@remnic/core 9.54.4 → 9.54.6

package/dist/chunk-37DZZFFM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/support-passport/public-http.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { isIP } from \"node:net\";\n\nimport { abortError, isAbortError } from \"../abort-error.js\";\nimport { type OperationName, getOperation } from \"../access-boundary.js\";\nimport type { EngramAccessService } from \"../access-service.js\";\nimport { SupportPassportError } from \"./errors.js\";\n\nconst PUBLIC_RATE_LIMIT_MAX_KEYS = 20_000;\nconst PUBLIC_AUTH_MAX_IN_FLIGHT_PER_NETWORK = 8;\nconst PUBLIC_AUTH_MAX_IN_FLIGHT_TOTAL = 256;\nconst PUBLIC_MODEL_MAX_IN_FLIGHT_PER_NETWORK = 8;\nconst PUBLIC_MODEL_MAX_IN_FLIGHT_TOTAL = 256;\n\nexport const SUPPORT_PASSPORT_PUBLIC_HTTP_ROUTES = [\n  {\n    method: \"GET\",\n    pathname: \"/engram/v1/support-passport/public/grants/:id\",\n    operation: \"support_passport_grant_read\",\n  },\n  {\n    method: \"POST\",\n    pathname: \"/engram/v1/support-passport/public/grants/:id/ask\",\n    operation: \"support_passport_grant_ask\",\n  },\n] as const satisfies ReadonlyArray<{ method: string; pathname: string; operation: OperationName }>;\n\nexport type SupportPassportExternalRequestHandler = (\n  req: IncomingMessage,\n  res: ServerResponse,\n  ctx: {\n    authorized: boolean;\n    tokenAuthorized: boolean;\n  }\n) => Promise<boolean>;\n\ninterface WindowEntry {\n  count: number;\n  resetAt: number;\n}\n\ninterface WindowReservation {\n  commit(): void;\n  release(): void;\n}\n\nclass UnreadSupportPassportRequestError extends Error {\n  constructor(readonly response: SupportPassportError) {\n    super(response.message);\n    this.name = \"UnreadSupportPassportRequestError\";\n  }\n}\n\nclass FixedWindowLimiter {\n  private readonly entries = new Map<string, WindowEntry>();\n\n  constructor(\n    private readonly limit: number,\n    private readonly windowMs: number,\n    private readonly now: () => number\n  ) {}\n\n  consume(key: string): boolean {\n    const reservation = this.reserve(key);\n    if (!reservation) return false;\n    reservation.commit();\n    return true;\n  }\n\n  reserve(key: string): WindowReservation | undefined {\n    const now = this.now();\n    let entry = this.entries.get(key);\n    if (!entry || entry.resetAt <= now) {\n      if (!entry && this.entries.size >= PUBLIC_RATE_LIMIT_MAX_KEYS) {\n        this.prune(now);\n        if (this.entries.size >= PUBLIC_RATE_LIMIT_MAX_KEYS) return undefined;\n      }\n      entry = { count: 0, resetAt: now + this.windowMs };\n      this.entries.set(key, entry);\n    }\n    if (entry.count >= this.limit) return undefined;\n    entry.count += 1;\n    let active = true;\n    return {\n      commit: () => {\n        active = false;\n      },\n      release: () => {\n        if (!active) return;\n        active = false;\n        if (this.entries.get(key) !== entry) return;\n        entry.count -= 1;\n        if (entry.count === 0) this.entries.delete(key);\n      },\n    };\n  }\n\n  allows(key: string): boolean {\n    const now = this.now();\n    const current = this.entries.get(key);\n    if (current && current.resetAt > now) return current.count < this.limit;\n    if (!current && this.entries.size >= PUBLIC_RATE_LIMIT_MAX_KEYS) {\n      this.prune(now);\n      if (this.entries.size >= PUBLIC_RATE_LIMIT_MAX_KEYS) return false;\n    }\n    return true;\n  }\n\n  private prune(now: number): void {\n    for (const [key, entry] of this.entries) {\n      if (entry.resetAt <= now) this.entries.delete(key);\n    }\n  }\n}\n\nclass InFlightLimiter {\n  private readonly counts = new Map<string, number>();\n  private total = 0;\n\n  constructor(\n    private readonly perKeyLimit: number,\n    private readonly totalLimit: number\n  ) {}\n\n  reserve(key: string): (() => void) | undefined {\n    const current = this.counts.get(key) ?? 0;\n    if (current >= this.perKeyLimit || this.total >= this.totalLimit) return undefined;\n    this.counts.set(key, current + 1);\n    this.total += 1;\n    let active = true;\n    return () => {\n      if (!active) return;\n      active = false;\n      const count = this.counts.get(key) ?? 0;\n      if (count <= 1) this.counts.delete(key);\n      else this.counts.set(key, count - 1);\n      this.total -= 1;\n    };\n  }\n}\n\ninterface PublicRateLimits {\n  authentications: InFlightLimiter;\n  modelCalls: InFlightLimiter;\n  grantReads: FixedWindowLimiter;\n  networkReads: FixedWindowLimiter;\n  networkReadFailures: FixedWindowLimiter;\n  grantQuestions: FixedWindowLimiter;\n  networkQuestions: FixedWindowLimiter;\n  networkQuestionFailures: FixedWindowLimiter;\n}\n\nexport interface SupportPassportPublicHandlerOptions {\n  now?: () => number;\n  trustedProxyAddresses?: readonly string[];\n}\n\nfunction createRateLimits(now: () => number): PublicRateLimits {\n  return {\n    authentications: new InFlightLimiter(PUBLIC_AUTH_MAX_IN_FLIGHT_PER_NETWORK, PUBLIC_AUTH_MAX_IN_FLIGHT_TOTAL),\n    modelCalls: new InFlightLimiter(PUBLIC_MODEL_MAX_IN_FLIGHT_PER_NETWORK, PUBLIC_MODEL_MAX_IN_FLIGHT_TOTAL),\n    grantReads: new FixedWindowLimiter(60, 60_000, now),\n    networkReads: new FixedWindowLimiter(60, 60_000, now),\n    networkReadFailures: new FixedWindowLimiter(60, 60_000, now),\n    grantQuestions: new FixedWindowLimiter(20, 10 * 60_000, now),\n    networkQuestions: new FixedWindowLimiter(20, 10 * 60_000, now),\n    networkQuestionFailures: new FixedWindowLimiter(20, 10 * 60_000, now),\n  };\n}\n\nfunction rateLimited(): SupportPassportError {\n  return new SupportPassportError(\"rate_limited\", \"Too many helper requests.\", 429);\n}\n\nasync function runPublicOperation(\n  service: EngramAccessService,\n  name: \"support_passport_grant_read\" | \"support_passport_grant_ask\",\n  input: Record<string, unknown>,\n  signal?: AbortSignal\n): Promise<unknown> {\n  const operation = getOperation(name);\n  if (!operation) throw new Error(`access-boundary: operation not registered: ${name}`);\n  const output = (await operation.run(input, {\n    service,\n    ...(signal ? { abortSignal: signal } : {}),\n  })) as { result: unknown };\n  return output.result;\n}\n\nfunction reserveAuthenticatedLimits(\n  networkLimiter: FixedWindowLimiter,\n  grantLimiter: FixedWindowLimiter,\n  networkKey: string,\n  grantId: string\n): WindowReservation {\n  const network = networkLimiter.reserve(networkKey);\n  if (!network) throw rateLimited();\n  const grant = grantLimiter.reserve(grantId);\n  if (!grant) {\n    network.release();\n    throw rateLimited();\n  }\n  let active = true;\n  return {\n    commit: () => {\n      if (!active) return;\n      active = false;\n      network.commit();\n      grant.commit();\n    },\n    release: () => {\n      if (!active) return;\n      active = false;\n      grant.release();\n      network.release();\n    },\n  };\n}\n\nasync function readGrantUnderAuthenticationReservation(\n  service: EngramAccessService,\n  grantId: string,\n  secret: string,\n  networkKey: string,\n  networkLimiter: FixedWindowLimiter,\n  grantLimiter: FixedWindowLimiter,\n  failureLimiter: FixedWindowLimiter\n) {\n  if (!failureLimiter.allows(networkKey)) throw rateLimited();\n  const limits = reserveAuthenticatedLimits(networkLimiter, grantLimiter, networkKey, grantId);\n  let guide: Awaited<ReturnType<EngramAccessService[\"supportPassportReadGrant\"]>>;\n  try {\n    guide = (await runPublicOperation(service, \"support_passport_grant_read\", { grantId, secret })) as Awaited<\n      ReturnType<EngramAccessService[\"supportPassportReadGrant\"]>\n    >;\n  } catch (error) {\n    if (error instanceof SupportPassportError) {\n      if (error.code === \"grant_not_found\") {\n        limits.release();\n        if (!failureLimiter.consume(networkKey)) throw rateLimited();\n      } else {\n        limits.commit();\n      }\n    } else {\n      limits.release();\n    }\n    throw error;\n  }\n  limits.commit();\n  return guide;\n}\n\nasync function readGrantWithRateLimits(\n  service: EngramAccessService,\n  grantId: string,\n  secret: string,\n  networkKey: string,\n  networkLimiter: FixedWindowLimiter,\n  grantLimiter: FixedWindowLimiter,\n  failureLimiter: FixedWindowLimiter,\n  authenticationLimiter: InFlightLimiter\n) {\n  const releaseAuthentication = authenticationLimiter.reserve(networkKey);\n  if (!releaseAuthentication) throw rateLimited();\n  try {\n    return await readGrantUnderAuthenticationReservation(\n      service,\n      grantId,\n      secret,\n      networkKey,\n      networkLimiter,\n      grantLimiter,\n      failureLimiter\n    );\n  } finally {\n    releaseAuthentication();\n  }\n}\n\nexport function normalizeSupportPassportNetworkAddress(value: string | undefined): string | undefined {\n  if (!value) return undefined;\n  const address = value.trim().toLowerCase();\n  const family = isIP(address);\n  if (family === 0) return undefined;\n  if (family === 4) return address;\n  const canonical = new URL(`http://[${address}]/`).hostname.slice(1, -1);\n  const mapped = /^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/.exec(canonical);\n  if (!mapped) return canonical;\n  const high = Number.parseInt(mapped[1] ?? \"\", 16);\n  const low = Number.parseInt(mapped[2] ?? \"\", 16);\n  return `${high >>> 8}.${high & 0xff}.${low >>> 8}.${low & 0xff}`;\n}\n\nfunction requestNetworkAddress(req: IncomingMessage, trustedProxyAddresses: ReadonlySet<string>): string {\n  const directAddress = normalizeSupportPassportNetworkAddress(req.socket.remoteAddress) ?? \"unknown\";\n  if (!trustedProxyAddresses.has(directAddress)) return directAddress;\n  const forwarded = req.headers[\"x-forwarded-for\"];\n  if (typeof forwarded !== \"string\") return directAddress;\n  const rawAddresses = forwarded.split(\",\");\n  if (rawAddresses.length < 1 || rawAddresses.length > 32) return directAddress;\n  const addresses = rawAddresses.map((address) => normalizeSupportPassportNetworkAddress(address));\n  if (addresses.some((address) => address === undefined)) return directAddress;\n  for (let index = addresses.length - 1; index >= 0; index -= 1) {\n    const address = addresses[index];\n    if (address && !trustedProxyAddresses.has(address)) return address;\n  }\n  return addresses[0] ?? directAddress;\n}\n\nfunction networkDigest(req: IncomingMessage, trustedProxyAddresses: ReadonlySet<string>): string {\n  return createHash(\"sha256\")\n    .update(requestNetworkAddress(req, trustedProxyAddresses))\n    .digest(\"hex\");\n}\n\nfunction parseSecret(req: IncomingMessage): string | undefined {\n  const raw = req.headers.authorization;\n  if (typeof raw !== \"string\") return undefined;\n  const match = /^(\\S+)[ \\t]+(\\S+)$/.exec(raw);\n  if (!match || match[1]?.toLowerCase() !== \"supportpassport\") return undefined;\n  const secret = match[2] ?? \"\";\n  if (!/^[A-Za-z0-9_-]{32,256}$/.test(secret)) return undefined;\n  return secret;\n}\n\nfunction requestDeclaresBody(req: IncomingMessage): boolean {\n  const contentLength = req.headers[\"content-length\"];\n  const transferEncoding = req.headers[\"transfer-encoding\"];\n  return transferEncoding !== undefined || (contentLength !== undefined && contentLength !== \"0\");\n}\n\nfunction respondJson(res: ServerResponse, status: number, payload: unknown): void {\n  const body = JSON.stringify(payload);\n  res.statusCode = status;\n  res.setHeader(\"cache-control\", \"private, no-store\");\n  res.setHeader(\"vary\", \"Authorization\");\n  res.setHeader(\"content-type\", \"application/json; charset=utf-8\");\n  res.setHeader(\"content-length\", String(Buffer.byteLength(body)));\n  res.end(body);\n}\n\nfunction respondJsonAndCloseUnreadRequest(\n  req: IncomingMessage,\n  res: ServerResponse,\n  status: number,\n  payload: unknown\n): void {\n  res.shouldKeepAlive = false;\n  res.setHeader(\"connection\", \"close\");\n  res.once(\"finish\", () => req.destroy());\n  respondJson(res, status, payload);\n}\n\nfunction respondBeforeReadingBody(\n  req: IncomingMessage,\n  res: ServerResponse,\n  status: number,\n  payload: unknown\n): void {\n  if (requestDeclaresBody(req)) {\n    respondJsonAndCloseUnreadRequest(req, res, status, payload);\n    return;\n  }\n  respondJson(res, status, payload);\n}\n\nasync function readQuestionBody(req: IncomingMessage, signal: AbortSignal): Promise<string> {\n  const content = await new Promise<Buffer>((resolve, reject) => {\n    const chunks: Buffer[] = [];\n    let bytes = 0;\n    let settled = false;\n    const cleanup = () => {\n      req.off(\"data\", onData);\n      req.off(\"end\", onEnd);\n      req.off(\"error\", onError);\n      req.off(\"aborted\", onAborted);\n      signal.removeEventListener(\"abort\", onSignalAbort);\n    };\n    const fail = (error: unknown) => {\n      if (settled) return;\n      settled = true;\n      cleanup();\n      reject(error);\n    };\n    const helperLeft = () =>\n      isAbortError(signal.reason) ? signal.reason : abortError(\"The helper left.\");\n    const onData = (chunk: Buffer | string) => {\n      const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);\n      bytes += buffer.length;\n      if (bytes > 4_096) {\n        req.pause();\n        fail(\n          new UnreadSupportPassportRequestError(\n            new SupportPassportError(\"invalid_input\", \"The helper question is invalid.\", 400)\n          )\n        );\n        return;\n      }\n      chunks.push(buffer);\n    };\n    const onEnd = () => {\n      if (settled) return;\n      settled = true;\n      cleanup();\n      resolve(Buffer.concat(chunks, bytes));\n    };\n    const onError = (error: Error) => fail(signal.aborted || req.aborted ? helperLeft() : error);\n    const onAborted = () => fail(helperLeft());\n    const onSignalAbort = () => fail(helperLeft());\n    req.on(\"data\", onData);\n    req.once(\"end\", onEnd);\n    req.once(\"error\", onError);\n    req.once(\"aborted\", onAborted);\n    signal.addEventListener(\"abort\", onSignalAbort, { once: true });\n    if (signal.aborted) onSignalAbort();\n  });\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(content.toString(\"utf8\"));\n  } catch {\n    throw new SupportPassportError(\"invalid_input\", \"The helper question is invalid.\", 400);\n  }\n  if (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n    throw new SupportPassportError(\"invalid_input\", \"The helper question is invalid.\", 400);\n  }\n  const body = parsed as Record<string, unknown>;\n  if (Object.keys(body).length !== 1 || typeof body.question !== \"string\") {\n    throw new SupportPassportError(\"invalid_input\", \"The helper question is invalid.\", 400);\n  }\n  const question = body.question.trim();\n  if (question.length < 1 || question.length > 500) {\n    throw new SupportPassportError(\"invalid_input\", \"The helper question is invalid.\", 400);\n  }\n  return question;\n}\n\nfunction requestSignal(req: IncomingMessage, res: ServerResponse): { signal: AbortSignal; cleanup(): void } {\n  const controller = new AbortController();\n  const abort = () => {\n    if (!res.writableFinished && !controller.signal.aborted) controller.abort(abortError(\"The helper left.\"));\n  };\n  req.once(\"aborted\", abort);\n  res.once(\"close\", abort);\n  return {\n    signal: controller.signal,\n    cleanup: () => {\n      req.off(\"aborted\", abort);\n      res.off(\"close\", abort);\n    },\n  };\n}\n\nfunction decodeGrantId(raw: string): string | undefined {\n  try {\n    const value = decodeURIComponent(raw);\n    return /^[A-Za-z0-9_-]{1,128}$/.test(value) ? value.toLowerCase() : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nexport function buildSupportPassportPublicRequestHandler(\n  service: EngramAccessService,\n  options: SupportPassportPublicHandlerOptions = {}\n): SupportPassportExternalRequestHandler {\n  const rateLimits = createRateLimits(options.now ?? Date.now);\n  const trustedProxyAddresses = new Set(\n    (options.trustedProxyAddresses ?? [])\n      .map((address) => normalizeSupportPassportNetworkAddress(address))\n      .filter((address): address is string => address !== undefined)\n  );\n  return async (req, res) => {\n    let parsed: URL;\n    try {\n      parsed = new URL(req.url ?? \"/\", \"http://placeholder\");\n    } catch {\n      return false;\n    }\n    const readMatch = /^\\/engram\\/v1\\/support-passport\\/public\\/grants\\/([^/]+)$/.exec(parsed.pathname);\n    const askMatch = /^\\/engram\\/v1\\/support-passport\\/public\\/grants\\/([^/]+)\\/ask$/.exec(parsed.pathname);\n    const ownedRead = req.method === \"GET\" && readMatch;\n    const ownedQuestion = req.method === \"POST\" && askMatch;\n    if (!ownedRead && !ownedQuestion) return false;\n\n    res.setHeader(\"cache-control\", \"private, no-store\");\n    res.setHeader(\"vary\", \"Authorization\");\n    const grantId = decodeGrantId((ownedRead ? readMatch?.[1] : askMatch?.[1]) ?? \"\");\n    const secret = parseSecret(req);\n    if (parsed.search.length > 0) {\n      respondBeforeReadingBody(req, res, 400, {\n        error: \"The share link request is invalid.\",\n        code: \"invalid_input\",\n      });\n      return true;\n    }\n    if (ownedRead && requestDeclaresBody(req)) {\n      respondJsonAndCloseUnreadRequest(req, res, 400, {\n        error: \"The share link request is invalid.\",\n        code: \"invalid_input\",\n      });\n      return true;\n    }\n    if (!grantId || !secret) {\n      respondBeforeReadingBody(req, res, 404, {\n        error: \"The share link was not found.\",\n        code: \"grant_not_found\",\n      });\n      return true;\n    }\n\n    const lifecycle = requestSignal(req, res);\n    try {\n      const digest = networkDigest(req, trustedProxyAddresses);\n      if (ownedRead) {\n        const guide = await readGrantWithRateLimits(\n          service,\n          grantId,\n          secret,\n          digest,\n          rateLimits.networkReads,\n          rateLimits.grantReads,\n          rateLimits.networkReadFailures,\n          rateLimits.authentications\n        );\n        respondJson(res, 200, guide);\n      } else {\n        let releaseAuthentication = rateLimits.authentications.reserve(digest);\n        if (!releaseAuthentication) throw new UnreadSupportPassportRequestError(rateLimited());\n        try {\n          let question: string;\n          const bodyFailure = rateLimits.networkQuestionFailures.reserve(digest);\n          if (!bodyFailure) throw new UnreadSupportPassportRequestError(rateLimited());\n          try {\n            question = await readQuestionBody(req, lifecycle.signal);\n            bodyFailure.release();\n          } catch (error) {\n            const supportError =\n              error instanceof UnreadSupportPassportRequestError ? error.response : error;\n            if (supportError instanceof SupportPassportError && supportError.code === \"invalid_input\") {\n              bodyFailure.commit();\n            } else {\n              bodyFailure.release();\n            }\n            throw error;\n          }\n          const releaseModelCall = rateLimits.modelCalls.reserve(digest);\n          if (!releaseModelCall) throw rateLimited();\n          try {\n            await readGrantUnderAuthenticationReservation(\n              service,\n              grantId,\n              secret,\n              digest,\n              rateLimits.networkQuestions,\n              rateLimits.grantQuestions,\n              rateLimits.networkQuestionFailures\n            );\n            releaseAuthentication();\n            releaseAuthentication = undefined;\n            const answer = await runPublicOperation(\n              service,\n              \"support_passport_grant_ask\",\n              { grantId, secret, question },\n              lifecycle.signal\n            );\n            respondJson(res, 200, answer);\n          } finally {\n            releaseModelCall();\n          }\n        } finally {\n          releaseAuthentication?.();\n        }\n      }\n    } catch (error) {\n      if (error instanceof UnreadSupportPassportRequestError) {\n        respondJsonAndCloseUnreadRequest(req, res, error.response.status, {\n          error: error.response.message,\n          code: error.response.code,\n        });\n        return true;\n      }\n      if (!(error instanceof SupportPassportError)) throw error;\n      respondJson(res, error.status, { error: error.message, code: error.code });\n    } finally {\n      lifecycle.cleanup();\n    }\n    return true;\n  };\n}\n\nexport function composeSupportPassportExternalRequestHandlers(\n  ...handlers: Array<SupportPassportExternalRequestHandler | undefined>\n): SupportPassportExternalRequestHandler {\n  return async (req, res, ctx) => {\n    for (const handler of handlers) {\n      if (handler && (await handler(req, res, ctx))) return true;\n    }\n    return false;\n  };\n}\n"],"mappings":";;;;;;;;;;AAAA,SAAS,kBAAkB;AAE3B,SAAS,YAAY;AAOrB,IAAM,6BAA6B;AACnC,IAAM,wCAAwC;AAC9C,IAAM,kCAAkC;AACxC,IAAM,yCAAyC;AAC/C,IAAM,mCAAmC;AAElC,IAAM,sCAAsC;AAAA,EACjD;AAAA,IACE,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,WAAW;AAAA,EACb;AAAA,EACA;AAAA,IACE,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,WAAW;AAAA,EACb;AACF;AAqBA,IAAM,oCAAN,cAAgD,MAAM;AAAA,EACpD,YAAqB,UAAgC;AACnD,UAAM,SAAS,OAAO;AADH;AAEnB,SAAK,OAAO;AAAA,EACd;AAAA,EAHqB;AAIvB;AAEA,IAAM,qBAAN,MAAyB;AAAA,EAGvB,YACmB,OACA,UACA,KACjB;AAHiB;AACA;AACA;AAAA,EAChB;AAAA,EAHgB;AAAA,EACA;AAAA,EACA;AAAA,EALF,UAAU,oBAAI,IAAyB;AAAA,EAQxD,QAAQ,KAAsB;AAC5B,UAAM,cAAc,KAAK,QAAQ,GAAG;AACpC,QAAI,CAAC,YAAa,QAAO;AACzB,gBAAY,OAAO;AACnB,WAAO;AAAA,EACT;AAAA,EAEA,QAAQ,KAA4C;AAClD,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,QAAQ,KAAK,QAAQ,IAAI,GAAG;AAChC,QAAI,CAAC,SAAS,MAAM,WAAW,KAAK;AAClC,UAAI,CAAC,SAAS,KAAK,QAAQ,QAAQ,4BAA4B;AAC7D,aAAK,MAAM,GAAG;AACd,YAAI,KAAK,QAAQ,QAAQ,2BAA4B,QAAO;AAAA,MAC9D;AACA,cAAQ,EAAE,OAAO,GAAG,SAAS,MAAM,KAAK,SAAS;AACjD,WAAK,QAAQ,IAAI,KAAK,KAAK;AAAA,IAC7B;AACA,QAAI,MAAM,SAAS,KAAK,MAAO,QAAO;AACtC,UAAM,SAAS;AACf,QAAI,SAAS;AACb,WAAO;AAAA,MACL,QAAQ,MAAM;AACZ,iBAAS;AAAA,MACX;AAAA,MACA,SAAS,MAAM;AACb,YAAI,CAAC,OAAQ;AACb,iBAAS;AACT,YAAI,KAAK,QAAQ,IAAI,GAAG,MAAM,MAAO;AACrC,cAAM,SAAS;AACf,YAAI,MAAM,UAAU,EAAG,MAAK,QAAQ,OAAO,GAAG;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,OAAO,KAAsB;AAC3B,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,UAAU,KAAK,QAAQ,IAAI,GAAG;AACpC,QAAI,WAAW,QAAQ,UAAU,IAAK,QAAO,QAAQ,QAAQ,KAAK;AAClE,QAAI,CAAC,WAAW,KAAK,QAAQ,QAAQ,4BAA4B;AAC/D,WAAK,MAAM,GAAG;AACd,UAAI,KAAK,QAAQ,QAAQ,2BAA4B,QAAO;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,MAAM,KAAmB;AAC/B,eAAW,CAAC,KAAK,KAAK,KAAK,KAAK,SAAS;AACvC,UAAI,MAAM,WAAW,IAAK,MAAK,QAAQ,OAAO,GAAG;AAAA,IACnD;AAAA,EACF;AACF;AAEA,IAAM,kBAAN,MAAsB;AAAA,EAIpB,YACmB,aACA,YACjB;AAFiB;AACA;AAAA,EAChB;AAAA,EAFgB;AAAA,EACA;AAAA,EALF,SAAS,oBAAI,IAAoB;AAAA,EAC1C,QAAQ;AAAA,EAOhB,QAAQ,KAAuC;AAC7C,UAAM,UAAU,KAAK,OAAO,IAAI,GAAG,KAAK;AACxC,QAAI,WAAW,KAAK,eAAe,KAAK,SAAS,KAAK,WAAY,QAAO;AACzE,SAAK,OAAO,IAAI,KAAK,UAAU,CAAC;AAChC,SAAK,SAAS;AACd,QAAI,SAAS;AACb,WAAO,MAAM;AACX,UAAI,CAAC,OAAQ;AACb,eAAS;AACT,YAAM,QAAQ,KAAK,OAAO,IAAI,GAAG,KAAK;AACtC,UAAI,SAAS,EAAG,MAAK,OAAO,OAAO,GAAG;AAAA,UACjC,MAAK,OAAO,IAAI,KAAK,QAAQ,CAAC;AACnC,WAAK,SAAS;AAAA,IAChB;AAAA,EACF;AACF;AAkBA,SAAS,iBAAiB,KAAqC;AAC7D,SAAO;AAAA,IACL,iBAAiB,IAAI,gBAAgB,uCAAuC,+BAA+B;AAAA,IAC3G,YAAY,IAAI,gBAAgB,wCAAwC,gCAAgC;AAAA,IACxG,YAAY,IAAI,mBAAmB,IAAI,KAAQ,GAAG;AAAA,IAClD,cAAc,IAAI,mBAAmB,IAAI,KAAQ,GAAG;AAAA,IACpD,qBAAqB,IAAI,mBAAmB,IAAI,KAAQ,GAAG;AAAA,IAC3D,gBAAgB,IAAI,mBAAmB,IAAI,KAAK,KAAQ,GAAG;AAAA,IAC3D,kBAAkB,IAAI,mBAAmB,IAAI,KAAK,KAAQ,GAAG;AAAA,IAC7D,yBAAyB,IAAI,mBAAmB,IAAI,KAAK,KAAQ,GAAG;AAAA,EACtE;AACF;AAEA,SAAS,cAAoC;AAC3C,SAAO,IAAI,qBAAqB,gBAAgB,6BAA6B,GAAG;AAClF;AAEA,eAAe,mBACb,SACA,MACA,OACA,QACkB;AAClB,QAAM,YAAY,aAAa,IAAI;AACnC,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,8CAA8C,IAAI,EAAE;AACpF,QAAM,SAAU,MAAM,UAAU,IAAI,OAAO;AAAA,IACzC;AAAA,IACA,GAAI,SAAS,EAAE,aAAa,OAAO,IAAI,CAAC;AAAA,EAC1C,CAAC;AACD,SAAO,OAAO;AAChB;AAEA,SAAS,2BACP,gBACA,cACA,YACA,SACmB;AACnB,QAAM,UAAU,eAAe,QAAQ,UAAU;AACjD,MAAI,CAAC,QAAS,OAAM,YAAY;AAChC,QAAM,QAAQ,aAAa,QAAQ,OAAO;AAC1C,MAAI,CAAC,OAAO;AACV,YAAQ,QAAQ;AAChB,UAAM,YAAY;AAAA,EACpB;AACA,MAAI,SAAS;AACb,SAAO;AAAA,IACL,QAAQ,MAAM;AACZ,UAAI,CAAC,OAAQ;AACb,eAAS;AACT,cAAQ,OAAO;AACf,YAAM,OAAO;AAAA,IACf;AAAA,IACA,SAAS,MAAM;AACb,UAAI,CAAC,OAAQ;AACb,eAAS;AACT,YAAM,QAAQ;AACd,cAAQ,QAAQ;AAAA,IAClB;AAAA,EACF;AACF;AAEA,eAAe,wCACb,SACA,SACA,QACA,YACA,gBACA,cACA,gBACA;AACA,MAAI,CAAC,eAAe,OAAO,UAAU,EAAG,OAAM,YAAY;AAC1D,QAAM,SAAS,2BAA2B,gBAAgB,cAAc,YAAY,OAAO;AAC3F,MAAI;AACJ,MAAI;AACF,YAAS,MAAM,mBAAmB,SAAS,+BAA+B,EAAE,SAAS,OAAO,CAAC;AAAA,EAG/F,SAAS,OAAO;AACd,QAAI,iBAAiB,sBAAsB;AACzC,UAAI,MAAM,SAAS,mBAAmB;AACpC,eAAO,QAAQ;AACf,YAAI,CAAC,eAAe,QAAQ,UAAU,EAAG,OAAM,YAAY;AAAA,MAC7D,OAAO;AACL,eAAO,OAAO;AAAA,MAChB;AAAA,IACF,OAAO;AACL,aAAO,QAAQ;AAAA,IACjB;AACA,UAAM;AAAA,EACR;AACA,SAAO,OAAO;AACd,SAAO;AACT;AAEA,eAAe,wBACb,SACA,SACA,QACA,YACA,gBACA,cACA,gBACA,uBACA;AACA,QAAM,wBAAwB,sBAAsB,QAAQ,UAAU;AACtE,MAAI,CAAC,sBAAuB,OAAM,YAAY;AAC9C,MAAI;AACF,WAAO,MAAM;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF,UAAE;AACA,0BAAsB;AAAA,EACxB;AACF;AAEO,SAAS,uCAAuC,OAA+C;AACpG,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,UAAU,MAAM,KAAK,EAAE,YAAY;AACzC,QAAM,SAAS,KAAK,OAAO;AAC3B,MAAI,WAAW,EAAG,QAAO;AACzB,MAAI,WAAW,EAAG,QAAO;AACzB,QAAM,YAAY,IAAI,IAAI,WAAW,OAAO,IAAI,EAAE,SAAS,MAAM,GAAG,EAAE;AACtE,QAAM,SAAS,2CAA2C,KAAK,SAAS;AACxE,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,OAAO,OAAO,SAAS,OAAO,CAAC,KAAK,IAAI,EAAE;AAChD,QAAM,MAAM,OAAO,SAAS,OAAO,CAAC,KAAK,IAAI,EAAE;AAC/C,SAAO,GAAG,SAAS,CAAC,IAAI,OAAO,GAAI,IAAI,QAAQ,CAAC,IAAI,MAAM,GAAI;AAChE;AAEA,SAAS,sBAAsB,KAAsB,uBAAoD;AACvG,QAAM,gBAAgB,uCAAuC,IAAI,OAAO,aAAa,KAAK;AAC1F,MAAI,CAAC,sBAAsB,IAAI,aAAa,EAAG,QAAO;AACtD,QAAM,YAAY,IAAI,QAAQ,iBAAiB;AAC/C,MAAI,OAAO,cAAc,SAAU,QAAO;AAC1C,QAAM,eAAe,UAAU,MAAM,GAAG;AACxC,MAAI,aAAa,SAAS,KAAK,aAAa,SAAS,GAAI,QAAO;AAChE,QAAM,YAAY,aAAa,IAAI,CAAC,YAAY,uCAAuC,OAAO,CAAC;AAC/F,MAAI,UAAU,KAAK,CAAC,YAAY,YAAY,MAAS,EAAG,QAAO;AAC/D,WAAS,QAAQ,UAAU,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG;AAC7D,UAAM,UAAU,UAAU,KAAK;AAC/B,QAAI,WAAW,CAAC,sBAAsB,IAAI,OAAO,EAAG,QAAO;AAAA,EAC7D;AACA,SAAO,UAAU,CAAC,KAAK;AACzB;AAEA,SAAS,cAAc,KAAsB,uBAAoD;AAC/F,SAAO,WAAW,QAAQ,EACvB,OAAO,sBAAsB,KAAK,qBAAqB,CAAC,EACxD,OAAO,KAAK;AACjB;AAEA,SAAS,YAAY,KAA0C;AAC7D,QAAM,MAAM,IAAI,QAAQ;AACxB,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,QAAM,QAAQ,qBAAqB,KAAK,GAAG;AAC3C,MAAI,CAAC,SAAS,MAAM,CAAC,GAAG,YAAY,MAAM,kBAAmB,QAAO;AACpE,QAAM,SAAS,MAAM,CAAC,KAAK;AAC3B,MAAI,CAAC,0BAA0B,KAAK,MAAM,EAAG,QAAO;AACpD,SAAO;AACT;AAEA,SAAS,oBAAoB,KAA+B;AAC1D,QAAM,gBAAgB,IAAI,QAAQ,gBAAgB;AAClD,QAAM,mBAAmB,IAAI,QAAQ,mBAAmB;AACxD,SAAO,qBAAqB,UAAc,kBAAkB,UAAa,kBAAkB;AAC7F;AAEA,SAAS,YAAY,KAAqB,QAAgB,SAAwB;AAChF,QAAM,OAAO,KAAK,UAAU,OAAO;AACnC,MAAI,aAAa;AACjB,MAAI,UAAU,iBAAiB,mBAAmB;AAClD,MAAI,UAAU,QAAQ,eAAe;AACrC,MAAI,UAAU,gBAAgB,iCAAiC;AAC/D,MAAI,UAAU,kBAAkB,OAAO,OAAO,WAAW,IAAI,CAAC,CAAC;AAC/D,MAAI,IAAI,IAAI;AACd;AAEA,SAAS,iCACP,KACA,KACA,QACA,SACM;AACN,MAAI,kBAAkB;AACtB,MAAI,UAAU,cAAc,OAAO;AACnC,MAAI,KAAK,UAAU,MAAM,IAAI,QAAQ,CAAC;AACtC,cAAY,KAAK,QAAQ,OAAO;AAClC;AAEA,SAAS,yBACP,KACA,KACA,QACA,SACM;AACN,MAAI,oBAAoB,GAAG,GAAG;AAC5B,qCAAiC,KAAK,KAAK,QAAQ,OAAO;AAC1D;AAAA,EACF;AACA,cAAY,KAAK,QAAQ,OAAO;AAClC;AAEA,eAAe,iBAAiB,KAAsB,QAAsC;AAC1F,QAAM,UAAU,MAAM,IAAI,QAAgB,CAAC,SAAS,WAAW;AAC7D,UAAM,SAAmB,CAAC;AAC1B,QAAI,QAAQ;AACZ,QAAI,UAAU;AACd,UAAM,UAAU,MAAM;AACpB,UAAI,IAAI,QAAQ,MAAM;AACtB,UAAI,IAAI,OAAO,KAAK;AACpB,UAAI,IAAI,SAAS,OAAO;AACxB,UAAI,IAAI,WAAW,SAAS;AAC5B,aAAO,oBAAoB,SAAS,aAAa;AAAA,IACnD;AACA,UAAM,OAAO,CAAC,UAAmB;AAC/B,UAAI,QAAS;AACb,gBAAU;AACV,cAAQ;AACR,aAAO,KAAK;AAAA,IACd;AACA,UAAM,aAAa,MACjB,aAAa,OAAO,MAAM,IAAI,OAAO,SAAS,WAAW,kBAAkB;AAC7E,UAAM,SAAS,CAAC,UAA2B;AACzC,YAAM,SAAS,OAAO,SAAS,KAAK,IAAI,QAAQ,OAAO,KAAK,KAAK;AACjE,eAAS,OAAO;AAChB,UAAI,QAAQ,MAAO;AACjB,YAAI,MAAM;AACV;AAAA,UACE,IAAI;AAAA,YACF,IAAI,qBAAqB,iBAAiB,mCAAmC,GAAG;AAAA,UAClF;AAAA,QACF;AACA;AAAA,MACF;AACA,aAAO,KAAK,MAAM;AAAA,IACpB;AACA,UAAM,QAAQ,MAAM;AAClB,UAAI,QAAS;AACb,gBAAU;AACV,cAAQ;AACR,cAAQ,OAAO,OAAO,QAAQ,KAAK,CAAC;AAAA,IACtC;AACA,UAAM,UAAU,CAAC,UAAiB,KAAK,OAAO,WAAW,IAAI,UAAU,WAAW,IAAI,KAAK;AAC3F,UAAM,YAAY,MAAM,KAAK,WAAW,CAAC;AACzC,UAAM,gBAAgB,MAAM,KAAK,WAAW,CAAC;AAC7C,QAAI,GAAG,QAAQ,MAAM;AACrB,QAAI,KAAK,OAAO,KAAK;AACrB,QAAI,KAAK,SAAS,OAAO;AACzB,QAAI,KAAK,WAAW,SAAS;AAC7B,WAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AAC9D,QAAI,OAAO,QAAS,eAAc;AAAA,EACpC,CAAC;AACD,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,QAAQ,SAAS,MAAM,CAAC;AAAA,EAC9C,QAAQ;AACN,UAAM,IAAI,qBAAqB,iBAAiB,mCAAmC,GAAG;AAAA,EACxF;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG;AAClE,UAAM,IAAI,qBAAqB,iBAAiB,mCAAmC,GAAG;AAAA,EACxF;AACA,QAAM,OAAO;AACb,MAAI,OAAO,KAAK,IAAI,EAAE,WAAW,KAAK,OAAO,KAAK,aAAa,UAAU;AACvE,UAAM,IAAI,qBAAqB,iBAAiB,mCAAmC,GAAG;AAAA,EACxF;AACA,QAAM,WAAW,KAAK,SAAS,KAAK;AACpC,MAAI,SAAS,SAAS,KAAK,SAAS,SAAS,KAAK;AAChD,UAAM,IAAI,qBAAqB,iBAAiB,mCAAmC,GAAG;AAAA,EACxF;AACA,SAAO;AACT;AAEA,SAAS,cAAc,KAAsB,KAA+D;AAC1G,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,MAAM;AAClB,QAAI,CAAC,IAAI,oBAAoB,CAAC,WAAW,OAAO,QAAS,YAAW,MAAM,WAAW,kBAAkB,CAAC;AAAA,EAC1G;AACA,MAAI,KAAK,WAAW,KAAK;AACzB,MAAI,KAAK,SAAS,KAAK;AACvB,SAAO;AAAA,IACL,QAAQ,WAAW;AAAA,IACnB,SAAS,MAAM;AACb,UAAI,IAAI,WAAW,KAAK;AACxB,UAAI,IAAI,SAAS,KAAK;AAAA,IACxB;AAAA,EACF;AACF;AAEA,SAAS,cAAc,KAAiC;AACtD,MAAI;AACF,UAAM,QAAQ,mBAAmB,GAAG;AACpC,WAAO,yBAAyB,KAAK,KAAK,IAAI,MAAM,YAAY,IAAI;AAAA,EACtE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,yCACd,SACA,UAA+C,CAAC,GACT;AACvC,QAAM,aAAa,iBAAiB,QAAQ,OAAO,KAAK,GAAG;AAC3D,QAAM,wBAAwB,IAAI;AAAA,KAC/B,QAAQ,yBAAyB,CAAC,GAChC,IAAI,CAAC,YAAY,uCAAuC,OAAO,CAAC,EAChE,OAAO,CAAC,YAA+B,YAAY,MAAS;AAAA,EACjE;AACA,SAAO,OAAO,KAAK,QAAQ;AACzB,QAAI;AACJ,QAAI;AACF,eAAS,IAAI,IAAI,IAAI,OAAO,KAAK,oBAAoB;AAAA,IACvD,QAAQ;AACN,aAAO;AAAA,IACT;AACA,UAAM,YAAY,4DAA4D,KAAK,OAAO,QAAQ;AAClG,UAAM,WAAW,iEAAiE,KAAK,OAAO,QAAQ;AACtG,UAAM,YAAY,IAAI,WAAW,SAAS;AAC1C,UAAM,gBAAgB,IAAI,WAAW,UAAU;AAC/C,QAAI,CAAC,aAAa,CAAC,cAAe,QAAO;AAEzC,QAAI,UAAU,iBAAiB,mBAAmB;AAClD,QAAI,UAAU,QAAQ,eAAe;AACrC,UAAM,UAAU,eAAe,YAAY,YAAY,CAAC,IAAI,WAAW,CAAC,MAAM,EAAE;AAChF,UAAM,SAAS,YAAY,GAAG;AAC9B,QAAI,OAAO,OAAO,SAAS,GAAG;AAC5B,+BAAyB,KAAK,KAAK,KAAK;AAAA,QACtC,OAAO;AAAA,QACP,MAAM;AAAA,MACR,CAAC;AACD,aAAO;AAAA,IACT;AACA,QAAI,aAAa,oBAAoB,GAAG,GAAG;AACzC,uCAAiC,KAAK,KAAK,KAAK;AAAA,QAC9C,OAAO;AAAA,QACP,MAAM;AAAA,MACR,CAAC;AACD,aAAO;AAAA,IACT;AACA,QAAI,CAAC,WAAW,CAAC,QAAQ;AACvB,+BAAyB,KAAK,KAAK,KAAK;AAAA,QACtC,OAAO;AAAA,QACP,MAAM;AAAA,MACR,CAAC;AACD,aAAO;AAAA,IACT;AAEA,UAAM,YAAY,cAAc,KAAK,GAAG;AACxC,QAAI;AACF,YAAM,SAAS,cAAc,KAAK,qBAAqB;AACvD,UAAI,WAAW;AACb,cAAM,QAAQ,MAAM;AAAA,UAClB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA,WAAW;AAAA,UACX,WAAW;AAAA,UACX,WAAW;AAAA,UACX,WAAW;AAAA,QACb;AACA,oBAAY,KAAK,KAAK,KAAK;AAAA,MAC7B,OAAO;AACL,YAAI,wBAAwB,WAAW,gBAAgB,QAAQ,MAAM;AACrE,YAAI,CAAC,sBAAuB,OAAM,IAAI,kCAAkC,YAAY,CAAC;AACrF,YAAI;AACF,cAAI;AACJ,gBAAM,cAAc,WAAW,wBAAwB,QAAQ,MAAM;AACrE,cAAI,CAAC,YAAa,OAAM,IAAI,kCAAkC,YAAY,CAAC;AAC3E,cAAI;AACF,uBAAW,MAAM,iBAAiB,KAAK,UAAU,MAAM;AACvD,wBAAY,QAAQ;AAAA,UACtB,SAAS,OAAO;AACd,kBAAM,eACJ,iBAAiB,oCAAoC,MAAM,WAAW;AACxE,gBAAI,wBAAwB,wBAAwB,aAAa,SAAS,iBAAiB;AACzF,0BAAY,OAAO;AAAA,YACrB,OAAO;AACL,0BAAY,QAAQ;AAAA,YACtB;AACA,kBAAM;AAAA,UACR;AACA,gBAAM,mBAAmB,WAAW,WAAW,QAAQ,MAAM;AAC7D,cAAI,CAAC,iBAAkB,OAAM,YAAY;AACzC,cAAI;AACF,kBAAM;AAAA,cACJ;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,cACA,WAAW;AAAA,cACX,WAAW;AAAA,cACX,WAAW;AAAA,YACb;AACA,kCAAsB;AACtB,oCAAwB;AACxB,kBAAM,SAAS,MAAM;AAAA,cACnB;AAAA,cACA;AAAA,cACA,EAAE,SAAS,QAAQ,SAAS;AAAA,cAC5B,UAAU;AAAA,YACZ;AACA,wBAAY,KAAK,KAAK,MAAM;AAAA,UAC9B,UAAE;AACA,6BAAiB;AAAA,UACnB;AAAA,QACF,UAAE;AACA,kCAAwB;AAAA,QAC1B;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AACd,UAAI,iBAAiB,mCAAmC;AACtD,yCAAiC,KAAK,KAAK,MAAM,SAAS,QAAQ;AAAA,UAChE,OAAO,MAAM,SAAS;AAAA,UACtB,MAAM,MAAM,SAAS;AAAA,QACvB,CAAC;AACD,eAAO;AAAA,MACT;AACA,UAAI,EAAE,iBAAiB,sBAAuB,OAAM;AACpD,kBAAY,KAAK,MAAM,QAAQ,EAAE,OAAO,MAAM,SAAS,MAAM,MAAM,KAAK,CAAC;AAAA,IAC3E,UAAE;AACA,gBAAU,QAAQ;AAAA,IACpB;AACA,WAAO;AAAA,EACT;AACF;AAEO,SAAS,iDACX,UACoC;AACvC,SAAO,OAAO,KAAK,KAAK,QAAQ;AAC9B,eAAW,WAAW,UAAU;AAC9B,UAAI,WAAY,MAAM,QAAQ,KAAK,KAAK,GAAG,EAAI,QAAO;AAAA,IACxD;AACA,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/chunk-3HSRWJTC.js

@@ -0,0 +1,9 @@
+// src/inline-script.ts
+function serializeInlineScriptValue(value) {
+  return JSON.stringify(value).replaceAll("<", "\\u003c").replaceAll("\u2028", "\\u2028").replaceAll("\u2029", "\\u2029");
+}
+
+export {
+  serializeInlineScriptValue
+};
+//# sourceMappingURL=chunk-3HSRWJTC.js.map

package/dist/chunk-3HSRWJTC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/inline-script.ts"],"sourcesContent":["export function serializeInlineScriptValue(value: string): string {\n  return JSON.stringify(value)\n    .replaceAll(\"<\", \"\\\\u003c\")\n    .replaceAll(\"\\u2028\", \"\\\\u2028\")\n    .replaceAll(\"\\u2029\", \"\\\\u2029\");\n}\n"],"mappings":";AAAO,SAAS,2BAA2B,OAAuB;AAChE,SAAO,KAAK,UAAU,KAAK,EACxB,WAAW,KAAK,SAAS,EACzB,WAAW,UAAU,SAAS,EAC9B,WAAW,UAAU,SAAS;AACnC;","names":[]}

package/dist/{chunk-XUAMCLY4.js → chunk-3TIZPSJC.js}

@@ -7,10 +7,10 @@ import {
 import {
   listMemoryGovernanceRuns,
   readMemoryGovernanceRunArtifact
-} from "./chunk-6LAPLZOS.js";
+} from "./chunk-GJ776BC2.js";
 import {
   StorageManager
-} from "./chunk-6R4G7N4S.js";
+} from "./chunk-M4YHAODQ.js";
 import {
   normalizeProjectionPreview,
   normalizeProjectionTags
@@ -24,7 +24,7 @@ import {
   readProjectedGovernanceRows,
   readProjectedNativeKnowledgeRows,
   writeProjectionMetaHighWater
-} from "./chunk-7FGL6CGA.js";
+} from "./chunk-DVYRD4HY.js";
 import {
   MEMORY_LIFECYCLE_EVENT_SORT_ORDER,
   buildLifecycleEventsForMemory,
@@ -41,10 +41,13 @@ import {
   memoryCurrentSelectExpressions,
   parseCurrentRow,
   parseTimelineRows
-} from "./chunk-3CSX3ETE.js";
+} from "./chunk-2LWQSV6A.js";
 import {
   openBetterSqlite3
 } from "./chunk-RL6NEVXT.js";
+import {
+  isSupportPassportPrivateMemory
+} from "./chunk-XX4HPFFM.js";
 import {
   log
 } from "./chunk-3WCASNQZ.js";
@@ -98,7 +101,8 @@ function toCurrentStateRow(memoryDir, memory) {
     accessCount: memory.frontmatter.accessCount,
     lastAccessed: memory.frontmatter.lastAccessed,
     tags: normalizeProjectionTags(memory.frontmatter.tags),
-    preview: normalizeProjectionPreview(memory.content)
+    preview: normalizeProjectionPreview(memory.content),
+    privateRecord: isSupportPassportPrivateMemory(memory)
   };
 }
 function buildEntityMentionRows(currentRows) {
@@ -247,7 +251,8 @@ function serializeCurrentStateRow(row) {
     accessCount: row.accessCount ?? null,
     lastAccessed: row.lastAccessed ?? null,
     tags: row.tags ?? [],
-    preview: row.preview ?? ""
+    preview: row.preview ?? "",
+    privateRecord: row.privateRecord === true
   });
 }
 function serializeTimelineEvent(event) {
@@ -461,8 +466,7 @@ function readProjectedCurrentRows(memoryDir) {
           memory_kind,
           access_count,
           last_accessed,
-          ${selectExpressions.tagsJson},
-          ${selectExpressions.previewText}
+          ${selectExpressions.tagsJson}, ${selectExpressions.previewText}, ${selectExpressions.privateRecord}
         FROM memory_current
       `).all();
       return {
@@ -537,9 +541,8 @@ function writeProjectionDb(dbPath, nowIso, currentRows, timelineRows, entityMent
         memory_kind,
         access_count,
         last_accessed,
-        tags_json,
-        preview_text
-      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+        tags_json, preview_text, private_record
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
     `);
     const insertTimeline = db.prepare(`
       INSERT INTO memory_timeline (
@@ -643,7 +646,8 @@ function writeProjectionDb(dbPath, nowIso, currentRows, timelineRows, entityMent
           row.accessCount ?? null,
           row.lastAccessed ?? null,
           JSON.stringify(row.tags ?? []),
-          row.preview ?? ""
+          row.preview ?? "",
+          row.privateRecord === true ? 1 : 0
         );
       }
       for (const event of timelineRows) {
@@ -1001,4 +1005,4 @@ export {
   verifyMemoryProjection,
   repairMemoryProjection
 };
-//# sourceMappingURL=chunk-XUAMCLY4.js.map
+//# sourceMappingURL=chunk-3TIZPSJC.js.map

package/dist/chunk-3TIZPSJC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/maintenance/rebuild-memory-projection.ts"],"sourcesContent":["import path from \"node:path\";\nimport { mkdir, rm, stat } from \"node:fs/promises\";\nimport { StorageManager } from \"../storage.js\";\nimport { log } from \"../logger.js\";\nimport {\n  listMemoryGovernanceRuns,\n  readMemoryGovernanceRunArtifact,\n} from \"./memory-governance.js\";\nimport { loadPersistedNativeKnowledgeChunks } from \"../native-knowledge.js\";\nimport { toBackupStamp } from \"./backup-stamp.js\";\nimport type {\n  MemoryFile,\n  MemoryLifecycleEvent,\n  MemoryProjectionCurrentState,\n  MemoryStatus,\n} from \"../types.js\";\nimport {\n  buildLifecycleEventsForMemory,\n  inferMemoryStatus,\n  MEMORY_LIFECYCLE_EVENT_SORT_ORDER,\n  memoryLifecycleEventProjectionIdentity,\n  sortMemoryLifecycleEvents,\n  toMemoryPathRel,\n} from \"../memory-lifecycle-ledger-utils.js\";\nimport {\n  getMemoryProjectionPath,\n  initializeMemoryProjectionDb,\n  isProjectedMemoryPathValid,\n  type ProjectedEntityMentionRow,\n  type MemoryProjectionGovernanceAppliedActionRow,\n  type MemoryProjectionGovernanceReviewQueueRow,\n  type ProjectedNativeKnowledgeChunkRow,\n  MEMORY_PROJECTION_SCHEMA_VERSION,\n  memoryCurrentSelectExpressions,\n  parseCurrentRow,\n  readProjectedEntityMentions,\n  readProjectedGovernanceRecord,\n  readProjectedNativeKnowledgeChunks,\n  parseTimelineRows,\n} from \"../memory-projection-store.js\";\nimport {\n  normalizeProjectionPreview,\n  normalizeProjectionTags,\n} from \"../memory-projection-format.js\";\nimport { openBetterSqlite3 } from \"../runtime/better-sqlite.js\";\nimport { commitPreparedFileAtomically } from \"./atomic-file.js\";\nimport { isSupportPassportPrivateMemory } from \"../support-passport/card-projection.js\";\n\nexport interface RebuildMemoryProjectionOptions {\n  memoryDir: string;\n  /** Reuse the caller's live StorageManager (must be rooted at memoryDir). */\n  storage?: StorageManager;\n  defaultNamespace?: string;\n  dryRun?: boolean;\n  now?: Date;\n  updatedAfter?: string;\n  updatedBefore?: string;\n}\n\nexport type {\n  SkippedBlankIdMemory,\n  SkippedBlankIdTimelineEvent,\n  SkippedDuplicateMemory,\n  SkippedDuplicateTimelineEvent,\n} from \"./projection-support.js\";\nimport {\n  assertInjectedStorageRooted,\n  readProjectedEntityMentionRows,\n  readProjectedGovernanceRows,\n  readProjectedNativeKnowledgeRows,\n  writeProjectionMetaHighWater,\n} from \"./projection-support.js\";\nimport type {\n  SkippedBlankIdMemory,\n  SkippedBlankIdTimelineEvent,\n  SkippedDuplicateMemory,\n  SkippedDuplicateTimelineEvent,\n} from \"./projection-support.js\";\n\n\nexport interface RebuildMemoryProjectionResult {\n  dryRun: boolean;\n  scannedMemories: number;\n  currentRows: number;\n  timelineRows: number;\n  entityMentionRows: number;\n  nativeKnowledgeRows: number;\n  reviewQueueRows: number;\n  outputPath: string;\n  backupPath?: string;\n  usedLifecycleLedger: boolean;\n  skippedDuplicateMemories: SkippedDuplicateMemory[];\n  skippedBlankIdMemories: SkippedBlankIdMemory[];\n  skippedDuplicateTimelineEvents: SkippedDuplicateTimelineEvent[];\n  skippedBlankIdTimelineEvents: SkippedBlankIdTimelineEvent[];\n  scope: {\n    updatedAfter: string | null;\n    updatedBefore: string | null;\n  };\n}\n\nexport interface VerifyMemoryProjectionOptions {\n  memoryDir: string;\n  defaultNamespace?: string;\n  updatedAfter?: string;\n  updatedBefore?: string;\n}\n\nexport interface VerifyMemoryProjectionResult {\n  outputPath: string;\n  projectionExists: boolean;\n  ok: boolean;\n  expectedCurrentRows: number;\n  actualCurrentRows: number;\n  expectedTimelineRows: number;\n  actualTimelineRows: number;\n  expectedEntityMentionRows: number;\n  actualEntityMentionRows: number;\n  expectedNativeKnowledgeRows: number;\n  actualNativeKnowledgeRows: number;\n  expectedReviewQueueRows: number;\n  actualReviewQueueRows: number;\n  missingCurrentMemoryIds: string[];\n  extraCurrentMemoryIds: string[];\n  mismatchedCurrentMemoryIds: string[];\n  missingTimelineEventIds: string[];\n  extraTimelineEventIds: string[];\n  missingEntityMentionKeys: string[];\n  extraEntityMentionKeys: string[];\n  mismatchedEntityMentionKeys: string[];\n  missingNativeKnowledgeChunkIds: string[];\n  extraNativeKnowledgeChunkIds: string[];\n  mismatchedNativeKnowledgeChunkIds: string[];\n  missingReviewQueueEntryIds: string[];\n  extraReviewQueueEntryIds: string[];\n  mismatchedReviewQueueEntryIds: string[];\n  usedLifecycleLedger: boolean;\n  scope: {\n    updatedAfter: string | null;\n    updatedBefore: string | null;\n  };\n}\n\nexport interface RepairMemoryProjectionOptions extends RebuildMemoryProjectionOptions {}\n\nexport interface RepairMemoryProjectionResult {\n  dryRun: boolean;\n  repaired: boolean;\n  verify: VerifyMemoryProjectionResult;\n  rebuild?: RebuildMemoryProjectionResult;\n}\n\nfunction isNodeError(err: unknown): err is NodeJS.ErrnoException {\n  return typeof err === \"object\" && err !== null && \"code\" in err;\n}\n\nexport async function backupExistingProjection(\n  memoryDir: string,\n  outputPath: string,\n  now: Date,\n): Promise<string | undefined> {\n  try {\n    await stat(outputPath);\n  } catch (err) {\n    if (isNodeError(err) && err.code === \"ENOENT\") {\n      return undefined;\n    }\n    throw err;\n  }\n\n  const backupPath = path.join(\n    memoryDir,\n    \"archive\",\n    \"memory-projection\",\n    toBackupStamp(now),\n    \"state\",\n    \"memory-projection.sqlite\",\n  );\n  return backupPath;\n}\n\nfunction inferProjectedStatus(pathRel: string, memory: MemoryFile): MemoryStatus {\n  return inferMemoryStatus(memory.frontmatter, pathRel);\n}\n\nfunction toCurrentStateRow(memoryDir: string, memory: MemoryFile): MemoryProjectionCurrentState {\n  const pathRel = toMemoryPathRel(memoryDir, memory.path);\n  return {\n    memoryId: memory.frontmatter.id,\n    category: memory.frontmatter.category,\n    status: inferProjectedStatus(pathRel, memory),\n    lifecycleState: memory.frontmatter.lifecycleState,\n    path: memory.path,\n    pathRel,\n    created: memory.frontmatter.created,\n    updated: memory.frontmatter.updated,\n    archivedAt: memory.frontmatter.archivedAt,\n    supersededAt: memory.frontmatter.supersededAt,\n    entityRef: memory.frontmatter.entityRef,\n    source: memory.frontmatter.source,\n    confidence: memory.frontmatter.confidence,\n    confidenceTier: memory.frontmatter.confidenceTier,\n    memoryKind: memory.frontmatter.memoryKind,\n    accessCount: memory.frontmatter.accessCount,\n    lastAccessed: memory.frontmatter.lastAccessed,\n    tags: normalizeProjectionTags(memory.frontmatter.tags),\n    preview: normalizeProjectionPreview(memory.content),\n    privateRecord: isSupportPassportPrivateMemory(memory),\n  };\n}\n\nfunction buildEntityMentionRows(\n  currentRows: MemoryProjectionCurrentState[],\n): ProjectedEntityMentionRow[] {\n  return currentRows.flatMap((row) => {\n    const mentions: ProjectedEntityMentionRow[] = [];\n    if (row.entityRef) {\n      mentions.push({\n        memoryId: row.memoryId,\n        entityRef: row.entityRef,\n        mentionSource: \"frontmatter.entityRef\",\n        created: row.created,\n        updated: row.updated,\n      });\n    }\n    for (const tag of row.tags ?? []) {\n      if (!tag.includes(\":\")) continue;\n      mentions.push({\n        memoryId: row.memoryId,\n        entityRef: tag,\n        mentionSource: \"tag\",\n        created: row.created,\n        updated: row.updated,\n      });\n    }\n    return mentions;\n  });\n}\n\nfunction buildGovernanceActionRowKey(action: {\n  action: string;\n  memoryId: string;\n  reasonCode: string;\n  originalPath: string;\n  currentPath: string;\n}): string {\n  return [\n    action.action,\n    action.memoryId,\n    action.reasonCode,\n    action.originalPath,\n    action.currentPath,\n  ].join(\"::\");\n}\n\nasync function loadLatestGovernanceProjection(memoryDir: string): Promise<{\n  runId: string;\n  summary: unknown;\n  metrics: unknown;\n  reviewQueueRows: MemoryProjectionGovernanceReviewQueueRow[];\n  appliedActionRows: MemoryProjectionGovernanceAppliedActionRow[];\n  report: string;\n} | null> {\n  const runId = (await listMemoryGovernanceRuns(memoryDir))[0];\n  if (!runId) return null;\n  try {\n    const artifact = await readMemoryGovernanceRunArtifact(memoryDir, runId);\n    return {\n      runId,\n      summary: artifact.summary,\n      metrics: artifact.metrics,\n      reviewQueueRows: artifact.reviewQueue.map((entry) => ({\n        runId,\n        entryId: entry.entryId,\n        memoryId: entry.memoryId,\n        path: entry.path,\n        reasonCode: entry.reasonCode,\n        severity: entry.severity,\n        suggestedAction: entry.suggestedAction,\n        suggestedStatus: entry.suggestedStatus,\n        relatedMemoryIds: [...entry.relatedMemoryIds],\n      })),\n      appliedActionRows: artifact.appliedActions.map((action) => ({\n        runId,\n        rowKey: buildGovernanceActionRowKey(action),\n        action: action.action,\n        memoryId: action.memoryId,\n        reasonCode: action.reasonCode,\n        beforeStatus: action.beforeStatus,\n        afterStatus: action.afterStatus,\n        originalPath: action.originalPath,\n        currentPath: action.currentPath,\n      })),\n      report: artifact.report,\n    };\n  } catch {\n    return null;\n  }\n}\n\nfunction loadTimelineEvents(\n  memories: MemoryFile[],\n  lifecycleEvents: MemoryLifecycleEvent[],\n): { events: MemoryLifecycleEvent[]; usedLifecycleLedger: boolean } {\n  if (lifecycleEvents.length > 0) {\n    return {\n      events: sortMemoryLifecycleEvents(lifecycleEvents),\n      usedLifecycleLedger: true,\n    };\n  }\n\n  return {\n    events: sortMemoryLifecycleEvents(memories.flatMap((memory) => buildLifecycleEventsForMemory(memory))),\n    usedLifecycleLedger: false,\n  };\n}\n\nfunction normalizeScopedIso(value: string | undefined): string | null {\n  if (!value) return null;\n  const trimmed = value.trim();\n  if (!trimmed) return null;\n  const parsed = new Date(trimmed);\n  if (Number.isNaN(parsed.getTime())) {\n    throw new Error(`invalid projection scope timestamp: ${value}`);\n  }\n  return parsed.toISOString();\n}\n\nfunction normalizeProjectionScope(options: {\n  updatedAfter?: string;\n  updatedBefore?: string;\n}): {\n  updatedAfter: string | null;\n  updatedBefore: string | null;\n} {\n  const updatedAfter = normalizeScopedIso(options.updatedAfter);\n  const updatedBefore = normalizeScopedIso(options.updatedBefore);\n  if (\n    updatedAfter &&\n    updatedBefore &&\n    new Date(updatedAfter).getTime() > new Date(updatedBefore).getTime()\n  ) {\n    throw new Error(\"updatedAfter must be less than or equal to updatedBefore\");\n  }\n  return {\n    updatedAfter,\n    updatedBefore,\n  };\n}\n\nfunction hasScopedProjectionFilter(scope: {\n  updatedAfter: string | null;\n  updatedBefore: string | null;\n}): boolean {\n  return scope.updatedAfter !== null || scope.updatedBefore !== null;\n}\n\nfunction memoryScopeTimestamp(memory: MemoryFile): string {\n  const candidate = memory.frontmatter.updated || memory.frontmatter.created;\n  return candidate;\n}\n\nfunction isTimestampInProjectionScope(\n  timestamp: string,\n  scope: { updatedAfter: string | null; updatedBefore: string | null },\n): boolean {\n  if (!scope.updatedAfter && !scope.updatedBefore) return true;\n  const parsed = new Date(timestamp);\n  if (Number.isNaN(parsed.getTime())) return false;\n  if (scope.updatedAfter && parsed.getTime() < new Date(scope.updatedAfter).getTime()) return false;\n  if (scope.updatedBefore && parsed.getTime() >= new Date(scope.updatedBefore).getTime()) return false;\n  return true;\n}\n\nfunction filterMemoriesForProjectionScope(\n  memories: MemoryFile[],\n  scope: { updatedAfter: string | null; updatedBefore: string | null },\n): MemoryFile[] {\n  if (!scope.updatedAfter && !scope.updatedBefore) return memories;\n  return memories.filter((memory) => isTimestampInProjectionScope(memoryScopeTimestamp(memory), scope));\n}\n\nfunction filterCurrentStateRowsForProjectionScope(\n  rows: MemoryProjectionCurrentState[],\n  scope: { updatedAfter: string | null; updatedBefore: string | null },\n): MemoryProjectionCurrentState[] {\n  if (!scope.updatedAfter && !scope.updatedBefore) return rows;\n  return rows.filter((row) => isTimestampInProjectionScope(row.updated || row.created, scope));\n}\n\nfunction serializeCurrentStateRow(row: MemoryProjectionCurrentState): string {\n  return JSON.stringify({\n    memoryId: row.memoryId,\n    category: row.category,\n    status: row.status,\n    lifecycleState: row.lifecycleState ?? null,\n    pathRel: row.pathRel,\n    created: row.created,\n    updated: row.updated,\n    archivedAt: row.archivedAt ?? null,\n    supersededAt: row.supersededAt ?? null,\n    entityRef: row.entityRef ?? null,\n    source: row.source,\n    confidence: row.confidence,\n    confidenceTier: row.confidenceTier,\n    memoryKind: row.memoryKind ?? null,\n    accessCount: row.accessCount ?? null,\n    lastAccessed: row.lastAccessed ?? null,\n    tags: row.tags ?? [],\n    preview: row.preview ?? \"\",\n    privateRecord: row.privateRecord === true,\n  });\n}\n\nfunction serializeTimelineEvent(event: MemoryLifecycleEvent): string {\n  return JSON.stringify({\n    eventId: event.eventId,\n    memoryId: event.memoryId,\n    eventType: event.eventType,\n    timestamp: event.timestamp,\n    actor: event.actor,\n    reasonCode: event.reasonCode ?? null,\n    ruleVersion: event.ruleVersion,\n    relatedMemoryIds: event.relatedMemoryIds ?? [],\n    before: event.before ?? null,\n    after: event.after ?? null,\n    correlationId: event.correlationId ?? null,\n  });\n}\n\nfunction serializeEntityMentionRow(row: ProjectedEntityMentionRow): string {\n  return JSON.stringify(row);\n}\n\nfunction serializeNativeKnowledgeRow(row: ProjectedNativeKnowledgeChunkRow): string {\n  return JSON.stringify({\n    chunkId: row.chunkId,\n    sourceKind: row.sourceKind,\n    sourcePath: row.sourcePath,\n    title: row.title,\n    startLine: row.startLine,\n    endLine: row.endLine,\n    namespace: row.namespace ?? null,\n    privacyClass: row.privacyClass ?? null,\n    derivedDate: row.derivedDate ?? null,\n    sessionKey: row.sessionKey ?? null,\n    workflowKey: row.workflowKey ?? null,\n    author: row.author ?? null,\n    agent: row.agent ?? null,\n    sourceHash: row.sourceHash ?? null,\n    preview: row.preview,\n  });\n}\n\nfunction serializeGovernanceReviewQueueRow(\n  row: MemoryProjectionGovernanceReviewQueueRow,\n): string {\n  return JSON.stringify({\n    runId: row.runId,\n    entryId: row.entryId,\n    memoryId: row.memoryId,\n    path: row.path,\n    reasonCode: row.reasonCode,\n    severity: row.severity,\n    suggestedAction: row.suggestedAction,\n    suggestedStatus: row.suggestedStatus ?? null,\n    relatedMemoryIds: row.relatedMemoryIds,\n  });\n}\n\nfunction selectProjectionMemories(\n  tiers: MemoryFile[][],\n): {\n  allMemories: MemoryFile[];\n  memories: MemoryFile[];\n  skippedDuplicateMemories: SkippedDuplicateMemory[];\n  skippedBlankIdMemories: SkippedBlankIdMemory[];\n} {\n  const allMemories = tiers.flat();\n  const memories: MemoryFile[] = [];\n  const keptById = new Map<string, MemoryFile>();\n  const skippedDuplicateMemories: SkippedDuplicateMemory[] = [];\n  const skippedBlankIdMemories: SkippedBlankIdMemory[] = [];\n\n  // Tier order is authoritative: hot wins over cold, and cold wins over archive.\n  // Paths break ties within a tier so the winner does not depend on readdir order.\n  for (const tier of tiers) {\n    for (const memory of [...tier].sort((left, right) => left.path.localeCompare(right.path))) {\n      const memoryId = memory.frontmatter.id.trim();\n      if (!memoryId) {\n        skippedBlankIdMemories.push({ path: memory.path });\n        log.warn(`projection rebuild skipped blank memory id: path=${memory.path}`);\n        continue;\n      }\n      const kept = keptById.get(memoryId);\n      if (kept) {\n        skippedDuplicateMemories.push({\n          memoryId,\n          keptPath: kept.path,\n          skippedPath: memory.path,\n        });\n        log.warn(\n          `projection rebuild skipped duplicate memory id=${memoryId}: kept=${kept.path} skipped=${memory.path}`,\n        );\n        continue;\n      }\n      keptById.set(memoryId, memory);\n      memories.push(memory);\n    }\n  }\n\n  return { allMemories, memories, skippedDuplicateMemories, skippedBlankIdMemories };\n}\n\nfunction deduplicateTimelineEvents(\n  events: MemoryLifecycleEvent[],\n  sourcePathFor: (event: MemoryLifecycleEvent) => string,\n): {\n  events: MemoryLifecycleEvent[];\n  skipped: SkippedDuplicateTimelineEvent[];\n  skippedBlankIds: SkippedBlankIdTimelineEvent[];\n} {\n  const keptById = new Map<string, { event: MemoryLifecycleEvent; path: string }>();\n  const unique: MemoryLifecycleEvent[] = [];\n  const skipped: SkippedDuplicateTimelineEvent[] = [];\n  const skippedBlankIds: SkippedBlankIdTimelineEvent[] = [];\n  for (const event of sortMemoryLifecycleEvents(events)) {\n    const sourcePath = sourcePathFor(event);\n    if (!event.memoryId.trim()) {\n      skippedBlankIds.push({ eventId: event.eventId, path: sourcePath });\n      log.warn(\n        `projection rebuild skipped timeline event with blank memory id: `\n        + `event_id=${event.eventId} path=${sourcePath}`,\n      );\n      continue;\n    }\n    const kept = keptById.get(event.eventId);\n    if (kept) {\n      skipped.push({\n        eventId: event.eventId,\n        keptPath: kept.path,\n        skippedPath: sourcePath,\n      });\n      log.warn(\n        `projection rebuild skipped duplicate timeline event_id=${event.eventId}: `\n        + `kept=${kept.path} skipped=${sourcePath}`,\n      );\n      continue;\n    }\n    keptById.set(event.eventId, { event, path: sourcePath });\n    unique.push(event);\n  }\n  return { events: unique, skipped, skippedBlankIds };\n}\n\nasync function loadAuthoritativeProjectionSnapshot(options: {\n  memoryDir: string;\n  defaultNamespace?: string;\n  storage?: StorageManager;\n  updatedAfter?: string;\n  updatedBefore?: string;\n}): Promise<{\n  allMemories: MemoryFile[];\n  currentRows: MemoryProjectionCurrentState[];\n  timelineRows: MemoryLifecycleEvent[];\n  scopedCurrentRows: MemoryProjectionCurrentState[];\n  scopedTimelineRows: MemoryLifecycleEvent[];\n  entityMentionRows: ProjectedEntityMentionRow[];\n  scopedEntityMentionRows: ProjectedEntityMentionRow[];\n  nativeKnowledgeRows: ProjectedNativeKnowledgeChunkRow[];\n  governance:\n    | {\n      runId: string;\n      summary: unknown;\n      metrics: unknown;\n      reviewQueueRows: MemoryProjectionGovernanceReviewQueueRow[];\n      appliedActionRows: MemoryProjectionGovernanceAppliedActionRow[];\n      report: string;\n    }\n    | null;\n  usedLifecycleLedger: boolean;\n  sourceLifecycleLedgerEventCount: number;\n  scope: {\n    updatedAfter: string | null;\n    updatedBefore: string | null;\n  };\n  skippedDuplicateMemories: SkippedDuplicateMemory[];\n  skippedBlankIdMemories: SkippedBlankIdMemory[];\n  skippedDuplicateTimelineEvents: SkippedDuplicateTimelineEvent[];\n  skippedBlankIdTimelineEvents: SkippedBlankIdTimelineEvent[];\n}> {\n  const storage = assertInjectedStorageRooted(\"rebuildMemoryProjection\", options.memoryDir, options.storage) ?? new StorageManager(options.memoryDir);\n  // Force a fresh disk read — projection verify/rebuild must see the true\n  // on-disk state, not a potentially stale in-process cache.\n  storage.invalidateAllMemoriesCacheForDir();\n  const selected = selectProjectionMemories([\n    await storage.readAllMemories(),\n    await storage.readAllColdMemories(),\n    await storage.readArchivedMemories(),\n  ]);\n  const allMemories = selected.allMemories;\n  const projectionMemories = selected.memories;\n  const lifecycleEvents = await storage.readAllMemoryLifecycleEvents();\n  const timeline = loadTimelineEvents(projectionMemories, lifecycleEvents);\n  const lifecycleLedgerPath = path.join(\n    options.memoryDir,\n    \"state\",\n    \"memory-lifecycle-ledger.jsonl\",\n  );\n  const memoryPathById = new Map(\n    projectionMemories.map((memory) => [memory.frontmatter.id, memory.path]),\n  );\n  const deduplicatedTimeline = deduplicateTimelineEvents(\n    timeline.events,\n    (event) => timeline.usedLifecycleLedger\n      ? lifecycleLedgerPath\n      : memoryPathById.get(event.memoryId) ?? lifecycleLedgerPath,\n  );\n  const events = deduplicatedTimeline.events;\n  const usedLifecycleLedger = timeline.usedLifecycleLedger;\n  const sourceLifecycleLedgerEventCount = new Set(\n    lifecycleEvents.map(memoryLifecycleEventProjectionIdentity),\n  ).size;\n  const currentRows = projectionMemories.map((memory) => toCurrentStateRow(options.memoryDir, memory));\n  const scope = normalizeProjectionScope(options);\n  const scopedMemories = filterMemoriesForProjectionScope(projectionMemories, scope);\n  const scopedMemoryIds = new Set(scopedMemories.map((memory) => memory.frontmatter.id));\n  const nativeKnowledgeRows = await loadPersistedNativeKnowledgeChunks({\n    memoryDir: options.memoryDir,\n    defaultNamespace: options.defaultNamespace ?? \"default\",\n  }).then((rows) => rows.map((row) => ({\n    chunkId: row.chunkId,\n    sourceKind: row.sourceKind,\n    sourcePath: row.sourcePath,\n    title: row.title,\n    startLine: row.startLine,\n    endLine: row.endLine,\n    namespace: row.namespace ?? options.defaultNamespace ?? \"default\",\n    privacyClass: row.privacyClass,\n    derivedDate: row.derivedDate,\n    sessionKey: row.sessionKey,\n    workflowKey: row.workflowKey,\n    author: row.author,\n    agent: row.agent,\n    sourceHash: row.sourceHash,\n    preview: normalizeProjectionPreview(row.content),\n  })));\n  const governance = await loadLatestGovernanceProjection(options.memoryDir);\n  const entityMentionRows = buildEntityMentionRows(currentRows);\n\n  return {\n    allMemories,\n    currentRows,\n    timelineRows: events,\n    scopedCurrentRows: currentRows.filter((row) => scopedMemoryIds.has(row.memoryId)),\n    scopedTimelineRows: events.filter((event) => scopedMemoryIds.has(event.memoryId)),\n    entityMentionRows,\n    scopedEntityMentionRows: entityMentionRows.filter((row) => scopedMemoryIds.has(row.memoryId)),\n    nativeKnowledgeRows,\n    governance,\n    usedLifecycleLedger,\n    sourceLifecycleLedgerEventCount,\n    scope,\n    skippedDuplicateMemories: selected.skippedDuplicateMemories,\n    skippedBlankIdMemories: selected.skippedBlankIdMemories,\n    skippedDuplicateTimelineEvents: deduplicatedTimeline.skipped,\n    skippedBlankIdTimelineEvents: deduplicatedTimeline.skippedBlankIds,\n  };\n}\n\nfunction readProjectedCurrentRows(\n  memoryDir: string,\n): { projectionExists: boolean; rows: MemoryProjectionCurrentState[] } {\n  const dbPath = getMemoryProjectionPath(memoryDir);\n  try {\n    const db = openBetterSqlite3(dbPath, { readonly: true, fileMustExist: true });\n    try {\n      const selectExpressions = memoryCurrentSelectExpressions(db);\n      const rows = db.prepare(`\n        SELECT\n          memory_id,\n          category,\n          status,\n          lifecycle_state,\n          path_rel,\n          created_at,\n          updated_at,\n          archived_at,\n          superseded_at,\n          entity_ref,\n          source,\n          confidence,\n          confidence_tier,\n          memory_kind,\n          access_count,\n          last_accessed,\n          ${selectExpressions.tagsJson}, ${selectExpressions.previewText}, ${selectExpressions.privateRecord}\n        FROM memory_current\n      `).all() as Array<Record<string, unknown>>;\n\n      return {\n        projectionExists: true,\n        rows: rows\n          .map((row) => parseCurrentRow(memoryDir, row))\n          .filter((row): row is MemoryProjectionCurrentState => row !== null),\n      };\n    } finally {\n      db.close();\n    }\n  } catch {\n    return { projectionExists: false, rows: [] };\n  }\n}\n\nfunction readProjectedTimelineRows(\n  memoryDir: string,\n): { projectionExists: boolean; rows: MemoryLifecycleEvent[] } {\n  const dbPath = getMemoryProjectionPath(memoryDir);\n  try {\n    const db = openBetterSqlite3(dbPath, { readonly: true, fileMustExist: true });\n    try {\n      const rows = db.prepare(`\n        SELECT\n          event_id,\n          memory_id,\n          event_type,\n          timestamp,\n          actor,\n          reason_code,\n          rule_version,\n          related_memory_ids_json,\n          before_json,\n          after_json,\n          correlation_id\n        FROM memory_timeline\n      `).all() as Array<Record<string, unknown>>;\n\n      return {\n        projectionExists: true,\n        rows: parseTimelineRows(rows),\n      };\n    } finally {\n      db.close();\n    }\n  } catch {\n    return { projectionExists: false, rows: [] };\n  }\n}\n\n\nfunction writeProjectionDb(\n  dbPath: string,\n  nowIso: string,\n  currentRows: MemoryProjectionCurrentState[],\n  timelineRows: MemoryLifecycleEvent[],\n  entityMentionRows: ProjectedEntityMentionRow[],\n  nativeKnowledgeRows: ProjectedNativeKnowledgeChunkRow[],\n  governance: Awaited<ReturnType<typeof loadLatestGovernanceProjection>>,\n  usedLifecycleLedger: boolean,\n  sourceLifecycleLedgerEventCount: number,\n): void {\n  const db = openBetterSqlite3(dbPath);\n  const memoryDir = path.dirname(path.dirname(dbPath));\n  try {\n    initializeMemoryProjectionDb(db);\n\n    const insertMeta = db.prepare(\"INSERT OR REPLACE INTO meta(key, value) VALUES (?, ?)\");\n    insertMeta.run(\"schemaVersion\", String(MEMORY_PROJECTION_SCHEMA_VERSION));\n    insertMeta.run(\"rebuiltAt\", nowIso);\n    insertMeta.run(\"usedLifecycleLedger\", usedLifecycleLedger ? \"true\" : \"false\");\n    writeProjectionMetaHighWater(insertMeta, sourceLifecycleLedgerEventCount, timelineRows);\n    insertMeta.run(\"latestGovernanceRunId\", governance?.runId ?? \"\");\n\n    const insertCurrent = db.prepare(`\n      INSERT INTO memory_current (\n        memory_id,\n        category,\n        status,\n        lifecycle_state,\n        path_rel,\n        path_valid,\n        created_at,\n        updated_at,\n        archived_at,\n        superseded_at,\n        entity_ref,\n        source,\n        confidence,\n        confidence_tier,\n        memory_kind,\n        access_count,\n        last_accessed,\n        tags_json, preview_text, private_record\n      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n    `);\n\n    const insertTimeline = db.prepare(`\n      INSERT INTO memory_timeline (\n        event_id,\n        memory_id,\n        event_type,\n        timestamp,\n        event_order,\n        actor,\n        reason_code,\n        rule_version,\n        related_memory_ids_json,\n        before_json,\n        after_json,\n        correlation_id\n      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n    `);\n\n    const insertEntityMention = db.prepare(`\n      INSERT INTO memory_entity_mentions (\n        memory_id,\n        entity_ref,\n        mention_source,\n        created_at,\n        updated_at\n      ) VALUES (?, ?, ?, ?, ?)\n    `);\n\n    const insertNativeKnowledge = db.prepare(`\n      INSERT INTO native_knowledge_chunks (\n        chunk_id,\n        source_kind,\n        source_path,\n        title,\n        start_line,\n        end_line,\n        namespace,\n        privacy_class,\n        derived_date,\n        session_key,\n        workflow_key,\n        author,\n        agent,\n        source_hash,\n        preview_text\n      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n    `);\n\n    const insertGovernanceReviewQueue = db.prepare(`\n      INSERT INTO memory_review_queue (\n        entry_id,\n        run_id,\n        memory_id,\n        path,\n        reason_code,\n        severity,\n        suggested_action,\n        suggested_status,\n        related_memory_ids_json\n      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)\n    `);\n\n    const insertGovernanceAppliedAction = db.prepare(`\n      INSERT INTO memory_review_actions (\n        row_key,\n        run_id,\n        action,\n        memory_id,\n        reason_code,\n        before_status,\n        after_status,\n        original_path,\n        current_path\n      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)\n    `);\n\n    const insertGovernanceRun = db.prepare(`\n      INSERT INTO memory_review_runs (\n        run_id,\n        created_at,\n        mode,\n        summary_json,\n        metrics_json,\n        applied_actions_json,\n        report_markdown\n      ) VALUES (?, ?, ?, ?, ?, ?, ?)\n    `);\n\n    const writeTx = db.transaction(() => {\n      for (const row of currentRows) {\n        insertCurrent.run(\n          row.memoryId,\n          row.category,\n          row.status,\n          row.lifecycleState ?? null,\n          row.pathRel,\n          isProjectedMemoryPathValid(memoryDir, row.pathRel) ? 1 : 0,\n          row.created,\n          row.updated,\n          row.archivedAt ?? null,\n          row.supersededAt ?? null,\n          row.entityRef ?? null,\n          row.source,\n          row.confidence,\n          row.confidenceTier,\n          row.memoryKind ?? null,\n          row.accessCount ?? null,\n          row.lastAccessed ?? null, JSON.stringify(row.tags ?? []), row.preview ?? \"\",\n          row.privateRecord === true ? 1 : 0,\n        );\n      }\n\n      for (const event of timelineRows) {\n        insertTimeline.run(\n          event.eventId,\n          event.memoryId,\n          event.eventType,\n          event.timestamp,\n          MEMORY_LIFECYCLE_EVENT_SORT_ORDER[event.eventType],\n          event.actor,\n          event.reasonCode ?? null,\n          event.ruleVersion,\n          JSON.stringify(event.relatedMemoryIds ?? []),\n          event.before ? JSON.stringify(event.before) : null,\n          event.after ? JSON.stringify(event.after) : null,\n          event.correlationId ?? null,\n        );\n      }\n\n      for (const row of entityMentionRows) {\n        insertEntityMention.run(\n          row.memoryId,\n          row.entityRef,\n          row.mentionSource,\n          row.created,\n          row.updated,\n        );\n      }\n\n      for (const row of nativeKnowledgeRows) {\n        insertNativeKnowledge.run(\n          row.chunkId,\n          row.sourceKind,\n          row.sourcePath,\n          row.title,\n          row.startLine,\n          row.endLine,\n          row.namespace ?? null,\n          row.privacyClass ?? null,\n          row.derivedDate ?? null,\n          row.sessionKey ?? null,\n          row.workflowKey ?? null,\n          row.author ?? null,\n          row.agent ?? null,\n          row.sourceHash ?? null,\n          row.preview,\n        );\n      }\n\n      for (const row of governance?.reviewQueueRows ?? []) {\n        insertGovernanceReviewQueue.run(\n          row.entryId,\n          row.runId,\n          row.memoryId,\n          row.path,\n          row.reasonCode,\n          row.severity,\n          row.suggestedAction,\n          row.suggestedStatus ?? null,\n          JSON.stringify(row.relatedMemoryIds),\n        );\n      }\n\n      for (const row of governance?.appliedActionRows ?? []) {\n        insertGovernanceAppliedAction.run(\n          row.rowKey,\n          row.runId,\n          row.action,\n          row.memoryId,\n          row.reasonCode,\n          row.beforeStatus,\n          row.afterStatus ?? null,\n          row.originalPath,\n          row.currentPath,\n        );\n      }\n\n      if (governance) {\n        const createdAt =\n          typeof (governance.summary as { createdAt?: unknown } | undefined)?.createdAt === \"string\"\n            ? (governance.summary as { createdAt: string }).createdAt\n            : nowIso;\n        const mode =\n          typeof (governance.summary as { mode?: unknown } | undefined)?.mode === \"string\"\n            ? (governance.summary as { mode: string }).mode\n            : \"shadow\";\n        insertGovernanceRun.run(\n          governance.runId,\n          createdAt,\n          mode,\n          JSON.stringify(governance.summary ?? null),\n          JSON.stringify(governance.metrics ?? null),\n          JSON.stringify(\n            (governance.appliedActionRows ?? []).map((row) => ({\n              action: row.action,\n              memoryId: row.memoryId,\n              reasonCode: row.reasonCode,\n              beforeStatus: row.beforeStatus,\n              afterStatus: row.afterStatus,\n              originalPath: row.originalPath,\n              currentPath: row.currentPath,\n            })),\n          ),\n          governance.report,\n        );\n      }\n    });\n\n    writeTx();\n  } finally {\n    db.close();\n  }\n}\n\nfunction mergeScopedCurrentRows(\n  existingRows: MemoryProjectionCurrentState[],\n  replacementRows: MemoryProjectionCurrentState[],\n  scopedMemoryIds: Set<string>,\n): MemoryProjectionCurrentState[] {\n  return [...existingRows.filter((row) => !scopedMemoryIds.has(row.memoryId)), ...replacementRows]\n    .sort((a, b) => a.memoryId.localeCompare(b.memoryId));\n}\n\nfunction mergeScopedTimelineRows(\n  existingRows: MemoryLifecycleEvent[],\n  replacementRows: MemoryLifecycleEvent[],\n  scopedMemoryIds: Set<string>,\n): MemoryLifecycleEvent[] {\n  return sortMemoryLifecycleEvents([\n    ...existingRows.filter((event) => !scopedMemoryIds.has(event.memoryId)),\n    ...replacementRows,\n  ]);\n}\n\nfunction mergeScopedEntityMentionRows(\n  existingRows: ProjectedEntityMentionRow[],\n  replacementRows: ProjectedEntityMentionRow[],\n  scopedMemoryIds: Set<string>,\n): ProjectedEntityMentionRow[] {\n  return [\n    ...existingRows.filter((row) => !scopedMemoryIds.has(row.memoryId)),\n    ...replacementRows,\n  ].sort((left, right) =>\n    [left.entityRef, left.memoryId, left.mentionSource].join(\"::\").localeCompare(\n      [right.entityRef, right.memoryId, right.mentionSource].join(\"::\"),\n    )\n  );\n}\n\nexport async function rebuildMemoryProjection(\n  options: RebuildMemoryProjectionOptions,\n): Promise<RebuildMemoryProjectionResult> {\n  const dryRun = options.dryRun !== false;\n  const now = options.now ?? new Date();\n  const outputPath = getMemoryProjectionPath(options.memoryDir);\n  const snapshot = await loadAuthoritativeProjectionSnapshot(options);\n\n  let backupPath: string | undefined;\n  if (!dryRun) {\n    let nextCurrentRows = snapshot.currentRows;\n    let nextTimelineRows = snapshot.timelineRows;\n    let nextEntityMentionRows = snapshot.entityMentionRows;\n    let nextNativeKnowledgeRows = snapshot.nativeKnowledgeRows;\n    let nextGovernance = snapshot.governance;\n    if (hasScopedProjectionFilter(snapshot.scope)) {\n      nextCurrentRows = snapshot.scopedCurrentRows;\n      nextTimelineRows = snapshot.scopedTimelineRows;\n      nextEntityMentionRows = snapshot.scopedEntityMentionRows;\n      const projectedCurrent = readProjectedCurrentRows(options.memoryDir);\n      const projectedTimeline = readProjectedTimelineRows(options.memoryDir);\n      const projectedEntityMentions = readProjectedEntityMentionRows(options.memoryDir);\n      const projectedNativeKnowledge = readProjectedNativeKnowledgeRows(options.memoryDir);\n      const projectedGovernance = readProjectedGovernanceRows(options.memoryDir);\n      if (projectedCurrent.projectionExists && projectedTimeline.projectionExists) {\n        const actualScopedCurrentRows = filterCurrentStateRowsForProjectionScope(\n          projectedCurrent.rows,\n          snapshot.scope,\n        );\n        const scopedMemoryIds = new Set([\n          ...snapshot.scopedCurrentRows.map((row) => row.memoryId),\n          ...snapshot.scopedTimelineRows.map((event) => event.memoryId),\n          ...actualScopedCurrentRows.map((row) => row.memoryId),\n        ]);\n        nextCurrentRows = mergeScopedCurrentRows(\n          projectedCurrent.rows,\n          snapshot.scopedCurrentRows,\n          scopedMemoryIds,\n        );\n        nextTimelineRows = mergeScopedTimelineRows(\n          projectedTimeline.rows,\n          snapshot.scopedTimelineRows,\n          scopedMemoryIds,\n        );\n        nextEntityMentionRows = mergeScopedEntityMentionRows(\n          projectedEntityMentions.rows,\n          snapshot.scopedEntityMentionRows,\n          scopedMemoryIds,\n        );\n      }\n      if (projectedNativeKnowledge.projectionExists) {\n        // Native knowledge rows are always loaded from the full persisted sync state,\n        // so scoped memory rebuilds should publish the fresh snapshot instead of\n        // pinning the projection to stale previously projected rows.\n        nextNativeKnowledgeRows = snapshot.nativeKnowledgeRows;\n      }\n      if (projectedGovernance.projectionExists && projectedGovernance.runId) {\n        // Governance rows are also sourced from standalone artifact snapshots, so\n        // scoped memory rebuilds should keep the latest governance artifact data\n        // instead of restoring whatever happened to be in the prior projection.\n        nextGovernance = snapshot.governance;\n      }\n    }\n\n    const tempPath = `${outputPath}.tmp`;\n    await mkdir(path.dirname(outputPath), { recursive: true });\n    await rm(tempPath, { force: true });\n    writeProjectionDb(\n      tempPath,\n      now.toISOString(),\n      nextCurrentRows,\n      nextTimelineRows,\n      nextEntityMentionRows,\n      nextNativeKnowledgeRows,\n      nextGovernance,\n      snapshot.usedLifecycleLedger,\n      snapshot.sourceLifecycleLedgerEventCount,\n    );\n    backupPath = await backupExistingProjection(options.memoryDir, outputPath, now);\n    backupPath = await commitPreparedFileAtomically(tempPath, outputPath, backupPath);\n  }\n\n  return {\n    dryRun,\n    scannedMemories: snapshot.allMemories.length,\n    currentRows: snapshot.scopedCurrentRows.length,\n    timelineRows: snapshot.scopedTimelineRows.length,\n    entityMentionRows: snapshot.scopedEntityMentionRows.length,\n    nativeKnowledgeRows: snapshot.nativeKnowledgeRows.length,\n    reviewQueueRows: snapshot.governance?.reviewQueueRows.length ?? 0,\n    outputPath,\n    backupPath,\n    usedLifecycleLedger: snapshot.usedLifecycleLedger,\n    skippedDuplicateMemories: snapshot.skippedDuplicateMemories,\n    skippedBlankIdMemories: snapshot.skippedBlankIdMemories,\n    skippedDuplicateTimelineEvents: snapshot.skippedDuplicateTimelineEvents,\n    skippedBlankIdTimelineEvents: snapshot.skippedBlankIdTimelineEvents,\n    scope: snapshot.scope,\n  };\n}\n\nexport async function verifyMemoryProjection(\n  options: VerifyMemoryProjectionOptions,\n): Promise<VerifyMemoryProjectionResult> {\n  const outputPath = getMemoryProjectionPath(options.memoryDir);\n  const snapshot = await loadAuthoritativeProjectionSnapshot(options);\n  const projectedCurrent = readProjectedCurrentRows(options.memoryDir);\n  const projectedTimeline = readProjectedTimelineRows(options.memoryDir);\n  const projectedEntityMentions = readProjectedEntityMentionRows(options.memoryDir);\n  const projectedNativeKnowledge = readProjectedNativeKnowledgeRows(options.memoryDir);\n  const projectedGovernance = readProjectedGovernanceRows(options.memoryDir);\n  const projectionExists = projectedCurrent.projectionExists\n    || projectedTimeline.projectionExists\n    || projectedEntityMentions.projectionExists\n    || projectedNativeKnowledge.projectionExists\n    || projectedGovernance.projectionExists;\n\n  const actualScopedCurrentRows = filterCurrentStateRowsForProjectionScope(projectedCurrent.rows, snapshot.scope);\n  const expectedCurrentById = new Map(\n    snapshot.scopedCurrentRows.map((row) => [row.memoryId, serializeCurrentStateRow(row)]),\n  );\n  const actualCurrentById = new Map(\n    actualScopedCurrentRows.map((row) => [row.memoryId, serializeCurrentStateRow(row)]),\n  );\n\n  const missingCurrentMemoryIds = [...expectedCurrentById.keys()]\n    .filter((memoryId) => !actualCurrentById.has(memoryId))\n    .sort();\n  const extraCurrentMemoryIds = [...actualCurrentById.keys()]\n    .filter((memoryId) => !expectedCurrentById.has(memoryId))\n    .sort();\n  const mismatchedCurrentMemoryIds = [...expectedCurrentById.keys()]\n    .filter((memoryId) =>\n      actualCurrentById.has(memoryId) && actualCurrentById.get(memoryId) !== expectedCurrentById.get(memoryId)\n    )\n    .sort();\n\n  const selectedMemoryIds = new Set([\n    ...snapshot.scopedCurrentRows.map((row) => row.memoryId),\n    ...actualScopedCurrentRows.map((row) => row.memoryId),\n  ]);\n  const expectedTimelineById = new Map(\n    snapshot.scopedTimelineRows.map((event) => [event.eventId, serializeTimelineEvent(event)]),\n  );\n  const actualTimelineRows = projectedTimeline.rows.filter((event) => selectedMemoryIds.has(event.memoryId));\n  const actualTimelineById = new Map(\n    actualTimelineRows.map((event) => [event.eventId, serializeTimelineEvent(event)]),\n  );\n  const missingTimelineEventIds = [...expectedTimelineById.keys()]\n    .filter((eventId) => !actualTimelineById.has(eventId))\n    .sort();\n  const extraTimelineEventIds = [...actualTimelineById.keys()]\n    .filter((eventId) => !expectedTimelineById.has(eventId))\n    .sort();\n\n  const expectedEntityMentionsByKey = new Map(\n    snapshot.scopedEntityMentionRows.map((row) => [\n      `${row.memoryId}::${row.entityRef}::${row.mentionSource}`,\n      serializeEntityMentionRow(row),\n    ]),\n  );\n  const actualScopedEntityMentionRows = projectedEntityMentions.rows.filter((row) => selectedMemoryIds.has(row.memoryId));\n  const actualEntityMentionsByKey = new Map(\n    actualScopedEntityMentionRows.map((row) => [\n      `${row.memoryId}::${row.entityRef}::${row.mentionSource}`,\n      serializeEntityMentionRow(row),\n    ]),\n  );\n  const missingEntityMentionKeys = [...expectedEntityMentionsByKey.keys()]\n    .filter((key) => !actualEntityMentionsByKey.has(key))\n    .sort();\n  const extraEntityMentionKeys = [...actualEntityMentionsByKey.keys()]\n    .filter((key) => !expectedEntityMentionsByKey.has(key))\n    .sort();\n  const mismatchedEntityMentionKeys = [...expectedEntityMentionsByKey.keys()]\n    .filter((key) =>\n      actualEntityMentionsByKey.has(key) && actualEntityMentionsByKey.get(key) !== expectedEntityMentionsByKey.get(key)\n    )\n    .sort();\n\n  const expectedNativeKnowledgeById = new Map(\n    snapshot.nativeKnowledgeRows.map((row) => [row.chunkId, serializeNativeKnowledgeRow(row)]),\n  );\n  const actualNativeKnowledgeById = new Map(\n    projectedNativeKnowledge.rows.map((row) => [row.chunkId, serializeNativeKnowledgeRow(row)]),\n  );\n  const missingNativeKnowledgeChunkIds = [...expectedNativeKnowledgeById.keys()]\n    .filter((chunkId) => !actualNativeKnowledgeById.has(chunkId))\n    .sort();\n  const extraNativeKnowledgeChunkIds = [...actualNativeKnowledgeById.keys()]\n    .filter((chunkId) => !expectedNativeKnowledgeById.has(chunkId))\n    .sort();\n  const mismatchedNativeKnowledgeChunkIds = [...expectedNativeKnowledgeById.keys()]\n    .filter((chunkId) =>\n      actualNativeKnowledgeById.has(chunkId) && actualNativeKnowledgeById.get(chunkId) !== expectedNativeKnowledgeById.get(chunkId)\n    )\n    .sort();\n\n  const expectedReviewQueueById = new Map(\n    (snapshot.governance?.reviewQueueRows ?? []).map((row) => [\n      `${row.runId}::${row.entryId}`,\n      serializeGovernanceReviewQueueRow(row),\n    ]),\n  );\n  const actualReviewQueueById = new Map(\n    projectedGovernance.reviewQueueRows.map((row) => [\n      `${row.runId}::${row.entryId}`,\n      serializeGovernanceReviewQueueRow(row),\n    ]),\n  );\n  const missingReviewQueueEntryIds = [...expectedReviewQueueById.keys()]\n    .filter((entryId) => !actualReviewQueueById.has(entryId))\n    .sort();\n  const extraReviewQueueEntryIds = [...actualReviewQueueById.keys()]\n    .filter((entryId) => !expectedReviewQueueById.has(entryId))\n    .sort();\n  const mismatchedReviewQueueEntryIds = [...expectedReviewQueueById.keys()]\n    .filter((entryId) =>\n      actualReviewQueueById.has(entryId) && actualReviewQueueById.get(entryId) !== expectedReviewQueueById.get(entryId)\n    )\n    .sort();\n\n  return {\n    outputPath,\n    projectionExists,\n    ok:\n      projectionExists &&\n      missingCurrentMemoryIds.length === 0 &&\n      extraCurrentMemoryIds.length === 0 &&\n      mismatchedCurrentMemoryIds.length === 0 &&\n      missingTimelineEventIds.length === 0 &&\n      extraTimelineEventIds.length === 0 &&\n      missingEntityMentionKeys.length === 0 &&\n      extraEntityMentionKeys.length === 0 &&\n      mismatchedEntityMentionKeys.length === 0 &&\n      missingNativeKnowledgeChunkIds.length === 0 &&\n      extraNativeKnowledgeChunkIds.length === 0 &&\n      mismatchedNativeKnowledgeChunkIds.length === 0 &&\n      missingReviewQueueEntryIds.length === 0 &&\n      extraReviewQueueEntryIds.length === 0 &&\n      mismatchedReviewQueueEntryIds.length === 0,\n    expectedCurrentRows: snapshot.scopedCurrentRows.length,\n    actualCurrentRows: actualScopedCurrentRows.length,\n    expectedTimelineRows: snapshot.scopedTimelineRows.length,\n    actualTimelineRows: actualTimelineRows.length,\n    expectedEntityMentionRows: snapshot.scopedEntityMentionRows.length,\n    actualEntityMentionRows: actualScopedEntityMentionRows.length,\n    expectedNativeKnowledgeRows: snapshot.nativeKnowledgeRows.length,\n    actualNativeKnowledgeRows: projectedNativeKnowledge.rows.length,\n    expectedReviewQueueRows: snapshot.governance?.reviewQueueRows.length ?? 0,\n    actualReviewQueueRows: projectedGovernance.reviewQueueRows.length,\n    missingCurrentMemoryIds,\n    extraCurrentMemoryIds,\n    mismatchedCurrentMemoryIds,\n    missingTimelineEventIds,\n    extraTimelineEventIds,\n    missingEntityMentionKeys,\n    extraEntityMentionKeys,\n    mismatchedEntityMentionKeys,\n    missingNativeKnowledgeChunkIds,\n    extraNativeKnowledgeChunkIds,\n    mismatchedNativeKnowledgeChunkIds,\n    missingReviewQueueEntryIds,\n    extraReviewQueueEntryIds,\n    mismatchedReviewQueueEntryIds,\n    usedLifecycleLedger: snapshot.usedLifecycleLedger,\n    scope: snapshot.scope,\n  };\n}\n\nexport async function repairMemoryProjection(\n  options: RepairMemoryProjectionOptions,\n): Promise<RepairMemoryProjectionResult> {\n  const dryRun = options.dryRun !== false;\n  const verify = await verifyMemoryProjection(options);\n  if (verify.ok) {\n    return {\n      dryRun,\n      repaired: false,\n      verify,\n    };\n  }\n  if (dryRun) {\n    return {\n      dryRun: true,\n      repaired: false,\n      verify,\n    };\n  }\n\n  const rebuild = await rebuildMemoryProjection({\n    ...options,\n    dryRun: false,\n  });\n  const verified = await verifyMemoryProjection(options);\n  return {\n    dryRun: false,\n    repaired: verified.ok,\n    verify: verified,\n    rebuild,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,UAAU;AACjB,SAAS,OAAO,IAAI,YAAY;AAuJhC,SAAS,YAAY,KAA4C;AAC/D,SAAO,OAAO,QAAQ,YAAY,QAAQ,QAAQ,UAAU;AAC9D;AAEA,eAAsB,yBACpB,WACA,YACA,KAC6B;AAC7B,MAAI;AACF,UAAM,KAAK,UAAU;AAAA,EACvB,SAAS,KAAK;AACZ,QAAI,YAAY,GAAG,KAAK,IAAI,SAAS,UAAU;AAC7C,aAAO;AAAA,IACT;AACA,UAAM;AAAA,EACR;AAEA,QAAM,aAAa,KAAK;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc,GAAG;AAAA,IACjB;AAAA,IACA;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,SAAiB,QAAkC;AAC/E,SAAO,kBAAkB,OAAO,aAAa,OAAO;AACtD;AAEA,SAAS,kBAAkB,WAAmB,QAAkD;AAC9F,QAAM,UAAU,gBAAgB,WAAW,OAAO,IAAI;AACtD,SAAO;AAAA,IACL,UAAU,OAAO,YAAY;AAAA,IAC7B,UAAU,OAAO,YAAY;AAAA,IAC7B,QAAQ,qBAAqB,SAAS,MAAM;AAAA,IAC5C,gBAAgB,OAAO,YAAY;AAAA,IACnC,MAAM,OAAO;AAAA,IACb;AAAA,IACA,SAAS,OAAO,YAAY;AAAA,IAC5B,SAAS,OAAO,YAAY;AAAA,IAC5B,YAAY,OAAO,YAAY;AAAA,IAC/B,cAAc,OAAO,YAAY;AAAA,IACjC,WAAW,OAAO,YAAY;AAAA,IAC9B,QAAQ,OAAO,YAAY;AAAA,IAC3B,YAAY,OAAO,YAAY;AAAA,IAC/B,gBAAgB,OAAO,YAAY;AAAA,IACnC,YAAY,OAAO,YAAY;AAAA,IAC/B,aAAa,OAAO,YAAY;AAAA,IAChC,cAAc,OAAO,YAAY;AAAA,IACjC,MAAM,wBAAwB,OAAO,YAAY,IAAI;AAAA,IACrD,SAAS,2BAA2B,OAAO,OAAO;AAAA,IAClD,eAAe,+BAA+B,MAAM;AAAA,EACtD;AACF;AAEA,SAAS,uBACP,aAC6B;AAC7B,SAAO,YAAY,QAAQ,CAAC,QAAQ;AAClC,UAAM,WAAwC,CAAC;AAC/C,QAAI,IAAI,WAAW;AACjB,eAAS,KAAK;AAAA,QACZ,UAAU,IAAI;AAAA,QACd,WAAW,IAAI;AAAA,QACf,eAAe;AAAA,QACf,SAAS,IAAI;AAAA,QACb,SAAS,IAAI;AAAA,MACf,CAAC;AAAA,IACH;AACA,eAAW,OAAO,IAAI,QAAQ,CAAC,GAAG;AAChC,UAAI,CAAC,IAAI,SAAS,GAAG,EAAG;AACxB,eAAS,KAAK;AAAA,QACZ,UAAU,IAAI;AAAA,QACd,WAAW;AAAA,QACX,eAAe;AAAA,QACf,SAAS,IAAI;AAAA,QACb,SAAS,IAAI;AAAA,MACf,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT,CAAC;AACH;AAEA,SAAS,4BAA4B,QAM1B;AACT,SAAO;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,IACP,OAAO;AAAA,IACP,OAAO;AAAA,IACP,OAAO;AAAA,EACT,EAAE,KAAK,IAAI;AACb;AAEA,eAAe,+BAA+B,WAOpC;AACR,QAAM,SAAS,MAAM,yBAAyB,SAAS,GAAG,CAAC;AAC3D,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI;AACF,UAAM,WAAW,MAAM,gCAAgC,WAAW,KAAK;AACvE,WAAO;AAAA,MACL;AAAA,MACA,SAAS,SAAS;AAAA,MAClB,SAAS,SAAS;AAAA,MAClB,iBAAiB,SAAS,YAAY,IAAI,CAAC,WAAW;AAAA,QACpD;AAAA,QACA,SAAS,MAAM;AAAA,QACf,UAAU,MAAM;AAAA,QAChB,MAAM,MAAM;AAAA,QACZ,YAAY,MAAM;AAAA,QAClB,UAAU,MAAM;AAAA,QAChB,iBAAiB,MAAM;AAAA,QACvB,iBAAiB,MAAM;AAAA,QACvB,kBAAkB,CAAC,GAAG,MAAM,gBAAgB;AAAA,MAC9C,EAAE;AAAA,MACF,mBAAmB,SAAS,eAAe,IAAI,CAAC,YAAY;AAAA,QAC1D;AAAA,QACA,QAAQ,4BAA4B,MAAM;AAAA,QAC1C,QAAQ,OAAO;AAAA,QACf,UAAU,OAAO;AAAA,QACjB,YAAY,OAAO;AAAA,QACnB,cAAc,OAAO;AAAA,QACrB,aAAa,OAAO;AAAA,QACpB,cAAc,OAAO;AAAA,QACrB,aAAa,OAAO;AAAA,MACtB,EAAE;AAAA,MACF,QAAQ,SAAS;AAAA,IACnB;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,mBACP,UACA,iBACkE;AAClE,MAAI,gBAAgB,SAAS,GAAG;AAC9B,WAAO;AAAA,MACL,QAAQ,0BAA0B,eAAe;AAAA,MACjD,qBAAqB;AAAA,IACvB;AAAA,EACF;AAEA,SAAO;AAAA,IACL,QAAQ,0BAA0B,SAAS,QAAQ,CAAC,WAAW,8BAA8B,MAAM,CAAC,CAAC;AAAA,IACrG,qBAAqB;AAAA,EACvB;AACF;AAEA,SAAS,mBAAmB,OAA0C;AACpE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,SAAS,IAAI,KAAK,OAAO;AAC/B,MAAI,OAAO,MAAM,OAAO,QAAQ,CAAC,GAAG;AAClC,UAAM,IAAI,MAAM,uCAAuC,KAAK,EAAE;AAAA,EAChE;AACA,SAAO,OAAO,YAAY;AAC5B;AAEA,SAAS,yBAAyB,SAMhC;AACA,QAAM,eAAe,mBAAmB,QAAQ,YAAY;AAC5D,QAAM,gBAAgB,mBAAmB,QAAQ,aAAa;AAC9D,MACE,gBACA,iBACA,IAAI,KAAK,YAAY,EAAE,QAAQ,IAAI,IAAI,KAAK,aAAa,EAAE,QAAQ,GACnE;AACA,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,0BAA0B,OAGvB;AACV,SAAO,MAAM,iBAAiB,QAAQ,MAAM,kBAAkB;AAChE;AAEA,SAAS,qBAAqB,QAA4B;AACxD,QAAM,YAAY,OAAO,YAAY,WAAW,OAAO,YAAY;AACnE,SAAO;AACT;AAEA,SAAS,6BACP,WACA,OACS;AACT,MAAI,CAAC,MAAM,gBAAgB,CAAC,MAAM,cAAe,QAAO;AACxD,QAAM,SAAS,IAAI,KAAK,SAAS;AACjC,MAAI,OAAO,MAAM,OAAO,QAAQ,CAAC,EAAG,QAAO;AAC3C,MAAI,MAAM,gBAAgB,OAAO,QAAQ,IAAI,IAAI,KAAK,MAAM,YAAY,EAAE,QAAQ,EAAG,QAAO;AAC5F,MAAI,MAAM,iBAAiB,OAAO,QAAQ,KAAK,IAAI,KAAK,MAAM,aAAa,EAAE,QAAQ,EAAG,QAAO;AAC/F,SAAO;AACT;AAEA,SAAS,iCACP,UACA,OACc;AACd,MAAI,CAAC,MAAM,gBAAgB,CAAC,MAAM,cAAe,QAAO;AACxD,SAAO,SAAS,OAAO,CAAC,WAAW,6BAA6B,qBAAqB,MAAM,GAAG,KAAK,CAAC;AACtG;AAEA,SAAS,yCACP,MACA,OACgC;AAChC,MAAI,CAAC,MAAM,gBAAgB,CAAC,MAAM,cAAe,QAAO;AACxD,SAAO,KAAK,OAAO,CAAC,QAAQ,6BAA6B,IAAI,WAAW,IAAI,SAAS,KAAK,CAAC;AAC7F;AAEA,SAAS,yBAAyB,KAA2C;AAC3E,SAAO,KAAK,UAAU;AAAA,IACpB,UAAU,IAAI;AAAA,IACd,UAAU,IAAI;AAAA,IACd,QAAQ,IAAI;AAAA,IACZ,gBAAgB,IAAI,kBAAkB;AAAA,IACtC,SAAS,IAAI;AAAA,IACb,SAAS,IAAI;AAAA,IACb,SAAS,IAAI;AAAA,IACb,YAAY,IAAI,cAAc;AAAA,IAC9B,cAAc,IAAI,gBAAgB;AAAA,IAClC,WAAW,IAAI,aAAa;AAAA,IAC5B,QAAQ,IAAI;AAAA,IACZ,YAAY,IAAI;AAAA,IAChB,gBAAgB,IAAI;AAAA,IACpB,YAAY,IAAI,cAAc;AAAA,IAC9B,aAAa,IAAI,eAAe;AAAA,IAChC,cAAc,IAAI,gBAAgB;AAAA,IAClC,MAAM,IAAI,QAAQ,CAAC;AAAA,IACnB,SAAS,IAAI,WAAW;AAAA,IACxB,eAAe,IAAI,kBAAkB;AAAA,EACvC,CAAC;AACH;AAEA,SAAS,uBAAuB,OAAqC;AACnE,SAAO,KAAK,UAAU;AAAA,IACpB,SAAS,MAAM;AAAA,IACf,UAAU,MAAM;AAAA,IAChB,WAAW,MAAM;AAAA,IACjB,WAAW,MAAM;AAAA,IACjB,OAAO,MAAM;AAAA,IACb,YAAY,MAAM,cAAc;AAAA,IAChC,aAAa,MAAM;AAAA,IACnB,kBAAkB,MAAM,oBAAoB,CAAC;AAAA,IAC7C,QAAQ,MAAM,UAAU;AAAA,IACxB,OAAO,MAAM,SAAS;AAAA,IACtB,eAAe,MAAM,iBAAiB;AAAA,EACxC,CAAC;AACH;AAEA,SAAS,0BAA0B,KAAwC;AACzE,SAAO,KAAK,UAAU,GAAG;AAC3B;AAEA,SAAS,4BAA4B,KAA+C;AAClF,SAAO,KAAK,UAAU;AAAA,IACpB,SAAS,IAAI;AAAA,IACb,YAAY,IAAI;AAAA,IAChB,YAAY,IAAI;AAAA,IAChB,OAAO,IAAI;AAAA,IACX,WAAW,IAAI;AAAA,IACf,SAAS,IAAI;AAAA,IACb,WAAW,IAAI,aAAa;AAAA,IAC5B,cAAc,IAAI,gBAAgB;AAAA,IAClC,aAAa,IAAI,eAAe;AAAA,IAChC,YAAY,IAAI,cAAc;AAAA,IAC9B,aAAa,IAAI,eAAe;AAAA,IAChC,QAAQ,IAAI,UAAU;AAAA,IACtB,OAAO,IAAI,SAAS;AAAA,IACpB,YAAY,IAAI,cAAc;AAAA,IAC9B,SAAS,IAAI;AAAA,EACf,CAAC;AACH;AAEA,SAAS,kCACP,KACQ;AACR,SAAO,KAAK,UAAU;AAAA,IACpB,OAAO,IAAI;AAAA,IACX,SAAS,IAAI;AAAA,IACb,UAAU,IAAI;AAAA,IACd,MAAM,IAAI;AAAA,IACV,YAAY,IAAI;AAAA,IAChB,UAAU,IAAI;AAAA,IACd,iBAAiB,IAAI;AAAA,IACrB,iBAAiB,IAAI,mBAAmB;AAAA,IACxC,kBAAkB,IAAI;AAAA,EACxB,CAAC;AACH;AAEA,SAAS,yBACP,OAMA;AACA,QAAM,cAAc,MAAM,KAAK;AAC/B,QAAM,WAAyB,CAAC;AAChC,QAAM,WAAW,oBAAI,IAAwB;AAC7C,QAAM,2BAAqD,CAAC;AAC5D,QAAM,yBAAiD,CAAC;AAIxD,aAAW,QAAQ,OAAO;AACxB,eAAW,UAAU,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,KAAK,cAAc,MAAM,IAAI,CAAC,GAAG;AACzF,YAAM,WAAW,OAAO,YAAY,GAAG,KAAK;AAC5C,UAAI,CAAC,UAAU;AACb,+BAAuB,KAAK,EAAE,MAAM,OAAO,KAAK,CAAC;AACjD,YAAI,KAAK,oDAAoD,OAAO,IAAI,EAAE;AAC1E;AAAA,MACF;AACA,YAAM,OAAO,SAAS,IAAI,QAAQ;AAClC,UAAI,MAAM;AACR,iCAAyB,KAAK;AAAA,UAC5B;AAAA,UACA,UAAU,KAAK;AAAA,UACf,aAAa,OAAO;AAAA,QACtB,CAAC;AACD,YAAI;AAAA,UACF,kDAAkD,QAAQ,UAAU,KAAK,IAAI,YAAY,OAAO,IAAI;AAAA,QACtG;AACA;AAAA,MACF;AACA,eAAS,IAAI,UAAU,MAAM;AAC7B,eAAS,KAAK,MAAM;AAAA,IACtB;AAAA,EACF;AAEA,SAAO,EAAE,aAAa,UAAU,0BAA0B,uBAAuB;AACnF;AAEA,SAAS,0BACP,QACA,eAKA;AACA,QAAM,WAAW,oBAAI,IAA2D;AAChF,QAAM,SAAiC,CAAC;AACxC,QAAM,UAA2C,CAAC;AAClD,QAAM,kBAAiD,CAAC;AACxD,aAAW,SAAS,0BAA0B,MAAM,GAAG;AACrD,UAAM,aAAa,cAAc,KAAK;AACtC,QAAI,CAAC,MAAM,SAAS,KAAK,GAAG;AAC1B,sBAAgB,KAAK,EAAE,SAAS,MAAM,SAAS,MAAM,WAAW,CAAC;AACjE,UAAI;AAAA,QACF,4EACc,MAAM,OAAO,SAAS,UAAU;AAAA,MAChD;AACA;AAAA,IACF;AACA,UAAM,OAAO,SAAS,IAAI,MAAM,OAAO;AACvC,QAAI,MAAM;AACR,cAAQ,KAAK;AAAA,QACX,SAAS,MAAM;AAAA,QACf,UAAU,KAAK;AAAA,QACf,aAAa;AAAA,MACf,CAAC;AACD,UAAI;AAAA,QACF,0DAA0D,MAAM,OAAO,UAC7D,KAAK,IAAI,YAAY,UAAU;AAAA,MAC3C;AACA;AAAA,IACF;AACA,aAAS,IAAI,MAAM,SAAS,EAAE,OAAO,MAAM,WAAW,CAAC;AACvD,WAAO,KAAK,KAAK;AAAA,EACnB;AACA,SAAO,EAAE,QAAQ,QAAQ,SAAS,gBAAgB;AACpD;AAEA,eAAe,oCAAoC,SAmChD;AACD,QAAM,UAAU,4BAA4B,2BAA2B,QAAQ,WAAW,QAAQ,OAAO,KAAK,IAAI,eAAe,QAAQ,SAAS;AAGlJ,UAAQ,iCAAiC;AACzC,QAAM,WAAW,yBAAyB;AAAA,IACxC,MAAM,QAAQ,gBAAgB;AAAA,IAC9B,MAAM,QAAQ,oBAAoB;AAAA,IAClC,MAAM,QAAQ,qBAAqB;AAAA,EACrC,CAAC;AACD,QAAM,cAAc,SAAS;AAC7B,QAAM,qBAAqB,SAAS;AACpC,QAAM,kBAAkB,MAAM,QAAQ,6BAA6B;AACnE,QAAM,WAAW,mBAAmB,oBAAoB,eAAe;AACvE,QAAM,sBAAsB,KAAK;AAAA,IAC/B,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,EACF;AACA,QAAM,iBAAiB,IAAI;AAAA,IACzB,mBAAmB,IAAI,CAAC,WAAW,CAAC,OAAO,YAAY,IAAI,OAAO,IAAI,CAAC;AAAA,EACzE;AACA,QAAM,uBAAuB;AAAA,IAC3B,SAAS;AAAA,IACT,CAAC,UAAU,SAAS,sBAChB,sBACA,eAAe,IAAI,MAAM,QAAQ,KAAK;AAAA,EAC5C;AACA,QAAM,SAAS,qBAAqB;AACpC,QAAM,sBAAsB,SAAS;AACrC,QAAM,kCAAkC,IAAI;AAAA,IAC1C,gBAAgB,IAAI,sCAAsC;AAAA,EAC5D,EAAE;AACF,QAAM,cAAc,mBAAmB,IAAI,CAAC,WAAW,kBAAkB,QAAQ,WAAW,MAAM,CAAC;AACnG,QAAM,QAAQ,yBAAyB,OAAO;AAC9C,QAAM,iBAAiB,iCAAiC,oBAAoB,KAAK;AACjF,QAAM,kBAAkB,IAAI,IAAI,eAAe,IAAI,CAAC,WAAW,OAAO,YAAY,EAAE,CAAC;AACrF,QAAM,sBAAsB,MAAM,mCAAmC;AAAA,IACnE,WAAW,QAAQ;AAAA,IACnB,kBAAkB,QAAQ,oBAAoB;AAAA,EAChD,CAAC,EAAE,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;AAAA,IACnC,SAAS,IAAI;AAAA,IACb,YAAY,IAAI;AAAA,IAChB,YAAY,IAAI;AAAA,IAChB,OAAO,IAAI;AAAA,IACX,WAAW,IAAI;AAAA,IACf,SAAS,IAAI;AAAA,IACb,WAAW,IAAI,aAAa,QAAQ,oBAAoB;AAAA,IACxD,cAAc,IAAI;AAAA,IAClB,aAAa,IAAI;AAAA,IACjB,YAAY,IAAI;AAAA,IAChB,aAAa,IAAI;AAAA,IACjB,QAAQ,IAAI;AAAA,IACZ,OAAO,IAAI;AAAA,IACX,YAAY,IAAI;AAAA,IAChB,SAAS,2BAA2B,IAAI,OAAO;AAAA,EACjD,EAAE,CAAC;AACH,QAAM,aAAa,MAAM,+BAA+B,QAAQ,SAAS;AACzE,QAAM,oBAAoB,uBAAuB,WAAW;AAE5D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,cAAc;AAAA,IACd,mBAAmB,YAAY,OAAO,CAAC,QAAQ,gBAAgB,IAAI,IAAI,QAAQ,CAAC;AAAA,IAChF,oBAAoB,OAAO,OAAO,CAAC,UAAU,gBAAgB,IAAI,MAAM,QAAQ,CAAC;AAAA,IAChF;AAAA,IACA,yBAAyB,kBAAkB,OAAO,CAAC,QAAQ,gBAAgB,IAAI,IAAI,QAAQ,CAAC;AAAA,IAC5F;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,0BAA0B,SAAS;AAAA,IACnC,wBAAwB,SAAS;AAAA,IACjC,gCAAgC,qBAAqB;AAAA,IACrD,8BAA8B,qBAAqB;AAAA,EACrD;AACF;AAEA,SAAS,yBACP,WACqE;AACrE,QAAM,SAAS,wBAAwB,SAAS;AAChD,MAAI;AACF,UAAM,KAAK,kBAAkB,QAAQ,EAAE,UAAU,MAAM,eAAe,KAAK,CAAC;AAC5E,QAAI;AACF,YAAM,oBAAoB,+BAA+B,EAAE;AAC3D,YAAM,OAAO,GAAG,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,YAkBlB,kBAAkB,QAAQ,KAAK,kBAAkB,WAAW,KAAK,kBAAkB,aAAa;AAAA;AAAA,OAErG,EAAE,IAAI;AAEP,aAAO;AAAA,QACL,kBAAkB;AAAA,QAClB,MAAM,KACH,IAAI,CAAC,QAAQ,gBAAgB,WAAW,GAAG,CAAC,EAC5C,OAAO,CAAC,QAA6C,QAAQ,IAAI;AAAA,MACtE;AAAA,IACF,UAAE;AACA,SAAG,MAAM;AAAA,IACX;AAAA,EACF,QAAQ;AACN,WAAO,EAAE,kBAAkB,OAAO,MAAM,CAAC,EAAE;AAAA,EAC7C;AACF;AAEA,SAAS,0BACP,WAC6D;AAC7D,QAAM,SAAS,wBAAwB,SAAS;AAChD,MAAI;AACF,UAAM,KAAK,kBAAkB,QAAQ,EAAE,UAAU,MAAM,eAAe,KAAK,CAAC;AAC5E,QAAI;AACF,YAAM,OAAO,GAAG,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,OAcvB,EAAE,IAAI;AAEP,aAAO;AAAA,QACL,kBAAkB;AAAA,QAClB,MAAM,kBAAkB,IAAI;AAAA,MAC9B;AAAA,IACF,UAAE;AACA,SAAG,MAAM;AAAA,IACX;AAAA,EACF,QAAQ;AACN,WAAO,EAAE,kBAAkB,OAAO,MAAM,CAAC,EAAE;AAAA,EAC7C;AACF;AAGA,SAAS,kBACP,QACA,QACA,aACA,cACA,mBACA,qBACA,YACA,qBACA,iCACM;AACN,QAAM,KAAK,kBAAkB,MAAM;AACnC,QAAM,YAAY,KAAK,QAAQ,KAAK,QAAQ,MAAM,CAAC;AACnD,MAAI;AACF,iCAA6B,EAAE;AAE/B,UAAM,aAAa,GAAG,QAAQ,uDAAuD;AACrF,eAAW,IAAI,iBAAiB,OAAO,gCAAgC,CAAC;AACxE,eAAW,IAAI,aAAa,MAAM;AAClC,eAAW,IAAI,uBAAuB,sBAAsB,SAAS,OAAO;AAC5E,iCAA6B,YAAY,iCAAiC,YAAY;AACtF,eAAW,IAAI,yBAAyB,YAAY,SAAS,EAAE;AAE/D,UAAM,gBAAgB,GAAG,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,KAqBhC;AAED,UAAM,iBAAiB,GAAG,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,KAejC;AAED,UAAM,sBAAsB,GAAG,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,KAQtC;AAED,UAAM,wBAAwB,GAAG,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,KAkBxC;AAED,UAAM,8BAA8B,GAAG,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,KAY9C;AAED,UAAM,gCAAgC,GAAG,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,KAYhD;AAED,UAAM,sBAAsB,GAAG,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,KAUtC;AAED,UAAM,UAAU,GAAG,YAAY,MAAM;AACnC,iBAAW,OAAO,aAAa;AAC7B,sBAAc;AAAA,UACZ,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI,kBAAkB;AAAA,UACtB,IAAI;AAAA,UACJ,2BAA2B,WAAW,IAAI,OAAO,IAAI,IAAI;AAAA,UACzD,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI,cAAc;AAAA,UAClB,IAAI,gBAAgB;AAAA,UACpB,IAAI,aAAa;AAAA,UACjB,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI,cAAc;AAAA,UAClB,IAAI,eAAe;AAAA,UACnB,IAAI,gBAAgB;AAAA,UAAM,KAAK,UAAU,IAAI,QAAQ,CAAC,CAAC;AAAA,UAAG,IAAI,WAAW;AAAA,UACzE,IAAI,kBAAkB,OAAO,IAAI;AAAA,QACnC;AAAA,MACF;AAEA,iBAAW,SAAS,cAAc;AAChC,uBAAe;AAAA,UACb,MAAM;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,kCAAkC,MAAM,SAAS;AAAA,UACjD,MAAM;AAAA,UACN,MAAM,cAAc;AAAA,UACpB,MAAM;AAAA,UACN,KAAK,UAAU,MAAM,oBAAoB,CAAC,CAAC;AAAA,UAC3C,MAAM,SAAS,KAAK,UAAU,MAAM,MAAM,IAAI;AAAA,UAC9C,MAAM,QAAQ,KAAK,UAAU,MAAM,KAAK,IAAI;AAAA,UAC5C,MAAM,iBAAiB;AAAA,QACzB;AAAA,MACF;AAEA,iBAAW,OAAO,mBAAmB;AACnC,4BAAoB;AAAA,UAClB,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI;AAAA,QACN;AAAA,MACF;AAEA,iBAAW,OAAO,qBAAqB;AACrC,8BAAsB;AAAA,UACpB,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI,aAAa;AAAA,UACjB,IAAI,gBAAgB;AAAA,UACpB,IAAI,eAAe;AAAA,UACnB,IAAI,cAAc;AAAA,UAClB,IAAI,eAAe;AAAA,UACnB,IAAI,UAAU;AAAA,UACd,IAAI,SAAS;AAAA,UACb,IAAI,cAAc;AAAA,UAClB,IAAI;AAAA,QACN;AAAA,MACF;AAEA,iBAAW,OAAO,YAAY,mBAAmB,CAAC,GAAG;AACnD,oCAA4B;AAAA,UAC1B,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI,mBAAmB;AAAA,UACvB,KAAK,UAAU,IAAI,gBAAgB;AAAA,QACrC;AAAA,MACF;AAEA,iBAAW,OAAO,YAAY,qBAAqB,CAAC,GAAG;AACrD,sCAA8B;AAAA,UAC5B,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI;AAAA,UACJ,IAAI,eAAe;AAAA,UACnB,IAAI;AAAA,UACJ,IAAI;AAAA,QACN;AAAA,MACF;AAEA,UAAI,YAAY;AACd,cAAM,YACJ,OAAQ,WAAW,SAAiD,cAAc,WAC7E,WAAW,QAAkC,YAC9C;AACN,cAAM,OACJ,OAAQ,WAAW,SAA4C,SAAS,WACnE,WAAW,QAA6B,OACzC;AACN,4BAAoB;AAAA,UAClB,WAAW;AAAA,UACX;AAAA,UACA;AAAA,UACA,KAAK,UAAU,WAAW,WAAW,IAAI;AAAA,UACzC,KAAK,UAAU,WAAW,WAAW,IAAI;AAAA,UACzC,KAAK;AAAA,aACF,WAAW,qBAAqB,CAAC,GAAG,IAAI,CAAC,SAAS;AAAA,cACjD,QAAQ,IAAI;AAAA,cACZ,UAAU,IAAI;AAAA,cACd,YAAY,IAAI;AAAA,cAChB,cAAc,IAAI;AAAA,cAClB,aAAa,IAAI;AAAA,cACjB,cAAc,IAAI;AAAA,cAClB,aAAa,IAAI;AAAA,YACnB,EAAE;AAAA,UACJ;AAAA,UACA,WAAW;AAAA,QACb;AAAA,MACF;AAAA,IACF,CAAC;AAED,YAAQ;AAAA,EACV,UAAE;AACA,OAAG,MAAM;AAAA,EACX;AACF;AAEA,SAAS,uBACP,cACA,iBACA,iBACgC;AAChC,SAAO,CAAC,GAAG,aAAa,OAAO,CAAC,QAAQ,CAAC,gBAAgB,IAAI,IAAI,QAAQ,CAAC,GAAG,GAAG,eAAe,EAC5F,KAAK,CAAC,GAAG,MAAM,EAAE,SAAS,cAAc,EAAE,QAAQ,CAAC;AACxD;AAEA,SAAS,wBACP,cACA,iBACA,iBACwB;AACxB,SAAO,0BAA0B;AAAA,IAC/B,GAAG,aAAa,OAAO,CAAC,UAAU,CAAC,gBAAgB,IAAI,MAAM,QAAQ,CAAC;AAAA,IACtE,GAAG;AAAA,EACL,CAAC;AACH;AAEA,SAAS,6BACP,cACA,iBACA,iBAC6B;AAC7B,SAAO;AAAA,IACL,GAAG,aAAa,OAAO,CAAC,QAAQ,CAAC,gBAAgB,IAAI,IAAI,QAAQ,CAAC;AAAA,IAClE,GAAG;AAAA,EACL,EAAE;AAAA,IAAK,CAAC,MAAM,UACZ,CAAC,KAAK,WAAW,KAAK,UAAU,KAAK,aAAa,EAAE,KAAK,IAAI,EAAE;AAAA,MAC7D,CAAC,MAAM,WAAW,MAAM,UAAU,MAAM,aAAa,EAAE,KAAK,IAAI;AAAA,IAClE;AAAA,EACF;AACF;AAEA,eAAsB,wBACpB,SACwC;AACxC,QAAM,SAAS,QAAQ,WAAW;AAClC,QAAM,MAAM,QAAQ,OAAO,oBAAI,KAAK;AACpC,QAAM,aAAa,wBAAwB,QAAQ,SAAS;AAC5D,QAAM,WAAW,MAAM,oCAAoC,OAAO;AAElE,MAAI;AACJ,MAAI,CAAC,QAAQ;AACX,QAAI,kBAAkB,SAAS;AAC/B,QAAI,mBAAmB,SAAS;AAChC,QAAI,wBAAwB,SAAS;AACrC,QAAI,0BAA0B,SAAS;AACvC,QAAI,iBAAiB,SAAS;AAC9B,QAAI,0BAA0B,SAAS,KAAK,GAAG;AAC7C,wBAAkB,SAAS;AAC3B,yBAAmB,SAAS;AAC5B,8BAAwB,SAAS;AACjC,YAAM,mBAAmB,yBAAyB,QAAQ,SAAS;AACnE,YAAM,oBAAoB,0BAA0B,QAAQ,SAAS;AACrE,YAAM,0BAA0B,+BAA+B,QAAQ,SAAS;AAChF,YAAM,2BAA2B,iCAAiC,QAAQ,SAAS;AACnF,YAAM,sBAAsB,4BAA4B,QAAQ,SAAS;AACzE,UAAI,iBAAiB,oBAAoB,kBAAkB,kBAAkB;AAC3E,cAAM,0BAA0B;AAAA,UAC9B,iBAAiB;AAAA,UACjB,SAAS;AAAA,QACX;AACA,cAAM,kBAAkB,oBAAI,IAAI;AAAA,UAC9B,GAAG,SAAS,kBAAkB,IAAI,CAAC,QAAQ,IAAI,QAAQ;AAAA,UACvD,GAAG,SAAS,mBAAmB,IAAI,CAAC,UAAU,MAAM,QAAQ;AAAA,UAC5D,GAAG,wBAAwB,IAAI,CAAC,QAAQ,IAAI,QAAQ;AAAA,QACtD,CAAC;AACD,0BAAkB;AAAA,UAChB,iBAAiB;AAAA,UACjB,SAAS;AAAA,UACT;AAAA,QACF;AACA,2BAAmB;AAAA,UACjB,kBAAkB;AAAA,UAClB,SAAS;AAAA,UACT;AAAA,QACF;AACA,gCAAwB;AAAA,UACtB,wBAAwB;AAAA,UACxB,SAAS;AAAA,UACT;AAAA,QACF;AAAA,MACF;AACA,UAAI,yBAAyB,kBAAkB;AAI7C,kCAA0B,SAAS;AAAA,MACrC;AACA,UAAI,oBAAoB,oBAAoB,oBAAoB,OAAO;AAIrE,yBAAiB,SAAS;AAAA,MAC5B;AAAA,IACF;AAEA,UAAM,WAAW,GAAG,UAAU;AAC9B,UAAM,MAAM,KAAK,QAAQ,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AACzD,UAAM,GAAG,UAAU,EAAE,OAAO,KAAK,CAAC;AAClC;AAAA,MACE;AAAA,MACA,IAAI,YAAY;AAAA,MAChB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS;AAAA,MACT,SAAS;AAAA,IACX;AACA,iBAAa,MAAM,yBAAyB,QAAQ,WAAW,YAAY,GAAG;AAC9E,iBAAa,MAAM,6BAA6B,UAAU,YAAY,UAAU;AAAA,EAClF;AAEA,SAAO;AAAA,IACL;AAAA,IACA,iBAAiB,SAAS,YAAY;AAAA,IACtC,aAAa,SAAS,kBAAkB;AAAA,IACxC,cAAc,SAAS,mBAAmB;AAAA,IAC1C,mBAAmB,SAAS,wBAAwB;AAAA,IACpD,qBAAqB,SAAS,oBAAoB;AAAA,IAClD,iBAAiB,SAAS,YAAY,gBAAgB,UAAU;AAAA,IAChE;AAAA,IACA;AAAA,IACA,qBAAqB,SAAS;AAAA,IAC9B,0BAA0B,SAAS;AAAA,IACnC,wBAAwB,SAAS;AAAA,IACjC,gCAAgC,SAAS;AAAA,IACzC,8BAA8B,SAAS;AAAA,IACvC,OAAO,SAAS;AAAA,EAClB;AACF;AAEA,eAAsB,uBACpB,SACuC;AACvC,QAAM,aAAa,wBAAwB,QAAQ,SAAS;AAC5D,QAAM,WAAW,MAAM,oCAAoC,OAAO;AAClE,QAAM,mBAAmB,yBAAyB,QAAQ,SAAS;AACnE,QAAM,oBAAoB,0BAA0B,QAAQ,SAAS;AACrE,QAAM,0BAA0B,+BAA+B,QAAQ,SAAS;AAChF,QAAM,2BAA2B,iCAAiC,QAAQ,SAAS;AACnF,QAAM,sBAAsB,4BAA4B,QAAQ,SAAS;AACzE,QAAM,mBAAmB,iBAAiB,oBACrC,kBAAkB,oBAClB,wBAAwB,oBACxB,yBAAyB,oBACzB,oBAAoB;AAEzB,QAAM,0BAA0B,yCAAyC,iBAAiB,MAAM,SAAS,KAAK;AAC9G,QAAM,sBAAsB,IAAI;AAAA,IAC9B,SAAS,kBAAkB,IAAI,CAAC,QAAQ,CAAC,IAAI,UAAU,yBAAyB,GAAG,CAAC,CAAC;AAAA,EACvF;AACA,QAAM,oBAAoB,IAAI;AAAA,IAC5B,wBAAwB,IAAI,CAAC,QAAQ,CAAC,IAAI,UAAU,yBAAyB,GAAG,CAAC,CAAC;AAAA,EACpF;AAEA,QAAM,0BAA0B,CAAC,GAAG,oBAAoB,KAAK,CAAC,EAC3D,OAAO,CAAC,aAAa,CAAC,kBAAkB,IAAI,QAAQ,CAAC,EACrD,KAAK;AACR,QAAM,wBAAwB,CAAC,GAAG,kBAAkB,KAAK,CAAC,EACvD,OAAO,CAAC,aAAa,CAAC,oBAAoB,IAAI,QAAQ,CAAC,EACvD,KAAK;AACR,QAAM,6BAA6B,CAAC,GAAG,oBAAoB,KAAK,CAAC,EAC9D;AAAA,IAAO,CAAC,aACP,kBAAkB,IAAI,QAAQ,KAAK,kBAAkB,IAAI,QAAQ,MAAM,oBAAoB,IAAI,QAAQ;AAAA,EACzG,EACC,KAAK;AAER,QAAM,oBAAoB,oBAAI,IAAI;AAAA,IAChC,GAAG,SAAS,kBAAkB,IAAI,CAAC,QAAQ,IAAI,QAAQ;AAAA,IACvD,GAAG,wBAAwB,IAAI,CAAC,QAAQ,IAAI,QAAQ;AAAA,EACtD,CAAC;AACD,QAAM,uBAAuB,IAAI;AAAA,IAC/B,SAAS,mBAAmB,IAAI,CAAC,UAAU,CAAC,MAAM,SAAS,uBAAuB,KAAK,CAAC,CAAC;AAAA,EAC3F;AACA,QAAM,qBAAqB,kBAAkB,KAAK,OAAO,CAAC,UAAU,kBAAkB,IAAI,MAAM,QAAQ,CAAC;AACzG,QAAM,qBAAqB,IAAI;AAAA,IAC7B,mBAAmB,IAAI,CAAC,UAAU,CAAC,MAAM,SAAS,uBAAuB,KAAK,CAAC,CAAC;AAAA,EAClF;AACA,QAAM,0BAA0B,CAAC,GAAG,qBAAqB,KAAK,CAAC,EAC5D,OAAO,CAAC,YAAY,CAAC,mBAAmB,IAAI,OAAO,CAAC,EACpD,KAAK;AACR,QAAM,wBAAwB,CAAC,GAAG,mBAAmB,KAAK,CAAC,EACxD,OAAO,CAAC,YAAY,CAAC,qBAAqB,IAAI,OAAO,CAAC,EACtD,KAAK;AAER,QAAM,8BAA8B,IAAI;AAAA,IACtC,SAAS,wBAAwB,IAAI,CAAC,QAAQ;AAAA,MAC5C,GAAG,IAAI,QAAQ,KAAK,IAAI,SAAS,KAAK,IAAI,aAAa;AAAA,MACvD,0BAA0B,GAAG;AAAA,IAC/B,CAAC;AAAA,EACH;AACA,QAAM,gCAAgC,wBAAwB,KAAK,OAAO,CAAC,QAAQ,kBAAkB,IAAI,IAAI,QAAQ,CAAC;AACtH,QAAM,4BAA4B,IAAI;AAAA,IACpC,8BAA8B,IAAI,CAAC,QAAQ;AAAA,MACzC,GAAG,IAAI,QAAQ,KAAK,IAAI,SAAS,KAAK,IAAI,aAAa;AAAA,MACvD,0BAA0B,GAAG;AAAA,IAC/B,CAAC;AAAA,EACH;AACA,QAAM,2BAA2B,CAAC,GAAG,4BAA4B,KAAK,CAAC,EACpE,OAAO,CAAC,QAAQ,CAAC,0BAA0B,IAAI,GAAG,CAAC,EACnD,KAAK;AACR,QAAM,yBAAyB,CAAC,GAAG,0BAA0B,KAAK,CAAC,EAChE,OAAO,CAAC,QAAQ,CAAC,4BAA4B,IAAI,GAAG,CAAC,EACrD,KAAK;AACR,QAAM,8BAA8B,CAAC,GAAG,4BAA4B,KAAK,CAAC,EACvE;AAAA,IAAO,CAAC,QACP,0BAA0B,IAAI,GAAG,KAAK,0BAA0B,IAAI,GAAG,MAAM,4BAA4B,IAAI,GAAG;AAAA,EAClH,EACC,KAAK;AAER,QAAM,8BAA8B,IAAI;AAAA,IACtC,SAAS,oBAAoB,IAAI,CAAC,QAAQ,CAAC,IAAI,SAAS,4BAA4B,GAAG,CAAC,CAAC;AAAA,EAC3F;AACA,QAAM,4BAA4B,IAAI;AAAA,IACpC,yBAAyB,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,SAAS,4BAA4B,GAAG,CAAC,CAAC;AAAA,EAC5F;AACA,QAAM,iCAAiC,CAAC,GAAG,4BAA4B,KAAK,CAAC,EAC1E,OAAO,CAAC,YAAY,CAAC,0BAA0B,IAAI,OAAO,CAAC,EAC3D,KAAK;AACR,QAAM,+BAA+B,CAAC,GAAG,0BAA0B,KAAK,CAAC,EACtE,OAAO,CAAC,YAAY,CAAC,4BAA4B,IAAI,OAAO,CAAC,EAC7D,KAAK;AACR,QAAM,oCAAoC,CAAC,GAAG,4BAA4B,KAAK,CAAC,EAC7E;AAAA,IAAO,CAAC,YACP,0BAA0B,IAAI,OAAO,KAAK,0BAA0B,IAAI,OAAO,MAAM,4BAA4B,IAAI,OAAO;AAAA,EAC9H,EACC,KAAK;AAER,QAAM,0BAA0B,IAAI;AAAA,KACjC,SAAS,YAAY,mBAAmB,CAAC,GAAG,IAAI,CAAC,QAAQ;AAAA,MACxD,GAAG,IAAI,KAAK,KAAK,IAAI,OAAO;AAAA,MAC5B,kCAAkC,GAAG;AAAA,IACvC,CAAC;AAAA,EACH;AACA,QAAM,wBAAwB,IAAI;AAAA,IAChC,oBAAoB,gBAAgB,IAAI,CAAC,QAAQ;AAAA,MAC/C,GAAG,IAAI,KAAK,KAAK,IAAI,OAAO;AAAA,MAC5B,kCAAkC,GAAG;AAAA,IACvC,CAAC;AAAA,EACH;AACA,QAAM,6BAA6B,CAAC,GAAG,wBAAwB,KAAK,CAAC,EAClE,OAAO,CAAC,YAAY,CAAC,sBAAsB,IAAI,OAAO,CAAC,EACvD,KAAK;AACR,QAAM,2BAA2B,CAAC,GAAG,sBAAsB,KAAK,CAAC,EAC9D,OAAO,CAAC,YAAY,CAAC,wBAAwB,IAAI,OAAO,CAAC,EACzD,KAAK;AACR,QAAM,gCAAgC,CAAC,GAAG,wBAAwB,KAAK,CAAC,EACrE;AAAA,IAAO,CAAC,YACP,sBAAsB,IAAI,OAAO,KAAK,sBAAsB,IAAI,OAAO,MAAM,wBAAwB,IAAI,OAAO;AAAA,EAClH,EACC,KAAK;AAER,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,IACE,oBACA,wBAAwB,WAAW,KACnC,sBAAsB,WAAW,KACjC,2BAA2B,WAAW,KACtC,wBAAwB,WAAW,KACnC,sBAAsB,WAAW,KACjC,yBAAyB,WAAW,KACpC,uBAAuB,WAAW,KAClC,4BAA4B,WAAW,KACvC,+BAA+B,WAAW,KAC1C,6BAA6B,WAAW,KACxC,kCAAkC,WAAW,KAC7C,2BAA2B,WAAW,KACtC,yBAAyB,WAAW,KACpC,8BAA8B,WAAW;AAAA,IAC3C,qBAAqB,SAAS,kBAAkB;AAAA,IAChD,mBAAmB,wBAAwB;AAAA,IAC3C,sBAAsB,SAAS,mBAAmB;AAAA,IAClD,oBAAoB,mBAAmB;AAAA,IACvC,2BAA2B,SAAS,wBAAwB;AAAA,IAC5D,yBAAyB,8BAA8B;AAAA,IACvD,6BAA6B,SAAS,oBAAoB;AAAA,IAC1D,2BAA2B,yBAAyB,KAAK;AAAA,IACzD,yBAAyB,SAAS,YAAY,gBAAgB,UAAU;AAAA,IACxE,uBAAuB,oBAAoB,gBAAgB;AAAA,IAC3D;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,qBAAqB,SAAS;AAAA,IAC9B,OAAO,SAAS;AAAA,EAClB;AACF;AAEA,eAAsB,uBACpB,SACuC;AACvC,QAAM,SAAS,QAAQ,WAAW;AAClC,QAAM,SAAS,MAAM,uBAAuB,OAAO;AACnD,MAAI,OAAO,IAAI;AACb,WAAO;AAAA,MACL;AAAA,MACA,UAAU;AAAA,MACV;AAAA,IACF;AAAA,EACF;AACA,MAAI,QAAQ;AACV,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,UAAU;AAAA,MACV;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,wBAAwB;AAAA,IAC5C,GAAG;AAAA,IACH,QAAQ;AAAA,EACV,CAAC;AACD,QAAM,WAAW,MAAM,uBAAuB,OAAO;AACrD,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,UAAU,SAAS;AAAA,IACnB,QAAQ;AAAA,IACR;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-PDDTI7IC.js → chunk-43SEBY2M.js}

@@ -279,4 +279,4 @@ async function searchHarmonicRetrieval(options) {
 export {
   searchHarmonicRetrieval
 };
-//# sourceMappingURL=chunk-PDDTI7IC.js.map
+//# sourceMappingURL=chunk-43SEBY2M.js.map

package/dist/{chunk-HWRD23DW.js → chunk-46SZBVDS.js}

@@ -3,14 +3,14 @@ import {
 } from "./chunk-KJTKLXTH.js";
 import {
   StorageManager
-} from "./chunk-6R4G7N4S.js";
+} from "./chunk-M4YHAODQ.js";
 import {
   copyExistingFileToBackup,
   writeFileAtomically
 } from "./chunk-AW4QUFQF.js";
 import {
   assertInjectedStorageRooted
-} from "./chunk-7FGL6CGA.js";
+} from "./chunk-DVYRD4HY.js";
 import {
   MEMORY_LIFECYCLE_LEDGER_LOCK_STALE_MS,
   buildLifecycleEventsForMemory,
@@ -260,4 +260,4 @@ export {
   backupExistingLedger,
   rebuildMemoryLifecycleLedger
 };
-//# sourceMappingURL=chunk-HWRD23DW.js.map
+//# sourceMappingURL=chunk-46SZBVDS.js.map

package/dist/{chunk-6HPHEFXT.js → chunk-5FD7JMTX.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-B7RWBZXW.js";
 import {
   StorageManager
-} from "./chunk-6R4G7N4S.js";
+} from "./chunk-M4YHAODQ.js";
 import {
   getCachedEpisodeMap,
   setCachedEpisodeMap
@@ -109,4 +109,4 @@ export {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
 };
-//# sourceMappingURL=chunk-6HPHEFXT.js.map
+//# sourceMappingURL=chunk-5FD7JMTX.js.map

package/dist/{chunk-7BZOBA5J.js → chunk-5NB726GV.js}

@@ -2,6 +2,9 @@ import {
   collapseWhitespace,
   truncateCodePointSafe
 } from "./chunk-6MKAMLQL.js";
+import {
+  isSupportPassportPrivateMemory
+} from "./chunk-XX4HPFFM.js";
 import {
   isHandleToken
 } from "./chunk-JAKIDQB2.js";
@@ -18,6 +21,46 @@ import {
 function isArtifactPath(value) {
   return typeof value === "string" && /(?:^|[\\/])artifacts(?:[\\/]|$)/i.test(value);
 }
+async function filterVisibleActiveMemoryCandidates(orchestrator, namespace, storage, candidates, visibilityCache) {
+  const visible = /* @__PURE__ */ new Set();
+  const pathCandidates = candidates.filter(
+    (candidate) => typeof candidate.path === "string" && !isArtifactPath(candidate.path)
+  );
+  if (pathCandidates.length > 0 && typeof orchestrator.filterPrivateSearchResults === "function") {
+    const qmdCandidates = pathCandidates.map((candidate) => ({
+      docid: candidate.id ?? candidate.path,
+      path: candidate.path,
+      snippet: candidate.snippet ?? candidate.text ?? "",
+      score: typeof candidate.score === "number" ? candidate.score : 0,
+      namespace
+    }));
+    const filtered = await orchestrator.filterPrivateSearchResults(
+      qmdCandidates,
+      [namespace],
+      false,
+      visibilityCache
+    );
+    const visibleKeys = new Set(filtered.map((candidate) => `${candidate.docid}\0${candidate.path}`));
+    qmdCandidates.forEach((candidate, index) => {
+      if (visibleKeys.has(`${candidate.docid}\0${candidate.path}`)) visible.add(pathCandidates[index]);
+    });
+  }
+  const idCandidates = candidates.filter(
+    (candidate) => candidate.path === void 0 && typeof candidate.id === "string"
+  );
+  if (storage) {
+    const idVisibility = await Promise.all(
+      idCandidates.map(async (candidate) => {
+        const memory = await storage.getMemoryById?.(candidate.id);
+        return memory !== null && memory !== void 0 && !isSupportPassportPrivateMemory(memory);
+      })
+    );
+    idCandidates.forEach((candidate, index) => {
+      if (idVisibility[index]) visible.add(candidate);
+    });
+  }
+  return candidates.filter((candidate) => visible.has(candidate));
+}
 function clampLimit(value) {
   if (typeof value !== "number" || !Number.isFinite(value)) return 8;
   return Math.max(1, Math.min(50, Math.floor(value)));
@@ -68,20 +111,35 @@ function resolveActiveMemoryNamespace(orchestrator, sessionKey, requestedNamespa
 }
 async function recallForActiveMemory(orchestrator, params) {
   const limit = clampLimit(params.limit);
-  const requestedResults = Math.min(200, limit + 20);
   const snippetMaxChars = typeof params.snippetMaxChars === "number" && Number.isFinite(params.snippetMaxChars) ? Math.max(1, Math.min(4e3, Math.floor(params.snippetMaxChars))) : 600;
   const namespace = resolveActiveMemoryNamespace(
     orchestrator,
     params.sessionKey,
     typeof params.filters?.namespace === "string" ? params.filters.namespace : void 0
   );
-  const raw = await orchestrator.searchAcrossNamespaces({
-    query: params.query,
-    maxResults: requestedResults,
-    namespaces: [namespace],
-    mode: "search"
-  });
-  const visible = raw.filter((candidate) => !isArtifactPath(candidate.path));
+  const storage = await orchestrator.getStorageForNamespace?.(namespace);
+  const candidateCap = 25e3;
+  let requestedResults = Math.min(candidateCap, limit + 20);
+  let raw = [];
+  let visible = [];
+  const privateVisibilityCache = /* @__PURE__ */ new Map();
+  for (; ; ) {
+    raw = await orchestrator.searchAcrossNamespaces({
+      query: params.query,
+      maxResults: requestedResults,
+      namespaces: [namespace],
+      mode: "search"
+    });
+    visible = await filterVisibleActiveMemoryCandidates(
+      orchestrator,
+      namespace,
+      storage,
+      raw,
+      privateVisibilityCache
+    );
+    if (visible.length > limit || raw.length < requestedResults || requestedResults >= candidateCap) break;
+    requestedResults = Math.min(candidateCap, requestedResults * 2);
+  }
   return {
     results: visible.slice(0, limit).map((candidate, index) => ({
       id: candidate.id ?? candidate.path ?? `memory-${index + 1}`,
@@ -89,7 +147,7 @@ async function recallForActiveMemory(orchestrator, params) {
       text: truncateSnippet(candidate.snippet ?? candidate.text ?? "", snippetMaxChars),
       metadata: pickMetadata(candidate.metadata)
     })),
-    truncated: visible.length > limit
+    truncated: visible.length > limit || raw.length === requestedResults && requestedResults >= candidateCap
   };
 }
 function buildActiveMemoryMetadataFromMemory(memory) {
@@ -108,11 +166,7 @@ function buildActiveMemoryMetadataFromMemory(memory) {
   return Object.keys(metadata).length > 0 ? metadata : void 0;
 }
 async function getMemoryForActiveMemory(orchestrator, id, options = {}) {
-  const namespace = resolveActiveMemoryNamespace(
-    orchestrator,
-    options.sessionKey,
-    options.namespace
-  );
+  const namespace = resolveActiveMemoryNamespace(orchestrator, options.sessionKey, options.namespace);
   const storage = typeof orchestrator.getStorageForNamespace === "function" ? await orchestrator.getStorageForNamespace(namespace) : orchestrator.storage;
   let resolvedId = id;
   if (isHandleToken(id) && typeof orchestrator.resolveMemoryIdOrHandle === "function") {
@@ -123,7 +177,7 @@ async function getMemoryForActiveMemory(orchestrator, id, options = {}) {
     }
   }
   const memory = await storage?.getMemoryById?.(resolvedId);
-  if (!memory) return { error: "not_found" };
+  if (!memory || isSupportPassportPrivateMemory(memory)) return { error: "not_found" };
   return {
     id: resolvedId,
     text: collapseWhitespace(memory.content),
@@ -135,4 +189,4 @@ export {
   recallForActiveMemory,
   getMemoryForActiveMemory
 };
-//# sourceMappingURL=chunk-7BZOBA5J.js.map
+//# sourceMappingURL=chunk-5NB726GV.js.map

package/dist/chunk-5NB726GV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/active-memory-bridge.ts"],"sourcesContent":["import { resolveNamespaceCapabilities } from \"./capabilities.js\";\nimport { canReadNamespace, defaultNamespaceForPrincipal, resolvePrincipal } from \"./namespaces/principal.js\";\nimport { isHandleToken } from \"./recall-handles.js\";\nimport { isSupportPassportPrivateMemory } from \"./support-passport/card-projection.js\";\nimport type { MemoryFile, PluginConfig, QmdSearchResult } from \"./types.js\";\nimport { collapseWhitespace, truncateCodePointSafe } from \"./whitespace.js\";\n\nexport interface ActiveMemoryMetadata {\n  type?: \"fact\" | \"preference\";\n  topic?: string;\n  updatedAt?: string;\n  sourceUri?: string;\n}\n\nexport interface ActiveMemorySearchResult {\n  id: string;\n  score: number;\n  text: string;\n  metadata?: ActiveMemoryMetadata;\n}\n\nexport interface ActiveMemorySearchOutput {\n  results: ActiveMemorySearchResult[];\n  truncated: boolean;\n}\n\nexport interface ActiveMemoryGetOutput {\n  id?: string;\n  text?: string;\n  metadata?: ActiveMemoryMetadata;\n  error?: \"not_found\";\n}\n\nexport interface ActiveMemoryRecallParams {\n  query: string;\n  limit?: number;\n  sessionKey: string;\n  filters?: Record<string, unknown>;\n  snippetMaxChars?: number;\n}\n\ninterface ActiveMemoryStorage {\n  readMemoryByPath?: (path: string) => Promise<MemoryFile | null>;\n  getMemoryById?: (id: string) => Promise<MemoryFile | null>;\n}\n\ninterface ActiveMemoryScopedOrchestrator {\n  config?: PluginConfig;\n  resolvePrincipal?: (sessionKey?: string) => string | undefined;\n  resolveSelfNamespace?: (sessionKey?: string) => string;\n  getStorageForNamespace?: (namespace: string) => Promise<ActiveMemoryStorage>;\n  filterPrivateSearchResults?: (\n    results: QmdSearchResult[],\n    namespaces?: readonly string[],\n    preserveUnresolved?: boolean,\n    visibilityCache?: Map<string, boolean>,\n  ) => Promise<QmdSearchResult[]>;\n}\n\ntype ActiveMemorySearchCandidate = {\n  id?: string;\n  score?: number;\n  snippet?: string;\n  text?: string;\n  path?: string;\n  metadata?: Record<string, unknown>;\n};\n\nfunction isArtifactPath(value: string | undefined): boolean {\n  return typeof value === \"string\" && /(?:^|[\\\\/])artifacts(?:[\\\\/]|$)/i.test(value);\n}\n\nasync function filterVisibleActiveMemoryCandidates(\n  orchestrator: ActiveMemoryScopedOrchestrator,\n  namespace: string,\n  storage: ActiveMemoryStorage | undefined,\n  candidates: ActiveMemorySearchCandidate[],\n  visibilityCache?: Map<string, boolean>,\n): Promise<ActiveMemorySearchCandidate[]> {\n  const visible = new Set<ActiveMemorySearchCandidate>();\n  const pathCandidates = candidates.filter(\n    (candidate) => typeof candidate.path === \"string\" && !isArtifactPath(candidate.path)\n  );\n  if (pathCandidates.length > 0 && typeof orchestrator.filterPrivateSearchResults === \"function\") {\n    const qmdCandidates = pathCandidates.map((candidate): QmdSearchResult => ({\n      docid: candidate.id ?? candidate.path!,\n      path: candidate.path!,\n      snippet: candidate.snippet ?? candidate.text ?? \"\",\n      score: typeof candidate.score === \"number\" ? candidate.score : 0,\n      namespace,\n    }));\n    const filtered = await orchestrator.filterPrivateSearchResults(\n      qmdCandidates,\n      [namespace],\n      false,\n      visibilityCache,\n    );\n    const visibleKeys = new Set(filtered.map((candidate) => `${candidate.docid}\\0${candidate.path}`));\n    qmdCandidates.forEach((candidate, index) => {\n      if (visibleKeys.has(`${candidate.docid}\\0${candidate.path}`)) visible.add(pathCandidates[index]!);\n    });\n  }\n\n  const idCandidates = candidates.filter(\n    (candidate) => candidate.path === undefined && typeof candidate.id === \"string\"\n  );\n  if (storage) {\n    const idVisibility = await Promise.all(\n      idCandidates.map(async (candidate) => {\n        const memory = await storage.getMemoryById?.(candidate.id!);\n        return memory !== null && memory !== undefined && !isSupportPassportPrivateMemory(memory);\n      })\n    );\n    idCandidates.forEach((candidate, index) => {\n      if (idVisibility[index]) visible.add(candidate);\n    });\n  }\n  return candidates.filter((candidate) => visible.has(candidate));\n}\n\nfunction clampLimit(value: number | undefined): number {\n  if (typeof value !== \"number\" || !Number.isFinite(value)) return 8;\n  return Math.max(1, Math.min(50, Math.floor(value)));\n}\n\nfunction truncateSnippet(value: string, maxChars: number): string {\n  const compact = collapseWhitespace(value);\n  return truncateCodePointSafe(compact, maxChars);\n}\n\nfunction pickMetadata(value: Record<string, unknown> | undefined): ActiveMemoryMetadata | undefined {\n  if (!value) return undefined;\n  const metadata: ActiveMemoryMetadata = {};\n  if (typeof value.type === \"string\") metadata.type = value.type as ActiveMemoryMetadata[\"type\"];\n  if (typeof value.topic === \"string\") metadata.topic = value.topic;\n  if (typeof value.updatedAt === \"string\") metadata.updatedAt = value.updatedAt;\n  if (typeof value.sourceUri === \"string\") metadata.sourceUri = value.sourceUri;\n  return Object.keys(metadata).length > 0 ? metadata : undefined;\n}\n\nfunction resolveActiveMemoryNamespace(\n  orchestrator: ActiveMemoryScopedOrchestrator,\n  sessionKey: string | undefined,\n  requestedNamespace: string | undefined\n): string {\n  const explicitNamespace =\n    typeof requestedNamespace === \"string\" && requestedNamespace.trim().length > 0\n      ? requestedNamespace.trim()\n      : undefined;\n  const config = orchestrator.config;\n\n  if (config?.namespacesEnabled === false) {\n    if (typeof orchestrator.resolveSelfNamespace === \"function\") {\n      return orchestrator.resolveSelfNamespace(sessionKey);\n    }\n    return \"default\";\n  }\n\n  if (!config) {\n    if (explicitNamespace) return explicitNamespace;\n    if (typeof orchestrator.resolveSelfNamespace === \"function\") {\n      return orchestrator.resolveSelfNamespace(sessionKey);\n    }\n    return \"default\";\n  }\n\n  const principal =\n    typeof orchestrator.resolvePrincipal === \"function\"\n      ? orchestrator.resolvePrincipal(sessionKey)\n      : resolvePrincipal(sessionKey, config);\n  if (resolveNamespaceCapabilities(config).namespaces && !principal) {\n    throw new Error(\"authentication required: namespaces are enabled and no principal was supplied\");\n  }\n  if (explicitNamespace) {\n    if (!canReadNamespace(principal, explicitNamespace, config)) {\n      throw new Error(`namespace ${explicitNamespace} is not readable for principal ${principal}`);\n    }\n    return explicitNamespace;\n  }\n  if (typeof orchestrator.resolveSelfNamespace === \"function\") {\n    return orchestrator.resolveSelfNamespace(sessionKey);\n  }\n  return defaultNamespaceForPrincipal(principal, config);\n}\n\nexport async function recallForActiveMemory(\n  orchestrator: {\n    config?: PluginConfig;\n    resolvePrincipal?: (sessionKey?: string) => string | undefined;\n    resolveSelfNamespace?: (sessionKey?: string) => string;\n    getStorageForNamespace?: ActiveMemoryScopedOrchestrator[\"getStorageForNamespace\"];\n    filterPrivateSearchResults?: ActiveMemoryScopedOrchestrator[\"filterPrivateSearchResults\"];\n    searchAcrossNamespaces: (params: {\n      query: string;\n      maxResults?: number;\n      namespaces?: string[];\n      mode?: string;\n    }) => Promise<ActiveMemorySearchCandidate[]>;\n  },\n  params: ActiveMemoryRecallParams\n): Promise<ActiveMemorySearchOutput> {\n  const limit = clampLimit(params.limit);\n  const snippetMaxChars =\n    typeof params.snippetMaxChars === \"number\" && Number.isFinite(params.snippetMaxChars)\n      ? Math.max(1, Math.min(4000, Math.floor(params.snippetMaxChars)))\n      : 600;\n  const namespace = resolveActiveMemoryNamespace(\n    orchestrator,\n    params.sessionKey,\n    typeof params.filters?.namespace === \"string\" ? params.filters.namespace : undefined\n  );\n\n  const storage = await orchestrator.getStorageForNamespace?.(namespace);\n  const candidateCap = 25_000;\n  let requestedResults = Math.min(candidateCap, limit + 20);\n  let raw: ActiveMemorySearchCandidate[] = [];\n  let visible: ActiveMemorySearchCandidate[] = [];\n  const privateVisibilityCache = new Map<string, boolean>();\n  for (;;) {\n    raw = await orchestrator.searchAcrossNamespaces({\n      query: params.query,\n      maxResults: requestedResults,\n      namespaces: [namespace],\n      mode: \"search\",\n    });\n    visible = await filterVisibleActiveMemoryCandidates(\n      orchestrator,\n      namespace,\n      storage,\n      raw,\n      privateVisibilityCache,\n    );\n    if (visible.length > limit || raw.length < requestedResults || requestedResults >= candidateCap) break;\n    requestedResults = Math.min(candidateCap, requestedResults * 2);\n  }\n\n  return {\n    results: visible.slice(0, limit).map((candidate, index) => ({\n      id: candidate.id ?? candidate.path ?? `memory-${index + 1}`,\n      score: typeof candidate.score === \"number\" ? candidate.score : 0,\n      text: truncateSnippet(candidate.snippet ?? candidate.text ?? \"\", snippetMaxChars),\n      metadata: pickMetadata(candidate.metadata),\n    })),\n    truncated: visible.length > limit || (raw.length === requestedResults && requestedResults >= candidateCap),\n  };\n}\n\nfunction buildActiveMemoryMetadataFromMemory(memory: MemoryFile): ActiveMemoryMetadata | undefined {\n  const metadata: ActiveMemoryMetadata = {};\n  if (typeof memory.frontmatter.category === \"string\") {\n    const category = memory.frontmatter.category;\n    if (category === \"fact\" || category === \"preference\") {\n      metadata.type = category;\n    }\n  }\n  if (Array.isArray(memory.frontmatter.tags) && memory.frontmatter.tags.length > 0) {\n    metadata.topic = memory.frontmatter.tags[0];\n  }\n  if (typeof memory.frontmatter.updated === \"string\") metadata.updatedAt = memory.frontmatter.updated;\n  if (typeof memory.frontmatter.source === \"string\") metadata.sourceUri = memory.frontmatter.source;\n  return Object.keys(metadata).length > 0 ? metadata : undefined;\n}\n\nexport async function getMemoryForActiveMemory(\n  orchestrator: {\n    config?: PluginConfig;\n    resolvePrincipal?: (sessionKey?: string) => string;\n    resolveSelfNamespace?: (sessionKey?: string) => string;\n    getStorageForNamespace?: (namespace: string) => Promise<{\n      getMemoryById?: (id: string) => Promise<MemoryFile | null>;\n    }>;\n    storage?: {\n      getMemoryById?: (id: string) => Promise<MemoryFile | null>;\n    };\n    /** Issue #1582 — resolves a `[m:xxxx]` handle to a memory id (orchestrator). */\n    resolveMemoryIdOrHandle?: (ref: string, sessionKey?: string) => string;\n  },\n  id: string,\n  options: {\n    namespace?: string;\n    sessionKey?: string;\n  } = {}\n): Promise<ActiveMemoryGetOutput> {\n  const namespace = resolveActiveMemoryNamespace(orchestrator, options.sessionKey, options.namespace);\n\n  const storage =\n    typeof orchestrator.getStorageForNamespace === \"function\"\n      ? await orchestrator.getStorageForNamespace(namespace)\n      : orchestrator.storage;\n\n  // Issue #1582 — resolve a `[m:xxxx]` handle to its memory id against the\n  // caller's session before the storage read, so OpenClaw active-memory agents\n  // can cite injected handles through the SAME shared path as memory_get /\n  // correction (cursor review). Raw ids pass through unchanged.\n  //\n  // A handle that misses, collides, or has no session key becomes not_found —\n  // the SAME behavior a bad raw id yields below — instead of throwing, so an\n  // active-memory caller gets a uniform not-found contract (cursor review).\n  let resolvedId = id;\n  if (isHandleToken(id) && typeof orchestrator.resolveMemoryIdOrHandle === \"function\") {\n    try {\n      resolvedId = orchestrator.resolveMemoryIdOrHandle(id, options.sessionKey);\n    } catch {\n      return { error: \"not_found\" };\n    }\n  }\n  const memory = await storage?.getMemoryById?.(resolvedId);\n  if (!memory || isSupportPassportPrivateMemory(memory)) return { error: \"not_found\" };\n  return {\n    id: resolvedId,\n    text: collapseWhitespace(memory.content),\n    metadata: buildActiveMemoryMetadataFromMemory(memory),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAoEA,SAAS,eAAe,OAAoC;AAC1D,SAAO,OAAO,UAAU,YAAY,mCAAmC,KAAK,KAAK;AACnF;AAEA,eAAe,oCACb,cACA,WACA,SACA,YACA,iBACwC;AACxC,QAAM,UAAU,oBAAI,IAAiC;AACrD,QAAM,iBAAiB,WAAW;AAAA,IAChC,CAAC,cAAc,OAAO,UAAU,SAAS,YAAY,CAAC,eAAe,UAAU,IAAI;AAAA,EACrF;AACA,MAAI,eAAe,SAAS,KAAK,OAAO,aAAa,+BAA+B,YAAY;AAC9F,UAAM,gBAAgB,eAAe,IAAI,CAAC,eAAgC;AAAA,MACxE,OAAO,UAAU,MAAM,UAAU;AAAA,MACjC,MAAM,UAAU;AAAA,MAChB,SAAS,UAAU,WAAW,UAAU,QAAQ;AAAA,MAChD,OAAO,OAAO,UAAU,UAAU,WAAW,UAAU,QAAQ;AAAA,MAC/D;AAAA,IACF,EAAE;AACF,UAAM,WAAW,MAAM,aAAa;AAAA,MAClC;AAAA,MACA,CAAC,SAAS;AAAA,MACV;AAAA,MACA;AAAA,IACF;AACA,UAAM,cAAc,IAAI,IAAI,SAAS,IAAI,CAAC,cAAc,GAAG,UAAU,KAAK,KAAK,UAAU,IAAI,EAAE,CAAC;AAChG,kBAAc,QAAQ,CAAC,WAAW,UAAU;AAC1C,UAAI,YAAY,IAAI,GAAG,UAAU,KAAK,KAAK,UAAU,IAAI,EAAE,EAAG,SAAQ,IAAI,eAAe,KAAK,CAAE;AAAA,IAClG,CAAC;AAAA,EACH;AAEA,QAAM,eAAe,WAAW;AAAA,IAC9B,CAAC,cAAc,UAAU,SAAS,UAAa,OAAO,UAAU,OAAO;AAAA,EACzE;AACA,MAAI,SAAS;AACX,UAAM,eAAe,MAAM,QAAQ;AAAA,MACjC,aAAa,IAAI,OAAO,cAAc;AACpC,cAAM,SAAS,MAAM,QAAQ,gBAAgB,UAAU,EAAG;AAC1D,eAAO,WAAW,QAAQ,WAAW,UAAa,CAAC,+BAA+B,MAAM;AAAA,MAC1F,CAAC;AAAA,IACH;AACA,iBAAa,QAAQ,CAAC,WAAW,UAAU;AACzC,UAAI,aAAa,KAAK,EAAG,SAAQ,IAAI,SAAS;AAAA,IAChD,CAAC;AAAA,EACH;AACA,SAAO,WAAW,OAAO,CAAC,cAAc,QAAQ,IAAI,SAAS,CAAC;AAChE;AAEA,SAAS,WAAW,OAAmC;AACrD,MAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACjE,SAAO,KAAK,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,MAAM,KAAK,CAAC,CAAC;AACpD;AAEA,SAAS,gBAAgB,OAAe,UAA0B;AAChE,QAAM,UAAU,mBAAmB,KAAK;AACxC,SAAO,sBAAsB,SAAS,QAAQ;AAChD;AAEA,SAAS,aAAa,OAA8E;AAClG,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,WAAiC,CAAC;AACxC,MAAI,OAAO,MAAM,SAAS,SAAU,UAAS,OAAO,MAAM;AAC1D,MAAI,OAAO,MAAM,UAAU,SAAU,UAAS,QAAQ,MAAM;AAC5D,MAAI,OAAO,MAAM,cAAc,SAAU,UAAS,YAAY,MAAM;AACpE,MAAI,OAAO,MAAM,cAAc,SAAU,UAAS,YAAY,MAAM;AACpE,SAAO,OAAO,KAAK,QAAQ,EAAE,SAAS,IAAI,WAAW;AACvD;AAEA,SAAS,6BACP,cACA,YACA,oBACQ;AACR,QAAM,oBACJ,OAAO,uBAAuB,YAAY,mBAAmB,KAAK,EAAE,SAAS,IACzE,mBAAmB,KAAK,IACxB;AACN,QAAM,SAAS,aAAa;AAE5B,MAAI,QAAQ,sBAAsB,OAAO;AACvC,QAAI,OAAO,aAAa,yBAAyB,YAAY;AAC3D,aAAO,aAAa,qBAAqB,UAAU;AAAA,IACrD;AACA,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,QAAQ;AACX,QAAI,kBAAmB,QAAO;AAC9B,QAAI,OAAO,aAAa,yBAAyB,YAAY;AAC3D,aAAO,aAAa,qBAAqB,UAAU;AAAA,IACrD;AACA,WAAO;AAAA,EACT;AAEA,QAAM,YACJ,OAAO,aAAa,qBAAqB,aACrC,aAAa,iBAAiB,UAAU,IACxC,iBAAiB,YAAY,MAAM;AACzC,MAAI,6BAA6B,MAAM,EAAE,cAAc,CAAC,WAAW;AACjE,UAAM,IAAI,MAAM,+EAA+E;AAAA,EACjG;AACA,MAAI,mBAAmB;AACrB,QAAI,CAAC,iBAAiB,WAAW,mBAAmB,MAAM,GAAG;AAC3D,YAAM,IAAI,MAAM,aAAa,iBAAiB,kCAAkC,SAAS,EAAE;AAAA,IAC7F;AACA,WAAO;AAAA,EACT;AACA,MAAI,OAAO,aAAa,yBAAyB,YAAY;AAC3D,WAAO,aAAa,qBAAqB,UAAU;AAAA,EACrD;AACA,SAAO,6BAA6B,WAAW,MAAM;AACvD;AAEA,eAAsB,sBACpB,cAaA,QACmC;AACnC,QAAM,QAAQ,WAAW,OAAO,KAAK;AACrC,QAAM,kBACJ,OAAO,OAAO,oBAAoB,YAAY,OAAO,SAAS,OAAO,eAAe,IAChF,KAAK,IAAI,GAAG,KAAK,IAAI,KAAM,KAAK,MAAM,OAAO,eAAe,CAAC,CAAC,IAC9D;AACN,QAAM,YAAY;AAAA,IAChB;AAAA,IACA,OAAO;AAAA,IACP,OAAO,OAAO,SAAS,cAAc,WAAW,OAAO,QAAQ,YAAY;AAAA,EAC7E;AAEA,QAAM,UAAU,MAAM,aAAa,yBAAyB,SAAS;AACrE,QAAM,eAAe;AACrB,MAAI,mBAAmB,KAAK,IAAI,cAAc,QAAQ,EAAE;AACxD,MAAI,MAAqC,CAAC;AAC1C,MAAI,UAAyC,CAAC;AAC9C,QAAM,yBAAyB,oBAAI,IAAqB;AACxD,aAAS;AACP,UAAM,MAAM,aAAa,uBAAuB;AAAA,MAC9C,OAAO,OAAO;AAAA,MACd,YAAY;AAAA,MACZ,YAAY,CAAC,SAAS;AAAA,MACtB,MAAM;AAAA,IACR,CAAC;AACD,cAAU,MAAM;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,QAAQ,SAAS,SAAS,IAAI,SAAS,oBAAoB,oBAAoB,aAAc;AACjG,uBAAmB,KAAK,IAAI,cAAc,mBAAmB,CAAC;AAAA,EAChE;AAEA,SAAO;AAAA,IACL,SAAS,QAAQ,MAAM,GAAG,KAAK,EAAE,IAAI,CAAC,WAAW,WAAW;AAAA,MAC1D,IAAI,UAAU,MAAM,UAAU,QAAQ,UAAU,QAAQ,CAAC;AAAA,MACzD,OAAO,OAAO,UAAU,UAAU,WAAW,UAAU,QAAQ;AAAA,MAC/D,MAAM,gBAAgB,UAAU,WAAW,UAAU,QAAQ,IAAI,eAAe;AAAA,MAChF,UAAU,aAAa,UAAU,QAAQ;AAAA,IAC3C,EAAE;AAAA,IACF,WAAW,QAAQ,SAAS,SAAU,IAAI,WAAW,oBAAoB,oBAAoB;AAAA,EAC/F;AACF;AAEA,SAAS,oCAAoC,QAAsD;AACjG,QAAM,WAAiC,CAAC;AACxC,MAAI,OAAO,OAAO,YAAY,aAAa,UAAU;AACnD,UAAM,WAAW,OAAO,YAAY;AACpC,QAAI,aAAa,UAAU,aAAa,cAAc;AACpD,eAAS,OAAO;AAAA,IAClB;AAAA,EACF;AACA,MAAI,MAAM,QAAQ,OAAO,YAAY,IAAI,KAAK,OAAO,YAAY,KAAK,SAAS,GAAG;AAChF,aAAS,QAAQ,OAAO,YAAY,KAAK,CAAC;AAAA,EAC5C;AACA,MAAI,OAAO,OAAO,YAAY,YAAY,SAAU,UAAS,YAAY,OAAO,YAAY;AAC5F,MAAI,OAAO,OAAO,YAAY,WAAW,SAAU,UAAS,YAAY,OAAO,YAAY;AAC3F,SAAO,OAAO,KAAK,QAAQ,EAAE,SAAS,IAAI,WAAW;AACvD;AAEA,eAAsB,yBACpB,cAaA,IACA,UAGI,CAAC,GAC2B;AAChC,QAAM,YAAY,6BAA6B,cAAc,QAAQ,YAAY,QAAQ,SAAS;AAElG,QAAM,UACJ,OAAO,aAAa,2BAA2B,aAC3C,MAAM,aAAa,uBAAuB,SAAS,IACnD,aAAa;AAUnB,MAAI,aAAa;AACjB,MAAI,cAAc,EAAE,KAAK,OAAO,aAAa,4BAA4B,YAAY;AACnF,QAAI;AACF,mBAAa,aAAa,wBAAwB,IAAI,QAAQ,UAAU;AAAA,IAC1E,QAAQ;AACN,aAAO,EAAE,OAAO,YAAY;AAAA,IAC9B;AAAA,EACF;AACA,QAAM,SAAS,MAAM,SAAS,gBAAgB,UAAU;AACxD,MAAI,CAAC,UAAU,+BAA+B,MAAM,EAAG,QAAO,EAAE,OAAO,YAAY;AACnF,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,MAAM,mBAAmB,OAAO,OAAO;AAAA,IACvC,UAAU,oCAAoC,MAAM;AAAA,EACtD;AACF;","names":[]}

package/dist/chunk-62OKGIJA.js

@@ -0,0 +1,39 @@
+import {
+  coerceBool
+} from "./chunk-PQVCH2AE.js";
+
+// src/support-passport/config.ts
+import { isIP } from "net";
+import { z } from "zod";
+var DEFAULT_SUPPORT_PASSPORT_CONFIG = {
+  enabled: false,
+  trustedProxyAddresses: []
+};
+function parseSupportPassportConfig(raw) {
+  if (raw === void 0) {
+    return {
+      ...DEFAULT_SUPPORT_PASSPORT_CONFIG,
+      trustedProxyAddresses: [...DEFAULT_SUPPORT_PASSPORT_CONFIG.trustedProxyAddresses]
+    };
+  }
+  const schema = z.object({
+    enabled: z.preprocess((value) => {
+      if (value === void 0) return false;
+      return coerceBool(value) ?? value;
+    }, z.boolean()).default(false),
+    trustedProxyAddresses: z.array(z.string().trim().refine((value) => isIP(value) !== 0, "must contain IP addresses")).max(32).default([])
+  }).strict();
+  const parsed = schema.safeParse(raw);
+  if (!parsed.success) {
+    throw new Error(
+      "supportPassport must contain only enabled and up to 32 trustedProxyAddresses IP addresses"
+    );
+  }
+  return parsed.data;
+}
+
+export {
+  DEFAULT_SUPPORT_PASSPORT_CONFIG,
+  parseSupportPassportConfig
+};
+//# sourceMappingURL=chunk-62OKGIJA.js.map

package/dist/chunk-62OKGIJA.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/support-passport/config.ts"],"sourcesContent":["import { isIP } from \"node:net\";\n\nimport { z } from \"zod\";\n\nimport { coerceBool } from \"../connectors/coerce.js\";\nimport type { SupportPassportConfig } from \"../types.js\";\n\nexport const DEFAULT_SUPPORT_PASSPORT_CONFIG: SupportPassportConfig = {\n  enabled: false,\n  trustedProxyAddresses: [],\n};\n\nexport function parseSupportPassportConfig(raw: unknown): SupportPassportConfig {\n  if (raw === undefined) {\n    return {\n      ...DEFAULT_SUPPORT_PASSPORT_CONFIG,\n      trustedProxyAddresses: [...DEFAULT_SUPPORT_PASSPORT_CONFIG.trustedProxyAddresses],\n    };\n  }\n  const schema = z\n    .object({\n      enabled: z\n        .preprocess((value) => {\n          if (value === undefined) return false;\n          return coerceBool(value) ?? value;\n        }, z.boolean())\n        .default(false),\n      trustedProxyAddresses: z\n        .array(z.string().trim().refine((value) => isIP(value) !== 0, \"must contain IP addresses\"))\n        .max(32)\n        .default([]),\n    })\n    .strict();\n  const parsed = schema.safeParse(raw);\n  if (!parsed.success) {\n    throw new Error(\n      \"supportPassport must contain only enabled and up to 32 trustedProxyAddresses IP addresses\"\n    );\n  }\n  return parsed.data;\n}\n"],"mappings":";;;;;AAAA,SAAS,YAAY;AAErB,SAAS,SAAS;AAKX,IAAM,kCAAyD;AAAA,EACpE,SAAS;AAAA,EACT,uBAAuB,CAAC;AAC1B;AAEO,SAAS,2BAA2B,KAAqC;AAC9E,MAAI,QAAQ,QAAW;AACrB,WAAO;AAAA,MACL,GAAG;AAAA,MACH,uBAAuB,CAAC,GAAG,gCAAgC,qBAAqB;AAAA,IAClF;AAAA,EACF;AACA,QAAM,SAAS,EACZ,OAAO;AAAA,IACN,SAAS,EACN,WAAW,CAAC,UAAU;AACrB,UAAI,UAAU,OAAW,QAAO;AAChC,aAAO,WAAW,KAAK,KAAK;AAAA,IAC9B,GAAG,EAAE,QAAQ,CAAC,EACb,QAAQ,KAAK;AAAA,IAChB,uBAAuB,EACpB,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,KAAK,KAAK,MAAM,GAAG,2BAA2B,CAAC,EACzF,IAAI,EAAE,EACN,QAAQ,CAAC,CAAC;AAAA,EACf,CAAC,EACA,OAAO;AACV,QAAM,SAAS,OAAO,UAAU,GAAG;AACnC,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,SAAO,OAAO;AAChB;","names":[]}