@remnic/core 10.0.91 → 10.0.93

package/dist/chunk-5KBIOI4G.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/shared-context/manager.ts","../src/shared-context/contradictions.ts","../src/shared-context/curation-lint.ts","../src/shared-context/provenance.ts","../src/shared-context/staleness.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport type { Stats } from \"node:fs\";\nimport { mkdir, readFile, readdir, appendFile, writeFile, stat, lstat, realpath, rename, rm } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { z } from \"zod\";\nimport { log } from \"../logger.js\";\nimport type { PluginConfig } from \"../types.js\";\nimport { isErrnoCode } from \"../utils/errno.js\";\nimport { expandTildePath } from \"../utils/path.js\";\nimport { pathIsInside } from \"../utils/path-containment.js\";\nimport { resolveConversationContextCapabilities } from \"../capabilities.js\";\nimport { throwIfAborted } from \"../abort-error.js\";\nimport {\n  composeWriteEnvelope,\n  envelopeFromScalars,\n  envelopeToFrontmatterLines,\n  resolveReadAuthority,\n  resolveWriteOrigin,\n} from \"./envelope-io.js\";\nimport type { SharedAuthority, SharedEnvelope } from \"./governance.js\";\nimport { detectContradictionPair } from \"./contradictions.js\";\nimport { lintCuratedClaims } from \"./curation-lint.js\";\nimport { stampProvenance } from \"./provenance.js\";\nimport { filterLiveEnvelopes, markSupersededCirculation } from \"./staleness.js\";\n\nexport const SharedFeedbackEntrySchema = z.object({\n  agent: z.string().min(1),\n  decision: z.enum([\"approved\", \"approved_with_feedback\", \"rejected\"]),\n  reason: z.string().min(1),\n  date: z.string().min(8), // ISO-ish; keep loose\n  learning: z.string().optional(),\n  outcome: z.string().optional(),\n  severity: z.enum([\"low\", \"medium\", \"high\"]).optional(),\n  confidence: z.number().min(0).max(1).optional(),\n  workflow: z.string().min(1).optional(),\n  tags: z.array(z.string().min(1)).optional(),\n  evidenceWindowStart: z.string().min(8).optional(),\n  evidenceWindowEnd: z.string().min(8).optional(),\n  refs: z.array(z.string()).optional(),\n});\n\nexport type SharedFeedbackEntry = z.infer<typeof SharedFeedbackEntrySchema>;\n\nfunction safeSlug(s: string): string {\n  let slug = s.toLowerCase().replace(/[^a-z0-9]+/g, \"-\");\n  // Trim leading/trailing dashes without ReDoS-prone anchored quantifiers\n  let start = 0;\n  while (start < slug.length && slug[start] === \"-\") start++;\n  let end = slug.length;\n  while (end > start && slug[end - 1] === \"-\") end--;\n  return slug.slice(start, end).slice(0, 80) || \"output\";\n}\n\nfunction safePathSegment(s: string, label: string): string {\n  if (s.length === 0) throw new Error(`${label} must not be empty`);\n  if (/[\\r\\n]/.test(s)) throw new Error(`${label} must not contain line breaks`);\n  const encoded = encodeURIComponent(s);\n  if (encoded === \".\" || encoded === \"..\") {\n    return encoded.replace(/\\./g, \"%2E\");\n  }\n  return encoded;\n}\n\nfunction safeDecodePathSegment(s: string): string {\n  try {\n    return decodeURIComponent(s);\n  } catch {\n    return s;\n  }\n}\n\nfunction normalizeFrontmatterScalar(value: string): string {\n  if (value.length >= 2 && value.startsWith('\"') && value.endsWith('\"')) {\n    try {\n      const parsed = JSON.parse(value);\n      if (typeof parsed === \"string\") return parsed;\n    } catch {\n      // Fall through to the legacy partial unescape below.\n    }\n    return value.slice(1, -1).replace(/\\\\\"/g, '\"').replace(/\\\\\\\\/g, \"\\\\\");\n  }\n  if (value.length >= 2 && value.startsWith(\"'\") && value.endsWith(\"'\")) {\n    return value.slice(1, -1).replace(/''/g, \"'\");\n  }\n  return value;\n}\n\nfunction formatFrontmatterScalar(value: string): string {\n  return JSON.stringify(value);\n}\n\nfunction readFrontmatterScalar(raw: string, key: string): string | null {\n  const frontmatter = raw.match(/^---\\r?\\n([\\s\\S]*?)\\r?\\n---(?:\\r?\\n|$)/)?.[1];\n  if (!frontmatter) return null;\n  for (const line of frontmatter.split(/\\r?\\n/)) {\n    if (!line.startsWith(`${key}:`)) continue;\n    const value = line.slice(key.length + 1).trim();\n    return value ? normalizeFrontmatterScalar(value) : null;\n  }\n  return null;\n}\n\nfunction ymd(d: Date): string {\n  return d.toISOString().slice(0, 10);\n}\n\nfunction safeDateSegment(date: string): string {\n  if (!/^\\d{4}-\\d{2}-\\d{2}$/.test(date)) {\n    throw new Error(`Invalid shared-context date: ${JSON.stringify(date)}; expected YYYY-MM-DD`);\n  }\n  const parsed = new Date(`${date}T00:00:00.000Z`);\n  if (!Number.isFinite(parsed.getTime()) || parsed.toISOString().slice(0, 10) !== date) {\n    throw new Error(`Invalid shared-context date: ${JSON.stringify(date)}; expected a real calendar date`);\n  }\n  return date;\n}\n\nconst CROSS_SIGNAL_STOPWORDS = new Set([\n  \"a\",\n  \"an\",\n  \"and\",\n  \"are\",\n  \"as\",\n  \"at\",\n  \"be\",\n  \"by\",\n  \"for\",\n  \"from\",\n  \"has\",\n  \"have\",\n  \"in\",\n  \"is\",\n  \"it\",\n  \"of\",\n  \"on\",\n  \"or\",\n  \"that\",\n  \"the\",\n  \"this\",\n  \"to\",\n  \"was\",\n  \"were\",\n  \"with\",\n  \"agent\",\n  \"output\",\n  \"today\",\n  \"daily\",\n  \"notes\",\n  \"note\",\n  \"summary\",\n]);\n\nfunction extractTopicTokens(text: string, maxTokens: number = 12): string[] {\n  const seen = new Set<string>();\n  const out: string[] = [];\n  const tokens = text\n    .toLowerCase()\n    .replace(/[^a-z0-9\\s]/g, \" \")\n    .split(/\\s+/)\n    .map((token) => token.trim())\n    .filter((token) => token.length >= 4)\n    .filter((token) => !CROSS_SIGNAL_STOPWORDS.has(token));\n\n  for (const token of tokens) {\n    if (seen.has(token)) continue;\n    seen.add(token);\n    out.push(token);\n    if (out.length >= maxTokens) break;\n  }\n  return out;\n}\n\nfunction stripYamlFrontmatter(text: string): string {\n  if (!text.startsWith(\"---\\n\")) return text;\n  const closing = text.indexOf(\"\\n---\\n\", 4);\n  if (closing === -1) return text;\n  return text.slice(closing + 5);\n}\n\nfunction semanticRoot(token: string): string {\n  let root = token.toLowerCase();\n  if (root.endsWith(\"izations\") && root.length > 9) {\n    root = `${root.slice(0, -8)}ize`;\n  }\n  else if (root.endsWith(\"ization\") && root.length > 8) {\n    root = `${root.slice(0, -7)}ize`;\n  } else if (root.endsWith(\"isations\") && root.length > 9) {\n    root = `${root.slice(0, -8)}ise`;\n  } else if (root.endsWith(\"isation\") && root.length > 8) {\n    root = `${root.slice(0, -7)}ise`;\n  } else {\n    const suffixes = [\n      \"ations\",\n      \"ation\",\n      \"ments\",\n      \"ment\",\n      \"ingly\",\n      \"edly\",\n      \"ings\",\n      \"ing\",\n      \"ers\",\n      \"er\",\n      \"ies\",\n      \"ied\",\n      \"ions\",\n      \"ion\",\n      \"es\",\n      \"ed\",\n      \"s\",\n    ];\n    for (const suffix of suffixes) {\n      if (root.length > suffix.length + 3 && root.endsWith(suffix)) {\n        root = root.slice(0, -suffix.length);\n        break;\n      }\n    }\n  }\n  if (root.length > 4 && root.endsWith(\"e\")) {\n    root = root.slice(0, -1);\n  }\n  return root;\n}\n\nfunction mergeOverlaps(\n  base: SharedCrossSignalOverlap[],\n  extra: SharedCrossSignalOverlap[],\n): SharedCrossSignalOverlap[] {\n  const merged = new Map<string, { agents: Set<string>; sourcePaths: Set<string> }>();\n  for (const entry of [...base, ...extra]) {\n    const existing = merged.get(entry.token);\n    if (existing) {\n      for (const agent of entry.agents) existing.agents.add(agent);\n      for (const sourcePath of entry.sourcePaths) existing.sourcePaths.add(sourcePath);\n    } else {\n      merged.set(entry.token, {\n        agents: new Set(entry.agents),\n        sourcePaths: new Set(entry.sourcePaths),\n      });\n    }\n  }\n  return [...merged.entries()]\n    .map(([token, value]) => ({\n      token,\n      agents: [...value.agents].sort(),\n      sourcePaths: [...value.sourcePaths].sort(),\n      agentCount: value.agents.size,\n    }))\n    .filter((entry) => entry.agentCount >= 2)\n    .sort((a, b) => b.agentCount - a.agentCount || a.token.localeCompare(b.token));\n}\n\nasync function computeSemanticOverlapCandidates(\n  sources: SharedCrossSignalSource[],\n  maxCandidates: number,\n  timeoutAtMs: number,\n): Promise<{ overlaps: SharedCrossSignalOverlap[]; candidateCount: number; timedOut: boolean }> {\n  const tokenRows: Array<{ token: string; agent: string; path: string }> = [];\n  for (const source of sources) {\n    for (const token of source.topics) {\n      if (Date.now() >= timeoutAtMs) return { overlaps: [], candidateCount: tokenRows.length, timedOut: true };\n      await new Promise<void>((resolve) => setImmediate(resolve));\n      tokenRows.push({ token, agent: source.agent, path: source.path });\n      if (tokenRows.length >= maxCandidates) break;\n    }\n    if (tokenRows.length >= maxCandidates) break;\n  }\n\n  const byRoot = new Map<string, Map<string, { agents: Set<string>; paths: Set<string> }>>();\n  for (const row of tokenRows) {\n    if (Date.now() >= timeoutAtMs) return { overlaps: [], candidateCount: tokenRows.length, timedOut: true };\n    await new Promise<void>((resolve) => setImmediate(resolve));\n    const root = semanticRoot(row.token);\n    if (root.length < 4) continue;\n    const rootGroup = byRoot.get(root) ?? new Map<string, { agents: Set<string>; paths: Set<string> }>();\n    const tokenGroup = rootGroup.get(row.token) ?? { agents: new Set<string>(), paths: new Set<string>() };\n    tokenGroup.agents.add(row.agent);\n    tokenGroup.paths.add(row.path);\n    rootGroup.set(row.token, tokenGroup);\n    byRoot.set(root, rootGroup);\n  }\n\n  const overlaps: SharedCrossSignalOverlap[] = [];\n  for (const [root, tokenMap] of byRoot.entries()) {\n    if (Date.now() >= timeoutAtMs) return { overlaps: [], candidateCount: tokenRows.length, timedOut: true };\n    await new Promise<void>((resolve) => setImmediate(resolve));\n    if (tokenMap.size < 2) continue;\n    const agents = new Set<string>();\n    const sourcePaths = new Set<string>();\n    for (const value of tokenMap.values()) {\n      for (const agent of value.agents) agents.add(agent);\n      for (const sourcePath of value.paths) sourcePaths.add(sourcePath);\n    }\n    if (agents.size < 2) continue;\n    overlaps.push({\n      token: `semantic:${root}`,\n      agents: [...agents].sort(),\n      sourcePaths: [...sourcePaths].sort(),\n      agentCount: agents.size,\n    });\n  }\n\n  overlaps.sort((a, b) => b.agentCount - a.agentCount || a.token.localeCompare(b.token));\n  return {\n    overlaps,\n    candidateCount: tokenRows.length,\n    timedOut: false,\n  };\n}\n\nasync function computeSemanticOverlapsWithTimeout(\n  sources: SharedCrossSignalSource[],\n  timeoutMs: number,\n  maxCandidates: number,\n): Promise<{ overlaps: SharedCrossSignalOverlap[]; candidateCount: number; timedOut: boolean }> {\n  const safeTimeoutMs = Math.max(1, Math.floor(timeoutMs));\n  const safeMaxCandidates = Math.max(0, Math.floor(maxCandidates));\n  if (safeMaxCandidates === 0 || sources.length === 0) {\n    return { overlaps: [], candidateCount: 0, timedOut: false };\n  }\n  const timeoutAtMs = Date.now() + safeTimeoutMs;\n  return computeSemanticOverlapCandidates(sources, safeMaxCandidates, timeoutAtMs);\n}\n\ninterface SharedCrossSignalSource {\n  agent: string;\n  path: string;\n  title: string;\n  topics: string[];\n  /** Resolved least-privilege authority from the item's envelope (issue #1957). */\n  authority: SharedAuthority;\n  /** Envelope origin agent id; legacy items fall back to the agent field. */\n  sharedBy: string;\n}\n\ninterface SharedCrossSignalOverlap {\n  token: string;\n  agents: string[];\n  sourcePaths: string[];\n  agentCount: number;\n}\n\ninterface SharedCrossSignalReport {\n  date: string;\n  generatedAt: string;\n  sourceCount: number;\n  feedbackCount: number;\n  feedbackByDecision: Record<\"approved\" | \"approved_with_feedback\" | \"rejected\", number>;\n  feedbackEntries: SharedFeedbackEntry[];\n  sources: SharedCrossSignalSource[];\n  overlaps: SharedCrossSignalOverlap[];\n  /** Control 2 (issue #1957): expiry drops and supersession circulation. */\n  staleness: {\n    expiredDropped: number;\n    supersededStillCirculating: string[];\n  };\n  /** Control 3 (issue #1957): refs two agents ruled on differently. */\n  disputed: Array<{ ref: string; agents: string[]; decisions: string[] }>;\n  /** Control 4 (issue #1957): who synthesized this report and when. */\n  provenance: { actor: string; at: string };\n  semantic: {\n    enabled: boolean;\n    applied: boolean;\n    timedOut: boolean;\n    candidateCount: number;\n    maxCandidates: number;\n    addedOverlapCount: number;\n  };\n}\n\nexport interface SharedCrossSignalSynthesisResult {\n  date: string;\n  crossSignalsPath: string;\n  crossSignalsMarkdownPath: string;\n  overlapCount: number;\n  report: SharedCrossSignalReport;\n}\n\nexport interface SharedDailyCurationResult {\n  date: string;\n  roundtablePath: string;\n  crossSignalsPath: string;\n  crossSignalsMarkdownPath: string;\n  overlapCount: number;\n}\n\nfunction feedbackDecisionPriority(decision: SharedFeedbackEntry[\"decision\"]): number {\n  switch (decision) {\n    case \"rejected\":\n      return 3;\n    case \"approved_with_feedback\":\n      return 2;\n    case \"approved\":\n      return 1;\n  }\n}\n\nfunction feedbackSeverityPriority(severity: SharedFeedbackEntry[\"severity\"]): number {\n  switch (severity) {\n    case \"high\":\n      return 3;\n    case \"medium\":\n      return 2;\n    case \"low\":\n      return 1;\n    default:\n      return 0;\n  }\n}\n\nfunction compareFeedbackPriority(a: SharedFeedbackEntry, b: SharedFeedbackEntry): number {\n  return (\n    feedbackDecisionPriority(b.decision) - feedbackDecisionPriority(a.decision)\n    || feedbackSeverityPriority(b.severity) - feedbackSeverityPriority(a.severity)\n    || a.date.localeCompare(b.date)\n  );\n}\n\nfunction markdownLineText(value: string): string {\n  return value.replace(/[\\r\\n]+/g, \" \").replace(/\\s+/g, \" \").trim();\n}\n\nfunction markdownLineList(values: readonly string[]): string {\n  return values.map(markdownLineText).filter(Boolean).join(\", \");\n}\n\nfunction formatFeedbackLine(entry: SharedFeedbackEntry): string {\n  const extras: string[] = [`feedback: ${markdownLineText(entry.date)}`];\n  if (entry.severity) extras.push(`severity: ${markdownLineText(entry.severity)}`);\n  if (entry.refs?.length) extras.push(`refs: ${markdownLineList(entry.refs)}`);\n  return `- [${markdownLineText(entry.agent)}] ${entry.decision}: ${markdownLineText(entry.reason)} [${extras.join(\"; \")}]`;\n}\n\nfunction formatOverlapLine(entry: SharedCrossSignalOverlap): string {\n  return `- \\`${entry.token}\\` (${entry.agentCount} agents: ${markdownLineList(entry.agents)}) [sources: ${markdownLineList(entry.sourcePaths)}]`;\n}\n\nfunction formatStalenessLines(report: SharedCrossSignalReport): string[] {\n  const circulating = report.staleness.supersededStillCirculating;\n  return [\n    `- Expired items dropped: ${report.staleness.expiredDropped}`,\n    circulating.length === 0\n      ? \"- Superseded items still circulating: 0\"\n      : `- Superseded items still circulating: ${circulating.length} (${markdownLineList(circulating)})`,\n  ];\n}\n\nfunction formatDisputedLines(report: SharedCrossSignalReport): string[] {\n  if (report.disputed.length === 0) return [\"- No contradictory agent judgments recorded.\"];\n  return report.disputed.map((entry) =>\n    `- \\`${entry.ref}\\` disputed by ${markdownLineList(entry.agents)} (decisions: ${markdownLineList(entry.decisions)})`\n  );\n}\n\nasync function writeFileAtomic(filePath: string, content: string): Promise<void> {\n  await mkdir(path.dirname(filePath), { recursive: true });\n  const tempPath = path.join(\n    path.dirname(filePath),\n    `.${path.basename(filePath)}.${process.pid}.${randomUUID()}.tmp`,\n  );\n  try {\n    await writeFile(tempPath, content, { encoding: \"utf-8\", flag: \"wx\" });\n    await rename(tempPath, filePath);\n  } catch (error) {\n    await rm(tempPath, { force: true }).catch(() => undefined);\n    throw error;\n  }\n}\n\nexport function resolveSharedContextDir(config: PluginConfig): string {\n  return typeof config.sharedContextDir === \"string\" && config.sharedContextDir.length > 0\n    ? expandTildePath(config.sharedContextDir)\n    : path.join(expandTildePath(config.workspaceDir), \"shared-context\");\n}\n\n/**\n * Feedback inbox path. An explicit `sharedContextDir` keeps the inbox beside\n * the other shared-context files. When that override is unset, the inbox\n * lives under the memory directory so a standalone store replicates it.\n * Priorities, outputs, and roundtable stay on {@link resolveSharedContextDir}.\n */\nexport function resolveFeedbackInboxPath(config: PluginConfig): string {\n  if (typeof config.sharedContextDir === \"string\" && config.sharedContextDir.length > 0) {\n    return path.join(resolveSharedContextDir(config), \"feedback\", \"inbox.jsonl\");\n  }\n  return path.join(expandTildePath(config.memoryDir), \"shared-context\", \"feedback\", \"inbox.jsonl\");\n}\n\n/**\n * Copy a pre-upgrade workspace inbox into the memory-dir inbox once.\n *\n * Older builds stored `feedback/inbox.jsonl` under the workspace\n * shared-context directory even when `sharedContextDir` was unset. The copy\n * runs only while the memory-dir inbox is missing or empty, and only for a\n * regular legacy file that stays inside the workspace. A non-empty memory-dir\n * inbox is left untouched, so a later workspace file is not read again.\n * An explicit `sharedContextDir` does not migrate.\n */\nexport async function migrateLegacyFeedbackInbox(config: PluginConfig): Promise<void> {\n  if (typeof config.sharedContextDir === \"string\" && config.sharedContextDir.length > 0) return;\n  const nextPath = resolveFeedbackInboxPath(config);\n  const legacyPath = path.join(resolveSharedContextDir(config), \"feedback\", \"inbox.jsonl\");\n  if (path.resolve(nextPath) === path.resolve(legacyPath)) return;\n  if (!(await legacyInboxCanMigrate(legacyPath))) return;\n  try {\n    const nextProbe = await lstat(nextPath);\n    if (nextProbe.isSymbolicLink() || !nextProbe.isFile() || nextProbe.size > 0) return;\n  } catch (err) {\n    if (!isErrnoCode(err, \"ENOENT\")) throw err;\n  }\n\n  await mkdir(path.dirname(nextPath), { recursive: true });\n  await withFeedbackMigrateLock(`${nextPath}.migrate.lock`, async () => {\n    let nextStat: Stats | undefined;\n    try {\n      nextStat = await lstat(nextPath);\n    } catch (err) {\n      if (!isErrnoCode(err, \"ENOENT\")) throw err;\n    }\n    if (nextStat && (nextStat.isSymbolicLink() || !nextStat.isFile() || nextStat.size > 0)) return;\n    if (!(await legacyInboxCanMigrate(legacyPath))) return;\n\n    const workspaceReal = await realpath(expandTildePath(config.workspaceDir));\n    const legacyReal = await realpath(legacyPath);\n    if (!pathIsInside(workspaceReal, legacyReal)) return;\n    const memoryDir = expandTildePath(config.memoryDir);\n    const memoryReal = await realpath(memoryDir);\n    const nextParentReal = await realpath(path.dirname(nextPath));\n    if (!pathIsInside(memoryReal, nextParentReal)) return;\n    if (nextStat) {\n      const nextReal = await realpath(nextPath);\n      if (!pathIsInside(memoryReal, nextReal)) return;\n    }\n\n    const body = await readFile(legacyReal);\n    const tempPath = path.join(\n      path.dirname(nextPath),\n      `.${path.basename(nextPath)}.${process.pid}.${randomUUID()}.migrate.tmp`,\n    );\n    await writeFile(tempPath, body, { flag: \"wx\" });\n    try {\n      let current: Stats | undefined;\n      try {\n        current = await lstat(nextPath);\n      } catch (err) {\n        if (!isErrnoCode(err, \"ENOENT\")) throw err;\n      }\n      if (current && (current.isSymbolicLink() || !current.isFile() || current.size > 0)) return;\n      await rename(tempPath, nextPath);\n    } finally {\n      await rm(tempPath, { force: true }).catch(() => undefined);\n    }\n  });\n}\n\nasync function legacyInboxCanMigrate(legacyPath: string): Promise<boolean> {\n  let legacyStat: Stats;\n  try {\n    legacyStat = await lstat(legacyPath);\n  } catch (err) {\n    if (isErrnoCode(err, \"ENOENT\")) return false;\n    throw err;\n  }\n  return !legacyStat.isSymbolicLink() && legacyStat.isFile() && legacyStat.size > 0;\n}\n\n/** One migration at a time. A lock older than 30s is stale and is replaced. */\nasync function withFeedbackMigrateLock(lockPath: string, body: () => Promise<void>): Promise<void> {\n  const deadline = Date.now() + 2_000;\n  while (Date.now() < deadline) {\n    try {\n      await writeFile(lockPath, \"\", { flag: \"wx\" });\n    } catch (err) {\n      if (!isErrnoCode(err, \"EEXIST\")) throw err;\n      let lockStat: Stats;\n      try {\n        lockStat = await lstat(lockPath);\n      } catch (statErr) {\n        if (isErrnoCode(statErr, \"ENOENT\")) continue;\n        throw statErr;\n      }\n      if (!lockStat.isSymbolicLink() && lockStat.isFile() && Date.now() - lockStat.mtimeMs > 30_000) {\n        await rm(lockPath, { force: true });\n        continue;\n      }\n      await new Promise((resolve) => setTimeout(resolve, 20));\n      continue;\n    }\n    try {\n      await body();\n    } finally {\n      await rm(lockPath, { force: true });\n    }\n    return;\n  }\n  throw new Error(\"feedback inbox migration did not acquire its lock before the wait elapsed\");\n}\n\nexport class SharedContextManager {\n  readonly dir: string;\n  private readonly prioritiesPath: string;\n  private readonly prioritiesInboxPath: string;\n  private readonly outputsDir: string;\n  private readonly roundtableDir: string;\n  private readonly feedbackDir: string;\n  private readonly feedbackInboxPath: string;\n  private readonly crossSignalsDir: string;\n  private readonly allowBindingAuthority: boolean;\n  private readonly dailySynthesisChains = new Map<string, Promise<void>>();\n\n  constructor(private readonly config: PluginConfig) {\n    const base = resolveSharedContextDir(config);\n\n    this.dir = base;\n    this.prioritiesPath = path.join(base, \"priorities.md\");\n    this.prioritiesInboxPath = path.join(base, \"priorities.inbox.md\");\n    this.outputsDir = path.join(base, \"agent-outputs\");\n    this.roundtableDir = path.join(base, \"roundtable\");\n    this.feedbackInboxPath = resolveFeedbackInboxPath(config);\n    this.feedbackDir = path.dirname(this.feedbackInboxPath);\n    this.crossSignalsDir = path.join(base, \"cross-signals\");\n    this.allowBindingAuthority = config.sharedContextAllowBindingAuthority === true;\n  }\n\n  async ensureStructure(): Promise<void> {\n    await mkdir(this.dir, { recursive: true });\n    await mkdir(this.outputsDir, { recursive: true });\n    await mkdir(this.roundtableDir, { recursive: true });\n    await mkdir(this.feedbackDir, { recursive: true });\n    await mkdir(this.crossSignalsDir, { recursive: true });\n    await mkdir(path.join(this.dir, \"staging\"), { recursive: true });\n    await mkdir(path.join(this.dir, \"kpis\"), { recursive: true });\n    await mkdir(path.join(this.dir, \"calendar\"), { recursive: true });\n    await mkdir(path.join(this.dir, \"content-calendar\"), { recursive: true });\n\n    // Bootstrap files if missing.\n    await this.ensureFile(\n      this.prioritiesPath,\n      [\n        \"# Priorities\",\n        \"\",\n        \"This is the shared priority stack. Agents should read this before acting.\",\n        \"\",\n        \"## Current\",\n        \"- (empty)\",\n        \"\",\n        \"## Notes\",\n        \"- (empty)\",\n        \"\",\n      ].join(\"\\n\"),\n    );\n    await this.ensureFile(\n      this.prioritiesInboxPath,\n      [\n        \"# Priorities Inbox\",\n        \"\",\n        \"Append-only inbox. Curator merges into priorities.md.\",\n        \"\",\n      ].join(\"\\n\"),\n    );\n    await migrateLegacyFeedbackInbox(this.config);\n    await this.ensureFile(this.feedbackInboxPath, \"\");\n  }\n\n  private async ensureFile(fp: string, content: string): Promise<void> {\n    try {\n      await stat(fp);\n    } catch {\n      await writeFile(fp, content, \"utf-8\");\n    }\n  }\n\n  async readPriorities(signal?: AbortSignal): Promise<string> {\n    throwIfAborted(signal, \"shared context priorities read aborted\");\n    try {\n      const content = await readFile(this.prioritiesPath, { encoding: \"utf-8\", signal });\n      throwIfAborted(signal, \"shared context priorities read aborted\");\n      return content;\n    } catch {\n      throwIfAborted(signal, \"shared context priorities read aborted\");\n      return \"\";\n    }\n  }\n\n  async readLatestRoundtable(signal?: AbortSignal): Promise<string> {\n    throwIfAborted(signal, \"shared context roundtable read aborted\");\n    try {\n      const files = (await readdir(this.roundtableDir))\n        .filter((f) => f.endsWith(\".md\"))\n        .sort()\n        .reverse();\n      throwIfAborted(signal, \"shared context roundtable read aborted\");\n      const fp = files[0] ? path.join(this.roundtableDir, files[0]) : null;\n      if (!fp) return \"\";\n      const content = await readFile(fp, { encoding: \"utf-8\", signal });\n      throwIfAborted(signal, \"shared context roundtable read aborted\");\n      return content;\n    } catch {\n      throwIfAborted(signal, \"shared context roundtable read aborted\");\n      return \"\";\n    }\n  }\n\n  async readLatestCrossSignals(signal?: AbortSignal): Promise<string> {\n    throwIfAborted(signal, \"shared context cross-signals read aborted\");\n    try {\n      const files = (await readdir(this.crossSignalsDir))\n        .filter((f) => f.endsWith(\".md\"))\n        .sort()\n        .reverse();\n      throwIfAborted(signal, \"shared context cross-signals read aborted\");\n      const fp = files[0] ? path.join(this.crossSignalsDir, files[0]) : null;\n      if (!fp) return \"\";\n      const content = await readFile(fp, { encoding: \"utf-8\", signal });\n      throwIfAborted(signal, \"shared context cross-signals read aborted\");\n      return content;\n    } catch {\n      throwIfAborted(signal, \"shared context cross-signals read aborted\");\n      return \"\";\n    }\n  }\n\n  async writeAgentOutput(opts: {\n    agentId: string;\n    title: string;\n    content: string;\n    createdAt?: Date;\n    /** Envelope authority class (issue #1957). Unrecognized values throw. */\n    authority?: string;\n    /** Optional ISO-8601 expiry stamped on the item. */\n    expiresAt?: string;\n    /** Optional id of the shared item this output supersedes. */\n    supersedes?: string;\n    /**\n     * Server-resolved identity of the caller, supplied by the access\n     * surface (issue #1957 review). When present it IS both the producer\n     * and the envelope origin; a disagreeing caller-supplied `agentId` is\n     * rejected so no caller can publish as another agent.\n     */\n    authenticatedIdentity?: string;\n    /**\n     * Server-owned origin token for a write that crosses an external\n     * boundary but resolved no identity (issue #1957 review round 4).\n     * Stamped as the envelope origin (`sharedBy`); the caller label stays\n     * the producer so grouping never collapses.\n     */\n    unattributedOrigin?: string;\n  }): Promise<string> {\n    const identity = resolveWriteOrigin({\n      agentId: opts.agentId,\n      authenticatedIdentity: opts.authenticatedIdentity,\n      unattributedOrigin: opts.unattributedOrigin,\n    });\n    const createdAt = opts.createdAt ?? new Date();\n    const date = ymd(createdAt);\n    const time = createdAt.toISOString().slice(11, 19).replace(/:/g, \"\");\n    const slug = safeSlug(opts.title);\n    const agentPathSegment = safePathSegment(identity.agent, \"agentId\");\n\n    const envelope = composeWriteEnvelope({\n      origin: identity.origin,\n      authority: opts.authority,\n      expiresAt: opts.expiresAt,\n      supersedes: opts.supersedes,\n      allowBinding: this.allowBindingAuthority,\n      nowMs: createdAt.getTime(),\n    });\n\n    const dir = path.join(this.outputsDir, agentPathSegment, date);\n    await mkdir(dir, { recursive: true });\n\n    const body = [\n      \"---\",\n      \"kind: agent_output\",\n      `agent: ${formatFrontmatterScalar(identity.agent)}`,\n      `createdAt: ${createdAt.toISOString()}`,\n      `title: ${formatFrontmatterScalar(opts.title.replace(/\\n/g, \" \").slice(0, 200))}`,\n      ...envelopeToFrontmatterLines(envelope),\n      \"---\",\n      \"\",\n      opts.content.trimEnd(),\n      \"\",\n    ].join(\"\\n\");\n\n    for (let attempt = 0; attempt < 100; attempt++) {\n      const suffix = attempt === 0 ? \"\" : `-${attempt + 1}`;\n      const fp = path.join(dir, `${time}-${slug}${suffix}.md`);\n      try {\n        await writeFile(fp, body, { encoding: \"utf-8\", flag: \"wx\" });\n        return fp;\n      } catch (error) {\n        if (error instanceof Error && \"code\" in error && error.code === \"EEXIST\") continue;\n        throw error;\n      }\n    }\n\n    throw new Error(`Unable to allocate unique shared-context output path for ${identity.agent}`);\n  }\n\n  async appendFeedback(entry: SharedFeedbackEntry): Promise<void> {\n    const parsed = SharedFeedbackEntrySchema.parse(entry);\n    await migrateLegacyFeedbackInbox(this.config);\n    await appendFile(this.feedbackInboxPath, JSON.stringify(parsed) + \"\\n\", \"utf-8\");\n  }\n\n  async appendPrioritiesInbox(opts: { agentId: string; text: string }): Promise<void> {\n    const stamp = new Date().toISOString();\n    const lines = [\n      \"\",\n      `## ${stamp} (${opts.agentId})`,\n      \"\",\n      opts.text.trimEnd(),\n      \"\",\n    ].join(\"\\n\");\n    await appendFile(this.prioritiesInboxPath, lines, \"utf-8\");\n  }\n\n  private async withDailySynthesisLock<T>(date: string, fn: () => Promise<T>): Promise<T> {\n    const previous = this.dailySynthesisChains.get(date) ?? Promise.resolve();\n    let releaseCurrent!: () => void;\n    const current = new Promise<void>((resolve) => {\n      releaseCurrent = resolve;\n    });\n    const queued = previous.catch(() => undefined).then(() => current);\n    this.dailySynthesisChains.set(date, queued);\n    await previous.catch(() => undefined);\n    try {\n      return await fn();\n    } finally {\n      releaseCurrent();\n      if (this.dailySynthesisChains.get(date) === queued) {\n        this.dailySynthesisChains.delete(date);\n      }\n    }\n  }\n\n  async synthesizeCrossSignals(opts: {\n    date?: string;\n    maxSummaryItems?: number;\n  }): Promise<SharedCrossSignalSynthesisResult> {\n    const date = safeDateSegment(opts.date ?? ymd(new Date()));\n    return this.withDailySynthesisLock(date, () => this.synthesizeCrossSignalsUnlocked({\n      date,\n      maxSummaryItems: opts.maxSummaryItems,\n    }));\n  }\n\n  private async synthesizeCrossSignalsUnlocked(opts: {\n    date: string;\n    maxSummaryItems?: number;\n  }): Promise<SharedCrossSignalSynthesisResult> {\n    const date = opts.date;\n    const maxSummaryItems = Math.max(1, opts.maxSummaryItems ?? 8);\n\n    // Collect outputs for the day (best-effort).\n    const outputs: Array<{ agent: string; path: string; title: string; raw: string; envelope: SharedEnvelope }> = [];\n    try {\n      const agents = (await readdir(this.outputsDir, { withFileTypes: true }))\n        .sort((a, b) => a.name.localeCompare(b.name));\n      for (const a of agents) {\n        if (!a.isDirectory()) continue;\n        const dayDir = path.join(this.outputsDir, a.name, date);\n        try {\n          const files = (await readdir(dayDir)).filter((f) => f.endsWith(\".md\")).sort();\n          for (const f of files) {\n            const p = path.join(dayDir, f);\n            const raw = await readFile(p, \"utf-8\");\n            const title = readFrontmatterScalar(raw, \"title\") ?? f;\n            const agent = readFrontmatterScalar(raw, \"agent\") ?? safeDecodePathSegment(a.name);\n            const envelope = envelopeFromScalars({\n              sharedBy: readFrontmatterScalar(raw, \"sharedBy\"),\n              authority: readFrontmatterScalar(raw, \"authority\"),\n              expiresAt: readFrontmatterScalar(raw, \"expiresAt\"),\n              supersedes: readFrontmatterScalar(raw, \"supersedes\"),\n            });\n            outputs.push({ agent, path: p, title, raw, envelope });\n          }\n        } catch {\n          // no outputs for this agent/date\n        }\n      }\n    } catch {\n      // ignore\n    }\n    outputs.sort(\n      (a, b) =>\n        a.agent.localeCompare(b.agent)\n        || a.path.localeCompare(b.path)\n        || a.title.localeCompare(b.title),\n    );\n\n    // Control 2 (issue #1957): expired items never enter the working set;\n    // items another live item supersedes are marked while they circulate.\n    const liveOutputs = filterLiveEnvelopes(\n      outputs.map((output) => ({ output, expiresAt: output.envelope.expiresAt })),\n      Date.now(),\n    ).map((entry) => entry.output);\n    const expiredDropped = outputs.length - liveOutputs.length;\n    const supersededStillCirculating = markSupersededCirculation(\n      liveOutputs.map((output) => ({ id: output.path, supersedes: output.envelope.supersedes })),\n    )\n      .filter((item) => item.circulating === true)\n      .map((item) => item.id)\n      .sort();\n\n    // Collect feedback entries for the day.\n    const feedback: SharedFeedbackEntry[] = [];\n    try {\n      await migrateLegacyFeedbackInbox(this.config);\n      const raw = await readFile(this.feedbackInboxPath, \"utf-8\");\n      for (const line of raw.split(\"\\n\")) {\n        if (!line.trim()) continue;\n        try {\n          const obj = JSON.parse(line);\n          const parsed = SharedFeedbackEntrySchema.safeParse(obj);\n          if (!parsed.success) continue;\n          if (String(parsed.data.date).startsWith(date)) feedback.push(parsed.data);\n        } catch {\n          // ignore\n        }\n      }\n    } catch {\n      // ignore\n    }\n\n    const sources: SharedCrossSignalSource[] = liveOutputs.map((output) => {\n      const body = stripYamlFrontmatter(output.raw);\n      return {\n        agent: output.agent,\n        path: output.path,\n        title: output.title,\n        topics: extractTopicTokens(`${output.title}\\n${body}`),\n        authority: resolveReadAuthority(output.envelope, this.allowBindingAuthority),\n        sharedBy: output.envelope.sharedBy ?? output.agent,\n      };\n    });\n\n    const overlapMap = new Map<string, { agents: Set<string>; sourcePaths: Set<string> }>();\n    for (const source of sources) {\n      for (const token of source.topics) {\n        const existing = overlapMap.get(token);\n        if (existing) {\n          existing.agents.add(source.agent);\n          existing.sourcePaths.add(source.path);\n        } else {\n          overlapMap.set(token, {\n            agents: new Set([source.agent]),\n            sourcePaths: new Set([source.path]),\n          });\n        }\n      }\n    }\n\n    const overlaps: SharedCrossSignalOverlap[] = [...overlapMap.entries()]\n      .map(([token, v]) => ({\n        token,\n        agents: [...v.agents].sort(),\n        sourcePaths: [...v.sourcePaths].sort(),\n        agentCount: v.agents.size,\n      }))\n      .filter((entry) => entry.agentCount >= 2)\n      .sort((a, b) => b.agentCount - a.agentCount || a.token.localeCompare(b.token));\n\n    const semanticEnabled =\n      resolveConversationContextCapabilities(this.config).sharedCrossSignalSemantic === true\n      || resolveConversationContextCapabilities(this.config).crossSignalsSemantic === true;\n    const semanticTimeoutMs =\n      this.config.sharedCrossSignalSemanticTimeoutMs\n      ?? this.config.crossSignalsSemanticTimeoutMs\n      ?? 4000;\n    const semanticMaxCandidates = this.config.sharedCrossSignalSemanticMaxCandidates ?? 120;\n    let semanticApplied = false;\n    let semanticTimedOut = false;\n    let semanticCandidateCount = 0;\n    let semanticAddedOverlapCount = 0;\n    let mergedOverlaps = overlaps;\n    if (semanticEnabled) {\n      try {\n        const semanticResult = await computeSemanticOverlapsWithTimeout(\n          sources,\n          semanticTimeoutMs,\n          semanticMaxCandidates,\n        );\n        semanticTimedOut = semanticResult.timedOut;\n        semanticCandidateCount = semanticResult.candidateCount;\n        if (!semanticResult.timedOut && semanticResult.overlaps.length > 0) {\n          mergedOverlaps = mergeOverlaps(overlaps, semanticResult.overlaps);\n          semanticAddedOverlapCount = Math.max(0, mergedOverlaps.length - overlaps.length);\n          semanticApplied = semanticAddedOverlapCount > 0;\n        }\n      } catch (err) {\n        log.warn(`shared-context semantic cross-signals failed; fail-open to deterministic output: ${err}`);\n      }\n    }\n\n    const feedbackByDecision: SharedCrossSignalReport[\"feedbackByDecision\"] = {\n      approved: 0,\n      approved_with_feedback: 0,\n      rejected: 0,\n    };\n    for (const entry of feedback) {\n      feedbackByDecision[entry.decision] += 1;\n    }\n\n    // Control 3 (issue #1957): feedback refs are claim keys; two agents\n    // ruling differently on the same ref surface as disputed, never silently\n    // averaged. Pairwise scan is bounded by one day's feedback entries.\n    const claimItems = feedback.map((entry, index) => ({\n      id: `${entry.agent}#${index}`,\n      claims: Object.fromEntries((entry.refs ?? []).map((ref) => [ref, entry.decision])),\n    }));\n    const disputedByRef = new Map<string, { agents: Set<string>; decisions: Set<string> }>();\n    for (let i = 0; i < claimItems.length; i++) {\n      for (let j = i + 1; j < claimItems.length; j++) {\n        const pair = detectContradictionPair(claimItems[i]!, claimItems[j]!);\n        if (pair.kind !== \"conflict\") continue;\n        for (const ref of pair.keys) {\n          const slot = disputedByRef.get(ref) ?? { agents: new Set<string>(), decisions: new Set<string>() };\n          slot.agents.add(feedback[i]!.agent);\n          slot.agents.add(feedback[j]!.agent);\n          slot.decisions.add(feedback[i]!.decision);\n          slot.decisions.add(feedback[j]!.decision);\n          disputedByRef.set(ref, slot);\n        }\n      }\n    }\n    const disputed = [...disputedByRef.entries()]\n      .map(([ref, slot]) => ({ ref, agents: [...slot.agents].sort(), decisions: [...slot.decisions].sort() }))\n      .sort((a, b) => a.ref.localeCompare(b.ref));\n\n    const generatedAt = new Date().toISOString();\n    const baseReport = {\n      date,\n      generatedAt,\n      sourceCount: sources.length,\n      feedbackCount: feedback.length,\n      feedbackByDecision,\n      feedbackEntries: [...feedback].sort(compareFeedbackPriority),\n      sources,\n      overlaps: mergedOverlaps,\n      staleness: { expiredDropped, supersededStillCirculating },\n      disputed,\n      semantic: {\n        enabled: semanticEnabled,\n        applied: semanticApplied,\n        timedOut: semanticTimedOut,\n        candidateCount: semanticCandidateCount,\n        maxCandidates: Math.max(0, Math.floor(semanticMaxCandidates)),\n        addedOverlapCount: semanticAddedOverlapCount,\n      },\n    };\n    // Control 4 (issue #1957): stamp who synthesized the report and when.\n    const report = stampProvenance(baseReport, { actor: \"shared-context:curation\", at: generatedAt });\n\n    const crossSignalsPath = path.join(this.crossSignalsDir, `${date}.json`);\n    await writeFileAtomic(crossSignalsPath, `${JSON.stringify(report, null, 2)}\\n`);\n\n    const recurringThemeLines = mergedOverlaps.length === 0\n      ? [\"- No multi-agent topic overlap detected.\"]\n      : mergedOverlaps.slice(0, maxSummaryItems).map((entry) => formatOverlapLine(entry));\n    const riskSignals = [...feedback]\n      .filter((entry) => entry.decision !== \"approved\" || entry.severity === \"high\" || entry.severity === \"medium\")\n      .sort(compareFeedbackPriority)\n      .slice(0, maxSummaryItems);\n    const riskLines = riskSignals.length === 0\n      ? [\"- No explicit blockers or elevated review risks recorded.\"]\n      : riskSignals.map((entry) => formatFeedbackLine(entry));\n    const promotionCandidates = mergedOverlaps\n      .filter((entry) => entry.agentCount >= 3)\n      .slice(0, maxSummaryItems);\n    const promotionLines = promotionCandidates.length === 0\n      ? [\"- No promotion candidates yet.\"]\n      : promotionCandidates.map((entry) =>\n          `- Consider promoting \\`${entry.token}\\` into priorities or operating rules [sources: ${markdownLineList(entry.sourcePaths)}]`\n        );\n\n    const crossSignalsMarkdown = [\n      `# Cross-Signals — ${date}`,\n      \"\",\n      \"## Overview\",\n      `- Source outputs analyzed: ${sources.length}`,\n      `- Feedback entries analyzed: ${feedback.length}`,\n      `- Decision totals: approved=${feedbackByDecision.approved}, approved_with_feedback=${feedbackByDecision.approved_with_feedback}, rejected=${feedbackByDecision.rejected}`,\n      `- Semantic enhancer: ${semanticEnabled ? (semanticTimedOut ? \"enabled (timed out, fail-open)\" : semanticApplied ? \"enabled (applied)\" : \"enabled (no additional overlaps)\") : \"disabled\"}`,\n      `- JSON report: ${crossSignalsPath}`,\n      \"\",\n      \"## Staleness\",\n      ...formatStalenessLines(report),\n      \"\",\n      \"## Disputed\",\n      ...formatDisputedLines(report),\n      \"\",\n      \"## Recurring Themes\",\n      ...recurringThemeLines,\n      \"\",\n      \"## Risks And Blockers\",\n      ...riskLines,\n      \"\",\n      \"## Potential Promotions\",\n      ...promotionLines,\n      \"\",\n      \"## Sources\",\n      ...(sources.length === 0 ? [\"- (none)\"] : sources.map((source) =>\n        `- [${markdownLineText(source.agent)}] ${markdownLineText(source.title)} (${markdownLineText(source.path)}) [authority: ${source.authority}; sharedBy: ${markdownLineText(source.sharedBy)}]`\n      )),\n      \"\",\n    ].join(\"\\n\");\n\n    const crossSignalsMarkdownPath = path.join(this.crossSignalsDir, `${date}.md`);\n    await writeFileAtomic(crossSignalsMarkdownPath, crossSignalsMarkdown);\n\n    return {\n      date,\n      crossSignalsPath,\n      crossSignalsMarkdownPath,\n      overlapCount: mergedOverlaps.length,\n      report,\n    };\n  }\n\n  async curateDaily(opts: { date?: string; maxChars?: number }): Promise<SharedDailyCurationResult> {\n    const date = safeDateSegment(opts.date ?? ymd(new Date()));\n    return this.withDailySynthesisLock(date, () => this.curateDailyUnlocked({ ...opts, date }));\n  }\n\n  private async curateDailyUnlocked(opts: { date: string; maxChars?: number }): Promise<SharedDailyCurationResult> {\n    const date = opts.date;\n    const maxChars = Math.max(2_000, opts.maxChars ?? 20_000);\n    const crossSignals = await this.synthesizeCrossSignalsUnlocked({ date });\n    // Control 4 (issue #1957): every synthesized claim must cite at least one\n    // item this run actually had. Overlaps are built from sources, so this is\n    // a tripwire — it fires only if a synthesized section stops citing.\n    const lintFindings = lintCuratedClaims({\n      claims: crossSignals.report.overlaps.map((overlap) => ({\n        claimId: `overlap:${overlap.token}`,\n        citedItemIds: overlap.sourcePaths,\n      })),\n      availableItemIds: crossSignals.report.sources.map((source) => source.path),\n    });\n    if (lintFindings.length > 0) {\n      throw new Error(`shared-context curation self-check failed: ${JSON.stringify(lintFindings)}`);\n    }\n    const feedbackLines = crossSignals.report.feedbackEntries.length === 0\n      ? [\"- (none)\"]\n      : crossSignals.report.feedbackEntries.map((entry) => formatFeedbackLine(entry));\n    const overlapBullets = crossSignals.report.overlaps.length === 0\n      ? [\"- No multi-agent topic overlap detected.\"]\n      : crossSignals.report.overlaps.slice(0, 8).map((entry) => formatOverlapLine(entry));\n\n    const md: string[] = [\n      `# Roundtable — ${date}`,\n      \"\",\n      \"## Notable Agent Outputs\",\n      ...(crossSignals.report.sources.length === 0\n        ? [\"- (none)\"]\n        : crossSignals.report.sources.map((source) =>\n            `- ${markdownLineText(source.title)} (${markdownLineText(source.path)}) [authority: ${source.authority}; sharedBy: ${markdownLineText(source.sharedBy)}]`)),\n      \"\",\n      \"## Feedback (Approve/Reject)\",\n      ...feedbackLines,\n      \"\",\n      \"## Cross-Signals\",\n      `- Source outputs analyzed: ${crossSignals.report.sourceCount}`,\n      `- Feedback entries analyzed: ${crossSignals.report.feedbackCount}`,\n      `- Decision totals: approved=${crossSignals.report.feedbackByDecision.approved}, approved_with_feedback=${crossSignals.report.feedbackByDecision.approved_with_feedback}, rejected=${crossSignals.report.feedbackByDecision.rejected}`,\n      `- Semantic enhancer: ${crossSignals.report.semantic.enabled ? (crossSignals.report.semantic.timedOut ? \"enabled (timed out, fail-open)\" : crossSignals.report.semantic.applied ? \"enabled (applied)\" : \"enabled (no additional overlaps)\") : \"disabled\"}`,\n      `- Cross-signals JSON: ${crossSignals.crossSignalsPath}`,\n      `- Cross-signals markdown: ${crossSignals.crossSignalsMarkdownPath}`,\n      ...overlapBullets,\n      \"\",\n      \"## Staleness\",\n      ...formatStalenessLines(crossSignals.report),\n      \"\",\n      \"## Disputed\",\n      ...formatDisputedLines(crossSignals.report),\n      \"\",\n    ];\n\n\n    const out = md.join(\"\\n\");\n    const trimmed = out.length > maxChars ? out.slice(0, maxChars) + \"\\n\\n...(trimmed)\\n\" : out;\n\n    const roundtablePath = path.join(this.roundtableDir, `${date}.md`);\n    await writeFileAtomic(roundtablePath, trimmed);\n\n    log.info(`shared-context curated daily roundtable: ${roundtablePath}`);\n    return {\n      date,\n      roundtablePath,\n      crossSignalsPath: crossSignals.crossSignalsPath,\n      crossSignalsMarkdownPath: crossSignals.crossSignalsMarkdownPath,\n      overlapCount: crossSignals.overlapCount,\n    };\n  }\n}\n","/**\n * Shared-item contradiction detection (issue #1957).\n *\n * Pure helper. Same-id items are one item; overlapping claim keys with\n * unequal values are a conflict. No deletes, no persistence.\n */\n\nexport interface SharedClaimItem {\n  id: string;\n  claims: Record<string, string>;\n}\n\nexport type ContradictionPairResult =\n  | { kind: \"same\" }\n  | { kind: \"conflict\"; keys: string[] }\n  | { kind: \"none\" };\n\nexport function detectContradictionPair(\n  a: SharedClaimItem,\n  b: SharedClaimItem,\n): ContradictionPairResult {\n  if (a.id === b.id) {\n    return { kind: \"same\" };\n  }\n  const keys: string[] = [];\n  for (const key of Object.keys(a.claims)) {\n    if (key in b.claims && a.claims[key] !== b.claims[key]) {\n      keys.push(key);\n    }\n  }\n  return keys.length > 0 ? { kind: \"conflict\", keys: keys.sort() } : { kind: \"none\" };\n}\n","/**\n * Shared-context curation self-check (issue #1957 requirement 4).\n *\n * Pure. A synthesized claim with no traceable source is a lint error:\n * report claims whose citations are missing, blank, or absent from the\n * item ids the curation run actually had available.\n */\n\nexport interface CuratedClaim {\n  claimId: string;\n  /** Shared-context item ids this claim was synthesized from. */\n  citedItemIds?: readonly string[];\n}\n\nexport interface CurationLintFinding {\n  claimId: string;\n  reason: \"no_citations\" | \"unknown_citation\";\n  /** Cited ids that are not in the available set. Only for unknown_citation. */\n  unknownIds?: string[];\n}\n\nexport function lintCuratedClaims(input: {\n  claims: readonly CuratedClaim[];\n  availableItemIds: readonly string[];\n}): CurationLintFinding[] {\n  const available = new Set(input.availableItemIds);\n  const findings: CurationLintFinding[] = [];\n\n  for (const claim of input.claims) {\n    const claimId = claim.claimId;\n    if (typeof claimId !== \"string\" || claimId.trim().length === 0) {\n      throw new RangeError(\"claimId must be a non-blank string\");\n    }\n\n    const unknown = new Set<string>();\n    let validCount = 0;\n    for (const id of claim.citedItemIds ?? []) {\n      if (id.trim().length === 0) continue;\n      if (available.has(id)) {\n        validCount += 1;\n      } else {\n        unknown.add(id);\n      }\n    }\n\n    if (validCount === 0) {\n      findings.push({ claimId, reason: \"no_citations\" });\n      continue;\n    }\n    if (unknown.size > 0) {\n      findings.push({ claimId, reason: \"unknown_citation\", unknownIds: [...unknown].sort() });\n    }\n  }\n\n  findings.sort((a, b) => {\n    if (a.claimId !== b.claimId) return a.claimId < b.claimId ? -1 : 1;\n    if (a.reason !== b.reason) return a.reason < b.reason ? -1 : 1;\n    // Duplicate claim ids are linted independently, so two findings can share\n    // both keys above and still differ. Without this tertiary key the result\n    // would depend on upstream iteration order, which the deterministic-output\n    // contract forbids.\n    const left = (a.unknownIds ?? []).join(\",\");\n    const right = (b.unknownIds ?? []).join(\",\");\n    if (left !== right) return left < right ? -1 : 1;\n    return 0;\n  });\n  return findings;\n}\n","/**\n * Shared-item provenance stamp (issue #1957).\n *\n * First slice: stamp actor + at onto a new object. Curation wiring\n * comes later. Does not mutate the input.\n */\n\nimport { isStrictIsoInstant } from \"./iso-instant.js\";\n\nexport interface ProvenanceStamp {\n  actor: string;\n  at: string;\n}\n\nexport interface StampProvenanceOptions {\n  actor: string;\n  at: string;\n}\n\nfunction requireActor(actor: string): string {\n  if (typeof actor !== \"string\" || actor.trim().length === 0) {\n    throw new Error(\"stampProvenance: actor must be a non-empty string\");\n  }\n  return actor;\n}\n\nfunction requireAt(at: unknown): string {\n  if (typeof at !== \"string\" || !isStrictIsoInstant(at)) {\n    throw new Error(\"stampProvenance: at must be a valid ISO-8601 timestamp\");\n  }\n  return at;\n}\n\nexport function stampProvenance<T extends object>(\n  item: T,\n  stamp: StampProvenanceOptions,\n): T & { provenance: ProvenanceStamp } {\n  return {\n    ...item,\n    provenance: {\n      actor: requireActor(stamp.actor),\n      at: requireAt(stamp.at),\n    },\n  };\n}\n","/**\n * Shared-item staleness (issue #1957).\n *\n * Pure helpers. Expired items drop; superseded items that still circulate\n * get a marker. Callers never `rm`.\n */\nimport { isExpired } from \"./governance.js\";\n\nexport interface SharedStalenessItem {\n  id: string;\n  expiresAt?: string;\n  supersedes?: string;\n  circulating?: boolean;\n}\n\n/** Drop expired items. Half-open: `nowMs >= expiresAt` is expired. */\nexport function filterLiveEnvelopes<T extends { expiresAt?: string }>(\n  items: readonly T[],\n  nowMs: number,\n): T[] {\n  return items.filter((item) => !isExpired(item, nowMs));\n}\n\n/**\n * Mark items whose id appears in another item's `supersedes`.\n * Returns a new array. Does not mutate input and does not delete files.\n */\nexport function markSupersededCirculation<T extends SharedStalenessItem>(\n  items: readonly T[],\n): (T & { circulating?: boolean })[] {\n  const supersededIds = new Set<string>();\n  for (const item of items) {\n    if (item.supersedes) supersededIds.add(item.supersedes);\n  }\n  return items.map((item) =>\n    supersededIds.has(item.id) ? { ...item, circulating: true } : item,\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,kBAAkB;AAE3B,SAAS,OAAO,UAAU,SAAS,YAAY,WAAW,MAAM,OAAO,UAAU,QAAQ,UAAU;AACnG,OAAO,UAAU;AACjB,SAAS,SAAS;;;ACaX,SAAS,wBACd,GACA,GACyB;AACzB,MAAI,EAAE,OAAO,EAAE,IAAI;AACjB,WAAO,EAAE,MAAM,OAAO;AAAA,EACxB;AACA,QAAM,OAAiB,CAAC;AACxB,aAAW,OAAO,OAAO,KAAK,EAAE,MAAM,GAAG;AACvC,QAAI,OAAO,EAAE,UAAU,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,GAAG,GAAG;AACtD,WAAK,KAAK,GAAG;AAAA,IACf;AAAA,EACF;AACA,SAAO,KAAK,SAAS,IAAI,EAAE,MAAM,YAAY,MAAM,KAAK,KAAK,EAAE,IAAI,EAAE,MAAM,OAAO;AACpF;;;ACVO,SAAS,kBAAkB,OAGR;AACxB,QAAM,YAAY,IAAI,IAAI,MAAM,gBAAgB;AAChD,QAAM,WAAkC,CAAC;AAEzC,aAAW,SAAS,MAAM,QAAQ;AAChC,UAAM,UAAU,MAAM;AACtB,QAAI,OAAO,YAAY,YAAY,QAAQ,KAAK,EAAE,WAAW,GAAG;AAC9D,YAAM,IAAI,WAAW,oCAAoC;AAAA,IAC3D;AAEA,UAAM,UAAU,oBAAI,IAAY;AAChC,QAAI,aAAa;AACjB,eAAW,MAAM,MAAM,gBAAgB,CAAC,GAAG;AACzC,UAAI,GAAG,KAAK,EAAE,WAAW,EAAG;AAC5B,UAAI,UAAU,IAAI,EAAE,GAAG;AACrB,sBAAc;AAAA,MAChB,OAAO;AACL,gBAAQ,IAAI,EAAE;AAAA,MAChB;AAAA,IACF;AAEA,QAAI,eAAe,GAAG;AACpB,eAAS,KAAK,EAAE,SAAS,QAAQ,eAAe,CAAC;AACjD;AAAA,IACF;AACA,QAAI,QAAQ,OAAO,GAAG;AACpB,eAAS,KAAK,EAAE,SAAS,QAAQ,oBAAoB,YAAY,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IACxF;AAAA,EACF;AAEA,WAAS,KAAK,CAAC,GAAG,MAAM;AACtB,QAAI,EAAE,YAAY,EAAE,QAAS,QAAO,EAAE,UAAU,EAAE,UAAU,KAAK;AACjE,QAAI,EAAE,WAAW,EAAE,OAAQ,QAAO,EAAE,SAAS,EAAE,SAAS,KAAK;AAK7D,UAAM,QAAQ,EAAE,cAAc,CAAC,GAAG,KAAK,GAAG;AAC1C,UAAM,SAAS,EAAE,cAAc,CAAC,GAAG,KAAK,GAAG;AAC3C,QAAI,SAAS,MAAO,QAAO,OAAO,QAAQ,KAAK;AAC/C,WAAO;AAAA,EACT,CAAC;AACD,SAAO;AACT;;;AChDA,SAAS,aAAa,OAAuB;AAC3C,MAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,WAAW,GAAG;AAC1D,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AACA,SAAO;AACT;AAEA,SAAS,UAAU,IAAqB;AACtC,MAAI,OAAO,OAAO,YAAY,CAAC,mBAAmB,EAAE,GAAG;AACrD,UAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E;AACA,SAAO;AACT;AAEO,SAAS,gBACd,MACA,OACqC;AACrC,SAAO;AAAA,IACL,GAAG;AAAA,IACH,YAAY;AAAA,MACV,OAAO,aAAa,MAAM,KAAK;AAAA,MAC/B,IAAI,UAAU,MAAM,EAAE;AAAA,IACxB;AAAA,EACF;AACF;;;AC5BO,SAAS,oBACd,OACA,OACK;AACL,SAAO,MAAM,OAAO,CAAC,SAAS,CAAC,UAAU,MAAM,KAAK,CAAC;AACvD;AAMO,SAAS,0BACd,OACmC;AACnC,QAAM,gBAAgB,oBAAI,IAAY;AACtC,aAAW,QAAQ,OAAO;AACxB,QAAI,KAAK,WAAY,eAAc,IAAI,KAAK,UAAU;AAAA,EACxD;AACA,SAAO,MAAM;AAAA,IAAI,CAAC,SAChB,cAAc,IAAI,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,aAAa,KAAK,IAAI;AAAA,EAChE;AACF;;;AJZO,IAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,UAAU,EAAE,KAAK,CAAC,YAAY,0BAA0B,UAAU,CAAC;AAAA,EACnE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EACtB,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,UAAU,EAAE,KAAK,CAAC,OAAO,UAAU,MAAM,CAAC,EAAE,SAAS;AAAA,EACrD,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC9C,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACrC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS;AAAA,EAC1C,qBAAqB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAChD,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC9C,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AACrC,CAAC;AAID,SAAS,SAAS,GAAmB;AACnC,MAAI,OAAO,EAAE,YAAY,EAAE,QAAQ,eAAe,GAAG;AAErD,MAAI,QAAQ;AACZ,SAAO,QAAQ,KAAK,UAAU,KAAK,KAAK,MAAM,IAAK;AACnD,MAAI,MAAM,KAAK;AACf,SAAO,MAAM,SAAS,KAAK,MAAM,CAAC,MAAM,IAAK;AAC7C,SAAO,KAAK,MAAM,OAAO,GAAG,EAAE,MAAM,GAAG,EAAE,KAAK;AAChD;AAEA,SAAS,gBAAgB,GAAW,OAAuB;AACzD,MAAI,EAAE,WAAW,EAAG,OAAM,IAAI,MAAM,GAAG,KAAK,oBAAoB;AAChE,MAAI,SAAS,KAAK,CAAC,EAAG,OAAM,IAAI,MAAM,GAAG,KAAK,+BAA+B;AAC7E,QAAM,UAAU,mBAAmB,CAAC;AACpC,MAAI,YAAY,OAAO,YAAY,MAAM;AACvC,WAAO,QAAQ,QAAQ,OAAO,KAAK;AAAA,EACrC;AACA,SAAO;AACT;AAEA,SAAS,sBAAsB,GAAmB;AAChD,MAAI;AACF,WAAO,mBAAmB,CAAC;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,2BAA2B,OAAuB;AACzD,MAAI,MAAM,UAAU,KAAK,MAAM,WAAW,GAAG,KAAK,MAAM,SAAS,GAAG,GAAG;AACrE,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,KAAK;AAC/B,UAAI,OAAO,WAAW,SAAU,QAAO;AAAA,IACzC,QAAQ;AAAA,IAER;AACA,WAAO,MAAM,MAAM,GAAG,EAAE,EAAE,QAAQ,QAAQ,GAAG,EAAE,QAAQ,SAAS,IAAI;AAAA,EACtE;AACA,MAAI,MAAM,UAAU,KAAK,MAAM,WAAW,GAAG,KAAK,MAAM,SAAS,GAAG,GAAG;AACrE,WAAO,MAAM,MAAM,GAAG,EAAE,EAAE,QAAQ,OAAO,GAAG;AAAA,EAC9C;AACA,SAAO;AACT;AAEA,SAAS,wBAAwB,OAAuB;AACtD,SAAO,KAAK,UAAU,KAAK;AAC7B;AAEA,SAAS,sBAAsB,KAAa,KAA4B;AACtE,QAAM,cAAc,IAAI,MAAM,wCAAwC,IAAI,CAAC;AAC3E,MAAI,CAAC,YAAa,QAAO;AACzB,aAAW,QAAQ,YAAY,MAAM,OAAO,GAAG;AAC7C,QAAI,CAAC,KAAK,WAAW,GAAG,GAAG,GAAG,EAAG;AACjC,UAAM,QAAQ,KAAK,MAAM,IAAI,SAAS,CAAC,EAAE,KAAK;AAC9C,WAAO,QAAQ,2BAA2B,KAAK,IAAI;AAAA,EACrD;AACA,SAAO;AACT;AAEA,SAAS,IAAI,GAAiB;AAC5B,SAAO,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AACpC;AAEA,SAAS,gBAAgB,MAAsB;AAC7C,MAAI,CAAC,sBAAsB,KAAK,IAAI,GAAG;AACrC,UAAM,IAAI,MAAM,gCAAgC,KAAK,UAAU,IAAI,CAAC,uBAAuB;AAAA,EAC7F;AACA,QAAM,SAAS,oBAAI,KAAK,GAAG,IAAI,gBAAgB;AAC/C,MAAI,CAAC,OAAO,SAAS,OAAO,QAAQ,CAAC,KAAK,OAAO,YAAY,EAAE,MAAM,GAAG,EAAE,MAAM,MAAM;AACpF,UAAM,IAAI,MAAM,gCAAgC,KAAK,UAAU,IAAI,CAAC,iCAAiC;AAAA,EACvG;AACA,SAAO;AACT;AAEA,IAAM,yBAAyB,oBAAI,IAAI;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAAS,mBAAmB,MAAc,YAAoB,IAAc;AAC1E,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,MAAgB,CAAC;AACvB,QAAM,SAAS,KACZ,YAAY,EACZ,QAAQ,gBAAgB,GAAG,EAC3B,MAAM,KAAK,EACX,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,CAAC,UAAU,MAAM,UAAU,CAAC,EACnC,OAAO,CAAC,UAAU,CAAC,uBAAuB,IAAI,KAAK,CAAC;AAEvD,aAAW,SAAS,QAAQ;AAC1B,QAAI,KAAK,IAAI,KAAK,EAAG;AACrB,SAAK,IAAI,KAAK;AACd,QAAI,KAAK,KAAK;AACd,QAAI,IAAI,UAAU,UAAW;AAAA,EAC/B;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,MAAsB;AAClD,MAAI,CAAC,KAAK,WAAW,OAAO,EAAG,QAAO;AACtC,QAAM,UAAU,KAAK,QAAQ,WAAW,CAAC;AACzC,MAAI,YAAY,GAAI,QAAO;AAC3B,SAAO,KAAK,MAAM,UAAU,CAAC;AAC/B;AAEA,SAAS,aAAa,OAAuB;AAC3C,MAAI,OAAO,MAAM,YAAY;AAC7B,MAAI,KAAK,SAAS,UAAU,KAAK,KAAK,SAAS,GAAG;AAChD,WAAO,GAAG,KAAK,MAAM,GAAG,EAAE,CAAC;AAAA,EAC7B,WACS,KAAK,SAAS,SAAS,KAAK,KAAK,SAAS,GAAG;AACpD,WAAO,GAAG,KAAK,MAAM,GAAG,EAAE,CAAC;AAAA,EAC7B,WAAW,KAAK,SAAS,UAAU,KAAK,KAAK,SAAS,GAAG;AACvD,WAAO,GAAG,KAAK,MAAM,GAAG,EAAE,CAAC;AAAA,EAC7B,WAAW,KAAK,SAAS,SAAS,KAAK,KAAK,SAAS,GAAG;AACtD,WAAO,GAAG,KAAK,MAAM,GAAG,EAAE,CAAC;AAAA,EAC7B,OAAO;AACL,UAAM,WAAW;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,eAAW,UAAU,UAAU;AAC7B,UAAI,KAAK,SAAS,OAAO,SAAS,KAAK,KAAK,SAAS,MAAM,GAAG;AAC5D,eAAO,KAAK,MAAM,GAAG,CAAC,OAAO,MAAM;AACnC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,MAAI,KAAK,SAAS,KAAK,KAAK,SAAS,GAAG,GAAG;AACzC,WAAO,KAAK,MAAM,GAAG,EAAE;AAAA,EACzB;AACA,SAAO;AACT;AAEA,SAAS,cACP,MACA,OAC4B;AAC5B,QAAM,SAAS,oBAAI,IAA+D;AAClF,aAAW,SAAS,CAAC,GAAG,MAAM,GAAG,KAAK,GAAG;AACvC,UAAM,WAAW,OAAO,IAAI,MAAM,KAAK;AACvC,QAAI,UAAU;AACZ,iBAAW,SAAS,MAAM,OAAQ,UAAS,OAAO,IAAI,KAAK;AAC3D,iBAAW,cAAc,MAAM,YAAa,UAAS,YAAY,IAAI,UAAU;AAAA,IACjF,OAAO;AACL,aAAO,IAAI,MAAM,OAAO;AAAA,QACtB,QAAQ,IAAI,IAAI,MAAM,MAAM;AAAA,QAC5B,aAAa,IAAI,IAAI,MAAM,WAAW;AAAA,MACxC,CAAC;AAAA,IACH;AAAA,EACF;AACA,SAAO,CAAC,GAAG,OAAO,QAAQ,CAAC,EACxB,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO;AAAA,IACxB;AAAA,IACA,QAAQ,CAAC,GAAG,MAAM,MAAM,EAAE,KAAK;AAAA,IAC/B,aAAa,CAAC,GAAG,MAAM,WAAW,EAAE,KAAK;AAAA,IACzC,YAAY,MAAM,OAAO;AAAA,EAC3B,EAAE,EACD,OAAO,CAAC,UAAU,MAAM,cAAc,CAAC,EACvC,KAAK,CAAC,GAAG,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,cAAc,EAAE,KAAK,CAAC;AACjF;AAEA,eAAe,iCACb,SACA,eACA,aAC8F;AAC9F,QAAM,YAAmE,CAAC;AAC1E,aAAW,UAAU,SAAS;AAC5B,eAAW,SAAS,OAAO,QAAQ;AACjC,UAAI,KAAK,IAAI,KAAK,YAAa,QAAO,EAAE,UAAU,CAAC,GAAG,gBAAgB,UAAU,QAAQ,UAAU,KAAK;AACvG,YAAM,IAAI,QAAc,CAAC,YAAY,aAAa,OAAO,CAAC;AAC1D,gBAAU,KAAK,EAAE,OAAO,OAAO,OAAO,OAAO,MAAM,OAAO,KAAK,CAAC;AAChE,UAAI,UAAU,UAAU,cAAe;AAAA,IACzC;AACA,QAAI,UAAU,UAAU,cAAe;AAAA,EACzC;AAEA,QAAM,SAAS,oBAAI,IAAsE;AACzF,aAAW,OAAO,WAAW;AAC3B,QAAI,KAAK,IAAI,KAAK,YAAa,QAAO,EAAE,UAAU,CAAC,GAAG,gBAAgB,UAAU,QAAQ,UAAU,KAAK;AACvG,UAAM,IAAI,QAAc,CAAC,YAAY,aAAa,OAAO,CAAC;AAC1D,UAAM,OAAO,aAAa,IAAI,KAAK;AACnC,QAAI,KAAK,SAAS,EAAG;AACrB,UAAM,YAAY,OAAO,IAAI,IAAI,KAAK,oBAAI,IAAyD;AACnG,UAAM,aAAa,UAAU,IAAI,IAAI,KAAK,KAAK,EAAE,QAAQ,oBAAI,IAAY,GAAG,OAAO,oBAAI,IAAY,EAAE;AACrG,eAAW,OAAO,IAAI,IAAI,KAAK;AAC/B,eAAW,MAAM,IAAI,IAAI,IAAI;AAC7B,cAAU,IAAI,IAAI,OAAO,UAAU;AACnC,WAAO,IAAI,MAAM,SAAS;AAAA,EAC5B;AAEA,QAAM,WAAuC,CAAC;AAC9C,aAAW,CAAC,MAAM,QAAQ,KAAK,OAAO,QAAQ,GAAG;AAC/C,QAAI,KAAK,IAAI,KAAK,YAAa,QAAO,EAAE,UAAU,CAAC,GAAG,gBAAgB,UAAU,QAAQ,UAAU,KAAK;AACvG,UAAM,IAAI,QAAc,CAAC,YAAY,aAAa,OAAO,CAAC;AAC1D,QAAI,SAAS,OAAO,EAAG;AACvB,UAAM,SAAS,oBAAI,IAAY;AAC/B,UAAM,cAAc,oBAAI,IAAY;AACpC,eAAW,SAAS,SAAS,OAAO,GAAG;AACrC,iBAAW,SAAS,MAAM,OAAQ,QAAO,IAAI,KAAK;AAClD,iBAAW,cAAc,MAAM,MAAO,aAAY,IAAI,UAAU;AAAA,IAClE;AACA,QAAI,OAAO,OAAO,EAAG;AACrB,aAAS,KAAK;AAAA,MACZ,OAAO,YAAY,IAAI;AAAA,MACvB,QAAQ,CAAC,GAAG,MAAM,EAAE,KAAK;AAAA,MACzB,aAAa,CAAC,GAAG,WAAW,EAAE,KAAK;AAAA,MACnC,YAAY,OAAO;AAAA,IACrB,CAAC;AAAA,EACH;AAEA,WAAS,KAAK,CAAC,GAAG,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,cAAc,EAAE,KAAK,CAAC;AACrF,SAAO;AAAA,IACL;AAAA,IACA,gBAAgB,UAAU;AAAA,IAC1B,UAAU;AAAA,EACZ;AACF;AAEA,eAAe,mCACb,SACA,WACA,eAC8F;AAC9F,QAAM,gBAAgB,KAAK,IAAI,GAAG,KAAK,MAAM,SAAS,CAAC;AACvD,QAAM,oBAAoB,KAAK,IAAI,GAAG,KAAK,MAAM,aAAa,CAAC;AAC/D,MAAI,sBAAsB,KAAK,QAAQ,WAAW,GAAG;AACnD,WAAO,EAAE,UAAU,CAAC,GAAG,gBAAgB,GAAG,UAAU,MAAM;AAAA,EAC5D;AACA,QAAM,cAAc,KAAK,IAAI,IAAI;AACjC,SAAO,iCAAiC,SAAS,mBAAmB,WAAW;AACjF;AAgEA,SAAS,yBAAyB,UAAmD;AACnF,UAAQ,UAAU;AAAA,IAChB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,EACX;AACF;AAEA,SAAS,yBAAyB,UAAmD;AACnF,UAAQ,UAAU;AAAA,IAChB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAEA,SAAS,wBAAwB,GAAwB,GAAgC;AACvF,SACE,yBAAyB,EAAE,QAAQ,IAAI,yBAAyB,EAAE,QAAQ,KACvE,yBAAyB,EAAE,QAAQ,IAAI,yBAAyB,EAAE,QAAQ,KAC1E,EAAE,KAAK,cAAc,EAAE,IAAI;AAElC;AAEA,SAAS,iBAAiB,OAAuB;AAC/C,SAAO,MAAM,QAAQ,YAAY,GAAG,EAAE,QAAQ,QAAQ,GAAG,EAAE,KAAK;AAClE;AAEA,SAAS,iBAAiB,QAAmC;AAC3D,SAAO,OAAO,IAAI,gBAAgB,EAAE,OAAO,OAAO,EAAE,KAAK,IAAI;AAC/D;AAEA,SAAS,mBAAmB,OAAoC;AAC9D,QAAM,SAAmB,CAAC,aAAa,iBAAiB,MAAM,IAAI,CAAC,EAAE;AACrE,MAAI,MAAM,SAAU,QAAO,KAAK,aAAa,iBAAiB,MAAM,QAAQ,CAAC,EAAE;AAC/E,MAAI,MAAM,MAAM,OAAQ,QAAO,KAAK,SAAS,iBAAiB,MAAM,IAAI,CAAC,EAAE;AAC3E,SAAO,MAAM,iBAAiB,MAAM,KAAK,CAAC,KAAK,MAAM,QAAQ,KAAK,iBAAiB,MAAM,MAAM,CAAC,KAAK,OAAO,KAAK,IAAI,CAAC;AACxH;AAEA,SAAS,kBAAkB,OAAyC;AAClE,SAAO,OAAO,MAAM,KAAK,OAAO,MAAM,UAAU,YAAY,iBAAiB,MAAM,MAAM,CAAC,eAAe,iBAAiB,MAAM,WAAW,CAAC;AAC9I;AAEA,SAAS,qBAAqB,QAA2C;AACvE,QAAM,cAAc,OAAO,UAAU;AACrC,SAAO;AAAA,IACL,4BAA4B,OAAO,UAAU,cAAc;AAAA,IAC3D,YAAY,WAAW,IACnB,4CACA,yCAAyC,YAAY,MAAM,KAAK,iBAAiB,WAAW,CAAC;AAAA,EACnG;AACF;AAEA,SAAS,oBAAoB,QAA2C;AACtE,MAAI,OAAO,SAAS,WAAW,EAAG,QAAO,CAAC,8CAA8C;AACxF,SAAO,OAAO,SAAS;AAAA,IAAI,CAAC,UAC1B,OAAO,MAAM,GAAG,kBAAkB,iBAAiB,MAAM,MAAM,CAAC,gBAAgB,iBAAiB,MAAM,SAAS,CAAC;AAAA,EACnH;AACF;AAEA,eAAe,gBAAgB,UAAkB,SAAgC;AAC/E,QAAM,MAAM,KAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AACvD,QAAM,WAAW,KAAK;AAAA,IACpB,KAAK,QAAQ,QAAQ;AAAA,IACrB,IAAI,KAAK,SAAS,QAAQ,CAAC,IAAI,QAAQ,GAAG,IAAI,WAAW,CAAC;AAAA,EAC5D;AACA,MAAI;AACF,UAAM,UAAU,UAAU,SAAS,EAAE,UAAU,SAAS,MAAM,KAAK,CAAC;AACpE,UAAM,OAAO,UAAU,QAAQ;AAAA,EACjC,SAAS,OAAO;AACd,UAAM,GAAG,UAAU,EAAE,OAAO,KAAK,CAAC,EAAE,MAAM,MAAM,MAAS;AACzD,UAAM;AAAA,EACR;AACF;AAEO,SAAS,wBAAwB,QAA8B;AACpE,SAAO,OAAO,OAAO,qBAAqB,YAAY,OAAO,iBAAiB,SAAS,IACnF,gBAAgB,OAAO,gBAAgB,IACvC,KAAK,KAAK,gBAAgB,OAAO,YAAY,GAAG,gBAAgB;AACtE;AAQO,SAAS,yBAAyB,QAA8B;AACrE,MAAI,OAAO,OAAO,qBAAqB,YAAY,OAAO,iBAAiB,SAAS,GAAG;AACrF,WAAO,KAAK,KAAK,wBAAwB,MAAM,GAAG,YAAY,aAAa;AAAA,EAC7E;AACA,SAAO,KAAK,KAAK,gBAAgB,OAAO,SAAS,GAAG,kBAAkB,YAAY,aAAa;AACjG;AAYA,eAAsB,2BAA2B,QAAqC;AACpF,MAAI,OAAO,OAAO,qBAAqB,YAAY,OAAO,iBAAiB,SAAS,EAAG;AACvF,QAAM,WAAW,yBAAyB,MAAM;AAChD,QAAM,aAAa,KAAK,KAAK,wBAAwB,MAAM,GAAG,YAAY,aAAa;AACvF,MAAI,KAAK,QAAQ,QAAQ,MAAM,KAAK,QAAQ,UAAU,EAAG;AACzD,MAAI,CAAE,MAAM,sBAAsB,UAAU,EAAI;AAChD,MAAI;AACF,UAAM,YAAY,MAAM,MAAM,QAAQ;AACtC,QAAI,UAAU,eAAe,KAAK,CAAC,UAAU,OAAO,KAAK,UAAU,OAAO,EAAG;AAAA,EAC/E,SAAS,KAAK;AACZ,QAAI,CAAC,YAAY,KAAK,QAAQ,EAAG,OAAM;AAAA,EACzC;AAEA,QAAM,MAAM,KAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AACvD,QAAM,wBAAwB,GAAG,QAAQ,iBAAiB,YAAY;AACpE,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,MAAM,QAAQ;AAAA,IACjC,SAAS,KAAK;AACZ,UAAI,CAAC,YAAY,KAAK,QAAQ,EAAG,OAAM;AAAA,IACzC;AACA,QAAI,aAAa,SAAS,eAAe,KAAK,CAAC,SAAS,OAAO,KAAK,SAAS,OAAO,GAAI;AACxF,QAAI,CAAE,MAAM,sBAAsB,UAAU,EAAI;AAEhD,UAAM,gBAAgB,MAAM,SAAS,gBAAgB,OAAO,YAAY,CAAC;AACzE,UAAM,aAAa,MAAM,SAAS,UAAU;AAC5C,QAAI,CAAC,aAAa,eAAe,UAAU,EAAG;AAC9C,UAAM,YAAY,gBAAgB,OAAO,SAAS;AAClD,UAAM,aAAa,MAAM,SAAS,SAAS;AAC3C,UAAM,iBAAiB,MAAM,SAAS,KAAK,QAAQ,QAAQ,CAAC;AAC5D,QAAI,CAAC,aAAa,YAAY,cAAc,EAAG;AAC/C,QAAI,UAAU;AACZ,YAAM,WAAW,MAAM,SAAS,QAAQ;AACxC,UAAI,CAAC,aAAa,YAAY,QAAQ,EAAG;AAAA,IAC3C;AAEA,UAAM,OAAO,MAAM,SAAS,UAAU;AACtC,UAAM,WAAW,KAAK;AAAA,MACpB,KAAK,QAAQ,QAAQ;AAAA,MACrB,IAAI,KAAK,SAAS,QAAQ,CAAC,IAAI,QAAQ,GAAG,IAAI,WAAW,CAAC;AAAA,IAC5D;AACA,UAAM,UAAU,UAAU,MAAM,EAAE,MAAM,KAAK,CAAC;AAC9C,QAAI;AACF,UAAI;AACJ,UAAI;AACF,kBAAU,MAAM,MAAM,QAAQ;AAAA,MAChC,SAAS,KAAK;AACZ,YAAI,CAAC,YAAY,KAAK,QAAQ,EAAG,OAAM;AAAA,MACzC;AACA,UAAI,YAAY,QAAQ,eAAe,KAAK,CAAC,QAAQ,OAAO,KAAK,QAAQ,OAAO,GAAI;AACpF,YAAM,OAAO,UAAU,QAAQ;AAAA,IACjC,UAAE;AACA,YAAM,GAAG,UAAU,EAAE,OAAO,KAAK,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,IAC3D;AAAA,EACF,CAAC;AACH;AAEA,eAAe,sBAAsB,YAAsC;AACzE,MAAI;AACJ,MAAI;AACF,iBAAa,MAAM,MAAM,UAAU;AAAA,EACrC,SAAS,KAAK;AACZ,QAAI,YAAY,KAAK,QAAQ,EAAG,QAAO;AACvC,UAAM;AAAA,EACR;AACA,SAAO,CAAC,WAAW,eAAe,KAAK,WAAW,OAAO,KAAK,WAAW,OAAO;AAClF;AAGA,eAAe,wBAAwB,UAAkB,MAA0C;AACjG,QAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,SAAO,KAAK,IAAI,IAAI,UAAU;AAC5B,QAAI;AACF,YAAM,UAAU,UAAU,IAAI,EAAE,MAAM,KAAK,CAAC;AAAA,IAC9C,SAAS,KAAK;AACZ,UAAI,CAAC,YAAY,KAAK,QAAQ,EAAG,OAAM;AACvC,UAAI;AACJ,UAAI;AACF,mBAAW,MAAM,MAAM,QAAQ;AAAA,MACjC,SAAS,SAAS;AAChB,YAAI,YAAY,SAAS,QAAQ,EAAG;AACpC,cAAM;AAAA,MACR;AACA,UAAI,CAAC,SAAS,eAAe,KAAK,SAAS,OAAO,KAAK,KAAK,IAAI,IAAI,SAAS,UAAU,KAAQ;AAC7F,cAAM,GAAG,UAAU,EAAE,OAAO,KAAK,CAAC;AAClC;AAAA,MACF;AACA,YAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AACtD;AAAA,IACF;AACA,QAAI;AACF,YAAM,KAAK;AAAA,IACb,UAAE;AACA,YAAM,GAAG,UAAU,EAAE,OAAO,KAAK,CAAC;AAAA,IACpC;AACA;AAAA,EACF;AACA,QAAM,IAAI,MAAM,2EAA2E;AAC7F;AAEO,IAAM,uBAAN,MAA2B;AAAA,EAYhC,YAA6B,QAAsB;AAAtB;AAC3B,UAAM,OAAO,wBAAwB,MAAM;AAE3C,SAAK,MAAM;AACX,SAAK,iBAAiB,KAAK,KAAK,MAAM,eAAe;AACrD,SAAK,sBAAsB,KAAK,KAAK,MAAM,qBAAqB;AAChE,SAAK,aAAa,KAAK,KAAK,MAAM,eAAe;AACjD,SAAK,gBAAgB,KAAK,KAAK,MAAM,YAAY;AACjD,SAAK,oBAAoB,yBAAyB,MAAM;AACxD,SAAK,cAAc,KAAK,QAAQ,KAAK,iBAAiB;AACtD,SAAK,kBAAkB,KAAK,KAAK,MAAM,eAAe;AACtD,SAAK,wBAAwB,OAAO,uCAAuC;AAAA,EAC7E;AAAA,EAZ6B;AAAA,EAXpB;AAAA,EACQ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,uBAAuB,oBAAI,IAA2B;AAAA,EAgBvE,MAAM,kBAAiC;AACrC,UAAM,MAAM,KAAK,KAAK,EAAE,WAAW,KAAK,CAAC;AACzC,UAAM,MAAM,KAAK,YAAY,EAAE,WAAW,KAAK,CAAC;AAChD,UAAM,MAAM,KAAK,eAAe,EAAE,WAAW,KAAK,CAAC;AACnD,UAAM,MAAM,KAAK,aAAa,EAAE,WAAW,KAAK,CAAC;AACjD,UAAM,MAAM,KAAK,iBAAiB,EAAE,WAAW,KAAK,CAAC;AACrD,UAAM,MAAM,KAAK,KAAK,KAAK,KAAK,SAAS,GAAG,EAAE,WAAW,KAAK,CAAC;AAC/D,UAAM,MAAM,KAAK,KAAK,KAAK,KAAK,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;AAC5D,UAAM,MAAM,KAAK,KAAK,KAAK,KAAK,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AAChE,UAAM,MAAM,KAAK,KAAK,KAAK,KAAK,kBAAkB,GAAG,EAAE,WAAW,KAAK,CAAC;AAGxE,UAAM,KAAK;AAAA,MACT,KAAK;AAAA,MACL;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,EAAE,KAAK,IAAI;AAAA,IACb;AACA,UAAM,KAAK;AAAA,MACT,KAAK;AAAA,MACL;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,EAAE,KAAK,IAAI;AAAA,IACb;AACA,UAAM,2BAA2B,KAAK,MAAM;AAC5C,UAAM,KAAK,WAAW,KAAK,mBAAmB,EAAE;AAAA,EAClD;AAAA,EAEA,MAAc,WAAW,IAAY,SAAgC;AACnE,QAAI;AACF,YAAM,KAAK,EAAE;AAAA,IACf,QAAQ;AACN,YAAM,UAAU,IAAI,SAAS,OAAO;AAAA,IACtC;AAAA,EACF;AAAA,EAEA,MAAM,eAAe,QAAuC;AAC1D,mBAAe,QAAQ,wCAAwC;AAC/D,QAAI;AACF,YAAM,UAAU,MAAM,SAAS,KAAK,gBAAgB,EAAE,UAAU,SAAS,OAAO,CAAC;AACjF,qBAAe,QAAQ,wCAAwC;AAC/D,aAAO;AAAA,IACT,QAAQ;AACN,qBAAe,QAAQ,wCAAwC;AAC/D,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,qBAAqB,QAAuC;AAChE,mBAAe,QAAQ,wCAAwC;AAC/D,QAAI;AACF,YAAM,SAAS,MAAM,QAAQ,KAAK,aAAa,GAC5C,OAAO,CAAC,MAAM,EAAE,SAAS,KAAK,CAAC,EAC/B,KAAK,EACL,QAAQ;AACX,qBAAe,QAAQ,wCAAwC;AAC/D,YAAM,KAAK,MAAM,CAAC,IAAI,KAAK,KAAK,KAAK,eAAe,MAAM,CAAC,CAAC,IAAI;AAChE,UAAI,CAAC,GAAI,QAAO;AAChB,YAAM,UAAU,MAAM,SAAS,IAAI,EAAE,UAAU,SAAS,OAAO,CAAC;AAChE,qBAAe,QAAQ,wCAAwC;AAC/D,aAAO;AAAA,IACT,QAAQ;AACN,qBAAe,QAAQ,wCAAwC;AAC/D,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,uBAAuB,QAAuC;AAClE,mBAAe,QAAQ,2CAA2C;AAClE,QAAI;AACF,YAAM,SAAS,MAAM,QAAQ,KAAK,eAAe,GAC9C,OAAO,CAAC,MAAM,EAAE,SAAS,KAAK,CAAC,EAC/B,KAAK,EACL,QAAQ;AACX,qBAAe,QAAQ,2CAA2C;AAClE,YAAM,KAAK,MAAM,CAAC,IAAI,KAAK,KAAK,KAAK,iBAAiB,MAAM,CAAC,CAAC,IAAI;AAClE,UAAI,CAAC,GAAI,QAAO;AAChB,YAAM,UAAU,MAAM,SAAS,IAAI,EAAE,UAAU,SAAS,OAAO,CAAC;AAChE,qBAAe,QAAQ,2CAA2C;AAClE,aAAO;AAAA,IACT,QAAQ;AACN,qBAAe,QAAQ,2CAA2C;AAClE,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,iBAAiB,MAyBH;AAClB,UAAM,WAAW,mBAAmB;AAAA,MAClC,SAAS,KAAK;AAAA,MACd,uBAAuB,KAAK;AAAA,MAC5B,oBAAoB,KAAK;AAAA,IAC3B,CAAC;AACD,UAAM,YAAY,KAAK,aAAa,oBAAI,KAAK;AAC7C,UAAM,OAAO,IAAI,SAAS;AAC1B,UAAM,OAAO,UAAU,YAAY,EAAE,MAAM,IAAI,EAAE,EAAE,QAAQ,MAAM,EAAE;AACnE,UAAM,OAAO,SAAS,KAAK,KAAK;AAChC,UAAM,mBAAmB,gBAAgB,SAAS,OAAO,SAAS;AAElE,UAAM,WAAW,qBAAqB;AAAA,MACpC,QAAQ,SAAS;AAAA,MACjB,WAAW,KAAK;AAAA,MAChB,WAAW,KAAK;AAAA,MAChB,YAAY,KAAK;AAAA,MACjB,cAAc,KAAK;AAAA,MACnB,OAAO,UAAU,QAAQ;AAAA,IAC3B,CAAC;AAED,UAAM,MAAM,KAAK,KAAK,KAAK,YAAY,kBAAkB,IAAI;AAC7D,UAAM,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AAEpC,UAAM,OAAO;AAAA,MACX;AAAA,MACA;AAAA,MACA,UAAU,wBAAwB,SAAS,KAAK,CAAC;AAAA,MACjD,cAAc,UAAU,YAAY,CAAC;AAAA,MACrC,UAAU,wBAAwB,KAAK,MAAM,QAAQ,OAAO,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC;AAAA,MAC/E,GAAG,2BAA2B,QAAQ;AAAA,MACtC;AAAA,MACA;AAAA,MACA,KAAK,QAAQ,QAAQ;AAAA,MACrB;AAAA,IACF,EAAE,KAAK,IAAI;AAEX,aAAS,UAAU,GAAG,UAAU,KAAK,WAAW;AAC9C,YAAM,SAAS,YAAY,IAAI,KAAK,IAAI,UAAU,CAAC;AACnD,YAAM,KAAK,KAAK,KAAK,KAAK,GAAG,IAAI,IAAI,IAAI,GAAG,MAAM,KAAK;AACvD,UAAI;AACF,cAAM,UAAU,IAAI,MAAM,EAAE,UAAU,SAAS,MAAM,KAAK,CAAC;AAC3D,eAAO;AAAA,MACT,SAAS,OAAO;AACd,YAAI,iBAAiB,SAAS,UAAU,SAAS,MAAM,SAAS,SAAU;AAC1E,cAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,IAAI,MAAM,4DAA4D,SAAS,KAAK,EAAE;AAAA,EAC9F;AAAA,EAEA,MAAM,eAAe,OAA2C;AAC9D,UAAM,SAAS,0BAA0B,MAAM,KAAK;AACpD,UAAM,2BAA2B,KAAK,MAAM;AAC5C,UAAM,WAAW,KAAK,mBAAmB,KAAK,UAAU,MAAM,IAAI,MAAM,OAAO;AAAA,EACjF;AAAA,EAEA,MAAM,sBAAsB,MAAwD;AAClF,UAAM,SAAQ,oBAAI,KAAK,GAAE,YAAY;AACrC,UAAM,QAAQ;AAAA,MACZ;AAAA,MACA,MAAM,KAAK,KAAK,KAAK,OAAO;AAAA,MAC5B;AAAA,MACA,KAAK,KAAK,QAAQ;AAAA,MAClB;AAAA,IACF,EAAE,KAAK,IAAI;AACX,UAAM,WAAW,KAAK,qBAAqB,OAAO,OAAO;AAAA,EAC3D;AAAA,EAEA,MAAc,uBAA0B,MAAc,IAAkC;AACtF,UAAM,WAAW,KAAK,qBAAqB,IAAI,IAAI,KAAK,QAAQ,QAAQ;AACxE,QAAI;AACJ,UAAM,UAAU,IAAI,QAAc,CAAC,YAAY;AAC7C,uBAAiB;AAAA,IACnB,CAAC;AACD,UAAM,SAAS,SAAS,MAAM,MAAM,MAAS,EAAE,KAAK,MAAM,OAAO;AACjE,SAAK,qBAAqB,IAAI,MAAM,MAAM;AAC1C,UAAM,SAAS,MAAM,MAAM,MAAS;AACpC,QAAI;AACF,aAAO,MAAM,GAAG;AAAA,IAClB,UAAE;AACA,qBAAe;AACf,UAAI,KAAK,qBAAqB,IAAI,IAAI,MAAM,QAAQ;AAClD,aAAK,qBAAqB,OAAO,IAAI;AAAA,MACvC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,uBAAuB,MAGiB;AAC5C,UAAM,OAAO,gBAAgB,KAAK,QAAQ,IAAI,oBAAI,KAAK,CAAC,CAAC;AACzD,WAAO,KAAK,uBAAuB,MAAM,MAAM,KAAK,+BAA+B;AAAA,MACjF;AAAA,MACA,iBAAiB,KAAK;AAAA,IACxB,CAAC,CAAC;AAAA,EACJ;AAAA,EAEA,MAAc,+BAA+B,MAGC;AAC5C,UAAM,OAAO,KAAK;AAClB,UAAM,kBAAkB,KAAK,IAAI,GAAG,KAAK,mBAAmB,CAAC;AAG7D,UAAM,UAAwG,CAAC;AAC/G,QAAI;AACF,YAAM,UAAU,MAAM,QAAQ,KAAK,YAAY,EAAE,eAAe,KAAK,CAAC,GACnE,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAC9C,iBAAW,KAAK,QAAQ;AACtB,YAAI,CAAC,EAAE,YAAY,EAAG;AACtB,cAAM,SAAS,KAAK,KAAK,KAAK,YAAY,EAAE,MAAM,IAAI;AACtD,YAAI;AACF,gBAAM,SAAS,MAAM,QAAQ,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,SAAS,KAAK,CAAC,EAAE,KAAK;AAC5E,qBAAW,KAAK,OAAO;AACrB,kBAAM,IAAI,KAAK,KAAK,QAAQ,CAAC;AAC7B,kBAAM,MAAM,MAAM,SAAS,GAAG,OAAO;AACrC,kBAAM,QAAQ,sBAAsB,KAAK,OAAO,KAAK;AACrD,kBAAM,QAAQ,sBAAsB,KAAK,OAAO,KAAK,sBAAsB,EAAE,IAAI;AACjF,kBAAM,WAAW,oBAAoB;AAAA,cACnC,UAAU,sBAAsB,KAAK,UAAU;AAAA,cAC/C,WAAW,sBAAsB,KAAK,WAAW;AAAA,cACjD,WAAW,sBAAsB,KAAK,WAAW;AAAA,cACjD,YAAY,sBAAsB,KAAK,YAAY;AAAA,YACrD,CAAC;AACD,oBAAQ,KAAK,EAAE,OAAO,MAAM,GAAG,OAAO,KAAK,SAAS,CAAC;AAAA,UACvD;AAAA,QACF,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AACA,YAAQ;AAAA,MACN,CAAC,GAAG,MACF,EAAE,MAAM,cAAc,EAAE,KAAK,KAC1B,EAAE,KAAK,cAAc,EAAE,IAAI,KAC3B,EAAE,MAAM,cAAc,EAAE,KAAK;AAAA,IACpC;AAIA,UAAM,cAAc;AAAA,MAClB,QAAQ,IAAI,CAAC,YAAY,EAAE,QAAQ,WAAW,OAAO,SAAS,UAAU,EAAE;AAAA,MAC1E,KAAK,IAAI;AAAA,IACX,EAAE,IAAI,CAAC,UAAU,MAAM,MAAM;AAC7B,UAAM,iBAAiB,QAAQ,SAAS,YAAY;AACpD,UAAM,6BAA6B;AAAA,MACjC,YAAY,IAAI,CAAC,YAAY,EAAE,IAAI,OAAO,MAAM,YAAY,OAAO,SAAS,WAAW,EAAE;AAAA,IAC3F,EACG,OAAO,CAAC,SAAS,KAAK,gBAAgB,IAAI,EAC1C,IAAI,CAAC,SAAS,KAAK,EAAE,EACrB,KAAK;AAGR,UAAM,WAAkC,CAAC;AACzC,QAAI;AACF,YAAM,2BAA2B,KAAK,MAAM;AAC5C,YAAM,MAAM,MAAM,SAAS,KAAK,mBAAmB,OAAO;AAC1D,iBAAW,QAAQ,IAAI,MAAM,IAAI,GAAG;AAClC,YAAI,CAAC,KAAK,KAAK,EAAG;AAClB,YAAI;AACF,gBAAM,MAAM,KAAK,MAAM,IAAI;AAC3B,gBAAM,SAAS,0BAA0B,UAAU,GAAG;AACtD,cAAI,CAAC,OAAO,QAAS;AACrB,cAAI,OAAO,OAAO,KAAK,IAAI,EAAE,WAAW,IAAI,EAAG,UAAS,KAAK,OAAO,IAAI;AAAA,QAC1E,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AAEA,UAAM,UAAqC,YAAY,IAAI,CAAC,WAAW;AACrE,YAAM,OAAO,qBAAqB,OAAO,GAAG;AAC5C,aAAO;AAAA,QACL,OAAO,OAAO;AAAA,QACd,MAAM,OAAO;AAAA,QACb,OAAO,OAAO;AAAA,QACd,QAAQ,mBAAmB,GAAG,OAAO,KAAK;AAAA,EAAK,IAAI,EAAE;AAAA,QACrD,WAAW,qBAAqB,OAAO,UAAU,KAAK,qBAAqB;AAAA,QAC3E,UAAU,OAAO,SAAS,YAAY,OAAO;AAAA,MAC/C;AAAA,IACF,CAAC;AAED,UAAM,aAAa,oBAAI,IAA+D;AACtF,eAAW,UAAU,SAAS;AAC5B,iBAAW,SAAS,OAAO,QAAQ;AACjC,cAAM,WAAW,WAAW,IAAI,KAAK;AACrC,YAAI,UAAU;AACZ,mBAAS,OAAO,IAAI,OAAO,KAAK;AAChC,mBAAS,YAAY,IAAI,OAAO,IAAI;AAAA,QACtC,OAAO;AACL,qBAAW,IAAI,OAAO;AAAA,YACpB,QAAQ,oBAAI,IAAI,CAAC,OAAO,KAAK,CAAC;AAAA,YAC9B,aAAa,oBAAI,IAAI,CAAC,OAAO,IAAI,CAAC;AAAA,UACpC,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAEA,UAAM,WAAuC,CAAC,GAAG,WAAW,QAAQ,CAAC,EAClE,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO;AAAA,MACpB;AAAA,MACA,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK;AAAA,MAC3B,aAAa,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK;AAAA,MACrC,YAAY,EAAE,OAAO;AAAA,IACvB,EAAE,EACD,OAAO,CAAC,UAAU,MAAM,cAAc,CAAC,EACvC,KAAK,CAAC,GAAG,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,cAAc,EAAE,KAAK,CAAC;AAE/E,UAAM,kBACJ,uCAAuC,KAAK,MAAM,EAAE,8BAA8B,QAC/E,uCAAuC,KAAK,MAAM,EAAE,yBAAyB;AAClF,UAAM,oBACJ,KAAK,OAAO,sCACT,KAAK,OAAO,iCACZ;AACL,UAAM,wBAAwB,KAAK,OAAO,0CAA0C;AACpF,QAAI,kBAAkB;AACtB,QAAI,mBAAmB;AACvB,QAAI,yBAAyB;AAC7B,QAAI,4BAA4B;AAChC,QAAI,iBAAiB;AACrB,QAAI,iBAAiB;AACnB,UAAI;AACF,cAAM,iBAAiB,MAAM;AAAA,UAC3B;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA,2BAAmB,eAAe;AAClC,iCAAyB,eAAe;AACxC,YAAI,CAAC,eAAe,YAAY,eAAe,SAAS,SAAS,GAAG;AAClE,2BAAiB,cAAc,UAAU,eAAe,QAAQ;AAChE,sCAA4B,KAAK,IAAI,GAAG,eAAe,SAAS,SAAS,MAAM;AAC/E,4BAAkB,4BAA4B;AAAA,QAChD;AAAA,MACF,SAAS,KAAK;AACZ,YAAI,KAAK,oFAAoF,GAAG,EAAE;AAAA,MACpG;AAAA,IACF;AAEA,UAAM,qBAAoE;AAAA,MACxE,UAAU;AAAA,MACV,wBAAwB;AAAA,MACxB,UAAU;AAAA,IACZ;AACA,eAAW,SAAS,UAAU;AAC5B,yBAAmB,MAAM,QAAQ,KAAK;AAAA,IACxC;AAKA,UAAM,aAAa,SAAS,IAAI,CAAC,OAAO,WAAW;AAAA,MACjD,IAAI,GAAG,MAAM,KAAK,IAAI,KAAK;AAAA,MAC3B,QAAQ,OAAO,aAAa,MAAM,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM,QAAQ,CAAC,CAAC;AAAA,IACnF,EAAE;AACF,UAAM,gBAAgB,oBAAI,IAA6D;AACvF,aAAS,IAAI,GAAG,IAAI,WAAW,QAAQ,KAAK;AAC1C,eAAS,IAAI,IAAI,GAAG,IAAI,WAAW,QAAQ,KAAK;AAC9C,cAAM,OAAO,wBAAwB,WAAW,CAAC,GAAI,WAAW,CAAC,CAAE;AACnE,YAAI,KAAK,SAAS,WAAY;AAC9B,mBAAW,OAAO,KAAK,MAAM;AAC3B,gBAAM,OAAO,cAAc,IAAI,GAAG,KAAK,EAAE,QAAQ,oBAAI,IAAY,GAAG,WAAW,oBAAI,IAAY,EAAE;AACjG,eAAK,OAAO,IAAI,SAAS,CAAC,EAAG,KAAK;AAClC,eAAK,OAAO,IAAI,SAAS,CAAC,EAAG,KAAK;AAClC,eAAK,UAAU,IAAI,SAAS,CAAC,EAAG,QAAQ;AACxC,eAAK,UAAU,IAAI,SAAS,CAAC,EAAG,QAAQ;AACxC,wBAAc,IAAI,KAAK,IAAI;AAAA,QAC7B;AAAA,MACF;AAAA,IACF;AACA,UAAM,WAAW,CAAC,GAAG,cAAc,QAAQ,CAAC,EACzC,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,EAAE,KAAK,QAAQ,CAAC,GAAG,KAAK,MAAM,EAAE,KAAK,GAAG,WAAW,CAAC,GAAG,KAAK,SAAS,EAAE,KAAK,EAAE,EAAE,EACtG,KAAK,CAAC,GAAG,MAAM,EAAE,IAAI,cAAc,EAAE,GAAG,CAAC;AAE5C,UAAM,eAAc,oBAAI,KAAK,GAAE,YAAY;AAC3C,UAAM,aAAa;AAAA,MACjB;AAAA,MACA;AAAA,MACA,aAAa,QAAQ;AAAA,MACrB,eAAe,SAAS;AAAA,MACxB;AAAA,MACA,iBAAiB,CAAC,GAAG,QAAQ,EAAE,KAAK,uBAAuB;AAAA,MAC3D;AAAA,MACA,UAAU;AAAA,MACV,WAAW,EAAE,gBAAgB,2BAA2B;AAAA,MACxD;AAAA,MACA,UAAU;AAAA,QACR,SAAS;AAAA,QACT,SAAS;AAAA,QACT,UAAU;AAAA,QACV,gBAAgB;AAAA,QAChB,eAAe,KAAK,IAAI,GAAG,KAAK,MAAM,qBAAqB,CAAC;AAAA,QAC5D,mBAAmB;AAAA,MACrB;AAAA,IACF;AAEA,UAAM,SAAS,gBAAgB,YAAY,EAAE,OAAO,2BAA2B,IAAI,YAAY,CAAC;AAEhG,UAAM,mBAAmB,KAAK,KAAK,KAAK,iBAAiB,GAAG,IAAI,OAAO;AACvE,UAAM,gBAAgB,kBAAkB,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA,CAAI;AAE9E,UAAM,sBAAsB,eAAe,WAAW,IAClD,CAAC,0CAA0C,IAC3C,eAAe,MAAM,GAAG,eAAe,EAAE,IAAI,CAAC,UAAU,kBAAkB,KAAK,CAAC;AACpF,UAAM,cAAc,CAAC,GAAG,QAAQ,EAC7B,OAAO,CAAC,UAAU,MAAM,aAAa,cAAc,MAAM,aAAa,UAAU,MAAM,aAAa,QAAQ,EAC3G,KAAK,uBAAuB,EAC5B,MAAM,GAAG,eAAe;AAC3B,UAAM,YAAY,YAAY,WAAW,IACrC,CAAC,2DAA2D,IAC5D,YAAY,IAAI,CAAC,UAAU,mBAAmB,KAAK,CAAC;AACxD,UAAM,sBAAsB,eACzB,OAAO,CAAC,UAAU,MAAM,cAAc,CAAC,EACvC,MAAM,GAAG,eAAe;AAC3B,UAAM,iBAAiB,oBAAoB,WAAW,IAClD,CAAC,gCAAgC,IACjC,oBAAoB;AAAA,MAAI,CAAC,UACvB,0BAA0B,MAAM,KAAK,mDAAmD,iBAAiB,MAAM,WAAW,CAAC;AAAA,IAC7H;AAEJ,UAAM,uBAAuB;AAAA,MAC3B,0BAAqB,IAAI;AAAA,MACzB;AAAA,MACA;AAAA,MACA,8BAA8B,QAAQ,MAAM;AAAA,MAC5C,gCAAgC,SAAS,MAAM;AAAA,MAC/C,+BAA+B,mBAAmB,QAAQ,4BAA4B,mBAAmB,sBAAsB,cAAc,mBAAmB,QAAQ;AAAA,MACxK,wBAAwB,kBAAmB,mBAAmB,mCAAmC,kBAAkB,sBAAsB,qCAAsC,UAAU;AAAA,MACzL,kBAAkB,gBAAgB;AAAA,MAClC;AAAA,MACA;AAAA,MACA,GAAG,qBAAqB,MAAM;AAAA,MAC9B;AAAA,MACA;AAAA,MACA,GAAG,oBAAoB,MAAM;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,GAAG;AAAA,MACH;AAAA,MACA;AAAA,MACA,GAAG;AAAA,MACH;AAAA,MACA;AAAA,MACA,GAAG;AAAA,MACH;AAAA,MACA;AAAA,MACA,GAAI,QAAQ,WAAW,IAAI,CAAC,UAAU,IAAI,QAAQ;AAAA,QAAI,CAAC,WACrD,MAAM,iBAAiB,OAAO,KAAK,CAAC,KAAK,iBAAiB,OAAO,KAAK,CAAC,KAAK,iBAAiB,OAAO,IAAI,CAAC,iBAAiB,OAAO,SAAS,eAAe,iBAAiB,OAAO,QAAQ,CAAC;AAAA,MAC5L;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAEX,UAAM,2BAA2B,KAAK,KAAK,KAAK,iBAAiB,GAAG,IAAI,KAAK;AAC7E,UAAM,gBAAgB,0BAA0B,oBAAoB;AAEpE,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc,eAAe;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,MAAgF;AAChG,UAAM,OAAO,gBAAgB,KAAK,QAAQ,IAAI,oBAAI,KAAK,CAAC,CAAC;AACzD,WAAO,KAAK,uBAAuB,MAAM,MAAM,KAAK,oBAAoB,EAAE,GAAG,MAAM,KAAK,CAAC,CAAC;AAAA,EAC5F;AAAA,EAEA,MAAc,oBAAoB,MAA+E;AAC/G,UAAM,OAAO,KAAK;AAClB,UAAM,WAAW,KAAK,IAAI,KAAO,KAAK,YAAY,GAAM;AACxD,UAAM,eAAe,MAAM,KAAK,+BAA+B,EAAE,KAAK,CAAC;AAIvE,UAAM,eAAe,kBAAkB;AAAA,MACrC,QAAQ,aAAa,OAAO,SAAS,IAAI,CAAC,aAAa;AAAA,QACrD,SAAS,WAAW,QAAQ,KAAK;AAAA,QACjC,cAAc,QAAQ;AAAA,MACxB,EAAE;AAAA,MACF,kBAAkB,aAAa,OAAO,QAAQ,IAAI,CAAC,WAAW,OAAO,IAAI;AAAA,IAC3E,CAAC;AACD,QAAI,aAAa,SAAS,GAAG;AAC3B,YAAM,IAAI,MAAM,8CAA8C,KAAK,UAAU,YAAY,CAAC,EAAE;AAAA,IAC9F;AACA,UAAM,gBAAgB,aAAa,OAAO,gBAAgB,WAAW,IACjE,CAAC,UAAU,IACX,aAAa,OAAO,gBAAgB,IAAI,CAAC,UAAU,mBAAmB,KAAK,CAAC;AAChF,UAAM,iBAAiB,aAAa,OAAO,SAAS,WAAW,IAC3D,CAAC,0CAA0C,IAC3C,aAAa,OAAO,SAAS,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,UAAU,kBAAkB,KAAK,CAAC;AAEpF,UAAM,KAAe;AAAA,MACnB,uBAAkB,IAAI;AAAA,MACtB;AAAA,MACA;AAAA,MACA,GAAI,aAAa,OAAO,QAAQ,WAAW,IACvC,CAAC,UAAU,IACX,aAAa,OAAO,QAAQ,IAAI,CAAC,WAC/B,KAAK,iBAAiB,OAAO,KAAK,CAAC,KAAK,iBAAiB,OAAO,IAAI,CAAC,iBAAiB,OAAO,SAAS,eAAe,iBAAiB,OAAO,QAAQ,CAAC,GAAG;AAAA,MAC/J;AAAA,MACA;AAAA,MACA,GAAG;AAAA,MACH;AAAA,MACA;AAAA,MACA,8BAA8B,aAAa,OAAO,WAAW;AAAA,MAC7D,gCAAgC,aAAa,OAAO,aAAa;AAAA,MACjE,+BAA+B,aAAa,OAAO,mBAAmB,QAAQ,4BAA4B,aAAa,OAAO,mBAAmB,sBAAsB,cAAc,aAAa,OAAO,mBAAmB,QAAQ;AAAA,MACpO,wBAAwB,aAAa,OAAO,SAAS,UAAW,aAAa,OAAO,SAAS,WAAW,mCAAmC,aAAa,OAAO,SAAS,UAAU,sBAAsB,qCAAsC,UAAU;AAAA,MACxP,yBAAyB,aAAa,gBAAgB;AAAA,MACtD,6BAA6B,aAAa,wBAAwB;AAAA,MAClE,GAAG;AAAA,MACH;AAAA,MACA;AAAA,MACA,GAAG,qBAAqB,aAAa,MAAM;AAAA,MAC3C;AAAA,MACA;AAAA,MACA,GAAG,oBAAoB,aAAa,MAAM;AAAA,MAC1C;AAAA,IACF;AAGA,UAAM,MAAM,GAAG,KAAK,IAAI;AACxB,UAAM,UAAU,IAAI,SAAS,WAAW,IAAI,MAAM,GAAG,QAAQ,IAAI,uBAAuB;AAExF,UAAM,iBAAiB,KAAK,KAAK,KAAK,eAAe,GAAG,IAAI,KAAK;AACjE,UAAM,gBAAgB,gBAAgB,OAAO;AAE7C,QAAI,KAAK,4CAA4C,cAAc,EAAE;AACrE,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,kBAAkB,aAAa;AAAA,MAC/B,0BAA0B,aAAa;AAAA,MACvC,cAAc,aAAa;AAAA,IAC7B;AAAA,EACF;AACF;","names":[]}

package/dist/chunk-66L5ZRJC.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/support-passport/public-http.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { isIP } from \"node:net\";\n\nimport { abortError, isAbortError } from \"../abort-error.js\";\nimport { type OperationName, getOperation } from \"../access-boundary.js\";\nimport type { EngramAccessService } from \"../access-service.js\";\nimport { SupportPassportError } from \"./errors.js\";\n\nconst PUBLIC_RATE_LIMIT_MAX_KEYS = 20_000;\nconst PUBLIC_AUTH_MAX_IN_FLIGHT_PER_NETWORK = 8;\nconst PUBLIC_AUTH_MAX_IN_FLIGHT_TOTAL = 256;\nconst PUBLIC_MODEL_MAX_IN_FLIGHT_PER_NETWORK = 8;\nconst PUBLIC_MODEL_MAX_IN_FLIGHT_TOTAL = 256;\n\nexport const SUPPORT_PASSPORT_PUBLIC_HTTP_ROUTES = [\n  {\n    method: \"GET\",\n    pathname: \"/engram/v1/support-passport/public/grants/:id\",\n    operation: \"support_passport_grant_read\",\n  },\n  {\n    method: \"POST\",\n    pathname: \"/engram/v1/support-passport/public/grants/:id/ask\",\n    operation: \"support_passport_grant_ask\",\n  },\n] as const satisfies ReadonlyArray<{ method: string; pathname: string; operation: OperationName }>;\n\nexport type SupportPassportExternalRequestHandler = (\n  req: IncomingMessage,\n  res: ServerResponse,\n  ctx: {\n    authorized: boolean;\n    tokenAuthorized: boolean;\n  }\n) => Promise<boolean>;\n\ninterface WindowEntry {\n  count: number;\n  resetAt: number;\n}\n\ninterface WindowReservation {\n  commit(): void;\n  release(): void;\n}\n\nclass UnreadSupportPassportRequestError extends Error {\n  constructor(readonly response: SupportPassportError) {\n    super(response.message);\n    this.name = \"UnreadSupportPassportRequestError\";\n  }\n}\n\nclass FixedWindowLimiter {\n  private readonly entries = new Map<string, WindowEntry>();\n\n  constructor(\n    private readonly limit: number,\n    private readonly windowMs: number,\n    private readonly now: () => number\n  ) {}\n\n  consume(key: string): boolean {\n    const reservation = this.reserve(key);\n    if (!reservation) return false;\n    reservation.commit();\n    return true;\n  }\n\n  reserve(key: string): WindowReservation | undefined {\n    const now = this.now();\n    let entry = this.entries.get(key);\n    if (!entry || entry.resetAt <= now) {\n      if (!entry && this.entries.size >= PUBLIC_RATE_LIMIT_MAX_KEYS) {\n        this.prune(now);\n        if (this.entries.size >= PUBLIC_RATE_LIMIT_MAX_KEYS) return undefined;\n      }\n      entry = { count: 0, resetAt: now + this.windowMs };\n      this.entries.set(key, entry);\n    }\n    if (entry.count >= this.limit) return undefined;\n    entry.count += 1;\n    let active = true;\n    return {\n      commit: () => {\n        active = false;\n      },\n      release: () => {\n        if (!active) return;\n        active = false;\n        if (this.entries.get(key) !== entry) return;\n        entry.count -= 1;\n        if (entry.count === 0) this.entries.delete(key);\n      },\n    };\n  }\n\n  allows(key: string): boolean {\n    const now = this.now();\n    const current = this.entries.get(key);\n    if (current && current.resetAt > now) return current.count < this.limit;\n    if (!current && this.entries.size >= PUBLIC_RATE_LIMIT_MAX_KEYS) {\n      this.prune(now);\n      if (this.entries.size >= PUBLIC_RATE_LIMIT_MAX_KEYS) return false;\n    }\n    return true;\n  }\n\n  private prune(now: number): void {\n    for (const [key, entry] of this.entries) {\n      if (entry.resetAt <= now) this.entries.delete(key);\n    }\n  }\n}\n\nclass InFlightLimiter {\n  private readonly counts = new Map<string, number>();\n  private total = 0;\n\n  constructor(\n    private readonly perKeyLimit: number,\n    private readonly totalLimit: number\n  ) {}\n\n  reserve(key: string): (() => void) | undefined {\n    const current = this.counts.get(key) ?? 0;\n    if (current >= this.perKeyLimit || this.total >= this.totalLimit) return undefined;\n    this.counts.set(key, current + 1);\n    this.total += 1;\n    let active = true;\n    return () => {\n      if (!active) return;\n      active = false;\n      const count = this.counts.get(key) ?? 0;\n      if (count <= 1) this.counts.delete(key);\n      else this.counts.set(key, count - 1);\n      this.total -= 1;\n    };\n  }\n}\n\ninterface PublicRateLimits {\n  authentications: InFlightLimiter;\n  modelCalls: InFlightLimiter;\n  grantReads: FixedWindowLimiter;\n  networkReads: FixedWindowLimiter;\n  networkReadFailures: FixedWindowLimiter;\n  grantQuestions: FixedWindowLimiter;\n  networkQuestions: FixedWindowLimiter;\n  networkQuestionFailures: FixedWindowLimiter;\n}\n\nexport interface SupportPassportPublicHandlerOptions {\n  now?: () => number;\n  trustedProxyAddresses?: readonly string[];\n}\n\nfunction createRateLimits(now: () => number): PublicRateLimits {\n  return {\n    authentications: new InFlightLimiter(PUBLIC_AUTH_MAX_IN_FLIGHT_PER_NETWORK, PUBLIC_AUTH_MAX_IN_FLIGHT_TOTAL),\n    modelCalls: new InFlightLimiter(PUBLIC_MODEL_MAX_IN_FLIGHT_PER_NETWORK, PUBLIC_MODEL_MAX_IN_FLIGHT_TOTAL),\n    grantReads: new FixedWindowLimiter(60, 60_000, now),\n    networkReads: new FixedWindowLimiter(60, 60_000, now),\n    networkReadFailures: new FixedWindowLimiter(60, 60_000, now),\n    grantQuestions: new FixedWindowLimiter(20, 10 * 60_000, now),\n    networkQuestions: new FixedWindowLimiter(20, 10 * 60_000, now),\n    networkQuestionFailures: new FixedWindowLimiter(20, 10 * 60_000, now),\n  };\n}\n\nfunction rateLimited(): SupportPassportError {\n  return new SupportPassportError(\"rate_limited\", \"Too many helper requests.\", 429);\n}\n\nasync function runPublicOperation(\n  service: EngramAccessService,\n  name: \"support_passport_grant_read\" | \"support_passport_grant_ask\",\n  input: Record<string, unknown>,\n  signal?: AbortSignal\n): Promise<unknown> {\n  const operation = getOperation(name);\n  if (!operation) throw new Error(`access-boundary: operation not registered: ${name}`);\n  const output = (await operation.run(input, {\n    service,\n    ...(signal ? { abortSignal: signal } : {}),\n  })) as { result: unknown };\n  return output.result;\n}\n\nfunction reserveAuthenticatedLimits(\n  networkLimiter: FixedWindowLimiter,\n  grantLimiter: FixedWindowLimiter,\n  networkKey: string,\n  grantId: string\n): WindowReservation {\n  const network = networkLimiter.reserve(networkKey);\n  if (!network) throw rateLimited();\n  const grant = grantLimiter.reserve(grantId);\n  if (!grant) {\n    network.release();\n    throw rateLimited();\n  }\n  let active = true;\n  return {\n    commit: () => {\n      if (!active) return;\n      active = false;\n      network.commit();\n      grant.commit();\n    },\n    release: () => {\n      if (!active) return;\n      active = false;\n      grant.release();\n      network.release();\n    },\n  };\n}\n\nasync function readGrantUnderAuthenticationReservation(\n  service: EngramAccessService,\n  grantId: string,\n  secret: string,\n  networkKey: string,\n  networkLimiter: FixedWindowLimiter,\n  grantLimiter: FixedWindowLimiter,\n  failureLimiter: FixedWindowLimiter\n) {\n  if (!failureLimiter.allows(networkKey)) throw rateLimited();\n  const limits = reserveAuthenticatedLimits(networkLimiter, grantLimiter, networkKey, grantId);\n  let guide: Awaited<ReturnType<EngramAccessService[\"supportPassportReadGrant\"]>>;\n  try {\n    guide = (await runPublicOperation(service, \"support_passport_grant_read\", { grantId, secret })) as Awaited<\n      ReturnType<EngramAccessService[\"supportPassportReadGrant\"]>\n    >;\n  } catch (error) {\n    if (error instanceof SupportPassportError) {\n      if (error.code === \"grant_not_found\") {\n        limits.release();\n        if (!failureLimiter.consume(networkKey)) throw rateLimited();\n      } else {\n        limits.commit();\n      }\n    } else {\n      limits.release();\n    }\n    throw error;\n  }\n  limits.commit();\n  return guide;\n}\n\nasync function readGrantWithRateLimits(\n  service: EngramAccessService,\n  grantId: string,\n  secret: string,\n  networkKey: string,\n  networkLimiter: FixedWindowLimiter,\n  grantLimiter: FixedWindowLimiter,\n  failureLimiter: FixedWindowLimiter,\n  authenticationLimiter: InFlightLimiter\n) {\n  const releaseAuthentication = authenticationLimiter.reserve(networkKey);\n  if (!releaseAuthentication) throw rateLimited();\n  try {\n    return await readGrantUnderAuthenticationReservation(\n      service,\n      grantId,\n      secret,\n      networkKey,\n      networkLimiter,\n      grantLimiter,\n      failureLimiter\n    );\n  } finally {\n    releaseAuthentication();\n  }\n}\n\nexport function normalizeSupportPassportNetworkAddress(value: string | undefined): string | undefined {\n  if (!value) return undefined;\n  const address = value.trim().toLowerCase();\n  const family = isIP(address);\n  if (family === 0) return undefined;\n  if (family === 4) return address;\n  const canonical = new URL(`http://[${address}]/`).hostname.slice(1, -1);\n  const mapped = /^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/.exec(canonical);\n  if (!mapped) return canonical;\n  const high = Number.parseInt(mapped[1] ?? \"\", 16);\n  const low = Number.parseInt(mapped[2] ?? \"\", 16);\n  return `${high >>> 8}.${high & 0xff}.${low >>> 8}.${low & 0xff}`;\n}\n\nfunction requestNetworkAddress(req: IncomingMessage, trustedProxyAddresses: ReadonlySet<string>): string {\n  const directAddress = normalizeSupportPassportNetworkAddress(req.socket.remoteAddress) ?? \"unknown\";\n  if (!trustedProxyAddresses.has(directAddress)) return directAddress;\n  const forwarded = req.headers[\"x-forwarded-for\"];\n  if (typeof forwarded !== \"string\") return directAddress;\n  const rawAddresses = forwarded.split(\",\");\n  if (rawAddresses.length < 1 || rawAddresses.length > 32) return directAddress;\n  const addresses = rawAddresses.map((address) => normalizeSupportPassportNetworkAddress(address));\n  if (addresses.some((address) => address === undefined)) return directAddress;\n  for (let index = addresses.length - 1; index >= 0; index -= 1) {\n    const address = addresses[index];\n    if (address && !trustedProxyAddresses.has(address)) return address;\n  }\n  return addresses[0] ?? directAddress;\n}\n\nfunction networkDigest(req: IncomingMessage, trustedProxyAddresses: ReadonlySet<string>): string {\n  return createHash(\"sha256\")\n    .update(requestNetworkAddress(req, trustedProxyAddresses))\n    .digest(\"hex\");\n}\n\nfunction parseSecret(req: IncomingMessage): string | undefined {\n  const raw = req.headers.authorization;\n  if (typeof raw !== \"string\") return undefined;\n  const match = /^(\\S+)[ \\t]+(\\S+)$/.exec(raw);\n  if (!match || match[1]?.toLowerCase() !== \"supportpassport\") return undefined;\n  const secret = match[2] ?? \"\";\n  if (!/^[A-Za-z0-9_-]{32,256}$/.test(secret)) return undefined;\n  return secret;\n}\n\nfunction requestDeclaresBody(req: IncomingMessage): boolean {\n  const contentLength = req.headers[\"content-length\"];\n  const transferEncoding = req.headers[\"transfer-encoding\"];\n  return transferEncoding !== undefined || (contentLength !== undefined && contentLength !== \"0\");\n}\n\nfunction respondJson(res: ServerResponse, status: number, payload: unknown): void {\n  const body = JSON.stringify(payload);\n  res.statusCode = status;\n  res.setHeader(\"cache-control\", \"private, no-store\");\n  res.setHeader(\"vary\", \"Authorization\");\n  res.setHeader(\"content-type\", \"application/json; charset=utf-8\");\n  res.setHeader(\"content-length\", String(Buffer.byteLength(body)));\n  res.end(body);\n}\n\nfunction respondJsonAndCloseUnreadRequest(\n  req: IncomingMessage,\n  res: ServerResponse,\n  status: number,\n  payload: unknown\n): void {\n  res.shouldKeepAlive = false;\n  res.setHeader(\"connection\", \"close\");\n  res.once(\"finish\", () => req.destroy());\n  respondJson(res, status, payload);\n}\n\nfunction respondBeforeReadingBody(\n  req: IncomingMessage,\n  res: ServerResponse,\n  status: number,\n  payload: unknown\n): void {\n  if (requestDeclaresBody(req)) {\n    respondJsonAndCloseUnreadRequest(req, res, status, payload);\n    return;\n  }\n  respondJson(res, status, payload);\n}\n\nasync function readQuestionBody(req: IncomingMessage, signal: AbortSignal): Promise<string> {\n  const content = await new Promise<Buffer>((resolve, reject) => {\n    const chunks: Buffer[] = [];\n    let bytes = 0;\n    let settled = false;\n    const cleanup = () => {\n      req.off(\"data\", onData);\n      req.off(\"end\", onEnd);\n      req.off(\"error\", onError);\n      req.off(\"aborted\", onAborted);\n      signal.removeEventListener(\"abort\", onSignalAbort);\n    };\n    const fail = (error: unknown) => {\n      if (settled) return;\n      settled = true;\n      cleanup();\n      reject(error);\n    };\n    const helperLeft = () =>\n      isAbortError(signal.reason) ? signal.reason : abortError(\"The helper left.\");\n    const onData = (chunk: Buffer | string) => {\n      const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);\n      bytes += buffer.length;\n      if (bytes > 4_096) {\n        req.pause();\n        fail(\n          new UnreadSupportPassportRequestError(\n            new SupportPassportError(\"invalid_input\", \"The helper question is invalid.\", 400)\n          )\n        );\n        return;\n      }\n      chunks.push(buffer);\n    };\n    const onEnd = () => {\n      if (settled) return;\n      settled = true;\n      cleanup();\n      resolve(Buffer.concat(chunks, bytes));\n    };\n    const onError = (error: Error) => fail(signal.aborted || req.aborted ? helperLeft() : error);\n    const onAborted = () => fail(helperLeft());\n    const onSignalAbort = () => fail(helperLeft());\n    req.on(\"data\", onData);\n    req.once(\"end\", onEnd);\n    req.once(\"error\", onError);\n    req.once(\"aborted\", onAborted);\n    signal.addEventListener(\"abort\", onSignalAbort, { once: true });\n    if (signal.aborted) onSignalAbort();\n  });\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(content.toString(\"utf8\"));\n  } catch {\n    throw new SupportPassportError(\"invalid_input\", \"The helper question is invalid.\", 400);\n  }\n  if (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n    throw new SupportPassportError(\"invalid_input\", \"The helper question is invalid.\", 400);\n  }\n  const body = parsed as Record<string, unknown>;\n  if (Object.keys(body).length !== 1 || typeof body.question !== \"string\") {\n    throw new SupportPassportError(\"invalid_input\", \"The helper question is invalid.\", 400);\n  }\n  const question = body.question.trim();\n  if (question.length < 1 || question.length > 500) {\n    throw new SupportPassportError(\"invalid_input\", \"The helper question is invalid.\", 400);\n  }\n  return question;\n}\n\nfunction requestSignal(req: IncomingMessage, res: ServerResponse): { signal: AbortSignal; cleanup(): void } {\n  const controller = new AbortController();\n  const abort = () => {\n    if (!res.writableFinished && !controller.signal.aborted) controller.abort(abortError(\"The helper left.\"));\n  };\n  req.once(\"aborted\", abort);\n  res.once(\"close\", abort);\n  return {\n    signal: controller.signal,\n    cleanup: () => {\n      req.off(\"aborted\", abort);\n      res.off(\"close\", abort);\n    },\n  };\n}\n\nfunction decodeGrantId(raw: string): string | undefined {\n  try {\n    const value = decodeURIComponent(raw);\n    return /^[A-Za-z0-9_-]{1,128}$/.test(value) ? value.toLowerCase() : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nexport function buildSupportPassportPublicRequestHandler(\n  service: EngramAccessService,\n  options: SupportPassportPublicHandlerOptions = {}\n): SupportPassportExternalRequestHandler {\n  const rateLimits = createRateLimits(options.now ?? Date.now);\n  const trustedProxyAddresses = new Set(\n    (options.trustedProxyAddresses ?? [])\n      .map((address) => normalizeSupportPassportNetworkAddress(address))\n      .filter((address): address is string => address !== undefined)\n  );\n  return async (req, res) => {\n    let parsed: URL;\n    try {\n      parsed = new URL(req.url ?? \"/\", \"http://placeholder\");\n    } catch {\n      return false;\n    }\n    const readMatch = /^\\/engram\\/v1\\/support-passport\\/public\\/grants\\/([^/]+)$/.exec(parsed.pathname);\n    const askMatch = /^\\/engram\\/v1\\/support-passport\\/public\\/grants\\/([^/]+)\\/ask$/.exec(parsed.pathname);\n    const ownedRead = req.method === \"GET\" && readMatch;\n    const ownedQuestion = req.method === \"POST\" && askMatch;\n    if (!ownedRead && !ownedQuestion) return false;\n\n    res.setHeader(\"cache-control\", \"private, no-store\");\n    res.setHeader(\"vary\", \"Authorization\");\n    const grantId = decodeGrantId((ownedRead ? readMatch?.[1] : askMatch?.[1]) ?? \"\");\n    const secret = parseSecret(req);\n    if (parsed.search.length > 0) {\n      respondBeforeReadingBody(req, res, 400, {\n        error: \"The share link request is invalid.\",\n        code: \"invalid_input\",\n      });\n      return true;\n    }\n    if (ownedRead && requestDeclaresBody(req)) {\n      respondJsonAndCloseUnreadRequest(req, res, 400, {\n        error: \"The share link request is invalid.\",\n        code: \"invalid_input\",\n      });\n      return true;\n    }\n    if (!grantId || !secret) {\n      respondBeforeReadingBody(req, res, 404, {\n        error: \"The share link was not found.\",\n        code: \"grant_not_found\",\n      });\n      return true;\n    }\n\n    const lifecycle = requestSignal(req, res);\n    try {\n      const digest = networkDigest(req, trustedProxyAddresses);\n      if (ownedRead) {\n        const guide = await readGrantWithRateLimits(\n          service,\n          grantId,\n          secret,\n          digest,\n          rateLimits.networkReads,\n          rateLimits.grantReads,\n          rateLimits.networkReadFailures,\n          rateLimits.authentications\n        );\n        respondJson(res, 200, guide);\n      } else {\n        let releaseAuthentication = rateLimits.authentications.reserve(digest);\n        if (!releaseAuthentication) throw new UnreadSupportPassportRequestError(rateLimited());\n        try {\n          let question: string;\n          const bodyFailure = rateLimits.networkQuestionFailures.reserve(digest);\n          if (!bodyFailure) throw new UnreadSupportPassportRequestError(rateLimited());\n          try {\n            question = await readQuestionBody(req, lifecycle.signal);\n            bodyFailure.release();\n          } catch (error) {\n            const supportError =\n              error instanceof UnreadSupportPassportRequestError ? error.response : error;\n            if (supportError instanceof SupportPassportError && supportError.code === \"invalid_input\") {\n              bodyFailure.commit();\n            } else {\n              bodyFailure.release();\n            }\n            throw error;\n          }\n          const releaseModelCall = rateLimits.modelCalls.reserve(digest);\n          if (!releaseModelCall) throw rateLimited();\n          try {\n            await readGrantUnderAuthenticationReservation(\n              service,\n              grantId,\n              secret,\n              digest,\n              rateLimits.networkQuestions,\n              rateLimits.grantQuestions,\n              rateLimits.networkQuestionFailures\n            );\n            releaseAuthentication();\n            releaseAuthentication = undefined;\n            const answer = await runPublicOperation(\n              service,\n              \"support_passport_grant_ask\",\n              { grantId, secret, question },\n              lifecycle.signal\n            );\n            respondJson(res, 200, answer);\n          } finally {\n            releaseModelCall();\n          }\n        } finally {\n          releaseAuthentication?.();\n        }\n      }\n    } catch (error) {\n      if (error instanceof UnreadSupportPassportRequestError) {\n        respondJsonAndCloseUnreadRequest(req, res, error.response.status, {\n          error: error.response.message,\n          code: error.response.code,\n        });\n        return true;\n      }\n      if (!(error instanceof SupportPassportError)) throw error;\n      respondJson(res, error.status, { error: error.message, code: error.code });\n    } finally {\n      lifecycle.cleanup();\n    }\n    return true;\n  };\n}\n\nexport function composeSupportPassportExternalRequestHandlers(\n  ...handlers: Array<SupportPassportExternalRequestHandler | undefined>\n): SupportPassportExternalRequestHandler {\n  return async (req, res, ctx) => {\n    for (const handler of handlers) {\n      if (handler && (await handler(req, res, ctx))) return true;\n    }\n    return false;\n  };\n}\n"],"mappings":";;;;;;;;;;AAAA,SAAS,kBAAkB;AAE3B,SAAS,YAAY;AAOrB,IAAM,6BAA6B;AACnC,IAAM,wCAAwC;AAC9C,IAAM,kCAAkC;AACxC,IAAM,yCAAyC;AAC/C,IAAM,mCAAmC;AAElC,IAAM,sCAAsC;AAAA,EACjD;AAAA,IACE,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,WAAW;AAAA,EACb;AAAA,EACA;AAAA,IACE,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,WAAW;AAAA,EACb;AACF;AAqBA,IAAM,oCAAN,cAAgD,MAAM;AAAA,EACpD,YAAqB,UAAgC;AACnD,UAAM,SAAS,OAAO;AADH;AAEnB,SAAK,OAAO;AAAA,EACd;AAAA,EAHqB;AAIvB;AAEA,IAAM,qBAAN,MAAyB;AAAA,EAGvB,YACmB,OACA,UACA,KACjB;AAHiB;AACA;AACA;AAAA,EAChB;AAAA,EAHgB;AAAA,EACA;AAAA,EACA;AAAA,EALF,UAAU,oBAAI,IAAyB;AAAA,EAQxD,QAAQ,KAAsB;AAC5B,UAAM,cAAc,KAAK,QAAQ,GAAG;AACpC,QAAI,CAAC,YAAa,QAAO;AACzB,gBAAY,OAAO;AACnB,WAAO;AAAA,EACT;AAAA,EAEA,QAAQ,KAA4C;AAClD,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,QAAQ,KAAK,QAAQ,IAAI,GAAG;AAChC,QAAI,CAAC,SAAS,MAAM,WAAW,KAAK;AAClC,UAAI,CAAC,SAAS,KAAK,QAAQ,QAAQ,4BAA4B;AAC7D,aAAK,MAAM,GAAG;AACd,YAAI,KAAK,QAAQ,QAAQ,2BAA4B,QAAO;AAAA,MAC9D;AACA,cAAQ,EAAE,OAAO,GAAG,SAAS,MAAM,KAAK,SAAS;AACjD,WAAK,QAAQ,IAAI,KAAK,KAAK;AAAA,IAC7B;AACA,QAAI,MAAM,SAAS,KAAK,MAAO,QAAO;AACtC,UAAM,SAAS;AACf,QAAI,SAAS;AACb,WAAO;AAAA,MACL,QAAQ,MAAM;AACZ,iBAAS;AAAA,MACX;AAAA,MACA,SAAS,MAAM;AACb,YAAI,CAAC,OAAQ;AACb,iBAAS;AACT,YAAI,KAAK,QAAQ,IAAI,GAAG,MAAM,MAAO;AACrC,cAAM,SAAS;AACf,YAAI,MAAM,UAAU,EAAG,MAAK,QAAQ,OAAO,GAAG;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,OAAO,KAAsB;AAC3B,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,UAAU,KAAK,QAAQ,IAAI,GAAG;AACpC,QAAI,WAAW,QAAQ,UAAU,IAAK,QAAO,QAAQ,QAAQ,KAAK;AAClE,QAAI,CAAC,WAAW,KAAK,QAAQ,QAAQ,4BAA4B;AAC/D,WAAK,MAAM,GAAG;AACd,UAAI,KAAK,QAAQ,QAAQ,2BAA4B,QAAO;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,MAAM,KAAmB;AAC/B,eAAW,CAAC,KAAK,KAAK,KAAK,KAAK,SAAS;AACvC,UAAI,MAAM,WAAW,IAAK,MAAK,QAAQ,OAAO,GAAG;AAAA,IACnD;AAAA,EACF;AACF;AAEA,IAAM,kBAAN,MAAsB;AAAA,EAIpB,YACmB,aACA,YACjB;AAFiB;AACA;AAAA,EAChB;AAAA,EAFgB;AAAA,EACA;AAAA,EALF,SAAS,oBAAI,IAAoB;AAAA,EAC1C,QAAQ;AAAA,EAOhB,QAAQ,KAAuC;AAC7C,UAAM,UAAU,KAAK,OAAO,IAAI,GAAG,KAAK;AACxC,QAAI,WAAW,KAAK,eAAe,KAAK,SAAS,KAAK,WAAY,QAAO;AACzE,SAAK,OAAO,IAAI,KAAK,UAAU,CAAC;AAChC,SAAK,SAAS;AACd,QAAI,SAAS;AACb,WAAO,MAAM;AACX,UAAI,CAAC,OAAQ;AACb,eAAS;AACT,YAAM,QAAQ,KAAK,OAAO,IAAI,GAAG,KAAK;AACtC,UAAI,SAAS,EAAG,MAAK,OAAO,OAAO,GAAG;AAAA,UACjC,MAAK,OAAO,IAAI,KAAK,QAAQ,CAAC;AACnC,WAAK,SAAS;AAAA,IAChB;AAAA,EACF;AACF;AAkBA,SAAS,iBAAiB,KAAqC;AAC7D,SAAO;AAAA,IACL,iBAAiB,IAAI,gBAAgB,uCAAuC,+BAA+B;AAAA,IAC3G,YAAY,IAAI,gBAAgB,wCAAwC,gCAAgC;AAAA,IACxG,YAAY,IAAI,mBAAmB,IAAI,KAAQ,GAAG;AAAA,IAClD,cAAc,IAAI,mBAAmB,IAAI,KAAQ,GAAG;AAAA,IACpD,qBAAqB,IAAI,mBAAmB,IAAI,KAAQ,GAAG;AAAA,IAC3D,gBAAgB,IAAI,mBAAmB,IAAI,KAAK,KAAQ,GAAG;AAAA,IAC3D,kBAAkB,IAAI,mBAAmB,IAAI,KAAK,KAAQ,GAAG;AAAA,IAC7D,yBAAyB,IAAI,mBAAmB,IAAI,KAAK,KAAQ,GAAG;AAAA,EACtE;AACF;AAEA,SAAS,cAAoC;AAC3C,SAAO,IAAI,qBAAqB,gBAAgB,6BAA6B,GAAG;AAClF;AAEA,eAAe,mBACb,SACA,MACA,OACA,QACkB;AAClB,QAAM,YAAY,aAAa,IAAI;AACnC,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,8CAA8C,IAAI,EAAE;AACpF,QAAM,SAAU,MAAM,UAAU,IAAI,OAAO;AAAA,IACzC;AAAA,IACA,GAAI,SAAS,EAAE,aAAa,OAAO,IAAI,CAAC;AAAA,EAC1C,CAAC;AACD,SAAO,OAAO;AAChB;AAEA,SAAS,2BACP,gBACA,cACA,YACA,SACmB;AACnB,QAAM,UAAU,eAAe,QAAQ,UAAU;AACjD,MAAI,CAAC,QAAS,OAAM,YAAY;AAChC,QAAM,QAAQ,aAAa,QAAQ,OAAO;AAC1C,MAAI,CAAC,OAAO;AACV,YAAQ,QAAQ;AAChB,UAAM,YAAY;AAAA,EACpB;AACA,MAAI,SAAS;AACb,SAAO;AAAA,IACL,QAAQ,MAAM;AACZ,UAAI,CAAC,OAAQ;AACb,eAAS;AACT,cAAQ,OAAO;AACf,YAAM,OAAO;AAAA,IACf;AAAA,IACA,SAAS,MAAM;AACb,UAAI,CAAC,OAAQ;AACb,eAAS;AACT,YAAM,QAAQ;AACd,cAAQ,QAAQ;AAAA,IAClB;AAAA,EACF;AACF;AAEA,eAAe,wCACb,SACA,SACA,QACA,YACA,gBACA,cACA,gBACA;AACA,MAAI,CAAC,eAAe,OAAO,UAAU,EAAG,OAAM,YAAY;AAC1D,QAAM,SAAS,2BAA2B,gBAAgB,cAAc,YAAY,OAAO;AAC3F,MAAI;AACJ,MAAI;AACF,YAAS,MAAM,mBAAmB,SAAS,+BAA+B,EAAE,SAAS,OAAO,CAAC;AAAA,EAG/F,SAAS,OAAO;AACd,QAAI,iBAAiB,sBAAsB;AACzC,UAAI,MAAM,SAAS,mBAAmB;AACpC,eAAO,QAAQ;AACf,YAAI,CAAC,eAAe,QAAQ,UAAU,EAAG,OAAM,YAAY;AAAA,MAC7D,OAAO;AACL,eAAO,OAAO;AAAA,MAChB;AAAA,IACF,OAAO;AACL,aAAO,QAAQ;AAAA,IACjB;AACA,UAAM;AAAA,EACR;AACA,SAAO,OAAO;AACd,SAAO;AACT;AAEA,eAAe,wBACb,SACA,SACA,QACA,YACA,gBACA,cACA,gBACA,uBACA;AACA,QAAM,wBAAwB,sBAAsB,QAAQ,UAAU;AACtE,MAAI,CAAC,sBAAuB,OAAM,YAAY;AAC9C,MAAI;AACF,WAAO,MAAM;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF,UAAE;AACA,0BAAsB;AAAA,EACxB;AACF;AAEO,SAAS,uCAAuC,OAA+C;AACpG,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,UAAU,MAAM,KAAK,EAAE,YAAY;AACzC,QAAM,SAAS,KAAK,OAAO;AAC3B,MAAI,WAAW,EAAG,QAAO;AACzB,MAAI,WAAW,EAAG,QAAO;AACzB,QAAM,YAAY,IAAI,IAAI,WAAW,OAAO,IAAI,EAAE,SAAS,MAAM,GAAG,EAAE;AACtE,QAAM,SAAS,2CAA2C,KAAK,SAAS;AACxE,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,OAAO,OAAO,SAAS,OAAO,CAAC,KAAK,IAAI,EAAE;AAChD,QAAM,MAAM,OAAO,SAAS,OAAO,CAAC,KAAK,IAAI,EAAE;AAC/C,SAAO,GAAG,SAAS,CAAC,IAAI,OAAO,GAAI,IAAI,QAAQ,CAAC,IAAI,MAAM,GAAI;AAChE;AAEA,SAAS,sBAAsB,KAAsB,uBAAoD;AACvG,QAAM,gBAAgB,uCAAuC,IAAI,OAAO,aAAa,KAAK;AAC1F,MAAI,CAAC,sBAAsB,IAAI,aAAa,EAAG,QAAO;AACtD,QAAM,YAAY,IAAI,QAAQ,iBAAiB;AAC/C,MAAI,OAAO,cAAc,SAAU,QAAO;AAC1C,QAAM,eAAe,UAAU,MAAM,GAAG;AACxC,MAAI,aAAa,SAAS,KAAK,aAAa,SAAS,GAAI,QAAO;AAChE,QAAM,YAAY,aAAa,IAAI,CAAC,YAAY,uCAAuC,OAAO,CAAC;AAC/F,MAAI,UAAU,KAAK,CAAC,YAAY,YAAY,MAAS,EAAG,QAAO;AAC/D,WAAS,QAAQ,UAAU,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG;AAC7D,UAAM,UAAU,UAAU,KAAK;AAC/B,QAAI,WAAW,CAAC,sBAAsB,IAAI,OAAO,EAAG,QAAO;AAAA,EAC7D;AACA,SAAO,UAAU,CAAC,KAAK;AACzB;AAEA,SAAS,cAAc,KAAsB,uBAAoD;AAC/F,SAAO,WAAW,QAAQ,EACvB,OAAO,sBAAsB,KAAK,qBAAqB,CAAC,EACxD,OAAO,KAAK;AACjB;AAEA,SAAS,YAAY,KAA0C;AAC7D,QAAM,MAAM,IAAI,QAAQ;AACxB,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,QAAM,QAAQ,qBAAqB,KAAK,GAAG;AAC3C,MAAI,CAAC,SAAS,MAAM,CAAC,GAAG,YAAY,MAAM,kBAAmB,QAAO;AACpE,QAAM,SAAS,MAAM,CAAC,KAAK;AAC3B,MAAI,CAAC,0BAA0B,KAAK,MAAM,EAAG,QAAO;AACpD,SAAO;AACT;AAEA,SAAS,oBAAoB,KAA+B;AAC1D,QAAM,gBAAgB,IAAI,QAAQ,gBAAgB;AAClD,QAAM,mBAAmB,IAAI,QAAQ,mBAAmB;AACxD,SAAO,qBAAqB,UAAc,kBAAkB,UAAa,kBAAkB;AAC7F;AAEA,SAAS,YAAY,KAAqB,QAAgB,SAAwB;AAChF,QAAM,OAAO,KAAK,UAAU,OAAO;AACnC,MAAI,aAAa;AACjB,MAAI,UAAU,iBAAiB,mBAAmB;AAClD,MAAI,UAAU,QAAQ,eAAe;AACrC,MAAI,UAAU,gBAAgB,iCAAiC;AAC/D,MAAI,UAAU,kBAAkB,OAAO,OAAO,WAAW,IAAI,CAAC,CAAC;AAC/D,MAAI,IAAI,IAAI;AACd;AAEA,SAAS,iCACP,KACA,KACA,QACA,SACM;AACN,MAAI,kBAAkB;AACtB,MAAI,UAAU,cAAc,OAAO;AACnC,MAAI,KAAK,UAAU,MAAM,IAAI,QAAQ,CAAC;AACtC,cAAY,KAAK,QAAQ,OAAO;AAClC;AAEA,SAAS,yBACP,KACA,KACA,QACA,SACM;AACN,MAAI,oBAAoB,GAAG,GAAG;AAC5B,qCAAiC,KAAK,KAAK,QAAQ,OAAO;AAC1D;AAAA,EACF;AACA,cAAY,KAAK,QAAQ,OAAO;AAClC;AAEA,eAAe,iBAAiB,KAAsB,QAAsC;AAC1F,QAAM,UAAU,MAAM,IAAI,QAAgB,CAAC,SAAS,WAAW;AAC7D,UAAM,SAAmB,CAAC;AAC1B,QAAI,QAAQ;AACZ,QAAI,UAAU;AACd,UAAM,UAAU,MAAM;AACpB,UAAI,IAAI,QAAQ,MAAM;AACtB,UAAI,IAAI,OAAO,KAAK;AACpB,UAAI,IAAI,SAAS,OAAO;AACxB,UAAI,IAAI,WAAW,SAAS;AAC5B,aAAO,oBAAoB,SAAS,aAAa;AAAA,IACnD;AACA,UAAM,OAAO,CAAC,UAAmB;AAC/B,UAAI,QAAS;AACb,gBAAU;AACV,cAAQ;AACR,aAAO,KAAK;AAAA,IACd;AACA,UAAM,aAAa,MACjB,aAAa,OAAO,MAAM,IAAI,OAAO,SAAS,WAAW,kBAAkB;AAC7E,UAAM,SAAS,CAAC,UAA2B;AACzC,YAAM,SAAS,OAAO,SAAS,KAAK,IAAI,QAAQ,OAAO,KAAK,KAAK;AACjE,eAAS,OAAO;AAChB,UAAI,QAAQ,MAAO;AACjB,YAAI,MAAM;AACV;AAAA,UACE,IAAI;AAAA,YACF,IAAI,qBAAqB,iBAAiB,mCAAmC,GAAG;AAAA,UAClF;AAAA,QACF;AACA;AAAA,MACF;AACA,aAAO,KAAK,MAAM;AAAA,IACpB;AACA,UAAM,QAAQ,MAAM;AAClB,UAAI,QAAS;AACb,gBAAU;AACV,cAAQ;AACR,cAAQ,OAAO,OAAO,QAAQ,KAAK,CAAC;AAAA,IACtC;AACA,UAAM,UAAU,CAAC,UAAiB,KAAK,OAAO,WAAW,IAAI,UAAU,WAAW,IAAI,KAAK;AAC3F,UAAM,YAAY,MAAM,KAAK,WAAW,CAAC;AACzC,UAAM,gBAAgB,MAAM,KAAK,WAAW,CAAC;AAC7C,QAAI,GAAG,QAAQ,MAAM;AACrB,QAAI,KAAK,OAAO,KAAK;AACrB,QAAI,KAAK,SAAS,OAAO;AACzB,QAAI,KAAK,WAAW,SAAS;AAC7B,WAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AAC9D,QAAI,OAAO,QAAS,eAAc;AAAA,EACpC,CAAC;AACD,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,QAAQ,SAAS,MAAM,CAAC;AAAA,EAC9C,QAAQ;AACN,UAAM,IAAI,qBAAqB,iBAAiB,mCAAmC,GAAG;AAAA,EACxF;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG;AAClE,UAAM,IAAI,qBAAqB,iBAAiB,mCAAmC,GAAG;AAAA,EACxF;AACA,QAAM,OAAO;AACb,MAAI,OAAO,KAAK,IAAI,EAAE,WAAW,KAAK,OAAO,KAAK,aAAa,UAAU;AACvE,UAAM,IAAI,qBAAqB,iBAAiB,mCAAmC,GAAG;AAAA,EACxF;AACA,QAAM,WAAW,KAAK,SAAS,KAAK;AACpC,MAAI,SAAS,SAAS,KAAK,SAAS,SAAS,KAAK;AAChD,UAAM,IAAI,qBAAqB,iBAAiB,mCAAmC,GAAG;AAAA,EACxF;AACA,SAAO;AACT;AAEA,SAAS,cAAc,KAAsB,KAA+D;AAC1G,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,MAAM;AAClB,QAAI,CAAC,IAAI,oBAAoB,CAAC,WAAW,OAAO,QAAS,YAAW,MAAM,WAAW,kBAAkB,CAAC;AAAA,EAC1G;AACA,MAAI,KAAK,WAAW,KAAK;AACzB,MAAI,KAAK,SAAS,KAAK;AACvB,SAAO;AAAA,IACL,QAAQ,WAAW;AAAA,IACnB,SAAS,MAAM;AACb,UAAI,IAAI,WAAW,KAAK;AACxB,UAAI,IAAI,SAAS,KAAK;AAAA,IACxB;AAAA,EACF;AACF;AAEA,SAAS,cAAc,KAAiC;AACtD,MAAI;AACF,UAAM,QAAQ,mBAAmB,GAAG;AACpC,WAAO,yBAAyB,KAAK,KAAK,IAAI,MAAM,YAAY,IAAI;AAAA,EACtE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,yCACd,SACA,UAA+C,CAAC,GACT;AACvC,QAAM,aAAa,iBAAiB,QAAQ,OAAO,KAAK,GAAG;AAC3D,QAAM,wBAAwB,IAAI;AAAA,KAC/B,QAAQ,yBAAyB,CAAC,GAChC,IAAI,CAAC,YAAY,uCAAuC,OAAO,CAAC,EAChE,OAAO,CAAC,YAA+B,YAAY,MAAS;AAAA,EACjE;AACA,SAAO,OAAO,KAAK,QAAQ;AACzB,QAAI;AACJ,QAAI;AACF,eAAS,IAAI,IAAI,IAAI,OAAO,KAAK,oBAAoB;AAAA,IACvD,QAAQ;AACN,aAAO;AAAA,IACT;AACA,UAAM,YAAY,4DAA4D,KAAK,OAAO,QAAQ;AAClG,UAAM,WAAW,iEAAiE,KAAK,OAAO,QAAQ;AACtG,UAAM,YAAY,IAAI,WAAW,SAAS;AAC1C,UAAM,gBAAgB,IAAI,WAAW,UAAU;AAC/C,QAAI,CAAC,aAAa,CAAC,cAAe,QAAO;AAEzC,QAAI,UAAU,iBAAiB,mBAAmB;AAClD,QAAI,UAAU,QAAQ,eAAe;AACrC,UAAM,UAAU,eAAe,YAAY,YAAY,CAAC,IAAI,WAAW,CAAC,MAAM,EAAE;AAChF,UAAM,SAAS,YAAY,GAAG;AAC9B,QAAI,OAAO,OAAO,SAAS,GAAG;AAC5B,+BAAyB,KAAK,KAAK,KAAK;AAAA,QACtC,OAAO;AAAA,QACP,MAAM;AAAA,MACR,CAAC;AACD,aAAO;AAAA,IACT;AACA,QAAI,aAAa,oBAAoB,GAAG,GAAG;AACzC,uCAAiC,KAAK,KAAK,KAAK;AAAA,QAC9C,OAAO;AAAA,QACP,MAAM;AAAA,MACR,CAAC;AACD,aAAO;AAAA,IACT;AACA,QAAI,CAAC,WAAW,CAAC,QAAQ;AACvB,+BAAyB,KAAK,KAAK,KAAK;AAAA,QACtC,OAAO;AAAA,QACP,MAAM;AAAA,MACR,CAAC;AACD,aAAO;AAAA,IACT;AAEA,UAAM,YAAY,cAAc,KAAK,GAAG;AACxC,QAAI;AACF,YAAM,SAAS,cAAc,KAAK,qBAAqB;AACvD,UAAI,WAAW;AACb,cAAM,QAAQ,MAAM;AAAA,UAClB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,WAAW;AAAA,UACX,WAAW;AAAA,UACX,WAAW;AAAA,UACX,WAAW;AAAA,QACb;AACA,oBAAY,KAAK,KAAK,KAAK;AAAA,MAC7B,OAAO;AACL,YAAI,wBAAwB,WAAW,gBAAgB,QAAQ,MAAM;AACrE,YAAI,CAAC,sBAAuB,OAAM,IAAI,kCAAkC,YAAY,CAAC;AACrF,YAAI;AACF,cAAI;AACJ,gBAAM,cAAc,WAAW,wBAAwB,QAAQ,MAAM;AACrE,cAAI,CAAC,YAAa,OAAM,IAAI,kCAAkC,YAAY,CAAC;AAC3E,cAAI;AACF,uBAAW,MAAM,iBAAiB,KAAK,UAAU,MAAM;AACvD,wBAAY,QAAQ;AAAA,UACtB,SAAS,OAAO;AACd,kBAAM,eACJ,iBAAiB,oCAAoC,MAAM,WAAW;AACxE,gBAAI,wBAAwB,wBAAwB,aAAa,SAAS,iBAAiB;AACzF,0BAAY,OAAO;AAAA,YACrB,OAAO;AACL,0BAAY,QAAQ;AAAA,YACtB;AACA,kBAAM;AAAA,UACR;AACA,gBAAM,mBAAmB,WAAW,WAAW,QAAQ,MAAM;AAC7D,cAAI,CAAC,iBAAkB,OAAM,YAAY;AACzC,cAAI;AACF,kBAAM;AAAA,cACJ;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,cACA,WAAW;AAAA,cACX,WAAW;AAAA,cACX,WAAW;AAAA,YACb;AACA,kCAAsB;AACtB,oCAAwB;AACxB,kBAAM,SAAS,MAAM;AAAA,cACnB;AAAA,cACA;AAAA,cACA,EAAE,SAAS,QAAQ,SAAS;AAAA,cAC5B,UAAU;AAAA,YACZ;AACA,wBAAY,KAAK,KAAK,MAAM;AAAA,UAC9B,UAAE;AACA,6BAAiB;AAAA,UACnB;AAAA,QACF,UAAE;AACA,kCAAwB;AAAA,QAC1B;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AACd,UAAI,iBAAiB,mCAAmC;AACtD,yCAAiC,KAAK,KAAK,MAAM,SAAS,QAAQ;AAAA,UAChE,OAAO,MAAM,SAAS;AAAA,UACtB,MAAM,MAAM,SAAS;AAAA,QACvB,CAAC;AACD,eAAO;AAAA,MACT;AACA,UAAI,EAAE,iBAAiB,sBAAuB,OAAM;AACpD,kBAAY,KAAK,MAAM,QAAQ,EAAE,OAAO,MAAM,SAAS,MAAM,MAAM,KAAK,CAAC;AAAA,IAC3E,UAAE;AACA,gBAAU,QAAQ;AAAA,IACpB;AACA,WAAO;AAAA,EACT;AACF;AAEO,SAAS,iDACX,UACoC;AACvC,SAAO,OAAO,KAAK,KAAK,QAAQ;AAC9B,eAAW,WAAW,UAAU;AAC9B,UAAI,WAAY,MAAM,QAAQ,KAAK,KAAK,GAAG,EAAI,QAAO;AAAA,IACxD;AACA,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/chunk-7HTUYFR3.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/source-agent-qualifier.ts"],"sourcesContent":["/**\n * Source-agent qualifier helpers for extraction (#2183).\n *\n * Pure leaf module: imports only types and sibling leaf/orchestration helpers,\n * never `extraction.ts`, so it introduces no cycle (extraction-run.ts only\n * type-imports extraction.ts).\n */\nimport { resolvePipelineProcessingCapabilities } from \"./capabilities.js\";\nimport { applyExtractionSourceGrounding } from \"./extraction-source-grounding.js\";\nimport type { ExtractionGroundingRoleSources } from \"./extraction-source-grounding.js\";\nimport { isValidConnectorId } from \"./connectors/index.js\";\nimport { CONNECTOR_LABEL_MAX_LENGTH, knownConnectorIds } from \"./connectors/label.js\";\nimport { deriveSourceConnector } from \"./orchestration/extraction-run.js\";\nimport type { BufferTurn, ExtractionResult, PluginConfig } from \"./types.js\";\n\n\nexport function resolveSourceConnector(turns: readonly BufferTurn[]): string | undefined {\n  const contributing = turns.filter((turn) => turn.extractionContextOnly !== true);\n  const derived = deriveSourceConnector(contributing);\n  if (derived === undefined || !isValidConnectorId(derived)) return undefined;\n  return /[\\u0000-\\u001F\\u007F]/.test(derived) ? undefined : derived;\n}\n\n// Same bound as the recall renderer (CONNECTOR_LABEL_MAX_LENGTH) but a DIFFERENT\n// policy: recall TRUNCATES past the bound (a truncated display label cannot\n// mislead), while the prompt SUPPRESSES (a truncated id could collide with a\n// different connector). Do not \"fix\" this inconsistency — it is deliberate.\nexport function headerConnector(connector: string | undefined): string | undefined {\n  return connector !== undefined && connector.length <= CONNECTOR_LABEL_MAX_LENGTH ? connector : undefined;\n}\n\nexport function renderExtractionConversation(\n  boundedTurns: readonly BufferTurn[],\n  sourceConnector: string | undefined,\n): { conversation: string; renderedConversation: string } {\n  const renderedConversation = boundedTurns\n    .map((t) => `[${t.extractionContextOnly === true ? `context ${t.role}` : t.role}] ${t.content}`)\n    .join(\"\\n\\n\");\n  const conversation = sourceConnector === undefined\n    ? renderedConversation\n    : `Source agent: ${sourceConnector}\\n\\nTool and command instructions in this conversation apply to the ${sourceConnector} agent unless they are clearly universal.\\n\\n${renderedConversation}`;\n  return { conversation, renderedConversation };\n}\n\nexport interface ExtractionGroundingContext {\n  groundingSource: string;\n  assertionSource: string;\n  roleAssertionSources?: ExtractionGroundingRoleSources;\n  messageTimestamp: Date | undefined;\n  sourceConnector?: string;\n  /** Input came from an always-on recorder (issue #2294); the proactive\n   *  second pass reads it so its prompts carry the same media warning. */\n  ambientCapture?: boolean;\n  scopeClassificationEnabled?: boolean;\n  /** Contents of the turns assertionSource was joined from, so quote anchors cut at real turn boundaries. */\n  turns?: readonly string[];\n}\n\nexport function applyGroundingWithConnector(\n  config: PluginConfig,\n  result: ExtractionResult,\n  ctx: ExtractionGroundingContext,\n): ExtractionResult {\n  const caps = resolvePipelineProcessingCapabilities(config);\n  const options = {\n    sourceGrounding: caps.sourceGrounding,\n    anchorTemporalExpressions: caps.delinearize,\n    spanMode: config.extraction?.spanMode ?? \"off\",\n    turns: ctx.turns,\n  };\n  const known = buildKnownConnectors(ctx.sourceConnector);\n  // Scope-forcing is decoupled from strip/restore (runs without a trusted\n  // connector) but gated on the capability: flag off = byte-identical pre-#2183.\n  const scoped = ctx.scopeClassificationEnabled === false\n    ? result\n    : forceProjectScopeOnAnyQualifier(result, known);\n  if (ctx.sourceConnector === undefined) {\n    return applyExtractionSourceGrounding(scoped, ctx.groundingSource, ctx.assertionSource, ctx.roleAssertionSources, ctx.messageTimestamp, options);\n  }\n  const prepared = prepareTrustedConnectorQualifier(scoped, ctx.sourceConnector, known);\n  const grounded = applyExtractionSourceGrounding(prepared.result, ctx.groundingSource, ctx.assertionSource, ctx.roleAssertionSources, ctx.messageTimestamp, options);\n  return restoreTrustedConnectorQualifier(grounded);\n}\n\nfunction buildKnownConnectors(trusted: string | undefined): Set<string> {\n  const known = new Set<string>();\n  for (const id of knownConnectorIds()) known.add(id.toLowerCase());\n  if (trusted !== undefined) known.add(trusted.toLowerCase());\n  return known;\n}\n\n/**\n * Parse a leading agent qualifier from fact text. ONE parser, ONE boundary\n * rule, ONE case policy (case-insensitive), ONE definition of \"agent\" (the name\n * must be a known connector ID). Returns the matched agent and the remaining\n * text, or undefined. Both scope-forcing and strip/restore consume this single\n * result so they can never disagree (#2183 round-11).\n */\nfunction parseLeadingQualifier(content: string, known: ReadonlySet<string>): { agent: string; rest: string } | undefined {\n  const lower = content.toLowerCase();\n  for (const lead of [\"in \", \"for \"]) {\n    if (!lower.startsWith(lead)) continue;\n    const m = lower.slice(lead.length).match(/^([a-z0-9][a-z0-9._-]*)\\s*,/u);\n    if (m && known.has(m[1])) {\n      const consumed = lead.length + m[0].length;\n      return { agent: m[1], rest: content.slice(consumed).replace(/^[\\s,.;:]+/u, \"\") };\n    }\n  }\n  const pm = lower.match(/^([a-z0-9][a-z0-9._-]*)'s(?![\\p{L}\\p{N}])/u);\n  if (pm && known.has(pm[1])) {\n    return { agent: pm[1], rest: content.slice(pm[0].length).replace(/^[\\s,.;:]+/u, \"\") };\n  }\n  return undefined;\n}\n\n/**\n * Force \"project\" scope on any fact whose content starts with a recognised\n * agent qualifier (a known connector name). A qualifier is evidence the fact is\n * agent-tied; which connector it names does not matter.\n */\nfunction forceProjectScopeOnAnyQualifier(result: ExtractionResult, known: ReadonlySet<string>): ExtractionResult {\n  let any = false;\n  const facts = result.facts.map((fact) => {\n    if (fact.scope === \"project\") return fact;\n    if (parseLeadingQualifier(fact.content, known) === undefined) return fact;\n    any = true;\n    return { ...fact, scope: \"project\" as const };\n  });\n  return any ? { ...result, facts } : result;\n}\n\nconst RESTORE_KEY = \"_qo\";\n\n/**\n * Strip the TRUSTED connector's qualifier for the grounding pass. Uses the same\n * parseLeadingQualifier as scope-forcing, but only strips when the matched agent\n * IS the trusted connector. Each stripped fact carries its original content\n * positionally for collision-free restore.\n */\nfunction prepareTrustedConnectorQualifier(\n  result: ExtractionResult,\n  trustedConnector: string,\n  known: ReadonlySet<string>,\n): { result: ExtractionResult } {\n  const trusted = trustedConnector.toLowerCase();\n  const facts = result.facts.map((fact) => {\n    const parsed = parseLeadingQualifier(fact.content, known);\n    if (parsed === undefined || parsed.agent !== trusted) return fact;\n    return { ...fact, content: parsed.rest, [RESTORE_KEY]: fact.content };\n  }) as ExtractionResult[\"facts\"];\n  return { result: { ...result, facts } };\n}\n\nfunction restoreTrustedConnectorQualifier(grounded: ExtractionResult): ExtractionResult {\n  let touched = false;\n  const facts = grounded.facts.map((fact) => {\n    const record = fact as unknown as Record<string, unknown>;\n    const original = record[RESTORE_KEY];\n    if (typeof original !== \"string\") return fact;\n    touched = true;\n    const rest = { ...record };\n    delete rest[RESTORE_KEY];\n    return { ...rest, content: original } as ExtractionResult[\"facts\"][number];\n  });\n  return touched ? { ...grounded, facts } : grounded;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAgBO,SAAS,uBAAuB,OAAkD;AACvF,QAAM,eAAe,MAAM,OAAO,CAAC,SAAS,KAAK,0BAA0B,IAAI;AAC/E,QAAM,UAAU,sBAAsB,YAAY;AAClD,MAAI,YAAY,UAAa,CAAC,mBAAmB,OAAO,EAAG,QAAO;AAClE,SAAO,wBAAwB,KAAK,OAAO,IAAI,SAAY;AAC7D;AAMO,SAAS,gBAAgB,WAAmD;AACjF,SAAO,cAAc,UAAa,UAAU,UAAU,6BAA6B,YAAY;AACjG;AAEO,SAAS,6BACd,cACA,iBACwD;AACxD,QAAM,uBAAuB,aAC1B,IAAI,CAAC,MAAM,IAAI,EAAE,0BAA0B,OAAO,WAAW,EAAE,IAAI,KAAK,EAAE,IAAI,KAAK,EAAE,OAAO,EAAE,EAC9F,KAAK,MAAM;AACd,QAAM,eAAe,oBAAoB,SACrC,uBACA,iBAAiB,eAAe;AAAA;AAAA,kEAAuE,eAAe;AAAA;AAAA,EAAgD,oBAAoB;AAC9L,SAAO,EAAE,cAAc,qBAAqB;AAC9C;AAgBO,SAAS,4BACd,QACA,QACA,KACkB;AAClB,QAAM,OAAO,sCAAsC,MAAM;AACzD,QAAM,UAAU;AAAA,IACd,iBAAiB,KAAK;AAAA,IACtB,2BAA2B,KAAK;AAAA,IAChC,UAAU,OAAO,YAAY,YAAY;AAAA,IACzC,OAAO,IAAI;AAAA,EACb;AACA,QAAM,QAAQ,qBAAqB,IAAI,eAAe;AAGtD,QAAM,SAAS,IAAI,+BAA+B,QAC9C,SACA,gCAAgC,QAAQ,KAAK;AACjD,MAAI,IAAI,oBAAoB,QAAW;AACrC,WAAO,+BAA+B,QAAQ,IAAI,iBAAiB,IAAI,iBAAiB,IAAI,sBAAsB,IAAI,kBAAkB,OAAO;AAAA,EACjJ;AACA,QAAM,WAAW,iCAAiC,QAAQ,IAAI,iBAAiB,KAAK;AACpF,QAAM,WAAW,+BAA+B,SAAS,QAAQ,IAAI,iBAAiB,IAAI,iBAAiB,IAAI,sBAAsB,IAAI,kBAAkB,OAAO;AAClK,SAAO,iCAAiC,QAAQ;AAClD;AAEA,SAAS,qBAAqB,SAA0C;AACtE,QAAM,QAAQ,oBAAI,IAAY;AAC9B,aAAW,MAAM,kBAAkB,EAAG,OAAM,IAAI,GAAG,YAAY,CAAC;AAChE,MAAI,YAAY,OAAW,OAAM,IAAI,QAAQ,YAAY,CAAC;AAC1D,SAAO;AACT;AASA,SAAS,sBAAsB,SAAiB,OAAyE;AACvH,QAAM,QAAQ,QAAQ,YAAY;AAClC,aAAW,QAAQ,CAAC,OAAO,MAAM,GAAG;AAClC,QAAI,CAAC,MAAM,WAAW,IAAI,EAAG;AAC7B,UAAM,IAAI,MAAM,MAAM,KAAK,MAAM,EAAE,MAAM,8BAA8B;AACvE,QAAI,KAAK,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG;AACxB,YAAM,WAAW,KAAK,SAAS,EAAE,CAAC,EAAE;AACpC,aAAO,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,QAAQ,MAAM,QAAQ,EAAE,QAAQ,eAAe,EAAE,EAAE;AAAA,IACjF;AAAA,EACF;AACA,QAAM,KAAK,MAAM,MAAM,4CAA4C;AACnE,MAAI,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG;AAC1B,WAAO,EAAE,OAAO,GAAG,CAAC,GAAG,MAAM,QAAQ,MAAM,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,eAAe,EAAE,EAAE;AAAA,EACtF;AACA,SAAO;AACT;AAOA,SAAS,gCAAgC,QAA0B,OAA8C;AAC/G,MAAI,MAAM;AACV,QAAM,QAAQ,OAAO,MAAM,IAAI,CAAC,SAAS;AACvC,QAAI,KAAK,UAAU,UAAW,QAAO;AACrC,QAAI,sBAAsB,KAAK,SAAS,KAAK,MAAM,OAAW,QAAO;AACrE,UAAM;AACN,WAAO,EAAE,GAAG,MAAM,OAAO,UAAmB;AAAA,EAC9C,CAAC;AACD,SAAO,MAAM,EAAE,GAAG,QAAQ,MAAM,IAAI;AACtC;AAEA,IAAM,cAAc;AAQpB,SAAS,iCACP,QACA,kBACA,OAC8B;AAC9B,QAAM,UAAU,iBAAiB,YAAY;AAC7C,QAAM,QAAQ,OAAO,MAAM,IAAI,CAAC,SAAS;AACvC,UAAM,SAAS,sBAAsB,KAAK,SAAS,KAAK;AACxD,QAAI,WAAW,UAAa,OAAO,UAAU,QAAS,QAAO;AAC7D,WAAO,EAAE,GAAG,MAAM,SAAS,OAAO,MAAM,CAAC,WAAW,GAAG,KAAK,QAAQ;AAAA,EACtE,CAAC;AACD,SAAO,EAAE,QAAQ,EAAE,GAAG,QAAQ,MAAM,EAAE;AACxC;AAEA,SAAS,iCAAiC,UAA8C;AACtF,MAAI,UAAU;AACd,QAAM,QAAQ,SAAS,MAAM,IAAI,CAAC,SAAS;AACzC,UAAM,SAAS;AACf,UAAM,WAAW,OAAO,WAAW;AACnC,QAAI,OAAO,aAAa,SAAU,QAAO;AACzC,cAAU;AACV,UAAM,OAAO,EAAE,GAAG,OAAO;AACzB,WAAO,KAAK,WAAW;AACvB,WAAO,EAAE,GAAG,MAAM,SAAS,SAAS;AAAA,EACtC,CAAC;AACD,SAAO,UAAU,EAAE,GAAG,UAAU,MAAM,IAAI;AAC5C;","names":[]}

package/dist/chunk-AOFEMUHG.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/location/registry.ts","../src/location/pipeline.ts","../src/location/cli.ts","../src/location/backfill.ts","../src/location/provider-setup.ts","../src/location/surfaces.ts"],"sourcesContent":["/**\n * Location provider registry (issue #2044).\n *\n * In-memory only: host adapters register provider implementations at startup.\n * Core never statically imports an optional provider package — the registry\n * holds whatever the host wired in, and a configured source whose provider is\n * not registered is skipped (not an error), so partial installs keep working.\n */\n\nimport type { LocationProvider } from \"./types.js\";\n\nconst PROVIDER_ID_PATTERN = /^[a-z0-9][a-z0-9-]*$/;\n\nconst providers = new Map<string, LocationProvider>();\n\nfunction assertValidProvider(provider: LocationProvider): void {\n  if (typeof provider !== \"object\" || provider === null) {\n    throw new TypeError(\"location provider must be an object\");\n  }\n  if (typeof provider.id !== \"string\" || !PROVIDER_ID_PATTERN.test(provider.id)) {\n    throw new RangeError(\n      \"location provider id must be a non-empty lowercase kebab string (a-z, 0-9, hyphens)\",\n    );\n  }\n  if (typeof provider.displayName !== \"string\" || provider.displayName.trim().length === 0) {\n    throw new TypeError(`location provider '${provider.id}' must declare a non-empty displayName`);\n  }\n  if (typeof provider.verify !== \"function\" || typeof provider.fetchObservations !== \"function\") {\n    throw new TypeError(\n      `location provider '${provider.id}' must implement verify() and fetchObservations()`,\n    );\n  }\n}\n\nexport function registerLocationProvider(provider: LocationProvider): void {\n  assertValidProvider(provider);\n  if (providers.has(provider.id)) {\n    throw new Error(`location provider '${provider.id}' is already registered`);\n  }\n  providers.set(provider.id, provider);\n}\n\nexport function getLocationProvider(id: string): LocationProvider | undefined {\n  return typeof id === \"string\" ? providers.get(id) : undefined;\n}\n\nexport function listLocationProviders(): string[] {\n  return [...providers.keys()].sort((a, b) => (a < b ? -1 : a > b ? 1 : 0));\n}\n\n/** Test-only: reset the registry between cases. */\nexport function clearLocationProviders(): void {\n  providers.clear();\n}\n","/**\n * Location day-sync pipeline (issue #2044).\n *\n * For one local day, each configured (enabled, registered) provider's\n * observations are fetched over the day's half-open UTC window, folded into\n * place-visit segments, merged with the other sources' last-known day\n * payloads from sync state, and rendered to the day document. Sync state\n * advances only AFTER the day document (when any) is durable, so a failed\n * write never moves the watermark past data that did not land. An empty\n * fetch is a successful sync — never conflated with a provider failure\n * (AGENTS.md rule 22).\n */\n\nimport { getLocationProvider } from \"./registry.js\";\nimport { locationDayWindow, observationSegments } from \"./intervals.js\";\nimport {\n  composeLocationDayBody,\n  composeLocationDayMeta,\n  loadLocationSyncState,\n  serializeLocationDay,\n  updateLocationSourceDay,\n  writeLocationDay,\n  type LocationDaySourceEntry,\n} from \"./store.js\";\nimport type { LocationConfig, LocationObservation, LocationProvider, LocationSegment } from \"./types.js\";\n\nconst MAX_SYNC_PAGES = 10_000;\n\nexport interface LocationDaySyncOptions {\n  config: LocationConfig;\n  memoryDir: string;\n  date: string;\n  signal?: AbortSignal;\n  /** Runaway-pagination guard; defaults to MAX_SYNC_PAGES. */\n  maxPages?: number;\n  now?: () => Date;\n  /** Provider lookup seam (defaults to the registry); tests inject doubles. */\n  getProvider?: (id: string) => LocationProvider | undefined;\n}\n\nexport interface LocationSourceSyncResult {\n  sourceId: string;\n  status: \"synced\" | \"skipped\" | \"failed\";\n  skipReason?: \"source-disabled\" | \"provider-not-registered\";\n  fetched: number;\n  dayWritten: boolean;\n  stateSaved: boolean;\n  /** Sanitized provider error (no tokens, URLs, or coordinates). */\n  error?: string;\n}\n\n/** Redact credential, URL query, and coordinate shapes from a provider error. */\nexport function sanitizeProviderError(error: unknown): string {\n  const raw = error instanceof Error ? error.message : String(error);\n  return raw\n    .replace(/Bearer\\s+[A-Za-z0-9._~+/=-]+/gi, \"Bearer [redacted]\")\n    .replace(/[?#][^ \\t\"']*/g, \"[redacted]\")\n    .replace(/[+-]?\\d+\\.\\d{3,},\\s?[+-]?\\d+\\.\\d{3,}/g, \"[coordinates]\")\n    .slice(0, 300);\n}\n\nfunction assertValidObservation(observation: LocationObservation): void {\n  if (typeof observation !== \"object\" || observation === null) {\n    throw new TypeError(\"location provider returned a non-object observation\");\n  }\n  if (typeof observation.observedAtUtc !== \"string\" || !Number.isFinite(Date.parse(observation.observedAtUtc))) {\n    throw new TypeError(\"location provider returned an observation with an invalid observedAtUtc\");\n  }\n  const place = observation.place;\n  if (typeof place !== \"object\" || place === null || typeof place.id !== \"string\" || place.id.length === 0) {\n    throw new TypeError(\"location provider returned an observation without a valid place\");\n  }\n  if (typeof place.label !== \"string\" || place.label.trim().length === 0) {\n    throw new TypeError(`location provider returned place '${place.id}' without a label`);\n  }\n}\n\n/** Fetch every observation one provider holds for the window, all pages. */\nasync function fetchWindow(\n  provider: LocationProvider,\n  window: { startUtc: string; endUtc: string },\n  options: LocationDaySyncOptions,\n): Promise<LocationObservation[]> {\n  const maxPages = options.maxPages ?? MAX_SYNC_PAGES;\n  if (!Number.isInteger(maxPages) || maxPages < 1) {\n    throw new RangeError(\"location sync maxPages must be a positive integer\");\n  }\n  const observations: LocationObservation[] = [];\n  const seenCursors = new Set<string>();\n  let cursor: string | null = null;\n  let pages = 0;\n  let completed = false;\n  while (pages < maxPages) {\n    options.signal?.throwIfAborted();\n    const page = await provider.fetchObservations({\n      startUtc: window.startUtc,\n      endUtc: window.endUtc,\n      cursor,\n      signal: options.signal,\n    });\n    pages += 1;\n    for (const observation of page.observations) assertValidObservation(observation);\n    observations.push(...page.observations);\n    if (page.nextCursor === null) {\n      completed = true;\n      break;\n    }\n    if (typeof page.nextCursor !== \"string\" || page.nextCursor.length === 0) {\n      throw new TypeError(\"location provider returned an invalid cursor\");\n    }\n    if (seenCursors.has(page.nextCursor)) {\n      throw new Error(\"location provider returned a repeated cursor\");\n    }\n    seenCursors.add(page.nextCursor);\n    cursor = page.nextCursor;\n  }\n  // Only a loop that ran out of its page budget without a terminal null\n  // cursor is a runaway; completing on the final allowed page is normal.\n  if (!completed) {\n    throw new Error(`location provider exceeded ${maxPages} pages`);\n  }\n  return observations;\n}\n\n/**\n * Sync every configured source for one local day. The master gate\n * (`config.enabled === false`) short-circuits every path: no providers are\n * contacted and nothing touches the filesystem. A provider failure fails\n * that source only (state not advanced) and never blocks the others.\n */\nexport async function syncLocationDay(options: LocationDaySyncOptions): Promise<LocationSourceSyncResult[]> {\n  if (!options.config.enabled) return [];\n  const window = locationDayWindow(options.date, options.config.timezone);\n  const now = options.now ?? (() => new Date());\n  const resolveProvider = options.getProvider ?? getLocationProvider;\n\n  const results: LocationSourceSyncResult[] = [];\n  for (const source of options.config.sources) {\n    if (!source.enabled) {\n      results.push({\n        sourceId: source.id,\n        status: \"skipped\",\n        skipReason: \"source-disabled\",\n        fetched: 0,\n        dayWritten: false,\n        stateSaved: false,\n      });\n      continue;\n    }\n    const provider = resolveProvider(source.id);\n    if (provider === undefined) {\n      results.push({\n        sourceId: source.id,\n        status: \"skipped\",\n        skipReason: \"provider-not-registered\",\n        fetched: 0,\n        dayWritten: false,\n        stateSaved: false,\n      });\n      continue;\n    }\n\n    let observations: LocationObservation[];\n    try {\n      observations = await fetchWindow(provider, window, options);\n    } catch (error) {\n      results.push({\n        sourceId: source.id,\n        status: \"failed\",\n        fetched: 0,\n        dayWritten: false,\n        stateSaved: false,\n        ...(error instanceof Error && error.name === \"AbortError\"\n          ? { error: \"aborted\" }\n          : { error: sanitizeProviderError(error) }),\n      });\n      continue;\n    }\n\n    try {\n      options.signal?.throwIfAborted();\n      const segments = observationSegments(observations, window, {\n        retainCoordinates: options.config.retainCoordinates,\n      });\n      const payload = { observationCount: observations.length, segments, providerDisplayName: provider.displayName };\n      const merged = await mergeDaySources(options.memoryDir, source.id, options.date, payload);\n      let dayWritten = false;\n      if (Object.values(merged).some((entry) => entry.observationCount > 0)) {\n        const body = composeLocationDayBody(options.date, options.config.timezone, merged);\n        const meta = composeLocationDayMeta(options.date, options.config.timezone, merged, body);\n        dayWritten = await writeLocationDay(options.memoryDir, options.date, serializeLocationDay(meta, body));\n      }\n      // State advances only after the durable day write above succeeded.\n      await updateLocationSourceDay(\n        options.memoryDir,\n        source.id,\n        options.date,\n        payload,\n        now().toISOString(),\n      );\n      results.push({\n        sourceId: source.id,\n        status: \"synced\",\n        fetched: observations.length,\n        dayWritten,\n        stateSaved: true,\n      });\n    } catch (error) {\n      results.push({\n        sourceId: source.id,\n        status: \"failed\",\n        fetched: observations.length,\n        dayWritten: false,\n        stateSaved: false,\n        ...(error instanceof Error && error.name === \"AbortError\"\n          ? { error: \"aborted\" }\n          : { error: sanitizeProviderError(error) }),\n      });\n    }\n  }\n  return results;\n}\n\n/**\n * The day-document source map: this source's fresh payload plus every OTHER\n * source's last-known payload from sync state. Rendered documents therefore\n * survive a re-sync of one source without re-fetching the others.\n */\nasync function mergeDaySources(\n  memoryDir: string,\n  sourceId: string,\n  date: string,\n  payload: { observationCount: number; segments: LocationSegment[] },\n): Promise<Record<string, LocationDaySourceEntry>> {\n  const state = await loadLocationSyncState(memoryDir);\n  const merged: Record<string, LocationDaySourceEntry> = {};\n  for (const [otherId, otherState] of Object.entries(state.sources)) {\n    if (otherId === sourceId) continue;\n    const day = otherState.days?.[date];\n    if (day === undefined) continue;\n    merged[otherId] = { ...day, segments: [...day.segments] };\n  }\n  merged[sourceId] = payload;\n  return merged;\n}\n","/**\n * Location surface helpers (issue #2044): status, provider health checks, and\n * multi-day sync. Pure `@remnic/core` — no optional packages, no host CLI\n * wiring; a host adapter (or the core CLI, in a later slice) renders these\n * structured results into its own command surface.\n */\n\nimport { getLocationProvider } from \"./registry.js\";\nimport { isValidLocationDate, localDayKey } from \"./intervals.js\";\nimport { listLocationDayDates, loadLocationSyncState, parseLocationDaySummary, readLocationDay } from \"./store.js\";\nimport { syncLocationDay, type LocationDaySyncOptions, type LocationSourceSyncResult } from \"./pipeline.js\";\nimport type { LocationConfig, LocationProvider } from \"./types.js\";\n\nexport interface LocationSourceStatus {\n  id: string;\n  enabled: boolean;\n  providerRegistered: boolean;\n  lastSyncedAtUtc?: string;\n  trackedDays: number;\n}\n\nexport interface LocationDayStatus {\n  date: string;\n  sources: string[];\n  observationCount: number;\n}\n\nexport interface LocationStatusReport {\n  enabled: boolean;\n  timezone: string;\n  sources: LocationSourceStatus[];\n  /** Stored day documents, newest first (at most `maxDays`). */\n  recentDays: LocationDayStatus[];\n}\n\nexport interface LocationStatusOptions {\n  /** Provider lookup seam (defaults to the registry); tests inject doubles. */\n  getProvider?: (id: string) => LocationProvider | undefined;\n  /** Cap on day documents listed; defaults to 7. */\n  maxDays?: number;\n  now?: () => Date;\n}\n\nexport async function locationStatus(\n  config: LocationConfig,\n  memoryDir: string,\n  options: LocationStatusOptions = {},\n): Promise<LocationStatusReport> {\n  const resolveProvider = options.getProvider ?? getLocationProvider;\n  const state = await loadLocationSyncState(memoryDir);\n  const sources: LocationSourceStatus[] = config.sources.map((source) => {\n    const sourceState = state.sources[source.id];\n    return {\n      id: source.id,\n      enabled: source.enabled,\n      providerRegistered: resolveProvider(source.id) !== undefined,\n      ...(sourceState?.lastSyncedAtUtc === undefined ? {} : { lastSyncedAtUtc: sourceState.lastSyncedAtUtc }),\n      trackedDays: Object.keys(sourceState?.days ?? {}).length,\n    };\n  });\n\n  const maxDays = options.maxDays ?? 7;\n  const recentDays: LocationDayStatus[] = [];\n  for (const date of (await listLocationDayDates(memoryDir)).slice(0, Math.max(0, maxDays))) {\n    const raw = await readLocationDay(memoryDir, date);\n    const summary = raw === null ? null : parseLocationDaySummary(raw);\n    recentDays.push({\n      date,\n      sources: summary?.sources ?? [],\n      observationCount: summary?.observationCount ?? 0,\n    });\n  }\n  return { enabled: config.enabled, timezone: config.timezone, sources, recentDays };\n}\n\nexport interface LocationSourceCheckResult {\n  id: string;\n  ok: boolean;\n  detail?: string;\n  skipped?: \"location-disabled\" | \"source-disabled\" | \"provider-not-registered\";\n}\n\nexport interface LocationCheckOptions {\n  signal?: AbortSignal;\n  getProvider?: (id: string) => LocationProvider | undefined;\n}\n\n/** Probe every configured provider's health. The master gate short-circuits. */\nexport async function checkLocationSources(\n  config: LocationConfig,\n  options: LocationCheckOptions = {},\n): Promise<LocationSourceCheckResult[]> {\n  if (!config.enabled) {\n    return config.sources.map((source) => ({ id: source.id, ok: false, skipped: \"location-disabled\" as const }));\n  }\n  const resolveProvider = options.getProvider ?? getLocationProvider;\n  const results: LocationSourceCheckResult[] = [];\n  for (const source of config.sources) {\n    if (!source.enabled) {\n      results.push({ id: source.id, ok: false, skipped: \"source-disabled\" });\n      continue;\n    }\n    const provider = resolveProvider(source.id);\n    if (provider === undefined) {\n      results.push({ id: source.id, ok: false, skipped: \"provider-not-registered\" });\n      continue;\n    }\n    try {\n      const check = await provider.verify(options.signal);\n      results.push({\n        id: source.id,\n        ok: check.ok,\n        ...(check.detail === undefined || check.detail.length === 0 ? {} : { detail: check.detail }),\n      });\n    } catch (error) {\n      results.push({ id: source.id, ok: false, detail: error instanceof Error ? error.name : \"provider error\" });\n    }\n  }\n  return results;\n}\n\nfunction shiftIsoDate(date: string, days: number): string {\n  const parsed = new Date(`${date}T00:00:00Z`);\n  parsed.setUTCDate(parsed.getUTCDate() + days);\n  return parsed.toISOString().slice(0, 10);\n}\n\nexport interface LocationSyncRunOptions\n  extends Omit<LocationDaySyncOptions, \"config\" | \"date\" | \"memoryDir\"> {\n  config: LocationConfig;\n  memoryDir: string;\n  /** Exclusive end date (local YYYY-MM-DD); defaults to today in config.timezone. */\n  endDate?: string;\n  /** Number of days to sync ending at endDate; defaults to config.syncDays. */\n  days?: number;\n  now?: () => Date;\n}\n/**\n * Sync the trailing `days` local days ending AT `endDate` (inclusive).\n * `endDate` defaults to yesterday in config.timezone (today is incomplete);\n * days run oldest-first so a failure stops before newer days, matching the\n * incremental-sync intent of `syncDays`.\n */\nexport async function syncLocation(\n  options: LocationSyncRunOptions,\n): Promise<Array<{ date: string; results: LocationSourceSyncResult[] }>> {\n  const { config, memoryDir, endDate, days, ...rest } = options;\n  if (endDate !== undefined && !isValidLocationDate(endDate)) {\n    throw new RangeError(`Invalid location endDate \"${endDate}\"; expected a real YYYY-MM-DD day.`);\n  }\n  const now = rest.now ?? (() => new Date());\n  const end = endDate ?? shiftIsoDate(localDayKey(now().toISOString(), config.timezone), -1);\n  const count = days ?? config.syncDays;\n  if (!Number.isInteger(count) || count < 1 || count > 90) {\n    throw new RangeError(\"location sync days must be an integer from 1 to 90\");\n  }\n  const runs: Array<{ date: string; results: LocationSourceSyncResult[] }> = [];\n  for (let offset = count; offset >= 1; offset -= 1) {\n    const date = shiftIsoDate(end, -(offset - 1));\n    runs.push({ date, results: await syncLocationDay({ ...rest, config, memoryDir, date, now }) });\n  }\n  return runs;\n}\n","/**\n * Location tag backfill (issue #2046) — idempotent, bounded, LLM-free.\n *\n * For each local day in an explicit [from, to] range, find the memories whose\n * own bi-temporal window touches that day and re-run the shared tagging core\n * over the stored location segments. Provider-owned fields update or remove\n * as the (corrected) observations dictate; manual metadata, unrelated tags,\n * supersession, corrections, and content hashes are untouched by the plan\n * core in `matching.ts`.\n *\n * Failure isolation: one bad day is reported as `failed` and the run\n * continues; one bad memory inside a day counts into `failed` without\n * blocking its neighbors. A day with no stored segments is `emptyDay`, never\n * an error (distinct from a failed day). Re-running the same range yields\n * `unchanged` everywhere and writes nothing.\n */\n\nimport type { StorageManager } from \"../index.js\";\nimport type { MemoryFile, PluginConfig } from \"../types.js\";\nimport { resolveNamespaceCapabilities } from \"../capabilities.js\";\nimport { resolveDefaultNamespaceRoot } from \"../namespaces/storage.js\";\nimport { StorageManager as StorageManagerClass } from \"../storage.js\";\nimport { localDayKey } from \"./intervals.js\";\nimport { memoryLocationWindow } from \"./matching.js\";\nimport {\n  emptyEnrichmentCounts,\n  enrichMemoriesWithLocation,\n  loadDaySegmentIndex,\n  locationTaggingEnabled,\n  type DaySegmentIndex,\n  type LocationEnrichmentCounts,\n} from \"./tagging.js\";\nimport type { LocationConfig } from \"./types.js\";\n\nexport interface LocationBackfillDayReport {\n  date: string;\n  /** No stored segments for any source on this day. */\n  emptyDay: boolean;\n  failed?: string;\n  counts: LocationEnrichmentCounts;\n  /** Memories whose window touched the day (empty days report 0). */\n  considered: number;\n}\n\nexport interface LocationBackfillReport {\n  from: string;\n  to: string;\n  dryRun: boolean;\n  days: LocationBackfillDayReport[];\n}\n\nexport interface BackfillLocationTagsOptions {\n  storage: Pick<StorageManager, \"readAllMemories\" | \"getMemoryById\" | \"writeMemoryFrontmatter\">;\n  memoryDir: string;\n  config: LocationConfig;\n  from: string;\n  to: string;\n  dryRun?: boolean;\n}\n\nexport type BackfillMemoryStorage = Pick<StorageManager, \"readAllMemories\" | \"getMemoryById\" | \"writeMemoryFrontmatter\">;\n\n/**\n * The memory store tag backfill patches: the default-namespace store — the\n * root memory dir when namespaces are off, the resolved default-namespace\n * root when they are on.\n */\nexport async function backfillMemoryStorage(config: PluginConfig): Promise<StorageManager> {\n  const root = resolveNamespaceCapabilities(config).namespaces\n    ? await resolveDefaultNamespaceRoot(config)\n    : config.memoryDir;\n  return new StorageManagerClass(root);\n}\n\n\n/** Memories whose own window touches `day`, in deterministic id order. */\nfunction memoriesTouchingDay(memories: readonly MemoryFile[], day: string, config: LocationConfig): MemoryFile[] {\n  const touched: MemoryFile[] = [];\n  for (const memory of memories) {\n    const result = memoryLocationWindow(memory.frontmatter, (instant) => localDayKey(instant, config.timezone));\n    if (result.days !== undefined && result.days.includes(day)) touched.push(memory);\n  }\n  touched.sort((a, b) => (a.frontmatter.id < b.frontmatter.id ? -1 : a.frontmatter.id > b.frontmatter.id ? 1 : 0));\n  return touched;\n}\n\n/**\n * Run the bounded backfill. Requires both tagging gates (`location.enabled`\n * and `location.tagging.enabled`); the caller surfaces a clear error for a\n * gated-off run so no surface silently no-ops.\n */\nexport async function backfillLocationTags(\n  options: BackfillLocationTagsOptions,\n): Promise<LocationBackfillReport> {\n  if (!locationTaggingEnabled(options.config)) {\n    throw new Error(\n      \"location backfill requires location.enabled and location.tagging.enabled (and location.tagging.backfillEnabled for the command surface)\",\n    );\n  }\n  const index: DaySegmentIndex = await loadDaySegmentIndex(options.memoryDir);\n  const memories = await options.storage.readAllMemories();\n\n  const days: LocationBackfillDayReport[] = [];\n  const cursor = new Date(`${options.from}T00:00:00Z`);\n  const end = new Date(`${options.to}T00:00:00Z`);\n  while (cursor <= end) {\n    const date = cursor.toISOString().slice(0, 10);\n    try {\n      const daySegments = index.get(date);\n      if (daySegments === undefined || daySegments.every((entry) => entry.segments.length === 0)) {\n        days.push({ date, emptyDay: true, counts: emptyEnrichmentCounts(), considered: 0 });\n      } else {\n        const touching = memoriesTouchingDay(memories, date, options.config);\n        const counts = await enrichMemoriesWithLocation({\n          storage: options.storage,\n          memoryDir: options.memoryDir,\n          config: options.config,\n          memories: touching,\n          index,\n          dryRun: options.dryRun === true,\n        });\n        days.push({ date, emptyDay: false, counts, considered: touching.length });\n      }\n    } catch (error) {\n      // One failed day never blocks the rest of the range.\n      days.push({\n        date,\n        emptyDay: false,\n        failed: error instanceof Error ? error.message : String(error),\n        counts: emptyEnrichmentCounts(),\n        considered: 0,\n      });\n    }\n    cursor.setUTCDate(cursor.getUTCDate() + 1);\n  }\n  return { from: options.from, to: options.to, dryRun: options.dryRun === true, days };\n}\n","/**\n * Location provider bootstrapping (issue #2047).\n *\n * Core never statically imports a provider package (adapter-isolation test),\n * so every surface calls this before status/check/sync: it registers\n * configured providers from optional packages via computed-specifier dynamic\n * imports, with credentials read from environment variables — tokens never\n * enter config files, errors, or logs. A source whose package or credentials\n * are absent stays unregistered and the pipeline reports\n * `provider-not-registered`; that is a skip reason, never an error (the\n * connector-reitti package's README contract).\n */\n\nimport { readEnvVar } from \"../runtime/env.js\";\nimport { log } from \"../logger.js\";\nimport { getLocationProvider } from \"./registry.js\";\nimport type { LocationConfig } from \"./types.js\";\n\n/** Environment shape the setup reads for the `reitti` source. */\nexport interface LocationProviderEnv {\n  baseUrl?: string;\n  token?: string;\n  authMode?: string;\n}\n\nexport interface LocationProviderSetupDeps {\n  /** Injectable env (tests); defaults to REITTI_* process variables. */\n  env?: LocationProviderEnv;\n  /** Injectable module loader (tests); defaults to a dynamic import. */\n  importModule?: (specifier: string) => Promise<unknown>;\n}\n\ninterface ReittiProviderModule {\n  ensureReittiProviderRegistered(options: {\n    baseUrl: string;\n    token: string;\n    timezone: string;\n    authMode?: \"x-api-token\" | \"bearer\";\n  }): boolean;\n}\n\nconst loadFailuresWarned = new Set<string>();\n\nfunction readReittiEnv(): LocationProviderEnv {\n  return {\n    baseUrl: readEnvVar(\"REITTI_BASE_URL\"),\n    token: readEnvVar(\"REITTI_TOKEN\"),\n    authMode: readEnvVar(\"REITTI_AUTH_MODE\"),\n  };\n}\n\n/**\n * Register every configured+enabled source's provider when its optional\n * package and credentials are available. Idempotent; returns the ids this\n * call registered. Never throws — a missing package or credential set is\n * reported downstream as `provider-not-registered`.\n */\nexport async function ensureConfiguredLocationProviders(\n  config: LocationConfig,\n  deps: LocationProviderSetupDeps = {},\n): Promise<string[]> {\n  const registered: string[] = [];\n  if (!config.enabled) return registered;\n  for (const source of config.sources) {\n    if (!source.enabled) continue;\n    if (getLocationProvider(source.id) !== undefined) continue;\n    // ponytail: only the `reitti` built-in exists today; add cases here as\n    // provider packages land — a registry table when there is more than one.\n    if (source.id !== \"reitti\") continue;\n    const env = deps.env ?? readReittiEnv();\n    const baseUrl = env.baseUrl?.trim();\n    const token = env.token?.trim();\n    if (!baseUrl || !token) continue;\n    const authMode =\n      env.authMode === \"x-api-token\" || env.authMode === \"bearer\" ? env.authMode : undefined;\n    const specifier = \"@remnic/\" + \"connector-reitti\";\n    const load = deps.importModule ?? ((s: string) => import(s));\n    try {\n      const mod = (await load(specifier)) as ReittiProviderModule;\n      if (\n        mod.ensureReittiProviderRegistered({\n          baseUrl,\n          token,\n          timezone: config.timezone,\n          ...(authMode !== undefined ? { authMode } : {}),\n        })\n      ) {\n        registered.push(\"reitti\");\n      }\n    } catch (err) {\n      // Absent optional package is the common case (skip silently); a real\n      // load failure is worth one warn line, never credentials.\n      const message = err instanceof Error ? err.message : String(err);\n      if (!message.includes(specifier)) {\n        if (!loadFailuresWarned.has(specifier)) {\n          loadFailuresWarned.add(specifier);\n          log.warn(`location: failed to load optional provider package ${specifier}: ${message}`);\n        }\n      }\n    }\n  }\n  return registered;\n}\n","/**\n * Location surface runners (issues #2047, #2046) — ONE implementation shared\n * by the CLI (`remnic location ...`), the MCP tools, the HTTP routes, and the\n * scheduler, so no surface can fork validation or disabled/empty/failure\n * semantics (same rule as the wearables runner). Parsing here is strict:\n * unknown flags reject with the valid list, invalid values reject loudly.\n */\n\nimport { EngramAccessInputError } from \"../access-errors.js\";\nimport {\n  checkLocationSources,\n  locationStatus,\n  syncLocation,\n  type LocationSourceCheckResult,\n  type LocationStatusReport,\n} from \"./cli.js\";\nimport { isValidLocationDate } from \"./intervals.js\";\nimport { backfillLocationTags, type LocationBackfillReport } from \"./backfill.js\";\nimport type { LocationSourceSyncResult } from \"./pipeline.js\";\nimport { ensureConfiguredLocationProviders } from \"./provider-setup.js\";\nimport { parseLocationDaySummary, readLocationDay } from \"./store.js\";\nimport type { LocationConfig } from \"./types.js\";\nimport type { StorageManager } from \"../index.js\";\n\nexport interface LocationSurfaceDeps {\n  config: LocationConfig;\n  memoryDir: string;\n  /**\n   * Memory storage for tag backfill (default-namespace store). Optional so\n   * pure day-sync surfaces (status/check/day) never construct one; hosts\n   * that expose backfill provide it (issue #2046).\n   */\n  getMemoryStorage?: () => Promise<StorageManager>;\n}\n\nexport async function runLocationStatus(\n  deps: LocationSurfaceDeps,\n): Promise<LocationStatusReport> {\n  await ensureConfiguredLocationProviders(deps.config);\n  return locationStatus(deps.config, deps.memoryDir);\n}\n\nexport interface LocationSyncRun {\n  date: string;\n  results: LocationSourceSyncResult[];\n}\n\nexport type LocationSyncRuns = LocationSyncRun[];\nexport async function runLocationCheck(\n  deps: LocationSurfaceDeps,\n  signal?: AbortSignal,\n): Promise<LocationSourceCheckResult[]> {\n  await ensureConfiguredLocationProviders(deps.config);\n  return checkLocationSources(deps.config, signal !== undefined ? { signal } : {});\n}\n\nexport async function runLocationSync(\n  deps: LocationSurfaceDeps,\n  request: { endDate?: string; days?: number } = {},\n): Promise<LocationSyncRuns> {\n  await ensureConfiguredLocationProviders(deps.config);\n  const runs = await syncLocation({ ...deps, ...validatedSyncWindow(request) });\n  return runs as LocationSyncRuns;\n}\n\nexport interface LocationDayView {\n  date: string;\n  found: boolean;\n  sources: string[];\n  observationCount: number;\n  body: string | null;\n}\n\nexport async function runLocationDay(memoryDir: string, rawDate: unknown): Promise<LocationDayView> {\n  const date = requireLocationDate(rawDate, \"date\");\n  const body = await readLocationDay(memoryDir, date);\n  const summary = body === null ? null : parseLocationDaySummary(body);\n  return {\n    date,\n    found: body !== null,\n    sources: summary?.sources ?? [],\n    observationCount: summary?.observationCount ?? 0,\n    body,\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Shared validation (CLI, MCP, HTTP all reject identically)\n// ---------------------------------------------------------------------------\n\nfunction requireLocationDate(raw: unknown, label: string): string {\n  if (typeof raw !== \"string\" || !isValidLocationDate(raw)) {\n    throw new EngramAccessInputError(`location: ${label} is required (YYYY-MM-DD)`);\n  }\n  return raw;\n}\n\nfunction optionalLocationDays(raw: unknown): number | undefined {\n  if (raw === undefined || raw === null || raw === \"\") return undefined;\n  const parsed = typeof raw === \"number\" ? raw : Number(raw);\n  if (!Number.isInteger(parsed) || parsed < 1 || parsed > 90) {\n    throw new EngramAccessInputError(\"location: days expects an integer from 1 to 90\");\n  }\n  return parsed;\n}\n\nfunction validatedSyncWindow(request: { endDate?: string; days?: number }): {\n  endDate?: string;\n  days?: number;\n} {\n  const days = optionalLocationDays(request.days);\n  const endDate =\n    request.endDate === undefined || request.endDate === null || request.endDate === \"\"\n      ? undefined\n      : requireLocationDate(request.endDate, \"date\");\n  return { ...(endDate !== undefined ? { endDate } : {}), ...(days !== undefined ? { days } : {}) };\n}\n\n/** Day span between two inclusive local dates (from ≤ to, ≤ 90 days). */\nexport function parseLocationBackfillRange(\n  rawFrom: unknown,\n  rawTo: unknown,\n): { from: string; endDate: string; days: number } {\n  const from = requireLocationDate(rawFrom, \"from\");\n  const to = requireLocationDate(rawTo, \"to\");\n  const fromMs = Date.parse(`${from}T00:00:00Z`);\n  const toMs = Date.parse(`${to}T00:00:00Z`);\n  if (toMs < fromMs) {\n    throw new EngramAccessInputError(\"location: backfill --from must not be after --to\");\n  }\n  const days = Math.round((toMs - fromMs) / 86_400_000) + 1;\n  if (days > 90) {\n    throw new EngramAccessInputError(\"location: backfill range is capped at 90 days\");\n  }\n  return { from, endDate: to, days };\n}\n\nexport interface LocationBackfillResult {\n  /** Per-day provider sync results (empty under `dryRun`). */\n  days: LocationSyncRuns;\n  /** Memory re-tag report; absent when no memory storage was provided. */\n  memory?: LocationBackfillReport;\n}\n\n/**\n * Backfill an explicit historical range (issue #2046): sync the days (unless\n * `dryRun`, which persists NOTHING — not day files, not memory patches), then\n * re-run the shared tagging core over the stored segments. Requires\n * `location.enabled` + `location.tagging.enabled` +\n * `location.tagging.backfillEnabled`.\n */\nexport async function runLocationBackfill(\n  deps: LocationSurfaceDeps,\n  request: { from?: unknown; to?: unknown; dryRun?: boolean } = {},\n): Promise<LocationBackfillResult> {\n  const range = parseLocationBackfillRange(request.from, request.to);\n  if (!deps.config.enabled || !deps.config.tagging.enabled || !deps.config.tagging.backfillEnabled) {\n    throw new EngramAccessInputError(\n      \"location: backfill requires location.enabled, location.tagging.enabled, and location.tagging.backfillEnabled\",\n    );\n  }\n  await ensureConfiguredLocationProviders(deps.config);\n  const days =\n    request.dryRun === true ? [] : (await syncLocation({ ...deps, endDate: range.endDate, days: range.days })) as LocationSyncRuns;\n  let memory: LocationBackfillReport | undefined;\n  if (deps.getMemoryStorage !== undefined) {\n    memory = await backfillLocationTags({\n      storage: await deps.getMemoryStorage(),\n      memoryDir: deps.memoryDir,\n      config: deps.config,\n      from: range.from,\n      to: range.endDate,\n      dryRun: request.dryRun === true,\n    });\n  }\n  return { days, ...(memory !== undefined ? { memory } : {}) };\n}\n\n// ---------------------------------------------------------------------------\n// CLI command (shared by every CLI host)\n// ---------------------------------------------------------------------------\n\nexport interface LocationCliIo {\n  stdout: { write(chunk: string): unknown };\n  stderr: { write(chunk: string): unknown };\n}\n\nconst USAGE = `Usage: location <command> [options]\n\nCommands:\n  status                         Configured sources, registration, last sync\n  check                          Probe every enabled provider (auth/connectivity)\n  sync [options]                 Sync recent local days (default: config.syncDays\n                                   ending yesterday)\n    --date <YYYY-MM-DD>          End the window on this day (inclusive)\n    --days <n>                   Window size, 1..90 (default: location.syncDays)\n  backfill --from <date> --to <date> [--dry-run]\n                                 Sync an explicit historical range (≤ 90 days)\n                                 and re-tag overlapping memories (requires\n                                 location.tagging.backfillEnabled). --dry-run\n                                 persists nothing: it only reports the memory\n                                 changes stored segments would produce.\n  day <YYYY-MM-DD>               Print one stored location day\n\nAdd --json to status/sync/backfill/day for machine-readable output.\nCredentials for built-in providers come from the environment:\n  reitti: REITTI_BASE_URL, REITTI_TOKEN[, REITTI_AUTH_MODE=x-api-token|bearer]\n`;\n\nconst VALUE_FLAGS = new Set([\"--date\", \"--days\", \"--from\", \"--to\"]);\nconst BOOLEAN_FLAGS = new Set([\"--json\", \"--dry-run\"]);\n\ninterface ParsedCliFlags {\n  flags: Map<string, string | true>;\n  positional: string[];\n}\n\nfunction parseCliFlags(args: string[]): ParsedCliFlags {\n  const flags = new Map<string, string | true>();\n  const positional: string[] = [];\n  for (let index = 0; index < args.length; index++) {\n    const arg = args[index];\n    if (!arg.startsWith(\"--\")) {\n      positional.push(arg);\n      continue;\n    }\n    if (BOOLEAN_FLAGS.has(arg)) {\n      flags.set(arg, true);\n      continue;\n    }\n    if (VALUE_FLAGS.has(arg)) {\n      const value = args[index + 1];\n      if (value === undefined || value.startsWith(\"--\")) {\n        throw new EngramAccessInputError(`location: ${arg} requires a value`);\n      }\n      flags.set(arg, value);\n      index++;\n      continue;\n    }\n    throw new EngramAccessInputError(\n      `location: unknown flag '${arg}' — valid flags: ${[...VALUE_FLAGS, ...BOOLEAN_FLAGS].join(\", \")}`,\n    );\n  }\n  return { flags, positional };\n}\n\nfunction renderBackfillReport(io: LocationCliIo, report: LocationBackfillReport): void {\n  for (const day of report.days) {\n    if (day.emptyDay) {\n      io.stdout.write(`${day.date}: no stored location observations (empty day)\\n`);\n      continue;\n    }\n    if (day.failed !== undefined) {\n      io.stdout.write(`${day.date}: FAILED — ${day.failed}\\n`);\n      continue;\n    }\n    const c = day.counts;\n    io.stdout.write(\n      `${day.date}: ${c.tagged} tagged, ${c.updated} updated, ${c.removed} removed, ` +\n        `${c.unchanged} unchanged, ${c.unmatched} unmatched (incl. ambiguous), ` +\n        `${c.manual} manual, ${c.untimed} untimed, ${c.failed} failed, ` +\n        `${day.considered} considered${report.dryRun ? \" (dry run)\" : \"\"}\\n`,\n    );\n  }\n}\n\nfunction flagString(parsed: ParsedCliFlags, name: string): string | undefined {\n  const value = parsed.flags.get(name);\n  return typeof value === \"string\" ? value : undefined;\n}\n\nfunction renderStatus(report: LocationStatusReport): string {\n  const lines = [\n    `Location: ${report.enabled ? \"enabled\" : \"disabled\"} (timezone ${report.timezone})`,\n  ];\n  if (report.sources.length === 0) {\n    lines.push(\"No sources configured. Add location.sources to the plugin config.\");\n    return `${lines.join(\"\\n\")}\\n`;\n  }\n  for (const source of report.sources) {\n    lines.push(\n      `  ${source.id}: ${source.enabled ? \"enabled\" : \"disabled\"}, ` +\n        `provider ${source.providerRegistered ? \"registered\" : \"not registered\"}, ` +\n        `${source.trackedDays} tracked day${source.trackedDays === 1 ? \"\" : \"s\"}, ` +\n        `last sync ${source.lastSyncedAtUtc ?? \"never\"}`,\n    );\n  }\n  if (report.recentDays.length > 0) {\n    lines.push(\"  recent days:\");\n    for (const day of report.recentDays) {\n      lines.push(\n        `    ${day.date}  ${day.observationCount} observation${day.observationCount === 1 ? \"\" : \"s\"}  [${day.sources.join(\", \")}]`,\n      );\n    }\n  }\n  return `${lines.join(\"\\n\")}\\n`;\n}\n\nfunction anySourceFailed(runs: LocationSyncRuns): boolean {\n  return runs.some((run) => run.results.some((result) => result.status === \"failed\"));\n}\n\nfunction renderRuns(io: LocationCliIo, runs: LocationSyncRuns): void {\n  for (const run of runs) {\n    for (const result of run.results) {\n      io.stdout.write(\n        `${run.date} ${result.sourceId}: ${result.status}${result.error ? ` — ${result.error}` : \"\"} (${result.fetched} fetched)\\n`,\n      );\n    }\n  }\n}\n\n/** Run a `remnic location ...` command; returns a process exit code. */\nexport async function runLocationCliCommand(\n  deps: LocationSurfaceDeps,\n  args: string[],\n  io: LocationCliIo,\n): Promise<number> {\n  const [command, ...rest] = args;\n  try {\n    switch (command) {\n      case undefined:\n      case \"help\":\n      case \"--help\": {\n        io.stdout.write(USAGE);\n        return command === undefined ? 1 : 0;\n      }\n      case \"status\": {\n        const parsed = parseCliFlags(rest);\n        const report = await runLocationStatus(deps);\n        if (parsed.flags.has(\"--json\")) {\n          io.stdout.write(`${JSON.stringify(report, null, 2)}\\n`);\n          return 0;\n        }\n        io.stdout.write(renderStatus(report));\n        return 0;\n      }\n      case \"check\": {\n        const results = await runLocationCheck(deps);\n        for (const result of results) {\n          const skipped = result.skipped === undefined ? \"\" : ` (skipped: ${result.skipped})`;\n          io.stdout.write(\n            `${result.id}: ${result.ok ? \"OK\" : \"FAILED\"}${skipped}${result.detail ? ` — ${result.detail}` : \"\"}\\n`,\n          );\n        }\n        return results.every((result) => result.ok) ? 0 : 1;\n      }\n      case \"sync\": {\n        const parsed = parseCliFlags(rest);\n        if (parsed.positional.length > 0) {\n          throw new EngramAccessInputError(\n            `location: unexpected argument '${parsed.positional[0]}' — sync takes flags only`,\n          );\n        }\n        const daysValue = flagString(parsed, \"--days\");\n        const runs = await runLocationSync(deps, {\n          endDate: flagString(parsed, \"--date\"),\n          ...(daysValue !== undefined ? { days: Number(daysValue) } : {}),\n        });\n        if (parsed.flags.has(\"--json\")) {\n          io.stdout.write(`${JSON.stringify({ days: runs }, null, 2)}\\n`);\n        } else {\n          renderRuns(io, runs);\n        }\n        return anySourceFailed(runs) ? 1 : 0;\n      }\n      case \"backfill\": {\n        const parsed = parseCliFlags(rest);\n        const result = await runLocationBackfill(deps, {\n          from: flagString(parsed, \"--from\"),\n          to: flagString(parsed, \"--to\"),\n          dryRun: parsed.flags.has(\"--dry-run\"),\n        });\n        if (parsed.flags.has(\"--json\")) {\n          io.stdout.write(`${JSON.stringify(result, null, 2)}\\n`);\n        } else {\n          renderRuns(io, result.days);\n          if (result.memory !== undefined) renderBackfillReport(io, result.memory);\n        }\n        const memoryFailed = result.memory?.days.some((day) => day.failed !== undefined) === true;\n        return anySourceFailed(result.days) || memoryFailed ? 1 : 0;\n      }\n      case \"day\": {\n        const parsed = parseCliFlags(rest);\n        const date = parsed.positional[0] ?? flagString(parsed, \"--date\");\n        const view = await runLocationDay(deps.memoryDir, date);\n        if (!view.found) {\n          io.stderr.write(`No stored location day for ${view.date}.\\n`);\n          return 1;\n        }\n        if (parsed.flags.has(\"--json\")) {\n          io.stdout.write(`${JSON.stringify(view, null, 2)}\\n`);\n          return 0;\n        }\n        io.stdout.write(`${view.body}\\n`);\n        return 0;\n      }\n      default:\n        io.stderr.write(`location: unknown command '${command}'\\n${USAGE}`);\n        return 1;\n    }\n  } catch (err) {\n    io.stderr.write(`${err instanceof Error ? err.message : String(err)}\\n`);\n    return 1;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWA,IAAM,sBAAsB;AAE5B,IAAM,YAAY,oBAAI,IAA8B;AAEpD,SAAS,oBAAoB,UAAkC;AAC7D,MAAI,OAAO,aAAa,YAAY,aAAa,MAAM;AACrD,UAAM,IAAI,UAAU,qCAAqC;AAAA,EAC3D;AACA,MAAI,OAAO,SAAS,OAAO,YAAY,CAAC,oBAAoB,KAAK,SAAS,EAAE,GAAG;AAC7E,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,MAAI,OAAO,SAAS,gBAAgB,YAAY,SAAS,YAAY,KAAK,EAAE,WAAW,GAAG;AACxF,UAAM,IAAI,UAAU,sBAAsB,SAAS,EAAE,wCAAwC;AAAA,EAC/F;AACA,MAAI,OAAO,SAAS,WAAW,cAAc,OAAO,SAAS,sBAAsB,YAAY;AAC7F,UAAM,IAAI;AAAA,MACR,sBAAsB,SAAS,EAAE;AAAA,IACnC;AAAA,EACF;AACF;AAEO,SAAS,yBAAyB,UAAkC;AACzE,sBAAoB,QAAQ;AAC5B,MAAI,UAAU,IAAI,SAAS,EAAE,GAAG;AAC9B,UAAM,IAAI,MAAM,sBAAsB,SAAS,EAAE,yBAAyB;AAAA,EAC5E;AACA,YAAU,IAAI,SAAS,IAAI,QAAQ;AACrC;AAEO,SAAS,oBAAoB,IAA0C;AAC5E,SAAO,OAAO,OAAO,WAAW,UAAU,IAAI,EAAE,IAAI;AACtD;AAEO,SAAS,wBAAkC;AAChD,SAAO,CAAC,GAAG,UAAU,KAAK,CAAC,EAAE,KAAK,CAAC,GAAG,MAAO,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAE;AAC1E;AAGO,SAAS,yBAA+B;AAC7C,YAAU,MAAM;AAClB;;;AC3BA,IAAM,iBAAiB;AA0BhB,SAAS,sBAAsB,OAAwB;AAC5D,QAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACjE,SAAO,IACJ,QAAQ,kCAAkC,mBAAmB,EAC7D,QAAQ,kBAAkB,YAAY,EACtC,QAAQ,yCAAyC,eAAe,EAChE,MAAM,GAAG,GAAG;AACjB;AAEA,SAAS,uBAAuB,aAAwC;AACtE,MAAI,OAAO,gBAAgB,YAAY,gBAAgB,MAAM;AAC3D,UAAM,IAAI,UAAU,qDAAqD;AAAA,EAC3E;AACA,MAAI,OAAO,YAAY,kBAAkB,YAAY,CAAC,OAAO,SAAS,KAAK,MAAM,YAAY,aAAa,CAAC,GAAG;AAC5G,UAAM,IAAI,UAAU,yEAAyE;AAAA,EAC/F;AACA,QAAM,QAAQ,YAAY;AAC1B,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,OAAO,MAAM,OAAO,YAAY,MAAM,GAAG,WAAW,GAAG;AACxG,UAAM,IAAI,UAAU,iEAAiE;AAAA,EACvF;AACA,MAAI,OAAO,MAAM,UAAU,YAAY,MAAM,MAAM,KAAK,EAAE,WAAW,GAAG;AACtE,UAAM,IAAI,UAAU,qCAAqC,MAAM,EAAE,mBAAmB;AAAA,EACtF;AACF;AAGA,eAAe,YACb,UACA,QACA,SACgC;AAChC,QAAM,WAAW,QAAQ,YAAY;AACrC,MAAI,CAAC,OAAO,UAAU,QAAQ,KAAK,WAAW,GAAG;AAC/C,UAAM,IAAI,WAAW,mDAAmD;AAAA,EAC1E;AACA,QAAM,eAAsC,CAAC;AAC7C,QAAM,cAAc,oBAAI,IAAY;AACpC,MAAI,SAAwB;AAC5B,MAAI,QAAQ;AACZ,MAAI,YAAY;AAChB,SAAO,QAAQ,UAAU;AACvB,YAAQ,QAAQ,eAAe;AAC/B,UAAM,OAAO,MAAM,SAAS,kBAAkB;AAAA,MAC5C,UAAU,OAAO;AAAA,MACjB,QAAQ,OAAO;AAAA,MACf;AAAA,MACA,QAAQ,QAAQ;AAAA,IAClB,CAAC;AACD,aAAS;AACT,eAAW,eAAe,KAAK,aAAc,wBAAuB,WAAW;AAC/E,iBAAa,KAAK,GAAG,KAAK,YAAY;AACtC,QAAI,KAAK,eAAe,MAAM;AAC5B,kBAAY;AACZ;AAAA,IACF;AACA,QAAI,OAAO,KAAK,eAAe,YAAY,KAAK,WAAW,WAAW,GAAG;AACvE,YAAM,IAAI,UAAU,8CAA8C;AAAA,IACpE;AACA,QAAI,YAAY,IAAI,KAAK,UAAU,GAAG;AACpC,YAAM,IAAI,MAAM,8CAA8C;AAAA,IAChE;AACA,gBAAY,IAAI,KAAK,UAAU;AAC/B,aAAS,KAAK;AAAA,EAChB;AAGA,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,8BAA8B,QAAQ,QAAQ;AAAA,EAChE;AACA,SAAO;AACT;AAQA,eAAsB,gBAAgB,SAAsE;AAC1G,MAAI,CAAC,QAAQ,OAAO,QAAS,QAAO,CAAC;AACrC,QAAM,SAAS,kBAAkB,QAAQ,MAAM,QAAQ,OAAO,QAAQ;AACtE,QAAM,MAAM,QAAQ,QAAQ,MAAM,oBAAI,KAAK;AAC3C,QAAM,kBAAkB,QAAQ,eAAe;AAE/C,QAAM,UAAsC,CAAC;AAC7C,aAAW,UAAU,QAAQ,OAAO,SAAS;AAC3C,QAAI,CAAC,OAAO,SAAS;AACnB,cAAQ,KAAK;AAAA,QACX,UAAU,OAAO;AAAA,QACjB,QAAQ;AAAA,QACR,YAAY;AAAA,QACZ,SAAS;AAAA,QACT,YAAY;AAAA,QACZ,YAAY;AAAA,MACd,CAAC;AACD;AAAA,IACF;AACA,UAAM,WAAW,gBAAgB,OAAO,EAAE;AAC1C,QAAI,aAAa,QAAW;AAC1B,cAAQ,KAAK;AAAA,QACX,UAAU,OAAO;AAAA,QACjB,QAAQ;AAAA,QACR,YAAY;AAAA,QACZ,SAAS;AAAA,QACT,YAAY;AAAA,QACZ,YAAY;AAAA,MACd,CAAC;AACD;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,qBAAe,MAAM,YAAY,UAAU,QAAQ,OAAO;AAAA,IAC5D,SAAS,OAAO;AACd,cAAQ,KAAK;AAAA,QACX,UAAU,OAAO;AAAA,QACjB,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,YAAY;AAAA,QACZ,YAAY;AAAA,QACZ,GAAI,iBAAiB,SAAS,MAAM,SAAS,eACzC,EAAE,OAAO,UAAU,IACnB,EAAE,OAAO,sBAAsB,KAAK,EAAE;AAAA,MAC5C,CAAC;AACD;AAAA,IACF;AAEA,QAAI;AACF,cAAQ,QAAQ,eAAe;AAC/B,YAAM,WAAW,oBAAoB,cAAc,QAAQ;AAAA,QACzD,mBAAmB,QAAQ,OAAO;AAAA,MACpC,CAAC;AACD,YAAM,UAAU,EAAE,kBAAkB,aAAa,QAAQ,UAAU,qBAAqB,SAAS,YAAY;AAC7G,YAAM,SAAS,MAAM,gBAAgB,QAAQ,WAAW,OAAO,IAAI,QAAQ,MAAM,OAAO;AACxF,UAAI,aAAa;AACjB,UAAI,OAAO,OAAO,MAAM,EAAE,KAAK,CAAC,UAAU,MAAM,mBAAmB,CAAC,GAAG;AACrE,cAAM,OAAO,uBAAuB,QAAQ,MAAM,QAAQ,OAAO,UAAU,MAAM;AACjF,cAAM,OAAO,uBAAuB,QAAQ,MAAM,QAAQ,OAAO,UAAU,QAAQ,IAAI;AACvF,qBAAa,MAAM,iBAAiB,QAAQ,WAAW,QAAQ,MAAM,qBAAqB,MAAM,IAAI,CAAC;AAAA,MACvG;AAEA,YAAM;AAAA,QACJ,QAAQ;AAAA,QACR,OAAO;AAAA,QACP,QAAQ;AAAA,QACR;AAAA,QACA,IAAI,EAAE,YAAY;AAAA,MACpB;AACA,cAAQ,KAAK;AAAA,QACX,UAAU,OAAO;AAAA,QACjB,QAAQ;AAAA,QACR,SAAS,aAAa;AAAA,QACtB;AAAA,QACA,YAAY;AAAA,MACd,CAAC;AAAA,IACH,SAAS,OAAO;AACd,cAAQ,KAAK;AAAA,QACX,UAAU,OAAO;AAAA,QACjB,QAAQ;AAAA,QACR,SAAS,aAAa;AAAA,QACtB,YAAY;AAAA,QACZ,YAAY;AAAA,QACZ,GAAI,iBAAiB,SAAS,MAAM,SAAS,eACzC,EAAE,OAAO,UAAU,IACnB,EAAE,OAAO,sBAAsB,KAAK,EAAE;AAAA,MAC5C,CAAC;AAAA,IACH;AAAA,EACF;AACA,SAAO;AACT;AAOA,eAAe,gBACb,WACA,UACA,MACA,SACiD;AACjD,QAAM,QAAQ,MAAM,sBAAsB,SAAS;AACnD,QAAM,SAAiD,CAAC;AACxD,aAAW,CAAC,SAAS,UAAU,KAAK,OAAO,QAAQ,MAAM,OAAO,GAAG;AACjE,QAAI,YAAY,SAAU;AAC1B,UAAM,MAAM,WAAW,OAAO,IAAI;AAClC,QAAI,QAAQ,OAAW;AACvB,WAAO,OAAO,IAAI,EAAE,GAAG,KAAK,UAAU,CAAC,GAAG,IAAI,QAAQ,EAAE;AAAA,EAC1D;AACA,SAAO,QAAQ,IAAI;AACnB,SAAO;AACT;;;ACzMA,eAAsB,eACpB,QACA,WACA,UAAiC,CAAC,GACH;AAC/B,QAAM,kBAAkB,QAAQ,eAAe;AAC/C,QAAM,QAAQ,MAAM,sBAAsB,SAAS;AACnD,QAAM,UAAkC,OAAO,QAAQ,IAAI,CAAC,WAAW;AACrE,UAAM,cAAc,MAAM,QAAQ,OAAO,EAAE;AAC3C,WAAO;AAAA,MACL,IAAI,OAAO;AAAA,MACX,SAAS,OAAO;AAAA,MAChB,oBAAoB,gBAAgB,OAAO,EAAE,MAAM;AAAA,MACnD,GAAI,aAAa,oBAAoB,SAAY,CAAC,IAAI,EAAE,iBAAiB,YAAY,gBAAgB;AAAA,MACrG,aAAa,OAAO,KAAK,aAAa,QAAQ,CAAC,CAAC,EAAE;AAAA,IACpD;AAAA,EACF,CAAC;AAED,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,aAAkC,CAAC;AACzC,aAAW,SAAS,MAAM,qBAAqB,SAAS,GAAG,MAAM,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,GAAG;AACzF,UAAM,MAAM,MAAM,gBAAgB,WAAW,IAAI;AACjD,UAAM,UAAU,QAAQ,OAAO,OAAO,wBAAwB,GAAG;AACjE,eAAW,KAAK;AAAA,MACd;AAAA,MACA,SAAS,SAAS,WAAW,CAAC;AAAA,MAC9B,kBAAkB,SAAS,oBAAoB;AAAA,IACjD,CAAC;AAAA,EACH;AACA,SAAO,EAAE,SAAS,OAAO,SAAS,UAAU,OAAO,UAAU,SAAS,WAAW;AACnF;AAeA,eAAsB,qBACpB,QACA,UAAgC,CAAC,GACK;AACtC,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,OAAO,QAAQ,IAAI,CAAC,YAAY,EAAE,IAAI,OAAO,IAAI,IAAI,OAAO,SAAS,oBAA6B,EAAE;AAAA,EAC7G;AACA,QAAM,kBAAkB,QAAQ,eAAe;AAC/C,QAAM,UAAuC,CAAC;AAC9C,aAAW,UAAU,OAAO,SAAS;AACnC,QAAI,CAAC,OAAO,SAAS;AACnB,cAAQ,KAAK,EAAE,IAAI,OAAO,IAAI,IAAI,OAAO,SAAS,kBAAkB,CAAC;AACrE;AAAA,IACF;AACA,UAAM,WAAW,gBAAgB,OAAO,EAAE;AAC1C,QAAI,aAAa,QAAW;AAC1B,cAAQ,KAAK,EAAE,IAAI,OAAO,IAAI,IAAI,OAAO,SAAS,0BAA0B,CAAC;AAC7E;AAAA,IACF;AACA,QAAI;AACF,YAAM,QAAQ,MAAM,SAAS,OAAO,QAAQ,MAAM;AAClD,cAAQ,KAAK;AAAA,QACX,IAAI,OAAO;AAAA,QACX,IAAI,MAAM;AAAA,QACV,GAAI,MAAM,WAAW,UAAa,MAAM,OAAO,WAAW,IAAI,CAAC,IAAI,EAAE,QAAQ,MAAM,OAAO;AAAA,MAC5F,CAAC;AAAA,IACH,SAAS,OAAO;AACd,cAAQ,KAAK,EAAE,IAAI,OAAO,IAAI,IAAI,OAAO,QAAQ,iBAAiB,QAAQ,MAAM,OAAO,iBAAiB,CAAC;AAAA,IAC3G;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,aAAa,MAAc,MAAsB;AACxD,QAAM,SAAS,oBAAI,KAAK,GAAG,IAAI,YAAY;AAC3C,SAAO,WAAW,OAAO,WAAW,IAAI,IAAI;AAC5C,SAAO,OAAO,YAAY,EAAE,MAAM,GAAG,EAAE;AACzC;AAkBA,eAAsB,aACpB,SACuE;AACvE,QAAM,EAAE,QAAQ,WAAW,SAAS,MAAM,GAAG,KAAK,IAAI;AACtD,MAAI,YAAY,UAAa,CAAC,oBAAoB,OAAO,GAAG;AAC1D,UAAM,IAAI,WAAW,6BAA6B,OAAO,oCAAoC;AAAA,EAC/F;AACA,QAAM,MAAM,KAAK,QAAQ,MAAM,oBAAI,KAAK;AACxC,QAAM,MAAM,WAAW,aAAa,YAAY,IAAI,EAAE,YAAY,GAAG,OAAO,QAAQ,GAAG,EAAE;AACzF,QAAM,QAAQ,QAAQ,OAAO;AAC7B,MAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,KAAK,QAAQ,IAAI;AACvD,UAAM,IAAI,WAAW,oDAAoD;AAAA,EAC3E;AACA,QAAM,OAAqE,CAAC;AAC5E,WAAS,SAAS,OAAO,UAAU,GAAG,UAAU,GAAG;AACjD,UAAM,OAAO,aAAa,KAAK,EAAE,SAAS,EAAE;AAC5C,SAAK,KAAK,EAAE,MAAM,SAAS,MAAM,gBAAgB,EAAE,GAAG,MAAM,QAAQ,WAAW,MAAM,IAAI,CAAC,EAAE,CAAC;AAAA,EAC/F;AACA,SAAO;AACT;;;AC/FA,eAAsB,sBAAsB,QAA+C;AACzF,QAAM,OAAO,6BAA6B,MAAM,EAAE,aAC9C,MAAM,4BAA4B,MAAM,IACxC,OAAO;AACX,SAAO,IAAI,eAAoB,IAAI;AACrC;AAIA,SAAS,oBAAoB,UAAiC,KAAa,QAAsC;AAC/G,QAAM,UAAwB,CAAC;AAC/B,aAAW,UAAU,UAAU;AAC7B,UAAM,SAAS,qBAAqB,OAAO,aAAa,CAAC,YAAY,YAAY,SAAS,OAAO,QAAQ,CAAC;AAC1G,QAAI,OAAO,SAAS,UAAa,OAAO,KAAK,SAAS,GAAG,EAAG,SAAQ,KAAK,MAAM;AAAA,EACjF;AACA,UAAQ,KAAK,CAAC,GAAG,MAAO,EAAE,YAAY,KAAK,EAAE,YAAY,KAAK,KAAK,EAAE,YAAY,KAAK,EAAE,YAAY,KAAK,IAAI,CAAE;AAC/G,SAAO;AACT;AAOA,eAAsB,qBACpB,SACiC;AACjC,MAAI,CAAC,uBAAuB,QAAQ,MAAM,GAAG;AAC3C,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,QAAM,QAAyB,MAAM,oBAAoB,QAAQ,SAAS;AAC1E,QAAM,WAAW,MAAM,QAAQ,QAAQ,gBAAgB;AAEvD,QAAM,OAAoC,CAAC;AAC3C,QAAM,SAAS,oBAAI,KAAK,GAAG,QAAQ,IAAI,YAAY;AACnD,QAAM,MAAM,oBAAI,KAAK,GAAG,QAAQ,EAAE,YAAY;AAC9C,SAAO,UAAU,KAAK;AACpB,UAAM,OAAO,OAAO,YAAY,EAAE,MAAM,GAAG,EAAE;AAC7C,QAAI;AACF,YAAM,cAAc,MAAM,IAAI,IAAI;AAClC,UAAI,gBAAgB,UAAa,YAAY,MAAM,CAAC,UAAU,MAAM,SAAS,WAAW,CAAC,GAAG;AAC1F,aAAK,KAAK,EAAE,MAAM,UAAU,MAAM,QAAQ,sBAAsB,GAAG,YAAY,EAAE,CAAC;AAAA,MACpF,OAAO;AACL,cAAM,WAAW,oBAAoB,UAAU,MAAM,QAAQ,MAAM;AACnE,cAAM,SAAS,MAAM,2BAA2B;AAAA,UAC9C,SAAS,QAAQ;AAAA,UACjB,WAAW,QAAQ;AAAA,UACnB,QAAQ,QAAQ;AAAA,UAChB,UAAU;AAAA,UACV;AAAA,UACA,QAAQ,QAAQ,WAAW;AAAA,QAC7B,CAAC;AACD,aAAK,KAAK,EAAE,MAAM,UAAU,OAAO,QAAQ,YAAY,SAAS,OAAO,CAAC;AAAA,MAC1E;AAAA,IACF,SAAS,OAAO;AAEd,WAAK,KAAK;AAAA,QACR;AAAA,QACA,UAAU;AAAA,QACV,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,QAC7D,QAAQ,sBAAsB;AAAA,QAC9B,YAAY;AAAA,MACd,CAAC;AAAA,IACH;AACA,WAAO,WAAW,OAAO,WAAW,IAAI,CAAC;AAAA,EAC3C;AACA,SAAO,EAAE,MAAM,QAAQ,MAAM,IAAI,QAAQ,IAAI,QAAQ,QAAQ,WAAW,MAAM,KAAK;AACrF;;;AC/FA,IAAM,qBAAqB,oBAAI,IAAY;AAE3C,SAAS,gBAAqC;AAC5C,SAAO;AAAA,IACL,SAAS,WAAW,iBAAiB;AAAA,IACrC,OAAO,WAAW,cAAc;AAAA,IAChC,UAAU,WAAW,kBAAkB;AAAA,EACzC;AACF;AAQA,eAAsB,kCACpB,QACA,OAAkC,CAAC,GAChB;AACnB,QAAM,aAAuB,CAAC;AAC9B,MAAI,CAAC,OAAO,QAAS,QAAO;AAC5B,aAAW,UAAU,OAAO,SAAS;AACnC,QAAI,CAAC,OAAO,QAAS;AACrB,QAAI,oBAAoB,OAAO,EAAE,MAAM,OAAW;AAGlD,QAAI,OAAO,OAAO,SAAU;AAC5B,UAAM,MAAM,KAAK,OAAO,cAAc;AACtC,UAAM,UAAU,IAAI,SAAS,KAAK;AAClC,UAAM,QAAQ,IAAI,OAAO,KAAK;AAC9B,QAAI,CAAC,WAAW,CAAC,MAAO;AACxB,UAAM,WACJ,IAAI,aAAa,iBAAiB,IAAI,aAAa,WAAW,IAAI,WAAW;AAC/E,UAAM,YAAY;AAClB,UAAM,OAAO,KAAK,iBAAiB,CAAC,MAAc,OAAO;AACzD,QAAI;AACF,YAAM,MAAO,MAAM,KAAK,SAAS;AACjC,UACE,IAAI,+BAA+B;AAAA,QACjC;AAAA,QACA;AAAA,QACA,UAAU,OAAO;AAAA,QACjB,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC/C,CAAC,GACD;AACA,mBAAW,KAAK,QAAQ;AAAA,MAC1B;AAAA,IACF,SAAS,KAAK;AAGZ,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,UAAI,CAAC,QAAQ,SAAS,SAAS,GAAG;AAChC,YAAI,CAAC,mBAAmB,IAAI,SAAS,GAAG;AACtC,6BAAmB,IAAI,SAAS;AAChC,cAAI,KAAK,sDAAsD,SAAS,KAAK,OAAO,EAAE;AAAA,QACxF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;;;ACnEA,eAAsB,kBACpB,MAC+B;AAC/B,QAAM,kCAAkC,KAAK,MAAM;AACnD,SAAO,eAAe,KAAK,QAAQ,KAAK,SAAS;AACnD;AAQA,eAAsB,iBACpB,MACA,QACsC;AACtC,QAAM,kCAAkC,KAAK,MAAM;AACnD,SAAO,qBAAqB,KAAK,QAAQ,WAAW,SAAY,EAAE,OAAO,IAAI,CAAC,CAAC;AACjF;AAEA,eAAsB,gBACpB,MACA,UAA+C,CAAC,GACrB;AAC3B,QAAM,kCAAkC,KAAK,MAAM;AACnD,QAAM,OAAO,MAAM,aAAa,EAAE,GAAG,MAAM,GAAG,oBAAoB,OAAO,EAAE,CAAC;AAC5E,SAAO;AACT;AAUA,eAAsB,eAAe,WAAmB,SAA4C;AAClG,QAAM,OAAO,oBAAoB,SAAS,MAAM;AAChD,QAAM,OAAO,MAAM,gBAAgB,WAAW,IAAI;AAClD,QAAM,UAAU,SAAS,OAAO,OAAO,wBAAwB,IAAI;AACnE,SAAO;AAAA,IACL;AAAA,IACA,OAAO,SAAS;AAAA,IAChB,SAAS,SAAS,WAAW,CAAC;AAAA,IAC9B,kBAAkB,SAAS,oBAAoB;AAAA,IAC/C;AAAA,EACF;AACF;AAMA,SAAS,oBAAoB,KAAc,OAAuB;AAChE,MAAI,OAAO,QAAQ,YAAY,CAAC,oBAAoB,GAAG,GAAG;AACxD,UAAM,IAAI,uBAAuB,aAAa,KAAK,2BAA2B;AAAA,EAChF;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,KAAkC;AAC9D,MAAI,QAAQ,UAAa,QAAQ,QAAQ,QAAQ,GAAI,QAAO;AAC5D,QAAM,SAAS,OAAO,QAAQ,WAAW,MAAM,OAAO,GAAG;AACzD,MAAI,CAAC,OAAO,UAAU,MAAM,KAAK,SAAS,KAAK,SAAS,IAAI;AAC1D,UAAM,IAAI,uBAAuB,gDAAgD;AAAA,EACnF;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,SAG3B;AACA,QAAM,OAAO,qBAAqB,QAAQ,IAAI;AAC9C,QAAM,UACJ,QAAQ,YAAY,UAAa,QAAQ,YAAY,QAAQ,QAAQ,YAAY,KAC7E,SACA,oBAAoB,QAAQ,SAAS,MAAM;AACjD,SAAO,EAAE,GAAI,YAAY,SAAY,EAAE,QAAQ,IAAI,CAAC,GAAI,GAAI,SAAS,SAAY,EAAE,KAAK,IAAI,CAAC,EAAG;AAClG;AAGO,SAAS,2BACd,SACA,OACiD;AACjD,QAAM,OAAO,oBAAoB,SAAS,MAAM;AAChD,QAAM,KAAK,oBAAoB,OAAO,IAAI;AAC1C,QAAM,SAAS,KAAK,MAAM,GAAG,IAAI,YAAY;AAC7C,QAAM,OAAO,KAAK,MAAM,GAAG,EAAE,YAAY;AACzC,MAAI,OAAO,QAAQ;AACjB,UAAM,IAAI,uBAAuB,kDAAkD;AAAA,EACrF;AACA,QAAM,OAAO,KAAK,OAAO,OAAO,UAAU,KAAU,IAAI;AACxD,MAAI,OAAO,IAAI;AACb,UAAM,IAAI,uBAAuB,+CAA+C;AAAA,EAClF;AACA,SAAO,EAAE,MAAM,SAAS,IAAI,KAAK;AACnC;AAgBA,eAAsB,oBACpB,MACA,UAA8D,CAAC,GAC9B;AACjC,QAAM,QAAQ,2BAA2B,QAAQ,MAAM,QAAQ,EAAE;AACjE,MAAI,CAAC,KAAK,OAAO,WAAW,CAAC,KAAK,OAAO,QAAQ,WAAW,CAAC,KAAK,OAAO,QAAQ,iBAAiB;AAChG,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,QAAM,kCAAkC,KAAK,MAAM;AACnD,QAAM,OACJ,QAAQ,WAAW,OAAO,CAAC,IAAK,MAAM,aAAa,EAAE,GAAG,MAAM,SAAS,MAAM,SAAS,MAAM,MAAM,KAAK,CAAC;AAC1G,MAAI;AACJ,MAAI,KAAK,qBAAqB,QAAW;AACvC,aAAS,MAAM,qBAAqB;AAAA,MAClC,SAAS,MAAM,KAAK,iBAAiB;AAAA,MACrC,WAAW,KAAK;AAAA,MAChB,QAAQ,KAAK;AAAA,MACb,MAAM,MAAM;AAAA,MACZ,IAAI,MAAM;AAAA,MACV,QAAQ,QAAQ,WAAW;AAAA,IAC7B,CAAC;AAAA,EACH;AACA,SAAO,EAAE,MAAM,GAAI,WAAW,SAAY,EAAE,OAAO,IAAI,CAAC,EAAG;AAC7D;AAWA,IAAM,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAsBd,IAAM,cAAc,oBAAI,IAAI,CAAC,UAAU,UAAU,UAAU,MAAM,CAAC;AAClE,IAAM,gBAAgB,oBAAI,IAAI,CAAC,UAAU,WAAW,CAAC;AAOrD,SAAS,cAAc,MAAgC;AACrD,QAAM,QAAQ,oBAAI,IAA2B;AAC7C,QAAM,aAAuB,CAAC;AAC9B,WAAS,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS;AAChD,UAAM,MAAM,KAAK,KAAK;AACtB,QAAI,CAAC,IAAI,WAAW,IAAI,GAAG;AACzB,iBAAW,KAAK,GAAG;AACnB;AAAA,IACF;AACA,QAAI,cAAc,IAAI,GAAG,GAAG;AAC1B,YAAM,IAAI,KAAK,IAAI;AACnB;AAAA,IACF;AACA,QAAI,YAAY,IAAI,GAAG,GAAG;AACxB,YAAM,QAAQ,KAAK,QAAQ,CAAC;AAC5B,UAAI,UAAU,UAAa,MAAM,WAAW,IAAI,GAAG;AACjD,cAAM,IAAI,uBAAuB,aAAa,GAAG,mBAAmB;AAAA,MACtE;AACA,YAAM,IAAI,KAAK,KAAK;AACpB;AACA;AAAA,IACF;AACA,UAAM,IAAI;AAAA,MACR,2BAA2B,GAAG,yBAAoB,CAAC,GAAG,aAAa,GAAG,aAAa,EAAE,KAAK,IAAI,CAAC;AAAA,IACjG;AAAA,EACF;AACA,SAAO,EAAE,OAAO,WAAW;AAC7B;AAEA,SAAS,qBAAqB,IAAmB,QAAsC;AACrF,aAAW,OAAO,OAAO,MAAM;AAC7B,QAAI,IAAI,UAAU;AAChB,SAAG,OAAO,MAAM,GAAG,IAAI,IAAI;AAAA,CAAiD;AAC5E;AAAA,IACF;AACA,QAAI,IAAI,WAAW,QAAW;AAC5B,SAAG,OAAO,MAAM,GAAG,IAAI,IAAI,mBAAc,IAAI,MAAM;AAAA,CAAI;AACvD;AAAA,IACF;AACA,UAAM,IAAI,IAAI;AACd,OAAG,OAAO;AAAA,MACR,GAAG,IAAI,IAAI,KAAK,EAAE,MAAM,YAAY,EAAE,OAAO,aAAa,EAAE,OAAO,aAC9D,EAAE,SAAS,eAAe,EAAE,SAAS,iCACrC,EAAE,MAAM,YAAY,EAAE,OAAO,aAAa,EAAE,MAAM,YAClD,IAAI,UAAU,cAAc,OAAO,SAAS,eAAe,EAAE;AAAA;AAAA,IACpE;AAAA,EACF;AACF;AAEA,SAAS,WAAW,QAAwB,MAAkC;AAC5E,QAAM,QAAQ,OAAO,MAAM,IAAI,IAAI;AACnC,SAAO,OAAO,UAAU,WAAW,QAAQ;AAC7C;AAEA,SAAS,aAAa,QAAsC;AAC1D,QAAM,QAAQ;AAAA,IACZ,aAAa,OAAO,UAAU,YAAY,UAAU,cAAc,OAAO,QAAQ;AAAA,EACnF;AACA,MAAI,OAAO,QAAQ,WAAW,GAAG;AAC/B,UAAM,KAAK,mEAAmE;AAC9E,WAAO,GAAG,MAAM,KAAK,IAAI,CAAC;AAAA;AAAA,EAC5B;AACA,aAAW,UAAU,OAAO,SAAS;AACnC,UAAM;AAAA,MACJ,KAAK,OAAO,EAAE,KAAK,OAAO,UAAU,YAAY,UAAU,cAC5C,OAAO,qBAAqB,eAAe,gBAAgB,KACpE,OAAO,WAAW,eAAe,OAAO,gBAAgB,IAAI,KAAK,GAAG,eAC1D,OAAO,mBAAmB,OAAO;AAAA,IAClD;AAAA,EACF;AACA,MAAI,OAAO,WAAW,SAAS,GAAG;AAChC,UAAM,KAAK,gBAAgB;AAC3B,eAAW,OAAO,OAAO,YAAY;AACnC,YAAM;AAAA,QACJ,OAAO,IAAI,IAAI,KAAK,IAAI,gBAAgB,eAAe,IAAI,qBAAqB,IAAI,KAAK,GAAG,MAAM,IAAI,QAAQ,KAAK,IAAI,CAAC;AAAA,MAC1H;AAAA,IACF;AAAA,EACF;AACA,SAAO,GAAG,MAAM,KAAK,IAAI,CAAC;AAAA;AAC5B;AAEA,SAAS,gBAAgB,MAAiC;AACxD,SAAO,KAAK,KAAK,CAAC,QAAQ,IAAI,QAAQ,KAAK,CAAC,WAAW,OAAO,WAAW,QAAQ,CAAC;AACpF;AAEA,SAAS,WAAW,IAAmB,MAA8B;AACnE,aAAW,OAAO,MAAM;AACtB,eAAW,UAAU,IAAI,SAAS;AAChC,SAAG,OAAO;AAAA,QACR,GAAG,IAAI,IAAI,IAAI,OAAO,QAAQ,KAAK,OAAO,MAAM,GAAG,OAAO,QAAQ,WAAM,OAAO,KAAK,KAAK,EAAE,KAAK,OAAO,OAAO;AAAA;AAAA,MAChH;AAAA,IACF;AAAA,EACF;AACF;AAGA,eAAsB,sBACpB,MACA,MACA,IACiB;AACjB,QAAM,CAAC,SAAS,GAAG,IAAI,IAAI;AAC3B,MAAI;AACF,YAAQ,SAAS;AAAA,MACf,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK,UAAU;AACb,WAAG,OAAO,MAAM,KAAK;AACrB,eAAO,YAAY,SAAY,IAAI;AAAA,MACrC;AAAA,MACA,KAAK,UAAU;AACb,cAAM,SAAS,cAAc,IAAI;AACjC,cAAM,SAAS,MAAM,kBAAkB,IAAI;AAC3C,YAAI,OAAO,MAAM,IAAI,QAAQ,GAAG;AAC9B,aAAG,OAAO,MAAM,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA,CAAI;AACtD,iBAAO;AAAA,QACT;AACA,WAAG,OAAO,MAAM,aAAa,MAAM,CAAC;AACpC,eAAO;AAAA,MACT;AAAA,MACA,KAAK,SAAS;AACZ,cAAM,UAAU,MAAM,iBAAiB,IAAI;AAC3C,mBAAW,UAAU,SAAS;AAC5B,gBAAM,UAAU,OAAO,YAAY,SAAY,KAAK,cAAc,OAAO,OAAO;AAChF,aAAG,OAAO;AAAA,YACR,GAAG,OAAO,EAAE,KAAK,OAAO,KAAK,OAAO,QAAQ,GAAG,OAAO,GAAG,OAAO,SAAS,WAAM,OAAO,MAAM,KAAK,EAAE;AAAA;AAAA,UACrG;AAAA,QACF;AACA,eAAO,QAAQ,MAAM,CAAC,WAAW,OAAO,EAAE,IAAI,IAAI;AAAA,MACpD;AAAA,MACA,KAAK,QAAQ;AACX,cAAM,SAAS,cAAc,IAAI;AACjC,YAAI,OAAO,WAAW,SAAS,GAAG;AAChC,gBAAM,IAAI;AAAA,YACR,kCAAkC,OAAO,WAAW,CAAC,CAAC;AAAA,UACxD;AAAA,QACF;AACA,cAAM,YAAY,WAAW,QAAQ,QAAQ;AAC7C,cAAM,OAAO,MAAM,gBAAgB,MAAM;AAAA,UACvC,SAAS,WAAW,QAAQ,QAAQ;AAAA,UACpC,GAAI,cAAc,SAAY,EAAE,MAAM,OAAO,SAAS,EAAE,IAAI,CAAC;AAAA,QAC/D,CAAC;AACD,YAAI,OAAO,MAAM,IAAI,QAAQ,GAAG;AAC9B,aAAG,OAAO,MAAM,GAAG,KAAK,UAAU,EAAE,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC;AAAA,CAAI;AAAA,QAChE,OAAO;AACL,qBAAW,IAAI,IAAI;AAAA,QACrB;AACA,eAAO,gBAAgB,IAAI,IAAI,IAAI;AAAA,MACrC;AAAA,MACA,KAAK,YAAY;AACf,cAAM,SAAS,cAAc,IAAI;AACjC,cAAM,SAAS,MAAM,oBAAoB,MAAM;AAAA,UAC7C,MAAM,WAAW,QAAQ,QAAQ;AAAA,UACjC,IAAI,WAAW,QAAQ,MAAM;AAAA,UAC7B,QAAQ,OAAO,MAAM,IAAI,WAAW;AAAA,QACtC,CAAC;AACD,YAAI,OAAO,MAAM,IAAI,QAAQ,GAAG;AAC9B,aAAG,OAAO,MAAM,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA,CAAI;AAAA,QACxD,OAAO;AACL,qBAAW,IAAI,OAAO,IAAI;AAC1B,cAAI,OAAO,WAAW,OAAW,sBAAqB,IAAI,OAAO,MAAM;AAAA,QACzE;AACA,cAAM,eAAe,OAAO,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,WAAW,MAAS,MAAM;AACrF,eAAO,gBAAgB,OAAO,IAAI,KAAK,eAAe,IAAI;AAAA,MAC5D;AAAA,MACA,KAAK,OAAO;AACV,cAAM,SAAS,cAAc,IAAI;AACjC,cAAM,OAAO,OAAO,WAAW,CAAC,KAAK,WAAW,QAAQ,QAAQ;AAChE,cAAM,OAAO,MAAM,eAAe,KAAK,WAAW,IAAI;AACtD,YAAI,CAAC,KAAK,OAAO;AACf,aAAG,OAAO,MAAM,8BAA8B,KAAK,IAAI;AAAA,CAAK;AAC5D,iBAAO;AAAA,QACT;AACA,YAAI,OAAO,MAAM,IAAI,QAAQ,GAAG;AAC9B,aAAG,OAAO,MAAM,GAAG,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;AAAA,CAAI;AACpD,iBAAO;AAAA,QACT;AACA,WAAG,OAAO,MAAM,GAAG,KAAK,IAAI;AAAA,CAAI;AAChC,eAAO;AAAA,MACT;AAAA,MACA;AACE,WAAG,OAAO,MAAM,8BAA8B,OAAO;AAAA,EAAM,KAAK,EAAE;AAClE,eAAO;AAAA,IACX;AAAA,EACF,SAAS,KAAK;AACZ,OAAG,OAAO,MAAM,GAAG,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,CAAI;AACvE,WAAO;AAAA,EACT;AACF;","names":[]}