@waynesutton/agent-memory 0.0.1-alpha.1

package/dist/component/actions.js

@@ -0,0 +1,405 @@
+import { action } from "./_generated/server.js";
+import { internal } from "./_generated/api.js";
+import { v } from "convex/values";
+import { memoryTypeValidator, scopeValidator, } from "./schema.js";
+// ── Return validators ───────────────────────────────────────────────
+const memoryDocValidator = v.object({
+    _id: v.string(),
+    _creationTime: v.float64(),
+    projectId: v.string(),
+    scope: scopeValidator,
+    userId: v.optional(v.string()),
+    agentId: v.optional(v.string()),
+    sessionId: v.optional(v.string()),
+    title: v.string(),
+    content: v.string(),
+    memoryType: memoryTypeValidator,
+    tags: v.array(v.string()),
+    paths: v.optional(v.array(v.string())),
+    priority: v.optional(v.float64()),
+    source: v.optional(v.string()),
+    lastSyncedAt: v.optional(v.float64()),
+    checksum: v.string(),
+    archived: v.boolean(),
+    embeddingId: v.optional(v.string()),
+    accessCount: v.optional(v.float64()),
+    lastAccessedAt: v.optional(v.float64()),
+    positiveCount: v.optional(v.float64()),
+    negativeCount: v.optional(v.float64()),
+});
+const ingestEventValidator = v.union(v.literal("added"), v.literal("updated"), v.literal("deleted"), v.literal("skipped"));
+// ── generateEmbedding ───────────────────────────────────────────────
+export const generateEmbedding = action({
+    args: {
+        memoryId: v.string(),
+        embeddingApiKey: v.string(),
+        model: v.optional(v.string()),
+    },
+    returns: v.null(),
+    handler: async (ctx, args) => {
+        const model = args.model ?? "text-embedding-3-small";
+        const memory = await ctx.runQuery(internal.queries.get, {
+            memoryId: args.memoryId,
+        });
+        if (!memory)
+            throw new Error(`Memory not found: ${args.memoryId}`);
+        const response = await fetch("https://api.openai.com/v1/embeddings", {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${args.embeddingApiKey}`,
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify({
+                input: `${memory.title}\n\n${memory.content}`,
+                model,
+            }),
+        });
+        if (!response.ok) {
+            const error = await response.text();
+            throw new Error(`Embedding API error: ${response.status} ${error}`);
+        }
+        const data = (await response.json());
+        const embedding = data.data[0].embedding;
+        await ctx.runMutation(internal.mutations.storeEmbedding, {
+            memoryId: args.memoryId,
+            embedding,
+            model,
+            dimensions: embedding.length,
+        });
+        return null;
+    },
+});
+// ── semanticSearch ──────────────────────────────────────────────────
+export const semanticSearch = action({
+    args: {
+        projectId: v.string(),
+        query: v.string(),
+        embeddingApiKey: v.optional(v.string()),
+        limit: v.optional(v.float64()),
+    },
+    returns: v.array(memoryDocValidator),
+    handler: async (ctx, args) => {
+        const limit = args.limit ?? 10;
+        if (!args.embeddingApiKey) {
+            return await ctx.runQuery(internal.queries.search, {
+                projectId: args.projectId,
+                query: args.query,
+                limit,
+            });
+        }
+        const response = await fetch("https://api.openai.com/v1/embeddings", {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${args.embeddingApiKey}`,
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify({
+                input: args.query,
+                model: "text-embedding-3-small",
+            }),
+        });
+        if (!response.ok) {
+            return await ctx.runQuery(internal.queries.search, {
+                projectId: args.projectId,
+                query: args.query,
+                limit,
+            });
+        }
+        const data = (await response.json());
+        const queryEmbedding = data.data[0].embedding;
+        const vectorResults = await ctx.vectorSearch("embeddings", "by_embedding", {
+            vector: queryEmbedding,
+            limit: limit * 2,
+        });
+        const memories = [];
+        for (const result of vectorResults) {
+            const embedding = await ctx.runQuery(internal.queries.getEmbeddingMemory, {
+                embeddingId: result._id,
+            });
+            if (embedding &&
+                embedding.projectId === args.projectId &&
+                !embedding.archived) {
+                memories.push(embedding);
+                if (memories.length >= limit)
+                    break;
+            }
+        }
+        return memories;
+    },
+});
+// ── embedAll ────────────────────────────────────────────────────────
+export const embedAll = action({
+    args: {
+        projectId: v.string(),
+        embeddingApiKey: v.string(),
+        model: v.optional(v.string()),
+    },
+    returns: v.object({
+        embedded: v.float64(),
+        skipped: v.float64(),
+    }),
+    handler: async (ctx, args) => {
+        const memories = await ctx.runQuery(internal.queries.listUnembedded, {
+            projectId: args.projectId,
+        });
+        let embedded = 0;
+        let skipped = 0;
+        for (const memory of memories) {
+            try {
+                await ctx.runAction(internal.actions.generateEmbedding, {
+                    memoryId: memory._id,
+                    embeddingApiKey: args.embeddingApiKey,
+                    model: args.model,
+                });
+                embedded++;
+            }
+            catch {
+                skipped++;
+            }
+        }
+        return { embedded, skipped };
+    },
+});
+// ── ingest (intelligent memory pipeline) ────────────────────────────
+//
+// This is the core "smart memory" feature inspired by mem0.
+// It takes raw text (conversations, notes, etc.) and:
+// 1. Extracts discrete facts/learnings via LLM
+// 2. Searches existing memories for overlap
+// 3. Decides per-fact: ADD, UPDATE, DELETE, or SKIP
+// 4. Returns a structured changelog
+export const ingest = action({
+    args: {
+        projectId: v.string(),
+        content: v.string(), // raw text to extract memories from
+        scope: v.optional(scopeValidator),
+        userId: v.optional(v.string()),
+        agentId: v.optional(v.string()),
+        sessionId: v.optional(v.string()),
+        llmApiKey: v.string(), // OpenAI-compatible API key
+        llmModel: v.optional(v.string()),
+        llmBaseUrl: v.optional(v.string()),
+        embeddingApiKey: v.optional(v.string()),
+        customExtractionPrompt: v.optional(v.string()),
+        customUpdatePrompt: v.optional(v.string()),
+    },
+    returns: v.object({
+        results: v.array(v.object({
+            memoryId: v.string(),
+            content: v.string(),
+            event: ingestEventValidator,
+            previousContent: v.optional(v.string()),
+        })),
+        totalProcessed: v.float64(),
+    }),
+    handler: async (ctx, args) => {
+        const scope = args.scope ?? "project";
+        const llmModel = args.llmModel ?? "gpt-4.1-nano";
+        const llmBaseUrl = args.llmBaseUrl ?? "https://api.openai.com/v1";
+        // Load project settings for custom prompts
+        const projectSettings = await ctx.runQuery(internal.queries.getProjectSettings, { projectId: args.projectId });
+        const extractionPrompt = args.customExtractionPrompt ??
+            projectSettings?.settings.factExtractionPrompt ??
+            DEFAULT_EXTRACTION_PROMPT;
+        const updatePrompt = args.customUpdatePrompt ??
+            projectSettings?.settings.updateDecisionPrompt ??
+            DEFAULT_UPDATE_PROMPT;
+        // Step 1: Extract facts from input via LLM
+        const facts = await extractFacts(args.content, extractionPrompt, args.llmApiKey, llmModel, llmBaseUrl);
+        if (facts.length === 0) {
+            return { results: [], totalProcessed: 0 };
+        }
+        // Step 2: Load existing memories for dedup comparison
+        const existingMemories = await ctx.runQuery(internal.queries.listForIngest, { projectId: args.projectId, limit: 200 });
+        // Step 3: For each fact, decide action via LLM
+        const decisions = await decideActions(facts, existingMemories, updatePrompt, args.llmApiKey, llmModel, llmBaseUrl);
+        // Step 4: Execute decisions
+        const results = [];
+        for (const decision of decisions) {
+            switch (decision.action) {
+                case "ADD": {
+                    const memoryId = await ctx.runMutation(internal.mutations.ingestCreateMemory, {
+                        projectId: args.projectId,
+                        scope,
+                        userId: args.userId,
+                        agentId: args.agentId,
+                        sessionId: args.sessionId,
+                        title: decision.title,
+                        content: decision.content,
+                        memoryType: decision.memoryType ?? "learning",
+                        tags: decision.tags ?? [],
+                        source: "ingest",
+                    });
+                    // Generate embedding if API key available
+                    if (args.embeddingApiKey) {
+                        try {
+                            await ctx.runAction(internal.actions.generateEmbedding, {
+                                memoryId,
+                                embeddingApiKey: args.embeddingApiKey,
+                            });
+                        }
+                        catch {
+                            // Non-fatal: embedding generation failure shouldn't block ingest
+                        }
+                    }
+                    results.push({
+                        memoryId,
+                        content: decision.content,
+                        event: "added",
+                    });
+                    break;
+                }
+                case "UPDATE": {
+                    if (!decision.existingMemoryId)
+                        break;
+                    const existing = existingMemories.find((m) => m._id === decision.existingMemoryId);
+                    await ctx.runMutation(internal.mutations.ingestUpdateMemory, {
+                        memoryId: decision.existingMemoryId,
+                        content: decision.content,
+                    });
+                    results.push({
+                        memoryId: decision.existingMemoryId,
+                        content: decision.content,
+                        event: "updated",
+                        previousContent: existing?.content,
+                    });
+                    break;
+                }
+                case "DELETE": {
+                    if (!decision.existingMemoryId)
+                        break;
+                    const deletedMemory = existingMemories.find((m) => m._id === decision.existingMemoryId);
+                    await ctx.runMutation(internal.mutations.ingestDeleteMemory, {
+                        memoryId: decision.existingMemoryId,
+                    });
+                    results.push({
+                        memoryId: decision.existingMemoryId,
+                        content: deletedMemory?.content ?? "",
+                        event: "deleted",
+                        previousContent: deletedMemory?.content,
+                    });
+                    break;
+                }
+                default:
+                    results.push({
+                        memoryId: "",
+                        content: decision.content,
+                        event: "skipped",
+                    });
+            }
+        }
+        return { results, totalProcessed: facts.length };
+    },
+});
+// ── LLM helpers for ingest pipeline ─────────────────────────────────
+const DEFAULT_EXTRACTION_PROMPT = `You are a memory extraction system. Extract discrete, actionable facts from the following text.
+
+Rules:
+- Each fact should be a single, self-contained piece of information
+- Include preferences, decisions, corrections, patterns, and learnings
+- Exclude trivial or ephemeral information (greetings, acknowledgments)
+- Return facts as a JSON array of strings
+- Each fact should be 1-3 sentences maximum
+
+Return ONLY a JSON array of strings, no other text.`;
+const DEFAULT_UPDATE_PROMPT = `You are a memory management system. Given new facts and existing memories, decide what to do with each new fact.
+
+For each new fact, return one of:
+- ADD: Create a new memory (no existing memory covers this)
+- UPDATE: Merge with an existing memory (specify which one by ID and provide merged content)
+- DELETE: Remove an existing memory because the new fact contradicts/invalidates it
+- NONE: Skip this fact (already covered by existing memories)
+
+Also assign each ADD/UPDATE a:
+- title: short descriptive title (2-6 words)
+- memoryType: one of "instruction", "learning", "reference", "feedback", "journal"
+- tags: relevant tags as array of strings
+
+Return a JSON array of decision objects.`;
+async function callLLM(messages, apiKey, model, baseUrl) {
+    const response = await fetch(`${baseUrl}/chat/completions`, {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${apiKey}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify({
+            model,
+            messages,
+            temperature: 0.1,
+            max_tokens: 4096,
+        }),
+    });
+    if (!response.ok) {
+        const error = await response.text();
+        throw new Error(`LLM API error: ${response.status} ${error}`);
+    }
+    const data = (await response.json());
+    return data.choices[0].message.content;
+}
+function extractJson(text) {
+    // Strip markdown code fences if present
+    const fenced = text.match(/```(?:json)?\s*([\s\S]*?)```/);
+    if (fenced)
+        return fenced[1].trim();
+    // Strip <think> tags
+    const cleaned = text.replace(/<think>[\s\S]*?<\/think>/g, "").trim();
+    // Try to find JSON array or object
+    const jsonMatch = cleaned.match(/(\[[\s\S]*\]|\{[\s\S]*\})/);
+    return jsonMatch ? jsonMatch[1] : cleaned;
+}
+async function extractFacts(content, prompt, apiKey, model, baseUrl) {
+    const response = await callLLM([
+        { role: "system", content: prompt },
+        { role: "user", content },
+    ], apiKey, model, baseUrl);
+    try {
+        const parsed = JSON.parse(extractJson(response));
+        if (Array.isArray(parsed)) {
+            return parsed.map((item) => typeof item === "string" ? item : JSON.stringify(item));
+        }
+        return [];
+    }
+    catch {
+        return [];
+    }
+}
+async function decideActions(facts, existingMemories, prompt, apiKey, model, baseUrl) {
+    const existingStr = existingMemories
+        .map((m) => `[ID: ${m._id}] [${m.memoryType}] ${m.title}: ${m.content.slice(0, 200)}`)
+        .join("\n");
+    const factsStr = facts.map((f, i) => `${i + 1}. ${f}`).join("\n");
+    const userMessage = `## Existing Memories\n${existingStr || "(none)"}\n\n## New Facts\n${factsStr}`;
+    const response = await callLLM([
+        { role: "system", content: prompt },
+        { role: "user", content: userMessage },
+    ], apiKey, model, baseUrl);
+    try {
+        const parsed = JSON.parse(extractJson(response));
+        if (!Array.isArray(parsed))
+            return [];
+        return parsed
+            .filter((d) => d && typeof d === "object" && d.action && d.content)
+            .map((d) => ({
+            action: d.action,
+            content: String(d.content),
+            title: String(d.title ?? "untitled"),
+            existingMemoryId: d.existingMemoryId
+                ? String(d.existingMemoryId)
+                : undefined,
+            memoryType: d.memoryType ? String(d.memoryType) : undefined,
+            tags: Array.isArray(d.tags) ? d.tags.map(String) : undefined,
+        }));
+    }
+    catch {
+        // If LLM returns unparseable response, treat all facts as ADDs
+        return facts.map((f, i) => ({
+            action: "ADD",
+            content: f,
+            title: `fact-${i + 1}`,
+            memoryType: "learning",
+            tags: [],
+        }));
+    }
+}
+//# sourceMappingURL=actions.js.map

package/dist/component/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../src/component/actions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAClC,OAAO,EACL,mBAAmB,EACnB,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,uEAAuE;AAEvE,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,KAAK,EAAE,cAAc;IACrB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,UAAU,EAAE,mBAAmB;IAC/B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACtC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACjC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9B,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACnC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACpC,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACvC,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACtC,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;CACvC,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAClC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAClB,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EACpB,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EACpB,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CACrB,CAAC;AAEF,uEAAuE;AAEvE,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;IACtC,IAAI,EAAE;QACJ,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;QAC3B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC9B;IACD,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE;IACjB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,wBAAwB,CAAC;QAErD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE;YACtD,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEnE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,sCAAsC,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,eAAe,EAAE;gBAC/C,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,OAAO,MAAM,CAAC,OAAO,EAAE;gBAC7C,KAAK;aACN,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAElC,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEzC,MAAM,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE;YACvD,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS;YACT,KAAK;YACL,UAAU,EAAE,SAAS,CAAC,MAAM;SAC7B,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAC,CAAC;AAEH,uEAAuE;AAEvE,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;IACnC,IAAI,EAAE;QACJ,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACvC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;KAC/B;IACD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACpC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAE/B,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,OAAO,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE;gBACjD,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,sCAAsC,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,eAAe,EAAE;gBAC/C,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,KAAK,EAAE,wBAAwB;aAChC,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE;gBACjD,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAElC,CAAC;QACF,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE9C,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,YAAY,EAAE,cAAc,EAAE;YACzE,MAAM,EAAE,cAAc;YACtB,KAAK,EAAE,KAAK,GAAG,CAAC;SACjB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,EAAE,CAAC;QACpB,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,kBAAkB,EAAE;gBACxE,WAAW,EAAE,MAAM,CAAC,GAAwB;aAC7C,CAAC,CAAC;YACH,IACE,SAAS;gBACT,SAAS,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;gBACtC,CAAC,SAAS,CAAC,QAAQ,EACnB,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACzB,IAAI,QAAQ,CAAC,MAAM,IAAI,KAAK;oBAAE,MAAM;YACtC,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF,CAAC,CAAC;AAEH,uEAAuE;AAEvE,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC;IAC7B,IAAI,EAAE;QACJ,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;QAC3B,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC9B;IACD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;QACrB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;KACrB,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE;YACnE,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;QAEH,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE;oBACtD,QAAQ,EAAE,MAAM,CAAC,GAAG;oBACpB,eAAe,EAAE,IAAI,CAAC,eAAe;oBACrC,KAAK,EAAE,IAAI,CAAC,KAAK;iBAClB,CAAC,CAAC;gBACH,QAAQ,EAAE,CAAC;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;CACF,CAAC,CAAC;AAEH,uEAAuE;AACvE,EAAE;AACF,4DAA4D;AAC5D,sDAAsD;AACtD,+CAA+C;AAC/C,4CAA4C;AAC5C,oDAAoD;AACpD,oCAAoC;AAEpC,MAAM,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC;IAC3B,IAAI,EAAE;QACJ,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,oCAAoC;QACzD,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;QACjC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/B,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,4BAA4B;QACnD,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAChC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAClC,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACvC,sBAAsB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC9C,kBAAkB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC3C;IACD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,OAAO,EAAE,CAAC,CAAC,KAAK,CACd,CAAC,CAAC,MAAM,CAAC;YACP,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;YACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;YACnB,KAAK,EAAE,oBAAoB;YAC3B,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACxC,CAAC,CACH;QACD,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE;KAC5B,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,cAAc,CAAC;QACjD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,2BAA2B,CAAC;QAElE,2CAA2C;QAC3C,MAAM,eAAe,GAAG,MAAM,GAAG,CAAC,QAAQ,CACxC,QAAQ,CAAC,OAAO,CAAC,kBAAkB,EACnC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAC9B,CAAC;QAEF,MAAM,gBAAgB,GACpB,IAAI,CAAC,sBAAsB;YAC3B,eAAe,EAAE,QAAQ,CAAC,oBAAoB;YAC9C,yBAAyB,CAAC;QAE5B,MAAM,YAAY,GAChB,IAAI,CAAC,kBAAkB;YACvB,eAAe,EAAE,QAAQ,CAAC,oBAAoB;YAC9C,qBAAqB,CAAC;QAExB,2CAA2C;QAC3C,MAAM,KAAK,GAAG,MAAM,YAAY,CAC9B,IAAI,CAAC,OAAO,EACZ,gBAAgB,EAChB,IAAI,CAAC,SAAS,EACd,QAAQ,EACR,UAAU,CACX,CAAC;QAEF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;QAC5C,CAAC;QAED,sDAAsD;QACtD,MAAM,gBAAgB,GAAG,MAAM,GAAG,CAAC,QAAQ,CACzC,QAAQ,CAAC,OAAO,CAAC,aAAa,EAC9B,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAC1C,CAAC;QAEF,+CAA+C;QAC/C,MAAM,SAAS,GAAG,MAAM,aAAa,CACnC,KAAK,EACL,gBAAgB,EAChB,YAAY,EACZ,IAAI,CAAC,SAAS,EACd,QAAQ,EACR,UAAU,CACX,CAAC;QAEF,4BAA4B;QAC5B,MAAM,OAAO,GAKR,EAAE,CAAC;QAER,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACxB,KAAK,KAAK,CAAC,CAAC,CAAC;oBACX,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,WAAW,CACpC,QAAQ,CAAC,SAAS,CAAC,kBAAkB,EACrC;wBACE,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,KAAK;wBACL,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;wBACrB,OAAO,EAAE,QAAQ,CAAC,OAAO;wBACzB,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,UAAU;wBAC7C,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,EAAE;wBACzB,MAAM,EAAE,QAAQ;qBACjB,CACF,CAAC;oBAEF,0CAA0C;oBAC1C,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;wBACzB,IAAI,CAAC;4BACH,MAAM,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE;gCACtD,QAAQ;gCACR,eAAe,EAAE,IAAI,CAAC,eAAe;6BACtC,CAAC,CAAC;wBACL,CAAC;wBAAC,MAAM,CAAC;4BACP,iEAAiE;wBACnE,CAAC;oBACH,CAAC;oBAED,OAAO,CAAC,IAAI,CAAC;wBACX,QAAQ;wBACR,OAAO,EAAE,QAAQ,CAAC,OAAO;wBACzB,KAAK,EAAE,OAAO;qBACf,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;gBAED,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,IAAI,CAAC,QAAQ,CAAC,gBAAgB;wBAAE,MAAM;oBACtC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CACpC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,gBAAgB,CAChD,CAAC;oBAEF,MAAM,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,kBAAkB,EAAE;wBAC3D,QAAQ,EAAE,QAAQ,CAAC,gBAAgB;wBACnC,OAAO,EAAE,QAAQ,CAAC,OAAO;qBAC1B,CAAC,CAAC;oBAEH,OAAO,CAAC,IAAI,CAAC;wBACX,QAAQ,EAAE,QAAQ,CAAC,gBAAgB;wBACnC,OAAO,EAAE,QAAQ,CAAC,OAAO;wBACzB,KAAK,EAAE,SAAS;wBAChB,eAAe,EAAE,QAAQ,EAAE,OAAO;qBACnC,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;gBAED,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,IAAI,CAAC,QAAQ,CAAC,gBAAgB;wBAAE,MAAM;oBACtC,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,CACzC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,gBAAgB,CAChD,CAAC;oBAEF,MAAM,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,kBAAkB,EAAE;wBAC3D,QAAQ,EAAE,QAAQ,CAAC,gBAAgB;qBACpC,CAAC,CAAC;oBAEH,OAAO,CAAC,IAAI,CAAC;wBACX,QAAQ,EAAE,QAAQ,CAAC,gBAAgB;wBACnC,OAAO,EAAE,aAAa,EAAE,OAAO,IAAI,EAAE;wBACrC,KAAK,EAAE,SAAS;wBAChB,eAAe,EAAE,aAAa,EAAE,OAAO;qBACxC,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;gBAED;oBACE,OAAO,CAAC,IAAI,CAAC;wBACX,QAAQ,EAAE,EAAE;wBACZ,OAAO,EAAE,QAAQ,CAAC,OAAO;wBACzB,KAAK,EAAE,SAAS;qBACjB,CAAC,CAAC;YACP,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IACnD,CAAC;CACF,CAAC,CAAC;AAEH,uEAAuE;AAEvE,MAAM,yBAAyB,GAAG;;;;;;;;;oDASkB,CAAC;AAErD,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;yCAaW,CAAC;AAW1C,KAAK,UAAU,OAAO,CACpB,QAAkD,EAClD,MAAc,EACd,KAAa,EACb,OAAe;IAEf,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,mBAAmB,EAAE;QAC1D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,MAAM,EAAE;YACjC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK;YACL,QAAQ;YACR,WAAW,EAAE,GAAG;YAChB,UAAU,EAAE,IAAI;SACjB,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,kBAAkB,QAAQ,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAElC,CAAC;IACF,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;AACzC,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,wCAAwC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC1D,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAEpC,qBAAqB;IACrB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAErE,mCAAmC;IACnC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC7D,OAAO,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC5C,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAAe,EACf,MAAc,EACd,MAAc,EACd,KAAa,EACb,OAAe;IAEf,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B;QACE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE;QACnC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;KAC1B,EACD,MAAM,EACN,KAAK,EACL,OAAO,CACR,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,IAAa,EAAE,EAAE,CAClC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CACvD,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,KAAe,EACf,gBAKE,EACF,MAAc,EACd,MAAc,EACd,KAAa,EACb,OAAe;IAEf,MAAM,WAAW,GAAG,gBAAgB;SACjC,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,QAAQ,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC5E;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAElE,MAAM,WAAW,GAAG,yBAAyB,WAAW,IAAI,QAAQ,qBAAqB,QAAQ,EAAE,CAAC;IAEpG,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B;QACE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE;QACnC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE;KACvC,EACD,MAAM,EACN,KAAK,EACL,OAAO,CACR,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QAEtC,OAAO,MAAM;aACV,MAAM,CACL,CAAC,CAAM,EAAE,EAAE,CACT,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,CACtD;aACA,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;YAChB,MAAM,EAAE,CAAC,CAAC,MAA8C;YACxD,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1B,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,UAAU,CAAC;YACpC,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;gBAClC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC;gBAC5B,CAAC,CAAC,SAAS;YACb,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3D,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7D,CAAC,CAAC,CAAC;IACR,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;QAC/D,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1B,MAAM,EAAE,KAAc;YACtB,OAAO,EAAE,CAAC;YACV,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE;YACtB,UAAU,EAAE,UAAU;YACtB,IAAI,EAAE,EAAE;SACT,CAAC,CAAC,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/component/apiKeyMutations.d.ts

@@ -0,0 +1,29 @@
+export declare const createApiKey: import("convex/server").RegisteredMutation<"public", {
+    rateLimitOverride?: {
+        requestsPerWindow: number;
+        windowMs: number;
+    } | undefined;
+    expiresAt?: number | undefined;
+    projectId: string;
+    name: string;
+    permissions: string[];
+}, Promise<{
+    key: string;
+    keyHash: string;
+}>>;
+export declare const revokeApiKey: import("convex/server").RegisteredMutation<"public", {
+    keyHash: string;
+}, Promise<null>>;
+export declare const consumeRateLimit: import("convex/server").RegisteredMutation<"public", {
+    requestsPerWindow: number;
+    windowMs: number;
+    keyHash: string;
+}, Promise<{
+    allowed: boolean;
+    remaining: number;
+    retryAfterMs: number;
+}>>;
+export declare const cleanupRateLimitTokens: import("convex/server").RegisteredMutation<"internal", {}, Promise<{
+    deleted: number;
+}>>;
+//# sourceMappingURL=apiKeyMutations.d.ts.map

package/dist/component/apiKeyMutations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiKeyMutations.d.ts","sourceRoot":"","sources":["../../src/component/apiKeyMutations.ts"],"names":[],"mappings":"AAgCA,eAAO,MAAM,YAAY;;;;;;;;;;;;GAiCvB,CAAC;AAIH,eAAO,MAAM,YAAY;;iBAgBvB,CAAC;AAMH,eAAO,MAAM,gBAAgB;;;;;;;;GA2D3B,CAAC;AAMH,eAAO,MAAM,sBAAsB;;GAkBjC,CAAC"}

package/dist/component/apiKeyMutations.js

@@ -0,0 +1,149 @@
+import { mutation } from "./_generated/server.js";
+import { v } from "convex/values";
+// ── Hash helper ─────────────────────────────────────────────────────
+// Simple FNV-1a based hash for API key storage.
+// We use the same checksum function as the rest of the component
+// for consistency. For API keys the security model is "bearer token
+// stored in database" — the hash prevents plaintext key exposure
+// if the database is inspected, but the real security boundary is
+// Convex's deployment isolation.
+function hashKey(key) {
+    let hash = 2166136261;
+    for (let i = 0; i < key.length; i++) {
+        hash ^= key.charCodeAt(i);
+        hash = Math.imul(hash, 16777619);
+    }
+    return (hash >>> 0).toString(16).padStart(8, "0");
+}
+function generateKey() {
+    // Generate a URL-safe random key with "am_" prefix
+    const chars = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
+    let key = "am_";
+    for (let i = 0; i < 40; i++) {
+        key += chars.charAt(Math.floor(Math.random() * chars.length));
+    }
+    return key;
+}
+// ── createApiKey ────────────────────────────────────────────────────
+export const createApiKey = mutation({
+    args: {
+        projectId: v.string(),
+        name: v.string(),
+        permissions: v.array(v.string()),
+        rateLimitOverride: v.optional(v.object({
+            requestsPerWindow: v.float64(),
+            windowMs: v.float64(),
+        })),
+        expiresAt: v.optional(v.float64()),
+    },
+    returns: v.object({
+        key: v.string(), // plaintext key — only returned once
+        keyHash: v.string(),
+    }),
+    handler: async (ctx, args) => {
+        const key = generateKey();
+        const keyHash = hashKey(key);
+        await ctx.db.insert("apiKeys", {
+            keyHash,
+            projectId: args.projectId,
+            name: args.name,
+            permissions: args.permissions,
+            rateLimitOverride: args.rateLimitOverride,
+            expiresAt: args.expiresAt,
+            revoked: false,
+        });
+        return { key, keyHash };
+    },
+});
+// ── revokeApiKey ────────────────────────────────────────────────────
+export const revokeApiKey = mutation({
+    args: {
+        keyHash: v.string(),
+    },
+    returns: v.null(),
+    handler: async (ctx, args) => {
+        const existing = await ctx.db
+            .query("apiKeys")
+            .withIndex("by_key", (q) => q.eq("keyHash", args.keyHash))
+            .first();
+        if (!existing)
+            throw new Error(`API key not found: ${args.keyHash}`);
+        await ctx.db.patch(existing._id, { revoked: true });
+        return null;
+    },
+});
+// ── consumeRateLimit ────────────────────────────────────────────────
+// Atomically checks and increments the rate limit counter.
+// Returns whether the request is allowed and how many tokens remain.
+export const consumeRateLimit = mutation({
+    args: {
+        keyHash: v.string(),
+        requestsPerWindow: v.float64(),
+        windowMs: v.float64(),
+    },
+    returns: v.object({
+        allowed: v.boolean(),
+        remaining: v.float64(),
+        retryAfterMs: v.float64(),
+    }),
+    handler: async (ctx, args) => {
+        const now = Date.now();
+        const windowStart = Math.floor(now / args.windowMs) * args.windowMs;
+        // Look for existing token record for this window
+        const existing = await ctx.db
+            .query("rateLimitTokens")
+            .withIndex("by_key_window", (q) => q.eq("keyHash", args.keyHash).eq("windowStart", windowStart))
+            .first();
+        if (!existing) {
+            // First request in this window
+            await ctx.db.insert("rateLimitTokens", {
+                keyHash: args.keyHash,
+                windowStart,
+                tokenCount: 1,
+            });
+            return {
+                allowed: true,
+                remaining: args.requestsPerWindow - 1,
+                retryAfterMs: 0,
+            };
+        }
+        if (existing.tokenCount >= args.requestsPerWindow) {
+            // Rate limited
+            const windowEnd = windowStart + args.windowMs;
+            return {
+                allowed: false,
+                remaining: 0,
+                retryAfterMs: windowEnd - now,
+            };
+        }
+        // Consume a token
+        await ctx.db.patch(existing._id, {
+            tokenCount: existing.tokenCount + 1,
+        });
+        return {
+            allowed: true,
+            remaining: args.requestsPerWindow - existing.tokenCount - 1,
+            retryAfterMs: 0,
+        };
+    },
+});
+// ── cleanupRateLimitTokens (internal, used by cron) ─────────────────
+import { internalMutation } from "./_generated/server.js";
+export const cleanupRateLimitTokens = internalMutation({
+    args: {},
+    returns: v.object({ deleted: v.float64() }),
+    handler: async (ctx) => {
+        // Delete token records older than 1 hour (well past any window)
+        const cutoff = Date.now() - 60 * 60 * 1000;
+        const old = await ctx.db.query("rateLimitTokens").take(500);
+        let deleted = 0;
+        for (const record of old) {
+            if (record.windowStart < cutoff) {
+                await ctx.db.delete(record._id);
+                deleted++;
+            }
+        }
+        return { deleted };
+    },
+});
+//# sourceMappingURL=apiKeyMutations.js.map

package/dist/component/apiKeyMutations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiKeyMutations.js","sourceRoot":"","sources":["../../src/component/apiKeyMutations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAElC,uEAAuE;AACvE,gDAAgD;AAChD,iEAAiE;AACjE,oEAAoE;AACpE,iEAAiE;AACjE,kEAAkE;AAClE,iCAAiC;AAEjC,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,WAAW;IAClB,mDAAmD;IACnD,MAAM,KAAK,GAAG,gEAAgE,CAAC;IAC/E,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uEAAuE;AAEvE,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAC;IACnC,IAAI,EAAE;QACJ,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAChC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,CAC3B,CAAC,CAAC,MAAM,CAAC;YACP,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE;YAC9B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;SACtB,CAAC,CACH;QACD,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;KACnC;IACD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,qCAAqC;QACtD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACpB,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAE7B,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE;YAC7B,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QAEH,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IAC1B,CAAC;CACF,CAAC,CAAC;AAEH,uEAAuE;AAEvE,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAC;IACnC,IAAI,EAAE;QACJ,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACpB;IACD,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE;IACjB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,EAAE;aAC1B,KAAK,CAAC,SAAS,CAAC;aAChB,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;aAC9D,KAAK,EAAE,CAAC;QAEX,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAErE,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAC,CAAC;AAEH,uEAAuE;AACvE,2DAA2D;AAC3D,qEAAqE;AAErE,MAAM,CAAC,MAAM,gBAAgB,GAAG,QAAQ,CAAC;IACvC,IAAI,EAAE;QACJ,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE;QAC9B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;KACtB;IACD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;QACpB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;QACtB,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;KAC1B,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GACf,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QAElD,iDAAiD;QACjD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,EAAE;aAC1B,KAAK,CAAC,iBAAiB,CAAC;aACxB,SAAS,CAAC,eAAe,EAAE,CAAC,CAAM,EAAE,EAAE,CACrC,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,aAAa,EAAE,WAAW,CAAC,CAC7D;aACA,KAAK,EAAE,CAAC;QAEX,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,+BAA+B;YAC/B,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,EAAE;gBACrC,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,WAAW;gBACX,UAAU,EAAE,CAAC;aACd,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI,CAAC,iBAAiB,GAAG,CAAC;gBACrC,YAAY,EAAE,CAAC;aAChB,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAClD,eAAe;YACf,MAAM,SAAS,GAAG,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC9C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,CAAC;gBACZ,YAAY,EAAE,SAAS,GAAG,GAAG;aAC9B,CAAC;QACJ,CAAC;QAED,kBAAkB;QAClB,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE;YAC/B,UAAU,EAAE,QAAQ,CAAC,UAAU,GAAG,CAAC;SACpC,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI,CAAC,iBAAiB,GAAG,QAAQ,CAAC,UAAU,GAAG,CAAC;YAC3D,YAAY,EAAE,CAAC;SAChB,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,uEAAuE;AAEvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,MAAM,CAAC,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;IACrD,IAAI,EAAE,EAAE;IACR,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;IAC3C,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrB,gEAAgE;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAC3C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE5D,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,MAAM,IAAI,GAAG,EAAE,CAAC;YACzB,IAAI,MAAM,CAAC,WAAW,GAAG,MAAM,EAAE,CAAC;gBAChC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChC,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC;IACrB,CAAC;CACF,CAAC,CAAC"}

package/dist/component/apiKeyQueries.d.ts

@@ -0,0 +1,37 @@
+export declare const validateApiKey: import("convex/server").RegisteredQuery<"public", {
+    key: string;
+}, Promise<{
+    valid: false;
+    reason: string;
+    keyHash?: undefined;
+    projectId?: undefined;
+    permissions?: undefined;
+    rateLimit?: undefined;
+} | {
+    valid: true;
+    keyHash: string;
+    projectId: any;
+    permissions: any;
+    rateLimit: {
+        requestsPerWindow: number;
+        windowMs: number;
+    };
+    reason?: undefined;
+}>>;
+export declare const listApiKeys: import("convex/server").RegisteredQuery<"public", {
+    projectId: string;
+}, Promise<{
+    _id: string;
+    keyHash: any;
+    projectId: any;
+    name: any;
+    permissions: any;
+    rateLimitOverride: any;
+    lastUsedAt: any;
+    expiresAt: any;
+    revoked: any;
+}[]>>;
+export declare const updateKeyLastUsed: import("convex/server").RegisteredMutation<"public", {
+    keyHash: string;
+}, Promise<null>>;
+//# sourceMappingURL=apiKeyQueries.d.ts.map

package/dist/component/apiKeyQueries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiKeyQueries.d.ts","sourceRoot":"","sources":["../../src/component/apiKeyQueries.ts"],"names":[],"mappings":"AAiBA,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;GAmEzB,CAAC;AAKH,eAAO,MAAM,WAAW;;;SA+BO,MAAM;;;;;;;;;KAWnC,CAAC;AAOH,eAAO,MAAM,iBAAiB;;iBAiB5B,CAAC"}