@cleocode/core 2026.9.23 → 2026.9.25

package/dist/memory/learnings.d.ts

@@ -39,13 +39,13 @@ export interface SearchLearningParams {
  */
 export declare function storeLearning(projectRoot: string, params: StoreLearningParams): Promise<{
     applicableTypes: any;
-    source: string;
     id: string;
+    createdAt: string;
+    source: string;
     confidence: number;
     qualityScore: number | null;
-    createdAt: string;
     updatedAt: string | null;
-    memoryTier: "short" | "long" | "medium" | null;
+    memoryTier: "medium" | "short" | "long" | null;
     memoryType: "semantic" | "episodic" | "procedural" | null;
     verified: boolean;
     validAt: string;
@@ -97,13 +97,13 @@ export declare function storeLearning(projectRoot: string, params: StoreLearning
  */
 export declare function searchLearnings(projectRoot: string, params?: SearchLearningParams): Promise<{
     applicableTypes: any;
-    source: string;
     id: string;
+    createdAt: string;
+    source: string;
     confidence: number;
     qualityScore: number | null;
-    createdAt: string;
     updatedAt: string | null;
-    memoryTier: "short" | "long" | "medium" | null;
+    memoryTier: "medium" | "short" | "long" | null;
     memoryType: "semantic" | "episodic" | "procedural" | null;
     verified: boolean;
     validAt: string;

package/dist/memory/manifest-identity.d.ts

@@ -0,0 +1,171 @@
+/**
+ * Manifest identity validation — the entry id, the linked task ids and the
+ * file reference of a `pipeline_manifest` entry (T12829).
+ *
+ * Before this module `cleo manifest append` stored whatever it was given: a
+ * `--task` of `T99999` (no such task), a 900-character JSON blob, or
+ * `../../x`. The shorthand builder turns `--task` into both the entry id and
+ * the `file` reference (`.cleo/agent-outputs/<task>-<type>-<stamp>.md`), and
+ * `cleo manifest show` reads `file` relative to the project root. So the blob
+ * became an unreadable path (ENAMETOOLONG), and a `../` task made `show` read
+ * a file outside the project. Nothing is written to that path; the defect is
+ * an unvalidated identity that later flows into a filesystem read.
+ *
+ * Every check here is pure except {@link findMissingLinkedTasks}, which reads
+ * the task store. Append rejects a problem before writing; show refuses a
+ * malformed id or unsafe file before touching the filesystem; `cleo doctor
+ * manifest-rows` reports rows stored before these checks existed.
+ *
+ * @module
+ * @task T12829
+ */
+/** Longest accepted manifest entry id. */
+export declare const MANIFEST_ENTRY_ID_MAX_LENGTH = 200;
+/**
+ * Accepted manifest entry id characters: an alphanumeric first character,
+ * then alphanumerics and `.`, `_`, `:`, `@`, `+`, `-`. No path separator,
+ * whitespace or control character can appear, so an id can never name a
+ * path outside the directory it is joined onto.
+ */
+export declare const MANIFEST_ENTRY_ID_PATTERN: RegExp;
+/** Longest accepted `file` reference. */
+export declare const MANIFEST_FILE_MAX_LENGTH = 1024;
+/** Longest accepted single path segment of a `file` reference (filesystem NAME_MAX). */
+export declare const MANIFEST_FILE_SEGMENT_MAX_BYTES = 255;
+/**
+ * Whether `value` is acceptable as a manifest linked task id: the canonical
+ * `T<digits>` shape, or a structured `T…` id CLEO mints and stores
+ * (`isStorableTaskId`, at most 64 characters, no whitespace or separators).
+ * A JSON blob, a path, or an over-long value is never accepted.
+ *
+ * @param value - Candidate task id.
+ * @returns `true` when the value can name a task.
+ */
+export declare function isManifestTaskId(value: unknown): value is string;
+/** One identity problem found in a manifest entry. */
+export interface ManifestIdentityIssue {
+    /** The entry field at fault. */
+    field: 'id' | 'linked_tasks' | 'file';
+    /** `E_VALIDATION` for a malformed value; `E_NOT_FOUND` for a well-formed task id with no task. */
+    code: 'E_VALIDATION' | 'E_NOT_FOUND';
+    /** The offending value, truncated to 120 characters for display. */
+    value: string;
+    /** What is wrong. */
+    message: string;
+}
+/**
+ * Why a manifest entry id is unacceptable, or `null` when it is fine.
+ *
+ * @param id - Candidate entry id.
+ * @returns A reason, or `null`.
+ * @example
+ * ```ts
+ * manifestEntryIdProblem('T123-implementation-20260929'); // null
+ * manifestEntryIdProblem('../../x');                      // 'must start with ...'
+ * ```
+ */
+export declare function manifestEntryIdProblem(id: unknown): string | null;
+/**
+ * Why a manifest `file` reference is unsafe, or `null` when it is fine.
+ *
+ * Lexical checks only: an absolute, drive, UNC or backslash path is refused,
+ * and the reference joined onto `root` must stay inside `root`. A symbolic
+ * link inside the project can still point outside it, so every reader goes
+ * through {@link resolveContainedFile} / {@link readContainedFile}, which
+ * resolve real paths. URI references are left to `show`, which accepts only
+ * `cleo://docs/<reference>`.
+ *
+ * @param file - Candidate `file` value.
+ * @param root - Directory the reference is resolved against.
+ * @returns A reason, or `null`.
+ */
+export declare function manifestFileProblem(file: unknown, root: string): string | null;
+/**
+ * Format checks for a manifest entry's id, linked task ids and file reference
+ * (an absent `file` is not checked). Pure: no store access. Pair with {@link findMissingLinkedTasks} to check
+ * that the linked tasks exist.
+ *
+ * @param entry - The entry's identity fields.
+ * @param root - Directory `file` is resolved against (the project root).
+ * @returns Every problem found; empty when the entry is well formed.
+ */
+export declare function manifestIdentityIssues(entry: {
+    id?: unknown;
+    linked_tasks?: unknown;
+    file?: unknown;
+}, root: string): ManifestIdentityIssue[];
+/**
+ * The well-formed linked task ids that name no task in the project store
+ * (archived tasks count as existing).
+ *
+ * @param taskIds - Linked task ids; malformed ones are skipped (format checks report them).
+ * @param projectRoot - Project whose task store is consulted.
+ * @returns The ids with no task, in input order, without duplicates.
+ */
+export declare function findMissingLinkedTasks(taskIds: readonly string[], projectRoot: string): Promise<string[]>;
+/** Outcome of resolving a manifest `file` reference against a directory on disk. */
+export type ContainedFileResolution = 
+/** The reference names an existing path whose real location is inside the real root. */
+{
+    status: 'ok';
+    realPath: string;
+}
+/** Nothing exists at the reference (including a dangling symbolic link). Never read. */
+ | {
+    status: 'not-found';
+}
+/** The reference is malformed or resolves outside the root. Never read. */
+ | {
+    status: 'unsafe';
+    reason: string;
+};
+/** Outcome of reading a manifest `file` reference; `ok` carries the content. */
+export type ContainedFileRead = {
+    status: 'ok';
+    realPath: string;
+    content: string;
+} | {
+    status: 'not-found';
+} | {
+    status: 'unsafe';
+    reason: string;
+};
+/**
+ * Resolve a manifest `file` reference to its real path, requiring it to stay
+ * inside `root` after every symbolic link is followed (T12829).
+ *
+ * {@link manifestFileProblem} is lexical: `link/secret.txt` passes when
+ * `link` is an in-project symlink to a directory outside the project. This
+ * resolves both the root and the target with `realpathSync` and requires the
+ * real target under the real root. A missing target (or a dangling link) is
+ * `not-found` and must not be read; a URI reference is `unsafe` here because
+ * it is not a filesystem path.
+ *
+ * @param root - Directory the reference is resolved against.
+ * @param file - The stored `file` reference.
+ * @returns The resolution; only `ok` may be read, and only via `realPath`.
+ * @throws The underlying filesystem error for anything other than not-found or a link loop.
+ * @example
+ * ```ts
+ * resolveContainedFile('/proj', 'link/secret.txt'); // { status: 'unsafe', ... } when link -> ../outside
+ * ```
+ */
+export declare function resolveContainedFile(root: string, file: unknown): ContainedFileResolution;
+/**
+ * Read a manifest `file` reference as UTF-8 text, only when its real path is
+ * inside `root` (see {@link resolveContainedFile}).
+ *
+ * The resolved real path is opened once, without following a final symbolic
+ * link and without blocking on a FIFO, and the content is read through that
+ * file descriptor. After opening, the path is re-resolved and must still name
+ * the same inode, so a component swapped for a link between the check and the
+ * open is refused rather than read.
+ *
+ * @param root - Directory the reference is resolved against.
+ * @param file - The stored `file` reference.
+ * @returns The content, or why it was not read.
+ * @throws The underlying filesystem error for failures other than not-found
+ *   (a directory throws `EISDIR`).
+ */
+export declare function readContainedFile(root: string, file: unknown): ContainedFileRead;
+//# sourceMappingURL=manifest-identity.d.ts.map

package/dist/memory/manifest-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-identity.d.ts","sourceRoot":"","sources":["../../src/memory/manifest-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAcH,0CAA0C;AAC1C,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAEhD;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,QAAoC,CAAC;AAE3E,yCAAyC;AACzC,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAE7C,wFAAwF;AACxF,eAAO,MAAM,+BAA+B,MAAM,CAAC;AAqBnD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAGhE;AAED,sDAAsD;AACtD,MAAM,WAAW,qBAAqB;IACpC,gCAAgC;IAChC,KAAK,EAAE,IAAI,GAAG,cAAc,GAAG,MAAM,CAAC;IACtC,kGAAkG;IAClG,IAAI,EAAE,cAAc,GAAG,aAAa,CAAC;IACrC,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAYD;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CASjE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAsB9E;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE;IAAE,EAAE,CAAC,EAAE,OAAO,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,EAC/D,IAAI,EAAE,MAAM,GACX,qBAAqB,EAAE,CA2CzB;AAED;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,EAAE,CAAC,CAUnB;AAED,oFAAoF;AACpF,MAAM,MAAM,uBAAuB;AACjC,wFAAwF;AACtF;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AACpC,wFAAwF;GACtF;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE;AACzB,2EAA2E;GACzE;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC,gFAAgF;AAChF,MAAM,MAAM,iBAAiB,GACzB;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GACvB;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AA8BzC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,uBAAuB,CAwBzF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,iBAAiB,CAmChF"}

package/dist/memory/manifest-identity.js

@@ -0,0 +1,345 @@
+/**
+ * Manifest identity validation — the entry id, the linked task ids and the
+ * file reference of a `pipeline_manifest` entry (T12829).
+ *
+ * Before this module `cleo manifest append` stored whatever it was given: a
+ * `--task` of `T99999` (no such task), a 900-character JSON blob, or
+ * `../../x`. The shorthand builder turns `--task` into both the entry id and
+ * the `file` reference (`.cleo/agent-outputs/<task>-<type>-<stamp>.md`), and
+ * `cleo manifest show` reads `file` relative to the project root. So the blob
+ * became an unreadable path (ENAMETOOLONG), and a `../` task made `show` read
+ * a file outside the project. Nothing is written to that path; the defect is
+ * an unvalidated identity that later flows into a filesystem read.
+ *
+ * Every check here is pure except {@link findMissingLinkedTasks}, which reads
+ * the task store. Append rejects a problem before writing; show refuses a
+ * malformed id or unsafe file before touching the filesystem; `cleo doctor
+ * manifest-rows` reports rows stored before these checks existed.
+ *
+ * @module
+ * @task T12829
+ */
+import { closeSync, constants as fsConstants, fstatSync, openSync, readFileSync, realpathSync, statSync, } from 'node:fs';
+import { isAbsolute, join, relative, sep } from 'node:path';
+import { isStorableTaskId, isTaskId } from '@cleocode/contracts';
+/** Longest accepted manifest entry id. */
+export const MANIFEST_ENTRY_ID_MAX_LENGTH = 200;
+/**
+ * Accepted manifest entry id characters: an alphanumeric first character,
+ * then alphanumerics and `.`, `_`, `:`, `@`, `+`, `-`. No path separator,
+ * whitespace or control character can appear, so an id can never name a
+ * path outside the directory it is joined onto.
+ */
+export const MANIFEST_ENTRY_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:@+-]*$/;
+/** Longest accepted `file` reference. */
+export const MANIFEST_FILE_MAX_LENGTH = 1024;
+/** Longest accepted single path segment of a `file` reference (filesystem NAME_MAX). */
+export const MANIFEST_FILE_SEGMENT_MAX_BYTES = 255;
+/** A URI-shaped `file` reference (`cleo://docs/...`); `show` validates these itself. */
+const URI_REFERENCE = /^[a-z][a-z\d+.-]*:/i;
+/** A Windows drive path (`C:\x`, `C:/x`, drive-relative `C:x`), which is a path and not a URI. */
+const WINDOWS_DRIVE = /^[a-z]:/i;
+/** A UNC-looking reference (`\\server\share`, `//server/share`). */
+const UNC_REFERENCE = /^[\\/]{2}/;
+/** Control characters, which no id or path reference may contain. */
+const CONTROL_CHARS = /[\x00-\x1f\x7f]/;
+/**
+ * Structured task ids CLEO mints on purpose alongside the canonical `T<digits>`
+ * (`T-RECONCILE-FOLLOWUP-v2026.5.63-6`, see `isStorableTaskId`): a `T`, then
+ * letters, digits, `.`, `_` and `-` only.
+ */
+const STRUCTURED_TASK_ID = /^T[A-Za-z0-9._-]+$/;
+/**
+ * Whether `value` is acceptable as a manifest linked task id: the canonical
+ * `T<digits>` shape, or a structured `T…` id CLEO mints and stores
+ * (`isStorableTaskId`, at most 64 characters, no whitespace or separators).
+ * A JSON blob, a path, or an over-long value is never accepted.
+ *
+ * @param value - Candidate task id.
+ * @returns `true` when the value can name a task.
+ */
+export function isManifestTaskId(value) {
+    if (isTaskId(value))
+        return true;
+    return typeof value === 'string' && isStorableTaskId(value) && STRUCTURED_TASK_ID.test(value);
+}
+/**
+ * Truncate a value for display in an issue so a huge input cannot flood output.
+ *
+ * @param value - Raw value.
+ * @returns At most 120 characters, with an ellipsis and the full length when cut.
+ */
+function preview(value) {
+    return value.length <= 120 ? value : `${value.slice(0, 120)}… (${value.length} chars)`;
+}
+/**
+ * Why a manifest entry id is unacceptable, or `null` when it is fine.
+ *
+ * @param id - Candidate entry id.
+ * @returns A reason, or `null`.
+ * @example
+ * ```ts
+ * manifestEntryIdProblem('T123-implementation-20260929'); // null
+ * manifestEntryIdProblem('../../x');                      // 'must start with ...'
+ * ```
+ */
+export function manifestEntryIdProblem(id) {
+    if (typeof id !== 'string' || id === '')
+        return 'id must be a non-empty string';
+    if (id.length > MANIFEST_ENTRY_ID_MAX_LENGTH) {
+        return `id is ${id.length} characters; the maximum is ${MANIFEST_ENTRY_ID_MAX_LENGTH}`;
+    }
+    if (!MANIFEST_ENTRY_ID_PATTERN.test(id)) {
+        return 'id must start with a letter or digit and contain only letters, digits and . _ : @ + -';
+    }
+    return null;
+}
+/**
+ * Why a manifest `file` reference is unsafe, or `null` when it is fine.
+ *
+ * Lexical checks only: an absolute, drive, UNC or backslash path is refused,
+ * and the reference joined onto `root` must stay inside `root`. A symbolic
+ * link inside the project can still point outside it, so every reader goes
+ * through {@link resolveContainedFile} / {@link readContainedFile}, which
+ * resolve real paths. URI references are left to `show`, which accepts only
+ * `cleo://docs/<reference>`.
+ *
+ * @param file - Candidate `file` value.
+ * @param root - Directory the reference is resolved against.
+ * @returns A reason, or `null`.
+ */
+export function manifestFileProblem(file, root) {
+    if (typeof file !== 'string' || file === '')
+        return 'file must be a non-empty string';
+    if (file.length > MANIFEST_FILE_MAX_LENGTH) {
+        return `file is ${file.length} characters; the maximum is ${MANIFEST_FILE_MAX_LENGTH}`;
+    }
+    if (CONTROL_CHARS.test(file))
+        return 'file must not contain control characters';
+    if (UNC_REFERENCE.test(file))
+        return 'file must not be a UNC path';
+    if (file.includes('\\'))
+        return 'file must not contain a backslash';
+    if (WINDOWS_DRIVE.test(file))
+        return 'file must not be a Windows drive path';
+    if (file.startsWith('/') || isAbsolute(file))
+        return 'file must be a relative path';
+    if (URI_REFERENCE.test(file))
+        return null;
+    const tooLong = file
+        .split(/[\\/]/)
+        .find((segment) => Buffer.byteLength(segment, 'utf8') > MANIFEST_FILE_SEGMENT_MAX_BYTES);
+    if (tooLong !== undefined) {
+        return `file has a path segment longer than ${MANIFEST_FILE_SEGMENT_MAX_BYTES} bytes`;
+    }
+    const rel = relative(root, join(root, file));
+    if (rel === '' || rel === '..' || rel.startsWith(`..${sep}`) || isAbsolute(rel)) {
+        return 'file must resolve to a path inside the project';
+    }
+    return null;
+}
+/**
+ * Format checks for a manifest entry's id, linked task ids and file reference
+ * (an absent `file` is not checked). Pure: no store access. Pair with {@link findMissingLinkedTasks} to check
+ * that the linked tasks exist.
+ *
+ * @param entry - The entry's identity fields.
+ * @param root - Directory `file` is resolved against (the project root).
+ * @returns Every problem found; empty when the entry is well formed.
+ */
+export function manifestIdentityIssues(entry, root) {
+    const issues = [];
+    const idProblem = manifestEntryIdProblem(entry.id);
+    if (idProblem) {
+        issues.push({
+            field: 'id',
+            code: 'E_VALIDATION',
+            value: preview(String(entry.id ?? '')),
+            message: idProblem,
+        });
+    }
+    if (entry.linked_tasks !== undefined) {
+        if (!Array.isArray(entry.linked_tasks)) {
+            issues.push({
+                field: 'linked_tasks',
+                code: 'E_VALIDATION',
+                value: preview(String(entry.linked_tasks)),
+                message: 'linked_tasks must be an array of task ids',
+            });
+        }
+        else {
+            for (const taskId of entry.linked_tasks) {
+                if (!isManifestTaskId(taskId)) {
+                    issues.push({
+                        field: 'linked_tasks',
+                        code: 'E_VALIDATION',
+                        value: preview(String(taskId)),
+                        message: 'linked task id must be a task id such as T1234',
+                    });
+                }
+            }
+        }
+    }
+    // An absent file is the caller's required-field check; only a present one is resolved.
+    const fileProblem = entry.file === undefined ? null : manifestFileProblem(entry.file, root);
+    if (fileProblem) {
+        issues.push({
+            field: 'file',
+            code: 'E_VALIDATION',
+            value: preview(String(entry.file ?? '')),
+            message: fileProblem,
+        });
+    }
+    return issues;
+}
+/**
+ * The well-formed linked task ids that name no task in the project store
+ * (archived tasks count as existing).
+ *
+ * @param taskIds - Linked task ids; malformed ones are skipped (format checks report them).
+ * @param projectRoot - Project whose task store is consulted.
+ * @returns The ids with no task, in input order, without duplicates.
+ */
+export async function findMissingLinkedTasks(taskIds, projectRoot) {
+    const wellFormed = [...new Set(taskIds.filter((id) => isManifestTaskId(id)))];
+    if (wellFormed.length === 0)
+        return [];
+    const { getTaskAccessor } = await import('../store/data-accessor.js');
+    const accessor = await getTaskAccessor(projectRoot);
+    const missing = [];
+    for (const id of wellFormed) {
+        if (!(await accessor.taskExists(id)))
+            missing.push(id);
+    }
+    return missing;
+}
+/**
+ * The error code carried by a thrown filesystem error, when it has one.
+ *
+ * @param error - Caught value.
+ * @returns The `code` string, or `undefined`.
+ */
+function errnoCode(error) {
+    return error instanceof Error && 'code' in error && typeof error.code === 'string'
+        ? error.code
+        : undefined;
+}
+/** Filesystem errors that mean "nothing is there" for a manifest reference. */
+const NOT_FOUND_CODES = new Set(['ENOENT', 'ENOTDIR']);
+/**
+ * Whether `realTarget` lies strictly inside `realRoot` (separator-safe: a
+ * sibling `/proj-evil` is not inside `/proj`).
+ *
+ * @param realRoot - Real (symlink-free) root directory.
+ * @param realTarget - Real (symlink-free) candidate path.
+ * @returns `true` when the target is a descendant of the root.
+ */
+function isInsideRealRoot(realRoot, realTarget) {
+    const prefix = realRoot.endsWith(sep) ? realRoot : `${realRoot}${sep}`;
+    return realTarget.startsWith(prefix);
+}
+/**
+ * Resolve a manifest `file` reference to its real path, requiring it to stay
+ * inside `root` after every symbolic link is followed (T12829).
+ *
+ * {@link manifestFileProblem} is lexical: `link/secret.txt` passes when
+ * `link` is an in-project symlink to a directory outside the project. This
+ * resolves both the root and the target with `realpathSync` and requires the
+ * real target under the real root. A missing target (or a dangling link) is
+ * `not-found` and must not be read; a URI reference is `unsafe` here because
+ * it is not a filesystem path.
+ *
+ * @param root - Directory the reference is resolved against.
+ * @param file - The stored `file` reference.
+ * @returns The resolution; only `ok` may be read, and only via `realPath`.
+ * @throws The underlying filesystem error for anything other than not-found or a link loop.
+ * @example
+ * ```ts
+ * resolveContainedFile('/proj', 'link/secret.txt'); // { status: 'unsafe', ... } when link -> ../outside
+ * ```
+ */
+export function resolveContainedFile(root, file) {
+    const problem = manifestFileProblem(file, root);
+    if (problem)
+        return { status: 'unsafe', reason: problem };
+    if (typeof file !== 'string' || URI_REFERENCE.test(file)) {
+        return { status: 'unsafe', reason: 'file must be a filesystem path, not a URI' };
+    }
+    let realRoot;
+    let realTarget;
+    try {
+        realRoot = realpathSync(root);
+        realTarget = realpathSync(join(realRoot, file));
+    }
+    catch (error) {
+        const code = errnoCode(error);
+        if (code !== undefined && NOT_FOUND_CODES.has(code))
+            return { status: 'not-found' };
+        if (code === 'ELOOP')
+            return { status: 'unsafe', reason: 'file is a symbolic link loop' };
+        throw error;
+    }
+    if (!isInsideRealRoot(realRoot, realTarget)) {
+        return {
+            status: 'unsafe',
+            reason: 'file resolves (through a symbolic link) outside the project',
+        };
+    }
+    return { status: 'ok', realPath: realTarget };
+}
+/**
+ * Read a manifest `file` reference as UTF-8 text, only when its real path is
+ * inside `root` (see {@link resolveContainedFile}).
+ *
+ * The resolved real path is opened once, without following a final symbolic
+ * link and without blocking on a FIFO, and the content is read through that
+ * file descriptor. After opening, the path is re-resolved and must still name
+ * the same inode, so a component swapped for a link between the check and the
+ * open is refused rather than read.
+ *
+ * @param root - Directory the reference is resolved against.
+ * @param file - The stored `file` reference.
+ * @returns The content, or why it was not read.
+ * @throws The underlying filesystem error for failures other than not-found
+ *   (a directory throws `EISDIR`).
+ */
+export function readContainedFile(root, file) {
+    const resolved = resolveContainedFile(root, file);
+    if (resolved.status !== 'ok')
+        return resolved;
+    const flags = fsConstants.O_RDONLY | (fsConstants.O_NOFOLLOW ?? 0) | (fsConstants.O_NONBLOCK ?? 0);
+    let fd;
+    try {
+        fd = openSync(resolved.realPath, flags);
+    }
+    catch (error) {
+        const code = errnoCode(error);
+        if (code !== undefined && NOT_FOUND_CODES.has(code))
+            return { status: 'not-found' };
+        if (code === 'ELOOP') {
+            return { status: 'unsafe', reason: 'file changed into a symbolic link while being read' };
+        }
+        throw error;
+    }
+    try {
+        const opened = fstatSync(fd);
+        // A directory falls through to the read, which fails with EISDIR like any
+        // other read failure; a FIFO, socket or device is never read.
+        if (!opened.isFile() && !opened.isDirectory()) {
+            return { status: 'unsafe', reason: 'file is not a regular file' };
+        }
+        const again = resolveContainedFile(root, file);
+        if (again.status !== 'ok' || again.realPath !== resolved.realPath) {
+            return { status: 'unsafe', reason: 'file changed while being read' };
+        }
+        const current = statSync(again.realPath);
+        if (current.dev !== opened.dev || current.ino !== opened.ino) {
+            return { status: 'unsafe', reason: 'file changed while being read' };
+        }
+        return { status: 'ok', realPath: resolved.realPath, content: readFileSync(fd, 'utf-8') };
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+//# sourceMappingURL=manifest-identity.js.map

package/dist/memory/manifest-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-identity.js","sourceRoot":"","sources":["../../src/memory/manifest-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EACL,SAAS,EACT,SAAS,IAAI,WAAW,EACxB,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,QAAQ,GACT,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEjE,0CAA0C;AAC1C,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,iCAAiC,CAAC;AAE3E,yCAAyC;AACzC,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAE7C,wFAAwF;AACxF,MAAM,CAAC,MAAM,+BAA+B,GAAG,GAAG,CAAC;AAEnD,wFAAwF;AACxF,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAE5C,kGAAkG;AAClG,MAAM,aAAa,GAAG,UAAU,CAAC;AAEjC,oEAAoE;AACpE,MAAM,aAAa,GAAG,WAAW,CAAC;AAElC,qEAAqE;AACrE,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAExC;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEhD;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,gBAAgB,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChG,CAAC;AAcD;;;;;GAKG;AACH,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,KAAK,CAAC,MAAM,SAAS,CAAC;AACzF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAW;IAChD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,+BAA+B,CAAC;IAChF,IAAI,EAAE,CAAC,MAAM,GAAG,4BAA4B,EAAE,CAAC;QAC7C,OAAO,SAAS,EAAE,CAAC,MAAM,+BAA+B,4BAA4B,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACxC,OAAO,uFAAuF,CAAC;IACjG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAa,EAAE,IAAY;IAC7D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,iCAAiC,CAAC;IACtF,IAAI,IAAI,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;QAC3C,OAAO,WAAW,IAAI,CAAC,MAAM,+BAA+B,wBAAwB,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,0CAA0C,CAAC;IAChF,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,6BAA6B,CAAC;IACnE,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,mCAAmC,CAAC;IACpE,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,uCAAuC,CAAC;IAC7E,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,8BAA8B,CAAC;IACpF,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI;SACjB,KAAK,CAAC,OAAO,CAAC;SACd,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,+BAA+B,CAAC,CAAC;IAC3F,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,uCAAuC,+BAA+B,QAAQ,CAAC;IACxF,CAAC;IACD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7C,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAChF,OAAO,gDAAgD,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAA+D,EAC/D,IAAY;IAEZ,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,OAAO,EAAE,SAAS;SACnB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,cAAc;gBACrB,IAAI,EAAE,cAAc;gBACpB,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBAC1C,OAAO,EAAE,2CAA2C;aACrD,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;gBACxC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC9B,MAAM,CAAC,IAAI,CAAC;wBACV,KAAK,EAAE,cAAc;wBACrB,IAAI,EAAE,cAAc;wBACpB,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;wBAC9B,OAAO,EAAE,gDAAgD;qBAC1D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,uFAAuF;IACvF,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5F,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACxC,OAAO,EAAE,WAAW;SACrB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAA0B,EAC1B,WAAmB;IAEnB,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAiBD;;;;;GAKG;AACH,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAChF,CAAC,CAAC,KAAK,CAAC,IAAI;QACZ,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,+EAA+E;AAC/E,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAEvD;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,QAAgB,EAAE,UAAkB;IAC5D,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,GAAG,EAAE,CAAC;IACvE,OAAO,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,IAAa;IAC9D,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChD,IAAI,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC1D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;IACnF,CAAC;IACD,IAAI,QAAgB,CAAC;IACrB,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC9B,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,SAAS,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACpF,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;QAC1F,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;QAC5C,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,6DAA6D;SACtE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,IAAa;IAC3D,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClD,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IAC9C,MAAM,KAAK,GACT,WAAW,CAAC,QAAQ,GAAG,CAAC,WAAW,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;IACvF,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,SAAS,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACpF,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,oDAAoD,EAAE,CAAC;QAC5F,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC7B,0EAA0E;QAC1E,8DAA8D;QAC9D,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;YAC9C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QACpE,CAAC;QACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAClE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;QACvE,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC;YAC7D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;QACvE,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC;IAC3F,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/memory/mental-model-queue.d.ts

@@ -7,10 +7,20 @@
  * decouples the hot path (agent execution) from I/O latency.
  *
  * The queue is drained to brain.db either:
- *   1. Periodically — every {@link FLUSH_INTERVAL_MS} milliseconds via a timer.
- *   2. On high watermark — when the queue exceeds {@link FLUSH_WATERMARK} entries.
- *   3. On process exit — SIGINT, SIGTERM, and 'exit' hooks perform a best-effort
- *      synchronous flush so no observations are lost.
+ *   1. Promptly — every `enqueue` schedules a drain on the next macrotask
+ *      (`setImmediate`, NOT unref'd), so observations enqueued in the same tick
+ *      are written as one batch and the caller's promise always settles (T12817).
+ *   2. Periodically — every {@link FLUSH_INTERVAL_MS} milliseconds via a timer
+ *      (backstop; unref'd).
+ *   3. On high watermark — when the queue exceeds {@link FLUSH_WATERMARK} entries.
+ *   4. On process exit — SIGINT, SIGTERM, and 'exit' hooks perform a best-effort
+ *      flush.
+ *
+ * T12817: before the prompt drain existed, the ONLY drain a one-shot process
+ * could reach was the unref'd 5 s timer. `enqueue()` returned a promise that
+ * only that timer could settle, so an awaited `cleo memory observe --agent X`
+ * left the event loop empty: Node exited 0 with zero bytes on stdout and the
+ * `'exit'` hook's async drain never ran — the observation was silently lost.
  *
  * Observations without an `agent` field continue to use the existing synchronous
  * path in observeBrain() and are never routed here.

package/dist/memory/mental-model-queue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mental-model-queue.d.ts","sourceRoot":"","sources":["../../src/memory/mental-model-queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AA4BnF;;;;;;;;;;GAUG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;OAQG;IACH,OAAO,CACL,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,kBAAkB,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAC7C,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAE/B;;;;;;;OAOG;IACH,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAEzB,2DAA2D;IAC3D,IAAI,IAAI,MAAM,CAAC;CAChB;AAiJD;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,EAAE,gBAyC9B,CAAC;AAMF;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,IAAI,IAAI,CAgBrD;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAI5E"}
+{"version":3,"file":"mental-model-queue.d.ts","sourceRoot":"","sources":["../../src/memory/mental-model-queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AA4BnF;;;;;;;;;;GAUG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;OAQG;IACH,OAAO,CACL,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,kBAAkB,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAC7C,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAE/B;;;;;;;OAOG;IACH,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAEzB,2DAA2D;IAC3D,IAAI,IAAI,MAAM,CAAC;CAChB;AA8KD;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,EAAE,gBA8B9B,CAAC;AAMF;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,IAAI,IAAI,CAoBrD;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAI5E"}