@remnic/core 9.49.0 → 9.49.1

package/dist/chunk-LNTUXKBT.js

@@ -0,0 +1,224 @@
+import {
+  readCausalTrajectoryRecordsStrict,
+  readCausalTrajectoryRevisionToken,
+  resolveCausalTrajectoryStoreDir
+} from "./chunk-M4MP34AQ.js";
+
+// src/coding/pre-action-gate.ts
+import { createHash } from "crypto";
+import path from "path";
+var PRE_ACTION_FINGERPRINT_VERSION = 1;
+var PRE_ACTION_WARNING_VERSION = 1;
+var PRE_ACTION_GATE_DEFAULT_TIMEOUT_MS = 50;
+var ACTION_STRATEGIES = /* @__PURE__ */ new Set([
+  "RUN_CHECK",
+  "CHANGE_IMPLEMENTATION",
+  "CHANGE_TEST",
+  "CHANGE_CONFIGURATION",
+  "CHANGE_DEPENDENCY",
+  "INVALIDATE_CACHE",
+  "RETRY_ACTION",
+  "INSPECT_STATE"
+]);
+var EDIT_KINDS = /* @__PURE__ */ new Set(["create", "update", "delete", "rename"]);
+var MAX_COMMAND_CHARS = 128;
+var MAX_ARGUMENTS = 32;
+var MAX_ARGUMENT_CHARS = 128;
+var MAX_PATH_CHARS = 512;
+var MAX_SLOT_CHARS = 128;
+var MAX_CITATION_CHARS = 180;
+function bound(value, max, field) {
+  const normalized = value.trim();
+  if (normalized.length > max) throw new Error(`${field} exceeds ${max} characters`);
+  return normalized;
+}
+function sanitizePayloadString(input) {
+  return input.replace(/(?:\/home\/[^\s/]+|\/Users\/[^\s/]+|[A-Za-z]:\\Users\\[^\s\\]+)/g, "$HOME").replace(/sk-[a-zA-Z0-9_-]{10,}/g, "<secret>").replace(/bearer\s+[a-zA-Z0-9._-]+/gi, "bearer <secret>").trim();
+}
+function normalizeRepositoryPath(filePath, codingContext) {
+  const root = path.resolve(codingContext.rootPath);
+  const absolute = path.isAbsolute(filePath) ? path.resolve(filePath) : path.resolve(root, filePath);
+  const relative = path.relative(root, absolute);
+  if (relative === ".." || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative)) {
+    throw new Error("edit path must be contained by codingContext.rootPath");
+  }
+  return bound(relative.split(path.sep).join("/"), MAX_PATH_CHARS, "repo-relative path");
+}
+function normalizeCommandArgument(argument, codingContext, secretValue) {
+  const value = bound(sanitizePayloadString(argument), MAX_ARGUMENT_CHARS, "command argument");
+  if (secretValue || value.includes("<secret>")) return "<secret>";
+  if (/^--(?:token|key|secret|password|authorization)=/i.test(value)) {
+    return `${value.slice(0, value.indexOf("=") + 1)}<secret>`;
+  }
+  if (/^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value)) return "<uuid>";
+  if (/^[0-9a-f]{7,64}$/i.test(value)) return "<sha>";
+  if (/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?Z$/.test(value)) return "<timestamp>";
+  if (/^\d+(?:\.\d+)?(?:ms|s|m|h|d)$/.test(value)) return "<duration>";
+  if (/^-?\d+(?:\.\d+)?$/.test(value)) return "<number>";
+  const pathLike = path.isAbsolute(value) || !/^[a-z][a-z0-9+.-]*:\/\//i.test(value) && /[\\/]/.test(value) && !value.startsWith("--");
+  if (pathLike) {
+    let relative;
+    try {
+      relative = normalizeRepositoryPath(value, codingContext);
+    } catch {
+      return "<external-path>";
+    }
+    return /(?:^|\/)(?:tmp|temp)(?:\/|$)|\.tmp$/i.test(relative) ? `<repo-temp-path:${relative}>` : `<repo-path:${relative}>`;
+  }
+  return value;
+}
+function normalizeActionIntent(intent, strategyId, codingContext) {
+  if (!ACTION_STRATEGIES.has(strategyId)) throw new Error(`unsupported action strategy: ${strategyId}`);
+  let payload;
+  if (intent.kind === "command") {
+    const command = bound(sanitizePayloadString(intent.command), MAX_COMMAND_CHARS, "command");
+    const args = intent.args ?? [];
+    if (args.length > MAX_ARGUMENTS) throw new Error(`command args exceed ${MAX_ARGUMENTS} entries`);
+    const normalizedArgs = args.map((argument, index) => {
+      const prior = index > 0 ? args[index - 1] : void 0;
+      const secretValue = prior !== void 0 && /^--(?:token|key|secret|password|authorization)$/i.test(prior);
+      return normalizeCommandArgument(argument, codingContext, secretValue);
+    });
+    payload = JSON.stringify({ kind: "command", strategyId, command, args: normalizedArgs });
+  } else if (intent.kind === "edit") {
+    if (!EDIT_KINDS.has(intent.editKind)) throw new Error(`unsupported edit kind: ${intent.editKind}`);
+    const relativePath = normalizeRepositoryPath(intent.filePath, codingContext);
+    payload = JSON.stringify({
+      kind: "edit",
+      strategyId,
+      filePath: relativePath,
+      editKind: intent.editKind,
+      symbol: intent.symbol ? bound(intent.symbol, MAX_SLOT_CHARS, "symbol") : void 0,
+      range: intent.range ? bound(intent.range, MAX_SLOT_CHARS, "range") : void 0,
+      diffShape: intent.diffShape ? bound(intent.diffShape, MAX_SLOT_CHARS, "diffShape") : void 0
+    });
+  } else {
+    throw new Error("action intent kind must be command or edit");
+  }
+  return {
+    kind: intent.kind,
+    strategyId,
+    fingerprint: `v1:sha256:${createHash("sha256").update(payload).digest("hex")}`
+  };
+}
+function matchTrajectory(record, projectId, normalized) {
+  const identity = record.actionIdentity;
+  return record.outcomeKind === "failure" && record.codingContext?.projectId === projectId && identity?.fingerprintVersion === PRE_ACTION_FINGERPRINT_VERSION && identity.strategyId === normalized.strategyId && identity.fingerprint === normalized.fingerprint;
+}
+function boundedCitation(value, fallback) {
+  const sanitized = sanitizePayloadString(value ?? fallback).replace(/\s+/g, " ");
+  return sanitized.slice(0, MAX_CITATION_CHARS);
+}
+var PreActionFailureGate = class {
+  cache = /* @__PURE__ */ new Map();
+  maxCacheSize;
+  readStrict;
+  getRevision;
+  clock;
+  timeoutMs;
+  constructor(deps = {}) {
+    this.readStrict = deps.readStrict ?? readCausalTrajectoryRecordsStrict;
+    this.getRevision = deps.getRevision ?? readCausalTrajectoryRevisionToken;
+    this.clock = deps.clock ?? Date.now;
+    this.maxCacheSize = deps.maxCacheSize ?? 500;
+    this.timeoutMs = Math.max(1, deps.timeoutMs ?? PRE_ACTION_GATE_DEFAULT_TIMEOUT_MS);
+  }
+  clearCache() {
+    this.cache.clear();
+  }
+  async evaluate(request) {
+    const deadline = this.clock() + this.timeoutMs;
+    const controller = new AbortController();
+    const abortFromExternal = () => controller.abort();
+    request.signal?.addEventListener("abort", abortFromExternal, { once: true });
+    if (request.signal?.aborted) controller.abort();
+    let resolveTimeout;
+    const timeoutPromise = new Promise((resolve) => {
+      resolveTimeout = resolve;
+    });
+    const timer = setTimeout(() => {
+      controller.abort();
+      resolveTimeout({ status: "ERROR_FAIL_OPEN", reason: `PreActionFailureGate timed out after ${this.timeoutMs}ms` });
+    }, this.timeoutMs);
+    try {
+      return await Promise.race([
+        this.evaluateInternal(request, controller.signal, deadline),
+        timeoutPromise
+      ]);
+    } catch (error) {
+      return { status: "ERROR_FAIL_OPEN", reason: error instanceof Error ? error.message : String(error) };
+    } finally {
+      clearTimeout(timer);
+      request.signal?.removeEventListener("abort", abortFromExternal);
+    }
+  }
+  async evaluateInternal(request, signal, deadline) {
+    if (!request.memoryDir?.trim()) return { status: "ERROR_FAIL_OPEN", reason: "memoryDir is required" };
+    if (!request.sessionKey?.trim()) return { status: "ERROR_FAIL_OPEN", reason: "sessionKey is required" };
+    if (!request.codingContext?.projectId?.trim() || !request.codingContext.rootPath?.trim()) {
+      return { status: "ERROR_FAIL_OPEN", reason: "codingContext with projectId and rootPath is required" };
+    }
+    let normalized;
+    try {
+      normalized = normalizeActionIntent(request.intent, request.strategyId, request.codingContext);
+    } catch (error) {
+      return { status: "ERROR_FAIL_OPEN", reason: error instanceof Error ? error.message : String(error) };
+    }
+    const revisionOptions = {
+      memoryDir: request.memoryDir,
+      causalTrajectoryStoreDir: request.causalTrajectoryStoreDir
+    };
+    const preRevision = await this.getRevision(revisionOptions);
+    const branch = request.codingContext.branch ?? "";
+    const storeId = createHash("sha256").update(resolveCausalTrajectoryStoreDir(request.memoryDir, request.causalTrajectoryStoreDir)).digest("hex");
+    const cacheKey = createHash("sha256").update(JSON.stringify([
+      request.codingContext.projectId,
+      branch,
+      request.sessionKey,
+      PRE_ACTION_FINGERPRINT_VERSION,
+      preRevision,
+      normalized.fingerprint,
+      storeId
+    ])).digest("hex");
+    const cached = this.cache.get(cacheKey);
+    if (cached) return cached;
+    if (signal.aborted || this.clock() >= deadline) return { status: "ERROR_FAIL_OPEN", reason: "deadline exceeded" };
+    const scan = await this.readStrict({ ...revisionOptions, signal });
+    if (signal.aborted || this.clock() >= deadline) return { status: "ERROR_FAIL_OPEN", reason: "deadline exceeded" };
+    if (scan.invalidTrajectories.length > 0) {
+      return { status: "ERROR_FAIL_OPEN", reason: `store contains ${scan.invalidTrajectories.length} invalid record(s)` };
+    }
+    const postRevision = await this.getRevision(revisionOptions);
+    const stableRevision = preRevision === postRevision;
+    const match = scan.trajectories.filter((record) => matchTrajectory(record, request.codingContext.projectId, normalized)).sort((left, right) => {
+      const recordedAtOrder = right.recordedAt.localeCompare(left.recordedAt);
+      return recordedAtOrder !== 0 ? recordedAtOrder : left.trajectoryId.localeCompare(right.trajectoryId);
+    })[0];
+    const result = match ? {
+      status: "MATCH_WARN",
+      advisoryText: `[PreActionFailureGate ${PRE_ACTION_WARNING_VERSION}] A similar action failed before. Prior act: "${boundedCitation(match.actionSummary, "recorded action")}". Failure: "${boundedCitation(match.outcomeSummary, "recorded failure")}". Next safe check: "${boundedCitation(match.followUpSummary, "verify prerequisites before retrying")}".`,
+      fingerprint: normalized.fingerprint,
+      matchedTrajectoryId: match.trajectoryId,
+      revision: postRevision
+    } : { status: "NO_MATCH", fingerprint: normalized.fingerprint, revision: postRevision };
+    if (stableRevision && !signal.aborted && this.clock() < deadline) this.setCache(cacheKey, result);
+    return result;
+  }
+  setCache(key, result) {
+    if (this.cache.size >= this.maxCacheSize) {
+      const oldest = this.cache.keys().next().value;
+      if (oldest !== void 0) this.cache.delete(oldest);
+    }
+    this.cache.set(key, result);
+  }
+};
+
+export {
+  PRE_ACTION_FINGERPRINT_VERSION,
+  PRE_ACTION_WARNING_VERSION,
+  PRE_ACTION_GATE_DEFAULT_TIMEOUT_MS,
+  sanitizePayloadString,
+  normalizeActionIntent,
+  PreActionFailureGate
+};
+//# sourceMappingURL=chunk-LNTUXKBT.js.map

package/dist/chunk-LNTUXKBT.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/coding/pre-action-gate.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport path from \"node:path\";\nimport {\n  readCausalTrajectoryRecordsStrict,\n  readCausalTrajectoryRevisionToken,\n  resolveCausalTrajectoryStoreDir,\n  type ActionIntent,\n  type ActionStrategyId,\n  type CausalTrajectoryRecord,\n  type CausalTrajectoryStrictReadResult,\n  type EditKind,\n} from \"../causal-trajectory.js\";\nimport type { CodingContext } from \"../types.js\";\n\nexport const PRE_ACTION_FINGERPRINT_VERSION = 1;\nexport const PRE_ACTION_WARNING_VERSION = 1;\nexport const PRE_ACTION_GATE_DEFAULT_TIMEOUT_MS = 50;\n\nexport type PreActionGateStatus = \"NO_MATCH\" | \"MATCH_WARN\" | \"ERROR_FAIL_OPEN\";\n\nexport interface PreActionGateRequest {\n  sessionKey: string;\n  strategyId: ActionStrategyId;\n  intent: ActionIntent;\n  codingContext: CodingContext;\n  memoryDir?: string;\n  causalTrajectoryStoreDir?: string;\n  signal?: AbortSignal;\n}\n\nexport interface PreActionGateResult {\n  status: PreActionGateStatus;\n  reason?: string;\n  advisoryText?: string;\n  fingerprint?: string;\n  matchedTrajectoryId?: string;\n  revision?: string;\n}\n\nexport interface NormalizedActionIntent {\n  kind: \"command\" | \"edit\";\n  strategyId: ActionStrategyId;\n  fingerprint: string;\n}\n\nexport interface PreActionGateDependencies {\n  readStrict?: (options: {\n    memoryDir: string;\n    causalTrajectoryStoreDir?: string;\n    signal?: AbortSignal;\n  }) => Promise<CausalTrajectoryStrictReadResult>;\n  getRevision?: (options: {\n    memoryDir: string;\n    causalTrajectoryStoreDir?: string;\n  }) => Promise<string>;\n  clock?: () => number;\n  maxCacheSize?: number;\n  timeoutMs?: number;\n}\n\nconst ACTION_STRATEGIES: ReadonlySet<ActionStrategyId> = new Set([\n  \"RUN_CHECK\",\n  \"CHANGE_IMPLEMENTATION\",\n  \"CHANGE_TEST\",\n  \"CHANGE_CONFIGURATION\",\n  \"CHANGE_DEPENDENCY\",\n  \"INVALIDATE_CACHE\",\n  \"RETRY_ACTION\",\n  \"INSPECT_STATE\",\n]);\nconst EDIT_KINDS: ReadonlySet<EditKind> = new Set([\"create\", \"update\", \"delete\", \"rename\"]);\nconst MAX_COMMAND_CHARS = 128;\nconst MAX_ARGUMENTS = 32;\nconst MAX_ARGUMENT_CHARS = 128;\nconst MAX_PATH_CHARS = 512;\nconst MAX_SLOT_CHARS = 128;\nconst MAX_CITATION_CHARS = 180;\n\nfunction bound(value: string, max: number, field: string): string {\n  const normalized = value.trim();\n  if (normalized.length > max) throw new Error(`${field} exceeds ${max} characters`);\n  return normalized;\n}\n\nexport function sanitizePayloadString(input: string): string {\n  return input\n    .replace(/(?:\\/home\\/[^\\s/]+|\\/Users\\/[^\\s/]+|[A-Za-z]:\\\\Users\\\\[^\\s\\\\]+)/g, \"$HOME\")\n    .replace(/sk-[a-zA-Z0-9_-]{10,}/g, \"<secret>\")\n    .replace(/bearer\\s+[a-zA-Z0-9._-]+/gi, \"bearer <secret>\")\n    .trim();\n}\n\nfunction normalizeRepositoryPath(filePath: string, codingContext: CodingContext): string {\n  const root = path.resolve(codingContext.rootPath);\n  const absolute = path.isAbsolute(filePath) ? path.resolve(filePath) : path.resolve(root, filePath);\n  const relative = path.relative(root, absolute);\n  if (relative === \"..\" || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative)) {\n    throw new Error(\"edit path must be contained by codingContext.rootPath\");\n  }\n  return bound(relative.split(path.sep).join(\"/\"), MAX_PATH_CHARS, \"repo-relative path\");\n}\n\nfunction normalizeCommandArgument(\n  argument: string,\n  codingContext: CodingContext,\n  secretValue: boolean,\n): string {\n  const value = bound(sanitizePayloadString(argument), MAX_ARGUMENT_CHARS, \"command argument\");\n  if (secretValue || value.includes(\"<secret>\")) return \"<secret>\";\n  if (/^--(?:token|key|secret|password|authorization)=/i.test(value)) {\n    return `${value.slice(0, value.indexOf(\"=\") + 1)}<secret>`;\n  }\n  if (/^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value)) return \"<uuid>\";\n  if (/^[0-9a-f]{7,64}$/i.test(value)) return \"<sha>\";\n  if (/^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?Z$/.test(value)) return \"<timestamp>\";\n  if (/^\\d+(?:\\.\\d+)?(?:ms|s|m|h|d)$/.test(value)) return \"<duration>\";\n  if (/^-?\\d+(?:\\.\\d+)?$/.test(value)) return \"<number>\";\n  const pathLike = path.isAbsolute(value)\n    || (!/^[a-z][a-z0-9+.-]*:\\/\\//i.test(value) && /[\\\\/]/.test(value) && !value.startsWith(\"--\"));\n  if (pathLike) {\n    let relative: string;\n    try {\n      relative = normalizeRepositoryPath(value, codingContext);\n    } catch {\n      return \"<external-path>\";\n    }\n    return /(?:^|\\/)(?:tmp|temp)(?:\\/|$)|\\.tmp$/i.test(relative)\n      ? `<repo-temp-path:${relative}>`\n      : `<repo-path:${relative}>`;\n  }\n  return value;\n}\n\nexport function normalizeActionIntent(\n  intent: ActionIntent,\n  strategyId: ActionStrategyId,\n  codingContext: CodingContext,\n): NormalizedActionIntent {\n  if (!ACTION_STRATEGIES.has(strategyId)) throw new Error(`unsupported action strategy: ${strategyId}`);\n\n  let payload: string;\n  if (intent.kind === \"command\") {\n    const command = bound(sanitizePayloadString(intent.command), MAX_COMMAND_CHARS, \"command\");\n    const args = intent.args ?? [];\n    if (args.length > MAX_ARGUMENTS) throw new Error(`command args exceed ${MAX_ARGUMENTS} entries`);\n    const normalizedArgs = args.map((argument, index) => {\n      const prior = index > 0 ? args[index - 1] : undefined;\n      const secretValue = prior !== undefined\n        && /^--(?:token|key|secret|password|authorization)$/i.test(prior);\n      return normalizeCommandArgument(argument, codingContext, secretValue);\n    });\n    payload = JSON.stringify({ kind: \"command\", strategyId, command, args: normalizedArgs });\n  } else if (intent.kind === \"edit\") {\n    if (!EDIT_KINDS.has(intent.editKind)) throw new Error(`unsupported edit kind: ${intent.editKind}`);\n    const relativePath = normalizeRepositoryPath(intent.filePath, codingContext);\n    payload = JSON.stringify({\n      kind: \"edit\",\n      strategyId,\n      filePath: relativePath,\n      editKind: intent.editKind,\n      symbol: intent.symbol ? bound(intent.symbol, MAX_SLOT_CHARS, \"symbol\") : undefined,\n      range: intent.range ? bound(intent.range, MAX_SLOT_CHARS, \"range\") : undefined,\n      diffShape: intent.diffShape ? bound(intent.diffShape, MAX_SLOT_CHARS, \"diffShape\") : undefined,\n    });\n  } else {\n    throw new Error(\"action intent kind must be command or edit\");\n  }\n\n  return {\n    kind: intent.kind,\n    strategyId,\n    fingerprint: `v1:sha256:${createHash(\"sha256\").update(payload).digest(\"hex\")}`,\n  };\n}\n\nfunction matchTrajectory(\n  record: CausalTrajectoryRecord,\n  projectId: string,\n  normalized: NormalizedActionIntent,\n): boolean {\n  const identity = record.actionIdentity;\n  return record.outcomeKind === \"failure\"\n    && record.codingContext?.projectId === projectId\n    && identity?.fingerprintVersion === PRE_ACTION_FINGERPRINT_VERSION\n    && identity.strategyId === normalized.strategyId\n    && identity.fingerprint === normalized.fingerprint;\n}\n\nfunction boundedCitation(value: string | undefined, fallback: string): string {\n  const sanitized = sanitizePayloadString(value ?? fallback).replace(/\\s+/g, \" \");\n  return sanitized.slice(0, MAX_CITATION_CHARS);\n}\n\nexport class PreActionFailureGate {\n  private readonly cache = new Map<string, PreActionGateResult>();\n  private readonly maxCacheSize: number;\n  private readonly readStrict: NonNullable<PreActionGateDependencies[\"readStrict\"]>;\n  private readonly getRevision: NonNullable<PreActionGateDependencies[\"getRevision\"]>;\n  private readonly clock: () => number;\n  private readonly timeoutMs: number;\n\n  constructor(deps: PreActionGateDependencies = {}) {\n    this.readStrict = deps.readStrict ?? readCausalTrajectoryRecordsStrict;\n    this.getRevision = deps.getRevision ?? readCausalTrajectoryRevisionToken;\n    this.clock = deps.clock ?? Date.now;\n    this.maxCacheSize = deps.maxCacheSize ?? 500;\n    this.timeoutMs = Math.max(1, deps.timeoutMs ?? PRE_ACTION_GATE_DEFAULT_TIMEOUT_MS);\n  }\n\n  public clearCache(): void {\n    this.cache.clear();\n  }\n\n  async evaluate(request: PreActionGateRequest): Promise<PreActionGateResult> {\n    const deadline = this.clock() + this.timeoutMs;\n    const controller = new AbortController();\n    const abortFromExternal = () => controller.abort();\n    request.signal?.addEventListener(\"abort\", abortFromExternal, { once: true });\n    if (request.signal?.aborted) controller.abort();\n\n    let resolveTimeout!: (result: PreActionGateResult) => void;\n    const timeoutPromise = new Promise<PreActionGateResult>((resolve) => {\n      resolveTimeout = resolve;\n    });\n    const timer = setTimeout(() => {\n      controller.abort();\n      resolveTimeout({ status: \"ERROR_FAIL_OPEN\", reason: `PreActionFailureGate timed out after ${this.timeoutMs}ms` });\n    }, this.timeoutMs);\n\n    try {\n      return await Promise.race([\n        this.evaluateInternal(request, controller.signal, deadline),\n        timeoutPromise,\n      ]);\n    } catch (error) {\n      return { status: \"ERROR_FAIL_OPEN\", reason: error instanceof Error ? error.message : String(error) };\n    } finally {\n      clearTimeout(timer);\n      request.signal?.removeEventListener(\"abort\", abortFromExternal);\n    }\n  }\n\n  private async evaluateInternal(\n    request: PreActionGateRequest,\n    signal: AbortSignal,\n    deadline: number,\n  ): Promise<PreActionGateResult> {\n    if (!request.memoryDir?.trim()) return { status: \"ERROR_FAIL_OPEN\", reason: \"memoryDir is required\" };\n    if (!request.sessionKey?.trim()) return { status: \"ERROR_FAIL_OPEN\", reason: \"sessionKey is required\" };\n    if (!request.codingContext?.projectId?.trim() || !request.codingContext.rootPath?.trim()) {\n      return { status: \"ERROR_FAIL_OPEN\", reason: \"codingContext with projectId and rootPath is required\" };\n    }\n\n    let normalized: NormalizedActionIntent;\n    try {\n      normalized = normalizeActionIntent(request.intent, request.strategyId, request.codingContext);\n    } catch (error) {\n      return { status: \"ERROR_FAIL_OPEN\", reason: error instanceof Error ? error.message : String(error) };\n    }\n\n    const revisionOptions = {\n      memoryDir: request.memoryDir,\n      causalTrajectoryStoreDir: request.causalTrajectoryStoreDir,\n    };\n    const preRevision = await this.getRevision(revisionOptions);\n    const branch = request.codingContext.branch ?? \"\";\n    const storeId = createHash(\"sha256\")\n      .update(resolveCausalTrajectoryStoreDir(request.memoryDir, request.causalTrajectoryStoreDir))\n      .digest(\"hex\");\n    const cacheKey = createHash(\"sha256\").update(JSON.stringify([\n      request.codingContext.projectId,\n      branch,\n      request.sessionKey,\n      PRE_ACTION_FINGERPRINT_VERSION,\n      preRevision,\n      normalized.fingerprint,\n      storeId,\n    ])).digest(\"hex\");\n    const cached = this.cache.get(cacheKey);\n    if (cached) return cached;\n\n    if (signal.aborted || this.clock() >= deadline) return { status: \"ERROR_FAIL_OPEN\", reason: \"deadline exceeded\" };\n    const scan = await this.readStrict({ ...revisionOptions, signal });\n    if (signal.aborted || this.clock() >= deadline) return { status: \"ERROR_FAIL_OPEN\", reason: \"deadline exceeded\" };\n    if (scan.invalidTrajectories.length > 0) {\n      return { status: \"ERROR_FAIL_OPEN\", reason: `store contains ${scan.invalidTrajectories.length} invalid record(s)` };\n    }\n\n    const postRevision = await this.getRevision(revisionOptions);\n    const stableRevision = preRevision === postRevision;\n    const match = scan.trajectories\n      .filter((record) => matchTrajectory(record, request.codingContext.projectId, normalized))\n      .sort((left, right) => {\n        const recordedAtOrder = right.recordedAt.localeCompare(left.recordedAt);\n        return recordedAtOrder !== 0\n          ? recordedAtOrder\n          : left.trajectoryId.localeCompare(right.trajectoryId);\n      })[0];\n    const result: PreActionGateResult = match\n      ? {\n          status: \"MATCH_WARN\",\n          advisoryText: `[PreActionFailureGate ${PRE_ACTION_WARNING_VERSION}] A similar action failed before. Prior act: \"${boundedCitation(match.actionSummary, \"recorded action\")}\". Failure: \"${boundedCitation(match.outcomeSummary, \"recorded failure\")}\". Next safe check: \"${boundedCitation(match.followUpSummary, \"verify prerequisites before retrying\")}\".`,\n          fingerprint: normalized.fingerprint,\n          matchedTrajectoryId: match.trajectoryId,\n          revision: postRevision,\n        }\n      : { status: \"NO_MATCH\", fingerprint: normalized.fingerprint, revision: postRevision };\n\n    if (stableRevision && !signal.aborted && this.clock() < deadline) this.setCache(cacheKey, result);\n    return result;\n  }\n\n  private setCache(key: string, result: PreActionGateResult): void {\n    if (this.cache.size >= this.maxCacheSize) {\n      const oldest = this.cache.keys().next().value;\n      if (oldest !== undefined) this.cache.delete(oldest);\n    }\n    this.cache.set(key, result);\n  }\n}\n"],"mappings":";;;;;;;AAAA,SAAS,kBAAkB;AAC3B,OAAO,UAAU;AAaV,IAAM,iCAAiC;AACvC,IAAM,6BAA6B;AACnC,IAAM,qCAAqC;AA4ClD,IAAM,oBAAmD,oBAAI,IAAI;AAAA,EAC/D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AACD,IAAM,aAAoC,oBAAI,IAAI,CAAC,UAAU,UAAU,UAAU,QAAQ,CAAC;AAC1F,IAAM,oBAAoB;AAC1B,IAAM,gBAAgB;AACtB,IAAM,qBAAqB;AAC3B,IAAM,iBAAiB;AACvB,IAAM,iBAAiB;AACvB,IAAM,qBAAqB;AAE3B,SAAS,MAAM,OAAe,KAAa,OAAuB;AAChE,QAAM,aAAa,MAAM,KAAK;AAC9B,MAAI,WAAW,SAAS,IAAK,OAAM,IAAI,MAAM,GAAG,KAAK,YAAY,GAAG,aAAa;AACjF,SAAO;AACT;AAEO,SAAS,sBAAsB,OAAuB;AAC3D,SAAO,MACJ,QAAQ,oEAAoE,OAAO,EACnF,QAAQ,0BAA0B,UAAU,EAC5C,QAAQ,8BAA8B,iBAAiB,EACvD,KAAK;AACV;AAEA,SAAS,wBAAwB,UAAkB,eAAsC;AACvF,QAAM,OAAO,KAAK,QAAQ,cAAc,QAAQ;AAChD,QAAM,WAAW,KAAK,WAAW,QAAQ,IAAI,KAAK,QAAQ,QAAQ,IAAI,KAAK,QAAQ,MAAM,QAAQ;AACjG,QAAM,WAAW,KAAK,SAAS,MAAM,QAAQ;AAC7C,MAAI,aAAa,QAAQ,SAAS,WAAW,KAAK,KAAK,GAAG,EAAE,KAAK,KAAK,WAAW,QAAQ,GAAG;AAC1F,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AACA,SAAO,MAAM,SAAS,MAAM,KAAK,GAAG,EAAE,KAAK,GAAG,GAAG,gBAAgB,oBAAoB;AACvF;AAEA,SAAS,yBACP,UACA,eACA,aACQ;AACR,QAAM,QAAQ,MAAM,sBAAsB,QAAQ,GAAG,oBAAoB,kBAAkB;AAC3F,MAAI,eAAe,MAAM,SAAS,UAAU,EAAG,QAAO;AACtD,MAAI,mDAAmD,KAAK,KAAK,GAAG;AAClE,WAAO,GAAG,MAAM,MAAM,GAAG,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC;AAAA,EAClD;AACA,MAAI,6EAA6E,KAAK,KAAK,EAAG,QAAO;AACrG,MAAI,oBAAoB,KAAK,KAAK,EAAG,QAAO;AAC5C,MAAI,mDAAmD,KAAK,KAAK,EAAG,QAAO;AAC3E,MAAI,gCAAgC,KAAK,KAAK,EAAG,QAAO;AACxD,MAAI,oBAAoB,KAAK,KAAK,EAAG,QAAO;AAC5C,QAAM,WAAW,KAAK,WAAW,KAAK,KAChC,CAAC,2BAA2B,KAAK,KAAK,KAAK,QAAQ,KAAK,KAAK,KAAK,CAAC,MAAM,WAAW,IAAI;AAC9F,MAAI,UAAU;AACZ,QAAI;AACJ,QAAI;AACF,iBAAW,wBAAwB,OAAO,aAAa;AAAA,IACzD,QAAQ;AACN,aAAO;AAAA,IACT;AACA,WAAO,uCAAuC,KAAK,QAAQ,IACvD,mBAAmB,QAAQ,MAC3B,cAAc,QAAQ;AAAA,EAC5B;AACA,SAAO;AACT;AAEO,SAAS,sBACd,QACA,YACA,eACwB;AACxB,MAAI,CAAC,kBAAkB,IAAI,UAAU,EAAG,OAAM,IAAI,MAAM,gCAAgC,UAAU,EAAE;AAEpG,MAAI;AACJ,MAAI,OAAO,SAAS,WAAW;AAC7B,UAAM,UAAU,MAAM,sBAAsB,OAAO,OAAO,GAAG,mBAAmB,SAAS;AACzF,UAAM,OAAO,OAAO,QAAQ,CAAC;AAC7B,QAAI,KAAK,SAAS,cAAe,OAAM,IAAI,MAAM,uBAAuB,aAAa,UAAU;AAC/F,UAAM,iBAAiB,KAAK,IAAI,CAAC,UAAU,UAAU;AACnD,YAAM,QAAQ,QAAQ,IAAI,KAAK,QAAQ,CAAC,IAAI;AAC5C,YAAM,cAAc,UAAU,UACzB,mDAAmD,KAAK,KAAK;AAClE,aAAO,yBAAyB,UAAU,eAAe,WAAW;AAAA,IACtE,CAAC;AACD,cAAU,KAAK,UAAU,EAAE,MAAM,WAAW,YAAY,SAAS,MAAM,eAAe,CAAC;AAAA,EACzF,WAAW,OAAO,SAAS,QAAQ;AACjC,QAAI,CAAC,WAAW,IAAI,OAAO,QAAQ,EAAG,OAAM,IAAI,MAAM,0BAA0B,OAAO,QAAQ,EAAE;AACjG,UAAM,eAAe,wBAAwB,OAAO,UAAU,aAAa;AAC3E,cAAU,KAAK,UAAU;AAAA,MACvB,MAAM;AAAA,MACN;AAAA,MACA,UAAU;AAAA,MACV,UAAU,OAAO;AAAA,MACjB,QAAQ,OAAO,SAAS,MAAM,OAAO,QAAQ,gBAAgB,QAAQ,IAAI;AAAA,MACzE,OAAO,OAAO,QAAQ,MAAM,OAAO,OAAO,gBAAgB,OAAO,IAAI;AAAA,MACrE,WAAW,OAAO,YAAY,MAAM,OAAO,WAAW,gBAAgB,WAAW,IAAI;AAAA,IACvF,CAAC;AAAA,EACH,OAAO;AACL,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AAEA,SAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb;AAAA,IACA,aAAa,aAAa,WAAW,QAAQ,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK,CAAC;AAAA,EAC9E;AACF;AAEA,SAAS,gBACP,QACA,WACA,YACS;AACT,QAAM,WAAW,OAAO;AACxB,SAAO,OAAO,gBAAgB,aACzB,OAAO,eAAe,cAAc,aACpC,UAAU,uBAAuB,kCACjC,SAAS,eAAe,WAAW,cACnC,SAAS,gBAAgB,WAAW;AAC3C;AAEA,SAAS,gBAAgB,OAA2B,UAA0B;AAC5E,QAAM,YAAY,sBAAsB,SAAS,QAAQ,EAAE,QAAQ,QAAQ,GAAG;AAC9E,SAAO,UAAU,MAAM,GAAG,kBAAkB;AAC9C;AAEO,IAAM,uBAAN,MAA2B;AAAA,EACf,QAAQ,oBAAI,IAAiC;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,OAAkC,CAAC,GAAG;AAChD,SAAK,aAAa,KAAK,cAAc;AACrC,SAAK,cAAc,KAAK,eAAe;AACvC,SAAK,QAAQ,KAAK,SAAS,KAAK;AAChC,SAAK,eAAe,KAAK,gBAAgB;AACzC,SAAK,YAAY,KAAK,IAAI,GAAG,KAAK,aAAa,kCAAkC;AAAA,EACnF;AAAA,EAEO,aAAmB;AACxB,SAAK,MAAM,MAAM;AAAA,EACnB;AAAA,EAEA,MAAM,SAAS,SAA6D;AAC1E,UAAM,WAAW,KAAK,MAAM,IAAI,KAAK;AACrC,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,oBAAoB,MAAM,WAAW,MAAM;AACjD,YAAQ,QAAQ,iBAAiB,SAAS,mBAAmB,EAAE,MAAM,KAAK,CAAC;AAC3E,QAAI,QAAQ,QAAQ,QAAS,YAAW,MAAM;AAE9C,QAAI;AACJ,UAAM,iBAAiB,IAAI,QAA6B,CAAC,YAAY;AACnE,uBAAiB;AAAA,IACnB,CAAC;AACD,UAAM,QAAQ,WAAW,MAAM;AAC7B,iBAAW,MAAM;AACjB,qBAAe,EAAE,QAAQ,mBAAmB,QAAQ,wCAAwC,KAAK,SAAS,KAAK,CAAC;AAAA,IAClH,GAAG,KAAK,SAAS;AAEjB,QAAI;AACF,aAAO,MAAM,QAAQ,KAAK;AAAA,QACxB,KAAK,iBAAiB,SAAS,WAAW,QAAQ,QAAQ;AAAA,QAC1D;AAAA,MACF,CAAC;AAAA,IACH,SAAS,OAAO;AACd,aAAO,EAAE,QAAQ,mBAAmB,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;AAAA,IACrG,UAAE;AACA,mBAAa,KAAK;AAClB,cAAQ,QAAQ,oBAAoB,SAAS,iBAAiB;AAAA,IAChE;AAAA,EACF;AAAA,EAEA,MAAc,iBACZ,SACA,QACA,UAC8B;AAC9B,QAAI,CAAC,QAAQ,WAAW,KAAK,EAAG,QAAO,EAAE,QAAQ,mBAAmB,QAAQ,wBAAwB;AACpG,QAAI,CAAC,QAAQ,YAAY,KAAK,EAAG,QAAO,EAAE,QAAQ,mBAAmB,QAAQ,yBAAyB;AACtG,QAAI,CAAC,QAAQ,eAAe,WAAW,KAAK,KAAK,CAAC,QAAQ,cAAc,UAAU,KAAK,GAAG;AACxF,aAAO,EAAE,QAAQ,mBAAmB,QAAQ,wDAAwD;AAAA,IACtG;AAEA,QAAI;AACJ,QAAI;AACF,mBAAa,sBAAsB,QAAQ,QAAQ,QAAQ,YAAY,QAAQ,aAAa;AAAA,IAC9F,SAAS,OAAO;AACd,aAAO,EAAE,QAAQ,mBAAmB,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;AAAA,IACrG;AAEA,UAAM,kBAAkB;AAAA,MACtB,WAAW,QAAQ;AAAA,MACnB,0BAA0B,QAAQ;AAAA,IACpC;AACA,UAAM,cAAc,MAAM,KAAK,YAAY,eAAe;AAC1D,UAAM,SAAS,QAAQ,cAAc,UAAU;AAC/C,UAAM,UAAU,WAAW,QAAQ,EAChC,OAAO,gCAAgC,QAAQ,WAAW,QAAQ,wBAAwB,CAAC,EAC3F,OAAO,KAAK;AACf,UAAM,WAAW,WAAW,QAAQ,EAAE,OAAO,KAAK,UAAU;AAAA,MAC1D,QAAQ,cAAc;AAAA,MACtB;AAAA,MACA,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,MACA,WAAW;AAAA,MACX;AAAA,IACF,CAAC,CAAC,EAAE,OAAO,KAAK;AAChB,UAAM,SAAS,KAAK,MAAM,IAAI,QAAQ;AACtC,QAAI,OAAQ,QAAO;AAEnB,QAAI,OAAO,WAAW,KAAK,MAAM,KAAK,SAAU,QAAO,EAAE,QAAQ,mBAAmB,QAAQ,oBAAoB;AAChH,UAAM,OAAO,MAAM,KAAK,WAAW,EAAE,GAAG,iBAAiB,OAAO,CAAC;AACjE,QAAI,OAAO,WAAW,KAAK,MAAM,KAAK,SAAU,QAAO,EAAE,QAAQ,mBAAmB,QAAQ,oBAAoB;AAChH,QAAI,KAAK,oBAAoB,SAAS,GAAG;AACvC,aAAO,EAAE,QAAQ,mBAAmB,QAAQ,kBAAkB,KAAK,oBAAoB,MAAM,qBAAqB;AAAA,IACpH;AAEA,UAAM,eAAe,MAAM,KAAK,YAAY,eAAe;AAC3D,UAAM,iBAAiB,gBAAgB;AACvC,UAAM,QAAQ,KAAK,aAChB,OAAO,CAAC,WAAW,gBAAgB,QAAQ,QAAQ,cAAc,WAAW,UAAU,CAAC,EACvF,KAAK,CAAC,MAAM,UAAU;AACrB,YAAM,kBAAkB,MAAM,WAAW,cAAc,KAAK,UAAU;AACtE,aAAO,oBAAoB,IACvB,kBACA,KAAK,aAAa,cAAc,MAAM,YAAY;AAAA,IACxD,CAAC,EAAE,CAAC;AACN,UAAM,SAA8B,QAChC;AAAA,MACE,QAAQ;AAAA,MACR,cAAc,yBAAyB,0BAA0B,iDAAiD,gBAAgB,MAAM,eAAe,iBAAiB,CAAC,gBAAgB,gBAAgB,MAAM,gBAAgB,kBAAkB,CAAC,wBAAwB,gBAAgB,MAAM,iBAAiB,sCAAsC,CAAC;AAAA,MACxV,aAAa,WAAW;AAAA,MACxB,qBAAqB,MAAM;AAAA,MAC3B,UAAU;AAAA,IACZ,IACA,EAAE,QAAQ,YAAY,aAAa,WAAW,aAAa,UAAU,aAAa;AAEtF,QAAI,kBAAkB,CAAC,OAAO,WAAW,KAAK,MAAM,IAAI,SAAU,MAAK,SAAS,UAAU,MAAM;AAChG,WAAO;AAAA,EACT;AAAA,EAEQ,SAAS,KAAa,QAAmC;AAC/D,QAAI,KAAK,MAAM,QAAQ,KAAK,cAAc;AACxC,YAAM,SAAS,KAAK,MAAM,KAAK,EAAE,KAAK,EAAE;AACxC,UAAI,WAAW,OAAW,MAAK,MAAM,OAAO,MAAM;AAAA,IACpD;AACA,SAAK,MAAM,IAAI,KAAK,MAAM;AAAA,EAC5B;AACF;","names":[]}

package/dist/{chunk-2RIWJUSQ.js → chunk-LQKXVQZR.js}

@@ -1,12 +1,12 @@
 import {
   WearablesInputError
 } from "./chunk-V7IZKJI3.js";
+import {
+  AdapterRegistry
+} from "./chunk-RKNJBZ55.js";
 import {
   WriteRateLimiter
 } from "./chunk-MKQBXQKU.js";
-import {
-  AdapterRegistry
-} from "./chunk-JBPKEARU.js";
 import {
   nonEmptyQueryParam,
   optionalQueryString,
@@ -21,17 +21,17 @@ import {
   processChatMessage,
   sessionBelongsToPrincipal,
   subscribeChatTranscript
-} from "./chunk-JFLOOTXU.js";
+} from "./chunk-7BLWBSRL.js";
 import {
   RelayMissionStoreError
-} from "./chunk-K7VKAHFE.js";
+} from "./chunk-6XGEBQ3R.js";
 import {
   validateRequest
-} from "./chunk-QKD65RGL.js";
+} from "./chunk-LYMNZZIM.js";
 import {
   executeResolution,
   isValidResolutionVerb
-} from "./chunk-WG5HSQ4P.js";
+} from "./chunk-BAKXNQ3C.js";
 import {
   isDefaultReviewNamespace,
   listPairs,
@@ -50,21 +50,21 @@ import {
 import {
   authorizationProbeNamespaces,
   probeOperationAuthorization
-} from "./chunk-JXZ7NLYH.js";
+} from "./chunk-7VWZ4LRW.js";
 import {
   CorrectionContractError,
   getOperation,
   resolveQueryNamespaceWritablePreflight
-} from "./chunk-IXPKESVP.js";
+} from "./chunk-PWIMF7LP.js";
 import {
   isTrustZoneName
-} from "./chunk-JGSKJHF7.js";
+} from "./chunk-KQS72GCR.js";
 import {
   subscribeGraphEvents
 } from "./chunk-DEUNUKTD.js";
 import {
   isRecallDisclosure
-} from "./chunk-3S63QIFQ.js";
+} from "./chunk-LAQ33B5D.js";
 import {
   OFFLINE_SYNC_APPLY_MAX_BODY_BYTES,
   OFFLINE_SYNC_FILE_CONTENT_MAX_CHUNK_BYTES,
@@ -3263,4 +3263,4 @@ export {
   MeetingsInputError,
   EngramAccessHttpServer
 };
-//# sourceMappingURL=chunk-2RIWJUSQ.js.map
+//# sourceMappingURL=chunk-LQKXVQZR.js.map

package/dist/{chunk-LQL7ARIC.js → chunk-LTOAJXZB.js}

@@ -7,17 +7,17 @@ import {
 import {
   listMemoryGovernanceRuns,
   readMemoryGovernanceRunArtifact
-} from "./chunk-SMPVHGHG.js";
+} from "./chunk-WPZX7MEA.js";
 import {
   StorageManager
-} from "./chunk-EY64JLOM.js";
+} from "./chunk-24BKGKGO.js";
 import {
   normalizeProjectionPreview,
   normalizeProjectionTags
 } from "./chunk-SCU65EZI.js";
 import {
   commitPreparedFileAtomically
-} from "./chunk-R6YJI3HE.js";
+} from "./chunk-AW4QUFQF.js";
 import {
   assertInjectedStorageRooted,
   readProjectedEntityMentionRows,
@@ -1001,4 +1001,4 @@ export {
   verifyMemoryProjection,
   repairMemoryProjection
 };
-//# sourceMappingURL=chunk-LQL7ARIC.js.map
+//# sourceMappingURL=chunk-LTOAJXZB.js.map

package/dist/{chunk-QKD65RGL.js → chunk-LYMNZZIM.js}

@@ -1,6 +1,6 @@
 import {
   isValidCapsuleSince
-} from "./chunk-VDX2J7OX.js";
+} from "./chunk-IPLYGWQF.js";
 import {
   CAPSULE_ID_PATTERN
 } from "./chunk-WEHSQBFR.js";
@@ -475,4 +475,4 @@ export {
   actionConfidenceRequestSchema,
   validateRequest
 };
-//# sourceMappingURL=chunk-QKD65RGL.js.map
+//# sourceMappingURL=chunk-LYMNZZIM.js.map

package/dist/{chunk-W4FBGYGK.js → chunk-M4MP34AQ.js}

@@ -15,11 +15,12 @@ import {
 import {
   listJsonFiles,
   readJsonFile
-} from "./chunk-LPSF4OQH.js";
+} from "./chunk-P77QX3ID.js";
 
 // src/causal-trajectory.ts
 import path from "path";
-import { mkdir, writeFile } from "fs/promises";
+import { link, lstat, mkdir, readdir, readFile, rename, rm, stat, writeFile } from "fs/promises";
+import { createHash } from "crypto";
 function validateMetadata(raw) {
   return validateStringRecord(raw, "metadata");
 }
@@ -29,6 +30,81 @@ function resolveCausalTrajectoryStoreDir(memoryDir, overrideDir) {
   }
   return path.join(memoryDir, "state", "causal-trajectories");
 }
+async function readCausalTrajectoryRevisionToken(options) {
+  const rootDir = resolveCausalTrajectoryStoreDir(options.memoryDir, options.causalTrajectoryStoreDir);
+  const revPath = path.join(rootDir, "revision.json");
+  try {
+    const raw = await readFile(revPath, "utf8");
+    const parsed = JSON.parse(raw);
+    if (!isRecord(parsed) || typeof parsed.revisionToken !== "string" || parsed.revisionToken.length === 0) {
+      throw new Error("revision.json must contain a non-empty revisionToken");
+    }
+    return parsed.revisionToken;
+  } catch (err) {
+    const code = err?.code;
+    if (code === "ENOENT") {
+      return "rev-0";
+    }
+    throw new Error(`Failed to read causal trajectory revision token: ${err instanceof Error ? err.message : String(err)}`);
+  }
+}
+async function advanceCausalTrajectoryRevisionToken(options) {
+  const rootDir = resolveCausalTrajectoryStoreDir(options.memoryDir, options.causalTrajectoryStoreDir);
+  await mkdir(rootDir, { recursive: true });
+  const newToken = `rev-${Date.now()}-${createHash("sha256").update(String(Math.random())).digest("hex").slice(0, 8)}`;
+  const revPath = path.join(rootDir, "revision.json");
+  const tmpPath = path.join(rootDir, `.revision.${Date.now()}.${Math.random().toString(36).slice(2)}.tmp`);
+  const payload = JSON.stringify({ revisionToken: newToken, updatedAt: (/* @__PURE__ */ new Date()).toISOString() }, null, 2);
+  try {
+    await writeFile(tmpPath, payload, "utf8");
+    await rename(tmpPath, revPath);
+  } catch (error) {
+    await rm(tmpPath, { force: true }).catch(() => {
+    });
+    throw error;
+  }
+  return newToken;
+}
+function validateCodingContext(raw) {
+  if (!raw || typeof raw !== "object") return void 0;
+  const obj = raw;
+  if (typeof obj.projectId !== "string" || obj.projectId.trim().length === 0) {
+    throw new Error("codingContext.projectId must be a non-empty string");
+  }
+  return {
+    projectId: obj.projectId.trim(),
+    branch: obj.branch === null ? null : optionalString(obj.branch),
+    defaultBranch: obj.defaultBranch === null ? null : optionalString(obj.defaultBranch)
+  };
+}
+function validateActionIdentity(raw) {
+  if (!raw || typeof raw !== "object") return void 0;
+  const obj = raw;
+  if (obj.fingerprintVersion !== 1) return void 0;
+  const strategyId = assertString(obj.strategyId, "actionIdentity.strategyId");
+  const allowedStrategies = [
+    "RUN_CHECK",
+    "CHANGE_IMPLEMENTATION",
+    "CHANGE_TEST",
+    "CHANGE_CONFIGURATION",
+    "CHANGE_DEPENDENCY",
+    "INVALIDATE_CACHE",
+    "RETRY_ACTION",
+    "INSPECT_STATE"
+  ];
+  if (!allowedStrategies.includes(strategyId)) {
+    throw new Error(`actionIdentity.strategyId must be one of ${allowedStrategies.join("|")}`);
+  }
+  const fingerprint = assertString(obj.fingerprint, "actionIdentity.fingerprint");
+  if (!/^v1:sha256:[a-f0-9]{64}$/.test(fingerprint)) {
+    throw new Error("actionIdentity.fingerprint must be a v1 sha256 fingerprint");
+  }
+  return {
+    fingerprintVersion: 1,
+    fingerprint,
+    strategyId
+  };
+}
 function validateCausalTrajectoryRecord(raw) {
   if (!isRecord(raw)) throw new Error("causal trajectory record must be an object");
   if (raw.schemaVersion !== 1) throw new Error("schemaVersion must be 1");
@@ -50,7 +126,9 @@ function validateCausalTrajectoryRecord(raw) {
     objectiveStateSnapshotRefs: optionalStringArray(raw.objectiveStateSnapshotRefs, "objectiveStateSnapshotRefs"),
     entityRefs: optionalStringArray(raw.entityRefs, "entityRefs"),
     tags: optionalStringArray(raw.tags, "tags"),
-    metadata: validateMetadata(raw.metadata)
+    metadata: validateMetadata(raw.metadata),
+    codingContext: validateCodingContext(raw.codingContext),
+    actionIdentity: validateActionIdentity(raw.actionIdentity)
   };
 }
 async function recordCausalTrajectory(options) {
@@ -59,8 +137,42 @@ async function recordCausalTrajectory(options) {
   const day = recordStoreDay(validated.recordedAt);
   const trajectoriesDir = path.join(rootDir, "trajectories", day);
   const filePath = path.join(trajectoriesDir, `${validated.trajectoryId}.json`);
+  try {
+    await lstat(filePath);
+    throw new Error(`causal trajectory already exists: ${validated.trajectoryId}`);
+  } catch (error) {
+    if (error.code !== "ENOENT") throw error;
+  }
+  const tmpPath = path.join(
+    trajectoriesDir,
+    `.${validated.trajectoryId}.${Date.now()}.${Math.random().toString(36).slice(2)}.tmp`
+  );
   await mkdir(trajectoriesDir, { recursive: true });
-  await writeFile(filePath, JSON.stringify(validated, null, 2), "utf8");
+  const payload = JSON.stringify(validated, null, 2);
+  try {
+    await writeFile(tmpPath, payload, "utf8");
+    try {
+      await link(tmpPath, filePath);
+    } catch (error) {
+      const code = error.code;
+      if (!["EPERM", "ENOTSUP", "EOPNOTSUPP"].includes(code ?? "")) throw error;
+      await writeFile(filePath, payload, { encoding: "utf8", flag: "wx" });
+    }
+    await rm(tmpPath, { force: true });
+  } catch (error) {
+    await rm(tmpPath, { force: true }).catch(() => {
+    });
+    throw error;
+  }
+  try {
+    await advanceCausalTrajectoryRevisionToken({
+      memoryDir: options.memoryDir,
+      causalTrajectoryStoreDir: options.causalTrajectoryStoreDir
+    });
+  } catch (error) {
+    await rm(filePath, { force: true });
+    throw error;
+  }
   if (options.actionGraphRecallEnabled === true) {
     try {
       const { appendCausalTrajectoryGraphEdges } = await import("./causal-trajectory-graph.js");
@@ -114,6 +226,75 @@ async function readCausalTrajectoryRecords(options) {
   }
   return { files, trajectories, invalidTrajectories };
 }
+async function readCausalTrajectoryRecordsStrict(options) {
+  const rootDir = resolveCausalTrajectoryStoreDir(options.memoryDir, options.causalTrajectoryStoreDir);
+  const trajectoriesDir = path.join(rootDir, "trajectories");
+  if (options.signal?.aborted) {
+    throw new Error("Read aborted");
+  }
+  let statRes;
+  try {
+    statRes = await lstat(trajectoriesDir);
+  } catch (err) {
+    const code = err?.code;
+    if (code === "ENOENT") {
+      return { status: "absent", files: [], trajectories: [], invalidTrajectories: [] };
+    }
+    throw new Error(`Unreadable causal trajectory directory: ${err instanceof Error ? err.message : String(err)}`);
+  }
+  if (statRes.isSymbolicLink()) {
+    throw new Error("Causal trajectory directory must not be a symbolic link");
+  }
+  if (!statRes.isDirectory()) {
+    throw new Error("Causal trajectory path is not a directory");
+  }
+  const files = [];
+  const scanDir = async (dirPath) => {
+    if (options.signal?.aborted) {
+      throw new Error("Read aborted");
+    }
+    const entries = await readdir(dirPath, { withFileTypes: true });
+    for (const entry of entries) {
+      if (options.signal?.aborted) {
+        throw new Error("Read aborted");
+      }
+      const fullPath = path.join(dirPath, entry.name);
+      if (entry.isSymbolicLink()) {
+        throw new Error(`Causal trajectory entry must not be a symbolic link: ${fullPath}`);
+      }
+      if (entry.isDirectory()) {
+        await scanDir(fullPath);
+      } else if (entry.isFile() && entry.name.endsWith(".json") && !entry.name.startsWith(".")) {
+        const s = await stat(fullPath);
+        if (s.isFile()) {
+          files.push(fullPath);
+        }
+      }
+    }
+  };
+  await scanDir(trajectoriesDir);
+  if (files.length === 0) {
+    return { status: "empty", files: [], trajectories: [], invalidTrajectories: [] };
+  }
+  const trajectories = [];
+  const invalidTrajectories = [];
+  for (const filePath of files) {
+    if (options.signal?.aborted) {
+      throw new Error("Read aborted");
+    }
+    try {
+      const content = await readFile(filePath, "utf8");
+      const raw = JSON.parse(content);
+      trajectories.push(validateCausalTrajectoryRecord(raw));
+    } catch (error) {
+      invalidTrajectories.push({
+        path: filePath,
+        error: error instanceof Error ? error.message : String(error)
+      });
+    }
+  }
+  return { status: "ok", files, trajectories, invalidTrajectories };
+}
 function filterTrajectoriesByLookbackDays(trajectories, lookbackDays, nowMs = Date.now()) {
   const days = Math.max(1, Math.floor(lookbackDays));
   const cutoff = nowMs - days * 864e5;
@@ -209,11 +390,14 @@ async function searchCausalTrajectories(options) {
 
 export {
   resolveCausalTrajectoryStoreDir,
+  readCausalTrajectoryRevisionToken,
+  advanceCausalTrajectoryRevisionToken,
   validateCausalTrajectoryRecord,
   recordCausalTrajectory,
   readCausalTrajectoryRecords,
+  readCausalTrajectoryRecordsStrict,
   filterTrajectoriesByLookbackDays,
   getCausalTrajectoryStoreStatus,
   searchCausalTrajectories
 };
-//# sourceMappingURL=chunk-W4FBGYGK.js.map
+//# sourceMappingURL=chunk-M4MP34AQ.js.map