purecontext-mcp 1.0.1

package/dist/core/db/dep-store.js

@@ -0,0 +1,155 @@
+import { StorageError } from '../errors.js';
+// ─── Helpers ──────────────────────────────────────────────────────────────────
+function rowToEdge(row) {
+    return {
+        repoId: row.repo_id,
+        sourceFile: row.source_file,
+        sourceSymbolId: row.source_symbol_id,
+        targetFile: row.target_file,
+        targetSymbolId: row.target_symbol_id,
+        edgeType: row.edge_type,
+        specifier: row.specifier,
+    };
+}
+function rowToSymbol(row) {
+    return {
+        id: row.id,
+        name: row.name,
+        kind: row.kind,
+        filePath: row.file_path,
+        startByte: row.start_byte,
+        endByte: row.end_byte,
+        signature: row.signature,
+        summary: row.summary,
+        frameworkMeta: row.framework_meta
+            ? JSON.parse(row.framework_meta)
+            : undefined,
+    };
+}
+// ─── Operations ───────────────────────────────────────────────────────────────
+export function insertEdges(db, edges, tenantId = 'local') {
+    if (edges.length === 0)
+        return;
+    const stmt = db.prepare(`
+    INSERT INTO dep_edges
+      (repo_id, source_file, source_symbol_id, target_file, target_symbol_id, edge_type, specifier, tenant_id)
+    VALUES
+      (@repoId, @sourceFile, @sourceSymbolId, @targetFile, @targetSymbolId, @edgeType, @specifier, @tenantId)
+  `);
+    const insert = db.transaction((rows) => {
+        for (const e of rows) {
+            try {
+                stmt.run({
+                    repoId: e.repoId,
+                    sourceFile: e.sourceFile,
+                    sourceSymbolId: e.sourceSymbolId ?? null,
+                    targetFile: e.targetFile,
+                    targetSymbolId: e.targetSymbolId ?? null,
+                    edgeType: e.edgeType,
+                    specifier: e.specifier,
+                    tenantId,
+                });
+            }
+            catch (err) {
+                throw new StorageError(`Failed to insert edge ${e.sourceFile} → ${e.targetFile}`, 'insertEdges', err);
+            }
+        }
+    });
+    insert(edges);
+}
+export function deleteEdgesByFile(db, repoId, filePath) {
+    db.prepare('DELETE FROM dep_edges WHERE repo_id = ? AND (source_file = ? OR target_file = ?)').run(repoId, filePath, filePath);
+}
+/** All dependency edges for a repo. */
+export function getAllDepEdges(db, repoId, tenantId) {
+    if (tenantId !== undefined) {
+        return db
+            .prepare('SELECT * FROM dep_edges WHERE repo_id = ? AND tenant_id = ?')
+            .all(repoId, tenantId)
+            .map(rowToEdge);
+    }
+    return db
+        .prepare('SELECT * FROM dep_edges WHERE repo_id = ?')
+        .all(repoId)
+        .map(rowToEdge);
+}
+/** Files and symbols that `sourceFile` imports (forward walk, one hop). */
+export function getForwardDeps(db, repoId, sourceFile, tenantId) {
+    if (tenantId !== undefined) {
+        return db
+            .prepare('SELECT * FROM dep_edges WHERE repo_id = ? AND source_file = ? AND tenant_id = ?')
+            .all(repoId, sourceFile, tenantId)
+            .map(rowToEdge);
+    }
+    return db
+        .prepare('SELECT * FROM dep_edges WHERE repo_id = ? AND source_file = ?')
+        .all(repoId, sourceFile)
+        .map(rowToEdge);
+}
+/** Files and symbols that import `targetFile` (reverse walk, one hop). */
+export function getReverseDeps(db, repoId, targetFile, tenantId) {
+    if (tenantId !== undefined) {
+        return db
+            .prepare('SELECT * FROM dep_edges WHERE repo_id = ? AND target_file = ? AND tenant_id = ?')
+            .all(repoId, targetFile, tenantId)
+            .map(rowToEdge);
+    }
+    return db
+        .prepare('SELECT * FROM dep_edges WHERE repo_id = ? AND target_file = ?')
+        .all(repoId, targetFile)
+        .map(rowToEdge);
+}
+/** Distinct file paths that import `targetFile`. */
+export function getImportersOf(db, repoId, targetFile, tenantId) {
+    if (tenantId !== undefined) {
+        return db
+            .prepare('SELECT DISTINCT source_file FROM dep_edges WHERE repo_id = ? AND target_file = ? AND tenant_id = ?')
+            .all(repoId, targetFile, tenantId)
+            .map((r) => r.source_file);
+    }
+    return db
+        .prepare('SELECT DISTINCT source_file FROM dep_edges WHERE repo_id = ? AND target_file = ?')
+        .all(repoId, targetFile)
+        .map((r) => r.source_file);
+}
+/**
+ * Returns exported symbols whose file is never imported by any other file in
+ * the repo. Phase 1: file-level dead code detection.
+ */
+export function findDeadExports(db, repoId, tenantId) {
+    if (tenantId !== undefined) {
+        return db
+            .prepare(`
+        SELECT s.id, s.name, s.kind, s.file_path, s.start_byte, s.end_byte,
+               s.signature, s.summary, s.framework_meta
+        FROM symbols s
+        WHERE s.repo_id = ?
+          AND s.tenant_id = ?
+          AND NOT EXISTS (
+            SELECT 1 FROM dep_edges e
+            WHERE e.repo_id = ?
+              AND e.tenant_id = ?
+              AND e.target_file = s.file_path
+          )
+        ORDER BY s.file_path, s.start_byte
+      `)
+            .all(repoId, tenantId, repoId, tenantId)
+            .map(rowToSymbol);
+    }
+    return db
+        .prepare(`
+      SELECT s.id, s.name, s.kind, s.file_path, s.start_byte, s.end_byte,
+             s.signature, s.summary, s.framework_meta
+      FROM symbols s
+      WHERE s.repo_id = ?
+        AND NOT EXISTS (
+          SELECT 1 FROM dep_edges e
+          WHERE e.repo_id = ?
+            AND e.target_file = s.file_path
+        )
+      ORDER BY s.file_path, s.start_byte
+    `)
+        .all(repoId, repoId)
+        .map(rowToSymbol);
+}
+//# sourceMappingURL=dep-store.js.map

package/dist/core/db/dep-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dep-store.js","sourceRoot":"","sources":["../../../src/core/db/dep-store.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AA2B5C,iFAAiF;AAEjF,SAAS,SAAS,CAAC,GAAc;IAC/B,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,cAAc,EAAE,GAAG,CAAC,gBAAgB;QACpC,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,cAAc,EAAE,GAAG,CAAC,gBAAgB;QACpC,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAAgB;IACnC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,IAAkB;QAC5B,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,aAAa,EAAE,GAAG,CAAC,cAAc;YAC/B,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAA6B;YAC7D,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,WAAW,CACzB,EAAqB,EACrB,KAAgB,EAChB,QAAQ,GAAG,OAAO;IAElB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAE/B,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;GAKvB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,IAAe,EAAE,EAAE;QAChD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC;oBACP,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI;oBACxC,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI;oBACxC,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,SAAS,EAAE,CAAC,CAAC,SAAS;oBACtB,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,YAAY,CACpB,yBAAyB,CAAC,CAAC,UAAU,MAAM,CAAC,CAAC,UAAU,EAAE,EACzD,aAAa,EACb,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,EAAqB,EACrB,MAAc,EACd,QAAgB;IAEhB,EAAE,CAAC,OAAO,CACR,kFAAkF,CACnF,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACpC,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,cAAc,CAC5B,EAAqB,EACrB,MAAc,EACd,QAAiB;IAEjB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE;aACN,OAAO,CACN,6DAA6D,CAC9D;aACA,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC;aACrB,GAAG,CAAC,SAAS,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,EAAE;SACN,OAAO,CAAsB,2CAA2C,CAAC;SACzE,GAAG,CAAC,MAAM,CAAC;SACX,GAAG,CAAC,SAAS,CAAC,CAAC;AACpB,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAC5B,EAAqB,EACrB,MAAc,EACd,UAAkB,EAClB,QAAiB;IAEjB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE;aACN,OAAO,CACN,iFAAiF,CAClF;aACA,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC;aACjC,GAAG,CAAC,SAAS,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,EAAE;SACN,OAAO,CACN,+DAA+D,CAChE;SACA,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC;SACvB,GAAG,CAAC,SAAS,CAAC,CAAC;AACpB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,cAAc,CAC5B,EAAqB,EACrB,MAAc,EACd,UAAkB,EAClB,QAAiB;IAEjB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE;aACN,OAAO,CACN,iFAAiF,CAClF;aACA,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC;aACjC,GAAG,CAAC,SAAS,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,EAAE;SACN,OAAO,CACN,+DAA+D,CAChE;SACA,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC;SACvB,GAAG,CAAC,SAAS,CAAC,CAAC;AACpB,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,cAAc,CAC5B,EAAqB,EACrB,MAAc,EACd,UAAkB,EAClB,QAAiB;IAEjB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE;aACN,OAAO,CACN,oGAAoG,CACrG;aACA,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC;aACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,EAAE;SACN,OAAO,CACN,kFAAkF,CACnF;SACA,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,EAAqB,EACrB,MAAc,EACd,QAAiB;IAEjB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE;aACN,OAAO,CAAgD;;;;;;;;;;;;;OAavD,CAAC;aACD,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;aACvC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,EAAE;SACN,OAAO,CAAgC;;;;;;;;;;;KAWvC,CAAC;SACD,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;SACnB,GAAG,CAAC,WAAW,CAAC,CAAC;AACtB,CAAC"}

package/dist/core/db/embedding-store.d.ts

@@ -0,0 +1,40 @@
+/**
+ * SQLite persistence layer for symbol embedding vectors.
+ *
+ * Stores Float32Array embeddings as BLOB (binary) so they can be loaded back
+ * after a restart and used to rebuild the HNSW in-memory index without re-calling
+ * the embedding API.
+ *
+ * Table: embeddings
+ *   symbol_id  TEXT PK  — matches symbols.id
+ *   repo_id    TEXT     — for scoped queries / bulk delete
+ *   embedding  BLOB     — raw Float32Array bytes (little-endian, 4 bytes per float)
+ *   dimension  INTEGER  — number of floats (sanity check)
+ *   provider   TEXT     — 'anthropic' | 'openai' | 'local'
+ *   created_at TEXT     — ISO-8601 timestamp
+ */
+import type Database from 'better-sqlite3';
+export declare const EMBEDDINGS_DDL = "\nCREATE TABLE IF NOT EXISTS embeddings (\n  symbol_id  TEXT    NOT NULL,\n  repo_id    TEXT    NOT NULL,\n  embedding  BLOB    NOT NULL,\n  dimension  INTEGER NOT NULL,\n  provider   TEXT    NOT NULL,\n  created_at TEXT    NOT NULL,\n  tenant_id  TEXT    NOT NULL DEFAULT 'local',\n  PRIMARY KEY (symbol_id, repo_id),\n  FOREIGN KEY (symbol_id, repo_id) REFERENCES symbols(id, repo_id) ON DELETE CASCADE,\n  FOREIGN KEY (repo_id) REFERENCES repos(id) ON DELETE CASCADE\n);\nCREATE INDEX IF NOT EXISTS idx_embeddings_repo ON embeddings(repo_id);\n";
+/**
+ * Persist a batch of embeddings to SQLite.
+ * Replaces any existing embedding for the same (symbol_id, repo_id) pair.
+ */
+export declare function saveEmbeddings(db: Database.Database, repoId: string, provider: string, embeddings: Map<string, Float32Array>, tenantId?: string): void;
+/**
+ * Load all embeddings for a repo.
+ * Returns a Map from symbol_id → Float32Array.
+ */
+export declare function loadEmbeddings(db: Database.Database, repoId: string): Map<string, Float32Array>;
+/**
+ * Delete embeddings for specific symbol IDs (e.g., when symbols are removed).
+ */
+export declare function deleteEmbeddings(db: Database.Database, symbolIds: string[]): void;
+/**
+ * Delete all embeddings for a repo (e.g., on full re-index).
+ */
+export declare function deleteAllEmbeddings(db: Database.Database, repoId: string): void;
+/**
+ * Return the number of stored embeddings for a repo.
+ */
+export declare function countEmbeddings(db: Database.Database, repoId: string): number;
+//# sourceMappingURL=embedding-store.d.ts.map

package/dist/core/db/embedding-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"embedding-store.d.ts","sourceRoot":"","sources":["../../../src/core/db/embedding-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAK3C,eAAO,MAAM,cAAc,wiBAc1B,CAAC;AAiBF;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,EACrC,QAAQ,SAAU,GACjB,IAAI,CA6BN;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,MAAM,EAAE,MAAM,GACb,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAqB3B;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,SAAS,EAAE,MAAM,EAAE,GAClB,IAAI,CAUN;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAE/E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAK7E"}

package/dist/core/db/embedding-store.js

@@ -0,0 +1,120 @@
+/**
+ * SQLite persistence layer for symbol embedding vectors.
+ *
+ * Stores Float32Array embeddings as BLOB (binary) so they can be loaded back
+ * after a restart and used to rebuild the HNSW in-memory index without re-calling
+ * the embedding API.
+ *
+ * Table: embeddings
+ *   symbol_id  TEXT PK  — matches symbols.id
+ *   repo_id    TEXT     — for scoped queries / bulk delete
+ *   embedding  BLOB     — raw Float32Array bytes (little-endian, 4 bytes per float)
+ *   dimension  INTEGER  — number of floats (sanity check)
+ *   provider   TEXT     — 'anthropic' | 'openai' | 'local'
+ *   created_at TEXT     — ISO-8601 timestamp
+ */
+import { StorageError } from '../errors.js';
+// ─── DDL (called from schema init) ───────────────────────────────────────────
+export const EMBEDDINGS_DDL = `
+CREATE TABLE IF NOT EXISTS embeddings (
+  symbol_id  TEXT    NOT NULL,
+  repo_id    TEXT    NOT NULL,
+  embedding  BLOB    NOT NULL,
+  dimension  INTEGER NOT NULL,
+  provider   TEXT    NOT NULL,
+  created_at TEXT    NOT NULL,
+  tenant_id  TEXT    NOT NULL DEFAULT 'local',
+  PRIMARY KEY (symbol_id, repo_id),
+  FOREIGN KEY (symbol_id, repo_id) REFERENCES symbols(id, repo_id) ON DELETE CASCADE,
+  FOREIGN KEY (repo_id) REFERENCES repos(id) ON DELETE CASCADE
+);
+CREATE INDEX IF NOT EXISTS idx_embeddings_repo ON embeddings(repo_id);
+`;
+// ─── Helpers ─────────────────────────────────────────────────────────────────
+function float32ToBuffer(arr) {
+    return Buffer.from(arr.buffer, arr.byteOffset, arr.byteLength);
+}
+function bufferToFloat32(buf) {
+    // Buffer.from may share memory — copy to ensure alignment
+    const ab = new ArrayBuffer(buf.length);
+    buf.copy(Buffer.from(ab));
+    return new Float32Array(ab);
+}
+// ─── Operations ───────────────────────────────────────────────────────────────
+/**
+ * Persist a batch of embeddings to SQLite.
+ * Replaces any existing embedding for the same (symbol_id, repo_id) pair.
+ */
+export function saveEmbeddings(db, repoId, provider, embeddings, tenantId = 'local') {
+    if (embeddings.size === 0)
+        return;
+    const stmt = db.prepare(`
+    INSERT OR REPLACE INTO embeddings (symbol_id, repo_id, embedding, dimension, provider, created_at, tenant_id)
+    VALUES (@symbolId, @repoId, @embedding, @dimension, @provider, @createdAt, @tenantId)
+  `);
+    const createdAt = new Date().toISOString();
+    const insert = db.transaction(() => {
+        for (const [symbolId, vec] of embeddings) {
+            try {
+                stmt.run({
+                    symbolId,
+                    repoId,
+                    embedding: float32ToBuffer(vec),
+                    dimension: vec.length,
+                    provider,
+                    createdAt,
+                    tenantId,
+                });
+            }
+            catch (err) {
+                throw new StorageError(`Failed to save embedding for symbol ${symbolId}`, 'saveEmbeddings', err);
+            }
+        }
+    });
+    insert();
+}
+/**
+ * Load all embeddings for a repo.
+ * Returns a Map from symbol_id → Float32Array.
+ */
+export function loadEmbeddings(db, repoId) {
+    const rows = db.prepare('SELECT symbol_id, embedding, dimension FROM embeddings WHERE repo_id = ?').all(repoId);
+    const result = new Map();
+    for (const row of rows) {
+        const vec = bufferToFloat32(row.embedding);
+        if (vec.length !== row.dimension) {
+            // Corrupted row — skip rather than crash
+            continue;
+        }
+        result.set(row.symbol_id, vec);
+    }
+    return result;
+}
+/**
+ * Delete embeddings for specific symbol IDs (e.g., when symbols are removed).
+ */
+export function deleteEmbeddings(db, symbolIds) {
+    if (symbolIds.length === 0)
+        return;
+    const del = db.transaction(() => {
+        const stmt = db.prepare('DELETE FROM embeddings WHERE symbol_id = ?');
+        for (const id of symbolIds) {
+            stmt.run(id);
+        }
+    });
+    del();
+}
+/**
+ * Delete all embeddings for a repo (e.g., on full re-index).
+ */
+export function deleteAllEmbeddings(db, repoId) {
+    db.prepare('DELETE FROM embeddings WHERE repo_id = ?').run(repoId);
+}
+/**
+ * Return the number of stored embeddings for a repo.
+ */
+export function countEmbeddings(db, repoId) {
+    const row = db.prepare('SELECT COUNT(*) AS n FROM embeddings WHERE repo_id = ?').get(repoId);
+    return row?.n ?? 0;
+}
+//# sourceMappingURL=embedding-store.js.map

package/dist/core/db/embedding-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embedding-store.js","sourceRoot":"","sources":["../../../src/core/db/embedding-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,gFAAgF;AAEhF,MAAM,CAAC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;CAc7B,CAAC;AAEF,gFAAgF;AAEhF,SAAS,eAAe,CAAC,GAAiB;IACxC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,0DAA0D;IAC1D,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1B,OAAO,IAAI,YAAY,CAAC,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,EAAqB,EACrB,MAAc,EACd,QAAgB,EAChB,UAAqC,EACrC,QAAQ,GAAG,OAAO;IAElB,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO;IAElC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;GAGvB,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE3C,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QACjC,KAAK,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,UAAU,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC;oBACP,QAAQ;oBACR,MAAM;oBACN,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC;oBAC/B,SAAS,EAAE,GAAG,CAAC,MAAM;oBACrB,QAAQ;oBACR,SAAS;oBACT,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,YAAY,CAAC,uCAAuC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;YACnG,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,EAAE,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,EAAqB,EACrB,MAAc;IAQd,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACrB,0EAA0E,CAC3E,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAEd,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;YACjC,yCAAyC;YACzC,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,EAAqB,EACrB,SAAmB;IAEnB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEnC,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QAC9B,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;QACtE,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IACH,GAAG,EAAE,CAAC;AACR,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAqB,EAAE,MAAc;IACvE,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACrE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,EAAqB,EAAE,MAAc;IACnE,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CACpB,wDAAwD,CACzD,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACd,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC"}

package/dist/core/db/file-store.d.ts

@@ -0,0 +1,27 @@
+import type Database from 'better-sqlite3';
+export declare function upsertFile(db: Database.Database, repoId: string, filePath: string, contentHash: string, rawContent?: Buffer, tenantId?: string): void;
+export declare function getFileContent(db: Database.Database, repoId: string, filePath: string, tenantId?: string): Buffer | null;
+export declare function getFileHash(db: Database.Database, repoId: string, filePath: string, tenantId?: string): string | null;
+export declare function deleteFile(db: Database.Database, repoId: string, filePath: string): void;
+export declare function getAllFileHashes(db: Database.Database, repoId: string): Map<string, string>;
+/**
+ * Returns the byte length of a file's stored content, or 0 if not found.
+ * Uses SQLite's length() on the blob to avoid loading content into memory.
+ */
+export declare function getFileSizeBytes(db: Database.Database, repoId: string, filePath: string): number;
+/**
+ * Returns byte lengths for multiple files in a single pass.
+ * Files not found in the DB get a size of 0.
+ */
+export declare function getFileSizesBatch(db: Database.Database, repoId: string, filePaths: string[]): Map<string, number>;
+export interface FileEntry {
+    path: string;
+    rawContent: Buffer | null;
+}
+export declare function getAllFilesWithContent(db: Database.Database, repoId: string): FileEntry[];
+/**
+ * Return the total bytes of stored raw_content for a tenant across all repos.
+ * Used for storage quota tracking.
+ */
+export declare function getTenantStorageBytes(db: Database.Database, tenantId: string): number;
+//# sourceMappingURL=file-store.d.ts.map

package/dist/core/db/file-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-store.d.ts","sourceRoot":"","sources":["../../../src/core/db/file-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAK3C,wBAAgB,UAAU,CACxB,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,UAAU,CAAC,EAAE,MAAM,EACnB,QAAQ,SAAU,GACjB,IAAI,CAqBN;AAED,wBAAgB,cAAc,CAC5B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,GAAG,IAAI,CAgBf;AAED,wBAAgB,WAAW,CACzB,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,GAAG,IAAI,CAgBf;AAED,wBAAgB,UAAU,CACxB,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,IAAI,CAEN;AAED,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,MAAM,EAAE,MAAM,GACb,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAQrB;AAID;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,MAAM,CAOR;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EAAE,GAClB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAcrB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,MAAM,EAAE,MAAM,GACb,SAAS,EAAE,CAQb;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,QAAQ,EAAE,MAAM,GACf,MAAM,CAOR"}

package/dist/core/db/file-store.js

@@ -0,0 +1,101 @@
+import { StorageError } from '../errors.js';
+// ─── Operations ───────────────────────────────────────────────────────────────
+export function upsertFile(db, repoId, filePath, contentHash, rawContent, tenantId = 'local') {
+    try {
+        db.prepare(`
+      INSERT INTO files (repo_id, path, content_hash, raw_content, indexed_at, tenant_id)
+      VALUES (@repoId, @path, @contentHash, @rawContent, @indexedAt, @tenantId)
+      ON CONFLICT(repo_id, path) DO UPDATE SET
+        content_hash = excluded.content_hash,
+        raw_content  = excluded.raw_content,
+        indexed_at   = excluded.indexed_at,
+        tenant_id    = excluded.tenant_id
+    `).run({
+            repoId,
+            path: filePath,
+            contentHash,
+            rawContent: rawContent ?? null,
+            indexedAt: Date.now(),
+            tenantId,
+        });
+    }
+    catch (err) {
+        throw new StorageError(`Failed to upsert file "${filePath}"`, 'upsertFile', err);
+    }
+}
+export function getFileContent(db, repoId, filePath, tenantId) {
+    if (tenantId !== undefined) {
+        const row = db
+            .prepare('SELECT raw_content FROM files WHERE repo_id = ? AND path = ? AND tenant_id = ?')
+            .get(repoId, filePath, tenantId);
+        return row?.raw_content ?? null;
+    }
+    const row = db
+        .prepare('SELECT raw_content FROM files WHERE repo_id = ? AND path = ?')
+        .get(repoId, filePath);
+    return row?.raw_content ?? null;
+}
+export function getFileHash(db, repoId, filePath, tenantId) {
+    if (tenantId !== undefined) {
+        const row = db
+            .prepare('SELECT content_hash FROM files WHERE repo_id = ? AND path = ? AND tenant_id = ?')
+            .get(repoId, filePath, tenantId);
+        return row?.content_hash ?? null;
+    }
+    const row = db
+        .prepare('SELECT content_hash FROM files WHERE repo_id = ? AND path = ?')
+        .get(repoId, filePath);
+    return row?.content_hash ?? null;
+}
+export function deleteFile(db, repoId, filePath) {
+    db.prepare('DELETE FROM files WHERE repo_id = ? AND path = ?').run(repoId, filePath);
+}
+export function getAllFileHashes(db, repoId) {
+    const rows = db
+        .prepare('SELECT path, content_hash FROM files WHERE repo_id = ?')
+        .all(repoId);
+    return new Map(rows.map((r) => [r.path, r.content_hash]));
+}
+// ─── Size queries ─────────────────────────────────────────────────────────────
+/**
+ * Returns the byte length of a file's stored content, or 0 if not found.
+ * Uses SQLite's length() on the blob to avoid loading content into memory.
+ */
+export function getFileSizeBytes(db, repoId, filePath) {
+    const row = db
+        .prepare('SELECT length(raw_content) as size FROM files WHERE repo_id = ? AND path = ?')
+        .get(repoId, filePath);
+    return row?.size ?? 0;
+}
+/**
+ * Returns byte lengths for multiple files in a single pass.
+ * Files not found in the DB get a size of 0.
+ */
+export function getFileSizesBatch(db, repoId, filePaths) {
+    const result = new Map();
+    if (filePaths.length === 0)
+        return result;
+    const stmt = db.prepare('SELECT path, length(raw_content) as size FROM files WHERE repo_id = ? AND path = ?');
+    for (const fp of filePaths) {
+        const row = stmt.get(repoId, fp);
+        result.set(fp, row?.size ?? 0);
+    }
+    return result;
+}
+export function getAllFilesWithContent(db, repoId) {
+    const rows = db
+        .prepare('SELECT path, raw_content FROM files WHERE repo_id = ?')
+        .all(repoId);
+    return rows.map((r) => ({ path: r.path, rawContent: r.raw_content }));
+}
+/**
+ * Return the total bytes of stored raw_content for a tenant across all repos.
+ * Used for storage quota tracking.
+ */
+export function getTenantStorageBytes(db, tenantId) {
+    const row = db
+        .prepare('SELECT SUM(length(raw_content)) AS total FROM files WHERE tenant_id = ?')
+        .get(tenantId);
+    return row?.total ?? 0;
+}
+//# sourceMappingURL=file-store.js.map

package/dist/core/db/file-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-store.js","sourceRoot":"","sources":["../../../src/core/db/file-store.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,iFAAiF;AAEjF,MAAM,UAAU,UAAU,CACxB,EAAqB,EACrB,MAAc,EACd,QAAgB,EAChB,WAAmB,EACnB,UAAmB,EACnB,QAAQ,GAAG,OAAO;IAElB,IAAI,CAAC;QACH,EAAE,CAAC,OAAO,CAAC;;;;;;;;KAQV,CAAC,CAAC,GAAG,CAAC;YACL,MAAM;YACN,IAAI,EAAE,QAAQ;YACd,WAAW;YACX,UAAU,EAAE,UAAU,IAAI,IAAI;YAC9B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,YAAY,CAAC,0BAA0B,QAAQ,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,EAAqB,EACrB,MAAc,EACd,QAAgB,EAChB,QAAiB;IAEjB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CACN,gFAAgF,CACjF;aACA,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACnC,OAAO,GAAG,EAAE,WAAW,IAAI,IAAI,CAAC;IAClC,CAAC;IACD,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CACN,8DAA8D,CAC/D;SACA,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAEzB,OAAO,GAAG,EAAE,WAAW,IAAI,IAAI,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,EAAqB,EACrB,MAAc,EACd,QAAgB,EAChB,QAAiB;IAEjB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CACN,iFAAiF,CAClF;aACA,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACnC,OAAO,GAAG,EAAE,YAAY,IAAI,IAAI,CAAC;IACnC,CAAC;IACD,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CACN,+DAA+D,CAChE;SACA,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAEzB,OAAO,GAAG,EAAE,YAAY,IAAI,IAAI,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,EAAqB,EACrB,MAAc,EACd,QAAgB;IAEhB,EAAE,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,EAAqB,EACrB,MAAc;IAEd,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CACN,wDAAwD,CACzD;SACA,GAAG,CAAC,MAAM,CAAC,CAAC;IAEf,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,EAAqB,EACrB,MAAc,EACd,QAAgB;IAEhB,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CACN,8EAA8E,CAC/E;SACA,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACzB,OAAO,GAAG,EAAE,IAAI,IAAI,CAAC,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,EAAqB,EACrB,MAAc,EACd,SAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAE1C,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACrB,oFAAoF,CACrF,CAAC;IAEF,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAOD,MAAM,UAAU,sBAAsB,CACpC,EAAqB,EACrB,MAAc;IAEd,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CACN,uDAAuD,CACxD;SACA,GAAG,CAAC,MAAM,CAAC,CAAC;IAEf,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,EAAqB,EACrB,QAAgB;IAEhB,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CACN,yEAAyE,CAC1E;SACA,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjB,OAAO,GAAG,EAAE,KAAK,IAAI,CAAC,CAAC;AACzB,CAAC"}

package/dist/core/db/request-log.d.ts

@@ -0,0 +1,40 @@
+/**
+ * RequestLogStore — persists per-request telemetry in the central auth database.
+ *
+ * Used by the Admin API to compute usage stats and detect abuse patterns.
+ * Logs are pruned periodically to prevent unbounded growth.
+ */
+import type Database from 'better-sqlite3';
+export declare const REQUEST_LOG_DDL = "\nCREATE TABLE IF NOT EXISTS request_log (\n  id            INTEGER PRIMARY KEY AUTOINCREMENT,\n  timestamp     TEXT    NOT NULL,\n  tenant_id     TEXT,\n  tool          TEXT    NOT NULL,\n  duration_ms   INTEGER,\n  status        TEXT    NOT NULL,\n  error_message TEXT\n);\nCREATE INDEX IF NOT EXISTS idx_request_log_tenant\n  ON request_log(tenant_id, timestamp);\nCREATE INDEX IF NOT EXISTS idx_request_log_timestamp\n  ON request_log(timestamp);\n";
+export interface RequestLogEntry {
+    timestamp: string;
+    tenantId: string | null;
+    tool: string;
+    durationMs: number | null;
+    status: 'success' | 'error' | 'rate_limited';
+    errorMessage: string | null;
+}
+export interface LogStats {
+    requests: number;
+    rateLimited: number;
+}
+export declare class RequestLogStore {
+    private readonly db;
+    constructor(db: Database.Database);
+    /** Insert a log entry. Best-effort — never throws. */
+    log(entry: RequestLogEntry): void;
+    /**
+     * Aggregate stats for all tenants since `since` (ISO timestamp).
+     */
+    getStats(since: string): LogStats;
+    /**
+     * Aggregate stats for a single tenant since `since` (ISO timestamp).
+     */
+    getTenantStats(tenantId: string, since: string): LogStats;
+    /**
+     * Delete log entries older than `daysToKeep` days.
+     * Returns the number of rows deleted.
+     */
+    pruneOld(daysToKeep: number): number;
+}
+//# sourceMappingURL=request-log.d.ts.map

package/dist/core/db/request-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-log.d.ts","sourceRoot":"","sources":["../../../src/core/db/request-log.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAI3C,eAAO,MAAM,eAAe,ycAc3B,CAAC;AAIF,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,cAAc,CAAC;IAC7C,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAID,qBAAa,eAAe;IACd,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAElD,sDAAsD;IACtD,GAAG,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IAoBjC;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ;IAgBjC;;OAEG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ;IAgBzD;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;CAKrC"}

package/dist/core/db/request-log.js

@@ -0,0 +1,90 @@
+/**
+ * RequestLogStore — persists per-request telemetry in the central auth database.
+ *
+ * Used by the Admin API to compute usage stats and detect abuse patterns.
+ * Logs are pruned periodically to prevent unbounded growth.
+ */
+// ─── DDL ──────────────────────────────────────────────────────────────────────
+export const REQUEST_LOG_DDL = `
+CREATE TABLE IF NOT EXISTS request_log (
+  id            INTEGER PRIMARY KEY AUTOINCREMENT,
+  timestamp     TEXT    NOT NULL,
+  tenant_id     TEXT,
+  tool          TEXT    NOT NULL,
+  duration_ms   INTEGER,
+  status        TEXT    NOT NULL,
+  error_message TEXT
+);
+CREATE INDEX IF NOT EXISTS idx_request_log_tenant
+  ON request_log(tenant_id, timestamp);
+CREATE INDEX IF NOT EXISTS idx_request_log_timestamp
+  ON request_log(timestamp);
+`;
+// ─── RequestLogStore ──────────────────────────────────────────────────────────
+export class RequestLogStore {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    /** Insert a log entry. Best-effort — never throws. */
+    log(entry) {
+        try {
+            this.db
+                .prepare(`INSERT INTO request_log (timestamp, tenant_id, tool, duration_ms, status, error_message)
+           VALUES (@timestamp, @tenantId, @tool, @durationMs, @status, @errorMessage)`)
+                .run({
+                timestamp: entry.timestamp,
+                tenantId: entry.tenantId ?? null,
+                tool: entry.tool,
+                durationMs: entry.durationMs ?? null,
+                status: entry.status,
+                errorMessage: entry.errorMessage ?? null,
+            });
+        }
+        catch {
+            // Never let logging errors affect the caller
+        }
+    }
+    /**
+     * Aggregate stats for all tenants since `since` (ISO timestamp).
+     */
+    getStats(since) {
+        const row = this.db
+            .prepare(`SELECT
+           COUNT(*)                                         AS requests,
+           SUM(CASE WHEN status = 'rate_limited' THEN 1 ELSE 0 END) AS rate_limited
+         FROM request_log
+         WHERE timestamp >= ?`)
+            .get(since);
+        return {
+            requests: row?.requests ?? 0,
+            rateLimited: row?.rate_limited ?? 0,
+        };
+    }
+    /**
+     * Aggregate stats for a single tenant since `since` (ISO timestamp).
+     */
+    getTenantStats(tenantId, since) {
+        const row = this.db
+            .prepare(`SELECT
+           COUNT(*)                                         AS requests,
+           SUM(CASE WHEN status = 'rate_limited' THEN 1 ELSE 0 END) AS rate_limited
+         FROM request_log
+         WHERE tenant_id = ? AND timestamp >= ?`)
+            .get(tenantId, since);
+        return {
+            requests: row?.requests ?? 0,
+            rateLimited: row?.rate_limited ?? 0,
+        };
+    }
+    /**
+     * Delete log entries older than `daysToKeep` days.
+     * Returns the number of rows deleted.
+     */
+    pruneOld(daysToKeep) {
+        const cutoff = new Date(Date.now() - daysToKeep * 24 * 60 * 60 * 1000).toISOString();
+        const result = this.db.prepare('DELETE FROM request_log WHERE timestamp < ?').run(cutoff);
+        return result.changes;
+    }
+}
+//# sourceMappingURL=request-log.js.map

package/dist/core/db/request-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-log.js","sourceRoot":"","sources":["../../../src/core/db/request-log.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,iFAAiF;AAEjF,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;CAc9B,CAAC;AAkBF,iFAAiF;AAEjF,MAAM,OAAO,eAAe;IACG;IAA7B,YAA6B,EAAqB;QAArB,OAAE,GAAF,EAAE,CAAmB;IAAG,CAAC;IAEtD,sDAAsD;IACtD,GAAG,CAAC,KAAsB;QACxB,IAAI,CAAC;YACH,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN;sFAC4E,CAC7E;iBACA,GAAG,CAAC;gBACH,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;gBAChC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;gBACpC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;aACzC,CAAC,CAAC;QACP,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;QAC/C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAa;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;;;;8BAIsB,CACvB;aACA,GAAG,CAAC,KAAK,CAAC,CAAC;QACd,OAAO;YACL,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;YAC5B,WAAW,EAAE,GAAG,EAAE,YAAY,IAAI,CAAC;SACpC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,QAAgB,EAAE,KAAa;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;;;;gDAIwC,CACzC;aACA,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACxB,OAAO;YACL,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;YAC5B,WAAW,EAAE,GAAG,EAAE,YAAY,IAAI,CAAC;SACpC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,UAAkB;QACzB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACrF,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1F,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;CACF"}

package/dist/core/db/savings-store.d.ts

@@ -0,0 +1,9 @@
+export interface SavingsData {
+    total_tokens_saved: number;
+    anon_id: string;
+    last_updated: string;
+}
+export declare function _setSavingsPathForTesting(path: string | null): void;
+export declare function loadSavings(): SavingsData;
+export declare function saveSavings(data: SavingsData): void;
+//# sourceMappingURL=savings-store.d.ts.map

package/dist/core/db/savings-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"savings-store.d.ts","sourceRoot":"","sources":["../../../src/core/db/savings-store.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,WAAW;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;CACtB;AAOD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAGnE;AAoBD,wBAAgB,WAAW,IAAI,WAAW,CAsBzC;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAWnD"}