@engramx/client 0.16.0-rc.12 → 0.16.0-rc.13

package/dist/connect-config.d.ts

@@ -0,0 +1,109 @@
+export interface ConnectParams {
+    canisterId: string;
+    /** IC gateway host. Defaults to mainnet (icp0.io). Local replica: http://localhost:4943 */
+    host?: string;
+}
+export declare const MAINNET_HOST = "https://icp0.io";
+/** What a surface that prints the per-client guides passes: the engram, and the build's version. */
+export interface GuideParams extends ConnectParams {
+    /**
+     * The @engramx/client version the surface printing these guides was BUILT with — its own
+     * package.json's version, which the release's version change stamps (X.Y.Z-rc.N while a release
+     * candidate soaks, X.Y.Z once the final release is cut). Every pairing command in the guides
+     * names it.
+     *
+     * ⟨2026-10-13⟩ It is also the @engramx/mcp version the local (stdio) server config names
+     * (`mcpPackage`): the protocol's packages share one version number, which each release's version
+     * change stamps into every one of them, so the surface's own version is both.
+     */
+    clientVersion: string;
+}
+/**
+ * The pairing command, pinned to the version the surface printing it was built with.
+ *
+ * WHY (the owner's ruling of 2026-10-03: print the exact version each page was built with).
+ * A bare `npx @engramx/client pair …` installs npm's default (`latest`), which is the last FINAL
+ * release: while a release candidate soaks under the `next` tag, every surface built from it would
+ * hand out a command that installs the previous release, and a previous release cannot pair with
+ * this release's engram (the 0.15.0 → 0.16.0 enrolment change). Pinned to the build's own version,
+ * the command names the final version once the final release is cut — through that release's own
+ * version change, with nothing to undo. WHAT WOULD MAKE THIS WRONG: a surface that prints the guides
+ * for a different release than the one it was built from (then `clientVersion` must be that
+ * release's), or a published version being withdrawn from npm (a pinned command then fails loudly,
+ * where a bare one would quietly install another release).
+ */
+export declare function pairCommand(clientVersion: string, inviteCode: string, canisterId: string): string;
+/** The remote MCP endpoint URL for an engram canister (boundary-node subdomain routing). */
+export declare function mcpUrl({ canisterId, host }: ConnectParams): string;
+/**
+ * The @engramx/mcp package the local (stdio) server config runs, pinned to the version the surface
+ * printing it was built with: `@engramx/mcp@<version>`.
+ *
+ * ⟨ADDED 2026-10-13, the owner's "fix … the MCP version in rc.12"⟩ WHY. The config said
+ * `npx -y @engramx/mcp`, and a bare name installs npm's default (`latest`) — the last FINAL release.
+ * While a release candidate soaks under `next`, that is the previous release (0.15.0 during the
+ * 0.16.0 soak, read from npm's dist-tags 2026-10-13), which cannot talk to this release's engram, so
+ * the first session started from the copied config failed. The defect class is the bare pairing
+ * command's (`pairCommand` above); that fix missed this one because the package name sits in an
+ * argument list, not a command line.
+ *
+ * A version that is not a release version — a surface that could not read its own — prints the
+ * visible blank `<version>`, which npm refuses by name (EINVALIDTAGNAME). Never `@engramx/mcp@` or
+ * the bare name: npm reads both as the range `*` and installs `latest`, the very failure this
+ * prevents (npm-package-arg, measured 2026-10-13 with npm 11.19.1).
+ *
+ * WHAT WOULD MAKE THIS WRONG: the packages no longer sharing one version number (then the surface
+ * must pass @engramx/mcp's own version), a surface printing the config for a release other than the
+ * one it was built from, or the named version being withdrawn from npm (the pinned config then
+ * fails loudly, where a bare one would quietly run another release).
+ */
+export declare function mcpPackage(version: string): string;
+/** What the stdio entry needs beyond the guides: the key file, when the surface knows it. */
+export interface StdioParams extends GuideParams {
+    /**
+     * The session key file the server reads. ⟨2026-10-13⟩ Set by `engramx pair --target claude`, which
+     * just wrote that file (and may have been given `--key-path`); omitted by surfaces that do not
+     * know it, so the server reads its default, ~/.engramx/session.key.
+     */
+    sessionKeyPath?: string;
+}
+/** The stdio `mcpServers.engramx` entry, as every surface writes it. */
+export interface StdioServerEntry {
+    command: string;
+    args: string[];
+    env: Record<string, string>;
+}
+/**
+ * Claude Desktop / Cursor STDIO server entry (local @engramx/mcp, session-key auth), running the
+ * @engramx/mcp version the surface was built with (`mcpPackage`).
+ */
+export declare function stdioServerConfig({ canisterId, host, clientVersion, sessionKeyPath, }: StdioParams): StdioServerEntry;
+/** The claude_desktop_config.json fragment with the engramx server under mcpServers. */
+export declare function claudeDesktopConfig(p: StdioParams): {
+    mcpServers: {
+        engramx: StdioServerEntry;
+    };
+};
+export interface ClientGuide {
+    id: string;
+    name: string;
+    /** 'remote' = canister-hosted HTTP MCP + OAuth; 'stdio' = local @engramx/mcp + session key */
+    transport: 'remote' | 'stdio';
+    steps: string[];
+    /** Optional copy-paste install snippet (CLI command, YAML, or JSON). */
+    snippet?: string;
+}
+/** Per-client connection guides — identical wording in the CLI and the web page. */
+export declare function clientGuides(p: GuideParams): ClientGuide[];
+/** Everything a consumer needs in one call. */
+export declare function connectInfo(p: GuideParams): {
+    canisterId: string;
+    host: string;
+    mcpUrl: string;
+    claudeDesktopConfig: {
+        mcpServers: {
+            engramx: StdioServerEntry;
+        };
+    };
+    guides: ClientGuide[];
+};

package/dist/connect-config.js

@@ -0,0 +1,251 @@
+// Canonical config generation for connecting AI clients (Claude.ai web, Claude Desktop, Cursor, …)
+// to an engram's remote MCP endpoint. Used by the `@engramx/mcp connect` CLI.
+//
+// Dependency-free and free of Node/browser-only APIs so any consumer (this CLI, or a web UI) can
+// import it unchanged. The contract test (connect-config.test.ts) pins the output — downstream UIs
+// that re-render this config should reuse this module + that test so every surface stays identical.
+//
+// ⟨MOVED 2026-10-13, the bloat audit + the owner's 3A⟩ From integrations/mcp/src/ into
+// @engramx/client, published as the browser-safe subpath `@engramx/client/connect-config`, so a web
+// UI imports it instead of keeping a hand copy (the platform's was policed by a sync script). It is
+// also now the ONE generator of the stdio `mcpServers.engramx` entry: claude-setup.ts
+// (`engramx pair --target claude`) built a second one that had drifted (the session-key variable set
+// there and not here; `ic0.app` the only mainnet spelling there). `stdioServerConfig` takes the
+// key path for the surfaces that know it. Still dependency-free — test/browser-safe-subpaths.test.ts
+// holds it to that.
+//
+// ⟨2026-10-03⟩ Every pairing command this module prints names the exact @engramx/client version the
+// surface printing it was built with (`npx @engramx/client@<version> pair …`), so the caller passes
+// that version in (`GuideParams.clientVersion`): this module cannot read a package.json and stay
+// usable in a browser. This CLI passes its own package.json's version; a web UI passes the version
+// it was built with. See `pairCommand` below for why.
+// ⟨2026-10-13⟩ The local (stdio) server config takes that same version and names
+// `@engramx/mcp@<version>` (`mcpPackage` below) — it named the bare package until then.
+export const MAINNET_HOST = 'https://icp0.io';
+/**
+ * The pairing command, pinned to the version the surface printing it was built with.
+ *
+ * WHY (the owner's ruling of 2026-10-03: print the exact version each page was built with).
+ * A bare `npx @engramx/client pair …` installs npm's default (`latest`), which is the last FINAL
+ * release: while a release candidate soaks under the `next` tag, every surface built from it would
+ * hand out a command that installs the previous release, and a previous release cannot pair with
+ * this release's engram (the 0.15.0 → 0.16.0 enrolment change). Pinned to the build's own version,
+ * the command names the final version once the final release is cut — through that release's own
+ * version change, with nothing to undo. WHAT WOULD MAKE THIS WRONG: a surface that prints the guides
+ * for a different release than the one it was built from (then `clientVersion` must be that
+ * release's), or a published version being withdrawn from npm (a pinned command then fails loudly,
+ * where a bare one would quietly install another release).
+ */
+export function pairCommand(clientVersion, inviteCode, canisterId) {
+    return `npx @engramx/client@${clientVersion} pair ${inviteCode} --engram ${canisterId}`;
+}
+function isLocal(host) {
+    return host.includes('localhost') || host.includes('127.0.0.1');
+}
+/** The remote MCP endpoint URL for an engram canister (boundary-node subdomain routing). */
+export function mcpUrl({ canisterId, host = MAINNET_HOST }) {
+    if (isLocal(host))
+        return `http://${canisterId}.localhost:4943/mcp`;
+    return `https://${canisterId}.icp0.io/mcp`;
+}
+/** A release version as the release's version change writes it: X.Y.Z, or X.Y.Z-<pre-release>. */
+const RELEASE_VERSION = /^[0-9]+\.[0-9]+\.[0-9]+(-[0-9A-Za-z.]+)?$/;
+/**
+ * The @engramx/mcp package the local (stdio) server config runs, pinned to the version the surface
+ * printing it was built with: `@engramx/mcp@<version>`.
+ *
+ * ⟨ADDED 2026-10-13, the owner's "fix … the MCP version in rc.12"⟩ WHY. The config said
+ * `npx -y @engramx/mcp`, and a bare name installs npm's default (`latest`) — the last FINAL release.
+ * While a release candidate soaks under `next`, that is the previous release (0.15.0 during the
+ * 0.16.0 soak, read from npm's dist-tags 2026-10-13), which cannot talk to this release's engram, so
+ * the first session started from the copied config failed. The defect class is the bare pairing
+ * command's (`pairCommand` above); that fix missed this one because the package name sits in an
+ * argument list, not a command line.
+ *
+ * A version that is not a release version — a surface that could not read its own — prints the
+ * visible blank `<version>`, which npm refuses by name (EINVALIDTAGNAME). Never `@engramx/mcp@` or
+ * the bare name: npm reads both as the range `*` and installs `latest`, the very failure this
+ * prevents (npm-package-arg, measured 2026-10-13 with npm 11.19.1).
+ *
+ * WHAT WOULD MAKE THIS WRONG: the packages no longer sharing one version number (then the surface
+ * must pass @engramx/mcp's own version), a surface printing the config for a release other than the
+ * one it was built from, or the named version being withdrawn from npm (the pinned config then
+ * fails loudly, where a bare one would quietly run another release).
+ */
+export function mcpPackage(version) {
+    return `@engramx/mcp@${RELEASE_VERSION.test(version) ? version : '<version>'}`;
+}
+/**
+ * Claude Desktop / Cursor STDIO server entry (local @engramx/mcp, session-key auth), running the
+ * @engramx/mcp version the surface was built with (`mcpPackage`).
+ */
+export function stdioServerConfig({ canisterId, host = MAINNET_HOST, clientVersion, sessionKeyPath, }) {
+    const env = { ENGRAM_CANISTER_ID: canisterId };
+    if (sessionKeyPath)
+        env['ENGRAM_SESSION_KEY_PATH'] = sessionKeyPath;
+    // Only pin a non-default host (e.g. local replica); mainnet is the @engramx/mcp default.
+    if (host !== MAINNET_HOST && host !== 'https://ic0.app')
+        env['ENGRAM_HOST'] = host;
+    // ⟨2026-10-13⟩ Was `args: ['-y', '@engramx/mcp']` — unpinned; `mcpPackage` says why.
+    return { command: 'npx', args: ['-y', mcpPackage(clientVersion)], env };
+}
+/** The claude_desktop_config.json fragment with the engramx server under mcpServers. */
+export function claudeDesktopConfig(p) {
+    return { mcpServers: { engramx: stdioServerConfig(p) } };
+}
+/** Per-client connection guides — identical wording in the CLI and the web page. */
+export function clientGuides(p) {
+    const url = mcpUrl(p);
+    const pair = pairCommand(p.clientVersion, '<invite-code>', p.canisterId);
+    return [
+        {
+            id: 'claude-web',
+            name: 'Claude (claude.ai)',
+            transport: 'remote',
+            steps: [
+                'Open claude.ai → Settings → Connectors → Add custom connector.',
+                `Paste the MCP URL: ${url}`,
+                'Sign in with the wallet that owns this engram, then approve.',
+                'Your engram tools (read/append/list memory, audit log, wallet) appear in new chats.',
+            ],
+        },
+        {
+            id: 'claude-code',
+            name: 'Claude Code (CLI)',
+            transport: 'remote',
+            snippet: `claude mcp add engramx-memory ${url}`,
+            steps: [
+                'Run the command, then restart claude-code — OAuth opens in your browser on first use.',
+            ],
+        },
+        {
+            id: 'claude-desktop',
+            name: 'Claude Desktop (remote)',
+            transport: 'remote',
+            steps: [
+                'Claude Desktop → Settings → Connectors → Add custom connector.',
+                `Paste the MCP URL: ${url}`,
+                'Authorize with your wallet.',
+            ],
+        },
+        {
+            id: 'cursor',
+            name: 'Cursor',
+            transport: 'remote',
+            steps: [
+                'Cursor → Settings → MCP → Add new MCP server.',
+                `Paste the remote URL ${url}; the OAuth flow opens in your browser.`,
+            ],
+        },
+        {
+            id: 'copilot',
+            name: 'GitHub Copilot (VS Code, agent mode)',
+            transport: 'remote',
+            snippet: `{\n  "servers": {\n    "engramx-memory": { "type": "http", "url": "${url}" }\n  }\n}`,
+            steps: [
+                'VS Code → Command Palette → "MCP: Add Server" → HTTP → paste the URL; or add the JSON above to .vscode/mcp.json (workspace) or your user mcp.json.',
+                'Open Copilot Chat in Agent mode and authorize with the wallet that owns this engram; your engram tools appear in the tool picker.',
+                'Note: the GitHub Copilot CLI is a separate surface (gh copilot) — this flow is for Copilot Chat in VS Code.',
+            ],
+        },
+        {
+            id: 'continue',
+            name: 'Continue.dev',
+            transport: 'remote',
+            snippet: `mcpServers:\n  - name: engramx-memory\n    transport: streamable-http\n    url: ${url}`,
+            steps: ['Add this YAML to .continue/mcpServers/engramx.yaml.'],
+        },
+        {
+            id: 'chatgpt',
+            name: 'ChatGPT (developer mode)',
+            transport: 'remote',
+            steps: [
+                'ChatGPT → Settings → Apps & Connectors → enable Developer mode → New connector.',
+                `Add the MCP server URL: ${url}, then authorize with the wallet that owns this engram.`,
+                'Web + paid tiers only (Plus/Pro/Business); the desktop/mobile apps and free tier cannot add a custom MCP.',
+                'Our connector handshake with ChatGPT is still being verified — if the authorize step fails, seed via a paste prompt for now.',
+            ],
+        },
+        {
+            id: 'gemini-cli',
+            name: 'Gemini CLI',
+            transport: 'remote',
+            snippet: `gemini mcp add --transport http engramx-memory ${url}`,
+            steps: [
+                'Run the command, then restart gemini-cli.',
+                'If the OAuth handshake misbehaves, add an auth header (the key for this engram) or use the local stdio proxy instead.',
+                'The consumer Gemini app has no custom-MCP support — use gemini-cli, or seed the app’s Saved Info via a paste prompt.',
+            ],
+        },
+        {
+            id: 'grok',
+            name: 'Grok',
+            transport: 'remote',
+            steps: [
+                'Grok → Settings → Connectors → Bring your own MCP → add a custom connector.',
+                `Paste the MCP URL: ${url} and authorize. Paid tier.`,
+            ],
+        },
+        {
+            id: 'perplexity',
+            name: 'Perplexity',
+            transport: 'remote',
+            steps: [
+                'Perplexity → Settings → Connectors → Add → Custom MCP (Pro / Max / Enterprise).',
+                `Paste the remote URL: ${url}; authorize with your wallet.`,
+            ],
+        },
+        {
+            id: 'lechat',
+            name: 'Mistral Le Chat',
+            transport: 'remote',
+            steps: [
+                'Le Chat → + Add Connector → Custom MCP.',
+                `Name it "engramx" and paste the server URL: ${url}. Available on all tiers, including free.`,
+            ],
+        },
+        {
+            id: 'openclaw',
+            name: 'OpenClaw (self-hosted)',
+            transport: 'stdio',
+            snippet: pair,
+            steps: [
+                'Run the command; it auto-detects OpenClaw and installs the engramx memory plugin.',
+                'The engram becomes OpenClaw’s memory backend — it reads at session start and syncs new memories automatically.',
+                'Get <invite-code> from the engram’s owner — you, if this is your engram — who creates it under Access → Agents; it works for thirty minutes.',
+            ],
+        },
+        {
+            id: 'sdk',
+            name: 'Your own agent (@engramx/client SDK)',
+            transport: 'stdio',
+            snippet: pair,
+            steps: [
+                'Pair a key for this engram once with the command; get <invite-code> from the engram’s owner — you, if this is your engram — who creates it under Access → Agents. It works for thirty minutes.',
+                `In your agent: new EngramClient({ canisterId: '${p.canisterId}', sessionKeyPath: '~/.engramx/session.key' }), then startSession() to read this owner's memory back and appendMemory() as it learns.`,
+                'This grant is append-only for writes — your agent can read and add memory, and cannot delete it. Overwriting existing content requires a separate grant the owner issues deliberately, per path: only on paths the owner lists for agents, and never on paths the owner has locked.',
+            ],
+        },
+        {
+            id: 'claude-desktop-stdio',
+            name: 'Claude Desktop / Cursor (local stdio)',
+            transport: 'stdio',
+            snippet: JSON.stringify(claudeDesktopConfig(p), null, 2),
+            steps: [
+                `Pair a key for this engram once: ${pair}`,
+                'Add the JSON to claude_desktop_config.json under "mcpServers", then restart the app.',
+            ],
+        },
+    ];
+}
+/** Everything a consumer needs in one call. */
+export function connectInfo(p) {
+    return {
+        canisterId: p.canisterId,
+        host: p.host ?? MAINNET_HOST,
+        mcpUrl: mcpUrl(p),
+        claudeDesktopConfig: claudeDesktopConfig(p),
+        guides: clientGuides(p),
+    };
+}
+//# sourceMappingURL=connect-config.js.map

package/dist/connect-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-config.js","sourceRoot":"","sources":["../src/connect-config.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,8EAA8E;AAC9E,EAAE;AACF,iGAAiG;AACjG,mGAAmG;AACnG,oGAAoG;AACpG,EAAE;AACF,uFAAuF;AACvF,oGAAoG;AACpG,oGAAoG;AACpG,sFAAsF;AACtF,qGAAqG;AACrG,gGAAgG;AAChG,qGAAqG;AACrG,oBAAoB;AACpB,EAAE;AACF,oGAAoG;AACpG,oGAAoG;AACpG,iGAAiG;AACjG,mGAAmG;AACnG,sDAAsD;AACtD,iFAAiF;AACjF,wFAAwF;AAQxF,MAAM,CAAC,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAiB9C;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,WAAW,CAAC,aAAqB,EAAE,UAAkB,EAAE,UAAkB;IACvF,OAAO,uBAAuB,aAAa,SAAS,UAAU,aAAa,UAAU,EAAE,CAAC;AAC1F,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAClE,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,GAAG,YAAY,EAAiB;IACvE,IAAI,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,UAAU,qBAAqB,CAAC;IACpE,OAAO,WAAW,UAAU,cAAc,CAAC;AAC7C,CAAC;AAED,kGAAkG;AAClG,MAAM,eAAe,GAAG,2CAA2C,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,OAAO,gBAAgB,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AACjF,CAAC;AAmBD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAChC,UAAU,EACV,IAAI,GAAG,YAAY,EACnB,aAAa,EACb,cAAc,GACF;IACZ,MAAM,GAAG,GAA2B,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC;IACvE,IAAI,cAAc;QAAE,GAAG,CAAC,yBAAyB,CAAC,GAAG,cAAc,CAAC;IACpE,yFAAyF;IACzF,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,iBAAiB;QAAE,GAAG,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC;IACnF,qFAAqF;IACrF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;AAC1E,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,mBAAmB,CAAC,CAAc;IAChD,OAAO,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC3D,CAAC;AAYD,oFAAoF;AACpF,MAAM,UAAU,YAAY,CAAC,CAAc;IACzC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,aAAa,EAAE,eAAe,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;IACzE,OAAO;QACL;YACE,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,oBAAoB;YAC1B,SAAS,EAAE,QAAQ;YACnB,KAAK,EAAE;gBACL,gEAAgE;gBAChE,sBAAsB,GAAG,EAAE;gBAC3B,8DAA8D;gBAC9D,qFAAqF;aACtF;SACF;QACD;YACE,EAAE,EAAE,aAAa;YACjB,IAAI,EAAE,mBAAmB;YACzB,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,iCAAiC,GAAG,EAAE;YAC/C,KAAK,EAAE;gBACL,uFAAuF;aACxF;SACF;QACD;YACE,EAAE,EAAE,gBAAgB;YACpB,IAAI,EAAE,yBAAyB;YAC/B,SAAS,EAAE,QAAQ;YACnB,KAAK,EAAE;gBACL,gEAAgE;gBAChE,sBAAsB,GAAG,EAAE;gBAC3B,6BAA6B;aAC9B;SACF;QACD;YACE,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,QAAQ;YACnB,KAAK,EAAE;gBACL,+CAA+C;gBAC/C,wBAAwB,GAAG,yCAAyC;aACrE;SACF;QACD;YACE,EAAE,EAAE,SAAS;YACb,IAAI,EAAE,sCAAsC;YAC5C,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,sEAAsE,GAAG,aAAa;YAC/F,KAAK,EAAE;gBACL,oJAAoJ;gBACpJ,mIAAmI;gBACnI,6GAA6G;aAC9G;SACF;QACD;YACE,EAAE,EAAE,UAAU;YACd,IAAI,EAAE,cAAc;YACpB,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,mFAAmF,GAAG,EAAE;YACjG,KAAK,EAAE,CAAC,qDAAqD,CAAC;SAC/D;QACD;YACE,EAAE,EAAE,SAAS;YACb,IAAI,EAAE,0BAA0B;YAChC,SAAS,EAAE,QAAQ;YACnB,KAAK,EAAE;gBACL,iFAAiF;gBACjF,2BAA2B,GAAG,yDAAyD;gBACvF,2GAA2G;gBAC3G,8HAA8H;aAC/H;SACF;QACD;YACE,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,kDAAkD,GAAG,EAAE;YAChE,KAAK,EAAE;gBACL,2CAA2C;gBAC3C,uHAAuH;gBACvH,sHAAsH;aACvH;SACF;QACD;YACE,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,QAAQ;YACnB,KAAK,EAAE;gBACL,6EAA6E;gBAC7E,sBAAsB,GAAG,4BAA4B;aACtD;SACF;QACD;YACE,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,QAAQ;YACnB,KAAK,EAAE;gBACL,iFAAiF;gBACjF,yBAAyB,GAAG,+BAA+B;aAC5D;SACF;QACD;YACE,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,QAAQ;YACnB,KAAK,EAAE;gBACL,yCAAyC;gBACzC,+CAA+C,GAAG,2CAA2C;aAC9F;SACF;QACD;YACE,EAAE,EAAE,UAAU;YACd,IAAI,EAAE,wBAAwB;YAC9B,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE;gBACL,mFAAmF;gBACnF,gHAAgH;gBAChH,8IAA8I;aAC/I;SACF;QACD;YACE,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,sCAAsC;YAC5C,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE;gBACL,gMAAgM;gBAChM,kDAAkD,CAAC,CAAC,UAAU,uIAAuI;gBACrM,qRAAqR;aACtR;SACF;QACD;YACE,EAAE,EAAE,sBAAsB;YAC1B,IAAI,EAAE,uCAAuC;YAC7C,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,KAAK,EAAE;gBACL,oCAAoC,IAAI,EAAE;gBAC1C,sFAAsF;aACvF;SACF;KACF,CAAC;AACJ,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,WAAW,CAAC,CAAc;IACxC,OAAO;QACL,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,YAAY;QAC5B,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACjB,mBAAmB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC3C,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;KACxB,CAAC;AACJ,CAAC"}

package/dist/encryption.js

@@ -70,7 +70,13 @@ export class EncryptionManager {
     async cacheModule() {
         if (!this.persistPath || typeof process === 'undefined' || !process.versions?.node)
             return null;
-        return import('./keyCache.js');
+        // ⟨2026-10-13, the owner's 3A⟩ The specifier is a VARIABLE so a browser bundler does not follow
+        // it: this module is the browser-safe subpath `@engramx/client/encryption`, and keyCache.js is
+        // Node's file system. With a literal, Vite bundled keyCache (and node:fs) into a web build that
+        // can never reach it (persistence needs `process.versions.node`). Node resolves the variable
+        // relative to this file exactly as it did the literal. Held by test/browser-safe-subpaths.test.ts.
+        const keyCacheModule = './keyCache.js';
+        return (await import(/* @vite-ignore */ keyCacheModule));
     }
     async resolvedPath(kc) {
         return this.persistPath === '1' || this.persistPath === 'true'

package/dist/encryption.js.map

@@ -1 +1 @@
-{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../src/encryption.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,iFAAiF;AACjF,yEAAyE;AACzE,0FAA0F;AAC1F,iFAAiF;AACjF,0DAA0D;AAC1D,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,uEAAuE;AASvE,OAAO,EAAE,YAAY,EAAkB,MAAM,WAAW,CAAC;AAEzD,6EAA6E;AAC7E,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACrD,gGAAgG;AAChG,wEAAwE;AACxE,MAAM,aAAa,GAAG,0BAA0B,CAAC;AACjD,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;AACxE,yEAAyE;AACzE,iFAAiF;AACjF,MAAM,eAAe,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AAC1C,wEAAwE;AACxE,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACvD,+EAA+E;AAC/E,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAC/D,6FAA6F;AAC7F,8FAA8F;AAC9F,8FAA8F;AAC9F,iGAAiG;AACjG,gGAAgG;AAChG,qBAAqB;AACrB,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAE7D,SAAS,UAAU,CAAC,KAAiB,EAAE,MAAkB;IACvD,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACjF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,KAAiB;IACjC,OAAO,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,IAAI,CAAC,CAAwB;IACpC,OAAO,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAoCD,MAAM,OAAO,iBAAiB;IAQ5B;;;;;OAKG;IACH,YAAY,OAAO,GAAG,KAAK,EAAE,IAAoD;QAbjF;;;wFAGgF;QACxE,QAAG,GAAG,IAAI,GAAG,EAA8B,CAAC;QAUlD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,EAAE,UAAU,IAAI,IAAI,CAAC;QAC3C,2FAA2F;QAC3F,4FAA4F;QAC5F,iGAAiG;QACjG,yFAAyF;QACzF,MAAM,GAAG,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5F,MAAM,GAAG,GAAG,IAAI,EAAE,WAAW,IAAI,GAAG,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,CAAC;IAMO,KAAK,CAAC,WAAW;QACvB,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI;YAAE,OAAO,IAAI,CAAC;QAChG,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,EAAkC;QAC3D,OAAO,IAAI,CAAC,WAAW,KAAK,GAAG,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM;YAC5D,CAAC,CAAC,EAAE,CAAC,gBAAgB,EAAE;YACvB,CAAC,CAAE,IAAI,CAAC,WAAsB,CAAC;IACnC,CAAC;IAED,kFAAkF;IAClF,UAAU,CAAC,OAAgB;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;8FAC0F;IAClF,KAAK,CAAC,SAAS,CAAC,KAAuB,EAAE,KAAK,GAAG,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,EAAE,kBAAkB,EAAE,eAAe,EAAE,gBAAgB,EAAE,GAC7D,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACnC,wFAAwF;QACxF,2FAA2F;QAC3F,+FAA+F;QAC/F,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,EAAE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YACzC,0FAA0F;YAC1F,qFAAqF;YACrF,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;YAC9F,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,IAAI,GAAG,kBAAkB,CAAC,WAAW,CACzC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAClD,CAAC;gBACF,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,CACvC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAClD,CAAC;gBACF,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC;gBAC1F,MAAM,OAAO,GAAG,eAAe,CAAC,WAAW,CACzC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CACvD,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBACtC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,oBAAoB,EAAE,CAAC;gBAClD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAC1B,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,EAAE,CAAC;QACxC,+FAA+F;QAC/F,8FAA8F;QAC9F,6FAA6F;QAC7F,uFAAuF;QACvF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACnB,uFAAuF;YACvF,kEAAkE;YAClE,MAAM,IAAI,KAAK,CACb,gDAAgD,KAAK,MAAM,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CACnF,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC;QAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,2BAA2B,EAAE,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,gBAAgB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5F,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,oBAAoB,EAAE,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzB,yFAAyF;QACzF,wFAAwF;QACxF,2CAA2C;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,GAAG,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;gBAC1C,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE;oBAChF,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACpD,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACvD,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAC7C,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,KAAK;oBACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,qCAAqC;YACvC,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,OAAO,CAAC,KAAuB;QACnC,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAED,8DAA8D;IAC9D,WAAW,CAAC,KAAiB;QAC3B,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED;;+DAE2D;IAC3D,KAAK,CAAC,YAAY,CAAC,KAAuB,EAAE,SAAqB;QAC/D,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,SAAS,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;QACrD,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACf,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,OAAO,GAAG,CAAC;IACb,CAAC;IAED;uDACmD;IACnD,KAAK,CAAC,YAAY,CAAC,KAAuB,EAAE,KAAiB;QAC3D,0FAA0F;QAC1F,4FAA4F;QAC5F,6FAA6F;QAC7F,4FAA4F;QAC5F,0FAA0F;QAC1F,EAAE;QACF,8FAA8F;QAC9F,6FAA6F;QAC7F,6FAA6F;QAC7F,IACE,KAAK,CAAC,MAAM,IAAI,CAAC;YACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI;YAChB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EACjB,CAAC;YACD,MAAM,IAAI,KAAK,CACb,yCAAyC,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK;gBACnF,gFAAgF;gBAChF,qFAAqF;gBACrF,oCAAoC,CACvC,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,+CAA+C;YACjF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC/C,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACxC,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IACvF,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,OAAO,CAAC,KAAuB,EAAE,SAAiB;QACtD,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IACvE,CAAC;IAED;6DACyD;IACzD,KAAK,CAAC,OAAO,CAAC,KAAuB,EAAE,KAAiB;QACtD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,8EAA8E;IAC9E,gFAAgF;IAChF,sDAAsD;IACtD,6EAA6E;IAC7E,+EAA+E;IAC/E,gFAAgF;IAChF,oDAAoD;IAEpD,6EAA6E;IAC7E,eAAe,CAAC,KAAiB;QAC/B,OAAO,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC1C,CAAC;IAED;6FACyF;IACzF,KAAK,CAAC,wBAAwB,CAAC,KAAuB,EAAE,KAAiB;QACvE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW;QACnE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvE,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC5B,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;QAChD,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;QACpD,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC;QACnD,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC5C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,iBAAiB,CAAC,KAAuB,EAAE,SAAiB;QAChE,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC,CAAC,2BAA2B;QAC5D,OAAO,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IAED;;+BAE2B;IAC3B,KAAK,CAAC,mBAAmB,CAAC,KAAuB,EAAE,KAAiB;QAClE,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACrF,CAAC;IAED;;+EAE2E;IAC3E,KAAK,CAAC,wBAAwB,CAAC,KAAuB,EAAE,KAAiB;QACvE,IAAI,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,CAAC;YACrC,8EAA8E;YAC9E,MAAM,KAAK,GAAiB,EAAE,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBACxB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC;oBAClD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;gBACxE,CAAC;gBACD,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC;gBAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;gBAC9E,CAAC;gBACD,+FAA+F;gBAC/F,mFAAmF;gBACnF,MAAM,GAAG,GACP,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;gBAC3F,CAAC,IAAI,CAAC,CAAC;gBACP,IAAI,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;oBAC3B,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;gBACJ,CAAC;gBACD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC;gBAC5C,CAAC,IAAI,GAAG,CAAC;gBACT,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,CAAC,IAAI,KAAK;gBAAE,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,GAAG,GAAG,CAAC,CAAC;YACZ,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACnB,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;YAClB,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,2FAA2F;QAC3F,sEAAsE;QACtE,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED;qFACiF;IACjF,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,EAAE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1B,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../src/encryption.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,iFAAiF;AACjF,yEAAyE;AACzE,0FAA0F;AAC1F,iFAAiF;AACjF,0DAA0D;AAC1D,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,uEAAuE;AASvE,OAAO,EAAE,YAAY,EAAkB,MAAM,WAAW,CAAC;AAEzD,6EAA6E;AAC7E,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACrD,gGAAgG;AAChG,wEAAwE;AACxE,MAAM,aAAa,GAAG,0BAA0B,CAAC;AACjD,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;AACxE,yEAAyE;AACzE,iFAAiF;AACjF,MAAM,eAAe,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AAC1C,wEAAwE;AACxE,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACvD,+EAA+E;AAC/E,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAC/D,6FAA6F;AAC7F,8FAA8F;AAC9F,8FAA8F;AAC9F,iGAAiG;AACjG,gGAAgG;AAChG,qBAAqB;AACrB,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAE7D,SAAS,UAAU,CAAC,KAAiB,EAAE,MAAkB;IACvD,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACjF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,KAAiB;IACjC,OAAO,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,IAAI,CAAC,CAAwB;IACpC,OAAO,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAoCD,MAAM,OAAO,iBAAiB;IAQ5B;;;;;OAKG;IACH,YAAY,OAAO,GAAG,KAAK,EAAE,IAAoD;QAbjF;;;wFAGgF;QACxE,QAAG,GAAG,IAAI,GAAG,EAA8B,CAAC;QAUlD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,EAAE,UAAU,IAAI,IAAI,CAAC;QAC3C,2FAA2F;QAC3F,4FAA4F;QAC5F,iGAAiG;QACjG,yFAAyF;QACzF,MAAM,GAAG,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5F,MAAM,GAAG,GAAG,IAAI,EAAE,WAAW,IAAI,GAAG,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,CAAC;IAMO,KAAK,CAAC,WAAW;QACvB,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI;YAAE,OAAO,IAAI,CAAC;QAChG,gGAAgG;QAChG,+FAA+F;QAC/F,gGAAgG;QAChG,6FAA6F;QAC7F,mGAAmG;QACnG,MAAM,cAAc,GAAG,eAAe,CAAC;QACvC,OAAO,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAmC,CAAC;IAC7F,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,EAAkC;QAC3D,OAAO,IAAI,CAAC,WAAW,KAAK,GAAG,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM;YAC5D,CAAC,CAAC,EAAE,CAAC,gBAAgB,EAAE;YACvB,CAAC,CAAE,IAAI,CAAC,WAAsB,CAAC;IACnC,CAAC;IAED,kFAAkF;IAClF,UAAU,CAAC,OAAgB;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;8FAC0F;IAClF,KAAK,CAAC,SAAS,CAAC,KAAuB,EAAE,KAAK,GAAG,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,EAAE,kBAAkB,EAAE,eAAe,EAAE,gBAAgB,EAAE,GAC7D,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACnC,wFAAwF;QACxF,2FAA2F;QAC3F,+FAA+F;QAC/F,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,EAAE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YACzC,0FAA0F;YAC1F,qFAAqF;YACrF,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;YAC9F,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,IAAI,GAAG,kBAAkB,CAAC,WAAW,CACzC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAClD,CAAC;gBACF,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,CACvC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAClD,CAAC;gBACF,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC;gBAC1F,MAAM,OAAO,GAAG,eAAe,CAAC,WAAW,CACzC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CACvD,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBACtC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,oBAAoB,EAAE,CAAC;gBAClD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAC1B,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,EAAE,CAAC;QACxC,+FAA+F;QAC/F,8FAA8F;QAC9F,6FAA6F;QAC7F,uFAAuF;QACvF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACnB,uFAAuF;YACvF,kEAAkE;YAClE,MAAM,IAAI,KAAK,CACb,gDAAgD,KAAK,MAAM,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CACnF,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC;QAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,2BAA2B,EAAE,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,gBAAgB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5F,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,oBAAoB,EAAE,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzB,yFAAyF;QACzF,wFAAwF;QACxF,2CAA2C;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,GAAG,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;gBAC1C,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE;oBAChF,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACpD,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACvD,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAC7C,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,KAAK;oBACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,qCAAqC;YACvC,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,OAAO,CAAC,KAAuB;QACnC,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAED,8DAA8D;IAC9D,WAAW,CAAC,KAAiB;QAC3B,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED;;+DAE2D;IAC3D,KAAK,CAAC,YAAY,CAAC,KAAuB,EAAE,SAAqB;QAC/D,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,SAAS,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;QACrD,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACf,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,OAAO,GAAG,CAAC;IACb,CAAC;IAED;uDACmD;IACnD,KAAK,CAAC,YAAY,CAAC,KAAuB,EAAE,KAAiB;QAC3D,0FAA0F;QAC1F,4FAA4F;QAC5F,6FAA6F;QAC7F,4FAA4F;QAC5F,0FAA0F;QAC1F,EAAE;QACF,8FAA8F;QAC9F,6FAA6F;QAC7F,6FAA6F;QAC7F,IACE,KAAK,CAAC,MAAM,IAAI,CAAC;YACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI;YAChB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EACjB,CAAC;YACD,MAAM,IAAI,KAAK,CACb,yCAAyC,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK;gBACnF,gFAAgF;gBAChF,qFAAqF;gBACrF,oCAAoC,CACvC,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,+CAA+C;YACjF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC/C,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACxC,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IACvF,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,OAAO,CAAC,KAAuB,EAAE,SAAiB;QACtD,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IACvE,CAAC;IAED;6DACyD;IACzD,KAAK,CAAC,OAAO,CAAC,KAAuB,EAAE,KAAiB;QACtD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,8EAA8E;IAC9E,gFAAgF;IAChF,sDAAsD;IACtD,6EAA6E;IAC7E,+EAA+E;IAC/E,gFAAgF;IAChF,oDAAoD;IAEpD,6EAA6E;IAC7E,eAAe,CAAC,KAAiB;QAC/B,OAAO,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC1C,CAAC;IAED;6FACyF;IACzF,KAAK,CAAC,wBAAwB,CAAC,KAAuB,EAAE,KAAiB;QACvE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW;QACnE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvE,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC5B,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;QAChD,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;QACpD,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC;QACnD,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC5C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,iBAAiB,CAAC,KAAuB,EAAE,SAAiB;QAChE,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC,CAAC,2BAA2B;QAC5D,OAAO,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IAED;;+BAE2B;IAC3B,KAAK,CAAC,mBAAmB,CAAC,KAAuB,EAAE,KAAiB;QAClE,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACrF,CAAC;IAED;;+EAE2E;IAC3E,KAAK,CAAC,wBAAwB,CAAC,KAAuB,EAAE,KAAiB;QACvE,IAAI,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,CAAC;YACrC,8EAA8E;YAC9E,MAAM,KAAK,GAAiB,EAAE,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBACxB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC;oBAClD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;gBACxE,CAAC;gBACD,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC;gBAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;gBAC9E,CAAC;gBACD,+FAA+F;gBAC/F,mFAAmF;gBACnF,MAAM,GAAG,GACP,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;gBAC3F,CAAC,IAAI,CAAC,CAAC;gBACP,IAAI,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;oBAC3B,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;gBACJ,CAAC;gBACD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC;gBAC5C,CAAC,IAAI,GAAG,CAAC;gBACT,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,CAAC,IAAI,KAAK;gBAAE,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,GAAG,GAAG,CAAC,CAAC;YACZ,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACnB,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;YAClB,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,2FAA2F;QAC3F,sEAAsE;QACtE,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED;qFACiF;IACjF,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,EAAE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1B,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;CACF"}

package/dist/idl.d.ts

@@ -1,3 +1,4 @@
+import type { _SERVICE as GeneratedEngramService } from '@engramx/idl/engram';
 type InterfaceFactory = (env: {
     IDL: any;
 }) => any;
@@ -28,7 +29,7 @@ export declare const marketSubset: (methods?: readonly string[]) => InterfaceFac
  * nothing calls reads as a supported capability to the next person who greps for one, and a name
  * here the CANISTER does not serve is a construction-time failure — projectService throws on it.
  *
- * The market serves 64 methods. These nine are the BUYER path, which is the only path this SDK has
+ * The market serves 64 methods. These seven are the BUYER path, which is the only path this SDK has
  * ever wrapped: the seller surface (uploads, endpoints, service registration, pricing) is console
  * work, and the admin surface is recovery work. Neither belongs in an agent's client library.
  */
@@ -55,11 +56,25 @@ export declare const SDK_MARKET_METHODS: readonly ["confirmJob", "disputeJob", "
  * owner-mode `git-revert`, which reaches the actor directly and says so at its call site, and the
  * encryption migrations the encryption runbook names by hand. If a name here has no caller, that is
  * a bug in this list, not a reserve.
+ * ⟨2026-10-13, the owner's 5A⟩ `git-revert` no longer calls writeMemory: its canister restore moved
+ * to @engramx/owner (`--restore`). The encryption migrations and `setMemoryEncryption` are now the
+ * only callers of `writeMemory` and `setEncryptionEnabled`; both names leave this list when that
+ * trio moves to the owner kit too (it waits on the kit taking `@engramx/client/encryption` as a
+ * dependency).
  *
  * ADDING A NAME IS A PRODUCT DECISION, not a maintenance one (surface-budget rule L6): no addition
  * without a named caller.
  */
 export declare const SDK_ENGRAM_METHODS: readonly ["about", "appendMemory", "backupAbort", "backupFinalize", "backupInit", "backupPullChunk", "backupPushChunk", "getBackupMetadata", "getCertifiedAuditHead", "getEncryptedMemoryKey", "getMemoryHistory", "getMemoryKeyVerificationKey", "getOwnerConsole", "getProtectedPaths", "getWalletBalances", "getWorldIdVerification", "listAuditEntries", "listBackups", "listGuardians", "listMemoryFiles", "listMyApprovalRequests", "readMemory", "readMemoryBatch", "readMemoryBytes", "pairAgent", "reviseMemory", "resignAgent", "rotateAgentKeyHash", "nominateAgentKey", "acceptAgentKeyNomination", "getChildAllowance", "openChildEngram", "getSpawnedBy", "sessionReadContext", "setEncryptionEnabled", "writeMemory"];
+/** One of the engram methods this SDK may call. */
+export type SdkEngramMethod = (typeof SDK_ENGRAM_METHODS)[number];
+/**
+ * ⟨2026-10-13, the owner's 3A⟩ The TYPE of the actor EngramClient builds: the generated engram
+ * interface, narrowed to SDK_ENGRAM_METHODS. It was `ActorSubclass<any>`, so a call with the wrong
+ * arguments, a method this list does not declare, or a reply read as the wrong shape compiled and
+ * failed at run time (types.ts says which ones did). Now tsc checks every call and every reply.
+ */
+export type SdkEngramService = Pick<GeneratedEngramService, SdkEngramMethod>;
 /**
  * The engram actor interface EngramClient builds. Exported because the fidelity gate imports it
  * and because a caller holding its own agent may want the same narrowing; it is not part of the

package/dist/idl.js

@@ -128,7 +128,7 @@ export const marketSubset = (methods = SDK_MARKET_METHODS) => ({ IDL }) => proje
  * nothing calls reads as a supported capability to the next person who greps for one, and a name
  * here the CANISTER does not serve is a construction-time failure — projectService throws on it.
  *
- * The market serves 64 methods. These nine are the BUYER path, which is the only path this SDK has
+ * The market serves 64 methods. These seven are the BUYER path, which is the only path this SDK has
  * ever wrapped: the seller surface (uploads, endpoints, service registration, pricing) is console
  * work, and the admin surface is recovery work. Neither belongs in an agent's client library.
  */
@@ -163,6 +163,11 @@ export const SDK_MARKET_METHODS = [
  * owner-mode `git-revert`, which reaches the actor directly and says so at its call site, and the
  * encryption migrations the encryption runbook names by hand. If a name here has no caller, that is
  * a bug in this list, not a reserve.
+ * ⟨2026-10-13, the owner's 5A⟩ `git-revert` no longer calls writeMemory: its canister restore moved
+ * to @engramx/owner (`--restore`). The encryption migrations and `setMemoryEncryption` are now the
+ * only callers of `writeMemory` and `setEncryptionEnabled`; both names leave this list when that
+ * trio moves to the owner kit too (it waits on the kit taking `@engramx/client/encryption` as a
+ * dependency).
  *
  * ADDING A NAME IS A PRODUCT DECISION, not a maintenance one (surface-budget rule L6): no addition
  * without a named caller.
@@ -173,6 +178,9 @@ export const SDK_ENGRAM_METHODS = [
     // it that the canister does not serve fails at RUNTIME with method-not-found, exactly like the
     // hand-written Motoko IDLs check-client-idls.mjs gates. Nothing type-checks it: projectService
     // narrows a generated factory, and an actor call is `any`.
+    // ⟨2026-10-13, the owner's 3A⟩ Something does now: SdkEngramService (below) is the generated
+    // interface narrowed to this list, and EngramClient's actor has that type — a name here the
+    // canister stopped serving fails to compile, and so does a call to a name not here.
     //
     // Six of the twenty MOVED to the market with the commerce graft (confirmJob, disputeJob, getJob,
     // getJobResult, listServices, createJob) and are NOT replaced here — they belong to a

package/dist/idl.js.map

@@ -1 +1 @@
-{"version":3,"file":"idl.js","sourceRoot":"","sources":["../src/idl.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,EAAE;AACF,wFAAwF;AACxF,sFAAsF;AACtF,2FAA2F;AAC3F,6FAA6F;AAC7F,0FAA0F;AAC1F,qFAAqF;AACrF,6FAA6F;AAC7F,wFAAwF;AACxF,EAAE;AACF,4FAA4F;AAC5F,gGAAgG;AAChG,8FAA8F;AAC9F,iGAAiG;AACjG,+FAA+F;AAC/F,kGAAkG;AAClG,sCAAsC;AACtC,qGAAqG;AACrG,6FAA6F;AAC7F,6FAA6F;AAC7F,iGAAiG;AACjG,8FAA8F;AAC9F,mGAAmG;AACnG,+FAA+F;AAC/F,gGAAgG;AAChG,+FAA+F;AAC/F,8FAA8F;AAC9F,6FAA6F;AAC7F,yFAAyF;AACzF,EAAE;AACF,gGAAgG;AAChG,6FAA6F;AAC7F,+FAA+F;AAC/F,8FAA8F;AAC9F,gGAAgG;AAChG,6FAA6F;AAC7F,+FAA+F;AAC/F,sFAAsF;AACtF,EAAE;AACF,kGAAkG;AAClG,uFAAuF;AACvF,EAAE;AACF,mGAAmG;AACnG,gGAAgG;AAChG,kFAAkF;AAClF,oGAAoG;AACpG,8FAA8F;AAC9F,0DAA0D;AAC1D,EAAE;AACF,2FAA2F;AAC3F,mEAAmE;AACnE,4EAA4E;AAC5E,mGAAmG;AACnG,kGAAkG;AAClG,mGAAmG;AACnG,oGAAoG;AACpG,4EAA4E;AAC5E,EAAE;AACF,iGAAiG;AACjG,oGAAoG;AACpG,6EAA6E;AAC7E,EAAE;AACF,8FAA8F;AAC9F,kGAAkG;AAClG,kGAAkG;AAClG,8FAA8F;AAC9F,gGAAgG;AAChG,mFAAmF;AACnF,EAAE;AACF,oGAAoG;AACpG,kGAAkG;AAClG,oGAAoG;AACpG,iGAAiG;AACjG,mGAAmG;AACnG,oDAAoD;AACpD,EAAE;AACF,6FAA6F;AAC7F,4FAA4F;AAC5F,2FAA2F;AAC3F,8FAA8F;AAC9F,gGAAgG;AAChG,6FAA6F;AAC7F,wDAAwD;AACxD,OAAO,EAAE,UAAU,IAAI,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,UAAU,IAAI,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,UAAU,IAAI,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAIvE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAC5B,SAA2B,EAC3B,OAA0B,EAC1B,GAAQ;IAER,MAAM,MAAM,GAAG,IAAI,GAAG,CAAc,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YACtC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3B,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,sDAAsD;YACzF,uGAAuG,CAC1G,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,MAAM,YAAY,GACvB,CAAC,OAA0B,EAAoB,EAAE,CACjD,CAAC,EAAE,GAAG,EAAgB,EAAE,EAAE,CACxB,cAAc,CAAC,kBAAsC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AAEzE,oEAAoE;AACpE,MAAM,CAAC,MAAM,cAAc,GACzB,CAAC,OAA0B,EAAoB,EAAE,CACjD,CAAC,EAAE,GAAG,EAAgB,EAAE,EAAE,CACxB,cAAc,CAAC,oBAAwC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AAE3E,kEAAkE;AAClE,MAAM,CAAC,MAAM,YAAY,GACvB,CAAC,UAA6B,kBAAkB,EAAoB,EAAE,CACtE,CAAC,EAAE,GAAG,EAAgB,EAAE,EAAE,CACxB,cAAc,CAAC,kBAAsC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AAEzE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,YAAY;IACZ,YAAY;IACZ,QAAQ;IACR,cAAc;IACd,cAAc;IACd,cAAc;IACd,WAAW;CACH,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,8FAA8F;IAC9F,gGAAgG;IAChG,+FAA+F;IAC/F,+FAA+F;IAC/F,2DAA2D;IAC3D,EAAE;IACF,iGAAiG;IACjG,sFAAsF;IACtF,uCAAuC;IACvC,EAAE;IACF,gGAAgG;IAChG,+FAA+F;IAC/F,qEAAqE;IACrE,OAAO;IACP,cAAc;IACd,aAAa;IACb,gBAAgB;IAChB,YAAY;IACZ,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,uBAAuB;IACvB,uBAAuB;IACvB,kBAAkB;IAClB,6BAA6B;IAC7B,8FAA8F;IAC9F,4FAA4F;IAC5F,+FAA+F;IAC/F,4FAA4F;IAC5F,+BAA+B;IAC/B,iBAAiB;IACjB,mBAAmB;IACnB,mBAAmB;IACnB,wBAAwB;IACxB,kBAAkB;IAClB,aAAa;IACb,eAAe;IACf,iBAAiB;IACjB,wBAAwB;IACxB,YAAY;IACZ,iBAAiB;IACjB,iBAAiB;IACjB,WAAW;IACX,cAAc;IACd,8FAA8F;IAC9F,0EAA0E;IAC1E,aAAa;IACb,oBAAoB;IACpB,wFAAwF;IACxF,iGAAiG;IACjG,8FAA8F;IAC9F,2CAA2C;IAC3C,kBAAkB;IAClB,0BAA0B;IAC1B,6FAA6F;IAC7F,iGAAiG;IACjG,yFAAyF;IACzF,6FAA6F;IAC7F,mBAAmB;IACnB,iBAAiB;IACjB,cAAc;IACd,oBAAoB;IACpB,sBAAsB;IACtB,aAAa;CACL,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAqB,YAAY,CAAC,kBAAkB,CAAC,CAAC"}
+{"version":3,"file":"idl.js","sourceRoot":"","sources":["../src/idl.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,EAAE;AACF,wFAAwF;AACxF,sFAAsF;AACtF,2FAA2F;AAC3F,6FAA6F;AAC7F,0FAA0F;AAC1F,qFAAqF;AACrF,6FAA6F;AAC7F,wFAAwF;AACxF,EAAE;AACF,4FAA4F;AAC5F,gGAAgG;AAChG,8FAA8F;AAC9F,iGAAiG;AACjG,+FAA+F;AAC/F,kGAAkG;AAClG,sCAAsC;AACtC,qGAAqG;AACrG,6FAA6F;AAC7F,6FAA6F;AAC7F,iGAAiG;AACjG,8FAA8F;AAC9F,mGAAmG;AACnG,+FAA+F;AAC/F,gGAAgG;AAChG,+FAA+F;AAC/F,8FAA8F;AAC9F,6FAA6F;AAC7F,yFAAyF;AACzF,EAAE;AACF,gGAAgG;AAChG,6FAA6F;AAC7F,+FAA+F;AAC/F,8FAA8F;AAC9F,gGAAgG;AAChG,6FAA6F;AAC7F,+FAA+F;AAC/F,sFAAsF;AACtF,EAAE;AACF,kGAAkG;AAClG,uFAAuF;AACvF,EAAE;AACF,mGAAmG;AACnG,gGAAgG;AAChG,kFAAkF;AAClF,oGAAoG;AACpG,8FAA8F;AAC9F,0DAA0D;AAC1D,EAAE;AACF,2FAA2F;AAC3F,mEAAmE;AACnE,4EAA4E;AAC5E,mGAAmG;AACnG,kGAAkG;AAClG,mGAAmG;AACnG,oGAAoG;AACpG,4EAA4E;AAC5E,EAAE;AACF,iGAAiG;AACjG,oGAAoG;AACpG,6EAA6E;AAC7E,EAAE;AACF,8FAA8F;AAC9F,kGAAkG;AAClG,kGAAkG;AAClG,8FAA8F;AAC9F,gGAAgG;AAChG,mFAAmF;AACnF,EAAE;AACF,oGAAoG;AACpG,kGAAkG;AAClG,oGAAoG;AACpG,iGAAiG;AACjG,mGAAmG;AACnG,oDAAoD;AACpD,EAAE;AACF,6FAA6F;AAC7F,4FAA4F;AAC5F,2FAA2F;AAC3F,8FAA8F;AAC9F,gGAAgG;AAChG,6FAA6F;AAC7F,wDAAwD;AACxD,OAAO,EAAE,UAAU,IAAI,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEvE,OAAO,EAAE,UAAU,IAAI,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,UAAU,IAAI,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAIvE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAC5B,SAA2B,EAC3B,OAA0B,EAC1B,GAAQ;IAER,MAAM,MAAM,GAAG,IAAI,GAAG,CAAc,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YACtC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3B,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,sDAAsD;YACzF,uGAAuG,CAC1G,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,MAAM,YAAY,GACvB,CAAC,OAA0B,EAAoB,EAAE,CACjD,CAAC,EAAE,GAAG,EAAgB,EAAE,EAAE,CACxB,cAAc,CAAC,kBAAsC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AAEzE,oEAAoE;AACpE,MAAM,CAAC,MAAM,cAAc,GACzB,CAAC,OAA0B,EAAoB,EAAE,CACjD,CAAC,EAAE,GAAG,EAAgB,EAAE,EAAE,CACxB,cAAc,CAAC,oBAAwC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AAE3E,kEAAkE;AAClE,MAAM,CAAC,MAAM,YAAY,GACvB,CAAC,UAA6B,kBAAkB,EAAoB,EAAE,CACtE,CAAC,EAAE,GAAG,EAAgB,EAAE,EAAE,CACxB,cAAc,CAAC,kBAAsC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AAEzE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,YAAY;IACZ,YAAY;IACZ,QAAQ;IACR,cAAc;IACd,cAAc;IACd,cAAc;IACd,WAAW;CACH,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,8FAA8F;IAC9F,gGAAgG;IAChG,+FAA+F;IAC/F,+FAA+F;IAC/F,2DAA2D;IAC3D,6FAA6F;IAC7F,4FAA4F;IAC5F,oFAAoF;IACpF,EAAE;IACF,iGAAiG;IACjG,sFAAsF;IACtF,uCAAuC;IACvC,EAAE;IACF,gGAAgG;IAChG,+FAA+F;IAC/F,qEAAqE;IACrE,OAAO;IACP,cAAc;IACd,aAAa;IACb,gBAAgB;IAChB,YAAY;IACZ,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,uBAAuB;IACvB,uBAAuB;IACvB,kBAAkB;IAClB,6BAA6B;IAC7B,8FAA8F;IAC9F,4FAA4F;IAC5F,+FAA+F;IAC/F,4FAA4F;IAC5F,+BAA+B;IAC/B,iBAAiB;IACjB,mBAAmB;IACnB,mBAAmB;IACnB,wBAAwB;IACxB,kBAAkB;IAClB,aAAa;IACb,eAAe;IACf,iBAAiB;IACjB,wBAAwB;IACxB,YAAY;IACZ,iBAAiB;IACjB,iBAAiB;IACjB,WAAW;IACX,cAAc;IACd,8FAA8F;IAC9F,0EAA0E;IAC1E,aAAa;IACb,oBAAoB;IACpB,wFAAwF;IACxF,iGAAiG;IACjG,8FAA8F;IAC9F,2CAA2C;IAC3C,kBAAkB;IAClB,0BAA0B;IAC1B,6FAA6F;IAC7F,iGAAiG;IACjG,yFAAyF;IACzF,6FAA6F;IAC7F,mBAAmB;IACnB,iBAAiB;IACjB,cAAc;IACd,oBAAoB;IACpB,sBAAsB;IACtB,aAAa;CACL,CAAC;AAaX;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAqB,YAAY,CAAC,kBAAkB,CAAC,CAAC"}

package/dist/index.d.ts

@@ -21,16 +21,15 @@ export type { PairOptions, PairResult } from './pair.js';
 export { openEngram, NOT_ALLOWED } from './openEngram.js';
 export type { OpenEngramOptions, OpenEngramResult, OpenEngramIO, OpenEngramEngram, } from './openEngram.js';
 export { setupOpenClaw, OpenClawNotFoundError } from './openclaw-setup.js';
+export { getOpenClawDir, loadOpenClawConfig, resolveMemoryDir, detectDatabases, encodeDatabaseBackup, restoreDatabaseBackup, snapshotSqliteFile, DB_TYPES, GITIGNORE_CONTENT, } from './openclaw-local.js';
+export type { OpenClawConfig, DetectedDatabase, DbSuffix } from './openclaw-local.js';
 export type { OpenClawSetupOptions, OpenClawSetupResult } from './openclaw-setup.js';
 export { generateMcpConfig, claudeConfigPaths, installMcpConfig } from './claude-setup.js';
 export type { ClaudeSetupOptions, McpConfig } from './claude-setup.js';
 export { migrateOpenClawMemory, recoverOpenClaw, createCheckpoint, rollbackCheckpoint, listCheckpoints, hasValidPairing, resumeMigration, findIncompleteCheckpoint, } from './migrate.js';
 export type { MigrateOptions, MigrateFileEvent, MigrateCallback, MigrateResult, RecoverResult, RollbackResult, CheckpointSummary, CheckpointMetadata, } from './migrate.js';
-export { resolveAndValidate, isValidCanisterId, isSafePathComponent } from './path-utils.js';
-export { LRUCache } from './cache.js';
-export { OfflineQueue } from './offline.js';
-export type { Role, AgentStatus, AgentPermissions, AgentRecord, ChildAllowanceRow, KeyNomination, LogPosition, HeldKey, AgentEnding, AgentEndReason, Pairing, TrackRecordNotice, EnrolmentProof, RawMemoryFile, MemoryVersionSummary, MemoryEviction, MemoryFile, MemoryFileInfo, SessionContext, MemoryHistory, MemoryRangePage, Account, AuditEntry, AuditPage, EngramStatus, OwnerConsole, EngramRecord, EngramRecordStatus, RegistryStatus, GuardianPermissions, GuardianRecord, BackupMetadata, BackupType, BackupStatus, ApprovalStatus, ApprovalRequest, } from './types.js';
+export type { Role, AgentStatus, AgentPermissions, AgentRecord, ChildAllowanceRow, KeyNomination, LogPosition, HeldKey, AgentEnding, AgentEndReason, Pairing, TrackRecordNotice, EnrolmentProof, RawMemoryFile, MemoryVersionSummary, MemoryEviction, MemoryFile, MemoryFileInfo, SessionContext, MemoryHistory, MemoryRangePage, AuditEntry, AuditPage, EngramStatus, OwnerConsole, GuardianPermissions, GuardianRecord, BackupMetadata, BackupType, BackupStatus, ApprovalStatus, ApprovalRequest, } from './types.js';
 export { verifyCanonicalLineage, classifyLineage, CANONICAL_REGISTRY_CANISTER_ID, type LineageVerdict, type CustodyMode, } from './lineage.js';
 export { chunkHash, deltaHash, contentRoot, merkle, leaf, evictedRoot, opsRoot, eventHash, eventPreambleAndBody, manifestBytes, opBody, opTag, toHex, type Hash as LedgerFsHash, type ChunkRef as LedgerFsChunkRef, type Manifest as LedgerFsManifest, type Op as LedgerFsOp, type Event as LedgerFsEvent, type ImportNote as LedgerFsImportNote, } from './ledgerfsHash.js';
-export { assembleMemoryArchive, verifyMemoryArchive, recomputeOpsRoot, memoryLogEventHash, toLedgerFsEvent, isResponseTooLarge, ARCHIVE_MAX_RANGE, ARCHIVE_PAGE_EVENTS, } from './memoryArchive.js';
+export { assembleMemoryArchive, verifyMemoryArchive, recomputeOpsRoot, memoryLogEventHash, toLedgerFsEvent, } from './memoryArchive.js';
 export type { MemoryLogEvent, MemoryLogOp, MemoryLogImportNote, MemoryLogManifest, MemoryLogChunkRef, MemoryLogPage, MemoryLogEventPage, MemoryLogPageFetcher, MemoryExportReceipt, MemoryCondenseResult, MemoryCondensePreview, MemoryReceiptRef, MemoryExportReceiptRow, MemoryCheckpointRow, MemoryArchive, MemoryArchiveVerification, AssembleArchiveOptions, OpsRootAttestation, } from './memoryArchive.js';

package/dist/index.js

@@ -42,11 +42,12 @@ export { pair, PairError } from './pair.js';
 // ⟨2026-10-01, the owner's ruling 2 A⟩ The open-engram command, for an agent that runs it without the CLI.
 export { openEngram, NOT_ALLOWED } from './openEngram.js';
 export { setupOpenClaw, OpenClawNotFoundError } from './openclaw-setup.js';
+// ⟨2026-10-13, the bloat audit⟩ Where OpenClaw keeps things on this machine, and the database backup
+// format: the one copy, which the OpenClaw plugin imports for its backups and `migrate --recover`
+// for its restore (openclaw-local.ts says why there were three).
+export { getOpenClawDir, loadOpenClawConfig, resolveMemoryDir, detectDatabases, encodeDatabaseBackup, restoreDatabaseBackup, snapshotSqliteFile, DB_TYPES, GITIGNORE_CONTENT, } from './openclaw-local.js';
 export { generateMcpConfig, claudeConfigPaths, installMcpConfig } from './claude-setup.js';
 export { migrateOpenClawMemory, recoverOpenClaw, createCheckpoint, rollbackCheckpoint, listCheckpoints, hasValidPairing, resumeMigration, findIncompleteCheckpoint, } from './migrate.js';
-export { resolveAndValidate, isValidCanisterId, isSafePathComponent } from './path-utils.js';
-export { LRUCache } from './cache.js';
-export { OfflineQueue } from './offline.js';
 // The blind `@ic402/client` re-export block (Ic402Client, signVoucher, encodeVoucherPayload,
 // Ic402Error, probeX402, fetchX402, findPaymentOption, broadcastTransaction, pollReceipt,
 // registerAgent, and their types) was removed on 2026-08-17. Nothing consumed any of them: the two
@@ -79,5 +80,5 @@ export { chunkHash, deltaHash, contentRoot, merkle, leaf, evictedRoot, opsRoot,
 // the walk itself reads the served page now. `MemoryLogPage` IS `listMemoryLog`'s `LogPage`, and a
 // fetcher has that method's shape, so `assembleMemoryArchive(actor.listMemoryLog.bind(actor), opts)`
 // with an owner-authenticated actor is the whole call.
-export { assembleMemoryArchive, verifyMemoryArchive, recomputeOpsRoot, memoryLogEventHash, toLedgerFsEvent, isResponseTooLarge, ARCHIVE_MAX_RANGE, ARCHIVE_PAGE_EVENTS, } from './memoryArchive.js';
+export { assembleMemoryArchive, verifyMemoryArchive, recomputeOpsRoot, memoryLogEventHash, toLedgerFsEvent, } from './memoryArchive.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,iGAAiG;AACjG,6FAA6F;AAC7F,iGAAiG;AACjG,+CAA+C;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAMnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,mGAAmG;AACnG,qGAAqG;AACrG,OAAO,EACL,mBAAmB,EACnB,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAI7B,mGAAmG;AACnG,oGAAoG;AACpG,mGAAmG;AACnG,uFAAuF;AACvF,4FAA4F;AAC5F,kGAAkG;AAClG,0DAA0D;AAC1D,EAAE;AACF,oGAAoG;AACpG,2FAA2F;AAC3F,gGAAgG;AAChG,EAAE;AACF,qGAAqG;AACrG,iGAAiG;AACjG,+FAA+F;AAC/F,sEAAsE;AACtE,kGAAkG;AAClG,iGAAiG;AACjG,iGAAiG;AACjG,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAG5B,wDAAwD;AACxD,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC,qDAAqD;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGrD,kFAAkF;AAClF,+FAA+F;AAC/F,uFAAuF;AAEvF,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE5C,2GAA2G;AAC3G,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAO1D,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE3E,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE3F,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,eAAe,EACf,wBAAwB,GACzB,MAAM,cAAc,CAAC;AAWtB,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC7F,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AA2C5C,6FAA6F;AAC7F,0FAA0F;AAC1F,mGAAmG;AACnG,gGAAgG;AAChG,iGAAiG;AACjG,kGAAkG;AAClG,iGAAiG;AACjG,gEAAgE;AAEhE,0FAA0F;AAC1F,0FAA0F;AAC1F,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,8BAA8B,GAG/B,MAAM,cAAc,CAAC;AAEtB,+FAA+F;AAC/F,oGAAoG;AACpG,mGAAmG;AACnG,OAAO,EACL,SAAS,EACT,SAAS,EACT,WAAW,EACX,MAAM,EACN,IAAI,EACJ,WAAW,EACX,OAAO,EACP,SAAS,EACT,oBAAoB,EACpB,aAAa,EACb,MAAM,EACN,KAAK,EACL,KAAK,GAON,MAAM,mBAAmB,CAAC;AAE3B,+FAA+F;AAC/F,+FAA+F;AAC/F,mLAAmL;AACnL,kGAAkG;AAClG,kGAAkG;AAClG,kGAAkG;AAClG,mGAAmG;AACnG,kGAAkG;AAClG,wCAAwC;AACxC,qFAAqF;AACrF,mGAAmG;AACnG,4FAA4F;AAC5F,qCAAqC;AACrC,oGAAoG;AACpG,mGAAmG;AACnG,qGAAqG;AACrG,uDAAuD;AACvD,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,iGAAiG;AACjG,6FAA6F;AAC7F,iGAAiG;AACjG,+CAA+C;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAMnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,mGAAmG;AACnG,qGAAqG;AACrG,OAAO,EACL,mBAAmB,EACnB,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAI7B,mGAAmG;AACnG,oGAAoG;AACpG,mGAAmG;AACnG,uFAAuF;AACvF,4FAA4F;AAC5F,kGAAkG;AAClG,0DAA0D;AAC1D,EAAE;AACF,oGAAoG;AACpG,2FAA2F;AAC3F,gGAAgG;AAChG,EAAE;AACF,qGAAqG;AACrG,iGAAiG;AACjG,+FAA+F;AAC/F,sEAAsE;AACtE,kGAAkG;AAClG,iGAAiG;AACjG,iGAAiG;AACjG,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAG5B,wDAAwD;AACxD,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC,qDAAqD;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGrD,kFAAkF;AAClF,+FAA+F;AAC/F,uFAAuF;AAEvF,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE5C,2GAA2G;AAC3G,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAO1D,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC3E,qGAAqG;AACrG,kGAAkG;AAClG,iEAAiE;AACjE,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,QAAQ,EACR,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE3F,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,eAAe,EACf,wBAAwB,GACzB,MAAM,cAAc,CAAC;AAoDtB,6FAA6F;AAC7F,0FAA0F;AAC1F,mGAAmG;AACnG,gGAAgG;AAChG,iGAAiG;AACjG,kGAAkG;AAClG,iGAAiG;AACjG,gEAAgE;AAEhE,0FAA0F;AAC1F,0FAA0F;AAC1F,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,8BAA8B,GAG/B,MAAM,cAAc,CAAC;AAEtB,+FAA+F;AAC/F,oGAAoG;AACpG,mGAAmG;AACnG,OAAO,EACL,SAAS,EACT,SAAS,EACT,WAAW,EACX,MAAM,EACN,IAAI,EACJ,WAAW,EACX,OAAO,EACP,SAAS,EACT,oBAAoB,EACpB,aAAa,EACb,MAAM,EACN,KAAK,EACL,KAAK,GAON,MAAM,mBAAmB,CAAC;AAE3B,+FAA+F;AAC/F,+FAA+F;AAC/F,mLAAmL;AACnL,kGAAkG;AAClG,kGAAkG;AAClG,kGAAkG;AAClG,mGAAmG;AACnG,kGAAkG;AAClG,wCAAwC;AACxC,qFAAqF;AACrF,mGAAmG;AACnG,4FAA4F;AAC5F,qCAAqC;AACrC,oGAAoG;AACpG,mGAAmG;AACnG,qGAAqG;AACrG,uDAAuD;AACvD,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,GAChB,MAAM,oBAAoB,CAAC"}

package/dist/ledgerfsHash.d.ts

@@ -4,8 +4,6 @@ export declare function sle64(t: number | bigint): Uint8Array;
 export declare function concat(parts: Uint8Array[]): Uint8Array;
 export declare function lp(b: Uint8Array): Uint8Array;
 export declare const lpText: (t: string) => Uint8Array;
-/** Principal raw bytes, length-prefixed — attribution, never authorization. */
-export declare const lpPrincipalRaw: (raw: Uint8Array) => Uint8Array;
 export declare const optBytes: (v: Uint8Array | null) => Uint8Array;
 export declare const chunkHash: (bytes: Uint8Array) => Hash;
 /** The #append delta attestation (owner-ratified era-2 gap fill, 2026-08-11): a DISTINCT domain,

package/dist/ledgerfsHash.js

@@ -60,8 +60,6 @@ export function lp(b) {
 }
 const utf8 = (s) => new TextEncoder().encode(s);
 export const lpText = (t) => lp(utf8(t));
-/** Principal raw bytes, length-prefixed — attribution, never authorization. */
-export const lpPrincipalRaw = (raw) => lp(raw);
 export const optBytes = (v) => v === null ? new Uint8Array([0x00]) : concat([new Uint8Array([0x01]), v]);
 // ── Domain-separated hash: SHA-256( ASCII(domain) ‖ 0x00 ‖ payload ) ───────────────────────────
 function h(domain, payload) {