spine-framework 0.3.124 → 0.3.126

package/.framework/functions/cil-config.ts

@@ -0,0 +1,583 @@
+// CIL[BEGIN chunk_id="custom_apps_cortex_functions_custom_cil_config_module_header_1784235266" type="module_header" identity="module_header" parent="none"]
+// CIL[DOC-MACRO purpose="Module header and top-level exports for cortex.functions.custom_cil-config"]
+// CIL[DOC-RESPONSIBILITY responsibility="Own module-level imports, exports, and configuration for cortex.functions.custom_cil-config"]
+// CIL[DOC-CONTEXT module="cortex.functions.custom_cil-config" layer="function" related_files="[\".framework/migrations/015_simplify_apps_table.sql\",\"custom/apps/cortex/pages/operations/OperationsDashboard.tsx\",\"custom/apps/portal/pages/ContentPage.tsx\",\".framework/src/components/ui/table-primitives.tsx\",\".framework/src/pages/admin/TypeDetailPage.tsx\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="module exports and side effects" errors="none" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Declares module scope, imports dependencies, and exports public surface of cortex.functions.custom_cil-config" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-AUDIENCE audience="developer"]
+// CIL[DOC-VECTOR type="context" content="Layer: function. Direct callers: 0. Direct calls: 0. Related files: .framework/migrations/015_simplify_apps_table.sql, custom/apps/cortex/pages/operations/OperationsDashboard.tsx, custom/apps/portal/pages/ContentPage.tsx, .framework/src/components/ui/table-primitives.tsx, .framework/src/pages/admin/TypeDetailPage.tsx, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+
+
+
+
+
+import { createHandler } from './_shared/middleware'
+import { adminDb } from './_shared/db'
+import { resolveTypeId, resolveLinkTypeId } from './_shared/resolve-ids'
+import { create as adminCreate, update as adminUpdate } from './admin-data'
+import { isSelectedPath } from './_shared/cil'
+import * as fs from 'fs'
+import * as path from 'path'
+
+
+
+
+
+
+
+
+
+// CIL[END chunk_id="custom_apps_cortex_functions_custom_cil_config_module_header_1784235266"]
+// CIL[BEGIN chunk_id="custom_apps_cortex_functions_custom_cil_config_extractedconfigfield_1784235266" type="interface" identity="extractedconfigfield" parent="none"]
+// CIL[DOC-MACRO purpose="Defines the extractedconfigfield type contract in cortex.functions.custom_cil-config"]
+// CIL[DOC-RESPONSIBILITY responsibility="Describe the shape and allowed fields for extractedconfigfield"]
+// CIL[DOC-CONTEXT module="cortex.functions.custom_cil-config" layer="function" related_files="[\".framework/src/pages/admin/TypeDetailPage.tsx\",\".framework/functions/_shared/principal.ts\",\".framework/src/pages/admin/IntegrationsPage.tsx\",\".framework/migrations/015_simplify_apps_table.sql\",\"custom/apps/cortex/pages/operations/OperationsDashboard.tsx\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="type definition for extractedconfigfield" errors="none" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Declares TypeScript type/interface extractedconfigfield with member definitions" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: function. Direct callers: 0. Direct calls: 0. Related files: .framework/src/pages/admin/TypeDetailPage.tsx, .framework/functions/_shared/principal.ts, .framework/src/pages/admin/IntegrationsPage.tsx, .framework/migrations/015_simplify_apps_table.sql, custom/apps/cortex/pages/operations/OperationsDashboard.tsx, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+interface ExtractedConfigField {
+  field_name: string
+  field_type: 'string' | 'number' | 'boolean' | 'json' | 'env' | 'unknown'
+  default_value: string
+  description: string
+  source_file: string
+  source_type: 'json' | 'env' | 'sql' | 'ts'
+}
+
+
+
+
+
+
+
+
+
+
+// CIL[END chunk_id="custom_apps_cortex_functions_custom_cil_config_extractedconfigfield_1784235266"]
+// CIL[BEGIN chunk_id="custom_apps_cortex_functions_custom_cil_config_config_file_patterns_1784235266" type="variable" identity="config_file_patterns" parent="none"]
+// CIL[DOC-MACRO purpose="Defines config_file_patterns configuration or state in cortex.functions.custom_cil-config"]
+// CIL[DOC-RESPONSIBILITY responsibility="Hold the value and default configuration for config_file_patterns"]
+// CIL[DOC-CONTEXT module="cortex.functions.custom_cil-config" layer="function" related_files="[\".framework/src/pages/admin/TypeDetailPage.tsx\",\".framework/functions/_shared/principal.ts\",\"custom/apps/cortex/functions/custom_cil-embeddings.ts\",\".framework/src/pages/admin/IntegrationsPage.tsx\",\"custom/apps/portal/pages/ContentPage.tsx\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="value of config_file_patterns" errors="none" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Declares config_file_patterns with initial value or constant binding used by cortex.functions.custom_cil-config" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: function. Direct callers: 0. Direct calls: 0. Related files: .framework/src/pages/admin/TypeDetailPage.tsx, .framework/functions/_shared/principal.ts, custom/apps/cortex/functions/custom_cil-embeddings.ts, .framework/src/pages/admin/IntegrationsPage.tsx, custom/apps/portal/pages/ContentPage.tsx, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+const CONFIG_FILE_PATTERNS: { glob: RegExp; source_type: ExtractedConfigField['source_type'] }[] = [
+  { glob: /spine\.config\.json$/,            source_type: 'json' },
+  { glob: /\.env(\.example|\.local|\.prod)?$/, source_type: 'env'  },
+  { glob: /config\.json$/,                   source_type: 'json' },
+  { glob: /settings\.json$/,                 source_type: 'json' },
+  { glob: /manifest\.json$/,                 source_type: 'json' },
+  { glob: /tsconfig[^/]*\.json$/,            source_type: 'json' },
+  { glob: /migrations\/\d+_.*\.sql$/,        source_type: 'sql'  },
+]
+
+
+
+
+
+
+
+
+
+// CIL[END chunk_id="custom_apps_cortex_functions_custom_cil_config_config_file_patterns_1784235266"]
+// CIL[BEGIN chunk_id="custom_apps_cortex_functions_custom_cil_config_extractfromjson_1784235266" type="function" identity="extractfromjson" parent="none"]
+// CIL[DOC-MACRO purpose="Implements extractfromjson logic in cortex.functions.custom_cil-config"]
+// CIL[DOC-RESPONSIBILITY responsibility="Execute extractfromjson and return its computed result"]
+// CIL[DOC-CONTEXT module="cortex.functions.custom_cil-config" layer="function" related_files="[\"custom/apps/cortex/functions/custom_cil-embeddings.ts\",\".framework/functions/_shared/principal.ts\",\".framework/src/pages/admin/TypeDetailPage.tsx\",\".framework/src/pages/admin/IntegrationsPage.tsx\",\".framework/migrations/015_simplify_apps_table.sql\",\"\\\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="return value from function execution" errors="throws on invalid input or runtime failure" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Provides extractfromjson with extractFromJson(content: string, sourceFile: string inputs, handling internal flow and returning a result" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: function. Direct callers: 0. Direct calls: 0. Related files: custom/apps/cortex/functions/custom_cil-embeddings.ts, .framework/functions/_shared/principal.ts, .framework/src/pages/admin/TypeDetailPage.tsx, .framework/src/pages/admin/IntegrationsPage.tsx, .framework/migrations/015_simplify_apps_table.sql, \."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+function extractFromJson(content: string, sourceFile: string): ExtractedConfigField[] {
+  const fields: ExtractedConfigField[] = []
+  try {
+    const obj = JSON.parse(content)
+    const walk = (node: any, prefix: string) => {
+      if (typeof node !== 'object' || node === null || Array.isArray(node)) return
+      for (const [k, v] of Object.entries(node)) {
+        const fullKey = prefix ? `${prefix}.${k}` : k
+        const type = v === null ? 'unknown'
+          : typeof v === 'boolean' ? 'boolean'
+          : typeof v === 'number'  ? 'number'
+          : typeof v === 'string'  ? 'string'
+          : typeof v === 'object'  ? 'json'
+          : 'unknown'
+        fields.push({
+          field_name:    fullKey,
+          field_type:    type as ExtractedConfigField['field_type'],
+          default_value: v === null ? 'null' : typeof v === 'object' ? JSON.stringify(v).slice(0, 200) : String(v),
+          description:   '',
+          source_file:   sourceFile,
+          source_type:   'json',
+        })
+        
+        if (typeof v === 'object' && v !== null && !Array.isArray(v) && prefix.split('.').length < 2) {
+          walk(v, fullKey)
+        }
+      }
+    }
+    walk(obj, '')
+  } catch {
+  }
+  return fields
+}
+
+
+
+// CIL[END chunk_id="custom_apps_cortex_functions_custom_cil_config_extractfromjson_1784235266"]
+// CIL[BEGIN chunk_id="custom_apps_cortex_functions_custom_cil_config_extractfromenv_1784235266" type="function" identity="extractfromenv" parent="none"]
+// CIL[DOC-MACRO purpose="Implements extractfromenv logic in cortex.functions.custom_cil-config"]
+// CIL[DOC-RESPONSIBILITY responsibility="Execute extractfromenv and return its computed result"]
+// CIL[DOC-CONTEXT module="cortex.functions.custom_cil-config" layer="function" related_files="[\"custom/apps/cortex/functions/custom_cil-embeddings.ts\",\".framework/functions/_shared/principal.ts\",\".framework/src/pages/admin/TypeDetailPage.tsx\",\".framework/src/pages/admin/IntegrationsPage.tsx\",\".framework/migrations/015_simplify_apps_table.sql\"]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="return value from function execution" errors="throws on invalid input or runtime failure" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Provides extractfromenv with extractFromEnv(content: string, sourceFile: string inputs, handling internal flow and returning a result" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: function. Direct callers: 0. Direct calls: 0. Related files: custom/apps/cortex/functions/custom_cil-embeddings.ts, .framework/functions/_shared/principal.ts, .framework/src/pages/admin/TypeDetailPage.tsx, .framework/src/pages/admin/IntegrationsPage.tsx, .framework/migrations/015_simplify_apps_table.sql."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+function extractFromEnv(content: string, sourceFile: string): ExtractedConfigField[] {
+  const fields: ExtractedConfigField[] = []
+  const lines = content.split('\n')
+  for (const line of lines) {
+    const trimmed = line.trim()
+    if (!trimmed || trimmed.startsWith('#')) continue
+    const eq = trimmed.indexOf('=')
+    if (eq === -1) continue
+    const key = trimmed.slice(0, eq).trim()
+    const val = trimmed.slice(eq + 1).trim()
+    
+    fields.push({
+      field_name:    key,
+      field_type:    'env',
+      default_value: val || '',
+      description:   '',
+      source_file:   sourceFile,
+      source_type:   'env',
+    })
+  }
+  return fields
+}
+
+
+
+// CIL[END chunk_id="custom_apps_cortex_functions_custom_cil_config_extractfromenv_1784235266"]
+// CIL[BEGIN chunk_id="custom_apps_cortex_functions_custom_cil_config_extractfromsql_1784235266" type="function" identity="extractfromsql" parent="none"]
+// CIL[DOC-MACRO purpose="Implements extractfromsql logic in cortex.functions.custom_cil-config"]
+// CIL[DOC-RESPONSIBILITY responsibility="Execute extractfromsql and return its computed result"]
+// CIL[DOC-CONTEXT module="cortex.functions.custom_cil-config" layer="function" related_files="[]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="return value from function execution" errors="throws on invalid input or runtime failure" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Provides extractfromsql with extractFromSql(content: string, sourceFile: string inputs, handling internal flow and returning a result" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: function. Direct callers: 0. Direct calls: 0. Related files: none."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+function extractFromSql(content: string, sourceFile: string): ExtractedConfigField[] {
+  
+  const fields: ExtractedConfigField[] = []
+  const tableRe = /CREATE TABLE(?:\s+IF NOT EXISTS)?\s+(?:\w+\.)?(\w+)\s*\(([^;]+)\)/gis
+  let m: RegExpExecArray | null
+  while ((m = tableRe.exec(content)) !== null) {
+    const tableName = m[1]
+    const body = m[2]
+    const colRe = /^\s*["']?(\w+)["']?\s+([\w\s[\]()]+?)(?:\s+(?:NOT NULL|DEFAULT|PRIMARY|UNIQUE|REFERENCES|CHECK).*)?,?\s*$/gm
+    let cm: RegExpExecArray | null
+    while ((cm = colRe.exec(body)) !== null) {
+      const colName = cm[1]
+      if (['CONSTRAINT', 'PRIMARY', 'UNIQUE', 'CHECK', 'FOREIGN', 'INDEX'].includes(colName.toUpperCase())) continue
+      fields.push({
+        field_name:    `${tableName}.${colName}`,
+        field_type:    'unknown',
+        default_value: '',
+        description:   '',
+        source_file:   sourceFile,
+        source_type:   'sql',
+      })
+    }
+  }
+  return fields
+}
+
+
+
+
+
+// CIL[END chunk_id="custom_apps_cortex_functions_custom_cil_config_extractfromsql_1784235266"]
+// CIL[BEGIN chunk_id="custom_apps_cortex_functions_custom_cil_config_walkforconfigfiles_1784235266" type="function" identity="walkforconfigfiles" parent="none"]
+// CIL[DOC-MACRO purpose="Implements walkforconfigfiles logic in cortex.functions.custom_cil-config"]
+// CIL[DOC-RESPONSIBILITY responsibility="Execute walkforconfigfiles and return its computed result"]
+// CIL[DOC-CONTEXT module="cortex.functions.custom_cil-config" layer="function" related_files="[]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="return value from function execution" errors="throws on invalid input or runtime failure" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Provides walkforconfigfiles with walkForConfigFiles(repoPath: string, maxDepth = 3 inputs, handling internal flow and returning a result" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: function. Direct callers: 0. Direct calls: 0. Related files: none."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+function walkForConfigFiles(repoPath: string, maxDepth = 3): string[] {
+  const results: string[] = []
+  const walk = (dir: string, depth: number) => {
+    if (depth > maxDepth) return
+    let entries: fs.Dirent[]
+    try {
+      entries = fs.readdirSync(dir, { withFileTypes: true })
+    } catch { return }
+
+    for (const entry of entries) {
+      if (entry.name.startsWith('.') && !entry.name.startsWith('.env')) continue
+      if (['node_modules', '.git', 'dist', 'build', '.assembled', 'coverage'].includes(entry.name)) continue
+      const full = path.join(dir, entry.name)
+      if (entry.isDirectory()) {
+        walk(full, depth + 1)
+      } else {
+        const rel = path.relative(repoPath, full)
+        const matched = CONFIG_FILE_PATTERNS.some(p => p.glob.test(rel))
+        if (matched) results.push(rel)
+      }
+    }
+  }
+  walk(repoPath, 0)
+  return results
+}
+
+
+
+
+
+// CIL[END chunk_id="custom_apps_cortex_functions_custom_cil_config_walkforconfigfiles_1784235266"]
+// CIL[BEGIN chunk_id="custom_apps_cortex_functions_custom_cil_config_handler_1784235266" type="variable" identity="handler" parent="none"]
+// CIL[DOC-MACRO purpose="Defines handler configuration or state in cortex.functions.custom_cil-config"]
+// CIL[DOC-RESPONSIBILITY responsibility="Hold the value and default configuration for handler"]
+// CIL[DOC-CONTEXT module="cortex.functions.custom_cil-config" layer="function" related_files="[]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="value of handler" errors="none" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Declares handler with initial value or constant binding used by cortex.functions.custom_cil-config" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: function. Direct callers: 0. Direct calls: 0. Related files: none."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+export const handler = createHandler(async (ctx, body) => {
+  const action = ctx.query?.action || body?.action || 'run'
+  const projectId = ctx.query?.project_id || body?.project_id
+  if (!projectId) throw new Error('project_id is required')
+
+  
+  if (action === 'status') {
+    const [configItems, configuresTypeId] = await Promise.all([
+      adminDb.from('items').select('id', { count: 'exact' })
+        .filter('data->>project_id', 'eq', projectId)
+        .filter('data->>kb_type', 'eq', 'cil_config')
+        .eq('is_active', true),
+      resolveLinkTypeId('cil_configures').catch(() => null),
+    ])
+
+    let linkCount = 0
+    if (configuresTypeId && (configItems.count || 0) > 0) {
+      const { data: configIds } = await adminDb.from('items').select('id')
+        .filter('data->>project_id', 'eq', projectId)
+        .filter('data->>kb_type', 'eq', 'cil_config').eq('is_active', true)
+      const ids = (configIds || []).map((r: any) => r.id)
+      if (ids.length) {
+        const { count } = await adminDb.from('links').select('id', { count: 'exact' })
+          .eq('link_type_id', configuresTypeId!).in('source_id', ids)
+        linkCount = count || 0
+      }
+    }
+
+    return {
+      project_id: projectId,
+      config_items: configItems.count || 0,
+      configures_links: linkCount,
+    }
+  }
+
+  
+  if (action === 'extract' || action === 'run') {
+    
+    let repoPath: string = body?.repo_path || ''
+    const { data: projectItem } = await adminDb.from('items').select('id, data').eq('id', projectId).maybeSingle()
+    if (!repoPath) repoPath = projectItem?.data?.repo_path || ''
+    if (!repoPath) throw new Error('repo_path not set on project. Pass repo_path in request body.')
+    if (!fs.existsSync(repoPath)) throw new Error(`repo_path does not exist: ${repoPath}`)
+
+    const force = body?.force ?? false
+    const filePath: string | undefined = body?.file_path
+    const selectedPaths: string[] = body?.selected_paths || projectItem?.data?.selected_paths || []
+    const selectedExtensions: string[] | undefined = body?.selected_extensions || projectItem?.data?.selected_extensions || undefined
+    const configTypeId = await resolveTypeId('item', 'cil_config')
+
+    let configFiles = walkForConfigFiles(repoPath)
+    if (filePath) {
+      configFiles = configFiles.filter(rel => rel === filePath || rel.startsWith(filePath + '/'))
+    }
+    if (selectedPaths.length > 0) {
+      configFiles = configFiles.filter(rel => isSelectedPath(rel, selectedPaths))
+    }
+    if (selectedExtensions && selectedExtensions.length > 0) {
+      configFiles = configFiles.filter(rel => {
+        const ext = path.extname(rel).toLowerCase()
+        return selectedExtensions.includes(ext)
+      })
+    }
+    const errors: string[] = []
+    let created = 0, updated = 0, skipped = 0
+
+    
+    const { data: existingConfigs } = await adminDb.from('items').select('id, data')
+      .filter('data->>project_id', 'eq', projectId)
+      .filter('data->>kb_type', 'eq', 'cil_config').eq('is_active', true)
+
+    
+    const existingBySlug = new Map<string, any>()
+    for (const item of existingConfigs || []) {
+      const slug = `${item.data?.config_table}::${item.data?.field_name}`
+      existingBySlug.set(slug, item)
+    }
+
+    
+    const allFields: { relFile: string; field: ExtractedConfigField }[] = []
+    for (const relFile of configFiles) {
+      const absFile = path.join(repoPath, relFile)
+      const pattern = CONFIG_FILE_PATTERNS.find(p => p.glob.test(relFile))
+      if (!pattern) continue
+      try {
+        const content = fs.readFileSync(absFile, 'utf-8')
+        let rawFields: ExtractedConfigField[] = []
+        if (pattern.source_type === 'json') rawFields = extractFromJson(content, relFile)
+        else if (pattern.source_type === 'env')  rawFields = extractFromEnv(content, relFile)
+        else if (pattern.source_type === 'sql')  rawFields = extractFromSql(content, relFile)
+        for (const field of rawFields) allFields.push({ relFile, field })
+      } catch (err) {
+        errors.push(`${relFile}: ${err instanceof Error ? err.message : String(err)}`)
+      }
+    }
+
+    
+    const now = new Date().toISOString()
+    const toInsert: object[] = []
+    const toUpdate: { id: string; data: object }[] = []
+
+    for (const { relFile, field } of allFields) {
+      const slug = `${relFile}::${field.field_name}`
+      const existing = existingBySlug.get(slug)
+
+      if (existing && !force) { skipped++; continue }
+
+      const itemData = {
+        kb_type:                  'cil_config',
+        project_id:               projectId,
+        config_table:             relFile,
+        record_slug:              slug,
+        field_name:               field.field_name,
+        field_type:               field.field_type,
+        default_value:            field.default_value,
+        description:              field.description,
+        settings:                 '',
+        current_value_query:      '',
+        current_value_query_type: field.source_type === 'env' ? 'env' : 'json_path',
+        code_edge_chunk_ids:      '',
+        source_type:              field.source_type,
+      }
+
+      if (existing) {
+        toUpdate.push({ id: existing.id, data: { ...existing.data, ...itemData } })
+        updated++
+      } else {
+        toInsert.push({ type_id: configTypeId, title: slug, status: 'active', is_active: true, data: itemData, created_at: now, updated_at: now })
+        created++
+      }
+    }
+
+    
+    const insertPromises = toInsert.map((record: any) =>
+      adminCreate(ctx, { ...record, entity: 'items' }).catch((e: any) => {
+        errors.push(`config insert: ${e.message || e}`)
+        created--
+      })
+    )
+    const updatePromises = toUpdate.map(({ id, data }) =>
+      adminUpdate({ ...ctx, query: { ...(ctx.query || {}), entity: 'items', id } } as any, { data }).catch((e: any) => {
+        errors.push(`config update ${id}: ${e.message || e}`)
+      })
+    )
+    await Promise.all([...insertPromises, ...updatePromises])
+
+    const extractResult = {
+      project_id: projectId,
+      repo_path: repoPath,
+      file_path: filePath || null,
+      config_files_scanned: configFiles.length,
+      config_items_created: created,
+      config_items_updated: updated,
+      config_items_skipped: skipped,
+      errors,
+    }
+
+    
+    if (action === 'extract') return extractResult
+
+    
+    const linkResult = await runLinkPass(ctx, projectId, errors)
+    return {
+      ...extractResult,
+      ...linkResult,
+    }
+  }
+
+  
+  if (action === 'link') {
+    const errors: string[] = []
+    const result = await runLinkPass(ctx, projectId, errors)
+    return { project_id: projectId, ...result, errors }
+  }
+
+  throw new Error(`Unknown action: ${action}. Valid: extract, link, run, status`)
+})
+
+
+
+
+
+// CIL[END chunk_id="custom_apps_cortex_functions_custom_cil_config_handler_1784235266"]
+// CIL[BEGIN chunk_id="custom_apps_cortex_functions_custom_cil_config_runlinkpass_1784235266" type="function" identity="runlinkpass" parent="none"]
+// CIL[DOC-MACRO purpose="Implements runlinkpass logic in cortex.functions.custom_cil-config"]
+// CIL[DOC-RESPONSIBILITY responsibility="Execute runlinkpass and return its computed result"]
+// CIL[DOC-CONTEXT module="cortex.functions.custom_cil-config" layer="function" related_files="[]"]
+// CIL[DOC-CONTRACT inputs="none" outputs="return value from function execution" errors="throws on invalid input or runtime failure" side_effects="none"]
+// CIL[DOC-MICRO logic_summary="Provides runlinkpass with runLinkPass( inputs, handling internal flow and returning a result" notable_decisions="[]"]
+// CIL[DOC-CONFIDENCE pass="second" score="0.95" flags="none"]
+// CIL[DOC-STABILITY stability="stable"]
+// CIL[DOC-VECTOR type="context" content="Layer: function. Direct callers: 0. Direct calls: 0. Related files: none."]
+// CIL[DOC-VECTOR type="blast_radius" content="Direct callers: 0. Total affected: 0."]
+// CIL[DOC-VECTOR type="configuration" content="No configuration dependencies."]
+// CIL[DOC-VECTOR type="constraint" content="No test paths identified."]
+// CIL[DOC-VECTOR type="implementation_pattern" content="" status="pending_human_input"]
+// CIL[DOC-VECTOR type="user_journey" content="" status="pending_human_input"]
+async function runLinkPass(
+  ctx: any,
+  projectId: string,
+  errors: string[]
+): Promise<{ configures_links_created: number }> {
+  const configuresTypeId = await resolveLinkTypeId('cil_configures').catch(() => null)
+  if (!configuresTypeId) return { configures_links_created: 0 }
+
+  
+  const [{ data: configItems }, { data: chunkItems }] = await Promise.all([
+    adminDb.from('items').select('id, account_id, data')
+      .filter('data->>project_id', 'eq', projectId)
+      .filter('data->>kb_type', 'eq', 'cil_config').eq('is_active', true),
+    adminDb.from('items').select('id, account_id, data')
+      .filter('data->>project_id', 'eq', projectId)
+      .filter('data->>kb_type', 'eq', 'cil_chunk').eq('is_active', true),
+  ])
+
+  if (!configItems?.length || !chunkItems?.length) return { configures_links_created: 0 }
+
+  
+  
+  const configIds = configItems.map((c: any) => c.id)
+  const SUPABASE_IN_LIMIT = 500
+  const existingLinkPairs = new Set<string>()
+  for (let i = 0; i < configIds.length; i += SUPABASE_IN_LIMIT) {
+    const { data: existingLinks } = await adminDb.from('links').select('source_id, target_id')
+      .in('source_id', configIds.slice(i, i + SUPABASE_IN_LIMIT))
+      .eq('link_type_id', configuresTypeId)
+    for (const l of existingLinks || []) {
+      existingLinkPairs.add(`${l.source_id}:${l.target_id}`)
+    }
+  }
+
+  
+  const toInsert: { data: Record<string, any>; accountId: string }[] = []
+
+  for (const configItem of configItems) {
+    const fieldName: string = configItem.data?.field_name || ''
+    if (!fieldName || fieldName.length < 2) continue
+
+    const shortName = fieldName.split('.').pop()!
+    const isEnv = configItem.data?.source_type === 'env'
+    const searchPattern = isEnv
+      ? new RegExp(`process\\.env\\.${fieldName}\\b`)
+      : new RegExp(`\\b${shortName.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}\\b`)
+
+    for (const chunk of chunkItems) {
+      const code: string = chunk.data?.code_content || ''
+      if (!code) continue
+      if (!searchPattern.test(code)) continue
+
+      const pairKey = `${configItem.id}:${chunk.id}`
+      if (existingLinkPairs.has(pairKey)) continue 
+
+      existingLinkPairs.add(pairKey) 
+      toInsert.push({
+        data: {
+          source_id:    configItem.id,
+          source_type:  configItem.data?.kb_type,
+          target_id:    chunk.id,
+          target_type:  chunk.data?.kb_type,
+          link_type_id: configuresTypeId,
+          metadata:     { field_name: fieldName, matched_in_chunk: chunk.data?.chunk_name || '' },
+        },
+        accountId: configItem.account_id,
+      })
+    }
+  }
+
+  
+  let linksCreated = 0
+  const linkPromises = toInsert.map(({ data }) =>
+    adminCreate(ctx, { entity: 'links', type_slug: 'link', ...data }).then(() => {
+      linksCreated++
+    }).catch((e: any) => {
+      errors.push(`config-link insert: ${e.message || e}`)
+    })
+  )
+  await Promise.all(linkPromises)
+
+  return { configures_links_created: linksCreated }
+}
+
+
+
+
+// CIL[END chunk_id="custom_apps_cortex_functions_custom_cil_config_runlinkpass_1784235266"]