@kanadego/dsh-heartbeat 1.9.3 → 2.0.0

package/dist/migrate-TQ5PB2DI.js

@@ -0,0 +1,27 @@
+import {
+  MIGRATE_FILES,
+  MIGRATE_MAGIC,
+  MIGRATE_MAX_BYTES,
+  MIGRATE_MAX_FILES,
+  MIGRATE_VERSION,
+  applyMigrationEntries,
+  collectMigrationEntries,
+  decryptContainer,
+  encryptContainer,
+  isMigratablePath
+} from "./chunk-NCPKOWS7.js";
+import "./chunk-AKIJ4LS2.js";
+import "./chunk-IBBAISSW.js";
+export {
+  MIGRATE_FILES,
+  MIGRATE_MAGIC,
+  MIGRATE_MAX_BYTES,
+  MIGRATE_MAX_FILES,
+  MIGRATE_VERSION,
+  applyMigrationEntries,
+  collectMigrationEntries,
+  decryptContainer,
+  encryptContainer,
+  isMigratablePath
+};
+//# sourceMappingURL=migrate-TQ5PB2DI.js.map

package/dist/{orchestrator-ZPRGVDCB.js → orchestrator-P7AEWVYR.js}

@@ -1,9 +1,11 @@
 import {
+  BeatAbortedError,
   ENGINE_ROOM_EXTRA_TOOLS,
   HOME_ROTATE_EVENT_COUNT,
   TOKEN_SAVER_IDLE_SECONDS,
   TOKEN_SAVER_WAKE_MS,
   agentLooksAlive,
+  agentTurn,
   applyHeartbeatInterval,
   beat,
   buildEngineRoomAllowList,
@@ -16,31 +18,36 @@ import {
   markHomeRotateIfOverflow,
   parseJsonBlock,
   pickSpokenLine,
+  pinEngineRoomTools,
   resetHomeAgent,
   resetHomeSession,
+  selectedPresetId,
   sessionEventCount,
   sessionEvents,
   shouldArchiveRotatedHome,
   shouldRotateHome,
   spokeTextSince,
   startOrchestrator,
-  userActiveInBoundSessions
-} from "./chunk-TRO4E6WG.js";
-import "./chunk-WLZSABBH.js";
+  throwIfAborted,
+  userActiveInBoundSessions,
+  withTimeout
+} from "./chunk-6MVKWICX.js";
+import "./chunk-6XM6KY7M.js";
 import "./chunk-3QJJRXIR.js";
-import "./chunk-JDH2LDFS.js";
-import "./chunk-3MDBU6WY.js";
-import "./chunk-IV2ZWQA3.js";
-import "./chunk-KB5SMG3F.js";
-import "./chunk-CUOSICYJ.js";
-import "./chunk-K5Y6JP2B.js";
-import "./chunk-WRUTATW4.js";
+import "./chunk-TVX4HV4Y.js";
+import "./chunk-DZ7YCFGX.js";
+import "./chunk-DC5HMCJC.js";
+import "./chunk-544QOJN5.js";
+import "./chunk-AKIJ4LS2.js";
+import "./chunk-IBBAISSW.js";
 export {
+  BeatAbortedError,
   ENGINE_ROOM_EXTRA_TOOLS,
   HOME_ROTATE_EVENT_COUNT,
   TOKEN_SAVER_IDLE_SECONDS,
   TOKEN_SAVER_WAKE_MS,
   agentLooksAlive,
+  agentTurn,
   applyHeartbeatInterval,
   beat,
   buildEngineRoomAllowList,
@@ -53,14 +60,18 @@ export {
   markHomeRotateIfOverflow,
   parseJsonBlock,
   pickSpokenLine,
+  pinEngineRoomTools,
   resetHomeAgent,
   resetHomeSession,
+  selectedPresetId,
   sessionEventCount,
   sessionEvents,
   shouldArchiveRotatedHome,
   shouldRotateHome,
   spokeTextSince,
   startOrchestrator,
-  userActiveInBoundSessions
+  throwIfAborted,
+  userActiveInBoundSessions,
+  withTimeout
 };
-//# sourceMappingURL=orchestrator-ZPRGVDCB.js.map
+//# sourceMappingURL=orchestrator-P7AEWVYR.js.map

package/dist/{pool-UTXQJJ5C.js → pool-2T6TVS2L.js}

@@ -16,10 +16,9 @@ import {
   savePool,
   seedsFilePath,
   surfaceSeed
-} from "./chunk-JDH2LDFS.js";
-import "./chunk-IV2ZWQA3.js";
-import "./chunk-K5Y6JP2B.js";
-import "./chunk-WRUTATW4.js";
+} from "./chunk-TVX4HV4Y.js";
+import "./chunk-AKIJ4LS2.js";
+import "./chunk-IBBAISSW.js";
 export {
   SEED_CATEGORY_CAPS,
   TTL_KEYS,
@@ -39,4 +38,4 @@ export {
   seedsFilePath,
   surfaceSeed
 };
-//# sourceMappingURL=pool-UTXQJJ5C.js.map
+//# sourceMappingURL=pool-2T6TVS2L.js.map

package/dist/{snapshot-K5VHETTK.js → snapshot-F5B2DD56.js}

@@ -3,14 +3,14 @@ import {
   snapshotDue,
   snapshotIfDue,
   snapshotProfile
-} from "./chunk-KB5SMG3F.js";
-import "./chunk-CUOSICYJ.js";
-import "./chunk-K5Y6JP2B.js";
-import "./chunk-WRUTATW4.js";
+} from "./chunk-DC5HMCJC.js";
+import "./chunk-544QOJN5.js";
+import "./chunk-AKIJ4LS2.js";
+import "./chunk-IBBAISSW.js";
 export {
   SNAPSHOT_THRESHOLD,
   snapshotDue,
   snapshotIfDue,
   snapshotProfile
 };
-//# sourceMappingURL=snapshot-K5VHETTK.js.map
+//# sourceMappingURL=snapshot-F5B2DD56.js.map

package/package.json

@@ -1,83 +1,84 @@
-{
-  "name": "@kanadego/dsh-heartbeat",
-  "version": "1.9.3",
-  "description": "Heartbeat plugin for DeepSeek Harness: scheduled autonomous reflection loop with user profile, material pool, pace gate, and gated proactive expression.",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/Kanadego/dsh-heartbeat.git"
-  },
-  "homepage": "https://github.com/Kanadego/dsh-heartbeat",
-  "bugs": {
-    "url": "https://github.com/Kanadego/dsh-heartbeat/issues"
-  },
-  "keywords": [
-    "dsh",
-    "dsh-plugin",
-    "deepseek-harness",
-    "heartbeat",
-    "proactive",
-    "agent"
-  ],
-  "publishConfig": {
-    "registry": "https://registry.npmjs.org"
-  },
-  "type": "module",
-  "main": "dist/index.js",
-  "types": "dist/index.d.ts",
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "default": "./dist/index.js"
-    },
-    "./cli": {
-      "types": "./dist/cli/index.d.ts",
-      "default": "./dist/cli/index.js"
-    },
-    "./client": "./client.js",
-    "./package.json": "./package.json",
-    "./cordis.patch.yml": "./cordis.patch.yml"
-  },
-  "files": [
-    "dist",
-    "config",
-    "assets",
-    "client.js",
-    "cordis.patch.yml",
-    "README.md",
-    "LICENSE"
-  ],
-  "engines": {
-    "node": ">=22.19.0"
-  },
-  "os": [
-    "win32"
-  ],
-  "dependencies": {
-    "@deepseek-ai/dsh-settings": "^0.1.1-rc.2 || ^0.1.5-rc.2 || ^0.1.7-rc.1 || ^0.2.0-rc.1"
-  },
-  "peerDependencies": {
-    "@deepseek-ai/dsh-llm": "^0.1.1-rc.2 || ^0.1.5-rc.2 || ^0.1.7-rc.1 || ^0.2.0-rc.1"
-  },
-  "devDependencies": {
-    "@deepseek-ai/dsh-llm": "^0.1.7-rc.1",
-    "@deepseek-ai/dsh-settings": "^0.1.1-rc.2",
-    "@deepseek-ai/schemastery": "^3.18.2",
-    "@types/node": "^24.0.0",
-    "tsup": "^8.3.0",
-    "tsx": "^4.19.0",
-    "typescript": "^5.7.0"
-  },
-  "scripts": {
-    "build": "tsup",
-    "typecheck": "tsc --noEmit",
-    "test": "node --import tsx --test \"tests/*.test.ts\""
-  },
-  "dsh": {
-    "bundle": {
-      "patch": "./cordis.patch.yml"
-    },
-    "client": {
-      "platform": "web"
-    }
-  }
-}
+{
+  "name": "@kanadego/dsh-heartbeat",
+  "version": "2.0.0",
+  "description": "Heartbeat plugin for DeepSeek Harness: scheduled autonomous reflection loop with user profile, material pool, pace gate, and gated proactive expression.",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Kanadego/dsh-heartbeat.git"
+  },
+  "homepage": "https://github.com/Kanadego/dsh-heartbeat",
+  "bugs": {
+    "url": "https://github.com/Kanadego/dsh-heartbeat/issues"
+  },
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "deepseek-harness",
+    "heartbeat",
+    "proactive",
+    "agent"
+  ],
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org"
+  },
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./cli": {
+      "types": "./dist/cli/index.d.ts",
+      "default": "./dist/cli/index.js"
+    },
+    "./client": "./client.js",
+    "./package.json": "./package.json",
+    "./cordis.patch.yml": "./cordis.patch.yml"
+  },
+  "files": [
+    "dist",
+    "config",
+    "assets",
+    "client.js",
+    "cordis.patch.yml",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=22.19.0"
+  },
+  "os": [
+    "win32"
+  ],
+  "dependencies": {
+    "@deepseek-ai/dsh-settings": "^0.1.1-rc.2 || ^0.1.5-rc.2 || ^0.1.7-rc.1 || ^0.2.0-rc.1 || ^0.2.1-rc.1 || ^0.2.1-rc.2",
+    "@deepseek-ai/schemastery": "^3.18.2"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/dsh-llm": "^0.1.1-rc.2 || ^0.1.5-rc.2 || ^0.1.7-rc.1 || ^0.2.0-rc.1 || ^0.2.1-rc.1 || ^0.2.1-rc.2"
+  },
+  "devDependencies": {
+    "@deepseek-ai/dsh-llm": "^0.1.7-rc.1",
+    "@deepseek-ai/dsh-settings": "^0.1.1-rc.2",
+    "@types/node": "^24.0.0",
+    "tsup": "^8.3.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.7.0"
+  },
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit",
+    "check:client": "node --check client.js",
+    "test": "node --import tsx --test \"tests/*.test.ts\""
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web"
+    }
+  }
+}

package/dist/chunk-3MDBU6WY.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/profile/inbox.ts"],"sourcesContent":["// Observation inbox (design doc §3.2): append-only queue of pending\n// observations; drained by the consolidation run. DPAPI-encrypted. Items hold\n// pointers + at most one short sentence - never raw conversation/screen text.\n\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { randomUUID } from 'node:crypto';\nimport type { PathGuard } from '../core/path-guard.js';\nimport { loadEncryptedText, saveEncryptedText } from '../vault/vault.js';\nimport { withFileLock } from '../core/file-lock.js';\nimport type { InboxItem } from './types.js';\n\nconst MAX_NOTE_CHARS = 120;\n\nexport function inboxFilePath(dataDir: string): string {\n  return path.join(dataDir, 'profile_inbox.jsonl');\n}\n\nfunction truncateNote(note: string): string {\n  const oneLine = note.replace(/\\r?\\n/g, ' ').trim();\n  return oneLine.length > MAX_NOTE_CHARS ? oneLine.slice(0, MAX_NOTE_CHARS) + '…' : oneLine;\n}\n\nexport function inboxAppend(\n  guard: PathGuard,\n  file: string,\n  item: Omit<InboxItem, 'id'> & { id?: string },\n): InboxItem {\n  // H-20 (minimal tier): the append is a whole-file encrypted rewrite, so it\n  // needs the same cross-process lock the pool uses — the CLI can be draining\n  // or writing the same file while a beat appends.\n  return withFileLock(file, () => inboxAppendLocked(guard, file, item));\n}\n\nfunction inboxAppendLocked(\n  guard: PathGuard,\n  file: string,\n  item: Omit<InboxItem, 'id'> & { id?: string },\n): InboxItem {\n  const full: InboxItem = {\n    id: item.id ?? randomUUID().slice(0, 8),\n    kind: item.kind,\n    at: item.at,\n    ref: item.ref,\n    note: truncateNote(item.note),\n  };\n  const prev = loadEncryptedText(guard, file) ?? '';\n  // H-16 (minimal tier): this file is a whole-file encrypted rewrite, so a\n  // repeated observation used to cost a full decrypt + encrypt + write for a\n  // duplicate row. The §3.7 dedupe key is kind+ref — if that row is already\n  // queued, hand it back instead of appending a second copy. (A stalled cursor\n  // used to grow the queue here and rely on the consumer's dedupeItems.)\n  for (const line of prev.split('\\n')) {\n    const trimmed = line.trim();\n    if (!trimmed) continue;\n    try {\n      const existing = JSON.parse(trimmed) as InboxItem;\n      if (existing.kind === full.kind && existing.ref === full.ref) return existing;\n    } catch {\n      // corrupt line: ignore (the queue is re-derivable from its sources)\n    }\n  }\n  saveEncryptedText(guard, file, prev + JSON.stringify(full) + '\\n');\n  return full;\n}\n\nexport function inboxCount(guard: PathGuard, file: string): number {\n  const raw = loadEncryptedText(guard, file);\n  if (!raw) return 0;\n  return raw.split('\\n').filter((l) => l.trim()).length;\n}\n\n/**\n * Drain all items. `commit` controls crash semantics: on consolidation failure\n * the inbox must SURVIVE (§3.7), so the caller drains with commit=false first,\n * and only rewrites an empty inbox after the run succeeded.\n */\nexport function inboxDrain(guard: PathGuard, file: string): InboxItem[] {\n  const raw = loadEncryptedText(guard, file);\n  if (!raw) return [];\n  const items: InboxItem[] = [];\n  for (const line of raw.split('\\n')) {\n    const trimmed = line.trim();\n    if (!trimmed) continue;\n    try {\n      items.push(JSON.parse(trimmed) as InboxItem);\n    } catch {\n      // corrupt line: drop (queue is re-derivable from sources)\n    }\n  }\n  return items;\n}\n\nexport function inboxClear(guard: PathGuard, file: string): void {\n  saveEncryptedText(guard, file, '');\n}\n\n/** Dedupe key (§3.7): same source kind + same ref must not flood the queue. */\nexport function dedupeItems(items: InboxItem[]): InboxItem[] {\n  const seen = new Set<string>();\n  const out: InboxItem[] = [];\n  for (const it of items) {\n    const key = `${it.kind}#${it.ref}`;\n    if (seen.has(key)) continue;\n    seen.add(key);\n    out.push(it);\n  }\n  return out;\n}\n\nexport function inboxHealthCheck(guard: PathGuard, file: string): { total: number; corrupt: number; duplicates: number } {\n  const raw = loadEncryptedText(guard, file) ?? '';\n  let total = 0;\n  let corrupt = 0;\n  const keys = new Set<string>();\n  let duplicates = 0;\n  for (const line of raw.split('\\n')) {\n    const trimmed = line.trim();\n    if (!trimmed) continue;\n    try {\n      const it = JSON.parse(trimmed) as InboxItem;\n      total += 1;\n      const key = `${it.kind}#${it.ref}`;\n      if (keys.has(key)) duplicates += 1;\n      keys.add(key);\n    } catch {\n      corrupt += 1;\n    }\n  }\n  return { total, corrupt, duplicates };\n}\n\nexport function inboxFileExists(guard: PathGuard, file: string): boolean {\n  return fs.existsSync(guard.assert(file));\n}\n"],"mappings":";;;;;;;;;AAIA,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,kBAAkB;AAM3B,IAAM,iBAAiB;AAEhB,SAAS,cAAc,SAAyB;AACrD,SAAO,KAAK,KAAK,SAAS,qBAAqB;AACjD;AAEA,SAAS,aAAa,MAAsB;AAC1C,QAAM,UAAU,KAAK,QAAQ,UAAU,GAAG,EAAE,KAAK;AACjD,SAAO,QAAQ,SAAS,iBAAiB,QAAQ,MAAM,GAAG,cAAc,IAAI,WAAM;AACpF;AAEO,SAAS,YACd,OACA,MACA,MACW;AAIX,SAAO,aAAa,MAAM,MAAM,kBAAkB,OAAO,MAAM,IAAI,CAAC;AACtE;AAEA,SAAS,kBACP,OACA,MACA,MACW;AACX,QAAM,OAAkB;AAAA,IACtB,IAAI,KAAK,MAAM,WAAW,EAAE,MAAM,GAAG,CAAC;AAAA,IACtC,MAAM,KAAK;AAAA,IACX,IAAI,KAAK;AAAA,IACT,KAAK,KAAK;AAAA,IACV,MAAM,aAAa,KAAK,IAAI;AAAA,EAC9B;AACA,QAAM,OAAO,kBAAkB,OAAO,IAAI,KAAK;AAM/C,aAAW,QAAQ,KAAK,MAAM,IAAI,GAAG;AACnC,UAAM,UAAU,KAAK,KAAK;AAC1B,QAAI,CAAC,QAAS;AACd,QAAI;AACF,YAAM,WAAW,KAAK,MAAM,OAAO;AACnC,UAAI,SAAS,SAAS,KAAK,QAAQ,SAAS,QAAQ,KAAK,IAAK,QAAO;AAAA,IACvE,QAAQ;AAAA,IAER;AAAA,EACF;AACA,oBAAkB,OAAO,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI,IAAI;AACjE,SAAO;AACT;AAEO,SAAS,WAAW,OAAkB,MAAsB;AACjE,QAAM,MAAM,kBAAkB,OAAO,IAAI;AACzC,MAAI,CAAC,IAAK,QAAO;AACjB,SAAO,IAAI,MAAM,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;AACjD;AAOO,SAAS,WAAW,OAAkB,MAA2B;AACtE,QAAM,MAAM,kBAAkB,OAAO,IAAI;AACzC,MAAI,CAAC,IAAK,QAAO,CAAC;AAClB,QAAM,QAAqB,CAAC;AAC5B,aAAW,QAAQ,IAAI,MAAM,IAAI,GAAG;AAClC,UAAM,UAAU,KAAK,KAAK;AAC1B,QAAI,CAAC,QAAS;AACd,QAAI;AACF,YAAM,KAAK,KAAK,MAAM,OAAO,CAAc;AAAA,IAC7C,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,WAAW,OAAkB,MAAoB;AAC/D,oBAAkB,OAAO,MAAM,EAAE;AACnC;AAGO,SAAS,YAAY,OAAiC;AAC3D,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,MAAmB,CAAC;AAC1B,aAAW,MAAM,OAAO;AACtB,UAAM,MAAM,GAAG,GAAG,IAAI,IAAI,GAAG,GAAG;AAChC,QAAI,KAAK,IAAI,GAAG,EAAG;AACnB,SAAK,IAAI,GAAG;AACZ,QAAI,KAAK,EAAE;AAAA,EACb;AACA,SAAO;AACT;AAEO,SAAS,iBAAiB,OAAkB,MAAsE;AACvH,QAAM,MAAM,kBAAkB,OAAO,IAAI,KAAK;AAC9C,MAAI,QAAQ;AACZ,MAAI,UAAU;AACd,QAAM,OAAO,oBAAI,IAAY;AAC7B,MAAI,aAAa;AACjB,aAAW,QAAQ,IAAI,MAAM,IAAI,GAAG;AAClC,UAAM,UAAU,KAAK,KAAK;AAC1B,QAAI,CAAC,QAAS;AACd,QAAI;AACF,YAAM,KAAK,KAAK,MAAM,OAAO;AAC7B,eAAS;AACT,YAAM,MAAM,GAAG,GAAG,IAAI,IAAI,GAAG,GAAG;AAChC,UAAI,KAAK,IAAI,GAAG,EAAG,eAAc;AACjC,WAAK,IAAI,GAAG;AAAA,IACd,QAAQ;AACN,iBAAW;AAAA,IACb;AAAA,EACF;AACA,SAAO,EAAE,OAAO,SAAS,WAAW;AACtC;AAEO,SAAS,gBAAgB,OAAkB,MAAuB;AACvE,SAAO,GAAG,WAAW,MAAM,OAAO,IAAI,CAAC;AACzC;","names":[]}

package/dist/chunk-CUOSICYJ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/core/audit-log.ts","../src/profile/store.ts","../src/profile/types.ts","../src/profile/schema.ts"],"sourcesContent":["// Append-only JSONL audit log with age-based retention pruning.\n// Audit files are plaintext by charter (transparency), and must never contain\n// sensitive raw observations (window titles, conversation text).\n\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { atomicWriteFileSync } from './atomic-fs.js';\n\nexport interface AuditEvent {\n  ts: string;\n  [key: string]: unknown;\n}\n\n/**\n * H-15: audit is best-effort by contract — a full disk, a locked log file or an\n * unserialisable payload must never abort a beat (one caller inside a catch\n * block turning a handled failure into an unhandled one is the worst case).\n * Failures go to stderr so they stay visible instead of silently vanishing.\n */\nexport function appendAuditLine(file: string, event: Omit<AuditEvent, 'ts'> & { ts?: string }): void {\n  try {\n    fs.mkdirSync(path.dirname(file), { recursive: true });\n    const line = JSON.stringify({ ts: event.ts ?? new Date().toISOString(), ...event });\n    fs.appendFileSync(file, line + '\\n', 'utf8');\n  } catch (e) {\n    process.stderr.write(`[heartbeat] audit append failed: ${file}: ${String(e)}\\n`);\n  }\n}\n\nexport function readAuditLines<T = AuditEvent>(file: string): T[] {\n  if (!fs.existsSync(file)) return [];\n  const out: T[] = [];\n  const raw = fs.readFileSync(file, 'utf8');\n  for (const line of raw.split('\\n')) {\n    const trimmed = line.trim();\n    if (!trimmed) continue;\n    try {\n      out.push(JSON.parse(trimmed) as T);\n    } catch {\n      // Skip corrupt lines; the log is diagnostic, not authoritative data.\n      out.push({ ts: '', corrupt: true, raw: trimmed.slice(0, 200) } as unknown as T);\n    }\n  }\n  return out;\n}\n\n/**\n * Drop entries older than maxAgeMs. Returns the number of removed lines.\n * Rewrites the file atomically; on rewrite failure the original is untouched.\n */\nexport function pruneAuditFile(file: string, maxAgeMs: number, now = Date.now()): number {\n  if (!fs.existsSync(file)) return 0;\n  const lines = readAuditLines(file);\n  const kept = lines.filter((e) => {\n    const ev = e as unknown as AuditEvent;\n    const ts = Date.parse(ev.ts ?? '');\n    if (!Number.isFinite(ts)) return true; // keep unparseable lines, never lose audit data silently\n    return now - ts <= maxAgeMs;\n  });\n  const removed = lines.length - kept.length;\n  if (removed === 0) return 0;\n  const body = kept.map((e) => JSON.stringify(e)).join('\\n');\n  atomicWriteFileSync(file, body ? body + '\\n' : '');\n  return removed;\n}\n","// Profile store: materialized view + journal (the journal is the ONLY\n// authority; profile.json is a pure projection - r2 §14 verify/rebuild).\n// Every LLM-proposed op passes deterministic guards here (LLM nominates,\n// code decides - §3.3).\n\nimport path from 'node:path';\nimport { randomUUID } from 'node:crypto';\nimport fs from 'node:fs';\nimport type { PathGuard } from '../core/path-guard.js';\nimport { loadJson, saveJson, readText, writeText } from '../vault/vault.js';\nimport type { Policy } from '../config/schema.js';\nimport {\n  CONFIDENCE_CAP,\n  emptyProfile,\n  PARTITIONS,\n  type ApplyReport,\n  type Evidence,\n  type EvidenceKind,\n  type InboxItem,\n  type JournalRecord,\n  type Partition,\n  type ProfileDoc,\n  type ProfileEntry,\n  type ProfileOp,\n} from './types.js';\nimport { checkAddAgainstSchema, type ProfileSchema } from './schema.js';\n\nconst DAY_MS = 86_400_000;\n\nexport function profileFilePath(dataDir: string): string {\n  return path.join(dataDir, 'profile.json');\n}\n\nexport function journalFilePath(dataDir: string): string {\n  return path.join(dataDir, 'profile_journal.jsonl');\n}\n\n// ── snapshot basepoint (v1.8.0, design doc §14 ③) ─────────────────────────\n// The journal grows forever; the snapshot folds its history into one DPAPI\n// document and moves the folded records into a timestamped archive shard.\n// Replay order: snapshot → archives (name order) → live journal, skipping\n// records at or before the snapshot baseline — so verify/rebuild stay correct\n// without knowing whether a snapshot exists.\n\nexport const SNAPSHOT_FILE = 'profile_snapshot.json';\nexport const ARCHIVE_PREFIX = 'profile_journal.archive-';\n\nexport interface ProfileSnapshot {\n  version: 1;\n  /** ts of the LAST journal record folded into `doc`. */\n  baselineTs: string;\n  recordsFolded: number;\n  doc: ProfileDoc;\n}\n\nexport function snapshotFilePath(dataDir: string): string {\n  return path.join(dataDir, SNAPSHOT_FILE);\n}\n\nfunction loadSnapshot(guard: PathGuard, dataDir: string): ProfileSnapshot | null {\n  const snap = loadJson<ProfileSnapshot>(guard, snapshotFilePath(dataDir));\n  if (!snap || snap.version !== 1 || typeof snap.baselineTs !== 'string' || !snap.doc?.partitions) return null;\n  return snap;\n}\n\nfunction listArchiveFiles(guard: PathGuard, dataDir: string): string[] {\n  try {\n    return fs.readdirSync(guard.assert(dataDir))\n      .filter((f) => f.startsWith(ARCHIVE_PREFIX) && f.endsWith('.jsonl'))\n      .sort(); // timestamped names sort chronologically\n  } catch {\n    return [];\n  }\n}\n\n/** Replay one JSONL text into `doc`, skipping records at/before the baseline. */\nfunction replayText(doc: ProfileDoc, text: string, baselineTs: string, stats: { records: number; truncatedTail: number; isLive: boolean }): void {\n  const lines = text.split('\\n');\n  for (let i = 0; i < lines.length; i++) {\n    const trimmed = lines[i]!.trim();\n    if (!trimmed) continue;\n    try {\n      const rec = JSON.parse(trimmed) as JournalRecord;\n      // Baseline skip: only records CARRYING a ts can be proven folded. A\n      // ts-less record is always applied (applyOpPermissive tolerates it).\n      if (baselineTs && rec.ts && String(rec.ts) <= baselineTs) continue;\n      for (const op of rec.applied ?? []) applyOpPermissive(doc, op, rec.ts);\n      stats.records += 1;\n    } catch {\n      // Torn tail only counts on the LIVE journal — archives are closed files.\n      const isLast = lines.slice(i + 1).every((l) => !l.trim());\n      if (stats.isLive && isLast) {\n        stats.truncatedTail = lines.length - i;\n        break;\n      }\n      // mid-file corrupt record: skip (journal stays append-only/immutable)\n    }\n  }\n}\n\n/** Full replay: snapshot basepoint + archive shards + live journal. */\nexport function replayJournal(guard: PathGuard, dataDir: string): ReplayResult {\n  const snap = loadSnapshot(guard, dataDir);\n  const doc = snap ? snap.doc : emptyProfile();\n  const baselineTs = snap?.baselineTs ?? '';\n  const stats = { records: snap?.recordsFolded ?? 0, truncatedTail: 0, isLive: false };\n  for (const file of listArchiveFiles(guard, dataDir)) {\n    try {\n      // shard record counts are not reported (the snapshot already folded\n      // them); only the live journal's torn tail is meaningful.\n      replayText(doc, fs.readFileSync(path.join(dataDir, file), 'utf8'), baselineTs, { records: 0, truncatedTail: 0, isLive: false });\n    } catch { /* unreadable shard: skip */ }\n  }\n  stats.isLive = true;\n  replayText(doc, readText(guard, journalFilePath(dataDir), ''), baselineTs, stats);\n  return { doc, truncatedTail: stats.truncatedTail, records: stats.records };\n}\n\n/** Every plaintext journal text in chronological order: archive shards first,\n *  then the live journal — the RAW record timeline, for callers that need the\n *  history itself rather than the accumulated doc (the weekly report counts\n *  the week's ADD ops). A rotation must not hide history from them (H-01). */\nexport function readJournalTexts(guard: PathGuard, dataDir: string): string[] {\n  const texts: string[] = [];\n  for (const file of listArchiveFiles(guard, dataDir)) {\n    try {\n      texts.push(fs.readFileSync(path.join(dataDir, file), 'utf8'));\n    } catch { /* unreadable shard: skip */ }\n  }\n  texts.push(readText(guard, journalFilePath(dataDir), ''));\n  return texts;\n}\n\nexport function loadProfile(guard: PathGuard, file: string): ProfileDoc {\n  const doc = loadJson<ProfileDoc>(guard, file);\n  if (!doc || !doc.partitions) return emptyProfile();\n  // ensure all partitions exist\n  for (const p of PARTITIONS) {\n    if (!doc.partitions[p]) doc.partitions[p] = { entries: [] };\n  }\n  return doc;\n}\n\nfunction parseIso(v: string): number {\n  const t = Date.parse(v);\n  return Number.isFinite(t) ? t : 0;\n}\n\n/** ref format \"<datafile>#<locator>\": the referenced file must exist under data/. */\nfunction refExists(guard: PathGuard, dataDir: string, ref: string): boolean {\n  const base = ref.split('#')[0] ?? '';\n  if (!base) return false;\n  const target = path.join(dataDir, base);\n  try {\n    return fs.existsSync(guard.assert(target));\n  } catch {\n    return false;\n  }\n}\n\nfunction capForKinds(kinds: EvidenceKind[]): number {\n  if (kinds.length === 0) return 0.4;\n  return Math.min(...kinds.map((k) => CONFIDENCE_CAP[k] ?? 0.4));\n}\n\nfunction findActive(doc: ProfileDoc, id: string): ProfileEntry | undefined {\n  for (const p of PARTITIONS) {\n    const hit = doc.partitions[p]!.entries.find((e) => e.id === id && e.validTo === null);\n    if (hit) return hit;\n  }\n  return undefined;\n}\n\n/**\n * Apply validated ops to the doc (mutates). Returns applied/rejected.\n * Guards (§3.3): whitelist, evidence gate, per-run ops cap is enforced by the\n * caller, confidence caps by evidence kind, psy gating, INVALIDATE ownership:\n * volatile expiry is code-driven (LLM may not), stable invalidation needs a\n * contradicting observation attached.\n */\nexport function applyOpsToDoc(\n  guard: PathGuard,\n  dataDir: string,\n  doc: ProfileDoc,\n  ops: ProfileOp[],\n  schema: ProfileSchema | undefined,\n  policy: Policy,\n  now: number,\n): ApplyReport {\n  const applied: ProfileOp[] = [];\n  const rejected: { op: ProfileOp; reason: string }[] = [];\n  const nowIso = new Date(now).toISOString();\n\n  for (const op of ops) {\n    if (op.op === 'NOOP') {\n      applied.push(op);\n      continue;\n    }\n    if (op.op === 'ADD') {\n      if (op.partition === 'psy' && !policy.profile.psyEnabled) {\n        rejected.push({ op, reason: 'psy partition is disabled' });\n        continue;\n      }\n      let temporal: 'stable' | 'volatile' = 'stable';\n      if (schema) {\n        const check = checkAddAgainstSchema(schema, op.partition, op.topic, op.subTopic, op.temporal);\n        if (!check.ok) {\n          rejected.push({ op, reason: check.reason! });\n          continue;\n        }\n        temporal = check.temporal;\n      } else if (!(op.partition in doc.partitions)) {\n        // H-17: no usable schema — the partition set is the only boundary left.\n        rejected.push({ op, reason: `unknown partition: ${op.partition}` });\n        continue;\n      } else {\n        temporal = op.temporal === 'volatile' ? 'volatile' : 'stable';\n      }\n      if (!op.evidence || op.evidence.length === 0) {\n        rejected.push({ op, reason: 'ADD without evidence (no provenance, axiom 1)' });\n        continue;\n      }\n      const badRef = op.evidence.find((e) => !refExists(guard, dataDir, e.ref));\n      if (badRef) {\n        rejected.push({ op, reason: `evidence ref does not resolve: ${badRef.ref}` });\n        continue;\n      }\n      const cap = capForKinds(op.evidence.map((e) => e.kind));\n      const active = doc.partitions[op.partition]!.entries.filter((e) => e.validTo === null);\n      if (active.length >= policy.profile.partitionCap) {\n        rejected.push({ op, reason: `partition ${op.partition} at cap (${policy.profile.partitionCap}); converge first` });\n        continue;\n      }\n      dbSeq += 1;\n      const entry: ProfileEntry = {\n        id: `p${dbSeq.toString(36)}${randomUUID().slice(0, 4)}`,\n        partition: op.partition,\n        topic: op.topic,\n        subTopic: op.subTopic,\n        content: op.content.trim(),\n        confidence: Math.min(op.confidence ?? cap, cap),\n        temporal,\n        validFrom: nowIso,\n        validTo: null,\n        supersededBy: null,\n        evidence: op.evidence,\n        createdAt: nowIso,\n        updatedAt: nowIso,\n        updateCount: 0,\n      };\n      op.assignedId = entry.id; // journal replay must reproduce this id\n      doc.partitions[op.partition]!.entries.push(entry);\n      applied.push(op);\n      continue;\n    }\n    if (op.op === 'UPDATE') {\n      const entry = findActive(doc, op.id);\n      if (!entry) {\n        rejected.push({ op, reason: `unknown or inactive entry: ${op.id}` });\n        continue;\n      }\n      if (op.changes.content !== undefined) entry.content = op.changes.content.trim();\n      if (op.changes.confidence !== undefined) {\n        const cap = capForKinds(entry.evidence.map((e) => e.kind));\n        // confidence upgrades need a second confirming observation (§3.3):\n        // only allowed up to cap, and only when the entry already has 2+ evidence\n        if (op.changes.confidence > entry.confidence && entry.evidence.length < 2) {\n          rejected.push({ op, reason: 'confidence upgrade requires a second confirming observation' });\n          continue;\n        }\n        entry.confidence = Math.min(op.changes.confidence, cap);\n      }\n      entry.updatedAt = nowIso;\n      entry.updateCount += 1;\n      applied.push(op);\n      continue;\n    }\n    if (op.op === 'INVALIDATE') {\n      const entry = findActive(doc, op.id);\n      if (!entry) {\n        rejected.push({ op, reason: `unknown or inactive entry: ${op.id}` });\n        continue;\n      }\n      if (entry.temporal === 'volatile') {\n        rejected.push({ op, reason: 'volatile expiry is code-owned (time-driven), not LLM-nominated' });\n        continue;\n      }\n      // stable: rebuttal-driven; requires a contradicting observation attached\n      const hasNewObservation = (op.evidence ?? []).length > 0\n        && (op.evidence ?? []).some((e) => parseIso(e.at) > parseIso(entry.evidence[entry.evidence.length - 1]?.at ?? ''));\n      if (!hasNewObservation) {\n        rejected.push({ op, reason: 'stable INVALIDATE requires a newer contradicting observation' });\n        continue;\n      }\n      entry.validTo = nowIso;\n      entry.supersededBy = null;\n      entry.updatedAt = nowIso;\n      entry.updateCount += 1;\n      if (op.evidence) entry.evidence.push(...op.evidence);\n      applied.push(op);\n      continue;\n    }\n  }\n  return { applied, rejected };\n}\n\nlet dbSeq = 0;\n\n/** Deterministic aging (D9): volatile expiry + stable low-activity marking. */\nexport function runDeterministicAging(\n  doc: ProfileDoc,\n  policy: Policy,\n  now: number,\n): { volatileExpired: number; lowActivityMarked: number } {\n  const nowIso = new Date(now).toISOString();\n  let volatileExpired = 0;\n  let lowActivityMarked = 0;\n  for (const p of PARTITIONS) {\n    for (const e of doc.partitions[p]!.entries) {\n      if (e.validTo !== null) continue;\n      const lastEvidence = Math.max(...e.evidence.map((x) => parseIso(x.at)), parseIso(e.updatedAt));\n      if (e.temporal === 'volatile') {\n        if (now - lastEvidence > policy.profile.volatileDays * DAY_MS) {\n          e.validTo = nowIso;\n          e.updatedAt = nowIso;\n          e.updateCount += 1;\n          volatileExpired += 1;\n        }\n      } else if (!e.lowActivity && now - lastEvidence > policy.profile.stableLowActivityDays * DAY_MS) {\n        e.lowActivity = true;\n        lowActivityMarked += 1;\n      }\n    }\n  }\n  return { volatileExpired, lowActivityMarked };\n}\n\n/** Persist the materialized view atomically + append the journal record. */\nexport function persistWithJournal(\n  guard: PathGuard,\n  dataDir: string,\n  doc: ProfileDoc,\n  record: Omit<JournalRecord, 'ts'>,\n): void {\n  saveJson(guard, profileFilePath(dataDir), doc);\n  const line = JSON.stringify({ ts: new Date().toISOString(), ...record });\n  const journal = journalFilePath(dataDir);\n  try {\n    fs.appendFileSync(guard.assert(journal), line + '\\n', 'utf8');\n  } catch {\n    fs.mkdirSync(dataDir, { recursive: true });\n    fs.appendFileSync(guard.assert(journal), line + '\\n', 'utf8');\n  }\n}\n\n// ── journal replay (verify / rebuild, r2 §14) ───────────────────────────\n\nfunction applyOpPermissive(doc: ProfileDoc, op: ProfileOp, ts: string): void {\n  // Journal is trusted history: replay applies without revalidation.\n  if (op.op === 'ADD') {\n    dbSeq += 1;\n    doc.partitions[op.partition]!.entries.push({\n      id: op.assignedId ?? `r${dbSeq.toString(36)}${randomUUID().slice(0, 4)}`,\n      partition: op.partition,\n      topic: op.topic,\n      subTopic: op.subTopic,\n      content: op.content,\n      confidence: op.confidence ?? 0.5,\n      temporal: op.temporal ?? 'stable',\n      validFrom: ts,\n      validTo: null,\n      supersededBy: null,\n      evidence: op.evidence,\n      createdAt: ts,\n      updatedAt: ts,\n      updateCount: 0,\n    });\n    return;\n  }\n  if (op.op === 'UPDATE') {\n    const e = [...PARTITIONS].flatMap((p) => doc.partitions[p]!.entries).find((x) => x.id === op.id);\n    if (e) {\n      if (op.changes.content !== undefined) e.content = op.changes.content;\n      if (op.changes.confidence !== undefined) e.confidence = op.changes.confidence;\n      e.updatedAt = ts;\n      e.updateCount += 1;\n    }\n    return;\n  }\n  if (op.op === 'INVALIDATE') {\n    const e = [...PARTITIONS].flatMap((p) => doc.partitions[p]!.entries).find((x) => x.id === op.id);\n    if (e) {\n      e.validTo = ts;\n      e.updatedAt = ts;\n      e.updateCount += 1;\n    }\n  }\n  // NOOP: nothing\n}\n\nexport interface ReplayResult {\n  doc: ProfileDoc;\n  truncatedTail: number;\n  records: number;\n}\n\nexport interface VerifyReport {\n  ok: boolean;\n  firstDivergence?: { id: string; expected: string; actual: string };\n  truncatedTail: number;\n  records: number;\n}\n\n/** profile verify: replay vs disk, report first divergence, never fix. */\nexport function verifyProfile(guard: PathGuard, dataDir: string): VerifyReport {\n  const replayed = replayJournal(guard, dataDir);\n  const onDisk = loadProfile(guard, profileFilePath(dataDir));\n  // Timestamps legitimately differ (journal record ts >= op ts); identity\n  // fields are also normalized. Compare semantic content only.\n  const strip = (doc: ProfileDoc): string =>\n    JSON.stringify(doc.partitions, (k, v) => (['id', 'supersededBy', 'validFrom', 'createdAt', 'updatedAt', 'retiredAt'].includes(k) ? '<norm>' : v));\n  const ok = strip(replayed.doc) === strip(onDisk);\n  if (ok) return { ok: true, truncatedTail: replayed.truncatedTail, records: replayed.records };\n  // first divergence: first entry id present in only one view\n  const diskIds = new Set([...PARTITIONS].flatMap((p) => onDisk.partitions[p]!.entries.map((e) => e.content)));  const replayIds = new Set([...PARTITIONS].flatMap((p) => replayed.doc.partitions[p]!.entries.map((e) => e.content)));\n  const onlyDisk = [...diskIds].find((c) => !replayIds.has(c));\n  const onlyReplay = [...replayIds].find((c) => !diskIds.has(c));\n  return {\n    ok: false,\n    firstDivergence: {\n      id: onlyDisk ?? onlyReplay ?? '(content)',\n      expected: onlyReplay ? 'absent in journal replay' : 'present in journal replay',\n      actual: onlyDisk ? 'present on disk' : 'absent on disk',\n    },\n    truncatedTail: replayed.truncatedTail,\n    records: replayed.records,\n  };\n}\n\nexport interface RebuildReport {\n  ok: boolean;\n  truncatedTail: number;\n  records: number;\n  wrote: boolean;\n}\n\n/** profile rebuild: journal is authoritative; atomic replace; torn tail reported. */\nexport function rebuildProfile(\n  guard: PathGuard,\n  dataDir: string,\n  opts: { check?: boolean } = {},\n): RebuildReport & { diffSummary?: string } {\n  const replayed = replayJournal(guard, dataDir);\n  const target = profileFilePath(dataDir);\n  if (opts.check) {\n    const onDisk = loadProfile(guard, target);\n    const same = JSON.stringify(onDisk) === JSON.stringify(replayed.doc);\n    return {\n      ok: same,\n      truncatedTail: replayed.truncatedTail,\n      records: replayed.records,\n      wrote: false,\n      diffSummary: same ? 'no diff' : 'materialized view differs from journal replay',\n    };\n  }\n  saveJson(guard, target, replayed.doc);\n  if (replayed.truncatedTail > 0) {\n    // explicit audit: never silently rebuild a view that lost its tail\n    writeText(\n      guard,\n      path.join(dataDir, 'logs', 'rebuild-report.txt'),\n      `rebuild truncated ${replayed.truncatedTail} torn line(s) at journal tail; ${replayed.records} records applied\\n`,\n    );\n  }\n  return { ok: true, truncatedTail: replayed.truncatedTail, records: replayed.records, wrote: true };\n}\n","// User profile types (design doc §3). Fourth store: warm, structured,\n// slow-evolving model of the user. Not the material pool (hot cache), not\n// DSH long-term memory (conversation-validated layer).\n\nexport type Partition = 'interest' | 'projects' | 'comm' | 'psy';\nexport type Temporal = 'volatile' | 'stable';\nexport type EvidenceKind = 'chat' | 'screen' | 'browse' | 'hand' | 'ledger';\n\nexport interface Evidence {\n  kind: EvidenceKind;\n  at: string;\n  /** Pointer to an existing audit/log location, e.g. \"heartbeat.jsonl#2026-09-06T12:00:00Z\". */\n  ref: string;\n  /** At most ONE short quote (<=1 sentence). Never raw conversation/screen text. */\n  quote?: string;\n}\n\nexport interface ProfileEntry {\n  id: string;\n  partition: Partition;\n  topic: string;\n  subTopic: string;\n  content: string;\n  /** 0..1; capped per source kind (chat .6 / screen .4 / browse .4). */\n  confidence: number;\n  temporal: Temporal;\n  validFrom: string;\n  validTo: string | null;\n  supersededBy: string | null;\n  evidence: Evidence[];\n  createdAt: string;\n  updatedAt: string;\n  updateCount: number;\n  /** stable-tier audit flag (180d without observation): digest deprioritizes. */\n  lowActivity?: boolean;\n}\n\nexport interface ProfileDoc {\n  version: number;\n  partitions: Record<Partition, { entries: ProfileEntry[] }>;\n}\n\nexport interface InboxItem {\n  id?: string;\n  kind: EvidenceKind;\n  at: string;\n  ref: string;\n  /** <= 1 short sentence; never raw conversation/screen text (truncated by writer). */\n  note: string;\n}\n\nexport type ProfileOp =\n  | {\n      op: 'ADD';\n      partition: Partition;\n      topic: string;\n      subTopic: string;\n      content: string;\n      temporal?: Temporal;\n      confidence?: number;\n      why: string;\n      evidence: Evidence[];\n      /** Assigned by the store at apply time so journal replay preserves ids. */\n      assignedId?: string;\n    }\n  | { op: 'UPDATE'; id: string; changes: { content?: string; confidence?: number }; why: string }\n  | { op: 'INVALIDATE'; id: string; why: string; evidence?: Evidence[] }\n  | { op: 'NOOP'; why: string };\n\nexport interface JournalRecord {\n  ts: string;\n  runId: string;\n  applied: ProfileOp[];\n  rejected: { op: ProfileOp; reason: string }[];\n}\n\nexport interface ApplyReport {\n  applied: ProfileOp[];\n  rejected: { op: ProfileOp; reason: string }[];\n}\n\nexport const PARTITIONS: readonly Partition[] = ['interest', 'projects', 'comm', 'psy'];\n\nexport const CONFIDENCE_CAP: Record<EvidenceKind, number> = {\n  chat: 0.6,\n  screen: 0.4,\n  browse: 0.4,\n  hand: 1.0,\n  ledger: 0.6,\n};\n\nexport function emptyProfile(): ProfileDoc {\n  return {\n    version: 1,\n    partitions: { interest: { entries: [] }, projects: { entries: [] }, comm: { entries: [] }, psy: { entries: [] } },\n  };\n}\n","// profile-schema.json loading + ADD validation (r4 B10: temporal tier is an\n// ENTRY-level attribute; the schema declares, per sub_topic, the ALLOWED tier\n// set and the DEFAULT. Unlisted defaults to 'stable'.)\n\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport type { Partition, Temporal } from './types.js';\n\nexport interface SubTopicDecl {\n  allowed?: Temporal[];\n  default?: Temporal;\n}\n\nexport interface ProfileSchema {\n  version: number;\n  partitions: Partial<Record<Partition, {\n    topics: Record<string, { subtopics: Record<string, SubTopicDecl> }>;\n  }>>;\n}\n\nexport interface SchemaLoad {\n  /** The schema to use, or undefined when even the factory copy is unusable. */\n  schema?: ProfileSchema;\n  /** Where the returned schema came from. */\n  source: 'user' | 'factory' | 'none';\n  /** Set when the chosen schema is not the first choice (H-17 fallback). */\n  fallbackReason?: string;\n}\n\n/**\n * H-17: three-tier load. This file is user-editable by design, so a broken\n * comma used to throw on every beat — `runConsolidation` aborted before\n * `inboxClear`, the inbox grew forever and the profile froze with no way back.\n * Now: a bad user copy falls back to the factory copy (audited by the caller);\n * an unusable factory copy yields `undefined`, which callers read as \"no\n * whitelist\" instead of a fatal error.\n */\nexport function loadProfileSchema(paths: { configDir: string; settingsDir: string }): SchemaLoad {\n  const userPath = path.join(paths.settingsDir, 'profile-schema.json');\n  const factoryPath = path.join(paths.configDir, 'profile-schema.json');\n  const read = (file: string): { schema?: ProfileSchema; error: string } => {\n    try {\n      const raw = JSON.parse(fs.readFileSync(file, 'utf8')) as ProfileSchema;\n      if (!raw.partitions) return { error: 'partitions missing' };\n      return { schema: raw, error: '' };\n    } catch (e) {\n      return { error: String(e) };\n    }\n  };\n  const user = fs.existsSync(userPath) ? read(userPath) : null;\n  if (user?.schema) return { schema: user.schema, source: 'user' };\n  const factory = read(factoryPath);\n  if (factory.schema) {\n    return user\n      ? {\n          schema: factory.schema,\n          source: 'factory',\n          fallbackReason: `user profile-schema.json unusable (${user.error}) — fell back to the factory copy`,\n        }\n      : { schema: factory.schema, source: 'factory' };\n  }\n  return {\n    source: 'none',\n    fallbackReason: `no usable profile-schema.json (user: ${user?.error ?? 'absent'}; factory: ${factory.error})`,\n  };\n}\n\nexport interface SchemaCheck {\n  ok: boolean;\n  reason?: string;\n  temporal: Temporal;\n}\n\n/**\n * Validate an ADD against the whitelist and resolve the entry's temporal tier:\n * LLM nominates within the sub_topic's allowed set; missing nomination falls\n * back to the declared default; fully unlisted -> reject (charter boundary).\n */\nexport function checkAddAgainstSchema(\n  schema: ProfileSchema,\n  partition: Partition,\n  topic: string,\n  subTopic: string,\n  nominated?: Temporal,\n): SchemaCheck {\n  const p = schema.partitions[partition];\n  if (!p) return { ok: false, reason: `partition not in schema: ${partition}`, temporal: 'stable' };\n  const t = p.topics[topic];\n  if (!t) return { ok: false, reason: `topic not in schema: ${partition}/${topic}`, temporal: 'stable' };\n  const st = t.subtopics[subTopic];\n  if (!st) return { ok: false, reason: `sub_topic not in schema: ${partition}/${topic}/${subTopic}`, temporal: 'stable' };\n  const allowed: Temporal[] = st.allowed && st.allowed.length > 0 ? st.allowed : ['stable'];\n  const def: Temporal = st.default && allowed.includes(st.default) ? st.default : allowed[0]!;\n  if (!nominated) return { ok: true, temporal: def };\n  if (!allowed.includes(nominated)) {\n    return {\n      ok: false,\n      reason: `temporal \"${nominated}\" not allowed for ${partition}/${topic}/${subTopic} (allowed: ${allowed.join('|')})`,\n      temporal: def,\n    };\n  }\n  return { ok: true, temporal: nominated };\n}\n"],"mappings":";;;;;;;;;;;AAIA,OAAO,QAAQ;AACf,OAAO,UAAU;AAcV,SAAS,gBAAgB,MAAc,OAAuD;AACnG,MAAI;AACF,OAAG,UAAU,KAAK,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AACpD,UAAM,OAAO,KAAK,UAAU,EAAE,IAAI,MAAM,OAAM,oBAAI,KAAK,GAAE,YAAY,GAAG,GAAG,MAAM,CAAC;AAClF,OAAG,eAAe,MAAM,OAAO,MAAM,MAAM;AAAA,EAC7C,SAAS,GAAG;AACV,YAAQ,OAAO,MAAM,oCAAoC,IAAI,KAAK,OAAO,CAAC,CAAC;AAAA,CAAI;AAAA,EACjF;AACF;AAEO,SAAS,eAA+B,MAAmB;AAChE,MAAI,CAAC,GAAG,WAAW,IAAI,EAAG,QAAO,CAAC;AAClC,QAAM,MAAW,CAAC;AAClB,QAAM,MAAM,GAAG,aAAa,MAAM,MAAM;AACxC,aAAW,QAAQ,IAAI,MAAM,IAAI,GAAG;AAClC,UAAM,UAAU,KAAK,KAAK;AAC1B,QAAI,CAAC,QAAS;AACd,QAAI;AACF,UAAI,KAAK,KAAK,MAAM,OAAO,CAAM;AAAA,IACnC,QAAQ;AAEN,UAAI,KAAK,EAAE,IAAI,IAAI,SAAS,MAAM,KAAK,QAAQ,MAAM,GAAG,GAAG,EAAE,CAAiB;AAAA,IAChF;AAAA,EACF;AACA,SAAO;AACT;AAMO,SAAS,eAAe,MAAc,UAAkB,MAAM,KAAK,IAAI,GAAW;AACvF,MAAI,CAAC,GAAG,WAAW,IAAI,EAAG,QAAO;AACjC,QAAM,QAAQ,eAAe,IAAI;AACjC,QAAM,OAAO,MAAM,OAAO,CAAC,MAAM;AAC/B,UAAM,KAAK;AACX,UAAM,KAAK,KAAK,MAAM,GAAG,MAAM,EAAE;AACjC,QAAI,CAAC,OAAO,SAAS,EAAE,EAAG,QAAO;AACjC,WAAO,MAAM,MAAM;AAAA,EACrB,CAAC;AACD,QAAM,UAAU,MAAM,SAAS,KAAK;AACpC,MAAI,YAAY,EAAG,QAAO;AAC1B,QAAM,OAAO,KAAK,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,EAAE,KAAK,IAAI;AACzD,sBAAoB,MAAM,OAAO,OAAO,OAAO,EAAE;AACjD,SAAO;AACT;;;AC3DA,OAAOA,WAAU;AACjB,SAAS,kBAAkB;AAC3B,OAAOC,SAAQ;;;AC0ER,IAAM,aAAmC,CAAC,YAAY,YAAY,QAAQ,KAAK;AAE/E,IAAM,iBAA+C;AAAA,EAC1D,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AACV;AAEO,SAAS,eAA2B;AACzC,SAAO;AAAA,IACL,SAAS;AAAA,IACT,YAAY,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,GAAG,UAAU,EAAE,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,CAAC,EAAE,EAAE;AAAA,EAClH;AACF;;;AC5FA,OAAOC,SAAQ;AACf,OAAOC,WAAU;AAgCV,SAAS,kBAAkB,OAA+D;AAC/F,QAAM,WAAWA,MAAK,KAAK,MAAM,aAAa,qBAAqB;AACnE,QAAM,cAAcA,MAAK,KAAK,MAAM,WAAW,qBAAqB;AACpE,QAAM,OAAO,CAAC,SAA4D;AACxE,QAAI;AACF,YAAM,MAAM,KAAK,MAAMD,IAAG,aAAa,MAAM,MAAM,CAAC;AACpD,UAAI,CAAC,IAAI,WAAY,QAAO,EAAE,OAAO,qBAAqB;AAC1D,aAAO,EAAE,QAAQ,KAAK,OAAO,GAAG;AAAA,IAClC,SAAS,GAAG;AACV,aAAO,EAAE,OAAO,OAAO,CAAC,EAAE;AAAA,IAC5B;AAAA,EACF;AACA,QAAM,OAAOA,IAAG,WAAW,QAAQ,IAAI,KAAK,QAAQ,IAAI;AACxD,MAAI,MAAM,OAAQ,QAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ,OAAO;AAC/D,QAAM,UAAU,KAAK,WAAW;AAChC,MAAI,QAAQ,QAAQ;AAClB,WAAO,OACH;AAAA,MACE,QAAQ,QAAQ;AAAA,MAChB,QAAQ;AAAA,MACR,gBAAgB,sCAAsC,KAAK,KAAK;AAAA,IAClE,IACA,EAAE,QAAQ,QAAQ,QAAQ,QAAQ,UAAU;AAAA,EAClD;AACA,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,gBAAgB,wCAAwC,MAAM,SAAS,QAAQ,cAAc,QAAQ,KAAK;AAAA,EAC5G;AACF;AAaO,SAAS,sBACd,QACA,WACA,OACA,UACA,WACa;AACb,QAAM,IAAI,OAAO,WAAW,SAAS;AACrC,MAAI,CAAC,EAAG,QAAO,EAAE,IAAI,OAAO,QAAQ,4BAA4B,SAAS,IAAI,UAAU,SAAS;AAChG,QAAM,IAAI,EAAE,OAAO,KAAK;AACxB,MAAI,CAAC,EAAG,QAAO,EAAE,IAAI,OAAO,QAAQ,wBAAwB,SAAS,IAAI,KAAK,IAAI,UAAU,SAAS;AACrG,QAAM,KAAK,EAAE,UAAU,QAAQ;AAC/B,MAAI,CAAC,GAAI,QAAO,EAAE,IAAI,OAAO,QAAQ,4BAA4B,SAAS,IAAI,KAAK,IAAI,QAAQ,IAAI,UAAU,SAAS;AACtH,QAAM,UAAsB,GAAG,WAAW,GAAG,QAAQ,SAAS,IAAI,GAAG,UAAU,CAAC,QAAQ;AACxF,QAAM,MAAgB,GAAG,WAAW,QAAQ,SAAS,GAAG,OAAO,IAAI,GAAG,UAAU,QAAQ,CAAC;AACzF,MAAI,CAAC,UAAW,QAAO,EAAE,IAAI,MAAM,UAAU,IAAI;AACjD,MAAI,CAAC,QAAQ,SAAS,SAAS,GAAG;AAChC,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,QAAQ,aAAa,SAAS,qBAAqB,SAAS,IAAI,KAAK,IAAI,QAAQ,cAAc,QAAQ,KAAK,GAAG,CAAC;AAAA,MAChH,UAAU;AAAA,IACZ;AAAA,EACF;AACA,SAAO,EAAE,IAAI,MAAM,UAAU,UAAU;AACzC;;;AF3EA,IAAM,SAAS;AAER,SAAS,gBAAgB,SAAyB;AACvD,SAAOE,MAAK,KAAK,SAAS,cAAc;AAC1C;AAEO,SAAS,gBAAgB,SAAyB;AACvD,SAAOA,MAAK,KAAK,SAAS,uBAAuB;AACnD;AASO,IAAM,gBAAgB;AACtB,IAAM,iBAAiB;AAUvB,SAAS,iBAAiB,SAAyB;AACxD,SAAOA,MAAK,KAAK,SAAS,aAAa;AACzC;AAEA,SAAS,aAAa,OAAkB,SAAyC;AAC/E,QAAM,OAAO,SAA0B,OAAO,iBAAiB,OAAO,CAAC;AACvE,MAAI,CAAC,QAAQ,KAAK,YAAY,KAAK,OAAO,KAAK,eAAe,YAAY,CAAC,KAAK,KAAK,WAAY,QAAO;AACxG,SAAO;AACT;AAEA,SAAS,iBAAiB,OAAkB,SAA2B;AACrE,MAAI;AACF,WAAOC,IAAG,YAAY,MAAM,OAAO,OAAO,CAAC,EACxC,OAAO,CAAC,MAAM,EAAE,WAAW,cAAc,KAAK,EAAE,SAAS,QAAQ,CAAC,EAClE,KAAK;AAAA,EACV,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAGA,SAAS,WAAW,KAAiB,MAAc,YAAoB,OAA0E;AAC/I,QAAM,QAAQ,KAAK,MAAM,IAAI;AAC7B,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,UAAM,UAAU,MAAM,CAAC,EAAG,KAAK;AAC/B,QAAI,CAAC,QAAS;AACd,QAAI;AACF,YAAM,MAAM,KAAK,MAAM,OAAO;AAG9B,UAAI,cAAc,IAAI,MAAM,OAAO,IAAI,EAAE,KAAK,WAAY;AAC1D,iBAAW,MAAM,IAAI,WAAW,CAAC,EAAG,mBAAkB,KAAK,IAAI,IAAI,EAAE;AACrE,YAAM,WAAW;AAAA,IACnB,QAAQ;AAEN,YAAM,SAAS,MAAM,MAAM,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;AACxD,UAAI,MAAM,UAAU,QAAQ;AAC1B,cAAM,gBAAgB,MAAM,SAAS;AACrC;AAAA,MACF;AAAA,IAEF;AAAA,EACF;AACF;AAGO,SAAS,cAAc,OAAkB,SAA+B;AAC7E,QAAM,OAAO,aAAa,OAAO,OAAO;AACxC,QAAM,MAAM,OAAO,KAAK,MAAM,aAAa;AAC3C,QAAM,aAAa,MAAM,cAAc;AACvC,QAAM,QAAQ,EAAE,SAAS,MAAM,iBAAiB,GAAG,eAAe,GAAG,QAAQ,MAAM;AACnF,aAAW,QAAQ,iBAAiB,OAAO,OAAO,GAAG;AACnD,QAAI;AAGF,iBAAW,KAAKA,IAAG,aAAaD,MAAK,KAAK,SAAS,IAAI,GAAG,MAAM,GAAG,YAAY,EAAE,SAAS,GAAG,eAAe,GAAG,QAAQ,MAAM,CAAC;AAAA,IAChI,QAAQ;AAAA,IAA+B;AAAA,EACzC;AACA,QAAM,SAAS;AACf,aAAW,KAAK,SAAS,OAAO,gBAAgB,OAAO,GAAG,EAAE,GAAG,YAAY,KAAK;AAChF,SAAO,EAAE,KAAK,eAAe,MAAM,eAAe,SAAS,MAAM,QAAQ;AAC3E;AAMO,SAAS,iBAAiB,OAAkB,SAA2B;AAC5E,QAAM,QAAkB,CAAC;AACzB,aAAW,QAAQ,iBAAiB,OAAO,OAAO,GAAG;AACnD,QAAI;AACF,YAAM,KAAKC,IAAG,aAAaD,MAAK,KAAK,SAAS,IAAI,GAAG,MAAM,CAAC;AAAA,IAC9D,QAAQ;AAAA,IAA+B;AAAA,EACzC;AACA,QAAM,KAAK,SAAS,OAAO,gBAAgB,OAAO,GAAG,EAAE,CAAC;AACxD,SAAO;AACT;AAEO,SAAS,YAAY,OAAkB,MAA0B;AACtE,QAAM,MAAM,SAAqB,OAAO,IAAI;AAC5C,MAAI,CAAC,OAAO,CAAC,IAAI,WAAY,QAAO,aAAa;AAEjD,aAAW,KAAK,YAAY;AAC1B,QAAI,CAAC,IAAI,WAAW,CAAC,EAAG,KAAI,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE;AAAA,EAC5D;AACA,SAAO;AACT;AAEA,SAAS,SAAS,GAAmB;AACnC,QAAM,IAAI,KAAK,MAAM,CAAC;AACtB,SAAO,OAAO,SAAS,CAAC,IAAI,IAAI;AAClC;AAGA,SAAS,UAAU,OAAkB,SAAiB,KAAsB;AAC1E,QAAM,OAAO,IAAI,MAAM,GAAG,EAAE,CAAC,KAAK;AAClC,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,SAASA,MAAK,KAAK,SAAS,IAAI;AACtC,MAAI;AACF,WAAOC,IAAG,WAAW,MAAM,OAAO,MAAM,CAAC;AAAA,EAC3C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,YAAY,OAA+B;AAClD,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,SAAO,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,eAAe,CAAC,KAAK,GAAG,CAAC;AAC/D;AAEA,SAAS,WAAW,KAAiB,IAAsC;AACzE,aAAW,KAAK,YAAY;AAC1B,UAAM,MAAM,IAAI,WAAW,CAAC,EAAG,QAAQ,KAAK,CAAC,MAAM,EAAE,OAAO,MAAM,EAAE,YAAY,IAAI;AACpF,QAAI,IAAK,QAAO;AAAA,EAClB;AACA,SAAO;AACT;AASO,SAAS,cACd,OACA,SACA,KACA,KACA,QACA,QACA,KACa;AACb,QAAM,UAAuB,CAAC;AAC9B,QAAM,WAAgD,CAAC;AACvD,QAAM,SAAS,IAAI,KAAK,GAAG,EAAE,YAAY;AAEzC,aAAW,MAAM,KAAK;AACpB,QAAI,GAAG,OAAO,QAAQ;AACpB,cAAQ,KAAK,EAAE;AACf;AAAA,IACF;AACA,QAAI,GAAG,OAAO,OAAO;AACnB,UAAI,GAAG,cAAc,SAAS,CAAC,OAAO,QAAQ,YAAY;AACxD,iBAAS,KAAK,EAAE,IAAI,QAAQ,4BAA4B,CAAC;AACzD;AAAA,MACF;AACA,UAAI,WAAkC;AACtC,UAAI,QAAQ;AACV,cAAM,QAAQ,sBAAsB,QAAQ,GAAG,WAAW,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ;AAC5F,YAAI,CAAC,MAAM,IAAI;AACb,mBAAS,KAAK,EAAE,IAAI,QAAQ,MAAM,OAAQ,CAAC;AAC3C;AAAA,QACF;AACA,mBAAW,MAAM;AAAA,MACnB,WAAW,EAAE,GAAG,aAAa,IAAI,aAAa;AAE5C,iBAAS,KAAK,EAAE,IAAI,QAAQ,sBAAsB,GAAG,SAAS,GAAG,CAAC;AAClE;AAAA,MACF,OAAO;AACL,mBAAW,GAAG,aAAa,aAAa,aAAa;AAAA,MACvD;AACA,UAAI,CAAC,GAAG,YAAY,GAAG,SAAS,WAAW,GAAG;AAC5C,iBAAS,KAAK,EAAE,IAAI,QAAQ,gDAAgD,CAAC;AAC7E;AAAA,MACF;AACA,YAAM,SAAS,GAAG,SAAS,KAAK,CAAC,MAAM,CAAC,UAAU,OAAO,SAAS,EAAE,GAAG,CAAC;AACxE,UAAI,QAAQ;AACV,iBAAS,KAAK,EAAE,IAAI,QAAQ,kCAAkC,OAAO,GAAG,GAAG,CAAC;AAC5E;AAAA,MACF;AACA,YAAM,MAAM,YAAY,GAAG,SAAS,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;AACtD,YAAM,SAAS,IAAI,WAAW,GAAG,SAAS,EAAG,QAAQ,OAAO,CAAC,MAAM,EAAE,YAAY,IAAI;AACrF,UAAI,OAAO,UAAU,OAAO,QAAQ,cAAc;AAChD,iBAAS,KAAK,EAAE,IAAI,QAAQ,aAAa,GAAG,SAAS,YAAY,OAAO,QAAQ,YAAY,oBAAoB,CAAC;AACjH;AAAA,MACF;AACA,eAAS;AACT,YAAM,QAAsB;AAAA,QAC1B,IAAI,IAAI,MAAM,SAAS,EAAE,CAAC,GAAG,WAAW,EAAE,MAAM,GAAG,CAAC,CAAC;AAAA,QACrD,WAAW,GAAG;AAAA,QACd,OAAO,GAAG;AAAA,QACV,UAAU,GAAG;AAAA,QACb,SAAS,GAAG,QAAQ,KAAK;AAAA,QACzB,YAAY,KAAK,IAAI,GAAG,cAAc,KAAK,GAAG;AAAA,QAC9C;AAAA,QACA,WAAW;AAAA,QACX,SAAS;AAAA,QACT,cAAc;AAAA,QACd,UAAU,GAAG;AAAA,QACb,WAAW;AAAA,QACX,WAAW;AAAA,QACX,aAAa;AAAA,MACf;AACA,SAAG,aAAa,MAAM;AACtB,UAAI,WAAW,GAAG,SAAS,EAAG,QAAQ,KAAK,KAAK;AAChD,cAAQ,KAAK,EAAE;AACf;AAAA,IACF;AACA,QAAI,GAAG,OAAO,UAAU;AACtB,YAAM,QAAQ,WAAW,KAAK,GAAG,EAAE;AACnC,UAAI,CAAC,OAAO;AACV,iBAAS,KAAK,EAAE,IAAI,QAAQ,8BAA8B,GAAG,EAAE,GAAG,CAAC;AACnE;AAAA,MACF;AACA,UAAI,GAAG,QAAQ,YAAY,OAAW,OAAM,UAAU,GAAG,QAAQ,QAAQ,KAAK;AAC9E,UAAI,GAAG,QAAQ,eAAe,QAAW;AACvC,cAAM,MAAM,YAAY,MAAM,SAAS,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;AAGzD,YAAI,GAAG,QAAQ,aAAa,MAAM,cAAc,MAAM,SAAS,SAAS,GAAG;AACzE,mBAAS,KAAK,EAAE,IAAI,QAAQ,8DAA8D,CAAC;AAC3F;AAAA,QACF;AACA,cAAM,aAAa,KAAK,IAAI,GAAG,QAAQ,YAAY,GAAG;AAAA,MACxD;AACA,YAAM,YAAY;AAClB,YAAM,eAAe;AACrB,cAAQ,KAAK,EAAE;AACf;AAAA,IACF;AACA,QAAI,GAAG,OAAO,cAAc;AAC1B,YAAM,QAAQ,WAAW,KAAK,GAAG,EAAE;AACnC,UAAI,CAAC,OAAO;AACV,iBAAS,KAAK,EAAE,IAAI,QAAQ,8BAA8B,GAAG,EAAE,GAAG,CAAC;AACnE;AAAA,MACF;AACA,UAAI,MAAM,aAAa,YAAY;AACjC,iBAAS,KAAK,EAAE,IAAI,QAAQ,iEAAiE,CAAC;AAC9F;AAAA,MACF;AAEA,YAAM,qBAAqB,GAAG,YAAY,CAAC,GAAG,SAAS,MACjD,GAAG,YAAY,CAAC,GAAG,KAAK,CAAC,MAAM,SAAS,EAAE,EAAE,IAAI,SAAS,MAAM,SAAS,MAAM,SAAS,SAAS,CAAC,GAAG,MAAM,EAAE,CAAC;AACnH,UAAI,CAAC,mBAAmB;AACtB,iBAAS,KAAK,EAAE,IAAI,QAAQ,+DAA+D,CAAC;AAC5F;AAAA,MACF;AACA,YAAM,UAAU;AAChB,YAAM,eAAe;AACrB,YAAM,YAAY;AAClB,YAAM,eAAe;AACrB,UAAI,GAAG,SAAU,OAAM,SAAS,KAAK,GAAG,GAAG,QAAQ;AACnD,cAAQ,KAAK,EAAE;AACf;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,SAAS,SAAS;AAC7B;AAEA,IAAI,QAAQ;AAGL,SAAS,sBACd,KACA,QACA,KACwD;AACxD,QAAM,SAAS,IAAI,KAAK,GAAG,EAAE,YAAY;AACzC,MAAI,kBAAkB;AACtB,MAAI,oBAAoB;AACxB,aAAW,KAAK,YAAY;AAC1B,eAAW,KAAK,IAAI,WAAW,CAAC,EAAG,SAAS;AAC1C,UAAI,EAAE,YAAY,KAAM;AACxB,YAAM,eAAe,KAAK,IAAI,GAAG,EAAE,SAAS,IAAI,CAAC,MAAM,SAAS,EAAE,EAAE,CAAC,GAAG,SAAS,EAAE,SAAS,CAAC;AAC7F,UAAI,EAAE,aAAa,YAAY;AAC7B,YAAI,MAAM,eAAe,OAAO,QAAQ,eAAe,QAAQ;AAC7D,YAAE,UAAU;AACZ,YAAE,YAAY;AACd,YAAE,eAAe;AACjB,6BAAmB;AAAA,QACrB;AAAA,MACF,WAAW,CAAC,EAAE,eAAe,MAAM,eAAe,OAAO,QAAQ,wBAAwB,QAAQ;AAC/F,UAAE,cAAc;AAChB,6BAAqB;AAAA,MACvB;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,iBAAiB,kBAAkB;AAC9C;AAGO,SAAS,mBACd,OACA,SACA,KACA,QACM;AACN,WAAS,OAAO,gBAAgB,OAAO,GAAG,GAAG;AAC7C,QAAM,OAAO,KAAK,UAAU,EAAE,KAAI,oBAAI,KAAK,GAAE,YAAY,GAAG,GAAG,OAAO,CAAC;AACvE,QAAM,UAAU,gBAAgB,OAAO;AACvC,MAAI;AACF,IAAAA,IAAG,eAAe,MAAM,OAAO,OAAO,GAAG,OAAO,MAAM,MAAM;AAAA,EAC9D,QAAQ;AACN,IAAAA,IAAG,UAAU,SAAS,EAAE,WAAW,KAAK,CAAC;AACzC,IAAAA,IAAG,eAAe,MAAM,OAAO,OAAO,GAAG,OAAO,MAAM,MAAM;AAAA,EAC9D;AACF;AAIA,SAAS,kBAAkB,KAAiB,IAAe,IAAkB;AAE3E,MAAI,GAAG,OAAO,OAAO;AACnB,aAAS;AACT,QAAI,WAAW,GAAG,SAAS,EAAG,QAAQ,KAAK;AAAA,MACzC,IAAI,GAAG,cAAc,IAAI,MAAM,SAAS,EAAE,CAAC,GAAG,WAAW,EAAE,MAAM,GAAG,CAAC,CAAC;AAAA,MACtE,WAAW,GAAG;AAAA,MACd,OAAO,GAAG;AAAA,MACV,UAAU,GAAG;AAAA,MACb,SAAS,GAAG;AAAA,MACZ,YAAY,GAAG,cAAc;AAAA,MAC7B,UAAU,GAAG,YAAY;AAAA,MACzB,WAAW;AAAA,MACX,SAAS;AAAA,MACT,cAAc;AAAA,MACd,UAAU,GAAG;AAAA,MACb,WAAW;AAAA,MACX,WAAW;AAAA,MACX,aAAa;AAAA,IACf,CAAC;AACD;AAAA,EACF;AACA,MAAI,GAAG,OAAO,UAAU;AACtB,UAAM,IAAI,CAAC,GAAG,UAAU,EAAE,QAAQ,CAAC,MAAM,IAAI,WAAW,CAAC,EAAG,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,GAAG,EAAE;AAC/F,QAAI,GAAG;AACL,UAAI,GAAG,QAAQ,YAAY,OAAW,GAAE,UAAU,GAAG,QAAQ;AAC7D,UAAI,GAAG,QAAQ,eAAe,OAAW,GAAE,aAAa,GAAG,QAAQ;AACnE,QAAE,YAAY;AACd,QAAE,eAAe;AAAA,IACnB;AACA;AAAA,EACF;AACA,MAAI,GAAG,OAAO,cAAc;AAC1B,UAAM,IAAI,CAAC,GAAG,UAAU,EAAE,QAAQ,CAAC,MAAM,IAAI,WAAW,CAAC,EAAG,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,GAAG,EAAE;AAC/F,QAAI,GAAG;AACL,QAAE,UAAU;AACZ,QAAE,YAAY;AACd,QAAE,eAAe;AAAA,IACnB;AAAA,EACF;AAEF;AAgBO,SAAS,cAAc,OAAkB,SAA+B;AAC7E,QAAM,WAAW,cAAc,OAAO,OAAO;AAC7C,QAAM,SAAS,YAAY,OAAO,gBAAgB,OAAO,CAAC;AAG1D,QAAM,QAAQ,CAAC,QACb,KAAK,UAAU,IAAI,YAAY,CAAC,GAAG,MAAO,CAAC,MAAM,gBAAgB,aAAa,aAAa,aAAa,WAAW,EAAE,SAAS,CAAC,IAAI,WAAW,CAAE;AAClJ,QAAM,KAAK,MAAM,SAAS,GAAG,MAAM,MAAM,MAAM;AAC/C,MAAI,GAAI,QAAO,EAAE,IAAI,MAAM,eAAe,SAAS,eAAe,SAAS,SAAS,QAAQ;AAE5F,QAAM,UAAU,IAAI,IAAI,CAAC,GAAG,UAAU,EAAE,QAAQ,CAAC,MAAM,OAAO,WAAW,CAAC,EAAG,QAAQ,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAAI,QAAM,YAAY,IAAI,IAAI,CAAC,GAAG,UAAU,EAAE,QAAQ,CAAC,MAAM,SAAS,IAAI,WAAW,CAAC,EAAG,QAAQ,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAClO,QAAM,WAAW,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;AAC3D,QAAM,aAAa,CAAC,GAAG,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;AAC7D,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,iBAAiB;AAAA,MACf,IAAI,YAAY,cAAc;AAAA,MAC9B,UAAU,aAAa,6BAA6B;AAAA,MACpD,QAAQ,WAAW,oBAAoB;AAAA,IACzC;AAAA,IACA,eAAe,SAAS;AAAA,IACxB,SAAS,SAAS;AAAA,EACpB;AACF;AAUO,SAAS,eACd,OACA,SACA,OAA4B,CAAC,GACa;AAC1C,QAAM,WAAW,cAAc,OAAO,OAAO;AAC7C,QAAM,SAAS,gBAAgB,OAAO;AACtC,MAAI,KAAK,OAAO;AACd,UAAM,SAAS,YAAY,OAAO,MAAM;AACxC,UAAM,OAAO,KAAK,UAAU,MAAM,MAAM,KAAK,UAAU,SAAS,GAAG;AACnE,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,eAAe,SAAS;AAAA,MACxB,SAAS,SAAS;AAAA,MAClB,OAAO;AAAA,MACP,aAAa,OAAO,YAAY;AAAA,IAClC;AAAA,EACF;AACA,WAAS,OAAO,QAAQ,SAAS,GAAG;AACpC,MAAI,SAAS,gBAAgB,GAAG;AAE9B;AAAA,MACE;AAAA,MACAD,MAAK,KAAK,SAAS,QAAQ,oBAAoB;AAAA,MAC/C,qBAAqB,SAAS,aAAa,kCAAkC,SAAS,OAAO;AAAA;AAAA,IAC/F;AAAA,EACF;AACA,SAAO,EAAE,IAAI,MAAM,eAAe,SAAS,eAAe,SAAS,SAAS,SAAS,OAAO,KAAK;AACnG;","names":["path","fs","fs","path","path","fs"]}

package/dist/chunk-IV2ZWQA3.js

@@ -1,56 +0,0 @@
-// src/core/file-lock.ts
-import fs from "fs";
-var STALE_MS = 15e3;
-var WAIT_MS = 3e3;
-var POLL_MS = 25;
-function sleepSync(ms) {
-  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
-}
-function tryAcquire(lock) {
-  try {
-    const fd = fs.openSync(lock, "wx");
-    fs.writeSync(fd, `${process.pid} ${(/* @__PURE__ */ new Date()).toISOString()}
-`);
-    fs.closeSync(fd);
-    return true;
-  } catch (e) {
-    if (e.code !== "EEXIST") throw e;
-    try {
-      if (Date.now() - fs.statSync(lock).mtimeMs > STALE_MS) {
-        fs.rmSync(lock, { force: true });
-        return tryAcquire(lock);
-      }
-    } catch {
-      return tryAcquire(lock);
-    }
-    return false;
-  }
-}
-function withFileLock(target, fn) {
-  const lock = `${target}.lock`;
-  const deadline = Date.now() + WAIT_MS;
-  let held = false;
-  for (; ; ) {
-    if (tryAcquire(lock)) {
-      held = true;
-      break;
-    }
-    if (Date.now() >= deadline) break;
-    sleepSync(POLL_MS);
-  }
-  try {
-    return fn();
-  } finally {
-    if (held) {
-      try {
-        fs.rmSync(lock, { force: true });
-      } catch {
-      }
-    }
-  }
-}
-
-export {
-  withFileLock
-};
-//# sourceMappingURL=chunk-IV2ZWQA3.js.map

package/dist/chunk-IV2ZWQA3.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/core/file-lock.ts"],"sourcesContent":["// Cross-process advisory file lock (H-20, minimal tier).\n//\n// The seed pool and the observation inbox are WHOLE-FILE rewrites of DPAPI\n// ciphertext — the vault cannot append to them — and the CLI runs as a second\n// process against the same files. Two interleaved load→mutate→save cycles\n// therefore let one side silently overwrite the other's write. The full fix\n// (append-only journal + compaction) is v2.0 work; this keeps the writers\n// honest in the meantime.\n//\n// The lock itself is a sibling file created with O_EXCL. A lock older than\n// STALE_MS is treated as abandoned (its holder died mid-write) and reclaimed.\n\nimport fs from 'node:fs';\n\nconst STALE_MS = 15_000;\nconst WAIT_MS = 3_000;\nconst POLL_MS = 25;\n\nfunction sleepSync(ms: number): void {\n  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);\n}\n\nfunction tryAcquire(lock: string): boolean {\n  try {\n    const fd = fs.openSync(lock, 'wx');\n    fs.writeSync(fd, `${process.pid} ${new Date().toISOString()}\\n`);\n    fs.closeSync(fd);\n    return true;\n  } catch (e) {\n    if ((e as NodeJS.ErrnoException).code !== 'EEXIST') throw e;\n    // Reclaim a lock whose holder is gone.\n    try {\n      if (Date.now() - fs.statSync(lock).mtimeMs > STALE_MS) {\n        fs.rmSync(lock, { force: true });\n        return tryAcquire(lock);\n      }\n    } catch {\n      return tryAcquire(lock); // vanished between open and stat\n    }\n    return false;\n  }\n}\n\n/**\n * Run `fn` while holding the lock for `target`. Acquisition waits up to\n * WAIT_MS, then gives up and runs anyway: a heartbeat must not be stopped by a\n * stale lock, and the caller's own read-modify-write is still the last writer\n * in the common (uncontended) case.\n */\nexport function withFileLock<T>(target: string, fn: () => T): T {\n  const lock = `${target}.lock`;\n  const deadline = Date.now() + WAIT_MS;\n  let held = false;\n  for (;;) {\n    if (tryAcquire(lock)) {\n      held = true;\n      break;\n    }\n    if (Date.now() >= deadline) break;\n    sleepSync(POLL_MS);\n  }\n  try {\n    return fn();\n  } finally {\n    if (held) {\n      try {\n        fs.rmSync(lock, { force: true });\n      } catch { /* already gone */ }\n    }\n  }\n}\n"],"mappings":";AAYA,OAAO,QAAQ;AAEf,IAAM,WAAW;AACjB,IAAM,UAAU;AAChB,IAAM,UAAU;AAEhB,SAAS,UAAU,IAAkB;AACnC,UAAQ,KAAK,IAAI,WAAW,IAAI,kBAAkB,CAAC,CAAC,GAAG,GAAG,GAAG,EAAE;AACjE;AAEA,SAAS,WAAW,MAAuB;AACzC,MAAI;AACF,UAAM,KAAK,GAAG,SAAS,MAAM,IAAI;AACjC,OAAG,UAAU,IAAI,GAAG,QAAQ,GAAG,KAAI,oBAAI,KAAK,GAAE,YAAY,CAAC;AAAA,CAAI;AAC/D,OAAG,UAAU,EAAE;AACf,WAAO;AAAA,EACT,SAAS,GAAG;AACV,QAAK,EAA4B,SAAS,SAAU,OAAM;AAE1D,QAAI;AACF,UAAI,KAAK,IAAI,IAAI,GAAG,SAAS,IAAI,EAAE,UAAU,UAAU;AACrD,WAAG,OAAO,MAAM,EAAE,OAAO,KAAK,CAAC;AAC/B,eAAO,WAAW,IAAI;AAAA,MACxB;AAAA,IACF,QAAQ;AACN,aAAO,WAAW,IAAI;AAAA,IACxB;AACA,WAAO;AAAA,EACT;AACF;AAQO,SAAS,aAAgB,QAAgB,IAAgB;AAC9D,QAAM,OAAO,GAAG,MAAM;AACtB,QAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,MAAI,OAAO;AACX,aAAS;AACP,QAAI,WAAW,IAAI,GAAG;AACpB,aAAO;AACP;AAAA,IACF;AACA,QAAI,KAAK,IAAI,KAAK,SAAU;AAC5B,cAAU,OAAO;AAAA,EACnB;AACA,MAAI;AACF,WAAO,GAAG;AAAA,EACZ,UAAE;AACA,QAAI,MAAM;AACR,UAAI;AACF,WAAG,OAAO,MAAM,EAAE,OAAO,KAAK,CAAC;AAAA,MACjC,QAAQ;AAAA,MAAqB;AAAA,IAC/B;AAAA,EACF;AACF;","names":[]}