@raviolelabs/engram-mcp 0.2.0

package/dist/core/db/index.js

@@ -0,0 +1,273 @@
+// src/core/db/index.ts
+import Database from 'better-sqlite3';
+import fs from 'fs';
+import path from 'path';
+import os from 'os';
+import { createLogger } from '../logger.js';
+const log = createLogger('db');
+let _db = null;
+function resolvePath(p) {
+    if (p.startsWith('~'))
+        return path.join(os.homedir(), p.slice(1));
+    return p;
+}
+export function getDb() {
+    if (!_db)
+        throw new Error('DB not initialized. Call initDb() first.');
+    return _db;
+}
+export function closeDb() {
+    if (_db) {
+        _db.close();
+        _db = null;
+    }
+}
+export function initDb(dataDir) {
+    const resolved = resolvePath(dataDir);
+    fs.mkdirSync(resolved, { recursive: true, mode: 0o700 });
+    try {
+        fs.chmodSync(resolved, 0o700);
+    }
+    catch { }
+    const dbPath = path.join(resolved, 'engram.db');
+    log.info(`Opening database at ${dbPath}`);
+    _db = new Database(dbPath);
+    _db.pragma('journal_mode = WAL');
+    _db.pragma('foreign_keys = ON');
+    _db.pragma('synchronous = NORMAL');
+    try {
+        fs.chmodSync(dbPath, 0o600);
+    }
+    catch { }
+    runMigrations(_db);
+    log.info('Database ready');
+    return _db;
+}
+function runMigrations(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS schema_version (
+      version INTEGER PRIMARY KEY,
+      applied_at INTEGER NOT NULL
+    )
+  `);
+    const row = db.prepare('SELECT MAX(version) as v FROM schema_version').get();
+    const current = row.v ?? 0;
+    const migrations = [
+        { version: 1, sql: MIGRATION_1 },
+        { version: 2, sql: MIGRATION_2 },
+        { version: 3, sql: MIGRATION_3 },
+        { version: 4, sql: MIGRATION_4 },
+        { version: 5, sql: MIGRATION_5 },
+        { version: 6, sql: MIGRATION_6 },
+        { version: 7, sql: MIGRATION_7 },
+    ];
+    for (const m of migrations) {
+        if (m.version > current) {
+            log.info(`Applying migration v${m.version}`);
+            if (m.version === 7) {
+                // SQLite doesn't support ADD COLUMN IF NOT EXISTS.
+                // Check if poll_count already exists before altering (happens when
+                // migration 6 was applied after the column was added to it).
+                const cols = db.prepare(`PRAGMA table_info(ingest_jobs)`).all();
+                if (!cols.some((c) => c.name === 'poll_count')) {
+                    db.exec(`ALTER TABLE ingest_jobs ADD COLUMN poll_count INTEGER NOT NULL DEFAULT 0`);
+                }
+            }
+            else {
+                db.exec(m.sql);
+            }
+            db.prepare('INSERT INTO schema_version (version, applied_at) VALUES (?, ?)').run(m.version, Date.now());
+        }
+    }
+}
+export function getLocalLamport(db) {
+    const row = db
+        .prepare(`SELECT MAX(lamport_ts) as max_ts FROM ops_log WHERE device_id = (
+         SELECT device_id FROM device_identity LIMIT 1
+       )`)
+        .get();
+    return row?.max_ts ?? 0;
+}
+export function incrementLamport(db, deviceId) {
+    const current = db
+        .prepare(`SELECT lamport_ts FROM device_identity WHERE device_id = ?`)
+        .get(deviceId);
+    const next = (current?.lamport_ts ?? 0) + 1;
+    db.prepare(`UPDATE device_identity SET lamport_ts = ? WHERE device_id = ?`).run(next, deviceId);
+    return next;
+}
+// Migration 7 is handled programmatically (SQLite lacks ADD COLUMN IF NOT EXISTS)
+// The constant is kept for schema documentation purposes only.
+const MIGRATION_7 = `-- poll_count column added to ingest_jobs (handled below)`;
+const MIGRATION_6 = `
+  -- ingest_jobs: async job tracking for heavy ingest operations (audio, large video, etc.)
+  CREATE TABLE IF NOT EXISTS ingest_jobs (
+    id          TEXT    PRIMARY KEY,
+    uri         TEXT    NOT NULL,
+    type        TEXT,
+    status      TEXT    NOT NULL DEFAULT 'pending',
+    progress    INTEGER NOT NULL DEFAULT 0,
+    memory_id   TEXT,
+    error       TEXT,
+    created_at  INTEGER NOT NULL,
+    started_at  INTEGER,
+    completed_at INTEGER,
+    poll_count  INTEGER NOT NULL DEFAULT 0
+  );
+  CREATE INDEX IF NOT EXISTS idx_ingest_jobs_status ON ingest_jobs(status, created_at);
+`;
+const MIGRATION_5 = `
+  -- recovery_shards: local mirror of shard setup metadata (no share codes stored locally)
+  CREATE TABLE IF NOT EXISTS recovery_shards (
+    id              TEXT    PRIMARY KEY,
+    share_index     INTEGER NOT NULL,
+    trusted_email   TEXT    NOT NULL,
+    created_at      INTEGER NOT NULL
+  );
+
+  -- snapshot_log: tracks local knowledge of uploaded cloud snapshots
+  CREATE TABLE IF NOT EXISTS snapshot_log (
+    id          TEXT    PRIMARY KEY,
+    r2_key      TEXT    NOT NULL,
+    lamport_ts  INTEGER NOT NULL,
+    size_bytes  INTEGER NOT NULL,
+    created_at  INTEGER NOT NULL
+  );
+`;
+const MIGRATION_4 = `
+  -- ops_log: append-only operation log for bidirectional sync
+  CREATE TABLE IF NOT EXISTS ops_log (
+    op_id       TEXT    PRIMARY KEY,
+    device_id   TEXT    NOT NULL,
+    lamport_ts  INTEGER NOT NULL,
+    op_type     TEXT    NOT NULL
+                CHECK (op_type IN ('add_memory','update_properties','delete_memory','add_relation')),
+    memory_id   TEXT    NOT NULL,
+    payload_enc BLOB    NOT NULL,
+    nonce       BLOB    NOT NULL,
+    sig         BLOB    NOT NULL,
+    sent_at     INTEGER,
+    applied     INTEGER NOT NULL DEFAULT 0,
+    created_at  INTEGER NOT NULL
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_ops_log_pending
+    ON ops_log (sent_at, created_at)
+    WHERE sent_at IS NULL;
+
+  CREATE INDEX IF NOT EXISTS idx_ops_log_memory
+    ON ops_log (memory_id, lamport_ts);
+
+  CREATE INDEX IF NOT EXISTS idx_ops_log_applied
+    ON ops_log (applied, created_at);
+
+  -- tombstones: soft-delete with grace period
+  CREATE TABLE IF NOT EXISTS tombstones (
+    memory_id   TEXT    PRIMARY KEY,
+    deleted_at  INTEGER NOT NULL,
+    op_id       TEXT    NOT NULL,
+    grace_until INTEGER NOT NULL,
+    finalized   INTEGER NOT NULL DEFAULT 0
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_tombstones_grace
+    ON tombstones (finalized, grace_until);
+
+  -- device_identity: local ed25519 keypair (one row per device)
+  CREATE TABLE IF NOT EXISTS device_identity (
+    device_id   TEXT    PRIMARY KEY,
+    pubkey_hex  TEXT    NOT NULL,
+    privkey_hex TEXT    NOT NULL,
+    lamport_ts  INTEGER NOT NULL DEFAULT 0,
+    created_at  INTEGER NOT NULL
+  );
+`;
+const MIGRATION_3 = `
+  CREATE TABLE saved_views (
+    id TEXT PRIMARY KEY,
+    name TEXT NOT NULL,
+    description TEXT,
+    definition_json TEXT NOT NULL,
+    pinned INTEGER NOT NULL DEFAULT 0,
+    created_at INTEGER NOT NULL,
+    updated_at INTEGER NOT NULL
+  );
+
+  CREATE INDEX idx_saved_views_pinned ON saved_views(pinned DESC, created_at);
+
+  CREATE TABLE settings (
+    key TEXT PRIMARY KEY,
+    value_json TEXT NOT NULL,
+    updated_at INTEGER NOT NULL
+  );
+`;
+const MIGRATION_2 = `
+  CREATE TABLE watched_sources (
+    id TEXT PRIMARY KEY,                    -- ULID
+    module_id TEXT NOT NULL,                -- 'drive' | 'notion' | ...
+    external_id TEXT NOT NULL,              -- doc id / page id / file id
+    display_name TEXT NOT NULL,
+    config_json TEXT NOT NULL DEFAULT '{}', -- per-module metadata
+    last_synced_at INTEGER,
+    last_modified_remote TEXT,              -- remote ETag / modified_time
+    last_error TEXT,
+    enabled INTEGER NOT NULL DEFAULT 1,
+    created_at INTEGER NOT NULL,
+    UNIQUE(module_id, external_id)
+  );
+
+  CREATE INDEX idx_watched_sources_module ON watched_sources(module_id);
+  CREATE INDEX idx_watched_sources_enabled ON watched_sources(enabled, module_id);
+`;
+const MIGRATION_1 = `
+  CREATE TABLE memories (
+    id TEXT PRIMARY KEY,
+    type TEXT NOT NULL,
+    source_id TEXT NOT NULL,
+    content TEXT NOT NULL,
+    content_hash TEXT NOT NULL,
+    properties_json TEXT NOT NULL,
+    wikilinks_json TEXT NOT NULL DEFAULT '[]',
+    related_ids_json TEXT NOT NULL DEFAULT '[]',
+    embedding_model TEXT NOT NULL,
+    created_at INTEGER NOT NULL,
+    UNIQUE(type, source_id, content_hash)
+  );
+
+  CREATE INDEX idx_memories_type ON memories(type);
+  CREATE INDEX idx_memories_source ON memories(type, source_id);
+  CREATE INDEX idx_memories_created ON memories(created_at DESC);
+
+  CREATE VIRTUAL TABLE memories_fts USING fts5(
+    id UNINDEXED,
+    content,
+    title,
+    tags,
+    tokenize = 'porter unicode61'
+  );
+
+  CREATE TABLE custom_types (
+    type_name TEXT PRIMARY KEY,
+    display_name TEXT NOT NULL,
+    schema_json TEXT,
+    created_at INTEGER NOT NULL
+  );
+
+  CREATE TABLE oauth_tokens (
+    provider TEXT PRIMARY KEY,
+    access_token TEXT NOT NULL,
+    refresh_token TEXT,
+    expires_at INTEGER,
+    extra_json TEXT,
+    updated_at INTEGER NOT NULL
+  );
+
+  CREATE TABLE module_state (
+    module_id TEXT NOT NULL,
+    key TEXT NOT NULL,
+    value_json TEXT NOT NULL,
+    updated_at INTEGER NOT NULL,
+    PRIMARY KEY (module_id, key)
+  );
+`;
+//# sourceMappingURL=index.js.map

package/dist/core/db/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/db/index.ts"],"names":[],"mappings":"AAAA,uBAAuB;AACvB,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;AAE/B,IAAI,GAAG,GAA6B,IAAI,CAAC;AAEzC,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,KAAK;IACnB,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,OAAO;IACrB,IAAI,GAAG,EAAE,CAAC;QACR,GAAG,CAAC,KAAK,EAAE,CAAC;QACZ,GAAG,GAAG,IAAI,CAAC;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,OAAe;IACpC,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACtC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAChD,GAAG,CAAC,IAAI,CAAC,uBAAuB,MAAM,EAAE,CAAC,CAAC;IAE1C,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3B,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACjC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAChC,GAAG,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAEnC,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,aAAa,CAAC,GAAG,CAAC,CAAC;IACnB,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAE3B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,EAAqB;IAC1C,EAAE,CAAC,IAAI,CAAC;;;;;GAKP,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,EAEzE,CAAC;IACF,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IAE3B,MAAM,UAAU,GAA4C;QAC1D,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE;QAChC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE;QAChC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE;QAChC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE;QAChC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE;QAChC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE;QAChC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE;KACjC,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,OAAO,GAAG,OAAO,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7C,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;gBACpB,mDAAmD;gBACnD,mEAAmE;gBACnE,6DAA6D;gBAC7D,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,GAAG,EAA6B,CAAC;gBAC3F,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,EAAE,CAAC;oBAC/C,EAAE,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;gBACtF,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACjB,CAAC;YACD,EAAE,CAAC,OAAO,CAAC,gEAAgE,CAAC,CAAC,GAAG,CAC9E,CAAC,CAAC,OAAO,EACT,IAAI,CAAC,GAAG,EAAE,CACX,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAAqB;IACnD,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CACN;;SAEG,CACJ;SACA,GAAG,EAA2C,CAAC;IAClD,OAAO,GAAG,EAAE,MAAM,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAqB,EAAE,QAAgB;IACtE,MAAM,OAAO,GAAG,EAAE;SACf,OAAO,CAAC,4DAA4D,CAAC;SACrE,GAAG,CAAC,QAAQ,CAAuC,CAAC;IACvD,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5C,EAAE,CAAC,OAAO,CAAC,+DAA+D,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kFAAkF;AAClF,+DAA+D;AAC/D,MAAM,WAAW,GAAG,2DAA2D,CAAC;AAGhF,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;CAgBnB,CAAC;AAEF,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;CAiBnB,CAAC;AAEF,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+CnB,CAAC;AAEF,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;CAkBnB,CAAC;AAEF,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;CAiBnB,CAAC;AAEF,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkDnB,CAAC"}

package/dist/core/logger.d.ts

@@ -0,0 +1,19 @@
+type LogLevel = 'debug' | 'info' | 'warn' | 'error';
+export declare const LOG_FILE: string;
+export declare function rotateLogsIfNeeded(nextWriteBytes: number): void;
+export declare function cleanLogs(): {
+    removed: string[];
+    truncated: string;
+};
+declare let auditCallback: ((level: LogLevel, module: string, msg: string, data?: unknown) => void) | null;
+export declare function setLogLevel(level: LogLevel): void;
+export declare function setAuditCallback(cb: typeof auditCallback): void;
+export declare function createLogger(module: string): {
+    debug: (msg: string, data?: unknown) => void;
+    info: (msg: string, data?: unknown) => void;
+    warn: (msg: string, data?: unknown) => void;
+    error: (msg: string, data?: unknown) => void;
+};
+export type Logger = ReturnType<typeof createLogger>;
+export {};
+//# sourceMappingURL=logger.d.ts.map

package/dist/core/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/core/logger.ts"],"names":[],"mappings":"AAMA,KAAK,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAIpD,eAAO,MAAM,QAAQ,QAAiD,CAAC;AASvE,wBAAgB,kBAAkB,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAsC/D;AAED,wBAAgB,SAAS,IAAI;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAmBpE;AAoHD,QAAA,IAAI,aAAa,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,IACxF,CAAC;AAEP,wBAAgB,WAAW,CAAC,KAAK,EAAE,QAAQ,QAE1C;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,OAAO,aAAa,QAExD;AAuBD,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM;iBAE1B,MAAM,SAAS,OAAO;gBACvB,MAAM,SAAS,OAAO;gBACtB,MAAM,SAAS,OAAO;iBACrB,MAAM,SAAS,OAAO;EAEtC;AAED,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC"}

package/dist/core/logger.js

@@ -0,0 +1,223 @@
+// Structured logger — everything goes to console + audit DB in debug mode
+import fs from 'fs';
+import path from 'path';
+import os from 'os';
+// ── Log rotation ──────────────────────────────────────────────────────────────
+// Max 10MB per file, keep argos.log + .1..5 (≈60MB total worst case).
+export const LOG_FILE = path.join(os.homedir(), '.argos', 'argos.log');
+const MAX_BYTES = 10 * 1024 * 1024;
+const MAX_ROTATIONS = 5;
+const ANSI_RE = /\x1b\[[0-9;]*m/g;
+function stripAnsi(s) {
+    return s.replace(ANSI_RE, '');
+}
+export function rotateLogsIfNeeded(nextWriteBytes) {
+    try {
+        let size = 0;
+        try {
+            size = fs.statSync(LOG_FILE).size;
+        }
+        catch {
+            return; // file doesn't exist yet
+        }
+        if (size + nextWriteBytes <= MAX_BYTES)
+            return;
+        // copytruncate strategy: launchd/systemd hold an open FD to argos.log, so
+        // a plain rename would leave the FD writing to the renamed inode forever.
+        // Instead: shift .N → .N+1, copy current → .1, then truncate-in-place so
+        // the inherited FD keeps writing at offset 0.
+        const oldest = `${LOG_FILE}.${MAX_ROTATIONS}`;
+        try {
+            if (fs.existsSync(oldest))
+                fs.unlinkSync(oldest);
+        }
+        catch {
+            /* ignore */
+        }
+        for (let i = MAX_ROTATIONS - 1; i >= 1; i--) {
+            const src = `${LOG_FILE}.${i}`;
+            const dst = `${LOG_FILE}.${i + 1}`;
+            try {
+                if (fs.existsSync(src))
+                    fs.renameSync(src, dst);
+            }
+            catch {
+                /* ignore */
+            }
+        }
+        try {
+            fs.copyFileSync(LOG_FILE, `${LOG_FILE}.1`);
+            fs.truncateSync(LOG_FILE, 0);
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    catch {
+        /* never break logging on rotation failure */
+    }
+}
+export function cleanLogs() {
+    const removed = [];
+    for (let i = 1; i <= MAX_ROTATIONS; i++) {
+        const f = `${LOG_FILE}.${i}`;
+        try {
+            if (fs.existsSync(f)) {
+                fs.unlinkSync(f);
+                removed.push(f);
+            }
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    try {
+        if (fs.existsSync(LOG_FILE))
+            fs.truncateSync(LOG_FILE, 0);
+    }
+    catch {
+        /* ignore */
+    }
+    return { removed, truncated: LOG_FILE };
+}
+// Dedicated append-mode FD to LOG_FILE. O_APPEND guarantees every write lands
+// at the current end-of-file, which makes copytruncate rotation safe (after
+// ftruncate the next write resumes at offset 0). This is independent of
+// whatever stdout was wired to by launchd/systemd.
+let logFd = null;
+function openLogFd() {
+    if (logFd !== null)
+        return logFd;
+    try {
+        fs.mkdirSync(path.dirname(LOG_FILE), { recursive: true });
+        logFd = fs.openSync(LOG_FILE, 'a');
+    }
+    catch {
+        logFd = null;
+    }
+    return logFd;
+}
+function writeToLogFile(line) {
+    const fd = openLogFd();
+    if (fd === null)
+        return;
+    const clean = stripAnsi(line);
+    const buf = Buffer.from(clean.endsWith('\n') ? clean : clean + '\n');
+    try {
+        rotateLogsIfNeeded(buf.byteLength);
+        fs.writeSync(fd, buf);
+    }
+    catch {
+        /* never break the pipeline on log failure */
+    }
+}
+// If launchd/systemd has wired stdout/stderr directly to argos.log, take over:
+// replace stdout.write/stderr.write so console.log goes through OUR rotating
+// O_APPEND fd. Otherwise log() would write the line twice (once via console,
+// once via writeToLogFile). When stdout is a TTY (foreground/dev mode), we
+// keep console output and ALSO mirror to the file.
+let stdoutOwnsLogFile = false;
+try {
+    const stdoutStat = fs.fstatSync(1);
+    const fileStat = fs.statSync(LOG_FILE);
+    if (stdoutStat.ino === fileStat.ino && stdoutStat.dev === fileStat.dev) {
+        stdoutOwnsLogFile = true;
+    }
+}
+catch {
+    /* LOG_FILE may not exist yet, or stdout not a file — fine */
+}
+if (stdoutOwnsLogFile) {
+    const noop = (_chunk, cbOrEnc, cb) => {
+        // Resolve callback like the real write() so any awaited drains keep working.
+        const callback = typeof cbOrEnc === 'function' ? cbOrEnc : cb;
+        if (typeof callback === 'function')
+            callback();
+        return true;
+    };
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    process.stdout.write = noop;
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    process.stderr.write = noop;
+}
+const LEVELS = {
+    debug: 0,
+    info: 1,
+    warn: 2,
+    error: 3,
+};
+const COLORS = {
+    debug: '\x1b[90m', // gray
+    info: '\x1b[36m', // cyan
+    warn: '\x1b[33m', // yellow
+    error: '\x1b[31m', // red
+};
+const RESET = '\x1b[0m';
+// Patterns that indicate secrets — redacted before logging
+const SECRET_PATTERNS = [
+    /sk-[A-Za-z0-9\-_]{20,}/g, // Anthropic / Stripe API keys
+    /pk-[A-Za-z0-9\-_]{20,}/g, // Public keys
+    /Bearer\s+[A-Za-z0-9\-_.~+/]{20,}/g, // Bearer tokens
+    /ntn_[A-Za-z0-9]{20,}/g, // Notion tokens
+    /xoxb-[A-Za-z0-9\-]{20,}/g, // Slack bot tokens
+    /ghp_[A-Za-z0-9]{20,}/g, // GitHub PATs
+    /gho_[A-Za-z0-9]{20,}/g, // GitHub OAuth tokens
+    /eyJ[A-Za-z0-9\-_]{30,}\.[A-Za-z0-9\-_]{30,}/g, // JWTs
+];
+function sanitizeLogData(data) {
+    if (typeof data === 'string') {
+        let sanitized = data;
+        for (const pattern of SECRET_PATTERNS) {
+            sanitized = sanitized.replace(pattern, (match) => match.slice(0, 6) + '…[REDACTED]');
+        }
+        return sanitized;
+    }
+    if (typeof data === 'object' && data !== null) {
+        return JSON.parse(JSON.stringify(data, (_key, value) => {
+            if (typeof value !== 'string')
+                return value;
+            let sanitized = value;
+            for (const pattern of SECRET_PATTERNS) {
+                sanitized = sanitized.replace(pattern, (match) => match.slice(0, 6) + '…[REDACTED]');
+            }
+            return sanitized;
+        }));
+    }
+    return data;
+}
+let currentLevel = 'debug';
+let auditCallback = null;
+export function setLogLevel(level) {
+    currentLevel = level;
+}
+export function setAuditCallback(cb) {
+    auditCallback = cb;
+}
+function log(level, module, msg, data) {
+    if (LEVELS[level] < LEVELS[currentLevel])
+        return;
+    const ts = new Date().toISOString();
+    const color = COLORS[level];
+    const prefix = `${color}[${level.toUpperCase().padEnd(5)}]${RESET} ${ts} [${module}]`;
+    let line;
+    if (data !== undefined) {
+        const safe = sanitizeLogData(data);
+        const tail = typeof safe === 'object' ? JSON.stringify(safe, null, 2) : String(safe);
+        line = `${prefix} ${msg} ${tail}`;
+    }
+    else {
+        line = `${prefix} ${msg}`;
+    }
+    console.log(line); // eslint-disable-line no-console
+    writeToLogFile(line);
+    auditCallback?.(level, module, msg, data);
+}
+export function createLogger(module) {
+    return {
+        debug: (msg, data) => log('debug', module, msg, data),
+        info: (msg, data) => log('info', module, msg, data),
+        warn: (msg, data) => log('warn', module, msg, data),
+        error: (msg, data) => log('error', module, msg, data),
+    };
+}
+//# sourceMappingURL=logger.js.map

package/dist/core/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/core/logger.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAE1E,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AAIpB,iFAAiF;AACjF,sEAAsE;AACtE,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AACvE,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACnC,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,OAAO,GAAG,iBAAiB,CAAC;AAElC,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,cAAsB;IACvD,IAAI,CAAC;QACH,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,CAAC;YACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,yBAAyB;QACnC,CAAC;QACD,IAAI,IAAI,GAAG,cAAc,IAAI,SAAS;YAAE,OAAO;QAE/C,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,8CAA8C;QAC9C,MAAM,MAAM,GAAG,GAAG,QAAQ,IAAI,aAAa,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,aAAa,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,GAAG,QAAQ,IAAI,CAAC,CAAC;YAC3C,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,GAAG,QAAQ,IAAI,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrB,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AAC1C,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,wEAAwE;AACxE,mDAAmD;AACnD,IAAI,KAAK,GAAkB,IAAI,CAAC;AAChC,SAAS,SAAS;IAChB,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IACvB,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO;IACxB,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,mDAAmD;AACnD,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAC9B,IAAI,CAAC;IACH,MAAM,UAAU,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,UAAU,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,EAAE,CAAC;QACvE,iBAAiB,GAAG,IAAI,CAAC;IAC3B,CAAC;AACH,CAAC;AAAC,MAAM,CAAC;IACP,6DAA6D;AAC/D,CAAC;AAED,IAAI,iBAAiB,EAAE,CAAC;IACtB,MAAM,IAAI,GAAG,CACX,MAA2B,EAC3B,OAAiB,EACjB,EAAY,EACH,EAAE;QACX,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,OAAO,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,IAAI,OAAO,QAAQ,KAAK,UAAU;YAAG,QAAuB,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,8DAA8D;IAC7D,OAAO,CAAC,MAAM,CAAC,KAAa,GAAG,IAAI,CAAC;IACrC,8DAA8D;IAC7D,OAAO,CAAC,MAAM,CAAC,KAAa,GAAG,IAAI,CAAC;AACvC,CAAC;AAED,MAAM,MAAM,GAA6B;IACvC,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;CACT,CAAC;AAEF,MAAM,MAAM,GAA6B;IACvC,KAAK,EAAE,UAAU,EAAE,OAAO;IAC1B,IAAI,EAAE,UAAU,EAAE,OAAO;IACzB,IAAI,EAAE,UAAU,EAAE,SAAS;IAC3B,KAAK,EAAE,UAAU,EAAE,MAAM;CAC1B,CAAC;AAEF,MAAM,KAAK,GAAG,SAAS,CAAC;AAExB,2DAA2D;AAC3D,MAAM,eAAe,GAAG;IACtB,yBAAyB,EAAE,8BAA8B;IACzD,yBAAyB,EAAE,cAAc;IACzC,mCAAmC,EAAE,gBAAgB;IACrD,uBAAuB,EAAE,gBAAgB;IACzC,0BAA0B,EAAE,mBAAmB;IAC/C,uBAAuB,EAAE,cAAc;IACvC,uBAAuB,EAAE,sBAAsB;IAC/C,8CAA8C,EAAE,OAAO;CACxD,CAAC;AAEF,SAAS,eAAe,CAAC,IAAa;IACpC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,SAAS,GAAG,IAAI,CAAC;QACrB,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;YACtC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC,KAAK,CACf,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YACnC,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC5C,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;gBACtC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC;YACvF,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,IAAI,YAAY,GAAa,OAAO,CAAC;AACrC,IAAI,aAAa,GACf,IAAI,CAAC;AAEP,MAAM,UAAU,WAAW,CAAC,KAAe;IACzC,YAAY,GAAG,KAAK,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAwB;IACvD,aAAa,GAAG,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,GAAG,CAAC,KAAe,EAAE,MAAc,EAAE,GAAW,EAAE,IAAc;IACvE,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC;QAAE,OAAO;IAEjD,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,GAAG,KAAK,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,EAAE,KAAK,MAAM,GAAG,CAAC;IAEtF,IAAI,IAAY,CAAC;IACjB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrF,IAAI,GAAG,GAAG,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IACpC,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,iCAAiC;IACpD,cAAc,CAAC,IAAI,CAAC,CAAC;IAErB,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO;QACL,KAAK,EAAE,CAAC,GAAW,EAAE,IAAc,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;QACvE,IAAI,EAAE,CAAC,GAAW,EAAE,IAAc,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;QACrE,IAAI,EAAE,CAAC,GAAW,EAAE,IAAc,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;QACrE,KAAK,EAAE,CAAC,GAAW,EAAE,IAAc,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;KACxE,CAAC;AACJ,CAAC"}

package/dist/core/server/http.d.ts

@@ -0,0 +1,15 @@
+import { type Express } from 'express';
+import http from 'http';
+import type { MemoryStore } from '../../memory/core/store.js';
+import type { ToolRouter } from './tool-router.js';
+export interface WebappOptions {
+    port: number;
+    store: MemoryStore;
+    router: ToolRouter;
+    clientDistDir?: string;
+}
+export declare function startWebapp(options: WebappOptions): {
+    app: Express;
+    server: http.Server;
+};
+//# sourceMappingURL=http.d.ts.map

package/dist/core/server/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../src/core/server/http.ts"],"names":[],"mappings":"AAAA,OAAgB,EAAE,KAAK,OAAO,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,IAAI,MAAM,MAAM,CAAC;AAiBxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAInD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE,UAAU,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,aAAa,GAAG;IAAE,GAAG,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;CAAE,CAkEzF"}

package/dist/core/server/http.js

@@ -0,0 +1,76 @@
+import express from 'express';
+import http from 'http';
+import path from 'path';
+import { fileURLToPath } from 'url';
+import { createLogger } from '../logger.js';
+import { mountMcpHttp } from './mcp-http.js';
+import { mountWebSocket } from './websocket.js';
+import { memoriesApi } from '../../server/api/memories.js';
+import { sourcesApi } from '../../server/api/sources.js';
+import { typesApi } from '../../server/api/types.js';
+import { viewsApi } from '../../server/api/views.js';
+import { dailyApi } from '../../server/api/daily.js';
+import { settingsApi } from '../../server/api/settings.js';
+import { reindexApi } from '../../server/api/reindex.js';
+import { syncStatusRouter } from '../../server/api/sync-status.js';
+import { graphApi } from '../../server/api/graph.js';
+import { integrationsApi } from '../../server/api/integrations.js';
+import { loadConfig } from '../../config/index.js';
+const log = createLogger('webapp');
+export function startWebapp(options) {
+    const app = express();
+    app.use(express.json({ limit: '4mb', strict: false }));
+    // Permissive CORS for localhost dev (any localhost port)
+    app.use((req, res, next) => {
+        const origin = req.headers.origin ?? '';
+        if (/^https?:\/\/localhost(:\d+)?$/.test(origin) || /^https?:\/\/127\.0\.0\.1(:\d+)?$/.test(origin)) {
+            res.setHeader('Access-Control-Allow-Origin', origin);
+            res.setHeader('Access-Control-Allow-Methods', 'GET,POST,PATCH,DELETE,OPTIONS');
+            res.setHeader('Access-Control-Allow-Headers', 'Content-Type,Authorization');
+            res.setHeader('Access-Control-Allow-Credentials', 'true');
+            if (req.method === 'OPTIONS') {
+                res.sendStatus(204);
+                return;
+            }
+        }
+        next();
+    });
+    // Localhost-only access
+    app.use((req, res, next) => {
+        const host = req.headers.host ?? '';
+        if (!host.startsWith('localhost:') &&
+            !host.startsWith('127.0.0.1:') &&
+            host !== 'localhost' &&
+            host !== '127.0.0.1') {
+            res.status(403).json({ error: 'engram-mcp dashboard only accepts localhost' });
+            return;
+        }
+        next();
+    });
+    // REST API
+    app.use('/api/memories', memoriesApi(options.store));
+    app.use('/api/sources', sourcesApi(options.store));
+    app.use('/api/types', typesApi());
+    app.use('/api/views', viewsApi());
+    app.use('/api/daily', dailyApi());
+    app.use('/api/settings', settingsApi());
+    app.use('/api/reindex', reindexApi());
+    app.use('/api/graph', graphApi(options.store));
+    app.use('/api/integrations', integrationsApi(() => loadConfig()));
+    app.use(syncStatusRouter());
+    // MCP HTTP transport
+    mountMcpHttp(app, options.router);
+    // Static client (production)
+    const clientDist = options.clientDistDir ?? path.join(path.dirname(fileURLToPath(import.meta.url)), '../../client/dist');
+    app.use(express.static(clientDist));
+    app.get(/^(?!\/api|\/mcp|\/ws).*/, (_req, res) => {
+        res.sendFile(path.join(clientDist, 'index.html'));
+    });
+    const server = http.createServer(app);
+    mountWebSocket(server, options.store);
+    server.listen(options.port, '127.0.0.1', () => {
+        log.info(`Dashboard listening on http://localhost:${options.port}`);
+    });
+    return { app, server };
+}
+//# sourceMappingURL=http.js.map

package/dist/core/server/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/core/server/http.ts"],"names":[],"mappings":"AAAA,OAAO,OAAyB,MAAM,SAAS,CAAC;AAChD,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAInD,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;AASnC,MAAM,UAAU,WAAW,CAAC,OAAsB;IAChD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAEvD,yDAAyD;IACzD,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QACxC,IAAI,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACpG,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;YACrD,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,+BAA+B,CAAC,CAAC;YAC/E,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,4BAA4B,CAAC,CAAC;YAC5E,GAAG,CAAC,SAAS,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;YAC1D,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC7B,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;QACH,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,wBAAwB;IACxB,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;QACpC,IACE,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAC9B,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAC9B,IAAI,KAAK,WAAW;YACpB,IAAI,KAAK,WAAW,EACpB,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,WAAW;IACX,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACnD,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClC,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,EAAE,CAAC,CAAC;IACxC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC;IACtC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/C,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,eAAe,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAClE,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAE5B,qBAAqB;IACrB,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAElC,6BAA6B;IAC7B,MAAM,UAAU,GACd,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACxG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACpC,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC/C,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACtC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAEtC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;QAC5C,GAAG,CAAC,IAAI,CAAC,2CAA2C,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACzB,CAAC"}

package/dist/core/server/instructions.d.ts

@@ -0,0 +1,2 @@
+export declare const ENGRAM_INSTRUCTIONS: string;
+//# sourceMappingURL=instructions.d.ts.map

package/dist/core/server/instructions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instructions.d.ts","sourceRoot":"","sources":["../../../src/core/server/instructions.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,QAkCxB,CAAC"}