@remnic/core 10.0.13 → 10.0.15

package/dist/connectors/index.js

@@ -33,7 +33,7 @@ import {
 import "../chunk-754XN6LX.js";
 import {
   runCodexMaterialize
-} from "../chunk-ZIZ2G47N.js";
+} from "../chunk-2PYHLSXK.js";
 import "../chunk-3UXOZBHV.js";
 import {
   MATERIALIZE_VERSION,
@@ -58,58 +58,60 @@ import {
 import "../chunk-236PXYG7.js";
 import "../chunk-ZCUTSMR2.js";
 import "../chunk-QDW3E4RD.js";
-import "../chunk-Y3VDGK2O.js";
+import "../chunk-4SCZZ3U7.js";
 import "../chunk-UHVXE24Y.js";
-import "../chunk-LZKOVXMX.js";
+import "../chunk-TRMJ6BYC.js";
 import "../chunk-V4JZCTMK.js";
-import "../chunk-A2E4WNW4.js";
-import "../chunk-KC46VZR5.js";
+import "../chunk-MWWAQXZ6.js";
+import "../chunk-RTTPBBAN.js";
+import "../chunk-655FVTCD.js";
+import "../chunk-GQJKVQJR.js";
 import "../chunk-CYEPCZN5.js";
-import "../chunk-T3FMRLWQ.js";
+import "../chunk-HFSPY26A.js";
 import "../chunk-7VO6E5UD.js";
+import "../chunk-KJXP6RUG.js";
 import "../chunk-VOKHZRHW.js";
-import "../chunk-S7LWX2PQ.js";
-import "../chunk-T2YX56QI.js";
-import "../chunk-4O6WRBGE.js";
 import "../chunk-GUMZC2BO.js";
 import "../chunk-TFA6HPOA.js";
 import "../chunk-F4TWWUMP.js";
 import "../chunk-72A4L5JJ.js";
 import "../chunk-A7Q43EUZ.js";
 import "../chunk-S2V7RUCL.js";
+import "../chunk-PPUNC7UX.js";
 import "../chunk-X3724WL4.js";
 import "../chunk-MRPOZBJC.js";
 import "../chunk-S2HLHAZ4.js";
-import "../chunk-LDXUBPMO.js";
 import "../chunk-DM2T26WE.js";
-import "../chunk-FF6N7BXC.js";
+import "../chunk-LDXUBPMO.js";
 import "../chunk-2DT7PIDZ.js";
 import "../chunk-AAD2ZS6P.js";
-import "../chunk-YYO447A7.js";
+import "../chunk-FF6N7BXC.js";
+import "../chunk-JNIVZNIB.js";
+import "../chunk-YXZG5TVN.js";
 import "../chunk-ZIKENA2C.js";
 import "../chunk-3OUGSOJP.js";
 import "../chunk-SCU65EZI.js";
 import "../chunk-3ONXXHQO.js";
-import "../chunk-YXZG5TVN.js";
-import "../chunk-3WU7XOFN.js";
 import "../chunk-6MKLMEBE.js";
-import "../chunk-QZZPUREO.js";
+import "../chunk-3WU7XOFN.js";
+import "../chunk-G7D6GZ5J.js";
+import "../chunk-3GYSZHMT.js";
 import "../chunk-M5GVCJSJ.js";
 import "../chunk-RBOJCG4T.js";
-import "../chunk-4NDWE44P.js";
+import "../chunk-NZFFGO5O.js";
 import "../chunk-5WITETWU.js";
 import "../chunk-6CIAGZ6X.js";
 import "../chunk-7CT3AI52.js";
-import "../chunk-G7D6GZ5J.js";
-import "../chunk-DGRMWDQY.js";
+import "../chunk-6EDW54SQ.js";
+import "../chunk-66BCOVW2.js";
 import "../chunk-G26YNEOC.js";
+import "../chunk-SWWHIJUJ.js";
+import "../chunk-TPSLVZHS.js";
 import "../chunk-SIGAGKNE.js";
 import "../chunk-IUM3VSHI.js";
-import "../chunk-WVHRNAXL.js";
-import "../chunk-TPSLVZHS.js";
-import "../chunk-23G5P7TA.js";
 import "../chunk-C64XATK7.js";
 import "../chunk-42JKGUFJ.js";
+import "../chunk-23G5P7TA.js";
 import "../chunk-TKC5LZ43.js";
 import "../chunk-I55KAVET.js";
 import "../chunk-L2EXJQJP.js";
@@ -125,40 +127,42 @@ import {
 } from "../chunk-PQVCH2AE.js";
 import "../chunk-PJKTFXE2.js";
 import "../chunk-W5BIQOAJ.js";
-import "../chunk-QWWMS4AE.js";
+import "../chunk-3MO4LWYU.js";
 import "../chunk-YBA52OKG.js";
-import "../chunk-OFCHT2TN.js";
+import "../chunk-5LRV557D.js";
 import "../chunk-BT7NVCML.js";
-import "../chunk-VFTK5WKI.js";
+import "../chunk-STBX5X6B.js";
 import "../chunk-BJMBJZ2Y.js";
 import "../chunk-UKJAGEXH.js";
 import "../chunk-FP2373TW.js";
 import "../chunk-L272A5QW.js";
-import "../chunk-FQD2KPQH.js";
+import "../chunk-P55FACBG.js";
 import "../chunk-ZA53AZND.js";
 import "../chunk-7RJUVTVF.js";
 import "../chunk-AL3UYZ5N.js";
 import "../chunk-RL6NEVXT.js";
+import "../chunk-YET735EZ.js";
 import "../chunk-PWPIERBM.js";
 import "../chunk-IG747LRN.js";
 import "../chunk-C7HJ3NEI.js";
-import "../chunk-KI6UOSNR.js";
+import "../chunk-DEY7B77Y.js";
 import "../chunk-5FVVY2EB.js";
 import "../chunk-BTNNL7ZW.js";
 import "../chunk-JDSVLVCG.js";
 import "../chunk-5GKPFL3S.js";
 import "../chunk-JAKIDQB2.js";
-import "../chunk-EHRE7ZG3.js";
+import "../chunk-5B5WYAHQ.js";
 import "../chunk-P7FMDTKL.js";
 import "../chunk-PCXDUHQH.js";
 import "../chunk-VUFL7X3H.js";
 import "../chunk-C5LWPYS3.js";
-import "../chunk-7LEQREP2.js";
+import "../chunk-PGRZ3FYC.js";
 import "../chunk-ZEFVK7XC.js";
 import "../chunk-6KH5NLQS.js";
 import "../chunk-P2QRMMVQ.js";
 import "../chunk-3MUKQQ7A.js";
 import "../chunk-BTTPKDIL.js";
+import "../chunk-QUIRIG2P.js";
 import "../chunk-LDPPTPO5.js";
 import "../chunk-MAAL6OZV.js";
 import "../chunk-A6XUJE5D.js";

package/dist/console/trace.d.ts

@@ -27,6 +27,7 @@
  *     delay" (back-to-back frames).
  */
 import type { Writable } from "node:stream";
+import { sleepAbortable } from "../utils/sleep.js";
 import type { ConsoleStateSnapshot } from "./state.js";
 export interface TraceRecorder {
     /**
@@ -143,21 +144,11 @@ export declare function computeReplayDelay(rawDeltaMs: number, speed: number): n
  */
 export declare function parseSpeedFlag(raw: unknown): number;
 /**
- * Abortable sleep used by `replayTrace` between frames.
- *
- * Codex P2 (PR #732): unlike a plain `setTimeout` wrapper, this
- * variant REJECTS with `AbortError` when `signal` fires (or is
- * already aborted on entry). That gives callers a way to
- * *distinguish* timer-expiry from signal-driven early exit, instead
- * of silently resolving on both. The replay loop catches the
- * `AbortError` and exits cleanly so Ctrl-C does not have to wait for
- * the current inter-frame `setTimeout` (capped at 60s) to elapse.
- *
- * Resolves only on timer expiry. Rejects with `AbortError` (DOMException-
- * shaped: `name === "AbortError"`) on abort. Exported so callers in
- * tests and adjacent modules can reuse the same primitive.
+ * Abortable sleep used by `replayTrace` between frames: resolves on timer
+ * expiry, rejects with `AbortError` on abort so Ctrl-C exits without waiting
+ * out the inter-frame delay. Shared implementation lives in utils/sleep.js.
  */
-export declare function sleepAbortable(ms: number, signal?: AbortSignal): Promise<void>;
+export { sleepAbortable };
 /**
  * Detect an AbortError-shaped rejection. Matches both
  * `DOMException("...", "AbortError")` and plain `Error` with

package/dist/console/trace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"trace.d.ts","sourceRoot":"","sources":["../../src/console/trace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAMH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAG5C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAyBvD,MAAM,WAAW,aAAa;IAC5B;;;;;OAKG;IACH,MAAM,EAAE,CAAC,QAAQ,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D;;;;;;;;OAQG;IACH,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,gEAAgE;IAChE,YAAY,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,aAAa,CAAC,CAoGxB;AAED,MAAM,WAAW,kBAAkB;IACjC,mDAAmD;IACnD,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,KAAK,MAAM,CAAC;IACrE;;;OAGG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,6BAA6B;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,uDAAuD;IACvD,aAAa,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAAC;CAC3C;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CA+F5B;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI,CAgB3E;AAqCD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAS5E;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAcnD;AASD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,cAAc,CAC5B,EAAE,EAAE,MAAM,EACV,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAmBf;AAiBD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAOlD;AAED,MAAM,WAAW,sBAAsB;IACrC,uDAAuD;IACvD,OAAO,EAAE,OAAO,CAAC;IACjB,gCAAgC;IAChC,QAAQ,EAAE,OAAO,CAAC;IAClB,oCAAoC;IACpC,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,EAC7C,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,sBAAsB,CAAC,CAqDjC"}
+{"version":3,"file":"trace.d.ts","sourceRoot":"","sources":["../../src/console/trace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAMH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGnD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAyBvD,MAAM,WAAW,aAAa;IAC5B;;;;;OAKG;IACH,MAAM,EAAE,CAAC,QAAQ,EAAE,oBAAoB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D;;;;;;;;OAQG;IACH,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,gEAAgE;IAChE,YAAY,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,aAAa,CAAC,CAoGxB;AAED,MAAM,WAAW,kBAAkB;IACjC,mDAAmD;IACnD,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,KAAK,MAAM,CAAC;IACrE;;;OAGG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,6BAA6B;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,uDAAuD;IACvD,aAAa,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAAC;CAC3C;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CA+F5B;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI,CAgB3E;AAqCD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAS5E;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAcnD;AASD;;;;GAIG;AACH,OAAO,EAAE,cAAc,EAAE,CAAC;AAiB1B;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAOlD;AAED,MAAM,WAAW,sBAAsB;IACrC,uDAAuD;IACvD,OAAO,EAAE,OAAO,CAAC;IACjB,gCAAgC;IAChC,QAAQ,EAAE,OAAO,CAAC;IAClB,oCAAoC;IACpC,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,EAC7C,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,sBAAsB,CAAC,CAqDjC"}

package/dist/consolidation-provenance-check.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"consolidation-provenance-check.d.ts","sourceRoot":"","sources":["../src/consolidation-provenance-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AA8HnD;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,IAAI,EACA,+BAA+B,GAC/B,8BAA8B,GAC9B,8BAA8B,CAAC;IACnC,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,6BAA6B;IAC5C,gCAAgC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,cAAc,EAAE,MAAM,CAAC;IACvB,qDAAqD;IACrD,MAAM,EAAE,4BAA4B,EAAE,CAAC;CACxC;AA4BD;;;;GAIG;AACH,wBAAsB,+BAA+B,CAAC,OAAO,EAAE;IAC7D,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAuTzC"}
+{"version":3,"file":"consolidation-provenance-check.d.ts","sourceRoot":"","sources":["../src/consolidation-provenance-check.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AA+HnD;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,IAAI,EACA,+BAA+B,GAC/B,8BAA8B,GAC9B,8BAA8B,CAAC;IACnC,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,6BAA6B;IAC5C,gCAAgC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,cAAc,EAAE,MAAM,CAAC;IACvB,qDAAqD;IACrD,MAAM,EAAE,4BAA4B,EAAE,CAAC;CACxC;AA4BD;;;;GAIG;AACH,wBAAsB,+BAA+B,CAAC,OAAO,EAAE;IAC7D,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAuTzC"}

package/dist/consolidation-provenance-check.js

@@ -1,18 +1,20 @@
 import {
   runConsolidationProvenanceCheck
-} from "./chunk-HT2C4EXO.js";
-import "./chunk-QZZPUREO.js";
+} from "./chunk-L5VCT7LU.js";
+import "./chunk-G7D6GZ5J.js";
+import "./chunk-3GYSZHMT.js";
 import "./chunk-M5GVCJSJ.js";
 import "./chunk-RBOJCG4T.js";
-import "./chunk-4NDWE44P.js";
+import "./chunk-NZFFGO5O.js";
 import "./chunk-5WITETWU.js";
 import "./chunk-6CIAGZ6X.js";
 import "./chunk-7CT3AI52.js";
-import "./chunk-G7D6GZ5J.js";
 import "./chunk-C64XATK7.js";
 import "./chunk-42JKGUFJ.js";
-import "./chunk-EHRE7ZG3.js";
-import "./chunk-7LEQREP2.js";
+import "./chunk-5B5WYAHQ.js";
+import "./chunk-PGRZ3FYC.js";
+import "./chunk-BTTPKDIL.js";
+import "./chunk-QUIRIG2P.js";
 import "./chunk-VS2IYZRU.js";
 import "./chunk-KNA3BXXL.js";
 import "./chunk-3WCASNQZ.js";

package/dist/consolidation-undo.js

@@ -1,6 +1,6 @@
 import {
   getVersion
-} from "./chunk-QZZPUREO.js";
+} from "./chunk-3GYSZHMT.js";
 import {
   bumpMemoryCorpusVersionForDir
 } from "./chunk-M5GVCJSJ.js";
@@ -8,14 +8,15 @@ import "./chunk-RBOJCG4T.js";
 import {
   requestEntityCanonicalIdReconcile,
   withRawEntityPageMutation
-} from "./chunk-4NDWE44P.js";
+} from "./chunk-NZFFGO5O.js";
 import "./chunk-5WITETWU.js";
 import "./chunk-6CIAGZ6X.js";
 import "./chunk-7CT3AI52.js";
 import "./chunk-C64XATK7.js";
 import "./chunk-42JKGUFJ.js";
-import "./chunk-EHRE7ZG3.js";
-import "./chunk-7LEQREP2.js";
+import "./chunk-5B5WYAHQ.js";
+import "./chunk-PGRZ3FYC.js";
+import "./chunk-BTTPKDIL.js";
 import "./chunk-VS2IYZRU.js";
 import "./chunk-KNA3BXXL.js";
 import "./chunk-3WCASNQZ.js";

package/dist/consolidation-undo.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/consolidation-undo.ts"],"sourcesContent":["/**\n * Consolidation undo (issue #561 PR 5).\n *\n * Reverts a consolidated memory by restoring each source memory from its\n * `derived_from` snapshot and archiving the target.\n *\n * Contract:\n *   - Load the target memory markdown file via its absolute path.\n *   - For every `\"<rel>:<version>\"` entry in `derived_from`, fetch the\n *     snapshot content via `page-versioning.getVersion` and restore it\n *     to the original relative path.  If the restore target file\n *     already exists, we skip overwriting it (the source was never\n *     archived, or was re-created since) and record the skip.\n *   - Archive the target with reason code `\"consolidation-undo\"` so the\n *     lifecycle ledger records the undo.\n *   - Dry-run mode produces the same plan without touching disk.\n *\n * The helper is kept pure over `StorageManager` so the CLI can reuse it\n * without additional wiring, and tests can exercise the plan logic\n * directly.\n */\n\nimport path from \"node:path\";\nimport { mkdir, writeFile, access, realpath, lstat } from \"node:fs/promises\";\nimport { constants as fsConstants } from \"node:fs\";\nimport type { StorageManager } from \"./storage.js\";\nimport type { VersioningConfig } from \"./page-versioning.js\";\nimport { bumpMemoryCorpusVersionForDir } from \"./memory-corpus-version.js\";\nimport { requestEntityCanonicalIdReconcile } from \"./storage/entity-canonical-id-references.js\";\nimport { withRawEntityPageMutation } from \"./storage/entity-canonical-id-lock.js\";\nimport { getVersion } from \"./page-versioning.js\";\n\n/**\n * Outcome of restoring a single `derived_from` source.\n */\nexport interface ConsolidationUndoRestore {\n  /** The raw `\"<relpath>:<version>\"` entry from `derived_from`. */\n  entry: string;\n  /** Absolute path where the source would be / was restored. */\n  sourcePath: string;\n  /** What actually happened. */\n  outcome:\n    | \"restored\"\n    | \"skipped_file_exists\"\n    | \"skipped_non_regular_file\"\n    | \"skipped_snapshot_missing\"\n    | \"skipped_malformed_entry\"\n    | \"skipped_outside_memory_dir\"\n    | \"skipped_non_active_path\"\n    | \"skipped_self_referential\"\n    | \"skipped_write_failed\"\n    | \"skipped_blocked_by_other_failures\"\n    | \"skipped_dry_run\";\n  /** Human-readable detail. */\n  detail?: string;\n}\n\n/**\n * Plan + result of a `remnic consolidate undo` invocation.\n */\nexport interface ConsolidationUndoResult {\n  /** Absolute path to the target memory. */\n  targetPath: string;\n  /** True when the target was archived successfully. */\n  targetArchived: boolean;\n  /** Per-source restore outcomes. */\n  restores: ConsolidationUndoRestore[];\n  /** Whether the run was a dry-run plan only. */\n  dryRun: boolean;\n  /** Fatal error, if any — the run bails early. */\n  error?: string;\n}\n\nconst DERIVED_FROM_ENTRY_RE = /^(.+):(\\d+)$/;\n\nfunction parseEntry(entry: unknown): { pagePath: string; versionId: string } | null {\n  // Non-string entries (PR #637 round-3 review, cursor Low) can arrive\n  // from hostile on-disk frontmatter — guard against a .match() crash.\n  if (typeof entry !== \"string\") return null;\n  const match = entry.match(DERIVED_FROM_ENTRY_RE);\n  if (!match) return null;\n  return { pagePath: match[1], versionId: match[2] };\n}\n\n/**\n * Verify that `candidate` resolves inside `root` (defense against\n * path-traversal in `derived_from` entries and user-facing target\n * paths).  Path-string normalization only; for symlink-aware checks\n * use `isInsideDirectoryRealpath`.  Both paths are resolved to\n * absolute form before comparison so `..` segments, symlinks-as-\n * strings, and relative prefixes are normalized.\n */\nexport function isInsideDirectory(candidate: string, root: string): boolean {\n  const normRoot = path.resolve(root);\n  const normCandidate = path.resolve(candidate);\n  const rel = path.relative(normRoot, normCandidate);\n  if (rel.length === 0) return true;\n  if (rel.startsWith(\"..\")) return false;\n  if (path.isAbsolute(rel)) return false;\n  return true;\n}\n\n/**\n * Symlink-aware containment check (PR #637 round-2 review, codex P1).\n *\n * `isInsideDirectory` only normalizes path strings — if a `derived_from`\n * entry resolves through a symlink inside `memoryDir` that points\n * outside, the string check passes but the subsequent `writeFile` would\n * land outside the memory tree.  Use this guard for any path that is\n * about to be written.\n *\n * Walks every parent directory between `candidate` and `root`,\n * `realpath`-ing each segment that exists and rejecting when any\n * segment escapes `root`.  Non-existent parents are resolved as the\n * canonicalized deepest-existing ancestor plus the trailing segments,\n * so a not-yet-created target file still gets the symlink check on its\n * existing parent directories.\n */\nexport async function isInsideDirectoryRealpath(\n  candidate: string,\n  root: string,\n): Promise<boolean> {\n  if (!isInsideDirectory(candidate, root)) return false;\n  // Reject raw `..` segments before canonicalization so that symlinks\n  // cannot be hidden behind intermediate dot-dot components (PR #637\n  // round-14 review, codex P1).\n  const rawSegments = candidate.replace(/\\\\/g, \"/\").split(\"/\");\n  if (rawSegments.some((s) => s === \"..\")) return false;\n  let resolvedRoot: string;\n  try {\n    resolvedRoot = await realpath(path.resolve(root));\n  } catch {\n    return false;\n  }\n  const normCandidate = path.resolve(candidate);\n\n  // Reject dangling symlinks (PR #637 round-3 review, codex P1).\n  // If the candidate itself is a symlink (even if its target doesn't\n  // exist), Node will follow it when we later call `writeFile`.\n  // `lstat` inspects the link itself without dereferencing; if it\n  // succeeds and reports a symlink, we treat the candidate as\n  // unsafe.  We must check every non-root ancestor too — a symlink\n  // anywhere along the path lets an attacker redirect writes.\n  const normRoot = path.resolve(root);\n  const relFromRoot = path.relative(normRoot, normCandidate);\n  const segments = relFromRoot.length > 0 ? relFromRoot.split(path.sep) : [];\n  for (let i = 0; i <= segments.length; i++) {\n    const probe = i === 0 ? normRoot : path.join(normRoot, ...segments.slice(0, i));\n    try {\n      const st = await lstat(probe);\n      if (st.isSymbolicLink() && probe !== normRoot) {\n        // A symlink on the path — resolve THIS segment and bail out\n        // if the resolved target escapes `resolvedRoot`.\n        let target: string;\n        try {\n          target = await realpath(probe);\n        } catch {\n          // Dangling symlink inside memoryDir — always unsafe.\n          return false;\n        }\n        const rel = path.relative(resolvedRoot, target);\n        if (rel.length === 0) continue;\n        if (rel.startsWith(\"..\") || path.isAbsolute(rel)) return false;\n      }\n    } catch {\n      // Segment doesn't exist yet — that's fine, fall through to the\n      // textual containment verification below.\n    }\n  }\n\n  // Walk up from the candidate until we hit a path that exists, then\n  // realpath THAT and re-apply the trailing segments textually.\n  const parts = normCandidate.split(path.sep);\n  for (let i = parts.length; i > 0; i--) {\n    const probe = parts.slice(0, i).join(path.sep) || path.sep;\n    try {\n      const resolved = await realpath(probe);\n      // Re-join any trailing segments that didn't exist yet.\n      const trailing = parts.slice(i).join(path.sep);\n      const final = trailing.length > 0 ? path.join(resolved, trailing) : resolved;\n      // Now apply the textual containment check against the canonical\n      // `resolvedRoot`.\n      const rel = path.relative(resolvedRoot, final);\n      if (rel.length === 0) return true;\n      if (rel.startsWith(\"..\")) return false;\n      if (path.isAbsolute(rel)) return false;\n      return true;\n    } catch {\n      continue;\n    }\n  }\n  // Nothing along the path resolvable — treat as outside by default.\n  return false;\n}\n\n/**\n * Directories under memoryDir that are NOT active memory locations.\n * A `derived_from` entry pointing into one of these should not be\n * counted as \"recovered_existing\" (PR #637 round-7 review, codex P2).\n * The versioning sidecar directory is included dynamically via the\n * `sidecarDir` parameter (PR #637 round-8 review, codex P2).\n */\nconst NON_ACTIVE_PREFIXES = [\"archive/\", \"state/\"];\n\n/**\n * Normalize a relative path by collapsing `.` and `..` segments so\n * that crafted entries like `\"facts/../archive/x.md\"` are reduced to\n * `\"archive/x.md\"` before the non-active-prefix check.\n */\nfunction normalizeRelativePath(p: string): string {\n  // Normalize separators, split into segments, then resolve.\n  const parts = p.replace(/\\\\/g, \"/\").split(\"/\");\n  const resolved: string[] = [];\n  for (const seg of parts) {\n    if (seg === \"\" || seg === \".\") continue;\n    if (seg === \"..\") {\n      if (resolved.length > 0) resolved.pop();\n      // If \"..\" pops past the root, we let the caller's containment\n      // check catch it — don't silently drop.\n    } else {\n      resolved.push(seg);\n    }\n  }\n  return resolved.join(\"/\");\n}\n\n/**\n * Check that a relative path (relative to memoryDir) points to an\n * active memory location rather than an internal/archive directory.\n * Returns `true` when the normalised `pagePath` does NOT start with\n * a known non-active prefix.\n *\n * @param pagePath   Relative path from `derived_from` entry.\n * @param sidecarDir Optional versioning sidecar directory name\n *                   (e.g. `\".versions\"`).  When provided, paths\n *                   under this directory are also rejected as\n *                   non-active.\n */\nexport function isActiveMemoryRelativePath(\n  pagePath: string,\n  sidecarDir?: string,\n): boolean {\n  const normalized = normalizeRelativePath(pagePath);\n  const prefixes = [...NON_ACTIVE_PREFIXES];\n  if (sidecarDir) {\n    const normSidecar = normalizeRelativePath(sidecarDir);\n    prefixes.push(normSidecar + \"/\");\n  }\n  for (const prefix of prefixes) {\n    if (normalized === prefix.slice(0, -1) || normalized.startsWith(prefix)) {\n      return false;\n    }\n  }\n  return true;\n}\n\nasync function isRegularFile(p: string): Promise<boolean> {\n  try {\n    const st = await lstat(p);\n    return st.isFile();\n  } catch {\n    return false;\n  }\n}\n\nasync function fileExists(p: string): Promise<boolean> {\n  try {\n    await access(p, fsConstants.F_OK);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Perform a consolidation-undo operation.\n *\n * @param options.storage        Storage manager for the memory directory.\n * @param options.memoryDir      Absolute memory directory root.\n * @param options.targetPath     Absolute path to the consolidated memory.\n * @param options.versioning     Page-versioning config (sidecarDir must\n *                               match the sidecar layout used when the\n *                               snapshots were created).\n * @param options.dryRun         When true, compute the plan but do not\n *                               write or archive.\n */\nexport async function runConsolidationUndo(options: {\n  storage: StorageManager;\n  memoryDir: string;\n  targetPath: string;\n  versioning: VersioningConfig;\n  dryRun?: boolean;\n}): Promise<ConsolidationUndoResult> {\n  const { storage, memoryDir, targetPath, versioning } = options;\n  const dryRun = options.dryRun === true;\n\n  const result: ConsolidationUndoResult = {\n    targetPath,\n    targetArchived: false,\n    restores: [],\n    dryRun,\n  };\n\n  // Defense against path-traversal (PR #637 review, codex P1): refuse\n  // to operate on a target outside the configured memory directory.\n  // Archive moves and eventual unlink would otherwise let an operator\n  // accidentally destroy an unrelated file with memory-like\n  // frontmatter.  Uses the realpath-aware check so a symlinked\n  // directory inside `memoryDir` can't tunnel a target past the guard.\n  if (!(await isInsideDirectoryRealpath(targetPath, memoryDir))) {\n    result.error = `target path ${targetPath} is outside memory directory ${memoryDir}`;\n    return result;\n  }\n\n  // Reject targets in non-active directories (archive/, state/,\n  // versioning sidecar).  A target inside `.versions/...` would be\n  // a sidecar snapshot, not a real consolidated memory; archiving\n  // it would silently delete version history (PR #637 round-8\n  // review, codex P2).\n  const targetRel = path.relative(memoryDir, targetPath);\n  if (!isActiveMemoryRelativePath(targetRel, versioning.sidecarDir)) {\n    result.error = `target path \"${targetRel}\" is inside a non-active directory — refusing to operate`;\n    return result;\n  }\n\n  // Load the target memory.  readMemoryByPath returns null when the file\n  // is absent or unparseable — surface that as a fatal error because the\n  // caller cannot continue without a derived_from list.\n  const target = await storage.readMemoryByPath(targetPath);\n  if (!target) {\n    result.error = `could not load target memory at ${targetPath}`;\n    return result;\n  }\n\n  const derivedFrom = target.frontmatter.derived_from;\n  if (!Array.isArray(derivedFrom) || derivedFrom.length === 0) {\n    result.error = \"target memory has no derived_from entries — nothing to undo\";\n    return result;\n  }\n\n  // Two-pass plan + execute (PR #637 round-4 review, cursor Medium):\n  // the undo is \"all-or-nothing\" both for the archive decision AND\n  // for the per-source writes.  First pass validates + loads every\n  // snapshot into memory; second pass writes only if every source\n  // would succeed.  This prevents the previous eager-write behaviour\n  // where a later-failing source would leave earlier sources already\n  // written to disk alongside an unarchived consolidated target.\n  type RestorePlan =\n    | { kind: \"skip\"; restore: ConsolidationUndoRestore }\n    | { kind: \"write\"; entry: string; sourcePath: string; content: string }\n    | { kind: \"recovered_existing\"; entry: string; sourcePath: string };\n\n  const plans: RestorePlan[] = [];\n  for (const rawEntry of derivedFrom) {\n    const entry = typeof rawEntry === \"string\" ? rawEntry : String(rawEntry);\n    const parsed = parseEntry(rawEntry);\n    if (!parsed) {\n      plans.push({\n        kind: \"skip\",\n        restore: {\n          entry,\n          sourcePath: \"\",\n          outcome: \"skipped_malformed_entry\",\n          detail: `expected \"<path>:<version>\" shape`,\n        },\n      });\n      continue;\n    }\n\n    // Reject absolute paths in derived_from entries (PR #637 round-10\n    // review, codex P1).  An absolute pagePath would cause path.join to\n    // ignore memoryDir, bypassing the active-directory guard downstream.\n    if (path.isAbsolute(parsed.pagePath)) {\n      plans.push({\n        kind: \"skip\",\n        restore: {\n          entry,\n          sourcePath: parsed.pagePath,\n          outcome: \"skipped_malformed_entry\",\n          detail: `derived_from path must be relative, got absolute: \"${parsed.pagePath}\"`,\n        },\n      });\n      continue;\n    }\n\n    const sourcePath = path.join(memoryDir, parsed.pagePath);\n\n    if (!(await isInsideDirectoryRealpath(sourcePath, memoryDir))) {\n      plans.push({\n        kind: \"skip\",\n        restore: {\n          entry,\n          sourcePath,\n          outcome: \"skipped_outside_memory_dir\",\n          detail: `resolved path escapes memory directory ${memoryDir}`,\n        },\n      });\n      continue;\n    }\n\n    // Reject source paths inside non-active directories (archive/,\n    // state/, versioning sidecar).  A crafted or corrupted derived_from\n    // entry like \"archive/2024-01-01/x.md:1\" would otherwise be counted\n    // as \"recovered_existing\" even though no active memory was restored.\n    // Also resolve symlinks before checking — a derived_from entry like\n    // \"facts/link/stale.md:1\" where `facts/link` points to `archive/…`\n    // must be caught (PR #637 round-8 review, cursor+codex).\n    let resolvedRelative = parsed.pagePath;\n    try {\n      const realBase = await realpath(memoryDir);\n      try {\n        const realSource = await realpath(sourcePath);\n        const rel = path.relative(realBase, realSource);\n        if (!rel.startsWith(\"..\") && !path.isAbsolute(rel)) {\n          resolvedRelative = rel.replace(/\\\\/g, \"/\");\n        }\n      } catch {\n        // realpath on the leaf failed (file doesn't exist yet).  Try\n        // resolving the parent directory instead — if the parent is a\n        // symlink into archive/state, the leaf would be written there\n        // too (PR #637 round-12 review, codex P1).\n        const parentDir = path.dirname(sourcePath);\n        try {\n          const realParent = await realpath(parentDir);\n          const parentRel = path.relative(realBase, realParent);\n          if (!parentRel.startsWith(\"..\") && !path.isAbsolute(parentRel)) {\n            const leafName = path.basename(sourcePath);\n            resolvedRelative = path.join(parentRel, leafName).replace(/\\\\/g, \"/\");\n          }\n        } catch {\n          // Parent also doesn't exist — fall through to text path check\n        }\n      }\n    } catch {\n      // memoryDir realpath failed — use the text path\n    }\n    if (!isActiveMemoryRelativePath(parsed.pagePath, versioning.sidecarDir) ||\n        !isActiveMemoryRelativePath(resolvedRelative, versioning.sidecarDir)) {\n      plans.push({\n        kind: \"skip\",\n        restore: {\n          entry,\n          sourcePath,\n          outcome: \"skipped_non_active_path\",\n          detail: `source path \"${parsed.pagePath}\" is inside a non-active directory (archive/state/versions)`,\n        },\n      });\n      continue;\n    }\n\n    // Reject self-referential derived_from entries (PR #637 round-9 review,\n    // codex P1).  If the source resolves to the same file as the target,\n    // counting it as \"recovered\" would let undo archive the target without\n    // restoring any independent source — leaving no active copy.  This\n    // guards against corrupted or manually-edited derived_from lists.\n    if (path.resolve(sourcePath) === path.resolve(targetPath)) {\n      plans.push({\n        kind: \"skip\",\n        restore: {\n          entry,\n          sourcePath,\n          outcome: \"skipped_self_referential\",\n          detail: `derived_from entry \"${entry}\" resolves to the same file as the target — refusing to count as recovered`,\n        },\n      });\n      continue;\n    }\n\n    if (await isRegularFile(sourcePath)) {\n      // Source is still active (regular file present) — nothing to\n      // restore but this counts as \"recovered\" for the archive\n      // decision.  We require a regular file specifically (PR #637\n      // round-5 review, codex P2): a directory, device node, or\n      // symlink at the source path should not count as \"recovered\"\n      // because a later read won't find the expected memory content.\n      plans.push({ kind: \"recovered_existing\", entry, sourcePath });\n      continue;\n    }\n    if (await fileExists(sourcePath)) {\n      // Something other than a regular file is at the source path\n      // (directory, device node, symlink).  Refuse to overwrite AND\n      // refuse to count as recovered (PR #637 round-5 review, codex\n      // P2) — the operator needs to clean up manually.  This is a\n      // blocking skip: no source writes happen, target stays active.\n      plans.push({\n        kind: \"skip\",\n        restore: {\n          entry,\n          sourcePath,\n          outcome: \"skipped_non_regular_file\",\n          detail: \"source path is occupied by a non-regular-file; refusing to proceed\",\n        },\n      });\n      continue;\n    }\n\n    let snapshotContent: string;\n    try {\n      snapshotContent = await getVersion(\n        sourcePath,\n        parsed.versionId,\n        versioning,\n        memoryDir,\n      );\n    } catch {\n      plans.push({\n        kind: \"skip\",\n        restore: {\n          entry,\n          sourcePath,\n          outcome: \"skipped_snapshot_missing\",\n          detail: `no snapshot for version ${parsed.versionId}`,\n        },\n      });\n      continue;\n    }\n\n    plans.push({ kind: \"write\", entry, sourcePath, content: snapshotContent });\n  }\n\n  // If any plan is a skip (anything other than \"write\" or\n  // \"recovered_existing\"), the undo is over before it starts — no\n  // writes happen.  Reveal every per-source skip reason in the\n  // result so operators can diagnose what went wrong.\n  const skipped = plans.filter((p) => p.kind === \"skip\");\n  if (skipped.length > 0) {\n    for (const p of plans) {\n      if (p.kind === \"skip\") {\n        result.restores.push(p.restore);\n      } else if (p.kind === \"write\") {\n        // Announced-but-not-executed write — still record it so the\n        // operator sees what would have been restored if the failed\n        // sources had been recoverable.\n        result.restores.push({\n          entry: p.entry,\n          sourcePath: p.sourcePath,\n          outcome: dryRun ? \"skipped_dry_run\" : \"skipped_blocked_by_other_failures\",\n          detail: dryRun\n            ? \"would restore from snapshot (blocked by other failures)\"\n            : \"snapshot available but undo aborted due to other failures\",\n        });\n      } else {\n        result.restores.push({\n          entry: p.entry,\n          sourcePath: p.sourcePath,\n          outcome: \"skipped_file_exists\",\n          detail: \"source file already exists; no restore needed\",\n        });\n      }\n    }\n    const recovered = result.restores.filter(\n      (r) => r.outcome === \"restored\" || r.outcome === \"skipped_file_exists\",\n    ).length;\n    if (recovered === 0) {\n      result.error =\n        \"no sources could be recovered (all snapshots missing or paths unsafe); target not archived to preserve data\";\n    } else {\n      result.error = `${skipped.length} of ${plans.length} sources could not be recovered; target not archived (undo is all-or-nothing)`;\n    }\n    return result;\n  }\n\n  // Deduplicate plans by sourcePath: duplicate derived_from entries for\n  // the same source would cause the second wx-flagged write to fail with\n  // EEXIST after the first succeeds.  The first plan for each source wins;\n  // subsequent duplicates are recorded as skipped.  Applied before dry-run\n  // so the preview accurately reflects what execution would do.\n  const seenSourcePaths = new Set<string>();\n  const dedupedPlans: RestorePlan[] = [];\n  for (const p of plans) {\n    if (p.kind === \"write\" || p.kind === \"recovered_existing\") {\n      if (seenSourcePaths.has(p.sourcePath)) {\n        dedupedPlans.push({\n          kind: \"skip\",\n          restore: {\n            entry: p.kind === \"write\" ? p.entry : p.entry,\n            sourcePath: p.sourcePath,\n            outcome: \"skipped_file_exists\",\n            detail: \"duplicate derived_from entry — source already processed\",\n          },\n        });\n        continue;\n      }\n      seenSourcePaths.add(p.sourcePath);\n    }\n    dedupedPlans.push(p);\n  }\n\n  // Dry-run: report what each plan would do.\n  if (dryRun) {\n    for (const p of dedupedPlans) {\n      if (p.kind === \"write\") {\n        result.restores.push({\n          entry: p.entry,\n          sourcePath: p.sourcePath,\n          outcome: \"skipped_dry_run\",\n          detail: \"would restore from snapshot\",\n        });\n      } else if (p.kind === \"recovered_existing\") {\n        result.restores.push({\n          entry: p.entry,\n          sourcePath: p.sourcePath,\n          outcome: \"skipped_file_exists\",\n          detail: \"source file already exists; no restore needed\",\n        });\n      } else if (p.kind === \"skip\" && p.restore) {\n        result.restores.push(p.restore);\n      }\n    }\n    return result;\n  }\n\n  // All validations passed — execute writes.  A write failure here\n  // is a filesystem problem rather than a provenance problem, but\n  // any failure still aborts the archive.\n\n  let writeFailed = false;\n  for (const p of dedupedPlans) {\n    if (p.kind === \"skip\") {\n      // Dedup-generated skip entries and other pre-write skips.\n      if (p.restore) result.restores.push(p.restore);\n      continue;\n    }\n    if (p.kind === \"recovered_existing\") {\n      result.restores.push({\n        entry: p.entry,\n        sourcePath: p.sourcePath,\n        outcome: \"skipped_file_exists\",\n        detail: \"source file already exists; no restore needed\",\n      });\n      continue;\n    }\n    if (p.kind === \"write\") {\n      if (writeFailed) {\n        // All-or-nothing: once a write fails, skip all remaining writes\n        // so the target is not archived with partial source coverage.\n        result.restores.push({\n          entry: p.entry,\n          sourcePath: p.sourcePath,\n          outcome: \"skipped_blocked_by_other_failures\",\n          detail: \"a prior source write failed; skipping remaining writes to honor all-or-nothing contract\",\n        });\n        continue;\n      }\n      try {\n        await mkdir(path.dirname(p.sourcePath), { recursive: true });\n        await withRawEntityPageMutation(memoryDir, p.sourcePath, async () => {\n        // Use exclusive create (wx / O_EXCL) so that if another process\n        // recreates the source file between planning and execution, this\n        // write fails with EEXIST instead of silently overwriting the new\n        // file (PR #637 round-11 review, codex P1).\n        await writeFile(p.sourcePath, p.content, { encoding: \"utf-8\", flag: \"wx\" });\n        // Restore writes an active memory file back out-of-band (direct wx write,\n        // not a StorageManager mutation). Bump the corpus sentinel per successful\n        // restore so a warm hot-memories cache rescans — a later restore failure\n        // returns before archiveMemory() runs, so without this the already-written\n        // restores would stay invisible to recall until an unrelated mutation or\n        // restart (esp. with hotMemoriesCacheTtlMs: 0). Issue #1902, Codex Medium.\n        bumpMemoryCorpusVersionForDir(memoryDir);\n        // Restored bytes predate the current migration journal and can carry\n        // legacy entity references (issue #2213) — request one reconcile pass.\n        await requestEntityCanonicalIdReconcile(path.join(memoryDir, \"state\"));\n        });\n        result.restores.push({\n          entry: p.entry,\n          sourcePath: p.sourcePath,\n          outcome: \"restored\",\n        });\n      } catch (err) {\n        writeFailed = true;\n        result.restores.push({\n          entry: p.entry,\n          sourcePath: p.sourcePath,\n          outcome: \"skipped_write_failed\",\n          detail: `write failed: ${err instanceof Error ? err.message : String(err)}`,\n        });\n      }\n    }\n  }\n\n  if (writeFailed) {\n    result.error =\n      \"one or more source writes failed mid-restore; target not archived to preserve data\";\n    return result;\n  }\n\n  // Archive the target memory.  archiveMemory returns null on\n  // failure — surface that as a fatal error (PR #637 round-5 review,\n  // codex P2) so automation doesn't mistake a half-undo for a clean\n  // run.  The already-completed restores still roll forward; the\n  // result.restores list records what was written.\n  const archivedAt = await storage.archiveMemory(target, {\n    actor: \"consolidate-undo\",\n    reasonCode: \"consolidation-undo\",\n  });\n  result.targetArchived = archivedAt !== null;\n  if (!result.targetArchived) {\n    result.error =\n      \"sources restored successfully but archiving the consolidated target failed; inspect storage for manual cleanup\";\n  }\n  return result;\n}\n\n/**\n * Render a consolidation-undo result as a human-readable multi-line\n * string for the CLI.  Extracted so tests can snapshot the formatting\n * without parsing stdout.\n */\nexport function formatConsolidationUndoResult(result: ConsolidationUndoResult): string {\n  const lines: string[] = [];\n  lines.push(`consolidate undo ${result.dryRun ? \"(dry run) \" : \"\"}→ ${result.targetPath}`);\n  // Emit per-restore details BEFORE the error (PR #637 review, cursor\n  // Medium): the \"no sources could be recovered\" error is set after\n  // the restore loop ran, so operators need the per-source skip\n  // reasons to diagnose which snapshots were missing / outside\n  // memoryDir / malformed.  Early-bail errors (unloadable target,\n  // target outside memoryDir, no derived_from) run before the loop,\n  // so `result.restores` is empty in those cases and this block is a\n  // no-op.\n  for (const r of result.restores) {\n    lines.push(`  - ${r.entry} → ${r.outcome}${r.detail ? ` (${r.detail})` : \"\"}`);\n  }\n  if (result.error) {\n    lines.push(`  ERROR: ${result.error}`);\n    return lines.join(\"\\n\");\n  }\n  lines.push(\n    result.dryRun\n      ? \"  (dry run — no files were modified, target not archived)\"\n      : `  target archived: ${result.targetArchived ? \"yes\" : \"no\"}`,\n  );\n  return lines.join(\"\\n\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAsBA,OAAO,UAAU;AACjB,SAAS,OAAO,WAAW,QAAQ,UAAU,aAAa;AAC1D,SAAS,aAAa,mBAAmB;AAiDzC,IAAM,wBAAwB;AAE9B,SAAS,WAAW,OAAgE;AAGlF,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,QAAQ,MAAM,MAAM,qBAAqB;AAC/C,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,EAAE,UAAU,MAAM,CAAC,GAAG,WAAW,MAAM,CAAC,EAAE;AACnD;AAUO,SAAS,kBAAkB,WAAmB,MAAuB;AAC1E,QAAM,WAAW,KAAK,QAAQ,IAAI;AAClC,QAAM,gBAAgB,KAAK,QAAQ,SAAS;AAC5C,QAAM,MAAM,KAAK,SAAS,UAAU,aAAa;AACjD,MAAI,IAAI,WAAW,EAAG,QAAO;AAC7B,MAAI,IAAI,WAAW,IAAI,EAAG,QAAO;AACjC,MAAI,KAAK,WAAW,GAAG,EAAG,QAAO;AACjC,SAAO;AACT;AAkBA,eAAsB,0BACpB,WACA,MACkB;AAClB,MAAI,CAAC,kBAAkB,WAAW,IAAI,EAAG,QAAO;AAIhD,QAAM,cAAc,UAAU,QAAQ,OAAO,GAAG,EAAE,MAAM,GAAG;AAC3D,MAAI,YAAY,KAAK,CAAC,MAAM,MAAM,IAAI,EAAG,QAAO;AAChD,MAAI;AACJ,MAAI;AACF,mBAAe,MAAM,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,EAClD,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,gBAAgB,KAAK,QAAQ,SAAS;AAS5C,QAAM,WAAW,KAAK,QAAQ,IAAI;AAClC,QAAM,cAAc,KAAK,SAAS,UAAU,aAAa;AACzD,QAAM,WAAW,YAAY,SAAS,IAAI,YAAY,MAAM,KAAK,GAAG,IAAI,CAAC;AACzE,WAAS,IAAI,GAAG,KAAK,SAAS,QAAQ,KAAK;AACzC,UAAM,QAAQ,MAAM,IAAI,WAAW,KAAK,KAAK,UAAU,GAAG,SAAS,MAAM,GAAG,CAAC,CAAC;AAC9E,QAAI;AACF,YAAM,KAAK,MAAM,MAAM,KAAK;AAC5B,UAAI,GAAG,eAAe,KAAK,UAAU,UAAU;AAG7C,YAAI;AACJ,YAAI;AACF,mBAAS,MAAM,SAAS,KAAK;AAAA,QAC/B,QAAQ;AAEN,iBAAO;AAAA,QACT;AACA,cAAM,MAAM,KAAK,SAAS,cAAc,MAAM;AAC9C,YAAI,IAAI,WAAW,EAAG;AACtB,YAAI,IAAI,WAAW,IAAI,KAAK,KAAK,WAAW,GAAG,EAAG,QAAO;AAAA,MAC3D;AAAA,IACF,QAAQ;AAAA,IAGR;AAAA,EACF;AAIA,QAAM,QAAQ,cAAc,MAAM,KAAK,GAAG;AAC1C,WAAS,IAAI,MAAM,QAAQ,IAAI,GAAG,KAAK;AACrC,UAAM,QAAQ,MAAM,MAAM,GAAG,CAAC,EAAE,KAAK,KAAK,GAAG,KAAK,KAAK;AACvD,QAAI;AACF,YAAM,WAAW,MAAM,SAAS,KAAK;AAErC,YAAM,WAAW,MAAM,MAAM,CAAC,EAAE,KAAK,KAAK,GAAG;AAC7C,YAAM,QAAQ,SAAS,SAAS,IAAI,KAAK,KAAK,UAAU,QAAQ,IAAI;AAGpE,YAAM,MAAM,KAAK,SAAS,cAAc,KAAK;AAC7C,UAAI,IAAI,WAAW,EAAG,QAAO;AAC7B,UAAI,IAAI,WAAW,IAAI,EAAG,QAAO;AACjC,UAAI,KAAK,WAAW,GAAG,EAAG,QAAO;AACjC,aAAO;AAAA,IACT,QAAQ;AACN;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AASA,IAAM,sBAAsB,CAAC,YAAY,QAAQ;AAOjD,SAAS,sBAAsB,GAAmB;AAEhD,QAAM,QAAQ,EAAE,QAAQ,OAAO,GAAG,EAAE,MAAM,GAAG;AAC7C,QAAM,WAAqB,CAAC;AAC5B,aAAW,OAAO,OAAO;AACvB,QAAI,QAAQ,MAAM,QAAQ,IAAK;AAC/B,QAAI,QAAQ,MAAM;AAChB,UAAI,SAAS,SAAS,EAAG,UAAS,IAAI;AAAA,IAGxC,OAAO;AACL,eAAS,KAAK,GAAG;AAAA,IACnB;AAAA,EACF;AACA,SAAO,SAAS,KAAK,GAAG;AAC1B;AAcO,SAAS,2BACd,UACA,YACS;AACT,QAAM,aAAa,sBAAsB,QAAQ;AACjD,QAAM,WAAW,CAAC,GAAG,mBAAmB;AACxC,MAAI,YAAY;AACd,UAAM,cAAc,sBAAsB,UAAU;AACpD,aAAS,KAAK,cAAc,GAAG;AAAA,EACjC;AACA,aAAW,UAAU,UAAU;AAC7B,QAAI,eAAe,OAAO,MAAM,GAAG,EAAE,KAAK,WAAW,WAAW,MAAM,GAAG;AACvE,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,cAAc,GAA6B;AACxD,MAAI;AACF,UAAM,KAAK,MAAM,MAAM,CAAC;AACxB,WAAO,GAAG,OAAO;AAAA,EACnB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,WAAW,GAA6B;AACrD,MAAI;AACF,UAAM,OAAO,GAAG,YAAY,IAAI;AAChC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAcA,eAAsB,qBAAqB,SAMN;AACnC,QAAM,EAAE,SAAS,WAAW,YAAY,WAAW,IAAI;AACvD,QAAM,SAAS,QAAQ,WAAW;AAElC,QAAM,SAAkC;AAAA,IACtC;AAAA,IACA,gBAAgB;AAAA,IAChB,UAAU,CAAC;AAAA,IACX;AAAA,EACF;AAQA,MAAI,CAAE,MAAM,0BAA0B,YAAY,SAAS,GAAI;AAC7D,WAAO,QAAQ,eAAe,UAAU,gCAAgC,SAAS;AACjF,WAAO;AAAA,EACT;AAOA,QAAM,YAAY,KAAK,SAAS,WAAW,UAAU;AACrD,MAAI,CAAC,2BAA2B,WAAW,WAAW,UAAU,GAAG;AACjE,WAAO,QAAQ,gBAAgB,SAAS;AACxC,WAAO;AAAA,EACT;AAKA,QAAM,SAAS,MAAM,QAAQ,iBAAiB,UAAU;AACxD,MAAI,CAAC,QAAQ;AACX,WAAO,QAAQ,mCAAmC,UAAU;AAC5D,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,OAAO,YAAY;AACvC,MAAI,CAAC,MAAM,QAAQ,WAAW,KAAK,YAAY,WAAW,GAAG;AAC3D,WAAO,QAAQ;AACf,WAAO;AAAA,EACT;AAcA,QAAM,QAAuB,CAAC;AAC9B,aAAW,YAAY,aAAa;AAClC,UAAM,QAAQ,OAAO,aAAa,WAAW,WAAW,OAAO,QAAQ;AACvE,UAAM,SAAS,WAAW,QAAQ;AAClC,QAAI,CAAC,QAAQ;AACX,YAAM,KAAK;AAAA,QACT,MAAM;AAAA,QACN,SAAS;AAAA,UACP;AAAA,UACA,YAAY;AAAA,UACZ,SAAS;AAAA,UACT,QAAQ;AAAA,QACV;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAKA,QAAI,KAAK,WAAW,OAAO,QAAQ,GAAG;AACpC,YAAM,KAAK;AAAA,QACT,MAAM;AAAA,QACN,SAAS;AAAA,UACP;AAAA,UACA,YAAY,OAAO;AAAA,UACnB,SAAS;AAAA,UACT,QAAQ,sDAAsD,OAAO,QAAQ;AAAA,QAC/E;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAEA,UAAM,aAAa,KAAK,KAAK,WAAW,OAAO,QAAQ;AAEvD,QAAI,CAAE,MAAM,0BAA0B,YAAY,SAAS,GAAI;AAC7D,YAAM,KAAK;AAAA,QACT,MAAM;AAAA,QACN,SAAS;AAAA,UACP;AAAA,UACA;AAAA,UACA,SAAS;AAAA,UACT,QAAQ,0CAA0C,SAAS;AAAA,QAC7D;AAAA,MACF,CAAC;AACD;AAAA,IACF;AASA,QAAI,mBAAmB,OAAO;AAC9B,QAAI;AACF,YAAM,WAAW,MAAM,SAAS,SAAS;AACzC,UAAI;AACF,cAAM,aAAa,MAAM,SAAS,UAAU;AAC5C,cAAM,MAAM,KAAK,SAAS,UAAU,UAAU;AAC9C,YAAI,CAAC,IAAI,WAAW,IAAI,KAAK,CAAC,KAAK,WAAW,GAAG,GAAG;AAClD,6BAAmB,IAAI,QAAQ,OAAO,GAAG;AAAA,QAC3C;AAAA,MACF,QAAQ;AAKN,cAAM,YAAY,KAAK,QAAQ,UAAU;AACzC,YAAI;AACF,gBAAM,aAAa,MAAM,SAAS,SAAS;AAC3C,gBAAM,YAAY,KAAK,SAAS,UAAU,UAAU;AACpD,cAAI,CAAC,UAAU,WAAW,IAAI,KAAK,CAAC,KAAK,WAAW,SAAS,GAAG;AAC9D,kBAAM,WAAW,KAAK,SAAS,UAAU;AACzC,+BAAmB,KAAK,KAAK,WAAW,QAAQ,EAAE,QAAQ,OAAO,GAAG;AAAA,UACtE;AAAA,QACF,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AACA,QAAI,CAAC,2BAA2B,OAAO,UAAU,WAAW,UAAU,KAClE,CAAC,2BAA2B,kBAAkB,WAAW,UAAU,GAAG;AACxE,YAAM,KAAK;AAAA,QACT,MAAM;AAAA,QACN,SAAS;AAAA,UACP;AAAA,UACA;AAAA,UACA,SAAS;AAAA,UACT,QAAQ,gBAAgB,OAAO,QAAQ;AAAA,QACzC;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAOA,QAAI,KAAK,QAAQ,UAAU,MAAM,KAAK,QAAQ,UAAU,GAAG;AACzD,YAAM,KAAK;AAAA,QACT,MAAM;AAAA,QACN,SAAS;AAAA,UACP;AAAA,UACA;AAAA,UACA,SAAS;AAAA,UACT,QAAQ,uBAAuB,KAAK;AAAA,QACtC;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAEA,QAAI,MAAM,cAAc,UAAU,GAAG;AAOnC,YAAM,KAAK,EAAE,MAAM,sBAAsB,OAAO,WAAW,CAAC;AAC5D;AAAA,IACF;AACA,QAAI,MAAM,WAAW,UAAU,GAAG;AAMhC,YAAM,KAAK;AAAA,QACT,MAAM;AAAA,QACN,SAAS;AAAA,UACP;AAAA,UACA;AAAA,UACA,SAAS;AAAA,UACT,QAAQ;AAAA,QACV;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,wBAAkB,MAAM;AAAA,QACtB;AAAA,QACA,OAAO;AAAA,QACP;AAAA,QACA;AAAA,MACF;AAAA,IACF,QAAQ;AACN,YAAM,KAAK;AAAA,QACT,MAAM;AAAA,QACN,SAAS;AAAA,UACP;AAAA,UACA;AAAA,UACA,SAAS;AAAA,UACT,QAAQ,2BAA2B,OAAO,SAAS;AAAA,QACrD;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAEA,UAAM,KAAK,EAAE,MAAM,SAAS,OAAO,YAAY,SAAS,gBAAgB,CAAC;AAAA,EAC3E;AAMA,QAAM,UAAU,MAAM,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM;AACrD,MAAI,QAAQ,SAAS,GAAG;AACtB,eAAW,KAAK,OAAO;AACrB,UAAI,EAAE,SAAS,QAAQ;AACrB,eAAO,SAAS,KAAK,EAAE,OAAO;AAAA,MAChC,WAAW,EAAE,SAAS,SAAS;AAI7B,eAAO,SAAS,KAAK;AAAA,UACnB,OAAO,EAAE;AAAA,UACT,YAAY,EAAE;AAAA,UACd,SAAS,SAAS,oBAAoB;AAAA,UACtC,QAAQ,SACJ,4DACA;AAAA,QACN,CAAC;AAAA,MACH,OAAO;AACL,eAAO,SAAS,KAAK;AAAA,UACnB,OAAO,EAAE;AAAA,UACT,YAAY,EAAE;AAAA,UACd,SAAS;AAAA,UACT,QAAQ;AAAA,QACV,CAAC;AAAA,MACH;AAAA,IACF;AACA,UAAM,YAAY,OAAO,SAAS;AAAA,MAChC,CAAC,MAAM,EAAE,YAAY,cAAc,EAAE,YAAY;AAAA,IACnD,EAAE;AACF,QAAI,cAAc,GAAG;AACnB,aAAO,QACL;AAAA,IACJ,OAAO;AACL,aAAO,QAAQ,GAAG,QAAQ,MAAM,OAAO,MAAM,MAAM;AAAA,IACrD;AACA,WAAO;AAAA,EACT;AAOA,QAAM,kBAAkB,oBAAI,IAAY;AACxC,QAAM,eAA8B,CAAC;AACrC,aAAW,KAAK,OAAO;AACrB,QAAI,EAAE,SAAS,WAAW,EAAE,SAAS,sBAAsB;AACzD,UAAI,gBAAgB,IAAI,EAAE,UAAU,GAAG;AACrC,qBAAa,KAAK;AAAA,UAChB,MAAM;AAAA,UACN,SAAS;AAAA,YACP,OAAO,EAAE,SAAS,UAAU,EAAE,QAAQ,EAAE;AAAA,YACxC,YAAY,EAAE;AAAA,YACd,SAAS;AAAA,YACT,QAAQ;AAAA,UACV;AAAA,QACF,CAAC;AACD;AAAA,MACF;AACA,sBAAgB,IAAI,EAAE,UAAU;AAAA,IAClC;AACA,iBAAa,KAAK,CAAC;AAAA,EACrB;AAGA,MAAI,QAAQ;AACV,eAAW,KAAK,cAAc;AAC5B,UAAI,EAAE,SAAS,SAAS;AACtB,eAAO,SAAS,KAAK;AAAA,UACnB,OAAO,EAAE;AAAA,UACT,YAAY,EAAE;AAAA,UACd,SAAS;AAAA,UACT,QAAQ;AAAA,QACV,CAAC;AAAA,MACH,WAAW,EAAE,SAAS,sBAAsB;AAC1C,eAAO,SAAS,KAAK;AAAA,UACnB,OAAO,EAAE;AAAA,UACT,YAAY,EAAE;AAAA,UACd,SAAS;AAAA,UACT,QAAQ;AAAA,QACV,CAAC;AAAA,MACH,WAAW,EAAE,SAAS,UAAU,EAAE,SAAS;AACzC,eAAO,SAAS,KAAK,EAAE,OAAO;AAAA,MAChC;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAMA,MAAI,cAAc;AAClB,aAAW,KAAK,cAAc;AAC5B,QAAI,EAAE,SAAS,QAAQ;AAErB,UAAI,EAAE,QAAS,QAAO,SAAS,KAAK,EAAE,OAAO;AAC7C;AAAA,IACF;AACA,QAAI,EAAE,SAAS,sBAAsB;AACnC,aAAO,SAAS,KAAK;AAAA,QACnB,OAAO,EAAE;AAAA,QACT,YAAY,EAAE;AAAA,QACd,SAAS;AAAA,QACT,QAAQ;AAAA,MACV,CAAC;AACD;AAAA,IACF;AACA,QAAI,EAAE,SAAS,SAAS;AACtB,UAAI,aAAa;AAGf,eAAO,SAAS,KAAK;AAAA,UACnB,OAAO,EAAE;AAAA,UACT,YAAY,EAAE;AAAA,UACd,SAAS;AAAA,UACT,QAAQ;AAAA,QACV,CAAC;AACD;AAAA,MACF;AACA,UAAI;AACF,cAAM,MAAM,KAAK,QAAQ,EAAE,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AAC3D,cAAM,0BAA0B,WAAW,EAAE,YAAY,YAAY;AAKrE,gBAAM,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,SAAS,MAAM,KAAK,CAAC;AAO1E,wCAA8B,SAAS;AAGvC,gBAAM,kCAAkC,KAAK,KAAK,WAAW,OAAO,CAAC;AAAA,QACrE,CAAC;AACD,eAAO,SAAS,KAAK;AAAA,UACnB,OAAO,EAAE;AAAA,UACT,YAAY,EAAE;AAAA,UACd,SAAS;AAAA,QACX,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,sBAAc;AACd,eAAO,SAAS,KAAK;AAAA,UACnB,OAAO,EAAE;AAAA,UACT,YAAY,EAAE;AAAA,UACd,SAAS;AAAA,UACT,QAAQ,iBAAiB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QAC3E,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,MAAI,aAAa;AACf,WAAO,QACL;AACF,WAAO;AAAA,EACT;AAOA,QAAM,aAAa,MAAM,QAAQ,cAAc,QAAQ;AAAA,IACrD,OAAO;AAAA,IACP,YAAY;AAAA,EACd,CAAC;AACD,SAAO,iBAAiB,eAAe;AACvC,MAAI,CAAC,OAAO,gBAAgB;AAC1B,WAAO,QACL;AAAA,EACJ;AACA,SAAO;AACT;AAOO,SAAS,8BAA8B,QAAyC;AACrF,QAAM,QAAkB,CAAC;AACzB,QAAM,KAAK,oBAAoB,OAAO,SAAS,eAAe,EAAE,UAAK,OAAO,UAAU,EAAE;AASxF,aAAW,KAAK,OAAO,UAAU;AAC/B,UAAM,KAAK,OAAO,EAAE,KAAK,WAAM,EAAE,OAAO,GAAG,EAAE,SAAS,KAAK,EAAE,MAAM,MAAM,EAAE,EAAE;AAAA,EAC/E;AACA,MAAI,OAAO,OAAO;AAChB,UAAM,KAAK,YAAY,OAAO,KAAK,EAAE;AACrC,WAAO,MAAM,KAAK,IAAI;AAAA,EACxB;AACA,QAAM;AAAA,IACJ,OAAO,SACH,mEACA,sBAAsB,OAAO,iBAAiB,QAAQ,IAAI;AAAA,EAChE;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;","names":[]}
+{"version":3,"sources":["../src/consolidation-undo.ts"],"sourcesContent":["/**\n * Consolidation undo (issue #561 PR 5).\n *\n * Reverts a consolidated memory by restoring each source memory from its\n * `derived_from` snapshot and archiving the target.\n *\n * Contract:\n *   - Load the target memory markdown file via its absolute path.\n *   - For every `\"<rel>:<version>\"` entry in `derived_from`, fetch the\n *     snapshot content via `page-versioning.getVersion` and restore it\n *     to the original relative path.  If the restore target file\n *     already exists, we skip overwriting it (the source was never\n *     archived, or was re-created since) and record the skip.\n *   - Archive the target with reason code `\"consolidation-undo\"` so the\n *     lifecycle ledger records the undo.\n *   - Dry-run mode produces the same plan without touching disk.\n *\n * The helper is kept pure over `StorageManager` so the CLI can reuse it\n * without additional wiring, and tests can exercise the plan logic\n * directly.\n */\n\nimport path from \"node:path\";\nimport { mkdir, writeFile, access, realpath, lstat } from \"node:fs/promises\";\nimport { constants as fsConstants } from \"node:fs\";\nimport type { StorageManager } from \"./storage.js\";\nimport type { VersioningConfig } from \"./page-versioning.js\";\nimport { bumpMemoryCorpusVersionForDir } from \"./memory-corpus-version.js\";\nimport { requestEntityCanonicalIdReconcile } from \"./storage/entity-canonical-id-references.js\";\nimport { withRawEntityPageMutation } from \"./storage/entity-canonical-id-lock.js\";\nimport { getVersion } from \"./page-versioning.js\";\n\n/**\n * Outcome of restoring a single `derived_from` source.\n */\nexport interface ConsolidationUndoRestore {\n  /** The raw `\"<relpath>:<version>\"` entry from `derived_from`. */\n  entry: string;\n  /** Absolute path where the source would be / was restored. */\n  sourcePath: string;\n  /** What actually happened. */\n  outcome:\n    | \"restored\"\n    | \"skipped_file_exists\"\n    | \"skipped_non_regular_file\"\n    | \"skipped_snapshot_missing\"\n    | \"skipped_malformed_entry\"\n    | \"skipped_outside_memory_dir\"\n    | \"skipped_non_active_path\"\n    | \"skipped_self_referential\"\n    | \"skipped_write_failed\"\n    | \"skipped_blocked_by_other_failures\"\n    | \"skipped_dry_run\";\n  /** Human-readable detail. */\n  detail?: string;\n}\n\n/**\n * Plan + result of a `remnic consolidate undo` invocation.\n */\nexport interface ConsolidationUndoResult {\n  /** Absolute path to the target memory. */\n  targetPath: string;\n  /** True when the target was archived successfully. */\n  targetArchived: boolean;\n  /** Per-source restore outcomes. */\n  restores: ConsolidationUndoRestore[];\n  /** Whether the run was a dry-run plan only. */\n  dryRun: boolean;\n  /** Fatal error, if any — the run bails early. */\n  error?: string;\n}\n\nconst DERIVED_FROM_ENTRY_RE = /^(.+):(\\d+)$/;\n\nfunction parseEntry(entry: unknown): { pagePath: string; versionId: string } | null {\n  // Non-string entries (PR #637 round-3 review, cursor Low) can arrive\n  // from hostile on-disk frontmatter — guard against a .match() crash.\n  if (typeof entry !== \"string\") return null;\n  const match = entry.match(DERIVED_FROM_ENTRY_RE);\n  if (!match) return null;\n  return { pagePath: match[1], versionId: match[2] };\n}\n\n/**\n * Verify that `candidate` resolves inside `root` (defense against\n * path-traversal in `derived_from` entries and user-facing target\n * paths).  Path-string normalization only; for symlink-aware checks\n * use `isInsideDirectoryRealpath`.  Both paths are resolved to\n * absolute form before comparison so `..` segments, symlinks-as-\n * strings, and relative prefixes are normalized.\n */\nexport function isInsideDirectory(candidate: string, root: string): boolean {\n  const normRoot = path.resolve(root);\n  const normCandidate = path.resolve(candidate);\n  const rel = path.relative(normRoot, normCandidate);\n  if (rel.length === 0) return true;\n  if (rel.startsWith(\"..\")) return false;\n  if (path.isAbsolute(rel)) return false;\n  return true;\n}\n\n/**\n * Symlink-aware containment check (PR #637 round-2 review, codex P1).\n *\n * `isInsideDirectory` only normalizes path strings — if a `derived_from`\n * entry resolves through a symlink inside `memoryDir` that points\n * outside, the string check passes but the subsequent `writeFile` would\n * land outside the memory tree.  Use this guard for any path that is\n * about to be written.\n *\n * Walks every parent directory between `candidate` and `root`,\n * `realpath`-ing each segment that exists and rejecting when any\n * segment escapes `root`.  Non-existent parents are resolved as the\n * canonicalized deepest-existing ancestor plus the trailing segments,\n * so a not-yet-created target file still gets the symlink check on its\n * existing parent directories.\n */\nexport async function isInsideDirectoryRealpath(\n  candidate: string,\n  root: string,\n): Promise<boolean> {\n  if (!isInsideDirectory(candidate, root)) return false;\n  // Reject raw `..` segments before canonicalization so that symlinks\n  // cannot be hidden behind intermediate dot-dot components (PR #637\n  // round-14 review, codex P1).\n  const rawSegments = candidate.replace(/\\\\/g, \"/\").split(\"/\");\n  if (rawSegments.some((s) => s === \"..\")) return false;\n  let resolvedRoot: string;\n  try {\n    resolvedRoot = await realpath(path.resolve(root));\n  } catch {\n    return false;\n  }\n  const normCandidate = path.resolve(candidate);\n\n  // Reject dangling symlinks (PR #637 round-3 review, codex P1).\n  // If the candidate itself is a symlink (even if its target doesn't\n  // exist), Node will follow it when we later call `writeFile`.\n  // `lstat` inspects the link itself without dereferencing; if it\n  // succeeds and reports a symlink, we treat the candidate as\n  // unsafe.  We must check every non-root ancestor too — a symlink\n  // anywhere along the path lets an attacker redirect writes.\n  const normRoot = path.resolve(root);\n  const relFromRoot = path.relative(normRoot, normCandidate);\n  const segments = relFromRoot.length > 0 ? relFromRoot.split(path.sep) : [];\n  for (let i = 0; i <= segments.length; i++) {\n    const probe = i === 0 ? normRoot : path.join(normRoot, ...segments.slice(0, i));\n    try {\n      const st = await lstat(probe);\n      if (st.isSymbolicLink() && probe !== normRoot) {\n        // A symlink on the path — resolve THIS segment and bail out\n        // if the resolved target escapes `resolvedRoot`.\n        let target: string;\n        try {\n          target = await realpath(probe);\n        } catch {\n          // Dangling symlink inside memoryDir — always unsafe.\n          return false;\n        }\n        const rel = path.relative(resolvedRoot, target);\n        if (rel.length === 0) continue;\n        if (rel.startsWith(\"..\") || path.isAbsolute(rel)) return false;\n      }\n    } catch {\n      // Segment doesn't exist yet — that's fine, fall through to the\n      // textual containment verification below.\n    }\n  }\n\n  // Walk up from the candidate until we hit a path that exists, then\n  // realpath THAT and re-apply the trailing segments textually.\n  const parts = normCandidate.split(path.sep);\n  for (let i = parts.length; i > 0; i--) {\n    const probe = parts.slice(0, i).join(path.sep) || path.sep;\n    try {\n      const resolved = await realpath(probe);\n      // Re-join any trailing segments that didn't exist yet.\n      const trailing = parts.slice(i).join(path.sep);\n      const final = trailing.length > 0 ? path.join(resolved, trailing) : resolved;\n      // Now apply the textual containment check against the canonical\n      // `resolvedRoot`.\n      const rel = path.relative(resolvedRoot, final);\n      if (rel.length === 0) return true;\n      if (rel.startsWith(\"..\")) return false;\n      if (path.isAbsolute(rel)) return false;\n      return true;\n    } catch {\n      continue;\n    }\n  }\n  // Nothing along the path resolvable — treat as outside by default.\n  return false;\n}\n\n/**\n * Directories under memoryDir that are NOT active memory locations.\n * A `derived_from` entry pointing into one of these should not be\n * counted as \"recovered_existing\" (PR #637 round-7 review, codex P2).\n * The versioning sidecar directory is included dynamically via the\n * `sidecarDir` parameter (PR #637 round-8 review, codex P2).\n */\nconst NON_ACTIVE_PREFIXES = [\"archive/\", \"state/\"];\n\n/**\n * Normalize a relative path by collapsing `.` and `..` segments so\n * that crafted entries like `\"facts/../archive/x.md\"` are reduced to\n * `\"archive/x.md\"` before the non-active-prefix check.\n */\nfunction normalizeRelativePath(p: string): string {\n  // Normalize separators, split into segments, then resolve.\n  const parts = p.replace(/\\\\/g, \"/\").split(\"/\");\n  const resolved: string[] = [];\n  for (const seg of parts) {\n    if (seg === \"\" || seg === \".\") continue;\n    if (seg === \"..\") {\n      if (resolved.length > 0) resolved.pop();\n      // If \"..\" pops past the root, we let the caller's containment\n      // check catch it — don't silently drop.\n    } else {\n      resolved.push(seg);\n    }\n  }\n  return resolved.join(\"/\");\n}\n\n/**\n * Check that a relative path (relative to memoryDir) points to an\n * active memory location rather than an internal/archive directory.\n * Returns `true` when the normalised `pagePath` does NOT start with\n * a known non-active prefix.\n *\n * @param pagePath   Relative path from `derived_from` entry.\n * @param sidecarDir Optional versioning sidecar directory name\n *                   (e.g. `\".versions\"`).  When provided, paths\n *                   under this directory are also rejected as\n *                   non-active.\n */\nexport function isActiveMemoryRelativePath(\n  pagePath: string,\n  sidecarDir?: string,\n): boolean {\n  const normalized = normalizeRelativePath(pagePath);\n  const prefixes = [...NON_ACTIVE_PREFIXES];\n  if (sidecarDir) {\n    const normSidecar = normalizeRelativePath(sidecarDir);\n    prefixes.push(normSidecar + \"/\");\n  }\n  for (const prefix of prefixes) {\n    if (normalized === prefix.slice(0, -1) || normalized.startsWith(prefix)) {\n      return false;\n    }\n  }\n  return true;\n}\n\nasync function isRegularFile(p: string): Promise<boolean> {\n  try {\n    const st = await lstat(p);\n    return st.isFile();\n  } catch {\n    return false;\n  }\n}\n\nasync function fileExists(p: string): Promise<boolean> {\n  try {\n    await access(p, fsConstants.F_OK);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Perform a consolidation-undo operation.\n *\n * @param options.storage        Storage manager for the memory directory.\n * @param options.memoryDir      Absolute memory directory root.\n * @param options.targetPath     Absolute path to the consolidated memory.\n * @param options.versioning     Page-versioning config (sidecarDir must\n *                               match the sidecar layout used when the\n *                               snapshots were created).\n * @param options.dryRun         When true, compute the plan but do not\n *                               write or archive.\n */\nexport async function runConsolidationUndo(options: {\n  storage: StorageManager;\n  memoryDir: string;\n  targetPath: string;\n  versioning: VersioningConfig;\n  dryRun?: boolean;\n}): Promise<ConsolidationUndoResult> {\n  const { storage, memoryDir, targetPath, versioning } = options;\n  const dryRun = options.dryRun === true;\n\n  const result: ConsolidationUndoResult = {\n    targetPath,\n    targetArchived: false,\n    restores: [],\n    dryRun,\n  };\n\n  // Defense against path-traversal (PR #637 review, codex P1): refuse\n  // to operate on a target outside the configured memory directory.\n  // Archive moves and eventual unlink would otherwise let an operator\n  // accidentally destroy an unrelated file with memory-like\n  // frontmatter.  Uses the realpath-aware check so a symlinked\n  // directory inside `memoryDir` can't tunnel a target past the guard.\n  if (!(await isInsideDirectoryRealpath(targetPath, memoryDir))) {\n    result.error = `target path ${targetPath} is outside memory directory ${memoryDir}`;\n    return result;\n  }\n\n  // Reject targets in non-active directories (archive/, state/,\n  // versioning sidecar).  A target inside `.versions/...` would be\n  // a sidecar snapshot, not a real consolidated memory; archiving\n  // it would silently delete version history (PR #637 round-8\n  // review, codex P2).\n  const targetRel = path.relative(memoryDir, targetPath);\n  if (!isActiveMemoryRelativePath(targetRel, versioning.sidecarDir)) {\n    result.error = `target path \"${targetRel}\" is inside a non-active directory — refusing to operate`;\n    return result;\n  }\n\n  // Load the target memory.  readMemoryByPath returns null when the file\n  // is absent or unparseable — surface that as a fatal error because the\n  // caller cannot continue without a derived_from list.\n  const target = await storage.readMemoryByPath(targetPath);\n  if (!target) {\n    result.error = `could not load target memory at ${targetPath}`;\n    return result;\n  }\n\n  const derivedFrom = target.frontmatter.derived_from;\n  if (!Array.isArray(derivedFrom) || derivedFrom.length === 0) {\n    result.error = \"target memory has no derived_from entries — nothing to undo\";\n    return result;\n  }\n\n  // Two-pass plan + execute (PR #637 round-4 review, cursor Medium):\n  // the undo is \"all-or-nothing\" both for the archive decision AND\n  // for the per-source writes.  First pass validates + loads every\n  // snapshot into memory; second pass writes only if every source\n  // would succeed.  This prevents the previous eager-write behaviour\n  // where a later-failing source would leave earlier sources already\n  // written to disk alongside an unarchived consolidated target.\n  type RestorePlan =\n    | { kind: \"skip\"; restore: ConsolidationUndoRestore }\n    | { kind: \"write\"; entry: string; sourcePath: string; content: string }\n    | { kind: \"recovered_existing\"; entry: string; sourcePath: string };\n\n  const plans: RestorePlan[] = [];\n  for (const rawEntry of derivedFrom) {\n    const entry = typeof rawEntry === \"string\" ? rawEntry : String(rawEntry);\n    const parsed = parseEntry(rawEntry);\n    if (!parsed) {\n      plans.push({\n        kind: \"skip\",\n        restore: {\n          entry,\n          sourcePath: \"\",\n          outcome: \"skipped_malformed_entry\",\n          detail: `expected \"<path>:<version>\" shape`,\n        },\n      });\n      continue;\n    }\n\n    // Reject absolute paths in derived_from entries (PR #637 round-10\n    // review, codex P1).  An absolute pagePath would cause path.join to\n    // ignore memoryDir, bypassing the active-directory guard downstream.\n    if (path.isAbsolute(parsed.pagePath)) {\n      plans.push({\n        kind: \"skip\",\n        restore: {\n          entry,\n          sourcePath: parsed.pagePath,\n          outcome: \"skipped_malformed_entry\",\n          detail: `derived_from path must be relative, got absolute: \"${parsed.pagePath}\"`,\n        },\n      });\n      continue;\n    }\n\n    const sourcePath = path.join(memoryDir, parsed.pagePath);\n\n    if (!(await isInsideDirectoryRealpath(sourcePath, memoryDir))) {\n      plans.push({\n        kind: \"skip\",\n        restore: {\n          entry,\n          sourcePath,\n          outcome: \"skipped_outside_memory_dir\",\n          detail: `resolved path escapes memory directory ${memoryDir}`,\n        },\n      });\n      continue;\n    }\n\n    // Reject source paths inside non-active directories (archive/,\n    // state/, versioning sidecar).  A crafted or corrupted derived_from\n    // entry like \"archive/2024-01-01/x.md:1\" would otherwise be counted\n    // as \"recovered_existing\" even though no active memory was restored.\n    // Also resolve symlinks before checking — a derived_from entry like\n    // \"facts/link/stale.md:1\" where `facts/link` points to `archive/…`\n    // must be caught (PR #637 round-8 review, cursor+codex).\n    let resolvedRelative = parsed.pagePath;\n    try {\n      const realBase = await realpath(memoryDir);\n      try {\n        const realSource = await realpath(sourcePath);\n        const rel = path.relative(realBase, realSource);\n        if (!rel.startsWith(\"..\") && !path.isAbsolute(rel)) {\n          resolvedRelative = rel.replace(/\\\\/g, \"/\");\n        }\n      } catch {\n        // realpath on the leaf failed (file doesn't exist yet).  Try\n        // resolving the parent directory instead — if the parent is a\n        // symlink into archive/state, the leaf would be written there\n        // too (PR #637 round-12 review, codex P1).\n        const parentDir = path.dirname(sourcePath);\n        try {\n          const realParent = await realpath(parentDir);\n          const parentRel = path.relative(realBase, realParent);\n          if (!parentRel.startsWith(\"..\") && !path.isAbsolute(parentRel)) {\n            const leafName = path.basename(sourcePath);\n            resolvedRelative = path.join(parentRel, leafName).replace(/\\\\/g, \"/\");\n          }\n        } catch {\n          // Parent also doesn't exist — fall through to text path check\n        }\n      }\n    } catch {\n      // memoryDir realpath failed — use the text path\n    }\n    if (!isActiveMemoryRelativePath(parsed.pagePath, versioning.sidecarDir) ||\n        !isActiveMemoryRelativePath(resolvedRelative, versioning.sidecarDir)) {\n      plans.push({\n        kind: \"skip\",\n        restore: {\n          entry,\n          sourcePath,\n          outcome: \"skipped_non_active_path\",\n          detail: `source path \"${parsed.pagePath}\" is inside a non-active directory (archive/state/versions)`,\n        },\n      });\n      continue;\n    }\n\n    // Reject self-referential derived_from entries (PR #637 round-9 review,\n    // codex P1).  If the source resolves to the same file as the target,\n    // counting it as \"recovered\" would let undo archive the target without\n    // restoring any independent source — leaving no active copy.  This\n    // guards against corrupted or manually-edited derived_from lists.\n    if (path.resolve(sourcePath) === path.resolve(targetPath)) {\n      plans.push({\n        kind: \"skip\",\n        restore: {\n          entry,\n          sourcePath,\n          outcome: \"skipped_self_referential\",\n          detail: `derived_from entry \"${entry}\" resolves to the same file as the target — refusing to count as recovered`,\n        },\n      });\n      continue;\n    }\n\n    if (await isRegularFile(sourcePath)) {\n      // Source is still active (regular file present) — nothing to\n      // restore but this counts as \"recovered\" for the archive\n      // decision.  We require a regular file specifically (PR #637\n      // round-5 review, codex P2): a directory, device node, or\n      // symlink at the source path should not count as \"recovered\"\n      // because a later read won't find the expected memory content.\n      plans.push({ kind: \"recovered_existing\", entry, sourcePath });\n      continue;\n    }\n    if (await fileExists(sourcePath)) {\n      // Something other than a regular file is at the source path\n      // (directory, device node, symlink).  Refuse to overwrite AND\n      // refuse to count as recovered (PR #637 round-5 review, codex\n      // P2) — the operator needs to clean up manually.  This is a\n      // blocking skip: no source writes happen, target stays active.\n      plans.push({\n        kind: \"skip\",\n        restore: {\n          entry,\n          sourcePath,\n          outcome: \"skipped_non_regular_file\",\n          detail: \"source path is occupied by a non-regular-file; refusing to proceed\",\n        },\n      });\n      continue;\n    }\n\n    let snapshotContent: string;\n    try {\n      snapshotContent = await getVersion(\n        sourcePath,\n        parsed.versionId,\n        versioning,\n        memoryDir,\n      );\n    } catch {\n      plans.push({\n        kind: \"skip\",\n        restore: {\n          entry,\n          sourcePath,\n          outcome: \"skipped_snapshot_missing\",\n          detail: `no snapshot for version ${parsed.versionId}`,\n        },\n      });\n      continue;\n    }\n\n    plans.push({ kind: \"write\", entry, sourcePath, content: snapshotContent });\n  }\n\n  // If any plan is a skip (anything other than \"write\" or\n  // \"recovered_existing\"), the undo is over before it starts — no\n  // writes happen.  Reveal every per-source skip reason in the\n  // result so operators can diagnose what went wrong.\n  const skipped = plans.filter((p) => p.kind === \"skip\");\n  if (skipped.length > 0) {\n    for (const p of plans) {\n      if (p.kind === \"skip\") {\n        result.restores.push(p.restore);\n      } else if (p.kind === \"write\") {\n        // Announced-but-not-executed write — still record it so the\n        // operator sees what would have been restored if the failed\n        // sources had been recoverable.\n        result.restores.push({\n          entry: p.entry,\n          sourcePath: p.sourcePath,\n          outcome: dryRun ? \"skipped_dry_run\" : \"skipped_blocked_by_other_failures\",\n          detail: dryRun\n            ? \"would restore from snapshot (blocked by other failures)\"\n            : \"snapshot available but undo aborted due to other failures\",\n        });\n      } else {\n        result.restores.push({\n          entry: p.entry,\n          sourcePath: p.sourcePath,\n          outcome: \"skipped_file_exists\",\n          detail: \"source file already exists; no restore needed\",\n        });\n      }\n    }\n    const recovered = result.restores.filter(\n      (r) => r.outcome === \"restored\" || r.outcome === \"skipped_file_exists\",\n    ).length;\n    if (recovered === 0) {\n      result.error =\n        \"no sources could be recovered (all snapshots missing or paths unsafe); target not archived to preserve data\";\n    } else {\n      result.error = `${skipped.length} of ${plans.length} sources could not be recovered; target not archived (undo is all-or-nothing)`;\n    }\n    return result;\n  }\n\n  // Deduplicate plans by sourcePath: duplicate derived_from entries for\n  // the same source would cause the second wx-flagged write to fail with\n  // EEXIST after the first succeeds.  The first plan for each source wins;\n  // subsequent duplicates are recorded as skipped.  Applied before dry-run\n  // so the preview accurately reflects what execution would do.\n  const seenSourcePaths = new Set<string>();\n  const dedupedPlans: RestorePlan[] = [];\n  for (const p of plans) {\n    if (p.kind === \"write\" || p.kind === \"recovered_existing\") {\n      if (seenSourcePaths.has(p.sourcePath)) {\n        dedupedPlans.push({\n          kind: \"skip\",\n          restore: {\n            entry: p.kind === \"write\" ? p.entry : p.entry,\n            sourcePath: p.sourcePath,\n            outcome: \"skipped_file_exists\",\n            detail: \"duplicate derived_from entry — source already processed\",\n          },\n        });\n        continue;\n      }\n      seenSourcePaths.add(p.sourcePath);\n    }\n    dedupedPlans.push(p);\n  }\n\n  // Dry-run: report what each plan would do.\n  if (dryRun) {\n    for (const p of dedupedPlans) {\n      if (p.kind === \"write\") {\n        result.restores.push({\n          entry: p.entry,\n          sourcePath: p.sourcePath,\n          outcome: \"skipped_dry_run\",\n          detail: \"would restore from snapshot\",\n        });\n      } else if (p.kind === \"recovered_existing\") {\n        result.restores.push({\n          entry: p.entry,\n          sourcePath: p.sourcePath,\n          outcome: \"skipped_file_exists\",\n          detail: \"source file already exists; no restore needed\",\n        });\n      } else if (p.kind === \"skip\" && p.restore) {\n        result.restores.push(p.restore);\n      }\n    }\n    return result;\n  }\n\n  // All validations passed — execute writes.  A write failure here\n  // is a filesystem problem rather than a provenance problem, but\n  // any failure still aborts the archive.\n\n  let writeFailed = false;\n  for (const p of dedupedPlans) {\n    if (p.kind === \"skip\") {\n      // Dedup-generated skip entries and other pre-write skips.\n      if (p.restore) result.restores.push(p.restore);\n      continue;\n    }\n    if (p.kind === \"recovered_existing\") {\n      result.restores.push({\n        entry: p.entry,\n        sourcePath: p.sourcePath,\n        outcome: \"skipped_file_exists\",\n        detail: \"source file already exists; no restore needed\",\n      });\n      continue;\n    }\n    if (p.kind === \"write\") {\n      if (writeFailed) {\n        // All-or-nothing: once a write fails, skip all remaining writes\n        // so the target is not archived with partial source coverage.\n        result.restores.push({\n          entry: p.entry,\n          sourcePath: p.sourcePath,\n          outcome: \"skipped_blocked_by_other_failures\",\n          detail: \"a prior source write failed; skipping remaining writes to honor all-or-nothing contract\",\n        });\n        continue;\n      }\n      try {\n        await mkdir(path.dirname(p.sourcePath), { recursive: true });\n        await withRawEntityPageMutation(memoryDir, p.sourcePath, async () => {\n        // Use exclusive create (wx / O_EXCL) so that if another process\n        // recreates the source file between planning and execution, this\n        // write fails with EEXIST instead of silently overwriting the new\n        // file (PR #637 round-11 review, codex P1).\n        await writeFile(p.sourcePath, p.content, { encoding: \"utf-8\", flag: \"wx\" });\n        // Restore writes an active memory file back out-of-band (direct wx write,\n        // not a StorageManager mutation). Bump the corpus sentinel per successful\n        // restore so a warm hot-memories cache rescans — a later restore failure\n        // returns before archiveMemory() runs, so without this the already-written\n        // restores would stay invisible to recall until an unrelated mutation or\n        // restart (esp. with hotMemoriesCacheTtlMs: 0). Issue #1902, Codex Medium.\n        bumpMemoryCorpusVersionForDir(memoryDir);\n        // Restored bytes predate the current migration journal and can carry\n        // legacy entity references (issue #2213) — request one reconcile pass.\n        await requestEntityCanonicalIdReconcile(path.join(memoryDir, \"state\"));\n        });\n        result.restores.push({\n          entry: p.entry,\n          sourcePath: p.sourcePath,\n          outcome: \"restored\",\n        });\n      } catch (err) {\n        writeFailed = true;\n        result.restores.push({\n          entry: p.entry,\n          sourcePath: p.sourcePath,\n          outcome: \"skipped_write_failed\",\n          detail: `write failed: ${err instanceof Error ? err.message : String(err)}`,\n        });\n      }\n    }\n  }\n\n  if (writeFailed) {\n    result.error =\n      \"one or more source writes failed mid-restore; target not archived to preserve data\";\n    return result;\n  }\n\n  // Archive the target memory.  archiveMemory returns null on\n  // failure — surface that as a fatal error (PR #637 round-5 review,\n  // codex P2) so automation doesn't mistake a half-undo for a clean\n  // run.  The already-completed restores still roll forward; the\n  // result.restores list records what was written.\n  const archivedAt = await storage.archiveMemory(target, {\n    actor: \"consolidate-undo\",\n    reasonCode: \"consolidation-undo\",\n  });\n  result.targetArchived = archivedAt !== null;\n  if (!result.targetArchived) {\n    result.error =\n      \"sources restored successfully but archiving the consolidated target failed; inspect storage for manual cleanup\";\n  }\n  return result;\n}\n\n/**\n * Render a consolidation-undo result as a human-readable multi-line\n * string for the CLI.  Extracted so tests can snapshot the formatting\n * without parsing stdout.\n */\nexport function formatConsolidationUndoResult(result: ConsolidationUndoResult): string {\n  const lines: string[] = [];\n  lines.push(`consolidate undo ${result.dryRun ? \"(dry run) \" : \"\"}→ ${result.targetPath}`);\n  // Emit per-restore details BEFORE the error (PR #637 review, cursor\n  // Medium): the \"no sources could be recovered\" error is set after\n  // the restore loop ran, so operators need the per-source skip\n  // reasons to diagnose which snapshots were missing / outside\n  // memoryDir / malformed.  Early-bail errors (unloadable target,\n  // target outside memoryDir, no derived_from) run before the loop,\n  // so `result.restores` is empty in those cases and this block is a\n  // no-op.\n  for (const r of result.restores) {\n    lines.push(`  - ${r.entry} → ${r.outcome}${r.detail ? ` (${r.detail})` : \"\"}`);\n  }\n  if (result.error) {\n    lines.push(`  ERROR: ${result.error}`);\n    return lines.join(\"\\n\");\n  }\n  lines.push(\n    result.dryRun\n      ? \"  (dry run — no files were modified, target not archived)\"\n      : `  target archived: ${result.targetArchived ? \"yes\" : \"no\"}`,\n  );\n  return lines.join(\"\\n\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAsBA,OAAO,UAAU;AACjB,SAAS,OAAO,WAAW,QAAQ,UAAU,aAAa;AAC1D,SAAS,aAAa,mBAAmB;AAiDzC,IAAM,wBAAwB;AAE9B,SAAS,WAAW,OAAgE;AAGlF,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,QAAQ,MAAM,MAAM,qBAAqB;AAC/C,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,EAAE,UAAU,MAAM,CAAC,GAAG,WAAW,MAAM,CAAC,EAAE;AACnD;AAUO,SAAS,kBAAkB,WAAmB,MAAuB;AAC1E,QAAM,WAAW,KAAK,QAAQ,IAAI;AAClC,QAAM,gBAAgB,KAAK,QAAQ,SAAS;AAC5C,QAAM,MAAM,KAAK,SAAS,UAAU,aAAa;AACjD,MAAI,IAAI,WAAW,EAAG,QAAO;AAC7B,MAAI,IAAI,WAAW,IAAI,EAAG,QAAO;AACjC,MAAI,KAAK,WAAW,GAAG,EAAG,QAAO;AACjC,SAAO;AACT;AAkBA,eAAsB,0BACpB,WACA,MACkB;AAClB,MAAI,CAAC,kBAAkB,WAAW,IAAI,EAAG,QAAO;AAIhD,QAAM,cAAc,UAAU,QAAQ,OAAO,GAAG,EAAE,MAAM,GAAG;AAC3D,MAAI,YAAY,KAAK,CAAC,MAAM,MAAM,IAAI,EAAG,QAAO;AAChD,MAAI;AACJ,MAAI;AACF,mBAAe,MAAM,SAAS,KAAK,QAAQ,IAAI,CAAC;AAAA,EAClD,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,gBAAgB,KAAK,QAAQ,SAAS;AAS5C,QAAM,WAAW,KAAK,QAAQ,IAAI;AAClC,QAAM,cAAc,KAAK,SAAS,UAAU,aAAa;AACzD,QAAM,WAAW,YAAY,SAAS,IAAI,YAAY,MAAM,KAAK,GAAG,IAAI,CAAC;AACzE,WAAS,IAAI,GAAG,KAAK,SAAS,QAAQ,KAAK;AACzC,UAAM,QAAQ,MAAM,IAAI,WAAW,KAAK,KAAK,UAAU,GAAG,SAAS,MAAM,GAAG,CAAC,CAAC;AAC9E,QAAI;AACF,YAAM,KAAK,MAAM,MAAM,KAAK;AAC5B,UAAI,GAAG,eAAe,KAAK,UAAU,UAAU;AAG7C,YAAI;AACJ,YAAI;AACF,mBAAS,MAAM,SAAS,KAAK;AAAA,QAC/B,QAAQ;AAEN,iBAAO;AAAA,QACT;AACA,cAAM,MAAM,KAAK,SAAS,cAAc,MAAM;AAC9C,YAAI,IAAI,WAAW,EAAG;AACtB,YAAI,IAAI,WAAW,IAAI,KAAK,KAAK,WAAW,GAAG,EAAG,QAAO;AAAA,MAC3D;AAAA,IACF,QAAQ;AAAA,IAGR;AAAA,EACF;AAIA,QAAM,QAAQ,cAAc,MAAM,KAAK,GAAG;AAC1C,WAAS,IAAI,MAAM,QAAQ,IAAI,GAAG,KAAK;AACrC,UAAM,QAAQ,MAAM,MAAM,GAAG,CAAC,EAAE,KAAK,KAAK,GAAG,KAAK,KAAK;AACvD,QAAI;AACF,YAAM,WAAW,MAAM,SAAS,KAAK;AAErC,YAAM,WAAW,MAAM,MAAM,CAAC,EAAE,KAAK,KAAK,GAAG;AAC7C,YAAM,QAAQ,SAAS,SAAS,IAAI,KAAK,KAAK,UAAU,QAAQ,IAAI;AAGpE,YAAM,MAAM,KAAK,SAAS,cAAc,KAAK;AAC7C,UAAI,IAAI,WAAW,EAAG,QAAO;AAC7B,UAAI,IAAI,WAAW,IAAI,EAAG,QAAO;AACjC,UAAI,KAAK,WAAW,GAAG,EAAG,QAAO;AACjC,aAAO;AAAA,IACT,QAAQ;AACN;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AASA,IAAM,sBAAsB,CAAC,YAAY,QAAQ;AAOjD,SAAS,sBAAsB,GAAmB;AAEhD,QAAM,QAAQ,EAAE,QAAQ,OAAO,GAAG,EAAE,MAAM,GAAG;AAC7C,QAAM,WAAqB,CAAC;AAC5B,aAAW,OAAO,OAAO;AACvB,QAAI,QAAQ,MAAM,QAAQ,IAAK;AAC/B,QAAI,QAAQ,MAAM;AAChB,UAAI,SAAS,SAAS,EAAG,UAAS,IAAI;AAAA,IAGxC,OAAO;AACL,eAAS,KAAK,GAAG;AAAA,IACnB;AAAA,EACF;AACA,SAAO,SAAS,KAAK,GAAG;AAC1B;AAcO,SAAS,2BACd,UACA,YACS;AACT,QAAM,aAAa,sBAAsB,QAAQ;AACjD,QAAM,WAAW,CAAC,GAAG,mBAAmB;AACxC,MAAI,YAAY;AACd,UAAM,cAAc,sBAAsB,UAAU;AACpD,aAAS,KAAK,cAAc,GAAG;AAAA,EACjC;AACA,aAAW,UAAU,UAAU;AAC7B,QAAI,eAAe,OAAO,MAAM,GAAG,EAAE,KAAK,WAAW,WAAW,MAAM,GAAG;AACvE,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,cAAc,GAA6B;AACxD,MAAI;AACF,UAAM,KAAK,MAAM,MAAM,CAAC;AACxB,WAAO,GAAG,OAAO;AAAA,EACnB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,WAAW,GAA6B;AACrD,MAAI;AACF,UAAM,OAAO,GAAG,YAAY,IAAI;AAChC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAcA,eAAsB,qBAAqB,SAMN;AACnC,QAAM,EAAE,SAAS,WAAW,YAAY,WAAW,IAAI;AACvD,QAAM,SAAS,QAAQ,WAAW;AAElC,QAAM,SAAkC;AAAA,IACtC;AAAA,IACA,gBAAgB;AAAA,IAChB,UAAU,CAAC;AAAA,IACX;AAAA,EACF;AAQA,MAAI,CAAE,MAAM,0BAA0B,YAAY,SAAS,GAAI;AAC7D,WAAO,QAAQ,eAAe,UAAU,gCAAgC,SAAS;AACjF,WAAO;AAAA,EACT;AAOA,QAAM,YAAY,KAAK,SAAS,WAAW,UAAU;AACrD,MAAI,CAAC,2BAA2B,WAAW,WAAW,UAAU,GAAG;AACjE,WAAO,QAAQ,gBAAgB,SAAS;AACxC,WAAO;AAAA,EACT;AAKA,QAAM,SAAS,MAAM,QAAQ,iBAAiB,UAAU;AACxD,MAAI,CAAC,QAAQ;AACX,WAAO,QAAQ,mCAAmC,UAAU;AAC5D,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,OAAO,YAAY;AACvC,MAAI,CAAC,MAAM,QAAQ,WAAW,KAAK,YAAY,WAAW,GAAG;AAC3D,WAAO,QAAQ;AACf,WAAO;AAAA,EACT;AAcA,QAAM,QAAuB,CAAC;AAC9B,aAAW,YAAY,aAAa;AAClC,UAAM,QAAQ,OAAO,aAAa,WAAW,WAAW,OAAO,QAAQ;AACvE,UAAM,SAAS,WAAW,QAAQ;AAClC,QAAI,CAAC,QAAQ;AACX,YAAM,KAAK;AAAA,QACT,MAAM;AAAA,QACN,SAAS;AAAA,UACP;AAAA,UACA,YAAY;AAAA,UACZ,SAAS;AAAA,UACT,QAAQ;AAAA,QACV;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAKA,QAAI,KAAK,WAAW,OAAO,QAAQ,GAAG;AACpC,YAAM,KAAK;AAAA,QACT,MAAM;AAAA,QACN,SAAS;AAAA,UACP;AAAA,UACA,YAAY,OAAO;AAAA,UACnB,SAAS;AAAA,UACT,QAAQ,sDAAsD,OAAO,QAAQ;AAAA,QAC/E;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAEA,UAAM,aAAa,KAAK,KAAK,WAAW,OAAO,QAAQ;AAEvD,QAAI,CAAE,MAAM,0BAA0B,YAAY,SAAS,GAAI;AAC7D,YAAM,KAAK;AAAA,QACT,MAAM;AAAA,QACN,SAAS;AAAA,UACP;AAAA,UACA;AAAA,UACA,SAAS;AAAA,UACT,QAAQ,0CAA0C,SAAS;AAAA,QAC7D;AAAA,MACF,CAAC;AACD;AAAA,IACF;AASA,QAAI,mBAAmB,OAAO;AAC9B,QAAI;AACF,YAAM,WAAW,MAAM,SAAS,SAAS;AACzC,UAAI;AACF,cAAM,aAAa,MAAM,SAAS,UAAU;AAC5C,cAAM,MAAM,KAAK,SAAS,UAAU,UAAU;AAC9C,YAAI,CAAC,IAAI,WAAW,IAAI,KAAK,CAAC,KAAK,WAAW,GAAG,GAAG;AAClD,6BAAmB,IAAI,QAAQ,OAAO,GAAG;AAAA,QAC3C;AAAA,MACF,QAAQ;AAKN,cAAM,YAAY,KAAK,QAAQ,UAAU;AACzC,YAAI;AACF,gBAAM,aAAa,MAAM,SAAS,SAAS;AAC3C,gBAAM,YAAY,KAAK,SAAS,UAAU,UAAU;AACpD,cAAI,CAAC,UAAU,WAAW,IAAI,KAAK,CAAC,KAAK,WAAW,SAAS,GAAG;AAC9D,kBAAM,WAAW,KAAK,SAAS,UAAU;AACzC,+BAAmB,KAAK,KAAK,WAAW,QAAQ,EAAE,QAAQ,OAAO,GAAG;AAAA,UACtE;AAAA,QACF,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AACA,QAAI,CAAC,2BAA2B,OAAO,UAAU,WAAW,UAAU,KAClE,CAAC,2BAA2B,kBAAkB,WAAW,UAAU,GAAG;AACxE,YAAM,KAAK;AAAA,QACT,MAAM;AAAA,QACN,SAAS;AAAA,UACP;AAAA,UACA;AAAA,UACA,SAAS;AAAA,UACT,QAAQ,gBAAgB,OAAO,QAAQ;AAAA,QACzC;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAOA,QAAI,KAAK,QAAQ,UAAU,MAAM,KAAK,QAAQ,UAAU,GAAG;AACzD,YAAM,KAAK;AAAA,QACT,MAAM;AAAA,QACN,SAAS;AAAA,UACP;AAAA,UACA;AAAA,UACA,SAAS;AAAA,UACT,QAAQ,uBAAuB,KAAK;AAAA,QACtC;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAEA,QAAI,MAAM,cAAc,UAAU,GAAG;AAOnC,YAAM,KAAK,EAAE,MAAM,sBAAsB,OAAO,WAAW,CAAC;AAC5D;AAAA,IACF;AACA,QAAI,MAAM,WAAW,UAAU,GAAG;AAMhC,YAAM,KAAK;AAAA,QACT,MAAM;AAAA,QACN,SAAS;AAAA,UACP;AAAA,UACA;AAAA,UACA,SAAS;AAAA,UACT,QAAQ;AAAA,QACV;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,wBAAkB,MAAM;AAAA,QACtB;AAAA,QACA,OAAO;AAAA,QACP;AAAA,QACA;AAAA,MACF;AAAA,IACF,QAAQ;AACN,YAAM,KAAK;AAAA,QACT,MAAM;AAAA,QACN,SAAS;AAAA,UACP;AAAA,UACA;AAAA,UACA,SAAS;AAAA,UACT,QAAQ,2BAA2B,OAAO,SAAS;AAAA,QACrD;AAAA,MACF,CAAC;AACD;AAAA,IACF;AAEA,UAAM,KAAK,EAAE,MAAM,SAAS,OAAO,YAAY,SAAS,gBAAgB,CAAC;AAAA,EAC3E;AAMA,QAAM,UAAU,MAAM,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM;AACrD,MAAI,QAAQ,SAAS,GAAG;AACtB,eAAW,KAAK,OAAO;AACrB,UAAI,EAAE,SAAS,QAAQ;AACrB,eAAO,SAAS,KAAK,EAAE,OAAO;AAAA,MAChC,WAAW,EAAE,SAAS,SAAS;AAI7B,eAAO,SAAS,KAAK;AAAA,UACnB,OAAO,EAAE;AAAA,UACT,YAAY,EAAE;AAAA,UACd,SAAS,SAAS,oBAAoB;AAAA,UACtC,QAAQ,SACJ,4DACA;AAAA,QACN,CAAC;AAAA,MACH,OAAO;AACL,eAAO,SAAS,KAAK;AAAA,UACnB,OAAO,EAAE;AAAA,UACT,YAAY,EAAE;AAAA,UACd,SAAS;AAAA,UACT,QAAQ;AAAA,QACV,CAAC;AAAA,MACH;AAAA,IACF;AACA,UAAM,YAAY,OAAO,SAAS;AAAA,MAChC,CAAC,MAAM,EAAE,YAAY,cAAc,EAAE,YAAY;AAAA,IACnD,EAAE;AACF,QAAI,cAAc,GAAG;AACnB,aAAO,QACL;AAAA,IACJ,OAAO;AACL,aAAO,QAAQ,GAAG,QAAQ,MAAM,OAAO,MAAM,MAAM;AAAA,IACrD;AACA,WAAO;AAAA,EACT;AAOA,QAAM,kBAAkB,oBAAI,IAAY;AACxC,QAAM,eAA8B,CAAC;AACrC,aAAW,KAAK,OAAO;AACrB,QAAI,EAAE,SAAS,WAAW,EAAE,SAAS,sBAAsB;AACzD,UAAI,gBAAgB,IAAI,EAAE,UAAU,GAAG;AACrC,qBAAa,KAAK;AAAA,UAChB,MAAM;AAAA,UACN,SAAS;AAAA,YACP,OAAO,EAAE,SAAS,UAAU,EAAE,QAAQ,EAAE;AAAA,YACxC,YAAY,EAAE;AAAA,YACd,SAAS;AAAA,YACT,QAAQ;AAAA,UACV;AAAA,QACF,CAAC;AACD;AAAA,MACF;AACA,sBAAgB,IAAI,EAAE,UAAU;AAAA,IAClC;AACA,iBAAa,KAAK,CAAC;AAAA,EACrB;AAGA,MAAI,QAAQ;AACV,eAAW,KAAK,cAAc;AAC5B,UAAI,EAAE,SAAS,SAAS;AACtB,eAAO,SAAS,KAAK;AAAA,UACnB,OAAO,EAAE;AAAA,UACT,YAAY,EAAE;AAAA,UACd,SAAS;AAAA,UACT,QAAQ;AAAA,QACV,CAAC;AAAA,MACH,WAAW,EAAE,SAAS,sBAAsB;AAC1C,eAAO,SAAS,KAAK;AAAA,UACnB,OAAO,EAAE;AAAA,UACT,YAAY,EAAE;AAAA,UACd,SAAS;AAAA,UACT,QAAQ;AAAA,QACV,CAAC;AAAA,MACH,WAAW,EAAE,SAAS,UAAU,EAAE,SAAS;AACzC,eAAO,SAAS,KAAK,EAAE,OAAO;AAAA,MAChC;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAMA,MAAI,cAAc;AAClB,aAAW,KAAK,cAAc;AAC5B,QAAI,EAAE,SAAS,QAAQ;AAErB,UAAI,EAAE,QAAS,QAAO,SAAS,KAAK,EAAE,OAAO;AAC7C;AAAA,IACF;AACA,QAAI,EAAE,SAAS,sBAAsB;AACnC,aAAO,SAAS,KAAK;AAAA,QACnB,OAAO,EAAE;AAAA,QACT,YAAY,EAAE;AAAA,QACd,SAAS;AAAA,QACT,QAAQ;AAAA,MACV,CAAC;AACD;AAAA,IACF;AACA,QAAI,EAAE,SAAS,SAAS;AACtB,UAAI,aAAa;AAGf,eAAO,SAAS,KAAK;AAAA,UACnB,OAAO,EAAE;AAAA,UACT,YAAY,EAAE;AAAA,UACd,SAAS;AAAA,UACT,QAAQ;AAAA,QACV,CAAC;AACD;AAAA,MACF;AACA,UAAI;AACF,cAAM,MAAM,KAAK,QAAQ,EAAE,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AAC3D,cAAM,0BAA0B,WAAW,EAAE,YAAY,YAAY;AAKrE,gBAAM,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,SAAS,MAAM,KAAK,CAAC;AAO1E,wCAA8B,SAAS;AAGvC,gBAAM,kCAAkC,KAAK,KAAK,WAAW,OAAO,CAAC;AAAA,QACrE,CAAC;AACD,eAAO,SAAS,KAAK;AAAA,UACnB,OAAO,EAAE;AAAA,UACT,YAAY,EAAE;AAAA,UACd,SAAS;AAAA,QACX,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,sBAAc;AACd,eAAO,SAAS,KAAK;AAAA,UACnB,OAAO,EAAE;AAAA,UACT,YAAY,EAAE;AAAA,UACd,SAAS;AAAA,UACT,QAAQ,iBAAiB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QAC3E,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,MAAI,aAAa;AACf,WAAO,QACL;AACF,WAAO;AAAA,EACT;AAOA,QAAM,aAAa,MAAM,QAAQ,cAAc,QAAQ;AAAA,IACrD,OAAO;AAAA,IACP,YAAY;AAAA,EACd,CAAC;AACD,SAAO,iBAAiB,eAAe;AACvC,MAAI,CAAC,OAAO,gBAAgB;AAC1B,WAAO,QACL;AAAA,EACJ;AACA,SAAO;AACT;AAOO,SAAS,8BAA8B,QAAyC;AACrF,QAAM,QAAkB,CAAC;AACzB,QAAM,KAAK,oBAAoB,OAAO,SAAS,eAAe,EAAE,UAAK,OAAO,UAAU,EAAE;AASxF,aAAW,KAAK,OAAO,UAAU;AAC/B,UAAM,KAAK,OAAO,EAAE,KAAK,WAAM,EAAE,OAAO,GAAG,EAAE,SAAS,KAAK,EAAE,MAAM,MAAM,EAAE,EAAE;AAAA,EAC/E;AACA,MAAI,OAAO,OAAO;AAChB,UAAM,KAAK,YAAY,OAAO,KAAK,EAAE;AACrC,WAAO,MAAM,KAAK,IAAI;AAAA,EACxB;AACA,QAAM;AAAA,IACJ,OAAO,SACH,mEACA,sBAAsB,OAAO,iBAAiB,QAAQ,IAAI;AAAA,EAChE;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;","names":[]}

package/dist/contradiction/index.js

@@ -2,7 +2,7 @@ import "../chunk-V5OCT34X.js";
 import {
   executeResolution,
   isValidResolutionVerb
-} from "../chunk-NSFOERZQ.js";
+} from "../chunk-LWFWZTWX.js";
 import "../chunk-M5GVCJSJ.js";
 import "../chunk-RBOJCG4T.js";
 import "../chunk-7CT3AI52.js";
@@ -26,21 +26,23 @@ import {
   writePairs
 } from "../chunk-CTVWELNK.js";
 import "../chunk-YBA52OKG.js";
-import "../chunk-OFCHT2TN.js";
+import "../chunk-5LRV557D.js";
 import "../chunk-BT7NVCML.js";
-import "../chunk-VFTK5WKI.js";
+import "../chunk-STBX5X6B.js";
 import "../chunk-PWPIERBM.js";
-import "../chunk-KI6UOSNR.js";
+import "../chunk-DEY7B77Y.js";
 import "../chunk-5FVVY2EB.js";
 import "../chunk-JDSVLVCG.js";
 import "../chunk-5GKPFL3S.js";
 import "../chunk-JAKIDQB2.js";
-import "../chunk-EHRE7ZG3.js";
+import "../chunk-5B5WYAHQ.js";
 import "../chunk-P7FMDTKL.js";
 import "../chunk-VUFL7X3H.js";
 import "../chunk-C5LWPYS3.js";
-import "../chunk-7LEQREP2.js";
-import "../chunk-B6O2YLUR.js";
+import "../chunk-PGRZ3FYC.js";
+import "../chunk-BTTPKDIL.js";
+import "../chunk-2Z5DIDQD.js";
+import "../chunk-QUIRIG2P.js";
 import "../chunk-MAAL6OZV.js";
 import "../chunk-A6XUJE5D.js";
 import "../chunk-VS2IYZRU.js";

package/dist/converge-config.d.ts

@@ -1,3 +1,4 @@
+import { type CaptureWriteLockBackoffLimits } from "./capture-write-lock-backoff.js";
 import type { ConvergeConfig, ConvergeConflictPolicy } from "./types.js";
 export declare const CONVERGE_CONFLICT_POLICIES: readonly ["newest-wins", "manual"];
 export declare const DEFAULT_CONVERGE_CONFLICT_POLICY: ConvergeConflictPolicy;
@@ -15,5 +16,6 @@ export declare const MAX_CONVERGE_PEER_REQUEST_TIMEOUT_MS = 3600000;
 export declare function normalizeConvergePeerRequestTimeoutMs(value: unknown, label: string): number;
 /** Env override, evaluated lazily so tests control time. Junk is rejected. */
 export declare function envConvergePeerRequestTimeoutMs(): number;
+export declare function resolveConvergeCaptureWriteLockBackoff(config: ConvergeConfig | undefined): CaptureWriteLockBackoffLimits;
 export declare function parseConvergeConfig(block: unknown): ConvergeConfig;
 //# sourceMappingURL=converge-config.d.ts.map

package/dist/converge-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"converge-config.d.ts","sourceRoot":"","sources":["../src/converge-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEzE,eAAO,MAAM,0BAA0B,oCAGe,CAAC;AAEvD,eAAO,MAAM,gCAAgC,EAAE,sBAAsC,CAAC;AAEtF;sEACsE;AACtE,eAAO,MAAM,wCAAwC,QAAS,CAAC;AAC/D;gCACgC;AAChC,eAAO,MAAM,oCAAoC,UAAY,CAAC;AAC9D;;;;GAIG;AACH,wBAAgB,qCAAqC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAK3F;AAED,8EAA8E;AAC9E,wBAAgB,+BAA+B,IAAI,MAAM,CAIxD;AAQD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAmClE"}
+{"version":3,"file":"converge-config.d.ts","sourceRoot":"","sources":["../src/converge-config.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,6BAA6B,EAGnC,MAAM,iCAAiC,CAAC;AAEzC,OAAO,KAAK,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEzE,eAAO,MAAM,0BAA0B,oCAGe,CAAC;AAEvD,eAAO,MAAM,gCAAgC,EAAE,sBAAsC,CAAC;AAEtF;sEACsE;AACtE,eAAO,MAAM,wCAAwC,QAAS,CAAC;AAC/D;gCACgC;AAChC,eAAO,MAAM,oCAAoC,UAAY,CAAC;AAC9D;;;;GAIG;AACH,wBAAgB,qCAAqC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAK3F;AAED,8EAA8E;AAC9E,wBAAgB,+BAA+B,IAAI,MAAM,CAIxD;AAmCD,wBAAgB,sCAAsC,CACpD,MAAM,EAAE,cAAc,GAAG,SAAS,GACjC,6BAA6B,CAS/B;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAoElE"}

package/dist/converge-config.js

@@ -5,8 +5,11 @@ import {
   MAX_CONVERGE_PEER_REQUEST_TIMEOUT_MS,
   envConvergePeerRequestTimeoutMs,
   normalizeConvergePeerRequestTimeoutMs,
-  parseConvergeConfig
-} from "./chunk-6MINUTGJ.js";
+  parseConvergeConfig,
+  resolveConvergeCaptureWriteLockBackoff
+} from "./chunk-EHHQJTAU.js";
+import "./chunk-YET735EZ.js";
+import "./chunk-P2QRMMVQ.js";
 import "./chunk-PZ5AY32C.js";
 export {
   CONVERGE_CONFLICT_POLICIES,
@@ -15,6 +18,7 @@ export {
   MAX_CONVERGE_PEER_REQUEST_TIMEOUT_MS,
   envConvergePeerRequestTimeoutMs,
   normalizeConvergePeerRequestTimeoutMs,
-  parseConvergeConfig
+  parseConvergeConfig,
+  resolveConvergeCaptureWriteLockBackoff
 };
 //# sourceMappingURL=converge-config.js.map