@remnic/core 9.3.708 → 9.3.710

package/src/correction/correction-service.ts

@@ -0,0 +1,180 @@
+/**
+ * correction/correction-service.ts — thin orchestration for the Correction
+ * Contract (issue #1580 PR 3).
+ *
+ * Owns the single plan/apply pipeline every correction surface (MCP / HTTP /
+ * CLI) calls. Authorizes the caller through the existing namespace policy,
+ * constructs the planner + executor with their collaborators, and exposes
+ * `plan` / `apply` / `listPending` / `discard`.
+ *
+ * The service NEVER accepts a caller-supplied namespace without policy
+ * validation (rule 42; checklist §16 foreign-ID guard): a principal may only
+ * PLAN against namespaces they can READ and APPLY against namespaces they can
+ * WRITE — both resolved through the injected namespace policy.
+ */
+
+import {
+  CorrectionContractError,
+  type CorrectionOutcome,
+  type CorrectionPlan,
+  type CorrectionRequest,
+} from "./correction-contract.js";
+import { CorrectionPlanner, type PlannerDeps } from "./correction-planner.js";
+import { CorrectionExecutor, type ExecutorDeps } from "./correction-executor.js";
+
+// ---------------------------------------------------------------------------
+// Injected collaborators — the access-service wires these from the orchestrator.
+// ---------------------------------------------------------------------------
+
+/**
+ * Namespace policy façade. The access-service already implements these via
+ * `resolveWritableNamespace` / `canReadNamespace` / `canWriteNamespace`; the
+ * correction service consumes them through this narrow interface so the
+ * correction modules stay decoupled from the access-service's surface area.
+ */
+export interface CorrectionNamespacePolicy {
+  /**
+   * Resolve the AUTHORIZED effective namespace for a plan/apply request.
+   * Throws when the caller lacks read+write scope. The returned namespace is
+   * the ONE the planner + executor operate in.
+   */
+  resolveAuthorizedNamespace(request: {
+    namespace?: string;
+    sessionKey?: string;
+    principal?: string;
+  }): Promise<string>;
+  /**
+   * Whether the caller may WRITE a given namespace. Used to authorize rescope
+   * destinations before the executor moves a memory across namespaces.
+   */
+  canWriteNamespace(request: {
+    namespace: string;
+    sessionKey?: string;
+    principal?: string;
+  }): Promise<boolean>;
+  /** Namespaces the caller may read — scopes the planner's search. */
+  readableNamespaces(request: {
+    namespace?: string;
+    sessionKey?: string;
+    principal?: string;
+  }): Promise<readonly string[]>;
+}
+
+/**
+ * Factory wiring for the planner + executor deps. The service holds ONE
+ * planner + ONE executor for its lifetime; both are stateless across requests
+ * (per-request scope is threaded through method parameters, rules 11/47).
+ */
+export interface CorrectionServiceDeps {
+  readonly policy: CorrectionNamespacePolicy;
+  /**
+   * Planner collaborators. The planner takes `readableNamespaces` per call to
+   * `plan()`, so a single deps instance serves callers with different scopes.
+   */
+  plannerDeps(): PlannerDeps;
+  /** Executor collaborators (one per service). */
+  executorDeps(): ExecutorDeps;
+  /** Whether the correction feature is enabled (gate). */
+  isEnabled(): boolean;
+  /** Whether apply requires explicit confirmation (rule 48). */
+  applyRequiresConfirm(): boolean;
+}
+
+// ---------------------------------------------------------------------------
+// Service
+// ---------------------------------------------------------------------------
+
+export class CorrectionService {
+  private readonly planner: CorrectionPlanner;
+  private readonly executor: CorrectionExecutor;
+
+  constructor(private readonly deps: CorrectionServiceDeps) {
+    this.planner = new CorrectionPlanner(deps.plannerDeps());
+    this.executor = new CorrectionExecutor(deps.executorDeps(), this.planner);
+  }
+
+  /**
+   * Plan a correction. Read-only — produces + persists a {@link CorrectionPlan}.
+   * Safe to run with the gate ON (default) since the plan writes no memory state.
+   *
+   * The plan is stored under the AUTHORIZED (writable) namespace — the same
+   * namespace apply/listPending/discard resolve — so the plan is always
+   * found by the caller that created it (review threads: plan-stored-wrong-
+   * namespace + cross-namespace candidate mismatch). Candidates are located
+   * within that single namespace too: a correction can only affect memories
+   * the principal can write, so reading from a non-writable namespace to
+   * draft a correction that can never be applied would be misleading.
+   */
+  async plan(request: CorrectionRequest): Promise<CorrectionPlan> {
+    this.requireEnabled();
+    const authorized = await this.deps.policy.resolveAuthorizedNamespace(request);
+    return this.planner.plan(request, [authorized]);
+  }
+
+  /**
+   * Apply a persisted plan by id. Requires `confirm: true` (or interactive
+   * yes at the CLI) when `applyRequiresConfirm` is on (default).
+   */
+  async apply(
+    planId: string,
+    opts: {
+      confirm?: boolean;
+      namespace?: string;
+      sessionKey?: string;
+      principal?: string;
+    },
+  ): Promise<CorrectionOutcome> {
+    this.requireEnabled();
+    if (this.deps.applyRequiresConfirm() && opts.confirm !== true) {
+      throw new CorrectionContractError(
+        "Correction apply requires explicit confirmation (pass `confirm: true`).",
+      );
+    }
+    const namespace = await this.deps.policy.resolveAuthorizedNamespace({
+      ...(opts.namespace ? { namespace: opts.namespace } : {}),
+      ...(opts.sessionKey ? { sessionKey: opts.sessionKey } : {}),
+      ...(opts.principal ? { principal: opts.principal } : {}),
+    });
+    return this.executor.apply(namespace, planId, {
+      confirm: true,
+      // Authorize rescope destinations through the namespace policy bound to
+      // THIS caller's principal (review thread: authorize-rescope-destination).
+      canWriteDestination: (dest) =>
+        this.deps.policy.canWriteNamespace({
+          namespace: dest,
+          ...(opts.sessionKey ? { sessionKey: opts.sessionKey } : {}),
+          ...(opts.principal ? { principal: opts.principal } : {}),
+        }),
+    });
+  }
+
+  /** List pending (not-yet-applied) plans for the caller's namespace. */
+  async listPending(opts: {
+    namespace?: string;
+    sessionKey?: string;
+    principal?: string;
+  }): Promise<CorrectionPlan[]> {
+    this.requireEnabled();
+    const namespace = await this.deps.policy.resolveAuthorizedNamespace(opts);
+    return this.planner.listPending(namespace);
+  }
+
+  /** Discard a pending plan. Idempotent. */
+  async discard(
+    planId: string,
+    opts: { namespace?: string; sessionKey?: string; principal?: string },
+  ): Promise<void> {
+    this.requireEnabled();
+    const namespace = await this.deps.policy.resolveAuthorizedNamespace(opts);
+    await this.planner.markConsumed(namespace, planId, "discarded");
+    await this.planner.deletePlan(namespace, planId);
+  }
+
+  private requireEnabled(): void {
+    if (!this.deps.isEnabled()) {
+      throw new CorrectionContractError(
+        "Correction Contract is disabled (set correction.enabled = true to enable).",
+      );
+    }
+  }
+}

package/src/correction/correction-surfaces.test.ts

@@ -0,0 +1,245 @@
+/**
+ * Correction Contract surface tests (issue #1580 PR 3).
+ *
+ * Asserts the three transports (MCP / HTTP / CLI) all dispatch through the
+ * SAME boundary operations (memory_correct_plan / memory_correct_apply) so
+ * validation + namespace policy reach every correction path (rule 22 / 39).
+ *
+ * Gate parity test: when correctionVisible is off, tools/list is byte-identical
+ * to pre-feature — the two correction tools are absent (rule 39).
+ */
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import { EngramMcpServer } from "../access-mcp.js";
+import type { EngramAccessService } from "../access-service.js";
+import { getOperation, __resetRegistryForTest } from "../access-boundary.js";
+import type { CorrectionPlan, CorrectionOutcome } from "./correction-contract.js";
+
+// Re-register operations after a prior test file cleared the registry.
+import "../access-operations.js";
+
+// ---------------------------------------------------------------------------
+// Helpers — safe extraction without inline casts
+// ---------------------------------------------------------------------------
+
+function extractToolNames(response: unknown): Set<string> {
+  if (typeof response !== "object" || response === null) return new Set();
+  const r = response as { result?: unknown };
+  if (typeof r.result !== "object" || r.result === null) return new Set();
+  const result = r.result as { tools?: unknown };
+  if (!Array.isArray(result.tools)) return new Set();
+  const names = new Set<string>();
+  for (const t of result.tools) {
+    if (typeof t === "object" && t !== null && "name" in t) {
+      const name = t.name;
+      if (typeof name === "string") names.add(name);
+    }
+  }
+  return names;
+}
+
+interface MockCalls {
+  planRequests: Array<{ text: string; targetIds?: string[]; principal?: string }>;
+  applyRequests: Array<{ planId: string; confirm: boolean; principal?: string }>;
+}
+
+function makeMockService(
+  planResponse: CorrectionPlan,
+  applyResponse: CorrectionOutcome,
+): { service: EngramAccessService; calls: MockCalls } {
+  const calls: MockCalls = { planRequests: [], applyRequests: [] };
+  const service = {
+    briefingEnabled: true,
+    correctionPlan(req: {
+      text: string;
+      targetIds?: string[];
+      principal?: string;
+    }): Promise<CorrectionPlan> {
+      calls.planRequests.push(req);
+      return Promise.resolve(planResponse);
+    },
+    correctionApply(
+      planId: string,
+      opts: { confirm?: boolean; principal?: string },
+    ): Promise<CorrectionOutcome> {
+      calls.applyRequests.push({
+        planId,
+        confirm: opts.confirm === true,
+        ...(opts.principal ? { principal: opts.principal } : {}),
+      });
+      return Promise.resolve(applyResponse);
+    },
+    correctionListPending(): Promise<CorrectionPlan[]> {
+      return Promise.resolve([]);
+    },
+  } as unknown as EngramAccessService;
+  return { service, calls };
+}
+
+const STUB_PLAN: CorrectionPlan = {
+  planId: "corr-test-1",
+  request: { text: "we migrated to MySQL" },
+  affected: [],
+  classification: "outdated",
+  actions: [],
+  diff: "--- old\n+++ new",
+  confidence: 0.9,
+  warnings: [],
+  createdAt: "2026-01-01T00:00:00.000Z",
+  expiresAt: "2026-01-02T00:00:00.000Z",
+  namespace: "default",
+  status: "pending",
+};
+
+const STUB_OUTCOME: CorrectionOutcome = {
+  planId: "corr-test-1",
+  status: "applied",
+  results: [],
+  auditMemoryId: "audit-1",
+  appliedAt: "2026-01-01T00:00:00.000Z",
+};
+
+// ---------------------------------------------------------------------------
+// Gate parity: tools/list visibility (rule 39)
+// ---------------------------------------------------------------------------
+
+test("tools/list gate: correction tools absent when correctionVisible off (byte-identical)", async () => {
+  const stub = { briefingEnabled: true } as unknown as EngramAccessService;
+  const server = new EngramMcpServer(stub, { emitLegacyTools: true, correctionVisible: false });
+  const response = await server.handleRequest({ jsonrpc: "2.0", id: 1, method: "tools/list" });
+  const names = extractToolNames(response);
+  assert.equal(names.has("engram.memory_correct_plan"), false, "plan tool must be absent when gate off");
+  assert.equal(names.has("engram.memory_correct_apply"), false, "apply tool must be absent when gate off");
+  assert.equal(names.has("remnic.memory_correct_plan"), false, "plan alias must be absent when gate off");
+  assert.equal(names.has("remnic.memory_correct_apply"), false, "apply alias must be absent when gate off");
+});
+
+test("tools/list gate: correction tools present when correctionVisible on (default)", async () => {
+  const stub = { briefingEnabled: true } as unknown as EngramAccessService;
+  // correctionVisible defaults to true (enabled by default — plan is read-only).
+  const server = new EngramMcpServer(stub, { emitLegacyTools: true });
+  const response = await server.handleRequest({ jsonrpc: "2.0", id: 1, method: "tools/list" });
+  const names = extractToolNames(response);
+  assert.equal(names.has("engram.memory_correct_plan"), true, "plan tool must be present by default");
+  assert.equal(names.has("engram.memory_correct_apply"), true, "apply tool must be present by default");
+  assert.equal(names.has("remnic.memory_correct_plan"), true, "plan alias must be present");
+  assert.equal(names.has("remnic.memory_correct_apply"), true, "apply alias must be present");
+});
+
+// ---------------------------------------------------------------------------
+// MCP dispatch: tools/call → boundary operation → service method
+// ---------------------------------------------------------------------------
+
+test("MCP surface: memory_correct_plan dispatches to service.correctionPlan", async () => {
+  const { service, calls } = makeMockService(STUB_PLAN, STUB_OUTCOME);
+  const server = new EngramMcpServer(service, { emitLegacyTools: true, correctionVisible: true });
+  const response = await server.handleRequest({
+    jsonrpc: "2.0",
+    id: 1,
+    method: "tools/call",
+    params: {
+      name: "engram.memory_correct_plan",
+      arguments: { text: "we migrated to MySQL in March", targetIds: ["mem-1"] },
+    },
+  });
+  assert.equal(calls.planRequests.length, 1, "service.correctionPlan called exactly once");
+  assert.equal(calls.planRequests[0]?.text, "we migrated to MySQL in March");
+  assert.deepEqual(calls.planRequests[0]?.targetIds, ["mem-1"]);
+  // The response result is the plan returned by the service.
+  assert.equal(
+    typeof response === "object" && response !== null && "result" in response,
+    true,
+    "response must have a result",
+  );
+});
+
+test("MCP surface: memory_correct_apply dispatches to service.correctionApply with confirm", async () => {
+  const { service, calls } = makeMockService(STUB_PLAN, STUB_OUTCOME);
+  const server = new EngramMcpServer(service, { emitLegacyTools: true, correctionVisible: true });
+  await server.handleRequest({
+    jsonrpc: "2.0",
+    id: 2,
+    method: "tools/call",
+    params: {
+      name: "engram.memory_correct_apply",
+      arguments: { planId: "corr-test-1", confirm: true },
+    },
+  });
+  assert.equal(calls.applyRequests.length, 1, "service.correctionApply called exactly once");
+  assert.equal(calls.applyRequests[0]?.planId, "corr-test-1");
+  assert.equal(calls.applyRequests[0]?.confirm, true);
+});
+
+test("MCP surface: remnic.memory_correct_plan alias dispatches identically", async () => {
+  const { service, calls } = makeMockService(STUB_PLAN, STUB_OUTCOME);
+  const server = new EngramMcpServer(service, { emitLegacyTools: true, correctionVisible: true });
+  await server.handleRequest({
+    jsonrpc: "2.0",
+    id: 3,
+    method: "tools/call",
+    params: {
+      name: "remnic.memory_correct_plan",
+      arguments: { text: "alias test" },
+    },
+  });
+  assert.equal(calls.planRequests.length, 1, "alias dispatches to the same service method");
+  assert.equal(calls.planRequests[0]?.text, "alias test");
+});
+
+// ---------------------------------------------------------------------------
+// Boundary validation: empty text rejected (rule 51)
+// ---------------------------------------------------------------------------
+
+test("boundary: memory_correct_plan rejects empty text with a structured error", async () => {
+  const { service } = makeMockService(STUB_PLAN, STUB_OUTCOME);
+  const server = new EngramMcpServer(service, { emitLegacyTools: true, correctionVisible: true });
+  const response = await server.handleRequest({
+    jsonrpc: "2.0",
+    id: 4,
+    method: "tools/call",
+    params: {
+      name: "engram.memory_correct_plan",
+      arguments: { text: "" },
+    },
+  });
+  // The MCP server wraps boundary errors in an isError result.
+  if (typeof response === "object" && response !== null && "result" in response) {
+    const result = response.result;
+    if (typeof result === "object" && result !== null && "isError" in result) {
+      assert.equal(result.isError, true, "empty text must produce an error result");
+      return;
+    }
+  }
+  assert.fail("expected an isError result for empty text");
+});
+
+test("boundary: memory_correct_apply rejects missing planId with a structured error", async () => {
+  const { service } = makeMockService(STUB_PLAN, STUB_OUTCOME);
+  const server = new EngramMcpServer(service, { emitLegacyTools: true, correctionVisible: true });
+  const response = await server.handleRequest({
+    jsonrpc: "2.0",
+    id: 5,
+    method: "tools/call",
+    params: {
+      name: "engram.memory_correct_apply",
+      arguments: {},
+    },
+  });
+  if (typeof response === "object" && response !== null && "result" in response) {
+    const result = response.result;
+    if (typeof result === "object" && result !== null && "isError" in result) {
+      assert.equal(result.isError, true, "missing planId must produce an error result");
+      return;
+    }
+  }
+  assert.fail("expected an isError result for missing planId");
+});
+
+// ---------------------------------------------------------------------------
+// Operation registry: both ops are registered
+// ---------------------------------------------------------------------------
+
+test("registry: memory_correct_plan + memory_correct_apply are registered operations", () => {
+  assert.ok(getOperation("memory_correct_plan"), "memory_correct_plan must be registered");
+  assert.ok(getOperation("memory_correct_apply"), "memory_correct_apply must be registered");
+});

package/src/correction/index.ts

@@ -0,0 +1,43 @@
+/**
+ * correction/index.ts — barrel for the Correction Contract (issue #1580).
+ *
+ * One plan/apply pipeline for all memory corrections. See
+ * {@link CorrectionService} for the single entry point every surface calls.
+ */
+
+export {
+  CorrectionContractError,
+  CORRECTION_ACTION_KINDS,
+  CORRECTION_CLASSIFICATIONS,
+  CORRECTION_TEXT_MAX,
+  REDACTION_PATTERN_MAX,
+  deterministicFallbackPlan,
+  newPlanId,
+  validateCorrectionAction,
+  validateCorrectionRequest,
+  validateMemoryDraft,
+  validateRedactionPattern,
+} from "./correction-contract.js";
+
+export type {
+  CorrectionAction,
+  CorrectionAffectedEntry,
+  CorrectionClassification,
+  CorrectionOutcome,
+  CorrectionPlan,
+  CorrectionRequest,
+  CorrectionActionResult,
+  MemoryDraft,
+} from "./correction-contract.js";
+
+export { CorrectionPlanner, parsePlan } from "./correction-planner.js";
+export type { LlmClassificationResult, PlannerCandidate, PlannerDeps } from "./correction-planner.js";
+
+export { CorrectionExecutor } from "./correction-executor.js";
+export type { ExecutorDeps, ExecutorMemory } from "./correction-executor.js";
+
+export { CorrectionService } from "./correction-service.js";
+export type { CorrectionNamespacePolicy, CorrectionServiceDeps } from "./correction-service.js";
+
+export { createCorrectionService, isCorrectionFeatureEnabled } from "./correction-access-wiring.js";
+export type { CorrectionAccessWiring } from "./correction-access-wiring.js";

package/src/storage.ts

@@ -3184,6 +3184,16 @@ export class StorageManager {
     return this.tombstoneStoreLoadPromise;
   }
 
+  /**
+   * Whether tombstones are enabled on this storage. Callers that need to
+   * distinguish "tombstones disabled" (null return is expected) from
+   * "persistence failed" (appendTombstone swallows store errors and also
+   * returns null) use this to fail closed when enabled (#1580 review OgIqp).
+   */
+  isTombstonesEnabled(): boolean {
+    return this.tombstonesConfig.enabled;
+  }
+
   /**
    * Append a tombstone for a retired memory (issue #1579 emitters).
    * Best-effort: a tombstone append failure MUST NOT fail the supersession /

package/src/types.ts

@@ -822,6 +822,33 @@ export interface PluginConfig {
    * deployments prefer the older (always-inject) behavior. Default `false`.
    */
   temporalExpiredInInjection: boolean;
+  /**
+   * Correction Contract (issue #1580) — one plan/apply pipeline for memory
+   * corrections. Master visibility + enforcement gate for the
+   * `memory_correct_plan` / `memory_correct_apply` tools. Default `true`:
+   * planning is read-only (locates candidates + drafts a pending plan file)
+   * and safe to ship on; `false` hides the tools and rejects runtime calls so
+   * the surface cannot drift out of sync. Parsed from `correction.enabled`
+   * (nested) or `correctionEnabled` (flat legacy).
+   */
+  correctionEnabled: boolean;
+  /**
+   * Whether `memory_correct_apply` requires an explicit `confirm: true` to
+   * mutate memories. Default `true` (least-privileged). Parsed from
+   * `correction.applyRequiresConfirm` / `correctionApplyRequiresConfirm`.
+   */
+  correctionApplyRequiresConfirm: boolean;
+  /**
+   * Max memories a single correction plan may touch; over-limit plans are
+   * rejected, never silently truncated (review thread). Default `10`. Parsed
+   * from `correction.maxAffected` / `correctionMaxAffected`.
+   */
+  correctionMaxAffected: number;
+  /**
+   * Plan time-to-live in hours; expired plans are rejected at apply. Default
+   * `24`. Parsed from `correction.planTtlHours` / `correctionPlanTtlHours`.
+   */
+  correctionPlanTtlHours: number;
   // Tombstones — non-resurrection invariant (issue #1579).
   /**
    * Master gate for the tombstone non-resurrection invariant. When `true`

package/dist/chunk-24FGNOQS.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/access-operations.ts"],"sourcesContent":["/**\n * Pilot operation definitions for the access boundary (issue #1525).\n *\n * Three operations migrate through the registry in this PR — `memory_get`,\n * `memory_search`, and the `memory_store` write op — so the boundary's\n * normalization matrix (rules 17/28/36/48/51) and shared error mapping reach\n * MCP, HTTP, and CLI from one place. Domain-group migrations (memory ops →\n * connectors → namespaces …) land as follow-up PRs that add `defineOperation`\n * calls here and delete the surface-local validation they replace.\n *\n * Importing this module for its side effects registers the pilot operations;\n * surfaces then dispatch via {@link getOperation} from `./access-boundary.js`.\n */\n\nimport { z } from \"zod\";\n\nimport { defineOperation } from \"./access-boundary.js\";\nimport { memoryStoreRequestSchema, type MemoryStoreRequest } from \"./access-schema.js\";\nimport type {\n  EngramAccessMemoryResponse,\n  EngramAccessWriteResponse,\n} from \"./access-service.js\";\nimport {\n  DECISION_SUBCOMMANDS,\n  type DecisionSurfaceRequest,\n  type DecisionSurfaceResponse,\n} from \"./coding/decision-surfaces.js\";\nimport {\n  type ArchitectureSurfaceRequest,\n  type ArchitectureSurfaceResponse,\n} from \"./coding/architecture-surfaces.js\";\nimport {\n  type CodegraphSurfaceRequest,\n  type CodegraphSurfaceResponse,\n  isCodegraphToolName,\n} from \"./coding/codegraph-surfaces.js\";\nimport {\n  DELTA_SUBCOMMANDS,\n  type DeltaSurfaceRequest,\n  type DeltaSurfaceResponse,\n} from \"./coding/session-delta-surfaces.js\";\n\n// ---------------------------------------------------------------------------\n// memory_get — fetch one memory by id\n// ---------------------------------------------------------------------------\n\n/**\n * `memoryId` is required and non-empty (rule 51: the MCP dispatcher previously\n * fell back to `typeof args.memoryId === \"string\" ? args.memoryId : \"\"`,\n * silently passing an empty id into the service). `namespace` is\n * `.nullable().optional()` because MCP clients send `null` (gotcha #2).\n * `namespace` has no `.min(1)` because the pre-boundary handlers forwarded\n * empty/whitespace strings, and `resolveNamespace` treats empty identically\n * to absent (both trim to falsy → default namespace). Rejecting empty would\n * break HTTP callers that send a bare `?namespace=` (Cursor review).\n */\nconst memoryGetSchema = z.object({\n  memoryId: z.string().trim().min(1, \"memoryId is required\").max(512),\n  namespace: z.string().trim().max(256).nullable().optional(),\n});\n\nexport interface MemoryGetInput {\n  readonly memoryId: string;\n  readonly namespace?: string | null;\n}\n\nexport interface MemoryGetOutput {\n  readonly result: EngramAccessMemoryResponse;\n}\n\nexport const memoryGetOperation = defineOperation<MemoryGetInput, MemoryGetOutput>({\n  name: \"memory_get\",\n  description: \"Fetch one memory by id.\",\n  schema: memoryGetSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.memoryGet(\n      input.memoryId,\n      input.namespace ?? undefined,\n      ctx.authenticatedPrincipal,\n    );\n    return { result };\n  },\n});\n\n// ---------------------------------------------------------------------------\n// memory_search — semantic search across memories\n// ---------------------------------------------------------------------------\n\nconst memorySearchSchema = z.object({\n  query: z.string().trim().min(1, \"query is required\").max(2048),\n  namespace: z.string().trim().max(256).nullable().optional(),\n  // No upper cap: the pre-boundary MCP handler forwarded any finite number to\n  // memorySearch, and the QMD/search backends honor large limits. Capping at\n  // 100 would reject existing clients that request larger result sets.\n  maxResults: z.number().int().min(1).nullable().optional(),\n  collection: z.string().trim().min(1).max(256).nullable().optional(),\n});\n\nexport interface MemorySearchInput {\n  readonly query: string;\n  readonly namespace?: string | null;\n  readonly maxResults?: number | null;\n  readonly collection?: string | null;\n}\n\nexport interface MemorySearchOutput {\n  readonly result: {\n    readonly query: string;\n    readonly results: ReadonlyArray<{ path: string; score: number; snippet: string }>;\n    readonly count: number;\n  };\n}\n\nexport const memorySearchOperation = defineOperation<MemorySearchInput, MemorySearchOutput>({\n  name: \"memory_search\",\n  description: \"Search memories across readable namespaces.\",\n  schema: memorySearchSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.memorySearch({\n      query: input.query,\n      namespace: input.namespace ?? undefined,\n      maxResults: input.maxResults ?? undefined,\n      collection: input.collection ?? undefined,\n      principal: ctx.authenticatedPrincipal,\n    });\n    return { result };\n  },\n});\n\n// ---------------------------------------------------------------------------\n// memory_store — the pilot WRITE op\n// ---------------------------------------------------------------------------\n\nexport type MemoryStoreInput = MemoryStoreRequest;\n\nexport interface MemoryStoreOutput {\n  readonly result: EngramAccessWriteResponse;\n}\n\nexport const memoryStoreOperation = defineOperation<MemoryStoreInput, MemoryStoreOutput>({\n  name: \"memory_store\",\n  description: \"Store an explicit memory through the access layer.\",\n  // Reuse the existing schema verbatim — the migration is behavior-preserving;\n  // the schema's external contract is NOT changing in this PR (per the issue's\n  // pitfall note).\n  schema: memoryStoreRequestSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.memoryStore(\n      {\n        ...input,\n        authenticatedPrincipal: ctx.authenticatedPrincipal,\n      },\n      // Forward transport-level hooks (e.g. HTTP's atomic write-quota gate)\n      // so the hook still fires inside the service's idempotent-write lock —\n      // never before, never on a replay (#1434 invariant preserved by the\n      // boundary migration).\n\n      ctx.hooks,\n    );\n    return { result };\n  },\n});\n\n// ---------------------------------------------------------------------------\n// coding_decision — decision-record surfaces (issue #1548 Track A PR 2)\n// ---------------------------------------------------------------------------\n\n/**\n * The subcommand field is required and MUST be one of the four valid values\n * (rule 51 — reject loudly, list the options, never silently default). The\n * remaining fields are optional because each subcommand uses a different\n * subset; the handler validates subcommand-specific requirements after\n * routing.\n */\n/**\n * MCP clients send `null` for absent optional fields. Zod `.optional()`\n * rejects `null`, so strip nulls at the object level before the inner\n * schema validates (review: cursor null-field thread).\n */\nconst codingDecisionSchema = z.preprocess(\n  (data) => {\n    if (data && typeof data === \"object\" && !Array.isArray(data)) {\n      const out: Record<string, unknown> = {};\n      for (const [k, v] of Object.entries(data as Record<string, unknown>)) {\n        if (v !== null) out[k] = v;\n      }\n      return out;\n    }\n    return data;\n  },\n  z.object({\n    subcommand: z.enum(DECISION_SUBCOMMANDS),\n    sessionKey: z.string().trim().max(512).optional(),\n    namespace: z.string().trim().max(256).optional(),\n    id: z.string().trim().max(512).optional(),\n    title: z.string().trim().max(512).optional(),\n    status: z.string().trim().max(64).optional(),\n    context: z.string().trim().max(8192).optional(),\n    decision: z.string().trim().max(8192).optional(),\n    consequences: z.string().trim().max(8192).optional(),\n    entityRefs: z.array(z.string().trim().min(1).max(256)).optional(),\n    supersedesId: z.string().trim().max(512).optional(),\n  }),\n);\n\nexport type CodingDecisionInput = DecisionSurfaceRequest;\nexport type CodingDecisionOutput = { result: DecisionSurfaceResponse };\n\nexport const codingDecisionOperation = defineOperation<\n  CodingDecisionInput,\n  CodingDecisionOutput\n>({\n  name: \"coding_decision\",\n  description:\n    \"List, get, record, or supersede decision records in the session's coding namespace (issue #1548 Track A).\",\n  schema: codingDecisionSchema as z.ZodType<CodingDecisionInput>,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codingDecision(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\n// ---------------------------------------------------------------------------\n// coding_architecture — architecture-card surfaces (issue #1548 Track A PR 3)\n// ---------------------------------------------------------------------------\n\nconst codingArchitectureSchema = z.preprocess(\n  (data) => {\n    if (data !== null && typeof data === \"object\" && !Array.isArray(data)) {\n      const obj = data as Record<string, unknown>;\n      const cleaned: Record<string, unknown> = {};\n      for (const [key, value] of Object.entries(obj)) {\n        if (value !== null) cleaned[key] = value;\n      }\n      return cleaned;\n    }\n    return data;\n  },\n  z.object({\n    subcommand: z.enum([\"get\", \"refresh\"]),\n    sessionKey: z.string().optional(),\n    namespace: z.string().optional(),\n  }),\n);\n\nexport type CodingArchitectureInput = ArchitectureSurfaceRequest;\nexport type CodingArchitectureOutput = { result: ArchitectureSurfaceResponse };\n\nexport const codingArchitectureOperation = defineOperation<\n  CodingArchitectureInput,\n  CodingArchitectureOutput\n>({\n  name: \"coding_architecture\",\n  description:\n    \"Get or refresh the architecture card for the session's coding namespace (issue #1548 Track A PR 3).\",\n  schema: codingArchitectureSchema as z.ZodType<CodingArchitectureInput>,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codingArchitecture(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nconst codegraphSurfaceSchema = z.preprocess(\n  (data) => {\n    if (data !== null && typeof data === \"object\" && !Array.isArray(data)) {\n      const obj = data as Record<string, unknown>;\n      const cleaned: Record<string, unknown> = {};\n      for (const [key, value] of Object.entries(obj)) {\n        if (value !== null) cleaned[key] = value;\n      }\n      return cleaned;\n    }\n    return data;\n  },\n  z.object({\n    tool: z.string().refine(isCodegraphToolName, {\n      message: \"tool must be one of the codegraph tool names\",\n    }),\n    sessionKey: z.string().max(512).optional(),\n    principal: z.string().max(256).optional(),\n    project: z.string().max(256).optional(),\n    query: z.string().max(2048).optional(),\n    limit: z.number().int().positive().max(200).optional(),\n    start: z.string().max(512).optional(),\n    direction: z.string().max(64).optional(),\n    depth: z.number().int().positive().max(10).optional(),\n    qualifiedName: z.string().max(1024).optional(),\n    path: z.string().max(2048).optional(),\n    structuredQuery: z.record(z.string(), z.unknown()).optional(),\n    head: z.string().max(256).optional(),\n    repoRoot: z.string().max(2048).optional(),\n    mode: z.string().max(64).optional(),\n    confirm: z.boolean().optional(),\n    subcommand: z.string().max(64).optional(),\n    id: z.string().max(512).optional(),\n    title: z.string().max(512).optional(),\n    status: z.string().max(64).optional(),\n    context: z.string().max(8192).optional(),\n    decision: z.string().max(8192).optional(),\n    consequences: z.string().max(8192).optional(),\n    entityRefs: z.array(z.string().max(256)).optional(),\n    supersedesId: z.string().max(512).optional(),\n    traces: z.array(z.unknown()).optional(),\n  }),\n) as z.ZodType<CodegraphSurfaceRequest>;\n\n// ---------------------------------------------------------------------------\n// coding_delta — session-delta surface (issue #1548 Track A PR 4)\n// ---------------------------------------------------------------------------\n\nconst codingDeltaSchema = z.preprocess(\n  (data) => {\n    if (data !== null && typeof data === \"object\" && !Array.isArray(data)) {\n      const obj = data as Record<string, unknown>;\n      const cleaned: Record<string, unknown> = {};\n      for (const [key, value] of Object.entries(obj)) {\n        if (value !== null) cleaned[key] = value;\n      }\n      return cleaned;\n    }\n    return data;\n  },\n  z.object({\n    subcommand: z.enum(DELTA_SUBCOMMANDS),\n    sessionKey: z.string().trim().max(512).optional(),\n    namespace: z.string().trim().max(256).optional(),\n  }),\n);\n\nexport type CodingDeltaInput = DeltaSurfaceRequest;\nexport type CodingDeltaOutput = { result: DeltaSurfaceResponse };\n\nexport const codingDeltaOperation = defineOperation<\n  CodingDeltaInput,\n  CodingDeltaOutput\n>({\n  name: \"coding_delta\",\n  description:\n    \"Get the session delta (commits + touched files since last seen) for the session's coding namespace (issue #1548 Track A PR 4).\",\n  schema: codingDeltaSchema as z.ZodType<CodingDeltaInput>,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codingDelta(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\n// ---------------------------------------------------------------------------\n// Surface registration map — what each transport calls the pilot ops\n// ---------------------------------------------------------------------------\n\n/**\n * The canonical short names (no `engram.`/`remnic.` prefix) of the operations\n * the boundary owns today. The fitness test treats this set as the migrated\n * set; everything else on a surface is unmigrated and counted by the ratchet.\n */\nexport const codegraphIndexOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_index\",\n  description:\n    \"Codegraph parity tool (issue #1554): index. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphListProjectsOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_list_projects\",\n  description:\n    \"Codegraph parity tool (issue #1554): list_projects. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphDeleteProjectOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_delete_project\",\n  description:\n    \"Codegraph parity tool (issue #1554): delete_project. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphIndexStatusOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_index_status\",\n  description:\n    \"Codegraph parity tool (issue #1554): index_status. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphSearchGraphOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_search_graph\",\n  description:\n    \"Codegraph parity tool (issue #1554): search_graph. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphTracePathOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_trace_path\",\n  description:\n    \"Codegraph parity tool (issue #1554): trace_path. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphDetectChangesOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_detect_changes\",\n  description:\n    \"Codegraph parity tool (issue #1554): detect_changes. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphQueryGraphOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_query_graph\",\n  description:\n    \"Codegraph parity tool (issue #1554): query_graph. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphGetSchemaOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_get_schema\",\n  description:\n    \"Codegraph parity tool (issue #1554): get_schema. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphGetSnippetOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_get_snippet\",\n  description:\n    \"Codegraph parity tool (issue #1554): get_snippet. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphGetArchitectureOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_get_architecture\",\n  description:\n    \"Codegraph parity tool (issue #1554): get_architecture. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphSearchCodeOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_search_code\",\n  description:\n    \"Codegraph parity tool (issue #1554): search_code. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphManageAdrOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_manage_adr\",\n  description:\n    \"Codegraph parity tool (issue #1554): manage_adr. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphIngestTracesOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_ingest_traces\",\n  description:\n    \"Codegraph parity tool (issue #1554): ingest_traces. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\n// Batch-migrated operations (issue #1525): registers all remaining\n// handlers through the boundary as a side effect of importing this module.\nimport \"./access-operations-batch.js\";\n\nexport const REGISTERED_OPERATIONS = [\n  memoryGetOperation.spec.name,\n  memorySearchOperation.spec.name,\n  memoryStoreOperation.spec.name,\n  codingDecisionOperation.spec.name,\n  codingArchitectureOperation.spec.name,\n  codegraphIndexOperation.spec.name,\n  codegraphListProjectsOperation.spec.name,\n  codegraphDeleteProjectOperation.spec.name,\n  codegraphIndexStatusOperation.spec.name,\n  codegraphSearchGraphOperation.spec.name,\n  codegraphTracePathOperation.spec.name,\n  codegraphDetectChangesOperation.spec.name,\n  codegraphQueryGraphOperation.spec.name,\n  codegraphGetSchemaOperation.spec.name,\n  codegraphGetSnippetOperation.spec.name,\n  codegraphGetArchitectureOperation.spec.name,\n  codegraphSearchCodeOperation.spec.name,\n  codegraphManageAdrOperation.spec.name,\n  codegraphIngestTracesOperation.spec.name,\n  codingDeltaOperation.spec.name,\n] as const;\n"],"mappings":";;;;;;;;;;;;;AAcA,SAAS,SAAS;AA0ClB,IAAM,kBAAkB,EAAE,OAAO;AAAA,EAC/B,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,sBAAsB,EAAE,IAAI,GAAG;AAAA,EAClE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AAC5D,CAAC;AAWM,IAAM,qBAAqB,gBAAiD;AAAA,EACjF,MAAM;AAAA,EACN,aAAa;AAAA,EACb,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ;AAAA,MAC/B,MAAM;AAAA,MACN,MAAM,aAAa;AAAA,MACnB,IAAI;AAAA,IACN;AACA,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAMD,IAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,mBAAmB,EAAE,IAAI,IAAI;AAAA,EAC7D,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA,EAI1D,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EACxD,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AACpE,CAAC;AAiBM,IAAM,wBAAwB,gBAAuD;AAAA,EAC1F,MAAM;AAAA,EACN,aAAa;AAAA,EACb,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,aAAa;AAAA,MAC5C,OAAO,MAAM;AAAA,MACb,WAAW,MAAM,aAAa;AAAA,MAC9B,YAAY,MAAM,cAAc;AAAA,MAChC,YAAY,MAAM,cAAc;AAAA,MAChC,WAAW,IAAI;AAAA,IACjB,CAAC;AACD,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAYM,IAAM,uBAAuB,gBAAqD;AAAA,EACvF,MAAM;AAAA,EACN,aAAa;AAAA;AAAA;AAAA;AAAA,EAIb,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ;AAAA,MAC/B;AAAA,QACE,GAAG;AAAA,QACH,wBAAwB,IAAI;AAAA,MAC9B;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,IAAI;AAAA,IACN;AACA,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAkBD,IAAM,uBAAuB,EAAE;AAAA,EAC7B,CAAC,SAAS;AACR,QAAI,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,GAAG;AAC5D,YAAM,MAA+B,CAAC;AACtC,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,IAA+B,GAAG;AACpE,YAAI,MAAM,KAAM,KAAI,CAAC,IAAI;AAAA,MAC3B;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EACA,EAAE,OAAO;AAAA,IACP,YAAY,EAAE,KAAK,oBAAoB;AAAA,IACvC,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IAChD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IAC/C,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACxC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IAC3C,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,IAC3C,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,IAC9C,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,IAC/C,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,IACnD,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,SAAS;AAAA,IAChE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACpD,CAAC;AACH;AAKO,IAAM,0BAA0B,gBAGrC;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,eAAe,OAAO,IAAI,sBAAsB;AACjF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAMD,IAAM,2BAA2B,EAAE;AAAA,EACjC,CAAC,SAAS;AACR,QAAI,SAAS,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,GAAG;AACrE,YAAM,MAAM;AACZ,YAAM,UAAmC,CAAC;AAC1C,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC9C,YAAI,UAAU,KAAM,SAAQ,GAAG,IAAI;AAAA,MACrC;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EACA,EAAE,OAAO;AAAA,IACP,YAAY,EAAE,KAAK,CAAC,OAAO,SAAS,CAAC;AAAA,IACrC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,IAChC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,CAAC;AACH;AAKO,IAAM,8BAA8B,gBAGzC;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,mBAAmB,OAAO,IAAI,sBAAsB;AACrF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAED,IAAM,yBAAyB,EAAE;AAAA,EAC/B,CAAC,SAAS;AACR,QAAI,SAAS,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,GAAG;AACrE,YAAM,MAAM;AACZ,YAAM,UAAmC,CAAC;AAC1C,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC9C,YAAI,UAAU,KAAM,SAAQ,GAAG,IAAI;AAAA,MACrC;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EACA,EAAE,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,EAAE,OAAO,qBAAqB;AAAA,MAC3C,SAAS;AAAA,IACX,CAAC;AAAA,IACD,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACzC,WAAW,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACxC,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACtC,OAAO,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,IACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACrD,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACpC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,IACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,IACpD,eAAe,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,IAC7C,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,IACpC,iBAAiB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,IAC5D,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACnC,UAAU,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,IACxC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,IAClC,SAAS,EAAE,QAAQ,EAAE,SAAS;AAAA,IAC9B,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,IACxC,IAAI,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACjC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACpC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,IACpC,SAAS,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,IACvC,UAAU,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,IACxC,cAAc,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,IAC5C,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,EAAE,SAAS;AAAA,IAClD,cAAc,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IAC3C,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACxC,CAAC;AACH;AAMA,IAAM,oBAAoB,EAAE;AAAA,EAC1B,CAAC,SAAS;AACR,QAAI,SAAS,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,GAAG;AACrE,YAAM,MAAM;AACZ,YAAM,UAAmC,CAAC;AAC1C,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC9C,YAAI,UAAU,KAAM,SAAQ,GAAG,IAAI;AAAA,MACrC;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EACA,EAAE,OAAO;AAAA,IACP,YAAY,EAAE,KAAK,iBAAiB;AAAA,IACpC,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IAChD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACjD,CAAC;AACH;AAKO,IAAM,uBAAuB,gBAGlC;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,YAAY,OAAO,IAAI,sBAAsB;AAC9E,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAWM,IAAM,0BAA0B,gBAGrC;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,iCAAiC,gBAG5C;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,kCAAkC,gBAG7C;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,gCAAgC,gBAG3C;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,gCAAgC,gBAG3C;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,8BAA8B,gBAGzC;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,kCAAkC,gBAG7C;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,+BAA+B,gBAG1C;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,8BAA8B,gBAGzC;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,+BAA+B,gBAG1C;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,oCAAoC,gBAG/C;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,+BAA+B,gBAG1C;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,8BAA8B,gBAGzC;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,iCAAiC,gBAG5C;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAMM,IAAM,wBAAwB;AAAA,EACnC,mBAAmB,KAAK;AAAA,EACxB,sBAAsB,KAAK;AAAA,EAC3B,qBAAqB,KAAK;AAAA,EAC1B,wBAAwB,KAAK;AAAA,EAC7B,4BAA4B,KAAK;AAAA,EACjC,wBAAwB,KAAK;AAAA,EAC7B,+BAA+B,KAAK;AAAA,EACpC,gCAAgC,KAAK;AAAA,EACrC,8BAA8B,KAAK;AAAA,EACnC,8BAA8B,KAAK;AAAA,EACnC,4BAA4B,KAAK;AAAA,EACjC,gCAAgC,KAAK;AAAA,EACrC,6BAA6B,KAAK;AAAA,EAClC,4BAA4B,KAAK;AAAA,EACjC,6BAA6B,KAAK;AAAA,EAClC,kCAAkC,KAAK;AAAA,EACvC,6BAA6B,KAAK;AAAA,EAClC,4BAA4B,KAAK;AAAA,EACjC,+BAA+B,KAAK;AAAA,EACpC,qBAAqB,KAAK;AAC5B;","names":[]}