@remnic/core 1.1.31 → 9.3.516

package/dist/{chunk-NZL6GGQE.js → chunk-HQ6NIBL6.js}

@@ -25,6 +25,73 @@ function makeTraceId(topics) {
   const key = topics.slice().sort().join(",");
   return `trace-${createHash("sha256").update(key).digest("hex").slice(0, 8)}`;
 }
+function isRecord(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function isStringArray(value) {
+  return Array.isArray(value) && value.every((entry) => typeof entry === "string");
+}
+function isStringRecord(value) {
+  return isRecord(value) && Object.values(value).every((entry) => typeof entry === "string");
+}
+function isStringArrayRecord(value) {
+  return isRecord(value) && Object.values(value).every(isStringArray);
+}
+function parseOpenBoxState(value) {
+  if (value === null) return null;
+  if (!isRecord(value)) return null;
+  if (typeof value.id !== "string" || typeof value.createdAt !== "string" || typeof value.lastActivityAt !== "string" || !isStringArray(value.topics) || !isStringArray(value.memoryIds)) {
+    return null;
+  }
+  if (value.goal !== void 0 && typeof value.goal !== "string") return null;
+  if (value.toolsUsed !== void 0 && !isStringArray(value.toolsUsed)) return null;
+  return {
+    id: value.id,
+    createdAt: value.createdAt,
+    lastActivityAt: value.lastActivityAt,
+    topics: value.topics,
+    memoryIds: value.memoryIds,
+    goal: value.goal,
+    toolsUsed: value.toolsUsed
+  };
+}
+function parseTraceIndex(value) {
+  if (!isRecord(value)) return null;
+  if (!isStringArrayRecord(value.traces) || !isStringRecord(value.boxToTrace) || !isStringArrayRecord(value.traceTopics)) {
+    return null;
+  }
+  const traceLastSeen = value.traceLastSeen ?? {};
+  if (!isStringRecord(traceLastSeen)) return null;
+  return {
+    traces: value.traces,
+    boxToTrace: value.boxToTrace,
+    traceTopics: value.traceTopics,
+    traceLastSeen
+  };
+}
+function serializeStringArray(values) {
+  return JSON.stringify(values);
+}
+function parseStringArray(val) {
+  if (!val) return [];
+  try {
+    const parsed = JSON.parse(val);
+    if (Array.isArray(parsed)) {
+      return parsed.filter((entry) => typeof entry === "string");
+    }
+  } catch {
+  }
+  const start = val.indexOf("[");
+  const end = val.lastIndexOf("]");
+  if (start === -1 || end <= start) return [];
+  return val.slice(start + 1, end).split(",").map((s) => stripLegacyQuotes(s.trim())).filter(Boolean);
+}
+function stripLegacyQuotes(value) {
+  if (value.length >= 2 && value.startsWith('"') && value.endsWith('"')) {
+    return value.slice(1, -1);
+  }
+  return value;
+}
 function serializeBoxFrontmatter(fm) {
   const lines = [
     "---",
@@ -33,13 +100,13 @@ function serializeBoxFrontmatter(fm) {
     `createdAt: ${fm.createdAt}`,
     `sealedAt: ${fm.sealedAt}`,
     `sealReason: ${fm.sealReason}`,
-    `topics: [${fm.topics.map((t) => `"${t}"`).join(", ")}]`,
-    `memoryIds: [${fm.memoryIds.map((m) => `"${m}"`).join(", ")}]`
+    `topics: ${serializeStringArray(fm.topics)}`,
+    `memoryIds: ${serializeStringArray(fm.memoryIds)}`
   ];
   if (fm.sessionKey) lines.push(`sessionKey: ${fm.sessionKey}`);
   if (fm.traceId) lines.push(`traceId: ${fm.traceId}`);
   if (fm.goal) lines.push(`goal: ${fm.goal.replace(/[\r\n]+/g, " ")}`);
-  if (fm.toolsUsed?.length) lines.push(`toolsUsed: [${fm.toolsUsed.map((t) => `"${t}"`).join(", ")}]`);
+  if (fm.toolsUsed?.length) lines.push(`toolsUsed: ${serializeStringArray(fm.toolsUsed)}`);
   if (fm.outcome) lines.push(`outcome: ${fm.outcome}`);
   lines.push("---");
   return lines.join("\n");
@@ -54,12 +121,6 @@ function parseBoxFrontmatter(raw) {
     if (colonIdx === -1) continue;
     fm[line.slice(0, colonIdx).trim()] = line.slice(colonIdx + 1).trim();
   }
-  const parseArray = (val) => {
-    if (!val) return [];
-    const m = val.match(/\[(.*)]/);
-    if (!m) return [];
-    return m[1].split(",").map((s) => s.trim().replace(/^"|"$/g, "")).filter(Boolean);
-  };
   const outcome = fm.outcome;
   return {
     id: fm.id ?? "",
@@ -68,11 +129,11 @@ function parseBoxFrontmatter(raw) {
     sealedAt: fm.sealedAt ?? "",
     sealReason: fm.sealReason ?? "forced",
     sessionKey: fm.sessionKey,
-    topics: parseArray(fm.topics),
-    memoryIds: parseArray(fm.memoryIds),
+    topics: parseStringArray(fm.topics),
+    memoryIds: parseStringArray(fm.memoryIds),
     traceId: fm.traceId,
     goal: fm.goal || void 0,
-    toolsUsed: fm.toolsUsed ? parseArray(fm.toolsUsed) : void 0,
+    toolsUsed: fm.toolsUsed ? parseStringArray(fm.toolsUsed) : void 0,
     outcome: outcome && ["success", "failure", "partial", "unknown"].includes(outcome) ? outcome : void 0
   };
 }
@@ -119,27 +180,26 @@ var BoxBuilder = class {
     this.stateLoaded = true;
     try {
       const raw = await readFile(this.openBoxStatePath, "utf-8");
-      this.openBox = JSON.parse(raw);
+      this.openBox = parseOpenBoxState(JSON.parse(raw));
     } catch {
       this.openBox = null;
     }
   }
-  async saveOpenBox() {
+  async writeOpenBoxState(state) {
     await mkdir(this.stateDir, { recursive: true });
-    if (this.openBox) {
-      await writeFile(this.openBoxStatePath, JSON.stringify(this.openBox, null, 2), "utf-8");
-    } else {
-      try {
-        await writeFile(this.openBoxStatePath, "null", "utf-8");
-      } catch {
-      }
-    }
+    await writeFile(this.openBoxStatePath, JSON.stringify(state, null, 2), "utf-8");
+  }
+  async saveOpenBox() {
+    await this.writeOpenBoxState(this.openBox);
   }
   async loadTraceIndex() {
     try {
       const raw = await readFile(this.tracesPath, "utf-8");
-      const parsed = JSON.parse(raw);
-      parsed.traceLastSeen ??= {};
+      const parsed = parseTraceIndex(JSON.parse(raw));
+      if (!parsed) {
+        log.warn("[engram/boxes] Ignoring invalid trace index state");
+        return { traces: {}, boxToTrace: {}, traceTopics: {}, traceLastSeen: {} };
+      }
       return parsed;
     } catch {
       return { traces: {}, boxToTrace: {}, traceTopics: {}, traceLastSeen: {} };
@@ -149,8 +209,10 @@ var BoxBuilder = class {
     try {
       await mkdir(this.stateDir, { recursive: true });
       await writeFile(this.tracesPath, JSON.stringify(idx, null, 2), "utf-8");
+      return true;
     } catch (err) {
       log.warn(`[engram/boxes] Failed to save trace index: ${err.message}`);
+      return false;
     }
   }
   // ── Core logic ────────────────────────────────────────────────────────────
@@ -233,9 +295,9 @@ var BoxBuilder = class {
     await this.loadOpenBox();
     if (!this.openBox) return null;
     const box = this.openBox;
-    this.openBox = null;
     if (box.memoryIds.length === 0 && box.topics.length === 0) {
-      await this.saveOpenBox();
+      await this.writeOpenBoxState(null);
+      this.openBox = null;
       return null;
     }
     const sealedAt = (/* @__PURE__ */ new Date()).toISOString();
@@ -266,7 +328,8 @@ var BoxBuilder = class {
     const filePath = path.join(dir, `${box.id}.md`);
     await writeFile(filePath, content, "utf-8");
     log.debug(`[boxes] sealed box ${box.id} (${reason}): ${box.memoryIds.length} memories, topics=[${box.topics.join(",")}]`);
-    await this.saveOpenBox();
+    await this.writeOpenBoxState(null);
+    this.openBox = null;
     return box.id;
   }
   // ── Trace Weaving ─────────────────────────────────────────────────────────
@@ -304,8 +367,7 @@ var BoxBuilder = class {
     } else {
       idx.traceTopics[traceId] = [...topics];
     }
-    await this.saveTraceIndex(idx);
-    return traceId;
+    return await this.saveTraceIndex(idx) ? traceId : void 0;
   }
   // ── Recall ────────────────────────────────────────────────────────────────
   /**
@@ -372,4 +434,4 @@ export {
   parseBoxFrontmatter,
   BoxBuilder
 };
-//# sourceMappingURL=chunk-NZL6GGQE.js.map
+//# sourceMappingURL=chunk-HQ6NIBL6.js.map

package/dist/chunk-HQ6NIBL6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/boxes.ts"],"sourcesContent":["/**\n * Memory Boxes + Trace Weaving (v8.0 Phase 2A)\n *\n * Implements the Membox concept: a sliding topic window that forms an \"open box\"\n * accumulating related memories. The box is sealed on topic shift or time gap,\n * then written to memory/boxes/YYYY-MM-DD/box-<id>.md.\n *\n * Trace Weaving links recurring topic boxes with a shared traceId so that\n * cross-session continuity on the same topics is preserved and discoverable.\n */\n\nimport { mkdir, writeFile, readFile, readdir } from \"node:fs/promises\";\nimport type { Dirent } from \"node:fs\";\nimport path from \"node:path\";\nimport { createHash } from \"node:crypto\";\nimport { log } from \"./logger.js\";\n\nexport const BOX_DIR = \"boxes\";\nconst STATE_DIR = \"state\";\nconst TRACES_FILE = \"traces.json\";\nconst OPEN_BOX_STATE_FILE = \"open-box.json\";\n\n// ── Types ─────────────────────────────────────────────────────────────────\n\nexport interface BoxFrontmatter {\n  id: string;\n  memoryKind: \"box\";\n  createdAt: string;\n  sealedAt: string;\n  sealReason: SealReason;\n  sessionKey?: string;\n  topics: string[];\n  memoryIds: string[];\n  traceId?: string;\n  /** High-level task goal for this episode (REMem-inspired). */\n  goal?: string;\n  /** Tools invoked during this episode. */\n  toolsUsed?: string[];\n  /** Episode outcome: success, failure, partial, or unknown. */\n  outcome?: \"success\" | \"failure\" | \"partial\" | \"unknown\";\n}\n\nexport type SealReason = \"topic_shift\" | \"time_gap\" | \"max_memories\" | \"forced\" | \"flush\";\n\ninterface OpenBoxState {\n  id: string;\n  createdAt: string;\n  lastActivityAt: string;\n  topics: string[];\n  memoryIds: string[];\n  goal?: string;\n  toolsUsed?: string[];\n}\n\ninterface TraceIndex {\n  /** traceId → list of box IDs */\n  traces: Record<string, string[]>;\n  /** boxId → traceId */\n  boxToTrace: Record<string, string>;\n  /** traceId → canonical topic fingerprint for matching */\n  traceTopics: Record<string, string[]>;\n  /** traceId → ISO timestamp of last box added (for lookback filtering) */\n  traceLastSeen: Record<string, string>;\n}\n\nexport interface BoxBuilderConfig {\n  memoryBoxesEnabled: boolean;\n  traceWeaverEnabled: boolean;\n  /** Jaccard threshold below which topic shift triggers seal (0-1, default 0.35) */\n  boxTopicShiftThreshold: number;\n  /** Time gap in ms before sealing an open box (default 30 min) */\n  boxTimeGapMs: number;\n  /** Max memories in one box before forced seal */\n  boxMaxMemories: number;\n  /** Days back to look for trace links */\n  traceWeaverLookbackDays: number;\n  /** Minimum topic overlap to assign same traceId (0-1, default 0.4) */\n  traceWeaverOverlapThreshold: number;\n}\n\ninterface ExtractionEvent {\n  topics: string[];\n  memoryIds: string[];\n  timestamp: string;\n  goal?: string;\n  toolsUsed?: string[];\n}\n\n// ── Utility ───────────────────────────────────────────────────────────────\n\n/**\n * Jaccard similarity between two topic arrays.\n * Returns 0.0 for empty inputs.\n */\nexport function topicOverlapScore(a: string[], b: string[]): number {\n  if (a.length === 0 || b.length === 0) return 0.0;\n  const setA = new Set(a.map((t) => t.toLowerCase()));\n  const setB = new Set(b.map((t) => t.toLowerCase()));\n  const intersection = [...setA].filter((t) => setB.has(t)).length;\n  const union = new Set([...setA, ...setB]).size;\n  return union === 0 ? 0.0 : intersection / union;\n}\n\nfunction makeBoxId(): string {\n  return `box-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`;\n}\n\nfunction makeTraceId(topics: string[]): string {\n  const key = topics.slice().sort().join(\",\");\n  return `trace-${createHash(\"sha256\").update(key).digest(\"hex\").slice(0, 8)}`;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return Boolean(value) && typeof value === \"object\" && !Array.isArray(value);\n}\n\nfunction isStringArray(value: unknown): value is string[] {\n  return Array.isArray(value) && value.every((entry) => typeof entry === \"string\");\n}\n\nfunction isStringRecord(value: unknown): value is Record<string, string> {\n  return isRecord(value) && Object.values(value).every((entry) => typeof entry === \"string\");\n}\n\nfunction isStringArrayRecord(value: unknown): value is Record<string, string[]> {\n  return isRecord(value) && Object.values(value).every(isStringArray);\n}\n\nfunction parseOpenBoxState(value: unknown): OpenBoxState | null {\n  if (value === null) return null;\n  if (!isRecord(value)) return null;\n  if (\n    typeof value.id !== \"string\" ||\n    typeof value.createdAt !== \"string\" ||\n    typeof value.lastActivityAt !== \"string\" ||\n    !isStringArray(value.topics) ||\n    !isStringArray(value.memoryIds)\n  ) {\n    return null;\n  }\n  if (value.goal !== undefined && typeof value.goal !== \"string\") return null;\n  if (value.toolsUsed !== undefined && !isStringArray(value.toolsUsed)) return null;\n  return {\n    id: value.id,\n    createdAt: value.createdAt,\n    lastActivityAt: value.lastActivityAt,\n    topics: value.topics,\n    memoryIds: value.memoryIds,\n    goal: value.goal,\n    toolsUsed: value.toolsUsed,\n  };\n}\n\nfunction parseTraceIndex(value: unknown): TraceIndex | null {\n  if (!isRecord(value)) return null;\n  if (\n    !isStringArrayRecord(value.traces) ||\n    !isStringRecord(value.boxToTrace) ||\n    !isStringArrayRecord(value.traceTopics)\n  ) {\n    return null;\n  }\n  const traceLastSeen = value.traceLastSeen ?? {};\n  if (!isStringRecord(traceLastSeen)) return null;\n  return {\n    traces: value.traces,\n    boxToTrace: value.boxToTrace,\n    traceTopics: value.traceTopics,\n    traceLastSeen,\n  };\n}\n\n// ── Frontmatter serialization ──────────────────────────────────────────────\n\nfunction serializeStringArray(values: string[]): string {\n  return JSON.stringify(values);\n}\n\nfunction parseStringArray(val: string | undefined): string[] {\n  if (!val) return [];\n  try {\n    const parsed = JSON.parse(val);\n    if (Array.isArray(parsed)) {\n      return parsed.filter((entry): entry is string => typeof entry === \"string\");\n    }\n  } catch {\n    // Fall back to the legacy comma-split parser below.\n  }\n  const start = val.indexOf(\"[\");\n  const end = val.lastIndexOf(\"]\");\n  if (start === -1 || end <= start) return [];\n  return val\n    .slice(start + 1, end)\n    .split(\",\")\n    .map((s) => stripLegacyQuotes(s.trim()))\n    .filter(Boolean);\n}\n\nfunction stripLegacyQuotes(value: string): string {\n  if (value.length >= 2 && value.startsWith(\"\\\"\") && value.endsWith(\"\\\"\")) {\n    return value.slice(1, -1);\n  }\n  return value;\n}\n\nfunction serializeBoxFrontmatter(fm: BoxFrontmatter): string {\n  const lines = [\n    \"---\",\n    `id: ${fm.id}`,\n    `memoryKind: ${fm.memoryKind}`,\n    `createdAt: ${fm.createdAt}`,\n    `sealedAt: ${fm.sealedAt}`,\n    `sealReason: ${fm.sealReason}`,\n    `topics: ${serializeStringArray(fm.topics)}`,\n    `memoryIds: ${serializeStringArray(fm.memoryIds)}`,\n  ];\n  if (fm.sessionKey) lines.push(`sessionKey: ${fm.sessionKey}`);\n  if (fm.traceId) lines.push(`traceId: ${fm.traceId}`);\n  if (fm.goal) lines.push(`goal: ${fm.goal.replace(/[\\r\\n]+/g, \" \")}`);\n  if (fm.toolsUsed?.length) lines.push(`toolsUsed: ${serializeStringArray(fm.toolsUsed)}`);\n  if (fm.outcome) lines.push(`outcome: ${fm.outcome}`);\n  lines.push(\"---\");\n  return lines.join(\"\\n\");\n}\n\nexport function parseBoxFrontmatter(raw: string): BoxFrontmatter | null {\n  const match = raw.match(/^---\\n([\\s\\S]*?)\\n---/);\n  if (!match) return null;\n\n  const fmBlock = match[1];\n  const fm: Record<string, string> = {};\n  for (const line of fmBlock.split(\"\\n\")) {\n    const colonIdx = line.indexOf(\":\");\n    if (colonIdx === -1) continue;\n    fm[line.slice(0, colonIdx).trim()] = line.slice(colonIdx + 1).trim();\n  }\n\n  const outcome = fm.outcome as BoxFrontmatter[\"outcome\"];\n  return {\n    id: fm.id ?? \"\",\n    memoryKind: \"box\",\n    createdAt: fm.createdAt ?? \"\",\n    sealedAt: fm.sealedAt ?? \"\",\n    sealReason: (fm.sealReason ?? \"forced\") as SealReason,\n    sessionKey: fm.sessionKey,\n    topics: parseStringArray(fm.topics),\n    memoryIds: parseStringArray(fm.memoryIds),\n    traceId: fm.traceId,\n    goal: fm.goal || undefined,\n    toolsUsed: fm.toolsUsed ? parseStringArray(fm.toolsUsed) : undefined,\n    outcome: outcome && [\"success\", \"failure\", \"partial\", \"unknown\"].includes(outcome) ? outcome : undefined,\n  };\n}\n\n// ── BoxBuilder ────────────────────────────────────────────────────────────\n\nexport class BoxBuilder {\n  private baseDir: string;\n  private cfg: BoxBuilderConfig;\n  private openBox: OpenBoxState | null = null;\n  private stateLoaded = false;\n  private openBoxMutationChain: Promise<unknown> = Promise.resolve();\n  private traceMutationChain: Promise<unknown> = Promise.resolve();\n\n  constructor(baseDir: string, cfg: BoxBuilderConfig) {\n    this.baseDir = baseDir;\n    this.cfg = cfg;\n  }\n\n  private enqueueOpenBoxMutation<T>(op: () => Promise<T>): Promise<T> {\n    const run = this.openBoxMutationChain.catch(() => {}).then(op);\n    this.openBoxMutationChain = run.catch(() => {});\n    return run;\n  }\n\n  private enqueueTraceMutation<T>(op: () => Promise<T>): Promise<T> {\n    const run = this.traceMutationChain.catch(() => {}).then(op);\n    this.traceMutationChain = run.catch(() => {});\n    return run;\n  }\n\n  private get boxBaseDir(): string {\n    return path.join(this.baseDir, BOX_DIR);\n  }\n\n  private get stateDir(): string {\n    return path.join(this.baseDir, STATE_DIR);\n  }\n\n  private get openBoxStatePath(): string {\n    return path.join(this.stateDir, OPEN_BOX_STATE_FILE);\n  }\n\n  private get tracesPath(): string {\n    return path.join(this.stateDir, TRACES_FILE);\n  }\n\n  // ── State persistence ────────────────────────────────────────────────────\n\n  private async loadOpenBox(): Promise<void> {\n    if (this.stateLoaded) return;\n    this.stateLoaded = true;\n    try {\n      const raw = await readFile(this.openBoxStatePath, \"utf-8\");\n      this.openBox = parseOpenBoxState(JSON.parse(raw));\n    } catch {\n      this.openBox = null;\n    }\n  }\n\n  private async writeOpenBoxState(state: OpenBoxState | null): Promise<void> {\n    await mkdir(this.stateDir, { recursive: true });\n    await writeFile(this.openBoxStatePath, JSON.stringify(state, null, 2), \"utf-8\");\n  }\n\n  private async saveOpenBox(): Promise<void> {\n    await this.writeOpenBoxState(this.openBox);\n  }\n\n  private async loadTraceIndex(): Promise<TraceIndex> {\n    try {\n      const raw = await readFile(this.tracesPath, \"utf-8\");\n      const parsed = parseTraceIndex(JSON.parse(raw));\n      if (!parsed) {\n        log.warn(\"[engram/boxes] Ignoring invalid trace index state\");\n        return { traces: {}, boxToTrace: {}, traceTopics: {}, traceLastSeen: {} };\n      }\n      return parsed;\n    } catch {\n      return { traces: {}, boxToTrace: {}, traceTopics: {}, traceLastSeen: {} };\n    }\n  }\n\n  private async saveTraceIndex(idx: TraceIndex): Promise<boolean> {\n    try {\n      await mkdir(this.stateDir, { recursive: true });\n      await writeFile(this.tracesPath, JSON.stringify(idx, null, 2), \"utf-8\");\n      return true;\n    } catch (err) {\n      log.warn(`[engram/boxes] Failed to save trace index: ${(err as Error).message}`);\n      return false;\n    }\n  }\n\n  // ── Core logic ────────────────────────────────────────────────────────────\n\n  /**\n   * Called after each extraction run.\n   * Decides whether to seal the current open box and/or start a new one.\n   */\n  async onExtraction(event: ExtractionEvent): Promise<void> {\n    await this.enqueueOpenBoxMutation(async () => this.onExtractionUnlocked(event));\n  }\n\n  private async onExtractionUnlocked(event: ExtractionEvent): Promise<void> {\n    if (!this.cfg.memoryBoxesEnabled) return;\n\n    await this.loadOpenBox();\n\n    const newTopics = event.topics.filter(Boolean);\n    const now = new Date(event.timestamp);\n    const nowMs = now.getTime();\n\n    if (this.openBox) {\n      // Check seal conditions\n      const lastActivity = new Date(this.openBox.lastActivityAt).getTime();\n      const timeGapMs = nowMs - lastActivity;\n      const overlap = topicOverlapScore(this.openBox.topics, newTopics);\n      const topicShifted = newTopics.length > 0 && overlap < this.cfg.boxTopicShiftThreshold;\n      const timeExpired = timeGapMs >= this.cfg.boxTimeGapMs;\n      const tooManyMemories =\n        this.openBox.memoryIds.length + event.memoryIds.length > this.cfg.boxMaxMemories;\n\n      if (tooManyMemories) {\n        // Merge topics and add current batch then seal\n        const topicSet = new Set([...this.openBox.topics, ...newTopics]);\n        this.openBox.topics = [...topicSet];\n        this.openBox.memoryIds.push(...event.memoryIds);\n        if (event.toolsUsed?.length) {\n          const toolSet = new Set([...(this.openBox.toolsUsed ?? []), ...event.toolsUsed]);\n          this.openBox.toolsUsed = [...toolSet];\n        }\n        await this.sealCurrentUnlocked(\"max_memories\");\n      } else if (topicShifted) {\n        await this.sealCurrentUnlocked(\"topic_shift\");\n        this.openBox = this.newBox(event, now.toISOString());\n        await this.saveOpenBox();\n      } else if (timeExpired) {\n        await this.sealCurrentUnlocked(\"time_gap\");\n        this.openBox = this.newBox(event, now.toISOString());\n        await this.saveOpenBox();\n      } else {\n        // Accumulate\n        this.openBox.memoryIds.push(...event.memoryIds);\n        // Merge new topics (union)\n        const topicSet = new Set([...this.openBox.topics, ...newTopics]);\n        this.openBox.topics = [...topicSet];\n        this.openBox.lastActivityAt = now.toISOString();\n        // Merge toolsUsed (union)\n        if (event.toolsUsed?.length) {\n          const toolSet = new Set([...(this.openBox.toolsUsed ?? []), ...event.toolsUsed]);\n          this.openBox.toolsUsed = [...toolSet];\n        }\n        await this.saveOpenBox();\n      }\n    } else {\n      // No open box — start one\n      this.openBox = this.newBox(event, now.toISOString());\n      // If this initial batch already exceeds max, seal immediately\n      if (this.openBox.memoryIds.length > this.cfg.boxMaxMemories) {\n        await this.sealCurrentUnlocked(\"max_memories\");\n      } else {\n        await this.saveOpenBox();\n      }\n    }\n  }\n\n  private newBox(event: ExtractionEvent, ts: string): OpenBoxState {\n    return {\n      id: makeBoxId(),\n      createdAt: ts,\n      lastActivityAt: ts,\n      topics: event.topics.filter(Boolean),\n      memoryIds: [...event.memoryIds],\n      goal: event.goal,\n      toolsUsed: event.toolsUsed?.length ? [...event.toolsUsed] : undefined,\n    };\n  }\n\n  /**\n   * Seal the current open box and write it to disk.\n   * Also runs trace weaving if enabled.\n   */\n  async sealCurrent(reason: SealReason): Promise<string | null> {\n    return this.enqueueOpenBoxMutation(async () => this.sealCurrentUnlocked(reason));\n  }\n\n  private async sealCurrentUnlocked(reason: SealReason): Promise<string | null> {\n    await this.loadOpenBox();\n    if (!this.openBox) return null;\n\n    const box = this.openBox;\n\n    if (box.memoryIds.length === 0 && box.topics.length === 0) {\n      await this.writeOpenBoxState(null);\n      this.openBox = null;\n      return null;\n    }\n\n    const sealedAt = new Date().toISOString();\n    const day = sealedAt.slice(0, 10);\n    const dir = path.join(this.boxBaseDir, day);\n    await mkdir(dir, { recursive: true });\n\n    let traceId: string | undefined;\n    if (this.cfg.traceWeaverEnabled && box.topics.length > 0) {\n      traceId = await this.resolveTrace(box.id, box.topics);\n    }\n\n    const fm: BoxFrontmatter = {\n      id: box.id,\n      memoryKind: \"box\",\n      createdAt: box.createdAt,\n      sealedAt,\n      sealReason: reason,\n      topics: box.topics,\n      memoryIds: box.memoryIds,\n      traceId,\n      goal: box.goal,\n      toolsUsed: box.toolsUsed?.length ? box.toolsUsed : undefined,\n      outcome: \"unknown\",\n    };\n\n    const content = `${serializeBoxFrontmatter(fm)}\\n\\n<!-- Topics: ${box.topics.join(\", \")} | Memories: ${box.memoryIds.length} -->\\n`;\n    const filePath = path.join(dir, `${box.id}.md`);\n    await writeFile(filePath, content, \"utf-8\");\n    log.debug(`[boxes] sealed box ${box.id} (${reason}): ${box.memoryIds.length} memories, topics=[${box.topics.join(\",\")}]`);\n\n    await this.writeOpenBoxState(null);\n    this.openBox = null;\n    return box.id;\n  }\n\n  // ── Trace Weaving ─────────────────────────────────────────────────────────\n\n  /**\n   * Find an existing trace that matches box topics, or create a new trace.\n   * Returns the traceId to assign to this box.\n   */\n  private async resolveTrace(boxId: string, topics: string[]): Promise<string | undefined> {\n    return this.enqueueTraceMutation(async () => this.resolveTraceUnlocked(boxId, topics));\n  }\n\n  private async resolveTraceUnlocked(boxId: string, topics: string[]): Promise<string | undefined> {\n    const idx = await this.loadTraceIndex();\n\n    // Filter to traces active within the lookback window\n    const lookbackMs = this.cfg.traceWeaverLookbackDays * 24 * 60 * 60 * 1000;\n    const cutoff = new Date(Date.now() - lookbackMs);\n\n    let bestTraceId: string | undefined;\n    let bestScore = 0;\n\n    for (const [tid, traceTopics] of Object.entries(idx.traceTopics)) {\n      const lastSeen = idx.traceLastSeen[tid];\n      if (lastSeen && new Date(lastSeen) < cutoff) continue; // outside lookback window\n      const score = topicOverlapScore(topics, traceTopics);\n      if (score >= this.cfg.traceWeaverOverlapThreshold && score > bestScore) {\n        bestScore = score;\n        bestTraceId = tid;\n      }\n    }\n\n    const traceId = bestTraceId ?? makeTraceId(topics);\n    const now = new Date().toISOString();\n\n    // Update trace index\n    if (!idx.traces[traceId]) idx.traces[traceId] = [];\n    idx.traces[traceId].push(boxId);\n    idx.boxToTrace[boxId] = traceId;\n    idx.traceLastSeen[traceId] = now;\n\n    // Update canonical topics for this trace (merge)\n    if (idx.traceTopics[traceId]) {\n      const merged = new Set([...idx.traceTopics[traceId], ...topics]);\n      idx.traceTopics[traceId] = [...merged];\n    } else {\n      idx.traceTopics[traceId] = [...topics];\n    }\n\n    return (await this.saveTraceIndex(idx)) ? traceId : undefined;\n  }\n\n  // ── Recall ────────────────────────────────────────────────────────────────\n\n  /**\n   * Read all sealed boxes from the last N days for recall injection.\n   */\n  async readRecentBoxes(days: number): Promise<BoxFrontmatter[]> {\n    const cutoff = new Date(Date.now() - days * 24 * 60 * 60 * 1000);\n    const cutoffDateStr = cutoff.toISOString().slice(0, 10); // \"YYYY-MM-DD\"\n\n    let topEntries: Dirent<string>[];\n    try {\n      topEntries = await readdir(this.boxBaseDir, { withFileTypes: true, encoding: \"utf-8\" });\n    } catch {\n      return [];\n    }\n\n    // Filter day directories by name (YYYY-MM-DD) — skip dirs older than cutoff\n    // without reading a single file from them.\n    const recentDirs = topEntries\n      .filter((e) => e.isDirectory() && /^\\d{4}-\\d{2}-\\d{2}$/.test(e.name) && e.name >= cutoffDateStr)\n      .map((e) => path.join(this.boxBaseDir, e.name));\n\n    // Also include legacy flat entries at the root level (non-date dirs and .md files)\n    const legacyEntries = topEntries.filter(\n      (e) => !e.isDirectory() || !/^\\d{4}-\\d{2}-\\d{2}$/.test(e.name),\n    );\n\n    // Read all files in each recent day directory in parallel (per dir)\n    const boxes: BoxFrontmatter[] = [];\n\n    const readDir = async (dir: string) => {\n      let files: string[];\n      try {\n        files = (await readdir(dir)).filter((f) => f.endsWith(\".md\"));\n      } catch {\n        return;\n      }\n      const results = await Promise.all(\n        files.map(async (f) => {\n          try {\n            const raw = await readFile(path.join(dir, f), \"utf-8\");\n            const parsed = parseBoxFrontmatter(raw);\n            return parsed && new Date(parsed.sealedAt) >= cutoff ? parsed : null;\n          } catch {\n            return null;\n          }\n        }),\n      );\n      for (const r of results) {\n        if (r !== null) boxes.push(r);\n      }\n    };\n\n    // Day dirs in parallel\n    await Promise.all(recentDirs.map(readDir));\n\n    // Legacy non-date entries (walk sub-dirs sequentially but read files in parallel)\n    for (const e of legacyEntries) {\n      const full = path.join(this.boxBaseDir, e.name);\n      if (e.isDirectory()) {\n        await readDir(full);\n      } else if (e.name.endsWith(\".md\")) {\n        try {\n          const raw = await readFile(full, \"utf-8\");\n          const parsed = parseBoxFrontmatter(raw);\n          if (parsed && new Date(parsed.sealedAt) >= cutoff) boxes.push(parsed);\n        } catch { /* corrupt file — skip */ }\n      }\n    }\n\n    // Sort newest-first so slice(0, N) gives the most recent boxes\n    boxes.sort((a, b) => new Date(b.sealedAt).getTime() - new Date(a.sealedAt).getTime());\n    return boxes;\n  }\n}\n"],"mappings":";;;;;AAWA,SAAS,OAAO,WAAW,UAAU,eAAe;AAEpD,OAAO,UAAU;AACjB,SAAS,kBAAkB;AAGpB,IAAM,UAAU;AACvB,IAAM,YAAY;AAClB,IAAM,cAAc;AACpB,IAAM,sBAAsB;AA0ErB,SAAS,kBAAkB,GAAa,GAAqB;AAClE,MAAI,EAAE,WAAW,KAAK,EAAE,WAAW,EAAG,QAAO;AAC7C,QAAM,OAAO,IAAI,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAClD,QAAM,OAAO,IAAI,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAClD,QAAM,eAAe,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,EAAE;AAC1D,QAAM,SAAQ,oBAAI,IAAI,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC,GAAE;AAC1C,SAAO,UAAU,IAAI,IAAM,eAAe;AAC5C;AAEA,SAAS,YAAoB;AAC3B,SAAO,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AACpE;AAEA,SAAS,YAAY,QAA0B;AAC7C,QAAM,MAAM,OAAO,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG;AAC1C,SAAO,SAAS,WAAW,QAAQ,EAAE,OAAO,GAAG,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,CAAC,CAAC;AAC5E;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,QAAQ,KAAK,KAAK,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,cAAc,OAAmC;AACxD,SAAO,MAAM,QAAQ,KAAK,KAAK,MAAM,MAAM,CAAC,UAAU,OAAO,UAAU,QAAQ;AACjF;AAEA,SAAS,eAAe,OAAiD;AACvE,SAAO,SAAS,KAAK,KAAK,OAAO,OAAO,KAAK,EAAE,MAAM,CAAC,UAAU,OAAO,UAAU,QAAQ;AAC3F;AAEA,SAAS,oBAAoB,OAAmD;AAC9E,SAAO,SAAS,KAAK,KAAK,OAAO,OAAO,KAAK,EAAE,MAAM,aAAa;AACpE;AAEA,SAAS,kBAAkB,OAAqC;AAC9D,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAC7B,MACE,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,cAAc,YAC3B,OAAO,MAAM,mBAAmB,YAChC,CAAC,cAAc,MAAM,MAAM,KAC3B,CAAC,cAAc,MAAM,SAAS,GAC9B;AACA,WAAO;AAAA,EACT;AACA,MAAI,MAAM,SAAS,UAAa,OAAO,MAAM,SAAS,SAAU,QAAO;AACvE,MAAI,MAAM,cAAc,UAAa,CAAC,cAAc,MAAM,SAAS,EAAG,QAAO;AAC7E,SAAO;AAAA,IACL,IAAI,MAAM;AAAA,IACV,WAAW,MAAM;AAAA,IACjB,gBAAgB,MAAM;AAAA,IACtB,QAAQ,MAAM;AAAA,IACd,WAAW,MAAM;AAAA,IACjB,MAAM,MAAM;AAAA,IACZ,WAAW,MAAM;AAAA,EACnB;AACF;AAEA,SAAS,gBAAgB,OAAmC;AAC1D,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAC7B,MACE,CAAC,oBAAoB,MAAM,MAAM,KACjC,CAAC,eAAe,MAAM,UAAU,KAChC,CAAC,oBAAoB,MAAM,WAAW,GACtC;AACA,WAAO;AAAA,EACT;AACA,QAAM,gBAAgB,MAAM,iBAAiB,CAAC;AAC9C,MAAI,CAAC,eAAe,aAAa,EAAG,QAAO;AAC3C,SAAO;AAAA,IACL,QAAQ,MAAM;AAAA,IACd,YAAY,MAAM;AAAA,IAClB,aAAa,MAAM;AAAA,IACnB;AAAA,EACF;AACF;AAIA,SAAS,qBAAqB,QAA0B;AACtD,SAAO,KAAK,UAAU,MAAM;AAC9B;AAEA,SAAS,iBAAiB,KAAmC;AAC3D,MAAI,CAAC,IAAK,QAAO,CAAC;AAClB,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,QAAI,MAAM,QAAQ,MAAM,GAAG;AACzB,aAAO,OAAO,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ;AAAA,IAC5E;AAAA,EACF,QAAQ;AAAA,EAER;AACA,QAAM,QAAQ,IAAI,QAAQ,GAAG;AAC7B,QAAM,MAAM,IAAI,YAAY,GAAG;AAC/B,MAAI,UAAU,MAAM,OAAO,MAAO,QAAO,CAAC;AAC1C,SAAO,IACJ,MAAM,QAAQ,GAAG,GAAG,EACpB,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,kBAAkB,EAAE,KAAK,CAAC,CAAC,EACtC,OAAO,OAAO;AACnB;AAEA,SAAS,kBAAkB,OAAuB;AAChD,MAAI,MAAM,UAAU,KAAK,MAAM,WAAW,GAAI,KAAK,MAAM,SAAS,GAAI,GAAG;AACvE,WAAO,MAAM,MAAM,GAAG,EAAE;AAAA,EAC1B;AACA,SAAO;AACT;AAEA,SAAS,wBAAwB,IAA4B;AAC3D,QAAM,QAAQ;AAAA,IACZ;AAAA,IACA,OAAO,GAAG,EAAE;AAAA,IACZ,eAAe,GAAG,UAAU;AAAA,IAC5B,cAAc,GAAG,SAAS;AAAA,IAC1B,aAAa,GAAG,QAAQ;AAAA,IACxB,eAAe,GAAG,UAAU;AAAA,IAC5B,WAAW,qBAAqB,GAAG,MAAM,CAAC;AAAA,IAC1C,cAAc,qBAAqB,GAAG,SAAS,CAAC;AAAA,EAClD;AACA,MAAI,GAAG,WAAY,OAAM,KAAK,eAAe,GAAG,UAAU,EAAE;AAC5D,MAAI,GAAG,QAAS,OAAM,KAAK,YAAY,GAAG,OAAO,EAAE;AACnD,MAAI,GAAG,KAAM,OAAM,KAAK,SAAS,GAAG,KAAK,QAAQ,YAAY,GAAG,CAAC,EAAE;AACnE,MAAI,GAAG,WAAW,OAAQ,OAAM,KAAK,cAAc,qBAAqB,GAAG,SAAS,CAAC,EAAE;AACvF,MAAI,GAAG,QAAS,OAAM,KAAK,YAAY,GAAG,OAAO,EAAE;AACnD,QAAM,KAAK,KAAK;AAChB,SAAO,MAAM,KAAK,IAAI;AACxB;AAEO,SAAS,oBAAoB,KAAoC;AACtE,QAAM,QAAQ,IAAI,MAAM,uBAAuB;AAC/C,MAAI,CAAC,MAAO,QAAO;AAEnB,QAAM,UAAU,MAAM,CAAC;AACvB,QAAM,KAA6B,CAAC;AACpC,aAAW,QAAQ,QAAQ,MAAM,IAAI,GAAG;AACtC,UAAM,WAAW,KAAK,QAAQ,GAAG;AACjC,QAAI,aAAa,GAAI;AACrB,OAAG,KAAK,MAAM,GAAG,QAAQ,EAAE,KAAK,CAAC,IAAI,KAAK,MAAM,WAAW,CAAC,EAAE,KAAK;AAAA,EACrE;AAEA,QAAM,UAAU,GAAG;AACnB,SAAO;AAAA,IACL,IAAI,GAAG,MAAM;AAAA,IACb,YAAY;AAAA,IACZ,WAAW,GAAG,aAAa;AAAA,IAC3B,UAAU,GAAG,YAAY;AAAA,IACzB,YAAa,GAAG,cAAc;AAAA,IAC9B,YAAY,GAAG;AAAA,IACf,QAAQ,iBAAiB,GAAG,MAAM;AAAA,IAClC,WAAW,iBAAiB,GAAG,SAAS;AAAA,IACxC,SAAS,GAAG;AAAA,IACZ,MAAM,GAAG,QAAQ;AAAA,IACjB,WAAW,GAAG,YAAY,iBAAiB,GAAG,SAAS,IAAI;AAAA,IAC3D,SAAS,WAAW,CAAC,WAAW,WAAW,WAAW,SAAS,EAAE,SAAS,OAAO,IAAI,UAAU;AAAA,EACjG;AACF;AAIO,IAAM,aAAN,MAAiB;AAAA,EACd;AAAA,EACA;AAAA,EACA,UAA+B;AAAA,EAC/B,cAAc;AAAA,EACd,uBAAyC,QAAQ,QAAQ;AAAA,EACzD,qBAAuC,QAAQ,QAAQ;AAAA,EAE/D,YAAY,SAAiB,KAAuB;AAClD,SAAK,UAAU;AACf,SAAK,MAAM;AAAA,EACb;AAAA,EAEQ,uBAA0B,IAAkC;AAClE,UAAM,MAAM,KAAK,qBAAqB,MAAM,MAAM;AAAA,IAAC,CAAC,EAAE,KAAK,EAAE;AAC7D,SAAK,uBAAuB,IAAI,MAAM,MAAM;AAAA,IAAC,CAAC;AAC9C,WAAO;AAAA,EACT;AAAA,EAEQ,qBAAwB,IAAkC;AAChE,UAAM,MAAM,KAAK,mBAAmB,MAAM,MAAM;AAAA,IAAC,CAAC,EAAE,KAAK,EAAE;AAC3D,SAAK,qBAAqB,IAAI,MAAM,MAAM;AAAA,IAAC,CAAC;AAC5C,WAAO;AAAA,EACT;AAAA,EAEA,IAAY,aAAqB;AAC/B,WAAO,KAAK,KAAK,KAAK,SAAS,OAAO;AAAA,EACxC;AAAA,EAEA,IAAY,WAAmB;AAC7B,WAAO,KAAK,KAAK,KAAK,SAAS,SAAS;AAAA,EAC1C;AAAA,EAEA,IAAY,mBAA2B;AACrC,WAAO,KAAK,KAAK,KAAK,UAAU,mBAAmB;AAAA,EACrD;AAAA,EAEA,IAAY,aAAqB;AAC/B,WAAO,KAAK,KAAK,KAAK,UAAU,WAAW;AAAA,EAC7C;AAAA;AAAA,EAIA,MAAc,cAA6B;AACzC,QAAI,KAAK,YAAa;AACtB,SAAK,cAAc;AACnB,QAAI;AACF,YAAM,MAAM,MAAM,SAAS,KAAK,kBAAkB,OAAO;AACzD,WAAK,UAAU,kBAAkB,KAAK,MAAM,GAAG,CAAC;AAAA,IAClD,QAAQ;AACN,WAAK,UAAU;AAAA,IACjB;AAAA,EACF;AAAA,EAEA,MAAc,kBAAkB,OAA2C;AACzE,UAAM,MAAM,KAAK,UAAU,EAAE,WAAW,KAAK,CAAC;AAC9C,UAAM,UAAU,KAAK,kBAAkB,KAAK,UAAU,OAAO,MAAM,CAAC,GAAG,OAAO;AAAA,EAChF;AAAA,EAEA,MAAc,cAA6B;AACzC,UAAM,KAAK,kBAAkB,KAAK,OAAO;AAAA,EAC3C;AAAA,EAEA,MAAc,iBAAsC;AAClD,QAAI;AACF,YAAM,MAAM,MAAM,SAAS,KAAK,YAAY,OAAO;AACnD,YAAM,SAAS,gBAAgB,KAAK,MAAM,GAAG,CAAC;AAC9C,UAAI,CAAC,QAAQ;AACX,YAAI,KAAK,mDAAmD;AAC5D,eAAO,EAAE,QAAQ,CAAC,GAAG,YAAY,CAAC,GAAG,aAAa,CAAC,GAAG,eAAe,CAAC,EAAE;AAAA,MAC1E;AACA,aAAO;AAAA,IACT,QAAQ;AACN,aAAO,EAAE,QAAQ,CAAC,GAAG,YAAY,CAAC,GAAG,aAAa,CAAC,GAAG,eAAe,CAAC,EAAE;AAAA,IAC1E;AAAA,EACF;AAAA,EAEA,MAAc,eAAe,KAAmC;AAC9D,QAAI;AACF,YAAM,MAAM,KAAK,UAAU,EAAE,WAAW,KAAK,CAAC;AAC9C,YAAM,UAAU,KAAK,YAAY,KAAK,UAAU,KAAK,MAAM,CAAC,GAAG,OAAO;AACtE,aAAO;AAAA,IACT,SAAS,KAAK;AACZ,UAAI,KAAK,8CAA+C,IAAc,OAAO,EAAE;AAC/E,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,aAAa,OAAuC;AACxD,UAAM,KAAK,uBAAuB,YAAY,KAAK,qBAAqB,KAAK,CAAC;AAAA,EAChF;AAAA,EAEA,MAAc,qBAAqB,OAAuC;AACxE,QAAI,CAAC,KAAK,IAAI,mBAAoB;AAElC,UAAM,KAAK,YAAY;AAEvB,UAAM,YAAY,MAAM,OAAO,OAAO,OAAO;AAC7C,UAAM,MAAM,IAAI,KAAK,MAAM,SAAS;AACpC,UAAM,QAAQ,IAAI,QAAQ;AAE1B,QAAI,KAAK,SAAS;AAEhB,YAAM,eAAe,IAAI,KAAK,KAAK,QAAQ,cAAc,EAAE,QAAQ;AACnE,YAAM,YAAY,QAAQ;AAC1B,YAAM,UAAU,kBAAkB,KAAK,QAAQ,QAAQ,SAAS;AAChE,YAAM,eAAe,UAAU,SAAS,KAAK,UAAU,KAAK,IAAI;AAChE,YAAM,cAAc,aAAa,KAAK,IAAI;AAC1C,YAAM,kBACJ,KAAK,QAAQ,UAAU,SAAS,MAAM,UAAU,SAAS,KAAK,IAAI;AAEpE,UAAI,iBAAiB;AAEnB,cAAM,WAAW,oBAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,QAAQ,GAAG,SAAS,CAAC;AAC/D,aAAK,QAAQ,SAAS,CAAC,GAAG,QAAQ;AAClC,aAAK,QAAQ,UAAU,KAAK,GAAG,MAAM,SAAS;AAC9C,YAAI,MAAM,WAAW,QAAQ;AAC3B,gBAAM,UAAU,oBAAI,IAAI,CAAC,GAAI,KAAK,QAAQ,aAAa,CAAC,GAAI,GAAG,MAAM,SAAS,CAAC;AAC/E,eAAK,QAAQ,YAAY,CAAC,GAAG,OAAO;AAAA,QACtC;AACA,cAAM,KAAK,oBAAoB,cAAc;AAAA,MAC/C,WAAW,cAAc;AACvB,cAAM,KAAK,oBAAoB,aAAa;AAC5C,aAAK,UAAU,KAAK,OAAO,OAAO,IAAI,YAAY,CAAC;AACnD,cAAM,KAAK,YAAY;AAAA,MACzB,WAAW,aAAa;AACtB,cAAM,KAAK,oBAAoB,UAAU;AACzC,aAAK,UAAU,KAAK,OAAO,OAAO,IAAI,YAAY,CAAC;AACnD,cAAM,KAAK,YAAY;AAAA,MACzB,OAAO;AAEL,aAAK,QAAQ,UAAU,KAAK,GAAG,MAAM,SAAS;AAE9C,cAAM,WAAW,oBAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,QAAQ,GAAG,SAAS,CAAC;AAC/D,aAAK,QAAQ,SAAS,CAAC,GAAG,QAAQ;AAClC,aAAK,QAAQ,iBAAiB,IAAI,YAAY;AAE9C,YAAI,MAAM,WAAW,QAAQ;AAC3B,gBAAM,UAAU,oBAAI,IAAI,CAAC,GAAI,KAAK,QAAQ,aAAa,CAAC,GAAI,GAAG,MAAM,SAAS,CAAC;AAC/E,eAAK,QAAQ,YAAY,CAAC,GAAG,OAAO;AAAA,QACtC;AACA,cAAM,KAAK,YAAY;AAAA,MACzB;AAAA,IACF,OAAO;AAEL,WAAK,UAAU,KAAK,OAAO,OAAO,IAAI,YAAY,CAAC;AAEnD,UAAI,KAAK,QAAQ,UAAU,SAAS,KAAK,IAAI,gBAAgB;AAC3D,cAAM,KAAK,oBAAoB,cAAc;AAAA,MAC/C,OAAO;AACL,cAAM,KAAK,YAAY;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,OAAO,OAAwB,IAA0B;AAC/D,WAAO;AAAA,MACL,IAAI,UAAU;AAAA,MACd,WAAW;AAAA,MACX,gBAAgB;AAAA,MAChB,QAAQ,MAAM,OAAO,OAAO,OAAO;AAAA,MACnC,WAAW,CAAC,GAAG,MAAM,SAAS;AAAA,MAC9B,MAAM,MAAM;AAAA,MACZ,WAAW,MAAM,WAAW,SAAS,CAAC,GAAG,MAAM,SAAS,IAAI;AAAA,IAC9D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,YAAY,QAA4C;AAC5D,WAAO,KAAK,uBAAuB,YAAY,KAAK,oBAAoB,MAAM,CAAC;AAAA,EACjF;AAAA,EAEA,MAAc,oBAAoB,QAA4C;AAC5E,UAAM,KAAK,YAAY;AACvB,QAAI,CAAC,KAAK,QAAS,QAAO;AAE1B,UAAM,MAAM,KAAK;AAEjB,QAAI,IAAI,UAAU,WAAW,KAAK,IAAI,OAAO,WAAW,GAAG;AACzD,YAAM,KAAK,kBAAkB,IAAI;AACjC,WAAK,UAAU;AACf,aAAO;AAAA,IACT;AAEA,UAAM,YAAW,oBAAI,KAAK,GAAE,YAAY;AACxC,UAAM,MAAM,SAAS,MAAM,GAAG,EAAE;AAChC,UAAM,MAAM,KAAK,KAAK,KAAK,YAAY,GAAG;AAC1C,UAAM,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AAEpC,QAAI;AACJ,QAAI,KAAK,IAAI,sBAAsB,IAAI,OAAO,SAAS,GAAG;AACxD,gBAAU,MAAM,KAAK,aAAa,IAAI,IAAI,IAAI,MAAM;AAAA,IACtD;AAEA,UAAM,KAAqB;AAAA,MACzB,IAAI,IAAI;AAAA,MACR,YAAY;AAAA,MACZ,WAAW,IAAI;AAAA,MACf;AAAA,MACA,YAAY;AAAA,MACZ,QAAQ,IAAI;AAAA,MACZ,WAAW,IAAI;AAAA,MACf;AAAA,MACA,MAAM,IAAI;AAAA,MACV,WAAW,IAAI,WAAW,SAAS,IAAI,YAAY;AAAA,MACnD,SAAS;AAAA,IACX;AAEA,UAAM,UAAU,GAAG,wBAAwB,EAAE,CAAC;AAAA;AAAA,eAAoB,IAAI,OAAO,KAAK,IAAI,CAAC,gBAAgB,IAAI,UAAU,MAAM;AAAA;AAC3H,UAAM,WAAW,KAAK,KAAK,KAAK,GAAG,IAAI,EAAE,KAAK;AAC9C,UAAM,UAAU,UAAU,SAAS,OAAO;AAC1C,QAAI,MAAM,sBAAsB,IAAI,EAAE,KAAK,MAAM,MAAM,IAAI,UAAU,MAAM,sBAAsB,IAAI,OAAO,KAAK,GAAG,CAAC,GAAG;AAExH,UAAM,KAAK,kBAAkB,IAAI;AACjC,SAAK,UAAU;AACf,WAAO,IAAI;AAAA,EACb;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAc,aAAa,OAAe,QAA+C;AACvF,WAAO,KAAK,qBAAqB,YAAY,KAAK,qBAAqB,OAAO,MAAM,CAAC;AAAA,EACvF;AAAA,EAEA,MAAc,qBAAqB,OAAe,QAA+C;AAC/F,UAAM,MAAM,MAAM,KAAK,eAAe;AAGtC,UAAM,aAAa,KAAK,IAAI,0BAA0B,KAAK,KAAK,KAAK;AACrE,UAAM,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,UAAU;AAE/C,QAAI;AACJ,QAAI,YAAY;AAEhB,eAAW,CAAC,KAAK,WAAW,KAAK,OAAO,QAAQ,IAAI,WAAW,GAAG;AAChE,YAAM,WAAW,IAAI,cAAc,GAAG;AACtC,UAAI,YAAY,IAAI,KAAK,QAAQ,IAAI,OAAQ;AAC7C,YAAM,QAAQ,kBAAkB,QAAQ,WAAW;AACnD,UAAI,SAAS,KAAK,IAAI,+BAA+B,QAAQ,WAAW;AACtE,oBAAY;AACZ,sBAAc;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,UAAU,eAAe,YAAY,MAAM;AACjD,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AAGnC,QAAI,CAAC,IAAI,OAAO,OAAO,EAAG,KAAI,OAAO,OAAO,IAAI,CAAC;AACjD,QAAI,OAAO,OAAO,EAAE,KAAK,KAAK;AAC9B,QAAI,WAAW,KAAK,IAAI;AACxB,QAAI,cAAc,OAAO,IAAI;AAG7B,QAAI,IAAI,YAAY,OAAO,GAAG;AAC5B,YAAM,SAAS,oBAAI,IAAI,CAAC,GAAG,IAAI,YAAY,OAAO,GAAG,GAAG,MAAM,CAAC;AAC/D,UAAI,YAAY,OAAO,IAAI,CAAC,GAAG,MAAM;AAAA,IACvC,OAAO;AACL,UAAI,YAAY,OAAO,IAAI,CAAC,GAAG,MAAM;AAAA,IACvC;AAEA,WAAQ,MAAM,KAAK,eAAe,GAAG,IAAK,UAAU;AAAA,EACtD;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,gBAAgB,MAAyC;AAC7D,UAAM,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,KAAK,GAAI;AAC/D,UAAM,gBAAgB,OAAO,YAAY,EAAE,MAAM,GAAG,EAAE;AAEtD,QAAI;AACJ,QAAI;AACF,mBAAa,MAAM,QAAQ,KAAK,YAAY,EAAE,eAAe,MAAM,UAAU,QAAQ,CAAC;AAAA,IACxF,QAAQ;AACN,aAAO,CAAC;AAAA,IACV;AAIA,UAAM,aAAa,WAChB,OAAO,CAAC,MAAM,EAAE,YAAY,KAAK,sBAAsB,KAAK,EAAE,IAAI,KAAK,EAAE,QAAQ,aAAa,EAC9F,IAAI,CAAC,MAAM,KAAK,KAAK,KAAK,YAAY,EAAE,IAAI,CAAC;AAGhD,UAAM,gBAAgB,WAAW;AAAA,MAC/B,CAAC,MAAM,CAAC,EAAE,YAAY,KAAK,CAAC,sBAAsB,KAAK,EAAE,IAAI;AAAA,IAC/D;AAGA,UAAM,QAA0B,CAAC;AAEjC,UAAM,UAAU,OAAO,QAAgB;AACrC,UAAI;AACJ,UAAI;AACF,iBAAS,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,SAAS,KAAK,CAAC;AAAA,MAC9D,QAAQ;AACN;AAAA,MACF;AACA,YAAM,UAAU,MAAM,QAAQ;AAAA,QAC5B,MAAM,IAAI,OAAO,MAAM;AACrB,cAAI;AACF,kBAAM,MAAM,MAAM,SAAS,KAAK,KAAK,KAAK,CAAC,GAAG,OAAO;AACrD,kBAAM,SAAS,oBAAoB,GAAG;AACtC,mBAAO,UAAU,IAAI,KAAK,OAAO,QAAQ,KAAK,SAAS,SAAS;AAAA,UAClE,QAAQ;AACN,mBAAO;AAAA,UACT;AAAA,QACF,CAAC;AAAA,MACH;AACA,iBAAW,KAAK,SAAS;AACvB,YAAI,MAAM,KAAM,OAAM,KAAK,CAAC;AAAA,MAC9B;AAAA,IACF;AAGA,UAAM,QAAQ,IAAI,WAAW,IAAI,OAAO,CAAC;AAGzC,eAAW,KAAK,eAAe;AAC7B,YAAM,OAAO,KAAK,KAAK,KAAK,YAAY,EAAE,IAAI;AAC9C,UAAI,EAAE,YAAY,GAAG;AACnB,cAAM,QAAQ,IAAI;AAAA,MACpB,WAAW,EAAE,KAAK,SAAS,KAAK,GAAG;AACjC,YAAI;AACF,gBAAM,MAAM,MAAM,SAAS,MAAM,OAAO;AACxC,gBAAM,SAAS,oBAAoB,GAAG;AACtC,cAAI,UAAU,IAAI,KAAK,OAAO,QAAQ,KAAK,OAAQ,OAAM,KAAK,MAAM;AAAA,QACtE,QAAQ;AAAA,QAA4B;AAAA,MACtC;AAAA,IACF;AAGA,UAAM,KAAK,CAAC,GAAG,MAAM,IAAI,KAAK,EAAE,QAAQ,EAAE,QAAQ,IAAI,IAAI,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC;AACpF,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/{chunk-UWVJF25J.js → chunk-HWVTS5NO.js}

@@ -1,4 +1,17 @@
+import {
+  isLikelyUnsafeRegex
+} from "./chunk-U3PN77QT.js";
+
 // src/namespaces/principal.ts
+var MAX_REGEX_SESSION_KEY_LENGTH = 512;
+function compileSafePrincipalRegex(pattern) {
+  if (isLikelyUnsafeRegex(pattern)) return null;
+  try {
+    return new RegExp(pattern);
+  } catch {
+    return null;
+  }
+}
 function resolvePrincipal(sessionKey, config) {
   if (!config.namespacesEnabled) return "default";
   const sk = sessionKey ?? "";
@@ -14,11 +27,12 @@ function resolvePrincipal(sessionKey, config) {
       if (sk === r.match) return r.principal;
     }
   } else if (mode === "regex") {
-    for (const r of rules) {
-      try {
-        const re = new RegExp(r.match);
-        if (re.test(sk)) return r.principal;
-      } catch {
+    if (sk.length <= MAX_REGEX_SESSION_KEY_LENGTH) {
+      for (const r of rules) {
+        const re = compileSafePrincipalRegex(r.match);
+        if (re?.test(sk)) {
+          return r.principal;
+        }
       }
     }
   }
@@ -71,4 +85,4 @@ export {
   defaultNamespaceForPrincipal,
   recallNamespacesForPrincipal
 };
-//# sourceMappingURL=chunk-UWVJF25J.js.map
+//# sourceMappingURL=chunk-HWVTS5NO.js.map

package/dist/chunk-HWVTS5NO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/namespaces/principal.ts"],"sourcesContent":["import type { PluginConfig } from \"../types.js\";\nimport { isLikelyUnsafeRegex } from \"../routing/engine.js\";\n\nconst MAX_REGEX_SESSION_KEY_LENGTH = 512;\n\nfunction compileSafePrincipalRegex(pattern: string): RegExp | null {\n  if (isLikelyUnsafeRegex(pattern)) return null;\n  try {\n    return new RegExp(pattern);\n  } catch {\n    return null;\n  }\n}\n\nexport function resolvePrincipal(sessionKey: string | undefined, config: PluginConfig): string {\n  if (!config.namespacesEnabled) return \"default\";\n  const sk = sessionKey ?? \"\";\n  const mode = config.principalFromSessionKeyMode;\n  const rules = config.principalFromSessionKeyRules ?? [];\n\n  if (!sk) return \"default\";\n\n  if (mode === \"prefix\") {\n    for (const r of rules) {\n      if (sk.startsWith(r.match)) return r.principal;\n    }\n  } else if (mode === \"map\") {\n    for (const r of rules) {\n      if (sk === r.match) return r.principal;\n    }\n  } else if (mode === \"regex\") {\n    if (sk.length <= MAX_REGEX_SESSION_KEY_LENGTH) {\n      for (const r of rules) {\n        const re = compileSafePrincipalRegex(r.match);\n        if (re?.test(sk)) {\n          return r.principal;\n        }\n      }\n    }\n  }\n\n  // Fallback heuristic: \"agent:<agentId>:<channelType>:...\"\n  const parts = sk.split(\":\");\n  if (parts.length >= 2 && parts[0] === \"agent\") {\n    const agentId = parts[1];\n    if (agentId && agentId.length > 0) return agentId;\n  }\n  return \"default\";\n}\n\nexport function canReadNamespace(principal: string, namespace: string, config: PluginConfig): boolean {\n  if (!config.namespacesEnabled) return true;\n  const policy = config.namespacePolicies.find((p) => p.name === namespace);\n  if (!policy) return namespace === config.defaultNamespace || namespace === config.sharedNamespace;\n  return policy.readPrincipals.includes(principal) || policy.readPrincipals.includes(\"*\");\n}\n\nexport function canWriteNamespace(principal: string, namespace: string, config: PluginConfig): boolean {\n  if (!config.namespacesEnabled) return true;\n  const policy = config.namespacePolicies.find((p) => p.name === namespace);\n  if (!policy) return namespace === config.defaultNamespace;\n  return policy.writePrincipals.includes(principal) || policy.writePrincipals.includes(\"*\");\n}\n\n/**\n * Default \"self\" namespace for a principal.\n *\n * Heuristic:\n * - If there's a namespace policy with the same name as the principal, use it.\n * - Otherwise use config.defaultNamespace.\n */\nexport function defaultNamespaceForPrincipal(principal: string, config: PluginConfig): string {\n  if (!config.namespacesEnabled) return config.defaultNamespace;\n  const exists = config.namespacePolicies.some((p) => p.name === principal);\n  return exists ? principal : config.defaultNamespace;\n}\n\nexport function recallNamespacesForPrincipal(principal: string, config: PluginConfig): string[] {\n  const out: string[] = [];\n  if (!config.namespacesEnabled) return [config.defaultNamespace];\n\n  const selfNs = defaultNamespaceForPrincipal(principal, config);\n  if (config.defaultRecallNamespaces.includes(\"self\") && canReadNamespace(principal, selfNs, config)) {\n    out.push(selfNs);\n  }\n  if (config.defaultRecallNamespaces.includes(\"shared\") && canReadNamespace(principal, config.sharedNamespace, config)) {\n    out.push(config.sharedNamespace);\n  }\n\n  for (const p of config.namespacePolicies) {\n    if (p.includeInRecallByDefault && canReadNamespace(principal, p.name, config)) {\n      if (!out.includes(p.name)) out.push(p.name);\n    }\n  }\n\n  return out;\n}\n"],"mappings":";;;;;AAGA,IAAM,+BAA+B;AAErC,SAAS,0BAA0B,SAAgC;AACjE,MAAI,oBAAoB,OAAO,EAAG,QAAO;AACzC,MAAI;AACF,WAAO,IAAI,OAAO,OAAO;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,iBAAiB,YAAgC,QAA8B;AAC7F,MAAI,CAAC,OAAO,kBAAmB,QAAO;AACtC,QAAM,KAAK,cAAc;AACzB,QAAM,OAAO,OAAO;AACpB,QAAM,QAAQ,OAAO,gCAAgC,CAAC;AAEtD,MAAI,CAAC,GAAI,QAAO;AAEhB,MAAI,SAAS,UAAU;AACrB,eAAW,KAAK,OAAO;AACrB,UAAI,GAAG,WAAW,EAAE,KAAK,EAAG,QAAO,EAAE;AAAA,IACvC;AAAA,EACF,WAAW,SAAS,OAAO;AACzB,eAAW,KAAK,OAAO;AACrB,UAAI,OAAO,EAAE,MAAO,QAAO,EAAE;AAAA,IAC/B;AAAA,EACF,WAAW,SAAS,SAAS;AAC3B,QAAI,GAAG,UAAU,8BAA8B;AAC7C,iBAAW,KAAK,OAAO;AACrB,cAAM,KAAK,0BAA0B,EAAE,KAAK;AAC5C,YAAI,IAAI,KAAK,EAAE,GAAG;AAChB,iBAAO,EAAE;AAAA,QACX;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,QAAM,QAAQ,GAAG,MAAM,GAAG;AAC1B,MAAI,MAAM,UAAU,KAAK,MAAM,CAAC,MAAM,SAAS;AAC7C,UAAM,UAAU,MAAM,CAAC;AACvB,QAAI,WAAW,QAAQ,SAAS,EAAG,QAAO;AAAA,EAC5C;AACA,SAAO;AACT;AAEO,SAAS,iBAAiB,WAAmB,WAAmB,QAA+B;AACpG,MAAI,CAAC,OAAO,kBAAmB,QAAO;AACtC,QAAM,SAAS,OAAO,kBAAkB,KAAK,CAAC,MAAM,EAAE,SAAS,SAAS;AACxE,MAAI,CAAC,OAAQ,QAAO,cAAc,OAAO,oBAAoB,cAAc,OAAO;AAClF,SAAO,OAAO,eAAe,SAAS,SAAS,KAAK,OAAO,eAAe,SAAS,GAAG;AACxF;AAEO,SAAS,kBAAkB,WAAmB,WAAmB,QAA+B;AACrG,MAAI,CAAC,OAAO,kBAAmB,QAAO;AACtC,QAAM,SAAS,OAAO,kBAAkB,KAAK,CAAC,MAAM,EAAE,SAAS,SAAS;AACxE,MAAI,CAAC,OAAQ,QAAO,cAAc,OAAO;AACzC,SAAO,OAAO,gBAAgB,SAAS,SAAS,KAAK,OAAO,gBAAgB,SAAS,GAAG;AAC1F;AASO,SAAS,6BAA6B,WAAmB,QAA8B;AAC5F,MAAI,CAAC,OAAO,kBAAmB,QAAO,OAAO;AAC7C,QAAM,SAAS,OAAO,kBAAkB,KAAK,CAAC,MAAM,EAAE,SAAS,SAAS;AACxE,SAAO,SAAS,YAAY,OAAO;AACrC;AAEO,SAAS,6BAA6B,WAAmB,QAAgC;AAC9F,QAAM,MAAgB,CAAC;AACvB,MAAI,CAAC,OAAO,kBAAmB,QAAO,CAAC,OAAO,gBAAgB;AAE9D,QAAM,SAAS,6BAA6B,WAAW,MAAM;AAC7D,MAAI,OAAO,wBAAwB,SAAS,MAAM,KAAK,iBAAiB,WAAW,QAAQ,MAAM,GAAG;AAClG,QAAI,KAAK,MAAM;AAAA,EACjB;AACA,MAAI,OAAO,wBAAwB,SAAS,QAAQ,KAAK,iBAAiB,WAAW,OAAO,iBAAiB,MAAM,GAAG;AACpH,QAAI,KAAK,OAAO,eAAe;AAAA,EACjC;AAEA,aAAW,KAAK,OAAO,mBAAmB;AACxC,QAAI,EAAE,4BAA4B,iBAAiB,WAAW,EAAE,MAAM,MAAM,GAAG;AAC7E,UAAI,CAAC,IAAI,SAAS,EAAE,IAAI,EAAG,KAAI,KAAK,EAAE,IAAI;AAAA,IAC5C;AAAA,EACF;AAEA,SAAO;AACT;","names":[]}

package/dist/{chunk-2WWLHTZY.js → chunk-IC4GELZE.js}

@@ -6,7 +6,7 @@ import {
   canReadNamespace,
   defaultNamespaceForPrincipal,
   resolvePrincipal
-} from "./chunk-UWVJF25J.js";
+} from "./chunk-HWVTS5NO.js";
 
 // src/active-memory-bridge.ts
 function isArtifactPath(value) {
@@ -118,4 +118,4 @@ export {
   recallForActiveMemory,
   getMemoryForActiveMemory
 };
-//# sourceMappingURL=chunk-2WWLHTZY.js.map
+//# sourceMappingURL=chunk-IC4GELZE.js.map

package/dist/{chunk-QA2ZAPBU.js → chunk-IPLYGWQF.js}

@@ -1,3 +1,7 @@
+import {
+  CAPSULE_SCHEMA_VERSION,
+  EXPORT_FORMAT
+} from "./chunk-J4EB7DNW.js";
 import {
   CAPSULE_ID_PATTERN,
   CapsuleBlockSchema,
@@ -6,24 +10,20 @@ import {
 } from "./chunk-WEHSQBFR.js";
 import {
   encryptCapsuleFile
-} from "./chunk-KNKUID7G.js";
-import {
-  CAPSULE_SCHEMA_VERSION,
-  EXPORT_FORMAT
-} from "./chunk-J4EB7DNW.js";
+} from "./chunk-X7Y7WX73.js";
 import {
   DEFAULT_TRANSFER_EXCLUDE_DIRS,
   computeTransferOutputRel
-} from "./chunk-I6K5FBRQ.js";
+} from "./chunk-UI3NYK34.js";
 import {
   listFilesRecursive,
   sha256File,
   toPosixRelPath,
   writeJsonFile
-} from "./chunk-AGZQD76C.js";
+} from "./chunk-GCGJW34D.js";
 
 // src/transfer/capsule-export.ts
-import { mkdir, readFile, stat, writeFile } from "fs/promises";
+import { mkdir, readFile, stat, unlink, writeFile } from "fs/promises";
 import path from "path";
 import { gzipSync } from "zlib";
 var DEFAULT_EXCLUDE_DIRS = DEFAULT_TRANSFER_EXCLUDE_DIRS;
@@ -31,6 +31,12 @@ var TRANSCRIPTS_DIR = "transcripts";
 var PEERS_DIR = "peers";
 async function exportCapsule(opts) {
   validateName(opts.name);
+  if (opts.encrypt === true && !opts.memoryDir) {
+    throw new Error(
+      "exportCapsule: 'memoryDir' is required when 'encrypt' is true so the secure-store key can be retrieved."
+    );
+  }
+  const encryptionMemoryDir = opts.encrypt === true ? opts.memoryDir : void 0;
   const sinceMs = parseSince(opts.since);
   const includeKinds = normalizeIncludeKinds(opts.includeKinds);
   const peerFilter = normalizePeerIds(opts.peerIds);
@@ -85,18 +91,20 @@ async function exportCapsule(opts) {
   const gz = gzipSync(Buffer.from(json, "utf-8"));
   await writeFile(archivePath, gz);
   if (opts.encrypt === true) {
-    if (!opts.memoryDir) {
-      throw new Error(
-        "exportCapsule: 'memoryDir' is required when 'encrypt' is true so the secure-store key can be retrieved."
-      );
+    try {
+      const { encPath } = await encryptCapsuleFile({
+        sourceGzPath: archivePath,
+        memoryDir: encryptionMemoryDir
+      });
+      await unlink(archivePath);
+      return { archivePath: encPath, manifestPath, manifest, encryptedArchivePath: encPath };
+    } catch (error) {
+      try {
+        await unlink(archivePath);
+      } catch {
+      }
+      throw error;
     }
-    const { encPath } = await encryptCapsuleFile({
-      sourceGzPath: archivePath,
-      memoryDir: opts.memoryDir
-    });
-    const { unlink } = await import("fs/promises");
-    await unlink(archivePath);
-    return { archivePath: encPath, manifestPath, manifest, encryptedArchivePath: encPath };
   }
   return { archivePath, manifestPath, manifest, encryptedArchivePath: null };
 }
@@ -253,4 +261,4 @@ export {
   exportCapsule,
   isValidCapsuleSince
 };
-//# sourceMappingURL=chunk-QA2ZAPBU.js.map
+//# sourceMappingURL=chunk-IPLYGWQF.js.map

package/dist/chunk-IPLYGWQF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/transfer/capsule-export.ts"],"sourcesContent":["import { mkdir, readFile, stat, unlink, writeFile } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { gzipSync } from \"node:zlib\";\nimport { CAPSULE_SCHEMA_VERSION, EXPORT_FORMAT } from \"./constants.js\";\nimport {\n  listFilesRecursive,\n  sha256File,\n  toPosixRelPath,\n  writeJsonFile,\n} from \"./fs-utils.js\";\nimport {\n  CAPSULE_ID_PATTERN,\n  CapsuleBlockSchema,\n  ExportBundleV2Schema,\n  ExportManifestV2Schema,\n  type CapsuleBlock,\n  type ExportBundleV2,\n  type ExportManifestV2,\n  type ExportMemoryRecordV1,\n} from \"./types.js\";\nimport { encryptCapsuleFile } from \"./capsule-crypto.js\";\nimport { computeTransferOutputRel, DEFAULT_TRANSFER_EXCLUDE_DIRS } from \"./exclusions.js\";\n\n/**\n * Default subdirectory excludes applied to every capsule export. These match\n * the shared plaintext transfer exclusions plus the `transcripts`\n * directory, which is excluded by default and only included when the caller\n * explicitly passes `transcripts` in {@link ExportCapsuleOptions.includeKinds}.\n */\nconst DEFAULT_EXCLUDE_DIRS = DEFAULT_TRANSFER_EXCLUDE_DIRS;\n\nconst TRANSCRIPTS_DIR = \"transcripts\" as const;\n\n/**\n * Top-level directory under {@link ExportCapsuleOptions.root} that holds\n * per-peer profile bundles. When {@link ExportCapsuleOptions.peerIds} is\n * provided, only files under `peers/<peerId>/...` for the listed ids are\n * included; the rest of the `peers/` tree is excluded.\n */\nconst PEERS_DIR = \"peers\" as const;\n\n/**\n * Options accepted by {@link exportCapsule}.\n *\n * `name` — capsule id, validated against {@link CAPSULE_ID_PATTERN}. The id\n * also forms the manifest's `capsule.id` and the archive filename.\n *\n * `root` — absolute or cwd-relative path to the memory directory to export.\n *\n * `since` — optional ISO-8601 timestamp; only files with `mtime >= since`\n * are included.\n *\n * `includeKinds` — optional allow-list of top-level subdirectory names\n * (e.g. `facts`, `entities`, `corrections`, `transcripts`). When set, files\n * directly under {@link root} are excluded and only files whose first path\n * segment is in the allow-list are kept. Pass `transcripts` here explicitly\n * to opt-in transcripts (they are excluded by default).\n *\n * `peerIds` — optional allow-list restricting the `peers/` tree to files\n * under `peers/<peerId>/...`. When omitted the entire `peers/` tree is\n * included (subject to {@link includeKinds}). When set to an empty array\n * the `peers/` tree is excluded entirely.\n *\n * `outDir` — optional output directory. Defaults to `<root>/.capsules`.\n *\n * `pluginVersion` — recorded in the manifest. Defaults to `\"0.0.0\"` so\n * tests do not need to thread a version through; production callers SHOULD\n * pass the running plugin version.\n *\n * `capsule` — optional overrides for the manifest's `capsule` block. The\n * caller may pass any subset; remaining fields are filled with conservative\n * defaults documented inline below.\n *\n * `now` — optional clock override (ms epoch) used for `manifest.createdAt`.\n * Tests pass a fixed value for deterministic output.\n *\n * `encrypt` — when `true`, encrypt the output archive using the secure-store\n * master key for `memoryDir`. The keyring must be unlocked before calling\n * (`remnic secure-store unlock`). The plaintext `.capsule.json.gz` is written\n * first, then encrypted to `<name>.capsule.json.gz.enc`; the plaintext is\n * removed after successful encryption. Requires `memoryDir` to be provided.\n *\n * `memoryDir` — required when `encrypt` is `true`. The memory directory whose\n * secure-store keyring holds the master key.\n */\nexport interface ExportCapsuleOptions {\n  name: string;\n  root: string;\n  since?: string;\n  includeKinds?: readonly string[];\n  peerIds?: readonly string[];\n  outDir?: string;\n  pluginVersion?: string;\n  capsule?: Partial<Omit<CapsuleBlock, \"id\">>;\n  now?: number;\n  /**\n   * When `true`, encrypt the output archive. Requires the secure-store to be\n   * unlocked and `memoryDir` to be set. The plaintext `.capsule.json.gz` is\n   * replaced by `<name>.capsule.json.gz.enc` on success.\n   */\n  encrypt?: boolean;\n  /**\n   * Memory directory whose secure-store keyring holds the master key. Required\n   * when `encrypt` is `true`; ignored otherwise.\n   */\n  memoryDir?: string;\n  /**\n   * When `true`, include the `transcripts/` directory in the export even\n   * though it is excluded by default. Using this flag avoids hard-coding an\n   * explicit `includeKinds` allow-list that would inadvertently drop other\n   * valid memory directories (`peers/`, `forks/`, etc.). (Cursor / #747)\n   *\n   * Ignored when `includeKinds` is provided and already contains\n   * `\"transcripts\"`.\n   */\n  includeTranscripts?: boolean;\n}\n\nexport interface ExportCapsuleResult {\n  archivePath: string;\n  manifestPath: string;\n  manifest: ExportManifestV2;\n  /** When the export was encrypted, the `.enc` path. `null` when unencrypted. */\n  encryptedArchivePath: string | null;\n}\n\n/**\n * Pure function that exports a memory directory as a portable, capsule-aware\n * V2 bundle.\n *\n * The output is a single `.capsule.json.gz` archive containing the entire\n * `ExportBundleV2` (manifest + records) plus a sidecar `manifest.json` for\n * cheap inspection. The bundle format is intentionally identical to the\n * existing `export-json` shape so PR 3/6's importer can reuse the V1 code\n * path with only a manifest version-dispatch.\n *\n * Determinism guarantees:\n *  - `manifest.files` and `bundle.records` are sorted by posix path.\n *  - `manifest.createdAt` is taken from {@link ExportCapsuleOptions.now}\n *    when provided.\n *  - The archive is gzip-compressed with default settings; no timestamp is\n *    embedded (Node's `gzipSync` does not write a header timestamp when\n *    using the synchronous helper, so byte-identical outputs are possible\n *    given identical inputs).\n *\n * Empty result handling: a capsule with zero matching files is still a\n * valid capsule and produces a well-formed manifest with an empty `files`\n * array and an archive containing the empty bundle.\n */\nexport async function exportCapsule(\n  opts: ExportCapsuleOptions,\n): Promise<ExportCapsuleResult> {\n  validateName(opts.name);\n  if (opts.encrypt === true && !opts.memoryDir) {\n    throw new Error(\n      \"exportCapsule: 'memoryDir' is required when 'encrypt' is true so the \" +\n        \"secure-store key can be retrieved.\",\n    );\n  }\n  const encryptionMemoryDir = opts.encrypt === true ? opts.memoryDir : undefined;\n  const sinceMs = parseSince(opts.since);\n  const includeKinds = normalizeIncludeKinds(opts.includeKinds);\n  const peerFilter = normalizePeerIds(opts.peerIds);\n  // `includeTranscripts: true` overrides the default transcripts exclusion\n  // without requiring an explicit `includeKinds` list — so callers that want\n  // all memory dirs + transcripts don't need to hard-code a list that would\n  // inadvertently drop new dirs like `peers/` or `forks/`. (Cursor / #747)\n  const transcriptsOverride = opts.includeTranscripts === true;\n\n  const rootAbs = path.resolve(opts.root);\n  await assertIsDirectory(rootAbs);\n\n  const outDirAbs = path.resolve(opts.outDir ?? path.join(rootAbs, \".capsules\"));\n  // Reject outDir === root: the input scan would otherwise be entirely\n  // skipped by `shouldInclude` (outDirRelPosix === \".\") and the export would\n  // silently succeed with an empty manifest/archive — a Rule 51 violation\n  // and a data-loss footgun for callers that point outDir at the root.\n  if (outDirAbs === rootAbs) {\n    throw new Error(\n      \"exportCapsule: 'outDir' must not equal 'root'. \" +\n        \"Choose a separate directory (default: <root>/.capsules) so the \" +\n        \"export does not overwrite or shadow the source tree.\",\n    );\n  }\n  await mkdir(outDirAbs, { recursive: true });\n\n  // If the output directory lives inside the export root, scan results would\n  // re-import previous capsule archives on subsequent runs. Compute the\n  // posix-relative path of the outDir under rootAbs (or `null` when it sits\n  // outside) so {@link shouldInclude} can skip the entire subtree.\n  const outDirRelPosix = computeTransferOutputRel(rootAbs, outDirAbs);\n\n  const filesAbs = await listFilesRecursive(rootAbs);\n\n  const records: ExportMemoryRecordV1[] = [];\n  const manifestFiles: ExportManifestV2[\"files\"] = [];\n\n  for (const abs of filesAbs) {\n    const relPosix = toPosixRelPath(abs, rootAbs);\n    if (!shouldInclude(relPosix, includeKinds, peerFilter, outDirRelPosix, transcriptsOverride)) continue;\n\n    if (sinceMs !== null) {\n      const st = await stat(abs);\n      if (st.mtimeMs < sinceMs) continue;\n    }\n\n    const content = await readFile(abs, \"utf-8\");\n    records.push({ path: relPosix, content });\n    const { sha256, bytes } = await sha256File(abs);\n    manifestFiles.push({ path: relPosix, sha256, bytes });\n  }\n\n  records.sort((a, b) => a.path.localeCompare(b.path));\n  manifestFiles.sort((a, b) => a.path.localeCompare(b.path));\n\n  const capsule = buildCapsuleBlock(opts.name, opts.capsule);\n  const includesTranscripts =\n    transcriptsOverride || (includeKinds ?? new Set<string>()).has(TRANSCRIPTS_DIR);\n\n  const createdAtMs = opts.now ?? Date.now();\n  const manifest = ExportManifestV2Schema.parse({\n    format: EXPORT_FORMAT,\n    schemaVersion: CAPSULE_SCHEMA_VERSION,\n    createdAt: new Date(createdAtMs).toISOString(),\n    pluginVersion: opts.pluginVersion ?? \"0.0.0\",\n    includesTranscripts,\n    files: manifestFiles,\n    capsule,\n  } satisfies ExportManifestV2);\n\n  const bundle: ExportBundleV2 = ExportBundleV2Schema.parse({\n    manifest,\n    records,\n  });\n\n  const archivePath = path.join(outDirAbs, `${opts.name}.capsule.json.gz`);\n  const manifestPath = path.join(outDirAbs, `${opts.name}.manifest.json`);\n\n  // Sidecar manifest for cheap inspection without decompressing the archive.\n  await writeJsonFile(manifestPath, manifest);\n\n  // Single-artifact gzip archive containing the whole bundle. JSON encoded\n  // before gzip so the archive is opaque to file-tree filtering. Using the\n  // sync helper keeps the function pure async (no filesystem callback chain)\n  // and matches the existing transfer modules' style.\n  const json = JSON.stringify(bundle);\n  const gz = gzipSync(Buffer.from(json, \"utf-8\"));\n  await writeFile(archivePath, gz);\n\n  // Optional encryption (PR 4/4). When opts.encrypt is true, wrap the\n  // plaintext gzip in a REMNIC-ENC sealed envelope and remove the plaintext.\n  // Per gotcha #54: write the encrypted file before removing the plaintext so\n  // a crash mid-encrypt does not destroy the only copy.\n  if (opts.encrypt === true) {\n    try {\n      const { encPath } = await encryptCapsuleFile({\n        sourceGzPath: archivePath,\n        memoryDir: encryptionMemoryDir!,\n      });\n      // Remove the plaintext only after the encrypted file was written successfully.\n      await unlink(archivePath);\n      return { archivePath: encPath, manifestPath, manifest, encryptedArchivePath: encPath };\n    } catch (error) {\n      try {\n        await unlink(archivePath);\n      } catch {\n        // Best-effort cleanup: do not leave a plaintext capsule after a failed encrypted export.\n      }\n      throw error;\n    }\n  }\n\n  return { archivePath, manifestPath, manifest, encryptedArchivePath: null };\n}\n\n// ---------------------------------------------------------------------------\n// Validation helpers\n// ---------------------------------------------------------------------------\n\nfunction validateName(name: unknown): void {\n  if (typeof name !== \"string\" || !CAPSULE_ID_PATTERN.test(name)) {\n    throw new Error(\n      `exportCapsule: invalid capsule name. Expected /${CAPSULE_ID_PATTERN.source}/`,\n    );\n  }\n  if (name.length > 64) {\n    throw new Error(\n      \"exportCapsule: invalid capsule name. Must be 64 characters or fewer.\",\n    );\n  }\n}\n\n/**\n * Strict ISO-8601 form accepted by {@link parseSince}. We accept exactly two\n * shapes:\n *\n *   1. Date-only:  `YYYY-MM-DD` — interpreted as UTC midnight per ECMAScript.\n *   2. Date+time with an explicit timezone designator:\n *      `YYYY-MM-DDTHH:MM(:SS(.fff)?)?(Z|±HH:MM)`.\n *\n * Notably **rejected**: date+time **without** a timezone (e.g.\n * `2026-02-28T00:00:00`). ECMAScript treats this as local time, which makes\n * acceptance and the resulting cutoff depend on the host's `TZ` and silently\n * shifts incremental-export windows for users outside UTC. Rule 51: reject\n * inputs that silently coerce to a host-dependent meaning.\n */\nconst ISO_8601_RE =\n  /^\\d{4}-\\d{2}-\\d{2}(?:[Tt]\\d{2}:\\d{2}(?::\\d{2}(?:\\.\\d{1,9})?)?(?:[Zz]|[+-]\\d{2}:?\\d{2}))?$/;\n\nfunction parseSince(since: string | undefined): number | null {\n  if (since === undefined) return null;\n  if (typeof since !== \"string\" || since.trim() === \"\") {\n    throw new Error(\"exportCapsule: 'since' must be a non-empty ISO-8601 string\");\n  }\n  if (!ISO_8601_RE.test(since)) {\n    throw new Error(\n      `exportCapsule: 'since' is not a valid ISO-8601 timestamp: ${since}`,\n    );\n  }\n  const ms = Date.parse(since);\n  if (!Number.isFinite(ms)) {\n    throw new Error(\n      `exportCapsule: 'since' is not a valid ISO-8601 timestamp: ${since}`,\n    );\n  }\n  // Reject calendar overflow: `Date.parse(\"2026-02-31\")` returns a finite ms\n  // for March 3 because the JS Date constructor silently normalizes invalid\n  // calendar values. Round-trip through `Date` and compare the year/month/day\n  // components against the input prefix to catch this. Rule 51: silent\n  // coercion of an exact time boundary is a Rule 51 violation that breaks\n  // incremental exports.\n  assertCalendarRoundTrip(since, ms);\n  return ms;\n}\n\nexport function isValidCapsuleSince(since: string): boolean {\n  try {\n    parseSince(since);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Verify that parsing {@link since} did not silently normalize an invalid\n * calendar date (e.g. `2026-02-31` → `2026-03-03`). We extract the\n * year/month/day from the input string (regex-validated above) and compare\n * against the parsed Date's UTC components. Both date-only forms and forms\n * with an explicit Z/offset are normalized to UTC by `Date.parse`; for the\n * non-Z case where the offset shifts the calendar day across midnight, we\n * re-derive the input's intended UTC instant by accounting for the offset\n * before the comparison.\n */\nfunction assertCalendarRoundTrip(since: string, ms: number): void {\n  const m = /^(\\d{4})-(\\d{2})-(\\d{2})/.exec(since);\n  if (!m) return;\n  const wantY = Number(m[1]);\n  const wantMo = Number(m[2]);\n  const wantD = Number(m[3]);\n\n  // For inputs with an explicit non-zero offset, compare against the\n  // wall-clock components of that offset instead of UTC. Date.parse maps to\n  // UTC, so 2026-02-31T00:00:00-05:00 and 2026-02-31T00:00:00Z both fail the\n  // calendar check; the wall-clock comparison via `m[1..3]` is still the\n  // right reference because the input's stated calendar day must exist.\n  const offsetMatch = /([+-])(\\d{2}):?(\\d{2})$/.exec(since);\n  let displayMs = ms;\n  if (offsetMatch) {\n    const sign = offsetMatch[1] === \"-\" ? -1 : 1;\n    const offsetMin = sign * (Number(offsetMatch[2]) * 60 + Number(offsetMatch[3]));\n    displayMs = ms + offsetMin * 60_000;\n  }\n  const dd = new Date(displayMs);\n  const gotY = dd.getUTCFullYear();\n  const gotMo = dd.getUTCMonth() + 1;\n  const gotD = dd.getUTCDate();\n  if (gotY !== wantY || gotMo !== wantMo || gotD !== wantD) {\n    throw new Error(\n      `exportCapsule: 'since' is not a valid ISO-8601 timestamp: ${since}`,\n    );\n  }\n}\n\nfunction normalizeIncludeKinds(\n  kinds: readonly string[] | undefined,\n): ReadonlySet<string> | null {\n  if (kinds === undefined) return null;\n  // Empty array is treated as \"include nothing\" rather than \"include all\"\n  // so callers cannot accidentally widen the filter by passing []. This\n  // mirrors PR-1/6 Rule 51: reject ambiguous input — but here we model it\n  // as \"explicit empty allow-list\" rather than throwing, because empty\n  // capsules ARE valid (see acceptance criteria).\n  const set = new Set<string>();\n  for (const raw of kinds) {\n    if (typeof raw !== \"string\" || raw.trim() === \"\") {\n      throw new Error(\"exportCapsule: 'includeKinds' entries must be non-empty strings\");\n    }\n    if (raw.includes(\"/\") || raw.includes(\"\\\\\")) {\n      throw new Error(\n        `exportCapsule: 'includeKinds' entries must be top-level segment names, got: ${raw}`,\n      );\n    }\n    set.add(raw);\n  }\n  return set;\n}\n\nfunction normalizePeerIds(\n  peerIds: readonly string[] | undefined,\n): ReadonlySet<string> | null {\n  if (peerIds === undefined) return null;\n  const set = new Set<string>();\n  for (const raw of peerIds) {\n    if (typeof raw !== \"string\" || raw.trim() === \"\") {\n      throw new Error(\"exportCapsule: 'peerIds' entries must be non-empty strings\");\n    }\n    if (raw.includes(\"/\") || raw.includes(\"\\\\\") || raw === \".\" || raw === \"..\") {\n      throw new Error(\n        `exportCapsule: 'peerIds' entries must be plain segment names, got: ${raw}`,\n      );\n    }\n    set.add(raw);\n  }\n  return set;\n}\n\nasync function assertIsDirectory(absPath: string): Promise<void> {\n  // Mirror gotcha #24: existsSync returns true for files. The export root\n  // MUST be a directory or the walk silently succeeds with zero entries.\n  const st = await stat(absPath).catch(() => null);\n  if (!st || !st.isDirectory()) {\n    throw new Error(\n      `exportCapsule: 'root' must be an existing directory: ${absPath}`,\n    );\n  }\n}\n\nfunction shouldInclude(\n  relPosix: string,\n  includeKinds: ReadonlySet<string> | null,\n  peerFilter: ReadonlySet<string> | null,\n  outDirRelPosix: string | null,\n  transcriptsOverride = false,\n): boolean {\n  const parts = relPosix.split(\"/\");\n  if (parts.some((p) => DEFAULT_EXCLUDE_DIRS.has(p))) return false;\n\n  // Exclude the output directory subtree. Without this, re-running against\n  // the same root packages prior `.capsule.json.gz` archives and sidecar\n  // manifests as records, causing bundle bloat and leaking stale exports.\n  // `outDir === root` is rejected at the entrypoint (`exportCapsule`), so\n  // {@link computeOutDirRel} never returns `\".\"` for the in-tree case here.\n  if (outDirRelPosix !== null) {\n    if (relPosix === outDirRelPosix) return false;\n    if (relPosix.startsWith(`${outDirRelPosix}/`)) return false;\n  }\n\n  const top = parts[0];\n\n  // Transcripts are opt-in: excluded unless caller explicitly listed them\n  // in includeKinds OR passed `includeTranscripts: true`. The override flag\n  // avoids the footgun of having the CLI build a hard-coded kinds list that\n  // inadvertently drops valid memory dirs like `peers/` or `forks/`. (Cursor / #747)\n  if (\n    top === TRANSCRIPTS_DIR &&\n    !transcriptsOverride &&\n    (includeKinds === null || !includeKinds.has(TRANSCRIPTS_DIR))\n  ) {\n    return false;\n  }\n\n  if (includeKinds !== null) {\n    // includeKinds restricts to whitelisted top-level segments. Files at\n    // the repo root (no top-level dir) are excluded under an explicit\n    // allow-list because they are not categorized.\n    if (parts.length < 2) return false;\n    if (!includeKinds.has(top)) return false;\n  }\n\n  if (top === PEERS_DIR && peerFilter !== null) {\n    if (peerFilter.size === 0) return false;\n    if (parts.length < 2) return false;\n    if (!peerFilter.has(parts[1])) return false;\n  }\n\n  return true;\n}\n\n// ---------------------------------------------------------------------------\n// Capsule-block defaults\n// ---------------------------------------------------------------------------\n\n/**\n * Build a {@link CapsuleBlock} for the manifest. PR 2/6 ships a minimal\n * snapshot: tier-weights and `directAnswerEnabled` default to zod-passing\n * placeholders so the bundle parses cleanly. PRs 3/6+ will wire real\n * retrieval-policy and identity-anchor snapshots into the override path.\n *\n * Defaults (chosen to be safe + least-surprising):\n *  - `version`           — `0.1.0` (capsule authors override per release).\n *  - `schemaVersion`     — `taxonomy-v1` until the taxonomy registry stabilizes.\n *  - `parentCapsule`     — `null` (explicit \"no parent\" sentinel).\n *  - `description`       — empty string. Capsule authors override.\n *  - `retrievalPolicy`   — empty `tierWeights` map + `directAnswerEnabled: false`.\n *    Empty weights mean \"no overrides\"; importers fall back to their local\n *    policy. `false` is the least-privileged default per Rule 48.\n *  - `includes`          — all flags `false` until later PRs wire the\n *    sub-bundles in.\n */\nfunction buildCapsuleBlock(\n  name: string,\n  override: Partial<Omit<CapsuleBlock, \"id\">> | undefined,\n): CapsuleBlock {\n  // `parent` (structured, PR 4/6) and `parentCapsule` (legacy string) carry\n  // overlapping information. The schema documents the invariant: when\n  // `parent` is non-null, `parentCapsule` SHOULD equal `parent.capsuleId`.\n  // We derive the legacy field from the structured field whenever the\n  // caller supplies `parent` but omits `parentCapsule`, so a single-source\n  // override path produces a manifest that satisfies the documented\n  // invariant for legacy V2 readers (Cursor medium #751 round 3).\n  // An explicit `parentCapsule` override still wins — including an explicit\n  // `null` — so callers can intentionally diverge from the structured field\n  // for migration scenarios.\n  const parent = override?.parent ?? null;\n  const parentCapsule =\n    override && Object.prototype.hasOwnProperty.call(override, \"parentCapsule\")\n      ? (override.parentCapsule ?? null)\n      : (parent?.capsuleId ?? null);\n\n  const merged: CapsuleBlock = {\n    id: name,\n    version: override?.version ?? \"0.1.0\",\n    schemaVersion: override?.schemaVersion ?? \"taxonomy-v1\",\n    parentCapsule,\n    parent,\n    description: override?.description ?? \"\",\n    retrievalPolicy: override?.retrievalPolicy ?? {\n      tierWeights: {},\n      directAnswerEnabled: false,\n    },\n    includes: override?.includes ?? {\n      taxonomy: false,\n      identityAnchors: false,\n      peerProfiles: false,\n      procedural: false,\n    },\n  };\n  // Re-parse to surface invalid overrides with the same zod errors a caller\n  // would get when constructing a CapsuleBlock by hand.\n  return CapsuleBlockSchema.parse(merged);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,OAAO,UAAU,MAAM,QAAQ,iBAAiB;AACzD,OAAO,UAAU;AACjB,SAAS,gBAAgB;AA2BzB,IAAM,uBAAuB;AAE7B,IAAM,kBAAkB;AAQxB,IAAM,YAAY;AA8GlB,eAAsB,cACpB,MAC8B;AAC9B,eAAa,KAAK,IAAI;AACtB,MAAI,KAAK,YAAY,QAAQ,CAAC,KAAK,WAAW;AAC5C,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AACA,QAAM,sBAAsB,KAAK,YAAY,OAAO,KAAK,YAAY;AACrE,QAAM,UAAU,WAAW,KAAK,KAAK;AACrC,QAAM,eAAe,sBAAsB,KAAK,YAAY;AAC5D,QAAM,aAAa,iBAAiB,KAAK,OAAO;AAKhD,QAAM,sBAAsB,KAAK,uBAAuB;AAExD,QAAM,UAAU,KAAK,QAAQ,KAAK,IAAI;AACtC,QAAM,kBAAkB,OAAO;AAE/B,QAAM,YAAY,KAAK,QAAQ,KAAK,UAAU,KAAK,KAAK,SAAS,WAAW,CAAC;AAK7E,MAAI,cAAc,SAAS;AACzB,UAAM,IAAI;AAAA,MACR;AAAA,IAGF;AAAA,EACF;AACA,QAAM,MAAM,WAAW,EAAE,WAAW,KAAK,CAAC;AAM1C,QAAM,iBAAiB,yBAAyB,SAAS,SAAS;AAElE,QAAM,WAAW,MAAM,mBAAmB,OAAO;AAEjD,QAAM,UAAkC,CAAC;AACzC,QAAM,gBAA2C,CAAC;AAElD,aAAW,OAAO,UAAU;AAC1B,UAAM,WAAW,eAAe,KAAK,OAAO;AAC5C,QAAI,CAAC,cAAc,UAAU,cAAc,YAAY,gBAAgB,mBAAmB,EAAG;AAE7F,QAAI,YAAY,MAAM;AACpB,YAAM,KAAK,MAAM,KAAK,GAAG;AACzB,UAAI,GAAG,UAAU,QAAS;AAAA,IAC5B;AAEA,UAAM,UAAU,MAAM,SAAS,KAAK,OAAO;AAC3C,YAAQ,KAAK,EAAE,MAAM,UAAU,QAAQ,CAAC;AACxC,UAAM,EAAE,QAAQ,MAAM,IAAI,MAAM,WAAW,GAAG;AAC9C,kBAAc,KAAK,EAAE,MAAM,UAAU,QAAQ,MAAM,CAAC;AAAA,EACtD;AAEA,UAAQ,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AACnD,gBAAc,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAEzD,QAAM,UAAU,kBAAkB,KAAK,MAAM,KAAK,OAAO;AACzD,QAAM,sBACJ,wBAAwB,gBAAgB,oBAAI,IAAY,GAAG,IAAI,eAAe;AAEhF,QAAM,cAAc,KAAK,OAAO,KAAK,IAAI;AACzC,QAAM,WAAW,uBAAuB,MAAM;AAAA,IAC5C,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,WAAW,IAAI,KAAK,WAAW,EAAE,YAAY;AAAA,IAC7C,eAAe,KAAK,iBAAiB;AAAA,IACrC;AAAA,IACA,OAAO;AAAA,IACP;AAAA,EACF,CAA4B;AAE5B,QAAM,SAAyB,qBAAqB,MAAM;AAAA,IACxD;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,cAAc,KAAK,KAAK,WAAW,GAAG,KAAK,IAAI,kBAAkB;AACvE,QAAM,eAAe,KAAK,KAAK,WAAW,GAAG,KAAK,IAAI,gBAAgB;AAGtE,QAAM,cAAc,cAAc,QAAQ;AAM1C,QAAM,OAAO,KAAK,UAAU,MAAM;AAClC,QAAM,KAAK,SAAS,OAAO,KAAK,MAAM,OAAO,CAAC;AAC9C,QAAM,UAAU,aAAa,EAAE;AAM/B,MAAI,KAAK,YAAY,MAAM;AACzB,QAAI;AACF,YAAM,EAAE,QAAQ,IAAI,MAAM,mBAAmB;AAAA,QAC3C,cAAc;AAAA,QACd,WAAW;AAAA,MACb,CAAC;AAED,YAAM,OAAO,WAAW;AACxB,aAAO,EAAE,aAAa,SAAS,cAAc,UAAU,sBAAsB,QAAQ;AAAA,IACvF,SAAS,OAAO;AACd,UAAI;AACF,cAAM,OAAO,WAAW;AAAA,MAC1B,QAAQ;AAAA,MAER;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAEA,SAAO,EAAE,aAAa,cAAc,UAAU,sBAAsB,KAAK;AAC3E;AAMA,SAAS,aAAa,MAAqB;AACzC,MAAI,OAAO,SAAS,YAAY,CAAC,mBAAmB,KAAK,IAAI,GAAG;AAC9D,UAAM,IAAI;AAAA,MACR,kDAAkD,mBAAmB,MAAM;AAAA,IAC7E;AAAA,EACF;AACA,MAAI,KAAK,SAAS,IAAI;AACpB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;AAgBA,IAAM,cACJ;AAEF,SAAS,WAAW,OAA0C;AAC5D,MAAI,UAAU,OAAW,QAAO;AAChC,MAAI,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,IAAI;AACpD,UAAM,IAAI,MAAM,4DAA4D;AAAA,EAC9E;AACA,MAAI,CAAC,YAAY,KAAK,KAAK,GAAG;AAC5B,UAAM,IAAI;AAAA,MACR,6DAA6D,KAAK;AAAA,IACpE;AAAA,EACF;AACA,QAAM,KAAK,KAAK,MAAM,KAAK;AAC3B,MAAI,CAAC,OAAO,SAAS,EAAE,GAAG;AACxB,UAAM,IAAI;AAAA,MACR,6DAA6D,KAAK;AAAA,IACpE;AAAA,EACF;AAOA,0BAAwB,OAAO,EAAE;AACjC,SAAO;AACT;AAEO,SAAS,oBAAoB,OAAwB;AAC1D,MAAI;AACF,eAAW,KAAK;AAChB,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAYA,SAAS,wBAAwB,OAAe,IAAkB;AAChE,QAAM,IAAI,2BAA2B,KAAK,KAAK;AAC/C,MAAI,CAAC,EAAG;AACR,QAAM,QAAQ,OAAO,EAAE,CAAC,CAAC;AACzB,QAAM,SAAS,OAAO,EAAE,CAAC,CAAC;AAC1B,QAAM,QAAQ,OAAO,EAAE,CAAC,CAAC;AAOzB,QAAM,cAAc,0BAA0B,KAAK,KAAK;AACxD,MAAI,YAAY;AAChB,MAAI,aAAa;AACf,UAAM,OAAO,YAAY,CAAC,MAAM,MAAM,KAAK;AAC3C,UAAM,YAAY,QAAQ,OAAO,YAAY,CAAC,CAAC,IAAI,KAAK,OAAO,YAAY,CAAC,CAAC;AAC7E,gBAAY,KAAK,YAAY;AAAA,EAC/B;AACA,QAAM,KAAK,IAAI,KAAK,SAAS;AAC7B,QAAM,OAAO,GAAG,eAAe;AAC/B,QAAM,QAAQ,GAAG,YAAY,IAAI;AACjC,QAAM,OAAO,GAAG,WAAW;AAC3B,MAAI,SAAS,SAAS,UAAU,UAAU,SAAS,OAAO;AACxD,UAAM,IAAI;AAAA,MACR,6DAA6D,KAAK;AAAA,IACpE;AAAA,EACF;AACF;AAEA,SAAS,sBACP,OAC4B;AAC5B,MAAI,UAAU,OAAW,QAAO;AAMhC,QAAM,MAAM,oBAAI,IAAY;AAC5B,aAAW,OAAO,OAAO;AACvB,QAAI,OAAO,QAAQ,YAAY,IAAI,KAAK,MAAM,IAAI;AAChD,YAAM,IAAI,MAAM,iEAAiE;AAAA,IACnF;AACA,QAAI,IAAI,SAAS,GAAG,KAAK,IAAI,SAAS,IAAI,GAAG;AAC3C,YAAM,IAAI;AAAA,QACR,+EAA+E,GAAG;AAAA,MACpF;AAAA,IACF;AACA,QAAI,IAAI,GAAG;AAAA,EACb;AACA,SAAO;AACT;AAEA,SAAS,iBACP,SAC4B;AAC5B,MAAI,YAAY,OAAW,QAAO;AAClC,QAAM,MAAM,oBAAI,IAAY;AAC5B,aAAW,OAAO,SAAS;AACzB,QAAI,OAAO,QAAQ,YAAY,IAAI,KAAK,MAAM,IAAI;AAChD,YAAM,IAAI,MAAM,4DAA4D;AAAA,IAC9E;AACA,QAAI,IAAI,SAAS,GAAG,KAAK,IAAI,SAAS,IAAI,KAAK,QAAQ,OAAO,QAAQ,MAAM;AAC1E,YAAM,IAAI;AAAA,QACR,sEAAsE,GAAG;AAAA,MAC3E;AAAA,IACF;AACA,QAAI,IAAI,GAAG;AAAA,EACb;AACA,SAAO;AACT;AAEA,eAAe,kBAAkB,SAAgC;AAG/D,QAAM,KAAK,MAAM,KAAK,OAAO,EAAE,MAAM,MAAM,IAAI;AAC/C,MAAI,CAAC,MAAM,CAAC,GAAG,YAAY,GAAG;AAC5B,UAAM,IAAI;AAAA,MACR,wDAAwD,OAAO;AAAA,IACjE;AAAA,EACF;AACF;AAEA,SAAS,cACP,UACA,cACA,YACA,gBACA,sBAAsB,OACb;AACT,QAAM,QAAQ,SAAS,MAAM,GAAG;AAChC,MAAI,MAAM,KAAK,CAAC,MAAM,qBAAqB,IAAI,CAAC,CAAC,EAAG,QAAO;AAO3D,MAAI,mBAAmB,MAAM;AAC3B,QAAI,aAAa,eAAgB,QAAO;AACxC,QAAI,SAAS,WAAW,GAAG,cAAc,GAAG,EAAG,QAAO;AAAA,EACxD;AAEA,QAAM,MAAM,MAAM,CAAC;AAMnB,MACE,QAAQ,mBACR,CAAC,wBACA,iBAAiB,QAAQ,CAAC,aAAa,IAAI,eAAe,IAC3D;AACA,WAAO;AAAA,EACT;AAEA,MAAI,iBAAiB,MAAM;AAIzB,QAAI,MAAM,SAAS,EAAG,QAAO;AAC7B,QAAI,CAAC,aAAa,IAAI,GAAG,EAAG,QAAO;AAAA,EACrC;AAEA,MAAI,QAAQ,aAAa,eAAe,MAAM;AAC5C,QAAI,WAAW,SAAS,EAAG,QAAO;AAClC,QAAI,MAAM,SAAS,EAAG,QAAO;AAC7B,QAAI,CAAC,WAAW,IAAI,MAAM,CAAC,CAAC,EAAG,QAAO;AAAA,EACxC;AAEA,SAAO;AACT;AAuBA,SAAS,kBACP,MACA,UACc;AAWd,QAAM,SAAS,UAAU,UAAU;AACnC,QAAM,gBACJ,YAAY,OAAO,UAAU,eAAe,KAAK,UAAU,eAAe,IACrE,SAAS,iBAAiB,OAC1B,QAAQ,aAAa;AAE5B,QAAM,SAAuB;AAAA,IAC3B,IAAI;AAAA,IACJ,SAAS,UAAU,WAAW;AAAA,IAC9B,eAAe,UAAU,iBAAiB;AAAA,IAC1C;AAAA,IACA;AAAA,IACA,aAAa,UAAU,eAAe;AAAA,IACtC,iBAAiB,UAAU,mBAAmB;AAAA,MAC5C,aAAa,CAAC;AAAA,MACd,qBAAqB;AAAA,IACvB;AAAA,IACA,UAAU,UAAU,YAAY;AAAA,MAC9B,UAAU;AAAA,MACV,iBAAiB;AAAA,MACjB,cAAc;AAAA,MACd,YAAY;AAAA,IACd;AAAA,EACF;AAGA,SAAO,mBAAmB,MAAM,MAAM;AACxC;","names":[]}

package/dist/{chunk-A6KTB5R6.js → chunk-IQ3OI2RR.js}

@@ -1,10 +1,10 @@
 import {
   SharedFeedbackEntrySchema,
   resolveSharedContextDir
-} from "./chunk-U4SCL7B7.js";
+} from "./chunk-DRD2Q7HQ.js";
 import {
   StorageManager
-} from "./chunk-VBJ7V5SK.js";
+} from "./chunk-UIPDNLXA.js";
 import {
   parseContinuityImprovementLoops
 } from "./chunk-QSVPYQPG.js";
@@ -1259,4 +1259,4 @@ export {
   defaultTierMigrationCycleBudget,
   CompoundingEngine
 };
-//# sourceMappingURL=chunk-A6KTB5R6.js.map
+//# sourceMappingURL=chunk-IQ3OI2RR.js.map