@fgv/ts-agent-memory 5.1.0-37 → 5.1.0-39

package/lib/packlets/types/identityCodec.js

@@ -4,11 +4,128 @@
  * SPDX-License-Identifier: MIT
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.MtmIdentityCodec = exports.LtmIdentityCodec = exports.KnowledgeIdentityCodec = void 0;
+exports.MtmIdentityCodec = exports.LtmIdentityCodec = exports.KnowledgeIdentityCodec = exports.TemporalIdentityCodec = void 0;
+exports.isTemporalIdentityCodec = isTemporalIdentityCodec;
 const ts_utils_1 = require("@fgv/ts-utils");
 const ids_1 = require("./ids");
 const filenameSafety_1 = require("./filenameSafety");
 /**
+ * Narrow an {@link IIdentityCodec} to {@link ITemporalIdentityCodec} by probing
+ * for the versioned methods. Used by the store when an `encode` result reports
+ * `isVersioned: true`.
+ * @public
+ */
+function isTemporalIdentityCodec(codec) {
+    const candidate = codec;
+    return typeof candidate.encodeVersion === 'function' && typeof candidate.decodeVersion === 'function';
+}
+/**
+ * Identity codec for a versioned (temporal) kind family, resolving OQ-11 to the
+ * subtree-per-entity layout: every version of an entity is a distinct file under
+ * a per-entity subtree.
+ *
+ * @remarks
+ * - `encode`: scope = `<baseScope>/entities/<entityId>`, idStem = `<entityId>`,
+ *   `isVersioned = true`. The idStem is the stable entity prefix; the store forms
+ *   each version's filename via {@link TemporalIdentityCodec.encodeVersion}.
+ * - `encodeVersion`: version stem = `<entityId>-v<seq>`.
+ * - `decode` / `decodeVersion`: recover `entityId` (and `seq`) from a
+ *   `(subtree scope, version stem)` pair; the scope is authoritative for the
+ *   `entityId`.
+ * - Escaping: `baseScope` and `entityId` must each match the POSIX portable
+ *   filename set (they become path segments); `seq` is a non-negative integer.
+ * - Layout: `vault/<baseScope>/entities/<entityId>/<entityId>-v<seq>.md`.
+ * @public
+ */
+class TemporalIdentityCodec {
+    constructor(baseScope) {
+        this.baseScope = baseScope;
+    }
+    /**
+     * Family-convention factory. Validates that `baseScope` is a single portable
+     * filename segment (it becomes the top-level path component).
+     */
+    static create(baseScope) {
+        return (0, filenameSafety_1.assertPortableFilenameStem)(baseScope)
+            .withErrorFormat((msg) => `temporal codec: baseScope '${baseScope}': ${msg}`)
+            .onSuccess(() => (0, ts_utils_1.succeed)(new TemporalIdentityCodec(baseScope)));
+    }
+    /** {@inheritDoc IIdentityCodec.encode} */
+    encode(entityId) {
+        return (0, filenameSafety_1.assertPortableFilenameStem)(entityId)
+            .withErrorFormat((msg) => `temporal codec: entityId '${entityId}': ${msg}`)
+            .onSuccess((stem) => (0, ts_utils_1.succeed)({
+            scope: `${this.baseScope}/${TemporalIdentityCodec.entitiesSegment}/${stem}`,
+            idStem: stem,
+            isVersioned: true
+        }));
+    }
+    /** {@inheritDoc ITemporalIdentityCodec.encodeVersion} */
+    encodeVersion(entityId, seq) {
+        return (0, filenameSafety_1.assertPortableFilenameStem)(entityId)
+            .withErrorFormat((msg) => `temporal codec: entityId '${entityId}': ${msg}`)
+            .onSuccess((stem) => {
+            if (!Number.isInteger(seq) || seq < 0) {
+                return (0, ts_utils_1.fail)(`temporal codec: version seq '${seq}' must be a non-negative integer`);
+            }
+            return (0, ts_utils_1.succeed)(`${stem}${TemporalIdentityCodec.versionInfix}${seq}`);
+        });
+    }
+    /** {@inheritDoc IIdentityCodec.decode} */
+    decode(scope, encodedStem) {
+        return this.decodeVersion(scope, encodedStem).onSuccess((addr) => ids_1.Convert.entityId.convert(addr.entityId));
+    }
+    /** {@inheritDoc ITemporalIdentityCodec.decodeVersion} */
+    decodeVersion(scope, stem) {
+        return this._entityIdFromScope(scope).onSuccess((entityId) => {
+            const prefix = `${entityId}${TemporalIdentityCodec.versionInfix}`;
+            if (!stem.startsWith(prefix)) {
+                return (0, ts_utils_1.fail)(`temporal codec: version stem '${stem}' must begin with '${prefix}' (from scope '${scope}')`);
+            }
+            const seqText = stem.slice(prefix.length);
+            if (!TemporalIdentityCodec._versionSeqRe.test(seqText)) {
+                return (0, ts_utils_1.fail)(`temporal codec: version stem '${stem}' has a non-integer version suffix '${seqText}'`);
+            }
+            // The regex admits digit strings of unbounded length; `parseInt` would silently
+            // lose precision past MAX_SAFE_INTEGER, decoding a corrupt/tampered filename to a
+            // plausible-but-wrong `seq` that drives version ordering. Reject rather than corrupt.
+            const seq = Number.parseInt(seqText, 10);
+            if (!Number.isSafeInteger(seq)) {
+                return (0, ts_utils_1.fail)(`temporal codec: version stem '${stem}' has a version suffix '${seqText}' outside the safe integer range`);
+            }
+            return ids_1.Convert.entityId.convert(entityId).onSuccess((branded) => (0, ts_utils_1.succeed)({ entityId: branded, seq }));
+        });
+    }
+    /** {@inheritDoc IIdentityCodec.verifyRoundTrip} */
+    verifyRoundTrip(scope, stem) {
+        return this.decodeVersion(scope, stem).onSuccess((addr) => this.encode(addr.entityId).onSuccess((encoded) => this.encodeVersion(addr.entityId, addr.seq).onSuccess((reStem) => {
+            if (encoded.scope !== scope || reStem !== stem) {
+                return (0, ts_utils_1.fail)(`temporal codec: round-trip mismatch for scope '${scope}' stem '${stem}' (re-encoded to scope '${encoded.scope}' stem '${reStem}')`);
+            }
+            return (0, ts_utils_1.succeed)(true);
+        })));
+    }
+    /** Validate and extract the `entityId` from a `<baseScope>/entities/<entityId>` scope. */
+    _entityIdFromScope(scope) {
+        const segments = scope.split('/');
+        if (segments.length !== 3 ||
+            segments[0] !== this.baseScope ||
+            segments[1] !== TemporalIdentityCodec.entitiesSegment) {
+            return (0, ts_utils_1.fail)(`temporal codec: scope '${scope}' must be '${this.baseScope}/${TemporalIdentityCodec.entitiesSegment}/<entityId>'`);
+        }
+        const entityId = segments[2];
+        return (0, filenameSafety_1.assertPortableFilenameStem)(entityId)
+            .withErrorFormat((msg) => `temporal codec: entityId '${entityId}': ${msg}`)
+            .onSuccess(() => (0, ts_utils_1.succeed)(entityId));
+    }
+}
+exports.TemporalIdentityCodec = TemporalIdentityCodec;
+/** The fixed subtree segment separating an entity's versions from its scope. */
+TemporalIdentityCodec.entitiesSegment = 'entities';
+/** The version-stem infix: `<entityId>` + this + `<seq>`. */
+TemporalIdentityCodec.versionInfix = '-v';
+/** A non-negative integer string (the version seq). */
+TemporalIdentityCodec._versionSeqRe = /^\d+$/;
 /**
  * Identity codec for the knowledge kind family. A knowledge entity is keyed
  * by its consumer-supplied `docId`, which is used verbatim as the filename

package/lib/packlets/types/identityCodec.js.map

@@ -1 +1 @@
-{"version":3,"file":"identityCodec.js","sourceRoot":"","sources":["../../../src/packlets/types/identityCodec.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,4CAAsD;AACtD,+BAA0D;AAC1D,qDAA8D;AA6C9D;;;;;;;;;;;;GAYG;AACH,MAAa,sBAAsB;IAIjC,0CAA0C;IACnC,MAAM,CAAC,QAAkB;QAC9B,OAAO,IAAA,2CAA0B,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAC/D,IAAA,kBAAO,EAAC,EAAE,KAAK,EAAE,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAC7E,CAAC;IACJ,CAAC;IAED,0CAA0C;IACnC,MAAM,CAAC,KAAqB,EAAE,WAAmB;QACtD,IAAI,KAAK,KAAK,sBAAsB,CAAC,KAAK,EAAE,CAAC;YAC3C,OAAO,IAAA,eAAI,EACT,2BAA2B,KAAK,oCAAoC,sBAAsB,CAAC,KAAK,GAAG,CACpG,CAAC;QACJ,CAAC;QACD,OAAO,IAAA,2CAA0B,EAAC,WAAW,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACrG,CAAC;IAED,mDAAmD;IAC5C,eAAe,CAAC,KAAqB,EAAE,IAAY;QACxD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC;aAC5B,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;aAC9C,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE;YACrB,kOAAkO;YAClO,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC5B,OAAO,IAAA,eAAI,EACT,kDAAkD,IAAI,qBAAqB,OAAO,CAAC,MAAM,IAAI,CAC9F,CAAC;YACJ,CAAC;YACD,oBAAoB;YACpB,OAAO,IAAA,kBAAO,EAAC,IAAI,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACP,CAAC;;AAnCH,wDAoCC;AAnCC,kDAAkD;AAC3B,4BAAK,GAAmB,WAA6B,CAAC;AAoC/E;;;;;;;;;;;;;;;GAeG;AACH,MAAa,gBAAgB;IAI3B,0CAA0C;IACnC,MAAM,CAAC,QAAkB;QAC9B,OAAO,IAAA,2CAA0B,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAC/D,IAAA,kBAAO,EAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CACvE,CAAC;IACJ,CAAC;IAED,0CAA0C;IACnC,MAAM,CAAC,KAAqB,EAAE,WAAmB;QACtD,IAAI,KAAK,KAAK,gBAAgB,CAAC,KAAK,EAAE,CAAC;YACrC,OAAO,IAAA,eAAI,EAAC,qBAAqB,KAAK,oCAAoC,gBAAgB,CAAC,KAAK,GAAG,CAAC,CAAC;QACvG,CAAC;QACD,OAAO,IAAA,2CAA0B,EAAC,WAAW,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACrG,CAAC;IAED,mDAAmD;IAC5C,eAAe,CAAC,KAAqB,EAAE,IAAY;QACxD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC;aAC5B,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;aAC9C,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE;YACrB,4KAA4K;YAC5K,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC5B,OAAO,IAAA,eAAI,EACT,4CAA4C,IAAI,qBAAqB,OAAO,CAAC,MAAM,IAAI,CACxF,CAAC;YACJ,CAAC;YACD,oBAAoB;YACpB,OAAO,IAAA,kBAAO,EAAC,IAAI,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACP,CAAC;;AAjCH,4CAkCC;AAjCC,4CAA4C;AACrB,sBAAK,GAAmB,eAAiC,CAAC;AAkCnF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAa,gBAAgB;IAS3B,0CAA0C;IACnC,MAAM,CAAC,QAAkB;QAC9B,MAAM,KAAK,GAAa,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAA,eAAI,EAAC,yBAAyB,QAAQ,sDAAsD,CAAC,CAAC;QACvG,CAAC;QACD,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;QAC1C,OAAO,IAAA,2CAA0B,EAAC,cAAc,CAAC;aAC9C,eAAe,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,8BAA8B,cAAc,MAAM,GAAG,EAAE,CAAC;aACjF,SAAS,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;aAC7D,SAAS,CAAC,GAAG,EAAE,CACd,IAAA,kBAAO,EAAC;YACN,KAAK,EAAE,GAAG,gBAAgB,CAAC,gBAAgB,IAAI,cAAc,EAAoB;YACjF,MAAM,EAAE,GAAG,gBAAgB,CAAC,cAAc,GAAG,SAAS,EAAE;YACxD,WAAW,EAAE,KAAK;SACnB,CAAC,CACH,CAAC;IACN,CAAC;IAED,0CAA0C;IACnC,MAAM,CAAC,KAAqB,EAAE,WAAmB;QACtD,OAAO,gBAAgB,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,EAAE,CACnF,gBAAgB,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CACvE,aAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,cAAc,IAAI,SAAS,EAAE,CAAC,CAC3D,CACF,CAAC;IACJ,CAAC;IAED,mDAAmD;IAC5C,eAAe,CAAC,KAAqB,EAAE,IAAY;QACxD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC;aAC5B,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;aAC9C,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE;YACrB,4LAA4L;YAC5L,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBACvD,OAAO,IAAA,eAAI,EACT,6CAA6C,KAAK,WAAW,IAAI,2BAA2B,OAAO,CAAC,KAAK,WAAW,OAAO,CAAC,MAAM,IAAI,CACvI,CAAC;YACJ,CAAC;YACD,oBAAoB;YACpB,OAAO,IAAA,kBAAO,EAAC,IAAI,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,mFAAmF;IAC3E,MAAM,CAAC,wBAAwB,CAAC,KAAqB;QAC3D,MAAM,QAAQ,GAAa,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC,gBAAgB,EAAE,CAAC;YAC/E,OAAO,IAAA,eAAI,EACT,qBAAqB,KAAK,cAAc,gBAAgB,CAAC,gBAAgB,oBAAoB,CAC9F,CAAC;QACJ,CAAC;QACD,MAAM,cAAc,GAAW,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO,IAAA,2CAA0B,EAAC,cAAc,CAAC;aAC9C,eAAe,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,8BAA8B,cAAc,MAAM,GAAG,EAAE,CAAC;aACjF,SAAS,CAAC,GAAG,EAAE,CAAC,IAAA,kBAAO,EAAC,cAAc,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,yEAAyE;IACjE,MAAM,CAAC,kBAAkB,CAAC,IAAY;QAC5C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,cAAc,CAAC,EAAE,CAAC;YACtD,OAAO,IAAA,eAAI,EAAC,oBAAoB,IAAI,sBAAsB,gBAAgB,CAAC,cAAc,GAAG,CAAC,CAAC;QAChG,CAAC;QACD,OAAO,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/F,CAAC;IAED,kEAAkE;IAC1D,MAAM,CAAC,gBAAgB,CAAC,SAAiB;QAC/C,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,OAAO,IAAA,eAAI,EAAC,yBAAyB,SAAS,kCAAkC,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,IAAA,kBAAO,EAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;;AAjFH,4CAkFC;AAjFC,uEAAuE;AAChD,iCAAgB,GAAW,eAAe,CAAC;AAClE,wDAAwD;AACjC,+BAAc,GAAW,OAAO,CAAC;AAExD,0EAA0E;AAClD,6BAAY,GAAW,OAAO,CAAC","sourcesContent":["/*\n * Copyright (c) 2026 Erik Fortune\n * SPDX-License-Identifier: MIT\n */\n\nimport { Result, fail, succeed } from '@fgv/ts-utils';\nimport { Convert, EntityId, MemoryScopeKey } from './ids';\nimport { assertPortableFilenameStem } from './filenameSafety';\n\n/**\n * The FileTree storage address an {@link IIdentityCodec} maps a domain key to.\n * @public\n */\nexport interface IIdentityCodecResult {\n  /** Scope path segment (may be multi-level, e.g. `conversations/<id>`). */\n  readonly scope: MemoryScopeKey;\n  /** Filename stem (the part before `.md`). Filename-safe after encoding. */\n  readonly idStem: string;\n  /**\n   * Whether this kind uses a versioned layout (temporal: multiple files per\n   * entity) vs. a flat layout (one file per entity). Non-temporal = always\n   * `false`.\n   */\n  readonly isVersioned: boolean;\n}\n\n/**\n * Maps a consumer-supplied domain key ⇄ a FileTree storage address. Injected\n * per kind so the store never touches raw domain keys: the codec owns all\n * filename escaping and the flat-vs-versioned layout dispatch.\n * @public\n */\nexport interface IIdentityCodec {\n  /**\n   * Encode a consumer-supplied entity id to a FileTree address. Deterministic\n   * and pure — no I/O.\n   */\n  encode(entityId: EntityId): Result<IIdentityCodecResult>;\n\n  /**\n   * Decode a FileTree address back to the original {@link EntityId}. The exact\n   * inverse of {@link IIdentityCodec.encode | encode} for non-versioned kinds.\n   */\n  decode(scope: MemoryScopeKey, encodedStem: string): Result<EntityId>;\n\n  /**\n   * Assert that `encode(decode(scope, stem)).idStem === stem`. Used by the\n   * store's `verifyFilenameId` check on load.\n   */\n  verifyRoundTrip(scope: MemoryScopeKey, stem: string): Result<true>;\n}\n\n/**\n/**\n * Identity codec for the knowledge kind family. A knowledge entity is keyed\n * by its consumer-supplied `docId`, which is used verbatim as the filename\n * stem under the flat `knowledge` scope.\n *\n * @remarks\n * - `encode`: scope = `knowledge`, idStem = `docId`, `isVersioned = false`.\n * - `decode`: brands the stem back to an {@link EntityId}.\n * - Escaping: the `docId` must match the POSIX portable filename set.\n * - Layout: `vault/knowledge/<docId>.md`.\n * @public\n */\nexport class KnowledgeIdentityCodec implements IIdentityCodec {\n  /** The fixed scope for every knowledge entity. */\n  public static readonly scope: MemoryScopeKey = 'knowledge' as MemoryScopeKey;\n\n  /** {@inheritDoc IIdentityCodec.encode} */\n  public encode(entityId: EntityId): Result<IIdentityCodecResult> {\n    return assertPortableFilenameStem(entityId).onSuccess((idStem) =>\n      succeed({ scope: KnowledgeIdentityCodec.scope, idStem, isVersioned: false })\n    );\n  }\n\n  /** {@inheritDoc IIdentityCodec.decode} */\n  public decode(scope: MemoryScopeKey, encodedStem: string): Result<EntityId> {\n    if (scope !== KnowledgeIdentityCodec.scope) {\n      return fail(\n        `knowledge codec: scope '${scope}' does not match expected scope '${KnowledgeIdentityCodec.scope}'`\n      );\n    }\n    return assertPortableFilenameStem(encodedStem).onSuccess((stem) => Convert.entityId.convert(stem));\n  }\n\n  /** {@inheritDoc IIdentityCodec.verifyRoundTrip} */\n  public verifyRoundTrip(scope: MemoryScopeKey, stem: string): Result<true> {\n    return this.decode(scope, stem)\n      .onSuccess((entityId) => this.encode(entityId))\n      .onSuccess((encoded) => {\n        /* c8 ignore start -- defensive: for the identity (knowledge) codec, encode(decode(stem)).idStem always equals stem when both succeed; the guard exists for the non-identity codecs (LTM/MTM, Phase C) that reuse this contract */\n        if (encoded.idStem !== stem) {\n          return fail(\n            `knowledge codec: round-trip mismatch for stem '${stem}' (re-encoded to '${encoded.idStem}')`\n          );\n        }\n        /* c8 ignore stop */\n        return succeed(true);\n      });\n  }\n}\n\n/**\n * Identity codec for the long-term-memory (LTM) kind family. An LTM entity is\n * keyed by its `conversationId`, used verbatim as the filename stem under the\n * flat `conversations` scope.\n *\n * @remarks\n * - `encode`: scope = `conversations`, idStem = `conversationId`, `isVersioned = false`.\n * - `decode`: brands the stem back to an {@link EntityId}.\n * - Escaping: the `conversationId` must match the POSIX portable filename set.\n * - Layout: `vault/conversations/<conversationId>.md`.\n *\n * An LTM file (`conversations/<id>.md`) and the MTM subtree\n * (`conversations/<id>/turn-N.md`) coexist — a file and a same-named directory\n * are independent on every supported FileTree backend.\n * @public\n */\nexport class LtmIdentityCodec implements IIdentityCodec {\n  /** The fixed scope for every LTM entity. */\n  public static readonly scope: MemoryScopeKey = 'conversations' as MemoryScopeKey;\n\n  /** {@inheritDoc IIdentityCodec.encode} */\n  public encode(entityId: EntityId): Result<IIdentityCodecResult> {\n    return assertPortableFilenameStem(entityId).onSuccess((idStem) =>\n      succeed({ scope: LtmIdentityCodec.scope, idStem, isVersioned: false })\n    );\n  }\n\n  /** {@inheritDoc IIdentityCodec.decode} */\n  public decode(scope: MemoryScopeKey, encodedStem: string): Result<EntityId> {\n    if (scope !== LtmIdentityCodec.scope) {\n      return fail(`LTM codec: scope '${scope}' does not match expected scope '${LtmIdentityCodec.scope}'`);\n    }\n    return assertPortableFilenameStem(encodedStem).onSuccess((stem) => Convert.entityId.convert(stem));\n  }\n\n  /** {@inheritDoc IIdentityCodec.verifyRoundTrip} */\n  public verifyRoundTrip(scope: MemoryScopeKey, stem: string): Result<true> {\n    return this.decode(scope, stem)\n      .onSuccess((entityId) => this.encode(entityId))\n      .onSuccess((encoded) => {\n        /* c8 ignore start -- defensive: LTM encode(decode(stem)).idStem always equals stem when both succeed (identity mapping); guard preserves the contract for direct callers */\n        if (encoded.idStem !== stem) {\n          return fail(\n            `LTM codec: round-trip mismatch for stem '${stem}' (re-encoded to '${encoded.idStem}')`\n          );\n        }\n        /* c8 ignore stop */\n        return succeed(true);\n      });\n  }\n}\n\n/**\n * Identity codec for the medium-term-memory (MTM) kind family. An MTM entity is\n * keyed by the colon-composite `<conversationId>:<turnIndex>` and maps into a\n * per-conversation subtree.\n *\n * @remarks\n * - `encode`: splits the entity id on `:`; scope =\n *   `conversations/<conversationId>` (multi-segment), idStem = `turn-<turnIndex>`,\n *   `isVersioned = false`.\n * - `decode`: reverses scope `conversations/<id>` + stem `turn-<N>` to the\n *   composite `<id>:<N>`.\n * - Escaping: `conversationId` must match the POSIX portable filename set (so it\n *   contains no `/` or `:`); `turnIndex` must be a non-negative integer string,\n *   preserved verbatim so the round-trip is exact.\n * - Layout: `vault/conversations/<conversationId>/turn-<N>.md`. The `/` in the\n *   scope is handled by the store's multi-segment scope resolver.\n *\n * **Verbatim turn index (caller-canonicalization note).** The turn index is\n * preserved exactly — `conv-1:7` and `conv-1:007` are DISTINCT entities mapping\n * to distinct files (`turn-7.md` / `turn-007.md`). Verbatim preservation is what\n * makes the round-trip exact, but it means a caller that formats turn indices\n * inconsistently (some zero-padded, some not) will silently mint separate\n * entities. Callers should canonicalize to one form (e.g. no leading zeros).\n * @public\n */\nexport class MtmIdentityCodec implements IIdentityCodec {\n  /** The top-level scope segment under which every MTM subtree lives. */\n  public static readonly rootScopeSegment: string = 'conversations';\n  /** The fixed filename-stem prefix for a turn record. */\n  public static readonly turnStemPrefix: string = 'turn-';\n\n  /** A non-negative integer string (the turn index), preserved verbatim. */\n  private static readonly _turnIndexRe: RegExp = /^\\d+$/;\n\n  /** {@inheritDoc IIdentityCodec.encode} */\n  public encode(entityId: EntityId): Result<IIdentityCodecResult> {\n    const parts: string[] = entityId.split(':');\n    if (parts.length !== 2) {\n      return fail(`MTM codec: entity id '${entityId}' must be a '<conversationId>:<turnIndex>' composite`);\n    }\n    const [conversationId, turnIndex] = parts;\n    return assertPortableFilenameStem(conversationId)\n      .withErrorFormat((msg) => `MTM codec: conversationId '${conversationId}': ${msg}`)\n      .onSuccess(() => MtmIdentityCodec._assertTurnIndex(turnIndex))\n      .onSuccess(() =>\n        succeed({\n          scope: `${MtmIdentityCodec.rootScopeSegment}/${conversationId}` as MemoryScopeKey,\n          idStem: `${MtmIdentityCodec.turnStemPrefix}${turnIndex}`,\n          isVersioned: false\n        })\n      );\n  }\n\n  /** {@inheritDoc IIdentityCodec.decode} */\n  public decode(scope: MemoryScopeKey, encodedStem: string): Result<EntityId> {\n    return MtmIdentityCodec._conversationIdFromScope(scope).onSuccess((conversationId) =>\n      MtmIdentityCodec._turnIndexFromStem(encodedStem).onSuccess((turnIndex) =>\n        Convert.entityId.convert(`${conversationId}:${turnIndex}`)\n      )\n    );\n  }\n\n  /** {@inheritDoc IIdentityCodec.verifyRoundTrip} */\n  public verifyRoundTrip(scope: MemoryScopeKey, stem: string): Result<true> {\n    return this.decode(scope, stem)\n      .onSuccess((entityId) => this.encode(entityId))\n      .onSuccess((encoded) => {\n        /* c8 ignore start -- defensive: MTM encode(decode(scope, stem)) reproduces the same scope+stem whenever both succeed (no normalization); guard preserves the contract for direct callers */\n        if (encoded.idStem !== stem || encoded.scope !== scope) {\n          return fail(\n            `MTM codec: round-trip mismatch for scope '${scope}' stem '${stem}' (re-encoded to scope '${encoded.scope}' stem '${encoded.idStem}')`\n          );\n        }\n        /* c8 ignore stop */\n        return succeed(true);\n      });\n  }\n\n  /** Validate and extract the `conversationId` from a `conversations/<id>` scope. */\n  private static _conversationIdFromScope(scope: MemoryScopeKey): Result<string> {\n    const segments: string[] = scope.split('/');\n    if (segments.length !== 2 || segments[0] !== MtmIdentityCodec.rootScopeSegment) {\n      return fail(\n        `MTM codec: scope '${scope}' must be '${MtmIdentityCodec.rootScopeSegment}/<conversationId>'`\n      );\n    }\n    const conversationId: string = segments[1];\n    return assertPortableFilenameStem(conversationId)\n      .withErrorFormat((msg) => `MTM codec: conversationId '${conversationId}': ${msg}`)\n      .onSuccess(() => succeed(conversationId));\n  }\n\n  /** Validate and extract the turn-index digits from a `turn-<N>` stem. */\n  private static _turnIndexFromStem(stem: string): Result<string> {\n    if (!stem.startsWith(MtmIdentityCodec.turnStemPrefix)) {\n      return fail(`MTM codec: stem '${stem}' must begin with '${MtmIdentityCodec.turnStemPrefix}'`);\n    }\n    return MtmIdentityCodec._assertTurnIndex(stem.slice(MtmIdentityCodec.turnStemPrefix.length));\n  }\n\n  /** Assert a string is a non-negative integer (the turn index). */\n  private static _assertTurnIndex(turnIndex: string): Result<string> {\n    if (!MtmIdentityCodec._turnIndexRe.test(turnIndex)) {\n      return fail(`MTM codec: turnIndex '${turnIndex}' must be a non-negative integer`);\n    }\n    return succeed(turnIndex);\n  }\n}\n"]}
+{"version":3,"file":"identityCodec.js","sourceRoot":"","sources":["../../../src/packlets/types/identityCodec.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AA4FH,0DAGC;AA7FD,4CAAsD;AACtD,+BAA0D;AAC1D,qDAA8D;AAkF9D;;;;;GAKG;AACH,SAAgB,uBAAuB,CAAC,KAAqB;IAC3D,MAAM,SAAS,GAAoC,KAAwC,CAAC;IAC5F,OAAO,OAAO,SAAS,CAAC,aAAa,KAAK,UAAU,IAAI,OAAO,SAAS,CAAC,aAAa,KAAK,UAAU,CAAC;AACxG,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAa,qBAAqB;IAYhC,YAAoB,SAAiB;QACnC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,MAAM,CAAC,SAAiB;QACpC,OAAO,IAAA,2CAA0B,EAAC,SAAS,CAAC;aACzC,eAAe,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,8BAA8B,SAAS,MAAM,GAAG,EAAE,CAAC;aAC5E,SAAS,CAAC,GAAG,EAAE,CAAC,IAAA,kBAAO,EAAC,IAAI,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,0CAA0C;IACnC,MAAM,CAAC,QAAkB;QAC9B,OAAO,IAAA,2CAA0B,EAAC,QAAQ,CAAC;aACxC,eAAe,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,6BAA6B,QAAQ,MAAM,GAAG,EAAE,CAAC;aAC1E,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAClB,IAAA,kBAAO,EAAC;YACN,KAAK,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,qBAAqB,CAAC,eAAe,IAAI,IAAI,EAAoB;YAC7F,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,IAAI;SAClB,CAAC,CACH,CAAC;IACN,CAAC;IAED,yDAAyD;IAClD,aAAa,CAAC,QAAkB,EAAE,GAAW;QAClD,OAAO,IAAA,2CAA0B,EAAC,QAAQ,CAAC;aACxC,eAAe,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,6BAA6B,QAAQ,MAAM,GAAG,EAAE,CAAC;aAC1E,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE;YAClB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;gBACtC,OAAO,IAAA,eAAI,EAAC,gCAAgC,GAAG,kCAAkC,CAAC,CAAC;YACrF,CAAC;YACD,OAAO,IAAA,kBAAO,EAAC,GAAG,IAAI,GAAG,qBAAqB,CAAC,YAAY,GAAG,GAAG,EAAE,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;IACP,CAAC;IAED,0CAA0C;IACnC,MAAM,CAAC,KAAqB,EAAE,WAAmB;QACtD,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAC/D,aAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CACxC,CAAC;IACJ,CAAC;IAED,yDAAyD;IAClD,aAAa,CAAC,KAAqB,EAAE,IAAY;QACtD,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC3D,MAAM,MAAM,GAAW,GAAG,QAAQ,GAAG,qBAAqB,CAAC,YAAY,EAAE,CAAC;YAC1E,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,OAAO,IAAA,eAAI,EACT,iCAAiC,IAAI,sBAAsB,MAAM,kBAAkB,KAAK,IAAI,CAC7F,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAW,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvD,OAAO,IAAA,eAAI,EAAC,iCAAiC,IAAI,uCAAuC,OAAO,GAAG,CAAC,CAAC;YACtG,CAAC;YACD,gFAAgF;YAChF,kFAAkF;YAClF,sFAAsF;YACtF,MAAM,GAAG,GAAW,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,OAAO,IAAA,eAAI,EACT,iCAAiC,IAAI,2BAA2B,OAAO,kCAAkC,CAC1G,CAAC;YACJ,CAAC;YACD,OAAO,aAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAA,kBAAO,EAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACxG,CAAC,CAAC,CAAC;IACL,CAAC;IAED,mDAAmD;IAC5C,eAAe,CAAC,KAAqB,EAAE,IAAY;QACxD,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CACxD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAC/C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE;YAC/D,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC/C,OAAO,IAAA,eAAI,EACT,kDAAkD,KAAK,WAAW,IAAI,2BAA2B,OAAO,CAAC,KAAK,WAAW,MAAM,IAAI,CACpI,CAAC;YACJ,CAAC;YACD,OAAO,IAAA,kBAAO,EAAC,IAAI,CAAC,CAAC;QACvB,CAAC,CAAC,CACH,CACF,CAAC;IACJ,CAAC;IAED,0FAA0F;IAClF,kBAAkB,CAAC,KAAqB;QAC9C,MAAM,QAAQ,GAAa,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5C,IACE,QAAQ,CAAC,MAAM,KAAK,CAAC;YACrB,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS;YAC9B,QAAQ,CAAC,CAAC,CAAC,KAAK,qBAAqB,CAAC,eAAe,EACrD,CAAC;YACD,OAAO,IAAA,eAAI,EACT,0BAA0B,KAAK,cAAc,IAAI,CAAC,SAAS,IAAI,qBAAqB,CAAC,eAAe,cAAc,CACnH,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAW,QAAQ,CAAC,CAAC,CAAC,CAAC;QACrC,OAAO,IAAA,2CAA0B,EAAC,QAAQ,CAAC;aACxC,eAAe,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,6BAA6B,QAAQ,MAAM,GAAG,EAAE,CAAC;aAC1E,SAAS,CAAC,GAAG,EAAE,CAAC,IAAA,kBAAO,EAAC,QAAQ,CAAC,CAAC,CAAC;IACxC,CAAC;;AApHH,sDAqHC;AApHC,gFAAgF;AACzD,qCAAe,GAAW,UAAU,CAAC;AAC5D,6DAA6D;AACtC,kCAAY,GAAW,IAAI,CAAC;AAEnD,uDAAuD;AAC/B,mCAAa,GAAW,OAAO,CAAC;AAgH1D;;;;;;;;;;;GAWG;AACH,MAAa,sBAAsB;IAIjC,0CAA0C;IACnC,MAAM,CAAC,QAAkB;QAC9B,OAAO,IAAA,2CAA0B,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAC/D,IAAA,kBAAO,EAAC,EAAE,KAAK,EAAE,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAC7E,CAAC;IACJ,CAAC;IAED,0CAA0C;IACnC,MAAM,CAAC,KAAqB,EAAE,WAAmB;QACtD,IAAI,KAAK,KAAK,sBAAsB,CAAC,KAAK,EAAE,CAAC;YAC3C,OAAO,IAAA,eAAI,EACT,2BAA2B,KAAK,oCAAoC,sBAAsB,CAAC,KAAK,GAAG,CACpG,CAAC;QACJ,CAAC;QACD,OAAO,IAAA,2CAA0B,EAAC,WAAW,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACrG,CAAC;IAED,mDAAmD;IAC5C,eAAe,CAAC,KAAqB,EAAE,IAAY;QACxD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC;aAC5B,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;aAC9C,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE;YACrB,kOAAkO;YAClO,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC5B,OAAO,IAAA,eAAI,EACT,kDAAkD,IAAI,qBAAqB,OAAO,CAAC,MAAM,IAAI,CAC9F,CAAC;YACJ,CAAC;YACD,oBAAoB;YACpB,OAAO,IAAA,kBAAO,EAAC,IAAI,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACP,CAAC;;AAnCH,wDAoCC;AAnCC,kDAAkD;AAC3B,4BAAK,GAAmB,WAA6B,CAAC;AAoC/E;;;;;;;;;;;;;;;GAeG;AACH,MAAa,gBAAgB;IAI3B,0CAA0C;IACnC,MAAM,CAAC,QAAkB;QAC9B,OAAO,IAAA,2CAA0B,EAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAC/D,IAAA,kBAAO,EAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CACvE,CAAC;IACJ,CAAC;IAED,0CAA0C;IACnC,MAAM,CAAC,KAAqB,EAAE,WAAmB;QACtD,IAAI,KAAK,KAAK,gBAAgB,CAAC,KAAK,EAAE,CAAC;YACrC,OAAO,IAAA,eAAI,EAAC,qBAAqB,KAAK,oCAAoC,gBAAgB,CAAC,KAAK,GAAG,CAAC,CAAC;QACvG,CAAC;QACD,OAAO,IAAA,2CAA0B,EAAC,WAAW,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACrG,CAAC;IAED,mDAAmD;IAC5C,eAAe,CAAC,KAAqB,EAAE,IAAY;QACxD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC;aAC5B,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;aAC9C,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE;YACrB,4KAA4K;YAC5K,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC5B,OAAO,IAAA,eAAI,EACT,4CAA4C,IAAI,qBAAqB,OAAO,CAAC,MAAM,IAAI,CACxF,CAAC;YACJ,CAAC;YACD,oBAAoB;YACpB,OAAO,IAAA,kBAAO,EAAC,IAAI,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACP,CAAC;;AAjCH,4CAkCC;AAjCC,4CAA4C;AACrB,sBAAK,GAAmB,eAAiC,CAAC;AAkCnF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAa,gBAAgB;IAS3B,0CAA0C;IACnC,MAAM,CAAC,QAAkB;QAC9B,MAAM,KAAK,GAAa,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAA,eAAI,EAAC,yBAAyB,QAAQ,sDAAsD,CAAC,CAAC;QACvG,CAAC;QACD,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;QAC1C,OAAO,IAAA,2CAA0B,EAAC,cAAc,CAAC;aAC9C,eAAe,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,8BAA8B,cAAc,MAAM,GAAG,EAAE,CAAC;aACjF,SAAS,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;aAC7D,SAAS,CAAC,GAAG,EAAE,CACd,IAAA,kBAAO,EAAC;YACN,KAAK,EAAE,GAAG,gBAAgB,CAAC,gBAAgB,IAAI,cAAc,EAAoB;YACjF,MAAM,EAAE,GAAG,gBAAgB,CAAC,cAAc,GAAG,SAAS,EAAE;YACxD,WAAW,EAAE,KAAK;SACnB,CAAC,CACH,CAAC;IACN,CAAC;IAED,0CAA0C;IACnC,MAAM,CAAC,KAAqB,EAAE,WAAmB;QACtD,OAAO,gBAAgB,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,EAAE,CACnF,gBAAgB,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CACvE,aAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,cAAc,IAAI,SAAS,EAAE,CAAC,CAC3D,CACF,CAAC;IACJ,CAAC;IAED,mDAAmD;IAC5C,eAAe,CAAC,KAAqB,EAAE,IAAY;QACxD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC;aAC5B,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;aAC9C,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE;YACrB,4LAA4L;YAC5L,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBACvD,OAAO,IAAA,eAAI,EACT,6CAA6C,KAAK,WAAW,IAAI,2BAA2B,OAAO,CAAC,KAAK,WAAW,OAAO,CAAC,MAAM,IAAI,CACvI,CAAC;YACJ,CAAC;YACD,oBAAoB;YACpB,OAAO,IAAA,kBAAO,EAAC,IAAI,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,mFAAmF;IAC3E,MAAM,CAAC,wBAAwB,CAAC,KAAqB;QAC3D,MAAM,QAAQ,GAAa,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC,gBAAgB,EAAE,CAAC;YAC/E,OAAO,IAAA,eAAI,EACT,qBAAqB,KAAK,cAAc,gBAAgB,CAAC,gBAAgB,oBAAoB,CAC9F,CAAC;QACJ,CAAC;QACD,MAAM,cAAc,GAAW,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO,IAAA,2CAA0B,EAAC,cAAc,CAAC;aAC9C,eAAe,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,8BAA8B,cAAc,MAAM,GAAG,EAAE,CAAC;aACjF,SAAS,CAAC,GAAG,EAAE,CAAC,IAAA,kBAAO,EAAC,cAAc,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,yEAAyE;IACjE,MAAM,CAAC,kBAAkB,CAAC,IAAY;QAC5C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,cAAc,CAAC,EAAE,CAAC;YACtD,OAAO,IAAA,eAAI,EAAC,oBAAoB,IAAI,sBAAsB,gBAAgB,CAAC,cAAc,GAAG,CAAC,CAAC;QAChG,CAAC;QACD,OAAO,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/F,CAAC;IAED,kEAAkE;IAC1D,MAAM,CAAC,gBAAgB,CAAC,SAAiB;QAC/C,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,OAAO,IAAA,eAAI,EAAC,yBAAyB,SAAS,kCAAkC,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,IAAA,kBAAO,EAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;;AAjFH,4CAkFC;AAjFC,uEAAuE;AAChD,iCAAgB,GAAW,eAAe,CAAC;AAClE,wDAAwD;AACjC,+BAAc,GAAW,OAAO,CAAC;AAExD,0EAA0E;AAClD,6BAAY,GAAW,OAAO,CAAC","sourcesContent":["/*\n * Copyright (c) 2026 Erik Fortune\n * SPDX-License-Identifier: MIT\n */\n\nimport { Result, fail, succeed } from '@fgv/ts-utils';\nimport { Convert, EntityId, MemoryScopeKey } from './ids';\nimport { assertPortableFilenameStem } from './filenameSafety';\n\n/**\n * The FileTree storage address an {@link IIdentityCodec} maps a domain key to.\n * @public\n */\nexport interface IIdentityCodecResult {\n  /** Scope path segment (may be multi-level, e.g. `conversations/<id>`). */\n  readonly scope: MemoryScopeKey;\n  /** Filename stem (the part before `.md`). Filename-safe after encoding. */\n  readonly idStem: string;\n  /**\n   * Whether this kind uses a versioned layout (temporal: multiple files per\n   * entity) vs. a flat layout (one file per entity). Non-temporal = always\n   * `false`.\n   */\n  readonly isVersioned: boolean;\n}\n\n/**\n * Maps a consumer-supplied domain key ⇄ a FileTree storage address. Injected\n * per kind so the store never touches raw domain keys: the codec owns all\n * filename escaping and the flat-vs-versioned layout dispatch.\n * @public\n */\nexport interface IIdentityCodec {\n  /**\n   * Encode a consumer-supplied entity id to a FileTree address. Deterministic\n   * and pure — no I/O.\n   */\n  encode(entityId: EntityId): Result<IIdentityCodecResult>;\n\n  /**\n   * Decode a FileTree address back to the original {@link EntityId}. The exact\n   * inverse of {@link IIdentityCodec.encode | encode} for non-versioned kinds.\n   */\n  decode(scope: MemoryScopeKey, encodedStem: string): Result<EntityId>;\n\n  /**\n   * Assert that `encode(decode(scope, stem)).idStem === stem`. Used by the\n   * store's `verifyFilenameId` check on load.\n   */\n  verifyRoundTrip(scope: MemoryScopeKey, stem: string): Result<true>;\n}\n\n/**\n * The `(entityId, version seq)` an {@link ITemporalIdentityCodec.decodeVersion}\n * recovers from a version file address.\n * @public\n */\nexport interface ITemporalVersionAddress {\n  /** The stable consumer-supplied domain key. */\n  readonly entityId: EntityId;\n  /** The version's monotonic `seq` (the `v<seq>` component of the file stem). */\n  readonly seq: number;\n}\n\n/**\n * Additive extension of {@link IIdentityCodec} for versioned (temporal) kinds. A\n * codec whose {@link IIdentityCodec.encode | encode} reports `isVersioned: true`\n * implements this so the store can form and parse per-version filenames without\n * knowing the layout. Non-versioned codecs do NOT implement it (probe with\n * {@link isTemporalIdentityCodec}).\n * @public\n */\nexport interface ITemporalIdentityCodec extends IIdentityCodec {\n  /**\n   * Form the version filename stem for a specific `(entityId, seq)`. The store\n   * appends the extension and writes it under the entity subtree returned by\n   * {@link IIdentityCodec.encode | encode}.\n   */\n  encodeVersion(entityId: EntityId, seq: number): Result<string>;\n\n  /**\n   * Parse a `(subtree scope, version stem)` back to its\n   * {@link ITemporalVersionAddress}. The subtree scope is authoritative for the\n   * `entityId`, disambiguating a stem whose `entityId` itself ends in\n   * `-v<digits>`.\n   */\n  decodeVersion(scope: MemoryScopeKey, stem: string): Result<ITemporalVersionAddress>;\n}\n\n/**\n * Narrow an {@link IIdentityCodec} to {@link ITemporalIdentityCodec} by probing\n * for the versioned methods. Used by the store when an `encode` result reports\n * `isVersioned: true`.\n * @public\n */\nexport function isTemporalIdentityCodec(codec: IIdentityCodec): codec is ITemporalIdentityCodec {\n  const candidate: Partial<ITemporalIdentityCodec> = codec as Partial<ITemporalIdentityCodec>;\n  return typeof candidate.encodeVersion === 'function' && typeof candidate.decodeVersion === 'function';\n}\n\n/**\n * Identity codec for a versioned (temporal) kind family, resolving OQ-11 to the\n * subtree-per-entity layout: every version of an entity is a distinct file under\n * a per-entity subtree.\n *\n * @remarks\n * - `encode`: scope = `<baseScope>/entities/<entityId>`, idStem = `<entityId>`,\n *   `isVersioned = true`. The idStem is the stable entity prefix; the store forms\n *   each version's filename via {@link TemporalIdentityCodec.encodeVersion}.\n * - `encodeVersion`: version stem = `<entityId>-v<seq>`.\n * - `decode` / `decodeVersion`: recover `entityId` (and `seq`) from a\n *   `(subtree scope, version stem)` pair; the scope is authoritative for the\n *   `entityId`.\n * - Escaping: `baseScope` and `entityId` must each match the POSIX portable\n *   filename set (they become path segments); `seq` is a non-negative integer.\n * - Layout: `vault/<baseScope>/entities/<entityId>/<entityId>-v<seq>.md`.\n * @public\n */\nexport class TemporalIdentityCodec implements ITemporalIdentityCodec {\n  /** The fixed subtree segment separating an entity's versions from its scope. */\n  public static readonly entitiesSegment: string = 'entities';\n  /** The version-stem infix: `<entityId>` + this + `<seq>`. */\n  public static readonly versionInfix: string = '-v';\n\n  /** A non-negative integer string (the version seq). */\n  private static readonly _versionSeqRe: RegExp = /^\\d+$/;\n\n  /** The base scope segment this codec's entities live under. */\n  public readonly baseScope: string;\n\n  private constructor(baseScope: string) {\n    this.baseScope = baseScope;\n  }\n\n  /**\n   * Family-convention factory. Validates that `baseScope` is a single portable\n   * filename segment (it becomes the top-level path component).\n   */\n  public static create(baseScope: string): Result<TemporalIdentityCodec> {\n    return assertPortableFilenameStem(baseScope)\n      .withErrorFormat((msg) => `temporal codec: baseScope '${baseScope}': ${msg}`)\n      .onSuccess(() => succeed(new TemporalIdentityCodec(baseScope)));\n  }\n\n  /** {@inheritDoc IIdentityCodec.encode} */\n  public encode(entityId: EntityId): Result<IIdentityCodecResult> {\n    return assertPortableFilenameStem(entityId)\n      .withErrorFormat((msg) => `temporal codec: entityId '${entityId}': ${msg}`)\n      .onSuccess((stem) =>\n        succeed({\n          scope: `${this.baseScope}/${TemporalIdentityCodec.entitiesSegment}/${stem}` as MemoryScopeKey,\n          idStem: stem,\n          isVersioned: true\n        })\n      );\n  }\n\n  /** {@inheritDoc ITemporalIdentityCodec.encodeVersion} */\n  public encodeVersion(entityId: EntityId, seq: number): Result<string> {\n    return assertPortableFilenameStem(entityId)\n      .withErrorFormat((msg) => `temporal codec: entityId '${entityId}': ${msg}`)\n      .onSuccess((stem) => {\n        if (!Number.isInteger(seq) || seq < 0) {\n          return fail(`temporal codec: version seq '${seq}' must be a non-negative integer`);\n        }\n        return succeed(`${stem}${TemporalIdentityCodec.versionInfix}${seq}`);\n      });\n  }\n\n  /** {@inheritDoc IIdentityCodec.decode} */\n  public decode(scope: MemoryScopeKey, encodedStem: string): Result<EntityId> {\n    return this.decodeVersion(scope, encodedStem).onSuccess((addr) =>\n      Convert.entityId.convert(addr.entityId)\n    );\n  }\n\n  /** {@inheritDoc ITemporalIdentityCodec.decodeVersion} */\n  public decodeVersion(scope: MemoryScopeKey, stem: string): Result<ITemporalVersionAddress> {\n    return this._entityIdFromScope(scope).onSuccess((entityId) => {\n      const prefix: string = `${entityId}${TemporalIdentityCodec.versionInfix}`;\n      if (!stem.startsWith(prefix)) {\n        return fail(\n          `temporal codec: version stem '${stem}' must begin with '${prefix}' (from scope '${scope}')`\n        );\n      }\n      const seqText: string = stem.slice(prefix.length);\n      if (!TemporalIdentityCodec._versionSeqRe.test(seqText)) {\n        return fail(`temporal codec: version stem '${stem}' has a non-integer version suffix '${seqText}'`);\n      }\n      // The regex admits digit strings of unbounded length; `parseInt` would silently\n      // lose precision past MAX_SAFE_INTEGER, decoding a corrupt/tampered filename to a\n      // plausible-but-wrong `seq` that drives version ordering. Reject rather than corrupt.\n      const seq: number = Number.parseInt(seqText, 10);\n      if (!Number.isSafeInteger(seq)) {\n        return fail(\n          `temporal codec: version stem '${stem}' has a version suffix '${seqText}' outside the safe integer range`\n        );\n      }\n      return Convert.entityId.convert(entityId).onSuccess((branded) => succeed({ entityId: branded, seq }));\n    });\n  }\n\n  /** {@inheritDoc IIdentityCodec.verifyRoundTrip} */\n  public verifyRoundTrip(scope: MemoryScopeKey, stem: string): Result<true> {\n    return this.decodeVersion(scope, stem).onSuccess((addr) =>\n      this.encode(addr.entityId).onSuccess((encoded) =>\n        this.encodeVersion(addr.entityId, addr.seq).onSuccess((reStem) => {\n          if (encoded.scope !== scope || reStem !== stem) {\n            return fail(\n              `temporal codec: round-trip mismatch for scope '${scope}' stem '${stem}' (re-encoded to scope '${encoded.scope}' stem '${reStem}')`\n            );\n          }\n          return succeed(true);\n        })\n      )\n    );\n  }\n\n  /** Validate and extract the `entityId` from a `<baseScope>/entities/<entityId>` scope. */\n  private _entityIdFromScope(scope: MemoryScopeKey): Result<string> {\n    const segments: string[] = scope.split('/');\n    if (\n      segments.length !== 3 ||\n      segments[0] !== this.baseScope ||\n      segments[1] !== TemporalIdentityCodec.entitiesSegment\n    ) {\n      return fail(\n        `temporal codec: scope '${scope}' must be '${this.baseScope}/${TemporalIdentityCodec.entitiesSegment}/<entityId>'`\n      );\n    }\n    const entityId: string = segments[2];\n    return assertPortableFilenameStem(entityId)\n      .withErrorFormat((msg) => `temporal codec: entityId '${entityId}': ${msg}`)\n      .onSuccess(() => succeed(entityId));\n  }\n}\n\n/**\n * Identity codec for the knowledge kind family. A knowledge entity is keyed\n * by its consumer-supplied `docId`, which is used verbatim as the filename\n * stem under the flat `knowledge` scope.\n *\n * @remarks\n * - `encode`: scope = `knowledge`, idStem = `docId`, `isVersioned = false`.\n * - `decode`: brands the stem back to an {@link EntityId}.\n * - Escaping: the `docId` must match the POSIX portable filename set.\n * - Layout: `vault/knowledge/<docId>.md`.\n * @public\n */\nexport class KnowledgeIdentityCodec implements IIdentityCodec {\n  /** The fixed scope for every knowledge entity. */\n  public static readonly scope: MemoryScopeKey = 'knowledge' as MemoryScopeKey;\n\n  /** {@inheritDoc IIdentityCodec.encode} */\n  public encode(entityId: EntityId): Result<IIdentityCodecResult> {\n    return assertPortableFilenameStem(entityId).onSuccess((idStem) =>\n      succeed({ scope: KnowledgeIdentityCodec.scope, idStem, isVersioned: false })\n    );\n  }\n\n  /** {@inheritDoc IIdentityCodec.decode} */\n  public decode(scope: MemoryScopeKey, encodedStem: string): Result<EntityId> {\n    if (scope !== KnowledgeIdentityCodec.scope) {\n      return fail(\n        `knowledge codec: scope '${scope}' does not match expected scope '${KnowledgeIdentityCodec.scope}'`\n      );\n    }\n    return assertPortableFilenameStem(encodedStem).onSuccess((stem) => Convert.entityId.convert(stem));\n  }\n\n  /** {@inheritDoc IIdentityCodec.verifyRoundTrip} */\n  public verifyRoundTrip(scope: MemoryScopeKey, stem: string): Result<true> {\n    return this.decode(scope, stem)\n      .onSuccess((entityId) => this.encode(entityId))\n      .onSuccess((encoded) => {\n        /* c8 ignore start -- defensive: for the identity (knowledge) codec, encode(decode(stem)).idStem always equals stem when both succeed; the guard exists for the non-identity codecs (LTM/MTM, Phase C) that reuse this contract */\n        if (encoded.idStem !== stem) {\n          return fail(\n            `knowledge codec: round-trip mismatch for stem '${stem}' (re-encoded to '${encoded.idStem}')`\n          );\n        }\n        /* c8 ignore stop */\n        return succeed(true);\n      });\n  }\n}\n\n/**\n * Identity codec for the long-term-memory (LTM) kind family. An LTM entity is\n * keyed by its `conversationId`, used verbatim as the filename stem under the\n * flat `conversations` scope.\n *\n * @remarks\n * - `encode`: scope = `conversations`, idStem = `conversationId`, `isVersioned = false`.\n * - `decode`: brands the stem back to an {@link EntityId}.\n * - Escaping: the `conversationId` must match the POSIX portable filename set.\n * - Layout: `vault/conversations/<conversationId>.md`.\n *\n * An LTM file (`conversations/<id>.md`) and the MTM subtree\n * (`conversations/<id>/turn-N.md`) coexist — a file and a same-named directory\n * are independent on every supported FileTree backend.\n * @public\n */\nexport class LtmIdentityCodec implements IIdentityCodec {\n  /** The fixed scope for every LTM entity. */\n  public static readonly scope: MemoryScopeKey = 'conversations' as MemoryScopeKey;\n\n  /** {@inheritDoc IIdentityCodec.encode} */\n  public encode(entityId: EntityId): Result<IIdentityCodecResult> {\n    return assertPortableFilenameStem(entityId).onSuccess((idStem) =>\n      succeed({ scope: LtmIdentityCodec.scope, idStem, isVersioned: false })\n    );\n  }\n\n  /** {@inheritDoc IIdentityCodec.decode} */\n  public decode(scope: MemoryScopeKey, encodedStem: string): Result<EntityId> {\n    if (scope !== LtmIdentityCodec.scope) {\n      return fail(`LTM codec: scope '${scope}' does not match expected scope '${LtmIdentityCodec.scope}'`);\n    }\n    return assertPortableFilenameStem(encodedStem).onSuccess((stem) => Convert.entityId.convert(stem));\n  }\n\n  /** {@inheritDoc IIdentityCodec.verifyRoundTrip} */\n  public verifyRoundTrip(scope: MemoryScopeKey, stem: string): Result<true> {\n    return this.decode(scope, stem)\n      .onSuccess((entityId) => this.encode(entityId))\n      .onSuccess((encoded) => {\n        /* c8 ignore start -- defensive: LTM encode(decode(stem)).idStem always equals stem when both succeed (identity mapping); guard preserves the contract for direct callers */\n        if (encoded.idStem !== stem) {\n          return fail(\n            `LTM codec: round-trip mismatch for stem '${stem}' (re-encoded to '${encoded.idStem}')`\n          );\n        }\n        /* c8 ignore stop */\n        return succeed(true);\n      });\n  }\n}\n\n/**\n * Identity codec for the medium-term-memory (MTM) kind family. An MTM entity is\n * keyed by the colon-composite `<conversationId>:<turnIndex>` and maps into a\n * per-conversation subtree.\n *\n * @remarks\n * - `encode`: splits the entity id on `:`; scope =\n *   `conversations/<conversationId>` (multi-segment), idStem = `turn-<turnIndex>`,\n *   `isVersioned = false`.\n * - `decode`: reverses scope `conversations/<id>` + stem `turn-<N>` to the\n *   composite `<id>:<N>`.\n * - Escaping: `conversationId` must match the POSIX portable filename set (so it\n *   contains no `/` or `:`); `turnIndex` must be a non-negative integer string,\n *   preserved verbatim so the round-trip is exact.\n * - Layout: `vault/conversations/<conversationId>/turn-<N>.md`. The `/` in the\n *   scope is handled by the store's multi-segment scope resolver.\n *\n * **Verbatim turn index (caller-canonicalization note).** The turn index is\n * preserved exactly — `conv-1:7` and `conv-1:007` are DISTINCT entities mapping\n * to distinct files (`turn-7.md` / `turn-007.md`). Verbatim preservation is what\n * makes the round-trip exact, but it means a caller that formats turn indices\n * inconsistently (some zero-padded, some not) will silently mint separate\n * entities. Callers should canonicalize to one form (e.g. no leading zeros).\n * @public\n */\nexport class MtmIdentityCodec implements IIdentityCodec {\n  /** The top-level scope segment under which every MTM subtree lives. */\n  public static readonly rootScopeSegment: string = 'conversations';\n  /** The fixed filename-stem prefix for a turn record. */\n  public static readonly turnStemPrefix: string = 'turn-';\n\n  /** A non-negative integer string (the turn index), preserved verbatim. */\n  private static readonly _turnIndexRe: RegExp = /^\\d+$/;\n\n  /** {@inheritDoc IIdentityCodec.encode} */\n  public encode(entityId: EntityId): Result<IIdentityCodecResult> {\n    const parts: string[] = entityId.split(':');\n    if (parts.length !== 2) {\n      return fail(`MTM codec: entity id '${entityId}' must be a '<conversationId>:<turnIndex>' composite`);\n    }\n    const [conversationId, turnIndex] = parts;\n    return assertPortableFilenameStem(conversationId)\n      .withErrorFormat((msg) => `MTM codec: conversationId '${conversationId}': ${msg}`)\n      .onSuccess(() => MtmIdentityCodec._assertTurnIndex(turnIndex))\n      .onSuccess(() =>\n        succeed({\n          scope: `${MtmIdentityCodec.rootScopeSegment}/${conversationId}` as MemoryScopeKey,\n          idStem: `${MtmIdentityCodec.turnStemPrefix}${turnIndex}`,\n          isVersioned: false\n        })\n      );\n  }\n\n  /** {@inheritDoc IIdentityCodec.decode} */\n  public decode(scope: MemoryScopeKey, encodedStem: string): Result<EntityId> {\n    return MtmIdentityCodec._conversationIdFromScope(scope).onSuccess((conversationId) =>\n      MtmIdentityCodec._turnIndexFromStem(encodedStem).onSuccess((turnIndex) =>\n        Convert.entityId.convert(`${conversationId}:${turnIndex}`)\n      )\n    );\n  }\n\n  /** {@inheritDoc IIdentityCodec.verifyRoundTrip} */\n  public verifyRoundTrip(scope: MemoryScopeKey, stem: string): Result<true> {\n    return this.decode(scope, stem)\n      .onSuccess((entityId) => this.encode(entityId))\n      .onSuccess((encoded) => {\n        /* c8 ignore start -- defensive: MTM encode(decode(scope, stem)) reproduces the same scope+stem whenever both succeed (no normalization); guard preserves the contract for direct callers */\n        if (encoded.idStem !== stem || encoded.scope !== scope) {\n          return fail(\n            `MTM codec: round-trip mismatch for scope '${scope}' stem '${stem}' (re-encoded to scope '${encoded.scope}' stem '${encoded.idStem}')`\n          );\n        }\n        /* c8 ignore stop */\n        return succeed(true);\n      });\n  }\n\n  /** Validate and extract the `conversationId` from a `conversations/<id>` scope. */\n  private static _conversationIdFromScope(scope: MemoryScopeKey): Result<string> {\n    const segments: string[] = scope.split('/');\n    if (segments.length !== 2 || segments[0] !== MtmIdentityCodec.rootScopeSegment) {\n      return fail(\n        `MTM codec: scope '${scope}' must be '${MtmIdentityCodec.rootScopeSegment}/<conversationId>'`\n      );\n    }\n    const conversationId: string = segments[1];\n    return assertPortableFilenameStem(conversationId)\n      .withErrorFormat((msg) => `MTM codec: conversationId '${conversationId}': ${msg}`)\n      .onSuccess(() => succeed(conversationId));\n  }\n\n  /** Validate and extract the turn-index digits from a `turn-<N>` stem. */\n  private static _turnIndexFromStem(stem: string): Result<string> {\n    if (!stem.startsWith(MtmIdentityCodec.turnStemPrefix)) {\n      return fail(`MTM codec: stem '${stem}' must begin with '${MtmIdentityCodec.turnStemPrefix}'`);\n    }\n    return MtmIdentityCodec._assertTurnIndex(stem.slice(MtmIdentityCodec.turnStemPrefix.length));\n  }\n\n  /** Assert a string is a non-negative integer (the turn index). */\n  private static _assertTurnIndex(turnIndex: string): Result<string> {\n    if (!MtmIdentityCodec._turnIndexRe.test(turnIndex)) {\n      return fail(`MTM codec: turnIndex '${turnIndex}' must be a non-negative integer`);\n    }\n    return succeed(turnIndex);\n  }\n}\n"]}

package/lib/packlets/types/index.d.ts

@@ -2,5 +2,6 @@ export * from './ids';
 export * from './envelope';
 export * from './filenameSafety';
 export * from './identityCodec';
+export * from './temporal';
 export * from './writePolicy';
 //# sourceMappingURL=index.d.ts.map

package/lib/packlets/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/packlets/types/index.ts"],"names":[],"mappings":"AAKA,cAAc,OAAO,CAAC;AACtB,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/packlets/types/index.ts"],"names":[],"mappings":"AAKA,cAAc,OAAO,CAAC;AACtB,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC"}

package/lib/packlets/types/index.js

@@ -22,5 +22,6 @@ __exportStar(require("./ids"), exports);
 __exportStar(require("./envelope"), exports);
 __exportStar(require("./filenameSafety"), exports);
 __exportStar(require("./identityCodec"), exports);
+__exportStar(require("./temporal"), exports);
 __exportStar(require("./writePolicy"), exports);
 //# sourceMappingURL=index.js.map

package/lib/packlets/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/packlets/types/index.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;AAEH,wCAAsB;AACtB,6CAA2B;AAC3B,mDAAiC;AACjC,kDAAgC;AAChC,gDAA8B","sourcesContent":["/*\n * Copyright (c) 2026 Erik Fortune\n * SPDX-License-Identifier: MIT\n */\n\nexport * from './ids';\nexport * from './envelope';\nexport * from './filenameSafety';\nexport * from './identityCodec';\nexport * from './writePolicy';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/packlets/types/index.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;AAEH,wCAAsB;AACtB,6CAA2B;AAC3B,mDAAiC;AACjC,kDAAgC;AAChC,6CAA2B;AAC3B,gDAA8B","sourcesContent":["/*\n * Copyright (c) 2026 Erik Fortune\n * SPDX-License-Identifier: MIT\n */\n\nexport * from './ids';\nexport * from './envelope';\nexport * from './filenameSafety';\nexport * from './identityCodec';\nexport * from './temporal';\nexport * from './writePolicy';\n"]}

package/lib/packlets/types/temporal.d.ts

@@ -0,0 +1,40 @@
+import { IMemoryRecord } from './envelope';
+/**
+ * Whether a record participates in the versioned (temporal) layout. A temporal
+ * record always carries a {@link ITemporalBlock | temporal} block (the store
+ * stamps `valid_at` on every versioned write); an atemporal record never does,
+ * so presence of `temporal` is the discriminator. Independent of `id`/`entityId`
+ * divergence (MTM is flat yet has `entityId !== id`).
+ * @public
+ */
+export declare function isTemporalRecord(record: IMemoryRecord<unknown>): boolean;
+/**
+ * Whether a temporal record is a *current* version — its `temporal.invalid_at`
+ * is `null` or absent (the still-valid sentinel). A non-temporal record is never
+ * current in this sense (returns `false`).
+ * @public
+ */
+export declare function isVersionCurrent(record: IMemoryRecord<unknown>): boolean;
+/**
+ * Whether a temporal record's validity interval contains `asOf` (epoch ms):
+ * `valid_at <= asOf` and (`invalid_at` is null/absent OR `asOf < invalid_at`).
+ * The version's `valid_at` defaults to its `created` when absent; a non-temporal
+ * record is never "valid at" a point (returns `false`).
+ * @public
+ */
+export declare function isVersionValidAt(record: IMemoryRecord<unknown>, asOf: number): boolean;
+/**
+ * Select the current version from a set of an entity's versions: the newest
+ * (highest `seq`) version whose `invalid_at` is null/absent. `undefined` when the
+ * entity has no current version (fully invalidated / soft-deleted, or empty).
+ * @public
+ */
+export declare function selectCurrentVersion(versions: ReadonlyArray<IMemoryRecord<unknown>>): IMemoryRecord<unknown> | undefined;
+/**
+ * Select the version of an entity valid at `asOf` (epoch ms): the newest
+ * (highest `seq`) version whose validity interval contains `asOf`. `undefined`
+ * when no version was valid at that instant.
+ * @public
+ */
+export declare function selectVersionAsOf(versions: ReadonlyArray<IMemoryRecord<unknown>>, asOf: number): IMemoryRecord<unknown> | undefined;
+//# sourceMappingURL=temporal.d.ts.map

package/lib/packlets/types/temporal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"temporal.d.ts","sourceRoot":"","sources":["../../../src/packlets/types/temporal.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,OAAO,CAExE;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,OAAO,CAMxE;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CActF;AAkBD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,GAC9C,aAAa,CAAC,OAAO,CAAC,GAAG,SAAS,CAEpC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,EAC/C,IAAI,EAAE,MAAM,GACX,aAAa,CAAC,OAAO,CAAC,GAAG,SAAS,CAEpC"}

package/lib/packlets/types/temporal.js

@@ -0,0 +1,92 @@
+"use strict";
+/*
+ * Copyright (c) 2026 Erik Fortune
+ * SPDX-License-Identifier: MIT
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isTemporalRecord = isTemporalRecord;
+exports.isVersionCurrent = isVersionCurrent;
+exports.isVersionValidAt = isVersionValidAt;
+exports.selectCurrentVersion = selectCurrentVersion;
+exports.selectVersionAsOf = selectVersionAsOf;
+/**
+ * Whether a record participates in the versioned (temporal) layout. A temporal
+ * record always carries a {@link ITemporalBlock | temporal} block (the store
+ * stamps `valid_at` on every versioned write); an atemporal record never does,
+ * so presence of `temporal` is the discriminator. Independent of `id`/`entityId`
+ * divergence (MTM is flat yet has `entityId !== id`).
+ * @public
+ */
+function isTemporalRecord(record) {
+    return record.envelope.temporal !== undefined;
+}
+/**
+ * Whether a temporal record is a *current* version — its `temporal.invalid_at`
+ * is `null` or absent (the still-valid sentinel). A non-temporal record is never
+ * current in this sense (returns `false`).
+ * @public
+ */
+function isVersionCurrent(record) {
+    const temporal = record.envelope.temporal;
+    if (temporal === undefined) {
+        return false;
+    }
+    return temporal.invalid_at === null || temporal.invalid_at === undefined;
+}
+/**
+ * Whether a temporal record's validity interval contains `asOf` (epoch ms):
+ * `valid_at <= asOf` and (`invalid_at` is null/absent OR `asOf < invalid_at`).
+ * The version's `valid_at` defaults to its `created` when absent; a non-temporal
+ * record is never "valid at" a point (returns `false`).
+ * @public
+ */
+function isVersionValidAt(record, asOf) {
+    var _a;
+    const temporal = record.envelope.temporal;
+    if (temporal === undefined) {
+        return false;
+    }
+    const start = (_a = temporal.valid_at) !== null && _a !== void 0 ? _a : record.envelope.created;
+    if (start > asOf) {
+        return false;
+    }
+    const end = temporal.invalid_at;
+    if (end === null || end === undefined) {
+        return true;
+    }
+    return asOf < end;
+}
+/**
+ * The version with the highest `seq` among `candidates` (undefined when empty).
+ * `seq` is the store's monotonic write counter, so highest `seq` is the newest
+ * version. Shared tiebreak for {@link selectCurrentVersion} /
+ * {@link selectVersionAsOf}.
+ */
+function highestSeq(candidates) {
+    let best;
+    for (const candidate of candidates) {
+        if (best === undefined || candidate.envelope.seq > best.envelope.seq) {
+            best = candidate;
+        }
+    }
+    return best;
+}
+/**
+ * Select the current version from a set of an entity's versions: the newest
+ * (highest `seq`) version whose `invalid_at` is null/absent. `undefined` when the
+ * entity has no current version (fully invalidated / soft-deleted, or empty).
+ * @public
+ */
+function selectCurrentVersion(versions) {
+    return highestSeq(versions.filter(isVersionCurrent));
+}
+/**
+ * Select the version of an entity valid at `asOf` (epoch ms): the newest
+ * (highest `seq`) version whose validity interval contains `asOf`. `undefined`
+ * when no version was valid at that instant.
+ * @public
+ */
+function selectVersionAsOf(versions, asOf) {
+    return highestSeq(versions.filter((version) => isVersionValidAt(version, asOf)));
+}
+//# sourceMappingURL=temporal.js.map

package/lib/packlets/types/temporal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"temporal.js","sourceRoot":"","sources":["../../../src/packlets/types/temporal.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAYH,4CAEC;AAQD,4CAMC;AASD,4CAcC;AAwBD,oDAIC;AAQD,8CAKC;AAxFD;;;;;;;GAOG;AACH,SAAgB,gBAAgB,CAAC,MAA8B;IAC7D,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,SAAgB,gBAAgB,CAAC,MAA8B;IAC7D,MAAM,QAAQ,GAAmD,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAC1F,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC,UAAU,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC;AAC3E,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAAC,MAA8B,EAAE,IAAY;;IAC3E,MAAM,QAAQ,GAAmD,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAC1F,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAW,MAAA,QAAQ,CAAC,QAAQ,mCAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;IACnE,IAAI,KAAK,GAAG,IAAI,EAAE,CAAC;QACjB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,GAAG,GAA8B,QAAQ,CAAC,UAAU,CAAC;IAC3D,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,GAAG,GAAG,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,UAAiD;IACnE,IAAI,IAAwC,CAAC;IAC7C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,IAAI,KAAK,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;YACrE,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAgB,oBAAoB,CAClC,QAA+C;IAE/C,OAAO,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iBAAiB,CAC/B,QAA+C,EAC/C,IAAY;IAEZ,OAAO,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AACnF,CAAC","sourcesContent":["/*\n * Copyright (c) 2026 Erik Fortune\n * SPDX-License-Identifier: MIT\n */\n\nimport { IMemoryRecord } from './envelope';\n\n/**\n * Whether a record participates in the versioned (temporal) layout. A temporal\n * record always carries a {@link ITemporalBlock | temporal} block (the store\n * stamps `valid_at` on every versioned write); an atemporal record never does,\n * so presence of `temporal` is the discriminator. Independent of `id`/`entityId`\n * divergence (MTM is flat yet has `entityId !== id`).\n * @public\n */\nexport function isTemporalRecord(record: IMemoryRecord<unknown>): boolean {\n  return record.envelope.temporal !== undefined;\n}\n\n/**\n * Whether a temporal record is a *current* version — its `temporal.invalid_at`\n * is `null` or absent (the still-valid sentinel). A non-temporal record is never\n * current in this sense (returns `false`).\n * @public\n */\nexport function isVersionCurrent(record: IMemoryRecord<unknown>): boolean {\n  const temporal: IMemoryRecord<unknown>['envelope']['temporal'] = record.envelope.temporal;\n  if (temporal === undefined) {\n    return false;\n  }\n  return temporal.invalid_at === null || temporal.invalid_at === undefined;\n}\n\n/**\n * Whether a temporal record's validity interval contains `asOf` (epoch ms):\n * `valid_at <= asOf` and (`invalid_at` is null/absent OR `asOf < invalid_at`).\n * The version's `valid_at` defaults to its `created` when absent; a non-temporal\n * record is never \"valid at\" a point (returns `false`).\n * @public\n */\nexport function isVersionValidAt(record: IMemoryRecord<unknown>, asOf: number): boolean {\n  const temporal: IMemoryRecord<unknown>['envelope']['temporal'] = record.envelope.temporal;\n  if (temporal === undefined) {\n    return false;\n  }\n  const start: number = temporal.valid_at ?? record.envelope.created;\n  if (start > asOf) {\n    return false;\n  }\n  const end: number | null | undefined = temporal.invalid_at;\n  if (end === null || end === undefined) {\n    return true;\n  }\n  return asOf < end;\n}\n\n/**\n * The version with the highest `seq` among `candidates` (undefined when empty).\n * `seq` is the store's monotonic write counter, so highest `seq` is the newest\n * version. Shared tiebreak for {@link selectCurrentVersion} /\n * {@link selectVersionAsOf}.\n */\nfunction highestSeq(candidates: ReadonlyArray<IMemoryRecord<unknown>>): IMemoryRecord<unknown> | undefined {\n  let best: IMemoryRecord<unknown> | undefined;\n  for (const candidate of candidates) {\n    if (best === undefined || candidate.envelope.seq > best.envelope.seq) {\n      best = candidate;\n    }\n  }\n  return best;\n}\n\n/**\n * Select the current version from a set of an entity's versions: the newest\n * (highest `seq`) version whose `invalid_at` is null/absent. `undefined` when the\n * entity has no current version (fully invalidated / soft-deleted, or empty).\n * @public\n */\nexport function selectCurrentVersion(\n  versions: ReadonlyArray<IMemoryRecord<unknown>>\n): IMemoryRecord<unknown> | undefined {\n  return highestSeq(versions.filter(isVersionCurrent));\n}\n\n/**\n * Select the version of an entity valid at `asOf` (epoch ms): the newest\n * (highest `seq`) version whose validity interval contains `asOf`. `undefined`\n * when no version was valid at that instant.\n * @public\n */\nexport function selectVersionAsOf(\n  versions: ReadonlyArray<IMemoryRecord<unknown>>,\n  asOf: number\n): IMemoryRecord<unknown> | undefined {\n  return highestSeq(versions.filter((version) => isVersionValidAt(version, asOf)));\n}\n"]}

package/lib/packlets/types/writePolicy.d.ts

@@ -210,4 +210,53 @@ export declare class MemoryCapCullPolicy implements IWritePolicy {
      */
     private _rebuild;
 }
+/**
+ * Write policy for a versioned (temporal) kind family, implementing
+ * invalidate-don't-delete. Admission always accepts — history is retained, never
+ * culled — and updates apply the same RFC-7386 merge patch as
+ * {@link KnowledgeLwwPolicy}, restricted to the temporal mutable surface.
+ *
+ * @remarks
+ * The policy does NOT perform the version file writes or set `invalid_at` — that
+ * is the store's versioned write branch, driven by the kind's
+ * {@link ITemporalIdentityCodec}. The policy's role is limited to admission and
+ * the merge that forms the **new version's** content from the **current**
+ * version plus the incoming patch (the merge-patch-under-versioning contract).
+ *
+ * - **Dedup scope.** `'entity'` — an identical re-put of the current content is a
+ *   no-op (the store compares the incoming content hash against the current
+ *   version), so identical writes do not spawn redundant versions.
+ * - **Mutable surface.** `body` + the envelope metadata a consumer may revise
+ *   (`tags` / `links` / `provenance` / `embeddingRef`). `temporal` is NOT mutable
+ *   here — `valid_at` / `invalid_at` are set by the store's versioned branch.
+ * @public
+ */
+export declare class TemporalVersionedPolicy implements IWritePolicy {
+    /** The temporal mutable surface (mirrors {@link KnowledgeLwwPolicy}). */
+    readonly mutableFields: ReadonlyArray<string>;
+    /** Versioned kinds dedup per-entity against the current version (see the class remarks). */
+    readonly dedupScope: DedupScope;
+    /** Deep-clones the mutable view without RFC-7386 null-deletion semantics. */
+    private readonly _cloneEditor;
+    /** Applies the RFC-7386 merge patch. */
+    private readonly _mergeEditor;
+    private constructor();
+    /**
+     * Family-convention factory. Constructs the shared `JsonEditor` instances (one
+     * for cloning, one for the RFC-7386 merge), rules disabled — the same merge
+     * config as the shipped policies.
+     */
+    static create(): Result<TemporalVersionedPolicy>;
+    /** {@inheritDoc IWritePolicy.admit} */
+    admit(__incoming: IMemoryRecord<unknown>, __existing: ReadonlyArray<IMemoryRecord<unknown>>): Result<AdmissionDecision>;
+    /** {@inheritDoc IWritePolicy.applyUpdate} */
+    applyUpdate(existing: IMemoryRecord<unknown>, patch: Record<string, unknown>): Result<IMemoryRecord<unknown>>;
+    /**
+     * Reassemble a record from the merged mutable view. `body` / `tags` / `links` /
+     * `provenance` are required and may not be deleted by a patch; `embeddingRef`,
+     * when dropped by the merge, is restored as `undefined` (absent) — the same
+     * hash-stable semantics as {@link KnowledgeLwwPolicy}.
+     */
+    private _rebuild;
+}
 //# sourceMappingURL=writePolicy.d.ts.map

package/lib/packlets/types/writePolicy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"writePolicy.d.ts","sourceRoot":"","sources":["../../../src/packlets/types/writePolicy.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,MAAM,EAAiB,MAAM,eAAe,CAAC;AAGtD,OAAO,EAA0B,aAAa,EAAe,MAAM,YAAY,CAAC;AAChF,OAAO,EAAE,QAAQ,EAAO,MAAM,OAAO,CAAC;AAEtC;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE9C;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,EAAE,UAAqB,CAAC;AAExD;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,GAC/B;IAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACxD;IACE,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,qEAAqE;IACrE,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;CACzC,CAAC;AAEN;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAE9C;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IAEjC;;;;;;;;;;OAUG;IACH,KAAK,CACH,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,EAChC,QAAQ,EAAE,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,GAC9C,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAE7B;;;;;;;;;;OAUG;IACH,WAAW,CACT,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,EAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;CACnC;AAmBD;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,kBAAmB,YAAW,YAAY;IACrD;;;OAGG;IACH,SAAgB,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAMlD;IAEF;;;;;OAKG;IACH,SAAgB,UAAU,EAAE,UAAU,CAAa;IAEnD,6EAA6E;IAC7E,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAa;IAC1C,wCAAwC;IACxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAa;IAE1C,OAAO;IAKP;;;;OAIG;WACW,MAAM,IAAI,MAAM,CAAC,kBAAkB,CAAC;IAQlD,uCAAuC;IAChC,KAAK,CACV,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,EAClC,UAAU,EAAE,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,GAChD,MAAM,CAAC,iBAAiB,CAAC;IAK5B,6CAA6C;IACtC,WAAW,CAChB,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,EAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IA+BjC;;;;;;;;;OASG;IACH,OAAO,CAAC,QAAQ;CAoBjB;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC/C;AA2BD;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,mBAAoB,YAAW,YAAY;IACtD,+CAA+C;IAC/C,SAAgB,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAErD,iEAAiE;IACjE,SAAgB,UAAU,EAAE,UAAU,CAAY;IAElD,+CAA+C;IAC/C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqB;IACjD,6EAA6E;IAC7E,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAa;IAC1C,wCAAwC;IACxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAa;IAE1C,OAAO;IAOP;;;;;OAKG;WACW,MAAM,CAAC,MAAM,EAAE,0BAA0B,GAAG,MAAM,CAAC,mBAAmB,CAAC;IAQrF,uCAAuC;IAChC,KAAK,CACV,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,EAClC,QAAQ,EAAE,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,GAC9C,MAAM,CAAC,iBAAiB,CAAC;IAa5B,6CAA6C;IACtC,WAAW,CAChB,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,EAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAiCjC;;;;;;;;;OASG;IACH,OAAO,CAAC,QAAQ;CA4BjB"}
+{"version":3,"file":"writePolicy.d.ts","sourceRoot":"","sources":["../../../src/packlets/types/writePolicy.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,MAAM,EAAiB,MAAM,eAAe,CAAC;AAGtD,OAAO,EAA0B,aAAa,EAAe,MAAM,YAAY,CAAC;AAChF,OAAO,EAAE,QAAQ,EAAO,MAAM,OAAO,CAAC;AAEtC;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE9C;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,EAAE,UAAqB,CAAC;AAExD;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,GAC/B;IAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACxD;IACE,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,qEAAqE;IACrE,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;CACzC,CAAC;AAEN;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAE9C;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IAEjC;;;;;;;;;;OAUG;IACH,KAAK,CACH,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,EAChC,QAAQ,EAAE,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,GAC9C,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAE7B;;;;;;;;;;OAUG;IACH,WAAW,CACT,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,EAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;CACnC;AAmBD;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,kBAAmB,YAAW,YAAY;IACrD;;;OAGG;IACH,SAAgB,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAMlD;IAEF;;;;;OAKG;IACH,SAAgB,UAAU,EAAE,UAAU,CAAa;IAEnD,6EAA6E;IAC7E,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAa;IAC1C,wCAAwC;IACxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAa;IAE1C,OAAO;IAKP;;;;OAIG;WACW,MAAM,IAAI,MAAM,CAAC,kBAAkB,CAAC;IAQlD,uCAAuC;IAChC,KAAK,CACV,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,EAClC,UAAU,EAAE,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,GAChD,MAAM,CAAC,iBAAiB,CAAC;IAK5B,6CAA6C;IACtC,WAAW,CAChB,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,EAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IA+BjC;;;;;;;;;OASG;IACH,OAAO,CAAC,QAAQ;CAoBjB;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC/C;AA2BD;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,mBAAoB,YAAW,YAAY;IACtD,+CAA+C;IAC/C,SAAgB,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAErD,iEAAiE;IACjE,SAAgB,UAAU,EAAE,UAAU,CAAY;IAElD,+CAA+C;IAC/C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqB;IACjD,6EAA6E;IAC7E,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAa;IAC1C,wCAAwC;IACxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAa;IAE1C,OAAO;IAOP;;;;;OAKG;WACW,MAAM,CAAC,MAAM,EAAE,0BAA0B,GAAG,MAAM,CAAC,mBAAmB,CAAC;IAQrF,uCAAuC;IAChC,KAAK,CACV,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,EAClC,QAAQ,EAAE,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,GAC9C,MAAM,CAAC,iBAAiB,CAAC;IAa5B,6CAA6C;IACtC,WAAW,CAChB,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,EAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAiCjC;;;;;;;;;OASG;IACH,OAAO,CAAC,QAAQ;CA4BjB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,uBAAwB,YAAW,YAAY;IAC1D,yEAAyE;IACzE,SAAgB,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,CAMlD;IAEF,4FAA4F;IAC5F,SAAgB,UAAU,EAAE,UAAU,CAAY;IAElD,6EAA6E;IAC7E,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAa;IAC1C,wCAAwC;IACxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAa;IAE1C,OAAO;IAKP;;;;OAIG;WACW,MAAM,IAAI,MAAM,CAAC,uBAAuB,CAAC;IAQvD,uCAAuC;IAChC,KAAK,CACV,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,EAClC,UAAU,EAAE,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,GAChD,MAAM,CAAC,iBAAiB,CAAC;IAM5B,6CAA6C;IACtC,WAAW,CAChB,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,EAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IA6BjC;;;;;OAKG;IACH,OAAO,CAAC,QAAQ;CAmBjB"}

package/lib/packlets/types/writePolicy.js

@@ -4,7 +4,7 @@
  * SPDX-License-Identifier: MIT
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.MemoryCapCullPolicy = exports.KnowledgeLwwPolicy = exports.DEFAULT_DEDUP_SCOPE = void 0;
+exports.TemporalVersionedPolicy = exports.MemoryCapCullPolicy = exports.KnowledgeLwwPolicy = exports.DEFAULT_DEDUP_SCOPE = void 0;
 const ts_utils_1 = require("@fgv/ts-utils");
 const ts_json_1 = require("@fgv/ts-json");
 /**
@@ -265,4 +265,101 @@ class MemoryCapCullPolicy {
     }
 }
 exports.MemoryCapCullPolicy = MemoryCapCullPolicy;
+/**
+ * Write policy for a versioned (temporal) kind family, implementing
+ * invalidate-don't-delete. Admission always accepts — history is retained, never
+ * culled — and updates apply the same RFC-7386 merge patch as
+ * {@link KnowledgeLwwPolicy}, restricted to the temporal mutable surface.
+ *
+ * @remarks
+ * The policy does NOT perform the version file writes or set `invalid_at` — that
+ * is the store's versioned write branch, driven by the kind's
+ * {@link ITemporalIdentityCodec}. The policy's role is limited to admission and
+ * the merge that forms the **new version's** content from the **current**
+ * version plus the incoming patch (the merge-patch-under-versioning contract).
+ *
+ * - **Dedup scope.** `'entity'` — an identical re-put of the current content is a
+ *   no-op (the store compares the incoming content hash against the current
+ *   version), so identical writes do not spawn redundant versions.
+ * - **Mutable surface.** `body` + the envelope metadata a consumer may revise
+ *   (`tags` / `links` / `provenance` / `embeddingRef`). `temporal` is NOT mutable
+ *   here — `valid_at` / `invalid_at` are set by the store's versioned branch.
+ * @public
+ */
+class TemporalVersionedPolicy {
+    constructor(cloneEditor, mergeEditor) {
+        /** The temporal mutable surface (mirrors {@link KnowledgeLwwPolicy}). */
+        this.mutableFields = [
+            'body',
+            'tags',
+            'links',
+            'provenance',
+            'embeddingRef'
+        ];
+        /** Versioned kinds dedup per-entity against the current version (see the class remarks). */
+        this.dedupScope = 'entity';
+        this._cloneEditor = cloneEditor;
+        this._mergeEditor = mergeEditor;
+    }
+    /**
+     * Family-convention factory. Constructs the shared `JsonEditor` instances (one
+     * for cloning, one for the RFC-7386 merge), rules disabled — the same merge
+     * config as the shipped policies.
+     */
+    static create() {
+        return ts_json_1.JsonEditor.create({}, []).onSuccess((cloneEditor) => ts_json_1.JsonEditor.create(MERGE_PATCH_OPTIONS, []).onSuccess((mergeEditor) => (0, ts_utils_1.succeed)(new TemporalVersionedPolicy(cloneEditor, mergeEditor))));
+    }
+    /** {@inheritDoc IWritePolicy.admit} */
+    admit(__incoming, __existing) {
+        // Invalidate-don't-delete: always accept. Superseded versions are retained
+        // (invalidated), never culled.
+        return (0, ts_utils_1.succeed)({ decision: 'accept' });
+    }
+    /** {@inheritDoc IWritePolicy.applyUpdate} */
+    applyUpdate(existing, patch) {
+        // Project the mutable fields into a single record-level view, each sourced
+        // from its canonical location. `embeddingRef` is omitted when `undefined`.
+        const view = {
+            body: existing.body,
+            tags: existing.envelope.tags,
+            links: existing.envelope.links,
+            provenance: existing.envelope.provenance
+        };
+        if (existing.envelope.embeddingRef !== undefined) {
+            view.embeddingRef = existing.envelope.embeddingRef;
+        }
+        // Restrict the incoming patch to the declared mutable fields.
+        const scopedPatch = {};
+        for (const field of this.mutableFields) {
+            if (field in patch) {
+                scopedPatch[field] = patch[field];
+            }
+        }
+        // Clone the view (no null-deletion), then apply the RFC-7386 merge patch onto
+        // the clone so the current version is never mutated in place.
+        return this._cloneEditor
+            .mergeObjectInPlace({}, view)
+            .onSuccess((clone) => this._mergeEditor.mergeObjectInPlace(clone, scopedPatch))
+            .onSuccess((merged) => this._rebuild(existing, merged));
+    }
+    /**
+     * Reassemble a record from the merged mutable view. `body` / `tags` / `links` /
+     * `provenance` are required and may not be deleted by a patch; `embeddingRef`,
+     * when dropped by the merge, is restored as `undefined` (absent) — the same
+     * hash-stable semantics as {@link KnowledgeLwwPolicy}.
+     */
+    _rebuild(existing, merged) {
+        const required = ['body', 'tags', 'links', 'provenance'];
+        const missing = required.filter((field) => !(field in merged));
+        if (missing.length > 0) {
+            return (0, ts_utils_1.fail)(`temporal versioned: merge patch may not delete required field(s): ${missing.join(', ')}`);
+        }
+        // The merged values are JSON projections of the already-validated typed
+        // record; restore the domain types (structural restorations, not fresh
+        // untrusted input — mirrors KnowledgeLwwPolicy._rebuild).
+        const envelope = Object.assign(Object.assign({}, existing.envelope), { tags: merged.tags, links: merged.links, provenance: merged.provenance, embeddingRef: 'embeddingRef' in merged ? merged.embeddingRef : undefined });
+        return (0, ts_utils_1.succeed)({ envelope, body: merged.body });
+    }
+}
+exports.TemporalVersionedPolicy = TemporalVersionedPolicy;
 //# sourceMappingURL=writePolicy.js.map