mixdog 0.9.2 → 0.9.4

package/src/runtime/memory/lib/cycle-scheduler.mjs

@@ -0,0 +1,497 @@
+// Background cycle scheduling cluster, extracted from index.mjs (pass 3).
+//
+// This owns the mutually-referential cycle machinery that pass-2 flagged as
+// entangled: cycle-health ledger (_cycleHealth), the run-state file, the
+// cycle1 outer coalesce layer (_startCycle1Run/_awaitCycle1Run), the scheduled
+// enqueue/retry paths for cycle1/2/3, checkCycles(), and the self-rescheduling
+// tick loop. index.mjs keeps lifecycle ownership by injecting live getters
+// (getDb/getConfig/setConfig) plus the cycle runners and LLM adapters.
+//
+// Factory contract — everything the extracted functions closed over in the
+// facade is passed in:
+//   getDb()            -> live db handle (null before _initStore)
+//   getConfig()        -> live mainConfig
+//   setConfig(cfg)     -> checkCycles re-reads config each tick (poll-on-use)
+//   dataDir            -> DATA_DIR
+//   log                -> __mixdogMemoryLog
+//   getCycleLastRun / setCycleLastRun -> meta-backed cycle timestamps
+//   readMainConfig / memoryCyclesEnabled -> config-flag helpers
+//   getCycle{1,2,3}CallLlm -> in-process LLM adapters
+//   runCycle1 / runCycle2 / runCycle3 / parseInterval / flushRawEmbeddings
+//   getInFlightCycle1 -> inner cycle1 guard handle (rebuild drain)
+//   claimAndMarkScheduledCycle / resolveCoalesceMaxRetries /
+//     scheduleCoalescedCycleRetry -> coalesced queue primitives
+//   scheduledCycle{1,2,3}Signature -> queue signatures
+//   cycleStateFile -> path to memory-cycle-state.json
+import fs from 'node:fs'
+
+const CYCLE1_HEALTH_OVERDUE_MS = 5 * 60_000
+const CYCLE1_AUTO_RESTART_COOLDOWN_MS = 5 * 60_000
+const BACKLOG_WARN_COOLDOWN_MS = 10 * 60_000
+const BACKLOG_WARN_PENDING = 500
+const BACKLOG_WARN_FAILURES = 5
+
+export function createCycleScheduler(deps) {
+  const {
+    getDb,
+    getConfig,
+    setConfig,
+    dataDir,
+    log = () => {},
+    getCycleLastRun,
+    setCycleLastRun,
+    readMainConfig,
+    memoryCyclesEnabled,
+    getCycle1CallLlm,
+    getCycle2CallLlm,
+    getCycle3CallLlm,
+    runCycle1,
+    runCycle2,
+    runCycle3,
+    parseInterval,
+    flushRawEmbeddings,
+    getInFlightCycle1,
+    claimAndMarkScheduledCycle,
+    resolveCoalesceMaxRetries,
+    scheduleCoalescedCycleRetry,
+    scheduledCycle1Signature,
+    scheduledCycle2Signature,
+    scheduledCycle3Signature,
+    cycleStateFile,
+  } = deps
+
+  // ── Cycle health state ────────────────────────────────────────────────────
+  const _cycleHealth = {
+    cycle1: { last_success_at: 0, last_error_at: 0, last_error: null, consecutive_failures: 0 },
+    cycle2: { last_success_at: 0, last_error_at: 0, last_error: null, consecutive_failures: 0 },
+    cycle3: { last_success_at: 0, last_error_at: 0, last_error: null, consecutive_failures: 0 },
+  }
+  let _cycleRunning = null // { cycle, started_at }
+  let _cycleBacklogSnapshot = { unchunked: 0, cycle2_pending: 0, at: 0 }
+  let _lastBacklogWarnAt = 0
+
+  // ── Cycle1 outer coalesce layer + tick loop state ─────────────────────────
+  let _cycle1InFlight = null
+  let _cycle2InFlight = false
+  let _cycle3InFlight = false
+  let _rawEmbedFlushInFlight = false
+  let _checkCyclesInFlight = false
+  let _cyclesActive = false
+  let _cycleInterval = null
+  let _startupTimeout = null
+
+  function _writeCycleStateFile() {
+    try {
+      fs.writeFileSync(cycleStateFile, JSON.stringify({
+        running: _cycleRunning,
+        backlog: _cycleBacklogSnapshot,
+        cycles: _cycleHealth,
+        updatedAt: Date.now(),
+      }))
+    } catch { /* best-effort; statusline just shows nothing */ }
+  }
+
+  function markCycleRunning(cycle) {
+    _cycleRunning = { cycle, started_at: Date.now() }
+    _writeCycleStateFile()
+  }
+
+  function markCycleDone(cycle, ok, err = null) {
+    const h = _cycleHealth[cycle]
+    if (h) {
+      const now = Date.now()
+      if (ok) { h.last_success_at = now; h.consecutive_failures = 0; h.last_error = null }
+      else { h.last_error_at = now; h.consecutive_failures += 1; h.last_error = String(err || 'unknown').slice(0, 200) }
+      if (!ok && h.consecutive_failures >= BACKLOG_WARN_FAILURES) {
+        _warnCycleHealth(`${cycle} failing repeatedly (consecutive=${h.consecutive_failures}, last="${h.last_error}")`)
+      }
+    }
+    if (_cycleRunning?.cycle === cycle) _cycleRunning = null
+    _writeCycleStateFile()
+  }
+
+  function _warnCycleHealth(msg) {
+    const now = Date.now()
+    if (now - _lastBacklogWarnAt < BACKLOG_WARN_COOLDOWN_MS) return
+    _lastBacklogWarnAt = now
+    log(`[cycle-health] WARN ${msg}\n`)
+  }
+
+  async function recordCycle1Result(result) {
+    const now = Date.now()
+    await setCycleLastRun('cycle1_heartbeat', now)
+    const skipped = result?.skippedInFlight === true
+    const coalescedNoop = result?.coalescedRetryNoop === true
+    const allFailed = !skipped
+      && Number(result?.chunks ?? 0) === 0
+      && Number(result?.processed ?? 0) === 0
+      && Number(result?.skipped ?? 0) > 0
+    if (!skipped && !coalescedNoop && !allFailed) {
+      await setCycleLastRun('cycle1', now)
+    }
+    if (!skipped && !coalescedNoop) markCycleDone('cycle1', !allFailed, allFailed ? 'all rows skipped' : null)
+  }
+
+  function _startCycle1Run(config = {}, options = {}) {
+    if (typeof options?.callLlm !== 'function') {
+      options = { ...options, callLlm: getCycle1CallLlm() }
+    }
+    markCycleRunning('cycle1')
+    _cycle1InFlight = (async () => {
+      try {
+        const result = await runCycle1(getDb(), config, options, dataDir)
+        if (typeof options?.onCoalescedSuccess !== 'function') {
+          await recordCycle1Result(result)
+        }
+        return result
+      } catch (err) {
+        markCycleDone('cycle1', false, err?.message || err)
+        throw err
+      } finally {
+        if (_cycleRunning?.cycle === 'cycle1') { _cycleRunning = null; _writeCycleStateFile() }
+        if (_cycle1InFlight === promise) _cycle1InFlight = null
+      }
+    })()
+    const promise = _cycle1InFlight
+    return _cycle1InFlight
+  }
+
+  async function _awaitCycle1Run(config = {}, options = {}) {
+    const target = _cycle1InFlight || _startCycle1Run(config, options)
+    const callerDeadlineMs = Number(options.callerDeadlineMs) || 0
+    if (callerDeadlineMs <= 0) return await target
+    let timer
+    const deadlinePromise = new Promise((resolve) => {
+      timer = setTimeout(() => {
+        resolve({
+          processed: 0,
+          chunks: 0,
+          skipped: 0,
+          sessions: 0,
+          skippedInFlight: true,
+          timedOutWaiting: true,
+          callerDeadlineMs,
+        })
+      }, callerDeadlineMs)
+    })
+    try {
+      return await Promise.race([target, deadlinePromise])
+    } finally {
+      clearTimeout(timer)
+    }
+  }
+
+  function periodicCycle1Config() {
+    return {
+      min_batch: 20,
+      session_cap: 2,
+      batch_size: 50,
+      concurrency: 2,
+      ...(getConfig()?.cycle1 || {}),
+    }
+  }
+
+  async function enqueueScheduledCycle(kind, intervalMs, signature) {
+    const claim = await claimAndMarkScheduledCycle(getDb(), kind, intervalMs, signature, { reason: 'scheduled' })
+    return claim.claimed === true
+  }
+
+  async function enqueueScheduledCycle1(intervalMs, _reason = 'scheduled') {
+    const config = periodicCycle1Config()
+    const signature = scheduledCycle1Signature(config)
+    if (await enqueueScheduledCycle('cycle1', intervalMs, signature)) {
+      scheduleScheduledCycle1(config, signature)
+    }
+  }
+
+  async function enqueueScheduledCycle2(intervalMs, _reason = 'scheduled') {
+    const config = getConfig()?.cycle2 || {}
+    const signature = scheduledCycle2Signature(config)
+    if (await enqueueScheduledCycle('cycle2', intervalMs, signature)) {
+      scheduleScheduledCycle2(config, signature)
+    }
+  }
+
+  async function enqueueScheduledCycle3(intervalMs, _reason = 'scheduled') {
+    const config = getConfig() || {}
+    const signature = scheduledCycle3Signature(config)
+    if (await enqueueScheduledCycle('cycle3', intervalMs, signature)) {
+      scheduleScheduledCycle3(config, signature)
+    }
+  }
+
+  function scheduleScheduledCycle1(config, signature, attempt = 0) {
+    const maxRetries = resolveCoalesceMaxRetries(config, 3)
+    if (attempt > maxRetries) {
+      log('[cycle1] scheduled queue retry cap reached\n')
+      return
+    }
+    scheduleCoalescedCycleRetry(getDb(), 'cycle1', async () => {
+      if (!memoryCyclesEnabled()) return
+      if (_cycle1InFlight) {
+        scheduleScheduledCycle1(config, signature, attempt + 1)
+        return
+      }
+      const result = await _awaitCycle1Run(config, {
+        coalescedRetry: true,
+        onCoalescedSuccess: recordCycle1Result,
+      })
+      if (result?.skippedInFlight) scheduleScheduledCycle1(config, signature, attempt + 1)
+    }, config, signature)
+  }
+
+  function scheduleScheduledCycle2(config, signature, attempt = 0) {
+    const maxRetries = resolveCoalesceMaxRetries(config, 3)
+    if (attempt > maxRetries) {
+      log('[cycle2] scheduled queue retry cap reached\n')
+      return
+    }
+    scheduleCoalescedCycleRetry(getDb(), 'cycle2', async () => {
+      if (!memoryCyclesEnabled()) return
+      if (_cycle2InFlight) {
+        scheduleScheduledCycle2(config, signature, attempt + 1)
+        return
+      }
+      _cycle2InFlight = true
+      markCycleRunning('cycle2')
+      try {
+        let c2Options = {
+          coalescedRetry: true,
+          onCoalescedSuccess: _finalizeCycle2Run,
+        }
+        if (typeof c2Options?.callLlm !== 'function') {
+          c2Options = { ...c2Options, callLlm: getCycle2CallLlm() }
+        }
+        const result = await runCycle2(getDb(), config, c2Options, dataDir)
+        if (result?.skippedInFlight) {
+          scheduleScheduledCycle2(config, signature, attempt + 1)
+        } else if (result?.coalescedRetryNoop) {
+          log('[cycle2] scheduled queue noop\n')
+        } else if (result?.ok === false) {
+          await _finalizeCycle2Run(result)
+        }
+      } catch (err) {
+        log(`[cycle2] scheduled queue failed: ${err?.message || err}\n`)
+        markCycleDone('cycle2', false, err?.message || err)
+      } finally {
+        _cycle2InFlight = false
+        if (_cycleRunning?.cycle === 'cycle2') { _cycleRunning = null; _writeCycleStateFile() }
+      }
+    }, config, signature)
+  }
+
+  function scheduleScheduledCycle3(config, signature, attempt = 0) {
+    const retryConfig = config?.cycle3 || config
+    const maxRetries = resolveCoalesceMaxRetries(retryConfig, 3)
+    if (attempt > maxRetries) {
+      log('[cycle3] scheduled queue retry cap reached\n')
+      return
+    }
+    scheduleCoalescedCycleRetry(getDb(), 'cycle3', async () => {
+      if (!memoryCyclesEnabled()) return
+      if (_cycle3InFlight) {
+        scheduleScheduledCycle3(config, signature, attempt + 1)
+        return
+      }
+      _cycle3InFlight = true
+      markCycleRunning('cycle3')
+      try {
+        let c3Options = {
+          coalescedRetry: true,
+          onCoalescedSuccess: async () => { await setCycleLastRun('cycle3', Date.now()); markCycleDone('cycle3', true) },
+        }
+        if (typeof c3Options?.callLlm !== 'function') {
+          c3Options = { ...c3Options, callLlm: getCycle3CallLlm() }
+        }
+        const result = await runCycle3(getDb(), config, dataDir, c3Options)
+        if (result?.skippedInFlight) {
+          scheduleScheduledCycle3(config, signature, attempt + 1)
+        } else if (result?.coalescedRetryNoop) {
+          log('[cycle3] scheduled queue noop\n')
+        }
+      } catch (err) {
+        log(`[cycle3] scheduled queue failed: ${err?.message || err}\n`)
+        markCycleDone('cycle3', false, err?.message || err)
+      } finally {
+        _cycle3InFlight = false
+        if (_cycleRunning?.cycle === 'cycle3') { _cycleRunning = null; _writeCycleStateFile() }
+      }
+    }, retryConfig, signature)
+  }
+
+  async function _finalizeCycle2Run(result) {
+    if (result?.skippedInFlight) {
+      log('[cycle2] skipped: in flight\n')
+      return
+    }
+    if (result.ok) {
+      await setCycleLastRun('cycle2', Date.now())
+      await setCycleLastRun('cycle2_last_error', '')
+      log('[cycle2] completed\n')
+      markCycleDone('cycle2', true)
+    } else {
+      await setCycleLastRun('cycle2_last_error', result.error || 'unknown error')
+      log(`[cycle2] failed: ${result.error}\n`)
+      markCycleDone('cycle2', false, result.error || 'unknown error')
+    }
+  }
+
+  async function checkCycles() {
+    const mainConfig = readMainConfig()
+    setConfig(mainConfig)
+    const cyclesOn = memoryCyclesEnabled()
+    const db = getDb()
+
+    const cycle1Ms = parseInterval(mainConfig?.cycle1?.interval || '10m')
+    const cycle2Ms = parseInterval(mainConfig?.cycle2?.interval || '1h')
+    const cycle3Ms = parseInterval(mainConfig?.cycle3?.interval || '24h')
+
+    const now = Date.now()
+    const last = await getCycleLastRun()
+
+    if (cyclesOn) {
+      const cycle1OverdueMs = last.cycle1 > 0
+        ? Math.max(0, now - last.cycle1 - cycle1Ms)
+        : 0
+      if (cycle1OverdueMs > CYCLE1_HEALTH_OVERDUE_MS) {
+        const lastSeen = last.cycle1 ? new Date(last.cycle1).toISOString() : 'never'
+        log(
+          `[cycle1] overdue by ${Math.floor(cycle1OverdueMs / 60_000)}min `
+          + `(last=${lastSeen}). Pool B Anthropic shard may be cold.\n`
+        )
+        const lastAutoRestart = last.cycle1_autoRestart || 0
+        if (now - lastAutoRestart >= CYCLE1_AUTO_RESTART_COOLDOWN_MS) {
+          await setCycleLastRun('cycle1_autoRestart_attempt', now)
+          try {
+            const result = await _awaitCycle1Run(periodicCycle1Config())
+            await setCycleLastRun('cycle1_autoRestart', Date.now())
+            log(
+              `[cycle1] auto-restart completed chunks=${result?.chunks ?? 0} processed=${result?.processed ?? 0}\n`
+            )
+            return
+          } catch (e) {
+            log(`[cycle1] auto-restart error: ${e.message}\n`)
+            return
+          }
+        }
+      }
+
+      if (now - last.cycle1 >= cycle1Ms) {
+        await enqueueScheduledCycle1(cycle1Ms, 'scheduled')
+      }
+
+      if (now - last.cycle2 >= cycle2Ms) {
+        await enqueueScheduledCycle2(cycle2Ms, 'scheduled')
+      }
+
+      if (now - last.cycle3 >= cycle3Ms) {
+        await enqueueScheduledCycle3(cycle3Ms, 'scheduled')
+      }
+    }
+
+    try {
+      const unchunked = Number((await db.query(
+        `SELECT COUNT(*) c FROM entries WHERE chunk_root IS NULL AND NULLIF(btrim(session_id), '') IS NOT NULL`,
+      )).rows[0]?.c ?? 0)
+      const cycle2Pending = Number((await db.query(
+        `SELECT COUNT(*) c FROM entries WHERE is_root = 1 AND status = 'pending'`,
+      )).rows[0]?.c ?? 0)
+      _cycleBacklogSnapshot = { unchunked, cycle2_pending: cycle2Pending, at: now }
+      _writeCycleStateFile()
+      if (unchunked > BACKLOG_WARN_PENDING || cycle2Pending > BACKLOG_WARN_PENDING) {
+        _warnCycleHealth(`backlog unchunked=${unchunked} cycle2_pending=${cycle2Pending}`)
+      }
+      if (unchunked > 0 && !_rawEmbedFlushInFlight) {
+        _rawEmbedFlushInFlight = true
+        flushRawEmbeddings(db, { limit: 200 })
+          .then((r) => {
+            if (r.attempted > 0) log(`[embed] raw fallback flush attempted=${r.attempted} embedded=${r.embedded}\n`)
+          })
+          .catch((err) => log(`[embed] raw fallback flush failed: ${err?.message || err}\n`))
+          .finally(() => { _rawEmbedFlushInFlight = false })
+      }
+      const SELF_KICK_STALE_MS = 2 * 3600_000
+      const c1Stale = (_cycleHealth.cycle1.last_success_at || last.cycle1 || 0) < now - SELF_KICK_STALE_MS
+      const c2Stale = (_cycleHealth.cycle2.last_success_at || last.cycle2 || 0) < now - SELF_KICK_STALE_MS
+      if (cyclesOn && c1Stale && unchunked > BACKLOG_WARN_PENDING) {
+        _warnCycleHealth(`cycle1 self-kick: no success 2h+, unchunked=${unchunked}`)
+        await enqueueScheduledCycle1(0, 'self-kick')
+      } else if (cyclesOn && c2Stale && cycle2Pending > BACKLOG_WARN_PENDING) {
+        _warnCycleHealth(`cycle2 self-kick: no success 2h+, pending=${cycle2Pending}`)
+        await enqueueScheduledCycle2(0, 'self-kick')
+      }
+    } catch { /* counts are best-effort; never fail the tick */ }
+  }
+
+  async function _runCheckCyclesGuarded() {
+    if (_checkCyclesInFlight) return
+    _checkCyclesInFlight = true
+    try { await checkCycles() }
+    catch (e) { log(`[cycle-tick] error: ${e.message}\n`) }
+    finally { _checkCyclesInFlight = false }
+  }
+
+  function _scheduleNextCheck() {
+    _cycleInterval = setTimeout(async () => {
+      _cycleInterval = null
+      try {
+        await _runCheckCyclesGuarded()
+      } catch (e) {
+        log(`[cycle-tick] re-arm guard caught: ${e?.message || e}\n`)
+      } finally {
+        if (_cyclesActive) _scheduleNextCheck()
+      }
+    }, 60_000)
+  }
+
+  function startCycles() {
+    if (_cyclesActive) return
+    _cyclesActive = true
+    // Boot reset: a previous daemon that crashed mid-run leaves the state
+    // file's `running` marker set, and the statusline keeps showing a
+    // phantom "Memory cycle running" spinner until its 10-minute stale
+    // guard kicks in. No cycle can be running when this scheduler starts,
+    // so clear the marker (health/backlog reset to this process's state).
+    _cycleRunning = null
+    _writeCycleStateFile()
+    _scheduleNextCheck()
+    _startupTimeout = setTimeout(() => { void _runCheckCyclesGuarded() }, 30_000)
+  }
+
+  function stopCycles() {
+    _cyclesActive = false
+    if (_cycleInterval) { clearTimeout(_cycleInterval); _cycleInterval = null }
+    if (_startupTimeout) { clearTimeout(_startupTimeout); _startupTimeout = null }
+  }
+
+  // Full-shutdown reset — baseline stop() cleared these module-level flags so
+  // a later init() starts from a clean slate instead of coalescing onto (or
+  // skipping behind) pre-stop in-flight work / stale running state.
+  function resetInFlight() {
+    _cycle1InFlight = null
+    _cycle2InFlight = false
+    _cycle3InFlight = false
+    _checkCyclesInFlight = false
+    _rawEmbedFlushInFlight = false
+    _cycleRunning = null
+  }
+
+  return {
+    // health/state accessors (HTTP /health, statusline)
+    getCycleHealth: () => _cycleHealth,
+    getCycleRunning: () => _cycleRunning,
+    getCycleBacklogSnapshot: () => _cycleBacklogSnapshot,
+    // cycle1 in-flight handle (rebuild drain in index.mjs)
+    getCycle1InFlight: () => _cycle1InFlight,
+    // run primitives used by MCP action handlers
+    startCycle1Run: _startCycle1Run,
+    awaitCycle1Run: _awaitCycle1Run,
+    finalizeCycle2Run: _finalizeCycle2Run,
+    periodicCycle1Config,
+    // lifecycle
+    startCycles,
+    stopCycles,
+    resetInFlight,
+    checkCycles,
+  }
+}

package/src/runtime/memory/lib/cycle-signatures.mjs

@@ -0,0 +1,34 @@
+// Scheduled-cycle request-signature helpers extracted from index.mjs.
+// Pure functions of the passed `config` object; they call the imported
+// makeCycleRequestSignature and touch no module state (no db/timers).
+// index.mjs imports these; signatures and behavior are unchanged.
+
+import { makeCycleRequestSignature } from './memory-cycle-requests.mjs'
+
+export function scheduledCycle1Signature(config) {
+  return makeCycleRequestSignature('cycle1', config, {
+    preset: undefined,
+    concurrency: undefined,
+    maxConcurrent: undefined,
+  })
+}
+
+export function scheduledCycle2Signature(config) {
+  return makeCycleRequestSignature('cycle2', config, {
+    cascadePreset: undefined,
+    concurrency: undefined,
+  })
+}
+
+export function scheduledCycle3ApplyMode(config) {
+  const raw = String(config?.cycle3?.applyMode || 'conservative').trim().toLowerCase()
+  return (raw === 'proposal' || raw === 'dry-run' || raw === 'dryrun') ? 'proposal' : 'conservative'
+}
+
+export function scheduledCycle3Signature(config) {
+  const retryConfig = config?.cycle3 || config
+  return makeCycleRequestSignature('cycle3', retryConfig, {
+    applyMode: scheduledCycle3ApplyMode(config),
+    apply: undefined,
+  })
+}

package/src/runtime/memory/lib/embedding-warmup.mjs

@@ -0,0 +1,58 @@
+// Boot-edge embedding warmup queue, extracted from index.mjs (pass 2).
+//
+// ONNX session creation on the embedding worker thread is CPU-heavy, so it must
+// not overlap the worker's own init (DB open, schema, cycle wiring). The warmup
+// is queued during _initStore and fired at the _initRuntime completion edge, so
+// it starts the instant boot's CPU-heavy work is done — no magic-number delay.
+//
+// This is a small pure factory: index.mjs owns the DATA_DIR-derived meta path
+// and the embedding-provider imports, injecting them here as callbacks. No
+// import-time side effects.
+export function createEmbeddingWarmup({
+  canStart,
+  warmup,
+  getDims,
+  persistMeta,
+  log = () => {},
+}) {
+  let _pending = null
+
+  // Queue the warmup; fireDeferred() runs it once boot completes. Re-queuing
+  // overwrites any prior pending closure (matches the original single-slot
+  // module var). MIXDOG_EMBED_WARMUP=0 (checked via canStart) disables it.
+  function schedule(metaPath, metaKey) {
+    if (!canStart()) {
+      // Silent skip here previously made "warmup never ran" boots
+      // indistinguishable from failed warmups. One line, boot-edge only.
+      log('[memory-service] embedding warmup skipped (disabled by env/secondary mode) — recall stays lexical until first embed\n')
+      return
+    }
+    _pending = () => {
+      warmup()
+        .then(() => {
+          const measured = Number(getDims())
+          try {
+            persistMeta(metaPath, { ...metaKey, dims: measured })
+          } catch (e) {
+            log(`[memory-service] could not persist embedding-meta: ${e?.message || e}\n`)
+          }
+        })
+        .catch(err => {
+          log(`[memory-service] background warmup failed: ${err?.message || err}\n`)
+        })
+    }
+  }
+
+  function fireDeferred() {
+    const fire = _pending
+    if (!fire) return
+    _pending = null
+    fire()
+  }
+
+  function reset() {
+    _pending = null
+  }
+
+  return { schedule, fireDeferred, reset }
+}

package/src/runtime/memory/lib/http-wire.mjs

@@ -0,0 +1,57 @@
+// HTTP wire helpers extracted from index.mjs. All pure request/response
+// utilities with no module state — no db, _traceDb, or timer dependencies.
+// index.mjs imports these; behavior and signatures are unchanged.
+
+export function readBody(req) {
+  return new Promise((resolve, reject) => {
+    const chunks = []
+    req.on('data', c => chunks.push(c))
+    req.on('end', () => {
+      const raw = Buffer.concat(chunks).toString('utf8').trim()
+      if (!raw) { resolve({}); return }
+      try { resolve(JSON.parse(raw)) }
+      catch (error) {
+        const e = new Error(`invalid JSON body: ${error.message}`)
+        e.statusCode = 400
+        reject(e)
+      }
+    })
+    req.on('error', reject)
+  })
+}
+
+export function sendJson(res, data, status = 200) {
+  const body = JSON.stringify(data)
+  res.writeHead(status, {
+    'Content-Type': 'application/json; charset=utf-8',
+    'Content-Length': Buffer.byteLength(body),
+  })
+  res.end(body)
+}
+
+export function sendError(res, msg, status = 500) {
+  sendJson(res, { error: msg }, status)
+}
+
+// Origin/Referer guard for /admin/* mutation routes. Memory-service binds
+// 127.0.0.1, but browser DNS-rebinding or a stray cross-origin fetch could
+// still reach destructive endpoints (purge, backfill, entry mutations).
+// Server-to-server callers (setup-server, hooks) issue raw http.request
+// without a browser Origin/Referer, so absent headers pass; any non-loopback
+// Origin/Referer is rejected. Mirrors setup-server.mjs isAllowedOrigin.
+export function isLocalOrigin(req) {
+  const LOOP = /^https?:\/\/(localhost|127\.0\.0\.1|\[::1\])(:\d+)?(\/|$)/i
+  const origin = req.headers.origin || ''
+  const referer = req.headers.referer || ''
+  if (origin && !LOOP.test(origin)) return false
+  if (referer && !LOOP.test(referer)) return false
+  return true
+}
+
+export function normalizeCoreProjectId(value, { allowStar = false } = {}) {
+  if (value == null) return null
+  const s = String(value).trim()
+  if (!s || s.toLowerCase() === 'common') return null
+  if (allowStar && s === '*') return '*'
+  return s
+}