@x12i/memorix-service 3.11.1 → 3.12.0

package/dist/routes/hooks.js

@@ -0,0 +1,104 @@
+import { resolveScope } from "../request-scope.js";
+import { ServiceError } from "../errors.js";
+import { sameAgentIds, toPublicDelivery, toPublicSubscription, } from "../hooks/types.js";
+import { assertSubscriptionId, parseDeliveryLimit, parseDeliveryStatus, parseSubscriptionPatch, parseSubscriptionPut, } from "../hooks/validate.js";
+function inScope(row, agentIds) {
+    return sameAgentIds(row.agentIds, agentIds);
+}
+export async function registerHookRoutes(app, platform) {
+    app.put("/api/hooks/v1/subscriptions/:subscriptionId", async (req) => {
+        const scope = resolveScope(req);
+        const subscriptionId = assertSubscriptionId(req.params.subscriptionId);
+        const body = parseSubscriptionPut(req.body);
+        const store = platform.hooksFor(scope.orgId);
+        const existing = await store.findSubscription(subscriptionId);
+        if (existing && !inScope(existing, scope.agentIds)) {
+            throw new ServiceError("HOOK_SUBSCRIPTION_INVALID", "subscriptionId is registered to a different agent scope", 409);
+        }
+        if (!existing && !body.signingSecret) {
+            throw new ServiceError("HOOK_SUBSCRIPTION_INVALID", "signing key is required on create", 400);
+        }
+        const now = new Date().toISOString();
+        const endpointChanged = Boolean(existing && existing.endpoint !== body.endpoint);
+        const row = {
+            subscriptionId,
+            orgId: scope.orgId,
+            agentIds: [...scope.agentIds],
+            endpoint: body.endpoint,
+            signingSecret: body.signingSecret ?? existing.signingSecret,
+            enabled: body.enabled,
+            match: body.match,
+            health: endpointChanged ? "ok" : (existing?.health ?? "ok"),
+            createdAt: existing?.createdAt ?? now,
+            updatedAt: now,
+        };
+        await store.saveSubscription(row);
+        if (endpointChanged)
+            await store.retargetPending(subscriptionId, body.endpoint);
+        return toPublicSubscription(row);
+    });
+    app.get("/api/hooks/v1/subscriptions", async (req) => {
+        const scope = resolveScope(req);
+        const store = platform.hooksFor(scope.orgId);
+        const rows = await store.listSubscriptions();
+        return { subscriptions: rows.filter((row) => inScope(row, scope.agentIds)).map(toPublicSubscription) };
+    });
+    app.get("/api/hooks/v1/subscriptions/:subscriptionId", async (req) => {
+        const scope = resolveScope(req);
+        const subscriptionId = assertSubscriptionId(req.params.subscriptionId);
+        const row = await platform.hooksFor(scope.orgId).findSubscription(subscriptionId);
+        if (!row || !inScope(row, scope.agentIds)) {
+            throw new ServiceError("HOOK_SUBSCRIPTION_NOT_FOUND", "subscription not found", 404);
+        }
+        return toPublicSubscription(row);
+    });
+    app.patch("/api/hooks/v1/subscriptions/:subscriptionId", async (req) => {
+        const scope = resolveScope(req);
+        const subscriptionId = assertSubscriptionId(req.params.subscriptionId);
+        const patch = parseSubscriptionPatch(req.body);
+        const store = platform.hooksFor(scope.orgId);
+        const existing = await store.findSubscription(subscriptionId);
+        if (!existing || !inScope(existing, scope.agentIds)) {
+            throw new ServiceError("HOOK_SUBSCRIPTION_NOT_FOUND", "subscription not found", 404);
+        }
+        const endpointChanged = patch.endpoint !== undefined && patch.endpoint !== existing.endpoint;
+        const row = {
+            ...existing,
+            ...(patch.endpoint !== undefined ? { endpoint: patch.endpoint } : {}),
+            ...(patch.enabled !== undefined ? { enabled: patch.enabled } : {}),
+            ...(patch.match !== undefined ? { match: patch.match } : {}),
+            health: endpointChanged ? "ok" : existing.health,
+            updatedAt: new Date().toISOString(),
+        };
+        await store.saveSubscription(row);
+        if (endpointChanged && patch.endpoint)
+            await store.retargetPending(subscriptionId, patch.endpoint);
+        return toPublicSubscription(row);
+    });
+    app.delete("/api/hooks/v1/subscriptions/:subscriptionId", async (req) => {
+        const scope = resolveScope(req);
+        const subscriptionId = assertSubscriptionId(req.params.subscriptionId);
+        const store = platform.hooksFor(scope.orgId);
+        const existing = await store.findSubscription(subscriptionId);
+        if (!existing || !inScope(existing, scope.agentIds)) {
+            throw new ServiceError("HOOK_SUBSCRIPTION_NOT_FOUND", "subscription not found", 404);
+        }
+        await store.deletePending(subscriptionId);
+        await store.deleteSubscription(subscriptionId);
+        return { removed: true };
+    });
+    app.get("/api/hooks/v1/subscriptions/:subscriptionId/deliveries", async (req) => {
+        const scope = resolveScope(req);
+        const subscriptionId = assertSubscriptionId(req.params.subscriptionId);
+        const store = platform.hooksFor(scope.orgId);
+        const existing = await store.findSubscription(subscriptionId);
+        if (!existing || !inScope(existing, scope.agentIds)) {
+            throw new ServiceError("HOOK_SUBSCRIPTION_NOT_FOUND", "subscription not found", 404);
+        }
+        const status = parseDeliveryStatus(req.query.status);
+        const limit = parseDeliveryLimit(req.query.limit);
+        const rows = await store.listDeliveries(subscriptionId, { ...(status ? { status } : {}), limit });
+        return { deliveries: rows.map(toPublicDelivery) };
+    });
+}
+//# sourceMappingURL=hooks.js.map

package/dist/routes/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../../src/routes/hooks.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,GAErB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAE9B,SAAS,OAAO,CAAC,GAAqB,EAAE,QAAkB;IACxD,OAAO,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAoB,EAAE,QAAyB;IACtF,GAAG,CAAC,GAAG,CAAyC,6CAA6C,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC3G,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,cAAc,GAAG,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAC9D,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,YAAY,CACpB,2BAA2B,EAC3B,yDAAyD,EACzD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACrC,MAAM,IAAI,YAAY,CAAC,2BAA2B,EAAE,mCAAmC,EAAE,GAAG,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjF,MAAM,GAAG,GAAqB;YAC5B,cAAc;YACd,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;YAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,QAAS,CAAC,aAAa;YAC5D,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,IAAI,IAAI,CAAC;YAC3D,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,GAAG;YACrC,SAAS,EAAE,GAAG;SACf,CAAC;QACF,MAAM,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,eAAe;YAAE,MAAM,KAAK,CAAC,eAAe,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChF,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,6BAA6B,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC7C,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;IACzG,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CACL,6CAA6C,EAC7C,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,cAAc,GAAG,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAClF,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,wBAAwB,EAAE,GAAG,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,KAAK,CACP,6CAA6C,EAC7C,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,cAAc,GAAG,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,wBAAwB,EAAE,GAAG,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,eAAe,GAAG,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CAAC;QAC7F,MAAM,GAAG,GAAqB;YAC5B,GAAG,QAAQ;YACX,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM;YAChD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,MAAM,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,eAAe,IAAI,KAAK,CAAC,QAAQ;YAAE,MAAM,KAAK,CAAC,eAAe,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnG,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,MAAM,CACR,6CAA6C,EAC7C,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,cAAc,GAAG,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,wBAAwB,EAAE,GAAG,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;QAC1C,MAAM,KAAK,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC;QAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,wDAAwD,EACxD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,cAAc,GAAG,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,YAAY,CAAC,6BAA6B,EAAE,wBAAwB,EAAE,GAAG,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAClG,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;IACpD,CAAC,CACF,CAAC;AACJ,CAAC"}

package/openapi/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.0.3",
   "info": {
     "title": "Memorix Service API",
-    "version": "3.11.1",
+    "version": "3.12.0",
     "description": "One versioned product API over accepted Memorix packages. Scope: orgId + agentIds[]. Headers x-memorix-org-id and x-memorix-agent-ids (comma-separated). MX-CALLER-01: every /api request requires x-memorix-caller (calling app id). Intelligence never auto-installs. Relationships /links is forbidden. IntegrationsRegistry (Stage −1) and RestrictedStore (FG-A3 dual-mode blob)."
   },
   "servers": [
@@ -46,6 +46,10 @@
       "name": "Jobs",
       "description": "Jobs Manager repeated-work API. P3 reads and P4 writes live."
     },
+    {
+      "name": "Hooks",
+      "description": "Content hooks. A subscription is notified after one address is created, updated, or removed. The callback does not run a skill."
+    },
     {
       "name": "Connectors",
       "description": "Unified connector catalog (registry + builtins + MGC remote hosts)"
@@ -2880,6 +2884,10 @@
                       "$ref": "#/components/schemas/PatchOp"
                     }
                   },
+                  "suppressHooks": {
+                    "type": "boolean",
+                    "description": "When true, this write does not notify content-hook subscriptions. Not stored on the record. For bulk load and migration."
+                  },
                   "address": {
                     "$ref": "#/components/schemas/ContentAddress"
                   },
@@ -14923,6 +14931,106 @@
           }
         }
       }
+    },
+    "/api/hooks/v1/subscriptions": {
+      "get": {
+        "operationId": "hooksListSubscriptions",
+        "tags": ["Hooks"],
+        "summary": "List content-hook subscriptions for this org and agent set",
+        "parameters": [
+          { "$ref": "#/components/parameters/XMemorixCaller" },
+          { "$ref": "#/components/parameters/XMemorixOrgId" },
+          { "$ref": "#/components/parameters/XMemorixAgentIds" }
+        ],
+        "responses": {
+          "200": { "description": "Subscriptions. signingSecret is omitted." }
+        }
+      }
+    },
+    "/api/hooks/v1/subscriptions/{subscriptionId}": {
+      "put": {
+        "operationId": "hooksPutSubscription",
+        "tags": ["Hooks"],
+        "summary": "Create or replace a content-hook subscription",
+        "parameters": [
+          { "$ref": "#/components/parameters/XMemorixCaller" },
+          { "$ref": "#/components/parameters/XMemorixOrgId" },
+          { "$ref": "#/components/parameters/XMemorixAgentIds" },
+          { "name": "subscriptionId", "in": "path", "required": true, "schema": { "type": "string" } }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": { "application/json": { "schema": { "$ref": "#/components/schemas/HookSubscriptionWrite" } } }
+        },
+        "responses": {
+          "200": { "description": "Stored subscription. signingSecret is omitted." },
+          "400": { "description": "HOOK_SUBSCRIPTION_INVALID" },
+          "409": { "description": "subscriptionId belongs to a different agent scope" }
+        }
+      },
+      "get": {
+        "operationId": "hooksGetSubscription",
+        "tags": ["Hooks"],
+        "summary": "Read one content-hook subscription",
+        "parameters": [
+          { "$ref": "#/components/parameters/XMemorixCaller" },
+          { "$ref": "#/components/parameters/XMemorixOrgId" },
+          { "$ref": "#/components/parameters/XMemorixAgentIds" },
+          { "name": "subscriptionId", "in": "path", "required": true, "schema": { "type": "string" } }
+        ],
+        "responses": {
+          "200": { "description": "Subscription. signingSecret is omitted." },
+          "404": { "description": "HOOK_SUBSCRIPTION_NOT_FOUND" }
+        }
+      },
+      "patch": {
+        "operationId": "hooksPatchSubscription",
+        "tags": ["Hooks"],
+        "summary": "Update enabled, endpoint, or match",
+        "parameters": [
+          { "$ref": "#/components/parameters/XMemorixCaller" },
+          { "$ref": "#/components/parameters/XMemorixOrgId" },
+          { "$ref": "#/components/parameters/XMemorixAgentIds" },
+          { "name": "subscriptionId", "in": "path", "required": true, "schema": { "type": "string" } }
+        ],
+        "responses": {
+          "200": { "description": "Updated subscription. signingSecret is omitted." },
+          "400": { "description": "HOOK_SUBSCRIPTION_INVALID" },
+          "404": { "description": "HOOK_SUBSCRIPTION_NOT_FOUND" }
+        }
+      },
+      "delete": {
+        "operationId": "hooksDeleteSubscription",
+        "tags": ["Hooks"],
+        "summary": "Remove a subscription and stop pending delivery",
+        "parameters": [
+          { "$ref": "#/components/parameters/XMemorixCaller" },
+          { "$ref": "#/components/parameters/XMemorixOrgId" },
+          { "$ref": "#/components/parameters/XMemorixAgentIds" },
+          { "name": "subscriptionId", "in": "path", "required": true, "schema": { "type": "string" } }
+        ],
+        "responses": {
+          "200": { "description": "Removed" },
+          "404": { "description": "HOOK_SUBSCRIPTION_NOT_FOUND" }
+        }
+      }
+    },
+    "/api/hooks/v1/subscriptions/{subscriptionId}/deliveries": {
+      "get": {
+        "operationId": "hooksListDeliveries",
+        "tags": ["Hooks"],
+        "summary": "Recent delivery status, newest first",
+        "parameters": [
+          { "$ref": "#/components/parameters/XMemorixCaller" },
+          { "$ref": "#/components/parameters/XMemorixOrgId" },
+          { "$ref": "#/components/parameters/XMemorixAgentIds" },
+          { "name": "subscriptionId", "in": "path", "required": true, "schema": { "type": "string" } },
+          { "name": "status", "in": "query", "schema": { "type": "string", "enum": ["pending", "delivered", "rejected", "failed"] } }
+        ],
+        "responses": {
+          "200": { "description": "Delivery rows. Not stored on the subject record." }
+        }
+      }
     }
   },
   "components": {
@@ -14963,6 +15071,36 @@
       }
     },
     "schemas": {
+      "HookSubscriptionWrite": {
+        "type": "object",
+        "required": ["endpoint", "match"],
+        "additionalProperties": false,
+        "properties": {
+          "endpoint": { "type": "string", "format": "uri" },
+          "enabled": { "type": "boolean" },
+          "signingSecret": { "type": "string", "description": "Required on create. Write-only. A later PUT that omits it keeps the stored secret." },
+          "match": {
+            "type": "object",
+            "required": ["objectType", "contentType", "events"],
+            "additionalProperties": false,
+            "properties": {
+              "objectType": { "type": "string" },
+              "contentType": { "type": "string" },
+              "discriminator": {
+                "type": "object",
+                "required": ["path", "equals"],
+                "additionalProperties": false,
+                "properties": {
+                  "path": { "type": "string" },
+                  "equals": {}
+                }
+              },
+              "events": { "type": "array", "minItems": 1, "items": { "type": "string", "enum": ["created", "updated", "removed"] } },
+              "ignoreCallers": { "type": "array", "items": { "type": "string" } }
+            }
+          }
+        }
+      },
       "MemorixScope": {
         "type": "object",
         "required": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@x12i/memorix-service",
-  "version": "3.11.1",
+  "version": "3.12.0",
   "description": "Memorix production service composition root — one versioned API over accepted packages.",
   "type": "module",
   "main": "./dist/index.js",
@@ -47,7 +47,7 @@
     "@x12i/funcx": "^4.12.0",
     "@x12i/magit": "2.14.0",
     "@x12i/memorix-connector-sdk": "^1.3.0",
-    "@x12i/memorix-data": "^3.1.0",
+    "@x12i/memorix-data": "^3.1.1",
     "@x12i/memorix-data-journey": "^3.1.0",
     "@x12i/memorix-format": "^3.0.8",
     "@x12i/memorix-intelligence": "^3.0.2",