@remnic/core 1.1.31 → 9.3.515

package/dist/{chunk-KOSORCJG.js → chunk-S53PKKWK.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-NNVTUXEB.js";
 import {
   resolveHomeDir
-} from "./chunk-XIG5PDM7.js";
+} from "./chunk-JUC24CTX.js";
 
 // src/migrate/from-engram.ts
 import { createHash } from "crypto";
@@ -105,7 +105,25 @@ async function pathExistsNoFollow(filePath) {
     throw error;
   }
 }
-async function copyTreeMissing(source, destination, copied, manifest, isRoot = true) {
+async function assertExistingRegularFileNoFollow(filePath, label) {
+  const fileStat = await lstat(filePath);
+  if (fileStat.isSymbolicLink()) {
+    throw new Error(`${label} must not be a symlink: ${filePath}`);
+  }
+  if (!fileStat.isFile()) {
+    throw new Error(`${label} must be a regular file: ${filePath}`);
+  }
+}
+async function isExistingRegularFileNoFollow(filePath) {
+  try {
+    const fileStat = await lstat(filePath);
+    return fileStat.isFile() && !fileStat.isSymbolicLink();
+  } catch (error) {
+    if (error.code === "ENOENT") return false;
+    throw error;
+  }
+}
+async function copyTreeMissing(source, destination, copied, manifest, persistManifest, isRoot = true) {
   if (!existsSync(source)) return;
   const sourceStat = await lstat(source);
   if (sourceStat.isSymbolicLink()) {
@@ -126,6 +144,7 @@ async function copyTreeMissing(source, destination, copied, manifest, isRoot = t
         path.join(destination, entry.name),
         copied,
         manifest,
+        persistManifest,
         false
       );
     }
@@ -134,7 +153,7 @@ async function copyTreeMissing(source, destination, copied, manifest, isRoot = t
   if (await pathExistsNoFollow(destination)) return;
   await ensureParent(destination);
   await copyFile(source, destination);
-  await recordCreatedPath(destination, manifest);
+  await recordCreatedPath(destination, manifest, persistManifest);
   copied.push(destination);
 }
 function rewriteRemnicText(content) {
@@ -163,6 +182,7 @@ function isPlainJsonObject(value) {
 }
 async function rewriteTokensIfPresent(filePath) {
   if (!existsSync(filePath)) return 0;
+  await assertExistingRegularFileNoFollow(filePath, "Remnic token store");
   await secureTokenFilePermissions(filePath);
   let raw;
   try {
@@ -198,8 +218,12 @@ async function rewriteTokensIfPresent(filePath) {
   }
   return rewritten;
 }
-async function mergeLegacyTokens(legacyTokensPath, remnicTokensPath, homeDir, manifest, backupExisting) {
+async function mergeLegacyTokens(legacyTokensPath, remnicTokensPath, homeDir, manifest, backupExisting, persistManifest) {
+  if (existsSync(legacyTokensPath)) {
+    await assertExistingRegularFileNoFollow(legacyTokensPath, "legacy Engram token store");
+  }
   if (!existsSync(remnicTokensPath)) return 0;
+  await assertExistingRegularFileNoFollow(remnicTokensPath, "Remnic token store");
   await secureTokenFilePermissions(remnicTokensPath);
   if (!existsSync(legacyTokensPath)) return rewriteTokensIfPresent(remnicTokensPath);
   let remnicRaw;
@@ -225,7 +249,7 @@ async function mergeLegacyTokens(legacyTokensPath, remnicTokensPath, homeDir, ma
       };
     });
     if (backupExisting) {
-      await backupFile(remnicTokensPath, originalRemnic, homeDir, manifest);
+      await backupFile(remnicTokensPath, originalRemnic, homeDir, manifest, persistManifest);
     }
     await writeTokenStoreFile(
       remnicTokensPath,
@@ -259,7 +283,7 @@ async function mergeLegacyTokens(legacyTokensPath, remnicTokensPath, homeDir, ma
   }
   if (!changed) return rewritten;
   if (backupExisting) {
-    await backupFile(remnicTokensPath, originalRemnic, homeDir, manifest);
+    await backupFile(remnicTokensPath, originalRemnic, homeDir, manifest, persistManifest);
   }
   await writeTokenStoreFile(
     remnicTokensPath,
@@ -268,8 +292,15 @@ async function mergeLegacyTokens(legacyTokensPath, remnicTokensPath, homeDir, ma
   );
   return rewritten;
 }
-async function rewriteJsonFile(targetPath, homeDir, manifest) {
+async function rewriteJsonFile(targetPath, homeDir, manifest, persistManifest) {
   if (!existsSync(targetPath)) return false;
+  const targetStat = await lstat(targetPath);
+  if (targetStat.isSymbolicLink()) return false;
+  if (!targetStat.isFile()) {
+    const error = new Error(`connector config must be a regular file: ${targetPath}`);
+    error.code = targetStat.isDirectory() ? "EISDIR" : "EINVAL";
+    throw error;
+  }
   const original = await readFile(targetPath, "utf8");
   let parsed;
   try {
@@ -291,11 +322,11 @@ async function rewriteJsonFile(targetPath, homeDir, manifest) {
   const next = `${rewritten}
 `;
   if (!changed && next === original) return false;
-  await backupFile(targetPath, original, homeDir, manifest);
+  await backupFile(targetPath, original, homeDir, manifest, persistManifest);
   await writeFile(targetPath, next, "utf8");
   return true;
 }
-async function backupFile(targetPath, originalContent, homeDir, manifest) {
+async function backupFile(targetPath, originalContent, homeDir, manifest, persistManifest) {
   if (manifest.entries.some((entry) => entry.targetPath === targetPath && entry.backupPath)) {
     return;
   }
@@ -310,10 +341,12 @@ async function backupFile(targetPath, originalContent, homeDir, manifest) {
     await chmod(backupPath, originalMode);
   }
   manifest.entries.push({ targetPath, backupPath });
+  await persistManifest?.();
 }
-async function recordCreatedPath(filePath, manifest) {
+async function recordCreatedPath(filePath, manifest, persistManifest) {
   if (manifest.entries.some((entry) => entry.targetPath === filePath)) return;
   manifest.entries.push({ targetPath: filePath, createdByMigration: true });
+  await persistManifest?.();
 }
 function defaultConnectorConfigPaths(homeDir, cwd) {
   return [
@@ -323,20 +356,21 @@ function defaultConnectorConfigPaths(homeDir, cwd) {
     path.join(cwd, "packages", "plugin-codex", ".mcp.json")
   ];
 }
-async function updateConnectorConfigs(homeDir, cwd, options, manifest) {
+async function updateConnectorConfigs(homeDir, cwd, options, manifest, persistManifest) {
   const updated = [];
   const candidates = options?.connectorConfigPaths ?? defaultConnectorConfigPaths(homeDir, cwd);
   for (const targetPath of candidates) {
-    if (await rewriteJsonFile(targetPath, homeDir, manifest)) {
+    if (await rewriteJsonFile(targetPath, homeDir, manifest, persistManifest)) {
       updated.push(targetPath);
     }
   }
   return updated;
 }
-async function copyLegacyConfig(homeDir, copied, manifest) {
+async function copyLegacyConfig(homeDir, copied, manifest, persistManifest) {
   const source = legacyConfigPath(homeDir);
   const destination = remnicConfigPath(homeDir);
   if (!existsSync(source) || existsSync(destination)) return;
+  if (!await isExistingRegularFileNoFollow(source)) return;
   await ensureParent(destination);
   const original = await readFile(source, "utf8");
   let next = rewriteRemnicText(original);
@@ -351,13 +385,13 @@ async function copyLegacyConfig(homeDir, copied, manifest) {
   }
   await writeFile(destination, `${next.trimEnd()}
 `, "utf8");
-  await recordCreatedPath(destination, manifest);
+  await recordCreatedPath(destination, manifest, persistManifest);
   copied.push(destination);
 }
 function rewriteServiceText(content) {
   return rewriteRemnicText(content);
 }
-async function migrateServices(homeDir, options, manifest) {
+async function migrateServices(homeDir, options, manifest, persistManifest) {
   const logger = resolveLogger(options);
   const exec = resolveExec(options);
   const servicesReinstalled = [];
@@ -366,10 +400,11 @@ async function migrateServices(homeDir, options, manifest) {
     const legacyPlist = path.join(homeDir, "Library", "LaunchAgents", "ai.engram.daemon.plist");
     const remnicPlist = path.join(homeDir, "Library", "LaunchAgents", "ai.remnic.daemon.plist");
     if (existsSync(legacyPlist) && !existsSync(remnicPlist)) {
+      if (!await isExistingRegularFileNoFollow(legacyPlist)) return servicesReinstalled;
       const next = rewriteServiceText(await readFile(legacyPlist, "utf8"));
       await ensureParent(remnicPlist);
       await writeFile(remnicPlist, next, "utf8");
-      await recordCreatedPath(remnicPlist, manifest);
+      await recordCreatedPath(remnicPlist, manifest, persistManifest);
       try {
         exec("launchctl", ["unload", legacyPlist]);
       } catch {
@@ -387,10 +422,11 @@ async function migrateServices(homeDir, options, manifest) {
     const legacyUnit = path.join(homeDir, ".config", "systemd", "user", "engram.service");
     const remnicUnit = path.join(homeDir, ".config", "systemd", "user", "remnic.service");
     if (existsSync(legacyUnit) && !existsSync(remnicUnit)) {
+      if (!await isExistingRegularFileNoFollow(legacyUnit)) return servicesReinstalled;
       const next = rewriteServiceText(await readFile(legacyUnit, "utf8"));
       await ensureParent(remnicUnit);
       await writeFile(remnicUnit, next, "utf8");
-      await recordCreatedPath(remnicUnit, manifest);
+      await recordCreatedPath(remnicUnit, manifest, persistManifest);
       try {
         exec("systemctl", ["--user", "stop", "engram.service"]);
         exec("systemctl", ["--user", "disable", "engram.service"]);
@@ -571,15 +607,17 @@ async function migrateFromEngram(options) {
         rollbackCommand: defaultRollbackCommand()
       };
     }
-    const manifest = {
+    const manifest = await readRollbackManifest(homeDir) ?? {
       version: 1,
       createdAt: (/* @__PURE__ */ new Date()).toISOString(),
       entries: []
     };
+    const persistManifest = () => writeRollbackManifest(homeDir, manifest);
     logger("First run after Engram -> Remnic rename. Migrating...");
     await mkdir(remnicRoot(homeDir), { recursive: true });
-    await copyTreeMissing(legacyRoot(homeDir), remnicRoot(homeDir), copied, manifest);
-    await copyLegacyConfig(homeDir, copied, manifest);
+    await persistManifest();
+    await copyTreeMissing(legacyRoot(homeDir), remnicRoot(homeDir), copied, manifest, persistManifest);
+    await copyLegacyConfig(homeDir, copied, manifest, persistManifest);
     const legacyTokens = path.join(legacyRoot(homeDir), "tokens.json");
     const remnicTokens = path.join(remnicRoot(homeDir), "tokens.json");
     if (copied.includes(remnicTokens)) {
@@ -590,17 +628,18 @@ async function migrateFromEngram(options) {
         remnicTokens,
         homeDir,
         manifest,
-        true
+        true,
+        persistManifest
       );
     }
     if (existsSync(remnicTokens)) {
       logger("tokens copied to ~/.remnic/tokens.json (legacy prefixes rewritten)");
     }
-    const updatedConfigs = await updateConnectorConfigs(homeDir, cwd, options, manifest);
+    const updatedConfigs = await updateConnectorConfigs(homeDir, cwd, options, manifest, persistManifest);
     for (const updated of updatedConfigs) {
       logger(`Updated connector config: ${updated}`);
     }
-    servicesReinstalled = await migrateServices(homeDir, options, manifest);
+    servicesReinstalled = await migrateServices(homeDir, options, manifest, persistManifest);
     await writeRollbackManifest(homeDir, manifest);
     await writeFile(markerPath(homeDir), `${(/* @__PURE__ */ new Date()).toISOString()}
 `, "utf8");
@@ -621,4 +660,4 @@ export {
   rollbackFromEngramMigration,
   migrateFromEngram
 };
-//# sourceMappingURL=chunk-KOSORCJG.js.map
+//# sourceMappingURL=chunk-S53PKKWK.js.map

package/dist/chunk-S53PKKWK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/migrate/from-engram.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport path from \"node:path\";\nimport {\n  chmod,\n  copyFile,\n  lstat,\n  mkdir,\n  open,\n  readFile,\n  readdir,\n  rm,\n  stat,\n  unlink,\n  writeFile,\n} from \"node:fs/promises\";\nimport { existsSync } from \"node:fs\";\nimport { resolveHomeDir } from \"../runtime/env.js\";\nimport { launchProcessSync } from \"../runtime/child-process.js\";\n\nexport interface MigrationResult {\n  status: \"fresh-install\" | \"already-migrated\" | \"migrated\";\n  copied: string[];\n  tokensRegenerated: number;\n  servicesReinstalled: string[];\n  rollbackCommand: string;\n}\n\ninterface RollbackManifestEntry {\n  targetPath: string;\n  backupPath?: string;\n  createdByMigration?: boolean;\n}\n\ninterface RollbackManifest {\n  version: 1;\n  createdAt: string;\n  entries: RollbackManifestEntry[];\n}\n\nexport interface MigrationOptions {\n  connectorConfigPaths?: string[];\n  cwd?: string;\n  execCommand?: (command: string, args: string[]) => void;\n  homeDir?: string;\n  logger?: (message: string) => void;\n  platform?: NodeJS.Platform;\n  quiet?: boolean;\n}\n\nexport interface RollbackResult {\n  removed: string[];\n  restored: string[];\n}\n\ninterface TokenEntry {\n  connector: string;\n  createdAt: string;\n  token: string;\n}\n\ntype PersistRollbackManifest = () => Promise<void>;\n\nconst MARKER_FILE = \".migrated-from-engram\";\nconst LOCK_FILE = \".migration.lock\";\nconst ROLLBACK_MANIFEST = \".rollback.json\";\nconst BACKUP_DIR = \".backup\";\nconst LOCK_RETRY_MS = 100;\nconst LOCK_TIMEOUT_MS = 5_000;\nconst TOKEN_STORE_MODE = 0o600;\n\nfunction resolvePlatform(options?: MigrationOptions): NodeJS.Platform {\n  return options?.platform ?? process.platform;\n}\n\nfunction resolveMigrationHome(options?: MigrationOptions): string {\n  return options?.homeDir ?? resolveHomeDir();\n}\n\nfunction resolveLogger(options?: MigrationOptions): (message: string) => void {\n  const sink = options?.logger ?? ((message: string) => console.log(message));\n  return (message: string) => {\n    if (!options?.quiet) sink(`[remnic] ${message}`);\n  };\n}\n\nfunction resolveExec(options?: MigrationOptions): (command: string, args: string[]) => void {\n  return options?.execCommand ?? ((command: string, args: string[]) => {\n    const result = launchProcessSync(command, args, { stdio: \"ignore\" });\n    if (result.error) {\n      throw result.error;\n    }\n    if (result.status !== 0) {\n      const reason = result.status === null\n        ? `signal ${result.signal ?? \"unknown\"}`\n        : `exit code ${result.status}`;\n      throw new Error(`migration command failed: ${command} ${args.join(\" \")} (${reason})`);\n    }\n  });\n}\n\nfunction remnicRoot(homeDir: string): string {\n  return path.join(homeDir, \".remnic\");\n}\n\nfunction legacyRoot(homeDir: string): string {\n  return path.join(homeDir, \".engram\");\n}\n\nfunction legacyConfigPath(homeDir: string): string {\n  return path.join(homeDir, \".config\", \"engram\", \"config.json\");\n}\n\nfunction remnicConfigPath(homeDir: string): string {\n  return path.join(homeDir, \".config\", \"remnic\", \"config.json\");\n}\n\nfunction markerPath(homeDir: string): string {\n  return path.join(remnicRoot(homeDir), MARKER_FILE);\n}\n\nfunction lockPath(homeDir: string): string {\n  return path.join(remnicRoot(homeDir), LOCK_FILE);\n}\n\nfunction rollbackManifestPath(homeDir: string): string {\n  return path.join(remnicRoot(homeDir), ROLLBACK_MANIFEST);\n}\n\nfunction backupRoot(homeDir: string): string {\n  return path.join(remnicRoot(homeDir), BACKUP_DIR);\n}\n\nfunction defaultRollbackCommand(): string {\n  return \"remnic migrate --rollback\";\n}\n\nasync function ensureParent(filePath: string): Promise<void> {\n  await mkdir(path.dirname(filePath), { recursive: true });\n}\n\nasync function secureTokenFilePermissions(filePath: string): Promise<void> {\n  await chmod(filePath, TOKEN_STORE_MODE);\n}\n\nasync function writeOwnerOnlyFile(filePath: string, content: string): Promise<void> {\n  await writeFile(filePath, content, { encoding: \"utf8\", mode: TOKEN_STORE_MODE });\n  await chmod(filePath, TOKEN_STORE_MODE);\n}\n\nasync function writeTokenStoreFile(filePath: string, content: string): Promise<void> {\n  await writeOwnerOnlyFile(filePath, content);\n}\n\nfunction isRemnicTokenStorePath(filePath: string, homeDir: string): boolean {\n  return path.resolve(filePath) === path.resolve(path.join(remnicRoot(homeDir), \"tokens.json\"));\n}\n\nasync function pathExistsNoFollow(filePath: string): Promise<boolean> {\n  try {\n    await lstat(filePath);\n    return true;\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return false;\n    throw error;\n  }\n}\n\nasync function assertExistingRegularFileNoFollow(filePath: string, label: string): Promise<void> {\n  const fileStat = await lstat(filePath);\n  if (fileStat.isSymbolicLink()) {\n    throw new Error(`${label} must not be a symlink: ${filePath}`);\n  }\n  if (!fileStat.isFile()) {\n    throw new Error(`${label} must be a regular file: ${filePath}`);\n  }\n}\n\nasync function isExistingRegularFileNoFollow(filePath: string): Promise<boolean> {\n  try {\n    const fileStat = await lstat(filePath);\n    return fileStat.isFile() && !fileStat.isSymbolicLink();\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return false;\n    throw error;\n  }\n}\n\nasync function copyTreeMissing(\n  source: string,\n  destination: string,\n  copied: string[],\n  manifest: RollbackManifest,\n  persistManifest?: PersistRollbackManifest,\n  isRoot = true,\n): Promise<void> {\n  if (!existsSync(source)) return;\n  const sourceStat = await lstat(source);\n  if (sourceStat.isSymbolicLink()) {\n    if (isRoot) {\n      throw new Error(`legacy migration root must not be a symlink: ${source}`);\n    }\n    return;\n  }\n  if (sourceStat.isDirectory()) {\n    await mkdir(destination, { recursive: true });\n    const entries = await readdir(source, { withFileTypes: true });\n    for (const entry of entries) {\n      if (entry.name === MARKER_FILE || entry.name === LOCK_FILE || entry.name === ROLLBACK_MANIFEST) {\n        continue;\n      }\n      await copyTreeMissing(\n        path.join(source, entry.name),\n        path.join(destination, entry.name),\n        copied,\n        manifest,\n        persistManifest,\n        false,\n      );\n    }\n    return;\n  }\n\n  if (await pathExistsNoFollow(destination)) return;\n  await ensureParent(destination);\n  await copyFile(source, destination);\n  await recordCreatedPath(destination, manifest, persistManifest);\n  copied.push(destination);\n}\n\nfunction rewriteRemnicText(content: string): string {\n  return content\n    .replaceAll(\".engram/\", \".remnic/\")\n    .replaceAll(\".engram\\\\\", \".remnic\\\\\")\n    .replaceAll(\"ENGRAM_\", \"REMNIC_\")\n    .replaceAll(\"{{ENGRAM_TOKEN}}\", \"{{REMNIC_TOKEN}}\")\n    .replaceAll(\"${ENGRAM_AUTH_TOKEN}\", \"${REMNIC_AUTH_TOKEN}\")\n    .replaceAll(\"ai.engram.daemon\", \"ai.remnic.daemon\")\n    .replaceAll(\"engram.service\", \"remnic.service\");\n}\n\nfunction rewriteTokenValue(token: string): string {\n  return token.startsWith(\"engram_\") ? `remnic_${token.slice(\"engram_\".length)}` : token;\n}\n\nfunction parseTokenEntries(raw: unknown): TokenEntry[] {\n  if (typeof raw !== \"object\" || raw === null) return [];\n\n  if (Array.isArray((raw as { tokens?: unknown }).tokens)) {\n    return ((raw as { tokens: unknown[] }).tokens)\n      .filter((entry): entry is TokenEntry => {\n        if (typeof entry !== \"object\" || entry === null) return false;\n        const candidate = entry as Partial<TokenEntry>;\n        return typeof candidate.connector === \"string\" &&\n          candidate.connector.length > 0 &&\n          typeof candidate.token === \"string\" &&\n          candidate.token.length > 0 &&\n          typeof candidate.createdAt === \"string\" &&\n          candidate.createdAt.length > 0;\n      })\n      .map((entry) => ({ ...entry }));\n  }\n\n  return Object.entries(raw)\n    .filter(([key, value]) => key !== \"tokens\" && typeof value === \"string\" && value.length > 0)\n    .map(([connector, token]) => ({\n      connector,\n      createdAt: new Date().toISOString(),\n      token,\n    }));\n}\n\nfunction isPlainJsonObject(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nasync function rewriteTokensIfPresent(filePath: string): Promise<number> {\n  if (!existsSync(filePath)) return 0;\n  await assertExistingRegularFileNoFollow(filePath, \"Remnic token store\");\n  await secureTokenFilePermissions(filePath);\n  let raw: Record<string, unknown>;\n  try {\n    raw = JSON.parse(await readFile(filePath, \"utf8\")) as Record<string, unknown>;\n  } catch {\n    return 0;\n  }\n  let rewritten = 0;\n\n  if (Array.isArray(raw.tokens)) {\n    for (const entry of raw.tokens as Array<Record<string, unknown>>) {\n      if (typeof entry.token === \"string\") {\n        const next = rewriteTokenValue(entry.token);\n        if (next !== entry.token) {\n          entry.token = next;\n          rewritten += 1;\n        }\n      }\n    }\n  } else {\n    for (const [key, value] of Object.entries(raw)) {\n      if (typeof value === \"string\") {\n        const next = rewriteTokenValue(value);\n        if (next !== value) {\n          raw[key] = next;\n          rewritten += 1;\n        }\n      }\n    }\n  }\n\n  if (rewritten > 0) {\n    await writeTokenStoreFile(filePath, `${JSON.stringify(raw, null, 2)}\\n`);\n  }\n  return rewritten;\n}\n\nasync function mergeLegacyTokens(\n  legacyTokensPath: string,\n  remnicTokensPath: string,\n  homeDir: string,\n  manifest: RollbackManifest,\n  backupExisting: boolean,\n  persistManifest?: PersistRollbackManifest,\n): Promise<number> {\n  if (existsSync(legacyTokensPath)) {\n    await assertExistingRegularFileNoFollow(legacyTokensPath, \"legacy Engram token store\");\n  }\n  if (!existsSync(remnicTokensPath)) return 0;\n  await assertExistingRegularFileNoFollow(remnicTokensPath, \"Remnic token store\");\n  await secureTokenFilePermissions(remnicTokensPath);\n  if (!existsSync(legacyTokensPath)) return rewriteTokensIfPresent(remnicTokensPath);\n\n  let remnicRaw: unknown;\n  let legacyRaw: unknown;\n  const originalRemnic = await readFile(remnicTokensPath, \"utf8\");\n\n  try {\n    remnicRaw = JSON.parse(originalRemnic) as unknown;\n    legacyRaw = JSON.parse(await readFile(legacyTokensPath, \"utf8\")) as unknown;\n  } catch {\n    try {\n      legacyRaw = JSON.parse(await readFile(legacyTokensPath, \"utf8\")) as unknown;\n    } catch {\n      return rewriteTokensIfPresent(remnicTokensPath);\n    }\n\n    const legacyEntries = parseTokenEntries(legacyRaw);\n    let rewritten = 0;\n    const recoveredEntries = legacyEntries.map((entry) => {\n      const nextToken = rewriteTokenValue(entry.token);\n      if (nextToken !== entry.token) rewritten += 1;\n      return {\n        ...entry,\n        token: nextToken,\n      };\n    });\n\n    if (backupExisting) {\n      await backupFile(remnicTokensPath, originalRemnic, homeDir, manifest, persistManifest);\n    }\n\n    await writeTokenStoreFile(\n      remnicTokensPath,\n      `${JSON.stringify({ tokens: recoveredEntries }, null, 2)}\\n`,\n    );\n    return rewritten;\n  }\n\n  const mergedEntries = parseTokenEntries(remnicRaw);\n  const legacyEntries = parseTokenEntries(legacyRaw);\n  const existingConnectors = new Set(mergedEntries.map((entry) => entry.connector));\n  let rewritten = 0;\n  let changed = false;\n\n  for (const entry of mergedEntries) {\n    const nextToken = rewriteTokenValue(entry.token);\n    if (nextToken !== entry.token) {\n      entry.token = nextToken;\n      rewritten += 1;\n      changed = true;\n    }\n  }\n\n  for (const entry of legacyEntries) {\n    const nextToken = rewriteTokenValue(entry.token);\n    if (nextToken !== entry.token) {\n      rewritten += 1;\n    }\n    if (existingConnectors.has(entry.connector)) continue;\n    mergedEntries.push({ ...entry, token: nextToken });\n    existingConnectors.add(entry.connector);\n    changed = true;\n  }\n\n  if (!changed) return rewritten;\n\n  if (backupExisting) {\n    await backupFile(remnicTokensPath, originalRemnic, homeDir, manifest, persistManifest);\n  }\n\n  await writeTokenStoreFile(\n    remnicTokensPath,\n    `${JSON.stringify({ tokens: mergedEntries }, null, 2)}\\n`,\n  );\n  return rewritten;\n}\n\nasync function rewriteJsonFile(\n  targetPath: string,\n  homeDir: string,\n  manifest: RollbackManifest,\n  persistManifest?: PersistRollbackManifest,\n): Promise<boolean> {\n  if (!existsSync(targetPath)) return false;\n  const targetStat = await lstat(targetPath);\n  if (targetStat.isSymbolicLink()) return false;\n  if (!targetStat.isFile()) {\n    const error = new Error(`connector config must be a regular file: ${targetPath}`) as NodeJS.ErrnoException;\n    error.code = targetStat.isDirectory() ? \"EISDIR\" : \"EINVAL\";\n    throw error;\n  }\n\n  const original = await readFile(targetPath, \"utf8\");\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(original) as unknown;\n  } catch {\n    return false;\n  }\n  if (!isPlainJsonObject(parsed)) return false;\n\n  let changed = false;\n  if (\n    parsed.mcpServers &&\n    typeof parsed.mcpServers === \"object\" &&\n    !Array.isArray(parsed.mcpServers)\n  ) {\n    const servers = parsed.mcpServers as Record<string, unknown>;\n    if (servers.engram && !servers.remnic) {\n      servers.remnic = servers.engram;\n      delete servers.engram;\n      changed = true;\n    }\n  }\n\n  const rewritten = rewriteRemnicText(JSON.stringify(parsed, null, 2));\n  const next = `${rewritten}\\n`;\n  if (!changed && next === original) return false;\n\n  await backupFile(targetPath, original, homeDir, manifest, persistManifest);\n  await writeFile(targetPath, next, \"utf8\");\n  return true;\n}\n\nasync function backupFile(\n  targetPath: string,\n  originalContent: string,\n  homeDir: string,\n  manifest: RollbackManifest,\n  persistManifest?: PersistRollbackManifest,\n): Promise<void> {\n  if (manifest.entries.some((entry) => entry.targetPath === targetPath && entry.backupPath)) {\n    return;\n  }\n  const digest = createHash(\"sha256\").update(targetPath).digest(\"hex\").slice(0, 12);\n  const backupPath = path.join(backupRoot(homeDir), \"mcp\", `${digest}.json`);\n  await ensureParent(backupPath);\n  if (isRemnicTokenStorePath(targetPath, homeDir)) {\n    await writeOwnerOnlyFile(backupPath, originalContent);\n  } else {\n    const originalMode = (await stat(targetPath)).mode & 0o777;\n    await writeFile(backupPath, originalContent, { encoding: \"utf8\", mode: originalMode });\n    await chmod(backupPath, originalMode);\n  }\n  manifest.entries.push({ targetPath, backupPath });\n  await persistManifest?.();\n}\n\nasync function recordCreatedPath(\n  filePath: string,\n  manifest: RollbackManifest,\n  persistManifest?: PersistRollbackManifest,\n): Promise<void> {\n  if (manifest.entries.some((entry) => entry.targetPath === filePath)) return;\n  manifest.entries.push({ targetPath: filePath, createdByMigration: true });\n  await persistManifest?.();\n}\n\nfunction defaultConnectorConfigPaths(homeDir: string, cwd: string): string[] {\n  return [\n    path.join(homeDir, \".claude.json\"),\n    path.join(homeDir, \".claude\", \".mcp.json\"),\n    path.join(cwd, \"packages\", \"plugin-claude-code\", \".mcp.json\"),\n    path.join(cwd, \"packages\", \"plugin-codex\", \".mcp.json\"),\n  ];\n}\n\nasync function updateConnectorConfigs(\n  homeDir: string,\n  cwd: string,\n  options: MigrationOptions | undefined,\n  manifest: RollbackManifest,\n  persistManifest?: PersistRollbackManifest,\n): Promise<string[]> {\n  const updated: string[] = [];\n  const candidates = options?.connectorConfigPaths ?? defaultConnectorConfigPaths(homeDir, cwd);\n  for (const targetPath of candidates) {\n    if (await rewriteJsonFile(targetPath, homeDir, manifest, persistManifest)) {\n      updated.push(targetPath);\n    }\n  }\n  return updated;\n}\n\nasync function copyLegacyConfig(\n  homeDir: string,\n  copied: string[],\n  manifest: RollbackManifest,\n  persistManifest?: PersistRollbackManifest,\n): Promise<void> {\n  const source = legacyConfigPath(homeDir);\n  const destination = remnicConfigPath(homeDir);\n  if (!existsSync(source) || existsSync(destination)) return;\n  if (!(await isExistingRegularFileNoFollow(source))) return;\n  await ensureParent(destination);\n  const original = await readFile(source, \"utf8\");\n  let next = rewriteRemnicText(original);\n  try {\n    const parsed = JSON.parse(next) as unknown;\n    if (isPlainJsonObject(parsed) && parsed.engram && !parsed.remnic) {\n      parsed.remnic = parsed.engram;\n      delete parsed.engram;\n      next = JSON.stringify(parsed, null, 2);\n    }\n  } catch {\n    // Keep rewritten text when config is not JSON.\n  }\n  await writeFile(destination, `${next.trimEnd()}\\n`, \"utf8\");\n  await recordCreatedPath(destination, manifest, persistManifest);\n  copied.push(destination);\n}\n\nfunction rewriteServiceText(content: string): string {\n  return rewriteRemnicText(content);\n}\n\nasync function migrateServices(\n  homeDir: string,\n  options: MigrationOptions | undefined,\n  manifest: RollbackManifest,\n  persistManifest?: PersistRollbackManifest,\n): Promise<string[]> {\n  const logger = resolveLogger(options);\n  const exec = resolveExec(options);\n  const servicesReinstalled: string[] = [];\n  const platform = resolvePlatform(options);\n\n  if (platform === \"darwin\") {\n    const legacyPlist = path.join(homeDir, \"Library\", \"LaunchAgents\", \"ai.engram.daemon.plist\");\n    const remnicPlist = path.join(homeDir, \"Library\", \"LaunchAgents\", \"ai.remnic.daemon.plist\");\n    if (existsSync(legacyPlist) && !existsSync(remnicPlist)) {\n      if (!(await isExistingRegularFileNoFollow(legacyPlist))) return servicesReinstalled;\n      const next = rewriteServiceText(await readFile(legacyPlist, \"utf8\"));\n      await ensureParent(remnicPlist);\n      await writeFile(remnicPlist, next, \"utf8\");\n      await recordCreatedPath(remnicPlist, manifest, persistManifest);\n      try {\n        exec(\"launchctl\", [\"unload\", legacyPlist]);\n      } catch {\n        // Keep migration fail-open when launchd rejects unload.\n      }\n      try {\n        exec(\"launchctl\", [\"load\", \"-w\", remnicPlist]);\n      } catch {\n        // Keep migration fail-open when launchd rejects load.\n      }\n      servicesReinstalled.push(\"ai.remnic.daemon\");\n      logger(\"launchd: ai.engram.daemon unloaded, ai.remnic.daemon installed\");\n    }\n    return servicesReinstalled;\n  }\n\n  if (platform === \"linux\") {\n    const legacyUnit = path.join(homeDir, \".config\", \"systemd\", \"user\", \"engram.service\");\n    const remnicUnit = path.join(homeDir, \".config\", \"systemd\", \"user\", \"remnic.service\");\n    if (existsSync(legacyUnit) && !existsSync(remnicUnit)) {\n      if (!(await isExistingRegularFileNoFollow(legacyUnit))) return servicesReinstalled;\n      const next = rewriteServiceText(await readFile(legacyUnit, \"utf8\"));\n      await ensureParent(remnicUnit);\n      await writeFile(remnicUnit, next, \"utf8\");\n      await recordCreatedPath(remnicUnit, manifest, persistManifest);\n      try {\n        exec(\"systemctl\", [\"--user\", \"stop\", \"engram.service\"]);\n        exec(\"systemctl\", [\"--user\", \"disable\", \"engram.service\"]);\n        exec(\"systemctl\", [\"--user\", \"daemon-reload\"]);\n        exec(\"systemctl\", [\"--user\", \"enable\", \"remnic.service\"]);\n        exec(\"systemctl\", [\"--user\", \"start\", \"remnic.service\"]);\n      } catch {\n        // Keep migration fail-open when systemd is unavailable.\n      }\n      servicesReinstalled.push(\"remnic.service\");\n      logger(\"systemd: engram.service disabled, remnic.service installed\");\n    }\n  }\n\n  return servicesReinstalled;\n}\n\nasync function writeRollbackManifest(homeDir: string, manifest: RollbackManifest): Promise<void> {\n  await ensureParent(rollbackManifestPath(homeDir));\n  await writeFile(\n    rollbackManifestPath(homeDir),\n    `${JSON.stringify(manifest, null, 2)}\\n`,\n    \"utf8\",\n  );\n}\n\nasync function readRollbackManifest(homeDir: string): Promise<RollbackManifest | null> {\n  const target = rollbackManifestPath(homeDir);\n  if (!existsSync(target)) return null;\n  try {\n    return JSON.parse(await readFile(target, \"utf8\")) as RollbackManifest;\n  } catch {\n    return null;\n  }\n}\n\nasync function acquireLock(homeDir: string): Promise<() => Promise<void>> {\n  const target = lockPath(homeDir);\n  await mkdir(remnicRoot(homeDir), { recursive: true });\n  const started = Date.now();\n\n  while (true) {\n    try {\n      const handle = await open(target, \"wx\");\n      await handle.writeFile(`${process.pid}\\n${Date.now()}\\n`, \"utf8\");\n      return async () => {\n        try {\n          await handle.close();\n        } finally {\n          await unlink(target).catch(() => undefined);\n        }\n      };\n    } catch (error) {\n      const code = (error as NodeJS.ErrnoException).code;\n      if (code !== \"EEXIST\") throw error;\n\n      const details = await readFile(target, \"utf8\").catch(() => null);\n      if (details === null) {\n        if (await removeLock(target)) continue;\n      } else {\n        const lines = details.split(\"\\n\");\n        const pid = Number.parseInt(lines[0] ?? \"\", 10);\n        const createdAt = Number.parseInt(lines[1] ?? \"\", 10);\n        const malformed = !Number.isSafeInteger(pid) || pid <= 0 || !Number.isFinite(createdAt);\n        const deadPid = !malformed && !processIsAlive(pid);\n        if (malformed || deadPid) {\n          if (await removeLockIfUnchanged(target, details)) continue;\n        }\n      }\n      if (Date.now() - started > LOCK_TIMEOUT_MS) {\n        throw new Error(`timed out waiting for migration lock: ${target}`);\n      }\n      await new Promise((resolve) => setTimeout(resolve, LOCK_RETRY_MS));\n    }\n  }\n}\n\nasync function removeLockIfUnchanged(target: string, expectedContent: string): Promise<boolean> {\n  const current = await readFile(target, \"utf8\").catch(() => null);\n  if (current !== expectedContent) return false;\n  return removeLock(target);\n}\n\nasync function removeLock(target: string): Promise<boolean> {\n  try {\n    await rm(target, { force: true });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nfunction processIsAlive(pid: number): boolean {\n  try {\n    process.kill(pid, 0);\n    return true;\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"EPERM\") return true;\n    return false;\n  }\n}\n\nexport async function rollbackFromEngramMigration(options?: MigrationOptions): Promise<RollbackResult> {\n  const homeDir = resolveMigrationHome(options);\n  const manifest = await readRollbackManifest(homeDir);\n  const exec = resolveExec(options);\n  const platform = resolvePlatform(options);\n  const restored: string[] = [];\n  const removed: string[] = [];\n\n  if (!manifest) return { restored, removed };\n\n  if (platform === \"darwin\") {\n    const remnicPlist = path.join(homeDir, \"Library\", \"LaunchAgents\", \"ai.remnic.daemon.plist\");\n    if (existsSync(remnicPlist)) {\n      try {\n        exec(\"launchctl\", [\"unload\", remnicPlist]);\n      } catch {\n        // Ignore launchctl rollback failures.\n      }\n    }\n  } else if (platform === \"linux\") {\n    try {\n      exec(\"systemctl\", [\"--user\", \"stop\", \"remnic.service\"]);\n      exec(\"systemctl\", [\"--user\", \"disable\", \"remnic.service\"]);\n    } catch {\n      // Ignore systemd rollback failures.\n    }\n  }\n\n  for (const entry of [...manifest.entries].reverse()) {\n    if (entry.backupPath && existsSync(entry.backupPath)) {\n      await ensureParent(entry.targetPath);\n      await copyFile(entry.backupPath, entry.targetPath);\n      if (isRemnicTokenStorePath(entry.targetPath, homeDir)) {\n        await secureTokenFilePermissions(entry.targetPath);\n      }\n      restored.push(entry.targetPath);\n      continue;\n    }\n    if (entry.createdByMigration && existsSync(entry.targetPath)) {\n      await rm(entry.targetPath, { recursive: true, force: true });\n      removed.push(entry.targetPath);\n    }\n  }\n\n  if (platform === \"linux\") {\n    try {\n      exec(\"systemctl\", [\"--user\", \"daemon-reload\"]);\n    } catch {\n      // Ignore systemd rollback failures after removing unit files.\n    }\n  }\n\n  await rm(markerPath(homeDir), { force: true }).catch(() => undefined);\n  await rm(rollbackManifestPath(homeDir), { force: true }).catch(() => undefined);\n  return { restored, removed };\n}\n\nexport async function migrateFromEngram(options?: MigrationOptions): Promise<MigrationResult> {\n  const homeDir = resolveMigrationHome(options);\n  const cwd = options?.cwd ?? process.cwd();\n  const logger = resolveLogger(options);\n  const copied: string[] = [];\n  let tokensRegenerated = 0;\n  let servicesReinstalled: string[] = [];\n\n  if (existsSync(markerPath(homeDir))) {\n    return {\n      status: \"already-migrated\",\n      copied,\n      tokensRegenerated,\n      servicesReinstalled,\n      rollbackCommand: defaultRollbackCommand(),\n    };\n  }\n\n  const hasLegacyRoot = existsSync(legacyRoot(homeDir));\n  const hasLegacyConfig = existsSync(legacyConfigPath(homeDir));\n  if (!hasLegacyRoot && !hasLegacyConfig) {\n    return {\n      status: \"fresh-install\",\n      copied,\n      tokensRegenerated,\n      servicesReinstalled,\n      rollbackCommand: defaultRollbackCommand(),\n    };\n  }\n\n  const releaseLock = await acquireLock(homeDir);\n  try {\n    if (existsSync(markerPath(homeDir))) {\n      return {\n        status: \"already-migrated\",\n        copied,\n        tokensRegenerated,\n        servicesReinstalled,\n        rollbackCommand: defaultRollbackCommand(),\n      };\n    }\n\n    const manifest: RollbackManifest = await readRollbackManifest(homeDir) ?? {\n      version: 1,\n      createdAt: new Date().toISOString(),\n      entries: [],\n    };\n    const persistManifest = () => writeRollbackManifest(homeDir, manifest);\n\n    logger(\"First run after Engram -> Remnic rename. Migrating...\");\n    await mkdir(remnicRoot(homeDir), { recursive: true });\n    await persistManifest();\n    await copyTreeMissing(legacyRoot(homeDir), remnicRoot(homeDir), copied, manifest, persistManifest);\n    await copyLegacyConfig(homeDir, copied, manifest, persistManifest);\n\n    const legacyTokens = path.join(legacyRoot(homeDir), \"tokens.json\");\n    const remnicTokens = path.join(remnicRoot(homeDir), \"tokens.json\");\n    if (copied.includes(remnicTokens)) {\n      tokensRegenerated += await rewriteTokensIfPresent(remnicTokens);\n    } else {\n      tokensRegenerated += await mergeLegacyTokens(\n        legacyTokens,\n        remnicTokens,\n        homeDir,\n        manifest,\n        true,\n        persistManifest,\n      );\n    }\n    if (existsSync(remnicTokens)) {\n      logger(\"tokens copied to ~/.remnic/tokens.json (legacy prefixes rewritten)\");\n    }\n\n    const updatedConfigs = await updateConnectorConfigs(homeDir, cwd, options, manifest, persistManifest);\n    for (const updated of updatedConfigs) {\n      logger(`Updated connector config: ${updated}`);\n    }\n\n    servicesReinstalled = await migrateServices(homeDir, options, manifest, persistManifest);\n    await writeRollbackManifest(homeDir, manifest);\n    await writeFile(markerPath(homeDir), `${new Date().toISOString()}\\n`, \"utf8\");\n    logger(\"Migration complete. Welcome to Remnic.\");\n\n    return {\n      status: \"migrated\",\n      copied,\n      tokensRegenerated,\n      servicesReinstalled,\n      rollbackCommand: defaultRollbackCommand(),\n    };\n  } finally {\n    await releaseLock();\n  }\n}\n"],"mappings":";;;;;;;;AAAA,SAAS,kBAAkB;AAC3B,OAAO,UAAU;AACjB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;AA+C3B,IAAM,cAAc;AACpB,IAAM,YAAY;AAClB,IAAM,oBAAoB;AAC1B,IAAM,aAAa;AACnB,IAAM,gBAAgB;AACtB,IAAM,kBAAkB;AACxB,IAAM,mBAAmB;AAEzB,SAAS,gBAAgB,SAA6C;AACpE,SAAO,SAAS,YAAY,QAAQ;AACtC;AAEA,SAAS,qBAAqB,SAAoC;AAChE,SAAO,SAAS,WAAW,eAAe;AAC5C;AAEA,SAAS,cAAc,SAAuD;AAC5E,QAAM,OAAO,SAAS,WAAW,CAAC,YAAoB,QAAQ,IAAI,OAAO;AACzE,SAAO,CAAC,YAAoB;AAC1B,QAAI,CAAC,SAAS,MAAO,MAAK,YAAY,OAAO,EAAE;AAAA,EACjD;AACF;AAEA,SAAS,YAAY,SAAuE;AAC1F,SAAO,SAAS,gBAAgB,CAAC,SAAiB,SAAmB;AACnE,UAAM,SAAS,kBAAkB,SAAS,MAAM,EAAE,OAAO,SAAS,CAAC;AACnE,QAAI,OAAO,OAAO;AAChB,YAAM,OAAO;AAAA,IACf;AACA,QAAI,OAAO,WAAW,GAAG;AACvB,YAAM,SAAS,OAAO,WAAW,OAC7B,UAAU,OAAO,UAAU,SAAS,KACpC,aAAa,OAAO,MAAM;AAC9B,YAAM,IAAI,MAAM,6BAA6B,OAAO,IAAI,KAAK,KAAK,GAAG,CAAC,KAAK,MAAM,GAAG;AAAA,IACtF;AAAA,EACF;AACF;AAEA,SAAS,WAAW,SAAyB;AAC3C,SAAO,KAAK,KAAK,SAAS,SAAS;AACrC;AAEA,SAAS,WAAW,SAAyB;AAC3C,SAAO,KAAK,KAAK,SAAS,SAAS;AACrC;AAEA,SAAS,iBAAiB,SAAyB;AACjD,SAAO,KAAK,KAAK,SAAS,WAAW,UAAU,aAAa;AAC9D;AAEA,SAAS,iBAAiB,SAAyB;AACjD,SAAO,KAAK,KAAK,SAAS,WAAW,UAAU,aAAa;AAC9D;AAEA,SAAS,WAAW,SAAyB;AAC3C,SAAO,KAAK,KAAK,WAAW,OAAO,GAAG,WAAW;AACnD;AAEA,SAAS,SAAS,SAAyB;AACzC,SAAO,KAAK,KAAK,WAAW,OAAO,GAAG,SAAS;AACjD;AAEA,SAAS,qBAAqB,SAAyB;AACrD,SAAO,KAAK,KAAK,WAAW,OAAO,GAAG,iBAAiB;AACzD;AAEA,SAAS,WAAW,SAAyB;AAC3C,SAAO,KAAK,KAAK,WAAW,OAAO,GAAG,UAAU;AAClD;AAEA,SAAS,yBAAiC;AACxC,SAAO;AACT;AAEA,eAAe,aAAa,UAAiC;AAC3D,QAAM,MAAM,KAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AACzD;AAEA,eAAe,2BAA2B,UAAiC;AACzE,QAAM,MAAM,UAAU,gBAAgB;AACxC;AAEA,eAAe,mBAAmB,UAAkB,SAAgC;AAClF,QAAM,UAAU,UAAU,SAAS,EAAE,UAAU,QAAQ,MAAM,iBAAiB,CAAC;AAC/E,QAAM,MAAM,UAAU,gBAAgB;AACxC;AAEA,eAAe,oBAAoB,UAAkB,SAAgC;AACnF,QAAM,mBAAmB,UAAU,OAAO;AAC5C;AAEA,SAAS,uBAAuB,UAAkB,SAA0B;AAC1E,SAAO,KAAK,QAAQ,QAAQ,MAAM,KAAK,QAAQ,KAAK,KAAK,WAAW,OAAO,GAAG,aAAa,CAAC;AAC9F;AAEA,eAAe,mBAAmB,UAAoC;AACpE,MAAI;AACF,UAAM,MAAM,QAAQ;AACpB,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU,QAAO;AAC/D,UAAM;AAAA,EACR;AACF;AAEA,eAAe,kCAAkC,UAAkB,OAA8B;AAC/F,QAAM,WAAW,MAAM,MAAM,QAAQ;AACrC,MAAI,SAAS,eAAe,GAAG;AAC7B,UAAM,IAAI,MAAM,GAAG,KAAK,2BAA2B,QAAQ,EAAE;AAAA,EAC/D;AACA,MAAI,CAAC,SAAS,OAAO,GAAG;AACtB,UAAM,IAAI,MAAM,GAAG,KAAK,4BAA4B,QAAQ,EAAE;AAAA,EAChE;AACF;AAEA,eAAe,8BAA8B,UAAoC;AAC/E,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,QAAQ;AACrC,WAAO,SAAS,OAAO,KAAK,CAAC,SAAS,eAAe;AAAA,EACvD,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,SAAU,QAAO;AAC/D,UAAM;AAAA,EACR;AACF;AAEA,eAAe,gBACb,QACA,aACA,QACA,UACA,iBACA,SAAS,MACM;AACf,MAAI,CAAC,WAAW,MAAM,EAAG;AACzB,QAAM,aAAa,MAAM,MAAM,MAAM;AACrC,MAAI,WAAW,eAAe,GAAG;AAC/B,QAAI,QAAQ;AACV,YAAM,IAAI,MAAM,gDAAgD,MAAM,EAAE;AAAA,IAC1E;AACA;AAAA,EACF;AACA,MAAI,WAAW,YAAY,GAAG;AAC5B,UAAM,MAAM,aAAa,EAAE,WAAW,KAAK,CAAC;AAC5C,UAAM,UAAU,MAAM,QAAQ,QAAQ,EAAE,eAAe,KAAK,CAAC;AAC7D,eAAW,SAAS,SAAS;AAC3B,UAAI,MAAM,SAAS,eAAe,MAAM,SAAS,aAAa,MAAM,SAAS,mBAAmB;AAC9F;AAAA,MACF;AACA,YAAM;AAAA,QACJ,KAAK,KAAK,QAAQ,MAAM,IAAI;AAAA,QAC5B,KAAK,KAAK,aAAa,MAAM,IAAI;AAAA,QACjC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA;AAAA,EACF;AAEA,MAAI,MAAM,mBAAmB,WAAW,EAAG;AAC3C,QAAM,aAAa,WAAW;AAC9B,QAAM,SAAS,QAAQ,WAAW;AAClC,QAAM,kBAAkB,aAAa,UAAU,eAAe;AAC9D,SAAO,KAAK,WAAW;AACzB;AAEA,SAAS,kBAAkB,SAAyB;AAClD,SAAO,QACJ,WAAW,YAAY,UAAU,EACjC,WAAW,aAAa,WAAW,EACnC,WAAW,WAAW,SAAS,EAC/B,WAAW,oBAAoB,kBAAkB,EACjD,WAAW,wBAAwB,sBAAsB,EACzD,WAAW,oBAAoB,kBAAkB,EACjD,WAAW,kBAAkB,gBAAgB;AAClD;AAEA,SAAS,kBAAkB,OAAuB;AAChD,SAAO,MAAM,WAAW,SAAS,IAAI,UAAU,MAAM,MAAM,UAAU,MAAM,CAAC,KAAK;AACnF;AAEA,SAAS,kBAAkB,KAA4B;AACrD,MAAI,OAAO,QAAQ,YAAY,QAAQ,KAAM,QAAO,CAAC;AAErD,MAAI,MAAM,QAAS,IAA6B,MAAM,GAAG;AACvD,WAAS,IAA8B,OACpC,OAAO,CAAC,UAA+B;AACtC,UAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,YAAM,YAAY;AAClB,aAAO,OAAO,UAAU,cAAc,YACpC,UAAU,UAAU,SAAS,KAC7B,OAAO,UAAU,UAAU,YAC3B,UAAU,MAAM,SAAS,KACzB,OAAO,UAAU,cAAc,YAC/B,UAAU,UAAU,SAAS;AAAA,IACjC,CAAC,EACA,IAAI,CAAC,WAAW,EAAE,GAAG,MAAM,EAAE;AAAA,EAClC;AAEA,SAAO,OAAO,QAAQ,GAAG,EACtB,OAAO,CAAC,CAAC,KAAK,KAAK,MAAM,QAAQ,YAAY,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,EAC1F,IAAI,CAAC,CAAC,WAAW,KAAK,OAAO;AAAA,IAC5B;AAAA,IACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC;AAAA,EACF,EAAE;AACN;AAEA,SAAS,kBAAkB,OAAkD;AAC3E,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,eAAe,uBAAuB,UAAmC;AACvE,MAAI,CAAC,WAAW,QAAQ,EAAG,QAAO;AAClC,QAAM,kCAAkC,UAAU,oBAAoB;AACtE,QAAM,2BAA2B,QAAQ;AACzC,MAAI;AACJ,MAAI;AACF,UAAM,KAAK,MAAM,MAAM,SAAS,UAAU,MAAM,CAAC;AAAA,EACnD,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,YAAY;AAEhB,MAAI,MAAM,QAAQ,IAAI,MAAM,GAAG;AAC7B,eAAW,SAAS,IAAI,QAA0C;AAChE,UAAI,OAAO,MAAM,UAAU,UAAU;AACnC,cAAM,OAAO,kBAAkB,MAAM,KAAK;AAC1C,YAAI,SAAS,MAAM,OAAO;AACxB,gBAAM,QAAQ;AACd,uBAAa;AAAA,QACf;AAAA,MACF;AAAA,IACF;AAAA,EACF,OAAO;AACL,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC9C,UAAI,OAAO,UAAU,UAAU;AAC7B,cAAM,OAAO,kBAAkB,KAAK;AACpC,YAAI,SAAS,OAAO;AAClB,cAAI,GAAG,IAAI;AACX,uBAAa;AAAA,QACf;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI,YAAY,GAAG;AACjB,UAAM,oBAAoB,UAAU,GAAG,KAAK,UAAU,KAAK,MAAM,CAAC,CAAC;AAAA,CAAI;AAAA,EACzE;AACA,SAAO;AACT;AAEA,eAAe,kBACb,kBACA,kBACA,SACA,UACA,gBACA,iBACiB;AACjB,MAAI,WAAW,gBAAgB,GAAG;AAChC,UAAM,kCAAkC,kBAAkB,2BAA2B;AAAA,EACvF;AACA,MAAI,CAAC,WAAW,gBAAgB,EAAG,QAAO;AAC1C,QAAM,kCAAkC,kBAAkB,oBAAoB;AAC9E,QAAM,2BAA2B,gBAAgB;AACjD,MAAI,CAAC,WAAW,gBAAgB,EAAG,QAAO,uBAAuB,gBAAgB;AAEjF,MAAI;AACJ,MAAI;AACJ,QAAM,iBAAiB,MAAM,SAAS,kBAAkB,MAAM;AAE9D,MAAI;AACF,gBAAY,KAAK,MAAM,cAAc;AACrC,gBAAY,KAAK,MAAM,MAAM,SAAS,kBAAkB,MAAM,CAAC;AAAA,EACjE,QAAQ;AACN,QAAI;AACF,kBAAY,KAAK,MAAM,MAAM,SAAS,kBAAkB,MAAM,CAAC;AAAA,IACjE,QAAQ;AACN,aAAO,uBAAuB,gBAAgB;AAAA,IAChD;AAEA,UAAMA,iBAAgB,kBAAkB,SAAS;AACjD,QAAIC,aAAY;AAChB,UAAM,mBAAmBD,eAAc,IAAI,CAAC,UAAU;AACpD,YAAM,YAAY,kBAAkB,MAAM,KAAK;AAC/C,UAAI,cAAc,MAAM,MAAO,CAAAC,cAAa;AAC5C,aAAO;AAAA,QACL,GAAG;AAAA,QACH,OAAO;AAAA,MACT;AAAA,IACF,CAAC;AAED,QAAI,gBAAgB;AAClB,YAAM,WAAW,kBAAkB,gBAAgB,SAAS,UAAU,eAAe;AAAA,IACvF;AAEA,UAAM;AAAA,MACJ;AAAA,MACA,GAAG,KAAK,UAAU,EAAE,QAAQ,iBAAiB,GAAG,MAAM,CAAC,CAAC;AAAA;AAAA,IAC1D;AACA,WAAOA;AAAA,EACT;AAEA,QAAM,gBAAgB,kBAAkB,SAAS;AACjD,QAAM,gBAAgB,kBAAkB,SAAS;AACjD,QAAM,qBAAqB,IAAI,IAAI,cAAc,IAAI,CAAC,UAAU,MAAM,SAAS,CAAC;AAChF,MAAI,YAAY;AAChB,MAAI,UAAU;AAEd,aAAW,SAAS,eAAe;AACjC,UAAM,YAAY,kBAAkB,MAAM,KAAK;AAC/C,QAAI,cAAc,MAAM,OAAO;AAC7B,YAAM,QAAQ;AACd,mBAAa;AACb,gBAAU;AAAA,IACZ;AAAA,EACF;AAEA,aAAW,SAAS,eAAe;AACjC,UAAM,YAAY,kBAAkB,MAAM,KAAK;AAC/C,QAAI,cAAc,MAAM,OAAO;AAC7B,mBAAa;AAAA,IACf;AACA,QAAI,mBAAmB,IAAI,MAAM,SAAS,EAAG;AAC7C,kBAAc,KAAK,EAAE,GAAG,OAAO,OAAO,UAAU,CAAC;AACjD,uBAAmB,IAAI,MAAM,SAAS;AACtC,cAAU;AAAA,EACZ;AAEA,MAAI,CAAC,QAAS,QAAO;AAErB,MAAI,gBAAgB;AAClB,UAAM,WAAW,kBAAkB,gBAAgB,SAAS,UAAU,eAAe;AAAA,EACvF;AAEA,QAAM;AAAA,IACJ;AAAA,IACA,GAAG,KAAK,UAAU,EAAE,QAAQ,cAAc,GAAG,MAAM,CAAC,CAAC;AAAA;AAAA,EACvD;AACA,SAAO;AACT;AAEA,eAAe,gBACb,YACA,SACA,UACA,iBACkB;AAClB,MAAI,CAAC,WAAW,UAAU,EAAG,QAAO;AACpC,QAAM,aAAa,MAAM,MAAM,UAAU;AACzC,MAAI,WAAW,eAAe,EAAG,QAAO;AACxC,MAAI,CAAC,WAAW,OAAO,GAAG;AACxB,UAAM,QAAQ,IAAI,MAAM,4CAA4C,UAAU,EAAE;AAChF,UAAM,OAAO,WAAW,YAAY,IAAI,WAAW;AACnD,UAAM;AAAA,EACR;AAEA,QAAM,WAAW,MAAM,SAAS,YAAY,MAAM;AAClD,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,QAAQ;AAAA,EAC9B,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,kBAAkB,MAAM,EAAG,QAAO;AAEvC,MAAI,UAAU;AACd,MACE,OAAO,cACP,OAAO,OAAO,eAAe,YAC7B,CAAC,MAAM,QAAQ,OAAO,UAAU,GAChC;AACA,UAAM,UAAU,OAAO;AACvB,QAAI,QAAQ,UAAU,CAAC,QAAQ,QAAQ;AACrC,cAAQ,SAAS,QAAQ;AACzB,aAAO,QAAQ;AACf,gBAAU;AAAA,IACZ;AAAA,EACF;AAEA,QAAM,YAAY,kBAAkB,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AACnE,QAAM,OAAO,GAAG,SAAS;AAAA;AACzB,MAAI,CAAC,WAAW,SAAS,SAAU,QAAO;AAE1C,QAAM,WAAW,YAAY,UAAU,SAAS,UAAU,eAAe;AACzE,QAAM,UAAU,YAAY,MAAM,MAAM;AACxC,SAAO;AACT;AAEA,eAAe,WACb,YACA,iBACA,SACA,UACA,iBACe;AACf,MAAI,SAAS,QAAQ,KAAK,CAAC,UAAU,MAAM,eAAe,cAAc,MAAM,UAAU,GAAG;AACzF;AAAA,EACF;AACA,QAAM,SAAS,WAAW,QAAQ,EAAE,OAAO,UAAU,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AAChF,QAAM,aAAa,KAAK,KAAK,WAAW,OAAO,GAAG,OAAO,GAAG,MAAM,OAAO;AACzE,QAAM,aAAa,UAAU;AAC7B,MAAI,uBAAuB,YAAY,OAAO,GAAG;AAC/C,UAAM,mBAAmB,YAAY,eAAe;AAAA,EACtD,OAAO;AACL,UAAM,gBAAgB,MAAM,KAAK,UAAU,GAAG,OAAO;AACrD,UAAM,UAAU,YAAY,iBAAiB,EAAE,UAAU,QAAQ,MAAM,aAAa,CAAC;AACrF,UAAM,MAAM,YAAY,YAAY;AAAA,EACtC;AACA,WAAS,QAAQ,KAAK,EAAE,YAAY,WAAW,CAAC;AAChD,QAAM,kBAAkB;AAC1B;AAEA,eAAe,kBACb,UACA,UACA,iBACe;AACf,MAAI,SAAS,QAAQ,KAAK,CAAC,UAAU,MAAM,eAAe,QAAQ,EAAG;AACrE,WAAS,QAAQ,KAAK,EAAE,YAAY,UAAU,oBAAoB,KAAK,CAAC;AACxE,QAAM,kBAAkB;AAC1B;AAEA,SAAS,4BAA4B,SAAiB,KAAuB;AAC3E,SAAO;AAAA,IACL,KAAK,KAAK,SAAS,cAAc;AAAA,IACjC,KAAK,KAAK,SAAS,WAAW,WAAW;AAAA,IACzC,KAAK,KAAK,KAAK,YAAY,sBAAsB,WAAW;AAAA,IAC5D,KAAK,KAAK,KAAK,YAAY,gBAAgB,WAAW;AAAA,EACxD;AACF;AAEA,eAAe,uBACb,SACA,KACA,SACA,UACA,iBACmB;AACnB,QAAM,UAAoB,CAAC;AAC3B,QAAM,aAAa,SAAS,wBAAwB,4BAA4B,SAAS,GAAG;AAC5F,aAAW,cAAc,YAAY;AACnC,QAAI,MAAM,gBAAgB,YAAY,SAAS,UAAU,eAAe,GAAG;AACzE,cAAQ,KAAK,UAAU;AAAA,IACzB;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,iBACb,SACA,QACA,UACA,iBACe;AACf,QAAM,SAAS,iBAAiB,OAAO;AACvC,QAAM,cAAc,iBAAiB,OAAO;AAC5C,MAAI,CAAC,WAAW,MAAM,KAAK,WAAW,WAAW,EAAG;AACpD,MAAI,CAAE,MAAM,8BAA8B,MAAM,EAAI;AACpD,QAAM,aAAa,WAAW;AAC9B,QAAM,WAAW,MAAM,SAAS,QAAQ,MAAM;AAC9C,MAAI,OAAO,kBAAkB,QAAQ;AACrC,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,QAAI,kBAAkB,MAAM,KAAK,OAAO,UAAU,CAAC,OAAO,QAAQ;AAChE,aAAO,SAAS,OAAO;AACvB,aAAO,OAAO;AACd,aAAO,KAAK,UAAU,QAAQ,MAAM,CAAC;AAAA,IACvC;AAAA,EACF,QAAQ;AAAA,EAER;AACA,QAAM,UAAU,aAAa,GAAG,KAAK,QAAQ,CAAC;AAAA,GAAM,MAAM;AAC1D,QAAM,kBAAkB,aAAa,UAAU,eAAe;AAC9D,SAAO,KAAK,WAAW;AACzB;AAEA,SAAS,mBAAmB,SAAyB;AACnD,SAAO,kBAAkB,OAAO;AAClC;AAEA,eAAe,gBACb,SACA,SACA,UACA,iBACmB;AACnB,QAAM,SAAS,cAAc,OAAO;AACpC,QAAM,OAAO,YAAY,OAAO;AAChC,QAAM,sBAAgC,CAAC;AACvC,QAAM,WAAW,gBAAgB,OAAO;AAExC,MAAI,aAAa,UAAU;AACzB,UAAM,cAAc,KAAK,KAAK,SAAS,WAAW,gBAAgB,wBAAwB;AAC1F,UAAM,cAAc,KAAK,KAAK,SAAS,WAAW,gBAAgB,wBAAwB;AAC1F,QAAI,WAAW,WAAW,KAAK,CAAC,WAAW,WAAW,GAAG;AACvD,UAAI,CAAE,MAAM,8BAA8B,WAAW,EAAI,QAAO;AAChE,YAAM,OAAO,mBAAmB,MAAM,SAAS,aAAa,MAAM,CAAC;AACnE,YAAM,aAAa,WAAW;AAC9B,YAAM,UAAU,aAAa,MAAM,MAAM;AACzC,YAAM,kBAAkB,aAAa,UAAU,eAAe;AAC9D,UAAI;AACF,aAAK,aAAa,CAAC,UAAU,WAAW,CAAC;AAAA,MAC3C,QAAQ;AAAA,MAER;AACA,UAAI;AACF,aAAK,aAAa,CAAC,QAAQ,MAAM,WAAW,CAAC;AAAA,MAC/C,QAAQ;AAAA,MAER;AACA,0BAAoB,KAAK,kBAAkB;AAC3C,aAAO,gEAAgE;AAAA,IACzE;AACA,WAAO;AAAA,EACT;AAEA,MAAI,aAAa,SAAS;AACxB,UAAM,aAAa,KAAK,KAAK,SAAS,WAAW,WAAW,QAAQ,gBAAgB;AACpF,UAAM,aAAa,KAAK,KAAK,SAAS,WAAW,WAAW,QAAQ,gBAAgB;AACpF,QAAI,WAAW,UAAU,KAAK,CAAC,WAAW,UAAU,GAAG;AACrD,UAAI,CAAE,MAAM,8BAA8B,UAAU,EAAI,QAAO;AAC/D,YAAM,OAAO,mBAAmB,MAAM,SAAS,YAAY,MAAM,CAAC;AAClE,YAAM,aAAa,UAAU;AAC7B,YAAM,UAAU,YAAY,MAAM,MAAM;AACxC,YAAM,kBAAkB,YAAY,UAAU,eAAe;AAC7D,UAAI;AACF,aAAK,aAAa,CAAC,UAAU,QAAQ,gBAAgB,CAAC;AACtD,aAAK,aAAa,CAAC,UAAU,WAAW,gBAAgB,CAAC;AACzD,aAAK,aAAa,CAAC,UAAU,eAAe,CAAC;AAC7C,aAAK,aAAa,CAAC,UAAU,UAAU,gBAAgB,CAAC;AACxD,aAAK,aAAa,CAAC,UAAU,SAAS,gBAAgB,CAAC;AAAA,MACzD,QAAQ;AAAA,MAER;AACA,0BAAoB,KAAK,gBAAgB;AACzC,aAAO,4DAA4D;AAAA,IACrE;AAAA,EACF;AAEA,SAAO;AACT;AAEA,eAAe,sBAAsB,SAAiB,UAA2C;AAC/F,QAAM,aAAa,qBAAqB,OAAO,CAAC;AAChD,QAAM;AAAA,IACJ,qBAAqB,OAAO;AAAA,IAC5B,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC;AAAA;AAAA,IACpC;AAAA,EACF;AACF;AAEA,eAAe,qBAAqB,SAAmD;AACrF,QAAM,SAAS,qBAAqB,OAAO;AAC3C,MAAI,CAAC,WAAW,MAAM,EAAG,QAAO;AAChC,MAAI;AACF,WAAO,KAAK,MAAM,MAAM,SAAS,QAAQ,MAAM,CAAC;AAAA,EAClD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,YAAY,SAA+C;AACxE,QAAM,SAAS,SAAS,OAAO;AAC/B,QAAM,MAAM,WAAW,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;AACpD,QAAM,UAAU,KAAK,IAAI;AAEzB,SAAO,MAAM;AACX,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,QAAQ,IAAI;AACtC,YAAM,OAAO,UAAU,GAAG,QAAQ,GAAG;AAAA,EAAK,KAAK,IAAI,CAAC;AAAA,GAAM,MAAM;AAChE,aAAO,YAAY;AACjB,YAAI;AACF,gBAAM,OAAO,MAAM;AAAA,QACrB,UAAE;AACA,gBAAM,OAAO,MAAM,EAAE,MAAM,MAAM,MAAS;AAAA,QAC5C;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AACd,YAAM,OAAQ,MAAgC;AAC9C,UAAI,SAAS,SAAU,OAAM;AAE7B,YAAM,UAAU,MAAM,SAAS,QAAQ,MAAM,EAAE,MAAM,MAAM,IAAI;AAC/D,UAAI,YAAY,MAAM;AACpB,YAAI,MAAM,WAAW,MAAM,EAAG;AAAA,MAChC,OAAO;AACL,cAAM,QAAQ,QAAQ,MAAM,IAAI;AAChC,cAAM,MAAM,OAAO,SAAS,MAAM,CAAC,KAAK,IAAI,EAAE;AAC9C,cAAM,YAAY,OAAO,SAAS,MAAM,CAAC,KAAK,IAAI,EAAE;AACpD,cAAM,YAAY,CAAC,OAAO,cAAc,GAAG,KAAK,OAAO,KAAK,CAAC,OAAO,SAAS,SAAS;AACtF,cAAM,UAAU,CAAC,aAAa,CAAC,eAAe,GAAG;AACjD,YAAI,aAAa,SAAS;AACxB,cAAI,MAAM,sBAAsB,QAAQ,OAAO,EAAG;AAAA,QACpD;AAAA,MACF;AACA,UAAI,KAAK,IAAI,IAAI,UAAU,iBAAiB;AAC1C,cAAM,IAAI,MAAM,yCAAyC,MAAM,EAAE;AAAA,MACnE;AACA,YAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,aAAa,CAAC;AAAA,IACnE;AAAA,EACF;AACF;AAEA,eAAe,sBAAsB,QAAgB,iBAA2C;AAC9F,QAAM,UAAU,MAAM,SAAS,QAAQ,MAAM,EAAE,MAAM,MAAM,IAAI;AAC/D,MAAI,YAAY,gBAAiB,QAAO;AACxC,SAAO,WAAW,MAAM;AAC1B;AAEA,eAAe,WAAW,QAAkC;AAC1D,MAAI;AACF,UAAM,GAAG,QAAQ,EAAE,OAAO,KAAK,CAAC;AAChC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,eAAe,KAAsB;AAC5C,MAAI;AACF,YAAQ,KAAK,KAAK,CAAC;AACnB,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAK,MAAgC,SAAS,QAAS,QAAO;AAC9D,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,4BAA4B,SAAqD;AACrG,QAAM,UAAU,qBAAqB,OAAO;AAC5C,QAAM,WAAW,MAAM,qBAAqB,OAAO;AACnD,QAAM,OAAO,YAAY,OAAO;AAChC,QAAM,WAAW,gBAAgB,OAAO;AACxC,QAAM,WAAqB,CAAC;AAC5B,QAAM,UAAoB,CAAC;AAE3B,MAAI,CAAC,SAAU,QAAO,EAAE,UAAU,QAAQ;AAE1C,MAAI,aAAa,UAAU;AACzB,UAAM,cAAc,KAAK,KAAK,SAAS,WAAW,gBAAgB,wBAAwB;AAC1F,QAAI,WAAW,WAAW,GAAG;AAC3B,UAAI;AACF,aAAK,aAAa,CAAC,UAAU,WAAW,CAAC;AAAA,MAC3C,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,WAAW,aAAa,SAAS;AAC/B,QAAI;AACF,WAAK,aAAa,CAAC,UAAU,QAAQ,gBAAgB,CAAC;AACtD,WAAK,aAAa,CAAC,UAAU,WAAW,gBAAgB,CAAC;AAAA,IAC3D,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,aAAW,SAAS,CAAC,GAAG,SAAS,OAAO,EAAE,QAAQ,GAAG;AACnD,QAAI,MAAM,cAAc,WAAW,MAAM,UAAU,GAAG;AACpD,YAAM,aAAa,MAAM,UAAU;AACnC,YAAM,SAAS,MAAM,YAAY,MAAM,UAAU;AACjD,UAAI,uBAAuB,MAAM,YAAY,OAAO,GAAG;AACrD,cAAM,2BAA2B,MAAM,UAAU;AAAA,MACnD;AACA,eAAS,KAAK,MAAM,UAAU;AAC9B;AAAA,IACF;AACA,QAAI,MAAM,sBAAsB,WAAW,MAAM,UAAU,GAAG;AAC5D,YAAM,GAAG,MAAM,YAAY,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC3D,cAAQ,KAAK,MAAM,UAAU;AAAA,IAC/B;AAAA,EACF;AAEA,MAAI,aAAa,SAAS;AACxB,QAAI;AACF,WAAK,aAAa,CAAC,UAAU,eAAe,CAAC;AAAA,IAC/C,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,QAAM,GAAG,WAAW,OAAO,GAAG,EAAE,OAAO,KAAK,CAAC,EAAE,MAAM,MAAM,MAAS;AACpE,QAAM,GAAG,qBAAqB,OAAO,GAAG,EAAE,OAAO,KAAK,CAAC,EAAE,MAAM,MAAM,MAAS;AAC9E,SAAO,EAAE,UAAU,QAAQ;AAC7B;AAEA,eAAsB,kBAAkB,SAAsD;AAC5F,QAAM,UAAU,qBAAqB,OAAO;AAC5C,QAAM,MAAM,SAAS,OAAO,QAAQ,IAAI;AACxC,QAAM,SAAS,cAAc,OAAO;AACpC,QAAM,SAAmB,CAAC;AAC1B,MAAI,oBAAoB;AACxB,MAAI,sBAAgC,CAAC;AAErC,MAAI,WAAW,WAAW,OAAO,CAAC,GAAG;AACnC,WAAO;AAAA,MACL,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA,iBAAiB,uBAAuB;AAAA,IAC1C;AAAA,EACF;AAEA,QAAM,gBAAgB,WAAW,WAAW,OAAO,CAAC;AACpD,QAAM,kBAAkB,WAAW,iBAAiB,OAAO,CAAC;AAC5D,MAAI,CAAC,iBAAiB,CAAC,iBAAiB;AACtC,WAAO;AAAA,MACL,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA,iBAAiB,uBAAuB;AAAA,IAC1C;AAAA,EACF;AAEA,QAAM,cAAc,MAAM,YAAY,OAAO;AAC7C,MAAI;AACF,QAAI,WAAW,WAAW,OAAO,CAAC,GAAG;AACnC,aAAO;AAAA,QACL,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,QACA,iBAAiB,uBAAuB;AAAA,MAC1C;AAAA,IACF;AAEA,UAAM,WAA6B,MAAM,qBAAqB,OAAO,KAAK;AAAA,MACxE,SAAS;AAAA,MACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC,SAAS,CAAC;AAAA,IACZ;AACA,UAAM,kBAAkB,MAAM,sBAAsB,SAAS,QAAQ;AAErE,WAAO,uDAAuD;AAC9D,UAAM,MAAM,WAAW,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;AACpD,UAAM,gBAAgB;AACtB,UAAM,gBAAgB,WAAW,OAAO,GAAG,WAAW,OAAO,GAAG,QAAQ,UAAU,eAAe;AACjG,UAAM,iBAAiB,SAAS,QAAQ,UAAU,eAAe;AAEjE,UAAM,eAAe,KAAK,KAAK,WAAW,OAAO,GAAG,aAAa;AACjE,UAAM,eAAe,KAAK,KAAK,WAAW,OAAO,GAAG,aAAa;AACjE,QAAI,OAAO,SAAS,YAAY,GAAG;AACjC,2BAAqB,MAAM,uBAAuB,YAAY;AAAA,IAChE,OAAO;AACL,2BAAqB,MAAM;AAAA,QACzB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,QAAI,WAAW,YAAY,GAAG;AAC5B,aAAO,oEAAoE;AAAA,IAC7E;AAEA,UAAM,iBAAiB,MAAM,uBAAuB,SAAS,KAAK,SAAS,UAAU,eAAe;AACpG,eAAW,WAAW,gBAAgB;AACpC,aAAO,6BAA6B,OAAO,EAAE;AAAA,IAC/C;AAEA,0BAAsB,MAAM,gBAAgB,SAAS,SAAS,UAAU,eAAe;AACvF,UAAM,sBAAsB,SAAS,QAAQ;AAC7C,UAAM,UAAU,WAAW,OAAO,GAAG,IAAG,oBAAI,KAAK,GAAE,YAAY,CAAC;AAAA,GAAM,MAAM;AAC5E,WAAO,wCAAwC;AAE/C,WAAO;AAAA,MACL,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA,iBAAiB,uBAAuB;AAAA,IAC1C;AAAA,EACF,UAAE;AACA,UAAM,YAAY;AAAA,EACpB;AACF;","names":["legacyEntries","rewritten"]}

package/dist/{chunk-65PG43EQ.js → chunk-S7WU3Y3D.js}

@@ -1,6 +1,6 @@
 // src/maintenance/archive-observations.ts
 import path from "path";
-import { mkdir, readdir, readFile, unlink, writeFile } from "fs/promises";
+import { lstat, mkdir, readdir, readFile, realpath, unlink, writeFile } from "fs/promises";
 var DATE_FILE_PATTERN = /^(\d{4})-(\d{2})-(\d{2})\.(jsonl|md)$/;
 function normalizeRetentionDays(value) {
   if (!Number.isFinite(value)) return 30;
@@ -39,16 +39,31 @@ async function listFilesRecursive(root, relPrefix = "") {
 async function collectArchiveCandidates(memoryDir, cutoffTimeMs) {
   const roots = ["transcripts", path.join("state", "tool-usage"), path.join("summaries", "hourly")];
   const out = [];
+  const memoryRoot = path.resolve(memoryDir);
+  const memoryRealRoot = await realpath(memoryRoot).catch(() => memoryRoot);
   for (const relRoot of roots) {
-    const absRoot = path.join(memoryDir, relRoot);
+    const absRoot = path.resolve(memoryRoot, relRoot);
+    const rootInfo = await lstat(absRoot).catch(() => null);
+    if (!rootInfo?.isDirectory() || rootInfo.isSymbolicLink()) continue;
+    const absRootReal = await realpath(absRoot).catch(() => null);
+    if (absRootReal === null) continue;
+    const rootRelative = path.relative(memoryRealRoot, absRootReal);
+    if (rootRelative === ".." || rootRelative.startsWith(`..${path.sep}`) || path.isAbsolute(rootRelative)) {
+      continue;
+    }
     const files = await listFilesRecursive(absRoot);
     for (const fileRel of files) {
       const filename = path.basename(fileRel);
       const parsedDate = extractDateFromFilename(filename);
       if (!parsedDate) continue;
       if (parsedDate.getTime() >= cutoffTimeMs) continue;
+      const absolutePath = path.resolve(absRoot, fileRel);
+      const relativeToMemory = path.relative(memoryRoot, absolutePath);
+      if (relativeToMemory === ".." || relativeToMemory.startsWith(`..${path.sep}`) || path.isAbsolute(relativeToMemory)) {
+        continue;
+      }
       out.push({
-        absolutePath: path.join(absRoot, fileRel),
+        absolutePath,
         relativePath: path.join(relRoot, fileRel)
       });
     }
@@ -78,6 +93,8 @@ async function archiveObservations(options) {
       const archivePath = path.join(archiveRoot, candidate.relativePath);
       const archiveDir = path.dirname(archivePath);
       await mkdir(archiveDir, { recursive: true });
+      const candidateInfo = await lstat(candidate.absolutePath).catch(() => null);
+      if (!candidateInfo?.isFile() || candidateInfo.isSymbolicLink()) continue;
       const raw = await readFile(candidate.absolutePath);
       await writeFile(archivePath, raw);
       await unlink(candidate.absolutePath);
@@ -102,4 +119,4 @@ async function archiveObservations(options) {
 export {
   archiveObservations
 };
-//# sourceMappingURL=chunk-65PG43EQ.js.map
+//# sourceMappingURL=chunk-S7WU3Y3D.js.map

package/dist/chunk-S7WU3Y3D.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/maintenance/archive-observations.ts"],"sourcesContent":["import path from \"node:path\";\nimport { lstat, mkdir, readdir, readFile, realpath, unlink, writeFile } from \"node:fs/promises\";\n\nconst DATE_FILE_PATTERN = /^(\\d{4})-(\\d{2})-(\\d{2})\\.(jsonl|md)$/;\n\nexport interface ArchiveObservationsOptions {\n  memoryDir: string;\n  retentionDays?: number;\n  dryRun?: boolean;\n  now?: Date;\n}\n\nexport interface ArchiveObservationsResult {\n  dryRun: boolean;\n  retentionDays: number;\n  scannedFiles: number;\n  archivedFiles: number;\n  archivedBytes: number;\n  archiveRoot: string;\n  archivedRelativePaths: string[];\n}\n\ninterface CandidateFile {\n  absolutePath: string;\n  relativePath: string;\n}\n\nfunction normalizeRetentionDays(value: number | undefined): number {\n  if (!Number.isFinite(value as number)) return 30;\n  return Math.max(0, Math.floor(value as number));\n}\n\nfunction extractDateFromFilename(name: string): Date | null {\n  const match = DATE_FILE_PATTERN.exec(name);\n  if (!match) return null;\n  const iso = `${match[1]}-${match[2]}-${match[3]}T00:00:00.000Z`;\n  const parsed = new Date(iso);\n  if (Number.isNaN(parsed.getTime())) return null;\n  return parsed;\n}\n\nfunction startOfUtcDay(value: Date): number {\n  return Date.UTC(value.getUTCFullYear(), value.getUTCMonth(), value.getUTCDate());\n}\n\nasync function listFilesRecursive(root: string, relPrefix = \"\"): Promise<string[]> {\n  const out: string[] = [];\n  let entries: Array<{ name: string; isDirectory(): boolean; isFile(): boolean }>;\n  try {\n    entries = (await readdir(root, { withFileTypes: true })) as Array<{\n      name: string;\n      isDirectory(): boolean;\n      isFile(): boolean;\n    }>;\n  } catch {\n    return out;\n  }\n\n  for (const entry of entries) {\n    const rel = relPrefix ? path.join(relPrefix, entry.name) : entry.name;\n    const full = path.join(root, entry.name);\n    if (entry.isDirectory()) {\n      out.push(...(await listFilesRecursive(full, rel)));\n      continue;\n    }\n    if (entry.isFile()) out.push(rel);\n  }\n\n  return out;\n}\n\nasync function collectArchiveCandidates(\n  memoryDir: string,\n  cutoffTimeMs: number,\n): Promise<CandidateFile[]> {\n  const roots = [\"transcripts\", path.join(\"state\", \"tool-usage\"), path.join(\"summaries\", \"hourly\")];\n  const out: CandidateFile[] = [];\n  const memoryRoot = path.resolve(memoryDir);\n  const memoryRealRoot = await realpath(memoryRoot).catch(() => memoryRoot);\n\n  for (const relRoot of roots) {\n    const absRoot = path.resolve(memoryRoot, relRoot);\n    const rootInfo = await lstat(absRoot).catch(() => null);\n    if (!rootInfo?.isDirectory() || rootInfo.isSymbolicLink()) continue;\n    const absRootReal = await realpath(absRoot).catch(() => null);\n    if (absRootReal === null) continue;\n    const rootRelative = path.relative(memoryRealRoot, absRootReal);\n    if (rootRelative === \"..\" || rootRelative.startsWith(`..${path.sep}`) || path.isAbsolute(rootRelative)) {\n      continue;\n    }\n    const files = await listFilesRecursive(absRoot);\n    for (const fileRel of files) {\n      const filename = path.basename(fileRel);\n      const parsedDate = extractDateFromFilename(filename);\n      if (!parsedDate) continue;\n      if (parsedDate.getTime() >= cutoffTimeMs) continue;\n      const absolutePath = path.resolve(absRoot, fileRel);\n      const relativeToMemory = path.relative(memoryRoot, absolutePath);\n      if (\n        relativeToMemory === \"..\" ||\n        relativeToMemory.startsWith(`..${path.sep}`) ||\n        path.isAbsolute(relativeToMemory)\n      ) {\n        continue;\n      }\n      out.push({\n        absolutePath,\n        relativePath: path.join(relRoot, fileRel),\n      });\n    }\n  }\n\n  out.sort((a, b) => a.relativePath.localeCompare(b.relativePath));\n  return out;\n}\n\nexport async function archiveObservations(\n  options: ArchiveObservationsOptions,\n): Promise<ArchiveObservationsResult> {\n  const retentionDays = normalizeRetentionDays(options.retentionDays);\n  const dryRun = options.dryRun !== false;\n  const now = options.now ?? new Date();\n  const cutoffDayStartUtc = startOfUtcDay(\n    new Date(now.getTime() - retentionDays * 24 * 60 * 60 * 1000),\n  );\n  const stamp = now.toISOString().replace(/[-:]/g, \"\").replace(/\\.\\d{3}Z$/, \"Z\");\n  const archiveRoot = path.join(options.memoryDir, \"archive\", \"observations\", stamp);\n  const candidates =\n    retentionDays === 0\n      ? []\n      : await collectArchiveCandidates(\n        options.memoryDir,\n        cutoffDayStartUtc,\n      );\n\n  let archivedFiles = 0;\n  let archivedBytes = 0;\n  const archivedRelativePaths: string[] = [];\n\n  if (!dryRun && candidates.length > 0) {\n    await mkdir(archiveRoot, { recursive: true });\n    for (const candidate of candidates) {\n      const archivePath = path.join(archiveRoot, candidate.relativePath);\n      const archiveDir = path.dirname(archivePath);\n      await mkdir(archiveDir, { recursive: true });\n      const candidateInfo = await lstat(candidate.absolutePath).catch(() => null);\n      if (!candidateInfo?.isFile() || candidateInfo.isSymbolicLink()) continue;\n      const raw = await readFile(candidate.absolutePath);\n      await writeFile(archivePath, raw);\n      await unlink(candidate.absolutePath);\n      archivedFiles += 1;\n      archivedBytes += raw.byteLength;\n      archivedRelativePaths.push(candidate.relativePath);\n    }\n  } else {\n    archivedRelativePaths.push(...candidates.map((c) => c.relativePath));\n  }\n\n  return {\n    dryRun,\n    retentionDays,\n    scannedFiles: candidates.length,\n    archivedFiles,\n    archivedBytes,\n    archiveRoot,\n    archivedRelativePaths,\n  };\n}\n"],"mappings":";AAAA,OAAO,UAAU;AACjB,SAAS,OAAO,OAAO,SAAS,UAAU,UAAU,QAAQ,iBAAiB;AAE7E,IAAM,oBAAoB;AAwB1B,SAAS,uBAAuB,OAAmC;AACjE,MAAI,CAAC,OAAO,SAAS,KAAe,EAAG,QAAO;AAC9C,SAAO,KAAK,IAAI,GAAG,KAAK,MAAM,KAAe,CAAC;AAChD;AAEA,SAAS,wBAAwB,MAA2B;AAC1D,QAAM,QAAQ,kBAAkB,KAAK,IAAI;AACzC,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC;AAC/C,QAAM,SAAS,IAAI,KAAK,GAAG;AAC3B,MAAI,OAAO,MAAM,OAAO,QAAQ,CAAC,EAAG,QAAO;AAC3C,SAAO;AACT;AAEA,SAAS,cAAc,OAAqB;AAC1C,SAAO,KAAK,IAAI,MAAM,eAAe,GAAG,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC;AACjF;AAEA,eAAe,mBAAmB,MAAc,YAAY,IAAuB;AACjF,QAAM,MAAgB,CAAC;AACvB,MAAI;AACJ,MAAI;AACF,cAAW,MAAM,QAAQ,MAAM,EAAE,eAAe,KAAK,CAAC;AAAA,EAKxD,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,aAAW,SAAS,SAAS;AAC3B,UAAM,MAAM,YAAY,KAAK,KAAK,WAAW,MAAM,IAAI,IAAI,MAAM;AACjE,UAAM,OAAO,KAAK,KAAK,MAAM,MAAM,IAAI;AACvC,QAAI,MAAM,YAAY,GAAG;AACvB,UAAI,KAAK,GAAI,MAAM,mBAAmB,MAAM,GAAG,CAAE;AACjD;AAAA,IACF;AACA,QAAI,MAAM,OAAO,EAAG,KAAI,KAAK,GAAG;AAAA,EAClC;AAEA,SAAO;AACT;AAEA,eAAe,yBACb,WACA,cAC0B;AAC1B,QAAM,QAAQ,CAAC,eAAe,KAAK,KAAK,SAAS,YAAY,GAAG,KAAK,KAAK,aAAa,QAAQ,CAAC;AAChG,QAAM,MAAuB,CAAC;AAC9B,QAAM,aAAa,KAAK,QAAQ,SAAS;AACzC,QAAM,iBAAiB,MAAM,SAAS,UAAU,EAAE,MAAM,MAAM,UAAU;AAExE,aAAW,WAAW,OAAO;AAC3B,UAAM,UAAU,KAAK,QAAQ,YAAY,OAAO;AAChD,UAAM,WAAW,MAAM,MAAM,OAAO,EAAE,MAAM,MAAM,IAAI;AACtD,QAAI,CAAC,UAAU,YAAY,KAAK,SAAS,eAAe,EAAG;AAC3D,UAAM,cAAc,MAAM,SAAS,OAAO,EAAE,MAAM,MAAM,IAAI;AAC5D,QAAI,gBAAgB,KAAM;AAC1B,UAAM,eAAe,KAAK,SAAS,gBAAgB,WAAW;AAC9D,QAAI,iBAAiB,QAAQ,aAAa,WAAW,KAAK,KAAK,GAAG,EAAE,KAAK,KAAK,WAAW,YAAY,GAAG;AACtG;AAAA,IACF;AACA,UAAM,QAAQ,MAAM,mBAAmB,OAAO;AAC9C,eAAW,WAAW,OAAO;AAC3B,YAAM,WAAW,KAAK,SAAS,OAAO;AACtC,YAAM,aAAa,wBAAwB,QAAQ;AACnD,UAAI,CAAC,WAAY;AACjB,UAAI,WAAW,QAAQ,KAAK,aAAc;AAC1C,YAAM,eAAe,KAAK,QAAQ,SAAS,OAAO;AAClD,YAAM,mBAAmB,KAAK,SAAS,YAAY,YAAY;AAC/D,UACE,qBAAqB,QACrB,iBAAiB,WAAW,KAAK,KAAK,GAAG,EAAE,KAC3C,KAAK,WAAW,gBAAgB,GAChC;AACA;AAAA,MACF;AACA,UAAI,KAAK;AAAA,QACP;AAAA,QACA,cAAc,KAAK,KAAK,SAAS,OAAO;AAAA,MAC1C,CAAC;AAAA,IACH;AAAA,EACF;AAEA,MAAI,KAAK,CAAC,GAAG,MAAM,EAAE,aAAa,cAAc,EAAE,YAAY,CAAC;AAC/D,SAAO;AACT;AAEA,eAAsB,oBACpB,SACoC;AACpC,QAAM,gBAAgB,uBAAuB,QAAQ,aAAa;AAClE,QAAM,SAAS,QAAQ,WAAW;AAClC,QAAM,MAAM,QAAQ,OAAO,oBAAI,KAAK;AACpC,QAAM,oBAAoB;AAAA,IACxB,IAAI,KAAK,IAAI,QAAQ,IAAI,gBAAgB,KAAK,KAAK,KAAK,GAAI;AAAA,EAC9D;AACA,QAAM,QAAQ,IAAI,YAAY,EAAE,QAAQ,SAAS,EAAE,EAAE,QAAQ,aAAa,GAAG;AAC7E,QAAM,cAAc,KAAK,KAAK,QAAQ,WAAW,WAAW,gBAAgB,KAAK;AACjF,QAAM,aACJ,kBAAkB,IACd,CAAC,IACD,MAAM;AAAA,IACN,QAAQ;AAAA,IACR;AAAA,EACF;AAEJ,MAAI,gBAAgB;AACpB,MAAI,gBAAgB;AACpB,QAAM,wBAAkC,CAAC;AAEzC,MAAI,CAAC,UAAU,WAAW,SAAS,GAAG;AACpC,UAAM,MAAM,aAAa,EAAE,WAAW,KAAK,CAAC;AAC5C,eAAW,aAAa,YAAY;AAClC,YAAM,cAAc,KAAK,KAAK,aAAa,UAAU,YAAY;AACjE,YAAM,aAAa,KAAK,QAAQ,WAAW;AAC3C,YAAM,MAAM,YAAY,EAAE,WAAW,KAAK,CAAC;AAC3C,YAAM,gBAAgB,MAAM,MAAM,UAAU,YAAY,EAAE,MAAM,MAAM,IAAI;AAC1E,UAAI,CAAC,eAAe,OAAO,KAAK,cAAc,eAAe,EAAG;AAChE,YAAM,MAAM,MAAM,SAAS,UAAU,YAAY;AACjD,YAAM,UAAU,aAAa,GAAG;AAChC,YAAM,OAAO,UAAU,YAAY;AACnC,uBAAiB;AACjB,uBAAiB,IAAI;AACrB,4BAAsB,KAAK,UAAU,YAAY;AAAA,IACnD;AAAA,EACF,OAAO;AACL,0BAAsB,KAAK,GAAG,WAAW,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC;AAAA,EACrE;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,cAAc,WAAW;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-SKE7JYKA.js → chunk-SFXKHM7P.js}

@@ -5,7 +5,7 @@ import {
   readPeerInteractionLog,
   readPeerProfile,
   writePeerProfile
-} from "./chunk-4DWOBS2A.js";
+} from "./chunk-PRQJ5ESM.js";
 
 // src/peers/profile-reasoner.ts
 function buildPeerProfileReasonerPrompt(input) {
@@ -347,4 +347,4 @@ export {
   parsePeerProfileReasonerResponse,
   runPeerProfileReasoner
 };
-//# sourceMappingURL=chunk-SKE7JYKA.js.map
+//# sourceMappingURL=chunk-SFXKHM7P.js.map

package/dist/{chunk-HMDCOMYU.js → chunk-SKGV326D.js}

@@ -1,14 +1,14 @@
 import {
   resolveCueAnchorStoreDir,
   validateCueAnchor
-} from "./chunk-C6QPK5GG.js";
+} from "./chunk-FZZ2QTJI.js";
 import {
   throwIfAborted
 } from "./chunk-PVGDJXVK.js";
 import {
   resolveAbstractionNodeStoreDir,
   validateAbstractionNode
-} from "./chunk-NGAVDO7E.js";
+} from "./chunk-OADWQ5CR.js";
 import {
   countRecallTokenOverlap,
   normalizeRecallTokens
@@ -167,4 +167,4 @@ async function searchHarmonicRetrieval(options) {
 export {
   searchHarmonicRetrieval
 };
-//# sourceMappingURL=chunk-HMDCOMYU.js.map
+//# sourceMappingURL=chunk-SKGV326D.js.map

package/dist/chunk-T2PO5MUF.js

@@ -0,0 +1,62 @@
+import {
+  log
+} from "./chunk-2ODBA7MQ.js";
+
+// src/conversation-index/cleanup.ts
+import { lstat, readdir, realpath, rm } from "fs/promises";
+import path from "path";
+async function cleanupConversationChunks(rootDir, retentionDays) {
+  if (!Number.isFinite(retentionDays) || retentionDays <= 0) return;
+  const cutoffMs = Date.now() - retentionDays * 24 * 60 * 60 * 1e3;
+  try {
+    const root = await assertCleanupRoot(rootDir);
+    const sessions = await readdir(rootDir, { withFileTypes: true });
+    for (const s of sessions) {
+      if (!s.isDirectory()) continue;
+      const sessionDir = await assertCleanupChild(root, path.join(rootDir, s.name));
+      const dayDirs = await readdir(sessionDir, { withFileTypes: true });
+      for (const d of dayDirs) {
+        if (!d.isDirectory()) continue;
+        if (!/^\d{4}-\d{2}-\d{2}$/.test(d.name)) continue;
+        const dayMs = (/* @__PURE__ */ new Date(d.name + "T00:00:00.000Z")).getTime();
+        if (!Number.isFinite(dayMs)) continue;
+        if (dayMs < cutoffMs) {
+          await rm(await assertCleanupChild(root, path.join(sessionDir, d.name)), { recursive: true, force: true });
+        }
+      }
+      try {
+        const remaining = await readdir(sessionDir);
+        if (remaining.length === 0) {
+          await rm(await assertCleanupChild(root, sessionDir), { recursive: true, force: true });
+        }
+      } catch {
+      }
+    }
+  } catch (err) {
+    log.debug(`conversation chunk cleanup failed: ${err}`);
+  }
+}
+async function assertCleanupRoot(rootDir) {
+  const stat = await lstat(rootDir);
+  if (stat.isSymbolicLink()) {
+    throw new Error("conversation chunk cleanup root must not be a symlink");
+  }
+  return realpath(rootDir);
+}
+async function assertCleanupChild(rootReal, candidate) {
+  const stat = await lstat(candidate);
+  if (stat.isSymbolicLink()) {
+    throw new Error("conversation chunk cleanup path must not contain symlinks");
+  }
+  const real = await realpath(candidate);
+  const relative = path.relative(rootReal, real);
+  if (relative === "" || !relative.startsWith("..") && !path.isAbsolute(relative)) {
+    return real;
+  }
+  throw new Error("conversation chunk cleanup path escapes index root");
+}
+
+export {
+  cleanupConversationChunks
+};
+//# sourceMappingURL=chunk-T2PO5MUF.js.map

package/dist/chunk-T2PO5MUF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/conversation-index/cleanup.ts"],"sourcesContent":["import { lstat, readdir, realpath, rm } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { log } from \"../logger.js\";\n\n/**\n * Best-effort retention cleanup for conversation chunk docs.\n *\n * Layout (written by indexer.ts):\n *   <root>/<safeSessionKey>/<YYYY-MM-DD>/<chunkId>.md\n *\n * We prune day directories older than retentionDays, and remove empty session dirs.\n */\nexport async function cleanupConversationChunks(\n  rootDir: string,\n  retentionDays: number,\n): Promise<void> {\n  if (!Number.isFinite(retentionDays) || retentionDays <= 0) return;\n\n  const cutoffMs = Date.now() - retentionDays * 24 * 60 * 60 * 1000;\n\n  try {\n    const root = await assertCleanupRoot(rootDir);\n    const sessions = await readdir(rootDir, { withFileTypes: true });\n    for (const s of sessions) {\n      if (!s.isDirectory()) continue;\n      const sessionDir = await assertCleanupChild(root, path.join(rootDir, s.name));\n      const dayDirs = await readdir(sessionDir, { withFileTypes: true });\n\n      for (const d of dayDirs) {\n        if (!d.isDirectory()) continue;\n        // Expect YYYY-MM-DD\n        if (!/^\\d{4}-\\d{2}-\\d{2}$/.test(d.name)) continue;\n        const dayMs = new Date(d.name + \"T00:00:00.000Z\").getTime();\n        if (!Number.isFinite(dayMs)) continue;\n        if (dayMs < cutoffMs) {\n          await rm(await assertCleanupChild(root, path.join(sessionDir, d.name)), { recursive: true, force: true });\n        }\n      }\n\n      // Remove empty session dirs after pruning.\n      try {\n        const remaining = await readdir(sessionDir);\n        if (remaining.length === 0) {\n          await rm(await assertCleanupChild(root, sessionDir), { recursive: true, force: true });\n        }\n      } catch {\n        // ignore\n      }\n    }\n  } catch (err) {\n    log.debug(`conversation chunk cleanup failed: ${err}`);\n  }\n}\n\nasync function assertCleanupRoot(rootDir: string): Promise<string> {\n  const stat = await lstat(rootDir);\n  if (stat.isSymbolicLink()) {\n    throw new Error(\"conversation chunk cleanup root must not be a symlink\");\n  }\n  return realpath(rootDir);\n}\n\nasync function assertCleanupChild(rootReal: string, candidate: string): Promise<string> {\n  const stat = await lstat(candidate);\n  if (stat.isSymbolicLink()) {\n    throw new Error(\"conversation chunk cleanup path must not contain symlinks\");\n  }\n  const real = await realpath(candidate);\n  const relative = path.relative(rootReal, real);\n  if (relative === \"\" || (!relative.startsWith(\"..\") && !path.isAbsolute(relative))) {\n    return real;\n  }\n  throw new Error(\"conversation chunk cleanup path escapes index root\");\n}\n"],"mappings":";;;;;AAAA,SAAS,OAAO,SAAS,UAAU,UAAU;AAC7C,OAAO,UAAU;AAWjB,eAAsB,0BACpB,SACA,eACe;AACf,MAAI,CAAC,OAAO,SAAS,aAAa,KAAK,iBAAiB,EAAG;AAE3D,QAAM,WAAW,KAAK,IAAI,IAAI,gBAAgB,KAAK,KAAK,KAAK;AAE7D,MAAI;AACF,UAAM,OAAO,MAAM,kBAAkB,OAAO;AAC5C,UAAM,WAAW,MAAM,QAAQ,SAAS,EAAE,eAAe,KAAK,CAAC;AAC/D,eAAW,KAAK,UAAU;AACxB,UAAI,CAAC,EAAE,YAAY,EAAG;AACtB,YAAM,aAAa,MAAM,mBAAmB,MAAM,KAAK,KAAK,SAAS,EAAE,IAAI,CAAC;AAC5E,YAAM,UAAU,MAAM,QAAQ,YAAY,EAAE,eAAe,KAAK,CAAC;AAEjE,iBAAW,KAAK,SAAS;AACvB,YAAI,CAAC,EAAE,YAAY,EAAG;AAEtB,YAAI,CAAC,sBAAsB,KAAK,EAAE,IAAI,EAAG;AACzC,cAAM,SAAQ,oBAAI,KAAK,EAAE,OAAO,gBAAgB,GAAE,QAAQ;AAC1D,YAAI,CAAC,OAAO,SAAS,KAAK,EAAG;AAC7B,YAAI,QAAQ,UAAU;AACpB,gBAAM,GAAG,MAAM,mBAAmB,MAAM,KAAK,KAAK,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,QAC1G;AAAA,MACF;AAGA,UAAI;AACF,cAAM,YAAY,MAAM,QAAQ,UAAU;AAC1C,YAAI,UAAU,WAAW,GAAG;AAC1B,gBAAM,GAAG,MAAM,mBAAmB,MAAM,UAAU,GAAG,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,QACvF;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,MAAM,sCAAsC,GAAG,EAAE;AAAA,EACvD;AACF;AAEA,eAAe,kBAAkB,SAAkC;AACjE,QAAM,OAAO,MAAM,MAAM,OAAO;AAChC,MAAI,KAAK,eAAe,GAAG;AACzB,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AACA,SAAO,SAAS,OAAO;AACzB;AAEA,eAAe,mBAAmB,UAAkB,WAAoC;AACtF,QAAM,OAAO,MAAM,MAAM,SAAS;AAClC,MAAI,KAAK,eAAe,GAAG;AACzB,UAAM,IAAI,MAAM,2DAA2D;AAAA,EAC7E;AACA,QAAM,OAAO,MAAM,SAAS,SAAS;AACrC,QAAM,WAAW,KAAK,SAAS,UAAU,IAAI;AAC7C,MAAI,aAAa,MAAO,CAAC,SAAS,WAAW,IAAI,KAAK,CAAC,KAAK,WAAW,QAAQ,GAAI;AACjF,WAAO;AAAA,EACT;AACA,QAAM,IAAI,MAAM,oDAAoD;AACtE;","names":[]}

package/dist/{chunk-C7VW7C3F.js → chunk-TDKQGLJW.js}

@@ -8,10 +8,10 @@ var RerankCache = class {
       this.entries.delete(key);
       return null;
     }
-    return e.rankedIds;
+    return e.rankedIds.slice();
   }
   set(key, rankedIds, ttlMs) {
-    this.entries.set(key, { rankedIds, expiresAtMs: Date.now() + ttlMs });
+    this.entries.set(key, { rankedIds: rankedIds.slice(), expiresAtMs: Date.now() + ttlMs });
   }
 };
 function parseRerankResponse(raw, candidates) {
@@ -114,4 +114,4 @@ export {
   parseRerankResponse,
   rerankLocalOrNoop
 };
-//# sourceMappingURL=chunk-C7VW7C3F.js.map
+//# sourceMappingURL=chunk-TDKQGLJW.js.map

package/dist/chunk-TDKQGLJW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/rerank.ts"],"sourcesContent":["export interface RerankCandidate {\n  id: string;\n  originalIndex: number;\n}\n\nexport interface RerankScore {\n  id: string;\n  score: number;\n}\n\nexport interface RerankCacheEntry {\n  expiresAtMs: number;\n  rankedIds: string[];\n}\n\nexport class RerankCache {\n  private entries = new Map<string, RerankCacheEntry>();\n\n  get(key: string): string[] | null {\n    const e = this.entries.get(key);\n    if (!e) return null;\n    if (Date.now() > e.expiresAtMs) {\n      this.entries.delete(key);\n      return null;\n    }\n    return e.rankedIds.slice();\n  }\n\n  set(key: string, rankedIds: string[], ttlMs: number): void {\n    this.entries.set(key, { rankedIds: rankedIds.slice(), expiresAtMs: Date.now() + ttlMs });\n  }\n}\n\n/**\n * Parse a rerank response (JSON) and return candidates sorted by score.\n *\n * Rules:\n * - Unknown IDs in the response are ignored.\n * - Candidates missing from the response keep relative order after scored ones.\n * - Stable tie-breaker: originalIndex ascending.\n */\nexport function parseRerankResponse(\n  raw: string,\n  candidates: RerankCandidate[],\n): Array<RerankCandidate & { score?: number }> {\n  const byId = new Map<string, RerankCandidate>();\n  for (const c of candidates) byId.set(c.id, c);\n\n  const scores = new Map<string, number>();\n  try {\n    const parsed = JSON.parse(raw) as { scores?: Array<Partial<RerankScore>> };\n    if (Array.isArray(parsed.scores)) {\n      for (const s of parsed.scores) {\n        if (!s || typeof s.id !== \"string\") continue;\n        if (!byId.has(s.id)) continue;\n        if (typeof s.score !== \"number\" || !Number.isFinite(s.score)) continue;\n        scores.set(s.id, s.score);\n      }\n    }\n  } catch {\n    // Ignore parse errors and fall back to original order.\n  }\n\n  const withScore = candidates.map((c) => ({\n    ...c,\n    score: scores.get(c.id),\n  }));\n\n  return withScore.sort((a, b) => {\n    const as = a.score;\n    const bs = b.score;\n    if (typeof as === \"number\" && typeof bs === \"number\") {\n      if (bs !== as) return bs - as;\n      return a.originalIndex - b.originalIndex;\n    }\n    if (typeof as === \"number\") return -1;\n    if (typeof bs === \"number\") return 1;\n    return a.originalIndex - b.originalIndex;\n  });\n}\n\nfunction stableKey(query: string, ids: string[]): string {\n  // Keep it simple and deterministic; this is not a security boundary.\n  return `${query.trim().toLowerCase()}|${ids.join(\",\")}`;\n}\n\nfunction clampSnippet(snippet: string, maxChars: number): string {\n  const s = snippet.replace(/\\s+/g, \" \").trim();\n  return s.length > maxChars ? s.slice(0, maxChars) : s;\n}\n\nexport async function rerankLocalOrNoop(opts: {\n  query: string;\n  candidates: Array<{ id: string; snippet: string }>;\n  local: {\n    chatCompletion: (\n      messages: Array<{ role: string; content: string }>,\n      options?: {\n        maxTokens?: number;\n        temperature?: number;\n        timeoutMs?: number;\n        operation?: string;\n        priority?: \"recall-critical\" | \"background\";\n      },\n    ) => Promise<{ content: string } | null>;\n  };\n  enabled: boolean;\n  timeoutMs: number;\n  maxCandidates: number;\n  cache?: RerankCache;\n  cacheEnabled: boolean;\n  cacheTtlMs: number;\n}): Promise<string[] | null> {\n  if (!opts.enabled) return null;\n\n  const ids = opts.candidates.slice(0, opts.maxCandidates).map((c) => c.id);\n  if (ids.length <= 1) return ids;\n\n  const key = stableKey(opts.query, ids);\n  if (opts.cache && opts.cacheEnabled) {\n    const cached = opts.cache.get(key);\n    if (cached) return cached;\n  }\n\n  const payload = opts.candidates.slice(0, opts.maxCandidates).map((c) => ({\n    id: c.id,\n    snippet: clampSnippet(c.snippet, 400),\n  }));\n\n  const system =\n    \"You are a ranking system. Return JSON only. No markdown, no commentary.\";\n  const user = JSON.stringify(\n    {\n      task: \"rerank\",\n      query: opts.query,\n      candidates: payload,\n      output: {\n        scores: [{ id: \"string\", score: \"number 0-100\" }],\n      },\n      rules: [\n        \"Assign higher score to more relevant candidates.\",\n        \"Prefer durability and direct relevance to the query.\",\n        \"If unsure, keep scores close together.\",\n      ],\n    },\n    null,\n    0,\n  );\n\n  const res = await opts.local.chatCompletion(\n    [\n      { role: \"system\", content: system },\n      { role: \"user\", content: user },\n    ],\n    {\n      maxTokens: 800,\n      temperature: 0.0,\n      timeoutMs: opts.timeoutMs,\n      operation: \"rerank\",\n      priority: \"recall-critical\",\n    },\n  );\n  if (!res?.content) return null;\n\n  const parsed = parseRerankResponse(\n    res.content,\n    ids.map((id, i) => ({ id, originalIndex: i })),\n  );\n  const rankedIds = parsed.map((p) => p.id);\n\n  if (opts.cache && opts.cacheEnabled) {\n    opts.cache.set(key, rankedIds, opts.cacheTtlMs);\n  }\n\n  return rankedIds;\n}\n"],"mappings":";AAeO,IAAM,cAAN,MAAkB;AAAA,EACf,UAAU,oBAAI,IAA8B;AAAA,EAEpD,IAAI,KAA8B;AAChC,UAAM,IAAI,KAAK,QAAQ,IAAI,GAAG;AAC9B,QAAI,CAAC,EAAG,QAAO;AACf,QAAI,KAAK,IAAI,IAAI,EAAE,aAAa;AAC9B,WAAK,QAAQ,OAAO,GAAG;AACvB,aAAO;AAAA,IACT;AACA,WAAO,EAAE,UAAU,MAAM;AAAA,EAC3B;AAAA,EAEA,IAAI,KAAa,WAAqB,OAAqB;AACzD,SAAK,QAAQ,IAAI,KAAK,EAAE,WAAW,UAAU,MAAM,GAAG,aAAa,KAAK,IAAI,IAAI,MAAM,CAAC;AAAA,EACzF;AACF;AAUO,SAAS,oBACd,KACA,YAC6C;AAC7C,QAAM,OAAO,oBAAI,IAA6B;AAC9C,aAAW,KAAK,WAAY,MAAK,IAAI,EAAE,IAAI,CAAC;AAE5C,QAAM,SAAS,oBAAI,IAAoB;AACvC,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,QAAI,MAAM,QAAQ,OAAO,MAAM,GAAG;AAChC,iBAAW,KAAK,OAAO,QAAQ;AAC7B,YAAI,CAAC,KAAK,OAAO,EAAE,OAAO,SAAU;AACpC,YAAI,CAAC,KAAK,IAAI,EAAE,EAAE,EAAG;AACrB,YAAI,OAAO,EAAE,UAAU,YAAY,CAAC,OAAO,SAAS,EAAE,KAAK,EAAG;AAC9D,eAAO,IAAI,EAAE,IAAI,EAAE,KAAK;AAAA,MAC1B;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AAEA,QAAM,YAAY,WAAW,IAAI,CAAC,OAAO;AAAA,IACvC,GAAG;AAAA,IACH,OAAO,OAAO,IAAI,EAAE,EAAE;AAAA,EACxB,EAAE;AAEF,SAAO,UAAU,KAAK,CAAC,GAAG,MAAM;AAC9B,UAAM,KAAK,EAAE;AACb,UAAM,KAAK,EAAE;AACb,QAAI,OAAO,OAAO,YAAY,OAAO,OAAO,UAAU;AACpD,UAAI,OAAO,GAAI,QAAO,KAAK;AAC3B,aAAO,EAAE,gBAAgB,EAAE;AAAA,IAC7B;AACA,QAAI,OAAO,OAAO,SAAU,QAAO;AACnC,QAAI,OAAO,OAAO,SAAU,QAAO;AACnC,WAAO,EAAE,gBAAgB,EAAE;AAAA,EAC7B,CAAC;AACH;AAEA,SAAS,UAAU,OAAe,KAAuB;AAEvD,SAAO,GAAG,MAAM,KAAK,EAAE,YAAY,CAAC,IAAI,IAAI,KAAK,GAAG,CAAC;AACvD;AAEA,SAAS,aAAa,SAAiB,UAA0B;AAC/D,QAAM,IAAI,QAAQ,QAAQ,QAAQ,GAAG,EAAE,KAAK;AAC5C,SAAO,EAAE,SAAS,WAAW,EAAE,MAAM,GAAG,QAAQ,IAAI;AACtD;AAEA,eAAsB,kBAAkB,MAqBX;AAC3B,MAAI,CAAC,KAAK,QAAS,QAAO;AAE1B,QAAM,MAAM,KAAK,WAAW,MAAM,GAAG,KAAK,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE;AACxE,MAAI,IAAI,UAAU,EAAG,QAAO;AAE5B,QAAM,MAAM,UAAU,KAAK,OAAO,GAAG;AACrC,MAAI,KAAK,SAAS,KAAK,cAAc;AACnC,UAAM,SAAS,KAAK,MAAM,IAAI,GAAG;AACjC,QAAI,OAAQ,QAAO;AAAA,EACrB;AAEA,QAAM,UAAU,KAAK,WAAW,MAAM,GAAG,KAAK,aAAa,EAAE,IAAI,CAAC,OAAO;AAAA,IACvE,IAAI,EAAE;AAAA,IACN,SAAS,aAAa,EAAE,SAAS,GAAG;AAAA,EACtC,EAAE;AAEF,QAAM,SACJ;AACF,QAAM,OAAO,KAAK;AAAA,IAChB;AAAA,MACE,MAAM;AAAA,MACN,OAAO,KAAK;AAAA,MACZ,YAAY;AAAA,MACZ,QAAQ;AAAA,QACN,QAAQ,CAAC,EAAE,IAAI,UAAU,OAAO,eAAe,CAAC;AAAA,MAClD;AAAA,MACA,OAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,MAAM,MAAM,KAAK,MAAM;AAAA,IAC3B;AAAA,MACE,EAAE,MAAM,UAAU,SAAS,OAAO;AAAA,MAClC,EAAE,MAAM,QAAQ,SAAS,KAAK;AAAA,IAChC;AAAA,IACA;AAAA,MACE,WAAW;AAAA,MACX,aAAa;AAAA,MACb,WAAW,KAAK;AAAA,MAChB,WAAW;AAAA,MACX,UAAU;AAAA,IACZ;AAAA,EACF;AACA,MAAI,CAAC,KAAK,QAAS,QAAO;AAE1B,QAAM,SAAS;AAAA,IACb,IAAI;AAAA,IACJ,IAAI,IAAI,CAAC,IAAI,OAAO,EAAE,IAAI,eAAe,EAAE,EAAE;AAAA,EAC/C;AACA,QAAM,YAAY,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE;AAExC,MAAI,KAAK,SAAS,KAAK,cAAc;AACnC,SAAK,MAAM,IAAI,KAAK,WAAW,KAAK,UAAU;AAAA,EAChD;AAEA,SAAO;AACT;","names":[]}

package/dist/{chunk-3QKK7QOS.js → chunk-TERNBNJB.js}

@@ -6,7 +6,7 @@ import {
   optionalStringArray,
   recordStoreDay,
   validateStringRecord
-} from "./chunk-DGXUHMOV.js";
+} from "./chunk-A2IYSXDQ.js";
 import {
   listJsonFiles,
   readJsonFile
@@ -73,7 +73,7 @@ async function recordUtilityTelemetryEvent(options) {
   const eventsDir = path.join(rootDir, "events", day);
   const filePath = path.join(eventsDir, `${validated.eventId}.json`);
   await mkdir(eventsDir, { recursive: true });
-  await writeFile(filePath, JSON.stringify(validated, null, 2), "utf8");
+  await writeFile(filePath, JSON.stringify(validated, null, 2), { encoding: "utf8", flag: "wx" });
   return filePath;
 }
 async function readUtilityTelemetryEvents(options) {
@@ -151,4 +151,4 @@ export {
   readUtilityTelemetryEvents,
   getUtilityTelemetryStatus
 };
-//# sourceMappingURL=chunk-3QKK7QOS.js.map
+//# sourceMappingURL=chunk-TERNBNJB.js.map