@x12i/memorix-service 0.0.0-bootstrap.0

package/README.md

@@ -0,0 +1,37 @@
+# @x12i/memorix-service
+
+One production HTTP composition root over accepted Memorix packages (Phase 10 / G10).
+
+## Scope
+
+Every `/api/*` request requires:
+
+- `x-memorix-org-id` — organization data universe
+- `x-memorix-agent-ids` — comma-separated agent ids (effective metadata only)
+
+Singular `agentId` headers are rejected.
+
+## Run
+
+```bash
+# production (requires MONGO_URI)
+MEMORIX_SERVICE_MODE=prod MONGO_URI=mongodb://127.0.0.1:27017 npm run serve
+
+# local dev without mongo (metadata in-memory; durable routes 503)
+MEMORIX_SERVICE_MODE=dev npm run dev
+```
+
+Default port: `5190`.
+
+## Route families
+
+`/api/metadata` · `/api/data` · `/api/relationships` · `/api/memory` · `/api/pipelines` · `/api/operations` · `/api/workflow` · `/api/intelligence`
+
+OpenAPI: `GET /api/openapi.json`
+
+## Hard rules
+
+- Prod rejects missing Mongo and in-memory metadata/artifact fallbacks
+- No ad-hoc relationship link mutation (`/api/relationships/links` → 405)
+- Intelligence never auto-installs/publishes
+- Only `credentialRef` may cross Memory APIs

package/dist/app.d.ts

@@ -0,0 +1,21 @@
+import Fastify, { type FastifyInstance } from "fastify";
+import { type MemorixPlatform, type PlatformDeps } from "./platform.js";
+export type CreateMemorixServiceAppOptions = PlatformDeps & {
+    logger?: boolean;
+    platform?: MemorixPlatform;
+};
+export declare function createMemorixServiceApp(opts: CreateMemorixServiceAppOptions): Promise<{
+    app: FastifyInstance;
+    platform: MemorixPlatform;
+}>;
+export type StartMemorixServiceOptions = CreateMemorixServiceAppOptions & {
+    port?: number;
+    host?: string;
+};
+export declare function startMemorixServiceHttp(opts: StartMemorixServiceOptions): Promise<{
+    app: Fastify.FastifyInstance<Fastify.RawServerDefault, import("http").IncomingMessage, import("http").ServerResponse<import("http").IncomingMessage>, Fastify.FastifyBaseLogger, Fastify.FastifyTypeProviderDefault>;
+    platform: MemorixPlatform;
+    port: number;
+    host: string;
+}>;
+//# sourceMappingURL=app.d.ts.map

package/dist/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAIA,OAAO,OAAO,EAAE,EAAE,KAAK,eAAe,EAAE,MAAM,SAAS,CAAC;AAGxD,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAavB,MAAM,MAAM,8BAA8B,GAAG,YAAY,GAAG;IAC1D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B,CAAC;AAEF,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,8BAA8B,GACnC,OAAO,CAAC;IAAE,GAAG,EAAE,eAAe,CAAC;IAAC,QAAQ,EAAE,eAAe,CAAA;CAAE,CAAC,CAiD9D;AAED,MAAM,MAAM,0BAA0B,GAAG,8BAA8B,GAAG;IACxE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,0BAA0B;;;;;GAM7E"}

package/dist/app.js

@@ -0,0 +1,67 @@
+import { randomUUID } from "node:crypto";
+import { readFileSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import Fastify from "fastify";
+import cors from "@fastify/cors";
+import { mapErrorToHttp, redactSecrets } from "./errors.js";
+import { createMemorixPlatform, } from "./platform.js";
+import { resolveScope } from "./request-scope.js";
+import { registerMetadataRoutes } from "./routes/metadata.js";
+import { registerDataRoutes } from "./routes/data.js";
+import { registerRelationshipRoutes } from "./routes/relationships.js";
+import { registerMemoryRoutes } from "./routes/memory.js";
+import { registerPipelineRoutes } from "./routes/pipelines.js";
+import { registerOperationsRoutes } from "./routes/operations.js";
+import { registerWorkflowRoutes } from "./routes/workflow.js";
+import { registerIntelligenceRoutes } from "./routes/intelligence.js";
+const __dirname = dirname(fileURLToPath(import.meta.url));
+export async function createMemorixServiceApp(opts) {
+    const platform = opts.platform ?? (await createMemorixPlatform(opts));
+    const app = Fastify({ logger: opts.logger ?? false });
+    await app.register(cors, { origin: true });
+    app.addHook("onRequest", async (req, reply) => {
+        const correlationId = (typeof req.headers["x-correlation-id"] === "string" &&
+            req.headers["x-correlation-id"]) ||
+            randomUUID();
+        req.correlationId = correlationId;
+        reply.header("x-correlation-id", correlationId);
+    });
+    app.setErrorHandler((err, req, reply) => {
+        const correlationId = req.correlationId ?? randomUUID();
+        const mapped = mapErrorToHttp(err, correlationId);
+        mapped.body.error = redactSecrets(mapped.body.error);
+        return reply.code(mapped.status).send(mapped.body);
+    });
+    app.get("/health", async () => ({
+        ok: true,
+        service: "@x12i/memorix-service",
+        mode: platform.mode,
+    }));
+    app.get("/api/openapi.json", async (_req, reply) => {
+        const path = resolve(__dirname, "../openapi/openapi.json");
+        const body = readFileSync(path, "utf8");
+        return reply.type("application/json").send(JSON.parse(body));
+    });
+    app.get("/api/diagnostics/scope", async (req) => {
+        const scope = resolveScope(req);
+        return { scope, platform: platform.diagnostics(scope) };
+    });
+    await registerMetadataRoutes(app, platform);
+    await registerDataRoutes(app, platform);
+    await registerRelationshipRoutes(app, platform);
+    await registerMemoryRoutes(app, platform);
+    await registerPipelineRoutes(app, platform);
+    await registerOperationsRoutes(app, platform);
+    await registerWorkflowRoutes(app, platform);
+    await registerIntelligenceRoutes(app, platform);
+    return { app, platform };
+}
+export async function startMemorixServiceHttp(opts) {
+    const { app, platform } = await createMemorixServiceApp(opts);
+    const port = opts.port ?? Number(process.env.MEMORIX_SERVICE_PORT ?? 5190);
+    const host = opts.host ?? "127.0.0.1";
+    await app.listen({ port, host });
+    return { app, platform, port, host };
+}
+//# sourceMappingURL=app.js.map

package/dist/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,OAAiC,MAAM,SAAS,CAAC;AACxD,OAAO,IAAI,MAAM,eAAe,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EACL,qBAAqB,GAGtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAEtE,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAO1D,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAoC;IAEpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;IACtD,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3C,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC5C,MAAM,aAAa,GACjB,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,QAAQ;YAClD,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YAClC,UAAU,EAAE,CAAC;QACd,GAAkC,CAAC,aAAa,GAAG,aAAa,CAAC;QAClE,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,eAAe,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACtC,MAAM,aAAa,GAChB,GAAkC,CAAC,aAAa,IAAI,UAAU,EAAE,CAAC;QACpE,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAA6B,CAAC;QACjF,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC9B,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,uBAAuB;QAChC,IAAI,EAAE,QAAQ,CAAC,IAAI;KACpB,CAAC,CAAC,CAAC;IAEJ,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACjD,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC9C,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,MAAM,sBAAsB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACxC,MAAM,0BAA0B,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,oBAAoB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1C,MAAM,sBAAsB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,wBAAwB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,sBAAsB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,0BAA0B,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAEhD,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAAgC;IAC5E,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC;IACtC,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACjC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC"}

package/dist/catalog-bridge.d.ts

@@ -0,0 +1,7 @@
+import type { UnifiedMetadataClient } from "@x12i/memorix-metadata-runtime";
+import type { AbstractWriteCatalog, ReaderMetadataCatalog, WriterMetadataCatalog } from "@x12i/memorix-data";
+import type { RelationshipMetadataResolver } from "@x12i/memorix-relationships";
+export type ServiceCatalog = WriterMetadataCatalog & ReaderMetadataCatalog & AbstractWriteCatalog;
+export declare function catalogFromMetadataClient(metadata: UnifiedMetadataClient, agentIds: string[]): ServiceCatalog;
+export declare function relationshipMetadataResolver(metadata: UnifiedMetadataClient): RelationshipMetadataResolver;
+//# sourceMappingURL=catalog-bridge.d.ts.map

package/dist/catalog-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-bridge.d.ts","sourceRoot":"","sources":["../src/catalog-bridge.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,KAAK,EAEV,oBAAoB,EAGpB,qBAAqB,EACrB,qBAAqB,EACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAEhF,MAAM,MAAM,cAAc,GAAG,qBAAqB,GAChD,qBAAqB,GACrB,oBAAoB,CAAC;AAOvB,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,qBAAqB,EAC/B,QAAQ,EAAE,MAAM,EAAE,GACjB,cAAc,CAgJhB;AAED,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,qBAAqB,GAC9B,4BAA4B,CAuB9B"}

package/dist/catalog-bridge.js

@@ -0,0 +1,155 @@
+/**
+ * Bridge UnifiedMetadataClient → data-plane catalogs for ops wiring.
+ */
+import { BUILTIN_CONTENT_PROFILES } from "@x12i/memorix-format/v2";
+function asCategory(v) {
+    if (v === "event" || v === "knowledge" || v === "entity")
+        return v;
+    return "entity";
+}
+export function catalogFromMetadataClient(metadata, agentIds) {
+    const effective = metadata.resolveEffective(agentIds);
+    const objectTypes = new Map();
+    for (const entry of effective.effective ?? []) {
+        const def = entry.definition;
+        if (entry.kind === "object-types") {
+            const id = String(def.id ?? entry.id);
+            const contentTypesRaw = Array.isArray(def.contentTypes) ? def.contentTypes : [];
+            const contentTypes = contentTypesRaw
+                .map((ct) => typeof ct === "string" ? ct : String(ct.id ?? ""))
+                .filter(Boolean);
+            objectTypes.set(id, {
+                objectType: id,
+                dataCategory: asCategory(def.dataCategory),
+                contentTypes,
+            });
+        }
+    }
+    const abstracts = metadata.resolveAbstracts(agentIds);
+    const abstractPlans = new Map();
+    if (abstracts.ok) {
+        for (const plan of abstracts.plans) {
+            const membersByOt = new Map();
+            for (const prop of plan.properties) {
+                for (const path of prop.concretePaths) {
+                    let m = membersByOt.get(path.objectType);
+                    if (!m) {
+                        m = {
+                            objectType: path.objectType,
+                            contentType: path.contentType || "snapshots",
+                            dataCategory: objectTypes.get(path.objectType)?.dataCategory ?? "entity",
+                            directBindings: {},
+                        };
+                        membersByOt.set(path.objectType, m);
+                    }
+                    if (path.propertyPath) {
+                        m.directBindings[prop.abstractProperty] = path.propertyPath;
+                    }
+                    if (path.mappingId) {
+                        const mapDef = metadata.getDefinition(agentIds, "mappings", path.mappingId);
+                        if (mapDef?.definition) {
+                            m.mapping = mapDef.definition;
+                        }
+                    }
+                }
+            }
+            // Fallback members from plan.members if properties empty
+            if (membersByOt.size === 0) {
+                for (const mem of plan.members) {
+                    membersByOt.set(mem.objectType, {
+                        objectType: mem.objectType,
+                        contentType: "snapshots",
+                        dataCategory: objectTypes.get(mem.objectType)?.dataCategory ?? "entity",
+                        directBindings: { title: "data.displayName", role: "data.role" },
+                    });
+                }
+            }
+            const members = [...membersByOt.values()].map((m) => ({
+                objectType: m.objectType,
+                contentType: m.contentType,
+                dataCategory: m.dataCategory,
+                directBindings: m.directBindings,
+                mapping: (m.mapping ?? {
+                    id: `synthetic-${plan.abstractType}-${m.objectType}`,
+                    purpose: "abstract",
+                    map: Object.fromEntries(Object.entries(m.directBindings).map(([k, p]) => [
+                        k,
+                        { op: "path", path: p },
+                    ])),
+                    reverse: Object.fromEntries(Object.entries(m.directBindings).map(([k, p]) => [
+                        k,
+                        { expr: { op: "path", path: k }, targetPath: p },
+                    ])),
+                }),
+            }));
+            abstractPlans.set(plan.abstractType, {
+                abstractType: plan.abstractType,
+                abstractFields: plan.properties.map((p) => p.abstractProperty),
+                members,
+            });
+        }
+    }
+    return {
+        getObjectType(objectType) {
+            return objectTypes.get(objectType) ?? null;
+        },
+        getContentProfile(contentType) {
+            return BUILTIN_CONTENT_PROFILES[contentType];
+        },
+        getAllowedQueryPaths(_objectType, _contentType) {
+            return [
+                "recordId",
+                "revision",
+                "concept.title",
+                "data.*",
+                "data.displayName",
+                "data.role",
+                "data.status",
+                "data.priority",
+            ];
+        },
+        getAbstractPlan(abstractType) {
+            return abstractPlans.get(abstractType) ?? null;
+        },
+        isAbstractMember(abstractType, objectType) {
+            const plan = abstractPlans.get(abstractType);
+            return Boolean(plan?.members.some((m) => m.objectType === objectType));
+        },
+        getAbstractWriteBindings(abstractType, objectType) {
+            const plan = abstractPlans.get(abstractType);
+            const member = plan?.members.find((m) => m.objectType === objectType);
+            if (!member)
+                return [];
+            return Object.keys(member.directBindings).map((abstractProperty) => ({
+                abstractProperty,
+                objectType,
+                contentType: member.contentType,
+                dataCategory: member.dataCategory,
+                mapping: member.mapping,
+                reversible: true,
+            }));
+        },
+    };
+}
+export function relationshipMetadataResolver(metadata) {
+    return {
+        getRelationshipDefinition(definitionId, agentIds) {
+            const def = metadata.getDefinition(agentIds, "relationship-definitions", definitionId);
+            return def?.definition ?? null;
+        },
+        listRelationshipDefinitions(agentIds) {
+            const effective = metadata.resolveEffective(agentIds);
+            return (effective.effective ?? [])
+                .filter((e) => e.kind === "relationship-definitions")
+                .map((e) => e.definition);
+        },
+        getConcreteObjectTypes(abstractType, agentIds) {
+            const abstracts = metadata.resolveAbstracts(agentIds);
+            if (!abstracts.ok)
+                return [];
+            const plan = abstracts.plans.find((p) => p.abstractType === abstractType);
+            return (plan?.members ?? []).map((m) => m.objectType);
+        },
+    };
+}
+//# sourceMappingURL=catalog-bridge.js.map

package/dist/catalog-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-bridge.js","sourceRoot":"","sources":["../src/catalog-bridge.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAkBnE,SAAS,UAAU,CAAC,CAAU;IAC5B,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACnE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,QAA+B,EAC/B,QAAkB;IAElB,MAAM,SAAS,GAAG,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,IAAI,GAAG,EAA0B,CAAC;IAEtD,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,UAAqC,CAAC;QACxD,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAClC,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;YACtC,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,MAAM,YAAY,GAAG,eAAe;iBACjC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACV,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAE,EAAsB,CAAC,EAAE,IAAI,EAAE,CAAC,CACvE;iBACA,MAAM,CAAC,OAAO,CAAC,CAAC;YACnB,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE;gBAClB,UAAU,EAAE,EAAE;gBACd,YAAY,EAAE,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC;gBAC1C,YAAY;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,aAAa,GAAG,IAAI,GAAG,EAG1B,CAAC;IAEJ,IAAI,SAAS,CAAC,EAAE,EAAE,CAAC;QACjB,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YACnC,MAAM,WAAW,GAAG,IAAI,GAAG,EASxB,CAAC;YACJ,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACnC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;oBACtC,IAAI,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBACzC,IAAI,CAAC,CAAC,EAAE,CAAC;wBACP,CAAC,GAAG;4BACF,UAAU,EAAE,IAAI,CAAC,UAAU;4BAC3B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,WAAW;4BAC5C,YAAY,EAAE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,YAAY,IAAI,QAAQ;4BACxE,cAAc,EAAE,EAAE;yBACnB,CAAC;wBACF,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;oBACtC,CAAC;oBACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;wBACtB,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;oBAC9D,CAAC;oBACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;wBACnB,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;wBAC5E,IAAI,MAAM,EAAE,UAAU,EAAE,CAAC;4BACvB,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC,UAA6B,CAAC;wBACnD,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YACD,yDAAyD;YACzD,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC3B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBAC/B,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE;wBAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;wBAC1B,WAAW,EAAE,WAAW;wBACxB,YAAY,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,YAAY,IAAI,QAAQ;wBACvE,cAAc,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,WAAW,EAAE;qBACjE,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,MAAM,OAAO,GAAG,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpD,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,cAAc,EAAE,CAAC,CAAC,cAAc;gBAChC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI;oBACrB,EAAE,EAAE,aAAa,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,UAAU,EAAE;oBACpD,OAAO,EAAE,UAAU;oBACnB,GAAG,EAAE,MAAM,CAAC,WAAW,CACrB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;wBAC/C,CAAC;wBACD,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE;qBACxB,CAAC,CACH;oBACD,OAAO,EAAE,MAAM,CAAC,WAAW,CACzB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;wBAC/C,CAAC;wBACD,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE;qBACjD,CAAC,CACH;iBACF,CAAoB;aACtB,CAAC,CAAC,CAAC;YACJ,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE;gBACnC,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC;gBAC9D,OAAO;aACR,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,aAAa,CAAC,UAAU;YACtB,OAAO,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;QAC7C,CAAC;QACD,iBAAiB,CAAC,WAAW;YAC3B,OAAO,wBAAwB,CAAC,WAAW,CAAC,CAAC;QAC/C,CAAC;QACD,oBAAoB,CAAC,WAAW,EAAE,YAAY;YAC5C,OAAO;gBACL,UAAU;gBACV,UAAU;gBACV,eAAe;gBACf,QAAQ;gBACR,kBAAkB;gBAClB,WAAW;gBACX,aAAa;gBACb,eAAe;aAChB,CAAC;QACJ,CAAC;QACD,eAAe,CAAC,YAAY;YAC1B,OAAO,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC;QACjD,CAAC;QACD,gBAAgB,CAAC,YAAY,EAAE,UAAU;YACvC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC7C,OAAO,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC;QACzE,CAAC;QACD,wBAAwB,CAAC,YAAY,EAAE,UAAU;YAC/C,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;YACtE,IAAI,CAAC,MAAM;gBAAE,OAAO,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;gBACnE,gBAAgB;gBAChB,UAAU;gBACV,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC,CAAC;QACN,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,QAA+B;IAE/B,OAAO;QACL,yBAAyB,CAAC,YAAY,EAAE,QAAQ;YAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,aAAa,CAChC,QAAQ,EACR,0BAA0B,EAC1B,YAAY,CACb,CAAC;YACF,OAAQ,GAAG,EAAE,UAAqC,IAAI,IAAI,CAAC;QAC7D,CAAC;QACD,2BAA2B,CAAC,QAAQ;YAClC,MAAM,SAAS,GAAG,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACtD,OAAO,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC;iBAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,0BAA0B,CAAC;iBACpD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAoC,CAAC,CAAC;QACxD,CAAC;QACD,sBAAsB,CAAC,YAAY,EAAE,QAAQ;YAC3C,MAAM,SAAS,GAAG,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACtD,IAAI,CAAC,SAAS,CAAC,EAAE;gBAAE,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;YAC1E,OAAO,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,36 @@
+#!/usr/bin/env node
+import { readFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { startMemorixServiceHttp } from "./app.js";
+function loadMongoUri() {
+    if (process.env.MONGO_URI)
+        return process.env.MONGO_URI;
+    try {
+        const text = readFileSync(resolve(process.cwd(), "./.env"), "utf8");
+        const m = text.match(/^MONGO_URI=(.+)$/m);
+        return m?.[1]?.trim().replace(/^['"]|['"]$/g, "");
+    }
+    catch {
+        return undefined;
+    }
+}
+async function main() {
+    const cmd = process.argv[2] ?? "serve";
+    if (cmd !== "serve") {
+        console.error("Usage: memorix-service serve");
+        process.exit(1);
+    }
+    const mode = (process.env.MEMORIX_SERVICE_MODE ?? "prod");
+    const mongoUri = loadMongoUri();
+    const { port, host } = await startMemorixServiceHttp({
+        mode,
+        mongoUri,
+        logger: true,
+    });
+    console.log(`memorix-service listening on http://${host}:${port} (mode=${mode})`);
+}
+main().catch((err) => {
+    console.error(err);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAEnD,SAAS,YAAY;IACnB,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC1C,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;IACvC,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM,CAAmB,CAAC;IAC5E,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,uBAAuB,CAAC;QACnD,IAAI;QACJ,QAAQ;QACR,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,uCAAuC,IAAI,IAAI,IAAI,UAAU,IAAI,GAAG,CAAC,CAAC;AACpF,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,25 @@
+export type ServiceErrorBody = {
+    error: {
+        code: string;
+        message: string;
+        correlationId: string;
+        details?: unknown;
+        scope?: {
+            orgId: string;
+            agentIds: string[];
+        };
+    };
+};
+export declare class ServiceError extends Error {
+    readonly code: string;
+    readonly statusCode: number;
+    readonly details?: unknown;
+    constructor(code: string, message: string, statusCode?: number, details?: unknown);
+}
+export declare function mapErrorToHttp(err: unknown, correlationId: string): {
+    status: number;
+    body: ServiceErrorBody;
+};
+/** Never put secrets into error/log payloads. */
+export declare function redactSecrets(value: unknown): unknown;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,aAAa,EAAE,MAAM,CAAC;QACtB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,KAAK,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;KAC/C,CAAC;CACH,CAAC;AAEF,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;gBAEf,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,SAAM,EAAE,OAAO,CAAC,EAAE,OAAO;CAO/E;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,GAAG;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,gBAAgB,CAAC;CACxB,CAsCA;AAED,iDAAiD;AACjD,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAoBrD"}

package/dist/errors.js

@@ -0,0 +1,79 @@
+export class ServiceError extends Error {
+    code;
+    statusCode;
+    details;
+    constructor(code, message, statusCode = 400, details) {
+        super(message);
+        this.name = "ServiceError";
+        this.code = code;
+        this.statusCode = statusCode;
+        this.details = details;
+    }
+}
+export function mapErrorToHttp(err, correlationId) {
+    if (err && typeof err === "object" && "code" in err && "statusCode" in err) {
+        const e = err;
+        return {
+            status: e.statusCode,
+            body: {
+                error: {
+                    code: e.code,
+                    message: e.message,
+                    correlationId,
+                    details: e.details,
+                },
+            },
+        };
+    }
+    if (err instanceof Error && err.name === "ScopeValidationError") {
+        return {
+            status: 400,
+            body: {
+                error: {
+                    code: "SCOPE_INVALID",
+                    message: err.message,
+                    correlationId,
+                },
+            },
+        };
+    }
+    const message = err instanceof Error ? err.message : String(err);
+    return {
+        status: 500,
+        body: {
+            error: {
+                code: "INTERNAL_ERROR",
+                message,
+                correlationId,
+            },
+        },
+    };
+}
+/** Never put secrets into error/log payloads. */
+export function redactSecrets(value) {
+    if (value == null)
+        return value;
+    if (typeof value === "string") {
+        if (/password|secret|token|api[_-]?key|credential/i.test(value))
+            return "[REDACTED]";
+        if (/mongodb(\+srv)?:\/\/[^/\s]+:[^@\s]+@/i.test(value))
+            return "[REDACTED_URI]";
+        return value;
+    }
+    if (Array.isArray(value))
+        return value.map(redactSecrets);
+    if (typeof value === "object") {
+        const out = {};
+        for (const [k, v] of Object.entries(value)) {
+            if (/password|secret|token|api[_-]?key|credential|mongoUri/i.test(k)) {
+                out[k] = "[REDACTED]";
+            }
+            else {
+                out[k] = redactSecrets(v);
+            }
+        }
+        return out;
+    }
+    return value;
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAUA,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAS;IACb,UAAU,CAAS;IACnB,OAAO,CAAW;IAE3B,YAAY,IAAY,EAAE,OAAe,EAAE,UAAU,GAAG,GAAG,EAAE,OAAiB;QAC5E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED,MAAM,UAAU,cAAc,CAAC,GAAY,EAAE,aAAqB;IAIhE,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,YAAY,IAAI,GAAG,EAAE,CAAC;QAC3E,MAAM,CAAC,GAAG,GAAmB,CAAC;QAC9B,OAAO;YACL,MAAM,EAAE,CAAC,CAAC,UAAU;YACpB,IAAI,EAAE;gBACJ,KAAK,EAAE;oBACL,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,aAAa;oBACb,OAAO,EAAE,CAAC,CAAC,OAAO;iBACnB;aACF;SACF,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;QAChE,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,KAAK,EAAE;oBACL,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,aAAa;iBACd;aACF;SACF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE;YACJ,KAAK,EAAE;gBACL,IAAI,EAAE,gBAAgB;gBACtB,OAAO;gBACP,aAAa;aACd;SACF;KACF,CAAC;AACJ,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,+CAA+C,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,YAAY,CAAC;QACrF,IAAI,uCAAuC,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,gBAAgB,CAAC;QACjF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YACtE,IAAI,wDAAwD,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrE,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export { canonicalizeScope, scopeFromHeaders, ScopeValidationError, type MemorixScope, } from "./scope.js";
+export { resolveScope } from "./request-scope.js";
+export { ServiceError, mapErrorToHttp, redactSecrets, type ServiceErrorBody, } from "./errors.js";
+export { createMemorixPlatform, PlatformStartupError, type MemorixPlatform, type PlatformDeps, type RuntimeMode, type OrgPorts, } from "./platform.js";
+export { createMemorixServiceApp, startMemorixServiceHttp, type CreateMemorixServiceAppOptions, type StartMemorixServiceOptions, } from "./app.js";
+export { generateG10OrgId, generateG11OrgId, generateG12OrgId, beginIsolationSession, beginG11IsolationSession, beginG12IsolationSession, cleanupIsolationSession, isolationEvidence, assertSafeG10OrgId, assertSafeG11OrgId, assertSafeG12OrgId, assertSafeAcceptanceOrgId, G10_ORG_PATTERN, G11_ORG_PATTERN, G12_ORG_PATTERN, ACCEPTANCE_ORG_PATTERN, IsolationError, type IsolationSession, } from "./isolation.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,YAAY,GAClB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,YAAY,EACZ,cAAc,EACd,aAAa,EACb,KAAK,gBAAgB,GACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,QAAQ,GACd,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,KAAK,8BAA8B,EACnC,KAAK,0BAA0B,GAChC,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,yBAAyB,EACzB,eAAe,EACf,eAAe,EACf,eAAe,EACf,sBAAsB,EACtB,cAAc,EACd,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+export { canonicalizeScope, scopeFromHeaders, ScopeValidationError, } from "./scope.js";
+export { resolveScope } from "./request-scope.js";
+export { ServiceError, mapErrorToHttp, redactSecrets, } from "./errors.js";
+export { createMemorixPlatform, PlatformStartupError, } from "./platform.js";
+export { createMemorixServiceApp, startMemorixServiceHttp, } from "./app.js";
+export { generateG10OrgId, generateG11OrgId, generateG12OrgId, beginIsolationSession, beginG11IsolationSession, beginG12IsolationSession, cleanupIsolationSession, isolationEvidence, assertSafeG10OrgId, assertSafeG11OrgId, assertSafeG12OrgId, assertSafeAcceptanceOrgId, G10_ORG_PATTERN, G11_ORG_PATTERN, G12_ORG_PATTERN, ACCEPTANCE_ORG_PATTERN, IsolationError, } from "./isolation.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,GAErB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,YAAY,EACZ,cAAc,EACd,aAAa,GAEd,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GAKrB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,uBAAuB,EACvB,uBAAuB,GAGxB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,yBAAyB,EACzB,eAAe,EACf,eAAe,EACf,eAAe,EACf,sBAAsB,EACtB,cAAc,GAEf,MAAM,gBAAgB,CAAC"}

package/dist/isolation.d.ts

@@ -0,0 +1,63 @@
+import type { MongoClient } from "mongodb";
+export declare const G10_ORG_PREFIX = "g10ops";
+export declare const G11_ORG_PREFIX = "g11ops";
+export declare const G12_ORG_PREFIX = "g12ops";
+export declare const G10_ORG_PATTERN: RegExp;
+export declare const G11_ORG_PATTERN: RegExp;
+export declare const G12_ORG_PATTERN: RegExp;
+export declare const ACCEPTANCE_ORG_PATTERN: RegExp;
+export declare const FORBIDDEN_ORG_SUBSTRINGS: readonly ["neo", "fieldstone"];
+export type DatabaseKindName = "entity" | "event" | "knowledge" | "operational" | "metadata";
+export type IsolationSession = {
+    orgId: string;
+    agentIds: ["ops"];
+    allowedDatabaseNames: string[];
+    createdDatabaseNames: string[];
+    preflightExisting: string[];
+    isolatedMetadataDb: string;
+    zeroPreexistingMutated: true;
+};
+export declare class IsolationError extends Error {
+    readonly code = "DB_ISOLATION_VIOLATION";
+    constructor(message: string);
+}
+export declare function assertSafeG10OrgId(orgId: string): void;
+export declare function assertSafeG11OrgId(orgId: string): void;
+export declare function assertSafeG12OrgId(orgId: string): void;
+export declare function assertSafeAcceptanceOrgId(orgId: string, gate?: "g10" | "g11" | "g12" | "any"): void;
+export declare function generateG10OrgId(token?: string): string;
+export declare function generateG11OrgId(token?: string): string;
+export declare function generateG12OrgId(token?: string): string;
+export declare function allowedDatabasesForOrg(orgId: string): string[];
+/** Read-only list of DB names that already exist for this org prefix. */
+export declare function preflightOrgDatabases(client: MongoClient, orgId: string): Promise<{
+    existing: string[];
+    conflict: boolean;
+}>;
+export declare function beginIsolationSession(client: MongoClient, opts?: {
+    token?: string;
+    maxAttempts?: number;
+    prefix?: "g10ops" | "g11ops" | "g12ops";
+}): Promise<IsolationSession>;
+export declare function beginG11IsolationSession(client: MongoClient, opts?: {
+    token?: string;
+    maxAttempts?: number;
+}): Promise<IsolationSession>;
+export declare function beginG12IsolationSession(client: MongoClient, opts?: {
+    token?: string;
+    maxAttempts?: number;
+}): Promise<IsolationSession>;
+export declare function recordCreatedDatabase(session: IsolationSession, dbName: string): void;
+/** Drop only DBs recorded in this session's creation ledger (collections then empty DB if permitted). */
+export declare function cleanupIsolationSession(client: MongoClient, session: IsolationSession): Promise<string[]>;
+export declare function isolationEvidence(session: IsolationSession, extra?: Record<string, unknown>): {
+    orgId: string;
+    agentIds: ["ops"];
+    allowedDatabaseNames: string[];
+    preflightExisting: string[];
+    createdDatabaseNames: string[];
+    cleanupTargets: string[];
+    isolatedMetadataDb: string;
+    zeroPreexistingMutated: true;
+};
+//# sourceMappingURL=isolation.d.ts.map

package/dist/isolation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isolation.d.ts","sourceRoot":"","sources":["../src/isolation.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAG3C,eAAO,MAAM,cAAc,WAAW,CAAC;AACvC,eAAO,MAAM,cAAc,WAAW,CAAC;AACvC,eAAO,MAAM,cAAc,WAAW,CAAC;AACvC,eAAO,MAAM,eAAe,QAAsB,CAAC;AACnD,eAAO,MAAM,eAAe,QAAsB,CAAC;AACnD,eAAO,MAAM,eAAe,QAAsB,CAAC;AACnD,eAAO,MAAM,sBAAsB,QAA0B,CAAC;AAC9D,eAAO,MAAM,wBAAwB,gCAAiC,CAAC;AAGvE,MAAM,MAAM,gBAAgB,GACxB,QAAQ,GACR,OAAO,GACP,WAAW,GACX,aAAa,GACb,UAAU,CAAC;AAEf,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC;IAClB,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,IAAI,CAAC;CAC9B,CAAC;AAEF,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,4BAA4B;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAEtD;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAEtD;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAEtD;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAa,GAC1C,IAAI,CAuBN;AAED,wBAAgB,gBAAgB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAEvD;AAaD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAS9D;AAED,yEAAyE;AACzE,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,WAAW,EACnB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CASpD;AAED,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,WAAW,EACnB,IAAI,CAAC,EAAE;IACL,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;CACzC,GACA,OAAO,CAAC,gBAAgB,CAAC,CAyB3B;AAED,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,WAAW,EACnB,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9C,OAAO,CAAC,gBAAgB,CAAC,CAE3B;AAED,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,WAAW,EACnB,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9C,OAAO,CAAC,gBAAgB,CAAC,CAE3B;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAQrF;AAED,yGAAyG;AACzG,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,MAAM,EAAE,CAAC,CA2BnB;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;;;;;EAY3F"}