@polpo-ai/server 0.15.40 → 0.15.42

package/dist/routes/memory-items.js

@@ -0,0 +1,362 @@
+import { Hono } from "hono";
+import { MEMORY_KINDS, MEMORY_STATUSES, MemoryAuthorizationError, MemoryConflictError, MemoryContractError, MemoryPolicyError, createMemoryItem, normalizeMemoryScope, } from "@polpo-ai/core";
+import { nanoid } from "nanoid";
+class InvalidMemoryRequestError extends Error {
+    constructor(message = "Invalid Memory request") {
+        super(message);
+        this.name = "InvalidMemoryRequestError";
+    }
+}
+const memoryKinds = new Set(MEMORY_KINDS);
+const memoryStatuses = new Set(MEMORY_STATUSES);
+const createKeys = new Set([
+    "id",
+    "scope",
+    "kind",
+    "content",
+    "summary",
+    "provenance",
+    "confidence",
+    "status",
+    "expiresAt",
+]);
+const patchKeys = new Set([
+    "content",
+    "summary",
+    "confidence",
+    "status",
+    "expiresAt",
+]);
+const listQueryKeys = new Set([
+    "kinds",
+    "statuses",
+    "scopeKind",
+    "scopeSubjectId",
+    "scopeAgentName",
+    "includeExpired",
+    "limit",
+]);
+const searchKeys = new Set([
+    "query",
+    "kinds",
+    "scope",
+    "tokenBudget",
+    "maxResults",
+]);
+function object(value, allowedKeys) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        throw new InvalidMemoryRequestError();
+    }
+    const record = value;
+    for (const key of Object.keys(record)) {
+        if (!allowedKeys.has(key)) {
+            throw new InvalidMemoryRequestError(`Unknown Memory field: ${key}`);
+        }
+    }
+    return record;
+}
+async function jsonObject(context, allowedKeys) {
+    const value = await context.req.json().catch(() => {
+        throw new InvalidMemoryRequestError();
+    });
+    return object(value, allowedKeys);
+}
+function agentName(context) {
+    const value = context.req.param("agentName").trim();
+    if (value.length === 0 || value.length > 128) {
+        throw new InvalidMemoryRequestError("Invalid agent name");
+    }
+    return value;
+}
+function commaList(value, allowed, field) {
+    if (value === undefined)
+        return undefined;
+    const values = value.split(",").map((entry) => entry.trim());
+    if (values.length === 0
+        || values.some((entry) => entry.length === 0 || !allowed.has(entry))) {
+        throw new InvalidMemoryRequestError(`Invalid ${field}`);
+    }
+    return [...new Set(values)];
+}
+function optionalBoolean(value) {
+    if (value === undefined)
+        return undefined;
+    if (value === "true")
+        return true;
+    if (value === "false")
+        return false;
+    throw new InvalidMemoryRequestError("Invalid boolean query value");
+}
+function optionalInteger(value, field) {
+    if (value === undefined)
+        return undefined;
+    if (!/^(?:0|[1-9]\d*)$/u.test(value)) {
+        throw new InvalidMemoryRequestError(`Invalid ${field}`);
+    }
+    const parsed = Number(value);
+    if (!Number.isSafeInteger(parsed)) {
+        throw new InvalidMemoryRequestError(`Invalid ${field}`);
+    }
+    return parsed;
+}
+function parseListQuery(context) {
+    const url = new URL(context.req.url);
+    for (const key of url.searchParams.keys()) {
+        if (!listQueryKeys.has(key)) {
+            throw new InvalidMemoryRequestError(`Unknown Memory query field: ${key}`);
+        }
+    }
+    const get = (name) => url.searchParams.get(name) ?? undefined;
+    const scopeKind = get("scopeKind");
+    const scopeSubjectId = get("scopeSubjectId");
+    const scopeAgentName = get("scopeAgentName");
+    if (!scopeKind && (scopeSubjectId || scopeAgentName)) {
+        throw new InvalidMemoryRequestError("scopeKind is required for scope filters");
+    }
+    const scope = scopeKind
+        ? normalizeMemoryScope({
+            kind: scopeKind,
+            ...(scopeSubjectId ? { subjectId: scopeSubjectId } : {}),
+            ...(scopeAgentName ? { agentName: scopeAgentName } : {}),
+        })
+        : undefined;
+    return {
+        kinds: commaList(get("kinds"), memoryKinds, "kinds"),
+        statuses: commaList(get("statuses"), memoryStatuses, "statuses"),
+        ...(scope ? { scope } : {}),
+        includeExpired: optionalBoolean(get("includeExpired")),
+        limit: optionalInteger(get("limit"), "limit"),
+    };
+}
+function parseSearchQuery(value) {
+    const input = object(value, searchKeys);
+    if (typeof input.query !== "string") {
+        throw new InvalidMemoryRequestError("Memory search query must be a string");
+    }
+    if (input.kinds !== undefined
+        && (!Array.isArray(input.kinds)
+            || input.kinds.some((kind) => typeof kind !== "string" || !memoryKinds.has(kind)))) {
+        throw new InvalidMemoryRequestError("Invalid Memory kinds");
+    }
+    return {
+        query: input.query,
+        ...(input.kinds === undefined
+            ? {}
+            : { kinds: input.kinds }),
+        ...(input.scope === undefined
+            ? {}
+            : { scope: normalizeMemoryScope(input.scope) }),
+        ...(input.tokenBudget === undefined
+            ? {}
+            : { tokenBudget: input.tokenBudget }),
+        ...(input.maxResults === undefined
+            ? {}
+            : { maxResults: input.maxResults }),
+    };
+}
+function parsePatch(value) {
+    const input = object(value, patchKeys);
+    if (Object.keys(input).length === 0) {
+        throw new InvalidMemoryRequestError("Memory patch cannot be empty");
+    }
+    return input;
+}
+function timestamp(value) {
+    const parsed = value instanceof Date ? value : new Date(value);
+    if (!Number.isFinite(parsed.getTime())) {
+        throw new MemoryContractError("Memory operation time must be valid");
+    }
+    return parsed.toISOString();
+}
+async function appendUsage(deps, store, context, memoryId, type) {
+    const event = {
+        id: deps.createUsageId?.() ?? `memory-usage-${nanoid(16)}`,
+        memoryId,
+        type,
+        at: timestamp(deps.now?.() ?? context.now ?? new Date()),
+    };
+    try {
+        await store.appendUsage(event, context);
+    }
+    catch (error) {
+        try {
+            await deps.onUsageError?.(error, event);
+        }
+        catch {
+            // Usage telemetry cannot change the completed Memory operation.
+        }
+    }
+}
+function invalidResponse(context) {
+    return context.json({
+        ok: false,
+        error: "Invalid Memory request",
+        code: "INVALID_MEMORY_REQUEST",
+    }, 400);
+}
+function errorResponse(context, error) {
+    if (error instanceof MemoryAuthorizationError) {
+        return context.json({
+            ok: false,
+            error: "Memory access denied",
+            code: "MEMORY_FORBIDDEN",
+        }, 403);
+    }
+    if (error instanceof MemoryConflictError) {
+        const equivalent = error.message.startsWith("An equivalent Memory item");
+        return context.json({
+            ok: false,
+            error: equivalent
+                ? "An equivalent Memory item already exists"
+                : "Memory conflict",
+            code: "MEMORY_CONFLICT",
+        }, 409);
+    }
+    if (error instanceof MemoryPolicyError) {
+        return context.json({
+            ok: false,
+            error: "Memory write denied by policy",
+            code: "MEMORY_POLICY_DENIED",
+        }, 422);
+    }
+    if (error instanceof MemoryContractError
+        || error instanceof InvalidMemoryRequestError) {
+        return invalidResponse(context);
+    }
+    return context.json({
+        ok: false,
+        error: "Memory operation failed",
+        code: "MEMORY_OPERATION_FAILED",
+    }, 500);
+}
+async function resolve(context, getDeps) {
+    try {
+        const agent = agentName(context);
+        const deps = getDeps(context);
+        if (!deps.memoryItemStore || typeof deps.resolveMemoryContext !== "function") {
+            return context.json({
+                ok: false,
+                error: "Typed Memory is not available",
+                code: "MEMORY_UNAVAILABLE",
+            }, 503);
+        }
+        const memoryContext = await deps.resolveMemoryContext(agent, context);
+        if (memoryContext.access.agentName !== agent) {
+            throw new MemoryAuthorizationError();
+        }
+        return {
+            deps,
+            store: deps.memoryItemStore,
+            memoryContext,
+            agent,
+        };
+    }
+    catch (error) {
+        return errorResponse(context, error);
+    }
+}
+/**
+ * Host-neutral typed Memory API. Authentication and tenant/external-user
+ * scoping are supplied by the composition root through `resolveMemoryContext`.
+ */
+export function memoryItemRoutes(getDeps) {
+    const app = new Hono();
+    app.get("/agents/:agentName/memory/items", async (context) => {
+        const resolved = await resolve(context, getDeps);
+        if (resolved instanceof Response)
+            return resolved;
+        try {
+            const items = await resolved.store.list(parseListQuery(context), resolved.memoryContext);
+            return context.json({ ok: true, data: { items } }, 200);
+        }
+        catch (error) {
+            return errorResponse(context, error);
+        }
+    });
+    app.post("/agents/:agentName/memory/items", async (context) => {
+        const resolved = await resolve(context, getDeps);
+        if (resolved instanceof Response)
+            return resolved;
+        try {
+            const input = await jsonObject(context, createKeys);
+            const item = createMemoryItem(input, {
+                createId: resolved.deps.createId,
+                now: resolved.deps.now,
+            });
+            const duplicate = await resolved.store.findDedupeCandidate(item, resolved.memoryContext);
+            if (duplicate) {
+                throw new MemoryConflictError("An equivalent Memory item already exists");
+            }
+            const created = await resolved.store.create(item, resolved.memoryContext);
+            await appendUsage(resolved.deps, resolved.store, resolved.memoryContext, created.id, "written");
+            return context.json({ ok: true, data: { item: created } }, 201);
+        }
+        catch (error) {
+            return errorResponse(context, error);
+        }
+    });
+    app.post("/agents/:agentName/memory/search", async (context) => {
+        const resolved = await resolve(context, getDeps);
+        if (resolved instanceof Response)
+            return resolved;
+        try {
+            const input = await jsonObject(context, searchKeys);
+            const results = await resolved.store.search(parseSearchQuery(input), resolved.memoryContext);
+            for (const result of results) {
+                await appendUsage(resolved.deps, resolved.store, resolved.memoryContext, result.item.id, "retrieved");
+            }
+            return context.json({ ok: true, data: { results } }, 200);
+        }
+        catch (error) {
+            return errorResponse(context, error);
+        }
+    });
+    app.patch("/agents/:agentName/memory/items/:itemId", async (context) => {
+        const resolved = await resolve(context, getDeps);
+        if (resolved instanceof Response)
+            return resolved;
+        try {
+            const itemId = context.req.param("itemId");
+            const patch = parsePatch(await jsonObject(context, patchKeys));
+            const item = await resolved.store.update(itemId, patch, resolved.memoryContext);
+            if (!item) {
+                return context.json({
+                    ok: false,
+                    error: "Memory item not found",
+                    code: "MEMORY_NOT_FOUND",
+                }, 404);
+            }
+            await appendUsage(resolved.deps, resolved.store, resolved.memoryContext, item.id, "updated");
+            return context.json({ ok: true, data: { item } }, 200);
+        }
+        catch (error) {
+            return errorResponse(context, error);
+        }
+    });
+    app.delete("/agents/:agentName/memory/items/:itemId", async (context) => {
+        const resolved = await resolve(context, getDeps);
+        if (resolved instanceof Response)
+            return resolved;
+        try {
+            const itemId = context.req.param("itemId");
+            const forgotten = await resolved.store.forget(itemId, resolved.memoryContext);
+            if (!forgotten) {
+                return context.json({
+                    ok: false,
+                    error: "Memory item not found",
+                    code: "MEMORY_NOT_FOUND",
+                }, 404);
+            }
+            await appendUsage(resolved.deps, resolved.store, resolved.memoryContext, itemId, "forgotten");
+            return context.json({
+                ok: true,
+                data: { forgotten: true, itemId },
+            }, 200);
+        }
+        catch (error) {
+            return errorResponse(context, error);
+        }
+    });
+    return app;
+}
+//# sourceMappingURL=memory-items.js.map

package/dist/routes/memory-items.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-items.js","sourceRoot":"","sources":["../../src/routes/memory-items.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAgB,MAAM,MAAM,CAAC;AAC1C,OAAO,EACL,YAAY,EACZ,eAAe,EACf,wBAAwB,EACxB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,GAWrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAKhC,MAAM,yBAA0B,SAAQ,KAAK;IAC3C,YAAY,OAAO,GAAG,wBAAwB;QAC5C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,YAAY,CAAC,CAAC;AAClD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAS,eAAe,CAAC,CAAC;AACxD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,IAAI;IACJ,OAAO;IACP,MAAM;IACN,SAAS;IACT,SAAS;IACT,YAAY;IACZ,YAAY;IACZ,QAAQ;IACR,WAAW;CACZ,CAAC,CAAC;AACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,SAAS;IACT,SAAS;IACT,YAAY;IACZ,QAAQ;IACR,WAAW;CACZ,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,OAAO;IACP,UAAU;IACV,WAAW;IACX,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,OAAO;CACR,CAAC,CAAC;AACH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,OAAO;IACP,OAAO;IACP,OAAO;IACP,aAAa;IACb,YAAY;CACb,CAAC,CAAC;AAEH,SAAS,MAAM,CACb,KAAc,EACd,WAAgC;IAEhC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,yBAAyB,EAAE,CAAC;IACxC,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,yBAAyB,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,OAAgB,EAChB,WAAgC;IAEhC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;QAChD,MAAM,IAAI,yBAAyB,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,SAAS,CAAC,OAAgB;IACjC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC7C,MAAM,IAAI,yBAAyB,CAAC,oBAAoB,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAChB,KAAyB,EACzB,OAA4B,EAC5B,KAAa;IAEb,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,IACE,MAAM,CAAC,MAAM,KAAK,CAAC;WAChB,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EACpE,CAAC;QACD,MAAM,IAAI,yBAAyB,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAChD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,IAAI,yBAAyB,CAAC,6BAA6B,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,eAAe,CACtB,KAAyB,EACzB,KAAa;IAEb,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,yBAAyB,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,yBAAyB,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,OAAgB;IACtC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,yBAAyB,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;IACtE,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,cAAc,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7C,MAAM,cAAc,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS,IAAI,CAAC,cAAc,IAAI,cAAc,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,yBAAyB,CAAC,yCAAyC,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,KAAK,GAAG,SAAS;QACrB,CAAC,CAAC,oBAAoB,CAAC;YACrB,IAAI,EAAE,SAAS;YACf,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC;QACF,CAAC,CAAC,SAAS,CAAC;IACd,OAAO;QACL,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,OAAO,CAA6B;QAChF,QAAQ,EAAE,SAAS,CACjB,GAAG,CAAC,UAAU,CAAC,EACf,cAAc,EACd,UAAU,CACmB;QAC/B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,cAAc,EAAE,eAAe,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACtD,KAAK,EAAE,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACxC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,yBAAyB,CAAC,sCAAsC,CAAC,CAAC;IAC9E,CAAC;IACD,IACE,KAAK,CAAC,KAAK,KAAK,SAAS;WACtB,CACD,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;eACxB,KAAK,CAAC,KAAK,CAAC,IAAI,CACjB,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAC7D,CACF,EACD,CAAC;QACD,MAAM,IAAI,yBAAyB,CAAC,sBAAsB,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS;YAC3B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAA8B,EAAE,CAAC;QACpD,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS;YAC3B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,KAAK,EAAE,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS;YACjC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAqB,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;YAChC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAoB,EAAE,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACvC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,yBAAyB,CAAC,8BAA8B,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,KAAwB,CAAC;AAClC,CAAC;AAED,SAAS,SAAS,CAAC,KAAoB;IACrC,MAAM,MAAM,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,mBAAmB,CAAC,qCAAqC,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,IAAqB,EACrB,KAAsB,EACtB,OAA2B,EAC3B,QAAgB,EAChB,IAA0B;IAE1B,MAAM,KAAK,GAAqB;QAC9B,EAAE,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,gBAAgB,MAAM,CAAC,EAAE,CAAC,EAAE;QAC1D,QAAQ;QACR,IAAI;QACJ,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;KACzD,CAAC;IACF,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;QAClE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB;IACvC,OAAO,OAAO,CAAC,IAAI,CAAC;QAClB,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,wBAAwB;QAC/B,IAAI,EAAE,wBAAwB;KAC/B,EAAE,GAAG,CAAC,CAAC;AACV,CAAC;AAED,SAAS,aAAa,CAAC,OAAgB,EAAE,KAAc;IACrD,IAAI,KAAK,YAAY,wBAAwB,EAAE,CAAC;QAC9C,OAAO,OAAO,CAAC,IAAI,CAAC;YAClB,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,sBAAsB;YAC7B,IAAI,EAAE,kBAAkB;SACzB,EAAE,GAAG,CAAC,CAAC;IACV,CAAC;IACD,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC;QACzE,OAAO,OAAO,CAAC,IAAI,CAAC;YAClB,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,UAAU;gBACf,CAAC,CAAC,0CAA0C;gBAC5C,CAAC,CAAC,iBAAiB;YACrB,IAAI,EAAE,iBAAiB;SACxB,EAAE,GAAG,CAAC,CAAC;IACV,CAAC;IACD,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;QACvC,OAAO,OAAO,CAAC,IAAI,CAAC;YAClB,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,+BAA+B;YACtC,IAAI,EAAE,sBAAsB;SAC7B,EAAE,GAAG,CAAC,CAAC;IACV,CAAC;IACD,IACE,KAAK,YAAY,mBAAmB;WACjC,KAAK,YAAY,yBAAyB,EAC7C,CAAC;QACD,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC;QAClB,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,yBAAyB;QAChC,IAAI,EAAE,yBAAyB;KAChC,EAAE,GAAG,CAAC,CAAC;AACV,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,OAAgB,EAChB,OAAqD;IAOrD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,OAAO,IAAI,CAAC,oBAAoB,KAAK,UAAU,EAAE,CAAC;YAC7E,OAAO,OAAO,CAAC,IAAI,CAAC;gBAClB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,+BAA+B;gBACtC,IAAI,EAAE,oBAAoB;aAC3B,EAAE,GAAG,CAAC,CAAC;QACV,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACtE,IAAI,aAAa,CAAC,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YAC7C,MAAM,IAAI,wBAAwB,EAAE,CAAC;QACvC,CAAC;QACD,OAAO;YACL,IAAI;YACJ,KAAK,EAAE,IAAI,CAAC,eAAe;YAC3B,aAAa;YACb,KAAK;SACN,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAqD;IAErD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,GAAG,CAAC,GAAG,CAAC,iCAAiC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC3D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,QAAQ,YAAY,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,CACrC,cAAc,CAAC,OAAO,CAAC,EACvB,QAAQ,CAAC,aAAa,CACvB,CAAC;YACF,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC5D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,QAAQ,YAAY,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACpD,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAyC,EAAE;gBACvE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;gBAChC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG;aACvB,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,mBAAmB,CACxD,IAAI,EACJ,QAAQ,CAAC,aAAa,CACvB,CAAC;YACF,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,IAAI,mBAAmB,CAC3B,0CAA0C,CAC3C,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;YAC1E,MAAM,WAAW,CACf,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,aAAa,EACtB,OAAO,CAAC,EAAE,EACV,SAAS,CACV,CAAC;YACF,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC7D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,QAAQ,YAAY,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACpD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,CACzC,gBAAgB,CAAC,KAAK,CAAC,EACvB,QAAQ,CAAC,aAAa,CACvB,CAAC;YACF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,WAAW,CACf,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,aAAa,EACtB,MAAM,CAAC,IAAI,CAAC,EAAE,EACd,WAAW,CACZ,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACrE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,QAAQ,YAAY,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,CACtC,MAAM,EACN,KAAK,EACL,QAAQ,CAAC,aAAa,CACvB,CAAC;YACF,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,OAAO,CAAC,IAAI,CAAC;oBAClB,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,uBAAuB;oBAC9B,IAAI,EAAE,kBAAkB;iBACzB,EAAE,GAAG,CAAC,CAAC;YACV,CAAC;YACD,MAAM,WAAW,CACf,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,aAAa,EACtB,IAAI,CAAC,EAAE,EACP,SAAS,CACV,CAAC;YACF,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,yCAAyC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACtE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,QAAQ,YAAY,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,CAC3C,MAAM,EACN,QAAQ,CAAC,aAAa,CACvB,CAAC;YACF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,OAAO,CAAC,IAAI,CAAC;oBAClB,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,uBAAuB;oBAC9B,IAAI,EAAE,kBAAkB;iBACzB,EAAE,GAAG,CAAC,CAAC;YACV,CAAC;YACD,MAAM,WAAW,CACf,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,aAAa,EACtB,MAAM,EACN,WAAW,CACZ,CAAC;YACF,OAAO,OAAO,CAAC,IAAI,CAAC;gBAClB,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE;aAClC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/routes/memory-items.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=memory-items.test.d.ts.map

package/dist/routes/memory-items.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-items.test.d.ts","sourceRoot":"","sources":["../../src/routes/memory-items.test.ts"],"names":[],"mappings":""}

package/dist/routes/memory-items.test.js

@@ -0,0 +1,281 @@
+import { describe, expect, it } from "vitest";
+import { InMemoryMemoryItemStore, MemoryAuthorizationError, } from "@polpo-ai/core";
+import { memoryItemRoutes, } from "./memory-items.js";
+const now = "2026-07-28T10:00:00.000Z";
+function context(namespace = "project-a", externalUserId = "user-a") {
+    return {
+        namespace,
+        access: {
+            projectId: namespace,
+            agentName: "support",
+            externalUserId,
+            sessionId: "session-a",
+        },
+        surface: "api",
+        now,
+    };
+}
+function createApp(store = new InMemoryMemoryItemStore(), resolveContext = () => context(), overrides = {}) {
+    let nextId = 0;
+    return memoryItemRoutes(() => ({
+        memoryItemStore: store ?? undefined,
+        resolveMemoryContext: resolveContext,
+        createId: () => `memory-${++nextId}`,
+        createUsageId: () => `usage-${++nextId}`,
+        now: () => now,
+        ...overrides,
+    }));
+}
+function json(method, body) {
+    return {
+        method,
+        headers: { "content-type": "application/json" },
+        ...(body === undefined ? {} : { body: JSON.stringify(body) }),
+    };
+}
+function itemInput(overrides = {}) {
+    return {
+        scope: { kind: "user", subjectId: "user-a", agentName: "support" },
+        kind: "preference",
+        content: "Prefers concise weekly summaries.",
+        provenance: {
+            source: "explicit",
+            actor: "user",
+            sourceId: "request-a",
+        },
+        ...overrides,
+    };
+}
+async function createItem(app, overrides = {}) {
+    const response = await app.request("/agents/support/memory/items", json("POST", itemInput(overrides)));
+    return {
+        response,
+        body: await response.json(),
+    };
+}
+describe("memoryItemRoutes", () => {
+    it("is host-neutral and unavailable until a store is explicitly wired", async () => {
+        const response = await createApp(null).request("/agents/support/memory/items");
+        expect(response.status).toBe(503);
+        expect(await response.json()).toEqual({
+            ok: false,
+            error: "Typed Memory is not available",
+            code: "MEMORY_UNAVAILABLE",
+        });
+    });
+    it("creates, lists, searches, updates, and softly forgets typed items", async () => {
+        const app = createApp();
+        const created = await createItem(app);
+        expect(created.response.status).toBe(201);
+        expect(created.body.data.item).toMatchObject({
+            id: "memory-1",
+            kind: "preference",
+            content: "Prefers concise weekly summaries.",
+            status: "active",
+        });
+        const listed = await app.request("/agents/support/memory/items?kinds=preference&scopeKind=user"
+            + "&scopeSubjectId=user-a&scopeAgentName=support&limit=10");
+        expect(listed.status).toBe(200);
+        expect((await listed.json()).data.items).toHaveLength(1);
+        const searched = await app.request("/agents/support/memory/search", json("POST", { query: "weekly summary", tokenBudget: 100, maxResults: 5 }));
+        const searchBody = await searched.json();
+        expect(searched.status).toBe(200);
+        expect(searchBody.data.results).toHaveLength(1);
+        expect(searchBody.data.results[0].item.id).toBe("memory-1");
+        const updated = await app.request("/agents/support/memory/items/memory-1", json("PATCH", { summary: "Weekly summaries", confidence: 0.9 }));
+        expect(updated.status).toBe(200);
+        expect((await updated.json()).data.item).toMatchObject({
+            summary: "Weekly summaries",
+            confidence: 0.9,
+        });
+        const forgotten = await app.request("/agents/support/memory/items/memory-1", { method: "DELETE" });
+        expect(forgotten.status).toBe(200);
+        expect(await forgotten.json()).toMatchObject({
+            ok: true,
+            data: { forgotten: true, itemId: "memory-1" },
+        });
+        const afterDelete = await app.request("/agents/support/memory/search", json("POST", { query: "weekly" }));
+        expect((await afterDelete.json()).data.results).toEqual([]);
+    });
+    it("records retrieval usage without exposing it in the search payload", async () => {
+        const store = new InMemoryMemoryItemStore();
+        const app = createApp(store);
+        await createItem(app);
+        await app.request("/agents/support/memory/search", json("POST", { query: "weekly" }));
+        expect(await store.listUsage("memory-1", context())).toEqual([
+            expect.objectContaining({
+                memoryId: "memory-1",
+                type: "written",
+                at: now,
+            }),
+            expect.objectContaining({
+                memoryId: "memory-1",
+                type: "retrieved",
+                at: now,
+            }),
+        ]);
+    });
+    it("returns 409 for a duplicate semantic memory instead of persisting it twice", async () => {
+        const app = createApp();
+        expect((await createItem(app)).response.status).toBe(201);
+        const duplicate = await createItem(app, { id: "another-id" });
+        expect(duplicate.response.status).toBe(409);
+        expect(duplicate.body).toEqual({
+            ok: false,
+            error: "An equivalent Memory item already exists",
+            code: "MEMORY_CONFLICT",
+        });
+    });
+    it.each([
+        ["invalid JSON", "{", 400],
+        ["empty body", undefined, 400],
+        ["unknown kind", itemInput({ kind: "guess" }), 400],
+        ["empty content", itemInput({ content: " " }), 400],
+        [
+            "invalid confidence",
+            itemInput({ confidence: 2 }),
+            400,
+        ],
+    ])("rejects %s without touching the store", async (_name, body, status) => {
+        const app = createApp();
+        const response = await app.request("/agents/support/memory/items", body === "{" ? {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body,
+        } : json("POST", body));
+        expect(response.status).toBe(status);
+        expect(await response.json()).toMatchObject({
+            ok: false,
+            code: "INVALID_MEMORY_REQUEST",
+        });
+        const listed = await app.request("/agents/support/memory/items");
+        expect((await listed.json()).data.items).toEqual([]);
+    });
+    it("fails closed on sensitive content and never echoes the secret", async () => {
+        const secret = "neutral-fixture-value-12345";
+        const app = createApp();
+        const response = await app.request("/agents/support/memory/items", json("POST", itemInput({ content: `api_key: ${secret}` })));
+        const raw = await response.text();
+        expect(response.status).toBe(422);
+        expect(raw).not.toContain(secret);
+        expect(JSON.parse(raw)).toEqual({
+            ok: false,
+            error: "Memory write denied by policy",
+            code: "MEMORY_POLICY_DENIED",
+        });
+    });
+    it("does not leak items across namespaces or external users", async () => {
+        const store = new InMemoryMemoryItemStore();
+        const projectA = createApp(store, () => context("project-a", "same-user"));
+        const projectB = createApp(store, () => context("project-b", "same-user"));
+        const anotherUser = createApp(store, () => context("project-a", "user-b"));
+        await createItem(projectA, {
+            scope: {
+                kind: "user",
+                subjectId: "same-user",
+                agentName: "support",
+            },
+        });
+        for (const app of [projectB, anotherUser]) {
+            const listed = await app.request("/agents/support/memory/items");
+            expect((await listed.json()).data.items).toEqual([]);
+            const update = await app.request("/agents/support/memory/items/memory-1", json("PATCH", { content: "stolen" }));
+            expect(update.status).toBe(404);
+            const remove = await app.request("/agents/support/memory/items/memory-1", { method: "DELETE" });
+            expect(remove.status).toBe(404);
+        }
+    });
+    it("maps host authorization denial without invoking the store", async () => {
+        const app = createApp(new InMemoryMemoryItemStore(), () => {
+            throw new MemoryAuthorizationError("denied by host");
+        });
+        const response = await app.request("/agents/support/memory/items");
+        expect(response.status).toBe(403);
+        expect(await response.json()).toEqual({
+            ok: false,
+            error: "Memory access denied",
+            code: "MEMORY_FORBIDDEN",
+        });
+    });
+    it("rejects an agent name mismatch between route and resolved context", async () => {
+        const app = createApp(new InMemoryMemoryItemStore(), () => ({
+            ...context(),
+            access: { ...context().access, agentName: "different-agent" },
+        }));
+        const response = await app.request("/agents/support/memory/items");
+        expect(response.status).toBe(403);
+        expect(await response.json()).toMatchObject({
+            ok: false,
+            code: "MEMORY_FORBIDDEN",
+        });
+    });
+    it("returns 404 for invisible or missing updates and deletes", async () => {
+        const app = createApp();
+        const update = await app.request("/agents/support/memory/items/missing", json("PATCH", { content: "new" }));
+        const remove = await app.request("/agents/support/memory/items/missing", { method: "DELETE" });
+        expect(update.status).toBe(404);
+        expect(remove.status).toBe(404);
+    });
+    it.each([
+        ["non-string query", { query: 42 }],
+        ["non-array kinds", { query: "weekly", kinds: "preference" }],
+        ["negative token budget", { query: "weekly", tokenBudget: -1 }],
+        ["client-controlled clock", { query: "weekly", now: "2020-01-01" }],
+    ])("maps malformed search input (%s) to 400", async (_name, body) => {
+        const response = await createApp().request("/agents/support/memory/search", json("POST", body));
+        expect(response.status).toBe(400);
+        expect(await response.json()).toMatchObject({
+            ok: false,
+            code: "INVALID_MEMORY_REQUEST",
+        });
+    });
+    it("keeps a completed operation successful when usage telemetry fails", async () => {
+        class UsageFailureStore extends InMemoryMemoryItemStore {
+            async appendUsage() {
+                throw new Error("usage backend unavailable");
+            }
+        }
+        const errors = [];
+        const store = new UsageFailureStore();
+        const app = createApp(store, () => context(), {
+            onUsageError: (error) => {
+                errors.push(error);
+            },
+        });
+        const created = await createItem(app);
+        expect(created.response.status).toBe(201);
+        expect(errors).toHaveLength(1);
+        expect(await store.list({}, context())).toHaveLength(1);
+    });
+    it("redacts unexpected store errors instead of reflecting provider details", async () => {
+        const secret = "database-password-super-secret";
+        class FailingStore extends InMemoryMemoryItemStore {
+            async list() {
+                throw new Error(`Provider failed with ${secret}`);
+            }
+        }
+        const response = await createApp(new FailingStore()).request("/agents/support/memory/items");
+        const raw = await response.text();
+        expect(response.status).toBe(500);
+        expect(raw).not.toContain(secret);
+        expect(JSON.parse(raw)).toEqual({
+            ok: false,
+            error: "Memory operation failed",
+            code: "MEMORY_OPERATION_FAILED",
+        });
+    });
+    it("decodes agent names and binds them to the resolved context", async () => {
+        let resolvedAgent = "";
+        const app = createApp(new InMemoryMemoryItemStore(), (agent) => {
+            resolvedAgent = agent;
+            return {
+                ...context(),
+                access: { ...context().access, agentName: agent },
+            };
+        });
+        const response = await app.request("/agents/support%20eu/memory/items");
+        expect(response.status).toBe(200);
+        expect(resolvedAgent).toBe("support eu");
+    });
+});
+//# sourceMappingURL=memory-items.test.js.map