@kanadego/dsh-heartbeat 1.9.0 → 1.9.1

package/dist/chunk-2SYXKKZF.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/core/path-guard.ts","../src/config/schema.ts","../src/config/load.ts","../src/ledger/ledger.ts","../src/browse/browse.ts","../src/browse/preference.ts","../src/notify/notify.ts","../src/weekly/report.ts","../src/core/preset-install.ts"],"sourcesContent":["// Path whitelist guard (requirement 8 / design doc §10.2).\n//\n// Every fs write/delete must have its target canonicalized first, then be\n// checked against the canonical workspace prefix with a separator boundary.\n// A raw startsWith check is bypassable via \"..\", symlinks/junctions, and\n// case variants; canonical realpath closes all of those on Windows.\n\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nexport class PathOutsideWorkspaceError extends Error {\n  constructor(target: string, workspace: string) {\n    super(`path outside workspace: \"${target}\" (workspace: \"${workspace}\")`);\n    this.name = 'PathOutsideWorkspaceError';\n  }\n}\n\n/**\n * Resolve to an absolute canonical path. For targets that do not exist yet,\n * realpath the deepest existing ancestor and re-append the virtual tail, so\n * planned files under the workspace validate while `..` escapes still resolve\n * through the real filesystem.\n */\nexport function canonicalize(target: string): string {\n  const abs = path.resolve(target);\n  try {\n    return fs.realpathSync(abs);\n  } catch {\n    // Walk up from the missing leaf, recording each missing component, until\n    // an existing ancestor is found; re-append the missing tail afterwards.\n    const tail: string[] = [];\n    let dir = abs;\n    for (;;) {\n      const base = path.basename(dir);\n      const parent = path.dirname(dir);\n      if (parent === dir) {\n        throw new Error(`cannot canonicalize \"${target}\": no existing ancestor`);\n      }\n      tail.push(base);\n      dir = parent;\n      try {\n        const realDir = fs.realpathSync(dir);\n        return path.join(realDir, ...tail.reverse());\n      } catch {\n        continue;\n      }\n    }\n  }\n}\n\n/**\n * True when `targetCanon` equals the workspace dir or lies under it.\n * Comparison is case-insensitive (Windows filesystems) and requires a\n * separator boundary so `D:\\ws-data-evil` does not match workspace `D:\\ws-data`.\n */\nexport function isInsideWorkspace(workspaceCanon: string, targetCanon: string): boolean {\n  const norm = (p: string) => {\n    let n = path.normalize(p).toLowerCase();\n    if (!n.endsWith(path.sep)) n += path.sep;\n    return n;\n  };\n  const w = norm(workspaceCanon);\n  const t = norm(targetCanon);\n  return t === w || t.startsWith(w);\n}\n\nexport interface PathGuard {\n  /** Canonical workspace boundary. */\n  readonly workspace: string;\n  /** Canonicalize then validate; returns the canonical path or throws. */\n  assert(target: string): string;\n  /** Canonicalize then validate; returns null instead of throwing. */\n  check(target: string): string | null;\n}\n\nexport function createPathGuard(workspaceDir: string): PathGuard {\n  const workspace = canonicalize(workspaceDir);\n  const guard: PathGuard = {\n    workspace,\n    check(target: string): string | null {\n      const canon = canonicalize(target);\n      return isInsideWorkspace(workspace, canon) ? canon : null;\n    },\n    assert(target: string): string {\n      const canon = guard.check(target);\n      if (canon === null) throw new PathOutsideWorkspaceError(target, workspace);\n      return canon;\n    },\n  };\n  return guard;\n}\n","// Policy shape + runtime validation. Factory defaults live in config/policy.json\r\n// (read-only); the user layer in data/settings/policy.json overrides via deep\r\n// merge (design doc §13, D3).\r\n\r\nexport interface QuietHours {\r\n  start: string; // \"HH:MM\"\r\n  end: string;   // \"HH:MM\"\r\n}\r\n\r\nexport interface BrowseWindow {\r\n  start: string;\r\n  end: string;\r\n}\r\n\r\nexport interface Policy {\r\n  heartbeat: { intervalMin: number; idleMode: boolean; archiveRotatedHome: boolean };\r\n  gate: {\r\n    maxDailySend: number;\r\n    cooldownMinutes: number;\r\n    quietHours: QuietHours;\r\n  };\r\n  browse: {\r\n    windows: BrowseWindow[];\r\n    minIntervalHours: number;\r\n    maxSeedsPerVisit: number;\r\n  };\r\n  seeds: {\r\n    maxActive: number;\r\n    ttlDays: { news: number; fandom: number; scene: number; promise: number };\r\n    coldBenchDays: number;\r\n    /** Archive-area cap (v1.9.0): gc trims archived seeds beyond this, oldest first. */\r\n    archiveCap: number;\r\n    retireAfterUsed: number;\r\n    scoreWeights: { freshness: number; unused: number; confidence: number };\r\n  };\r\n  profile: {\r\n    consolidation: { minIntervalHours: number; inboxBacklog: number };\r\n    partitionCap: number;\r\n    maxOpsPerRun: number;\r\n    confidenceCap: { chat: number; screen: number; browse: number };\r\n    volatileDays: number;\r\n    stableLowActivityDays: number;\r\n    psyEnabled: boolean;\r\n  };\r\n  /** Observation depth (v1.8.0): how much of each user message enters the inbox. */\r\n  observe: { maxChars: number; perBeat: number };\r\n  weekly: { enabled: boolean };\r\n  retention: { envPulseHours: number; decisionLogDays: number };\r\n}\r\n\r\nconst HHMM = /^([01]\\d|2[0-3]):[0-5]\\d$/;\r\n\r\nfunction isPlainObject(v: unknown): v is Record<string, unknown> {\r\n  return typeof v === 'object' && v !== null && !Array.isArray(v);\r\n}\r\n\r\nfunction fail(msg: string): never {\r\n  throw new Error(`policy: ${msg}`);\r\n}\r\n\r\nexport function assertPolicy(input: unknown): asserts input is Policy {\r\n  if (!isPlainObject(input)) fail('root must be an object');\r\n  const p = input;\r\n  const hb = p.heartbeat;\r\n  if (!isPlainObject(hb)) fail('heartbeat missing');\r\n  if (typeof hb.intervalMin !== 'number' || hb.intervalMin < 1 || hb.intervalMin > 1440) {\r\n    fail('heartbeat.intervalMin must be a number in [1, 1440]');\r\n  }\r\n  if (typeof hb.idleMode !== 'boolean') fail('heartbeat.idleMode must be boolean');\r\n  if (typeof hb.archiveRotatedHome !== 'boolean') fail('heartbeat.archiveRotatedHome must be boolean');\r\n  const g = p.gate;\r\n  if (!isPlainObject(g)) fail('gate missing');\r\n  if (typeof g.maxDailySend !== 'number' || g.maxDailySend < 0) fail('gate.maxDailySend must be >= 0');\r\n  if (typeof g.cooldownMinutes !== 'number' || g.cooldownMinutes < 0) fail('gate.cooldownMinutes must be >= 0');\r\n  const qh = g.quietHours;\r\n  if (!isPlainObject(qh)) fail('gate.quietHours missing');\r\n  if (typeof qh.start !== 'string' || !HHMM.test(qh.start) || typeof qh.end !== 'string' || !HHMM.test(qh.end)) {\r\n    fail('gate.quietHours must be {start:\"HH:MM\", end:\"HH:MM\"}');\r\n  }\r\n  const b = p.browse;\r\n  if (!isPlainObject(b)) fail('browse missing');\r\n  if (!Array.isArray(b.windows) || b.windows.length === 0) fail('browse.windows must be a non-empty array');\r\n  for (const w of b.windows) {\r\n    if (!isPlainObject(w)) fail('browse.windows entries must be objects');\r\n    if (typeof w.start !== 'string' || !HHMM.test(w.start) || typeof w.end !== 'string' || !HHMM.test(w.end)) {\r\n      fail('browse.windows entries must be {start:\"HH:MM\", end:\"HH:MM\"}');\r\n    }\r\n  }\r\n  if (typeof b.minIntervalHours !== 'number' || b.minIntervalHours <= 0) fail('browse.minIntervalHours must be > 0');\r\n  if (typeof b.maxSeedsPerVisit !== 'number' || b.maxSeedsPerVisit < 1) fail('browse.maxSeedsPerVisit must be >= 1');\r\n  const s = p.seeds;\r\n  if (!isPlainObject(s)) fail('seeds missing');\r\n  if (typeof s.maxActive !== 'number' || s.maxActive < 1) fail('seeds.maxActive must be >= 1');\r\n  if (!isPlainObject(s.ttlDays)) fail('seeds.ttlDays missing');\r\n  for (const k of ['news', 'fandom', 'scene', 'promise'] as const) {\r\n    if (typeof s.ttlDays[k] !== 'number') fail(`seeds.ttlDays.${k} missing`);\r\n  }\r\n  if (typeof s.coldBenchDays !== 'number') fail('seeds.coldBenchDays missing');\r\n  if (typeof s.archiveCap !== 'number' || s.archiveCap < 1) fail('seeds.archiveCap must be >= 1');\r\n  if (typeof s.retireAfterUsed !== 'number' || s.retireAfterUsed < 1) fail('seeds.retireAfterUsed must be >= 1');\r\n  if (!isPlainObject(s.scoreWeights)) fail('seeds.scoreWeights missing');\r\n  const pr = p.profile;\r\n  if (!isPlainObject(pr)) fail('profile missing');\r\n  const c = pr.consolidation;\r\n  if (!isPlainObject(c)) fail('profile.consolidation missing');\r\n  if (typeof c.minIntervalHours !== 'number' || typeof c.inboxBacklog !== 'number') fail('profile.consolidation fields missing');\r\n  if (typeof pr.partitionCap !== 'number' || pr.partitionCap < 1) fail('profile.partitionCap must be >= 1');\r\n  if (typeof pr.maxOpsPerRun !== 'number' || pr.maxOpsPerRun < 1) fail('profile.maxOpsPerRun must be >= 1');\r\n  const cc = pr.confidenceCap;\r\n  if (!isPlainObject(cc)) fail('profile.confidenceCap missing');\r\n  if (typeof cc.chat !== 'number' || typeof cc.screen !== 'number' || typeof cc.browse !== 'number') {\r\n    fail('profile.confidenceCap fields missing');\r\n  }\r\n  if (typeof pr.volatileDays !== 'number' || pr.volatileDays < 1) fail('profile.volatileDays must be >= 1');\r\n  if (typeof pr.stableLowActivityDays !== 'number' || pr.stableLowActivityDays < 1) fail('profile.stableLowActivityDays must be >= 1');\r\n  if (typeof pr.psyEnabled !== 'boolean') fail('profile.psyEnabled must be boolean');\r\n  const ob = p.observe;\r\n  if (!isPlainObject(ob)) fail('observe missing');\r\n  if (typeof ob.maxChars !== 'number' || ob.maxChars < 20 || ob.maxChars > 2000) fail('observe.maxChars must be in [20, 2000]');\r\n  if (typeof ob.perBeat !== 'number' || ob.perBeat < 1 || ob.perBeat > 100) fail('observe.perBeat must be in [1, 100]');\r\n  if (!isPlainObject(p.weekly)) fail('weekly missing');\r\n  if (typeof p.weekly.enabled !== 'boolean') fail('weekly.enabled must be boolean');\r\n  const r = p.retention;\r\n  if (!isPlainObject(r)) fail('retention missing');\r\n  if (typeof r.envPulseHours !== 'number' || typeof r.decisionLogDays !== 'number') fail('retention fields missing');\r\n}\r\n\r\n/** Recursive merge: user values win; objects merge, arrays and scalars replace. */\r\nexport function deepMerge<T>(base: T, override: unknown): T {\r\n  if (!isPlainObject(base) || !isPlainObject(override)) {\r\n    return (override === undefined ? base : (override as T));\r\n  }\r\n  const out: Record<string, unknown> = { ...base };\r\n  for (const [k, v] of Object.entries(override)) {\r\n    out[k] = v === undefined ? (base as Record<string, unknown>)[k] : deepMerge((base as Record<string, unknown>)[k], v);\r\n  }\r\n  return out as T;\r\n}","// Two-layer policy loading (D3): factory defaults (config/policy.json, read-only)\n// + user layer (data/settings/policy.json). Missing user layer is normal; an\n// invalid factory file or user layer is fail-closed (throw at startup).\n\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport type { PathGuard } from '../core/path-guard.js';\nimport { assertPolicy, deepMerge, type Policy } from './schema.js';\n\nexport const USER_POLICY_FILE = 'policy.json';\n\nexport function loadPolicy(guard: PathGuard, configDir: string, settingsDir: string): Policy {\n  const factoryPath = path.join(configDir, 'policy.json');\n  let factoryRaw: unknown;\n  try {\n    factoryRaw = JSON.parse(fs.readFileSync(factoryPath, 'utf8'));\n  } catch (e) {\n    throw new Error(`factory policy unreadable at ${factoryPath}: ${String(e)}`);\n  }\n  assertPolicy(factoryRaw);\n\n  const userPath = guard.assert(path.join(settingsDir, USER_POLICY_FILE));\n  let merged: Policy = factoryRaw;\n  if (fs.existsSync(userPath)) {\n    try {\n      const userRaw: unknown = JSON.parse(fs.readFileSync(userPath, 'utf8'));\n      merged = deepMerge(factoryRaw, userRaw);\n    } catch (e) {\n      throw new Error(`user policy layer unparseable at ${userPath}: ${String(e)}`);\n    }\n  }\n  assertPolicy(merged);\n  return merged;\n}\n\n/**\n * Merge `patch` into the user policy layer (data/settings/policy.json) without\n * touching the factory file. Used by the settings card for policy-backed\n * toggles (psyEnabled, v1.7.0). No full-Policy validation here: the layer is\n * merged over the factory and validated together at the next loadPolicy.\n */\nexport function updateUserPolicy(guard: PathGuard, settingsDir: string, patch: Record<string, unknown>): Record<string, unknown> {\n  const userPath = guard.assert(path.join(settingsDir, USER_POLICY_FILE));\n  let user: Record<string, unknown> = {};\n  try {\n    user = JSON.parse(fs.readFileSync(userPath, 'utf8')) as Record<string, unknown>;\n    if (!user || typeof user !== 'object' || Array.isArray(user)) user = {};\n  } catch {\n    user = {}; // fresh layer\n  }\n  const merged = deepMerge(user, patch) as Record<string, unknown>;\n  fs.mkdirSync(path.dirname(userPath), { recursive: true });\n  fs.writeFileSync(userPath, JSON.stringify(merged, null, 2) + '\\n', 'utf8');\n  return merged;\n}\n","// Ledger (\"账本\") - the ONE shared ledger (design doc §5, requirement 5).\n// Human-readable Markdown by charter; the user may edit it by hand, so the\n// parser is tolerant: unknown lines are preserved verbatim on rewrite.\n\nimport path from 'node:path';\nimport { randomUUID } from 'node:crypto';\nimport type { PathGuard } from '../core/path-guard.js';\nimport { readText, writeText } from '../vault/vault.js';\n\nconst DAY_MS = 86_400_000;\n\nexport interface LedgerEntry {\n  id: string;\n  date: string; // \"YYYY-MM-DD\"\n  time: string; // \"HH:MM\"\n  status: 'open' | 'done';\n  text: string;\n}\n\nexport function ledgerFilePath(dataDir: string): string {\n  return path.join(dataDir, 'ledger.md');\n}\n\nconst LINE_RE = /^- \\[(\\d{4}-\\d{2}-\\d{2}) (\\d{2}:\\d{2})\\]\\[(open|done)\\]\\[#([0-9a-f]{6})\\] (.*)$/;\n\nfunction renderEntry(e: LedgerEntry): string {\n  return `- [${e.date} ${e.time}][${e.status}][#${e.id}] ${e.text}`;\n}\n\nexport function readLedger(guard: PathGuard, file: string): { header: string; entries: LedgerEntry[]; rawLines: string[] } {\n  const raw = readText(guard, file, '# 账本\\n');\n  const lines = raw.split('\\n');\n  const entries: LedgerEntry[] = [];\n  const rawLines: string[] = [];\n  for (const line of lines) {\n    const m = LINE_RE.exec(line);\n    if (m) {\n      entries.push({ date: m[1]!, time: m[2]!, status: m[3] as 'open' | 'done', id: m[4]!, text: m[5]! });\n    }\n    rawLines.push(line);\n  }\n  return { header: lines[0] ?? '# 账本', entries, rawLines };\n}\n\nexport function appendEntry(guard: PathGuard, file: string, text: string, now = Date.now()): LedgerEntry {\n  const textTrimmed = text.trim();\n  if (!textTrimmed) throw new Error('ledger entry must not be empty');\n  const d = new Date(now);\n  const pad = (n: number) => String(n).padStart(2, '0');\n  const entry: LedgerEntry = {\n    id: randomUUID().slice(0, 6),\n    date: `${d.getFullYear()}-${pad(d.getMonth() + 1)}-${pad(d.getDate())}`,\n    time: `${pad(d.getHours())}:${pad(d.getMinutes())}`,\n    status: 'open',\n    text: textTrimmed.replace(/\\r?\\n/g, ' '),\n  };\n  const { rawLines } = readLedger(guard, file);\n  rawLines.push(renderEntry(entry));\n  writeText(guard, file, rawLines.join('\\n').replace(/\\n*$/, '\\n'));\n  return entry;\n}\n\n/** Mark an entry done by id (preferred) or unique text substring. The date is\n * restamped to the completion day (time was already) so weekly reporting can\n * count \"resolved this week\" — the creation timestamp lives on in nothing,\n * but done entries are rarely aged against. */\nexport function markDone(guard: PathGuard, file: string, key: string, now = Date.now()): LedgerEntry | null {\n  const { rawLines, entries } = readLedger(guard, file);\n  const target = entries.find((e) => e.status === 'open' && (e.id === key || e.text.includes(key)));\n  if (!target) return null;\n  const d = new Date(now);\n  const pad = (n: number) => String(n).padStart(2, '0');\n  const doneDate = `${d.getFullYear()}-${pad(d.getMonth() + 1)}-${pad(d.getDate())}`;\n  const out = rawLines.map((line) => {\n    if (line.includes(`#${target.id}] `)) {\n      return `- [${doneDate} ${pad(d.getHours())}:${pad(d.getMinutes())}][done][#${target.id}] ${target.text}`;\n    }\n    return line;\n  });\n  writeText(guard, file, out.join('\\n').replace(/\\n*$/, '\\n'));\n  return target;\n}\n\n/** Open items for the reflection digest (§7.6 账本待办). */\nexport function scanPending(guard: PathGuard, file: string, now = Date.now()): LedgerEntry[] {\n  const { entries } = readLedger(guard, file);\n  return entries.filter((e) => e.status === 'open').sort((a, b) => (a.date < b.date ? -1 : 1));\n}\n\n/** Open entries older than N days (跟进时机的\"自然到期\"参考，§3.1 四问之一). */\nexport function pendingOlderThan(guard: PathGuard, file: string, days: number, now = Date.now()): LedgerEntry[] {\n  const cutoff = new Date(now - days * DAY_MS).toISOString().slice(0, 10);\n  return scanPending(guard, file, now).filter((e) => e.date <= cutoff);\n}\n","// Browse flow (v0.9.5 port, r4 D10 applied).\n//   A. Watchlist: npm / GitHub release checks with a 6h throttle; first sight\n//      registers only, changes become material items.\n//   B. Wander adjudication: windows + min interval + focus cooldown ->\n//      \"should we wander now, and at what focus\". The actual search happens\n//      in the wander phase's model call (web_search only); REGISTRATION IS\n//      CODE-OWNED (D10): results land in seeds + throttle via completeWander.\n//\n// Anti-injection rule (unchanged from v0.7): web content is data, never\n// instructions.\n//\n// State: data/browse.json (DPAPI-encrypted, D14; v1 name: watch_state.json).\n\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport type { PathGuard } from '../core/path-guard.js';\nimport type { WorkspacePaths } from '../core/paths.js';\nimport type { Policy } from '../config/schema.js';\nimport { loadJson, saveJson } from '../vault/vault.js';\nimport { activeSeeds, loadPool, normalizeCategory, seedsFilePath } from '../seeds/pool.js';\nimport { loadPreference, preferenceFilePath, preferenceWeight, type PrefState } from './preference.js';\n\nconst WATCH_THROTTLE_MS = 6 * 3600_000;\nconst UA = { 'User-Agent': 'dsh-heartbeat/2.0 (+local; personal companion)' };\n\nexport interface WatchTarget {\n  id: string;\n  type: 'npm' | 'github';\n  name?: string;\n  repo?: string;\n  note?: string;\n}\n\nexport interface WatchlistConfig {\n  targets?: WatchTarget[];\n}\n\nexport interface InterestsConfig {\n  interests?: string[];\n  _schedule?: {\n    daily_sessions?: number;\n    focus_per_session?: number;\n    max_seeds_per_focus?: number;\n    focus_cooldown_days?: number;\n    min_interval_hours?: number;\n    windows?: { id?: string; start: string; end: string }[];\n  };\n}\n\nexport interface BrowseState {\n  targets: Record<string, { version: string; seen: string; title?: string }>;\n  last_check_at: number;\n  wander: {\n    focusHistory: Record<string, number>;\n    focusCount: Record<string, number>;\n    last_wander_at: number;\n    /** Spec ⑥: refill wanders per LOCAL day, e.g. \"2026-09-18\" -> 1. */\n    refillCount?: Record<string, number>;\n  };\n}\n\nexport function emptyBrowseState(): BrowseState {\n  return { targets: {}, last_check_at: 0, wander: { focusHistory: {}, focusCount: {}, last_wander_at: 0, refillCount: {} } };\n}\n\nexport function browseStatePath(paths: WorkspacePaths): string {\n  return path.join(paths.dataDir, 'browse.json');\n}\n\nfunction readJsonFile<T>(file: string, fallback: T): T {\n  try {\n    return JSON.parse(fs.readFileSync(file, 'utf8')) as T;\n  } catch {\n    return fallback;\n  }\n}\n\n/** Factory configs are read-only; a user layer with the same filename replaces them. */\nexport function loadInterests(paths: WorkspacePaths): InterestsConfig {\n  const userPath = path.join(paths.settingsDir, 'interests.json');\n  if (fs.existsSync(userPath)) return readJsonFile<InterestsConfig>(userPath, { interests: [], _schedule: {} });\n  return readJsonFile<InterestsConfig>(path.join(paths.configDir, 'interests.json'), { interests: [], _schedule: {} });\n}\n\nexport function loadWatchlist(paths: WorkspacePaths): WatchlistConfig {\n  const userPath = path.join(paths.settingsDir, 'watchlist.json');\n  if (fs.existsSync(userPath)) return readJsonFile<WatchlistConfig>(userPath, { targets: [] });\n  return readJsonFile<WatchlistConfig>(path.join(paths.configDir, 'watchlist.json'), { targets: [] });\n}\n\nfunction loadState(guard: PathGuard, paths: WorkspacePaths): BrowseState {\n  return loadJson<BrowseState>(guard, browseStatePath(paths)) ?? emptyBrowseState();\n}\n\n// ── A. watchlist checks (fetcher injectable for tests) ──────────────────\n\nexport type FetchLike = (url: string, init?: { headers?: Record<string, string> }) => Promise<{ ok: boolean; status: number; json(): Promise<unknown> }>;\n\nasync function checkNpm(fetcher: FetchLike, name: string): Promise<{ version: string; seen: string; title?: string } | null> {\n  const r = await fetcher(`https://registry.npmjs.org/${name}/latest`, { headers: UA });\n  if (!r.ok) throw new Error(`npm ${r.status}`);\n  const j = await r.json() as { version?: string };\n  if (!j.version) throw new Error('npm: no version');\n  return { version: j.version, seen: `npm:${j.version}` };\n}\n\nasync function checkGithub(fetcher: FetchLike, repo: string): Promise<{ version: string; seen: string; title?: string } | null> {\n  const r = await fetcher(`https://api.github.com/repos/${repo}/releases/latest`, {\n    headers: { ...UA, Accept: 'application/vnd.github+json' },\n  });\n  if (r.status === 404) return null; // repo has no releases yet\n  if (!r.ok) throw new Error(`gh ${r.status}`);\n  const j = await r.json() as { tag_name?: string; name?: string };\n  if (!j.tag_name) throw new Error('gh: no tag');\n  return { version: j.tag_name, seen: `gh:${j.tag_name}`, title: j.name || '' };\n}\n\nexport interface WatchReport {\n  /** Material texts for the pool (one per changed target). */\n  items: { text: string; topic: string; tag: 'news'; source: 'browse'; confidence: number }[];\n  errors: string[];\n  checked: number;\n}\n\nexport async function checkWatchlist(\n  guard: PathGuard,\n  paths: WorkspacePaths,\n  opts: { fetcher?: FetchLike; throttleOk?: boolean } = {},\n  now = Date.now(),\n): Promise<WatchReport> {\n  const fetcher = opts.fetcher ?? (globalThis.fetch as unknown as FetchLike);\n  const state = loadState(guard, paths);\n  if (opts.throttleOk !== true && now - state.last_check_at < WATCH_THROTTLE_MS) {\n    return { items: [], errors: [], checked: 0 };\n  }\n  const watchlist = loadWatchlist(paths);\n  const report: WatchReport = { items: [], errors: [], checked: 0 };\n  for (const t of watchlist.targets ?? []) {\n    report.checked += 1;\n    try {\n      const info = t.type === 'npm' && t.name ? await checkNpm(fetcher, t.name)\n        : t.type === 'github' && t.repo ? await checkGithub(fetcher, t.repo)\n        : null;\n      if (!info) continue;\n      const prev = state.targets[t.id];\n      if (prev && prev.seen !== info.seen) {\n        const title = info.title ? `（${info.title.slice(0, 60)}）` : '';\n        report.items.push({\n          text: `${t.note || t.id} 有更新：${prev.version} -> ${info.version}${title}`,\n          topic: `watch:${t.id}`,\n          tag: 'news',\n          source: 'browse',\n          confidence: 0.4,\n        });\n      }\n      state.targets[t.id] = info; // first sight registers silently (首见不产素材)\n    } catch (e) {\n      report.errors.push(`${t.id}: ${String(e)}`);\n    }\n  }\n  state.last_check_at = now;\n  saveJson(guard, browseStatePath(paths), state);\n  return report;\n}\n\n// ── B. wander adjudication (pure-ish, state injected) ───────────────────\n\nexport interface WanderAdvice {\n  focus: string | null;\n  query: string | null;\n  skipped: string | null;\n}\n\nexport function inWanderWindow(now: Date, windows: { start: string; end: string }[]): string | null {\n  const hm = now.getHours() * 60 + now.getMinutes();\n  for (const w of windows) {\n    const [sh, sm] = w.start.split(':').map(Number);\n    const [eh, em] = w.end.split(':').map(Number);\n    if (hm >= sh! * 60 + sm! && hm <= eh! * 60 + em!) return `${w.start}-${w.end}`;\n  }\n  return null;\n}\n\nfunction onCooldown(state: BrowseState, focus: string, cooldownDays: number, now: number): boolean {\n  const last = state.wander.focusHistory[focus] ?? 0;\n  return last > now - cooldownDays * 86_400_000;\n}\n\n/**\n * Focus pick (2026-10-06): round-robin recency as the base, preference rate as\n * a multiplier. Ordering key = effective age = realAgeSinceLastUse × weight —\n * a favorite's age \"grows\" faster, so it reaches the pick threshold sooner and\n * is wandered up to W_MAX times as often. Lockdown-proof by construction:\n *   - cooldown (above) keeps every topic rotating no matter the weight;\n *   - weight lives in [W_MIN, W_MAX] (preference.ts);\n *   - hard starvation floor: any topic untouched ≥ STARVATION_DAYS ignores\n *     weighting entirely and the oldest real age wins.\n * Without a preference state the behavior is exactly the old pure LRU.\n */\nexport const STARVATION_DAYS = 14;\n\nexport function pickFocus(\n  state: BrowseState,\n  interests: InterestsConfig,\n  now: number,\n  pref?: PrefState,\n): string | null {\n  const sc = interests._schedule ?? {};\n  const cooldown = sc.focus_cooldown_days ?? 3;\n  const pool = (interests.interests ?? []).filter((t) => !onCooldown(state, t, cooldown, now));\n  if (pool.length === 0) return null;\n  if (!pref) {\n    pool.sort((a, b) => (state.wander.focusHistory[a] ?? 0) - (state.wander.focusHistory[b] ?? 0));\n    return pool[0]!;\n  }\n  const age = (t: string): number => now - (state.wander.focusHistory[t] ?? 0);\n  const starved = pool.filter((t) => age(t) >= STARVATION_DAYS * 86_400_000);\n  if (starved.length > 0) {\n    starved.sort((a, b) => age(b) - age(a)); // oldest real age wins\n    return starved[0]!;\n  }\n  const effAge = (t: string): number => age(t) * preferenceWeight(pref, t, now);\n  pool.sort((a, b) => effAge(b) - effAge(a));\n  return pool[0]!;\n}\n\n/** Adjudicate: windows + min interval + focus cooldown -> advice | skipped. */\nexport function adviseWander(\n  guard: PathGuard,\n  paths: WorkspacePaths,\n  policy: Policy,\n  now = new Date(),\n): WanderAdvice {\n  const state = loadState(guard, paths);\n  const interests = loadInterests(paths);\n  const windows = interests._schedule?.windows?.length\n    ? interests._schedule.windows\n    : (policy.browse.windows as { start: string; end: string }[]);\n  const win = inWanderWindow(now, windows);\n  if (!win) {\n    const hh = `${String(now.getHours()).padStart(2, '0')}:${String(now.getMinutes()).padStart(2, '0')}`;\n    return { focus: null, query: null, skipped: `window(now=${hh})` };\n  }\n  const minGap = policy.browse.minIntervalHours * 3600_000;\n  if (now.getTime() - state.wander.last_wander_at < minGap) {\n    return { focus: null, query: null, skipped: 'min-interval' };\n  }\n  const focus = pickFocus(state, interests, now.getTime(), loadPreference(guard, preferenceFilePath(paths.dataDir)));\n  if (!focus) return { focus: null, query: null, skipped: 'no-focus' };\n  return { focus, query: `${focus} 2026 最新`, skipped: null };\n}\n\n/**\n * Registration is CODE-OWNED (D10): called by the orchestrator after the\n * wander phase's model call returned selections. Records cooldown/count/\n * throttle timestamps for the focus. `refill` additionally bumps the daily\n * refill counter (spec ⑥).\n */\nexport function completeWander(\n  guard: PathGuard,\n  paths: WorkspacePaths,\n  focus: string,\n  now = Date.now(),\n  opts: { refill?: boolean } = {},\n): { focus: string; count: number; refillsToday?: number } {\n  const state = loadState(guard, paths);\n  state.wander.focusHistory[focus] = now;\n  state.wander.focusCount[focus] = (state.wander.focusCount[focus] ?? 0) + 1;\n  state.wander.last_wander_at = now;\n  let refillsToday: number | undefined;\n  if (opts.refill) {\n    const today = localDayKey(new Date(now));\n    state.wander.refillCount = state.wander.refillCount ?? {};\n    state.wander.refillCount[today] = (state.wander.refillCount[today] ?? 0) + 1;\n    refillsToday = state.wander.refillCount[today];\n  }\n  saveJson(guard, browseStatePath(paths), state);\n  return { focus, count: state.wander.focusCount[focus]!, ...(refillsToday === undefined ? {} : { refillsToday }) };\n}\n\n/** LOCAL day key (refill quota is a daily human-day budget, not a UTC day). */\nfunction localDayKey(d: Date): string {\n  const y = d.getFullYear();\n  const m = String(d.getMonth() + 1).padStart(2, '0');\n  const day = String(d.getDate()).padStart(2, '0');\n  return `${y}-${m}-${day}`;\n}\n\n// ── C. refill wander (spec ⑥, 2026-09-18): top up topic stock when it runs\n// dry. Independent of the window/minInterval gates (user decision: may stack\n// with a normal wander in the same beat) but still respects the 3-day focus\n// cooldown, and is capped at REFILL_MAX_PER_DAY per local day.\n\nexport const REFILL_TOPIC_THRESHOLD = 4;\nexport const REFILL_MAX_PER_DAY = 2;\n\nexport interface RefillAdvice {\n  focus: string | null;\n  query: string | null;\n  skipped: string | null;\n  topicCount: number;\n  refillsToday: number;\n}\n\nexport function adviseRefillWander(\n  guard: PathGuard,\n  paths: WorkspacePaths,\n  policy: Policy,\n  now = new Date(),\n): RefillAdvice {\n  const state = loadState(guard, paths);\n  const today = localDayKey(now);\n  const refillsToday = state.wander.refillCount?.[today] ?? 0;\n  const topicCount = activeSeeds(loadPool(guard, seedsFilePath(paths.dataDir)))\n    .filter((s) => normalizeCategory(s.category) === 'topic').length;\n  if (refillsToday >= REFILL_MAX_PER_DAY) {\n    return { focus: null, query: null, skipped: `refill-daily-cap(${refillsToday})`, topicCount, refillsToday };\n  }\n  if (topicCount > REFILL_TOPIC_THRESHOLD) {\n    return { focus: null, query: null, skipped: `topic-stock-ok(${topicCount})`, topicCount, refillsToday };\n  }\n  const interests = loadInterests(paths);\n  const focus = pickFocus(state, interests, now.getTime(), loadPreference(guard, preferenceFilePath(paths.dataDir))); // 3-day cooldown still applies\n  if (!focus) {\n    return { focus: null, query: null, skipped: 'no-focus', topicCount, refillsToday };\n  }\n  return { focus, query: `${focus} 2026 最新`, skipped: null, topicCount, refillsToday };\n}\n\nexport function browseStatus(guard: PathGuard, paths: WorkspacePaths): BrowseState {\n  return loadState(guard, paths);\n}\n","// Topic preference (2026-10-06): consumption-driven bias for wander focus\n// selection. The persona's seed_report attributions (and the engine-room\n// fallback) fold into per-topic delivered/adopted counters; pickFocus reads\n// the smoothed rate as a weight on top of round-robin recency.\n//\n// Anti-lockdown guarantees (user-reviewed design):\n//   - weight clamped to [W_MIN, W_MAX] — a favorite doubles at most, a cold\n//     topic never drops below half;\n//   - Laplace smoothing — a topic with no data sits near neutral, not zero;\n//   - exponential decay (30-day half-life) — old glory fades;\n//   - pickFocus additionally enforces a hard starvation floor (14 days).\n//\n// Storage is one JSON file through the vault (DPAPI): topic keys derive from\n// the user's profile/interests, so they are user-adjacent data.\n\nimport path from 'node:path';\nimport type { PathGuard } from '../core/path-guard.js';\nimport { loadJson, saveJson } from '../vault/vault.js';\n\nconst DAY_MS = 86_400_000;\n\nexport const W_MIN = 0.5;\nexport const W_MAX = 2;\n/** Laplace prior: rate = (adopted + A) / (delivered + D). Neutral ≈ A/D. */\nexport const SMOOTH_ADOPTED = 1;\nexport const SMOOTH_DELIVERED = 4;\n/** Counts decay with this half-life (days) since the topic's last activity. */\nexport const DECAY_HALF_LIFE_DAYS = 30;\n\nexport interface TopicPref {\n  delivered: number;\n  adopted: number;\n  lastDeliveredAt: number;\n  lastAdoptedAt: number;\n}\n\nexport interface PrefState {\n  version: 1;\n  topics: Record<string, TopicPref>;\n  updatedAt: number;\n}\n\nexport function preferenceFilePath(dataDir: string): string {\n  return path.join(dataDir, 'preference.json');\n}\n\n/** Non-negative finite number or 0 (v1.9.0 guard against hand-edited files). */\nfunction num(v: unknown): number {\n  const n = Number(v);\n  return Number.isFinite(n) && n >= 0 ? n : 0;\n}\n\n/** One stored entry → a trustworthy counter. Returns null for a garbled entry:\n *  a NaN delivered/adopted used to survive the load and poison the whole\n *  ordering (NaN makes every comparison false, so the topic neither aged nor\n *  sorted). Dropping the entry is the safe read — the loop refills it. */\nfunction sanitizeTopicPref(raw: unknown): TopicPref | null {\n  if (!raw || typeof raw !== 'object') return null;\n  const t = raw as Partial<TopicPref>;\n  if (!Number.isFinite(Number(t.delivered)) || !Number.isFinite(Number(t.adopted))) return null;\n  const delivered = Math.floor(num(t.delivered));\n  return {\n    delivered,\n    adopted: Math.min(delivered, Math.floor(num(t.adopted))),\n    lastDeliveredAt: num(t.lastDeliveredAt),\n    lastAdoptedAt: num(t.lastAdoptedAt),\n  };\n}\n\nexport function loadPreference(guard: PathGuard, file: string): PrefState {\n  const doc = loadJson<Partial<PrefState>>(guard, file);\n  if (!doc || typeof doc !== 'object' || !doc.topics || typeof doc.topics !== 'object') {\n    return { version: 1, topics: {}, updatedAt: 0 };\n  }\n  const topics: Record<string, TopicPref> = {};\n  for (const [key, raw] of Object.entries(doc.topics)) {\n    const t = sanitizeTopicPref(raw);\n    if (key && t) topics[key] = t;\n  }\n  const updatedAt = Number(doc.updatedAt);\n  return { version: 1, topics, updatedAt: Number.isFinite(updatedAt) ? updatedAt : 0 };\n}\n\nexport function savePreference(guard: PathGuard, file: string, state: PrefState): void {\n  saveJson(guard, file, state);\n}\n\n/** Fold one delivery into the counters. offeredTopics = every topic in the\n * package; adoptedTopics = the credited ones (subset by construction — unknown\n * keys are still tolerated so the two lists can drift safely). */\nexport function recordDelivery(\n  guard: PathGuard,\n  file: string,\n  opts: { offeredTopics: string[]; adoptedTopics: string[]; now: number },\n): PrefState {\n  const state = loadPreference(guard, file);\n  const adopted = new Set(opts.adoptedTopics);\n  for (const topic of opts.offeredTopics) {\n    if (!topic) continue;\n    const t = state.topics[topic] ?? { delivered: 0, adopted: 0, lastDeliveredAt: 0, lastAdoptedAt: 0 };\n    t.delivered += 1;\n    t.lastDeliveredAt = opts.now;\n    if (adopted.has(topic)) {\n      t.adopted += 1;\n      t.lastAdoptedAt = opts.now;\n    }\n    state.topics[topic] = t;\n  }\n  state.updatedAt = opts.now;\n  savePreference(guard, file, state);\n  return state;\n}\n\n/** Time-decayed counts (30-day half-life since last activity of each kind). */\nexport function decayed(t: TopicPref, now: number): { delivered: number; adopted: number } {\n  const dAgeDays = Math.max(0, now - t.lastDeliveredAt) / DAY_MS;\n  const aAgeDays = Math.max(0, now - t.lastAdoptedAt) / DAY_MS;\n  const dHalf = Math.pow(0.5, dAgeDays / DECAY_HALF_LIFE_DAYS);\n  const aHalf = Math.pow(0.5, aAgeDays / DECAY_HALF_LIFE_DAYS);\n  return { delivered: t.delivered * dHalf, adopted: t.adopted * aHalf };\n}\n\n/**\n * Preference weight for a topic, clamped to [W_MIN, W_MAX]:\n *   rate = (decayed adopted + 1) / (decayed delivered + 4)   (neutral = 0.25)\n *   w    = clamp(rate / 0.25, W_MIN, W_MAX)\n * No data at all → rate 1/4 → w 1.0: a brand-new topic starts exactly neutral\n * (per design: \"0.2 附近的中间值，不是 0 分垫底\"); repeated \"delivered but\n * never adopted\" drags it toward W_MIN, consistent adoption lifts it to W_MAX.\n */\nexport function preferenceWeight(state: PrefState, topic: string, now: number): number {\n  const t = state.topics[topic];\n  const rate = t\n    ? (() => {\n        const d = decayed(t, now);\n        return (d.adopted + SMOOTH_ADOPTED) / (d.delivered + SMOOTH_DELIVERED);\n      })()\n    : SMOOTH_ADOPTED / SMOOTH_DELIVERED;\n  return Math.min(W_MAX, Math.max(W_MIN, rate / (SMOOTH_ADOPTED / SMOOTH_DELIVERED)));\n}\n","// Windows toast channel (D12): attention hint ONLY - never carries the\n// expression body. Wraps assets/notify.ps1 (self-registering AUMID).\n\nimport { spawnSync } from 'node:child_process';\nimport path from 'node:path';\nimport type { WorkspacePaths } from '../core/paths.js';\n\nfunction runNotify(paths: WorkspacePaths, args: string[]): { status: number; out: string } {\n  const r = spawnSync('powershell.exe',\n    ['-NoProfile', '-ExecutionPolicy', 'Bypass', '-File', path.join(paths.assetsDir, 'notify.ps1'), ...args],\n    { timeout: 20_000, encoding: 'utf8' });\n  return { status: r.status ?? -1, out: `${r.stdout ?? ''}${r.stderr ?? ''}`.trim() };\n}\n\n/** Register the toast identity if missing (idempotent, per machine/user). */\nexport function ensureRegistered(paths: WorkspacePaths): boolean {\n  const check = runNotify(paths, ['-Check']);\n  if (/REGISTERED: yes/.test(check.out)) return true;\n  const reg = runNotify(paths, ['-RegisterOnly']);\n  return reg.status === 0;\n}\n\n/**\n * Fire the \"new message\" hint. Fixed neutral text per D12 - the actual\n * expression lives in the dedicated heartbeat session, never in the toast.\n */\nexport function sendNewMessageHint(paths: WorkspacePaths): boolean {\n  const r = runNotify(paths, ['-Title', 'Heartbeat', '-Message', '有新消息']);\n  return r.status === 0 && /TOAST_SENT/.test(r.out);\n}\n\n/** Weekly report ready hint (v1.8.0): same D12 discipline — announces that a\n * report exists, never carries its content. */\nexport function sendWeeklyReadyHint(paths: WorkspacePaths): boolean {\n  const r = runNotify(paths, ['-Title', '心跳周报', '-Message', '本期周报已生成']);\n  return r.status === 0 && /TOAST_SENT/.test(r.out);\n}\n","// Weekly report store + writer helpers (v1.8.0). Deliberately host-free:\r\n// orchestration (when to run, which agent, toast) lives in the orchestrator —\r\n// same split as profile/consolidate.ts. Reports are DPAPI-encrypted because a\r\n// report contains user-identifying content (profile adds, ledger texts) —\r\n// same划线标准 as profile/seeds (design doc §10.5).\r\n\r\nimport fs from 'node:fs';\r\nimport path from 'node:path';\r\nimport { atomicWriteJsonSync } from '../core/atomic-fs.js';\r\nimport { loadEncryptedText, saveEncryptedText } from '../vault/vault.js';\r\nimport type { PathGuard } from '../core/path-guard.js';\r\nimport type { WeeklyFacts } from './collect.js';\r\n\r\nexport const WEEKLY_INTERVAL_MS = 7 * 86_400_000;\r\n\r\nexport interface WeeklyReport {\r\n  start: string;\r\n  end: string;\r\n  generatedAt: string;\r\n  /** 'llm' = engine-room prose; 'template' = deterministic fallback. */\r\n  source: 'llm' | 'template';\r\n  text: string;\r\n}\r\n\r\nexport function weeklyDirPath(dataDir: string): string {\r\n  return path.join(dataDir, 'weekly');\r\n}\r\n\r\nfunction stateFilePath(dataDir: string): string {\r\n  return path.join(weeklyDirPath(dataDir), 'state.json');\r\n}\r\n\r\nfunction reportFileName(endIso: string): string {\r\n  return `report-${endIso.slice(0, 10)}.json`;\r\n}\r\n\r\n/** Last generation time from the weekly state file; 0 = never. */\r\nexport function lastWeeklyGeneratedAt(guard: PathGuard, dataDir: string): number {\r\n  try {\r\n    const raw = JSON.parse(fs.readFileSync(guard.assert(stateFilePath(dataDir)), 'utf8')) as { lastGeneratedAt?: number };\r\n    return Number(raw.lastGeneratedAt) || 0;\r\n  } catch {\r\n    return 0;\r\n  }\r\n}\r\n\r\n/** Due when the last report is ≥7 days old. A never-anchored store lands on\r\n *  the install-time anchor (see ensureWeeklyAnchor), so a fresh install is NOT\r\n *  due — the first report arrives one full interval after installation. */\r\nexport function weeklyDue(guard: PathGuard, dataDir: string, now = Date.now()): boolean {\r\n  const last = lastWeeklyGeneratedAt(guard, dataDir);\r\n  return now - last >= WEEKLY_INTERVAL_MS;\r\n}\r\n\r\n/** Stamp the install-time anchor for a store that has never generated a report\r\n *  (v1.9.0). Returns true when it wrote — the caller audits that. Without this,\r\n *  `lastGeneratedAt = 0` made the very first maintenance beat due, so a fresh\r\n *  install produced an \"onboarding\" report immediately, contradicting the\r\n *  release notes (\"first report after a week\"). */\r\nexport function ensureWeeklyAnchor(guard: PathGuard, dataDir: string, now = Date.now()): boolean {\r\n  if (lastWeeklyGeneratedAt(guard, dataDir) > 0) return false;\r\n  fs.mkdirSync(weeklyDirPath(dataDir), { recursive: true });\r\n  atomicWriteJsonSync(stateFilePath(dataDir), { lastGeneratedAt: now });\r\n  return true;\r\n}\r\n\r\n/** Persist a report (DPAPI) and stamp the state file. */\r\nexport function saveWeeklyReport(guard: PathGuard, dataDir: string, report: WeeklyReport): string {\r\n  const dir = weeklyDirPath(dataDir);\r\n  fs.mkdirSync(dir, { recursive: true });\r\n  const file = path.join(dir, reportFileName(report.end));\r\n  saveEncryptedText(guard, file, JSON.stringify(report, null, 1));\r\n  atomicWriteJsonSync(stateFilePath(dataDir), { lastGeneratedAt: Date.parse(report.generatedAt) });\r\n  return file;\r\n}\r\n\r\nexport interface WeeklyReportMeta {\r\n  file: string;\r\n  start: string;\r\n  end: string;\r\n  generatedAt: string;\r\n  source: string;\r\n}\r\n\r\n/** Newest-first listing for the card; unparsable entries are skipped. */\r\nexport function listWeeklyReports(guard: PathGuard, dataDir: string): WeeklyReportMeta[] {\r\n  const out: WeeklyReportMeta[] = [];\r\n  try {\r\n    for (const file of fs.readdirSync(weeklyDirPath(dataDir))) {\r\n      if (!/^report-\\d{4}-\\d{2}-\\d{2}\\.json$/.test(file)) continue;\r\n      const rep = readWeeklyReport(guard, dataDir, file);\r\n      if (!rep) continue;\r\n      out.push({ file, start: rep.start, end: rep.end, generatedAt: rep.generatedAt, source: rep.source });\r\n    }\r\n  } catch { /* no weekly dir yet */ }\r\n  return out.sort((a, b) => (a.end < b.end ? 1 : -1));\r\n}\r\n\r\nexport function readWeeklyReport(guard: PathGuard, dataDir: string, file: string): WeeklyReport | null {\r\n  if (!/^report-\\d{4}-\\d{2}-\\d{2}\\.json$/.test(file)) return null; // guard.assert would reject ../ anyway\r\n  try {\r\n    const raw = loadEncryptedText(guard, path.join(weeklyDirPath(dataDir), file));\r\n    if (!raw) return null;\r\n    const rep = JSON.parse(raw) as WeeklyReport;\r\n    if (typeof rep.text !== 'string') return null;\r\n    return rep;\r\n  } catch {\r\n    return null;\r\n  }\r\n}\r\n\r\n/** The engine-room prompt: neutral system narrator, fact-bound, ≤250 chars. */\r\nexport function buildWeeklyPrompt(facts: WeeklyFacts): string {\r\n  return [\r\n    '你是心跳插件的后台报告器。根据下面的本周事实清单，用中文写一份周报正文。',\r\n    '规则：',\r\n    '- 叙述者自称「心跳」——这是插件后台，不是任何会话里的 agent；绝不能以会话 agent 的身份或人格自称。',\r\n    '- 只报告事实清单里有的内容；某一节没有数据就整节跳过，不要编造、不要凑数。',\r\n    '- 语气平实中性，不用感叹号；篇幅不超过 250 字。',\r\n    '- 待办积压那一节用商量的语气提一句，不催促。',\r\n    '- 直接输出周报正文，不要输出解释、标题或 JSON。',\r\n    '',\r\n    '本周事实（JSON）：',\r\n    JSON.stringify(facts, null, 1),\r\n  ].join('\\n');\r\n}\r\n\r\n/** Deterministic fallback: the facts, plainly stated. Used when the LLM turn\r\n * fails or comes back empty — a plain report beats no report. */\r\nexport function renderTemplateReport(facts: WeeklyFacts): string {\r\n  const d = (iso: string): string => iso.slice(0, 10);\r\n  const lines: string[] = [`本周（${d(facts.windowStart)} ~ ${d(facts.windowEnd)}）`];\r\n  lines.push(`表达 ${facts.spoken} 次，静默 ${facts.silent} 次。`);\r\n  if (facts.silentTopReasons.length > 0) {\r\n    lines.push(`静默主因：${facts.silentTopReasons.map((r) => `${r.reason}（${r.count}）`).join('、')}。`);\r\n  }\r\n  if (facts.profileAdds.length > 0) {\r\n    lines.push(`新认识 ${facts.profileAdds.length} 条：${facts.profileAdds.map((a) => a.content).join('；')}。`);\r\n  }\r\n  if (facts.ledger.added.length > 0 || facts.ledger.done.length > 0) {\r\n    const parts: string[] = [];\r\n    if (facts.ledger.added.length > 0) parts.push(`新增待办：${facts.ledger.added.join('、')}`);\r\n    if (facts.ledger.done.length > 0) parts.push(`已解决：${facts.ledger.done.join('、')}`);\r\n    lines.push(`${parts.join('；')}。`);\r\n  }\r\n  if (facts.ledger.stale.length > 0) {\r\n    lines.push(`挂了很久：${facts.ledger.stale.map((s) => `${s.text}（${s.days} 天）`).join('、')}——要删掉还是继续挂着？`);\r\n  }\r\n  if (facts.seeds.added.length > 0) {\r\n    lines.push(`素材池新增 ${facts.seeds.added.length} 条，已消费 ${facts.seeds.consumed.length} 条。`);\r\n  }\r\n  if (facts.seeds.waiting.length > 0) {\r\n    lines.push(`还没聊过的素材：${facts.seeds.waiting.join('、')}。`);\r\n  }\r\n  if (facts.reports.total > 0) {\r\n    const reasonPart = facts.reports.reasons.length > 0\r\n      ? `（${facts.reports.reasons.map((r) => `${r.reason} ${r.count} 次`).join('、')}）`\r\n      : '';\r\n    lines.push(`投递报账 ${facts.reports.total} 次：用素材 ${facts.reports.material}、说真心话 ${facts.reports.heartfelt}、没说话 ${facts.reports.silent}${reasonPart}。`);\r\n  }\r\n  // v1.9.0: unaccounted deliveries are reported even when no report landed at\r\n  // all — a silent rise in \"no report\" is exactly what would otherwise hide.\r\n  if (facts.reports.missing > 0) {\r\n    lines.push(`另有 ${facts.reports.missing} 次投递没等到报账（这部分没算进偏好统计）。`);\r\n  }\r\n  if (facts.peakHours.length > 0) {\r\n    lines.push(`活跃高峰：${facts.peakHours.join('、')}。`);\r\n  }\r\n  return lines.join('\\n');\r\n}\r\n","// Bundled agent-preset installation (contract C13).\n//\n// Why this exists: the heartbeat agent is created by the host `agents` service,\n// which does NOT go through the session-start preset picker. A bare agent joins\n// no preset, and dsh-agent-presets states the consequence verbatim — \"its tools,\n// prompt sections, and skill catalog resolve against the empty global layer\" —\n// so it cannot even see `web_search`. The preset is therefore not optional, and\n// asking the operator to hand-copy two YAML files was the most error-prone step\n// of setup. The plugin now materialises its own bundled template in the roster's\n// USER root on first run.\n//\n// Two properties keep that safe:\n//   1. An existing preset is NEVER overwritten — the composition file belongs to\n//      whoever edited it. Only a missing (or ghost) directory is filled in.\n//   2. The target comes from the roster's OWN roots (`agentPresets.roots`,\n//      trust === \"user\") rather than a guessed `~/.dsh`, so `$DSH_HOME` and a\n//      configured home are honoured without re-deriving them here.\n//\n// Timing: dsh-agent-presets re-scans the filesystem on every read\n// (`list()` -> `discoverPresets` -> `scanRoot`, no cache), so a directory\n// created here is visible to the very next `mount()` — no restart in between.\n\nimport fs from 'node:fs';\nimport os from 'node:os';\nimport path from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nexport const COMPOSITION_FILE = 'agent.cordis.yml';\nexport const METADATA_FILE = 'preset.yml';\n/** The template this package ships, in `assets/presets/<id>/`. */\nexport const BUNDLED_PRESET_ID = 'heartbeat';\n\n/** One entry of the roster's root list (`AgentPresets.roots`). */\nexport interface PresetRootLike {\n  path?: string;\n  trust?: string;\n}\n\nexport type PresetInstallAction =\n  | 'exists'\n  | 'created'\n  | 'repaired'\n  | 'restored'\n  | 'skipped-disabled'\n  | 'skipped-custom-id'\n  | 'skipped-no-root'\n  | 'error';\n\nexport interface PresetInstallResult {\n  action: PresetInstallAction;\n  id: string;\n  /** Where the preset lives (or would live). */\n  dir?: string;\n  /** Where the bundled template was read from. */\n  bundledDir?: string;\n  detail?: string;\n}\n\n/**\n * Locate the bundled template directory by walking up from a module URL.\n * Works from both entry points (`dist/index.js` and `dist/cli/index.js`) and\n * from the pnpm copy of an installed package.\n */\nexport function bundledPresetDir(\n  moduleUrl: string,\n  id: string = BUNDLED_PRESET_ID,\n): string | undefined {\n  let dir: string;\n  try {\n    dir = path.dirname(fileURLToPath(moduleUrl));\n  } catch {\n    return undefined;\n  }\n  for (let depth = 0; depth < 5; depth += 1) {\n    const candidate = path.join(dir, 'assets', 'presets', id);\n    if (fs.existsSync(path.join(candidate, COMPOSITION_FILE))) return candidate;\n    const parent = path.dirname(dir);\n    if (parent === dir) break;\n    dir = parent;\n  }\n  return undefined;\n}\n\n/** The roster's user-trust root, which is where locally authored presets live. */\nexport function userPresetRoot(roots?: readonly PresetRootLike[]): string | undefined {\n  const found = roots?.find(\n    (root) => root?.trust === 'user' && typeof root.path === 'string' && root.path.length > 0,\n  );\n  return found?.path === undefined ? undefined : path.resolve(found.path);\n}\n\n/**\n * `<dshHome>/.agent-presets` derived from the documented precedence\n * (`$DSH_HOME`, then `~/.dsh`). Only used where no roster is available — the\n * plugin itself prefers {@link userPresetRoot}.\n */\nexport function conventionalUserPresetRoot(\n  env: NodeJS.ProcessEnv = process.env,\n  home: string = os.homedir(),\n): string {\n  const override = env.DSH_HOME?.trim();\n  const root = override && override.length > 0 ? override : path.join(home, '.dsh');\n  return path.join(root, '.agent-presets');\n}\n\nexport interface InstallPresetOptions {\n  /** `import.meta.url` of the calling entry point. */\n  moduleUrl: string;\n  /** Preset id the heartbeat agent will join (config `agentPreset`). */\n  id?: string;\n  /** User-trust root reported by the roster. */\n  root?: string;\n  /** True when the roster answered — then an absent user root is a fact, not a guess. */\n  rosterKnown?: boolean;\n  /** `false` disables the install (config `installPreset`). */\n  enabled?: boolean;\n  /** Overwrite an existing composition file with the bundled one. */\n  force?: boolean;\n}\n\n/**\n * Materialise the bundled preset in the roster's user root when it is absent.\n * Never destructive: an existing composition file is kept unless `force`.\n */\nexport function installBundledPreset(options: InstallPresetOptions): PresetInstallResult {\n  const id = options.id && options.id.length > 0 ? options.id : BUNDLED_PRESET_ID;\n  if (options.enabled === false) {\n    return { action: 'skipped-disabled', id, detail: 'installPreset=false' };\n  }\n  const bundledDir = bundledPresetDir(options.moduleUrl, BUNDLED_PRESET_ID);\n  if (id !== BUNDLED_PRESET_ID) {\n    return {\n      action: 'skipped-custom-id',\n      id,\n      ...(bundledDir === undefined ? {} : { bundledDir }),\n      detail: `only \"${BUNDLED_PRESET_ID}\" ships with the plugin; \"${id}\" is yours to provide`,\n    };\n  }\n  if (bundledDir === undefined) {\n    return {\n      action: 'error',\n      id,\n      detail: 'bundled template not found next to the plugin (assets/presets/heartbeat)',\n    };\n  }\n  const root =\n    options.root ?? (options.rosterKnown ? undefined : conventionalUserPresetRoot());\n  if (root === undefined) {\n    return {\n      action: 'skipped-no-root',\n      id,\n      bundledDir,\n      detail: 'the roster mounts no user preset root (includeUserRoot=false)',\n    };\n  }\n  const dir = path.join(root, id);\n  const composition = path.join(dir, COMPOSITION_FILE);\n  try {\n    if (fs.existsSync(composition)) {\n      if (options.force !== true) {\n        const drifted = !sameBytes(composition, path.join(bundledDir, COMPOSITION_FILE));\n        return {\n          action: 'exists',\n          id,\n          dir,\n          bundledDir,\n          detail: drifted ? 'kept as-is (differs from the bundled template)' : 'kept as-is',\n        };\n      }\n      fs.copyFileSync(path.join(bundledDir, COMPOSITION_FILE), composition);\n      return {\n        action: 'restored',\n        id,\n        dir,\n        bundledDir,\n        detail: 'composition replaced from the bundled template',\n      };\n    }\n    const existed = fs.existsSync(dir);\n    fs.mkdirSync(dir, { recursive: true });\n    fs.copyFileSync(path.join(bundledDir, COMPOSITION_FILE), composition);\n    const metadata = path.join(dir, METADATA_FILE);\n    // A directory with a composition but no metadata is legal; only fill a void.\n    if (!fs.existsSync(metadata)) fs.copyFileSync(path.join(bundledDir, METADATA_FILE), metadata);\n    return {\n      action: existed ? 'repaired' : 'created',\n      id,\n      dir,\n      bundledDir,\n      detail: existed\n        ? 'directory existed without a composition file (it occupied the id as a broken row)'\n        : undefined,\n    };\n  } catch (error) {\n    return { action: 'error', id, dir, bundledDir, detail: String(error).slice(0, 200) };\n  }\n}\n\n/** One line suitable for the audit log and `ctx.logger`. */\nexport function describeInstall(result: PresetInstallResult): string {\n  const where = result.dir === undefined ? '' : ` (${result.dir})`;\n  const why = result.detail === undefined ? '' : ` — ${result.detail}`;\n  return `preset ${result.id} ${result.action}${where}${why}`;\n}\n\nexport interface PresetStatus {\n  id: string;\n  dir: string;\n  bundledDir?: string;\n  installed: boolean;\n  compositionMatches: boolean;\n  metadataMatches: boolean;\n}\n\n/** Read-only inspection for the CLI (`preset status`). */\nexport function presetStatus(\n  moduleUrl: string,\n  id: string = BUNDLED_PRESET_ID,\n  root: string = conventionalUserPresetRoot(),\n): PresetStatus {\n  const dir = path.join(root, id);\n  const bundledDir = bundledPresetDir(moduleUrl, id);\n  const installed = fs.existsSync(path.join(dir, COMPOSITION_FILE));\n  return {\n    id,\n    dir,\n    ...(bundledDir === undefined ? {} : { bundledDir }),\n    installed,\n    compositionMatches:\n      installed && bundledDir !== undefined && sameBytes(path.join(dir, COMPOSITION_FILE), path.join(bundledDir, COMPOSITION_FILE)),\n    metadataMatches:\n      bundledDir !== undefined &&\n      fs.existsSync(path.join(dir, METADATA_FILE)) &&\n      sameBytes(path.join(dir, METADATA_FILE), path.join(bundledDir, METADATA_FILE)),\n  };\n}\n\nfunction sameBytes(left: string, right: string): boolean {\n  try {\n    return fs.readFileSync(left).equals(fs.readFileSync(right));\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAOA,OAAO,QAAQ;AACf,OAAO,UAAU;AAEV,IAAM,4BAAN,cAAwC,MAAM;AAAA,EACnD,YAAY,QAAgB,WAAmB;AAC7C,UAAM,4BAA4B,MAAM,kBAAkB,SAAS,IAAI;AACvE,SAAK,OAAO;AAAA,EACd;AACF;AAQO,SAAS,aAAa,QAAwB;AACnD,QAAM,MAAM,KAAK,QAAQ,MAAM;AAC/B,MAAI;AACF,WAAO,GAAG,aAAa,GAAG;AAAA,EAC5B,QAAQ;AAGN,UAAM,OAAiB,CAAC;AACxB,QAAI,MAAM;AACV,eAAS;AACP,YAAM,OAAO,KAAK,SAAS,GAAG;AAC9B,YAAM,SAAS,KAAK,QAAQ,GAAG;AAC/B,UAAI,WAAW,KAAK;AAClB,cAAM,IAAI,MAAM,wBAAwB,MAAM,yBAAyB;AAAA,MACzE;AACA,WAAK,KAAK,IAAI;AACd,YAAM;AACN,UAAI;AACF,cAAM,UAAU,GAAG,aAAa,GAAG;AACnC,eAAO,KAAK,KAAK,SAAS,GAAG,KAAK,QAAQ,CAAC;AAAA,MAC7C,QAAQ;AACN;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAOO,SAAS,kBAAkB,gBAAwB,aAA8B;AACtF,QAAM,OAAO,CAAC,MAAc;AAC1B,QAAI,IAAI,KAAK,UAAU,CAAC,EAAE,YAAY;AACtC,QAAI,CAAC,EAAE,SAAS,KAAK,GAAG,EAAG,MAAK,KAAK;AACrC,WAAO;AAAA,EACT;AACA,QAAM,IAAI,KAAK,cAAc;AAC7B,QAAM,IAAI,KAAK,WAAW;AAC1B,SAAO,MAAM,KAAK,EAAE,WAAW,CAAC;AAClC;AAWO,SAAS,gBAAgB,cAAiC;AAC/D,QAAM,YAAY,aAAa,YAAY;AAC3C,QAAM,QAAmB;AAAA,IACvB;AAAA,IACA,MAAM,QAA+B;AACnC,YAAM,QAAQ,aAAa,MAAM;AACjC,aAAO,kBAAkB,WAAW,KAAK,IAAI,QAAQ;AAAA,IACvD;AAAA,IACA,OAAO,QAAwB;AAC7B,YAAM,QAAQ,MAAM,MAAM,MAAM;AAChC,UAAI,UAAU,KAAM,OAAM,IAAI,0BAA0B,QAAQ,SAAS;AACzE,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;;;ACxCA,IAAM,OAAO;AAEb,SAAS,cAAc,GAA0C;AAC/D,SAAO,OAAO,MAAM,YAAY,MAAM,QAAQ,CAAC,MAAM,QAAQ,CAAC;AAChE;AAEA,SAAS,KAAK,KAAoB;AAChC,QAAM,IAAI,MAAM,WAAW,GAAG,EAAE;AAClC;AAEO,SAAS,aAAa,OAAyC;AACpE,MAAI,CAAC,cAAc,KAAK,EAAG,MAAK,wBAAwB;AACxD,QAAM,IAAI;AACV,QAAM,KAAK,EAAE;AACb,MAAI,CAAC,cAAc,EAAE,EAAG,MAAK,mBAAmB;AAChD,MAAI,OAAO,GAAG,gBAAgB,YAAY,GAAG,cAAc,KAAK,GAAG,cAAc,MAAM;AACrF,SAAK,qDAAqD;AAAA,EAC5D;AACA,MAAI,OAAO,GAAG,aAAa,UAAW,MAAK,oCAAoC;AAC/E,MAAI,OAAO,GAAG,uBAAuB,UAAW,MAAK,8CAA8C;AACnG,QAAM,IAAI,EAAE;AACZ,MAAI,CAAC,cAAc,CAAC,EAAG,MAAK,cAAc;AAC1C,MAAI,OAAO,EAAE,iBAAiB,YAAY,EAAE,eAAe,EAAG,MAAK,gCAAgC;AACnG,MAAI,OAAO,EAAE,oBAAoB,YAAY,EAAE,kBAAkB,EAAG,MAAK,mCAAmC;AAC5G,QAAM,KAAK,EAAE;AACb,MAAI,CAAC,cAAc,EAAE,EAAG,MAAK,yBAAyB;AACtD,MAAI,OAAO,GAAG,UAAU,YAAY,CAAC,KAAK,KAAK,GAAG,KAAK,KAAK,OAAO,GAAG,QAAQ,YAAY,CAAC,KAAK,KAAK,GAAG,GAAG,GAAG;AAC5G,SAAK,sDAAsD;AAAA,EAC7D;AACA,QAAM,IAAI,EAAE;AACZ,MAAI,CAAC,cAAc,CAAC,EAAG,MAAK,gBAAgB;AAC5C,MAAI,CAAC,MAAM,QAAQ,EAAE,OAAO,KAAK,EAAE,QAAQ,WAAW,EAAG,MAAK,0CAA0C;AACxG,aAAW,KAAK,EAAE,SAAS;AACzB,QAAI,CAAC,cAAc,CAAC,EAAG,MAAK,wCAAwC;AACpE,QAAI,OAAO,EAAE,UAAU,YAAY,CAAC,KAAK,KAAK,EAAE,KAAK,KAAK,OAAO,EAAE,QAAQ,YAAY,CAAC,KAAK,KAAK,EAAE,GAAG,GAAG;AACxG,WAAK,6DAA6D;AAAA,IACpE;AAAA,EACF;AACA,MAAI,OAAO,EAAE,qBAAqB,YAAY,EAAE,oBAAoB,EAAG,MAAK,qCAAqC;AACjH,MAAI,OAAO,EAAE,qBAAqB,YAAY,EAAE,mBAAmB,EAAG,MAAK,sCAAsC;AACjH,QAAM,IAAI,EAAE;AACZ,MAAI,CAAC,cAAc,CAAC,EAAG,MAAK,eAAe;AAC3C,MAAI,OAAO,EAAE,cAAc,YAAY,EAAE,YAAY,EAAG,MAAK,8BAA8B;AAC3F,MAAI,CAAC,cAAc,EAAE,OAAO,EAAG,MAAK,uBAAuB;AAC3D,aAAW,KAAK,CAAC,QAAQ,UAAU,SAAS,SAAS,GAAY;AAC/D,QAAI,OAAO,EAAE,QAAQ,CAAC,MAAM,SAAU,MAAK,iBAAiB,CAAC,UAAU;AAAA,EACzE;AACA,MAAI,OAAO,EAAE,kBAAkB,SAAU,MAAK,6BAA6B;AAC3E,MAAI,OAAO,EAAE,eAAe,YAAY,EAAE,aAAa,EAAG,MAAK,+BAA+B;AAC9F,MAAI,OAAO,EAAE,oBAAoB,YAAY,EAAE,kBAAkB,EAAG,MAAK,oCAAoC;AAC7G,MAAI,CAAC,cAAc,EAAE,YAAY,EAAG,MAAK,4BAA4B;AACrE,QAAM,KAAK,EAAE;AACb,MAAI,CAAC,cAAc,EAAE,EAAG,MAAK,iBAAiB;AAC9C,QAAM,IAAI,GAAG;AACb,MAAI,CAAC,cAAc,CAAC,EAAG,MAAK,+BAA+B;AAC3D,MAAI,OAAO,EAAE,qBAAqB,YAAY,OAAO,EAAE,iBAAiB,SAAU,MAAK,sCAAsC;AAC7H,MAAI,OAAO,GAAG,iBAAiB,YAAY,GAAG,eAAe,EAAG,MAAK,mCAAmC;AACxG,MAAI,OAAO,GAAG,iBAAiB,YAAY,GAAG,eAAe,EAAG,MAAK,mCAAmC;AACxG,QAAM,KAAK,GAAG;AACd,MAAI,CAAC,cAAc,EAAE,EAAG,MAAK,+BAA+B;AAC5D,MAAI,OAAO,GAAG,SAAS,YAAY,OAAO,GAAG,WAAW,YAAY,OAAO,GAAG,WAAW,UAAU;AACjG,SAAK,sCAAsC;AAAA,EAC7C;AACA,MAAI,OAAO,GAAG,iBAAiB,YAAY,GAAG,eAAe,EAAG,MAAK,mCAAmC;AACxG,MAAI,OAAO,GAAG,0BAA0B,YAAY,GAAG,wBAAwB,EAAG,MAAK,4CAA4C;AACnI,MAAI,OAAO,GAAG,eAAe,UAAW,MAAK,oCAAoC;AACjF,QAAM,KAAK,EAAE;AACb,MAAI,CAAC,cAAc,EAAE,EAAG,MAAK,iBAAiB;AAC9C,MAAI,OAAO,GAAG,aAAa,YAAY,GAAG,WAAW,MAAM,GAAG,WAAW,IAAM,MAAK,wCAAwC;AAC5H,MAAI,OAAO,GAAG,YAAY,YAAY,GAAG,UAAU,KAAK,GAAG,UAAU,IAAK,MAAK,qCAAqC;AACpH,MAAI,CAAC,cAAc,EAAE,MAAM,EAAG,MAAK,gBAAgB;AACnD,MAAI,OAAO,EAAE,OAAO,YAAY,UAAW,MAAK,gCAAgC;AAChF,QAAM,IAAI,EAAE;AACZ,MAAI,CAAC,cAAc,CAAC,EAAG,MAAK,mBAAmB;AAC/C,MAAI,OAAO,EAAE,kBAAkB,YAAY,OAAO,EAAE,oBAAoB,SAAU,MAAK,0BAA0B;AACnH;AAGO,SAAS,UAAa,MAAS,UAAsB;AAC1D,MAAI,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc,QAAQ,GAAG;AACpD,WAAQ,aAAa,SAAY,OAAQ;AAAA,EAC3C;AACA,QAAM,MAA+B,EAAE,GAAG,KAAK;AAC/C,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,QAAQ,GAAG;AAC7C,QAAI,CAAC,IAAI,MAAM,SAAa,KAAiC,CAAC,IAAI,UAAW,KAAiC,CAAC,GAAG,CAAC;AAAA,EACrH;AACA,SAAO;AACT;;;ACrIA,OAAOA,SAAQ;AACf,OAAOC,WAAU;AAIV,IAAM,mBAAmB;AAEzB,SAAS,WAAW,OAAkB,WAAmB,aAA6B;AAC3F,QAAM,cAAcC,MAAK,KAAK,WAAW,aAAa;AACtD,MAAI;AACJ,MAAI;AACF,iBAAa,KAAK,MAAMC,IAAG,aAAa,aAAa,MAAM,CAAC;AAAA,EAC9D,SAAS,GAAG;AACV,UAAM,IAAI,MAAM,gCAAgC,WAAW,KAAK,OAAO,CAAC,CAAC,EAAE;AAAA,EAC7E;AACA,eAAa,UAAU;AAEvB,QAAM,WAAW,MAAM,OAAOD,MAAK,KAAK,aAAa,gBAAgB,CAAC;AACtE,MAAI,SAAiB;AACrB,MAAIC,IAAG,WAAW,QAAQ,GAAG;AAC3B,QAAI;AACF,YAAM,UAAmB,KAAK,MAAMA,IAAG,aAAa,UAAU,MAAM,CAAC;AACrE,eAAS,UAAU,YAAY,OAAO;AAAA,IACxC,SAAS,GAAG;AACV,YAAM,IAAI,MAAM,oCAAoC,QAAQ,KAAK,OAAO,CAAC,CAAC,EAAE;AAAA,IAC9E;AAAA,EACF;AACA,eAAa,MAAM;AACnB,SAAO;AACT;AAQO,SAAS,iBAAiB,OAAkB,aAAqB,OAAyD;AAC/H,QAAM,WAAW,MAAM,OAAOD,MAAK,KAAK,aAAa,gBAAgB,CAAC;AACtE,MAAI,OAAgC,CAAC;AACrC,MAAI;AACF,WAAO,KAAK,MAAMC,IAAG,aAAa,UAAU,MAAM,CAAC;AACnD,QAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,EAAG,QAAO,CAAC;AAAA,EACxE,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACA,QAAM,SAAS,UAAU,MAAM,KAAK;AACpC,EAAAA,IAAG,UAAUD,MAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AACxD,EAAAC,IAAG,cAAc,UAAU,KAAK,UAAU,QAAQ,MAAM,CAAC,IAAI,MAAM,MAAM;AACzE,SAAO;AACT;;;AClDA,OAAOC,WAAU;AACjB,SAAS,kBAAkB;AAI3B,IAAM,SAAS;AAUR,SAAS,eAAe,SAAyB;AACtD,SAAOC,MAAK,KAAK,SAAS,WAAW;AACvC;AAEA,IAAM,UAAU;AAEhB,SAAS,YAAY,GAAwB;AAC3C,SAAO,MAAM,EAAE,IAAI,IAAI,EAAE,IAAI,KAAK,EAAE,MAAM,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI;AACjE;AAEO,SAAS,WAAW,OAAkB,MAA8E;AACzH,QAAM,MAAM,SAAS,OAAO,MAAM,kBAAQ;AAC1C,QAAM,QAAQ,IAAI,MAAM,IAAI;AAC5B,QAAM,UAAyB,CAAC;AAChC,QAAM,WAAqB,CAAC;AAC5B,aAAW,QAAQ,OAAO;AACxB,UAAM,IAAI,QAAQ,KAAK,IAAI;AAC3B,QAAI,GAAG;AACL,cAAQ,KAAK,EAAE,MAAM,EAAE,CAAC,GAAI,MAAM,EAAE,CAAC,GAAI,QAAQ,EAAE,CAAC,GAAsB,IAAI,EAAE,CAAC,GAAI,MAAM,EAAE,CAAC,EAAG,CAAC;AAAA,IACpG;AACA,aAAS,KAAK,IAAI;AAAA,EACpB;AACA,SAAO,EAAE,QAAQ,MAAM,CAAC,KAAK,kBAAQ,SAAS,SAAS;AACzD;AAEO,SAAS,YAAY,OAAkB,MAAc,MAAc,MAAM,KAAK,IAAI,GAAgB;AACvG,QAAM,cAAc,KAAK,KAAK;AAC9B,MAAI,CAAC,YAAa,OAAM,IAAI,MAAM,gCAAgC;AAClE,QAAM,IAAI,IAAI,KAAK,GAAG;AACtB,QAAM,MAAM,CAAC,MAAc,OAAO,CAAC,EAAE,SAAS,GAAG,GAAG;AACpD,QAAM,QAAqB;AAAA,IACzB,IAAI,WAAW,EAAE,MAAM,GAAG,CAAC;AAAA,IAC3B,MAAM,GAAG,EAAE,YAAY,CAAC,IAAI,IAAI,EAAE,SAAS,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,QAAQ,CAAC,CAAC;AAAA,IACrE,MAAM,GAAG,IAAI,EAAE,SAAS,CAAC,CAAC,IAAI,IAAI,EAAE,WAAW,CAAC,CAAC;AAAA,IACjD,QAAQ;AAAA,IACR,MAAM,YAAY,QAAQ,UAAU,GAAG;AAAA,EACzC;AACA,QAAM,EAAE,SAAS,IAAI,WAAW,OAAO,IAAI;AAC3C,WAAS,KAAK,YAAY,KAAK,CAAC;AAChC,YAAU,OAAO,MAAM,SAAS,KAAK,IAAI,EAAE,QAAQ,QAAQ,IAAI,CAAC;AAChE,SAAO;AACT;AAMO,SAAS,SAAS,OAAkB,MAAc,KAAa,MAAM,KAAK,IAAI,GAAuB;AAC1G,QAAM,EAAE,UAAU,QAAQ,IAAI,WAAW,OAAO,IAAI;AACpD,QAAM,SAAS,QAAQ,KAAK,CAAC,MAAM,EAAE,WAAW,WAAW,EAAE,OAAO,OAAO,EAAE,KAAK,SAAS,GAAG,EAAE;AAChG,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,IAAI,IAAI,KAAK,GAAG;AACtB,QAAM,MAAM,CAAC,MAAc,OAAO,CAAC,EAAE,SAAS,GAAG,GAAG;AACpD,QAAM,WAAW,GAAG,EAAE,YAAY,CAAC,IAAI,IAAI,EAAE,SAAS,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,QAAQ,CAAC,CAAC;AAChF,QAAM,MAAM,SAAS,IAAI,CAAC,SAAS;AACjC,QAAI,KAAK,SAAS,IAAI,OAAO,EAAE,IAAI,GAAG;AACpC,aAAO,MAAM,QAAQ,IAAI,IAAI,EAAE,SAAS,CAAC,CAAC,IAAI,IAAI,EAAE,WAAW,CAAC,CAAC,YAAY,OAAO,EAAE,KAAK,OAAO,IAAI;AAAA,IACxG;AACA,WAAO;AAAA,EACT,CAAC;AACD,YAAU,OAAO,MAAM,IAAI,KAAK,IAAI,EAAE,QAAQ,QAAQ,IAAI,CAAC;AAC3D,SAAO;AACT;AAGO,SAAS,YAAY,OAAkB,MAAc,MAAM,KAAK,IAAI,GAAkB;AAC3F,QAAM,EAAE,QAAQ,IAAI,WAAW,OAAO,IAAI;AAC1C,SAAO,QAAQ,OAAO,CAAC,MAAM,EAAE,WAAW,MAAM,EAAE,KAAK,CAAC,GAAG,MAAO,EAAE,OAAO,EAAE,OAAO,KAAK,CAAE;AAC7F;AAGO,SAAS,iBAAiB,OAAkB,MAAc,MAAc,MAAM,KAAK,IAAI,GAAkB;AAC9G,QAAM,SAAS,IAAI,KAAK,MAAM,OAAO,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AACtE,SAAO,YAAY,OAAO,MAAM,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,MAAM;AACrE;;;AChFA,OAAOC,SAAQ;AACf,OAAOC,WAAU;;;ACCjB,OAAOC,WAAU;AAIjB,IAAMC,UAAS;AAER,IAAM,QAAQ;AACd,IAAM,QAAQ;AAEd,IAAM,iBAAiB;AACvB,IAAM,mBAAmB;AAEzB,IAAM,uBAAuB;AAe7B,SAAS,mBAAmB,SAAyB;AAC1D,SAAOC,MAAK,KAAK,SAAS,iBAAiB;AAC7C;AAGA,SAAS,IAAI,GAAoB;AAC/B,QAAM,IAAI,OAAO,CAAC;AAClB,SAAO,OAAO,SAAS,CAAC,KAAK,KAAK,IAAI,IAAI;AAC5C;AAMA,SAAS,kBAAkB,KAAgC;AACzD,MAAI,CAAC,OAAO,OAAO,QAAQ,SAAU,QAAO;AAC5C,QAAM,IAAI;AACV,MAAI,CAAC,OAAO,SAAS,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,SAAS,OAAO,EAAE,OAAO,CAAC,EAAG,QAAO;AACzF,QAAM,YAAY,KAAK,MAAM,IAAI,EAAE,SAAS,CAAC;AAC7C,SAAO;AAAA,IACL;AAAA,IACA,SAAS,KAAK,IAAI,WAAW,KAAK,MAAM,IAAI,EAAE,OAAO,CAAC,CAAC;AAAA,IACvD,iBAAiB,IAAI,EAAE,eAAe;AAAA,IACtC,eAAe,IAAI,EAAE,aAAa;AAAA,EACpC;AACF;AAEO,SAAS,eAAe,OAAkB,MAAyB;AACxE,QAAM,MAAM,SAA6B,OAAO,IAAI;AACpD,MAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,CAAC,IAAI,UAAU,OAAO,IAAI,WAAW,UAAU;AACpF,WAAO,EAAE,SAAS,GAAG,QAAQ,CAAC,GAAG,WAAW,EAAE;AAAA,EAChD;AACA,QAAM,SAAoC,CAAC;AAC3C,aAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,IAAI,MAAM,GAAG;AACnD,UAAM,IAAI,kBAAkB,GAAG;AAC/B,QAAI,OAAO,EAAG,QAAO,GAAG,IAAI;AAAA,EAC9B;AACA,QAAM,YAAY,OAAO,IAAI,SAAS;AACtC,SAAO,EAAE,SAAS,GAAG,QAAQ,WAAW,OAAO,SAAS,SAAS,IAAI,YAAY,EAAE;AACrF;AAEO,SAAS,eAAe,OAAkB,MAAc,OAAwB;AACrF,WAAS,OAAO,MAAM,KAAK;AAC7B;AAKO,SAAS,eACd,OACA,MACA,MACW;AACX,QAAM,QAAQ,eAAe,OAAO,IAAI;AACxC,QAAM,UAAU,IAAI,IAAI,KAAK,aAAa;AAC1C,aAAW,SAAS,KAAK,eAAe;AACtC,QAAI,CAAC,MAAO;AACZ,UAAM,IAAI,MAAM,OAAO,KAAK,KAAK,EAAE,WAAW,GAAG,SAAS,GAAG,iBAAiB,GAAG,eAAe,EAAE;AAClG,MAAE,aAAa;AACf,MAAE,kBAAkB,KAAK;AACzB,QAAI,QAAQ,IAAI,KAAK,GAAG;AACtB,QAAE,WAAW;AACb,QAAE,gBAAgB,KAAK;AAAA,IACzB;AACA,UAAM,OAAO,KAAK,IAAI;AAAA,EACxB;AACA,QAAM,YAAY,KAAK;AACvB,iBAAe,OAAO,MAAM,KAAK;AACjC,SAAO;AACT;AAGO,SAAS,QAAQ,GAAc,KAAqD;AACzF,QAAM,WAAW,KAAK,IAAI,GAAG,MAAM,EAAE,eAAe,IAAID;AACxD,QAAM,WAAW,KAAK,IAAI,GAAG,MAAM,EAAE,aAAa,IAAIA;AACtD,QAAM,QAAQ,KAAK,IAAI,KAAK,WAAW,oBAAoB;AAC3D,QAAM,QAAQ,KAAK,IAAI,KAAK,WAAW,oBAAoB;AAC3D,SAAO,EAAE,WAAW,EAAE,YAAY,OAAO,SAAS,EAAE,UAAU,MAAM;AACtE;AAUO,SAAS,iBAAiB,OAAkB,OAAe,KAAqB;AACrF,QAAM,IAAI,MAAM,OAAO,KAAK;AAC5B,QAAM,OAAO,KACR,MAAM;AACL,UAAM,IAAI,QAAQ,GAAG,GAAG;AACxB,YAAQ,EAAE,UAAU,mBAAmB,EAAE,YAAY;AAAA,EACvD,GAAG,IACH,iBAAiB;AACrB,SAAO,KAAK,IAAI,OAAO,KAAK,IAAI,OAAO,QAAQ,iBAAiB,iBAAiB,CAAC;AACpF;;;ADrHA,IAAM,oBAAoB,IAAI;AAC9B,IAAM,KAAK,EAAE,cAAc,iDAAiD;AAsCrE,SAAS,mBAAgC;AAC9C,SAAO,EAAE,SAAS,CAAC,GAAG,eAAe,GAAG,QAAQ,EAAE,cAAc,CAAC,GAAG,YAAY,CAAC,GAAG,gBAAgB,GAAG,aAAa,CAAC,EAAE,EAAE;AAC3H;AAEO,SAAS,gBAAgB,OAA+B;AAC7D,SAAOE,MAAK,KAAK,MAAM,SAAS,aAAa;AAC/C;AAEA,SAAS,aAAgB,MAAc,UAAgB;AACrD,MAAI;AACF,WAAO,KAAK,MAAMC,IAAG,aAAa,MAAM,MAAM,CAAC;AAAA,EACjD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,cAAc,OAAwC;AACpE,QAAM,WAAWD,MAAK,KAAK,MAAM,aAAa,gBAAgB;AAC9D,MAAIC,IAAG,WAAW,QAAQ,EAAG,QAAO,aAA8B,UAAU,EAAE,WAAW,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC;AAC5G,SAAO,aAA8BD,MAAK,KAAK,MAAM,WAAW,gBAAgB,GAAG,EAAE,WAAW,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC;AACrH;AAEO,SAAS,cAAc,OAAwC;AACpE,QAAM,WAAWA,MAAK,KAAK,MAAM,aAAa,gBAAgB;AAC9D,MAAIC,IAAG,WAAW,QAAQ,EAAG,QAAO,aAA8B,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;AAC3F,SAAO,aAA8BD,MAAK,KAAK,MAAM,WAAW,gBAAgB,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC;AACpG;AAEA,SAAS,UAAU,OAAkB,OAAoC;AACvE,SAAO,SAAsB,OAAO,gBAAgB,KAAK,CAAC,KAAK,iBAAiB;AAClF;AAMA,eAAe,SAAS,SAAoB,MAAiF;AAC3H,QAAM,IAAI,MAAM,QAAQ,8BAA8B,IAAI,WAAW,EAAE,SAAS,GAAG,CAAC;AACpF,MAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,OAAO,EAAE,MAAM,EAAE;AAC5C,QAAM,IAAI,MAAM,EAAE,KAAK;AACvB,MAAI,CAAC,EAAE,QAAS,OAAM,IAAI,MAAM,iBAAiB;AACjD,SAAO,EAAE,SAAS,EAAE,SAAS,MAAM,OAAO,EAAE,OAAO,GAAG;AACxD;AAEA,eAAe,YAAY,SAAoB,MAAiF;AAC9H,QAAM,IAAI,MAAM,QAAQ,gCAAgC,IAAI,oBAAoB;AAAA,IAC9E,SAAS,EAAE,GAAG,IAAI,QAAQ,8BAA8B;AAAA,EAC1D,CAAC;AACD,MAAI,EAAE,WAAW,IAAK,QAAO;AAC7B,MAAI,CAAC,EAAE,GAAI,OAAM,IAAI,MAAM,MAAM,EAAE,MAAM,EAAE;AAC3C,QAAM,IAAI,MAAM,EAAE,KAAK;AACvB,MAAI,CAAC,EAAE,SAAU,OAAM,IAAI,MAAM,YAAY;AAC7C,SAAO,EAAE,SAAS,EAAE,UAAU,MAAM,MAAM,EAAE,QAAQ,IAAI,OAAO,EAAE,QAAQ,GAAG;AAC9E;AASA,eAAsB,eACpB,OACA,OACA,OAAsD,CAAC,GACvD,MAAM,KAAK,IAAI,GACO;AACtB,QAAM,UAAU,KAAK,WAAY,WAAW;AAC5C,QAAM,QAAQ,UAAU,OAAO,KAAK;AACpC,MAAI,KAAK,eAAe,QAAQ,MAAM,MAAM,gBAAgB,mBAAmB;AAC7E,WAAO,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,GAAG,SAAS,EAAE;AAAA,EAC7C;AACA,QAAM,YAAY,cAAc,KAAK;AACrC,QAAM,SAAsB,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,GAAG,SAAS,EAAE;AAChE,aAAW,KAAK,UAAU,WAAW,CAAC,GAAG;AACvC,WAAO,WAAW;AAClB,QAAI;AACF,YAAM,OAAO,EAAE,SAAS,SAAS,EAAE,OAAO,MAAM,SAAS,SAAS,EAAE,IAAI,IACpE,EAAE,SAAS,YAAY,EAAE,OAAO,MAAM,YAAY,SAAS,EAAE,IAAI,IACjE;AACJ,UAAI,CAAC,KAAM;AACX,YAAM,OAAO,MAAM,QAAQ,EAAE,EAAE;AAC/B,UAAI,QAAQ,KAAK,SAAS,KAAK,MAAM;AACnC,cAAM,QAAQ,KAAK,QAAQ,SAAI,KAAK,MAAM,MAAM,GAAG,EAAE,CAAC,WAAM;AAC5D,eAAO,MAAM,KAAK;AAAA,UAChB,MAAM,GAAG,EAAE,QAAQ,EAAE,EAAE,4BAAQ,KAAK,OAAO,OAAO,KAAK,OAAO,GAAG,KAAK;AAAA,UACtE,OAAO,SAAS,EAAE,EAAE;AAAA,UACpB,KAAK;AAAA,UACL,QAAQ;AAAA,UACR,YAAY;AAAA,QACd,CAAC;AAAA,MACH;AACA,YAAM,QAAQ,EAAE,EAAE,IAAI;AAAA,IACxB,SAAS,GAAG;AACV,aAAO,OAAO,KAAK,GAAG,EAAE,EAAE,KAAK,OAAO,CAAC,CAAC,EAAE;AAAA,IAC5C;AAAA,EACF;AACA,QAAM,gBAAgB;AACtB,WAAS,OAAO,gBAAgB,KAAK,GAAG,KAAK;AAC7C,SAAO;AACT;AAUO,SAAS,eAAe,KAAW,SAA0D;AAClG,QAAM,KAAK,IAAI,SAAS,IAAI,KAAK,IAAI,WAAW;AAChD,aAAW,KAAK,SAAS;AACvB,UAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,MAAM,GAAG,EAAE,IAAI,MAAM;AAC9C,UAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,MAAM,GAAG,EAAE,IAAI,MAAM;AAC5C,QAAI,MAAM,KAAM,KAAK,MAAO,MAAM,KAAM,KAAK,GAAK,QAAO,GAAG,EAAE,KAAK,IAAI,EAAE,GAAG;AAAA,EAC9E;AACA,SAAO;AACT;AAEA,SAAS,WAAW,OAAoB,OAAe,cAAsB,KAAsB;AACjG,QAAM,OAAO,MAAM,OAAO,aAAa,KAAK,KAAK;AACjD,SAAO,OAAO,MAAM,eAAe;AACrC;AAaO,IAAM,kBAAkB;AAExB,SAAS,UACd,OACA,WACA,KACA,MACe;AACf,QAAM,KAAK,UAAU,aAAa,CAAC;AACnC,QAAM,WAAW,GAAG,uBAAuB;AAC3C,QAAM,QAAQ,UAAU,aAAa,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,OAAO,GAAG,UAAU,GAAG,CAAC;AAC3F,MAAI,KAAK,WAAW,EAAG,QAAO;AAC9B,MAAI,CAAC,MAAM;AACT,SAAK,KAAK,CAAC,GAAG,OAAO,MAAM,OAAO,aAAa,CAAC,KAAK,MAAM,MAAM,OAAO,aAAa,CAAC,KAAK,EAAE;AAC7F,WAAO,KAAK,CAAC;AAAA,EACf;AACA,QAAM,MAAM,CAAC,MAAsB,OAAO,MAAM,OAAO,aAAa,CAAC,KAAK;AAC1E,QAAM,UAAU,KAAK,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,kBAAkB,KAAU;AACzE,MAAI,QAAQ,SAAS,GAAG;AACtB,YAAQ,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;AACtC,WAAO,QAAQ,CAAC;AAAA,EAClB;AACA,QAAM,SAAS,CAAC,MAAsB,IAAI,CAAC,IAAI,iBAAiB,MAAM,GAAG,GAAG;AAC5E,OAAK,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,IAAI,OAAO,CAAC,CAAC;AACzC,SAAO,KAAK,CAAC;AACf;AAGO,SAAS,aACd,OACA,OACA,QACA,MAAM,oBAAI,KAAK,GACD;AACd,QAAM,QAAQ,UAAU,OAAO,KAAK;AACpC,QAAM,YAAY,cAAc,KAAK;AACrC,QAAM,UAAU,UAAU,WAAW,SAAS,SAC1C,UAAU,UAAU,UACnB,OAAO,OAAO;AACnB,QAAM,MAAM,eAAe,KAAK,OAAO;AACvC,MAAI,CAAC,KAAK;AACR,UAAM,KAAK,GAAG,OAAO,IAAI,SAAS,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC,IAAI,OAAO,IAAI,WAAW,CAAC,EAAE,SAAS,GAAG,GAAG,CAAC;AAClG,WAAO,EAAE,OAAO,MAAM,OAAO,MAAM,SAAS,cAAc,EAAE,IAAI;AAAA,EAClE;AACA,QAAM,SAAS,OAAO,OAAO,mBAAmB;AAChD,MAAI,IAAI,QAAQ,IAAI,MAAM,OAAO,iBAAiB,QAAQ;AACxD,WAAO,EAAE,OAAO,MAAM,OAAO,MAAM,SAAS,eAAe;AAAA,EAC7D;AACA,QAAM,QAAQ,UAAU,OAAO,WAAW,IAAI,QAAQ,GAAG,eAAe,OAAO,mBAAmB,MAAM,OAAO,CAAC,CAAC;AACjH,MAAI,CAAC,MAAO,QAAO,EAAE,OAAO,MAAM,OAAO,MAAM,SAAS,WAAW;AACnE,SAAO,EAAE,OAAO,OAAO,GAAG,KAAK,sBAAY,SAAS,KAAK;AAC3D;AAQO,SAAS,eACd,OACA,OACA,OACA,MAAM,KAAK,IAAI,GACf,OAA6B,CAAC,GAC2B;AACzD,QAAM,QAAQ,UAAU,OAAO,KAAK;AACpC,QAAM,OAAO,aAAa,KAAK,IAAI;AACnC,QAAM,OAAO,WAAW,KAAK,KAAK,MAAM,OAAO,WAAW,KAAK,KAAK,KAAK;AACzE,QAAM,OAAO,iBAAiB;AAC9B,MAAI;AACJ,MAAI,KAAK,QAAQ;AACf,UAAM,QAAQ,YAAY,IAAI,KAAK,GAAG,CAAC;AACvC,UAAM,OAAO,cAAc,MAAM,OAAO,eAAe,CAAC;AACxD,UAAM,OAAO,YAAY,KAAK,KAAK,MAAM,OAAO,YAAY,KAAK,KAAK,KAAK;AAC3E,mBAAe,MAAM,OAAO,YAAY,KAAK;AAAA,EAC/C;AACA,WAAS,OAAO,gBAAgB,KAAK,GAAG,KAAK;AAC7C,SAAO,EAAE,OAAO,OAAO,MAAM,OAAO,WAAW,KAAK,GAAI,GAAI,iBAAiB,SAAY,CAAC,IAAI,EAAE,aAAa,EAAG;AAClH;AAGA,SAAS,YAAY,GAAiB;AACpC,QAAM,IAAI,EAAE,YAAY;AACxB,QAAM,IAAI,OAAO,EAAE,SAAS,IAAI,CAAC,EAAE,SAAS,GAAG,GAAG;AAClD,QAAM,MAAM,OAAO,EAAE,QAAQ,CAAC,EAAE,SAAS,GAAG,GAAG;AAC/C,SAAO,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG;AACzB;AAOO,IAAM,yBAAyB;AAC/B,IAAM,qBAAqB;AAU3B,SAAS,mBACd,OACA,OACA,QACA,MAAM,oBAAI,KAAK,GACD;AACd,QAAM,QAAQ,UAAU,OAAO,KAAK;AACpC,QAAM,QAAQ,YAAY,GAAG;AAC7B,QAAM,eAAe,MAAM,OAAO,cAAc,KAAK,KAAK;AAC1D,QAAM,aAAa,YAAY,SAAS,OAAO,cAAc,MAAM,OAAO,CAAC,CAAC,EACzE,OAAO,CAAC,MAAM,kBAAkB,EAAE,QAAQ,MAAM,OAAO,EAAE;AAC5D,MAAI,gBAAgB,oBAAoB;AACtC,WAAO,EAAE,OAAO,MAAM,OAAO,MAAM,SAAS,oBAAoB,YAAY,KAAK,YAAY,aAAa;AAAA,EAC5G;AACA,MAAI,aAAa,wBAAwB;AACvC,WAAO,EAAE,OAAO,MAAM,OAAO,MAAM,SAAS,kBAAkB,UAAU,KAAK,YAAY,aAAa;AAAA,EACxG;AACA,QAAM,YAAY,cAAc,KAAK;AACrC,QAAM,QAAQ,UAAU,OAAO,WAAW,IAAI,QAAQ,GAAG,eAAe,OAAO,mBAAmB,MAAM,OAAO,CAAC,CAAC;AACjH,MAAI,CAAC,OAAO;AACV,WAAO,EAAE,OAAO,MAAM,OAAO,MAAM,SAAS,YAAY,YAAY,aAAa;AAAA,EACnF;AACA,SAAO,EAAE,OAAO,OAAO,GAAG,KAAK,sBAAY,SAAS,MAAM,YAAY,aAAa;AACrF;AAEO,SAAS,aAAa,OAAkB,OAAoC;AACjF,SAAO,UAAU,OAAO,KAAK;AAC/B;;;AExUA,SAAS,iBAAiB;AAC1B,OAAOE,WAAU;AAGjB,SAAS,UAAU,OAAuB,MAAiD;AACzF,QAAM,IAAI;AAAA,IAAU;AAAA,IAClB,CAAC,cAAc,oBAAoB,UAAU,SAASA,MAAK,KAAK,MAAM,WAAW,YAAY,GAAG,GAAG,IAAI;AAAA,IACvG,EAAE,SAAS,KAAQ,UAAU,OAAO;AAAA,EAAC;AACvC,SAAO,EAAE,QAAQ,EAAE,UAAU,IAAI,KAAK,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,KAAK,EAAE;AACpF;AAGO,SAAS,iBAAiB,OAAgC;AAC/D,QAAM,QAAQ,UAAU,OAAO,CAAC,QAAQ,CAAC;AACzC,MAAI,kBAAkB,KAAK,MAAM,GAAG,EAAG,QAAO;AAC9C,QAAM,MAAM,UAAU,OAAO,CAAC,eAAe,CAAC;AAC9C,SAAO,IAAI,WAAW;AACxB;AAMO,SAAS,mBAAmB,OAAgC;AACjE,QAAM,IAAI,UAAU,OAAO,CAAC,UAAU,aAAa,YAAY,0BAAM,CAAC;AACtE,SAAO,EAAE,WAAW,KAAK,aAAa,KAAK,EAAE,GAAG;AAClD;AAIO,SAAS,oBAAoB,OAAgC;AAClE,QAAM,IAAI,UAAU,OAAO,CAAC,UAAU,4BAAQ,YAAY,4CAAS,CAAC;AACpE,SAAO,EAAE,WAAW,KAAK,aAAa,KAAK,EAAE,GAAG;AAClD;;;AC9BA,OAAOC,SAAQ;AACf,OAAOC,WAAU;AAMV,IAAM,qBAAqB,IAAI;AAW/B,SAAS,cAAc,SAAyB;AACrD,SAAOC,MAAK,KAAK,SAAS,QAAQ;AACpC;AAEA,SAAS,cAAc,SAAyB;AAC9C,SAAOA,MAAK,KAAK,cAAc,OAAO,GAAG,YAAY;AACvD;AAEA,SAAS,eAAe,QAAwB;AAC9C,SAAO,UAAU,OAAO,MAAM,GAAG,EAAE,CAAC;AACtC;AAGO,SAAS,sBAAsB,OAAkB,SAAyB;AAC/E,MAAI;AACF,UAAM,MAAM,KAAK,MAAMC,IAAG,aAAa,MAAM,OAAO,cAAc,OAAO,CAAC,GAAG,MAAM,CAAC;AACpF,WAAO,OAAO,IAAI,eAAe,KAAK;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAKO,SAAS,UAAU,OAAkB,SAAiB,MAAM,KAAK,IAAI,GAAY;AACtF,QAAM,OAAO,sBAAsB,OAAO,OAAO;AACjD,SAAO,MAAM,QAAQ;AACvB;AAOO,SAAS,mBAAmB,OAAkB,SAAiB,MAAM,KAAK,IAAI,GAAY;AAC/F,MAAI,sBAAsB,OAAO,OAAO,IAAI,EAAG,QAAO;AACtD,EAAAA,IAAG,UAAU,cAAc,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;AACxD,sBAAoB,cAAc,OAAO,GAAG,EAAE,iBAAiB,IAAI,CAAC;AACpE,SAAO;AACT;AAGO,SAAS,iBAAiB,OAAkB,SAAiB,QAA8B;AAChG,QAAM,MAAM,cAAc,OAAO;AACjC,EAAAA,IAAG,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AACrC,QAAM,OAAOD,MAAK,KAAK,KAAK,eAAe,OAAO,GAAG,CAAC;AACtD,oBAAkB,OAAO,MAAM,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAC9D,sBAAoB,cAAc,OAAO,GAAG,EAAE,iBAAiB,KAAK,MAAM,OAAO,WAAW,EAAE,CAAC;AAC/F,SAAO;AACT;AAWO,SAAS,kBAAkB,OAAkB,SAAqC;AACvF,QAAM,MAA0B,CAAC;AACjC,MAAI;AACF,eAAW,QAAQC,IAAG,YAAY,cAAc,OAAO,CAAC,GAAG;AACzD,UAAI,CAAC,mCAAmC,KAAK,IAAI,EAAG;AACpD,YAAM,MAAM,iBAAiB,OAAO,SAAS,IAAI;AACjD,UAAI,CAAC,IAAK;AACV,UAAI,KAAK,EAAE,MAAM,OAAO,IAAI,OAAO,KAAK,IAAI,KAAK,aAAa,IAAI,aAAa,QAAQ,IAAI,OAAO,CAAC;AAAA,IACrG;AAAA,EACF,QAAQ;AAAA,EAA0B;AAClC,SAAO,IAAI,KAAK,CAAC,GAAG,MAAO,EAAE,MAAM,EAAE,MAAM,IAAI,EAAG;AACpD;AAEO,SAAS,iBAAiB,OAAkB,SAAiB,MAAmC;AACrG,MAAI,CAAC,mCAAmC,KAAK,IAAI,EAAG,QAAO;AAC3D,MAAI;AACF,UAAM,MAAM,kBAAkB,OAAOD,MAAK,KAAK,cAAc,OAAO,GAAG,IAAI,CAAC;AAC5E,QAAI,CAAC,IAAK,QAAO;AACjB,UAAM,MAAM,KAAK,MAAM,GAAG;AAC1B,QAAI,OAAO,IAAI,SAAS,SAAU,QAAO;AACzC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,kBAAkB,OAA4B;AAC5D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,KAAK,UAAU,OAAO,MAAM,CAAC;AAAA,EAC/B,EAAE,KAAK,IAAI;AACb;AAIO,SAAS,qBAAqB,OAA4B;AAC/D,QAAM,IAAI,CAAC,QAAwB,IAAI,MAAM,GAAG,EAAE;AAClD,QAAM,QAAkB,CAAC,qBAAM,EAAE,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,SAAS,CAAC,QAAG;AAC9E,QAAM,KAAK,gBAAM,MAAM,MAAM,6BAAS,MAAM,MAAM,eAAK;AACvD,MAAI,MAAM,iBAAiB,SAAS,GAAG;AACrC,UAAM,KAAK,iCAAQ,MAAM,iBAAiB,IAAI,CAAC,MAAM,GAAG,EAAE,MAAM,SAAI,EAAE,KAAK,QAAG,EAAE,KAAK,QAAG,CAAC,QAAG;AAAA,EAC9F;AACA,MAAI,MAAM,YAAY,SAAS,GAAG;AAChC,UAAM,KAAK,sBAAO,MAAM,YAAY,MAAM,gBAAM,MAAM,YAAY,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,QAAG,CAAC,QAAG;AAAA,EACtG;AACA,MAAI,MAAM,OAAO,MAAM,SAAS,KAAK,MAAM,OAAO,KAAK,SAAS,GAAG;AACjE,UAAM,QAAkB,CAAC;AACzB,QAAI,MAAM,OAAO,MAAM,SAAS,EAAG,OAAM,KAAK,iCAAQ,MAAM,OAAO,MAAM,KAAK,QAAG,CAAC,EAAE;AACpF,QAAI,MAAM,OAAO,KAAK,SAAS,EAAG,OAAM,KAAK,2BAAO,MAAM,OAAO,KAAK,KAAK,QAAG,CAAC,EAAE;AACjF,UAAM,KAAK,GAAG,MAAM,KAAK,QAAG,CAAC,QAAG;AAAA,EAClC;AACA,MAAI,MAAM,OAAO,MAAM,SAAS,GAAG;AACjC,UAAM,KAAK,iCAAQ,MAAM,OAAO,MAAM,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,SAAI,EAAE,IAAI,eAAK,EAAE,KAAK,QAAG,CAAC,0EAAc;AAAA,EACpG;AACA,MAAI,MAAM,MAAM,MAAM,SAAS,GAAG;AAChC,UAAM,KAAK,kCAAS,MAAM,MAAM,MAAM,MAAM,mCAAU,MAAM,MAAM,SAAS,MAAM,eAAK;AAAA,EACxF;AACA,MAAI,MAAM,MAAM,QAAQ,SAAS,GAAG;AAClC,UAAM,KAAK,mDAAW,MAAM,MAAM,QAAQ,KAAK,QAAG,CAAC,QAAG;AAAA,EACxD;AACA,MAAI,MAAM,QAAQ,QAAQ,GAAG;AAC3B,UAAM,aAAa,MAAM,QAAQ,QAAQ,SAAS,IAC9C,SAAI,MAAM,QAAQ,QAAQ,IAAI,CAAC,MAAM,GAAG,EAAE,MAAM,IAAI,EAAE,KAAK,SAAI,EAAE,KAAK,QAAG,CAAC,WAC1E;AACJ,UAAM,KAAK,4BAAQ,MAAM,QAAQ,KAAK,mCAAU,MAAM,QAAQ,QAAQ,kCAAS,MAAM,QAAQ,SAAS,4BAAQ,MAAM,QAAQ,MAAM,GAAG,UAAU,QAAG;AAAA,EACpJ;AAGA,MAAI,MAAM,QAAQ,UAAU,GAAG;AAC7B,UAAM,KAAK,gBAAM,MAAM,QAAQ,OAAO,iIAAwB;AAAA,EAChE;AACA,MAAI,MAAM,UAAU,SAAS,GAAG;AAC9B,UAAM,KAAK,iCAAQ,MAAM,UAAU,KAAK,QAAG,CAAC,QAAG;AAAA,EACjD;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;;;ACnJA,OAAOE,SAAQ;AACf,OAAO,QAAQ;AACf,OAAOC,WAAU;AACjB,SAAS,qBAAqB;AAEvB,IAAM,mBAAmB;AACzB,IAAM,gBAAgB;AAEtB,IAAM,oBAAoB;AAiC1B,SAAS,iBACd,WACA,KAAa,mBACO;AACpB,MAAI;AACJ,MAAI;AACF,UAAMA,MAAK,QAAQ,cAAc,SAAS,CAAC;AAAA,EAC7C,QAAQ;AACN,WAAO;AAAA,EACT;AACA,WAAS,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG;AACzC,UAAM,YAAYA,MAAK,KAAK,KAAK,UAAU,WAAW,EAAE;AACxD,QAAID,IAAG,WAAWC,MAAK,KAAK,WAAW,gBAAgB,CAAC,EAAG,QAAO;AAClE,UAAM,SAASA,MAAK,QAAQ,GAAG;AAC/B,QAAI,WAAW,IAAK;AACpB,UAAM;AAAA,EACR;AACA,SAAO;AACT;AAGO,SAAS,eAAe,OAAuD;AACpF,QAAM,QAAQ,OAAO;AAAA,IACnB,CAAC,SAAS,MAAM,UAAU,UAAU,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,SAAS;AAAA,EAC1F;AACA,SAAO,OAAO,SAAS,SAAY,SAAYA,MAAK,QAAQ,MAAM,IAAI;AACxE;AAOO,SAAS,2BACd,MAAyB,QAAQ,KACjC,OAAe,GAAG,QAAQ,GAClB;AACR,QAAM,WAAW,IAAI,UAAU,KAAK;AACpC,QAAM,OAAO,YAAY,SAAS,SAAS,IAAI,WAAWA,MAAK,KAAK,MAAM,MAAM;AAChF,SAAOA,MAAK,KAAK,MAAM,gBAAgB;AACzC;AAqBO,SAAS,qBAAqB,SAAoD;AACvF,QAAM,KAAK,QAAQ,MAAM,QAAQ,GAAG,SAAS,IAAI,QAAQ,KAAK;AAC9D,MAAI,QAAQ,YAAY,OAAO;AAC7B,WAAO,EAAE,QAAQ,oBAAoB,IAAI,QAAQ,sBAAsB;AAAA,EACzE;AACA,QAAM,aAAa,iBAAiB,QAAQ,WAAW,iBAAiB;AACxE,MAAI,OAAO,mBAAmB;AAC5B,WAAO;AAAA,MACL,QAAQ;AAAA,MACR;AAAA,MACA,GAAI,eAAe,SAAY,CAAC,IAAI,EAAE,WAAW;AAAA,MACjD,QAAQ,SAAS,iBAAiB,6BAA6B,EAAE;AAAA,IACnE;AAAA,EACF;AACA,MAAI,eAAe,QAAW;AAC5B,WAAO;AAAA,MACL,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AACA,QAAM,OACJ,QAAQ,SAAS,QAAQ,cAAc,SAAY,2BAA2B;AAChF,MAAI,SAAS,QAAW;AACtB,WAAO;AAAA,MACL,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,IACV;AAAA,EACF;AACA,QAAM,MAAMA,MAAK,KAAK,MAAM,EAAE;AAC9B,QAAM,cAAcA,MAAK,KAAK,KAAK,gBAAgB;AACnD,MAAI;AACF,QAAID,IAAG,WAAW,WAAW,GAAG;AAC9B,UAAI,QAAQ,UAAU,MAAM;AAC1B,cAAM,UAAU,CAAC,UAAU,aAAaC,MAAK,KAAK,YAAY,gBAAgB,CAAC;AAC/E,eAAO;AAAA,UACL,QAAQ;AAAA,UACR;AAAA,UACA;AAAA,UACA;AAAA,UACA,QAAQ,UAAU,mDAAmD;AAAA,QACvE;AAAA,MACF;AACA,MAAAD,IAAG,aAAaC,MAAK,KAAK,YAAY,gBAAgB,GAAG,WAAW;AACpE,aAAO;AAAA,QACL,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,QACA,QAAQ;AAAA,MACV;AAAA,IACF;AACA,UAAM,UAAUD,IAAG,WAAW,GAAG;AACjC,IAAAA,IAAG,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AACrC,IAAAA,IAAG,aAAaC,MAAK,KAAK,YAAY,gBAAgB,GAAG,WAAW;AACpE,UAAM,WAAWA,MAAK,KAAK,KAAK,aAAa;AAE7C,QAAI,CAACD,IAAG,WAAW,QAAQ,EAAG,CAAAA,IAAG,aAAaC,MAAK,KAAK,YAAY,aAAa,GAAG,QAAQ;AAC5F,WAAO;AAAA,MACL,QAAQ,UAAU,aAAa;AAAA,MAC/B;AAAA,MACA;AAAA,MACA;AAAA,MACA,QAAQ,UACJ,sFACA;AAAA,IACN;AAAA,EACF,SAAS,OAAO;AACd,WAAO,EAAE,QAAQ,SAAS,IAAI,KAAK,YAAY,QAAQ,OAAO,KAAK,EAAE,MAAM,GAAG,GAAG,EAAE;AAAA,EACrF;AACF;AAGO,SAAS,gBAAgB,QAAqC;AACnE,QAAM,QAAQ,OAAO,QAAQ,SAAY,KAAK,KAAK,OAAO,GAAG;AAC7D,QAAM,MAAM,OAAO,WAAW,SAAY,KAAK,WAAM,OAAO,MAAM;AAClE,SAAO,UAAU,OAAO,EAAE,IAAI,OAAO,MAAM,GAAG,KAAK,GAAG,GAAG;AAC3D;AAYO,SAAS,aACd,WACA,KAAa,mBACb,OAAe,2BAA2B,GAC5B;AACd,QAAM,MAAMA,MAAK,KAAK,MAAM,EAAE;AAC9B,QAAM,aAAa,iBAAiB,WAAW,EAAE;AACjD,QAAM,YAAYD,IAAG,WAAWC,MAAK,KAAK,KAAK,gBAAgB,CAAC;AAChE,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,GAAI,eAAe,SAAY,CAAC,IAAI,EAAE,WAAW;AAAA,IACjD;AAAA,IACA,oBACE,aAAa,eAAe,UAAa,UAAUA,MAAK,KAAK,KAAK,gBAAgB,GAAGA,MAAK,KAAK,YAAY,gBAAgB,CAAC;AAAA,IAC9H,iBACE,eAAe,UACfD,IAAG,WAAWC,MAAK,KAAK,KAAK,aAAa,CAAC,KAC3C,UAAUA,MAAK,KAAK,KAAK,aAAa,GAAGA,MAAK,KAAK,YAAY,aAAa,CAAC;AAAA,EACjF;AACF;AAEA,SAAS,UAAU,MAAc,OAAwB;AACvD,MAAI;AACF,WAAOD,IAAG,aAAa,IAAI,EAAE,OAAOA,IAAG,aAAa,KAAK,CAAC;AAAA,EAC5D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":["fs","path","path","fs","path","path","fs","path","path","DAY_MS","path","path","fs","path","fs","path","path","fs","fs","path"]}

package/dist/chunk-63FUJLIF.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/profile/inbox.ts"],"sourcesContent":["// Observation inbox (design doc §3.2): append-only queue of pending\n// observations; drained by the consolidation run. DPAPI-encrypted. Items hold\n// pointers + at most one short sentence - never raw conversation/screen text.\n\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { randomUUID } from 'node:crypto';\nimport type { PathGuard } from '../core/path-guard.js';\nimport { loadEncryptedText, saveEncryptedText } from '../vault/vault.js';\nimport type { InboxItem } from './types.js';\n\nconst MAX_NOTE_CHARS = 120;\n\nexport function inboxFilePath(dataDir: string): string {\n  return path.join(dataDir, 'profile_inbox.jsonl');\n}\n\nfunction truncateNote(note: string): string {\n  const oneLine = note.replace(/\\r?\\n/g, ' ').trim();\n  return oneLine.length > MAX_NOTE_CHARS ? oneLine.slice(0, MAX_NOTE_CHARS) + '…' : oneLine;\n}\n\nexport function inboxAppend(\n  guard: PathGuard,\n  file: string,\n  item: Omit<InboxItem, 'id'> & { id?: string },\n): InboxItem {\n  const full: InboxItem = {\n    id: item.id ?? randomUUID().slice(0, 8),\n    kind: item.kind,\n    at: item.at,\n    ref: item.ref,\n    note: truncateNote(item.note),\n  };\n  const prev = loadEncryptedText(guard, file) ?? '';\n  saveEncryptedText(guard, file, prev + JSON.stringify(full) + '\\n');\n  return full;\n}\n\nexport function inboxCount(guard: PathGuard, file: string): number {\n  const raw = loadEncryptedText(guard, file);\n  if (!raw) return 0;\n  return raw.split('\\n').filter((l) => l.trim()).length;\n}\n\n/**\n * Drain all items. `commit` controls crash semantics: on consolidation failure\n * the inbox must SURVIVE (§3.7), so the caller drains with commit=false first,\n * and only rewrites an empty inbox after the run succeeded.\n */\nexport function inboxDrain(guard: PathGuard, file: string): InboxItem[] {\n  const raw = loadEncryptedText(guard, file);\n  if (!raw) return [];\n  const items: InboxItem[] = [];\n  for (const line of raw.split('\\n')) {\n    const trimmed = line.trim();\n    if (!trimmed) continue;\n    try {\n      items.push(JSON.parse(trimmed) as InboxItem);\n    } catch {\n      // corrupt line: drop (queue is re-derivable from sources)\n    }\n  }\n  return items;\n}\n\nexport function inboxClear(guard: PathGuard, file: string): void {\n  saveEncryptedText(guard, file, '');\n}\n\n/** Dedupe key (§3.7): same source kind + same ref must not flood the queue. */\nexport function dedupeItems(items: InboxItem[]): InboxItem[] {\n  const seen = new Set<string>();\n  const out: InboxItem[] = [];\n  for (const it of items) {\n    const key = `${it.kind}#${it.ref}`;\n    if (seen.has(key)) continue;\n    seen.add(key);\n    out.push(it);\n  }\n  return out;\n}\n\nexport function inboxHealthCheck(guard: PathGuard, file: string): { total: number; corrupt: number; duplicates: number } {\n  const raw = loadEncryptedText(guard, file) ?? '';\n  let total = 0;\n  let corrupt = 0;\n  const keys = new Set<string>();\n  let duplicates = 0;\n  for (const line of raw.split('\\n')) {\n    const trimmed = line.trim();\n    if (!trimmed) continue;\n    try {\n      const it = JSON.parse(trimmed) as InboxItem;\n      total += 1;\n      const key = `${it.kind}#${it.ref}`;\n      if (keys.has(key)) duplicates += 1;\n      keys.add(key);\n    } catch {\n      corrupt += 1;\n    }\n  }\n  return { total, corrupt, duplicates };\n}\n\nexport function inboxFileExists(guard: PathGuard, file: string): boolean {\n  return fs.existsSync(guard.assert(file));\n}\n"],"mappings":";;;;;;AAIA,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,kBAAkB;AAK3B,IAAM,iBAAiB;AAEhB,SAAS,cAAc,SAAyB;AACrD,SAAO,KAAK,KAAK,SAAS,qBAAqB;AACjD;AAEA,SAAS,aAAa,MAAsB;AAC1C,QAAM,UAAU,KAAK,QAAQ,UAAU,GAAG,EAAE,KAAK;AACjD,SAAO,QAAQ,SAAS,iBAAiB,QAAQ,MAAM,GAAG,cAAc,IAAI,WAAM;AACpF;AAEO,SAAS,YACd,OACA,MACA,MACW;AACX,QAAM,OAAkB;AAAA,IACtB,IAAI,KAAK,MAAM,WAAW,EAAE,MAAM,GAAG,CAAC;AAAA,IACtC,MAAM,KAAK;AAAA,IACX,IAAI,KAAK;AAAA,IACT,KAAK,KAAK;AAAA,IACV,MAAM,aAAa,KAAK,IAAI;AAAA,EAC9B;AACA,QAAM,OAAO,kBAAkB,OAAO,IAAI,KAAK;AAC/C,oBAAkB,OAAO,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI,IAAI;AACjE,SAAO;AACT;AAEO,SAAS,WAAW,OAAkB,MAAsB;AACjE,QAAM,MAAM,kBAAkB,OAAO,IAAI;AACzC,MAAI,CAAC,IAAK,QAAO;AACjB,SAAO,IAAI,MAAM,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;AACjD;AAOO,SAAS,WAAW,OAAkB,MAA2B;AACtE,QAAM,MAAM,kBAAkB,OAAO,IAAI;AACzC,MAAI,CAAC,IAAK,QAAO,CAAC;AAClB,QAAM,QAAqB,CAAC;AAC5B,aAAW,QAAQ,IAAI,MAAM,IAAI,GAAG;AAClC,UAAM,UAAU,KAAK,KAAK;AAC1B,QAAI,CAAC,QAAS;AACd,QAAI;AACF,YAAM,KAAK,KAAK,MAAM,OAAO,CAAc;AAAA,IAC7C,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,WAAW,OAAkB,MAAoB;AAC/D,oBAAkB,OAAO,MAAM,EAAE;AACnC;AAGO,SAAS,YAAY,OAAiC;AAC3D,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,MAAmB,CAAC;AAC1B,aAAW,MAAM,OAAO;AACtB,UAAM,MAAM,GAAG,GAAG,IAAI,IAAI,GAAG,GAAG;AAChC,QAAI,KAAK,IAAI,GAAG,EAAG;AACnB,SAAK,IAAI,GAAG;AACZ,QAAI,KAAK,EAAE;AAAA,EACb;AACA,SAAO;AACT;AAEO,SAAS,iBAAiB,OAAkB,MAAsE;AACvH,QAAM,MAAM,kBAAkB,OAAO,IAAI,KAAK;AAC9C,MAAI,QAAQ;AACZ,MAAI,UAAU;AACd,QAAM,OAAO,oBAAI,IAAY;AAC7B,MAAI,aAAa;AACjB,aAAW,QAAQ,IAAI,MAAM,IAAI,GAAG;AAClC,UAAM,UAAU,KAAK,KAAK;AAC1B,QAAI,CAAC,QAAS;AACd,QAAI;AACF,YAAM,KAAK,KAAK,MAAM,OAAO;AAC7B,eAAS;AACT,YAAM,MAAM,GAAG,GAAG,IAAI,IAAI,GAAG,GAAG;AAChC,UAAI,KAAK,IAAI,GAAG,EAAG,eAAc;AACjC,WAAK,IAAI,GAAG;AAAA,IACd,QAAQ;AACN,iBAAW;AAAA,IACb;AAAA,EACF;AACA,SAAO,EAAE,OAAO,SAAS,WAAW;AACtC;AAEO,SAAS,gBAAgB,OAAkB,MAAuB;AACvE,SAAO,GAAG,WAAW,MAAM,OAAO,IAAI,CAAC;AACzC;","names":[]}

package/dist/chunk-IFTFDHZX.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/core/paths.ts","../src/vault/vault.ts"],"sourcesContent":["// Workspace/data directory resolution and package asset location.\n//\n// The data dir is the ONLY directory the plugin writes to at runtime\n// (requirement 8). Resolution order: env override > plugin config > default\n// (packageRoot/data). All fs writes must go through the path guard created\n// from this dir (see core/path-guard.ts).\n\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nexport interface WorkspacePaths {\n  /** Guard boundary and the only writable tree at runtime. */\n  dataDir: string;\n  settingsDir: string;\n  logsDir: string;\n  tmpDir: string;\n  exportsDir: string;\n  /** Package root (where package.json lives). Read-only at runtime. */\n  packageRoot: string;\n  configDir: string;\n  assetsDir: string;\n}\n\nexport interface WorkspaceConfigInput {\n  dataDir?: string | null;\n}\n\nlet resolved: WorkspacePaths | null = null;\n\n/** Walk up from a module file to the directory containing package.json. */\nexport function findPackageRoot(startFile: string): string {\n  let dir = path.dirname(path.resolve(startFile));\n  for (;;) {\n    if (fs.existsSync(path.join(dir, 'package.json'))) return dir;\n    const parent = path.dirname(dir);\n    if (parent === dir) throw new Error('package.json not found above ' + startFile);\n    dir = parent;\n  }\n}\n\nexport function packageRoot(): string {\n  return findPackageRoot(fileURLToPath(import.meta.url));\n}\n\n/**\n * Resolve and create the workspace layout. Idempotent; must be called once\n * from the plugin entry before any fs write happens.\n */\nexport function initWorkspace(config: WorkspaceConfigInput = {}): WorkspacePaths {\n  if (resolved) return resolved;\n  const root = packageRoot();\n  const dataDir = path.resolve(\n    process.env.HEARTBEAT_DATA_DIR || config.dataDir || path.join(root, 'data'),\n  );\n  const paths: WorkspacePaths = {\n    dataDir,\n    settingsDir: path.join(dataDir, 'settings'),\n    logsDir: path.join(dataDir, 'logs'),\n    tmpDir: path.join(dataDir, 'tmp'),\n    exportsDir: path.join(dataDir, 'exports'),\n    packageRoot: root,\n    configDir: path.join(root, 'config'),\n    assetsDir: path.join(root, 'assets'),\n  };\n  // Bootstrap creation happens before the guard exists; creating exactly one\n  // directory tree at a known location is the safe window for this.\n  for (const dir of [\n    paths.dataDir,\n    paths.settingsDir,\n    paths.logsDir,\n    paths.tmpDir,\n    paths.exportsDir,\n  ]) {\n    fs.mkdirSync(dir, { recursive: true });\n  }\n  resolved = paths;\n  return paths;\n}\n\n/** Access already-initialized paths. Throws if initWorkspace was not called. */\nexport function workspace(): WorkspacePaths {\n  if (!resolved) throw new Error('workspace not initialized: call initWorkspace() first');\n  return resolved;\n}\n\n/** Test-only: forget the resolved singleton so a later init re-resolves. */\nexport function resetWorkspaceForTest(): void {\n  resolved = null;\n}\n","// Transparent encryption read/write layer (port of v1 lib/vault.mjs).\n//\n// Mechanism: Node <-> vault.ps1 hand off through temp files (plain text\n// windows are millisecond-scale). v2 hardening over v1:\n//   - plaintext temp files live ONLY under data/tmp (never beside targets);\n//   - every path passes the workspace guard before reaching PowerShell;\n//   - encrypted output lands via same-volume rename (atomic replace).\n// Encryption failure is fail-closed: throw, never fall back to plaintext.\n\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { spawnSync } from 'node:child_process';\nimport { randomUUID } from 'node:crypto';\nimport type { PathGuard } from '../core/path-guard.js';\nimport { workspace } from '../core/paths.js';\n\nconst MAGIC = Buffer.from('KHBV1', 'ascii');\nconst VAULT_TIMEOUT_MS = 30_000;\n\nlet cachedScriptPath: string | null = null;\n\nfunction vaultScriptPath(): string {\n  if (cachedScriptPath) return cachedScriptPath;\n  const script = path.join(workspace().assetsDir, 'vault.ps1');\n  if (!fs.existsSync(script)) throw new Error(`vault script missing: ${script}`);\n  cachedScriptPath = script;\n  return script;\n}\n\nfunction tmpPlainName(target: string): string {\n  return path.join(workspace().tmpDir, `.${path.basename(target)}.${randomUUID().slice(0, 8)}.plain`);\n}\n\nfunction tmpEncName(target: string): string {\n  return path.join(workspace().tmpDir, `.${path.basename(target)}.${randomUUID().slice(0, 8)}.enc`);\n}\n\nfunction runVault(guard: PathGuard, args: string[]): void {\n  const r = spawnSync(\n    'powershell.exe',\n    ['-NoProfile', '-ExecutionPolicy', 'Bypass', '-File', vaultScriptPath(), ...args],\n    { timeout: VAULT_TIMEOUT_MS, encoding: 'utf8' },\n  );\n  if (r.error) throw new Error(`vault spawn failed: ${String(r.error)}`);\n  if (r.status !== 0) {\n    const detail = (r.stderr || r.stdout || '').trim().split('\\n').slice(-3).join('; ');\n    throw new Error(`vault ${args[0]} failed (exit ${r.status}): ${detail}`);\n  }\n}\n\n/** KHBV1 header check without reading the whole file. */\nexport function isEncrypted(file: string): boolean {\n  if (!fs.existsSync(file)) return false;\n  const fd = fs.openSync(file, 'r');\n  try {\n    const hdr = Buffer.alloc(MAGIC.length);\n    const read = fs.readSync(fd, hdr, 0, hdr.length, 0);\n    return read === MAGIC.length && hdr.equals(MAGIC);\n  } finally {\n    fs.closeSync(fd);\n  }\n}\n\n/**\n * Read JSON: encrypted files are decrypted to a data/tmp plaintext window\n * that is shredded immediately after parse; plaintext stays compatible.\n */\nexport function loadJson<T>(guard: PathGuard, file: string): T | null {\n  const f = guard.assert(file);\n  if (!fs.existsSync(f)) return null;\n  if (!isEncrypted(f)) {\n    try {\n      return JSON.parse(fs.readFileSync(f, 'utf8')) as T;\n    } catch {\n      return null;\n    }\n  }\n  const tmp = tmpPlainName(f);\n  try {\n    runVault(guard, ['unprotect', '-InFile', f, '-OutFile', tmp]);\n    return JSON.parse(fs.readFileSync(tmp, 'utf8')) as T;\n  } finally {\n    fs.rmSync(tmp, { force: true });\n  }\n}\n\n/** Write JSON: plaintext window in data/tmp -> DPAPI encrypt -> atomic rename into place. */\nexport function saveJson(guard: PathGuard, file: string, value: unknown): void {\n  const f = guard.assert(file);\n  fs.mkdirSync(path.dirname(f), { recursive: true });\n  const plain = tmpPlainName(f);\n  const enc = tmpEncName(f);\n  try {\n    fs.writeFileSync(plain, JSON.stringify(value, null, 2), 'utf8');\n    runVault(guard, ['protect', '-InFile', plain, '-OutFile', enc]);\n    fs.renameSync(enc, f);\n  } finally {\n    fs.rmSync(plain, { force: true });\n    fs.rmSync(enc, { force: true });\n  }\n}\n\n/** Read a plaintext UTF-8 text file (ledger etc.), with fallback. */\nexport function readText(guard: PathGuard, file: string, fallback = ''): string {\n  const f = guard.assert(file);\n  try {\n    return fs.readFileSync(f, 'utf8');\n  } catch {\n    return fallback;\n  }\n}\n\n/** Write a plaintext UTF-8 text file atomically (ledger etc.). */\nexport function writeText(guard: PathGuard, file: string, content: string): void {\n  const f = guard.assert(file);\n  fs.mkdirSync(path.dirname(f), { recursive: true });\n  const tmp = tmpPlainName(f);\n  try {\n    fs.writeFileSync(tmp, content, 'utf8');\n    fs.renameSync(tmp, f);\n  } finally {\n    fs.rmSync(tmp, { force: true });\n  }\n}\n\n/** Read an encrypted UTF-8 text file (e.g. seeds.jsonl). Missing -> null. */\nexport function loadEncryptedText(guard: PathGuard, file: string): string | null {\n  const f = guard.assert(file);\n  if (!fs.existsSync(f)) return null;\n  if (!isEncrypted(f)) return fs.readFileSync(f, 'utf8');\n  const tmp = tmpPlainName(f);\n  try {\n    runVault(guard, ['unprotect', '-InFile', f, '-OutFile', tmp]);\n    return fs.readFileSync(tmp, 'utf8');\n  } finally {\n    fs.rmSync(tmp, { force: true });\n  }\n}\n\n/** Write an encrypted UTF-8 text file atomically. */\nexport function saveEncryptedText(guard: PathGuard, file: string, content: string): void {\n  const f = guard.assert(file);\n  fs.mkdirSync(path.dirname(f), { recursive: true });\n  const plain = tmpPlainName(f);\n  const enc = tmpEncName(f);\n  try {\n    fs.writeFileSync(plain, content, 'utf8');\n    runVault(guard, ['protect', '-InFile', plain, '-OutFile', enc]);\n    fs.renameSync(enc, f);\n  } finally {\n    fs.rmSync(plain, { force: true });\n    fs.rmSync(enc, { force: true });\n  }\n}\n\n/** Encrypt any binary file (e.g. screenshot): inFile -> encrypted outFile. */\nexport function encryptFile(guard: PathGuard, inFile: string, outFile: string): void {\n  const inPath = guard.assert(inFile);\n  const outPath = guard.assert(outFile);\n  fs.mkdirSync(path.dirname(outPath), { recursive: true });\n  const enc = tmpEncName(outPath);\n  try {\n    runVault(guard, ['protect', '-InFile', inPath, '-OutFile', enc]);\n    fs.renameSync(enc, outPath);\n  } finally {\n    fs.rmSync(enc, { force: true });\n  }\n}\n\n/**\n * Decrypt an encrypted file to a plaintext output (caller must place the\n * output under data/tmp and delete it after use; \"use then burn\" discipline).\n */\nexport function decryptFile(guard: PathGuard, inFile: string, outFile: string): void {\n  const inPath = guard.assert(inFile);\n  const outPath = guard.assert(outFile);\n  fs.mkdirSync(path.dirname(outPath), { recursive: true });\n  runVault(guard, ['unprotect', '-InFile', inPath, '-OutFile', outPath]);\n}\n"],"mappings":";AAOA,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,qBAAqB;AAmB9B,IAAI,WAAkC;AAG/B,SAAS,gBAAgB,WAA2B;AACzD,MAAI,MAAM,KAAK,QAAQ,KAAK,QAAQ,SAAS,CAAC;AAC9C,aAAS;AACP,QAAI,GAAG,WAAW,KAAK,KAAK,KAAK,cAAc,CAAC,EAAG,QAAO;AAC1D,UAAM,SAAS,KAAK,QAAQ,GAAG;AAC/B,QAAI,WAAW,IAAK,OAAM,IAAI,MAAM,kCAAkC,SAAS;AAC/E,UAAM;AAAA,EACR;AACF;AAEO,SAAS,cAAsB;AACpC,SAAO,gBAAgB,cAAc,YAAY,GAAG,CAAC;AACvD;AAMO,SAAS,cAAc,SAA+B,CAAC,GAAmB;AAC/E,MAAI,SAAU,QAAO;AACrB,QAAM,OAAO,YAAY;AACzB,QAAM,UAAU,KAAK;AAAA,IACnB,QAAQ,IAAI,sBAAsB,OAAO,WAAW,KAAK,KAAK,MAAM,MAAM;AAAA,EAC5E;AACA,QAAM,QAAwB;AAAA,IAC5B;AAAA,IACA,aAAa,KAAK,KAAK,SAAS,UAAU;AAAA,IAC1C,SAAS,KAAK,KAAK,SAAS,MAAM;AAAA,IAClC,QAAQ,KAAK,KAAK,SAAS,KAAK;AAAA,IAChC,YAAY,KAAK,KAAK,SAAS,SAAS;AAAA,IACxC,aAAa;AAAA,IACb,WAAW,KAAK,KAAK,MAAM,QAAQ;AAAA,IACnC,WAAW,KAAK,KAAK,MAAM,QAAQ;AAAA,EACrC;AAGA,aAAW,OAAO;AAAA,IAChB,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,EACR,GAAG;AACD,OAAG,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AAAA,EACvC;AACA,aAAW;AACX,SAAO;AACT;AAGO,SAAS,YAA4B;AAC1C,MAAI,CAAC,SAAU,OAAM,IAAI,MAAM,uDAAuD;AACtF,SAAO;AACT;;;AC3EA,OAAOA,SAAQ;AACf,OAAOC,WAAU;AACjB,SAAS,iBAAiB;AAC1B,SAAS,kBAAkB;AAI3B,IAAM,QAAQ,OAAO,KAAK,SAAS,OAAO;AAC1C,IAAM,mBAAmB;AAEzB,IAAI,mBAAkC;AAEtC,SAAS,kBAA0B;AACjC,MAAI,iBAAkB,QAAO;AAC7B,QAAM,SAASC,MAAK,KAAK,UAAU,EAAE,WAAW,WAAW;AAC3D,MAAI,CAACC,IAAG,WAAW,MAAM,EAAG,OAAM,IAAI,MAAM,yBAAyB,MAAM,EAAE;AAC7E,qBAAmB;AACnB,SAAO;AACT;AAEA,SAAS,aAAa,QAAwB;AAC5C,SAAOD,MAAK,KAAK,UAAU,EAAE,QAAQ,IAAIA,MAAK,SAAS,MAAM,CAAC,IAAI,WAAW,EAAE,MAAM,GAAG,CAAC,CAAC,QAAQ;AACpG;AAEA,SAAS,WAAW,QAAwB;AAC1C,SAAOA,MAAK,KAAK,UAAU,EAAE,QAAQ,IAAIA,MAAK,SAAS,MAAM,CAAC,IAAI,WAAW,EAAE,MAAM,GAAG,CAAC,CAAC,MAAM;AAClG;AAEA,SAAS,SAAS,OAAkB,MAAsB;AACxD,QAAM,IAAI;AAAA,IACR;AAAA,IACA,CAAC,cAAc,oBAAoB,UAAU,SAAS,gBAAgB,GAAG,GAAG,IAAI;AAAA,IAChF,EAAE,SAAS,kBAAkB,UAAU,OAAO;AAAA,EAChD;AACA,MAAI,EAAE,MAAO,OAAM,IAAI,MAAM,uBAAuB,OAAO,EAAE,KAAK,CAAC,EAAE;AACrE,MAAI,EAAE,WAAW,GAAG;AAClB,UAAM,UAAU,EAAE,UAAU,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,IAAI;AAClF,UAAM,IAAI,MAAM,SAAS,KAAK,CAAC,CAAC,iBAAiB,EAAE,MAAM,MAAM,MAAM,EAAE;AAAA,EACzE;AACF;AAGO,SAAS,YAAY,MAAuB;AACjD,MAAI,CAACC,IAAG,WAAW,IAAI,EAAG,QAAO;AACjC,QAAM,KAAKA,IAAG,SAAS,MAAM,GAAG;AAChC,MAAI;AACF,UAAM,MAAM,OAAO,MAAM,MAAM,MAAM;AACrC,UAAM,OAAOA,IAAG,SAAS,IAAI,KAAK,GAAG,IAAI,QAAQ,CAAC;AAClD,WAAO,SAAS,MAAM,UAAU,IAAI,OAAO,KAAK;AAAA,EAClD,UAAE;AACA,IAAAA,IAAG,UAAU,EAAE;AAAA,EACjB;AACF;AAMO,SAAS,SAAY,OAAkB,MAAwB;AACpE,QAAM,IAAI,MAAM,OAAO,IAAI;AAC3B,MAAI,CAACA,IAAG,WAAW,CAAC,EAAG,QAAO;AAC9B,MAAI,CAAC,YAAY,CAAC,GAAG;AACnB,QAAI;AACF,aAAO,KAAK,MAAMA,IAAG,aAAa,GAAG,MAAM,CAAC;AAAA,IAC9C,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,QAAM,MAAM,aAAa,CAAC;AAC1B,MAAI;AACF,aAAS,OAAO,CAAC,aAAa,WAAW,GAAG,YAAY,GAAG,CAAC;AAC5D,WAAO,KAAK,MAAMA,IAAG,aAAa,KAAK,MAAM,CAAC;AAAA,EAChD,UAAE;AACA,IAAAA,IAAG,OAAO,KAAK,EAAE,OAAO,KAAK,CAAC;AAAA,EAChC;AACF;AAGO,SAAS,SAAS,OAAkB,MAAc,OAAsB;AAC7E,QAAM,IAAI,MAAM,OAAO,IAAI;AAC3B,EAAAA,IAAG,UAAUD,MAAK,QAAQ,CAAC,GAAG,EAAE,WAAW,KAAK,CAAC;AACjD,QAAM,QAAQ,aAAa,CAAC;AAC5B,QAAM,MAAM,WAAW,CAAC;AACxB,MAAI;AACF,IAAAC,IAAG,cAAc,OAAO,KAAK,UAAU,OAAO,MAAM,CAAC,GAAG,MAAM;AAC9D,aAAS,OAAO,CAAC,WAAW,WAAW,OAAO,YAAY,GAAG,CAAC;AAC9D,IAAAA,IAAG,WAAW,KAAK,CAAC;AAAA,EACtB,UAAE;AACA,IAAAA,IAAG,OAAO,OAAO,EAAE,OAAO,KAAK,CAAC;AAChC,IAAAA,IAAG,OAAO,KAAK,EAAE,OAAO,KAAK,CAAC;AAAA,EAChC;AACF;AAGO,SAAS,SAAS,OAAkB,MAAc,WAAW,IAAY;AAC9E,QAAM,IAAI,MAAM,OAAO,IAAI;AAC3B,MAAI;AACF,WAAOA,IAAG,aAAa,GAAG,MAAM;AAAA,EAClC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,UAAU,OAAkB,MAAc,SAAuB;AAC/E,QAAM,IAAI,MAAM,OAAO,IAAI;AAC3B,EAAAA,IAAG,UAAUD,MAAK,QAAQ,CAAC,GAAG,EAAE,WAAW,KAAK,CAAC;AACjD,QAAM,MAAM,aAAa,CAAC;AAC1B,MAAI;AACF,IAAAC,IAAG,cAAc,KAAK,SAAS,MAAM;AACrC,IAAAA,IAAG,WAAW,KAAK,CAAC;AAAA,EACtB,UAAE;AACA,IAAAA,IAAG,OAAO,KAAK,EAAE,OAAO,KAAK,CAAC;AAAA,EAChC;AACF;AAGO,SAAS,kBAAkB,OAAkB,MAA6B;AAC/E,QAAM,IAAI,MAAM,OAAO,IAAI;AAC3B,MAAI,CAACA,IAAG,WAAW,CAAC,EAAG,QAAO;AAC9B,MAAI,CAAC,YAAY,CAAC,EAAG,QAAOA,IAAG,aAAa,GAAG,MAAM;AACrD,QAAM,MAAM,aAAa,CAAC;AAC1B,MAAI;AACF,aAAS,OAAO,CAAC,aAAa,WAAW,GAAG,YAAY,GAAG,CAAC;AAC5D,WAAOA,IAAG,aAAa,KAAK,MAAM;AAAA,EACpC,UAAE;AACA,IAAAA,IAAG,OAAO,KAAK,EAAE,OAAO,KAAK,CAAC;AAAA,EAChC;AACF;AAGO,SAAS,kBAAkB,OAAkB,MAAc,SAAuB;AACvF,QAAM,IAAI,MAAM,OAAO,IAAI;AAC3B,EAAAA,IAAG,UAAUD,MAAK,QAAQ,CAAC,GAAG,EAAE,WAAW,KAAK,CAAC;AACjD,QAAM,QAAQ,aAAa,CAAC;AAC5B,QAAM,MAAM,WAAW,CAAC;AACxB,MAAI;AACF,IAAAC,IAAG,cAAc,OAAO,SAAS,MAAM;AACvC,aAAS,OAAO,CAAC,WAAW,WAAW,OAAO,YAAY,GAAG,CAAC;AAC9D,IAAAA,IAAG,WAAW,KAAK,CAAC;AAAA,EACtB,UAAE;AACA,IAAAA,IAAG,OAAO,OAAO,EAAE,OAAO,KAAK,CAAC;AAChC,IAAAA,IAAG,OAAO,KAAK,EAAE,OAAO,KAAK,CAAC;AAAA,EAChC;AACF;AAGO,SAAS,YAAY,OAAkB,QAAgB,SAAuB;AACnF,QAAM,SAAS,MAAM,OAAO,MAAM;AAClC,QAAM,UAAU,MAAM,OAAO,OAAO;AACpC,EAAAA,IAAG,UAAUD,MAAK,QAAQ,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;AACvD,QAAM,MAAM,WAAW,OAAO;AAC9B,MAAI;AACF,aAAS,OAAO,CAAC,WAAW,WAAW,QAAQ,YAAY,GAAG,CAAC;AAC/D,IAAAC,IAAG,WAAW,KAAK,OAAO;AAAA,EAC5B,UAAE;AACA,IAAAA,IAAG,OAAO,KAAK,EAAE,OAAO,KAAK,CAAC;AAAA,EAChC;AACF;AAMO,SAAS,YAAY,OAAkB,QAAgB,SAAuB;AACnF,QAAM,SAAS,MAAM,OAAO,MAAM;AAClC,QAAM,UAAU,MAAM,OAAO,OAAO;AACpC,EAAAA,IAAG,UAAUD,MAAK,QAAQ,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;AACvD,WAAS,OAAO,CAAC,aAAa,WAAW,QAAQ,YAAY,OAAO,CAAC;AACvE;","names":["fs","path","path","fs"]}

package/dist/chunk-IPOZFZPY.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/vault/migrate.ts"],"sourcesContent":["// Cross-machine migration (v1.8.0). DPAPI binds the sensitive stores to one\r\n// machine + account, so a new machine cannot read them — this module packs\r\n// the memory files into ONE passphrase-encrypted container (AES-256-GCM,\r\n// scrypt-derived key, node:crypto only) that can travel safely, and restores\r\n// them on the other side re-encrypted with the LOCAL DPAPI.\r\n//\r\n// Restore is byte-identical: for each file we record whether it was DPAPI\r\n// encrypted on disk (isEncrypted magic check) and write it back through the\r\n// same path — no per-module write semantics to keep in sync. Existing files\r\n// are backed up before overwrite (rule 4).\r\n\r\nimport fs from 'node:fs';\r\nimport path from 'node:path';\r\nimport {\r\n  createCipheriv,\r\n  createDecipheriv,\r\n  randomBytes,\r\n  scryptSync,\r\n} from 'node:crypto';\r\nimport type { PathGuard } from '../core/path-guard.js';\r\nimport type { WorkspacePaths } from '../core/paths.js';\r\nimport { isEncrypted, loadEncryptedText, saveEncryptedText } from './vault.js';\r\n\r\nexport const MIGRATE_MAGIC = 'HBMIG1';\r\nexport const MIGRATE_VERSION = 1;\r\n/** scrypt cost for NEW containers (2^14 = Node's default, 16 MiB of work).\r\n *  Reading is parameterised by the container's own kdf.N, so raising this\r\n *  never orphans an existing export. */\r\nconst KDF_N = 163_84;\r\n/** Hard bounds for a container-supplied N: a hostile/broken container must not\r\n *  be able to make the import allocate unbounded memory. */\r\nconst KDF_N_MIN = 1 << 12; // 2^12 = 4 MiB\r\nconst KDF_N_MAX = 1 << 16; // 2^16 = 64 MiB\r\n/** Node's scrypt maxmem defaults to 32 MiB, which N=2^15 already exceeds — a\r\n *  legal container with a larger N would fail without an explicit cap. */\r\nconst SCRYPT_MAXMEM = 128 * 1024 * 1024;\r\nconst KEY_LEN = 32;\r\n\r\n/** Memory-relevant runtime files (dataDir-relative). Deliberately NOT here:\r\n * gate.json (machine-local counters + home session id — the new machine\r\n * builds its own) and screen snapshots (per-beat transients, not memory). */\r\nexport const MIGRATE_FILES = [\r\n  'profile.json',\r\n  'profile_snapshot.json',\r\n  'profile_inbox.jsonl',\r\n  'profile_journal.jsonl',\r\n  'profile_rhythm.json',\r\n  'sent.json',\r\n  'browse.json',\r\n  'seeds.jsonl',\r\n  'ledger.md',\r\n  'cursors.json',\r\n  // v1.9.0: persona report log + topic preference stats\r\n  'seed_report.jsonl',\r\n  'preference.json',\r\n];\r\n\r\nexport interface MigrateEntry {\r\n  path: string; // dataDir-relative\r\n  encrypted: boolean; // was DPAPI-encrypted on the source machine\r\n  content: string;\r\n}\r\n\r\nexport interface MigrateProgress {\r\n  packed: string[];\r\n  missing: string[];\r\n}\r\n\r\nfunction collectWeeklyFiles(guard: PathGuard, paths: WorkspacePaths): string[] {\r\n  const dir = path.join(paths.dataDir, 'weekly');\r\n  try {\r\n    return fs.readdirSync(guard.assert(dir))\r\n      .filter((f) => f.endsWith('.json'))\r\n      .map((f) => path.join('weekly', f).replace(/\\\\/g, '/'));\r\n  } catch {\r\n    return [];\r\n  }\r\n}\r\n\r\n/** Journal archive shards (snapshot rotation output) travel with the memory. */\r\nfunction collectJournalArchives(guard: PathGuard, paths: WorkspacePaths): string[] {\r\n  try {\r\n    return fs.readdirSync(guard.assert(paths.dataDir))\r\n      .filter((f) => f.startsWith('profile_journal.archive-') && f.endsWith('.jsonl'));\r\n  } catch {\r\n    return [];\r\n  }\r\n}\r\n\r\n/** Read every migration file. A DPAPI file that fails to decrypt aborts the\r\n * export — a silent half-memory container would be worse than a loud error. */\r\nexport function collectMigrationEntries(guard: PathGuard, paths: WorkspacePaths): { entries: MigrateEntry[]; progress: MigrateProgress } {\r\n  const entries: MigrateEntry[] = [];\r\n  const packed: string[] = [];\r\n  const missing: string[] = [];\r\n  const rels = [...MIGRATE_FILES, ...collectJournalArchives(guard, paths), ...collectWeeklyFiles(guard, paths)];\r\n  for (const rel of rels) {\r\n    const abs = path.join(paths.dataDir, rel);\r\n    let absCanon: string;\r\n    try {\r\n      absCanon = guard.assert(abs);\r\n    } catch {\r\n      missing.push(rel);\r\n      continue;\r\n    }\r\n    if (!fs.existsSync(absCanon)) {\r\n      missing.push(rel);\r\n      continue;\r\n    }\r\n    const encrypted = isEncrypted(absCanon);\r\n    const content = encrypted\r\n      ? loadEncryptedText(guard, absCanon) ?? (() => { throw new Error(`cannot decrypt ${rel} on this machine`); })()\r\n      : fs.readFileSync(absCanon, 'utf8');\r\n    entries.push({ path: rel.replace(/\\\\/g, '/'), encrypted, content });\r\n    packed.push(rel);\r\n  }\r\n  return { entries, progress: { packed, missing } };\r\n}\r\n\r\n/** Derive the key with the container's OWN cost parameter. `n` must already\r\n *  have passed assertKdfN (export uses the current default). */\r\nfunction deriveKey(passphrase: string, salt: Buffer, n: number): Buffer {\r\n  return scryptSync(passphrase, salt, KEY_LEN, { N: n, r: 8, p: 1, maxmem: SCRYPT_MAXMEM });\r\n}\r\n\r\n/** Validate the scrypt cost carried by a container. A missing/absurd N is a\r\n *  BROKEN container — reported as such, never as \"wrong passphrase\" (before\r\n *  2026-10-06 the N in the container was ignored and the two were the same\r\n *  error, so raising the cost would have orphaned every old export). */\r\nfunction assertKdfN(v: unknown): number {\r\n  const n = Number(v);\r\n  if (!Number.isInteger(n) || n <= 0 || (n & (n - 1)) !== 0) {\r\n    throw new Error('migrate: container has invalid kdf parameters (N must be a power of two)');\r\n  }\r\n  if (n < KDF_N_MIN || n > KDF_N_MAX) {\r\n    throw new Error(`migrate: container kdf N ${n} is outside the supported range [${KDF_N_MIN}, ${KDF_N_MAX}]`);\r\n  }\r\n  return n;\r\n}\r\n\r\n/** Build the container file content. Everything sensitive lives inside the\r\n * ciphertext; the outer JSON carries only crypto parameters. */\r\nexport function encryptContainer(entries: MigrateEntry[], passphrase: string, now = new Date()): string {\r\n  if (!passphrase) throw new Error('migrate: passphrase must not be empty');\r\n  const salt = randomBytes(16);\r\n  const iv = randomBytes(12);\r\n  const key = deriveKey(passphrase, salt, KDF_N);\r\n  const cipher = createCipheriv('aes-256-gcm', key, iv);\r\n  const plain = Buffer.from(JSON.stringify({ version: MIGRATE_VERSION, createdAt: now.toISOString(), files: entries }), 'utf8');\r\n  const data = Buffer.concat([cipher.update(plain), cipher.final()]);\r\n  const tag = cipher.getAuthTag();\r\n  return JSON.stringify({\r\n    magic: MIGRATE_MAGIC,\r\n    kdf: { name: 'scrypt', salt: salt.toString('hex'), N: KDF_N },\r\n    iv: iv.toString('hex'),\r\n    tag: tag.toString('hex'),\r\n    data: data.toString('base64'),\r\n  }, null, 1) + '\\n';\r\n}\r\n\r\n/** Parse + decrypt a container. Throws (loudly) on a wrong passphrase or a\r\n * corrupted file — never returns partial data. */\r\nexport function decryptContainer(text: string, passphrase: string): { createdAt: string; files: MigrateEntry[] } {\r\n  let outer: { magic?: string; kdf?: { salt?: string; N?: unknown }; iv?: string; tag?: string; data?: string };\r\n  try {\r\n    outer = JSON.parse(text);\r\n  } catch {\r\n    throw new Error('migrate: not a migration container (bad JSON)');\r\n  }\r\n  if (outer.magic !== MIGRATE_MAGIC) throw new Error('migrate: not a migration container (bad magic)');\r\n  const n = assertKdfN(outer.kdf?.N);\r\n  const salt = Buffer.from(String(outer.kdf?.salt ?? ''), 'hex');\r\n  const iv = Buffer.from(String(outer.iv ?? ''), 'hex');\r\n  const tag = Buffer.from(String(outer.tag ?? ''), 'hex');\r\n  const data = Buffer.from(String(outer.data ?? ''), 'base64');\r\n  const key = deriveKey(passphrase, salt, n);\r\n  const decipher = createDecipheriv('aes-256-gcm', key, iv);\r\n  decipher.setAuthTag(tag);\r\n  let plain: Buffer;\r\n  try {\r\n    plain = Buffer.concat([decipher.update(data), decipher.final()]);\r\n  } catch {\r\n    throw new Error('migrate: wrong passphrase or corrupted container');\r\n  }\r\n  const inner = JSON.parse(plain.toString('utf8')) as { version: number; createdAt: string; files: MigrateEntry[] };\r\n  if (inner.version !== MIGRATE_VERSION) throw new Error(`migrate: unsupported container version ${inner.version}`);\r\n  if (!Array.isArray(inner.files)) throw new Error('migrate: container has no file list');\r\n  return { createdAt: inner.createdAt, files: inner.files };\r\n}\r\n\r\nexport interface MigrateImportResult {\r\n  restored: string[];\r\n  backedUp: string[];\r\n  skipped: string[];\r\n}\r\n\r\n/** Restore entries into the local dataDir, re-encrypting DPAPI files with the\r\n * LOCAL machine key. Existing files are copied aside first. */\r\nexport function applyMigrationEntries(guard: PathGuard, paths: WorkspacePaths, files: MigrateEntry[], now = Date.now()): MigrateImportResult {\r\n  const restored: string[] = [];\r\n  const backedUp: string[] = [];\r\n  const skipped: string[] = [];\r\n  const stamp = new Date(now).toISOString().replace(/[-:T]/g, '').slice(0, 14);\r\n  for (const f of files) {\r\n    const rel = String(f.path ?? '');\r\n    // String-level rejection BEFORE the path is resolved: the guard's realpath\r\n    // check already refuses escapes, but an import must not depend on another\r\n    // module staying correct.\r\n    if (!rel || rel.includes('..') || path.isAbsolute(rel)) {\r\n      skipped.push(rel);\r\n      continue;\r\n    }\r\n    const abs = path.join(paths.dataDir, rel);\r\n    let absCanon: string;\r\n    try {\r\n      absCanon = guard.assert(abs);\r\n    } catch {\r\n      skipped.push(rel); // path refused by the guard — never write it\r\n      continue;\r\n    }\r\n    fs.mkdirSync(path.dirname(absCanon), { recursive: true });\r\n    if (fs.existsSync(absCanon)) {\r\n      fs.copyFileSync(absCanon, `${absCanon}.bak-migrate-${stamp}`);\r\n      backedUp.push(rel);\r\n    }\r\n    if (f.encrypted) saveEncryptedText(guard, absCanon, f.content);\r\n    else fs.writeFileSync(absCanon, f.content, 'utf8');\r\n    restored.push(rel);\r\n  }\r\n  return { restored, backedUp, skipped };\r\n}\r\n"],"mappings":";;;;;;;AAWA,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAKA,IAAM,gBAAgB;AACtB,IAAM,kBAAkB;AAI/B,IAAM,QAAQ;AAGd,IAAM,YAAY,KAAK;AACvB,IAAM,YAAY,KAAK;AAGvB,IAAM,gBAAgB,MAAM,OAAO;AACnC,IAAM,UAAU;AAKT,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AACF;AAaA,SAAS,mBAAmB,OAAkB,OAAiC;AAC7E,QAAM,MAAM,KAAK,KAAK,MAAM,SAAS,QAAQ;AAC7C,MAAI;AACF,WAAO,GAAG,YAAY,MAAM,OAAO,GAAG,CAAC,EACpC,OAAO,CAAC,MAAM,EAAE,SAAS,OAAO,CAAC,EACjC,IAAI,CAAC,MAAM,KAAK,KAAK,UAAU,CAAC,EAAE,QAAQ,OAAO,GAAG,CAAC;AAAA,EAC1D,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAGA,SAAS,uBAAuB,OAAkB,OAAiC;AACjF,MAAI;AACF,WAAO,GAAG,YAAY,MAAM,OAAO,MAAM,OAAO,CAAC,EAC9C,OAAO,CAAC,MAAM,EAAE,WAAW,0BAA0B,KAAK,EAAE,SAAS,QAAQ,CAAC;AAAA,EACnF,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAIO,SAAS,wBAAwB,OAAkB,OAA+E;AACvI,QAAM,UAA0B,CAAC;AACjC,QAAM,SAAmB,CAAC;AAC1B,QAAM,UAAoB,CAAC;AAC3B,QAAM,OAAO,CAAC,GAAG,eAAe,GAAG,uBAAuB,OAAO,KAAK,GAAG,GAAG,mBAAmB,OAAO,KAAK,CAAC;AAC5G,aAAW,OAAO,MAAM;AACtB,UAAM,MAAM,KAAK,KAAK,MAAM,SAAS,GAAG;AACxC,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,OAAO,GAAG;AAAA,IAC7B,QAAQ;AACN,cAAQ,KAAK,GAAG;AAChB;AAAA,IACF;AACA,QAAI,CAAC,GAAG,WAAW,QAAQ,GAAG;AAC5B,cAAQ,KAAK,GAAG;AAChB;AAAA,IACF;AACA,UAAM,YAAY,YAAY,QAAQ;AACtC,UAAM,UAAU,YACZ,kBAAkB,OAAO,QAAQ,MAAM,MAAM;AAAE,YAAM,IAAI,MAAM,kBAAkB,GAAG,kBAAkB;AAAA,IAAG,GAAG,IAC5G,GAAG,aAAa,UAAU,MAAM;AACpC,YAAQ,KAAK,EAAE,MAAM,IAAI,QAAQ,OAAO,GAAG,GAAG,WAAW,QAAQ,CAAC;AAClE,WAAO,KAAK,GAAG;AAAA,EACjB;AACA,SAAO,EAAE,SAAS,UAAU,EAAE,QAAQ,QAAQ,EAAE;AAClD;AAIA,SAAS,UAAU,YAAoB,MAAc,GAAmB;AACtE,SAAO,WAAW,YAAY,MAAM,SAAS,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,QAAQ,cAAc,CAAC;AAC1F;AAMA,SAAS,WAAW,GAAoB;AACtC,QAAM,IAAI,OAAO,CAAC;AAClB,MAAI,CAAC,OAAO,UAAU,CAAC,KAAK,KAAK,MAAM,IAAK,IAAI,OAAQ,GAAG;AACzD,UAAM,IAAI,MAAM,0EAA0E;AAAA,EAC5F;AACA,MAAI,IAAI,aAAa,IAAI,WAAW;AAClC,UAAM,IAAI,MAAM,4BAA4B,CAAC,oCAAoC,SAAS,KAAK,SAAS,GAAG;AAAA,EAC7G;AACA,SAAO;AACT;AAIO,SAAS,iBAAiB,SAAyB,YAAoB,MAAM,oBAAI,KAAK,GAAW;AACtG,MAAI,CAAC,WAAY,OAAM,IAAI,MAAM,uCAAuC;AACxE,QAAM,OAAO,YAAY,EAAE;AAC3B,QAAM,KAAK,YAAY,EAAE;AACzB,QAAM,MAAM,UAAU,YAAY,MAAM,KAAK;AAC7C,QAAM,SAAS,eAAe,eAAe,KAAK,EAAE;AACpD,QAAM,QAAQ,OAAO,KAAK,KAAK,UAAU,EAAE,SAAS,iBAAiB,WAAW,IAAI,YAAY,GAAG,OAAO,QAAQ,CAAC,GAAG,MAAM;AAC5H,QAAM,OAAO,OAAO,OAAO,CAAC,OAAO,OAAO,KAAK,GAAG,OAAO,MAAM,CAAC,CAAC;AACjE,QAAM,MAAM,OAAO,WAAW;AAC9B,SAAO,KAAK,UAAU;AAAA,IACpB,OAAO;AAAA,IACP,KAAK,EAAE,MAAM,UAAU,MAAM,KAAK,SAAS,KAAK,GAAG,GAAG,MAAM;AAAA,IAC5D,IAAI,GAAG,SAAS,KAAK;AAAA,IACrB,KAAK,IAAI,SAAS,KAAK;AAAA,IACvB,MAAM,KAAK,SAAS,QAAQ;AAAA,EAC9B,GAAG,MAAM,CAAC,IAAI;AAChB;AAIO,SAAS,iBAAiB,MAAc,YAAkE;AAC/G,MAAI;AACJ,MAAI;AACF,YAAQ,KAAK,MAAM,IAAI;AAAA,EACzB,QAAQ;AACN,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AACA,MAAI,MAAM,UAAU,cAAe,OAAM,IAAI,MAAM,gDAAgD;AACnG,QAAM,IAAI,WAAW,MAAM,KAAK,CAAC;AACjC,QAAM,OAAO,OAAO,KAAK,OAAO,MAAM,KAAK,QAAQ,EAAE,GAAG,KAAK;AAC7D,QAAM,KAAK,OAAO,KAAK,OAAO,MAAM,MAAM,EAAE,GAAG,KAAK;AACpD,QAAM,MAAM,OAAO,KAAK,OAAO,MAAM,OAAO,EAAE,GAAG,KAAK;AACtD,QAAM,OAAO,OAAO,KAAK,OAAO,MAAM,QAAQ,EAAE,GAAG,QAAQ;AAC3D,QAAM,MAAM,UAAU,YAAY,MAAM,CAAC;AACzC,QAAM,WAAW,iBAAiB,eAAe,KAAK,EAAE;AACxD,WAAS,WAAW,GAAG;AACvB,MAAI;AACJ,MAAI;AACF,YAAQ,OAAO,OAAO,CAAC,SAAS,OAAO,IAAI,GAAG,SAAS,MAAM,CAAC,CAAC;AAAA,EACjE,QAAQ;AACN,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AACA,QAAM,QAAQ,KAAK,MAAM,MAAM,SAAS,MAAM,CAAC;AAC/C,MAAI,MAAM,YAAY,gBAAiB,OAAM,IAAI,MAAM,0CAA0C,MAAM,OAAO,EAAE;AAChH,MAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,EAAG,OAAM,IAAI,MAAM,qCAAqC;AACtF,SAAO,EAAE,WAAW,MAAM,WAAW,OAAO,MAAM,MAAM;AAC1D;AAUO,SAAS,sBAAsB,OAAkB,OAAuB,OAAuB,MAAM,KAAK,IAAI,GAAwB;AAC3I,QAAM,WAAqB,CAAC;AAC5B,QAAM,WAAqB,CAAC;AAC5B,QAAM,UAAoB,CAAC;AAC3B,QAAM,QAAQ,IAAI,KAAK,GAAG,EAAE,YAAY,EAAE,QAAQ,UAAU,EAAE,EAAE,MAAM,GAAG,EAAE;AAC3E,aAAW,KAAK,OAAO;AACrB,UAAM,MAAM,OAAO,EAAE,QAAQ,EAAE;AAI/B,QAAI,CAAC,OAAO,IAAI,SAAS,IAAI,KAAK,KAAK,WAAW,GAAG,GAAG;AACtD,cAAQ,KAAK,GAAG;AAChB;AAAA,IACF;AACA,UAAM,MAAM,KAAK,KAAK,MAAM,SAAS,GAAG;AACxC,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,OAAO,GAAG;AAAA,IAC7B,QAAQ;AACN,cAAQ,KAAK,GAAG;AAChB;AAAA,IACF;AACA,OAAG,UAAU,KAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AACxD,QAAI,GAAG,WAAW,QAAQ,GAAG;AAC3B,SAAG,aAAa,UAAU,GAAG,QAAQ,gBAAgB,KAAK,EAAE;AAC5D,eAAS,KAAK,GAAG;AAAA,IACnB;AACA,QAAI,EAAE,UAAW,mBAAkB,OAAO,UAAU,EAAE,OAAO;AAAA,QACxD,IAAG,cAAc,UAAU,EAAE,SAAS,MAAM;AACjD,aAAS,KAAK,GAAG;AAAA,EACnB;AACA,SAAO,EAAE,UAAU,UAAU,QAAQ;AACvC;","names":[]}

package/dist/chunk-J6ZTRFFW.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/core/bindings.ts"],"sourcesContent":["// Session bindings (design doc D13): binding = ①被心跳观察对话事件（inbox\n// 来源）＋ ②主动消息投递目标。Canonical storage: data/settings/bindings.json\n// (user layer - survives uninstall/reinstall, D15). Edited via CLI or hand.\n\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport type { PathGuard } from './path-guard.js';\n\nexport interface SessionBinding {\n  sessionId: string;\n  /** Deliver heartbeat expressions into this session's inbox (live only). */\n  deliver: boolean;\n  /** Observe this session's new user messages into the profile inbox. */\n  observe: boolean;\n  addedAt: string;\n}\n\nexport interface BindingsFile {\n  bindings: SessionBinding[];\n}\n\nexport function bindingsFilePath(settingsDir: string): string {\n  return path.join(settingsDir, 'bindings.json');\n}\n\nexport function loadBindings(guard: PathGuard, settingsDir: string): BindingsFile {\n  const file = bindingsFilePath(settingsDir);\n  try {\n    const raw = JSON.parse(fs.readFileSync(guard.assert(file), 'utf8')) as BindingsFile;\n    return { bindings: Array.isArray(raw.bindings) ? raw.bindings : [] };\n  } catch {\n    return { bindings: [] };\n  }\n}\n\nexport function saveBindings(guard: PathGuard, settingsDir: string, data: BindingsFile): void {\n  const file = guard.assert(bindingsFilePath(settingsDir));\n  fs.mkdirSync(path.dirname(file), { recursive: true });\n  fs.writeFileSync(file, JSON.stringify(data, null, 2), 'utf8');\n}\n\nexport function addBinding(\n  guard: PathGuard,\n  settingsDir: string,\n  sessionId: string,\n  opts: { deliver?: boolean; observe?: boolean } = {},\n): SessionBinding {\n  const data = loadBindings(guard, settingsDir);\n  const existing = data.bindings.find((b) => b.sessionId === sessionId);\n  if (existing) {\n    existing.deliver = opts.deliver ?? existing.deliver;\n    existing.observe = opts.observe ?? existing.observe;\n    saveBindings(guard, settingsDir, data);\n    return existing;\n  }\n  const binding: SessionBinding = {\n    sessionId,\n    deliver: opts.deliver ?? true,\n    observe: opts.observe ?? false,\n    addedAt: new Date().toISOString(),\n  };\n  data.bindings.push(binding);\n  saveBindings(guard, settingsDir, data);\n  return binding;\n}\n\nexport function removeBinding(guard: PathGuard, settingsDir: string, sessionId: string): boolean {\n  const data = loadBindings(guard, settingsDir);\n  const before = data.bindings.length;\n  data.bindings = data.bindings.filter((b) => b.sessionId !== sessionId);\n  if (data.bindings.length === before) return false;\n  saveBindings(guard, settingsDir, data);\n  return true;\n}\n\nexport function deliverTargets(data: BindingsFile): SessionBinding[] {\n  return data.bindings.filter((b) => b.deliver);\n}\n\nexport function observeTargets(data: BindingsFile): SessionBinding[] {\n  return data.bindings.filter((b) => b.observe);\n}\n"],"mappings":";AAIA,OAAO,QAAQ;AACf,OAAO,UAAU;AAgBV,SAAS,iBAAiB,aAA6B;AAC5D,SAAO,KAAK,KAAK,aAAa,eAAe;AAC/C;AAEO,SAAS,aAAa,OAAkB,aAAmC;AAChF,QAAM,OAAO,iBAAiB,WAAW;AACzC,MAAI;AACF,UAAM,MAAM,KAAK,MAAM,GAAG,aAAa,MAAM,OAAO,IAAI,GAAG,MAAM,CAAC;AAClE,WAAO,EAAE,UAAU,MAAM,QAAQ,IAAI,QAAQ,IAAI,IAAI,WAAW,CAAC,EAAE;AAAA,EACrE,QAAQ;AACN,WAAO,EAAE,UAAU,CAAC,EAAE;AAAA,EACxB;AACF;AAEO,SAAS,aAAa,OAAkB,aAAqB,MAA0B;AAC5F,QAAM,OAAO,MAAM,OAAO,iBAAiB,WAAW,CAAC;AACvD,KAAG,UAAU,KAAK,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AACpD,KAAG,cAAc,MAAM,KAAK,UAAU,MAAM,MAAM,CAAC,GAAG,MAAM;AAC9D;AAEO,SAAS,WACd,OACA,aACA,WACA,OAAiD,CAAC,GAClC;AAChB,QAAM,OAAO,aAAa,OAAO,WAAW;AAC5C,QAAM,WAAW,KAAK,SAAS,KAAK,CAAC,MAAM,EAAE,cAAc,SAAS;AACpE,MAAI,UAAU;AACZ,aAAS,UAAU,KAAK,WAAW,SAAS;AAC5C,aAAS,UAAU,KAAK,WAAW,SAAS;AAC5C,iBAAa,OAAO,aAAa,IAAI;AACrC,WAAO;AAAA,EACT;AACA,QAAM,UAA0B;AAAA,IAC9B;AAAA,IACA,SAAS,KAAK,WAAW;AAAA,IACzB,SAAS,KAAK,WAAW;AAAA,IACzB,UAAS,oBAAI,KAAK,GAAE,YAAY;AAAA,EAClC;AACA,OAAK,SAAS,KAAK,OAAO;AAC1B,eAAa,OAAO,aAAa,IAAI;AACrC,SAAO;AACT;AAEO,SAAS,cAAc,OAAkB,aAAqB,WAA4B;AAC/F,QAAM,OAAO,aAAa,OAAO,WAAW;AAC5C,QAAM,SAAS,KAAK,SAAS;AAC7B,OAAK,WAAW,KAAK,SAAS,OAAO,CAAC,MAAM,EAAE,cAAc,SAAS;AACrE,MAAI,KAAK,SAAS,WAAW,OAAQ,QAAO;AAC5C,eAAa,OAAO,aAAa,IAAI;AACrC,SAAO;AACT;AAEO,SAAS,eAAe,MAAsC;AACnE,SAAO,KAAK,SAAS,OAAO,CAAC,MAAM,EAAE,OAAO;AAC9C;AAEO,SAAS,eAAe,MAAsC;AACnE,SAAO,KAAK,SAAS,OAAO,CAAC,MAAM,EAAE,OAAO;AAC9C;","names":[]}

package/dist/chunk-PQTSXW4F.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/seeds/pool.ts","../src/seeds/types.ts"],"sourcesContent":["// Material pool engine (design doc §4). All four eviction rules are\n// deterministic code - no LLM involvement (§4.2). Storage: data/seeds.jsonl,\n// one seed per JSON line, DPAPI-encrypted at rest (D14).\n\nimport path from 'node:path';\nimport type { PathGuard } from '../core/path-guard.js';\nimport { loadEncryptedText, saveEncryptedText } from '../vault/vault.js';\nimport type { Policy } from '../config/schema.js';\nimport {\n  SEED_SOURCE_DEFAULT_CONFIDENCE,\n  emptySeedDb,\n  type Seed,\n  type SeedCategory,\n  type SeedDb,\n  type SeedRetireReason,\n  type SeedSource,\n  type SeedTag,\n} from './types.js';\n\nconst DAY_MS = 86_400_000;\n\n// ── lifecycle audit (2026-10-06 / v1.9.0) ───────────────────────────────\n// The pool used to mutate in silence: a seed could appear, be evicted for\n// capacity, or be dropped from the archive with nothing in the log. Every\n// mutator now takes an optional sink and reports what it did. IDs and\n// metadata ONLY — heartbeat.jsonl is plaintext by charter and must never\n// carry conversation text; the seed text itself stays in the DPAPI pool.\nexport type SeedAuditFn = (entry: Record<string, unknown>) => void;\n\nconst NO_AUDIT: SeedAuditFn = () => {};\n\n/** Audit must never break the pool (or the beat that called it). */\nfunction emit(audit: SeedAuditFn, entry: Record<string, unknown>): void {\n  try {\n    audit(entry);\n  } catch {\n    /* audit is diagnostic; a failed append is not a pool failure */\n  }\n}\n\n// Per-category pool caps (2026-09-18 spec ⑤): topic stock vs conversation-grown\n// chat material, decoupled from `source`; sum == the global maxActive default.\nexport const SEED_CATEGORY_CAPS: Record<SeedCategory, number> = { topic: 16, chat: 14 };\n\nconst CATEGORY_VALUES: readonly string[] = ['topic', 'chat'];\n\n/** Lenient category coercion for on-disk rows: anything missing/unknown (all\n *  pre-v1.5 seeds) counts as topic stock. */\nexport function normalizeCategory(v: unknown): SeedCategory {\n  return typeof v === 'string' && (CATEGORY_VALUES as readonly string[]).includes(v)\n    ? (v as SeedCategory)\n    : 'topic';\n}\n\nexport interface AddSeedInput {\n  text: string;\n  topic?: string;\n  tag?: SeedTag;\n  source?: SeedSource;\n  /** Loop role (spec ⑤); defaults from source: chat->chat, everything else->topic. */\n  category?: SeedCategory;\n  confidence?: number;\n}\n\nexport interface AddSeedResult {\n  kind: 'added' | 'merged' | 'duplicate';\n  seed: Seed;\n  evicted?: Seed;\n}\n\nexport interface GcReport {\n  consumed: number;\n  expired: number;\n  coldBench: number;\n  activeAfter: number;\n  /** v1.9.0: archived rows dropped to honor seeds.archiveCap (oldest first). */\n  archiveTrimmed: number;\n}\n\nexport const TTL_KEYS: readonly SeedTag[] = ['news', 'fandom', 'scene', 'promise'];\n\nexport function normalizeTag(tag: string | undefined): SeedTag {\n  if (tag && (TTL_KEYS as readonly string[]).includes(tag)) return tag as SeedTag;\n  return 'scene';\n}\n\nfunction parseIso(v: string): number {\n  const t = Date.parse(v);\n  return Number.isFinite(t) ? t : 0;\n}\n\n// ── storage ─────────────────────────────────────────────────────────────\n\nexport function seedsFilePath(dataDir: string): string {\n  return path.join(dataDir, 'seeds.jsonl');\n}\n\nexport function loadPool(guard: PathGuard, file: string): SeedDb {\n  const raw = loadEncryptedText(guard, file);\n  if (raw === null) return emptySeedDb();\n  const db = emptySeedDb();\n  for (const line of raw.split('\\n')) {\n    const trimmed = line.trim();\n    if (!trimmed) continue;\n    try {\n      const obj = JSON.parse(trimmed) as Seed;\n      if (typeof obj.id === 'string' && obj.id.startsWith('s')) {\n        // spec ⑤ loadPool tolerance: only the id is load-bearing; a missing or\n        // unknown category (every pre-v1.5 row) falls back to topic stock.\n        obj.category = normalizeCategory(obj.category);\n        db.seeds.push(obj);\n        const n = Number(obj.id.slice(1));\n        if (Number.isFinite(n) && n > db.seq) db.seq = n;\n      }\n    } catch {\n      // corrupt line: skip (pool is a cache; journal-level audit lives elsewhere)\n    }\n  }\n  return db;\n}\n\nexport function savePool(guard: PathGuard, file: string, db: SeedDb): void {\n  const body = db.seeds.map((s) => JSON.stringify(s)).join('\\n');\n  saveEncryptedText(guard, file, body ? body + '\\n' : '');\n}\n\n// ── queries ─────────────────────────────────────────────────────────────\n\nexport const activeSeeds = (db: SeedDb): Seed[] => db.seeds.filter((s) => s.status === 'active');\nexport const archivedSeeds = (db: SeedDb): Seed[] => db.seeds.filter((s) => s.status === 'archived');\n\n// ── eviction scoring (rule 4) ───────────────────────────────────────────\n\n/**\n * Comprehensive score (§4.2): freshness x0.4 + unused x0.3 + confidence x0.3.\n * Higher = keep. Lowest-scoring active is evicted when the pool is full.\n */\nexport function evictionScore(seed: Seed, policy: Policy, now: number): number {\n  const ttlDays = policy.seeds.ttlDays[seed.tag] || 14;\n  const daysStale = Math.max(0, (now - parseIso(seed.lastEvidenceAt)) / DAY_MS);\n  const freshness = Math.max(0, 1 - daysStale / ttlDays);\n  const unused = seed.used === 0 ? 1 : 1 / seed.used;\n  const w = policy.seeds.scoreWeights;\n  return freshness * w.freshness + unused * w.unused + seed.confidence * w.confidence;\n}\n\n/** Pick the eviction victim: unprotected actives first (§4.2 加权保护); with\n *  `category`, only that category's actives compete (spec ⑤ per-category caps). */\nexport function pickEvictionVictim(db: SeedDb, policy: Policy, now: number, category?: SeedCategory): Seed | null {\n  const actives = activeSeeds(db).filter((s) => category === undefined || normalizeCategory(s.category) === category);\n  if (actives.length === 0) return null;\n  const unprotected = actives.filter((s) => !s.protected);\n  const candidates = unprotected.length > 0 ? unprotected : actives;\n  let worst: Seed | null = null;\n  let worstScore = Number.POSITIVE_INFINITY;\n  for (const s of candidates) {\n    const score = evictionScore(s, policy, now);\n    if (score < worstScore) {\n      worstScore = score;\n      worst = s;\n    }\n  }\n  return worst;\n}\n\nfunction archiveSeed(seed: Seed, reason: SeedRetireReason, now: number): void {\n  seed.status = 'archived';\n  seed.retireReason = reason;\n  seed.retiredAt = new Date(now).toISOString();\n}\n\n/** Spec ④: chat-grown material is consumed ONCE (conversation freshness);\n *  every other category follows the policy-wide retireAfterUsed. */\nfunction retireLimit(s: Seed, policy: Policy): number {\n  return normalizeCategory(s.category) === 'chat' ? 1 : policy.seeds.retireAfterUsed;\n}\n\n// ── operations ──────────────────────────────────────────────────────────\n\nexport function addSeed(\n  guard: PathGuard,\n  file: string,\n  policy: Policy,\n  input: AddSeedInput,\n  now = Date.now(),\n  audit: SeedAuditFn = NO_AUDIT,\n): AddSeedResult {\n  const db = loadPool(guard, file);\n  const text = input.text.trim();\n  if (!text) throw new Error('seed text must not be empty');\n  const tag = normalizeTag(input.tag);\n  const source: SeedSource = input.source ?? 'chat';\n  const category = normalizeCategory(input.category ?? (source === 'chat' ? 'chat' : 'topic'));\n  const confidence = input.confidence ?? SEED_SOURCE_DEFAULT_CONFIDENCE[source];\n\n  // Exact-text dedup against actives.\n  const dup = activeSeeds(db).find((s) => s.text === text);\n  if (dup) return { kind: 'duplicate', seed: dup };\n\n  const nowIso = new Date(now).toISOString();\n  const ttlMs = (policy.seeds.ttlDays[tag] || 14) * DAY_MS;\n\n  // Same-topic merge (§4.3): collapse all same-topic actives + the new item.\n  const sameTopic = activeSeeds(db).filter((s) => s.topic === (input.topic ?? text.slice(0, 24)));\n  let seed: Seed;\n  if (sameTopic.length > 0) {\n    const kept = sameTopic[0]!;\n    kept.text = text; // brief takes the latest\n    kept.tag = tag;\n    kept.source = source;\n    kept.category = normalizeCategory(input.category ?? kept.category ?? category);\n    kept.confidence = Math.max(kept.confidence, confidence);\n    kept.used = sameTopic.reduce((acc, s) => acc + s.used, 0); // used accumulates\n    kept.lastEvidenceAt = [kept.lastEvidenceAt, nowIso, ...sameTopic.map((s) => s.lastEvidenceAt)]\n      .reduce((a, b) => (parseIso(b) > parseIso(a) ? b : a));\n    kept.expiresAt = new Date(Math.max(parseIso(kept.expiresAt), now + ttlMs)).toISOString();\n    kept.protected = kept.protected || source === 'hand' || (source === 'profile' && confidence >= 0.7);\n    // remove the other same-topic actives (merged into kept)\n    for (const extra of sameTopic.slice(1)) {\n      extra.status = 'archived';\n      extra.retireReason = 'completed';\n      extra.retiredAt = nowIso;\n      emit(audit, { event: 'seed_retired', id: extra.id, reason: 'completed', via: 'merge', into: kept.id });\n    }\n    seed = kept;\n    // capacity still applies after growth check below if kept is somehow over cap\n    if (activeSeeds(db).length > policy.seeds.maxActive) {\n      const victim = pickEvictionVictim(db, policy, now, normalizeCategory(kept.category));\n      if (victim && victim.id !== kept.id) {\n        archiveSeed(victim, 'pool_cap', now);\n        emit(audit, { event: 'seed_added', id: kept.id, kind: 'merged', tag: kept.tag, source: kept.source, category: kept.category, confidence: kept.confidence, mergedFrom: sameTopic.length - 1 });\n        emit(audit, { event: 'seed_retired', id: victim.id, reason: 'pool_cap', via: 'merge', into: kept.id });\n        savePool(guard, file, db);\n        return { kind: 'merged', seed: kept, evicted: victim };\n      }\n    }\n    emit(audit, { event: 'seed_added', id: kept.id, kind: 'merged', tag: kept.tag, source: kept.source, category: kept.category, confidence: kept.confidence, mergedFrom: sameTopic.length - 1 });\n    savePool(guard, file, db);\n    return { kind: 'merged', seed: kept };\n  }\n\n  // Capacity first (rules 4 + spec ⑤): per-category cap evicts within its own\n  // pool; the global cap evicts in the incoming seed's category (a full topic\n  // stock must not push chat material out and vice versa).\n  let evicted: Seed | undefined;\n  const catCount = activeSeeds(db).filter((s) => normalizeCategory(s.category) === category).length;\n  if (catCount >= SEED_CATEGORY_CAPS[category]) {\n    const victim = pickEvictionVictim(db, policy, now, category);\n    if (victim) {\n      archiveSeed(victim, 'pool_cap', now);\n      evicted = victim;\n    }\n  }\n  if (activeSeeds(db).length >= policy.seeds.maxActive) {\n    const victim = pickEvictionVictim(db, policy, now, category);\n    if (victim) {\n      archiveSeed(victim, 'pool_cap', now);\n      evicted = evicted ?? victim;\n    }\n  }\n\n  db.seq += 1;\n  seed = {\n    id: `s${db.seq}`,\n    text,\n    topic: input.topic ?? text.slice(0, 24),\n    tag,\n    source,\n    category,\n    confidence,\n    protected: source === 'hand' || (source === 'profile' && confidence >= 0.7),\n    used: 0,\n    bornAt: nowIso,\n    expiresAt: new Date(now + ttlMs).toISOString(),\n    lastUsedAt: null,\n    lastEvidenceAt: nowIso,\n    status: 'active',\n  };\n  db.seeds.push(seed);\n  emit(audit, { event: 'seed_added', id: seed.id, kind: 'added', tag: seed.tag, source: seed.source, category: seed.category, confidence: seed.confidence });\n  if (evicted) emit(audit, { event: 'seed_retired', id: evicted.id, reason: 'pool_cap', via: 'add', into: seed.id });\n  savePool(guard, file, db);\n  return { kind: 'added', seed, evicted };\n}\n\n/**\n * Deterministic gc (rules 1-3 of §4.2). Rule 4 (pool cap) fires on add only.\n * v1.9.0: the archive area is ALSO capped (seeds.archiveCap) — the archive is\n * a forensic trail, not a hoard; trim oldest-retired first.\n */\nexport function gcPool(guard: PathGuard, file: string, policy: Policy, now = Date.now(), audit: SeedAuditFn = NO_AUDIT): GcReport {\n  const db = loadPool(guard, file);\n  const report: GcReport = { consumed: 0, expired: 0, coldBench: 0, activeAfter: 0, archiveTrimmed: 0 };\n  for (const s of activeSeeds(db)) {\n    const ageMs = now - parseIso(s.bornAt);\n    const sinceEvidence = parseIso(s.lastEvidenceAt);\n    const sinceUsed = s.lastUsedAt ? parseIso(s.lastUsedAt) : 0;\n    if (s.used >= retireLimit(s, policy) && sinceEvidence <= sinceUsed) {\n      archiveSeed(s, 'consumed', now);\n      report.consumed += 1;\n      emit(audit, { event: 'seed_retired', id: s.id, reason: 'consumed', via: 'gc', used: s.used });\n    } else if (now > parseIso(s.expiresAt)) {\n      archiveSeed(s, 'expired', now);\n      report.expired += 1;\n      emit(audit, { event: 'seed_retired', id: s.id, reason: 'expired', via: 'gc', used: s.used });\n    } else if (s.used === 0 && ageMs >= policy.seeds.coldBenchDays * DAY_MS) {\n      archiveSeed(s, 'cold_bench', now);\n      report.coldBench += 1;\n      emit(audit, { event: 'seed_retired', id: s.id, reason: 'cold_bench', via: 'gc', used: s.used });\n    }\n  }\n  // archive cap: drop the oldest-retired rows beyond the cap (retiredAt may be\n  // missing on pre-v1.5 rows — parseIso('') = 0 sorts them oldest).\n  const archived = db.seeds.filter((s) => s.status === 'archived');\n  if (archived.length > policy.seeds.archiveCap) {\n    const drop = [...archived]\n      .sort((a, b) => parseIso(a.retiredAt ?? '') - parseIso(b.retiredAt ?? ''))\n      .slice(0, archived.length - policy.seeds.archiveCap);\n    const dropped = new Set(drop.map((s) => s.id));\n    db.seeds = db.seeds.filter((s) => !dropped.has(s.id));\n    report.archiveTrimmed = drop.length;\n    // These rows are GONE (not archived — deleted): the log is the only trace\n    // left, so name them. IDs only, and cap the list in case a first GC trims\n    // a legacy archive wholesale.\n    emit(audit, { event: 'seed_archive_trimmed', count: drop.length, ids: drop.slice(0, 50).map((s) => s.id) });\n  }\n  report.activeAfter = activeSeeds(db).length;\n  savePool(guard, file, db);\n  return report;\n}\n\n/** The seed surfaced in a real expression: count + maybe retire (rule 1). */\nexport function surfaceSeed(\n  guard: PathGuard,\n  file: string,\n  policy: Policy,\n  id: string,\n  now = Date.now(),\n  audit: SeedAuditFn = NO_AUDIT,\n): Seed | null {\n  const db = loadPool(guard, file);\n  const s = db.seeds.find((x) => x.id === id && x.status === 'active');\n  if (!s) return null;\n  s.used += 1;\n  s.lastUsedAt = new Date(now).toISOString();\n  if (s.used >= retireLimit(s, policy) && parseIso(s.lastEvidenceAt) <= parseIso(s.lastUsedAt)) {\n    archiveSeed(s, 'consumed', now);\n    emit(audit, { event: 'seed_retired', id: s.id, reason: 'consumed', via: 'surface', used: s.used });\n  }\n  savePool(guard, file, db);\n  return s;\n}\n\n/** Deliberate retirement (item completed / no longer relevant). */\nexport function archiveSeedById(\n  guard: PathGuard,\n  file: string,\n  id: string,\n  reason: SeedRetireReason = 'completed',\n  now = Date.now(),\n  audit: SeedAuditFn = NO_AUDIT,\n): Seed | null {\n  const db = loadPool(guard, file);\n  const s = db.seeds.find((x) => x.id === id && x.status === 'active');\n  if (!s) return null;\n  archiveSeed(s, reason, now);\n  emit(audit, { event: 'seed_retired', id: s.id, reason, via: 'manual' });\n  savePool(guard, file, db);\n  return s;\n}\n\n/** Restore an archived seed to the active pool (UI operation; resets TTL). */\nexport function restoreSeed(\n  guard: PathGuard,\n  file: string,\n  policy: Policy,\n  id: string,\n  now = Date.now(),\n  audit: SeedAuditFn = NO_AUDIT,\n): { ok: true; seed: Seed } | { ok: false; reason: string } {\n  const db = loadPool(guard, file);\n  const s = db.seeds.find((x) => x.id === id && x.status === 'archived');\n  if (!s) return { ok: false, reason: 'archived seed not found' };\n  if (activeSeeds(db).length >= policy.seeds.maxActive) {\n    return { ok: false, reason: `pool full (${policy.seeds.maxActive}); archive something first` };\n  }\n  s.status = 'active';\n  s.retireReason = undefined;\n  s.retiredAt = undefined;\n  s.expiresAt = new Date(now + (policy.seeds.ttlDays[s.tag] || 14) * DAY_MS).toISOString();\n  s.lastEvidenceAt = new Date(now).toISOString();\n  emit(audit, { event: 'seed_restored', id: s.id });\n  savePool(guard, file, db);\n  return { ok: true, seed: s };\n}\n\n/** Hard delete (UI explicit action with confirm; the caller audits it). */\nexport function deleteSeed(guard: PathGuard, file: string, id: string, audit: SeedAuditFn = NO_AUDIT): boolean {\n  const db = loadPool(guard, file);\n  const before = db.seeds.length;\n  db.seeds = db.seeds.filter((x) => x.id !== id);\n  if (db.seeds.length === before) return false;\n  emit(audit, { event: 'seed_deleted', id });\n  savePool(guard, file, db);\n  return true;\n}\n","// Material pool (\"素材池\") types. Charter (axiom 3): this pool is a CACHE,\n// not memory - volatile, evictable, burnable; long-term memory only absorbs\n// conversation-validated content. Everything here may be destroyed.\n\nexport type SeedTag = 'news' | 'fandom' | 'scene' | 'promise';\nexport type SeedSource = 'chat' | 'screen' | 'browse' | 'hand' | 'profile';\nexport type SeedCategory = 'topic' | 'chat';\nexport type SeedRetireReason = 'consumed' | 'expired' | 'cold_bench' | 'pool_cap' | 'completed';\n\nexport interface Seed {\n  id: string;\n  /** Short brief shown to the reflection prompt. */\n  text: string;\n  /** Merge key (§4.3): same-topic actives collapse into one. */\n  topic: string;\n  tag: SeedTag;\n  source: SeedSource;\n  /** Loop role, decoupled from source (2026-09-18 spec ⑤): 'topic' = wander/\n   *  hand/profile stock (random pick), 'chat' = conversation-grown, consumed\n   *  once. Absent on pre-v1.5 rows; loadPool defaults them to 'topic'. */\n  category?: SeedCategory;\n  /** 0..1 trust level; handwriting and high-confidence profile sources gain eviction protection. */\n  confidence: number;\n  /** Eviction protection (§4.2 pool-cap rule): handwritten / high-confidence profile sources. */\n  protected: boolean;\n  /** Times this seed surfaced in an actual expression. */\n  used: number;\n  bornAt: string;\n  /** bornAt + ttlDays[tag]; archived when passed (rule 2). */\n  expiresAt: string;\n  lastUsedAt: string | null;\n  /** Fresh-evidence watermark: rule 1 spares seeds with evidence newer than last use. */\n  lastEvidenceAt: string;\n  status: 'active' | 'archived';\n  retireReason?: SeedRetireReason;\n  retiredAt?: string;\n}\n\nexport interface SeedDb {\n  seq: number;\n  seeds: Seed[];\n}\n\nexport function emptySeedDb(): SeedDb {\n  return { seq: 0, seeds: [] };\n}\n\nexport const SEED_SOURCE_DEFAULT_CONFIDENCE: Record<SeedSource, number> = {\n  hand: 1.0,\n  profile: 0.7,\n  chat: 0.6,\n  screen: 0.4,\n  browse: 0.4,\n};\n"],"mappings":";;;;;;AAIA,OAAO,UAAU;;;ACuCV,SAAS,cAAsB;AACpC,SAAO,EAAE,KAAK,GAAG,OAAO,CAAC,EAAE;AAC7B;AAEO,IAAM,iCAA6D;AAAA,EACxE,MAAM;AAAA,EACN,SAAS;AAAA,EACT,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AACV;;;ADlCA,IAAM,SAAS;AAUf,IAAM,WAAwB,MAAM;AAAC;AAGrC,SAAS,KAAK,OAAoB,OAAsC;AACtE,MAAI;AACF,UAAM,KAAK;AAAA,EACb,QAAQ;AAAA,EAER;AACF;AAIO,IAAM,qBAAmD,EAAE,OAAO,IAAI,MAAM,GAAG;AAEtF,IAAM,kBAAqC,CAAC,SAAS,MAAM;AAIpD,SAAS,kBAAkB,GAA0B;AAC1D,SAAO,OAAO,MAAM,YAAa,gBAAsC,SAAS,CAAC,IAC5E,IACD;AACN;AA2BO,IAAM,WAA+B,CAAC,QAAQ,UAAU,SAAS,SAAS;AAE1E,SAAS,aAAa,KAAkC;AAC7D,MAAI,OAAQ,SAA+B,SAAS,GAAG,EAAG,QAAO;AACjE,SAAO;AACT;AAEA,SAAS,SAAS,GAAmB;AACnC,QAAM,IAAI,KAAK,MAAM,CAAC;AACtB,SAAO,OAAO,SAAS,CAAC,IAAI,IAAI;AAClC;AAIO,SAAS,cAAc,SAAyB;AACrD,SAAO,KAAK,KAAK,SAAS,aAAa;AACzC;AAEO,SAAS,SAAS,OAAkB,MAAsB;AAC/D,QAAM,MAAM,kBAAkB,OAAO,IAAI;AACzC,MAAI,QAAQ,KAAM,QAAO,YAAY;AACrC,QAAM,KAAK,YAAY;AACvB,aAAW,QAAQ,IAAI,MAAM,IAAI,GAAG;AAClC,UAAM,UAAU,KAAK,KAAK;AAC1B,QAAI,CAAC,QAAS;AACd,QAAI;AACF,YAAM,MAAM,KAAK,MAAM,OAAO;AAC9B,UAAI,OAAO,IAAI,OAAO,YAAY,IAAI,GAAG,WAAW,GAAG,GAAG;AAGxD,YAAI,WAAW,kBAAkB,IAAI,QAAQ;AAC7C,WAAG,MAAM,KAAK,GAAG;AACjB,cAAM,IAAI,OAAO,IAAI,GAAG,MAAM,CAAC,CAAC;AAChC,YAAI,OAAO,SAAS,CAAC,KAAK,IAAI,GAAG,IAAK,IAAG,MAAM;AAAA,MACjD;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,SAAS,OAAkB,MAAc,IAAkB;AACzE,QAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,EAAE,KAAK,IAAI;AAC7D,oBAAkB,OAAO,MAAM,OAAO,OAAO,OAAO,EAAE;AACxD;AAIO,IAAM,cAAc,CAAC,OAAuB,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,WAAW,QAAQ;AACxF,IAAM,gBAAgB,CAAC,OAAuB,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,WAAW,UAAU;AAQ5F,SAAS,cAAc,MAAY,QAAgB,KAAqB;AAC7E,QAAM,UAAU,OAAO,MAAM,QAAQ,KAAK,GAAG,KAAK;AAClD,QAAM,YAAY,KAAK,IAAI,IAAI,MAAM,SAAS,KAAK,cAAc,KAAK,MAAM;AAC5E,QAAM,YAAY,KAAK,IAAI,GAAG,IAAI,YAAY,OAAO;AACrD,QAAM,SAAS,KAAK,SAAS,IAAI,IAAI,IAAI,KAAK;AAC9C,QAAM,IAAI,OAAO,MAAM;AACvB,SAAO,YAAY,EAAE,YAAY,SAAS,EAAE,SAAS,KAAK,aAAa,EAAE;AAC3E;AAIO,SAAS,mBAAmB,IAAY,QAAgB,KAAa,UAAsC;AAChH,QAAM,UAAU,YAAY,EAAE,EAAE,OAAO,CAAC,MAAM,aAAa,UAAa,kBAAkB,EAAE,QAAQ,MAAM,QAAQ;AAClH,MAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,QAAM,cAAc,QAAQ,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS;AACtD,QAAM,aAAa,YAAY,SAAS,IAAI,cAAc;AAC1D,MAAI,QAAqB;AACzB,MAAI,aAAa,OAAO;AACxB,aAAW,KAAK,YAAY;AAC1B,UAAM,QAAQ,cAAc,GAAG,QAAQ,GAAG;AAC1C,QAAI,QAAQ,YAAY;AACtB,mBAAa;AACb,cAAQ;AAAA,IACV;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,YAAY,MAAY,QAA0B,KAAmB;AAC5E,OAAK,SAAS;AACd,OAAK,eAAe;AACpB,OAAK,YAAY,IAAI,KAAK,GAAG,EAAE,YAAY;AAC7C;AAIA,SAAS,YAAY,GAAS,QAAwB;AACpD,SAAO,kBAAkB,EAAE,QAAQ,MAAM,SAAS,IAAI,OAAO,MAAM;AACrE;AAIO,SAAS,QACd,OACA,MACA,QACA,OACA,MAAM,KAAK,IAAI,GACf,QAAqB,UACN;AACf,QAAM,KAAK,SAAS,OAAO,IAAI;AAC/B,QAAM,OAAO,MAAM,KAAK,KAAK;AAC7B,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,6BAA6B;AACxD,QAAM,MAAM,aAAa,MAAM,GAAG;AAClC,QAAM,SAAqB,MAAM,UAAU;AAC3C,QAAM,WAAW,kBAAkB,MAAM,aAAa,WAAW,SAAS,SAAS,QAAQ;AAC3F,QAAM,aAAa,MAAM,cAAc,+BAA+B,MAAM;AAG5E,QAAM,MAAM,YAAY,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,IAAI;AACvD,MAAI,IAAK,QAAO,EAAE,MAAM,aAAa,MAAM,IAAI;AAE/C,QAAM,SAAS,IAAI,KAAK,GAAG,EAAE,YAAY;AACzC,QAAM,SAAS,OAAO,MAAM,QAAQ,GAAG,KAAK,MAAM;AAGlD,QAAM,YAAY,YAAY,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,MAAM,SAAS,KAAK,MAAM,GAAG,EAAE,EAAE;AAC9F,MAAI;AACJ,MAAI,UAAU,SAAS,GAAG;AACxB,UAAM,OAAO,UAAU,CAAC;AACxB,SAAK,OAAO;AACZ,SAAK,MAAM;AACX,SAAK,SAAS;AACd,SAAK,WAAW,kBAAkB,MAAM,YAAY,KAAK,YAAY,QAAQ;AAC7E,SAAK,aAAa,KAAK,IAAI,KAAK,YAAY,UAAU;AACtD,SAAK,OAAO,UAAU,OAAO,CAAC,KAAK,MAAM,MAAM,EAAE,MAAM,CAAC;AACxD,SAAK,iBAAiB,CAAC,KAAK,gBAAgB,QAAQ,GAAG,UAAU,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EAC1F,OAAO,CAAC,GAAG,MAAO,SAAS,CAAC,IAAI,SAAS,CAAC,IAAI,IAAI,CAAE;AACvD,SAAK,YAAY,IAAI,KAAK,KAAK,IAAI,SAAS,KAAK,SAAS,GAAG,MAAM,KAAK,CAAC,EAAE,YAAY;AACvF,SAAK,YAAY,KAAK,aAAa,WAAW,UAAW,WAAW,aAAa,cAAc;AAE/F,eAAW,SAAS,UAAU,MAAM,CAAC,GAAG;AACtC,YAAM,SAAS;AACf,YAAM,eAAe;AACrB,YAAM,YAAY;AAClB,WAAK,OAAO,EAAE,OAAO,gBAAgB,IAAI,MAAM,IAAI,QAAQ,aAAa,KAAK,SAAS,MAAM,KAAK,GAAG,CAAC;AAAA,IACvG;AACA,WAAO;AAEP,QAAI,YAAY,EAAE,EAAE,SAAS,OAAO,MAAM,WAAW;AACnD,YAAM,SAAS,mBAAmB,IAAI,QAAQ,KAAK,kBAAkB,KAAK,QAAQ,CAAC;AACnF,UAAI,UAAU,OAAO,OAAO,KAAK,IAAI;AACnC,oBAAY,QAAQ,YAAY,GAAG;AACnC,aAAK,OAAO,EAAE,OAAO,cAAc,IAAI,KAAK,IAAI,MAAM,UAAU,KAAK,KAAK,KAAK,QAAQ,KAAK,QAAQ,UAAU,KAAK,UAAU,YAAY,KAAK,YAAY,YAAY,UAAU,SAAS,EAAE,CAAC;AAC5L,aAAK,OAAO,EAAE,OAAO,gBAAgB,IAAI,OAAO,IAAI,QAAQ,YAAY,KAAK,SAAS,MAAM,KAAK,GAAG,CAAC;AACrG,iBAAS,OAAO,MAAM,EAAE;AACxB,eAAO,EAAE,MAAM,UAAU,MAAM,MAAM,SAAS,OAAO;AAAA,MACvD;AAAA,IACF;AACA,SAAK,OAAO,EAAE,OAAO,cAAc,IAAI,KAAK,IAAI,MAAM,UAAU,KAAK,KAAK,KAAK,QAAQ,KAAK,QAAQ,UAAU,KAAK,UAAU,YAAY,KAAK,YAAY,YAAY,UAAU,SAAS,EAAE,CAAC;AAC5L,aAAS,OAAO,MAAM,EAAE;AACxB,WAAO,EAAE,MAAM,UAAU,MAAM,KAAK;AAAA,EACtC;AAKA,MAAI;AACJ,QAAM,WAAW,YAAY,EAAE,EAAE,OAAO,CAAC,MAAM,kBAAkB,EAAE,QAAQ,MAAM,QAAQ,EAAE;AAC3F,MAAI,YAAY,mBAAmB,QAAQ,GAAG;AAC5C,UAAM,SAAS,mBAAmB,IAAI,QAAQ,KAAK,QAAQ;AAC3D,QAAI,QAAQ;AACV,kBAAY,QAAQ,YAAY,GAAG;AACnC,gBAAU;AAAA,IACZ;AAAA,EACF;AACA,MAAI,YAAY,EAAE,EAAE,UAAU,OAAO,MAAM,WAAW;AACpD,UAAM,SAAS,mBAAmB,IAAI,QAAQ,KAAK,QAAQ;AAC3D,QAAI,QAAQ;AACV,kBAAY,QAAQ,YAAY,GAAG;AACnC,gBAAU,WAAW;AAAA,IACvB;AAAA,EACF;AAEA,KAAG,OAAO;AACV,SAAO;AAAA,IACL,IAAI,IAAI,GAAG,GAAG;AAAA,IACd;AAAA,IACA,OAAO,MAAM,SAAS,KAAK,MAAM,GAAG,EAAE;AAAA,IACtC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,WAAW,UAAW,WAAW,aAAa,cAAc;AAAA,IACvE,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,WAAW,IAAI,KAAK,MAAM,KAAK,EAAE,YAAY;AAAA,IAC7C,YAAY;AAAA,IACZ,gBAAgB;AAAA,IAChB,QAAQ;AAAA,EACV;AACA,KAAG,MAAM,KAAK,IAAI;AAClB,OAAK,OAAO,EAAE,OAAO,cAAc,IAAI,KAAK,IAAI,MAAM,SAAS,KAAK,KAAK,KAAK,QAAQ,KAAK,QAAQ,UAAU,KAAK,UAAU,YAAY,KAAK,WAAW,CAAC;AACzJ,MAAI,QAAS,MAAK,OAAO,EAAE,OAAO,gBAAgB,IAAI,QAAQ,IAAI,QAAQ,YAAY,KAAK,OAAO,MAAM,KAAK,GAAG,CAAC;AACjH,WAAS,OAAO,MAAM,EAAE;AACxB,SAAO,EAAE,MAAM,SAAS,MAAM,QAAQ;AACxC;AAOO,SAAS,OAAO,OAAkB,MAAc,QAAgB,MAAM,KAAK,IAAI,GAAG,QAAqB,UAAoB;AAChI,QAAM,KAAK,SAAS,OAAO,IAAI;AAC/B,QAAM,SAAmB,EAAE,UAAU,GAAG,SAAS,GAAG,WAAW,GAAG,aAAa,GAAG,gBAAgB,EAAE;AACpG,aAAW,KAAK,YAAY,EAAE,GAAG;AAC/B,UAAM,QAAQ,MAAM,SAAS,EAAE,MAAM;AACrC,UAAM,gBAAgB,SAAS,EAAE,cAAc;AAC/C,UAAM,YAAY,EAAE,aAAa,SAAS,EAAE,UAAU,IAAI;AAC1D,QAAI,EAAE,QAAQ,YAAY,GAAG,MAAM,KAAK,iBAAiB,WAAW;AAClE,kBAAY,GAAG,YAAY,GAAG;AAC9B,aAAO,YAAY;AACnB,WAAK,OAAO,EAAE,OAAO,gBAAgB,IAAI,EAAE,IAAI,QAAQ,YAAY,KAAK,MAAM,MAAM,EAAE,KAAK,CAAC;AAAA,IAC9F,WAAW,MAAM,SAAS,EAAE,SAAS,GAAG;AACtC,kBAAY,GAAG,WAAW,GAAG;AAC7B,aAAO,WAAW;AAClB,WAAK,OAAO,EAAE,OAAO,gBAAgB,IAAI,EAAE,IAAI,QAAQ,WAAW,KAAK,MAAM,MAAM,EAAE,KAAK,CAAC;AAAA,IAC7F,WAAW,EAAE,SAAS,KAAK,SAAS,OAAO,MAAM,gBAAgB,QAAQ;AACvE,kBAAY,GAAG,cAAc,GAAG;AAChC,aAAO,aAAa;AACpB,WAAK,OAAO,EAAE,OAAO,gBAAgB,IAAI,EAAE,IAAI,QAAQ,cAAc,KAAK,MAAM,MAAM,EAAE,KAAK,CAAC;AAAA,IAChG;AAAA,EACF;AAGA,QAAM,WAAW,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,WAAW,UAAU;AAC/D,MAAI,SAAS,SAAS,OAAO,MAAM,YAAY;AAC7C,UAAM,OAAO,CAAC,GAAG,QAAQ,EACtB,KAAK,CAAC,GAAG,MAAM,SAAS,EAAE,aAAa,EAAE,IAAI,SAAS,EAAE,aAAa,EAAE,CAAC,EACxE,MAAM,GAAG,SAAS,SAAS,OAAO,MAAM,UAAU;AACrD,UAAM,UAAU,IAAI,IAAI,KAAK,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;AAC7C,OAAG,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;AACpD,WAAO,iBAAiB,KAAK;AAI7B,SAAK,OAAO,EAAE,OAAO,wBAAwB,OAAO,KAAK,QAAQ,KAAK,KAAK,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;AAAA,EAC5G;AACA,SAAO,cAAc,YAAY,EAAE,EAAE;AACrC,WAAS,OAAO,MAAM,EAAE;AACxB,SAAO;AACT;AAGO,SAAS,YACd,OACA,MACA,QACA,IACA,MAAM,KAAK,IAAI,GACf,QAAqB,UACR;AACb,QAAM,KAAK,SAAS,OAAO,IAAI;AAC/B,QAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,OAAO,MAAM,EAAE,WAAW,QAAQ;AACnE,MAAI,CAAC,EAAG,QAAO;AACf,IAAE,QAAQ;AACV,IAAE,aAAa,IAAI,KAAK,GAAG,EAAE,YAAY;AACzC,MAAI,EAAE,QAAQ,YAAY,GAAG,MAAM,KAAK,SAAS,EAAE,cAAc,KAAK,SAAS,EAAE,UAAU,GAAG;AAC5F,gBAAY,GAAG,YAAY,GAAG;AAC9B,SAAK,OAAO,EAAE,OAAO,gBAAgB,IAAI,EAAE,IAAI,QAAQ,YAAY,KAAK,WAAW,MAAM,EAAE,KAAK,CAAC;AAAA,EACnG;AACA,WAAS,OAAO,MAAM,EAAE;AACxB,SAAO;AACT;AAGO,SAAS,gBACd,OACA,MACA,IACA,SAA2B,aAC3B,MAAM,KAAK,IAAI,GACf,QAAqB,UACR;AACb,QAAM,KAAK,SAAS,OAAO,IAAI;AAC/B,QAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,OAAO,MAAM,EAAE,WAAW,QAAQ;AACnE,MAAI,CAAC,EAAG,QAAO;AACf,cAAY,GAAG,QAAQ,GAAG;AAC1B,OAAK,OAAO,EAAE,OAAO,gBAAgB,IAAI,EAAE,IAAI,QAAQ,KAAK,SAAS,CAAC;AACtE,WAAS,OAAO,MAAM,EAAE;AACxB,SAAO;AACT;AAGO,SAAS,YACd,OACA,MACA,QACA,IACA,MAAM,KAAK,IAAI,GACf,QAAqB,UACqC;AAC1D,QAAM,KAAK,SAAS,OAAO,IAAI;AAC/B,QAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,OAAO,MAAM,EAAE,WAAW,UAAU;AACrE,MAAI,CAAC,EAAG,QAAO,EAAE,IAAI,OAAO,QAAQ,0BAA0B;AAC9D,MAAI,YAAY,EAAE,EAAE,UAAU,OAAO,MAAM,WAAW;AACpD,WAAO,EAAE,IAAI,OAAO,QAAQ,cAAc,OAAO,MAAM,SAAS,6BAA6B;AAAA,EAC/F;AACA,IAAE,SAAS;AACX,IAAE,eAAe;AACjB,IAAE,YAAY;AACd,IAAE,YAAY,IAAI,KAAK,OAAO,OAAO,MAAM,QAAQ,EAAE,GAAG,KAAK,MAAM,MAAM,EAAE,YAAY;AACvF,IAAE,iBAAiB,IAAI,KAAK,GAAG,EAAE,YAAY;AAC7C,OAAK,OAAO,EAAE,OAAO,iBAAiB,IAAI,EAAE,GAAG,CAAC;AAChD,WAAS,OAAO,MAAM,EAAE;AACxB,SAAO,EAAE,IAAI,MAAM,MAAM,EAAE;AAC7B;AAGO,SAAS,WAAW,OAAkB,MAAc,IAAY,QAAqB,UAAmB;AAC7G,QAAM,KAAK,SAAS,OAAO,IAAI;AAC/B,QAAM,SAAS,GAAG,MAAM;AACxB,KAAG,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE;AAC7C,MAAI,GAAG,MAAM,WAAW,OAAQ,QAAO;AACvC,OAAK,OAAO,EAAE,OAAO,gBAAgB,GAAG,CAAC;AACzC,WAAS,OAAO,MAAM,EAAE;AACxB,SAAO;AACT;","names":[]}

package/dist/chunk-VIZNIQLK.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/core/audit-log.ts","../src/core/atomic-fs.ts","../src/profile/store.ts","../src/profile/types.ts","../src/profile/schema.ts"],"sourcesContent":["// Append-only JSONL audit log with age-based retention pruning.\n// Audit files are plaintext by charter (transparency), and must never contain\n// sensitive raw observations (window titles, conversation text).\n\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { atomicWriteFileSync } from './atomic-fs.js';\n\nexport interface AuditEvent {\n  ts: string;\n  [key: string]: unknown;\n}\n\nexport function appendAuditLine(file: string, event: Omit<AuditEvent, 'ts'> & { ts?: string }): void {\n  fs.mkdirSync(path.dirname(file), { recursive: true });\n  const line = JSON.stringify({ ts: event.ts ?? new Date().toISOString(), ...event });\n  fs.appendFileSync(file, line + '\\n', 'utf8');\n}\n\nexport function readAuditLines<T = AuditEvent>(file: string): T[] {\n  if (!fs.existsSync(file)) return [];\n  const out: T[] = [];\n  const raw = fs.readFileSync(file, 'utf8');\n  for (const line of raw.split('\\n')) {\n    const trimmed = line.trim();\n    if (!trimmed) continue;\n    try {\n      out.push(JSON.parse(trimmed) as T);\n    } catch {\n      // Skip corrupt lines; the log is diagnostic, not authoritative data.\n      out.push({ ts: '', corrupt: true, raw: trimmed.slice(0, 200) } as unknown as T);\n    }\n  }\n  return out;\n}\n\n/**\n * Drop entries older than maxAgeMs. Returns the number of removed lines.\n * Rewrites the file atomically; on rewrite failure the original is untouched.\n */\nexport function pruneAuditFile(file: string, maxAgeMs: number, now = Date.now()): number {\n  if (!fs.existsSync(file)) return 0;\n  const lines = readAuditLines(file);\n  const kept = lines.filter((e) => {\n    const ev = e as unknown as AuditEvent;\n    const ts = Date.parse(ev.ts ?? '');\n    if (!Number.isFinite(ts)) return true; // keep unparseable lines, never lose audit data silently\n    return now - ts <= maxAgeMs;\n  });\n  const removed = lines.length - kept.length;\n  if (removed === 0) return 0;\n  const body = kept.map((e) => JSON.stringify(e)).join('\\n');\n  atomicWriteFileSync(file, body ? body + '\\n' : '');\n  return removed;\n}\n","// Crash-safe file replacement: write to a random-suffix temp file in the SAME\n// directory as the target, then rename over it. Same-directory rename stays\n// on one volume (atomic) and Node's rename replaces existing files on Windows.\n\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { randomUUID, randomFillSync } from 'node:crypto';\n\nexport function tmpSibling(target: string, tag = 'w'): string {\n  return path.join(\n    path.dirname(target),\n    `.${path.basename(target)}.${tag}-${randomUUID().slice(0, 8)}.tmp`,\n  );\n}\n\nexport function atomicWriteFileSync(target: string, data: string | Uint8Array): void {\n  const tmp = tmpSibling(target);\n  try {\n    fs.writeFileSync(tmp, data);\n    fs.renameSync(tmp, target);\n  } finally {\n    fs.rmSync(tmp, { force: true });\n  }\n}\n\nexport function atomicWriteJsonSync(target: string, value: unknown): void {\n  atomicWriteFileSync(target, JSON.stringify(value, null, 2));\n}\n\n/** Overwrite a file's bytes with random data before unlinking. */\nexport function shredFileSync(target: string, passes = 3): void {\n  const stat = fs.statSync(target);\n  if (!stat.isFile()) throw new Error(`shred: not a file: ${target}`);\n  const buf = Buffer.alloc(Math.max(stat.size, 1));\n  for (let i = 0; i < passes; i++) {\n    randomFillSync(buf);\n    fs.writeFileSync(target, buf);\n  }\n  fs.rmSync(target, { force: true });\n}\n","// Profile store: materialized view + journal (the journal is the ONLY\n// authority; profile.json is a pure projection - r2 §14 verify/rebuild).\n// Every LLM-proposed op passes deterministic guards here (LLM nominates,\n// code decides - §3.3).\n\nimport path from 'node:path';\nimport { randomUUID } from 'node:crypto';\nimport fs from 'node:fs';\nimport type { PathGuard } from '../core/path-guard.js';\nimport { loadJson, saveJson, readText, writeText } from '../vault/vault.js';\nimport { atomicWriteFileSync } from '../core/atomic-fs.js';\nimport type { Policy } from '../config/schema.js';\nimport {\n  CONFIDENCE_CAP,\n  emptyProfile,\n  PARTITIONS,\n  type ApplyReport,\n  type Evidence,\n  type EvidenceKind,\n  type InboxItem,\n  type JournalRecord,\n  type Partition,\n  type ProfileDoc,\n  type ProfileEntry,\n  type ProfileOp,\n} from './types.js';\nimport { checkAddAgainstSchema, type ProfileSchema } from './schema.js';\n\nconst DAY_MS = 86_400_000;\n\nexport function profileFilePath(dataDir: string): string {\n  return path.join(dataDir, 'profile.json');\n}\n\nexport function journalFilePath(dataDir: string): string {\n  return path.join(dataDir, 'profile_journal.jsonl');\n}\n\n// ── snapshot basepoint (v1.8.0, design doc §14 ③) ─────────────────────────\n// The journal grows forever; the snapshot folds its history into one DPAPI\n// document and moves the folded records into a timestamped archive shard.\n// Replay order: snapshot → archives (name order) → live journal, skipping\n// records at or before the snapshot baseline — so verify/rebuild stay correct\n// without knowing whether a snapshot exists.\n\nexport const SNAPSHOT_FILE = 'profile_snapshot.json';\nexport const ARCHIVE_PREFIX = 'profile_journal.archive-';\n\nexport interface ProfileSnapshot {\n  version: 1;\n  /** ts of the LAST journal record folded into `doc`. */\n  baselineTs: string;\n  recordsFolded: number;\n  doc: ProfileDoc;\n}\n\nexport function snapshotFilePath(dataDir: string): string {\n  return path.join(dataDir, SNAPSHOT_FILE);\n}\n\nfunction loadSnapshot(guard: PathGuard, dataDir: string): ProfileSnapshot | null {\n  const snap = loadJson<ProfileSnapshot>(guard, snapshotFilePath(dataDir));\n  if (!snap || snap.version !== 1 || typeof snap.baselineTs !== 'string' || !snap.doc?.partitions) return null;\n  return snap;\n}\n\nfunction listArchiveFiles(guard: PathGuard, dataDir: string): string[] {\n  try {\n    return fs.readdirSync(guard.assert(dataDir))\n      .filter((f) => f.startsWith(ARCHIVE_PREFIX) && f.endsWith('.jsonl'))\n      .sort(); // timestamped names sort chronologically\n  } catch {\n    return [];\n  }\n}\n\n/** Replay one JSONL text into `doc`, skipping records at/before the baseline. */\nfunction replayText(doc: ProfileDoc, text: string, baselineTs: string, stats: { records: number; truncatedTail: number; isLive: boolean }): void {\n  const lines = text.split('\\n');\n  for (let i = 0; i < lines.length; i++) {\n    const trimmed = lines[i]!.trim();\n    if (!trimmed) continue;\n    try {\n      const rec = JSON.parse(trimmed) as JournalRecord;\n      // Baseline skip: only records CARRYING a ts can be proven folded. A\n      // ts-less record is always applied (applyOpPermissive tolerates it).\n      if (baselineTs && rec.ts && String(rec.ts) <= baselineTs) continue;\n      for (const op of rec.applied ?? []) applyOpPermissive(doc, op, rec.ts);\n      stats.records += 1;\n    } catch {\n      // Torn tail only counts on the LIVE journal — archives are closed files.\n      const isLast = lines.slice(i + 1).every((l) => !l.trim());\n      if (stats.isLive && isLast) {\n        stats.truncatedTail = lines.length - i;\n        break;\n      }\n      // mid-file corrupt record: skip (journal stays append-only/immutable)\n    }\n  }\n}\n\n/** Full replay: snapshot basepoint + archive shards + live journal. */\nexport function replayJournal(guard: PathGuard, dataDir: string): ReplayResult {\n  const snap = loadSnapshot(guard, dataDir);\n  const doc = snap ? snap.doc : emptyProfile();\n  const baselineTs = snap?.baselineTs ?? '';\n  const stats = { records: snap?.recordsFolded ?? 0, truncatedTail: 0, isLive: false };\n  for (const file of listArchiveFiles(guard, dataDir)) {\n    try {\n      // shard record counts are not reported (the snapshot already folded\n      // them); only the live journal's torn tail is meaningful.\n      replayText(doc, fs.readFileSync(path.join(dataDir, file), 'utf8'), baselineTs, { records: 0, truncatedTail: 0, isLive: false });\n    } catch { /* unreadable shard: skip */ }\n  }\n  stats.isLive = true;\n  replayText(doc, readText(guard, journalFilePath(dataDir), ''), baselineTs, stats);\n  return { doc, truncatedTail: stats.truncatedTail, records: stats.records };\n}\n\nexport function loadProfile(guard: PathGuard, file: string): ProfileDoc {\n  const doc = loadJson<ProfileDoc>(guard, file);\n  if (!doc || !doc.partitions) return emptyProfile();\n  // ensure all partitions exist\n  for (const p of PARTITIONS) {\n    if (!doc.partitions[p]) doc.partitions[p] = { entries: [] };\n  }\n  return doc;\n}\n\nfunction parseIso(v: string): number {\n  const t = Date.parse(v);\n  return Number.isFinite(t) ? t : 0;\n}\n\n/** ref format \"<datafile>#<locator>\": the referenced file must exist under data/. */\nfunction refExists(guard: PathGuard, dataDir: string, ref: string): boolean {\n  const base = ref.split('#')[0] ?? '';\n  if (!base) return false;\n  const target = path.join(dataDir, base);\n  try {\n    return fs.existsSync(guard.assert(target));\n  } catch {\n    return false;\n  }\n}\n\nfunction capForKinds(kinds: EvidenceKind[]): number {\n  if (kinds.length === 0) return 0.4;\n  return Math.min(...kinds.map((k) => CONFIDENCE_CAP[k] ?? 0.4));\n}\n\nfunction findActive(doc: ProfileDoc, id: string): ProfileEntry | undefined {\n  for (const p of PARTITIONS) {\n    const hit = doc.partitions[p]!.entries.find((e) => e.id === id && e.validTo === null);\n    if (hit) return hit;\n  }\n  return undefined;\n}\n\n/**\n * Apply validated ops to the doc (mutates). Returns applied/rejected.\n * Guards (§3.3): whitelist, evidence gate, per-run ops cap is enforced by the\n * caller, confidence caps by evidence kind, psy gating, INVALIDATE ownership:\n * volatile expiry is code-driven (LLM may not), stable invalidation needs a\n * contradicting observation attached.\n */\nexport function applyOpsToDoc(\n  guard: PathGuard,\n  dataDir: string,\n  doc: ProfileDoc,\n  ops: ProfileOp[],\n  schema: ProfileSchema,\n  policy: Policy,\n  now: number,\n): ApplyReport {\n  const applied: ProfileOp[] = [];\n  const rejected: { op: ProfileOp; reason: string }[] = [];\n  const nowIso = new Date(now).toISOString();\n\n  for (const op of ops) {\n    if (op.op === 'NOOP') {\n      applied.push(op);\n      continue;\n    }\n    if (op.op === 'ADD') {\n      if (op.partition === 'psy' && !policy.profile.psyEnabled) {\n        rejected.push({ op, reason: 'psy partition is disabled' });\n        continue;\n      }\n      const check = checkAddAgainstSchema(schema, op.partition, op.topic, op.subTopic, op.temporal);\n      if (!check.ok) {\n        rejected.push({ op, reason: check.reason! });\n        continue;\n      }\n      if (!op.evidence || op.evidence.length === 0) {\n        rejected.push({ op, reason: 'ADD without evidence (no provenance, axiom 1)' });\n        continue;\n      }\n      const badRef = op.evidence.find((e) => !refExists(guard, dataDir, e.ref));\n      if (badRef) {\n        rejected.push({ op, reason: `evidence ref does not resolve: ${badRef.ref}` });\n        continue;\n      }\n      const cap = capForKinds(op.evidence.map((e) => e.kind));\n      const active = doc.partitions[op.partition]!.entries.filter((e) => e.validTo === null);\n      if (active.length >= policy.profile.partitionCap) {\n        rejected.push({ op, reason: `partition ${op.partition} at cap (${policy.profile.partitionCap}); converge first` });\n        continue;\n      }\n      dbSeq += 1;\n      const entry: ProfileEntry = {\n        id: `p${dbSeq.toString(36)}${randomUUID().slice(0, 4)}`,\n        partition: op.partition,\n        topic: op.topic,\n        subTopic: op.subTopic,\n        content: op.content.trim(),\n        confidence: Math.min(op.confidence ?? cap, cap),\n        temporal: check.temporal,\n        validFrom: nowIso,\n        validTo: null,\n        supersededBy: null,\n        evidence: op.evidence,\n        createdAt: nowIso,\n        updatedAt: nowIso,\n        updateCount: 0,\n      };\n      op.assignedId = entry.id; // journal replay must reproduce this id\n      doc.partitions[op.partition]!.entries.push(entry);\n      applied.push(op);\n      continue;\n    }\n    if (op.op === 'UPDATE') {\n      const entry = findActive(doc, op.id);\n      if (!entry) {\n        rejected.push({ op, reason: `unknown or inactive entry: ${op.id}` });\n        continue;\n      }\n      if (op.changes.content !== undefined) entry.content = op.changes.content.trim();\n      if (op.changes.confidence !== undefined) {\n        const cap = capForKinds(entry.evidence.map((e) => e.kind));\n        // confidence upgrades need a second confirming observation (§3.3):\n        // only allowed up to cap, and only when the entry already has 2+ evidence\n        if (op.changes.confidence > entry.confidence && entry.evidence.length < 2) {\n          rejected.push({ op, reason: 'confidence upgrade requires a second confirming observation' });\n          continue;\n        }\n        entry.confidence = Math.min(op.changes.confidence, cap);\n      }\n      entry.updatedAt = nowIso;\n      entry.updateCount += 1;\n      applied.push(op);\n      continue;\n    }\n    if (op.op === 'INVALIDATE') {\n      const entry = findActive(doc, op.id);\n      if (!entry) {\n        rejected.push({ op, reason: `unknown or inactive entry: ${op.id}` });\n        continue;\n      }\n      if (entry.temporal === 'volatile') {\n        rejected.push({ op, reason: 'volatile expiry is code-owned (time-driven), not LLM-nominated' });\n        continue;\n      }\n      // stable: rebuttal-driven; requires a contradicting observation attached\n      const hasNewObservation = (op.evidence ?? []).length > 0\n        && (op.evidence ?? []).some((e) => parseIso(e.at) > parseIso(entry.evidence[entry.evidence.length - 1]?.at ?? ''));\n      if (!hasNewObservation) {\n        rejected.push({ op, reason: 'stable INVALIDATE requires a newer contradicting observation' });\n        continue;\n      }\n      entry.validTo = nowIso;\n      entry.supersededBy = null;\n      entry.updatedAt = nowIso;\n      entry.updateCount += 1;\n      if (op.evidence) entry.evidence.push(...op.evidence);\n      applied.push(op);\n      continue;\n    }\n  }\n  return { applied, rejected };\n}\n\nlet dbSeq = 0;\n\n/** Deterministic aging (D9): volatile expiry + stable low-activity marking. */\nexport function runDeterministicAging(\n  doc: ProfileDoc,\n  policy: Policy,\n  now: number,\n): { volatileExpired: number; lowActivityMarked: number } {\n  const nowIso = new Date(now).toISOString();\n  let volatileExpired = 0;\n  let lowActivityMarked = 0;\n  for (const p of PARTITIONS) {\n    for (const e of doc.partitions[p]!.entries) {\n      if (e.validTo !== null) continue;\n      const lastEvidence = Math.max(...e.evidence.map((x) => parseIso(x.at)), parseIso(e.updatedAt));\n      if (e.temporal === 'volatile') {\n        if (now - lastEvidence > policy.profile.volatileDays * DAY_MS) {\n          e.validTo = nowIso;\n          e.updatedAt = nowIso;\n          e.updateCount += 1;\n          volatileExpired += 1;\n        }\n      } else if (!e.lowActivity && now - lastEvidence > policy.profile.stableLowActivityDays * DAY_MS) {\n        e.lowActivity = true;\n        lowActivityMarked += 1;\n      }\n    }\n  }\n  return { volatileExpired, lowActivityMarked };\n}\n\n/** Persist the materialized view atomically + append the journal record. */\nexport function persistWithJournal(\n  guard: PathGuard,\n  dataDir: string,\n  doc: ProfileDoc,\n  record: Omit<JournalRecord, 'ts'>,\n): void {\n  saveJson(guard, profileFilePath(dataDir), doc);\n  const line = JSON.stringify({ ts: new Date().toISOString(), ...record });\n  const journal = journalFilePath(dataDir);\n  try {\n    fs.appendFileSync(guard.assert(journal), line + '\\n', 'utf8');\n  } catch {\n    fs.mkdirSync(dataDir, { recursive: true });\n    fs.appendFileSync(guard.assert(journal), line + '\\n', 'utf8');\n  }\n}\n\n// ── journal replay (verify / rebuild, r2 §14) ───────────────────────────\n\nfunction applyOpPermissive(doc: ProfileDoc, op: ProfileOp, ts: string): void {\n  // Journal is trusted history: replay applies without revalidation.\n  if (op.op === 'ADD') {\n    dbSeq += 1;\n    doc.partitions[op.partition]!.entries.push({\n      id: op.assignedId ?? `r${dbSeq.toString(36)}${randomUUID().slice(0, 4)}`,\n      partition: op.partition,\n      topic: op.topic,\n      subTopic: op.subTopic,\n      content: op.content,\n      confidence: op.confidence ?? 0.5,\n      temporal: op.temporal ?? 'stable',\n      validFrom: ts,\n      validTo: null,\n      supersededBy: null,\n      evidence: op.evidence,\n      createdAt: ts,\n      updatedAt: ts,\n      updateCount: 0,\n    });\n    return;\n  }\n  if (op.op === 'UPDATE') {\n    const e = [...PARTITIONS].flatMap((p) => doc.partitions[p]!.entries).find((x) => x.id === op.id);\n    if (e) {\n      if (op.changes.content !== undefined) e.content = op.changes.content;\n      if (op.changes.confidence !== undefined) e.confidence = op.changes.confidence;\n      e.updatedAt = ts;\n      e.updateCount += 1;\n    }\n    return;\n  }\n  if (op.op === 'INVALIDATE') {\n    const e = [...PARTITIONS].flatMap((p) => doc.partitions[p]!.entries).find((x) => x.id === op.id);\n    if (e) {\n      e.validTo = ts;\n      e.updatedAt = ts;\n      e.updateCount += 1;\n    }\n  }\n  // NOOP: nothing\n}\n\nexport interface ReplayResult {\n  doc: ProfileDoc;\n  truncatedTail: number;\n  records: number;\n}\n\nexport interface VerifyReport {\n  ok: boolean;\n  firstDivergence?: { id: string; expected: string; actual: string };\n  truncatedTail: number;\n  records: number;\n}\n\n/** profile verify: replay vs disk, report first divergence, never fix. */\nexport function verifyProfile(guard: PathGuard, dataDir: string): VerifyReport {\n  const replayed = replayJournal(guard, dataDir);\n  const onDisk = loadProfile(guard, profileFilePath(dataDir));\n  // Timestamps legitimately differ (journal record ts >= op ts); identity\n  // fields are also normalized. Compare semantic content only.\n  const strip = (doc: ProfileDoc): string =>\n    JSON.stringify(doc.partitions, (k, v) => (['id', 'supersededBy', 'validFrom', 'createdAt', 'updatedAt', 'retiredAt'].includes(k) ? '<norm>' : v));\n  const ok = strip(replayed.doc) === strip(onDisk);\n  if (ok) return { ok: true, truncatedTail: replayed.truncatedTail, records: replayed.records };\n  // first divergence: first entry id present in only one view\n  const diskIds = new Set([...PARTITIONS].flatMap((p) => onDisk.partitions[p]!.entries.map((e) => e.content)));  const replayIds = new Set([...PARTITIONS].flatMap((p) => replayed.doc.partitions[p]!.entries.map((e) => e.content)));\n  const onlyDisk = [...diskIds].find((c) => !replayIds.has(c));\n  const onlyReplay = [...replayIds].find((c) => !diskIds.has(c));\n  return {\n    ok: false,\n    firstDivergence: {\n      id: onlyDisk ?? onlyReplay ?? '(content)',\n      expected: onlyReplay ? 'absent in journal replay' : 'present in journal replay',\n      actual: onlyDisk ? 'present on disk' : 'absent on disk',\n    },\n    truncatedTail: replayed.truncatedTail,\n    records: replayed.records,\n  };\n}\n\nexport interface RebuildReport {\n  ok: boolean;\n  truncatedTail: number;\n  records: number;\n  wrote: boolean;\n}\n\n/** profile rebuild: journal is authoritative; atomic replace; torn tail reported. */\nexport function rebuildProfile(\n  guard: PathGuard,\n  dataDir: string,\n  opts: { check?: boolean } = {},\n): RebuildReport & { diffSummary?: string } {\n  const replayed = replayJournal(guard, dataDir);\n  const target = profileFilePath(dataDir);\n  if (opts.check) {\n    const onDisk = loadProfile(guard, target);\n    const same = JSON.stringify(onDisk) === JSON.stringify(replayed.doc);\n    return {\n      ok: same,\n      truncatedTail: replayed.truncatedTail,\n      records: replayed.records,\n      wrote: false,\n      diffSummary: same ? 'no diff' : 'materialized view differs from journal replay',\n    };\n  }\n  saveJson(guard, target, replayed.doc);\n  if (replayed.truncatedTail > 0) {\n    // explicit audit: never silently rebuild a view that lost its tail\n    writeText(\n      guard,\n      path.join(dataDir, 'logs', 'rebuild-report.txt'),\n      `rebuild truncated ${replayed.truncatedTail} torn line(s) at journal tail; ${replayed.records} records applied\\n`,\n    );\n  }\n  return { ok: true, truncatedTail: replayed.truncatedTail, records: replayed.records, wrote: true };\n}\n","// User profile types (design doc §3). Fourth store: warm, structured,\n// slow-evolving model of the user. Not the material pool (hot cache), not\n// DSH long-term memory (conversation-validated layer).\n\nexport type Partition = 'interest' | 'projects' | 'comm' | 'psy';\nexport type Temporal = 'volatile' | 'stable';\nexport type EvidenceKind = 'chat' | 'screen' | 'browse' | 'hand' | 'ledger';\n\nexport interface Evidence {\n  kind: EvidenceKind;\n  at: string;\n  /** Pointer to an existing audit/log location, e.g. \"heartbeat.jsonl#2026-09-06T12:00:00Z\". */\n  ref: string;\n  /** At most ONE short quote (<=1 sentence). Never raw conversation/screen text. */\n  quote?: string;\n}\n\nexport interface ProfileEntry {\n  id: string;\n  partition: Partition;\n  topic: string;\n  subTopic: string;\n  content: string;\n  /** 0..1; capped per source kind (chat .6 / screen .4 / browse .4). */\n  confidence: number;\n  temporal: Temporal;\n  validFrom: string;\n  validTo: string | null;\n  supersededBy: string | null;\n  evidence: Evidence[];\n  createdAt: string;\n  updatedAt: string;\n  updateCount: number;\n  /** stable-tier audit flag (180d without observation): digest deprioritizes. */\n  lowActivity?: boolean;\n}\n\nexport interface ProfileDoc {\n  version: number;\n  partitions: Record<Partition, { entries: ProfileEntry[] }>;\n}\n\nexport interface InboxItem {\n  id?: string;\n  kind: EvidenceKind;\n  at: string;\n  ref: string;\n  /** <= 1 short sentence; never raw conversation/screen text (truncated by writer). */\n  note: string;\n}\n\nexport type ProfileOp =\n  | {\n      op: 'ADD';\n      partition: Partition;\n      topic: string;\n      subTopic: string;\n      content: string;\n      temporal?: Temporal;\n      confidence?: number;\n      why: string;\n      evidence: Evidence[];\n      /** Assigned by the store at apply time so journal replay preserves ids. */\n      assignedId?: string;\n    }\n  | { op: 'UPDATE'; id: string; changes: { content?: string; confidence?: number }; why: string }\n  | { op: 'INVALIDATE'; id: string; why: string; evidence?: Evidence[] }\n  | { op: 'NOOP'; why: string };\n\nexport interface JournalRecord {\n  ts: string;\n  runId: string;\n  applied: ProfileOp[];\n  rejected: { op: ProfileOp; reason: string }[];\n}\n\nexport interface ApplyReport {\n  applied: ProfileOp[];\n  rejected: { op: ProfileOp; reason: string }[];\n}\n\nexport const PARTITIONS: readonly Partition[] = ['interest', 'projects', 'comm', 'psy'];\n\nexport const CONFIDENCE_CAP: Record<EvidenceKind, number> = {\n  chat: 0.6,\n  screen: 0.4,\n  browse: 0.4,\n  hand: 1.0,\n  ledger: 0.6,\n};\n\nexport function emptyProfile(): ProfileDoc {\n  return {\n    version: 1,\n    partitions: { interest: { entries: [] }, projects: { entries: [] }, comm: { entries: [] }, psy: { entries: [] } },\n  };\n}\n","// profile-schema.json loading + ADD validation (r4 B10: temporal tier is an\n// ENTRY-level attribute; the schema declares, per sub_topic, the ALLOWED tier\n// set and the DEFAULT. Unlisted defaults to 'stable'.)\n\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport type { Partition, Temporal } from './types.js';\n\nexport interface SubTopicDecl {\n  allowed?: Temporal[];\n  default?: Temporal;\n}\n\nexport interface ProfileSchema {\n  version: number;\n  partitions: Partial<Record<Partition, {\n    topics: Record<string, { subtopics: Record<string, SubTopicDecl> }>;\n  }>>;\n}\n\nexport function loadProfileSchema(paths: { configDir: string; settingsDir: string }): ProfileSchema {\n  const userPath = path.join(paths.settingsDir, 'profile-schema.json');\n  const file = fs.existsSync(userPath) ? userPath : path.join(paths.configDir, 'profile-schema.json');\n  try {\n    const raw = JSON.parse(fs.readFileSync(file, 'utf8')) as ProfileSchema;\n    if (!raw.partitions) throw new Error('partitions missing');\n    return raw;\n  } catch (e) {\n    throw new Error(`profile-schema unreadable at ${file}: ${String(e)}`);\n  }\n}\n\nexport interface SchemaCheck {\n  ok: boolean;\n  reason?: string;\n  temporal: Temporal;\n}\n\n/**\n * Validate an ADD against the whitelist and resolve the entry's temporal tier:\n * LLM nominates within the sub_topic's allowed set; missing nomination falls\n * back to the declared default; fully unlisted -> reject (charter boundary).\n */\nexport function checkAddAgainstSchema(\n  schema: ProfileSchema,\n  partition: Partition,\n  topic: string,\n  subTopic: string,\n  nominated?: Temporal,\n): SchemaCheck {\n  const p = schema.partitions[partition];\n  if (!p) return { ok: false, reason: `partition not in schema: ${partition}`, temporal: 'stable' };\n  const t = p.topics[topic];\n  if (!t) return { ok: false, reason: `topic not in schema: ${partition}/${topic}`, temporal: 'stable' };\n  const st = t.subtopics[subTopic];\n  if (!st) return { ok: false, reason: `sub_topic not in schema: ${partition}/${topic}/${subTopic}`, temporal: 'stable' };\n  const allowed: Temporal[] = st.allowed && st.allowed.length > 0 ? st.allowed : ['stable'];\n  const def: Temporal = st.default && allowed.includes(st.default) ? st.default : allowed[0]!;\n  if (!nominated) return { ok: true, temporal: def };\n  if (!allowed.includes(nominated)) {\n    return {\n      ok: false,\n      reason: `temporal \"${nominated}\" not allowed for ${partition}/${topic}/${subTopic} (allowed: ${allowed.join('|')})`,\n      temporal: def,\n    };\n  }\n  return { ok: true, temporal: nominated };\n}\n"],"mappings":";;;;;;;;AAIA,OAAOA,SAAQ;AACf,OAAOC,WAAU;;;ACDjB,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,YAAY,sBAAsB;AAEpC,SAAS,WAAW,QAAgB,MAAM,KAAa;AAC5D,SAAO,KAAK;AAAA,IACV,KAAK,QAAQ,MAAM;AAAA,IACnB,IAAI,KAAK,SAAS,MAAM,CAAC,IAAI,GAAG,IAAI,WAAW,EAAE,MAAM,GAAG,CAAC,CAAC;AAAA,EAC9D;AACF;AAEO,SAAS,oBAAoB,QAAgB,MAAiC;AACnF,QAAM,MAAM,WAAW,MAAM;AAC7B,MAAI;AACF,OAAG,cAAc,KAAK,IAAI;AAC1B,OAAG,WAAW,KAAK,MAAM;AAAA,EAC3B,UAAE;AACA,OAAG,OAAO,KAAK,EAAE,OAAO,KAAK,CAAC;AAAA,EAChC;AACF;AAEO,SAAS,oBAAoB,QAAgB,OAAsB;AACxE,sBAAoB,QAAQ,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAC5D;AAGO,SAAS,cAAc,QAAgB,SAAS,GAAS;AAC9D,QAAM,OAAO,GAAG,SAAS,MAAM;AAC/B,MAAI,CAAC,KAAK,OAAO,EAAG,OAAM,IAAI,MAAM,sBAAsB,MAAM,EAAE;AAClE,QAAM,MAAM,OAAO,MAAM,KAAK,IAAI,KAAK,MAAM,CAAC,CAAC;AAC/C,WAAS,IAAI,GAAG,IAAI,QAAQ,KAAK;AAC/B,mBAAe,GAAG;AAClB,OAAG,cAAc,QAAQ,GAAG;AAAA,EAC9B;AACA,KAAG,OAAO,QAAQ,EAAE,OAAO,KAAK,CAAC;AACnC;;;AD1BO,SAAS,gBAAgB,MAAc,OAAuD;AACnG,EAAAC,IAAG,UAAUC,MAAK,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AACpD,QAAM,OAAO,KAAK,UAAU,EAAE,IAAI,MAAM,OAAM,oBAAI,KAAK,GAAE,YAAY,GAAG,GAAG,MAAM,CAAC;AAClF,EAAAD,IAAG,eAAe,MAAM,OAAO,MAAM,MAAM;AAC7C;AAEO,SAAS,eAA+B,MAAmB;AAChE,MAAI,CAACA,IAAG,WAAW,IAAI,EAAG,QAAO,CAAC;AAClC,QAAM,MAAW,CAAC;AAClB,QAAM,MAAMA,IAAG,aAAa,MAAM,MAAM;AACxC,aAAW,QAAQ,IAAI,MAAM,IAAI,GAAG;AAClC,UAAM,UAAU,KAAK,KAAK;AAC1B,QAAI,CAAC,QAAS;AACd,QAAI;AACF,UAAI,KAAK,KAAK,MAAM,OAAO,CAAM;AAAA,IACnC,QAAQ;AAEN,UAAI,KAAK,EAAE,IAAI,IAAI,SAAS,MAAM,KAAK,QAAQ,MAAM,GAAG,GAAG,EAAE,CAAiB;AAAA,IAChF;AAAA,EACF;AACA,SAAO;AACT;AAMO,SAAS,eAAe,MAAc,UAAkB,MAAM,KAAK,IAAI,GAAW;AACvF,MAAI,CAACA,IAAG,WAAW,IAAI,EAAG,QAAO;AACjC,QAAM,QAAQ,eAAe,IAAI;AACjC,QAAM,OAAO,MAAM,OAAO,CAAC,MAAM;AAC/B,UAAM,KAAK;AACX,UAAM,KAAK,KAAK,MAAM,GAAG,MAAM,EAAE;AACjC,QAAI,CAAC,OAAO,SAAS,EAAE,EAAG,QAAO;AACjC,WAAO,MAAM,MAAM;AAAA,EACrB,CAAC;AACD,QAAM,UAAU,MAAM,SAAS,KAAK;AACpC,MAAI,YAAY,EAAG,QAAO;AAC1B,QAAM,OAAO,KAAK,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,EAAE,KAAK,IAAI;AACzD,sBAAoB,MAAM,OAAO,OAAO,OAAO,EAAE;AACjD,SAAO;AACT;;;AEjDA,OAAOE,WAAU;AACjB,SAAS,cAAAC,mBAAkB;AAC3B,OAAOC,SAAQ;;;AC0ER,IAAM,aAAmC,CAAC,YAAY,YAAY,QAAQ,KAAK;AAE/E,IAAM,iBAA+C;AAAA,EAC1D,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AACV;AAEO,SAAS,eAA2B;AACzC,SAAO;AAAA,IACL,SAAS;AAAA,IACT,YAAY,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,GAAG,UAAU,EAAE,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,CAAC,EAAE,EAAE;AAAA,EAClH;AACF;;;AC5FA,OAAOC,SAAQ;AACf,OAAOC,WAAU;AAeV,SAAS,kBAAkB,OAAkE;AAClG,QAAM,WAAWA,MAAK,KAAK,MAAM,aAAa,qBAAqB;AACnE,QAAM,OAAOD,IAAG,WAAW,QAAQ,IAAI,WAAWC,MAAK,KAAK,MAAM,WAAW,qBAAqB;AAClG,MAAI;AACF,UAAM,MAAM,KAAK,MAAMD,IAAG,aAAa,MAAM,MAAM,CAAC;AACpD,QAAI,CAAC,IAAI,WAAY,OAAM,IAAI,MAAM,oBAAoB;AACzD,WAAO;AAAA,EACT,SAAS,GAAG;AACV,UAAM,IAAI,MAAM,gCAAgC,IAAI,KAAK,OAAO,CAAC,CAAC,EAAE;AAAA,EACtE;AACF;AAaO,SAAS,sBACd,QACA,WACA,OACA,UACA,WACa;AACb,QAAM,IAAI,OAAO,WAAW,SAAS;AACrC,MAAI,CAAC,EAAG,QAAO,EAAE,IAAI,OAAO,QAAQ,4BAA4B,SAAS,IAAI,UAAU,SAAS;AAChG,QAAM,IAAI,EAAE,OAAO,KAAK;AACxB,MAAI,CAAC,EAAG,QAAO,EAAE,IAAI,OAAO,QAAQ,wBAAwB,SAAS,IAAI,KAAK,IAAI,UAAU,SAAS;AACrG,QAAM,KAAK,EAAE,UAAU,QAAQ;AAC/B,MAAI,CAAC,GAAI,QAAO,EAAE,IAAI,OAAO,QAAQ,4BAA4B,SAAS,IAAI,KAAK,IAAI,QAAQ,IAAI,UAAU,SAAS;AACtH,QAAM,UAAsB,GAAG,WAAW,GAAG,QAAQ,SAAS,IAAI,GAAG,UAAU,CAAC,QAAQ;AACxF,QAAM,MAAgB,GAAG,WAAW,QAAQ,SAAS,GAAG,OAAO,IAAI,GAAG,UAAU,QAAQ,CAAC;AACzF,MAAI,CAAC,UAAW,QAAO,EAAE,IAAI,MAAM,UAAU,IAAI;AACjD,MAAI,CAAC,QAAQ,SAAS,SAAS,GAAG;AAChC,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ,aAAa,SAAS,qBAAqB,SAAS,IAAI,KAAK,IAAI,QAAQ,cAAc,QAAQ,KAAK,GAAG,CAAC;AAAA,MAChH,UAAU;AAAA,IACZ;AAAA,EACF;AACA,SAAO,EAAE,IAAI,MAAM,UAAU,UAAU;AACzC;;;AFvCA,IAAM,SAAS;AAER,SAAS,gBAAgB,SAAyB;AACvD,SAAOE,MAAK,KAAK,SAAS,cAAc;AAC1C;AAEO,SAAS,gBAAgB,SAAyB;AACvD,SAAOA,MAAK,KAAK,SAAS,uBAAuB;AACnD;AASO,IAAM,gBAAgB;AACtB,IAAM,iBAAiB;AAUvB,SAAS,iBAAiB,SAAyB;AACxD,SAAOA,MAAK,KAAK,SAAS,aAAa;AACzC;AAEA,SAAS,aAAa,OAAkB,SAAyC;AAC/E,QAAM,OAAO,SAA0B,OAAO,iBAAiB,OAAO,CAAC;AACvE,MAAI,CAAC,QAAQ,KAAK,YAAY,KAAK,OAAO,KAAK,eAAe,YAAY,CAAC,KAAK,KAAK,WAAY,QAAO;AACxG,SAAO;AACT;AAEA,SAAS,iBAAiB,OAAkB,SAA2B;AACrE,MAAI;AACF,WAAOC,IAAG,YAAY,MAAM,OAAO,OAAO,CAAC,EACxC,OAAO,CAAC,MAAM,EAAE,WAAW,cAAc,KAAK,EAAE,SAAS,QAAQ,CAAC,EAClE,KAAK;AAAA,EACV,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAGA,SAAS,WAAW,KAAiB,MAAc,YAAoB,OAA0E;AAC/I,QAAM,QAAQ,KAAK,MAAM,IAAI;AAC7B,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,UAAM,UAAU,MAAM,CAAC,EAAG,KAAK;AAC/B,QAAI,CAAC,QAAS;AACd,QAAI;AACF,YAAM,MAAM,KAAK,MAAM,OAAO;AAG9B,UAAI,cAAc,IAAI,MAAM,OAAO,IAAI,EAAE,KAAK,WAAY;AAC1D,iBAAW,MAAM,IAAI,WAAW,CAAC,EAAG,mBAAkB,KAAK,IAAI,IAAI,EAAE;AACrE,YAAM,WAAW;AAAA,IACnB,QAAQ;AAEN,YAAM,SAAS,MAAM,MAAM,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;AACxD,UAAI,MAAM,UAAU,QAAQ;AAC1B,cAAM,gBAAgB,MAAM,SAAS;AACrC;AAAA,MACF;AAAA,IAEF;AAAA,EACF;AACF;AAGO,SAAS,cAAc,OAAkB,SAA+B;AAC7E,QAAM,OAAO,aAAa,OAAO,OAAO;AACxC,QAAM,MAAM,OAAO,KAAK,MAAM,aAAa;AAC3C,QAAM,aAAa,MAAM,cAAc;AACvC,QAAM,QAAQ,EAAE,SAAS,MAAM,iBAAiB,GAAG,eAAe,GAAG,QAAQ,MAAM;AACnF,aAAW,QAAQ,iBAAiB,OAAO,OAAO,GAAG;AACnD,QAAI;AAGF,iBAAW,KAAKA,IAAG,aAAaD,MAAK,KAAK,SAAS,IAAI,GAAG,MAAM,GAAG,YAAY,EAAE,SAAS,GAAG,eAAe,GAAG,QAAQ,MAAM,CAAC;AAAA,IAChI,QAAQ;AAAA,IAA+B;AAAA,EACzC;AACA,QAAM,SAAS;AACf,aAAW,KAAK,SAAS,OAAO,gBAAgB,OAAO,GAAG,EAAE,GAAG,YAAY,KAAK;AAChF,SAAO,EAAE,KAAK,eAAe,MAAM,eAAe,SAAS,MAAM,QAAQ;AAC3E;AAEO,SAAS,YAAY,OAAkB,MAA0B;AACtE,QAAM,MAAM,SAAqB,OAAO,IAAI;AAC5C,MAAI,CAAC,OAAO,CAAC,IAAI,WAAY,QAAO,aAAa;AAEjD,aAAW,KAAK,YAAY;AAC1B,QAAI,CAAC,IAAI,WAAW,CAAC,EAAG,KAAI,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE;AAAA,EAC5D;AACA,SAAO;AACT;AAEA,SAAS,SAAS,GAAmB;AACnC,QAAM,IAAI,KAAK,MAAM,CAAC;AACtB,SAAO,OAAO,SAAS,CAAC,IAAI,IAAI;AAClC;AAGA,SAAS,UAAU,OAAkB,SAAiB,KAAsB;AAC1E,QAAM,OAAO,IAAI,MAAM,GAAG,EAAE,CAAC,KAAK;AAClC,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,SAASA,MAAK,KAAK,SAAS,IAAI;AACtC,MAAI;AACF,WAAOC,IAAG,WAAW,MAAM,OAAO,MAAM,CAAC;AAAA,EAC3C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,YAAY,OAA+B;AAClD,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,SAAO,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,eAAe,CAAC,KAAK,GAAG,CAAC;AAC/D;AAEA,SAAS,WAAW,KAAiB,IAAsC;AACzE,aAAW,KAAK,YAAY;AAC1B,UAAM,MAAM,IAAI,WAAW,CAAC,EAAG,QAAQ,KAAK,CAAC,MAAM,EAAE,OAAO,MAAM,EAAE,YAAY,IAAI;AACpF,QAAI,IAAK,QAAO;AAAA,EAClB;AACA,SAAO;AACT;AASO,SAAS,cACd,OACA,SACA,KACA,KACA,QACA,QACA,KACa;AACb,QAAM,UAAuB,CAAC;AAC9B,QAAM,WAAgD,CAAC;AACvD,QAAM,SAAS,IAAI,KAAK,GAAG,EAAE,YAAY;AAEzC,aAAW,MAAM,KAAK;AACpB,QAAI,GAAG,OAAO,QAAQ;AACpB,cAAQ,KAAK,EAAE;AACf;AAAA,IACF;AACA,QAAI,GAAG,OAAO,OAAO;AACnB,UAAI,GAAG,cAAc,SAAS,CAAC,OAAO,QAAQ,YAAY;AACxD,iBAAS,KAAK,EAAE,IAAI,QAAQ,4BAA4B,CAAC;AACzD;AAAA,MACF;AACA,YAAM,QAAQ,sBAAsB,QAAQ,GAAG,WAAW,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ;AAC5F,UAAI,CAAC,MAAM,IAAI;AACb,iBAAS,KAAK,EAAE,IAAI,QAAQ,MAAM,OAAQ,CAAC;AAC3C;AAAA,MACF;AACA,UAAI,CAAC,GAAG,YAAY,GAAG,SAAS,WAAW,GAAG;AAC5C,iBAAS,KAAK,EAAE,IAAI,QAAQ,gDAAgD,CAAC;AAC7E;AAAA,MACF;AACA,YAAM,SAAS,GAAG,SAAS,KAAK,CAAC,MAAM,CAAC,UAAU,OAAO,SAAS,EAAE,GAAG,CAAC;AACxE,UAAI,QAAQ;AACV,iBAAS,KAAK,EAAE,IAAI,QAAQ,kCAAkC,OAAO,GAAG,GAAG,CAAC;AAC5E;AAAA,MACF;AACA,YAAM,MAAM,YAAY,GAAG,SAAS,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;AACtD,YAAM,SAAS,IAAI,WAAW,GAAG,SAAS,EAAG,QAAQ,OAAO,CAAC,MAAM,EAAE,YAAY,IAAI;AACrF,UAAI,OAAO,UAAU,OAAO,QAAQ,cAAc;AAChD,iBAAS,KAAK,EAAE,IAAI,QAAQ,aAAa,GAAG,SAAS,YAAY,OAAO,QAAQ,YAAY,oBAAoB,CAAC;AACjH;AAAA,MACF;AACA,eAAS;AACT,YAAM,QAAsB;AAAA,QAC1B,IAAI,IAAI,MAAM,SAAS,EAAE,CAAC,GAAGC,YAAW,EAAE,MAAM,GAAG,CAAC,CAAC;AAAA,QACrD,WAAW,GAAG;AAAA,QACd,OAAO,GAAG;AAAA,QACV,UAAU,GAAG;AAAA,QACb,SAAS,GAAG,QAAQ,KAAK;AAAA,QACzB,YAAY,KAAK,IAAI,GAAG,cAAc,KAAK,GAAG;AAAA,QAC9C,UAAU,MAAM;AAAA,QAChB,WAAW;AAAA,QACX,SAAS;AAAA,QACT,cAAc;AAAA,QACd,UAAU,GAAG;AAAA,QACb,WAAW;AAAA,QACX,WAAW;AAAA,QACX,aAAa;AAAA,MACf;AACA,SAAG,aAAa,MAAM;AACtB,UAAI,WAAW,GAAG,SAAS,EAAG,QAAQ,KAAK,KAAK;AAChD,cAAQ,KAAK,EAAE;AACf;AAAA,IACF;AACA,QAAI,GAAG,OAAO,UAAU;AACtB,YAAM,QAAQ,WAAW,KAAK,GAAG,EAAE;AACnC,UAAI,CAAC,OAAO;AACV,iBAAS,KAAK,EAAE,IAAI,QAAQ,8BAA8B,GAAG,EAAE,GAAG,CAAC;AACnE;AAAA,MACF;AACA,UAAI,GAAG,QAAQ,YAAY,OAAW,OAAM,UAAU,GAAG,QAAQ,QAAQ,KAAK;AAC9E,UAAI,GAAG,QAAQ,eAAe,QAAW;AACvC,cAAM,MAAM,YAAY,MAAM,SAAS,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;AAGzD,YAAI,GAAG,QAAQ,aAAa,MAAM,cAAc,MAAM,SAAS,SAAS,GAAG;AACzE,mBAAS,KAAK,EAAE,IAAI,QAAQ,8DAA8D,CAAC;AAC3F;AAAA,QACF;AACA,cAAM,aAAa,KAAK,IAAI,GAAG,QAAQ,YAAY,GAAG;AAAA,MACxD;AACA,YAAM,YAAY;AAClB,YAAM,eAAe;AACrB,cAAQ,KAAK,EAAE;AACf;AAAA,IACF;AACA,QAAI,GAAG,OAAO,cAAc;AAC1B,YAAM,QAAQ,WAAW,KAAK,GAAG,EAAE;AACnC,UAAI,CAAC,OAAO;AACV,iBAAS,KAAK,EAAE,IAAI,QAAQ,8BAA8B,GAAG,EAAE,GAAG,CAAC;AACnE;AAAA,MACF;AACA,UAAI,MAAM,aAAa,YAAY;AACjC,iBAAS,KAAK,EAAE,IAAI,QAAQ,iEAAiE,CAAC;AAC9F;AAAA,MACF;AAEA,YAAM,qBAAqB,GAAG,YAAY,CAAC,GAAG,SAAS,MACjD,GAAG,YAAY,CAAC,GAAG,KAAK,CAAC,MAAM,SAAS,EAAE,EAAE,IAAI,SAAS,MAAM,SAAS,MAAM,SAAS,SAAS,CAAC,GAAG,MAAM,EAAE,CAAC;AACnH,UAAI,CAAC,mBAAmB;AACtB,iBAAS,KAAK,EAAE,IAAI,QAAQ,+DAA+D,CAAC;AAC5F;AAAA,MACF;AACA,YAAM,UAAU;AAChB,YAAM,eAAe;AACrB,YAAM,YAAY;AAClB,YAAM,eAAe;AACrB,UAAI,GAAG,SAAU,OAAM,SAAS,KAAK,GAAG,GAAG,QAAQ;AACnD,cAAQ,KAAK,EAAE;AACf;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,SAAS,SAAS;AAC7B;AAEA,IAAI,QAAQ;AAGL,SAAS,sBACd,KACA,QACA,KACwD;AACxD,QAAM,SAAS,IAAI,KAAK,GAAG,EAAE,YAAY;AACzC,MAAI,kBAAkB;AACtB,MAAI,oBAAoB;AACxB,aAAW,KAAK,YAAY;AAC1B,eAAW,KAAK,IAAI,WAAW,CAAC,EAAG,SAAS;AAC1C,UAAI,EAAE,YAAY,KAAM;AACxB,YAAM,eAAe,KAAK,IAAI,GAAG,EAAE,SAAS,IAAI,CAAC,MAAM,SAAS,EAAE,EAAE,CAAC,GAAG,SAAS,EAAE,SAAS,CAAC;AAC7F,UAAI,EAAE,aAAa,YAAY;AAC7B,YAAI,MAAM,eAAe,OAAO,QAAQ,eAAe,QAAQ;AAC7D,YAAE,UAAU;AACZ,YAAE,YAAY;AACd,YAAE,eAAe;AACjB,6BAAmB;AAAA,QACrB;AAAA,MACF,WAAW,CAAC,EAAE,eAAe,MAAM,eAAe,OAAO,QAAQ,wBAAwB,QAAQ;AAC/F,UAAE,cAAc;AAChB,6BAAqB;AAAA,MACvB;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,iBAAiB,kBAAkB;AAC9C;AAGO,SAAS,mBACd,OACA,SACA,KACA,QACM;AACN,WAAS,OAAO,gBAAgB,OAAO,GAAG,GAAG;AAC7C,QAAM,OAAO,KAAK,UAAU,EAAE,KAAI,oBAAI,KAAK,GAAE,YAAY,GAAG,GAAG,OAAO,CAAC;AACvE,QAAM,UAAU,gBAAgB,OAAO;AACvC,MAAI;AACF,IAAAD,IAAG,eAAe,MAAM,OAAO,OAAO,GAAG,OAAO,MAAM,MAAM;AAAA,EAC9D,QAAQ;AACN,IAAAA,IAAG,UAAU,SAAS,EAAE,WAAW,KAAK,CAAC;AACzC,IAAAA,IAAG,eAAe,MAAM,OAAO,OAAO,GAAG,OAAO,MAAM,MAAM;AAAA,EAC9D;AACF;AAIA,SAAS,kBAAkB,KAAiB,IAAe,IAAkB;AAE3E,MAAI,GAAG,OAAO,OAAO;AACnB,aAAS;AACT,QAAI,WAAW,GAAG,SAAS,EAAG,QAAQ,KAAK;AAAA,MACzC,IAAI,GAAG,cAAc,IAAI,MAAM,SAAS,EAAE,CAAC,GAAGC,YAAW,EAAE,MAAM,GAAG,CAAC,CAAC;AAAA,MACtE,WAAW,GAAG;AAAA,MACd,OAAO,GAAG;AAAA,MACV,UAAU,GAAG;AAAA,MACb,SAAS,GAAG;AAAA,MACZ,YAAY,GAAG,cAAc;AAAA,MAC7B,UAAU,GAAG,YAAY;AAAA,MACzB,WAAW;AAAA,MACX,SAAS;AAAA,MACT,cAAc;AAAA,MACd,UAAU,GAAG;AAAA,MACb,WAAW;AAAA,MACX,WAAW;AAAA,MACX,aAAa;AAAA,IACf,CAAC;AACD;AAAA,EACF;AACA,MAAI,GAAG,OAAO,UAAU;AACtB,UAAM,IAAI,CAAC,GAAG,UAAU,EAAE,QAAQ,CAAC,MAAM,IAAI,WAAW,CAAC,EAAG,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,GAAG,EAAE;AAC/F,QAAI,GAAG;AACL,UAAI,GAAG,QAAQ,YAAY,OAAW,GAAE,UAAU,GAAG,QAAQ;AAC7D,UAAI,GAAG,QAAQ,eAAe,OAAW,GAAE,aAAa,GAAG,QAAQ;AACnE,QAAE,YAAY;AACd,QAAE,eAAe;AAAA,IACnB;AACA;AAAA,EACF;AACA,MAAI,GAAG,OAAO,cAAc;AAC1B,UAAM,IAAI,CAAC,GAAG,UAAU,EAAE,QAAQ,CAAC,MAAM,IAAI,WAAW,CAAC,EAAG,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,GAAG,EAAE;AAC/F,QAAI,GAAG;AACL,QAAE,UAAU;AACZ,QAAE,YAAY;AACd,QAAE,eAAe;AAAA,IACnB;AAAA,EACF;AAEF;AAgBO,SAAS,cAAc,OAAkB,SAA+B;AAC7E,QAAM,WAAW,cAAc,OAAO,OAAO;AAC7C,QAAM,SAAS,YAAY,OAAO,gBAAgB,OAAO,CAAC;AAG1D,QAAM,QAAQ,CAAC,QACb,KAAK,UAAU,IAAI,YAAY,CAAC,GAAG,MAAO,CAAC,MAAM,gBAAgB,aAAa,aAAa,aAAa,WAAW,EAAE,SAAS,CAAC,IAAI,WAAW,CAAE;AAClJ,QAAM,KAAK,MAAM,SAAS,GAAG,MAAM,MAAM,MAAM;AAC/C,MAAI,GAAI,QAAO,EAAE,IAAI,MAAM,eAAe,SAAS,eAAe,SAAS,SAAS,QAAQ;AAE5F,QAAM,UAAU,IAAI,IAAI,CAAC,GAAG,UAAU,EAAE,QAAQ,CAAC,MAAM,OAAO,WAAW,CAAC,EAAG,QAAQ,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAAI,QAAM,YAAY,IAAI,IAAI,CAAC,GAAG,UAAU,EAAE,QAAQ,CAAC,MAAM,SAAS,IAAI,WAAW,CAAC,EAAG,QAAQ,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAClO,QAAM,WAAW,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;AAC3D,QAAM,aAAa,CAAC,GAAG,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;AAC7D,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,iBAAiB;AAAA,MACf,IAAI,YAAY,cAAc;AAAA,MAC9B,UAAU,aAAa,6BAA6B;AAAA,MACpD,QAAQ,WAAW,oBAAoB;AAAA,IACzC;AAAA,IACA,eAAe,SAAS;AAAA,IACxB,SAAS,SAAS;AAAA,EACpB;AACF;AAUO,SAAS,eACd,OACA,SACA,OAA4B,CAAC,GACa;AAC1C,QAAM,WAAW,cAAc,OAAO,OAAO;AAC7C,QAAM,SAAS,gBAAgB,OAAO;AACtC,MAAI,KAAK,OAAO;AACd,UAAM,SAAS,YAAY,OAAO,MAAM;AACxC,UAAM,OAAO,KAAK,UAAU,MAAM,MAAM,KAAK,UAAU,SAAS,GAAG;AACnE,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,eAAe,SAAS;AAAA,MACxB,SAAS,SAAS;AAAA,MAClB,OAAO;AAAA,MACP,aAAa,OAAO,YAAY;AAAA,IAClC;AAAA,EACF;AACA,WAAS,OAAO,QAAQ,SAAS,GAAG;AACpC,MAAI,SAAS,gBAAgB,GAAG;AAE9B;AAAA,MACE;AAAA,MACAF,MAAK,KAAK,SAAS,QAAQ,oBAAoB;AAAA,MAC/C,qBAAqB,SAAS,aAAa,kCAAkC,SAAS,OAAO;AAAA;AAAA,IAC/F;AAAA,EACF;AACA,SAAO,EAAE,IAAI,MAAM,eAAe,SAAS,eAAe,SAAS,SAAS,SAAS,OAAO,KAAK;AACnG;","names":["fs","path","fs","path","path","randomUUID","fs","fs","path","path","fs","randomUUID"]}