@ai-matrx/agents 0.21.18 → 0.21.20

package/dist/context/index.cjs

@@ -315,7 +315,17 @@ function compareReceipt(expected, receipt) {
         actual: actual.max_inline_chars
       });
     }
-    if (modelReadsContext && !exp.serverResolved && exp.delivery !== "server" && exp.chars !== null && actual.chars !== null && actual.delivery !== exp.delivery) {
+    const selfChecked = actual.blocked_by === "self_check" && exp.include;
+    if (selfChecked) {
+      mismatches.push({
+        key: exp.key,
+        field: "delivery",
+        expected: exp.delivery,
+        actual: actual.delivery,
+        reason: "self_check"
+      });
+    }
+    if (!selfChecked && modelReadsContext && !exp.serverResolved && exp.delivery !== "server" && exp.chars !== null && actual.chars !== null && actual.delivery !== exp.delivery) {
       mismatches.push({ key: exp.key, field: "delivery", expected: exp.delivery, actual: actual.delivery });
     }
     const expRule = normalizeUserRule(exp.userRule);
@@ -337,7 +347,8 @@ function applyReceiptToRows(rows, receipt) {
       chars: hit.chars,
       max_inline_chars: hit.max_inline_chars,
       delivery: hit.delivery,
-      fromReceipt: true
+      fromReceipt: true,
+      ...hit.blocked_by ? { blockedBy: hit.blocked_by } : {}
     };
   });
 }
@@ -356,7 +367,8 @@ function receiptRowToResolved(row) {
     delivery: row.delivery,
     decided_by: { include: row.decided_by.include, max_inline_chars: row.decided_by.max_inline_chars },
     clamped: row.clamped,
-    layers: receiptLayers(row)
+    layers: receiptLayers(row),
+    ...row.blocked_by ? { blockedBy: row.blocked_by } : {}
   };
 }
 function withheldKeys(rows) {

package/dist/context/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../context/index.ts"],"sourcesContent":["/**\n * @ai-matrx/agents/context — the context value rules, headless.\n *\n * Contract: common-docs/systems/scopes-context/context-delivery/RULES.md.\n * Parity corpus: ./rules-corpus.json (run here by rules.test.ts and by aidream's\n * pytest against the Python twin `resolve_context_rule`). Every function here\n * is pure, zero-React, and safe to import on a server.\n *\n * The one flow a client runs per turn:\n *   rows    = values.map(v => resolveContextRow(v, savedRows, cap))   // what the table shows\n *   context = buildContextWire(rows)                                   // what the request sends\n *   …on `context_receipt`: compareReceipt(rows, receipt)               // screen vs server\n */\n\n// ── Constants ───────────────────────────────────────────────────────────────\n\n/** `users.user_surface_state.feature` for the person's saved rules. */\nexport const CONTEXT_RULES_FEATURE = \"context_rules\";\n/** Surface key for values no surface emitted (attachments, server-added values). */\nexport const DEFAULT_SURFACE_KEY = \"_default\";\n/** The server's default inline threshold when no layer sets one. */\nexport const DEFAULT_INLINE_MAX_CHARS = 200;\n/** The default ceiling every resolved limit is clamped to (a server knob). */\nexport const DEFAULT_INLINE_CAP = 50000;\n/** A lazy document's server default (RULES.md §2: \"a small lazy document 6000\"). */\nexport const LAZY_SOURCE_DEFAULT_MAX = 6000;\n\n// ── Types ───────────────────────────────────────────────────────────────────\n\n/** Which layer decided a field — lowest to highest. */\nexport type ContextLayer = \"default\" | \"page\" | \"agent\" | \"you\";\nexport type ContextDelivery = \"inline\" | \"on_request\" | \"off\";\n/**\n * A client row's delivery: the server's three, plus `\"server\"` — an included\n * value the server resolves itself (`isServerResolved`), whose delivery the\n * client does not claim. Never on the wire or in a receipt.\n */\nexport type ContextRowDelivery = ContextDelivery | \"server\";\n\n/** One saved per-person rule (one key on one surface). Both fields optional. */\nexport interface SavedContextRule {\n  include?: boolean;\n  max_inline_chars?: number;\n}\n\n/** `{ [surface_key]: { [context key]: SavedContextRule } }` — the person's rows. */\nexport type SavedContextRuleRows = Record<string, Record<string, SavedContextRule>>;\n\n/** The agent layer for one key (RULES.md §2). */\nexport interface ContextAgentLayer {\n  /** The agent's Context Policy declares this key (or the value is the agent's own seed). */\n  declared?: boolean;\n  /** The policy's ceiling; only read when `declared`. */\n  max_inline_chars?: number | null;\n  /** `auto_context_disabled` — closes every undeclared key. */\n  kill_switch?: boolean;\n}\n\n/** The page layer for one key: the surface that emitted the value. */\nexport interface ContextSurfaceLayer {\n  /** The surface declares this value (a `ui_surface_value` row / manifest entry). */\n  declared?: boolean;\n  /** `false` drops the value unless the agent declares it. */\n  auto_context?: boolean | null;\n  /** `inlineUpTo` / envelope `max_inline_chars` / DB column. */\n  max_inline_chars?: number | null;\n}\n\n/** The non-person layers for one value — what the table's layer breakdown shows. */\nexport interface ContextRuleLayers {\n  /** The server's per-key default limit; `null`/absent = 200. */\n  default_max?: number | null;\n  agent?: ContextAgentLayer | null;\n  surface?: ContextSurfaceLayer | null;\n}\n\n/**\n * Input to `resolveContextRule`. Snake case on purpose: it is the corpus shape\n * and the Python twin's shape. `user` is typed loosely because invalid saved\n * values (non-boolean include, non-integer or negative limit) must be ignored,\n * not trusted.\n */\nexport interface ContextRuleInput extends ContextRuleLayers {\n  /** Size in code points; `null` = an unresolved lazy source. */\n  chars: number | null;\n  user?: { include?: unknown; max_inline_chars?: unknown } | null;\n  /** Ceiling; default `DEFAULT_INLINE_CAP`. */\n  cap?: number;\n}\n\nexport interface ContextRuleResult {\n  include: boolean;\n  /** Effective limit, after the clamp. */\n  max_inline_chars: number;\n  delivery: ContextDelivery;\n  decided_by: { include: ContextLayer; max_inline_chars: ContextLayer };\n  clamped: boolean;\n}\n\n/** One receipt row — RULES.md §5, wire fields exactly. */\nexport interface ContextReceiptRow {\n  key: string;\n  label: string;\n  surface_key: string;\n  origin: \"client\" | \"server\" | \"surroundings\" | \"rule\";\n  chars: number | null;\n  include: boolean;\n  max_inline_chars: number;\n  delivery: ContextDelivery;\n  decided_by: { include: ContextLayer; max_inline_chars: ContextLayer };\n  user_rule: { include?: boolean; max_inline_chars?: number } | null;\n  clamped: boolean;\n  /** The CLIENT itself sent a value the person turned off. */\n  client_sent_excluded: boolean;\n  /** `\"model\"`: nothing reached a model that reads no context. */\n  blocked_by: \"model\" | null;\n}\n\n/** The per-turn receipt the server streams as `context_receipt` — RULES.md §5. */\nexport interface ContextReceipt {\n  version: 1;\n  surface: string | null;\n  cap: number;\n  /** False: this turn's model cannot read context at all (every row `blocked_by: \"model\"`). */\n  model_reads_context: boolean;\n  /** The person's saved rules could not be read; the turn ran without them. */\n  rules_error: string | null;\n  rows: ContextReceiptRow[];\n}\n\nexport type ContextRowOrigin = \"page\" | \"attached\" | \"system\";\n\n/** A client's resolved row: what its table renders and what `buildContextWire` sends. */\nexport interface ResolvedContextRow extends Omit<ContextRuleResult, \"delivery\"> {\n  delivery: ContextRowDelivery;\n  /**\n   * The server resolves this value (a resource reference, a `*_id` UUID): size\n   * and delivery are unknown (`chars: null`, `delivery: \"server\"` when\n   * included), and its default limit is not predicted. Include and the\n   * person's own rule still resolve normally.\n   */\n  serverResolved?: boolean;\n  /** Display-only: chars / limit / delivery were filled from a receipt (`applyReceiptToRows`). */\n  fromReceipt?: boolean;\n  key: string;\n  label: string;\n  surfaceKey: string;\n  origin: ContextRowOrigin;\n  /** The raw value, or an already-rich envelope (`{ content, type, … }`). */\n  value: unknown;\n  chars: number | null;\n  /** The saved rule that was applied (merged `_default` + surface row), or null. */\n  userRule: SavedContextRule | null;\n  description?: string;\n  /** Context object type for the wire envelope (`text`, `json`, …). */\n  type?: string;\n  /** The non-person layers the rule was resolved from. Absent = default only. */\n  layers?: ContextRuleLayers;\n}\n\n/** What a client knows about one value before resolution. */\nexport interface ContextRowSource {\n  key: string;\n  label: string;\n  surfaceKey?: string;\n  origin: ContextRowOrigin;\n  value: unknown;\n  /** Override the measured size (e.g. `null` for an unresolved lazy source). */\n  chars?: number | null;\n  description?: string;\n  type?: string;\n  layers?: ContextRuleLayers;\n}\n\n// ── Helpers ─────────────────────────────────────────────────────────────────\n\nconst isNum = (v: unknown): v is number => typeof v === \"number\" && Number.isFinite(v);\nconst isValidLimit = (v: unknown): v is number =>\n  typeof v === \"number\" && Number.isInteger(v) && v >= 0;\n\n// ── resolveContextRule — RULES.md §2, line for line ─────────────────────────\n\nexport function resolveContextRule(input: ContextRuleInput): ContextRuleResult {\n  const agent = input.agent ?? null;\n  const surface = input.surface ?? null;\n  const user = input.user ?? null;\n  const cap = isNum(input.cap) ? input.cap : DEFAULT_INLINE_CAP;\n  const agentDeclared = agent?.declared === true;\n\n  let include = true;\n  let includeBy: ContextLayer = \"default\";\n  if (surface?.declared === true && surface.auto_context === false) {\n    if (agentDeclared) {\n      include = true;\n      includeBy = \"agent\";\n    } else {\n      include = false;\n      includeBy = \"page\";\n    }\n  }\n  if (agent?.kill_switch === true && !agentDeclared) {\n    include = false;\n    includeBy = \"agent\";\n  }\n  if (user && typeof user.include === \"boolean\") {\n    include = user.include;\n    includeBy = \"you\";\n  }\n\n  let limit = isNum(input.default_max) ? input.default_max : DEFAULT_INLINE_MAX_CHARS;\n  let limitBy: ContextLayer = \"default\";\n  const a = agentDeclared && isNum(agent?.max_inline_chars) ? agent.max_inline_chars : null;\n  const s = isNum(surface?.max_inline_chars) ? surface.max_inline_chars : null;\n  if (a !== null && s !== null) {\n    if (s < a) {\n      limit = s;\n      limitBy = \"page\";\n    } else {\n      limit = a;\n      limitBy = \"agent\";\n    }\n  } else if (a !== null) {\n    limit = a;\n    limitBy = \"agent\";\n  } else if (s !== null) {\n    limit = s;\n    limitBy = \"page\";\n  }\n  if (user && isValidLimit(user.max_inline_chars)) {\n    limit = user.max_inline_chars;\n    limitBy = \"you\";\n  }\n  const clamped = limit > cap;\n  limit = Math.min(limit, cap);\n\n  const chars = input.chars;\n  const delivery: ContextDelivery = !include\n    ? \"off\"\n    : chars === null || chars === undefined || limit === 0 || chars > limit\n      ? \"on_request\"\n      : \"inline\";\n\n  return {\n    include,\n    max_inline_chars: limit,\n    delivery,\n    decided_by: { include: includeBy, max_inline_chars: limitBy },\n    clamped,\n  };\n}\n\n// ── contextValueChars — RULES.md §1 ─────────────────────────────────────────\n\n/** Count Unicode code points (never UTF-16 units: `\"😀\".length` is 2). */\nfunction codePoints(s: string): number {\n  let n = 0;\n  for (const _ of s) n += 1;\n  return n;\n}\n\n/**\n * Size of a value in code points, exactly as the server's `content_as_str()`:\n * a string is itself; anything else is `JSON.stringify(value, null, 2)`\n * (Python `json.dumps(value, ensure_ascii=False, indent=2)`). `undefined` → 0.\n */\nexport function contextValueChars(value: unknown): number {\n  if (value === undefined) return 0;\n  if (typeof value === \"string\") return codePoints(value);\n  let text: string | undefined;\n  try {\n    text = JSON.stringify(value, null, 2);\n  } catch {\n    text = String(value);\n  }\n  return text === undefined ? 0 : codePoints(text);\n}\n\n// ── lookupSavedRule — RULES.md §3 ───────────────────────────────────────────\n\nfunction sanitizeRule(raw: unknown): SavedContextRule {\n  const out: SavedContextRule = {};\n  if (!raw || typeof raw !== \"object\") return out;\n  const r = raw as Record<string, unknown>;\n  if (typeof r.include === \"boolean\") out.include = r.include;\n  if (isValidLimit(r.max_inline_chars)) out.max_inline_chars = r.max_inline_chars;\n  return out;\n}\n\n/**\n * The person's rule for one key on one surface: `_default[key]` merged per\n * field under `rows[surfaceKey][key]`, invalid fields stripped. `null` when\n * nothing valid is saved.\n */\nexport function lookupSavedRule(\n  rows: SavedContextRuleRows | null | undefined,\n  surfaceKey: string,\n  key: string,\n): SavedContextRule | null {\n  if (!rows || typeof rows !== \"object\") return null;\n  const base = sanitizeRule(rows[DEFAULT_SURFACE_KEY]?.[key]);\n  const own = surfaceKey === DEFAULT_SURFACE_KEY ? {} : sanitizeRule(rows[surfaceKey]?.[key]);\n  const merged: SavedContextRule = { ...base, ...own };\n  return Object.keys(merged).length === 0 ? null : merged;\n}\n\n/**\n * The person's rule for one key, drift-proof (identical to aidream's\n * `lookup_user_rule_for`). While a primary surface P is in play, every key\n * filed under `_default` OR under P resolves to the same per-field merge\n * `{ ..._default[key], ...rows[P][key] }` (P wins) — whichever surface the\n * client's or the server's manifest says \"declares\" the key. A code manifest\n * and the DB manifest can disagree (sync drift); this makes the person's rule\n * land the same on both sides anyway. A surroundings key (any other surface)\n * keeps its own surface: `{ ..._default[key], ...rows[surfaceKey][key] }`.\n * With no primary surface this is exactly `lookupSavedRule`.\n *\n * Saving is unchanged: page values save to P, everything else to `_default`.\n */\nexport function lookupSavedRuleFor(\n  rows: SavedContextRuleRows | null | undefined,\n  primarySurface: string | null | undefined,\n  surfaceKey: string,\n  key: string,\n): SavedContextRule | null {\n  const primary = primarySurface && primarySurface !== DEFAULT_SURFACE_KEY ? primarySurface : null;\n  if (primary && (surfaceKey === DEFAULT_SURFACE_KEY || surfaceKey === primary)) {\n    return lookupSavedRule(rows, primary, key);\n  }\n  return lookupSavedRule(rows, surfaceKey, key);\n}\n\n// ── serverDefaultMax — the server's per-key default, read from the wire value ─\n\n/**\n * The keys that make a dict the rich envelope form — exactly aidream\n * `context_objects._RICH_FORM_KEYS`. A dict with ANY other key is raw content\n * on the server, `content` key or not.\n */\nexport const RICH_ENVELOPE_KEYS: ReadonlySet<string> = new Set([\n  \"content\",\n  \"mutable\",\n  \"persist\",\n  \"source\",\n  \"type\",\n  \"label\",\n  \"description\",\n  \"max_inline_chars\",\n  \"default_max_inline_chars\",\n  \"summary_agent_id\",\n]);\n\n/**\n * A UUID as the server's `_uuid` (Python `UUID(value.strip())`) accepts it:\n * hyphens optional, `{…}` braces and `urn:uuid:` prefixes allowed.\n */\nfunction isUuidLike(value: string): boolean {\n  const hex = value\n    .trim()\n    .replace(/urn:/gi, \"\")\n    .replace(/uuid:/gi, \"\")\n    .replace(/^\\{+|\\}+$/g, \"\")\n    .replace(/-/g, \"\");\n  return /^[0-9a-f]{32}$/i.test(hex);\n}\n\nfunction isPlainObject(v: unknown): v is Record<string, unknown> {\n  return !!v && typeof v === \"object\" && !Array.isArray(v);\n}\n\n/** A canonical resource reference the server promotes (aidream `parse_resource_reference`). */\nfunction isResourceRef(v: Record<string, unknown>): boolean {\n  if (v.__kind !== \"resource_ref\") return false;\n  const type = v.resource_type || v.type;\n  const id = v.resource_id || v.id;\n  return (\n    typeof type === \"string\" &&\n    type.trim() !== \"\" &&\n    typeof id === \"string\" &&\n    isUuidLike(id)\n  );\n}\n\nfunction hasOwn(o: Record<string, unknown>, k: string): boolean {\n  return Object.prototype.hasOwnProperty.call(o, k);\n}\n\nfunction onlyRichKeys(o: Record<string, unknown>): boolean {\n  return Object.keys(o).every((k) => RICH_ENVELOPE_KEYS.has(k));\n}\n\nfunction hasLazySource(o: Record<string, unknown>): boolean {\n  return isPlainObject(o.source) && typeof o.source.kind === \"string\";\n}\n\n/**\n * A rich envelope exactly as the server reads one (aidream\n * `_split_rich_context_value`): a plain object with its own `content` whose\n * every key is in `RICH_ENVELOPE_KEYS`. A record that merely HAS `content`\n * (a note `{ id, title, content }`) is raw content, not an envelope.\n */\nexport function isRichEnvelope(value: unknown): value is Record<string, unknown> {\n  return isPlainObject(value) && hasOwn(value, \"content\") && onlyRichKeys(value);\n}\n\n/** The source-only lazy pointer form: rich keys only, no `content`, a `source` with a `kind`. */\nfunction isLazyPointer(value: unknown): value is Record<string, unknown> {\n  return isPlainObject(value) && !hasOwn(value, \"content\") && onlyRichKeys(value) && hasLazySource(value);\n}\n\n/**\n * Split one wire value into `{ content, overrides }` exactly as aidream\n * `_split_rich_context_value`: a rich envelope or lazy pointer → its `content`\n * (null when absent) and every other key; anything else → the whole value as\n * content, no overrides.\n */\nexport function splitContextValue(value: unknown): {\n  content: unknown;\n  overrides: Record<string, unknown>;\n} {\n  if (isRichEnvelope(value) || isLazyPointer(value)) {\n    const { content = null, ...overrides } = value;\n    return { content, overrides };\n  }\n  return { content: value, overrides: {} };\n}\n\n/**\n * The server's default inline limit for one wire value — the `default` layer\n * the server will use, before page/agent/you. Mirrors aidream\n * `context_rules._server_default_max` over the object `ContextManifest.build`\n * makes from the value (after `normalize_resource_context`):\n *\n * - a rich envelope (every key in the rich-form set, and `content` present or a\n *   lazy `source` with a string `kind`) carrying a whole-number, non-negative\n *   `default_max_inline_chars` → that;\n * - a top-level resource reference (`__kind: \"resource_ref\"` with a type and a\n *   UUID id), or a lazy source whose `extra.resource_type` is set → 0\n *   (descriptor-first);\n * - a lazy source (a `source` and null/absent `content`) → 6000;\n * - anything else → null (the server's 200).\n *\n * A resource reference nested as an envelope's `content` is NOT promoted by the\n * server (it reads top-level values only), so it is plain JSON content → null.\n */\nexport function serverDefaultMax(value: unknown): number | null {\n  if (!isPlainObject(value)) return null;\n  if (isResourceRef(value)) return 0;\n  if (!isRichEnvelope(value) && !isLazyPointer(value)) return null;\n  if (isValidLimit(value.default_max_inline_chars)) return value.default_max_inline_chars;\n  if (hasLazySource(value) && (value.content === null || value.content === undefined)) {\n    const src = value.source as Record<string, unknown>;\n    const extra = isPlainObject(src.extra) ? src.extra : {};\n    return extra.resource_type ? 0 : LAZY_SOURCE_DEFAULT_MAX;\n  }\n  return null;\n}\n\n// ── resolveContextRow — the glue a client runs per value ────────────────────\n\n/** Resolve one value into the row the table renders and the wire sends. */\nexport function resolveContextRow(\n  source: ContextRowSource,\n  savedRows: SavedContextRuleRows | null | undefined,\n  cap: number = DEFAULT_INLINE_CAP,\n  /** The page in play; makes the rule lookup drift-proof (`lookupSavedRuleFor`). */\n  primarySurface?: string | null,\n): ResolvedContextRow {\n  const surfaceKey = source.surfaceKey ?? DEFAULT_SURFACE_KEY;\n  const serverResolved = isServerResolved(source.key, source.value);\n  const chars = serverResolved\n    ? null\n    : source.chars !== undefined\n      ? source.chars\n      : unresolvedSize(source.value)\n        ? null\n        : contextValueChars(splitContextValue(source.value).content);\n  const userRule = lookupSavedRuleFor(savedRows, primarySurface, surfaceKey, source.key);\n  const layers: ContextRuleLayers = { ...(source.layers ?? {}) };\n  if (!serverResolved && (layers.default_max === undefined || layers.default_max === null)) {\n    const serverDefault = serverDefaultMax(source.value);\n    if (serverDefault !== null) layers.default_max = serverDefault;\n  }\n  const result = resolveContextRule({ ...layers, chars, user: userRule, cap });\n  const row: ResolvedContextRow = {\n    ...result,\n    delivery: serverResolved && result.include ? \"server\" : result.delivery,\n    key: source.key,\n    label: source.label,\n    surfaceKey,\n    origin: source.origin,\n    value: source.value,\n    chars,\n    userRule,\n  };\n  if (source.description !== undefined) row.description = source.description;\n  if (source.type !== undefined) row.type = source.type;\n  if (source.layers !== undefined || layers.default_max !== undefined) row.layers = layers;\n  if (serverResolved) row.serverResolved = true;\n  return row;\n}\n\n// ── buildContextWire — the ONLY producer of a request's `context` ──────────\n\n/**\n * Size the server cannot know yet: a lazy pointer (or an envelope with a lazy\n * source and null content), or a resource reference it will promote to one.\n */\nfunction unresolvedSize(value: unknown): boolean {\n  if (!isPlainObject(value)) return false;\n  if (isResourceRef(value)) return true;\n  return (\n    (isRichEnvelope(value) || isLazyPointer(value)) &&\n    hasLazySource(value) &&\n    (value.content === null || value.content === undefined)\n  );\n}\n\nconst KIND_RESOURCE_REF = \"resource_ref\";\n\n/**\n * Values the server acts on by their top-level shape in `request.context`\n * (aidream `normalize_resource_context` → `parse_resource_reference`, which\n * reads ONLY top-level values):\n *\n * - a resource reference — any object whose `__kind` is `\"resource_ref\"`\n *   (its own promote/exclude/overlay policy rides inside it);\n * - a bare UUID string under a conventional `*_id` key (`file_id`,\n *   `attached_file_id`, `current_note_id`, …), which the server promotes when\n *   the noun is a registered resource type. The registry lives on the server,\n *   so every `*_id` key with a UUID passes through; for an unregistered noun\n *   the server reads the bare string exactly as it would read it wrapped.\n *\n * These ship exactly as-is: no label, type, description or limit added.\n */\nexport function isWireDirective(key: string, value: unknown): boolean {\n  if (isPlainObject(value)) return value.__kind === KIND_RESOURCE_REF;\n  return (\n    typeof value === \"string\" &&\n    isIdKey(key) &&\n    isUuidLike(value)\n  );\n}\n\n/** The server's key rule for promoting a bare id (`_resource_type_for_key`): a `*_id` key. */\nfunction isIdKey(key: string): boolean {\n  return key.trim().toLowerCase().endsWith(\"_id\");\n}\n\n/**\n * A value whose size, default limit and delivery the SERVER decides by\n * resolving it — so the client must not predict them:\n *\n * - a top-level resource reference (`__kind: \"resource_ref\"`), bare or as a\n *   rich envelope's `content`;\n * - a UUID string under a `*_id` key, bare or as a rich envelope's `content`.\n *\n * The server only promotes an id when its noun is in the resource registry\n * (aidream `_resource_type_for_key`), which the client cannot see, so every\n * `*_id` UUID counts. This is a deliberate superset: on a value the server\n * does not promote, the client only stops predicting — it never makes a wrong\n * promise.\n */\nexport function isServerResolved(key: string, value: unknown): boolean {\n  const inner = isRichEnvelope(value) ? value.content : value;\n  if (isPlainObject(inner)) return inner.__kind === KIND_RESOURCE_REF;\n  return typeof inner === \"string\" && isIdKey(key) && isUuidLike(inner);\n}\n\n/**\n * Build the request's `context` object from the resolved rows. This is the\n * ONLY function that may produce it, so what the table shows and what the\n * request carries cannot drift apart.\n *\n * - A row whose `include` is false is omitted entirely — it never reaches the\n *   wire (RULES.md §1: off means off everywhere).\n * - An included row becomes `{ content, type?, label, description?,\n *   max_inline_chars? }`. An already-rich envelope (`isRichEnvelope`, e.g. a\n *   working document carrying `source`/`mutable`/`persist`, or a lazy pointer)\n *   keeps every non-rule field it already has; `label`/`description`/`type`\n *   are only filled when missing.\n * - `max_inline_chars` on the envelope is the PAGE layer's value only\n *   (`layers.surface.max_inline_chars`, else the envelope's own page value).\n *   The server reads the person's saved rules itself every turn (RULES.md §3)\n *   and the agent layer from its own policy, so the wire must never carry the\n *   person's number or the resolved effective limit dressed up as a page rule\n *   — that would make a stale client value outrank the server's fresh read.\n */\nexport function buildContextWire(rows: readonly ResolvedContextRow[]): Record<string, unknown> {\n  const wire: Record<string, unknown> = {};\n  for (const row of rows) {\n    if (!row.include) continue;\n    // A row with no value (a receipt-built display row) has nothing to send.\n    if (row.value === undefined) continue;\n    // Rich: an envelope with `content`, or a source-only lazy pointer. Every\n    // non-rule field survives — including `default_max_inline_chars`, the\n    // server's per-key default (not a person's or a page's number).\n    // A record that merely has `content` is NOT rich: it is wrapped whole, or\n    // the server would read it as raw content and drop the envelope fields.\n    // A top-level directive the server acts on by SHAPE ships exactly as-is:\n    // wrapped, it becomes plain JSON and silently stops resolving.\n    if (isWireDirective(row.key, row.value)) {\n      wire[row.key] = row.value;\n      continue;\n    }\n    const rich = isRichEnvelope(row.value) || isLazyPointer(row.value);\n    const envelope: Record<string, unknown> = rich\n      ? { ...(row.value as Record<string, unknown>) }\n      : { content: row.value };\n    delete envelope.max_inline_chars;\n    if (envelope.type === undefined && row.type !== undefined) envelope.type = row.type;\n    if (envelope.label === undefined) envelope.label = row.label;\n    if (envelope.description === undefined && row.description !== undefined) {\n      envelope.description = row.description;\n    }\n    const pageLimit = row.layers?.surface?.max_inline_chars;\n    const ownPageLimit = rich ? (row.value as Record<string, unknown>).max_inline_chars : undefined;\n    if (isValidLimit(pageLimit)) envelope.max_inline_chars = pageLimit;\n    else if (isValidLimit(ownPageLimit)) envelope.max_inline_chars = ownPageLimit;\n    wire[row.key] = envelope;\n  }\n  return wire;\n}\n\n// ── compareReceipt — RULES.md §6 ────────────────────────────────────────────\n\nexport interface ContextReceiptMismatch {\n  key: string;\n  field: \"include\" | \"max_inline_chars\" | \"delivery\" | \"user_rule\" | \"missing\";\n  expected: unknown;\n  actual: unknown;\n}\n\nfunction normalizeUserRule(rule: SavedContextRule | null | undefined): SavedContextRule | null {\n  const clean = sanitizeRule(rule);\n  return Object.keys(clean).length === 0 ? null : clean;\n}\n\nfunction sameRule(a: SavedContextRule | null, b: SavedContextRule | null): boolean {\n  if (a === null || b === null) return a === b;\n  return a.include === b.include && a.max_inline_chars === b.max_inline_chars;\n}\n\n/**\n * Compare the rows the client resolved (and rendered, and sent) with the\n * receipt the server emitted for the same turn.\n *\n * For each expected row, the receipt row is matched by key + surface key, then\n * by key alone. Compared: `include`, `max_inline_chars`, `delivery` (only when\n * both sides know the size) and `user_rule`. An expected row absent from the\n * receipt is a `missing` mismatch — except a row the client correctly withheld\n * for a reason other than the person's own rule (page `auto_context` off, the\n * agent's kill switch): the client never sent it and the server lists only\n * the person's saved `include: false` rules as `origin: \"rule\"` rows, so its\n * absence is the truth, not a lie. Receipt rows nobody expected are returned\n * as `systemRows` — shown, never hidden.\n */\nexport function compareReceipt(\n  expected: readonly ResolvedContextRow[],\n  receipt: ContextReceipt,\n): { mismatches: ContextReceiptMismatch[]; systemRows: ContextReceiptRow[]; modelReadsContext: boolean } {\n  const mismatches: ContextReceiptMismatch[] = [];\n  // A turn whose model reads no context delivers nothing by design: every row\n  // is `delivery: \"off\"`, `blocked_by: \"model\"`. That is not a lie about the\n  // person's rules, so delivery is not compared; include / limit / rule still are.\n  const modelReadsContext = receipt.model_reads_context !== false;\n  const used = new Set<ContextReceiptRow>();\n  const rows = receipt.rows ?? [];\n\n  for (const exp of expected) {\n    const actual =\n      rows.find((r) => !used.has(r) && r.key === exp.key && r.surface_key === exp.surfaceKey) ??\n      rows.find((r) => !used.has(r) && r.key === exp.key);\n    if (!actual) {\n      const withheldByOthers = !exp.include && exp.decided_by.include !== \"you\";\n      if (!withheldByOthers) {\n        mismatches.push({ key: exp.key, field: \"missing\", expected: exp.delivery, actual: null });\n      }\n      continue;\n    }\n    used.add(actual);\n    if (actual.include !== exp.include) {\n      mismatches.push({ key: exp.key, field: \"include\", expected: exp.include, actual: actual.include });\n    }\n    // A server-resolved value's limit is only the client's to promise when the\n    // person set one; its default-derived limit and delivery are the server's.\n    const promisesLimit = !exp.serverResolved || exp.userRule?.max_inline_chars !== undefined;\n    if (promisesLimit && actual.max_inline_chars !== exp.max_inline_chars) {\n      mismatches.push({\n        key: exp.key,\n        field: \"max_inline_chars\",\n        expected: exp.max_inline_chars,\n        actual: actual.max_inline_chars,\n      });\n    }\n    if (\n      modelReadsContext &&\n      !exp.serverResolved &&\n      exp.delivery !== \"server\" &&\n      exp.chars !== null &&\n      actual.chars !== null &&\n      actual.delivery !== exp.delivery\n    ) {\n      mismatches.push({ key: exp.key, field: \"delivery\", expected: exp.delivery, actual: actual.delivery });\n    }\n    const expRule = normalizeUserRule(exp.userRule);\n    const actRule = normalizeUserRule(actual.user_rule);\n    if (!sameRule(expRule, actRule)) {\n      mismatches.push({ key: exp.key, field: \"user_rule\", expected: expRule, actual: actRule });\n    }\n  }\n\n  return { mismatches, systemRows: rows.filter((r) => !used.has(r)), modelReadsContext };\n}\n\n/**\n * For DISPLAY only: fill each server-resolved row's `chars`,\n * `max_inline_chars` and `delivery` from the latest receipt row for the same\n * key (key + surface key, then key), marking it `fromReceipt`. Other rows are\n * returned unchanged. Never compare these rows — `compareReceipt` takes the\n * rows the client resolved before sending.\n */\nexport function applyReceiptToRows(\n  rows: readonly ResolvedContextRow[],\n  receipt: ContextReceipt | null | undefined,\n): ResolvedContextRow[] {\n  const receiptRows = receipt?.rows ?? [];\n  return rows.map((row) => {\n    if (!row.serverResolved) return row;\n    const hit =\n      receiptRows.find((r) => r.key === row.key && r.surface_key === row.surfaceKey) ??\n      receiptRows.find((r) => r.key === row.key);\n    if (!hit) return row;\n    return {\n      ...row,\n      chars: hit.chars,\n      max_inline_chars: hit.max_inline_chars,\n      delivery: hit.delivery,\n      fromReceipt: true,\n    };\n  });\n}\n\n// ── receiptRowToResolved — read-only rows for a sent message ────────────────\n\n/**\n * Turn one receipt row into the row a read-only table renders (a sent\n * message's context, read back from `chat.message.model_context`). The value\n * itself is not in the receipt, so `value` is undefined.\n */\nexport function receiptRowToResolved(row: ContextReceiptRow): ResolvedContextRow {\n  const origin: ContextRowOrigin =\n    row.surface_key !== DEFAULT_SURFACE_KEY ? \"page\" : row.origin === \"client\" ? \"attached\" : \"system\";\n  return {\n    key: row.key,\n    label: row.label,\n    surfaceKey: row.surface_key,\n    origin,\n    value: undefined,\n    chars: row.chars,\n    userRule: normalizeUserRule(row.user_rule),\n    include: row.include,\n    max_inline_chars: row.max_inline_chars,\n    delivery: row.delivery,\n    decided_by: { include: row.decided_by.include, max_inline_chars: row.decided_by.max_inline_chars },\n    clamped: row.clamped,\n    layers: receiptLayers(row),\n  };\n}\n\n/**\n * Rebuild the non-person layers from what the server applied, so a read-only\n * table shows the applied limit as the inherited value and marks the layer\n * that decided it. The limit goes on the layer named by\n * `decided_by.max_inline_chars` (`you` is carried by `userRule`); include is\n * rebuilt the same way for a page `auto_context` off or the agent's kill switch.\n */\n/**\n * Keys the client has a value for but is NOT sending this turn (excluded by\n * the page, the agent or the person's rule). Clients send this list as the\n * request's `context_withheld`, so the receipt's `origin: \"rule\"` rows are\n * limited to keys actually withheld on this page. Deduplicated, in row order.\n */\nexport function withheldKeys(rows: readonly ResolvedContextRow[]): string[] {\n  const out: string[] = [];\n  for (const row of rows) {\n    if (row.include || row.value === undefined || out.includes(row.key)) continue;\n    out.push(row.key);\n  }\n  return out;\n}\n\nconst DOCUMENT_KEY_PREFIXES = [\"attached_document_\", \"attached_file_\", \"resource_file_\"];\n\n/**\n * Receipt rows the client never sent (`compareReceipt(...).systemRows`:\n * server-seeded attachments, scope seeds, saved off-rules…) as table rows, so\n * a person can see and govern them — the normal Include switch and Inline max\n * apply. Documents (`attached_document_*`, `attached_file_*`,\n * `resource_file_*`) group as \"attached\", everything else as \"system\". The\n * server resolved them (`serverResolved`), values come from the receipt\n * (`fromReceipt`), and `surfaceKey` is the row's own `surface_key` — so a rule\n * saved for one writes to `_default` unless the server filed it under a page.\n * `value` is undefined: `buildContextWire` never sends these rows.\n */\nexport function systemRowsToResolved(systemRows: readonly ContextReceiptRow[]): ResolvedContextRow[] {\n  return systemRows.map((receiptRow) => {\n    const row = receiptRowToResolved(receiptRow);\n    const isDocument = DOCUMENT_KEY_PREFIXES.some((p) => receiptRow.key.startsWith(p));\n    return {\n      ...row,\n      origin: isDocument ? \"attached\" : \"system\",\n      serverResolved: true,\n      fromReceipt: true,\n    };\n  });\n}\n\nfunction receiptLayers(row: ContextReceiptRow): ContextRuleLayers {\n  const layers: ContextRuleLayers = {};\n  const limit = row.max_inline_chars;\n  const limitBy = row.decided_by.max_inline_chars;\n  const includeBy = row.decided_by.include;\n  if (limitBy === \"default\") layers.default_max = limit;\n  // Page auto_context off: the page dropped it, or the agent re-admitted it.\n  const pageOff = (includeBy === \"page\" && !row.include) || (includeBy === \"agent\" && row.include);\n  if (limitBy === \"page\" || pageOff) {\n    layers.surface = {\n      declared: true,\n      auto_context: !pageOff,\n      max_inline_chars: limitBy === \"page\" ? limit : null,\n    };\n  }\n  if (limitBy === \"agent\") {\n    // An agent limit means the key is declared; a declared key the agent decided to include\n    // was re-admitted past a page auto_context off. (The kill switch never closes a declared key.)\n    layers.agent = { declared: true, max_inline_chars: limit };\n  } else if (includeBy === \"agent\") {\n    // Off = the kill switch closing an undeclared key; on = a declaration re-admitting a\n    // page auto_context-off value.\n    layers.agent = row.include ? { declared: true } : { declared: false, kill_switch: true };\n  }\n  return layers;\n}\n\n// ── Display ─────────────────────────────────────────────────────────────────\n\n/** Compact size for a tabular column: `950`, `18.4k`, `184k`, `1.2M`, `—` for unknown. */\nexport function formatChars(n: number | null | undefined): string {\n  if (n === null || n === undefined || !Number.isFinite(n)) return \"—\";\n  const abs = Math.abs(n);\n  const trim = (s: string) => s.replace(/\\.0$/, \"\");\n  if (abs < 1000) return String(Math.round(n));\n  if (abs < 100_000) return `${trim((n / 1000).toFixed(1))}k`;\n  if (abs < 1_000_000) return `${Math.round(n / 1000)}k`;\n  return `${trim((n / 1_000_000).toFixed(1))}M`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAiBO,IAAM,wBAAwB;AAE9B,IAAM,sBAAsB;AAE5B,IAAM,2BAA2B;AAEjC,IAAM,qBAAqB;AAE3B,IAAM,0BAA0B;AAuJvC,IAAM,QAAQ,CAAC,MAA4B,OAAO,MAAM,YAAY,OAAO,SAAS,CAAC;AACrF,IAAM,eAAe,CAAC,MACpB,OAAO,MAAM,YAAY,OAAO,UAAU,CAAC,KAAK,KAAK;AAIhD,SAAS,mBAAmB,OAA4C;AAC7E,QAAM,QAAQ,MAAM,SAAS;AAC7B,QAAM,UAAU,MAAM,WAAW;AACjC,QAAM,OAAO,MAAM,QAAQ;AAC3B,QAAM,MAAM,MAAM,MAAM,GAAG,IAAI,MAAM,MAAM;AAC3C,QAAM,gBAAgB,OAAO,aAAa;AAE1C,MAAI,UAAU;AACd,MAAI,YAA0B;AAC9B,MAAI,SAAS,aAAa,QAAQ,QAAQ,iBAAiB,OAAO;AAChE,QAAI,eAAe;AACjB,gBAAU;AACV,kBAAY;AAAA,IACd,OAAO;AACL,gBAAU;AACV,kBAAY;AAAA,IACd;AAAA,EACF;AACA,MAAI,OAAO,gBAAgB,QAAQ,CAAC,eAAe;AACjD,cAAU;AACV,gBAAY;AAAA,EACd;AACA,MAAI,QAAQ,OAAO,KAAK,YAAY,WAAW;AAC7C,cAAU,KAAK;AACf,gBAAY;AAAA,EACd;AAEA,MAAI,QAAQ,MAAM,MAAM,WAAW,IAAI,MAAM,cAAc;AAC3D,MAAI,UAAwB;AAC5B,QAAM,IAAI,iBAAiB,MAAM,OAAO,gBAAgB,IAAI,MAAM,mBAAmB;AACrF,QAAM,IAAI,MAAM,SAAS,gBAAgB,IAAI,QAAQ,mBAAmB;AACxE,MAAI,MAAM,QAAQ,MAAM,MAAM;AAC5B,QAAI,IAAI,GAAG;AACT,cAAQ;AACR,gBAAU;AAAA,IACZ,OAAO;AACL,cAAQ;AACR,gBAAU;AAAA,IACZ;AAAA,EACF,WAAW,MAAM,MAAM;AACrB,YAAQ;AACR,cAAU;AAAA,EACZ,WAAW,MAAM,MAAM;AACrB,YAAQ;AACR,cAAU;AAAA,EACZ;AACA,MAAI,QAAQ,aAAa,KAAK,gBAAgB,GAAG;AAC/C,YAAQ,KAAK;AACb,cAAU;AAAA,EACZ;AACA,QAAM,UAAU,QAAQ;AACxB,UAAQ,KAAK,IAAI,OAAO,GAAG;AAE3B,QAAM,QAAQ,MAAM;AACpB,QAAM,WAA4B,CAAC,UAC/B,QACA,UAAU,QAAQ,UAAU,UAAa,UAAU,KAAK,QAAQ,QAC9D,eACA;AAEN,SAAO;AAAA,IACL;AAAA,IACA,kBAAkB;AAAA,IAClB;AAAA,IACA,YAAY,EAAE,SAAS,WAAW,kBAAkB,QAAQ;AAAA,IAC5D;AAAA,EACF;AACF;AAKA,SAAS,WAAW,GAAmB;AACrC,MAAI,IAAI;AACR,aAAW,KAAK,EAAG,MAAK;AACxB,SAAO;AACT;AAOO,SAAS,kBAAkB,OAAwB;AACxD,MAAI,UAAU,OAAW,QAAO;AAChC,MAAI,OAAO,UAAU,SAAU,QAAO,WAAW,KAAK;AACtD,MAAI;AACJ,MAAI;AACF,WAAO,KAAK,UAAU,OAAO,MAAM,CAAC;AAAA,EACtC,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACA,SAAO,SAAS,SAAY,IAAI,WAAW,IAAI;AACjD;AAIA,SAAS,aAAa,KAAgC;AACpD,QAAM,MAAwB,CAAC;AAC/B,MAAI,CAAC,OAAO,OAAO,QAAQ,SAAU,QAAO;AAC5C,QAAM,IAAI;AACV,MAAI,OAAO,EAAE,YAAY,UAAW,KAAI,UAAU,EAAE;AACpD,MAAI,aAAa,EAAE,gBAAgB,EAAG,KAAI,mBAAmB,EAAE;AAC/D,SAAO;AACT;AAOO,SAAS,gBACd,MACA,YACA,KACyB;AACzB,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,QAAM,OAAO,aAAa,KAAK,mBAAmB,IAAI,GAAG,CAAC;AAC1D,QAAM,MAAM,eAAe,sBAAsB,CAAC,IAAI,aAAa,KAAK,UAAU,IAAI,GAAG,CAAC;AAC1F,QAAM,SAA2B,EAAE,GAAG,MAAM,GAAG,IAAI;AACnD,SAAO,OAAO,KAAK,MAAM,EAAE,WAAW,IAAI,OAAO;AACnD;AAeO,SAAS,mBACd,MACA,gBACA,YACA,KACyB;AACzB,QAAM,UAAU,kBAAkB,mBAAmB,sBAAsB,iBAAiB;AAC5F,MAAI,YAAY,eAAe,uBAAuB,eAAe,UAAU;AAC7E,WAAO,gBAAgB,MAAM,SAAS,GAAG;AAAA,EAC3C;AACA,SAAO,gBAAgB,MAAM,YAAY,GAAG;AAC9C;AASO,IAAM,qBAA0C,oBAAI,IAAI;AAAA,EAC7D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAMD,SAAS,WAAW,OAAwB;AAC1C,QAAM,MAAM,MACT,KAAK,EACL,QAAQ,UAAU,EAAE,EACpB,QAAQ,WAAW,EAAE,EACrB,QAAQ,cAAc,EAAE,EACxB,QAAQ,MAAM,EAAE;AACnB,SAAO,kBAAkB,KAAK,GAAG;AACnC;AAEA,SAAS,cAAc,GAA0C;AAC/D,SAAO,CAAC,CAAC,KAAK,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,CAAC;AACzD;AAGA,SAAS,cAAc,GAAqC;AAC1D,MAAI,EAAE,WAAW,eAAgB,QAAO;AACxC,QAAM,OAAO,EAAE,iBAAiB,EAAE;AAClC,QAAM,KAAK,EAAE,eAAe,EAAE;AAC9B,SACE,OAAO,SAAS,YAChB,KAAK,KAAK,MAAM,MAChB,OAAO,OAAO,YACd,WAAW,EAAE;AAEjB;AAEA,SAAS,OAAO,GAA4B,GAAoB;AAC9D,SAAO,OAAO,UAAU,eAAe,KAAK,GAAG,CAAC;AAClD;AAEA,SAAS,aAAa,GAAqC;AACzD,SAAO,OAAO,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,mBAAmB,IAAI,CAAC,CAAC;AAC9D;AAEA,SAAS,cAAc,GAAqC;AAC1D,SAAO,cAAc,EAAE,MAAM,KAAK,OAAO,EAAE,OAAO,SAAS;AAC7D;AAQO,SAAS,eAAe,OAAkD;AAC/E,SAAO,cAAc,KAAK,KAAK,OAAO,OAAO,SAAS,KAAK,aAAa,KAAK;AAC/E;AAGA,SAAS,cAAc,OAAkD;AACvE,SAAO,cAAc,KAAK,KAAK,CAAC,OAAO,OAAO,SAAS,KAAK,aAAa,KAAK,KAAK,cAAc,KAAK;AACxG;AAQO,SAAS,kBAAkB,OAGhC;AACA,MAAI,eAAe,KAAK,KAAK,cAAc,KAAK,GAAG;AACjD,UAAM,EAAE,UAAU,MAAM,GAAG,UAAU,IAAI;AACzC,WAAO,EAAE,SAAS,UAAU;AAAA,EAC9B;AACA,SAAO,EAAE,SAAS,OAAO,WAAW,CAAC,EAAE;AACzC;AAoBO,SAAS,iBAAiB,OAA+B;AAC9D,MAAI,CAAC,cAAc,KAAK,EAAG,QAAO;AAClC,MAAI,cAAc,KAAK,EAAG,QAAO;AACjC,MAAI,CAAC,eAAe,KAAK,KAAK,CAAC,cAAc,KAAK,EAAG,QAAO;AAC5D,MAAI,aAAa,MAAM,wBAAwB,EAAG,QAAO,MAAM;AAC/D,MAAI,cAAc,KAAK,MAAM,MAAM,YAAY,QAAQ,MAAM,YAAY,SAAY;AACnF,UAAM,MAAM,MAAM;AAClB,UAAM,QAAQ,cAAc,IAAI,KAAK,IAAI,IAAI,QAAQ,CAAC;AACtD,WAAO,MAAM,gBAAgB,IAAI;AAAA,EACnC;AACA,SAAO;AACT;AAKO,SAAS,kBACd,QACA,WACA,MAAc,oBAEd,gBACoB;AACpB,QAAM,aAAa,OAAO,cAAc;AACxC,QAAM,iBAAiB,iBAAiB,OAAO,KAAK,OAAO,KAAK;AAChE,QAAM,QAAQ,iBACV,OACA,OAAO,UAAU,SACf,OAAO,QACP,eAAe,OAAO,KAAK,IACzB,OACA,kBAAkB,kBAAkB,OAAO,KAAK,EAAE,OAAO;AACjE,QAAM,WAAW,mBAAmB,WAAW,gBAAgB,YAAY,OAAO,GAAG;AACrF,QAAM,SAA4B,EAAE,GAAI,OAAO,UAAU,CAAC,EAAG;AAC7D,MAAI,CAAC,mBAAmB,OAAO,gBAAgB,UAAa,OAAO,gBAAgB,OAAO;AACxF,UAAM,gBAAgB,iBAAiB,OAAO,KAAK;AACnD,QAAI,kBAAkB,KAAM,QAAO,cAAc;AAAA,EACnD;AACA,QAAM,SAAS,mBAAmB,EAAE,GAAG,QAAQ,OAAO,MAAM,UAAU,IAAI,CAAC;AAC3E,QAAM,MAA0B;AAAA,IAC9B,GAAG;AAAA,IACH,UAAU,kBAAkB,OAAO,UAAU,WAAW,OAAO;AAAA,IAC/D,KAAK,OAAO;AAAA,IACZ,OAAO,OAAO;AAAA,IACd;AAAA,IACA,QAAQ,OAAO;AAAA,IACf,OAAO,OAAO;AAAA,IACd;AAAA,IACA;AAAA,EACF;AACA,MAAI,OAAO,gBAAgB,OAAW,KAAI,cAAc,OAAO;AAC/D,MAAI,OAAO,SAAS,OAAW,KAAI,OAAO,OAAO;AACjD,MAAI,OAAO,WAAW,UAAa,OAAO,gBAAgB,OAAW,KAAI,SAAS;AAClF,MAAI,eAAgB,KAAI,iBAAiB;AACzC,SAAO;AACT;AAQA,SAAS,eAAe,OAAyB;AAC/C,MAAI,CAAC,cAAc,KAAK,EAAG,QAAO;AAClC,MAAI,cAAc,KAAK,EAAG,QAAO;AACjC,UACG,eAAe,KAAK,KAAK,cAAc,KAAK,MAC7C,cAAc,KAAK,MAClB,MAAM,YAAY,QAAQ,MAAM,YAAY;AAEjD;AAEA,IAAM,oBAAoB;AAiBnB,SAAS,gBAAgB,KAAa,OAAyB;AACpE,MAAI,cAAc,KAAK,EAAG,QAAO,MAAM,WAAW;AAClD,SACE,OAAO,UAAU,YACjB,QAAQ,GAAG,KACX,WAAW,KAAK;AAEpB;AAGA,SAAS,QAAQ,KAAsB;AACrC,SAAO,IAAI,KAAK,EAAE,YAAY,EAAE,SAAS,KAAK;AAChD;AAgBO,SAAS,iBAAiB,KAAa,OAAyB;AACrE,QAAM,QAAQ,eAAe,KAAK,IAAI,MAAM,UAAU;AACtD,MAAI,cAAc,KAAK,EAAG,QAAO,MAAM,WAAW;AAClD,SAAO,OAAO,UAAU,YAAY,QAAQ,GAAG,KAAK,WAAW,KAAK;AACtE;AAqBO,SAAS,iBAAiB,MAA8D;AAC7F,QAAM,OAAgC,CAAC;AACvC,aAAW,OAAO,MAAM;AACtB,QAAI,CAAC,IAAI,QAAS;AAElB,QAAI,IAAI,UAAU,OAAW;AAQ7B,QAAI,gBAAgB,IAAI,KAAK,IAAI,KAAK,GAAG;AACvC,WAAK,IAAI,GAAG,IAAI,IAAI;AACpB;AAAA,IACF;AACA,UAAM,OAAO,eAAe,IAAI,KAAK,KAAK,cAAc,IAAI,KAAK;AACjE,UAAM,WAAoC,OACtC,EAAE,GAAI,IAAI,MAAkC,IAC5C,EAAE,SAAS,IAAI,MAAM;AACzB,WAAO,SAAS;AAChB,QAAI,SAAS,SAAS,UAAa,IAAI,SAAS,OAAW,UAAS,OAAO,IAAI;AAC/E,QAAI,SAAS,UAAU,OAAW,UAAS,QAAQ,IAAI;AACvD,QAAI,SAAS,gBAAgB,UAAa,IAAI,gBAAgB,QAAW;AACvE,eAAS,cAAc,IAAI;AAAA,IAC7B;AACA,UAAM,YAAY,IAAI,QAAQ,SAAS;AACvC,UAAM,eAAe,OAAQ,IAAI,MAAkC,mBAAmB;AACtF,QAAI,aAAa,SAAS,EAAG,UAAS,mBAAmB;AAAA,aAChD,aAAa,YAAY,EAAG,UAAS,mBAAmB;AACjE,SAAK,IAAI,GAAG,IAAI;AAAA,EAClB;AACA,SAAO;AACT;AAWA,SAAS,kBAAkB,MAAoE;AAC7F,QAAM,QAAQ,aAAa,IAAI;AAC/B,SAAO,OAAO,KAAK,KAAK,EAAE,WAAW,IAAI,OAAO;AAClD;AAEA,SAAS,SAAS,GAA4B,GAAqC;AACjF,MAAI,MAAM,QAAQ,MAAM,KAAM,QAAO,MAAM;AAC3C,SAAO,EAAE,YAAY,EAAE,WAAW,EAAE,qBAAqB,EAAE;AAC7D;AAgBO,SAAS,eACd,UACA,SACuG;AACvG,QAAM,aAAuC,CAAC;AAI9C,QAAM,oBAAoB,QAAQ,wBAAwB;AAC1D,QAAM,OAAO,oBAAI,IAAuB;AACxC,QAAM,OAAO,QAAQ,QAAQ,CAAC;AAE9B,aAAW,OAAO,UAAU;AAC1B,UAAM,SACJ,KAAK,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,QAAQ,IAAI,OAAO,EAAE,gBAAgB,IAAI,UAAU,KACtF,KAAK,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,QAAQ,IAAI,GAAG;AACpD,QAAI,CAAC,QAAQ;AACX,YAAM,mBAAmB,CAAC,IAAI,WAAW,IAAI,WAAW,YAAY;AACpE,UAAI,CAAC,kBAAkB;AACrB,mBAAW,KAAK,EAAE,KAAK,IAAI,KAAK,OAAO,WAAW,UAAU,IAAI,UAAU,QAAQ,KAAK,CAAC;AAAA,MAC1F;AACA;AAAA,IACF;AACA,SAAK,IAAI,MAAM;AACf,QAAI,OAAO,YAAY,IAAI,SAAS;AAClC,iBAAW,KAAK,EAAE,KAAK,IAAI,KAAK,OAAO,WAAW,UAAU,IAAI,SAAS,QAAQ,OAAO,QAAQ,CAAC;AAAA,IACnG;AAGA,UAAM,gBAAgB,CAAC,IAAI,kBAAkB,IAAI,UAAU,qBAAqB;AAChF,QAAI,iBAAiB,OAAO,qBAAqB,IAAI,kBAAkB;AACrE,iBAAW,KAAK;AAAA,QACd,KAAK,IAAI;AAAA,QACT,OAAO;AAAA,QACP,UAAU,IAAI;AAAA,QACd,QAAQ,OAAO;AAAA,MACjB,CAAC;AAAA,IACH;AACA,QACE,qBACA,CAAC,IAAI,kBACL,IAAI,aAAa,YACjB,IAAI,UAAU,QACd,OAAO,UAAU,QACjB,OAAO,aAAa,IAAI,UACxB;AACA,iBAAW,KAAK,EAAE,KAAK,IAAI,KAAK,OAAO,YAAY,UAAU,IAAI,UAAU,QAAQ,OAAO,SAAS,CAAC;AAAA,IACtG;AACA,UAAM,UAAU,kBAAkB,IAAI,QAAQ;AAC9C,UAAM,UAAU,kBAAkB,OAAO,SAAS;AAClD,QAAI,CAAC,SAAS,SAAS,OAAO,GAAG;AAC/B,iBAAW,KAAK,EAAE,KAAK,IAAI,KAAK,OAAO,aAAa,UAAU,SAAS,QAAQ,QAAQ,CAAC;AAAA,IAC1F;AAAA,EACF;AAEA,SAAO,EAAE,YAAY,YAAY,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,kBAAkB;AACvF;AASO,SAAS,mBACd,MACA,SACsB;AACtB,QAAM,cAAc,SAAS,QAAQ,CAAC;AACtC,SAAO,KAAK,IAAI,CAAC,QAAQ;AACvB,QAAI,CAAC,IAAI,eAAgB,QAAO;AAChC,UAAM,MACJ,YAAY,KAAK,CAAC,MAAM,EAAE,QAAQ,IAAI,OAAO,EAAE,gBAAgB,IAAI,UAAU,KAC7E,YAAY,KAAK,CAAC,MAAM,EAAE,QAAQ,IAAI,GAAG;AAC3C,QAAI,CAAC,IAAK,QAAO;AACjB,WAAO;AAAA,MACL,GAAG;AAAA,MACH,OAAO,IAAI;AAAA,MACX,kBAAkB,IAAI;AAAA,MACtB,UAAU,IAAI;AAAA,MACd,aAAa;AAAA,IACf;AAAA,EACF,CAAC;AACH;AASO,SAAS,qBAAqB,KAA4C;AAC/E,QAAM,SACJ,IAAI,gBAAgB,sBAAsB,SAAS,IAAI,WAAW,WAAW,aAAa;AAC5F,SAAO;AAAA,IACL,KAAK,IAAI;AAAA,IACT,OAAO,IAAI;AAAA,IACX,YAAY,IAAI;AAAA,IAChB;AAAA,IACA,OAAO;AAAA,IACP,OAAO,IAAI;AAAA,IACX,UAAU,kBAAkB,IAAI,SAAS;AAAA,IACzC,SAAS,IAAI;AAAA,IACb,kBAAkB,IAAI;AAAA,IACtB,UAAU,IAAI;AAAA,IACd,YAAY,EAAE,SAAS,IAAI,WAAW,SAAS,kBAAkB,IAAI,WAAW,iBAAiB;AAAA,IACjG,SAAS,IAAI;AAAA,IACb,QAAQ,cAAc,GAAG;AAAA,EAC3B;AACF;AAeO,SAAS,aAAa,MAA+C;AAC1E,QAAM,MAAgB,CAAC;AACvB,aAAW,OAAO,MAAM;AACtB,QAAI,IAAI,WAAW,IAAI,UAAU,UAAa,IAAI,SAAS,IAAI,GAAG,EAAG;AACrE,QAAI,KAAK,IAAI,GAAG;AAAA,EAClB;AACA,SAAO;AACT;AAEA,IAAM,wBAAwB,CAAC,sBAAsB,kBAAkB,gBAAgB;AAahF,SAAS,qBAAqB,YAAgE;AACnG,SAAO,WAAW,IAAI,CAAC,eAAe;AACpC,UAAM,MAAM,qBAAqB,UAAU;AAC3C,UAAM,aAAa,sBAAsB,KAAK,CAAC,MAAM,WAAW,IAAI,WAAW,CAAC,CAAC;AACjF,WAAO;AAAA,MACL,GAAG;AAAA,MACH,QAAQ,aAAa,aAAa;AAAA,MAClC,gBAAgB;AAAA,MAChB,aAAa;AAAA,IACf;AAAA,EACF,CAAC;AACH;AAEA,SAAS,cAAc,KAA2C;AAChE,QAAM,SAA4B,CAAC;AACnC,QAAM,QAAQ,IAAI;AAClB,QAAM,UAAU,IAAI,WAAW;AAC/B,QAAM,YAAY,IAAI,WAAW;AACjC,MAAI,YAAY,UAAW,QAAO,cAAc;AAEhD,QAAM,UAAW,cAAc,UAAU,CAAC,IAAI,WAAa,cAAc,WAAW,IAAI;AACxF,MAAI,YAAY,UAAU,SAAS;AACjC,WAAO,UAAU;AAAA,MACf,UAAU;AAAA,MACV,cAAc,CAAC;AAAA,MACf,kBAAkB,YAAY,SAAS,QAAQ;AAAA,IACjD;AAAA,EACF;AACA,MAAI,YAAY,SAAS;AAGvB,WAAO,QAAQ,EAAE,UAAU,MAAM,kBAAkB,MAAM;AAAA,EAC3D,WAAW,cAAc,SAAS;AAGhC,WAAO,QAAQ,IAAI,UAAU,EAAE,UAAU,KAAK,IAAI,EAAE,UAAU,OAAO,aAAa,KAAK;AAAA,EACzF;AACA,SAAO;AACT;AAKO,SAAS,YAAY,GAAsC;AAChE,MAAI,MAAM,QAAQ,MAAM,UAAa,CAAC,OAAO,SAAS,CAAC,EAAG,QAAO;AACjE,QAAM,MAAM,KAAK,IAAI,CAAC;AACtB,QAAM,OAAO,CAAC,MAAc,EAAE,QAAQ,QAAQ,EAAE;AAChD,MAAI,MAAM,IAAM,QAAO,OAAO,KAAK,MAAM,CAAC,CAAC;AAC3C,MAAI,MAAM,IAAS,QAAO,GAAG,MAAM,IAAI,KAAM,QAAQ,CAAC,CAAC,CAAC;AACxD,MAAI,MAAM,IAAW,QAAO,GAAG,KAAK,MAAM,IAAI,GAAI,CAAC;AACnD,SAAO,GAAG,MAAM,IAAI,KAAW,QAAQ,CAAC,CAAC,CAAC;AAC5C;","names":[]}
+{"version":3,"sources":["../../context/index.ts"],"sourcesContent":["/**\n * @ai-matrx/agents/context — the context value rules, headless.\n *\n * Contract: common-docs/systems/scopes-context/context-delivery/RULES.md.\n * Parity corpus: ./rules-corpus.json (run here by rules.test.ts and by aidream's\n * pytest against the Python twin `resolve_context_rule`). Every function here\n * is pure, zero-React, and safe to import on a server.\n *\n * The one flow a client runs per turn:\n *   rows    = values.map(v => resolveContextRow(v, savedRows, cap))   // what the table shows\n *   context = buildContextWire(rows)                                   // what the request sends\n *   …on `context_receipt`: compareReceipt(rows, receipt)               // screen vs server\n */\n\n// ── Constants ───────────────────────────────────────────────────────────────\n\n/** `users.user_surface_state.feature` for the person's saved rules. */\nexport const CONTEXT_RULES_FEATURE = \"context_rules\";\n/** Surface key for values no surface emitted (attachments, server-added values). */\nexport const DEFAULT_SURFACE_KEY = \"_default\";\n/** The server's default inline threshold when no layer sets one. */\nexport const DEFAULT_INLINE_MAX_CHARS = 200;\n/** The default ceiling every resolved limit is clamped to (a server knob). */\nexport const DEFAULT_INLINE_CAP = 50000;\n/** A lazy document's server default (RULES.md §2: \"a small lazy document 6000\"). */\nexport const LAZY_SOURCE_DEFAULT_MAX = 6000;\n\n// ── Types ───────────────────────────────────────────────────────────────────\n\n/** Which layer decided a field — lowest to highest. */\nexport type ContextLayer = \"default\" | \"page\" | \"agent\" | \"you\";\nexport type ContextDelivery = \"inline\" | \"on_request\" | \"off\";\n/**\n * A client row's delivery: the server's three, plus `\"server\"` — an included\n * value the server resolves itself (`isServerResolved`), whose delivery the\n * client does not claim. Never on the wire or in a receipt.\n */\nexport type ContextRowDelivery = ContextDelivery | \"server\";\n\n/** One saved per-person rule (one key on one surface). Both fields optional. */\nexport interface SavedContextRule {\n  include?: boolean;\n  max_inline_chars?: number;\n}\n\n/** `{ [surface_key]: { [context key]: SavedContextRule } }` — the person's rows. */\nexport type SavedContextRuleRows = Record<string, Record<string, SavedContextRule>>;\n\n/** The agent layer for one key (RULES.md §2). */\nexport interface ContextAgentLayer {\n  /** The agent's Context Policy declares this key (or the value is the agent's own seed). */\n  declared?: boolean;\n  /** The policy's ceiling; only read when `declared`. */\n  max_inline_chars?: number | null;\n  /** `auto_context_disabled` — closes every undeclared key. */\n  kill_switch?: boolean;\n}\n\n/** The page layer for one key: the surface that emitted the value. */\nexport interface ContextSurfaceLayer {\n  /** The surface declares this value (a `ui_surface_value` row / manifest entry). */\n  declared?: boolean;\n  /** `false` drops the value unless the agent declares it. */\n  auto_context?: boolean | null;\n  /** `inlineUpTo` / envelope `max_inline_chars` / DB column. */\n  max_inline_chars?: number | null;\n}\n\n/** The non-person layers for one value — what the table's layer breakdown shows. */\nexport interface ContextRuleLayers {\n  /** The server's per-key default limit; `null`/absent = 200. */\n  default_max?: number | null;\n  agent?: ContextAgentLayer | null;\n  surface?: ContextSurfaceLayer | null;\n}\n\n/**\n * Input to `resolveContextRule`. Snake case on purpose: it is the corpus shape\n * and the Python twin's shape. `user` is typed loosely because invalid saved\n * values (non-boolean include, non-integer or negative limit) must be ignored,\n * not trusted.\n */\nexport interface ContextRuleInput extends ContextRuleLayers {\n  /** Size in code points; `null` = an unresolved lazy source. */\n  chars: number | null;\n  user?: { include?: unknown; max_inline_chars?: unknown } | null;\n  /** Ceiling; default `DEFAULT_INLINE_CAP`. */\n  cap?: number;\n}\n\nexport interface ContextRuleResult {\n  include: boolean;\n  /** Effective limit, after the clamp. */\n  max_inline_chars: number;\n  delivery: ContextDelivery;\n  decided_by: { include: ContextLayer; max_inline_chars: ContextLayer };\n  clamped: boolean;\n}\n\n/** One receipt row — RULES.md §5, wire fields exactly. */\nexport interface ContextReceiptRow {\n  key: string;\n  label: string;\n  surface_key: string;\n  origin: \"client\" | \"server\" | \"surroundings\" | \"rule\";\n  chars: number | null;\n  include: boolean;\n  max_inline_chars: number;\n  delivery: ContextDelivery;\n  decided_by: { include: ContextLayer; max_inline_chars: ContextLayer };\n  user_rule: { include?: boolean; max_inline_chars?: number } | null;\n  clamped: boolean;\n  /** The CLIENT itself sent a value the person turned off. */\n  client_sent_excluded: boolean;\n  /** `\"model\"`: nothing reached a model that reads no context. */\n  /**\n   * `\"model\"`: nothing reached a model that reads no context. `\"self_check\"`:\n   * the server's post-render safety check stripped it (RULES.md §4/§5) —\n   * the row stays, `delivery: \"off\"`.\n   */\n  blocked_by: ContextBlockedBy | null;\n}\n\n/** The per-turn receipt the server streams as `context_receipt` — RULES.md §5. */\nexport interface ContextReceipt {\n  version: 1;\n  surface: string | null;\n  cap: number;\n  /** False: this turn's model cannot read context at all (every row `blocked_by: \"model\"`). */\n  model_reads_context: boolean;\n  /** The person's saved rules could not be read; the turn ran without them. */\n  rules_error: string | null;\n  rows: ContextReceiptRow[];\n}\n\nexport type ContextRowOrigin = \"page\" | \"attached\" | \"system\";\n\n/** Why the server kept a value from the model on this turn (receipt `blocked_by`). */\nexport type ContextBlockedBy = \"model\" | \"self_check\";\n\n/** A client's resolved row: what its table renders and what `buildContextWire` sends. */\nexport interface ResolvedContextRow extends Omit<ContextRuleResult, \"delivery\"> {\n  delivery: ContextRowDelivery;\n  /**\n   * The server resolves this value (a resource reference, a `*_id` UUID): size\n   * and delivery are unknown (`chars: null`, `delivery: \"server\"` when\n   * included), and its default limit is not predicted. Include and the\n   * person's own rule still resolve normally.\n   */\n  serverResolved?: boolean;\n  /** Display-only: chars / limit / delivery were filled from a receipt (`applyReceiptToRows`). */\n  fromReceipt?: boolean;\n  /** From a receipt: why the server kept this value from the model this turn. */\n  blockedBy?: ContextBlockedBy;\n  key: string;\n  label: string;\n  surfaceKey: string;\n  origin: ContextRowOrigin;\n  /** The raw value, or an already-rich envelope (`{ content, type, … }`). */\n  value: unknown;\n  chars: number | null;\n  /** The saved rule that was applied (merged `_default` + surface row), or null. */\n  userRule: SavedContextRule | null;\n  description?: string;\n  /** Context object type for the wire envelope (`text`, `json`, …). */\n  type?: string;\n  /** The non-person layers the rule was resolved from. Absent = default only. */\n  layers?: ContextRuleLayers;\n}\n\n/** What a client knows about one value before resolution. */\nexport interface ContextRowSource {\n  key: string;\n  label: string;\n  surfaceKey?: string;\n  origin: ContextRowOrigin;\n  value: unknown;\n  /** Override the measured size (e.g. `null` for an unresolved lazy source). */\n  chars?: number | null;\n  description?: string;\n  type?: string;\n  layers?: ContextRuleLayers;\n}\n\n// ── Helpers ─────────────────────────────────────────────────────────────────\n\nconst isNum = (v: unknown): v is number => typeof v === \"number\" && Number.isFinite(v);\nconst isValidLimit = (v: unknown): v is number =>\n  typeof v === \"number\" && Number.isInteger(v) && v >= 0;\n\n// ── resolveContextRule — RULES.md §2, line for line ─────────────────────────\n\nexport function resolveContextRule(input: ContextRuleInput): ContextRuleResult {\n  const agent = input.agent ?? null;\n  const surface = input.surface ?? null;\n  const user = input.user ?? null;\n  const cap = isNum(input.cap) ? input.cap : DEFAULT_INLINE_CAP;\n  const agentDeclared = agent?.declared === true;\n\n  let include = true;\n  let includeBy: ContextLayer = \"default\";\n  if (surface?.declared === true && surface.auto_context === false) {\n    if (agentDeclared) {\n      include = true;\n      includeBy = \"agent\";\n    } else {\n      include = false;\n      includeBy = \"page\";\n    }\n  }\n  if (agent?.kill_switch === true && !agentDeclared) {\n    include = false;\n    includeBy = \"agent\";\n  }\n  if (user && typeof user.include === \"boolean\") {\n    include = user.include;\n    includeBy = \"you\";\n  }\n\n  let limit = isNum(input.default_max) ? input.default_max : DEFAULT_INLINE_MAX_CHARS;\n  let limitBy: ContextLayer = \"default\";\n  const a = agentDeclared && isNum(agent?.max_inline_chars) ? agent.max_inline_chars : null;\n  const s = isNum(surface?.max_inline_chars) ? surface.max_inline_chars : null;\n  if (a !== null && s !== null) {\n    if (s < a) {\n      limit = s;\n      limitBy = \"page\";\n    } else {\n      limit = a;\n      limitBy = \"agent\";\n    }\n  } else if (a !== null) {\n    limit = a;\n    limitBy = \"agent\";\n  } else if (s !== null) {\n    limit = s;\n    limitBy = \"page\";\n  }\n  if (user && isValidLimit(user.max_inline_chars)) {\n    limit = user.max_inline_chars;\n    limitBy = \"you\";\n  }\n  const clamped = limit > cap;\n  limit = Math.min(limit, cap);\n\n  const chars = input.chars;\n  const delivery: ContextDelivery = !include\n    ? \"off\"\n    : chars === null || chars === undefined || limit === 0 || chars > limit\n      ? \"on_request\"\n      : \"inline\";\n\n  return {\n    include,\n    max_inline_chars: limit,\n    delivery,\n    decided_by: { include: includeBy, max_inline_chars: limitBy },\n    clamped,\n  };\n}\n\n// ── contextValueChars — RULES.md §1 ─────────────────────────────────────────\n\n/** Count Unicode code points (never UTF-16 units: `\"😀\".length` is 2). */\nfunction codePoints(s: string): number {\n  let n = 0;\n  for (const _ of s) n += 1;\n  return n;\n}\n\n/**\n * Size of a value in code points, exactly as the server's `content_as_str()`:\n * a string is itself; anything else is `JSON.stringify(value, null, 2)`\n * (Python `json.dumps(value, ensure_ascii=False, indent=2)`). `undefined` → 0.\n */\nexport function contextValueChars(value: unknown): number {\n  if (value === undefined) return 0;\n  if (typeof value === \"string\") return codePoints(value);\n  let text: string | undefined;\n  try {\n    text = JSON.stringify(value, null, 2);\n  } catch {\n    text = String(value);\n  }\n  return text === undefined ? 0 : codePoints(text);\n}\n\n// ── lookupSavedRule — RULES.md §3 ───────────────────────────────────────────\n\nfunction sanitizeRule(raw: unknown): SavedContextRule {\n  const out: SavedContextRule = {};\n  if (!raw || typeof raw !== \"object\") return out;\n  const r = raw as Record<string, unknown>;\n  if (typeof r.include === \"boolean\") out.include = r.include;\n  if (isValidLimit(r.max_inline_chars)) out.max_inline_chars = r.max_inline_chars;\n  return out;\n}\n\n/**\n * The person's rule for one key on one surface: `_default[key]` merged per\n * field under `rows[surfaceKey][key]`, invalid fields stripped. `null` when\n * nothing valid is saved.\n */\nexport function lookupSavedRule(\n  rows: SavedContextRuleRows | null | undefined,\n  surfaceKey: string,\n  key: string,\n): SavedContextRule | null {\n  if (!rows || typeof rows !== \"object\") return null;\n  const base = sanitizeRule(rows[DEFAULT_SURFACE_KEY]?.[key]);\n  const own = surfaceKey === DEFAULT_SURFACE_KEY ? {} : sanitizeRule(rows[surfaceKey]?.[key]);\n  const merged: SavedContextRule = { ...base, ...own };\n  return Object.keys(merged).length === 0 ? null : merged;\n}\n\n/**\n * The person's rule for one key, drift-proof (identical to aidream's\n * `lookup_user_rule_for`). While a primary surface P is in play, every key\n * filed under `_default` OR under P resolves to the same per-field merge\n * `{ ..._default[key], ...rows[P][key] }` (P wins) — whichever surface the\n * client's or the server's manifest says \"declares\" the key. A code manifest\n * and the DB manifest can disagree (sync drift); this makes the person's rule\n * land the same on both sides anyway. A surroundings key (any other surface)\n * keeps its own surface: `{ ..._default[key], ...rows[surfaceKey][key] }`.\n * With no primary surface this is exactly `lookupSavedRule`.\n *\n * Saving is unchanged: page values save to P, everything else to `_default`.\n */\nexport function lookupSavedRuleFor(\n  rows: SavedContextRuleRows | null | undefined,\n  primarySurface: string | null | undefined,\n  surfaceKey: string,\n  key: string,\n): SavedContextRule | null {\n  const primary = primarySurface && primarySurface !== DEFAULT_SURFACE_KEY ? primarySurface : null;\n  if (primary && (surfaceKey === DEFAULT_SURFACE_KEY || surfaceKey === primary)) {\n    return lookupSavedRule(rows, primary, key);\n  }\n  return lookupSavedRule(rows, surfaceKey, key);\n}\n\n// ── serverDefaultMax — the server's per-key default, read from the wire value ─\n\n/**\n * The keys that make a dict the rich envelope form — exactly aidream\n * `context_objects._RICH_FORM_KEYS`. A dict with ANY other key is raw content\n * on the server, `content` key or not.\n */\nexport const RICH_ENVELOPE_KEYS: ReadonlySet<string> = new Set([\n  \"content\",\n  \"mutable\",\n  \"persist\",\n  \"source\",\n  \"type\",\n  \"label\",\n  \"description\",\n  \"max_inline_chars\",\n  \"default_max_inline_chars\",\n  \"summary_agent_id\",\n]);\n\n/**\n * A UUID as the server's `_uuid` (Python `UUID(value.strip())`) accepts it:\n * hyphens optional, `{…}` braces and `urn:uuid:` prefixes allowed.\n */\nfunction isUuidLike(value: string): boolean {\n  const hex = value\n    .trim()\n    .replace(/urn:/gi, \"\")\n    .replace(/uuid:/gi, \"\")\n    .replace(/^\\{+|\\}+$/g, \"\")\n    .replace(/-/g, \"\");\n  return /^[0-9a-f]{32}$/i.test(hex);\n}\n\nfunction isPlainObject(v: unknown): v is Record<string, unknown> {\n  return !!v && typeof v === \"object\" && !Array.isArray(v);\n}\n\n/** A canonical resource reference the server promotes (aidream `parse_resource_reference`). */\nfunction isResourceRef(v: Record<string, unknown>): boolean {\n  if (v.__kind !== \"resource_ref\") return false;\n  const type = v.resource_type || v.type;\n  const id = v.resource_id || v.id;\n  return (\n    typeof type === \"string\" &&\n    type.trim() !== \"\" &&\n    typeof id === \"string\" &&\n    isUuidLike(id)\n  );\n}\n\nfunction hasOwn(o: Record<string, unknown>, k: string): boolean {\n  return Object.prototype.hasOwnProperty.call(o, k);\n}\n\nfunction onlyRichKeys(o: Record<string, unknown>): boolean {\n  return Object.keys(o).every((k) => RICH_ENVELOPE_KEYS.has(k));\n}\n\nfunction hasLazySource(o: Record<string, unknown>): boolean {\n  return isPlainObject(o.source) && typeof o.source.kind === \"string\";\n}\n\n/**\n * A rich envelope exactly as the server reads one (aidream\n * `_split_rich_context_value`): a plain object with its own `content` whose\n * every key is in `RICH_ENVELOPE_KEYS`. A record that merely HAS `content`\n * (a note `{ id, title, content }`) is raw content, not an envelope.\n */\nexport function isRichEnvelope(value: unknown): value is Record<string, unknown> {\n  return isPlainObject(value) && hasOwn(value, \"content\") && onlyRichKeys(value);\n}\n\n/** The source-only lazy pointer form: rich keys only, no `content`, a `source` with a `kind`. */\nfunction isLazyPointer(value: unknown): value is Record<string, unknown> {\n  return isPlainObject(value) && !hasOwn(value, \"content\") && onlyRichKeys(value) && hasLazySource(value);\n}\n\n/**\n * Split one wire value into `{ content, overrides }` exactly as aidream\n * `_split_rich_context_value`: a rich envelope or lazy pointer → its `content`\n * (null when absent) and every other key; anything else → the whole value as\n * content, no overrides.\n */\nexport function splitContextValue(value: unknown): {\n  content: unknown;\n  overrides: Record<string, unknown>;\n} {\n  if (isRichEnvelope(value) || isLazyPointer(value)) {\n    const { content = null, ...overrides } = value;\n    return { content, overrides };\n  }\n  return { content: value, overrides: {} };\n}\n\n/**\n * The server's default inline limit for one wire value — the `default` layer\n * the server will use, before page/agent/you. Mirrors aidream\n * `context_rules._server_default_max` over the object `ContextManifest.build`\n * makes from the value (after `normalize_resource_context`):\n *\n * - a rich envelope (every key in the rich-form set, and `content` present or a\n *   lazy `source` with a string `kind`) carrying a whole-number, non-negative\n *   `default_max_inline_chars` → that;\n * - a top-level resource reference (`__kind: \"resource_ref\"` with a type and a\n *   UUID id), or a lazy source whose `extra.resource_type` is set → 0\n *   (descriptor-first);\n * - a lazy source (a `source` and null/absent `content`) → 6000;\n * - anything else → null (the server's 200).\n *\n * A resource reference nested as an envelope's `content` is NOT promoted by the\n * server (it reads top-level values only), so it is plain JSON content → null.\n */\nexport function serverDefaultMax(value: unknown): number | null {\n  if (!isPlainObject(value)) return null;\n  if (isResourceRef(value)) return 0;\n  if (!isRichEnvelope(value) && !isLazyPointer(value)) return null;\n  if (isValidLimit(value.default_max_inline_chars)) return value.default_max_inline_chars;\n  if (hasLazySource(value) && (value.content === null || value.content === undefined)) {\n    const src = value.source as Record<string, unknown>;\n    const extra = isPlainObject(src.extra) ? src.extra : {};\n    return extra.resource_type ? 0 : LAZY_SOURCE_DEFAULT_MAX;\n  }\n  return null;\n}\n\n// ── resolveContextRow — the glue a client runs per value ────────────────────\n\n/** Resolve one value into the row the table renders and the wire sends. */\nexport function resolveContextRow(\n  source: ContextRowSource,\n  savedRows: SavedContextRuleRows | null | undefined,\n  cap: number = DEFAULT_INLINE_CAP,\n  /** The page in play; makes the rule lookup drift-proof (`lookupSavedRuleFor`). */\n  primarySurface?: string | null,\n): ResolvedContextRow {\n  const surfaceKey = source.surfaceKey ?? DEFAULT_SURFACE_KEY;\n  const serverResolved = isServerResolved(source.key, source.value);\n  const chars = serverResolved\n    ? null\n    : source.chars !== undefined\n      ? source.chars\n      : unresolvedSize(source.value)\n        ? null\n        : contextValueChars(splitContextValue(source.value).content);\n  const userRule = lookupSavedRuleFor(savedRows, primarySurface, surfaceKey, source.key);\n  const layers: ContextRuleLayers = { ...(source.layers ?? {}) };\n  if (!serverResolved && (layers.default_max === undefined || layers.default_max === null)) {\n    const serverDefault = serverDefaultMax(source.value);\n    if (serverDefault !== null) layers.default_max = serverDefault;\n  }\n  const result = resolveContextRule({ ...layers, chars, user: userRule, cap });\n  const row: ResolvedContextRow = {\n    ...result,\n    delivery: serverResolved && result.include ? \"server\" : result.delivery,\n    key: source.key,\n    label: source.label,\n    surfaceKey,\n    origin: source.origin,\n    value: source.value,\n    chars,\n    userRule,\n  };\n  if (source.description !== undefined) row.description = source.description;\n  if (source.type !== undefined) row.type = source.type;\n  if (source.layers !== undefined || layers.default_max !== undefined) row.layers = layers;\n  if (serverResolved) row.serverResolved = true;\n  return row;\n}\n\n// ── buildContextWire — the ONLY producer of a request's `context` ──────────\n\n/**\n * Size the server cannot know yet: a lazy pointer (or an envelope with a lazy\n * source and null content), or a resource reference it will promote to one.\n */\nfunction unresolvedSize(value: unknown): boolean {\n  if (!isPlainObject(value)) return false;\n  if (isResourceRef(value)) return true;\n  return (\n    (isRichEnvelope(value) || isLazyPointer(value)) &&\n    hasLazySource(value) &&\n    (value.content === null || value.content === undefined)\n  );\n}\n\nconst KIND_RESOURCE_REF = \"resource_ref\";\n\n/**\n * Values the server acts on by their top-level shape in `request.context`\n * (aidream `normalize_resource_context` → `parse_resource_reference`, which\n * reads ONLY top-level values):\n *\n * - a resource reference — any object whose `__kind` is `\"resource_ref\"`\n *   (its own promote/exclude/overlay policy rides inside it);\n * - a bare UUID string under a conventional `*_id` key (`file_id`,\n *   `attached_file_id`, `current_note_id`, …), which the server promotes when\n *   the noun is a registered resource type. The registry lives on the server,\n *   so every `*_id` key with a UUID passes through; for an unregistered noun\n *   the server reads the bare string exactly as it would read it wrapped.\n *\n * These ship exactly as-is: no label, type, description or limit added.\n */\nexport function isWireDirective(key: string, value: unknown): boolean {\n  if (isPlainObject(value)) return value.__kind === KIND_RESOURCE_REF;\n  return (\n    typeof value === \"string\" &&\n    isIdKey(key) &&\n    isUuidLike(value)\n  );\n}\n\n/** The server's key rule for promoting a bare id (`_resource_type_for_key`): a `*_id` key. */\nfunction isIdKey(key: string): boolean {\n  return key.trim().toLowerCase().endsWith(\"_id\");\n}\n\n/**\n * A value whose size, default limit and delivery the SERVER decides by\n * resolving it — so the client must not predict them:\n *\n * - a top-level resource reference (`__kind: \"resource_ref\"`), bare or as a\n *   rich envelope's `content`;\n * - a UUID string under a `*_id` key, bare or as a rich envelope's `content`.\n *\n * The server only promotes an id when its noun is in the resource registry\n * (aidream `_resource_type_for_key`), which the client cannot see, so every\n * `*_id` UUID counts. This is a deliberate superset: on a value the server\n * does not promote, the client only stops predicting — it never makes a wrong\n * promise.\n */\nexport function isServerResolved(key: string, value: unknown): boolean {\n  const inner = isRichEnvelope(value) ? value.content : value;\n  if (isPlainObject(inner)) return inner.__kind === KIND_RESOURCE_REF;\n  return typeof inner === \"string\" && isIdKey(key) && isUuidLike(inner);\n}\n\n/**\n * Build the request's `context` object from the resolved rows. This is the\n * ONLY function that may produce it, so what the table shows and what the\n * request carries cannot drift apart.\n *\n * - A row whose `include` is false is omitted entirely — it never reaches the\n *   wire (RULES.md §1: off means off everywhere).\n * - An included row becomes `{ content, type?, label, description?,\n *   max_inline_chars? }`. An already-rich envelope (`isRichEnvelope`, e.g. a\n *   working document carrying `source`/`mutable`/`persist`, or a lazy pointer)\n *   keeps every non-rule field it already has; `label`/`description`/`type`\n *   are only filled when missing.\n * - `max_inline_chars` on the envelope is the PAGE layer's value only\n *   (`layers.surface.max_inline_chars`, else the envelope's own page value).\n *   The server reads the person's saved rules itself every turn (RULES.md §3)\n *   and the agent layer from its own policy, so the wire must never carry the\n *   person's number or the resolved effective limit dressed up as a page rule\n *   — that would make a stale client value outrank the server's fresh read.\n */\nexport function buildContextWire(rows: readonly ResolvedContextRow[]): Record<string, unknown> {\n  const wire: Record<string, unknown> = {};\n  for (const row of rows) {\n    if (!row.include) continue;\n    // A row with no value (a receipt-built display row) has nothing to send.\n    if (row.value === undefined) continue;\n    // Rich: an envelope with `content`, or a source-only lazy pointer. Every\n    // non-rule field survives — including `default_max_inline_chars`, the\n    // server's per-key default (not a person's or a page's number).\n    // A record that merely has `content` is NOT rich: it is wrapped whole, or\n    // the server would read it as raw content and drop the envelope fields.\n    // A top-level directive the server acts on by SHAPE ships exactly as-is:\n    // wrapped, it becomes plain JSON and silently stops resolving.\n    if (isWireDirective(row.key, row.value)) {\n      wire[row.key] = row.value;\n      continue;\n    }\n    const rich = isRichEnvelope(row.value) || isLazyPointer(row.value);\n    const envelope: Record<string, unknown> = rich\n      ? { ...(row.value as Record<string, unknown>) }\n      : { content: row.value };\n    delete envelope.max_inline_chars;\n    if (envelope.type === undefined && row.type !== undefined) envelope.type = row.type;\n    if (envelope.label === undefined) envelope.label = row.label;\n    if (envelope.description === undefined && row.description !== undefined) {\n      envelope.description = row.description;\n    }\n    const pageLimit = row.layers?.surface?.max_inline_chars;\n    const ownPageLimit = rich ? (row.value as Record<string, unknown>).max_inline_chars : undefined;\n    if (isValidLimit(pageLimit)) envelope.max_inline_chars = pageLimit;\n    else if (isValidLimit(ownPageLimit)) envelope.max_inline_chars = ownPageLimit;\n    wire[row.key] = envelope;\n  }\n  return wire;\n}\n\n// ── compareReceipt — RULES.md §6 ────────────────────────────────────────────\n\nexport interface ContextReceiptMismatch {\n  key: string;\n  field: \"include\" | \"max_inline_chars\" | \"delivery\" | \"user_rule\" | \"missing\";\n  expected: unknown;\n  actual: unknown;\n  /**\n   * `\"self_check\"`: a real difference from what was shown — the server's\n   * safety check stripped the value before the model call. Say \"removed by\n   * the server's safety check\", not \"the screen was wrong\".\n   */\n  reason?: \"self_check\";\n}\n\nfunction normalizeUserRule(rule: SavedContextRule | null | undefined): SavedContextRule | null {\n  const clean = sanitizeRule(rule);\n  return Object.keys(clean).length === 0 ? null : clean;\n}\n\nfunction sameRule(a: SavedContextRule | null, b: SavedContextRule | null): boolean {\n  if (a === null || b === null) return a === b;\n  return a.include === b.include && a.max_inline_chars === b.max_inline_chars;\n}\n\n/**\n * Compare the rows the client resolved (and rendered, and sent) with the\n * receipt the server emitted for the same turn.\n *\n * For each expected row, the receipt row is matched by key + surface key, then\n * by key alone. Compared: `include`, `max_inline_chars`, `delivery` (only when\n * both sides know the size) and `user_rule`. An expected row absent from the\n * receipt is a `missing` mismatch — except a row the client correctly withheld\n * for a reason other than the person's own rule (page `auto_context` off, the\n * agent's kill switch): the client never sent it and the server lists only\n * the person's saved `include: false` rules as `origin: \"rule\"` rows, so its\n * absence is the truth, not a lie. Receipt rows nobody expected are returned\n * as `systemRows` — shown, never hidden.\n */\nexport function compareReceipt(\n  expected: readonly ResolvedContextRow[],\n  receipt: ContextReceipt,\n): { mismatches: ContextReceiptMismatch[]; systemRows: ContextReceiptRow[]; modelReadsContext: boolean } {\n  const mismatches: ContextReceiptMismatch[] = [];\n  // A turn whose model reads no context delivers nothing by design: every row\n  // is `delivery: \"off\"`, `blocked_by: \"model\"`. That is not a lie about the\n  // person's rules, so delivery is not compared; include / limit / rule still are.\n  const modelReadsContext = receipt.model_reads_context !== false;\n  const used = new Set<ContextReceiptRow>();\n  const rows = receipt.rows ?? [];\n\n  for (const exp of expected) {\n    const actual =\n      rows.find((r) => !used.has(r) && r.key === exp.key && r.surface_key === exp.surfaceKey) ??\n      rows.find((r) => !used.has(r) && r.key === exp.key);\n    if (!actual) {\n      const withheldByOthers = !exp.include && exp.decided_by.include !== \"you\";\n      if (!withheldByOthers) {\n        mismatches.push({ key: exp.key, field: \"missing\", expected: exp.delivery, actual: null });\n      }\n      continue;\n    }\n    used.add(actual);\n    if (actual.include !== exp.include) {\n      mismatches.push({ key: exp.key, field: \"include\", expected: exp.include, actual: actual.include });\n    }\n    // A server-resolved value's limit is only the client's to promise when the\n    // person set one; its default-derived limit and delivery are the server's.\n    const promisesLimit = !exp.serverResolved || exp.userRule?.max_inline_chars !== undefined;\n    if (promisesLimit && actual.max_inline_chars !== exp.max_inline_chars) {\n      mismatches.push({\n        key: exp.key,\n        field: \"max_inline_chars\",\n        expected: exp.max_inline_chars,\n        actual: actual.max_inline_chars,\n      });\n    }\n    // The safety check stripped a value the person included: always a\n    // mismatch (server-resolved or not), tagged with its reason.\n    const selfChecked = actual.blocked_by === \"self_check\" && exp.include;\n    if (selfChecked) {\n      mismatches.push({\n        key: exp.key,\n        field: \"delivery\",\n        expected: exp.delivery,\n        actual: actual.delivery,\n        reason: \"self_check\",\n      });\n    }\n    if (\n      !selfChecked &&\n      modelReadsContext &&\n      !exp.serverResolved &&\n      exp.delivery !== \"server\" &&\n      exp.chars !== null &&\n      actual.chars !== null &&\n      actual.delivery !== exp.delivery\n    ) {\n      mismatches.push({ key: exp.key, field: \"delivery\", expected: exp.delivery, actual: actual.delivery });\n    }\n    const expRule = normalizeUserRule(exp.userRule);\n    const actRule = normalizeUserRule(actual.user_rule);\n    if (!sameRule(expRule, actRule)) {\n      mismatches.push({ key: exp.key, field: \"user_rule\", expected: expRule, actual: actRule });\n    }\n  }\n\n  return { mismatches, systemRows: rows.filter((r) => !used.has(r)), modelReadsContext };\n}\n\n/**\n * For DISPLAY only: fill each server-resolved row's `chars`,\n * `max_inline_chars` and `delivery` from the latest receipt row for the same\n * key (key + surface key, then key), marking it `fromReceipt`. Other rows are\n * returned unchanged. Never compare these rows — `compareReceipt` takes the\n * rows the client resolved before sending.\n */\nexport function applyReceiptToRows(\n  rows: readonly ResolvedContextRow[],\n  receipt: ContextReceipt | null | undefined,\n): ResolvedContextRow[] {\n  const receiptRows = receipt?.rows ?? [];\n  return rows.map((row) => {\n    if (!row.serverResolved) return row;\n    const hit =\n      receiptRows.find((r) => r.key === row.key && r.surface_key === row.surfaceKey) ??\n      receiptRows.find((r) => r.key === row.key);\n    if (!hit) return row;\n    return {\n      ...row,\n      chars: hit.chars,\n      max_inline_chars: hit.max_inline_chars,\n      delivery: hit.delivery,\n      fromReceipt: true,\n      ...(hit.blocked_by ? { blockedBy: hit.blocked_by } : {}),\n    };\n  });\n}\n\n// ── receiptRowToResolved — read-only rows for a sent message ────────────────\n\n/**\n * Turn one receipt row into the row a read-only table renders (a sent\n * message's context, read back from `chat.message.model_context`). The value\n * itself is not in the receipt, so `value` is undefined.\n */\nexport function receiptRowToResolved(row: ContextReceiptRow): ResolvedContextRow {\n  const origin: ContextRowOrigin =\n    row.surface_key !== DEFAULT_SURFACE_KEY ? \"page\" : row.origin === \"client\" ? \"attached\" : \"system\";\n  return {\n    key: row.key,\n    label: row.label,\n    surfaceKey: row.surface_key,\n    origin,\n    value: undefined,\n    chars: row.chars,\n    userRule: normalizeUserRule(row.user_rule),\n    include: row.include,\n    max_inline_chars: row.max_inline_chars,\n    delivery: row.delivery,\n    decided_by: { include: row.decided_by.include, max_inline_chars: row.decided_by.max_inline_chars },\n    clamped: row.clamped,\n    layers: receiptLayers(row),\n    ...(row.blocked_by ? { blockedBy: row.blocked_by } : {}),\n  };\n}\n\n/**\n * Rebuild the non-person layers from what the server applied, so a read-only\n * table shows the applied limit as the inherited value and marks the layer\n * that decided it. The limit goes on the layer named by\n * `decided_by.max_inline_chars` (`you` is carried by `userRule`); include is\n * rebuilt the same way for a page `auto_context` off or the agent's kill switch.\n */\n/**\n * Keys the client has a value for but is NOT sending this turn (excluded by\n * the page, the agent or the person's rule). Clients send this list as the\n * request's `context_withheld`, so the receipt's `origin: \"rule\"` rows are\n * limited to keys actually withheld on this page. Deduplicated, in row order.\n */\nexport function withheldKeys(rows: readonly ResolvedContextRow[]): string[] {\n  const out: string[] = [];\n  for (const row of rows) {\n    if (row.include || row.value === undefined || out.includes(row.key)) continue;\n    out.push(row.key);\n  }\n  return out;\n}\n\nconst DOCUMENT_KEY_PREFIXES = [\"attached_document_\", \"attached_file_\", \"resource_file_\"];\n\n/**\n * Receipt rows the client never sent (`compareReceipt(...).systemRows`:\n * server-seeded attachments, scope seeds, saved off-rules…) as table rows, so\n * a person can see and govern them — the normal Include switch and Inline max\n * apply. Documents (`attached_document_*`, `attached_file_*`,\n * `resource_file_*`) group as \"attached\", everything else as \"system\". The\n * server resolved them (`serverResolved`), values come from the receipt\n * (`fromReceipt`), and `surfaceKey` is the row's own `surface_key` — so a rule\n * saved for one writes to `_default` unless the server filed it under a page.\n * `value` is undefined: `buildContextWire` never sends these rows.\n */\nexport function systemRowsToResolved(systemRows: readonly ContextReceiptRow[]): ResolvedContextRow[] {\n  return systemRows.map((receiptRow) => {\n    const row = receiptRowToResolved(receiptRow);\n    const isDocument = DOCUMENT_KEY_PREFIXES.some((p) => receiptRow.key.startsWith(p));\n    return {\n      ...row,\n      origin: isDocument ? \"attached\" : \"system\",\n      serverResolved: true,\n      fromReceipt: true,\n    };\n  });\n}\n\nfunction receiptLayers(row: ContextReceiptRow): ContextRuleLayers {\n  const layers: ContextRuleLayers = {};\n  const limit = row.max_inline_chars;\n  const limitBy = row.decided_by.max_inline_chars;\n  const includeBy = row.decided_by.include;\n  if (limitBy === \"default\") layers.default_max = limit;\n  // Page auto_context off: the page dropped it, or the agent re-admitted it.\n  const pageOff = (includeBy === \"page\" && !row.include) || (includeBy === \"agent\" && row.include);\n  if (limitBy === \"page\" || pageOff) {\n    layers.surface = {\n      declared: true,\n      auto_context: !pageOff,\n      max_inline_chars: limitBy === \"page\" ? limit : null,\n    };\n  }\n  if (limitBy === \"agent\") {\n    // An agent limit means the key is declared; a declared key the agent decided to include\n    // was re-admitted past a page auto_context off. (The kill switch never closes a declared key.)\n    layers.agent = { declared: true, max_inline_chars: limit };\n  } else if (includeBy === \"agent\") {\n    // Off = the kill switch closing an undeclared key; on = a declaration re-admitting a\n    // page auto_context-off value.\n    layers.agent = row.include ? { declared: true } : { declared: false, kill_switch: true };\n  }\n  return layers;\n}\n\n// ── Display ─────────────────────────────────────────────────────────────────\n\n/** Compact size for a tabular column: `950`, `18.4k`, `184k`, `1.2M`, `—` for unknown. */\nexport function formatChars(n: number | null | undefined): string {\n  if (n === null || n === undefined || !Number.isFinite(n)) return \"—\";\n  const abs = Math.abs(n);\n  const trim = (s: string) => s.replace(/\\.0$/, \"\");\n  if (abs < 1000) return String(Math.round(n));\n  if (abs < 100_000) return `${trim((n / 1000).toFixed(1))}k`;\n  if (abs < 1_000_000) return `${Math.round(n / 1000)}k`;\n  return `${trim((n / 1_000_000).toFixed(1))}M`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAiBO,IAAM,wBAAwB;AAE9B,IAAM,sBAAsB;AAE5B,IAAM,2BAA2B;AAEjC,IAAM,qBAAqB;AAE3B,IAAM,0BAA0B;AAiKvC,IAAM,QAAQ,CAAC,MAA4B,OAAO,MAAM,YAAY,OAAO,SAAS,CAAC;AACrF,IAAM,eAAe,CAAC,MACpB,OAAO,MAAM,YAAY,OAAO,UAAU,CAAC,KAAK,KAAK;AAIhD,SAAS,mBAAmB,OAA4C;AAC7E,QAAM,QAAQ,MAAM,SAAS;AAC7B,QAAM,UAAU,MAAM,WAAW;AACjC,QAAM,OAAO,MAAM,QAAQ;AAC3B,QAAM,MAAM,MAAM,MAAM,GAAG,IAAI,MAAM,MAAM;AAC3C,QAAM,gBAAgB,OAAO,aAAa;AAE1C,MAAI,UAAU;AACd,MAAI,YAA0B;AAC9B,MAAI,SAAS,aAAa,QAAQ,QAAQ,iBAAiB,OAAO;AAChE,QAAI,eAAe;AACjB,gBAAU;AACV,kBAAY;AAAA,IACd,OAAO;AACL,gBAAU;AACV,kBAAY;AAAA,IACd;AAAA,EACF;AACA,MAAI,OAAO,gBAAgB,QAAQ,CAAC,eAAe;AACjD,cAAU;AACV,gBAAY;AAAA,EACd;AACA,MAAI,QAAQ,OAAO,KAAK,YAAY,WAAW;AAC7C,cAAU,KAAK;AACf,gBAAY;AAAA,EACd;AAEA,MAAI,QAAQ,MAAM,MAAM,WAAW,IAAI,MAAM,cAAc;AAC3D,MAAI,UAAwB;AAC5B,QAAM,IAAI,iBAAiB,MAAM,OAAO,gBAAgB,IAAI,MAAM,mBAAmB;AACrF,QAAM,IAAI,MAAM,SAAS,gBAAgB,IAAI,QAAQ,mBAAmB;AACxE,MAAI,MAAM,QAAQ,MAAM,MAAM;AAC5B,QAAI,IAAI,GAAG;AACT,cAAQ;AACR,gBAAU;AAAA,IACZ,OAAO;AACL,cAAQ;AACR,gBAAU;AAAA,IACZ;AAAA,EACF,WAAW,MAAM,MAAM;AACrB,YAAQ;AACR,cAAU;AAAA,EACZ,WAAW,MAAM,MAAM;AACrB,YAAQ;AACR,cAAU;AAAA,EACZ;AACA,MAAI,QAAQ,aAAa,KAAK,gBAAgB,GAAG;AAC/C,YAAQ,KAAK;AACb,cAAU;AAAA,EACZ;AACA,QAAM,UAAU,QAAQ;AACxB,UAAQ,KAAK,IAAI,OAAO,GAAG;AAE3B,QAAM,QAAQ,MAAM;AACpB,QAAM,WAA4B,CAAC,UAC/B,QACA,UAAU,QAAQ,UAAU,UAAa,UAAU,KAAK,QAAQ,QAC9D,eACA;AAEN,SAAO;AAAA,IACL;AAAA,IACA,kBAAkB;AAAA,IAClB;AAAA,IACA,YAAY,EAAE,SAAS,WAAW,kBAAkB,QAAQ;AAAA,IAC5D;AAAA,EACF;AACF;AAKA,SAAS,WAAW,GAAmB;AACrC,MAAI,IAAI;AACR,aAAW,KAAK,EAAG,MAAK;AACxB,SAAO;AACT;AAOO,SAAS,kBAAkB,OAAwB;AACxD,MAAI,UAAU,OAAW,QAAO;AAChC,MAAI,OAAO,UAAU,SAAU,QAAO,WAAW,KAAK;AACtD,MAAI;AACJ,MAAI;AACF,WAAO,KAAK,UAAU,OAAO,MAAM,CAAC;AAAA,EACtC,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACA,SAAO,SAAS,SAAY,IAAI,WAAW,IAAI;AACjD;AAIA,SAAS,aAAa,KAAgC;AACpD,QAAM,MAAwB,CAAC;AAC/B,MAAI,CAAC,OAAO,OAAO,QAAQ,SAAU,QAAO;AAC5C,QAAM,IAAI;AACV,MAAI,OAAO,EAAE,YAAY,UAAW,KAAI,UAAU,EAAE;AACpD,MAAI,aAAa,EAAE,gBAAgB,EAAG,KAAI,mBAAmB,EAAE;AAC/D,SAAO;AACT;AAOO,SAAS,gBACd,MACA,YACA,KACyB;AACzB,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,QAAM,OAAO,aAAa,KAAK,mBAAmB,IAAI,GAAG,CAAC;AAC1D,QAAM,MAAM,eAAe,sBAAsB,CAAC,IAAI,aAAa,KAAK,UAAU,IAAI,GAAG,CAAC;AAC1F,QAAM,SAA2B,EAAE,GAAG,MAAM,GAAG,IAAI;AACnD,SAAO,OAAO,KAAK,MAAM,EAAE,WAAW,IAAI,OAAO;AACnD;AAeO,SAAS,mBACd,MACA,gBACA,YACA,KACyB;AACzB,QAAM,UAAU,kBAAkB,mBAAmB,sBAAsB,iBAAiB;AAC5F,MAAI,YAAY,eAAe,uBAAuB,eAAe,UAAU;AAC7E,WAAO,gBAAgB,MAAM,SAAS,GAAG;AAAA,EAC3C;AACA,SAAO,gBAAgB,MAAM,YAAY,GAAG;AAC9C;AASO,IAAM,qBAA0C,oBAAI,IAAI;AAAA,EAC7D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAMD,SAAS,WAAW,OAAwB;AAC1C,QAAM,MAAM,MACT,KAAK,EACL,QAAQ,UAAU,EAAE,EACpB,QAAQ,WAAW,EAAE,EACrB,QAAQ,cAAc,EAAE,EACxB,QAAQ,MAAM,EAAE;AACnB,SAAO,kBAAkB,KAAK,GAAG;AACnC;AAEA,SAAS,cAAc,GAA0C;AAC/D,SAAO,CAAC,CAAC,KAAK,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,CAAC;AACzD;AAGA,SAAS,cAAc,GAAqC;AAC1D,MAAI,EAAE,WAAW,eAAgB,QAAO;AACxC,QAAM,OAAO,EAAE,iBAAiB,EAAE;AAClC,QAAM,KAAK,EAAE,eAAe,EAAE;AAC9B,SACE,OAAO,SAAS,YAChB,KAAK,KAAK,MAAM,MAChB,OAAO,OAAO,YACd,WAAW,EAAE;AAEjB;AAEA,SAAS,OAAO,GAA4B,GAAoB;AAC9D,SAAO,OAAO,UAAU,eAAe,KAAK,GAAG,CAAC;AAClD;AAEA,SAAS,aAAa,GAAqC;AACzD,SAAO,OAAO,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,mBAAmB,IAAI,CAAC,CAAC;AAC9D;AAEA,SAAS,cAAc,GAAqC;AAC1D,SAAO,cAAc,EAAE,MAAM,KAAK,OAAO,EAAE,OAAO,SAAS;AAC7D;AAQO,SAAS,eAAe,OAAkD;AAC/E,SAAO,cAAc,KAAK,KAAK,OAAO,OAAO,SAAS,KAAK,aAAa,KAAK;AAC/E;AAGA,SAAS,cAAc,OAAkD;AACvE,SAAO,cAAc,KAAK,KAAK,CAAC,OAAO,OAAO,SAAS,KAAK,aAAa,KAAK,KAAK,cAAc,KAAK;AACxG;AAQO,SAAS,kBAAkB,OAGhC;AACA,MAAI,eAAe,KAAK,KAAK,cAAc,KAAK,GAAG;AACjD,UAAM,EAAE,UAAU,MAAM,GAAG,UAAU,IAAI;AACzC,WAAO,EAAE,SAAS,UAAU;AAAA,EAC9B;AACA,SAAO,EAAE,SAAS,OAAO,WAAW,CAAC,EAAE;AACzC;AAoBO,SAAS,iBAAiB,OAA+B;AAC9D,MAAI,CAAC,cAAc,KAAK,EAAG,QAAO;AAClC,MAAI,cAAc,KAAK,EAAG,QAAO;AACjC,MAAI,CAAC,eAAe,KAAK,KAAK,CAAC,cAAc,KAAK,EAAG,QAAO;AAC5D,MAAI,aAAa,MAAM,wBAAwB,EAAG,QAAO,MAAM;AAC/D,MAAI,cAAc,KAAK,MAAM,MAAM,YAAY,QAAQ,MAAM,YAAY,SAAY;AACnF,UAAM,MAAM,MAAM;AAClB,UAAM,QAAQ,cAAc,IAAI,KAAK,IAAI,IAAI,QAAQ,CAAC;AACtD,WAAO,MAAM,gBAAgB,IAAI;AAAA,EACnC;AACA,SAAO;AACT;AAKO,SAAS,kBACd,QACA,WACA,MAAc,oBAEd,gBACoB;AACpB,QAAM,aAAa,OAAO,cAAc;AACxC,QAAM,iBAAiB,iBAAiB,OAAO,KAAK,OAAO,KAAK;AAChE,QAAM,QAAQ,iBACV,OACA,OAAO,UAAU,SACf,OAAO,QACP,eAAe,OAAO,KAAK,IACzB,OACA,kBAAkB,kBAAkB,OAAO,KAAK,EAAE,OAAO;AACjE,QAAM,WAAW,mBAAmB,WAAW,gBAAgB,YAAY,OAAO,GAAG;AACrF,QAAM,SAA4B,EAAE,GAAI,OAAO,UAAU,CAAC,EAAG;AAC7D,MAAI,CAAC,mBAAmB,OAAO,gBAAgB,UAAa,OAAO,gBAAgB,OAAO;AACxF,UAAM,gBAAgB,iBAAiB,OAAO,KAAK;AACnD,QAAI,kBAAkB,KAAM,QAAO,cAAc;AAAA,EACnD;AACA,QAAM,SAAS,mBAAmB,EAAE,GAAG,QAAQ,OAAO,MAAM,UAAU,IAAI,CAAC;AAC3E,QAAM,MAA0B;AAAA,IAC9B,GAAG;AAAA,IACH,UAAU,kBAAkB,OAAO,UAAU,WAAW,OAAO;AAAA,IAC/D,KAAK,OAAO;AAAA,IACZ,OAAO,OAAO;AAAA,IACd;AAAA,IACA,QAAQ,OAAO;AAAA,IACf,OAAO,OAAO;AAAA,IACd;AAAA,IACA;AAAA,EACF;AACA,MAAI,OAAO,gBAAgB,OAAW,KAAI,cAAc,OAAO;AAC/D,MAAI,OAAO,SAAS,OAAW,KAAI,OAAO,OAAO;AACjD,MAAI,OAAO,WAAW,UAAa,OAAO,gBAAgB,OAAW,KAAI,SAAS;AAClF,MAAI,eAAgB,KAAI,iBAAiB;AACzC,SAAO;AACT;AAQA,SAAS,eAAe,OAAyB;AAC/C,MAAI,CAAC,cAAc,KAAK,EAAG,QAAO;AAClC,MAAI,cAAc,KAAK,EAAG,QAAO;AACjC,UACG,eAAe,KAAK,KAAK,cAAc,KAAK,MAC7C,cAAc,KAAK,MAClB,MAAM,YAAY,QAAQ,MAAM,YAAY;AAEjD;AAEA,IAAM,oBAAoB;AAiBnB,SAAS,gBAAgB,KAAa,OAAyB;AACpE,MAAI,cAAc,KAAK,EAAG,QAAO,MAAM,WAAW;AAClD,SACE,OAAO,UAAU,YACjB,QAAQ,GAAG,KACX,WAAW,KAAK;AAEpB;AAGA,SAAS,QAAQ,KAAsB;AACrC,SAAO,IAAI,KAAK,EAAE,YAAY,EAAE,SAAS,KAAK;AAChD;AAgBO,SAAS,iBAAiB,KAAa,OAAyB;AACrE,QAAM,QAAQ,eAAe,KAAK,IAAI,MAAM,UAAU;AACtD,MAAI,cAAc,KAAK,EAAG,QAAO,MAAM,WAAW;AAClD,SAAO,OAAO,UAAU,YAAY,QAAQ,GAAG,KAAK,WAAW,KAAK;AACtE;AAqBO,SAAS,iBAAiB,MAA8D;AAC7F,QAAM,OAAgC,CAAC;AACvC,aAAW,OAAO,MAAM;AACtB,QAAI,CAAC,IAAI,QAAS;AAElB,QAAI,IAAI,UAAU,OAAW;AAQ7B,QAAI,gBAAgB,IAAI,KAAK,IAAI,KAAK,GAAG;AACvC,WAAK,IAAI,GAAG,IAAI,IAAI;AACpB;AAAA,IACF;AACA,UAAM,OAAO,eAAe,IAAI,KAAK,KAAK,cAAc,IAAI,KAAK;AACjE,UAAM,WAAoC,OACtC,EAAE,GAAI,IAAI,MAAkC,IAC5C,EAAE,SAAS,IAAI,MAAM;AACzB,WAAO,SAAS;AAChB,QAAI,SAAS,SAAS,UAAa,IAAI,SAAS,OAAW,UAAS,OAAO,IAAI;AAC/E,QAAI,SAAS,UAAU,OAAW,UAAS,QAAQ,IAAI;AACvD,QAAI,SAAS,gBAAgB,UAAa,IAAI,gBAAgB,QAAW;AACvE,eAAS,cAAc,IAAI;AAAA,IAC7B;AACA,UAAM,YAAY,IAAI,QAAQ,SAAS;AACvC,UAAM,eAAe,OAAQ,IAAI,MAAkC,mBAAmB;AACtF,QAAI,aAAa,SAAS,EAAG,UAAS,mBAAmB;AAAA,aAChD,aAAa,YAAY,EAAG,UAAS,mBAAmB;AACjE,SAAK,IAAI,GAAG,IAAI;AAAA,EAClB;AACA,SAAO;AACT;AAiBA,SAAS,kBAAkB,MAAoE;AAC7F,QAAM,QAAQ,aAAa,IAAI;AAC/B,SAAO,OAAO,KAAK,KAAK,EAAE,WAAW,IAAI,OAAO;AAClD;AAEA,SAAS,SAAS,GAA4B,GAAqC;AACjF,MAAI,MAAM,QAAQ,MAAM,KAAM,QAAO,MAAM;AAC3C,SAAO,EAAE,YAAY,EAAE,WAAW,EAAE,qBAAqB,EAAE;AAC7D;AAgBO,SAAS,eACd,UACA,SACuG;AACvG,QAAM,aAAuC,CAAC;AAI9C,QAAM,oBAAoB,QAAQ,wBAAwB;AAC1D,QAAM,OAAO,oBAAI,IAAuB;AACxC,QAAM,OAAO,QAAQ,QAAQ,CAAC;AAE9B,aAAW,OAAO,UAAU;AAC1B,UAAM,SACJ,KAAK,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,QAAQ,IAAI,OAAO,EAAE,gBAAgB,IAAI,UAAU,KACtF,KAAK,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,QAAQ,IAAI,GAAG;AACpD,QAAI,CAAC,QAAQ;AACX,YAAM,mBAAmB,CAAC,IAAI,WAAW,IAAI,WAAW,YAAY;AACpE,UAAI,CAAC,kBAAkB;AACrB,mBAAW,KAAK,EAAE,KAAK,IAAI,KAAK,OAAO,WAAW,UAAU,IAAI,UAAU,QAAQ,KAAK,CAAC;AAAA,MAC1F;AACA;AAAA,IACF;AACA,SAAK,IAAI,MAAM;AACf,QAAI,OAAO,YAAY,IAAI,SAAS;AAClC,iBAAW,KAAK,EAAE,KAAK,IAAI,KAAK,OAAO,WAAW,UAAU,IAAI,SAAS,QAAQ,OAAO,QAAQ,CAAC;AAAA,IACnG;AAGA,UAAM,gBAAgB,CAAC,IAAI,kBAAkB,IAAI,UAAU,qBAAqB;AAChF,QAAI,iBAAiB,OAAO,qBAAqB,IAAI,kBAAkB;AACrE,iBAAW,KAAK;AAAA,QACd,KAAK,IAAI;AAAA,QACT,OAAO;AAAA,QACP,UAAU,IAAI;AAAA,QACd,QAAQ,OAAO;AAAA,MACjB,CAAC;AAAA,IACH;AAGA,UAAM,cAAc,OAAO,eAAe,gBAAgB,IAAI;AAC9D,QAAI,aAAa;AACf,iBAAW,KAAK;AAAA,QACd,KAAK,IAAI;AAAA,QACT,OAAO;AAAA,QACP,UAAU,IAAI;AAAA,QACd,QAAQ,OAAO;AAAA,QACf,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AACA,QACE,CAAC,eACD,qBACA,CAAC,IAAI,kBACL,IAAI,aAAa,YACjB,IAAI,UAAU,QACd,OAAO,UAAU,QACjB,OAAO,aAAa,IAAI,UACxB;AACA,iBAAW,KAAK,EAAE,KAAK,IAAI,KAAK,OAAO,YAAY,UAAU,IAAI,UAAU,QAAQ,OAAO,SAAS,CAAC;AAAA,IACtG;AACA,UAAM,UAAU,kBAAkB,IAAI,QAAQ;AAC9C,UAAM,UAAU,kBAAkB,OAAO,SAAS;AAClD,QAAI,CAAC,SAAS,SAAS,OAAO,GAAG;AAC/B,iBAAW,KAAK,EAAE,KAAK,IAAI,KAAK,OAAO,aAAa,UAAU,SAAS,QAAQ,QAAQ,CAAC;AAAA,IAC1F;AAAA,EACF;AAEA,SAAO,EAAE,YAAY,YAAY,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,kBAAkB;AACvF;AASO,SAAS,mBACd,MACA,SACsB;AACtB,QAAM,cAAc,SAAS,QAAQ,CAAC;AACtC,SAAO,KAAK,IAAI,CAAC,QAAQ;AACvB,QAAI,CAAC,IAAI,eAAgB,QAAO;AAChC,UAAM,MACJ,YAAY,KAAK,CAAC,MAAM,EAAE,QAAQ,IAAI,OAAO,EAAE,gBAAgB,IAAI,UAAU,KAC7E,YAAY,KAAK,CAAC,MAAM,EAAE,QAAQ,IAAI,GAAG;AAC3C,QAAI,CAAC,IAAK,QAAO;AACjB,WAAO;AAAA,MACL,GAAG;AAAA,MACH,OAAO,IAAI;AAAA,MACX,kBAAkB,IAAI;AAAA,MACtB,UAAU,IAAI;AAAA,MACd,aAAa;AAAA,MACb,GAAI,IAAI,aAAa,EAAE,WAAW,IAAI,WAAW,IAAI,CAAC;AAAA,IACxD;AAAA,EACF,CAAC;AACH;AASO,SAAS,qBAAqB,KAA4C;AAC/E,QAAM,SACJ,IAAI,gBAAgB,sBAAsB,SAAS,IAAI,WAAW,WAAW,aAAa;AAC5F,SAAO;AAAA,IACL,KAAK,IAAI;AAAA,IACT,OAAO,IAAI;AAAA,IACX,YAAY,IAAI;AAAA,IAChB;AAAA,IACA,OAAO;AAAA,IACP,OAAO,IAAI;AAAA,IACX,UAAU,kBAAkB,IAAI,SAAS;AAAA,IACzC,SAAS,IAAI;AAAA,IACb,kBAAkB,IAAI;AAAA,IACtB,UAAU,IAAI;AAAA,IACd,YAAY,EAAE,SAAS,IAAI,WAAW,SAAS,kBAAkB,IAAI,WAAW,iBAAiB;AAAA,IACjG,SAAS,IAAI;AAAA,IACb,QAAQ,cAAc,GAAG;AAAA,IACzB,GAAI,IAAI,aAAa,EAAE,WAAW,IAAI,WAAW,IAAI,CAAC;AAAA,EACxD;AACF;AAeO,SAAS,aAAa,MAA+C;AAC1E,QAAM,MAAgB,CAAC;AACvB,aAAW,OAAO,MAAM;AACtB,QAAI,IAAI,WAAW,IAAI,UAAU,UAAa,IAAI,SAAS,IAAI,GAAG,EAAG;AACrE,QAAI,KAAK,IAAI,GAAG;AAAA,EAClB;AACA,SAAO;AACT;AAEA,IAAM,wBAAwB,CAAC,sBAAsB,kBAAkB,gBAAgB;AAahF,SAAS,qBAAqB,YAAgE;AACnG,SAAO,WAAW,IAAI,CAAC,eAAe;AACpC,UAAM,MAAM,qBAAqB,UAAU;AAC3C,UAAM,aAAa,sBAAsB,KAAK,CAAC,MAAM,WAAW,IAAI,WAAW,CAAC,CAAC;AACjF,WAAO;AAAA,MACL,GAAG;AAAA,MACH,QAAQ,aAAa,aAAa;AAAA,MAClC,gBAAgB;AAAA,MAChB,aAAa;AAAA,IACf;AAAA,EACF,CAAC;AACH;AAEA,SAAS,cAAc,KAA2C;AAChE,QAAM,SAA4B,CAAC;AACnC,QAAM,QAAQ,IAAI;AAClB,QAAM,UAAU,IAAI,WAAW;AAC/B,QAAM,YAAY,IAAI,WAAW;AACjC,MAAI,YAAY,UAAW,QAAO,cAAc;AAEhD,QAAM,UAAW,cAAc,UAAU,CAAC,IAAI,WAAa,cAAc,WAAW,IAAI;AACxF,MAAI,YAAY,UAAU,SAAS;AACjC,WAAO,UAAU;AAAA,MACf,UAAU;AAAA,MACV,cAAc,CAAC;AAAA,MACf,kBAAkB,YAAY,SAAS,QAAQ;AAAA,IACjD;AAAA,EACF;AACA,MAAI,YAAY,SAAS;AAGvB,WAAO,QAAQ,EAAE,UAAU,MAAM,kBAAkB,MAAM;AAAA,EAC3D,WAAW,cAAc,SAAS;AAGhC,WAAO,QAAQ,IAAI,UAAU,EAAE,UAAU,KAAK,IAAI,EAAE,UAAU,OAAO,aAAa,KAAK;AAAA,EACzF;AACA,SAAO;AACT;AAKO,SAAS,YAAY,GAAsC;AAChE,MAAI,MAAM,QAAQ,MAAM,UAAa,CAAC,OAAO,SAAS,CAAC,EAAG,QAAO;AACjE,QAAM,MAAM,KAAK,IAAI,CAAC;AACtB,QAAM,OAAO,CAAC,MAAc,EAAE,QAAQ,QAAQ,EAAE;AAChD,MAAI,MAAM,IAAM,QAAO,OAAO,KAAK,MAAM,CAAC,CAAC;AAC3C,MAAI,MAAM,IAAS,QAAO,GAAG,MAAM,IAAI,KAAM,QAAQ,CAAC,CAAC,CAAC;AACxD,MAAI,MAAM,IAAW,QAAO,GAAG,KAAK,MAAM,IAAI,GAAI,CAAC;AACnD,SAAO,GAAG,MAAM,IAAI,KAAW,QAAQ,CAAC,CAAC,CAAC;AAC5C;","names":[]}

package/dist/context/index.d.cts

@@ -111,7 +111,12 @@ interface ContextReceiptRow {
     /** The CLIENT itself sent a value the person turned off. */
     client_sent_excluded: boolean;
     /** `"model"`: nothing reached a model that reads no context. */
-    blocked_by: "model" | null;
+    /**
+     * `"model"`: nothing reached a model that reads no context. `"self_check"`:
+     * the server's post-render safety check stripped it (RULES.md §4/§5) —
+     * the row stays, `delivery: "off"`.
+     */
+    blocked_by: ContextBlockedBy | null;
 }
 /** The per-turn receipt the server streams as `context_receipt` — RULES.md §5. */
 interface ContextReceipt {
@@ -125,6 +130,8 @@ interface ContextReceipt {
     rows: ContextReceiptRow[];
 }
 type ContextRowOrigin = "page" | "attached" | "system";
+/** Why the server kept a value from the model on this turn (receipt `blocked_by`). */
+type ContextBlockedBy = "model" | "self_check";
 /** A client's resolved row: what its table renders and what `buildContextWire` sends. */
 interface ResolvedContextRow extends Omit<ContextRuleResult, "delivery"> {
     delivery: ContextRowDelivery;
@@ -137,6 +144,8 @@ interface ResolvedContextRow extends Omit<ContextRuleResult, "delivery"> {
     serverResolved?: boolean;
     /** Display-only: chars / limit / delivery were filled from a receipt (`applyReceiptToRows`). */
     fromReceipt?: boolean;
+    /** From a receipt: why the server kept this value from the model this turn. */
+    blockedBy?: ContextBlockedBy;
     key: string;
     label: string;
     surfaceKey: string;
@@ -294,6 +303,12 @@ interface ContextReceiptMismatch {
     field: "include" | "max_inline_chars" | "delivery" | "user_rule" | "missing";
     expected: unknown;
     actual: unknown;
+    /**
+     * `"self_check"`: a real difference from what was shown — the server's
+     * safety check stripped the value before the model call. Say "removed by
+     * the server's safety check", not "the screen was wrong".
+     */
+    reason?: "self_check";
 }
 /**
  * Compare the rows the client resolved (and rendered, and sent) with the
@@ -357,4 +372,4 @@ declare function systemRowsToResolved(systemRows: readonly ContextReceiptRow[]):
 /** Compact size for a tabular column: `950`, `18.4k`, `184k`, `1.2M`, `—` for unknown. */
 declare function formatChars(n: number | null | undefined): string;
 
-export { CONTEXT_RULES_FEATURE, type ContextAgentLayer, type ContextDelivery, type ContextLayer, type ContextReceipt, type ContextReceiptMismatch, type ContextReceiptRow, type ContextRowDelivery, type ContextRowOrigin, type ContextRowSource, type ContextRuleInput, type ContextRuleLayers, type ContextRuleResult, type ContextSurfaceLayer, DEFAULT_INLINE_CAP, DEFAULT_INLINE_MAX_CHARS, DEFAULT_SURFACE_KEY, LAZY_SOURCE_DEFAULT_MAX, RICH_ENVELOPE_KEYS, type ResolvedContextRow, type SavedContextRule, type SavedContextRuleRows, applyReceiptToRows, buildContextWire, compareReceipt, contextValueChars, formatChars, isRichEnvelope, isServerResolved, isWireDirective, lookupSavedRule, lookupSavedRuleFor, receiptRowToResolved, resolveContextRow, resolveContextRule, serverDefaultMax, splitContextValue, systemRowsToResolved, withheldKeys };
+export { CONTEXT_RULES_FEATURE, type ContextAgentLayer, type ContextBlockedBy, type ContextDelivery, type ContextLayer, type ContextReceipt, type ContextReceiptMismatch, type ContextReceiptRow, type ContextRowDelivery, type ContextRowOrigin, type ContextRowSource, type ContextRuleInput, type ContextRuleLayers, type ContextRuleResult, type ContextSurfaceLayer, DEFAULT_INLINE_CAP, DEFAULT_INLINE_MAX_CHARS, DEFAULT_SURFACE_KEY, LAZY_SOURCE_DEFAULT_MAX, RICH_ENVELOPE_KEYS, type ResolvedContextRow, type SavedContextRule, type SavedContextRuleRows, applyReceiptToRows, buildContextWire, compareReceipt, contextValueChars, formatChars, isRichEnvelope, isServerResolved, isWireDirective, lookupSavedRule, lookupSavedRuleFor, receiptRowToResolved, resolveContextRow, resolveContextRule, serverDefaultMax, splitContextValue, systemRowsToResolved, withheldKeys };

package/dist/context/index.d.ts

@@ -111,7 +111,12 @@ interface ContextReceiptRow {
     /** The CLIENT itself sent a value the person turned off. */
     client_sent_excluded: boolean;
     /** `"model"`: nothing reached a model that reads no context. */
-    blocked_by: "model" | null;
+    /**
+     * `"model"`: nothing reached a model that reads no context. `"self_check"`:
+     * the server's post-render safety check stripped it (RULES.md §4/§5) —
+     * the row stays, `delivery: "off"`.
+     */
+    blocked_by: ContextBlockedBy | null;
 }
 /** The per-turn receipt the server streams as `context_receipt` — RULES.md §5. */
 interface ContextReceipt {
@@ -125,6 +130,8 @@ interface ContextReceipt {
     rows: ContextReceiptRow[];
 }
 type ContextRowOrigin = "page" | "attached" | "system";
+/** Why the server kept a value from the model on this turn (receipt `blocked_by`). */
+type ContextBlockedBy = "model" | "self_check";
 /** A client's resolved row: what its table renders and what `buildContextWire` sends. */
 interface ResolvedContextRow extends Omit<ContextRuleResult, "delivery"> {
     delivery: ContextRowDelivery;
@@ -137,6 +144,8 @@ interface ResolvedContextRow extends Omit<ContextRuleResult, "delivery"> {
     serverResolved?: boolean;
     /** Display-only: chars / limit / delivery were filled from a receipt (`applyReceiptToRows`). */
     fromReceipt?: boolean;
+    /** From a receipt: why the server kept this value from the model this turn. */
+    blockedBy?: ContextBlockedBy;
     key: string;
     label: string;
     surfaceKey: string;
@@ -294,6 +303,12 @@ interface ContextReceiptMismatch {
     field: "include" | "max_inline_chars" | "delivery" | "user_rule" | "missing";
     expected: unknown;
     actual: unknown;
+    /**
+     * `"self_check"`: a real difference from what was shown — the server's
+     * safety check stripped the value before the model call. Say "removed by
+     * the server's safety check", not "the screen was wrong".
+     */
+    reason?: "self_check";
 }
 /**
  * Compare the rows the client resolved (and rendered, and sent) with the
@@ -357,4 +372,4 @@ declare function systemRowsToResolved(systemRows: readonly ContextReceiptRow[]):
 /** Compact size for a tabular column: `950`, `18.4k`, `184k`, `1.2M`, `—` for unknown. */
 declare function formatChars(n: number | null | undefined): string;
 
-export { CONTEXT_RULES_FEATURE, type ContextAgentLayer, type ContextDelivery, type ContextLayer, type ContextReceipt, type ContextReceiptMismatch, type ContextReceiptRow, type ContextRowDelivery, type ContextRowOrigin, type ContextRowSource, type ContextRuleInput, type ContextRuleLayers, type ContextRuleResult, type ContextSurfaceLayer, DEFAULT_INLINE_CAP, DEFAULT_INLINE_MAX_CHARS, DEFAULT_SURFACE_KEY, LAZY_SOURCE_DEFAULT_MAX, RICH_ENVELOPE_KEYS, type ResolvedContextRow, type SavedContextRule, type SavedContextRuleRows, applyReceiptToRows, buildContextWire, compareReceipt, contextValueChars, formatChars, isRichEnvelope, isServerResolved, isWireDirective, lookupSavedRule, lookupSavedRuleFor, receiptRowToResolved, resolveContextRow, resolveContextRule, serverDefaultMax, splitContextValue, systemRowsToResolved, withheldKeys };
+export { CONTEXT_RULES_FEATURE, type ContextAgentLayer, type ContextBlockedBy, type ContextDelivery, type ContextLayer, type ContextReceipt, type ContextReceiptMismatch, type ContextReceiptRow, type ContextRowDelivery, type ContextRowOrigin, type ContextRowSource, type ContextRuleInput, type ContextRuleLayers, type ContextRuleResult, type ContextSurfaceLayer, DEFAULT_INLINE_CAP, DEFAULT_INLINE_MAX_CHARS, DEFAULT_SURFACE_KEY, LAZY_SOURCE_DEFAULT_MAX, RICH_ENVELOPE_KEYS, type ResolvedContextRow, type SavedContextRule, type SavedContextRuleRows, applyReceiptToRows, buildContextWire, compareReceipt, contextValueChars, formatChars, isRichEnvelope, isServerResolved, isWireDirective, lookupSavedRule, lookupSavedRuleFor, receiptRowToResolved, resolveContextRow, resolveContextRule, serverDefaultMax, splitContextValue, systemRowsToResolved, withheldKeys };

package/dist/context/index.js

@@ -269,7 +269,17 @@ function compareReceipt(expected, receipt) {
         actual: actual.max_inline_chars
       });
     }
-    if (modelReadsContext && !exp.serverResolved && exp.delivery !== "server" && exp.chars !== null && actual.chars !== null && actual.delivery !== exp.delivery) {
+    const selfChecked = actual.blocked_by === "self_check" && exp.include;
+    if (selfChecked) {
+      mismatches.push({
+        key: exp.key,
+        field: "delivery",
+        expected: exp.delivery,
+        actual: actual.delivery,
+        reason: "self_check"
+      });
+    }
+    if (!selfChecked && modelReadsContext && !exp.serverResolved && exp.delivery !== "server" && exp.chars !== null && actual.chars !== null && actual.delivery !== exp.delivery) {
       mismatches.push({ key: exp.key, field: "delivery", expected: exp.delivery, actual: actual.delivery });
     }
     const expRule = normalizeUserRule(exp.userRule);
@@ -291,7 +301,8 @@ function applyReceiptToRows(rows, receipt) {
       chars: hit.chars,
       max_inline_chars: hit.max_inline_chars,
       delivery: hit.delivery,
-      fromReceipt: true
+      fromReceipt: true,
+      ...hit.blocked_by ? { blockedBy: hit.blocked_by } : {}
     };
   });
 }
@@ -310,7 +321,8 @@ function receiptRowToResolved(row) {
     delivery: row.delivery,
     decided_by: { include: row.decided_by.include, max_inline_chars: row.decided_by.max_inline_chars },
     clamped: row.clamped,
-    layers: receiptLayers(row)
+    layers: receiptLayers(row),
+    ...row.blocked_by ? { blockedBy: row.blocked_by } : {}
   };
 }
 function withheldKeys(rows) {