@remnic/core 9.26.0 → 9.28.0

package/dist/chunk-4DJQYKMN.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/entity-schema.ts"],"sourcesContent":["import type {\n  EntitySchemaDefinition,\n  EntitySchemaSectionDefinition,\n  EntityStructuredSection,\n} from \"./types.js\";\n\nconst DEFAULT_ENTITY_SCHEMAS: Record<string, EntitySchemaDefinition> = {\n  person: {\n    sections: [\n      {\n        key: \"beliefs\",\n        title: \"Beliefs\",\n        description: \"\",\n        aliases: [\"belief\", \"beliefs\", \"believe\", \"believes\"],\n      },\n      {\n        key: \"communication_style\",\n        title: \"Communication Style\",\n        description: \"\",\n        aliases: [\"communication\", \"communication style\", \"communicate\", \"writes\", \"writing style\"],\n      },\n      {\n        key: \"building\",\n        title: \"Building / Working On\",\n        description: \"\",\n        aliases: [\"building\", \"working on\", \"work on\", \"projects\"],\n      },\n    ],\n  },\n  project: {\n    sections: [\n      { key: \"status\", title: \"Status\", description: \"\" },\n      {\n        key: \"building\",\n        title: \"Building / Working On\",\n        description: \"\",\n        aliases: [\"building\", \"working on\", \"work on\"],\n      },\n      { key: \"risks\", title: \"Risks\", description: \"\" },\n      { key: \"notes\", title: \"Notes\", description: \"\" },\n    ],\n  },\n};\n\nexport function normalizeEntityText(value: string): string {\n  return value\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, \" \")\n    .trim();\n}\n\nfunction toSnakeCase(value: string): string {\n  return normalizeEntityText(value).replace(/\\s+/g, \"_\");\n}\n\nfunction titleFromKey(key: string): string {\n  return key\n    .split(\"_\")\n    .filter(Boolean)\n    .map((token) => token.charAt(0).toUpperCase() + token.slice(1))\n    .join(\" \");\n}\n\nfunction tokenizeNormalized(value: string): string[] {\n  return normalizeEntityText(value).split(/\\s+/).filter(Boolean);\n}\n\nfunction normalizeSectionDefinition(raw: unknown): EntitySchemaSectionDefinition | null {\n  if (!raw || typeof raw !== \"object\" || Array.isArray(raw)) return null;\n  const value = raw as Record<string, unknown>;\n  const keySource = typeof value.key === \"string\" ? value.key : typeof value.title === \"string\" ? value.title : \"\";\n  const titleSource = typeof value.title === \"string\" ? value.title : typeof value.key === \"string\" ? value.key : \"\";\n  const key = toSnakeCase(keySource);\n  const title = titleSource.trim() || titleFromKey(key);\n  if (!key || !title) return null;\n  const description = typeof value.description === \"string\" ? value.description : \"\";\n  const aliases = Array.isArray(value.aliases)\n    ? value.aliases\n        .filter((alias): alias is string => typeof alias === \"string\")\n        .map((alias) => alias.trim())\n        .filter((alias) => alias.length > 0)\n    : [];\n  return aliases.length > 0\n    ? { key, title, description, aliases }\n    : { key, title, description };\n}\n\nexport function normalizeEntitySchemas(raw: unknown): Record<string, EntitySchemaDefinition> | undefined {\n  if (!raw || typeof raw !== \"object\" || Array.isArray(raw)) return undefined;\n  const result: Record<string, EntitySchemaDefinition> = {};\n  for (const [entityType, schema] of Object.entries(raw as Record<string, unknown>)) {\n    if (!schema || typeof schema !== \"object\" || Array.isArray(schema)) continue;\n    const rawSections = (schema as Record<string, unknown>).sections;\n    if (!Array.isArray(rawSections)) continue;\n    const sections = rawSections\n      .map((section) => normalizeSectionDefinition(section))\n      .filter((section): section is EntitySchemaSectionDefinition => section !== null);\n    if (sections.length === 0) continue;\n    result[toSnakeCase(entityType)] = { sections };\n  }\n  return Object.keys(result).length > 0 ? result : undefined;\n}\n\nfunction mergeEntitySchemaDefinitions(\n  defaults: EntitySchemaDefinition,\n  overrides: EntitySchemaDefinition,\n): EntitySchemaDefinition {\n  const overrideByKey = new Map(overrides.sections.map((section) => [section.key, section]));\n  const mergedSections: EntitySchemaSectionDefinition[] = [];\n  const seen = new Set<string>();\n\n  for (const section of defaults.sections) {\n    const override = overrideByKey.get(section.key);\n    const mergedAliases = Array.from(new Set([...(section.aliases ?? []), ...(override?.aliases ?? [])]));\n    const nextSection = override\n      ? {\n          ...section,\n          ...override,\n          ...(mergedAliases.length > 0 ? { aliases: mergedAliases } : {}),\n        }\n      : section;\n    mergedSections.push(nextSection);\n    seen.add(nextSection.key);\n  }\n\n  for (const section of overrides.sections) {\n    if (seen.has(section.key)) continue;\n    mergedSections.push(section);\n    seen.add(section.key);\n  }\n\n  return { sections: mergedSections };\n}\n\nexport function getEntitySchema(\n  entityType: string,\n  entitySchemas?: Record<string, EntitySchemaDefinition>,\n): EntitySchemaDefinition | undefined {\n  const normalizedType = toSnakeCase(entityType);\n  const defaults = DEFAULT_ENTITY_SCHEMAS[normalizedType];\n  const overrides = entitySchemas?.[normalizedType];\n  if (!defaults) return overrides;\n  if (!overrides) return defaults;\n  return mergeEntitySchemaDefinitions(defaults, overrides);\n}\n\nexport function matchEntitySchemaSection(\n  entityType: string,\n  title: string,\n  entitySchemas?: Record<string, EntitySchemaDefinition>,\n): EntitySchemaSectionDefinition | null {\n  const normalizedTitle = normalizeEntityText(title);\n  if (!normalizedTitle) return null;\n  const schema = getEntitySchema(entityType, entitySchemas);\n  if (!schema) return null;\n  for (const section of schema.sections) {\n    const aliases = [section.title, section.key, ...(section.aliases ?? [])];\n    if (aliases.some((alias) => normalizeEntityText(alias) === normalizedTitle)) {\n      return section;\n    }\n  }\n  return null;\n}\n\nexport function normalizeEntityStructuredSection(\n  entityType: string,\n  section: Pick<EntityStructuredSection, \"key\" | \"title\">,\n  entitySchemas?: Record<string, EntitySchemaDefinition>,\n): Pick<EntityStructuredSection, \"key\" | \"title\"> {\n  const matchedSection = matchEntitySchemaSection(entityType, section.title, entitySchemas)\n    ?? matchEntitySchemaSection(entityType, section.key, entitySchemas);\n  if (matchedSection) {\n    return {\n      key: matchedSection.key,\n      title: matchedSection.title,\n    };\n  }\n  const key = toSnakeCase(section.key || section.title);\n  return {\n    key,\n    title: section.title.trim() || titleFromKey(key),\n  };\n}\n\nfunction queryMentionsAlias(query: string, alias: string): boolean {\n  const queryTokens = tokenizeNormalized(query);\n  const aliasTokens = tokenizeNormalized(alias);\n  if (queryTokens.length === 0 || aliasTokens.length === 0) return false;\n  if (aliasTokens.length > queryTokens.length) return false;\n  for (let index = 0; index <= queryTokens.length - aliasTokens.length; index += 1) {\n    let matched = true;\n    for (let offset = 0; offset < aliasTokens.length; offset += 1) {\n      if (queryTokens[index + offset] !== aliasTokens[offset]) {\n        matched = false;\n        break;\n      }\n    }\n    if (matched) return true;\n  }\n  return false;\n}\n\nexport function resolveRequestedEntitySectionKeys(\n  query: string,\n  entityType: string,\n  availableSections: EntityStructuredSection[],\n  entitySchemas?: Record<string, EntitySchemaDefinition>,\n): string[] {\n  if (availableSections.length === 0) return [];\n  const availableKeys = new Set(availableSections.map((section) => toSnakeCase(section.key)));\n  const schema = getEntitySchema(entityType, entitySchemas);\n  if (!schema) return [];\n  const matches: string[] = [];\n  for (const section of schema.sections) {\n    const key = toSnakeCase(section.key);\n    if (!availableKeys.has(key)) continue;\n    const aliases = [section.title, section.key, ...(section.aliases ?? [])];\n    if (aliases.some((alias) => queryMentionsAlias(query, alias))) {\n      matches.push(key);\n    }\n  }\n  return matches;\n}\n\nexport function sortStructuredSectionsBySchema(\n  entityType: string,\n  sections: EntityStructuredSection[],\n  entitySchemas?: Record<string, EntitySchemaDefinition>,\n): EntityStructuredSection[] {\n  const schema = getEntitySchema(entityType, entitySchemas);\n  if (!schema || sections.length <= 1) return sections;\n  const order = new Map(schema.sections.map((section, index) => [toSnakeCase(section.key), index]));\n  return [...sections].sort((left, right) => {\n    const leftRank = order.get(toSnakeCase(left.key)) ?? Number.MAX_SAFE_INTEGER;\n    const rightRank = order.get(toSnakeCase(right.key)) ?? Number.MAX_SAFE_INTEGER;\n    if (leftRank !== rightRank) return leftRank - rightRank;\n    return left.title.localeCompare(right.title);\n  });\n}\n"],"mappings":";AAMA,IAAM,yBAAiE;AAAA,EACrE,QAAQ;AAAA,IACN,UAAU;AAAA,MACR;AAAA,QACE,KAAK;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,SAAS,CAAC,UAAU,WAAW,WAAW,UAAU;AAAA,MACtD;AAAA,MACA;AAAA,QACE,KAAK;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,SAAS,CAAC,iBAAiB,uBAAuB,eAAe,UAAU,eAAe;AAAA,MAC5F;AAAA,MACA;AAAA,QACE,KAAK;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,SAAS,CAAC,YAAY,cAAc,WAAW,UAAU;AAAA,MAC3D;AAAA,IACF;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,UAAU;AAAA,MACR,EAAE,KAAK,UAAU,OAAO,UAAU,aAAa,GAAG;AAAA,MAClD;AAAA,QACE,KAAK;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,SAAS,CAAC,YAAY,cAAc,SAAS;AAAA,MAC/C;AAAA,MACA,EAAE,KAAK,SAAS,OAAO,SAAS,aAAa,GAAG;AAAA,MAChD,EAAE,KAAK,SAAS,OAAO,SAAS,aAAa,GAAG;AAAA,IAClD;AAAA,EACF;AACF;AAEO,SAAS,oBAAoB,OAAuB;AACzD,SAAO,MACJ,YAAY,EACZ,QAAQ,eAAe,GAAG,EAC1B,KAAK;AACV;AAEA,SAAS,YAAY,OAAuB;AAC1C,SAAO,oBAAoB,KAAK,EAAE,QAAQ,QAAQ,GAAG;AACvD;AAEA,SAAS,aAAa,KAAqB;AACzC,SAAO,IACJ,MAAM,GAAG,EACT,OAAO,OAAO,EACd,IAAI,CAAC,UAAU,MAAM,OAAO,CAAC,EAAE,YAAY,IAAI,MAAM,MAAM,CAAC,CAAC,EAC7D,KAAK,GAAG;AACb;AAEA,SAAS,mBAAmB,OAAyB;AACnD,SAAO,oBAAoB,KAAK,EAAE,MAAM,KAAK,EAAE,OAAO,OAAO;AAC/D;AAEA,SAAS,2BAA2B,KAAoD;AACtF,MAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,EAAG,QAAO;AAClE,QAAM,QAAQ;AACd,QAAM,YAAY,OAAO,MAAM,QAAQ,WAAW,MAAM,MAAM,OAAO,MAAM,UAAU,WAAW,MAAM,QAAQ;AAC9G,QAAM,cAAc,OAAO,MAAM,UAAU,WAAW,MAAM,QAAQ,OAAO,MAAM,QAAQ,WAAW,MAAM,MAAM;AAChH,QAAM,MAAM,YAAY,SAAS;AACjC,QAAM,QAAQ,YAAY,KAAK,KAAK,aAAa,GAAG;AACpD,MAAI,CAAC,OAAO,CAAC,MAAO,QAAO;AAC3B,QAAM,cAAc,OAAO,MAAM,gBAAgB,WAAW,MAAM,cAAc;AAChF,QAAM,UAAU,MAAM,QAAQ,MAAM,OAAO,IACvC,MAAM,QACH,OAAO,CAAC,UAA2B,OAAO,UAAU,QAAQ,EAC5D,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC,IACrC,CAAC;AACL,SAAO,QAAQ,SAAS,IACpB,EAAE,KAAK,OAAO,aAAa,QAAQ,IACnC,EAAE,KAAK,OAAO,YAAY;AAChC;AAEO,SAAS,uBAAuB,KAAkE;AACvG,MAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,EAAG,QAAO;AAClE,QAAM,SAAiD,CAAC;AACxD,aAAW,CAAC,YAAY,MAAM,KAAK,OAAO,QAAQ,GAA8B,GAAG;AACjF,QAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,EAAG;AACpE,UAAM,cAAe,OAAmC;AACxD,QAAI,CAAC,MAAM,QAAQ,WAAW,EAAG;AACjC,UAAM,WAAW,YACd,IAAI,CAAC,YAAY,2BAA2B,OAAO,CAAC,EACpD,OAAO,CAAC,YAAsD,YAAY,IAAI;AACjF,QAAI,SAAS,WAAW,EAAG;AAC3B,WAAO,YAAY,UAAU,CAAC,IAAI,EAAE,SAAS;AAAA,EAC/C;AACA,SAAO,OAAO,KAAK,MAAM,EAAE,SAAS,IAAI,SAAS;AACnD;AAEA,SAAS,6BACP,UACA,WACwB;AACxB,QAAM,gBAAgB,IAAI,IAAI,UAAU,SAAS,IAAI,CAAC,YAAY,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;AACzF,QAAM,iBAAkD,CAAC;AACzD,QAAM,OAAO,oBAAI,IAAY;AAE7B,aAAW,WAAW,SAAS,UAAU;AACvC,UAAM,WAAW,cAAc,IAAI,QAAQ,GAAG;AAC9C,UAAM,gBAAgB,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAI,QAAQ,WAAW,CAAC,GAAI,GAAI,UAAU,WAAW,CAAC,CAAE,CAAC,CAAC;AACpG,UAAM,cAAc,WAChB;AAAA,MACE,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAI,cAAc,SAAS,IAAI,EAAE,SAAS,cAAc,IAAI,CAAC;AAAA,IAC/D,IACA;AACJ,mBAAe,KAAK,WAAW;AAC/B,SAAK,IAAI,YAAY,GAAG;AAAA,EAC1B;AAEA,aAAW,WAAW,UAAU,UAAU;AACxC,QAAI,KAAK,IAAI,QAAQ,GAAG,EAAG;AAC3B,mBAAe,KAAK,OAAO;AAC3B,SAAK,IAAI,QAAQ,GAAG;AAAA,EACtB;AAEA,SAAO,EAAE,UAAU,eAAe;AACpC;AAEO,SAAS,gBACd,YACA,eACoC;AACpC,QAAM,iBAAiB,YAAY,UAAU;AAC7C,QAAM,WAAW,uBAAuB,cAAc;AACtD,QAAM,YAAY,gBAAgB,cAAc;AAChD,MAAI,CAAC,SAAU,QAAO;AACtB,MAAI,CAAC,UAAW,QAAO;AACvB,SAAO,6BAA6B,UAAU,SAAS;AACzD;AAEO,SAAS,yBACd,YACA,OACA,eACsC;AACtC,QAAM,kBAAkB,oBAAoB,KAAK;AACjD,MAAI,CAAC,gBAAiB,QAAO;AAC7B,QAAM,SAAS,gBAAgB,YAAY,aAAa;AACxD,MAAI,CAAC,OAAQ,QAAO;AACpB,aAAW,WAAW,OAAO,UAAU;AACrC,UAAM,UAAU,CAAC,QAAQ,OAAO,QAAQ,KAAK,GAAI,QAAQ,WAAW,CAAC,CAAE;AACvE,QAAI,QAAQ,KAAK,CAAC,UAAU,oBAAoB,KAAK,MAAM,eAAe,GAAG;AAC3E,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,iCACd,YACA,SACA,eACgD;AAChD,QAAM,iBAAiB,yBAAyB,YAAY,QAAQ,OAAO,aAAa,KACnF,yBAAyB,YAAY,QAAQ,KAAK,aAAa;AACpE,MAAI,gBAAgB;AAClB,WAAO;AAAA,MACL,KAAK,eAAe;AAAA,MACpB,OAAO,eAAe;AAAA,IACxB;AAAA,EACF;AACA,QAAM,MAAM,YAAY,QAAQ,OAAO,QAAQ,KAAK;AACpD,SAAO;AAAA,IACL;AAAA,IACA,OAAO,QAAQ,MAAM,KAAK,KAAK,aAAa,GAAG;AAAA,EACjD;AACF;AAEA,SAAS,mBAAmB,OAAe,OAAwB;AACjE,QAAM,cAAc,mBAAmB,KAAK;AAC5C,QAAM,cAAc,mBAAmB,KAAK;AAC5C,MAAI,YAAY,WAAW,KAAK,YAAY,WAAW,EAAG,QAAO;AACjE,MAAI,YAAY,SAAS,YAAY,OAAQ,QAAO;AACpD,WAAS,QAAQ,GAAG,SAAS,YAAY,SAAS,YAAY,QAAQ,SAAS,GAAG;AAChF,QAAI,UAAU;AACd,aAAS,SAAS,GAAG,SAAS,YAAY,QAAQ,UAAU,GAAG;AAC7D,UAAI,YAAY,QAAQ,MAAM,MAAM,YAAY,MAAM,GAAG;AACvD,kBAAU;AACV;AAAA,MACF;AAAA,IACF;AACA,QAAI,QAAS,QAAO;AAAA,EACtB;AACA,SAAO;AACT;AAEO,SAAS,kCACd,OACA,YACA,mBACA,eACU;AACV,MAAI,kBAAkB,WAAW,EAAG,QAAO,CAAC;AAC5C,QAAM,gBAAgB,IAAI,IAAI,kBAAkB,IAAI,CAAC,YAAY,YAAY,QAAQ,GAAG,CAAC,CAAC;AAC1F,QAAM,SAAS,gBAAgB,YAAY,aAAa;AACxD,MAAI,CAAC,OAAQ,QAAO,CAAC;AACrB,QAAM,UAAoB,CAAC;AAC3B,aAAW,WAAW,OAAO,UAAU;AACrC,UAAM,MAAM,YAAY,QAAQ,GAAG;AACnC,QAAI,CAAC,cAAc,IAAI,GAAG,EAAG;AAC7B,UAAM,UAAU,CAAC,QAAQ,OAAO,QAAQ,KAAK,GAAI,QAAQ,WAAW,CAAC,CAAE;AACvE,QAAI,QAAQ,KAAK,CAAC,UAAU,mBAAmB,OAAO,KAAK,CAAC,GAAG;AAC7D,cAAQ,KAAK,GAAG;AAAA,IAClB;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,+BACd,YACA,UACA,eAC2B;AAC3B,QAAM,SAAS,gBAAgB,YAAY,aAAa;AACxD,MAAI,CAAC,UAAU,SAAS,UAAU,EAAG,QAAO;AAC5C,QAAM,QAAQ,IAAI,IAAI,OAAO,SAAS,IAAI,CAAC,SAAS,UAAU,CAAC,YAAY,QAAQ,GAAG,GAAG,KAAK,CAAC,CAAC;AAChG,SAAO,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC,MAAM,UAAU;AACzC,UAAM,WAAW,MAAM,IAAI,YAAY,KAAK,GAAG,CAAC,KAAK,OAAO;AAC5D,UAAM,YAAY,MAAM,IAAI,YAAY,MAAM,GAAG,CAAC,KAAK,OAAO;AAC9D,QAAI,aAAa,UAAW,QAAO,WAAW;AAC9C,WAAO,KAAK,MAAM,cAAc,MAAM,KAAK;AAAA,EAC7C,CAAC;AACH;","names":[]}

package/dist/chunk-E6EAB4J6.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/operator-toolkit.ts","../src/maintenance/namespace-maintenance-fanout.ts"],"sourcesContent":["import path from \"node:path\";\nimport { constants as fsConstants } from \"node:fs\";\nimport { access, mkdir, readFile, readdir, stat, unlink, writeFile } from \"node:fs/promises\";\nimport { lintWorkspaceFiles } from \"./hygiene.js\";\nimport { parseConfig } from \"./config.js\";\nimport { summarizeExtractionLiveness, type ExtractionBufferSource } from \"./extraction-liveness.js\";\nimport type { OperatorDoctorCheck } from \"./operator-doctor-types.js\";\nimport { readEnvVar, resolveHomeDir } from \"./runtime/env.js\";\nimport { resolvePluginEntry } from \"./plugin-entry-resolver.js\";\nimport {\n  resolveCuratedIncludeFilesStatePath,\n  resolveNativeKnowledgeStatePath,\n  resolveOpenClawWorkspaceStatePath,\n} from \"./native-knowledge.js\";\nimport { StorageManager } from \"./storage.js\";\nimport { probeProjectionHealth } from \"./memory-projection-store.js\";\nimport { listNamespaces } from \"./namespaces/migrate.js\";\nimport { summarizeNamespaceMaintenanceHealth } from \"./maintenance/namespace-maintenance-fanout.js\";\nimport {\n  createEvalBaselineSnapshot,\n  getEvalHarnessStatus,\n  runEvalBaselineDeltaReport,\n  runEvalBenchmarkCiGate,\n  validateEvalBenchmarkPack,\n  type EvalBaselineDeltaReport,\n  type EvalCiGateReport,\n  type EvalHarnessStatus,\n} from \"./evals.js\";\nimport { analyzeGraphHealth, type GraphHealthReport } from \"./graph.js\";\nimport { resolveAccessSetupCapabilities,\n  resolveCapabilities,\n  resolveGraphConstructionCapabilities,\n  resolveQmdCapabilities, resolveIndexingCapabilities,\n  resolveEvalCapabilities, resolvePresentationCapabilities, resolveConsolidationCapabilities } from \"./capabilities.js\";\nimport {\n  analyzeSessionIntegrity,\n  applySessionRepair,\n  planSessionRepair,\n  type SessionIntegrityReport,\n  type SessionRepairApplyResult,\n  type SessionRepairPlan,\n} from \"./session-integrity.js\";\nimport {\n  listMemoryGovernanceRuns,\n  readMemoryGovernanceRunArtifact,\n} from \"./maintenance/memory-governance.js\";\nimport {\n  runConsolidationProvenanceCheck,\n  type ConsolidationProvenanceReport,\n} from \"./consolidation-provenance-check.js\";\nimport type {\n  BufferSurpriseEvent,\n  DreamsPhasesConfig,\n  FileHygieneConfig,\n  MemoryFile,\n  PluginConfig,\n} from \"./types.js\";\nimport { reportBufferSurpriseDistribution } from \"./buffer-surprise-report.js\";\nimport { readJudgeVerdictStats } from \"./extraction-judge-telemetry.js\";\nimport { summarizeCorpusWatermark } from \"./operator-doctor-corpus.js\";\n\nconst OPENCLAW_REMNIC_PLUGIN_IDS = [\"openclaw-remnic\", \"openclaw-engram\"] as const;\n\nfunction getOpenClawPluginEntries(raw: Record<string, unknown>): Record<string, unknown> | undefined {\n  const plugins =\n    raw[\"plugins\"] && typeof raw[\"plugins\"] === \"object\" && !Array.isArray(raw[\"plugins\"])\n      ? (raw[\"plugins\"] as Record<string, unknown>)\n      : undefined;\n  const entries =\n    plugins && plugins[\"entries\"] && typeof plugins[\"entries\"] === \"object\" && !Array.isArray(plugins[\"entries\"])\n      ? (plugins[\"entries\"] as Record<string, unknown>)\n      : undefined;\n  return entries;\n}\n\nfunction getOpenClawMemorySlotId(raw: Record<string, unknown>): string | undefined {\n  const plugins =\n    raw[\"plugins\"] && typeof raw[\"plugins\"] === \"object\" && !Array.isArray(raw[\"plugins\"])\n      ? (raw[\"plugins\"] as Record<string, unknown>)\n      : undefined;\n  const slots =\n    plugins && plugins[\"slots\"] && typeof plugins[\"slots\"] === \"object\" && !Array.isArray(plugins[\"slots\"])\n      ? (plugins[\"slots\"] as Record<string, unknown>)\n      : undefined;\n  const slotId = slots?.[\"memory\"];\n  return typeof slotId === \"string\" ? slotId : undefined;\n}\n\nfunction resolveOpenClawRemnicPluginEntry(raw: unknown): Record<string, unknown> | undefined {\n  return resolvePluginEntry(raw, {\n    candidateIds: OPENCLAW_REMNIC_PLUGIN_IDS,\n    getEntries: getOpenClawPluginEntries,\n    getSlotId: getOpenClawMemorySlotId,\n  });\n}\n\ninterface QmdRuntimeLike {\n  probe(): Promise<boolean>;\n  isAvailable(): boolean;\n  ensureCollection(\n    memoryDir: string,\n    collectionOrExecution?: string | { signal?: AbortSignal },\n    execution?: { signal?: AbortSignal },\n  ): Promise<\"present\" | \"missing\" | \"unknown\" | \"skipped\">;\n  debugStatus(): string;\n}\n\nfunction isMissingPathError(error: unknown): boolean {\n  return typeof error === \"object\"\n    && error !== null\n    && \"code\" in error\n    && (error as { code?: unknown }).code === \"ENOENT\";\n}\n\nfunction formatUnknownError(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\ninterface ConversationIndexLike {\n  conversationIndexCoordinator: {\n    getHealth(): Promise<{\n      enabled: boolean;\n      backend: \"qmd\" | \"faiss\";\n      status: \"ok\" | \"degraded\" | \"disabled\";\n      chunkDocCount: number;\n      lastUpdateAt: string | null;\n      qmdAvailable?: boolean;\n      faiss?: {\n        ok: boolean;\n        status: \"ok\" | \"degraded\" | \"error\";\n        indexPath: string;\n        message?: string;\n        manifest?: {\n          version: number;\n          modelId: string;\n          normalizedModelId: string;\n          dimension: number;\n          chunkCount: number;\n          updatedAt: string;\n          lastSuccessfulRebuildAt: string;\n        };\n      };\n    }>;\n    rebuild(\n      sessionKey?: string,\n      hours?: number,\n      opts?: { embed?: boolean },\n    ): Promise<{\n      chunks: number;\n      skipped: boolean;\n      reason?: string;\n      embedded?: boolean;\n      rebuilt?: boolean;\n    }>;\n  };\n}\n\nexport interface OperatorToolkitOrchestrator extends ConversationIndexLike {\n  config: PluginConfig;\n  storage: StorageManager;\n  qmd: QmdRuntimeLike;\n  buffer?: ExtractionBufferSource;\n}\n\nexport interface OperatorConfigLoadResult {\n  found: boolean;\n  path: string;\n  parsed: boolean;\n  memoryDir?: string;\n  workspaceDir?: string;\n  error?: string;\n}\n\nexport interface OperatorSetupReport {\n  schemaVersion: 1;\n  generatedAt: string;\n  config: OperatorConfigLoadResult;\n  memoryDir: string;\n  workspaceDir: string;\n  directories: Array<{ path: string; exists: boolean; writable: boolean }>;\n  qmd: {\n    enabled: boolean;\n    available: boolean;\n    collectionState: \"present\" | \"missing\" | \"unknown\" | \"skipped\";\n    debugStatus: string;\n  };\n  nativeKnowledge: {\n    enabled: boolean;\n    includeFiles: string[];\n    curatedIncludeSync: {\n      statePath: string;\n      exists: boolean;\n      updatedAt: string | null;\n      fileCount: number;\n      activeChunkCount: number;\n      deletedFileCount: number;\n    };\n    openclawWorkspaceAdapterEnabled: boolean;\n    obsidianVaultAdapterEnabled: boolean;\n    obsidianSync: {\n      statePath: string;\n      exists: boolean;\n      updatedAt: string | null;\n      vaultCount: number;\n      activeChunkCount: number;\n      deletedNoteCount: number;\n    };\n    openclawWorkspaceSync: {\n      statePath: string;\n      exists: boolean;\n      updatedAt: string | null;\n      fileCount: number;\n      activeChunkCount: number;\n      deletedFileCount: number;\n    };\n  };\n  explicitCapture: {\n    captureMode: string;\n    enabled: boolean;\n    memoryDocPath: string;\n    memoryDocExists: boolean;\n    memoryDocInstalled: boolean;\n    memoryDocUpdated: boolean;\n    memoryDocRemoved: boolean;\n    preview: string | null;\n  };\n  nextSteps: string[];\n  verificationCommands: string[];\n}\n\n// `OperatorDoctorCheck` moved to `./operator-doctor-types.js` so summarizers avoid\n// pulling the operator-toolkit DTS graph (PR 2155); re-exported to keep the surface stable.\nexport type { OperatorDoctorCheck };\nexport { summarizeExtractionLiveness };\nexport type { ExtractionBufferSource };\n\nexport interface OperatorConfigReviewFinding {\n  key: string;\n  status: \"recommend\" | \"problem\";\n  setting: string;\n  currentValue: string;\n  defaultValue: string;\n  recommendedValue: string;\n  summary: string;\n  rationale: string;\n}\n\nexport interface OperatorConfigReviewReport {\n  schemaVersion: 1;\n  generatedAt: string;\n  ok: boolean;\n  config: OperatorConfigLoadResult;\n  profile: {\n    memoryOsPreset?: string;\n    searchBackend: string;\n    qmdEnabled: boolean;\n    qmdDaemonEnabled: boolean;\n    nativeKnowledgeEnabled: boolean;\n    fileHygieneEnabled: boolean;\n    conversationIndexEnabled: boolean;\n  };\n  summary: {\n    recommend: number;\n    problem: number;\n  };\n  findings: OperatorConfigReviewFinding[];\n}\n\nexport interface OperatorDoctorReport {\n  schemaVersion: 1;\n  generatedAt: string;\n  ok: boolean;\n  summary: {\n    ok: number;\n    warn: number;\n    error: number;\n  };\n  config: OperatorConfigLoadResult;\n  checks: OperatorDoctorCheck[];\n}\n\nexport interface OperatorInventoryNamespaceSummary {\n  namespace: string;\n  memoryCount: number;\n  entityCount: number;\n}\n\nexport interface OperatorInventoryReport {\n  schemaVersion: 1;\n  generatedAt: string;\n  memoryDir: string;\n  totals: {\n    memories: number;\n    entities: number;\n    namespaces: number;\n    reviewQueue: number;\n    storageBytes: number;\n  };\n  categories: Record<string, number>;\n  statuses: Record<string, number>;\n  namespaces: OperatorInventoryNamespaceSummary[];\n  ageBands: Record<string, number>;\n  profile: {\n    exists: boolean;\n    chars: number;\n    lines: number;\n  };\n  storageFootprint: {\n    bytes: number;\n    byTopLevel: Record<string, number>;\n  };\n  archivePressure: {\n    archived: number;\n    pendingReview: number;\n    quarantined: number;\n    rejected: number;\n  };\n  conversationIndex: {\n    enabled: boolean;\n    backend: \"qmd\" | \"faiss\";\n    status: \"ok\" | \"degraded\" | \"disabled\";\n    chunkDocCount: number;\n    lastUpdateAt: string | null;\n  };\n  nativeKnowledge: {\n    enabled: boolean;\n    curatedIncludeSync: {\n      exists: boolean;\n      updatedAt: string | null;\n      fileCount: number;\n      activeChunkCount: number;\n      deletedFileCount: number;\n    };\n    obsidianSync: {\n      exists: boolean;\n      updatedAt: string | null;\n      vaultCount: number;\n      activeChunkCount: number;\n      deletedNoteCount: number;\n    };\n    openclawWorkspaceSync: {\n      exists: boolean;\n      updatedAt: string | null;\n      fileCount: number;\n      activeChunkCount: number;\n      deletedFileCount: number;\n    };\n  };\n}\n\nexport interface BenchmarkRecallReport {\n  schemaVersion: 1;\n  generatedAt: string;\n  mode: \"status\" | \"validate\" | \"baseline-report\" | \"ci-gate\" | \"snapshot\";\n  status: EvalHarnessStatus;\n  validate?: Awaited<ReturnType<typeof validateEvalBenchmarkPack>>;\n  baselineReport?: EvalBaselineDeltaReport;\n  ciGate?: EvalCiGateReport;\n  snapshot?: {\n    targetPath: string;\n    snapshotId: string;\n  };\n}\n\nexport interface OperatorRepairReport {\n  schemaVersion: 1;\n  generatedAt: string;\n  dryRun: boolean;\n  sessionCheck: SessionIntegrityReport;\n  sessionRepairPlan: SessionRepairPlan;\n  sessionRepairApply: SessionRepairApplyResult;\n  graphHealth: GraphHealthReport;\n}\n\nexport interface OperatorSetupOptions {\n  orchestrator: OperatorToolkitOrchestrator;\n  installCaptureInstructions?: boolean;\n  captureInstructionsMode?: \"preview\" | \"install\" | \"remove\";\n  configPath?: string;\n  now?: Date;\n}\n\nexport interface OperatorDoctorOptions {\n  orchestrator: OperatorToolkitOrchestrator;\n  configPath?: string;\n  now?: Date;\n}\n\nexport interface OperatorConfigReviewOptions {\n  orchestrator: OperatorToolkitOrchestrator;\n  configPath?: string;\n  now?: Date;\n}\n\nexport interface OperatorInventoryOptions {\n  orchestrator: OperatorToolkitOrchestrator;\n  now?: Date;\n}\n\nexport interface BenchmarkRecallOptions {\n  config: Pick<\n    PluginConfig,\n    | \"memoryDir\"\n    | \"evalStoreDir\"\n    | \"evalHarnessEnabled\"\n    | \"evalShadowModeEnabled\"\n    | \"benchmarkBaselineSnapshotsEnabled\"\n    | \"benchmarkDeltaReporterEnabled\"\n    | \"memoryRedTeamBenchEnabled\"\n  >;\n  validatePath?: string;\n  baseEvalStoreDir?: string;\n  candidateEvalStoreDir?: string;\n  snapshotId?: string;\n  createSnapshot?: boolean;\n  snapshotNotes?: string;\n  gitRef?: string;\n  createdAt?: string;\n  now?: Date;\n}\n\nexport interface OperatorRepairOptions {\n  config: Pick<\n    PluginConfig,\n    | \"memoryDir\"\n    | \"entityGraphEnabled\"\n    | \"timeGraphEnabled\"\n    | \"causalGraphEnabled\"\n    | \"multiGraphMemoryEnabled\"\n    | \"graphWriteSessionAdjacencyEnabled\"\n  >;\n  apply?: boolean;\n  dryRun?: boolean;\n  allowSessionFileRepair?: boolean;\n  sessionFilesDir?: string;\n  now?: Date;\n}\n\nfunction resolveConfigPath(explicitPath?: string): string {\n  if (explicitPath && explicitPath.trim().length > 0) return explicitPath.trim();\n  const configured =\n    readEnvVar(\"OPENCLAW_CONFIG_PATH\") ||\n    readEnvVar(\"OPENCLAW_ENGRAM_CONFIG_PATH\");\n  if (configured && configured.trim().length > 0) return configured.trim();\n  return path.join(resolveHomeDir(), \".openclaw\", \"openclaw.json\");\n}\n\nasync function loadCliPluginConfig(configPath?: string): Promise<OperatorConfigLoadResult> {\n  const resolvedPath = resolveConfigPath(configPath);\n  try {\n    const raw = JSON.parse(await readFile(resolvedPath, \"utf-8\")) as Record<string, unknown>;\n    // Delegate slot → canonical → legacy resolution to the generic helper so\n    // all config loaders stay in sync (#403).\n    const entry = resolveOpenClawRemnicPluginEntry(raw);\n    const parsedConfig = parseConfig(\n      entry && typeof entry === \"object\"\n        ? ((entry[\"config\"] as Record<string, unknown> | undefined) ?? {})\n        : {},\n    );\n    return {\n      found: true,\n      path: resolvedPath,\n      parsed: true,\n      memoryDir: parsedConfig.memoryDir,\n      workspaceDir: parsedConfig.workspaceDir,\n    };\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    return {\n      found: !/ENOENT/i.test(message),\n      path: resolvedPath,\n      parsed: false,\n      error: message,\n    };\n  }\n}\n\nasync function isWritable(targetPath: string): Promise<boolean> {\n  try {\n    await access(targetPath, fsConstants.W_OK);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nasync function pathExists(targetPath: string): Promise<boolean> {\n  try {\n    await access(targetPath, fsConstants.F_OK);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nfunction formatConfigValue(value: unknown): string {\n  if (value === undefined || value === null) return \"(unset)\";\n  if (typeof value === \"string\") return value.length > 0 ? value : \"(unset)\";\n  if (typeof value === \"number\" || typeof value === \"boolean\") return String(value);\n  return JSON.stringify(value);\n}\n\nasync function gatherDirectoryStatus(\n  paths: string[],\n): Promise<Array<{ path: string; exists: boolean; writable: boolean }>> {\n  return Promise.all(paths.map(async (targetPath) => {\n    try {\n      await access(targetPath, fsConstants.F_OK);\n      return {\n        path: targetPath,\n        exists: true,\n        writable: await isWritable(targetPath),\n      };\n    } catch {\n      return {\n        path: targetPath,\n        exists: false,\n        writable: false,\n      };\n    }\n  }));\n}\n\nfunction getSetupPaths(config: PluginConfig): string[] {\n  return [\n    config.memoryDir,\n    config.workspaceDir,\n    path.join(config.memoryDir, \"facts\"),\n    path.join(config.memoryDir, \"entities\"),\n    path.join(config.memoryDir, \"state\"),\n    path.join(config.memoryDir, \"questions\"),\n    path.join(config.memoryDir, \"artifacts\"),\n    path.join(config.memoryDir, \"config\"),\n  ];\n}\n\nasync function readJsonIfExists(filePath: string): Promise<unknown | null> {\n  try {\n    return JSON.parse(await readFile(filePath, \"utf-8\")) as unknown;\n  } catch {\n    return null;\n  }\n}\n\nasync function summarizeNativeKnowledgeStatus(config: PluginConfig): Promise<{\n  enabled: boolean;\n  includeFiles: string[];\n  curatedIncludeSync: {\n    statePath: string;\n    exists: boolean;\n    updatedAt: string | null;\n    fileCount: number;\n    activeChunkCount: number;\n    deletedFileCount: number;\n  };\n  openclawWorkspaceAdapterEnabled: boolean;\n  obsidianVaultAdapterEnabled: boolean;\n  obsidianSync: {\n    statePath: string;\n    exists: boolean;\n    updatedAt: string | null;\n    vaultCount: number;\n    activeChunkCount: number;\n    deletedNoteCount: number;\n  };\n  openclawWorkspaceSync: {\n    statePath: string;\n    exists: boolean;\n    updatedAt: string | null;\n    fileCount: number;\n    activeChunkCount: number;\n    deletedFileCount: number;\n  };\n}> {\n  const nativeKnowledge = config.nativeKnowledge;\n  const nativeKnowledgeStateDir = nativeKnowledge?.stateDir ?? \"state/native-knowledge\";\n  const curatedStatePath = nativeKnowledge\n    ? resolveCuratedIncludeFilesStatePath(config.memoryDir, nativeKnowledge)\n    : path.join(config.memoryDir, nativeKnowledgeStateDir, \"curated-include-sync.json\");\n  const obsidianStatePath = nativeKnowledge\n    ? resolveNativeKnowledgeStatePath(config.memoryDir, nativeKnowledge)\n    : path.join(config.memoryDir, nativeKnowledgeStateDir, \"obsidian-sync.json\");\n  const openclawStatePath = nativeKnowledge\n    ? resolveOpenClawWorkspaceStatePath(config.memoryDir, nativeKnowledge)\n    : path.join(config.memoryDir, nativeKnowledgeStateDir, \"openclaw-workspace-sync.json\");\n  const [curatedRaw, obsidianRaw, openclawRaw] = await Promise.all([\n    readJsonIfExists(curatedStatePath),\n    readJsonIfExists(obsidianStatePath),\n    readJsonIfExists(openclawStatePath),\n  ]);\n\n  const curatedFiles = curatedRaw && typeof curatedRaw === \"object\" && curatedRaw !== null\n    && \"files\" in curatedRaw && typeof (curatedRaw as { files?: unknown }).files === \"object\"\n    && (curatedRaw as { files?: unknown }).files !== null\n      ? (curatedRaw as {\n          updatedAt?: unknown;\n          files: Record<string, { deleted?: boolean; chunks?: unknown[] }>;\n        })\n      : null;\n\n  let curatedActiveChunkCount = 0;\n  let curatedDeletedFileCount = 0;\n  for (const file of Object.values(curatedFiles?.files ?? {})) {\n    if (file.deleted) {\n      curatedDeletedFileCount += 1;\n      continue;\n    }\n    curatedActiveChunkCount += Array.isArray(file.chunks) ? file.chunks.length : 0;\n  }\n\n  const obsidianVaults = obsidianRaw && typeof obsidianRaw === \"object\" && obsidianRaw !== null\n    && \"vaults\" in obsidianRaw && typeof (obsidianRaw as { vaults?: unknown }).vaults === \"object\"\n    && (obsidianRaw as { vaults?: unknown }).vaults !== null\n      ? (obsidianRaw as {\n          updatedAt?: unknown;\n          vaults: Record<string, { notes?: Record<string, { deleted?: boolean; chunks?: unknown[] }> }>;\n        })\n      : null;\n\n  let obsidianActiveChunkCount = 0;\n  let obsidianDeletedNoteCount = 0;\n  for (const vault of Object.values(obsidianVaults?.vaults ?? {})) {\n    for (const note of Object.values(vault.notes ?? {})) {\n      if (note.deleted) {\n        obsidianDeletedNoteCount += 1;\n        continue;\n      }\n      obsidianActiveChunkCount += Array.isArray(note.chunks) ? note.chunks.length : 0;\n    }\n  }\n\n  const openclawFiles = openclawRaw && typeof openclawRaw === \"object\" && openclawRaw !== null\n    && \"files\" in openclawRaw && typeof (openclawRaw as { files?: unknown }).files === \"object\"\n    && (openclawRaw as { files?: unknown }).files !== null\n      ? (openclawRaw as {\n          updatedAt?: unknown;\n          files: Record<string, { deleted?: boolean; chunks?: unknown[] }>;\n        })\n      : null;\n\n  let openclawActiveChunkCount = 0;\n  let openclawDeletedFileCount = 0;\n  for (const file of Object.values(openclawFiles?.files ?? {})) {\n    if (file.deleted) {\n      openclawDeletedFileCount += 1;\n      continue;\n    }\n    openclawActiveChunkCount += Array.isArray(file.chunks) ? file.chunks.length : 0;\n  }\n\n  return {\n    enabled: nativeKnowledge?.enabled === true,\n    includeFiles: nativeKnowledge?.includeFiles ?? [],\n    curatedIncludeSync: {\n      statePath: curatedStatePath,\n      exists: curatedFiles !== null,\n      updatedAt: typeof curatedFiles?.updatedAt === \"string\" ? curatedFiles.updatedAt : null,\n      fileCount: Object.keys(curatedFiles?.files ?? {}).length,\n      activeChunkCount: curatedActiveChunkCount,\n      deletedFileCount: curatedDeletedFileCount,\n    },\n    openclawWorkspaceAdapterEnabled: nativeKnowledge?.openclawWorkspace?.enabled === true,\n    obsidianVaultAdapterEnabled: (nativeKnowledge?.obsidianVaults?.length ?? 0) > 0,\n    obsidianSync: {\n      statePath: obsidianStatePath,\n      exists: obsidianVaults !== null,\n      updatedAt: typeof obsidianVaults?.updatedAt === \"string\" ? obsidianVaults.updatedAt : null,\n      vaultCount: Object.keys(obsidianVaults?.vaults ?? {}).length,\n      activeChunkCount: obsidianActiveChunkCount,\n      deletedNoteCount: obsidianDeletedNoteCount,\n    },\n    openclawWorkspaceSync: {\n      statePath: openclawStatePath,\n      exists: openclawFiles !== null,\n      updatedAt: typeof openclawFiles?.updatedAt === \"string\" ? openclawFiles.updatedAt : null,\n      fileCount: Object.keys(openclawFiles?.files ?? {}).length,\n      activeChunkCount: openclawActiveChunkCount,\n      deletedFileCount: openclawDeletedFileCount,\n    },\n  };\n}\n\nconst CAPTURE_INSTRUCTIONS_START = \"<!-- BEGIN ENGRAM EXPLICIT CAPTURE INSTRUCTIONS -->\";\nconst CAPTURE_INSTRUCTIONS_END = \"<!-- END ENGRAM EXPLICIT CAPTURE INSTRUCTIONS -->\";\n\nfunction buildCaptureInstructions(): string {\n  return [\n    CAPTURE_INSTRUCTIONS_START,\n    \"# Memory\",\n    \"\",\n    \"Use this file for explicit memory capture notes when Engram runs in explicit or hybrid mode.\",\n    \"\",\n    \"## Suggested format\",\n    \"\",\n    \"- Write durable facts, decisions, commitments, or corrections.\",\n    \"- Keep entries concise and specific.\",\n    \"- Avoid secrets, tokens, and private credentials.\",\n    \"\",\n    \"## Example\",\n    \"\",\n    \"- Decision: recall benchmark packs live under `state/evals/benchmarks/`.\",\n    \"- Commitment: rerun `openclaw engram doctor --json` after changing retrieval settings.\",\n    \"\",\n    CAPTURE_INSTRUCTIONS_END,\n  ].join(\"\\n\");\n}\n\nfunction upsertManagedCaptureInstructions(existing: string | null, snippet: string): { content: string; updated: boolean; installed: boolean } {\n  if (!existing || existing.trim().length === 0) {\n    return { content: `${snippet}\\n`, updated: false, installed: true };\n  }\n  if (existing.includes(CAPTURE_INSTRUCTIONS_START) && existing.includes(CAPTURE_INSTRUCTIONS_END)) {\n    const next = existing.replace(\n      new RegExp(`${CAPTURE_INSTRUCTIONS_START}[\\\\s\\\\S]*?${CAPTURE_INSTRUCTIONS_END}`),\n      snippet,\n    );\n    return { content: next.endsWith(\"\\n\") ? next : `${next}\\n`, updated: next !== existing, installed: false };\n  }\n  const trimmed = existing.trimEnd();\n  return {\n    content: `${trimmed}\\n\\n${snippet}\\n`,\n    updated: false,\n    installed: true,\n  };\n}\n\nfunction removeManagedCaptureInstructions(existing: string): { content: string; removed: boolean } {\n  if (!existing.includes(CAPTURE_INSTRUCTIONS_START) || !existing.includes(CAPTURE_INSTRUCTIONS_END)) {\n    return { content: existing, removed: false };\n  }\n  const stripped = existing\n    .replace(new RegExp(`\\\\n*${CAPTURE_INSTRUCTIONS_START}[\\\\s\\\\S]*?${CAPTURE_INSTRUCTIONS_END}\\\\n*`), \"\\n\")\n    .replace(/\\n{3,}/g, \"\\n\\n\")\n    .trim();\n  return {\n    content: stripped.length > 0 ? `${stripped}\\n` : \"\",\n    removed: true,\n  };\n}\n\nexport async function runOperatorSetup(options: OperatorSetupOptions): Promise<OperatorSetupReport> {\n  const now = options.now ?? new Date();\n  const configStatus = await loadCliPluginConfig(options.configPath);\n  const storage = options.orchestrator.storage;\n  await storage.ensureDirectories();\n  await mkdir(options.orchestrator.config.workspaceDir, { recursive: true });\n\n  const qmdAvailable = await options.orchestrator.qmd.probe();\n  const collectionState = resolveQmdCapabilities(options.orchestrator.config).qmd\n    ? await options.orchestrator.qmd.ensureCollection(\n        options.orchestrator.config.memoryDir,\n        options.orchestrator.config.qmdCollection,\n      )\n    : \"skipped\";\n  const nativeKnowledgeStatus = await summarizeNativeKnowledgeStatus(options.orchestrator.config);\n\n  const memoryDocPath = path.join(options.orchestrator.config.workspaceDir, \"MEMORY.md\");\n  const captureInstructionsMode =\n    options.captureInstructionsMode\n    ?? (options.installCaptureInstructions ? \"install\" : undefined);\n  let memoryDocExists = false;\n  try {\n    await access(memoryDocPath, fsConstants.F_OK);\n    memoryDocExists = true;\n  } catch {\n    memoryDocExists = false;\n  }\n  let memoryDocInstalled = false;\n  let memoryDocUpdated = false;\n  let memoryDocRemoved = false;\n  const explicitCaptureEnabled = options.orchestrator.config.captureMode === \"explicit\"\n    || options.orchestrator.config.captureMode === \"hybrid\";\n  const captureInstructionsPreview = captureInstructionsMode ? buildCaptureInstructions() : null;\n  if (captureInstructionsMode) {\n    if (captureInstructionsMode === \"preview\") {\n      // no-op, preview only\n    } else if (captureInstructionsMode === \"install\") {\n      const existing = memoryDocExists ? await readFile(memoryDocPath, \"utf-8\") : null;\n      const next = upsertManagedCaptureInstructions(existing, captureInstructionsPreview ?? \"\");\n      if (!existing || next.content !== existing) {\n        await writeFile(memoryDocPath, next.content, \"utf-8\");\n      }\n      memoryDocExists = true;\n      memoryDocInstalled = next.installed;\n      memoryDocUpdated = next.updated;\n    } else if (captureInstructionsMode === \"remove\" && memoryDocExists) {\n      const existing = await readFile(memoryDocPath, \"utf-8\");\n      const next = removeManagedCaptureInstructions(existing);\n      if (next.removed) {\n        if (next.content.length === 0) {\n          await unlink(memoryDocPath);\n          memoryDocExists = false;\n        } else {\n          await writeFile(memoryDocPath, next.content, \"utf-8\");\n          memoryDocExists = true;\n        }\n        memoryDocRemoved = true;\n      }\n    }\n  }\n\n  const directories = await gatherDirectoryStatus(getSetupPaths(options.orchestrator.config));\n  const nextSteps = [\n    `Run \\`openclaw engram doctor${options.installCaptureInstructions ? \"\" : \" --json\"}\\` to verify runtime health.`,\n    \"Run `openclaw engram inventory --json` to capture a baseline footprint.\",\n    \"If QMD is enabled and the collection is missing, add the collection to `~/.config/qmd/index.yml` and run `qmd update && qmd embed`.\",\n  ];\n  if (explicitCaptureEnabled && !memoryDocExists) {\n    nextSteps.push(\"Run `openclaw engram setup --preview-capture-instructions` to review the managed explicit-capture snippet, then `--install-capture-instructions` to write it.\");\n  }\n\n  return {\n    schemaVersion: 1,\n    generatedAt: now.toISOString(),\n    config: configStatus,\n    memoryDir: options.orchestrator.config.memoryDir,\n    workspaceDir: options.orchestrator.config.workspaceDir,\n    directories,\n    qmd: {\n      enabled: resolveQmdCapabilities(options.orchestrator.config).qmd,\n      available: qmdAvailable,\n      collectionState,\n      debugStatus: options.orchestrator.qmd.debugStatus(),\n    },\n    nativeKnowledge: nativeKnowledgeStatus,\n    explicitCapture: {\n      captureMode: options.orchestrator.config.captureMode,\n      enabled: explicitCaptureEnabled,\n      memoryDocPath,\n      memoryDocExists,\n      memoryDocInstalled,\n      memoryDocUpdated,\n      memoryDocRemoved,\n      preview: captureInstructionsMode === \"preview\" ? captureInstructionsPreview : null,\n    },\n    nextSteps,\n    verificationCommands: [\n      \"openclaw engram doctor --json\",\n      \"openclaw engram inventory --json\",\n      \"openclaw engram benchmark recall --json\",\n    ],\n  };\n}\n\nfunction summarizeHygieneWarnings(\n  warnings: Awaited<ReturnType<typeof lintWorkspaceFiles>>,\n  hygiene: FileHygieneConfig | undefined,\n): OperatorDoctorCheck {\n  if (!hygiene?.enabled || hygiene.lintEnabled !== true) {\n    return {\n      key: \"file_hygiene\",\n      status: \"warn\",\n      summary: \"File hygiene linting is disabled; bootstrap file truncation warnings are not active.\",\n      remediation: \"Enable `fileHygiene.enabled` and `fileHygiene.lintEnabled` if large workspace bootstrap files are common.\",\n      details: {\n        enabled: hygiene?.enabled === true,\n        lintEnabled: hygiene?.lintEnabled === true,\n      },\n    };\n  }\n  if (warnings.length > 0) {\n    return {\n      key: \"file_hygiene\",\n      status: \"warn\",\n      summary: `${warnings.length} bootstrap file(s) are near or above the configured budget.`,\n      remediation: \"Archive/split the listed files or adjust `fileHygiene` budgets.\",\n      details: { warnings },\n    };\n  }\n  return {\n    key: \"file_hygiene\",\n    status: \"ok\",\n    summary: \"Bootstrap file hygiene is within budget.\",\n    details: {\n      enabled: true,\n      lintPaths: hygiene.lintPaths,\n      budgetBytes: hygiene.lintBudgetBytes,\n    },\n  };\n}\n\nfunction buildConfigReviewFinding(input: {\n  key: string;\n  status: \"recommend\" | \"problem\";\n  setting: string;\n  currentValue: unknown;\n  defaultValue: unknown;\n  recommendedValue: unknown;\n  summary: string;\n  rationale: string;\n}): OperatorConfigReviewFinding {\n  return {\n    key: input.key,\n    status: input.status,\n    setting: input.setting,\n    currentValue: formatConfigValue(input.currentValue),\n    defaultValue: formatConfigValue(input.defaultValue),\n    recommendedValue: formatConfigValue(input.recommendedValue),\n    summary: input.summary,\n    rationale: input.rationale,\n  };\n}\n\nexport async function runOperatorConfigReview(\n  options: OperatorConfigReviewOptions,\n): Promise<OperatorConfigReviewReport> {\n  const now = options.now ?? new Date();\n  const configStatus = await loadCliPluginConfig(options.configPath);\n  return buildOperatorConfigReviewReport({\n    now,\n    configStatus,\n    config: options.orchestrator.config,\n  });\n}\n\nasync function buildOperatorConfigReviewReport(input: {\n  now: Date;\n  configStatus: OperatorConfigLoadResult;\n  config: PluginConfig;\n}): Promise<OperatorConfigReviewReport> {\n  const { now, configStatus, config } = input;\n  // Resolve recall-operation gates once so this diagnostic reads capabilities,\n  // not scattered config flags (#1566 Cluster C — rerank is a mixed-op flag).\n  const caps = resolveCapabilities(config);\n  const findings: OperatorConfigReviewFinding[] = [];\n  const searchBackend = config.searchBackend ?? \"qmd\";\n  const workspaceBootstrapFiles = [\n    path.join(config.workspaceDir, \"IDENTITY.md\"),\n    path.join(config.workspaceDir, \"MEMORY.md\"),\n    path.join(config.workspaceDir, \"USER.md\"),\n  ];\n  const workspaceBootstrapExists = (await Promise.all(workspaceBootstrapFiles.map(pathExists))).some(Boolean);\n\n  if (\n    config.memoryOsPreset !== \"conservative\" &&\n    config.memoryOsPreset !== \"balanced\" &&\n    config.memoryOsPreset !== \"research-max\" &&\n    config.memoryOsPreset !== \"local-llm-heavy\" &&\n    resolveIndexingCapabilities(config).queryAwareIndexing === false &&\n    resolvePresentationCapabilities(config).verbatimArtifacts === false &&\n    !caps.rerank\n  ) {\n    findings.push(buildConfigReviewFinding({\n      key: \"balanced_preset\",\n      status: \"recommend\",\n      setting: \"memoryOsPreset\",\n      currentValue: config.memoryOsPreset,\n      defaultValue: \"(unset)\",\n      recommendedValue: \"balanced\",\n      summary: \"Adopt the balanced preset as the baseline configuration profile.\",\n      rationale:\n        \"The balanced preset enables the recommended indexing, reranking, and artifact defaults without turning on the higher-churn graph and learning loops.\",\n    }));\n  }\n\n  if (resolveQmdCapabilities(config).qmd && resolveQmdCapabilities(config).qmdDaemon === false) {\n    findings.push(buildConfigReviewFinding({\n      key: \"qmd_daemon\",\n      status: \"recommend\",\n      setting: \"qmdDaemonEnabled\",\n      currentValue: resolveQmdCapabilities(config).qmdDaemon,\n      defaultValue: true,\n      recommendedValue: true,\n      summary: \"Enable the QMD daemon path when QMD powers recall.\",\n      rationale:\n        \"The daemon path reduces recall/search contention by preferring the MCP transport instead of repeated subprocess calls when QMD is available.\",\n    }));\n  }\n\n  if (workspaceBootstrapExists && config.nativeKnowledge?.enabled !== true) {\n    findings.push(buildConfigReviewFinding({\n      key: \"native_knowledge_enabled\",\n      status: \"recommend\",\n      setting: \"nativeKnowledge.enabled\",\n      currentValue: config.nativeKnowledge?.enabled,\n      defaultValue: false,\n      recommendedValue: true,\n      summary: \"Enable native knowledge recall for workspace bootstrap documents.\",\n      rationale:\n        \"When files like IDENTITY.md or MEMORY.md already exist, native knowledge recall can chunk and inject them directly instead of relying only on extracted memories.\",\n    }));\n  }\n\n  if (workspaceBootstrapExists && config.fileHygiene?.enabled !== true) {\n    findings.push(buildConfigReviewFinding({\n      key: \"file_hygiene_enabled\",\n      status: \"recommend\",\n      setting: \"fileHygiene.enabled\",\n      currentValue: config.fileHygiene?.enabled,\n      defaultValue: false,\n      recommendedValue: true,\n      summary: \"Enable file hygiene to avoid silent workspace-file truncation.\",\n      rationale:\n        \"OpenClaw bootstrap files can grow quietly; file hygiene warns before oversized files are truncated during prompt bootstrap.\",\n    }));\n  }\n\n  if (searchBackend === \"qmd\" && resolveQmdCapabilities(config).qmd === false) {\n    findings.push(buildConfigReviewFinding({\n      key: \"qmd_search_backend_disabled\",\n      status: \"problem\",\n      setting: \"qmdEnabled\",\n      currentValue: resolveQmdCapabilities(config).qmd,\n      defaultValue: true,\n      recommendedValue: true,\n      summary: \"QMD search is selected but QMD is disabled.\",\n      rationale:\n        \"When searchBackend resolves to qmd while qmdEnabled is false, Engram falls back to the noop backend and disables the primary search path.\",\n    }));\n  }\n\n  if (resolveQmdCapabilities(config).qmdColdTier === true && resolveQmdCapabilities(config).qmd === false) {\n    findings.push(buildConfigReviewFinding({\n      key: \"qmd_cold_tier_requires_qmd\",\n      status: \"problem\",\n      setting: \"qmdEnabled\",\n      currentValue: resolveQmdCapabilities(config).qmd,\n      defaultValue: true,\n      recommendedValue: true,\n      summary: \"Cold-tier QMD recall is enabled while QMD itself is disabled.\",\n      rationale:\n        \"The cold tier depends on the same QMD runtime as the hot tier, so turning QMD off leaves the extra tiering path unusable.\",\n    }));\n  }\n\n  if (resolveQmdCapabilities(config).qmdTierMigration && resolveQmdCapabilities(config).qmdColdTier !== true) {\n    findings.push(buildConfigReviewFinding({\n      key: \"qmd_tier_migration_requires_cold_tier\",\n      status: \"problem\",\n      setting: \"qmdColdTierEnabled\",\n      currentValue: resolveQmdCapabilities(config).qmdColdTier,\n      defaultValue: false,\n      recommendedValue: true,\n      summary: \"Hot/cold tier migration is enabled without the cold tier itself.\",\n      rationale:\n        \"Tier migration depends on the cold-tier collection and recall path, so enabling migration while the cold tier is off leaves the feature in a contradictory state.\",\n    }));\n  }\n\n  if (resolveIndexingCapabilities(config).conversationIndex && config.conversationIndexBackend === \"qmd\" && resolveQmdCapabilities(config).qmd === false) {\n    findings.push(buildConfigReviewFinding({\n      key: \"conversation_index_qmd_requires_qmd\",\n      status: \"problem\",\n      setting: \"qmdEnabled\",\n      currentValue: resolveQmdCapabilities(config).qmd,\n      defaultValue: true,\n      recommendedValue: true,\n      summary: \"The conversation index is configured for QMD while QMD is disabled.\",\n      rationale:\n        \"A QMD-backed conversation index cannot rebuild or serve queries when the underlying QMD runtime is disabled.\",\n    }));\n  }\n\n  const summary = findings.reduce(\n    (acc, finding) => {\n      acc[finding.status] += 1;\n      return acc;\n    },\n    { recommend: 0, problem: 0 },\n  );\n\n  return {\n    schemaVersion: 1,\n    generatedAt: now.toISOString(),\n    ok: configStatus.parsed && summary.problem === 0,\n    config: configStatus,\n    profile: {\n      memoryOsPreset: config.memoryOsPreset,\n      searchBackend,\n      qmdEnabled: resolveQmdCapabilities(config).qmd,\n      qmdDaemonEnabled: resolveQmdCapabilities(config).qmdDaemon,\n      nativeKnowledgeEnabled: config.nativeKnowledge?.enabled === true,\n      fileHygieneEnabled: config.fileHygiene?.enabled === true,\n      conversationIndexEnabled: resolveIndexingCapabilities(config).conversationIndex,\n    },\n    summary,\n    findings,\n  };\n}\n\n/**\n * Summarize the provenance coverage of a set of memories (issue #1575 PR 3).\n * Pure function — counts the verified/unverified/none distribution so the\n * doctor check and any future surface can consume it without coupling to the\n * orchestrator. Legacy memories (no `provenance` field) count as `\"none\"`.\n */\nexport function summarizeProvenanceCoverage(\n  memories: ReadonlyArray<{ frontmatter: { provenance?: string } }>,\n): { counts: { verified: number; unverified: number; none: number }; total: number } {\n  const counts = { verified: 0, unverified: 0, none: 0 };\n  for (const mem of memories) {\n    const tag = mem.frontmatter.provenance ?? \"none\";\n    if (tag === \"verified\") counts.verified += 1;\n    else if (tag === \"unverified\") counts.unverified += 1;\n    else counts.none += 1;\n  }\n  return { counts, total: memories.length };\n}\n\n/**\n * Memory projection health (issue #1829). A present-but-unopenable projection\n * (wrong ABI / corrupt / bad perms) previously collapsed into the same silent\n * null as a missing file, hiding native-binding mismatches behind full-corpus\n * scans. This check stats + attempt-opens the projection so `remnic doctor`\n * distinguishes \"not built yet\" (normal) from \"exists but broken\" (needs a\n * rebuild / native-binding rebuild). Never throws.\n */\nexport function summarizeProjectionHealth(\n  config: Pick<PluginConfig, \"memoryDir\">,\n): OperatorDoctorCheck {\n  const probe = probeProjectionHealth(config.memoryDir);\n  if (probe.state === \"absent\") {\n    return {\n      key: \"memory_projection\",\n      status: \"ok\",\n      summary: \"Memory projection index not built yet (normal until first maintenance run).\",\n      details: { state: probe.state },\n    };\n  }\n  if (probe.state === \"openable\") {\n    return {\n      key: \"memory_projection\",\n      status: \"ok\",\n      summary: \"Memory projection index opens cleanly.\",\n      details: { state: probe.state },\n    };\n  }\n  if (probe.state === \"present-but-invalid\") {\n    const schemaDetailSuffix = probe.detail ? ` (${probe.detail})` : \"\";\n    return {\n      key: \"memory_projection\",\n      status: \"error\",\n      summary: `Memory projection index exists but its schema is missing or unreadable${schemaDetailSuffix}; memory browse is falling back to full-corpus scans.`,\n      remediation:\n        \"Rebuild the projection with `remnic rebuild-memory-projection --write`.\",\n      details: { state: probe.state, detail: probe.detail },\n    };\n  }\n  const nativeSuffix = probe.nativeBindingMismatch\n    ? \" Native binding appears built for the wrong Node.js ABI.\"\n    : \"\";\n  const detailSuffix = probe.detail ? ` (${probe.detail})` : \"\";\n  return {\n    key: \"memory_projection\",\n    status: \"error\",\n    summary: `Memory projection index exists but could not be opened${detailSuffix}.${nativeSuffix}`,\n    remediation: probe.nativeBindingMismatch\n      ? \"Rebuild the better-sqlite3 native binding for this Node.js (`node scripts/ensure-better-sqlite3.mjs` or `pnpm rebuild better-sqlite3`), then restart.\"\n      : \"Rebuild the projection with `remnic rebuild-memory-projection --write`; check file permissions and integrity.\",\n    details: {\n      state: probe.state,\n      detail: probe.detail,\n      nativeBindingMismatch: probe.nativeBindingMismatch,\n    },\n  };\n}\n\nexport async function runOperatorDoctor(options: OperatorDoctorOptions): Promise<OperatorDoctorReport> {\n  const now = options.now ?? new Date();\n  const configStatus = await loadCliPluginConfig(options.configPath);\n  const checks: OperatorDoctorCheck[] = [];\n  const config = options.orchestrator.config;\n  const storage = options.orchestrator.storage;\n  const configReview = await buildOperatorConfigReviewReport({\n    now,\n    configStatus,\n    config,\n  });\n  const nativeKnowledgeStatus = await summarizeNativeKnowledgeStatus(config);\n  const setupPaths = await gatherDirectoryStatus(getSetupPaths(config));\n  const missingPaths = setupPaths.filter((entry) => !entry.exists).map((entry) => entry.path);\n\n  checks.push({\n    key: \"config\",\n    status: configStatus.parsed\n      ? \"ok\"\n      : options.configPath\n      ? \"error\"\n      : \"warn\",\n    summary: configStatus.parsed ? \"OpenClaw config loaded and Engram config parsed successfully.\" : \"Config file could not be parsed.\",\n    remediation: configStatus.parsed ? undefined : \"Fix the config file or set OPENCLAW_ENGRAM_CONFIG_PATH/OPENCLAW_CONFIG_PATH.\",\n    details: configStatus,\n  });\n\n  checks.push({\n    key: \"memory_dir\",\n    status: missingPaths.length === 0 ? \"ok\" : \"warn\",\n    summary: missingPaths.length === 0\n      ? \"Expected Engram directories exist.\"\n      : `${missingPaths.length} expected directory path(s) are missing.`,\n    remediation: missingPaths.length === 0 ? undefined : \"Run `openclaw engram setup` to create missing directories.\",\n    details: { directories: setupPaths },\n  });\n\n  checks.push({\n    key: \"config_review\",\n    status: configReview.summary.problem > 0 ? \"error\" : configReview.summary.recommend > 0 ? \"warn\" : \"ok\",\n    summary: configReview.summary.problem > 0\n      ? `${configReview.summary.problem} configuration problem(s) detected.`\n      : configReview.summary.recommend > 0\n      ? `No configuration problems detected; ${configReview.summary.recommend} optional recommendation(s) are available.`\n      : \"No configuration problems detected.\",\n    remediation: configReview.summary.problem > 0 || configReview.summary.recommend > 0\n      ? \"Run `openclaw engram config-review` to inspect and fix the flagged configuration combinations.\"\n      : undefined,\n    details: configReview,\n  });\n\n  const qmdAvailable = await options.orchestrator.qmd.probe();\n  const collectionState = resolveQmdCapabilities(config).qmd\n    ? await options.orchestrator.qmd.ensureCollection(config.memoryDir, config.qmdCollection)\n    : \"skipped\";\n  checks.push({\n    key: \"qmd\",\n    status: !resolveQmdCapabilities(config).qmd\n      ? \"warn\"\n      : !qmdAvailable\n      ? \"error\"\n      : collectionState === \"present\"\n      ? \"ok\"\n      : collectionState === \"missing\"\n      ? \"error\"\n      : \"warn\",\n    summary: !resolveQmdCapabilities(config).qmd\n      ? \"QMD is disabled in config.\"\n      : qmdAvailable\n      ? `QMD is reachable (${collectionState}).`\n      : \"QMD is not currently reachable.\",\n    remediation: !resolveQmdCapabilities(config).qmd\n      ? \"Enable `qmdEnabled` if you expect hybrid search.\"\n      : !qmdAvailable\n      ? \"Ensure the `qmd` binary is installed and on PATH, or set `qmdPath`.\"\n      : collectionState === \"missing\"\n      ? \"Add the configured collection to `~/.config/qmd/index.yml`.\"\n      : collectionState === \"present\"\n      ? undefined\n      : \"Re-run `openclaw engram setup` after restoring QMD access.\",\n    details: {\n      available: qmdAvailable,\n      collectionState,\n      debugStatus: options.orchestrator.qmd.debugStatus(),\n    },\n  });\n\n  const conversationIndex = await options.orchestrator.conversationIndexCoordinator.getHealth();\n  checks.push({\n    key: \"conversation_index\",\n    status: conversationIndex.status === \"ok\"\n      ? \"ok\"\n      : conversationIndex.enabled\n      ? \"error\"\n      : \"warn\",\n    summary: conversationIndex.enabled\n      ? `Conversation index backend is ${conversationIndex.status}.`\n      : \"Conversation index is disabled.\",\n    remediation: conversationIndex.enabled && conversationIndex.status !== \"ok\"\n      ? \"Run `openclaw engram rebuild-index` to refresh the conversation index artifacts.\"\n      : undefined,\n    details: conversationIndex,\n  });\n\n  const meta = await storage.loadMeta();\n  checks.push({\n    key: \"maintenance\",\n    status: meta.lastExtractionAt || meta.lastConsolidationAt ? \"ok\" : \"warn\",\n    summary: meta.lastExtractionAt || meta.lastConsolidationAt\n      ? \"Extraction/consolidation metadata is present.\"\n      : \"No extraction or consolidation metadata found yet.\",\n    remediation: meta.lastExtractionAt || meta.lastConsolidationAt\n      ? undefined\n      : \"Run a normal agent turn or `openclaw engram consolidate` after seeding memory.\",\n    details: meta,\n  });\n\n  // Extraction resilience (extraction hot-loop hardening). Surfaces the\n  // persisted per-fingerprint retry/backoff state so an operator can see when\n  // the extraction provider is failing without tailing logs. auth/config\n  // failures are an error (misconfigured provider, will not self-heal at the\n  // current cadence); transient backoff is a warn; a clean state is ok. Reads\n  // the already-loaded meta — no extra I/O, cross-process safe (the in-memory\n  // breaker lives in the daemon; this derives from durable state).\n  const retryEntries = meta.extractionRetryState ?? [];\n  const authConfigFailures = retryEntries.filter((entry) => entry.lastFailureClass === \"auth_config\");\n  const nowMs = Date.now();\n  const parkedFingerprints = retryEntries.filter((entry) => {\n    const eligibleAt = Date.parse(entry.nextEligibleAt);\n    return Number.isFinite(eligibleAt) && eligibleAt > nowMs;\n  });\n  // The in-memory breaker opens only after extractionBreakerFailureThreshold\n  // CONSECUTIVE provider failures, each of which parks a fingerprint — so\n  // doctor infers \"likely open\" only when the parked transient count reaches\n  // that threshold. A single parked fingerprint is ordinary backoff, not a\n  // suspended-extraction signal (cursor review: don't overclaim). The breaker\n  // itself is per-process (daemon-only), hence the durable-signal inference.\n  const providerRetryableParked = parkedFingerprints.filter(\n    (entry) => entry.lastFailureClass === \"provider_retryable\",\n  );\n  const breakerLikelyOpen =\n    providerRetryableParked.length >= Math.max(1, config.extractionBreakerFailureThreshold);\n  const resilienceStatus: \"ok\" | \"warn\" | \"error\" =\n    authConfigFailures.length > 0 ? \"error\" : parkedFingerprints.length > 0 ? \"warn\" : \"ok\";\n  checks.push({\n    key: \"extraction-resilience\",\n    status: resilienceStatus,\n    summary:\n      resilienceStatus === \"error\"\n        ? `Extraction provider has ${authConfigFailures.length} auth/config failure(s); the circuit breaker opens immediately and extraction is suspended.`\n        : resilienceStatus === \"warn\"\n          ? `${parkedFingerprints.length} extraction fingerprint(s) in backoff after transient provider failures${\n              breakerLikelyOpen ? \"; the provider circuit breaker is likely OPEN in the daemon (non-forced extraction is suspended until it half-opens)\" : \"\"\n            }.`\n          : \"No extraction provider failures are currently parked.\",\n    remediation:\n      resilienceStatus === \"error\"\n        ? 'Check the extraction LLM gateway/model configuration (a 401/403 or \"no models configured\" was seen). Extraction resumes automatically once the provider is reachable.'\n        : resilienceStatus === \"warn\"\n          ? \"Transient provider failures (e.g. 429/5xx). Backoff clears automatically as the provider recovers; no action needed unless it persists.\"\n          : undefined,\n    details: {\n      backoffFingerprintCount: retryEntries.length,\n      authConfigFailureCount: authConfigFailures.length,\n      parkedFingerprintCount: parkedFingerprints.length,\n      providerRetryableParkedCount: providerRetryableParked.length,\n      breakerLikelyOpen,\n    },\n  });\n\n  // Memory projection health (issue #1829). Surfaces a present-but-unopenable\n  // projection (wrong ABI / corrupt) that previously degraded every memory\n  // list to a silent full-corpus scan. Absent and openable are both \"ok\".\n  checks.push(summarizeProjectionHealth(config));\n\n  // Provenance coverage (issue #1575 PR 3). Operators need to see the\n  // verified/unverified/none distribution grow as extraction backfills.\n  // Best-effort: a read failure surfaces as a warn, not an error.\n  let provenanceCoverage: ReturnType<typeof summarizeProvenanceCoverage> = {\n    counts: { verified: 0, unverified: 0, none: 0 },\n    total: 0,\n  };\n  let provenanceReadOk = true;\n  let provenancePartialTiers: string[] = [];\n  try {\n    // Include all tiers so cold-migrated and archived memories are counted\n    // (codex thread PRRT_kwDORJXyws6Ojqz8 — readAllMemories is hot-only).\n    // Use allSettled so a real read failure (e.g. locked encrypted store)\n    // is surfaced as a partial-read warning, not silently swallowed\n    // (codex thread PRRT_kwDORJXyws6OjygQ).\n    const [hot, archived, cold] = await Promise.allSettled([\n      storage.readAllMemories(),\n      storage.readArchivedMemories(),\n      storage.readAllColdMemories(),\n    ]);\n    const all: { frontmatter: { provenance?: string } }[] = [];\n    if (hot.status === \"fulfilled\") all.push(...hot.value);\n    else provenancePartialTiers.push(\"hot\");\n    if (archived.status === \"fulfilled\") all.push(...archived.value);\n    else provenancePartialTiers.push(\"archived\");\n    if (cold.status === \"fulfilled\") all.push(...cold.value);\n    else provenancePartialTiers.push(\"cold\");\n    provenanceCoverage = summarizeProvenanceCoverage(all);\n  } catch {\n    provenanceReadOk = false;\n  }\n  const pc = provenanceCoverage.counts;\n  const totalProvenance = provenanceCoverage.total;\n  const provenanceCovered = pc.verified + pc.unverified;\n  const partialSuffix = provenancePartialTiers.length > 0\n    ? ` (partial: ${provenancePartialTiers.join(\"/\")} tier unreadable)`\n    : \"\";\n  checks.push({\n    key: \"provenance_coverage\",\n    status: !provenanceReadOk || provenancePartialTiers.length > 0\n      ? \"warn\"\n      : totalProvenance === 0\n        ? \"warn\"\n        : provenanceCovered === 0\n          ? \"warn\"\n          : \"ok\",\n    summary: !provenanceReadOk\n      ? \"Could not read memories for provenance coverage.\"\n      : totalProvenance === 0\n        ? \"No memories found yet — provenance coverage is empty.\"\n        : `Provenance coverage: ${pc.verified} verified, ${pc.unverified} unverified, ${pc.none} none (${totalProvenance} total).${partialSuffix}`,\n    remediation: !provenanceReadOk\n      ? undefined\n      : provenancePartialTiers.length > 0\n        ? `Some tiers could not be read (${provenancePartialTiers.join(\", \")}). Check storage health and re-run.`\n        : provenanceCovered === 0 && totalProvenance > 0\n          ? \"New extractions will carry source spans. Existing legacy memories remain `none` until re-extracted.\"\n          : undefined,\n    details: { provenanceCounts: pc, total: totalProvenance, partialTiers: provenancePartialTiers.length > 0 ? provenancePartialTiers : undefined },\n  });\n\n  const syncedChunkCount =\n    nativeKnowledgeStatus.curatedIncludeSync.activeChunkCount +\n    nativeKnowledgeStatus.obsidianSync.activeChunkCount +\n    nativeKnowledgeStatus.openclawWorkspaceSync.activeChunkCount;\n  const hasSyncState =\n    nativeKnowledgeStatus.curatedIncludeSync.exists ||\n    nativeKnowledgeStatus.obsidianSync.exists ||\n    nativeKnowledgeStatus.openclawWorkspaceSync.exists;\n  checks.push({\n    key: \"native_knowledge\",\n    status: !nativeKnowledgeStatus.enabled\n      ? \"warn\"\n      : hasSyncState\n        ? \"ok\"\n        : \"warn\",\n    summary: !nativeKnowledgeStatus.enabled\n      ? \"Native knowledge sync is disabled.\"\n      : hasSyncState\n        ? `Native knowledge sync state is present (${syncedChunkCount} active chunks).`\n        : \"Native knowledge sync is enabled but no sync state has been written yet.\",\n    remediation: !nativeKnowledgeStatus.enabled\n      ? \"Enable `nativeKnowledge.enabled` if curated workspace recall should participate in retrieval.\"\n      : hasSyncState\n        ? undefined\n        : \"Run a recall, sync, or setup flow that touches native knowledge sources, then rerun `openclaw engram doctor --json`.\",\n    details: nativeKnowledgeStatus,\n  });\n\n  const agentAccessEnabled = config.agentAccessHttp?.enabled === true;\n  // A SecretRef object counts as \"configured\" (issue #757) — resolution\n  // happens at service-start time, not at doctor-time.  We only check that\n  // *something* is set; we never log the resolved value.\n  const rawAuthToken = config.agentAccessHttp?.authToken;\n  const authTokenConfigured =\n    (typeof rawAuthToken === \"string\" && rawAuthToken.length > 0) ||\n    (rawAuthToken !== null &&\n      typeof rawAuthToken === \"object\" &&\n      typeof (rawAuthToken as { source?: unknown }).source === \"string\");\n  checks.push({\n    key: \"access_http_auth\",\n    status: !agentAccessEnabled\n      ? \"warn\"\n      : authTokenConfigured\n      ? \"ok\"\n      : \"error\",\n    summary: !agentAccessEnabled\n      ? \"Agent access HTTP bridge is disabled.\"\n      : authTokenConfigured\n      ? \"Agent access HTTP bridge has an auth token configured.\"\n      : \"Agent access HTTP bridge is enabled without an auth token.\",\n    remediation: !agentAccessEnabled\n      ? \"Ignore unless you plan to enable the HTTP bridge.\"\n      : authTokenConfigured\n      ? undefined\n      : \"Set `agentAccessHttp.authToken` before exposing the bridge.\",\n  });\n\n  const warnings = config.fileHygiene?.lintEnabled\n    ? await lintWorkspaceFiles({\n        workspaceDir: config.workspaceDir,\n        paths: config.fileHygiene.lintPaths,\n        budgetBytes: config.fileHygiene.lintBudgetBytes,\n        warnRatio: config.fileHygiene.lintWarnRatio,\n      })\n    : [];\n  checks.push(summarizeHygieneWarnings(warnings, config.fileHygiene));\n\n  // Memory Worth legacy counter audit (issue #560 PR 1).\n  // Memories written before #560 have no `mw_success` / `mw_fail` frontmatter\n  // fields. That is fully supported — readers treat the absence as a uniform\n  // Beta(1,1) prior — but surfacing the count helps operators understand how\n  // much history will bootstrap the scoring pipeline landed in later PRs.\n  // This is an informational check, never an error.\n  checks.push(await summarizeMemoryWorthLegacyCounters(storage));\n\n  // Buffer surprise telemetry distribution (issue #563 PR 3).\n  // Surfaces recent surprise scores so operators can calibrate the\n  // `bufferSurpriseThreshold` from real traffic. Never an error — an empty\n  // ledger is the expected state until the flag is turned on.\n  checks.push(\n    await summarizeBufferSurpriseDistribution(storage, config),\n  );\n\n  // Consolidation provenance integrity (issue #561 PR 4).\n  // Validates that every `derived_from` entry resolves to an on-disk\n  // page-version snapshot and every `derived_via` is a known operator.\n  // Broken provenance emits warnings with the offending file path — the\n  // check is informational (never an error) because a missing snapshot\n  // can legitimately occur after log pruning or versioning being disabled\n  // retroactively; operators need visibility, not a hard fail.  Review\n  // feedback (PR #634): the summarizer threads the configured\n  // `versioningSidecarDir` into the scan so deployments that override\n  // the default `.versions` directory get accurate results instead of\n  // false-missing warnings.\n  checks.push(await summarizeConsolidationProvenance(storage, config));\n\n  // Graph-edge decay maintenance status (issue #681 PR 2/3).\n  // Reports whether the periodic decay job has run and surfaces last-run\n  // counts. Disabled is \"ok\" with a note; enabled-but-never-run is \"warn\".\n  checks.push(await summarizeGraphEdgeDecayStatus(config));\n\n  // Tier distribution (issue #686 retention-completion).\n  // Shows hot/cold counts, per-status breakdown, and forgotten-memory count.\n  // Informational only — never errors, never blocks doctor from returning ok.\n  checks.push(await summarizeTierDistribution(options.orchestrator.storage));\n\n  checks.push(await summarizeDreamsPhases(config, storage));\n  checks.push(await summarizeExtractionLiveness(config, storage, options.orchestrator.buffer));\n  checks.push(await summarizeCorpusWatermark(config, (dir) => new StorageManager(dir))); // corpus watermark #2149\n\n  // Security mitigation status (issue #565).\n  // Reports whether the cross-namespace budget and anomaly detection\n  // mitigations are enabled and surfaces config values for operator review.\n  checks.push(summarizeSecurityMitigations(config));\n\n  // Observation throughput + judge acceptance rate (issue #685).\n  // Surfaces the total verdict count, accept/reject/defer breakdown, and the\n  // most recent `observedAt` timestamp from the extraction-judge telemetry\n  // ledger.  This closes the *(future)* item deferred in\n  // `docs/trace-to-primitive.md`.  The check is purely informational — it\n  // always resolves to `ok`; an empty ledger is the expected cold-install\n  // state and is never an error.\n  checks.push(await summarizeObservationThroughput(config.memoryDir));\n\n  // Namespace maintenance fanout status (issue #1500).\n  // Reports per-job+namespace maintenance outcomes (ran/skipped/failed) so\n  // operators can verify that dynamic project/team namespaces are being\n  // maintained. Informational: never errors on its own — a namespace that has\n  // never been maintained is the expected cold-install state.\n  const namespaceMaintenanceHealth = await summarizeNamespaceMaintenanceHealth(config);\n  checks.push({\n    key: \"namespace_maintenance\",\n    status: namespaceMaintenanceHealth.totalFailed > 0 ? \"warn\" : \"ok\",\n    summary:\n      namespaceMaintenanceHealth.totalRan === 0 && namespaceMaintenanceHealth.totalFailed === 0\n        ? \"No namespace maintenance recorded yet (expected for a fresh install).\"\n        : `${namespaceMaintenanceHealth.totalRan} namespace maintenance run(s)` +\n          (namespaceMaintenanceHealth.totalFailed > 0\n            ? `, ${namespaceMaintenanceHealth.totalFailed} failure(s) across ${namespaceMaintenanceHealth.jobs.filter((j) => j.failed > 0).length} job(s)`\n            : \"\") +\n          \".\",\n    remediation:\n      namespaceMaintenanceHealth.totalFailed > 0\n        ? \"Run `remnic namespaces maintenance` for per-namespace details.\"\n        : undefined,\n    details: namespaceMaintenanceHealth,\n  });\n\n  // Tombstone non-resurrection invariant (issue #1579). Reports active\n  // tombstone count, last append, corrupted-line count, and rebuild\n  // staleness so operators can verify the invariant is enforced and know\n  // when a rebuild is warranted. Informational: never errors on its own.\n  checks.push(await summarizeTombstoneStatus(options.orchestrator.storage));\n\n  const summary = checks.reduce(\n    (acc, check) => {\n      acc[check.status] += 1;\n      return acc;\n    },\n    { ok: 0, warn: 0, error: 0 },\n  );\n\n  return {\n    schemaVersion: 1,\n    generatedAt: now.toISOString(),\n    ok: summary.error === 0,\n    summary,\n    config: configStatus,\n    checks,\n  };\n}\n\n/**\n * Categories whose memories are eligible for Memory Worth instrumentation.\n *\n * Memory Worth is a per-fact utility signal: the counters ride on extracted\n * facts whose retrieval outcome can be judged (success/fail) by the feedback\n * pipeline landing in issue #560 PR 3. Procedures, corrections, and other\n * non-fact memory kinds are out of scope — they are not expected to be\n * instrumented, and counting them as \"legacy\" would permanently inflate the\n * legacy bucket and make rollout progress misleading even when every fact\n * memory is instrumented.\n *\n * If a later PR widens Memory Worth to additional categories, extend this set\n * alongside the scoring/increment logic so the doctor audit stays in sync.\n */\nconst MEMORY_WORTH_ELIGIBLE_CATEGORIES: ReadonlySet<MemoryFile[\"frontmatter\"][\"category\"]> =\n  new Set([\"fact\"]);\n\n/**\n * Count memories that pre-date the Memory Worth counters introduced in issue\n * #560 — i.e., neither `mw_success` nor `mw_fail` is set on the frontmatter.\n *\n * Only memories whose category is eligible for Memory Worth (see\n * `MEMORY_WORTH_ELIGIBLE_CATEGORIES`) are considered. Procedures, corrections,\n * and other kinds that are not instrumented are excluded entirely — they're\n * neither \"legacy\" nor \"instrumented\" for the purposes of this audit. The\n * total in the returned details reflects only eligible memories.\n *\n * Returned as an `ok` check regardless of count, since legacy memories are\n * fully functional (readers treat missing counters as zero observations). The\n * numbers are informational for operators following the #560 rollout.\n *\n * Exported so unit tests can exercise the classification logic without\n * booting a full orchestrator.\n */\nexport async function summarizeMemoryWorthLegacyCounters(\n  storage: StorageManager,\n): Promise<OperatorDoctorCheck> {\n  let legacy = 0;\n  let instrumented = 0;\n  let ineligible = 0;\n  try {\n    const memories = await storage.readAllMemories();\n    for (const memory of memories) {\n      if (!MEMORY_WORTH_ELIGIBLE_CATEGORIES.has(memory.frontmatter.category)) {\n        ineligible += 1;\n        continue;\n      }\n      const { mw_success, mw_fail } = memory.frontmatter;\n      if (mw_success === undefined && mw_fail === undefined) {\n        legacy += 1;\n      } else {\n        instrumented += 1;\n      }\n    }\n  } catch (err) {\n    return {\n      key: \"memory_worth_legacy\",\n      status: \"warn\",\n      summary: \"Could not enumerate memories to count Memory Worth instrumentation.\",\n      remediation: \"Retry `remnic doctor` after ensuring the memory directory is readable.\",\n      details: { error: String(err) },\n    };\n  }\n\n  const total = legacy + instrumented;\n  return {\n    key: \"memory_worth_legacy\",\n    status: \"ok\",\n    summary:\n      total === 0\n        ? \"No Memory Worth–eligible memories on disk yet — counters will populate as facts are extracted.\"\n        : `${legacy} of ${total} eligible memories have no Memory Worth counters yet (${instrumented} instrumented).`,\n    details: { legacy, instrumented, total, ineligible },\n  };\n}\n\n/**\n * Summarize the recent buffer-surprise telemetry distribution for the\n * Doctor report (issue #563 PR 3).\n *\n * Reports mean/median/p90 surprise scores and the triggered-flush rate\n * over the most recent window of ledger rows. An empty ledger is the\n * expected state until `bufferSurpriseTriggerEnabled` is turned on — the\n * check never escalates beyond `ok` / `warn` (ledger unreadable).\n *\n * Exported so tests can exercise the formatting without booting a real\n * orchestrator.\n */\nexport async function summarizeBufferSurpriseDistribution(\n  storage: StorageManager,\n  config: PluginConfig,\n): Promise<OperatorDoctorCheck> {\n  const storageWithLedger = storage as StorageManager & {\n    readBufferSurpriseEvents?: (\n      opts: { limit?: number },\n    ) => Promise<BufferSurpriseEvent[]>;\n  };\n\n  // Defensive: older StorageManager builds (not yet rebuilt) may lack the\n  // reader. Do not fail the entire Doctor run in that case.\n  if (typeof storageWithLedger.readBufferSurpriseEvents !== \"function\") {\n    return {\n      key: \"buffer_surprise_distribution\",\n      status: \"ok\",\n      summary: \"Buffer-surprise telemetry reader unavailable in this build.\",\n      details: { available: false },\n    };\n  }\n\n  try {\n    const dist = await reportBufferSurpriseDistribution(\n      async (opts) =>\n        storageWithLedger.readBufferSurpriseEvents!({ limit: opts.limit }),\n      { limit: 200 },\n    );\n\n    if (dist.count === 0) {\n      return {\n        key: \"buffer_surprise_distribution\",\n        status: \"ok\",\n        summary: resolvePresentationCapabilities(config).bufferSurpriseTrigger\n          ? \"Surprise trigger is enabled but no telemetry has been recorded yet.\"\n          : \"Surprise trigger is disabled; no telemetry expected.\",\n        details: {\n          enabled: resolvePresentationCapabilities(config).bufferSurpriseTrigger,\n          distribution: dist,\n        },\n      };\n    }\n\n    const pct = (value: number) => (value * 100).toFixed(1);\n    return {\n      key: \"buffer_surprise_distribution\",\n      status: \"ok\",\n      summary: `Recent surprise: mean=${dist.mean.toFixed(3)}, median=${dist.median.toFixed(3)}, p90=${dist.p90.toFixed(3)}, triggered=${pct(dist.triggeredRate)}% over ${dist.count} turns (threshold=${dist.currentThreshold ?? config.bufferSurpriseThreshold}).`,\n      details: {\n        enabled: resolvePresentationCapabilities(config).bufferSurpriseTrigger,\n        distribution: dist,\n      },\n    };\n  } catch (err) {\n    return {\n      key: \"buffer_surprise_distribution\",\n      status: \"warn\",\n      summary: \"Could not read buffer-surprise telemetry ledger.\",\n      remediation:\n        \"Retry `remnic doctor` after ensuring the memory state directory is readable.\",\n      details: { error: String(err) },\n    };\n  }\n}\n\n/**\n * Summarize the consolidation-provenance integrity scan for the doctor\n * report (issue #561 PR 4).  Returns an `ok` check when no issues are\n * found, `warn` otherwise.  Never returns `error` — a broken provenance\n * pointer is informational because it can legitimately result from log\n * pruning, versioning being disabled retroactively, or operator-driven\n * archive operations.\n *\n * Exported so unit tests can exercise the summarization without booting a\n * full orchestrator.\n */\n\nasync function summarizeGraphEdgeDecayStatus(\n  config: Pick<\n    PluginConfig,\n    \"memoryDir\" | \"graphEdgeDecayEnabled\" | \"graphEdgeDecayCadenceMs\"\n  >,\n): Promise<OperatorDoctorCheck> {\n  // Lazy import to keep the doctor fast when the feature is disabled.\n  const { readGraphEdgeDecayStatus } = await import(\"./maintenance/graph-edge-decay.js\");\n  const { graphEdgeDecayEnabled } = config;\n  const enabled = graphEdgeDecayEnabled === true;\n  if (!enabled) {\n    return {\n      key: \"graph_edge_decay\",\n      status: \"ok\",\n      summary: \"Graph-edge decay maintenance is disabled (graphEdgeDecayEnabled = false).\",\n      remediation: \"Set graphEdgeDecayEnabled = true to opt into the periodic decay job (issue #681).\",\n      details: { enabled: false },\n    };\n  }\n\n  const status = await readGraphEdgeDecayStatus(config.memoryDir);\n  if (!status) {\n    return {\n      key: \"graph_edge_decay\",\n      status: \"warn\",\n      summary: \"Graph-edge decay is enabled but has not run yet (no status file present).\",\n      remediation:\n        \"Trigger the cron, run `engram.graph_edge_decay_run` via MCP, or wait for the scheduled cadence to fire.\",\n      details: { enabled: true, lastRun: null, cadenceMs: config.graphEdgeDecayCadenceMs },\n    };\n  }\n\n  return {\n    key: \"graph_edge_decay\",\n    status: \"ok\",\n    summary:\n      `Graph-edge decay last ran at ${status.ranAt} ` +\n      `(${status.edgesDecayed}/${status.edgesTotal} edges decayed, ` +\n      `${status.edgesBelowVisibilityThreshold} below visibility threshold).`,\n    details: {\n      enabled: true,\n      lastRun: status.ranAt,\n      durationMs: status.durationMs,\n      edgesTotal: status.edgesTotal,\n      edgesDecayed: status.edgesDecayed,\n      edgesBelowVisibilityThreshold: status.edgesBelowVisibilityThreshold,\n      topDecayedEntities: status.topDecayedEntities,\n      cadenceMs: config.graphEdgeDecayCadenceMs,\n    },\n  };\n}\n\n/**\n * Summarize hot/cold tier distribution for the Doctor report\n * (issue #686 retention-completion).\n *\n * Shows:\n *   - hot vs cold memory counts\n *   - forgotten-memory count\n *   - top per-status breakdown\n *   - recent migrations in the last 7 days (from the tier-migration journal)\n *   - top demotion reasons from the journal\n *\n * Always returns an `ok` check — this section is informational, never\n * a gate. A missing journal or unreadable corpus is surfaced as a note,\n * not an error.\n *\n * Exported so tests can exercise the summarizer without a full orchestrator.\n */\nexport async function summarizeTierDistribution(\n  storage: StorageManager,\n): Promise<OperatorDoctorCheck> {\n  try {\n    const { summarizeTiers } = await import(\"./maintenance/tier-stats.js\");\n    const summary = await summarizeTiers(storage);\n\n    // Read recent migration journal entries (last 7 days)\n    const storageDir = (storage as unknown as { dir?: string }).dir ?? \"\";\n    const journalPath = storageDir.length > 0\n      ? path.join(storageDir, \"state\", \"tier-migration-journal.jsonl\")\n      : null;\n    let recentMigrations = 0;\n    const demotionReasons: Record<string, number> = {};\n    const sevenDaysAgoMs = Date.now() - 7 * 86_400_000;\n\n    if (journalPath) {\n      try {\n        const { readFile } = await import(\"node:fs/promises\");\n        const raw = await readFile(journalPath, \"utf-8\");\n        for (const line of raw.split(\"\\n\")) {\n          const trimmed = line.trim();\n          if (trimmed.length === 0) continue;\n          try {\n            const entry = JSON.parse(trimmed) as {\n              ts?: string;\n              changed?: boolean;\n              fromTier?: string;\n              toTier?: string;\n              reason?: string;\n            };\n            const tsMs = entry.ts ? Date.parse(entry.ts) : NaN;\n            if (Number.isFinite(tsMs) && tsMs >= sevenDaysAgoMs && entry.changed === true) {\n              recentMigrations += 1;\n              if (entry.fromTier === \"hot\" && entry.toTier === \"cold\" && typeof entry.reason === \"string\") {\n                const reason = entry.reason;\n                demotionReasons[reason] = (demotionReasons[reason] ?? 0) + 1;\n              }\n            }\n          } catch {\n            // Malformed line — skip\n          }\n        }\n      } catch {\n        // Journal not present yet — expected on fresh installs\n      }\n    }\n\n    const topDemotionReasons = Object.entries(demotionReasons)\n      .sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0]))\n      .slice(0, 5)\n      .map(([reason, count]) => ({ reason, count }));\n\n    const statusParts = Object.entries(summary.byStatus)\n      .sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0]))\n      .slice(0, 6)\n      .map(([s, n]) => `${s}: ${n}`)\n      .join(\", \");\n\n    return {\n      key: \"tier_distribution\",\n      status: \"ok\",\n      summary:\n        `Tier distribution: hot=${summary.byTier.hot}, cold=${summary.byTier.cold}` +\n        (summary.forgottenCount > 0 ? `, forgotten=${summary.forgottenCount}` : \"\") +\n        `. Total: ${summary.total}.` +\n        (recentMigrations > 0 ? ` Recent migrations (7d): ${recentMigrations}.` : \"\"),\n      details: {\n        total: summary.total,\n        byTier: summary.byTier,\n        byStatus: summary.byStatus,\n        forgottenCount: summary.forgottenCount,\n        statusSummary: statusParts,\n        recentMigrations,\n        topDemotionReasons,\n      },\n    };\n  } catch (err) {\n    return {\n      key: \"tier_distribution\",\n      status: \"ok\",\n      summary: \"Tier distribution unavailable — could not enumerate memories.\",\n      details: { error: String(err) },\n    };\n  }\n}\n\n/**\n * Dreams phases doctor check (issue #678 PR 2/4).\n *\n * Reports per-phase: enabled status, cadence, threshold values, and last-run\n * timestamp sourced from `meta.json` (the existing maintenance ledger).\n *\n * Last-run mapping (best available in PR 2; PR 3/4 will emit per-phase events):\n *   light sleep → `meta.lastExtractionAt`   (lifecycle pass runs with extraction)\n *   REM         → `meta.lastConsolidationAt` (semantic consolidation)\n *   deep sleep  → latest governance run manifest when present, otherwise null\n */\nexport async function summarizeDreamsPhases(\n  config: Pick<PluginConfig, \"memoryDir\" | \"dreamsPhases\">,\n  storage: StorageManager = new StorageManager(config.memoryDir),\n): Promise<OperatorDoctorCheck> {\n  const phases: DreamsPhasesConfig = config.dreamsPhases;\n\n  // Load meta.json for best-available last-run timestamps.\n  const meta = await storage.loadMeta();\n\n  let deepSleepLastRun: string | null = null;\n  let deepSleepLastRunWarning: string | null = null;\n  try {\n    // Read the latest governance run's manifest from the real on-disk format\n    // rather than treating every failure as \"no runs yet\".\n    const runsDir = path.join(config.memoryDir, \"state\", \"memory-governance\", \"runs\");\n    const runIds = (await readdir(runsDir)).sort().reverse();\n    if (runIds.length > 0) {\n      const latestRunId = runIds[0];\n      const manifestPath = path.join(\n        runsDir,\n        latestRunId,\n        \"manifest.json\",\n      );\n      const raw = await readFile(manifestPath, \"utf-8\");\n      const parsed = JSON.parse(raw) as Record<string, unknown>;\n      if (typeof parsed.createdAt === \"string\" && parsed.createdAt.length > 0) {\n        deepSleepLastRun = parsed.createdAt;\n      }\n    }\n  } catch (error) {\n    if (!isMissingPathError(error)) {\n      deepSleepLastRunWarning = `Could not read latest governance run manifest: ${formatUnknownError(error)}`;\n    }\n  }\n\n  // Build per-phase summary lines for the human-readable `summary` field.\n  const phaseLines: string[] = [\n    `lightSleep: enabled=${phases.lightSleep.enabled}, cadenceMs=${phases.lightSleep.cadenceMs}, promoteHeat=${phases.lightSleep.promoteHeatThreshold}, staleDecay=${phases.lightSleep.staleDecayThreshold}, archiveDecay=${phases.lightSleep.archiveDecayThreshold}, filterStale=${phases.lightSleep.filterStaleEnabled}, lastRun=${meta.lastExtractionAt ?? \"never\"}`,\n    `rem: enabled=${phases.rem.enabled}, cadenceMs=${phases.rem.cadenceMs}, similarity=${phases.rem.similarityThreshold}, minCluster=${phases.rem.minClusterSize}, maxPerRun=${phases.rem.maxPerRun}, minIntervalMs=${phases.rem.minIntervalMs}, lastRun=${meta.lastConsolidationAt ?? \"never\"}`,\n    `deepSleep: enabled=${phases.deepSleep.enabled}, cadenceMs=${phases.deepSleep.cadenceMs}, versioning=${phases.deepSleep.versioningEnabled}, versioningMaxPerPage=${phases.deepSleep.versioningMaxPerPage}, lastRun=${deepSleepLastRun ?? \"never\"}`,\n  ];\n\n  return {\n    key: \"dreams_phases\",\n    status: deepSleepLastRunWarning ? \"warn\" : \"ok\",\n    summary: `Dreams pipeline phases: ${phaseLines.join(\"; \")}${deepSleepLastRunWarning ? `; ${deepSleepLastRunWarning}` : \"\"}`,\n    remediation: deepSleepLastRunWarning\n      ? \"Inspect state/memory-governance/runs and repair or remove unreadable governance run artifacts.\"\n      : undefined,\n    details: {\n      lightSleep: {\n        enabled: phases.lightSleep.enabled,\n        cadenceMs: phases.lightSleep.cadenceMs,\n        promoteHeatThreshold: phases.lightSleep.promoteHeatThreshold,\n        staleDecayThreshold: phases.lightSleep.staleDecayThreshold,\n        archiveDecayThreshold: phases.lightSleep.archiveDecayThreshold,\n        filterStaleEnabled: phases.lightSleep.filterStaleEnabled,\n        lastRun: meta.lastExtractionAt ?? null,\n      },\n      rem: {\n        enabled: phases.rem.enabled,\n        cadenceMs: phases.rem.cadenceMs,\n        similarityThreshold: phases.rem.similarityThreshold,\n        minClusterSize: phases.rem.minClusterSize,\n        maxPerRun: phases.rem.maxPerRun,\n        minIntervalMs: phases.rem.minIntervalMs,\n        lastRun: meta.lastConsolidationAt ?? null,\n      },\n      deepSleep: {\n        enabled: phases.deepSleep.enabled,\n        cadenceMs: phases.deepSleep.cadenceMs,\n        versioningEnabled: phases.deepSleep.versioningEnabled,\n        versioningMaxPerPage: phases.deepSleep.versioningMaxPerPage,\n        lastRun: deepSleepLastRun,\n        warning: deepSleepLastRunWarning,\n      },\n    },\n  };\n}\n\nfunction summarizeSecurityMitigations(\n  config: Pick<\n    PluginConfig,\n    | \"recallCrossNamespaceBudgetEnabled\"\n    | \"recallCrossNamespaceBudgetWindowMs\"\n    | \"recallCrossNamespaceBudgetSoftLimit\"\n    | \"recallCrossNamespaceBudgetHardLimit\"\n    | \"recallAuditAnomalyDetectionEnabled\"\n    | \"recallAuditAnomalyWindowMs\"\n    | \"recallAuditAnomalyRepeatQueryLimit\"\n    | \"recallAuditAnomalyNamespaceWalkLimit\"\n    | \"recallAuditAnomalyHighCardinalityLimit\"\n    | \"recallAuditAnomalyRapidFireLimit\" | \"recallSingleFlightEnabled\"\n  >,\n): OperatorDoctorCheck {\n  // Resolve access-setup gates once (#1566 Cluster B).\n  const accessCaps = resolveAccessSetupCapabilities(config);\n  const budgetEnabled = accessCaps.recallCrossNamespaceBudget;\n  const anomalyEnabled = accessCaps.recallAuditAnomalyDetection;\n\n  if (!budgetEnabled && !anomalyEnabled) {\n    return {\n      key: \"security_mitigations\",\n      status: \"warn\",\n      summary: \"Memory-extraction mitigations are disabled (cross-namespace budget and anomaly detection off).\",\n      remediation: \"Enable recallCrossNamespaceBudgetEnabled and/or recallAuditAnomalyDetectionEnabled for production deployments. See docs/security/memory-extraction-threat-model.md.\",\n      details: {\n        budgetEnabled: false,\n        anomalyDetectionEnabled: false,\n      },\n    };\n  }\n\n  const details: Record<string, unknown> = {\n    budgetEnabled,\n    anomalyDetectionEnabled: anomalyEnabled,\n  };\n\n  if (budgetEnabled) {\n    details.budgetConfig = {\n      windowMs: config.recallCrossNamespaceBudgetWindowMs,\n      softLimit: config.recallCrossNamespaceBudgetSoftLimit,\n      hardLimit: config.recallCrossNamespaceBudgetHardLimit,\n    };\n  }\n\n  if (anomalyEnabled) {\n    details.anomalyConfig = {\n      windowMs: config.recallAuditAnomalyWindowMs,\n      repeatQueryLimit: config.recallAuditAnomalyRepeatQueryLimit,\n      namespaceWalkLimit: config.recallAuditAnomalyNamespaceWalkLimit,\n      highCardinalityLimit: config.recallAuditAnomalyHighCardinalityLimit,\n      rapidFireLimit: config.recallAuditAnomalyRapidFireLimit,\n    };\n  }\n\n  return {\n    key: \"security_mitigations\",\n    status: \"ok\",\n    summary: `Memory-extraction mitigation config enabled: ${budgetEnabled ? \"budget\" : \"\"}${budgetEnabled && anomalyEnabled ? \", \" : \"\"}${anomalyEnabled ? \"anomaly detection\" : \"\"}.`,\n    details: { ...details, configOnly: true },\n  };\n}\n\n/**\n * Observation throughput check for `remnic doctor` (issue #685).\n *\n * Reads the extraction-judge verdict ledger to surface:\n *  - total observations (verdicts) recorded\n *  - accept / reject / defer breakdown\n *  - most-recent `observedAt` timestamp\n *\n * The check is purely informational (always `ok`): a missing or empty\n * ledger is the expected state on a fresh install and is never an error.\n * This closes the `*(future)*` item deferred in `docs/trace-to-primitive.md`.\n */\nexport async function summarizeObservationThroughput(\n  memoryDir: string,\n): Promise<OperatorDoctorCheck> {\n  try {\n    const stats = await readJudgeVerdictStats(memoryDir);\n    if (stats.total === 0) {\n      return {\n        key: \"observations\",\n        status: \"ok\",\n        summary: \"No observations recorded yet (extraction-judge telemetry ledger is empty or missing).\",\n        details: { total: 0, accept: 0, reject: 0, defer: 0, lastObservedAt: null },\n      };\n    }\n    const acceptPct = ((stats.accept / stats.total) * 100).toFixed(1);\n    const rejectPct = ((stats.reject / stats.total) * 100).toFixed(1);\n    const deferPct = ((stats.defer / stats.total) * 100).toFixed(1);\n    return {\n      key: \"observations\",\n      status: \"ok\",\n      summary: `${stats.total} observations recorded: accept=${acceptPct}%, reject=${rejectPct}%, defer=${deferPct}%. Last observed: ${stats.lastTs ?? \"unknown\"}.`,\n      details: {\n        total: stats.total,\n        accept: stats.accept,\n        reject: stats.reject,\n        defer: stats.defer,\n        deferCapTriggered: stats.deferCapTriggered,\n        deferRate: stats.deferRate,\n        meanElapsedMs: stats.meanElapsedMs,\n        firstObservedAt: stats.firstTs ?? null,\n        lastObservedAt: stats.lastTs ?? null,\n      },\n    };\n  } catch (err) {\n    return {\n      key: \"observations\",\n      status: \"warn\",\n      summary: \"Could not read observation telemetry ledger.\",\n      remediation: \"Retry `remnic doctor` after ensuring the memory state directory is readable.\",\n      details: { error: String(err) },\n    };\n  }\n}\n\n/**\n * Tombstone non-resurrection invariant status for `remnic doctor`\n * (issue #1579).\n *\n * Reports:\n *   - active tombstone count (excluding revoked)\n *   - revoked count (re-allowed via the review queue)\n *   - last append timestamp\n *   - corrupted-line count (skipped, not crashed — rule 34/18)\n *   - rebuild staleness (whether the in-memory index loaded cleanly)\n *\n * Always informational: a disabled or empty tombstone store is the expected\n * cold-install state and is never an error. A non-zero corrupted-line count\n * surfaces as `warn` so operators know a rebuild (`remnic doctor\n * --rebuild-tombstones`) will repair the log.\n */\nexport async function summarizeTombstoneStatus(\n  storage: StorageManager,\n): Promise<OperatorDoctorCheck> {\n  try {\n    const stats = await storage.getTombstoneStats();\n    if (stats === null) {\n      return {\n        key: \"tombstones\",\n        status: \"ok\",\n        summary: \"Tombstone non-resurrection invariant is disabled (tombstonesEnabled=false).\",\n        details: { enabled: false },\n      };\n    }\n    const corrupted = stats.corruptedLines > 0;\n    const parts = [\n      `${stats.count} active tombstone(s)`,\n      ...(stats.revoked > 0 ? [`${stats.revoked} revoked`] : []),\n    ];\n    if (stats.lastAppendAt) {\n      parts.push(`last append ${stats.lastAppendAt}`);\n    }\n    if (corrupted) {\n      parts.push(`${stats.corruptedLines} corrupted line(s) skipped`);\n    }\n    return {\n      key: \"tombstones\",\n      status: corrupted ? \"warn\" : \"ok\",\n      summary:\n        `Tombstone invariant enabled. ${parts.join(\", \")}. ` +\n        (corrupted\n          ? \"Run `remnic doctor --rebuild-tombstones` to repair the log.\"\n          : \"Re-observation of retired facts is blocked at the storage chokepoint.\"),\n      remediation: corrupted\n        ? \"Rebuild the tombstone log from retired memories on disk.\"\n        : undefined,\n      details: {\n        enabled: true,\n        count: stats.count,\n        revoked: stats.revoked,\n        lastAppendAt: stats.lastAppendAt,\n        corruptedLines: stats.corruptedLines,\n        loaded: stats.loaded,\n      },\n    };\n  } catch (err) {\n    return {\n      key: \"tombstones\",\n      status: \"warn\",\n      summary: \"Could not read tombstone store stats.\",\n      remediation: \"Ensure the memory state directory is readable and rerun `remnic doctor`.\",\n      details: { error: String(err) },\n    };\n  }\n}\n\nexport async function summarizeConsolidationProvenance(\n  storage: StorageManager,\n  config: Pick<PluginConfig, \"memoryDir\"> & { versioningSidecarDir?: string },\n): Promise<OperatorDoctorCheck> {\n  let report: ConsolidationProvenanceReport;\n  try {\n    report = await runConsolidationProvenanceCheck({\n      storage,\n      memoryDir: config.memoryDir,\n      // Honor the configured sidecar directory (PR #634 review): when an\n      // operator overrides `versioningSidecarDir`, the default `.versions`\n      // would point at the wrong location and every entry would report as\n      // missing.  Undefined falls back to the helper's default.\n      sidecarDir: config.versioningSidecarDir,\n    });\n  } catch (err) {\n    return {\n      key: \"consolidation_provenance\",\n      status: \"warn\",\n      summary: \"Could not run consolidation-provenance integrity check.\",\n      remediation: \"Ensure the memory directory is readable and rerun `remnic doctor`.\",\n      details: { error: String(err) },\n    };\n  }\n\n  if (report.issues.length === 0) {\n    return {\n      key: \"consolidation_provenance\",\n      status: \"ok\",\n      summary:\n        report.withProvenance === 0\n          ? \"No consolidation-provenance memories on disk yet.\"\n          : `${report.withProvenance} consolidation-provenance memories verified (no broken references).`,\n      details: report,\n    };\n  }\n\n  return {\n    key: \"consolidation_provenance\",\n    status: \"warn\",\n    summary: `${report.issues.length} consolidation-provenance integrity issue(s) detected across ${report.withProvenance} memories with provenance frontmatter.`,\n    remediation:\n      \"Broken pointers are informational. Inspect flagged memories, and if they should resolve, re-snapshot via a consolidation pass or accept pruning.\",\n    details: report,\n  };\n}\n\nfunction getMemoryAgeBand(memory: MemoryFile, now: Date): string {\n  const created = Date.parse(memory.frontmatter.created ?? \"\");\n  if (!Number.isFinite(created)) return \"unknown\";\n  const ageDays = Math.max(0, Math.floor((now.getTime() - created) / 86_400_000));\n  if (ageDays < 7) return \"0_6d\";\n  if (ageDays < 30) return \"7_29d\";\n  if (ageDays < 90) return \"30_89d\";\n  return \"90d_plus\";\n}\n\nasync function dirSize(targetPath: string): Promise<number> {\n  try {\n    const info = await stat(targetPath);\n    if (info.isFile()) return info.size;\n    if (!info.isDirectory()) return 0;\n  } catch {\n    return 0;\n  }\n\n  let total = 0;\n  let entries;\n  try {\n    entries = await readdir(targetPath, { withFileTypes: true });\n  } catch {\n    return 0;\n  }\n  for (const entry of entries) {\n    total += await dirSize(path.join(targetPath, entry.name));\n  }\n  return total;\n}\n\nasync function summarizeStorageFootprint(memoryDir: string): Promise<{ bytes: number; byTopLevel: Record<string, number> }> {\n  const topLevel = [\n    \"facts\",\n    \"entities\",\n    \"questions\",\n    \"corrections\",\n    \"artifacts\",\n    \"state\",\n    \"identity\",\n    \"namespaces\",\n    \"summaries\",\n    \"profile.md\",\n  ];\n  const byTopLevel: Record<string, number> = {};\n  let bytes = 0;\n  for (const name of topLevel) {\n    const size = await dirSize(path.join(memoryDir, name));\n    if (size > 0) {\n      byTopLevel[name] = size;\n      bytes += size;\n    }\n  }\n  return { bytes, byTopLevel };\n}\n\nexport async function runOperatorInventory(options: OperatorInventoryOptions): Promise<OperatorInventoryReport> {\n  const now = options.now ?? new Date();\n  const config = options.orchestrator.config;\n  const namespaceEntries = await listNamespaces({ config });\n  const uniqueRootEntries = new Map<string, { namespace: string; rootDir: string }>();\n  for (const entry of namespaceEntries) {\n    if (!uniqueRootEntries.has(entry.rootDir)) {\n      uniqueRootEntries.set(entry.rootDir, { namespace: entry.namespace, rootDir: entry.rootDir });\n    }\n  }\n  const categories: Record<string, number> = {};\n  const statuses: Record<string, number> = {};\n  const ageBands: Record<string, number> = {\n    \"0_6d\": 0,\n    \"7_29d\": 0,\n    \"30_89d\": 0,\n    \"90d_plus\": 0,\n    unknown: 0,\n  };\n  const namespaces: OperatorInventoryNamespaceSummary[] = [];\n  let totalMemories = 0;\n  let totalEntities = 0;\n  let archived = 0;\n  let pendingReview = 0;\n  let quarantined = 0;\n  let rejected = 0;\n\n  for (const entry of uniqueRootEntries.values()) {\n    // Disable the hot-memories cache for these transient, one-shot inventory\n    // reads (issue #1902, Codex Medium). Each namespace root is read exactly once\n    // here; caching gives no benefit and would warm+RETAIN the full corpus under\n    // the process-wide gate/TTL (this path bypasses NamespaceStorageRouter, so\n    // the root is never registered in the per-dir maps). Disabling sidesteps both\n    // the cross-namespace gate/TTL inheritance and the retained-memory footprint.\n    const storage = new StorageManager(entry.rootDir, undefined, false);\n    const memories = await storage.readAllMemories();\n    const entities = await storage.readAllEntityFiles();\n    namespaces.push({\n      namespace: entry.namespace,\n      memoryCount: memories.length,\n      entityCount: entities.length,\n    });\n    totalMemories += memories.length;\n    totalEntities += entities.length;\n    for (const memory of memories) {\n      const category = memory.frontmatter.category;\n      categories[category] = (categories[category] ?? 0) + 1;\n      const status = memory.frontmatter.status ?? \"active\";\n      statuses[status] = (statuses[status] ?? 0) + 1;\n      ageBands[getMemoryAgeBand(memory, now)] += 1;\n      if (status === \"archived\") archived += 1;\n      if (status === \"pending_review\") pendingReview += 1;\n      if (status === \"quarantined\") quarantined += 1;\n      if (status === \"rejected\") rejected += 1;\n    }\n  }\n\n  const defaultStorage = new StorageManager(config.memoryDir);\n  const profile = await defaultStorage.readProfile();\n  const footprint = await summarizeStorageFootprint(config.memoryDir);\n  const reviewRunId = (await listMemoryGovernanceRuns(config.memoryDir))[0];\n  let reviewQueue = 0;\n  if (reviewRunId) {\n    try {\n      reviewQueue = (await readMemoryGovernanceRunArtifact(config.memoryDir, reviewRunId)).reviewQueue.length;\n    } catch {\n      reviewQueue = 0;\n    }\n  }\n  const conversationIndex = await options.orchestrator.conversationIndexCoordinator.getHealth();\n  const nativeKnowledgeStatus = await summarizeNativeKnowledgeStatus(config);\n\n  return {\n    schemaVersion: 1,\n    generatedAt: now.toISOString(),\n    memoryDir: config.memoryDir,\n    totals: {\n      memories: totalMemories,\n      entities: totalEntities,\n      namespaces: namespaceEntries.length,\n      reviewQueue,\n      storageBytes: footprint.bytes,\n    },\n    categories,\n    statuses,\n    namespaces,\n    ageBands,\n    profile: {\n      exists: profile.length > 0,\n      chars: profile.length,\n      lines: profile.length > 0 ? profile.split(\"\\n\").length : 0,\n    },\n    storageFootprint: footprint,\n    archivePressure: {\n      archived,\n      pendingReview,\n      quarantined,\n      rejected,\n    },\n    conversationIndex: {\n      enabled: conversationIndex.enabled,\n      backend: conversationIndex.backend,\n      status: conversationIndex.status,\n      chunkDocCount: conversationIndex.chunkDocCount,\n      lastUpdateAt: conversationIndex.lastUpdateAt,\n    },\n    nativeKnowledge: {\n      enabled: nativeKnowledgeStatus.enabled,\n      curatedIncludeSync: nativeKnowledgeStatus.curatedIncludeSync,\n      obsidianSync: nativeKnowledgeStatus.obsidianSync,\n      openclawWorkspaceSync: nativeKnowledgeStatus.openclawWorkspaceSync,\n    },\n  };\n}\n\nexport async function runBenchmarkRecall(options: BenchmarkRecallOptions): Promise<BenchmarkRecallReport> {\n  const now = options.now ?? new Date();\n  const status = await getEvalHarnessStatus({\n    memoryDir: options.config.memoryDir,\n    evalStoreDir: options.config.evalStoreDir,\n    enabled: resolveEvalCapabilities(options.config).evalHarness,\n    shadowModeEnabled: resolveEvalCapabilities(options.config).evalShadowMode,\n    baselineSnapshotsEnabled: resolveEvalCapabilities(options.config).benchmarkBaselineSnapshots,\n    memoryRedTeamBenchEnabled: resolveEvalCapabilities(options.config).memoryRedTeamBench,\n  });\n\n  if (options.createSnapshot && options.snapshotId) {\n    const snapshot = await createEvalBaselineSnapshot({\n      memoryDir: options.config.memoryDir,\n      evalStoreDir: options.config.evalStoreDir,\n      baselineSnapshotsEnabled: resolveEvalCapabilities(options.config).benchmarkBaselineSnapshots,\n      snapshotId: options.snapshotId,\n      notes: options.snapshotNotes,\n      gitRef: options.gitRef,\n      createdAt: options.createdAt,\n    });\n    return {\n      schemaVersion: 1,\n      generatedAt: now.toISOString(),\n      mode: \"snapshot\",\n      status,\n      snapshot: {\n        targetPath: snapshot.targetPath,\n        snapshotId: snapshot.snapshot.snapshotId,\n      },\n    };\n  }\n\n  if (options.baseEvalStoreDir && options.candidateEvalStoreDir) {\n    const ciGate = await runEvalBenchmarkCiGate({\n      baseEvalStoreDir: options.baseEvalStoreDir,\n      candidateEvalStoreDir: options.candidateEvalStoreDir,\n    });\n    return {\n      schemaVersion: 1,\n      generatedAt: now.toISOString(),\n      mode: \"ci-gate\",\n      status,\n      ciGate,\n    };\n  }\n\n  if (options.snapshotId) {\n    const baselineReport = await runEvalBaselineDeltaReport({\n      memoryDir: options.config.memoryDir,\n      evalStoreDir: options.config.evalStoreDir,\n      benchmarkDeltaReporterEnabled: resolveEvalCapabilities(options.config).benchmarkDeltaReporter,\n      snapshotId: options.snapshotId,\n    });\n    return {\n      schemaVersion: 1,\n      generatedAt: now.toISOString(),\n      mode: \"baseline-report\",\n      status,\n      baselineReport,\n    };\n  }\n\n  if (options.validatePath) {\n    const validate = await validateEvalBenchmarkPack(options.validatePath, {\n      memoryRedTeamBenchEnabled: resolveEvalCapabilities(options.config).memoryRedTeamBench,\n    });\n    return {\n      schemaVersion: 1,\n      generatedAt: now.toISOString(),\n      mode: \"validate\",\n      status,\n      validate,\n    };\n  }\n\n  return {\n    schemaVersion: 1,\n    generatedAt: now.toISOString(),\n    mode: \"status\",\n    status,\n  };\n}\n\nexport async function runOperatorRepair(options: OperatorRepairOptions): Promise<OperatorRepairReport> {\n  const now = options.now ?? new Date();\n  const dryRun = options.dryRun === true || options.apply !== true;\n  const sessionCheck = await analyzeSessionIntegrity({ memoryDir: options.config.memoryDir });\n  const sessionRepairPlan = planSessionRepair({\n    report: sessionCheck,\n    dryRun,\n    allowSessionFileRepair: options.allowSessionFileRepair,\n    sessionFilesDir: options.sessionFilesDir,\n  });\n  const sessionRepairApply = await applySessionRepair({\n    plan: sessionRepairPlan,\n  });\n  // Resolve graph-construction gates once for this diagnostic (#1566 Cluster A).\n  const graphCaps = resolveGraphConstructionCapabilities(options.config);\n  const graphHealth = await analyzeGraphHealth(options.config.memoryDir, {\n    entityGraphEnabled: graphCaps.entityGraph,\n    timeGraphEnabled: graphCaps.timeGraph,\n    causalGraphEnabled: graphCaps.causalGraph,\n    includeRepairGuidance: true,\n  });\n  return {\n    schemaVersion: 1,\n    generatedAt: now.toISOString(),\n    dryRun,\n    sessionCheck,\n    sessionRepairPlan,\n    sessionRepairApply,\n    graphHealth,\n  };\n}\n","/**\n * Namespace maintenance fanout coordinator (issue #1500).\n *\n * Builds on the namespace-aware maintenance planner (#1499 / #1517) to fan out\n * the REMAINING background maintenance jobs — dreams, pattern reinforcement,\n * governance/lifecycle, contradiction scans, semantic/causal consolidation,\n * graph decay, fact archival, tier migration — across all maintained\n * namespaces.\n *\n * The planner (`namespace-planner.ts`) already handles namespace discovery\n * (configured + catalog), per-kind gating, cycle budgeting, per-job+namespace\n * locking, status recording, and catalog maintenance timestamps. QMD\n * maintenance was wired through it in #1517. This module standardizes the\n * per-job adapter pattern so every other maintenance job can be fanned out\n * with one call, and aggregates per-namespace health for doctor/dashboard.\n *\n * Design contract (issue #1500 compatibility requirements):\n * - Existing direct `runJob({ namespace })` calls continue to work unchanged.\n * - Namespaces disabled: fanout is a no-op (the planner returns only the\n *   default namespace; jobs run exactly as before).\n * - `maintenanceNamespaceFanoutEnabled: false`: fanout is a no-op.\n * - A failure in one namespace must not abort other namespaces (the planner\n *   already isolates per-namespace failures).\n * - Per-namespace locks prevent duplicate concurrent runs (planner-provided).\n */\n\nimport { resolveNamespaceCapabilities } from \"../capabilities.js\";\nimport type { NamespaceCatalog } from \"../namespaces/catalog.js\";\nimport type { PluginConfig } from \"../types.js\";\nimport { resolveConversationContextCapabilities } from \"../capabilities.js\";\nimport {\n  planNamespaceMaintenance,\n  readNamespaceMaintenanceLastRanStatuses,\n  readNamespaceMaintenanceStatuses,\n  runNamespaceMaintenancePlan,\n  type NamespaceMaintenanceCandidate,\n  type NamespaceMaintenanceRunStatus,\n  type NamespaceMaintenanceSummary,\n} from \"./namespace-planner.js\";\n\n/**\n * Standard maintenance job names fanned out across namespaces.\n *\n * These strings are used as the `jobName` key in:\n * - per-namespace status files (`state/namespace-maintenance-status/<job>/...`)\n * - catalog `lastMaintenanceAt[jobName]` timestamps\n * - per-job+namespace lock files (`state/maintenance-locks/<job>/...`)\n *\n * Keeping them centralized ensures the doctor, CLI, and dashboard all report\n * against the same keys.\n */\nexport const NAMESPACE_MAINTENANCE_JOBS = [\n  \"qmd\",\n  \"pattern-reinforcement\",\n  \"contradiction-scan\",\n  \"semantic-consolidation\",\n  \"governance\",\n  \"lifecycle\",\n  \"graph-decay\",\n  \"fact-archival\",\n  \"tier-migration\",\n] as const;\n\nexport type NamespaceMaintenanceStandardJob =\n  (typeof NAMESPACE_MAINTENANCE_JOBS)[number];\n\n/**\n * Context passed to a fanout job runner. The runner receives the per-namespace\n * candidate (namespace name, kind, storage dir) and a storage resolver that\n * the orchestrator wires to `storageRouter.storageFor(namespace)`.\n *\n * The storage resolver is intentionally typed as `unknown` here so this module\n * does not depend on the `StorageManager` class — the orchestrator provides the\n * typed resolver. This keeps the fanout module free of orchestrator/storage\n * imports and unit-testable with a stub.\n */\nexport interface NamespaceMaintenanceFanoutRunnerContext {\n  config: PluginConfig;\n  candidate: NamespaceMaintenanceCandidate;\n  resolveStorage: (namespace: string) => Promise<unknown>;\n}\n\n/**\n * Result returned by a fanout job runner. `itemCount` is optional and\n * domain-specific (e.g. memories scanned, edges decayed, embeddings updated).\n *\n * `skipped`/`skipReason`: when a runner performs no work for a namespace\n * (e.g. the job's own cadence gate throttled it), set `skipped: true`. The\n * planner records the namespace as `state: \"skipped\"` and does NOT touch\n * the catalog's `lastMaintenanceAt`, so a throttled namespace is not\n * falsely reported as maintained.\n */\nexport interface NamespaceMaintenanceFanoutRunnerResult {\n  itemCount?: number;\n  skipped?: boolean;\n  skipReason?: string;\n}\n\nexport type NamespaceMaintenanceFanoutRunner = (\n  ctx: NamespaceMaintenanceFanoutRunnerContext,\n) => Promise<NamespaceMaintenanceFanoutRunnerResult | undefined>;\n\nexport interface RunNamespaceMaintenanceFanoutOptions {\n  config: PluginConfig;\n  catalog?: NamespaceCatalog;\n  jobName: string;\n  runner: NamespaceMaintenanceFanoutRunner;\n  resolveStorage: (namespace: string) => Promise<unknown>;\n  /**\n   * When `false`, skip fanout entirely and return a zero-summary without\n   * touching the planner or locks. This lets callers gate fanout on\n   * per-job config (e.g. `semanticConsolidationEnabled`) without repeating\n   * the namespace-discovery logic.\n   */\n  enabled?: boolean;\n}\n\n/**\n * Fan out a single maintenance job across all maintained namespaces.\n *\n * This is the primary entry point for wiring a maintenance job through the\n * namespace-aware planner. It:\n * 1. Plans which namespaces should be maintained (configured + catalog,\n *    budgeted, kind-gated).\n * 2. Runs the job per-namespace through `runNamespaceMaintenancePlan`, which\n *    acquires per-job+namespace locks, records status files, and touches the\n *    catalog's `lastMaintenanceAt`.\n *\n * When namespaces are disabled or fanout is off, the planner returns only the\n * default namespace, so the job runs exactly once against default storage —\n * preserving single-user behavior.\n */\nexport async function runNamespaceMaintenanceFanout(\n  options: RunNamespaceMaintenanceFanoutOptions,\n): Promise<NamespaceMaintenanceSummary> {\n  if (options.enabled === false) {\n    return {\n      jobName: options.jobName,\n      generatedAt: new Date().toISOString(),\n      ran: 0,\n      skipped: 0,\n      failed: 0,\n      statuses: [],\n    };\n  }\n\n  const plan = await planNamespaceMaintenance(options.config, {\n    jobName: options.jobName,\n    catalog: options.catalog,\n  });\n\n  return runNamespaceMaintenancePlan(\n    options.config,\n    plan,\n    async (candidate) => {\n      return options.runner({\n        config: options.config,\n        candidate,\n        resolveStorage: options.resolveStorage,\n      });\n    },\n    options.catalog,\n  );\n}\n\n// ---------------------------------------------------------------------------\n// Health summary for doctor / dashboard / CLI\n// ---------------------------------------------------------------------------\n\nexport interface NamespaceMaintenanceJobHealth {\n  jobName: string;\n  ran: number;\n  skipped: number;\n  failed: number;\n  lastRunAt: string | null;\n  namespaces: NamespaceMaintenanceRunStatus[];\n}\n\nexport interface NamespaceMaintenanceHealthSummary {\n  generatedAt: string;\n  fanoutEnabled: boolean;\n  namespacesEnabled: boolean;\n  maxNamespacesPerCycle: number;\n  jobs: NamespaceMaintenanceJobHealth[];\n  totalRan: number;\n  totalSkipped: number;\n  totalFailed: number;\n}\n\n/**\n * Read all per-namespace maintenance status files and aggregate them into a\n * health summary suitable for `remnic doctor` and the admin dashboard.\n *\n * This is a pure read operation — it never runs maintenance or acquires locks.\n */\nexport async function summarizeNamespaceMaintenanceHealth(\n  config: PluginConfig,\n): Promise<NamespaceMaintenanceHealthSummary> {\n  const generatedAt = new Date().toISOString();\n  const statuses = await readNamespaceMaintenanceStatuses(config);\n  // Merge last-successful-run records so lastRunAt reflects the most recent\n  // successful maintenance, not just the latest (possibly skipped/failed)\n  // outcome. The latest status file is overwritten on every run; without\n  // this merge a namespace that ran then got budget-skipped shows ran=0 /\n  // lastRunAt=null (review #1622: preserve last successful run).\n  const lastRanStatuses = await readNamespaceMaintenanceLastRanStatuses(config);\n  const lastRanByJobNs = new Map<string, NamespaceMaintenanceRunStatus>();\n  for (const lr of lastRanStatuses) {\n    lastRanByJobNs.set(`${lr.jobName}\\u0000${lr.namespace}`, lr);\n  }\n\n  const byJob = new Map<string, NamespaceMaintenanceRunStatus[]>();\n  for (const status of statuses) {\n    const bucket = byJob.get(status.jobName);\n    if (bucket) {\n      bucket.push(status);\n    } else {\n      byJob.set(status.jobName, [status]);\n    }\n  }\n\n  const knownJobs = new Set<string>(NAMESPACE_MAINTENANCE_JOBS);\n  // Include any job names seen in status files that are not in the standard\n  // set (e.g. custom jobs registered by the orchestrator) so the doctor does\n  // not silently hide them.\n  for (const jobName of byJob.keys()) {\n    knownJobs.add(jobName);\n  }\n\n  const jobs: NamespaceMaintenanceJobHealth[] = [];\n  let totalRan = 0;\n  let totalSkipped = 0;\n  let totalFailed = 0;\n\n  for (const jobName of [...knownJobs].sort()) {\n    const jobStatuses = byJob.get(jobName) ?? [];\n    const ran = jobStatuses.filter((s) => s.state === \"ran\").length;\n    const skipped = jobStatuses.filter((s) => s.state === \"skipped\").length;\n    const failed = jobStatuses.filter((s) => s.state === \"failed\").length;\n    // Consider BOTH the latest outcome and the last successful run so a\n    // namespace that ran then was later skipped still reports lastRunAt.\n    const candidates: string[] = [];\n    for (const st of jobStatuses) {\n      if (typeof st.completedAt === \"string\") candidates.push(st.completedAt);\n      const lr = lastRanByJobNs.get(`${jobName}\\u0000${st.namespace}`);\n      if (lr && typeof lr.completedAt === \"string\") candidates.push(lr.completedAt);\n    }\n    const lastRunAt = candidates.sort().at(-1) ?? null;\n\n    totalRan += ran;\n    totalSkipped += skipped;\n    totalFailed += failed;\n\n    jobs.push({\n      jobName,\n      ran,\n      skipped,\n      failed,\n      lastRunAt,\n      namespaces: jobStatuses,\n    });\n  }\n\n  return {\n    generatedAt,\n    fanoutEnabled: resolveConversationContextCapabilities(config).maintenanceNamespaceFanout !== false,\n    namespacesEnabled: resolveNamespaceCapabilities(config).namespaces,\n    maxNamespacesPerCycle: config.maintenanceMaxNamespacesPerCycle,\n    jobs,\n    totalRan,\n    totalSkipped,\n    totalFailed,\n  };\n}\n\n/**\n * Format the health summary as human-readable text for the CLI.\n */\nexport function formatNamespaceMaintenanceHealthText(\n  summary: NamespaceMaintenanceHealthSummary,\n): string {\n  const lines: string[] = [\n    \"=== Namespace Maintenance ===\",\n    \"\",\n    `  fanout:        ${summary.fanoutEnabled ? \"enabled\" : \"disabled\"}`,\n    `  namespaces:    ${summary.namespacesEnabled ? \"enabled\" : \"disabled\"}`,\n    `  max/cycle:     ${summary.maxNamespacesPerCycle}`,\n    `  total ran:     ${summary.totalRan}`,\n    `  total skipped: ${summary.totalSkipped}`,\n    `  total failed:  ${summary.totalFailed}`,\n    \"\",\n  ];\n\n  if (summary.totalRan === 0 && summary.totalSkipped === 0 && summary.totalFailed === 0) {\n    lines.push(\"  (no maintenance status recorded yet)\");\n    return lines.join(\"\\n\");\n  }\n\n  lines.push(\"  Per-job breakdown:\");\n  for (const job of summary.jobs) {\n    const parts = [\n      `ran=${job.ran}`,\n      `skipped=${job.skipped}`,\n      `failed=${job.failed}`,\n    ];\n    if (job.lastRunAt) {\n      parts.push(`last=${job.lastRunAt}`);\n    }\n    lines.push(`    ${job.jobName}: ${parts.join(\", \")}`);\n    // Surface failed namespaces with their reason/error so operators know\n    // WHAT to fix without rerunning with --json (review #1622).\n    const failedNs = job.namespaces.filter((n) => n.state === \"failed\");\n    for (const ns of failedNs) {\n      const detail = ns.error ? `: ${ns.error}` : \"\";\n      lines.push(`      ! ${ns.namespace} failed (reason=${ns.reason ?? \"unknown\"})${detail}`);\n    }\n  }\n\n  return lines.join(\"\\n\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,UAAU;AACjB,SAAS,aAAa,mBAAmB;AACzC,SAAS,QAAQ,OAAO,UAAU,SAAS,MAAM,QAAQ,iBAAiB;;;ACiDnE,IAAM,6BAA6B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAuEA,eAAsB,8BACpB,SACsC;AACtC,MAAI,QAAQ,YAAY,OAAO;AAC7B,WAAO;AAAA,MACL,SAAS,QAAQ;AAAA,MACjB,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,KAAK;AAAA,MACL,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,UAAU,CAAC;AAAA,IACb;AAAA,EACF;AAEA,QAAM,OAAO,MAAM,yBAAyB,QAAQ,QAAQ;AAAA,IAC1D,SAAS,QAAQ;AAAA,IACjB,SAAS,QAAQ;AAAA,EACnB,CAAC;AAED,SAAO;AAAA,IACL,QAAQ;AAAA,IACR;AAAA,IACA,OAAO,cAAc;AACnB,aAAO,QAAQ,OAAO;AAAA,QACpB,QAAQ,QAAQ;AAAA,QAChB;AAAA,QACA,gBAAgB,QAAQ;AAAA,MAC1B,CAAC;AAAA,IACH;AAAA,IACA,QAAQ;AAAA,EACV;AACF;AAgCA,eAAsB,oCACpB,QAC4C;AAC5C,QAAM,eAAc,oBAAI,KAAK,GAAE,YAAY;AAC3C,QAAM,WAAW,MAAM,iCAAiC,MAAM;AAM9D,QAAM,kBAAkB,MAAM,wCAAwC,MAAM;AAC5E,QAAM,iBAAiB,oBAAI,IAA2C;AACtE,aAAW,MAAM,iBAAiB;AAChC,mBAAe,IAAI,GAAG,GAAG,OAAO,KAAS,GAAG,SAAS,IAAI,EAAE;AAAA,EAC7D;AAEA,QAAM,QAAQ,oBAAI,IAA6C;AAC/D,aAAW,UAAU,UAAU;AAC7B,UAAM,SAAS,MAAM,IAAI,OAAO,OAAO;AACvC,QAAI,QAAQ;AACV,aAAO,KAAK,MAAM;AAAA,IACpB,OAAO;AACL,YAAM,IAAI,OAAO,SAAS,CAAC,MAAM,CAAC;AAAA,IACpC;AAAA,EACF;AAEA,QAAM,YAAY,IAAI,IAAY,0BAA0B;AAI5D,aAAW,WAAW,MAAM,KAAK,GAAG;AAClC,cAAU,IAAI,OAAO;AAAA,EACvB;AAEA,QAAM,OAAwC,CAAC;AAC/C,MAAI,WAAW;AACf,MAAI,eAAe;AACnB,MAAI,cAAc;AAElB,aAAW,WAAW,CAAC,GAAG,SAAS,EAAE,KAAK,GAAG;AAC3C,UAAM,cAAc,MAAM,IAAI,OAAO,KAAK,CAAC;AAC3C,UAAM,MAAM,YAAY,OAAO,CAAC,MAAM,EAAE,UAAU,KAAK,EAAE;AACzD,UAAM,UAAU,YAAY,OAAO,CAAC,MAAM,EAAE,UAAU,SAAS,EAAE;AACjE,UAAM,SAAS,YAAY,OAAO,CAAC,MAAM,EAAE,UAAU,QAAQ,EAAE;AAG/D,UAAM,aAAuB,CAAC;AAC9B,eAAW,MAAM,aAAa;AAC5B,UAAI,OAAO,GAAG,gBAAgB,SAAU,YAAW,KAAK,GAAG,WAAW;AACtE,YAAM,KAAK,eAAe,IAAI,GAAG,OAAO,KAAS,GAAG,SAAS,EAAE;AAC/D,UAAI,MAAM,OAAO,GAAG,gBAAgB,SAAU,YAAW,KAAK,GAAG,WAAW;AAAA,IAC9E;AACA,UAAM,YAAY,WAAW,KAAK,EAAE,GAAG,EAAE,KAAK;AAE9C,gBAAY;AACZ,oBAAgB;AAChB,mBAAe;AAEf,SAAK,KAAK;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,YAAY;AAAA,IACd,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL;AAAA,IACA,eAAe,uCAAuC,MAAM,EAAE,+BAA+B;AAAA,IAC7F,mBAAmB,6BAA6B,MAAM,EAAE;AAAA,IACxD,uBAAuB,OAAO;AAAA,IAC9B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAKO,SAAS,qCACd,SACQ;AACR,QAAM,QAAkB;AAAA,IACtB;AAAA,IACA;AAAA,IACA,oBAAoB,QAAQ,gBAAgB,YAAY,UAAU;AAAA,IAClE,oBAAoB,QAAQ,oBAAoB,YAAY,UAAU;AAAA,IACtE,oBAAoB,QAAQ,qBAAqB;AAAA,IACjD,oBAAoB,QAAQ,QAAQ;AAAA,IACpC,oBAAoB,QAAQ,YAAY;AAAA,IACxC,oBAAoB,QAAQ,WAAW;AAAA,IACvC;AAAA,EACF;AAEA,MAAI,QAAQ,aAAa,KAAK,QAAQ,iBAAiB,KAAK,QAAQ,gBAAgB,GAAG;AACrF,UAAM,KAAK,wCAAwC;AACnD,WAAO,MAAM,KAAK,IAAI;AAAA,EACxB;AAEA,QAAM,KAAK,sBAAsB;AACjC,aAAW,OAAO,QAAQ,MAAM;AAC9B,UAAM,QAAQ;AAAA,MACZ,OAAO,IAAI,GAAG;AAAA,MACd,WAAW,IAAI,OAAO;AAAA,MACtB,UAAU,IAAI,MAAM;AAAA,IACtB;AACA,QAAI,IAAI,WAAW;AACjB,YAAM,KAAK,QAAQ,IAAI,SAAS,EAAE;AAAA,IACpC;AACA,UAAM,KAAK,OAAO,IAAI,OAAO,KAAK,MAAM,KAAK,IAAI,CAAC,EAAE;AAGpD,UAAM,WAAW,IAAI,WAAW,OAAO,CAAC,MAAM,EAAE,UAAU,QAAQ;AAClE,eAAW,MAAM,UAAU;AACzB,YAAM,SAAS,GAAG,QAAQ,KAAK,GAAG,KAAK,KAAK;AAC5C,YAAM,KAAK,WAAW,GAAG,SAAS,mBAAmB,GAAG,UAAU,SAAS,IAAI,MAAM,EAAE;AAAA,IACzF;AAAA,EACF;AAEA,SAAO,MAAM,KAAK,IAAI;AACxB;;;ADlQA,IAAM,6BAA6B,CAAC,mBAAmB,iBAAiB;AAExE,SAAS,yBAAyB,KAAmE;AACnG,QAAM,UACJ,IAAI,SAAS,KAAK,OAAO,IAAI,SAAS,MAAM,YAAY,CAAC,MAAM,QAAQ,IAAI,SAAS,CAAC,IAChF,IAAI,SAAS,IACd;AACN,QAAM,UACJ,WAAW,QAAQ,SAAS,KAAK,OAAO,QAAQ,SAAS,MAAM,YAAY,CAAC,MAAM,QAAQ,QAAQ,SAAS,CAAC,IACvG,QAAQ,SAAS,IAClB;AACN,SAAO;AACT;AAEA,SAAS,wBAAwB,KAAkD;AACjF,QAAM,UACJ,IAAI,SAAS,KAAK,OAAO,IAAI,SAAS,MAAM,YAAY,CAAC,MAAM,QAAQ,IAAI,SAAS,CAAC,IAChF,IAAI,SAAS,IACd;AACN,QAAM,QACJ,WAAW,QAAQ,OAAO,KAAK,OAAO,QAAQ,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,QAAQ,OAAO,CAAC,IACjG,QAAQ,OAAO,IAChB;AACN,QAAM,SAAS,QAAQ,QAAQ;AAC/B,SAAO,OAAO,WAAW,WAAW,SAAS;AAC/C;AAEA,SAAS,iCAAiC,KAAmD;AAC3F,SAAO,mBAAmB,KAAK;AAAA,IAC7B,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,WAAW;AAAA,EACb,CAAC;AACH;AAaA,SAAS,mBAAmB,OAAyB;AACnD,SAAO,OAAO,UAAU,YACnB,UAAU,QACV,UAAU,SACT,MAA6B,SAAS;AAC9C;AAEA,SAAS,mBAAmB,OAAwB;AAClD,SAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC9D;AAkUA,SAAS,kBAAkB,cAA+B;AACxD,MAAI,gBAAgB,aAAa,KAAK,EAAE,SAAS,EAAG,QAAO,aAAa,KAAK;AAC7E,QAAM,aACJ,WAAW,sBAAsB,KACjC,WAAW,6BAA6B;AAC1C,MAAI,cAAc,WAAW,KAAK,EAAE,SAAS,EAAG,QAAO,WAAW,KAAK;AACvE,SAAO,KAAK,KAAK,eAAe,GAAG,aAAa,eAAe;AACjE;AAEA,eAAe,oBAAoB,YAAwD;AACzF,QAAM,eAAe,kBAAkB,UAAU;AACjD,MAAI;AACF,UAAM,MAAM,KAAK,MAAM,MAAM,SAAS,cAAc,OAAO,CAAC;AAG5D,UAAM,QAAQ,iCAAiC,GAAG;AAClD,UAAM,eAAe;AAAA,MACnB,SAAS,OAAO,UAAU,WACpB,MAAM,QAAQ,KAA6C,CAAC,IAC9D,CAAC;AAAA,IACP;AACA,WAAO;AAAA,MACL,OAAO;AAAA,MACP,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,WAAW,aAAa;AAAA,MACxB,cAAc,aAAa;AAAA,IAC7B;AAAA,EACF,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,WAAO;AAAA,MACL,OAAO,CAAC,UAAU,KAAK,OAAO;AAAA,MAC9B,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,OAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,eAAe,WAAW,YAAsC;AAC9D,MAAI;AACF,UAAM,OAAO,YAAY,YAAY,IAAI;AACzC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,WAAW,YAAsC;AAC9D,MAAI;AACF,UAAM,OAAO,YAAY,YAAY,IAAI;AACzC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,kBAAkB,OAAwB;AACjD,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,MAAI,OAAO,UAAU,SAAU,QAAO,MAAM,SAAS,IAAI,QAAQ;AACjE,MAAI,OAAO,UAAU,YAAY,OAAO,UAAU,UAAW,QAAO,OAAO,KAAK;AAChF,SAAO,KAAK,UAAU,KAAK;AAC7B;AAEA,eAAe,sBACb,OACsE;AACtE,SAAO,QAAQ,IAAI,MAAM,IAAI,OAAO,eAAe;AACjD,QAAI;AACF,YAAM,OAAO,YAAY,YAAY,IAAI;AACzC,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,UAAU,MAAM,WAAW,UAAU;AAAA,MACvC;AAAA,IACF,QAAQ;AACN,aAAO;AAAA,QACL,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,UAAU;AAAA,MACZ;AAAA,IACF;AAAA,EACF,CAAC,CAAC;AACJ;AAEA,SAAS,cAAc,QAAgC;AACrD,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,IACP,KAAK,KAAK,OAAO,WAAW,OAAO;AAAA,IACnC,KAAK,KAAK,OAAO,WAAW,UAAU;AAAA,IACtC,KAAK,KAAK,OAAO,WAAW,OAAO;AAAA,IACnC,KAAK,KAAK,OAAO,WAAW,WAAW;AAAA,IACvC,KAAK,KAAK,OAAO,WAAW,WAAW;AAAA,IACvC,KAAK,KAAK,OAAO,WAAW,QAAQ;AAAA,EACtC;AACF;AAEA,eAAe,iBAAiB,UAA2C;AACzE,MAAI;AACF,WAAO,KAAK,MAAM,MAAM,SAAS,UAAU,OAAO,CAAC;AAAA,EACrD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,+BAA+B,QA6B3C;AACD,QAAM,kBAAkB,OAAO;AAC/B,QAAM,0BAA0B,iBAAiB,YAAY;AAC7D,QAAM,mBAAmB,kBACrB,oCAAoC,OAAO,WAAW,eAAe,IACrE,KAAK,KAAK,OAAO,WAAW,yBAAyB,2BAA2B;AACpF,QAAM,oBAAoB,kBACtB,gCAAgC,OAAO,WAAW,eAAe,IACjE,KAAK,KAAK,OAAO,WAAW,yBAAyB,oBAAoB;AAC7E,QAAM,oBAAoB,kBACtB,kCAAkC,OAAO,WAAW,eAAe,IACnE,KAAK,KAAK,OAAO,WAAW,yBAAyB,8BAA8B;AACvF,QAAM,CAAC,YAAY,aAAa,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC/D,iBAAiB,gBAAgB;AAAA,IACjC,iBAAiB,iBAAiB;AAAA,IAClC,iBAAiB,iBAAiB;AAAA,EACpC,CAAC;AAED,QAAM,eAAe,cAAc,OAAO,eAAe,YAAY,eAAe,QAC/E,WAAW,cAAc,OAAQ,WAAmC,UAAU,YAC7E,WAAmC,UAAU,OAC5C,aAID;AAEN,MAAI,0BAA0B;AAC9B,MAAI,0BAA0B;AAC9B,aAAW,QAAQ,OAAO,OAAO,cAAc,SAAS,CAAC,CAAC,GAAG;AAC3D,QAAI,KAAK,SAAS;AAChB,iCAA2B;AAC3B;AAAA,IACF;AACA,+BAA2B,MAAM,QAAQ,KAAK,MAAM,IAAI,KAAK,OAAO,SAAS;AAAA,EAC/E;AAEA,QAAM,iBAAiB,eAAe,OAAO,gBAAgB,YAAY,gBAAgB,QACpF,YAAY,eAAe,OAAQ,YAAqC,WAAW,YAClF,YAAqC,WAAW,OAC/C,cAID;AAEN,MAAI,2BAA2B;AAC/B,MAAI,2BAA2B;AAC/B,aAAW,SAAS,OAAO,OAAO,gBAAgB,UAAU,CAAC,CAAC,GAAG;AAC/D,eAAW,QAAQ,OAAO,OAAO,MAAM,SAAS,CAAC,CAAC,GAAG;AACnD,UAAI,KAAK,SAAS;AAChB,oCAA4B;AAC5B;AAAA,MACF;AACA,kCAA4B,MAAM,QAAQ,KAAK,MAAM,IAAI,KAAK,OAAO,SAAS;AAAA,IAChF;AAAA,EACF;AAEA,QAAM,gBAAgB,eAAe,OAAO,gBAAgB,YAAY,gBAAgB,QACnF,WAAW,eAAe,OAAQ,YAAoC,UAAU,YAC/E,YAAoC,UAAU,OAC7C,cAID;AAEN,MAAI,2BAA2B;AAC/B,MAAI,2BAA2B;AAC/B,aAAW,QAAQ,OAAO,OAAO,eAAe,SAAS,CAAC,CAAC,GAAG;AAC5D,QAAI,KAAK,SAAS;AAChB,kCAA4B;AAC5B;AAAA,IACF;AACA,gCAA4B,MAAM,QAAQ,KAAK,MAAM,IAAI,KAAK,OAAO,SAAS;AAAA,EAChF;AAEA,SAAO;AAAA,IACL,SAAS,iBAAiB,YAAY;AAAA,IACtC,cAAc,iBAAiB,gBAAgB,CAAC;AAAA,IAChD,oBAAoB;AAAA,MAClB,WAAW;AAAA,MACX,QAAQ,iBAAiB;AAAA,MACzB,WAAW,OAAO,cAAc,cAAc,WAAW,aAAa,YAAY;AAAA,MAClF,WAAW,OAAO,KAAK,cAAc,SAAS,CAAC,CAAC,EAAE;AAAA,MAClD,kBAAkB;AAAA,MAClB,kBAAkB;AAAA,IACpB;AAAA,IACA,iCAAiC,iBAAiB,mBAAmB,YAAY;AAAA,IACjF,8BAA8B,iBAAiB,gBAAgB,UAAU,KAAK;AAAA,IAC9E,cAAc;AAAA,MACZ,WAAW;AAAA,MACX,QAAQ,mBAAmB;AAAA,MAC3B,WAAW,OAAO,gBAAgB,cAAc,WAAW,eAAe,YAAY;AAAA,MACtF,YAAY,OAAO,KAAK,gBAAgB,UAAU,CAAC,CAAC,EAAE;AAAA,MACtD,kBAAkB;AAAA,MAClB,kBAAkB;AAAA,IACpB;AAAA,IACA,uBAAuB;AAAA,MACrB,WAAW;AAAA,MACX,QAAQ,kBAAkB;AAAA,MAC1B,WAAW,OAAO,eAAe,cAAc,WAAW,cAAc,YAAY;AAAA,MACpF,WAAW,OAAO,KAAK,eAAe,SAAS,CAAC,CAAC,EAAE;AAAA,MACnD,kBAAkB;AAAA,MAClB,kBAAkB;AAAA,IACpB;AAAA,EACF;AACF;AAEA,IAAM,6BAA6B;AACnC,IAAM,2BAA2B;AAEjC,SAAS,2BAAmC;AAC1C,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEA,SAAS,iCAAiC,UAAyB,SAA4E;AAC7I,MAAI,CAAC,YAAY,SAAS,KAAK,EAAE,WAAW,GAAG;AAC7C,WAAO,EAAE,SAAS,GAAG,OAAO;AAAA,GAAM,SAAS,OAAO,WAAW,KAAK;AAAA,EACpE;AACA,MAAI,SAAS,SAAS,0BAA0B,KAAK,SAAS,SAAS,wBAAwB,GAAG;AAChG,UAAM,OAAO,SAAS;AAAA,MACpB,IAAI,OAAO,GAAG,0BAA0B,aAAa,wBAAwB,EAAE;AAAA,MAC/E;AAAA,IACF;AACA,WAAO,EAAE,SAAS,KAAK,SAAS,IAAI,IAAI,OAAO,GAAG,IAAI;AAAA,GAAM,SAAS,SAAS,UAAU,WAAW,MAAM;AAAA,EAC3G;AACA,QAAM,UAAU,SAAS,QAAQ;AACjC,SAAO;AAAA,IACL,SAAS,GAAG,OAAO;AAAA;AAAA,EAAO,OAAO;AAAA;AAAA,IACjC,SAAS;AAAA,IACT,WAAW;AAAA,EACb;AACF;AAEA,SAAS,iCAAiC,UAAyD;AACjG,MAAI,CAAC,SAAS,SAAS,0BAA0B,KAAK,CAAC,SAAS,SAAS,wBAAwB,GAAG;AAClG,WAAO,EAAE,SAAS,UAAU,SAAS,MAAM;AAAA,EAC7C;AACA,QAAM,WAAW,SACd,QAAQ,IAAI,OAAO,OAAO,0BAA0B,aAAa,wBAAwB,MAAM,GAAG,IAAI,EACtG,QAAQ,WAAW,MAAM,EACzB,KAAK;AACR,SAAO;AAAA,IACL,SAAS,SAAS,SAAS,IAAI,GAAG,QAAQ;AAAA,IAAO;AAAA,IACjD,SAAS;AAAA,EACX;AACF;AAEA,eAAsB,iBAAiB,SAA6D;AAClG,QAAM,MAAM,QAAQ,OAAO,oBAAI,KAAK;AACpC,QAAM,eAAe,MAAM,oBAAoB,QAAQ,UAAU;AACjE,QAAM,UAAU,QAAQ,aAAa;AACrC,QAAM,QAAQ,kBAAkB;AAChC,QAAM,MAAM,QAAQ,aAAa,OAAO,cAAc,EAAE,WAAW,KAAK,CAAC;AAEzE,QAAM,eAAe,MAAM,QAAQ,aAAa,IAAI,MAAM;AAC1D,QAAM,kBAAkB,uBAAuB,QAAQ,aAAa,MAAM,EAAE,MACxE,MAAM,QAAQ,aAAa,IAAI;AAAA,IAC7B,QAAQ,aAAa,OAAO;AAAA,IAC5B,QAAQ,aAAa,OAAO;AAAA,EAC9B,IACA;AACJ,QAAM,wBAAwB,MAAM,+BAA+B,QAAQ,aAAa,MAAM;AAE9F,QAAM,gBAAgB,KAAK,KAAK,QAAQ,aAAa,OAAO,cAAc,WAAW;AACrF,QAAM,0BACJ,QAAQ,4BACJ,QAAQ,6BAA6B,YAAY;AACvD,MAAI,kBAAkB;AACtB,MAAI;AACF,UAAM,OAAO,eAAe,YAAY,IAAI;AAC5C,sBAAkB;AAAA,EACpB,QAAQ;AACN,sBAAkB;AAAA,EACpB;AACA,MAAI,qBAAqB;AACzB,MAAI,mBAAmB;AACvB,MAAI,mBAAmB;AACvB,QAAM,yBAAyB,QAAQ,aAAa,OAAO,gBAAgB,cACtE,QAAQ,aAAa,OAAO,gBAAgB;AACjD,QAAM,6BAA6B,0BAA0B,yBAAyB,IAAI;AAC1F,MAAI,yBAAyB;AAC3B,QAAI,4BAA4B,WAAW;AAAA,IAE3C,WAAW,4BAA4B,WAAW;AAChD,YAAM,WAAW,kBAAkB,MAAM,SAAS,eAAe,OAAO,IAAI;AAC5E,YAAM,OAAO,iCAAiC,UAAU,8BAA8B,EAAE;AACxF,UAAI,CAAC,YAAY,KAAK,YAAY,UAAU;AAC1C,cAAM,UAAU,eAAe,KAAK,SAAS,OAAO;AAAA,MACtD;AACA,wBAAkB;AAClB,2BAAqB,KAAK;AAC1B,yBAAmB,KAAK;AAAA,IAC1B,WAAW,4BAA4B,YAAY,iBAAiB;AAClE,YAAM,WAAW,MAAM,SAAS,eAAe,OAAO;AACtD,YAAM,OAAO,iCAAiC,QAAQ;AACtD,UAAI,KAAK,SAAS;AAChB,YAAI,KAAK,QAAQ,WAAW,GAAG;AAC7B,gBAAM,OAAO,aAAa;AAC1B,4BAAkB;AAAA,QACpB,OAAO;AACL,gBAAM,UAAU,eAAe,KAAK,SAAS,OAAO;AACpD,4BAAkB;AAAA,QACpB;AACA,2BAAmB;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,cAAc,MAAM,sBAAsB,cAAc,QAAQ,aAAa,MAAM,CAAC;AAC1F,QAAM,YAAY;AAAA,IAChB,+BAA+B,QAAQ,6BAA6B,KAAK,SAAS;AAAA,IAClF;AAAA,IACA;AAAA,EACF;AACA,MAAI,0BAA0B,CAAC,iBAAiB;AAC9C,cAAU,KAAK,+JAA+J;AAAA,EAChL;AAEA,SAAO;AAAA,IACL,eAAe;AAAA,IACf,aAAa,IAAI,YAAY;AAAA,IAC7B,QAAQ;AAAA,IACR,WAAW,QAAQ,aAAa,OAAO;AAAA,IACvC,cAAc,QAAQ,aAAa,OAAO;AAAA,IAC1C;AAAA,IACA,KAAK;AAAA,MACH,SAAS,uBAAuB,QAAQ,aAAa,MAAM,EAAE;AAAA,MAC7D,WAAW;AAAA,MACX;AAAA,MACA,aAAa,QAAQ,aAAa,IAAI,YAAY;AAAA,IACpD;AAAA,IACA,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,MACf,aAAa,QAAQ,aAAa,OAAO;AAAA,MACzC,SAAS;AAAA,MACT;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,4BAA4B,YAAY,6BAA6B;AAAA,IAChF;AAAA,IACA;AAAA,IACA,sBAAsB;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,yBACP,UACA,SACqB;AACrB,MAAI,CAAC,SAAS,WAAW,QAAQ,gBAAgB,MAAM;AACrD,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,aAAa;AAAA,MACb,SAAS;AAAA,QACP,SAAS,SAAS,YAAY;AAAA,QAC9B,aAAa,SAAS,gBAAgB;AAAA,MACxC;AAAA,IACF;AAAA,EACF;AACA,MAAI,SAAS,SAAS,GAAG;AACvB,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS,GAAG,SAAS,MAAM;AAAA,MAC3B,aAAa;AAAA,MACb,SAAS,EAAE,SAAS;AAAA,IACtB;AAAA,EACF;AACA,SAAO;AAAA,IACL,KAAK;AAAA,IACL,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,SAAS;AAAA,MACP,SAAS;AAAA,MACT,WAAW,QAAQ;AAAA,MACnB,aAAa,QAAQ;AAAA,IACvB;AAAA,EACF;AACF;AAEA,SAAS,yBAAyB,OASF;AAC9B,SAAO;AAAA,IACL,KAAK,MAAM;AAAA,IACX,QAAQ,MAAM;AAAA,IACd,SAAS,MAAM;AAAA,IACf,cAAc,kBAAkB,MAAM,YAAY;AAAA,IAClD,cAAc,kBAAkB,MAAM,YAAY;AAAA,IAClD,kBAAkB,kBAAkB,MAAM,gBAAgB;AAAA,IAC1D,SAAS,MAAM;AAAA,IACf,WAAW,MAAM;AAAA,EACnB;AACF;AAEA,eAAsB,wBACpB,SACqC;AACrC,QAAM,MAAM,QAAQ,OAAO,oBAAI,KAAK;AACpC,QAAM,eAAe,MAAM,oBAAoB,QAAQ,UAAU;AACjE,SAAO,gCAAgC;AAAA,IACrC;AAAA,IACA;AAAA,IACA,QAAQ,QAAQ,aAAa;AAAA,EAC/B,CAAC;AACH;AAEA,eAAe,gCAAgC,OAIP;AACtC,QAAM,EAAE,KAAK,cAAc,OAAO,IAAI;AAGtC,QAAM,OAAO,oBAAoB,MAAM;AACvC,QAAM,WAA0C,CAAC;AACjD,QAAM,gBAAgB,OAAO,iBAAiB;AAC9C,QAAM,0BAA0B;AAAA,IAC9B,KAAK,KAAK,OAAO,cAAc,aAAa;AAAA,IAC5C,KAAK,KAAK,OAAO,cAAc,WAAW;AAAA,IAC1C,KAAK,KAAK,OAAO,cAAc,SAAS;AAAA,EAC1C;AACA,QAAM,4BAA4B,MAAM,QAAQ,IAAI,wBAAwB,IAAI,UAAU,CAAC,GAAG,KAAK,OAAO;AAE1G,MACE,OAAO,mBAAmB,kBAC1B,OAAO,mBAAmB,cAC1B,OAAO,mBAAmB,kBAC1B,OAAO,mBAAmB,qBAC1B,4BAA4B,MAAM,EAAE,uBAAuB,SAC3D,gCAAgC,MAAM,EAAE,sBAAsB,SAC9D,CAAC,KAAK,QACN;AACA,aAAS,KAAK,yBAAyB;AAAA,MACrC,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,cAAc,OAAO;AAAA,MACrB,cAAc;AAAA,MACd,kBAAkB;AAAA,MAClB,SAAS;AAAA,MACT,WACE;AAAA,IACJ,CAAC,CAAC;AAAA,EACJ;AAEA,MAAI,uBAAuB,MAAM,EAAE,OAAO,uBAAuB,MAAM,EAAE,cAAc,OAAO;AAC5F,aAAS,KAAK,yBAAyB;AAAA,MACrC,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,cAAc,uBAAuB,MAAM,EAAE;AAAA,MAC7C,cAAc;AAAA,MACd,kBAAkB;AAAA,MAClB,SAAS;AAAA,MACT,WACE;AAAA,IACJ,CAAC,CAAC;AAAA,EACJ;AAEA,MAAI,4BAA4B,OAAO,iBAAiB,YAAY,MAAM;AACxE,aAAS,KAAK,yBAAyB;AAAA,MACrC,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,cAAc,OAAO,iBAAiB;AAAA,MACtC,cAAc;AAAA,MACd,kBAAkB;AAAA,MAClB,SAAS;AAAA,MACT,WACE;AAAA,IACJ,CAAC,CAAC;AAAA,EACJ;AAEA,MAAI,4BAA4B,OAAO,aAAa,YAAY,MAAM;AACpE,aAAS,KAAK,yBAAyB;AAAA,MACrC,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,cAAc,OAAO,aAAa;AAAA,MAClC,cAAc;AAAA,MACd,kBAAkB;AAAA,MAClB,SAAS;AAAA,MACT,WACE;AAAA,IACJ,CAAC,CAAC;AAAA,EACJ;AAEA,MAAI,kBAAkB,SAAS,uBAAuB,MAAM,EAAE,QAAQ,OAAO;AAC3E,aAAS,KAAK,yBAAyB;AAAA,MACrC,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,cAAc,uBAAuB,MAAM,EAAE;AAAA,MAC7C,cAAc;AAAA,MACd,kBAAkB;AAAA,MAClB,SAAS;AAAA,MACT,WACE;AAAA,IACJ,CAAC,CAAC;AAAA,EACJ;AAEA,MAAI,uBAAuB,MAAM,EAAE,gBAAgB,QAAQ,uBAAuB,MAAM,EAAE,QAAQ,OAAO;AACvG,aAAS,KAAK,yBAAyB;AAAA,MACrC,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,cAAc,uBAAuB,MAAM,EAAE;AAAA,MAC7C,cAAc;AAAA,MACd,kBAAkB;AAAA,MAClB,SAAS;AAAA,MACT,WACE;AAAA,IACJ,CAAC,CAAC;AAAA,EACJ;AAEA,MAAI,uBAAuB,MAAM,EAAE,oBAAoB,uBAAuB,MAAM,EAAE,gBAAgB,MAAM;AAC1G,aAAS,KAAK,yBAAyB;AAAA,MACrC,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,cAAc,uBAAuB,MAAM,EAAE;AAAA,MAC7C,cAAc;AAAA,MACd,kBAAkB;AAAA,MAClB,SAAS;AAAA,MACT,WACE;AAAA,IACJ,CAAC,CAAC;AAAA,EACJ;AAEA,MAAI,4BAA4B,MAAM,EAAE,qBAAqB,OAAO,6BAA6B,SAAS,uBAAuB,MAAM,EAAE,QAAQ,OAAO;AACtJ,aAAS,KAAK,yBAAyB;AAAA,MACrC,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,cAAc,uBAAuB,MAAM,EAAE;AAAA,MAC7C,cAAc;AAAA,MACd,kBAAkB;AAAA,MAClB,SAAS;AAAA,MACT,WACE;AAAA,IACJ,CAAC,CAAC;AAAA,EACJ;AAEA,QAAM,UAAU,SAAS;AAAA,IACvB,CAAC,KAAK,YAAY;AAChB,UAAI,QAAQ,MAAM,KAAK;AACvB,aAAO;AAAA,IACT;AAAA,IACA,EAAE,WAAW,GAAG,SAAS,EAAE;AAAA,EAC7B;AAEA,SAAO;AAAA,IACL,eAAe;AAAA,IACf,aAAa,IAAI,YAAY;AAAA,IAC7B,IAAI,aAAa,UAAU,QAAQ,YAAY;AAAA,IAC/C,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,gBAAgB,OAAO;AAAA,MACvB;AAAA,MACA,YAAY,uBAAuB,MAAM,EAAE;AAAA,MAC3C,kBAAkB,uBAAuB,MAAM,EAAE;AAAA,MACjD,wBAAwB,OAAO,iBAAiB,YAAY;AAAA,MAC5D,oBAAoB,OAAO,aAAa,YAAY;AAAA,MACpD,0BAA0B,4BAA4B,MAAM,EAAE;AAAA,IAChE;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAQO,SAAS,4BACd,UACmF;AACnF,QAAM,SAAS,EAAE,UAAU,GAAG,YAAY,GAAG,MAAM,EAAE;AACrD,aAAW,OAAO,UAAU;AAC1B,UAAM,MAAM,IAAI,YAAY,cAAc;AAC1C,QAAI,QAAQ,WAAY,QAAO,YAAY;AAAA,aAClC,QAAQ,aAAc,QAAO,cAAc;AAAA,QAC/C,QAAO,QAAQ;AAAA,EACtB;AACA,SAAO,EAAE,QAAQ,OAAO,SAAS,OAAO;AAC1C;AAUO,SAAS,0BACd,QACqB;AACrB,QAAM,QAAQ,sBAAsB,OAAO,SAAS;AACpD,MAAI,MAAM,UAAU,UAAU;AAC5B,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,SAAS,EAAE,OAAO,MAAM,MAAM;AAAA,IAChC;AAAA,EACF;AACA,MAAI,MAAM,UAAU,YAAY;AAC9B,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,SAAS,EAAE,OAAO,MAAM,MAAM;AAAA,IAChC;AAAA,EACF;AACA,MAAI,MAAM,UAAU,uBAAuB;AACzC,UAAM,qBAAqB,MAAM,SAAS,KAAK,MAAM,MAAM,MAAM;AACjE,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS,yEAAyE,kBAAkB;AAAA,MACpG,aACE;AAAA,MACF,SAAS,EAAE,OAAO,MAAM,OAAO,QAAQ,MAAM,OAAO;AAAA,IACtD;AAAA,EACF;AACA,QAAM,eAAe,MAAM,wBACvB,6DACA;AACJ,QAAM,eAAe,MAAM,SAAS,KAAK,MAAM,MAAM,MAAM;AAC3D,SAAO;AAAA,IACL,KAAK;AAAA,IACL,QAAQ;AAAA,IACR,SAAS,yDAAyD,YAAY,IAAI,YAAY;AAAA,IAC9F,aAAa,MAAM,wBACf,0JACA;AAAA,IACJ,SAAS;AAAA,MACP,OAAO,MAAM;AAAA,MACb,QAAQ,MAAM;AAAA,MACd,uBAAuB,MAAM;AAAA,IAC/B;AAAA,EACF;AACF;AAEA,eAAsB,kBAAkB,SAA+D;AACrG,QAAM,MAAM,QAAQ,OAAO,oBAAI,KAAK;AACpC,QAAM,eAAe,MAAM,oBAAoB,QAAQ,UAAU;AACjE,QAAM,SAAgC,CAAC;AACvC,QAAM,SAAS,QAAQ,aAAa;AACpC,QAAM,UAAU,QAAQ,aAAa;AACrC,QAAM,eAAe,MAAM,gCAAgC;AAAA,IACzD;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,QAAM,wBAAwB,MAAM,+BAA+B,MAAM;AACzE,QAAM,aAAa,MAAM,sBAAsB,cAAc,MAAM,CAAC;AACpE,QAAM,eAAe,WAAW,OAAO,CAAC,UAAU,CAAC,MAAM,MAAM,EAAE,IAAI,CAAC,UAAU,MAAM,IAAI;AAE1F,SAAO,KAAK;AAAA,IACV,KAAK;AAAA,IACL,QAAQ,aAAa,SACjB,OACA,QAAQ,aACR,UACA;AAAA,IACJ,SAAS,aAAa,SAAS,kEAAkE;AAAA,IACjG,aAAa,aAAa,SAAS,SAAY;AAAA,IAC/C,SAAS;AAAA,EACX,CAAC;AAED,SAAO,KAAK;AAAA,IACV,KAAK;AAAA,IACL,QAAQ,aAAa,WAAW,IAAI,OAAO;AAAA,IAC3C,SAAS,aAAa,WAAW,IAC7B,uCACA,GAAG,aAAa,MAAM;AAAA,IAC1B,aAAa,aAAa,WAAW,IAAI,SAAY;AAAA,IACrD,SAAS,EAAE,aAAa,WAAW;AAAA,EACrC,CAAC;AAED,SAAO,KAAK;AAAA,IACV,KAAK;AAAA,IACL,QAAQ,aAAa,QAAQ,UAAU,IAAI,UAAU,aAAa,QAAQ,YAAY,IAAI,SAAS;AAAA,IACnG,SAAS,aAAa,QAAQ,UAAU,IACpC,GAAG,aAAa,QAAQ,OAAO,wCAC/B,aAAa,QAAQ,YAAY,IACjC,uCAAuC,aAAa,QAAQ,SAAS,+CACrE;AAAA,IACJ,aAAa,aAAa,QAAQ,UAAU,KAAK,aAAa,QAAQ,YAAY,IAC9E,mGACA;AAAA,IACJ,SAAS;AAAA,EACX,CAAC;AAED,QAAM,eAAe,MAAM,QAAQ,aAAa,IAAI,MAAM;AAC1D,QAAM,kBAAkB,uBAAuB,MAAM,EAAE,MACnD,MAAM,QAAQ,aAAa,IAAI,iBAAiB,OAAO,WAAW,OAAO,aAAa,IACtF;AACJ,SAAO,KAAK;AAAA,IACV,KAAK;AAAA,IACL,QAAQ,CAAC,uBAAuB,MAAM,EAAE,MACpC,SACA,CAAC,eACD,UACA,oBAAoB,YACpB,OACA,oBAAoB,YACpB,UACA;AAAA,IACJ,SAAS,CAAC,uBAAuB,MAAM,EAAE,MACrC,+BACA,eACA,qBAAqB,eAAe,OACpC;AAAA,IACJ,aAAa,CAAC,uBAAuB,MAAM,EAAE,MACzC,qDACA,CAAC,eACD,wEACA,oBAAoB,YACpB,gEACA,oBAAoB,YACpB,SACA;AAAA,IACJ,SAAS;AAAA,MACP,WAAW;AAAA,MACX;AAAA,MACA,aAAa,QAAQ,aAAa,IAAI,YAAY;AAAA,IACpD;AAAA,EACF,CAAC;AAED,QAAM,oBAAoB,MAAM,QAAQ,aAAa,6BAA6B,UAAU;AAC5F,SAAO,KAAK;AAAA,IACV,KAAK;AAAA,IACL,QAAQ,kBAAkB,WAAW,OACjC,OACA,kBAAkB,UAClB,UACA;AAAA,IACJ,SAAS,kBAAkB,UACvB,iCAAiC,kBAAkB,MAAM,MACzD;AAAA,IACJ,aAAa,kBAAkB,WAAW,kBAAkB,WAAW,OACnE,qFACA;AAAA,IACJ,SAAS;AAAA,EACX,CAAC;AAED,QAAM,OAAO,MAAM,QAAQ,SAAS;AACpC,SAAO,KAAK;AAAA,IACV,KAAK;AAAA,IACL,QAAQ,KAAK,oBAAoB,KAAK,sBAAsB,OAAO;AAAA,IACnE,SAAS,KAAK,oBAAoB,KAAK,sBACnC,kDACA;AAAA,IACJ,aAAa,KAAK,oBAAoB,KAAK,sBACvC,SACA;AAAA,IACJ,SAAS;AAAA,EACX,CAAC;AASD,QAAM,eAAe,KAAK,wBAAwB,CAAC;AACnD,QAAM,qBAAqB,aAAa,OAAO,CAAC,UAAU,MAAM,qBAAqB,aAAa;AAClG,QAAM,QAAQ,KAAK,IAAI;AACvB,QAAM,qBAAqB,aAAa,OAAO,CAAC,UAAU;AACxD,UAAM,aAAa,KAAK,MAAM,MAAM,cAAc;AAClD,WAAO,OAAO,SAAS,UAAU,KAAK,aAAa;AAAA,EACrD,CAAC;AAOD,QAAM,0BAA0B,mBAAmB;AAAA,IACjD,CAAC,UAAU,MAAM,qBAAqB;AAAA,EACxC;AACA,QAAM,oBACJ,wBAAwB,UAAU,KAAK,IAAI,GAAG,OAAO,iCAAiC;AACxF,QAAM,mBACJ,mBAAmB,SAAS,IAAI,UAAU,mBAAmB,SAAS,IAAI,SAAS;AACrF,SAAO,KAAK;AAAA,IACV,KAAK;AAAA,IACL,QAAQ;AAAA,IACR,SACE,qBAAqB,UACjB,2BAA2B,mBAAmB,MAAM,gGACpD,qBAAqB,SACnB,GAAG,mBAAmB,MAAM,0EAC1B,oBAAoB,yHAAyH,EAC/I,MACA;AAAA,IACR,aACE,qBAAqB,UACjB,0KACA,qBAAqB,SACnB,4IACA;AAAA,IACR,SAAS;AAAA,MACP,yBAAyB,aAAa;AAAA,MACtC,wBAAwB,mBAAmB;AAAA,MAC3C,wBAAwB,mBAAmB;AAAA,MAC3C,8BAA8B,wBAAwB;AAAA,MACtD;AAAA,IACF;AAAA,EACF,CAAC;AAKD,SAAO,KAAK,0BAA0B,MAAM,CAAC;AAK7C,MAAI,qBAAqE;AAAA,IACvE,QAAQ,EAAE,UAAU,GAAG,YAAY,GAAG,MAAM,EAAE;AAAA,IAC9C,OAAO;AAAA,EACT;AACA,MAAI,mBAAmB;AACvB,MAAI,yBAAmC,CAAC;AACxC,MAAI;AAMF,UAAM,CAAC,KAAK,UAAU,IAAI,IAAI,MAAM,QAAQ,WAAW;AAAA,MACrD,QAAQ,gBAAgB;AAAA,MACxB,QAAQ,qBAAqB;AAAA,MAC7B,QAAQ,oBAAoB;AAAA,IAC9B,CAAC;AACD,UAAM,MAAkD,CAAC;AACzD,QAAI,IAAI,WAAW,YAAa,KAAI,KAAK,GAAG,IAAI,KAAK;AAAA,QAChD,wBAAuB,KAAK,KAAK;AACtC,QAAI,SAAS,WAAW,YAAa,KAAI,KAAK,GAAG,SAAS,KAAK;AAAA,QAC1D,wBAAuB,KAAK,UAAU;AAC3C,QAAI,KAAK,WAAW,YAAa,KAAI,KAAK,GAAG,KAAK,KAAK;AAAA,QAClD,wBAAuB,KAAK,MAAM;AACvC,yBAAqB,4BAA4B,GAAG;AAAA,EACtD,QAAQ;AACN,uBAAmB;AAAA,EACrB;AACA,QAAM,KAAK,mBAAmB;AAC9B,QAAM,kBAAkB,mBAAmB;AAC3C,QAAM,oBAAoB,GAAG,WAAW,GAAG;AAC3C,QAAM,gBAAgB,uBAAuB,SAAS,IAClD,cAAc,uBAAuB,KAAK,GAAG,CAAC,sBAC9C;AACJ,SAAO,KAAK;AAAA,IACV,KAAK;AAAA,IACL,QAAQ,CAAC,oBAAoB,uBAAuB,SAAS,IACzD,SACA,oBAAoB,IAClB,SACA,sBAAsB,IACpB,SACA;AAAA,IACR,SAAS,CAAC,mBACN,qDACA,oBAAoB,IAClB,+DACA,wBAAwB,GAAG,QAAQ,cAAc,GAAG,UAAU,gBAAgB,GAAG,IAAI,UAAU,eAAe,WAAW,aAAa;AAAA,IAC5I,aAAa,CAAC,mBACV,SACA,uBAAuB,SAAS,IAC9B,iCAAiC,uBAAuB,KAAK,IAAI,CAAC,wCAClE,sBAAsB,KAAK,kBAAkB,IAC3C,wGACA;AAAA,IACR,SAAS,EAAE,kBAAkB,IAAI,OAAO,iBAAiB,cAAc,uBAAuB,SAAS,IAAI,yBAAyB,OAAU;AAAA,EAChJ,CAAC;AAED,QAAM,mBACJ,sBAAsB,mBAAmB,mBACzC,sBAAsB,aAAa,mBACnC,sBAAsB,sBAAsB;AAC9C,QAAM,eACJ,sBAAsB,mBAAmB,UACzC,sBAAsB,aAAa,UACnC,sBAAsB,sBAAsB;AAC9C,SAAO,KAAK;AAAA,IACV,KAAK;AAAA,IACL,QAAQ,CAAC,sBAAsB,UAC3B,SACA,eACE,OACA;AAAA,IACN,SAAS,CAAC,sBAAsB,UAC5B,uCACA,eACE,2CAA2C,gBAAgB,qBAC3D;AAAA,IACN,aAAa,CAAC,sBAAsB,UAChC,kGACA,eACE,SACA;AAAA,IACN,SAAS;AAAA,EACX,CAAC;AAED,QAAM,qBAAqB,OAAO,iBAAiB,YAAY;AAI/D,QAAM,eAAe,OAAO,iBAAiB;AAC7C,QAAM,sBACH,OAAO,iBAAiB,YAAY,aAAa,SAAS,KAC1D,iBAAiB,QAChB,OAAO,iBAAiB,YACxB,OAAQ,aAAsC,WAAW;AAC7D,SAAO,KAAK;AAAA,IACV,KAAK;AAAA,IACL,QAAQ,CAAC,qBACL,SACA,sBACA,OACA;AAAA,IACJ,SAAS,CAAC,qBACN,0CACA,sBACA,2DACA;AAAA,IACJ,aAAa,CAAC,qBACV,sDACA,sBACA,SACA;AAAA,EACN,CAAC;AAED,QAAM,WAAW,OAAO,aAAa,cACjC,MAAM,mBAAmB;AAAA,IACvB,cAAc,OAAO;AAAA,IACrB,OAAO,OAAO,YAAY;AAAA,IAC1B,aAAa,OAAO,YAAY;AAAA,IAChC,WAAW,OAAO,YAAY;AAAA,EAChC,CAAC,IACD,CAAC;AACL,SAAO,KAAK,yBAAyB,UAAU,OAAO,WAAW,CAAC;AAQlE,SAAO,KAAK,MAAM,mCAAmC,OAAO,CAAC;AAM7D,SAAO;AAAA,IACL,MAAM,oCAAoC,SAAS,MAAM;AAAA,EAC3D;AAaA,SAAO,KAAK,MAAM,iCAAiC,SAAS,MAAM,CAAC;AAKnE,SAAO,KAAK,MAAM,8BAA8B,MAAM,CAAC;AAKvD,SAAO,KAAK,MAAM,0BAA0B,QAAQ,aAAa,OAAO,CAAC;AAEzE,SAAO,KAAK,MAAM,sBAAsB,QAAQ,OAAO,CAAC;AACxD,SAAO,KAAK,MAAM,4BAA4B,QAAQ,SAAS,QAAQ,aAAa,MAAM,CAAC;AAC3F,SAAO,KAAK,MAAM,yBAAyB,QAAQ,CAAC,QAAQ,IAAI,eAAe,GAAG,CAAC,CAAC;AAKpF,SAAO,KAAK,6BAA6B,MAAM,CAAC;AAShD,SAAO,KAAK,MAAM,+BAA+B,OAAO,SAAS,CAAC;AAOlE,QAAM,6BAA6B,MAAM,oCAAoC,MAAM;AACnF,SAAO,KAAK;AAAA,IACV,KAAK;AAAA,IACL,QAAQ,2BAA2B,cAAc,IAAI,SAAS;AAAA,IAC9D,SACE,2BAA2B,aAAa,KAAK,2BAA2B,gBAAgB,IACpF,0EACA,GAAG,2BAA2B,QAAQ,mCACrC,2BAA2B,cAAc,IACtC,KAAK,2BAA2B,WAAW,sBAAsB,2BAA2B,KAAK,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,YACnI,MACJ;AAAA,IACN,aACE,2BAA2B,cAAc,IACrC,mEACA;AAAA,IACN,SAAS;AAAA,EACX,CAAC;AAMD,SAAO,KAAK,MAAM,yBAAyB,QAAQ,aAAa,OAAO,CAAC;AAExE,QAAM,UAAU,OAAO;AAAA,IACrB,CAAC,KAAK,UAAU;AACd,UAAI,MAAM,MAAM,KAAK;AACrB,aAAO;AAAA,IACT;AAAA,IACA,EAAE,IAAI,GAAG,MAAM,GAAG,OAAO,EAAE;AAAA,EAC7B;AAEA,SAAO;AAAA,IACL,eAAe;AAAA,IACf,aAAa,IAAI,YAAY;AAAA,IAC7B,IAAI,QAAQ,UAAU;AAAA,IACtB;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,EACF;AACF;AAgBA,IAAM,mCACJ,oBAAI,IAAI,CAAC,MAAM,CAAC;AAmBlB,eAAsB,mCACpB,SAC8B;AAC9B,MAAI,SAAS;AACb,MAAI,eAAe;AACnB,MAAI,aAAa;AACjB,MAAI;AACF,UAAM,WAAW,MAAM,QAAQ,gBAAgB;AAC/C,eAAW,UAAU,UAAU;AAC7B,UAAI,CAAC,iCAAiC,IAAI,OAAO,YAAY,QAAQ,GAAG;AACtE,sBAAc;AACd;AAAA,MACF;AACA,YAAM,EAAE,YAAY,QAAQ,IAAI,OAAO;AACvC,UAAI,eAAe,UAAa,YAAY,QAAW;AACrD,kBAAU;AAAA,MACZ,OAAO;AACL,wBAAgB;AAAA,MAClB;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,aAAa;AAAA,MACb,SAAS,EAAE,OAAO,OAAO,GAAG,EAAE;AAAA,IAChC;AAAA,EACF;AAEA,QAAM,QAAQ,SAAS;AACvB,SAAO;AAAA,IACL,KAAK;AAAA,IACL,QAAQ;AAAA,IACR,SACE,UAAU,IACN,6GACA,GAAG,MAAM,OAAO,KAAK,yDAAyD,YAAY;AAAA,IAChG,SAAS,EAAE,QAAQ,cAAc,OAAO,WAAW;AAAA,EACrD;AACF;AAcA,eAAsB,oCACpB,SACA,QAC8B;AAC9B,QAAM,oBAAoB;AAQ1B,MAAI,OAAO,kBAAkB,6BAA6B,YAAY;AACpE,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,SAAS,EAAE,WAAW,MAAM;AAAA,IAC9B;AAAA,EACF;AAEA,MAAI;AACF,UAAM,OAAO,MAAM;AAAA,MACjB,OAAO,SACL,kBAAkB,yBAA0B,EAAE,OAAO,KAAK,MAAM,CAAC;AAAA,MACnE,EAAE,OAAO,IAAI;AAAA,IACf;AAEA,QAAI,KAAK,UAAU,GAAG;AACpB,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS,gCAAgC,MAAM,EAAE,wBAC7C,wEACA;AAAA,QACJ,SAAS;AAAA,UACP,SAAS,gCAAgC,MAAM,EAAE;AAAA,UACjD,cAAc;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAEA,UAAM,MAAM,CAAC,WAAmB,QAAQ,KAAK,QAAQ,CAAC;AACtD,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS,yBAAyB,KAAK,KAAK,QAAQ,CAAC,CAAC,YAAY,KAAK,OAAO,QAAQ,CAAC,CAAC,SAAS,KAAK,IAAI,QAAQ,CAAC,CAAC,eAAe,IAAI,KAAK,aAAa,CAAC,UAAU,KAAK,KAAK,qBAAqB,KAAK,oBAAoB,OAAO,uBAAuB;AAAA,MAC1P,SAAS;AAAA,QACP,SAAS,gCAAgC,MAAM,EAAE;AAAA,QACjD,cAAc;AAAA,MAChB;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,aACE;AAAA,MACF,SAAS,EAAE,OAAO,OAAO,GAAG,EAAE;AAAA,IAChC;AAAA,EACF;AACF;AAcA,eAAe,8BACb,QAI8B;AAE9B,QAAM,EAAE,yBAAyB,IAAI,MAAM,OAAO,gCAAmC;AACrF,QAAM,EAAE,sBAAsB,IAAI;AAClC,QAAM,UAAU,0BAA0B;AAC1C,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,aAAa;AAAA,MACb,SAAS,EAAE,SAAS,MAAM;AAAA,IAC5B;AAAA,EACF;AAEA,QAAM,SAAS,MAAM,yBAAyB,OAAO,SAAS;AAC9D,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,aACE;AAAA,MACF,SAAS,EAAE,SAAS,MAAM,SAAS,MAAM,WAAW,OAAO,wBAAwB;AAAA,IACrF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,KAAK;AAAA,IACL,QAAQ;AAAA,IACR,SACE,gCAAgC,OAAO,KAAK,KACxC,OAAO,YAAY,IAAI,OAAO,UAAU,mBACzC,OAAO,6BAA6B;AAAA,IACzC,SAAS;AAAA,MACP,SAAS;AAAA,MACT,SAAS,OAAO;AAAA,MAChB,YAAY,OAAO;AAAA,MACnB,YAAY,OAAO;AAAA,MACnB,cAAc,OAAO;AAAA,MACrB,+BAA+B,OAAO;AAAA,MACtC,oBAAoB,OAAO;AAAA,MAC3B,WAAW,OAAO;AAAA,IACpB;AAAA,EACF;AACF;AAmBA,eAAsB,0BACpB,SAC8B;AAC9B,MAAI;AACF,UAAM,EAAE,eAAe,IAAI,MAAM,OAAO,0BAA6B;AACrE,UAAM,UAAU,MAAM,eAAe,OAAO;AAG5C,UAAM,aAAc,QAAwC,OAAO;AACnE,UAAM,cAAc,WAAW,SAAS,IACpC,KAAK,KAAK,YAAY,SAAS,8BAA8B,IAC7D;AACJ,QAAI,mBAAmB;AACvB,UAAM,kBAA0C,CAAC;AACjD,UAAM,iBAAiB,KAAK,IAAI,IAAI,IAAI;AAExC,QAAI,aAAa;AACf,UAAI;AACF,cAAM,EAAE,UAAAA,UAAS,IAAI,MAAM,OAAO,aAAkB;AACpD,cAAM,MAAM,MAAMA,UAAS,aAAa,OAAO;AAC/C,mBAAW,QAAQ,IAAI,MAAM,IAAI,GAAG;AAClC,gBAAM,UAAU,KAAK,KAAK;AAC1B,cAAI,QAAQ,WAAW,EAAG;AAC1B,cAAI;AACF,kBAAM,QAAQ,KAAK,MAAM,OAAO;AAOhC,kBAAM,OAAO,MAAM,KAAK,KAAK,MAAM,MAAM,EAAE,IAAI;AAC/C,gBAAI,OAAO,SAAS,IAAI,KAAK,QAAQ,kBAAkB,MAAM,YAAY,MAAM;AAC7E,kCAAoB;AACpB,kBAAI,MAAM,aAAa,SAAS,MAAM,WAAW,UAAU,OAAO,MAAM,WAAW,UAAU;AAC3F,sBAAM,SAAS,MAAM;AACrB,gCAAgB,MAAM,KAAK,gBAAgB,MAAM,KAAK,KAAK;AAAA,cAC7D;AAAA,YACF;AAAA,UACF,QAAQ;AAAA,UAER;AAAA,QACF;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,UAAM,qBAAqB,OAAO,QAAQ,eAAe,EACtD,KAAK,CAAC,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EACtD,MAAM,GAAG,CAAC,EACV,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,EAAE,QAAQ,MAAM,EAAE;AAE/C,UAAM,cAAc,OAAO,QAAQ,QAAQ,QAAQ,EAChD,KAAK,CAAC,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EACtD,MAAM,GAAG,CAAC,EACV,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,EAC5B,KAAK,IAAI;AAEZ,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SACE,0BAA0B,QAAQ,OAAO,GAAG,UAAU,QAAQ,OAAO,IAAI,MACxE,QAAQ,iBAAiB,IAAI,eAAe,QAAQ,cAAc,KAAK,MACxE,YAAY,QAAQ,KAAK,OACxB,mBAAmB,IAAI,4BAA4B,gBAAgB,MAAM;AAAA,MAC5E,SAAS;AAAA,QACP,OAAO,QAAQ;AAAA,QACf,QAAQ,QAAQ;AAAA,QAChB,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ;AAAA,QACxB,eAAe;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,SAAS,EAAE,OAAO,OAAO,GAAG,EAAE;AAAA,IAChC;AAAA,EACF;AACF;AAaA,eAAsB,sBACpB,QACA,UAA0B,IAAI,eAAe,OAAO,SAAS,GAC/B;AAC9B,QAAM,SAA6B,OAAO;AAG1C,QAAM,OAAO,MAAM,QAAQ,SAAS;AAEpC,MAAI,mBAAkC;AACtC,MAAI,0BAAyC;AAC7C,MAAI;AAGF,UAAM,UAAU,KAAK,KAAK,OAAO,WAAW,SAAS,qBAAqB,MAAM;AAChF,UAAM,UAAU,MAAM,QAAQ,OAAO,GAAG,KAAK,EAAE,QAAQ;AACvD,QAAI,OAAO,SAAS,GAAG;AACrB,YAAM,cAAc,OAAO,CAAC;AAC5B,YAAM,eAAe,KAAK;AAAA,QACxB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,YAAM,MAAM,MAAM,SAAS,cAAc,OAAO;AAChD,YAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,UAAI,OAAO,OAAO,cAAc,YAAY,OAAO,UAAU,SAAS,GAAG;AACvE,2BAAmB,OAAO;AAAA,MAC5B;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,QAAI,CAAC,mBAAmB,KAAK,GAAG;AAC9B,gCAA0B,kDAAkD,mBAAmB,KAAK,CAAC;AAAA,IACvG;AAAA,EACF;AAGA,QAAM,aAAuB;AAAA,IAC3B,uBAAuB,OAAO,WAAW,OAAO,eAAe,OAAO,WAAW,SAAS,iBAAiB,OAAO,WAAW,oBAAoB,gBAAgB,OAAO,WAAW,mBAAmB,kBAAkB,OAAO,WAAW,qBAAqB,iBAAiB,OAAO,WAAW,kBAAkB,aAAa,KAAK,oBAAoB,OAAO;AAAA,IACjW,gBAAgB,OAAO,IAAI,OAAO,eAAe,OAAO,IAAI,SAAS,gBAAgB,OAAO,IAAI,mBAAmB,gBAAgB,OAAO,IAAI,cAAc,eAAe,OAAO,IAAI,SAAS,mBAAmB,OAAO,IAAI,aAAa,aAAa,KAAK,uBAAuB,OAAO;AAAA,IAC1R,sBAAsB,OAAO,UAAU,OAAO,eAAe,OAAO,UAAU,SAAS,gBAAgB,OAAO,UAAU,iBAAiB,0BAA0B,OAAO,UAAU,oBAAoB,aAAa,oBAAoB,OAAO;AAAA,EAClP;AAEA,SAAO;AAAA,IACL,KAAK;AAAA,IACL,QAAQ,0BAA0B,SAAS;AAAA,IAC3C,SAAS,2BAA2B,WAAW,KAAK,IAAI,CAAC,GAAG,0BAA0B,KAAK,uBAAuB,KAAK,EAAE;AAAA,IACzH,aAAa,0BACT,mGACA;AAAA,IACJ,SAAS;AAAA,MACP,YAAY;AAAA,QACV,SAAS,OAAO,WAAW;AAAA,QAC3B,WAAW,OAAO,WAAW;AAAA,QAC7B,sBAAsB,OAAO,WAAW;AAAA,QACxC,qBAAqB,OAAO,WAAW;AAAA,QACvC,uBAAuB,OAAO,WAAW;AAAA,QACzC,oBAAoB,OAAO,WAAW;AAAA,QACtC,SAAS,KAAK,oBAAoB;AAAA,MACpC;AAAA,MACA,KAAK;AAAA,QACH,SAAS,OAAO,IAAI;AAAA,QACpB,WAAW,OAAO,IAAI;AAAA,QACtB,qBAAqB,OAAO,IAAI;AAAA,QAChC,gBAAgB,OAAO,IAAI;AAAA,QAC3B,WAAW,OAAO,IAAI;AAAA,QACtB,eAAe,OAAO,IAAI;AAAA,QAC1B,SAAS,KAAK,uBAAuB;AAAA,MACvC;AAAA,MACA,WAAW;AAAA,QACT,SAAS,OAAO,UAAU;AAAA,QAC1B,WAAW,OAAO,UAAU;AAAA,QAC5B,mBAAmB,OAAO,UAAU;AAAA,QACpC,sBAAsB,OAAO,UAAU;AAAA,QACvC,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,6BACP,QAaqB;AAErB,QAAM,aAAa,+BAA+B,MAAM;AACxD,QAAM,gBAAgB,WAAW;AACjC,QAAM,iBAAiB,WAAW;AAElC,MAAI,CAAC,iBAAiB,CAAC,gBAAgB;AACrC,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,aAAa;AAAA,MACb,SAAS;AAAA,QACP,eAAe;AAAA,QACf,yBAAyB;AAAA,MAC3B;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAmC;AAAA,IACvC;AAAA,IACA,yBAAyB;AAAA,EAC3B;AAEA,MAAI,eAAe;AACjB,YAAQ,eAAe;AAAA,MACrB,UAAU,OAAO;AAAA,MACjB,WAAW,OAAO;AAAA,MAClB,WAAW,OAAO;AAAA,IACpB;AAAA,EACF;AAEA,MAAI,gBAAgB;AAClB,YAAQ,gBAAgB;AAAA,MACtB,UAAU,OAAO;AAAA,MACjB,kBAAkB,OAAO;AAAA,MACzB,oBAAoB,OAAO;AAAA,MAC3B,sBAAsB,OAAO;AAAA,MAC7B,gBAAgB,OAAO;AAAA,IACzB;AAAA,EACF;AAEA,SAAO;AAAA,IACL,KAAK;AAAA,IACL,QAAQ;AAAA,IACR,SAAS,gDAAgD,gBAAgB,WAAW,EAAE,GAAG,iBAAiB,iBAAiB,OAAO,EAAE,GAAG,iBAAiB,sBAAsB,EAAE;AAAA,IAChL,SAAS,EAAE,GAAG,SAAS,YAAY,KAAK;AAAA,EAC1C;AACF;AAcA,eAAsB,+BACpB,WAC8B;AAC9B,MAAI;AACF,UAAM,QAAQ,MAAM,sBAAsB,SAAS;AACnD,QAAI,MAAM,UAAU,GAAG;AACrB,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,SAAS,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,gBAAgB,KAAK;AAAA,MAC5E;AAAA,IACF;AACA,UAAM,aAAc,MAAM,SAAS,MAAM,QAAS,KAAK,QAAQ,CAAC;AAChE,UAAM,aAAc,MAAM,SAAS,MAAM,QAAS,KAAK,QAAQ,CAAC;AAChE,UAAM,YAAa,MAAM,QAAQ,MAAM,QAAS,KAAK,QAAQ,CAAC;AAC9D,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS,GAAG,MAAM,KAAK,kCAAkC,SAAS,aAAa,SAAS,YAAY,QAAQ,qBAAqB,MAAM,UAAU,SAAS;AAAA,MAC1J,SAAS;AAAA,QACP,OAAO,MAAM;AAAA,QACb,QAAQ,MAAM;AAAA,QACd,QAAQ,MAAM;AAAA,QACd,OAAO,MAAM;AAAA,QACb,mBAAmB,MAAM;AAAA,QACzB,WAAW,MAAM;AAAA,QACjB,eAAe,MAAM;AAAA,QACrB,iBAAiB,MAAM,WAAW;AAAA,QAClC,gBAAgB,MAAM,UAAU;AAAA,MAClC;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,aAAa;AAAA,MACb,SAAS,EAAE,OAAO,OAAO,GAAG,EAAE;AAAA,IAChC;AAAA,EACF;AACF;AAkBA,eAAsB,yBACpB,SAC8B;AAC9B,MAAI;AACF,UAAM,QAAQ,MAAM,QAAQ,kBAAkB;AAC9C,QAAI,UAAU,MAAM;AAClB,aAAO;AAAA,QACL,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,SAAS,EAAE,SAAS,MAAM;AAAA,MAC5B;AAAA,IACF;AACA,UAAM,YAAY,MAAM,iBAAiB;AACzC,UAAM,QAAQ;AAAA,MACZ,GAAG,MAAM,KAAK;AAAA,MACd,GAAI,MAAM,UAAU,IAAI,CAAC,GAAG,MAAM,OAAO,UAAU,IAAI,CAAC;AAAA,IAC1D;AACA,QAAI,MAAM,cAAc;AACtB,YAAM,KAAK,eAAe,MAAM,YAAY,EAAE;AAAA,IAChD;AACA,QAAI,WAAW;AACb,YAAM,KAAK,GAAG,MAAM,cAAc,4BAA4B;AAAA,IAChE;AACA,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ,YAAY,SAAS;AAAA,MAC7B,SACE,gCAAgC,MAAM,KAAK,IAAI,CAAC,QAC/C,YACG,gEACA;AAAA,MACN,aAAa,YACT,6DACA;AAAA,MACJ,SAAS;AAAA,QACP,SAAS;AAAA,QACT,OAAO,MAAM;AAAA,QACb,SAAS,MAAM;AAAA,QACf,cAAc,MAAM;AAAA,QACpB,gBAAgB,MAAM;AAAA,QACtB,QAAQ,MAAM;AAAA,MAChB;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,aAAa;AAAA,MACb,SAAS,EAAE,OAAO,OAAO,GAAG,EAAE;AAAA,IAChC;AAAA,EACF;AACF;AAEA,eAAsB,iCACpB,SACA,QAC8B;AAC9B,MAAI;AACJ,MAAI;AACF,aAAS,MAAM,gCAAgC;AAAA,MAC7C;AAAA,MACA,WAAW,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,MAKlB,YAAY,OAAO;AAAA,IACrB,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,aAAa;AAAA,MACb,SAAS,EAAE,OAAO,OAAO,GAAG,EAAE;AAAA,IAChC;AAAA,EACF;AAEA,MAAI,OAAO,OAAO,WAAW,GAAG;AAC9B,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SACE,OAAO,mBAAmB,IACtB,sDACA,GAAG,OAAO,cAAc;AAAA,MAC9B,SAAS;AAAA,IACX;AAAA,EACF;AAEA,SAAO;AAAA,IACL,KAAK;AAAA,IACL,QAAQ;AAAA,IACR,SAAS,GAAG,OAAO,OAAO,MAAM,gEAAgE,OAAO,cAAc;AAAA,IACrH,aACE;AAAA,IACF,SAAS;AAAA,EACX;AACF;AAEA,SAAS,iBAAiB,QAAoB,KAAmB;AAC/D,QAAM,UAAU,KAAK,MAAM,OAAO,YAAY,WAAW,EAAE;AAC3D,MAAI,CAAC,OAAO,SAAS,OAAO,EAAG,QAAO;AACtC,QAAM,UAAU,KAAK,IAAI,GAAG,KAAK,OAAO,IAAI,QAAQ,IAAI,WAAW,KAAU,CAAC;AAC9E,MAAI,UAAU,EAAG,QAAO;AACxB,MAAI,UAAU,GAAI,QAAO;AACzB,MAAI,UAAU,GAAI,QAAO;AACzB,SAAO;AACT;AAEA,eAAe,QAAQ,YAAqC;AAC1D,MAAI;AACF,UAAM,OAAO,MAAM,KAAK,UAAU;AAClC,QAAI,KAAK,OAAO,EAAG,QAAO,KAAK;AAC/B,QAAI,CAAC,KAAK,YAAY,EAAG,QAAO;AAAA,EAClC,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,MAAI,QAAQ;AACZ,MAAI;AACJ,MAAI;AACF,cAAU,MAAM,QAAQ,YAAY,EAAE,eAAe,KAAK,CAAC;AAAA,EAC7D,QAAQ;AACN,WAAO;AAAA,EACT;AACA,aAAW,SAAS,SAAS;AAC3B,aAAS,MAAM,QAAQ,KAAK,KAAK,YAAY,MAAM,IAAI,CAAC;AAAA,EAC1D;AACA,SAAO;AACT;AAEA,eAAe,0BAA0B,WAAmF;AAC1H,QAAM,WAAW;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,aAAqC,CAAC;AAC5C,MAAI,QAAQ;AACZ,aAAW,QAAQ,UAAU;AAC3B,UAAM,OAAO,MAAM,QAAQ,KAAK,KAAK,WAAW,IAAI,CAAC;AACrD,QAAI,OAAO,GAAG;AACZ,iBAAW,IAAI,IAAI;AACnB,eAAS;AAAA,IACX;AAAA,EACF;AACA,SAAO,EAAE,OAAO,WAAW;AAC7B;AAEA,eAAsB,qBAAqB,SAAqE;AAC9G,QAAM,MAAM,QAAQ,OAAO,oBAAI,KAAK;AACpC,QAAM,SAAS,QAAQ,aAAa;AACpC,QAAM,mBAAmB,MAAM,eAAe,EAAE,OAAO,CAAC;AACxD,QAAM,oBAAoB,oBAAI,IAAoD;AAClF,aAAW,SAAS,kBAAkB;AACpC,QAAI,CAAC,kBAAkB,IAAI,MAAM,OAAO,GAAG;AACzC,wBAAkB,IAAI,MAAM,SAAS,EAAE,WAAW,MAAM,WAAW,SAAS,MAAM,QAAQ,CAAC;AAAA,IAC7F;AAAA,EACF;AACA,QAAM,aAAqC,CAAC;AAC5C,QAAM,WAAmC,CAAC;AAC1C,QAAM,WAAmC;AAAA,IACvC,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,UAAU;AAAA,IACV,YAAY;AAAA,IACZ,SAAS;AAAA,EACX;AACA,QAAM,aAAkD,CAAC;AACzD,MAAI,gBAAgB;AACpB,MAAI,gBAAgB;AACpB,MAAI,WAAW;AACf,MAAI,gBAAgB;AACpB,MAAI,cAAc;AAClB,MAAI,WAAW;AAEf,aAAW,SAAS,kBAAkB,OAAO,GAAG;AAO9C,UAAM,UAAU,IAAI,eAAe,MAAM,SAAS,QAAW,KAAK;AAClE,UAAM,WAAW,MAAM,QAAQ,gBAAgB;AAC/C,UAAM,WAAW,MAAM,QAAQ,mBAAmB;AAClD,eAAW,KAAK;AAAA,MACd,WAAW,MAAM;AAAA,MACjB,aAAa,SAAS;AAAA,MACtB,aAAa,SAAS;AAAA,IACxB,CAAC;AACD,qBAAiB,SAAS;AAC1B,qBAAiB,SAAS;AAC1B,eAAW,UAAU,UAAU;AAC7B,YAAM,WAAW,OAAO,YAAY;AACpC,iBAAW,QAAQ,KAAK,WAAW,QAAQ,KAAK,KAAK;AACrD,YAAM,SAAS,OAAO,YAAY,UAAU;AAC5C,eAAS,MAAM,KAAK,SAAS,MAAM,KAAK,KAAK;AAC7C,eAAS,iBAAiB,QAAQ,GAAG,CAAC,KAAK;AAC3C,UAAI,WAAW,WAAY,aAAY;AACvC,UAAI,WAAW,iBAAkB,kBAAiB;AAClD,UAAI,WAAW,cAAe,gBAAe;AAC7C,UAAI,WAAW,WAAY,aAAY;AAAA,IACzC;AAAA,EACF;AAEA,QAAM,iBAAiB,IAAI,eAAe,OAAO,SAAS;AAC1D,QAAM,UAAU,MAAM,eAAe,YAAY;AACjD,QAAM,YAAY,MAAM,0BAA0B,OAAO,SAAS;AAClE,QAAM,eAAe,MAAM,yBAAyB,OAAO,SAAS,GAAG,CAAC;AACxE,MAAI,cAAc;AAClB,MAAI,aAAa;AACf,QAAI;AACF,qBAAe,MAAM,gCAAgC,OAAO,WAAW,WAAW,GAAG,YAAY;AAAA,IACnG,QAAQ;AACN,oBAAc;AAAA,IAChB;AAAA,EACF;AACA,QAAM,oBAAoB,MAAM,QAAQ,aAAa,6BAA6B,UAAU;AAC5F,QAAM,wBAAwB,MAAM,+BAA+B,MAAM;AAEzE,SAAO;AAAA,IACL,eAAe;AAAA,IACf,aAAa,IAAI,YAAY;AAAA,IAC7B,WAAW,OAAO;AAAA,IAClB,QAAQ;AAAA,MACN,UAAU;AAAA,MACV,UAAU;AAAA,MACV,YAAY,iBAAiB;AAAA,MAC7B;AAAA,MACA,cAAc,UAAU;AAAA,IAC1B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA,MACP,QAAQ,QAAQ,SAAS;AAAA,MACzB,OAAO,QAAQ;AAAA,MACf,OAAO,QAAQ,SAAS,IAAI,QAAQ,MAAM,IAAI,EAAE,SAAS;AAAA,IAC3D;AAAA,IACA,kBAAkB;AAAA,IAClB,iBAAiB;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,mBAAmB;AAAA,MACjB,SAAS,kBAAkB;AAAA,MAC3B,SAAS,kBAAkB;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,eAAe,kBAAkB;AAAA,MACjC,cAAc,kBAAkB;AAAA,IAClC;AAAA,IACA,iBAAiB;AAAA,MACf,SAAS,sBAAsB;AAAA,MAC/B,oBAAoB,sBAAsB;AAAA,MAC1C,cAAc,sBAAsB;AAAA,MACpC,uBAAuB,sBAAsB;AAAA,IAC/C;AAAA,EACF;AACF;AAEA,eAAsB,mBAAmB,SAAiE;AACxG,QAAM,MAAM,QAAQ,OAAO,oBAAI,KAAK;AACpC,QAAM,SAAS,MAAM,qBAAqB;AAAA,IACxC,WAAW,QAAQ,OAAO;AAAA,IAC1B,cAAc,QAAQ,OAAO;AAAA,IAC7B,SAAS,wBAAwB,QAAQ,MAAM,EAAE;AAAA,IACjD,mBAAmB,wBAAwB,QAAQ,MAAM,EAAE;AAAA,IAC3D,0BAA0B,wBAAwB,QAAQ,MAAM,EAAE;AAAA,IAClE,2BAA2B,wBAAwB,QAAQ,MAAM,EAAE;AAAA,EACrE,CAAC;AAED,MAAI,QAAQ,kBAAkB,QAAQ,YAAY;AAChD,UAAM,WAAW,MAAM,2BAA2B;AAAA,MAChD,WAAW,QAAQ,OAAO;AAAA,MAC1B,cAAc,QAAQ,OAAO;AAAA,MAC7B,0BAA0B,wBAAwB,QAAQ,MAAM,EAAE;AAAA,MAClE,YAAY,QAAQ;AAAA,MACpB,OAAO,QAAQ;AAAA,MACf,QAAQ,QAAQ;AAAA,MAChB,WAAW,QAAQ;AAAA,IACrB,CAAC;AACD,WAAO;AAAA,MACL,eAAe;AAAA,MACf,aAAa,IAAI,YAAY;AAAA,MAC7B,MAAM;AAAA,MACN;AAAA,MACA,UAAU;AAAA,QACR,YAAY,SAAS;AAAA,QACrB,YAAY,SAAS,SAAS;AAAA,MAChC;AAAA,IACF;AAAA,EACF;AAEA,MAAI,QAAQ,oBAAoB,QAAQ,uBAAuB;AAC7D,UAAM,SAAS,MAAM,uBAAuB;AAAA,MAC1C,kBAAkB,QAAQ;AAAA,MAC1B,uBAAuB,QAAQ;AAAA,IACjC,CAAC;AACD,WAAO;AAAA,MACL,eAAe;AAAA,MACf,aAAa,IAAI,YAAY;AAAA,MAC7B,MAAM;AAAA,MACN;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,MAAI,QAAQ,YAAY;AACtB,UAAM,iBAAiB,MAAM,2BAA2B;AAAA,MACtD,WAAW,QAAQ,OAAO;AAAA,MAC1B,cAAc,QAAQ,OAAO;AAAA,MAC7B,+BAA+B,wBAAwB,QAAQ,MAAM,EAAE;AAAA,MACvE,YAAY,QAAQ;AAAA,IACtB,CAAC;AACD,WAAO;AAAA,MACL,eAAe;AAAA,MACf,aAAa,IAAI,YAAY;AAAA,MAC7B,MAAM;AAAA,MACN;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,MAAI,QAAQ,cAAc;AACxB,UAAM,WAAW,MAAM,0BAA0B,QAAQ,cAAc;AAAA,MACrE,2BAA2B,wBAAwB,QAAQ,MAAM,EAAE;AAAA,IACrE,CAAC;AACD,WAAO;AAAA,MACL,eAAe;AAAA,MACf,aAAa,IAAI,YAAY;AAAA,MAC7B,MAAM;AAAA,MACN;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,eAAe;AAAA,IACf,aAAa,IAAI,YAAY;AAAA,IAC7B,MAAM;AAAA,IACN;AAAA,EACF;AACF;AAEA,eAAsB,kBAAkB,SAA+D;AACrG,QAAM,MAAM,QAAQ,OAAO,oBAAI,KAAK;AACpC,QAAM,SAAS,QAAQ,WAAW,QAAQ,QAAQ,UAAU;AAC5D,QAAM,eAAe,MAAM,wBAAwB,EAAE,WAAW,QAAQ,OAAO,UAAU,CAAC;AAC1F,QAAM,oBAAoB,kBAAkB;AAAA,IAC1C,QAAQ;AAAA,IACR;AAAA,IACA,wBAAwB,QAAQ;AAAA,IAChC,iBAAiB,QAAQ;AAAA,EAC3B,CAAC;AACD,QAAM,qBAAqB,MAAM,mBAAmB;AAAA,IAClD,MAAM;AAAA,EACR,CAAC;AAED,QAAM,YAAY,qCAAqC,QAAQ,MAAM;AACrE,QAAM,cAAc,MAAM,mBAAmB,QAAQ,OAAO,WAAW;AAAA,IACrE,oBAAoB,UAAU;AAAA,IAC9B,kBAAkB,UAAU;AAAA,IAC5B,oBAAoB,UAAU;AAAA,IAC9B,uBAAuB;AAAA,EACzB,CAAC;AACD,SAAO;AAAA,IACL,eAAe;AAAA,IACf,aAAa,IAAI,YAAY;AAAA,IAC7B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":["readFile"]}

package/dist/chunk-EXM2Q555.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/namespaces/storage.ts"],"sourcesContent":["import { resolveNamespaceCapabilities, resolveRecallAuxiliaryCapabilities } from \"../capabilities.js\";\nimport path from \"node:path\";\nimport { access, lstat, readdir } from \"node:fs/promises\";\nimport { isSafeRouteNamespace } from \"../routing/engine.js\";\nimport { StorageManager } from \"../storage.js\";\nimport { keyring, secureStoreDir } from \"../secure-store/index.js\";\nimport type { PluginConfig } from \"../types.js\";\nimport { ALL_CATEGORY_DIRS } from \"../utils/category-dir.js\";\nimport { namespaceIdentityToken, normalizeNamespaceIdentity } from \"./identity.js\";\nimport type { NamespaceCatalog } from \"./catalog.js\";\nimport { MutationSerializer } from \"../utils/serialize-mutations.js\";\n\nasync function exists(p: string): Promise<boolean> {\n  try {\n    await access(p);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nasync function hasStoredEntries(p: string): Promise<boolean> {\n  try {\n    const entry = await lstat(p);\n    if (entry.isSymbolicLink()) return true;\n    if (!entry.isDirectory()) return true;\n    const children = await readdir(p, { withFileTypes: true });\n    for (const child of children) {\n      const childPath = path.join(p, child.name);\n      if (child.isSymbolicLink() || child.isFile()) return true;\n      if (child.isDirectory() && (await hasStoredEntries(childPath))) return true;\n    }\n    return false;\n  } catch {\n    return false;\n  }\n}\n\n// Build a per-namespace directory under `<memoryDir>/namespaces` and assert the\n// resolved path stays inside that base. Namespace identifiers can originate from\n// operator config (config.defaultNamespace) and request-derived routing, so this\n// containment check prevents directory traversal (CodeQL js/path-injection).\n// For safe segments this returns exactly `path.join(base, segment)`, so there is\n// no behavioral change for valid namespaces.\nfunction resolveNamespaceDir(memoryDir: string, segment: string): string {\n  // Mirror isSafeRouteNamespace's separator/parent-ref rejection (without its\n  // 64-char cap, so identity tokens still pass). Rejecting separators and \"..\"\n  // up front keeps the value a single contained child of <memoryDir>/namespaces.\n  if (\n    segment.length === 0 ||\n    segment.includes(\"/\") ||\n    segment.includes(\"\\\\\") ||\n    segment.includes(\"..\") ||\n    path.isAbsolute(segment)\n  ) {\n    throw new Error(`unsafe namespace path segment: ${segment}`);\n  }\n  return path.join(memoryDir, \"namespaces\", segment);\n}\n\nconst LEGACY_NAMESPACE_CONTENT_CHILDREN = [\n  ...ALL_CATEGORY_DIRS,\n  \"entities\",\n  \"artifacts\",\n  \"identity\",\n  \"config\",\n  \"summaries\",\n  \"profile.md\",\n] as const;\n\nconst LEGACY_NAMESPACE_RUNTIME_CHILDREN = [\"state\"] as const;\n\nasync function hasAnyLegacyData(\n  rootDir: string,\n  options: { includeRuntimeState?: boolean } = {},\n): Promise<boolean> {\n  const children = options.includeRuntimeState === true\n    ? [...LEGACY_NAMESPACE_CONTENT_CHILDREN, ...LEGACY_NAMESPACE_RUNTIME_CHILDREN]\n    : LEGACY_NAMESPACE_CONTENT_CHILDREN;\n  for (const child of children) {\n    if (await hasStoredEntries(path.join(rootDir, child))) return true;\n  }\n  return false;\n}\n\nasync function hasAnyNamespaceStorageMarker(\n  rootDir: string,\n  options: { includeRuntimeState?: boolean } = {},\n): Promise<boolean> {\n  const children = options.includeRuntimeState === true\n    ? [...LEGACY_NAMESPACE_CONTENT_CHILDREN, ...LEGACY_NAMESPACE_RUNTIME_CHILDREN]\n    : LEGACY_NAMESPACE_CONTENT_CHILDREN;\n  for (const child of children) {\n    if (await exists(path.join(rootDir, child))) return true;\n  }\n  return false;\n}\n\n/**\n * Storage routing for namespaces.\n *\n * Compatibility note:\n * - When namespaces are enabled, existing raw namespace roots are preserved.\n *   New namespace roots use tokenized names under `memoryDir/namespaces/<token>`.\n * - The default namespace continues to use the legacy `memoryDir` root unless the caller\n *   has created `memoryDir/namespaces/<defaultNamespace>` (in which case we use that).\n *\n * This avoids surprising \"lost memories\" when an install flips namespaces on without\n * migrating existing data.\n */\n/**\n * Optional hooks for the storage router. `onResolve` fires whenever a namespace's\n * storage is resolved/created, so a downstream consumer (e.g. the namespace\n * catalog, issue #1499) can register the namespace. The hook MUST NOT throw into\n * the router; the router invokes it defensively and a hook failure never affects\n * storage resolution.\n *\n * The hook MAY return (or resolve to) a boolean indicating whether the\n * registration actually PERSISTED (round 6, codex P2 — NEFoX). When it resolves\n * to `false` (a dropped/no-op registration), the router does NOT mark the\n * (namespace, storageDir) pair as notified, so the next resolve RETRIES it\n * instead of suppressing it forever. A `void`/`undefined` result is treated as\n * success (legacy hooks).\n */\nexport interface NamespaceStorageRouterHooks {\n  onResolve?: (\n    namespace: string,\n    storageDir: string,\n  ) => void | boolean | Promise<void | boolean>;\n}\n\n/**\n * Resolve the runtime storage root for the configured DEFAULT namespace.\n *\n * Shared between the live router (`NamespaceStorageRouter.defaultNamespaceRoot`)\n * and the rebuildable catalog (`NamespaceCatalog.rebuildFromDisk`) so the two\n * can never diverge (CLAUDE.md rule #22/#42 — read & write paths resolve through\n * the same logic). The contract is: while legacy memory data still lives\n * directly under `memoryDir`, the default root stays `memoryDir`; only once the\n * legacy root is empty and a `namespaces/<default|token>` dir holds data does\n * the default migrate into that tokenized/legacy-named dir.\n */\nexport async function resolveDefaultNamespaceRoot(config: PluginConfig): Promise<string> {\n  if (!resolveNamespaceCapabilities(config).namespaces) {\n    return config.memoryDir;\n  }\n\n  // Build the legacy default root from the NORMALIZED (trimmed) name so a\n  // whitespace-padded `defaultNamespace` still finds the live `namespaces/default`\n  // root (NIabe). `storageFor()` classifies the trimmed value as the default, and\n  // the on-disk legacy dir is created under the trimmed name; using the raw spaced\n  // name here would look for `namespaces/<spaced>` and miss the real root, falling\n  // back to memoryDir/tokenized. `namespaceIdentityToken` already normalizes\n  // internally, so the tokenized path is unaffected.\n  const defaultIdentity = normalizeNamespaceIdentity(config.defaultNamespace);\n  const legacyNsDir = resolveNamespaceDir(config.memoryDir, defaultIdentity);\n  const tokenizedNsDir = resolveNamespaceDir(\n    config.memoryDir,\n    namespaceIdentityToken(config.defaultNamespace),\n  );\n  const tokenizedHasData =\n    (await exists(tokenizedNsDir)) &&\n    (await hasAnyNamespaceStorageMarker(tokenizedNsDir, { includeRuntimeState: true }));\n  const nsDir = tokenizedHasData\n    ? tokenizedNsDir\n    : (await exists(legacyNsDir))\n      ? legacyNsDir\n      : tokenizedNsDir;\n  return (await exists(nsDir)) && !(await hasAnyLegacyData(config.memoryDir))\n    ? nsDir\n    : config.memoryDir;\n}\n\n/**\n * Resolve the runtime storage root for ANY namespace exactly as the live router\n * would (`NamespaceStorageRouter.namespaceRoot`). Shared so the rebuildable\n * catalog records the SAME on-disk root the router routes to — a recall/read\n * touch must not guess `namespaces/<token>` when the router actually serves a\n * legacy raw-name dir or a migrated default root (CLAUDE.md rule #22/#42; round\n * 4, cursor Medium). The default namespace delegates to `resolveDefaultNamespaceRoot`;\n * every other namespace prefers the tokenized root when it has a storage marker,\n * else a legacy raw-name dir when present, else the tokenized root.\n */\nexport async function resolveNamespaceStorageRoot(\n  config: PluginConfig,\n  namespace: string,\n): Promise<string> {\n  if (!resolveNamespaceCapabilities(config).namespaces) return config.memoryDir;\n  // Compare on NORMALIZED identity so a whitespace-padded configured default name\n  // still routes to the default root rather than a tokenized non-default dir\n  // (NH-FH). The catalog keys records by the same normalized identity.\n  if (normalizeNamespaceIdentity(namespace) === normalizeNamespaceIdentity(config.defaultNamespace)) {\n    return resolveDefaultNamespaceRoot(config);\n  }\n  const legacyRoot = resolveNamespaceDir(config.memoryDir, namespace);\n  const tokenizedRoot = resolveNamespaceDir(config.memoryDir, namespaceIdentityToken(namespace));\n  if (\n    (await exists(tokenizedRoot)) &&\n    (await hasAnyNamespaceStorageMarker(tokenizedRoot, { includeRuntimeState: true }))\n  ) {\n    return tokenizedRoot;\n  }\n  return (await exists(legacyRoot)) ? legacyRoot : tokenizedRoot;\n}\n\nexport class NamespaceStorageRouter {\n  private readonly cache = new Map<string, StorageManager>();\n  private defaultNsRootResolved: string | null = null;\n  // Dedup the resolve hook (round 6, cursor Medium — NCNL2). Recall/extraction\n  // call `storageFor` repeatedly; firing `onResolve` (→ catalog loadCompacted +\n  // append) on every cache hit grows `namespaces.jsonl` without bound between\n  // rebuilds. We fire the hook only when the (namespace, storageDir) pair is new\n  // or its dir changed, so a steady-state cache hit is a no-op for the catalog.\n  private readonly notifiedResolved = new Map<string, string>();\n  // Instance-scoped serializer for the resolve hook (issue #1524 adoption).\n  // Replaces the bespoke `inFlightResolved` marker-then-clear pattern: the\n  // serializer's per-key chain strictly orders concurrent notifications for the\n  // SAME namespace, and the task re-checks `notifiedResolved` once it runs, so a\n  // burst of cache hits before the first hook settles collapses to a single\n  // hook invocation (the once-per-namespace intent). Recovery is preserved —\n  // one rejected hook never poisons subsequent notifications for that key.\n  private readonly resolveSerializer = new MutationSerializer();\n  // (namespace, storageDir) pairs whose resolve hook is currently pending. Set SYNCHRONOUSLY in\n  // notifyResolved (before queueing) so a burst of concurrent storageFor()\n  // cache hits collapses onto the one in-flight hook instead of each enqueuing\n  // its own task. Cleared when the queued hook settles. Without this, a dropped\n  // hook (returns false on a rebuild-lock timeout) leaves notifiedResolved\n  // unset, so every queued sibling task would re-run the hook — N serial lock\n  // waits (cursor Medium 06f58a7c, codex P2).\n  private readonly inFlightResolveHooks = new Set<string>();\n  // Tracks every in-flight resolve-hook promise so callers can deterministically\n  // await the fire-and-forget registrations that `storageFor()` kicks off (see\n  // `whenResolveHooksSettled`). Entries are removed as each hook settles, so the\n  // set holds at most one promise per concurrently-resolving namespace.\n  private readonly pendingResolveHooks = new Set<Promise<unknown>>();\n  // Pending post-write catalog touch promises (#1522). Like pendingResolveHooks,\n  // lets tests await fire-and-forget write touches deterministically.\n  private readonly pendingWriteTouches = new Set<Promise<unknown>>();\n\n  // Normalized (trimmed) default namespace identity (NH-FH). `storageFor`\n  // normalizes its input, so default-namespace branches must compare against the\n  // normalized config default too — otherwise a whitespace-padded configured\n  // default name routes the default namespace to a tokenized non-default root.\n  private readonly defaultNamespaceIdentity: string;\n\n  /** #2019: hook fired when a new namespace storage is created via storageFor. */\n  onStorageCreated?: (storage: StorageManager, namespace: string) => void;\n\n  constructor(\n    private readonly config: PluginConfig,\n    private readonly hooks: NamespaceStorageRouterHooks = {},\n    /** Catalog reference for post-write/read touches (issue #1522 chokepoint). */\n    private readonly catalog?: NamespaceCatalog,\n  ) {\n    this.defaultNamespaceIdentity = normalizeNamespaceIdentity(config.defaultNamespace);\n  }\n\n  private async defaultNamespaceRoot(): Promise<string> {\n    this.defaultNsRootResolved = await resolveDefaultNamespaceRoot(this.config);\n    return this.defaultNsRootResolved;\n  }\n\n  private async namespaceRoot(namespace: string): Promise<string> {\n    // NOTE: only used after defaultNamespaceRoot() resolution.\n    if (!resolveNamespaceCapabilities(this.config).namespaces) return this.config.memoryDir;\n    if (normalizeNamespaceIdentity(namespace) === this.defaultNamespaceIdentity) {\n      return this.defaultNsRootResolved ?? this.config.memoryDir;\n    }\n    return resolveNamespaceStorageRoot(this.config, namespace);\n  }\n\n  async storageFor(namespace: string): Promise<StorageManager> {\n    const ns = normalizeNamespaceIdentity(namespace || this.config.defaultNamespace);\n    if (ns !== this.defaultNamespaceIdentity && !isSafeRouteNamespace(ns)) {\n      throw new Error(`unsafe namespace: ${ns}`);\n    }\n    // Even when the default namespace is exempt from the check above, every\n    // on-disk path is built through resolveNamespaceDir(), which rejects\n    // traversal segments — so an unsafe configured default still cannot escape\n    // <memoryDir>/namespaces (CodeQL js/path-injection).\n\n    let root: string;\n    if (ns === this.defaultNamespaceIdentity) {\n      root = await this.defaultNamespaceRoot();\n      const cached = this.cache.get(ns);\n      if (cached && cached.dir === root) {\n        this.notifyResolved(ns, root);\n        return cached;\n      }\n    } else {\n      const cached = this.cache.get(ns);\n      root = await this.namespaceRoot(ns);\n      if (cached && cached.dir === root) {\n        this.notifyResolved(ns, root);\n        return cached;\n      }\n    }\n\n    // Pass the hot-memories cache gate explicitly (issue #1902, Codex P2): a\n    // per-namespace child root is never registered in the per-dir default map,\n    // so without this it would fall back to the process-wide default and ignore\n    // THIS daemon's hotMemoriesCacheEnabled config. Threading it from config\n    // keeps every namespace storage aligned with its owning orchestrator.\n    const sm = new StorageManager(\n      root,\n      this.config.entitySchemas,\n      this.config.hotMemoriesCacheEnabled,\n    );\n    // Register this child root's gate AND TTL in the per-dir maps (issue #1902,\n    // Codex P2). The constructor override above fixes the child's own gate, but\n    // its TTL is resolved via the per-dir map (hotCacheTtlMs); an unregistered\n    // child root would fall back to the last process-wide TTL and could inherit\n    // another daemon's value. Registering keyed by root keeps both per-dir.\n    StorageManager.setHotMemoriesCacheDefault(\n      root,\n      this.config.hotMemoriesCacheEnabled,\n      this.config.hotMemoriesCacheTtlMs,\n    );\n    const { scopedCacheInvalidationEnabled } = this.config;\n    StorageManager.setScopedCacheInvalidationDefault(root, scopedCacheInvalidationEnabled);\n    // Propagate the inline-attribution template so that router-created storages\n    // (used by extraction and shared-promotion paths) strip citations consistently,\n    // matching the behaviour of the primary this.storage instance in the orchestrator.\n    sm.citationTemplate = this.config.inlineSourceAttributionFormat;\n    // #1522: install the post-write catalog touch at the chokepoint — every\n    // successful write on this StorageManager records the namespace touch.\n    this.bindCatalogWriteHook(sm, ns);\n    // #1579: apply the tombstone non-resurrection config so every namespace\n    // storage enforces the invariant at its own writeMemory chokepoint.\n    this.applyTombstonesConfig(sm, ns);\n    // #2033: install the secure-store context on router-created stores. The\n    // orchestrator keys ONLY its primary default-namespace storage; without\n    // this, a store resolved through the router reads isSecureStoreUnlocked()\n    // === false even after the operator unlocked the keyring, so secure-store\n    // recovery paths (e.g. the CLI lifecycle-ledger rebuild) refuse an encrypted\n    // ledger they could actually rewrite, and namespace writes could silently\n    // fall back to plaintext. Mirror the orchestrator's setup exactly.\n    this.applySecureStoreConfig(sm);\n    this.cache.set(ns, sm);\n    // #2019: let the orchestrator wire write-triggered prioritized embedding on\n    // every router-created namespace storage, not just the primary default store.\n    this.onStorageCreated?.(sm, ns);\n    this.notifyResolved(ns, root);\n    return sm;\n  }\n\n  /**\n   * Fire the resolve hook defensively. A hook failure (e.g. a catalog write\n   * error) MUST NOT crash storage resolution — see CLAUDE.md gotcha #13.\n   *\n   * Issue #1524 adoption: hook invocations for the SAME namespace are now\n   * strictly ordered through the shared `MutationSerializer` rather than the\n   * bespoke `inFlightResolved` marker-then-clear pattern. The serializer\n   * guarantees one in-flight hook per namespace; a concurrent burst of\n   * `storageFor()` cache hits collapses to a single hook invocation because\n   * each queued task re-checks `notifiedResolved` before invoking the hook. A\n   * dropped (`false`) or rejected hook leaves `notifiedResolved` unset so the\n   * next `storageFor()` retries — the serializer recovers from the rejection,\n   * so a failed hook never poisons later notifications.\n   */\n  private notifyResolved(namespace: string, storageDir: string): void {\n    const hook = this.hooks.onResolve;\n    if (!hook) return;\n    // Permanent dedup: skip once we've SUCCESSFULLY notified this exact\n    // (namespace, storageDir). A changed dir (rare: migration/realignment)\n    // still re-fires once. The mark is set ONLY AFTER the hook succeeds, so a\n    // dropped registration (e.g. rebuild-lock timeout) is RETRIED on the next\n    // cache hit instead of being suppressed forever (round 6, cursor Medium —\n    // ND3EJ).\n    if (this.notifiedResolved.get(namespace) === storageDir) return;\n    // In-flight dedup (cursor Medium 06f58a7c, codex P2): if a hook for THIS\n    // namespace is already pending, collapse this call onto it instead of\n    // enqueueing another task. The serializer strictly orders queued tasks, but\n    // ordering alone is not enough — when the first hook returns `false`\n    // (dropped touch, e.g. rebuild-lock timeout), `notifiedResolved` stays\n    // unset, so each queued sibling task would pass its re-check and re-run the\n    // hook. With the real catalog hook each retry can spend the full lock wait,\n    // so N cache hits during a rebuild leave N serial background lock attempts.\n    // Collapsing here means at most ONE hook runs per in-flight registration;\n    // its result (set `notifiedResolved` on success, leave unset on drop)\n    // decides whether a LATER `storageFor()` retries — collapsing loses\n    // nothing because the drop is already retried on the next cache hit.\n    // Keyed by the composite (namespace, storageDir) so a CHANGED dir\n    // (migration/realignment) for the same namespace still gets its own hook —\n    // it is NOT collapsed onto the old dir's pending registration (cursor\n    // Medium, codex P2).\n    const inFlightKey = namespace + \"\\u0000\" + storageDir;\n    if (this.inFlightResolveHooks.has(inFlightKey)) return;\n    this.inFlightResolveHooks.add(inFlightKey);\n    // Queue through the serializer. Concurrent calls for the same namespace\n    // strictly order here; the 2nd call's task runs only after the 1st's hook\n    // settles, by which point `notifiedResolved` is either set (no-op) or still\n    // unset (retry). The returned promise is tracked for\n    // `whenResolveHooksSettled()`. Rejections from the task body are caught so\n    // they never reach the caller (best-effort hook contract); the serializer's\n    // recovered tail still lets subsequent notifications run.\n    const task = async (): Promise<void> => {\n      // Re-check after queueing: a prior task in this same chain may have just\n      // marked the pair as notified.\n      if (this.notifiedResolved.get(namespace) === storageDir) return;\n      try {\n        // Hook may be sync or async; Promise.resolve normalizes both. A result\n        // of `false` means the registration was dropped/no-op (e.g. rebuild-lock\n        // timeout) — leave notifiedResolved UNSET so the next storageFor retries\n        // (round 6, codex P2 — NEFoX). `void`/`undefined` is success for legacy\n        // hooks. A rejection leaves notifiedResolved unset for the same reason.\n        const persisted = await Promise.resolve(hook(namespace, storageDir));\n        if (persisted !== false) {\n          this.notifiedResolved.set(namespace, storageDir);\n        }\n      } catch {\n        // Best-effort: a hook failure MUST NOT crash storage resolution. Leave\n        // notifiedResolved unset so a later storageFor retries the registration.\n      }\n    };\n    const queued = this.resolveSerializer.serialize(namespace, task);\n    this.pendingResolveHooks.add(queued);\n    // Clear the in-flight marker when the hook settles so a subsequent\n    // storageFor() can retry after a drop, or short-circuit via notifiedResolved\n    // after a success.\n    const cleanup = (): void => {\n      this.inFlightResolveHooks.delete(inFlightKey);\n      this.pendingResolveHooks.delete(queued);\n    };\n    void queued.then(cleanup, cleanup);\n  }\n\n  /**\n   * Install the post-write catalog touch hook on an externally-constructed\n   * StorageManager (issue #1522). Used by the orchestrator for the legacy\n   * default-namespace storage (`this.storage`) that bypasses the router.\n   */\n  bindCatalogWriteHook(sm: StorageManager, namespace: string): void {\n    // Issue #1903: pure state-file writes only touch the catalog when explicitly\n    // opted in. Router-created storages (storageFor) and the legacy default\n    // storage both flow through here, so this is the single wiring point.\n    sm.touchStateWrites = this.config.namespacesCatalogTouchStateWrites === true;\n    sm.onCatalogWrite = () => this.touchCatalogWrite(namespace, sm.dir);\n  }\n\n  /**\n   * Install the tombstone config on an externally-constructed StorageManager\n   * (issue #1579). Mirrors `bindCatalogWriteHook` — used for the legacy\n   * default-namespace storage that bypasses the router. Router-created\n   * storages are wired inline in `storageFor()` via `applyTombstonesConfig`.\n   */\n  bindTombstonesConfig(\n    sm: StorageManager,\n    namespace: string,\n    config: { enabled: boolean; semanticMatch: boolean; semanticThreshold: number },\n  ): void {\n    this.tombstonesGlobalConfig = { ...config };\n    sm.setTombstonesConfig({ ...config, namespace });\n  }\n\n  private tombstonesGlobalConfig: {\n    enabled: boolean;\n    semanticMatch: boolean;\n    semanticThreshold: number;\n  } = { enabled: false, semanticMatch: false, semanticThreshold: 0.9 };\n\n  /**\n   * Apply the tombstone config to a router-created StorageManager. Called\n   * inline in `storageFor()` so every namespace storage enforces the\n   * non-resurrection invariant, namespace-scoped (rule 42).\n   */\n  private applyTombstonesConfig(sm: StorageManager, namespace: string): void {\n    sm.setTombstonesConfig({ ...this.tombstonesGlobalConfig, namespace });\n  }\n\n  /**\n   * Install the at-rest secure-store context on a router-created StorageManager\n   * (#2033). Mirrors the orchestrator's primary-storage setup: mark the store\n   * required so a locked store throws instead of silently writing plaintext, and\n   * install the master key when the process-local keyring already holds it (the\n   * operator unlocked). The secure store is one key per memory ROOT (single\n   * header + per-file path-bound AAD), so every namespace store keys off the\n   * root keyring id — exactly the id the orchestrator and `secure-store unlock`\n   * register under. No-op when secure-store is disabled.\n   */\n  private applySecureStoreConfig(sm: StorageManager): void {\n    if (!resolveRecallAuxiliaryCapabilities(this.config).secureStore) return;\n    sm.setSecureStoreRequired(true);\n    const existingKey = keyring.getKey(secureStoreDir(this.config.memoryDir));\n    if (existingKey) {\n      sm.setSecureStoreKey(existingKey, this.config.secureStoreEncryptOnWrite);\n    }\n  }\n\n  /**\n   * Post-write catalog touch (issue #1522 chokepoint). Called by every\n   * StorageManager's post-write hook AFTER a successful write. Best-effort\n   * and failure-tolerant — a catalog error MUST NOT affect the primary write\n   * (gotcha #13, rule #40). Fire-and-forget by design.\n   */\n  private touchCatalogWrite(namespace: string, storageDir: string): void {\n    if (!this.catalog) return;\n    const touch = this.catalog\n      .markWrite(namespace, { discoveredBy: \"write\", storageDir })\n      .catch(() => undefined);\n    this.pendingWriteTouches.add(touch);\n    void touch.then(\n      () => { this.pendingWriteTouches.delete(touch); },\n      () => { this.pendingWriteTouches.delete(touch); },\n    );\n  }\n\n  /**\n   * Record a namespace read in the catalog (issue #1522 chokepoint move).\n   * Best-effort and failure-tolerant. Used by recall paths so the read touch\n   * lives in the storage layer, not at the caller.\n   */\n  recordRead(namespace: string, storageDir?: string): void {\n    if (!this.catalog) return;\n    const ns = normalizeNamespaceIdentity(namespace || this.config.defaultNamespace);\n    void this.catalog\n      .markRead(ns, { discoveredBy: \"read\", storageDir })\n      .catch(() => undefined);\n  }\n  /**\n   * Record a namespace write touch in the catalog (issue #1522). Best-effort\n   * and failure-tolerant. Used by consolidation/cleanup passes that may mutate\n   * the store via delete-only paths (e.g. entity-file merges, TTL cleanup) so\n   * the namespace's lastWriteAt stays fresh even when no explicit write went\n   * through the storage chokepoint. This is NOT a substitute for the chokepoint\n   * — it's a belt-and-suspenders for paths the chokepoint doesn't cover.\n   */\n  recordWrite(namespace: string, storageDir?: string): void {\n    if (!this.catalog) return;\n    const ns = normalizeNamespaceIdentity(namespace || this.config.defaultNamespace);\n    const touch = this.catalog\n      .markWrite(ns, { discoveredBy: \"write\", storageDir })\n      .catch(() => undefined);\n    this.pendingWriteTouches.add(touch);\n    void touch.then(\n      () => { this.pendingWriteTouches.delete(touch); },\n      () => { this.pendingWriteTouches.delete(touch); },\n    );\n  }\n\n  /**\n   * Resolve once every in-flight post-write catalog touch has settled (#1522).\n   * Mirrors `whenResolveHooksSettled()`: the StorageManager's post-write hook\n   * fires the catalog touch fire-and-forget, so tests asserting lastWriteAt\n   * moved should await this instead of racing a timer.\n   */\n  async whenWriteTouchesSettled(): Promise<void> {\n    // Flush any coalesced (buffered) touches first so their appends join the\n    // pending set below — otherwise this could resolve while a buffered touch's\n    // lastWriteAt is still unwritten on disk (#1903, Cursor). No-op when\n    // coalescing is disabled (window 0) or the catalog is inert.\n    await this.catalog?.flushPendingTouches().catch(() => undefined);\n    while (this.pendingWriteTouches.size > 0) {\n      await Promise.allSettled([...this.pendingWriteTouches]);\n    }\n  }\n\n  /**\n   * Resolve once every in-flight `onResolve` registration has settled.\n   *\n   * `storageFor()` fires the resolve hook fire-and-forget, so its catalog side\n   * effect (e.g. `registerResolved(...)`) is not observable the moment\n   * `storageFor()` returns. Callers that must act on that side effect — notably\n   * tests asserting the catalog was updated — should await this instead of\n   * racing a timer. Resolves immediately when no hook is registered or nothing\n   * is in flight. The loop re-checks because a settling hook could, in\n   * principle, trigger a follow-on resolution.\n   */\n  async whenResolveHooksSettled(): Promise<void> {\n    while (this.pendingResolveHooks.size > 0) {\n      await Promise.allSettled([...this.pendingResolveHooks]);\n    }\n  }\n\n  /**\n   * #2019: iterate the currently cached router storages with their namespace so\n   * callers can wire hooks on stores resolved before the hook was installed.\n   */\n  forEachCachedStorage(fn: (storage: StorageManager, namespace: string) => void): void {\n    for (const [namespace, storage] of this.cache) fn(storage, namespace);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AACA,OAAO,UAAU;AACjB,SAAS,QAAQ,OAAO,eAAe;AAUvC,eAAe,OAAO,GAA6B;AACjD,MAAI;AACF,UAAM,OAAO,CAAC;AACd,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,iBAAiB,GAA6B;AAC3D,MAAI;AACF,UAAM,QAAQ,MAAM,MAAM,CAAC;AAC3B,QAAI,MAAM,eAAe,EAAG,QAAO;AACnC,QAAI,CAAC,MAAM,YAAY,EAAG,QAAO;AACjC,UAAM,WAAW,MAAM,QAAQ,GAAG,EAAE,eAAe,KAAK,CAAC;AACzD,eAAW,SAAS,UAAU;AAC5B,YAAM,YAAY,KAAK,KAAK,GAAG,MAAM,IAAI;AACzC,UAAI,MAAM,eAAe,KAAK,MAAM,OAAO,EAAG,QAAO;AACrD,UAAI,MAAM,YAAY,KAAM,MAAM,iBAAiB,SAAS,EAAI,QAAO;AAAA,IACzE;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAQA,SAAS,oBAAoB,WAAmB,SAAyB;AAIvE,MACE,QAAQ,WAAW,KACnB,QAAQ,SAAS,GAAG,KACpB,QAAQ,SAAS,IAAI,KACrB,QAAQ,SAAS,IAAI,KACrB,KAAK,WAAW,OAAO,GACvB;AACA,UAAM,IAAI,MAAM,kCAAkC,OAAO,EAAE;AAAA,EAC7D;AACA,SAAO,KAAK,KAAK,WAAW,cAAc,OAAO;AACnD;AAEA,IAAM,oCAAoC;AAAA,EACxC,GAAG;AAAA,EACH;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,oCAAoC,CAAC,OAAO;AAElD,eAAe,iBACb,SACA,UAA6C,CAAC,GAC5B;AAClB,QAAM,WAAW,QAAQ,wBAAwB,OAC7C,CAAC,GAAG,mCAAmC,GAAG,iCAAiC,IAC3E;AACJ,aAAW,SAAS,UAAU;AAC5B,QAAI,MAAM,iBAAiB,KAAK,KAAK,SAAS,KAAK,CAAC,EAAG,QAAO;AAAA,EAChE;AACA,SAAO;AACT;AAEA,eAAe,6BACb,SACA,UAA6C,CAAC,GAC5B;AAClB,QAAM,WAAW,QAAQ,wBAAwB,OAC7C,CAAC,GAAG,mCAAmC,GAAG,iCAAiC,IAC3E;AACJ,aAAW,SAAS,UAAU;AAC5B,QAAI,MAAM,OAAO,KAAK,KAAK,SAAS,KAAK,CAAC,EAAG,QAAO;AAAA,EACtD;AACA,SAAO;AACT;AA8CA,eAAsB,4BAA4B,QAAuC;AACvF,MAAI,CAAC,6BAA6B,MAAM,EAAE,YAAY;AACpD,WAAO,OAAO;AAAA,EAChB;AASA,QAAM,kBAAkB,2BAA2B,OAAO,gBAAgB;AAC1E,QAAM,cAAc,oBAAoB,OAAO,WAAW,eAAe;AACzE,QAAM,iBAAiB;AAAA,IACrB,OAAO;AAAA,IACP,uBAAuB,OAAO,gBAAgB;AAAA,EAChD;AACA,QAAM,mBACH,MAAM,OAAO,cAAc,KAC3B,MAAM,6BAA6B,gBAAgB,EAAE,qBAAqB,KAAK,CAAC;AACnF,QAAM,QAAQ,mBACV,iBACC,MAAM,OAAO,WAAW,IACvB,cACA;AACN,SAAQ,MAAM,OAAO,KAAK,KAAM,CAAE,MAAM,iBAAiB,OAAO,SAAS,IACrE,QACA,OAAO;AACb;AAYA,eAAsB,4BACpB,QACA,WACiB;AACjB,MAAI,CAAC,6BAA6B,MAAM,EAAE,WAAY,QAAO,OAAO;AAIpE,MAAI,2BAA2B,SAAS,MAAM,2BAA2B,OAAO,gBAAgB,GAAG;AACjG,WAAO,4BAA4B,MAAM;AAAA,EAC3C;AACA,QAAM,aAAa,oBAAoB,OAAO,WAAW,SAAS;AAClE,QAAM,gBAAgB,oBAAoB,OAAO,WAAW,uBAAuB,SAAS,CAAC;AAC7F,MACG,MAAM,OAAO,aAAa,KAC1B,MAAM,6BAA6B,eAAe,EAAE,qBAAqB,KAAK,CAAC,GAChF;AACA,WAAO;AAAA,EACT;AACA,SAAQ,MAAM,OAAO,UAAU,IAAK,aAAa;AACnD;AAEO,IAAM,yBAAN,MAA6B;AAAA,EA2ClC,YACmB,QACA,QAAqC,CAAC,GAEtC,SACjB;AAJiB;AACA;AAEA;AAEjB,SAAK,2BAA2B,2BAA2B,OAAO,gBAAgB;AAAA,EACpF;AAAA,EANmB;AAAA,EACA;AAAA,EAEA;AAAA,EA9CF,QAAQ,oBAAI,IAA4B;AAAA,EACjD,wBAAuC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM9B,mBAAmB,oBAAI,IAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ3C,oBAAoB,IAAI,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQ3C,uBAAuB,oBAAI,IAAY;AAAA;AAAA;AAAA;AAAA;AAAA,EAKvC,sBAAsB,oBAAI,IAAsB;AAAA;AAAA;AAAA,EAGhD,sBAAsB,oBAAI,IAAsB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMhD;AAAA;AAAA,EAGjB;AAAA,EAWA,MAAc,uBAAwC;AACpD,SAAK,wBAAwB,MAAM,4BAA4B,KAAK,MAAM;AAC1E,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAc,cAAc,WAAoC;AAE9D,QAAI,CAAC,6BAA6B,KAAK,MAAM,EAAE,WAAY,QAAO,KAAK,OAAO;AAC9E,QAAI,2BAA2B,SAAS,MAAM,KAAK,0BAA0B;AAC3E,aAAO,KAAK,yBAAyB,KAAK,OAAO;AAAA,IACnD;AACA,WAAO,4BAA4B,KAAK,QAAQ,SAAS;AAAA,EAC3D;AAAA,EAEA,MAAM,WAAW,WAA4C;AAC3D,UAAM,KAAK,2BAA2B,aAAa,KAAK,OAAO,gBAAgB;AAC/E,QAAI,OAAO,KAAK,4BAA4B,CAAC,qBAAqB,EAAE,GAAG;AACrE,YAAM,IAAI,MAAM,qBAAqB,EAAE,EAAE;AAAA,IAC3C;AAMA,QAAI;AACJ,QAAI,OAAO,KAAK,0BAA0B;AACxC,aAAO,MAAM,KAAK,qBAAqB;AACvC,YAAM,SAAS,KAAK,MAAM,IAAI,EAAE;AAChC,UAAI,UAAU,OAAO,QAAQ,MAAM;AACjC,aAAK,eAAe,IAAI,IAAI;AAC5B,eAAO;AAAA,MACT;AAAA,IACF,OAAO;AACL,YAAM,SAAS,KAAK,MAAM,IAAI,EAAE;AAChC,aAAO,MAAM,KAAK,cAAc,EAAE;AAClC,UAAI,UAAU,OAAO,QAAQ,MAAM;AACjC,aAAK,eAAe,IAAI,IAAI;AAC5B,eAAO;AAAA,MACT;AAAA,IACF;AAOA,UAAM,KAAK,IAAI;AAAA,MACb;AAAA,MACA,KAAK,OAAO;AAAA,MACZ,KAAK,OAAO;AAAA,IACd;AAMA,mBAAe;AAAA,MACb;AAAA,MACA,KAAK,OAAO;AAAA,MACZ,KAAK,OAAO;AAAA,IACd;AACA,UAAM,EAAE,+BAA+B,IAAI,KAAK;AAChD,mBAAe,kCAAkC,MAAM,8BAA8B;AAIrF,OAAG,mBAAmB,KAAK,OAAO;AAGlC,SAAK,qBAAqB,IAAI,EAAE;AAGhC,SAAK,sBAAsB,IAAI,EAAE;AAQjC,SAAK,uBAAuB,EAAE;AAC9B,SAAK,MAAM,IAAI,IAAI,EAAE;AAGrB,SAAK,mBAAmB,IAAI,EAAE;AAC9B,SAAK,eAAe,IAAI,IAAI;AAC5B,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBQ,eAAe,WAAmB,YAA0B;AAClE,UAAM,OAAO,KAAK,MAAM;AACxB,QAAI,CAAC,KAAM;AAOX,QAAI,KAAK,iBAAiB,IAAI,SAAS,MAAM,WAAY;AAiBzD,UAAM,cAAc,YAAY,OAAW;AAC3C,QAAI,KAAK,qBAAqB,IAAI,WAAW,EAAG;AAChD,SAAK,qBAAqB,IAAI,WAAW;AAQzC,UAAM,OAAO,YAA2B;AAGtC,UAAI,KAAK,iBAAiB,IAAI,SAAS,MAAM,WAAY;AACzD,UAAI;AAMF,cAAM,YAAY,MAAM,QAAQ,QAAQ,KAAK,WAAW,UAAU,CAAC;AACnE,YAAI,cAAc,OAAO;AACvB,eAAK,iBAAiB,IAAI,WAAW,UAAU;AAAA,QACjD;AAAA,MACF,QAAQ;AAAA,MAGR;AAAA,IACF;AACA,UAAM,SAAS,KAAK,kBAAkB,UAAU,WAAW,IAAI;AAC/D,SAAK,oBAAoB,IAAI,MAAM;AAInC,UAAM,UAAU,MAAY;AAC1B,WAAK,qBAAqB,OAAO,WAAW;AAC5C,WAAK,oBAAoB,OAAO,MAAM;AAAA,IACxC;AACA,SAAK,OAAO,KAAK,SAAS,OAAO;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,qBAAqB,IAAoB,WAAyB;AAIhE,OAAG,mBAAmB,KAAK,OAAO,sCAAsC;AACxE,OAAG,iBAAiB,MAAM,KAAK,kBAAkB,WAAW,GAAG,GAAG;AAAA,EACpE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,qBACE,IACA,WACA,QACM;AACN,SAAK,yBAAyB,EAAE,GAAG,OAAO;AAC1C,OAAG,oBAAoB,EAAE,GAAG,QAAQ,UAAU,CAAC;AAAA,EACjD;AAAA,EAEQ,yBAIJ,EAAE,SAAS,OAAO,eAAe,OAAO,mBAAmB,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO3D,sBAAsB,IAAoB,WAAyB;AACzE,OAAG,oBAAoB,EAAE,GAAG,KAAK,wBAAwB,UAAU,CAAC;AAAA,EACtE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYQ,uBAAuB,IAA0B;AACvD,QAAI,CAAC,mCAAmC,KAAK,MAAM,EAAE,YAAa;AAClE,OAAG,uBAAuB,IAAI;AAC9B,UAAM,cAAc,gBAAQ,OAAO,eAAe,KAAK,OAAO,SAAS,CAAC;AACxE,QAAI,aAAa;AACf,SAAG,kBAAkB,aAAa,KAAK,OAAO,yBAAyB;AAAA,IACzE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,kBAAkB,WAAmB,YAA0B;AACrE,QAAI,CAAC,KAAK,QAAS;AACnB,UAAM,QAAQ,KAAK,QAChB,UAAU,WAAW,EAAE,cAAc,SAAS,WAAW,CAAC,EAC1D,MAAM,MAAM,MAAS;AACxB,SAAK,oBAAoB,IAAI,KAAK;AAClC,SAAK,MAAM;AAAA,MACT,MAAM;AAAE,aAAK,oBAAoB,OAAO,KAAK;AAAA,MAAG;AAAA,MAChD,MAAM;AAAE,aAAK,oBAAoB,OAAO,KAAK;AAAA,MAAG;AAAA,IAClD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,WAAW,WAAmB,YAA2B;AACvD,QAAI,CAAC,KAAK,QAAS;AACnB,UAAM,KAAK,2BAA2B,aAAa,KAAK,OAAO,gBAAgB;AAC/E,SAAK,KAAK,QACP,SAAS,IAAI,EAAE,cAAc,QAAQ,WAAW,CAAC,EACjD,MAAM,MAAM,MAAS;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,YAAY,WAAmB,YAA2B;AACxD,QAAI,CAAC,KAAK,QAAS;AACnB,UAAM,KAAK,2BAA2B,aAAa,KAAK,OAAO,gBAAgB;AAC/E,UAAM,QAAQ,KAAK,QAChB,UAAU,IAAI,EAAE,cAAc,SAAS,WAAW,CAAC,EACnD,MAAM,MAAM,MAAS;AACxB,SAAK,oBAAoB,IAAI,KAAK;AAClC,SAAK,MAAM;AAAA,MACT,MAAM;AAAE,aAAK,oBAAoB,OAAO,KAAK;AAAA,MAAG;AAAA,MAChD,MAAM;AAAE,aAAK,oBAAoB,OAAO,KAAK;AAAA,MAAG;AAAA,IAClD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,0BAAyC;AAK7C,UAAM,KAAK,SAAS,oBAAoB,EAAE,MAAM,MAAM,MAAS;AAC/D,WAAO,KAAK,oBAAoB,OAAO,GAAG;AACxC,YAAM,QAAQ,WAAW,CAAC,GAAG,KAAK,mBAAmB,CAAC;AAAA,IACxD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,0BAAyC;AAC7C,WAAO,KAAK,oBAAoB,OAAO,GAAG;AACxC,YAAM,QAAQ,WAAW,CAAC,GAAG,KAAK,mBAAmB,CAAC;AAAA,IACxD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,qBAAqB,IAAgE;AACnF,eAAW,CAAC,WAAW,OAAO,KAAK,KAAK,MAAO,IAAG,SAAS,SAAS;AAAA,EACtE;AACF;","names":[]}