@remnic/core 10.0.4 → 10.0.6

package/dist/{chunk-UCCB7RKF.js → chunk-EMVJU7WC.js}

@@ -1,6 +1,6 @@
 import {
   parseFrontmatter
-} from "./chunk-ABET5LA5.js";
+} from "./chunk-37HCPM56.js";
 import {
   activityDigestPath,
   isValidActivityDate
@@ -199,4 +199,4 @@ export {
   buildStandup,
   standupHelp
 };
-//# sourceMappingURL=chunk-UCCB7RKF.js.map
+//# sourceMappingURL=chunk-EMVJU7WC.js.map

package/dist/{chunk-IY7ZISXV.js → chunk-ENNC3RZ6.js}

@@ -1,6 +1,6 @@
 import {
   StorageManager
-} from "./chunk-ABET5LA5.js";
+} from "./chunk-37HCPM56.js";
 import {
   getCachedRuleMemories,
   setCachedRuleMemories
@@ -119,4 +119,4 @@ export {
   compareVerifiedSemanticRuleResults,
   searchVerifiedSemanticRules
 };
-//# sourceMappingURL=chunk-IY7ZISXV.js.map
+//# sourceMappingURL=chunk-ENNC3RZ6.js.map

package/dist/{chunk-QLK3SL7Q.js → chunk-ETSJD5IV.js}

@@ -1,3 +1,8 @@
+import {
+  coerceBool,
+  coerceNumber
+} from "./chunk-PQVCH2AE.js";
+
 // src/correction/correction-contract.ts
 var MEMORY_CATEGORIES = [
   "fact",
@@ -23,6 +28,7 @@ var CORRECTION_ACTION_KINDS = [
 ];
 var CORRECTION_TEXT_MAX = 1e4;
 var REDACTION_PATTERN_MAX = 256;
+var CORRECTION_MEMORY_ID_MAX = 512;
 function validateCorrectionRequest(request) {
   if (!request || typeof request !== "object") {
     throw new CorrectionContractError("CorrectionRequest must be an object.");
@@ -37,22 +43,45 @@ function validateCorrectionRequest(request) {
     );
   }
   const targetIds = Array.isArray(request.targetIds) ? request.targetIds.filter((id) => typeof id === "string" && id.length > 0) : void 0;
-  if (targetIds !== void 0 && targetIds.length === 0) {
-    return {
-      text,
-      ...request.sessionKey ? { sessionKey: request.sessionKey } : {},
-      ...request.principal ? { principal: request.principal } : {},
-      ...request.namespace ? { namespace: request.namespace } : {}
-    };
+  const normalizedTargets = targetIds !== void 0 && targetIds.length === 0 ? void 0 : targetIds;
+  const duplicateOf = readDuplicateOf(request.duplicateOf);
+  if (duplicateOf) {
+    if (!normalizedTargets || normalizedTargets.length !== 1) {
+      throw new CorrectionContractError(
+        "CorrectionRequest.duplicateOf requires exactly one targetIds entry (the duplicate memory)."
+      );
+    }
+    if (normalizedTargets[0] === duplicateOf) {
+      throw new CorrectionContractError(
+        "CorrectionRequest.duplicateOf must be a different memory from targetIds."
+      );
+    }
   }
   return {
     text,
-    ...targetIds ? { targetIds } : {},
+    ...normalizedTargets ? { targetIds: normalizedTargets } : {},
+    ...duplicateOf ? { duplicateOf } : {},
     ...request.sessionKey ? { sessionKey: request.sessionKey } : {},
     ...request.principal ? { principal: request.principal } : {},
     ...request.namespace ? { namespace: request.namespace } : {}
   };
 }
+function readDuplicateOf(value) {
+  if (value === void 0 || value === null) return void 0;
+  if (typeof value !== "string") {
+    throw new CorrectionContractError("CorrectionRequest.duplicateOf must be a memory id string.");
+  }
+  const id = value.trim();
+  if (id.length === 0 || id !== value) {
+    throw new CorrectionContractError("CorrectionRequest.duplicateOf must be a non-empty memory id.");
+  }
+  if (id.length > CORRECTION_MEMORY_ID_MAX) {
+    throw new CorrectionContractError(
+      `CorrectionRequest.duplicateOf exceeds the ${CORRECTION_MEMORY_ID_MAX}-character limit (${id.length}).`
+    );
+  }
+  return id;
+}
 function validateRedactionPattern(pattern) {
   if (typeof pattern !== "string") {
     throw new CorrectionContractError("redaction_rule.pattern must be a string.");
@@ -145,8 +174,21 @@ function validateCorrectionAction(action) {
       if (typeof a.loserId !== "string" || a.loserId.length === 0) {
         throw new CorrectionContractError("supersede.loserId is required.");
       }
-      if (a.replacement !== void 0 && a.replacement !== null) {
-        validateMemoryDraft(a.replacement);
+      {
+        const hasReplacement = a.replacement !== void 0 && a.replacement !== null;
+        const hasWinner = a.winnerId !== void 0 && a.winnerId !== null;
+        if (hasWinner) {
+          if (typeof a.winnerId !== "string" || a.winnerId.trim().length === 0 || a.winnerId !== a.winnerId.trim()) {
+            throw new CorrectionContractError("supersede.winnerId must be a non-empty memory id.");
+          }
+          if (a.winnerId === a.loserId) {
+            throw new CorrectionContractError("supersede.winnerId must differ from loserId.");
+          }
+          if (hasReplacement) {
+            throw new CorrectionContractError("supersede.winnerId cannot be combined with a replacement draft.");
+          }
+        }
+        if (hasReplacement) validateMemoryDraft(a.replacement);
       }
       break;
     case "edit":
@@ -229,6 +271,80 @@ var CorrectionContractError = class extends Error {
   }
 };
 
+// src/correction/correction-config.ts
+var DEFAULT_CORRECTION_CLASSIFY_TIMEOUT_MS = 45e3;
+var MAX_CORRECTION_CLASSIFY_TIMEOUT_MS = 3e5;
+function parseCorrectionConfig(cfg) {
+  return {
+    correctionEnabled: (() => {
+      const nested = cfg.correction?.enabled;
+      const raw = nested !== void 0 ? nested : cfg.correctionEnabled;
+      if (raw === void 0 || raw === null) return true;
+      const value = coerceBool(raw);
+      if (value === void 0) {
+        throw new Error(`Invalid correction.enabled: expected a boolean, got ${JSON.stringify(raw)}`);
+      }
+      return value;
+    })(),
+    correctionApplyRequiresConfirm: (() => {
+      const nested = cfg.correction?.applyRequiresConfirm;
+      const raw = nested !== void 0 ? nested : cfg.correctionApplyRequiresConfirm;
+      if (raw === void 0 || raw === null) return true;
+      const value = coerceBool(raw);
+      if (value === void 0) {
+        throw new Error(`Invalid correction.applyRequiresConfirm: expected a boolean, got ${JSON.stringify(raw)}`);
+      }
+      return value;
+    })(),
+    correctionMaxAffected: (() => {
+      const rawNested = cfg.correction?.maxAffected;
+      const raw = rawNested !== void 0 ? rawNested : cfg.correctionMaxAffected;
+      if (raw === void 0 || raw === null) return 10;
+      const n = coerceNumber(raw);
+      if (n === void 0 || !Number.isFinite(n) || n < 1 || !Number.isInteger(n)) {
+        throw new Error(`Invalid correction.maxAffected: expected an integer >= 1, got ${JSON.stringify(raw)}`);
+      }
+      return n;
+    })(),
+    correctionPlanTtlHours: (() => {
+      const nested = cfg.correction?.planTtlHours;
+      const fromNested = nested !== void 0 ? coerceNumber(nested) : void 0;
+      if (fromNested !== void 0 && fromNested >= 1) return fromNested;
+      if (nested !== void 0 && fromNested === void 0) {
+        throw new Error(`Invalid correction.planTtlHours: expected a number >= 1, got ${JSON.stringify(nested)}`);
+      }
+      if (fromNested !== void 0 && fromNested < 1) {
+        throw new Error(`Invalid correction.planTtlHours: expected a number >= 1, got ${JSON.stringify(nested)}`);
+      }
+      const fromFlat = coerceNumber(cfg.correctionPlanTtlHours);
+      if (fromFlat !== void 0 && fromFlat >= 1) return fromFlat;
+      if (cfg.correctionPlanTtlHours !== void 0 && fromFlat === void 0) {
+        throw new Error(
+          `Invalid correction.planTtlHours: expected a number >= 1, got ${JSON.stringify(cfg.correctionPlanTtlHours)}`
+        );
+      }
+      if (fromFlat !== void 0 && fromFlat < 1) {
+        throw new Error(
+          `Invalid correction.planTtlHours: expected a number >= 1, got ${JSON.stringify(cfg.correctionPlanTtlHours)}`
+        );
+      }
+      return 24;
+    })(),
+    correctionClassifyTimeoutMs: (() => {
+      const nested = cfg.correction?.classifyTimeoutMs;
+      const raw = nested !== void 0 ? nested : cfg.correctionClassifyTimeoutMs;
+      if (raw === void 0 || raw === null) return DEFAULT_CORRECTION_CLASSIFY_TIMEOUT_MS;
+      const n = coerceNumber(raw);
+      if (n === void 0 || !Number.isInteger(n) || n < 1 || n > MAX_CORRECTION_CLASSIFY_TIMEOUT_MS) {
+        throw new Error(
+          `Invalid correction.classifyTimeoutMs: expected an integer from 1 to ${MAX_CORRECTION_CLASSIFY_TIMEOUT_MS}, got ${JSON.stringify(raw)}`
+        );
+      }
+      return n;
+    })()
+  };
+}
+
 export {
   MEMORY_CATEGORIES,
   CORRECTION_TEXT_MAX,
@@ -237,6 +353,9 @@ export {
   validateCorrectionAction,
   deterministicFallbackPlan,
   newPlanId,
-  CorrectionContractError
+  CorrectionContractError,
+  DEFAULT_CORRECTION_CLASSIFY_TIMEOUT_MS,
+  MAX_CORRECTION_CLASSIFY_TIMEOUT_MS,
+  parseCorrectionConfig
 };
-//# sourceMappingURL=chunk-QLK3SL7Q.js.map
+//# sourceMappingURL=chunk-ETSJD5IV.js.map

package/dist/chunk-ETSJD5IV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/correction/correction-contract.ts","../src/correction/correction-config.ts"],"sourcesContent":["/**\n * correction/correction-contract.ts — Types for the Correction Contract\n * (issue #1580).\n *\n * The Correction Contract is the SINGLE plan/apply pipeline every memory\n * correction flows through: supersession, invalidation, tombstone, edit,\n * rescope, redaction. A correction arrives as a plain-language statement\n * (\"we migrated to MySQL in March\"); the planner turns it into a structured\n * {@link CorrectionPlan}; the executor applies the plan in non-destructive\n * order through the existing storage/orchestrator chokepoints.\n *\n * This module is PURE types + validation helpers — no I/O, no side effects.\n * The planner and executor live in sibling modules and inject their own\n * collaborators so the contract is testable in isolation (rule 33).\n *\n * Design rules honored (issue #1580 design section):\n *   - Plans are per-request state on disk, never module-level (rules 11/47).\n *   - Caller-supplied namespaces are NEVER trusted raw — the service\n *     resolves them through the normal namespace policy (rule 42).\n *   - Bulk operations refuse past maxAffected (no silent truncation, §39).\n *   - `never_store` redaction patterns must be bounded and safe (§34).\n */\n\nimport type { MemoryCategory, MemoryFrontmatter } from \"../types.js\";\n\n// ---------------------------------------------------------------------------\n// Request\n// ---------------------------------------------------------------------------\n\n/**\n * The user-facing input: a plain-language correction plus optional explicit\n * targets. This is what every surface (MCP / HTTP / CLI) collects before\n * handing off to the planner.\n */\nexport interface CorrectionRequest {\n  /** Natural-language correction statement. Required, non-empty. */\n  text: string;\n  /**\n   * Explicit target memory ids (or handles via #1582). When present the\n   * planner resolves these directly; an unknown id is an explicit error\n   * (rule 34), never a silent empty plan. When absent the planner searches.\n   */\n  targetIds?: string[];\n  /** Session key for namespace/principal resolution. */\n  sessionKey?: string;\n  /** Authenticated principal (resolved by the service, never trusted raw). */\n  principal?: string;\n  /**\n   * Caller-suggested namespace. ALWAYS re-resolved through the namespace\n   * policy by the service before reaching the planner (rule 42). The\n   * planner only sees the ALREADY-AUTHORIZED namespace.\n   */\n  namespace?: string;\n  /**\n   * Winner memory id. When set, `targetIds` must be exactly the duplicate\n   * (the loser). The planner skips classification and drafts one recoverable\n   * supersede — no hard delete, no replacement write.\n   */\n  duplicateOf?: string;\n}\n\n// ---------------------------------------------------------------------------\n// Classification + actions\n// ---------------------------------------------------------------------------\n\nexport type CorrectionClassification =\n  | \"wrong\"\n  | \"outdated\"\n  | \"incomplete\"\n  | \"wrong_scope\"\n  | \"never_store\";\n\nexport const CORRECTION_CLASSIFICATIONS: readonly CorrectionClassification[] = [\n  \"wrong\",\n  \"outdated\",\n  \"incomplete\",\n  \"wrong_scope\",\n  \"never_store\",\n];\n\n/**\n * A draft for a replacement memory (supersede action). Mirrors the subset of\n * {@link MemoryFrontmatter} a correction caller may legitimately set; the\n * executor fills in id/created/updated/source.\n */\nexport interface MemoryDraft {\n  content: string;\n  category?: MemoryCategory;\n  confidence?: number;\n  tags?: string[];\n  entityRef?: string;\n  /** Optional event-time anchor for bi-temporal supersession (#1578). */\n  validAt?: string;\n  /** Optional observed-at anchor for bi-temporal supersession (#1578). */\n  observedAt?: string;\n  structuredAttributes?: Record<string, string>;\n}\n\n/**\n * The known {@link MemoryCategory} values. A replacement/rescope category must\n * be one of these — rejecting path-like or unexpected strings before they reach\n * `StorageManager.writeMemory`, which incorporates the category into the\n * generated memory id/path (review thread Of-XJ).\n */\nexport const MEMORY_CATEGORIES: readonly MemoryCategory[] = [\n  \"fact\", \"preference\", \"correction\", \"entity\", \"decision\",\n  \"relationship\", \"principle\", \"commitment\", \"moment\",\n  \"skill\", \"rule\", \"procedure\", \"reasoning_trace\",\n];\n\nexport type CorrectionAction =\n  /**\n   * Outdated: a new fact replaces the loser, or `winnerId` records an\n   * existing memory as the replacement without writing a new one.\n   */\n  | { kind: \"supersede\"; loserId: string; replacement?: MemoryDraft; winnerId?: string }\n  /** Incomplete / minor-wrong: a versioned edit to an existing memory. */\n  | { kind: \"edit\"; memoryId: string; patch: string }\n  /** Wrong: retire + tombstone. */\n  | { kind: \"retract\"; memoryId: string }\n  /** Wrong scope: move to a different namespace. */\n  | { kind: \"rescope\"; memoryId: string; toNamespace: string }\n  /** Never-store: a future-extraction redaction rule. */\n  | { kind: \"redaction_rule\"; pattern: string };\n\nexport const CORRECTION_ACTION_KINDS: readonly CorrectionAction[\"kind\"][] = [\n  \"supersede\",\n  \"edit\",\n  \"retract\",\n  \"rescope\",\n  \"redaction_rule\",\n];\n\n// ---------------------------------------------------------------------------\n// Plan + outcome\n// ---------------------------------------------------------------------------\n\n/**\n * One affected memory in a plan: where it lives, an excerpt, why it is\n * affected, and (when available) the source quote that supports the\n * correction (#1575 provenance).\n */\nexport interface CorrectionAffectedEntry {\n  memoryId: string;\n  /** File path relative to the storage dir, for diff rendering. */\n  path: string;\n  excerpt: string;\n  why: string;\n  sourceQuote?: string;\n}\n\n/**\n * A persisted, expiring correction plan. Read-only artifact produced by the\n * planner; consumed (once) by the executor.\n */\nexport interface CorrectionPlan {\n  planId: string;\n  request: CorrectionRequest;\n  /** Authorized namespace the plan is scoped to (resolved by the service). */\n  namespace: string;\n  affected: CorrectionAffectedEntry[];\n  classification: CorrectionClassification;\n  actions: CorrectionAction[];\n  /** Human-readable diff preview rendered via page-versioning. */\n  diff: string;\n  /** Planner confidence in [0, 1]. `0` means manual selection required. */\n  confidence: number;\n  warnings: string[];\n  createdAt: string;\n  /** ISO timestamp after which apply rejects the plan as expired. */\n  expiresAt: string;\n  /**\n   * Lifecycle: `pending` → `applying` → `applied`|`partial` (or `discarded`).\n   * The executor flips a plan to `applying` BEFORE running any mutation\n   * (review thread OgIqt): if the process dies mid-apply, the plan stays\n   * `applying` and is NOT silently retryable — a partially-applied plan must\n   * never be re-applied wholesale (it would duplicate succeeded actions).\n   */\n  status?: \"pending\" | \"applying\" | \"applied\" | \"discarded\" | \"partial\";\n  /**\n   * ISO timestamp recorded when the plan transitioned to `applying` (#1713\n   * Item 2). Startup recovery uses this to detect plans stuck in `applying`\n   * past the stale-applying TTL (process died mid-apply) and discard+scrub\n   * them. Absent on plans that never entered `applying`.\n   */\n  applyingAt?: string;\n}\n\n/**\n * Per-action outcome recorded by the executor. An action whose new-state\n * write failed is `failed`; the executor never destroys old state for a\n * failed action (rule 25 / checklist §14).\n */\nexport interface CorrectionActionResult {\n  action: CorrectionAction;\n  status: \"applied\" | \"failed\" | \"skipped\";\n  /** For supersede: the new memory id. For edit: the memory id. */\n  memoryId?: string;\n  /** For supersede/retract: the emitted tombstone id (if any). */\n  tombstoneId?: string;\n  error?: string;\n}\n\nexport interface CorrectionOutcome {\n  planId: string;\n  status: \"applied\" | \"partial\";\n  results: CorrectionActionResult[];\n  /** Audit-record memory id (corrections are themselves memories). */\n  auditMemoryId: string;\n  /** ISO timestamp of the apply. */\n  appliedAt: string;\n}\n\n// ---------------------------------------------------------------------------\n// Validation helpers (pure) — shared by planner, executor, and surface tests\n// ---------------------------------------------------------------------------\n\n/** Maximum supported `text` length. Surfaces bound this earlier; the planner\n *  re-validates so a direct-service caller cannot bypass. */\nexport const CORRECTION_TEXT_MAX = 10_000;\n\n/** Maximum supported redaction pattern length (§34 — bounded patterns). */\nexport const REDACTION_PATTERN_MAX = 256;\n\n/** Maximum memory-id length for `duplicateOf` / explicit targets. */\nexport const CORRECTION_MEMORY_ID_MAX = 512;\n\n/**\n * Validate a {@link CorrectionRequest}'s invariants. Returns the cleaned\n * request or throws with a field-specific message (rule 51 — list valid\n * options, never silently default).\n */\nexport function validateCorrectionRequest(request: CorrectionRequest): CorrectionRequest {\n  if (!request || typeof request !== \"object\") {\n    throw new CorrectionContractError(\"CorrectionRequest must be an object.\");\n  }\n  const text = typeof request.text === \"string\" ? request.text.trim() : \"\";\n  if (text.length === 0) {\n    throw new CorrectionContractError(\"CorrectionRequest.text is required and must be non-empty.\");\n  }\n  if (text.length > CORRECTION_TEXT_MAX) {\n    throw new CorrectionContractError(\n      `CorrectionRequest.text exceeds the ${CORRECTION_TEXT_MAX}-character limit (${text.length}).`,\n    );\n  }\n  const targetIds = Array.isArray(request.targetIds)\n    ? request.targetIds.filter((id): id is string => typeof id === \"string\" && id.length > 0)\n    : undefined;\n  const normalizedTargets = targetIds !== undefined && targetIds.length === 0 ? undefined : targetIds;\n  const duplicateOf = readDuplicateOf(request.duplicateOf);\n  if (duplicateOf) {\n    if (!normalizedTargets || normalizedTargets.length !== 1) {\n      throw new CorrectionContractError(\n        \"CorrectionRequest.duplicateOf requires exactly one targetIds entry (the duplicate memory).\",\n      );\n    }\n    if (normalizedTargets[0] === duplicateOf) {\n      throw new CorrectionContractError(\n        \"CorrectionRequest.duplicateOf must be a different memory from targetIds.\",\n      );\n    }\n  }\n  return {\n    text,\n    ...(normalizedTargets ? { targetIds: normalizedTargets } : {}),\n    ...(duplicateOf ? { duplicateOf } : {}),\n    ...(request.sessionKey ? { sessionKey: request.sessionKey } : {}),\n    ...(request.principal ? { principal: request.principal } : {}),\n    ...(request.namespace ? { namespace: request.namespace } : {}),\n  };\n}\n\nfunction readDuplicateOf(value: unknown): string | undefined {\n  if (value === undefined || value === null) return undefined;\n  if (typeof value !== \"string\") {\n    throw new CorrectionContractError(\"CorrectionRequest.duplicateOf must be a memory id string.\");\n  }\n  const id = value.trim();\n  if (id.length === 0 || id !== value) {\n    throw new CorrectionContractError(\"CorrectionRequest.duplicateOf must be a non-empty memory id.\");\n  }\n  if (id.length > CORRECTION_MEMORY_ID_MAX) {\n    throw new CorrectionContractError(\n      `CorrectionRequest.duplicateOf exceeds the ${CORRECTION_MEMORY_ID_MAX}-character limit (${id.length}).`,\n    );\n  }\n  return id;\n}\n\n/**\n * Validate a redaction pattern (§34 — bounded, literal-or-safe-regex; reject\n * catastrophic patterns). Returns the cleaned pattern or throws.\n */\nexport function validateRedactionPattern(pattern: string): string {\n  if (typeof pattern !== \"string\") {\n    throw new CorrectionContractError(\"redaction_rule.pattern must be a string.\");\n  }\n  const trimmed = pattern.trim();\n  if (trimmed.length === 0) {\n    throw new CorrectionContractError(\"redaction_rule.pattern is required.\");\n  }\n  if (trimmed.length > REDACTION_PATTERN_MAX) {\n    throw new CorrectionContractError(\n      `redaction_rule.pattern exceeds the ${REDACTION_PATTERN_MAX}-character bound.`,\n    );\n  }\n  // Reject patterns that could match an unbounded string (overly-broad) OR\n  // exhibit catastrophic backtracking (nested quantifiers like `(a+)+`). We do\n  // NOT execute the regex (that would be ReDoS itself); we only inspect shape.\n  if (isRegexLike(trimmed) && isUnsafeRedactionRegex(trimmed)) {\n    throw new CorrectionContractError(\n      \"redaction_rule.pattern is unsafe — use a bounded literal or a regex without nested quantifiers / overlapping alternation.\",\n    );\n  }\n  // #1669 P2: reject zero-width regex (empty body or matches empty string)\n  // that would withhold every fact.\n  if (isRegexLike(trimmed)) {\n    const regexBody = trimmed.slice(1, -1);\n    if (regexBody.length === 0) {\n      throw new CorrectionContractError(\"redaction_rule.pattern body is empty — use a non-empty regex.\");\n    }\n    try {\n      if (new RegExp(regexBody).test(\"\")) {\n        throw new CorrectionContractError(\n          \"redaction_rule.pattern matches the empty string — it would withhold every fact.\",\n        );\n      }\n    } catch (e) {\n      if (e instanceof CorrectionContractError) throw e;\n      // Compilation failed — the extraction-time defense handles it.\n    }\n  }\n  return trimmed;\n}\n\n/** Only `/.../`-wrapped patterns are treated as regex; everything else is a\n *  literal (review thread P1 — consistent with extraction-redaction-rules.ts). */\nfunction isRegexLike(pattern: string): boolean {\n  return pattern.startsWith(\"/\") && pattern.endsWith(\"/\") && pattern.length >= 2;\n}\n\n/**\n * Reject a regex that would either match an arbitrary-length run of any\n * character (overly-broad) OR exhibit catastrophic backtracking (ReDoS).\n * Mirrors the safe-regex heuristic in extraction-redaction-rules.ts so the\n * apply-time chokepoint and the extraction-time defense agree on what is\n * pathological — intentionally not imported to keep the two modules decoupled\n * (contract owns validation; extraction owns consultation).\n */\nfunction isUnsafeRedactionRegex(pattern: string): boolean {\n  const body = pattern.startsWith(\"/\") && pattern.endsWith(\"/\")\n    ? pattern.slice(1, -1)\n    : pattern;\n  // `.*`, `.+`, `.`, or `(.*)` etc. anywhere → overly broad.\n  if (/(?:^|[^\\\\])\\(\\.\\*\\)|(?:^|[^\\\\])\\.\\*|(?:^|[^\\\\])\\.\\+|^\\.([^*+]?)$/.test(body)) {\n    return true;\n  }\n  // Nested quantifier: a group (...) whose body ends with a quantifier and\n  // which is itself quantified → exponential blowup on near-miss inputs\n  // (classic ReDoS shapes: (a+)+, (a*)*, (a?)+). Also catches overlapping\n  // alternation under repetition: (a|a)+ where branches share a prefix.\n  if (body.length > 512) return true;\n  for (let i = 0; i < body.length; i++) {\n    if (body[i] !== \"(\") continue;\n    let depth = 1;\n    let j = i + 1;\n    while (j < body.length && depth > 0) {\n      if (body[j] === \"\\\\\") { j += 2; continue; }\n      if (body[j] === \"(\") depth++;\n      else if (body[j] === \")\") depth--;\n      j++;\n    }\n    if (depth !== 0) continue;\n    const afterGroup = body[j];\n    if (afterGroup !== \"+\" && afterGroup !== \"*\" && afterGroup !== \"{\") continue;\n    const groupBody = body.slice(i + 1, j - 1);\n    if (/[+*?]$/.test(groupBody) || /\\{\\d+,?\\d*\\}[+*?]?$/.test(groupBody)) {\n      return true;\n    }\n    if (groupBody.includes(\"|\")) {\n      const branches = groupBody.split(\"|\");\n      if (branches.length >= 2) {\n        const firstChars = new Set(branches.map((b) => b[0]).filter(Boolean));\n        if (firstChars.size < branches.filter((b) => b.length > 0).length) {\n          return true;\n        }\n      }\n    }\n    i = j;\n  }\n  return false;\n}\n\n/**\n * Validate the shape of a {@link CorrectionAction}. Used by the executor\n * before applying and by the surface layer to reject malformed client input\n * (rule 51 — list valid kinds).\n */\nexport function validateCorrectionAction(action: unknown): asserts action is CorrectionAction {\n  if (!action || typeof action !== \"object\") {\n    throw new CorrectionContractError(\"CorrectionAction must be an object.\");\n  }\n  const a = action as Record<string, unknown>;\n  if (typeof a.kind !== \"string\" || !CORRECTION_ACTION_KINDS.includes(a.kind as CorrectionAction[\"kind\"])) {\n    throw new CorrectionContractError(\n      `CorrectionAction.kind must be one of: ${CORRECTION_ACTION_KINDS.join(\", \")}.`,\n    );\n  }\n  switch (a.kind) {\n    case \"supersede\":\n      if (typeof a.loserId !== \"string\" || a.loserId.length === 0) {\n        throw new CorrectionContractError(\"supersede.loserId is required.\");\n      }\n      {\n        const hasReplacement = a.replacement !== undefined && a.replacement !== null;\n        const hasWinner = a.winnerId !== undefined && a.winnerId !== null;\n        if (hasWinner) {\n          if (typeof a.winnerId !== \"string\" || a.winnerId.trim().length === 0 || a.winnerId !== a.winnerId.trim()) {\n            throw new CorrectionContractError(\"supersede.winnerId must be a non-empty memory id.\");\n          }\n          if (a.winnerId === a.loserId) {\n            throw new CorrectionContractError(\"supersede.winnerId must differ from loserId.\");\n          }\n          if (hasReplacement) {\n            throw new CorrectionContractError(\"supersede.winnerId cannot be combined with a replacement draft.\");\n          }\n        }\n        if (hasReplacement) validateMemoryDraft(a.replacement);\n      }\n      break;\n    case \"edit\":\n      if (typeof a.memoryId !== \"string\" || a.memoryId.length === 0) {\n        throw new CorrectionContractError(\"edit.memoryId is required.\");\n      }\n      if (typeof a.patch !== \"string\" || a.patch.length === 0) {\n        throw new CorrectionContractError(\"edit.patch is required and must be non-empty.\");\n      }\n      break;\n    case \"retract\":\n      if (typeof a.memoryId !== \"string\" || a.memoryId.length === 0) {\n        throw new CorrectionContractError(\"retract.memoryId is required.\");\n      }\n      break;\n    case \"rescope\":\n      if (typeof a.memoryId !== \"string\" || a.memoryId.length === 0) {\n        throw new CorrectionContractError(\"rescope.memoryId is required.\");\n      }\n      if (typeof a.toNamespace !== \"string\" || a.toNamespace.trim().length === 0) {\n        throw new CorrectionContractError(\"rescope.toNamespace is required.\");\n      }\n      break;\n    case \"redaction_rule\":\n      if (typeof a.pattern !== \"string\") {\n        throw new CorrectionContractError(\"redaction_rule.pattern is required.\");\n      }\n      validateRedactionPattern(a.pattern);\n      break;\n  }\n}\n\n/** Validate a {@link MemoryDraft}. Throws on invalid shape. */\nexport function validateMemoryDraft(draft: unknown): asserts draft is MemoryDraft {\n  if (!draft || typeof draft !== \"object\") {\n    throw new CorrectionContractError(\"MemoryDraft must be an object.\");\n  }\n  const d = draft as Record<string, unknown>;\n  if (typeof d.content !== \"string\" || d.content.trim().length === 0) {\n    throw new CorrectionContractError(\"MemoryDraft.content is required and must be non-empty.\");\n  }\n  if (d.category !== undefined) {\n    if (typeof d.category !== \"string\" || !(MEMORY_CATEGORIES as readonly string[]).includes(d.category)) {\n      throw new CorrectionContractError(\n        `MemoryDraft.category must be one of: ${MEMORY_CATEGORIES.join(\", \")}.`,\n      );\n    }\n  }\n  if (d.confidence !== undefined && (typeof d.confidence !== \"number\" || d.confidence < 0 || d.confidence > 1)) {\n    throw new CorrectionContractError(\"MemoryDraft.confidence must be a number in [0, 1].\");\n  }\n  if (d.tags !== undefined && !Array.isArray(d.tags)) {\n    throw new CorrectionContractError(\"MemoryDraft.tags must be an array.\");\n  }\n  if (d.structuredAttributes !== undefined && (typeof d.structuredAttributes !== \"object\" || d.structuredAttributes === null)) {\n    throw new CorrectionContractError(\"MemoryDraft.structuredAttributes must be an object.\");\n  }\n}\n\n/**\n * Deterministic fallback plan (rule 13): when the planner's LLM is\n * unavailable, the plan degrades to a search result, never an error page.\n * Classification `outdated`, confidence `0`, actions empty.\n */\nexport function deterministicFallbackPlan(args: {\n  request: CorrectionRequest;\n  namespace: string;\n  affected: CorrectionAffectedEntry[];\n  warnings: string[];\n  createdAt: string;\n  expiresAt: string;\n}): CorrectionPlan {\n  return {\n    planId: newPlanId(),\n    request: args.request,\n    namespace: args.namespace,\n    affected: args.affected,\n    classification: \"outdated\",\n    actions: [],\n    diff: \"\",\n    confidence: 0,\n    warnings: [...args.warnings, \"planner LLM unavailable — manual action selection required\"],\n    createdAt: args.createdAt,\n    expiresAt: args.expiresAt,\n    status: \"pending\",\n  };\n}\n\n/** Generate a stable plan id. Exposed for tests + deterministic fallback. */\nexport function newPlanId(): string {\n  return `corr-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;\n}\n\n/** Error class for contract violations. Surfaces map it to a 400 / input error. */\nexport class CorrectionContractError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"CorrectionContractError\";\n  }\n}\n","/**\n * Correction-contract config (issue #1580 plus classify timeout).\n *\n * Extracted from config.ts so the grandfathered parser file does not grow.\n * Nested `correction.<key>` wins over the flat `correction<Key>` legacy key.\n * Invalid values throw — they are never clamped or silently defaulted.\n *\n * Reads stay inline on `cfg` so the parsed-key extractor records the same\n * paths the plugin schema declares.\n */\nimport { coerceBool, coerceNumber } from \"../connectors/coerce.js\";\n\nexport const DEFAULT_CORRECTION_CLASSIFY_TIMEOUT_MS = 45_000;\nexport const MAX_CORRECTION_CLASSIFY_TIMEOUT_MS = 300_000;\n\nexport interface ParsedCorrectionConfig {\n  correctionEnabled: boolean;\n  correctionApplyRequiresConfirm: boolean;\n  correctionMaxAffected: number;\n  correctionPlanTtlHours: number;\n  correctionClassifyTimeoutMs: number;\n}\n\nexport function parseCorrectionConfig(cfg: Record<string, unknown>): ParsedCorrectionConfig {\n  return {\n    correctionEnabled: (() => {\n      const nested = (cfg.correction as Record<string, unknown> | undefined)?.enabled;\n      const raw = nested !== undefined ? nested : cfg.correctionEnabled;\n      if (raw === undefined || raw === null) return true;\n      const value = coerceBool(raw);\n      if (value === undefined) {\n        throw new Error(`Invalid correction.enabled: expected a boolean, got ${JSON.stringify(raw)}`);\n      }\n      return value;\n    })(),\n    correctionApplyRequiresConfirm: (() => {\n      const nested = (cfg.correction as Record<string, unknown> | undefined)?.applyRequiresConfirm;\n      const raw = nested !== undefined ? nested : cfg.correctionApplyRequiresConfirm;\n      if (raw === undefined || raw === null) return true;\n      const value = coerceBool(raw);\n      if (value === undefined) {\n        throw new Error(`Invalid correction.applyRequiresConfirm: expected a boolean, got ${JSON.stringify(raw)}`);\n      }\n      return value;\n    })(),\n    correctionMaxAffected: (() => {\n      const rawNested = (cfg.correction as Record<string, unknown> | undefined)?.maxAffected;\n      const raw = rawNested !== undefined ? rawNested : cfg.correctionMaxAffected;\n      if (raw === undefined || raw === null) return 10;\n      const n = coerceNumber(raw);\n      if (n === undefined || !Number.isFinite(n) || n < 1 || !Number.isInteger(n)) {\n        throw new Error(`Invalid correction.maxAffected: expected an integer >= 1, got ${JSON.stringify(raw)}`);\n      }\n      return n;\n    })(),\n    correctionPlanTtlHours: (() => {\n      const nested = (cfg.correction as Record<string, unknown> | undefined)?.planTtlHours;\n      const fromNested = nested !== undefined ? coerceNumber(nested) : undefined;\n      if (fromNested !== undefined && fromNested >= 1) return fromNested;\n      if (nested !== undefined && fromNested === undefined) {\n        throw new Error(`Invalid correction.planTtlHours: expected a number >= 1, got ${JSON.stringify(nested)}`);\n      }\n      if (fromNested !== undefined && fromNested < 1) {\n        throw new Error(`Invalid correction.planTtlHours: expected a number >= 1, got ${JSON.stringify(nested)}`);\n      }\n      const fromFlat = coerceNumber(cfg.correctionPlanTtlHours);\n      if (fromFlat !== undefined && fromFlat >= 1) return fromFlat;\n      if (cfg.correctionPlanTtlHours !== undefined && fromFlat === undefined) {\n        throw new Error(\n          `Invalid correction.planTtlHours: expected a number >= 1, got ${JSON.stringify(cfg.correctionPlanTtlHours)}`\n        );\n      }\n      if (fromFlat !== undefined && fromFlat < 1) {\n        throw new Error(\n          `Invalid correction.planTtlHours: expected a number >= 1, got ${JSON.stringify(cfg.correctionPlanTtlHours)}`\n        );\n      }\n      return 24;\n    })(),\n    correctionClassifyTimeoutMs: (() => {\n      const nested = (cfg.correction as Record<string, unknown> | undefined)?.classifyTimeoutMs;\n      const raw = nested !== undefined ? nested : cfg.correctionClassifyTimeoutMs;\n      if (raw === undefined || raw === null) return DEFAULT_CORRECTION_CLASSIFY_TIMEOUT_MS;\n      const n = coerceNumber(raw);\n      if (n === undefined || !Number.isInteger(n) || n < 1 || n > MAX_CORRECTION_CLASSIFY_TIMEOUT_MS) {\n        throw new Error(\n          `Invalid correction.classifyTimeoutMs: expected an integer from 1 to ${MAX_CORRECTION_CLASSIFY_TIMEOUT_MS}, got ${JSON.stringify(raw)}`\n        );\n      }\n      return n;\n    })(),\n  };\n}\n"],"mappings":";;;;;;AAwGO,IAAM,oBAA+C;AAAA,EAC1D;AAAA,EAAQ;AAAA,EAAc;AAAA,EAAc;AAAA,EAAU;AAAA,EAC9C;AAAA,EAAgB;AAAA,EAAa;AAAA,EAAc;AAAA,EAC3C;AAAA,EAAS;AAAA,EAAQ;AAAA,EAAa;AAChC;AAiBO,IAAM,0BAA+D;AAAA,EAC1E;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAwFO,IAAM,sBAAsB;AAG5B,IAAM,wBAAwB;AAG9B,IAAM,2BAA2B;AAOjC,SAAS,0BAA0B,SAA+C;AACvF,MAAI,CAAC,WAAW,OAAO,YAAY,UAAU;AAC3C,UAAM,IAAI,wBAAwB,sCAAsC;AAAA,EAC1E;AACA,QAAM,OAAO,OAAO,QAAQ,SAAS,WAAW,QAAQ,KAAK,KAAK,IAAI;AACtE,MAAI,KAAK,WAAW,GAAG;AACrB,UAAM,IAAI,wBAAwB,2DAA2D;AAAA,EAC/F;AACA,MAAI,KAAK,SAAS,qBAAqB;AACrC,UAAM,IAAI;AAAA,MACR,sCAAsC,mBAAmB,qBAAqB,KAAK,MAAM;AAAA,IAC3F;AAAA,EACF;AACA,QAAM,YAAY,MAAM,QAAQ,QAAQ,SAAS,IAC7C,QAAQ,UAAU,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC,IACtF;AACJ,QAAM,oBAAoB,cAAc,UAAa,UAAU,WAAW,IAAI,SAAY;AAC1F,QAAM,cAAc,gBAAgB,QAAQ,WAAW;AACvD,MAAI,aAAa;AACf,QAAI,CAAC,qBAAqB,kBAAkB,WAAW,GAAG;AACxD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AACA,QAAI,kBAAkB,CAAC,MAAM,aAAa;AACxC,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AAAA,IACL;AAAA,IACA,GAAI,oBAAoB,EAAE,WAAW,kBAAkB,IAAI,CAAC;AAAA,IAC5D,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;AAAA,IACrC,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;AAAA,IAC/D,GAAI,QAAQ,YAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;AAAA,IAC5D,GAAI,QAAQ,YAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;AAAA,EAC9D;AACF;AAEA,SAAS,gBAAgB,OAAoC;AAC3D,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,IAAI,wBAAwB,2DAA2D;AAAA,EAC/F;AACA,QAAM,KAAK,MAAM,KAAK;AACtB,MAAI,GAAG,WAAW,KAAK,OAAO,OAAO;AACnC,UAAM,IAAI,wBAAwB,8DAA8D;AAAA,EAClG;AACA,MAAI,GAAG,SAAS,0BAA0B;AACxC,UAAM,IAAI;AAAA,MACR,6CAA6C,wBAAwB,qBAAqB,GAAG,MAAM;AAAA,IACrG;AAAA,EACF;AACA,SAAO;AACT;AAMO,SAAS,yBAAyB,SAAyB;AAChE,MAAI,OAAO,YAAY,UAAU;AAC/B,UAAM,IAAI,wBAAwB,0CAA0C;AAAA,EAC9E;AACA,QAAM,UAAU,QAAQ,KAAK;AAC7B,MAAI,QAAQ,WAAW,GAAG;AACxB,UAAM,IAAI,wBAAwB,qCAAqC;AAAA,EACzE;AACA,MAAI,QAAQ,SAAS,uBAAuB;AAC1C,UAAM,IAAI;AAAA,MACR,sCAAsC,qBAAqB;AAAA,IAC7D;AAAA,EACF;AAIA,MAAI,YAAY,OAAO,KAAK,uBAAuB,OAAO,GAAG;AAC3D,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAGA,MAAI,YAAY,OAAO,GAAG;AACxB,UAAM,YAAY,QAAQ,MAAM,GAAG,EAAE;AACrC,QAAI,UAAU,WAAW,GAAG;AAC1B,YAAM,IAAI,wBAAwB,oEAA+D;AAAA,IACnG;AACA,QAAI;AACF,UAAI,IAAI,OAAO,SAAS,EAAE,KAAK,EAAE,GAAG;AAClC,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAAA,IACF,SAAS,GAAG;AACV,UAAI,aAAa,wBAAyB,OAAM;AAAA,IAElD;AAAA,EACF;AACA,SAAO;AACT;AAIA,SAAS,YAAY,SAA0B;AAC7C,SAAO,QAAQ,WAAW,GAAG,KAAK,QAAQ,SAAS,GAAG,KAAK,QAAQ,UAAU;AAC/E;AAUA,SAAS,uBAAuB,SAA0B;AACxD,QAAM,OAAO,QAAQ,WAAW,GAAG,KAAK,QAAQ,SAAS,GAAG,IACxD,QAAQ,MAAM,GAAG,EAAE,IACnB;AAEJ,MAAI,mEAAmE,KAAK,IAAI,GAAG;AACjF,WAAO;AAAA,EACT;AAKA,MAAI,KAAK,SAAS,IAAK,QAAO;AAC9B,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,QAAI,KAAK,CAAC,MAAM,IAAK;AACrB,QAAI,QAAQ;AACZ,QAAI,IAAI,IAAI;AACZ,WAAO,IAAI,KAAK,UAAU,QAAQ,GAAG;AACnC,UAAI,KAAK,CAAC,MAAM,MAAM;AAAE,aAAK;AAAG;AAAA,MAAU;AAC1C,UAAI,KAAK,CAAC,MAAM,IAAK;AAAA,eACZ,KAAK,CAAC,MAAM,IAAK;AAC1B;AAAA,IACF;AACA,QAAI,UAAU,EAAG;AACjB,UAAM,aAAa,KAAK,CAAC;AACzB,QAAI,eAAe,OAAO,eAAe,OAAO,eAAe,IAAK;AACpE,UAAM,YAAY,KAAK,MAAM,IAAI,GAAG,IAAI,CAAC;AACzC,QAAI,SAAS,KAAK,SAAS,KAAK,sBAAsB,KAAK,SAAS,GAAG;AACrE,aAAO;AAAA,IACT;AACA,QAAI,UAAU,SAAS,GAAG,GAAG;AAC3B,YAAM,WAAW,UAAU,MAAM,GAAG;AACpC,UAAI,SAAS,UAAU,GAAG;AACxB,cAAM,aAAa,IAAI,IAAI,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,OAAO,OAAO,CAAC;AACpE,YAAI,WAAW,OAAO,SAAS,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,QAAQ;AACjE,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AACA,QAAI;AAAA,EACN;AACA,SAAO;AACT;AAOO,SAAS,yBAAyB,QAAqD;AAC5F,MAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,UAAM,IAAI,wBAAwB,qCAAqC;AAAA,EACzE;AACA,QAAM,IAAI;AACV,MAAI,OAAO,EAAE,SAAS,YAAY,CAAC,wBAAwB,SAAS,EAAE,IAAgC,GAAG;AACvG,UAAM,IAAI;AAAA,MACR,yCAAyC,wBAAwB,KAAK,IAAI,CAAC;AAAA,IAC7E;AAAA,EACF;AACA,UAAQ,EAAE,MAAM;AAAA,IACd,KAAK;AACH,UAAI,OAAO,EAAE,YAAY,YAAY,EAAE,QAAQ,WAAW,GAAG;AAC3D,cAAM,IAAI,wBAAwB,gCAAgC;AAAA,MACpE;AACA;AACE,cAAM,iBAAiB,EAAE,gBAAgB,UAAa,EAAE,gBAAgB;AACxE,cAAM,YAAY,EAAE,aAAa,UAAa,EAAE,aAAa;AAC7D,YAAI,WAAW;AACb,cAAI,OAAO,EAAE,aAAa,YAAY,EAAE,SAAS,KAAK,EAAE,WAAW,KAAK,EAAE,aAAa,EAAE,SAAS,KAAK,GAAG;AACxG,kBAAM,IAAI,wBAAwB,mDAAmD;AAAA,UACvF;AACA,cAAI,EAAE,aAAa,EAAE,SAAS;AAC5B,kBAAM,IAAI,wBAAwB,8CAA8C;AAAA,UAClF;AACA,cAAI,gBAAgB;AAClB,kBAAM,IAAI,wBAAwB,iEAAiE;AAAA,UACrG;AAAA,QACF;AACA,YAAI,eAAgB,qBAAoB,EAAE,WAAW;AAAA,MACvD;AACA;AAAA,IACF,KAAK;AACH,UAAI,OAAO,EAAE,aAAa,YAAY,EAAE,SAAS,WAAW,GAAG;AAC7D,cAAM,IAAI,wBAAwB,4BAA4B;AAAA,MAChE;AACA,UAAI,OAAO,EAAE,UAAU,YAAY,EAAE,MAAM,WAAW,GAAG;AACvD,cAAM,IAAI,wBAAwB,+CAA+C;AAAA,MACnF;AACA;AAAA,IACF,KAAK;AACH,UAAI,OAAO,EAAE,aAAa,YAAY,EAAE,SAAS,WAAW,GAAG;AAC7D,cAAM,IAAI,wBAAwB,+BAA+B;AAAA,MACnE;AACA;AAAA,IACF,KAAK;AACH,UAAI,OAAO,EAAE,aAAa,YAAY,EAAE,SAAS,WAAW,GAAG;AAC7D,cAAM,IAAI,wBAAwB,+BAA+B;AAAA,MACnE;AACA,UAAI,OAAO,EAAE,gBAAgB,YAAY,EAAE,YAAY,KAAK,EAAE,WAAW,GAAG;AAC1E,cAAM,IAAI,wBAAwB,kCAAkC;AAAA,MACtE;AACA;AAAA,IACF,KAAK;AACH,UAAI,OAAO,EAAE,YAAY,UAAU;AACjC,cAAM,IAAI,wBAAwB,qCAAqC;AAAA,MACzE;AACA,+BAAyB,EAAE,OAAO;AAClC;AAAA,EACJ;AACF;AAGO,SAAS,oBAAoB,OAA8C;AAChF,MAAI,CAAC,SAAS,OAAO,UAAU,UAAU;AACvC,UAAM,IAAI,wBAAwB,gCAAgC;AAAA,EACpE;AACA,QAAM,IAAI;AACV,MAAI,OAAO,EAAE,YAAY,YAAY,EAAE,QAAQ,KAAK,EAAE,WAAW,GAAG;AAClE,UAAM,IAAI,wBAAwB,wDAAwD;AAAA,EAC5F;AACA,MAAI,EAAE,aAAa,QAAW;AAC5B,QAAI,OAAO,EAAE,aAAa,YAAY,CAAE,kBAAwC,SAAS,EAAE,QAAQ,GAAG;AACpG,YAAM,IAAI;AAAA,QACR,wCAAwC,kBAAkB,KAAK,IAAI,CAAC;AAAA,MACtE;AAAA,IACF;AAAA,EACF;AACA,MAAI,EAAE,eAAe,WAAc,OAAO,EAAE,eAAe,YAAY,EAAE,aAAa,KAAK,EAAE,aAAa,IAAI;AAC5G,UAAM,IAAI,wBAAwB,oDAAoD;AAAA,EACxF;AACA,MAAI,EAAE,SAAS,UAAa,CAAC,MAAM,QAAQ,EAAE,IAAI,GAAG;AAClD,UAAM,IAAI,wBAAwB,oCAAoC;AAAA,EACxE;AACA,MAAI,EAAE,yBAAyB,WAAc,OAAO,EAAE,yBAAyB,YAAY,EAAE,yBAAyB,OAAO;AAC3H,UAAM,IAAI,wBAAwB,qDAAqD;AAAA,EACzF;AACF;AAOO,SAAS,0BAA0B,MAOvB;AACjB,SAAO;AAAA,IACL,QAAQ,UAAU;AAAA,IAClB,SAAS,KAAK;AAAA,IACd,WAAW,KAAK;AAAA,IAChB,UAAU,KAAK;AAAA,IACf,gBAAgB;AAAA,IAChB,SAAS,CAAC;AAAA,IACV,MAAM;AAAA,IACN,YAAY;AAAA,IACZ,UAAU,CAAC,GAAG,KAAK,UAAU,iEAA4D;AAAA,IACzF,WAAW,KAAK;AAAA,IAChB,WAAW,KAAK;AAAA,IAChB,QAAQ;AAAA,EACV;AACF;AAGO,SAAS,YAAoB;AAClC,SAAO,QAAQ,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC;AACnF;AAGO,IAAM,0BAAN,cAAsC,MAAM;AAAA,EACjD,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;;;ACngBO,IAAM,yCAAyC;AAC/C,IAAM,qCAAqC;AAU3C,SAAS,sBAAsB,KAAsD;AAC1F,SAAO;AAAA,IACL,oBAAoB,MAAM;AACxB,YAAM,SAAU,IAAI,YAAoD;AACxE,YAAM,MAAM,WAAW,SAAY,SAAS,IAAI;AAChD,UAAI,QAAQ,UAAa,QAAQ,KAAM,QAAO;AAC9C,YAAM,QAAQ,WAAW,GAAG;AAC5B,UAAI,UAAU,QAAW;AACvB,cAAM,IAAI,MAAM,uDAAuD,KAAK,UAAU,GAAG,CAAC,EAAE;AAAA,MAC9F;AACA,aAAO;AAAA,IACT,GAAG;AAAA,IACH,iCAAiC,MAAM;AACrC,YAAM,SAAU,IAAI,YAAoD;AACxE,YAAM,MAAM,WAAW,SAAY,SAAS,IAAI;AAChD,UAAI,QAAQ,UAAa,QAAQ,KAAM,QAAO;AAC9C,YAAM,QAAQ,WAAW,GAAG;AAC5B,UAAI,UAAU,QAAW;AACvB,cAAM,IAAI,MAAM,oEAAoE,KAAK,UAAU,GAAG,CAAC,EAAE;AAAA,MAC3G;AACA,aAAO;AAAA,IACT,GAAG;AAAA,IACH,wBAAwB,MAAM;AAC5B,YAAM,YAAa,IAAI,YAAoD;AAC3E,YAAM,MAAM,cAAc,SAAY,YAAY,IAAI;AACtD,UAAI,QAAQ,UAAa,QAAQ,KAAM,QAAO;AAC9C,YAAM,IAAI,aAAa,GAAG;AAC1B,UAAI,MAAM,UAAa,CAAC,OAAO,SAAS,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,UAAU,CAAC,GAAG;AAC3E,cAAM,IAAI,MAAM,iEAAiE,KAAK,UAAU,GAAG,CAAC,EAAE;AAAA,MACxG;AACA,aAAO;AAAA,IACT,GAAG;AAAA,IACH,yBAAyB,MAAM;AAC7B,YAAM,SAAU,IAAI,YAAoD;AACxE,YAAM,aAAa,WAAW,SAAY,aAAa,MAAM,IAAI;AACjE,UAAI,eAAe,UAAa,cAAc,EAAG,QAAO;AACxD,UAAI,WAAW,UAAa,eAAe,QAAW;AACpD,cAAM,IAAI,MAAM,gEAAgE,KAAK,UAAU,MAAM,CAAC,EAAE;AAAA,MAC1G;AACA,UAAI,eAAe,UAAa,aAAa,GAAG;AAC9C,cAAM,IAAI,MAAM,gEAAgE,KAAK,UAAU,MAAM,CAAC,EAAE;AAAA,MAC1G;AACA,YAAM,WAAW,aAAa,IAAI,sBAAsB;AACxD,UAAI,aAAa,UAAa,YAAY,EAAG,QAAO;AACpD,UAAI,IAAI,2BAA2B,UAAa,aAAa,QAAW;AACtE,cAAM,IAAI;AAAA,UACR,gEAAgE,KAAK,UAAU,IAAI,sBAAsB,CAAC;AAAA,QAC5G;AAAA,MACF;AACA,UAAI,aAAa,UAAa,WAAW,GAAG;AAC1C,cAAM,IAAI;AAAA,UACR,gEAAgE,KAAK,UAAU,IAAI,sBAAsB,CAAC;AAAA,QAC5G;AAAA,MACF;AACA,aAAO;AAAA,IACT,GAAG;AAAA,IACH,8BAA8B,MAAM;AAClC,YAAM,SAAU,IAAI,YAAoD;AACxE,YAAM,MAAM,WAAW,SAAY,SAAS,IAAI;AAChD,UAAI,QAAQ,UAAa,QAAQ,KAAM,QAAO;AAC9C,YAAM,IAAI,aAAa,GAAG;AAC1B,UAAI,MAAM,UAAa,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,KAAK,IAAI,oCAAoC;AAC9F,cAAM,IAAI;AAAA,UACR,uEAAuE,kCAAkC,SAAS,KAAK,UAAU,GAAG,CAAC;AAAA,QACvI;AAAA,MACF;AACA,aAAO;AAAA,IACT,GAAG;AAAA,EACL;AACF;","names":[]}

package/dist/{chunk-PTFL3INS.js → chunk-FC6RCOIU.js}

@@ -2,7 +2,7 @@ import {
   WHO_KNOWS_DEFAULT_LIMIT,
   WHO_KNOWS_MAX_LIMIT,
   validateWhoKnowsInput
-} from "./chunk-RZCRXCLI.js";
+} from "./chunk-XQSJXNWC.js";
 
 // src/who-knows-cli.ts
 function extractWhoKnowsRawArgs(rest) {
@@ -74,4 +74,4 @@ export {
   renderWhoKnowsText,
   renderWhoKnows
 };
-//# sourceMappingURL=chunk-PTFL3INS.js.map
+//# sourceMappingURL=chunk-FC6RCOIU.js.map

package/dist/{chunk-CQQTEDHS.js → chunk-FLV7M7CT.js}

@@ -1,6 +1,6 @@
 import {
   rebuildMemoryProjection
-} from "./chunk-DBA2W6VV.js";
+} from "./chunk-SZXPKUMN.js";
 
 // src/convergence-refresh.ts
 async function refreshConvergedNamespaces(namespaces, namespaceSearchRouter, getStorage, searchEnabled) {
@@ -32,4 +32,4 @@ async function refreshConvergedNamespaces(namespaces, namespaceSearchRouter, get
 export {
   refreshConvergedNamespaces
 };
-//# sourceMappingURL=chunk-CQQTEDHS.js.map
+//# sourceMappingURL=chunk-FLV7M7CT.js.map

package/dist/{chunk-3SL52JKD.js → chunk-FZVROZKC.js}

@@ -1,13 +1,13 @@
+import {
+  stampSpanSource,
+  verifySpanSource
+} from "./chunk-A6CXG5WI.js";
 import {
   validateSpanOffsets
 } from "./chunk-QJ2AX6DU.js";
 import {
   sliceSpanText
 } from "./chunk-JE26AUX6.js";
-import {
-  stampSpanSource,
-  verifySpanSource
-} from "./chunk-A6CXG5WI.js";
 import {
   log
 } from "./chunk-3WCASNQZ.js";
@@ -157,4 +157,4 @@ export {
   spanAgreesWithContent,
   applyExtractionSpanMaterialization
 };
-//# sourceMappingURL=chunk-3SL52JKD.js.map
+//# sourceMappingURL=chunk-FZVROZKC.js.map

package/dist/{chunk-Z2EVKNZR.js → chunk-GEGUBU3D.js}

@@ -1,7 +1,7 @@
 import {
   resolveDefaultNamespaceRoot,
   resolveNamespaceStorageRoot
-} from "./chunk-3QAIX7TV.js";
+} from "./chunk-6KHF6PAB.js";
 import {
   MutationSerializer,
   withHeldFileLock
@@ -1473,4 +1473,4 @@ export {
   isNamespaceKind,
   NamespaceCatalog
 };
-//# sourceMappingURL=chunk-Z2EVKNZR.js.map
+//# sourceMappingURL=chunk-GEGUBU3D.js.map

package/dist/{chunk-LIGP5M2C.js → chunk-GF4H3B3R.js}

@@ -1,24 +1,24 @@
-import {
-  safeReadMemories
-} from "./chunk-6JMQR72P.js";
 import {
   withBriefingFollowupTimeout
 } from "./chunk-GZFKCLRC.js";
+import {
+  safeReadMemories
+} from "./chunk-6JMQR72P.js";
 import {
   StorageManager
-} from "./chunk-ABET5LA5.js";
+} from "./chunk-37HCPM56.js";
 import {
   normalizeEntityName
 } from "./chunk-YXZG5TVN.js";
-import {
-  serializeMutations
-} from "./chunk-FFAZ2XFU.js";
 import {
   extractJsonCandidates
 } from "./chunk-YBA52OKG.js";
 import {
   excludeSupportPassportPrivateMemories
 } from "./chunk-PWPIERBM.js";
+import {
+  serializeMutations
+} from "./chunk-FFAZ2XFU.js";
 import {
   readEnvVar,
   resolveHomeDir
@@ -962,4 +962,4 @@ export {
   resolveBriefingSaveDir,
   briefingFilename
 };
-//# sourceMappingURL=chunk-LIGP5M2C.js.map
+//# sourceMappingURL=chunk-GF4H3B3R.js.map

package/dist/{chunk-FMIVV5SV.js → chunk-I56MTWE7.js}

@@ -1,7 +1,7 @@
 import {
   rebuildMemoryProjection,
   watchProjectionRebuildParent
-} from "./chunk-DBA2W6VV.js";
+} from "./chunk-SZXPKUMN.js";
 import {
   initLogger,
   log
@@ -77,4 +77,4 @@ if (invokedAsRunner) {
 export {
   PROJECTION_REBUILD_RUNNER_FLAG
 };
-//# sourceMappingURL=chunk-FMIVV5SV.js.map
+//# sourceMappingURL=chunk-I56MTWE7.js.map

package/dist/{chunk-EUL3S3LE.js → chunk-J5WI4QRP.js}

@@ -5,13 +5,13 @@ import {
   coerceBooleanLike,
   coerceNumber
 } from "./chunk-PQVCH2AE.js";
+import {
+  extractJsonCandidates
+} from "./chunk-YBA52OKG.js";
 import {
   assertValidTimezone,
   isValidActivityDate
 } from "./chunk-353C5UNV.js";
-import {
-  extractJsonCandidates
-} from "./chunk-YBA52OKG.js";
 import {
   expandTildePath
 } from "./chunk-6KH5NLQS.js";
@@ -1527,4 +1527,4 @@ export {
   parseActivityConfig,
   parseTimelineVaultConfig
 };
-//# sourceMappingURL=chunk-EUL3S3LE.js.map
+//# sourceMappingURL=chunk-J5WI4QRP.js.map

package/dist/{chunk-436IRJUD.js → chunk-JA54KIYD.js}

@@ -14,7 +14,7 @@ import {
 } from "./chunk-3UXOZBHV.js";
 import {
   StorageManager
-} from "./chunk-ABET5LA5.js";
+} from "./chunk-37HCPM56.js";
 import {
   OKF_PROFILE_TYPE,
   okfTypeForMemory
@@ -272,4 +272,4 @@ export {
   exportOkfBundle,
   firstHeading
 };
-//# sourceMappingURL=chunk-436IRJUD.js.map
+//# sourceMappingURL=chunk-JA54KIYD.js.map

package/dist/{chunk-QWNBQ2T5.js → chunk-JMF5Q4JY.js}

@@ -1,3 +1,6 @@
+import {
+  PROJECTION_REBUILD_RUNNER_FLAG
+} from "./chunk-I56MTWE7.js";
 import {
   ensureContradictionScanCron,
   ensureDaySummaryCron,
@@ -7,22 +10,19 @@ import {
   ensureProceduralMiningCron,
   graphEdgeDecayCadenceToCronExpr
 } from "./chunk-666A3MOW.js";
-import {
-  PROJECTION_REBUILD_RUNNER_FLAG
-} from "./chunk-FMIVV5SV.js";
 import {
   startLocationAutoSync
-} from "./chunk-IHIP7TJ3.js";
+} from "./chunk-SWRN6U7Q.js";
 import {
   rebuildMemoryLifecycleLedger
-} from "./chunk-O57VUN4U.js";
+} from "./chunk-L2VS27PZ.js";
 import {
   planNamespaceMaintenance,
   runNamespaceMaintenanceBatchPlan
-} from "./chunk-Y7CXM7UM.js";
+} from "./chunk-QMFKW4OU.js";
 import {
   rebuildMemoryProjection
-} from "./chunk-DBA2W6VV.js";
+} from "./chunk-SZXPKUMN.js";
 import {
   DEFAULT_TIMELINE_CATEGORIES,
   TIMELINE_RESERVED_IDLE,
@@ -33,13 +33,13 @@ import {
   timelineAnalysisCompleteFromClients,
   validateActivityBaseUrl,
   validateTimelineCategories
-} from "./chunk-EUL3S3LE.js";
+} from "./chunk-J5WI4QRP.js";
 import {
   DEFAULT_PROJECTION_REBUILD_HEAP_USAGE_LIMIT
 } from "./chunk-EWMRFW3F.js";
 import {
   LocalLlmClient
-} from "./chunk-IDSSDL4W.js";
+} from "./chunk-JXSYWTFK.js";
 import {
   FallbackLlmClient
 } from "./chunk-TKC5LZ43.js";
@@ -2647,4 +2647,4 @@ export {
   ActivitySyncScheduler,
   MaintenanceScheduler
 };
-//# sourceMappingURL=chunk-QWNBQ2T5.js.map
+//# sourceMappingURL=chunk-JMF5Q4JY.js.map

package/dist/{chunk-IDSSDL4W.js → chunk-JXSYWTFK.js}

@@ -1003,13 +1003,30 @@ var LocalLlmClient = class _LocalLlmClient {
     if (options.priority) {
       const priority = options.priority;
       return await new Promise((resolve) => {
-        this.requestQueues[priority].push({
+        let settled = false;
+        let onAbort;
+        const finish = (value) => {
+          if (settled) return;
+          settled = true;
+          if (onAbort) options.signal?.removeEventListener("abort", onAbort);
+          resolve(value);
+        };
+        const queued = {
           messages,
           options,
           priority,
           enqueuedAtMs: Date.now(),
-          resolve
-        });
+          resolve: finish
+        };
+        onAbort = () => {
+          const queue = this.requestQueues[priority];
+          const index = queue.indexOf(queued);
+          if (index >= 0) queue.splice(index, 1);
+          finish(null);
+        };
+        this.requestQueues[priority].push(queued);
+        if (options.signal?.aborted) onAbort();
+        else if (options.signal) options.signal.addEventListener("abort", onAbort, { once: true });
         this.scheduleQueueDrain();
       });
     }
@@ -1050,4 +1067,4 @@ var LocalLlmClient = class _LocalLlmClient {
 export {
   LocalLlmClient
 };
-//# sourceMappingURL=chunk-IDSSDL4W.js.map
+//# sourceMappingURL=chunk-JXSYWTFK.js.map