@remnic/core 9.3.613 → 9.3.615

package/dist/{chunk-BFBF3XEF.js.map → chunk-6BDVBBBY.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/maintenance/memory-governance-cron.ts"],"sourcesContent":["import { mkdir, readFile, rename, rm, stat, writeFile } from \"node:fs/promises\";\nimport path from \"node:path\";\n\nconst DAY_SUMMARY_CRON_ID = \"engram-day-summary\";\nconst GOVERNANCE_CRON_ID = \"engram-nightly-governance\";\nconst PROCEDURAL_MINING_CRON_ID = \"engram-procedural-mining\";\nconst CONTRADICTION_SCAN_CRON_ID = \"engram-contradiction-scan\";\nconst PATTERN_REINFORCEMENT_CRON_ID = \"engram-pattern-reinforcement\";\nconst GRAPH_EDGE_DECAY_CRON_ID = \"engram-graph-edge-decay\";\n\ntype CronJobsShape =\n  | Array<Record<string, unknown>>\n  | {\n      jobs: Array<Record<string, unknown>>;\n      [key: string]: unknown;\n    };\n\nasync function acquireCronJobsLock(jobsPath: string): Promise<() => Promise<void>> {\n  const lockPath = `${jobsPath}.lock`;\n  const start = Date.now();\n  const staleMs = 30_000;\n  const timeoutMs = 5_000;\n  await mkdir(path.dirname(lockPath), { recursive: true });\n\n  while (Date.now() - start < timeoutMs) {\n    try {\n      await mkdir(lockPath);\n      return async () => {\n        try {\n          await rm(lockPath, { recursive: true, force: true });\n        } catch {\n          // Lock cleanup should not fail cron registration.\n        }\n      };\n    } catch (error) {\n      const code = (error as NodeJS.ErrnoException).code;\n      if (code !== \"EEXIST\") {\n        throw error;\n      }\n      try {\n        const lockStat = await stat(lockPath);\n        if (Date.now() - lockStat.mtimeMs > staleMs) {\n          await rm(lockPath, { recursive: true, force: true });\n          continue;\n        }\n      } catch {\n        // Lock may have been released between stat/rm attempts.\n      }\n      await new Promise((resolve) => setTimeout(resolve, 25));\n    }\n  }\n\n  throw new Error(`cron jobs lock acquisition timed out after ${timeoutMs}ms`);\n}\n\nfunction parseCronJobsShape(raw: string): { parsed: CronJobsShape; jobs: Array<Record<string, unknown>> } {\n  const parsed = JSON.parse(raw) as CronJobsShape;\n  const jobs = Array.isArray(parsed) ? parsed : Array.isArray(parsed.jobs) ? parsed.jobs : null;\n  if (!jobs) {\n    throw new Error(\"jobs.json has unexpected structure\");\n  }\n  return { parsed, jobs };\n}\n\nasync function writeCronJobsAtomic(jobsPath: string, value: CronJobsShape): Promise<void> {\n  const tempPath = `${jobsPath}.${process.pid}.${Date.now()}.tmp`;\n  await writeFile(tempPath, JSON.stringify(value, null, 2) + \"\\n\", \"utf-8\");\n  await rename(tempPath, jobsPath);\n}\n\nexport async function ensureCronJob(\n  jobsPath: string,\n  jobId: string,\n  buildJob: () => Record<string, unknown>,\n  options: { updateExisting?: boolean; updateFields?: string[] } = {},\n): Promise<{ created: boolean; updated: boolean; jobId: string }> {\n  const releaseLock = await acquireCronJobsLock(jobsPath);\n  try {\n    const raw = await readFile(jobsPath, \"utf-8\");\n    const { parsed, jobs } = parseCronJobsShape(raw);\n\n    const existingIndex = jobs.findIndex((job) => job.id === jobId);\n    if (existingIndex >= 0) {\n      if (!options.updateExisting) {\n        return { created: false, updated: false, jobId };\n      }\n\n      const desired = buildJob();\n      const existing = jobs[existingIndex];\n      const next = mergeCronJobUpdate(existing, desired, options.updateFields);\n      if (stableJson(existing) === stableJson(next)) {\n        return { created: false, updated: false, jobId };\n      }\n\n      jobs[existingIndex] = next;\n      const output = Array.isArray(parsed) ? jobs : { ...parsed, jobs };\n      await writeCronJobsAtomic(jobsPath, output);\n      return { created: false, updated: true, jobId };\n    }\n\n    jobs.push(buildJob());\n    const output = Array.isArray(parsed) ? jobs : { ...parsed, jobs };\n    await writeCronJobsAtomic(jobsPath, output);\n    return { created: true, updated: false, jobId };\n  } finally {\n    await releaseLock();\n  }\n}\n\nfunction mergeCronJobUpdate(\n  existing: Record<string, unknown>,\n  desired: Record<string, unknown>,\n  updateFields?: string[],\n): Record<string, unknown> {\n  if (!updateFields) {\n    return desired;\n  }\n\n  const next = { ...existing };\n  for (const field of updateFields) {\n    if (Object.prototype.hasOwnProperty.call(desired, field)) {\n      next[field] = desired[field];\n    } else {\n      delete next[field];\n    }\n  }\n  return next;\n}\n\nfunction stableJson(value: unknown): string {\n  if (Array.isArray(value)) {\n    return `[${value.map((item) => stableJson(item)).join(\",\")}]`;\n  }\n  if (value && typeof value === \"object\") {\n    const record = value as Record<string, unknown>;\n    return `{${Object.keys(record)\n      .sort()\n      .map((key) => `${JSON.stringify(key)}:${stableJson(record[key])}`)\n      .join(\",\")}}`;\n  }\n  return JSON.stringify(value);\n}\n\nexport async function ensureDaySummaryCron(\n  jobsPath: string,\n  options: {\n    timezone: string;\n    agentId?: string;\n  },\n): Promise<{ created: boolean; jobId: string }> {\n  const agentId =\n    typeof options.agentId === \"string\" && options.agentId.trim().length > 0\n      ? options.agentId.trim()\n      : \"main\";\n\n  return ensureCronJob(jobsPath, DAY_SUMMARY_CRON_ID, () => ({\n    id: DAY_SUMMARY_CRON_ID,\n    agentId,\n    name: \"Remnic Day Summary (auto)\",\n    enabled: true,\n    schedule: {\n      kind: \"cron\",\n      expr: \"47 23 * * *\",\n      tz: options.timezone,\n    },\n    sessionTarget: \"isolated\",\n    wakeMode: \"now\",\n    payload: {\n      kind: \"agentTurn\",\n      timeoutSeconds: 900,\n      thinking: \"off\",\n      message:\n        \"You are OpenClaw automation. Call tool engram.day_summary with empty params (it will auto-gather today's facts). If successful output exactly NO_REPLY. On error output one concise line. Do NOT use message tool.\",\n    },\n    delivery: { mode: \"none\" },\n  }));\n}\n\nexport async function ensureNightlyGovernanceCron(\n  jobsPath: string,\n  options: {\n    timezone: string;\n    agentId?: string;\n    recentDays?: number;\n    maxMemories?: number;\n    batchSize?: number;\n    scheduleExpr?: string;\n  },\n): Promise<{ created: boolean; jobId: string }> {\n  const recentDays =\n    typeof options.recentDays === \"number\" && Number.isFinite(options.recentDays)\n      ? Math.max(1, Math.floor(options.recentDays))\n      : 2;\n  const maxMemories =\n    typeof options.maxMemories === \"number\" && Number.isFinite(options.maxMemories)\n      ? Math.max(1, Math.floor(options.maxMemories))\n      : 500;\n  const batchSize =\n    typeof options.batchSize === \"number\" && Number.isFinite(options.batchSize)\n      ? Math.max(1, Math.floor(options.batchSize))\n      : 100;\n  const scheduleExpr =\n    typeof options.scheduleExpr === \"string\" && options.scheduleExpr.trim().length > 0\n      ? options.scheduleExpr.trim()\n      : \"23 2 * * *\";\n  const agentId =\n    typeof options.agentId === \"string\" && options.agentId.trim().length > 0\n      ? options.agentId.trim()\n      : \"main\";\n\n  return ensureCronJob(jobsPath, GOVERNANCE_CRON_ID, () => ({\n      id: GOVERNANCE_CRON_ID,\n      agentId,\n      name: \"Remnic Nightly Governance (batched)\",\n      enabled: true,\n      schedule: {\n        kind: \"cron\",\n        expr: scheduleExpr,\n        tz: options.timezone,\n      },\n      sessionTarget: \"isolated\",\n      wakeMode: \"now\",\n      payload: {\n        kind: \"agentTurn\",\n        timeoutSeconds: 900,\n        thinking: \"off\",\n        message:\n          \"You are OpenClaw automation. Call the tool `engram.memory_governance_run` with params \" +\n          `{\"mode\": \"apply\", \"recentDays\": ${recentDays}, \"maxMemories\": ${maxMemories}, \"batchSize\": ${batchSize}}` +\n          \". If successful output exactly NO_REPLY. On error output one concise line. Do NOT use message tool.\",\n      },\n      delivery: { mode: \"none\" },\n    }));\n}\n\nexport async function ensureProceduralMiningCron(\n  jobsPath: string,\n  options: {\n    timezone: string;\n    agentId?: string;\n    scheduleExpr?: string;\n  },\n): Promise<{ created: boolean; jobId: string }> {\n  const scheduleExpr =\n    typeof options.scheduleExpr === \"string\" && options.scheduleExpr.trim().length > 0\n      ? options.scheduleExpr.trim()\n      : \"17 3 * * *\";\n  const agentId =\n    typeof options.agentId === \"string\" && options.agentId.trim().length > 0\n      ? options.agentId.trim()\n      : \"main\";\n\n  return ensureCronJob(jobsPath, PROCEDURAL_MINING_CRON_ID, () => ({\n    id: PROCEDURAL_MINING_CRON_ID,\n    agentId,\n    name: \"Remnic Procedural Mining (nightly)\",\n    enabled: true,\n    schedule: {\n      kind: \"cron\",\n      expr: scheduleExpr,\n      tz: options.timezone,\n    },\n    sessionTarget: \"isolated\",\n    wakeMode: \"now\",\n    payload: {\n      kind: \"agentTurn\",\n      timeoutSeconds: 900,\n      thinking: \"off\",\n      message:\n        \"You are OpenClaw automation. Call tool `engram.procedure_mining_run` with empty params. \" +\n        \"If successful output exactly NO_REPLY. On error output one concise line. Do NOT use message tool.\",\n    },\n    delivery: { mode: \"none\" },\n  }));\n}\n\nexport async function ensureContradictionScanCron(\n  jobsPath: string,\n  options: {\n    timezone: string;\n    agentId?: string;\n    scheduleExpr?: string;\n  },\n): Promise<{ created: boolean; jobId: string }> {\n  const scheduleExpr =\n    typeof options.scheduleExpr === \"string\" && options.scheduleExpr.trim().length > 0\n      ? options.scheduleExpr.trim()\n      : \"37 3 * * *\";\n  const agentId =\n    typeof options.agentId === \"string\" && options.agentId.trim().length > 0\n      ? options.agentId.trim()\n      : \"main\";\n\n  return ensureCronJob(jobsPath, CONTRADICTION_SCAN_CRON_ID, () => ({\n    id: CONTRADICTION_SCAN_CRON_ID,\n    agentId,\n    name: \"Remnic Contradiction Scan (nightly)\",\n    enabled: true,\n    schedule: {\n      kind: \"cron\",\n      expr: scheduleExpr,\n      tz: options.timezone,\n    },\n    sessionTarget: \"isolated\",\n    wakeMode: \"now\",\n    payload: {\n      kind: \"agentTurn\",\n      timeoutSeconds: 900,\n      thinking: \"off\",\n      message:\n        \"You are OpenClaw automation. Call tool `engram.contradiction_scan_run` with empty params. \" +\n        \"If successful output exactly NO_REPLY. On error output one concise line. Do NOT use message tool.\",\n    },\n    delivery: { mode: \"none\" },\n  }));\n}\n\nexport async function ensurePatternReinforcementCron(\n  jobsPath: string,\n  options: {\n    timezone: string;\n    agentId?: string;\n    /**\n     * Cron expression. Default `\"53 4 * * 0\"` — Sunday 04:53 in the\n     * configured timezone, deliberately offset from sibling crons\n     * (`23 2 * * *`, `17 3 * * *`, `37 3 * * *`) so the maintenance\n     * passes don't pile up on the same minute.\n     */\n    scheduleExpr?: string;\n  },\n): Promise<{ created: boolean; jobId: string }> {\n  const scheduleExpr =\n    typeof options.scheduleExpr === \"string\" && options.scheduleExpr.trim().length > 0\n      ? options.scheduleExpr.trim()\n      : \"53 4 * * 0\";\n  const agentId =\n    typeof options.agentId === \"string\" && options.agentId.trim().length > 0\n      ? options.agentId.trim()\n      : \"main\";\n\n  return ensureCronJob(jobsPath, PATTERN_REINFORCEMENT_CRON_ID, () => ({\n    id: PATTERN_REINFORCEMENT_CRON_ID,\n    agentId,\n    name: \"Remnic Pattern Reinforcement (weekly)\",\n    enabled: true,\n    schedule: {\n      kind: \"cron\",\n      expr: scheduleExpr,\n      tz: options.timezone,\n    },\n    sessionTarget: \"isolated\",\n    wakeMode: \"now\",\n    payload: {\n      kind: \"agentTurn\",\n      timeoutSeconds: 900,\n      thinking: \"off\",\n      message:\n        \"You are OpenClaw automation. Call tool `engram.pattern_reinforcement_run` with empty params. \" +\n        \"If successful output exactly NO_REPLY. On error output one concise line. Do NOT use message tool.\",\n    },\n    delivery: { mode: \"none\" },\n  }));\n}\n\n/**\n * Register a cron job that runs the graph-edge-decay maintenance pass\n * (issue #681 PR 2/3). Default schedule is weekly on Sunday 04:13 — the\n * cadence is configurable via `scheduleExpr`. Cadence is also expressible\n * in milliseconds via `Config.graphEdgeDecayCadenceMs`; the orchestrator\n * picks the right cron expression for sub-daily, daily, or weekly cadence.\n */\nexport async function ensureGraphEdgeDecayCron(\n  jobsPath: string,\n  options: {\n    timezone: string;\n    agentId?: string;\n    scheduleExpr?: string;\n  },\n): Promise<{ created: boolean; jobId: string }> {\n  const scheduleExpr =\n    typeof options.scheduleExpr === \"string\" && options.scheduleExpr.trim().length > 0\n      ? options.scheduleExpr.trim()\n      : \"13 4 * * 0\";\n  const agentId =\n    typeof options.agentId === \"string\" && options.agentId.trim().length > 0\n      ? options.agentId.trim()\n      : \"main\";\n\n  const scheduleLabel = graphEdgeDecayScheduleLabel(scheduleExpr);\n\n  return ensureCronJob(jobsPath, GRAPH_EDGE_DECAY_CRON_ID, () => ({\n    id: GRAPH_EDGE_DECAY_CRON_ID,\n    agentId,\n    // Schedule label reflects the actual cron expression (`daily` /\n    // `weekly` / `custom`) so cron dashboards do not show \"weekly\"\n    // when the schedule is in fact daily — Cursor review on PR #729.\n    name: `Remnic Graph Edge Decay (${scheduleLabel})`,\n    enabled: true,\n    schedule: {\n      kind: \"cron\",\n      expr: scheduleExpr,\n      tz: options.timezone,\n    },\n    sessionTarget: \"isolated\",\n    wakeMode: \"now\",\n    payload: {\n      kind: \"agentTurn\",\n      timeoutSeconds: 900,\n      thinking: \"off\",\n      message:\n        \"You are OpenClaw automation. Call tool `engram.graph_edge_decay_run` with empty params. \" +\n        \"If successful output exactly NO_REPLY. On error output one concise line. Do NOT use message tool.\",\n    },\n    delivery: { mode: \"none\" },\n  }));\n}\n\n/**\n * Pick a cron expression that approximates a cadence in milliseconds.\n *\n * - cadence < 7 days → daily at 04:13 (sub-daily cadence is not natively\n *   expressible in 5-field cron without `*\\/N` patterns; daily is the\n *   safe upper bound that won't trip the cron more often than requested).\n * - cadence ≥ 7 days → weekly on Sunday 04:13.\n *\n * Operators who need finer-grained control should set `scheduleExpr`\n * directly via `ensureGraphEdgeDecayCron`.\n */\nexport function graphEdgeDecayCadenceToCronExpr(cadenceMs: number): string {\n  if (!Number.isFinite(cadenceMs) || cadenceMs <= 0) {\n    return \"13 4 * * 0\";\n  }\n  const day = 24 * 60 * 60 * 1000;\n  if (cadenceMs < 7 * day) return \"13 4 * * *\";\n  return \"13 4 * * 0\";\n}\n\n/**\n * Derive a human-friendly schedule label (\"daily\" / \"weekly\" / \"custom\")\n * for the given cron expression. Used to keep the cron job name in\n * sync with the actual schedule (Cursor review on PR #729).\n */\nfunction graphEdgeDecayScheduleLabel(scheduleExpr: string): string {\n  if (scheduleExpr === \"13 4 * * *\") return \"daily\";\n  if (scheduleExpr === \"13 4 * * 0\") return \"weekly\";\n  return \"custom\";\n}\n"],"mappings":";AAAA,SAAS,OAAO,UAAU,QAAQ,IAAI,MAAM,iBAAiB;AAC7D,OAAO,UAAU;AAEjB,IAAM,sBAAsB;AAC5B,IAAM,qBAAqB;AAC3B,IAAM,4BAA4B;AAClC,IAAM,6BAA6B;AACnC,IAAM,gCAAgC;AACtC,IAAM,2BAA2B;AASjC,eAAe,oBAAoB,UAAgD;AACjF,QAAM,WAAW,GAAG,QAAQ;AAC5B,QAAM,QAAQ,KAAK,IAAI;AACvB,QAAM,UAAU;AAChB,QAAM,YAAY;AAClB,QAAM,MAAM,KAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AAEvD,SAAO,KAAK,IAAI,IAAI,QAAQ,WAAW;AACrC,QAAI;AACF,YAAM,MAAM,QAAQ;AACpB,aAAO,YAAY;AACjB,YAAI;AACF,gBAAM,GAAG,UAAU,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,QACrD,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AACd,YAAM,OAAQ,MAAgC;AAC9C,UAAI,SAAS,UAAU;AACrB,cAAM;AAAA,MACR;AACA,UAAI;AACF,cAAM,WAAW,MAAM,KAAK,QAAQ;AACpC,YAAI,KAAK,IAAI,IAAI,SAAS,UAAU,SAAS;AAC3C,gBAAM,GAAG,UAAU,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AACnD;AAAA,QACF;AAAA,MACF,QAAQ;AAAA,MAER;AACA,YAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AAAA,IACxD;AAAA,EACF;AAEA,QAAM,IAAI,MAAM,8CAA8C,SAAS,IAAI;AAC7E;AAEA,SAAS,mBAAmB,KAA8E;AACxG,QAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,QAAM,OAAO,MAAM,QAAQ,MAAM,IAAI,SAAS,MAAM,QAAQ,OAAO,IAAI,IAAI,OAAO,OAAO;AACzF,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,MAAM,oCAAoC;AAAA,EACtD;AACA,SAAO,EAAE,QAAQ,KAAK;AACxB;AAEA,eAAe,oBAAoB,UAAkB,OAAqC;AACxF,QAAM,WAAW,GAAG,QAAQ,IAAI,QAAQ,GAAG,IAAI,KAAK,IAAI,CAAC;AACzD,QAAM,UAAU,UAAU,KAAK,UAAU,OAAO,MAAM,CAAC,IAAI,MAAM,OAAO;AACxE,QAAM,OAAO,UAAU,QAAQ;AACjC;AAEA,eAAsB,cACpB,UACA,OACA,UACA,UAAiE,CAAC,GACF;AAChE,QAAM,cAAc,MAAM,oBAAoB,QAAQ;AACtD,MAAI;AACF,UAAM,MAAM,MAAM,SAAS,UAAU,OAAO;AAC5C,UAAM,EAAE,QAAQ,KAAK,IAAI,mBAAmB,GAAG;AAE/C,UAAM,gBAAgB,KAAK,UAAU,CAAC,QAAQ,IAAI,OAAO,KAAK;AAC9D,QAAI,iBAAiB,GAAG;AACtB,UAAI,CAAC,QAAQ,gBAAgB;AAC3B,eAAO,EAAE,SAAS,OAAO,SAAS,OAAO,MAAM;AAAA,MACjD;AAEA,YAAM,UAAU,SAAS;AACzB,YAAM,WAAW,KAAK,aAAa;AACnC,YAAM,OAAO,mBAAmB,UAAU,SAAS,QAAQ,YAAY;AACvE,UAAI,WAAW,QAAQ,MAAM,WAAW,IAAI,GAAG;AAC7C,eAAO,EAAE,SAAS,OAAO,SAAS,OAAO,MAAM;AAAA,MACjD;AAEA,WAAK,aAAa,IAAI;AACtB,YAAMA,UAAS,MAAM,QAAQ,MAAM,IAAI,OAAO,EAAE,GAAG,QAAQ,KAAK;AAChE,YAAM,oBAAoB,UAAUA,OAAM;AAC1C,aAAO,EAAE,SAAS,OAAO,SAAS,MAAM,MAAM;AAAA,IAChD;AAEA,SAAK,KAAK,SAAS,CAAC;AACpB,UAAM,SAAS,MAAM,QAAQ,MAAM,IAAI,OAAO,EAAE,GAAG,QAAQ,KAAK;AAChE,UAAM,oBAAoB,UAAU,MAAM;AAC1C,WAAO,EAAE,SAAS,MAAM,SAAS,OAAO,MAAM;AAAA,EAChD,UAAE;AACA,UAAM,YAAY;AAAA,EACpB;AACF;AAEA,SAAS,mBACP,UACA,SACA,cACyB;AACzB,MAAI,CAAC,cAAc;AACjB,WAAO;AAAA,EACT;AAEA,QAAM,OAAO,EAAE,GAAG,SAAS;AAC3B,aAAW,SAAS,cAAc;AAChC,QAAI,OAAO,UAAU,eAAe,KAAK,SAAS,KAAK,GAAG;AACxD,WAAK,KAAK,IAAI,QAAQ,KAAK;AAAA,IAC7B,OAAO;AACL,aAAO,KAAK,KAAK;AAAA,IACnB;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,WAAW,OAAwB;AAC1C,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,IAAI,MAAM,IAAI,CAAC,SAAS,WAAW,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC;AAAA,EAC5D;AACA,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,UAAM,SAAS;AACf,WAAO,IAAI,OAAO,KAAK,MAAM,EAC1B,KAAK,EACL,IAAI,CAAC,QAAQ,GAAG,KAAK,UAAU,GAAG,CAAC,IAAI,WAAW,OAAO,GAAG,CAAC,CAAC,EAAE,EAChE,KAAK,GAAG,CAAC;AAAA,EACd;AACA,SAAO,KAAK,UAAU,KAAK;AAC7B;AAEA,eAAsB,qBACpB,UACA,SAI8C;AAC9C,QAAM,UACJ,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,KAAK,EAAE,SAAS,IACnE,QAAQ,QAAQ,KAAK,IACrB;AAEN,SAAO,cAAc,UAAU,qBAAqB,OAAO;AAAA,IACzD,IAAI;AAAA,IACJ;AAAA,IACA,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,IAAI,QAAQ;AAAA,IACd;AAAA,IACA,eAAe;AAAA,IACf,UAAU;AAAA,IACV,SAAS;AAAA,MACP,MAAM;AAAA,MACN,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,SACE;AAAA,IACJ;AAAA,IACA,UAAU,EAAE,MAAM,OAAO;AAAA,EAC3B,EAAE;AACJ;AAEA,eAAsB,4BACpB,UACA,SAQ8C;AAC9C,QAAM,aACJ,OAAO,QAAQ,eAAe,YAAY,OAAO,SAAS,QAAQ,UAAU,IACxE,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,UAAU,CAAC,IAC1C;AACN,QAAM,cACJ,OAAO,QAAQ,gBAAgB,YAAY,OAAO,SAAS,QAAQ,WAAW,IAC1E,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,WAAW,CAAC,IAC3C;AACN,QAAM,YACJ,OAAO,QAAQ,cAAc,YAAY,OAAO,SAAS,QAAQ,SAAS,IACtE,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,SAAS,CAAC,IACzC;AACN,QAAM,eACJ,OAAO,QAAQ,iBAAiB,YAAY,QAAQ,aAAa,KAAK,EAAE,SAAS,IAC7E,QAAQ,aAAa,KAAK,IAC1B;AACN,QAAM,UACJ,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,KAAK,EAAE,SAAS,IACnE,QAAQ,QAAQ,KAAK,IACrB;AAEN,SAAO,cAAc,UAAU,oBAAoB,OAAO;AAAA,IACtD,IAAI;AAAA,IACJ;AAAA,IACA,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,IAAI,QAAQ;AAAA,IACd;AAAA,IACA,eAAe;AAAA,IACf,UAAU;AAAA,IACV,SAAS;AAAA,MACP,MAAM;AAAA,MACN,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,SACE,2HACmC,UAAU,oBAAoB,WAAW,kBAAkB,SAAS;AAAA,IAE3G;AAAA,IACA,UAAU,EAAE,MAAM,OAAO;AAAA,EAC3B,EAAE;AACN;AAEA,eAAsB,2BACpB,UACA,SAK8C;AAC9C,QAAM,eACJ,OAAO,QAAQ,iBAAiB,YAAY,QAAQ,aAAa,KAAK,EAAE,SAAS,IAC7E,QAAQ,aAAa,KAAK,IAC1B;AACN,QAAM,UACJ,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,KAAK,EAAE,SAAS,IACnE,QAAQ,QAAQ,KAAK,IACrB;AAEN,SAAO,cAAc,UAAU,2BAA2B,OAAO;AAAA,IAC/D,IAAI;AAAA,IACJ;AAAA,IACA,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,IAAI,QAAQ;AAAA,IACd;AAAA,IACA,eAAe;AAAA,IACf,UAAU;AAAA,IACV,SAAS;AAAA,MACP,MAAM;AAAA,MACN,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,SACE;AAAA,IAEJ;AAAA,IACA,UAAU,EAAE,MAAM,OAAO;AAAA,EAC3B,EAAE;AACJ;AAEA,eAAsB,4BACpB,UACA,SAK8C;AAC9C,QAAM,eACJ,OAAO,QAAQ,iBAAiB,YAAY,QAAQ,aAAa,KAAK,EAAE,SAAS,IAC7E,QAAQ,aAAa,KAAK,IAC1B;AACN,QAAM,UACJ,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,KAAK,EAAE,SAAS,IACnE,QAAQ,QAAQ,KAAK,IACrB;AAEN,SAAO,cAAc,UAAU,4BAA4B,OAAO;AAAA,IAChE,IAAI;AAAA,IACJ;AAAA,IACA,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,IAAI,QAAQ;AAAA,IACd;AAAA,IACA,eAAe;AAAA,IACf,UAAU;AAAA,IACV,SAAS;AAAA,MACP,MAAM;AAAA,MACN,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,SACE;AAAA,IAEJ;AAAA,IACA,UAAU,EAAE,MAAM,OAAO;AAAA,EAC3B,EAAE;AACJ;AAEA,eAAsB,+BACpB,UACA,SAW8C;AAC9C,QAAM,eACJ,OAAO,QAAQ,iBAAiB,YAAY,QAAQ,aAAa,KAAK,EAAE,SAAS,IAC7E,QAAQ,aAAa,KAAK,IAC1B;AACN,QAAM,UACJ,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,KAAK,EAAE,SAAS,IACnE,QAAQ,QAAQ,KAAK,IACrB;AAEN,SAAO,cAAc,UAAU,+BAA+B,OAAO;AAAA,IACnE,IAAI;AAAA,IACJ;AAAA,IACA,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,IAAI,QAAQ;AAAA,IACd;AAAA,IACA,eAAe;AAAA,IACf,UAAU;AAAA,IACV,SAAS;AAAA,MACP,MAAM;AAAA,MACN,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,SACE;AAAA,IAEJ;AAAA,IACA,UAAU,EAAE,MAAM,OAAO;AAAA,EAC3B,EAAE;AACJ;AASA,eAAsB,yBACpB,UACA,SAK8C;AAC9C,QAAM,eACJ,OAAO,QAAQ,iBAAiB,YAAY,QAAQ,aAAa,KAAK,EAAE,SAAS,IAC7E,QAAQ,aAAa,KAAK,IAC1B;AACN,QAAM,UACJ,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,KAAK,EAAE,SAAS,IACnE,QAAQ,QAAQ,KAAK,IACrB;AAEN,QAAM,gBAAgB,4BAA4B,YAAY;AAE9D,SAAO,cAAc,UAAU,0BAA0B,OAAO;AAAA,IAC9D,IAAI;AAAA,IACJ;AAAA;AAAA;AAAA;AAAA,IAIA,MAAM,4BAA4B,aAAa;AAAA,IAC/C,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,IAAI,QAAQ;AAAA,IACd;AAAA,IACA,eAAe;AAAA,IACf,UAAU;AAAA,IACV,SAAS;AAAA,MACP,MAAM;AAAA,MACN,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,SACE;AAAA,IAEJ;AAAA,IACA,UAAU,EAAE,MAAM,OAAO;AAAA,EAC3B,EAAE;AACJ;AAaO,SAAS,gCAAgC,WAA2B;AACzE,MAAI,CAAC,OAAO,SAAS,SAAS,KAAK,aAAa,GAAG;AACjD,WAAO;AAAA,EACT;AACA,QAAM,MAAM,KAAK,KAAK,KAAK;AAC3B,MAAI,YAAY,IAAI,IAAK,QAAO;AAChC,SAAO;AACT;AAOA,SAAS,4BAA4B,cAA8B;AACjE,MAAI,iBAAiB,aAAc,QAAO;AAC1C,MAAI,iBAAiB,aAAc,QAAO;AAC1C,SAAO;AACT;","names":["output"]}
+{"version":3,"sources":["../src/maintenance/memory-governance-cron.ts"],"sourcesContent":["import { mkdir, readFile, rename, rm, stat, writeFile } from \"node:fs/promises\";\nimport path from \"node:path\";\n\nconst DAY_SUMMARY_CRON_ID = \"engram-day-summary\";\nconst GOVERNANCE_CRON_ID = \"engram-nightly-governance\";\nconst PROCEDURAL_MINING_CRON_ID = \"engram-procedural-mining\";\nconst CONTRADICTION_SCAN_CRON_ID = \"engram-contradiction-scan\";\nconst PATTERN_REINFORCEMENT_CRON_ID = \"engram-pattern-reinforcement\";\nconst GRAPH_EDGE_DECAY_CRON_ID = \"engram-graph-edge-decay\";\n\ntype CronJobsShape =\n  | Array<Record<string, unknown>>\n  | {\n      jobs: Array<Record<string, unknown>>;\n      [key: string]: unknown;\n    };\n\nasync function acquireCronJobsLock(jobsPath: string): Promise<() => Promise<void>> {\n  const lockPath = `${jobsPath}.lock`;\n  const start = Date.now();\n  const staleMs = 30_000;\n  const timeoutMs = 5_000;\n  await mkdir(path.dirname(lockPath), { recursive: true });\n\n  while (Date.now() - start < timeoutMs) {\n    try {\n      await mkdir(lockPath);\n      return async () => {\n        try {\n          await rm(lockPath, { recursive: true, force: true });\n        } catch {\n          // Lock cleanup should not fail cron registration.\n        }\n      };\n    } catch (error) {\n      const code = (error as NodeJS.ErrnoException).code;\n      if (code !== \"EEXIST\") {\n        throw error;\n      }\n      try {\n        const lockStat = await stat(lockPath);\n        if (Date.now() - lockStat.mtimeMs > staleMs) {\n          await rm(lockPath, { recursive: true, force: true });\n          continue;\n        }\n      } catch {\n        // Lock may have been released between stat/rm attempts.\n      }\n      await new Promise((resolve) => setTimeout(resolve, 25));\n    }\n  }\n\n  throw new Error(`cron jobs lock acquisition timed out after ${timeoutMs}ms`);\n}\n\nfunction parseCronJobsShape(raw: string): { parsed: CronJobsShape; jobs: Array<Record<string, unknown>> } {\n  const parsed = JSON.parse(raw) as CronJobsShape;\n  const jobs = Array.isArray(parsed) ? parsed : Array.isArray(parsed.jobs) ? parsed.jobs : null;\n  if (!jobs) {\n    throw new Error(\"jobs.json has unexpected structure\");\n  }\n  return { parsed, jobs };\n}\n\nasync function writeCronJobsAtomic(jobsPath: string, value: CronJobsShape): Promise<void> {\n  const tempPath = `${jobsPath}.${process.pid}.${Date.now()}.tmp`;\n  await writeFile(tempPath, JSON.stringify(value, null, 2) + \"\\n\", \"utf-8\");\n  await rename(tempPath, jobsPath);\n}\n\nexport async function ensureCronJob(\n  jobsPath: string,\n  jobId: string,\n  buildJob: () => Record<string, unknown>,\n  options: { updateExisting?: boolean; updateFields?: string[] } = {},\n): Promise<{ created: boolean; updated: boolean; jobId: string }> {\n  const releaseLock = await acquireCronJobsLock(jobsPath);\n  try {\n    const raw = await readFile(jobsPath, \"utf-8\");\n    const { parsed, jobs } = parseCronJobsShape(raw);\n\n    const existingIndex = jobs.findIndex((job) => job.id === jobId);\n    if (existingIndex >= 0) {\n      if (!options.updateExisting) {\n        return { created: false, updated: false, jobId };\n      }\n\n      const desired = buildJob();\n      const existing = jobs[existingIndex];\n      const next = mergeCronJobUpdate(existing, desired, options.updateFields);\n      if (stableJson(existing) === stableJson(next)) {\n        return { created: false, updated: false, jobId };\n      }\n\n      jobs[existingIndex] = next;\n      const output = Array.isArray(parsed) ? jobs : { ...parsed, jobs };\n      await writeCronJobsAtomic(jobsPath, output);\n      return { created: false, updated: true, jobId };\n    }\n\n    jobs.push(buildJob());\n    const output = Array.isArray(parsed) ? jobs : { ...parsed, jobs };\n    await writeCronJobsAtomic(jobsPath, output);\n    return { created: true, updated: false, jobId };\n  } finally {\n    await releaseLock();\n  }\n}\n\nfunction mergeCronJobUpdate(\n  existing: Record<string, unknown>,\n  desired: Record<string, unknown>,\n  updateFields?: string[],\n): Record<string, unknown> {\n  if (!updateFields) {\n    return desired;\n  }\n\n  const next = { ...existing };\n  for (const field of updateFields) {\n    if (Object.prototype.hasOwnProperty.call(desired, field)) {\n      next[field] = desired[field];\n    } else {\n      delete next[field];\n    }\n  }\n  return next;\n}\n\nfunction stableJson(value: unknown): string {\n  if (Array.isArray(value)) {\n    return `[${value.map((item) => stableJson(item)).join(\",\")}]`;\n  }\n  if (value && typeof value === \"object\") {\n    const record = value as Record<string, unknown>;\n    return `{${Object.keys(record)\n      .sort()\n      .map((key) => `${JSON.stringify(key)}:${stableJson(record[key])}`)\n      .join(\",\")}}`;\n  }\n  return JSON.stringify(value);\n}\n\nexport async function ensureDaySummaryCron(\n  jobsPath: string,\n  options: {\n    timezone: string;\n    agentId?: string;\n  },\n): Promise<{ created: boolean; jobId: string }> {\n  const agentId =\n    typeof options.agentId === \"string\" && options.agentId.trim().length > 0\n      ? options.agentId.trim()\n      : \"main\";\n\n  return ensureCronJob(jobsPath, DAY_SUMMARY_CRON_ID, () => ({\n    id: DAY_SUMMARY_CRON_ID,\n    agentId,\n    name: \"Remnic Day Summary (auto)\",\n    enabled: true,\n    schedule: {\n      kind: \"cron\",\n      expr: \"47 23 * * *\",\n      tz: options.timezone,\n    },\n    sessionTarget: \"isolated\",\n    wakeMode: \"now\",\n    payload: {\n      kind: \"agentTurn\",\n      timeoutSeconds: 900,\n      thinking: \"off\",\n      message:\n        \"You are OpenClaw automation. Call tool engram.day_summary with empty params (it will auto-gather today's facts). If successful output exactly NO_REPLY. On error output one concise line. Do NOT use message tool.\",\n    },\n    delivery: { mode: \"none\" },\n  }));\n}\n\nexport async function ensureNightlyGovernanceCron(\n  jobsPath: string,\n  options: {\n    timezone: string;\n    agentId?: string;\n    recentDays?: number;\n    maxMemories?: number;\n    batchSize?: number;\n    scheduleExpr?: string;\n  },\n): Promise<{ created: boolean; jobId: string }> {\n  const recentDays =\n    typeof options.recentDays === \"number\" && Number.isFinite(options.recentDays)\n      ? Math.max(1, Math.floor(options.recentDays))\n      : 2;\n  const maxMemories =\n    typeof options.maxMemories === \"number\" && Number.isFinite(options.maxMemories)\n      ? Math.max(1, Math.floor(options.maxMemories))\n      : 500;\n  const batchSize =\n    typeof options.batchSize === \"number\" && Number.isFinite(options.batchSize)\n      ? Math.max(1, Math.floor(options.batchSize))\n      : 100;\n  const scheduleExpr =\n    typeof options.scheduleExpr === \"string\" && options.scheduleExpr.trim().length > 0\n      ? options.scheduleExpr.trim()\n      : \"23 2 * * *\";\n  const agentId =\n    typeof options.agentId === \"string\" && options.agentId.trim().length > 0\n      ? options.agentId.trim()\n      : \"main\";\n\n  return ensureCronJob(jobsPath, GOVERNANCE_CRON_ID, () => ({\n      id: GOVERNANCE_CRON_ID,\n      agentId,\n      name: \"Remnic Nightly Governance (batched)\",\n      enabled: true,\n      schedule: {\n        kind: \"cron\",\n        expr: scheduleExpr,\n        tz: options.timezone,\n      },\n      sessionTarget: \"isolated\",\n      wakeMode: \"now\",\n      payload: {\n        kind: \"agentTurn\",\n        timeoutSeconds: 900,\n        thinking: \"off\",\n        message:\n          \"You are OpenClaw automation. Call the tool `engram.memory_governance_run` with params \" +\n          `{\"mode\": \"apply\", \"recentDays\": ${recentDays}, \"maxMemories\": ${maxMemories}, \"batchSize\": ${batchSize}}` +\n          \". If successful output exactly NO_REPLY. On error output one concise line. Do NOT use message tool.\",\n      },\n      delivery: { mode: \"none\" },\n    }));\n}\n\nexport async function ensureProceduralMiningCron(\n  jobsPath: string,\n  options: {\n    timezone: string;\n    agentId?: string;\n    scheduleExpr?: string;\n  },\n): Promise<{ created: boolean; jobId: string }> {\n  const scheduleExpr =\n    typeof options.scheduleExpr === \"string\" && options.scheduleExpr.trim().length > 0\n      ? options.scheduleExpr.trim()\n      : \"17 3 * * *\";\n  const agentId =\n    typeof options.agentId === \"string\" && options.agentId.trim().length > 0\n      ? options.agentId.trim()\n      : \"main\";\n\n  return ensureCronJob(jobsPath, PROCEDURAL_MINING_CRON_ID, () => ({\n    id: PROCEDURAL_MINING_CRON_ID,\n    agentId,\n    name: \"Remnic Procedural Mining (nightly)\",\n    enabled: true,\n    schedule: {\n      kind: \"cron\",\n      expr: scheduleExpr,\n      tz: options.timezone,\n    },\n    sessionTarget: \"isolated\",\n    wakeMode: \"now\",\n    payload: {\n      kind: \"agentTurn\",\n      timeoutSeconds: 900,\n      thinking: \"off\",\n      message:\n        \"You are OpenClaw automation. Call tool `engram.procedure_mining_run` with empty params. \" +\n        \"If successful output exactly NO_REPLY. On error output one concise line. Do NOT use message tool.\",\n    },\n    delivery: { mode: \"none\" },\n  }));\n}\n\nexport async function ensureContradictionScanCron(\n  jobsPath: string,\n  options: {\n    timezone: string;\n    agentId?: string;\n    scheduleExpr?: string;\n  },\n): Promise<{ created: boolean; jobId: string }> {\n  const scheduleExpr =\n    typeof options.scheduleExpr === \"string\" && options.scheduleExpr.trim().length > 0\n      ? options.scheduleExpr.trim()\n      : \"37 3 * * *\";\n  const agentId =\n    typeof options.agentId === \"string\" && options.agentId.trim().length > 0\n      ? options.agentId.trim()\n      : \"main\";\n\n  return ensureCronJob(jobsPath, CONTRADICTION_SCAN_CRON_ID, () => ({\n    id: CONTRADICTION_SCAN_CRON_ID,\n    agentId,\n    name: \"Remnic Contradiction Scan (nightly)\",\n    enabled: true,\n    schedule: {\n      kind: \"cron\",\n      expr: scheduleExpr,\n      tz: options.timezone,\n    },\n    sessionTarget: \"isolated\",\n    wakeMode: \"now\",\n    payload: {\n      kind: \"agentTurn\",\n      timeoutSeconds: 900,\n      thinking: \"off\",\n      message:\n        \"You are OpenClaw automation. Call tool `engram.contradiction_scan_run` with empty params. \" +\n        \"If successful output exactly NO_REPLY. On error output one concise line. Do NOT use message tool.\",\n    },\n    delivery: { mode: \"none\" },\n  }));\n}\n\nexport async function ensurePatternReinforcementCron(\n  jobsPath: string,\n  options: {\n    timezone: string;\n    agentId?: string;\n    /**\n     * Cron expression. Default `\"53 4 * * 0\"` — Sunday 04:53 in the\n     * configured timezone, deliberately offset from sibling crons\n     * (`23 2 * * *`, `17 3 * * *`, `37 3 * * *`) so the maintenance\n     * passes don't pile up on the same minute.\n     */\n    scheduleExpr?: string;\n  },\n): Promise<{ created: boolean; jobId: string }> {\n  const scheduleExpr =\n    typeof options.scheduleExpr === \"string\" && options.scheduleExpr.trim().length > 0\n      ? options.scheduleExpr.trim()\n      : \"53 4 * * 0\";\n  const agentId =\n    typeof options.agentId === \"string\" && options.agentId.trim().length > 0\n      ? options.agentId.trim()\n      : \"main\";\n\n  return ensureCronJob(jobsPath, PATTERN_REINFORCEMENT_CRON_ID, () => ({\n    id: PATTERN_REINFORCEMENT_CRON_ID,\n    agentId,\n    name: \"Remnic Pattern Reinforcement (weekly)\",\n    enabled: true,\n    schedule: {\n      kind: \"cron\",\n      expr: scheduleExpr,\n      tz: options.timezone,\n    },\n    sessionTarget: \"isolated\",\n    wakeMode: \"now\",\n    payload: {\n      kind: \"agentTurn\",\n      timeoutSeconds: 900,\n      thinking: \"off\",\n      message:\n        \"You are OpenClaw automation. Call tool `engram.pattern_reinforcement_run` with empty params. \" +\n        \"If successful output exactly NO_REPLY. On error output one concise line. Do NOT use message tool.\",\n    },\n    delivery: { mode: \"none\" },\n  }));\n}\n\n/**\n * Register a cron job that runs the graph-edge-decay maintenance pass\n * (issue #681 PR 2/3). Default schedule is weekly on Sunday 04:13 — the\n * cadence is configurable via `scheduleExpr`. Cadence is also expressible\n * in milliseconds via `Config.graphEdgeDecayCadenceMs`; the orchestrator\n * picks the right cron expression for sub-daily, daily, or weekly cadence.\n */\nexport async function ensureGraphEdgeDecayCron(\n  jobsPath: string,\n  options: {\n    timezone: string;\n    agentId?: string;\n    scheduleExpr?: string;\n  },\n): Promise<{ created: boolean; jobId: string }> {\n  const scheduleExpr =\n    typeof options.scheduleExpr === \"string\" && options.scheduleExpr.trim().length > 0\n      ? options.scheduleExpr.trim()\n      : \"13 4 * * 0\";\n  const agentId =\n    typeof options.agentId === \"string\" && options.agentId.trim().length > 0\n      ? options.agentId.trim()\n      : \"main\";\n\n  const scheduleLabel = graphEdgeDecayScheduleLabel(scheduleExpr);\n\n  return ensureCronJob(\n    jobsPath,\n    GRAPH_EDGE_DECAY_CRON_ID,\n    () => ({\n      id: GRAPH_EDGE_DECAY_CRON_ID,\n      agentId,\n      // Schedule label reflects the actual cron expression (`daily` /\n      // `weekly` / `custom`) so cron dashboards do not show \"weekly\"\n      // when the schedule is in fact daily — Cursor review on PR #729.\n      name: `Remnic Graph Edge Decay (${scheduleLabel})`,\n      enabled: true,\n      schedule: {\n        kind: \"cron\",\n        expr: scheduleExpr,\n        tz: options.timezone,\n      },\n      sessionTarget: \"isolated\",\n      wakeMode: \"now\",\n      payload: {\n        kind: \"agentTurn\",\n        timeoutSeconds: 900,\n        thinking: \"off\",\n        message:\n          \"You are OpenClaw automation. Call tool `engram.graph_edge_decay_run` with empty params. \" +\n          \"If successful output exactly NO_REPLY. On error output one concise line. Do NOT use message tool.\",\n      },\n      delivery: { mode: \"none\" },\n    }),\n    {\n      updateExisting: true,\n      updateFields: [\"name\", \"schedule\"],\n    },\n  );\n}\n\n/**\n * Pick a cron expression that approximates a cadence in milliseconds.\n *\n * - cadence <= 1 day → daily at 04:13. Sub-daily cadence is not natively\n *   expressible in 5-field cron without hour/minute step patterns; daily\n *   preserves the previous conservative behavior for those values.\n * - cadence > 1 day → weekly on Sunday 04:13. Multi-day intervals like\n *   2-6 days cannot be represented accurately by a portable 5-field cron\n *   expression, and daily would run more often than requested.\n *\n * Operators who need finer-grained control should set `scheduleExpr`\n * directly via `ensureGraphEdgeDecayCron`.\n */\nexport function graphEdgeDecayCadenceToCronExpr(cadenceMs: number): string {\n  if (!Number.isFinite(cadenceMs) || cadenceMs <= 0) {\n    return \"13 4 * * 0\";\n  }\n  const day = 24 * 60 * 60 * 1000;\n  if (cadenceMs <= day) return \"13 4 * * *\";\n  return \"13 4 * * 0\";\n}\n\n/**\n * Derive a human-friendly schedule label (\"daily\" / \"weekly\" / \"custom\")\n * for the given cron expression. Used to keep the cron job name in\n * sync with the actual schedule (Cursor review on PR #729).\n */\nfunction graphEdgeDecayScheduleLabel(scheduleExpr: string): string {\n  if (scheduleExpr === \"13 4 * * *\") return \"daily\";\n  if (scheduleExpr === \"13 4 * * 0\") return \"weekly\";\n  return \"custom\";\n}\n"],"mappings":";AAAA,SAAS,OAAO,UAAU,QAAQ,IAAI,MAAM,iBAAiB;AAC7D,OAAO,UAAU;AAEjB,IAAM,sBAAsB;AAC5B,IAAM,qBAAqB;AAC3B,IAAM,4BAA4B;AAClC,IAAM,6BAA6B;AACnC,IAAM,gCAAgC;AACtC,IAAM,2BAA2B;AASjC,eAAe,oBAAoB,UAAgD;AACjF,QAAM,WAAW,GAAG,QAAQ;AAC5B,QAAM,QAAQ,KAAK,IAAI;AACvB,QAAM,UAAU;AAChB,QAAM,YAAY;AAClB,QAAM,MAAM,KAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AAEvD,SAAO,KAAK,IAAI,IAAI,QAAQ,WAAW;AACrC,QAAI;AACF,YAAM,MAAM,QAAQ;AACpB,aAAO,YAAY;AACjB,YAAI;AACF,gBAAM,GAAG,UAAU,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,QACrD,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AACd,YAAM,OAAQ,MAAgC;AAC9C,UAAI,SAAS,UAAU;AACrB,cAAM;AAAA,MACR;AACA,UAAI;AACF,cAAM,WAAW,MAAM,KAAK,QAAQ;AACpC,YAAI,KAAK,IAAI,IAAI,SAAS,UAAU,SAAS;AAC3C,gBAAM,GAAG,UAAU,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AACnD;AAAA,QACF;AAAA,MACF,QAAQ;AAAA,MAER;AACA,YAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AAAA,IACxD;AAAA,EACF;AAEA,QAAM,IAAI,MAAM,8CAA8C,SAAS,IAAI;AAC7E;AAEA,SAAS,mBAAmB,KAA8E;AACxG,QAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,QAAM,OAAO,MAAM,QAAQ,MAAM,IAAI,SAAS,MAAM,QAAQ,OAAO,IAAI,IAAI,OAAO,OAAO;AACzF,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,MAAM,oCAAoC;AAAA,EACtD;AACA,SAAO,EAAE,QAAQ,KAAK;AACxB;AAEA,eAAe,oBAAoB,UAAkB,OAAqC;AACxF,QAAM,WAAW,GAAG,QAAQ,IAAI,QAAQ,GAAG,IAAI,KAAK,IAAI,CAAC;AACzD,QAAM,UAAU,UAAU,KAAK,UAAU,OAAO,MAAM,CAAC,IAAI,MAAM,OAAO;AACxE,QAAM,OAAO,UAAU,QAAQ;AACjC;AAEA,eAAsB,cACpB,UACA,OACA,UACA,UAAiE,CAAC,GACF;AAChE,QAAM,cAAc,MAAM,oBAAoB,QAAQ;AACtD,MAAI;AACF,UAAM,MAAM,MAAM,SAAS,UAAU,OAAO;AAC5C,UAAM,EAAE,QAAQ,KAAK,IAAI,mBAAmB,GAAG;AAE/C,UAAM,gBAAgB,KAAK,UAAU,CAAC,QAAQ,IAAI,OAAO,KAAK;AAC9D,QAAI,iBAAiB,GAAG;AACtB,UAAI,CAAC,QAAQ,gBAAgB;AAC3B,eAAO,EAAE,SAAS,OAAO,SAAS,OAAO,MAAM;AAAA,MACjD;AAEA,YAAM,UAAU,SAAS;AACzB,YAAM,WAAW,KAAK,aAAa;AACnC,YAAM,OAAO,mBAAmB,UAAU,SAAS,QAAQ,YAAY;AACvE,UAAI,WAAW,QAAQ,MAAM,WAAW,IAAI,GAAG;AAC7C,eAAO,EAAE,SAAS,OAAO,SAAS,OAAO,MAAM;AAAA,MACjD;AAEA,WAAK,aAAa,IAAI;AACtB,YAAMA,UAAS,MAAM,QAAQ,MAAM,IAAI,OAAO,EAAE,GAAG,QAAQ,KAAK;AAChE,YAAM,oBAAoB,UAAUA,OAAM;AAC1C,aAAO,EAAE,SAAS,OAAO,SAAS,MAAM,MAAM;AAAA,IAChD;AAEA,SAAK,KAAK,SAAS,CAAC;AACpB,UAAM,SAAS,MAAM,QAAQ,MAAM,IAAI,OAAO,EAAE,GAAG,QAAQ,KAAK;AAChE,UAAM,oBAAoB,UAAU,MAAM;AAC1C,WAAO,EAAE,SAAS,MAAM,SAAS,OAAO,MAAM;AAAA,EAChD,UAAE;AACA,UAAM,YAAY;AAAA,EACpB;AACF;AAEA,SAAS,mBACP,UACA,SACA,cACyB;AACzB,MAAI,CAAC,cAAc;AACjB,WAAO;AAAA,EACT;AAEA,QAAM,OAAO,EAAE,GAAG,SAAS;AAC3B,aAAW,SAAS,cAAc;AAChC,QAAI,OAAO,UAAU,eAAe,KAAK,SAAS,KAAK,GAAG;AACxD,WAAK,KAAK,IAAI,QAAQ,KAAK;AAAA,IAC7B,OAAO;AACL,aAAO,KAAK,KAAK;AAAA,IACnB;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,WAAW,OAAwB;AAC1C,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,IAAI,MAAM,IAAI,CAAC,SAAS,WAAW,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC;AAAA,EAC5D;AACA,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,UAAM,SAAS;AACf,WAAO,IAAI,OAAO,KAAK,MAAM,EAC1B,KAAK,EACL,IAAI,CAAC,QAAQ,GAAG,KAAK,UAAU,GAAG,CAAC,IAAI,WAAW,OAAO,GAAG,CAAC,CAAC,EAAE,EAChE,KAAK,GAAG,CAAC;AAAA,EACd;AACA,SAAO,KAAK,UAAU,KAAK;AAC7B;AAEA,eAAsB,qBACpB,UACA,SAI8C;AAC9C,QAAM,UACJ,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,KAAK,EAAE,SAAS,IACnE,QAAQ,QAAQ,KAAK,IACrB;AAEN,SAAO,cAAc,UAAU,qBAAqB,OAAO;AAAA,IACzD,IAAI;AAAA,IACJ;AAAA,IACA,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,IAAI,QAAQ;AAAA,IACd;AAAA,IACA,eAAe;AAAA,IACf,UAAU;AAAA,IACV,SAAS;AAAA,MACP,MAAM;AAAA,MACN,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,SACE;AAAA,IACJ;AAAA,IACA,UAAU,EAAE,MAAM,OAAO;AAAA,EAC3B,EAAE;AACJ;AAEA,eAAsB,4BACpB,UACA,SAQ8C;AAC9C,QAAM,aACJ,OAAO,QAAQ,eAAe,YAAY,OAAO,SAAS,QAAQ,UAAU,IACxE,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,UAAU,CAAC,IAC1C;AACN,QAAM,cACJ,OAAO,QAAQ,gBAAgB,YAAY,OAAO,SAAS,QAAQ,WAAW,IAC1E,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,WAAW,CAAC,IAC3C;AACN,QAAM,YACJ,OAAO,QAAQ,cAAc,YAAY,OAAO,SAAS,QAAQ,SAAS,IACtE,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,SAAS,CAAC,IACzC;AACN,QAAM,eACJ,OAAO,QAAQ,iBAAiB,YAAY,QAAQ,aAAa,KAAK,EAAE,SAAS,IAC7E,QAAQ,aAAa,KAAK,IAC1B;AACN,QAAM,UACJ,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,KAAK,EAAE,SAAS,IACnE,QAAQ,QAAQ,KAAK,IACrB;AAEN,SAAO,cAAc,UAAU,oBAAoB,OAAO;AAAA,IACtD,IAAI;AAAA,IACJ;AAAA,IACA,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,IAAI,QAAQ;AAAA,IACd;AAAA,IACA,eAAe;AAAA,IACf,UAAU;AAAA,IACV,SAAS;AAAA,MACP,MAAM;AAAA,MACN,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,SACE,2HACmC,UAAU,oBAAoB,WAAW,kBAAkB,SAAS;AAAA,IAE3G;AAAA,IACA,UAAU,EAAE,MAAM,OAAO;AAAA,EAC3B,EAAE;AACN;AAEA,eAAsB,2BACpB,UACA,SAK8C;AAC9C,QAAM,eACJ,OAAO,QAAQ,iBAAiB,YAAY,QAAQ,aAAa,KAAK,EAAE,SAAS,IAC7E,QAAQ,aAAa,KAAK,IAC1B;AACN,QAAM,UACJ,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,KAAK,EAAE,SAAS,IACnE,QAAQ,QAAQ,KAAK,IACrB;AAEN,SAAO,cAAc,UAAU,2BAA2B,OAAO;AAAA,IAC/D,IAAI;AAAA,IACJ;AAAA,IACA,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,IAAI,QAAQ;AAAA,IACd;AAAA,IACA,eAAe;AAAA,IACf,UAAU;AAAA,IACV,SAAS;AAAA,MACP,MAAM;AAAA,MACN,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,SACE;AAAA,IAEJ;AAAA,IACA,UAAU,EAAE,MAAM,OAAO;AAAA,EAC3B,EAAE;AACJ;AAEA,eAAsB,4BACpB,UACA,SAK8C;AAC9C,QAAM,eACJ,OAAO,QAAQ,iBAAiB,YAAY,QAAQ,aAAa,KAAK,EAAE,SAAS,IAC7E,QAAQ,aAAa,KAAK,IAC1B;AACN,QAAM,UACJ,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,KAAK,EAAE,SAAS,IACnE,QAAQ,QAAQ,KAAK,IACrB;AAEN,SAAO,cAAc,UAAU,4BAA4B,OAAO;AAAA,IAChE,IAAI;AAAA,IACJ;AAAA,IACA,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,IAAI,QAAQ;AAAA,IACd;AAAA,IACA,eAAe;AAAA,IACf,UAAU;AAAA,IACV,SAAS;AAAA,MACP,MAAM;AAAA,MACN,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,SACE;AAAA,IAEJ;AAAA,IACA,UAAU,EAAE,MAAM,OAAO;AAAA,EAC3B,EAAE;AACJ;AAEA,eAAsB,+BACpB,UACA,SAW8C;AAC9C,QAAM,eACJ,OAAO,QAAQ,iBAAiB,YAAY,QAAQ,aAAa,KAAK,EAAE,SAAS,IAC7E,QAAQ,aAAa,KAAK,IAC1B;AACN,QAAM,UACJ,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,KAAK,EAAE,SAAS,IACnE,QAAQ,QAAQ,KAAK,IACrB;AAEN,SAAO,cAAc,UAAU,+BAA+B,OAAO;AAAA,IACnE,IAAI;AAAA,IACJ;AAAA,IACA,MAAM;AAAA,IACN,SAAS;AAAA,IACT,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,IAAI,QAAQ;AAAA,IACd;AAAA,IACA,eAAe;AAAA,IACf,UAAU;AAAA,IACV,SAAS;AAAA,MACP,MAAM;AAAA,MACN,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,SACE;AAAA,IAEJ;AAAA,IACA,UAAU,EAAE,MAAM,OAAO;AAAA,EAC3B,EAAE;AACJ;AASA,eAAsB,yBACpB,UACA,SAK8C;AAC9C,QAAM,eACJ,OAAO,QAAQ,iBAAiB,YAAY,QAAQ,aAAa,KAAK,EAAE,SAAS,IAC7E,QAAQ,aAAa,KAAK,IAC1B;AACN,QAAM,UACJ,OAAO,QAAQ,YAAY,YAAY,QAAQ,QAAQ,KAAK,EAAE,SAAS,IACnE,QAAQ,QAAQ,KAAK,IACrB;AAEN,QAAM,gBAAgB,4BAA4B,YAAY;AAE9D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,OAAO;AAAA,MACL,IAAI;AAAA,MACJ;AAAA;AAAA;AAAA;AAAA,MAIA,MAAM,4BAA4B,aAAa;AAAA,MAC/C,SAAS;AAAA,MACT,UAAU;AAAA,QACR,MAAM;AAAA,QACN,MAAM;AAAA,QACN,IAAI,QAAQ;AAAA,MACd;AAAA,MACA,eAAe;AAAA,MACf,UAAU;AAAA,MACV,SAAS;AAAA,QACP,MAAM;AAAA,QACN,gBAAgB;AAAA,QAChB,UAAU;AAAA,QACV,SACE;AAAA,MAEJ;AAAA,MACA,UAAU,EAAE,MAAM,OAAO;AAAA,IAC3B;AAAA,IACA;AAAA,MACE,gBAAgB;AAAA,MAChB,cAAc,CAAC,QAAQ,UAAU;AAAA,IACnC;AAAA,EACF;AACF;AAeO,SAAS,gCAAgC,WAA2B;AACzE,MAAI,CAAC,OAAO,SAAS,SAAS,KAAK,aAAa,GAAG;AACjD,WAAO;AAAA,EACT;AACA,QAAM,MAAM,KAAK,KAAK,KAAK;AAC3B,MAAI,aAAa,IAAK,QAAO;AAC7B,SAAO;AACT;AAOA,SAAS,4BAA4B,cAA8B;AACjE,MAAI,iBAAiB,aAAc,QAAO;AAC1C,MAAI,iBAAiB,aAAc,QAAO;AAC1C,SAAO;AACT;","names":["output"]}

package/dist/{chunk-EAZGEEG2.js → chunk-6L46YAEZ.js}

@@ -4,7 +4,7 @@ var REMNIC_CHATGPT_MEMORY_INSPECTOR_CANONICAL_TOOL = "remnic.chatgpt_memory_insp
 var REMNIC_CHATGPT_MEMORY_INSPECTOR_WIDGET_URI = "ui://remnic/memory-inspector.v1.html";
 var REMNIC_CHATGPT_MEMORY_INSPECTOR_MIME_TYPE = "text/html;profile=mcp-app";
 function buildChatGptMemoryInspectorActionRequest(input, recall, xray) {
-  const provenances = xray === null ? recall.results.map(missingRecallProvenance) : xray.results.map((result) => result.provenance ?? missingProvenance(result));
+  const provenances = buildRecallProvenances(recall, xray);
   const hasUnsafeOrMissingProvenance = provenances.some(
     (provenance) => provenance.safeToUse === false || provenance.safety === "blocked"
   ) || provenances.length < recall.count;
@@ -37,13 +37,7 @@ function buildChatGptMemoryInspectorActionRequest(input, recall, xray) {
 }
 function buildChatGptMemoryInspectorResult(input, recall, xray, actionConfidence) {
   const xrayUnavailable = xray === null;
-  const xrayById = /* @__PURE__ */ new Map();
-  const xrayByPath = /* @__PURE__ */ new Map();
-  for (const result of xray?.results ?? []) {
-    xrayById.set(result.memoryId, result);
-    xrayByPath.set(result.path, result);
-  }
-  const matchXrayResult = (summary) => (summary.path ? xrayByPath.get(summary.path) : void 0) ?? xrayById.get(summary.id);
+  const matchXrayResult = buildXrayResultMatcher(xray);
   const matchedXrayResults = recall.results.map(matchXrayResult);
   const memories = recall.results.slice(0, 8).map((summary) => {
     const xrayResult = matchXrayResult(summary);
@@ -266,6 +260,33 @@ function average(values) {
   if (values.length === 0) return void 0;
   return values.reduce((sum, value) => sum + value, 0) / values.length;
 }
+function buildRecallProvenances(recall, xray) {
+  if (xray === null) {
+    return recall.results.map(missingRecallProvenance);
+  }
+  const matchXrayResult = buildXrayResultMatcher(xray);
+  return recall.results.map((summary) => {
+    const result = matchXrayResult(summary);
+    if (result === void 0) {
+      return missingXrayResultProvenance(summary);
+    }
+    return result.provenance ?? missingProvenance(result);
+  });
+}
+function buildXrayResultMatcher(xray) {
+  const xrayById = /* @__PURE__ */ new Map();
+  const xrayByPath = /* @__PURE__ */ new Map();
+  for (const result of xray?.results ?? []) {
+    xrayById.set(result.memoryId, result);
+    xrayByPath.set(result.path, result);
+  }
+  return (summary) => {
+    if (summary.path) {
+      return xrayByPath.get(summary.path);
+    }
+    return xrayById.get(summary.id);
+  };
+}
 function missingProvenance(result) {
   return {
     source: "unknown",
@@ -281,6 +302,21 @@ function missingProvenance(result) {
     safetyReasons: ["X-ray provenance was missing for this memory."]
   };
 }
+function missingXrayResultProvenance(summary) {
+  return {
+    source: "unknown",
+    scope: "unknown",
+    userContextScopes: [],
+    retrievalReason: `X-ray result missing for ${summary.path || summary.id}`,
+    confidence: 0,
+    stale: false,
+    corrected: false,
+    correctionState: "none",
+    safeToUse: false,
+    safety: "blocked",
+    safetyReasons: ["X-ray result was missing for this recalled memory."]
+  };
+}
 function missingRecallProvenance(summary) {
   return {
     source: "unknown",
@@ -332,4 +368,4 @@ export {
   buildChatGptMemoryInspectorResult,
   REMNIC_CHATGPT_MEMORY_INSPECTOR_WIDGET_HTML
 };
-//# sourceMappingURL=chunk-EAZGEEG2.js.map
+//# sourceMappingURL=chunk-6L46YAEZ.js.map

package/dist/chunk-6L46YAEZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/mcp-memory-inspector-app.ts"],"sourcesContent":["import type { EngramAccessRecallResponse } from \"./access-service.js\";\nimport type { ActionConfidenceRequest } from \"./access-schema.js\";\nimport type { RecallXrayResult, RecallXraySnapshot } from \"./recall-xray.js\";\nimport type { ActionConfidenceResult } from \"./action-confidence.js\";\nimport type { RetrievedMemoryProvenance } from \"./memory-provenance.js\";\n\nexport const REMNIC_CHATGPT_MEMORY_INSPECTOR_TOOL =\n  \"engram.chatgpt_memory_inspector\" as const;\nexport const REMNIC_CHATGPT_MEMORY_INSPECTOR_CANONICAL_TOOL =\n  \"remnic.chatgpt_memory_inspector\" as const;\nexport const REMNIC_CHATGPT_MEMORY_INSPECTOR_WIDGET_URI =\n  \"ui://remnic/memory-inspector.v1.html\" as const;\nexport const REMNIC_CHATGPT_MEMORY_INSPECTOR_MIME_TYPE =\n  \"text/html;profile=mcp-app\" as const;\n\nexport interface RemnicChatGptMemoryInspectorInput {\n  query: string;\n  sessionKey?: string;\n  namespace?: string;\n  currentContextScopes?: string[];\n}\n\nexport interface RemnicChatGptMemoryCard {\n  id: string;\n  path?: string;\n  category?: string;\n  status?: string;\n  preview?: string;\n  servedBy?: string;\n  score?: number;\n  source?: string;\n  scope?: string;\n  retrievalReason?: string;\n  confidence?: number;\n  stale?: boolean;\n  corrected?: boolean;\n  safeToUse?: boolean;\n  safety?: string;\n  safetyReasons: string[];\n  userContextScopes: string[];\n}\n\nexport interface RemnicChatGptMemoryInspectorResult {\n  app: {\n    name: \"Remnic Memory Inspector\";\n    resourceUri: typeof REMNIC_CHATGPT_MEMORY_INSPECTOR_WIDGET_URI;\n    archetype: \"vanilla-widget\";\n  };\n  query: string;\n  sessionKey?: string;\n  namespace: string;\n  safeRecallPreview: string;\n  memoryCount: number;\n  memoryIds: string[];\n  memories: RemnicChatGptMemoryCard[];\n  actionConfidence: ActionConfidenceResult;\n  affordances: Array<{\n    id: \"why\" | \"correct\" | \"forget\" | \"scope\";\n    label: string;\n    followUpPrompt: string;\n  }>;\n  guidance: {\n    correctionTool: \"remnic.suggestion_submit\";\n    forgetTool: \"remnic.memory_action_apply\";\n    scopeTool: \"remnic.memory_action_apply\";\n    note: string;\n  };\n}\n\nexport function buildChatGptMemoryInspectorActionRequest(\n  input: RemnicChatGptMemoryInspectorInput,\n  recall: EngramAccessRecallResponse,\n  xray: RecallXraySnapshot | null,\n): ActionConfidenceRequest {\n  const provenances = buildRecallProvenances(recall, xray);\n  const hasUnsafeOrMissingProvenance = provenances.some(\n    (provenance) => provenance.safeToUse === false || provenance.safety === \"blocked\",\n  ) || provenances.length < recall.count;\n\n  const request: ActionConfidenceRequest = {\n    intendedAction: `Use Remnic memory to answer: ${input.query}`,\n    risk: \"medium\",\n    contextReadiness:\n      recall.count > 0 && !hasUnsafeOrMissingProvenance ? \"sufficient\" : \"partial\",\n    retrievedMemories: provenances.map((provenance) => ({\n      source: provenance.source,\n      created: provenance.created,\n      updated: provenance.updated,\n      scope: provenance.scope,\n      userContextScopes: provenance.userContextScopes,\n      retrievalReason: provenance.retrievalReason,\n      confidence: provenance.confidence,\n      stale: provenance.stale,\n      corrected: provenance.corrected,\n      correctionState: provenance.correctionState,\n      safeToUse: provenance.safeToUse,\n      safety: provenance.safety,\n      safetyReasons: provenance.safetyReasons,\n    })),\n  };\n  const confidence = provenances.length > 0\n    ? average(provenances.map((provenance) => provenance.confidence ?? 0.5))\n    : undefined;\n  if (confidence !== undefined) request.confidence = confidence;\n  if (input.currentContextScopes !== undefined) {\n    request.currentContextScopes = input.currentContextScopes;\n  }\n  return request;\n}\n\nexport function buildChatGptMemoryInspectorResult(\n  input: RemnicChatGptMemoryInspectorInput,\n  recall: EngramAccessRecallResponse,\n  xray: RecallXraySnapshot | null,\n  actionConfidence: ActionConfidenceResult,\n): RemnicChatGptMemoryInspectorResult {\n  const xrayUnavailable = xray === null;\n  const matchXrayResult = buildXrayResultMatcher(xray);\n  const matchedXrayResults = recall.results.map(matchXrayResult);\n\n  const memories = recall.results.slice(0, 8).map((summary) => {\n    const xrayResult = matchXrayResult(summary);\n    const provenance = xrayResult?.provenance;\n    const unverified = !xrayUnavailable && provenance === undefined;\n    const blocked = provenance?.safety === \"blocked\";\n    const preview = xrayUnavailable\n      ? \"Preview withheld: X-ray provenance was unavailable for this recall.\"\n      : unverified\n        ? \"Preview withheld: X-ray provenance was missing for this memory.\"\n      : blocked\n        ? \"Preview withheld: this memory is blocked in the current context.\"\n        : summary.preview;\n    return {\n      id: summary.id,\n      path: summary.path,\n      category: summary.category,\n      status: summary.status,\n      preview,\n      servedBy: xrayResult?.servedBy,\n      score: xrayResult?.scoreDecomposition.final,\n      source: provenance?.source,\n      scope: provenance?.scope,\n      retrievalReason: provenance?.retrievalReason,\n      confidence: provenance?.confidence,\n      stale: provenance?.stale,\n      corrected: provenance?.corrected,\n      safeToUse: provenance?.safeToUse ?? (unverified ? false : undefined),\n      safety: provenance?.safety ?? (unverified ? \"blocked\" : undefined),\n      safetyReasons: provenance?.safetyReasons\n        ?? (unverified ? [\"X-ray provenance was missing for this memory.\"] : []),\n      userContextScopes: provenance?.userContextScopes ?? [],\n    };\n  });\n  const blockedCount = matchedXrayResults\n    .filter((result) => result?.provenance?.safety === \"blocked\")\n    .length;\n  const missingProvenanceCount = xrayUnavailable\n    ? 0\n    : matchedXrayResults\n      .filter((result) => result?.provenance === undefined)\n    .length;\n  const safeRecallPreview = xrayUnavailable\n    ? \"Recall preview withheld: X-ray provenance was unavailable, so memory safety could not be verified.\"\n    : blockedCount > 0 || missingProvenanceCount > 0\n      ? formatUnsafeRecallPreview(blockedCount, missingProvenanceCount)\n      : truncate(recall.context, 1_500);\n\n  const primaryMemoryId = memories[0]?.id ?? \"<memory-id>\";\n  return {\n    app: {\n      name: \"Remnic Memory Inspector\",\n      resourceUri: REMNIC_CHATGPT_MEMORY_INSPECTOR_WIDGET_URI,\n      archetype: \"vanilla-widget\",\n    },\n    query: recall.query || input.query,\n    ...(input.sessionKey ? { sessionKey: input.sessionKey } : {}),\n    namespace: recall.namespace,\n    safeRecallPreview,\n    memoryCount: recall.count,\n    memoryIds: recall.memoryIds,\n    memories,\n    actionConfidence,\n    affordances: [\n      {\n        id: \"why\",\n        label: \"Why retrieved\",\n        followUpPrompt:\n          `Explain why Remnic retrieved memory ${primaryMemoryId} for \"${input.query}\" using its provenance, score, safety, and retrieval reason.`,\n      },\n      {\n        id: \"correct\",\n        label: \"Correct\",\n        followUpPrompt:\n          `Help me correct memory ${primaryMemoryId}. Draft a replacement or correction and use remnic.suggestion_submit with dryRun first.`,\n      },\n      {\n        id: \"forget\",\n        label: \"Forget\",\n        followUpPrompt:\n          `Help me forget or quarantine memory ${primaryMemoryId}. Ask me to confirm before using any destructive or persistent Remnic action.`,\n      },\n      {\n        id: \"scope\",\n        label: \"Scope\",\n        followUpPrompt:\n          `Help me scope memory ${primaryMemoryId} so it is only used in the right context. Prefer a dry-run Remnic action before any persistent change.`,\n      },\n    ],\n    guidance: {\n      correctionTool: \"remnic.suggestion_submit\",\n      forgetTool: \"remnic.memory_action_apply\",\n      scopeTool: \"remnic.memory_action_apply\",\n      note:\n        \"The demo only proposes correction, forget, and scoping flows. The widget sends follow-up prompts; persistent changes still require an explicit tool call and user confirmation.\",\n    },\n  };\n}\n\nexport const REMNIC_CHATGPT_MEMORY_INSPECTOR_WIDGET_HTML = `\n<div id=\"root\" class=\"remnic-app\">Loading Remnic memory inspector...</div>\n<style>\n  :root {\n    color-scheme: light dark;\n    --bg: #f8faf8;\n    --panel: #ffffff;\n    --text: #17201b;\n    --muted: #56635b;\n    --line: #d8e0da;\n    --accent: #2f7d57;\n    --warn: #9a5b14;\n    --bad: #9c2b2b;\n  }\n  @media (prefers-color-scheme: dark) {\n    :root {\n      --bg: #101512;\n      --panel: #18201b;\n      --text: #edf4ef;\n      --muted: #a8b6ad;\n      --line: #304036;\n      --accent: #75c79a;\n      --warn: #e0ad63;\n      --bad: #f08a8a;\n    }\n  }\n  body { margin: 0; background: var(--bg); color: var(--text); font: 14px/1.45 system-ui, -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif; }\n  .remnic-app { padding: 14px; display: grid; gap: 12px; }\n  .header, .section, .memory { background: var(--panel); border: 1px solid var(--line); border-radius: 8px; padding: 12px; }\n  .title { font-size: 16px; font-weight: 650; margin: 0; }\n  .muted { color: var(--muted); }\n  .grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(160px, 1fr)); gap: 8px; }\n  .pill { display: inline-flex; align-items: center; gap: 4px; border: 1px solid var(--line); border-radius: 999px; padding: 2px 8px; margin: 2px 4px 2px 0; color: var(--muted); }\n  .safe { color: var(--accent); }\n  .review { color: var(--warn); }\n  .blocked { color: var(--bad); }\n  .memory { display: grid; gap: 8px; }\n  .memory-title { display: flex; justify-content: space-between; gap: 12px; align-items: baseline; font-weight: 650; }\n  .preview { white-space: pre-wrap; overflow-wrap: anywhere; }\n  .actions { display: flex; flex-wrap: wrap; gap: 8px; }\n  button { border: 1px solid var(--line); background: transparent; color: var(--text); border-radius: 6px; padding: 6px 9px; font: inherit; cursor: pointer; }\n  button:hover { border-color: var(--accent); }\n  pre { white-space: pre-wrap; overflow-wrap: anywhere; margin: 0; color: var(--muted); }\n</style>\n<script>\n  const root = document.getElementById(\"root\");\n\n  function escapeHtml(value) {\n    return String(value ?? \"\").replace(/[&<>\"']/g, (char) => ({\n      \"&\": \"&amp;\",\n      \"<\": \"&lt;\",\n      \">\": \"&gt;\",\n      '\"': \"&quot;\",\n      \"'\": \"&#39;\",\n    }[char]));\n  }\n\n  function statusClass(value) {\n    if (value === \"blocked\" || value === false) return \"blocked\";\n    if (value === \"requires-review\") return \"review\";\n    return \"safe\";\n  }\n\n  function followUp(prompt) {\n    if (window.openai?.sendFollowUpMessage) {\n      window.openai.sendFollowUpMessage({ prompt, scrollToBottom: true });\n      return;\n    }\n    window.parent.postMessage({\n      jsonrpc: \"2.0\",\n      method: \"ui/message\",\n      params: {\n        role: \"user\",\n        content: [{ type: \"text\", text: prompt }],\n      },\n    }, \"*\");\n  }\n\n  function actionButtons(actions) {\n    return (actions ?? []).map((action) =>\n      '<button type=\"button\" data-prompt=\"' + escapeHtml(action.followUpPrompt) + '\">' +\n      escapeHtml(action.label) +\n      '</button>'\n    ).join(\"\");\n  }\n\n  function render(payload) {\n    const data = payload?.structuredContent ?? payload ?? window.openai?.toolOutput ?? {};\n    const confidence = data.actionConfidence ?? {};\n    const memories = Array.isArray(data.memories) ? data.memories : [];\n    root.innerHTML = [\n      '<section class=\"header\">',\n        '<p class=\"title\">Remnic Memory Inspector</p>',\n        '<div class=\"muted\">' + escapeHtml(data.query ?? \"No query\") + '</div>',\n        '<div class=\"grid\">',\n          '<div><strong>Namespace</strong><br><span class=\"muted\">' + escapeHtml(data.namespace ?? \"default\") + '</span></div>',\n          '<div><strong>Decision</strong><br><span class=\"' + statusClass(confidence.decision) + '\">' + escapeHtml(confidence.decision ?? \"unknown\") + '</span></div>',\n          '<div><strong>Memories</strong><br><span class=\"muted\">' + escapeHtml(data.memoryCount ?? memories.length) + '</span></div>',\n        '</div>',\n      '</section>',\n      '<section class=\"section\">',\n        '<strong>Safe recall preview</strong>',\n        '<pre>' + escapeHtml(data.safeRecallPreview ?? \"\") + '</pre>',\n      '</section>',\n      '<section class=\"section actions\">',\n        actionButtons(data.affordances),\n      '</section>',\n      memories.map((memory) => [\n        '<article class=\"memory\">',\n          '<div class=\"memory-title\"><span>' + escapeHtml(memory.id) + '</span><span class=\"' + statusClass(memory.safety) + '\">' + escapeHtml(memory.safety ?? \"safe\") + '</span></div>',\n          '<div class=\"preview\">' + escapeHtml(memory.preview ?? \"\") + '</div>',\n          '<div>',\n            '<span class=\"pill\">source ' + escapeHtml(memory.source ?? \"unknown\") + '</span>',\n            '<span class=\"pill\">scope ' + escapeHtml(memory.scope ?? \"unknown\") + '</span>',\n            '<span class=\"pill\">reason ' + escapeHtml(memory.retrievalReason ?? memory.servedBy ?? \"unknown\") + '</span>',\n            '<span class=\"pill\">confidence ' + escapeHtml(memory.confidence ?? \"n/a\") + '</span>',\n          '</div>',\n          '<div class=\"muted\">' + escapeHtml((memory.safetyReasons ?? []).join(\"; \")) + '</div>',\n        '</article>',\n      ].join(\"\")).join(\"\"),\n    ].join(\"\");\n\n    root.querySelectorAll(\"button[data-prompt]\").forEach((button) => {\n      button.addEventListener(\"click\", () => followUp(button.getAttribute(\"data-prompt\") ?? \"\"));\n    });\n  }\n\n  render(window.openai?.toolOutput);\n\n  window.addEventListener(\"message\", (event) => {\n    if (event.source !== window.parent) return;\n    const message = event.data;\n    if (!message || message.jsonrpc !== \"2.0\") return;\n    if (message.method === \"ui/notifications/tool-result\") {\n      render(message.params);\n    }\n  }, { passive: true });\n\n  window.addEventListener(\"openai:set_globals\", (event) => {\n    render(event.detail?.globals?.toolOutput ?? window.openai?.toolOutput);\n  }, { passive: true });\n</script>\n`.trim();\n\nfunction average(values: number[]): number | undefined {\n  if (values.length === 0) return undefined;\n  return values.reduce((sum, value) => sum + value, 0) / values.length;\n}\n\nfunction buildRecallProvenances(\n  recall: EngramAccessRecallResponse,\n  xray: RecallXraySnapshot | null,\n): RetrievedMemoryProvenance[] {\n  if (xray === null) {\n    return recall.results.map(missingRecallProvenance);\n  }\n  const matchXrayResult = buildXrayResultMatcher(xray);\n  return recall.results.map((summary) => {\n    const result = matchXrayResult(summary);\n    if (result === undefined) {\n      return missingXrayResultProvenance(summary);\n    }\n    return result.provenance ?? missingProvenance(result);\n  });\n}\n\nfunction buildXrayResultMatcher(\n  xray: RecallXraySnapshot | null,\n): (summary: EngramAccessRecallResponse[\"results\"][number]) => RecallXrayResult | undefined {\n  const xrayById = new Map<string, RecallXrayResult>();\n  const xrayByPath = new Map<string, RecallXrayResult>();\n  for (const result of xray?.results ?? []) {\n    xrayById.set(result.memoryId, result);\n    xrayByPath.set(result.path, result);\n  }\n  return (summary) => {\n    if (summary.path) {\n      return xrayByPath.get(summary.path);\n    }\n    return xrayById.get(summary.id);\n  };\n}\n\nfunction missingProvenance(result: RecallXrayResult): RetrievedMemoryProvenance {\n  return {\n    source: \"unknown\",\n    scope: \"unknown\",\n    userContextScopes: [],\n    retrievalReason: `X-ray provenance missing for ${result.memoryId || result.path}`,\n    confidence: 0,\n    stale: false,\n    corrected: false,\n    correctionState: \"none\",\n    safeToUse: false,\n    safety: \"blocked\",\n    safetyReasons: [\"X-ray provenance was missing for this memory.\"],\n  };\n}\n\nfunction missingXrayResultProvenance(\n  summary: EngramAccessRecallResponse[\"results\"][number],\n): RetrievedMemoryProvenance {\n  return {\n    source: \"unknown\",\n    scope: \"unknown\",\n    userContextScopes: [],\n    retrievalReason: `X-ray result missing for ${summary.path || summary.id}`,\n    confidence: 0,\n    stale: false,\n    corrected: false,\n    correctionState: \"none\",\n    safeToUse: false,\n    safety: \"blocked\",\n    safetyReasons: [\"X-ray result was missing for this recalled memory.\"],\n  };\n}\n\nfunction missingRecallProvenance(\n  summary: EngramAccessRecallResponse[\"results\"][number],\n): RetrievedMemoryProvenance {\n  return {\n    source: \"unknown\",\n    scope: \"unknown\",\n    userContextScopes: [],\n    retrievalReason: `X-ray provenance unavailable for ${summary.id || summary.path}`,\n    confidence: 0,\n    stale: false,\n    corrected: false,\n    correctionState: \"none\",\n    safeToUse: false,\n    safety: \"blocked\",\n    safetyReasons: [\"X-ray provenance was unavailable for this recall.\"],\n  };\n}\n\nfunction formatUnsafeRecallPreview(\n  blockedCount: number,\n  missingProvenanceCount: number,\n): string {\n  const reasons: string[] = [];\n  if (blockedCount > 0) {\n    reasons.push(`${blockedCount} retrieved ${memoryNoun(blockedCount)} ${isAre(blockedCount)} blocked`);\n  }\n  if (missingProvenanceCount > 0) {\n    reasons.push(\n      `${missingProvenanceCount} retrieved ${memoryNoun(missingProvenanceCount)} ${isAre(missingProvenanceCount)} missing X-ray provenance`,\n    );\n  }\n  return `Recall preview withheld: ${joinReasons(reasons)} in the current context.`;\n}\n\nfunction memoryNoun(count: number): string {\n  return count === 1 ? \"memory\" : \"memories\";\n}\n\nfunction isAre(count: number): string {\n  return count === 1 ? \"is\" : \"are\";\n}\n\nfunction joinReasons(reasons: string[]): string {\n  if (reasons.length <= 1) return reasons[0] ?? \"memory safety could not be verified\";\n  return `${reasons.slice(0, -1).join(\", \")} and ${reasons[reasons.length - 1]}`;\n}\n\nfunction truncate(value: string, maxChars: number): string {\n  if (value.length <= maxChars) return value;\n  return `${value.slice(0, Math.max(0, maxChars - 3))}...`;\n}\n"],"mappings":";AAMO,IAAM,uCACX;AACK,IAAM,iDACX;AACK,IAAM,6CACX;AACK,IAAM,4CACX;AAwDK,SAAS,yCACd,OACA,QACA,MACyB;AACzB,QAAM,cAAc,uBAAuB,QAAQ,IAAI;AACvD,QAAM,+BAA+B,YAAY;AAAA,IAC/C,CAAC,eAAe,WAAW,cAAc,SAAS,WAAW,WAAW;AAAA,EAC1E,KAAK,YAAY,SAAS,OAAO;AAEjC,QAAM,UAAmC;AAAA,IACvC,gBAAgB,gCAAgC,MAAM,KAAK;AAAA,IAC3D,MAAM;AAAA,IACN,kBACE,OAAO,QAAQ,KAAK,CAAC,+BAA+B,eAAe;AAAA,IACrE,mBAAmB,YAAY,IAAI,CAAC,gBAAgB;AAAA,MAClD,QAAQ,WAAW;AAAA,MACnB,SAAS,WAAW;AAAA,MACpB,SAAS,WAAW;AAAA,MACpB,OAAO,WAAW;AAAA,MAClB,mBAAmB,WAAW;AAAA,MAC9B,iBAAiB,WAAW;AAAA,MAC5B,YAAY,WAAW;AAAA,MACvB,OAAO,WAAW;AAAA,MAClB,WAAW,WAAW;AAAA,MACtB,iBAAiB,WAAW;AAAA,MAC5B,WAAW,WAAW;AAAA,MACtB,QAAQ,WAAW;AAAA,MACnB,eAAe,WAAW;AAAA,IAC5B,EAAE;AAAA,EACJ;AACA,QAAM,aAAa,YAAY,SAAS,IACpC,QAAQ,YAAY,IAAI,CAAC,eAAe,WAAW,cAAc,GAAG,CAAC,IACrE;AACJ,MAAI,eAAe,OAAW,SAAQ,aAAa;AACnD,MAAI,MAAM,yBAAyB,QAAW;AAC5C,YAAQ,uBAAuB,MAAM;AAAA,EACvC;AACA,SAAO;AACT;AAEO,SAAS,kCACd,OACA,QACA,MACA,kBACoC;AACpC,QAAM,kBAAkB,SAAS;AACjC,QAAM,kBAAkB,uBAAuB,IAAI;AACnD,QAAM,qBAAqB,OAAO,QAAQ,IAAI,eAAe;AAE7D,QAAM,WAAW,OAAO,QAAQ,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,YAAY;AAC3D,UAAM,aAAa,gBAAgB,OAAO;AAC1C,UAAM,aAAa,YAAY;AAC/B,UAAM,aAAa,CAAC,mBAAmB,eAAe;AACtD,UAAM,UAAU,YAAY,WAAW;AACvC,UAAM,UAAU,kBACZ,wEACA,aACE,oEACF,UACE,qEACA,QAAQ;AACd,WAAO;AAAA,MACL,IAAI,QAAQ;AAAA,MACZ,MAAM,QAAQ;AAAA,MACd,UAAU,QAAQ;AAAA,MAClB,QAAQ,QAAQ;AAAA,MAChB;AAAA,MACA,UAAU,YAAY;AAAA,MACtB,OAAO,YAAY,mBAAmB;AAAA,MACtC,QAAQ,YAAY;AAAA,MACpB,OAAO,YAAY;AAAA,MACnB,iBAAiB,YAAY;AAAA,MAC7B,YAAY,YAAY;AAAA,MACxB,OAAO,YAAY;AAAA,MACnB,WAAW,YAAY;AAAA,MACvB,WAAW,YAAY,cAAc,aAAa,QAAQ;AAAA,MAC1D,QAAQ,YAAY,WAAW,aAAa,YAAY;AAAA,MACxD,eAAe,YAAY,kBACrB,aAAa,CAAC,+CAA+C,IAAI,CAAC;AAAA,MACxE,mBAAmB,YAAY,qBAAqB,CAAC;AAAA,IACvD;AAAA,EACF,CAAC;AACD,QAAM,eAAe,mBAClB,OAAO,CAAC,WAAW,QAAQ,YAAY,WAAW,SAAS,EAC3D;AACH,QAAM,yBAAyB,kBAC3B,IACA,mBACC,OAAO,CAAC,WAAW,QAAQ,eAAe,MAAS,EACrD;AACH,QAAM,oBAAoB,kBACtB,uGACA,eAAe,KAAK,yBAAyB,IAC3C,0BAA0B,cAAc,sBAAsB,IAC9D,SAAS,OAAO,SAAS,IAAK;AAEpC,QAAM,kBAAkB,SAAS,CAAC,GAAG,MAAM;AAC3C,SAAO;AAAA,IACL,KAAK;AAAA,MACH,MAAM;AAAA,MACN,aAAa;AAAA,MACb,WAAW;AAAA,IACb;AAAA,IACA,OAAO,OAAO,SAAS,MAAM;AAAA,IAC7B,GAAI,MAAM,aAAa,EAAE,YAAY,MAAM,WAAW,IAAI,CAAC;AAAA,IAC3D,WAAW,OAAO;AAAA,IAClB;AAAA,IACA,aAAa,OAAO;AAAA,IACpB,WAAW,OAAO;AAAA,IAClB;AAAA,IACA;AAAA,IACA,aAAa;AAAA,MACX;AAAA,QACE,IAAI;AAAA,QACJ,OAAO;AAAA,QACP,gBACE,uCAAuC,eAAe,SAAS,MAAM,KAAK;AAAA,MAC9E;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO;AAAA,QACP,gBACE,0BAA0B,eAAe;AAAA,MAC7C;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO;AAAA,QACP,gBACE,uCAAuC,eAAe;AAAA,MAC1D;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,OAAO;AAAA,QACP,gBACE,wBAAwB,eAAe;AAAA,MAC3C;AAAA,IACF;AAAA,IACA,UAAU;AAAA,MACR,gBAAgB;AAAA,MAChB,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,MACE;AAAA,IACJ;AAAA,EACF;AACF;AAEO,IAAM,8CAA8C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA8IzD,KAAK;AAEP,SAAS,QAAQ,QAAsC;AACrD,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,SAAO,OAAO,OAAO,CAAC,KAAK,UAAU,MAAM,OAAO,CAAC,IAAI,OAAO;AAChE;AAEA,SAAS,uBACP,QACA,MAC6B;AAC7B,MAAI,SAAS,MAAM;AACjB,WAAO,OAAO,QAAQ,IAAI,uBAAuB;AAAA,EACnD;AACA,QAAM,kBAAkB,uBAAuB,IAAI;AACnD,SAAO,OAAO,QAAQ,IAAI,CAAC,YAAY;AACrC,UAAM,SAAS,gBAAgB,OAAO;AACtC,QAAI,WAAW,QAAW;AACxB,aAAO,4BAA4B,OAAO;AAAA,IAC5C;AACA,WAAO,OAAO,cAAc,kBAAkB,MAAM;AAAA,EACtD,CAAC;AACH;AAEA,SAAS,uBACP,MAC0F;AAC1F,QAAM,WAAW,oBAAI,IAA8B;AACnD,QAAM,aAAa,oBAAI,IAA8B;AACrD,aAAW,UAAU,MAAM,WAAW,CAAC,GAAG;AACxC,aAAS,IAAI,OAAO,UAAU,MAAM;AACpC,eAAW,IAAI,OAAO,MAAM,MAAM;AAAA,EACpC;AACA,SAAO,CAAC,YAAY;AAClB,QAAI,QAAQ,MAAM;AAChB,aAAO,WAAW,IAAI,QAAQ,IAAI;AAAA,IACpC;AACA,WAAO,SAAS,IAAI,QAAQ,EAAE;AAAA,EAChC;AACF;AAEA,SAAS,kBAAkB,QAAqD;AAC9E,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,OAAO;AAAA,IACP,mBAAmB,CAAC;AAAA,IACpB,iBAAiB,gCAAgC,OAAO,YAAY,OAAO,IAAI;AAAA,IAC/E,YAAY;AAAA,IACZ,OAAO;AAAA,IACP,WAAW;AAAA,IACX,iBAAiB;AAAA,IACjB,WAAW;AAAA,IACX,QAAQ;AAAA,IACR,eAAe,CAAC,+CAA+C;AAAA,EACjE;AACF;AAEA,SAAS,4BACP,SAC2B;AAC3B,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,OAAO;AAAA,IACP,mBAAmB,CAAC;AAAA,IACpB,iBAAiB,4BAA4B,QAAQ,QAAQ,QAAQ,EAAE;AAAA,IACvE,YAAY;AAAA,IACZ,OAAO;AAAA,IACP,WAAW;AAAA,IACX,iBAAiB;AAAA,IACjB,WAAW;AAAA,IACX,QAAQ;AAAA,IACR,eAAe,CAAC,oDAAoD;AAAA,EACtE;AACF;AAEA,SAAS,wBACP,SAC2B;AAC3B,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,OAAO;AAAA,IACP,mBAAmB,CAAC;AAAA,IACpB,iBAAiB,oCAAoC,QAAQ,MAAM,QAAQ,IAAI;AAAA,IAC/E,YAAY;AAAA,IACZ,OAAO;AAAA,IACP,WAAW;AAAA,IACX,iBAAiB;AAAA,IACjB,WAAW;AAAA,IACX,QAAQ;AAAA,IACR,eAAe,CAAC,mDAAmD;AAAA,EACrE;AACF;AAEA,SAAS,0BACP,cACA,wBACQ;AACR,QAAM,UAAoB,CAAC;AAC3B,MAAI,eAAe,GAAG;AACpB,YAAQ,KAAK,GAAG,YAAY,cAAc,WAAW,YAAY,CAAC,IAAI,MAAM,YAAY,CAAC,UAAU;AAAA,EACrG;AACA,MAAI,yBAAyB,GAAG;AAC9B,YAAQ;AAAA,MACN,GAAG,sBAAsB,cAAc,WAAW,sBAAsB,CAAC,IAAI,MAAM,sBAAsB,CAAC;AAAA,IAC5G;AAAA,EACF;AACA,SAAO,4BAA4B,YAAY,OAAO,CAAC;AACzD;AAEA,SAAS,WAAW,OAAuB;AACzC,SAAO,UAAU,IAAI,WAAW;AAClC;AAEA,SAAS,MAAM,OAAuB;AACpC,SAAO,UAAU,IAAI,OAAO;AAC9B;AAEA,SAAS,YAAY,SAA2B;AAC9C,MAAI,QAAQ,UAAU,EAAG,QAAO,QAAQ,CAAC,KAAK;AAC9C,SAAO,GAAG,QAAQ,MAAM,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,QAAQ,QAAQ,QAAQ,SAAS,CAAC,CAAC;AAC9E;AAEA,SAAS,SAAS,OAAe,UAA0B;AACzD,MAAI,MAAM,UAAU,SAAU,QAAO;AACrC,SAAO,GAAG,MAAM,MAAM,GAAG,KAAK,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC;AACrD;","names":[]}

package/dist/{chunk-YFS5OEKO.js → chunk-7MLB4NCL.js}

@@ -9,7 +9,7 @@ import {
 import {
   SPECULATIVE_TTL_DAYS,
   confidenceTier
-} from "./chunk-KGK2QKWL.js";
+} from "./chunk-4R4KTDIE.js";
 import {
   inferMemoryStatus,
   isArchivedMemoryPath,
@@ -5361,4 +5361,4 @@ export {
   serializeEntityFile,
   StorageManager
 };
-//# sourceMappingURL=chunk-YFS5OEKO.js.map
+//# sourceMappingURL=chunk-7MLB4NCL.js.map

package/dist/{chunk-LZ3VEOU5.js → chunk-AL4RAJL5.js}

@@ -8,7 +8,7 @@ import {
 
 // src/consolidation-provenance-check.ts
 import path from "path";
-import { readdir, readFile, stat } from "fs/promises";
+import { lstat, readdir, readFile, realpath, stat } from "fs/promises";
 var DERIVED_VIA_RAW_RE = /^[\t ]*derived_via:[\t ]*(.*)$/mu;
 var DERIVED_FROM_RAW_RE = /^[\t ]*derived_from:[\t ]*(.*)$/mu;
 function tokenizeRawBlockList(fmSlice, key) {
@@ -282,7 +282,7 @@ async function runConsolidationProvenanceCheck(options) {
     const scanRoots = ["facts", "corrections", "procedures", "reasoning-traces"];
     for (const rootName of scanRoots) {
       const rootPath = path.join(memoryDir, rootName);
-      for await (const file of walkMarkdownFiles(rootPath)) {
+      for await (const file of walkMarkdownFiles(rootPath, memoryDir)) {
         if (seenPaths.has(file)) continue;
         try {
           const raw = await readFile(file, "utf-8");
@@ -303,24 +303,41 @@ async function runConsolidationProvenanceCheck(options) {
   }
   return report;
 }
-async function* walkMarkdownFiles(root) {
+async function* walkMarkdownFiles(root, memoryDir) {
   let entries;
+  let memoryDirReal;
   try {
+    const rootStat = await lstat(root);
+    if (!rootStat.isDirectory() || rootStat.isSymbolicLink()) return;
+    memoryDirReal = await realpath(memoryDir);
+    const rootReal = await realpath(root);
+    if (!isPathWithin(rootReal, memoryDirReal)) return;
     entries = await readdir(root, { withFileTypes: true });
   } catch {
     return;
   }
   for (const entry of entries) {
     const full = path.join(root, entry.name);
+    if (entry.isSymbolicLink()) continue;
     if (entry.isDirectory()) {
-      yield* walkMarkdownFiles(full);
+      yield* walkMarkdownFiles(full, memoryDirReal);
     } else if (entry.isFile() && entry.name.endsWith(".md")) {
+      try {
+        const fileReal = await realpath(full);
+        if (!isPathWithin(fileReal, memoryDirReal)) continue;
+      } catch {
+        continue;
+      }
       yield full;
     }
   }
 }
+function isPathWithin(candidate, root) {
+  const relative = path.relative(root, candidate);
+  return relative === "" || !!relative && !relative.startsWith("..") && !path.isAbsolute(relative);
+}
 
 export {
   runConsolidationProvenanceCheck
 };
-//# sourceMappingURL=chunk-LZ3VEOU5.js.map
+//# sourceMappingURL=chunk-AL4RAJL5.js.map

package/dist/chunk-AL4RAJL5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/consolidation-provenance-check.ts"],"sourcesContent":["/**\n * Consolidation provenance integrity check (issue #561 PR 4).\n *\n * Validates that every memory carrying consolidation provenance frontmatter\n * (`derived_from`, `derived_via`) resolves to real data:\n *\n *   - Each `derived_from` entry `\"<path>:<version>\"` must name a\n *     page-version snapshot that exists on disk (via the sidecar layout\n *     documented in `page-versioning.ts`).\n *   - Each `derived_via` must be one of the known\n *     `ConsolidationOperator` values — malformed values are surfaced as\n *     warnings rather than crashes so legacy or future operators survive a\n *     rollback.\n *\n * Non-fatal: every failure renders a warning with the offending file path\n * and a human-readable reason.  Integrity problems are informational for\n * now — we do not auto-heal or archive broken memories.\n */\n\nimport path from \"node:path\";\nimport { lstat, readdir, readFile, realpath, stat } from \"node:fs/promises\";\nimport { constants as fsConstants } from \"node:fs\";\nimport type { StorageManager } from \"./storage.js\";\nimport {\n  DERIVED_FROM_MEMORY_ID_RE,\n  isConsolidationOperator,\n} from \"./consolidation-operator.js\";\n// Import the canonical `sidecarKey` from page-versioning (PR #634\n// review, cursor Medium) so a future key-format change stays in\n// lock-step with the doctor scan.\nimport { sidecarKey } from \"./page-versioning.js\";\n\n/**\n * Regex to spot a `derived_via: <value>` line in the raw YAML frontmatter\n * between the opening and first closing `---` delimiters.  We use the raw\n * text rather than the parsed `frontmatter.derived_via` because the\n * read-path parser coerces unknown values back to `undefined` — that\n * would silently hide corrupted-or-future operators from the doctor scan\n * (PR #634 review feedback, codex P2).\n */\n// Allow empty capture groups so truncated/blank `derived_via:` and\n// `derived_from:` lines (key present, no value) are distinguishable\n// from \"key missing entirely\" (regex returns null).  Optional\n// leading whitespace accepts indented keys which `parseFrontmatter`\n// also accepts (PR #634 round-6 review, codex P2).\nconst DERIVED_VIA_RAW_RE = /^[\\t ]*derived_via:[\\t ]*(.*)$/mu;\nconst DERIVED_FROM_RAW_RE = /^[\\t ]*derived_from:[\\t ]*(.*)$/mu;\n\n/**\n * Tokenize a YAML-block-style list under `key:` in the given\n * frontmatter slice.  Looks for lines matching `^  - <value>` after a\n * `key:` line and before the next non-list line.  Returns `null` when\n * the key is missing or the value is a scalar / flow list (no block\n * entries found).\n *\n * Only used for the mixed-list malformed-entry detection — it does\n * not try to decode YAML escape sequences since we only need the\n * entry count + raw token text to compare against the parsed array.\n */\nfunction tokenizeRawBlockList(fmSlice: string, key: string): string[] | null {\n  const lines = fmSlice.split(\"\\n\");\n  // Accept indented keys too — parseFrontmatter does (PR #634 round-7\n  // review, codex P2 / cursor Low).\n  const keyRe = new RegExp(`^[\\\\t ]*${key}:[\\\\t ]*(.*)$`, \"u\");\n  let startIdx = -1;\n  for (let i = 0; i < lines.length; i++) {\n    const m = lines[i].match(keyRe);\n    if (m) {\n      if (m[1].trim().length === 0) {\n        startIdx = i + 1;\n      }\n      break;\n    }\n  }\n  if (startIdx < 0) return null;\n  const items: string[] = [];\n  for (let i = startIdx; i < lines.length; i++) {\n    const line = lines[i];\n    if (!/^\\s+-/.test(line)) break; // not a block-list entry\n    const m = line.match(/^\\s+-\\s*(.*)$/u);\n    if (!m) break;\n    let tok = m[1].trim();\n    if (\n      (tok.startsWith('\"') && tok.endsWith('\"') && tok.length >= 2) ||\n      (tok.startsWith(\"'\") && tok.endsWith(\"'\") && tok.length >= 2)\n    ) {\n      tok = tok.slice(1, -1);\n    }\n    items.push(tok);\n  }\n  return items.length > 0 ? items : null;\n}\n\n/**\n * Tokenize a YAML-flow-style list (`[\"a\", \"b\", ...]`) into a flat\n * string array.  Returns `null` when the input isn't a flow list.\n * Best-effort — we don't implement a full YAML parser, just enough to\n * detect mixed valid/invalid entries for the doctor integrity check.\n */\nfunction tokenizeRawFlowList(raw: string): string[] | null {\n  const trimmed = raw.trim();\n  if (!trimmed.startsWith(\"[\") || !trimmed.endsWith(\"]\")) return null;\n  const inner = trimmed.slice(1, -1);\n  const parts: string[] = [];\n  let current = \"\";\n  let inSingle = false;\n  let inDouble = false;\n  for (let i = 0; i < inner.length; i++) {\n    const ch = inner[i];\n    if (inDouble) {\n      if (ch === \"\\\\\" && i + 1 < inner.length) {\n        current += inner[++i];\n        continue;\n      }\n      if (ch === '\"') {\n        inDouble = false;\n        continue;\n      }\n      current += ch;\n    } else if (inSingle) {\n      if (ch === \"'\" && inner[i + 1] === \"'\") {\n        current += \"'\";\n        i++;\n        continue;\n      }\n      if (ch === \"'\") {\n        inSingle = false;\n        continue;\n      }\n      current += ch;\n    } else if (ch === '\"') {\n      inDouble = true;\n    } else if (ch === \"'\") {\n      inSingle = true;\n    } else if (ch === \",\") {\n      parts.push(current.trim());\n      current = \"\";\n    } else {\n      current += ch;\n    }\n  }\n  if (current.trim().length > 0 || parts.length > 0) {\n    parts.push(current.trim());\n  }\n  return parts;\n}\n\n/**\n * One integrity warning attached to a specific memory.\n */\nexport interface ConsolidationProvenanceIssue {\n  /** Absolute path to the memory markdown file. */\n  memoryPath: string;\n  /** Memory id from frontmatter. */\n  memoryId: string;\n  /** Type of integrity issue. */\n  kind:\n    | \"derived_from_missing_snapshot\"\n    | \"derived_from_malformed_entry\"\n    | \"derived_via_unknown_operator\";\n  /** Human-readable detail — includes the offending value when relevant. */\n  detail: string;\n}\n\n/**\n * Summary of a provenance-integrity scan.  Used by the operator-doctor\n * report and surfaced in the CLI output.\n */\nexport interface ConsolidationProvenanceReport {\n  /** Total memories inspected. */\n  scanned: number;\n  /** Memories that carry `derived_from` and/or `derived_via`. */\n  withProvenance: number;\n  /** One entry per problem detected (may be empty). */\n  issues: ConsolidationProvenanceIssue[];\n}\n\nconst DERIVED_FROM_ENTRY_RE = /^(.+):(\\d+)$/;\n\n/**\n * Build the on-disk snapshot path for a `\"<relpath>:<version>\"` entry,\n * relative to the given memory directory.  Mirrors the layout documented\n * in `page-versioning.ts`:\n *\n *   memoryDir/<sidecarDir>/<sidecarKey>/<version><ext>\n */\nfunction resolveSnapshotPath(\n  memoryDir: string,\n  sidecarDir: string,\n  entry: string,\n): { ok: true; snapshotPath: string } | { ok: false; reason: string } {\n  const match = entry.match(DERIVED_FROM_ENTRY_RE);\n  if (!match) {\n    return { ok: false, reason: `malformed entry (expected \"<path>:<version>\")` };\n  }\n  const pagePath = match[1];\n  const versionId = match[2];\n  const ext = path.extname(pagePath) || \".md\";\n  const key = sidecarKey(pagePath);\n  const snapshotPath = path.join(memoryDir, sidecarDir, key, `${versionId}${ext}`);\n  return { ok: true, snapshotPath };\n}\n\n/**\n * Scan every memory under `storage` and flag consolidation-provenance\n * problems.  Does not throw on individual failures — collects them in the\n * returned report.\n */\nexport async function runConsolidationProvenanceCheck(options: {\n  storage: StorageManager;\n  memoryDir: string;\n  /**\n   * Page-versioning sidecar directory name.  Defaults to `.versions` —\n   * matches the baked-in default used by `setVersioningConfig` when\n   * versioning is enabled via config.\n   */\n  sidecarDir?: string;\n}): Promise<ConsolidationProvenanceReport> {\n  const { storage, memoryDir } = options;\n  const sidecarDir = options.sidecarDir ?? \".versions\";\n\n  const report: ConsolidationProvenanceReport = {\n    scanned: 0,\n    withProvenance: 0,\n    issues: [],\n  };\n\n  let memories;\n  try {\n    memories = await storage.readAllMemories();\n  } catch {\n    // If we can't enumerate memories at all, surface a single synthetic\n    // issue rather than throwing — the doctor wrapper treats an empty\n    // issues list as \"ok\" and we don't want a filesystem hiccup to crash\n    // the whole diagnostic.\n    return {\n      scanned: 0,\n      withProvenance: 0,\n      issues: [\n        {\n          memoryPath: memoryDir,\n          memoryId: \"(unreadable)\",\n          kind: \"derived_from_malformed_entry\",\n          detail: \"Could not enumerate memory directory to scan provenance.\",\n        },\n      ],\n    };\n  }\n\n  for (const memory of memories) {\n    report.scanned += 1;\n    const fm = memory.frontmatter;\n    const derivedFrom = fm.derived_from;\n    const derivedVia = fm.derived_via;\n\n    // Raw frontmatter values from disk — the read-path parser coerces\n    // malformed `derived_from` and unknown `derived_via` back to\n    // `undefined`, which would silently hide on-disk corruption from\n    // the doctor scan (PR #634 review feedback, codex P2).  We\n    // re-extract both via regex so integrity issues are reported even\n    // when the parser normalized them away.  `rawDerivedVia` /\n    // `rawDerivedFrom` being `\"\"` (empty string) represents a\n    // corrupted file with the key present but the value truncated —\n    // that's distinct from \"key missing entirely\" (undefined).\n    let rawDerivedVia: string | undefined;\n    let rawDerivedFrom: string | undefined;\n    let rawDerivedViaKeyPresent = false;\n    let rawDerivedFromKeyPresent = false;\n    let duplicateViaKeys = false;\n    let duplicateFromKeys = false;\n    let viaMatchCount = 0;\n    let fromMatchCount = 0;\n    let fmSlice = \"\";\n    try {\n      const raw = await readFile(memory.path, \"utf-8\");\n      const frontmatterEnd = raw.indexOf(\"\\n---\", raw.indexOf(\"---\") + 3);\n      fmSlice = frontmatterEnd > 0 ? raw.slice(0, frontmatterEnd) : raw;\n      // Use matchAll to find ALL occurrences of `derived_via` / `derived_from`\n      // in the raw YAML.  `parseFrontmatter` keeps the LAST assignment when\n      // duplicate keys appear, so the doctor must read the last occurrence\n      // to match what the storage reader actually uses (PR #634 review,\n      // codex P2 — duplicate `derived_via` keys caused false-clean or\n      // false-unknown-operator warnings depending on order).\n      const viaMatches = [...fmSlice.matchAll(new RegExp(DERIVED_VIA_RAW_RE.source, DERIVED_VIA_RAW_RE.flags + \"g\"))];\n      viaMatchCount = viaMatches.length;\n      duplicateViaKeys = viaMatches.length > 1;\n      if (viaMatches.length > 0) {\n        rawDerivedViaKeyPresent = true;\n        // Use the last occurrence — `parseFrontmatter` keeps the last\n        // assignment when duplicate keys appear, so the doctor must\n        // match that behavior to produce accurate warnings (PR #634\n        // review, codex P2).\n        const lastVia = viaMatches[viaMatches.length - 1];\n        let val = lastVia[1].trim();\n        if (\n          (val.startsWith('\"') && val.endsWith('\"')) ||\n          (val.startsWith(\"'\") && val.endsWith(\"'\"))\n        ) {\n          val = val.slice(1, -1);\n        }\n        rawDerivedVia = val;\n      }\n      const fromMatches = [...fmSlice.matchAll(new RegExp(DERIVED_FROM_RAW_RE.source, DERIVED_FROM_RAW_RE.flags + \"g\"))];\n      fromMatchCount = fromMatches.length;\n      duplicateFromKeys = fromMatches.length > 1;\n      if (fromMatches.length > 0) {\n        rawDerivedFromKeyPresent = true;\n        const lastFrom = fromMatches[fromMatches.length - 1];\n        rawDerivedFrom = lastFrom[1].trim();\n      }\n    } catch {\n      // Fall through to the parsed values.\n    }\n\n    const hasFrom = Array.isArray(derivedFrom) && derivedFrom.length > 0;\n    const hasVia = derivedVia !== undefined && derivedVia !== null;\n    const hasRawVia = rawDerivedVia !== undefined && rawDerivedVia.length > 0;\n    // A raw `derived_from` that the parser dropped indicates on-disk\n    // corruption we must surface.  We detect this by: (a) the raw YAML\n    // contains a `derived_from:` key, AND (b) the parsed frontmatter\n    // has no valid array.  A scalar like `derived_from: facts/a.md:7`\n    // (list brackets omitted) or a blank `derived_from:` both hit this\n    // branch.\n    const hasRawMalformedFrom = rawDerivedFromKeyPresent && !hasFrom;\n    // A blank `derived_via:` with no value is also corrupt — the\n    // parser drops it to undefined, but the raw key is still present\n    // on disk (PR #634 round-3 review, codex P2).\n    const hasBlankRawVia =\n      rawDerivedViaKeyPresent &&\n      (rawDerivedVia === undefined || rawDerivedVia.length === 0) &&\n      !hasVia;\n    if (\n      !hasFrom && !hasVia && !hasRawVia &&\n      !hasRawMalformedFrom && !hasBlankRawVia\n    ) continue;\n    report.withProvenance += 1;\n\n    // Duplicate-key detection (PR #634 review, codex P2): when the raw\n    // YAML contains multiple `derived_via` or `derived_from` lines,\n    // `parseFrontmatter` silently uses the last one.  Flag this as a\n    // malformed entry so operators can inspect and fix the file.\n    if (duplicateViaKeys) {\n      report.issues.push({\n        memoryPath: memory.path,\n        memoryId: fm.id,\n        kind: \"derived_via_unknown_operator\",\n        detail: `raw YAML contains ${viaMatchCount} \"derived_via\" keys; parseFrontmatter uses the last occurrence`,\n      });\n    }\n    if (duplicateFromKeys) {\n      report.issues.push({\n        memoryPath: memory.path,\n        memoryId: fm.id,\n        kind: \"derived_from_malformed_entry\",\n        detail: `raw YAML contains ${fromMatchCount} \"derived_from\" keys; parseFrontmatter uses the last occurrence`,\n      });\n    }\n\n    if (hasRawMalformedFrom) {\n      const display = rawDerivedFrom ?? \"(blank)\";\n      report.issues.push({\n        memoryPath: memory.path,\n        memoryId: fm.id,\n        kind: \"derived_from_malformed_entry\",\n        detail: `raw YAML \"derived_from: ${display}\" could not be parsed as a list`,\n      });\n    }\n\n    // Mixed-list detection (PR #634 round-4 + round-5 review, codex\n    // P2): when the parser DID return a valid list but the raw YAML\n    // includes additional tokens that got dropped, flag those as\n    // malformed.  Handles both flow-style (`[\"a\", \"\", \"b\"]`) and\n    // block-style (`\\n  - a\\n  - \\n  - b`) YAML lists.\n    if (hasFrom && rawDerivedFromKeyPresent) {\n      let rawList: string[] | null = null;\n      if (rawDerivedFrom && rawDerivedFrom.length > 0) {\n        rawList = tokenizeRawFlowList(rawDerivedFrom);\n      }\n      if (rawList === null) {\n        // Fall back to block-list tokenization by re-reading the full\n        // frontmatter (already loaded above as `raw`) and scanning\n        // the lines following `derived_from:`.\n        rawList = tokenizeRawBlockList(fmSlice, \"derived_from\");\n      }\n      if (rawList !== null && rawList.length > derivedFrom!.length) {\n        for (const tok of rawList) {\n          if (tok.length === 0) {\n            report.issues.push({\n              memoryPath: memory.path,\n              memoryId: fm.id,\n              kind: \"derived_from_malformed_entry\",\n              detail: `raw YAML derived_from contains an empty entry (mixed list)`,\n            });\n            continue;\n          }\n          if (!derivedFrom!.includes(tok)) {\n            // Accept either the snapshot format `<path>:<version>` or\n            // a bare memory id (issue #687 PR 2/4 — pattern\n            // reinforcement uses ID-shaped entries).  PR #730\n            // review feedback, Codex P2.\n            if (\n              !/^(.+):(\\d+)$/u.test(tok) &&\n              !DERIVED_FROM_MEMORY_ID_RE.test(tok)\n            ) {\n              report.issues.push({\n                memoryPath: memory.path,\n                memoryId: fm.id,\n                kind: \"derived_from_malformed_entry\",\n                detail: `raw YAML derived_from contains a malformed entry: ${JSON.stringify(tok)}`,\n              });\n            }\n          }\n        }\n      }\n    }\n    if (hasBlankRawVia) {\n      report.issues.push({\n        memoryPath: memory.path,\n        memoryId: fm.id,\n        kind: \"derived_via_unknown_operator\",\n        detail: \"raw YAML has `derived_via:` key with empty value\",\n      });\n    }\n\n    if (hasFrom) {\n      for (const entry of derivedFrom!) {\n        // Pattern-reinforcement (issue #687 PR 2/4) records source\n        // memory IDs directly in `derived_from` rather than\n        // page-versioning snapshot references.  Memory IDs may\n        // contain `:` for namespace-prefixed forms like\n        // `global:fact-abc-123`, but never `/` or `.` — those remain\n        // exclusive to snapshot paths (PR #730 review feedback,\n        // Codex P1).  For ID-shaped entries we skip the snapshot\n        // file check entirely — but ONLY when the operator is\n        // `pattern-reinforcement`, which is the sole operator that\n        // legitimately stores IDs rather than snapshot references.\n        // Allowing the bypass for split/merge/update would weaken\n        // validation on those existing consolidation paths (PR #730\n        // review, Codex P2).\n        if (\n          derivedVia === \"pattern-reinforcement\" &&\n          DERIVED_FROM_MEMORY_ID_RE.test(entry)\n        ) {\n          continue;\n        }\n        const resolved = resolveSnapshotPath(memoryDir, sidecarDir, entry);\n        if (!resolved.ok) {\n          report.issues.push({\n            memoryPath: memory.path,\n            memoryId: fm.id,\n            kind: \"derived_from_malformed_entry\",\n            detail: `${JSON.stringify(entry)}: ${resolved.reason}`,\n          });\n          continue;\n        }\n        // Require a regular file at the snapshot path (PR #634\n        // round-8 review, codex P2) — a directory or device node at\n        // that path means the sidecar was corrupted and the snapshot\n        // is effectively missing.\n        let snapshotOk = false;\n        try {\n          const st = await stat(resolved.snapshotPath);\n          snapshotOk = st.isFile();\n        } catch {\n          snapshotOk = false;\n        }\n        if (!snapshotOk) {\n          report.issues.push({\n            memoryPath: memory.path,\n            memoryId: fm.id,\n            kind: \"derived_from_missing_snapshot\",\n            detail: `${entry} → ${resolved.snapshotPath} (not a regular file)`,\n          });\n        }\n      }\n    }\n\n    // Check the RAW YAML value for unknown operators.  The parsed value\n    // (`fm.derived_via`) is always known-good because the read-path\n    // normalizer dropped anything else to undefined.\n    if (hasRawVia && !isConsolidationOperator(rawDerivedVia)) {\n      report.issues.push({\n        memoryPath: memory.path,\n        memoryId: fm.id,\n        kind: \"derived_via_unknown_operator\",\n        detail: `unknown operator: ${JSON.stringify(rawDerivedVia)}`,\n      });\n    }\n  }\n\n  // Parse-failure detection (PR #634 round-4 review, codex P2):\n  // `readAllMemories()` silently drops files whose frontmatter\n  // doesn't parse.  Walk the facts/ and corrections/ directories for\n  // `.md` files that DO reference provenance frontmatter but didn't\n  // come back from the reader — those are the corruption cases the\n  // doctor is meant to surface.\n  try {\n    const seenPaths = new Set(memories.map((m) => m.path));\n    const scanRoots = [\"facts\", \"corrections\", \"procedures\", \"reasoning-traces\"];\n    for (const rootName of scanRoots) {\n      const rootPath = path.join(memoryDir, rootName);\n      for await (const file of walkMarkdownFiles(rootPath, memoryDir)) {\n        if (seenPaths.has(file)) continue;\n        try {\n          const raw = await readFile(file, \"utf-8\");\n          if (\n            DERIVED_FROM_RAW_RE.test(raw) ||\n            DERIVED_VIA_RAW_RE.test(raw)\n          ) {\n            report.withProvenance += 1;\n            report.issues.push({\n              memoryPath: file,\n              memoryId: \"(parse failed)\",\n              kind: \"derived_from_malformed_entry\",\n              detail:\n                \"frontmatter could not be parsed by storage reader; provenance fields visible in raw YAML\",\n            });\n          }\n        } catch {\n          // Unreadable file — skip.\n        }\n      }\n    }\n  } catch {\n    // Best-effort; don't fail the whole scan on a filesystem hiccup.\n  }\n\n  return report;\n}\n\n/**\n * Recursively yield all `.md` file paths under `root`.  Silent on\n * missing directories — the facts/corrections dirs may not exist in\n * fresh installs.  Symlinked roots/directories are skipped so the\n * best-effort parse-failure pass cannot escape `memoryDir`.\n */\nasync function* walkMarkdownFiles(root: string, memoryDir: string): AsyncGenerator<string> {\n  let entries;\n  let memoryDirReal: string;\n  try {\n    const rootStat = await lstat(root);\n    if (!rootStat.isDirectory() || rootStat.isSymbolicLink()) return;\n    memoryDirReal = await realpath(memoryDir);\n    const rootReal = await realpath(root);\n    if (!isPathWithin(rootReal, memoryDirReal)) return;\n    entries = await readdir(root, { withFileTypes: true });\n  } catch {\n    return;\n  }\n  for (const entry of entries) {\n    const full = path.join(root, entry.name);\n    if (entry.isSymbolicLink()) continue;\n    if (entry.isDirectory()) {\n      yield* walkMarkdownFiles(full, memoryDirReal);\n    } else if (entry.isFile() && entry.name.endsWith(\".md\")) {\n      try {\n        const fileReal = await realpath(full);\n        if (!isPathWithin(fileReal, memoryDirReal)) continue;\n      } catch {\n        continue;\n      }\n      yield full;\n    }\n  }\n}\n\nfunction isPathWithin(candidate: string, root: string): boolean {\n  const relative = path.relative(root, candidate);\n  return relative === \"\" || (!!relative && !relative.startsWith(\"..\") && !path.isAbsolute(relative));\n}\n"],"mappings":";;;;;;;;;AAmBA,OAAO,UAAU;AACjB,SAAS,OAAO,SAAS,UAAU,UAAU,YAAY;AAyBzD,IAAM,qBAAqB;AAC3B,IAAM,sBAAsB;AAa5B,SAAS,qBAAqB,SAAiB,KAA8B;AAC3E,QAAM,QAAQ,QAAQ,MAAM,IAAI;AAGhC,QAAM,QAAQ,IAAI,OAAO,WAAW,GAAG,iBAAiB,GAAG;AAC3D,MAAI,WAAW;AACf,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,UAAM,IAAI,MAAM,CAAC,EAAE,MAAM,KAAK;AAC9B,QAAI,GAAG;AACL,UAAI,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,GAAG;AAC5B,mBAAW,IAAI;AAAA,MACjB;AACA;AAAA,IACF;AAAA,EACF;AACA,MAAI,WAAW,EAAG,QAAO;AACzB,QAAM,QAAkB,CAAC;AACzB,WAAS,IAAI,UAAU,IAAI,MAAM,QAAQ,KAAK;AAC5C,UAAM,OAAO,MAAM,CAAC;AACpB,QAAI,CAAC,QAAQ,KAAK,IAAI,EAAG;AACzB,UAAM,IAAI,KAAK,MAAM,gBAAgB;AACrC,QAAI,CAAC,EAAG;AACR,QAAI,MAAM,EAAE,CAAC,EAAE,KAAK;AACpB,QACG,IAAI,WAAW,GAAG,KAAK,IAAI,SAAS,GAAG,KAAK,IAAI,UAAU,KAC1D,IAAI,WAAW,GAAG,KAAK,IAAI,SAAS,GAAG,KAAK,IAAI,UAAU,GAC3D;AACA,YAAM,IAAI,MAAM,GAAG,EAAE;AAAA,IACvB;AACA,UAAM,KAAK,GAAG;AAAA,EAChB;AACA,SAAO,MAAM,SAAS,IAAI,QAAQ;AACpC;AAQA,SAAS,oBAAoB,KAA8B;AACzD,QAAM,UAAU,IAAI,KAAK;AACzB,MAAI,CAAC,QAAQ,WAAW,GAAG,KAAK,CAAC,QAAQ,SAAS,GAAG,EAAG,QAAO;AAC/D,QAAM,QAAQ,QAAQ,MAAM,GAAG,EAAE;AACjC,QAAM,QAAkB,CAAC;AACzB,MAAI,UAAU;AACd,MAAI,WAAW;AACf,MAAI,WAAW;AACf,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,UAAM,KAAK,MAAM,CAAC;AAClB,QAAI,UAAU;AACZ,UAAI,OAAO,QAAQ,IAAI,IAAI,MAAM,QAAQ;AACvC,mBAAW,MAAM,EAAE,CAAC;AACpB;AAAA,MACF;AACA,UAAI,OAAO,KAAK;AACd,mBAAW;AACX;AAAA,MACF;AACA,iBAAW;AAAA,IACb,WAAW,UAAU;AACnB,UAAI,OAAO,OAAO,MAAM,IAAI,CAAC,MAAM,KAAK;AACtC,mBAAW;AACX;AACA;AAAA,MACF;AACA,UAAI,OAAO,KAAK;AACd,mBAAW;AACX;AAAA,MACF;AACA,iBAAW;AAAA,IACb,WAAW,OAAO,KAAK;AACrB,iBAAW;AAAA,IACb,WAAW,OAAO,KAAK;AACrB,iBAAW;AAAA,IACb,WAAW,OAAO,KAAK;AACrB,YAAM,KAAK,QAAQ,KAAK,CAAC;AACzB,gBAAU;AAAA,IACZ,OAAO;AACL,iBAAW;AAAA,IACb;AAAA,EACF;AACA,MAAI,QAAQ,KAAK,EAAE,SAAS,KAAK,MAAM,SAAS,GAAG;AACjD,UAAM,KAAK,QAAQ,KAAK,CAAC;AAAA,EAC3B;AACA,SAAO;AACT;AAgCA,IAAM,wBAAwB;AAS9B,SAAS,oBACP,WACA,YACA,OACoE;AACpE,QAAM,QAAQ,MAAM,MAAM,qBAAqB;AAC/C,MAAI,CAAC,OAAO;AACV,WAAO,EAAE,IAAI,OAAO,QAAQ,gDAAgD;AAAA,EAC9E;AACA,QAAM,WAAW,MAAM,CAAC;AACxB,QAAM,YAAY,MAAM,CAAC;AACzB,QAAM,MAAM,KAAK,QAAQ,QAAQ,KAAK;AACtC,QAAM,MAAM,WAAW,QAAQ;AAC/B,QAAM,eAAe,KAAK,KAAK,WAAW,YAAY,KAAK,GAAG,SAAS,GAAG,GAAG,EAAE;AAC/E,SAAO,EAAE,IAAI,MAAM,aAAa;AAClC;AAOA,eAAsB,gCAAgC,SASX;AACzC,QAAM,EAAE,SAAS,UAAU,IAAI;AAC/B,QAAM,aAAa,QAAQ,cAAc;AAEzC,QAAM,SAAwC;AAAA,IAC5C,SAAS;AAAA,IACT,gBAAgB;AAAA,IAChB,QAAQ,CAAC;AAAA,EACX;AAEA,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,QAAQ,gBAAgB;AAAA,EAC3C,QAAQ;AAKN,WAAO;AAAA,MACL,SAAS;AAAA,MACT,gBAAgB;AAAA,MAChB,QAAQ;AAAA,QACN;AAAA,UACE,YAAY;AAAA,UACZ,UAAU;AAAA,UACV,MAAM;AAAA,UACN,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,aAAW,UAAU,UAAU;AAC7B,WAAO,WAAW;AAClB,UAAM,KAAK,OAAO;AAClB,UAAM,cAAc,GAAG;AACvB,UAAM,aAAa,GAAG;AAWtB,QAAI;AACJ,QAAI;AACJ,QAAI,0BAA0B;AAC9B,QAAI,2BAA2B;AAC/B,QAAI,mBAAmB;AACvB,QAAI,oBAAoB;AACxB,QAAI,gBAAgB;AACpB,QAAI,iBAAiB;AACrB,QAAI,UAAU;AACd,QAAI;AACF,YAAM,MAAM,MAAM,SAAS,OAAO,MAAM,OAAO;AAC/C,YAAM,iBAAiB,IAAI,QAAQ,SAAS,IAAI,QAAQ,KAAK,IAAI,CAAC;AAClE,gBAAU,iBAAiB,IAAI,IAAI,MAAM,GAAG,cAAc,IAAI;AAO9D,YAAM,aAAa,CAAC,GAAG,QAAQ,SAAS,IAAI,OAAO,mBAAmB,QAAQ,mBAAmB,QAAQ,GAAG,CAAC,CAAC;AAC9G,sBAAgB,WAAW;AAC3B,yBAAmB,WAAW,SAAS;AACvC,UAAI,WAAW,SAAS,GAAG;AACzB,kCAA0B;AAK1B,cAAM,UAAU,WAAW,WAAW,SAAS,CAAC;AAChD,YAAI,MAAM,QAAQ,CAAC,EAAE,KAAK;AAC1B,YACG,IAAI,WAAW,GAAG,KAAK,IAAI,SAAS,GAAG,KACvC,IAAI,WAAW,GAAG,KAAK,IAAI,SAAS,GAAG,GACxC;AACA,gBAAM,IAAI,MAAM,GAAG,EAAE;AAAA,QACvB;AACA,wBAAgB;AAAA,MAClB;AACA,YAAM,cAAc,CAAC,GAAG,QAAQ,SAAS,IAAI,OAAO,oBAAoB,QAAQ,oBAAoB,QAAQ,GAAG,CAAC,CAAC;AACjH,uBAAiB,YAAY;AAC7B,0BAAoB,YAAY,SAAS;AACzC,UAAI,YAAY,SAAS,GAAG;AAC1B,mCAA2B;AAC3B,cAAM,WAAW,YAAY,YAAY,SAAS,CAAC;AACnD,yBAAiB,SAAS,CAAC,EAAE,KAAK;AAAA,MACpC;AAAA,IACF,QAAQ;AAAA,IAER;AAEA,UAAM,UAAU,MAAM,QAAQ,WAAW,KAAK,YAAY,SAAS;AACnE,UAAM,SAAS,eAAe,UAAa,eAAe;AAC1D,UAAM,YAAY,kBAAkB,UAAa,cAAc,SAAS;AAOxE,UAAM,sBAAsB,4BAA4B,CAAC;AAIzD,UAAM,iBACJ,4BACC,kBAAkB,UAAa,cAAc,WAAW,MACzD,CAAC;AACH,QACE,CAAC,WAAW,CAAC,UAAU,CAAC,aACxB,CAAC,uBAAuB,CAAC,eACzB;AACF,WAAO,kBAAkB;AAMzB,QAAI,kBAAkB;AACpB,aAAO,OAAO,KAAK;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,UAAU,GAAG;AAAA,QACb,MAAM;AAAA,QACN,QAAQ,qBAAqB,aAAa;AAAA,MAC5C,CAAC;AAAA,IACH;AACA,QAAI,mBAAmB;AACrB,aAAO,OAAO,KAAK;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,UAAU,GAAG;AAAA,QACb,MAAM;AAAA,QACN,QAAQ,qBAAqB,cAAc;AAAA,MAC7C,CAAC;AAAA,IACH;AAEA,QAAI,qBAAqB;AACvB,YAAM,UAAU,kBAAkB;AAClC,aAAO,OAAO,KAAK;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,UAAU,GAAG;AAAA,QACb,MAAM;AAAA,QACN,QAAQ,2BAA2B,OAAO;AAAA,MAC5C,CAAC;AAAA,IACH;AAOA,QAAI,WAAW,0BAA0B;AACvC,UAAI,UAA2B;AAC/B,UAAI,kBAAkB,eAAe,SAAS,GAAG;AAC/C,kBAAU,oBAAoB,cAAc;AAAA,MAC9C;AACA,UAAI,YAAY,MAAM;AAIpB,kBAAU,qBAAqB,SAAS,cAAc;AAAA,MACxD;AACA,UAAI,YAAY,QAAQ,QAAQ,SAAS,YAAa,QAAQ;AAC5D,mBAAW,OAAO,SAAS;AACzB,cAAI,IAAI,WAAW,GAAG;AACpB,mBAAO,OAAO,KAAK;AAAA,cACjB,YAAY,OAAO;AAAA,cACnB,UAAU,GAAG;AAAA,cACb,MAAM;AAAA,cACN,QAAQ;AAAA,YACV,CAAC;AACD;AAAA,UACF;AACA,cAAI,CAAC,YAAa,SAAS,GAAG,GAAG;AAK/B,gBACE,CAAC,gBAAgB,KAAK,GAAG,KACzB,CAAC,0BAA0B,KAAK,GAAG,GACnC;AACA,qBAAO,OAAO,KAAK;AAAA,gBACjB,YAAY,OAAO;AAAA,gBACnB,UAAU,GAAG;AAAA,gBACb,MAAM;AAAA,gBACN,QAAQ,qDAAqD,KAAK,UAAU,GAAG,CAAC;AAAA,cAClF,CAAC;AAAA,YACH;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,QAAI,gBAAgB;AAClB,aAAO,OAAO,KAAK;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,UAAU,GAAG;AAAA,QACb,MAAM;AAAA,QACN,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAEA,QAAI,SAAS;AACX,iBAAW,SAAS,aAAc;AAchC,YACE,eAAe,2BACf,0BAA0B,KAAK,KAAK,GACpC;AACA;AAAA,QACF;AACA,cAAM,WAAW,oBAAoB,WAAW,YAAY,KAAK;AACjE,YAAI,CAAC,SAAS,IAAI;AAChB,iBAAO,OAAO,KAAK;AAAA,YACjB,YAAY,OAAO;AAAA,YACnB,UAAU,GAAG;AAAA,YACb,MAAM;AAAA,YACN,QAAQ,GAAG,KAAK,UAAU,KAAK,CAAC,KAAK,SAAS,MAAM;AAAA,UACtD,CAAC;AACD;AAAA,QACF;AAKA,YAAI,aAAa;AACjB,YAAI;AACF,gBAAM,KAAK,MAAM,KAAK,SAAS,YAAY;AAC3C,uBAAa,GAAG,OAAO;AAAA,QACzB,QAAQ;AACN,uBAAa;AAAA,QACf;AACA,YAAI,CAAC,YAAY;AACf,iBAAO,OAAO,KAAK;AAAA,YACjB,YAAY,OAAO;AAAA,YACnB,UAAU,GAAG;AAAA,YACb,MAAM;AAAA,YACN,QAAQ,GAAG,KAAK,WAAM,SAAS,YAAY;AAAA,UAC7C,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAKA,QAAI,aAAa,CAAC,wBAAwB,aAAa,GAAG;AACxD,aAAO,OAAO,KAAK;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,UAAU,GAAG;AAAA,QACb,MAAM;AAAA,QACN,QAAQ,qBAAqB,KAAK,UAAU,aAAa,CAAC;AAAA,MAC5D,CAAC;AAAA,IACH;AAAA,EACF;AAQA,MAAI;AACF,UAAM,YAAY,IAAI,IAAI,SAAS,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;AACrD,UAAM,YAAY,CAAC,SAAS,eAAe,cAAc,kBAAkB;AAC3E,eAAW,YAAY,WAAW;AAChC,YAAM,WAAW,KAAK,KAAK,WAAW,QAAQ;AAC9C,uBAAiB,QAAQ,kBAAkB,UAAU,SAAS,GAAG;AAC/D,YAAI,UAAU,IAAI,IAAI,EAAG;AACzB,YAAI;AACF,gBAAM,MAAM,MAAM,SAAS,MAAM,OAAO;AACxC,cACE,oBAAoB,KAAK,GAAG,KAC5B,mBAAmB,KAAK,GAAG,GAC3B;AACA,mBAAO,kBAAkB;AACzB,mBAAO,OAAO,KAAK;AAAA,cACjB,YAAY;AAAA,cACZ,UAAU;AAAA,cACV,MAAM;AAAA,cACN,QACE;AAAA,YACJ,CAAC;AAAA,UACH;AAAA,QACF,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AAEA,SAAO;AACT;AAQA,gBAAgB,kBAAkB,MAAc,WAA2C;AACzF,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,UAAM,WAAW,MAAM,MAAM,IAAI;AACjC,QAAI,CAAC,SAAS,YAAY,KAAK,SAAS,eAAe,EAAG;AAC1D,oBAAgB,MAAM,SAAS,SAAS;AACxC,UAAM,WAAW,MAAM,SAAS,IAAI;AACpC,QAAI,CAAC,aAAa,UAAU,aAAa,EAAG;AAC5C,cAAU,MAAM,QAAQ,MAAM,EAAE,eAAe,KAAK,CAAC;AAAA,EACvD,QAAQ;AACN;AAAA,EACF;AACA,aAAW,SAAS,SAAS;AAC3B,UAAM,OAAO,KAAK,KAAK,MAAM,MAAM,IAAI;AACvC,QAAI,MAAM,eAAe,EAAG;AAC5B,QAAI,MAAM,YAAY,GAAG;AACvB,aAAO,kBAAkB,MAAM,aAAa;AAAA,IAC9C,WAAW,MAAM,OAAO,KAAK,MAAM,KAAK,SAAS,KAAK,GAAG;AACvD,UAAI;AACF,cAAM,WAAW,MAAM,SAAS,IAAI;AACpC,YAAI,CAAC,aAAa,UAAU,aAAa,EAAG;AAAA,MAC9C,QAAQ;AACN;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAEA,SAAS,aAAa,WAAmB,MAAuB;AAC9D,QAAM,WAAW,KAAK,SAAS,MAAM,SAAS;AAC9C,SAAO,aAAa,MAAO,CAAC,CAAC,YAAY,CAAC,SAAS,WAAW,IAAI,KAAK,CAAC,KAAK,WAAW,QAAQ;AAClG;","names":[]}

package/dist/{chunk-557IAFPD.js → chunk-APRRL26Q.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-SFQ6QNL7.js";
 import {
   StorageManager
-} from "./chunk-YFS5OEKO.js";
+} from "./chunk-7MLB4NCL.js";
 import {
   buildLifecycleEventsForMemory,
   sortMemoryLifecycleEvents
@@ -74,4 +74,4 @@ export {
   backupExistingLedger,
   rebuildMemoryLifecycleLedger
 };
-//# sourceMappingURL=chunk-557IAFPD.js.map
+//# sourceMappingURL=chunk-APRRL26Q.js.map

package/dist/{chunk-QDDHYAKV.js → chunk-AZDOWD2L.js}

@@ -1,7 +1,7 @@
 import {
   StorageManager,
   normalizeEntityName
-} from "./chunk-YFS5OEKO.js";
+} from "./chunk-7MLB4NCL.js";
 import {
   readEnvVar,
   resolveHomeDir
@@ -824,4 +824,4 @@ export {
   resolveBriefingSaveDir,
   briefingFilename
 };
-//# sourceMappingURL=chunk-QDDHYAKV.js.map
+//# sourceMappingURL=chunk-AZDOWD2L.js.map

package/dist/{chunk-MLT75J5S.js → chunk-B6SU7YSE.js}

@@ -10,10 +10,10 @@ import {
 import {
   listMemoryGovernanceRuns,
   readMemoryGovernanceRunArtifact
-} from "./chunk-OI27U2HT.js";
+} from "./chunk-5BTCT236.js";
 import {
   StorageManager
-} from "./chunk-YFS5OEKO.js";
+} from "./chunk-7MLB4NCL.js";
 import {
   MEMORY_LIFECYCLE_EVENT_SORT_ORDER,
   buildLifecycleEventsForMemory,
@@ -929,4 +929,4 @@ export {
   verifyMemoryProjection,
   repairMemoryProjection
 };
-//# sourceMappingURL=chunk-MLT75J5S.js.map
+//# sourceMappingURL=chunk-B6SU7YSE.js.map

package/dist/{chunk-FXKPZ3H6.js → chunk-BPSGLMQ4.js}

@@ -1,6 +1,6 @@
 import {
   isRecallDisclosure
-} from "./chunk-KGK2QKWL.js";
+} from "./chunk-4R4KTDIE.js";
 import {
   normalizeRetrievedMemoryProvenance
 } from "./chunk-AC5LO7IU.js";
@@ -269,4 +269,4 @@ export {
   RecallXrayBuilder,
   summarizeDisclosureTokens
 };
-//# sourceMappingURL=chunk-FXKPZ3H6.js.map
+//# sourceMappingURL=chunk-BPSGLMQ4.js.map

package/dist/{chunk-2NLLXCJG.js → chunk-BXLOS5AJ.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-765K3SAT.js";
 import {
   encryptCapsuleFile
-} from "./chunk-X7Y7WX73.js";
+} from "./chunk-DQEMWVMT.js";
 import {
   computeTransferOutputRel,
   isTransferPathExcluded
@@ -109,4 +109,4 @@ async function enforceRetention(outDirAbs, retentionDays) {
 export {
   backupMemoryDir
 };
-//# sourceMappingURL=chunk-2NLLXCJG.js.map
+//# sourceMappingURL=chunk-BXLOS5AJ.js.map

package/dist/{chunk-NOMEVTUD.js → chunk-C6C7XVKG.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-3UXOZBHV.js";
 import {
   StorageManager
-} from "./chunk-YFS5OEKO.js";
+} from "./chunk-7MLB4NCL.js";
 import {
   isSafeRouteNamespace
 } from "./chunk-U3PN77QT.js";
@@ -101,8 +101,9 @@ function resolveNamespace(override, cfg) {
 }
 function resolveNamespaceDir(memoryDir, namespace, cfg) {
   if (!cfg.namespacesEnabled) return memoryDir;
-  const defaultNamespace = (cfg.defaultNamespace ?? "").trim();
-  const ns = (namespace || defaultNamespace || "default").trim();
+  const configuredDefaultNamespace = (cfg.defaultNamespace ?? "").trim();
+  const defaultNamespace = configuredDefaultNamespace.length > 0 ? configuredDefaultNamespace : "default";
+  const ns = (namespace || defaultNamespace).trim();
   if (!isSafeRouteNamespace(ns)) {
     throw new Error(`invalid materialize namespace: ${ns}`);
   }
@@ -117,4 +118,4 @@ export {
   runCodexMaterialize,
   runPostConsolidationMaterialize
 };
-//# sourceMappingURL=chunk-NOMEVTUD.js.map
+//# sourceMappingURL=chunk-C6C7XVKG.js.map

package/dist/chunk-C6C7XVKG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/connectors/codex-materialize-runner.ts"],"sourcesContent":["/**\n * codex-materialize-runner.ts — Thin I/O bridge for the Codex materializer.\n *\n * The pure rendering logic lives in {@link ./codex-materialize.js}. This file\n * is the place callers (consolidation hooks, CLI, session-end hook) go when\n * they want the whole \"load memories from storage → render → write\" flow.\n *\n * Kept deliberately small so #378 never has to reach into orchestrator.ts /\n * importance.ts — the two files Wave 1 agents are editing concurrently.\n */\n\nimport { existsSync } from \"node:fs\";\n\nimport { log } from \"../logger.js\";\nimport { resolveNamespaceChildRoot } from \"../namespaces/path.js\";\nimport { isSafeRouteNamespace } from \"../routing/engine.js\";\nimport { StorageManager } from \"../storage.js\";\nimport type { PluginConfig, MemoryFile } from \"../types.js\";\nimport {\n  hasCodexMaterializeSentinel,\n  materializeForNamespace,\n  type MaterializeResult,\n  type RolloutSummaryInput,\n} from \"./codex-materialize.js\";\n\n/** Options accepted by the shared post-consolidation materialize helper. */\nexport interface PostConsolidationMaterializeOptions {\n  config: PluginConfig;\n  namespace?: string;\n  memories?: MemoryFile[];\n  memoryDir?: string;\n  codexHome?: string;\n  rolloutSummaries?: RolloutSummaryInput[];\n  now?: Date;\n}\n\n/** Options accepted by the runner. */\nexport interface RunMaterializeOptions {\n  /** Remnic config — we only read the `codexMaterialize*` fields. */\n  config: PluginConfig;\n  /** Namespace to materialize. Overrides the config's `codexMaterializeNamespace`. */\n  namespace?: string;\n  /** Override the memory directory (defaults to `config.memoryDir`). */\n  memoryDir?: string;\n  /** Override `<codex_home>` (useful for tests). */\n  codexHome?: string;\n  /** Optional pre-loaded memories (bypasses disk read — used in tests). */\n  memories?: MemoryFile[];\n  /** Optional rollout summaries supplied by the caller. */\n  rolloutSummaries?: RolloutSummaryInput[];\n  /** Current time injection for deterministic runs. */\n  now?: Date;\n  /** Reason string — logged for observability. */\n  reason?: \"consolidation\" | \"session_end\" | \"manual\" | \"cli\";\n}\n\n/**\n * Run the Codex materialization end-to-end. Returns `null` when the feature\n * is disabled in config or when the user hasn't opted in via the sentinel.\n * Never throws for \"expected\" skips; only throws on schema validation or I/O\n * errors that callers actually need to surface.\n */\nexport async function runCodexMaterialize(\n  options: RunMaterializeOptions,\n): Promise<MaterializeResult | null> {\n  const cfg = options.config;\n  if (!cfg.codexMaterializeMemories) {\n    log.debug(`[codex-materialize] skipped — codexMaterializeMemories=false`);\n    return null;\n  }\n\n  // Per-trigger gate: session-end runs must honor codexMaterializeOnSessionEnd.\n  // The Codex Stop hook (remnic-codex-hook.cjs, session-end event) passes\n  // reason=\"session_end\"; when the user has turned off the session-end trigger\n  // we short-circuit here without touching disk.\n  if (options.reason === \"session_end\" && cfg.codexMaterializeOnSessionEnd === false) {\n    log.debug(\n      `[codex-materialize] skipped — session-end disabled via codexMaterializeOnSessionEnd=false`,\n    );\n    return null;\n  }\n\n  const namespace = resolveNamespace(options.namespace, cfg);\n  const memoryDir = options.memoryDir ?? cfg.memoryDir;\n  const codexHome = options.codexHome ?? cfg.codex?.codexHome ?? undefined;\n  if (!memoryDir) {\n    log.warn(`[codex-materialize] skipped — no memoryDir available`);\n    return null;\n  }\n\n  let memories: MemoryFile[];\n  if (options.memories) {\n    memories = options.memories;\n  } else {\n    if (!hasCodexMaterializeSentinel(codexHome)) {\n      return materializeForNamespace(namespace, {\n        memories: [],\n        codexHome,\n        maxSummaryTokens: cfg.codexMaterializeMaxSummaryTokens,\n        rolloutRetentionDays: cfg.codexMaterializeRolloutRetentionDays,\n        rolloutSummaries: options.rolloutSummaries,\n        now: options.now,\n      });\n    }\n    const nsDir = resolveNamespaceDir(memoryDir, namespace, cfg);\n    const storage = new StorageManager(nsDir);\n    memories = await storage.readAllMemories();\n  }\n\n  // Intentionally NOT catching here: per the JSDoc contract above,\n  // schema-validation and I/O errors from `materializeForNamespace` must\n  // surface to callers so they can exit non-zero (CLI) or log + recover\n  // (consolidation post-hook, which has its own narrower try/catch).\n  // Catching everything would make a broken MEMORY.md render look like a\n  // successful skip, and invisible failures are strictly worse than loud\n  // ones for a feature that writes to `~/.codex/memories`.\n  const result = materializeForNamespace(namespace, {\n    memories,\n    codexHome,\n    maxSummaryTokens: cfg.codexMaterializeMaxSummaryTokens,\n    rolloutRetentionDays: cfg.codexMaterializeRolloutRetentionDays,\n    rolloutSummaries: options.rolloutSummaries,\n    now: options.now,\n  });\n  if (options.reason) {\n    log.debug(\n      `[codex-materialize] ran reason=${options.reason} wrote=${result.wrote} files=${result.filesWritten.length}`,\n    );\n  }\n  return result;\n}\n\n/**\n * Shared helper for post-consolidation materialize hooks.\n *\n * `materializeAfterSemanticConsolidation` and `materializeAfterCausalConsolidation`\n * used to be two nearly-identical copies of this logic; keeping the actual\n * body here means any future guard/logging change happens in one place.\n *\n * The only per-caller knob is `logPrefix`, which is used to tag the\n * non-fatal warning emitted when the materializer throws.\n */\nexport async function runPostConsolidationMaterialize(\n  logPrefix: string,\n  options: PostConsolidationMaterializeOptions,\n): Promise<MaterializeResult | null> {\n  if (!options.config.codexMaterializeMemories) return null;\n  if (!options.config.codexMaterializeOnConsolidation) return null;\n  try {\n    return await runCodexMaterialize({\n      config: options.config,\n      namespace: options.namespace,\n      memories: options.memories,\n      memoryDir: options.memoryDir,\n      codexHome: options.codexHome,\n      rolloutSummaries: options.rolloutSummaries,\n      now: options.now,\n      reason: \"consolidation\",\n    });\n  } catch (error) {\n    log.warn(\n      `${logPrefix} Codex materialize post-hook failed (non-fatal): ${\n        error instanceof Error ? error.message : String(error)\n      }`,\n    );\n    return null;\n  }\n}\n\nfunction resolveNamespace(override: string | undefined, cfg: PluginConfig): string {\n  const requested = (override ?? cfg.codexMaterializeNamespace ?? \"auto\").trim();\n  const defaultNamespace = (cfg.defaultNamespace ?? \"\").trim();\n  const namespace =\n    requested.length === 0 || requested === \"auto\"\n      ? (defaultNamespace.length > 0 ? defaultNamespace : \"default\")\n      : requested;\n  if (!isSafeRouteNamespace(namespace)) {\n    throw new Error(`invalid materialize namespace: ${namespace}`);\n  }\n  return namespace;\n}\n\n/**\n * Resolve the on-disk storage root for a namespace, matching\n * `NamespaceStorageRouter` in `packages/remnic-core/src/namespaces/storage.ts`.\n *\n * Contract:\n *  - When namespaces are disabled, every namespace maps to `memoryDir` itself.\n *  - When namespaces are enabled, non-default namespaces always live under\n *    `memoryDir/namespaces/<namespace>`.\n *  - The default namespace prefers `memoryDir/namespaces/<defaultNamespace>`\n *    when that directory already exists (migrated install); otherwise it\n *    falls back to the legacy `memoryDir` root so materialization does not\n *    silently switch directories out from under an existing install.\n */\nfunction resolveNamespaceDir(\n  memoryDir: string,\n  namespace: string,\n  cfg: PluginConfig,\n): string {\n  if (!cfg.namespacesEnabled) return memoryDir;\n\n  const configuredDefaultNamespace = (cfg.defaultNamespace ?? \"\").trim();\n  const defaultNamespace =\n    configuredDefaultNamespace.length > 0 ? configuredDefaultNamespace : \"default\";\n  const ns = (namespace || defaultNamespace).trim();\n  if (!isSafeRouteNamespace(ns)) {\n    throw new Error(`invalid materialize namespace: ${ns}`);\n  }\n  const namespacedRoot = resolveNamespaceChildRoot(memoryDir, ns, \"materialize namespace path\");\n\n  if (ns === defaultNamespace) {\n    return existsSync(namespacedRoot) ? namespacedRoot : memoryDir;\n  }\n  return namespacedRoot;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAWA,SAAS,kBAAkB;AAmD3B,eAAsB,oBACpB,SACmC;AACnC,QAAM,MAAM,QAAQ;AACpB,MAAI,CAAC,IAAI,0BAA0B;AACjC,QAAI,MAAM,mEAA8D;AACxE,WAAO;AAAA,EACT;AAMA,MAAI,QAAQ,WAAW,iBAAiB,IAAI,iCAAiC,OAAO;AAClF,QAAI;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,QAAM,YAAY,iBAAiB,QAAQ,WAAW,GAAG;AACzD,QAAM,YAAY,QAAQ,aAAa,IAAI;AAC3C,QAAM,YAAY,QAAQ,aAAa,IAAI,OAAO,aAAa;AAC/D,MAAI,CAAC,WAAW;AACd,QAAI,KAAK,2DAAsD;AAC/D,WAAO;AAAA,EACT;AAEA,MAAI;AACJ,MAAI,QAAQ,UAAU;AACpB,eAAW,QAAQ;AAAA,EACrB,OAAO;AACL,QAAI,CAAC,4BAA4B,SAAS,GAAG;AAC3C,aAAO,wBAAwB,WAAW;AAAA,QACxC,UAAU,CAAC;AAAA,QACX;AAAA,QACA,kBAAkB,IAAI;AAAA,QACtB,sBAAsB,IAAI;AAAA,QAC1B,kBAAkB,QAAQ;AAAA,QAC1B,KAAK,QAAQ;AAAA,MACf,CAAC;AAAA,IACH;AACA,UAAM,QAAQ,oBAAoB,WAAW,WAAW,GAAG;AAC3D,UAAM,UAAU,IAAI,eAAe,KAAK;AACxC,eAAW,MAAM,QAAQ,gBAAgB;AAAA,EAC3C;AASA,QAAM,SAAS,wBAAwB,WAAW;AAAA,IAChD;AAAA,IACA;AAAA,IACA,kBAAkB,IAAI;AAAA,IACtB,sBAAsB,IAAI;AAAA,IAC1B,kBAAkB,QAAQ;AAAA,IAC1B,KAAK,QAAQ;AAAA,EACf,CAAC;AACD,MAAI,QAAQ,QAAQ;AAClB,QAAI;AAAA,MACF,kCAAkC,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,OAAO,aAAa,MAAM;AAAA,IAC5G;AAAA,EACF;AACA,SAAO;AACT;AAYA,eAAsB,gCACpB,WACA,SACmC;AACnC,MAAI,CAAC,QAAQ,OAAO,yBAA0B,QAAO;AACrD,MAAI,CAAC,QAAQ,OAAO,gCAAiC,QAAO;AAC5D,MAAI;AACF,WAAO,MAAM,oBAAoB;AAAA,MAC/B,QAAQ,QAAQ;AAAA,MAChB,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,MAClB,WAAW,QAAQ;AAAA,MACnB,WAAW,QAAQ;AAAA,MACnB,kBAAkB,QAAQ;AAAA,MAC1B,KAAK,QAAQ;AAAA,MACb,QAAQ;AAAA,IACV,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI;AAAA,MACF,GAAG,SAAS,oDACV,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CACvD;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AAEA,SAAS,iBAAiB,UAA8B,KAA2B;AACjF,QAAM,aAAa,YAAY,IAAI,6BAA6B,QAAQ,KAAK;AAC7E,QAAM,oBAAoB,IAAI,oBAAoB,IAAI,KAAK;AAC3D,QAAM,YACJ,UAAU,WAAW,KAAK,cAAc,SACnC,iBAAiB,SAAS,IAAI,mBAAmB,YAClD;AACN,MAAI,CAAC,qBAAqB,SAAS,GAAG;AACpC,UAAM,IAAI,MAAM,kCAAkC,SAAS,EAAE;AAAA,EAC/D;AACA,SAAO;AACT;AAeA,SAAS,oBACP,WACA,WACA,KACQ;AACR,MAAI,CAAC,IAAI,kBAAmB,QAAO;AAEnC,QAAM,8BAA8B,IAAI,oBAAoB,IAAI,KAAK;AACrE,QAAM,mBACJ,2BAA2B,SAAS,IAAI,6BAA6B;AACvE,QAAM,MAAM,aAAa,kBAAkB,KAAK;AAChD,MAAI,CAAC,qBAAqB,EAAE,GAAG;AAC7B,UAAM,IAAI,MAAM,kCAAkC,EAAE,EAAE;AAAA,EACxD;AACA,QAAM,iBAAiB,0BAA0B,WAAW,IAAI,4BAA4B;AAE5F,MAAI,OAAO,kBAAkB;AAC3B,WAAO,WAAW,cAAc,IAAI,iBAAiB;AAAA,EACvD;AACA,SAAO;AACT;","names":[]}

package/dist/{chunk-XKIQZXUB.js → chunk-CI7RKSRE.js}

@@ -74,6 +74,12 @@ function parseOpenAiMessageParts(input, _options = {}) {
     }
     if (type === "message") {
       for (const block of gatherContentBlocks(item.content)) {
+        if (isOpenAiResponseItem(block)) {
+          parts.push(
+            ...parseOpenAiMessageParts([block]).map(({ ordinal: _ordinal, ...part }) => part)
+          );
+          continue;
+        }
         const text = asNonEmptyString(block.text ?? block.content);
         if (text) parts.push(makePart("text", { type, text }, { filePath: firstFilePath(text) }));
       }
@@ -613,4 +619,4 @@ export {
   parsePiMessageParts,
   partsFromRenderedText
 };
-//# sourceMappingURL=chunk-XKIQZXUB.js.map
+//# sourceMappingURL=chunk-CI7RKSRE.js.map