@remnic/core 9.54.4 → 9.54.6

package/dist/chunk-KFBOPMF6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/local-llm.ts"],"sourcesContent":["import { log } from \"./logger.js\";\nimport type { PluginConfig } from \"./types.js\";\nimport fs from \"node:fs\";\nimport os from \"node:os\";\nimport type { ModelRegistry } from \"./model-registry.js\";\nimport { launchProcessSync } from \"./runtime/child-process.js\";\nimport { mergeEnv, readEnvVar } from \"./runtime/env.js\";\nimport { resolveLocalLlmCapabilities } from \"./capabilities.js\";\nimport { resolvePipelineProcessingCapabilities } from \"./capabilities.js\";\nimport { ChatTransport } from \"./local-llm-transport.js\";\nimport {\n  extractNonRecoverableBackendReason,\n  extractNonRecoverableBackendReasonFromErrorText,\n  isAbortError,\n  probeFetch,\n  resolveUnavailableVerdict,\n  type ProbeFetchResult,\n  normalizeBackendTripReason,\n  waitForRetryBackoff,\n  SingleFlightProbe,\n} from \"./local-llm-helpers.js\";\n\n/** Trim trailing slash characters without backtracking regex. */\nfunction trimTrailingSlashes(s: string): string {\n  let end = s.length;\n  while (end > 0 && s[end - 1] === \"/\") end--;\n  return s.substring(0, end);\n}\n\nfunction stripTrailingV1Path(s: string): string {\n  return s.endsWith(\"/v1\") ? s.slice(0, -3) : s;\n}\n\nfunction explicitPortFromUrl(s: string): number | null {\n  try {\n    const parsed = new URL(s);\n    if (!parsed.port) return null;\n    const port = Number(parsed.port);\n    return Number.isInteger(port) ? port : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction isObjectRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null;\n}\n\nfunction isLlamaCppPropsResponse(value: unknown): boolean {\n  return (\n    isObjectRecord(value) &&\n    isObjectRecord(value.default_generation_settings) &&\n    typeof value.total_slots === \"number\" &&\n    (\n      typeof value.model_path === \"string\" ||\n      typeof value.chat_template === \"string\" ||\n      typeof value.build_info === \"string\"\n    )\n  );\n}\n\nfunction isLlamaCppModelsResponse(value: unknown): boolean {\n  if (!isObjectRecord(value) || !Array.isArray(value.data)) {\n    return false;\n  }\n  return value.data.some((entry) => {\n    if (!isObjectRecord(entry)) return false;\n    if (entry.owned_by === \"llamacpp\") return true;\n    if (typeof entry.id === \"string\" && entry.id.endsWith(\".gguf\")) return true;\n    const meta = entry.meta;\n    return (\n      isObjectRecord(meta) &&\n      (\"n_ctx_train\" in meta || \"n_params\" in meta || \"vocab_type\" in meta)\n    );\n  });\n}\n\nfunction isLmStudioApiV1ModelsResponse(value: unknown): boolean {\n  if (!isObjectRecord(value) || !Array.isArray(value.models)) {\n    return false;\n  }\n  return value.models.some((entry) => {\n    if (!isObjectRecord(entry)) return false;\n    return (\n      typeof entry.key === \"string\" &&\n      typeof entry.display_name === \"string\" &&\n      (\n        typeof entry.format === \"string\" ||\n        typeof entry.max_context_length === \"number\" ||\n        Array.isArray(entry.loaded_instances)\n      )\n    );\n  });\n}\n\nfunction isLmStudioApiV0ModelsResponse(value: unknown): boolean {\n  if (!isObjectRecord(value) || !Array.isArray(value.data)) {\n    return false;\n  }\n  return value.data.some((entry) => {\n    if (!isObjectRecord(entry)) return false;\n    return (\n      typeof entry.id === \"string\" &&\n      typeof entry.publisher === \"string\" &&\n      (\n        typeof entry.compatibility_type === \"string\" ||\n        typeof entry.max_context_length === \"number\" ||\n        typeof entry.state === \"string\"\n      )\n    );\n  });\n}\n\nfunction isLmStudioNativeModelsResponse(value: unknown): boolean {\n  return isLmStudioApiV1ModelsResponse(value) || isLmStudioApiV0ModelsResponse(value);\n}\n\n/**\n * Local LLM client for OpenAI-compatible endpoints (LM Studio, Ollama, MLX, etc.)\n *\n * Based on openclaw-tactician's provider detection patterns for consistency.\n * Provides privacy-preserving, cost-effective LLM operations with\n * graceful fallback to cloud providers when local LLM is unavailable.\n */\nexport type LocalLlmType = \"lmstudio\" | \"ollama\" | \"mlx\" | \"vllm\" | \"llamacpp\" | \"generic\";\n\n/**\n * Backends known to honor `chat_template_kwargs: { enable_thinking: false }`\n * on OpenAI-compatible `/v1/chat/completions`.  LM Studio, vLLM, and\n * llama.cpp forward this field to the jinja chat template, where thinking-capable\n * models (Qwen 3.5, Gemma 4, DeepSeek) suppress reasoning tokens.\n *\n * Strict OpenAI-compatible backends (standard OpenAI, Azure OpenAI, some\n * proxies) reject unknown request fields with 400 — which trips the\n * `localLlm400*` cooldown path.  `LocalLlmClient` therefore only injects\n * the kwarg when the detected backend is in this set; unknown / `generic`\n * / `ollama` / `mlx` fail open (no injection, no 400 risk).  Issue #548.\n */\nconst THINKING_COMPATIBLE_BACKENDS: ReadonlySet<LocalLlmType> = new Set([\n  \"lmstudio\",\n  \"vllm\",\n  \"llamacpp\",\n]);\n\nconst THINKING_SUPPRESSED_OPERATIONS: ReadonlySet<string> = new Set([\n  \"extraction\",\n  \"extraction-judge\",\n  \"extraction-faithfulness\",\n  \"contradiction-judge\",\n  \"contradiction_verification\",\n  \"link_suggestion\",\n  \"memory_summarization\",\n  \"proactive_extraction\",\n  \"lcm-summarize\",\n  \"day_summary\",\n  \"hourly_summary\",\n  \"hourly_summary_extended\",\n]);\n\ninterface LocalServerConfig {\n  type: LocalLlmType;\n  defaultPort: number;\n  healthEndpoint: string;\n  modelsEndpoint: string;\n  detectFn: (response: unknown) => boolean;\n}\n\nconst LOCAL_SERVERS: LocalServerConfig[] = [\n  {\n    type: \"ollama\",\n    defaultPort: 11434,\n    healthEndpoint: \"/\",\n    modelsEndpoint: \"/api/tags\",\n    detectFn: (resp) => typeof resp === \"string\" && resp.includes(\"Ollama\"),\n  },\n  {\n    type: \"llamacpp\",\n    defaultPort: 8080,\n    healthEndpoint: \"/health\",\n    modelsEndpoint: \"/v1/models\",\n    detectFn: (resp) => isObjectRecord(resp) && resp.status === \"ok\",\n  },\n  {\n    type: \"mlx\",\n    defaultPort: 8080,\n    healthEndpoint: \"/v1/models\",\n    modelsEndpoint: \"/v1/models\",\n    detectFn: (resp) => isObjectRecord(resp) && Array.isArray(resp.data),\n  },\n  {\n    type: \"lmstudio\",\n    defaultPort: 1234,\n    healthEndpoint: \"/v1/models\",\n    modelsEndpoint: \"/v1/models\",\n    detectFn: (resp) => isObjectRecord(resp) && Array.isArray(resp.data),\n  },\n  {\n    type: \"vllm\",\n    defaultPort: 8000,\n    healthEndpoint: \"/health\",\n    modelsEndpoint: \"/v1/models\",\n    detectFn: (resp) => resp === \"\" || (isObjectRecord(resp) && !(\"status\" in resp)),\n  },\n];\n\nfunction orderedLocalServers(configuredBaseUrl: string): LocalServerConfig[] {\n  const configuredPort = explicitPortFromUrl(configuredBaseUrl);\n  if (configuredPort === null) return LOCAL_SERVERS;\n  const matching = LOCAL_SERVERS.filter(\n    (serverConfig) => serverConfig.defaultPort === configuredPort,\n  );\n  if (matching.length === 0) return LOCAL_SERVERS;\n  const matchingTypes = new Set(matching.map((serverConfig) => serverConfig.type));\n  return [\n    ...matching,\n    ...LOCAL_SERVERS.filter((serverConfig) => !matchingTypes.has(serverConfig.type)),\n  ];\n}\n\nexport interface LocalModelInfo {\n  id: string;\n  contextWindow?: number;\n  maxTokens?: number;\n}\n\nexport type LocalLlmRequestPriority = \"recall-critical\" | \"background\";\n\ninterface LocalLlmChatCompletionOptions {\n  temperature?: number;\n  maxTokens?: number;\n  responseFormat?: { type: string };\n  timeoutMs?: number;\n  operation?: string;\n  forceDisableThinking?: boolean;\n  disableThinking?: boolean;\n  priority?: LocalLlmRequestPriority;\n  signal?: AbortSignal;\n  redactProviderErrors?: boolean;\n}\ninterface LocalLlmQueuedRequest {\n  messages: Array<{ role: string; content: string }>;\n  options: LocalLlmChatCompletionOptions;\n  priority: LocalLlmRequestPriority;\n  enqueuedAtMs: number;\n  resolve: (value: LocalLlmChatCompletionResult | null) => void;\n}\n\ninterface LocalLlmChatCompletionResult {\n  content: string;\n  usage?: { promptTokens: number; completionTokens: number; totalTokens: number };\n}\n\nconst LOCAL_LLM_GLOBAL_BACKEND_STATE = \"__openclawEngramLocalLlmBackendState\";\n\ntype LocalLlmBackendState = {\n  untilMs: number;\n  reason: string;\n};\nexport class LocalLlmClient {\n  private config: PluginConfig;\n  private isAvailable: boolean | null = null;\n  private lastHealthCheck: number = 0;\n  private readonly availabilityProbe = new SingleFlightProbe();\n  private detectedType: LocalLlmType | null = null;\n  private cachedModelInfo: LocalModelInfo | null = null;\n  private cachedLmsContext: number | null = null;\n  private lastLmsCheck: number = 0;\n  private consecutive400s: number = 0;\n  private cooldownUntilMs: number = 0;\n  private modelRegistry?: ModelRegistry;\n  private _disableThinking: boolean = false;\n  private readonly requestQueues: Record<LocalLlmRequestPriority, LocalLlmQueuedRequest[]> = {\n    \"recall-critical\": [],\n    background: [],\n  };\n  private readonly queueProcessing = new Set<LocalLlmRequestPriority>();\n  private queueDrainScheduled: boolean = false;\n  private static readonly HEALTH_CHECK_INTERVAL_MS = 60000; // 1 minute\n  private static readonly LMS_CACHE_INTERVAL_MS = 30000; // 30 seconds\n  private readonly chatTransport = new ChatTransport();\n\n  constructor(config: PluginConfig, modelRegistry?: ModelRegistry) {\n    this.config = config;\n    this.modelRegistry = modelRegistry;\n  }\n\n  /**\n   * Request thinking/reasoning suppression on the next chat completion.\n   *\n   * When `true`, the client will inject\n   * `chat_template_kwargs: { enable_thinking: false }` into the request\n   * body — **but only when the detected backend is known to support it**\n   * (LM Studio, vLLM; see `THINKING_COMPATIBLE_BACKENDS`).  Strict\n   * OpenAI-compat backends reject unknown fields with 400; on those the\n   * client fails open (thinking runs normally).  This is the safe\n   * default for Remnic extraction-style operations: measurable latency\n   * win on thinking-capable backends, zero risk on others. Consolidation\n   * operations keep thinking enabled unless explicitly added to\n   * `THINKING_SUPPRESSED_OPERATIONS`. Issues #548 and #979.\n   */\n  set disableThinking(value: boolean) {\n    this._disableThinking = value;\n  }\n\n  private resolveHomeDir(): string {\n    return this.config.localLlmHomeDir || readEnvVar(\"HOME\") || os.homedir();\n  }\n\n  private buildRequestHeaders(base: Record<string, string> = {}): Record<string, string> {\n    const headers: Record<string, string> = {\n      ...base,\n      ...(this.config.localLlmHeaders ?? {}),\n    };\n    if (this.config.localLlmApiKey && this.config.localLlmAuthHeader !== false) {\n      headers.Authorization = `Bearer ${this.config.localLlmApiKey}`;\n    }\n    return headers;\n  }\n\n\n  /**\n   * Set the ModelRegistry for caching detected capabilities\n   */\n  setModelRegistry(registry: ModelRegistry): void {\n    this.modelRegistry = registry;\n  }\n\n  /**\n   * Get the detected server type (null if not detected)\n   */\n  getDetectedType(): LocalLlmType | null {\n    return this.detectedType;\n  }\n\n  private getBackendKey(): string {\n    return trimTrailingSlashes(\n      this.config.localLlmUrl.replace(\"localhost\", \"127.0.0.1\"),\n    ).replace(/\\/v1$/, \"\");\n  }\n\n  private getGlobalBackendState(): Map<string, LocalLlmBackendState> {\n    const globalAny = globalThis as typeof globalThis & {\n      [LOCAL_LLM_GLOBAL_BACKEND_STATE]?: Map<string, LocalLlmBackendState>;\n    };\n    if (!globalAny[LOCAL_LLM_GLOBAL_BACKEND_STATE]) {\n      globalAny[LOCAL_LLM_GLOBAL_BACKEND_STATE] = new Map();\n    }\n    return globalAny[LOCAL_LLM_GLOBAL_BACKEND_STATE];\n  }\n\n  private getTrippedBackendState(now: number): LocalLlmBackendState | null {\n    const state = this.getGlobalBackendState().get(this.getBackendKey()) ?? null;\n    if (!state) return null;\n    if (state.untilMs <= now) {\n      this.getGlobalBackendState().delete(this.getBackendKey());\n      this.lastHealthCheck = 0;\n      return null;\n    }\n    return state;\n  }\n\n  private markBackendUnavailable(reason: string, durationMs: number): void {\n    const normalizedReason = normalizeBackendTripReason(reason);\n    if (durationMs > 0) {\n      const untilMs = Date.now() + durationMs;\n      this.getGlobalBackendState().set(this.getBackendKey(), { untilMs, reason: normalizedReason });\n    } else {\n      this.getGlobalBackendState().delete(this.getBackendKey());\n    }\n    this.isAvailable = false;\n    this.lastHealthCheck = 0;\n    log.warn(\n      `local LLM backend unavailable for ${durationMs}ms: model=${this.config.localLlmModel} reason=${normalizedReason}`,\n    );\n  }\n\n\n  /**\n   * Fetch with timeout for health checks. Body lives in the sibling helper so\n   * this file stays under its size ceiling (issue #1995).\n   */\n  private async fetchWithTimeout(\n    url: string,\n    timeoutMs: number = 2000,\n    headers?: Record<string, string>,\n    signal?: AbortSignal,\n  ): Promise<ProbeFetchResult> {\n    return await probeFetch(url, {\n      timeoutMs,\n      headers: this.buildRequestHeaders({ Accept: \"application/json\", ...(headers ?? {}) }),\n      signal,\n    });\n  }\n\n  private async probeLmStudioNativeModels(\n    probeBaseUrl: string,\n    signal?: AbortSignal,\n  ): Promise<{ matched: boolean; unauthorized: boolean }> {\n    let unauthorized = false;\n    for (const endpoint of [\"/api/v1/models\", \"/api/v0/models\"]) {\n      if (signal?.aborted) return { matched: false, unauthorized };\n      const probe = await this.fetchWithTimeout(`${probeBaseUrl}${endpoint}`, 2000, undefined, signal);\n      if (signal?.aborted) return { matched: false, unauthorized };\n      if (probe.ok && isLmStudioNativeModelsResponse(probe.data)) {\n        return { matched: true, unauthorized };\n      }\n      if (probe.status === 401 || probe.status === 403) {\n        unauthorized = true;\n      }\n    }\n    return { matched: false, unauthorized };\n  }\n\n  /**\n   * Check if local LLM is available\n   * Uses 127.0.0.1 instead of localhost to avoid DNS issues (consistent with tactician)\n   */\n  async checkAvailability(signal?: AbortSignal): Promise<boolean> {\n    if (signal?.aborted) return false;\n    // Cache health check results for 1 minute\n    const now = Date.now();\n    const trippedState = this.getTrippedBackendState(now);\n    if (trippedState) {\n      this.isAvailable = false;\n      this.lastHealthCheck = 0;\n      log.info(\n        `local LLM availability: backend circuit open for ${Math.max(0, trippedState.untilMs - now)}ms (${trippedState.reason})`,\n      );\n      return false;\n    }\n    if (this.isAvailable !== null && now - this.lastHealthCheck < LocalLlmClient.HEALTH_CHECK_INTERVAL_MS) {\n      return this.isAvailable;\n    }\n    return await this.availabilityProbe.run((probeSignal) => this.probeAvailability(probeSignal), signal);\n  }\n\n  private async probeAvailability(signal?: AbortSignal): Promise<boolean> {\n    const now = Date.now();\n    // Probe server-native endpoints from the server root even when users configure\n    // the OpenAI-compatible `/v1` base URL for chat completions.\n    const configuredBaseUrl = trimTrailingSlashes(\n      this.config.localLlmUrl.replace(\"localhost\", \"127.0.0.1\"),\n    );\n    const probeBaseUrl = stripTrailingV1Path(configuredBaseUrl);\n    let sawUnauthorizedProbe = false;\n    // A probe that TIMED OUT says the event loop was busy, not that the backend\n    // is down (issue #2210). Tracked separately so a loaded daemon cannot cache\n    // itself into a blackout.\n    let sawAbortedProbe = false;\n\n    // Try to detect which server type is running\n    if (signal?.aborted) return false;\n    for (const serverConfig of orderedLocalServers(configuredBaseUrl)) {\n      const healthUrl = `${probeBaseUrl}${serverConfig.healthEndpoint}`;\n      log.debug(`checking ${serverConfig.type} at ${healthUrl}`);\n\n      const result = await this.fetchWithTimeout(healthUrl, 2000, undefined, signal);\n      if (result.aborted) sawAbortedProbe = true;\n      if (signal?.aborted) return false;\n      if (result.ok && serverConfig.detectFn(result.data)) {\n        if (serverConfig.type === \"mlx\") {\n          const lmStudioProbe = await this.probeLmStudioNativeModels(probeBaseUrl, signal);\n          if (signal?.aborted) return false;\n          if (lmStudioProbe.unauthorized) {\n            sawUnauthorizedProbe = true;\n          }\n          if (lmStudioProbe.matched) {\n            this.isAvailable = true;\n            this.detectedType = \"lmstudio\";\n            this.lastHealthCheck = now;\n            log.info(`detected lmstudio at ${configuredBaseUrl}`);\n            return true;\n          }\n        }\n        if (serverConfig.type === \"llamacpp\") {\n          let sawLlamaCppSignal = false;\n          const propsProbe = await this.fetchWithTimeout(`${probeBaseUrl}/props`, 2000, undefined, signal);\n          if (propsProbe.aborted) sawAbortedProbe = true;\n          if (signal?.aborted) return false;\n          if (propsProbe.ok && isLlamaCppPropsResponse(propsProbe.data)) {\n            sawLlamaCppSignal = true;\n          }\n          if (propsProbe.status === 401 || propsProbe.status === 403) {\n            sawUnauthorizedProbe = true;\n          }\n\n          const modelsUrl = `${probeBaseUrl}${serverConfig.modelsEndpoint}`;\n          const modelsProbe = await this.fetchWithTimeout(modelsUrl, 2000, undefined, signal);\n          if (modelsProbe.aborted) sawAbortedProbe = true;\n          if (signal?.aborted) return false;\n          if (modelsProbe.ok && isLlamaCppModelsResponse(modelsProbe.data)) {\n            sawLlamaCppSignal = true;\n          }\n          if (modelsProbe.status === 401 || modelsProbe.status === 403) {\n            sawUnauthorizedProbe = true;\n            continue;\n          }\n\n          const authConfigured =\n            Boolean(this.config.localLlmApiKey) &&\n            this.config.localLlmAuthHeader !== false;\n          if (!sawLlamaCppSignal || (authConfigured && !modelsProbe.ok)) {\n            continue;\n          }\n        }\n        this.isAvailable = true;\n        this.detectedType = serverConfig.type;\n        this.lastHealthCheck = now;\n        log.info(`detected ${serverConfig.type} at ${configuredBaseUrl}`);\n        return true;\n      }\n      if (result.status === 401 || result.status === 403) {\n        sawUnauthorizedProbe = true;\n      }\n    }\n    if (signal?.aborted) return false;\n\n    // Generic check if specific detection failed\n    try {\n      const modelsUrl = `${probeBaseUrl}/v1/models`;\n      const result = await this.fetchWithTimeout(modelsUrl, 2000, undefined, signal);\n      if (result.aborted) sawAbortedProbe = true;\n      if (signal?.aborted) return false;\n      if (result.ok) {\n        this.isAvailable = true;\n        this.detectedType = \"generic\";\n        this.lastHealthCheck = now;\n        log.info(`detected generic OpenAI-compatible server at ${configuredBaseUrl}`);\n        return true;\n      }\n      if (result.status === 401 || result.status === 403) {\n        sawUnauthorizedProbe = true;\n      }\n    } catch {\n      // Fall through to unavailable\n    }\n\n    const wasAvailable = this.isAvailable;\n    this.detectedType = null;\n    if (sawUnauthorizedProbe) {\n      log.warn(\n        `local LLM availability probe was unauthorized at ${configuredBaseUrl}; verify localLlmApiKey and localLlmAuthHeader settings`,\n      );\n    }\n    const verdict = resolveUnavailableVerdict({\n      baseUrl: configuredBaseUrl,\n      sawAbortedProbe,\n      wasAvailable,\n    });\n    this.isAvailable = verdict.cacheVerdict ? false : null;\n    this.lastHealthCheck = verdict.cacheVerdict ? now : 0;\n    if (verdict.warning) log.warn(verdict.warning);\n    log.debug(\"local LLM not available at\", configuredBaseUrl);\n    return false;\n  }\n\n  /**\n   * Try to get context window from LM Studio settings.json as fallback.\n   * This reads the defaultContextLength setting which is what LM Studio uses\n   * when loading models without explicit context configuration.\n   */\n  private getContextFromLmStudioSettings(): number | null {\n    try {\n      const homeDir = this.resolveHomeDir();\n      const settingsPath = `${homeDir}/.cache/lm-studio/settings.json`;\n\n      if (!fs.existsSync(settingsPath)) {\n        log.debug(`LM Studio settings: file not found at ${settingsPath}`);\n        return null;\n      }\n\n      const content = fs.readFileSync(settingsPath, \"utf-8\");\n      const settings = JSON.parse(content) as {\n        defaultContextLength?: {\n          type?: string;\n          value?: number;\n        };\n      };\n\n      if (settings.defaultContextLength?.value) {\n        const contextWindow = settings.defaultContextLength.value;\n        log.debug(`LM Studio settings: found default context length: ${contextWindow}`);\n        return contextWindow;\n      }\n\n      return null;\n    } catch (err) {\n      const errorMsg = err instanceof Error ? err.message : String(err);\n      log.debug(`LM Studio settings: failed to read - ${errorMsg}`);\n      return null;\n    }\n  }\n\n  /**\n   * Try to get context window from LMS CLI (LM Studio specific).\n   * Uses --json flag for reliable parsing.\n   * Returns null if LMS CLI is not available or model not found.\n   */\n  private getContextFromLmsCli(modelId: string): number | null {\n    try {\n      // Check if lms CLI exists in common locations.\n      // HOME may be absent in launchd environments, so prefer the resolved helper.\n      const homeDir = this.resolveHomeDir();\n      const lmsPaths = [\n        this.config.localLmsCliPath || \"\",\n        `${homeDir}/.cache/lm-studio/bin/lms`,\n        \"/usr/local/bin/lms\",\n        \"/opt/homebrew/bin/lms\",\n      ];\n\n      const lmsPath = lmsPaths.find((p) => p.length > 0 && fs.existsSync(p));\n      if (!lmsPath) {\n        log.debug(`LMS CLI: not found in standard locations (checked: ${lmsPaths.join(\", \")})`);\n        return null;\n      }\n\n      // Run lms ps --json to get loaded models with context\n      // Use spawnSync with shell and explicit PATH to ensure lms can find its dependencies\n      log.debug(`LMS CLI: running: ${lmsPath} ps --json`);\n      const existingPath = readEnvVar(\"PATH\") || \"\";\n      const result = launchProcessSync(lmsPath, [\"ps\", \"--json\"], {\n        encoding: \"utf-8\",\n        timeout: 5000,\n        shell: false, // Don't use shell for JSON output - more reliable\n        env: mergeEnv({\n          PATH: `${this.config.localLmsBinDir || `${homeDir}/.cache/lm-studio/bin`}:/usr/local/bin:/opt/homebrew/bin:/usr/bin:/bin:${existingPath}`,\n          HOME: homeDir,\n        }),\n      });\n\n      if (result.error) {\n        log.debug(`LMS CLI: spawn error - ${result.error.message}`);\n        return null;\n      }\n\n      if (result.stderr && result.stderr.trim()) {\n        log.debug(`LMS CLI: stderr - ${result.stderr.slice(0, 200)}`);\n      }\n\n      const output = result.stdout || \"\";\n      if (!output.trim()) {\n        log.debug(\"LMS CLI: empty output - LM Studio may not be running or no models loaded\");\n        return null;\n      }\n\n      // Parse JSON output\n      let models: Array<{\n        identifier?: string;\n        modelKey?: string;\n        contextLength?: number;\n        maxContextLength?: number;\n      }>;\n\n      try {\n        models = JSON.parse(output) as typeof models;\n      } catch (parseErr) {\n        log.debug(`LMS CLI: JSON parse error - ${parseErr}`);\n        return null;\n      }\n\n      if (!Array.isArray(models) || models.length === 0) {\n        log.debug(\"LMS CLI: no models loaded\");\n        return null;\n      }\n\n      // Find the model matching our configured model ID\n      const model = models.find((m) =>\n        m.identifier === modelId ||\n        m.modelKey === modelId ||\n        (m.identifier?.includes(modelId.replace(/@\\d+bit$/, \"\")))\n      );\n\n      if (!model) {\n        log.debug(`LMS CLI: model \"${modelId}\" not found in loaded models: ${models.map(m => m.identifier).join(\", \")}`);\n        return null;\n      }\n\n      // Use contextLength (actual configured) or fall back to maxContextLength (model max)\n      const contextWindow = model.contextLength || model.maxContextLength;\n\n      if (contextWindow) {\n        log.info(`LMS CLI detected context window: ${contextWindow} for ${modelId} (max: ${model.maxContextLength})`);\n        return contextWindow;\n      }\n\n      return null;\n    } catch (err) {\n      // LMS CLI not available or failed\n      const errorMsg = err instanceof Error ? err.message : String(err);\n      log.debug(`LMS CLI: failed - ${errorMsg}`);\n      return null;\n    }\n  }\n\n  /**\n   * Get full model info from LMS CLI including context length and max context length.\n   * Returns null if LMS CLI is unavailable or model not found.\n   */\n  private getLmsModelInfo(modelId: string): { contextLength: number; maxContextLength: number; identifier: string } | null {\n    try {\n      const result = launchProcessSync(\"lms\", [\"ps\", \"--json\"], {\n        encoding: \"utf-8\",\n        timeout: 5000,\n        shell: false,\n      });\n\n      if (result.error) {\n        return null;\n      }\n\n      const output = result.stdout || \"\";\n      if (!output.trim()) {\n        return null;\n      }\n\n      let models: Array<{\n        identifier?: string;\n        modelKey?: string;\n        contextLength?: number;\n        maxContextLength?: number;\n      }>;\n\n      try {\n        models = JSON.parse(output) as typeof models;\n      } catch {\n        return null;\n      }\n\n      if (!Array.isArray(models) || models.length === 0) {\n        return null;\n      }\n\n      const model = models.find((m) =>\n        m.identifier === modelId ||\n        m.modelKey === modelId ||\n        (m.identifier?.includes(modelId.replace(/@\\d+bit$/, \"\")))\n      );\n\n      if (!model || !model.contextLength) {\n        return null;\n      }\n\n      return {\n        contextLength: model.contextLength,\n        maxContextLength: model.maxContextLength || model.contextLength,\n        identifier: model.identifier || modelId,\n      };\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Get context window for the configured model, using cache if available.\n   * This method caches the result to avoid repeated LMS CLI calls.\n   * Order: ModelRegistry (persistent) -> memory cache -> LMS CLI -> settings.json\n   */\n  getCachedContextWindow(modelId: string): number | null {\n    const now = Date.now();\n\n    // 1. Check ModelRegistry for persisted context window\n    if (this.modelRegistry) {\n      const caps = this.modelRegistry.getCapabilities(modelId);\n      if (caps.source === \"lmstudio\" && caps.contextWindow) {\n        log.debug(`ModelRegistry: using persisted LM Studio context: ${caps.contextWindow}`);\n        // Also update memory cache\n        this.cachedLmsContext = caps.contextWindow;\n        this.lastLmsCheck = now;\n        return caps.contextWindow;\n      }\n    }\n\n    // 2. Return in-memory cached value if still valid\n    if (this.cachedLmsContext && now - this.lastLmsCheck < LocalLlmClient.LMS_CACHE_INTERVAL_MS) {\n      log.debug(`LMS CLI: returning in-memory cached context: ${this.cachedLmsContext}`);\n      return this.cachedLmsContext;\n    }\n\n    // 3. Try LMS CLI (authoritative source)\n    const lmsInfo = this.getLmsModelInfo(modelId);\n    if (lmsInfo?.contextLength) {\n      this.cachedLmsContext = lmsInfo.contextLength;\n      this.lastLmsCheck = now;\n      // Calculate appropriate output tokens based on context size\n      // Use 12.5% of context window, capped at 16K (generous but safe)\n      const calculatedOutputTokens = Math.min(Math.floor(lmsInfo.contextLength / 8), 16384);\n      const outputTokens = Math.max(calculatedOutputTokens, 4096); // Minimum 4K\n      // Persist to ModelRegistry with detected capabilities\n      if (this.modelRegistry) {\n        this.modelRegistry.setCapabilities(modelId, {\n          maxPositionEmbeddings: lmsInfo.maxContextLength || lmsInfo.contextLength,\n          contextWindow: lmsInfo.contextLength,\n          supportsExtendedContext: (lmsInfo.maxContextLength || lmsInfo.contextLength) > 65536,\n          typicalOutputTokens: outputTokens,\n          source: \"lmstudio\",\n        });\n        log.info(`LMS CLI: Stored capabilities for ${modelId}: ${lmsInfo.contextLength} context, ${outputTokens} output tokens`);\n      }\n      return lmsInfo.contextLength;\n    }\n\n    // Legacy: Try LMS CLI context only (fallback)\n    const legacyContext = this.getContextFromLmsCli(modelId);\n    if (legacyContext) {\n      this.cachedLmsContext = legacyContext;\n      this.lastLmsCheck = now;\n      // Persist to ModelRegistry with calculated output tokens\n      if (this.modelRegistry) {\n        const calculatedOutputTokens = Math.min(Math.floor(legacyContext / 8), 16384);\n        const outputTokens = Math.max(calculatedOutputTokens, 4096);\n        this.modelRegistry.setCapabilities(modelId, {\n          maxPositionEmbeddings: legacyContext,\n          contextWindow: legacyContext,\n          supportsExtendedContext: false,\n          typicalOutputTokens: outputTokens,\n          source: \"lmstudio\",\n        });\n      }\n      return legacyContext;\n    }\n\n    // 4. Fall back to LM Studio settings.json\n    const settingsContext = this.getContextFromLmStudioSettings();\n    if (settingsContext) {\n      log.info(`LM Studio settings: using default context: ${settingsContext}`);\n      this.cachedLmsContext = settingsContext;\n      this.lastLmsCheck = now;\n      return settingsContext;\n    }\n\n    return null;\n  }\n\n  /**\n   * Clear the LMS context cache. Call this when the model changes.\n   */\n  clearContextCache(): void {\n    this.cachedLmsContext = null;\n    this.lastLmsCheck = 0;\n    log.debug(\"LMS CLI: context cache cleared\");\n  }\n\n  private remainingCooldownMs(now: number = Date.now()): number {\n    return Math.max(0, this.cooldownUntilMs - now);\n  }\n\n  private scheduleQueueDrain(): void {\n    if (this.queueDrainScheduled) return;\n    this.queueDrainScheduled = true;\n\n    queueMicrotask(() => {\n      this.queueDrainScheduled = false;\n      this.startAvailableQueuedRequests();\n    });\n  }\n\n  /** True when a background-priority request occupies or awaits this client's local lane (issue #2011). */\n  isBackgroundLaneContended(): boolean {\n    return this.queueProcessing.has(\"background\") || this.requestQueues.background.length > 0;\n  }\n\n  private dequeueQueuedRequest(priority: LocalLlmRequestPriority): LocalLlmQueuedRequest | null {\n    const next = this.requestQueues[priority].shift();\n    return next ?? null;\n  }\n\n  private failOpenQueuedRequestsForCooldown(): number {\n    let dropped = 0;\n    for (const priority of [\"recall-critical\", \"background\"] as const) {\n      while (this.requestQueues[priority].length > 0) {\n        const queued = this.requestQueues[priority].shift();\n        queued?.resolve(null);\n        dropped += 1;\n      }\n    }\n    return dropped;\n  }\n\n  private startAvailableQueuedRequests(): void {\n    if (!this.queueProcessing.has(\"recall-critical\")) {\n      const nextCritical = this.dequeueQueuedRequest(\"recall-critical\");\n      if (nextCritical) {\n        this.queueProcessing.add(\"recall-critical\");\n        void this.runQueuedRequest(nextCritical);\n      }\n    }\n\n    if (!this.queueProcessing.has(\"background\")) {\n      const nextBackground = this.dequeueQueuedRequest(\"background\");\n      if (nextBackground) {\n        this.queueProcessing.add(\"background\");\n        void this.runQueuedRequest(nextBackground);\n      }\n    }\n  }\n\n  private async runQueuedRequest(next: LocalLlmQueuedRequest): Promise<void> {\n    try {\n      if (next.options.signal?.aborted) {\n        next.resolve(null);\n        return;\n      }\n      const remainingCooldownMs = this.remainingCooldownMs();\n      if (remainingCooldownMs > 0) {\n        const additionalDropped = this.failOpenQueuedRequestsForCooldown();\n        log.warn(\n          `local LLM: cooldown active (${remainingCooldownMs}ms remaining), dropping ${additionalDropped + 1} queued request(s) fail-open`,\n        );\n        next.resolve(null);\n        return;\n      }\n\n      let result: LocalLlmChatCompletionResult | null = null;\n      try {\n        result = await this.runChatCompletionRequest(next.messages, next.options, {\n          priority: next.priority,\n          enqueuedAtMs: next.enqueuedAtMs,\n        });\n      } catch (err) {\n        log.warn(`local LLM queue drain failed open: ${next.options.redactProviderErrors ? \"provider error details redacted\" : err instanceof Error ? err.message : String(err)}`);\n      }\n      next.resolve(result);\n    } finally {\n      this.queueProcessing.delete(next.priority);\n      if (this.requestQueues[\"recall-critical\"].length > 0 || this.requestQueues.background.length > 0) {\n        this.scheduleQueueDrain();\n      }\n    }\n  }\n\n  private async runChatCompletionRequest(\n    messages: Array<{ role: string; content: string }>,\n    options: LocalLlmChatCompletionOptions,\n    queueMeta?: { priority: LocalLlmRequestPriority; enqueuedAtMs: number },\n  ): Promise<LocalLlmChatCompletionResult | null> {\n    log.debug(\n      `local LLM chatCompletion: localLlmEnabled=${resolveLocalLlmCapabilities(this.config).localLlm}, model=${this.config.localLlmModel}`,\n    );\n\n    const operation = options.operation ?? \"unspecified\";\n    const startedAtMs = Date.now();\n    if (queueMeta) {\n        log.debug(\n          `local LLM queue start: priority=${queueMeta.priority} waitMs=${startedAtMs - queueMeta.enqueuedAtMs} op=${operation}`,\n        );\n    }\n\n    try {\n      if (options.signal?.aborted) return null;\n      const isAvailable = await this.checkAvailability(options.signal);\n      if (!isAvailable) {\n        log.debug(\n          `local LLM: checkAvailability returned false for ${this.config.localLlmUrl}`,\n        );\n        return null;\n      }\n\n      const promptChars = messages.reduce((sum, m) => sum + (m.content?.length ?? 0), 0);\n      const requestBody: Record<string, unknown> = {\n        model: this.config.localLlmModel,\n        messages,\n        temperature: options.temperature ?? 0.7,\n        // Use max_tokens consistent with cloud models\n        max_tokens: options.maxTokens ?? 4096,\n        stream: false,\n      };\n\n      // Skip response_format for local LLMs - they don't support json_object type\n      // The prompts already instruct the model to output JSON\n      // Only send if it's json_schema type which some local LLMs support\n      if (options.responseFormat?.type === \"json_schema\") {\n        requestBody.response_format = options.responseFormat;\n      }\n\n      // Suppress thinking/reasoning for operations that benefit from terse,\n      // structured output. Thinking-capable models (Qwen 3.5, Gemma 4,\n      // DeepSeek) default to thinking-on via their chat template; sending\n      // `chat_template_kwargs: { enable_thinking: false }` tells the template\n      // to skip reasoning tokens. Consolidation operations on the main client\n      // intentionally keep thinking enabled so entity resolution and\n      // deduplication can use the model's reasoning path. Fast-tier callers can\n      // still force suppression per request to preserve their low-latency\n      // contract.\n      //\n      // Gate the injection on detected backend support (issue #548,\n      // Codex P1 on PR #550): `chat_template_kwargs` is an LM Studio /\n      // vLLM / llama.cpp extension, not part of standard OpenAI chat\n      // completions.  Strict OpenAI-compatible backends reject\n      // unknown fields with 400, which trips the 400-cooldown path and\n      // can effectively disable local extraction.  Fail open when the\n      // backend hasn't been positively identified as thinking-capable.\n      const shouldSuppressThinking =\n        options.forceDisableThinking === true ||\n        ((options.disableThinking ?? this._disableThinking) &&\n          THINKING_SUPPRESSED_OPERATIONS.has(operation));\n      if (\n        shouldSuppressThinking &&\n        this.detectedType !== null &&\n        THINKING_COMPATIBLE_BACKENDS.has(this.detectedType)\n      ) {\n        requestBody.chat_template_kwargs = { enable_thinking: false };\n      } else if (shouldSuppressThinking && this.detectedType === \"ollama\") {\n        // Ollama's /v1 endpoint silently drops `chat_template_kwargs` AND\n        // `enable_thinking` — the ONLY field it maps to think-off is\n        // `reasoning_effort` (\"none\" → ThinkValue{false} in openai.go;\n        // verified against Ollama 0.32.0 source and live probes,\n        // issue #1996). Without this, thinking-capable models (Gemma 4,\n        // Qwen 3.5+) burn 1,700-2,000 reasoning tokens per extraction on\n        // Ollama, exceed the client timeout, and retry forever. The effort\n        // is configurable via `localLlmReasoningEffort` (default \"none\");\n        // an empty value disables injection (pre-#1996 behavior).\n        const effort = this.config.localLlmReasoningEffort;\n        if (effort) {\n          requestBody.reasoning_effort = effort;\n        }\n      }\n\n      // Normalize URL (use 127.0.0.1 instead of localhost)\n      const baseUrl = trimTrailingSlashes(\n        this.config.localLlmUrl.replace(\"localhost\", \"127.0.0.1\"),\n      );\n      const chatUrl = baseUrl.endsWith(\"/v1\")\n        ? `${baseUrl}/chat/completions`\n        : `${baseUrl}/v1/chat/completions`;\n\n      const requestBodyJson = JSON.stringify(requestBody);\n      log.debug(\n        `local LLM: sending request to ${chatUrl} with model ${this.config.localLlmModel}`,\n      );\n      // Avoid logging request bodies by default (can contain sensitive user content).\n      log.debug(`local LLM: request body length=${requestBodyJson.length}`);\n\n      const effectiveTimeoutMs =\n        typeof options.timeoutMs === \"number\"\n          ? Math.min(this.config.localLlmTimeoutMs, options.timeoutMs)\n          : this.config.localLlmTimeoutMs;\n      const maxAttempts = 1 + Math.max(0, this.config.localLlmRetry5xxCount);\n      let response: Response | null = null, responseBody = \"\";\n      let lastAbortError: Error | null = null;\n      for (let attempt = 1; attempt <= maxAttempts; attempt += 1) {\n        response = null;\n        responseBody = \"\";\n        const attemptAbort = new AbortController();\n        const onCallerAbort = (): void => {\n          attemptAbort.abort(options.signal?.reason);\n        };\n        if (options.signal) {\n          if (options.signal.aborted) {\n            onCallerAbort();\n          } else {\n            options.signal.addEventListener(\"abort\", onCallerAbort, { once: true });\n          }\n        }\n        const attemptTimeout = setTimeout(() => attemptAbort.abort(), effectiveTimeoutMs);\n        try {\n          response = await this.chatTransport.post({\n            url: chatUrl,\n            headers: this.buildRequestHeaders({\n              \"Content-Type\": \"application/json\",\n            }),\n            body: requestBodyJson,\n            signal: attemptAbort.signal,\n            budgetMs: this.config.localLlmTimeoutMs,\n          });\n          responseBody = await response.text();\n        } catch (err) {\n          const error = err instanceof Error ? err : new Error(String(err));\n          if (options.signal?.aborted) {\n            response = null;\n            lastAbortError = error;\n            break;\n          }\n          if (response && !response.ok) {\n            log.debug(`local LLM failed to read ${response.status} response body: ${options.redactProviderErrors ? \"details redacted\" : error.message}`);\n          } else {\n            response = null;\n            if (!isAbortError(err)) throw err;\n            lastAbortError = error;\n            if (attempt >= maxAttempts) break;\n            const backoffMs = this.config.localLlmRetryBackoffMs * attempt;\n            log.warn(\n              `local LLM request aborted: op=${operation} attempt=${attempt}/${maxAttempts} timeoutMs=${effectiveTimeoutMs} model=${this.config.localLlmModel}; retrying after ${backoffMs}ms`,\n            );\n            if (!(await waitForRetryBackoff(backoffMs, options.signal))) return null;\n            continue;\n          }\n        } finally {\n          clearTimeout(attemptTimeout);\n          options.signal?.removeEventListener(\"abort\", onCallerAbort);\n        }\n\n        if (response.ok) break;\n        if (response.status >= 500 && attempt < maxAttempts) {\n          const nonRecoverableReason =\n            extractNonRecoverableBackendReasonFromErrorText(responseBody);\n          if (nonRecoverableReason) {\n            this.markBackendUnavailable(\n              nonRecoverableReason,\n              this.config.localLlm400CooldownMs,\n            );\n            this.consecutive400s = 0;\n            return null;\n          }\n        }\n        if (response.status < 500 || attempt >= maxAttempts) break;\n\n        const backoffMs = this.config.localLlmRetryBackoffMs * attempt;\n        log.warn(\n          `local LLM request got ${response.status}; retrying (attempt ${attempt + 1}/${maxAttempts}) after ${backoffMs}ms`,\n        );\n        if (!(await waitForRetryBackoff(backoffMs, options.signal))) return null;\n      }\n      log.debug(\n        `local LLM: received response, status=${response?.status}, ok=${response?.ok}`,\n      );\n      if (!response) {\n        if (lastAbortError) {\n          log.warn(\n            `local LLM request aborted after ${maxAttempts} attempt(s): op=${operation} timeoutMs=${effectiveTimeoutMs} model=${this.config.localLlmModel} promptChars=${promptChars} durationMs=${Date.now() - startedAtMs}`,\n          );\n        } else {\n          log.warn(\n            `local LLM request failed: no response object (op=${operation} model=${this.config.localLlmModel} durationMs=${Date.now() - startedAtMs})`,\n          );\n        }\n        return null;\n      }\n\n      if (!response.ok) {\n        let reason = \"\";\n        try {\n          const parsed = JSON.parse(responseBody) as { error?: { message?: string } };\n          reason = parsed?.error?.message ? ` — ${parsed.error.message}` : \"\";\n        } catch {\n          if (!options.redactProviderErrors) log.debug(`local LLM error body: ${responseBody.slice(0, 500)}`);\n        }\n        log.warn(\n          `local LLM request failed: ${response.status}${options.redactProviderErrors ? \"\" : ` ${response.statusText}${reason}`} ` +\n          `(op=${operation}, model=${this.config.localLlmModel}, url=${chatUrl}, promptChars=${promptChars}, maxTokens=${requestBody.max_tokens as number})`,\n        );\n        const nonRecoverableReason =\n          extractNonRecoverableBackendReason(reason) ??\n          extractNonRecoverableBackendReasonFromErrorText(responseBody);\n        if (nonRecoverableReason) {\n          this.markBackendUnavailable(\n            nonRecoverableReason,\n            this.config.localLlm400CooldownMs,\n          );\n          this.consecutive400s = 0;\n          return null;\n        }\n        if (response.status === 400) {\n          this.consecutive400s += 1;\n          if (this.consecutive400s >= this.config.localLlm400TripThreshold) {\n            this.cooldownUntilMs = Date.now() + this.config.localLlm400CooldownMs;\n            log.warn(\n              `local LLM: entering cooldown for ${this.config.localLlm400CooldownMs}ms ` +\n                `after ${this.consecutive400s} consecutive 400 responses`,\n            );\n            this.consecutive400s = 0;\n          }\n        } else {\n          this.consecutive400s = 0;\n        }\n        return null;\n      }\n      this.consecutive400s = 0;\n\n      const data = JSON.parse(responseBody) as {\n        choices?: Array<{\n          message?: { content?: string; reasoning_content?: string };\n        }>;\n        usage?: {\n          prompt_tokens?: number;\n          completion_tokens?: number;\n          total_tokens?: number;\n        };\n      };\n\n      log.debug(\n        `local LLM response: choices=${data.choices?.length}, usage=${JSON.stringify(data.usage)}`,\n      );\n\n      // Thinking models (e.g. Qwen 3.5) may put their response in\n      // `reasoning_content` and leave `content` empty. Fall back to\n      // reasoning_content so engram still gets a usable result.\n      const msg = data.choices?.[0]?.message;\n      const content = msg?.content || msg?.reasoning_content || \"\";\n      if (!content) {\n        log.warn(`local LLM returned empty content.${options.redactProviderErrors ? \"\" : ` choices=${JSON.stringify(data.choices)?.slice(0, 200)}`}`);\n        return null;\n      }\n\n      // Estimate tokens if not provided by local LLM\n      const usage = data.usage\n        ? {\n            promptTokens: data.usage.prompt_tokens ?? 0,\n            completionTokens: data.usage.completion_tokens ?? 0,\n            totalTokens: data.usage.total_tokens ?? 0,\n          }\n        : this.estimateTokens(messages, content);\n\n      const durationMs = Date.now() - startedAtMs;\n      if (resolvePipelineProcessingCapabilities(this.config).slowLog && durationMs >= this.config.slowLogThresholdMs) {\n        const promptChars = messages.reduce((sum, m) => sum + (m.content?.length ?? 0), 0);\n        const op = options.operation ? ` op=${options.operation}` : \"\";\n        log.warn(\n          `SLOW local LLM:${op} durationMs=${durationMs} model=${this.config.localLlmModel} url=${chatUrl} promptChars=${promptChars} outputTokens=${usage.completionTokens} totalTokens=${usage.totalTokens}`,\n        );\n      }\n\n      log.debug(\"local LLM: request succeeded, tokens:\", usage.totalTokens);\n      return { content, usage };\n    } catch (err) {\n      const errMsg = err instanceof Error ? err.message : String(err);\n      const durationMs = Date.now() - startedAtMs;\n      if (isAbortError(err)) {\n        log.warn(\n          `local LLM request aborted: op=${operation} timeoutMs=${options.timeoutMs ?? this.config.localLlmTimeoutMs} model=${this.config.localLlmModel} durationMs=${durationMs} error=${options.redactProviderErrors ? \"provider error details redacted\" : errMsg}`,\n        );\n        return null;\n      }\n      log.warn(`local LLM request error: op=${operation} error=${options.redactProviderErrors ? \"provider error details redacted\" : errMsg}`);\n      this.isAvailable = false; // Mark as unavailable on non-abort errors\n      const nonRecoverableReason = extractNonRecoverableBackendReason(errMsg);\n      if (nonRecoverableReason) {\n        this.markBackendUnavailable(\n          nonRecoverableReason,\n          this.config.localLlm400CooldownMs,\n        );\n      }\n      return null;\n    } finally {\n      if (queueMeta) {\n        const finishedAtMs = Date.now();\n        const waitMs = startedAtMs - queueMeta.enqueuedAtMs;\n        log.debug(\n          `local LLM queue finish: priority=${queueMeta.priority} waitMs=${waitMs} runMs=${finishedAtMs - startedAtMs} totalMs=${finishedAtMs - queueMeta.enqueuedAtMs} op=${operation}`,\n        );\n      }\n    }\n  }\n\n  /**\n   * Query the local LLM server for loaded model information.\n   * Returns null if unavailable or if the model is not found.\n   */\n  async getLoadedModelInfo(): Promise<LocalModelInfo | null> {\n    const baseUrl = trimTrailingSlashes(\n      this.config.localLlmUrl.replace(\"localhost\", \"127.0.0.1\"),\n    );\n\n    // Handle URL construction - localLlmUrl may already include /v1\n    const modelsUrl = baseUrl.endsWith(\"/v1\")\n      ? `${baseUrl}/models`\n      : `${baseUrl}/v1/models`;\n    log.debug(`Fetching model info from ${modelsUrl}`);\n\n    try {\n      const result = await this.fetchWithTimeout(modelsUrl, 3000);\n      if (!result.ok) {\n        if (result.status === 401 || result.status === 403) {\n          log.warn(\n            `Local LLM: unauthorized while fetching models from ${modelsUrl}; verify localLlmApiKey and localLlmAuthHeader settings`,\n          );\n        }\n        log.warn(`Local LLM: Failed to fetch models from ${modelsUrl} - server returned error`);\n        return null;\n      }\n      if (!result.data) {\n        log.warn(`Local LLM: No data returned from ${modelsUrl}`);\n        return null;\n      }\n\n      const data = result.data as {\n        data?: Array<{\n          id?: string;\n          object?: string;\n          owned_by?: string;\n          // LM Studio specific fields\n          max_context_length?: number;\n          max_tokens?: number;\n          // Ollama specific\n          name?: string;\n          details?: {\n            parameter_size?: string;\n            family?: string;\n          };\n        }>;\n      };\n\n      if (!Array.isArray(data.data) || data.data.length === 0) {\n        log.warn(\"Local LLM returned no models\");\n        return null;\n      }\n\n      // Verbose model listings are noisy on every gateway restart. Keep it debug-only.\n      const modelIds = data.data.map((m) => m.id).filter(Boolean);\n      log.debug(\n        `Local LLM: Found ${modelIds.length} model(s). First 10: ${modelIds.slice(0, 10).join(\", \")}`,\n      );\n\n      // Find the model matching our configured model ID\n      const configuredModel = this.config.localLlmModel;\n      let model = data.data.find((m) => m.id === configuredModel);\n\n      // If not found by exact match, try partial match (handle suffixes like @4bit)\n      if (!model) {\n        model = data.data.find((m) =>\n          configuredModel.includes(m.id || \"\") ||\n          (m.id || \"\").includes(configuredModel.replace(/@\\d+bit$/, \"\"))\n        );\n      }\n\n      // If still not found, use the first loaded model and warn\n      if (!model) {\n        model = data.data[0];\n        const availablePreview = data.data\n          .map((m) => m.id)\n          .filter(Boolean)\n          .slice(0, 10)\n          .join(\", \");\n        log.warn(\n          `Configured model \"${configuredModel}\" not found in local LLM. ` +\n          `Using \"${model.id}\" instead. Available (first 10): ${availablePreview}`\n        );\n      }\n\n      // Extract context window - try multiple field names\n      let contextWindow = model.max_context_length || model.max_tokens;\n\n      // If API doesn't report context window, try LMS CLI (LM Studio specific)\n      if (!contextWindow) {\n        log.info(\"Local LLM: API did not report context window, trying LMS CLI...\");\n        const lmsContext = this.getCachedContextWindow(model.id || \"\");\n        if (lmsContext) {\n          contextWindow = lmsContext;\n        }\n      }\n\n      this.cachedModelInfo = {\n        id: model.id || \"unknown\",\n        contextWindow: contextWindow,\n        maxTokens: model.max_tokens,\n      };\n\n      log.info(\n        `Local LLM model detected: ${this.cachedModelInfo.id}, ` +\n        `context window: ${contextWindow?.toLocaleString() || \"unknown (may use default)\"}`\n      );\n\n      return this.cachedModelInfo;\n    } catch (err) {\n      log.warn(`Failed to fetch model info: ${err}`);\n      return null;\n    }\n  }\n\n  /**\n   * Check if the configured model is available and get its actual context window.\n   * Warns if there's a mismatch between expected and actual context.\n   */\n  async validateModelConfig(expectedContextWindow?: number): Promise<{\n    available: boolean;\n    actualContextWindow?: number;\n    warnings: string[];\n  }> {\n    const warnings: string[] = [];\n\n    const modelInfo = await this.getLoadedModelInfo();\n    if (!modelInfo) {\n      return { available: false, warnings: [\"Could not query local LLM for model info\"] };\n    }\n\n    // If we have expected context and the server reports one, check for mismatch\n    if (expectedContextWindow && modelInfo.contextWindow) {\n      if (modelInfo.contextWindow < expectedContextWindow) {\n        warnings.push(\n          `Context window mismatch: Model ${modelInfo.id} supports ${modelInfo.contextWindow.toLocaleString()} tokens, ` +\n          `but engram is configured for ${expectedContextWindow.toLocaleString()}. ` +\n          `Set localLlmMaxContext: ${modelInfo.contextWindow} in config to avoid errors.`\n        );\n      }\n    }\n\n    // Warn if server doesn't report context window (common with some local LLM setups)\n    if (!modelInfo.contextWindow) {\n      warnings.push(\n        `Local LLM server did not report context window for ${modelInfo.id}. ` +\n        `If you get \"context length exceeded\" errors, set localLlmMaxContext in config.`\n      );\n    }\n\n    return {\n      available: true,\n      actualContextWindow: modelInfo.contextWindow,\n      warnings,\n    };\n  }\n\n  /**\n   * Make a chat completion request to local LLM\n   */\n  async chatCompletion(\n    messages: Array<{ role: string; content: string }>,\n    options: LocalLlmChatCompletionOptions = {},\n  ): Promise<LocalLlmChatCompletionResult | null> {\n    if (!resolveLocalLlmCapabilities(this.config).localLlm) {\n      log.debug(\"local LLM: disabled, returning null\");\n      return null;\n    }\n\n    const remainingMs = this.remainingCooldownMs();\n    if (remainingMs > 0) {\n      log.debug(`local LLM: cooldown active (${remainingMs}ms remaining), skipping request`);\n      return null;\n    }\n    if (options.priority) {\n      const priority = options.priority;\n      return await new Promise<LocalLlmChatCompletionResult | null>((resolve) => {\n        this.requestQueues[priority].push({\n          messages,\n          options,\n          priority,\n          enqueuedAtMs: Date.now(),\n          resolve,\n        });\n        this.scheduleQueueDrain();\n      });\n    }\n\n    return await this.runChatCompletionRequest(messages, options);\n  }\n\n  /**\n   * Estimate tokens when local LLM doesn't return usage stats\n   * Rough estimate: 1 token ≈ 4 characters\n   */\n  private estimateTokens(\n    messages: Array<{ role: string; content: string }>,\n    response: string\n  ): { promptTokens: number; completionTokens: number; totalTokens: number } {\n    const promptChars = messages.reduce((sum, m) => sum + m.content.length, 0);\n    const promptTokens = Math.ceil(promptChars / 4);\n    const completionTokens = Math.ceil(response.length / 4);\n\n    return {\n      promptTokens,\n      completionTokens,\n      totalTokens: promptTokens + completionTokens,\n    };\n  }\n\n  /**\n   * Try local LLM first, fallback to cloud provider if configured\n   */\n  async withFallback<T>(\n    localOperation: () => Promise<T | null>,\n    fallbackOperation: () => Promise<T>,\n    operationName: string\n  ): Promise<T> {\n    // Try local LLM first if enabled\n    if (resolveLocalLlmCapabilities(this.config).localLlm) {\n      const localResult = await localOperation();\n      if (localResult !== null) {\n        log.debug(`${operationName}: used local LLM`);\n        return localResult;\n      }\n\n      // Local failed or unavailable\n      if (this.config.localLlmFallback) {\n        log.info(`${operationName}: local LLM unavailable, falling back to cloud`);\n      } else {\n        throw new Error(`${operationName}: local LLM unavailable and fallback disabled`);\n      }\n    }\n\n    // Use fallback (cloud provider)\n    return fallbackOperation();\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,OAAO,QAAQ;AACf,OAAO,QAAQ;AAoBf,SAAS,oBAAoB,GAAmB;AAC9C,MAAI,MAAM,EAAE;AACZ,SAAO,MAAM,KAAK,EAAE,MAAM,CAAC,MAAM,IAAK;AACtC,SAAO,EAAE,UAAU,GAAG,GAAG;AAC3B;AAEA,SAAS,oBAAoB,GAAmB;AAC9C,SAAO,EAAE,SAAS,KAAK,IAAI,EAAE,MAAM,GAAG,EAAE,IAAI;AAC9C;AAEA,SAAS,oBAAoB,GAA0B;AACrD,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,CAAC;AACxB,QAAI,CAAC,OAAO,KAAM,QAAO;AACzB,UAAM,OAAO,OAAO,OAAO,IAAI;AAC/B,WAAO,OAAO,UAAU,IAAI,IAAI,OAAO;AAAA,EACzC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,eAAe,OAAkD;AACxE,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,SAAS,wBAAwB,OAAyB;AACxD,SACE,eAAe,KAAK,KACpB,eAAe,MAAM,2BAA2B,KAChD,OAAO,MAAM,gBAAgB,aAE3B,OAAO,MAAM,eAAe,YAC5B,OAAO,MAAM,kBAAkB,YAC/B,OAAO,MAAM,eAAe;AAGlC;AAEA,SAAS,yBAAyB,OAAyB;AACzD,MAAI,CAAC,eAAe,KAAK,KAAK,CAAC,MAAM,QAAQ,MAAM,IAAI,GAAG;AACxD,WAAO;AAAA,EACT;AACA,SAAO,MAAM,KAAK,KAAK,CAAC,UAAU;AAChC,QAAI,CAAC,eAAe,KAAK,EAAG,QAAO;AACnC,QAAI,MAAM,aAAa,WAAY,QAAO;AAC1C,QAAI,OAAO,MAAM,OAAO,YAAY,MAAM,GAAG,SAAS,OAAO,EAAG,QAAO;AACvE,UAAM,OAAO,MAAM;AACnB,WACE,eAAe,IAAI,MAClB,iBAAiB,QAAQ,cAAc,QAAQ,gBAAgB;AAAA,EAEpE,CAAC;AACH;AAEA,SAAS,8BAA8B,OAAyB;AAC9D,MAAI,CAAC,eAAe,KAAK,KAAK,CAAC,MAAM,QAAQ,MAAM,MAAM,GAAG;AAC1D,WAAO;AAAA,EACT;AACA,SAAO,MAAM,OAAO,KAAK,CAAC,UAAU;AAClC,QAAI,CAAC,eAAe,KAAK,EAAG,QAAO;AACnC,WACE,OAAO,MAAM,QAAQ,YACrB,OAAO,MAAM,iBAAiB,aAE5B,OAAO,MAAM,WAAW,YACxB,OAAO,MAAM,uBAAuB,YACpC,MAAM,QAAQ,MAAM,gBAAgB;AAAA,EAG1C,CAAC;AACH;AAEA,SAAS,8BAA8B,OAAyB;AAC9D,MAAI,CAAC,eAAe,KAAK,KAAK,CAAC,MAAM,QAAQ,MAAM,IAAI,GAAG;AACxD,WAAO;AAAA,EACT;AACA,SAAO,MAAM,KAAK,KAAK,CAAC,UAAU;AAChC,QAAI,CAAC,eAAe,KAAK,EAAG,QAAO;AACnC,WACE,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,cAAc,aAEzB,OAAO,MAAM,uBAAuB,YACpC,OAAO,MAAM,uBAAuB,YACpC,OAAO,MAAM,UAAU;AAAA,EAG7B,CAAC;AACH;AAEA,SAAS,+BAA+B,OAAyB;AAC/D,SAAO,8BAA8B,KAAK,KAAK,8BAA8B,KAAK;AACpF;AAuBA,IAAM,+BAA0D,oBAAI,IAAI;AAAA,EACtE;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,iCAAsD,oBAAI,IAAI;AAAA,EAClE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAUD,IAAM,gBAAqC;AAAA,EACzC;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,gBAAgB;AAAA,IAChB,gBAAgB;AAAA,IAChB,UAAU,CAAC,SAAS,OAAO,SAAS,YAAY,KAAK,SAAS,QAAQ;AAAA,EACxE;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,gBAAgB;AAAA,IAChB,gBAAgB;AAAA,IAChB,UAAU,CAAC,SAAS,eAAe,IAAI,KAAK,KAAK,WAAW;AAAA,EAC9D;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,gBAAgB;AAAA,IAChB,gBAAgB;AAAA,IAChB,UAAU,CAAC,SAAS,eAAe,IAAI,KAAK,MAAM,QAAQ,KAAK,IAAI;AAAA,EACrE;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,gBAAgB;AAAA,IAChB,gBAAgB;AAAA,IAChB,UAAU,CAAC,SAAS,eAAe,IAAI,KAAK,MAAM,QAAQ,KAAK,IAAI;AAAA,EACrE;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,gBAAgB;AAAA,IAChB,gBAAgB;AAAA,IAChB,UAAU,CAAC,SAAS,SAAS,MAAO,eAAe,IAAI,KAAK,EAAE,YAAY;AAAA,EAC5E;AACF;AAEA,SAAS,oBAAoB,mBAAgD;AAC3E,QAAM,iBAAiB,oBAAoB,iBAAiB;AAC5D,MAAI,mBAAmB,KAAM,QAAO;AACpC,QAAM,WAAW,cAAc;AAAA,IAC7B,CAAC,iBAAiB,aAAa,gBAAgB;AAAA,EACjD;AACA,MAAI,SAAS,WAAW,EAAG,QAAO;AAClC,QAAM,gBAAgB,IAAI,IAAI,SAAS,IAAI,CAAC,iBAAiB,aAAa,IAAI,CAAC;AAC/E,SAAO;AAAA,IACL,GAAG;AAAA,IACH,GAAG,cAAc,OAAO,CAAC,iBAAiB,CAAC,cAAc,IAAI,aAAa,IAAI,CAAC;AAAA,EACjF;AACF;AAmCA,IAAM,iCAAiC;AAMhC,IAAM,iBAAN,MAAM,gBAAe;AAAA,EAClB;AAAA,EACA,cAA8B;AAAA,EAC9B,kBAA0B;AAAA,EACjB,oBAAoB,IAAI,kBAAkB;AAAA,EACnD,eAAoC;AAAA,EACpC,kBAAyC;AAAA,EACzC,mBAAkC;AAAA,EAClC,eAAuB;AAAA,EACvB,kBAA0B;AAAA,EAC1B,kBAA0B;AAAA,EAC1B;AAAA,EACA,mBAA4B;AAAA,EACnB,gBAA0E;AAAA,IACzF,mBAAmB,CAAC;AAAA,IACpB,YAAY,CAAC;AAAA,EACf;AAAA,EACiB,kBAAkB,oBAAI,IAA6B;AAAA,EAC5D,sBAA+B;AAAA,EACvC,OAAwB,2BAA2B;AAAA;AAAA,EACnD,OAAwB,wBAAwB;AAAA;AAAA,EAC/B,gBAAgB,IAAI,cAAc;AAAA,EAEnD,YAAY,QAAsB,eAA+B;AAC/D,SAAK,SAAS;AACd,SAAK,gBAAgB;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,IAAI,gBAAgB,OAAgB;AAClC,SAAK,mBAAmB;AAAA,EAC1B;AAAA,EAEQ,iBAAyB;AAC/B,WAAO,KAAK,OAAO,mBAAmB,WAAW,MAAM,KAAK,GAAG,QAAQ;AAAA,EACzE;AAAA,EAEQ,oBAAoB,OAA+B,CAAC,GAA2B;AACrF,UAAM,UAAkC;AAAA,MACtC,GAAG;AAAA,MACH,GAAI,KAAK,OAAO,mBAAmB,CAAC;AAAA,IACtC;AACA,QAAI,KAAK,OAAO,kBAAkB,KAAK,OAAO,uBAAuB,OAAO;AAC1E,cAAQ,gBAAgB,UAAU,KAAK,OAAO,cAAc;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMA,iBAAiB,UAA+B;AAC9C,SAAK,gBAAgB;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,kBAAuC;AACrC,WAAO,KAAK;AAAA,EACd;AAAA,EAEQ,gBAAwB;AAC9B,WAAO;AAAA,MACL,KAAK,OAAO,YAAY,QAAQ,aAAa,WAAW;AAAA,IAC1D,EAAE,QAAQ,SAAS,EAAE;AAAA,EACvB;AAAA,EAEQ,wBAA2D;AACjE,UAAM,YAAY;AAGlB,QAAI,CAAC,UAAU,8BAA8B,GAAG;AAC9C,gBAAU,8BAA8B,IAAI,oBAAI,IAAI;AAAA,IACtD;AACA,WAAO,UAAU,8BAA8B;AAAA,EACjD;AAAA,EAEQ,uBAAuB,KAA0C;AACvE,UAAM,QAAQ,KAAK,sBAAsB,EAAE,IAAI,KAAK,cAAc,CAAC,KAAK;AACxE,QAAI,CAAC,MAAO,QAAO;AACnB,QAAI,MAAM,WAAW,KAAK;AACxB,WAAK,sBAAsB,EAAE,OAAO,KAAK,cAAc,CAAC;AACxD,WAAK,kBAAkB;AACvB,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,uBAAuB,QAAgB,YAA0B;AACvE,UAAM,mBAAmB,2BAA2B,MAAM;AAC1D,QAAI,aAAa,GAAG;AAClB,YAAM,UAAU,KAAK,IAAI,IAAI;AAC7B,WAAK,sBAAsB,EAAE,IAAI,KAAK,cAAc,GAAG,EAAE,SAAS,QAAQ,iBAAiB,CAAC;AAAA,IAC9F,OAAO;AACL,WAAK,sBAAsB,EAAE,OAAO,KAAK,cAAc,CAAC;AAAA,IAC1D;AACA,SAAK,cAAc;AACnB,SAAK,kBAAkB;AACvB,QAAI;AAAA,MACF,qCAAqC,UAAU,aAAa,KAAK,OAAO,aAAa,WAAW,gBAAgB;AAAA,IAClH;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,iBACZ,KACA,YAAoB,KACpB,SACA,QAC2B;AAC3B,WAAO,MAAM,WAAW,KAAK;AAAA,MAC3B;AAAA,MACA,SAAS,KAAK,oBAAoB,EAAE,QAAQ,oBAAoB,GAAI,WAAW,CAAC,EAAG,CAAC;AAAA,MACpF;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,0BACZ,cACA,QACsD;AACtD,QAAI,eAAe;AACnB,eAAW,YAAY,CAAC,kBAAkB,gBAAgB,GAAG;AAC3D,UAAI,QAAQ,QAAS,QAAO,EAAE,SAAS,OAAO,aAAa;AAC3D,YAAM,QAAQ,MAAM,KAAK,iBAAiB,GAAG,YAAY,GAAG,QAAQ,IAAI,KAAM,QAAW,MAAM;AAC/F,UAAI,QAAQ,QAAS,QAAO,EAAE,SAAS,OAAO,aAAa;AAC3D,UAAI,MAAM,MAAM,+BAA+B,MAAM,IAAI,GAAG;AAC1D,eAAO,EAAE,SAAS,MAAM,aAAa;AAAA,MACvC;AACA,UAAI,MAAM,WAAW,OAAO,MAAM,WAAW,KAAK;AAChD,uBAAe;AAAA,MACjB;AAAA,IACF;AACA,WAAO,EAAE,SAAS,OAAO,aAAa;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,kBAAkB,QAAwC;AAC9D,QAAI,QAAQ,QAAS,QAAO;AAE5B,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,eAAe,KAAK,uBAAuB,GAAG;AACpD,QAAI,cAAc;AAChB,WAAK,cAAc;AACnB,WAAK,kBAAkB;AACvB,UAAI;AAAA,QACF,oDAAoD,KAAK,IAAI,GAAG,aAAa,UAAU,GAAG,CAAC,OAAO,aAAa,MAAM;AAAA,MACvH;AACA,aAAO;AAAA,IACT;AACA,QAAI,KAAK,gBAAgB,QAAQ,MAAM,KAAK,kBAAkB,gBAAe,0BAA0B;AACrG,aAAO,KAAK;AAAA,IACd;AACA,WAAO,MAAM,KAAK,kBAAkB,IAAI,CAAC,gBAAgB,KAAK,kBAAkB,WAAW,GAAG,MAAM;AAAA,EACtG;AAAA,EAEA,MAAc,kBAAkB,QAAwC;AACtE,UAAM,MAAM,KAAK,IAAI;AAGrB,UAAM,oBAAoB;AAAA,MACxB,KAAK,OAAO,YAAY,QAAQ,aAAa,WAAW;AAAA,IAC1D;AACA,UAAM,eAAe,oBAAoB,iBAAiB;AAC1D,QAAI,uBAAuB;AAI3B,QAAI,kBAAkB;AAGtB,QAAI,QAAQ,QAAS,QAAO;AAC5B,eAAW,gBAAgB,oBAAoB,iBAAiB,GAAG;AACjE,YAAM,YAAY,GAAG,YAAY,GAAG,aAAa,cAAc;AAC/D,UAAI,MAAM,YAAY,aAAa,IAAI,OAAO,SAAS,EAAE;AAEzD,YAAM,SAAS,MAAM,KAAK,iBAAiB,WAAW,KAAM,QAAW,MAAM;AAC7E,UAAI,OAAO,QAAS,mBAAkB;AACtC,UAAI,QAAQ,QAAS,QAAO;AAC5B,UAAI,OAAO,MAAM,aAAa,SAAS,OAAO,IAAI,GAAG;AACnD,YAAI,aAAa,SAAS,OAAO;AAC/B,gBAAM,gBAAgB,MAAM,KAAK,0BAA0B,cAAc,MAAM;AAC/E,cAAI,QAAQ,QAAS,QAAO;AAC5B,cAAI,cAAc,cAAc;AAC9B,mCAAuB;AAAA,UACzB;AACA,cAAI,cAAc,SAAS;AACzB,iBAAK,cAAc;AACnB,iBAAK,eAAe;AACpB,iBAAK,kBAAkB;AACvB,gBAAI,KAAK,wBAAwB,iBAAiB,EAAE;AACpD,mBAAO;AAAA,UACT;AAAA,QACF;AACA,YAAI,aAAa,SAAS,YAAY;AACpC,cAAI,oBAAoB;AACxB,gBAAM,aAAa,MAAM,KAAK,iBAAiB,GAAG,YAAY,UAAU,KAAM,QAAW,MAAM;AAC/F,cAAI,WAAW,QAAS,mBAAkB;AAC1C,cAAI,QAAQ,QAAS,QAAO;AAC5B,cAAI,WAAW,MAAM,wBAAwB,WAAW,IAAI,GAAG;AAC7D,gCAAoB;AAAA,UACtB;AACA,cAAI,WAAW,WAAW,OAAO,WAAW,WAAW,KAAK;AAC1D,mCAAuB;AAAA,UACzB;AAEA,gBAAM,YAAY,GAAG,YAAY,GAAG,aAAa,cAAc;AAC/D,gBAAM,cAAc,MAAM,KAAK,iBAAiB,WAAW,KAAM,QAAW,MAAM;AAClF,cAAI,YAAY,QAAS,mBAAkB;AAC3C,cAAI,QAAQ,QAAS,QAAO;AAC5B,cAAI,YAAY,MAAM,yBAAyB,YAAY,IAAI,GAAG;AAChE,gCAAoB;AAAA,UACtB;AACA,cAAI,YAAY,WAAW,OAAO,YAAY,WAAW,KAAK;AAC5D,mCAAuB;AACvB;AAAA,UACF;AAEA,gBAAM,iBACJ,QAAQ,KAAK,OAAO,cAAc,KAClC,KAAK,OAAO,uBAAuB;AACrC,cAAI,CAAC,qBAAsB,kBAAkB,CAAC,YAAY,IAAK;AAC7D;AAAA,UACF;AAAA,QACF;AACA,aAAK,cAAc;AACnB,aAAK,eAAe,aAAa;AACjC,aAAK,kBAAkB;AACvB,YAAI,KAAK,YAAY,aAAa,IAAI,OAAO,iBAAiB,EAAE;AAChE,eAAO;AAAA,MACT;AACA,UAAI,OAAO,WAAW,OAAO,OAAO,WAAW,KAAK;AAClD,+BAAuB;AAAA,MACzB;AAAA,IACF;AACA,QAAI,QAAQ,QAAS,QAAO;AAG5B,QAAI;AACF,YAAM,YAAY,GAAG,YAAY;AACjC,YAAM,SAAS,MAAM,KAAK,iBAAiB,WAAW,KAAM,QAAW,MAAM;AAC7E,UAAI,OAAO,QAAS,mBAAkB;AACtC,UAAI,QAAQ,QAAS,QAAO;AAC5B,UAAI,OAAO,IAAI;AACb,aAAK,cAAc;AACnB,aAAK,eAAe;AACpB,aAAK,kBAAkB;AACvB,YAAI,KAAK,gDAAgD,iBAAiB,EAAE;AAC5E,eAAO;AAAA,MACT;AACA,UAAI,OAAO,WAAW,OAAO,OAAO,WAAW,KAAK;AAClD,+BAAuB;AAAA,MACzB;AAAA,IACF,QAAQ;AAAA,IAER;AAEA,UAAM,eAAe,KAAK;AAC1B,SAAK,eAAe;AACpB,QAAI,sBAAsB;AACxB,UAAI;AAAA,QACF,oDAAoD,iBAAiB;AAAA,MACvE;AAAA,IACF;AACA,UAAM,UAAU,0BAA0B;AAAA,MACxC,SAAS;AAAA,MACT;AAAA,MACA;AAAA,IACF,CAAC;AACD,SAAK,cAAc,QAAQ,eAAe,QAAQ;AAClD,SAAK,kBAAkB,QAAQ,eAAe,MAAM;AACpD,QAAI,QAAQ,QAAS,KAAI,KAAK,QAAQ,OAAO;AAC7C,QAAI,MAAM,8BAA8B,iBAAiB;AACzD,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,iCAAgD;AACtD,QAAI;AACF,YAAM,UAAU,KAAK,eAAe;AACpC,YAAM,eAAe,GAAG,OAAO;AAE/B,UAAI,CAAC,GAAG,WAAW,YAAY,GAAG;AAChC,YAAI,MAAM,yCAAyC,YAAY,EAAE;AACjE,eAAO;AAAA,MACT;AAEA,YAAM,UAAU,GAAG,aAAa,cAAc,OAAO;AACrD,YAAM,WAAW,KAAK,MAAM,OAAO;AAOnC,UAAI,SAAS,sBAAsB,OAAO;AACxC,cAAM,gBAAgB,SAAS,qBAAqB;AACpD,YAAI,MAAM,qDAAqD,aAAa,EAAE;AAC9E,eAAO;AAAA,MACT;AAEA,aAAO;AAAA,IACT,SAAS,KAAK;AACZ,YAAM,WAAW,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAChE,UAAI,MAAM,wCAAwC,QAAQ,EAAE;AAC5D,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,qBAAqB,SAAgC;AAC3D,QAAI;AAGF,YAAM,UAAU,KAAK,eAAe;AACpC,YAAM,WAAW;AAAA,QACf,KAAK,OAAO,mBAAmB;AAAA,QAC/B,GAAG,OAAO;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAEA,YAAM,UAAU,SAAS,KAAK,CAAC,MAAM,EAAE,SAAS,KAAK,GAAG,WAAW,CAAC,CAAC;AACrE,UAAI,CAAC,SAAS;AACZ,YAAI,MAAM,sDAAsD,SAAS,KAAK,IAAI,CAAC,GAAG;AACtF,eAAO;AAAA,MACT;AAIA,UAAI,MAAM,qBAAqB,OAAO,YAAY;AAClD,YAAM,eAAe,WAAW,MAAM,KAAK;AAC3C,YAAM,SAAS,kBAAkB,SAAS,CAAC,MAAM,QAAQ,GAAG;AAAA,QAC1D,UAAU;AAAA,QACV,SAAS;AAAA,QACT,OAAO;AAAA;AAAA,QACP,KAAK,SAAS;AAAA,UACZ,MAAM,GAAG,KAAK,OAAO,kBAAkB,GAAG,OAAO,uBAAuB,mDAAmD,YAAY;AAAA,UACvI,MAAM;AAAA,QACR,CAAC;AAAA,MACH,CAAC;AAED,UAAI,OAAO,OAAO;AAChB,YAAI,MAAM,0BAA0B,OAAO,MAAM,OAAO,EAAE;AAC1D,eAAO;AAAA,MACT;AAEA,UAAI,OAAO,UAAU,OAAO,OAAO,KAAK,GAAG;AACzC,YAAI,MAAM,qBAAqB,OAAO,OAAO,MAAM,GAAG,GAAG,CAAC,EAAE;AAAA,MAC9D;AAEA,YAAM,SAAS,OAAO,UAAU;AAChC,UAAI,CAAC,OAAO,KAAK,GAAG;AAClB,YAAI,MAAM,0EAA0E;AACpF,eAAO;AAAA,MACT;AAGA,UAAI;AAOJ,UAAI;AACF,iBAAS,KAAK,MAAM,MAAM;AAAA,MAC5B,SAAS,UAAU;AACjB,YAAI,MAAM,+BAA+B,QAAQ,EAAE;AACnD,eAAO;AAAA,MACT;AAEA,UAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,OAAO,WAAW,GAAG;AACjD,YAAI,MAAM,2BAA2B;AACrC,eAAO;AAAA,MACT;AAGA,YAAM,QAAQ,OAAO;AAAA,QAAK,CAAC,MACzB,EAAE,eAAe,WACjB,EAAE,aAAa,WACd,EAAE,YAAY,SAAS,QAAQ,QAAQ,YAAY,EAAE,CAAC;AAAA,MACzD;AAEA,UAAI,CAAC,OAAO;AACV,YAAI,MAAM,mBAAmB,OAAO,iCAAiC,OAAO,IAAI,OAAK,EAAE,UAAU,EAAE,KAAK,IAAI,CAAC,EAAE;AAC/G,eAAO;AAAA,MACT;AAGA,YAAM,gBAAgB,MAAM,iBAAiB,MAAM;AAEnD,UAAI,eAAe;AACjB,YAAI,KAAK,oCAAoC,aAAa,QAAQ,OAAO,UAAU,MAAM,gBAAgB,GAAG;AAC5G,eAAO;AAAA,MACT;AAEA,aAAO;AAAA,IACT,SAAS,KAAK;AAEZ,YAAM,WAAW,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAChE,UAAI,MAAM,qBAAqB,QAAQ,EAAE;AACzC,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,gBAAgB,SAAiG;AACvH,QAAI;AACF,YAAM,SAAS,kBAAkB,OAAO,CAAC,MAAM,QAAQ,GAAG;AAAA,QACxD,UAAU;AAAA,QACV,SAAS;AAAA,QACT,OAAO;AAAA,MACT,CAAC;AAED,UAAI,OAAO,OAAO;AAChB,eAAO;AAAA,MACT;AAEA,YAAM,SAAS,OAAO,UAAU;AAChC,UAAI,CAAC,OAAO,KAAK,GAAG;AAClB,eAAO;AAAA,MACT;AAEA,UAAI;AAOJ,UAAI;AACF,iBAAS,KAAK,MAAM,MAAM;AAAA,MAC5B,QAAQ;AACN,eAAO;AAAA,MACT;AAEA,UAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,OAAO,WAAW,GAAG;AACjD,eAAO;AAAA,MACT;AAEA,YAAM,QAAQ,OAAO;AAAA,QAAK,CAAC,MACzB,EAAE,eAAe,WACjB,EAAE,aAAa,WACd,EAAE,YAAY,SAAS,QAAQ,QAAQ,YAAY,EAAE,CAAC;AAAA,MACzD;AAEA,UAAI,CAAC,SAAS,CAAC,MAAM,eAAe;AAClC,eAAO;AAAA,MACT;AAEA,aAAO;AAAA,QACL,eAAe,MAAM;AAAA,QACrB,kBAAkB,MAAM,oBAAoB,MAAM;AAAA,QAClD,YAAY,MAAM,cAAc;AAAA,MAClC;AAAA,IACF,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,uBAAuB,SAAgC;AACrD,UAAM,MAAM,KAAK,IAAI;AAGrB,QAAI,KAAK,eAAe;AACtB,YAAM,OAAO,KAAK,cAAc,gBAAgB,OAAO;AACvD,UAAI,KAAK,WAAW,cAAc,KAAK,eAAe;AACpD,YAAI,MAAM,qDAAqD,KAAK,aAAa,EAAE;AAEnF,aAAK,mBAAmB,KAAK;AAC7B,aAAK,eAAe;AACpB,eAAO,KAAK;AAAA,MACd;AAAA,IACF;AAGA,QAAI,KAAK,oBAAoB,MAAM,KAAK,eAAe,gBAAe,uBAAuB;AAC3F,UAAI,MAAM,gDAAgD,KAAK,gBAAgB,EAAE;AACjF,aAAO,KAAK;AAAA,IACd;AAGA,UAAM,UAAU,KAAK,gBAAgB,OAAO;AAC5C,QAAI,SAAS,eAAe;AAC1B,WAAK,mBAAmB,QAAQ;AAChC,WAAK,eAAe;AAGpB,YAAM,yBAAyB,KAAK,IAAI,KAAK,MAAM,QAAQ,gBAAgB,CAAC,GAAG,KAAK;AACpF,YAAM,eAAe,KAAK,IAAI,wBAAwB,IAAI;AAE1D,UAAI,KAAK,eAAe;AACtB,aAAK,cAAc,gBAAgB,SAAS;AAAA,UAC1C,uBAAuB,QAAQ,oBAAoB,QAAQ;AAAA,UAC3D,eAAe,QAAQ;AAAA,UACvB,0BAA0B,QAAQ,oBAAoB,QAAQ,iBAAiB;AAAA,UAC/E,qBAAqB;AAAA,UACrB,QAAQ;AAAA,QACV,CAAC;AACD,YAAI,KAAK,oCAAoC,OAAO,KAAK,QAAQ,aAAa,aAAa,YAAY,gBAAgB;AAAA,MACzH;AACA,aAAO,QAAQ;AAAA,IACjB;AAGA,UAAM,gBAAgB,KAAK,qBAAqB,OAAO;AACvD,QAAI,eAAe;AACjB,WAAK,mBAAmB;AACxB,WAAK,eAAe;AAEpB,UAAI,KAAK,eAAe;AACtB,cAAM,yBAAyB,KAAK,IAAI,KAAK,MAAM,gBAAgB,CAAC,GAAG,KAAK;AAC5E,cAAM,eAAe,KAAK,IAAI,wBAAwB,IAAI;AAC1D,aAAK,cAAc,gBAAgB,SAAS;AAAA,UAC1C,uBAAuB;AAAA,UACvB,eAAe;AAAA,UACf,yBAAyB;AAAA,UACzB,qBAAqB;AAAA,UACrB,QAAQ;AAAA,QACV,CAAC;AAAA,MACH;AACA,aAAO;AAAA,IACT;AAGA,UAAM,kBAAkB,KAAK,+BAA+B;AAC5D,QAAI,iBAAiB;AACnB,UAAI,KAAK,8CAA8C,eAAe,EAAE;AACxE,WAAK,mBAAmB;AACxB,WAAK,eAAe;AACpB,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,oBAA0B;AACxB,SAAK,mBAAmB;AACxB,SAAK,eAAe;AACpB,QAAI,MAAM,gCAAgC;AAAA,EAC5C;AAAA,EAEQ,oBAAoB,MAAc,KAAK,IAAI,GAAW;AAC5D,WAAO,KAAK,IAAI,GAAG,KAAK,kBAAkB,GAAG;AAAA,EAC/C;AAAA,EAEQ,qBAA2B;AACjC,QAAI,KAAK,oBAAqB;AAC9B,SAAK,sBAAsB;AAE3B,mBAAe,MAAM;AACnB,WAAK,sBAAsB;AAC3B,WAAK,6BAA6B;AAAA,IACpC,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,4BAAqC;AACnC,WAAO,KAAK,gBAAgB,IAAI,YAAY,KAAK,KAAK,cAAc,WAAW,SAAS;AAAA,EAC1F;AAAA,EAEQ,qBAAqB,UAAiE;AAC5F,UAAM,OAAO,KAAK,cAAc,QAAQ,EAAE,MAAM;AAChD,WAAO,QAAQ;AAAA,EACjB;AAAA,EAEQ,oCAA4C;AAClD,QAAI,UAAU;AACd,eAAW,YAAY,CAAC,mBAAmB,YAAY,GAAY;AACjE,aAAO,KAAK,cAAc,QAAQ,EAAE,SAAS,GAAG;AAC9C,cAAM,SAAS,KAAK,cAAc,QAAQ,EAAE,MAAM;AAClD,gBAAQ,QAAQ,IAAI;AACpB,mBAAW;AAAA,MACb;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,+BAAqC;AAC3C,QAAI,CAAC,KAAK,gBAAgB,IAAI,iBAAiB,GAAG;AAChD,YAAM,eAAe,KAAK,qBAAqB,iBAAiB;AAChE,UAAI,cAAc;AAChB,aAAK,gBAAgB,IAAI,iBAAiB;AAC1C,aAAK,KAAK,iBAAiB,YAAY;AAAA,MACzC;AAAA,IACF;AAEA,QAAI,CAAC,KAAK,gBAAgB,IAAI,YAAY,GAAG;AAC3C,YAAM,iBAAiB,KAAK,qBAAqB,YAAY;AAC7D,UAAI,gBAAgB;AAClB,aAAK,gBAAgB,IAAI,YAAY;AACrC,aAAK,KAAK,iBAAiB,cAAc;AAAA,MAC3C;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,iBAAiB,MAA4C;AACzE,QAAI;AACF,UAAI,KAAK,QAAQ,QAAQ,SAAS;AAChC,aAAK,QAAQ,IAAI;AACjB;AAAA,MACF;AACA,YAAM,sBAAsB,KAAK,oBAAoB;AACrD,UAAI,sBAAsB,GAAG;AAC3B,cAAM,oBAAoB,KAAK,kCAAkC;AACjE,YAAI;AAAA,UACF,+BAA+B,mBAAmB,2BAA2B,oBAAoB,CAAC;AAAA,QACpG;AACA,aAAK,QAAQ,IAAI;AACjB;AAAA,MACF;AAEA,UAAI,SAA8C;AAClD,UAAI;AACF,iBAAS,MAAM,KAAK,yBAAyB,KAAK,UAAU,KAAK,SAAS;AAAA,UACxE,UAAU,KAAK;AAAA,UACf,cAAc,KAAK;AAAA,QACrB,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,YAAI,KAAK,sCAAsC,KAAK,QAAQ,uBAAuB,oCAAoC,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,EAAE;AAAA,MAC3K;AACA,WAAK,QAAQ,MAAM;AAAA,IACrB,UAAE;AACA,WAAK,gBAAgB,OAAO,KAAK,QAAQ;AACzC,UAAI,KAAK,cAAc,iBAAiB,EAAE,SAAS,KAAK,KAAK,cAAc,WAAW,SAAS,GAAG;AAChG,aAAK,mBAAmB;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,yBACZ,UACA,SACA,WAC8C;AAC9C,QAAI;AAAA,MACF,6CAA6C,4BAA4B,KAAK,MAAM,EAAE,QAAQ,WAAW,KAAK,OAAO,aAAa;AAAA,IACpI;AAEA,UAAM,YAAY,QAAQ,aAAa;AACvC,UAAM,cAAc,KAAK,IAAI;AAC7B,QAAI,WAAW;AACX,UAAI;AAAA,QACF,mCAAmC,UAAU,QAAQ,WAAW,cAAc,UAAU,YAAY,OAAO,SAAS;AAAA,MACtH;AAAA,IACJ;AAEA,QAAI;AACF,UAAI,QAAQ,QAAQ,QAAS,QAAO;AACpC,YAAM,cAAc,MAAM,KAAK,kBAAkB,QAAQ,MAAM;AAC/D,UAAI,CAAC,aAAa;AAChB,YAAI;AAAA,UACF,mDAAmD,KAAK,OAAO,WAAW;AAAA,QAC5E;AACA,eAAO;AAAA,MACT;AAEA,YAAM,cAAc,SAAS,OAAO,CAAC,KAAK,MAAM,OAAO,EAAE,SAAS,UAAU,IAAI,CAAC;AACjF,YAAM,cAAuC;AAAA,QAC3C,OAAO,KAAK,OAAO;AAAA,QACnB;AAAA,QACA,aAAa,QAAQ,eAAe;AAAA;AAAA,QAEpC,YAAY,QAAQ,aAAa;AAAA,QACjC,QAAQ;AAAA,MACV;AAKA,UAAI,QAAQ,gBAAgB,SAAS,eAAe;AAClD,oBAAY,kBAAkB,QAAQ;AAAA,MACxC;AAmBA,YAAM,yBACJ,QAAQ,yBAAyB,SAC/B,QAAQ,mBAAmB,KAAK,qBAChC,+BAA+B,IAAI,SAAS;AAChD,UACE,0BACA,KAAK,iBAAiB,QACtB,6BAA6B,IAAI,KAAK,YAAY,GAClD;AACA,oBAAY,uBAAuB,EAAE,iBAAiB,MAAM;AAAA,MAC9D,WAAW,0BAA0B,KAAK,iBAAiB,UAAU;AAUnE,cAAM,SAAS,KAAK,OAAO;AAC3B,YAAI,QAAQ;AACV,sBAAY,mBAAmB;AAAA,QACjC;AAAA,MACF;AAGA,YAAM,UAAU;AAAA,QACd,KAAK,OAAO,YAAY,QAAQ,aAAa,WAAW;AAAA,MAC1D;AACA,YAAM,UAAU,QAAQ,SAAS,KAAK,IAClC,GAAG,OAAO,sBACV,GAAG,OAAO;AAEd,YAAM,kBAAkB,KAAK,UAAU,WAAW;AAClD,UAAI;AAAA,QACF,iCAAiC,OAAO,eAAe,KAAK,OAAO,aAAa;AAAA,MAClF;AAEA,UAAI,MAAM,kCAAkC,gBAAgB,MAAM,EAAE;AAEpE,YAAM,qBACJ,OAAO,QAAQ,cAAc,WACzB,KAAK,IAAI,KAAK,OAAO,mBAAmB,QAAQ,SAAS,IACzD,KAAK,OAAO;AAClB,YAAM,cAAc,IAAI,KAAK,IAAI,GAAG,KAAK,OAAO,qBAAqB;AACrE,UAAI,WAA4B,MAAM,eAAe;AACrD,UAAI,iBAA+B;AACnC,eAAS,UAAU,GAAG,WAAW,aAAa,WAAW,GAAG;AAC1D,mBAAW;AACX,uBAAe;AACf,cAAM,eAAe,IAAI,gBAAgB;AACzC,cAAM,gBAAgB,MAAY;AAChC,uBAAa,MAAM,QAAQ,QAAQ,MAAM;AAAA,QAC3C;AACA,YAAI,QAAQ,QAAQ;AAClB,cAAI,QAAQ,OAAO,SAAS;AAC1B,0BAAc;AAAA,UAChB,OAAO;AACL,oBAAQ,OAAO,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AAAA,UACxE;AAAA,QACF;AACA,cAAM,iBAAiB,WAAW,MAAM,aAAa,MAAM,GAAG,kBAAkB;AAChF,YAAI;AACF,qBAAW,MAAM,KAAK,cAAc,KAAK;AAAA,YACvC,KAAK;AAAA,YACL,SAAS,KAAK,oBAAoB;AAAA,cAChC,gBAAgB;AAAA,YAClB,CAAC;AAAA,YACD,MAAM;AAAA,YACN,QAAQ,aAAa;AAAA,YACrB,UAAU,KAAK,OAAO;AAAA,UACxB,CAAC;AACD,yBAAe,MAAM,SAAS,KAAK;AAAA,QACrC,SAAS,KAAK;AACZ,gBAAM,QAAQ,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AAChE,cAAI,QAAQ,QAAQ,SAAS;AAC3B,uBAAW;AACX,6BAAiB;AACjB;AAAA,UACF;AACA,cAAI,YAAY,CAAC,SAAS,IAAI;AAC5B,gBAAI,MAAM,4BAA4B,SAAS,MAAM,mBAAmB,QAAQ,uBAAuB,qBAAqB,MAAM,OAAO,EAAE;AAAA,UAC7I,OAAO;AACL,uBAAW;AACX,gBAAI,CAAC,aAAa,GAAG,EAAG,OAAM;AAC9B,6BAAiB;AACjB,gBAAI,WAAW,YAAa;AAC5B,kBAAMA,aAAY,KAAK,OAAO,yBAAyB;AACvD,gBAAI;AAAA,cACF,iCAAiC,SAAS,YAAY,OAAO,IAAI,WAAW,cAAc,kBAAkB,UAAU,KAAK,OAAO,aAAa,oBAAoBA,UAAS;AAAA,YAC9K;AACA,gBAAI,CAAE,MAAM,oBAAoBA,YAAW,QAAQ,MAAM,EAAI,QAAO;AACpE;AAAA,UACF;AAAA,QACF,UAAE;AACA,uBAAa,cAAc;AAC3B,kBAAQ,QAAQ,oBAAoB,SAAS,aAAa;AAAA,QAC5D;AAEA,YAAI,SAAS,GAAI;AACjB,YAAI,SAAS,UAAU,OAAO,UAAU,aAAa;AACnD,gBAAM,uBACJ,gDAAgD,YAAY;AAC9D,cAAI,sBAAsB;AACxB,iBAAK;AAAA,cACH;AAAA,cACA,KAAK,OAAO;AAAA,YACd;AACA,iBAAK,kBAAkB;AACvB,mBAAO;AAAA,UACT;AAAA,QACF;AACA,YAAI,SAAS,SAAS,OAAO,WAAW,YAAa;AAErD,cAAM,YAAY,KAAK,OAAO,yBAAyB;AACvD,YAAI;AAAA,UACF,yBAAyB,SAAS,MAAM,uBAAuB,UAAU,CAAC,IAAI,WAAW,WAAW,SAAS;AAAA,QAC/G;AACA,YAAI,CAAE,MAAM,oBAAoB,WAAW,QAAQ,MAAM,EAAI,QAAO;AAAA,MACtE;AACA,UAAI;AAAA,QACF,wCAAwC,UAAU,MAAM,QAAQ,UAAU,EAAE;AAAA,MAC9E;AACA,UAAI,CAAC,UAAU;AACb,YAAI,gBAAgB;AAClB,cAAI;AAAA,YACF,mCAAmC,WAAW,mBAAmB,SAAS,cAAc,kBAAkB,UAAU,KAAK,OAAO,aAAa,gBAAgB,WAAW,eAAe,KAAK,IAAI,IAAI,WAAW;AAAA,UACjN;AAAA,QACF,OAAO;AACL,cAAI;AAAA,YACF,oDAAoD,SAAS,UAAU,KAAK,OAAO,aAAa,eAAe,KAAK,IAAI,IAAI,WAAW;AAAA,UACzI;AAAA,QACF;AACA,eAAO;AAAA,MACT;AAEA,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS;AACb,YAAI;AACF,gBAAM,SAAS,KAAK,MAAM,YAAY;AACtC,mBAAS,QAAQ,OAAO,UAAU,WAAM,OAAO,MAAM,OAAO,KAAK;AAAA,QACnE,QAAQ;AACN,cAAI,CAAC,QAAQ,qBAAsB,KAAI,MAAM,yBAAyB,aAAa,MAAM,GAAG,GAAG,CAAC,EAAE;AAAA,QACpG;AACA,YAAI;AAAA,UACF,6BAA6B,SAAS,MAAM,GAAG,QAAQ,uBAAuB,KAAK,IAAI,SAAS,UAAU,GAAG,MAAM,EAAE,QAC9G,SAAS,WAAW,KAAK,OAAO,aAAa,SAAS,OAAO,iBAAiB,WAAW,eAAe,YAAY,UAAoB;AAAA,QACjJ;AACA,cAAM,uBACJ,mCAAmC,MAAM,KACzC,gDAAgD,YAAY;AAC9D,YAAI,sBAAsB;AACxB,eAAK;AAAA,YACH;AAAA,YACA,KAAK,OAAO;AAAA,UACd;AACA,eAAK,kBAAkB;AACvB,iBAAO;AAAA,QACT;AACA,YAAI,SAAS,WAAW,KAAK;AAC3B,eAAK,mBAAmB;AACxB,cAAI,KAAK,mBAAmB,KAAK,OAAO,0BAA0B;AAChE,iBAAK,kBAAkB,KAAK,IAAI,IAAI,KAAK,OAAO;AAChD,gBAAI;AAAA,cACF,oCAAoC,KAAK,OAAO,qBAAqB,YAC1D,KAAK,eAAe;AAAA,YACjC;AACA,iBAAK,kBAAkB;AAAA,UACzB;AAAA,QACF,OAAO;AACL,eAAK,kBAAkB;AAAA,QACzB;AACA,eAAO;AAAA,MACT;AACA,WAAK,kBAAkB;AAEvB,YAAM,OAAO,KAAK,MAAM,YAAY;AAWpC,UAAI;AAAA,QACF,+BAA+B,KAAK,SAAS,MAAM,WAAW,KAAK,UAAU,KAAK,KAAK,CAAC;AAAA,MAC1F;AAKA,YAAM,MAAM,KAAK,UAAU,CAAC,GAAG;AAC/B,YAAM,UAAU,KAAK,WAAW,KAAK,qBAAqB;AAC1D,UAAI,CAAC,SAAS;AACZ,YAAI,KAAK,oCAAoC,QAAQ,uBAAuB,KAAK,YAAY,KAAK,UAAU,KAAK,OAAO,GAAG,MAAM,GAAG,GAAG,CAAC,EAAE,EAAE;AAC5I,eAAO;AAAA,MACT;AAGA,YAAM,QAAQ,KAAK,QACf;AAAA,QACE,cAAc,KAAK,MAAM,iBAAiB;AAAA,QAC1C,kBAAkB,KAAK,MAAM,qBAAqB;AAAA,QAClD,aAAa,KAAK,MAAM,gBAAgB;AAAA,MAC1C,IACA,KAAK,eAAe,UAAU,OAAO;AAEzC,YAAM,aAAa,KAAK,IAAI,IAAI;AAChC,UAAI,sCAAsC,KAAK,MAAM,EAAE,WAAW,cAAc,KAAK,OAAO,oBAAoB;AAC9G,cAAMC,eAAc,SAAS,OAAO,CAAC,KAAK,MAAM,OAAO,EAAE,SAAS,UAAU,IAAI,CAAC;AACjF,cAAM,KAAK,QAAQ,YAAY,OAAO,QAAQ,SAAS,KAAK;AAC5D,YAAI;AAAA,UACF,kBAAkB,EAAE,eAAe,UAAU,UAAU,KAAK,OAAO,aAAa,QAAQ,OAAO,gBAAgBA,YAAW,iBAAiB,MAAM,gBAAgB,gBAAgB,MAAM,WAAW;AAAA,QACpM;AAAA,MACF;AAEA,UAAI,MAAM,yCAAyC,MAAM,WAAW;AACpE,aAAO,EAAE,SAAS,MAAM;AAAA,IAC1B,SAAS,KAAK;AACZ,YAAM,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC9D,YAAM,aAAa,KAAK,IAAI,IAAI;AAChC,UAAI,aAAa,GAAG,GAAG;AACrB,YAAI;AAAA,UACF,iCAAiC,SAAS,cAAc,QAAQ,aAAa,KAAK,OAAO,iBAAiB,UAAU,KAAK,OAAO,aAAa,eAAe,UAAU,UAAU,QAAQ,uBAAuB,oCAAoC,MAAM;AAAA,QAC3P;AACA,eAAO;AAAA,MACT;AACA,UAAI,KAAK,+BAA+B,SAAS,UAAU,QAAQ,uBAAuB,oCAAoC,MAAM,EAAE;AACtI,WAAK,cAAc;AACnB,YAAM,uBAAuB,mCAAmC,MAAM;AACtE,UAAI,sBAAsB;AACxB,aAAK;AAAA,UACH;AAAA,UACA,KAAK,OAAO;AAAA,QACd;AAAA,MACF;AACA,aAAO;AAAA,IACT,UAAE;AACA,UAAI,WAAW;AACb,cAAM,eAAe,KAAK,IAAI;AAC9B,cAAM,SAAS,cAAc,UAAU;AACvC,YAAI;AAAA,UACF,oCAAoC,UAAU,QAAQ,WAAW,MAAM,UAAU,eAAe,WAAW,YAAY,eAAe,UAAU,YAAY,OAAO,SAAS;AAAA,QAC9K;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,qBAAqD;AACzD,UAAM,UAAU;AAAA,MACd,KAAK,OAAO,YAAY,QAAQ,aAAa,WAAW;AAAA,IAC1D;AAGA,UAAM,YAAY,QAAQ,SAAS,KAAK,IACpC,GAAG,OAAO,YACV,GAAG,OAAO;AACd,QAAI,MAAM,4BAA4B,SAAS,EAAE;AAEjD,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,iBAAiB,WAAW,GAAI;AAC1D,UAAI,CAAC,OAAO,IAAI;AACd,YAAI,OAAO,WAAW,OAAO,OAAO,WAAW,KAAK;AAClD,cAAI;AAAA,YACF,sDAAsD,SAAS;AAAA,UACjE;AAAA,QACF;AACA,YAAI,KAAK,0CAA0C,SAAS,0BAA0B;AACtF,eAAO;AAAA,MACT;AACA,UAAI,CAAC,OAAO,MAAM;AAChB,YAAI,KAAK,oCAAoC,SAAS,EAAE;AACxD,eAAO;AAAA,MACT;AAEA,YAAM,OAAO,OAAO;AAiBpB,UAAI,CAAC,MAAM,QAAQ,KAAK,IAAI,KAAK,KAAK,KAAK,WAAW,GAAG;AACvD,YAAI,KAAK,8BAA8B;AACvC,eAAO;AAAA,MACT;AAGA,YAAM,WAAW,KAAK,KAAK,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,OAAO;AAC1D,UAAI;AAAA,QACF,oBAAoB,SAAS,MAAM,wBAAwB,SAAS,MAAM,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA,MAC7F;AAGA,YAAM,kBAAkB,KAAK,OAAO;AACpC,UAAI,QAAQ,KAAK,KAAK,KAAK,CAAC,MAAM,EAAE,OAAO,eAAe;AAG1D,UAAI,CAAC,OAAO;AACV,gBAAQ,KAAK,KAAK;AAAA,UAAK,CAAC,MACtB,gBAAgB,SAAS,EAAE,MAAM,EAAE,MAClC,EAAE,MAAM,IAAI,SAAS,gBAAgB,QAAQ,YAAY,EAAE,CAAC;AAAA,QAC/D;AAAA,MACF;AAGA,UAAI,CAAC,OAAO;AACV,gBAAQ,KAAK,KAAK,CAAC;AACnB,cAAM,mBAAmB,KAAK,KAC3B,IAAI,CAAC,MAAM,EAAE,EAAE,EACf,OAAO,OAAO,EACd,MAAM,GAAG,EAAE,EACX,KAAK,IAAI;AACZ,YAAI;AAAA,UACF,qBAAqB,eAAe,oCAC1B,MAAM,EAAE,oCAAoC,gBAAgB;AAAA,QACxE;AAAA,MACF;AAGA,UAAI,gBAAgB,MAAM,sBAAsB,MAAM;AAGtD,UAAI,CAAC,eAAe;AAClB,YAAI,KAAK,iEAAiE;AAC1E,cAAM,aAAa,KAAK,uBAAuB,MAAM,MAAM,EAAE;AAC7D,YAAI,YAAY;AACd,0BAAgB;AAAA,QAClB;AAAA,MACF;AAEA,WAAK,kBAAkB;AAAA,QACrB,IAAI,MAAM,MAAM;AAAA,QAChB;AAAA,QACA,WAAW,MAAM;AAAA,MACnB;AAEA,UAAI;AAAA,QACF,6BAA6B,KAAK,gBAAgB,EAAE,qBACjC,eAAe,eAAe,KAAK,2BAA2B;AAAA,MACnF;AAEA,aAAO,KAAK;AAAA,IACd,SAAS,KAAK;AACZ,UAAI,KAAK,+BAA+B,GAAG,EAAE;AAC7C,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,oBAAoB,uBAIvB;AACD,UAAM,WAAqB,CAAC;AAE5B,UAAM,YAAY,MAAM,KAAK,mBAAmB;AAChD,QAAI,CAAC,WAAW;AACd,aAAO,EAAE,WAAW,OAAO,UAAU,CAAC,0CAA0C,EAAE;AAAA,IACpF;AAGA,QAAI,yBAAyB,UAAU,eAAe;AACpD,UAAI,UAAU,gBAAgB,uBAAuB;AACnD,iBAAS;AAAA,UACP,kCAAkC,UAAU,EAAE,aAAa,UAAU,cAAc,eAAe,CAAC,yCACnE,sBAAsB,eAAe,CAAC,6BAC3C,UAAU,aAAa;AAAA,QACpD;AAAA,MACF;AAAA,IACF;AAGA,QAAI,CAAC,UAAU,eAAe;AAC5B,eAAS;AAAA,QACP,sDAAsD,UAAU,EAAE;AAAA,MAEpE;AAAA,IACF;AAEA,WAAO;AAAA,MACL,WAAW;AAAA,MACX,qBAAqB,UAAU;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,eACJ,UACA,UAAyC,CAAC,GACI;AAC9C,QAAI,CAAC,4BAA4B,KAAK,MAAM,EAAE,UAAU;AACtD,UAAI,MAAM,qCAAqC;AAC/C,aAAO;AAAA,IACT;AAEA,UAAM,cAAc,KAAK,oBAAoB;AAC7C,QAAI,cAAc,GAAG;AACnB,UAAI,MAAM,+BAA+B,WAAW,iCAAiC;AACrF,aAAO;AAAA,IACT;AACA,QAAI,QAAQ,UAAU;AACpB,YAAM,WAAW,QAAQ;AACzB,aAAO,MAAM,IAAI,QAA6C,CAAC,YAAY;AACzE,aAAK,cAAc,QAAQ,EAAE,KAAK;AAAA,UAChC;AAAA,UACA;AAAA,UACA;AAAA,UACA,cAAc,KAAK,IAAI;AAAA,UACvB;AAAA,QACF,CAAC;AACD,aAAK,mBAAmB;AAAA,MAC1B,CAAC;AAAA,IACH;AAEA,WAAO,MAAM,KAAK,yBAAyB,UAAU,OAAO;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,eACN,UACA,UACyE;AACzE,UAAM,cAAc,SAAS,OAAO,CAAC,KAAK,MAAM,MAAM,EAAE,QAAQ,QAAQ,CAAC;AACzE,UAAM,eAAe,KAAK,KAAK,cAAc,CAAC;AAC9C,UAAM,mBAAmB,KAAK,KAAK,SAAS,SAAS,CAAC;AAEtD,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,aAAa,eAAe;AAAA,IAC9B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,aACJ,gBACA,mBACA,eACY;AAEZ,QAAI,4BAA4B,KAAK,MAAM,EAAE,UAAU;AACrD,YAAM,cAAc,MAAM,eAAe;AACzC,UAAI,gBAAgB,MAAM;AACxB,YAAI,MAAM,GAAG,aAAa,kBAAkB;AAC5C,eAAO;AAAA,MACT;AAGA,UAAI,KAAK,OAAO,kBAAkB;AAChC,YAAI,KAAK,GAAG,aAAa,gDAAgD;AAAA,MAC3E,OAAO;AACL,cAAM,IAAI,MAAM,GAAG,aAAa,+CAA+C;AAAA,MACjF;AAAA,IACF;AAGA,WAAO,kBAAkB;AAAA,EAC3B;AACF;","names":["backoffMs","promptChars"]}

package/dist/{chunk-G7A5HLUS.js → chunk-KJH6W2I7.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-HBVPYRDW.js";
 import {
   OFFLINE_SYNC_MAX_MTIME_MS
-} from "./chunk-GYPQL6XN.js";
+} from "./chunk-Z4N7SVVF.js";
 import {
   validateArchiveRelativePath
 } from "./chunk-GCGJW34D.js";
@@ -446,4 +446,4 @@ export {
   summarizeReconcilePlan,
   planReconciliation
 };
-//# sourceMappingURL=chunk-G7A5HLUS.js.map
+//# sourceMappingURL=chunk-KJH6W2I7.js.map

package/dist/{chunk-IXEBUYO4.js → chunk-KM55SMLG.js}

@@ -108,7 +108,8 @@ async function searchWithGenericExclusion(options) {
   let firstPage = true;
   for (; ; ) {
     const raw = await options.search(limit);
-    results = raw.filter((hit) => !options.isExcluded(hit.path));
+    const eligible = raw.filter((hit) => !options.isExcluded(hit.path));
+    results = await options.filterPrivate(eligible);
     if (firstPage) {
       firstPage = false;
       if (!options.sendInitialLimit) target = Math.min(budget, raw.length);
@@ -129,6 +130,7 @@ async function runScopedMemorySearch(options) {
     budget: options.budget,
     sendInitialLimit: options.sendInitialLimit,
     isExcluded: options.isExcluded,
+    filterPrivate: options.filterPrivate,
     search: (limit) => options.namespacesEnabled ? options.namespaced(limit) : options.flatCorpus(limit)
   });
   return results.map((hit) => ({
@@ -146,12 +148,19 @@ async function memorySearchThroughScope(deps, request) {
     throw new EngramAccessInputError("collection must be a non-empty string");
   }
   let searchNamespaces = [];
+  const privateVisibilityCache = /* @__PURE__ */ new Map();
   const results = await runScopedMemorySearch({
     query,
     collection,
     mode,
     namespacesEnabled: deps.namespacesEnabled,
     isExcluded: deps.isExcluded,
+    filterPrivate: (results2) => deps.filterPrivate(
+      results2,
+      searchNamespaces,
+      !deps.namespacesEnabled && collection !== void 0 && collection !== "global" && !deps.memoryCollections.includes(collection),
+      privateVisibilityCache
+    ),
     budget: maxResults ?? deps.defaultBudget,
     sendInitialLimit: maxResults !== void 0,
     authorizeScope: async () => {
@@ -198,4 +207,4 @@ export {
   runScopedMemorySearch,
   memorySearchThroughScope
 };
-//# sourceMappingURL=chunk-IXEBUYO4.js.map
+//# sourceMappingURL=chunk-KM55SMLG.js.map

package/dist/{chunk-IXEBUYO4.js.map → chunk-KM55SMLG.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/access-memory-search-fanout.ts"],"sourcesContent":["import { canReadNamespace, defaultNamespaceForPrincipal } from \"./namespaces/principal.js\";\nimport type { ResolvedScopeProfilePlan } from \"./namespaces/scope-profiles.js\";\nimport { EngramAccessInputError } from \"./access-errors.js\";\nimport { log } from \"./logger.js\";\nimport type { SearchDegradation, SearchExecutionOptions } from \"./search/port.js\";\nimport type { PluginConfig } from \"./types.js\";\n\n/**\n * Issue #2018: `memory_search` has no sessionKey, so — unlike recall — it\n * cannot resolve a coding overlay. With scope profiles active and no overlay,\n * `expandScopeProfileReadNamespaces` derives a per-principal self namespace.\n * On a legacy flat-root deployment the corpus still lives under the configured\n * DEFAULT namespace's base collection, which that derived set excludes, so\n * every query silently returned 0.\n *\n * Returns the configured default namespace to merge into the profile read set\n * when the base collection must stay reachable, or `null` otherwise. ALL of:\n *\n *   - the default namespace is THIS principal's own self store — i.e. the\n *     principal has no dedicated namespace policy, so\n *     `defaultNamespaceForPrincipal` resolves to the configured default. On a\n *     multi-tenant scope-profile deployment every principal has its own\n *     policy; reaching into the default would read ANOTHER namespace, so the\n *     fallback must not fire (#2056 r2 / #1501 privateOnly);\n *   - the profile resolved `userGlobal` as a READABLE layer (not just listed\n *     it in `readOrder`). `serverShared` maps to `sharedNamespace`, not the\n *     default, and an unreadable resolved layer is a deliberate omission —\n *     neither may trigger this fallback (#2056 r2);\n *   - the profile's resolved self namespace is NOT already the default\n *     (otherwise it is already in the set);\n *   - the principal is authorized to read the default namespace.\n *\n * The flat-root signal is resolved lazily via {@link defaultAtFlatRootProvider}\n * — the provider is only invoked once the cheap gates (readOrder consent,\n * resolved-layer readability, principal-self, self-resolved-away, ACL) all\n * pass, so a project-only / serverShared-only / unreadable-userGlobal\n * profile never touches the default store (#2056 r6).\n */\nexport async function resolveMemorySearchDefaultFallback(options: {\n  profilePlan: ResolvedScopeProfilePlan;\n  config: PluginConfig;\n  principal: string | undefined;\n  /**\n   * True only when the configured default namespace's storage root equals\n   * `config.memoryDir` (the legacy flat-root layout). Invoked ONLY after the\n   * cheap gates pass, so ineligible profiles never probe the default store.\n   */\n  defaultAtFlatRootProvider: () => Promise<boolean>;\n}): Promise<string | null> {\n  const { profilePlan, config, principal } = options;\n  // Defense-in-depth: principalSelfIsDefault is only ever true alongside a\n  // flat-root default on legacy deployments (a hosted scope-profile principal\n  // with its own policy fails this even when default is at the flat root). It\n  // is NOT redundant — it keeps a policy-having principal isolated from the\n  // flat default corpus.\n  const principalSelfIsDefault =\n    defaultNamespaceForPrincipal(principal, config) === config.defaultNamespace;\n  // readOrder must explicitly intend userGlobal (resolveScopeProfilePlan\n  // always materializes a userGlobal layer even when readOrder omits it, so\n  // the layer's presence alone is not consent), AND that layer must have\n  // resolved readable (a listed-but-unreadable layer is a deliberate\n  // omission). serverShared maps to sharedNamespace, not the default.\n  const profileIntendsUserGlobal =\n    profilePlan.profile.readOrder.includes(\"userGlobal\");\n  const userGlobalLayerReadable = profilePlan.layers.some(\n    (layer) => layer.id === \"userGlobal\" && layer.readable && Boolean(layer.namespace),\n  );\n  const selfResolvedAwayFromDefault =\n    profilePlan.baseNamespace !== config.defaultNamespace;\n  if (\n    !(\n      profileIntendsUserGlobal &&\n      userGlobalLayerReadable &&\n      principalSelfIsDefault &&\n      selfResolvedAwayFromDefault &&\n      canReadNamespace(principal, config.defaultNamespace, config)\n    )\n  ) {\n    // Cheap gates failed — never probe the default store.\n    return null;\n  }\n  const defaultAtFlatRoot = await options.defaultAtFlatRootProvider();\n  return defaultAtFlatRoot ? config.defaultNamespace : null;\n}\n\n/**\n * Issue #2018 r4: the explicit legacy-flat-root signal — the configured\n * default namespace's storage root equals `config.memoryDir`. Resolved from\n * storage (not inferred from config/policy shape) so a hosted scope-profile\n * deployment never reaches into the default corpus.\n */\nexport async function defaultNamespaceAtFlatRoot(\n  getStorage: (namespace: string) => Promise<{ dir: string }>,\n  config: { defaultNamespace: string; memoryDir: string },\n): Promise<boolean> {\n  const storage = await getStorage(config.defaultNamespace);\n  return storage.dir === config.memoryDir;\n}\n\n/**\n * Merge the {@link resolveMemorySearchDefaultFallback} result into a profile\n * read-namespace set without duplicates. Returns the original set unchanged\n * when no fallback applies.\n */\nexport function mergeMemorySearchDefaultFallback(\n  profileNamespaces: string[],\n  fallback: string | null,\n): string[] {\n  if (!fallback || profileNamespaces.includes(fallback)) return profileNamespaces;\n  return [...profileNamespaces, fallback];\n}\n\n\n/**\n * Run a memory_search namespace fanout with the observability required by\n * issue #2018: a silent empty fanout is surfaced as a warning (never silently\n * empty), and per-namespace backend degradations — which memory_search\n * previously swallowed — are collected and warned so a missing collection\n * looks different from a genuine no-matches.\n *\n * `search` is injected so this stays free of the orchestrator type.\n */\nexport async function runMemorySearchFanout<TResult>(options: {\n  query: string;\n  namespaces: string[];\n  maxResults?: number;\n  principal?: string;\n  requestedNamespace?: string;\n  collection?: string;\n  mode?: \"search\" | \"hybrid\" | \"bm25\" | \"vector\";\n  search(params: {\n    query: string;\n    namespaces: string[];\n    maxResults?: number;\n    mode: \"search\" | \"hybrid\" | \"bm25\" | \"vector\";\n    execution: SearchExecutionOptions;\n  }): Promise<TResult[]>;\n}): Promise<TResult[]> {\n  const { query, namespaces, maxResults, principal, requestedNamespace, collection } = options;\n  if (namespaces.length === 0) {\n    log.warn(\"memory_search resolved zero readable namespaces\", {\n      principal: principal ?? null,\n      requestedNamespace: requestedNamespace ?? null,\n      collection: collection ?? null,\n    });\n    return [];\n  }\n  log.debug(\"memory_search fanout\", {\n    principal: principal ?? null,\n    namespaces,\n    collection: collection ?? null,\n  });\n  const degradations: SearchDegradation[] = [];\n  const results = await options.search({\n    query,\n    namespaces,\n    maxResults,\n    mode: options.mode ?? \"search\",\n    execution: {\n      onDegradation: (degradation) => degradations.push(degradation),\n    },\n  });\n  if (degradations.length > 0) {\n    log.warn(\"memory_search backend degradation\", {\n      principal: principal ?? null,\n      degradations,\n    });\n  }\n  return results;\n}\n\n/**\n * Resolve results for a FLAT corpus (namespaces disabled).\n *\n * An explicit ranking mode routes through the namespace-aware search even\n * here, because that is the only path honoring it; the legacy direct-QMD calls\n * stay the default so nothing else moves.\n */\n/**\n * Reject an option combination a flat corpus cannot honor.\n *\n * A `mode` routes through the namespace-aware backend, which cannot target a\n * specific collection, so pairing the two would silently search the default\n * collection and return unrelated results (AGENTS.md pattern 39).\n *\n * Exported as its own step because callers validate BEFORE any budget\n * short-circuit: changing only the requested result count must never make an\n * invalid request succeed.\n */\nexport const MEMORY_SEARCH_MODES = [\"search\", \"hybrid\", \"bm25\", \"vector\"] as const;\n\nexport type MemorySearchMode = (typeof MEMORY_SEARCH_MODES)[number];\n\n/**\n * Reject an unrecognized ranking mode at the service boundary.\n *\n * The HTTP and MCP schemas already validate their own input, but an\n * in-process caller reaches this service untyped. Both namespace backends\n * route an unknown mode through their DEFAULT ordinary-search branch, so a\n * typo would silently rank differently instead of reporting bad input\n * (AGENTS.md §39).\n */\n/**\n * Reject a budget that is not a finite non-negative integer.\n *\n * The HTTP and MCP schemas validate their own input, but an in-process caller\n * reaches this service untyped: a negative would hit the `budget <= 0`\n * short-circuit and return a successful EMPTY page, and a fraction or a\n * non-finite value would flow into the backend limit and top-up arithmetic.\n * Zero keeps its documented meaning — an empty result with no backend call.\n */\nexport function assertMemorySearchLimit(maxResults: unknown): void {\n  if (maxResults === undefined) return;\n  if (typeof maxResults !== \"number\" || !Number.isInteger(maxResults) || maxResults < 0) {\n    throw new EngramAccessInputError(\n      `maxResults must be a non-negative integer (got ${JSON.stringify(maxResults)})`,\n    );\n  }\n}\n\nexport function assertMemorySearchMode(mode: unknown): void {\n  if (mode === undefined) return;\n  if (typeof mode !== \"string\" || !(MEMORY_SEARCH_MODES as readonly string[]).includes(mode)) {\n    throw new EngramAccessInputError(\n      `mode must be one of ${MEMORY_SEARCH_MODES.join(\", \")} (got ${JSON.stringify(mode)})`,\n    );\n  }\n}\n\nexport function assertFlatCorpusOptions(\n  mode: string | undefined,\n  collection: string | undefined,\n): void {\n  assertMemorySearchMode(mode);\n  if (mode && collection) {\n    throw new EngramAccessInputError(\n      `mode is not supported together with collection on a flat corpus (got collection: ${collection})`,\n    );\n  }\n}\n\nexport async function runFlatCorpusMemorySearch<TResult>(options: {\n  query: string;\n  maxResults?: number;\n  collection?: string;\n  mode?: \"search\" | \"hybrid\" | \"bm25\" | \"vector\";\n  searchAcrossNamespaces(params: {\n    query: string;\n    maxResults?: number;\n    mode: \"search\" | \"hybrid\" | \"bm25\" | \"vector\";\n  }): Promise<TResult[]>;\n  searchGlobal(query: string, maxResults?: number): Promise<TResult[]>;\n  search(query: string, collection: string | undefined, maxResults?: number): Promise<TResult[]>;\n}): Promise<TResult[]> {\n  const { query, maxResults, collection, mode } = options;\n  assertFlatCorpusOptions(options.mode, options.collection);\n  if (mode) {\n    // The mode-aware backend has no collection selector on a flat corpus, so\n    // honoring the mode would silently search the default collection instead\n    return options.searchAcrossNamespaces({ query, maxResults, mode });\n  }\n  return collection === \"global\"\n    ? options.searchGlobal(query, maxResults)\n    : options.search(query, collection, maxResults);\n}\n\n/**\n * How far one generic memory search may page before it stops.\n *\n * A backend-safety bound, NOT a stand-in for corpus exhaustion — which is why\n * it is ABSOLUTE rather than a multiple of the caller's budget. Scaling it to\n * the budget made \"the excluded paths happen to rank first\" indistinguishable\n * from \"there is nothing else\": a 1,000-row request whose first 4,000 hits are\n * artifacts stopped at 4,000 and returned an empty page while valid memories\n * sat at rank 4,001. Pages that come back FULL mean the corpus is not\n * exhausted, so the loop keeps going until a short page proves it is or this\n * cap protects the backend.\n */\nconst MEMORY_SEARCH_CANDIDATE_CAP = 25_000;\n\n\n/**\n * Run a ranked memory search and apply the generic-recall path exclusions\n * BEFORE the user-facing cap.\n *\n * Artifact isolation is a retrieval contract, not a ranking preference:\n * artifacts flow only through the dedicated verbatim path. Filtering after the\n * backend's own cap would let a handful of top-ranked artifacts shrink - or\n * empty - a page that has valid memories right behind them, so the search runs\n * with candidate headroom and tops up until the post-filter budget is met or\n * the corpus is exhausted.\n */\nexport async function searchWithGenericExclusion<TResult extends { path: string }>(options: {\n  budget: number;\n  /**\n   * `false` omits `maxResults` on the FIRST request, so a caller that named no\n   * budget keeps the backend's own page size on the wire; the resolved budget\n   * is still what the filtered page is measured against.\n   */\n  sendInitialLimit: boolean;\n  search(limit: number | undefined): Promise<TResult[]>;\n  isExcluded(memoryPath: string): boolean;\n}): Promise<TResult[]> {\n  const { budget } = options;\n  if (budget <= 0) return [];\n  let results: TResult[] = [];\n  let limit: number | undefined = options.sendInitialLimit ? budget : undefined;\n  // With no explicit limit the caller asked for the BACKEND's page, so that\n  // page's size is the target — not the configured cap. Using the cap would\n  // reissue the query whenever the backend's default page is smaller, and\n  // return more rows than the same request used to.\n  let target = budget;\n  let firstPage = true;\n  for (;;) {\n    const raw = await options.search(limit);\n    results = raw.filter((hit) => !options.isExcluded(hit.path));\n    if (firstPage) {\n      firstPage = false;\n      if (!options.sendInitialLimit) target = Math.min(budget, raw.length);\n      if (target <= 0) return [];\n    }\n    if (results.length >= target) break;\n    // What the backend actually served this round: its own page size when we\n    // named no limit.\n    const served = limit ?? raw.length;\n    // A short page means the corpus is exhausted - asking for more is wasted\n    // work that returns the same rows.\n    if (raw.length === 0 || raw.length < served) break;\n    // The cap protects the backend from an unbounded walk, but it can never\n    // sit at or below what the caller explicitly asked for: a request for N\n    // rows needs room BEYOND N to replace the excluded hits among them, or a\n    // large search returns a short page for a count the operation deliberately\n    // supports.\n    const cap = Math.max(MEMORY_SEARCH_CANDIDATE_CAP, target * 2);\n    if (served >= cap) break;\n    limit = Math.min(served * 2, cap);\n  }\n  return results.slice(0, target);\n}\n\n/**\n * The whole ranked memory-search path behind `POST /engram/v1/memories/search`\n * and the `memory_search` tool: pick the flat-corpus or namespace-aware\n * backend, then apply generic-recall exclusions before the caller's cap.\n */\nexport async function runScopedMemorySearch(options: {\n  query: string;\n  budget: number;\n  /** `false` when the caller named no `maxResults`; see the helper below. */\n  sendInitialLimit: boolean;\n  /**\n   * Authorize the scope. Runs BEFORE any budget decision so a zero budget - a\n   * valid empty search - can never skip the namespace/principal gate and turn\n   * an access error into a successful empty result.\n   */\n  authorizeScope(): Promise<void> | void;\n  collection?: string;\n  mode?: \"search\" | \"hybrid\" | \"bm25\" | \"vector\";\n  namespacesEnabled: boolean;\n  isExcluded(memoryPath: string): boolean;\n  flatCorpus(\n    limit: number | undefined,\n  ): Promise<Array<{ path: string; score: number; snippet?: string }>>;\n  namespaced(\n    limit: number | undefined,\n  ): Promise<Array<{ path: string; score: number; snippet?: string }>>;\n}): Promise<Array<{ path: string; score: number; snippet: string }>> {\n  await options.authorizeScope();\n  const results = await searchWithGenericExclusion({\n    budget: options.budget,\n    sendInitialLimit: options.sendInitialLimit,\n    isExcluded: options.isExcluded,\n    search: (limit) =>\n      options.namespacesEnabled ? options.namespaced(limit) : options.flatCorpus(limit),\n  });\n  return results.map((hit) => ({\n    path: hit.path,\n    score: hit.score,\n    snippet: (hit.snippet ?? \"\").slice(0, 800),\n  }));\n}\n\n/** Everything the ranked memory-search surface needs from the service. */\nexport interface ScopedMemorySearchDeps {\n  namespacesEnabled: boolean;\n  defaultBudget: number;\n  isExcluded(memoryPath: string): boolean;\n  /** Flat-corpus authorization; throws when the namespace is unreadable. */\n  authorizeFlatCorpus(namespace: string | undefined, principal: string | undefined): void;\n  /** Namespace-aware authorization; throws, else returns the search fan-out. */\n  authorizeNamespaces(\n    namespace: string | undefined,\n    principal: string | undefined,\n    collection: string | undefined,\n  ): Promise<string[]>;\n  searchAcrossNamespaces(params: {\n    query: string;\n    namespaces?: string[];\n    maxResults?: number;\n    mode?: \"search\" | \"hybrid\" | \"bm25\" | \"vector\";\n  }): Promise<Array<{ path: string; score: number; snippet?: string }>>;\n  searchGlobal(\n    query: string,\n    maxResults?: number,\n  ): Promise<Array<{ path: string; score: number; snippet?: string }>>;\n  search(\n    query: string,\n    collection?: string,\n    maxResults?: number,\n  ): Promise<Array<{ path: string; score: number; snippet?: string }>>;\n}\n\n/** The whole `memory_search` surface: validate, authorize, search, shape. */\nexport async function memorySearchThroughScope(\n  deps: ScopedMemorySearchDeps,\n  request: {\n    query: string;\n    namespace?: string;\n    maxResults?: number;\n    collection?: string;\n    mode?: \"search\" | \"hybrid\" | \"bm25\" | \"vector\";\n    principal?: string;\n  },\n): Promise<{\n  query: string;\n  results: Array<{ path: string; score: number; snippet: string }>;\n  count: number;\n}> {\n  const { query, namespace, maxResults, mode, principal } = request;\n  // BOTH branches take the mode, and only the flat one reaches\n  // `assertFlatCorpusOptions` — validate here so a namespaced request cannot\n  // rank differently on a typo, and before any budget short-circuit.\n  assertMemorySearchMode(mode);\n  assertMemorySearchLimit(maxResults);\n  const collection = request.collection?.trim();\n  if (request.collection !== undefined && !collection) {\n    throw new EngramAccessInputError(\"collection must be a non-empty string\");\n  }\n  let searchNamespaces: string[] = [];\n  const results = await runScopedMemorySearch({\n    query, collection, mode,\n    namespacesEnabled: deps.namespacesEnabled,\n    isExcluded: deps.isExcluded,\n    budget: maxResults ?? deps.defaultBudget,\n    sendInitialLimit: maxResults !== undefined,\n    authorizeScope: async () => {\n      if (!deps.namespacesEnabled) {\n        // Validate the option combination here too: a zero budget must not be\n        // a way to slip an invalid request past the check.\n        assertFlatCorpusOptions(mode, collection);\n        return deps.authorizeFlatCorpus(namespace, principal);\n      }\n      searchNamespaces = await deps.authorizeNamespaces(namespace, principal, collection);\n    },\n    flatCorpus: (limit) =>\n      runFlatCorpusMemorySearch({\n        query, maxResults: limit, collection, mode,\n        searchAcrossNamespaces: (p) => deps.searchAcrossNamespaces(p),\n        searchGlobal: (q, globalLimit) => deps.searchGlobal(q, globalLimit),\n        search: (q, coll, searchLimit) => deps.search(q, coll, searchLimit),\n      }),\n    namespaced: (limit) =>\n      runMemorySearchFanout({\n        query, maxResults: limit, principal, collection, mode,\n        requestedNamespace: namespace,\n        namespaces: searchNamespaces,\n        search: (p) => deps.searchAcrossNamespaces(p),\n      }),\n  });\n  return { query, results, count: results.length };\n}\n"],"mappings":";;;;;;;;;;;;AAsCA,eAAsB,mCAAmC,SAU9B;AACzB,QAAM,EAAE,aAAa,QAAQ,UAAU,IAAI;AAM3C,QAAM,yBACJ,6BAA6B,WAAW,MAAM,MAAM,OAAO;AAM7D,QAAM,2BACJ,YAAY,QAAQ,UAAU,SAAS,YAAY;AACrD,QAAM,0BAA0B,YAAY,OAAO;AAAA,IACjD,CAAC,UAAU,MAAM,OAAO,gBAAgB,MAAM,YAAY,QAAQ,MAAM,SAAS;AAAA,EACnF;AACA,QAAM,8BACJ,YAAY,kBAAkB,OAAO;AACvC,MACE,EACE,4BACA,2BACA,0BACA,+BACA,iBAAiB,WAAW,OAAO,kBAAkB,MAAM,IAE7D;AAEA,WAAO;AAAA,EACT;AACA,QAAM,oBAAoB,MAAM,QAAQ,0BAA0B;AAClE,SAAO,oBAAoB,OAAO,mBAAmB;AACvD;AAQA,eAAsB,2BACpB,YACA,QACkB;AAClB,QAAM,UAAU,MAAM,WAAW,OAAO,gBAAgB;AACxD,SAAO,QAAQ,QAAQ,OAAO;AAChC;AAOO,SAAS,iCACd,mBACA,UACU;AACV,MAAI,CAAC,YAAY,kBAAkB,SAAS,QAAQ,EAAG,QAAO;AAC9D,SAAO,CAAC,GAAG,mBAAmB,QAAQ;AACxC;AAYA,eAAsB,sBAA+B,SAe9B;AACrB,QAAM,EAAE,OAAO,YAAY,YAAY,WAAW,oBAAoB,WAAW,IAAI;AACrF,MAAI,WAAW,WAAW,GAAG;AAC3B,QAAI,KAAK,mDAAmD;AAAA,MAC1D,WAAW,aAAa;AAAA,MACxB,oBAAoB,sBAAsB;AAAA,MAC1C,YAAY,cAAc;AAAA,IAC5B,CAAC;AACD,WAAO,CAAC;AAAA,EACV;AACA,MAAI,MAAM,wBAAwB;AAAA,IAChC,WAAW,aAAa;AAAA,IACxB;AAAA,IACA,YAAY,cAAc;AAAA,EAC5B,CAAC;AACD,QAAM,eAAoC,CAAC;AAC3C,QAAM,UAAU,MAAM,QAAQ,OAAO;AAAA,IACnC;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM,QAAQ,QAAQ;AAAA,IACtB,WAAW;AAAA,MACT,eAAe,CAAC,gBAAgB,aAAa,KAAK,WAAW;AAAA,IAC/D;AAAA,EACF,CAAC;AACD,MAAI,aAAa,SAAS,GAAG;AAC3B,QAAI,KAAK,qCAAqC;AAAA,MAC5C,WAAW,aAAa;AAAA,MACxB;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAoBO,IAAM,sBAAsB,CAAC,UAAU,UAAU,QAAQ,QAAQ;AAsBjE,SAAS,wBAAwB,YAA2B;AACjE,MAAI,eAAe,OAAW;AAC9B,MAAI,OAAO,eAAe,YAAY,CAAC,OAAO,UAAU,UAAU,KAAK,aAAa,GAAG;AACrF,UAAM,IAAI;AAAA,MACR,kDAAkD,KAAK,UAAU,UAAU,CAAC;AAAA,IAC9E;AAAA,EACF;AACF;AAEO,SAAS,uBAAuB,MAAqB;AAC1D,MAAI,SAAS,OAAW;AACxB,MAAI,OAAO,SAAS,YAAY,CAAE,oBAA0C,SAAS,IAAI,GAAG;AAC1F,UAAM,IAAI;AAAA,MACR,uBAAuB,oBAAoB,KAAK,IAAI,CAAC,SAAS,KAAK,UAAU,IAAI,CAAC;AAAA,IACpF;AAAA,EACF;AACF;AAEO,SAAS,wBACd,MACA,YACM;AACN,yBAAuB,IAAI;AAC3B,MAAI,QAAQ,YAAY;AACtB,UAAM,IAAI;AAAA,MACR,oFAAoF,UAAU;AAAA,IAChG;AAAA,EACF;AACF;AAEA,eAAsB,0BAAmC,SAYlC;AACrB,QAAM,EAAE,OAAO,YAAY,YAAY,KAAK,IAAI;AAChD,0BAAwB,QAAQ,MAAM,QAAQ,UAAU;AACxD,MAAI,MAAM;AAGR,WAAO,QAAQ,uBAAuB,EAAE,OAAO,YAAY,KAAK,CAAC;AAAA,EACnE;AACA,SAAO,eAAe,WAClB,QAAQ,aAAa,OAAO,UAAU,IACtC,QAAQ,OAAO,OAAO,YAAY,UAAU;AAClD;AAcA,IAAM,8BAA8B;AAcpC,eAAsB,2BAA6D,SAU5D;AACrB,QAAM,EAAE,OAAO,IAAI;AACnB,MAAI,UAAU,EAAG,QAAO,CAAC;AACzB,MAAI,UAAqB,CAAC;AAC1B,MAAI,QAA4B,QAAQ,mBAAmB,SAAS;AAKpE,MAAI,SAAS;AACb,MAAI,YAAY;AAChB,aAAS;AACP,UAAM,MAAM,MAAM,QAAQ,OAAO,KAAK;AACtC,cAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,WAAW,IAAI,IAAI,CAAC;AAC3D,QAAI,WAAW;AACb,kBAAY;AACZ,UAAI,CAAC,QAAQ,iBAAkB,UAAS,KAAK,IAAI,QAAQ,IAAI,MAAM;AACnE,UAAI,UAAU,EAAG,QAAO,CAAC;AAAA,IAC3B;AACA,QAAI,QAAQ,UAAU,OAAQ;AAG9B,UAAM,SAAS,SAAS,IAAI;AAG5B,QAAI,IAAI,WAAW,KAAK,IAAI,SAAS,OAAQ;AAM7C,UAAM,MAAM,KAAK,IAAI,6BAA6B,SAAS,CAAC;AAC5D,QAAI,UAAU,IAAK;AACnB,YAAQ,KAAK,IAAI,SAAS,GAAG,GAAG;AAAA,EAClC;AACA,SAAO,QAAQ,MAAM,GAAG,MAAM;AAChC;AAOA,eAAsB,sBAAsB,SAqByB;AACnE,QAAM,QAAQ,eAAe;AAC7B,QAAM,UAAU,MAAM,2BAA2B;AAAA,IAC/C,QAAQ,QAAQ;AAAA,IAChB,kBAAkB,QAAQ;AAAA,IAC1B,YAAY,QAAQ;AAAA,IACpB,QAAQ,CAAC,UACP,QAAQ,oBAAoB,QAAQ,WAAW,KAAK,IAAI,QAAQ,WAAW,KAAK;AAAA,EACpF,CAAC;AACD,SAAO,QAAQ,IAAI,CAAC,SAAS;AAAA,IAC3B,MAAM,IAAI;AAAA,IACV,OAAO,IAAI;AAAA,IACX,UAAU,IAAI,WAAW,IAAI,MAAM,GAAG,GAAG;AAAA,EAC3C,EAAE;AACJ;AAiCA,eAAsB,yBACpB,MACA,SAYC;AACD,QAAM,EAAE,OAAO,WAAW,YAAY,MAAM,UAAU,IAAI;AAI1D,yBAAuB,IAAI;AAC3B,0BAAwB,UAAU;AAClC,QAAM,aAAa,QAAQ,YAAY,KAAK;AAC5C,MAAI,QAAQ,eAAe,UAAa,CAAC,YAAY;AACnD,UAAM,IAAI,uBAAuB,uCAAuC;AAAA,EAC1E;AACA,MAAI,mBAA6B,CAAC;AAClC,QAAM,UAAU,MAAM,sBAAsB;AAAA,IAC1C;AAAA,IAAO;AAAA,IAAY;AAAA,IACnB,mBAAmB,KAAK;AAAA,IACxB,YAAY,KAAK;AAAA,IACjB,QAAQ,cAAc,KAAK;AAAA,IAC3B,kBAAkB,eAAe;AAAA,IACjC,gBAAgB,YAAY;AAC1B,UAAI,CAAC,KAAK,mBAAmB;AAG3B,gCAAwB,MAAM,UAAU;AACxC,eAAO,KAAK,oBAAoB,WAAW,SAAS;AAAA,MACtD;AACA,yBAAmB,MAAM,KAAK,oBAAoB,WAAW,WAAW,UAAU;AAAA,IACpF;AAAA,IACA,YAAY,CAAC,UACX,0BAA0B;AAAA,MACxB;AAAA,MAAO,YAAY;AAAA,MAAO;AAAA,MAAY;AAAA,MACtC,wBAAwB,CAAC,MAAM,KAAK,uBAAuB,CAAC;AAAA,MAC5D,cAAc,CAAC,GAAG,gBAAgB,KAAK,aAAa,GAAG,WAAW;AAAA,MAClE,QAAQ,CAAC,GAAG,MAAM,gBAAgB,KAAK,OAAO,GAAG,MAAM,WAAW;AAAA,IACpE,CAAC;AAAA,IACH,YAAY,CAAC,UACX,sBAAsB;AAAA,MACpB;AAAA,MAAO,YAAY;AAAA,MAAO;AAAA,MAAW;AAAA,MAAY;AAAA,MACjD,oBAAoB;AAAA,MACpB,YAAY;AAAA,MACZ,QAAQ,CAAC,MAAM,KAAK,uBAAuB,CAAC;AAAA,IAC9C,CAAC;AAAA,EACL,CAAC;AACD,SAAO,EAAE,OAAO,SAAS,OAAO,QAAQ,OAAO;AACjD;","names":[]}
+{"version":3,"sources":["../src/access-memory-search-fanout.ts"],"sourcesContent":["import { canReadNamespace, defaultNamespaceForPrincipal } from \"./namespaces/principal.js\";\nimport type { ResolvedScopeProfilePlan } from \"./namespaces/scope-profiles.js\";\nimport { EngramAccessInputError } from \"./access-errors.js\";\nimport { log } from \"./logger.js\";\nimport type { SearchDegradation, SearchExecutionOptions } from \"./search/port.js\";\nimport type { PluginConfig } from \"./types.js\";\n\n/**\n * Issue #2018: `memory_search` has no sessionKey, so — unlike recall — it\n * cannot resolve a coding overlay. With scope profiles active and no overlay,\n * `expandScopeProfileReadNamespaces` derives a per-principal self namespace.\n * On a legacy flat-root deployment the corpus still lives under the configured\n * DEFAULT namespace's base collection, which that derived set excludes, so\n * every query silently returned 0.\n *\n * Returns the configured default namespace to merge into the profile read set\n * when the base collection must stay reachable, or `null` otherwise. ALL of:\n *\n *   - the default namespace is THIS principal's own self store — i.e. the\n *     principal has no dedicated namespace policy, so\n *     `defaultNamespaceForPrincipal` resolves to the configured default. On a\n *     multi-tenant scope-profile deployment every principal has its own\n *     policy; reaching into the default would read ANOTHER namespace, so the\n *     fallback must not fire (#2056 r2 / #1501 privateOnly);\n *   - the profile resolved `userGlobal` as a READABLE layer (not just listed\n *     it in `readOrder`). `serverShared` maps to `sharedNamespace`, not the\n *     default, and an unreadable resolved layer is a deliberate omission —\n *     neither may trigger this fallback (#2056 r2);\n *   - the profile's resolved self namespace is NOT already the default\n *     (otherwise it is already in the set);\n *   - the principal is authorized to read the default namespace.\n *\n * The flat-root signal is resolved lazily via {@link defaultAtFlatRootProvider}\n * — the provider is only invoked once the cheap gates (readOrder consent,\n * resolved-layer readability, principal-self, self-resolved-away, ACL) all\n * pass, so a project-only / serverShared-only / unreadable-userGlobal\n * profile never touches the default store (#2056 r6).\n */\nexport async function resolveMemorySearchDefaultFallback(options: {\n  profilePlan: ResolvedScopeProfilePlan;\n  config: PluginConfig;\n  principal: string | undefined;\n  /**\n   * True only when the configured default namespace's storage root equals\n   * `config.memoryDir` (the legacy flat-root layout). Invoked ONLY after the\n   * cheap gates pass, so ineligible profiles never probe the default store.\n   */\n  defaultAtFlatRootProvider: () => Promise<boolean>;\n}): Promise<string | null> {\n  const { profilePlan, config, principal } = options;\n  // Defense-in-depth: principalSelfIsDefault is only ever true alongside a\n  // flat-root default on legacy deployments (a hosted scope-profile principal\n  // with its own policy fails this even when default is at the flat root). It\n  // is NOT redundant — it keeps a policy-having principal isolated from the\n  // flat default corpus.\n  const principalSelfIsDefault =\n    defaultNamespaceForPrincipal(principal, config) === config.defaultNamespace;\n  // readOrder must explicitly intend userGlobal (resolveScopeProfilePlan\n  // always materializes a userGlobal layer even when readOrder omits it, so\n  // the layer's presence alone is not consent), AND that layer must have\n  // resolved readable (a listed-but-unreadable layer is a deliberate\n  // omission). serverShared maps to sharedNamespace, not the default.\n  const profileIntendsUserGlobal =\n    profilePlan.profile.readOrder.includes(\"userGlobal\");\n  const userGlobalLayerReadable = profilePlan.layers.some(\n    (layer) => layer.id === \"userGlobal\" && layer.readable && Boolean(layer.namespace),\n  );\n  const selfResolvedAwayFromDefault =\n    profilePlan.baseNamespace !== config.defaultNamespace;\n  if (\n    !(\n      profileIntendsUserGlobal &&\n      userGlobalLayerReadable &&\n      principalSelfIsDefault &&\n      selfResolvedAwayFromDefault &&\n      canReadNamespace(principal, config.defaultNamespace, config)\n    )\n  ) {\n    // Cheap gates failed — never probe the default store.\n    return null;\n  }\n  const defaultAtFlatRoot = await options.defaultAtFlatRootProvider();\n  return defaultAtFlatRoot ? config.defaultNamespace : null;\n}\n\n/**\n * Issue #2018 r4: the explicit legacy-flat-root signal — the configured\n * default namespace's storage root equals `config.memoryDir`. Resolved from\n * storage (not inferred from config/policy shape) so a hosted scope-profile\n * deployment never reaches into the default corpus.\n */\nexport async function defaultNamespaceAtFlatRoot(\n  getStorage: (namespace: string) => Promise<{ dir: string }>,\n  config: { defaultNamespace: string; memoryDir: string },\n): Promise<boolean> {\n  const storage = await getStorage(config.defaultNamespace);\n  return storage.dir === config.memoryDir;\n}\n\n/**\n * Merge the {@link resolveMemorySearchDefaultFallback} result into a profile\n * read-namespace set without duplicates. Returns the original set unchanged\n * when no fallback applies.\n */\nexport function mergeMemorySearchDefaultFallback(\n  profileNamespaces: string[],\n  fallback: string | null,\n): string[] {\n  if (!fallback || profileNamespaces.includes(fallback)) return profileNamespaces;\n  return [...profileNamespaces, fallback];\n}\n\n\n/**\n * Run a memory_search namespace fanout with the observability required by\n * issue #2018: a silent empty fanout is surfaced as a warning (never silently\n * empty), and per-namespace backend degradations — which memory_search\n * previously swallowed — are collected and warned so a missing collection\n * looks different from a genuine no-matches.\n *\n * `search` is injected so this stays free of the orchestrator type.\n */\nexport async function runMemorySearchFanout<TResult>(options: {\n  query: string;\n  namespaces: string[];\n  maxResults?: number;\n  principal?: string;\n  requestedNamespace?: string;\n  collection?: string;\n  mode?: \"search\" | \"hybrid\" | \"bm25\" | \"vector\";\n  search(params: {\n    query: string;\n    namespaces: string[];\n    maxResults?: number;\n    mode: \"search\" | \"hybrid\" | \"bm25\" | \"vector\";\n    execution: SearchExecutionOptions;\n  }): Promise<TResult[]>;\n}): Promise<TResult[]> {\n  const { query, namespaces, maxResults, principal, requestedNamespace, collection } = options;\n  if (namespaces.length === 0) {\n    log.warn(\"memory_search resolved zero readable namespaces\", {\n      principal: principal ?? null,\n      requestedNamespace: requestedNamespace ?? null,\n      collection: collection ?? null,\n    });\n    return [];\n  }\n  log.debug(\"memory_search fanout\", {\n    principal: principal ?? null,\n    namespaces,\n    collection: collection ?? null,\n  });\n  const degradations: SearchDegradation[] = [];\n  const results = await options.search({\n    query,\n    namespaces,\n    maxResults,\n    mode: options.mode ?? \"search\",\n    execution: {\n      onDegradation: (degradation) => degradations.push(degradation),\n    },\n  });\n  if (degradations.length > 0) {\n    log.warn(\"memory_search backend degradation\", {\n      principal: principal ?? null,\n      degradations,\n    });\n  }\n  return results;\n}\n\n/**\n * Resolve results for a FLAT corpus (namespaces disabled).\n *\n * An explicit ranking mode routes through the namespace-aware search even\n * here, because that is the only path honoring it; the legacy direct-QMD calls\n * stay the default so nothing else moves.\n */\n/**\n * Reject an option combination a flat corpus cannot honor.\n *\n * A `mode` routes through the namespace-aware backend, which cannot target a\n * specific collection, so pairing the two would silently search the default\n * collection and return unrelated results (AGENTS.md pattern 39).\n *\n * Exported as its own step because callers validate BEFORE any budget\n * short-circuit: changing only the requested result count must never make an\n * invalid request succeed.\n */\nexport const MEMORY_SEARCH_MODES = [\"search\", \"hybrid\", \"bm25\", \"vector\"] as const;\n\nexport type MemorySearchMode = (typeof MEMORY_SEARCH_MODES)[number];\n\n/**\n * Reject an unrecognized ranking mode at the service boundary.\n *\n * The HTTP and MCP schemas already validate their own input, but an\n * in-process caller reaches this service untyped. Both namespace backends\n * route an unknown mode through their DEFAULT ordinary-search branch, so a\n * typo would silently rank differently instead of reporting bad input\n * (AGENTS.md §39).\n */\n/**\n * Reject a budget that is not a finite non-negative integer.\n *\n * The HTTP and MCP schemas validate their own input, but an in-process caller\n * reaches this service untyped: a negative would hit the `budget <= 0`\n * short-circuit and return a successful EMPTY page, and a fraction or a\n * non-finite value would flow into the backend limit and top-up arithmetic.\n * Zero keeps its documented meaning — an empty result with no backend call.\n */\nexport function assertMemorySearchLimit(maxResults: unknown): void {\n  if (maxResults === undefined) return;\n  if (typeof maxResults !== \"number\" || !Number.isInteger(maxResults) || maxResults < 0) {\n    throw new EngramAccessInputError(\n      `maxResults must be a non-negative integer (got ${JSON.stringify(maxResults)})`,\n    );\n  }\n}\n\nexport function assertMemorySearchMode(mode: unknown): void {\n  if (mode === undefined) return;\n  if (typeof mode !== \"string\" || !(MEMORY_SEARCH_MODES as readonly string[]).includes(mode)) {\n    throw new EngramAccessInputError(\n      `mode must be one of ${MEMORY_SEARCH_MODES.join(\", \")} (got ${JSON.stringify(mode)})`,\n    );\n  }\n}\n\nexport function assertFlatCorpusOptions(\n  mode: string | undefined,\n  collection: string | undefined,\n): void {\n  assertMemorySearchMode(mode);\n  if (mode && collection) {\n    throw new EngramAccessInputError(\n      `mode is not supported together with collection on a flat corpus (got collection: ${collection})`,\n    );\n  }\n}\n\nexport async function runFlatCorpusMemorySearch<TResult>(options: {\n  query: string;\n  maxResults?: number;\n  collection?: string;\n  mode?: \"search\" | \"hybrid\" | \"bm25\" | \"vector\";\n  searchAcrossNamespaces(params: {\n    query: string;\n    maxResults?: number;\n    mode: \"search\" | \"hybrid\" | \"bm25\" | \"vector\";\n  }): Promise<TResult[]>;\n  searchGlobal(query: string, maxResults?: number): Promise<TResult[]>;\n  search(query: string, collection: string | undefined, maxResults?: number): Promise<TResult[]>;\n}): Promise<TResult[]> {\n  const { query, maxResults, collection, mode } = options;\n  assertFlatCorpusOptions(options.mode, options.collection);\n  if (mode) {\n    // The mode-aware backend has no collection selector on a flat corpus, so\n    // honoring the mode would silently search the default collection instead\n    return options.searchAcrossNamespaces({ query, maxResults, mode });\n  }\n  return collection === \"global\"\n    ? options.searchGlobal(query, maxResults)\n    : options.search(query, collection, maxResults);\n}\n\n/**\n * How far one generic memory search may page before it stops.\n *\n * A backend-safety bound, NOT a stand-in for corpus exhaustion — which is why\n * it is ABSOLUTE rather than a multiple of the caller's budget. Scaling it to\n * the budget made \"the excluded paths happen to rank first\" indistinguishable\n * from \"there is nothing else\": a 1,000-row request whose first 4,000 hits are\n * artifacts stopped at 4,000 and returned an empty page while valid memories\n * sat at rank 4,001. Pages that come back FULL mean the corpus is not\n * exhausted, so the loop keeps going until a short page proves it is or this\n * cap protects the backend.\n */\nconst MEMORY_SEARCH_CANDIDATE_CAP = 25_000;\n\n\n/**\n * Run a ranked memory search and apply the generic-recall path exclusions\n * BEFORE the user-facing cap.\n *\n * Artifact isolation is a retrieval contract, not a ranking preference:\n * artifacts flow only through the dedicated verbatim path. Filtering after the\n * backend's own cap would let a handful of top-ranked artifacts shrink - or\n * empty - a page that has valid memories right behind them, so the search runs\n * with candidate headroom and tops up until the post-filter budget is met or\n * the corpus is exhausted.\n */\nexport async function searchWithGenericExclusion<TResult extends { path: string }>(options: {\n  budget: number;\n  /**\n   * `false` omits `maxResults` on the FIRST request, so a caller that named no\n   * budget keeps the backend's own page size on the wire; the resolved budget\n   * is still what the filtered page is measured against.\n   */\n  sendInitialLimit: boolean;\n  search(limit: number | undefined): Promise<TResult[]>;\n  filterPrivate(results: TResult[]): Promise<TResult[]>;\n  isExcluded(memoryPath: string): boolean;\n}): Promise<TResult[]> {\n  const { budget } = options;\n  if (budget <= 0) return [];\n  let results: TResult[] = [];\n  let limit: number | undefined = options.sendInitialLimit ? budget : undefined;\n  // With no explicit limit the caller asked for the BACKEND's page, so that\n  // page's size is the target — not the configured cap. Using the cap would\n  // reissue the query whenever the backend's default page is smaller, and\n  // return more rows than the same request used to.\n  let target = budget;\n  let firstPage = true;\n  for (;;) {\n    const raw = await options.search(limit);\n    const eligible = raw.filter((hit) => !options.isExcluded(hit.path));\n    results = await options.filterPrivate(eligible);\n    if (firstPage) {\n      firstPage = false;\n      if (!options.sendInitialLimit) target = Math.min(budget, raw.length);\n      if (target <= 0) return [];\n    }\n    if (results.length >= target) break;\n    // What the backend actually served this round: its own page size when we\n    // named no limit.\n    const served = limit ?? raw.length;\n    // A short page means the corpus is exhausted - asking for more is wasted\n    // work that returns the same rows.\n    if (raw.length === 0 || raw.length < served) break;\n    // The cap protects the backend from an unbounded walk, but it can never\n    // sit at or below what the caller explicitly asked for: a request for N\n    // rows needs room BEYOND N to replace the excluded hits among them, or a\n    // large search returns a short page for a count the operation deliberately\n    // supports.\n    const cap = Math.max(MEMORY_SEARCH_CANDIDATE_CAP, target * 2);\n    if (served >= cap) break;\n    limit = Math.min(served * 2, cap);\n  }\n  return results.slice(0, target);\n}\n\n/**\n * The whole ranked memory-search path behind `POST /engram/v1/memories/search`\n * and the `memory_search` tool: pick the flat-corpus or namespace-aware\n * backend, then apply generic-recall exclusions before the caller's cap.\n */\nexport async function runScopedMemorySearch(options: {\n  query: string;\n  budget: number;\n  /** `false` when the caller named no `maxResults`; see the helper below. */\n  sendInitialLimit: boolean;\n  /**\n   * Authorize the scope. Runs BEFORE any budget decision so a zero budget - a\n   * valid empty search - can never skip the namespace/principal gate and turn\n   * an access error into a successful empty result.\n   */\n  authorizeScope(): Promise<void> | void;\n  collection?: string;\n  mode?: \"search\" | \"hybrid\" | \"bm25\" | \"vector\";\n  namespacesEnabled: boolean;\n  isExcluded(memoryPath: string): boolean;\n  filterPrivate(\n    results: Array<{ path: string; score: number; snippet?: string }>,\n  ): Promise<Array<{ path: string; score: number; snippet?: string }>>;\n  flatCorpus(\n    limit: number | undefined,\n  ): Promise<Array<{ path: string; score: number; snippet?: string }>>;\n  namespaced(\n    limit: number | undefined,\n  ): Promise<Array<{ path: string; score: number; snippet?: string }>>;\n}): Promise<Array<{ path: string; score: number; snippet: string }>> {\n  await options.authorizeScope();\n  const results = await searchWithGenericExclusion({\n    budget: options.budget,\n    sendInitialLimit: options.sendInitialLimit,\n    isExcluded: options.isExcluded,\n    filterPrivate: options.filterPrivate,\n    search: (limit) =>\n      options.namespacesEnabled ? options.namespaced(limit) : options.flatCorpus(limit),\n  });\n  return results.map((hit) => ({\n    path: hit.path,\n    score: hit.score,\n    snippet: (hit.snippet ?? \"\").slice(0, 800),\n  }));\n}\n\n/** Everything the ranked memory-search surface needs from the service. */\nexport interface ScopedMemorySearchDeps {\n  namespacesEnabled: boolean;\n  defaultBudget: number;\n  memoryCollections: readonly string[];\n  isExcluded(memoryPath: string): boolean;\n  filterPrivate(\n    results: Array<{ path: string; score: number; snippet?: string }>,\n    namespaces: readonly string[],\n    preserveUnresolved?: boolean,\n    visibilityCache?: Map<string, boolean>,\n  ): Promise<Array<{ path: string; score: number; snippet?: string }>>;\n  /** Flat-corpus authorization; throws when the namespace is unreadable. */\n  authorizeFlatCorpus(namespace: string | undefined, principal: string | undefined): void;\n  /** Namespace-aware authorization; throws, else returns the search fan-out. */\n  authorizeNamespaces(\n    namespace: string | undefined,\n    principal: string | undefined,\n    collection: string | undefined,\n  ): Promise<string[]>;\n  searchAcrossNamespaces(params: {\n    query: string;\n    namespaces?: string[];\n    maxResults?: number;\n    mode?: \"search\" | \"hybrid\" | \"bm25\" | \"vector\";\n  }): Promise<Array<{ path: string; score: number; snippet?: string }>>;\n  searchGlobal(\n    query: string,\n    maxResults?: number,\n  ): Promise<Array<{ path: string; score: number; snippet?: string }>>;\n  search(\n    query: string,\n    collection?: string,\n    maxResults?: number,\n  ): Promise<Array<{ path: string; score: number; snippet?: string }>>;\n}\n\n/** The whole `memory_search` surface: validate, authorize, search, shape. */\nexport async function memorySearchThroughScope(\n  deps: ScopedMemorySearchDeps,\n  request: {\n    query: string;\n    namespace?: string;\n    maxResults?: number;\n    collection?: string;\n    mode?: \"search\" | \"hybrid\" | \"bm25\" | \"vector\";\n    principal?: string;\n  },\n): Promise<{\n  query: string;\n  results: Array<{ path: string; score: number; snippet: string }>;\n  count: number;\n}> {\n  const { query, namespace, maxResults, mode, principal } = request;\n  // BOTH branches take the mode, and only the flat one reaches\n  // `assertFlatCorpusOptions` — validate here so a namespaced request cannot\n  // rank differently on a typo, and before any budget short-circuit.\n  assertMemorySearchMode(mode);\n  assertMemorySearchLimit(maxResults);\n  const collection = request.collection?.trim();\n  if (request.collection !== undefined && !collection) {\n    throw new EngramAccessInputError(\"collection must be a non-empty string\");\n  }\n  let searchNamespaces: string[] = [];\n  const privateVisibilityCache = new Map<string, boolean>();\n  const results = await runScopedMemorySearch({\n    query, collection, mode,\n    namespacesEnabled: deps.namespacesEnabled,\n    isExcluded: deps.isExcluded,\n    filterPrivate: (results) => deps.filterPrivate(\n      results,\n      searchNamespaces,\n      !deps.namespacesEnabled &&\n        collection !== undefined &&\n        collection !== \"global\" &&\n        !deps.memoryCollections.includes(collection),\n      privateVisibilityCache,\n    ),\n    budget: maxResults ?? deps.defaultBudget,\n    sendInitialLimit: maxResults !== undefined,\n    authorizeScope: async () => {\n      if (!deps.namespacesEnabled) {\n        // Validate the option combination here too: a zero budget must not be\n        // a way to slip an invalid request past the check.\n        assertFlatCorpusOptions(mode, collection);\n        return deps.authorizeFlatCorpus(namespace, principal);\n      }\n      searchNamespaces = await deps.authorizeNamespaces(namespace, principal, collection);\n    },\n    flatCorpus: (limit) =>\n      runFlatCorpusMemorySearch({\n        query, maxResults: limit, collection, mode,\n        searchAcrossNamespaces: (p) => deps.searchAcrossNamespaces(p),\n        searchGlobal: (q, globalLimit) => deps.searchGlobal(q, globalLimit),\n        search: (q, coll, searchLimit) => deps.search(q, coll, searchLimit),\n      }),\n    namespaced: (limit) =>\n      runMemorySearchFanout({\n        query, maxResults: limit, principal, collection, mode,\n        requestedNamespace: namespace,\n        namespaces: searchNamespaces,\n        search: (p) => deps.searchAcrossNamespaces(p),\n      }),\n  });\n  return { query, results, count: results.length };\n}\n"],"mappings":";;;;;;;;;;;;AAsCA,eAAsB,mCAAmC,SAU9B;AACzB,QAAM,EAAE,aAAa,QAAQ,UAAU,IAAI;AAM3C,QAAM,yBACJ,6BAA6B,WAAW,MAAM,MAAM,OAAO;AAM7D,QAAM,2BACJ,YAAY,QAAQ,UAAU,SAAS,YAAY;AACrD,QAAM,0BAA0B,YAAY,OAAO;AAAA,IACjD,CAAC,UAAU,MAAM,OAAO,gBAAgB,MAAM,YAAY,QAAQ,MAAM,SAAS;AAAA,EACnF;AACA,QAAM,8BACJ,YAAY,kBAAkB,OAAO;AACvC,MACE,EACE,4BACA,2BACA,0BACA,+BACA,iBAAiB,WAAW,OAAO,kBAAkB,MAAM,IAE7D;AAEA,WAAO;AAAA,EACT;AACA,QAAM,oBAAoB,MAAM,QAAQ,0BAA0B;AAClE,SAAO,oBAAoB,OAAO,mBAAmB;AACvD;AAQA,eAAsB,2BACpB,YACA,QACkB;AAClB,QAAM,UAAU,MAAM,WAAW,OAAO,gBAAgB;AACxD,SAAO,QAAQ,QAAQ,OAAO;AAChC;AAOO,SAAS,iCACd,mBACA,UACU;AACV,MAAI,CAAC,YAAY,kBAAkB,SAAS,QAAQ,EAAG,QAAO;AAC9D,SAAO,CAAC,GAAG,mBAAmB,QAAQ;AACxC;AAYA,eAAsB,sBAA+B,SAe9B;AACrB,QAAM,EAAE,OAAO,YAAY,YAAY,WAAW,oBAAoB,WAAW,IAAI;AACrF,MAAI,WAAW,WAAW,GAAG;AAC3B,QAAI,KAAK,mDAAmD;AAAA,MAC1D,WAAW,aAAa;AAAA,MACxB,oBAAoB,sBAAsB;AAAA,MAC1C,YAAY,cAAc;AAAA,IAC5B,CAAC;AACD,WAAO,CAAC;AAAA,EACV;AACA,MAAI,MAAM,wBAAwB;AAAA,IAChC,WAAW,aAAa;AAAA,IACxB;AAAA,IACA,YAAY,cAAc;AAAA,EAC5B,CAAC;AACD,QAAM,eAAoC,CAAC;AAC3C,QAAM,UAAU,MAAM,QAAQ,OAAO;AAAA,IACnC;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM,QAAQ,QAAQ;AAAA,IACtB,WAAW;AAAA,MACT,eAAe,CAAC,gBAAgB,aAAa,KAAK,WAAW;AAAA,IAC/D;AAAA,EACF,CAAC;AACD,MAAI,aAAa,SAAS,GAAG;AAC3B,QAAI,KAAK,qCAAqC;AAAA,MAC5C,WAAW,aAAa;AAAA,MACxB;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO;AACT;AAoBO,IAAM,sBAAsB,CAAC,UAAU,UAAU,QAAQ,QAAQ;AAsBjE,SAAS,wBAAwB,YAA2B;AACjE,MAAI,eAAe,OAAW;AAC9B,MAAI,OAAO,eAAe,YAAY,CAAC,OAAO,UAAU,UAAU,KAAK,aAAa,GAAG;AACrF,UAAM,IAAI;AAAA,MACR,kDAAkD,KAAK,UAAU,UAAU,CAAC;AAAA,IAC9E;AAAA,EACF;AACF;AAEO,SAAS,uBAAuB,MAAqB;AAC1D,MAAI,SAAS,OAAW;AACxB,MAAI,OAAO,SAAS,YAAY,CAAE,oBAA0C,SAAS,IAAI,GAAG;AAC1F,UAAM,IAAI;AAAA,MACR,uBAAuB,oBAAoB,KAAK,IAAI,CAAC,SAAS,KAAK,UAAU,IAAI,CAAC;AAAA,IACpF;AAAA,EACF;AACF;AAEO,SAAS,wBACd,MACA,YACM;AACN,yBAAuB,IAAI;AAC3B,MAAI,QAAQ,YAAY;AACtB,UAAM,IAAI;AAAA,MACR,oFAAoF,UAAU;AAAA,IAChG;AAAA,EACF;AACF;AAEA,eAAsB,0BAAmC,SAYlC;AACrB,QAAM,EAAE,OAAO,YAAY,YAAY,KAAK,IAAI;AAChD,0BAAwB,QAAQ,MAAM,QAAQ,UAAU;AACxD,MAAI,MAAM;AAGR,WAAO,QAAQ,uBAAuB,EAAE,OAAO,YAAY,KAAK,CAAC;AAAA,EACnE;AACA,SAAO,eAAe,WAClB,QAAQ,aAAa,OAAO,UAAU,IACtC,QAAQ,OAAO,OAAO,YAAY,UAAU;AAClD;AAcA,IAAM,8BAA8B;AAcpC,eAAsB,2BAA6D,SAW5D;AACrB,QAAM,EAAE,OAAO,IAAI;AACnB,MAAI,UAAU,EAAG,QAAO,CAAC;AACzB,MAAI,UAAqB,CAAC;AAC1B,MAAI,QAA4B,QAAQ,mBAAmB,SAAS;AAKpE,MAAI,SAAS;AACb,MAAI,YAAY;AAChB,aAAS;AACP,UAAM,MAAM,MAAM,QAAQ,OAAO,KAAK;AACtC,UAAM,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,WAAW,IAAI,IAAI,CAAC;AAClE,cAAU,MAAM,QAAQ,cAAc,QAAQ;AAC9C,QAAI,WAAW;AACb,kBAAY;AACZ,UAAI,CAAC,QAAQ,iBAAkB,UAAS,KAAK,IAAI,QAAQ,IAAI,MAAM;AACnE,UAAI,UAAU,EAAG,QAAO,CAAC;AAAA,IAC3B;AACA,QAAI,QAAQ,UAAU,OAAQ;AAG9B,UAAM,SAAS,SAAS,IAAI;AAG5B,QAAI,IAAI,WAAW,KAAK,IAAI,SAAS,OAAQ;AAM7C,UAAM,MAAM,KAAK,IAAI,6BAA6B,SAAS,CAAC;AAC5D,QAAI,UAAU,IAAK;AACnB,YAAQ,KAAK,IAAI,SAAS,GAAG,GAAG;AAAA,EAClC;AACA,SAAO,QAAQ,MAAM,GAAG,MAAM;AAChC;AAOA,eAAsB,sBAAsB,SAwByB;AACnE,QAAM,QAAQ,eAAe;AAC7B,QAAM,UAAU,MAAM,2BAA2B;AAAA,IAC/C,QAAQ,QAAQ;AAAA,IAChB,kBAAkB,QAAQ;AAAA,IAC1B,YAAY,QAAQ;AAAA,IACpB,eAAe,QAAQ;AAAA,IACvB,QAAQ,CAAC,UACP,QAAQ,oBAAoB,QAAQ,WAAW,KAAK,IAAI,QAAQ,WAAW,KAAK;AAAA,EACpF,CAAC;AACD,SAAO,QAAQ,IAAI,CAAC,SAAS;AAAA,IAC3B,MAAM,IAAI;AAAA,IACV,OAAO,IAAI;AAAA,IACX,UAAU,IAAI,WAAW,IAAI,MAAM,GAAG,GAAG;AAAA,EAC3C,EAAE;AACJ;AAwCA,eAAsB,yBACpB,MACA,SAYC;AACD,QAAM,EAAE,OAAO,WAAW,YAAY,MAAM,UAAU,IAAI;AAI1D,yBAAuB,IAAI;AAC3B,0BAAwB,UAAU;AAClC,QAAM,aAAa,QAAQ,YAAY,KAAK;AAC5C,MAAI,QAAQ,eAAe,UAAa,CAAC,YAAY;AACnD,UAAM,IAAI,uBAAuB,uCAAuC;AAAA,EAC1E;AACA,MAAI,mBAA6B,CAAC;AAClC,QAAM,yBAAyB,oBAAI,IAAqB;AACxD,QAAM,UAAU,MAAM,sBAAsB;AAAA,IAC1C;AAAA,IAAO;AAAA,IAAY;AAAA,IACnB,mBAAmB,KAAK;AAAA,IACxB,YAAY,KAAK;AAAA,IACjB,eAAe,CAACA,aAAY,KAAK;AAAA,MAC/BA;AAAA,MACA;AAAA,MACA,CAAC,KAAK,qBACJ,eAAe,UACf,eAAe,YACf,CAAC,KAAK,kBAAkB,SAAS,UAAU;AAAA,MAC7C;AAAA,IACF;AAAA,IACA,QAAQ,cAAc,KAAK;AAAA,IAC3B,kBAAkB,eAAe;AAAA,IACjC,gBAAgB,YAAY;AAC1B,UAAI,CAAC,KAAK,mBAAmB;AAG3B,gCAAwB,MAAM,UAAU;AACxC,eAAO,KAAK,oBAAoB,WAAW,SAAS;AAAA,MACtD;AACA,yBAAmB,MAAM,KAAK,oBAAoB,WAAW,WAAW,UAAU;AAAA,IACpF;AAAA,IACA,YAAY,CAAC,UACX,0BAA0B;AAAA,MACxB;AAAA,MAAO,YAAY;AAAA,MAAO;AAAA,MAAY;AAAA,MACtC,wBAAwB,CAAC,MAAM,KAAK,uBAAuB,CAAC;AAAA,MAC5D,cAAc,CAAC,GAAG,gBAAgB,KAAK,aAAa,GAAG,WAAW;AAAA,MAClE,QAAQ,CAAC,GAAG,MAAM,gBAAgB,KAAK,OAAO,GAAG,MAAM,WAAW;AAAA,IACpE,CAAC;AAAA,IACH,YAAY,CAAC,UACX,sBAAsB;AAAA,MACpB;AAAA,MAAO,YAAY;AAAA,MAAO;AAAA,MAAW;AAAA,MAAY;AAAA,MACjD,oBAAoB;AAAA,MACpB,YAAY;AAAA,MACZ,QAAQ,CAAC,MAAM,KAAK,uBAAuB,CAAC;AAAA,IAC9C,CAAC;AAAA,EACL,CAAC;AACD,SAAO,EAAE,OAAO,SAAS,OAAO,QAAQ,OAAO;AACjD;","names":["results"]}

package/dist/{chunk-HOIRB77A.js → chunk-L6Z5OAS4.js}

@@ -1,6 +1,6 @@
 import {
   getVerdictKind
-} from "./chunk-K2TDK7GG.js";
+} from "./chunk-TWTUGCTY.js";
 import {
   scoreImportance
 } from "./chunk-JXS5PDQ7.js";
@@ -1320,4 +1320,4 @@ export {
   syncWearableSource,
   defaultTimezone
 };
-//# sourceMappingURL=chunk-HOIRB77A.js.map
+//# sourceMappingURL=chunk-L6Z5OAS4.js.map

package/dist/chunk-LC2BDILZ.js

@@ -0,0 +1,57 @@
+import {
+  MAGIC_HEADER_SIZE,
+  isEncryptedFile
+} from "./chunk-XQ3HXAQH.js";
+
+// src/offline-sync-file-io.ts
+import { createHash } from "crypto";
+import { createReadStream } from "fs";
+import { open } from "fs/promises";
+function throwIfAborted(signal) {
+  if (signal?.aborted) throw new Error("offline sync request aborted");
+}
+async function shouldExcludeOfflineSyncFile(excludeFile, target) {
+  return excludeFile ? await excludeFile(target) : false;
+}
+async function sha256OfflineSyncFile(filePath, signal) {
+  const hash = createHash("sha256");
+  let bytes = 0;
+  for await (const chunk of createReadStream(filePath)) {
+    throwIfAborted(signal);
+    const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+    hash.update(buffer);
+    bytes += buffer.length;
+  }
+  throwIfAborted(signal);
+  return { sha256: hash.digest("hex"), bytes };
+}
+async function isEncryptedOfflineSyncFile(filePath) {
+  const handle = await open(filePath, "r");
+  try {
+    const header = Buffer.alloc(MAGIC_HEADER_SIZE);
+    const { bytesRead } = await handle.read(header, 0, header.length, 0);
+    return bytesRead >= MAGIC_HEADER_SIZE && isEncryptedFile(header);
+  } finally {
+    await handle.close();
+  }
+}
+async function readPlainOfflineSyncFileChunk(options) {
+  const chunkBytes = Math.min(options.length, options.bytes - options.offset);
+  const chunk = Buffer.alloc(chunkBytes);
+  if (chunkBytes === 0) return chunk;
+  const handle = await open(options.filePath, "r");
+  try {
+    const { bytesRead } = await handle.read(chunk, 0, chunk.length, options.offset);
+    return bytesRead === chunk.length ? chunk : chunk.subarray(0, bytesRead);
+  } finally {
+    await handle.close();
+  }
+}
+
+export {
+  shouldExcludeOfflineSyncFile,
+  sha256OfflineSyncFile,
+  isEncryptedOfflineSyncFile,
+  readPlainOfflineSyncFileChunk
+};
+//# sourceMappingURL=chunk-LC2BDILZ.js.map

package/dist/chunk-LC2BDILZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/offline-sync-file-io.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { createReadStream } from \"node:fs\";\nimport { open } from \"node:fs/promises\";\nimport { MAGIC_HEADER_SIZE, isEncryptedFile } from \"./secure-store/secure-fs.js\";\n\nexport interface OfflineSyncFileTarget {\n  root: string;\n  path: string;\n  filePath: string;\n}\n\nexport type OfflineSyncExcludeFile = (target: OfflineSyncFileTarget) => boolean | Promise<boolean>;\n\nfunction throwIfAborted(signal: AbortSignal | undefined): void {\n  if (signal?.aborted) throw new Error(\"offline sync request aborted\");\n}\n\nexport async function shouldExcludeOfflineSyncFile(\n  excludeFile: OfflineSyncExcludeFile | undefined,\n  target: OfflineSyncFileTarget\n): Promise<boolean> {\n  return excludeFile ? await excludeFile(target) : false;\n}\n\nexport async function sha256OfflineSyncFile(\n  filePath: string,\n  signal?: AbortSignal\n): Promise<{ sha256: string; bytes: number }> {\n  const hash = createHash(\"sha256\");\n  let bytes = 0;\n  for await (const chunk of createReadStream(filePath)) {\n    throwIfAborted(signal);\n    const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);\n    hash.update(buffer);\n    bytes += buffer.length;\n  }\n  throwIfAborted(signal);\n  return { sha256: hash.digest(\"hex\"), bytes };\n}\n\nexport async function isEncryptedOfflineSyncFile(filePath: string): Promise<boolean> {\n  const handle = await open(filePath, \"r\");\n  try {\n    const header = Buffer.alloc(MAGIC_HEADER_SIZE);\n    const { bytesRead } = await handle.read(header, 0, header.length, 0);\n    return bytesRead >= MAGIC_HEADER_SIZE && isEncryptedFile(header);\n  } finally {\n    await handle.close();\n  }\n}\n\nexport async function readPlainOfflineSyncFileChunk(options: {\n  filePath: string;\n  offset: number;\n  length: number;\n  bytes: number;\n}): Promise<Buffer> {\n  const chunkBytes = Math.min(options.length, options.bytes - options.offset);\n  const chunk = Buffer.alloc(chunkBytes);\n  if (chunkBytes === 0) return chunk;\n  const handle = await open(options.filePath, \"r\");\n  try {\n    const { bytesRead } = await handle.read(chunk, 0, chunk.length, options.offset);\n    return bytesRead === chunk.length ? chunk : chunk.subarray(0, bytesRead);\n  } finally {\n    await handle.close();\n  }\n}\n"],"mappings":";;;;;;AAAA,SAAS,kBAAkB;AAC3B,SAAS,wBAAwB;AACjC,SAAS,YAAY;AAWrB,SAAS,eAAe,QAAuC;AAC7D,MAAI,QAAQ,QAAS,OAAM,IAAI,MAAM,8BAA8B;AACrE;AAEA,eAAsB,6BACpB,aACA,QACkB;AAClB,SAAO,cAAc,MAAM,YAAY,MAAM,IAAI;AACnD;AAEA,eAAsB,sBACpB,UACA,QAC4C;AAC5C,QAAM,OAAO,WAAW,QAAQ;AAChC,MAAI,QAAQ;AACZ,mBAAiB,SAAS,iBAAiB,QAAQ,GAAG;AACpD,mBAAe,MAAM;AACrB,UAAM,SAAS,OAAO,SAAS,KAAK,IAAI,QAAQ,OAAO,KAAK,KAAK;AACjE,SAAK,OAAO,MAAM;AAClB,aAAS,OAAO;AAAA,EAClB;AACA,iBAAe,MAAM;AACrB,SAAO,EAAE,QAAQ,KAAK,OAAO,KAAK,GAAG,MAAM;AAC7C;AAEA,eAAsB,2BAA2B,UAAoC;AACnF,QAAM,SAAS,MAAM,KAAK,UAAU,GAAG;AACvC,MAAI;AACF,UAAM,SAAS,OAAO,MAAM,iBAAiB;AAC7C,UAAM,EAAE,UAAU,IAAI,MAAM,OAAO,KAAK,QAAQ,GAAG,OAAO,QAAQ,CAAC;AACnE,WAAO,aAAa,qBAAqB,gBAAgB,MAAM;AAAA,EACjE,UAAE;AACA,UAAM,OAAO,MAAM;AAAA,EACrB;AACF;AAEA,eAAsB,8BAA8B,SAKhC;AAClB,QAAM,aAAa,KAAK,IAAI,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,MAAM;AAC1E,QAAM,QAAQ,OAAO,MAAM,UAAU;AACrC,MAAI,eAAe,EAAG,QAAO;AAC7B,QAAM,SAAS,MAAM,KAAK,QAAQ,UAAU,GAAG;AAC/C,MAAI;AACF,UAAM,EAAE,UAAU,IAAI,MAAM,OAAO,KAAK,OAAO,GAAG,MAAM,QAAQ,QAAQ,MAAM;AAC9E,WAAO,cAAc,MAAM,SAAS,QAAQ,MAAM,SAAS,GAAG,SAAS;AAAA,EACzE,UAAE;AACA,UAAM,OAAO,MAAM;AAAA,EACrB;AACF;","names":[]}

package/dist/{chunk-227UFSEQ.js → chunk-LEPOP46W.js}

@@ -1,6 +1,3 @@
-import {
-  failOpenFaissHealth
-} from "./chunk-ET356KSB.js";
 import {
   rebuildConversationChunksFailOpen,
   upsertConversationChunksFailOpen
@@ -9,6 +6,9 @@ import {
   searchConversationIndex,
   searchConversationIndexFaissFailOpen
 } from "./chunk-A7Q43EUZ.js";
+import {
+  failOpenFaissHealth
+} from "./chunk-ET356KSB.js";
 
 // src/conversation-index/backend.ts
 function createConversationIndexBackend(options) {
@@ -235,4 +235,4 @@ function createFaissBackend(getFaiss) {
 export {
   createConversationIndexBackend
 };
-//# sourceMappingURL=chunk-227UFSEQ.js.map
+//# sourceMappingURL=chunk-LEPOP46W.js.map