@remnic/core 10.0.30 → 10.0.32

package/dist/{chunk-4HNINU7Q.js → chunk-HSPEVXT5.js}

@@ -1,3 +1,6 @@
+import {
+  openclawReplayNormalizer
+} from "./chunk-H4CKS5B2.js";
 import {
   chatgptReplayNormalizer
 } from "./chunk-MMACM5G2.js";
@@ -5,8 +8,9 @@ import {
   claudeReplayNormalizer
 } from "./chunk-54BGIBCR.js";
 import {
-  openclawReplayNormalizer
-} from "./chunk-H4CKS5B2.js";
+  exportOkfBundle,
+  parseIncludeStatus
+} from "./chunk-ZY4S5WMQ.js";
 import {
   exportSqlite
 } from "./chunk-BV2TIZ4F.js";
@@ -31,13 +35,12 @@ import {
 import {
   exportMarkdownBundle
 } from "./chunk-765K3SAT.js";
-import {
-  exportOkfBundle,
-  parseIncludeStatus
-} from "./chunk-UVUBLLM3.js";
 import {
   RoutingRulesStore
 } from "./chunk-TBUEE7XF.js";
+import {
+  WebDavServer
+} from "./chunk-PYIFUBRK.js";
 import {
   buildReplayNormalizerRegistry,
   clampBatchSize,
@@ -47,21 +50,18 @@ import {
   isReplaySource,
   normalizeReplaySessionKey
 } from "./chunk-AJVLDJU6.js";
+import {
+  rebuildObservations
+} from "./chunk-WHCD4Z3D.js";
 import {
   TailscaleHelper
 } from "./chunk-SZDLX763.js";
-import {
-  WebDavServer
-} from "./chunk-PYIFUBRK.js";
 import {
   migrateObservations
 } from "./chunk-EDR6CVWZ.js";
 import {
   rebuildMemoryLifecycleLedger
-} from "./chunk-LDEKVBVO.js";
-import {
-  rebuildObservations
-} from "./chunk-WHCD4Z3D.js";
+} from "./chunk-PZWW6MDE.js";
 import {
   archiveObservations
 } from "./chunk-7IGMKQWK.js";
@@ -77,9 +77,6 @@ import {
 import {
   lintOkfDir
 } from "./chunk-TRW7N4FS.js";
-import {
-  searchVerifiedEpisodes
-} from "./chunk-NOMHXZD7.js";
 import {
   getUtilityLearningStatus,
   learnUtilityPromotionWeights
@@ -88,15 +85,18 @@ import {
   getUtilityTelemetryStatus,
   recordUtilityTelemetryEvent
 } from "./chunk-EOU6V4IN.js";
+import {
+  searchVerifiedEpisodes
+} from "./chunk-DNZ2CWPG.js";
 import {
   ThreadingManager
 } from "./chunk-R7WYAXPO.js";
-import {
-  promoteSemanticRuleFromMemory
-} from "./chunk-NCPR2FOJ.js";
 import {
   searchVerifiedSemanticRules
-} from "./chunk-ZXTAHSQU.js";
+} from "./chunk-5GPHJ333.js";
+import {
+  promoteSemanticRuleFromMemory
+} from "./chunk-YXWLQHAW.js";
 import {
   buildResumeBundleFromState,
   getResumeBundleStatus,
@@ -112,7 +112,7 @@ import {
 } from "./chunk-HDN7IVIO.js";
 import {
   parseXrayCliOptions
-} from "./chunk-NPO4ZQFY.js";
+} from "./chunk-LDXS746V.js";
 import {
   collectPatternMemories,
   explainPatternMemory,
@@ -134,7 +134,7 @@ import {
   runOperatorInventory,
   runOperatorRepair,
   runOperatorSetup
-} from "./chunk-HG2VVIKI.js";
+} from "./chunk-DZBMASSI.js";
 import {
   analyzeSessionIntegrity,
   applySessionRepair,
@@ -169,14 +169,14 @@ import {
   runEvalStoredBaselineCiGate,
   validateEvalBenchmarkPack
 } from "./chunk-JKMIGCK6.js";
-import {
-  GraphDashboardServer
-} from "./chunk-EZ25VE3G.js";
 import {
   rebuildMemoryProjection,
   repairMemoryProjection,
   verifyMemoryProjection
-} from "./chunk-YZTFQBYY.js";
+} from "./chunk-3GOPAWA7.js";
+import {
+  GraphDashboardServer
+} from "./chunk-EZ25VE3G.js";
 import {
   buildConnectorRowsFromDefinitions,
   parseConnectorsListOptions,
@@ -210,7 +210,7 @@ import {
 import {
   EngramAccessHttpServer,
   MeetingsInputError
-} from "./chunk-OXX4ORRL.js";
+} from "./chunk-W7X7XT7Z.js";
 import {
   WearablesInputError
 } from "./chunk-V7IZKJI3.js";
@@ -220,10 +220,10 @@ import {
   loadChatSession,
   processChatMessage,
   sessionBelongsToPrincipal
-} from "./chunk-AUYFUBBE.js";
+} from "./chunk-5HJCZ7SB.js";
 import {
   EngramAccessService
-} from "./chunk-BIE3ZH3N.js";
+} from "./chunk-2IXEKMBJ.js";
 import {
   WorkStorage
 } from "./chunk-MPC7TYTZ.js";
@@ -240,10 +240,10 @@ import {
   parseRecallExplainFormat,
   renderRecallExplain,
   renderXray
-} from "./chunk-RRJ462HP.js";
+} from "./chunk-O6YJI5VX.js";
 import {
   readAggregateExtractionWatermark
-} from "./chunk-3CHHQXAR.js";
+} from "./chunk-JTACUJP3.js";
 import {
   getObjectiveStateStoreStatus
 } from "./chunk-4RNBLLZR.js";
@@ -252,21 +252,21 @@ import {
 } from "./chunk-BDLOEODO.js";
 import {
   searchHarmonicRetrieval
-} from "./chunk-YGVZ4QOZ.js";
+} from "./chunk-3CRE3UZI.js";
+import {
+  listMemoryGovernanceRuns,
+  readMemoryGovernanceRunArtifact,
+  restoreMemoryGovernanceRun,
+  runMemoryGovernance
+} from "./chunk-NKW27NU3.js";
 import {
   listNamespaces,
   runNamespaceMigration,
   verifyNamespaces
-} from "./chunk-OIIAIY7J.js";
+} from "./chunk-7SXUGYPE.js";
 import {
   getCueAnchorStoreStatus
 } from "./chunk-LXATZLSC.js";
-import {
-  listMemoryGovernanceRuns,
-  readMemoryGovernanceRunArtifact,
-  restoreMemoryGovernanceRun,
-  runMemoryGovernance
-} from "./chunk-DDLRKPR2.js";
 import {
   analyzeGraphHealth
 } from "./chunk-4IYIGN53.js";
@@ -303,7 +303,7 @@ import {
 } from "./chunk-C2RW36YR.js";
 import {
   meetingIdDate
-} from "./chunk-TTIEXXL3.js";
+} from "./chunk-ZGP2XB4S.js";
 import {
   isValidTranscriptDate
 } from "./chunk-UHVXE24Y.js";
@@ -327,7 +327,7 @@ import {
 import {
   RECALL_DISCLOSURE_LEVELS,
   isRecallDisclosure
-} from "./chunk-LDXNKEYB.js";
+} from "./chunk-A6PKEU7T.js";
 import {
   activityDateInTimezone,
   isValidActivityDate
@@ -10140,4 +10140,4 @@ export {
   listMemoryMarkdownFilePaths,
   registerCli
 };
-//# sourceMappingURL=chunk-4HNINU7Q.js.map
+//# sourceMappingURL=chunk-HSPEVXT5.js.map

package/dist/{chunk-4QPW6JVI.js → chunk-ID2PLENW.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-TOTT6S2V.js";
 import {
   isRecallDisclosure
-} from "./chunk-LDXNKEYB.js";
+} from "./chunk-A6PKEU7T.js";
 import {
   normalizeRetrievedMemoryProvenance
 } from "./chunk-I4WBNM3M.js";
@@ -312,4 +312,4 @@ export {
   RecallXrayBuilder,
   summarizeDisclosureTokens
 };
-//# sourceMappingURL=chunk-4QPW6JVI.js.map
+//# sourceMappingURL=chunk-ID2PLENW.js.map

package/dist/{chunk-FN6OFDBZ.js → chunk-ID62FNER.js}

@@ -1,6 +1,6 @@
 import {
   getOperation
-} from "./chunk-BIE3ZH3N.js";
+} from "./chunk-2IXEKMBJ.js";
 import {
   EngramAccessInputError
 } from "./chunk-3MUKQQ7A.js";
@@ -21,4 +21,4 @@ async function respondBriefingHttp(options) {
 export {
   respondBriefingHttp
 };
-//# sourceMappingURL=chunk-FN6OFDBZ.js.map
+//# sourceMappingURL=chunk-ID62FNER.js.map

package/dist/{chunk-GSKW64NB.js → chunk-J6SZXAQ2.js}

@@ -3,7 +3,7 @@ import {
   getOperation,
   operationRequiresAuthorizedNamespace,
   operationUsesPrincipalNamespace
-} from "./chunk-BIE3ZH3N.js";
+} from "./chunk-2IXEKMBJ.js";
 import {
   assertOperationAuthorizationAllowed
 } from "./chunk-IG747LRN.js";
@@ -60,4 +60,4 @@ export {
   authorizationProbeNamespaces,
   authorizationProbeRequiresPrincipalNamespace
 };
-//# sourceMappingURL=chunk-GSKW64NB.js.map
+//# sourceMappingURL=chunk-J6SZXAQ2.js.map

package/dist/{chunk-3CHHQXAR.js → chunk-JTACUJP3.js}

@@ -1,6 +1,6 @@
 import {
   resolveCorpusNamespaceRoots
-} from "./chunk-D4RV54HH.js";
+} from "./chunk-VAPVRDC4.js";
 import {
   capabilityAllowsNamespace
 } from "./chunk-IG747LRN.js";
@@ -200,4 +200,4 @@ async function readAggregateExtractionWatermark(options) {
 export {
   readAggregateExtractionWatermark
 };
-//# sourceMappingURL=chunk-3CHHQXAR.js.map
+//# sourceMappingURL=chunk-JTACUJP3.js.map

package/dist/{chunk-3SN2D43X.js → chunk-K6RQ2KOX.js}

@@ -1,7 +1,7 @@
 import {
   rebuildMemoryProjection,
   watchProjectionRebuildParent
-} from "./chunk-YZTFQBYY.js";
+} from "./chunk-3GOPAWA7.js";
 import {
   initLogger,
   log
@@ -77,4 +77,4 @@ if (invokedAsRunner) {
 export {
   PROJECTION_REBUILD_RUNNER_FLAG
 };
-//# sourceMappingURL=chunk-3SN2D43X.js.map
+//# sourceMappingURL=chunk-K6RQ2KOX.js.map

package/dist/{chunk-GWB7ZD2A.js → chunk-K6YJGWJP.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-6JMQR72P.js";
 import {
   StorageManager
-} from "./chunk-TTIEXXL3.js";
+} from "./chunk-ZGP2XB4S.js";
 import {
   normalizeEntityName
 } from "./chunk-YXZG5TVN.js";
@@ -962,4 +962,4 @@ export {
   resolveBriefingSaveDir,
   briefingFilename
 };
-//# sourceMappingURL=chunk-GWB7ZD2A.js.map
+//# sourceMappingURL=chunk-K6YJGWJP.js.map

package/dist/{chunk-OANSZGAG.js → chunk-KFR343VH.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-5JMAGU26.js";
 import {
   runPostConsolidationMaterialize
-} from "./chunk-V4FI2TG6.js";
+} from "./chunk-F5FZ7DB4.js";
 import {
   isSemanticConsolidationLlmOperator
 } from "./chunk-G7D6GZ5J.js";
@@ -220,4 +220,4 @@ export {
   buildExtensionsBlockForConsolidation,
   materializeAfterSemanticConsolidation
 };
-//# sourceMappingURL=chunk-OANSZGAG.js.map
+//# sourceMappingURL=chunk-KFR343VH.js.map

package/dist/{chunk-WC3V7HHP.js → chunk-KJZKO2M6.js}

@@ -335,7 +335,8 @@ function expandScopeProfileReadNamespaces(options) {
 }
 
 export {
+  hasExplicitNamespacePolicy,
   resolveScopeProfilePlan,
   expandScopeProfileReadNamespaces
 };
-//# sourceMappingURL=chunk-WC3V7HHP.js.map
+//# sourceMappingURL=chunk-KJZKO2M6.js.map

package/dist/chunk-KJZKO2M6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/namespaces/scope-profiles.ts"],"sourcesContent":["import { resolveNamespaceCapabilities } from \"../capabilities.js\";\nimport { createHash } from \"node:crypto\";\n\nimport { combineNamespaces, type CodingNamespaceOverlay } from \"../coding/coding-namespace.js\";\nimport { stableHash } from \"../coding/git-context.js\";\nimport { isSafeRouteNamespace } from \"../routing/engine.js\";\nimport type {\n  CodingContext,\n  PluginConfig,\n  ScopeProfileConfig,\n  ScopeProfileLayerId,\n  ScopeProfilePromotionTarget,\n  ScopeTeamConfig,\n} from \"../types.js\";\nimport {\n  canReadNamespace,\n  canWriteNamespace,\n  defaultNamespaceForPrincipal,\n} from \"./principal.js\";\nimport { normalizeNamespaceIdentity } from \"./identity.js\";\n\ntype ScopeProfileCodingOverlay = Pick<CodingNamespaceOverlay, \"namespace\" | \"readFallbacks\">;\n\nexport interface ScopeProfileLayerResolution {\n  id: ScopeProfileLayerId;\n  kind: \"user-project\" | \"team-project\" | \"user-global\" | \"server-shared\";\n  namespace?: string;\n  readable: boolean;\n  writable: boolean;\n  promotable: boolean;\n  reason: string;\n}\n\nexport interface ScopeProfilePromotionResolution {\n  target: ScopeProfilePromotionTarget;\n  namespace?: string;\n  authorized: boolean;\n  reason: string;\n}\n\nexport interface ResolvedScopeProfilePlan {\n  profileId: string;\n  profile: ScopeProfileConfig;\n  baseNamespace: string;\n  writeLayer: ScopeProfileLayerId;\n  writeNamespace: string;\n  readNamespaces: string[];\n  layers: ScopeProfileLayerResolution[];\n  promotionTargets: ScopeProfilePromotionResolution[];\n  warnings: string[];\n}\n\nexport interface ResolveScopeProfilePlanOptions {\n  config: PluginConfig;\n  principal?: string;\n  codingContext?: CodingContext | null;\n  codingOverlay?: ScopeProfileCodingOverlay | null;\n}\n\nfunction activeScopeProfile(config: PluginConfig): { profileId: string; profile: ScopeProfileConfig } | null {\n  const profileId = config.defaultScopeProfile;\n  if (!profileId) return null;\n  const profile = (config.scopeProfiles ?? {})[profileId];\n  return profile ? { profileId, profile } : null;\n}\n\nfunction principalListed(list: string[], principal: string | undefined): boolean {\n  if (!principal) return false;\n  return list.includes(principal) || list.includes(\"*\");\n}\n\nfunction derivedScopeProfileSelfNamespace(principal: string | undefined, config: PluginConfig): string | null {\n  if (\n    !principal ||\n    normalizeNamespaceIdentity(principal) === normalizeNamespaceIdentity(config.defaultNamespace) ||\n    normalizeNamespaceIdentity(principal) === normalizeNamespaceIdentity(config.sharedNamespace)\n  ) {\n    return null;\n  }\n  if (isSafeRouteNamespace(principal)) return principal;\n  return \"principal-\" + createHash(\"sha256\").update(principal).digest(\"hex\").slice(0, 54);\n}\n\nfunction scopeProfileSelfNamespace(principal: string | undefined, config: PluginConfig): string {\n  const existing = defaultNamespaceForPrincipal(principal, config);\n  if (normalizeNamespaceIdentity(existing) !== normalizeNamespaceIdentity(config.defaultNamespace)) return existing;\n  return derivedScopeProfileSelfNamespace(principal, config) ?? existing;\n}\n\nexport function hasExplicitNamespacePolicy(namespace: string, config: PluginConfig): boolean {\n  const identity = normalizeNamespaceIdentity(namespace);\n  return (config.namespacePolicies ?? []).some(\n    (policy) => normalizeNamespaceIdentity(policy.name) === identity,\n  );\n}\n\nfunction isScopeProfileImplicitSelfNamespace(\n  principal: string | undefined,\n  namespace: string,\n  config: PluginConfig,\n): boolean {\n  const derived = derivedScopeProfileSelfNamespace(principal, config);\n  return Boolean(\n    derived &&\n      normalizeNamespaceIdentity(namespace) === normalizeNamespaceIdentity(derived) &&\n      normalizeNamespaceIdentity(namespace) !== normalizeNamespaceIdentity(config.defaultNamespace) &&\n      normalizeNamespaceIdentity(namespace) !== normalizeNamespaceIdentity(config.sharedNamespace) &&\n      isSafeRouteNamespace(namespace) &&\n      !hasExplicitNamespacePolicy(namespace, config),\n  );\n}\n\nfunction canReadScopeProfileNamespace(\n  principal: string | undefined,\n  namespace: string,\n  config: PluginConfig,\n): boolean {\n  return isScopeProfileImplicitSelfNamespace(principal, namespace, config) || canReadNamespace(principal, namespace, config);\n}\n\nfunction canWriteScopeProfileNamespace(\n  principal: string | undefined,\n  namespace: string,\n  config: PluginConfig,\n): boolean {\n  return isScopeProfileImplicitSelfNamespace(principal, namespace, config) || canWriteNamespace(principal, namespace, config);\n}\n\nfunction resolveTeam(\n  config: PluginConfig,\n  profile: ScopeProfileConfig,\n  principal: string | undefined,\n): { teamId: string; team: ScopeTeamConfig } | null {\n  const configuredTeamId = profile.teamProject?.teamId;\n  if (configuredTeamId) {\n    const configured = (config.teams ?? {})[configuredTeamId];\n    return configured ? { teamId: configuredTeamId, team: configured } : null;\n  }\n  const readableTeams = Object.entries(config.teams ?? {}).filter(([, team]) =>\n    principalListed(team.principals, principal) || principalListed(team.read, principal),\n  );\n  const needsWritableTeam = profile.writeDefault === \"teamProject\" || profile.readOrder.includes(\"teamProject\");\n  if (needsWritableTeam) {\n    const writableTeam = readableTeams.find(([, team]) => principalListed(team.write, principal));\n    if (writableTeam) return { teamId: writableTeam[0], team: writableTeam[1] };\n  }\n  const needsPromotableTeam =\n    profile.promotionTargets.includes(\"teamProject\") || profile.autoPromote.targets.includes(\"teamProject\");\n  if (needsPromotableTeam) {\n    const promotableTeam = readableTeams.find(\n      ([, team]) => principalListed(team.promote, principal) || principalListed(team.write, principal),\n    );\n    if (promotableTeam) return { teamId: promotableTeam[0], team: promotableTeam[1] };\n  }\n  const firstReadableTeam = readableTeams[0];\n  return firstReadableTeam\n    ? { teamId: firstReadableTeam[0], team: firstReadableTeam[1] }\n    : null;\n}\n\nfunction renderTeamProjectNamespace(params: {\n  template: string;\n  teamId: string;\n  principal: string | undefined;\n  codingContext: CodingContext;\n  codingOverlay: ScopeProfileCodingOverlay;\n}): { namespace: string; unknownPlaceholders: string[] } {\n  const replacements: Record<string, string> = {\n    teamId: params.teamId,\n    principal: params.principal ?? \"anonymous\",\n    projectId: params.codingContext.projectId,\n    projectHash: stableHash(params.codingContext.projectId),\n    projectNamespace: params.codingOverlay.namespace,\n  };\n  const unknownPlaceholders: string[] = [];\n  const namespace = params.template.replace(/\\{([A-Za-z][A-Za-z0-9]*)\\}/g, (match, key: string) => {\n    const replacement = replacements[key];\n    if (replacement !== undefined) return replacement;\n    if (!unknownPlaceholders.includes(key)) unknownPlaceholders.push(key);\n    return match;\n  });\n  return { namespace, unknownPlaceholders };\n}\n\nfunction resolveLayer(params: {\n  id: ScopeProfileLayerId;\n  config: PluginConfig;\n  profile: ScopeProfileConfig;\n  principal: string | undefined;\n  baseNamespace: string;\n  codingContext: CodingContext | null | undefined;\n  codingOverlay: ScopeProfileCodingOverlay | null | undefined;\n}): ScopeProfileLayerResolution {\n  const { id, config, profile, principal, baseNamespace, codingContext, codingOverlay } = params;\n  if (id === \"userGlobal\") {\n    return {\n      id,\n      kind: \"user-global\",\n      namespace: baseNamespace,\n      readable: canReadScopeProfileNamespace(principal, baseNamespace, config),\n      writable: canWriteScopeProfileNamespace(principal, baseNamespace, config),\n      promotable: canWriteScopeProfileNamespace(principal, baseNamespace, config),\n      reason: \"principal self/global namespace\",\n    };\n  }\n  if (id === \"serverShared\") {\n    return {\n      id,\n      kind: \"server-shared\",\n      namespace: config.sharedNamespace,\n      readable: canReadNamespace(principal, config.sharedNamespace, config),\n      writable: canWriteNamespace(principal, config.sharedNamespace, config),\n      promotable: canWriteNamespace(principal, config.sharedNamespace, config),\n      reason: \"configured shared namespace\",\n    };\n  }\n  if (id === \"userProject\") {\n    if (!codingContext || !codingOverlay) {\n      return {\n        id,\n        kind: \"user-project\",\n        readable: false,\n        writable: false,\n        promotable: false,\n        reason: \"missing project context\",\n      };\n    }\n    const namespace = combineNamespaces(baseNamespace, codingOverlay.namespace);\n    const explicitProjectPolicy = hasExplicitNamespacePolicy(namespace, config);\n    const baseReadable = canReadScopeProfileNamespace(principal, baseNamespace, config);\n    const baseWritable = canWriteScopeProfileNamespace(principal, baseNamespace, config);\n    const projectReadable = explicitProjectPolicy\n      ? canReadNamespace(principal, namespace, config)\n      : baseReadable;\n    const projectWritable = explicitProjectPolicy\n      ? canWriteNamespace(principal, namespace, config)\n      : baseWritable;\n    return {\n      id,\n      kind: \"user-project\",\n      namespace,\n      readable: projectReadable,\n      writable: projectWritable,\n      promotable: projectWritable,\n      reason: explicitProjectPolicy\n        ? \"explicit user-project namespace policy\"\n        : baseReadable || baseWritable\n          ? \"principal project namespace derived from coding context\"\n          : \"principal base namespace is not authorized\",\n    };\n  }\n  const team = resolveTeam(config, profile, principal);\n  if (!team) {\n    return {\n      id,\n      kind: \"team-project\",\n      readable: false,\n      writable: false,\n      promotable: false,\n      reason: \"no authorized team mapping\",\n    };\n  }\n  if (!codingContext || !codingOverlay) {\n    return {\n      id,\n      kind: \"team-project\",\n      readable: false,\n      writable: false,\n      promotable: false,\n      reason: \"missing project context\",\n    };\n  }\n  const template =\n    profile.teamProject?.namespaceTemplate ??\n    team.team.projectNamespaceTemplate ??\n    \"team-{teamId}-project-{projectHash}\";\n  const renderedNamespace = renderTeamProjectNamespace({\n    template,\n    teamId: team.teamId,\n    principal,\n    codingContext,\n    codingOverlay,\n  });\n  const namespace = renderedNamespace.namespace.trim();\n  if (renderedNamespace.unknownPlaceholders.length > 0) {\n    return {\n      id,\n      kind: \"team-project\",\n      namespace,\n      readable: false,\n      writable: false,\n      promotable: false,\n      reason: `unknown team-project namespace template placeholder(s): ${renderedNamespace.unknownPlaceholders.join(\", \")}`,\n    };\n  }\n  if (!namespace || !isSafeRouteNamespace(namespace)) {\n    return {\n      id,\n      kind: \"team-project\",\n      namespace,\n      readable: false,\n      writable: false,\n      promotable: false,\n      reason: \"team-project namespace template resolved to an unsafe namespace\",\n    };\n  }\n  const teamReadable = principalListed(team.team.read, principal) || principalListed(team.team.principals, principal);\n  const teamWritable = principalListed(team.team.write, principal);\n  const teamPromotable = principalListed(team.team.promote, principal) || principalListed(team.team.write, principal);\n  const userProjectSuffix = `-${codingOverlay.namespace}`;\n  const userProjectBase = namespace.endsWith(userProjectSuffix)\n    ? namespace.slice(0, -userProjectSuffix.length)\n    : \"\";\n  const userProjectBaseIdentity = normalizeNamespaceIdentity(userProjectBase);\n  const defaultIdentity = normalizeNamespaceIdentity(config.defaultNamespace);\n  const sharedIdentity = normalizeNamespaceIdentity(config.sharedNamespace);\n  const namespaceIdentity = normalizeNamespaceIdentity(namespace);\n  const dynamicUserProjectCollision =\n    userProjectBase.length > 0 &&\n    (userProjectBaseIdentity === defaultIdentity ||\n      userProjectBaseIdentity === sharedIdentity ||\n      (config.namespacePolicies ?? []).some(\n        (policy) => normalizeNamespaceIdentity(policy.name) === userProjectBaseIdentity,\n      ));\n  const protectedNamespace =\n    namespaceIdentity === defaultIdentity ||\n    namespaceIdentity === sharedIdentity ||\n    dynamicUserProjectCollision ||\n    (config.namespacePolicies ?? []).some(\n      (policy) => normalizeNamespaceIdentity(policy.name) === namespaceIdentity,\n    );\n  const policyReadable = !protectedNamespace || canReadNamespace(principal, namespace, config);\n  const policyWritable = !protectedNamespace || canWriteNamespace(principal, namespace, config);\n  const policyBlocked = protectedNamespace && (!policyReadable || !policyWritable);\n  return {\n    id,\n    kind: \"team-project\",\n    namespace,\n    readable: teamReadable && policyReadable,\n    writable: teamWritable && policyWritable,\n    promotable: teamPromotable && policyWritable,\n    reason: policyBlocked\n      ? \"team-project namespace collides with a protected namespace policy\"\n      : \"trusted team-project namespace derived from team and project config\",\n  };\n}\n\nexport function resolveScopeProfilePlan(\n  options: ResolveScopeProfilePlanOptions,\n): ResolvedScopeProfilePlan | null {\n  const active = activeScopeProfile(options.config);\n  if (!active || !resolveNamespaceCapabilities(options.config).namespaces) return null;\n\n  const baseNamespace = scopeProfileSelfNamespace(options.principal, options.config);\n  const layerIds = Array.from(\n    new Set<ScopeProfileLayerId>([\n      ...active.profile.readOrder,\n      active.profile.writeDefault,\n      \"userGlobal\",\n      ...active.profile.promotionTargets.filter((target): target is ScopeProfileLayerId =>\n        [\"userProject\", \"teamProject\", \"userGlobal\", \"serverShared\"].includes(target),\n      ),\n    ]),\n  );\n  const layerMap = new Map<ScopeProfileLayerId, ScopeProfileLayerResolution>();\n  for (const id of layerIds) {\n    layerMap.set(\n      id,\n      resolveLayer({\n        id,\n        config: options.config,\n        profile: active.profile,\n        principal: options.principal,\n        baseNamespace,\n        codingContext: options.codingContext,\n        codingOverlay: options.codingOverlay,\n      }),\n    );\n  }\n\n  const readNamespaces: string[] = [];\n  for (const id of active.profile.readOrder) {\n    const layer = layerMap.get(id);\n    if (layer?.readable && layer.namespace && !readNamespaces.includes(layer.namespace)) {\n      readNamespaces.push(layer.namespace);\n    }\n  }\n\n  const preferredWriteLayer = layerMap.get(active.profile.writeDefault);\n  const readableWriteLayers = active.profile.readOrder\n    .map((id) => layerMap.get(id))\n    .filter(\n      (layer): layer is ScopeProfileLayerResolution =>\n        Boolean(layer?.writable && layer.namespace && readNamespaces.includes(layer.namespace)),\n    );\n  const fallbackWriteLayer =\n    preferredWriteLayer?.writable &&\n    preferredWriteLayer.namespace &&\n    readNamespaces.includes(preferredWriteLayer.namespace)\n      ? preferredWriteLayer\n      : readableWriteLayers[0];\n  const warnings: string[] = [];\n  if (!fallbackWriteLayer?.namespace) {\n    warnings.push(`scope profile ${active.profileId} has no writable layer inside the profile read stack; writes disabled`);\n  } else if (fallbackWriteLayer.id !== active.profile.writeDefault) {\n    warnings.push(\n      `scope profile ${active.profileId} writeDefault ${active.profile.writeDefault} unavailable: ${preferredWriteLayer?.reason ?? \"not resolved\"}`,\n    );\n  }\n\n  const promotionTargets = active.profile.promotionTargets.map((target) => {\n    const layer = layerMap.get(target as ScopeProfileLayerId);\n    if (!layer) {\n      return {\n        target,\n        authorized: false,\n        reason: \"promotion target did not resolve to a profile layer\",\n      };\n    }\n    return {\n      target,\n      namespace: layer.namespace,\n      authorized: layer.promotable && Boolean(layer.namespace),\n      reason: layer.reason,\n    };\n  });\n\n  return {\n    profileId: active.profileId,\n    profile: active.profile,\n    baseNamespace,\n    writeLayer: fallbackWriteLayer?.id ?? active.profile.writeDefault,\n    writeNamespace: fallbackWriteLayer?.namespace ?? \"\",\n    readNamespaces,\n    layers: [...layerMap.values()],\n    promotionTargets,\n    warnings,\n  };\n}\n\nexport function expandScopeProfileReadNamespaces(options: {\n  profilePlan: ResolvedScopeProfilePlan;\n  principalSelfNamespace: string;\n  config: PluginConfig;\n  principal?: string;\n  codingOverlay?: ScopeProfileCodingOverlay | null;\n  legacyRecallNamespaces?: string[];\n}): string[] {\n  if (options.profilePlan.readNamespaces.length === 0) {\n    return [];\n  }\n  const out = [...options.profilePlan.readNamespaces];\n  const add = (namespace: string | undefined): void => {\n    if (namespace && !out.includes(namespace)) out.push(namespace);\n  };\n  const userProjectReadable =\n    options.profilePlan.profile.readOrder.includes(\"userProject\") &&\n    options.profilePlan.layers.some(\n      (layer) => layer.id === \"userProject\" && layer.readable && layer.namespace,\n    );\n  const userGlobalReadable =\n    options.profilePlan.profile.readOrder.includes(\"userGlobal\") &&\n    options.profilePlan.layers.some(\n      (layer) => layer.id === \"userGlobal\" && layer.readable && layer.namespace,\n    );\n  if (userProjectReadable) {\n    for (const fallback of options.codingOverlay?.readFallbacks ?? []) {\n      if (fallback === \"\" && !userGlobalReadable) continue;\n      const fallbackNamespace = combineNamespaces(options.principalSelfNamespace, fallback);\n      if (\n        !hasExplicitNamespacePolicy(fallbackNamespace, options.config) ||\n        canReadScopeProfileNamespace(options.principal, fallbackNamespace, options.config)\n      ) {\n        add(fallbackNamespace);\n      }\n    }\n  }\n  return out;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AACA,SAAS,kBAAkB;AA0D3B,SAAS,mBAAmB,QAAiF;AAC3G,QAAM,YAAY,OAAO;AACzB,MAAI,CAAC,UAAW,QAAO;AACvB,QAAM,WAAW,OAAO,iBAAiB,CAAC,GAAG,SAAS;AACtD,SAAO,UAAU,EAAE,WAAW,QAAQ,IAAI;AAC5C;AAEA,SAAS,gBAAgB,MAAgB,WAAwC;AAC/E,MAAI,CAAC,UAAW,QAAO;AACvB,SAAO,KAAK,SAAS,SAAS,KAAK,KAAK,SAAS,GAAG;AACtD;AAEA,SAAS,iCAAiC,WAA+B,QAAqC;AAC5G,MACE,CAAC,aACD,2BAA2B,SAAS,MAAM,2BAA2B,OAAO,gBAAgB,KAC5F,2BAA2B,SAAS,MAAM,2BAA2B,OAAO,eAAe,GAC3F;AACA,WAAO;AAAA,EACT;AACA,MAAI,qBAAqB,SAAS,EAAG,QAAO;AAC5C,SAAO,eAAe,WAAW,QAAQ,EAAE,OAAO,SAAS,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AACxF;AAEA,SAAS,0BAA0B,WAA+B,QAA8B;AAC9F,QAAM,WAAW,6BAA6B,WAAW,MAAM;AAC/D,MAAI,2BAA2B,QAAQ,MAAM,2BAA2B,OAAO,gBAAgB,EAAG,QAAO;AACzG,SAAO,iCAAiC,WAAW,MAAM,KAAK;AAChE;AAEO,SAAS,2BAA2B,WAAmB,QAA+B;AAC3F,QAAM,WAAW,2BAA2B,SAAS;AACrD,UAAQ,OAAO,qBAAqB,CAAC,GAAG;AAAA,IACtC,CAAC,WAAW,2BAA2B,OAAO,IAAI,MAAM;AAAA,EAC1D;AACF;AAEA,SAAS,oCACP,WACA,WACA,QACS;AACT,QAAM,UAAU,iCAAiC,WAAW,MAAM;AAClE,SAAO;AAAA,IACL,WACE,2BAA2B,SAAS,MAAM,2BAA2B,OAAO,KAC5E,2BAA2B,SAAS,MAAM,2BAA2B,OAAO,gBAAgB,KAC5F,2BAA2B,SAAS,MAAM,2BAA2B,OAAO,eAAe,KAC3F,qBAAqB,SAAS,KAC9B,CAAC,2BAA2B,WAAW,MAAM;AAAA,EACjD;AACF;AAEA,SAAS,6BACP,WACA,WACA,QACS;AACT,SAAO,oCAAoC,WAAW,WAAW,MAAM,KAAK,iBAAiB,WAAW,WAAW,MAAM;AAC3H;AAEA,SAAS,8BACP,WACA,WACA,QACS;AACT,SAAO,oCAAoC,WAAW,WAAW,MAAM,KAAK,kBAAkB,WAAW,WAAW,MAAM;AAC5H;AAEA,SAAS,YACP,QACA,SACA,WACkD;AAClD,QAAM,mBAAmB,QAAQ,aAAa;AAC9C,MAAI,kBAAkB;AACpB,UAAM,cAAc,OAAO,SAAS,CAAC,GAAG,gBAAgB;AACxD,WAAO,aAAa,EAAE,QAAQ,kBAAkB,MAAM,WAAW,IAAI;AAAA,EACvE;AACA,QAAM,gBAAgB,OAAO,QAAQ,OAAO,SAAS,CAAC,CAAC,EAAE;AAAA,IAAO,CAAC,CAAC,EAAE,IAAI,MACtE,gBAAgB,KAAK,YAAY,SAAS,KAAK,gBAAgB,KAAK,MAAM,SAAS;AAAA,EACrF;AACA,QAAM,oBAAoB,QAAQ,iBAAiB,iBAAiB,QAAQ,UAAU,SAAS,aAAa;AAC5G,MAAI,mBAAmB;AACrB,UAAM,eAAe,cAAc,KAAK,CAAC,CAAC,EAAE,IAAI,MAAM,gBAAgB,KAAK,OAAO,SAAS,CAAC;AAC5F,QAAI,aAAc,QAAO,EAAE,QAAQ,aAAa,CAAC,GAAG,MAAM,aAAa,CAAC,EAAE;AAAA,EAC5E;AACA,QAAM,sBACJ,QAAQ,iBAAiB,SAAS,aAAa,KAAK,QAAQ,YAAY,QAAQ,SAAS,aAAa;AACxG,MAAI,qBAAqB;AACvB,UAAM,iBAAiB,cAAc;AAAA,MACnC,CAAC,CAAC,EAAE,IAAI,MAAM,gBAAgB,KAAK,SAAS,SAAS,KAAK,gBAAgB,KAAK,OAAO,SAAS;AAAA,IACjG;AACA,QAAI,eAAgB,QAAO,EAAE,QAAQ,eAAe,CAAC,GAAG,MAAM,eAAe,CAAC,EAAE;AAAA,EAClF;AACA,QAAM,oBAAoB,cAAc,CAAC;AACzC,SAAO,oBACH,EAAE,QAAQ,kBAAkB,CAAC,GAAG,MAAM,kBAAkB,CAAC,EAAE,IAC3D;AACN;AAEA,SAAS,2BAA2B,QAMqB;AACvD,QAAM,eAAuC;AAAA,IAC3C,QAAQ,OAAO;AAAA,IACf,WAAW,OAAO,aAAa;AAAA,IAC/B,WAAW,OAAO,cAAc;AAAA,IAChC,aAAa,WAAW,OAAO,cAAc,SAAS;AAAA,IACtD,kBAAkB,OAAO,cAAc;AAAA,EACzC;AACA,QAAM,sBAAgC,CAAC;AACvC,QAAM,YAAY,OAAO,SAAS,QAAQ,+BAA+B,CAAC,OAAO,QAAgB;AAC/F,UAAM,cAAc,aAAa,GAAG;AACpC,QAAI,gBAAgB,OAAW,QAAO;AACtC,QAAI,CAAC,oBAAoB,SAAS,GAAG,EAAG,qBAAoB,KAAK,GAAG;AACpE,WAAO;AAAA,EACT,CAAC;AACD,SAAO,EAAE,WAAW,oBAAoB;AAC1C;AAEA,SAAS,aAAa,QAQU;AAC9B,QAAM,EAAE,IAAI,QAAQ,SAAS,WAAW,eAAe,eAAe,cAAc,IAAI;AACxF,MAAI,OAAO,cAAc;AACvB,WAAO;AAAA,MACL;AAAA,MACA,MAAM;AAAA,MACN,WAAW;AAAA,MACX,UAAU,6BAA6B,WAAW,eAAe,MAAM;AAAA,MACvE,UAAU,8BAA8B,WAAW,eAAe,MAAM;AAAA,MACxE,YAAY,8BAA8B,WAAW,eAAe,MAAM;AAAA,MAC1E,QAAQ;AAAA,IACV;AAAA,EACF;AACA,MAAI,OAAO,gBAAgB;AACzB,WAAO;AAAA,MACL;AAAA,MACA,MAAM;AAAA,MACN,WAAW,OAAO;AAAA,MAClB,UAAU,iBAAiB,WAAW,OAAO,iBAAiB,MAAM;AAAA,MACpE,UAAU,kBAAkB,WAAW,OAAO,iBAAiB,MAAM;AAAA,MACrE,YAAY,kBAAkB,WAAW,OAAO,iBAAiB,MAAM;AAAA,MACvE,QAAQ;AAAA,IACV;AAAA,EACF;AACA,MAAI,OAAO,eAAe;AACxB,QAAI,CAAC,iBAAiB,CAAC,eAAe;AACpC,aAAO;AAAA,QACL;AAAA,QACA,MAAM;AAAA,QACN,UAAU;AAAA,QACV,UAAU;AAAA,QACV,YAAY;AAAA,QACZ,QAAQ;AAAA,MACV;AAAA,IACF;AACA,UAAMA,aAAY,kBAAkB,eAAe,cAAc,SAAS;AAC1E,UAAM,wBAAwB,2BAA2BA,YAAW,MAAM;AAC1E,UAAM,eAAe,6BAA6B,WAAW,eAAe,MAAM;AAClF,UAAM,eAAe,8BAA8B,WAAW,eAAe,MAAM;AACnF,UAAM,kBAAkB,wBACpB,iBAAiB,WAAWA,YAAW,MAAM,IAC7C;AACJ,UAAM,kBAAkB,wBACpB,kBAAkB,WAAWA,YAAW,MAAM,IAC9C;AACJ,WAAO;AAAA,MACL;AAAA,MACA,MAAM;AAAA,MACN,WAAAA;AAAA,MACA,UAAU;AAAA,MACV,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,QAAQ,wBACJ,2CACA,gBAAgB,eACd,4DACA;AAAA,IACR;AAAA,EACF;AACA,QAAM,OAAO,YAAY,QAAQ,SAAS,SAAS;AACnD,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,MACL;AAAA,MACA,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,QAAQ;AAAA,IACV;AAAA,EACF;AACA,MAAI,CAAC,iBAAiB,CAAC,eAAe;AACpC,WAAO;AAAA,MACL;AAAA,MACA,MAAM;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,QAAQ;AAAA,IACV;AAAA,EACF;AACA,QAAM,WACJ,QAAQ,aAAa,qBACrB,KAAK,KAAK,4BACV;AACF,QAAM,oBAAoB,2BAA2B;AAAA,IACnD;AAAA,IACA,QAAQ,KAAK;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,QAAM,YAAY,kBAAkB,UAAU,KAAK;AACnD,MAAI,kBAAkB,oBAAoB,SAAS,GAAG;AACpD,WAAO;AAAA,MACL;AAAA,MACA,MAAM;AAAA,MACN;AAAA,MACA,UAAU;AAAA,MACV,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,QAAQ,2DAA2D,kBAAkB,oBAAoB,KAAK,IAAI,CAAC;AAAA,IACrH;AAAA,EACF;AACA,MAAI,CAAC,aAAa,CAAC,qBAAqB,SAAS,GAAG;AAClD,WAAO;AAAA,MACL;AAAA,MACA,MAAM;AAAA,MACN;AAAA,MACA,UAAU;AAAA,MACV,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,QAAQ;AAAA,IACV;AAAA,EACF;AACA,QAAM,eAAe,gBAAgB,KAAK,KAAK,MAAM,SAAS,KAAK,gBAAgB,KAAK,KAAK,YAAY,SAAS;AAClH,QAAM,eAAe,gBAAgB,KAAK,KAAK,OAAO,SAAS;AAC/D,QAAM,iBAAiB,gBAAgB,KAAK,KAAK,SAAS,SAAS,KAAK,gBAAgB,KAAK,KAAK,OAAO,SAAS;AAClH,QAAM,oBAAoB,IAAI,cAAc,SAAS;AACrD,QAAM,kBAAkB,UAAU,SAAS,iBAAiB,IACxD,UAAU,MAAM,GAAG,CAAC,kBAAkB,MAAM,IAC5C;AACJ,QAAM,0BAA0B,2BAA2B,eAAe;AAC1E,QAAM,kBAAkB,2BAA2B,OAAO,gBAAgB;AAC1E,QAAM,iBAAiB,2BAA2B,OAAO,eAAe;AACxE,QAAM,oBAAoB,2BAA2B,SAAS;AAC9D,QAAM,8BACJ,gBAAgB,SAAS,MACxB,4BAA4B,mBAC3B,4BAA4B,mBAC3B,OAAO,qBAAqB,CAAC,GAAG;AAAA,IAC/B,CAAC,WAAW,2BAA2B,OAAO,IAAI,MAAM;AAAA,EAC1D;AACJ,QAAM,qBACJ,sBAAsB,mBACtB,sBAAsB,kBACtB,gCACC,OAAO,qBAAqB,CAAC,GAAG;AAAA,IAC/B,CAAC,WAAW,2BAA2B,OAAO,IAAI,MAAM;AAAA,EAC1D;AACF,QAAM,iBAAiB,CAAC,sBAAsB,iBAAiB,WAAW,WAAW,MAAM;AAC3F,QAAM,iBAAiB,CAAC,sBAAsB,kBAAkB,WAAW,WAAW,MAAM;AAC5F,QAAM,gBAAgB,uBAAuB,CAAC,kBAAkB,CAAC;AACjE,SAAO;AAAA,IACL;AAAA,IACA,MAAM;AAAA,IACN;AAAA,IACA,UAAU,gBAAgB;AAAA,IAC1B,UAAU,gBAAgB;AAAA,IAC1B,YAAY,kBAAkB;AAAA,IAC9B,QAAQ,gBACJ,sEACA;AAAA,EACN;AACF;AAEO,SAAS,wBACd,SACiC;AACjC,QAAM,SAAS,mBAAmB,QAAQ,MAAM;AAChD,MAAI,CAAC,UAAU,CAAC,6BAA6B,QAAQ,MAAM,EAAE,WAAY,QAAO;AAEhF,QAAM,gBAAgB,0BAA0B,QAAQ,WAAW,QAAQ,MAAM;AACjF,QAAM,WAAW,MAAM;AAAA,IACrB,oBAAI,IAAyB;AAAA,MAC3B,GAAG,OAAO,QAAQ;AAAA,MAClB,OAAO,QAAQ;AAAA,MACf;AAAA,MACA,GAAG,OAAO,QAAQ,iBAAiB;AAAA,QAAO,CAAC,WACzC,CAAC,eAAe,eAAe,cAAc,cAAc,EAAE,SAAS,MAAM;AAAA,MAC9E;AAAA,IACF,CAAC;AAAA,EACH;AACA,QAAM,WAAW,oBAAI,IAAsD;AAC3E,aAAW,MAAM,UAAU;AACzB,aAAS;AAAA,MACP;AAAA,MACA,aAAa;AAAA,QACX;AAAA,QACA,QAAQ,QAAQ;AAAA,QAChB,SAAS,OAAO;AAAA,QAChB,WAAW,QAAQ;AAAA,QACnB;AAAA,QACA,eAAe,QAAQ;AAAA,QACvB,eAAe,QAAQ;AAAA,MACzB,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,iBAA2B,CAAC;AAClC,aAAW,MAAM,OAAO,QAAQ,WAAW;AACzC,UAAM,QAAQ,SAAS,IAAI,EAAE;AAC7B,QAAI,OAAO,YAAY,MAAM,aAAa,CAAC,eAAe,SAAS,MAAM,SAAS,GAAG;AACnF,qBAAe,KAAK,MAAM,SAAS;AAAA,IACrC;AAAA,EACF;AAEA,QAAM,sBAAsB,SAAS,IAAI,OAAO,QAAQ,YAAY;AACpE,QAAM,sBAAsB,OAAO,QAAQ,UACxC,IAAI,CAAC,OAAO,SAAS,IAAI,EAAE,CAAC,EAC5B;AAAA,IACC,CAAC,UACC,QAAQ,OAAO,YAAY,MAAM,aAAa,eAAe,SAAS,MAAM,SAAS,CAAC;AAAA,EAC1F;AACF,QAAM,qBACJ,qBAAqB,YACrB,oBAAoB,aACpB,eAAe,SAAS,oBAAoB,SAAS,IACjD,sBACA,oBAAoB,CAAC;AAC3B,QAAM,WAAqB,CAAC;AAC5B,MAAI,CAAC,oBAAoB,WAAW;AAClC,aAAS,KAAK,iBAAiB,OAAO,SAAS,uEAAuE;AAAA,EACxH,WAAW,mBAAmB,OAAO,OAAO,QAAQ,cAAc;AAChE,aAAS;AAAA,MACP,iBAAiB,OAAO,SAAS,iBAAiB,OAAO,QAAQ,YAAY,iBAAiB,qBAAqB,UAAU,cAAc;AAAA,IAC7I;AAAA,EACF;AAEA,QAAM,mBAAmB,OAAO,QAAQ,iBAAiB,IAAI,CAAC,WAAW;AACvE,UAAM,QAAQ,SAAS,IAAI,MAA6B;AACxD,QAAI,CAAC,OAAO;AACV,aAAO;AAAA,QACL;AAAA,QACA,YAAY;AAAA,QACZ,QAAQ;AAAA,MACV;AAAA,IACF;AACA,WAAO;AAAA,MACL;AAAA,MACA,WAAW,MAAM;AAAA,MACjB,YAAY,MAAM,cAAc,QAAQ,MAAM,SAAS;AAAA,MACvD,QAAQ,MAAM;AAAA,IAChB;AAAA,EACF,CAAC;AAED,SAAO;AAAA,IACL,WAAW,OAAO;AAAA,IAClB,SAAS,OAAO;AAAA,IAChB;AAAA,IACA,YAAY,oBAAoB,MAAM,OAAO,QAAQ;AAAA,IACrD,gBAAgB,oBAAoB,aAAa;AAAA,IACjD;AAAA,IACA,QAAQ,CAAC,GAAG,SAAS,OAAO,CAAC;AAAA,IAC7B;AAAA,IACA;AAAA,EACF;AACF;AAEO,SAAS,iCAAiC,SAOpC;AACX,MAAI,QAAQ,YAAY,eAAe,WAAW,GAAG;AACnD,WAAO,CAAC;AAAA,EACV;AACA,QAAM,MAAM,CAAC,GAAG,QAAQ,YAAY,cAAc;AAClD,QAAM,MAAM,CAAC,cAAwC;AACnD,QAAI,aAAa,CAAC,IAAI,SAAS,SAAS,EAAG,KAAI,KAAK,SAAS;AAAA,EAC/D;AACA,QAAM,sBACJ,QAAQ,YAAY,QAAQ,UAAU,SAAS,aAAa,KAC5D,QAAQ,YAAY,OAAO;AAAA,IACzB,CAAC,UAAU,MAAM,OAAO,iBAAiB,MAAM,YAAY,MAAM;AAAA,EACnE;AACF,QAAM,qBACJ,QAAQ,YAAY,QAAQ,UAAU,SAAS,YAAY,KAC3D,QAAQ,YAAY,OAAO;AAAA,IACzB,CAAC,UAAU,MAAM,OAAO,gBAAgB,MAAM,YAAY,MAAM;AAAA,EAClE;AACF,MAAI,qBAAqB;AACvB,eAAW,YAAY,QAAQ,eAAe,iBAAiB,CAAC,GAAG;AACjE,UAAI,aAAa,MAAM,CAAC,mBAAoB;AAC5C,YAAM,oBAAoB,kBAAkB,QAAQ,wBAAwB,QAAQ;AACpF,UACE,CAAC,2BAA2B,mBAAmB,QAAQ,MAAM,KAC7D,6BAA6B,QAAQ,WAAW,mBAAmB,QAAQ,MAAM,GACjF;AACA,YAAI,iBAAiB;AAAA,MACvB;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;","names":["namespace"]}

package/dist/{chunk-T5IF2ZCE.js → chunk-KZMRMKC7.js}

@@ -41,11 +41,86 @@ function copyBufferTurn(turn) {
   if (typeof turn.ambientCapture === "boolean") {
     copy.ambientCapture = turn.ambientCapture;
   }
+  if (turn.sourceValidAt !== void 0) {
+    copy.sourceValidAt = turn.sourceValidAt;
+  }
+  if (turn.parts !== void 0) {
+    copy.parts = turn.parts;
+  }
+  if (turn.rawContent !== void 0) {
+    copy.rawContent = turn.rawContent;
+  }
+  if (turn.sourceFormat !== void 0) {
+    copy.sourceFormat = turn.sourceFormat;
+  }
+  if (turn.writeNamespaceOverride !== void 0) {
+    copy.writeNamespaceOverride = turn.writeNamespaceOverride;
+  }
+  if (turn.principalOverride !== void 0) {
+    copy.principalOverride = turn.principalOverride;
+  }
+  if (turn.scopeProfileWritePlan !== void 0) {
+    copy.scopeProfileWritePlan = turn.scopeProfileWritePlan;
+  }
+  if (turn.acceptedCapture === true) {
+    copy.acceptedCapture = true;
+  }
+  const ctx = turn.codingContext;
+  if (ctx) {
+    copy.codingContext = {
+      projectId: ctx.projectId,
+      branch: ctx.branch,
+      rootPath: ctx.rootPath,
+      defaultBranch: ctx.defaultBranch
+    };
+  }
   return copy;
 }
 function bufferTurnsEqual(left, right) {
   if (!left) return false;
-  return left.role === right.role && left.content === right.content && left.timestamp === right.timestamp && left.sessionKey === right.sessionKey && left.sessionOwnerPrincipal === right.sessionOwnerPrincipal && left.logicalSessionKey === right.logicalSessionKey && left.providerThreadId === right.providerThreadId && left.turnFingerprint === right.turnFingerprint && left.persistProcessedFingerprint === right.persistProcessedFingerprint && left.sourceConnector === right.sourceConnector && left.originRole === right.originRole && left.ambientCapture === right.ambientCapture;
+  return left.role === right.role && left.content === right.content && left.timestamp === right.timestamp && left.sessionKey === right.sessionKey && left.sessionOwnerPrincipal === right.sessionOwnerPrincipal && left.logicalSessionKey === right.logicalSessionKey && left.providerThreadId === right.providerThreadId && left.turnFingerprint === right.turnFingerprint && left.persistProcessedFingerprint === right.persistProcessedFingerprint && left.sourceConnector === right.sourceConnector && left.originRole === right.originRole && left.ambientCapture === right.ambientCapture && left.sourceValidAt === right.sourceValidAt && left.acceptedCapture === right.acceptedCapture && left.codingContext?.projectId === right.codingContext?.projectId && left.codingContext?.rootPath === right.codingContext?.rootPath && left.codingContext?.branch === right.codingContext?.branch && left.codingContext?.defaultBranch === right.codingContext?.defaultBranch && // #3251 scope pins compare by identity triple, not deep plan equality: a
+  // restart-rehydrated plan must still match the pin it was accepted under.
+  left.writeNamespaceOverride === right.writeNamespaceOverride && left.principalOverride === right.principalOverride && scopeProfilePlanIdentity(left.scopeProfileWritePlan) === scopeProfilePlanIdentity(right.scopeProfileWritePlan);
+}
+function selectRetainedDeferredTurns(existing, turns, max, originalTurns) {
+  const others = originalTurns === void 0 ? [] : existing.filter(
+    (turn) => !originalTurns.some((original) => bufferTurnsEqual(turn, original))
+  );
+  if (!Array.isArray(turns) || max <= 0) return others;
+  return [...others, ...turns.slice(-max).map(copyBufferTurn)];
+}
+function hasPinnedCaptureScope(turn) {
+  return turn.acceptedCapture === true || turn.writeNamespaceOverride !== void 0 || turn.scopeProfileWritePlan !== void 0;
+}
+function scopeProfilePlanIdentity(plan) {
+  if (!plan) return "";
+  return `${plan.profileId}\0${plan.writeLayer}\0${plan.writeNamespace}`;
+}
+function groupTurnsByExtractionScope(turns) {
+  const groups = /* @__PURE__ */ new Map();
+  for (const turn of turns) {
+    const key = [
+      turn.writeNamespaceOverride ?? "",
+      turn.principalOverride ?? "",
+      scopeProfilePlanIdentity(turn.scopeProfileWritePlan),
+      turn.codingContext?.projectId ?? "",
+      turn.codingContext?.rootPath ?? "",
+      turn.codingContext?.branch ?? "",
+      turn.codingContext?.defaultBranch ?? ""
+    ].join("\0");
+    const group = groups.get(key);
+    if (group) {
+      group.turns.push(turn);
+    } else {
+      const created = { turns: [turn] };
+      if (turn.writeNamespaceOverride !== void 0) created.writeNamespaceOverride = turn.writeNamespaceOverride;
+      if (turn.principalOverride !== void 0) created.principalOverride = turn.principalOverride;
+      if (turn.scopeProfileWritePlan !== void 0) created.scopeProfileWritePlan = turn.scopeProfileWritePlan;
+      if (turn.codingContext !== void 0) created.codingContext = turn.codingContext;
+      groups.set(key, created);
+    }
+  }
+  return [...groups.values()];
 }
 function bufferTurnArraysEqual(left, right) {
   return left.length === right.length && left.every((turn, index) => bufferTurnsEqual(turn, right[index]));
@@ -108,6 +183,10 @@ export {
   describeError,
   copyBufferTurn,
   bufferTurnsEqual,
+  selectRetainedDeferredTurns,
+  hasPinnedCaptureScope,
+  scopeProfilePlanIdentity,
+  groupTurnsByExtractionScope,
   bufferTurnArraysEqual,
   bufferTurnArrayIsSuffixOfSnapshot,
   liveTurnsFromExtractionSnapshot,
@@ -115,4 +194,4 @@ export {
   ProbeTimeoutError,
   probeWithTimeout
 };
-//# sourceMappingURL=chunk-T5IF2ZCE.js.map
+//# sourceMappingURL=chunk-KZMRMKC7.js.map

package/dist/chunk-KZMRMKC7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/buffer-turn-helpers.ts"],"sourcesContent":["import type { BufferEntryState, BufferTurn } from \"./types.js\";\n\nexport interface BufferTurnOwner {\n  /**\n   * Server-resolved principal that owns this session at the authenticated\n   * observe/write boundary. Persisted with the buffered turn so lifecycle\n   * flushes do not have to infer ownership from a client-chosen session key.\n   */\n  sessionOwnerPrincipal?: string;\n}\n\nexport interface AmbientCaptureProvenance {\n  /**\n   * True when this turn's content came from an always-on ambient capture\n   * device (a wearable recorder, a room microphone) and may therefore carry\n   * speech the user never authored: TV, podcasts, music, overheard\n   * conversation (issue #2294). Set by the ingesting subsystem, never from\n   * tool arguments — extraction reads it to warn the model about media audio\n   * and to clamp high-impact personal facts to the speculative tier.\n   */\n  ambientCapture?: boolean;\n}\n\nexport function describeError(err: unknown): string {\n  if (err instanceof Error) return err.message;\n  if (err === null) return \"null\";\n  if (err === undefined) return \"undefined\";\n  if (typeof err === \"string\") return err;\n  try {\n    return JSON.stringify(err);\n  } catch {\n    return String(err);\n  }\n}\n\nexport function copyBufferTurn(turn: BufferTurn): BufferTurn {\n  const copy: BufferTurn = {\n    role: turn.role,\n    content: turn.content,\n    timestamp: turn.timestamp,\n  };\n  if (typeof turn.sessionKey === \"string\") copy.sessionKey = turn.sessionKey;\n  if (typeof turn.logicalSessionKey === \"string\") {\n    copy.logicalSessionKey = turn.logicalSessionKey;\n  }\n  if (turn.providerThreadId === null || typeof turn.providerThreadId === \"string\") {\n    copy.providerThreadId = turn.providerThreadId;\n  }\n  if (typeof turn.sessionOwnerPrincipal === \"string\") {\n    copy.sessionOwnerPrincipal = turn.sessionOwnerPrincipal;\n  }\n  if (typeof turn.turnFingerprint === \"string\") {\n    copy.turnFingerprint = turn.turnFingerprint;\n  }\n  if (typeof turn.persistProcessedFingerprint === \"boolean\") {\n    copy.persistProcessedFingerprint = turn.persistProcessedFingerprint;\n  }\n  if (typeof turn.sourceConnector === \"string\") {\n    copy.sourceConnector = turn.sourceConnector;\n  }\n  if (turn.originRole === \"user\" || turn.originRole === \"assistant\" || turn.originRole === \"tool\") {\n    copy.originRole = turn.originRole;\n  }\n  if (typeof turn.ambientCapture === \"boolean\") {\n    copy.ambientCapture = turn.ambientCapture;\n  }\n  if (turn.sourceValidAt !== undefined) {\n    copy.sourceValidAt = turn.sourceValidAt;\n  }\n  if (turn.parts !== undefined) {\n    copy.parts = turn.parts;\n  }\n  if (turn.rawContent !== undefined) {\n    copy.rawContent = turn.rawContent;\n  }\n  if (turn.sourceFormat !== undefined) {\n    copy.sourceFormat = turn.sourceFormat;\n  }\n  // #3251 scope pins: strings copy by value; the plan object is an immutable\n  // config-derived identity passed by reference.\n  if (turn.writeNamespaceOverride !== undefined) {\n    copy.writeNamespaceOverride = turn.writeNamespaceOverride;\n  }\n  if (turn.principalOverride !== undefined) {\n    copy.principalOverride = turn.principalOverride;\n  }\n  if (turn.scopeProfileWritePlan !== undefined) {\n    copy.scopeProfileWritePlan = turn.scopeProfileWritePlan;\n  }\n  if (turn.acceptedCapture === true) {\n    copy.acceptedCapture = true;\n  }\n  const ctx = turn.codingContext;\n  if (ctx) {\n    // All four fields are identity inputs (branchScope uses branch) — copy\n    // explicitly as-is; never a spread of external input.\n    copy.codingContext = {\n      projectId: ctx.projectId,\n      branch: ctx.branch,\n      rootPath: ctx.rootPath,\n      defaultBranch: ctx.defaultBranch,\n    };\n  }\n  return copy;\n}\n\nexport function bufferTurnsEqual(left: BufferTurn | undefined, right: BufferTurn): boolean {\n  if (!left) return false;\n  return (\n    left.role === right.role &&\n    left.content === right.content &&\n    left.timestamp === right.timestamp &&\n    left.sessionKey === right.sessionKey &&\n    left.sessionOwnerPrincipal === right.sessionOwnerPrincipal &&\n    left.logicalSessionKey === right.logicalSessionKey &&\n    left.providerThreadId === right.providerThreadId &&\n    left.turnFingerprint === right.turnFingerprint &&\n    left.persistProcessedFingerprint === right.persistProcessedFingerprint &&\n    left.sourceConnector === right.sourceConnector &&\n    left.originRole === right.originRole &&\n    left.ambientCapture === right.ambientCapture &&\n    left.sourceValidAt === right.sourceValidAt &&\n    left.acceptedCapture === right.acceptedCapture &&\n    left.codingContext?.projectId === right.codingContext?.projectId &&\n    left.codingContext?.rootPath === right.codingContext?.rootPath &&\n    left.codingContext?.branch === right.codingContext?.branch &&\n    left.codingContext?.defaultBranch === right.codingContext?.defaultBranch &&\n    // #3251 scope pins compare by identity triple, not deep plan equality: a\n    // restart-rehydrated plan must still match the pin it was accepted under.\n    left.writeNamespaceOverride === right.writeNamespaceOverride &&\n    left.principalOverride === right.principalOverride &&\n    scopeProfilePlanIdentity(left.scopeProfileWritePlan) ===\n      scopeProfilePlanIdentity(right.scopeProfileWritePlan)\n  );\n}\n\n/** Replace only the processed snapshot; callers without one retain legacy whole-slot semantics. */\nexport function selectRetainedDeferredTurns(\n  existing: readonly BufferTurn[],\n  turns: BufferTurn[],\n  max: number,\n  originalTurns?: readonly BufferTurn[],\n): BufferTurn[] {\n  const others = originalTurns === undefined ? [] : existing.filter(\n    (turn) => !originalTurns.some((original) => bufferTurnsEqual(turn, original)),\n  );\n  if (!Array.isArray(turns) || max <= 0) return others;\n  return [...others, ...turns.slice(-max).map(copyBufferTurn)];\n}\n\nexport function hasPinnedCaptureScope(turn: BufferTurn): boolean {\n  return turn.acceptedCapture === true ||\n    turn.writeNamespaceOverride !== undefined ||\n    turn.scopeProfileWritePlan !== undefined;\n}\n\n/** Stable identity string for a pinned scope-profile plan (#3251). */\nexport function scopeProfilePlanIdentity(\n  plan: BufferTurn[\"scopeProfileWritePlan\"],\n): string {\n  if (!plan) return \"\";\n  return `${plan.profileId}\\u0000${plan.writeLayer}\\u0000${plan.writeNamespace}`;\n}\n\nexport interface ExtractionScopeGroup {\n  writeNamespaceOverride?: string;\n  principalOverride?: string;\n  scopeProfileWritePlan?: BufferTurn[\"scopeProfileWritePlan\"];\n  codingContext?: BufferTurn[\"codingContext\"];\n  turns: BufferTurn[];\n}\n\n/**\n * Partition extraction turns by their durable scope pins (#3251). Turns\n * captured under different namespaces / principals / scope profiles /\n * project bindings must never be extracted together — each group runs its\n * own extraction under its own scope. Native (unpinned) turns form their own\n * group and keep today's single-store routing.\n */\nexport function groupTurnsByExtractionScope(turns: BufferTurn[]): ExtractionScopeGroup[] {\n  const groups = new Map<string, ExtractionScopeGroup>();\n  for (const turn of turns) {\n    const key = [\n      turn.writeNamespaceOverride ?? \"\",\n      turn.principalOverride ?? \"\",\n      scopeProfilePlanIdentity(turn.scopeProfileWritePlan),\n      turn.codingContext?.projectId ?? \"\",\n      turn.codingContext?.rootPath ?? \"\",\n      turn.codingContext?.branch ?? \"\",\n      turn.codingContext?.defaultBranch ?? \"\",\n    ].join(\"\\u0000\");\n    const group = groups.get(key);\n    if (group) {\n      group.turns.push(turn);\n    } else {\n      const created: ExtractionScopeGroup = { turns: [turn] };\n      if (turn.writeNamespaceOverride !== undefined) created.writeNamespaceOverride = turn.writeNamespaceOverride;\n      if (turn.principalOverride !== undefined) created.principalOverride = turn.principalOverride;\n      if (turn.scopeProfileWritePlan !== undefined) created.scopeProfileWritePlan = turn.scopeProfileWritePlan;\n      if (turn.codingContext !== undefined) created.codingContext = turn.codingContext;\n      groups.set(key, created);\n    }\n  }\n  return [...groups.values()];\n}\n\nexport function bufferTurnArraysEqual(\n  left: readonly BufferTurn[],\n  right: readonly BufferTurn[],\n): boolean {\n  return left.length === right.length && left.every((turn, index) => bufferTurnsEqual(turn, right[index]));\n}\n\nexport function bufferTurnArrayIsSuffixOfSnapshot(\n  liveTurns: readonly BufferTurn[],\n  snapshot: readonly BufferTurn[],\n): boolean {\n  if (liveTurns.length === 0 || liveTurns.length > snapshot.length) {\n    return false;\n  }\n  const offset = snapshot.length - liveTurns.length;\n  return liveTurns.every((turn, index) => bufferTurnsEqual(turn, snapshot[offset + index]));\n}\n\nexport function liveTurnsFromExtractionSnapshot(\n  entry: BufferEntryState,\n  extractedTurns: readonly BufferTurn[],\n): readonly BufferTurn[] {\n  const retainedTurns = entry.retainedTurns ?? [];\n  if (\n    retainedTurns.length > 0 &&\n    extractedTurns.length >= retainedTurns.length &&\n    retainedTurns.every((turn, index) => bufferTurnsEqual(extractedTurns[index], turn))\n  ) {\n    const withoutRetainedPrefix = extractedTurns.slice(retainedTurns.length);\n    if (withoutRetainedPrefix.length > 0 && matchingPrefixLength(entry.turns, withoutRetainedPrefix) > 0) {\n      return withoutRetainedPrefix;\n    }\n  }\n  return extractedTurns;\n}\n\nfunction matchingPrefixLength(\n  liveTurns: readonly BufferTurn[],\n  extractedTurns: readonly BufferTurn[],\n): number {\n  let index = 0;\n  while (\n    index < liveTurns.length &&\n    index < extractedTurns.length &&\n    bufferTurnsEqual(liveTurns[index], extractedTurns[index])\n  ) {\n    index += 1;\n  }\n  return index;\n}\n\nexport function matchingQueuedExtractionPrefixLength(\n  liveTurns: readonly BufferTurn[],\n  extractedTurns: readonly BufferTurn[],\n): number {\n  let bestMatchedCount = 0;\n  for (let start = 0; start < extractedTurns.length; start += 1) {\n    const matchedCount = matchingPrefixLength(liveTurns, extractedTurns.slice(start));\n    if (matchedCount > bestMatchedCount) {\n      bestMatchedCount = matchedCount;\n      if (bestMatchedCount === liveTurns.length) break;\n    }\n  }\n  return bestMatchedCount;\n}\n\nexport class ProbeTimeoutError extends Error {\n  constructor(timeoutMs: number) {\n    super(`probe exceeded ${timeoutMs}ms`);\n    this.name = \"ProbeTimeoutError\";\n  }\n}\n\nexport function probeWithTimeout<T>(inflight: Promise<T>, timeoutMs: number): Promise<T> {\n  let timer: NodeJS.Timeout | null = null;\n  const timeout = new Promise<T>((_, reject) => {\n    timer = setTimeout(() => reject(new ProbeTimeoutError(timeoutMs)), timeoutMs);\n    if (typeof (timer as NodeJS.Timeout).unref === \"function\") {\n      (timer as NodeJS.Timeout).unref();\n    }\n  });\n  return Promise.race([inflight, timeout]).finally(() => {\n    if (timer) clearTimeout(timer);\n  });\n}\n"],"mappings":";AAuBO,SAAS,cAAc,KAAsB;AAClD,MAAI,eAAe,MAAO,QAAO,IAAI;AACrC,MAAI,QAAQ,KAAM,QAAO;AACzB,MAAI,QAAQ,OAAW,QAAO;AAC9B,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,MAAI;AACF,WAAO,KAAK,UAAU,GAAG;AAAA,EAC3B,QAAQ;AACN,WAAO,OAAO,GAAG;AAAA,EACnB;AACF;AAEO,SAAS,eAAe,MAA8B;AAC3D,QAAM,OAAmB;AAAA,IACvB,MAAM,KAAK;AAAA,IACX,SAAS,KAAK;AAAA,IACd,WAAW,KAAK;AAAA,EAClB;AACA,MAAI,OAAO,KAAK,eAAe,SAAU,MAAK,aAAa,KAAK;AAChE,MAAI,OAAO,KAAK,sBAAsB,UAAU;AAC9C,SAAK,oBAAoB,KAAK;AAAA,EAChC;AACA,MAAI,KAAK,qBAAqB,QAAQ,OAAO,KAAK,qBAAqB,UAAU;AAC/E,SAAK,mBAAmB,KAAK;AAAA,EAC/B;AACA,MAAI,OAAO,KAAK,0BAA0B,UAAU;AAClD,SAAK,wBAAwB,KAAK;AAAA,EACpC;AACA,MAAI,OAAO,KAAK,oBAAoB,UAAU;AAC5C,SAAK,kBAAkB,KAAK;AAAA,EAC9B;AACA,MAAI,OAAO,KAAK,gCAAgC,WAAW;AACzD,SAAK,8BAA8B,KAAK;AAAA,EAC1C;AACA,MAAI,OAAO,KAAK,oBAAoB,UAAU;AAC5C,SAAK,kBAAkB,KAAK;AAAA,EAC9B;AACA,MAAI,KAAK,eAAe,UAAU,KAAK,eAAe,eAAe,KAAK,eAAe,QAAQ;AAC/F,SAAK,aAAa,KAAK;AAAA,EACzB;AACA,MAAI,OAAO,KAAK,mBAAmB,WAAW;AAC5C,SAAK,iBAAiB,KAAK;AAAA,EAC7B;AACA,MAAI,KAAK,kBAAkB,QAAW;AACpC,SAAK,gBAAgB,KAAK;AAAA,EAC5B;AACA,MAAI,KAAK,UAAU,QAAW;AAC5B,SAAK,QAAQ,KAAK;AAAA,EACpB;AACA,MAAI,KAAK,eAAe,QAAW;AACjC,SAAK,aAAa,KAAK;AAAA,EACzB;AACA,MAAI,KAAK,iBAAiB,QAAW;AACnC,SAAK,eAAe,KAAK;AAAA,EAC3B;AAGA,MAAI,KAAK,2BAA2B,QAAW;AAC7C,SAAK,yBAAyB,KAAK;AAAA,EACrC;AACA,MAAI,KAAK,sBAAsB,QAAW;AACxC,SAAK,oBAAoB,KAAK;AAAA,EAChC;AACA,MAAI,KAAK,0BAA0B,QAAW;AAC5C,SAAK,wBAAwB,KAAK;AAAA,EACpC;AACA,MAAI,KAAK,oBAAoB,MAAM;AACjC,SAAK,kBAAkB;AAAA,EACzB;AACA,QAAM,MAAM,KAAK;AACjB,MAAI,KAAK;AAGP,SAAK,gBAAgB;AAAA,MACnB,WAAW,IAAI;AAAA,MACf,QAAQ,IAAI;AAAA,MACZ,UAAU,IAAI;AAAA,MACd,eAAe,IAAI;AAAA,IACrB;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,iBAAiB,MAA8B,OAA4B;AACzF,MAAI,CAAC,KAAM,QAAO;AAClB,SACE,KAAK,SAAS,MAAM,QACpB,KAAK,YAAY,MAAM,WACvB,KAAK,cAAc,MAAM,aACzB,KAAK,eAAe,MAAM,cAC1B,KAAK,0BAA0B,MAAM,yBACrC,KAAK,sBAAsB,MAAM,qBACjC,KAAK,qBAAqB,MAAM,oBAChC,KAAK,oBAAoB,MAAM,mBAC/B,KAAK,gCAAgC,MAAM,+BAC3C,KAAK,oBAAoB,MAAM,mBAC/B,KAAK,eAAe,MAAM,cAC1B,KAAK,mBAAmB,MAAM,kBAC9B,KAAK,kBAAkB,MAAM,iBAC7B,KAAK,oBAAoB,MAAM,mBAC/B,KAAK,eAAe,cAAc,MAAM,eAAe,aACvD,KAAK,eAAe,aAAa,MAAM,eAAe,YACtD,KAAK,eAAe,WAAW,MAAM,eAAe,UACpD,KAAK,eAAe,kBAAkB,MAAM,eAAe;AAAA;AAAA,EAG3D,KAAK,2BAA2B,MAAM,0BACtC,KAAK,sBAAsB,MAAM,qBACjC,yBAAyB,KAAK,qBAAqB,MACjD,yBAAyB,MAAM,qBAAqB;AAE1D;AAGO,SAAS,4BACd,UACA,OACA,KACA,eACc;AACd,QAAM,SAAS,kBAAkB,SAAY,CAAC,IAAI,SAAS;AAAA,IACzD,CAAC,SAAS,CAAC,cAAc,KAAK,CAAC,aAAa,iBAAiB,MAAM,QAAQ,CAAC;AAAA,EAC9E;AACA,MAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,OAAO,EAAG,QAAO;AAC9C,SAAO,CAAC,GAAG,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,cAAc,CAAC;AAC7D;AAEO,SAAS,sBAAsB,MAA2B;AAC/D,SAAO,KAAK,oBAAoB,QAC9B,KAAK,2BAA2B,UAChC,KAAK,0BAA0B;AACnC;AAGO,SAAS,yBACd,MACQ;AACR,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO,GAAG,KAAK,SAAS,KAAS,KAAK,UAAU,KAAS,KAAK,cAAc;AAC9E;AAiBO,SAAS,4BAA4B,OAA6C;AACvF,QAAM,SAAS,oBAAI,IAAkC;AACrD,aAAW,QAAQ,OAAO;AACxB,UAAM,MAAM;AAAA,MACV,KAAK,0BAA0B;AAAA,MAC/B,KAAK,qBAAqB;AAAA,MAC1B,yBAAyB,KAAK,qBAAqB;AAAA,MACnD,KAAK,eAAe,aAAa;AAAA,MACjC,KAAK,eAAe,YAAY;AAAA,MAChC,KAAK,eAAe,UAAU;AAAA,MAC9B,KAAK,eAAe,iBAAiB;AAAA,IACvC,EAAE,KAAK,IAAQ;AACf,UAAM,QAAQ,OAAO,IAAI,GAAG;AAC5B,QAAI,OAAO;AACT,YAAM,MAAM,KAAK,IAAI;AAAA,IACvB,OAAO;AACL,YAAM,UAAgC,EAAE,OAAO,CAAC,IAAI,EAAE;AACtD,UAAI,KAAK,2BAA2B,OAAW,SAAQ,yBAAyB,KAAK;AACrF,UAAI,KAAK,sBAAsB,OAAW,SAAQ,oBAAoB,KAAK;AAC3E,UAAI,KAAK,0BAA0B,OAAW,SAAQ,wBAAwB,KAAK;AACnF,UAAI,KAAK,kBAAkB,OAAW,SAAQ,gBAAgB,KAAK;AACnE,aAAO,IAAI,KAAK,OAAO;AAAA,IACzB;AAAA,EACF;AACA,SAAO,CAAC,GAAG,OAAO,OAAO,CAAC;AAC5B;AAEO,SAAS,sBACd,MACA,OACS;AACT,SAAO,KAAK,WAAW,MAAM,UAAU,KAAK,MAAM,CAAC,MAAM,UAAU,iBAAiB,MAAM,MAAM,KAAK,CAAC,CAAC;AACzG;AAEO,SAAS,kCACd,WACA,UACS;AACT,MAAI,UAAU,WAAW,KAAK,UAAU,SAAS,SAAS,QAAQ;AAChE,WAAO;AAAA,EACT;AACA,QAAM,SAAS,SAAS,SAAS,UAAU;AAC3C,SAAO,UAAU,MAAM,CAAC,MAAM,UAAU,iBAAiB,MAAM,SAAS,SAAS,KAAK,CAAC,CAAC;AAC1F;AAEO,SAAS,gCACd,OACA,gBACuB;AACvB,QAAM,gBAAgB,MAAM,iBAAiB,CAAC;AAC9C,MACE,cAAc,SAAS,KACvB,eAAe,UAAU,cAAc,UACvC,cAAc,MAAM,CAAC,MAAM,UAAU,iBAAiB,eAAe,KAAK,GAAG,IAAI,CAAC,GAClF;AACA,UAAM,wBAAwB,eAAe,MAAM,cAAc,MAAM;AACvE,QAAI,sBAAsB,SAAS,KAAK,qBAAqB,MAAM,OAAO,qBAAqB,IAAI,GAAG;AACpG,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,qBACP,WACA,gBACQ;AACR,MAAI,QAAQ;AACZ,SACE,QAAQ,UAAU,UAClB,QAAQ,eAAe,UACvB,iBAAiB,UAAU,KAAK,GAAG,eAAe,KAAK,CAAC,GACxD;AACA,aAAS;AAAA,EACX;AACA,SAAO;AACT;AAEO,SAAS,qCACd,WACA,gBACQ;AACR,MAAI,mBAAmB;AACvB,WAAS,QAAQ,GAAG,QAAQ,eAAe,QAAQ,SAAS,GAAG;AAC7D,UAAM,eAAe,qBAAqB,WAAW,eAAe,MAAM,KAAK,CAAC;AAChF,QAAI,eAAe,kBAAkB;AACnC,yBAAmB;AACnB,UAAI,qBAAqB,UAAU,OAAQ;AAAA,IAC7C;AAAA,EACF;AACA,SAAO;AACT;AAEO,IAAM,oBAAN,cAAgC,MAAM;AAAA,EAC3C,YAAY,WAAmB;AAC7B,UAAM,kBAAkB,SAAS,IAAI;AACrC,SAAK,OAAO;AAAA,EACd;AACF;AAEO,SAAS,iBAAoB,UAAsB,WAA+B;AACvF,MAAI,QAA+B;AACnC,QAAM,UAAU,IAAI,QAAW,CAAC,GAAG,WAAW;AAC5C,YAAQ,WAAW,MAAM,OAAO,IAAI,kBAAkB,SAAS,CAAC,GAAG,SAAS;AAC5E,QAAI,OAAQ,MAAyB,UAAU,YAAY;AACzD,MAAC,MAAyB,MAAM;AAAA,IAClC;AAAA,EACF,CAAC;AACD,SAAO,QAAQ,KAAK,CAAC,UAAU,OAAO,CAAC,EAAE,QAAQ,MAAM;AACrD,QAAI,MAAO,cAAa,KAAK;AAAA,EAC/B,CAAC;AACH;","names":[]}

package/dist/{chunk-NPO4ZQFY.js → chunk-LDXS746V.js}

@@ -1,10 +1,10 @@
 import {
   parseXrayFormat
-} from "./chunk-RRJ462HP.js";
+} from "./chunk-O6YJI5VX.js";
 import {
   RECALL_DISCLOSURE_LEVELS,
   isRecallDisclosure
-} from "./chunk-LDXNKEYB.js";
+} from "./chunk-A6PKEU7T.js";
 
 // src/recall-xray-cli.ts
 function parseXrayDisclosureFlag(value) {
@@ -50,4 +50,4 @@ export {
   parseXrayBudgetFlag,
   parseXrayCliOptions
 };
-//# sourceMappingURL=chunk-NPO4ZQFY.js.map
+//# sourceMappingURL=chunk-LDXS746V.js.map

package/dist/{chunk-UTXYOWDR.js → chunk-LGR54NYT.js}

@@ -15,7 +15,7 @@ import {
 } from "./chunk-PL26BCRN.js";
 import {
   resolveScopeProfilePlan
-} from "./chunk-WC3V7HHP.js";
+} from "./chunk-KJZKO2M6.js";
 import {
   parseFlexibleIsoTimestamp
 } from "./chunk-P7FMDTKL.js";
@@ -1015,7 +1015,7 @@ ${normalized}`).digest("hex");
         getDeferredCount: () => this.deps.getLastPersistExtractionDeferredCount(),
         normalizedTurns,
         bufferKey,
-        retainDeferredTurns: (key, retainedTurns, max) => this.deps.getBuffer().retainDeferredTurns(key, retainedTurns, max),
+        retainDeferredTurns: (key, retainedTurns, max) => this.deps.getBuffer().retainDeferredTurns(key, retainedTurns, max, turns),
         clearBuffer,
         failOnExtractionFailure: options.failOnExtractionFailure === true
       });
@@ -1093,4 +1093,4 @@ export {
   ExtractionDeadlineError,
   ExtractionRunCoordinator
 };
-//# sourceMappingURL=chunk-UTXYOWDR.js.map
+//# sourceMappingURL=chunk-LGR54NYT.js.map