@pellux/goodvibes-sdk 0.33.36 → 0.33.38

package/dist/platform/security/user-auth.js

@@ -1,17 +1,25 @@
 import { createHash, randomBytes, scryptSync, timingSafeEqual } from 'crypto';
-import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
+import { chmodSync, closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { logger } from '../utils/logger.js';
 const DEFAULT_SESSION_TTL_MS = 3_600_000;
 const DEFAULT_MAX_SESSIONS = 1000;
+const DEFAULT_MAX_ACCOUNT_LOCKS = 10_000;
 const SCRYPT_KEY_LENGTH = 64;
+/** Default scrypt cost parameters matching Node.js defaults (N=16384, r=8, p=1). */
+const DEFAULT_SCRYPT_PARAMS = { N: 16384, r: 8, p: 1 };
 function toBase64(value) {
     return value.toString('base64');
 }
-function hashPassword(password, salt) {
+/**
+ * Hash format: base64(salt):N:r:p:base64(derived)
+ * The cost parameters are stored in the hash so old hashes can be verified
+ * even after the default params change.
+ */
+function hashPassword(password, params = DEFAULT_SCRYPT_PARAMS, salt) {
     const actualSalt = salt ?? randomBytes(16);
-    const derived = scryptSync(password, actualSalt, SCRYPT_KEY_LENGTH);
-    return `${toBase64(actualSalt)}:${toBase64(derived)}`;
+    const derived = scryptSync(password, actualSalt, SCRYPT_KEY_LENGTH, { N: params.N, r: params.r, p: params.p });
+    return `${toBase64(actualSalt)}:${params.N}:${params.r}:${params.p}:${toBase64(derived)}`;
 }
 /**
  * Generate a cryptographically random one-time password.
@@ -21,15 +29,43 @@ function generateInitialPassword() {
     return randomBytes(16).toString('hex');
 }
 function verifyPassword(password, passwordHash) {
-    const [saltEncoded, hashEncoded] = passwordHash.split(':');
+    const parts = passwordHash.split(':');
+    // Legacy format: salt:hash (2 parts) — uses DEFAULT_SCRYPT_PARAMS for backward compat.
+    // New format: salt:N:r:p:hash (5 parts)
+    let saltEncoded;
+    let hashEncoded;
+    let params;
+    if (parts.length === 2) {
+        // Legacy hash: no cost params stored — use defaults.
+        [saltEncoded, hashEncoded] = parts;
+        params = DEFAULT_SCRYPT_PARAMS;
+    }
+    else if (parts.length === 5) {
+        const N = Number(parts[1]);
+        const r = Number(parts[2]);
+        const p = Number(parts[3]);
+        if (!Number.isInteger(N) || N < 1 || !Number.isInteger(r) || r < 1 || !Number.isInteger(p) || p < 1)
+            return false;
+        saltEncoded = parts[0];
+        hashEncoded = parts[4];
+        params = { N, r, p };
+    }
+    else {
+        return false;
+    }
     if (!saltEncoded || !hashEncoded)
         return false;
-    const salt = Buffer.from(saltEncoded, 'base64');
-    const expected = Buffer.from(hashEncoded, 'base64');
-    const actual = scryptSync(password, salt, SCRYPT_KEY_LENGTH);
-    if (actual.length !== expected.length)
+    try {
+        const salt = Buffer.from(saltEncoded, 'base64');
+        const expected = Buffer.from(hashEncoded, 'base64');
+        const actual = scryptSync(password, salt, SCRYPT_KEY_LENGTH, { N: params.N, r: params.r, p: params.p });
+        if (actual.length !== expected.length)
+            return false;
+        return timingSafeEqual(actual, expected);
+    }
+    catch {
         return false;
-    return timingSafeEqual(actual, expected);
+    }
 }
 function fingerprintToken(token) {
     return createHash('sha256').update(token).digest('hex').slice(0, 16);
@@ -59,7 +95,8 @@ function readBootstrapUsers(filePath) {
  * some Linux fs drivers).
  */
 function atomicWriteSecretFile(filePath, content) {
-    mkdirSync(dirname(filePath), { recursive: true });
+    const dir = dirname(filePath);
+    mkdirSync(dir, { recursive: true });
     const tmpPath = filePath + '.tmp';
     writeFileSync(tmpPath, content, { encoding: 'utf-8', mode: 0o600 });
     try {
@@ -68,7 +105,23 @@ function atomicWriteSecretFile(filePath, content) {
     catch (error) {
         logger.warn('User auth secret temp chmod failed', { path: tmpPath, error: String(error) });
     }
+    // fsync the file data before rename so the content survives power loss.
+    const fd = openSync(tmpPath, 'r+');
+    try {
+        fsyncSync(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
     renameSync(tmpPath, filePath);
+    // fsync the parent directory so the directory entry (rename) is durable.
+    const dirFd = openSync(dir, 'r');
+    try {
+        fsyncSync(dirFd);
+    }
+    finally {
+        closeSync(dirFd);
+    }
     try {
         chmodSync(filePath, 0o600);
     }
@@ -158,11 +211,17 @@ function detectBootstrapCredentialDrift(users, credentialPath, userStorePath) {
 export class UserAuthManager {
     users = new Map();
     sessions = new Map();
+    /** Per-username failure counters for account-level lockout (independent of IP throttling). */
+    accountLocks = new Map();
     sessionTtlMs;
     maxSessions;
+    maxAccountLocks;
     userStorePath;
     bootstrapCredentialPath;
     persistUsers;
+    scryptParams;
+    /** Injectable clock — defaults to Date.now for production. */
+    nowFn;
     constructor(config) {
         if (!config.bootstrapFilePath)
             throw new Error('UserAuthManager requires an explicit bootstrapFilePath.');
@@ -170,9 +229,12 @@ export class UserAuthManager {
             throw new Error('UserAuthManager requires an explicit bootstrapCredentialPath.');
         this.sessionTtlMs = config.sessionTtlMs ?? DEFAULT_SESSION_TTL_MS;
         this.maxSessions = config.maxSessions ?? DEFAULT_MAX_SESSIONS;
+        this.maxAccountLocks = config.maxAccountLocks ?? DEFAULT_MAX_ACCOUNT_LOCKS;
         this.userStorePath = config.bootstrapFilePath;
         this.bootstrapCredentialPath = config.bootstrapCredentialPath;
         this.persistUsers = config.users === undefined;
+        this.scryptParams = config.scryptParams ?? DEFAULT_SCRYPT_PARAMS;
+        this.nowFn = config.nowFn ?? (() => Date.now());
         const seedUsers = config.users ?? loadOrBootstrapUsers(this.userStorePath, this.bootstrapCredentialPath);
         for (const user of seedUsers) {
             this.users.set(user.username, user);
@@ -184,14 +246,129 @@ export class UserAuthManager {
             detectBootstrapCredentialDrift(seedUsers, this.bootstrapCredentialPath, this.userStorePath);
         }
     }
-    static hashPassword(password) {
-        return hashPassword(password);
+    static hashPassword(password, params) {
+        return hashPassword(password, params ?? DEFAULT_SCRYPT_PARAMS);
     }
+    /**
+     * Authenticate username/password with per-account lockout.
+     * - Does NOT leak whether a username exists (same generic error path for unknown users).
+     * - Records failures against the username bucket (not IP) with escalating backoff.
+     * - Returns lockedUntilMs when the account is temporarily locked.
+     * - Returns usedBootstrapCredential=true when the matched credential originated from
+     *   the bootstrap credential file, so callers can defer retirement until a non-bootstrap
+     *   login succeeds.
+     */
     authenticate(username, password) {
+        const now = this.nowFn();
+        const lockState = this.accountLocks.get(username);
+        // Check account lock (before touching user store — avoids user-existence side-channel).
+        if (lockState && lockState.lockedUntil > now) {
+            // Still locked — record the attempt but keep the lock window intact.
+            lockState.failures++;
+            return { ok: false, lockedUntilMs: lockState.lockedUntil };
+        }
         const user = this.users.get(username);
-        if (!user)
-            return null;
-        return verifyPassword(password, user.passwordHash) ? user : null;
+        // Always verify something with constant-time cost so unknown usernames
+        // have the same timing profile as known usernames with wrong password.
+        const hashToCheck = user?.passwordHash ?? 'dGVzdHNhbHQ=:16384:8:1:dGVzdGhhc2h0ZXN0aGFzaHRlc3RoYXNodGVzdGhhc2g=';
+        const passwordOk = user !== undefined && verifyPassword(password, hashToCheck);
+        if (!passwordOk) {
+            this._recordLoginFailure(username, now);
+            // Check if this failure just triggered a lock.
+            const newLock = this.accountLocks.get(username);
+            const lockedUntilMs = newLock && newLock.lockedUntil > now ? newLock.lockedUntil : undefined;
+            return lockedUntilMs !== undefined ? { ok: false, lockedUntilMs } : { ok: false };
+        }
+        // Determine whether this login used the bootstrap credential.
+        // Compare against the credential file contents without leaking timing info
+        // (we already confirmed the password is correct at this point).
+        const bootstrapCred = readBootstrapCredentialFile(this.bootstrapCredentialPath);
+        const usedBootstrapCredential = bootstrapCred !== null
+            && bootstrapCred.username === username
+            && bootstrapCred.password === password;
+        // Success — clear failure count.
+        this.accountLocks.delete(username);
+        return { ok: true, user, usedBootstrapCredential };
+    }
+    /**
+     * Record a login failure for the given username and apply escalating backoff.
+     *
+     * Thresholds are anchored ABOVE the per-IP login budget (default 5/min) so
+     * the first account lock cannot fire before the IP limiter has already
+     * throttled further attempts. This preserves the 401-then-429-by-IP contract
+     * for in-budget attempts.
+     *
+     *   1-5 failures:   no lock (IP budget exhaustion fires at attempt 6+)
+     *   6-9 failures:   30-second lock
+     *   10-19 failures: 5-minute lock
+     *   20+ failures:   30-minute lock
+     *
+     * Note: failures also increment during an active lock window (when the account
+     * is already locked and another attempt arrives). This means a lock can expire
+     * with a failure count already in a higher tier, causing the next lock after
+     * expiry to jump directly to that tier. This is intentional: repeated attempts
+     * during a lock are themselves failures and escalate the penalty schedule.
+     */
+    _recordLoginFailure(username, now) {
+        const existing = this.accountLocks.get(username);
+        if (!existing) {
+            // New entry — evict if at cap before inserting.
+            this._evictAccountLockIfNeeded(now);
+        }
+        const state = existing ?? { failures: 0, lockedUntil: 0 };
+        state.failures++;
+        const f = state.failures;
+        let lockDurationMs = 0;
+        if (f >= 20)
+            lockDurationMs = 30 * 60_000;
+        else if (f >= 10)
+            lockDurationMs = 5 * 60_000;
+        else if (f >= 6)
+            lockDurationMs = 30_000;
+        state.lockedUntil = lockDurationMs > 0 ? now + lockDurationMs : 0;
+        this.accountLocks.set(username, state);
+    }
+    /**
+     * Evict account lock entries when the map is at capacity.
+     * Prefers entries with expired locks + no recent failures (stale entries).
+     * Falls back to the entry with the oldest/soonest-expired lock.
+     * Preserves no-username-enumeration: eviction policy is time-based, not
+     * user-existence-based.
+     */
+    _evictAccountLockIfNeeded(now) {
+        if (this.accountLocks.size < this.maxAccountLocks)
+            return;
+        // First sweep: remove all fully stale entries (lock expired AND low failure count).
+        for (const [key, state] of this.accountLocks.entries()) {
+            if (state.lockedUntil <= now && state.failures < 6) {
+                this.accountLocks.delete(key);
+                if (this.accountLocks.size < this.maxAccountLocks)
+                    return;
+            }
+        }
+        // Second sweep: remove the entry with the smallest lockedUntil (most expired).
+        let oldestKey;
+        let oldestUntil = Infinity;
+        for (const [key, state] of this.accountLocks.entries()) {
+            if (state.lockedUntil < oldestUntil) {
+                oldestUntil = state.lockedUntil;
+                oldestKey = key;
+            }
+        }
+        if (oldestKey !== undefined) {
+            this.accountLocks.delete(oldestKey);
+        }
+    }
+    /**
+     * Expose account lock state for testing.
+     * Returns a defensive copy so callers cannot mutate internal state.
+     * Use the injected nowFn (via UserAuthManager constructor) to advance time in tests.
+     */
+    getAccountLockState(username) {
+        const state = this.accountLocks.get(username);
+        if (!state)
+            return undefined;
+        return { failures: state.failures, lockedUntil: state.lockedUntil };
     }
     getUser(username) {
         const user = this.users.get(username);
@@ -286,7 +463,7 @@ export class UserAuthManager {
             throw new Error('Password must be at least 8 characters.');
         const user = {
             username: normalized,
-            passwordHash: hashPassword(password),
+            passwordHash: hashPassword(password, this.scryptParams),
             roles: [...new Set(roles.filter(Boolean))],
         };
         this.users.set(normalized, user);
@@ -315,7 +492,7 @@ export class UserAuthManager {
             throw new Error('Password must be at least 8 characters.');
         this.users.set(normalized, {
             ...existing,
-            passwordHash: hashPassword(nextPassword),
+            passwordHash: hashPassword(nextPassword, this.scryptParams),
         });
         this.revokeSessionsForUser(normalized);
         this.persist();

package/dist/platform/sessions/manager.d.ts

@@ -11,6 +11,8 @@ export interface SessionMeta {
     timestamp: number;
     titleSource?: ConversationTitleSource | undefined;
     returnContext?: SessionReturnContextSummary | undefined;
+    /** File format version written into the JSONL meta line. Present on files saved after schemaVersion was introduced. Missing on older files (treat as version 0). */
+    schemaVersion?: number | undefined;
 }
 /**
  * Summary info for listing saved sessions.
@@ -34,6 +36,13 @@ export interface SessionInfo {
  *   Line 0: { type: 'meta', ...SessionMeta }
  *   Line N: { type: 'message', ...message fields }
  */
+/**
+ * Current schema version written to session files.
+ * Increment when the file format changes in a backward-incompatible way.
+ * Readers accept: version undefined (legacy, treated as 0), version <= CURRENT, and
+ * version > CURRENT (future — logged as a warning, accepted with best-effort parsing).
+ */
+export declare const CURRENT_SESSION_SCHEMA_VERSION = 1;
 export declare class SessionManager {
     private sessionsDir;
     constructor(baseDir: string, options?: {
@@ -46,8 +55,16 @@ export declare class SessionManager {
      */
     private _cleanupOrphanTempFiles;
     /**
-     * Atomically write content to filePath via a temp file + fsync + rename.
-     * Protects against partial writes on crash.
+     * Atomically write content to filePath via a temp file + fsync(file) + rename + fsync(dir).
+     * Protects against partial writes and directory-entry reversion on power loss:
+     *   1. Write content to a tmp file in the same directory.
+     *   2. fsync the tmp file to flush its data to storage.
+     *   3. rename the tmp file into place (atomic on POSIX).
+     *   4. fsync the parent directory to flush the directory entry — without
+     *      this step, on power loss after rename the directory entry can
+     *      revert and the renamed file disappears.
+     * Mirrors the reference implementation in platform/security/user-auth.ts
+     * (atomicWriteSecretFile), which performs both fsyncs.
      */
     private _atomicWrite;
     /**

package/dist/platform/sessions/manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../../src/platform/sessions/manager.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAIvE;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAClD,aAAa,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;CACzD;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAClD,aAAa,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;CACzD;AAED;;;;;;;GAOG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,WAAW,CAAS;gBAEhB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE;IAM/H;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IA0B/B;;;OAGG;IACH,OAAO,CAAC,YAAY;IAapB;;;;OAIG;IACH,IAAI,CACF,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAAE,EAClB,IAAI,EAAE,WAAW,EACjB,YAAY,CAAC,EAAE,WAAW,EAAE,GAC3B;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE;IAuC9C;;;OAGG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,WAAW,EAAE,CAAA;KAAE;IAuD1F;;OAEG;IACH,IAAI,IAAI,WAAW,EAAE;IA6FrB;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IA+BzC;;;;;OAKG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAoB5C;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAY1B;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,OAAO,EAAE,WAAW,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAuD9F;;;;OAIG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;CASnC"}
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../../src/platform/sessions/manager.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACxF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAIvE;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAClD,aAAa,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IACxD,oKAAoK;IACpK,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAClD,aAAa,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;CACzD;AAED;;;;;;;GAOG;AACH;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,IAAI,CAAC;AAEhD,qBAAa,cAAc;IACzB,OAAO,CAAC,WAAW,CAAS;gBAEhB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE;IAM/H;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IA0B/B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,YAAY;IAoBpB;;;;OAIG;IACH,IAAI,CACF,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAAE,EAClB,IAAI,EAAE,WAAW,EACjB,YAAY,CAAC,EAAE,WAAW,EAAE,GAC3B;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE;IAwC9C;;;OAGG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,WAAW,EAAE,CAAA;KAAE;IAgE1F;;OAEG;IACH,IAAI,IAAI,WAAW,EAAE;IA+FrB;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAiCzC;;;;;OAKG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAoB5C;;;OAGG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAY1B;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,OAAO,EAAE,WAAW,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAuD9F;;;;OAIG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;CASnC"}

package/dist/platform/sessions/manager.js

@@ -11,6 +11,13 @@ import { resolveScopedDirectory } from '../runtime/surface-root.js';
  *   Line 0: { type: 'meta', ...SessionMeta }
  *   Line N: { type: 'message', ...message fields }
  */
+/**
+ * Current schema version written to session files.
+ * Increment when the file format changes in a backward-incompatible way.
+ * Readers accept: version undefined (legacy, treated as 0), version <= CURRENT, and
+ * version > CURRENT (future — logged as a warning, accepted with best-effort parsing).
+ */
+export const CURRENT_SESSION_SCHEMA_VERSION = 1;
 export class SessionManager {
     sessionsDir;
     constructor(baseDir, options) {
@@ -51,21 +58,37 @@ export class SessionManager {
         }
     }
     /**
-     * Atomically write content to filePath via a temp file + fsync + rename.
-     * Protects against partial writes on crash.
+     * Atomically write content to filePath via a temp file + fsync(file) + rename + fsync(dir).
+     * Protects against partial writes and directory-entry reversion on power loss:
+     *   1. Write content to a tmp file in the same directory.
+     *   2. fsync the tmp file to flush its data to storage.
+     *   3. rename the tmp file into place (atomic on POSIX).
+     *   4. fsync the parent directory to flush the directory entry — without
+     *      this step, on power loss after rename the directory entry can
+     *      revert and the renamed file disappears.
+     * Mirrors the reference implementation in platform/security/user-auth.ts
+     * (atomicWriteSecretFile), which performs both fsyncs.
      */
     _atomicWrite(filePath, content) {
         const tmpPath = join(this.sessionsDir, `.tmp-${process.pid}-${Date.now()}`);
         writeFileSync(tmpPath, content, 'utf-8');
-        // fsync to flush OS write buffers before rename
-        const fd = openSync(tmpPath, 'r+');
+        // fsync the file to flush data buffers before rename
+        const fileFd = openSync(tmpPath, 'r+');
         try {
-            fsyncSync(fd);
+            fsyncSync(fileFd);
         }
         finally {
-            closeSync(fd);
+            closeSync(fileFd);
         }
         renameSync(tmpPath, filePath);
+        // fsync the directory to flush the directory entry (makes rename durable)
+        const dirFd = openSync(this.sessionsDir, 'r');
+        try {
+            fsyncSync(dirFd);
+        }
+        finally {
+            closeSync(dirFd);
+        }
     }
     /**
      * Save conversation messages to a JSONL session file.
@@ -82,6 +105,7 @@ export class SessionManager {
         // First line: meta record
         const metaRecord = {
             type: 'meta',
+            schemaVersion: CURRENT_SESSION_SCHEMA_VERSION,
             timestamp: meta.timestamp,
             title: meta.title,
             model: meta.model,
@@ -135,6 +159,14 @@ export class SessionManager {
                 continue;
             }
             if (record.type === 'meta') {
+                const fileVersion = typeof record.schemaVersion === 'number' ? record.schemaVersion : 0;
+                if (fileVersion > CURRENT_SESSION_SCHEMA_VERSION) {
+                    logger.warn('SessionManager: session file has a newer schemaVersion — loading with best-effort parsing', {
+                        name,
+                        fileVersion,
+                        currentVersion: CURRENT_SESSION_SCHEMA_VERSION,
+                    });
+                }
                 meta = {
                     title: String(record.title ?? ''),
                     model: String(record.model ?? ''),
@@ -144,6 +176,7 @@ export class SessionManager {
                     returnContext: (record.returnContext && typeof record.returnContext === 'object')
                         ? record.returnContext
                         : undefined,
+                    schemaVersion: fileVersion,
                 };
             }
             else if (record.type === 'message') {
@@ -196,6 +229,7 @@ export class SessionManager {
                     try {
                         const first = JSON.parse(lines[0]);
                         if (first.type === 'meta') {
+                            const fileVersion = typeof first.schemaVersion === 'number' ? first.schemaVersion : 0;
                             meta = {
                                 title: String(first.title ?? ''),
                                 model: String(first.model ?? ''),
@@ -205,6 +239,7 @@ export class SessionManager {
                                 returnContext: (first.returnContext && typeof first.returnContext === 'object')
                                     ? first.returnContext
                                     : undefined,
+                                schemaVersion: fileVersion,
                             };
                         }
                     }
@@ -273,6 +308,7 @@ export class SessionManager {
             const record = JSON.parse(firstLine);
             if (record.type !== 'meta')
                 return null;
+            const fileVersion = typeof record.schemaVersion === 'number' ? record.schemaVersion : 0;
             return {
                 title: String(record.title ?? ''),
                 model: String(record.model ?? ''),
@@ -282,6 +318,7 @@ export class SessionManager {
                 returnContext: (record.returnContext && typeof record.returnContext === 'object')
                     ? record.returnContext
                     : undefined,
+                schemaVersion: fileVersion,
             };
         }
         catch (err) {

package/dist/platform/state/memory-registry.d.ts

@@ -19,7 +19,7 @@ export declare class MemoryRegistry {
     rebuildVectorsAsync(): Promise<MemoryVectorStats>;
     vectorStats(): MemoryVectorStats;
     doctor(): Promise<MemoryDoctorReport>;
-    reviewQueue(limit?: number): MemoryRecord[];
+    reviewQueue(limit?: number, scope?: MemoryScope): MemoryRecord[];
     exportBundle(filter?: MemorySearchFilter): MemoryBundle;
     importBundle(bundle: MemoryBundle): Promise<MemoryImportResult>;
     get(id: string): MemoryRecord | null;

package/dist/platform/state/memory-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory-registry.d.ts","sourceRoot":"","sources":["../../../src/platform/state/memory-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACnN,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5D;;;GAGG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,SAAS,CAAyB;gBAE9B,KAAK,EAAE,WAAW;IAI9B,QAAQ,IAAI,WAAW;IAIvB,SAAS,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;IAOrC,OAAO,CAAC,MAAM;IAIR,GAAG,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;IAMxD,MAAM,CAAC,MAAM,GAAE,kBAAuB,GAAG,YAAY,EAAE;IAIvD,cAAc,CAAC,MAAM,GAAE,kBAAuB,GAAG,0BAA0B,EAAE;IAI7E,cAAc,IAAI,iBAAiB;IAI7B,mBAAmB,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAIvD,WAAW,IAAI,iBAAiB;IAI1B,MAAM,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAI3C,WAAW,CAAC,KAAK,SAAK,GAAG,YAAY,EAAE;IAIvC,YAAY,CAAC,MAAM,GAAE,kBAAuB,GAAG,YAAY;IAIrD,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAMrE,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IAI9B,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAMtF,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,EAAE;IAIlC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,KAAK,CAAC,EAAE,WAAW,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,YAAY,GAAG,IAAI;IAM3H,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,YAAY,GAAG,IAAI;IAMjE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAM3B,MAAM,IAAI,YAAY,EAAE;CAGzB"}
+{"version":3,"file":"memory-registry.d.ts","sourceRoot":"","sources":["../../../src/platform/state/memory-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACnN,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5D;;;GAGG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,SAAS,CAAyB;gBAE9B,KAAK,EAAE,WAAW;IAI9B,QAAQ,IAAI,WAAW;IAIvB,SAAS,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;IAOrC,OAAO,CAAC,MAAM;IAIR,GAAG,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;IAMxD,MAAM,CAAC,MAAM,GAAE,kBAAuB,GAAG,YAAY,EAAE;IAIvD,cAAc,CAAC,MAAM,GAAE,kBAAuB,GAAG,0BAA0B,EAAE;IAI7E,cAAc,IAAI,iBAAiB;IAI7B,mBAAmB,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAIvD,WAAW,IAAI,iBAAiB;IAI1B,MAAM,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAI3C,WAAW,CAAC,KAAK,SAAK,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,YAAY,EAAE;IAI5D,YAAY,CAAC,MAAM,GAAE,kBAAuB,GAAG,YAAY;IAIrD,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAMrE,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IAI9B,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAMtF,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,EAAE;IAIlC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,KAAK,CAAC,EAAE,WAAW,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,YAAY,GAAG,IAAI;IAM3H,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,YAAY,GAAG,IAAI;IAMjE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAM3B,MAAM,IAAI,YAAY,EAAE;CAGzB"}

package/dist/platform/state/memory-registry.js

@@ -44,8 +44,8 @@ export class MemoryRegistry {
     async doctor() {
         return this.store.doctor();
     }
-    reviewQueue(limit = 10) {
-        return this.store.reviewQueue(limit);
+    reviewQueue(limit = 10, scope) {
+        return this.store.reviewQueue(limit, scope);
     }
     exportBundle(filter = {}) {
         return this.store.exportBundle(filter);

package/dist/platform/state/memory-store.d.ts

@@ -148,7 +148,7 @@ export declare class MemoryStore {
     /** Search records with an optional filter. */
     search(filter?: MemorySearchFilter): MemoryRecord[];
     searchSemantic(filter?: MemorySearchFilter): MemorySemanticSearchResult[];
-    reviewQueue(limit?: number): MemoryRecord[];
+    reviewQueue(limit?: number, scope?: MemoryScope): MemoryRecord[];
     exportBundle(filter?: MemorySearchFilter): MemoryBundle;
     importBundle(bundle: MemoryBundle): Promise<MemoryImportResult>;
     /** Create a directed link between two records. */

package/dist/platform/state/memory-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory-store.d.ts","sourceRoot":"","sources":["../../../src/platform/state/memory-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,EAEL,KAAK,iBAAiB,EAEvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,+BAA+B,EAC/B,KAAK,2BAA2B,EACjC,MAAM,wBAAwB,CAAC;AAkBhC,MAAM,MAAM,WAAW,GACnB,UAAU,GACV,YAAY,GACZ,UAAU,GACV,SAAS,GACT,MAAM,GACN,MAAM,GACN,SAAS,GACT,cAAc,GACd,WAAW,CAAC;AAEhB,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;AAEzD,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,UAAU,GAAG,OAAO,GAAG,cAAc,CAAC;AAEhF,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAEhF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,kBAAkB,CAAC;IACzB,4FAA4F;IAC5F,GAAG,EAAE,MAAM,CAAC;IACZ,qCAAqC;IACrC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,8CAA8C;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,+DAA+D;IAC/D,KAAK,EAAE,WAAW,CAAC;IACnB,sEAAsE;IACtE,GAAG,EAAE,WAAW,CAAC;IACjB,oCAAoC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,oCAAoC;IACpC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,mDAAmD;IACnD,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,oCAAoC;IACpC,WAAW,EAAE,iBAAiB,CAAC;IAC/B,0FAA0F;IAC1F,UAAU,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,sCAAsC;IACtC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,kCAAkC;IAClC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAC;IACjB,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAChC,GAAG,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5B,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/B,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,8DAA8D;IAC9D,WAAW,CAAC,EAAE,iBAAiB,GAAG,iBAAiB,EAAE,GAAG,SAAS,CAAC;IAClE,2CAA2C;IAC3C,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,sEAAsE;IACtE,eAAe,CAAC,EAAE,kBAAkB,EAAE,GAAG,SAAS,CAAC;IACnD,mDAAmD;IACnD,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAChC,GAAG,EAAE,WAAW,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5B,UAAU,CAAC,EAAE,cAAc,EAAE,GAAG,SAAS,CAAC;IAC1C,MAAM,CAAC,EAAE;QACP,KAAK,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;QACtC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAChC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAChC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAChC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAClC,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,IAAI,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,WAAW,GAAG,KAAK,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,KAAK,EAAE,UAAU,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,YAAY,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,iBAAiB,EAAE,+BAA+B,CAAC;IACnD,iBAAiB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACxC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAItD,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,yBAAyB,CAA2C;IAC5E,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAkC;gBAExD,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,kBAAkB;IAY7D,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAS3B,IAAI,OAAO,IAAI,OAAO,CAErB;IAED,2DAA2D;IACrD,GAAG,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;IAmDxD,sCAAsC;IACtC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IAapC,8CAA8C;IAC9C,MAAM,CAAC,MAAM,GAAE,kBAAuB,GAAG,YAAY,EAAE;IAkFvD,cAAc,CAAC,MAAM,GAAE,kBAAuB,GAAG,0BAA0B,EAAE;IA8C7E,WAAW,CAAC,KAAK,SAAK,GAAG,YAAY,EAAE;IAQvC,YAAY,CAAC,MAAM,GAAE,kBAAuB,GAAG,YAAY;IA2BrD,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAoDrE,kDAAkD;IAC5C,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAkCtF,kEAAkE;IAClE,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,EAAE;IAwBlC,mDAAmD;IACnD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,KAAK,CAAC,EAAE,WAAW,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,YAAY,GAAG,IAAI;IA6B3H,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,YAAY,GAAG,IAAI;IAwCjE,yCAAyC;IACzC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAgB3B,kBAAkB,IAAI,iBAAiB;IAYjC,uBAAuB,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAyB3D,WAAW,IAAI,iBAAiB;IAc1B,MAAM,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAQrC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC;IAI9B,KAAK,IAAI,IAAI;IAMb;;;;;;;;;OASG;IACG,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB9C,OAAO,CAAC,OAAO;CAKhB"}
+{"version":3,"file":"memory-store.d.ts","sourceRoot":"","sources":["../../../src/platform/state/memory-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,EAEL,KAAK,iBAAiB,EAEvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,+BAA+B,EAC/B,KAAK,2BAA2B,EACjC,MAAM,wBAAwB,CAAC;AAkBhC,MAAM,MAAM,WAAW,GACnB,UAAU,GACV,YAAY,GACZ,UAAU,GACV,SAAS,GACT,MAAM,GACN,MAAM,GACN,SAAS,GACT,cAAc,GACd,WAAW,CAAC;AAEhB,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;AAEzD,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,UAAU,GAAG,OAAO,GAAG,cAAc,CAAC;AAEhF,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAEhF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,kBAAkB,CAAC;IACzB,4FAA4F;IAC5F,GAAG,EAAE,MAAM,CAAC;IACZ,qCAAqC;IACrC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,8CAA8C;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,+DAA+D;IAC/D,KAAK,EAAE,WAAW,CAAC;IACnB,sEAAsE;IACtE,GAAG,EAAE,WAAW,CAAC;IACjB,oCAAoC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,oCAAoC;IACpC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,mDAAmD;IACnD,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,oCAAoC;IACpC,WAAW,EAAE,iBAAiB,CAAC;IAC/B,0FAA0F;IAC1F,UAAU,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,sCAAsC;IACtC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,kCAAkC;IAClC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAC;IACjB,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAChC,GAAG,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5B,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/B,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,8DAA8D;IAC9D,WAAW,CAAC,EAAE,iBAAiB,GAAG,iBAAiB,EAAE,GAAG,SAAS,CAAC;IAClE,2CAA2C;IAC3C,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,sEAAsE;IACtE,eAAe,CAAC,EAAE,kBAAkB,EAAE,GAAG,SAAS,CAAC;IACnD,mDAAmD;IACnD,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAChC,GAAG,EAAE,WAAW,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5B,UAAU,CAAC,EAAE,cAAc,EAAE,GAAG,SAAS,CAAC;IAC1C,MAAM,CAAC,EAAE;QACP,KAAK,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;QACtC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAChC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAChC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAChC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAClC,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,IAAI,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,WAAW,GAAG,KAAK,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,KAAK,EAAE,UAAU,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,YAAY,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,iBAAiB,EAAE,+BAA+B,CAAC;IACnD,iBAAiB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACxC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAItD,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,yBAAyB,CAA2C;IAC5E,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAkC;gBAExD,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,kBAAkB;IAY7D,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAS3B,IAAI,OAAO,IAAI,OAAO,CAErB;IAED,2DAA2D;IACrD,GAAG,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;IAmDxD,sCAAsC;IACtC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IAapC,8CAA8C;IAC9C,MAAM,CAAC,MAAM,GAAE,kBAAuB,GAAG,YAAY,EAAE;IAkFvD,cAAc,CAAC,MAAM,GAAE,kBAAuB,GAAG,0BAA0B,EAAE;IA8C7E,WAAW,CAAC,KAAK,SAAK,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,YAAY,EAAE;IAQ5D,YAAY,CAAC,MAAM,GAAE,kBAAuB,GAAG,YAAY;IA2BrD,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAoDrE,kDAAkD;IAC5C,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAkCtF,kEAAkE;IAClE,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,EAAE;IAwBlC,mDAAmD;IACnD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,KAAK,CAAC,EAAE,WAAW,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,YAAY,GAAG,IAAI;IA6B3H,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,YAAY,GAAG,IAAI;IAwCjE,yCAAyC;IACzC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAgB3B,kBAAkB,IAAI,iBAAiB;IAYjC,uBAAuB,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAyB3D,WAAW,IAAI,iBAAiB;IAc1B,MAAM,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAQrC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC;IAI9B,KAAK,IAAI,IAAI;IAMb;;;;;;;;;OASG;IACG,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB9C,OAAO,CAAC,OAAO;CAKhB"}

package/dist/platform/state/memory-store.js

@@ -207,8 +207,8 @@ export class MemoryStore {
             .sort((a, b) => b.score - a.score || a.distance - b.distance || b.record.updatedAt - a.record.updatedAt)
             .slice(0, requestedLimit);
     }
-    reviewQueue(limit = 10) {
-        const records = this.search({ limit: Math.max(limit * 4, 25) });
+    reviewQueue(limit = 10, scope) {
+        const records = this.search({ limit: Math.max(limit * 4, 25), ...(scope ? { scope } : {}) });
         const candidates = records.filter((record) => isReviewCandidate(record));
         return candidates
             .sort((a, b) => reviewQueueScore(b) - reviewQueueScore(a) || b.updatedAt - a.updatedAt || b.createdAt - a.createdAt)

package/dist/platform/version.js

@@ -1,6 +1,6 @@
 import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
-let version = '0.33.36';
+let version = '0.33.38';
 try {
     const pkg = JSON.parse(readFileSync(join(import.meta.dir, '..', '..', 'package.json'), 'utf-8'));
     version = pkg.version ?? version;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-sdk",
-  "version": "0.33.36",
+  "version": "0.33.38",
   "description": "TypeScript SDK for building GoodVibes operator, peer, web, mobile, and daemon-connected apps with typed contracts, auth, realtime events, and transport layers.",
   "keywords": [
     "goodvibes",
@@ -453,14 +453,14 @@
   "sideEffects": false,
   "type": "module",
   "dependencies": {
-    "@pellux/goodvibes-contracts": "0.33.36",
-    "@pellux/goodvibes-daemon-sdk": "0.33.36",
-    "@pellux/goodvibes-errors": "0.33.36",
-    "@pellux/goodvibes-operator-sdk": "0.33.36",
-    "@pellux/goodvibes-peer-sdk": "0.33.36",
-    "@pellux/goodvibes-transport-core": "0.33.36",
-    "@pellux/goodvibes-transport-http": "0.33.36",
-    "@pellux/goodvibes-transport-realtime": "0.33.36"
+    "@pellux/goodvibes-contracts": "0.33.38",
+    "@pellux/goodvibes-daemon-sdk": "0.33.38",
+    "@pellux/goodvibes-errors": "0.33.38",
+    "@pellux/goodvibes-operator-sdk": "0.33.38",
+    "@pellux/goodvibes-peer-sdk": "0.33.38",
+    "@pellux/goodvibes-transport-core": "0.33.38",
+    "@pellux/goodvibes-transport-http": "0.33.38",
+    "@pellux/goodvibes-transport-realtime": "0.33.38"
   },
   "optionalDependencies": {
     "@agentclientprotocol/sdk": "^0.21.0",