@remnic/core 1.1.30 → 9.3.515

package/dist/chunk-H2NCNXMS.js

@@ -0,0 +1,159 @@
+import {
+  validateImportTurn
+} from "./chunk-PU44GBL4.js";
+
+// src/bulk-import/registry.ts
+var adapters = /* @__PURE__ */ new Map();
+function registerBulkImportSource(adapter) {
+  if (!adapter || typeof adapter !== "object") {
+    throw new Error("bulk-import adapter must be an object");
+  }
+  if (!adapter.name || typeof adapter.name !== "string" || adapter.name.trim().length === 0) {
+    throw new Error("bulk-import adapter name must be a non-empty string");
+  }
+  if (typeof adapter.parse !== "function") {
+    throw new Error(
+      `bulk-import adapter '${adapter.name}' must have a parse function`
+    );
+  }
+  const key = adapter.name.trim();
+  if (adapters.has(key)) {
+    throw new Error(
+      `bulk-import source adapter '${key}' is already registered`
+    );
+  }
+  const normalized = adapter.name === key ? adapter : { ...adapter, name: key };
+  adapters.set(key, normalized);
+}
+function getBulkImportSource(name) {
+  if (typeof name !== "string") return void 0;
+  const key = name.trim();
+  if (key.length === 0) return void 0;
+  return adapters.get(key);
+}
+function listBulkImportSources() {
+  return [...adapters.keys()];
+}
+function clearBulkImportSources() {
+  adapters.clear();
+}
+
+// src/bulk-import/pipeline.ts
+var DEFAULT_BATCH_SIZE = 20;
+var MIN_BATCH_SIZE = 1;
+var MAX_BATCH_SIZE = 1e3;
+function validateBatchSize(value) {
+  if (value === void 0) return DEFAULT_BATCH_SIZE;
+  if (typeof value !== "number" || !Number.isFinite(value)) {
+    throw new Error(
+      `batchSize must be a finite number, received ${String(value)}`
+    );
+  }
+  if (!Number.isInteger(value)) {
+    throw new Error(
+      `batchSize must be an integer, received ${value}`
+    );
+  }
+  if (value < MIN_BATCH_SIZE || value > MAX_BATCH_SIZE) {
+    throw new Error(
+      `batchSize must be between ${MIN_BATCH_SIZE} and ${MAX_BATCH_SIZE}, received ${value}`
+    );
+  }
+  return value;
+}
+function resolveBulkImportContext(options) {
+  if (options.dedup !== void 0 && typeof options.dedup !== "boolean") {
+    throw new Error(
+      `dedup must be a boolean when provided, received ${String(options.dedup)}`
+    );
+  }
+  if (options.trustLevel !== void 0 && options.trustLevel !== "import") {
+    throw new Error(
+      `trustLevel must be 'import' when provided, received ${String(options.trustLevel)}`
+    );
+  }
+  if (options.namespace !== void 0) {
+    if (typeof options.namespace !== "string" || options.namespace.trim().length === 0) {
+      throw new Error(
+        `namespace must be a non-empty string when provided, received ${String(options.namespace)}`
+      );
+    }
+  }
+  return {
+    dedup: options.dedup !== false,
+    trustLevel: options.trustLevel ?? "import",
+    ...options.namespace !== void 0 ? { namespace: options.namespace } : {}
+  };
+}
+function formatBatchTranscript(turns) {
+  return turns.map((t) => {
+    const prefix = t.participantName ?? t.participantId ?? t.role;
+    return `[${t.timestamp}] ${prefix}: ${t.content}`;
+  }).join("\n");
+}
+async function runBulkImportPipeline(source, options = {}, processBatch) {
+  const batchSize = validateBatchSize(options.batchSize);
+  const dryRun = options.dryRun === true;
+  const batchContext = resolveBulkImportContext(options);
+  const result = {
+    memoriesCreated: 0,
+    duplicatesSkipped: 0,
+    entitiesCreated: 0,
+    turnsProcessed: 0,
+    batchesProcessed: 0,
+    errors: []
+  };
+  const turns = source.turns;
+  if (!turns || turns.length === 0) {
+    return result;
+  }
+  const validTurns = [];
+  for (let i = 0; i < turns.length; i += 1) {
+    const issues = validateImportTurn(turns[i], i);
+    if (issues.length > 0) {
+      const error = {
+        batchIndex: -1,
+        message: issues.map((iss) => iss.message).join("; ")
+      };
+      result.errors.push(error);
+    } else {
+      validTurns.push(turns[i]);
+    }
+  }
+  if (dryRun) {
+    result.turnsProcessed = validTurns.length;
+    result.batchesProcessed = validTurns.length > 0 ? Math.ceil(validTurns.length / batchSize) : 0;
+    return result;
+  }
+  let batchIndex = 0;
+  for (let i = 0; i < validTurns.length; i += batchSize) {
+    const batch = validTurns.slice(i, i + batchSize);
+    try {
+      const batchResult = await processBatch(batch, batchContext);
+      result.memoriesCreated += batchResult.memoriesCreated;
+      result.duplicatesSkipped += batchResult.duplicatesSkipped;
+      if (typeof batchResult.entitiesCreated === "number") {
+        result.entitiesCreated += batchResult.entitiesCreated;
+      }
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      result.errors.push({ batchIndex, message });
+    }
+    result.turnsProcessed += batch.length;
+    result.batchesProcessed += 1;
+    batchIndex += 1;
+  }
+  return result;
+}
+
+export {
+  registerBulkImportSource,
+  getBulkImportSource,
+  listBulkImportSources,
+  clearBulkImportSources,
+  validateBatchSize,
+  resolveBulkImportContext,
+  formatBatchTranscript,
+  runBulkImportPipeline
+};
+//# sourceMappingURL=chunk-H2NCNXMS.js.map

package/dist/chunk-H2NCNXMS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/bulk-import/registry.ts","../src/bulk-import/pipeline.ts"],"sourcesContent":["// ---------------------------------------------------------------------------\n// Bulk-import source adapter registry\n// ---------------------------------------------------------------------------\n\nimport type { BulkImportSourceAdapter } from \"./types.js\";\n\nconst adapters = new Map<string, BulkImportSourceAdapter>();\n\n/**\n * Register a source adapter. Rejects duplicate names and empty names.\n */\nexport function registerBulkImportSource(\n  adapter: BulkImportSourceAdapter,\n): void {\n  if (!adapter || typeof adapter !== \"object\") {\n    throw new Error(\"bulk-import adapter must be an object\");\n  }\n  if (\n    !adapter.name ||\n    typeof adapter.name !== \"string\" ||\n    adapter.name.trim().length === 0\n  ) {\n    throw new Error(\"bulk-import adapter name must be a non-empty string\");\n  }\n  if (typeof adapter.parse !== \"function\") {\n    throw new Error(\n      `bulk-import adapter '${adapter.name}' must have a parse function`,\n    );\n  }\n  const key = adapter.name.trim();\n  if (adapters.has(key)) {\n    throw new Error(\n      `bulk-import source adapter '${key}' is already registered`,\n    );\n  }\n  // Store adapter with trimmed name so `adapter.name` stays consistent with\n  // the registry key returned by `listBulkImportSources()`.\n  const normalized: BulkImportSourceAdapter =\n    adapter.name === key ? adapter : { ...adapter, name: key };\n  adapters.set(key, normalized);\n}\n\n/**\n * Retrieve a registered adapter by name.\n *\n * Names are trimmed on write (see `registerBulkImportSource`), so we\n * also trim on read to avoid the asymmetric-lookup footgun where a\n * whitespace-padded lookup would never find a registered adapter.\n * Non-string or empty-after-trim inputs return undefined.\n */\nexport function getBulkImportSource(\n  name: string,\n): BulkImportSourceAdapter | undefined {\n  if (typeof name !== \"string\") return undefined;\n  const key = name.trim();\n  if (key.length === 0) return undefined;\n  return adapters.get(key);\n}\n\n/**\n * List all registered adapter names.\n */\nexport function listBulkImportSources(): string[] {\n  return [...adapters.keys()];\n}\n\n/**\n * Clear all registered adapters (for testing).\n */\nexport function clearBulkImportSources(): void {\n  adapters.clear();\n}\n","// ---------------------------------------------------------------------------\n// Bulk-import batch processing pipeline\n// ---------------------------------------------------------------------------\n\nimport {\n  validateImportTurn,\n  type BulkImportError,\n  type BulkImportOptions,\n  type BulkImportResult,\n  type BulkImportSource,\n  type ImportTurn,\n} from \"./types.js\";\n\nconst DEFAULT_BATCH_SIZE = 20;\nconst MIN_BATCH_SIZE = 1;\nconst MAX_BATCH_SIZE = 1000;\n\nexport interface ProcessBatchResult {\n  memoriesCreated: number;\n  duplicatesSkipped: number;\n  /**\n   * Number of entities created by the batch. Optional so Phase-1 stubs that\n   * only count memories can omit it; when absent it is treated as 0.\n   */\n  entitiesCreated?: number;\n}\n\nexport interface ProcessBatchContext {\n  dedup: boolean;\n  trustLevel: \"import\";\n  namespace?: string;\n}\n\nexport type ProcessBatchFn = (\n  turns: ImportTurn[],\n  context: ProcessBatchContext,\n) => Promise<ProcessBatchResult>;\n\nexport function validateBatchSize(value: number | undefined): number {\n  if (value === undefined) return DEFAULT_BATCH_SIZE;\n  if (typeof value !== \"number\" || !Number.isFinite(value)) {\n    throw new Error(\n      `batchSize must be a finite number, received ${String(value)}`,\n    );\n  }\n  if (!Number.isInteger(value)) {\n    throw new Error(\n      `batchSize must be an integer, received ${value}`,\n    );\n  }\n  if (value < MIN_BATCH_SIZE || value > MAX_BATCH_SIZE) {\n    throw new Error(\n      `batchSize must be between ${MIN_BATCH_SIZE} and ${MAX_BATCH_SIZE}, received ${value}`,\n    );\n  }\n  return value;\n}\n\nexport function resolveBulkImportContext(\n  options: BulkImportOptions,\n): ProcessBatchContext {\n  if (options.dedup !== undefined && typeof options.dedup !== \"boolean\") {\n    throw new Error(\n      `dedup must be a boolean when provided, received ${String(options.dedup)}`,\n    );\n  }\n  if (options.trustLevel !== undefined && options.trustLevel !== \"import\") {\n    throw new Error(\n      `trustLevel must be 'import' when provided, received ${String(options.trustLevel)}`,\n    );\n  }\n  if (options.namespace !== undefined) {\n    if (typeof options.namespace !== \"string\" || options.namespace.trim().length === 0) {\n      throw new Error(\n        `namespace must be a non-empty string when provided, received ${String(options.namespace)}`,\n      );\n    }\n  }\n\n  return {\n    dedup: options.dedup !== false,\n    trustLevel: options.trustLevel ?? \"import\",\n    ...(options.namespace !== undefined\n      ? { namespace: options.namespace }\n      : {}),\n  };\n}\n\n/**\n * Format a batch of turns into a conversation transcript string.\n */\nexport function formatBatchTranscript(turns: ImportTurn[]): string {\n  return turns\n    .map((t) => {\n      const prefix =\n        t.participantName ?? t.participantId ?? t.role;\n      return `[${t.timestamp}] ${prefix}: ${t.content}`;\n    })\n    .join(\"\\n\");\n}\n\n/**\n * Run the bulk-import pipeline over a parsed source.\n *\n * Splits turns into batches and delegates each to `processBatch`.\n * In dryRun mode, validates and counts without calling `processBatch`.\n */\nexport async function runBulkImportPipeline(\n  source: BulkImportSource,\n  options: BulkImportOptions = {},\n  processBatch: ProcessBatchFn,\n): Promise<BulkImportResult> {\n  const batchSize = validateBatchSize(options.batchSize);\n  const dryRun = options.dryRun === true;\n  const batchContext = resolveBulkImportContext(options);\n\n  const result: BulkImportResult = {\n    memoriesCreated: 0,\n    duplicatesSkipped: 0,\n    entitiesCreated: 0,\n    turnsProcessed: 0,\n    batchesProcessed: 0,\n    errors: [],\n  };\n\n  const turns = source.turns;\n\n  if (!turns || turns.length === 0) {\n    return result;\n  }\n\n  // Validate all turns upfront; collect validation errors\n  const validTurns: ImportTurn[] = [];\n  for (let i = 0; i < turns.length; i += 1) {\n    const issues = validateImportTurn(turns[i], i);\n    if (issues.length > 0) {\n      const error: BulkImportError = {\n        batchIndex: -1,\n        message: issues.map((iss) => iss.message).join(\"; \"),\n      };\n      result.errors.push(error);\n    } else {\n      validTurns.push(turns[i]);\n    }\n  }\n\n  if (dryRun) {\n    result.turnsProcessed = validTurns.length;\n    result.batchesProcessed =\n      validTurns.length > 0\n        ? Math.ceil(validTurns.length / batchSize)\n        : 0;\n    return result;\n  }\n\n  // Process in batches\n  let batchIndex = 0;\n  for (let i = 0; i < validTurns.length; i += batchSize) {\n    const batch = validTurns.slice(i, i + batchSize);\n    try {\n      const batchResult = await processBatch(batch, batchContext);\n      result.memoriesCreated += batchResult.memoriesCreated;\n      result.duplicatesSkipped += batchResult.duplicatesSkipped;\n      if (typeof batchResult.entitiesCreated === \"number\") {\n        result.entitiesCreated += batchResult.entitiesCreated;\n      }\n    } catch (err: unknown) {\n      const message =\n        err instanceof Error ? err.message : String(err);\n      result.errors.push({ batchIndex, message });\n    }\n    result.turnsProcessed += batch.length;\n    result.batchesProcessed += 1;\n    batchIndex += 1;\n  }\n\n  return result;\n}\n"],"mappings":";;;;;AAMA,IAAM,WAAW,oBAAI,IAAqC;AAKnD,SAAS,yBACd,SACM;AACN,MAAI,CAAC,WAAW,OAAO,YAAY,UAAU;AAC3C,UAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AACA,MACE,CAAC,QAAQ,QACT,OAAO,QAAQ,SAAS,YACxB,QAAQ,KAAK,KAAK,EAAE,WAAW,GAC/B;AACA,UAAM,IAAI,MAAM,qDAAqD;AAAA,EACvE;AACA,MAAI,OAAO,QAAQ,UAAU,YAAY;AACvC,UAAM,IAAI;AAAA,MACR,wBAAwB,QAAQ,IAAI;AAAA,IACtC;AAAA,EACF;AACA,QAAM,MAAM,QAAQ,KAAK,KAAK;AAC9B,MAAI,SAAS,IAAI,GAAG,GAAG;AACrB,UAAM,IAAI;AAAA,MACR,+BAA+B,GAAG;AAAA,IACpC;AAAA,EACF;AAGA,QAAM,aACJ,QAAQ,SAAS,MAAM,UAAU,EAAE,GAAG,SAAS,MAAM,IAAI;AAC3D,WAAS,IAAI,KAAK,UAAU;AAC9B;AAUO,SAAS,oBACd,MACqC;AACrC,MAAI,OAAO,SAAS,SAAU,QAAO;AACrC,QAAM,MAAM,KAAK,KAAK;AACtB,MAAI,IAAI,WAAW,EAAG,QAAO;AAC7B,SAAO,SAAS,IAAI,GAAG;AACzB;AAKO,SAAS,wBAAkC;AAChD,SAAO,CAAC,GAAG,SAAS,KAAK,CAAC;AAC5B;AAKO,SAAS,yBAA+B;AAC7C,WAAS,MAAM;AACjB;;;AC1DA,IAAM,qBAAqB;AAC3B,IAAM,iBAAiB;AACvB,IAAM,iBAAiB;AAuBhB,SAAS,kBAAkB,OAAmC;AACnE,MAAI,UAAU,OAAW,QAAO;AAChC,MAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GAAG;AACxD,UAAM,IAAI;AAAA,MACR,+CAA+C,OAAO,KAAK,CAAC;AAAA,IAC9D;AAAA,EACF;AACA,MAAI,CAAC,OAAO,UAAU,KAAK,GAAG;AAC5B,UAAM,IAAI;AAAA,MACR,0CAA0C,KAAK;AAAA,IACjD;AAAA,EACF;AACA,MAAI,QAAQ,kBAAkB,QAAQ,gBAAgB;AACpD,UAAM,IAAI;AAAA,MACR,6BAA6B,cAAc,QAAQ,cAAc,cAAc,KAAK;AAAA,IACtF;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,yBACd,SACqB;AACrB,MAAI,QAAQ,UAAU,UAAa,OAAO,QAAQ,UAAU,WAAW;AACrE,UAAM,IAAI;AAAA,MACR,mDAAmD,OAAO,QAAQ,KAAK,CAAC;AAAA,IAC1E;AAAA,EACF;AACA,MAAI,QAAQ,eAAe,UAAa,QAAQ,eAAe,UAAU;AACvE,UAAM,IAAI;AAAA,MACR,uDAAuD,OAAO,QAAQ,UAAU,CAAC;AAAA,IACnF;AAAA,EACF;AACA,MAAI,QAAQ,cAAc,QAAW;AACnC,QAAI,OAAO,QAAQ,cAAc,YAAY,QAAQ,UAAU,KAAK,EAAE,WAAW,GAAG;AAClF,YAAM,IAAI;AAAA,QACR,gEAAgE,OAAO,QAAQ,SAAS,CAAC;AAAA,MAC3F;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,QAAQ,UAAU;AAAA,IACzB,YAAY,QAAQ,cAAc;AAAA,IAClC,GAAI,QAAQ,cAAc,SACtB,EAAE,WAAW,QAAQ,UAAU,IAC/B,CAAC;AAAA,EACP;AACF;AAKO,SAAS,sBAAsB,OAA6B;AACjE,SAAO,MACJ,IAAI,CAAC,MAAM;AACV,UAAM,SACJ,EAAE,mBAAmB,EAAE,iBAAiB,EAAE;AAC5C,WAAO,IAAI,EAAE,SAAS,KAAK,MAAM,KAAK,EAAE,OAAO;AAAA,EACjD,CAAC,EACA,KAAK,IAAI;AACd;AAQA,eAAsB,sBACpB,QACA,UAA6B,CAAC,GAC9B,cAC2B;AAC3B,QAAM,YAAY,kBAAkB,QAAQ,SAAS;AACrD,QAAM,SAAS,QAAQ,WAAW;AAClC,QAAM,eAAe,yBAAyB,OAAO;AAErD,QAAM,SAA2B;AAAA,IAC/B,iBAAiB;AAAA,IACjB,mBAAmB;AAAA,IACnB,iBAAiB;AAAA,IACjB,gBAAgB;AAAA,IAChB,kBAAkB;AAAA,IAClB,QAAQ,CAAC;AAAA,EACX;AAEA,QAAM,QAAQ,OAAO;AAErB,MAAI,CAAC,SAAS,MAAM,WAAW,GAAG;AAChC,WAAO;AAAA,EACT;AAGA,QAAM,aAA2B,CAAC;AAClC,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,GAAG;AACxC,UAAM,SAAS,mBAAmB,MAAM,CAAC,GAAG,CAAC;AAC7C,QAAI,OAAO,SAAS,GAAG;AACrB,YAAM,QAAyB;AAAA,QAC7B,YAAY;AAAA,QACZ,SAAS,OAAO,IAAI,CAAC,QAAQ,IAAI,OAAO,EAAE,KAAK,IAAI;AAAA,MACrD;AACA,aAAO,OAAO,KAAK,KAAK;AAAA,IAC1B,OAAO;AACL,iBAAW,KAAK,MAAM,CAAC,CAAC;AAAA,IAC1B;AAAA,EACF;AAEA,MAAI,QAAQ;AACV,WAAO,iBAAiB,WAAW;AACnC,WAAO,mBACL,WAAW,SAAS,IAChB,KAAK,KAAK,WAAW,SAAS,SAAS,IACvC;AACN,WAAO;AAAA,EACT;AAGA,MAAI,aAAa;AACjB,WAAS,IAAI,GAAG,IAAI,WAAW,QAAQ,KAAK,WAAW;AACrD,UAAM,QAAQ,WAAW,MAAM,GAAG,IAAI,SAAS;AAC/C,QAAI;AACF,YAAM,cAAc,MAAM,aAAa,OAAO,YAAY;AAC1D,aAAO,mBAAmB,YAAY;AACtC,aAAO,qBAAqB,YAAY;AACxC,UAAI,OAAO,YAAY,oBAAoB,UAAU;AACnD,eAAO,mBAAmB,YAAY;AAAA,MACxC;AAAA,IACF,SAAS,KAAc;AACrB,YAAM,UACJ,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AACjD,aAAO,OAAO,KAAK,EAAE,YAAY,QAAQ,CAAC;AAAA,IAC5C;AACA,WAAO,kBAAkB,MAAM;AAC/B,WAAO,oBAAoB;AAC3B,kBAAc;AAAA,EAChB;AAEA,SAAO;AACT;","names":[]}

package/dist/{chunk-XYIK4LF6.js → chunk-H3FZVNRN.js}

@@ -39,7 +39,13 @@ function isDisagreementPrompt(text) {
 }
 function scanSignals(text, customPatterns = []) {
   const matched = [];
-  const customRegexes = customPatterns.map((p) => new RegExp(p, "i"));
+  const customRegexes = [];
+  for (const pattern of customPatterns) {
+    try {
+      customRegexes.push(new RegExp(pattern, "i"));
+    } catch {
+    }
+  }
   for (const rx of customRegexes) {
     if (rx.test(text)) {
       matched.push(`custom:${rx.source}`);
@@ -72,4 +78,4 @@ export {
   isDisagreementPrompt,
   scanSignals
 };
-//# sourceMappingURL=chunk-XYIK4LF6.js.map
+//# sourceMappingURL=chunk-H3FZVNRN.js.map

package/dist/chunk-H3FZVNRN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/signal.ts"],"sourcesContent":["import type { SignalLevel, SignalScanResult } from \"./types.js\";\n\nconst BUILTIN_HIGH_PATTERNS: RegExp[] = [\n  /\\bactually,?\\s+(i|my|we)\\b/i,\n  /\\bno,?\\s+(i|my|we|that'?s)\\s+(not|wrong|incorrect)\\b/i,\n  /\\bthat'?s\\s+not\\s+right\\b/i,\n  /\\bwhy\\s+did\\s+you\\s+say\\s+that\\b/i,\n  /\\bi\\s+(?:always|never|prefer|hate|love|want|need)\\b/i,\n  /\\bdon'?t\\s+(?:use|do|call|say|make)\\b/i,\n  /\\bplease\\s+(?:always|never|remember|note)\\b/i,\n  /\\bcorrection:?\\b/i,\n  /\\bimportant:?\\s+/i,\n  /\\bfyi:?\\b/i,\n  /\\bfor\\s+(?:the\\s+)?record\\b/i,\n  /\\bmy\\s+(?:name|email|company|role|title|preference)\\s+is\\b/i,\n  /\\bi\\s+(?:work|live|am)\\s+(?:at|in|from|a)\\b/i,\n  /\\bwe\\s+(?:decided|agreed|chose|picked)\\b/i,\n  /\\bthe\\s+decision\\s+(?:is|was)\\b/i,\n  /\\bgoing\\s+forward\\b/i,\n  /\\bfrom\\s+now\\s+on\\b/i,\n];\n\nconst MEDIUM_PATTERNS: RegExp[] = [\n  /\\bi\\s+(?:think|believe|feel)\\b/i,\n  /\\busually\\b/i,\n  /\\btypically\\b/i,\n  /\\bi\\s+(?:like|dislike)\\b/i,\n  /\\bmy\\s+(?:team|project|stack|setup)\\b/i,\n];\n\nconst DISAGREEMENT_PATTERNS: RegExp[] = [\n  /\\bthat'?s\\s+not\\s+right\\b/i,\n  /\\bwhy\\s+did\\s+you\\s+say\\s+that\\b/i,\n  /\\bthat'?s\\s+wrong\\b/i,\n  /\\bnot\\s+correct\\b/i,\n];\n\nexport function isDisagreementPrompt(text: string): boolean {\n  for (const rx of DISAGREEMENT_PATTERNS) {\n    if (rx.test(text)) return true;\n  }\n  return false;\n}\n\nexport function scanSignals(\n  text: string,\n  customPatterns: string[] = [],\n): SignalScanResult {\n  const matched: string[] = [];\n\n  const customRegexes: RegExp[] = [];\n  for (const pattern of customPatterns) {\n    try {\n      customRegexes.push(new RegExp(pattern, \"i\"));\n    } catch {\n      // Invalid custom patterns should not make the scan path fail closed.\n    }\n  }\n\n  for (const rx of customRegexes) {\n    if (rx.test(text)) {\n      matched.push(`custom:${rx.source}`);\n    }\n  }\n\n  for (const rx of BUILTIN_HIGH_PATTERNS) {\n    if (rx.test(text)) {\n      matched.push(`high:${rx.source}`);\n    }\n  }\n\n  if (matched.length > 0) {\n    return { level: \"high\", patterns: matched };\n  }\n\n  const mediumMatched: string[] = [];\n  for (const rx of MEDIUM_PATTERNS) {\n    if (rx.test(text)) {\n      mediumMatched.push(`medium:${rx.source}`);\n    }\n  }\n\n  if (mediumMatched.length >= 2) {\n    return { level: \"medium\", patterns: mediumMatched };\n  }\n  if (mediumMatched.length === 1) {\n    return { level: \"low\", patterns: mediumMatched };\n  }\n\n  return { level: \"none\", patterns: [] };\n}\n"],"mappings":";AAEA,IAAM,wBAAkC;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,kBAA4B;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,wBAAkC;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,SAAS,qBAAqB,MAAuB;AAC1D,aAAW,MAAM,uBAAuB;AACtC,QAAI,GAAG,KAAK,IAAI,EAAG,QAAO;AAAA,EAC5B;AACA,SAAO;AACT;AAEO,SAAS,YACd,MACA,iBAA2B,CAAC,GACV;AAClB,QAAM,UAAoB,CAAC;AAE3B,QAAM,gBAA0B,CAAC;AACjC,aAAW,WAAW,gBAAgB;AACpC,QAAI;AACF,oBAAc,KAAK,IAAI,OAAO,SAAS,GAAG,CAAC;AAAA,IAC7C,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,aAAW,MAAM,eAAe;AAC9B,QAAI,GAAG,KAAK,IAAI,GAAG;AACjB,cAAQ,KAAK,UAAU,GAAG,MAAM,EAAE;AAAA,IACpC;AAAA,EACF;AAEA,aAAW,MAAM,uBAAuB;AACtC,QAAI,GAAG,KAAK,IAAI,GAAG;AACjB,cAAQ,KAAK,QAAQ,GAAG,MAAM,EAAE;AAAA,IAClC;AAAA,EACF;AAEA,MAAI,QAAQ,SAAS,GAAG;AACtB,WAAO,EAAE,OAAO,QAAQ,UAAU,QAAQ;AAAA,EAC5C;AAEA,QAAM,gBAA0B,CAAC;AACjC,aAAW,MAAM,iBAAiB;AAChC,QAAI,GAAG,KAAK,IAAI,GAAG;AACjB,oBAAc,KAAK,UAAU,GAAG,MAAM,EAAE;AAAA,IAC1C;AAAA,EACF;AAEA,MAAI,cAAc,UAAU,GAAG;AAC7B,WAAO,EAAE,OAAO,UAAU,UAAU,cAAc;AAAA,EACpD;AACA,MAAI,cAAc,WAAW,GAAG;AAC9B,WAAO,EAAE,OAAO,OAAO,UAAU,cAAc;AAAA,EACjD;AAEA,SAAO,EAAE,OAAO,QAAQ,UAAU,CAAC,EAAE;AACvC;","names":[]}

package/dist/{chunk-TK4UEOSK.js → chunk-HDDRVXX4.js}

@@ -1,7 +1,7 @@
 import {
   parseConflictPolicy,
   validateManifestRecords
-} from "./chunk-3JXBXXM2.js";
+} from "./chunk-G4IAEX6D.js";
 import {
   ExportManifestV1Schema
 } from "./chunk-WEHSQBFR.js";
@@ -11,12 +11,13 @@ import {
   prepareSafeArchiveRoot,
   readJsonFile,
   resolveSafeArchiveTarget,
-  toPosixRelPath
-} from "./chunk-AGZQD76C.js";
+  toPosixRelPath,
+  writeSafeArchiveTarget
+} from "./chunk-GCGJW34D.js";
 
 // src/transfer/import-md.ts
 import path from "path";
-import { mkdir, readFile, writeFile } from "fs/promises";
+import { readFile } from "fs/promises";
 async function importMarkdownBundle(opts) {
   const conflict = parseConflictPolicy(opts.conflict, "importMarkdownBundle");
   const fromAbs = path.resolve(opts.fromDir);
@@ -60,12 +61,11 @@ async function importMarkdownBundle(opts) {
         }
       }
     }
-    writes.push({ abs: dstAbs, content });
+    writes.push({ relPath: relPosix, content });
   }
   if (opts.dryRun) return { written: 0, skipped };
   for (const w of writes) {
-    await mkdir(path.dirname(w.abs), { recursive: true });
-    await writeFile(w.abs, w.content);
+    await writeSafeArchiveTarget(targetRoot, w.relPath, w.content);
   }
   return { written: writes.length, skipped };
 }
@@ -73,4 +73,4 @@ async function importMarkdownBundle(opts) {
 export {
   importMarkdownBundle
 };
-//# sourceMappingURL=chunk-TK4UEOSK.js.map
+//# sourceMappingURL=chunk-HDDRVXX4.js.map

package/dist/chunk-HDDRVXX4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/transfer/import-md.ts"],"sourcesContent":["import path from \"node:path\";\nimport { readFile } from \"node:fs/promises\";\nimport {\n  fileExists,\n  listFilesRecursive,\n  prepareSafeArchiveRoot,\n  readJsonFile,\n  resolveSafeArchiveTarget,\n  toPosixRelPath,\n  writeSafeArchiveTarget,\n} from \"./fs-utils.js\";\nimport { parseConflictPolicy, type ConflictPolicy } from \"./conflict-policy.js\";\nimport { validateManifestRecords } from \"./integrity.js\";\nimport { ExportManifestV1Schema } from \"./types.js\";\n\nexport type { ConflictPolicy };\n\nexport interface ImportMdOptions {\n  targetMemoryDir: string;\n  fromDir: string;\n  conflict?: ConflictPolicy;\n  dryRun?: boolean;\n}\n\nexport async function importMarkdownBundle(opts: ImportMdOptions): Promise<{ written: number; skipped: number }> {\n  const conflict = parseConflictPolicy(opts.conflict, \"importMarkdownBundle\");\n  const fromAbs = path.resolve(opts.fromDir);\n  const targetAbs = path.resolve(opts.targetMemoryDir);\n  const targetRoot = await prepareSafeArchiveRoot(\n    targetAbs,\n    \"importMarkdownBundle\",\n    \"targetMemoryDir\",\n  );\n  const manifest = ExportManifestV1Schema.parse(\n    await readJsonFile(path.join(fromAbs, \"manifest.json\")),\n  );\n\n  const filesAbs = await listFilesRecursive(fromAbs);\n  const records: Array<{ path: string; content: Uint8Array }> = [];\n  for (const abs of filesAbs) {\n    const relPosix = toPosixRelPath(abs, fromAbs);\n    if (relPosix === \"manifest.json\") continue;\n    records.push({ path: relPosix, content: await readFile(abs) });\n  }\n  validateManifestRecords(manifest, records, \"importMarkdownBundle\");\n\n  const writes: Array<{ relPath: string; content: Uint8Array }> = [];\n  let skipped = 0;\n\n  for (const record of records) {\n    const relPosix = record.path;\n    const dstAbs = await resolveSafeArchiveTarget(targetRoot, relPosix);\n    const content = record.content;\n\n    const exists = await fileExists(dstAbs);\n    if (exists) {\n      if (conflict === \"skip\") {\n        skipped += 1;\n        continue;\n      }\n      if (conflict === \"dedupe\") {\n        try {\n          const existing = await readFile(dstAbs);\n          if (Buffer.compare(existing, Buffer.from(content)) === 0) {\n            skipped += 1;\n            continue;\n          }\n        } catch {\n          // fall through to overwrite\n        }\n      }\n    }\n\n    writes.push({ relPath: relPosix, content });\n  }\n\n  if (opts.dryRun) return { written: 0, skipped };\n\n  for (const w of writes) {\n    await writeSafeArchiveTarget(targetRoot, w.relPath, w.content);\n  }\n\n  return { written: writes.length, skipped };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA,OAAO,UAAU;AACjB,SAAS,gBAAgB;AAuBzB,eAAsB,qBAAqB,MAAsE;AAC/G,QAAM,WAAW,oBAAoB,KAAK,UAAU,sBAAsB;AAC1E,QAAM,UAAU,KAAK,QAAQ,KAAK,OAAO;AACzC,QAAM,YAAY,KAAK,QAAQ,KAAK,eAAe;AACnD,QAAM,aAAa,MAAM;AAAA,IACvB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,WAAW,uBAAuB;AAAA,IACtC,MAAM,aAAa,KAAK,KAAK,SAAS,eAAe,CAAC;AAAA,EACxD;AAEA,QAAM,WAAW,MAAM,mBAAmB,OAAO;AACjD,QAAM,UAAwD,CAAC;AAC/D,aAAW,OAAO,UAAU;AAC1B,UAAM,WAAW,eAAe,KAAK,OAAO;AAC5C,QAAI,aAAa,gBAAiB;AAClC,YAAQ,KAAK,EAAE,MAAM,UAAU,SAAS,MAAM,SAAS,GAAG,EAAE,CAAC;AAAA,EAC/D;AACA,0BAAwB,UAAU,SAAS,sBAAsB;AAEjE,QAAM,SAA0D,CAAC;AACjE,MAAI,UAAU;AAEd,aAAW,UAAU,SAAS;AAC5B,UAAM,WAAW,OAAO;AACxB,UAAM,SAAS,MAAM,yBAAyB,YAAY,QAAQ;AAClE,UAAM,UAAU,OAAO;AAEvB,UAAM,SAAS,MAAM,WAAW,MAAM;AACtC,QAAI,QAAQ;AACV,UAAI,aAAa,QAAQ;AACvB,mBAAW;AACX;AAAA,MACF;AACA,UAAI,aAAa,UAAU;AACzB,YAAI;AACF,gBAAM,WAAW,MAAM,SAAS,MAAM;AACtC,cAAI,OAAO,QAAQ,UAAU,OAAO,KAAK,OAAO,CAAC,MAAM,GAAG;AACxD,uBAAW;AACX;AAAA,UACF;AAAA,QACF,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF;AAEA,WAAO,KAAK,EAAE,SAAS,UAAU,QAAQ,CAAC;AAAA,EAC5C;AAEA,MAAI,KAAK,OAAQ,QAAO,EAAE,SAAS,GAAG,QAAQ;AAE9C,aAAW,KAAK,QAAQ;AACtB,UAAM,uBAAuB,YAAY,EAAE,SAAS,EAAE,OAAO;AAAA,EAC/D;AAEA,SAAO,EAAE,SAAS,OAAO,QAAQ,QAAQ;AAC3C;","names":[]}

package/dist/{chunk-LLQ2LLWF.js → chunk-HENLZHIT.js}

@@ -4,6 +4,7 @@ import {
 
 // src/conversation-index/indexer.ts
 import { lstat, mkdir, writeFile } from "fs/promises";
+import { createHash } from "crypto";
 import path from "path";
 var MAX_PATH_COMPONENT_LENGTH = 200;
 function sanitizePathComponent(value, fallback, opts = {}) {
@@ -16,19 +17,28 @@ function sanitizePathComponent(value, fallback, opts = {}) {
   return sanitized;
 }
 function sanitizeSessionKey(sessionKey) {
-  return sanitizePathComponent(sessionKey, "unknown-session", { lowercase: true });
+  const raw = typeof sessionKey === "string" && sessionKey.trim().length > 0 ? sessionKey.trim() : "";
+  const safe = sanitizePathComponent(raw, "unknown-session", { lowercase: true });
+  if (!raw) return safe;
+  const suffix = `-${createHash("sha256").update(raw).digest("hex").slice(0, 12)}`;
+  return `${safe.slice(0, MAX_PATH_COMPONENT_LENGTH - suffix.length)}${suffix}`;
 }
 function sanitizeChunkId(id) {
   return sanitizePathComponent(id, "chunk");
 }
 function datePathComponent(startTs) {
-  if (typeof startTs !== "string" || !/^\d{4}-\d{2}-\d{2}T/.test(startTs)) {
+  const match = typeof startTs === "string" ? /^(\d{4})-(\d{2})-(\d{2})T/.exec(startTs) : null;
+  if (!match) {
     throw new Error("invalid conversation chunk start timestamp");
   }
   const date = new Date(startTs);
   if (!Number.isFinite(date.getTime())) {
     throw new Error("invalid conversation chunk start timestamp");
   }
+  const [, year, month, day] = match;
+  if (date.getUTCFullYear() !== Number(year) || date.getUTCMonth() + 1 !== Number(month) || date.getUTCDate() !== Number(day)) {
+    throw new Error("invalid conversation chunk start timestamp");
+  }
   return date.toISOString().slice(0, 10);
 }
 function resolveInsideRoot(rootDir, candidate) {
@@ -114,12 +124,12 @@ endTs: ${c.endTs}
   }
   return written;
 }
-async function upsertConversationChunksFailOpen(adapter, chunks) {
+async function upsertConversationChunksFailOpen(adapter, chunks, options = {}) {
   if (!adapter) {
     return { upserted: 0, skipped: true, reason: "adapter-unavailable" };
   }
   try {
-    const upserted = await adapter.upsertChunks(chunks);
+    const upserted = await adapter.upsertChunks(chunks, options);
     return { upserted, skipped: false };
   } catch (err) {
     log.debug(`conversation index FAISS upsert failed (fail-open): ${err}`);
@@ -145,4 +155,4 @@ export {
   upsertConversationChunksFailOpen,
   rebuildConversationChunksFailOpen
 };
-//# sourceMappingURL=chunk-LLQ2LLWF.js.map
+//# sourceMappingURL=chunk-HENLZHIT.js.map

package/dist/chunk-HENLZHIT.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/conversation-index/indexer.ts"],"sourcesContent":["import { lstat, mkdir, writeFile } from \"node:fs/promises\";\nimport type { Stats } from \"node:fs\";\nimport { createHash } from \"node:crypto\";\nimport path from \"node:path\";\nimport { log } from \"../logger.js\";\nimport type { FaissConversationIndexAdapter } from \"./faiss-adapter.js\";\nimport type { ConversationChunk } from \"./chunker.js\";\n\nconst MAX_PATH_COMPONENT_LENGTH = 200;\n\nfunction sanitizePathComponent(\n  value: string,\n  fallback: string,\n  opts: { lowercase?: boolean } = {},\n): string {\n  const raw = typeof value === \"string\" && value.trim().length > 0\n    ? value.trim()\n    : fallback;\n  const normalized = opts.lowercase ? raw.toLowerCase() : raw;\n  const sanitized = normalized\n    .replace(/[^a-zA-Z0-9._-]+/g, \"_\")\n    .slice(0, MAX_PATH_COMPONENT_LENGTH);\n  if (!sanitized || sanitized === \".\" || sanitized === \"..\") {\n    return fallback;\n  }\n  return sanitized;\n}\n\nexport function sanitizeSessionKey(sessionKey: string): string {\n  const raw = typeof sessionKey === \"string\" && sessionKey.trim().length > 0\n    ? sessionKey.trim()\n    : \"\";\n  const safe = sanitizePathComponent(raw, \"unknown-session\", { lowercase: true });\n  if (!raw) return safe;\n  const suffix = `-${createHash(\"sha256\").update(raw).digest(\"hex\").slice(0, 12)}`;\n  return `${safe.slice(0, MAX_PATH_COMPONENT_LENGTH - suffix.length)}${suffix}`;\n}\n\nfunction sanitizeChunkId(id: string): string {\n  return sanitizePathComponent(id, \"chunk\");\n}\n\nfunction datePathComponent(startTs: string): string {\n  const match = typeof startTs === \"string\"\n    ? /^(\\d{4})-(\\d{2})-(\\d{2})T/.exec(startTs)\n    : null;\n  if (!match) {\n    throw new Error(\"invalid conversation chunk start timestamp\");\n  }\n  const date = new Date(startTs);\n  if (!Number.isFinite(date.getTime())) {\n    throw new Error(\"invalid conversation chunk start timestamp\");\n  }\n  const [, year, month, day] = match;\n  if (\n    date.getUTCFullYear() !== Number(year) ||\n    date.getUTCMonth() + 1 !== Number(month) ||\n    date.getUTCDate() !== Number(day)\n  ) {\n    throw new Error(\"invalid conversation chunk start timestamp\");\n  }\n  return date.toISOString().slice(0, 10);\n}\n\nfunction resolveInsideRoot(rootDir: string, candidate: string): string {\n  const root = path.resolve(rootDir);\n  const resolved = path.resolve(candidate);\n  const rel = path.relative(root, resolved);\n  if (\n    rel === \"\" ||\n    (rel !== \"..\" && !rel.startsWith(`..${path.sep}`) && !path.isAbsolute(rel))\n  ) {\n    return resolved;\n  }\n  throw new Error(\"conversation chunk path escapes index root\");\n}\n\nasync function lstatIfExists(candidate: string): Promise<Stats | undefined> {\n  try {\n    return await lstat(candidate);\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === \"ENOENT\") return undefined;\n    throw err;\n  }\n}\n\nasync function rejectSymlinkIfExists(candidate: string): Promise<void> {\n  const stat = await lstatIfExists(candidate);\n  if (stat?.isSymbolicLink()) {\n    throw new Error(\"conversation chunk path contains symlink\");\n  }\n}\n\nasync function rejectExistingSymlinksInPath(baseDir: string, candidate: string): Promise<void> {\n  const base = path.resolve(baseDir);\n  const resolved = path.resolve(candidate);\n\n  let current = base;\n  while (current !== path.dirname(current)) {\n    const stat = await lstatIfExists(current);\n    if (stat) {\n      if (stat.isSymbolicLink()) {\n        throw new Error(\"conversation chunk path contains symlink\");\n      }\n      break;\n    }\n    current = path.dirname(current);\n  }\n\n  const relative = path.relative(base, resolved);\n  if (relative === \"\") return;\n\n  current = base;\n  for (const part of relative.split(path.sep)) {\n    current = path.join(current, part);\n    const stat = await lstatIfExists(current);\n    if (!stat) return;\n    if (stat.isSymbolicLink()) {\n      throw new Error(\"conversation chunk path contains symlink\");\n    }\n  }\n}\n\nasync function rejectExistingSymlinkAncestors(\n  rootDir: string,\n  candidate: string,\n): Promise<void> {\n  const root = path.resolve(rootDir);\n  const resolved = resolveInsideRoot(root, candidate);\n  await rejectExistingSymlinksInPath(root, resolved);\n}\n\nexport async function writeConversationChunks(\n  rootDir: string,\n  chunks: ConversationChunk[],\n): Promise<string[]> {\n  const written: string[] = [];\n  const root = path.resolve(rootDir);\n  await rejectExistingSymlinksInPath(root, root);\n  await mkdir(root, { recursive: true });\n  await rejectExistingSymlinksInPath(root, root);\n\n  for (const c of chunks) {\n    const safe = sanitizeSessionKey(c.sessionKey);\n    const date = datePathComponent(c.startTs);\n    const dir = resolveInsideRoot(root, path.join(root, safe, date));\n    await rejectExistingSymlinkAncestors(root, dir);\n    await mkdir(dir, { recursive: true });\n    await rejectExistingSymlinkAncestors(root, dir);\n    const fp = resolveInsideRoot(root, path.join(dir, `${sanitizeChunkId(c.id)}.md`));\n    await rejectExistingSymlinkAncestors(root, path.dirname(fp));\n    await rejectSymlinkIfExists(fp);\n    const content =\n      `---\\n` +\n      `kind: conversation_chunk\\n` +\n      `sessionKey: ${c.sessionKey}\\n` +\n      `startTs: ${c.startTs}\\n` +\n      `endTs: ${c.endTs}\\n` +\n      `---\\n\\n` +\n      c.text +\n      \"\\n\";\n    await writeFile(fp, content, \"utf-8\");\n    written.push(fp);\n  }\n  return written;\n}\n\nexport interface ConversationChunkUpsertResult {\n  upserted: number;\n  skipped: boolean;\n  reason?: \"adapter-unavailable\" | \"adapter-error\";\n}\n\nexport interface ConversationChunkRebuildResult {\n  rebuilt: number;\n  skipped: boolean;\n  reason?: \"adapter-unavailable\" | \"adapter-error\";\n}\n\nexport async function upsertConversationChunksFailOpen(\n  adapter: FaissConversationIndexAdapter | undefined,\n  chunks: ConversationChunk[],\n  options: { retentionCutoffMs?: number } = {},\n): Promise<ConversationChunkUpsertResult> {\n  if (!adapter) {\n    return { upserted: 0, skipped: true, reason: \"adapter-unavailable\" };\n  }\n  try {\n    const upserted = await adapter.upsertChunks(chunks, options);\n    return { upserted, skipped: false };\n  } catch (err) {\n    log.debug(`conversation index FAISS upsert failed (fail-open): ${err}`);\n    return { upserted: 0, skipped: true, reason: \"adapter-error\" };\n  }\n}\n\nexport async function rebuildConversationChunksFailOpen(\n  adapter: FaissConversationIndexAdapter | undefined,\n  chunks: ConversationChunk[],\n): Promise<ConversationChunkRebuildResult> {\n  if (!adapter) {\n    return { rebuilt: 0, skipped: true, reason: \"adapter-unavailable\" };\n  }\n  try {\n    const rebuilt = await adapter.rebuildChunks(chunks);\n    return { rebuilt, skipped: false };\n  } catch (err) {\n    log.debug(`conversation index FAISS rebuild failed (fail-open): ${err}`);\n    return { rebuilt: 0, skipped: true, reason: \"adapter-error\" };\n  }\n}\n"],"mappings":";;;;;AAAA,SAAS,OAAO,OAAO,iBAAiB;AAExC,SAAS,kBAAkB;AAC3B,OAAO,UAAU;AAKjB,IAAM,4BAA4B;AAElC,SAAS,sBACP,OACA,UACA,OAAgC,CAAC,GACzB;AACR,QAAM,MAAM,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,IAC3D,MAAM,KAAK,IACX;AACJ,QAAM,aAAa,KAAK,YAAY,IAAI,YAAY,IAAI;AACxD,QAAM,YAAY,WACf,QAAQ,qBAAqB,GAAG,EAChC,MAAM,GAAG,yBAAyB;AACrC,MAAI,CAAC,aAAa,cAAc,OAAO,cAAc,MAAM;AACzD,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,mBAAmB,YAA4B;AAC7D,QAAM,MAAM,OAAO,eAAe,YAAY,WAAW,KAAK,EAAE,SAAS,IACrE,WAAW,KAAK,IAChB;AACJ,QAAM,OAAO,sBAAsB,KAAK,mBAAmB,EAAE,WAAW,KAAK,CAAC;AAC9E,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,SAAS,IAAI,WAAW,QAAQ,EAAE,OAAO,GAAG,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE,CAAC;AAC9E,SAAO,GAAG,KAAK,MAAM,GAAG,4BAA4B,OAAO,MAAM,CAAC,GAAG,MAAM;AAC7E;AAEA,SAAS,gBAAgB,IAAoB;AAC3C,SAAO,sBAAsB,IAAI,OAAO;AAC1C;AAEA,SAAS,kBAAkB,SAAyB;AAClD,QAAM,QAAQ,OAAO,YAAY,WAC7B,4BAA4B,KAAK,OAAO,IACxC;AACJ,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AACA,QAAM,OAAO,IAAI,KAAK,OAAO;AAC7B,MAAI,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,GAAG;AACpC,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AACA,QAAM,CAAC,EAAE,MAAM,OAAO,GAAG,IAAI;AAC7B,MACE,KAAK,eAAe,MAAM,OAAO,IAAI,KACrC,KAAK,YAAY,IAAI,MAAM,OAAO,KAAK,KACvC,KAAK,WAAW,MAAM,OAAO,GAAG,GAChC;AACA,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AACA,SAAO,KAAK,YAAY,EAAE,MAAM,GAAG,EAAE;AACvC;AAEA,SAAS,kBAAkB,SAAiB,WAA2B;AACrE,QAAM,OAAO,KAAK,QAAQ,OAAO;AACjC,QAAM,WAAW,KAAK,QAAQ,SAAS;AACvC,QAAM,MAAM,KAAK,SAAS,MAAM,QAAQ;AACxC,MACE,QAAQ,MACP,QAAQ,QAAQ,CAAC,IAAI,WAAW,KAAK,KAAK,GAAG,EAAE,KAAK,CAAC,KAAK,WAAW,GAAG,GACzE;AACA,WAAO;AAAA,EACT;AACA,QAAM,IAAI,MAAM,4CAA4C;AAC9D;AAEA,eAAe,cAAc,WAA+C;AAC1E,MAAI;AACF,WAAO,MAAM,MAAM,SAAS;AAAA,EAC9B,SAAS,KAAK;AACZ,QAAK,IAA8B,SAAS,SAAU,QAAO;AAC7D,UAAM;AAAA,EACR;AACF;AAEA,eAAe,sBAAsB,WAAkC;AACrE,QAAM,OAAO,MAAM,cAAc,SAAS;AAC1C,MAAI,MAAM,eAAe,GAAG;AAC1B,UAAM,IAAI,MAAM,0CAA0C;AAAA,EAC5D;AACF;AAEA,eAAe,6BAA6B,SAAiB,WAAkC;AAC7F,QAAM,OAAO,KAAK,QAAQ,OAAO;AACjC,QAAM,WAAW,KAAK,QAAQ,SAAS;AAEvC,MAAI,UAAU;AACd,SAAO,YAAY,KAAK,QAAQ,OAAO,GAAG;AACxC,UAAM,OAAO,MAAM,cAAc,OAAO;AACxC,QAAI,MAAM;AACR,UAAI,KAAK,eAAe,GAAG;AACzB,cAAM,IAAI,MAAM,0CAA0C;AAAA,MAC5D;AACA;AAAA,IACF;AACA,cAAU,KAAK,QAAQ,OAAO;AAAA,EAChC;AAEA,QAAM,WAAW,KAAK,SAAS,MAAM,QAAQ;AAC7C,MAAI,aAAa,GAAI;AAErB,YAAU;AACV,aAAW,QAAQ,SAAS,MAAM,KAAK,GAAG,GAAG;AAC3C,cAAU,KAAK,KAAK,SAAS,IAAI;AACjC,UAAM,OAAO,MAAM,cAAc,OAAO;AACxC,QAAI,CAAC,KAAM;AACX,QAAI,KAAK,eAAe,GAAG;AACzB,YAAM,IAAI,MAAM,0CAA0C;AAAA,IAC5D;AAAA,EACF;AACF;AAEA,eAAe,+BACb,SACA,WACe;AACf,QAAM,OAAO,KAAK,QAAQ,OAAO;AACjC,QAAM,WAAW,kBAAkB,MAAM,SAAS;AAClD,QAAM,6BAA6B,MAAM,QAAQ;AACnD;AAEA,eAAsB,wBACpB,SACA,QACmB;AACnB,QAAM,UAAoB,CAAC;AAC3B,QAAM,OAAO,KAAK,QAAQ,OAAO;AACjC,QAAM,6BAA6B,MAAM,IAAI;AAC7C,QAAM,MAAM,MAAM,EAAE,WAAW,KAAK,CAAC;AACrC,QAAM,6BAA6B,MAAM,IAAI;AAE7C,aAAW,KAAK,QAAQ;AACtB,UAAM,OAAO,mBAAmB,EAAE,UAAU;AAC5C,UAAM,OAAO,kBAAkB,EAAE,OAAO;AACxC,UAAM,MAAM,kBAAkB,MAAM,KAAK,KAAK,MAAM,MAAM,IAAI,CAAC;AAC/D,UAAM,+BAA+B,MAAM,GAAG;AAC9C,UAAM,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AACpC,UAAM,+BAA+B,MAAM,GAAG;AAC9C,UAAM,KAAK,kBAAkB,MAAM,KAAK,KAAK,KAAK,GAAG,gBAAgB,EAAE,EAAE,CAAC,KAAK,CAAC;AAChF,UAAM,+BAA+B,MAAM,KAAK,QAAQ,EAAE,CAAC;AAC3D,UAAM,sBAAsB,EAAE;AAC9B,UAAM,UACJ;AAAA;AAAA,cAEe,EAAE,UAAU;AAAA,WACf,EAAE,OAAO;AAAA,SACX,EAAE,KAAK;AAAA;AAAA;AAAA,IAEjB,EAAE,OACF;AACF,UAAM,UAAU,IAAI,SAAS,OAAO;AACpC,YAAQ,KAAK,EAAE;AAAA,EACjB;AACA,SAAO;AACT;AAcA,eAAsB,iCACpB,SACA,QACA,UAA0C,CAAC,GACH;AACxC,MAAI,CAAC,SAAS;AACZ,WAAO,EAAE,UAAU,GAAG,SAAS,MAAM,QAAQ,sBAAsB;AAAA,EACrE;AACA,MAAI;AACF,UAAM,WAAW,MAAM,QAAQ,aAAa,QAAQ,OAAO;AAC3D,WAAO,EAAE,UAAU,SAAS,MAAM;AAAA,EACpC,SAAS,KAAK;AACZ,QAAI,MAAM,uDAAuD,GAAG,EAAE;AACtE,WAAO,EAAE,UAAU,GAAG,SAAS,MAAM,QAAQ,gBAAgB;AAAA,EAC/D;AACF;AAEA,eAAsB,kCACpB,SACA,QACyC;AACzC,MAAI,CAAC,SAAS;AACZ,WAAO,EAAE,SAAS,GAAG,SAAS,MAAM,QAAQ,sBAAsB;AAAA,EACpE;AACA,MAAI;AACF,UAAM,UAAU,MAAM,QAAQ,cAAc,MAAM;AAClD,WAAO,EAAE,SAAS,SAAS,MAAM;AAAA,EACnC,SAAS,KAAK;AACZ,QAAI,MAAM,wDAAwD,GAAG,EAAE;AACvE,WAAO,EAAE,SAAS,GAAG,SAAS,MAAM,QAAQ,gBAAgB;AAAA,EAC9D;AACF;","names":[]}

package/dist/{chunk-N2D6GXBM.js → chunk-HINSGUA7.js}

@@ -80,12 +80,7 @@ var WebSearchProvider = class {
   async enrich(entity) {
     if (!this.searchFn) return [];
     const query = `${entity.name} ${entity.type}`;
-    let snippets;
-    try {
-      snippets = await this.searchFn(query);
-    } catch {
-      return [];
-    }
+    const snippets = await this.searchFn(query);
     return snippets.filter((s) => typeof s === "string" && s.trim().length > 0).map((snippet) => ({
       text: snippet.trim(),
       source: this.id,
@@ -98,11 +93,12 @@ var WebSearchProvider = class {
 };
 
 // src/enrichment/pipeline.ts
-function isRateLimited(provider, config, buckets) {
+var rateBuckets = /* @__PURE__ */ new Map();
+function isRateLimited(provider, config) {
   const providerCfg = config.providers.find((p) => p.id === provider.id);
   if (!providerCfg?.rateLimit) return false;
   const now = Date.now();
-  let bucket = buckets.get(provider.id);
+  let bucket = rateBuckets.get(provider.id);
   if (!bucket) {
     bucket = {
       minuteCount: 0,
@@ -110,7 +106,7 @@ function isRateLimited(provider, config, buckets) {
       dayCount: 0,
       dayReset: now + 864e5
     };
-    buckets.set(provider.id, bucket);
+    rateBuckets.set(provider.id, bucket);
   }
   if (now >= bucket.minuteReset) {
     bucket.minuteCount = 0;
@@ -123,8 +119,8 @@ function isRateLimited(provider, config, buckets) {
   const { maxPerMinute, maxPerDay } = providerCfg.rateLimit;
   return bucket.minuteCount >= maxPerMinute || bucket.dayCount >= maxPerDay;
 }
-function recordCall(providerId, buckets) {
-  const bucket = buckets.get(providerId);
+function recordCall(providerId) {
+  const bucket = rateBuckets.get(providerId);
   if (bucket) {
     bucket.minuteCount += 1;
     bucket.dayCount += 1;
@@ -133,11 +129,16 @@ function recordCall(providerId, buckets) {
 async function runEnrichmentPipeline(entities, registry, config, log) {
   if (!config.enabled) return [];
   if (entities.length === 0) return [];
-  const rateBuckets = /* @__PURE__ */ new Map();
   const results = [];
   for (const entity of entities) {
     const providers = registry.getForImportance(entity.importanceLevel, config);
+    const maxCandidates = config.maxCandidatesPerEntity;
+    const hasPositiveCandidateBudget = maxCandidates > 0;
+    let remainingCandidateBudget = hasPositiveCandidateBudget ? maxCandidates : Number.POSITIVE_INFINITY;
     for (const provider of providers) {
+      if (hasPositiveCandidateBudget && remainingCandidateBudget <= 0) {
+        break;
+      }
       const start = Date.now();
       let available;
       try {
@@ -160,7 +161,7 @@ async function runEnrichmentPipeline(entities, registry, config, log) {
         });
         continue;
       }
-      if (isRateLimited(provider, config, rateBuckets)) {
+      if (isRateLimited(provider, config)) {
         log.debug?.(
           `enrichment: skipping provider ${provider.id} for ${entity.name} \u2014 rate limited`
         );
@@ -179,7 +180,7 @@ async function runEnrichmentPipeline(entities, registry, config, log) {
       try {
         candidates = await provider.enrich(entity);
       } catch (err) {
-        recordCall(provider.id, rateBuckets);
+        recordCall(provider.id);
         log.error?.(
           `enrichment: provider ${provider.id} failed for ${entity.name}: ${err instanceof Error ? err.message : String(err)}`
         );
@@ -194,16 +195,16 @@ async function runEnrichmentPipeline(entities, registry, config, log) {
         });
         continue;
       }
-      recordCall(provider.id, rateBuckets);
+      recordCall(provider.id);
       for (const candidate of candidates) {
         candidate.source = provider.id;
       }
-      const maxCandidates = config.maxCandidatesPerEntity;
       let accepted;
       if (maxCandidates === 0) {
         accepted = [];
-      } else if (maxCandidates > 0 && candidates.length > maxCandidates) {
-        accepted = candidates.slice(0, maxCandidates);
+      } else if (hasPositiveCandidateBudget) {
+        accepted = candidates.slice(0, remainingCandidateBudget);
+        remainingCandidateBudget -= accepted.length;
       } else {
         accepted = candidates;
       }
@@ -238,6 +239,10 @@ async function appendAuditEntry(auditDir, entry) {
 async function readAuditLog(auditDir, since) {
   const filePath = auditFilePath(auditDir);
   if (!existsSync(filePath)) return [];
+  const sinceMs = since === void 0 ? void 0 : Date.parse(since);
+  if (since !== void 0 && !Number.isFinite(sinceMs)) {
+    throw new Error(`Invalid enrichment audit since timestamp: ${since}`);
+  }
   const raw = await readFile(filePath, "utf-8");
   const entries = [];
   for (const line of raw.split("\n")) {
@@ -247,7 +252,10 @@ async function readAuditLog(auditDir, since) {
       const parsed = JSON.parse(trimmed);
       if (typeof parsed === "object" && parsed !== null && "timestamp" in parsed && "entityName" in parsed) {
         const entry = parsed;
-        if (since && entry.timestamp < since) continue;
+        if (typeof entry.timestamp !== "string") continue;
+        const entryMs = Date.parse(entry.timestamp);
+        if (!Number.isFinite(entryMs)) continue;
+        if (sinceMs !== void 0 && entryMs < sinceMs) continue;
         entries.push(entry);
       }
     } catch {
@@ -264,4 +272,4 @@ export {
   appendAuditEntry,
   readAuditLog
 };
-//# sourceMappingURL=chunk-N2D6GXBM.js.map
+//# sourceMappingURL=chunk-HINSGUA7.js.map

package/dist/chunk-HINSGUA7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/enrichment/types.ts","../src/enrichment/provider-registry.ts","../src/enrichment/web-search-provider.ts","../src/enrichment/pipeline.ts","../src/enrichment/audit.ts"],"sourcesContent":["/**\n * Enrichment pipeline types (issue #365).\n *\n * Defines the provider interface, candidate shape, pipeline config,\n * and result types for the external enrichment subsystem.\n */\n\nimport type { ImportanceLevel, MemoryCategory } from \"../types.js\";\n\n// ---------------------------------------------------------------------------\n// Provider config & interface\n// ---------------------------------------------------------------------------\n\nexport type EnrichmentCostTier = \"free\" | \"cheap\" | \"expensive\";\n\nexport interface EnrichmentProviderConfig {\n  id: string;\n  enabled: boolean;\n  costTier: EnrichmentCostTier;\n  rateLimit?: { maxPerMinute: number; maxPerDay: number };\n}\n\nexport interface EnrichmentCandidate {\n  text: string;\n  source: string;\n  sourceUrl?: string;\n  confidence: number;\n  category: MemoryCategory;\n  tags?: string[];\n}\n\nexport interface EnrichmentProvider {\n  readonly id: string;\n  readonly costTier: EnrichmentCostTier;\n  enrich(entity: EntityEnrichmentInput): Promise<EnrichmentCandidate[]>;\n  isAvailable(): Promise<boolean>;\n}\n\n// ---------------------------------------------------------------------------\n// Entity enrichment input\n// ---------------------------------------------------------------------------\n\nexport interface EntityEnrichmentInput {\n  name: string;\n  type: string;\n  knownFacts: string[];\n  importanceLevel: ImportanceLevel;\n}\n\n// ---------------------------------------------------------------------------\n// Pipeline result\n// ---------------------------------------------------------------------------\n\nexport interface EnrichmentResult {\n  entityName: string;\n  provider: string;\n  candidatesFound: number;\n  candidatesAccepted: number;\n  candidatesRejected: number;\n  acceptedCandidates: EnrichmentCandidate[];\n  elapsed: number;\n}\n\n// ---------------------------------------------------------------------------\n// Pipeline config\n// ---------------------------------------------------------------------------\n\nexport interface EnrichmentPipelineConfig {\n  enabled: boolean;\n  providers: EnrichmentProviderConfig[];\n  importanceThresholds: {\n    critical: string[];\n    high: string[];\n    normal: string[];\n    low: string[];\n  };\n  maxCandidatesPerEntity: number;\n  autoEnrichOnCreate: boolean;\n  scheduleIntervalMs: number;\n}\n\n/**\n * Build a default (disabled) pipeline config. Every consumer that needs a\n * config object should call this rather than duplicating the defaults.\n */\nexport function defaultEnrichmentPipelineConfig(): EnrichmentPipelineConfig {\n  return {\n    enabled: false,\n    providers: [],\n    importanceThresholds: {\n      critical: [],\n      high: [],\n      normal: [],\n      low: [],\n    },\n    maxCandidatesPerEntity: 20,\n    autoEnrichOnCreate: false,\n    scheduleIntervalMs: 3_600_000,\n  };\n}\n","/**\n * Enrichment provider registry (issue #365).\n *\n * Central registry for enrichment providers. Providers register themselves\n * at startup; the pipeline queries the registry to determine which providers\n * to run for a given importance tier.\n */\n\nimport type { ImportanceLevel } from \"../types.js\";\nimport type {\n  EnrichmentPipelineConfig,\n  EnrichmentProvider,\n} from \"./types.js\";\n\nexport class EnrichmentProviderRegistry {\n  private readonly providers = new Map<string, EnrichmentProvider>();\n\n  /** Register a provider. Overwrites any existing provider with the same id. */\n  register(provider: EnrichmentProvider): void {\n    this.providers.set(provider.id, provider);\n  }\n\n  /** Look up a single provider by id. */\n  get(id: string): EnrichmentProvider | undefined {\n    return this.providers.get(id);\n  }\n\n  /**\n   * Return all registered providers whose id appears in the config's\n   * `providers` list with `enabled: true`.\n   */\n  listEnabled(config: EnrichmentPipelineConfig): EnrichmentProvider[] {\n    const enabledIds = new Set(\n      config.providers\n        .filter((p) => p.enabled)\n        .map((p) => p.id),\n    );\n    const result: EnrichmentProvider[] = [];\n    for (const [id, provider] of this.providers.entries()) {\n      if (enabledIds.has(id)) {\n        result.push(provider);\n      }\n    }\n    return result;\n  }\n\n  /**\n   * Return providers that should run for a given importance level.\n   * Providers are resolved from `config.importanceThresholds[level]` and\n   * filtered to only those that are both registered and enabled.\n   */\n  getForImportance(\n    level: ImportanceLevel,\n    config: EnrichmentPipelineConfig,\n  ): EnrichmentProvider[] {\n    // \"trivial\" entities never get enrichment providers\n    if (level === \"trivial\") return [];\n\n    const thresholds = config.importanceThresholds;\n    const providerIds: string[] =\n      level === \"critical\"\n        ? thresholds.critical\n        : level === \"high\"\n          ? thresholds.high\n          : level === \"normal\"\n            ? thresholds.normal\n            : thresholds.low;\n\n    const enabledIds = new Set(\n      config.providers\n        .filter((p) => p.enabled)\n        .map((p) => p.id),\n    );\n\n    const result: EnrichmentProvider[] = [];\n    for (const id of providerIds) {\n      if (!enabledIds.has(id)) continue;\n      const provider = this.providers.get(id);\n      if (provider) {\n        result.push(provider);\n      }\n    }\n    return result;\n  }\n}\n","/**\n * Web search enrichment provider stub (issue #365).\n *\n * A basic provider backed by web search. Since this is opt-in and we do not\n * want to hard-code an API key, the provider accepts an optional `searchFn`\n * injection point. When no search function is configured it returns empty\n * results, making it safe to register unconditionally.\n */\n\nimport type {\n  EnrichmentCandidate,\n  EnrichmentCostTier,\n  EnrichmentProvider,\n  EntityEnrichmentInput,\n} from \"./types.js\";\n\nexport type WebSearchFn = (query: string) => Promise<string[]>;\n\nexport interface WebSearchProviderOptions {\n  /**\n   * Injected search function. Each returned string is treated as a raw\n   * snippet. When `undefined` the provider returns empty results.\n   */\n  searchFn?: WebSearchFn;\n}\n\nexport class WebSearchProvider implements EnrichmentProvider {\n  readonly id = \"web-search\";\n  readonly costTier: EnrichmentCostTier = \"cheap\";\n\n  private readonly searchFn: WebSearchFn | undefined;\n\n  constructor(options: WebSearchProviderOptions = {}) {\n    this.searchFn = options.searchFn;\n  }\n\n  async isAvailable(): Promise<boolean> {\n    return this.searchFn !== undefined;\n  }\n\n  async enrich(entity: EntityEnrichmentInput): Promise<EnrichmentCandidate[]> {\n    if (!this.searchFn) return [];\n\n    const query = `${entity.name} ${entity.type}`;\n    const snippets = await this.searchFn(query);\n\n    return snippets\n      .filter((s) => typeof s === \"string\" && s.trim().length > 0)\n      .map((snippet) => ({\n        text: snippet.trim(),\n        source: this.id,\n        sourceUrl: undefined,\n        confidence: 0.5,\n        category: \"fact\" as const,\n        tags: [\"web-search\"],\n      }));\n  }\n}\n","/**\n * Enrichment pipeline orchestrator (issue #365).\n *\n * For each entity, determines the importance tier, resolves the providers\n * to run, executes them in sequence (respecting rate limits), tags\n * candidates, and caps at `maxCandidatesPerEntity`.\n *\n * Accepted candidates are returned in each `EnrichmentResult` via the\n * `acceptedCandidates` field so that callers can persist them.\n */\n\nimport type { LoggerBackend } from \"../logger.js\";\nimport type { EnrichmentProviderRegistry } from \"./provider-registry.js\";\nimport type {\n  EnrichmentCandidate,\n  EnrichmentPipelineConfig,\n  EnrichmentProvider,\n  EnrichmentResult,\n  EntityEnrichmentInput,\n} from \"./types.js\";\n\n// ---------------------------------------------------------------------------\n// Rate-limit tracking\n// ---------------------------------------------------------------------------\n\ninterface RateLimitBucket {\n  minuteCount: number;\n  minuteReset: number;\n  dayCount: number;\n  dayReset: number;\n}\n\nconst rateBuckets = new Map<string, RateLimitBucket>();\n\nfunction isRateLimited(\n  provider: EnrichmentProvider,\n  config: EnrichmentPipelineConfig,\n): boolean {\n  const providerCfg = config.providers.find((p) => p.id === provider.id);\n  if (!providerCfg?.rateLimit) return false;\n\n  const now = Date.now();\n  let bucket = rateBuckets.get(provider.id);\n  if (!bucket) {\n    bucket = {\n      minuteCount: 0,\n      minuteReset: now + 60_000,\n      dayCount: 0,\n      dayReset: now + 86_400_000,\n    };\n    rateBuckets.set(provider.id, bucket);\n  }\n\n  // Reset windows if expired\n  if (now >= bucket.minuteReset) {\n    bucket.minuteCount = 0;\n    bucket.minuteReset = now + 60_000;\n  }\n  if (now >= bucket.dayReset) {\n    bucket.dayCount = 0;\n    bucket.dayReset = now + 86_400_000;\n  }\n\n  const { maxPerMinute, maxPerDay } = providerCfg.rateLimit;\n  return bucket.minuteCount >= maxPerMinute || bucket.dayCount >= maxPerDay;\n}\n\nfunction recordCall(\n  providerId: string,\n): void {\n  const bucket = rateBuckets.get(providerId);\n  if (bucket) {\n    bucket.minuteCount += 1;\n    bucket.dayCount += 1;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Pipeline\n// ---------------------------------------------------------------------------\n\nexport async function runEnrichmentPipeline(\n  entities: EntityEnrichmentInput[],\n  registry: EnrichmentProviderRegistry,\n  config: EnrichmentPipelineConfig,\n  log: LoggerBackend,\n): Promise<EnrichmentResult[]> {\n  if (!config.enabled) return [];\n  if (entities.length === 0) return [];\n\n  const results: EnrichmentResult[] = [];\n\n  for (const entity of entities) {\n    const providers = registry.getForImportance(entity.importanceLevel, config);\n    const maxCandidates = config.maxCandidatesPerEntity;\n    const hasPositiveCandidateBudget = maxCandidates > 0;\n    let remainingCandidateBudget = hasPositiveCandidateBudget\n      ? maxCandidates\n      : Number.POSITIVE_INFINITY;\n\n    for (const provider of providers) {\n      if (hasPositiveCandidateBudget && remainingCandidateBudget <= 0) {\n        break;\n      }\n\n      const start = Date.now();\n\n      // Check availability\n      let available: boolean;\n      try {\n        available = await provider.isAvailable();\n      } catch {\n        available = false;\n      }\n\n      if (!available) {\n        log.debug?.(\n          `enrichment: skipping provider ${provider.id} for ${entity.name} — unavailable`,\n        );\n        results.push({\n          entityName: entity.name,\n          provider: provider.id,\n          candidatesFound: 0,\n          candidatesAccepted: 0,\n          candidatesRejected: 0,\n          acceptedCandidates: [],\n          elapsed: Date.now() - start,\n        });\n        continue;\n      }\n\n      // Check rate limit\n      if (isRateLimited(provider, config)) {\n        log.debug?.(\n          `enrichment: skipping provider ${provider.id} for ${entity.name} — rate limited`,\n        );\n        results.push({\n          entityName: entity.name,\n          provider: provider.id,\n          candidatesFound: 0,\n          candidatesAccepted: 0,\n          candidatesRejected: 0,\n          acceptedCandidates: [],\n          elapsed: Date.now() - start,\n        });\n        continue;\n      }\n\n      // Run provider.\n      // Count every attempt toward rate-limit buckets — including failures —\n      // because the provider may have consumed external quota before throwing\n      // (PR #425 review finding 2).\n      let candidates: EnrichmentCandidate[];\n      try {\n        candidates = await provider.enrich(entity);\n      } catch (err) {\n        recordCall(provider.id);\n        log.error?.(\n          `enrichment: provider ${provider.id} failed for ${entity.name}: ${err instanceof Error ? err.message : String(err)}`,\n        );\n        results.push({\n          entityName: entity.name,\n          provider: provider.id,\n          candidatesFound: 0,\n          candidatesAccepted: 0,\n          candidatesRejected: 0,\n          acceptedCandidates: [],\n          elapsed: Date.now() - start,\n        });\n        continue;\n      }\n      recordCall(provider.id);\n\n      // Tag each candidate with provider id\n      for (const candidate of candidates) {\n        candidate.source = provider.id;\n      }\n\n      // Cap at maxCandidatesPerEntity across all providers for this entity.\n      // 0 means \"accept none\"; undefined/negative means \"no cap\".\n      let accepted: EnrichmentCandidate[];\n      if (maxCandidates === 0) {\n        accepted = [];\n      } else if (hasPositiveCandidateBudget) {\n        accepted = candidates.slice(0, remainingCandidateBudget);\n        remainingCandidateBudget -= accepted.length;\n      } else {\n        accepted = candidates;\n      }\n      const rejected = candidates.length - accepted.length;\n\n      results.push({\n        entityName: entity.name,\n        provider: provider.id,\n        candidatesFound: candidates.length,\n        candidatesAccepted: accepted.length,\n        candidatesRejected: rejected,\n        acceptedCandidates: accepted,\n        elapsed: Date.now() - start,\n      });\n    }\n  }\n\n  return results;\n}\n","/**\n * Enrichment audit trail (issue #365).\n *\n * Append-only JSONL log for every enrichment candidate that was evaluated.\n * Each entry records whether the candidate was accepted or rejected, the\n * provider that produced it, and an optional reason string.\n */\n\nimport { mkdir, readFile, appendFile } from \"node:fs/promises\";\nimport { existsSync } from \"node:fs\";\nimport path from \"node:path\";\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\nexport interface EnrichmentAuditEntry {\n  timestamp: string;\n  entityName: string;\n  provider: string;\n  candidateText: string;\n  sourceUrl?: string;\n  accepted: boolean;\n  reason?: string;\n}\n\n// ---------------------------------------------------------------------------\n// File helpers\n// ---------------------------------------------------------------------------\n\nconst AUDIT_FILENAME = \"enrichment-audit.jsonl\";\n\nfunction auditFilePath(auditDir: string): string {\n  return path.join(auditDir, AUDIT_FILENAME);\n}\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/**\n * Append a single audit entry to the JSONL log. Creates the audit directory\n * and file if they do not exist.\n */\nexport async function appendAuditEntry(\n  auditDir: string,\n  entry: EnrichmentAuditEntry,\n): Promise<void> {\n  await mkdir(auditDir, { recursive: true });\n  const line = JSON.stringify(entry) + \"\\n\";\n  await appendFile(auditFilePath(auditDir), line, \"utf-8\");\n}\n\n/**\n * Read the audit log and return entries, optionally filtered to entries at\n * or after `since` (ISO 8601 timestamp, half-open interval).\n */\nexport async function readAuditLog(\n  auditDir: string,\n  since?: string,\n): Promise<EnrichmentAuditEntry[]> {\n  const filePath = auditFilePath(auditDir);\n  if (!existsSync(filePath)) return [];\n  const sinceMs = since === undefined ? undefined : Date.parse(since);\n  if (since !== undefined && !Number.isFinite(sinceMs)) {\n    throw new Error(`Invalid enrichment audit since timestamp: ${since}`);\n  }\n\n  const raw = await readFile(filePath, \"utf-8\");\n  const entries: EnrichmentAuditEntry[] = [];\n\n  for (const line of raw.split(\"\\n\")) {\n    const trimmed = line.trim();\n    if (trimmed.length === 0) continue;\n    try {\n      const parsed: unknown = JSON.parse(trimmed);\n      if (\n        typeof parsed === \"object\" &&\n        parsed !== null &&\n        \"timestamp\" in parsed &&\n        \"entityName\" in parsed\n      ) {\n        const entry = parsed as EnrichmentAuditEntry;\n        if (typeof entry.timestamp !== \"string\") continue;\n        const entryMs = Date.parse(entry.timestamp);\n        if (!Number.isFinite(entryMs)) continue;\n        if (sinceMs !== undefined && entryMs < sinceMs) continue;\n        entries.push(entry);\n      }\n    } catch {\n      // Skip malformed lines\n    }\n  }\n\n  return entries;\n}\n"],"mappings":";AAqFO,SAAS,kCAA4D;AAC1E,SAAO;AAAA,IACL,SAAS;AAAA,IACT,WAAW,CAAC;AAAA,IACZ,sBAAsB;AAAA,MACpB,UAAU,CAAC;AAAA,MACX,MAAM,CAAC;AAAA,MACP,QAAQ,CAAC;AAAA,MACT,KAAK,CAAC;AAAA,IACR;AAAA,IACA,wBAAwB;AAAA,IACxB,oBAAoB;AAAA,IACpB,oBAAoB;AAAA,EACtB;AACF;;;ACrFO,IAAM,6BAAN,MAAiC;AAAA,EACrB,YAAY,oBAAI,IAAgC;AAAA;AAAA,EAGjE,SAAS,UAAoC;AAC3C,SAAK,UAAU,IAAI,SAAS,IAAI,QAAQ;AAAA,EAC1C;AAAA;AAAA,EAGA,IAAI,IAA4C;AAC9C,WAAO,KAAK,UAAU,IAAI,EAAE;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,YAAY,QAAwD;AAClE,UAAM,aAAa,IAAI;AAAA,MACrB,OAAO,UACJ,OAAO,CAAC,MAAM,EAAE,OAAO,EACvB,IAAI,CAAC,MAAM,EAAE,EAAE;AAAA,IACpB;AACA,UAAM,SAA+B,CAAC;AACtC,eAAW,CAAC,IAAI,QAAQ,KAAK,KAAK,UAAU,QAAQ,GAAG;AACrD,UAAI,WAAW,IAAI,EAAE,GAAG;AACtB,eAAO,KAAK,QAAQ;AAAA,MACtB;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,iBACE,OACA,QACsB;AAEtB,QAAI,UAAU,UAAW,QAAO,CAAC;AAEjC,UAAM,aAAa,OAAO;AAC1B,UAAM,cACJ,UAAU,aACN,WAAW,WACX,UAAU,SACR,WAAW,OACX,UAAU,WACR,WAAW,SACX,WAAW;AAErB,UAAM,aAAa,IAAI;AAAA,MACrB,OAAO,UACJ,OAAO,CAAC,MAAM,EAAE,OAAO,EACvB,IAAI,CAAC,MAAM,EAAE,EAAE;AAAA,IACpB;AAEA,UAAM,SAA+B,CAAC;AACtC,eAAW,MAAM,aAAa;AAC5B,UAAI,CAAC,WAAW,IAAI,EAAE,EAAG;AACzB,YAAM,WAAW,KAAK,UAAU,IAAI,EAAE;AACtC,UAAI,UAAU;AACZ,eAAO,KAAK,QAAQ;AAAA,MACtB;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;;;AC1DO,IAAM,oBAAN,MAAsD;AAAA,EAClD,KAAK;AAAA,EACL,WAA+B;AAAA,EAEvB;AAAA,EAEjB,YAAY,UAAoC,CAAC,GAAG;AAClD,SAAK,WAAW,QAAQ;AAAA,EAC1B;AAAA,EAEA,MAAM,cAAgC;AACpC,WAAO,KAAK,aAAa;AAAA,EAC3B;AAAA,EAEA,MAAM,OAAO,QAA+D;AAC1E,QAAI,CAAC,KAAK,SAAU,QAAO,CAAC;AAE5B,UAAM,QAAQ,GAAG,OAAO,IAAI,IAAI,OAAO,IAAI;AAC3C,UAAM,WAAW,MAAM,KAAK,SAAS,KAAK;AAE1C,WAAO,SACJ,OAAO,CAAC,MAAM,OAAO,MAAM,YAAY,EAAE,KAAK,EAAE,SAAS,CAAC,EAC1D,IAAI,CAAC,aAAa;AAAA,MACjB,MAAM,QAAQ,KAAK;AAAA,MACnB,QAAQ,KAAK;AAAA,MACb,WAAW;AAAA,MACX,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,MAAM,CAAC,YAAY;AAAA,IACrB,EAAE;AAAA,EACN;AACF;;;ACzBA,IAAM,cAAc,oBAAI,IAA6B;AAErD,SAAS,cACP,UACA,QACS;AACT,QAAM,cAAc,OAAO,UAAU,KAAK,CAAC,MAAM,EAAE,OAAO,SAAS,EAAE;AACrE,MAAI,CAAC,aAAa,UAAW,QAAO;AAEpC,QAAM,MAAM,KAAK,IAAI;AACrB,MAAI,SAAS,YAAY,IAAI,SAAS,EAAE;AACxC,MAAI,CAAC,QAAQ;AACX,aAAS;AAAA,MACP,aAAa;AAAA,MACb,aAAa,MAAM;AAAA,MACnB,UAAU;AAAA,MACV,UAAU,MAAM;AAAA,IAClB;AACA,gBAAY,IAAI,SAAS,IAAI,MAAM;AAAA,EACrC;AAGA,MAAI,OAAO,OAAO,aAAa;AAC7B,WAAO,cAAc;AACrB,WAAO,cAAc,MAAM;AAAA,EAC7B;AACA,MAAI,OAAO,OAAO,UAAU;AAC1B,WAAO,WAAW;AAClB,WAAO,WAAW,MAAM;AAAA,EAC1B;AAEA,QAAM,EAAE,cAAc,UAAU,IAAI,YAAY;AAChD,SAAO,OAAO,eAAe,gBAAgB,OAAO,YAAY;AAClE;AAEA,SAAS,WACP,YACM;AACN,QAAM,SAAS,YAAY,IAAI,UAAU;AACzC,MAAI,QAAQ;AACV,WAAO,eAAe;AACtB,WAAO,YAAY;AAAA,EACrB;AACF;AAMA,eAAsB,sBACpB,UACA,UACA,QACA,KAC6B;AAC7B,MAAI,CAAC,OAAO,QAAS,QAAO,CAAC;AAC7B,MAAI,SAAS,WAAW,EAAG,QAAO,CAAC;AAEnC,QAAM,UAA8B,CAAC;AAErC,aAAW,UAAU,UAAU;AAC7B,UAAM,YAAY,SAAS,iBAAiB,OAAO,iBAAiB,MAAM;AAC1E,UAAM,gBAAgB,OAAO;AAC7B,UAAM,6BAA6B,gBAAgB;AACnD,QAAI,2BAA2B,6BAC3B,gBACA,OAAO;AAEX,eAAW,YAAY,WAAW;AAChC,UAAI,8BAA8B,4BAA4B,GAAG;AAC/D;AAAA,MACF;AAEA,YAAM,QAAQ,KAAK,IAAI;AAGvB,UAAI;AACJ,UAAI;AACF,oBAAY,MAAM,SAAS,YAAY;AAAA,MACzC,QAAQ;AACN,oBAAY;AAAA,MACd;AAEA,UAAI,CAAC,WAAW;AACd,YAAI;AAAA,UACF,iCAAiC,SAAS,EAAE,QAAQ,OAAO,IAAI;AAAA,QACjE;AACA,gBAAQ,KAAK;AAAA,UACX,YAAY,OAAO;AAAA,UACnB,UAAU,SAAS;AAAA,UACnB,iBAAiB;AAAA,UACjB,oBAAoB;AAAA,UACpB,oBAAoB;AAAA,UACpB,oBAAoB,CAAC;AAAA,UACrB,SAAS,KAAK,IAAI,IAAI;AAAA,QACxB,CAAC;AACD;AAAA,MACF;AAGA,UAAI,cAAc,UAAU,MAAM,GAAG;AACnC,YAAI;AAAA,UACF,iCAAiC,SAAS,EAAE,QAAQ,OAAO,IAAI;AAAA,QACjE;AACA,gBAAQ,KAAK;AAAA,UACX,YAAY,OAAO;AAAA,UACnB,UAAU,SAAS;AAAA,UACnB,iBAAiB;AAAA,UACjB,oBAAoB;AAAA,UACpB,oBAAoB;AAAA,UACpB,oBAAoB,CAAC;AAAA,UACrB,SAAS,KAAK,IAAI,IAAI;AAAA,QACxB,CAAC;AACD;AAAA,MACF;AAMA,UAAI;AACJ,UAAI;AACF,qBAAa,MAAM,SAAS,OAAO,MAAM;AAAA,MAC3C,SAAS,KAAK;AACZ,mBAAW,SAAS,EAAE;AACtB,YAAI;AAAA,UACF,wBAAwB,SAAS,EAAE,eAAe,OAAO,IAAI,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QACpH;AACA,gBAAQ,KAAK;AAAA,UACX,YAAY,OAAO;AAAA,UACnB,UAAU,SAAS;AAAA,UACnB,iBAAiB;AAAA,UACjB,oBAAoB;AAAA,UACpB,oBAAoB;AAAA,UACpB,oBAAoB,CAAC;AAAA,UACrB,SAAS,KAAK,IAAI,IAAI;AAAA,QACxB,CAAC;AACD;AAAA,MACF;AACA,iBAAW,SAAS,EAAE;AAGtB,iBAAW,aAAa,YAAY;AAClC,kBAAU,SAAS,SAAS;AAAA,MAC9B;AAIA,UAAI;AACJ,UAAI,kBAAkB,GAAG;AACvB,mBAAW,CAAC;AAAA,MACd,WAAW,4BAA4B;AACrC,mBAAW,WAAW,MAAM,GAAG,wBAAwB;AACvD,oCAA4B,SAAS;AAAA,MACvC,OAAO;AACL,mBAAW;AAAA,MACb;AACA,YAAM,WAAW,WAAW,SAAS,SAAS;AAE9C,cAAQ,KAAK;AAAA,QACX,YAAY,OAAO;AAAA,QACnB,UAAU,SAAS;AAAA,QACnB,iBAAiB,WAAW;AAAA,QAC5B,oBAAoB,SAAS;AAAA,QAC7B,oBAAoB;AAAA,QACpB,oBAAoB;AAAA,QACpB,SAAS,KAAK,IAAI,IAAI;AAAA,MACxB,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AACT;;;ACpMA,SAAS,OAAO,UAAU,kBAAkB;AAC5C,SAAS,kBAAkB;AAC3B,OAAO,UAAU;AAoBjB,IAAM,iBAAiB;AAEvB,SAAS,cAAc,UAA0B;AAC/C,SAAO,KAAK,KAAK,UAAU,cAAc;AAC3C;AAUA,eAAsB,iBACpB,UACA,OACe;AACf,QAAM,MAAM,UAAU,EAAE,WAAW,KAAK,CAAC;AACzC,QAAM,OAAO,KAAK,UAAU,KAAK,IAAI;AACrC,QAAM,WAAW,cAAc,QAAQ,GAAG,MAAM,OAAO;AACzD;AAMA,eAAsB,aACpB,UACA,OACiC;AACjC,QAAM,WAAW,cAAc,QAAQ;AACvC,MAAI,CAAC,WAAW,QAAQ,EAAG,QAAO,CAAC;AACnC,QAAM,UAAU,UAAU,SAAY,SAAY,KAAK,MAAM,KAAK;AAClE,MAAI,UAAU,UAAa,CAAC,OAAO,SAAS,OAAO,GAAG;AACpD,UAAM,IAAI,MAAM,6CAA6C,KAAK,EAAE;AAAA,EACtE;AAEA,QAAM,MAAM,MAAM,SAAS,UAAU,OAAO;AAC5C,QAAM,UAAkC,CAAC;AAEzC,aAAW,QAAQ,IAAI,MAAM,IAAI,GAAG;AAClC,UAAM,UAAU,KAAK,KAAK;AAC1B,QAAI,QAAQ,WAAW,EAAG;AAC1B,QAAI;AACF,YAAM,SAAkB,KAAK,MAAM,OAAO;AAC1C,UACE,OAAO,WAAW,YAClB,WAAW,QACX,eAAe,UACf,gBAAgB,QAChB;AACA,cAAM,QAAQ;AACd,YAAI,OAAO,MAAM,cAAc,SAAU;AACzC,cAAM,UAAU,KAAK,MAAM,MAAM,SAAS;AAC1C,YAAI,CAAC,OAAO,SAAS,OAAO,EAAG;AAC/B,YAAI,YAAY,UAAa,UAAU,QAAS;AAChD,gBAAQ,KAAK,KAAK;AAAA,MACpB;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,SAAO;AACT;","names":[]}

package/dist/{chunk-APO3DCMU.js → chunk-HLAVGJ62.js}

@@ -104,6 +104,19 @@ function pairPath(memoryDir, pairId) {
   }
   return path.join(reviewDir(memoryDir), `${pairId}.json`);
 }
+function isSafeReviewJsonFile(memoryDir, filePath) {
+  const root = path.resolve(reviewDir(memoryDir));
+  const resolved = path.resolve(filePath);
+  const relative = path.relative(root, resolved);
+  if (relative === "" || relative.startsWith("..") || path.isAbsolute(relative)) {
+    return false;
+  }
+  try {
+    return fs.lstatSync(resolved).isFile();
+  } catch {
+    return false;
+  }
+}
 function ensureDir(memoryDir) {
   const dir = reviewDir(memoryDir);
   if (!fs.existsSync(dir)) {
@@ -150,31 +163,32 @@ function writePair(memoryDir, pair, options = {}) {
   if (isTerminalResolution(existing?.resolution)) {
     return existing;
   }
-  if (existing?.resolution === "both-valid" && options.cooldownDays === void 0) {
+  const contentChanged = Boolean(existing && suppliedMemoryHashesChanged(existing, pair));
+  if (existing?.resolution === "both-valid" && options.cooldownDays === void 0 && !contentChanged) {
     return existing;
   }
   const existingDeferralExpired = Boolean(existing && isDeferred(existing) && !isDeferralActive(existing));
-  if (existing && isDeferralActive(existing)) {
+  if (existing && isDeferralActive(existing) && !contentChanged) {
     return existing;
   }
   const existingDormantCooldownActive = Boolean(
     existing && isDormantReviewedPair(existing) && options.cooldownDays !== void 0 && isCoolingDown(existing, options.cooldownDays)
   );
   const dormantContentChanged = Boolean(
-    existing && existingDormantCooldownActive && suppliedMemoryHashesChanged(existing, pair)
+    existing && existingDormantCooldownActive && contentChanged
   );
   const existingDormantExpired = Boolean(
     existing && isDormantReviewedPair(existing) && options.cooldownDays !== void 0 && !existingDormantCooldownActive
   );
-  if (existing && !existingDeferralExpired && (existingDormantCooldownActive && !dormantContentChanged || !existingDormantExpired && !dormantContentChanged && existing.confidence >= pair.confidence)) {
+  if (existing && !existingDeferralExpired && (existingDormantCooldownActive && !dormantContentChanged || !existingDormantExpired && !contentChanged && existing.confidence >= pair.confidence)) {
     return existing;
   }
   const full = {
     ...pair,
     pairId,
-    lastReviewedAt: existingDeferralExpired || existingDormantExpired || dormantContentChanged ? pair.lastReviewedAt : existing?.lastReviewedAt ?? pair.lastReviewedAt,
+    lastReviewedAt: existingDeferralExpired || existingDormantExpired || contentChanged ? pair.lastReviewedAt : existing?.lastReviewedAt ?? pair.lastReviewedAt,
     resolution: void 0,
-    deferredUntil: existingDeferralExpired || existingDormantExpired || dormantContentChanged ? void 0 : existing?.deferredUntil
+    deferredUntil: existingDeferralExpired || existingDormantExpired || contentChanged ? void 0 : existing?.deferredUntil
   };
   const filePath = pairPath(memoryDir, pairId);
   writePairFile(filePath, full);
@@ -194,6 +208,7 @@ function writePairs(memoryDir, pairs, options = {}) {
 function readPair(memoryDir, pairId) {
   const filePath = pairPath(memoryDir, pairId);
   try {
+    if (!isSafeReviewJsonFile(memoryDir, filePath)) return null;
     const raw = fs.readFileSync(filePath, "utf-8");
     const parsed = JSON.parse(raw);
     if (typeof parsed === "object" && parsed !== null && Array.isArray(parsed.memoryIds)) {
@@ -216,7 +231,9 @@ function listPairs(memoryDir, options) {
   for (const entry of fs.readdirSync(dir)) {
     if (!entry.endsWith(".json")) continue;
     try {
-      const raw = fs.readFileSync(path.join(dir, entry), "utf-8");
+      const filePath = path.join(dir, entry);
+      if (!isSafeReviewJsonFile(memoryDir, filePath)) continue;
+      const raw = fs.readFileSync(filePath, "utf-8");
       const pair = JSON.parse(raw);
       if (typeof pair !== "object" || pair === null) continue;
       if (!Array.isArray(pair.memoryIds)) continue;
@@ -250,6 +267,7 @@ function migrateUnscopedPairsToNamespace(memoryDir, namespace, options = {}) {
     if (!entry.endsWith(".json")) continue;
     const filePath = path.join(dir, entry);
     try {
+      if (!isSafeReviewJsonFile(memoryDir, filePath)) continue;
       const raw = fs.readFileSync(filePath, "utf-8");
       const pair = JSON.parse(raw);
       if (typeof pair !== "object" || pair === null) continue;
@@ -265,6 +283,10 @@ function migrateUnscopedPairsToNamespace(memoryDir, namespace, options = {}) {
           writePairFile(targetPath, migratedPair);
           fs.rmSync(filePath, { force: true });
         } else {
+          if (!isSafeReviewJsonFile(memoryDir, targetPath)) {
+            hadMigrationFailure = true;
+            continue;
+          }
           const existing = readPair(memoryDir, pairId);
           writePairFile(targetPath, existing ? mergeMigratedPair(existing, migratedPair, options) : migratedPair);
           fs.rmSync(filePath, { force: true });
@@ -358,4 +380,4 @@ export {
   deferPair,
   memoryHashesChanged
 };
-//# sourceMappingURL=chunk-APO3DCMU.js.map
+//# sourceMappingURL=chunk-HLAVGJ62.js.map