nodedex 0.1.0

package/dist/mcp-server.js

@@ -0,0 +1,79 @@
+// mcp-server.ts — the ONE factory that builds a fully-configured Workspace MCP server
+// (the `instructions` field + the read-only agent gating + all tools). Used by BOTH
+// transports so the tool surface CANNOT drift between them:
+//   • stdio  — server.ts (the local, host-spawned path)
+//   • HTTP   — routes/mcp-http.ts (per session; the networked path, e.g. a Dockerized
+//              host reaching the server over host.docker.internal)
+//
+// Extracted from server.ts when the HTTP transport was added (Option B) so a containerized
+// MCP client — which can't spawn a host stdio binary — can still reach the same tools.
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { registerCoreTools } from "./tools/core.js";
+import { registerDeriveTools } from "./tools/derive.js";
+import { registerProjectTools } from "./tools/projects.js";
+import { registerTaskTools } from "./tools/tasks.js";
+import { registerSystemTools } from "./tools/system.js";
+import { appendFlagNudge } from "./tools/flag-surface.js";
+import { AGENT_PROTOCOL } from "./agent-protocol.js";
+// The MCP `instructions` field — the advisory FLOOR the host injects on connect. Installs
+// the two reflexes + traversal loop (shared AGENT_PROTOCOL) + the onboard nudge.
+export const WORKSPACE_INSTRUCTIONS = `${AGENT_PROTOCOL}
+
+First time connecting in this project? Call workspace_onboard ONCE — it offers to persist these reflexes into your own standing config (it checks whether you can, and you explain why + ask the user first). If you can't persist, this advisory copy still applies for the session.`;
+// The agent surface is READ-ONLY by default — it traverses/queries/retrieves; the pipeline
+// does all writing. Pure reads only. (extract_arc etc. are INFRA, triggered by host/timer.)
+const READ_TOOLS_BASE = [
+    "workspace_get", "workspace_search", "workspace_filter", "workspace_tree",
+    "workspace_list", "workspace_stats", "workspace_history", "workspace_find_skill",
+    "workspace_onboard", "workspace_install_capture",
+];
+// Task tools are opt-in (a host often has its own task system).
+const TASK_TOOLS = ["workspace_task_next", "workspace_task_create", "workspace_task_update"];
+/** Whether write/admin/maintenance tools are exposed (default off → read-only surface). */
+export function writesExposed() {
+    return (process.env.NODEDEX_EXPOSE_WRITE_TOOLS ?? "").toLowerCase() === "on";
+}
+/** The tool names the agent surface exposes given current env flags (for boot logging). */
+export function agentToolAllowlist() {
+    const allow = new Set(READ_TOOLS_BASE);
+    if ((process.env.NODEDEX_EXPOSE_TASKS ?? "").toLowerCase() === "on") {
+        for (const t of TASK_TOOLS)
+            allow.add(t);
+    }
+    return allow;
+}
+/** Build a Workspace MCP server: instructions, read-only gating, and every tool registered.
+ *  A fresh instance is cheap (registration is pure) — the HTTP path builds one per session;
+ *  db + embeddings are shared singletons passed in. */
+export function buildWorkspaceServer(db, embeddings) {
+    const server = new McpServer({ name: "workspace", version: "1.0.0-MVP" }, { instructions: WORKSPACE_INSTRUCTIONS });
+    // Wrap server.tool BEFORE the register calls so two cross-cutting concerns apply to
+    // every tool without touching a single handler:
+    //   1. read-only gating  — skip tools not in the allowlist (unless writes exposed).
+    //   2. flag nudge        — append a passive "N items need your input" note to each
+    //      result when self-maintenance routed work to the agent. A passive MCP tool
+    //      can't push, so the agent discovers pending flags by bumping into this on a
+    //      call it was already making. Best-effort, never breaks the tool.
+    {
+        const allow = writesExposed() ? null : agentToolAllowlist();
+        const registerTool = server.tool.bind(server);
+        server.tool = (...args) => {
+            const name = args[0];
+            if (allow && !allow.has(name))
+                return undefined; // gated out of the read-only surface
+            const handler = args[args.length - 1];
+            if (typeof handler === "function") {
+                const orig = handler;
+                args[args.length - 1] = async (...h) => appendFlagNudge((await orig(...h)), db, name);
+            }
+            return registerTool(...args);
+        };
+    }
+    registerCoreTools(server, db, embeddings);
+    registerDeriveTools(server, db, embeddings);
+    registerProjectTools(server, db, embeddings);
+    registerTaskTools(server, db, embeddings);
+    registerSystemTools(server, db, embeddings);
+    return server;
+}
+//# sourceMappingURL=mcp-server.js.map

package/dist/mcp-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server.js","sourceRoot":"","sources":["../src/mcp-server.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,oFAAoF;AACpF,4DAA4D;AAC5D,wDAAwD;AACxD,sFAAsF;AACtF,mEAAmE;AACnE,EAAE;AACF,2FAA2F;AAC3F,uFAAuF;AAEvF,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAGpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,0FAA0F;AAC1F,iFAAiF;AACjF,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,cAAc;;sRAE+N,CAAC;AAEvR,2FAA2F;AAC3F,4FAA4F;AAC5F,MAAM,eAAe,GAAG;IACtB,eAAe,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB;IACzE,gBAAgB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,sBAAsB;IAChF,mBAAmB,EAAE,2BAA2B;CACjD,CAAC;AACF,gEAAgE;AAChE,MAAM,UAAU,GAAG,CAAC,qBAAqB,EAAE,uBAAuB,EAAE,uBAAuB,CAAC,CAAC;AAE7F,2FAA2F;AAC3F,MAAM,UAAU,aAAa;IAC3B,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC;AAC/E,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,kBAAkB;IAChC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,eAAe,CAAC,CAAC;IAC/C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;QACpE,KAAK,MAAM,CAAC,IAAI,UAAU;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;uDAEuD;AACvD,MAAM,UAAU,oBAAoB,CAAC,EAAe,EAAE,UAA2B;IAC/E,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,EAC3C,EAAE,YAAY,EAAE,sBAAsB,EAAE,CACzC,CAAC;IAEF,oFAAoF;IACpF,gDAAgD;IAChD,oFAAoF;IACpF,mFAAmF;IACnF,iFAAiF;IACjF,kFAAkF;IAClF,uEAAuE;IACvE,CAAC;QACC,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC;QAC5D,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAiC,CAAC;QAC7E,MAA4D,CAAC,IAAI,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE;YAC1F,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;YAC/B,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC,CAAC,qCAAqC;YACtF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACtC,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;gBAClC,MAAM,IAAI,GAAG,OAAuC,CAAC;gBACrD,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,CAAY,EAAE,EAAE,CAChD,eAAe,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/B,CAAC,CAAC;IACJ,CAAC;IAED,iBAAiB,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;IAC1C,mBAAmB,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;IAC5C,oBAAoB,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;IAC7C,iBAAiB,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;IAC1C,mBAAmB,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/middleware/auth.d.ts

@@ -0,0 +1,23 @@
+import type { Request, Response, NextFunction } from "express";
+export type AuthIdentity = {
+    kind: "owner";
+} | {
+    kind: "account";
+    accountId: string;
+};
+declare module "express-serve-static-core" {
+    interface Request {
+        auth?: AuthIdentity;
+    }
+}
+export declare function resolveBindHost(): string;
+export declare function apiTokenEnabled(): boolean;
+export declare function extractCredential(req: Request): string;
+export declare function validateCredential(token: string): AuthIdentity | null;
+export declare function safeEqual(a: string, b: string): boolean;
+export declare function isLoopbackRequest(req: Request): boolean;
+export declare function requireAuth(opts: {
+    exempt: (path: string) => boolean;
+}): (req: Request, res: Response, next: NextFunction) => void | Response<any, Record<string, any>>;
+export declare function defaultAuthExempt(p: string): boolean;
+//# sourceMappingURL=auth.d.ts.map

package/dist/middleware/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAM/D,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3C,OAAO,QAAQ,2BAA2B,CAAC;IACzC,UAAU,OAAO;QACf,IAAI,CAAC,EAAE,YAAY,CAAC;KACrB;CACF;AAOD,wBAAgB,eAAe,IAAI,MAAM,CAGxC;AAMD,wBAAgB,eAAe,IAAI,OAAO,CAEzC;AAKD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAKtD;AAOD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAKrE;AAGD,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAKvD;AAWD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAIvD;AAOD,wBAAgB,WAAW,CAAC,IAAI,EAAE;IAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAA;CAAE,IAC7D,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,+CAcxD;AAMD,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAEpD"}

package/dist/middleware/auth.js

@@ -0,0 +1,104 @@
+// middleware/auth.ts — security slice 1: the auth SEAM + network bind resolver.
+//
+// THE SEAM (why this file exists): today Nodedex is a single-owner LOCAL tool,
+// so auth is one shared bearer token. The future Phase-2 remote server is
+// multi-tenant (per-account credentials). This module is written so that going
+// multi-tenant is a swap of ONE function — validateCredential(token) → identity
+// — while credential extraction, the gate placement in api-server.ts, and every
+// downstream `req.auth` reference stay put. Do NOT build accounts/passwords in
+// the local tool; they belong to the closed Phase-2 server. See memory
+// project-monetization-direction-2026-06-13 for the bigger picture.
+// ─── Network bind ───────────────────────────────────────────────────────────
+// Default to loopback so a fresh install is NOT reachable from the network.
+// Intentional exposure (the future remote server, or a LAN dev box) opts in via
+// NODEDEX_BIND_HOST=0.0.0.0. Pure + exported so it's unit-testable without
+// opening a socket.
+export function resolveBindHost() {
+    const h = (process.env.NODEDEX_BIND_HOST || "").trim();
+    return h.length > 0 ? h : "127.0.0.1";
+}
+// ─── Auth ───────────────────────────────────────────────────────────────────
+// Is the whole-API token lock turned on? Unset = OFF (open, localhost-protected)
+// so the live dogfood loop and a naive install keep working.
+export function apiTokenEnabled() {
+    return (process.env.NODEDEX_API_TOKEN || "").length > 0;
+}
+// Pull the presented credential. Prefer a DEDICATED header so we never collide
+// with Authorization, which the chat-proxy forwards verbatim to the upstream
+// LLM. Authorization: Bearer is also accepted for convenience on data paths.
+export function extractCredential(req) {
+    const x = (req.headers["x-nodedex-token"] || "");
+    if (x && x.trim())
+        return x.trim();
+    const auth = (req.headers["authorization"] || "").toString();
+    return auth.replace(/^Bearer\s+/i, "").trim();
+}
+// THE SWAP POINT. token → identity (or null if it doesn't authenticate).
+// Today: constant-time compare to the one configured owner token.
+// Future server: replace the body with a token→account DB lookup returning
+// { kind: "account", accountId }. Callers only check apiTokenEnabled() first,
+// so this is only invoked when a token is actually configured.
+export function validateCredential(token) {
+    const expected = process.env.NODEDEX_API_TOKEN || "";
+    if (!expected)
+        return null;
+    if (token && safeEqual(token, expected))
+        return { kind: "owner" };
+    return null;
+}
+// Length-then-constant-time compare — avoids leaking the token via timing.
+export function safeEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    let diff = 0;
+    for (let i = 0; i < a.length; i++)
+        diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+    return diff === 0;
+}
+// ─── Loopback exemption (the ONE token rule) ────────────────────────────────
+// The token exists to gate NETWORK exposure (a 0.0.0.0 bind for Docker/remote
+// agents). A same-machine client (Claude Code sitting next to a dockerized
+// agent) is the owner's own process — making it juggle the token is the #1
+// "connecting is messy" complaint. So: requests arriving over loopback are
+// token-exempt; anything with a network source address must authenticate.
+// TCP source addresses can't be spoofed for an established connection, so this
+// is a sound trust boundary for a single-owner tool. Shared/multi-user machines
+// that want local strictness set NODEDEX_STRICT_TOKEN=1.
+export function isLoopbackRequest(req) {
+    if ((process.env.NODEDEX_STRICT_TOKEN || "").trim() === "1")
+        return false;
+    const a = (req.socket?.remoteAddress || "").trim();
+    return a === "127.0.0.1" || a === "::1" || a === "::ffff:127.0.0.1";
+}
+// App-level gate. When the token is OFF: pass everything, stamping the owner
+// identity (single-owner tool). When ON: require a valid credential on every
+// /api/* path except those the caller exempts (health for supervisors, the
+// chat-proxy BYO-key passthrough, non-/api pages like /upgrade) — and except
+// loopback clients (see isLoopbackRequest: the token gates the NETWORK).
+export function requireAuth(opts) {
+    return (req, res, next) => {
+        req.auth = { kind: "owner" }; // default identity; replaced below if a token authenticates
+        if (!apiTokenEnabled())
+            return next();
+        if (opts.exempt(req.path))
+            return next();
+        if (isLoopbackRequest(req))
+            return next(); // own machine — the token gates the network
+        const identity = validateCredential(extractCredential(req));
+        if (!identity) {
+            return res.status(401).json({
+                error: "Unauthorized — set header 'x-nodedex-token' or 'Authorization: Bearer <token>' (NODEDEX_API_TOKEN is enabled; only same-machine connections are exempt)",
+            });
+        }
+        req.auth = identity;
+        next();
+    };
+}
+// What the whole-API gate does NOT cover: liveness (supervisors poll it), the
+// chat-proxy (authenticates with the client's own forwarded LLM key), and any
+// non-/api path (the /upgrade page, static). NB for Phase 2: the remote server
+// MUST gate /api/chat (it spends money) — that exemption is local-tool-only.
+export function defaultAuthExempt(p) {
+    return !p.startsWith("/api/") || p === "/api/health" || p.startsWith("/api/chat");
+}
+//# sourceMappingURL=auth.js.map

package/dist/middleware/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,0EAA0E;AAC1E,+EAA+E;AAC/E,gFAAgF;AAChF,gFAAgF;AAChF,+EAA+E;AAC/E,uEAAuE;AACvE,oEAAoE;AAkBpE,+EAA+E;AAC/E,4EAA4E;AAC5E,gFAAgF;AAChF,2EAA2E;AAC3E,oBAAoB;AACpB,MAAM,UAAU,eAAe;IAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;AACxC,CAAC;AAED,+EAA+E;AAE/E,iFAAiF;AACjF,6DAA6D;AAC7D,MAAM,UAAU,eAAe;IAC7B,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,+EAA+E;AAC/E,6EAA6E;AAC7E,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAW,CAAC;IAC3D,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;QAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC7D,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAChD,CAAC;AAED,yEAAyE;AACzE,kEAAkE;AAClE,2EAA2E;AAC3E,8EAA8E;AAC9E,+DAA+D;AAC/D,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;IACrD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,KAAK,IAAI,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,SAAS,CAAC,CAAS,EAAE,CAAS;IAC5C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7E,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,+EAA+E;AAC/E,8EAA8E;AAC9E,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,0EAA0E;AAC1E,+EAA+E;AAC/E,gFAAgF;AAChF,yDAAyD;AACzD,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAC1E,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,OAAO,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,kBAAkB,CAAC;AACtE,CAAC;AAED,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,6EAA6E;AAC7E,yEAAyE;AACzE,MAAM,UAAU,WAAW,CAAC,IAA2C;IACrE,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,GAAG,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,4DAA4D;QAC1F,IAAI,CAAC,eAAe,EAAE;YAAE,OAAO,IAAI,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QACzC,IAAI,iBAAiB,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC,CAAC,4CAA4C;QACvF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,yJAAyJ;aACjK,CAAC,CAAC;QACL,CAAC;QACD,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;QACpB,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAAC,CAAS;IACzC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,aAAa,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AACpF,CAAC"}

package/dist/middleware/auto-recall.d.ts

@@ -0,0 +1,7 @@
+import { WorkspaceDB } from "../store/database.js";
+import { EmbeddingEngine } from "../engine/embeddings.js";
+export declare function runAutoRecall(db: WorkspaceDB, embeddings: EmbeddingEngine, userMessage: string, context?: {
+    projectId?: string;
+    activeBlocks?: string[];
+}): Promise<string>;
+//# sourceMappingURL=auto-recall.d.ts.map

package/dist/middleware/auto-recall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-recall.d.ts","sourceRoot":"","sources":["../../src/middleware/auto-recall.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AA2B1D,wBAAsB,aAAa,CACjC,EAAE,EAAE,WAAW,EACf,UAAU,EAAE,eAAe,EAC3B,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GACxD,OAAO,CAAC,MAAM,CAAC,CA4NjB"}

package/dist/middleware/auto-recall.js

@@ -0,0 +1,257 @@
+import { cosineSim } from "../engine/vector-math.js";
+function extractEntities(message) {
+    const capsRegex = /(?<!^|\.\s+)\b[A-Z][a-z]+\b/g;
+    const capitalized = message.match(capsRegex) || [];
+    const targetRegex = /\b(?:about|on|for|with|using|fix|debug|build|create|find)\s+([a-zA-Z0-9_-]+)\b/gi;
+    const targets = [];
+    let match;
+    while ((match = targetRegex.exec(message)) !== null)
+        targets.push(match[1]);
+    return [...new Set([...capitalized, ...targets, message])];
+}
+// Extract plain concept-like tokens from a message (lowercase, 2+ chars, no stopwords)
+const STOPWORDS = new Set(["the", "is", "a", "an", "to", "of", "in", "for", "on", "with", "and", "or", "but", "it", "this", "that", "how", "what", "why", "can", "do", "be", "are", "was", "were", "will"]);
+function extractConcepts(message) {
+    return message
+        .toLowerCase()
+        .replace(/[^a-z0-9_ ]/g, " ")
+        .split(/\s+/)
+        .filter((w) => w.length > 2 && !STOPWORDS.has(w));
+}
+export async function runAutoRecall(db, embeddings, userMessage, context) {
+    let semanticActive = false;
+    let queryVector = [];
+    if (embeddings.isAvailable()) {
+        try {
+            const v = await embeddings.embed(userMessage);
+            if (v) {
+                queryVector = v;
+                semanticActive = true;
+            }
+        }
+        catch { /* fall through to keyword */ }
+    }
+    const entities = extractEntities(userMessage);
+    const queryConcepts = extractConcepts(userMessage);
+    const weights = { keyword: 0.3, semantic: 0.5, concept: 0.4, context: 0.2 };
+    // score + reason tracking per block
+    const scoredBlocks = new Map();
+    const addScore = (block, score, reason) => {
+        const existing = scoredBlocks.get(block.id);
+        if (existing) {
+            existing.score += score;
+            existing.reasons.add(reason);
+        }
+        else {
+            scoredBlocks.set(block.id, { block, score, reasons: new Set([reason]) });
+        }
+    };
+    const allBlocks = db.getAllBlocks();
+    // ── 1. Keyword match ────────────────────────────────────────────
+    for (const entity of entities) {
+        const term = entity.toLowerCase();
+        for (const block of allBlocks) {
+            let aliases = [];
+            try {
+                aliases = JSON.parse(block.aliases || "[]");
+            }
+            catch { /* ignore */ }
+            if (block.label.toLowerCase().includes(term) ||
+                block.essence.toLowerCase().includes(term) ||
+                aliases.some((a) => a.toLowerCase().includes(term))) {
+                addScore(block, weights.keyword, "keyword");
+            }
+        }
+    }
+    // ── 2. Semantic similarity ───────────────────────────────────────
+    if (semanticActive && queryVector.length > 0) {
+        for (const block of allBlocks) {
+            if (!block.embedding)
+                continue;
+            try {
+                const bv = JSON.parse(block.embedding);
+                const sim = cosineSim(queryVector, bv);
+                if (sim > 0.6)
+                    addScore(block, sim * weights.semantic, "semantic");
+            }
+            catch { /* ignore */ }
+        }
+    }
+    // ── 3. Concept overlap ─────────────────────────────────────────
+    // Uses SQL json_each() to search concept arrays in the DB — no JS-level JSON-parse loop.
+    // This is the cross-domain bridge: finds blocks whose abstract concepts overlap with the
+    // query even when the topic/domain differs.
+    if (queryConcepts.length > 0) {
+        const conceptMatches = db.conceptSearch(queryConcepts);
+        for (const [, { block, matches }] of conceptMatches) {
+            const bonus = Math.min(matches * 0.2, 0.8);
+            addScore(block, bonus * weights.concept, "concept");
+        }
+    }
+    // ── 4. Context boost + project-scope precision ────────────────
+    // Blocks linked to the current project score higher.
+    // Unrelated non-skill blocks get a subtle penalty to keep recall project-focused.
+    const projectRelatedIds = new Set();
+    if (context?.projectId) {
+        const allRelations = db.getAllRelations(false);
+        for (const rel of allRelations) {
+            if (rel.source_id === context.projectId)
+                projectRelatedIds.add(rel.target_id);
+            if (rel.target_id === context.projectId)
+                projectRelatedIds.add(rel.source_id);
+        }
+        projectRelatedIds.add(context.projectId);
+        for (const block of allBlocks) {
+            if (block.id === context.projectId) {
+                addScore(block, weights.context * 2, "context");
+            }
+            else if (projectRelatedIds.has(block.id)) {
+                addScore(block, weights.context * 1.2, "context");
+            }
+            else if (block.type !== "process" && block.type !== "skill") {
+                // Skills/process blocks are exempt — cross-project use is intentional
+                const existing = scoredBlocks.get(block.id);
+                if (existing)
+                    existing.score *= 0.85;
+            }
+            try {
+                const c = typeof block.content === "string" ? JSON.parse(block.content) : block.content;
+                if (c?.project_id === context.projectId)
+                    addScore(block, weights.context, "context");
+            }
+            catch { /* ignore */ }
+        }
+    }
+    if (context?.activeBlocks) {
+        for (const blockId of context.activeBlocks) {
+            const b = db.getBlock(blockId);
+            if (b)
+                addScore(b, weights.context, "active_session");
+        }
+    }
+    // ── Boost derive/insight blocks — synthesized knowledge ranks above raw inputs ──
+    // Apply quality weight so thin auto-reflect blocks don't compete equally with rich agent-saved blocks.
+    for (const entry of scoredBlocks.values()) {
+        try {
+            const c = typeof entry.block.content === "string" ? JSON.parse(entry.block.content) : entry.block.content;
+            if (c?.derivation)
+                entry.score += 0.15; // derived insight boost
+        }
+        catch { /* ignore */ }
+        if (entry.block.type === "insight")
+            entry.score += 0.1;
+        // quality_score 0–6 (0 means "not yet scored", treat as neutral default 3)
+        const raw = entry.block.quality_score;
+        const q = (typeof raw === "number" && raw > 0) ? raw : 3;
+        entry.score *= q / 6;
+    }
+    // ── Rank + budget ────────────────────────────────────────────
+    // Without a project scope, concept overlap alone can surface loosely related blocks.
+    // A higher minimum threshold keeps recall focused when no project is active.
+    const MIN_SCORE = context?.projectId ? 0.1 : 0.2;
+    const ranked = Array.from(scoredBlocks.values())
+        .filter(({ block, score }) => !block.label.startsWith("agent_session_") && score >= MIN_SCORE)
+        .sort((a, b) => b.score - a.score);
+    const MAX_LOADED = 5;
+    const MAX_HINTS = 15;
+    const CHAR_BUDGET = 3000;
+    const loadedBlocks = [];
+    const hintBlocks = [];
+    let charUsed = 0;
+    const sanitize = (block) => {
+        let content = {};
+        try {
+            content = typeof block.content === "string" ? JSON.parse(block.content) : block.content;
+        }
+        catch { /* ignore */ }
+        let aliases = [];
+        try {
+            aliases = JSON.parse(block.aliases || "[]");
+        }
+        catch { /* ignore */ }
+        return {
+            id: block.id,
+            label: block.label,
+            type: block.type,
+            status: block.status,
+            ttl: block.ttl,
+            essence: block.essence,
+            is_a: content.is_a || undefined,
+            unique: content.unique || undefined,
+            has: content.has || undefined,
+            concepts: (() => { try {
+                const c = JSON.parse(block.concepts || "[]");
+                return c.length ? c : undefined;
+            }
+            catch {
+                return undefined;
+            } })(),
+            created_at: block.created_at,
+            updated_at: block.updated_at,
+            aliases: aliases.length ? aliases : undefined,
+            created_by: block.created_by || undefined,
+        };
+    };
+    const reasonLabel = {
+        keyword: "keyword match",
+        semantic: "semantic similarity",
+        concept: "shared concept",
+        context: "active project",
+        active_session: "used in this session",
+    };
+    for (const { block, reasons } of ranked) {
+        const clean = sanitize(block);
+        const str = JSON.stringify(clean);
+        if (loadedBlocks.length < MAX_LOADED && charUsed + str.length < CHAR_BUDGET) {
+            loadedBlocks.push({ block: clean, reasons });
+            charUsed += str.length;
+            // Touch access count only for blocks actually loaded (not hints)
+            db.updateBlock(block.id, { access_count: (block.access_count || 0) + 1 });
+            // Log recall as used=true for LOADED blocks — they were surfaced to the agent
+            db.logRecall(block.id, context?.projectId, [...reasons].join(","), true);
+        }
+        else if (hintBlocks.length < MAX_HINTS) {
+            hintBlocks.push({ block, reasons });
+        }
+    }
+    if (loadedBlocks.length === 0 && hintBlocks.length === 0) {
+        return `\n═══ WORKSPACE CONTEXT ═══\n(No relevant blocks found for this query)\n═════════════════════════\n`;
+    }
+    // ── Format prompt ────────────────────────────────────────────
+    let prompt = `\n═══ WORKSPACE CONTEXT ═══\n`;
+    if (loadedBlocks.length > 0) {
+        prompt += `LOADED (use directly in your reasoning):\n`;
+        for (const { block: b, reasons } of loadedBlocks) {
+            const why = [...reasons].map((r) => reasonLabel[r]).join(", ");
+            prompt += `\n[${b.id}] ${b.label} (${b.type}`;
+            if (b.type === "process")
+                prompt += ` ← SKILL/PROCEDURE`;
+            prompt += `) — recalled via: ${why}\n`;
+            prompt += `  what it is: ${b.essence}\n`;
+            if (b.is_a)
+                prompt += `  is_a: ${b.is_a}\n`;
+            if (b.unique && Object.keys(b.unique).length)
+                prompt += `  properties: ${JSON.stringify(b.unique)}\n`;
+            if (b.has && Object.keys(b.has).length)
+                prompt += `  content: ${JSON.stringify(b.has)}\n`;
+            if (b.concepts?.length)
+                prompt += `  concepts: ${b.concepts.join(", ")}\n`;
+            if (b.type === "process")
+                prompt += `  usage_hint: This is a stored skill/procedure. Apply it to your current task if the concepts match.\n`;
+            if (b.created_by)
+                prompt += `  saved_by: ${b.created_by}\n`;
+            prompt += `  saved: ${b.created_at?.slice(0, 10)}${b.updated_at !== b.created_at ? ` (updated ${b.updated_at?.slice(0, 10)})` : ""}\n`;
+        }
+    }
+    if (hintBlocks.length > 0) {
+        prompt += `\nAVAILABLE (hints — call workspace_get(id) for full detail):\n`;
+        for (const { block: b, reasons } of hintBlocks) {
+            const why = [...reasons].map((r) => reasonLabel[r]).join(", ");
+            const tag = b.type === "process" ? " [SKILL]" : "";
+            prompt += `  [${b.id}]${tag} ${b.label}: ${b.essence} — ${why}\n`;
+        }
+    }
+    prompt += `═════════════════════════\n`;
+    return prompt;
+}
+//# sourceMappingURL=auto-recall.js.map

package/dist/middleware/auto-recall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-recall.js","sourceRoot":"","sources":["../../src/middleware/auto-recall.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAErD,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,SAAS,GAAG,8BAA8B,CAAC;IACjD,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACnD,MAAM,WAAW,GAAG,kFAAkF,CAAC;IACvG,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,KAAK,CAAC;IACV,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,EAAE,GAAG,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,uFAAuF;AACvF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAE5M,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO,OAAO;SACX,WAAW,EAAE;SACb,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC;SAC5B,KAAK,CAAC,KAAK,CAAC;SACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAKD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAe,EACf,UAA2B,EAC3B,WAAmB,EACnB,OAAyD;IAEzD,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,WAAW,GAAa,EAAE,CAAC;IAE/B,IAAI,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC9C,IAAI,CAAC,EAAE,CAAC;gBAAC,WAAW,GAAG,CAAC,CAAC;gBAAC,cAAc,GAAG,IAAI,CAAC;YAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,QAAQ,GAAQ,eAAe,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IAEnD,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAE5E,oCAAoC;IACpC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAqE,CAAC;IAElG,MAAM,QAAQ,GAAG,CAAC,KAAU,EAAE,KAAa,EAAE,MAAoB,EAAE,EAAE;QACnE,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,KAAK,IAAK,KAAK,CAAC;YACzB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC;IAEpC,mEAAmE;IACnE,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,IAAI,OAAO,GAAa,EAAE,CAAC;YAC3B,IAAI,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAC3E,IACE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACxC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAC3D,CAAC;gBACD,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,IAAI,cAAc,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7C,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,IAAI,CAAC,KAAK,CAAC,SAAS;gBAAE,SAAS;YAC/B,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAa,CAAC;gBACnD,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBACvC,IAAI,GAAG,GAAG,GAAG;oBAAE,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACrE,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,yFAAyF;IACzF,yFAAyF;IACzF,4CAA4C;IAC5C,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,cAAc,GAAG,EAAE,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,cAAc,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;YAC3C,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,qDAAqD;IACrD,kFAAkF;IAClF,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5C,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC/C,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,IAAI,GAAG,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;gBAAE,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC9E,IAAI,GAAG,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;gBAAE,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChF,CAAC;QACD,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAEzC,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;gBACnC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;YAClD,CAAC;iBAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC3C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,SAAS,CAAC,CAAC;YACpD,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC9D,sEAAsE;gBACtE,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC5C,IAAI,QAAQ;oBAAE,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC;YACvC,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;gBACxF,IAAI,CAAC,EAAE,UAAU,KAAK,OAAO,CAAC,SAAS;oBAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACvF,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;QAC1B,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAC3C,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC/B,IAAI,CAAC;gBAAE,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,mFAAmF;IACnF,uGAAuG;IACvG,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;YAC1G,IAAI,CAAC,EAAE,UAAU;gBAAE,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,wBAAwB;QAClE,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxB,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC;QAEvD,2EAA2E;QAC3E,MAAM,GAAG,GAAI,KAAK,CAAC,KAAa,CAAC,aAAa,CAAC;QAC/C,MAAM,CAAC,GAAG,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,gEAAgE;IAChE,qFAAqF;IACrF,6EAA6E;IAC7E,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;SAC7C,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,KAAK,IAAI,SAAS,CAAC;SAC7F,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAErC,MAAM,UAAU,GAAI,CAAC,CAAC;IACtB,MAAM,SAAS,GAAK,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,IAAI,CAAC;IAEzB,MAAM,YAAY,GAAsD,EAAE,CAAC;IAC3E,MAAM,UAAU,GAAwD,EAAE,CAAC;IAC3E,IAAM,QAAQ,GAAG,CAAC,CAAC;IAEnB,MAAM,QAAQ,GAAG,CAAC,KAAU,EAAE,EAAE;QAC9B,IAAI,OAAO,GAA4B,EAAE,CAAC;QAC1C,IAAI,CAAC;YAAC,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACvH,IAAI,OAAO,GAAa,EAAE,CAAC;QAC3B,IAAI,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC3E,OAAO;YACL,EAAE,EAAU,KAAK,CAAC,EAAE;YACpB,KAAK,EAAO,KAAK,CAAC,KAAK;YACvB,IAAI,EAAQ,KAAK,CAAC,IAAI;YACtB,MAAM,EAAM,KAAK,CAAC,MAAM;YACxB,GAAG,EAAS,KAAK,CAAC,GAAG;YACrB,OAAO,EAAK,KAAK,CAAC,OAAO;YACzB,IAAI,EAAQ,OAAO,CAAC,IAAI,IAAS,SAAS;YAC1C,MAAM,EAAM,OAAO,CAAC,MAAM,IAAO,SAAS;YAC1C,GAAG,EAAS,OAAO,CAAC,GAAG,IAAU,SAAS;YAC1C,QAAQ,EAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;gBAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAE,KAAa,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,SAAS,CAAC;YAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YACrJ,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,OAAO,EAAK,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YAChD,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,SAAS;SAC1C,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,WAAW,GAAiC;QAChD,OAAO,EAAS,eAAe;QAC/B,QAAQ,EAAQ,qBAAqB;QACrC,OAAO,EAAS,gBAAgB;QAChC,OAAO,EAAS,gBAAgB;QAChC,cAAc,EAAE,sBAAsB;KACvC,CAAC;IAEF,KAAK,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,MAAM,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,YAAY,CAAC,MAAM,GAAG,UAAU,IAAI,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;YAC5E,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7C,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC;YACvB,iEAAiE;YACjE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1E,8EAA8E;YAC9E,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3E,CAAC;aAAM,IAAI,UAAU,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YACzC,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,qGAAqG,CAAC;IAC/G,CAAC;IAED,gEAAgE;IAChE,IAAI,MAAM,GAAG,+BAA+B,CAAC;IAE7C,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,4CAA4C,CAAC;QACvD,KAAK,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,YAAY,EAAE,CAAC;YACjD,MAAM,GAAG,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/D,MAAM,IAAI,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9C,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;gBAAE,MAAM,IAAI,oBAAoB,CAAC;YACzD,MAAM,IAAI,qBAAqB,GAAG,IAAI,CAAC;YACvC,MAAM,IAAI,iBAAiB,CAAC,CAAC,OAAO,IAAI,CAAC;YACzC,IAAI,CAAC,CAAC,IAAI;gBAAoC,MAAM,IAAI,WAAW,CAAC,CAAC,IAAI,IAAI,CAAC;YAC9E,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;gBAAE,MAAM,IAAI,iBAAiB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;YACtG,IAAI,CAAC,CAAC,GAAG,IAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM;gBAAK,MAAM,IAAI,cAAc,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YAC/F,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM;gBAAwB,MAAM,IAAI,eAAe,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACjG,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;gBACtB,MAAM,IAAI,wGAAwG,CAAC;YACrH,IAAI,CAAC,CAAC,UAAU;gBAAE,MAAM,IAAI,eAAe,CAAC,CAAC,UAAU,IAAI,CAAC;YAC5D,MAAM,IAAI,YAAY,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;QACzI,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,iEAAiE,CAAC;QAC5E,KAAK,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,UAAU,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAI,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChE,MAAM,GAAG,GAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,MAAM,CAAC,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,MAAM,GAAG,IAAI,CAAC;QACpE,CAAC;IACH,CAAC;IAED,MAAM,IAAI,6BAA6B,CAAC;IACxC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/middleware/auto-reflect.d.ts

@@ -0,0 +1,4 @@
+export { runAutoReflect, getReflectLogPath } from "./reflect/pipeline.js";
+export { reflectTokenStats } from "./reflect/context.js";
+export type { ReflectCreatedBlock, ReflectUpdatedBlock, ReflectResult } from "./reflect/types.js";
+//# sourceMappingURL=auto-reflect.d.ts.map

package/dist/middleware/auto-reflect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-reflect.d.ts","sourceRoot":"","sources":["../../src/middleware/auto-reflect.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,YAAY,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/middleware/auto-reflect.js

@@ -0,0 +1,5 @@
+// auto-reflect.ts — entry point. Implementation split into reflect/ directory.
+// Reference: auto-reflect.v10-stable.ts (stable snapshot before split)
+export { runAutoReflect, getReflectLogPath } from "./reflect/pipeline.js";
+export { reflectTokenStats } from "./reflect/context.js";
+//# sourceMappingURL=auto-reflect.js.map

package/dist/middleware/auto-reflect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-reflect.js","sourceRoot":"","sources":["../../src/middleware/auto-reflect.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,uEAAuE;AACvE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/middleware/reflect/apply-flag-verdict.d.ts

@@ -0,0 +1,27 @@
+import type { WorkspaceDB } from "../../store/database.js";
+import type { PipelineFlag, ReviewVerdict, FlagActionTaken } from "./types.js";
+export declare const APPLY_VALID_VERDICTS: ReviewVerdict[];
+export interface ApplyVerdictInput {
+    verdict: ReviewVerdict;
+    reason: string;
+    /** Run executeMerge (archive loser + wire supersedes). Only meaningful for 'merge'. */
+    execute?: boolean;
+    winning_block_id?: string | null;
+}
+export type ApplyVerdictResult = {
+    ok: true;
+    action_taken: FlagActionTaken;
+    winning_block_id: string | null;
+} | {
+    ok: false;
+    code: string;
+    message: string;
+};
+/**
+ * Apply a verdict to a (fresh, not-yet-reviewed) flag. Caller is responsible for the
+ * not-found / already-reviewed pre-checks (the REST route returns 404/409; the NL
+ * path re-reads the pending set). Returns a discriminated result the caller maps to
+ * its surface (HTTP status / log).
+ */
+export declare function applyFlagVerdict(db: WorkspaceDB, flag: PipelineFlag, input: ApplyVerdictInput): ApplyVerdictResult;
+//# sourceMappingURL=apply-flag-verdict.d.ts.map

package/dist/middleware/reflect/apply-flag-verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply-flag-verdict.d.ts","sourceRoot":"","sources":["../../../src/middleware/reflect/apply-flag-verdict.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAI/E,eAAO,MAAM,oBAAoB,EAAE,aAAa,EAAyD,CAAC;AAE1G,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,uFAAuF;IACvF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,YAAY,EAAE,eAAe,CAAC;IAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC5E;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,WAAW,EACf,IAAI,EAAE,YAAY,EAClB,KAAK,EAAE,iBAAiB,GACvB,kBAAkB,CAuCpB"}

package/dist/middleware/reflect/apply-flag-verdict.js

@@ -0,0 +1,57 @@
+// apply-flag-verdict.ts — the ONE mechanical applier for a flag verdict.
+//
+// Validate a {verdict, reason, execute?, winning_block_id?} against a flag, run the
+// merge if asked, write the verdict back. Pure mechanics — no LLM, no NL. Both
+// resolution surfaces call THIS so they can't diverge on validation or merge
+// semantics:
+//   • REST   — POST /api/flags/:id/review (operator override)
+//   • NL      — nl-accept.ts (agent stated its decision in its reply)
+//
+// Charter Rule 2 honored downstream: executeMerge archives the loser (recoverable),
+// never deletes.
+import { markFlagReviewed } from "./pipeline-flags.js";
+import { executeMerge } from "./flag-reviewer.js";
+export const APPLY_VALID_VERDICTS = ["merge", "leave", "split", "pending_clarification"];
+/**
+ * Apply a verdict to a (fresh, not-yet-reviewed) flag. Caller is responsible for the
+ * not-found / already-reviewed pre-checks (the REST route returns 404/409; the NL
+ * path re-reads the pending set). Returns a discriminated result the caller maps to
+ * its surface (HTTP status / log).
+ */
+export function applyFlagVerdict(db, flag, input) {
+    const raw = db.db;
+    const verdict = input.verdict;
+    const reason = (input.reason ?? "").trim();
+    if (!APPLY_VALID_VERDICTS.includes(verdict)) {
+        return { ok: false, code: "BAD_VERDICT", message: `verdict must be one of ${APPLY_VALID_VERDICTS.filter(Boolean).join(", ")}` };
+    }
+    if (!reason) {
+        return { ok: false, code: "REASON_REQUIRED", message: "reason is required (the durable audit trail for this resolution)" };
+    }
+    let action_taken = "none";
+    let winningId = input.winning_block_id ?? null;
+    if (input.execute && verdict === "merge") {
+        if (!input.winning_block_id) {
+            return { ok: false, code: "WINNER_REQUIRED", message: "winning_block_id required when execute=true and verdict='merge'" };
+        }
+        const validWinner = input.winning_block_id === flag.block_id_a || input.winning_block_id === flag.block_id_b;
+        if (!validWinner) {
+            return { ok: false, code: "BAD_WINNER", message: `winning_block_id must be one of the flag's blocks (${flag.block_id_a}, ${flag.block_id_b})` };
+        }
+        const loser = input.winning_block_id === flag.block_id_a ? flag.block_id_b : flag.block_id_a;
+        if (!loser) {
+            return { ok: false, code: "NO_LOSER", message: "cannot merge a single-block flag (no loser)" };
+        }
+        action_taken = executeMerge(db, input.winning_block_id, loser);
+        if (action_taken === "none") {
+            return { ok: false, code: "MERGE_FAILED", message: "merge execution failed (block not found or self-merge) — flag NOT marked reviewed" };
+        }
+        winningId = input.winning_block_id;
+    }
+    const wrote = markFlagReviewed(raw, { flag_id: flag.id, verdict, reason, action_taken, winning_block_id: winningId });
+    if (!wrote) {
+        return { ok: false, code: "ALREADY_REVIEWED", message: "flag was reviewed concurrently — re-fetch to see the verdict" };
+    }
+    return { ok: true, action_taken, winning_block_id: winningId };
+}
+//# sourceMappingURL=apply-flag-verdict.js.map