@remnic/core 9.54.4 → 9.54.6

package/dist/chunk-XX4HPFFM.js

@@ -0,0 +1,370 @@
+import {
+  normalizeNamespaceIdentity
+} from "./chunk-EGGE52UU.js";
+import {
+  stripAttributesSuffix
+} from "./chunk-JDSVLVCG.js";
+import {
+  parseIsoOffsetTimestamp
+} from "./chunk-P7FMDTKL.js";
+
+// src/support-passport/contracts.ts
+import { createHash } from "crypto";
+import { z } from "zod";
+var SUPPORT_PASSPORT_CARD_CATEGORIES = [
+  "communication",
+  "environment",
+  "transitions",
+  "sensory",
+  "regulation",
+  "interests",
+  "other"
+];
+var SUPPORT_PASSPORT_CARD_STATUSES = [
+  "pending_review",
+  "active",
+  "rejected",
+  "superseded",
+  "archived"
+];
+var SupportPassportCardCategorySchema = z.enum(SUPPORT_PASSPORT_CARD_CATEGORIES);
+var SupportPassportCardStatusSchema = z.enum(SUPPORT_PASSPORT_CARD_STATUSES);
+var SupportPassportCardTitleSchema = z.string().trim().min(1).max(80).refine((title) => !title.includes("]") && !title.includes("\n") && !title.includes("\r"), {
+  message: "card titles cannot contain closing brackets or line breaks"
+});
+var IsoTimestampSchema = z.string().datetime({ offset: true }).refine((value) => parseIsoOffsetTimestamp(value) !== null, {
+  message: "timestamps must be valid ISO 8601 values"
+});
+var SupportPassportNamespaceSchema = z.string().min(1).refine((namespace) => namespace === normalizeNamespaceIdentity(namespace), {
+  message: "namespaces must be canonical"
+});
+var SupportPassportMemoryIdSchema = z.string().trim().min(1).max(128).regex(/^[A-Za-z0-9._:-]+$/);
+var SUPPORT_PASSPORT_SOURCE_MEMORY_ID_MAX_LENGTH = 512;
+var SupportPassportSourceMemoryIdSchema = z.string().trim().min(1).max(SUPPORT_PASSPORT_SOURCE_MEMORY_ID_MAX_LENGTH);
+var SupportPassportCardSchema = z.object({
+  cardId: SupportPassportMemoryIdSchema,
+  title: SupportPassportCardTitleSchema,
+  statement: z.string().trim().min(1).max(500),
+  category: SupportPassportCardCategorySchema,
+  status: SupportPassportCardStatusSchema,
+  updatedAt: IsoTimestampSchema,
+  reviewBy: IsoTimestampSchema,
+  revision: z.string().regex(/^[a-f0-9]{64}$/)
+}).strict();
+var SupportPassportCardListSchema = z.array(SupportPassportCardSchema).max(100).superRefine((cards, ctx) => {
+  const seen = /* @__PURE__ */ new Set();
+  for (const [index, card] of cards.entries()) {
+    if (seen.has(card.cardId)) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        message: "card IDs must be unique",
+        path: [index, "cardId"]
+      });
+    }
+    seen.add(card.cardId);
+  }
+});
+var SupportPassportListCardsInputSchema = z.object({
+  principal: z.string().trim().min(1).max(512)
+}).strict();
+var SupportPassportManualDraftInputSchema = z.object({
+  principal: z.string().trim().min(1).max(512),
+  title: SupportPassportCardTitleSchema,
+  statement: z.string().trim().min(1).max(500),
+  category: SupportPassportCardCategorySchema,
+  reviewBy: IsoTimestampSchema
+}).strict();
+var SupportPassportCardMutationInputSchema = z.object({
+  principal: z.string().trim().min(1).max(512),
+  cardId: SupportPassportMemoryIdSchema,
+  expectedRevision: z.string().regex(/^[a-f0-9]{64}$/),
+  reasonCode: z.string().trim().min(1).max(64).regex(/^[a-z0-9-]+$/).optional()
+}).strict();
+var SupportPassportReplaceCardInputSchema = SupportPassportCardMutationInputSchema.extend({
+  title: SupportPassportCardTitleSchema,
+  statement: z.string().trim().min(1).max(500),
+  category: SupportPassportCardCategorySchema,
+  reviewBy: IsoTimestampSchema
+}).strict();
+function computeSupportPassportCardRevision(fields) {
+  const canonicalFields = {
+    cardId: fields.cardId,
+    category: fields.category,
+    reviewBy: fields.reviewBy,
+    statement: fields.statement,
+    status: fields.status,
+    title: fields.title,
+    updatedAt: fields.updatedAt
+  };
+  return createHash("sha256").update(JSON.stringify(canonicalFields)).digest("hex");
+}
+
+// src/support-passport/card-projection.ts
+import { createHash as createHash2 } from "crypto";
+import { lstat } from "fs/promises";
+var SUPPORT_PASSPORT_CARD_TAG = "support-passport-card";
+var SUPPORT_PASSPORT_AUDIT_TAG = "support-passport-audit";
+function isSupportPassportPrivateMemory(memory) {
+  const tags = memory.frontmatter.tags;
+  if (tags?.includes(SUPPORT_PASSPORT_CARD_TAG) === true || tags?.includes(SUPPORT_PASSPORT_AUDIT_TAG) === true) {
+    return true;
+  }
+  return Object.keys(memory.frontmatter.structuredAttributes ?? {}).some((key) => key.startsWith("support-passport-"));
+}
+function excludeSupportPassportPrivateMemories(memories) {
+  return memories.filter((memory) => !isSupportPassportPrivateMemory(memory));
+}
+function createSupportPassportPrivateFileExclusion(storage) {
+  const classifications = /* @__PURE__ */ new Map();
+  return async ({ filePath }) => {
+    let file;
+    try {
+      file = await lstat(filePath);
+    } catch (error) {
+      if (error.code === "ENOENT") {
+        classifications.delete(filePath);
+        return false;
+      }
+      throw error;
+    }
+    const identity = `${file.dev}:${file.ino}:${file.size}:${file.mtimeMs}:${file.ctimeMs}`;
+    const cached = classifications.get(filePath);
+    if (cached?.identity === identity) return await cached.excluded;
+    const excluded = storage.readMemoryByPath(filePath).then((memory) => memory ? isSupportPassportPrivateMemory(memory) : false);
+    classifications.set(filePath, { identity, excluded });
+    try {
+      return await excluded;
+    } catch (error) {
+      if (classifications.get(filePath)?.excluded === excluded) classifications.delete(filePath);
+      throw error;
+    }
+  };
+}
+var SUPPORT_PASSPORT_ATTRIBUTE_KEYS = Object.freeze({
+  namespace: "support-passport-namespace",
+  namespaceEncoding: "support-passport-namespace-encoding",
+  owner: "support-passport-owner",
+  title: "support-passport-title",
+  category: "support-passport-category",
+  order: "support-passport-order",
+  reviewBy: "support-passport-review-by",
+  sourceMemoryIds: "support-passport-source-ids",
+  replacesDraftId: "support-passport-replaces-draft-id",
+  replacedRevision: "support-passport-replaced-revision",
+  draftReplacementPrepared: "support-passport-draft-replacement-prepared",
+  replacementComplete: "support-passport-replacement-complete",
+  generatedBatchId: "support-passport-generated-batch-id",
+  generatedBatchSize: "support-passport-generated-batch-size"
+});
+var SUPPORT_PASSPORT_NAMESPACE_ENCODING = "base64url-v1";
+var SUPPORT_PASSPORT_NAMESPACE_CHUNK_PREFIX = "support-passport-namespace-";
+var SUPPORT_PASSPORT_NAMESPACE_CHUNK_SIZE = 1024;
+var LegacySupportPassportNamespaceSchema = SupportPassportNamespaceSchema.refine(
+  (namespace) => !namespace.includes("/") && !namespace.includes("\\") && !namespace.includes("..") && !namespace.includes("]") && !namespace.includes("\0") && !namespace.includes("\n") && !namespace.includes("\r")
+);
+function encodeSupportPassportNamespaceAttributes(namespace) {
+  const canonical = SupportPassportNamespaceSchema.parse(namespace);
+  const encoded = Buffer.from(canonical, "utf8").toString("base64url");
+  const chunks = encoded.match(new RegExp(`.{1,${SUPPORT_PASSPORT_NAMESPACE_CHUNK_SIZE}}`, "g")) ?? [];
+  const digest = createHash2("sha256").update(encoded).digest("hex");
+  return Object.fromEntries([
+    [SUPPORT_PASSPORT_ATTRIBUTE_KEYS.namespace, chunks[0] ?? ""],
+    [
+      SUPPORT_PASSPORT_ATTRIBUTE_KEYS.namespaceEncoding,
+      `${SUPPORT_PASSPORT_NAMESPACE_ENCODING}:${chunks.length}:${digest}`
+    ],
+    ...chunks.slice(1).map((chunk, index) => [`${SUPPORT_PASSPORT_NAMESPACE_CHUNK_PREFIX}${index + 1}`, chunk])
+  ]);
+}
+function decodeSupportPassportNamespaceAttributes(attributes) {
+  const firstChunk = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.namespace];
+  const encoding = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.namespaceEncoding];
+  if (encoding === void 0) {
+    const legacy = LegacySupportPassportNamespaceSchema.safeParse(firstChunk);
+    return legacy.success ? legacy.data : null;
+  }
+  const match = /^base64url-v1:([1-9]\d*):([a-f0-9]{64})$/.exec(encoding);
+  if (!match || typeof firstChunk !== "string") return null;
+  const chunkCount = Number(match[1]);
+  if (!Number.isSafeInteger(chunkCount)) return null;
+  const chunkIndexes = Object.keys(attributes).flatMap((key) => {
+    const chunkMatch = /^support-passport-namespace-(\d+)$/.exec(key);
+    return chunkMatch ? [Number(chunkMatch[1])] : [];
+  });
+  if (chunkIndexes.length !== chunkCount - 1 || chunkIndexes.some((index) => !Number.isSafeInteger(index) || index < 1 || index >= chunkCount))
+    return null;
+  const chunks = [firstChunk];
+  for (let index = 1; index < chunkCount; index += 1) {
+    const chunk = attributes[`${SUPPORT_PASSPORT_NAMESPACE_CHUNK_PREFIX}${index}`];
+    if (typeof chunk !== "string" || chunk.length === 0) return null;
+    chunks.push(chunk);
+  }
+  const encoded = chunks.join("");
+  if (createHash2("sha256").update(encoded).digest("hex") !== match[2]) return null;
+  const decoded = Buffer.from(encoded, "base64url").toString("utf8");
+  if (Buffer.from(decoded, "utf8").toString("base64url") !== encoded) return null;
+  const namespace = SupportPassportNamespaceSchema.safeParse(decoded);
+  return namespace.success ? namespace.data : null;
+}
+function computeSupportPassportOwnerKey(principal) {
+  return createHash2("sha256").update(principal).digest("hex");
+}
+function activeSupportPassportReplacementPredecessorIds(cards) {
+  return new Set(
+    cards.filter((item) => item.card.status === "active").map((item) => item.memory.frontmatter.supersedes).filter((cardId) => typeof cardId === "string")
+  );
+}
+function parseSourceMemoryIds(frontmatter) {
+  const lineage = frontmatter.lineage;
+  const legacyValue = frontmatter.structuredAttributes?.[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.sourceMemoryIds];
+  const rawIds = lineage ?? (legacyValue === void 0 || legacyValue === "" ? [] : legacyValue.split(","));
+  if (rawIds.length > 5) return null;
+  const normalized = [];
+  for (const rawId of rawIds) {
+    const parsed = SupportPassportSourceMemoryIdSchema.safeParse(rawId);
+    if (!parsed.success) return null;
+    normalized.push(parsed.data);
+  }
+  if (new Set(normalized).size !== normalized.length) return null;
+  return normalized;
+}
+function parseSupportPassportCardMetadata(memory) {
+  const frontmatter = memory.frontmatter;
+  const attributes = frontmatter.structuredAttributes;
+  if (frontmatter.category !== "preference") return null;
+  if (!frontmatter.tags?.includes(SUPPORT_PASSPORT_CARD_TAG)) return null;
+  if (!attributes || frontmatter.blockedBy || frontmatter.archivedAt || frontmatter.supersededBy)
+    return null;
+  const category = SupportPassportCardCategorySchema.safeParse(
+    attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.category]
+  );
+  const status = SupportPassportCardStatusSchema.safeParse(frontmatter.status);
+  const rawOrder = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.order];
+  const order = Number(rawOrder);
+  const sourceMemoryIds = parseSourceMemoryIds(frontmatter);
+  const namespace = decodeSupportPassportNamespaceAttributes(attributes);
+  const owner = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.owner];
+  let replacesDraftId;
+  const rawReplacesDraftId = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.replacesDraftId];
+  if (rawReplacesDraftId !== void 0) {
+    const parsedReplacesDraftId = SupportPassportMemoryIdSchema.safeParse(rawReplacesDraftId);
+    if (!parsedReplacesDraftId.success) return null;
+    replacesDraftId = parsedReplacesDraftId.data;
+  }
+  let replacedRevision;
+  const rawReplacedRevision = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.replacedRevision];
+  if (rawReplacedRevision !== void 0) {
+    if (!/^[a-f0-9]{64}$/.test(rawReplacedRevision)) return null;
+    replacedRevision = rawReplacedRevision;
+  }
+  const generatedBatchId = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.generatedBatchId];
+  const rawGeneratedBatchSize = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.generatedBatchSize];
+  let generatedBatchSize;
+  if (generatedBatchId !== void 0) {
+    if (!/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(generatedBatchId)) {
+      return null;
+    }
+    if (typeof rawGeneratedBatchSize !== "string" || !/^[1-8]$/.test(rawGeneratedBatchSize)) {
+      return null;
+    }
+    generatedBatchSize = Number(rawGeneratedBatchSize);
+  } else if (rawGeneratedBatchSize !== void 0) {
+    return null;
+  }
+  if (!category.success || !status.success || status.data === "superseded" || typeof rawOrder !== "string" || !/^(?:0|[1-9]\d*)$/.test(rawOrder) || !Number.isSafeInteger(order) || namespace === null || typeof owner !== "string" || !/^[a-f0-9]{64}$/.test(owner) || !sourceMemoryIds)
+    return null;
+  const fields = SupportPassportCardSchema.omit({
+    revision: true,
+    statement: true
+  }).safeParse({
+    cardId: frontmatter.id,
+    title: attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.title],
+    category: category.data,
+    status: status.data,
+    updatedAt: frontmatter.updated,
+    reviewBy: attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.reviewBy]
+  });
+  if (!fields.success) return null;
+  return {
+    fields: fields.data,
+    order,
+    sourceMemoryIds,
+    namespace,
+    owner,
+    replacesDraftId,
+    replacedRevision,
+    draftReplacementPrepared: attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.draftReplacementPrepared] === "true",
+    generatedBatchId,
+    generatedBatchSize
+  };
+}
+function hasLiveSupportPassportCard(memory) {
+  const metadata = parseSupportPassportCardMetadata(memory);
+  if (metadata?.fields.status !== "active" && metadata?.fields.status !== "pending_review") return false;
+  return SupportPassportCardSchema.omit({ revision: true }).safeParse({
+    ...metadata.fields,
+    statement: stripAttributesSuffix(memory.content)
+  }).success;
+}
+function projectSupportPassportCard(memory) {
+  const metadata = parseSupportPassportCardMetadata(memory);
+  if (!metadata) return null;
+  const fields = {
+    ...metadata.fields,
+    statement: stripAttributesSuffix(memory.content)
+  };
+  const normalized = SupportPassportCardSchema.omit({
+    revision: true
+  }).safeParse(fields);
+  if (!normalized.success) return null;
+  const parsed = SupportPassportCardSchema.safeParse({
+    ...normalized.data,
+    revision: computeSupportPassportCardRevision(normalized.data)
+  });
+  if (!parsed.success) return null;
+  return {
+    card: parsed.data,
+    memory,
+    order: metadata.order,
+    sourceMemoryIds: metadata.sourceMemoryIds,
+    namespace: metadata.namespace,
+    owner: metadata.owner,
+    replacesDraftId: metadata.replacesDraftId,
+    replacedRevision: metadata.replacedRevision,
+    draftReplacementPrepared: metadata.draftReplacementPrepared,
+    generatedBatchId: metadata.generatedBatchId,
+    generatedBatchSize: metadata.generatedBatchSize
+  };
+}
+
+export {
+  SUPPORT_PASSPORT_CARD_CATEGORIES,
+  SUPPORT_PASSPORT_CARD_STATUSES,
+  SupportPassportCardCategorySchema,
+  SupportPassportCardStatusSchema,
+  SupportPassportCardTitleSchema,
+  SupportPassportNamespaceSchema,
+  SupportPassportMemoryIdSchema,
+  SUPPORT_PASSPORT_SOURCE_MEMORY_ID_MAX_LENGTH,
+  SupportPassportSourceMemoryIdSchema,
+  SupportPassportCardSchema,
+  SupportPassportCardListSchema,
+  SupportPassportListCardsInputSchema,
+  SupportPassportManualDraftInputSchema,
+  SupportPassportCardMutationInputSchema,
+  SupportPassportReplaceCardInputSchema,
+  computeSupportPassportCardRevision,
+  SUPPORT_PASSPORT_CARD_TAG,
+  SUPPORT_PASSPORT_AUDIT_TAG,
+  isSupportPassportPrivateMemory,
+  excludeSupportPassportPrivateMemories,
+  createSupportPassportPrivateFileExclusion,
+  SUPPORT_PASSPORT_ATTRIBUTE_KEYS,
+  encodeSupportPassportNamespaceAttributes,
+  decodeSupportPassportNamespaceAttributes,
+  computeSupportPassportOwnerKey,
+  activeSupportPassportReplacementPredecessorIds,
+  hasLiveSupportPassportCard,
+  projectSupportPassportCard
+};
+//# sourceMappingURL=chunk-XX4HPFFM.js.map

package/dist/chunk-XX4HPFFM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/support-passport/contracts.ts","../src/support-passport/card-projection.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { z } from \"zod\";\n\nimport { normalizeNamespaceIdentity } from \"../namespaces/identity.js\";\nimport { parseIsoOffsetTimestamp } from \"../utils/iso-timestamp.js\";\n\nexport const SUPPORT_PASSPORT_CARD_CATEGORIES = [\n  \"communication\",\n  \"environment\",\n  \"transitions\",\n  \"sensory\",\n  \"regulation\",\n  \"interests\",\n  \"other\",\n] as const;\n\nexport const SUPPORT_PASSPORT_CARD_STATUSES = [\n  \"pending_review\",\n  \"active\",\n  \"rejected\",\n  \"superseded\",\n  \"archived\",\n] as const;\n\nexport const SupportPassportCardCategorySchema = z.enum(SUPPORT_PASSPORT_CARD_CATEGORIES);\nexport const SupportPassportCardStatusSchema = z.enum(SUPPORT_PASSPORT_CARD_STATUSES);\nexport const SupportPassportCardTitleSchema = z\n  .string()\n  .trim()\n  .min(1)\n  .max(80)\n  .refine((title) => !title.includes(\"]\") && !title.includes(\"\\n\") && !title.includes(\"\\r\"), {\n    message: \"card titles cannot contain closing brackets or line breaks\",\n  });\n\nconst IsoTimestampSchema = z\n  .string()\n  .datetime({ offset: true })\n  .refine((value) => parseIsoOffsetTimestamp(value) !== null, {\n    message: \"timestamps must be valid ISO 8601 values\",\n  });\nexport const SupportPassportNamespaceSchema = z\n  .string()\n  .min(1)\n  .refine((namespace) => namespace === normalizeNamespaceIdentity(namespace), {\n    message: \"namespaces must be canonical\",\n  });\nexport const SupportPassportMemoryIdSchema = z\n  .string()\n  .trim()\n  .min(1)\n  .max(128)\n  .regex(/^[A-Za-z0-9._:-]+$/);\nexport const SUPPORT_PASSPORT_SOURCE_MEMORY_ID_MAX_LENGTH = 512;\nexport const SupportPassportSourceMemoryIdSchema = z\n  .string()\n  .trim()\n  .min(1)\n  .max(SUPPORT_PASSPORT_SOURCE_MEMORY_ID_MAX_LENGTH);\n\nexport const SupportPassportCardSchema = z\n  .object({\n    cardId: SupportPassportMemoryIdSchema,\n    title: SupportPassportCardTitleSchema,\n    statement: z.string().trim().min(1).max(500),\n    category: SupportPassportCardCategorySchema,\n    status: SupportPassportCardStatusSchema,\n    updatedAt: IsoTimestampSchema,\n    reviewBy: IsoTimestampSchema,\n    revision: z.string().regex(/^[a-f0-9]{64}$/),\n  })\n  .strict();\n\nexport const SupportPassportCardListSchema = z\n  .array(SupportPassportCardSchema)\n  .max(100)\n  .superRefine((cards, ctx) => {\n    const seen = new Set<string>();\n    for (const [index, card] of cards.entries()) {\n      if (seen.has(card.cardId)) {\n        ctx.addIssue({\n          code: z.ZodIssueCode.custom,\n          message: \"card IDs must be unique\",\n          path: [index, \"cardId\"],\n        });\n      }\n      seen.add(card.cardId);\n    }\n  });\n\nexport const SupportPassportListCardsInputSchema = z\n  .object({\n    principal: z.string().trim().min(1).max(512),\n  })\n  .strict();\n\nexport const SupportPassportManualDraftInputSchema = z\n  .object({\n    principal: z.string().trim().min(1).max(512),\n    title: SupportPassportCardTitleSchema,\n    statement: z.string().trim().min(1).max(500),\n    category: SupportPassportCardCategorySchema,\n    reviewBy: IsoTimestampSchema,\n  })\n  .strict();\n\nexport const SupportPassportCardMutationInputSchema = z\n  .object({\n    principal: z.string().trim().min(1).max(512),\n    cardId: SupportPassportMemoryIdSchema,\n    expectedRevision: z.string().regex(/^[a-f0-9]{64}$/),\n    reasonCode: z\n      .string()\n      .trim()\n      .min(1)\n      .max(64)\n      .regex(/^[a-z0-9-]+$/)\n      .optional(),\n  })\n  .strict();\n\nexport const SupportPassportReplaceCardInputSchema = SupportPassportCardMutationInputSchema.extend({\n  title: SupportPassportCardTitleSchema,\n  statement: z.string().trim().min(1).max(500),\n  category: SupportPassportCardCategorySchema,\n  reviewBy: IsoTimestampSchema,\n}).strict();\n\nexport type SupportPassportCard = z.infer<typeof SupportPassportCardSchema>;\nexport type SupportPassportCardCategory = z.infer<typeof SupportPassportCardCategorySchema>;\nexport type SupportPassportCardStatus = z.infer<typeof SupportPassportCardStatusSchema>;\nexport type SupportPassportManualDraftInput = z.input<typeof SupportPassportManualDraftInputSchema>;\nexport type SupportPassportCardMutationInput = z.input<typeof SupportPassportCardMutationInputSchema>;\nexport type SupportPassportReplaceCardInput = z.input<typeof SupportPassportReplaceCardInputSchema>;\n\ntype RevisionFields = Omit<SupportPassportCard, \"revision\">;\n\nexport function computeSupportPassportCardRevision(fields: RevisionFields): string {\n  const canonicalFields = {\n    cardId: fields.cardId,\n    category: fields.category,\n    reviewBy: fields.reviewBy,\n    statement: fields.statement,\n    status: fields.status,\n    title: fields.title,\n    updatedAt: fields.updatedAt,\n  };\n  return createHash(\"sha256\").update(JSON.stringify(canonicalFields)).digest(\"hex\");\n}\n","import { createHash } from \"node:crypto\";\nimport { lstat } from \"node:fs/promises\";\n\nimport type { OfflineSyncExcludeFile } from \"../offline-sync-file-io.js\";\nimport { stripAttributesSuffix } from \"../structured-attributes.js\";\nimport type { MemoryFile } from \"../types.js\";\nimport {\n  type SupportPassportCard,\n  SupportPassportCardCategorySchema,\n  SupportPassportCardSchema,\n  SupportPassportCardStatusSchema,\n  SupportPassportMemoryIdSchema,\n  SupportPassportNamespaceSchema,\n  SupportPassportSourceMemoryIdSchema,\n  computeSupportPassportCardRevision,\n} from \"./contracts.js\";\n\nexport const SUPPORT_PASSPORT_CARD_TAG = \"support-passport-card\";\nexport const SUPPORT_PASSPORT_AUDIT_TAG = \"support-passport-audit\";\n\nexport function isSupportPassportPrivateMemory(memory: {\n  frontmatter: {\n    tags?: readonly string[];\n    structuredAttributes?: Readonly<Record<string, string>>;\n  };\n}): boolean {\n  const tags = memory.frontmatter.tags;\n  if (tags?.includes(SUPPORT_PASSPORT_CARD_TAG) === true || tags?.includes(SUPPORT_PASSPORT_AUDIT_TAG) === true) {\n    return true;\n  }\n  return Object.keys(memory.frontmatter.structuredAttributes ?? {})\n    .some((key) => key.startsWith(\"support-passport-\"));\n}\n\nexport function excludeSupportPassportPrivateMemories<T extends Pick<MemoryFile, \"frontmatter\">>(\n  memories: readonly T[]\n): T[] {\n  return memories.filter((memory) => !isSupportPassportPrivateMemory(memory));\n}\n\nexport function createSupportPassportPrivateFileExclusion(storage: {\n  readMemoryByPath(filePath: string): Promise<MemoryFile | null>;\n}): OfflineSyncExcludeFile {\n  const classifications = new Map<string, { identity: string; excluded: Promise<boolean> }>();\n  return async ({ filePath }) => {\n    let file: Awaited<ReturnType<typeof lstat>>;\n    try {\n      file = await lstat(filePath);\n    } catch (error) {\n      if ((error as NodeJS.ErrnoException).code === \"ENOENT\") {\n        classifications.delete(filePath);\n        return false;\n      }\n      throw error;\n    }\n    const identity = `${file.dev}:${file.ino}:${file.size}:${file.mtimeMs}:${file.ctimeMs}`;\n    const cached = classifications.get(filePath);\n    if (cached?.identity === identity) return await cached.excluded;\n    const excluded = storage\n      .readMemoryByPath(filePath)\n      .then((memory) => (memory ? isSupportPassportPrivateMemory(memory) : false));\n    classifications.set(filePath, { identity, excluded });\n    try {\n      return await excluded;\n    } catch (error) {\n      if (classifications.get(filePath)?.excluded === excluded) classifications.delete(filePath);\n      throw error;\n    }\n  };\n}\n\nexport const SUPPORT_PASSPORT_ATTRIBUTE_KEYS = Object.freeze({\n  namespace: \"support-passport-namespace\",\n  namespaceEncoding: \"support-passport-namespace-encoding\",\n  owner: \"support-passport-owner\",\n  title: \"support-passport-title\",\n  category: \"support-passport-category\",\n  order: \"support-passport-order\",\n  reviewBy: \"support-passport-review-by\",\n  sourceMemoryIds: \"support-passport-source-ids\",\n  replacesDraftId: \"support-passport-replaces-draft-id\",\n  replacedRevision: \"support-passport-replaced-revision\",\n  draftReplacementPrepared: \"support-passport-draft-replacement-prepared\",\n  replacementComplete: \"support-passport-replacement-complete\",\n  generatedBatchId: \"support-passport-generated-batch-id\",\n  generatedBatchSize: \"support-passport-generated-batch-size\",\n});\n\nconst SUPPORT_PASSPORT_NAMESPACE_ENCODING = \"base64url-v1\";\nconst SUPPORT_PASSPORT_NAMESPACE_CHUNK_PREFIX = \"support-passport-namespace-\";\nconst SUPPORT_PASSPORT_NAMESPACE_CHUNK_SIZE = 1_024;\nconst LegacySupportPassportNamespaceSchema = SupportPassportNamespaceSchema.refine(\n  (namespace) =>\n    !namespace.includes(\"/\") &&\n    !namespace.includes(\"\\\\\") &&\n    !namespace.includes(\"..\") &&\n    !namespace.includes(\"]\") &&\n    !namespace.includes(\"\\0\") &&\n    !namespace.includes(\"\\n\") &&\n    !namespace.includes(\"\\r\")\n);\n\nexport function encodeSupportPassportNamespaceAttributes(namespace: string): Record<string, string> {\n  const canonical = SupportPassportNamespaceSchema.parse(namespace);\n  const encoded = Buffer.from(canonical, \"utf8\").toString(\"base64url\");\n  const chunks = encoded.match(new RegExp(`.{1,${SUPPORT_PASSPORT_NAMESPACE_CHUNK_SIZE}}`, \"g\")) ?? [];\n  const digest = createHash(\"sha256\").update(encoded).digest(\"hex\");\n  return Object.fromEntries([\n    [SUPPORT_PASSPORT_ATTRIBUTE_KEYS.namespace, chunks[0] ?? \"\"],\n    [\n      SUPPORT_PASSPORT_ATTRIBUTE_KEYS.namespaceEncoding,\n      `${SUPPORT_PASSPORT_NAMESPACE_ENCODING}:${chunks.length}:${digest}`,\n    ],\n    ...chunks.slice(1).map((chunk, index) => [`${SUPPORT_PASSPORT_NAMESPACE_CHUNK_PREFIX}${index + 1}`, chunk]),\n  ]);\n}\n\nexport function decodeSupportPassportNamespaceAttributes(attributes: Readonly<Record<string, string>>): string | null {\n  const firstChunk = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.namespace];\n  const encoding = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.namespaceEncoding];\n  if (encoding === undefined) {\n    const legacy = LegacySupportPassportNamespaceSchema.safeParse(firstChunk);\n    return legacy.success ? legacy.data : null;\n  }\n  const match = /^base64url-v1:([1-9]\\d*):([a-f0-9]{64})$/.exec(encoding);\n  if (!match || typeof firstChunk !== \"string\") return null;\n  const chunkCount = Number(match[1]);\n  if (!Number.isSafeInteger(chunkCount)) return null;\n  const chunkIndexes = Object.keys(attributes).flatMap((key) => {\n    const chunkMatch = /^support-passport-namespace-(\\d+)$/.exec(key);\n    return chunkMatch ? [Number(chunkMatch[1])] : [];\n  });\n  if (\n    chunkIndexes.length !== chunkCount - 1 ||\n    chunkIndexes.some((index) => !Number.isSafeInteger(index) || index < 1 || index >= chunkCount)\n  )\n    return null;\n  const chunks = [firstChunk];\n  for (let index = 1; index < chunkCount; index += 1) {\n    const chunk = attributes[`${SUPPORT_PASSPORT_NAMESPACE_CHUNK_PREFIX}${index}`];\n    if (typeof chunk !== \"string\" || chunk.length === 0) return null;\n    chunks.push(chunk);\n  }\n  const encoded = chunks.join(\"\");\n  if (createHash(\"sha256\").update(encoded).digest(\"hex\") !== match[2]) return null;\n  const decoded = Buffer.from(encoded, \"base64url\").toString(\"utf8\");\n  if (Buffer.from(decoded, \"utf8\").toString(\"base64url\") !== encoded) return null;\n  const namespace = SupportPassportNamespaceSchema.safeParse(decoded);\n  return namespace.success ? namespace.data : null;\n}\n\nexport interface StoredSupportPassportCard {\n  card: SupportPassportCard;\n  memory: MemoryFile;\n  order: number;\n  sourceMemoryIds: string[];\n  namespace: string;\n  owner: string;\n  replacesDraftId?: string;\n  replacedRevision?: string;\n  draftReplacementPrepared: boolean;\n  generatedBatchId?: string;\n  generatedBatchSize?: number;\n}\n\nexport function computeSupportPassportOwnerKey(principal: string): string {\n  return createHash(\"sha256\").update(principal).digest(\"hex\");\n}\n\nexport function activeSupportPassportReplacementPredecessorIds(\n  cards: readonly StoredSupportPassportCard[],\n): Set<string> {\n  return new Set(\n    cards\n      .filter((item) => item.card.status === \"active\")\n      .map((item) => item.memory.frontmatter.supersedes)\n      .filter((cardId): cardId is string => typeof cardId === \"string\"),\n  );\n}\n\nfunction parseSourceMemoryIds(frontmatter: MemoryFile[\"frontmatter\"]): string[] | null {\n  const lineage = frontmatter.lineage;\n  const legacyValue = frontmatter.structuredAttributes?.[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.sourceMemoryIds];\n  const rawIds = lineage ?? (legacyValue === undefined || legacyValue === \"\" ? [] : legacyValue.split(\",\"));\n  if (rawIds.length > 5) return null;\n  const normalized: string[] = [];\n  for (const rawId of rawIds) {\n    const parsed = SupportPassportSourceMemoryIdSchema.safeParse(rawId);\n    if (!parsed.success) return null;\n    normalized.push(parsed.data);\n  }\n  if (new Set(normalized).size !== normalized.length) return null;\n  return normalized;\n}\n\ninterface SupportPassportCardMetadata {\n  fields: Omit<SupportPassportCard, \"revision\" | \"statement\">;\n  order: number;\n  sourceMemoryIds: string[];\n  namespace: string;\n  owner: string;\n  replacesDraftId?: string;\n  replacedRevision?: string;\n  draftReplacementPrepared: boolean;\n  generatedBatchId?: string;\n  generatedBatchSize?: number;\n}\n\nfunction parseSupportPassportCardMetadata(\n  memory: Pick<MemoryFile, \"frontmatter\">,\n): SupportPassportCardMetadata | null {\n  const frontmatter = memory.frontmatter;\n  const attributes = frontmatter.structuredAttributes;\n  if (frontmatter.category !== \"preference\") return null;\n  if (!frontmatter.tags?.includes(SUPPORT_PASSPORT_CARD_TAG)) return null;\n  if (\n    !attributes ||\n    frontmatter.blockedBy ||\n    frontmatter.archivedAt ||\n    frontmatter.supersededBy\n  )\n    return null;\n\n  const category = SupportPassportCardCategorySchema.safeParse(\n    attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.category],\n  );\n  const status = SupportPassportCardStatusSchema.safeParse(frontmatter.status);\n  const rawOrder = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.order];\n  const order = Number(rawOrder);\n  const sourceMemoryIds = parseSourceMemoryIds(frontmatter);\n  const namespace = decodeSupportPassportNamespaceAttributes(attributes);\n  const owner = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.owner];\n  let replacesDraftId: string | undefined;\n  const rawReplacesDraftId =\n    attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.replacesDraftId];\n  if (rawReplacesDraftId !== undefined) {\n    const parsedReplacesDraftId =\n      SupportPassportMemoryIdSchema.safeParse(rawReplacesDraftId);\n    if (!parsedReplacesDraftId.success) return null;\n    replacesDraftId = parsedReplacesDraftId.data;\n  }\n  let replacedRevision: string | undefined;\n  const rawReplacedRevision =\n    attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.replacedRevision];\n  if (rawReplacedRevision !== undefined) {\n    if (!/^[a-f0-9]{64}$/.test(rawReplacedRevision)) return null;\n    replacedRevision = rawReplacedRevision;\n  }\n  const generatedBatchId = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.generatedBatchId];\n  const rawGeneratedBatchSize = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.generatedBatchSize];\n  let generatedBatchSize: number | undefined;\n  if (generatedBatchId !== undefined) {\n    if (!/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(generatedBatchId)) {\n      return null;\n    }\n    if (\n      typeof rawGeneratedBatchSize !== \"string\" ||\n      !/^[1-8]$/.test(rawGeneratedBatchSize)\n    ) {\n      return null;\n    }\n    generatedBatchSize = Number(rawGeneratedBatchSize);\n  } else if (rawGeneratedBatchSize !== undefined) {\n    return null;\n  }\n  if (\n    !category.success ||\n    !status.success ||\n    status.data === \"superseded\" ||\n    typeof rawOrder !== \"string\" ||\n    !/^(?:0|[1-9]\\d*)$/.test(rawOrder) ||\n    !Number.isSafeInteger(order) ||\n    namespace === null ||\n    typeof owner !== \"string\" ||\n    !/^[a-f0-9]{64}$/.test(owner) ||\n    !sourceMemoryIds\n  )\n    return null;\n  const fields = SupportPassportCardSchema.omit({\n    revision: true,\n    statement: true,\n  }).safeParse({\n    cardId: frontmatter.id,\n    title: attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.title],\n    category: category.data,\n    status: status.data,\n    updatedAt: frontmatter.updated,\n    reviewBy: attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.reviewBy],\n  });\n  if (!fields.success) return null;\n  return {\n    fields: fields.data,\n    order,\n    sourceMemoryIds,\n    namespace,\n    owner,\n    replacesDraftId,\n    replacedRevision,\n    draftReplacementPrepared:\n      attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.draftReplacementPrepared] ===\n      \"true\",\n    generatedBatchId,\n    generatedBatchSize,\n  };\n}\n\nexport function hasLiveSupportPassportCard(memory: Pick<MemoryFile, \"frontmatter\" | \"content\">): boolean {\n  const metadata = parseSupportPassportCardMetadata(memory);\n  if (metadata?.fields.status !== \"active\" && metadata?.fields.status !== \"pending_review\") return false;\n  return SupportPassportCardSchema.omit({ revision: true }).safeParse({\n    ...metadata.fields,\n    statement: stripAttributesSuffix(memory.content),\n  }).success;\n}\n\nexport function projectSupportPassportCard(\n  memory: MemoryFile,\n): StoredSupportPassportCard | null {\n  const metadata = parseSupportPassportCardMetadata(memory);\n  if (!metadata) return null;\n\n  const fields = {\n    ...metadata.fields,\n    statement: stripAttributesSuffix(memory.content),\n  };\n  const normalized = SupportPassportCardSchema.omit({\n    revision: true,\n  }).safeParse(fields);\n  if (!normalized.success) return null;\n  const parsed = SupportPassportCardSchema.safeParse({\n    ...normalized.data,\n    revision: computeSupportPassportCardRevision(normalized.data),\n  });\n  if (!parsed.success) return null;\n  return {\n    card: parsed.data,\n    memory,\n    order: metadata.order,\n    sourceMemoryIds: metadata.sourceMemoryIds,\n    namespace: metadata.namespace,\n    owner: metadata.owner,\n    replacesDraftId: metadata.replacesDraftId,\n    replacedRevision: metadata.replacedRevision,\n    draftReplacementPrepared: metadata.draftReplacementPrepared,\n    generatedBatchId: metadata.generatedBatchId,\n    generatedBatchSize: metadata.generatedBatchSize,\n  };\n}\n"],"mappings":";;;;;;;;;;;AAAA,SAAS,kBAAkB;AAC3B,SAAS,SAAS;AAKX,IAAM,mCAAmC;AAAA,EAC9C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,iCAAiC;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,oCAAoC,EAAE,KAAK,gCAAgC;AACjF,IAAM,kCAAkC,EAAE,KAAK,8BAA8B;AAC7E,IAAM,iCAAiC,EAC3C,OAAO,EACP,KAAK,EACL,IAAI,CAAC,EACL,IAAI,EAAE,EACN,OAAO,CAAC,UAAU,CAAC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,SAAS,IAAI,KAAK,CAAC,MAAM,SAAS,IAAI,GAAG;AAAA,EACzF,SAAS;AACX,CAAC;AAEH,IAAM,qBAAqB,EACxB,OAAO,EACP,SAAS,EAAE,QAAQ,KAAK,CAAC,EACzB,OAAO,CAAC,UAAU,wBAAwB,KAAK,MAAM,MAAM;AAAA,EAC1D,SAAS;AACX,CAAC;AACI,IAAM,iCAAiC,EAC3C,OAAO,EACP,IAAI,CAAC,EACL,OAAO,CAAC,cAAc,cAAc,2BAA2B,SAAS,GAAG;AAAA,EAC1E,SAAS;AACX,CAAC;AACI,IAAM,gCAAgC,EAC1C,OAAO,EACP,KAAK,EACL,IAAI,CAAC,EACL,IAAI,GAAG,EACP,MAAM,oBAAoB;AACtB,IAAM,+CAA+C;AACrD,IAAM,sCAAsC,EAChD,OAAO,EACP,KAAK,EACL,IAAI,CAAC,EACL,IAAI,4CAA4C;AAE5C,IAAM,4BAA4B,EACtC,OAAO;AAAA,EACN,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC3C,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,UAAU;AAAA,EACV,UAAU,EAAE,OAAO,EAAE,MAAM,gBAAgB;AAC7C,CAAC,EACA,OAAO;AAEH,IAAM,gCAAgC,EAC1C,MAAM,yBAAyB,EAC/B,IAAI,GAAG,EACP,YAAY,CAAC,OAAO,QAAQ;AAC3B,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,CAAC,OAAO,IAAI,KAAK,MAAM,QAAQ,GAAG;AAC3C,QAAI,KAAK,IAAI,KAAK,MAAM,GAAG;AACzB,UAAI,SAAS;AAAA,QACX,MAAM,EAAE,aAAa;AAAA,QACrB,SAAS;AAAA,QACT,MAAM,CAAC,OAAO,QAAQ;AAAA,MACxB,CAAC;AAAA,IACH;AACA,SAAK,IAAI,KAAK,MAAM;AAAA,EACtB;AACF,CAAC;AAEI,IAAM,sCAAsC,EAChD,OAAO;AAAA,EACN,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAC7C,CAAC,EACA,OAAO;AAEH,IAAM,wCAAwC,EAClD,OAAO;AAAA,EACN,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC3C,OAAO;AAAA,EACP,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC3C,UAAU;AAAA,EACV,UAAU;AACZ,CAAC,EACA,OAAO;AAEH,IAAM,yCAAyC,EACnD,OAAO;AAAA,EACN,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC3C,QAAQ;AAAA,EACR,kBAAkB,EAAE,OAAO,EAAE,MAAM,gBAAgB;AAAA,EACnD,YAAY,EACT,OAAO,EACP,KAAK,EACL,IAAI,CAAC,EACL,IAAI,EAAE,EACN,MAAM,cAAc,EACpB,SAAS;AACd,CAAC,EACA,OAAO;AAEH,IAAM,wCAAwC,uCAAuC,OAAO;AAAA,EACjG,OAAO;AAAA,EACP,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC3C,UAAU;AAAA,EACV,UAAU;AACZ,CAAC,EAAE,OAAO;AAWH,SAAS,mCAAmC,QAAgC;AACjF,QAAM,kBAAkB;AAAA,IACtB,QAAQ,OAAO;AAAA,IACf,UAAU,OAAO;AAAA,IACjB,UAAU,OAAO;AAAA,IACjB,WAAW,OAAO;AAAA,IAClB,QAAQ,OAAO;AAAA,IACf,OAAO,OAAO;AAAA,IACd,WAAW,OAAO;AAAA,EACpB;AACA,SAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,UAAU,eAAe,CAAC,EAAE,OAAO,KAAK;AAClF;;;ACpJA,SAAS,cAAAA,mBAAkB;AAC3B,SAAS,aAAa;AAgBf,IAAM,4BAA4B;AAClC,IAAM,6BAA6B;AAEnC,SAAS,+BAA+B,QAKnC;AACV,QAAM,OAAO,OAAO,YAAY;AAChC,MAAI,MAAM,SAAS,yBAAyB,MAAM,QAAQ,MAAM,SAAS,0BAA0B,MAAM,MAAM;AAC7G,WAAO;AAAA,EACT;AACA,SAAO,OAAO,KAAK,OAAO,YAAY,wBAAwB,CAAC,CAAC,EAC7D,KAAK,CAAC,QAAQ,IAAI,WAAW,mBAAmB,CAAC;AACtD;AAEO,SAAS,sCACd,UACK;AACL,SAAO,SAAS,OAAO,CAAC,WAAW,CAAC,+BAA+B,MAAM,CAAC;AAC5E;AAEO,SAAS,0CAA0C,SAE/B;AACzB,QAAM,kBAAkB,oBAAI,IAA8D;AAC1F,SAAO,OAAO,EAAE,SAAS,MAAM;AAC7B,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,MAAM,QAAQ;AAAA,IAC7B,SAAS,OAAO;AACd,UAAK,MAAgC,SAAS,UAAU;AACtD,wBAAgB,OAAO,QAAQ;AAC/B,eAAO;AAAA,MACT;AACA,YAAM;AAAA,IACR;AACA,UAAM,WAAW,GAAG,KAAK,GAAG,IAAI,KAAK,GAAG,IAAI,KAAK,IAAI,IAAI,KAAK,OAAO,IAAI,KAAK,OAAO;AACrF,UAAM,SAAS,gBAAgB,IAAI,QAAQ;AAC3C,QAAI,QAAQ,aAAa,SAAU,QAAO,MAAM,OAAO;AACvD,UAAM,WAAW,QACd,iBAAiB,QAAQ,EACzB,KAAK,CAAC,WAAY,SAAS,+BAA+B,MAAM,IAAI,KAAM;AAC7E,oBAAgB,IAAI,UAAU,EAAE,UAAU,SAAS,CAAC;AACpD,QAAI;AACF,aAAO,MAAM;AAAA,IACf,SAAS,OAAO;AACd,UAAI,gBAAgB,IAAI,QAAQ,GAAG,aAAa,SAAU,iBAAgB,OAAO,QAAQ;AACzF,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAEO,IAAM,kCAAkC,OAAO,OAAO;AAAA,EAC3D,WAAW;AAAA,EACX,mBAAmB;AAAA,EACnB,OAAO;AAAA,EACP,OAAO;AAAA,EACP,UAAU;AAAA,EACV,OAAO;AAAA,EACP,UAAU;AAAA,EACV,iBAAiB;AAAA,EACjB,iBAAiB;AAAA,EACjB,kBAAkB;AAAA,EAClB,0BAA0B;AAAA,EAC1B,qBAAqB;AAAA,EACrB,kBAAkB;AAAA,EAClB,oBAAoB;AACtB,CAAC;AAED,IAAM,sCAAsC;AAC5C,IAAM,0CAA0C;AAChD,IAAM,wCAAwC;AAC9C,IAAM,uCAAuC,+BAA+B;AAAA,EAC1E,CAAC,cACC,CAAC,UAAU,SAAS,GAAG,KACvB,CAAC,UAAU,SAAS,IAAI,KACxB,CAAC,UAAU,SAAS,IAAI,KACxB,CAAC,UAAU,SAAS,GAAG,KACvB,CAAC,UAAU,SAAS,IAAI,KACxB,CAAC,UAAU,SAAS,IAAI,KACxB,CAAC,UAAU,SAAS,IAAI;AAC5B;AAEO,SAAS,yCAAyC,WAA2C;AAClG,QAAM,YAAY,+BAA+B,MAAM,SAAS;AAChE,QAAM,UAAU,OAAO,KAAK,WAAW,MAAM,EAAE,SAAS,WAAW;AACnE,QAAM,SAAS,QAAQ,MAAM,IAAI,OAAO,OAAO,qCAAqC,KAAK,GAAG,CAAC,KAAK,CAAC;AACnG,QAAM,SAASC,YAAW,QAAQ,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK;AAChE,SAAO,OAAO,YAAY;AAAA,IACxB,CAAC,gCAAgC,WAAW,OAAO,CAAC,KAAK,EAAE;AAAA,IAC3D;AAAA,MACE,gCAAgC;AAAA,MAChC,GAAG,mCAAmC,IAAI,OAAO,MAAM,IAAI,MAAM;AAAA,IACnE;AAAA,IACA,GAAG,OAAO,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,UAAU,CAAC,GAAG,uCAAuC,GAAG,QAAQ,CAAC,IAAI,KAAK,CAAC;AAAA,EAC5G,CAAC;AACH;AAEO,SAAS,yCAAyC,YAA6D;AACpH,QAAM,aAAa,WAAW,gCAAgC,SAAS;AACvE,QAAM,WAAW,WAAW,gCAAgC,iBAAiB;AAC7E,MAAI,aAAa,QAAW;AAC1B,UAAM,SAAS,qCAAqC,UAAU,UAAU;AACxE,WAAO,OAAO,UAAU,OAAO,OAAO;AAAA,EACxC;AACA,QAAM,QAAQ,2CAA2C,KAAK,QAAQ;AACtE,MAAI,CAAC,SAAS,OAAO,eAAe,SAAU,QAAO;AACrD,QAAM,aAAa,OAAO,MAAM,CAAC,CAAC;AAClC,MAAI,CAAC,OAAO,cAAc,UAAU,EAAG,QAAO;AAC9C,QAAM,eAAe,OAAO,KAAK,UAAU,EAAE,QAAQ,CAAC,QAAQ;AAC5D,UAAM,aAAa,qCAAqC,KAAK,GAAG;AAChE,WAAO,aAAa,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;AAAA,EACjD,CAAC;AACD,MACE,aAAa,WAAW,aAAa,KACrC,aAAa,KAAK,CAAC,UAAU,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,KAAK,SAAS,UAAU;AAE7F,WAAO;AACT,QAAM,SAAS,CAAC,UAAU;AAC1B,WAAS,QAAQ,GAAG,QAAQ,YAAY,SAAS,GAAG;AAClD,UAAM,QAAQ,WAAW,GAAG,uCAAuC,GAAG,KAAK,EAAE;AAC7E,QAAI,OAAO,UAAU,YAAY,MAAM,WAAW,EAAG,QAAO;AAC5D,WAAO,KAAK,KAAK;AAAA,EACnB;AACA,QAAM,UAAU,OAAO,KAAK,EAAE;AAC9B,MAAIA,YAAW,QAAQ,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK,MAAM,MAAM,CAAC,EAAG,QAAO;AAC5E,QAAM,UAAU,OAAO,KAAK,SAAS,WAAW,EAAE,SAAS,MAAM;AACjE,MAAI,OAAO,KAAK,SAAS,MAAM,EAAE,SAAS,WAAW,MAAM,QAAS,QAAO;AAC3E,QAAM,YAAY,+BAA+B,UAAU,OAAO;AAClE,SAAO,UAAU,UAAU,UAAU,OAAO;AAC9C;AAgBO,SAAS,+BAA+B,WAA2B;AACxE,SAAOA,YAAW,QAAQ,EAAE,OAAO,SAAS,EAAE,OAAO,KAAK;AAC5D;AAEO,SAAS,+CACd,OACa;AACb,SAAO,IAAI;AAAA,IACT,MACG,OAAO,CAAC,SAAS,KAAK,KAAK,WAAW,QAAQ,EAC9C,IAAI,CAAC,SAAS,KAAK,OAAO,YAAY,UAAU,EAChD,OAAO,CAAC,WAA6B,OAAO,WAAW,QAAQ;AAAA,EACpE;AACF;AAEA,SAAS,qBAAqB,aAAyD;AACrF,QAAM,UAAU,YAAY;AAC5B,QAAM,cAAc,YAAY,uBAAuB,gCAAgC,eAAe;AACtG,QAAM,SAAS,YAAY,gBAAgB,UAAa,gBAAgB,KAAK,CAAC,IAAI,YAAY,MAAM,GAAG;AACvG,MAAI,OAAO,SAAS,EAAG,QAAO;AAC9B,QAAM,aAAuB,CAAC;AAC9B,aAAW,SAAS,QAAQ;AAC1B,UAAM,SAAS,oCAAoC,UAAU,KAAK;AAClE,QAAI,CAAC,OAAO,QAAS,QAAO;AAC5B,eAAW,KAAK,OAAO,IAAI;AAAA,EAC7B;AACA,MAAI,IAAI,IAAI,UAAU,EAAE,SAAS,WAAW,OAAQ,QAAO;AAC3D,SAAO;AACT;AAeA,SAAS,iCACP,QACoC;AACpC,QAAM,cAAc,OAAO;AAC3B,QAAM,aAAa,YAAY;AAC/B,MAAI,YAAY,aAAa,aAAc,QAAO;AAClD,MAAI,CAAC,YAAY,MAAM,SAAS,yBAAyB,EAAG,QAAO;AACnE,MACE,CAAC,cACD,YAAY,aACZ,YAAY,cACZ,YAAY;AAEZ,WAAO;AAET,QAAM,WAAW,kCAAkC;AAAA,IACjD,WAAW,gCAAgC,QAAQ;AAAA,EACrD;AACA,QAAM,SAAS,gCAAgC,UAAU,YAAY,MAAM;AAC3E,QAAM,WAAW,WAAW,gCAAgC,KAAK;AACjE,QAAM,QAAQ,OAAO,QAAQ;AAC7B,QAAM,kBAAkB,qBAAqB,WAAW;AACxD,QAAM,YAAY,yCAAyC,UAAU;AACrE,QAAM,QAAQ,WAAW,gCAAgC,KAAK;AAC9D,MAAI;AACJ,QAAM,qBACJ,WAAW,gCAAgC,eAAe;AAC5D,MAAI,uBAAuB,QAAW;AACpC,UAAM,wBACJ,8BAA8B,UAAU,kBAAkB;AAC5D,QAAI,CAAC,sBAAsB,QAAS,QAAO;AAC3C,sBAAkB,sBAAsB;AAAA,EAC1C;AACA,MAAI;AACJ,QAAM,sBACJ,WAAW,gCAAgC,gBAAgB;AAC7D,MAAI,wBAAwB,QAAW;AACrC,QAAI,CAAC,iBAAiB,KAAK,mBAAmB,EAAG,QAAO;AACxD,uBAAmB;AAAA,EACrB;AACA,QAAM,mBAAmB,WAAW,gCAAgC,gBAAgB;AACpF,QAAM,wBAAwB,WAAW,gCAAgC,kBAAkB;AAC3F,MAAI;AACJ,MAAI,qBAAqB,QAAW;AAClC,QAAI,CAAC,wEAAwE,KAAK,gBAAgB,GAAG;AACnG,aAAO;AAAA,IACT;AACA,QACE,OAAO,0BAA0B,YACjC,CAAC,UAAU,KAAK,qBAAqB,GACrC;AACA,aAAO;AAAA,IACT;AACA,yBAAqB,OAAO,qBAAqB;AAAA,EACnD,WAAW,0BAA0B,QAAW;AAC9C,WAAO;AAAA,EACT;AACA,MACE,CAAC,SAAS,WACV,CAAC,OAAO,WACR,OAAO,SAAS,gBAChB,OAAO,aAAa,YACpB,CAAC,mBAAmB,KAAK,QAAQ,KACjC,CAAC,OAAO,cAAc,KAAK,KAC3B,cAAc,QACd,OAAO,UAAU,YACjB,CAAC,iBAAiB,KAAK,KAAK,KAC5B,CAAC;AAED,WAAO;AACT,QAAM,SAAS,0BAA0B,KAAK;AAAA,IAC5C,UAAU;AAAA,IACV,WAAW;AAAA,EACb,CAAC,EAAE,UAAU;AAAA,IACX,QAAQ,YAAY;AAAA,IACpB,OAAO,WAAW,gCAAgC,KAAK;AAAA,IACvD,UAAU,SAAS;AAAA,IACnB,QAAQ,OAAO;AAAA,IACf,WAAW,YAAY;AAAA,IACvB,UAAU,WAAW,gCAAgC,QAAQ;AAAA,EAC/D,CAAC;AACD,MAAI,CAAC,OAAO,QAAS,QAAO;AAC5B,SAAO;AAAA,IACL,QAAQ,OAAO;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,0BACE,WAAW,gCAAgC,wBAAwB,MACnE;AAAA,IACF;AAAA,IACA;AAAA,EACF;AACF;AAEO,SAAS,2BAA2B,QAA8D;AACvG,QAAM,WAAW,iCAAiC,MAAM;AACxD,MAAI,UAAU,OAAO,WAAW,YAAY,UAAU,OAAO,WAAW,iBAAkB,QAAO;AACjG,SAAO,0BAA0B,KAAK,EAAE,UAAU,KAAK,CAAC,EAAE,UAAU;AAAA,IAClE,GAAG,SAAS;AAAA,IACZ,WAAW,sBAAsB,OAAO,OAAO;AAAA,EACjD,CAAC,EAAE;AACL;AAEO,SAAS,2BACd,QACkC;AAClC,QAAM,WAAW,iCAAiC,MAAM;AACxD,MAAI,CAAC,SAAU,QAAO;AAEtB,QAAM,SAAS;AAAA,IACb,GAAG,SAAS;AAAA,IACZ,WAAW,sBAAsB,OAAO,OAAO;AAAA,EACjD;AACA,QAAM,aAAa,0BAA0B,KAAK;AAAA,IAChD,UAAU;AAAA,EACZ,CAAC,EAAE,UAAU,MAAM;AACnB,MAAI,CAAC,WAAW,QAAS,QAAO;AAChC,QAAM,SAAS,0BAA0B,UAAU;AAAA,IACjD,GAAG,WAAW;AAAA,IACd,UAAU,mCAAmC,WAAW,IAAI;AAAA,EAC9D,CAAC;AACD,MAAI,CAAC,OAAO,QAAS,QAAO;AAC5B,SAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb;AAAA,IACA,OAAO,SAAS;AAAA,IAChB,iBAAiB,SAAS;AAAA,IAC1B,WAAW,SAAS;AAAA,IACpB,OAAO,SAAS;AAAA,IAChB,iBAAiB,SAAS;AAAA,IAC1B,kBAAkB,SAAS;AAAA,IAC3B,0BAA0B,SAAS;AAAA,IACnC,kBAAkB,SAAS;AAAA,IAC3B,oBAAoB,SAAS;AAAA,EAC/B;AACF;","names":["createHash","createHash"]}

package/dist/{chunk-ZMYDYNI4.js → chunk-XZHE2DEN.js}

@@ -2,12 +2,12 @@ import {
   hasBroadGraphIntent,
   planRecallMode
 } from "./chunk-PD6O7AXF.js";
-import {
-  parseQmdExplain
-} from "./chunk-QCECHYZL.js";
 import {
   buildCompressionGuidelinesMarkdown
 } from "./chunk-OD4FM2U7.js";
+import {
+  parseQmdExplain
+} from "./chunk-QCECHYZL.js";
 import {
   resolveLifecycleState
 } from "./chunk-TBBDFYXW.js";
@@ -1654,4 +1654,4 @@ export {
   ExtractionDeadlineError,
   ExtractionRunCoordinator
 };
-//# sourceMappingURL=chunk-ZMYDYNI4.js.map
+//# sourceMappingURL=chunk-XZHE2DEN.js.map

package/dist/chunk-YXQEKCZM.js

@@ -0,0 +1,223 @@
+import {
+  SupportPassportCreateGrantRequestSchema,
+  defineOperation
+} from "./chunk-D3LBIUWV.js";
+import {
+  SupportPassportCardCategorySchema,
+  SupportPassportMemoryIdSchema,
+  SupportPassportSourceMemoryIdSchema
+} from "./chunk-XX4HPFFM.js";
+
+// src/support-passport/access-operations.ts
+import { z } from "zod";
+var IsoTimestampSchema = z.string().datetime({ offset: true });
+var RevisionSchema = z.string().regex(/^[a-f0-9]{64}$/);
+var ReasonCodeSchema = z.string().trim().min(1).max(64).regex(/^[a-z0-9-]+$/);
+var GrantIdSchema = z.string().trim().min(1).max(128).regex(/^[A-Za-z0-9_-]+$/);
+var EmptySchema = z.object({}).strict();
+var ManualDraftSchema = z.object({
+  title: z.string().trim().min(1).max(80),
+  statement: z.string().trim().min(1).max(500),
+  category: SupportPassportCardCategorySchema,
+  reviewBy: IsoTimestampSchema
+}).strict();
+var GenerateDraftsSchema = z.object({
+  sourceMemoryIds: z.array(SupportPassportSourceMemoryIdSchema).min(1).max(20),
+  sourceMemoryRevisions: z.array(z.object({ memoryId: SupportPassportSourceMemoryIdSchema, revision: RevisionSchema }).strict()).min(1).max(20),
+  consent: z.literal(true)
+}).strict().superRefine((input, ctx) => {
+  if (new Set(input.sourceMemoryIds).size !== input.sourceMemoryIds.length) {
+    ctx.addIssue({
+      code: z.ZodIssueCode.custom,
+      message: "source memory IDs must be unique",
+      path: ["sourceMemoryIds"]
+    });
+  }
+  const revisionIds = input.sourceMemoryRevisions.map((source) => source.memoryId);
+  if (new Set(revisionIds).size !== revisionIds.length || revisionIds.length !== input.sourceMemoryIds.length || input.sourceMemoryIds.some((memoryId) => !revisionIds.includes(memoryId))) {
+    ctx.addIssue({
+      code: z.ZodIssueCode.custom,
+      message: "source memory revisions must match the selected memory IDs",
+      path: ["sourceMemoryRevisions"]
+    });
+  }
+});
+var ReplaceCardSchema = ManualDraftSchema.extend({
+  cardId: SupportPassportMemoryIdSchema,
+  expectedRevision: RevisionSchema
+}).strict();
+var CardMutationSchema = z.object({
+  cardId: SupportPassportMemoryIdSchema,
+  expectedRevision: RevisionSchema,
+  reasonCode: ReasonCodeSchema
+}).strict();
+var RevokeGrantSchema = z.object({
+  grantId: GrantIdSchema,
+  expectedVersion: z.number().int().positive()
+}).strict();
+var PublicGrantSchema = z.object({
+  grantId: GrantIdSchema,
+  secret: z.string().regex(/^[A-Za-z0-9_-]{32,256}$/)
+}).strict();
+var AskGrantSchema = PublicGrantSchema.extend({
+  question: z.string().trim().min(1).max(500)
+}).strict();
+function principal(value) {
+  return value ?? "";
+}
+var supportPassportMemoryPreviewOperation = defineOperation({
+  name: "support_passport_memory_preview",
+  description: "Preview one owner memory and bind it to a support-card consent revision.",
+  schema: z.object({ memoryId: SupportPassportSourceMemoryIdSchema }).strict(),
+  handler: async (input, ctx) => ({
+    result: await ctx.service.supportPassportPreviewMemory(principal(ctx.authenticatedPrincipal), input.memoryId)
+  })
+});
+var supportPassportCardsListOperation = defineOperation({
+  name: "support_passport_cards_list",
+  description: "List the authenticated owner's support cards.",
+  schema: EmptySchema,
+  handler: async (_input, ctx) => ({
+    result: { cards: await ctx.service.supportPassportListCards(principal(ctx.authenticatedPrincipal)) }
+  })
+});
+var supportPassportDraftCreateOperation = defineOperation({
+  name: "support_passport_draft_create",
+  description: "Create one support card draft for the authenticated owner.",
+  schema: ManualDraftSchema,
+  handler: async (input, ctx) => ({
+    result: {
+      card: await ctx.service.supportPassportCreateManualDraft(
+        principal(ctx.authenticatedPrincipal),
+        input,
+        {
+          ...ctx.abortSignal ? { signal: ctx.abortSignal } : {},
+          ...ctx.hooks?.recordWriteCommit ? { onCommitted: ctx.hooks.recordWriteCommit } : {}
+        }
+      )
+    }
+  })
+});
+var supportPassportDraftsGenerateOperation = defineOperation({
+  name: "support_passport_drafts_generate",
+  description: "Draft support cards from selected owner memories after explicit consent.",
+  schema: GenerateDraftsSchema,
+  handler: async (input, ctx) => ({
+    result: {
+      cards: await ctx.service.supportPassportGenerateDrafts(principal(ctx.authenticatedPrincipal), {
+        ...input,
+        signal: ctx.abortSignal,
+        ...ctx.hooks?.recordWriteCommit ? { onCommitted: ctx.hooks.recordWriteCommit } : {}
+      })
+    }
+  })
+});
+var supportPassportCardReplaceOperation = defineOperation({
+  name: "support_passport_card_replace",
+  description: "Replace one support card with a new owner-reviewed draft.",
+  schema: ReplaceCardSchema,
+  handler: async ({ cardId, ...input }, ctx) => ({
+    result: {
+      card: await ctx.service.supportPassportReplaceCard(
+        principal(ctx.authenticatedPrincipal),
+        cardId,
+        input,
+        {
+          ...ctx.abortSignal ? { signal: ctx.abortSignal } : {},
+          ...ctx.hooks?.recordWriteCommit ? { onCommitted: ctx.hooks.recordWriteCommit } : {}
+        }
+      )
+    }
+  })
+});
+function defineCardMutation(name, description, run) {
+  return defineOperation({
+    name,
+    description,
+    schema: CardMutationSchema,
+    handler: async ({ cardId, ...input }, ctx) => ({
+      result: {
+        card: await ctx.service[run](
+          principal(ctx.authenticatedPrincipal),
+          cardId,
+          input,
+          {
+            ...ctx.abortSignal ? { signal: ctx.abortSignal } : {},
+            ...ctx.hooks?.recordWriteCommit ? { onCommitted: ctx.hooks.recordWriteCommit } : {}
+          }
+        )
+      }
+    })
+  });
+}
+var supportPassportCardApproveOperation = defineCardMutation(
+  "support_passport_card_approve",
+  "Approve one pending support card as its authenticated owner.",
+  "supportPassportApproveCard"
+);
+var supportPassportCardRejectOperation = defineCardMutation(
+  "support_passport_card_reject",
+  "Reject one pending support card as its authenticated owner.",
+  "supportPassportRejectCard"
+);
+var supportPassportCardWithdrawOperation = defineCardMutation(
+  "support_passport_card_withdraw",
+  "Withdraw one approved support card as its authenticated owner.",
+  "supportPassportWithdrawCard"
+);
+var supportPassportGrantCreateOperation = defineOperation({
+  name: "support_passport_grant_create",
+  description: "Create one timed share link for exact approved support card versions.",
+  schema: SupportPassportCreateGrantRequestSchema,
+  handler: async (input, ctx) => ({
+    result: await ctx.service.supportPassportCreateGrant(
+      principal(ctx.authenticatedPrincipal),
+      input,
+      {
+        ...ctx.abortSignal ? { signal: ctx.abortSignal } : {},
+        ...ctx.hooks?.recordWriteCommit ? { onCommitted: ctx.hooks.recordWriteCommit } : {}
+      }
+    )
+  })
+});
+var supportPassportGrantsListOperation = defineOperation({
+  name: "support_passport_grants_list",
+  description: "List the authenticated owner's support passport share links without secrets.",
+  schema: EmptySchema,
+  handler: async (_input, ctx) => ({
+    result: { grants: await ctx.service.supportPassportListGrants(principal(ctx.authenticatedPrincipal)) }
+  })
+});
+var supportPassportGrantRevokeOperation = defineOperation({
+  name: "support_passport_grant_revoke",
+  description: "Stop one support passport share link as its authenticated owner.",
+  schema: RevokeGrantSchema,
+  handler: async ({ grantId, ...input }, ctx) => ({
+    result: await ctx.service.supportPassportRevokeGrant(
+      principal(ctx.authenticatedPrincipal),
+      grantId,
+      input,
+      {
+        ...ctx.abortSignal ? { signal: ctx.abortSignal } : {},
+        ...ctx.hooks?.recordWriteCommit ? { onCommitted: ctx.hooks.recordWriteCommit } : {}
+      }
+    )
+  })
+});
+var supportPassportGrantReadOperation = defineOperation({
+  name: "support_passport_grant_read",
+  description: "Read one active support passport share link.",
+  schema: PublicGrantSchema,
+  handler: async ({ grantId, secret }, ctx) => ({
+    result: await ctx.service.supportPassportReadGrant(grantId, secret)
+  })
+});
+var supportPassportGrantAskOperation = defineOperation({
+  name: "support_passport_grant_ask",
+  description: "Answer one helper question from an active support passport share link.",
+  schema: AskGrantSchema,
+  handler: async ({ grantId, secret, question }, ctx) => ({
+    result: await ctx.service.supportPassportAskGrant(grantId, secret, question, ctx.abortSignal)
+  })
+});
+//# sourceMappingURL=chunk-YXQEKCZM.js.map