@intelligo-dev/core

Install

pnpm add @intelligo-dev/core drizzle-orm

drizzle-orm is a peer; react 19 is an optional one, needed only by the email templates. Every other @intelligo-dev/* package depends on this one, and this one imports none of them.

Use

import { db, withWorkspaceFilter } from "@intelligo-dev/core/db";
import { conversations } from "@intelligo-dev/core/db/schema";
import { createLogger } from "@intelligo-dev/core/logger";
import { eq } from "drizzle-orm";

const log = createLogger("Inbox");

const mine = await db
  .select()
  .from(conversations)
  .where(
    withWorkspaceFilter(
      conversations.workspaceId,
      workspace.id,
      eq(conversations.userId, user.id)
    )
  );
log.info("Loaded conversations", { count: String(mine.length) });

db connects on first use from DATABASE_URL: a Neon host takes the WebSocket driver and anything else takes node-postgres, unless INTELLIGO_DB_DRIVER says pg or neon-serverless. Every tenant-scoped query filters on workspaceId; workspaceEq and withWorkspaceFilter make that the short way to write one.

The leaves import nothing, so a client bundle, an edge runtime or another package can reach them without pulling in the database:

import { formatMoney, fromMajor } from "@intelligo-dev/core/money";
import { sanitizeForSystemPrompt } from "@intelligo-dev/core/prompt";

formatMoney(fromMajor(12.5, "USD"), "en-US"); // "$12.50", held as 12_500_000 micros

const system = `${basePrompt}\n\nAbout the user: ${sanitizeForSystemPrompt(profile)}`;

sanitizeForSystemPrompt is one layer, not a guarantee. It strips role markers, chat-template tokens and prompt tags in any language, but its override phrases are English: a product adds its own language’s to INJECTION_PATTERNS, and keeps user text out of the system prompt where it can.

Exports

Storage

/storage is the port; /storage/s3 is an adapter for any S3-compatible bucket. It signs requests itself (Signature Version 4 over fetch and Web Crypto), so it adds no dependency and runs wherever fetch does. Bind it from the composition root:

import { setStorageAdapter } from "@intelligo-dev/core/storage";
import { s3StorageFromEnv } from "@intelligo-dev/core/storage/s3";

const storage = s3StorageFromEnv(); // null without STORAGE_BUCKET
if (storage) setStorageAdapter(storage);

s3StorageFromEnv reads STORAGE_BUCKET, STORAGE_ACCESS_KEY_ID, STORAGE_SECRET_ACCESS_KEY, STORAGE_REGION (default auto, R2’s) and STORAGE_ENDPOINT (R2’s https://<account>.r2.cloudflarestorage.com, a MinIO URL; unset means AWS). A custom endpoint is addressed path-style; pass createS3Storage({ …, pathStyle }) to choose. Uploads are buffered to be hashed. A request the bucket does not answer within timeoutMs (default 30 seconds) is abandoned and the call throws.

Identity

/identity keeps what a product learns about a person, scoped to the user and the workspace, with every change in the append-only user_memory_audit trail that the privacy page, the export and erasure read:

import { confirmFact, recordFact } from "@intelligo-dev/core/identity";

const { fact, written } = await recordFact(actor, {
  category: "goal",
  key: "profile.target-role",
  value: { label: "Data engineer", level: "senior" },
  confidence: 0.7,
  extractionMethod: "llm_extraction",
});
await confirmFact(actor, fact.id); // the person agreed to it

recordFact stores a fact or replaces the one under the same category and key, and audits it in the same transaction; confirmFact stamps lastConfirmedAt; deleteFact takes who removed it, the user by default. A fact the person wrote (explicit_user_input) is not replaced by an llm_extraction no more confident than it: the call returns written: false.

• Category is the shared axis synthesis and display filter on, a closed list (USER_FACT_CATEGORIES). A product’s own kinds live in the key, namespaced as it likes, and in the value.
• Value is a string, or an object whose label is a line a person can read. The privacy page shows that line and nothing else of it.
• Provenance is extractionMethod with lastConfirmedAt: an unconfirmed llm_extraction is what a model read, a confirmed one is what the person agreed to, and explicit_user_input is what they wrote.

How facts reach a model is the product’s: listFacts(actor) in prepareMessages, through sanitizeForSystemPrompt into the system prompt, or a tool the agent calls when it needs them.

Notifications

createNotification writes an in-app notification for a user; its metadata is stored as JSON text, and every read, createNotification’s own result included, returns it parsed. A metadata.href makes the row a link: a relative path the app’s locale-aware navigation resolves, such as /chat?query=…, which opens a new chat with that question in the composer. How often a person hears from the product, and which reminder wins, is the product’s policy: keep it in a table of your own, keyed by workspace, user and kind, beside the createNotification call.

Environment

assertEnv() from /env fails at boot rather than at the first query when DATABASE_URL, BETTER_AUTH_SECRET or NEXT_PUBLIC_APP_URL is missing; validateEnv() returns the same findings, with warnings for the optional Stripe, email and CRON_SECRET values. The composition root calls it once.

Migrations

The framework migration chain ships inside this package (src/db/migrations) and is applied by intelligo migrate from @intelligo-dev/cli.

Do not provision with drizzle-kit push. A pushed database has the schema and no migration records, and the migrator refuses it rather than half-applying the chain to tables that already exist.

Entry points

• @intelligo-dev/core
• @intelligo-dev/core/db
• @intelligo-dev/core/db/schema
• @intelligo-dev/core/email
• @intelligo-dev/core/notifications
• @intelligo-dev/core/conversations
• @intelligo-dev/core/documents
• @intelligo-dev/core/identity
• @intelligo-dev/core/attachments
• @intelligo-dev/core/storage
• @intelligo-dev/core/storage/s3
• @intelligo-dev/core/env
• @intelligo-dev/core/registry
• @intelligo-dev/core/money
• @intelligo-dev/core/request-context
• @intelligo-dev/core/prompt
• @intelligo-dev/core/logger

npm · source