@x12i/memorix-client-api 0.0.0-stage → 0.16.0

package/dist/cli.js

@@ -0,0 +1,102 @@
+import { resolve } from "node:path";
+import { createAuthixOrgResolver } from "./authix.js";
+import { createClientApi } from "./app.js";
+import { loadEnvFiles, resolveApiHost, resolveApiPort, resolveAuthMode, resolveMgcMcpUrl, resolveMemorixServiceUrl, resolveOptionalUrl, resolvePeerMode, resolveScoperFunctionsDir, resolveScoperReasoner, } from "./config.js";
+import { DEFAULT_SKILL_API_URL, SCOPER_CONTRACT_VERSION, SKILLS_CONTRACT_VERSION, probeScoper, probeSkillApi, selectPeer, } from "./peers.js";
+loadEnvFiles([resolve(process.cwd(), ".env"), resolve(process.cwd(), "../.env")]);
+let memorixUrl;
+let port;
+let host;
+let authMode;
+let mgcMcpUrl;
+let scoperReasoner;
+let scoperFunctionsDir;
+try {
+    memorixUrl = resolveMemorixServiceUrl();
+    port = resolveApiPort();
+    host = resolveApiHost();
+    authMode = resolveAuthMode();
+    mgcMcpUrl = resolveMgcMcpUrl();
+    scoperReasoner = resolveScoperReasoner();
+    scoperFunctionsDir = resolveScoperFunctionsDir();
+}
+catch (err) {
+    console.error(err instanceof Error ? err.message : String(err));
+    process.exit(1);
+}
+let auth;
+try {
+    auth =
+        authMode === "authix"
+            ? { mode: "authix", verify: await createAuthixOrgResolver() }
+            : { mode: "header" };
+}
+catch (err) {
+    console.error(err instanceof Error ? err.message : String(err));
+    process.exit(1);
+}
+let skillsPeer;
+let scoperPeer;
+try {
+    skillsPeer = await selectPeer({
+        kind: "skills",
+        mode: resolvePeerMode(process.env.SKILLS_MODE, "SKILLS_MODE"),
+        url: resolveOptionalUrl(process.env.SKILL_API_URL),
+        autoUrl: DEFAULT_SKILL_API_URL,
+        probe: probeSkillApi,
+        embedded: { source: "@x12i/memorix-client-api", version: SKILLS_CONTRACT_VERSION },
+        externalSource: "skill-api",
+    });
+    scoperPeer = await selectPeer({
+        kind: "scoper",
+        mode: resolvePeerMode(process.env.SCOPER_MODE, "SCOPER_MODE"),
+        url: resolveOptionalUrl(process.env.SCOPER_URL),
+        probe: probeScoper,
+        embedded: { source: "@x12i/memorix-scoper", version: SCOPER_CONTRACT_VERSION },
+        externalSource: "scoper",
+    });
+}
+catch (err) {
+    console.error(err instanceof Error ? err.message : String(err));
+    process.exit(1);
+}
+const contentAgentIds = (process.env.MEMORIX_AGENT_IDS ?? process.env.PROCESS_AGENT_ID ?? "")
+    .split(",")
+    .map((id) => id.trim())
+    .filter(Boolean);
+const mongoUri = process.env.ASSISTANT_MONGO_URI?.trim() || process.env.MONGO_URI?.trim() || undefined;
+const app = await createClientApi({
+    memorixUrl,
+    auth,
+    port,
+    mgcMcpUrl,
+    scoper: {
+        reasoner: scoperReasoner,
+        functionsDir: scoperPeer.mode === "embedded" ? scoperFunctionsDir : undefined,
+        functionsPackage: process.env.SCOPER_FUNCTIONS_PACKAGE,
+        learnFunctions: process.env.SCOPER_FUNCTIONS_LEARN?.trim() === "true",
+        peer: scoperPeer,
+    },
+    skills: {
+        peer: skillsPeer,
+        packDir: process.env.SKILLS_PACK_DIR,
+        agentsDir: process.env.AGENTS_DIR,
+        contentAgentIds,
+        mongoUri: skillsPeer.mode === "embedded" ? mongoUri : undefined,
+    },
+});
+await app.listen({ port: app.port, host });
+const displayHost = host === "0.0.0.0" || host === "::" ? "127.0.0.1" : host;
+const origin = `http://${displayHost}:${app.port}/`;
+console.log(`[memorix-client-api] listening  ${origin}`);
+console.log(`[memorix-client-api] health    ${origin}health`);
+console.log(`[memorix-client-api] live      ${origin}_live`);
+console.log(`[memorix-client-api] docs      ${origin}api/openapi.json`);
+console.log(`[memorix-client-api] reads     ${origin}_live/reads`);
+console.log(`[memorix-client-api] memorix   ${memorixUrl}`);
+console.log(`[memorix-client-api] nexum     ${memorixUrl}/mcp/nexum`);
+console.log(`[memorix-client-api] mgc       ${mgcMcpUrl ?? "discover from /api/connectors"}`);
+console.log(`[memorix-client-api] skills    ${skillsPeer.mode} ${skillsPeer.source}${skillsPeer.baseUrl ? ` ${skillsPeer.baseUrl}` : ""}`);
+console.log(`[memorix-client-api] scoper    ${scoperPeer.mode} @x12i/memorix-scoper@${scoperPeer.version} ${scoperReasoner}${scoperPeer.mode === "embedded" && scoperFunctionsDir ? ` functions ${scoperFunctionsDir}` : ""}${scoperPeer.baseUrl ? ` ${scoperPeer.baseUrl}` : ""}`);
+console.log(`[memorix-client-api] auth      ${auth.mode}`);
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,eAAe,EAAsB,MAAM,UAAU,CAAC;AAC/D,OAAO,EACL,YAAY,EACZ,cAAc,EACd,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,kBAAkB,EAClB,eAAe,EACf,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,EACvB,WAAW,EACX,aAAa,EACb,UAAU,GACX,MAAM,YAAY,CAAC;AAEpB,YAAY,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;AAElF,IAAI,UAAkB,CAAC;AACvB,IAAI,IAAY,CAAC;AACjB,IAAI,IAAY,CAAC;AACjB,IAAI,QAA4C,CAAC;AACjD,IAAI,SAA8C,CAAC;AACnD,IAAI,cAAwD,CAAC;AAC7D,IAAI,kBAAgE,CAAC;AACrE,IAAI,CAAC;IACH,UAAU,GAAG,wBAAwB,EAAE,CAAC;IACxC,IAAI,GAAG,cAAc,EAAE,CAAC;IACxB,IAAI,GAAG,cAAc,EAAE,CAAC;IACxB,QAAQ,GAAG,eAAe,EAAE,CAAC;IAC7B,SAAS,GAAG,gBAAgB,EAAE,CAAC;IAC/B,cAAc,GAAG,qBAAqB,EAAE,CAAC;IACzC,kBAAkB,GAAG,yBAAyB,EAAE,CAAC;AACnD,CAAC;AAAC,OAAO,GAAG,EAAE,CAAC;IACb,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,IAAmB,CAAC;AACxB,IAAI,CAAC;IACH,IAAI;QACF,QAAQ,KAAK,QAAQ;YACnB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,uBAAuB,EAAE,EAAE;YAC7D,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAAC,OAAO,GAAG,EAAE,CAAC;IACb,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,UAAkD,CAAC;AACvD,IAAI,UAAkD,CAAC;AACvD,IAAI,CAAC;IACH,UAAU,GAAG,MAAM,UAAU,CAAC;QAC5B,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC;QAC7D,GAAG,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAClD,OAAO,EAAE,qBAAqB;QAC9B,KAAK,EAAE,aAAa;QACpB,QAAQ,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,OAAO,EAAE,uBAAuB,EAAE;QAClF,cAAc,EAAE,WAAW;KAC5B,CAAC,CAAC;IACH,UAAU,GAAG,MAAM,UAAU,CAAC;QAC5B,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC;QAC7D,GAAG,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QAC/C,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,OAAO,EAAE,uBAAuB,EAAE;QAC9E,cAAc,EAAE,QAAQ;KACzB,CAAC,CAAC;AACL,CAAC;AAAC,OAAO,GAAG,EAAE,CAAC;IACb,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,eAAe,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC;KAC1F,KAAK,CAAC,GAAG,CAAC;KACV,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;KACtB,MAAM,CAAC,OAAO,CAAC,CAAC;AACnB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AAEvG,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC;IAChC,UAAU;IACV,IAAI;IACJ,IAAI;IACJ,SAAS;IACT,MAAM,EAAE;QACN,QAAQ,EAAE,cAAc;QACxB,YAAY,EAAE,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS;QAC7E,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB;QACtD,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,KAAK,MAAM;QACrE,IAAI,EAAE,UAAU;KACjB;IACD,MAAM,EAAE;QACN,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;QACpC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU;QACjC,eAAe;QACf,QAAQ,EAAE,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;KAChE;CACF,CAAC,CAAC;AACH,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAC3C,MAAM,WAAW,GAAG,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7E,MAAM,MAAM,GAAG,UAAU,WAAW,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC;AACpD,OAAO,CAAC,GAAG,CAAC,mCAAmC,MAAM,EAAE,CAAC,CAAC;AACzD,OAAO,CAAC,GAAG,CAAC,kCAAkC,MAAM,QAAQ,CAAC,CAAC;AAC9D,OAAO,CAAC,GAAG,CAAC,kCAAkC,MAAM,OAAO,CAAC,CAAC;AAC7D,OAAO,CAAC,GAAG,CAAC,kCAAkC,MAAM,kBAAkB,CAAC,CAAC;AACxE,OAAO,CAAC,GAAG,CAAC,kCAAkC,MAAM,aAAa,CAAC,CAAC;AACnE,OAAO,CAAC,GAAG,CAAC,kCAAkC,UAAU,EAAE,CAAC,CAAC;AAC5D,OAAO,CAAC,GAAG,CAAC,kCAAkC,UAAU,YAAY,CAAC,CAAC;AACtE,OAAO,CAAC,GAAG,CAAC,kCAAkC,SAAS,IAAI,+BAA+B,EAAE,CAAC,CAAC;AAC9F,OAAO,CAAC,GAAG,CACT,kCAAkC,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9H,CAAC;AACF,OAAO,CAAC,GAAG,CACT,kCAAkC,UAAU,CAAC,IAAI,yBAAyB,UAAU,CAAC,OAAO,IAAI,cAAc,GAAG,UAAU,CAAC,IAAI,KAAK,UAAU,IAAI,kBAAkB,CAAC,CAAC,CAAC,cAAc,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACvQ,CAAC;AACF,OAAO,CAAC,GAAG,CAAC,kCAAkC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,33 @@
+export declare const DEFAULT_MEMORIX_SERVICE_HOST = "127.0.0.1";
+export declare const DEFAULT_MEMORIX_SERVICE_PORT = 5100;
+export declare const DEFAULT_API_PORT = 5120;
+export declare const DEFAULT_API_HOST = "0.0.0.0";
+export type AuthMode = "header" | "authix";
+/** `auto` probes a peer and hosts locally when that peer is absent. */
+export type PeerMode = "auto" | "external" | "embedded";
+type Env = Record<string, string | undefined>;
+/** Memorix host. A full URL wins. Otherwise host and port default to localhost:5100. */
+export declare function resolveMemorixServiceUrl(env?: Env): string;
+/** Port this process listens on. Default 5120. */
+export declare function resolveApiPort(env?: Env): number;
+export declare function resolveApiHost(env?: Env): string;
+/**
+ * MGC MCP endpoint.
+ * `MGC_MCP_URL` wins. Otherwise `MGC_SOURCE_SERVICE_URL` (or `MGC_URL`) with `/mcp` appended.
+ * `undefined` means discover `genericConnectors.mcpUrl` from Memorix.
+ */
+export declare function resolveMgcMcpUrl(env?: Env): string | null | undefined;
+export type ScoperReasonerKind = "scripted" | "ai-dispatcher";
+/** Explicit `scripted` stays scripted. An unset reasoner plus an OpenRouter key selects the model. */
+export declare function resolveScoperReasoner(env?: Env): ScoperReasonerKind;
+/** Directory of saved query and scope functions. Unset means the reasoner answers alone. */
+export declare function resolveScoperFunctionsDir(env?: Env): string | undefined;
+/** `auto` probes. `external` requires a healthy peer. `embedded` does not probe. */
+export declare function resolvePeerMode(raw: string | undefined, name: string): PeerMode;
+/** Trimmed URL without a trailing slash. Empty is unset. */
+export declare function resolveOptionalUrl(raw: string | undefined): string | undefined;
+/** `header` takes the org from the request. `authix` takes it from the bearer token. */
+export declare function resolveAuthMode(env?: Env): AuthMode;
+export declare function loadEnvFiles(paths: string[], env?: Env): void;
+export {};
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,4BAA4B,cAAc,CAAC;AACxD,eAAO,MAAM,4BAA4B,OAAO,CAAC;AACjD,eAAO,MAAM,gBAAgB,OAAO,CAAC;AACrC,eAAO,MAAM,gBAAgB,YAAY,CAAC;AAE1C,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE3C,uEAAuE;AACvE,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CAAC;AAExD,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAY9C,wFAAwF;AACxF,wBAAgB,wBAAwB,CAAC,GAAG,GAAE,GAAiB,GAAG,MAAM,CAQvE;AAED,kDAAkD;AAClD,wBAAgB,cAAc,CAAC,GAAG,GAAE,GAAiB,GAAG,MAAM,CAE7D;AAED,wBAAgB,cAAc,CAAC,GAAG,GAAE,GAAiB,GAAG,MAAM,CAE7D;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,GAAiB,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAOlF;AAED,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,eAAe,CAAC;AAE9D,sGAAsG;AACtG,wBAAgB,qBAAqB,CAAC,GAAG,GAAE,GAAiB,GAAG,kBAAkB,CAMhF;AAED,4FAA4F;AAC5F,wBAAgB,yBAAyB,CAAC,GAAG,GAAE,GAAiB,GAAG,MAAM,GAAG,SAAS,CAGpF;AAED,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,QAAQ,CAK/E;AAED,4DAA4D;AAC5D,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAG9E;AAED,wFAAwF;AACxF,wBAAgB,eAAe,CAAC,GAAG,GAAE,GAAiB,GAAG,QAAQ,CAKhE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,GAAE,GAAiB,GAAG,IAAI,CAmB1E"}

package/dist/config.js

@@ -0,0 +1,109 @@
+import { existsSync, readFileSync } from "node:fs";
+export const DEFAULT_MEMORIX_SERVICE_HOST = "127.0.0.1";
+export const DEFAULT_MEMORIX_SERVICE_PORT = 5100;
+export const DEFAULT_API_PORT = 5120;
+export const DEFAULT_API_HOST = "0.0.0.0";
+function portOf(raw, fallback, name) {
+    const trimmed = raw?.trim();
+    if (!trimmed)
+        return fallback;
+    const port = Number(trimmed);
+    if (!Number.isInteger(port) || port < 1 || port > 65535) {
+        throw new Error(`${name} must be an integer from 1 to 65535`);
+    }
+    return port;
+}
+/** Memorix host. A full URL wins. Otherwise host and port default to localhost:5100. */
+export function resolveMemorixServiceUrl(env = process.env) {
+    const explicit = env.MEMORIX_SERVICE_URL?.trim() || env.MEMORIX_URL?.trim();
+    if (explicit)
+        return explicit.replace(/\/+$/, "");
+    const rawHost = env.MEMORIX_SERVICE_HOST?.trim() || DEFAULT_MEMORIX_SERVICE_HOST;
+    const host = rawHost === "0.0.0.0" || rawHost === "::" ? DEFAULT_MEMORIX_SERVICE_HOST : rawHost;
+    const port = portOf(env.MEMORIX_SERVICE_PORT, DEFAULT_MEMORIX_SERVICE_PORT, "MEMORIX_SERVICE_PORT");
+    return `http://${host}:${port}`;
+}
+/** Port this process listens on. Default 5120. */
+export function resolveApiPort(env = process.env) {
+    return portOf(env.MEMORIX_CLIENT_API_PORT, DEFAULT_API_PORT, "MEMORIX_CLIENT_API_PORT");
+}
+export function resolveApiHost(env = process.env) {
+    return env.HOST?.trim() || DEFAULT_API_HOST;
+}
+/**
+ * MGC MCP endpoint.
+ * `MGC_MCP_URL` wins. Otherwise `MGC_SOURCE_SERVICE_URL` (or `MGC_URL`) with `/mcp` appended.
+ * `undefined` means discover `genericConnectors.mcpUrl` from Memorix.
+ */
+export function resolveMgcMcpUrl(env = process.env) {
+    const explicit = env.MGC_MCP_URL?.trim();
+    if (explicit)
+        return explicit.replace(/\/+$/, "");
+    const source = env.MGC_SOURCE_SERVICE_URL?.trim() || env.MGC_URL?.trim();
+    if (!source)
+        return undefined;
+    const base = source.replace(/\/+$/, "");
+    return base.endsWith("/mcp") ? base : `${base}/mcp`;
+}
+/** Explicit `scripted` stays scripted. An unset reasoner plus an OpenRouter key selects the model. */
+export function resolveScoperReasoner(env = process.env) {
+    const explicit = env.SCOPER_REASONER?.trim();
+    if (explicit === "scripted" || explicit === "ai-dispatcher")
+        return explicit;
+    if (explicit)
+        throw new Error('SCOPER_REASONER must be "scripted" or "ai-dispatcher"');
+    if (env.OPENROUTER_API_KEY?.trim())
+        return "ai-dispatcher";
+    return "scripted";
+}
+/** Directory of saved query and scope functions. Unset means the reasoner answers alone. */
+export function resolveScoperFunctionsDir(env = process.env) {
+    const dir = env.SCOPER_FUNCTIONS_DIR?.trim();
+    return dir || undefined;
+}
+/** `auto` probes. `external` requires a healthy peer. `embedded` does not probe. */
+export function resolvePeerMode(raw, name) {
+    const value = raw?.trim().toLowerCase();
+    if (!value || value === "auto")
+        return "auto";
+    if (value === "external" || value === "embedded")
+        return value;
+    throw new Error(`${name} must be "auto", "external", or "embedded"`);
+}
+/** Trimmed URL without a trailing slash. Empty is unset. */
+export function resolveOptionalUrl(raw) {
+    const trimmed = raw?.trim().replace(/\/+$/, "");
+    return trimmed || undefined;
+}
+/** `header` takes the org from the request. `authix` takes it from the bearer token. */
+export function resolveAuthMode(env = process.env) {
+    const raw = env.MEMORIX_AUTH?.trim().toLowerCase();
+    if (!raw || raw === "header" || raw === "off" || raw === "none")
+        return "header";
+    if (raw === "authix")
+        return "authix";
+    throw new Error('MEMORIX_AUTH must be "header" or "authix"');
+}
+export function loadEnvFiles(paths, env = process.env) {
+    for (const file of paths) {
+        if (!existsSync(file))
+            continue;
+        for (const line of readFileSync(file, "utf8").split(/\r?\n/)) {
+            const trimmed = line.trim();
+            if (!trimmed || trimmed.startsWith("#"))
+                continue;
+            const eq = trimmed.indexOf("=");
+            if (eq <= 0)
+                continue;
+            const key = trimmed.slice(0, eq).trim();
+            let value = trimmed.slice(eq + 1).trim();
+            if ((value.startsWith('"') && value.endsWith('"')) ||
+                (value.startsWith("'") && value.endsWith("'"))) {
+                value = value.slice(1, -1);
+            }
+            if (env[key] === undefined)
+                env[key] = value;
+        }
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD,MAAM,CAAC,MAAM,4BAA4B,GAAG,WAAW,CAAC;AACxD,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AACjD,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAAC;AAS1C,SAAS,MAAM,CAAC,GAAuB,EAAE,QAAgB,EAAE,IAAY;IACrE,MAAM,OAAO,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qCAAqC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,wBAAwB,CAAC,MAAW,OAAO,CAAC,GAAG;IAC7D,MAAM,QAAQ,GAAG,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IAC5E,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAElD,MAAM,OAAO,GAAG,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,IAAI,4BAA4B,CAAC;IACjF,MAAM,IAAI,GAAG,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,OAAO,CAAC;IAChG,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,4BAA4B,EAAE,sBAAsB,CAAC,CAAC;IACpG,OAAO,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC;AAClC,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,cAAc,CAAC,MAAW,OAAO,CAAC,GAAG;IACnD,OAAO,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,gBAAgB,EAAE,yBAAyB,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAW,OAAO,CAAC,GAAG;IACnD,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,gBAAgB,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAW,OAAO,CAAC,GAAG;IACrD,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IACzC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;IACzE,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC;AACtD,CAAC;AAID,sGAAsG;AACtG,MAAM,UAAU,qBAAqB,CAAC,MAAW,OAAO,CAAC,GAAG;IAC1D,MAAM,QAAQ,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IAC7C,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,eAAe;QAAE,OAAO,QAAQ,CAAC;IAC7E,IAAI,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IACvF,IAAI,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE;QAAE,OAAO,eAAe,CAAC;IAC3D,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,yBAAyB,CAAC,MAAW,OAAO,CAAC,GAAG;IAC9D,MAAM,GAAG,GAAG,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC;IAC7C,OAAO,GAAG,IAAI,SAAS,CAAC;AAC1B,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe,CAAC,GAAuB,EAAE,IAAY;IACnE,MAAM,KAAK,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxC,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IAC/D,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4CAA4C,CAAC,CAAC;AACvE,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,kBAAkB,CAAC,GAAuB;IACxD,MAAM,OAAO,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChD,OAAO,OAAO,IAAI,SAAS,CAAC;AAC9B,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,eAAe,CAAC,MAAW,OAAO,CAAC,GAAG;IACpD,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnD,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC;IACjF,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACtC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAe,EAAE,MAAW,OAAO,CAAC,GAAG;IAClE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,EAAE,IAAI,CAAC;gBAAE,SAAS;YACtB,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACxC,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACzC,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;gBACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC;YACD,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC/C,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/derived.d.ts

@@ -0,0 +1,2 @@
+export declare function contentTypeIsDerived(id: string, explicit?: boolean): boolean;
+//# sourceMappingURL=derived.d.ts.map

package/dist/derived.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"derived.d.ts","sourceRoot":"","sources":["../src/derived.ts"],"names":[],"mappings":"AA0BA,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAK5E"}

package/dist/derived.js

@@ -0,0 +1,35 @@
+/**
+ * Processing-result content types. A stored row of one of these belongs to
+ * that record. Source content does not. Any object type in the catalog may
+ * declare them. Metadata `derived: true` or `derived: false` on a content
+ * type wins over this list.
+ */
+const PROCESSING_RESULT_CONTENT_TYPES = new Set([
+    "overview",
+    "analysis",
+    "analysis-refined",
+    "analysis-enriched",
+    "analysis-closure",
+    "analysis-repair",
+    "analysis-deepened",
+    "analysis-mechanism-gap",
+    "analysis-corrected",
+    "triage",
+    "triage-model",
+    "triage-reassessment",
+    "predicted-attack",
+    "mitigation",
+    "observation",
+    "estate-analytics",
+    "process-manifest",
+]);
+export function contentTypeIsDerived(id, explicit) {
+    if (id === "relationships")
+        return false;
+    if (explicit === true)
+        return true;
+    if (explicit === false)
+        return false;
+    return PROCESSING_RESULT_CONTENT_TYPES.has(id);
+}
+//# sourceMappingURL=derived.js.map

package/dist/derived.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"derived.js","sourceRoot":"","sources":["../src/derived.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,+BAA+B,GAAG,IAAI,GAAG,CAAC;IAC9C,UAAU;IACV,UAAU;IACV,kBAAkB;IAClB,mBAAmB;IACnB,kBAAkB;IAClB,iBAAiB;IACjB,mBAAmB;IACnB,wBAAwB;IACxB,oBAAoB;IACpB,QAAQ;IACR,cAAc;IACd,qBAAqB;IACrB,kBAAkB;IAClB,YAAY;IACZ,aAAa;IACb,kBAAkB;IAClB,kBAAkB;CACnB,CAAC,CAAC;AAEH,MAAM,UAAU,oBAAoB,CAAC,EAAU,EAAE,QAAkB;IACjE,IAAI,EAAE,KAAK,eAAe;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,+BAA+B,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACjD,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,11 @@
+export declare class ApiError extends Error {
+    readonly statusCode: number;
+    readonly code: string;
+    constructor(statusCode: number, code: string, message: string);
+}
+export declare class UpstreamError extends Error {
+    readonly statusCode: number;
+    readonly body: unknown;
+    constructor(statusCode: number, body: unknown);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,QAAS,SAAQ,KAAK;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAM9D;AAED,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;gBAEX,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO;CAM9C"}

package/dist/errors.js

@@ -0,0 +1,21 @@
+export class ApiError extends Error {
+    statusCode;
+    code;
+    constructor(statusCode, code, message) {
+        super(message);
+        this.name = "ApiError";
+        this.statusCode = statusCode;
+        this.code = code;
+    }
+}
+export class UpstreamError extends Error {
+    statusCode;
+    body;
+    constructor(statusCode, body) {
+        super(`Memorix responded ${statusCode}`);
+        this.name = "UpstreamError";
+        this.statusCode = statusCode;
+        this.body = body;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,QAAS,SAAQ,KAAK;IACxB,UAAU,CAAS;IACnB,IAAI,CAAS;IAEtB,YAAY,UAAkB,EAAE,IAAY,EAAE,OAAe;QAC3D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,UAAU,CAAS;IACnB,IAAI,CAAU;IAEvB,YAAY,UAAkB,EAAE,IAAa;QAC3C,KAAK,CAAC,qBAAqB,UAAU,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF"}

package/dist/fetch.d.ts

@@ -0,0 +1,17 @@
+import type { FastifyInstance, FastifyRequest } from "fastify";
+import { type ObjectTypeView } from "./catalog.js";
+import { type ClientScope } from "./scope.js";
+import { type Upstream } from "./upstream.js";
+/** Read-only Nexum tools served by memorix-service `POST /mcp/nexum`. */
+export declare const NEXUM_MCP_TOOLS: readonly ["nexum_list_snapshots", "nexum_get_snapshot", "nexum_get_connected_content", "nexum_knowledge_status", "nexum_list_entities", "nexum_get_entity", "nexum_query"];
+export type FetchRouteOptions = {
+    upstream: Upstream;
+    memorixUrl: string;
+    fetchImpl: typeof fetch;
+    scopeFor: (req: FastifyRequest) => Promise<ClientScope>;
+    loadCatalog: (upstream: Upstream, scope: ClientScope) => Promise<ObjectTypeView[]>;
+    /** MGC MCP URL. `null` disables the proxy. `undefined` discovers it from `GET /api/connectors`. */
+    mgcMcpUrl?: string | null;
+};
+export declare function registerFetchRoutes(app: FastifyInstance, options: FetchRouteOptions): void;
+//# sourceMappingURL=fetch.d.ts.map

package/dist/fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../src/fetch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgB,cAAc,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAmC,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAUpF,OAAO,EAAa,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzD,OAAO,EAAY,KAAK,QAAQ,EAAE,MAAM,eAAe,CAAC;AAExD,yEAAyE;AACzE,eAAO,MAAM,eAAe,4KAQlB,CAAC;AA2BX,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,QAAQ,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,KAAK,CAAC;IACxB,QAAQ,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;IACxD,WAAW,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IACnF,mGAAmG;IACnG,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,eAAe,EAAE,OAAO,EAAE,iBAAiB,GAAG,IAAI,CA2Y1F"}