@remnic/core 10.0.49 → 10.0.51

package/dist/chunk-G6A3SGCE.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/storage/entity-canonical-id-migration.ts"],"sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport {\n  access,\n  lstat,\n  readFile,\n  readdir,\n  realpath,\n  rename,\n  stat as statFile,\n  unlink,\n  writeFile,\n} from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { lstatSync, readFileSync } from \"node:fs\";\nimport { z } from \"zod\";\nimport { computeSupersessionKey, normalizeSupersessionKey } from \"../temporal-supersession.js\";\nimport type { EntityFile, MemoryFile } from \"../types.js\";\nimport { log } from \"../logger.js\";\nimport { isErrnoCode } from \"../utils/errno.js\";\nimport { withHeldFileLock } from \"../utils/serialize-mutations.js\";\nimport { RECALL_FALLBACK_DIRS } from \"../utils/category-dir.js\";\nimport { assertPathInsideRoot } from \"../utils/path-containment.js\";\nimport { withEntityCanonicalMutationLock } from \"./entity-canonical-id-lock.js\";\nimport { assertSafeEntityId } from \"./entity-id-safety.js\";\nimport { isMalformedEntityRecord } from \"../utils/malformed-entity-record.js\";\nimport {\n  isMacOsReplicationJunkBasename,\n  warnIgnoredMacOsReplicationJunk,\n} from \"../utils/macos-replication-junk.js\";\n\nimport {\n  ENTITY_CANONICAL_ID_MIGRATION_FILE,\n  ENTITY_CANONICAL_ID_RECONCILE_CONSUMING_MARKER,\n  ENTITY_CANONICAL_ID_RECONCILE_MARKER,\n  resolveHistoricalEntityCanonicalId,\n} from \"./entity-canonical-id-references.js\";\n\nconst ENTITY_CANONICAL_ID_MIGRATION_VERSION = 1;\nconst ENTITY_CANONICAL_ID_MIGRATION_LOCK_STALE_MS = 60_000;\nconst ENTITY_CANONICAL_ID_MIGRATION_LOCK_MAX_WAIT_MS = 300_000;\nconst TOMBSTONE_LOCK_STALE_MS = 30_000;\nconst TOMBSTONE_LOCK_MAX_WAIT_MS = 5_000;\nconst MEMORY_REWRITE_MAX_PASSES = 3;\nconst ENTITY_MAPPING_RESCAN_MAX_PASSES = 3;\n\nconst EntityCanonicalIdMigrationStateSchema = z.object({\n  version: z.literal(ENTITY_CANONICAL_ID_MIGRATION_VERSION),\n  complete: z.boolean(),\n  mappings: z.record(z.string(), z.string().min(1)),\n  completionFingerprint: z.string().optional(),\n  /**\n   * Pairs the migration refused to resolve, PARKED rather than dropped.\n   * Deleting the record would strand the collision: once an operator removes\n   * the legacy file, no later scan can rediscover the mapping, so references\n   * still naming the legacy id would never be rewritten. Optional so a journal\n   * written by an older build still parses.\n   */\n  blocked: z.record(z.string(), z.string().min(1)).optional(),\n});\n\ntype EntityCanonicalIdMigrationState = z.infer<typeof EntityCanonicalIdMigrationStateSchema>;\n\nexport interface EntityCanonicalIdMigrationDependencies {\n  stateDir: string;\n  entitiesDir: string;\n  normalizeEntityName(raw: string, type: string): string;\n  resolveEntityFilePath(id: string): string | null;\n  readStorageSecureFile(filePath: string): Promise<string>;\n  writeStorageSecureFile(filePath: string, content: string, forceEncrypt?: boolean): Promise<void>;\n  isEncryptedStorageFile(filePath: string): Promise<boolean>;\n  snapshotBeforeWrite(filePath: string, trigger: \"write\"): Promise<void>;\n  parseEntityFile(content: string): EntityFile;\n  serializeEntityFile(entity: EntityFile): string;\n  serializeMemoryWithEntityRef(memory: MemoryFile, entityRef: string): string;\n  readMemoryByPath(filePath: string): Promise<MemoryFile | null>;\n  readAllMemories(): Promise<MemoryFile[]>;\n  readAllColdMemories(): Promise<MemoryFile[]>;\n  readArchivedMemories(): Promise<MemoryFile[]>;\n  validateMemoryScanRoots?(): Promise<void>;\n  rewriteProjectedEntityReferences(mappings: Readonly<Record<string, string>>): Promise<void>;\n  rewriteProjectedMemoryEntityReference(\n    memoryId: string,\n    previousEntityRef: string,\n    nextEntityRef: string,\n  ): Promise<void>;\n  invalidateKnowledgeIndexCache(): void;\n  invalidateAllMemoriesCache(): void;\n  invalidateColdMemoriesCache(): void;\n  bumpMemoryStatusVersion(): void;\n  readMigrationFingerprint?(): Promise<string>;\n}\n\nasync function fingerprintPath(filePath: string): Promise<string> {\n  let fileStat;\n  try {\n    fileStat = await lstat(filePath);\n  } catch (error) {\n    if (!isErrnoCode(error, \"ENOENT\")) throw error;\n  }\n  return fileStat\n    ? `${fileStat.dev}:${fileStat.ino}:${fileStat.mtimeMs}:${fileStat.ctimeMs}:${fileStat.size}`\n    : \"missing\";\n}\n\nasync function fingerprintEntityEntries(entitiesDir: string): Promise<string> {\n  let names: string[];\n  try {\n    names = (await readdir(entitiesDir))\n      .filter((name) => path.extname(name) === \".md\" && !isMacOsReplicationJunkBasename(name))\n      .sort();\n  } catch (error) {\n    if (isErrnoCode(error, \"ENOENT\")) return \"missing\";\n    throw error;\n  }\n  const hash = createHash(\"sha256\");\n  for (const name of names) {\n    hash.update(`${name.length}:${name}:`);\n    try {\n      const entry = await lstat(path.join(entitiesDir, name), { bigint: true });\n      hash.update(`${entry.dev}:${entry.ino}:${entry.size}:${entry.mtimeNs}:${entry.ctimeNs}`);\n    } catch (error) {\n      if (!isErrnoCode(error, \"ENOENT\")) throw error;\n      hash.update(\"missing\");\n    }\n    hash.update(\"\\n\");\n  }\n  return hash.digest(\"hex\");\n}\n\n/**\n * Completion fingerprint for migration inputs only. Entity entry identities\n * catch same-path edits that do not change the directory inode; the cooperative\n * sentinel covers managed writes. Memory-corpus writes stay excluded so plain\n * fact writes do not reopen migration.\n */\nexport async function getFingerprint(\n  baseDir: string,\n  entitiesDir: string,\n  getEntityMutationVersion: () => string,\n): Promise<string> {\n  const [\n    entityDirectoryFingerprint,\n    entityEntriesFingerprint,\n    aliasFingerprint,\n    reconcileFingerprint,\n    consumingFingerprint,\n  ] = await Promise.all([\n    fingerprintPath(entitiesDir),\n    fingerprintEntityEntries(entitiesDir),\n    fingerprintPath(path.join(baseDir, \"config\", \"aliases.json\")),\n    fingerprintPath(path.join(baseDir, \"state\", ENTITY_CANONICAL_ID_RECONCILE_MARKER)),\n    fingerprintPath(path.join(baseDir, \"state\", ENTITY_CANONICAL_ID_RECONCILE_CONSUMING_MARKER)),\n  ]);\n  return [\n    entityDirectoryFingerprint,\n    entityEntriesFingerprint,\n    aliasFingerprint,\n    reconcileFingerprint,\n    consumingFingerprint,\n    getEntityMutationVersion(),\n  ].join(\":\");\n}\n\nexport async function validateRoots(\n  baseDir: string,\n  entitiesDir: string,\n  stateDir: string,\n  archiveDir: string,\n): Promise<void> {\n  let baseStat;\n  try {\n    baseStat = await lstat(baseDir);\n  } catch (error) {\n    if (isErrnoCode(error, \"ENOENT\")) return;\n    throw error;\n  }\n  if (baseStat.isSymbolicLink() || !baseStat.isDirectory()) {\n    throw new Error(`Refusing entity canonical-id migration through unsafe memory root: ${baseDir}.`);\n  }\n  const memoryRoot = await realpath(baseDir);\n  const roots = [\n    entitiesDir,\n    stateDir,\n    ...RECALL_FALLBACK_DIRS.map((directory) => path.join(baseDir, directory)),\n    path.join(baseDir, \"cold\"),\n    archiveDir,\n  ];\n  for (const root of roots) {\n    let rootStat;\n    try {\n      rootStat = await lstat(root);\n    } catch (error) {\n      if (isErrnoCode(error, \"ENOENT\")) continue;\n      throw error;\n    }\n    if (rootStat.isSymbolicLink() || !rootStat.isDirectory()) {\n      throw new Error(`Refusing entity canonical-id migration through unsafe memory root: ${root}.`);\n    }\n    assertPathInsideRoot(memoryRoot, await realpath(root), root);\n  }\n}\n\nfunction statePath(deps: EntityCanonicalIdMigrationDependencies): string {\n  return path.join(deps.stateDir, ENTITY_CANONICAL_ID_MIGRATION_FILE);\n}\n\nasync function assertSafeMigrationStateFile(\n  deps: EntityCanonicalIdMigrationDependencies,\n): Promise<void> {\n  const migrationStatePath = statePath(deps);\n  let fileStat;\n  try {\n    fileStat = await lstat(migrationStatePath);\n  } catch (error) {\n    if (isErrnoCode(error, \"ENOENT\")) return;\n    throw error;\n  }\n  if (fileStat.isSymbolicLink() || !fileStat.isFile()) {\n    throw new Error(\n      `Refusing entity canonical-id migration through unsafe migration state file: ${migrationStatePath}.`,\n    );\n  }\n  const [stateRoot, stateFile] = await Promise.all([\n    realpath(deps.stateDir),\n    realpath(migrationStatePath),\n  ]);\n  assertPathInsideRoot(stateRoot, stateFile, migrationStatePath);\n}\nasync function assertSafeTombstoneFile(\n  deps: EntityCanonicalIdMigrationDependencies,\n  tombstonePath: string,\n): Promise<boolean> {\n  let fileStat;\n  try {\n    fileStat = await lstat(tombstonePath);\n  } catch (error) {\n    if (isErrnoCode(error, \"ENOENT\")) return false;\n    throw error;\n  }\n  if (fileStat.isSymbolicLink() || !fileStat.isFile()) {\n    throw new Error(\n      `Refusing entity canonical-id migration through unsafe tombstone ledger: ${tombstonePath}.`,\n    );\n  }\n  const [stateRoot, tombstoneFile] = await Promise.all([\n    realpath(deps.stateDir),\n    realpath(tombstonePath),\n  ]);\n  assertPathInsideRoot(stateRoot, tombstoneFile, tombstonePath);\n  return true;\n}\n\nfunction lockPath(deps: EntityCanonicalIdMigrationDependencies): string {\n  return path.join(deps.stateDir, \"entity-canonical-id-migration.lock\");\n}\n\n\nasync function readState(\n  deps: EntityCanonicalIdMigrationDependencies\n): Promise<EntityCanonicalIdMigrationState | null> {\n  await assertSafeMigrationStateFile(deps);\n  let raw: string;\n  try {\n    raw = await readFile(statePath(deps), \"utf-8\");\n  } catch (error) {\n    if (isErrnoCode(error, \"ENOENT\")) return null;\n    throw error;\n  }\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    throw new Error(\"Invalid entity canonical-id migration state.\");\n  }\n  const result = EntityCanonicalIdMigrationStateSchema.safeParse(parsed);\n  if (!result.success) throw new Error(\"Invalid entity canonical-id migration state.\");\n  for (const mappings of [result.data.mappings, result.data.blocked ?? {}]) {\n    for (const [legacyId, canonicalId] of Object.entries(mappings)) {\n      assertSafeEntityId(legacyId);\n      assertSafeEntityId(canonicalId);\n    }\n  }\n  return result.data;\n}\n\nasync function writeState(\n  deps: EntityCanonicalIdMigrationDependencies,\n  state: EntityCanonicalIdMigrationState\n): Promise<void> {\n  const destination = statePath(deps);\n  const temporary = `${destination}.${process.pid}.${randomUUID()}.tmp`;\n  try {\n    await writeFile(temporary, `${JSON.stringify(state, null, 2)}\\n`, \"utf-8\");\n    await rename(temporary, destination);\n  } finally {\n    await unlink(temporary).catch(() => undefined);\n  }\n}\n\n/**\n * Every journal publish — additive merges, completion markers, prunes —\n * serializes under the entity MUTATION lock (issue #2213 review): entity\n * writers, post-persist repair settles, and tombstone appends revalidate\n * the journal identity under that lock, so an unlocked publish could land\n * inside their resolve→write window and strand the write on a superseded\n * id space.\n */\nasync function publishState(\n  deps: EntityCanonicalIdMigrationDependencies,\n  state: EntityCanonicalIdMigrationState\n): Promise<void> {\n  await withEntityCanonicalMutationLock(deps.stateDir, async () => {\n    await writeState(deps, state);\n  });\n}\n\nasync function fileExists(filePath: string): Promise<boolean> {\n  try {\n    await access(filePath);\n    return true;\n  } catch (error) {\n    if (isErrnoCode(error, \"ENOENT\")) return false;\n    throw error;\n  }\n}\n\nasync function sameFileIdentity(leftPath: string, rightPath: string): Promise<boolean> {\n  try {\n    const [left, right] = await Promise.all([statFile(leftPath), statFile(rightPath)]);\n    return left.dev === right.dev && left.ino === right.ino;\n  } catch (error) {\n    if (isErrnoCode(error, \"ENOENT\")) return false;\n    throw error;\n  }\n}\n\nasync function assertNotSymlink(filePath: string, label: string): Promise<void> {\n  let stat;\n  try {\n    stat = await lstat(filePath);\n  } catch (error) {\n    if (isErrnoCode(error, \"ENOENT\")) return;\n    throw error;\n  }\n  if (stat.isSymbolicLink()) {\n    throw new Error(`Refusing entity canonical-id migration through symlink: ${label}.`);\n  }\n}\nasync function assertNotMemorySymlink(filePath: string): Promise<void> {\n  let stat;\n  try {\n    stat = await lstat(filePath);\n  } catch (error) {\n    if (isErrnoCode(error, \"ENOENT\")) return;\n    throw error;\n  }\n  if (stat.isSymbolicLink()) {\n    throw new Error(`Refusing entity canonical-id migration through symlinked memory: ${filePath}.`);\n  }\n}\nasync function assertEntityContentUnchanged(\n  deps: EntityCanonicalIdMigrationDependencies,\n  filePath: string,\n  expectedContent: string,\n  legacyId: string,\n): Promise<void> {\n  const latestContent = await deps.readStorageSecureFile(filePath);\n  if (latestContent !== expectedContent) {\n    throw new Error(`Legacy entity id ${legacyId} changed while migration was running; retry migration.`);\n  }\n}\n\n/**\n * Fail-closed entity-entry validation for the startup path: refuses a\n * symlinked or non-directory entities root and any symlinked entry, without\n * taking the migration lock. Exported so `ensureDirectories()` can run it\n * before deferring the migration (#3139) — the same check\n * `migrateLegacyEntityCanonicalIds` performs under the lock.\n */\nexport async function readSafeEntityEntries(entitiesDir: string): Promise<string[]> {\n  const rootStat = await lstat(entitiesDir);\n  if (rootStat.isSymbolicLink() || !rootStat.isDirectory()) {\n    throw new Error(\"Refusing entity canonical-id migration through a symlinked or non-directory entities root.\");\n  }\n  const entries = await readdir(entitiesDir);\n  for (const entry of entries) {\n    await assertNotSymlink(path.join(entitiesDir, entry), entry);\n  }\n  return entries;\n}\n\n/**\n * Legacy ids the migration cannot resolve on its own, mapped to the canonical\n * id they collide with. Two entity files describing one entity is an ORDINARY\n * operator state, and picking a winner would silently drop whichever side lost.\n * So the pair is skipped and reported: reads of the legacy id keep working\n * exactly as they did before the migration ran.\n */\nexport type BlockedEntityPairs = Map<string, string>;\n\ninterface EntityScanNotes {\n  junk: Set<string>;\n  malformed: Set<string>;\n}\n\nasync function discoverMappings(\n  deps: EntityCanonicalIdMigrationDependencies,\n  knownMappings: Readonly<Record<string, string>> = {},\n  blocked: BlockedEntityPairs = new Map(),\n  scanNotes?: EntityScanNotes,\n): Promise<Record<string, string>> {\n  const mappings: Record<string, string> = {};\n  const canonicalOwners = new Map<string, string[]>();\n  // Blocks describe THIS scan of the directory, so they are rebuilt per pass.\n  // Accumulating them across a run would let a collision another writer has\n  // since resolved keep pruning its now-valid mapping: the entity file gets\n  // renamed while the pruned mapping skips the reference rewrite, stranding\n  // memories on a filename that no longer exists.\n  blocked.clear();\n  const entityEntries = await readSafeEntityEntries(deps.entitiesDir);\n  for (const entry of entityEntries) {\n    // AppleDouble (`._*`) and `.DS_Store` are Finder metadata, not entity\n    // files. A real file that cannot be parsed is left in place: this scan\n    // runs during directory init, and aborting it took the daemon down.\n    // Skipping is the same outcome as the old throw (the file is not\n    // rewritten) without refusing to boot. Symlink checks above still run.\n    if (isMacOsReplicationJunkBasename(entry)) {\n      scanNotes?.junk.add(entry);\n      continue;\n    }\n    if (!entry.endsWith(\".md\")) continue;\n    const legacyId = entry.slice(0, -\".md\".length);\n    assertSafeEntityId(legacyId);\n    const legacyPath = deps.resolveEntityFilePath(legacyId);\n    if (legacyPath === null) continue;\n    const entityContent = await deps.readStorageSecureFile(legacyPath);\n    if (isMalformedEntityRecord(entityContent)) {\n      scanNotes?.malformed.add(entry);\n      continue;\n    }\n    const entity = deps.parseEntityFile(entityContent);\n    if (!entity.name.trim() || !entity.type.trim()) {\n      scanNotes?.malformed.add(entry);\n      continue;\n    }\n    const canonicalId = deps.normalizeEntityName(entity.name, entity.type);\n    assertSafeEntityId(canonicalId);\n    if (legacyId === canonicalId) continue;\n    const canonicalPath = deps.resolveEntityFilePath(canonicalId);\n    if (canonicalPath === null) continue;\n    const canonicalExists = await fileExists(canonicalPath);\n    if (\n      canonicalExists\n      && await sameFileIdentity(legacyPath, canonicalPath)\n      && knownMappings[legacyId] === canonicalId\n    ) continue;\n    if (canonicalExists) {\n      const canonicalContent = await deps.readStorageSecureFile(canonicalPath);\n      if (entityContent !== canonicalContent) {\n        blocked.set(legacyId, canonicalId);\n        continue;\n      }\n    }\n    canonicalOwners.set(canonicalId, [...(canonicalOwners.get(canonicalId) ?? []), legacyId]);\n    mappings[legacyId] = canonicalId;\n  }\n  // A canonical id claimed by more than one legacy file has no non-arbitrary\n  // winner, and readdir order is not stable (§6) - so the \"winner\" would differ\n  // between hosts reading identical data. Block every claimant instead.\n  for (const [canonicalId, claimants] of canonicalOwners) {\n    if (claimants.length < 2) continue;\n    for (const legacyId of claimants) {\n      blocked.set(legacyId, canonicalId);\n      delete mappings[legacyId];\n    }\n  }\n  return mappings;\n}\n\nasync function rewriteReferences(\n  deps: EntityCanonicalIdMigrationDependencies,\n  mappings: Readonly<Record<string, string>>,\n  refreshLock: () => Promise<boolean>\n): Promise<{ rewroteColdMemory: boolean }> {\n  let rewroteColdMemory = false;\n  for (let pass = 0; pass < MEMORY_REWRITE_MAX_PASSES; pass += 1) {\n    deps.invalidateAllMemoriesCache();\n    deps.invalidateColdMemoriesCache();\n    const [hotMemories, coldMemories, archivedMemories] = await Promise.all([\n      deps.readAllMemories(),\n      deps.readAllColdMemories(),\n      deps.readArchivedMemories(),\n    ]);\n    const seenPaths = new Set<string>();\n    let rewroteAny = false;\n    for (const memory of [...hotMemories, ...coldMemories, ...archivedMemories]) {\n      const memoryPath = path.resolve(memory.path);\n      if (seenPaths.has(memoryPath)) continue;\n      seenPaths.add(memoryPath);\n      const previousEntityRef = memory.frontmatter.entityRef;\n      const canonicalId = previousEntityRef ? mappings[previousEntityRef] : undefined;\n      if (!previousEntityRef || !canonicalId) continue;\n      await assertNotMemorySymlink(memory.path);\n      const observedMemoryFingerprint = await fingerprintPath(memory.path);\n      if (observedMemoryFingerprint === \"missing\") continue;\n      if (!(await refreshLock())) throw new Error(\"Lost entity canonical-id migration lock.\");\n      const latestMemory = await deps.readMemoryByPath(memory.path);\n      if (!latestMemory) continue;\n      const latestMemoryFingerprint = await fingerprintPath(latestMemory.path);\n      if (latestMemoryFingerprint !== observedMemoryFingerprint) continue;\n      const latestPreviousEntityRef = latestMemory.frontmatter.entityRef;\n      const latestCanonicalId = latestPreviousEntityRef ? mappings[latestPreviousEntityRef] : undefined;\n      if (!latestPreviousEntityRef || !latestCanonicalId) continue;\n      const memoryEncrypted = await deps.isEncryptedStorageFile(latestMemory.path);\n      if ((await fingerprintPath(latestMemory.path)) !== latestMemoryFingerprint) continue;\n      await deps.snapshotBeforeWrite(latestMemory.path, \"write\");\n      if ((await fingerprintPath(latestMemory.path)) !== latestMemoryFingerprint) continue;\n      await deps.writeStorageSecureFile(\n        latestMemory.path,\n        deps.serializeMemoryWithEntityRef(latestMemory, latestCanonicalId),\n        memoryEncrypted,\n      );\n      await deps.rewriteProjectedMemoryEntityReference(\n        latestMemory.frontmatter.id,\n        latestPreviousEntityRef,\n        latestCanonicalId,\n      );\n      rewroteAny = true;\n      rewroteColdMemory ||= latestMemory.path.includes(`${path.sep}cold${path.sep}`);\n    }\n    if (!rewroteAny) return { rewroteColdMemory };\n  }\n  throw new Error(\"Memory references changed while entity canonical-id migration was running; retry migration.\");\n}\n\nfunction rewriteTombstoneLine(\n  line: string,\n  mappings: Readonly<Record<string, string>>,\n  normalizedMappings: ReadonlyMap<string, string>,\n): string {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(line);\n  } catch {\n    return line;\n  }\n  if (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) return line;\n\n  const tombstone = parsed as Record<string, unknown>;\n  let changed = false;\n  if (typeof tombstone.entityRef === \"string\") {\n    const canonicalId = mappings[tombstone.entityRef];\n    if (canonicalId) {\n      tombstone.entityRef = canonicalId;\n      changed = true;\n    }\n  }\n  if (typeof tombstone.supersessionKey === \"string\") {\n    const separator = tombstone.supersessionKey.indexOf(\"::\");\n    if (separator < 0) return changed ? JSON.stringify(tombstone) : line;\n    const normalizedLegacyId = normalizeSupersessionKey(tombstone.supersessionKey.slice(0, separator));\n    const canonicalId = normalizedMappings.get(normalizedLegacyId);\n    if (canonicalId) {\n      const canonicalKey = computeSupersessionKey(canonicalId, tombstone.supersessionKey.slice(separator + 2));\n      if (canonicalKey) {\n        tombstone.supersessionKey = canonicalKey;\n        changed = true;\n      }\n    }\n  }\n  return changed ? JSON.stringify(tombstone) : line;\n}\n\nasync function rewriteTombstoneReferences(\n  deps: EntityCanonicalIdMigrationDependencies,\n  mappings: Readonly<Record<string, string>>,\n  refreshLock: () => Promise<boolean>\n): Promise<void> {\n  const tombstonePath = path.join(deps.stateDir, \"tombstones.jsonl\");\n  const normalizedMappings = new Map<string, string>();\n  for (const [legacyId, canonicalId] of Object.entries(mappings)) {\n    const normalizedLegacyId = normalizeSupersessionKey(legacyId);\n    if (normalizedLegacyId && !normalizedMappings.has(normalizedLegacyId)) {\n      normalizedMappings.set(normalizedLegacyId, canonicalId);\n    }\n  }\n\n  await withHeldFileLock(\n    path.join(deps.stateDir, \"tombstones.lock\"),\n    {\n      staleMs: TOMBSTONE_LOCK_STALE_MS,\n      maxWaitMs: TOMBSTONE_LOCK_MAX_WAIT_MS,\n    },\n    async (acquired, tombstoneLock) => {\n      if (!acquired) throw new Error(\"Timed out waiting for active tombstone migration.\");\n      if (!(await assertSafeTombstoneFile(deps, tombstonePath))) return;\n      const tombstoneEncrypted = await deps.isEncryptedStorageFile(tombstonePath);\n      const original = await deps.readStorageSecureFile(tombstonePath);\n      let changed = false;\n      const rewritten = original\n        .split(\"\\n\")\n        .map((line) => {\n          const next = rewriteTombstoneLine(line, mappings, normalizedMappings);\n          changed ||= next !== line;\n          return next;\n        })\n        .join(\"\\n\");\n      if (!changed) return;\n      if (!(await refreshLock())) throw new Error(\"Lost entity canonical-id migration lock.\");\n      if (!(await tombstoneLock.refresh())) throw new Error(\"Lost tombstone migration lock.\");\n      await deps.snapshotBeforeWrite(tombstonePath, \"write\");\n      await deps.writeStorageSecureFile(tombstonePath, rewritten, tombstoneEncrypted);\n    },\n  );\n}\n\nasync function rewriteRelationshipTargets(\n  deps: EntityCanonicalIdMigrationDependencies,\n  mappings: Readonly<Record<string, string>>,\n  refreshLock: () => Promise<boolean>\n): Promise<boolean> {\n  let rewritten = false;\n  const entries = await readSafeEntityEntries(deps.entitiesDir);\n  for (const entry of entries) {\n    if (!entry.endsWith(\".md\") || isMacOsReplicationJunkBasename(entry)) continue;\n    const entityPath = deps.resolveEntityFilePath(entry.slice(0, -\".md\".length));\n    if (entityPath === null) continue;\n    const observedEntityFingerprint = await fingerprintPath(entityPath);\n    if (observedEntityFingerprint === \"missing\") continue;\n    const entityRaw = await deps.readStorageSecureFile(entityPath);\n    if (isMalformedEntityRecord(entityRaw)) continue;\n    const entity = deps.parseEntityFile(entityRaw);\n    const relationships = entity.relationships.map((relationship) => {\n      const target = mappings[relationship.target];\n      return target ? { ...relationship, target } : relationship;\n    });\n    if (relationships.every((relationship, index) => relationship === entity.relationships[index])) continue;\n    const rewroteEntity = await withEntityCanonicalMutationLock(\n      deps.stateDir,\n      async (refreshEntityLock) => {\n        if (!(await refreshLock())) throw new Error(\"Lost entity canonical-id migration lock.\");\n        const latestRaw = await deps.readStorageSecureFile(entityPath);\n        if (isMalformedEntityRecord(latestRaw)) return false;\n        const latestEntity = deps.parseEntityFile(latestRaw);\n        if ((await fingerprintPath(entityPath)) !== observedEntityFingerprint) return false;\n        const latestRelationships = latestEntity.relationships.map((relationship) => {\n          const target = mappings[relationship.target];\n          return target ? { ...relationship, target } : relationship;\n        });\n        if (latestRelationships.every((relationship, index) => relationship === latestEntity.relationships[index])) {\n          return false;\n        }\n        const entityEncrypted = await deps.isEncryptedStorageFile(entityPath);\n        if (!(await refreshEntityLock())) throw new Error(\"Lost entity mutation lock.\");\n        if ((await fingerprintPath(entityPath)) !== observedEntityFingerprint) return false;\n        await deps.snapshotBeforeWrite(entityPath, \"write\");\n        if ((await fingerprintPath(entityPath)) !== observedEntityFingerprint) return false;\n        await deps.writeStorageSecureFile(\n          entityPath,\n          deps.serializeEntityFile({ ...latestEntity, relationships: latestRelationships }),\n          entityEncrypted,\n        );\n        return true;\n      },\n    );\n    rewritten ||= rewroteEntity;\n  }\n  return rewritten;\n}\n\nasync function rewriteKnownReferences(\n  deps: EntityCanonicalIdMigrationDependencies,\n  mappings: Readonly<Record<string, string>>,\n  refreshLock: () => Promise<boolean>,\n): Promise<boolean> {\n  await rewriteRelationshipTargets(deps, mappings, refreshLock);\n  let rewroteColdMemory = (await rewriteReferences(deps, mappings, refreshLock)).rewroteColdMemory;\n  await rewriteTombstoneReferences(deps, mappings, refreshLock);\n  await deps.rewriteProjectedEntityReferences(mappings);\n  const finalMemoryPass = await rewriteReferences(deps, mappings, refreshLock);\n  rewroteColdMemory ||= finalMemoryPass.rewroteColdMemory;\n  return rewroteColdMemory;\n}\n\nfunction wouldCreateMappingCycle(\n  mappings: Readonly<Record<string, string>>,\n  legacyId: string,\n  canonicalId: string,\n): boolean {\n  let current = canonicalId;\n  const seen = new Set<string>();\n  while (true) {\n    if (current === legacyId) return true;\n    if (seen.has(current)) return false;\n    seen.add(current);\n    const next = mappings[current];\n    if (!next || next === current) return false;\n    current = next;\n  }\n}\n\nfunction rejectMappingCycles(\n  existing: Readonly<Record<string, string>>,\n  discovered: Readonly<Record<string, string>>,\n): Record<string, string> {\n  const accepted: Record<string, string> = {};\n  const merged = { ...existing };\n  for (const [legacyId, canonicalId] of Object.entries(discovered)) {\n    if (\n      merged[legacyId] === undefined &&\n      wouldCreateMappingCycle(merged, legacyId, canonicalId)\n    ) continue;\n    accepted[legacyId] = canonicalId;\n    merged[legacyId] = canonicalId;\n  }\n  return accepted;\n}\n\nfunction mergeDiscoveredMappings(\n  existing: Readonly<Record<string, string>>,\n  discovered: Readonly<Record<string, string>>,\n): Record<string, string> {\n  const merged = { ...existing };\n  const canonicalOwners = new Map<string, string>();\n  for (const [legacyId, canonicalId] of Object.entries(discovered)) {\n    const previousMapping = merged[legacyId];\n    if (previousMapping !== undefined && previousMapping !== canonicalId) {\n      continue;\n    }\n    if (previousMapping === undefined && wouldCreateMappingCycle(merged, legacyId, canonicalId)) continue;\n    const previousOwner = canonicalOwners.get(canonicalId);\n    if (previousOwner !== undefined && previousOwner !== legacyId) {\n      throw new Error(\n        `Cannot migrate legacy entity ids ${previousOwner} and ${legacyId}: both normalize to ${canonicalId}.`,\n      );\n    }\n    merged[legacyId] = canonicalId;\n    canonicalOwners.set(canonicalId, legacyId);\n  }\n  return merged;\n}\nfunction collapseMappings(mappings: Readonly<Record<string, string>>): Record<string, string> {\n  const collapsed: Record<string, string> = {};\n  for (const legacyId of Object.keys(mappings)) {\n    let current = legacyId;\n    const seen = new Set<string>();\n    while (true) {\n      const next = mappings[current];\n      if (!next || next === current) break;\n      if (seen.has(current)) {\n        throw new Error(`Entity canonical-id migration mapping cycle includes ${legacyId}.`);\n      }\n      seen.add(current);\n      current = next;\n    }\n    if (current !== legacyId) collapsed[legacyId] = current;\n  }\n  return collapsed;\n}\n\ntype EntityFileMigrationResult = {\n  deferred: boolean;\n  progressed: boolean;\n  /** The pair collided on content; skipped and reported, never migrated. */\n  blocked?: boolean;\n};\n\nasync function migrateEntityFilePair(\n  deps: EntityCanonicalIdMigrationDependencies,\n  legacyId: string,\n  canonicalId: string,\n  refreshMigrationLock: () => Promise<boolean>,\n): Promise<EntityFileMigrationResult> {\n  return withEntityCanonicalMutationLock(deps.stateDir, async (refreshEntityLock) => {\n    assertSafeEntityId(legacyId);\n    assertSafeEntityId(canonicalId);\n    const legacyPath = deps.resolveEntityFilePath(legacyId);\n    const canonicalPath = deps.resolveEntityFilePath(canonicalId);\n    if (legacyPath === null || canonicalPath === null) {\n      throw new Error(\"Invalid entity canonical-id migration path.\");\n    }\n    await assertNotSymlink(legacyPath, legacyId);\n    await assertNotSymlink(canonicalPath, canonicalId);\n    const legacyExists = await fileExists(legacyPath);\n    const canonicalExists = await fileExists(canonicalPath);\n    if (!legacyExists && !canonicalExists) return { deferred: true, progressed: false };\n    if (legacyExists && canonicalExists) {\n      if (await sameFileIdentity(legacyPath, canonicalPath)) return { deferred: false, progressed: false };\n      const [legacyContent, canonicalContent, legacyEncrypted, canonicalEncrypted] = await Promise.all([\n        deps.readStorageSecureFile(legacyPath),\n        deps.readStorageSecureFile(canonicalPath),\n        deps.isEncryptedStorageFile(legacyPath),\n        deps.isEncryptedStorageFile(canonicalPath),\n      ]);\n      if (legacyContent !== canonicalContent) {\n        // A mapping persisted by an older build, or a file changed since\n        // discovery. Same verdict as discovery: skip the pair, keep both files.\n        return { deferred: false, progressed: false, blocked: true };\n      }\n      if (legacyEncrypted && !canonicalEncrypted) {\n        if (!(await refreshMigrationLock()) || !(await refreshEntityLock())) {\n          throw new Error(\"Lost entity canonical-id migration lock.\");\n        }\n        await deps.snapshotBeforeWrite(canonicalPath, \"write\");\n        await deps.writeStorageSecureFile(canonicalPath, legacyContent, true);\n        if ((await deps.readStorageSecureFile(canonicalPath)) !== legacyContent) {\n          throw new Error(`Cannot verify migrated entity id ${canonicalId}.`);\n        }\n      }\n      if (!(await refreshMigrationLock()) || !(await refreshEntityLock())) {\n        throw new Error(\"Lost entity canonical-id migration lock.\");\n      }\n      await deps.snapshotBeforeWrite(legacyPath, \"write\");\n      await assertNotSymlink(legacyPath, legacyId);\n      await assertEntityContentUnchanged(deps, legacyPath, legacyContent, legacyId);\n      await unlink(legacyPath);\n      return { deferred: false, progressed: true };\n    }\n    if (!legacyExists) return { deferred: false, progressed: false };\n    if (!(await refreshMigrationLock()) || !(await refreshEntityLock())) {\n      throw new Error(\"Lost entity canonical-id migration lock.\");\n    }\n    const entityEncrypted = await deps.isEncryptedStorageFile(legacyPath);\n    const entityContent = await deps.readStorageSecureFile(legacyPath);\n    await assertNotSymlink(legacyPath, legacyId);\n    await assertEntityContentUnchanged(deps, legacyPath, entityContent, legacyId);\n    // A journal entry must not relocate Finder metadata or a record this scan\n    // would leave in place. readStorageSecureFile has already decrypted, so\n    // the check is on that plaintext. The mapping stays for a later repair.\n    if (\n      isMacOsReplicationJunkBasename(path.basename(legacyPath))\n      || isMalformedEntityRecord(entityContent)\n    ) {\n      return { deferred: false, progressed: false };\n    }\n    let canonicalFingerprintAfterWrite: string | null = null;\n    try {\n      await deps.writeStorageSecureFile(canonicalPath, entityContent, entityEncrypted);\n      canonicalFingerprintAfterWrite = await fingerprintPath(canonicalPath);\n      if ((await deps.readStorageSecureFile(canonicalPath)) !== entityContent) {\n        throw new Error(`Cannot verify migrated entity id ${canonicalId}.`);\n      }\n      if (!(await refreshMigrationLock()) || !(await refreshEntityLock())) {\n        throw new Error(\"Lost entity canonical-id migration lock.\");\n      }\n      await deps.snapshotBeforeWrite(legacyPath, \"write\");\n      await assertNotSymlink(legacyPath, legacyId);\n      await assertEntityContentUnchanged(deps, legacyPath, entityContent, legacyId);\n      await unlink(legacyPath);\n    } catch (error) {\n      if (!canonicalExists && canonicalFingerprintAfterWrite !== null) {\n        try {\n          if ((await fingerprintPath(canonicalPath)) === canonicalFingerprintAfterWrite) {\n            await assertNotSymlink(canonicalPath, canonicalId);\n            await unlink(canonicalPath);\n          }\n        } catch {\n          // Preserve the migration error when cleanup races another writer.\n        }\n      }\n      throw error;\n    }\n    return { deferred: false, progressed: true };\n  });\n}\n\nexport async function migrateLegacyEntityCanonicalIds(\n  deps: EntityCanonicalIdMigrationDependencies,\n): Promise<string | undefined> {\n  return withHeldFileLock(\n    lockPath(deps),\n    {\n      staleMs: ENTITY_CANONICAL_ID_MIGRATION_LOCK_STALE_MS,\n      maxWaitMs: ENTITY_CANONICAL_ID_MIGRATION_LOCK_MAX_WAIT_MS,\n    },\n    async (acquired, lock) => {\n      if (!acquired) throw new Error(\"Timed out waiting for active entity canonical-id migration.\");\n      await deps.validateMemoryScanRoots?.();\n      await readSafeEntityEntries(deps.entitiesDir);\n      // A raw-byte writer (offline sync, consolidation-undo, governance\n      // restore) may have landed memory bytes this process never vetted; the\n      // marker requests ONE reference-reconciliation pass (issue #2213). The\n      // observed generation is RENAMED aside before the pass so a request made\n      // WHILE this run scans creates a fresh marker that survives finish() —\n      // and a `.consuming` file left by a crashed run still owes its pass.\n      const reconcileMarkerPath = path.join(deps.stateDir, ENTITY_CANONICAL_ID_RECONCILE_MARKER);\n      const consumingMarkerPath = path.join(deps.stateDir, ENTITY_CANONICAL_ID_RECONCILE_CONSUMING_MARKER);\n      let reconcileRequested = await fileExists(consumingMarkerPath);\n      if (await fileExists(reconcileMarkerPath)) {\n        try {\n          await rename(reconcileMarkerPath, consumingMarkerPath);\n          reconcileRequested = true;\n        } catch (error) {\n          if (!isErrnoCode(error, \"ENOENT\")) throw error;\n        }\n      }\n      let state: EntityCanonicalIdMigrationState = await readState(deps) ?? {\n        version: ENTITY_CANONICAL_ID_MIGRATION_VERSION,\n        complete: false,\n        mappings: {},\n      };\n      const blocked: BlockedEntityPairs = new Map();\n      const scanNotes: EntityScanNotes = { junk: new Set(), malformed: new Set() };\n      // Parks for pairs whose files are GONE, tracked separately from\n      // collision parks: pruneBlocked drops these (the canonical file is gone\n      // too), and the rescan's blocked.clear() would otherwise silence them\n      // before finish() reports anything.\n      const staleParked: BlockedEntityPairs = new Map();\n      // ONE aggregated line per run, not one per pair per restart: this used to\n      // abort the daemon, so the operator needs the whole list and the remedy.\n      const finish = async (): Promise<string | undefined> => {\n        if (blocked.size > 0) {\n          const pairs = [...blocked].map(([legacyId, canonicalId]) => `${legacyId} -> ${canonicalId}`).join(\", \");\n          log.warn(\n            `entity canonical-id migration skipped ${blocked.size} unresolvable pair(s): ${pairs}. `\n            + \"Both files were kept and the legacy id still resolves; merge or delete one side to migrate it.\",\n          );\n        }\n        if (staleParked.size > 0) {\n          const pairs = [...staleParked].map(([legacyId, canonicalId]) => `${legacyId} -> ${canonicalId}`).join(\", \");\n          log.warn(\n            `entity canonical-id migration dropped ${staleParked.size} mapping(s) whose entity files are gone: ${pairs}. `\n            + \"The stale journal entries were removed; references to those legacy ids do not resolve either way.\",\n          );\n        }\n        warnIgnoredMacOsReplicationJunk(deps.entitiesDir, scanNotes.junk.size, (message) => {\n          log.warn(`entity canonical-id migration ${message}`);\n        });\n        if (scanNotes.malformed.size > 0) {\n          const names = [...scanNotes.malformed].sort().join(\", \");\n          log.warn(\n            `entity canonical-id migration skipped ${scanNotes.malformed.size} malformed entity file(s): ${names}. `\n            + \"Each file was left in place; startup continues. Fix or remove the file to migrate it.\",\n          );\n        }\n        // Every finish() path either just rewrote references (main/reconcile\n        // paths), has none to rewrite (empty mappings), or observed no marker\n        // (stable no-op) — so the CONSUMED generation is removed here. A fresh\n        // marker written mid-run is untouched, and a crash before this point\n        // leaves `.consuming` set for the next run (the rewrite is idempotent).\n        if (reconcileRequested) {\n          await unlink(consumingMarkerPath).catch((error: unknown) => {\n            if (!isErrnoCode(error, \"ENOENT\")) throw error;\n          });\n        }\n        // A FRESH marker written while this run scanned means bytes landed the\n        // pass may not have covered. Withholding the completion fingerprint\n        // makes the runner's stability check fail, so it immediately retries —\n        // and the retry consumes the fresh generation. ORDER MATTERS: read the\n        // fingerprint BEFORE the marker check. A marker landing after the\n        // fingerprint read but before the check is caught by the check; one\n        // landing after the check is absent from the returned fingerprint, so\n        // the live marker mismatches the runner's cached completion and the\n        // next ensure() re-invokes. Checking first left a window where the\n        // fingerprint could SEAL a marker the check never saw.\n        const completionFingerprint = await deps.readMigrationFingerprint?.();\n        if (await fileExists(reconcileMarkerPath)) return undefined;\n        if (completionFingerprint !== undefined && state.completionFingerprint !== completionFingerprint) {\n          state = { ...state, complete: true, completionFingerprint };\n          await publishState(deps, state);\n        }\n        return completionFingerprint;\n      };\n      /**\n       * Drop blocked pairs from the working set. Discovery only refuses to\n       * ADD them; a mapping persisted by an earlier run would otherwise still\n       * be applied - migrating one claimant and rewriting every reference onto\n       * the canonical file, i.e. picking the winner this fix exists to avoid,\n       * off stale state rather than what is on disk.\n       */\n      /** @returns true when a park was promoted back into the mapping set. */\n      const pruneBlocked = async (): Promise<boolean> => {\n        const current = state;\n        if (!current) return false;\n        // THIS scan's verdict wins over the journal: normalization can change\n        // between runs, so a stale parked target would otherwise be promoted\n        // later and rewrite references onto an id that does not exist.\n        let revived = false;\n        const parked: Record<string, string> = { ...(current.blocked ?? {}) };\n        const active: Record<string, string> = {};\n        for (const [legacyId, canonicalId] of Object.entries(current.mappings)) {\n          if (!blocked.has(legacyId)) active[legacyId] = canonicalId;\n        }\n        for (const [legacyId, canonicalId] of blocked) parked[legacyId] = canonicalId;\n        // A parked pair whose legacy file is gone was resolved by keeping the\n        // canonical side. The rename is moot; the reference rewrite is not, and\n        // this record is the only thing that can still perform it.\n        // A park survives ONLY while this scan re-establishes the collision.\n        // Anything else - the scan found a real migration, or found the source\n        // needs none (already canonical under a newer normalization) - makes\n        // the record obsolete, and keeping it lets a later deletion promote a\n        // target the entity never occupied.\n        for (const [legacyId, canonicalId] of Object.entries(parked)) {\n          if (blocked.has(legacyId)) continue;\n          delete parked[legacyId];\n          if (active[legacyId] !== undefined) continue;\n          const legacyPath = deps.resolveEntityFilePath(legacyId);\n          if (legacyPath !== null && (await fileExists(legacyPath))) continue;\n          // Resolve the parked target through ACTIVE moves before deciding\n          // its file is gone: a parked A -> B beside an active B -> C must\n          // promote to A -> C and rewrite, not drop because B was moved\n          // out-of-band. Only a target with no surviving file may drop.\n          let target = canonicalId;\n          const seenTargets = new Set<string>();\n          while (active[target] !== undefined && !seenTargets.has(target)) {\n            seenTargets.add(target);\n            target = active[target]!;\n          }\n          const targetPath = deps.resolveEntityFilePath(target);\n          if (targetPath === null || !(await fileExists(targetPath))) {\n            staleParked.set(legacyId, canonicalId);\n            continue;\n          }\n          active[legacyId] = target;\n          revived = true;\n        }\n        // Reviving a whole chain at once yields A -> B -> C, and each rewrite\n        // surface makes a different number of passes over it - so collapse\n        // transitively before anything consumes the set.\n        const collapsed = collapseMappings(active);\n        // Parked targets follow ACTIVE moves only: hopping over a still-blocked\n        // link would jump to an id the migration has not been allowed to reach.\n        for (const [legacyId, canonicalId] of Object.entries(parked)) {\n          const moved = collapsed[canonicalId];\n          if (moved !== undefined && moved !== legacyId) parked[legacyId] = moved;\n        }\n        const same = (a: Record<string, string>, b: Record<string, string>): boolean =>\n          Object.keys(a).length === Object.keys(b).length\n          && Object.entries(a).every(([key, value]) => b[key] === value);\n        if (same(collapsed, current.mappings) && same(parked, current.blocked ?? {})) return revived;\n        // Parking/removing an active mapping mid-entity-write would land an\n        // alias/activity/relationship mutation on a now-unrelated canonical\n        // claimant — the reconcile pass rewrites references, it cannot move\n        // a misplaced mutation. publishState serializes under the lock.\n        state = { ...current, mappings: collapsed, blocked: parked };\n        await publishState(deps, state);\n        return revived;\n      };\n      const previousMappings = state.mappings;\n      const collapsedMappings = collapseMappings(previousMappings);\n      const mappingsChanged =\n        Object.keys(collapsedMappings).length !== Object.keys(previousMappings).length\n        || Object.entries(collapsedMappings).some(([legacyId, canonicalId]) =>\n          previousMappings[legacyId] !== canonicalId\n        );\n      state = { ...state, mappings: collapsedMappings };\n      for (let migrationPass = 0; migrationPass < ENTITY_MAPPING_RESCAN_MAX_PASSES; migrationPass += 1) {\n        if (!(await lock.refresh())) throw new Error(\"Lost entity canonical-id migration lock.\");\n        const discoveredBefore = rejectMappingCycles(\n          state.mappings,\n          await discoverMappings(deps, state.mappings, blocked, scanNotes),\n        );\n        const revivedBefore = await pruneBlocked();\n        const mergedBefore = collapseMappings(mergeDiscoveredMappings(state.mappings, discoveredBefore));\n        // Stable completed journal → no-op (issue #2213). Retained mappings are\n        // read-compat state whose references were already rewritten (to\n        // convergence) before `complete: true` was persisted, so re-running\n        // `rewriteKnownReferences` here re-read the ENTIRE hot+cold+archived\n        // corpus — twice — and invalidated every memory cache on EVERY\n        // `ensureDirectories()`. On a write-active daemon that was a\n        // self-sustaining hot loop (multi-GB/s of re-reads, caches never warm,\n        // recall degraded to the fallback path). A park revived by THIS run's\n        // pruneBlocked still owes its reference rewrite: it falls through to\n        // the main flow below, which demotes `complete` BEFORE rewriting — so\n        // a crash mid-rewrite resumes, which the old in-place rewrite did not.\n        if (\n          state.complete\n          && Object.keys(discoveredBefore).length === 0\n          && !mappingsChanged\n          && !revivedBefore\n        ) {\n          // Stable journal, but a raw-byte writer requested reconciliation:\n          // run ONE bounded rewrite pass over the retained mappings, then let\n          // finish() consume the marker.\n          if (reconcileRequested && Object.keys(state.mappings).length > 0) {\n            const rewroteColdMemory = await rewriteKnownReferences(\n              deps,\n              state.mappings,\n              () => lock.refresh(),\n            );\n            deps.invalidateKnowledgeIndexCache();\n            deps.invalidateAllMemoriesCache();\n            if (rewroteColdMemory) deps.invalidateColdMemoriesCache();\n            deps.bumpMemoryStatusVersion();\n          }\n          return finish();\n        }\n        if (\n          state.complete\n          || Object.keys(discoveredBefore).length > 0\n          || Object.keys(mergedBefore).length !== Object.keys(state.mappings).length\n        ) {\n          state = { ...state, complete: false, mappings: mergedBefore };\n          await publishState(deps, state);\n        }\n        if (Object.keys(state.mappings).length === 0) {\n          if (!(await lock.refresh())) throw new Error(\"Lost entity canonical-id migration lock.\");\n          const discoveredAfter = rejectMappingCycles(\n            state.mappings,\n            await discoverMappings(deps, state.mappings, blocked, scanNotes),\n          );\n          // Reconcile before declaring completion: this rescan can resolve a\n          // park (another writer removed the legacy file), and completing\n          // without promoting it strands its references behind a fingerprint\n          // that already reflects the deletion - so no later run revisits it.\n          const revivedInRescan = await pruneBlocked();\n          if (Object.keys(discoveredAfter).length === 0 && !revivedInRescan) {\n            await publishState(deps, { ...state, complete: true });\n            return finish();\n          }\n          state = {\n            ...state,\n            complete: false,\n            mappings: collapseMappings(mergeDiscoveredMappings(state.mappings, discoveredAfter)),\n          };\n          await publishState(deps, state);\n          continue;\n        }\n        let pendingMappings = Object.entries(state.mappings);\n        while (pendingMappings.length > 0) {\n          const deferredMappings: Array<[string, string]> = [];\n          let progressed = false;\n          for (const [legacyId, canonicalId] of pendingMappings) {\n            const result = await migrateEntityFilePair(\n              deps,\n              legacyId,\n              canonicalId,\n              () => lock.refresh(),\n            );\n            if (result.blocked) blocked.set(legacyId, canonicalId);\n            else if (result.deferred) deferredMappings.push([legacyId, canonicalId]);\n            progressed ||= result.progressed;\n          }\n          if (deferredMappings.length === 0) break;\n          if (!progressed) {\n            // Deferred means both files are missing: no later pass can help\n            // these pairs, so park them all instead of Fatal-exiting.\n            for (const [legacyId, canonicalId] of deferredMappings) {\n              blocked.set(legacyId, canonicalId);\n              staleParked.set(legacyId, canonicalId);\n            }\n            break;\n          }\n          pendingMappings = deferredMappings;\n        }\n        await pruneBlocked();\n\n        const rewroteColdMemory = await rewriteKnownReferences(\n          deps,\n          state.mappings,\n          () => lock.refresh(),\n        );\n        deps.invalidateKnowledgeIndexCache();\n        deps.invalidateAllMemoriesCache();\n        if (rewroteColdMemory) deps.invalidateColdMemoriesCache();\n        deps.bumpMemoryStatusVersion();\n\n        if (!(await lock.refresh())) throw new Error(\"Lost entity canonical-id migration lock.\");\n        const discoveredAfter = rejectMappingCycles(\n          state.mappings,\n          await discoverMappings(deps, state.mappings, blocked, scanNotes),\n        );\n        // A park resolved after the rewrite pass is promoted here, and a\n        // promotion still has to be APPLIED. Completing on `discoveredAfter`\n        // alone fingerprints the post-deletion corpus, so the runner never\n        // retries and those references stay stranded.\n        const revivedAfterRewrite = await pruneBlocked();\n        if (Object.keys(discoveredAfter).length === 0 && !revivedAfterRewrite) {\n          await publishState(deps, { ...state, complete: true });\n          return finish();\n        }\n        state = {\n          ...state,\n          complete: false,\n          mappings: collapseMappings(mergeDiscoveredMappings(state.mappings, discoveredAfter)),\n        };\n        await publishState(deps, state);\n      }\n      throw new Error(\"Entity canonical-id migration mappings changed while migration was running; retry migration.\");\n    }\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,YAAY,kBAAkB;AACvC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ;AAAA,EACR;AAAA,EACA;AAAA,OACK;AACP,OAAO,UAAU;AAEjB,SAAS,SAAS;AAuBlB,IAAM,wCAAwC;AAC9C,IAAM,8CAA8C;AACpD,IAAM,iDAAiD;AACvD,IAAM,0BAA0B;AAChC,IAAM,6BAA6B;AACnC,IAAM,4BAA4B;AAClC,IAAM,mCAAmC;AAEzC,IAAM,wCAAwC,EAAE,OAAO;AAAA,EACrD,SAAS,EAAE,QAAQ,qCAAqC;AAAA,EACxD,UAAU,EAAE,QAAQ;AAAA,EACpB,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AAAA,EAChD,uBAAuB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ3C,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS;AAC5D,CAAC;AAkCD,eAAe,gBAAgB,UAAmC;AAChE,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,MAAM,QAAQ;AAAA,EACjC,SAAS,OAAO;AACd,QAAI,CAAC,YAAY,OAAO,QAAQ,EAAG,OAAM;AAAA,EAC3C;AACA,SAAO,WACH,GAAG,SAAS,GAAG,IAAI,SAAS,GAAG,IAAI,SAAS,OAAO,IAAI,SAAS,OAAO,IAAI,SAAS,IAAI,KACxF;AACN;AAEA,eAAe,yBAAyB,aAAsC;AAC5E,MAAI;AACJ,MAAI;AACF,aAAS,MAAM,QAAQ,WAAW,GAC/B,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,SAAS,CAAC,+BAA+B,IAAI,CAAC,EACtF,KAAK;AAAA,EACV,SAAS,OAAO;AACd,QAAI,YAAY,OAAO,QAAQ,EAAG,QAAO;AACzC,UAAM;AAAA,EACR;AACA,QAAM,OAAO,WAAW,QAAQ;AAChC,aAAW,QAAQ,OAAO;AACxB,SAAK,OAAO,GAAG,KAAK,MAAM,IAAI,IAAI,GAAG;AACrC,QAAI;AACF,YAAM,QAAQ,MAAM,MAAM,KAAK,KAAK,aAAa,IAAI,GAAG,EAAE,QAAQ,KAAK,CAAC;AACxE,WAAK,OAAO,GAAG,MAAM,GAAG,IAAI,MAAM,GAAG,IAAI,MAAM,IAAI,IAAI,MAAM,OAAO,IAAI,MAAM,OAAO,EAAE;AAAA,IACzF,SAAS,OAAO;AACd,UAAI,CAAC,YAAY,OAAO,QAAQ,EAAG,OAAM;AACzC,WAAK,OAAO,SAAS;AAAA,IACvB;AACA,SAAK,OAAO,IAAI;AAAA,EAClB;AACA,SAAO,KAAK,OAAO,KAAK;AAC1B;AAQA,eAAsB,eACpB,SACA,aACA,0BACiB;AACjB,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI,MAAM,QAAQ,IAAI;AAAA,IACpB,gBAAgB,WAAW;AAAA,IAC3B,yBAAyB,WAAW;AAAA,IACpC,gBAAgB,KAAK,KAAK,SAAS,UAAU,cAAc,CAAC;AAAA,IAC5D,gBAAgB,KAAK,KAAK,SAAS,SAAS,oCAAoC,CAAC;AAAA,IACjF,gBAAgB,KAAK,KAAK,SAAS,SAAS,8CAA8C,CAAC;AAAA,EAC7F,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,yBAAyB;AAAA,EAC3B,EAAE,KAAK,GAAG;AACZ;AAEA,eAAsB,cACpB,SACA,aACA,UACA,YACe;AACf,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,MAAM,OAAO;AAAA,EAChC,SAAS,OAAO;AACd,QAAI,YAAY,OAAO,QAAQ,EAAG;AAClC,UAAM;AAAA,EACR;AACA,MAAI,SAAS,eAAe,KAAK,CAAC,SAAS,YAAY,GAAG;AACxD,UAAM,IAAI,MAAM,sEAAsE,OAAO,GAAG;AAAA,EAClG;AACA,QAAM,aAAa,MAAM,SAAS,OAAO;AACzC,QAAM,QAAQ;AAAA,IACZ;AAAA,IACA;AAAA,IACA,GAAG,qBAAqB,IAAI,CAAC,cAAc,KAAK,KAAK,SAAS,SAAS,CAAC;AAAA,IACxE,KAAK,KAAK,SAAS,MAAM;AAAA,IACzB;AAAA,EACF;AACA,aAAW,QAAQ,OAAO;AACxB,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,MAAM,IAAI;AAAA,IAC7B,SAAS,OAAO;AACd,UAAI,YAAY,OAAO,QAAQ,EAAG;AAClC,YAAM;AAAA,IACR;AACA,QAAI,SAAS,eAAe,KAAK,CAAC,SAAS,YAAY,GAAG;AACxD,YAAM,IAAI,MAAM,sEAAsE,IAAI,GAAG;AAAA,IAC/F;AACA,yBAAqB,YAAY,MAAM,SAAS,IAAI,GAAG,IAAI;AAAA,EAC7D;AACF;AAEA,SAAS,UAAU,MAAsD;AACvE,SAAO,KAAK,KAAK,KAAK,UAAU,kCAAkC;AACpE;AAEA,eAAe,6BACb,MACe;AACf,QAAM,qBAAqB,UAAU,IAAI;AACzC,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,MAAM,kBAAkB;AAAA,EAC3C,SAAS,OAAO;AACd,QAAI,YAAY,OAAO,QAAQ,EAAG;AAClC,UAAM;AAAA,EACR;AACA,MAAI,SAAS,eAAe,KAAK,CAAC,SAAS,OAAO,GAAG;AACnD,UAAM,IAAI;AAAA,MACR,+EAA+E,kBAAkB;AAAA,IACnG;AAAA,EACF;AACA,QAAM,CAAC,WAAW,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC/C,SAAS,KAAK,QAAQ;AAAA,IACtB,SAAS,kBAAkB;AAAA,EAC7B,CAAC;AACD,uBAAqB,WAAW,WAAW,kBAAkB;AAC/D;AACA,eAAe,wBACb,MACA,eACkB;AAClB,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,MAAM,aAAa;AAAA,EACtC,SAAS,OAAO;AACd,QAAI,YAAY,OAAO,QAAQ,EAAG,QAAO;AACzC,UAAM;AAAA,EACR;AACA,MAAI,SAAS,eAAe,KAAK,CAAC,SAAS,OAAO,GAAG;AACnD,UAAM,IAAI;AAAA,MACR,2EAA2E,aAAa;AAAA,IAC1F;AAAA,EACF;AACA,QAAM,CAAC,WAAW,aAAa,IAAI,MAAM,QAAQ,IAAI;AAAA,IACnD,SAAS,KAAK,QAAQ;AAAA,IACtB,SAAS,aAAa;AAAA,EACxB,CAAC;AACD,uBAAqB,WAAW,eAAe,aAAa;AAC5D,SAAO;AACT;AAEA,SAAS,SAAS,MAAsD;AACtE,SAAO,KAAK,KAAK,KAAK,UAAU,oCAAoC;AACtE;AAGA,eAAe,UACb,MACiD;AACjD,QAAM,6BAA6B,IAAI;AACvC,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,SAAS,UAAU,IAAI,GAAG,OAAO;AAAA,EAC/C,SAAS,OAAO;AACd,QAAI,YAAY,OAAO,QAAQ,EAAG,QAAO;AACzC,UAAM;AAAA,EACR;AAEA,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,GAAG;AAAA,EACzB,QAAQ;AACN,UAAM,IAAI,MAAM,8CAA8C;AAAA,EAChE;AACA,QAAM,SAAS,sCAAsC,UAAU,MAAM;AACrE,MAAI,CAAC,OAAO,QAAS,OAAM,IAAI,MAAM,8CAA8C;AACnF,aAAW,YAAY,CAAC,OAAO,KAAK,UAAU,OAAO,KAAK,WAAW,CAAC,CAAC,GAAG;AACxE,eAAW,CAAC,UAAU,WAAW,KAAK,OAAO,QAAQ,QAAQ,GAAG;AAC9D,yBAAmB,QAAQ;AAC3B,yBAAmB,WAAW;AAAA,IAChC;AAAA,EACF;AACA,SAAO,OAAO;AAChB;AAEA,eAAe,WACb,MACA,OACe;AACf,QAAM,cAAc,UAAU,IAAI;AAClC,QAAM,YAAY,GAAG,WAAW,IAAI,QAAQ,GAAG,IAAI,WAAW,CAAC;AAC/D,MAAI;AACF,UAAM,UAAU,WAAW,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,GAAM,OAAO;AACzE,UAAM,OAAO,WAAW,WAAW;AAAA,EACrC,UAAE;AACA,UAAM,OAAO,SAAS,EAAE,MAAM,MAAM,MAAS;AAAA,EAC/C;AACF;AAUA,eAAe,aACb,MACA,OACe;AACf,QAAM,gCAAgC,KAAK,UAAU,YAAY;AAC/D,UAAM,WAAW,MAAM,KAAK;AAAA,EAC9B,CAAC;AACH;AAEA,eAAe,WAAW,UAAoC;AAC5D,MAAI;AACF,UAAM,OAAO,QAAQ;AACrB,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,YAAY,OAAO,QAAQ,EAAG,QAAO;AACzC,UAAM;AAAA,EACR;AACF;AAEA,eAAe,iBAAiB,UAAkB,WAAqC;AACrF,MAAI;AACF,UAAM,CAAC,MAAM,KAAK,IAAI,MAAM,QAAQ,IAAI,CAAC,SAAS,QAAQ,GAAG,SAAS,SAAS,CAAC,CAAC;AACjF,WAAO,KAAK,QAAQ,MAAM,OAAO,KAAK,QAAQ,MAAM;AAAA,EACtD,SAAS,OAAO;AACd,QAAI,YAAY,OAAO,QAAQ,EAAG,QAAO;AACzC,UAAM;AAAA,EACR;AACF;AAEA,eAAe,iBAAiB,UAAkB,OAA8B;AAC9E,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,MAAM,QAAQ;AAAA,EAC7B,SAAS,OAAO;AACd,QAAI,YAAY,OAAO,QAAQ,EAAG;AAClC,UAAM;AAAA,EACR;AACA,MAAI,KAAK,eAAe,GAAG;AACzB,UAAM,IAAI,MAAM,2DAA2D,KAAK,GAAG;AAAA,EACrF;AACF;AACA,eAAe,uBAAuB,UAAiC;AACrE,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,MAAM,QAAQ;AAAA,EAC7B,SAAS,OAAO;AACd,QAAI,YAAY,OAAO,QAAQ,EAAG;AAClC,UAAM;AAAA,EACR;AACA,MAAI,KAAK,eAAe,GAAG;AACzB,UAAM,IAAI,MAAM,oEAAoE,QAAQ,GAAG;AAAA,EACjG;AACF;AACA,eAAe,6BACb,MACA,UACA,iBACA,UACe;AACf,QAAM,gBAAgB,MAAM,KAAK,sBAAsB,QAAQ;AAC/D,MAAI,kBAAkB,iBAAiB;AACrC,UAAM,IAAI,MAAM,oBAAoB,QAAQ,wDAAwD;AAAA,EACtG;AACF;AASA,eAAsB,sBAAsB,aAAwC;AAClF,QAAM,WAAW,MAAM,MAAM,WAAW;AACxC,MAAI,SAAS,eAAe,KAAK,CAAC,SAAS,YAAY,GAAG;AACxD,UAAM,IAAI,MAAM,4FAA4F;AAAA,EAC9G;AACA,QAAM,UAAU,MAAM,QAAQ,WAAW;AACzC,aAAW,SAAS,SAAS;AAC3B,UAAM,iBAAiB,KAAK,KAAK,aAAa,KAAK,GAAG,KAAK;AAAA,EAC7D;AACA,SAAO;AACT;AAgBA,eAAe,iBACb,MACA,gBAAkD,CAAC,GACnD,UAA8B,oBAAI,IAAI,GACtC,WACiC;AACjC,QAAM,WAAmC,CAAC;AAC1C,QAAM,kBAAkB,oBAAI,IAAsB;AAMlD,UAAQ,MAAM;AACd,QAAM,gBAAgB,MAAM,sBAAsB,KAAK,WAAW;AAClE,aAAW,SAAS,eAAe;AAMjC,QAAI,+BAA+B,KAAK,GAAG;AACzC,iBAAW,KAAK,IAAI,KAAK;AACzB;AAAA,IACF;AACA,QAAI,CAAC,MAAM,SAAS,KAAK,EAAG;AAC5B,UAAM,WAAW,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM;AAC7C,uBAAmB,QAAQ;AAC3B,UAAM,aAAa,KAAK,sBAAsB,QAAQ;AACtD,QAAI,eAAe,KAAM;AACzB,UAAM,gBAAgB,MAAM,KAAK,sBAAsB,UAAU;AACjE,QAAI,wBAAwB,aAAa,GAAG;AAC1C,iBAAW,UAAU,IAAI,KAAK;AAC9B;AAAA,IACF;AACA,UAAM,SAAS,KAAK,gBAAgB,aAAa;AACjD,QAAI,CAAC,OAAO,KAAK,KAAK,KAAK,CAAC,OAAO,KAAK,KAAK,GAAG;AAC9C,iBAAW,UAAU,IAAI,KAAK;AAC9B;AAAA,IACF;AACA,UAAM,cAAc,KAAK,oBAAoB,OAAO,MAAM,OAAO,IAAI;AACrE,uBAAmB,WAAW;AAC9B,QAAI,aAAa,YAAa;AAC9B,UAAM,gBAAgB,KAAK,sBAAsB,WAAW;AAC5D,QAAI,kBAAkB,KAAM;AAC5B,UAAM,kBAAkB,MAAM,WAAW,aAAa;AACtD,QACE,mBACG,MAAM,iBAAiB,YAAY,aAAa,KAChD,cAAc,QAAQ,MAAM,YAC/B;AACF,QAAI,iBAAiB;AACnB,YAAM,mBAAmB,MAAM,KAAK,sBAAsB,aAAa;AACvE,UAAI,kBAAkB,kBAAkB;AACtC,gBAAQ,IAAI,UAAU,WAAW;AACjC;AAAA,MACF;AAAA,IACF;AACA,oBAAgB,IAAI,aAAa,CAAC,GAAI,gBAAgB,IAAI,WAAW,KAAK,CAAC,GAAI,QAAQ,CAAC;AACxF,aAAS,QAAQ,IAAI;AAAA,EACvB;AAIA,aAAW,CAAC,aAAa,SAAS,KAAK,iBAAiB;AACtD,QAAI,UAAU,SAAS,EAAG;AAC1B,eAAW,YAAY,WAAW;AAChC,cAAQ,IAAI,UAAU,WAAW;AACjC,aAAO,SAAS,QAAQ;AAAA,IAC1B;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,kBACb,MACA,UACA,aACyC;AACzC,MAAI,oBAAoB;AACxB,WAAS,OAAO,GAAG,OAAO,2BAA2B,QAAQ,GAAG;AAC9D,SAAK,2BAA2B;AAChC,SAAK,4BAA4B;AACjC,UAAM,CAAC,aAAa,cAAc,gBAAgB,IAAI,MAAM,QAAQ,IAAI;AAAA,MACtE,KAAK,gBAAgB;AAAA,MACrB,KAAK,oBAAoB;AAAA,MACzB,KAAK,qBAAqB;AAAA,IAC5B,CAAC;AACD,UAAM,YAAY,oBAAI,IAAY;AAClC,QAAI,aAAa;AACjB,eAAW,UAAU,CAAC,GAAG,aAAa,GAAG,cAAc,GAAG,gBAAgB,GAAG;AAC3E,YAAM,aAAa,KAAK,QAAQ,OAAO,IAAI;AAC3C,UAAI,UAAU,IAAI,UAAU,EAAG;AAC/B,gBAAU,IAAI,UAAU;AACxB,YAAM,oBAAoB,OAAO,YAAY;AAC7C,YAAM,cAAc,oBAAoB,SAAS,iBAAiB,IAAI;AACtE,UAAI,CAAC,qBAAqB,CAAC,YAAa;AACxC,YAAM,uBAAuB,OAAO,IAAI;AACxC,YAAM,4BAA4B,MAAM,gBAAgB,OAAO,IAAI;AACnE,UAAI,8BAA8B,UAAW;AAC7C,UAAI,CAAE,MAAM,YAAY,EAAI,OAAM,IAAI,MAAM,0CAA0C;AACtF,YAAM,eAAe,MAAM,KAAK,iBAAiB,OAAO,IAAI;AAC5D,UAAI,CAAC,aAAc;AACnB,YAAM,0BAA0B,MAAM,gBAAgB,aAAa,IAAI;AACvE,UAAI,4BAA4B,0BAA2B;AAC3D,YAAM,0BAA0B,aAAa,YAAY;AACzD,YAAM,oBAAoB,0BAA0B,SAAS,uBAAuB,IAAI;AACxF,UAAI,CAAC,2BAA2B,CAAC,kBAAmB;AACpD,YAAM,kBAAkB,MAAM,KAAK,uBAAuB,aAAa,IAAI;AAC3E,UAAK,MAAM,gBAAgB,aAAa,IAAI,MAAO,wBAAyB;AAC5E,YAAM,KAAK,oBAAoB,aAAa,MAAM,OAAO;AACzD,UAAK,MAAM,gBAAgB,aAAa,IAAI,MAAO,wBAAyB;AAC5E,YAAM,KAAK;AAAA,QACT,aAAa;AAAA,QACb,KAAK,6BAA6B,cAAc,iBAAiB;AAAA,QACjE;AAAA,MACF;AACA,YAAM,KAAK;AAAA,QACT,aAAa,YAAY;AAAA,QACzB;AAAA,QACA;AAAA,MACF;AACA,mBAAa;AACb,4BAAsB,aAAa,KAAK,SAAS,GAAG,KAAK,GAAG,OAAO,KAAK,GAAG,EAAE;AAAA,IAC/E;AACA,QAAI,CAAC,WAAY,QAAO,EAAE,kBAAkB;AAAA,EAC9C;AACA,QAAM,IAAI,MAAM,6FAA6F;AAC/G;AAEA,SAAS,qBACP,MACA,UACA,oBACQ;AACR,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,IAAI;AAAA,EAC1B,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG,QAAO;AAE3E,QAAM,YAAY;AAClB,MAAI,UAAU;AACd,MAAI,OAAO,UAAU,cAAc,UAAU;AAC3C,UAAM,cAAc,SAAS,UAAU,SAAS;AAChD,QAAI,aAAa;AACf,gBAAU,YAAY;AACtB,gBAAU;AAAA,IACZ;AAAA,EACF;AACA,MAAI,OAAO,UAAU,oBAAoB,UAAU;AACjD,UAAM,YAAY,UAAU,gBAAgB,QAAQ,IAAI;AACxD,QAAI,YAAY,EAAG,QAAO,UAAU,KAAK,UAAU,SAAS,IAAI;AAChE,UAAM,qBAAqB,yBAAyB,UAAU,gBAAgB,MAAM,GAAG,SAAS,CAAC;AACjG,UAAM,cAAc,mBAAmB,IAAI,kBAAkB;AAC7D,QAAI,aAAa;AACf,YAAM,eAAe,uBAAuB,aAAa,UAAU,gBAAgB,MAAM,YAAY,CAAC,CAAC;AACvG,UAAI,cAAc;AAChB,kBAAU,kBAAkB;AAC5B,kBAAU;AAAA,MACZ;AAAA,IACF;AAAA,EACF;AACA,SAAO,UAAU,KAAK,UAAU,SAAS,IAAI;AAC/C;AAEA,eAAe,2BACb,MACA,UACA,aACe;AACf,QAAM,gBAAgB,KAAK,KAAK,KAAK,UAAU,kBAAkB;AACjE,QAAM,qBAAqB,oBAAI,IAAoB;AACnD,aAAW,CAAC,UAAU,WAAW,KAAK,OAAO,QAAQ,QAAQ,GAAG;AAC9D,UAAM,qBAAqB,yBAAyB,QAAQ;AAC5D,QAAI,sBAAsB,CAAC,mBAAmB,IAAI,kBAAkB,GAAG;AACrE,yBAAmB,IAAI,oBAAoB,WAAW;AAAA,IACxD;AAAA,EACF;AAEA,QAAM;AAAA,IACJ,KAAK,KAAK,KAAK,UAAU,iBAAiB;AAAA,IAC1C;AAAA,MACE,SAAS;AAAA,MACT,WAAW;AAAA,IACb;AAAA,IACA,OAAO,UAAU,kBAAkB;AACjC,UAAI,CAAC,SAAU,OAAM,IAAI,MAAM,mDAAmD;AAClF,UAAI,CAAE,MAAM,wBAAwB,MAAM,aAAa,EAAI;AAC3D,YAAM,qBAAqB,MAAM,KAAK,uBAAuB,aAAa;AAC1E,YAAM,WAAW,MAAM,KAAK,sBAAsB,aAAa;AAC/D,UAAI,UAAU;AACd,YAAM,YAAY,SACf,MAAM,IAAI,EACV,IAAI,CAAC,SAAS;AACb,cAAM,OAAO,qBAAqB,MAAM,UAAU,kBAAkB;AACpE,oBAAY,SAAS;AACrB,eAAO;AAAA,MACT,CAAC,EACA,KAAK,IAAI;AACZ,UAAI,CAAC,QAAS;AACd,UAAI,CAAE,MAAM,YAAY,EAAI,OAAM,IAAI,MAAM,0CAA0C;AACtF,UAAI,CAAE,MAAM,cAAc,QAAQ,EAAI,OAAM,IAAI,MAAM,gCAAgC;AACtF,YAAM,KAAK,oBAAoB,eAAe,OAAO;AACrD,YAAM,KAAK,uBAAuB,eAAe,WAAW,kBAAkB;AAAA,IAChF;AAAA,EACF;AACF;AAEA,eAAe,2BACb,MACA,UACA,aACkB;AAClB,MAAI,YAAY;AAChB,QAAM,UAAU,MAAM,sBAAsB,KAAK,WAAW;AAC5D,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,SAAS,KAAK,KAAK,+BAA+B,KAAK,EAAG;AACrE,UAAM,aAAa,KAAK,sBAAsB,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC;AAC3E,QAAI,eAAe,KAAM;AACzB,UAAM,4BAA4B,MAAM,gBAAgB,UAAU;AAClE,QAAI,8BAA8B,UAAW;AAC7C,UAAM,YAAY,MAAM,KAAK,sBAAsB,UAAU;AAC7D,QAAI,wBAAwB,SAAS,EAAG;AACxC,UAAM,SAAS,KAAK,gBAAgB,SAAS;AAC7C,UAAM,gBAAgB,OAAO,cAAc,IAAI,CAAC,iBAAiB;AAC/D,YAAM,SAAS,SAAS,aAAa,MAAM;AAC3C,aAAO,SAAS,EAAE,GAAG,cAAc,OAAO,IAAI;AAAA,IAChD,CAAC;AACD,QAAI,cAAc,MAAM,CAAC,cAAc,UAAU,iBAAiB,OAAO,cAAc,KAAK,CAAC,EAAG;AAChG,UAAM,gBAAgB,MAAM;AAAA,MAC1B,KAAK;AAAA,MACL,OAAO,sBAAsB;AAC3B,YAAI,CAAE,MAAM,YAAY,EAAI,OAAM,IAAI,MAAM,0CAA0C;AACtF,cAAM,YAAY,MAAM,KAAK,sBAAsB,UAAU;AAC7D,YAAI,wBAAwB,SAAS,EAAG,QAAO;AAC/C,cAAM,eAAe,KAAK,gBAAgB,SAAS;AACnD,YAAK,MAAM,gBAAgB,UAAU,MAAO,0BAA2B,QAAO;AAC9E,cAAM,sBAAsB,aAAa,cAAc,IAAI,CAAC,iBAAiB;AAC3E,gBAAM,SAAS,SAAS,aAAa,MAAM;AAC3C,iBAAO,SAAS,EAAE,GAAG,cAAc,OAAO,IAAI;AAAA,QAChD,CAAC;AACD,YAAI,oBAAoB,MAAM,CAAC,cAAc,UAAU,iBAAiB,aAAa,cAAc,KAAK,CAAC,GAAG;AAC1G,iBAAO;AAAA,QACT;AACA,cAAM,kBAAkB,MAAM,KAAK,uBAAuB,UAAU;AACpE,YAAI,CAAE,MAAM,kBAAkB,EAAI,OAAM,IAAI,MAAM,4BAA4B;AAC9E,YAAK,MAAM,gBAAgB,UAAU,MAAO,0BAA2B,QAAO;AAC9E,cAAM,KAAK,oBAAoB,YAAY,OAAO;AAClD,YAAK,MAAM,gBAAgB,UAAU,MAAO,0BAA2B,QAAO;AAC9E,cAAM,KAAK;AAAA,UACT;AAAA,UACA,KAAK,oBAAoB,EAAE,GAAG,cAAc,eAAe,oBAAoB,CAAC;AAAA,UAChF;AAAA,QACF;AACA,eAAO;AAAA,MACT;AAAA,IACF;AACA,kBAAc;AAAA,EAChB;AACA,SAAO;AACT;AAEA,eAAe,uBACb,MACA,UACA,aACkB;AAClB,QAAM,2BAA2B,MAAM,UAAU,WAAW;AAC5D,MAAI,qBAAqB,MAAM,kBAAkB,MAAM,UAAU,WAAW,GAAG;AAC/E,QAAM,2BAA2B,MAAM,UAAU,WAAW;AAC5D,QAAM,KAAK,iCAAiC,QAAQ;AACpD,QAAM,kBAAkB,MAAM,kBAAkB,MAAM,UAAU,WAAW;AAC3E,wBAAsB,gBAAgB;AACtC,SAAO;AACT;AAEA,SAAS,wBACP,UACA,UACA,aACS;AACT,MAAI,UAAU;AACd,QAAM,OAAO,oBAAI,IAAY;AAC7B,SAAO,MAAM;AACX,QAAI,YAAY,SAAU,QAAO;AACjC,QAAI,KAAK,IAAI,OAAO,EAAG,QAAO;AAC9B,SAAK,IAAI,OAAO;AAChB,UAAM,OAAO,SAAS,OAAO;AAC7B,QAAI,CAAC,QAAQ,SAAS,QAAS,QAAO;AACtC,cAAU;AAAA,EACZ;AACF;AAEA,SAAS,oBACP,UACA,YACwB;AACxB,QAAM,WAAmC,CAAC;AAC1C,QAAM,SAAS,EAAE,GAAG,SAAS;AAC7B,aAAW,CAAC,UAAU,WAAW,KAAK,OAAO,QAAQ,UAAU,GAAG;AAChE,QACE,OAAO,QAAQ,MAAM,UACrB,wBAAwB,QAAQ,UAAU,WAAW,EACrD;AACF,aAAS,QAAQ,IAAI;AACrB,WAAO,QAAQ,IAAI;AAAA,EACrB;AACA,SAAO;AACT;AAEA,SAAS,wBACP,UACA,YACwB;AACxB,QAAM,SAAS,EAAE,GAAG,SAAS;AAC7B,QAAM,kBAAkB,oBAAI,IAAoB;AAChD,aAAW,CAAC,UAAU,WAAW,KAAK,OAAO,QAAQ,UAAU,GAAG;AAChE,UAAM,kBAAkB,OAAO,QAAQ;AACvC,QAAI,oBAAoB,UAAa,oBAAoB,aAAa;AACpE;AAAA,IACF;AACA,QAAI,oBAAoB,UAAa,wBAAwB,QAAQ,UAAU,WAAW,EAAG;AAC7F,UAAM,gBAAgB,gBAAgB,IAAI,WAAW;AACrD,QAAI,kBAAkB,UAAa,kBAAkB,UAAU;AAC7D,YAAM,IAAI;AAAA,QACR,oCAAoC,aAAa,QAAQ,QAAQ,uBAAuB,WAAW;AAAA,MACrG;AAAA,IACF;AACA,WAAO,QAAQ,IAAI;AACnB,oBAAgB,IAAI,aAAa,QAAQ;AAAA,EAC3C;AACA,SAAO;AACT;AACA,SAAS,iBAAiB,UAAoE;AAC5F,QAAM,YAAoC,CAAC;AAC3C,aAAW,YAAY,OAAO,KAAK,QAAQ,GAAG;AAC5C,QAAI,UAAU;AACd,UAAM,OAAO,oBAAI,IAAY;AAC7B,WAAO,MAAM;AACX,YAAM,OAAO,SAAS,OAAO;AAC7B,UAAI,CAAC,QAAQ,SAAS,QAAS;AAC/B,UAAI,KAAK,IAAI,OAAO,GAAG;AACrB,cAAM,IAAI,MAAM,wDAAwD,QAAQ,GAAG;AAAA,MACrF;AACA,WAAK,IAAI,OAAO;AAChB,gBAAU;AAAA,IACZ;AACA,QAAI,YAAY,SAAU,WAAU,QAAQ,IAAI;AAAA,EAClD;AACA,SAAO;AACT;AASA,eAAe,sBACb,MACA,UACA,aACA,sBACoC;AACpC,SAAO,gCAAgC,KAAK,UAAU,OAAO,sBAAsB;AACjF,uBAAmB,QAAQ;AAC3B,uBAAmB,WAAW;AAC9B,UAAM,aAAa,KAAK,sBAAsB,QAAQ;AACtD,UAAM,gBAAgB,KAAK,sBAAsB,WAAW;AAC5D,QAAI,eAAe,QAAQ,kBAAkB,MAAM;AACjD,YAAM,IAAI,MAAM,6CAA6C;AAAA,IAC/D;AACA,UAAM,iBAAiB,YAAY,QAAQ;AAC3C,UAAM,iBAAiB,eAAe,WAAW;AACjD,UAAM,eAAe,MAAM,WAAW,UAAU;AAChD,UAAM,kBAAkB,MAAM,WAAW,aAAa;AACtD,QAAI,CAAC,gBAAgB,CAAC,gBAAiB,QAAO,EAAE,UAAU,MAAM,YAAY,MAAM;AAClF,QAAI,gBAAgB,iBAAiB;AACnC,UAAI,MAAM,iBAAiB,YAAY,aAAa,EAAG,QAAO,EAAE,UAAU,OAAO,YAAY,MAAM;AACnG,YAAM,CAAC,eAAe,kBAAkB,iBAAiB,kBAAkB,IAAI,MAAM,QAAQ,IAAI;AAAA,QAC/F,KAAK,sBAAsB,UAAU;AAAA,QACrC,KAAK,sBAAsB,aAAa;AAAA,QACxC,KAAK,uBAAuB,UAAU;AAAA,QACtC,KAAK,uBAAuB,aAAa;AAAA,MAC3C,CAAC;AACD,UAAI,kBAAkB,kBAAkB;AAGtC,eAAO,EAAE,UAAU,OAAO,YAAY,OAAO,SAAS,KAAK;AAAA,MAC7D;AACA,UAAI,mBAAmB,CAAC,oBAAoB;AAC1C,YAAI,CAAE,MAAM,qBAAqB,KAAM,CAAE,MAAM,kBAAkB,GAAI;AACnE,gBAAM,IAAI,MAAM,0CAA0C;AAAA,QAC5D;AACA,cAAM,KAAK,oBAAoB,eAAe,OAAO;AACrD,cAAM,KAAK,uBAAuB,eAAe,eAAe,IAAI;AACpE,YAAK,MAAM,KAAK,sBAAsB,aAAa,MAAO,eAAe;AACvE,gBAAM,IAAI,MAAM,oCAAoC,WAAW,GAAG;AAAA,QACpE;AAAA,MACF;AACA,UAAI,CAAE,MAAM,qBAAqB,KAAM,CAAE,MAAM,kBAAkB,GAAI;AACnE,cAAM,IAAI,MAAM,0CAA0C;AAAA,MAC5D;AACA,YAAM,KAAK,oBAAoB,YAAY,OAAO;AAClD,YAAM,iBAAiB,YAAY,QAAQ;AAC3C,YAAM,6BAA6B,MAAM,YAAY,eAAe,QAAQ;AAC5E,YAAM,OAAO,UAAU;AACvB,aAAO,EAAE,UAAU,OAAO,YAAY,KAAK;AAAA,IAC7C;AACA,QAAI,CAAC,aAAc,QAAO,EAAE,UAAU,OAAO,YAAY,MAAM;AAC/D,QAAI,CAAE,MAAM,qBAAqB,KAAM,CAAE,MAAM,kBAAkB,GAAI;AACnE,YAAM,IAAI,MAAM,0CAA0C;AAAA,IAC5D;AACA,UAAM,kBAAkB,MAAM,KAAK,uBAAuB,UAAU;AACpE,UAAM,gBAAgB,MAAM,KAAK,sBAAsB,UAAU;AACjE,UAAM,iBAAiB,YAAY,QAAQ;AAC3C,UAAM,6BAA6B,MAAM,YAAY,eAAe,QAAQ;AAI5E,QACE,+BAA+B,KAAK,SAAS,UAAU,CAAC,KACrD,wBAAwB,aAAa,GACxC;AACA,aAAO,EAAE,UAAU,OAAO,YAAY,MAAM;AAAA,IAC9C;AACA,QAAI,iCAAgD;AACpD,QAAI;AACF,YAAM,KAAK,uBAAuB,eAAe,eAAe,eAAe;AAC/E,uCAAiC,MAAM,gBAAgB,aAAa;AACpE,UAAK,MAAM,KAAK,sBAAsB,aAAa,MAAO,eAAe;AACvE,cAAM,IAAI,MAAM,oCAAoC,WAAW,GAAG;AAAA,MACpE;AACA,UAAI,CAAE,MAAM,qBAAqB,KAAM,CAAE,MAAM,kBAAkB,GAAI;AACnE,cAAM,IAAI,MAAM,0CAA0C;AAAA,MAC5D;AACA,YAAM,KAAK,oBAAoB,YAAY,OAAO;AAClD,YAAM,iBAAiB,YAAY,QAAQ;AAC3C,YAAM,6BAA6B,MAAM,YAAY,eAAe,QAAQ;AAC5E,YAAM,OAAO,UAAU;AAAA,IACzB,SAAS,OAAO;AACd,UAAI,CAAC,mBAAmB,mCAAmC,MAAM;AAC/D,YAAI;AACF,cAAK,MAAM,gBAAgB,aAAa,MAAO,gCAAgC;AAC7E,kBAAM,iBAAiB,eAAe,WAAW;AACjD,kBAAM,OAAO,aAAa;AAAA,UAC5B;AAAA,QACF,QAAQ;AAAA,QAER;AAAA,MACF;AACA,YAAM;AAAA,IACR;AACA,WAAO,EAAE,UAAU,OAAO,YAAY,KAAK;AAAA,EAC7C,CAAC;AACH;AAEA,eAAsB,gCACpB,MAC6B;AAC7B,SAAO;AAAA,IACL,SAAS,IAAI;AAAA,IACb;AAAA,MACE,SAAS;AAAA,MACT,WAAW;AAAA,IACb;AAAA,IACA,OAAO,UAAU,SAAS;AACxB,UAAI,CAAC,SAAU,OAAM,IAAI,MAAM,6DAA6D;AAC5F,YAAM,KAAK,0BAA0B;AACrC,YAAM,sBAAsB,KAAK,WAAW;AAO5C,YAAM,sBAAsB,KAAK,KAAK,KAAK,UAAU,oCAAoC;AACzF,YAAM,sBAAsB,KAAK,KAAK,KAAK,UAAU,8CAA8C;AACnG,UAAI,qBAAqB,MAAM,WAAW,mBAAmB;AAC7D,UAAI,MAAM,WAAW,mBAAmB,GAAG;AACzC,YAAI;AACF,gBAAM,OAAO,qBAAqB,mBAAmB;AACrD,+BAAqB;AAAA,QACvB,SAAS,OAAO;AACd,cAAI,CAAC,YAAY,OAAO,QAAQ,EAAG,OAAM;AAAA,QAC3C;AAAA,MACF;AACA,UAAI,QAAyC,MAAM,UAAU,IAAI,KAAK;AAAA,QACpE,SAAS;AAAA,QACT,UAAU;AAAA,QACV,UAAU,CAAC;AAAA,MACb;AACA,YAAM,UAA8B,oBAAI,IAAI;AAC5C,YAAM,YAA6B,EAAE,MAAM,oBAAI,IAAI,GAAG,WAAW,oBAAI,IAAI,EAAE;AAK3E,YAAM,cAAkC,oBAAI,IAAI;AAGhD,YAAM,SAAS,YAAyC;AACtD,YAAI,QAAQ,OAAO,GAAG;AACpB,gBAAM,QAAQ,CAAC,GAAG,OAAO,EAAE,IAAI,CAAC,CAAC,UAAU,WAAW,MAAM,GAAG,QAAQ,OAAO,WAAW,EAAE,EAAE,KAAK,IAAI;AACtG,cAAI;AAAA,YACF,yCAAyC,QAAQ,IAAI,0BAA0B,KAAK;AAAA,UAEtF;AAAA,QACF;AACA,YAAI,YAAY,OAAO,GAAG;AACxB,gBAAM,QAAQ,CAAC,GAAG,WAAW,EAAE,IAAI,CAAC,CAAC,UAAU,WAAW,MAAM,GAAG,QAAQ,OAAO,WAAW,EAAE,EAAE,KAAK,IAAI;AAC1G,cAAI;AAAA,YACF,yCAAyC,YAAY,IAAI,4CAA4C,KAAK;AAAA,UAE5G;AAAA,QACF;AACA,wCAAgC,KAAK,aAAa,UAAU,KAAK,MAAM,CAAC,YAAY;AAClF,cAAI,KAAK,iCAAiC,OAAO,EAAE;AAAA,QACrD,CAAC;AACD,YAAI,UAAU,UAAU,OAAO,GAAG;AAChC,gBAAM,QAAQ,CAAC,GAAG,UAAU,SAAS,EAAE,KAAK,EAAE,KAAK,IAAI;AACvD,cAAI;AAAA,YACF,yCAAyC,UAAU,UAAU,IAAI,8BAA8B,KAAK;AAAA,UAEtG;AAAA,QACF;AAMA,YAAI,oBAAoB;AACtB,gBAAM,OAAO,mBAAmB,EAAE,MAAM,CAAC,UAAmB;AAC1D,gBAAI,CAAC,YAAY,OAAO,QAAQ,EAAG,OAAM;AAAA,UAC3C,CAAC;AAAA,QACH;AAWA,cAAM,wBAAwB,MAAM,KAAK,2BAA2B;AACpE,YAAI,MAAM,WAAW,mBAAmB,EAAG,QAAO;AAClD,YAAI,0BAA0B,UAAa,MAAM,0BAA0B,uBAAuB;AAChG,kBAAQ,EAAE,GAAG,OAAO,UAAU,MAAM,sBAAsB;AAC1D,gBAAM,aAAa,MAAM,KAAK;AAAA,QAChC;AACA,eAAO;AAAA,MACT;AASA,YAAM,eAAe,YAA8B;AACjD,cAAM,UAAU;AAChB,YAAI,CAAC,QAAS,QAAO;AAIrB,YAAI,UAAU;AACd,cAAM,SAAiC,EAAE,GAAI,QAAQ,WAAW,CAAC,EAAG;AACpE,cAAM,SAAiC,CAAC;AACxC,mBAAW,CAAC,UAAU,WAAW,KAAK,OAAO,QAAQ,QAAQ,QAAQ,GAAG;AACtE,cAAI,CAAC,QAAQ,IAAI,QAAQ,EAAG,QAAO,QAAQ,IAAI;AAAA,QACjD;AACA,mBAAW,CAAC,UAAU,WAAW,KAAK,QAAS,QAAO,QAAQ,IAAI;AASlE,mBAAW,CAAC,UAAU,WAAW,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC5D,cAAI,QAAQ,IAAI,QAAQ,EAAG;AAC3B,iBAAO,OAAO,QAAQ;AACtB,cAAI,OAAO,QAAQ,MAAM,OAAW;AACpC,gBAAM,aAAa,KAAK,sBAAsB,QAAQ;AACtD,cAAI,eAAe,QAAS,MAAM,WAAW,UAAU,EAAI;AAK3D,cAAI,SAAS;AACb,gBAAM,cAAc,oBAAI,IAAY;AACpC,iBAAO,OAAO,MAAM,MAAM,UAAa,CAAC,YAAY,IAAI,MAAM,GAAG;AAC/D,wBAAY,IAAI,MAAM;AACtB,qBAAS,OAAO,MAAM;AAAA,UACxB;AACA,gBAAM,aAAa,KAAK,sBAAsB,MAAM;AACpD,cAAI,eAAe,QAAQ,CAAE,MAAM,WAAW,UAAU,GAAI;AAC1D,wBAAY,IAAI,UAAU,WAAW;AACrC;AAAA,UACF;AACA,iBAAO,QAAQ,IAAI;AACnB,oBAAU;AAAA,QACZ;AAIA,cAAM,YAAY,iBAAiB,MAAM;AAGzC,mBAAW,CAAC,UAAU,WAAW,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC5D,gBAAM,QAAQ,UAAU,WAAW;AACnC,cAAI,UAAU,UAAa,UAAU,SAAU,QAAO,QAAQ,IAAI;AAAA,QACpE;AACA,cAAM,OAAO,CAAC,GAA2B,MACvC,OAAO,KAAK,CAAC,EAAE,WAAW,OAAO,KAAK,CAAC,EAAE,UACtC,OAAO,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,KAAK,MAAM,EAAE,GAAG,MAAM,KAAK;AAC/D,YAAI,KAAK,WAAW,QAAQ,QAAQ,KAAK,KAAK,QAAQ,QAAQ,WAAW,CAAC,CAAC,EAAG,QAAO;AAKrF,gBAAQ,EAAE,GAAG,SAAS,UAAU,WAAW,SAAS,OAAO;AAC3D,cAAM,aAAa,MAAM,KAAK;AAC9B,eAAO;AAAA,MACT;AACA,YAAM,mBAAmB,MAAM;AAC/B,YAAM,oBAAoB,iBAAiB,gBAAgB;AAC3D,YAAM,kBACJ,OAAO,KAAK,iBAAiB,EAAE,WAAW,OAAO,KAAK,gBAAgB,EAAE,UACrE,OAAO,QAAQ,iBAAiB,EAAE;AAAA,QAAK,CAAC,CAAC,UAAU,WAAW,MAC/D,iBAAiB,QAAQ,MAAM;AAAA,MACjC;AACF,cAAQ,EAAE,GAAG,OAAO,UAAU,kBAAkB;AAChD,eAAS,gBAAgB,GAAG,gBAAgB,kCAAkC,iBAAiB,GAAG;AAChG,YAAI,CAAE,MAAM,KAAK,QAAQ,EAAI,OAAM,IAAI,MAAM,0CAA0C;AACvF,cAAM,mBAAmB;AAAA,UACvB,MAAM;AAAA,UACN,MAAM,iBAAiB,MAAM,MAAM,UAAU,SAAS,SAAS;AAAA,QACjE;AACA,cAAM,gBAAgB,MAAM,aAAa;AACzC,cAAM,eAAe,iBAAiB,wBAAwB,MAAM,UAAU,gBAAgB,CAAC;AAY/F,YACE,MAAM,YACH,OAAO,KAAK,gBAAgB,EAAE,WAAW,KACzC,CAAC,mBACD,CAAC,eACJ;AAIA,cAAI,sBAAsB,OAAO,KAAK,MAAM,QAAQ,EAAE,SAAS,GAAG;AAChE,kBAAMA,qBAAoB,MAAM;AAAA,cAC9B;AAAA,cACA,MAAM;AAAA,cACN,MAAM,KAAK,QAAQ;AAAA,YACrB;AACA,iBAAK,8BAA8B;AACnC,iBAAK,2BAA2B;AAChC,gBAAIA,mBAAmB,MAAK,4BAA4B;AACxD,iBAAK,wBAAwB;AAAA,UAC/B;AACA,iBAAO,OAAO;AAAA,QAChB;AACA,YACE,MAAM,YACH,OAAO,KAAK,gBAAgB,EAAE,SAAS,KACvC,OAAO,KAAK,YAAY,EAAE,WAAW,OAAO,KAAK,MAAM,QAAQ,EAAE,QACpE;AACA,kBAAQ,EAAE,GAAG,OAAO,UAAU,OAAO,UAAU,aAAa;AAC5D,gBAAM,aAAa,MAAM,KAAK;AAAA,QAChC;AACA,YAAI,OAAO,KAAK,MAAM,QAAQ,EAAE,WAAW,GAAG;AAC5C,cAAI,CAAE,MAAM,KAAK,QAAQ,EAAI,OAAM,IAAI,MAAM,0CAA0C;AACvF,gBAAMC,mBAAkB;AAAA,YACtB,MAAM;AAAA,YACN,MAAM,iBAAiB,MAAM,MAAM,UAAU,SAAS,SAAS;AAAA,UACjE;AAKA,gBAAM,kBAAkB,MAAM,aAAa;AAC3C,cAAI,OAAO,KAAKA,gBAAe,EAAE,WAAW,KAAK,CAAC,iBAAiB;AACjE,kBAAM,aAAa,MAAM,EAAE,GAAG,OAAO,UAAU,KAAK,CAAC;AACrD,mBAAO,OAAO;AAAA,UAChB;AACA,kBAAQ;AAAA,YACN,GAAG;AAAA,YACH,UAAU;AAAA,YACV,UAAU,iBAAiB,wBAAwB,MAAM,UAAUA,gBAAe,CAAC;AAAA,UACrF;AACA,gBAAM,aAAa,MAAM,KAAK;AAC9B;AAAA,QACF;AACA,YAAI,kBAAkB,OAAO,QAAQ,MAAM,QAAQ;AACnD,eAAO,gBAAgB,SAAS,GAAG;AACjC,gBAAM,mBAA4C,CAAC;AACnD,cAAI,aAAa;AACjB,qBAAW,CAAC,UAAU,WAAW,KAAK,iBAAiB;AACrD,kBAAM,SAAS,MAAM;AAAA,cACnB;AAAA,cACA;AAAA,cACA;AAAA,cACA,MAAM,KAAK,QAAQ;AAAA,YACrB;AACA,gBAAI,OAAO,QAAS,SAAQ,IAAI,UAAU,WAAW;AAAA,qBAC5C,OAAO,SAAU,kBAAiB,KAAK,CAAC,UAAU,WAAW,CAAC;AACvE,2BAAe,OAAO;AAAA,UACxB;AACA,cAAI,iBAAiB,WAAW,EAAG;AACnC,cAAI,CAAC,YAAY;AAGf,uBAAW,CAAC,UAAU,WAAW,KAAK,kBAAkB;AACtD,sBAAQ,IAAI,UAAU,WAAW;AACjC,0BAAY,IAAI,UAAU,WAAW;AAAA,YACvC;AACA;AAAA,UACF;AACA,4BAAkB;AAAA,QACpB;AACA,cAAM,aAAa;AAEnB,cAAM,oBAAoB,MAAM;AAAA,UAC9B;AAAA,UACA,MAAM;AAAA,UACN,MAAM,KAAK,QAAQ;AAAA,QACrB;AACA,aAAK,8BAA8B;AACnC,aAAK,2BAA2B;AAChC,YAAI,kBAAmB,MAAK,4BAA4B;AACxD,aAAK,wBAAwB;AAE7B,YAAI,CAAE,MAAM,KAAK,QAAQ,EAAI,OAAM,IAAI,MAAM,0CAA0C;AACvF,cAAM,kBAAkB;AAAA,UACtB,MAAM;AAAA,UACN,MAAM,iBAAiB,MAAM,MAAM,UAAU,SAAS,SAAS;AAAA,QACjE;AAKA,cAAM,sBAAsB,MAAM,aAAa;AAC/C,YAAI,OAAO,KAAK,eAAe,EAAE,WAAW,KAAK,CAAC,qBAAqB;AACrE,gBAAM,aAAa,MAAM,EAAE,GAAG,OAAO,UAAU,KAAK,CAAC;AACrD,iBAAO,OAAO;AAAA,QAChB;AACA,gBAAQ;AAAA,UACN,GAAG;AAAA,UACH,UAAU;AAAA,UACV,UAAU,iBAAiB,wBAAwB,MAAM,UAAU,eAAe,CAAC;AAAA,QACrF;AACA,cAAM,aAAa,MAAM,KAAK;AAAA,MAChC;AACA,YAAM,IAAI,MAAM,8FAA8F;AAAA,IAChH;AAAA,EACF;AACF;","names":["rewroteColdMemory","discoveredAfter"]}

package/dist/{chunk-O4CA53UY.js → chunk-GBGU5OZP.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-MPC7TYTZ.js";
 import {
   importCapsule
-} from "./chunk-5IDQVE4U.js";
+} from "./chunk-A3UFV4K3.js";
 import {
   isSharedContextWriteInputError
 } from "./chunk-IFBSZGW3.js";
@@ -41,7 +41,13 @@ import {
   computeWhoKnows,
   loadWhoKnowsEntities,
   validateWhoKnowsInput
-} from "./chunk-AGCEJDG2.js";
+} from "./chunk-2ONKXEC7.js";
+import {
+  trustResultFor
+} from "./chunk-GNVZQ5JN.js";
+import {
+  renderEpistemicHedge
+} from "./chunk-YN2UN7N3.js";
 import {
   getTrustZoneStoreStatus,
   isTrustZoneName,
@@ -51,15 +57,9 @@ import {
   seedTrustZoneDemoDataset,
   summarizeTrustZonePromotionReadiness
 } from "./chunk-JWX2Q6HS.js";
-import {
-  trustResultFor
-} from "./chunk-GNVZQ5JN.js";
-import {
-  renderEpistemicHedge
-} from "./chunk-YN2UN7N3.js";
 import {
   summarizeHourlyStatus
-} from "./chunk-ESDOQEJM.js";
+} from "./chunk-2AKIVSHP.js";
 import {
   planSessionTranscriptMigration
 } from "./chunk-WWDO7ZWM.js";
@@ -69,6 +69,10 @@ import {
 import {
   runRecallWhy
 } from "./chunk-3NL4ALUP.js";
+import {
+  DEFAULT_TRAVERSE_LIMIT,
+  selectTraverseNeighbors
+} from "./chunk-YE4JBZO5.js";
 import {
   assertIdInNavigationWindow
 } from "./chunk-5KVT6G5U.js";
@@ -78,13 +82,12 @@ import {
 import {
   planDisclosureStep
 } from "./chunk-FLDXEJFX.js";
-import {
-  DEFAULT_TRAVERSE_LIMIT,
-  selectTraverseNeighbors
-} from "./chunk-YE4JBZO5.js";
 import {
   parseNavigateLinkType
 } from "./chunk-7O5EW7KX.js";
+import {
+  decideDisclosureEscalation
+} from "./chunk-H7XKCNR6.js";
 import {
   toRecallExplainJson
 } from "./chunk-WUL6LDJ4.js";
@@ -95,18 +98,15 @@ import {
 import {
   takeNavigateBudget
 } from "./chunk-VYDGHJIN.js";
-import {
-  decideDisclosureEscalation
-} from "./chunk-H7XKCNR6.js";
 import {
   readAggregateExtractionWatermark
-} from "./chunk-PBWJVRKE.js";
+} from "./chunk-FT75AQ74.js";
 import {
   ReplicaDivergenceMonitor
-} from "./chunk-E6UNM67F.js";
+} from "./chunk-B6SPPYGJ.js";
 import {
   buildEmbeddingAwareSnapshotStream
-} from "./chunk-CMOYD5CA.js";
+} from "./chunk-CCL2OXFO.js";
 import {
   recordObjectiveStateSnapshotsFromObservedMessages
 } from "./chunk-Z64TS5V4.js";
@@ -130,16 +130,16 @@ import {
 } from "./chunk-ERMT5WQM.js";
 import {
   readProjectedHarmonicGraph
-} from "./chunk-VCBS5GRQ.js";
+} from "./chunk-WY66J4PI.js";
 import {
   wrapWorkLayerContext
 } from "./chunk-EI6V5UXY.js";
 import {
   CONNECTOR_LABEL_MAX_LENGTH
-} from "./chunk-4KS4IHKH.js";
+} from "./chunk-JX3E4XCW.js";
 import {
   isValidConnectorId
-} from "./chunk-LKRXGOQW.js";
+} from "./chunk-QA3Y2O6H.js";
 import {
   formatProfileTraceAscii
 } from "./chunk-DOWACHYO.js";
@@ -160,6 +160,9 @@ import {
   composeRecallContext,
   renderAuthorityBoundContent
 } from "./chunk-NVKO5YKP.js";
+import {
+  callDeepRecallPolicyLlm
+} from "./chunk-E3NBMTTX.js";
 import {
   renderDeepRecallResult
 } from "./chunk-RF2SMMPP.js";
@@ -173,9 +176,6 @@ import {
   CrossNamespaceBudget,
   toBudgetWarning
 } from "./chunk-UFGFMWAD.js";
-import {
-  callDeepRecallPolicyLlm
-} from "./chunk-E3NBMTTX.js";
 import {
   buildProposedActions,
   buildQualityScore,
@@ -183,17 +183,22 @@ import {
   listMemoryGovernanceRuns,
   readMemoryGovernanceRunArtifact,
   runMemoryGovernance
-} from "./chunk-YY6PWFUC.js";
+} from "./chunk-6ZAU7LAR.js";
 import {
   CorpusWatermarkCache,
   computeServiceCorpusCensus
-} from "./chunk-2J6BIOVN.js";
+} from "./chunk-4FM35YIA.js";
 import {
   ExtractionDeadlineError
-} from "./chunk-MCS4LIXP.js";
+} from "./chunk-43TUWQNR.js";
+import {
+  groupTurnsByExtractionScope,
+  hasPinnedCaptureScope,
+  scopeProfilePlanIdentity
+} from "./chunk-KZMRMKC7.js";
 import {
   LocalLlmClient
-} from "./chunk-AF4UIHON.js";
+} from "./chunk-74AY3S7U.js";
 import {
   defaultCapsulesDir
 } from "./chunk-ZY2MNJR6.js";
@@ -203,12 +208,10 @@ import {
   enqueuePassiveCorrectionNotification,
   parseBriefingFocus,
   parseBriefingWindow
-} from "./chunk-RZDDNH63.js";
+} from "./chunk-A6JDT6QF.js";
 import {
-  groupTurnsByExtractionScope,
-  hasPinnedCaptureScope,
-  scopeProfilePlanIdentity
-} from "./chunk-KZMRMKC7.js";
+  withBriefingDeadline
+} from "./chunk-X2KO4FK5.js";
 import {
   meetingsBuild,
   meetingsGet,
@@ -245,7 +248,7 @@ import {
 } from "./chunk-AWD36R4D.js";
 import {
   resolveEffectiveDeepRecallConfig
-} from "./chunk-A7AISUJI.js";
+} from "./chunk-AJG2TAMR.js";
 import {
   buildProcedurePersistBody,
   normalizeProcedureSteps,
@@ -261,7 +264,7 @@ import {
   qmdCollectionPathParts,
   qmdResultPathCandidates,
   selfDeps
-} from "./chunk-6W3QH3QW.js";
+} from "./chunk-JIJAWTRK.js";
 import {
   namespaceCollectionName
 } from "./chunk-LXXIV7Y2.js";
@@ -273,7 +276,7 @@ import {
   createVersion,
   getVersion,
   revertToVersion
-} from "./chunk-2NLCDNGA.js";
+} from "./chunk-564YP3DW.js";
 import {
   MEMORY_CORPUS_VERSION_SENTINEL,
   bumpMemoryCorpusVersionForDir
@@ -282,10 +285,13 @@ import {
   HistoricalEntityCanonicalIdCache,
   canonicalizeEntityRefFrontmatter,
   repairContentAfterJournalMoveSync
-} from "./chunk-LWRIGKFM.js";
+} from "./chunk-A5L5KGDI.js";
 import {
   supersessionKeysForFact
 } from "./chunk-5WITETWU.js";
+import {
+  withCaptureWriteLockBackoff
+} from "./chunk-7VLBZKNB.js";
 import {
   FallbackLlmClient,
   gatewayTaskChainOptions
@@ -293,9 +299,6 @@ import {
 import {
   fallbackLlmRuntimeContextFromConfig
 } from "./chunk-YIJECSIX.js";
-import {
-  withCaptureWriteLockBackoff
-} from "./chunk-7VLBZKNB.js";
 import {
   DEFAULT_RECALL_DISCLOSURE,
   isRecallDisclosure
@@ -312,11 +315,11 @@ import {
 } from "./chunk-YLXETSAH.js";
 import {
   splitCanonicalWriteRequest
-} from "./chunk-3NYIXVCT.js";
+} from "./chunk-2S6JADBB.js";
 import {
-  applyBriefingLocationContext,
+  buildWithBriefingLocation,
   daySummaryAutoOptions
-} from "./chunk-YFXRLRKP.js";
+} from "./chunk-S4OZKPBS.js";
 import {
   STRUCTURED_ATTRIBUTE_LIMITS,
   buildAccessWriteRequestFingerprint,
@@ -334,16 +337,16 @@ import {
 } from "./chunk-SDXBR5QO.js";
 import {
   reapplyCategoryCoercion
-} from "./chunk-BMG3SAXA.js";
+} from "./chunk-HQUYENKK.js";
 import {
   exportCapsule
-} from "./chunk-7LCGFUMB.js";
+} from "./chunk-KQAFEZQX.js";
 import {
   evaluateActionConfidence
 } from "./chunk-Z2YFLXHU.js";
 import {
   createOfflineSyncManifestStream
-} from "./chunk-FYZXZUGU.js";
+} from "./chunk-UQBOPCDK.js";
 import {
   offlineSyncStorageForSnapshot
 } from "./chunk-KQXRVELF.js";
@@ -399,7 +402,7 @@ import {
   enforceNamespaceAllowList,
   isNamespaceAllowed,
   tokenCapabilityStore
-} from "./chunk-IG747LRN.js";
+} from "./chunk-YO2JEX2Z.js";
 import {
   computeContentHash
 } from "./chunk-5FVVY2EB.js";
@@ -426,7 +429,7 @@ import {
   buildOfflineSyncSnapshotFromBase,
   normalizeOfflineSyncChangeset,
   readOfflineSyncFileContentChunk
-} from "./chunk-SA6P2KS3.js";
+} from "./chunk-TEH5MDX5.js";
 import {
   compileOfflineSyncExcludeGlobs
 } from "./chunk-63LFM77Z.js";
@@ -449,7 +452,7 @@ import {
   memorySearchThroughScope,
   mergeMemorySearchDefaultFallback,
   resolveMemorySearchDefaultFallback
-} from "./chunk-NWIT3U2N.js";
+} from "./chunk-S5CQI2KF.js";
 import {
   canReadNamespace,
   canWriteNamespace,
@@ -508,7 +511,7 @@ import {
   EngramAccessForbiddenError,
   EngramAccessInputError,
   NamespaceNotWritableError
-} from "./chunk-3MUKQQ7A.js";
+} from "./chunk-LGEH473S.js";
 import {
   abortError,
   isAbortError,
@@ -4268,45 +4271,39 @@ function formatZodIssues(error) {
     const path17 = hasNumeric ? issue.path.filter((p) => typeof p === "string").join(".") || "(root)" : issue.path.length > 0 ? issue.path.join(".") : "(root)";
     const options = enumOptionsFromIssue(issue);
     const suffix = options ? `. Valid: ${options.join(", ")}` : "";
-    parts.push(`${path17}: ${issue.message}${suffix}`);
+    parts.push(`${path17}: ${humanReadableIssueMessage(issue, path17, hasNumeric)}${suffix}`);
   }
   return parts.length > 0 ? `request validation failed: ${parts.join("; ")}` : "request validation failed";
 }
 function enumOptionsFromIssue(issue) {
-  if (issue.code === z.ZodIssueCode.invalid_enum_value) {
-    const rawOptions = issue.options;
-    if (Array.isArray(rawOptions)) {
-      return rawOptions.map((opt) => String(opt));
-    }
+  if (issue.code !== "invalid_value") return void 0;
+  const rawValues = "values" in issue ? issue.values : void 0;
+  return Array.isArray(rawValues) ? rawValues.map((opt) => String(opt)) : void 0;
+}
+function humanReadableIssueMessage(issue, pathLabel, hasNumericPath) {
+  if (issue.code !== "invalid_type") return issue.message;
+  const expected = issue.expected;
+  if (issue.message.endsWith("received undefined")) return issue.message;
+  if (hasNumericPath && expected) {
+    return `${pathLabel} must be an array of ${expected}s`;
+  }
+  const fieldName = issue.path.length > 0 ? String(issue.path[issue.path.length - 1]) : "value";
+  switch (expected) {
+    case "string":
+      return `${fieldName} must be a string`;
+    case "boolean":
+      return `${fieldName} must be a boolean`;
+    case "number":
+      return `${fieldName} must be a number`;
+    case "array":
+      return `${fieldName} must be an array`;
+    case "object":
+      return `${fieldName} must be an object`;
+    default:
+      return issue.message;
   }
-  return void 0;
 }
 var registry = /* @__PURE__ */ new Map();
-var humanReadableErrorMap = (issue, ctx) => {
-  if (issue.code === z.ZodIssueCode.invalid_type) {
-    if (issue.received === "undefined") return { message: ctx.defaultError };
-    if (issue.path.some((p) => typeof p === "number")) {
-      const arrField = issue.path.filter((p) => typeof p === "string").join(".");
-      return { message: `${arrField} must be an array of ${issue.expected}s` };
-    }
-    const fieldName = issue.path.length > 0 ? String(issue.path[issue.path.length - 1]) : "value";
-    switch (issue.expected) {
-      case "string":
-        return { message: `${fieldName} must be a string` };
-      case "boolean":
-        return { message: `${fieldName} must be a boolean` };
-      case "number":
-        return { message: `${fieldName} must be a number` };
-      case "array":
-        return { message: `${fieldName} must be an array` };
-      case "object":
-        return { message: `${fieldName} must be an object` };
-      default:
-        return { message: ctx.defaultError };
-    }
-  }
-  return { message: ctx.defaultError };
-};
 function defineOperation(spec) {
   if (registry.has(spec.name)) {
     throw new Error(`access-boundary: operation already registered: ${spec.name}`);
@@ -4314,7 +4311,7 @@ function defineOperation(spec) {
   const bound = {
     spec,
     run: async (rawInput, ctx) => {
-      const parseResult = spec.schema.safeParse(rawInput, { errorMap: humanReadableErrorMap });
+      const parseResult = spec.schema.safeParse(rawInput);
       if (!parseResult.success) {
         throw new EngramAccessInputError(formatZodIssues(parseResult.error));
       }
@@ -4332,7 +4329,14 @@ function operationRequiresAuthorizedNamespace(name) {
   if (name === "namespace_writable") return false;
   if (IMPLICIT_HTTP_NAMESPACE_OPERATIONS.has(name)) return true;
   let schema = registry.get(name)?.spec.schema;
-  while (schema instanceof z.ZodEffects) schema = schema.innerType();
+  while (schema instanceof z.ZodType && !(schema instanceof z.ZodObject)) {
+    const wrapper = schema;
+    const sides = [wrapper.in, wrapper.out].filter(
+      (side) => side instanceof z.ZodType && !(side instanceof z.ZodTransform)
+    );
+    if (sides.length !== 1) break;
+    schema = sides[0];
+  }
   return schema instanceof z.ZodObject && Object.hasOwn(schema.shape, "namespace");
 }
 function operationUsesPrincipalNamespace(name) {
@@ -7607,7 +7611,6 @@ var AccessObserveWriteSurface = class {
       throw new EngramAccessInputError("briefing is disabled");
     }
     const namespace = this.deps.resolveReadableNamespace(request.namespace, request.principal);
-    const storage = await this.deps.orchestrator.getStorage(namespace);
     const token = typeof request.since === "string" && request.since.trim().length > 0 ? request.since.trim() : config.briefing.defaultWindow;
     const window = parseBriefingWindow(token);
     if (!window) {
@@ -7630,23 +7633,27 @@ var AccessObserveWriteSurface = class {
     const format = request.format === "json" ? "json" : request.format === "markdown" ? "markdown" : config.briefing.defaultFormat;
     const maxFollowups = typeof request.maxFollowups === "number" && Number.isFinite(request.maxFollowups) ? Math.max(0, Math.min(10, Math.floor(request.maxFollowups))) : config.briefing.maxFollowups;
     const calendarSource = config.briefing.calendarSource ? new FileCalendarSource(config.briefing.calendarSource) : void 0;
-    const result = await applyBriefingLocationContext(await buildBriefing({
-      storage,
-      namespace,
-      window,
-      focus,
-      calendarSource,
-      maxFollowups,
-      allowLlm: config.briefing.llmFollowups,
-      openaiApiKey: config.openaiApiKey,
-      openaiBaseUrl: config.openaiBaseUrl,
-      model: config.model,
-      // Without a direct OpenAI key, route follow-ups through the configured
-      // LLM chain (gateway model source or local LLM) — same fallback every
-      // other LLM feature uses. A configured key keeps its precedence so
-      // existing deployments are unchanged.
-      followupGenerator: config.openaiApiKey ? void 0 : this.deps.orchestrator.briefingChainFollowupGenerator
-    }), request.includeLocation, storage.dir, window.from.toISOString(), config.location);
+    const result = await withBriefingDeadline(async (signal) => {
+      const storage = await this.deps.orchestrator.getStorage(namespace);
+      return buildWithBriefingLocation(request.includeLocation, storage.dir, window.from.toISOString(), config.location, () => buildBriefing({
+        storage,
+        namespace,
+        window,
+        focus,
+        calendarSource,
+        maxFollowups,
+        allowLlm: config.briefing.llmFollowups,
+        openaiApiKey: config.openaiApiKey,
+        openaiBaseUrl: config.openaiBaseUrl,
+        model: config.model,
+        // Without a direct OpenAI key, route follow-ups through the configured
+        // LLM chain (gateway model source or local LLM) — same fallback every
+        // other LLM feature uses. A configured key keeps its precedence so
+        // existing deployments are unchanged.
+        followupGenerator: config.openaiApiKey ? void 0 : this.deps.orchestrator.briefingChainFollowupGenerator,
+        abortSignal: signal
+      }));
+    }, request.abortSignal);
     return {
       format,
       window: result.window,
@@ -18790,4 +18797,4 @@ export {
   EngramAccessService,
   AccessAdminOpsSurface
 };
-//# sourceMappingURL=chunk-O4CA53UY.js.map
+//# sourceMappingURL=chunk-GBGU5OZP.js.map