@remnic/core 10.0.49 → 10.0.51

package/dist/{chunk-5IDQVE4U.js → chunk-A3UFV4K3.js}

@@ -1,6 +1,6 @@
 import {
   createVersion
-} from "./chunk-2NLCDNGA.js";
+} from "./chunk-564YP3DW.js";
 import {
   bumpMemoryCorpusVersionForDir
 } from "./chunk-M5GVCJSJ.js";
@@ -12,14 +12,14 @@ import {
   repairContentAfterJournalMove,
   requestEntityCanonicalIdReconcile,
   withRawEntityPageMutation
-} from "./chunk-LWRIGKFM.js";
+} from "./chunk-A5L5KGDI.js";
+import {
+  parseExportBundle
+} from "./chunk-WEHSQBFR.js";
 import {
   decryptCapsuleFileInMemory,
   isEncryptedCapsuleFile
 } from "./chunk-X7Y7WX73.js";
-import {
-  parseExportBundle
-} from "./chunk-WEHSQBFR.js";
 import {
   assertIsDirectoryNotSymlink,
   assertRealpathInsideRoot,
@@ -294,4 +294,4 @@ function mintForkId(capsuleId, originalId, now) {
 export {
   importCapsule
 };
-//# sourceMappingURL=chunk-5IDQVE4U.js.map
+//# sourceMappingURL=chunk-A3UFV4K3.js.map

package/dist/{chunk-LWRIGKFM.js → chunk-A5L5KGDI.js}

@@ -81,6 +81,7 @@ function assertSafeEntityId(entityId) {
 // src/storage/entity-canonical-id-references.ts
 import { statSync } from "fs";
 import path2 from "path";
+import { z } from "zod";
 import {
   closeSync,
   constants,
@@ -141,6 +142,22 @@ function readJournalFileNoFollow(statePath) {
     closeSync(fd);
   }
 }
+var CompletedJournalAttestationSchema = z.object({
+  version: z.literal(1),
+  complete: z.literal(true),
+  completionFingerprint: z.string()
+});
+async function entityCanonicalIdMigrationCompleted(stateDir, readFingerprint) {
+  const result = readJournalFileNoFollow(path2.join(stateDir, ENTITY_CANONICAL_ID_MIGRATION_FILE));
+  if (result.kind !== "ok") return false;
+  try {
+    const parsed = CompletedJournalAttestationSchema.safeParse(JSON.parse(result.raw));
+    if (!parsed.success) return false;
+    return parsed.data.completionFingerprint === await readFingerprint();
+  } catch {
+    return false;
+  }
+}
 async function appendCanonicalizedTombstone(stateDir, input, currentIds, append, revoke, label) {
   let refIds = currentIds();
   let identity = canonicalizeTombstoneIdentity(input.entityRef, input.supersessionKey, refIds);
@@ -398,6 +415,7 @@ export {
   withRawEntityPageMutation,
   assertSafeEntityId,
   ENTITY_CANONICAL_ID_MIGRATION_FILE,
+  entityCanonicalIdMigrationCompleted,
   appendCanonicalizedTombstone,
   memoizedJournalCompletion,
   HistoricalEntityCanonicalIdCache,
@@ -416,4 +434,4 @@ export {
   repairContentAfterJournalMove,
   repairContentAfterJournalMoveSync
 };
-//# sourceMappingURL=chunk-LWRIGKFM.js.map
+//# sourceMappingURL=chunk-A5L5KGDI.js.map

package/dist/chunk-A5L5KGDI.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/storage/entity-canonical-id-lock.ts","../src/storage/entity-id-safety.ts","../src/storage/entity-canonical-id-references.ts"],"sourcesContent":["import { appendFileSync, mkdirSync, realpathSync } from \"node:fs\";\nimport path from \"node:path\";\nimport { invalidateForScope } from \"../memory-cache.js\";\nimport { serializeMutations, withHeldFileLock } from \"../utils/serialize-mutations.js\";\n\nconst ENTITY_CANONICAL_ID_MUTATION_LOCK_STALE_MS = 60_000;\nconst ENTITY_CANONICAL_ID_MUTATION_LOCK_MAX_WAIT_MS = 300_000;\n\nexport function isEntityPagePath(baseDir: string, filePath: string): boolean {\n  if (path.extname(filePath) !== \".md\") return false;\n  const parentDir = path.dirname(path.resolve(filePath));\n  const entitiesDir = path.resolve(baseDir, \"entities\");\n  if (parentDir === entitiesDir) return true;\n  try {\n    return realpathSync(parentDir) === path.join(realpathSync(baseDir), \"entities\");\n  } catch {\n    return false;\n  }\n}\n\nfunction recordRawEntityMutation(baseDir: string, stateDir: string): void {\n  invalidateForScope(baseDir, \"entity-write\");\n  mkdirSync(stateDir, { recursive: true });\n  appendFileSync(path.join(stateDir, \".entity-mutation-version.log\"), \"x\");\n}\n\nexport function withEntityCanonicalMutationLock<T>(\n  stateDir: string,\n  task: (refreshLock: () => Promise<boolean>) => Promise<T>,\n): Promise<T> {\n  const lockPath = path.join(stateDir, \"entity-canonical-id-mutation.lock\");\n  return serializeMutations(lockPath, () =>\n    withHeldFileLock(\n      lockPath,\n      {\n        staleMs: ENTITY_CANONICAL_ID_MUTATION_LOCK_STALE_MS,\n        maxWaitMs: ENTITY_CANONICAL_ID_MUTATION_LOCK_MAX_WAIT_MS,\n      },\n      async (acquired, lock) => {\n        if (!acquired) throw new Error(\"Timed out waiting for entity mutation lock.\");\n        return task(() => lock.refresh());\n      },\n    ),\n  );\n}\n\nexport async function withRawEntityPageMutation<T>(\n  baseDir: string,\n  filePath: string,\n  task: (refreshLock: () => Promise<boolean>) => Promise<T>,\n): Promise<T> {\n  if (!isEntityPagePath(baseDir, filePath)) {\n    return task(async () => true);\n  }\n  const stateDir = path.join(baseDir, \"state\");\n  return withEntityCanonicalMutationLock(stateDir, async (refreshLock) => {\n    try {\n      return await task(refreshLock);\n    } finally {\n      recordRawEntityMutation(baseDir, stateDir);\n    }\n  });\n}\n","const UNSAFE_ENTITY_ID_PATTERN = /[\\/\\\\\\p{Cc}\\p{Zl}\\p{Zp}]/u;\n\nexport function assertSafeEntityId(entityId: string): void {\n  if (UNSAFE_ENTITY_ID_PATTERN.test(entityId)) {\n    throw new Error(\"Refusing unsafe entity id containing a path separator or control character.\");\n  }\n}\n","import { statSync } from \"node:fs\";\n/**\n * Write-boundary surface of the entity canonical-id migration (issue #2213).\n *\n * The migration itself (entity-canonical-id-migration.ts) renames legacy\n * entity files and rewrites references ONCE, to convergence, then retires.\n * Everything here exists so nothing can re-introduce a legacy reference\n * afterwards without the migration having to rescan the corpus:\n *\n * - store-mediated writes canonicalize the caller-supplied `entityRef`\n *   ({@link canonicalizeEntityRefOption});\n * - bulk writers that persist raw record bytes (capsule import/merge)\n *   canonicalize the frontmatter line ({@link canonicalizeEntityRefFrontmatter});\n * - raw-byte writers that CANNOT parse what they write (offline sync,\n *   consolidation-undo, governance restores) request one bounded\n *   reconciliation pass instead ({@link requestEntityCanonicalIdReconcile}).\n */\nimport path from \"node:path\";\nimport { z } from \"zod\";\nimport {\n  closeSync,\n  constants,\n  fstatSync,\n  lstatSync,\n  realpathSync,\n  openSync,\n  readFileSync,\n  renameSync,\n  rmSync,\n  writeFileSync,\n} from \"node:fs\";\nimport { randomUUID } from \"node:crypto\";\nimport { log } from \"../logger.js\";\nimport { isErrnoCode } from \"../utils/errno.js\";\nimport { RECALL_FALLBACK_DIRS } from \"../utils/category-dir.js\";\nimport { withEntityCanonicalMutationLock } from \"./entity-canonical-id-lock.js\";\nimport { assertSafeEntityId } from \"./entity-id-safety.js\";\nimport { normalizeSupersessionKey } from \"../temporal-supersession.js\";\n\nexport const ENTITY_CANONICAL_ID_MIGRATION_FILE = \"entity-canonical-id-migration-v1.json\";\n\n/**\n * Parse a journal document into a mapping table. A document without a valid\n * `mappings` object is a LEGITIMATELY empty table; an unreadable/unparsable\n * document THROWS so callers can distinguish \"empty\" from \"failed\".\n */\nfunction parseJournalMappings(raw: string): Readonly<Record<string, string>> {\n  const parsed: unknown = JSON.parse(raw);\n  if (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed) || !(\"mappings\" in parsed)) return {};\n  const mappings = parsed.mappings;\n  if (!mappings || typeof mappings !== \"object\" || Array.isArray(mappings)) return {};\n  // Null prototype: journal-supplied ids like `constructor` must be own\n  // entries, never collide with Object.prototype (Codex P2, round 20).\n  const cleaned: Record<string, string> = Object.create(null) as Record<string, string>;\n  for (const [legacyId, canonicalId] of Object.entries(mappings)) {\n    if (legacyId.length > 0 && typeof canonicalId === \"string\" && canonicalId.length > 0) {\n      assertSafeEntityId(legacyId);\n      assertSafeEntityId(canonicalId);\n      cleaned[legacyId] = canonicalId;\n    }\n  }\n  return cleaned;\n}\n\n/** Whether the journal says its migration completed. Throws like the mapping parser. */\nfunction parseJournalComplete(raw: string): boolean {\n  // SAFETY: JSON.parse output is unknown; the shape is validated on access.\n  const parsed = JSON.parse(raw) as { complete?: unknown };\n  return parsed !== null && parsed.complete === true;\n}\n\ntype JournalRead =\n  | { kind: \"ok\"; raw: string; key: string }\n  | { kind: \"missing\" }\n  | { kind: \"refused\" }\n  | { kind: \"error\" };\n\n/**\n * Open the journal WITHOUT following symlinks and read content + identity\n * from the same opened inode (repo rule: reject symlink traversal from\n * memory directories). O_NOFOLLOW makes the open refuse a symlinked FINAL\n * component (ELOOP); the parent `state/` directory is verified AFTER the\n * open, together with a path↔fd identity pairing, so a parent swapped\n * around the open cannot hold: a swap still in place fails the parent\n * lstat, and a swap reverted fails the dev/ino pairing against the real\n * journal. Platforms without O_NOFOLLOW get the same post-open checks.\n */\nfunction readJournalFileNoFollow(statePath: string): JournalRead {\n  let fd: number;\n  try {\n    fd = openSync(statePath, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));\n  } catch (error) {\n    if (isErrnoCode(error, \"ENOENT\")) return { kind: \"missing\" };\n    if (isErrnoCode(error, \"ELOOP\")) return { kind: \"refused\" };\n    return { kind: \"error\" };\n  }\n  try {\n    const s = fstatSync(fd);\n    if (!s.isFile()) return { kind: \"refused\" };\n    const parent = lstatSync(path.dirname(statePath));\n    if (parent.isSymbolicLink() || !parent.isDirectory()) return { kind: \"refused\" };\n    const l = lstatSync(statePath);\n    if (l.isSymbolicLink() || l.dev !== s.dev || l.ino !== s.ino) return { kind: \"refused\" };\n    return {\n      kind: \"ok\",\n      raw: readFileSync(fd, \"utf-8\"),\n      key: `${s.dev}:${s.ino}:${s.mtimeMs}:${s.ctimeMs}:${s.size}`,\n    };\n  } catch {\n    return { kind: \"error\" };\n  } finally {\n    closeSync(fd);\n  }\n}\n\n/** The journal fields completion attestation needs; extra journal fields are ignored. */\nconst CompletedJournalAttestationSchema = z.object({\n  version: z.literal(1),\n  complete: z.literal(true),\n  completionFingerprint: z.string(),\n});\n\n/** Skip compatibility scans only when journal completion attests to the live inputs. */\nexport async function entityCanonicalIdMigrationCompleted(\n  stateDir: string,\n  readFingerprint: () => Promise<string>,\n): Promise<boolean> {\n  const result = readJournalFileNoFollow(path.join(stateDir, ENTITY_CANONICAL_ID_MIGRATION_FILE));\n  if (result.kind !== \"ok\") return false;\n  try {\n    const parsed = CompletedJournalAttestationSchema.safeParse(JSON.parse(result.raw));\n    if (!parsed.success) return false;\n    return parsed.data.completionFingerprint === await readFingerprint();\n  } catch {\n    return false;\n  }\n}\n\nexport function loadHistoricalEntityCanonicalIds(stateDir: string): Readonly<Record<string, string>> {\n  const result = readJournalFileNoFollow(path.join(stateDir, ENTITY_CANONICAL_ID_MIGRATION_FILE));\n  if (result.kind !== \"ok\") return {};\n  try {\n    return parseJournalMappings(result.raw);\n  } catch {\n    return {};\n  }\n}\n\n/**\n * Append a tombstone with its identity canonicalized against the CURRENT\n * journal, then recheck: a peer publishing a mapping inside the\n * resolve-to-append window would leave the guard under the legacy id while\n * lookups canonicalize. Each identity change appends the replacement FIRST\n * (AGENTS.md §14 — the retired fact must never be without an active guard),\n * then revokes the superseded one — a park makes the prior canonical\n * claimant a distinct entity, and a stale keyed guard under it would\n * suppress that entity's facts. When the journal will not settle, one final\n * replacement runs under the entity MUTATION lock (parks publish under it).\n */\nexport async function appendCanonicalizedTombstone(\n  stateDir: string,\n  input: { entityRef?: string; supersessionKey?: string },\n  currentIds: () => Readonly<Record<string, string>>,\n  append: (identity: TombstoneIdentity) => Promise<string | null>,\n  revoke: (tombstoneId: string) => Promise<unknown>,\n  label: string,\n): Promise<string | null> {\n  let refIds = currentIds();\n  let identity = canonicalizeTombstoneIdentity(input.entityRef, input.supersessionKey, refIds);\n  let result = await append(identity);\n  const replaceIfChanged = async (next: TombstoneIdentity): Promise<boolean> => {\n    if (next.entityRef === identity.entityRef && next.supersessionKey === identity.supersessionKey) {\n      return false;\n    }\n    identity = next;\n    const superseded = result;\n    result = await append(next);\n    if (superseded !== null) {\n      try {\n        await revoke(superseded);\n      } catch (err) {\n        log.warn(`failed to revoke superseded tombstone ${superseded} for ${label}: ${err}`);\n      }\n    }\n    return true;\n  };\n  for (let attempt = 0; attempt < 3; attempt += 1) {\n    const fresh = currentIds();\n    if (fresh === refIds) return result;\n    refIds = fresh;\n    if (!(await replaceIfChanged(canonicalizeTombstoneIdentity(input.entityRef, input.supersessionKey, fresh)))) {\n      return result;\n    }\n  }\n  await withEntityCanonicalMutationLock(stateDir, async () => {\n    await replaceIfChanged(canonicalizeTombstoneIdentity(input.entityRef, input.supersessionKey, currentIds()));\n  });\n  return result;\n}\n\n/**\n * Journal mapping table keyed by the journal FILE's identity, so a long-lived\n * StorageManager never canonicalizes against a stale snapshot after ANY other\n * writer changes the journal — a peer process completing a migration, or\n * `pruneBlocked()` parking a contested mapping (which rewrites the journal\n * without bumping any shared version). `writeState` publishes via\n * temp-file-plus-rename, so every journal write swaps the inode and the key\n * always moves — the identity is taken from the fstat of the SAME opened\n * inode the content is read from (no stat→read window). Reload cost is one\n * open per lookup and one journal parse per actual change.\n *\n * Failure semantics: last-known data is served ONLY for the SAME state dir\n * (module-level instances can face several stores — another store's table\n * must never leak in), and a failed read/parse never commits the journal's\n * identity, so the next lookup retries instead of caching an empty table\n * under a valid key.\n */\n\n/** Journal lookup result: mapping table plus its completion flag. */\nexport type HistoricalEntityIdsEntry = {\n  mappings: Readonly<Record<string, string>>;\n  complete: boolean;\n};\n\n\n\n/**\n * Memoized journal-completion view keyed on the journal file's stat identity.\n * entityList consults completion once per listed entity; without this each\n * consult re-opens and re-reads the journal (quadratic I/O on large corpora).\n */\nexport function memoizedJournalCompletion(\n  cache: HistoricalEntityCanonicalIdCache,\n  stateDir: () => string,\n): () => boolean {\n  let memo: { key: string; complete: boolean } | undefined;\n  return (): boolean => {\n    let key = \"missing\";\n    try {\n      const journalPath = path.join(stateDir(), ENTITY_CANONICAL_ID_MIGRATION_FILE);\n      const j = statSync(journalPath);\n      key = `${j.dev}:${j.ino}:${j.mtimeMs}:${j.ctimeMs}:${j.size}`;\n    } catch {\n      key = \"missing\";\n    }\n    if (memo && memo.key === key) return memo.complete;\n    const entry = cache.getEntry(stateDir());\n    memo = { key, complete: entry.complete };\n    return memo.complete;\n  };\n}\n\nexport class HistoricalEntityCanonicalIdCache {\n  private mappings: Readonly<Record<string, string>> = {};\n  private complete = false;\n  private key: string | null = null;\n  private stateDir: string | null = null;\n\n  get(stateDir: string): Readonly<Record<string, string>> {\n    return this.getEntry(stateDir).mappings;\n  }\n\n\n  /** Table plus the journal's completion flag, cached under one identity. */\n  getEntry(stateDir: string): HistoricalEntityIdsEntry {\n    const lastKnownMappings = this.stateDir === stateDir ? this.mappings : {};\n    const lastKnownComplete = this.stateDir === stateDir ? this.complete : false;\n    const lastKnown: HistoricalEntityIdsEntry = { mappings: lastKnownMappings, complete: lastKnownComplete };\n    const result = readJournalFileNoFollow(path.join(stateDir, ENTITY_CANONICAL_ID_MIGRATION_FILE));\n    if (result.kind === \"refused\") {\n      // Symlinked/non-regular journal: never follow it, never adopt its\n      // identity — serve this store's last-known table. If it later becomes\n      // a regular file its identity differs from the stored key and reloads.\n      log.warn(\"ignoring non-regular entity canonical-id journal (symlink refused)\");\n      return lastKnown;\n    }\n    if (result.kind === \"error\") {\n      // A TRANSIENT open/read failure (EACCES/EIO) must not dump a valid\n      // table for {}: a write during the outage would skip canonicalization\n      // AND its post-write identity check would compare equal. Serve this\n      // store's last-known table; only a genuine ENOENT means \"no journal\".\n      return lastKnown;\n    }\n    const key = result.kind === \"missing\" ? \"missing\" : result.key;\n    if (key !== this.key || stateDir !== this.stateDir) {\n      let table: Readonly<Record<string, string>> = {};\n      let complete = false;\n      if (result.kind === \"ok\") {\n        try {\n          table = parseJournalMappings(result.raw);\n          complete = parseJournalComplete(result.raw);\n        } catch {\n          // Parse failed under a VALID identity: do not commit the key —\n          // the next lookup retries instead of pinning an empty table.\n          return lastKnown;\n        }\n      }\n      this.mappings = table;\n      this.complete = complete;\n      this.key = key;\n      this.stateDir = stateDir;\n    }\n    return { mappings: this.mappings, complete: this.complete };\n  }\n}\n\nexport function resolveHistoricalEntityCanonicalId(\n  normalized: string,\n  mappings: Readonly<Record<string, string>>,\n): string {\n  let current = normalized;\n  const seen = new Set<string>();\n  while (!seen.has(current)) {\n    seen.add(current);\n    // Own properties only: an unmapped id like `constructor` must not read\n    // Object.prototype and return a function (Codex P2, round 20).\n    const next = Object.hasOwn(mappings, current) ? mappings[current] : undefined;\n    if (!next || next === current) break;\n    current = next;\n  }\n  return current;\n}\n\n/**\n * Canonicalize the `entityRef` a memory-write caller supplied (issue #2213).\n *\n * Extraction and capture callers pass whatever id the LLM or user produced,\n * which can name a legacy id this migration already renamed. Resolving at the\n * WRITE boundary means store-mediated writes can never re-introduce legacy\n * references — which is what let the completed migration retire its recurring\n * full-corpus reference rewrite. It also keeps write-time tombstone lookups on\n * the same id space as migrated tombstones. Unknown ids pass through verbatim.\n */\nexport function canonicalizeEntityRefOption<T extends { entityRef?: string }>(\n  options: T,\n  mappings: Readonly<Record<string, string>>,\n): T {\n  // Non-strings (absent, or a JS caller's null/junk) pass through untouched:\n  // this boundary canonicalizes ids, it does not take over input validation\n  // the write path never performed — serialization already drops falsy refs.\n  if (typeof options.entityRef !== \"string\") return options;\n  return { ...options, entityRef: resolveHistoricalEntityCanonicalId(options.entityRef, mappings) };\n}\n\n/**\n * Canonicalize the effective `entityRef:` line inside a raw memory record's\n * leading frontmatter block (issue #2213). Bulk writers that persist record\n * bytes verbatim — capsule import/merge — are a write boundary too: a capsule\n * can carry pre-migration memories whose refs the target's completed journal\n * already renamed, and no later reconciliation pass exists to absorb them.\n *\n * Line selection mirrors the frontmatter parser and the migration's own\n * serializer: the LAST `entityRef` key wins (indentation tolerated), its\n * indent is preserved, and CRLF records keep their line endings. The closing\n * delimiter must be a standalone `---` line. Non-frontmatter content, records\n * without an `entityRef` line, and ids the journal does not map all pass\n * through byte-identical.\n */\nexport function canonicalizeEntityRefFrontmatter(\n  content: string,\n  mappings: Readonly<Record<string, string>>,\n): string {\n  if (Object.keys(mappings).length === 0) return content;\n  const loc = locateEntityRefLine(content);\n  if (loc === null) return content;\n  const canonical = resolveHistoricalEntityCanonicalId(loc.value, mappings);\n  if (canonical === loc.value) return content;\n  const line = loc.lines[loc.index]!;\n  const indent = /^\\s*/.exec(line)?.[0] ?? \"\";\n  loc.lines[loc.index] = `${indent}entityRef: ${canonical}${line.endsWith(\"\\r\") ? \"\\r\" : \"\"}`;\n  return loc.lines.join(\"\\n\") + content.slice(loc.closeIndex);\n}\n\n/** The raw `entityRef` value in a record's leading frontmatter, or null. */\nexport function readEntityRefFromFrontmatter(content: string): string | null {\n  return locateEntityRefLine(content)?.value ?? null;\n}\n\nfunction locateEntityRefLine(\n  content: string,\n): { lines: string[]; index: number; value: string; closeIndex: number } | null {\n  if (!/^---\\r?\\n/.test(content)) return null;\n  const close = /\\r?\\n---(?:\\r?\\n|$)/g;\n  close.lastIndex = content.indexOf(\"\\n\") + 1;\n  const closeMatch = close.exec(content);\n  if (!closeMatch) return null;\n  const lines = content.slice(0, closeMatch.index).split(\"\\n\");\n  let index = -1;\n  for (let i = 1; i < lines.length; i += 1) {\n    if (/^\\s*entityRef\\s*:/.test(lines[i] ?? \"\")) index = i;\n  }\n  if (index === -1) return null;\n  const line = lines[index]!;\n  const value = line.slice(line.indexOf(\":\") + 1).replace(/\\r$/, \"\").trim();\n  if (value.length === 0) return null;\n  return { lines, index, value, closeIndex: closeMatch.index };\n}\n\n/**\n * Reconcile-pending marker (issue #2213). Raw-byte memory writers that CANNOT\n * canonicalize inline — offline-sync file replication (opaque, possibly\n * encrypted buffers), consolidation-undo restores, governance-run restores —\n * touch this marker instead. The next migration invocation honors it by\n * running ONE bounded reference-reconciliation pass over the completed\n * journal's retained mappings, then clears it. This replaces the retired\n * every-run corpus rewrite with a signal that fires only when a raw writer\n * actually landed unvetted bytes.\n */\nexport const ENTITY_CANONICAL_ID_RECONCILE_MARKER = \"entity-canonical-id-reconcile.pending\";\n/** The generation a migration run renamed aside for consumption; a crash can strand it. */\nexport const ENTITY_CANONICAL_ID_RECONCILE_CONSUMING_MARKER = `${ENTITY_CANONICAL_ID_RECONCILE_MARKER}.consuming`;\n\nexport function requestEntityCanonicalIdReconcileSync(stateDir: string): void {\n  const markerPath = path.join(stateDir, ENTITY_CANONICAL_ID_RECONCILE_MARKER);\n  const temporary = `${markerPath}.${process.pid}.${randomUUID()}.tmp`;\n  try {\n    // Never write THROUGH a symlinked marker OR a symlinked state dir (repo\n    // rule: reject symlink traversal from memory directories). The parent is\n    // lstat-verified as a real directory — direct restore/import callers can\n    // reach this helper without validateRoots() — and temp-file-plus-rename\n    // handles the final component: rename() replaces a planted link ITSELF\n    // rather than following it, with no O_NOFOLLOW dependency.\n    const parent = lstatSync(stateDir);\n    if (parent.isSymbolicLink() || !parent.isDirectory()) {\n      log.warn(`refusing to write entity canonical-id reconcile marker: ${stateDir} is not a real directory`);\n      return;\n    }\n    const parentRealPath = realpathSync(stateDir);\n    writeFileSync(temporary, `${new Date().toISOString()}\\n`, { mode: 0o600 });\n    // Revalidate the parent between the temp write and publication (Codex\n    // P2, round 20): a state-dir swapped for a symlink after the check above\n    // would have landed the temp file through the link. Node has no openat,\n    // so the residual window is the realpath→rename gap — this recheck\n    // reduces check-then-use to the platform primitive's own atomicity.\n    const recheck = lstatSync(stateDir);\n    if (recheck.isSymbolicLink() || !recheck.isDirectory() || realpathSync(stateDir) !== parentRealPath) {\n      rmSync(temporary, { force: true });\n      log.warn(`refusing to publish entity canonical-id reconcile marker: ${stateDir} changed during write`);\n      return;\n    }\n    renameSync(temporary, markerPath);\n  } catch (error) {\n    rmSync(temporary, { force: true });\n    // Best effort by design: a marker failure must not fail the restore/sync\n    // that requested it (AGENTS.md §4). The reference stays legacy-but-readable\n    // until the next mapping change.\n    log.warn(`could not request entity canonical-id reconcile: ${error}`);\n  }\n}\n\nexport async function requestEntityCanonicalIdReconcile(stateDir: string): Promise<void> {\n  requestEntityCanonicalIdReconcileSync(stateDir);\n}\n\n/**\n * Post-persist TOCTOU guard (issue #2213). A writer resolves `entityRef`\n * against one journal generation, then awaits (snapshots, locks, fsyncs)\n * before its bytes land — a peer migration can publish AND finish its final\n * reference scan inside that window, leaving the just-written file behind.\n * Callers pass the mapping table captured at resolve time plus a fresh cache\n * read taken AFTER the write: the cache returns the identical object while\n * the journal file is unchanged, so an identity mismatch means the journal\n * moved mid-write and one bounded reconcile pass is requested.\n */\nexport function reconcileIfJournalMovedSync(\n  stateDir: string,\n  idsAtResolve: Readonly<Record<string, string>>,\n  idsAfterWrite: Readonly<Record<string, string>>,\n): void {\n  if (idsAtResolve === idsAfterWrite) return;\n  requestEntityCanonicalIdReconcileSync(stateDir);\n}\n\nexport async function reconcileIfJournalMoved(\n  stateDir: string,\n  idsAtResolve: Readonly<Record<string, string>>,\n  idsAfterWrite: Readonly<Record<string, string>>,\n): Promise<void> {\n  reconcileIfJournalMovedSync(stateDir, idsAtResolve, idsAfterWrite);\n}\n\n/**\n * Classify a raw write target for entity-reference handling (issue #2213):\n * - `\"memory\"` — hot recall / cold / archive record whose FRONTMATTER\n *   `entityRef` the writer must canonicalize at the write (and repair after).\n * - `\"entity\"` — an `entities/` page. Its migrated surface is relationship\n *   TARGETS in the body, which only `rewriteRelationshipTargets` understands;\n *   raw writers persist bytes faithfully and request the bounded reconcile\n *   pass instead of attempting a frontmatter rewrite.\n * - `\"outside\"` — transcripts, profiles, runtime state, and every other file\n *   outside the migration's scan scope: write byte-identical, no marker.\n */\nexport type EntityRefWritePathKind = \"memory\" | \"entity\" | \"outside\";\n\nexport function classifyEntityRefWritePath(baseDir: string, filePath: string): EntityRefWritePathKind {\n  if (!filePath.endsWith(\".md\")) return \"outside\";\n  const rel = path.relative(baseDir, filePath);\n  if (rel.startsWith(\"..\") || path.isAbsolute(rel)) return \"outside\";\n  const top = rel.split(path.sep)[0] ?? \"\";\n  if (top === \"entities\") return \"entity\";\n  return RECALL_FALLBACK_DIRS.includes(top) || top === \"cold\" || top === \"archive\" ? \"memory\" : \"outside\";\n}\n\n/** True when `filePath` is in the migration's scan scope at all. */\nexport function pathMayCarryEntityRefs(baseDir: string, filePath: string): boolean {\n  return classifyEntityRefWritePath(baseDir, filePath) !== \"outside\";\n}\n\n/**\n * Canonicalize a tombstone's identity fields at the append chokepoint\n * (issue #2213): emitters (forget, temporal supersession, pattern\n * reinforcement, supersede) build inputs from records that may have been\n * read before a peer migration completed. The supersession key embeds the\n * NORMALIZED entity segment (`entity::attr`), so it is re-prefixed when the\n * ref moved — otherwise the keyed guard lands in the legacy id space while\n * write-time lookups canonicalize, and a paraphrase resurrects.\n */\nexport interface TombstoneIdentity {\n  entityRef: string | undefined;\n  supersessionKey: string | undefined;\n}\n\nexport function canonicalizeTombstoneIdentity(\n  entityRef: string | undefined,\n  supersessionKey: string | undefined,\n  refIds: Readonly<Record<string, string>>,\n): TombstoneIdentity {\n  if (typeof entityRef !== \"string\") return { entityRef, supersessionKey };\n  const canonical = resolveHistoricalEntityCanonicalId(entityRef, refIds);\n  if (canonical === entityRef) return { entityRef, supersessionKey };\n  if (supersessionKey) {\n    const stalePrefix = `${normalizeSupersessionKey(entityRef)}::`;\n    if (supersessionKey.startsWith(stalePrefix)) {\n      supersessionKey = `${normalizeSupersessionKey(canonical)}::${supersessionKey.slice(stalePrefix.length)}`;\n    }\n  }\n  return { entityRef: canonical, supersessionKey };\n}\n\n/**\n * Post-persist repair (issue #2213): when the journal moved across a persist,\n * re-resolve the caller's ORIGINAL ref against the fresh table and rewrite\n * the file in place (bounded). When the journal will not settle, take the\n * entity MUTATION lock — parks/removals (the direction the reconcile pass\n * cannot repair, because the removed mapping is gone from the table) publish\n * under it — settle once, then request the marker for additive moves only.\n */\nexport async function repairEntityRefAfterJournalMove(options: {\n  stateDir: string;\n  currentIds: () => Readonly<Record<string, string>>;\n  idsAtResolve: Readonly<Record<string, string>>;\n  rawRef: string;\n  frontmatter: { entityRef?: string };\n  rewrite: () => Promise<void>;\n}): Promise<void> {\n  let refIds = options.idsAtResolve;\n  for (let attempt = 0; attempt < 3; attempt += 1) {\n    const fresh = options.currentIds();\n    if (fresh === refIds) return;\n    refIds = fresh;\n    const desired = resolveHistoricalEntityCanonicalId(options.rawRef, fresh);\n    if (desired === options.frontmatter.entityRef) return;\n    options.frontmatter.entityRef = desired;\n    await options.rewrite();\n  }\n  await withEntityCanonicalMutationLock(options.stateDir, async () => {\n    const desired = resolveHistoricalEntityCanonicalId(options.rawRef, options.currentIds());\n    if (desired !== options.frontmatter.entityRef) {\n      options.frontmatter.entityRef = desired;\n      await options.rewrite();\n    }\n  });\n  await requestEntityCanonicalIdReconcile(options.stateDir);\n}\n\n/**\n * Content-form counterpart of {@link repairEntityRefAfterJournalMove} for\n * async writers that persist raw record bytes (capsule import/merge,\n * binary-lifecycle redirects): same bounded loop, same locked settle.\n */\nexport async function repairContentAfterJournalMove(options: {\n  stateDir: string;\n  cache: HistoricalEntityCanonicalIdCache;\n  idsAtWrite: Readonly<Record<string, string>>;\n  rawContent: string;\n  lastWritten: string;\n  rewrite: (content: string) => Promise<void>;\n}): Promise<void> {\n  let refIds = options.idsAtWrite;\n  let written = options.lastWritten;\n  for (let attempt = 0; attempt < 3; attempt += 1) {\n    const fresh = options.cache.get(options.stateDir);\n    if (fresh === refIds) return;\n    refIds = fresh;\n    const desired = canonicalizeEntityRefFrontmatter(options.rawContent, fresh);\n    if (desired === written) return;\n    written = desired;\n    await options.rewrite(desired);\n  }\n  await withEntityCanonicalMutationLock(options.stateDir, async () => {\n    const desired = canonicalizeEntityRefFrontmatter(options.rawContent, options.cache.get(options.stateDir));\n    if (desired !== written) {\n      written = desired;\n      await options.rewrite(desired);\n    }\n  });\n  await requestEntityCanonicalIdReconcile(options.stateDir);\n}\n\n/**\n * Sync variant (space promotion, curation, review actions). Sync callers\n * cannot take the async mutation lock, so exhaustion surfaces a retryable\n * error after requesting the marker — a silent return could leave the bytes\n * on a parked canonical claimant the reconcile pass cannot restore.\n */\nexport function repairContentAfterJournalMoveSync(options: {\n  stateDir: string;\n  cache: HistoricalEntityCanonicalIdCache;\n  idsAtWrite: Readonly<Record<string, string>>;\n  rawContent: string;\n  lastWritten: string;\n  rewrite: (content: string) => void;\n}): void {\n  let refIds = options.idsAtWrite;\n  let written = options.lastWritten;\n  for (let attempt = 0; attempt < 3; attempt += 1) {\n    const fresh = options.cache.get(options.stateDir);\n    if (fresh === refIds) return;\n    refIds = fresh;\n    const desired = canonicalizeEntityRefFrontmatter(options.rawContent, fresh);\n    if (desired === written) return;\n    written = desired;\n    options.rewrite(desired);\n  }\n  requestEntityCanonicalIdReconcileSync(options.stateDir);\n  throw new Error(\n    \"entity canonical-id journal kept changing during post-write repair; retry the write\",\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,gBAAgB,WAAW,oBAAoB;AACxD,OAAO,UAAU;AAIjB,IAAM,6CAA6C;AACnD,IAAM,gDAAgD;AAE/C,SAAS,iBAAiB,SAAiB,UAA2B;AAC3E,MAAI,KAAK,QAAQ,QAAQ,MAAM,MAAO,QAAO;AAC7C,QAAM,YAAY,KAAK,QAAQ,KAAK,QAAQ,QAAQ,CAAC;AACrD,QAAM,cAAc,KAAK,QAAQ,SAAS,UAAU;AACpD,MAAI,cAAc,YAAa,QAAO;AACtC,MAAI;AACF,WAAO,aAAa,SAAS,MAAM,KAAK,KAAK,aAAa,OAAO,GAAG,UAAU;AAAA,EAChF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,wBAAwB,SAAiB,UAAwB;AACxE,qBAAmB,SAAS,cAAc;AAC1C,YAAU,UAAU,EAAE,WAAW,KAAK,CAAC;AACvC,iBAAe,KAAK,KAAK,UAAU,8BAA8B,GAAG,GAAG;AACzE;AAEO,SAAS,gCACd,UACA,MACY;AACZ,QAAM,WAAW,KAAK,KAAK,UAAU,mCAAmC;AACxE,SAAO;AAAA,IAAmB;AAAA,IAAU,MAClC;AAAA,MACE;AAAA,MACA;AAAA,QACE,SAAS;AAAA,QACT,WAAW;AAAA,MACb;AAAA,MACA,OAAO,UAAU,SAAS;AACxB,YAAI,CAAC,SAAU,OAAM,IAAI,MAAM,6CAA6C;AAC5E,eAAO,KAAK,MAAM,KAAK,QAAQ,CAAC;AAAA,MAClC;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAsB,0BACpB,SACA,UACA,MACY;AACZ,MAAI,CAAC,iBAAiB,SAAS,QAAQ,GAAG;AACxC,WAAO,KAAK,YAAY,IAAI;AAAA,EAC9B;AACA,QAAM,WAAW,KAAK,KAAK,SAAS,OAAO;AAC3C,SAAO,gCAAgC,UAAU,OAAO,gBAAgB;AACtE,QAAI;AACF,aAAO,MAAM,KAAK,WAAW;AAAA,IAC/B,UAAE;AACA,8BAAwB,SAAS,QAAQ;AAAA,IAC3C;AAAA,EACF,CAAC;AACH;;;AC9DA,IAAM,2BAA2B;AAE1B,SAAS,mBAAmB,UAAwB;AACzD,MAAI,yBAAyB,KAAK,QAAQ,GAAG;AAC3C,UAAM,IAAI,MAAM,6EAA6E;AAAA,EAC/F;AACF;;;ACNA,SAAS,gBAAgB;AAiBzB,OAAOA,WAAU;AACjB,SAAS,SAAS;AAClB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,gBAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;AAQpB,IAAM,qCAAqC;AAOlD,SAAS,qBAAqB,KAA+C;AAC3E,QAAM,SAAkB,KAAK,MAAM,GAAG;AACtC,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,KAAK,EAAE,cAAc,QAAS,QAAO,CAAC;AACvG,QAAM,WAAW,OAAO;AACxB,MAAI,CAAC,YAAY,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,EAAG,QAAO,CAAC;AAGlF,QAAM,UAAkC,uBAAO,OAAO,IAAI;AAC1D,aAAW,CAAC,UAAU,WAAW,KAAK,OAAO,QAAQ,QAAQ,GAAG;AAC9D,QAAI,SAAS,SAAS,KAAK,OAAO,gBAAgB,YAAY,YAAY,SAAS,GAAG;AACpF,yBAAmB,QAAQ;AAC3B,yBAAmB,WAAW;AAC9B,cAAQ,QAAQ,IAAI;AAAA,IACtB;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,qBAAqB,KAAsB;AAElD,QAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,SAAO,WAAW,QAAQ,OAAO,aAAa;AAChD;AAkBA,SAAS,wBAAwB,WAAgC;AAC/D,MAAI;AACJ,MAAI;AACF,SAAK,SAAS,WAAW,UAAU,YAAY,UAAU,cAAc,EAAE;AAAA,EAC3E,SAAS,OAAO;AACd,QAAI,YAAY,OAAO,QAAQ,EAAG,QAAO,EAAE,MAAM,UAAU;AAC3D,QAAI,YAAY,OAAO,OAAO,EAAG,QAAO,EAAE,MAAM,UAAU;AAC1D,WAAO,EAAE,MAAM,QAAQ;AAAA,EACzB;AACA,MAAI;AACF,UAAM,IAAI,UAAU,EAAE;AACtB,QAAI,CAAC,EAAE,OAAO,EAAG,QAAO,EAAE,MAAM,UAAU;AAC1C,UAAM,SAAS,UAAUC,MAAK,QAAQ,SAAS,CAAC;AAChD,QAAI,OAAO,eAAe,KAAK,CAAC,OAAO,YAAY,EAAG,QAAO,EAAE,MAAM,UAAU;AAC/E,UAAM,IAAI,UAAU,SAAS;AAC7B,QAAI,EAAE,eAAe,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAK,QAAO,EAAE,MAAM,UAAU;AACvF,WAAO;AAAA,MACL,MAAM;AAAA,MACN,KAAK,aAAa,IAAI,OAAO;AAAA,MAC7B,KAAK,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,EAAE,OAAO,IAAI,EAAE,OAAO,IAAI,EAAE,IAAI;AAAA,IAC5D;AAAA,EACF,QAAQ;AACN,WAAO,EAAE,MAAM,QAAQ;AAAA,EACzB,UAAE;AACA,cAAU,EAAE;AAAA,EACd;AACF;AAGA,IAAM,oCAAoC,EAAE,OAAO;AAAA,EACjD,SAAS,EAAE,QAAQ,CAAC;AAAA,EACpB,UAAU,EAAE,QAAQ,IAAI;AAAA,EACxB,uBAAuB,EAAE,OAAO;AAClC,CAAC;AAGD,eAAsB,oCACpB,UACA,iBACkB;AAClB,QAAM,SAAS,wBAAwBA,MAAK,KAAK,UAAU,kCAAkC,CAAC;AAC9F,MAAI,OAAO,SAAS,KAAM,QAAO;AACjC,MAAI;AACF,UAAM,SAAS,kCAAkC,UAAU,KAAK,MAAM,OAAO,GAAG,CAAC;AACjF,QAAI,CAAC,OAAO,QAAS,QAAO;AAC5B,WAAO,OAAO,KAAK,0BAA0B,MAAM,gBAAgB;AAAA,EACrE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAuBA,eAAsB,6BACpB,UACA,OACA,YACA,QACA,QACA,OACwB;AACxB,MAAI,SAAS,WAAW;AACxB,MAAI,WAAW,8BAA8B,MAAM,WAAW,MAAM,iBAAiB,MAAM;AAC3F,MAAI,SAAS,MAAM,OAAO,QAAQ;AAClC,QAAM,mBAAmB,OAAO,SAA8C;AAC5E,QAAI,KAAK,cAAc,SAAS,aAAa,KAAK,oBAAoB,SAAS,iBAAiB;AAC9F,aAAO;AAAA,IACT;AACA,eAAW;AACX,UAAM,aAAa;AACnB,aAAS,MAAM,OAAO,IAAI;AAC1B,QAAI,eAAe,MAAM;AACvB,UAAI;AACF,cAAM,OAAO,UAAU;AAAA,MACzB,SAAS,KAAK;AACZ,YAAI,KAAK,yCAAyC,UAAU,QAAQ,KAAK,KAAK,GAAG,EAAE;AAAA,MACrF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACA,WAAS,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG;AAC/C,UAAM,QAAQ,WAAW;AACzB,QAAI,UAAU,OAAQ,QAAO;AAC7B,aAAS;AACT,QAAI,CAAE,MAAM,iBAAiB,8BAA8B,MAAM,WAAW,MAAM,iBAAiB,KAAK,CAAC,GAAI;AAC3G,aAAO;AAAA,IACT;AAAA,EACF;AACA,QAAM,gCAAgC,UAAU,YAAY;AAC1D,UAAM,iBAAiB,8BAA8B,MAAM,WAAW,MAAM,iBAAiB,WAAW,CAAC,CAAC;AAAA,EAC5G,CAAC;AACD,SAAO;AACT;AAiCO,SAAS,0BACd,OACA,UACe;AACf,MAAI;AACJ,SAAO,MAAe;AACpB,QAAI,MAAM;AACV,QAAI;AACF,YAAM,cAAcC,MAAK,KAAK,SAAS,GAAG,kCAAkC;AAC5E,YAAM,IAAI,SAAS,WAAW;AAC9B,YAAM,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,EAAE,OAAO,IAAI,EAAE,OAAO,IAAI,EAAE,IAAI;AAAA,IAC7D,QAAQ;AACN,YAAM;AAAA,IACR;AACA,QAAI,QAAQ,KAAK,QAAQ,IAAK,QAAO,KAAK;AAC1C,UAAM,QAAQ,MAAM,SAAS,SAAS,CAAC;AACvC,WAAO,EAAE,KAAK,UAAU,MAAM,SAAS;AACvC,WAAO,KAAK;AAAA,EACd;AACF;AAEO,IAAM,mCAAN,MAAuC;AAAA,EACpC,WAA6C,CAAC;AAAA,EAC9C,WAAW;AAAA,EACX,MAAqB;AAAA,EACrB,WAA0B;AAAA,EAElC,IAAI,UAAoD;AACtD,WAAO,KAAK,SAAS,QAAQ,EAAE;AAAA,EACjC;AAAA;AAAA,EAIA,SAAS,UAA4C;AACnD,UAAM,oBAAoB,KAAK,aAAa,WAAW,KAAK,WAAW,CAAC;AACxE,UAAM,oBAAoB,KAAK,aAAa,WAAW,KAAK,WAAW;AACvE,UAAM,YAAsC,EAAE,UAAU,mBAAmB,UAAU,kBAAkB;AACvG,UAAM,SAAS,wBAAwBA,MAAK,KAAK,UAAU,kCAAkC,CAAC;AAC9F,QAAI,OAAO,SAAS,WAAW;AAI7B,UAAI,KAAK,oEAAoE;AAC7E,aAAO;AAAA,IACT;AACA,QAAI,OAAO,SAAS,SAAS;AAK3B,aAAO;AAAA,IACT;AACA,UAAM,MAAM,OAAO,SAAS,YAAY,YAAY,OAAO;AAC3D,QAAI,QAAQ,KAAK,OAAO,aAAa,KAAK,UAAU;AAClD,UAAI,QAA0C,CAAC;AAC/C,UAAI,WAAW;AACf,UAAI,OAAO,SAAS,MAAM;AACxB,YAAI;AACF,kBAAQ,qBAAqB,OAAO,GAAG;AACvC,qBAAW,qBAAqB,OAAO,GAAG;AAAA,QAC5C,QAAQ;AAGN,iBAAO;AAAA,QACT;AAAA,MACF;AACA,WAAK,WAAW;AAChB,WAAK,WAAW;AAChB,WAAK,MAAM;AACX,WAAK,WAAW;AAAA,IAClB;AACA,WAAO,EAAE,UAAU,KAAK,UAAU,UAAU,KAAK,SAAS;AAAA,EAC5D;AACF;AAEO,SAAS,mCACd,YACA,UACQ;AACR,MAAI,UAAU;AACd,QAAM,OAAO,oBAAI,IAAY;AAC7B,SAAO,CAAC,KAAK,IAAI,OAAO,GAAG;AACzB,SAAK,IAAI,OAAO;AAGhB,UAAM,OAAO,OAAO,OAAO,UAAU,OAAO,IAAI,SAAS,OAAO,IAAI;AACpE,QAAI,CAAC,QAAQ,SAAS,QAAS;AAC/B,cAAU;AAAA,EACZ;AACA,SAAO;AACT;AAYO,SAAS,4BACd,SACA,UACG;AAIH,MAAI,OAAO,QAAQ,cAAc,SAAU,QAAO;AAClD,SAAO,EAAE,GAAG,SAAS,WAAW,mCAAmC,QAAQ,WAAW,QAAQ,EAAE;AAClG;AAgBO,SAAS,iCACd,SACA,UACQ;AACR,MAAI,OAAO,KAAK,QAAQ,EAAE,WAAW,EAAG,QAAO;AAC/C,QAAM,MAAM,oBAAoB,OAAO;AACvC,MAAI,QAAQ,KAAM,QAAO;AACzB,QAAM,YAAY,mCAAmC,IAAI,OAAO,QAAQ;AACxE,MAAI,cAAc,IAAI,MAAO,QAAO;AACpC,QAAM,OAAO,IAAI,MAAM,IAAI,KAAK;AAChC,QAAM,SAAS,OAAO,KAAK,IAAI,IAAI,CAAC,KAAK;AACzC,MAAI,MAAM,IAAI,KAAK,IAAI,GAAG,MAAM,cAAc,SAAS,GAAG,KAAK,SAAS,IAAI,IAAI,OAAO,EAAE;AACzF,SAAO,IAAI,MAAM,KAAK,IAAI,IAAI,QAAQ,MAAM,IAAI,UAAU;AAC5D;AAGO,SAAS,6BAA6B,SAAgC;AAC3E,SAAO,oBAAoB,OAAO,GAAG,SAAS;AAChD;AAEA,SAAS,oBACP,SAC8E;AAC9E,MAAI,CAAC,YAAY,KAAK,OAAO,EAAG,QAAO;AACvC,QAAM,QAAQ;AACd,QAAM,YAAY,QAAQ,QAAQ,IAAI,IAAI;AAC1C,QAAM,aAAa,MAAM,KAAK,OAAO;AACrC,MAAI,CAAC,WAAY,QAAO;AACxB,QAAM,QAAQ,QAAQ,MAAM,GAAG,WAAW,KAAK,EAAE,MAAM,IAAI;AAC3D,MAAI,QAAQ;AACZ,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,GAAG;AACxC,QAAI,oBAAoB,KAAK,MAAM,CAAC,KAAK,EAAE,EAAG,SAAQ;AAAA,EACxD;AACA,MAAI,UAAU,GAAI,QAAO;AACzB,QAAM,OAAO,MAAM,KAAK;AACxB,QAAM,QAAQ,KAAK,MAAM,KAAK,QAAQ,GAAG,IAAI,CAAC,EAAE,QAAQ,OAAO,EAAE,EAAE,KAAK;AACxE,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,SAAO,EAAE,OAAO,OAAO,OAAO,YAAY,WAAW,MAAM;AAC7D;AAYO,IAAM,uCAAuC;AAE7C,IAAM,iDAAiD,GAAG,oCAAoC;AAE9F,SAAS,sCAAsC,UAAwB;AAC5E,QAAM,aAAaA,MAAK,KAAK,UAAU,oCAAoC;AAC3E,QAAM,YAAY,GAAG,UAAU,IAAI,QAAQ,GAAG,IAAI,WAAW,CAAC;AAC9D,MAAI;AAOF,UAAM,SAAS,UAAU,QAAQ;AACjC,QAAI,OAAO,eAAe,KAAK,CAAC,OAAO,YAAY,GAAG;AACpD,UAAI,KAAK,2DAA2D,QAAQ,0BAA0B;AACtG;AAAA,IACF;AACA,UAAM,iBAAiBC,cAAa,QAAQ;AAC5C,kBAAc,WAAW,IAAG,oBAAI,KAAK,GAAE,YAAY,CAAC;AAAA,GAAM,EAAE,MAAM,IAAM,CAAC;AAMzE,UAAM,UAAU,UAAU,QAAQ;AAClC,QAAI,QAAQ,eAAe,KAAK,CAAC,QAAQ,YAAY,KAAKA,cAAa,QAAQ,MAAM,gBAAgB;AACnG,aAAO,WAAW,EAAE,OAAO,KAAK,CAAC;AACjC,UAAI,KAAK,6DAA6D,QAAQ,uBAAuB;AACrG;AAAA,IACF;AACA,eAAW,WAAW,UAAU;AAAA,EAClC,SAAS,OAAO;AACd,WAAO,WAAW,EAAE,OAAO,KAAK,CAAC;AAIjC,QAAI,KAAK,oDAAoD,KAAK,EAAE;AAAA,EACtE;AACF;AAEA,eAAsB,kCAAkC,UAAiC;AACvF,wCAAsC,QAAQ;AAChD;AAYO,SAAS,4BACd,UACA,cACA,eACM;AACN,MAAI,iBAAiB,cAAe;AACpC,wCAAsC,QAAQ;AAChD;AAuBO,SAAS,2BAA2B,SAAiB,UAA0C;AACpG,MAAI,CAAC,SAAS,SAAS,KAAK,EAAG,QAAO;AACtC,QAAM,MAAMC,MAAK,SAAS,SAAS,QAAQ;AAC3C,MAAI,IAAI,WAAW,IAAI,KAAKA,MAAK,WAAW,GAAG,EAAG,QAAO;AACzD,QAAM,MAAM,IAAI,MAAMA,MAAK,GAAG,EAAE,CAAC,KAAK;AACtC,MAAI,QAAQ,WAAY,QAAO;AAC/B,SAAO,qBAAqB,SAAS,GAAG,KAAK,QAAQ,UAAU,QAAQ,YAAY,WAAW;AAChG;AAGO,SAAS,uBAAuB,SAAiB,UAA2B;AACjF,SAAO,2BAA2B,SAAS,QAAQ,MAAM;AAC3D;AAgBO,SAAS,8BACd,WACA,iBACA,QACmB;AACnB,MAAI,OAAO,cAAc,SAAU,QAAO,EAAE,WAAW,gBAAgB;AACvE,QAAM,YAAY,mCAAmC,WAAW,MAAM;AACtE,MAAI,cAAc,UAAW,QAAO,EAAE,WAAW,gBAAgB;AACjE,MAAI,iBAAiB;AACnB,UAAM,cAAc,GAAG,yBAAyB,SAAS,CAAC;AAC1D,QAAI,gBAAgB,WAAW,WAAW,GAAG;AAC3C,wBAAkB,GAAG,yBAAyB,SAAS,CAAC,KAAK,gBAAgB,MAAM,YAAY,MAAM,CAAC;AAAA,IACxG;AAAA,EACF;AACA,SAAO,EAAE,WAAW,WAAW,gBAAgB;AACjD;AAUA,eAAsB,gCAAgC,SAOpC;AAChB,MAAI,SAAS,QAAQ;AACrB,WAAS,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG;AAC/C,UAAM,QAAQ,QAAQ,WAAW;AACjC,QAAI,UAAU,OAAQ;AACtB,aAAS;AACT,UAAM,UAAU,mCAAmC,QAAQ,QAAQ,KAAK;AACxE,QAAI,YAAY,QAAQ,YAAY,UAAW;AAC/C,YAAQ,YAAY,YAAY;AAChC,UAAM,QAAQ,QAAQ;AAAA,EACxB;AACA,QAAM,gCAAgC,QAAQ,UAAU,YAAY;AAClE,UAAM,UAAU,mCAAmC,QAAQ,QAAQ,QAAQ,WAAW,CAAC;AACvF,QAAI,YAAY,QAAQ,YAAY,WAAW;AAC7C,cAAQ,YAAY,YAAY;AAChC,YAAM,QAAQ,QAAQ;AAAA,IACxB;AAAA,EACF,CAAC;AACD,QAAM,kCAAkC,QAAQ,QAAQ;AAC1D;AAOA,eAAsB,8BAA8B,SAOlC;AAChB,MAAI,SAAS,QAAQ;AACrB,MAAI,UAAU,QAAQ;AACtB,WAAS,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG;AAC/C,UAAM,QAAQ,QAAQ,MAAM,IAAI,QAAQ,QAAQ;AAChD,QAAI,UAAU,OAAQ;AACtB,aAAS;AACT,UAAM,UAAU,iCAAiC,QAAQ,YAAY,KAAK;AAC1E,QAAI,YAAY,QAAS;AACzB,cAAU;AACV,UAAM,QAAQ,QAAQ,OAAO;AAAA,EAC/B;AACA,QAAM,gCAAgC,QAAQ,UAAU,YAAY;AAClE,UAAM,UAAU,iCAAiC,QAAQ,YAAY,QAAQ,MAAM,IAAI,QAAQ,QAAQ,CAAC;AACxG,QAAI,YAAY,SAAS;AACvB,gBAAU;AACV,YAAM,QAAQ,QAAQ,OAAO;AAAA,IAC/B;AAAA,EACF,CAAC;AACD,QAAM,kCAAkC,QAAQ,QAAQ;AAC1D;AAQO,SAAS,kCAAkC,SAOzC;AACP,MAAI,SAAS,QAAQ;AACrB,MAAI,UAAU,QAAQ;AACtB,WAAS,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG;AAC/C,UAAM,QAAQ,QAAQ,MAAM,IAAI,QAAQ,QAAQ;AAChD,QAAI,UAAU,OAAQ;AACtB,aAAS;AACT,UAAM,UAAU,iCAAiC,QAAQ,YAAY,KAAK;AAC1E,QAAI,YAAY,QAAS;AACzB,cAAU;AACV,YAAQ,QAAQ,OAAO;AAAA,EACzB;AACA,wCAAsC,QAAQ,QAAQ;AACtD,QAAM,IAAI;AAAA,IACR;AAAA,EACF;AACF;","names":["path","realpathSync","path","path","realpathSync","path"]}

package/dist/{chunk-RZDDNH63.js → chunk-A6JDT6QF.js}

@@ -1,12 +1,16 @@
+import {
+  withBriefingDeadline
+} from "./chunk-X2KO4FK5.js";
 import {
   withBriefingFollowupTimeout
 } from "./chunk-GZFKCLRC.js";
 import {
+  safeReadEntities,
   safeReadMemories
-} from "./chunk-FRXS6SC7.js";
+} from "./chunk-EKUI7I2X.js";
 import {
   StorageManager
-} from "./chunk-6W3QH3QW.js";
+} from "./chunk-JIJAWTRK.js";
 import {
   normalizeEntityName
 } from "./chunk-YXZG5TVN.js";
@@ -23,6 +27,10 @@ import {
   readEnvVar,
   resolveHomeDir
 } from "./chunk-P2QRMMVQ.js";
+import {
+  isAbortError,
+  throwIfAborted
+} from "./chunk-R2MBW2S4.js";
 import {
   log
 } from "./chunk-3WCASNQZ.js";
@@ -57,7 +65,7 @@ async function enqueuePassiveCorrectionNotification(storageDir, notification) {
     await rename(tmp, filePath);
   });
 }
-async function drainPassiveCorrectionNotifications(storageDir) {
+async function drainPassiveCorrectionNotifications(storageDir, signal) {
   const filePath = notificationsPath(storageDir);
   return serializeMutations(`passive-notification:${filePath}`, async () => {
     let raw;
@@ -68,6 +76,7 @@ async function drainPassiveCorrectionNotifications(storageDir) {
       if (code === "ENOENT") return [];
       throw err;
     }
+    throwIfAborted(signal, "briefing aborted");
     const notifications = [];
     for (const line of raw.split("\n")) {
       const trimmed = line.trim();
@@ -489,20 +498,28 @@ var MAX_ACTIVE_THREADS = 8;
 var MAX_RECENT_ENTITIES = 8;
 var MAX_OPEN_COMMITMENTS = 8;
 async function buildBriefing(options) {
+  return withBriefingDeadline(
+    (signal) => buildBriefingWithSignal(options, signal),
+    options.abortSignal
+  );
+}
+async function buildBriefingWithSignal(options, signal) {
   const now = options.now ?? /* @__PURE__ */ new Date();
   const window = options.window ?? defaultWindow(now);
   const maxFollowups = clampFollowups(options.maxFollowups);
   const focus = options.focus ?? null;
   const [allMemories, allEntities] = await Promise.all([
-    safeReadMemories(options.storage, window).then(excludeSupportPassportPrivateMemories),
-    safeReadEntities(options.storage)
+    safeReadMemories(options.storage, window, { signal }).then(excludeSupportPassportPrivateMemories),
+    safeReadEntities(options.storage, signal)
   ]);
+  throwIfAborted(signal, "briefing aborted");
   const memoriesInWindow = filterMemoriesByWindow(allMemories, window);
   const focusedMemories = focus ? memoriesInWindow.filter((m) => focusMatchesMemory(m, focus, options.storage.entityAliases)) : memoriesInWindow;
   const activeThreads = buildActiveThreads(focusedMemories);
   const recentEntities = buildRecentEntities(allEntities, window, focus);
   const openCommitments = buildOpenCommitments(focusedMemories);
   const calendarLoadResult = options.calendarSource ? await loadTodayCalendar(options.calendarSource, now) : void 0;
+  throwIfAborted(signal, "briefing aborted");
   const calendarSourceErrors = calendarLoadResult?.error ? [calendarLoadResult.error] : [];
   const sectionsBase = {
     activeThreads,
@@ -543,13 +560,15 @@ async function buildBriefing(options) {
       log.warn(`briefing: ${followupsUnavailableReason}`);
     }
   }
+  throwIfAborted(signal, "briefing aborted");
   const sections = {
     ...sectionsBase,
     suggestedFollowups: followups
   };
+  throwIfAborted(signal, "briefing aborted");
   let correctionNotifications;
   try {
-    const drained = await drainPassiveCorrectionNotifications(options.storage.dir);
+    const drained = await drainPassiveCorrectionNotifications(options.storage.dir, signal);
     if (drained.length > 0) {
       correctionNotifications = drained.map((n) => ({
         planId: n.planId,
@@ -559,6 +578,7 @@ async function buildBriefing(options) {
       }));
     }
   } catch (err) {
+    if (isAbortError(err)) throw err;
     log.debug(`briefing: correction notification drain failed (non-fatal): ${err instanceof Error ? err.message : String(err)}`);
   }
   const windowIso = { from: window.from.toISOString(), to: window.to.toISOString() };
@@ -603,14 +623,6 @@ function defaultWindow(now) {
   if (parsed) return parsed;
   return { from: new Date(now.getTime() - DAY_MS), to: now, label: "yesterday" };
 }
-async function safeReadEntities(storage) {
-  try {
-    return await storage.readAllEntityFiles();
-  } catch (err) {
-    log.warn(`briefing: readAllEntityFiles failed: ${err}`);
-    return [];
-  }
-}
 function memoryTimestamp(memory) {
   const raw = memory.frontmatter.updated || memory.frontmatter.created;
   if (!raw) return 0;
@@ -962,4 +974,4 @@ export {
   resolveBriefingSaveDir,
   briefingFilename
 };
-//# sourceMappingURL=chunk-RZDDNH63.js.map
+//# sourceMappingURL=chunk-A6JDT6QF.js.map

package/dist/chunk-A6JDT6QF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/briefing.ts","../src/correction/passive-correction-notifications.ts"],"sourcesContent":["/**\n * Daily Context Briefing (Issue #370)\n *\n * Produces a focused \"here is what matters right now\" briefing by\n * cross-referencing active entities, recent facts, open commitments,\n * LLM-generated follow-ups, and an optional calendar source.\n *\n * The module exposes:\n *   - `parseBriefingWindow(token)` — CLI-friendly window parser.\n *   - `buildBriefing(options)` — core builder that returns markdown + JSON.\n *   - `FileCalendarSource` — stub CalendarSource implementation that reads\n *     a local ICS or JSON file.\n *\n * ALL OpenAI usage in this module goes through the Responses API. Chat\n * Completions is never used.\n */\n\nimport { readFile } from \"node:fs/promises\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport { log } from \"./logger.js\";\nimport { isAbortError, throwIfAborted } from \"./abort-error.js\";\nimport { withBriefingDeadline } from \"./briefing-deadline.js\";\nimport { withBriefingFollowupTimeout } from \"./briefing-followup-timeout.js\";\nimport { extractJsonCandidates } from \"./json-extract.js\";\nimport { drainPassiveCorrectionNotifications } from \"./correction/passive-correction-notifications.js\";\nimport { excludeSupportPassportPrivateMemories } from \"./support-passport/card-projection.js\";\nimport { normalizeEntityName, StorageManager } from \"./storage.js\";\nimport { safeReadEntities, safeReadMemories } from \"./briefing-window.js\";\nimport { readEnvVar, resolveHomeDir } from \"./runtime/env.js\";\nimport type {\n  BriefingActiveThread,\n  BriefingCalendarSourceError,\n  BriefingFocus,\n  BriefingFollowup,\n  BriefingOpenCommitment,\n  BriefingRecentEntity,\n  BriefingResult,\n  BriefingSections,\n  CalendarEvent,\n  CalendarSource,\n  EntityFile,\n  MemoryFile,\n} from \"./types.js\";\n\n// ──────────────────────────────────────────────────────────────────────────\n// Window parsing\n// ──────────────────────────────────────────────────────────────────────────\n\n/** Allowed values for the briefing format flag/field. */\nexport const BRIEFING_FORMAT_ALLOWED = [\"markdown\", \"json\"] as const;\n\n/**\n * Default model used for the Responses API follow-up generation call.\n * Mirrors the extraction engine default in config.ts — keep in sync.\n */\nexport const BRIEFING_FOLLOWUP_DEFAULT_MODEL = \"gpt-5.5\";\nexport type BriefingFormatValue = typeof BRIEFING_FORMAT_ALLOWED[number];\n\n/**\n * Validate a user-supplied `--format` flag value.\n * Returns `null` when the value is valid (or `undefined`, meaning the flag\n * was not supplied and the caller should fall back to the configured default).\n * Returns an error message string when the value is explicitly invalid.\n */\nexport function validateBriefingFormat(value: string | undefined): string | null {\n  if (value === undefined) return null;\n  if ((BRIEFING_FORMAT_ALLOWED as readonly string[]).includes(value)) return null;\n  return `Invalid --format value: \"${value}\". Accepted: ${BRIEFING_FORMAT_ALLOWED.join(\", \")}.`;\n}\n\n/** Parsed briefing lookback window. */\nexport interface ParsedBriefingWindow {\n  /** Start of the window (inclusive). */\n  from: Date;\n  /** End of the window (exclusive). */\n  to: Date;\n  /** Human-readable label. */\n  label: string;\n}\n\nconst DAY_MS = 24 * 60 * 60 * 1000;\n\n/**\n * Maximum allowed lookback offset in milliseconds (100 years).\n * Anything beyond this is almost certainly a typo or abuse — and would\n * overflow to `Invalid Date` for sufficiently large values anyway.\n */\nconst MAX_WINDOW_MS = 100 * 365 * DAY_MS;\n\n/**\n * Parse a CLI-friendly window token into a concrete date range.\n *\n * Accepted forms (case-insensitive):\n *   - `yesterday` — the previous UTC calendar day.\n *   - `today`    — the current UTC calendar day so far.\n *   - `NNh`      — last N hours (e.g. `24h`, `48h`).\n *   - `NNd`      — last N calendar days (e.g. `3d`, `7d`).\n *   - `NNw`      — last N weeks (e.g. `1w`, `2w`).\n *\n * Returns `null` for invalid tokens so callers can surface a clean error.\n */\nexport function parseBriefingWindow(\n  token: string,\n  now: Date = new Date(),\n): ParsedBriefingWindow | null {\n  const raw = typeof token === \"string\" ? token.trim().toLowerCase() : \"\";\n  if (raw.length === 0) return null;\n\n  if (raw === \"yesterday\") {\n    const startOfToday = startOfUtcDay(now);\n    const from = new Date(startOfToday.getTime() - DAY_MS);\n    return { from, to: startOfToday, label: \"yesterday\" };\n  }\n\n  if (raw === \"today\") {\n    return { from: startOfUtcDay(now), to: now, label: \"today\" };\n  }\n\n  const match = raw.match(/^(\\d+)\\s*(h|d|w)$/);\n  if (!match) return null;\n  const value = parseInt(match[1], 10);\n  if (!Number.isFinite(value) || value <= 0) return null;\n  const unit = match[2];\n  let ms = 0;\n  if (unit === \"h\") ms = value * 60 * 60 * 1000;\n  else if (unit === \"d\") ms = value * DAY_MS;\n  else if (unit === \"w\") ms = value * 7 * DAY_MS;\n  if (ms === 0) return null;\n  // Reject values that exceed the 100-year cap or would overflow to Invalid Date.\n  if (ms > MAX_WINDOW_MS || !Number.isFinite(ms)) return null;\n  const from = new Date(now.getTime() - ms);\n  if (!Number.isFinite(from.getTime())) return null;\n  return {\n    from,\n    to: now,\n    label: `last ${value}${unit}`,\n  };\n}\n\nfunction startOfUtcDay(date: Date): Date {\n  const d = new Date(date.getTime());\n  d.setUTCHours(0, 0, 0, 0);\n  return d;\n}\n\n// ──────────────────────────────────────────────────────────────────────────\n// Focus filter\n// ──────────────────────────────────────────────────────────────────────────\n\n/**\n * Parse a CLI `--focus` string into a structured focus filter.\n *\n * Accepted forms:\n *   - `person:Jane Doe`\n *   - `project:remnic-core`\n *   - `topic:retrieval`\n *\n * If no prefix is supplied, falls back to `topic:<value>`.\n */\nexport function parseBriefingFocus(token: string | undefined): BriefingFocus | null {\n  if (typeof token !== \"string\") return null;\n  const trimmed = token.trim();\n  if (trimmed.length === 0) return null;\n  const [maybeType, ...rest] = trimmed.split(\":\");\n  if (rest.length === 0) {\n    return { type: \"topic\", value: maybeType };\n  }\n  const rawType = maybeType.toLowerCase();\n  if (rawType === \"person\" || rawType === \"project\" || rawType === \"topic\") {\n    const value = rest.join(\":\").trim();\n    if (value.length === 0) return null;\n    return { type: rawType, value };\n  }\n  return { type: \"topic\", value: trimmed };\n}\n\n/**\n * Decide whether a memory/entity matches the given focus filter.\n * Purely deterministic — no LLM, case-insensitive substring match across\n * the most useful surfaces.\n *\n * For typed focus (`person:`, `project:`, `entity:`) we attribute via the\n * canonical-id path below to avoid the substring leak fixed in #682 PR 2/3\n * R-10 (`Alice-Test` substring-hitting `person-alice-test-a1`).\n *\n * For untyped (`topic`) focus there is no type to canonicalize against, so\n * we keep `entityRef` in the raw haystack — otherwise memories that link to\n * an entity only via `frontmatter.entityRef` (no body / tag mention) would\n * silently drop out of an untyped focus filter (codex P2 review on #695).\n */\nexport function focusMatchesMemory(\n  memory: MemoryFile,\n  focus: BriefingFocus,\n  entityAliases?: Readonly<Record<string, string>>,\n): boolean {\n  const needle = focus.value.toLowerCase();\n  const entityRef = (memory.frontmatter.entityRef ?? \"\").toLowerCase();\n\n  // Raw substring match across content and tags.  For untyped (`topic`)\n  // focus, also include the entityRef so memories linked only via the\n  // frontmatter ref still match.  For typed focus we deliberately\n  // exclude entityRef here and route through the canonical-id path\n  // below (see comment above).\n  const rawHaystackParts = [\n    memory.content,\n    ...(memory.frontmatter.tags ?? []),\n  ];\n  if (focus.type === \"topic\" && entityRef) {\n    rawHaystackParts.push(entityRef);\n  }\n  const rawHaystack = rawHaystackParts.join(\" \").toLowerCase();\n  if (rawHaystack.includes(needle)) return true;\n\n  // Canonical-id match (#682 PR 2/3 R-10). Normalize BOTH sides through\n  // `normalizeEntityName` so:\n  //   - `entityRef === slug` exact comparison no longer fails when the\n  //     stored ref is in a non-canonical form (e.g. `person:Alice-Test`\n  //     vs. `person-alice-test`) — both normalize to the same canonical id.\n  //   - `entityRef.includes(slug)` substring matching is replaced by\n  //     equality, so similarly-prefixed entities like\n  //     `person-alice-test-a1` no longer match a focus on\n  //     `person:Alice-Test`.\n  // This also handles the type-prefix-in-name case the cursor reviewer\n  // flagged: `normalizeEntityName` strips a duplicate type prefix so\n  // `Project-Alpha` of type `project` canonicalizes to `project-alpha`,\n  // and a focus on `project:Project-Alpha` does the same.\n  if (!entityRef) return false;\n  const focusCanonical = normalizeEntityName(focus.value, focus.type, entityAliases);\n  // Strip a leading `<type><delimiter>` prefix from a non-canonical\n  // entityRef before normalizing — `normalizeEntityName` only strips\n  // `<type>-` so other valid verbatim formats (`person:Alice-Test`,\n  // `person/alice-test`, `person_alice_test`, `person Alice Test`)\n  // would otherwise double up the type prefix and miss the canonical\n  // comparison.  Codex P2 review on #695: memory writes persist\n  // entityRef strings as provided, so any non-alphanumeric delimiter\n  // after the type token must be tolerated here.\n  let refForNormalize = entityRef;\n  const typeDelimMatch = refForNormalize.match(\n    new RegExp(`^${focus.type}[^a-z0-9]+`, \"i\"),\n  );\n  if (typeDelimMatch) {\n    refForNormalize = refForNormalize.slice(typeDelimMatch[0].length);\n  }\n  const refCanonical = normalizeEntityName(refForNormalize, focus.type, entityAliases);\n  return refCanonical === focusCanonical;\n}\n\nexport function focusMatchesEntity(entity: EntityFile, focus: BriefingFocus): boolean {\n  const needle = focus.value.toLowerCase();\n  if (focus.type === \"person\" && entity.type.toLowerCase() !== \"person\") return false;\n  if (focus.type === \"project\" && entity.type.toLowerCase() !== \"project\") return false;\n  const haystack = [\n    entity.name,\n    entity.synthesis || entity.summary || \"\",\n    ...entity.facts,\n    ...(entity.aliases ?? []),\n    ...(entity.structuredSections ?? []).flatMap((section) => [section.title, ...section.facts]),\n  ]\n    .join(\" \")\n    .toLowerCase();\n  return haystack.includes(needle);\n}\n\n// ──────────────────────────────────────────────────────────────────────────\n// Calendar source\n// ──────────────────────────────────────────────────────────────────────────\n\n/**\n * Stub `CalendarSource` backed by a single local file. Supports:\n *   - JSON files containing an array of `CalendarEvent` records, OR a wrapper\n *     `{ events: CalendarEvent[] }` object.\n *   - Minimal ICS (`.ics`) files — extracts `VEVENT` blocks with `SUMMARY`,\n *     `DTSTART`, `DTEND`, `LOCATION`, `DESCRIPTION`, `UID`.\n *\n * Real calendar integrations (Google, iCloud, Microsoft) can plug into the\n * same `CalendarSource` interface later.\n */\nexport class FileCalendarSource implements CalendarSource {\n  constructor(private readonly filePath: string) {}\n\n  async eventsForDate(dateIso: string): Promise<CalendarEvent[]> {\n    let raw: string;\n    try {\n      raw = await readFile(this.filePath, \"utf-8\");\n    } catch (err) {\n      log.warn(`briefing: calendar source unreadable at ${this.filePath}: ${err}`);\n      return [];\n    }\n\n    const events = this.filePath.toLowerCase().endsWith(\".ics\")\n      ? parseIcsEvents(raw)\n      : parseJsonEvents(raw);\n\n    return events.filter((event) => eventFallsOnDate(event, dateIso));\n  }\n}\n\nfunction parseJsonEvents(raw: string): CalendarEvent[] {\n  try {\n    const parsed = JSON.parse(raw) as unknown;\n    const arr = Array.isArray(parsed)\n      ? parsed\n      : parsed && typeof parsed === \"object\" && Array.isArray((parsed as { events?: unknown }).events)\n        ? ((parsed as { events: unknown[] }).events)\n        : [];\n    const events: CalendarEvent[] = [];\n    for (const entry of arr) {\n      if (!entry || typeof entry !== \"object\") continue;\n      const e = entry as Record<string, unknown>;\n      const id = typeof e.id === \"string\" ? e.id : typeof e.uid === \"string\" ? e.uid : cryptoRandomId();\n      const title = typeof e.title === \"string\" ? e.title : typeof e.summary === \"string\" ? e.summary : \"\";\n      const start = typeof e.start === \"string\" ? e.start : typeof e.dtstart === \"string\" ? e.dtstart : \"\";\n      if (!title || !start) continue;\n      events.push({\n        id,\n        title,\n        start,\n        end: typeof e.end === \"string\" ? e.end : typeof e.dtend === \"string\" ? e.dtend : undefined,\n        location: typeof e.location === \"string\" ? e.location : undefined,\n        notes: typeof e.notes === \"string\" ? e.notes : typeof e.description === \"string\" ? e.description : undefined,\n      });\n    }\n    return events;\n  } catch (err) {\n    log.warn(`briefing: calendar JSON parse failed: ${err}`);\n    return [];\n  }\n}\n\ninterface IcsParsedLine {\n  property: string;\n  params: Record<string, string>;\n  value: string;\n}\n\n/**\n * Parse a single ICS content line into its property, parameters, and value.\n * Returns null if the line is not a well-formed property line.\n *\n * Example:\n *   `DTSTART;TZID=America/New_York:20260411T233000`\n *   → { property: \"DTSTART\", params: { TZID: \"America/New_York\" }, value: \"20260411T233000\" }\n */\nfunction parseIcsLine(line: string): IcsParsedLine | null {\n  // Find the first `:` outside of any parameter value. Per RFC 5545 parameter\n  // values may be quoted, but the minimal-parser use case here only needs to\n  // handle unquoted TZID values.\n  const colonIdx = line.indexOf(\":\");\n  if (colonIdx <= 0) return null;\n  const head = line.slice(0, colonIdx);\n  const value = line.slice(colonIdx + 1).trim();\n  // Head is of the form `PROPERTY[;PARAM=val[;PARAM=val]]`.\n  const headParts = head.split(\";\");\n  const property = headParts[0]!.toUpperCase();\n  if (!/^[A-Z0-9-]+$/.test(property)) return null;\n  const params: Record<string, string> = {};\n  for (let i = 1; i < headParts.length; i++) {\n    const segment = headParts[i]!;\n    const eqIdx = segment.indexOf(\"=\");\n    if (eqIdx <= 0) continue;\n    const name = segment.slice(0, eqIdx).toUpperCase();\n    let val = segment.slice(eqIdx + 1);\n    // Strip surrounding quotes if present (RFC 5545 §3.1).\n    if (val.startsWith('\"') && val.endsWith('\"') && val.length >= 2) {\n      val = val.slice(1, -1);\n    }\n    params[name] = val;\n  }\n  return { property, params, value };\n}\n\ninterface IcsDateField {\n  raw: string;\n  params: Record<string, string>;\n}\n\n/** @internal — exported for testing only. */\nexport function parseIcsEvents(raw: string): CalendarEvent[] {\n  const events: CalendarEvent[] = [];\n  // RFC 5545 §3.1 line unfolding: a CRLF (now \\n) followed by a single\n  // whitespace character (space or tab) is a fold — remove both characters\n  // to join the continuation onto the preceding logical line.  This MUST\n  // happen after normalising CRLF → \\n and BEFORE splitting on \\n.\n  const normalized = raw.replace(/\\r\\n/g, \"\\n\").replace(/\\n[ \\t]/g, \"\");\n  const blocks = normalized.split(/BEGIN:VEVENT/i).slice(1);\n  for (const block of blocks) {\n    const endIdx = block.search(/END:VEVENT/i);\n    const body = endIdx === -1 ? block : block.slice(0, endIdx);\n    const simpleFields: Record<string, string> = {};\n    const dateFields: Record<string, IcsDateField> = {};\n    for (const line of body.split(\"\\n\")) {\n      const parsed = parseIcsLine(line);\n      if (!parsed) continue;\n      const { property, params, value } = parsed;\n      if (property === \"DTSTART\" || property === \"DTEND\") {\n        if (dateFields[property] === undefined) {\n          dateFields[property] = { raw: value, params };\n        }\n      } else if (simpleFields[property] === undefined) {\n        simpleFields[property] = value;\n      }\n    }\n    const title = simpleFields.SUMMARY;\n    const dtstart = dateFields.DTSTART;\n    if (!title || !dtstart) continue;\n    const dtend = dateFields.DTEND;\n    events.push({\n      id: simpleFields.UID ?? cryptoRandomId(),\n      title,\n      start: normalizeIcsDate(dtstart.raw, dtstart.params),\n      end: dtend ? normalizeIcsDate(dtend.raw, dtend.params) : undefined,\n      location: simpleFields.LOCATION,\n      notes: simpleFields.DESCRIPTION,\n    });\n  }\n  return events;\n}\n\n/**\n * Normalise an ICS date/datetime value (optionally with a `TZID` parameter)\n * into an ISO 8601 string that downstream code can compare unambiguously.\n *\n * Behaviour:\n *   - `20260411T150000Z` → `2026-04-11T15:00:00Z`\n *   - `20260411` → `2026-04-11T00:00:00Z` (date-only events are day-boundaries)\n *   - `20260411T150000` (floating, no Z, no TZID) → `2026-04-11T15:00:00` (floating)\n *   - `20260411T233000` with `TZID=America/New_York` → `2026-04-12T03:30:00Z`\n *     (applies the zone offset at that wallclock time; DST-aware via Intl)\n *   - Unknown TZID falls back to UTC with a logged warning (conservative:\n *     the event still appears, but on the UTC date).\n */\nfunction normalizeIcsDate(value: string, params: Record<string, string> = {}): string {\n  // Date-time with explicit Z suffix (UTC).\n  if (/^\\d{8}T\\d{6}Z$/.test(value)) {\n    const y = value.slice(0, 4);\n    const m = value.slice(4, 6);\n    const d = value.slice(6, 8);\n    const hh = value.slice(9, 11);\n    const mm = value.slice(11, 13);\n    const ss = value.slice(13, 15);\n    return `${y}-${m}-${d}T${hh}:${mm}:${ss}Z`;\n  }\n  // Date-time without Z: may be floating or zoned via TZID.\n  if (/^\\d{8}T\\d{6}$/.test(value)) {\n    const y = value.slice(0, 4);\n    const m = value.slice(4, 6);\n    const d = value.slice(6, 8);\n    const hh = value.slice(9, 11);\n    const mm = value.slice(11, 13);\n    const ss = value.slice(13, 15);\n    const local = `${y}-${m}-${d}T${hh}:${mm}:${ss}`;\n    const tzid = params.TZID;\n    if (tzid) {\n      const utcIso = icsWallclockToUtc(local, tzid);\n      if (utcIso) return utcIso;\n      log.warn(\n        `briefing: unsupported TZID \"${tzid}\" — treating as UTC for ${local}`,\n      );\n      return `${local}Z`;\n    }\n    // No TZID → floating. Downstream compares the date slice directly.\n    return local;\n  }\n  // Date-only (all-day event). Date-only values carry no TZID per RFC 5545.\n  if (/^\\d{8}$/.test(value)) {\n    return `${value.slice(0, 4)}-${value.slice(4, 6)}-${value.slice(6, 8)}T00:00:00Z`;\n  }\n  return value;\n}\n\n/**\n * Convert a wallclock local datetime in a named IANA timezone to a UTC ISO\n * string. Returns null if the timezone is unsupported by the runtime.\n *\n * Implementation note: this is the standard \"invert the formatter\" technique.\n * We treat the local wallclock as though it were UTC, ask the runtime what\n * time that instant shows in the target zone, and the delta is the zone's\n * offset at that wallclock moment (DST-aware).\n */\nfunction icsWallclockToUtc(local: string, tzid: string): string | null {\n  const match = local.match(/^(\\d{4})-(\\d{2})-(\\d{2})T(\\d{2}):(\\d{2}):(\\d{2})$/);\n  if (!match) return null;\n  const [, y, mo, d, hh, mm, ss] = match;\n  // Treat the wallclock as UTC for the first probe.\n  const naiveUtcMs = Date.UTC(\n    Number(y),\n    Number(mo) - 1,\n    Number(d),\n    Number(hh),\n    Number(mm),\n    Number(ss),\n  );\n  if (!Number.isFinite(naiveUtcMs)) return null;\n\n  let formatter: Intl.DateTimeFormat;\n  try {\n    formatter = new Intl.DateTimeFormat(\"en-US\", {\n      timeZone: tzid,\n      year: \"numeric\",\n      month: \"2-digit\",\n      day: \"2-digit\",\n      hour: \"2-digit\",\n      minute: \"2-digit\",\n      second: \"2-digit\",\n      hour12: false,\n    });\n  } catch {\n    return null;\n  }\n\n  const zonedMs = zonedFormatToMs(formatter, new Date(naiveUtcMs));\n  if (zonedMs === null) return null;\n  // Offset = naiveUtc − zonedAtNaiveUtc (positive for zones east of UTC).\n  const offsetMs = naiveUtcMs - zonedMs;\n  // Apply the offset once to land on the real UTC instant.\n  const realUtcMs = naiveUtcMs + offsetMs;\n  // Second pass: offsets can differ when the wallclock crosses a DST boundary.\n  const zonedMs2 = zonedFormatToMs(formatter, new Date(realUtcMs));\n  if (zonedMs2 !== null) {\n    const offsetMs2 = realUtcMs - zonedMs2;\n    if (offsetMs2 !== offsetMs) {\n      return new Date(naiveUtcMs + offsetMs2).toISOString();\n    }\n  }\n  return new Date(realUtcMs).toISOString();\n}\n\n/**\n * Format a Date in the given timezone and return the absolute ms timestamp\n * of that wallclock time interpreted as if it were UTC. Used only by\n * `icsWallclockToUtc` to compute zone offsets.\n */\nfunction zonedFormatToMs(formatter: Intl.DateTimeFormat, date: Date): number | null {\n  const parts = formatter.formatToParts(date);\n  const get = (type: string): string | undefined =>\n    parts.find((p) => p.type === type)?.value;\n  const y = get(\"year\");\n  const mo = get(\"month\");\n  const d = get(\"day\");\n  const hh = get(\"hour\");\n  const mm = get(\"minute\");\n  const ss = get(\"second\");\n  if (!y || !mo || !d || !hh || !mm || !ss) return null;\n  // RFC 5545 / Intl edge-case: some runtimes return `hour: \"24\"` for midnight\n  // while keeping the same calendar day (instead of returning hour=0 with the\n  // next day).  Passing 24 straight to Date.UTC would roll the date forward by\n  // one day, producing a 24-hour-skewed offset in icsWallclockToUtc and\n  // shifting TZID midnight events to the wrong briefing day.  Normalise to 0\n  // and leave the date component unchanged.\n  const normalizedHour = Number(hh) === 24 ? 0 : Number(hh);\n  const ms = Date.UTC(Number(y), Number(mo) - 1, Number(d), normalizedHour, Number(mm), Number(ss));\n  return Number.isFinite(ms) ? ms : null;\n}\n\n/**\n * Returns true when `isoStr` has an explicit UTC or numeric offset suffix\n * (Z, ±HH:MM, or ±HHMM).  Floating datetimes produced by `normalizeIcsDate`\n * have no such suffix.\n */\nfunction isoHasTimezone(isoStr: string): boolean {\n  return /(Z|[+-]\\d{2}:?\\d{2})$/.test(isoStr);\n}\n\n/**\n * Parse an ISO datetime string (UTC-aware or floating) to milliseconds since\n * epoch, or `null` if the string is not a valid datetime.\n *\n * - UTC / offset-aware strings are passed directly to `new Date()`.\n * - Floating strings (no timezone suffix) are interpreted as UTC so that\n *   interval arithmetic uses the same epoch base as UTC-aware strings.\n *   The caller is responsible for using the correct date-boundary constants.\n */\nfunction isoToMs(isoStr: string): number | null {\n  if (!isoStr) return null;\n  let src = isoStr;\n  if (!isoHasTimezone(src)) {\n    // Treat floating time as UTC for interval math (append Z).\n    src = src + \"Z\";\n  }\n  const ms = new Date(src).getTime();\n  return Number.isFinite(ms) ? ms : null;\n}\n\n/** @internal — exported for testing only. */\nexport function eventFallsOnDate(event: CalendarEvent, dateIso: string): boolean {\n  const target = dateIso.slice(0, 10);\n  const start = event.start;\n\n  // Floating ICS datetime (no Z, no offset): `normalizeIcsDate` produces\n  // \"YYYY-MM-DDTHH:MM:SS\" with no timezone. Passing this to `new Date()`\n  // causes ECMAScript to parse it as local time, which then round-trips\n  // through UTC via `toISOString()` and can shift the calendar date.\n  // For floating times we compare date portions directly (no epoch arithmetic).\n  const startIsFloating = !isoHasTimezone(start);\n\n  if (startIsFloating) {\n    // Validate the start timestamp with the same rigour applied to end:\n    //   1. Shape check — must match the ISO-8601 date or datetime pattern.\n    //   2. Real-date check — round-trip through UTC to reject impossible dates\n    //      like \"2026-02-30\" that JavaScript silently auto-corrects.\n    //   3. Time-component check — reject out-of-range hours/minutes/seconds\n    //      (e.g. \"2026-04-11T25:99:00\") that JavaScript rolls over to a\n    //      different day, which would cause the event to be matched against\n    //      unrelated calendar dates.\n    // If start fails any check we skip the event entirely — there is no usable\n    // start date to fall back on.\n    const startShapeOk =\n      typeof start === \"string\" &&\n      /^\\d{4}-\\d{2}-\\d{2}(T\\d{2}:\\d{2}(:\\d{2}(\\.\\d+)?)?)?$/.test(start);\n    if (!startShapeOk) {\n      log.debug(`briefing: skipping calendar event with invalid start value: ${JSON.stringify(start)}`);\n      return false;\n    }\n    const startDateStr = start.slice(0, 10);\n    const startDateProbe = new Date(startDateStr + \"T00:00:00Z\");\n    if (\n      Number.isNaN(startDateProbe.getTime()) ||\n      startDateProbe.toISOString().slice(0, 10) !== startDateStr\n    ) {\n      log.warn(\n        `briefing: skipping calendar event \"${event.title}\" with impossible start date ${JSON.stringify(startDateStr)}`,\n      );\n      return false;\n    }\n    const startRawTime = start.indexOf(\"T\") !== -1 ? start.slice(start.indexOf(\"T\") + 1) : \"\";\n    if (startRawTime !== \"\") {\n      const startTimeParts = startRawTime.split(\":\").map(Number);\n      const shh = startTimeParts[0] ?? 0;\n      const smm = startTimeParts[1] ?? 0;\n      const sss = Math.floor(startTimeParts[2] ?? 0);\n      if (shh > 23 || smm > 59 || sss > 59) {\n        log.warn(\n          `briefing: skipping calendar event \"${event.title}\" with out-of-range start time ${JSON.stringify(startRawTime)}`,\n        );\n        return false;\n      }\n    }\n\n    const startDate = startDateStr;\n    const end = event.end;\n\n    // Point event (no end) — simple date prefix comparison.\n    if (!end) return startDate === target;\n\n    // Validate that end is a recognisable ISO-8601 date/datetime string before\n    // slicing it for lexicographic comparison.  A malformed end (e.g. a JSON\n    // feed emitting \"end\": \"invalid\") would otherwise produce a non-date prefix\n    // from `end.slice(0, 10)` and cause the event to appear on unrelated days.\n    // Fallback: treat the event as a single-day event starting on startDate.\n    const endIsValid =\n      typeof end === \"string\" &&\n      /^\\d{4}-\\d{2}-\\d{2}(T\\d{2}:\\d{2}(:\\d{2}(\\.\\d+)?)?)?$/.test(end);\n    if (!endIsValid) {\n      log.warn(\n        `briefing: event \"${event.title}\" has malformed end timestamp ${JSON.stringify(end)}; treating as single-day event at ${startDate}`,\n      );\n      // Render the event but only on its start date.\n      return startDate === target;\n    }\n\n    // UhLh: Reject impossible calendar dates that pass the regex (e.g. \"2026-99-99\").\n    // The regex only validates the *shape* of the string — it accepts month 99 and\n    // day 99.  We must additionally verify the date is real by constructing a UTC\n    // Date and checking that the ISO round-trip matches the input prefix.  If the\n    // date is impossible, Date will auto-correct it (e.g. \"2026-01-99\" becomes some\n    // later date), so the round-trip will differ.  Fall back to single-day semantics.\n    const endDate = end.slice(0, 10);\n    const endDateProbe = new Date(endDate + \"T00:00:00Z\");\n    if (\n      Number.isNaN(endDateProbe.getTime()) ||\n      endDateProbe.toISOString().slice(0, 10) !== endDate\n    ) {\n      log.warn(\n        `briefing: event \"${event.title}\" has impossible end date ${JSON.stringify(endDate)}; treating as single-day event at ${startDate}`,\n      );\n      return startDate === target;\n    }\n\n    // Validate the time components of the end timestamp when present.\n    // The regex above only checks the shape (e.g. two digits for hour) but does\n    // not enforce numeric ranges.  A value like \"2026-04-11T25:99:99\" passes the\n    // regex and the date-round-trip check above yet carries an impossible time.\n    // JavaScript's Date constructor silently rolls such values over to a later\n    // date, which would make the event bleed into unrelated days.  Extract the\n    // individual time fields and reject anything outside the valid range.\n    const rawTime = end.indexOf(\"T\") !== -1 ? end.slice(end.indexOf(\"T\") + 1) : \"\";\n    if (rawTime !== \"\") {\n      const timeParts = rawTime.split(\":\").map(Number);\n      const hh = timeParts[0] ?? 0;\n      const mm = timeParts[1] ?? 0;\n      // Seconds may carry a fractional component; floor to get the integer part.\n      const ss = Math.floor(timeParts[2] ?? 0);\n      const timeIsValid = hh <= 23 && mm <= 59 && ss <= 59;\n      if (!timeIsValid) {\n        log.warn(\n          `briefing: event \"${event.title}\" has out-of-range end time ${JSON.stringify(rawTime)}; treating as single-day event at ${startDate}`,\n        );\n        return startDate === target;\n      }\n    }\n\n    // Span event: include if [start, end) overlaps the target calendar day.\n    //\n    // We can't use pure YYYY-MM-DD lexicographic comparison because a\n    // same-day event (`start=2026-04-11T14:30`, `end=2026-04-11T15:00`)\n    // has `startDate === endDate === \"2026-04-11\"`, and a `target < endDate`\n    // check would wrongly exclude it. A cross-day event ending at\n    // `2026-04-12T00:00:00` (exact midnight) also needs the end day to be\n    // treated as exclusive per half-open `[start, end)` semantics.\n    //\n    // Decide whether the end day is still active on the end date by looking\n    // at the time portion: if the end time is strictly after midnight, the\n    // event is still running at the start of the end day and should include\n    // it; if the end time is exactly midnight, the event ends precisely at\n    // the boundary and the end day is excluded. Within-day spans always\n    // have a non-zero end time and so correctly include their own date.\n    //\n    // UhLg: A date-only end value (no \"T\" separator) produces an empty\n    // endTime string.  The regex above does not match empty string, so\n    // endAtExactMidnight would be false and the event would incorrectly\n    // appear on the end date.  Date-only end values carry [start, end)\n    // semantics (the end date is exclusive), so we treat them as midnight.\n    const endTime = end.slice(11); // \"HH:MM\", \"HH:MM:SS\", \"HH:MM:SS.mmm\", or \"\" (date-only)\n    // Treat any end time that is exactly midnight — or absent (date-only) — as\n    // day-exclusive per [start, end) semantics.\n    // Cases covered:\n    //   \"\"                    — date-only end (UhLg fix: exclusive like midnight)\n    //   \"00:00\"               — HH:MM form (valid floating-time ISO value, no seconds)\n    //   \"00:00:00\"            — HH:MM:SS form\n    //   \"00:00:00.000...\"     — with fractional seconds (any number of trailing zeros)\n    // A bare `>` string comparison incorrectly treats \"00:00:00.000\" as > \"00:00:00\"\n    // because the fractional suffix makes the string lexicographically longer.\n    const endIsDateOnly = endTime === \"\";\n    const endAtExactMidnight = endIsDateOnly || /^00(:00){1,2}(\\.0+)?$/.test(endTime);\n    const endActiveOnEndDay = !endAtExactMidnight;\n    if (endActiveOnEndDay) {\n      return startDate <= target && target <= endDate;\n    }\n    return startDate <= target && target < endDate;\n  }\n\n  // UTC or offset-aware ISO string: parse and normalise to UTC milliseconds,\n  // then check whether the event's [start, end) interval overlaps the target\n  // UTC day [dayStart, dayEnd).\n  const startMs = isoToMs(start);\n  if (startMs === null) {\n    log.debug(`briefing: skipping calendar event with invalid start value: ${JSON.stringify(start)}`);\n    return false;\n  }\n\n  // Boundaries of the target UTC day (half-open: [dayStart, dayEnd)).\n  const dayStart = Date.UTC(\n    Number(target.slice(0, 4)),\n    Number(target.slice(5, 7)) - 1,\n    Number(target.slice(8, 10)),\n  );\n  const dayEnd = dayStart + 86_400_000; // +24 h\n\n  const end = event.end;\n  if (!end) {\n    // Point event: included iff start falls within [dayStart, dayEnd).\n    return startMs >= dayStart && startMs < dayEnd;\n  }\n\n  const endMs = isoToMs(end);\n  if (endMs === null) {\n    // Unparseable end — fall back to point-event semantics.\n    return startMs >= dayStart && startMs < dayEnd;\n  }\n\n  // Interval event: overlaps day iff start < dayEnd AND end > dayStart.\n  // Using strict > for end so that an event ending exactly at midnight\n  // (dayEnd of previous day) is NOT counted on the next day.\n  return startMs < dayEnd && endMs > dayStart;\n}\n\nfunction cryptoRandomId(): string {\n  // Keep dependency-free: Math.random is fine for synthetic fixture IDs.\n  return `evt-${Math.random().toString(36).slice(2, 10)}`;\n}\n\n// ──────────────────────────────────────────────────────────────────────────\n// buildBriefing\n// ──────────────────────────────────────────────────────────────────────────\n\n/** Dependency-injection hook for LLM follow-up generation (used in tests). */\nexport type BriefingFollowupGenerator = (\n  prompt: {\n    sections: BriefingSections;\n    windowLabel: string;\n    maxFollowups: number;\n  },\n) => Promise<BriefingFollowup[]>;\n\n/** Options accepted by `buildBriefing`. */\nexport interface BuildBriefingOptions {\n  /** Workspace-scoped storage. Tests pass a temp dir. */\n  storage: StorageManager;\n  /** Parsed window. If omitted, a default 1-day window is used. */\n  window?: ParsedBriefingWindow;\n  /** Optional focus filter. */\n  focus?: BriefingFocus | null;\n  /** Optional namespace hint for logging. */\n  namespace?: string;\n  /** Calendar source. Section omitted entirely when undefined. */\n  calendarSource?: CalendarSource;\n  /** Maximum LLM follow-ups (0 to disable the section). */\n  maxFollowups?: number;\n  /** Whether the module is allowed to invoke the Responses API. */\n  allowLlm?: boolean;\n  /** OpenAI API key. If absent the follow-up section is gracefully omitted. */\n  openaiApiKey?: string;\n  /** OpenAI-compatible base URL (for Azure or proxied endpoints). */\n  openaiBaseUrl?: string;\n  /** Model id for the Responses call. */\n  model?: string;\n  /** Injected follow-up generator. Overrides real LLM call (tests). */\n  followupGenerator?: BriefingFollowupGenerator;\n  /** Injected \"now\" — makes tests deterministic. */\n  now?: Date;\n  /** Caller cancellation must not consume correction notifications. */\n  abortSignal?: AbortSignal;\n}\n\nconst MAX_ACTIVE_THREADS = 8;\nconst MAX_RECENT_ENTITIES = 8;\nconst MAX_OPEN_COMMITMENTS = 8;\n\n/**\n * Build the daily context briefing.\n *\n * Never throws on LLM failures — the suggested follow-ups section is simply\n * omitted and `followupsUnavailableReason` is set.\n */\nexport async function buildBriefing(options: BuildBriefingOptions): Promise<BriefingResult> {\n  return withBriefingDeadline(\n    (signal) => buildBriefingWithSignal(options, signal),\n    options.abortSignal,\n  );\n}\n\nasync function buildBriefingWithSignal(options: BuildBriefingOptions, signal: AbortSignal): Promise<BriefingResult> {\n  const now = options.now ?? new Date();\n  const window = options.window ?? defaultWindow(now);\n  const maxFollowups = clampFollowups(options.maxFollowups);\n  const focus = options.focus ?? null;\n\n  const [allMemories, allEntities] = await Promise.all([\n    safeReadMemories(options.storage, window, { signal }).then(excludeSupportPassportPrivateMemories),\n    safeReadEntities(options.storage, signal),\n  ]);\n  throwIfAborted(signal, \"briefing aborted\");\n\n  const memoriesInWindow = filterMemoriesByWindow(allMemories, window);\n  const focusedMemories = focus\n    ? memoriesInWindow.filter((m) => focusMatchesMemory(m, focus, options.storage.entityAliases))\n    : memoriesInWindow;\n\n  const activeThreads = buildActiveThreads(focusedMemories);\n  const recentEntities = buildRecentEntities(allEntities, window, focus);\n  const openCommitments = buildOpenCommitments(focusedMemories);\n\n  const calendarLoadResult = options.calendarSource\n    ? await loadTodayCalendar(options.calendarSource, now)\n    : undefined;\n  throwIfAborted(signal, \"briefing aborted\");\n\n  const calendarSourceErrors: BriefingCalendarSourceError[] =\n    calendarLoadResult?.error ? [calendarLoadResult.error] : [];\n\n  const sectionsBase: BriefingSections = {\n    activeThreads,\n    recentEntities,\n    openCommitments,\n    suggestedFollowups: [],\n    todayCalendar: calendarLoadResult?.events,\n  };\n\n  let followups: BriefingFollowup[] = [];\n  let followupsUnavailableReason: string | undefined;\n\n  if (maxFollowups === 0 || options.allowLlm === false) {\n    followupsUnavailableReason = \"LLM follow-ups disabled by configuration\";\n  } else if (!options.openaiApiKey && !options.followupGenerator) {\n    followupsUnavailableReason =\n      'no LLM configured for follow-ups (set OPENAI_API_KEY, enable a local LLM, or use modelSource \"gateway\")';\n  } else {\n    try {\n      const generator = options.followupGenerator ?? buildOpenAiFollowupGenerator({\n        apiKey: options.openaiApiKey!,\n        model: options.model ?? BRIEFING_FOLLOWUP_DEFAULT_MODEL,\n        baseURL: options.openaiBaseUrl,\n      });\n      const generated = await withBriefingFollowupTimeout(\n        generator({\n          sections: sectionsBase,\n          windowLabel: window.label,\n          maxFollowups,\n        }),\n      );\n      followups = generated.slice(0, maxFollowups);\n    } catch (err) {\n      const errMsg = stringifyError(err);\n      const modelName = options.model ?? BRIEFING_FOLLOWUP_DEFAULT_MODEL;\n      // Detect \"model not found / invalid\" errors from the Responses API and\n      // produce a user-friendly message that surfaces the problematic identifier.\n      if (\n        /model/i.test(errMsg) &&\n        (/not found/i.test(errMsg) || /does not exist/i.test(errMsg) || /invalid/i.test(errMsg))\n      ) {\n        followupsUnavailableReason =\n          `configured follow-up model '${modelName}' is not available in the Responses API`;\n      } else {\n        followupsUnavailableReason = `LLM follow-ups failed: ${errMsg}`;\n      }\n      log.warn(`briefing: ${followupsUnavailableReason}`);\n    }\n  }\n  throwIfAborted(signal, \"briefing aborted\");\n\n  const sections: BriefingSections = {\n    ...sectionsBase,\n    suggestedFollowups: followups,\n  };\n\n  // Drain auto-applied passive-correction notifications (issue #1581): cleared on read,\n  // so each surfaces in exactly one briefing. Fail-open except cancellation, which must\n  // not consume notifications nobody receives.\n  throwIfAborted(signal, \"briefing aborted\");\n  let correctionNotifications: BriefingResult[\"correctionNotifications\"];\n  try {\n    const drained = await drainPassiveCorrectionNotifications(options.storage.dir, signal);\n    if (drained.length > 0) {\n      correctionNotifications = drained.map((n) => ({\n        planId: n.planId,\n        summary: n.summary,\n        undoCommand: n.undoCommand,\n        createdAt: n.createdAt,\n      }));\n    }\n  } catch (err) {\n    if (isAbortError(err)) throw err;\n    log.debug(`briefing: correction notification drain failed (non-fatal): ${err instanceof Error ? err.message : String(err)}`);\n  }\n\n  const windowIso = { from: window.from.toISOString(), to: window.to.toISOString() };\n  const markdown = renderBriefingMarkdown({\n    sections,\n    windowLabel: window.label,\n    focus,\n    followupsUnavailableReason,\n    generatedAt: now,\n    namespace: options.namespace,\n    correctionNotifications,\n  });\n\n  const json: Record<string, unknown> = {\n    generatedAt: now.toISOString(),\n    window: windowIso,\n    focus,\n    namespace: options.namespace ?? null,\n    correctionNotifications: correctionNotifications ?? null,\n    sections,\n    followupsUnavailableReason: followupsUnavailableReason ?? null,\n    calendarSourceErrors: calendarSourceErrors.length > 0 ? calendarSourceErrors : null,\n  };\n\n  const result: BriefingResult = {\n    markdown,\n    json,\n    sections,\n    followupsUnavailableReason,\n    window: windowIso,\n    ...(correctionNotifications ? { correctionNotifications } : {}),\n  };\n\n  if (calendarSourceErrors.length > 0) {\n    result.calendarSourceErrors = calendarSourceErrors;\n  }\n\n  return result;\n}\n\nfunction clampFollowups(value: number | undefined): number {\n  if (typeof value !== \"number\" || !Number.isFinite(value)) return 5;\n  return Math.max(0, Math.min(10, Math.floor(value)));\n}\n\nfunction defaultWindow(now: Date): ParsedBriefingWindow {\n  const parsed = parseBriefingWindow(\"yesterday\", now);\n  if (parsed) return parsed;\n  return { from: new Date(now.getTime() - DAY_MS), to: now, label: \"yesterday\" };\n}\n\nfunction memoryTimestamp(memory: MemoryFile): number {\n  const raw = memory.frontmatter.updated || memory.frontmatter.created;\n  if (!raw) return 0;\n  const t = Date.parse(raw);\n  return Number.isFinite(t) ? t : 0;\n}\n\n/** @internal — exported for testing only. */\nexport function filterMemoriesByWindow(memories: MemoryFile[], window: ParsedBriefingWindow): MemoryFile[] {\n  const fromMs = window.from.getTime();\n  const toMs = window.to.getTime();\n  return memories.filter((m) => {\n    // Exclude explicitly retired statuses so commitments overridden within the\n    // window don't appear as open. In addition to `superseded` / `archived`\n    // (temporal retirement), also exclude `rejected` and `quarantined`, which\n    // come from governance/disposition workflows: those memories have been\n    // explicitly marked unsafe or invalid and must NOT flow into active\n    // threads, open commitments, or follow-up generation, even if they\n    // fall within the briefing window. Surfacing them would reintroduce\n    // quarantined content into downstream automation as actionable context.\n    //\n    // `pending_review` memories are awaiting human review — not invalidated —\n    // and must be included so reviewers see them in the briefing.\n    const status = m.frontmatter.status;\n    if (\n      status === \"superseded\" ||\n      status === \"archived\" ||\n      status === \"rejected\" ||\n      status === \"quarantined\" ||\n      status === \"forgotten\"\n    ) {\n      return false;\n    }\n    const ts = memoryTimestamp(m);\n    return ts >= fromMs && ts < toMs;\n  });\n}\n\n/** @internal — exported for testing only. */\nexport function buildActiveThreads(memories: MemoryFile[]): BriefingActiveThread[] {\n  const buckets = new Map<string, BriefingActiveThread>();\n  for (const memory of memories) {\n    const threadKey = extractThreadKey(memory);\n    const updatedAt = memory.frontmatter.updated || memory.frontmatter.created || \"\";\n    const existing = buckets.get(threadKey);\n    if (!existing || updatedAt > existing.updatedAt) {\n      buckets.set(threadKey, {\n        id: threadKey,\n        title: summarizeContentTitle(memory),\n        updatedAt,\n        // Always derive reason from the newest memory so the description\n        // reflects the most-recent activity type, not the first memory seen.\n        reason: describeReason(memory),\n      });\n    }\n  }\n  return Array.from(buckets.values())\n    .sort((a, b) => {\n      if (a.updatedAt > b.updatedAt) return -1;\n      if (a.updatedAt < b.updatedAt) return 1;\n      // Tiebreaker: lexicographic order by id ensures a deterministic, stable\n      // result when multiple threads share the same updatedAt timestamp (e.g.\n      // after a batch extraction run).\n      return a.id < b.id ? -1 : a.id > b.id ? 1 : 0;\n    })\n    .slice(0, MAX_ACTIVE_THREADS);\n}\n\nfunction extractThreadKey(memory: MemoryFile): string {\n  const entityRef = memory.frontmatter.entityRef?.trim();\n  if (entityRef) return `entity:${entityRef}`;\n  const tags = memory.frontmatter.tags ?? [];\n  const topicTag = tags.find((t) => t.startsWith(\"topic:\"));\n  if (topicTag) return topicTag;\n  if (tags.length > 0) return `tag:${tags[0]}`;\n  return `memory:${memory.frontmatter.id}`;\n}\n\nfunction summarizeContentTitle(memory: MemoryFile): string {\n  const firstLine = (memory.content || \"\").split(\"\\n\").find((line) => line.trim().length > 0) ?? \"\";\n  const trimmed = firstLine.trim();\n  if (trimmed.length === 0) return memory.frontmatter.id;\n  return trimmed.length > 120 ? `${trimmed.slice(0, 117)}...` : trimmed;\n}\n\nfunction describeReason(memory: MemoryFile): string {\n  const cat = memory.frontmatter.category;\n  if (cat === \"commitment\") return \"open commitment\";\n  if (cat === \"decision\") return \"recent decision\";\n  if (cat === \"correction\") return \"recent correction\";\n  return \"recent activity\";\n}\n\n/** @internal — exported for testing only. */\nexport function buildRecentEntities(\n  entities: EntityFile[],\n  window: ParsedBriefingWindow,\n  focus: BriefingFocus | null,\n): BriefingRecentEntity[] {\n  const fromMs = window.from.getTime();\n  const scored: BriefingRecentEntity[] = [];\n  const now = window.to;\n  for (const entity of entities) {\n    if (focus && !focusMatchesEntity(entity, focus)) continue;\n    const toMs = window.to.getTime();\n    const updatedMs = entity.updated ? Date.parse(entity.updated) : 0;\n    if (!Number.isFinite(updatedMs) || updatedMs < fromMs || updatedMs >= toMs) continue;\n    const score = StorageManager.scoreEntity(entity, now);\n    scored.push({\n      name: entity.name,\n      type: entity.type,\n      updatedAt: entity.updated,\n      score: Number(score.toFixed(4)),\n      summary: entity.synthesis || entity.summary,\n    });\n  }\n  return scored\n    .sort((a, b) => {\n      const scoreDiff = b.score - a.score;\n      if (scoreDiff !== 0) return scoreDiff;\n      if (a.updatedAt > b.updatedAt) return -1;\n      if (a.updatedAt < b.updatedAt) return 1;\n      return 0;\n    })\n    .slice(0, MAX_RECENT_ENTITIES);\n}\n\n/** @internal — exported for testing only. */\nexport function buildOpenCommitments(memories: MemoryFile[]): BriefingOpenCommitment[] {\n  const commitments: BriefingOpenCommitment[] = [];\n\n  for (const memory of memories) {\n    const tags = memory.frontmatter.tags ?? [];\n    const isPending = tags.some((t) => t.toLowerCase() === \"pending\");\n    const isCommitment = memory.frontmatter.category === \"commitment\";\n    const isUnresolvedQuestion = /(?:[?？؟]$|\\bfollow[- ]up\\b|\\btodo\\b)/i.test(memory.content);\n\n    if (isPending || isCommitment || isUnresolvedQuestion) {\n      const kind: BriefingOpenCommitment[\"kind\"] = isCommitment\n        ? \"commitment\"\n        : isUnresolvedQuestion\n          ? \"question\"\n          : \"pending_memory\";\n      commitments.push({\n        id: memory.frontmatter.id,\n        kind,\n        text: summarizeContentTitle(memory),\n        source: memory.frontmatter.source,\n        createdAt: memory.frontmatter.created,\n      });\n    }\n  }\n\n  return commitments\n    .sort((a, b) => {\n      // Missing timestamps sort last (highest comparator value).\n      if (!a.createdAt && !b.createdAt) return 0;\n      if (!a.createdAt) return 1;\n      if (!b.createdAt) return -1;\n      if (a.createdAt > b.createdAt) return -1;\n      if (a.createdAt < b.createdAt) return 1;\n      return 0;\n    })\n    .slice(0, MAX_OPEN_COMMITMENTS);\n}\n\ninterface CalendarLoadResult {\n  events: CalendarEvent[] | undefined;\n  error: BriefingCalendarSourceError | undefined;\n}\n\nasync function loadTodayCalendar(\n  source: CalendarSource,\n  now: Date,\n): Promise<CalendarLoadResult> {\n  const sourceLabel = (source as { filePath?: string }).filePath ?? \"calendar\";\n  try {\n    const dateIso = now.toISOString().slice(0, 10);\n    const events = await source.eventsForDate(dateIso);\n    // Return the events array (possibly empty for a legitimately empty calendar).\n    // An empty array is distinct from `undefined`: empty means \"source responded\n    // with no events today\"; undefined means \"source failed\".\n    return { events, error: undefined };\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    log.warn(`briefing: calendar source error (${sourceLabel}): ${message}`);\n    // Return undefined events (not []) to signal an error so callers can\n    // distinguish \"no events today\" from \"the calendar source threw\".\n    return {\n      events: undefined,\n      error: { source: sourceLabel, error: message },\n    };\n  }\n}\n\n// ──────────────────────────────────────────────────────────────────────────\n// Follow-ups (Responses API)\n// ──────────────────────────────────────────────────────────────────────────\n\nfunction buildOpenAiFollowupGenerator(cfg: {\n  apiKey: string;\n  model: string;\n  baseURL?: string;\n}): BriefingFollowupGenerator {\n  return async ({ sections, windowLabel, maxFollowups }) => {\n    // Lazy import keeps the module dependency-free when LLM path is unused.\n    const { OpenAI } = (await import(\"openai\")) as {\n      OpenAI: new (opts: { apiKey: string; baseURL?: string }) => unknown;\n    };\n    const clientOpts: { apiKey: string; baseURL?: string } = { apiKey: cfg.apiKey };\n    if (cfg.baseURL) clientOpts.baseURL = cfg.baseURL;\n    const client = new OpenAI(clientOpts) as {\n      responses: {\n        create: (args: {\n          model: string;\n          instructions: string;\n          input: string;\n          max_output_tokens?: number;\n        }) => Promise<{ output_text?: string }>;\n      };\n    };\n\n    const prompt = buildFollowupPrompt(sections, windowLabel, maxFollowups);\n    const response = await client.responses.create({\n      model: cfg.model,\n      instructions: FOLLOWUP_INSTRUCTIONS,\n      input: prompt,\n      max_output_tokens: 512,\n    });\n\n    const text = typeof response.output_text === \"string\" ? response.output_text : \"\";\n    return parseFollowupResponse(text, maxFollowups);\n  };\n}\n\n/**\n * Minimal chat-completion surface shared by `FallbackLlmClient` (gateway\n * model chain) and `LocalLlmClient` (Ollama / OpenAI-compatible local\n * endpoints). Matches `Orchestrator.fastLlmForRerank` so briefing\n * follow-ups can ride the same routing as other fast-tier operations.\n */\nexport interface BriefingChainLlmClient {\n  chatCompletion(\n    messages: Array<{ role: \"system\" | \"user\" | \"assistant\"; content: string }>,\n    options?: {\n      temperature?: number;\n      maxTokens?: number;\n      timeoutMs?: number;\n      operation?: string;\n      priority?: \"background\" | \"recall-critical\";\n    },\n  ): Promise<{ content: string } | null>;\n}\n\n/**\n * Build a follow-up generator backed by the configured LLM chain\n * (gateway model source or local LLM) instead of a direct OpenAI key.\n *\n * Local models frequently wrap JSON in code fences or prose, so the\n * response is run through `extractJsonCandidates` and the first candidate\n * that parses into a valid `{ followups: [...] }` shape wins. Throws when\n * the chain returns nothing or no candidate parses — `buildBriefing`\n * catches and surfaces the message via `followupsUnavailableReason`.\n */\nexport function buildChainFollowupGenerator(\n  client: BriefingChainLlmClient,\n): BriefingFollowupGenerator {\n  return async ({ sections, windowLabel, maxFollowups }) => {\n    const prompt = buildFollowupPrompt(sections, windowLabel, maxFollowups);\n    const response = await client.chatCompletion(\n      [\n        { role: \"system\", content: FOLLOWUP_INSTRUCTIONS },\n        { role: \"user\", content: prompt },\n      ],\n      {\n        temperature: 0.2,\n        maxTokens: 512,\n        operation: \"briefing-followups\",\n        priority: \"background\",\n      },\n    );\n    if (!response?.content) {\n      throw new Error(\"LLM chain returned no response\");\n    }\n    const candidates = extractJsonCandidates(response.content);\n    let lastError: unknown;\n    for (const candidate of candidates) {\n      try {\n        return parseFollowupResponse(candidate, maxFollowups);\n      } catch (err) {\n        lastError = err;\n      }\n    }\n    throw new Error(\n      `LLM chain response contained no valid followups JSON: ${stringifyError(lastError ?? \"no JSON candidates found\")}`,\n    );\n  };\n}\n\nconst FOLLOWUP_INSTRUCTIONS = `You suggest short follow-up prompts for a daily context briefing.\nReturn strict JSON of the form { \"followups\": [{ \"text\": \"...\", \"rationale\": \"...\" }] }.\nRules:\n- Never invent facts absent from the input.\n- Keep each \"text\" under 140 characters.\n- Prefer concrete, action-oriented phrasing.\n- Omit duplicates. Avoid filler.`;\n\nfunction buildFollowupPrompt(\n  sections: BriefingSections,\n  windowLabel: string,\n  maxFollowups: number,\n): string {\n  const lines: string[] = [];\n  lines.push(`Window: ${windowLabel}`);\n  lines.push(`Desired follow-ups: ${maxFollowups}`);\n  lines.push(\"\");\n  lines.push(\"Active threads:\");\n  for (const t of sections.activeThreads) lines.push(`- ${t.title} (${t.reason})`);\n  lines.push(\"\");\n  lines.push(\"Recent entities:\");\n  for (const e of sections.recentEntities) lines.push(`- ${e.name} [${e.type}]`);\n  lines.push(\"\");\n  lines.push(\"Open commitments:\");\n  for (const c of sections.openCommitments) lines.push(`- [${c.kind}] ${c.text}`);\n  return lines.join(\"\\n\");\n}\n\nfunction parseFollowupResponse(raw: string, max: number): BriefingFollowup[] {\n  // JSON.parse throws on invalid JSON — let the caller catch it so the outer\n  // try/catch in buildBriefing can set followupsUnavailableReason rather than\n  // silently returning an empty array that masks the parse failure.\n  const candidates = extractJsonCandidates(raw);\n  let lastError: unknown;\n  for (const candidate of candidates) {\n    try {\n      const parsed = JSON.parse(candidate) as unknown;\n      if (!parsed || typeof parsed !== \"object\") {\n        throw new Error(`LLM returned non-object JSON: ${typeof parsed}`);\n      }\n      const arr = (parsed as { followups?: unknown }).followups;\n      if (!Array.isArray(arr)) {\n        throw new Error(`LLM response missing \"followups\" array`);\n      }\n      const out: BriefingFollowup[] = [];\n      for (const entry of arr) {\n        if (!entry || typeof entry !== \"object\") continue;\n        const text = (entry as Record<string, unknown>).text;\n        if (typeof text !== \"string\" || text.trim().length === 0) continue;\n        const rationale = (entry as Record<string, unknown>).rationale;\n        out.push({\n          text: text.trim(),\n          rationale: typeof rationale === \"string\" ? rationale.trim() : undefined,\n        });\n        if (out.length >= max) break;\n      }\n      return out;\n    } catch (err) {\n      lastError = err;\n    }\n  }\n  if (lastError) throw lastError;\n  throw new Error(\"LLM response contained no JSON candidates\");\n}\n\nfunction stringifyError(err: unknown): string {\n  if (err instanceof Error) return err.message;\n  return String(err);\n}\n\n// ──────────────────────────────────────────────────────────────────────────\n// Markdown rendering\n// ──────────────────────────────────────────────────────────────────────────\n\ninterface RenderContext {\n  sections: BriefingSections;\n  windowLabel: string;\n  focus: BriefingFocus | null;\n  followupsUnavailableReason?: string;\n  generatedAt: Date;\n  namespace?: string;\n  /** Auto-applied passive corrections drained for this briefing (#1581). */\n  correctionNotifications?: BriefingResult[\"correctionNotifications\"];\n}\n\nexport function renderBriefingMarkdown(ctx: RenderContext): string {\n  const lines: string[] = [];\n  lines.push(`# Daily Context Briefing`);\n  lines.push(\"\");\n  lines.push(`_Generated ${ctx.generatedAt.toISOString()} (window: ${ctx.windowLabel})_`);\n  if (ctx.focus) {\n    lines.push(`_Focus: ${ctx.focus.type}:${ctx.focus.value}_`);\n  }\n  if (ctx.namespace) {\n    lines.push(`_Namespace: ${ctx.namespace}_`);\n  }\n  lines.push(\"\");\n\n  if (ctx.correctionNotifications && ctx.correctionNotifications.length > 0) {\n    lines.push(`## Memory updates`);\n    for (const n of ctx.correctionNotifications) {\n      lines.push(`- ✎ ${n.summary} (undo: ${n.undoCommand})`);\n    }\n    lines.push(\"\");\n  }\n\n  lines.push(`## Active threads`);\n  if (ctx.sections.activeThreads.length === 0) {\n    lines.push(`_No active threads in window._`);\n  } else {\n    for (const t of ctx.sections.activeThreads) {\n      lines.push(`- **${t.title}** — ${t.reason} (updated ${t.updatedAt})`);\n    }\n  }\n  lines.push(\"\");\n\n  lines.push(`## Recent entities`);\n  if (ctx.sections.recentEntities.length === 0) {\n    lines.push(`_No entities updated in window._`);\n  } else {\n    for (const e of ctx.sections.recentEntities) {\n      const summary = e.summary ? ` — ${e.summary}` : \"\";\n      lines.push(`- **${e.name}** (${e.type}, score ${e.score})${summary}`);\n    }\n  }\n  lines.push(\"\");\n\n  lines.push(`## Open commitments`);\n  if (ctx.sections.openCommitments.length === 0) {\n    lines.push(`_No open commitments detected._`);\n  } else {\n    for (const c of ctx.sections.openCommitments) {\n      lines.push(`- [${c.kind}] ${c.text}`);\n    }\n  }\n  lines.push(\"\");\n\n  lines.push(`## Suggested follow-ups`);\n  if (ctx.followupsUnavailableReason) {\n    lines.push(`_Unavailable: ${ctx.followupsUnavailableReason}_`);\n  } else if (ctx.sections.suggestedFollowups.length === 0) {\n    lines.push(`_No follow-ups suggested._`);\n  } else {\n    for (const f of ctx.sections.suggestedFollowups) {\n      const rationale = f.rationale ? ` _(${f.rationale})_` : \"\";\n      lines.push(`- ${f.text}${rationale}`);\n    }\n  }\n  lines.push(\"\");\n\n  if (ctx.sections.todayCalendar !== undefined) {\n    lines.push(`## Today's calendar`);\n    if (ctx.sections.todayCalendar.length === 0) {\n      lines.push(`_No events on the calendar today._`);\n    } else {\n      for (const ev of ctx.sections.todayCalendar) {\n        const end = ev.end ? ` → ${ev.end}` : \"\";\n        const loc = ev.location ? ` @ ${ev.location}` : \"\";\n        lines.push(`- **${ev.title}** (${ev.start}${end})${loc}`);\n      }\n    }\n    lines.push(\"\");\n  }\n\n  return lines.join(\"\\n\").trimEnd() + \"\\n\";\n}\n\n// ──────────────────────────────────────────────────────────────────────────\n// Save helpers\n// ──────────────────────────────────────────────────────────────────────────\n\n/**\n * Resolve the directory where `--save` writes dated briefings.\n * Respects the following precedence:\n *   1. explicit `configOverride` argument\n *   2. `$REMNIC_HOME/briefings/`\n *   3. `$HOME/.remnic/briefings/`\n */\nexport function resolveBriefingSaveDir(\n  configOverride: string | null | undefined,\n  env?: NodeJS.ProcessEnv,\n): string {\n  if (typeof configOverride === \"string\" && configOverride.trim().length > 0) {\n    return path.resolve(configOverride.trim());\n  }\n  const remnicHome = (env === undefined ? readEnvVar(\"REMNIC_HOME\") : env.REMNIC_HOME)?.trim();\n  if (remnicHome && remnicHome.length > 0) {\n    return path.join(remnicHome, \"briefings\");\n  }\n  const home = env === undefined\n    ? resolveHomeDir()\n    : env.HOME ?? env.USERPROFILE ?? os.homedir();\n  return path.join(home, \".remnic\", \"briefings\");\n}\n\n/** Format the dated filename for a given briefing. */\nexport function briefingFilename(date: Date, format: \"markdown\" | \"json\" = \"markdown\"): string {\n  const day = date.toISOString().slice(0, 10);\n  return format === \"json\" ? `${day}.json` : `${day}.md`;\n}\n","/**\n * correction/passive-correction-notifications.ts — JSONL notification queue\n * for auto-applied passive corrections (issue #1581).\n *\n * When passive capture auto-applies a correction, it enqueues a one-line\n * notification here: `✎ Memory updated: <summary> (auto-applied (plan <planId>))`.\n * The plan id is referenced (not a revert command) because `remnic correct`\n * has no `--revert` flag — corrections are page-versioned for manual revert.\n * The next session-start briefing drains the queue ONCE (temp-file-then-rename,\n * rule 54) and clears it, so a notification is shown exactly once.\n *\n * File location: `<storageDir>/state/corrections/notifications.jsonl`\n */\n\nimport { mkdir, readFile, rename, writeFile, unlink } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { throwIfAborted } from \"../abort-error.js\";\nimport { serializeMutations } from \"../utils/serialize-mutations.js\";\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\nexport interface PassiveCorrectionNotification {\n  planId: string;\n  /** One-line human-readable summary of what changed. */\n  summary: string;\n  /** Undo command the user can run. */\n  undoCommand: string;\n  createdAt: string;\n}\n\n// ---------------------------------------------------------------------------\n// Path\n// ---------------------------------------------------------------------------\n\nfunction notificationsPath(storageDir: string): string {\n  return path.join(storageDir, \"state\", \"corrections\", \"notifications.jsonl\");\n}\n\n// ---------------------------------------------------------------------------\n// Enqueue\n// ---------------------------------------------------------------------------\n\n/**\n * Append a notification line to the JSONL queue. Atomic (rule 54): the line\n * is written to a temp file then renamed over the real file. Multiple\n * notifications accumulate across calls — the queue is drained, not replaced.\n */\nexport async function enqueuePassiveCorrectionNotification(\n  storageDir: string,\n  notification: PassiveCorrectionNotification,\n): Promise<void> {\n  const filePath = notificationsPath(storageDir);\n  await serializeMutations(`passive-notification:${filePath}`, async () => {\n    // Read existing content (if any) so we accumulate rather than overwrite.\n    let existing = \"\";\n    try {\n      existing = await readFile(filePath, \"utf-8\");\n    } catch (err) {\n      const code = (err as NodeJS.ErrnoException)?.code;\n      if (code !== \"ENOENT\") throw err;\n    }\n\n    await mkdir(path.dirname(filePath), { recursive: true });\n    const line = `${JSON.stringify(notification)}\\n`;\n    const content = existing + line;\n\n    const tmp = `${filePath}.${process.pid}.${Date.now().toString(36)}.tmp`;\n    await writeFile(tmp, content, \"utf-8\");\n    await rename(tmp, filePath);\n  });\n}\n\n// ---------------------------------------------------------------------------\n// Drain (read + clear — exactly once)\n// ---------------------------------------------------------------------------\n\n/**\n * Read all pending notifications and atomically clear the file. Returns the\n * notifications in insertion order. If the file does not exist, returns [].\n *\n * Drain-once semantics: the file is deleted after reading, so calling this\n * twice in a row returns notifications only the first time.\n */\nexport async function drainPassiveCorrectionNotifications(\n  storageDir: string,\n  signal?: AbortSignal,\n): Promise<PassiveCorrectionNotification[]> {\n  const filePath = notificationsPath(storageDir);\n  return serializeMutations(`passive-notification:${filePath}`, async () => {\n    let raw: string;\n    try {\n      raw = await readFile(filePath, \"utf-8\");\n    } catch (err) {\n      const code = (err as NodeJS.ErrnoException)?.code;\n      if (code === \"ENOENT\") return [];\n      throw err;\n    }\n\n    // Cancellation after the read must keep the queue: the caller never receives these.\n    throwIfAborted(signal, \"briefing aborted\");\n    const notifications: PassiveCorrectionNotification[] = [];\n    for (const line of raw.split(\"\\n\")) {\n      const trimmed = line.trim();\n      if (!trimmed) continue;\n      try {\n        notifications.push(JSON.parse(trimmed) as PassiveCorrectionNotification);\n      } catch {\n        // Skip malformed lines (rule 34 — best-effort, never crash a briefing).\n        continue;\n      }\n    }\n\n    // Clear the file atomically (delete is atomic enough for this use case —\n    // the worst case is a duplicate notification, never a lost one, because\n    // the read already captured the content).\n    try {\n      await unlink(filePath);\n    } catch (err) {\n      const code = (err as NodeJS.ErrnoException)?.code;\n      if (code !== \"ENOENT\") throw err;\n    }\n\n    return notifications;\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiBA,SAAS,YAAAA,iBAAgB;AACzB,OAAO,QAAQ;AACf,OAAOC,WAAU;;;ACLjB,SAAS,OAAO,UAAU,QAAQ,WAAW,cAAc;AAC3D,OAAO,UAAU;AAqBjB,SAAS,kBAAkB,YAA4B;AACrD,SAAO,KAAK,KAAK,YAAY,SAAS,eAAe,qBAAqB;AAC5E;AAWA,eAAsB,qCACpB,YACA,cACe;AACf,QAAM,WAAW,kBAAkB,UAAU;AAC7C,QAAM,mBAAmB,wBAAwB,QAAQ,IAAI,YAAY;AAEvE,QAAI,WAAW;AACf,QAAI;AACF,iBAAW,MAAM,SAAS,UAAU,OAAO;AAAA,IAC7C,SAAS,KAAK;AACZ,YAAM,OAAQ,KAA+B;AAC7C,UAAI,SAAS,SAAU,OAAM;AAAA,IAC/B;AAEA,UAAM,MAAM,KAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AACvD,UAAM,OAAO,GAAG,KAAK,UAAU,YAAY,CAAC;AAAA;AAC5C,UAAM,UAAU,WAAW;AAE3B,UAAM,MAAM,GAAG,QAAQ,IAAI,QAAQ,GAAG,IAAI,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC;AACjE,UAAM,UAAU,KAAK,SAAS,OAAO;AACrC,UAAM,OAAO,KAAK,QAAQ;AAAA,EAC5B,CAAC;AACH;AAaA,eAAsB,oCACpB,YACA,QAC0C;AAC1C,QAAM,WAAW,kBAAkB,UAAU;AAC7C,SAAO,mBAAmB,wBAAwB,QAAQ,IAAI,YAAY;AACxE,QAAI;AACJ,QAAI;AACF,YAAM,MAAM,SAAS,UAAU,OAAO;AAAA,IACxC,SAAS,KAAK;AACZ,YAAM,OAAQ,KAA+B;AAC7C,UAAI,SAAS,SAAU,QAAO,CAAC;AAC/B,YAAM;AAAA,IACR;AAGA,mBAAe,QAAQ,kBAAkB;AACzC,UAAM,gBAAiD,CAAC;AACxD,eAAW,QAAQ,IAAI,MAAM,IAAI,GAAG;AAClC,YAAM,UAAU,KAAK,KAAK;AAC1B,UAAI,CAAC,QAAS;AACd,UAAI;AACF,sBAAc,KAAK,KAAK,MAAM,OAAO,CAAkC;AAAA,MACzE,QAAQ;AAEN;AAAA,MACF;AAAA,IACF;AAKA,QAAI;AACF,YAAM,OAAO,QAAQ;AAAA,IACvB,SAAS,KAAK;AACZ,YAAM,OAAQ,KAA+B;AAC7C,UAAI,SAAS,SAAU,OAAM;AAAA,IAC/B;AAEA,WAAO;AAAA,EACT,CAAC;AACH;;;AD5EO,IAAM,0BAA0B,CAAC,YAAY,MAAM;AAMnD,IAAM,kCAAkC;AASxC,SAAS,uBAAuB,OAA0C;AAC/E,MAAI,UAAU,OAAW,QAAO;AAChC,MAAK,wBAA8C,SAAS,KAAK,EAAG,QAAO;AAC3E,SAAO,4BAA4B,KAAK,gBAAgB,wBAAwB,KAAK,IAAI,CAAC;AAC5F;AAYA,IAAM,SAAS,KAAK,KAAK,KAAK;AAO9B,IAAM,gBAAgB,MAAM,MAAM;AAc3B,SAAS,oBACd,OACA,MAAY,oBAAI,KAAK,GACQ;AAC7B,QAAM,MAAM,OAAO,UAAU,WAAW,MAAM,KAAK,EAAE,YAAY,IAAI;AACrE,MAAI,IAAI,WAAW,EAAG,QAAO;AAE7B,MAAI,QAAQ,aAAa;AACvB,UAAM,eAAe,cAAc,GAAG;AACtC,UAAMC,QAAO,IAAI,KAAK,aAAa,QAAQ,IAAI,MAAM;AACrD,WAAO,EAAE,MAAAA,OAAM,IAAI,cAAc,OAAO,YAAY;AAAA,EACtD;AAEA,MAAI,QAAQ,SAAS;AACnB,WAAO,EAAE,MAAM,cAAc,GAAG,GAAG,IAAI,KAAK,OAAO,QAAQ;AAAA,EAC7D;AAEA,QAAM,QAAQ,IAAI,MAAM,mBAAmB;AAC3C,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,SAAS,MAAM,CAAC,GAAG,EAAE;AACnC,MAAI,CAAC,OAAO,SAAS,KAAK,KAAK,SAAS,EAAG,QAAO;AAClD,QAAM,OAAO,MAAM,CAAC;AACpB,MAAI,KAAK;AACT,MAAI,SAAS,IAAK,MAAK,QAAQ,KAAK,KAAK;AAAA,WAChC,SAAS,IAAK,MAAK,QAAQ;AAAA,WAC3B,SAAS,IAAK,MAAK,QAAQ,IAAI;AACxC,MAAI,OAAO,EAAG,QAAO;AAErB,MAAI,KAAK,iBAAiB,CAAC,OAAO,SAAS,EAAE,EAAG,QAAO;AACvD,QAAM,OAAO,IAAI,KAAK,IAAI,QAAQ,IAAI,EAAE;AACxC,MAAI,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,EAAG,QAAO;AAC7C,SAAO;AAAA,IACL;AAAA,IACA,IAAI;AAAA,IACJ,OAAO,QAAQ,KAAK,GAAG,IAAI;AAAA,EAC7B;AACF;AAEA,SAAS,cAAc,MAAkB;AACvC,QAAM,IAAI,IAAI,KAAK,KAAK,QAAQ,CAAC;AACjC,IAAE,YAAY,GAAG,GAAG,GAAG,CAAC;AACxB,SAAO;AACT;AAgBO,SAAS,mBAAmB,OAAiD;AAClF,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,QAAM,CAAC,WAAW,GAAG,IAAI,IAAI,QAAQ,MAAM,GAAG;AAC9C,MAAI,KAAK,WAAW,GAAG;AACrB,WAAO,EAAE,MAAM,SAAS,OAAO,UAAU;AAAA,EAC3C;AACA,QAAM,UAAU,UAAU,YAAY;AACtC,MAAI,YAAY,YAAY,YAAY,aAAa,YAAY,SAAS;AACxE,UAAM,QAAQ,KAAK,KAAK,GAAG,EAAE,KAAK;AAClC,QAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,WAAO,EAAE,MAAM,SAAS,MAAM;AAAA,EAChC;AACA,SAAO,EAAE,MAAM,SAAS,OAAO,QAAQ;AACzC;AAgBO,SAAS,mBACd,QACA,OACA,eACS;AACT,QAAM,SAAS,MAAM,MAAM,YAAY;AACvC,QAAM,aAAa,OAAO,YAAY,aAAa,IAAI,YAAY;AAOnE,QAAM,mBAAmB;AAAA,IACvB,OAAO;AAAA,IACP,GAAI,OAAO,YAAY,QAAQ,CAAC;AAAA,EAClC;AACA,MAAI,MAAM,SAAS,WAAW,WAAW;AACvC,qBAAiB,KAAK,SAAS;AAAA,EACjC;AACA,QAAM,cAAc,iBAAiB,KAAK,GAAG,EAAE,YAAY;AAC3D,MAAI,YAAY,SAAS,MAAM,EAAG,QAAO;AAezC,MAAI,CAAC,UAAW,QAAO;AACvB,QAAM,iBAAiB,oBAAoB,MAAM,OAAO,MAAM,MAAM,aAAa;AASjF,MAAI,kBAAkB;AACtB,QAAM,iBAAiB,gBAAgB;AAAA,IACrC,IAAI,OAAO,IAAI,MAAM,IAAI,cAAc,GAAG;AAAA,EAC5C;AACA,MAAI,gBAAgB;AAClB,sBAAkB,gBAAgB,MAAM,eAAe,CAAC,EAAE,MAAM;AAAA,EAClE;AACA,QAAM,eAAe,oBAAoB,iBAAiB,MAAM,MAAM,aAAa;AACnF,SAAO,iBAAiB;AAC1B;AAEO,SAAS,mBAAmB,QAAoB,OAA+B;AACpF,QAAM,SAAS,MAAM,MAAM,YAAY;AACvC,MAAI,MAAM,SAAS,YAAY,OAAO,KAAK,YAAY,MAAM,SAAU,QAAO;AAC9E,MAAI,MAAM,SAAS,aAAa,OAAO,KAAK,YAAY,MAAM,UAAW,QAAO;AAChF,QAAM,WAAW;AAAA,IACf,OAAO;AAAA,IACP,OAAO,aAAa,OAAO,WAAW;AAAA,IACtC,GAAG,OAAO;AAAA,IACV,GAAI,OAAO,WAAW,CAAC;AAAA,IACvB,IAAI,OAAO,sBAAsB,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,QAAQ,OAAO,GAAG,QAAQ,KAAK,CAAC;AAAA,EAC7F,EACG,KAAK,GAAG,EACR,YAAY;AACf,SAAO,SAAS,SAAS,MAAM;AACjC;AAgBO,IAAM,qBAAN,MAAmD;AAAA,EACxD,YAA6B,UAAkB;AAAlB;AAAA,EAAmB;AAAA,EAAnB;AAAA,EAE7B,MAAM,cAAc,SAA2C;AAC7D,QAAI;AACJ,QAAI;AACF,YAAM,MAAMC,UAAS,KAAK,UAAU,OAAO;AAAA,IAC7C,SAAS,KAAK;AACZ,UAAI,KAAK,2CAA2C,KAAK,QAAQ,KAAK,GAAG,EAAE;AAC3E,aAAO,CAAC;AAAA,IACV;AAEA,UAAM,SAAS,KAAK,SAAS,YAAY,EAAE,SAAS,MAAM,IACtD,eAAe,GAAG,IAClB,gBAAgB,GAAG;AAEvB,WAAO,OAAO,OAAO,CAAC,UAAU,iBAAiB,OAAO,OAAO,CAAC;AAAA,EAClE;AACF;AAEA,SAAS,gBAAgB,KAA8B;AACrD,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,UAAM,MAAM,MAAM,QAAQ,MAAM,IAC5B,SACA,UAAU,OAAO,WAAW,YAAY,MAAM,QAAS,OAAgC,MAAM,IACzF,OAAiC,SACnC,CAAC;AACP,UAAM,SAA0B,CAAC;AACjC,eAAW,SAAS,KAAK;AACvB,UAAI,CAAC,SAAS,OAAO,UAAU,SAAU;AACzC,YAAM,IAAI;AACV,YAAM,KAAK,OAAO,EAAE,OAAO,WAAW,EAAE,KAAK,OAAO,EAAE,QAAQ,WAAW,EAAE,MAAM,eAAe;AAChG,YAAM,QAAQ,OAAO,EAAE,UAAU,WAAW,EAAE,QAAQ,OAAO,EAAE,YAAY,WAAW,EAAE,UAAU;AAClG,YAAM,QAAQ,OAAO,EAAE,UAAU,WAAW,EAAE,QAAQ,OAAO,EAAE,YAAY,WAAW,EAAE,UAAU;AAClG,UAAI,CAAC,SAAS,CAAC,MAAO;AACtB,aAAO,KAAK;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA,KAAK,OAAO,EAAE,QAAQ,WAAW,EAAE,MAAM,OAAO,EAAE,UAAU,WAAW,EAAE,QAAQ;AAAA,QACjF,UAAU,OAAO,EAAE,aAAa,WAAW,EAAE,WAAW;AAAA,QACxD,OAAO,OAAO,EAAE,UAAU,WAAW,EAAE,QAAQ,OAAO,EAAE,gBAAgB,WAAW,EAAE,cAAc;AAAA,MACrG,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,KAAK,yCAAyC,GAAG,EAAE;AACvD,WAAO,CAAC;AAAA,EACV;AACF;AAgBA,SAAS,aAAa,MAAoC;AAIxD,QAAM,WAAW,KAAK,QAAQ,GAAG;AACjC,MAAI,YAAY,EAAG,QAAO;AAC1B,QAAM,OAAO,KAAK,MAAM,GAAG,QAAQ;AACnC,QAAM,QAAQ,KAAK,MAAM,WAAW,CAAC,EAAE,KAAK;AAE5C,QAAM,YAAY,KAAK,MAAM,GAAG;AAChC,QAAM,WAAW,UAAU,CAAC,EAAG,YAAY;AAC3C,MAAI,CAAC,eAAe,KAAK,QAAQ,EAAG,QAAO;AAC3C,QAAM,SAAiC,CAAC;AACxC,WAAS,IAAI,GAAG,IAAI,UAAU,QAAQ,KAAK;AACzC,UAAM,UAAU,UAAU,CAAC;AAC3B,UAAM,QAAQ,QAAQ,QAAQ,GAAG;AACjC,QAAI,SAAS,EAAG;AAChB,UAAM,OAAO,QAAQ,MAAM,GAAG,KAAK,EAAE,YAAY;AACjD,QAAI,MAAM,QAAQ,MAAM,QAAQ,CAAC;AAEjC,QAAI,IAAI,WAAW,GAAG,KAAK,IAAI,SAAS,GAAG,KAAK,IAAI,UAAU,GAAG;AAC/D,YAAM,IAAI,MAAM,GAAG,EAAE;AAAA,IACvB;AACA,WAAO,IAAI,IAAI;AAAA,EACjB;AACA,SAAO,EAAE,UAAU,QAAQ,MAAM;AACnC;AAQO,SAAS,eAAe,KAA8B;AAC3D,QAAM,SAA0B,CAAC;AAKjC,QAAM,aAAa,IAAI,QAAQ,SAAS,IAAI,EAAE,QAAQ,YAAY,EAAE;AACpE,QAAM,SAAS,WAAW,MAAM,eAAe,EAAE,MAAM,CAAC;AACxD,aAAW,SAAS,QAAQ;AAC1B,UAAM,SAAS,MAAM,OAAO,aAAa;AACzC,UAAM,OAAO,WAAW,KAAK,QAAQ,MAAM,MAAM,GAAG,MAAM;AAC1D,UAAM,eAAuC,CAAC;AAC9C,UAAM,aAA2C,CAAC;AAClD,eAAW,QAAQ,KAAK,MAAM,IAAI,GAAG;AACnC,YAAM,SAAS,aAAa,IAAI;AAChC,UAAI,CAAC,OAAQ;AACb,YAAM,EAAE,UAAU,QAAQ,MAAM,IAAI;AACpC,UAAI,aAAa,aAAa,aAAa,SAAS;AAClD,YAAI,WAAW,QAAQ,MAAM,QAAW;AACtC,qBAAW,QAAQ,IAAI,EAAE,KAAK,OAAO,OAAO;AAAA,QAC9C;AAAA,MACF,WAAW,aAAa,QAAQ,MAAM,QAAW;AAC/C,qBAAa,QAAQ,IAAI;AAAA,MAC3B;AAAA,IACF;AACA,UAAM,QAAQ,aAAa;AAC3B,UAAM,UAAU,WAAW;AAC3B,QAAI,CAAC,SAAS,CAAC,QAAS;AACxB,UAAM,QAAQ,WAAW;AACzB,WAAO,KAAK;AAAA,MACV,IAAI,aAAa,OAAO,eAAe;AAAA,MACvC;AAAA,MACA,OAAO,iBAAiB,QAAQ,KAAK,QAAQ,MAAM;AAAA,MACnD,KAAK,QAAQ,iBAAiB,MAAM,KAAK,MAAM,MAAM,IAAI;AAAA,MACzD,UAAU,aAAa;AAAA,MACvB,OAAO,aAAa;AAAA,IACtB,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAeA,SAAS,iBAAiB,OAAe,SAAiC,CAAC,GAAW;AAEpF,MAAI,iBAAiB,KAAK,KAAK,GAAG;AAChC,UAAM,IAAI,MAAM,MAAM,GAAG,CAAC;AAC1B,UAAM,IAAI,MAAM,MAAM,GAAG,CAAC;AAC1B,UAAM,IAAI,MAAM,MAAM,GAAG,CAAC;AAC1B,UAAM,KAAK,MAAM,MAAM,GAAG,EAAE;AAC5B,UAAM,KAAK,MAAM,MAAM,IAAI,EAAE;AAC7B,UAAM,KAAK,MAAM,MAAM,IAAI,EAAE;AAC7B,WAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;AAAA,EACzC;AAEA,MAAI,gBAAgB,KAAK,KAAK,GAAG;AAC/B,UAAM,IAAI,MAAM,MAAM,GAAG,CAAC;AAC1B,UAAM,IAAI,MAAM,MAAM,GAAG,CAAC;AAC1B,UAAM,IAAI,MAAM,MAAM,GAAG,CAAC;AAC1B,UAAM,KAAK,MAAM,MAAM,GAAG,EAAE;AAC5B,UAAM,KAAK,MAAM,MAAM,IAAI,EAAE;AAC7B,UAAM,KAAK,MAAM,MAAM,IAAI,EAAE;AAC7B,UAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;AAC9C,UAAM,OAAO,OAAO;AACpB,QAAI,MAAM;AACR,YAAM,SAAS,kBAAkB,OAAO,IAAI;AAC5C,UAAI,OAAQ,QAAO;AACnB,UAAI;AAAA,QACF,+BAA+B,IAAI,gCAA2B,KAAK;AAAA,MACrE;AACA,aAAO,GAAG,KAAK;AAAA,IACjB;AAEA,WAAO;AAAA,EACT;AAEA,MAAI,UAAU,KAAK,KAAK,GAAG;AACzB,WAAO,GAAG,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM,MAAM,GAAG,CAAC,CAAC;AAAA,EACvE;AACA,SAAO;AACT;AAWA,SAAS,kBAAkB,OAAe,MAA6B;AACrE,QAAM,QAAQ,MAAM,MAAM,mDAAmD;AAC7E,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,IAAI,EAAE,IAAI;AAEjC,QAAM,aAAa,KAAK;AAAA,IACtB,OAAO,CAAC;AAAA,IACR,OAAO,EAAE,IAAI;AAAA,IACb,OAAO,CAAC;AAAA,IACR,OAAO,EAAE;AAAA,IACT,OAAO,EAAE;AAAA,IACT,OAAO,EAAE;AAAA,EACX;AACA,MAAI,CAAC,OAAO,SAAS,UAAU,EAAG,QAAO;AAEzC,MAAI;AACJ,MAAI;AACF,gBAAY,IAAI,KAAK,eAAe,SAAS;AAAA,MAC3C,UAAU;AAAA,MACV,MAAM;AAAA,MACN,OAAO;AAAA,MACP,KAAK;AAAA,MACL,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV,CAAC;AAAA,EACH,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,gBAAgB,WAAW,IAAI,KAAK,UAAU,CAAC;AAC/D,MAAI,YAAY,KAAM,QAAO;AAE7B,QAAM,WAAW,aAAa;AAE9B,QAAM,YAAY,aAAa;AAE/B,QAAM,WAAW,gBAAgB,WAAW,IAAI,KAAK,SAAS,CAAC;AAC/D,MAAI,aAAa,MAAM;AACrB,UAAM,YAAY,YAAY;AAC9B,QAAI,cAAc,UAAU;AAC1B,aAAO,IAAI,KAAK,aAAa,SAAS,EAAE,YAAY;AAAA,IACtD;AAAA,EACF;AACA,SAAO,IAAI,KAAK,SAAS,EAAE,YAAY;AACzC;AAOA,SAAS,gBAAgB,WAAgC,MAA2B;AAClF,QAAM,QAAQ,UAAU,cAAc,IAAI;AAC1C,QAAM,MAAM,CAAC,SACX,MAAM,KAAK,CAAC,MAAM,EAAE,SAAS,IAAI,GAAG;AACtC,QAAM,IAAI,IAAI,MAAM;AACpB,QAAM,KAAK,IAAI,OAAO;AACtB,QAAM,IAAI,IAAI,KAAK;AACnB,QAAM,KAAK,IAAI,MAAM;AACrB,QAAM,KAAK,IAAI,QAAQ;AACvB,QAAM,KAAK,IAAI,QAAQ;AACvB,MAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAI,QAAO;AAOjD,QAAM,iBAAiB,OAAO,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE;AACxD,QAAM,KAAK,KAAK,IAAI,OAAO,CAAC,GAAG,OAAO,EAAE,IAAI,GAAG,OAAO,CAAC,GAAG,gBAAgB,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;AAChG,SAAO,OAAO,SAAS,EAAE,IAAI,KAAK;AACpC;AAOA,SAAS,eAAe,QAAyB;AAC/C,SAAO,wBAAwB,KAAK,MAAM;AAC5C;AAWA,SAAS,QAAQ,QAA+B;AAC9C,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,MAAM;AACV,MAAI,CAAC,eAAe,GAAG,GAAG;AAExB,UAAM,MAAM;AAAA,EACd;AACA,QAAM,KAAK,IAAI,KAAK,GAAG,EAAE,QAAQ;AACjC,SAAO,OAAO,SAAS,EAAE,IAAI,KAAK;AACpC;AAGO,SAAS,iBAAiB,OAAsB,SAA0B;AAC/E,QAAM,SAAS,QAAQ,MAAM,GAAG,EAAE;AAClC,QAAM,QAAQ,MAAM;AAOpB,QAAM,kBAAkB,CAAC,eAAe,KAAK;AAE7C,MAAI,iBAAiB;AAWnB,UAAM,eACJ,OAAO,UAAU,YACjB,sDAAsD,KAAK,KAAK;AAClE,QAAI,CAAC,cAAc;AACjB,UAAI,MAAM,+DAA+D,KAAK,UAAU,KAAK,CAAC,EAAE;AAChG,aAAO;AAAA,IACT;AACA,UAAM,eAAe,MAAM,MAAM,GAAG,EAAE;AACtC,UAAM,iBAAiB,oBAAI,KAAK,eAAe,YAAY;AAC3D,QACE,OAAO,MAAM,eAAe,QAAQ,CAAC,KACrC,eAAe,YAAY,EAAE,MAAM,GAAG,EAAE,MAAM,cAC9C;AACA,UAAI;AAAA,QACF,sCAAsC,MAAM,KAAK,gCAAgC,KAAK,UAAU,YAAY,CAAC;AAAA,MAC/G;AACA,aAAO;AAAA,IACT;AACA,UAAM,eAAe,MAAM,QAAQ,GAAG,MAAM,KAAK,MAAM,MAAM,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI;AACvF,QAAI,iBAAiB,IAAI;AACvB,YAAM,iBAAiB,aAAa,MAAM,GAAG,EAAE,IAAI,MAAM;AACzD,YAAM,MAAM,eAAe,CAAC,KAAK;AACjC,YAAM,MAAM,eAAe,CAAC,KAAK;AACjC,YAAM,MAAM,KAAK,MAAM,eAAe,CAAC,KAAK,CAAC;AAC7C,UAAI,MAAM,MAAM,MAAM,MAAM,MAAM,IAAI;AACpC,YAAI;AAAA,UACF,sCAAsC,MAAM,KAAK,kCAAkC,KAAK,UAAU,YAAY,CAAC;AAAA,QACjH;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAEA,UAAM,YAAY;AAClB,UAAMC,OAAM,MAAM;AAGlB,QAAI,CAACA,KAAK,QAAO,cAAc;AAO/B,UAAM,aACJ,OAAOA,SAAQ,YACf,sDAAsD,KAAKA,IAAG;AAChE,QAAI,CAAC,YAAY;AACf,UAAI;AAAA,QACF,oBAAoB,MAAM,KAAK,iCAAiC,KAAK,UAAUA,IAAG,CAAC,qCAAqC,SAAS;AAAA,MACnI;AAEA,aAAO,cAAc;AAAA,IACvB;AAQA,UAAM,UAAUA,KAAI,MAAM,GAAG,EAAE;AAC/B,UAAM,eAAe,oBAAI,KAAK,UAAU,YAAY;AACpD,QACE,OAAO,MAAM,aAAa,QAAQ,CAAC,KACnC,aAAa,YAAY,EAAE,MAAM,GAAG,EAAE,MAAM,SAC5C;AACA,UAAI;AAAA,QACF,oBAAoB,MAAM,KAAK,6BAA6B,KAAK,UAAU,OAAO,CAAC,qCAAqC,SAAS;AAAA,MACnI;AACA,aAAO,cAAc;AAAA,IACvB;AASA,UAAM,UAAUA,KAAI,QAAQ,GAAG,MAAM,KAAKA,KAAI,MAAMA,KAAI,QAAQ,GAAG,IAAI,CAAC,IAAI;AAC5E,QAAI,YAAY,IAAI;AAClB,YAAM,YAAY,QAAQ,MAAM,GAAG,EAAE,IAAI,MAAM;AAC/C,YAAM,KAAK,UAAU,CAAC,KAAK;AAC3B,YAAM,KAAK,UAAU,CAAC,KAAK;AAE3B,YAAM,KAAK,KAAK,MAAM,UAAU,CAAC,KAAK,CAAC;AACvC,YAAM,cAAc,MAAM,MAAM,MAAM,MAAM,MAAM;AAClD,UAAI,CAAC,aAAa;AAChB,YAAI;AAAA,UACF,oBAAoB,MAAM,KAAK,+BAA+B,KAAK,UAAU,OAAO,CAAC,qCAAqC,SAAS;AAAA,QACrI;AACA,eAAO,cAAc;AAAA,MACvB;AAAA,IACF;AAuBA,UAAM,UAAUA,KAAI,MAAM,EAAE;AAU5B,UAAM,gBAAgB,YAAY;AAClC,UAAM,qBAAqB,iBAAiB,wBAAwB,KAAK,OAAO;AAChF,UAAM,oBAAoB,CAAC;AAC3B,QAAI,mBAAmB;AACrB,aAAO,aAAa,UAAU,UAAU;AAAA,IAC1C;AACA,WAAO,aAAa,UAAU,SAAS;AAAA,EACzC;AAKA,QAAM,UAAU,QAAQ,KAAK;AAC7B,MAAI,YAAY,MAAM;AACpB,QAAI,MAAM,+DAA+D,KAAK,UAAU,KAAK,CAAC,EAAE;AAChG,WAAO;AAAA,EACT;AAGA,QAAM,WAAW,KAAK;AAAA,IACpB,OAAO,OAAO,MAAM,GAAG,CAAC,CAAC;AAAA,IACzB,OAAO,OAAO,MAAM,GAAG,CAAC,CAAC,IAAI;AAAA,IAC7B,OAAO,OAAO,MAAM,GAAG,EAAE,CAAC;AAAA,EAC5B;AACA,QAAM,SAAS,WAAW;AAE1B,QAAM,MAAM,MAAM;AAClB,MAAI,CAAC,KAAK;AAER,WAAO,WAAW,YAAY,UAAU;AAAA,EAC1C;AAEA,QAAM,QAAQ,QAAQ,GAAG;AACzB,MAAI,UAAU,MAAM;AAElB,WAAO,WAAW,YAAY,UAAU;AAAA,EAC1C;AAKA,SAAO,UAAU,UAAU,QAAQ;AACrC;AAEA,SAAS,iBAAyB;AAEhC,SAAO,OAAO,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC;AACvD;AA6CA,IAAM,qBAAqB;AAC3B,IAAM,sBAAsB;AAC5B,IAAM,uBAAuB;AAQ7B,eAAsB,cAAc,SAAwD;AAC1F,SAAO;AAAA,IACL,CAAC,WAAW,wBAAwB,SAAS,MAAM;AAAA,IACnD,QAAQ;AAAA,EACV;AACF;AAEA,eAAe,wBAAwB,SAA+B,QAA8C;AAClH,QAAM,MAAM,QAAQ,OAAO,oBAAI,KAAK;AACpC,QAAM,SAAS,QAAQ,UAAU,cAAc,GAAG;AAClD,QAAM,eAAe,eAAe,QAAQ,YAAY;AACxD,QAAM,QAAQ,QAAQ,SAAS;AAE/B,QAAM,CAAC,aAAa,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,IACnD,iBAAiB,QAAQ,SAAS,QAAQ,EAAE,OAAO,CAAC,EAAE,KAAK,qCAAqC;AAAA,IAChG,iBAAiB,QAAQ,SAAS,MAAM;AAAA,EAC1C,CAAC;AACD,iBAAe,QAAQ,kBAAkB;AAEzC,QAAM,mBAAmB,uBAAuB,aAAa,MAAM;AACnE,QAAM,kBAAkB,QACpB,iBAAiB,OAAO,CAAC,MAAM,mBAAmB,GAAG,OAAO,QAAQ,QAAQ,aAAa,CAAC,IAC1F;AAEJ,QAAM,gBAAgB,mBAAmB,eAAe;AACxD,QAAM,iBAAiB,oBAAoB,aAAa,QAAQ,KAAK;AACrE,QAAM,kBAAkB,qBAAqB,eAAe;AAE5D,QAAM,qBAAqB,QAAQ,iBAC/B,MAAM,kBAAkB,QAAQ,gBAAgB,GAAG,IACnD;AACJ,iBAAe,QAAQ,kBAAkB;AAEzC,QAAM,uBACJ,oBAAoB,QAAQ,CAAC,mBAAmB,KAAK,IAAI,CAAC;AAE5D,QAAM,eAAiC;AAAA,IACrC;AAAA,IACA;AAAA,IACA;AAAA,IACA,oBAAoB,CAAC;AAAA,IACrB,eAAe,oBAAoB;AAAA,EACrC;AAEA,MAAI,YAAgC,CAAC;AACrC,MAAI;AAEJ,MAAI,iBAAiB,KAAK,QAAQ,aAAa,OAAO;AACpD,iCAA6B;AAAA,EAC/B,WAAW,CAAC,QAAQ,gBAAgB,CAAC,QAAQ,mBAAmB;AAC9D,iCACE;AAAA,EACJ,OAAO;AACL,QAAI;AACF,YAAM,YAAY,QAAQ,qBAAqB,6BAA6B;AAAA,QAC1E,QAAQ,QAAQ;AAAA,QAChB,OAAO,QAAQ,SAAS;AAAA,QACxB,SAAS,QAAQ;AAAA,MACnB,CAAC;AACD,YAAM,YAAY,MAAM;AAAA,QACtB,UAAU;AAAA,UACR,UAAU;AAAA,UACV,aAAa,OAAO;AAAA,UACpB;AAAA,QACF,CAAC;AAAA,MACH;AACA,kBAAY,UAAU,MAAM,GAAG,YAAY;AAAA,IAC7C,SAAS,KAAK;AACZ,YAAM,SAAS,eAAe,GAAG;AACjC,YAAM,YAAY,QAAQ,SAAS;AAGnC,UACE,SAAS,KAAK,MAAM,MACnB,aAAa,KAAK,MAAM,KAAK,kBAAkB,KAAK,MAAM,KAAK,WAAW,KAAK,MAAM,IACtF;AACA,qCACE,+BAA+B,SAAS;AAAA,MAC5C,OAAO;AACL,qCAA6B,0BAA0B,MAAM;AAAA,MAC/D;AACA,UAAI,KAAK,aAAa,0BAA0B,EAAE;AAAA,IACpD;AAAA,EACF;AACA,iBAAe,QAAQ,kBAAkB;AAEzC,QAAM,WAA6B;AAAA,IACjC,GAAG;AAAA,IACH,oBAAoB;AAAA,EACtB;AAKA,iBAAe,QAAQ,kBAAkB;AACzC,MAAI;AACJ,MAAI;AACF,UAAM,UAAU,MAAM,oCAAoC,QAAQ,QAAQ,KAAK,MAAM;AACrF,QAAI,QAAQ,SAAS,GAAG;AACtB,gCAA0B,QAAQ,IAAI,CAAC,OAAO;AAAA,QAC5C,QAAQ,EAAE;AAAA,QACV,SAAS,EAAE;AAAA,QACX,aAAa,EAAE;AAAA,QACf,WAAW,EAAE;AAAA,MACf,EAAE;AAAA,IACJ;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,aAAa,GAAG,EAAG,OAAM;AAC7B,QAAI,MAAM,+DAA+D,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,EAAE;AAAA,EAC7H;AAEA,QAAM,YAAY,EAAE,MAAM,OAAO,KAAK,YAAY,GAAG,IAAI,OAAO,GAAG,YAAY,EAAE;AACjF,QAAM,WAAW,uBAAuB;AAAA,IACtC;AAAA,IACA,aAAa,OAAO;AAAA,IACpB;AAAA,IACA;AAAA,IACA,aAAa;AAAA,IACb,WAAW,QAAQ;AAAA,IACnB;AAAA,EACF,CAAC;AAED,QAAM,OAAgC;AAAA,IACpC,aAAa,IAAI,YAAY;AAAA,IAC7B,QAAQ;AAAA,IACR;AAAA,IACA,WAAW,QAAQ,aAAa;AAAA,IAChC,yBAAyB,2BAA2B;AAAA,IACpD;AAAA,IACA,4BAA4B,8BAA8B;AAAA,IAC1D,sBAAsB,qBAAqB,SAAS,IAAI,uBAAuB;AAAA,EACjF;AAEA,QAAM,SAAyB;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,IACR,GAAI,0BAA0B,EAAE,wBAAwB,IAAI,CAAC;AAAA,EAC/D;AAEA,MAAI,qBAAqB,SAAS,GAAG;AACnC,WAAO,uBAAuB;AAAA,EAChC;AAEA,SAAO;AACT;AAEA,SAAS,eAAe,OAAmC;AACzD,MAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACjE,SAAO,KAAK,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,MAAM,KAAK,CAAC,CAAC;AACpD;AAEA,SAAS,cAAc,KAAiC;AACtD,QAAM,SAAS,oBAAoB,aAAa,GAAG;AACnD,MAAI,OAAQ,QAAO;AACnB,SAAO,EAAE,MAAM,IAAI,KAAK,IAAI,QAAQ,IAAI,MAAM,GAAG,IAAI,KAAK,OAAO,YAAY;AAC/E;AAEA,SAAS,gBAAgB,QAA4B;AACnD,QAAM,MAAM,OAAO,YAAY,WAAW,OAAO,YAAY;AAC7D,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,IAAI,KAAK,MAAM,GAAG;AACxB,SAAO,OAAO,SAAS,CAAC,IAAI,IAAI;AAClC;AAGO,SAAS,uBAAuB,UAAwB,QAA4C;AACzG,QAAM,SAAS,OAAO,KAAK,QAAQ;AACnC,QAAM,OAAO,OAAO,GAAG,QAAQ;AAC/B,SAAO,SAAS,OAAO,CAAC,MAAM;AAY5B,UAAM,SAAS,EAAE,YAAY;AAC7B,QACE,WAAW,gBACX,WAAW,cACX,WAAW,cACX,WAAW,iBACX,WAAW,aACX;AACA,aAAO;AAAA,IACT;AACA,UAAM,KAAK,gBAAgB,CAAC;AAC5B,WAAO,MAAM,UAAU,KAAK;AAAA,EAC9B,CAAC;AACH;AAGO,SAAS,mBAAmB,UAAgD;AACjF,QAAM,UAAU,oBAAI,IAAkC;AACtD,aAAW,UAAU,UAAU;AAC7B,UAAM,YAAY,iBAAiB,MAAM;AACzC,UAAM,YAAY,OAAO,YAAY,WAAW,OAAO,YAAY,WAAW;AAC9E,UAAM,WAAW,QAAQ,IAAI,SAAS;AACtC,QAAI,CAAC,YAAY,YAAY,SAAS,WAAW;AAC/C,cAAQ,IAAI,WAAW;AAAA,QACrB,IAAI;AAAA,QACJ,OAAO,sBAAsB,MAAM;AAAA,QACnC;AAAA;AAAA;AAAA,QAGA,QAAQ,eAAe,MAAM;AAAA,MAC/B,CAAC;AAAA,IACH;AAAA,EACF;AACA,SAAO,MAAM,KAAK,QAAQ,OAAO,CAAC,EAC/B,KAAK,CAAC,GAAG,MAAM;AACd,QAAI,EAAE,YAAY,EAAE,UAAW,QAAO;AACtC,QAAI,EAAE,YAAY,EAAE,UAAW,QAAO;AAItC,WAAO,EAAE,KAAK,EAAE,KAAK,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI;AAAA,EAC9C,CAAC,EACA,MAAM,GAAG,kBAAkB;AAChC;AAEA,SAAS,iBAAiB,QAA4B;AACpD,QAAM,YAAY,OAAO,YAAY,WAAW,KAAK;AACrD,MAAI,UAAW,QAAO,UAAU,SAAS;AACzC,QAAM,OAAO,OAAO,YAAY,QAAQ,CAAC;AACzC,QAAM,WAAW,KAAK,KAAK,CAAC,MAAM,EAAE,WAAW,QAAQ,CAAC;AACxD,MAAI,SAAU,QAAO;AACrB,MAAI,KAAK,SAAS,EAAG,QAAO,OAAO,KAAK,CAAC,CAAC;AAC1C,SAAO,UAAU,OAAO,YAAY,EAAE;AACxC;AAEA,SAAS,sBAAsB,QAA4B;AACzD,QAAM,aAAa,OAAO,WAAW,IAAI,MAAM,IAAI,EAAE,KAAK,CAAC,SAAS,KAAK,KAAK,EAAE,SAAS,CAAC,KAAK;AAC/F,QAAM,UAAU,UAAU,KAAK;AAC/B,MAAI,QAAQ,WAAW,EAAG,QAAO,OAAO,YAAY;AACpD,SAAO,QAAQ,SAAS,MAAM,GAAG,QAAQ,MAAM,GAAG,GAAG,CAAC,QAAQ;AAChE;AAEA,SAAS,eAAe,QAA4B;AAClD,QAAM,MAAM,OAAO,YAAY;AAC/B,MAAI,QAAQ,aAAc,QAAO;AACjC,MAAI,QAAQ,WAAY,QAAO;AAC/B,MAAI,QAAQ,aAAc,QAAO;AACjC,SAAO;AACT;AAGO,SAAS,oBACd,UACA,QACA,OACwB;AACxB,QAAM,SAAS,OAAO,KAAK,QAAQ;AACnC,QAAM,SAAiC,CAAC;AACxC,QAAM,MAAM,OAAO;AACnB,aAAW,UAAU,UAAU;AAC7B,QAAI,SAAS,CAAC,mBAAmB,QAAQ,KAAK,EAAG;AACjD,UAAM,OAAO,OAAO,GAAG,QAAQ;AAC/B,UAAM,YAAY,OAAO,UAAU,KAAK,MAAM,OAAO,OAAO,IAAI;AAChE,QAAI,CAAC,OAAO,SAAS,SAAS,KAAK,YAAY,UAAU,aAAa,KAAM;AAC5E,UAAM,QAAQ,eAAe,YAAY,QAAQ,GAAG;AACpD,WAAO,KAAK;AAAA,MACV,MAAM,OAAO;AAAA,MACb,MAAM,OAAO;AAAA,MACb,WAAW,OAAO;AAAA,MAClB,OAAO,OAAO,MAAM,QAAQ,CAAC,CAAC;AAAA,MAC9B,SAAS,OAAO,aAAa,OAAO;AAAA,IACtC,CAAC;AAAA,EACH;AACA,SAAO,OACJ,KAAK,CAAC,GAAG,MAAM;AACd,UAAM,YAAY,EAAE,QAAQ,EAAE;AAC9B,QAAI,cAAc,EAAG,QAAO;AAC5B,QAAI,EAAE,YAAY,EAAE,UAAW,QAAO;AACtC,QAAI,EAAE,YAAY,EAAE,UAAW,QAAO;AACtC,WAAO;AAAA,EACT,CAAC,EACA,MAAM,GAAG,mBAAmB;AACjC;AAGO,SAAS,qBAAqB,UAAkD;AACrF,QAAM,cAAwC,CAAC;AAE/C,aAAW,UAAU,UAAU;AAC7B,UAAM,OAAO,OAAO,YAAY,QAAQ,CAAC;AACzC,UAAM,YAAY,KAAK,KAAK,CAAC,MAAM,EAAE,YAAY,MAAM,SAAS;AAChE,UAAM,eAAe,OAAO,YAAY,aAAa;AACrD,UAAM,uBAAuB,wCAAwC,KAAK,OAAO,OAAO;AAExF,QAAI,aAAa,gBAAgB,sBAAsB;AACrD,YAAM,OAAuC,eACzC,eACA,uBACE,aACA;AACN,kBAAY,KAAK;AAAA,QACf,IAAI,OAAO,YAAY;AAAA,QACvB;AAAA,QACA,MAAM,sBAAsB,MAAM;AAAA,QAClC,QAAQ,OAAO,YAAY;AAAA,QAC3B,WAAW,OAAO,YAAY;AAAA,MAChC,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO,YACJ,KAAK,CAAC,GAAG,MAAM;AAEd,QAAI,CAAC,EAAE,aAAa,CAAC,EAAE,UAAW,QAAO;AACzC,QAAI,CAAC,EAAE,UAAW,QAAO;AACzB,QAAI,CAAC,EAAE,UAAW,QAAO;AACzB,QAAI,EAAE,YAAY,EAAE,UAAW,QAAO;AACtC,QAAI,EAAE,YAAY,EAAE,UAAW,QAAO;AACtC,WAAO;AAAA,EACT,CAAC,EACA,MAAM,GAAG,oBAAoB;AAClC;AAOA,eAAe,kBACb,QACA,KAC6B;AAC7B,QAAM,cAAe,OAAiC,YAAY;AAClE,MAAI;AACF,UAAM,UAAU,IAAI,YAAY,EAAE,MAAM,GAAG,EAAE;AAC7C,UAAM,SAAS,MAAM,OAAO,cAAc,OAAO;AAIjD,WAAO,EAAE,QAAQ,OAAO,OAAU;AAAA,EACpC,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,QAAI,KAAK,oCAAoC,WAAW,MAAM,OAAO,EAAE;AAGvE,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,OAAO,EAAE,QAAQ,aAAa,OAAO,QAAQ;AAAA,IAC/C;AAAA,EACF;AACF;AAMA,SAAS,6BAA6B,KAIR;AAC5B,SAAO,OAAO,EAAE,UAAU,aAAa,aAAa,MAAM;AAExD,UAAM,EAAE,OAAO,IAAK,MAAM,OAAO,QAAQ;AAGzC,UAAM,aAAmD,EAAE,QAAQ,IAAI,OAAO;AAC9E,QAAI,IAAI,QAAS,YAAW,UAAU,IAAI;AAC1C,UAAM,SAAS,IAAI,OAAO,UAAU;AAWpC,UAAM,SAAS,oBAAoB,UAAU,aAAa,YAAY;AACtE,UAAM,WAAW,MAAM,OAAO,UAAU,OAAO;AAAA,MAC7C,OAAO,IAAI;AAAA,MACX,cAAc;AAAA,MACd,OAAO;AAAA,MACP,mBAAmB;AAAA,IACrB,CAAC;AAED,UAAM,OAAO,OAAO,SAAS,gBAAgB,WAAW,SAAS,cAAc;AAC/E,WAAO,sBAAsB,MAAM,YAAY;AAAA,EACjD;AACF;AA+BO,SAAS,4BACd,QAC2B;AAC3B,SAAO,OAAO,EAAE,UAAU,aAAa,aAAa,MAAM;AACxD,UAAM,SAAS,oBAAoB,UAAU,aAAa,YAAY;AACtE,UAAM,WAAW,MAAM,OAAO;AAAA,MAC5B;AAAA,QACE,EAAE,MAAM,UAAU,SAAS,sBAAsB;AAAA,QACjD,EAAE,MAAM,QAAQ,SAAS,OAAO;AAAA,MAClC;AAAA,MACA;AAAA,QACE,aAAa;AAAA,QACb,WAAW;AAAA,QACX,WAAW;AAAA,QACX,UAAU;AAAA,MACZ;AAAA,IACF;AACA,QAAI,CAAC,UAAU,SAAS;AACtB,YAAM,IAAI,MAAM,gCAAgC;AAAA,IAClD;AACA,UAAM,aAAa,sBAAsB,SAAS,OAAO;AACzD,QAAI;AACJ,eAAW,aAAa,YAAY;AAClC,UAAI;AACF,eAAO,sBAAsB,WAAW,YAAY;AAAA,MACtD,SAAS,KAAK;AACZ,oBAAY;AAAA,MACd;AAAA,IACF;AACA,UAAM,IAAI;AAAA,MACR,yDAAyD,eAAe,aAAa,0BAA0B,CAAC;AAAA,IAClH;AAAA,EACF;AACF;AAEA,IAAM,wBAAwB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAQ9B,SAAS,oBACP,UACA,aACA,cACQ;AACR,QAAM,QAAkB,CAAC;AACzB,QAAM,KAAK,WAAW,WAAW,EAAE;AACnC,QAAM,KAAK,uBAAuB,YAAY,EAAE;AAChD,QAAM,KAAK,EAAE;AACb,QAAM,KAAK,iBAAiB;AAC5B,aAAW,KAAK,SAAS,cAAe,OAAM,KAAK,KAAK,EAAE,KAAK,KAAK,EAAE,MAAM,GAAG;AAC/E,QAAM,KAAK,EAAE;AACb,QAAM,KAAK,kBAAkB;AAC7B,aAAW,KAAK,SAAS,eAAgB,OAAM,KAAK,KAAK,EAAE,IAAI,KAAK,EAAE,IAAI,GAAG;AAC7E,QAAM,KAAK,EAAE;AACb,QAAM,KAAK,mBAAmB;AAC9B,aAAW,KAAK,SAAS,gBAAiB,OAAM,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,IAAI,EAAE;AAC9E,SAAO,MAAM,KAAK,IAAI;AACxB;AAEA,SAAS,sBAAsB,KAAa,KAAiC;AAI3E,QAAM,aAAa,sBAAsB,GAAG;AAC5C,MAAI;AACJ,aAAW,aAAa,YAAY;AAClC,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,SAAS;AACnC,UAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,cAAM,IAAI,MAAM,iCAAiC,OAAO,MAAM,EAAE;AAAA,MAClE;AACA,YAAM,MAAO,OAAmC;AAChD,UAAI,CAAC,MAAM,QAAQ,GAAG,GAAG;AACvB,cAAM,IAAI,MAAM,wCAAwC;AAAA,MAC1D;AACA,YAAM,MAA0B,CAAC;AACjC,iBAAW,SAAS,KAAK;AACvB,YAAI,CAAC,SAAS,OAAO,UAAU,SAAU;AACzC,cAAM,OAAQ,MAAkC;AAChD,YAAI,OAAO,SAAS,YAAY,KAAK,KAAK,EAAE,WAAW,EAAG;AAC1D,cAAM,YAAa,MAAkC;AACrD,YAAI,KAAK;AAAA,UACP,MAAM,KAAK,KAAK;AAAA,UAChB,WAAW,OAAO,cAAc,WAAW,UAAU,KAAK,IAAI;AAAA,QAChE,CAAC;AACD,YAAI,IAAI,UAAU,IAAK;AAAA,MACzB;AACA,aAAO;AAAA,IACT,SAAS,KAAK;AACZ,kBAAY;AAAA,IACd;AAAA,EACF;AACA,MAAI,UAAW,OAAM;AACrB,QAAM,IAAI,MAAM,2CAA2C;AAC7D;AAEA,SAAS,eAAe,KAAsB;AAC5C,MAAI,eAAe,MAAO,QAAO,IAAI;AACrC,SAAO,OAAO,GAAG;AACnB;AAiBO,SAAS,uBAAuB,KAA4B;AACjE,QAAM,QAAkB,CAAC;AACzB,QAAM,KAAK,0BAA0B;AACrC,QAAM,KAAK,EAAE;AACb,QAAM,KAAK,cAAc,IAAI,YAAY,YAAY,CAAC,aAAa,IAAI,WAAW,IAAI;AACtF,MAAI,IAAI,OAAO;AACb,UAAM,KAAK,WAAW,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,KAAK,GAAG;AAAA,EAC5D;AACA,MAAI,IAAI,WAAW;AACjB,UAAM,KAAK,eAAe,IAAI,SAAS,GAAG;AAAA,EAC5C;AACA,QAAM,KAAK,EAAE;AAEb,MAAI,IAAI,2BAA2B,IAAI,wBAAwB,SAAS,GAAG;AACzE,UAAM,KAAK,mBAAmB;AAC9B,eAAW,KAAK,IAAI,yBAAyB;AAC3C,YAAM,KAAK,YAAO,EAAE,OAAO,WAAW,EAAE,WAAW,GAAG;AAAA,IACxD;AACA,UAAM,KAAK,EAAE;AAAA,EACf;AAEA,QAAM,KAAK,mBAAmB;AAC9B,MAAI,IAAI,SAAS,cAAc,WAAW,GAAG;AAC3C,UAAM,KAAK,gCAAgC;AAAA,EAC7C,OAAO;AACL,eAAW,KAAK,IAAI,SAAS,eAAe;AAC1C,YAAM,KAAK,OAAO,EAAE,KAAK,aAAQ,EAAE,MAAM,aAAa,EAAE,SAAS,GAAG;AAAA,IACtE;AAAA,EACF;AACA,QAAM,KAAK,EAAE;AAEb,QAAM,KAAK,oBAAoB;AAC/B,MAAI,IAAI,SAAS,eAAe,WAAW,GAAG;AAC5C,UAAM,KAAK,kCAAkC;AAAA,EAC/C,OAAO;AACL,eAAW,KAAK,IAAI,SAAS,gBAAgB;AAC3C,YAAM,UAAU,EAAE,UAAU,WAAM,EAAE,OAAO,KAAK;AAChD,YAAM,KAAK,OAAO,EAAE,IAAI,OAAO,EAAE,IAAI,WAAW,EAAE,KAAK,IAAI,OAAO,EAAE;AAAA,IACtE;AAAA,EACF;AACA,QAAM,KAAK,EAAE;AAEb,QAAM,KAAK,qBAAqB;AAChC,MAAI,IAAI,SAAS,gBAAgB,WAAW,GAAG;AAC7C,UAAM,KAAK,iCAAiC;AAAA,EAC9C,OAAO;AACL,eAAW,KAAK,IAAI,SAAS,iBAAiB;AAC5C,YAAM,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,IAAI,EAAE;AAAA,IACtC;AAAA,EACF;AACA,QAAM,KAAK,EAAE;AAEb,QAAM,KAAK,yBAAyB;AACpC,MAAI,IAAI,4BAA4B;AAClC,UAAM,KAAK,iBAAiB,IAAI,0BAA0B,GAAG;AAAA,EAC/D,WAAW,IAAI,SAAS,mBAAmB,WAAW,GAAG;AACvD,UAAM,KAAK,4BAA4B;AAAA,EACzC,OAAO;AACL,eAAW,KAAK,IAAI,SAAS,oBAAoB;AAC/C,YAAM,YAAY,EAAE,YAAY,MAAM,EAAE,SAAS,OAAO;AACxD,YAAM,KAAK,KAAK,EAAE,IAAI,GAAG,SAAS,EAAE;AAAA,IACtC;AAAA,EACF;AACA,QAAM,KAAK,EAAE;AAEb,MAAI,IAAI,SAAS,kBAAkB,QAAW;AAC5C,UAAM,KAAK,qBAAqB;AAChC,QAAI,IAAI,SAAS,cAAc,WAAW,GAAG;AAC3C,YAAM,KAAK,oCAAoC;AAAA,IACjD,OAAO;AACL,iBAAW,MAAM,IAAI,SAAS,eAAe;AAC3C,cAAM,MAAM,GAAG,MAAM,WAAM,GAAG,GAAG,KAAK;AACtC,cAAM,MAAM,GAAG,WAAW,MAAM,GAAG,QAAQ,KAAK;AAChD,cAAM,KAAK,OAAO,GAAG,KAAK,OAAO,GAAG,KAAK,GAAG,GAAG,IAAI,GAAG,EAAE;AAAA,MAC1D;AAAA,IACF;AACA,UAAM,KAAK,EAAE;AAAA,EACf;AAEA,SAAO,MAAM,KAAK,IAAI,EAAE,QAAQ,IAAI;AACtC;AAaO,SAAS,uBACd,gBACA,KACQ;AACR,MAAI,OAAO,mBAAmB,YAAY,eAAe,KAAK,EAAE,SAAS,GAAG;AAC1E,WAAOC,MAAK,QAAQ,eAAe,KAAK,CAAC;AAAA,EAC3C;AACA,QAAM,cAAc,QAAQ,SAAY,WAAW,aAAa,IAAI,IAAI,cAAc,KAAK;AAC3F,MAAI,cAAc,WAAW,SAAS,GAAG;AACvC,WAAOA,MAAK,KAAK,YAAY,WAAW;AAAA,EAC1C;AACA,QAAM,OAAO,QAAQ,SACjB,eAAe,IACf,IAAI,QAAQ,IAAI,eAAe,GAAG,QAAQ;AAC9C,SAAOA,MAAK,KAAK,MAAM,WAAW,WAAW;AAC/C;AAGO,SAAS,iBAAiB,MAAY,SAA8B,YAAoB;AAC7F,QAAM,MAAM,KAAK,YAAY,EAAE,MAAM,GAAG,EAAE;AAC1C,SAAO,WAAW,SAAS,GAAG,GAAG,UAAU,GAAG,GAAG;AACnD;","names":["readFile","path","from","readFile","end","path"]}

package/dist/{chunk-XFND63OB.js → chunk-AHGOOZUC.js}

@@ -1,6 +1,6 @@
 import {
   StorageManager
-} from "./chunk-6W3QH3QW.js";
+} from "./chunk-JIJAWTRK.js";
 import {
   keyring_exports,
   secureStoreDir
@@ -416,4 +416,4 @@ export {
   resolveNamespaceStorageRoot,
   NamespaceStorageRouter
 };
-//# sourceMappingURL=chunk-XFND63OB.js.map
+//# sourceMappingURL=chunk-AHGOOZUC.js.map

package/dist/{chunk-A7AISUJI.js → chunk-AJG2TAMR.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-PQVCH2AE.js";
 import {
   EngramAccessInputError
-} from "./chunk-3MUKQQ7A.js";
+} from "./chunk-LGEH473S.js";
 
 // src/deep-recall-config.ts
 var DEEP_RECALL_CONFIG_DEFAULTS = {
@@ -100,4 +100,4 @@ export {
   parseDeepRecallMaxSteps,
   resolveEffectiveDeepRecallConfig
 };
-//# sourceMappingURL=chunk-A7AISUJI.js.map
+//# sourceMappingURL=chunk-AJG2TAMR.js.map