spine-framework 0.3.124 → 0.3.126

package/.framework/functions/_shared/index.ts

@@ -1,373 +1,261 @@
-/**
- * @module index
- * @audience installer
- * @layer shared-core
- * @stability stable
- *
- * Spine v2 Core — Public Import Surface
- *
- * This is the **single, stable entry point** for all custom code importing
- * Spine core functionality. Everything exported here is a committed contract.
- * Internal helpers not listed here are free to change without notice.
- *
- * ## Usage
- *
- * ### In custom functions (v2-custom/functions/)
- * ```ts
- * import { runPipeline, adminDb, SYSTEM_PRINCIPAL, CoreContext } from '../_shared'
- *
- * const ctx: CoreContext = {
- *   principal: SYSTEM_PRINCIPAL,
- *   accountId: myAccountId,
- *   db: adminDb,
- *   requestId: crypto.randomUUID()
- * }
- * const result = await runPipeline(pipelineId, triggerData, ctx)
- * ```
- *
- * ### In CLI commands
- * ```ts
- * import { runPipeline, adminDb, resolvePrincipal, CoreContext } from '../functions/_shared'
- * ```
- *
- * ### Stability contract
- * - All exports in this file are stable across patch and minor versions
- * - Breaking changes require a major version bump and migration guide
- * - Do NOT import from individual `_shared/*.ts` files directly — use this index
- *
- * @seeAlso middleware.ts (CoreContext, createHandler, HTTP helpers)
- * @seeAlso principal.ts (Principal interface, SYSTEM_PRINCIPAL, resolvePrincipal)
- * @seeAlso db.ts (adminDb, getUserDb, joins)
- * @seeAlso pipeline-runner.ts (runPipeline, ExecutionResult)
- * @seeAlso trigger-engine.ts (fire*Triggers, EventType)
- * @seeAlso agent-runner.ts (runAgent, AgentConfig, InferenceResult)
- * @seeAlso permissions.ts (PermissionEngine, sanitizeRecordData)
- * @seeAlso schema-utils.ts (generateValidationSchema, ValidationSchema)
- * @seeAlso audit.ts (emitAudit)
- */
 
-// ============================================
-// Context — Execution context types
-// ============================================
 
-/**
- * CoreContext — the minimal execution context accepted by all Spine core functions.
- * Construct one directly for import/CLI usage; API handlers get it from createHandler().
- *
- * @example
- * ```ts
- * const ctx: CoreContext = {
- *   principal: SYSTEM_PRINCIPAL,
- *   accountId: 'uuid-here',
- *   db: adminDb,
- *   requestId: crypto.randomUUID()
- * }
- * ```
- */
-export type { CoreContext } from './middleware'
-
-/**
- * RequestContext — CoreContext extended with HTTP-specific fields.
- * Only needed if you are writing an API handler function.
- */
-export type { RequestContext, HandlerFunction, HandlerResult } from './middleware'
 
-/**
- * createHandler — wraps a handler function with auth, principal resolution, and audit.
- * Use this when writing Netlify function handlers.
- */
-export { createHandler, createPublicHandler, requireUserContext, requireSystemContextWithAudit, json, error as errorResponse, cors } from './middleware'
 
-// ============================================
-// Identity — Principal model
-// ============================================
 
-/**
- * Principal — unified identity for all actors (humans, machines, cron, triggers).
- */
-export type { Principal } from './principal'
 
-/**
- * resolvePrincipal — resolves a Principal from an incoming HTTP event.
- * Used in custom handler wrappers.
- */
-export { resolvePrincipal } from './principal'
 
-/**
- * isSystemAdmin — returns true if principal has the system_admin role.
- */
-export { isSystemAdmin } from './principal'
 
-/**
- * machineHasScope — checks whether a machine principal has a given scope.
- * Supports wildcards: "items:*", "*:*".
- */
-export { machineHasScope, humanHasRole } from './principal'
 
-/**
- * getPrincipalDb — returns the appropriate DB client for a principal.
- * Humans get RLS-scoped client; machines get adminDb.
- */
-export { getPrincipalDb } from './principal'
 
-/**
- * formatPrincipalForAudit — structures a principal for audit log metadata.
- */
-export { formatPrincipalForAudit } from './principal'
 
-/**
- * ANONYMOUS_PRINCIPAL — static principal for unauthenticated requests.
- */
-export { ANONYMOUS_PRINCIPAL } from './principal'
 
-/**
- * SYSTEM_PRINCIPAL — static principal for internal system operations.
- * Use this when constructing a CoreContext for CLI or import usage without
- * a real authenticated user.
- */
-export { SYSTEM_PRINCIPAL } from './principal'
 
-// ============================================
-// Database — Supabase clients
-// ============================================
 
-/**
- * adminDb — Supabase service_role client. Bypasses RLS.
- * Use for system operations, migrations, machine principal actions.
- */
+// CIL[BEGIN chunk_id="index_moduleheader_1784066609" type="module_header" identity="module_header" parent="none"]
+// CIL[DOC-MACRO purpose="Barrel export for shared utilities"]
+// CIL[DOC-RESPONSIBILITY responsibility="Provide single import point for all shared functionality"]
+// CIL[DOC-CONTEXT module="_shared/index" layer="infrastructure" related_files="[\".framework/functions/_shared/principal.ts\",\".framework/functions/_shared/schema-utils.ts\",\".framework/functions/_shared/db.ts\",\".framework/src/pages/admin/TypeDetailPage.tsx\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="re-exported modules" errors="none" side_effects="module aggregation"]
+// CIL[DOC-MICRO logic_summary="Centralized exports for all shared utilities and types" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-AUDIENCE audience="developer"]
+// CIL[DOC-VECTOR type="context" content="Layer: infrastructure. Direct callers: 0. Direct calls: 0. Related files: .framework/functions/_shared/principal.ts, .framework/functions/_shared/schema-utils.ts, .framework/functions/_shared/db.ts, .framework/src/pages/admin/TypeDetailPage.tsx, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+// CIL[END chunk_id="index_moduleheader_1784066609"]
+// CIL[BEGIN chunk_id="index_context_1784066609" type="exports" identity="context" parent="none"]
+// CIL[DOC-MACRO purpose="Export request context utilities"]
+// CIL[DOC-RESPONSIBILITY responsibility="Re-export middleware context types and functions"]
+// CIL[DOC-CONTEXT module="_shared/index" layer="infrastructure" related_files="[\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="context utilities" errors="none" side_effects="re-exports"]
+// CIL[DOC-MICRO logic_summary="Re-exports CoreContext, handlers, and response utilities" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="external_symbols_unknown"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: infrastructure. Direct callers: 0. Direct calls: 0. Related files: \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+export type { CoreContext } from './middleware'
+export type { RequestContext, HandlerFunction, HandlerResult } from './middleware'
+export { createHandler, createPublicHandler, requireUserContext, requireSystemContextWithAudit, json, error as errorResponse, cors } from './middleware'
+// CIL[END chunk_id="index_context_1784066609"]
+// CIL[BEGIN chunk_id="index_identity_1784066609" type="exports" identity="identity" parent="none"]
+// CIL[DOC-MACRO purpose="Export identity and principal utilities"]
+// CIL[DOC-RESPONSIBILITY responsibility="Re-export principal types and authentication functions"]
+// CIL[DOC-CONTEXT module="_shared/index" layer="infrastructure" related_files="[\".framework/functions/_shared/principal.ts\",\"custom/apps/portal/pages/ContentPage.tsx\",\"custom/apps/cortex/pages/operations/OperationsDashboard.tsx\",\".framework/src/components/ui/dialog.tsx\",\".framework/src/pages/admin/RolesPage.tsx\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="identity utilities" errors="none" side_effects="re-exports"]
+// CIL[DOC-MICRO logic_summary="Re-exports Principal type, resolution, and auth helpers" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="external_symbols_unknown"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: infrastructure. Direct callers: 0. Direct calls: 0. Related files: .framework/functions/_shared/principal.ts, custom/apps/portal/pages/ContentPage.tsx, custom/apps/cortex/pages/operations/OperationsDashboard.tsx, .framework/src/components/ui/dialog.tsx, .framework/src/pages/admin/RolesPage.tsx, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+export type { Principal } from './principal'
+export { resolvePrincipal } from './principal'
+export { isSystemAdmin } from './principal'
+export { machineHasScope, humanHasRole } from './principal'
+export { getPrincipalDb } from './principal'
+export { formatPrincipalForAudit } from './principal'
+export { ANONYMOUS_PRINCIPAL } from './principal'
+export { SYSTEM_PRINCIPAL } from './principal'
+// CIL[END chunk_id="index_identity_1784066609"]
+// CIL[BEGIN chunk_id="index_database_1784066609" type="exports" identity="database" parent="none"]
+// CIL[DOC-MACRO purpose="Export database utilities"]
+// CIL[DOC-RESPONSIBILITY responsibility="Re-export database clients and types"]
+// CIL[DOC-CONTEXT module="_shared/index" layer="infrastructure" related_files="[\".framework/functions/_shared/db.ts\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="database utilities" errors="none" side_effects="re-exports"]
+// CIL[DOC-MICRO logic_summary="Re-exports adminDb, getUserDb, joins, and DbResult type" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="external_symbols_unknown"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: infrastructure. Direct callers: 0. Direct calls: 0. Related files: .framework/functions/_shared/db.ts, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 export { adminDb } from './db'
-
-/**
- * getUserDb — Returns a JWT-scoped Supabase client with RLS enforced.
- * Use for human-principal requests.
- */
 export { getUserDb } from './db'
-
-/**
- * joins — PostgREST relationship hint strings for common FK relationships.
- * @example `.select(\`*, \${joins.type}, \${joins.app}\`)`
- */
 export { joins } from './db'
-
 export type { DbResult } from './db'
-
-// ============================================
-// Pipeline Runtime
-// ============================================
-
-/**
- * runPipeline — execute a pipeline by ID with trigger data.
- *
- * @param pipelineId - UUID of the pipeline to run
- * @param triggerData - Arbitrary data passed to all pipeline stages
- * @param ctx - CoreContext (principal + accountId + db + requestId)
- * @returns ExecutionResult with per-stage output and final status
- * @throws If pipeline not found or inactive
- *
- * @example API handler
- * ```ts
- * const result = await runPipeline(body.pipeline_id, body.data, ctx)
- * ```
- *
- * @example Custom import
- * ```ts
- * import { runPipeline, adminDb, SYSTEM_PRINCIPAL } from '../_shared'
- * const ctx = { principal: SYSTEM_PRINCIPAL, accountId, db: adminDb, requestId: crypto.randomUUID() }
- * const result = await runPipeline('uuid', { item_id: '...' }, ctx)
- * ```
- *
- * @example CLI
- * ```bash
- * spine pipelines run <pipeline-id> --data '{"item_id":"..."}'
- * ```
- */
+// CIL[END chunk_id="index_database_1784066609"]
+// CIL[BEGIN chunk_id="index_pipeline_1784066609" type="exports" identity="pipeline" parent="none"]
+// CIL[DOC-MACRO purpose="Export pipeline execution utilities"]
+// CIL[DOC-RESPONSIBILITY responsibility="Re-export pipeline runner and types"]
+// CIL[DOC-CONTEXT module="_shared/index" layer="infrastructure" related_files="[\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="pipeline utilities" errors="none" side_effects="re-exports"]
+// CIL[DOC-MICRO logic_summary="Re-exports runPipeline function and execution types" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="external_symbols_unknown"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: infrastructure. Direct callers: 0. Direct calls: 0. Related files: \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 export { runPipeline } from './pipeline-runner'
 export type { ExecutionResult, StageResult } from './pipeline-runner'
-
-// ============================================
-// Trigger Engine
-// ============================================
-
-/**
- * checkAndFireTriggers — evaluate and fire all active triggers matching an event.
- *
- * @param eventType - e.g. 'item_created', 'account_updated'
- * @param entityType - table name string
- * @param entityId - UUID of the affected entity
- * @param entityData - full entity data for condition evaluation
- * @param ctx - CoreContext
- *
- * @example
- * ```ts
- * await checkAndFireTriggers('item_created', 'items', item.id, item, ctx)
- * ```
- */
+// CIL[END chunk_id="index_pipeline_1784066609"]
+// CIL[BEGIN chunk_id="index_triggers_1784066609" type="exports" identity="triggers" parent="none"]
+// CIL[DOC-MACRO purpose="Export trigger system utilities"]
+// CIL[DOC-RESPONSIBILITY responsibility="Re-export trigger engine functions and types"]
+// CIL[DOC-CONTEXT module="_shared/index" layer="infrastructure" related_files="[]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="trigger utilities" errors="none" side_effects="re-exports"]
+// CIL[DOC-MICRO logic_summary="Re-exports trigger firing functions and EventType" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="external_symbols_unknown"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: infrastructure. Direct callers: 0. Direct calls: 0. Related files: none."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 export { checkAndFireTriggers, fireCreateTriggers, fireUpdateTriggers, fireDeleteTriggers } from './trigger-engine'
 export type { EventType } from './trigger-engine'
-
-// ============================================
-// Agent Runner
-// ============================================
-
-/**
- * runAgent — run AI agent inference for a user message in a thread.
- *
- * Resolves agent config from thread → agent → prompt_config chain,
- * assembles RAG context, calls LLM, handles tool dispatch and escalation.
- *
- * @param threadId - UUID of the thread
- * @param userMessage - The user's message text
- * @param ctx - CoreContext
- * @returns Saved agent message record
- *
- * @example
- * ```ts
- * const msg = await runAgent(threadId, 'How do I reset my password?', ctx)
- * ```
- */
+// CIL[END chunk_id="index_triggers_1784066609"]
+// CIL[BEGIN chunk_id="index_agents_1784066609" type="exports" identity="agents" parent="none"]
+// CIL[DOC-MACRO purpose="Export AI agent utilities"]
+// CIL[DOC-RESPONSIBILITY responsibility="Re-export agent runner and configuration types"]
+// CIL[DOC-CONTEXT module="_shared/index" layer="infrastructure" related_files="[]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="agent utilities" errors="none" side_effects="re-exports"]
+// CIL[DOC-MICRO logic_summary="Re-exports runAgent, resolveAgentConfig and agent types" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="external_symbols_unknown"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: infrastructure. Direct callers: 0. Direct calls: 0. Related files: none."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 export { runAgent, resolveAgentConfig } from './agent-runner'
 export type { AgentConfig, InferenceResult, ToolCall, ToolResult } from './agent-runner'
-
-// ============================================
-// Permissions
-// ============================================
-
-/**
- * PermissionEngine — the single source of truth for all authorization.
- *
- * @example
- * ```ts
- * const canRead = await PermissionEngine.canAccessRecord(ctx, record, 'read')
- * const sanitized = await PermissionEngine.sanitizeRecordData(ctx, record, 'support_ticket')
- * ```
- */
+// CIL[END chunk_id="index_agents_1784066609"]
+// CIL[BEGIN chunk_id="index_permissions_1784066609" type="exports" identity="permissions" parent="none"]
+// CIL[DOC-MACRO purpose="Export permission system utilities"]
+// CIL[DOC-RESPONSIBILITY responsibility="Re-export permission engine and validation functions"]
+// CIL[DOC-CONTEXT module="_shared/index" layer="infrastructure" related_files="[]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="permission utilities" errors="none" side_effects="re-exports"]
+// CIL[DOC-MICRO logic_summary="Re-exports PermissionEngine and access control functions" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="external_symbols_unknown"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: infrastructure. Direct callers: 0. Direct calls: 0. Related files: none."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 export { PermissionEngine } from './permissions'
 export type { PermissionResult } from './permissions'
-
-// Legacy permission helpers (stable, bound to PermissionEngine instance)
 export { sanitizeRecordData, validateUpdatePermissions, canAccessRecord } from './permissions'
-
-// ============================================
-// Schema Utilities
-// ============================================
-
-/**
- * generateValidationSchema — derive a structural validation schema from a design schema.
- * Called automatically on type create/update; also useful in custom code.
- */
+// CIL[END chunk_id="index_permissions_1784066609"]
+// CIL[BEGIN chunk_id="index_schema_1784066609" type="exports" identity="schema" parent="none"]
+// CIL[DOC-MACRO purpose="Export schema validation utilities"]
+// CIL[DOC-RESPONSIBILITY responsibility="Re-export schema generation and validation types"]
+// CIL[DOC-CONTEXT module="_shared/index" layer="infrastructure" related_files="[]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="schema utilities" errors="none" side_effects="re-exports"]
+// CIL[DOC-MICRO logic_summary="Re-exports generateValidationSchema and ValidationSchema type" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="external_symbols_unknown"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: infrastructure. Direct callers: 0. Direct calls: 0. Related files: none."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 export { generateValidationSchema } from './schema-utils'
 export type { ValidationSchema } from './schema-utils'
-
-// ============================================
-// Audit
-// ============================================
-
-/**
- * emitAudit — emit a structured audit log entry with full principal provenance.
- *
- * @param ctx - CoreContext
- * @param action - e.g. 'items.create', 'pipeline.completed'
- * @param target - { type, id, account_id }
- * @param metadata - additional structured context
- *
- * @example
- * ```ts
- * await emitAudit(ctx, 'deal.stage_changed', { type: 'items', id: deal.id }, {
- *   before: { stage: 'prospect' },
- *   after: { stage: 'qualified' }
- * })
- * ```
- */
+// CIL[END chunk_id="index_schema_1784066609"]
+// CIL[BEGIN chunk_id="index_resolution_1784066609" type="exports" identity="resolution" parent="none"]
+// CIL[DOC-MACRO purpose="Export ID resolution utilities"]
+// CIL[DOC-RESPONSIBILITY responsibility="Re-export entity ID resolution functions and types"]
+// CIL[DOC-CONTEXT module="_shared/index" layer="infrastructure" related_files="[]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="resolution utilities" errors="none" side_effects="re-exports"]
+// CIL[DOC-MICRO logic_summary="Re-exports entity ID resolution functions and TypeRecord type" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="external_symbols_unknown"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: infrastructure. Direct callers: 0. Direct calls: 0. Related files: none."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+export { resolveTypeId, resolveTypeIds, resolveTypeRecord, resolveLinkTypeId, resolveLinkTypeIds, resolveAccountId, resolveAgentId, resolvePromptConfigId } from './resolve-ids'
+export type { TypeRecord } from './resolve-ids'
+// CIL[END chunk_id="index_resolution_1784066609"]
+// CIL[BEGIN chunk_id="index_audit_1784066609" type="exports" identity="audit" parent="none"]
+// CIL[DOC-MACRO purpose="Export audit utilities"]
+// CIL[DOC-RESPONSIBILITY responsibility="Re-export audit logging functionality"]
+// CIL[DOC-CONTEXT module="_shared/index" layer="infrastructure" related_files="[]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="audit utilities" errors="none" side_effects="re-exports"]
+// CIL[DOC-MICRO logic_summary="Re-exports emitAudit function for audit logging" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="external_symbols_unknown"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: infrastructure. Direct callers: 0. Direct calls: 0. Related files: none."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 export { emitAudit } from './audit'
-
-// ============================================
-// Webhook Registry
-// ============================================
-
-/**
- * resolveHandler — dynamically load a webhook handler by name.
- *
- * Used by integration-routes.ts to resolve handlers at runtime
- * without static imports, enabling custom handlers to self-register.
- *
- * @param handlerName — The handler identifier from webhook_handlers table
- * @returns Handler function or null if not found
- *
- * @example
- * ```ts
- * const handler = await resolveHandler('cortex-webhook')
- * if (handler) await handler(event, context)
- * ```
- */
+// CIL[END chunk_id="index_audit_1784066609"]
+// CIL[BEGIN chunk_id="index_webhooks_1784066609" type="exports" identity="webhooks" parent="none"]
+// CIL[DOC-MACRO purpose="Export webhook utilities"]
+// CIL[DOC-RESPONSIBILITY responsibility="Re-export webhook handler and registration functions"]
+// CIL[DOC-CONTEXT module="_shared/index" layer="infrastructure" related_files="[]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="webhook utilities" errors="none" side_effects="re-exports"]
+// CIL[DOC-MICRO logic_summary="Re-exports webhook handler resolution and registration functions" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="external_symbols_unknown"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: infrastructure. Direct callers: 0. Direct calls: 0. Related files: none."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 export { resolveHandler, lookupHandler, loadHandler } from './webhook-registry'
-
-/**
- * registerWebhookHandler — self-register a custom webhook handler.
- *
- * Use in custom Netlify functions to register as webhook handlers
- * without modifying core code.
- *
- * @param config — Handler registration details
- *
- * @example
- * ```ts
- * import { registerWebhookHandler } from '@core/_shared'
- * import { adminDb } from '@core/_shared'
- *
- * registerWebhookHandler({
- *   name: 'my-handler',
- *   functionName: 'custom_my-handler',
- *   events: ['item.created']
- * }, adminDb)
- * ```
- */
 export { registerWebhookHandler, deregisterWebhookHandler, isHandlerRegistered } from './webhook-registration'
 export type { WebhookHandlerRegistration } from './webhook-registration'
-
-// ============================================
-// App Manifest Utilities
-// ============================================
-
-/**
- * loadManifest — load and parse an app manifest.json file.
- *
- * Used by apps.ts to merge database records with file-based
- * app configuration (name, routes, nav_items, required_roles).
- *
- * @param manifestPath — Path to manifest.json relative to project root
- * @returns Parsed AppManifest or null if not found/invalid
- *
- * @example
- * ```ts
- * const manifest = loadManifest('custom/apps/cortex/manifest.json')
- * console.log(manifest.required_roles) // ['member']
- * ```
- */
+// CIL[END chunk_id="index_webhooks_1784066609"]
+// CIL[BEGIN chunk_id="index_manifests_1784066609" type="exports" identity="manifests" parent="none"]
+// CIL[DOC-MACRO purpose="Export app manifest utilities"]
+// CIL[DOC-RESPONSIBILITY responsibility="Re-export app manifest loading and management functions"]
+// CIL[DOC-CONTEXT module="_shared/index" layer="infrastructure" related_files="[]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="manifest utilities" errors="none" side_effects="re-exports"]
+// CIL[DOC-MICRO logic_summary="Re-exports manifest loading, merging, and discovery functions" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="external_symbols_unknown"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: infrastructure. Direct callers: 0. Direct calls: 0. Related files: none."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 export { loadManifest, mergeWithManifest, clearManifestCache, discoverManifests } from './app-manifest'
 export type { AppManifest, NavItem } from './app-manifest'
-
-// ============================================
-// Testing Utilities
-// ============================================
-
-/**
- * Testing utilities for custom code developers.
- *
- * Use these helpers to test your custom functions without
- * full deployment. Includes mock contexts, principals, and
- * assertion helpers.
- *
- * @example
- * ```ts
- * import { makeTestContext, mockPrincipal, cleanup } from '@core/testing'
- *
- * describe('My Handler', () => {
- *   const ctx = makeTestContext({
- *     principal: mockPrincipal({ roles: ['member'] })
- *   })
- * })
- * ```
- */
+// CIL[END chunk_id="index_manifests_1784066609"]
+// CIL[BEGIN chunk_id="index_testing_1784066609" type="exports" identity="testing" parent="none"]
+// CIL[DOC-MACRO purpose="Export testing utilities"]
+// CIL[DOC-RESPONSIBILITY responsibility="Re-export testing helpers and mock functions"]
+// CIL[DOC-CONTEXT module="_shared/index" layer="infrastructure" related_files="[]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="testing utilities" errors="none" side_effects="re-exports"]
+// CIL[DOC-MICRO logic_summary="Re-exports test context creation, mocks, and assertion helpers" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="external_symbols_unknown"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: infrastructure. Direct callers: 0. Direct calls: 0. Related files: none."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
 export {
   makeTestContext,
   mockPrincipal,
@@ -380,3 +268,4 @@ export {
   expectErrorResponse
 } from './testing'
 export type { TestContext, TestPrincipal, TestLogger } from './testing'
+// CIL[END chunk_id="index_testing_1784066609"]