@massa-ai/core 1.17.0 → 1.19.0

package/dist/data/memory/observation-contract.d.ts

@@ -1,3 +1,4 @@
+import type { SanitizedPayloadJson } from "../../kernel/sanitize/credential-scrub.js";
 export declare const LIFECYCLE_EVENTS: readonly ["session-start", "user-prompt", "pre-tool-use", "post-tool-use", "pre-compact", "session-end"];
 export type LifecycleEventKind = (typeof LIFECYCLE_EVENTS)[number];
 export declare const OBSERVATION_CATEGORIES: readonly ["files-read", "files-written", "file-search", "tool-calls", "git-changes", "tasks", "plan-changes", "errors", "error-resolution", "iteration-loop", "decisions", "constraints", "rejected-approaches", "user-prompts", "intent", "goal", "role", "blocked-on", "rules", "skills-invoked", "subagents-spawned", "env-changes", "cwd-changes", "session-settings", "external-refs", "web-fetch", "searches", "memories-stored", "compaction-snapshots", "mcp-calls", "agent-findings", "cost-telemetry", "lifecycle-raw"];
@@ -16,6 +17,17 @@ export interface Observation {
     agentId?: string | null;
     attributionSource?: AttributionSource | null;
 }
+/**
+ * Observation shape accepted by {@link ObservationStore.insert}. Identical to
+ * {@link Observation} except `payloadJson` must be the branded
+ * `SanitizedPayloadJson` produced by `kernel/sanitize/credential-scrub.ts`'s
+ * `scrubCredentials()` — the only way to construct that brand. Read shapes
+ * (`Observation`, `ObservationRow`, `listRecent`/`listBySession` results)
+ * stay plain `string`: rows read back are not re-branded (XP-02 / AD-014).
+ */
+export type InsertableObservation = Omit<Observation, "payloadJson"> & {
+    payloadJson: SanitizedPayloadJson;
+};
 export interface ObservationRow {
     id: string;
     project_id: string;
@@ -29,7 +41,7 @@ export interface ObservationRow {
     attribution_source?: string | null;
 }
 export interface ObservationStore {
-    insert(obs: Observation): void;
+    insert(obs: InsertableObservation): void;
     listRecent(projectId: string, limit: number): Observation[];
     listBySession(sessionId: string, limit: number): Observation[];
     countByProject(projectId: string): number;
@@ -37,7 +49,7 @@ export interface ObservationStore {
 }
 export declare class MemoryObservationStore implements ObservationStore {
     rows: Observation[];
-    insert(row: Observation): void;
+    insert(row: InsertableObservation): void;
     listRecent(projectId: string, limit: number): Observation[];
     listBySession(sessionId: string, limit: number): Observation[];
     countByProject(projectId: string): number;

package/dist/data/memory/observation-contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"observation-contract.d.ts","sourceRoot":"","sources":["../../../src/data/memory/observation-contract.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gBAAgB,0GAA2G,CAAC;AACzI,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AACnE,eAAO,MAAM,sBAAsB,mgBAAogB,CAAC;AACxiB,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC1E,eAAO,MAAM,mBAAmB,wEAAyE,CAAC;AAC1G,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AACrE,MAAM,WAAW,WAAW;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAAE;AACxR,MAAM,WAAW,cAAc;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAAE;AACnQ,MAAM,WAAW,gBAAgB;IAAG,MAAM,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAAC;IAAC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,EAAE,CAAC;IAAC,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,EAAE,CAAC;IAAC,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,WAAW,IAAI,MAAM,CAAC;CAAE;AACpQ,qBAAa,sBAAuB,YAAW,gBAAgB;IAAU,IAAI,EAAE,WAAW,EAAE,CAAM;IAAC,MAAM,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI;IAA2C,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,EAAE;IAAiK,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,EAAE;IAAiK,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAA2E,WAAW,IAAI,MAAM;CAAuB;AACvwB,wBAAgB,gBAAgB,IAAI,MAAM,CAAyC"}
+{"version":3,"file":"observation-contract.d.ts","sourceRoot":"","sources":["../../../src/data/memory/observation-contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEtF,eAAO,MAAM,gBAAgB,0GAA2G,CAAC;AACzI,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AACnE,eAAO,MAAM,sBAAsB,mgBAAogB,CAAC;AACxiB,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC1E,eAAO,MAAM,mBAAmB,wEAAyE,CAAC;AAC1G,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AACrE,MAAM,WAAW,WAAW;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,iBAAiB,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;CAAE;AACxR;;;;;;;GAOG;AACH,MAAM,MAAM,qBAAqB,GAAG,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,GAAG;IAAE,WAAW,EAAE,oBAAoB,CAAA;CAAE,CAAC;AAC7G,MAAM,WAAW,cAAc;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAAE;AACnQ,MAAM,WAAW,gBAAgB;IAAG,MAAM,CAAC,GAAG,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAAC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,EAAE,CAAC;IAAC,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,EAAE,CAAC;IAAC,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,WAAW,IAAI,MAAM,CAAC;CAAE;AAC9Q,qBAAa,sBAAuB,YAAW,gBAAgB;IAAU,IAAI,EAAE,WAAW,EAAE,CAAM;IAAC,MAAM,CAAC,GAAG,EAAE,qBAAqB,GAAG,IAAI;IAA2C,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,EAAE;IAAiK,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,EAAE;IAAiK,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAA2E,WAAW,IAAI,MAAM;CAAuB;AACjxB,wBAAgB,gBAAgB,IAAI,MAAM,CAAyC"}

package/dist/data/memory/observation-contract.js.map

@@ -1 +1 @@
-{"version":3,"file":"observation-contract.js","sourceRoot":"","sources":["../../../src/data/memory/observation-contract.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,CAAU,CAAC;AAEzI,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,WAAW,EAAE,aAAa,EAAE,qBAAqB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,EAAE,kBAAkB,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,WAAW,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,eAAe,CAAU,CAAC;AAExiB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,CAAU,CAAC;AAK1G,MAAM,OAAO,sBAAsB;IAAsC,IAAI,GAAkB,EAAE,CAAC;IAAC,MAAM,CAAC,GAAgB,IAAU,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAAC,UAAU,CAAC,SAAiB,EAAE,KAAa,IAAmB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAAC,aAAa,CAAC,SAAiB,EAAE,KAAa,IAAmB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAAC,cAAc,CAAC,SAAiB,IAAY,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,WAAW,KAAa,OAAO,QAAQ,CAAC,CAAC,CAAC;CAAE;AACvwB,MAAM,UAAU,gBAAgB,KAAa,OAAO,OAAO,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"observation-contract.js","sourceRoot":"","sources":["../../../src/data/memory/observation-contract.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,CAAU,CAAC;AAEzI,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,WAAW,EAAE,aAAa,EAAE,qBAAqB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,EAAE,kBAAkB,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,WAAW,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,eAAe,CAAU,CAAC;AAExiB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,CAAU,CAAC;AAc1G,MAAM,OAAO,sBAAsB;IAAsC,IAAI,GAAkB,EAAE,CAAC;IAAC,MAAM,CAAC,GAA0B,IAAU,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAAC,UAAU,CAAC,SAAiB,EAAE,KAAa,IAAmB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAAC,aAAa,CAAC,SAAiB,EAAE,KAAa,IAAmB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAAC,cAAc,CAAC,SAAiB,IAAY,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,WAAW,KAAa,OAAO,QAAQ,CAAC,CAAC,CAAC;CAAE;AACjxB,MAAM,UAAU,gBAAgB,KAAa,OAAO,OAAO,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC"}

package/dist/data/memory/observation-repository-pg.d.ts

@@ -26,7 +26,7 @@
  * BIGINT ms-epoch to match the store's `createdAt: number` contract (NOT the
  * Prisma model's DateTime — see the migration note).
  */
-import type { Observation, ObservationStore } from "./observation-contract.js";
+import type { Observation, ObservationStore, InsertableObservation } from "./observation-contract.js";
 export declare class PgObservationStore implements ObservationStore {
     private prisma;
     /**
@@ -51,7 +51,7 @@ export declare class PgObservationStore implements ObservationStore {
      * PgScheduledJobStore's inflight-merge).
      */
     private ensureHydrated;
-    insert(obs: Observation): void;
+    insert(obs: InsertableObservation): void;
     listRecent(projectId: string, limit: number): Observation[];
     listBySession(sessionId: string, limit: number): Observation[];
     countByProject(projectId: string): number;

package/dist/data/memory/observation-repository-pg.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"observation-repository-pg.d.ts","sourceRoot":"","sources":["../../../src/data/memory/observation-repository-pg.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAMH,OAAO,KAAK,EACV,WAAW,EACX,gBAAgB,EAEjB,MAAM,2BAA2B,CAAC;AAmDnC,qBAAa,kBAAmB,YAAW,gBAAgB;IACzD,OAAO,CAAC,MAAM,CAAgB;IAC9B;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAuC;IACrD,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,SAAS,CAA8B;IAC/C;;;;OAIG;IACH,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAU;IAElD,OAAO,CAAC,SAAS;IAKjB;;;;;OAKG;IACH,OAAO,CAAC,cAAc;IAgDtB,MAAM,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI;IAuF9B,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,EAAE;IAS3D,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,EAAE;IAS9D,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAOzC,WAAW,IAAI,MAAM;IAIrB,0EAA0E;IACpE,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAIhC,mEAAmE;IAC7D,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAM/B"}
+{"version":3,"file":"observation-repository-pg.d.ts","sourceRoot":"","sources":["../../../src/data/memory/observation-repository-pg.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAMH,OAAO,KAAK,EACV,WAAW,EACX,gBAAgB,EAEhB,qBAAqB,EACtB,MAAM,2BAA2B,CAAC;AAmDnC,qBAAa,kBAAmB,YAAW,gBAAgB;IACzD,OAAO,CAAC,MAAM,CAAgB;IAC9B;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAuC;IACrD,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,SAAS,CAA8B;IAC/C;;;;OAIG;IACH,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAU;IAElD,OAAO,CAAC,SAAS;IAKjB;;;;;OAKG;IACH,OAAO,CAAC,cAAc;IAgDtB,MAAM,CAAC,GAAG,EAAE,qBAAqB,GAAG,IAAI;IAuFxC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,EAAE;IAS3D,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,EAAE;IAS9D,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAOzC,WAAW,IAAI,MAAM;IAIrB,0EAA0E;IACpE,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAIhC,mEAAmE;IAC7D,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAM/B"}

package/dist/data/memory/observation-repository-pg.js.map

@@ -1 +1 @@
-{"version":3,"file":"observation-repository-pg.js","sourceRoot":"","sources":["../../../src/data/memory/observation-repository-pg.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AAuBjF,SAAS,KAAK,CAAC,CAAqC;IAClD,IAAI,CAAC,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAmB;IAC7C,MAAM,GAAG,GAAmB;QAC1B,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QACpC,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;KACzC,CAAC;IACF,oEAAoE;IACpE,uEAAuE;IACvE,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,MAAM,EAAE,GAAG,CAAC,MAA+B;QAC3C,QAAQ,EAAG,GAAG,CAAC,QAA2C,IAAI,SAAS;QACvE,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,OAAO,EAAE,GAAG,CAAC,QAAQ,IAAI,SAAS;QAClC,iBAAiB,EAAG,GAAG,CAAC,kBAA8D,IAAI,SAAS;KACpG,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,kBAAkB;IACrB,MAAM,CAAgB;IAC9B;;;OAGG;IACK,MAAM,GAA6B,IAAI,GAAG,EAAE,CAAC;IAC7C,QAAQ,GAAG,KAAK,CAAC;IACjB,SAAS,GAAyB,IAAI,CAAC;IAC/C;;;;OAIG;IACK,eAAe,GAAG,CAAC,CAAC;IACpB,MAAM,CAAU,gBAAgB,GAAG,MAAM,CAAC;IAE1C,SAAS;QACf,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACK,cAAc;QACpB,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAC1C,qEAAqE;QACrE,4EAA4E;QAC5E,uEAAuE;QACvE,wEAAwE;QACxE,IACE,IAAI,CAAC,eAAe,GAAG,CAAC;YACxB,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe,GAAG,kBAAkB,CAAC,gBAAgB,EACvE,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,CAAC,KAAK,IAAI,EAAE;YAC3B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;gBAChC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,SAAS,CAAoB;;;SAGtD,CAAC;gBACF,MAAM,IAAI,GAA6B,IAAI,GAAG,EAAE,CAAC;gBACjD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;gBAChC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAClB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC5C,CAAC;gBACD,wEAAwE;gBACxE,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;oBACpC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;wBAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;gBACxC,CAAC;gBACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACrB,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC;gBACzB,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACzE,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,sEAAsE;gBACtE,yDAAyD;gBACzD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE;oBAC7D,KAAK,EAAG,CAAW,CAAC,OAAO;iBAC5B,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACxB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,MAAM,CAAC,GAAgB;QACrB,yEAAyE;QACzE,EAAE;QACF,qEAAqE;QACrE,oEAAoE;QACpE,oEAAoE;QACpE,uEAAuE;QACvE,yEAAyE;QACzE,uEAAuE;QACvE,0BAA0B;QAC1B,MAAM,eAAe,GAAG,+BAA+B,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,CAAC,EAAE,EACN,eAAe,IAAI,eAAe,KAAK,GAAG,CAAC,SAAS;YAClD,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,eAAe,EAAE;YACxC,CAAC,CAAC,GAAG,CACR,CAAC;QACF,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;QAC3B,uEAAuE;QACvE,EAAE;QACF,2EAA2E;QAC3E,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,2EAA2E;QAC3E,wEAAwE;QACxE,sEAAsE;QACtE,2EAA2E;QAC3E,mEAAmE;QACnE,EAAE;QACF,wEAAwE;QACxE,2EAA2E;QAC3E,wEAAwE;QACxE,2EAA2E;QAC3E,uEAAuE;QACvE,2EAA2E;QAC3E,wEAAwE;QACxE,0EAA0E;QAC1E,0CAA0C;QAC1C,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;gBAChC,qEAAqE;gBACrE,qEAAqE;gBACrE,qEAAqE;gBACrE,sEAAsE;gBACtE,mEAAmE;gBACnE,MAAM,kBAAkB,GAAG,MAAM,+BAA+B,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC1F,IAAI,kBAAkB,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;oBACzC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBACrE,CAAC;gBACD,MAAM,MAAM,CAAC,WAAW,CAAA;;;;cAIlB,GAAG,CAAC,EAAE;cACN,kBAAkB;cAClB,GAAG,CAAC,SAAS;cACb,GAAG,CAAC,MAAM;cACV,GAAG,CAAC,QAAQ,IAAI,IAAI;cACpB,GAAG,CAAC,WAAW;cACf,GAAG,CAAC,UAAU;cACd,GAAG,CAAC,SAAS;cACb,GAAG,CAAC,OAAO,IAAI,IAAI;cACnB,GAAG,CAAC,iBAAiB,IAAI,IAAI;;;;;;;;;;;;SAYlC,CAAC;YACJ,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,CAAC,gDAAgD,EAAE;oBAC5D,EAAE,EAAE,GAAG,CAAC,EAAE;oBACV,KAAK,EAAG,CAAW,CAAC,OAAO;iBAC5B,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;IAED,UAAU,CAAC,SAAiB,EAAE,KAAa;QACzC,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;aACpC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC;aACxC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;aACzC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,aAAa,CAAC,SAAiB,EAAE,KAAa;QAC5C,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;aACpC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC;aACxC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;aACzC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,cAAc,CAAC,SAAiB;QAC9B,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;gBAAE,CAAC,EAAE,CAAC;QACzE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,WAAW;QACT,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,SAAS;QACb,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;IAC9B,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,OAAO;QACX,wEAAwE;QACxE,sEAAsE;QACtE,mCAAmC;QACnC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC"}
+{"version":3,"file":"observation-repository-pg.js","sourceRoot":"","sources":["../../../src/data/memory/observation-repository-pg.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AAwBjF,SAAS,KAAK,CAAC,CAAqC;IAClD,IAAI,CAAC,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAmB;IAC7C,MAAM,GAAG,GAAmB;QAC1B,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QACpC,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;KACzC,CAAC;IACF,oEAAoE;IACpE,uEAAuE;IACvE,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,MAAM,EAAE,GAAG,CAAC,MAA+B;QAC3C,QAAQ,EAAG,GAAG,CAAC,QAA2C,IAAI,SAAS;QACvE,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,OAAO,EAAE,GAAG,CAAC,QAAQ,IAAI,SAAS;QAClC,iBAAiB,EAAG,GAAG,CAAC,kBAA8D,IAAI,SAAS;KACpG,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,kBAAkB;IACrB,MAAM,CAAgB;IAC9B;;;OAGG;IACK,MAAM,GAA6B,IAAI,GAAG,EAAE,CAAC;IAC7C,QAAQ,GAAG,KAAK,CAAC;IACjB,SAAS,GAAyB,IAAI,CAAC;IAC/C;;;;OAIG;IACK,eAAe,GAAG,CAAC,CAAC;IACpB,MAAM,CAAU,gBAAgB,GAAG,MAAM,CAAC;IAE1C,SAAS;QACf,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACK,cAAc;QACpB,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAC1C,qEAAqE;QACrE,4EAA4E;QAC5E,uEAAuE;QACvE,wEAAwE;QACxE,IACE,IAAI,CAAC,eAAe,GAAG,CAAC;YACxB,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe,GAAG,kBAAkB,CAAC,gBAAgB,EACvE,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,CAAC,KAAK,IAAI,EAAE;YAC3B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;gBAChC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,SAAS,CAAoB;;;SAGtD,CAAC;gBACF,MAAM,IAAI,GAA6B,IAAI,GAAG,EAAE,CAAC;gBACjD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;gBAChC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAClB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC5C,CAAC;gBACD,wEAAwE;gBACxE,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;oBACpC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;wBAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;gBACxC,CAAC;gBACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACrB,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC;gBACzB,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACzE,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,sEAAsE;gBACtE,yDAAyD;gBACzD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE;oBAC7D,KAAK,EAAG,CAAW,CAAC,OAAO;iBAC5B,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACxB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,MAAM,CAAC,GAA0B;QAC/B,yEAAyE;QACzE,EAAE;QACF,qEAAqE;QACrE,oEAAoE;QACpE,oEAAoE;QACpE,uEAAuE;QACvE,yEAAyE;QACzE,uEAAuE;QACvE,0BAA0B;QAC1B,MAAM,eAAe,GAAG,+BAA+B,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvF,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,CAAC,EAAE,EACN,eAAe,IAAI,eAAe,KAAK,GAAG,CAAC,SAAS;YAClD,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,eAAe,EAAE;YACxC,CAAC,CAAC,GAAG,CACR,CAAC;QACF,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;QAC3B,uEAAuE;QACvE,EAAE;QACF,2EAA2E;QAC3E,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,2EAA2E;QAC3E,wEAAwE;QACxE,sEAAsE;QACtE,2EAA2E;QAC3E,mEAAmE;QACnE,EAAE;QACF,wEAAwE;QACxE,2EAA2E;QAC3E,wEAAwE;QACxE,2EAA2E;QAC3E,uEAAuE;QACvE,2EAA2E;QAC3E,wEAAwE;QACxE,0EAA0E;QAC1E,0CAA0C;QAC1C,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;gBAChC,qEAAqE;gBACrE,qEAAqE;gBACrE,qEAAqE;gBACrE,sEAAsE;gBACtE,mEAAmE;gBACnE,MAAM,kBAAkB,GAAG,MAAM,+BAA+B,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC1F,IAAI,kBAAkB,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;oBACzC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBACrE,CAAC;gBACD,MAAM,MAAM,CAAC,WAAW,CAAA;;;;cAIlB,GAAG,CAAC,EAAE;cACN,kBAAkB;cAClB,GAAG,CAAC,SAAS;cACb,GAAG,CAAC,MAAM;cACV,GAAG,CAAC,QAAQ,IAAI,IAAI;cACpB,GAAG,CAAC,WAAW;cACf,GAAG,CAAC,UAAU;cACd,GAAG,CAAC,SAAS;cACb,GAAG,CAAC,OAAO,IAAI,IAAI;cACnB,GAAG,CAAC,iBAAiB,IAAI,IAAI;;;;;;;;;;;;SAYlC,CAAC;YACJ,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,CAAC,gDAAgD,EAAE;oBAC5D,EAAE,EAAE,GAAG,CAAC,EAAE;oBACV,KAAK,EAAG,CAAW,CAAC,OAAO;iBAC5B,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;IAED,UAAU,CAAC,SAAiB,EAAE,KAAa;QACzC,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;aACpC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC;aACxC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;aACzC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,aAAa,CAAC,SAAiB,EAAE,KAAa;QAC5C,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;aACpC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC;aACxC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;aACzC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,cAAc,CAAC,SAAiB;QAC9B,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;gBAAE,CAAC,EAAE,CAAC;QACzE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,WAAW;QACT,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,SAAS;QACb,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;IAC9B,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,OAAO;QACX,wEAAwE;QACxE,sEAAsE;QACtE,mCAAmC;QACnC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC"}

package/dist/kernel/sanitize/credential-scrub.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Credential scrubber — kernel leaf (XP-02 / TASK-XP-003).
+ *
+ * Narrow, recognizable credential-shape redaction for hook-ingested payloads.
+ * Consumed by `services/hooks` and `tools/` (the two production writers) and
+ * by `data/memory/observation-contract.ts`'s insert seam (which is what
+ * enforces the branded type below) — a cross-tier leaf, which is exactly
+ * what `kernel/` exists for (CLAUDE.md "Architecture" section: membership is
+ * the path prefix, there is no allowlist).
+ *
+ * v1 rule set is deliberately narrow (spec.md "XP-02 redaction v1 rule set"):
+ * PEM private-key blocks, JWTs, AWS access-key ids, OpenAI-style `sk-` keys,
+ * GitHub tokens, Slack tokens, and Bearer-scheme tokens. General PII/entropy
+ * detection is explicitly out of scope — over-redaction of legitimate code
+ * is the adjacent regression class this v1 deliberately avoids.
+ *
+ * No `assertSanitized` escape hatch: the branded `SanitizedPayloadJson` type
+ * is only constructible by running the real scrubber below. An assertion
+ * constructor would reopen the hole the brand exists to close.
+ *
+ * Non-growth invariant: scrubbing never makes the payload longer, keeping it
+ * sound against the pre-scrub `HOOKS_MAX_PAYLOAD_BYTES` cap in
+ * `hook-service.ts` (checked before this module ever runs). Each rule's
+ * `[REDACTED:<id>]` marker is sized to be no longer than that shape's
+ * minimum possible match. Two rules needed a small adjustment from
+ * design.md C1's literal draft to hold that exactly:
+ *   - `aws-key` (design: `aws-key-id`): a real AWS access-key id is FIXED at
+ *     exactly 20 characters (4-char prefix + 16 alphanumeric), so the
+ *     unabridged id's marker (21 chars) would have made every redaction grow
+ *     the payload by one byte. Dropping the "-id" suffix brings the marker
+ *     to 18 chars, comfortably under 20.
+ *   - `slack-token`: the near-miss floor is `{18,}` here, not design's
+ *     literal `{10,}` — at 10 the marker (22 chars) exceeds the minimum
+ *     match (15 chars). Slack tokens are not format-fixed the way an AWS key
+ *     id is, and real tokens run well past 18 characters past the prefix in
+ *     practice, so this costs nothing against genuine matches while holding
+ *     the invariant.
+ * (SPEC_DEVIATION from design.md C1's literal id/floor for these two rules;
+ * reasoned above — reported to the workflow.)
+ */
+declare const SanitizedBrand: unique symbol;
+/**
+ * JSON-serialized payload that has passed {@link scrubCredentials}. Only
+ * constructible by calling that function.
+ */
+export type SanitizedPayloadJson = string & {
+    readonly [SanitizedBrand]: true;
+};
+export interface ScrubResult {
+    sanitized: SanitizedPayloadJson;
+    /** Count of replacements, per rule id. 0 for every rule on clean input. */
+    redactions: Record<string, number>;
+    total: number;
+}
+/** Every rule id, in the fixed order rules run — used to build the 0-map. */
+export declare const RULE_IDS: readonly string[];
+/**
+ * Scrub every v1 credential shape from `payloadJson`. Pure — identical input
+ * always produces identical output, with no IO or shared state.
+ */
+export declare function scrubCredentials(payloadJson: string): ScrubResult;
+export {};
+//# sourceMappingURL=credential-scrub.d.ts.map

package/dist/kernel/sanitize/credential-scrub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-scrub.d.ts","sourceRoot":"","sources":["../../../src/kernel/sanitize/credential-scrub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,CAAC,MAAM,cAAc,EAAE,OAAO,MAAM,CAAC;AAE5C;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,CAAC,cAAc,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC;AAEhF,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,oBAAoB,CAAC;IAChC,2EAA2E;IAC3E,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,KAAK,EAAE,MAAM,CAAC;CACf;AAmED,6EAA6E;AAC7E,eAAO,MAAM,QAAQ,EAAE,SAAS,MAAM,EAA2B,CAAC;AAElE;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,WAAW,CAkBjE"}

package/dist/kernel/sanitize/credential-scrub.js

@@ -0,0 +1,119 @@
+/**
+ * Credential scrubber — kernel leaf (XP-02 / TASK-XP-003).
+ *
+ * Narrow, recognizable credential-shape redaction for hook-ingested payloads.
+ * Consumed by `services/hooks` and `tools/` (the two production writers) and
+ * by `data/memory/observation-contract.ts`'s insert seam (which is what
+ * enforces the branded type below) — a cross-tier leaf, which is exactly
+ * what `kernel/` exists for (CLAUDE.md "Architecture" section: membership is
+ * the path prefix, there is no allowlist).
+ *
+ * v1 rule set is deliberately narrow (spec.md "XP-02 redaction v1 rule set"):
+ * PEM private-key blocks, JWTs, AWS access-key ids, OpenAI-style `sk-` keys,
+ * GitHub tokens, Slack tokens, and Bearer-scheme tokens. General PII/entropy
+ * detection is explicitly out of scope — over-redaction of legitimate code
+ * is the adjacent regression class this v1 deliberately avoids.
+ *
+ * No `assertSanitized` escape hatch: the branded `SanitizedPayloadJson` type
+ * is only constructible by running the real scrubber below. An assertion
+ * constructor would reopen the hole the brand exists to close.
+ *
+ * Non-growth invariant: scrubbing never makes the payload longer, keeping it
+ * sound against the pre-scrub `HOOKS_MAX_PAYLOAD_BYTES` cap in
+ * `hook-service.ts` (checked before this module ever runs). Each rule's
+ * `[REDACTED:<id>]` marker is sized to be no longer than that shape's
+ * minimum possible match. Two rules needed a small adjustment from
+ * design.md C1's literal draft to hold that exactly:
+ *   - `aws-key` (design: `aws-key-id`): a real AWS access-key id is FIXED at
+ *     exactly 20 characters (4-char prefix + 16 alphanumeric), so the
+ *     unabridged id's marker (21 chars) would have made every redaction grow
+ *     the payload by one byte. Dropping the "-id" suffix brings the marker
+ *     to 18 chars, comfortably under 20.
+ *   - `slack-token`: the near-miss floor is `{18,}` here, not design's
+ *     literal `{10,}` — at 10 the marker (22 chars) exceeds the minimum
+ *     match (15 chars). Slack tokens are not format-fixed the way an AWS key
+ *     id is, and real tokens run well past 18 characters past the prefix in
+ *     practice, so this costs nothing against genuine matches while holding
+ *     the invariant.
+ * (SPEC_DEVIATION from design.md C1's literal id/floor for these two rules;
+ * reasoned above — reported to the workflow.)
+ */
+function markerFor(id) {
+    return `[REDACTED:${id}]`;
+}
+/** A rule whose whole match is replaced by its marker. */
+function fullMatchRule(id, pattern) {
+    const marker = markerFor(id);
+    return {
+        id,
+        replace(text) {
+            let count = 0;
+            const replaced = text.replace(pattern, () => {
+                count++;
+                return marker;
+            });
+            return { text: replaced, count };
+        },
+    };
+}
+// PEM content is bounded to 8192 chars between BEGIN/END so a run of
+// unterminated "-----BEGIN...-----" occurrences (adversarial input) cannot
+// force each one to lazily scan the rest of a large payload looking for a
+// match that never comes — real PEM bodies (even RSA-4096) are a few KiB at
+// most, so this bound never clips a genuine key.
+const PEM_PATTERN = /-----BEGIN [A-Z ]{0,32}PRIVATE KEY-----[\s\S]{0,8192}?-----END [A-Z ]{0,32}PRIVATE KEY-----/g;
+const JWT_PATTERN = /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g;
+const AWS_KEY_PATTERN = /\b(?:AKIA|ASIA|ABIA|ACCA)[A-Z0-9]{16}\b/g;
+const SK_KEY_PATTERN = /\bsk-[A-Za-z0-9_-]{20,}\b/g;
+const GITHUB_TOKEN_PATTERN = /\bgh[pousr]_[A-Za-z0-9]{36,}\b|\bgithub_pat_[A-Za-z0-9_]{22,}\b/g;
+const SLACK_TOKEN_PATTERN = /\bxox[baprs]-[A-Za-z0-9-]{18,}\b/g;
+const BEARER_PATTERN = /(Bearer\s+)([A-Za-z0-9._~+/=-]{20,})/g;
+const RULES = [
+    // PEM first: fully consumes the block before any other rule can see
+    // inside it, and the substituted marker cannot itself match another rule.
+    fullMatchRule("pem", PEM_PATTERN),
+    fullMatchRule("jwt", JWT_PATTERN),
+    fullMatchRule("aws-key", AWS_KEY_PATTERN),
+    fullMatchRule("sk-key", SK_KEY_PATTERN),
+    fullMatchRule("github-token", GITHUB_TOKEN_PATTERN),
+    fullMatchRule("slack-token", SLACK_TOKEN_PATTERN),
+    // Runs last and keeps the `Bearer ` prefix literal, replacing only the
+    // token — running it last means a more specific rule above (e.g. a JWT
+    // used as a bearer token) already replaced its match with a marker whose
+    // characters fall outside this rule's charset, so it is not re-matched.
+    {
+        id: "bearer",
+        replace(text) {
+            let count = 0;
+            const replaced = text.replace(BEARER_PATTERN, (_m, prefix) => {
+                count++;
+                return `${prefix}${markerFor("bearer")}`;
+            });
+            return { text: replaced, count };
+        },
+    },
+];
+/** Every rule id, in the fixed order rules run — used to build the 0-map. */
+export const RULE_IDS = RULES.map((r) => r.id);
+/**
+ * Scrub every v1 credential shape from `payloadJson`. Pure — identical input
+ * always produces identical output, with no IO or shared state.
+ */
+export function scrubCredentials(payloadJson) {
+    const redactions = {};
+    for (const id of RULE_IDS)
+        redactions[id] = 0;
+    let text = payloadJson;
+    for (const rule of RULES) {
+        const { text: next, count } = rule.replace(text);
+        text = next;
+        redactions[rule.id] += count;
+    }
+    const total = Object.values(redactions).reduce((sum, n) => sum + n, 0);
+    return {
+        sanitized: text,
+        redactions,
+        total,
+    };
+}
+//# sourceMappingURL=credential-scrub.js.map

package/dist/kernel/sanitize/credential-scrub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-scrub.js","sourceRoot":"","sources":["../../../src/kernel/sanitize/credential-scrub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAsBH,SAAS,SAAS,CAAC,EAAU;IAC3B,OAAO,aAAa,EAAE,GAAG,CAAC;AAC5B,CAAC;AAED,0DAA0D;AAC1D,SAAS,aAAa,CAAC,EAAU,EAAE,OAAe;IAChD,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;IAC7B,OAAO;QACL,EAAE;QACF,OAAO,CAAC,IAAY;YAClB,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE;gBAC1C,KAAK,EAAE,CAAC;gBACR,OAAO,MAAM,CAAC;YAChB,CAAC,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,2EAA2E;AAC3E,0EAA0E;AAC1E,4EAA4E;AAC5E,iDAAiD;AACjD,MAAM,WAAW,GACf,8FAA8F,CAAC;AACjG,MAAM,WAAW,GAAG,iEAAiE,CAAC;AACtF,MAAM,eAAe,GAAG,0CAA0C,CAAC;AACnE,MAAM,cAAc,GAAG,4BAA4B,CAAC;AACpD,MAAM,oBAAoB,GAAG,kEAAkE,CAAC;AAChG,MAAM,mBAAmB,GAAG,mCAAmC,CAAC;AAChE,MAAM,cAAc,GAAG,uCAAuC,CAAC;AAE/D,MAAM,KAAK,GAAW;IACpB,oEAAoE;IACpE,0EAA0E;IAC1E,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC;IACjC,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC;IACjC,aAAa,CAAC,SAAS,EAAE,eAAe,CAAC;IACzC,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC;IACvC,aAAa,CAAC,cAAc,EAAE,oBAAoB,CAAC;IACnD,aAAa,CAAC,aAAa,EAAE,mBAAmB,CAAC;IACjD,uEAAuE;IACvE,uEAAuE;IACvE,yEAAyE;IACzE,wEAAwE;IACxE;QACE,EAAE,EAAE,QAAQ;QACZ,OAAO,CAAC,IAAY;YAClB,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,MAAc,EAAE,EAAE;gBACnE,KAAK,EAAE,CAAC;gBACR,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3C,CAAC,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACnC,CAAC;KACF;CACF,CAAC;AAEF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,QAAQ,GAAsB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAElE;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,EAAE,IAAI,QAAQ;QAAE,UAAU,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IAE9C,IAAI,IAAI,GAAG,WAAW,CAAC;IACvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,GAAG,IAAI,CAAC;QACZ,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC;IAC/B,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAEvE,OAAO;QACL,SAAS,EAAE,IAA4B;QACvC,UAAU;QACV,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/services/cache/lru-evict.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Shared insertion-order eviction for the LRU-bounded `Map`s PR-D unifies (RFS-02 AC-2).
+ *
+ * WHY A FUNCTION AND NOT A CACHE CLASS.
+ * The five caches this serves agree on eviction ORDER and disagree on everything else: cap
+ * (512 at four sites, 50 at `file-filter-cache`), TTL (enforced at `file-content-cache`'s
+ * `fileCache` only) and read-promotion (absent at `file-filter-cache`). A shared cache class would impose
+ * one policy on all five, and that IS the behavior change `spec.md` §3.B measured the eviction
+ * itself is not. RFS-02 AC-2 therefore fixes this as an eviction function; every site keeps its
+ * own cap, its own TTL and its own promotion policy.
+ *
+ * WHY THE SECOND PARAMETER IS A POST-CALL BOUND AND NOT "the cap".
+ * `design.md` §5.1 specifies only "a function taking `(cache, cap)`", and that phrasing does
+ * not determine the predicate, because the five sites do not share one:
+ *
+ *   file-content-cache.ts (T10)        pre-insert   while (size >= 512)
+ *   project-root-cache.ts (T9)         pre-insert   while (size >= 512)
+ *   symbol-graph.service.ts            pre-insert   while (size >= 512)
+ *   web-controller.ts                  post-insert  while (size >  512)
+ *   file-filter-cache.ts               post-insert  if   (size >  50) evict-one
+ *
+ * `spec.md` §3.B establishes that pre-insert `>=` and post-insert `>` retain the same number.
+ * They do — but only while each site keeps BOTH its operator and its call position. Collapsing
+ * them onto one operator with every site passing its own literal cap moves the retained count,
+ * and it moves in opposite directions depending on which operator wins. Measured against T1's
+ * characterization oracle (`tasks.md` §10.7): a shared `>` breaks the three pre-insert sites, a
+ * shared `>=` breaks the two post-insert ones.
+ *
+ * Stating the contract as a POST-CALL BOUND is what lets one function serve both call
+ * positions without moving any retained count, because `size > cap - 1` and `size >= cap` are
+ * the same predicate over integers:
+ *
+ *   pre-insert   caller passes `CAP - 1`  — reserves the slot the pending insert will take
+ *   post-insert  caller passes `CAP`      — the insert already happened
+ *
+ * WHAT THIS MODULE DOES NOT CERTIFY, on RFS-01 AC-6's precedent of naming blind spots.
+ * It evicts in `Map` insertion order and knows nothing about TTL, read-promotion, or whether a
+ * caller's insertion order matches that caller's own notion of "oldest". `file-filter-cache`
+ * evicts by `min(createdAt)` today and coincides with insertion order only because it never
+ * re-inserts an entry on a read — an invariant unstated in that file, guarded by T1's
+ * characterization suite (mutation M5b) and by nothing here. A future read-promotion added
+ * there would silently defeat the shared eviction and no structural gate could see it.
+ *
+ * WHY IT IMPORTS NOTHING, AND WHY THAT IS ASSERTED IN A TEST RATHER THAN BY CI.
+ * `spec.md` RFS-02 AC-3 originally placed this in `kernel/`, where `check-core-layering`'s
+ * leaf-ness clause would have enforced import-freedom. C30 (`design.md` §5.2) moved it to
+ * `services/cache/` because `kernel/`'s admission rule is "serves >= 2 tiers" and 11 of 11
+ * shipped members keep it, while this module serves `services/` alone after Phase 3. Nothing
+ * in CI now prevents this file from growing a dependency. That is a real loss of enforcement
+ * (R-29), recorded rather than glossed, and the replacement is the AST assertion in this
+ * module's own unit test.
+ */
+/**
+ * Evict oldest-first from `cache` until `cache.size <= maxRetained`.
+ *
+ * @param cache        any `Map`; eviction order is the Map's own insertion order, so a caller
+ *                     that promotes on read (delete + re-set) gets LRU and one that does not
+ *                     gets FIFO. That choice stays with the caller.
+ * @param maxRetained  the number of entries that may remain when this returns. Pre-insert
+ *                     callers pass `CAP - 1`; post-insert callers pass `CAP`.
+ */
+export declare function evictOldest<K, V>(cache: Map<K, V>, maxRetained: number): void;
+//# sourceMappingURL=lru-evict.d.ts.map

package/dist/services/cache/lru-evict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lru-evict.d.ts","sourceRoot":"","sources":["../../../src/services/cache/lru-evict.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAEH;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAY7E"}

package/dist/services/cache/lru-evict.js

@@ -0,0 +1,76 @@
+/**
+ * Shared insertion-order eviction for the LRU-bounded `Map`s PR-D unifies (RFS-02 AC-2).
+ *
+ * WHY A FUNCTION AND NOT A CACHE CLASS.
+ * The five caches this serves agree on eviction ORDER and disagree on everything else: cap
+ * (512 at four sites, 50 at `file-filter-cache`), TTL (enforced at `file-content-cache`'s
+ * `fileCache` only) and read-promotion (absent at `file-filter-cache`). A shared cache class would impose
+ * one policy on all five, and that IS the behavior change `spec.md` §3.B measured the eviction
+ * itself is not. RFS-02 AC-2 therefore fixes this as an eviction function; every site keeps its
+ * own cap, its own TTL and its own promotion policy.
+ *
+ * WHY THE SECOND PARAMETER IS A POST-CALL BOUND AND NOT "the cap".
+ * `design.md` §5.1 specifies only "a function taking `(cache, cap)`", and that phrasing does
+ * not determine the predicate, because the five sites do not share one:
+ *
+ *   file-content-cache.ts (T10)        pre-insert   while (size >= 512)
+ *   project-root-cache.ts (T9)         pre-insert   while (size >= 512)
+ *   symbol-graph.service.ts            pre-insert   while (size >= 512)
+ *   web-controller.ts                  post-insert  while (size >  512)
+ *   file-filter-cache.ts               post-insert  if   (size >  50) evict-one
+ *
+ * `spec.md` §3.B establishes that pre-insert `>=` and post-insert `>` retain the same number.
+ * They do — but only while each site keeps BOTH its operator and its call position. Collapsing
+ * them onto one operator with every site passing its own literal cap moves the retained count,
+ * and it moves in opposite directions depending on which operator wins. Measured against T1's
+ * characterization oracle (`tasks.md` §10.7): a shared `>` breaks the three pre-insert sites, a
+ * shared `>=` breaks the two post-insert ones.
+ *
+ * Stating the contract as a POST-CALL BOUND is what lets one function serve both call
+ * positions without moving any retained count, because `size > cap - 1` and `size >= cap` are
+ * the same predicate over integers:
+ *
+ *   pre-insert   caller passes `CAP - 1`  — reserves the slot the pending insert will take
+ *   post-insert  caller passes `CAP`      — the insert already happened
+ *
+ * WHAT THIS MODULE DOES NOT CERTIFY, on RFS-01 AC-6's precedent of naming blind spots.
+ * It evicts in `Map` insertion order and knows nothing about TTL, read-promotion, or whether a
+ * caller's insertion order matches that caller's own notion of "oldest". `file-filter-cache`
+ * evicts by `min(createdAt)` today and coincides with insertion order only because it never
+ * re-inserts an entry on a read — an invariant unstated in that file, guarded by T1's
+ * characterization suite (mutation M5b) and by nothing here. A future read-promotion added
+ * there would silently defeat the shared eviction and no structural gate could see it.
+ *
+ * WHY IT IMPORTS NOTHING, AND WHY THAT IS ASSERTED IN A TEST RATHER THAN BY CI.
+ * `spec.md` RFS-02 AC-3 originally placed this in `kernel/`, where `check-core-layering`'s
+ * leaf-ness clause would have enforced import-freedom. C30 (`design.md` §5.2) moved it to
+ * `services/cache/` because `kernel/`'s admission rule is "serves >= 2 tiers" and 11 of 11
+ * shipped members keep it, while this module serves `services/` alone after Phase 3. Nothing
+ * in CI now prevents this file from growing a dependency. That is a real loss of enforcement
+ * (R-29), recorded rather than glossed, and the replacement is the AST assertion in this
+ * module's own unit test.
+ */
+/**
+ * Evict oldest-first from `cache` until `cache.size <= maxRetained`.
+ *
+ * @param cache        any `Map`; eviction order is the Map's own insertion order, so a caller
+ *                     that promotes on read (delete + re-set) gets LRU and one that does not
+ *                     gets FIFO. That choice stays with the caller.
+ * @param maxRetained  the number of entries that may remain when this returns. Pre-insert
+ *                     callers pass `CAP - 1`; post-insert callers pass `CAP`.
+ */
+export function evictOldest(cache, maxRetained) {
+    while (cache.size > maxRetained) {
+        const oldest = cache.keys().next().value;
+        // Defensive and unreachable for any `maxRetained >= 0`: the loop condition forces
+        // `cache.size >= 1`, so `keys().next()` always yields an entry. Kept because all four
+        // original sites carry it, and dropping it inside a behavior-preserving PR would be an
+        // unprovable change. It is NOT here for the 90% line-coverage floor — that gate parses
+        // `DA:` records only (`scripts/check-coverage.ts:320`), never `BRDA:`, so this line counts
+        // as covered the moment it is evaluated, whichever way the branch goes.
+        if (oldest === undefined)
+            break;
+        cache.delete(oldest);
+    }
+}
+//# sourceMappingURL=lru-evict.js.map

package/dist/services/cache/lru-evict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lru-evict.js","sourceRoot":"","sources":["../../../src/services/cache/lru-evict.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AAEH;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAO,KAAgB,EAAE,WAAmB;IACrE,OAAO,KAAK,CAAC,IAAI,GAAG,WAAW,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QACzC,kFAAkF;QAClF,sFAAsF;QACtF,uFAAuF;QACvF,uFAAuF;QACvF,2FAA2F;QAC3F,wEAAwE;QACxE,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM;QAChC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/services/file-read/file-content-cache.d.ts

@@ -0,0 +1,41 @@
+import type { FileMetadata } from "./file-metadata.js";
+export interface CachedFile {
+    content: string;
+    timestamp: number;
+    metadata?: FileMetadata;
+}
+/**
+ * The 4 → 5 edge. Module 7 (`read-file.service.ts`) binds this with the
+ * `symbolGraph` forwarded to it from `ReadFileTool`'s constructor parameter.
+ * Bound there since T12; `ReadFileTool` itself bound it from T10 until then.
+ */
+export type MetadataExtractor = (content: string, filePath: string, options: {
+    includeSymbols: boolean;
+    includeImports: boolean;
+    projectId?: string;
+    relativePath?: string;
+}) => Promise<FileMetadata>;
+export declare class FileContentCache {
+    private readonly extractMetadata;
+    private fileCache;
+    private readonly CACHE_TTL;
+    /**
+     * Maximum entries retained in the cache. Without a cap, an adversarial caller
+     * cycling distinct cache keys grows the map for the process lifetime. Map
+     * preserves INSERTION order in JS; we promote a key to most-recently-used on
+     * GET via delete+set, and evict the oldest key on SET while over the cap.
+     * Mirrors WebController's WEB_CACHE_MAX_ENTRIES.
+     */
+    private readonly FILE_CACHE_MAX_ENTRIES;
+    constructor(extractMetadata: MetadataExtractor);
+    readFileWithCache(filePath: string, options: {
+        includeSymbols: boolean;
+        includeImports: boolean;
+        projectId?: string;
+        relativePath?: string;
+    }): Promise<{
+        content: string;
+        metadata: FileMetadata;
+    }>;
+}
+//# sourceMappingURL=file-content-cache.d.ts.map

package/dist/services/file-read/file-content-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-content-cache.d.ts","sourceRoot":"","sources":["../../../src/services/file-read/file-content-cache.ts"],"names":[],"mappings":"AA2CA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,YAAY,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAC9B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE;IACP,cAAc,EAAE,OAAO,CAAC;IACxB,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,KACE,OAAO,CAAC,YAAY,CAAC,CAAC;AAE3B,qBAAa,gBAAgB;IAYf,OAAO,CAAC,QAAQ,CAAC,eAAe;IAX5C,OAAO,CAAC,SAAS,CAAsC;IACvD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAO;gBAEjB,eAAe,EAAE,iBAAiB;IAEzD,iBAAiB,CACrB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE;QACP,cAAc,EAAE,OAAO,CAAC;QACxB,cAAc,EAAE,OAAO,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GACA,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,YAAY,CAAA;KAAE,CAAC;CAuDxD"}

package/dist/services/file-read/file-content-cache.js

@@ -0,0 +1,109 @@
+/**
+ * @massa-ai/core - File content cache
+ *
+ * Module 4 of the `tools/read_file.ts` extraction (PR-D, T10). Owns the
+ * TTL-and-LRU-bounded file CONTENT cache `ReadFileTool` used to carry as
+ * private state: `readFileWithCache`, the `fileCache` Map, `CACHE_TTL`,
+ * `FILE_CACHE_MAX_ENTRIES` and the `CachedFile` shape.
+ *
+ * `readFileWithCache`'s BODY IS MOVED VERBATIM apart from one line. The private
+ * `ReadFileTool.evictOldest` wrapper it used to call no longer exists — its body
+ * read `this.FILE_CACHE_MAX_ENTRIES`, which this module takes, so the wrapper
+ * could not survive this task even as dead code — and the call is now the shared
+ * operator directly, on module 3's exact shape:
+ * `evictOldest(map, CAP - 1)`. `lru-evict.ts`'s second parameter is a POST-CALL
+ * BOUND rather than the cap, so a pre-insert caller passes `CAP - 1` to reserve
+ * the slot the pending `set()` takes; `size > CAP - 1` and `size >= CAP` are the
+ * same predicate over the integers, so the retained count at this call position
+ * is unchanged (C44).
+ *
+ * IT NEVER NAMES SymbolGraphService. Metadata extraction arrives as a
+ * constructor callback (`tasks.md` §4.1, decided there with its rejected
+ * option), and the parameter is deliberately named `extractMetadata` so the
+ * moved body's two call sites — the legacy-entry repair path and the cache
+ * miss — read exactly as they did before the move. The type-only import of
+ * `FileMetadata` from module 5 is unavoidable and is not what §4.1 forbids:
+ * `SymbolGraphService` is the database-backed collaborator the callback exists
+ * to keep out of this file.
+ *
+ * INSTANTIATED PER ReadFileTool, on module 3's precedent — each tool owned its
+ * own `fileCache` Map before the move, so a module singleton would leak cached
+ * file content between independently-constructed tools. That is a behavior
+ * change, and this extraction is behavior-preserving by contract (RFS-02 AC-1).
+ *
+ * CACHE_TTL IS ENFORCED HERE and that is the half of RFS-02 AC-4 that holds.
+ * `__tests__/read-file-project-root-rename-pin.test.ts` measured it: past 60 s
+ * the content re-reads. Its sibling `ROOT_CACHE_TTL` in
+ * `project-root-cache.ts` is declared and read nowhere, so that cache is
+ * LRU-bounded only. The two constants were never related and are now not even
+ * in the same file.
+ */
+import { logger } from "@massa-ai/shared";
+import fs from "fs/promises";
+import { evictOldest } from "../cache/lru-evict.js";
+export class FileContentCache {
+    extractMetadata;
+    fileCache = new Map();
+    CACHE_TTL = 60000; // 1 minute
+    /**
+     * Maximum entries retained in the cache. Without a cap, an adversarial caller
+     * cycling distinct cache keys grows the map for the process lifetime. Map
+     * preserves INSERTION order in JS; we promote a key to most-recently-used on
+     * GET via delete+set, and evict the oldest key on SET while over the cap.
+     * Mirrors WebController's WEB_CACHE_MAX_ENTRIES.
+     */
+    FILE_CACHE_MAX_ENTRIES = 512;
+    constructor(extractMetadata) {
+        this.extractMetadata = extractMetadata;
+    }
+    async readFileWithCache(filePath, options) {
+        // Cache key MUST include every option that changes metadata extraction.
+        // Keying on filePath alone returned stale, options-baked metadata for a
+        // later read of the same file with different includeSymbols/includeImports/
+        // projectId/relativePath (the only e2e red — 08.search F33). Deliberately
+        // exclude offset/limit/lineStart/lineEnd/compress/targetRatio/format: those
+        // are applied AFTER the cache in handle(), and coalescing them across reads
+        // is the cache's purpose.
+        const cacheKey = JSON.stringify({
+            filePath,
+            includeSymbols: options.includeSymbols ?? false,
+            includeImports: options.includeImports ?? false,
+            projectId: options.projectId ?? null,
+            relativePath: options.relativePath ?? null,
+        });
+        const cached = this.fileCache.get(cacheKey);
+        // Check cache validity
+        if (cached && Date.now() - cached.timestamp < this.CACHE_TTL) {
+            logger.debug("File cache hit", { filePath });
+            // LRU touch: promote this key to most-recently-used so hot files survive
+            // eviction. delete+set reorders the key to the end (newest).
+            this.fileCache.delete(cacheKey);
+            this.fileCache.set(cacheKey, cached);
+            // Legacy/edge entries may have undefined metadata. Re-extract once and
+            // WRITE IT BACK into the cache entry so subsequent hits are served from
+            // cache instead of re-extracting on every request.
+            if (!cached.metadata) {
+                const metadata = await this.extractMetadata(cached.content, filePath, options);
+                this.fileCache.set(cacheKey, { ...cached, metadata });
+                return { content: cached.content, metadata };
+            }
+            return {
+                content: cached.content,
+                metadata: cached.metadata,
+            };
+        }
+        // Read file
+        const content = await fs.readFile(filePath, "utf-8");
+        const metadata = await this.extractMetadata(content, filePath, options);
+        // Update cache (evict oldest if at cap).
+        evictOldest(this.fileCache, this.FILE_CACHE_MAX_ENTRIES - 1);
+        this.fileCache.set(cacheKey, {
+            content,
+            timestamp: Date.now(),
+            metadata,
+        });
+        logger.debug("File read and cached", { filePath });
+        return { content, metadata };
+    }
+}
+//# sourceMappingURL=file-content-cache.js.map

package/dist/services/file-read/file-content-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-content-cache.js","sourceRoot":"","sources":["../../../src/services/file-read/file-content-cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,MAAM,aAAa,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAyBpD,MAAM,OAAO,gBAAgB;IAYE;IAXrB,SAAS,GAA4B,IAAI,GAAG,EAAE,CAAC;IACtC,SAAS,GAAG,KAAK,CAAC,CAAC,WAAW;IAC/C;;;;;;OAMG;IACc,sBAAsB,GAAG,GAAG,CAAC;IAE9C,YAA6B,eAAkC;QAAlC,oBAAe,GAAf,eAAe,CAAmB;IAAG,CAAC;IAEnE,KAAK,CAAC,iBAAiB,CACrB,QAAgB,EAChB,OAKC;QAED,wEAAwE;QACxE,wEAAwE;QACxE,4EAA4E;QAC5E,0EAA0E;QAC1E,4EAA4E;QAC5E,4EAA4E;QAC5E,0BAA0B;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;YAC9B,QAAQ;YACR,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,KAAK;YAC/C,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,KAAK;YAC/C,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;YACpC,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,IAAI;SAC3C,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE5C,uBAAuB;QACvB,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC7C,yEAAyE;YACzE,6DAA6D;YAC7D,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAErC,uEAAuE;YACvE,wEAAwE;YACxE,mDAAmD;YACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACrB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAC/E,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACtD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;YAC/C,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC;QACJ,CAAC;QAED,YAAY;QACZ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAExE,yCAAyC;QACzC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,sBAAsB,GAAG,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE;YAC3B,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,QAAQ;SACT,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEnD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC/B,CAAC;CACF"}