawScope !== 'session' && rawScope !== 'project' && rawScope !== 'team') {
+                return jsonErrorResponse({ error: `Invalid scope: ${rawScope}. Allowed: session, project, team` }, { status: 400 });
+            }
+            const scope = rawScope ?? undefined;
+            return Response.json({ records: context.memoryRegistry.reviewQueue(limit, scope) });
+        },
         postMemoryVectorRebuild: async (req) => {
             const admin = context.requireAdmin(req);
             if (admin)
@@ -204,3 +213,19 @@ function withHelpers(helpers, run) {
     }
     return run(helpers);
 }
+/**
+ * Handle GET /api/sessions.
+ *
+ * Returns the session broker snapshot from the integration helper service.
+ * Pagination (`?limit=` / `?cursor=`) is not supported on this endpoint —
+ * `IntegrationHelperServiceLike` is a consumer-supplied structural interface
+ * whose concrete implementation lives outside daemon-sdk and cannot be
+ * range-queried here.  Requests containing pagination params receive the
+ * same snapshot response as non-paginated requests (backward compatible).
+ */
+function handleGetIntegrationSessions(helpers, _url) {
+    if (!helpers) {
+        return jsonErrorResponse({ error: 'Integration helper service unavailable' }, { status: 503 });
+    }
+    return Response.json(helpers.getSessionBrokerSnapshot());
+}

package/dist/knowledge-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"knowledge-routes.d.ts","sourceRoot":"","sources":["../src/knowledge-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAmBjE,OAAO,KAAK,EAEV,2BAA2B,EAM5B,MAAM,4BAA4B,CAAC;AAwCpC,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,2BAA2B,GACnC,4BAA4B,CAyK9B"}
+{"version":3,"file":"knowledge-routes.d.ts","sourceRoot":"","sources":["../src/knowledge-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAoBjE,OAAO,KAAK,EAEV,2BAA2B,EAM5B,MAAM,4BAA4B,CAAC;AAwCpC,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,2BAA2B,GACnC,4BAA4B,CA+J9B"}

package/dist/knowledge-routes.js

@@ -1,6 +1,7 @@
 import { buildMissingScopeBody, resolvePrivateHostFetchOptions, } from './http-policy.js';
 import { GoodVibesSdkError, DaemonErrorCategory } from '@pellux/goodvibes-errors';
 import { jsonErrorResponse } from './error-response.js';
+import { paginateItems, hasPaginationParams } from './pagination.js';
 import { createArtifactFromUploadRequest, isArtifactUploadRequest } from './artifact-upload.js';
 import { createRouteBodySchema, createRouteBodySchemaRegistry, readBoundedBodyInteger, readBoundedPositiveInteger, readOptionalBoundedInteger, readOptionalStringField, readStringArrayField, } from './route-helpers.js';
 import { createDaemonKnowledgeRefinementRouteHandlers } from './knowledge-refinement-routes.js';
@@ -8,18 +9,8 @@ const MAX_KNOWLEDGE_INGEST_TAGS = 64;
 export function createDaemonKnowledgeRouteHandlers(context) {
     return {
         getKnowledgeStatus: async (url) => Response.json(await context.knowledgeService.getStatus(readKnowledgeSpaceQuery(url))),
-        getKnowledgeSources: async (url) => Response.json({
-            sources: context.knowledgeService.querySources({
-                limit: readLimit(url, 100),
-                ...readKnowledgeSpaceQuery(url),
-            }).items,
-        }),
-        getKnowledgeNodes: async (url) => Response.json({
-            nodes: context.knowledgeService.queryNodes({
-                limit: readLimit(url, 100),
-                ...readKnowledgeSpaceQuery(url),
-            }).items,
-        }),
+        getKnowledgeSources: async (url) => handleGetKnowledgeSources(context, url),
+        getKnowledgeNodes: async (url) => handleGetKnowledgeNodes(context, url),
         getKnowledgeIssues: async (url) => Response.json({
             issues: context.knowledgeService.queryIssues({
                 limit: readLimit(url, 100),
@@ -682,8 +673,15 @@ async function handleKnowledgeReviewIssue(context, id, request) {
     }
     catch (error) {
         // map status from error code, not English-prefix match.
-        const isNotFound = error instanceof Error && (error.code === 'NOT_FOUND'
-            || error.code === 'KNOWLEDGE_ISSUE_NOT_FOUND');
+        const isNotFound = error instanceof Error && (
+        // Domain-specific not-found codes are always explicit (never auto-inferred).
+        error.code === 'KNOWLEDGE_ISSUE_NOT_FOUND'
+            // Bare NOT_FOUND only maps to 404 when the error carries an actual HTTP 404
+            // status, preventing auto-inferred NOT_FOUND from category-only errors
+            // (which now always have code='NOT_FOUND' via inferCodeFromCategory)
+            // from silently becoming 404 responses.
+            || (error.code === 'NOT_FOUND'
+                && error.status === 404));
         return jsonErrorResponse(error, { status: isNotFound ? 404 : 400 });
     }
 }
@@ -710,8 +708,15 @@ async function handleKnowledgeDecideCandidate(context, id, request) {
     }
     catch (error) {
         // map status from error code, not English-prefix match.
-        const isNotFound = error instanceof Error && (error.code === 'NOT_FOUND'
-            || error.code === 'KNOWLEDGE_CANDIDATE_NOT_FOUND');
+        const isNotFound = error instanceof Error && (
+        // Domain-specific not-found codes are always explicit (never auto-inferred).
+        error.code === 'KNOWLEDGE_CANDIDATE_NOT_FOUND'
+            // Bare NOT_FOUND only maps to 404 when the error carries an actual HTTP 404
+            // status, preventing auto-inferred NOT_FOUND from category-only errors
+            // (which now always have code='NOT_FOUND' via inferCodeFromCategory)
+            // from silently becoming 404 responses.
+            || (error.code === 'NOT_FOUND'
+                && error.status === 404));
         return jsonErrorResponse(error, { status: isNotFound ? 404 : 400 });
     }
 }
@@ -732,8 +737,15 @@ async function handleKnowledgeRunJob(context, jobId, request) {
     }
     catch (error) {
         // map status from error code, not English-prefix match.
-        const isNotFound = error instanceof Error && (error.code === 'NOT_FOUND'
-            || error.code === 'KNOWLEDGE_JOB_NOT_FOUND');
+        const isNotFound = error instanceof Error && (
+        // Domain-specific not-found codes are always explicit (never auto-inferred).
+        error.code === 'KNOWLEDGE_JOB_NOT_FOUND'
+            // Bare NOT_FOUND only maps to 404 when the error carries an actual HTTP 404
+            // status, preventing auto-inferred NOT_FOUND from category-only errors
+            // (which now always have code='NOT_FOUND' via inferCodeFromCategory)
+            // from silently becoming 404 responses.
+            || (error.code === 'NOT_FOUND'
+                && error.status === 404));
         return jsonErrorResponse(error, { status: isNotFound ? 404 : 400 });
     }
 }
@@ -815,3 +827,98 @@ async function handleKnowledgeMaterializeProjection(context, request) {
         return jsonErrorResponse(error, { status: 400 });
     }
 }
+/** Extract the `id` from an opaque knowledge item (sources/nodes are `unknown` at the SDK boundary). */
+function extractKnowledgeItemId(item) {
+    if (typeof item === 'object' && item !== null && 'id' in item) {
+        const id = item.id;
+        return typeof id === 'string' ? id : undefined;
+    }
+    return undefined;
+}
+/**
+ * Extract the `updatedAt` timestamp from an opaque knowledge item for cursor-based
+ * pagination recovery.
+ *
+ * Knowledge source and node records carry a `readonly updatedAt: number` field
+ * (see `KnowledgeSourceRecord` / `KnowledgeNodeRecord` in
+ * `platform/knowledge/types.ts`).  The production store sorts both collections
+ * by `byUpdatedAtDesc` (newest-first by updatedAt), so the cursor's position
+ * key MUST encode `updatedAt` — not `createdAt` — to land at the correct
+ * insertion point after a mid-walk deletion.
+ *
+ * Semantic note: `updatedAt` mutates when an item is modified.  A mid-walk
+ * update moves the item to the front of the list (it gains a new updatedAt
+ * value) and its old position disappears — identical in effect to a deletion.
+ * The insertion-point scan (findIndex(ts < cursor.value)) handles this
+ * correctly: the old position is gone, so the scan skips past it naturally.
+ *
+ * Returns `undefined` when the field is absent or not a number (tolerant of
+ * missing values at the SDK boundary).
+ */
+function extractKnowledgeItemUpdatedAt(item) {
+    if (typeof item === 'object' && item !== null && 'updatedAt' in item) {
+        const ts = item.updatedAt;
+        return typeof ts === 'number' ? ts : undefined;
+    }
+    return undefined;
+}
+/**
+ * Handle GET /api/knowledge/sources.
+ *
+ * Without pagination params (`?limit=` / `?cursor=`): returns `{ sources: [...] }` (backward compat).
+ * With pagination params: returns `PaginatedResponse`-shaped `{ items, nextCursor, hasMore }`.
+ *
+ * ### Fetch cap
+ * The knowledge store accepts a `limit` argument but does not support
+ * cursor/offset range queries — the full in-memory collection must be loaded to
+ * perform cursor-based slicing.  We cap the load at 5 000 items.  If the store
+ * grows beyond this, source-level pagination on the store API should be added
+ * and this cap raised accordingly.
+ */
+function handleGetKnowledgeSources(context, url) {
+    const spaceQuery = readKnowledgeSpaceQuery(url);
+    if (!hasPaginationParams(url)) {
+        const { items: sources } = context.knowledgeService.querySources({ limit: readLimit(url, 100), ...spaceQuery });
+        return Response.json({ sources });
+    }
+    const limit = readLimit(url, 100);
+    const rawCursor = url.searchParams.get('cursor');
+    // Load the full in-memory collection (capped at 5_000 — see JSDoc note above).
+    const { items: allItems } = context.knowledgeService.querySources({ limit: 5_000, ...spaceQuery });
+    const items = allItems;
+    const result = paginateItems(items, limit, rawCursor, (item) => extractKnowledgeItemId(item) ?? '', 
+    // NOTE: cursor position key encodes updatedAt (matches byUpdatedAtDesc store order).
+    extractKnowledgeItemUpdatedAt, { descending: true });
+    if ('error' in result) {
+        return jsonErrorResponse({ error: result.error }, { status: 400 });
+    }
+    return Response.json(result);
+}
+/**
+ * Handle GET /api/knowledge/nodes.
+ *
+ * Without pagination params (`?limit=` / `?cursor=`): returns `{ nodes: [...] }` (backward compat).
+ * With pagination params: returns `PaginatedResponse`-shaped `{ items, nextCursor, hasMore }`.
+ *
+ * ### Fetch cap
+ * Same limitation as `handleGetKnowledgeSources` — capped at 5 000 items.
+ */
+function handleGetKnowledgeNodes(context, url) {
+    const spaceQuery = readKnowledgeSpaceQuery(url);
+    if (!hasPaginationParams(url)) {
+        const { items: nodes } = context.knowledgeService.queryNodes({ limit: readLimit(url, 100), ...spaceQuery });
+        return Response.json({ nodes });
+    }
+    const limit = readLimit(url, 100);
+    const rawCursor = url.searchParams.get('cursor');
+    // Load the full in-memory collection (capped at 5_000 — see JSDoc note above).
+    const { items: allItems } = context.knowledgeService.queryNodes({ limit: 5_000, ...spaceQuery });
+    const items = allItems;
+    const result = paginateItems(items, limit, rawCursor, (item) => extractKnowledgeItemId(item) ?? '', 
+    // NOTE: cursor position key encodes updatedAt (matches byUpdatedAtDesc store order).
+    extractKnowledgeItemUpdatedAt, { descending: true });
+    if ('error' in result) {
+        return jsonErrorResponse({ error: result.error }, { status: 400 });
+    }
+    return Response.json(result);
+}

package/dist/operator.js

@@ -277,6 +277,8 @@ async function dispatchOperatorRoutesInner(req, handlers) {
         return handlers.postAutomationHeartbeat(req);
     if (pathname === '/api/memory/doctor' && method === 'GET')
         return handlers.getMemoryDoctor();
+    if (pathname === '/api/memory/review-queue' && method === 'GET')
+        return handlers.getMemoryReviewQueue(url);
     if (pathname === '/api/memory/vector' && method === 'GET')
         return handlers.getMemoryVectorStats();
     if (pathname === '/api/memory/vector/rebuild' && method === 'POST')

package/dist/pagination.d.ts

@@ -0,0 +1,110 @@
+/**
+ * Cursor-based pagination utilities for daemon route handlers.
+ *
+ * Cursor format: opaque base64url-encoded JSON `{id: string, createdAt: number}`
+ * encoding the stable sort position. Cursors remain valid across inserts
+ * (no offset-based pagination).
+ *
+ * @public
+ */
+/**
+ * Paginated response envelope. Returned by list endpoints that support
+ * cursor-based pagination.
+ *
+ * @public
+ */
+export interface PaginatedResponse<T> {
+    /** The page of items. */
+    readonly items: readonly T[];
+    /**
+     * Opaque cursor to pass as `?cursor=` to retrieve the next page.
+     * Absent when this is the last page.
+     */
+    readonly nextCursor?: string | undefined;
+    /** Whether there are more items beyond this page. */
+    readonly hasMore: boolean;
+}
+/** Internal cursor payload. @internal */
+interface CursorPayload {
+    readonly id: string;
+    readonly createdAt?: number | undefined;
+}
+/**
+ * Encode a cursor from a stable sort position.
+ *
+ * @param id - The item id used as the tiebreak.
+ * @param createdAt - Optional creation timestamp for secondary sort key.
+ * @returns Opaque base64url cursor string.
+ * @public
+ */
+export declare function encodeCursor(id: string, createdAt?: number): string;
+/**
+ * Decode an opaque cursor string.
+ *
+ * @param raw - The cursor string from `?cursor=`.
+ * @returns The decoded payload, or `null` if the cursor is invalid.
+ * @public
+ */
+export declare function decodeCursor(raw: string): CursorPayload | null;
+/**
+ * Options for `paginateItems`.
+ * @public
+ */
+export interface PaginateItemsOptions {
+    /**
+     * Set to `true` when items are sorted **descending** by `createdAt` (newest
+     * first).  This inverts the insertion-point comparison used during
+     * deleted-cursor recovery so that the correct position is found regardless
+     * of sort direction.  Defaults to `false` (ascending / oldest-first).
+     */
+    readonly descending?: boolean | undefined;
+}
+/**
+ * Apply cursor-based pagination to an already-sorted array of items.
+ *
+ * Items must be sorted in a stable order. The cursor encodes the last-seen
+ * item's `id` (and optionally `createdAt`). Items after the cursor position
+ * are returned.
+ *
+ * ### Deleted-cursor recovery (m3/m4)
+ * When the cursor's `id` is not found in the current page (i.e. the item was
+ * deleted mid-walk), the implementation falls back to the `createdAt`
+ * timestamp in the cursor to locate the insertion point.
+ *
+ * - **Ascending** (default, `options.descending` falsy): finds the first item
+ *   whose own `createdAt` is **strictly greater** than the cursor's
+ *   `createdAt`, then starts the page from that position.
+ * - **Descending** (`options.descending: true`): finds the first item whose
+ *   own `createdAt` is **strictly less** than the cursor's `createdAt`, which
+ *   is the correct forward position in a newest-first sequence.
+ *
+ * Without `createdAt` available in the cursor, recovery falls back to the
+ * first position (index 0) to avoid returning an empty page.
+ *
+ * Callers that need stable recovery across deletions should pass `getCreatedAt`
+ * and ensure cursors are encoded with `createdAt`.  Callers whose store sorts
+ * descending must also pass `options.descending: true`.
+ *
+ * @param items - Sorted array of all items.
+ * @param limit - Maximum number of items to return (already clamped by caller).
+ * @param rawCursor - Raw cursor string from the request (`?cursor=`).
+ * @param getId - Extract the item's id.
+ * @param getCreatedAt - Optional: extract the item's creation timestamp (ms since epoch).
+ * @param options - Optional pagination options (e.g. sort direction).
+ * @returns `PaginatedResponse<T>` or an error string for invalid cursors.
+ * @public
+ */
+export declare function paginateItems<T>(items: readonly T[], limit: number, rawCursor: string | null, getId: (item: T) => string, getCreatedAt?: (item: T) => number | undefined, options?: PaginateItemsOptions): PaginatedResponse<T> | {
+    readonly error: string;
+};
+/**
+ * Check whether the request URL contains pagination parameters.
+ *
+ * Used to distinguish backward-compatible (no params → plain array)
+ * from paginated (with params → `PaginatedResponse<T>`) calls.
+ *
+ * @public
+ */
+export declare function hasPaginationParams(url: URL): boolean;
+export {};
+//# sourceMappingURL=pagination.d.ts.map

package/dist/pagination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.d.ts","sourceRoot":"","sources":["../src/pagination.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,yBAAyB;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;IAC7B;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,yCAAyC;AACzC,UAAU,aAAa;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAKnE;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAoB9D;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAC3C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAC7B,KAAK,EAAE,SAAS,CAAC,EAAE,EACnB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM,EAC1B,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,MAAM,GAAG,SAAS,EAC9C,OAAO,CAAC,EAAE,oBAAoB,GAC7B,iBAAiB,CAAC,CAAC,CAAC,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CA8CnD;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAErD"}

package/dist/pagination.js

@@ -0,0 +1,136 @@
+/**
+ * Cursor-based pagination utilities for daemon route handlers.
+ *
+ * Cursor format: opaque base64url-encoded JSON `{id: string, createdAt: number}`
+ * encoding the stable sort position. Cursors remain valid across inserts
+ * (no offset-based pagination).
+ *
+ * @public
+ */
+/**
+ * Encode a cursor from a stable sort position.
+ *
+ * @param id - The item id used as the tiebreak.
+ * @param createdAt - Optional creation timestamp for secondary sort key.
+ * @returns Opaque base64url cursor string.
+ * @public
+ */
+export function encodeCursor(id, createdAt) {
+    const payload = createdAt !== undefined ? { id, createdAt } : { id };
+    const json = JSON.stringify(payload);
+    // base64url encode (no padding, URL-safe characters)
+    return Buffer.from(json, 'utf8').toString('base64url');
+}
+/**
+ * Decode an opaque cursor string.
+ *
+ * @param raw - The cursor string from `?cursor=`.
+ * @returns The decoded payload, or `null` if the cursor is invalid.
+ * @public
+ */
+export function decodeCursor(raw) {
+    try {
+        const json = Buffer.from(raw, 'base64url').toString('utf8');
+        const parsed = JSON.parse(json);
+        if (typeof parsed === 'object' &&
+            parsed !== null &&
+            'id' in parsed &&
+            typeof parsed.id === 'string') {
+            const p = parsed;
+            return {
+                id: p.id,
+                createdAt: typeof p.createdAt === 'number' ? p.createdAt : undefined,
+            };
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Apply cursor-based pagination to an already-sorted array of items.
+ *
+ * Items must be sorted in a stable order. The cursor encodes the last-seen
+ * item's `id` (and optionally `createdAt`). Items after the cursor position
+ * are returned.
+ *
+ * ### Deleted-cursor recovery (m3/m4)
+ * When the cursor's `id` is not found in the current page (i.e. the item was
+ * deleted mid-walk), the implementation falls back to the `createdAt`
+ * timestamp in the cursor to locate the insertion point.
+ *
+ * - **Ascending** (default, `options.descending` falsy): finds the first item
+ *   whose own `createdAt` is **strictly greater** than the cursor's
+ *   `createdAt`, then starts the page from that position.
+ * - **Descending** (`options.descending: true`): finds the first item whose
+ *   own `createdAt` is **strictly less** than the cursor's `createdAt`, which
+ *   is the correct forward position in a newest-first sequence.
+ *
+ * Without `createdAt` available in the cursor, recovery falls back to the
+ * first position (index 0) to avoid returning an empty page.
+ *
+ * Callers that need stable recovery across deletions should pass `getCreatedAt`
+ * and ensure cursors are encoded with `createdAt`.  Callers whose store sorts
+ * descending must also pass `options.descending: true`.
+ *
+ * @param items - Sorted array of all items.
+ * @param limit - Maximum number of items to return (already clamped by caller).
+ * @param rawCursor - Raw cursor string from the request (`?cursor=`).
+ * @param getId - Extract the item's id.
+ * @param getCreatedAt - Optional: extract the item's creation timestamp (ms since epoch).
+ * @param options - Optional pagination options (e.g. sort direction).
+ * @returns `PaginatedResponse<T>` or an error string for invalid cursors.
+ * @public
+ */
+export function paginateItems(items, limit, rawCursor, getId, getCreatedAt, options) {
+    let startIndex = 0;
+    if (rawCursor !== null) {
+        const decoded = decodeCursor(rawCursor);
+        if (!decoded) {
+            return { error: `Invalid cursor: ${rawCursor}` };
+        }
+        const afterIndex = items.findIndex((item) => getId(item) === decoded.id);
+        if (afterIndex === -1) {
+            // Cursor id not found — item was deleted mid-walk.
+            // Use createdAt from the cursor to locate the insertion point.
+            // For ascending sequences: first item with createdAt > cursor's createdAt.
+            // For descending sequences: first item with createdAt < cursor's createdAt.
+            // Without createdAt, restart from index 0.
+            if (decoded.createdAt !== undefined && getCreatedAt !== undefined) {
+                const descending = options?.descending === true;
+                const insertionIndex = items.findIndex((item) => {
+                    const ts = getCreatedAt(item);
+                    return descending
+                        ? ts !== undefined && ts < decoded.createdAt
+                        : ts !== undefined && ts > decoded.createdAt;
+                });
+                startIndex = insertionIndex === -1 ? items.length : insertionIndex;
+            }
+            else {
+                startIndex = 0;
+            }
+        }
+        else {
+            startIndex = afterIndex + 1;
+        }
+    }
+    const page = items.slice(startIndex, startIndex + limit);
+    const hasMore = startIndex + limit < items.length;
+    const lastItem = page[page.length - 1];
+    const nextCursor = hasMore && lastItem !== undefined
+        ? encodeCursor(getId(lastItem), getCreatedAt !== undefined ? getCreatedAt(lastItem) : undefined)
+        : undefined;
+    return { items: page, nextCursor, hasMore };
+}
+/**
+ * Check whether the request URL contains pagination parameters.
+ *
+ * Used to distinguish backward-compatible (no params → plain array)
+ * from paginated (with params → `PaginatedResponse<T>`) calls.
+ *
+ * @public
+ */
+export function hasPaginationParams(url) {
+    return url.searchParams.has('limit') || url.searchParams.has('cursor');
+}