@remnic/core 9.65.7 → 9.65.8

package/dist/chunk-LB7WCZHY.js

@@ -0,0 +1,553 @@
+import {
+  evaluateActiveContextTransformPolicy
+} from "./chunk-MI2OTWV5.js";
+import {
+  ContextSummaryUnavailableError,
+  summarizeContextPure
+} from "./chunk-43HUVDTD.js";
+import {
+  DEFAULT_ACTIVE_CONTEXT_CAPS
+} from "./chunk-B32WYRXX.js";
+
+// src/active-context-transform.ts
+import { createHash } from "crypto";
+var ACTIVE_CONTEXT_ALGORITHM_VERSION = "active-context-transform/1";
+var ACTIVE_CONTEXT_SNAPSHOT_SCHEMA_VERSION = 1;
+var ACTIVE_CONTEXT_PLAN_SCHEMA_VERSION = 1;
+var ACTIVE_CONTEXT_RECEIPT_SCHEMA_VERSION = 1;
+var ACTIVE_CONTEXT_RECORD_SCHEMA_VERSION = 1;
+var PROTECTED_ROLES = { system: true, developer: true };
+function sha256Hex(value) {
+  return createHash("sha256").update(value, "utf8").digest("hex");
+}
+function canonicalJson(value) {
+  if (value === null || typeof value !== "object") return JSON.stringify(value);
+  if (Array.isArray(value)) return `[${value.map(canonicalJson).join(",")}]`;
+  const entries = Object.entries(value).filter(([, v]) => v !== void 0).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([k, v]) => `${JSON.stringify(k)}:${canonicalJson(v)}`);
+  return `{${entries.join(",")}}`;
+}
+function hashSnapshot(snapshot) {
+  return sha256Hex(
+    canonicalJson({
+      namespace: snapshot.namespace,
+      revision: snapshot.revision,
+      sessionKey: snapshot.sessionKey,
+      messages: snapshot.messages.map((m) => ({
+        contentHash: sha256Hex(m.content),
+        id: m.id,
+        ordinal: m.ordinal,
+        role: m.role
+      }))
+    })
+  );
+}
+var VALID_PHASES = { plan: true, prepare: true };
+var VALID_ROLES = {
+  system: true,
+  developer: true,
+  user: true,
+  assistant: true,
+  tool: true
+};
+function rejectedPlan(operation, errorCode, context, policy) {
+  const planId = `actx-rejected-${sha256Hex(`${operation}:${errorCode}:${policy.rationale}`).slice(0, 12)}`;
+  return {
+    schemaVersion: ACTIVE_CONTEXT_PLAN_SCHEMA_VERSION,
+    planId,
+    planHash: sha256Hex(canonicalJson({ planId, errorCode, operation })),
+    operation,
+    status: "rejected",
+    errorCode,
+    precondition: context ? {
+      principal: context.scope.principal,
+      sessionKey: context.scope.sessionKey,
+      namespace: context.scope.namespace,
+      adapterId: context.scope.adapterId,
+      snapshotRevision: context.snapshotRevision,
+      expiresAt: context.expiresAt
+    } : {
+      principal: "",
+      sessionKey: "",
+      namespace: "",
+      adapterId: "",
+      snapshotRevision: "",
+      expiresAt: ""
+    },
+    selectedMessageIds: [],
+    retainedMessageIds: [],
+    proposedRemovalIds: [],
+    preserve: { protectedMessageIds: [], minimumRetainedMessages: 0 },
+    inverse: { kind: "restore-source-message-ids", sourceMessageIds: [] },
+    retention: {
+      planId,
+      mode: "adapter-local",
+      expiresAt: "",
+      maxBytes: 0,
+      snapshotContentHash: context?.snapshotContentHash ?? ""
+    },
+    provenance: {
+      algorithmVersion: ACTIVE_CONTEXT_ALGORITHM_VERSION,
+      selectorHash: "",
+      snapshotContentHash: context?.snapshotContentHash ?? "",
+      generatedAt: context?.generatedAt ?? (/* @__PURE__ */ new Date()).toISOString()
+    },
+    policy
+  };
+}
+var PlanReject = class extends Error {
+  constructor(code) {
+    super(code);
+    this.code = code;
+  }
+  code;
+};
+function buildContext(request, deps) {
+  const caps = deps.caps ?? {
+    ...DEFAULT_ACTIVE_CONTEXT_CAPS,
+    activeContextTransforms: true,
+    activeContextLlm: false
+  };
+  const scope = deps.resolvedScope;
+  if (!scope || !scope.sessionKey || !scope.namespace || !scope.principal || !scope.adapterId) {
+    throw new PlanReject("scope_mismatch");
+  }
+  if (request.snapshot.sessionKey !== scope.sessionKey) throw new PlanReject("scope_mismatch");
+  if (request.snapshot.namespace !== scope.namespace) throw new PlanReject("scope_mismatch");
+  const snapshot = request.snapshot;
+  if (snapshot.schemaVersion !== ACTIVE_CONTEXT_SNAPSHOT_SCHEMA_VERSION) {
+    throw new PlanReject("invalid_request");
+  }
+  if (!Array.isArray(snapshot.messages) || snapshot.messages.length === 0) {
+    throw new PlanReject("invalid_request");
+  }
+  const byId = /* @__PURE__ */ new Map();
+  let totalChars = 0;
+  for (const message of snapshot.messages) {
+    if (typeof message?.id !== "string" || message.id.length === 0 || typeof message.content !== "string" || VALID_ROLES[message.role] !== true) {
+      throw new PlanReject("invalid_request");
+    }
+    if (byId.has(message.id)) throw new PlanReject("invalid_request");
+    byId.set(message.id, message);
+    totalChars += message.content.length;
+  }
+  if (snapshot.messages.length > caps.activeContextMaxMessages) throw new PlanReject("invalid_request");
+  if (totalChars > caps.activeContextMaxSnapshotChars) throw new PlanReject("invalid_request");
+  const now = (deps.now ?? (() => /* @__PURE__ */ new Date()))();
+  const generatedAt = now.toISOString();
+  const expiresAt = new Date(now.getTime() + caps.activeContextPlanTtlMinutes * 6e4).toISOString();
+  return {
+    caps,
+    scope,
+    snapshotRevision: snapshot.revision,
+    byId,
+    ordered: [...snapshot.messages].sort((a, b) => a.ordinal - b.ordinal || a.id.localeCompare(b.id)),
+    snapshotContentHash: hashSnapshot(snapshot),
+    generatedAt,
+    expiresAt
+  };
+}
+function resolveSelection(request, context) {
+  const messageIds = request.selector?.messageIds;
+  const span = request.selector?.span;
+  const hasIds = Array.isArray(messageIds) && messageIds.length > 0;
+  if (hasIds === (span !== void 0)) throw new PlanReject("invalid_request");
+  if (hasIds && messageIds) {
+    const seen = /* @__PURE__ */ new Set();
+    const picked = [];
+    for (const id of messageIds) {
+      if (seen.has(id)) throw new PlanReject("invalid_request");
+      seen.add(id);
+      const message = context.byId.get(id);
+      if (!message) throw new PlanReject("invalid_request");
+      picked.push(message);
+    }
+    return picked.sort((a, b) => a.ordinal - b.ordinal || a.id.localeCompare(b.id));
+  }
+  if (!span) throw new PlanReject("invalid_request");
+  const { startMessageId, endMessageId } = span;
+  const start = context.byId.get(startMessageId);
+  const end = context.byId.get(endMessageId);
+  if (!start || !end) throw new PlanReject("invalid_request");
+  if (start.ordinal > end.ordinal) throw new PlanReject("invalid_request");
+  const inSpan = context.ordered.filter(
+    (m) => m.ordinal >= start.ordinal && m.ordinal <= end.ordinal
+    // closed and full
+  );
+  if (inSpan.length === 0) throw new PlanReject("invalid_request");
+  return inSpan;
+}
+function protectedIdSet(request, context) {
+  const protectedIds = /* @__PURE__ */ new Set();
+  for (const message of context.ordered) {
+    if (PROTECTED_ROLES[message.role] === true || message.protected === true) {
+      protectedIds.add(message.id);
+    }
+  }
+  for (const role of request.preserve?.roles ?? []) {
+    if (PROTECTED_ROLES[role] === true) continue;
+    for (const message of context.ordered) {
+      if (message.role === role) protectedIds.add(message.id);
+    }
+  }
+  for (const id of request.preserve?.messageIds ?? []) {
+    if (context.byId.has(id)) protectedIds.add(id);
+  }
+  return protectedIds;
+}
+function planActiveContextTransform(request, deps) {
+  const caps = deps.caps ?? { ...DEFAULT_ACTIVE_CONTEXT_CAPS, activeContextTransforms: true, activeContextLlm: false };
+  const policy = evaluateActiveContextTransformPolicy({
+    actionsEnabled: deps.actionsEnabled ?? caps.activeContextTransforms,
+    operation: request.operation
+  });
+  if (policy.decision === "deny") {
+    return rejectedPlan(request.operation, "feature_disabled", null, policy);
+  }
+  let context = null;
+  try {
+    if (request.schemaVersion !== ACTIVE_CONTEXT_SNAPSHOT_SCHEMA_VERSION) {
+      throw new PlanReject("invalid_request");
+    }
+    if (request.operation !== "SUMMARY" && request.operation !== "FILTER") {
+      throw new PlanReject("invalid_request");
+    }
+    if (VALID_PHASES[request.phase] !== true) throw new PlanReject("invalid_request");
+    context = buildContext(request, deps);
+    if (request.expectedRevision !== void 0 && request.expectedRevision !== request.snapshot.revision) {
+      throw new PlanReject("stale_context");
+    }
+    const selected = resolveSelection(request, context);
+    const protectedIds = protectedIdSet(request, context);
+    const removable = selected.filter((m) => !protectedIds.has(m.id));
+    if (removable.length === 0) {
+      throw new PlanReject("preserve_conflict");
+    }
+    const minimumRetained = Math.max(
+      1,
+      request.preserve?.minRetainedMessages ?? caps.activeContextMinRetainedMessages
+    );
+    const idList = (messages) => messages.map((m) => m.id);
+    const allIds = idList(context.ordered);
+    const selectorHash = sha256Hex(canonicalJson(request.selector ?? {}));
+    if (request.operation === "FILTER") {
+      return buildFilterPlan(request, deps, context, {
+        selected,
+        removable,
+        protectedIds,
+        minimumRetained,
+        allIds,
+        selectorHash,
+        policy
+      });
+    }
+    return buildSummaryPlan(request, deps, context, {
+      selected,
+      removable,
+      protectedIds,
+      minimumRetained,
+      allIds,
+      selectorHash,
+      policy
+    });
+  } catch (err) {
+    if (err instanceof PlanReject) {
+      return rejectedPlan(request.operation, err.code, context, policy);
+    }
+    throw err;
+  }
+}
+function finalizePlan(operation, context, bundle, proposedRemovalIds, extras) {
+  const retainedIds = bundle.allIds.filter((id) => !proposedRemovalIds.includes(id));
+  if (retainedIds.length < bundle.minimumRetained) {
+    throw new PlanReject("preserve_conflict");
+  }
+  const sourceMessageIds = bundle.removable.map((m) => m.id);
+  const precondition = {
+    principal: context.scope.principal,
+    sessionKey: context.scope.sessionKey,
+    namespace: context.scope.namespace,
+    adapterId: context.scope.adapterId,
+    snapshotRevision: context.snapshotRevision,
+    expiresAt: context.expiresAt
+  };
+  const provenance = {
+    algorithmVersion: ACTIVE_CONTEXT_ALGORITHM_VERSION,
+    selectorHash: bundle.selectorHash,
+    snapshotContentHash: context.snapshotContentHash,
+    ...extras.criterionHash ? { criterionHash: extras.criterionHash } : {},
+    ...extras.sourcePromptHash ? { sourcePromptHash: extras.sourcePromptHash } : {},
+    generatedAt: context.generatedAt
+  };
+  const planId = `actx-${sha256Hex(
+    canonicalJson({
+      adapterId: precondition.adapterId,
+      criterionHash: extras.criterionHash,
+      namespace: precondition.namespace,
+      operation,
+      principal: precondition.principal,
+      selectorHash: bundle.selectorHash,
+      sessionKey: precondition.sessionKey,
+      snapshotContentHash: context.snapshotContentHash
+    })
+  ).slice(0, 16)}`;
+  const planBody = {
+    operation,
+    planId,
+    precondition,
+    proposedRemovalIds,
+    replacementMessageId: extras.replacement?.messageId,
+    replacementSourceIds: extras.replacement?.sourceMessageIds,
+    retainedIds,
+    selectedIds: bundle.selected.map((m) => m.id)
+  };
+  const planHash = sha256Hex(canonicalJson(planBody));
+  return {
+    schemaVersion: ACTIVE_CONTEXT_PLAN_SCHEMA_VERSION,
+    planId,
+    planHash,
+    operation,
+    status: "ready",
+    precondition,
+    selectedMessageIds: planBody.selectedIds,
+    retainedMessageIds: retainedIds,
+    proposedRemovalIds,
+    ...extras.scoreRows ? { scoreRows: extras.scoreRows } : {},
+    ...extras.replacement ? { replacement: extras.replacement } : {},
+    preserve: {
+      protectedMessageIds: [...bundle.protectedIds],
+      minimumRetainedMessages: bundle.minimumRetained
+    },
+    inverse: {
+      kind: "restore-source-message-ids",
+      sourceMessageIds,
+      ...extras.replacement ? { removeReplacementMessageId: extras.replacement.messageId } : {},
+      expectedAppliedPlanHash: planHash
+    },
+    retention: {
+      planId,
+      mode: "adapter-local",
+      expiresAt: context.expiresAt,
+      maxBytes: context.caps.activeContextRetentionMaxBytes,
+      snapshotContentHash: context.snapshotContentHash
+    },
+    provenance,
+    policy: bundle.policy
+  };
+}
+function buildFilterPlan(request, deps, context, bundle) {
+  const filter = request.filter;
+  if (!filter || typeof filter.keepCriterion !== "string" || filter.keepCriterion.length === 0) {
+    throw new PlanReject("invalid_request");
+  }
+  const threshold = filter.threshold;
+  if (typeof threshold !== "number" || !Number.isFinite(threshold) || threshold < 0 || threshold > 1) {
+    throw new PlanReject("invalid_request");
+  }
+  if (!deps.scoreMessage) {
+    throw new PlanReject("filter_unavailable");
+  }
+  const scoreRows = [];
+  const removalIds = [];
+  for (const message of bundle.removable) {
+    const score = deps.scoreMessage(message);
+    if (typeof score !== "number" || !Number.isFinite(score) || score < 0 || score > 1) {
+      throw new PlanReject("filter_unavailable");
+    }
+    const decision = score >= threshold ? "keep" : "drop";
+    scoreRows.push({ messageId: message.id, score, decision });
+    if (decision === "drop") removalIds.push(message.id);
+  }
+  return finalizePlan("FILTER", context, bundle, removalIds, {
+    scoreRows,
+    criterionHash: sha256Hex(filter.keepCriterion),
+    // hash, never the rule text
+    sourcePromptHash: request.sourcePromptHash
+  });
+}
+function buildSummaryPlan(request, deps, context, bundle) {
+  const requested = request.summary?.method ?? "deterministic";
+  const llmEnabled = context.caps.activeContextLlm;
+  let method;
+  let fallbackPolicy;
+  if (requested === "deterministic") {
+    method = "deterministic";
+    fallbackPolicy = "none";
+  } else if (requested === "llm") {
+    if (!llmEnabled) throw new PlanReject("unsupported");
+    method = "llm";
+    fallbackPolicy = "none";
+  } else {
+    method = llmEnabled && deps.summarize ? "llm" : "deterministic";
+    fallbackPolicy = method === "llm" ? "allowed" : "none";
+  }
+  const requestedTokens = request.summary?.targetTokens ?? context.caps.activeContextSummaryMaxTokens;
+  if (typeof requestedTokens !== "number" || !Number.isFinite(requestedTokens) || requestedTokens <= 0 || requestedTokens > context.caps.activeContextSummaryMaxTokens) {
+    throw new PlanReject("invalid_request");
+  }
+  const targetTokens = Math.floor(requestedTokens);
+  const replacementSeed = sha256Hex(
+    canonicalJson({
+      operation: "SUMMARY",
+      selectorHash: bundle.selectorHash,
+      snapshotContentHash: context.snapshotContentHash,
+      sessionKey: context.scope.sessionKey,
+      namespace: context.scope.namespace,
+      principal: context.scope.principal,
+      adapterId: context.scope.adapterId
+    })
+  );
+  const replacement = {
+    messageId: `actxr-${replacementSeed.slice(0, 16)}`,
+    sourceMessageIds: bundle.removable.map((m) => m.id),
+    method,
+    fallbackPolicy,
+    targetTokens
+  };
+  const plan = finalizePlan("SUMMARY", context, bundle, [...replacement.sourceMessageIds], {
+    replacement,
+    sourcePromptHash: request.sourcePromptHash
+  });
+  return plan;
+}
+async function prepareActiveContextTransform(plan, deps) {
+  if (plan.status !== "ready") {
+    return { status: "rejected", plan, errorCode: plan.errorCode ?? "invalid_request" };
+  }
+  const scope = deps.resolvedScope;
+  const p = plan.precondition;
+  if (!scope || scope.principal !== p.principal || scope.sessionKey !== p.sessionKey || scope.namespace !== p.namespace || scope.adapterId !== p.adapterId) {
+    return { status: "rejected", plan, errorCode: "scope_mismatch" };
+  }
+  const now = deps.now?.() ?? /* @__PURE__ */ new Date();
+  if (now.getTime() >= new Date(plan.retention.expiresAt).getTime()) {
+    return { status: "rejected", plan, errorCode: "stale_context" };
+  }
+  if (deps.snapshot.sessionKey !== p.sessionKey || deps.snapshot.namespace !== p.namespace) {
+    return { status: "rejected", plan, errorCode: "scope_mismatch" };
+  }
+  const fenceHash = hashSnapshot(deps.snapshot);
+  if (fenceHash !== plan.provenance.snapshotContentHash) {
+    return { status: "rejected", plan, errorCode: "plan_conflict" };
+  }
+  if (plan.operation === "FILTER") {
+    return { status: "ready", plan };
+  }
+  const replacement = plan.replacement;
+  if (!replacement) {
+    return { status: "failed", plan, errorCode: "invalid_request" };
+  }
+  const byId = new Map(deps.snapshot.messages.map((m) => [m.id, m]));
+  const sourceText = replacement.sourceMessageIds.map((id) => byId.get(id)).filter((m) => m !== void 0).sort((a, b) => a.ordinal - b.ordinal || a.id.localeCompare(b.id)).map((m) => m.content).join("\n\n");
+  const method = replacement.method === "deterministic" ? "deterministic" : replacement.fallbackPolicy === "allowed" ? "auto" : "llm";
+  try {
+    const result = await summarizeContextPure(sourceText, replacement.targetTokens, method, {
+      llm: deps.summarize,
+      deterministicMaxTokens: deps.caps?.activeContextSummaryMaxTokens ?? replacement.targetTokens
+    });
+    if (result.text.trim().length === 0) {
+      return { status: "failed", plan, errorCode: "summary_unavailable" };
+    }
+    return {
+      status: "ready",
+      plan,
+      replacement: {
+        messageId: replacement.messageId,
+        text: result.text,
+        contentHash: sha256Hex(result.text),
+        method: result.method,
+        ...result.modelUsed ? { modelUsed: result.modelUsed } : {},
+        fallback: result.fallback,
+        sourceMessageIds: replacement.sourceMessageIds
+      }
+    };
+  } catch (err) {
+    if (err instanceof ContextSummaryUnavailableError) {
+      return { status: "failed", plan, errorCode: "summary_unavailable" };
+    }
+    throw err;
+  }
+}
+async function recordActiveContextApplyReceipt(plan, receipt, trustedScope, recorder) {
+  const p = plan.precondition;
+  const scopeMatch = trustedScope.principal === p.principal && trustedScope.sessionKey === p.sessionKey && trustedScope.namespace === p.namespace && trustedScope.adapterId === p.adapterId && receipt.adapterId === trustedScope.adapterId;
+  if (!scopeMatch) throw new PlanReject("scope_mismatch");
+  if (receipt.planHash !== plan.planHash) throw new PlanReject("plan_conflict");
+  if (receipt.hostRevisionBefore === void 0 || receipt.hostRevisionBefore !== p.snapshotRevision) {
+    throw new PlanReject("stale_context");
+  }
+  const shapeOk = receipt.schemaVersion === ACTIVE_CONTEXT_RECEIPT_SCHEMA_VERSION && receipt.planId === plan.planId && (receipt.outcome === "applied" || receipt.outcome === "skipped" || receipt.outcome === "failed") && typeof receipt.appliedAt === "string" && !Number.isNaN(Date.parse(receipt.appliedAt));
+  if (!shapeOk) throw new PlanReject("invalid_receipt");
+  const event = {
+    recordKind: "context_transform",
+    schemaVersion: ACTIVE_CONTEXT_RECORD_SCHEMA_VERSION,
+    timestamp: receipt.appliedAt,
+    actionId: plan.planId,
+    action: plan.operation === "SUMMARY" ? "summarize_context" : "filter_context",
+    outcome: receipt.outcome,
+    status: receipt.outcome === "applied" ? "applied" : receipt.outcome === "failed" ? "rejected" : "validated",
+    subsystem: "active-context",
+    namespace: p.namespace,
+    sourceSessionKey: p.sessionKey,
+    planHash: plan.planHash,
+    snapshotRevision: p.snapshotRevision,
+    adapterId: receipt.adapterId,
+    algorithmVersion: plan.provenance.algorithmVersion,
+    selectedCount: plan.selectedMessageIds.length,
+    retainedCount: plan.retainedMessageIds.length,
+    proposedRemovalCount: plan.proposedRemovalIds.length,
+    receiptOutcome: receipt.outcome,
+    selectorHash: plan.provenance.selectorHash,
+    snapshotContentHash: plan.provenance.snapshotContentHash,
+    ...plan.provenance.criterionHash ? { criterionHash: plan.provenance.criterionHash } : {},
+    ...plan.provenance.sourcePromptHash ? { sourcePromptHash: plan.provenance.sourcePromptHash } : {},
+    policyDecision: plan.policy.decision,
+    policyRationale: plan.policy.rationale
+  };
+  let recorded = false;
+  try {
+    recorded = await recorder.append(event);
+  } catch {
+    recorded = false;
+  }
+  return { recorded, event: { ...event, telemetryRecorded: recorded } };
+}
+function buildContextTransformPlanEvent(plan, outcome) {
+  return {
+    recordKind: "context_transform",
+    schemaVersion: ACTIVE_CONTEXT_RECORD_SCHEMA_VERSION,
+    timestamp: plan.provenance.generatedAt,
+    actionId: plan.planId,
+    action: plan.operation === "SUMMARY" ? "summarize_context" : "filter_context",
+    outcome,
+    status: plan.status === "ready" ? "validated" : "rejected",
+    subsystem: "active-context",
+    namespace: plan.precondition.namespace,
+    sourceSessionKey: plan.precondition.sessionKey,
+    planHash: plan.planHash,
+    snapshotRevision: plan.precondition.snapshotRevision,
+    algorithmVersion: plan.provenance.algorithmVersion,
+    selectedCount: plan.selectedMessageIds.length,
+    retainedCount: plan.retainedMessageIds.length,
+    proposedRemovalCount: plan.proposedRemovalIds.length,
+    selectorHash: plan.provenance.selectorHash,
+    snapshotContentHash: plan.provenance.snapshotContentHash,
+    ...plan.provenance.criterionHash ? { criterionHash: plan.provenance.criterionHash } : {},
+    ...plan.provenance.sourcePromptHash ? { sourcePromptHash: plan.provenance.sourcePromptHash } : {},
+    policyDecision: plan.policy.decision,
+    policyRationale: plan.policy.rationale,
+    telemetryRecorded: true
+  };
+}
+
+export {
+  ACTIVE_CONTEXT_ALGORITHM_VERSION,
+  ACTIVE_CONTEXT_SNAPSHOT_SCHEMA_VERSION,
+  ACTIVE_CONTEXT_PLAN_SCHEMA_VERSION,
+  ACTIVE_CONTEXT_RECEIPT_SCHEMA_VERSION,
+  ACTIVE_CONTEXT_RECORD_SCHEMA_VERSION,
+  planActiveContextTransform,
+  prepareActiveContextTransform,
+  recordActiveContextApplyReceipt,
+  buildContextTransformPlanEvent
+};
+//# sourceMappingURL=chunk-LB7WCZHY.js.map

package/dist/chunk-LB7WCZHY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/active-context-transform.ts"],"sourcesContent":["/**\n * Host-agnostic active-context SUMMARY/FILTER plans (issue #2347).\n *\n * Core receives a short message list, checks the trusted scope first,\n * then IDs and limits, and returns a content-addressed plan. Core never\n * mutates host state or saved memory: the host adapter owns save, apply,\n * and undo; it reports back through {@link ActiveContextApplyReceipt}.\n * Plans and telemetry carry hashes and counts only — never raw message\n * text, keep rules, or summary output.\n *\n * Paper basis: AgeMem (arXiv:2601.01885v3) §3.1/A.1 eq. (14) Summary and\n * eq. (15) Filter. Selection is host-bounded (explicit IDs or one closed\n * span); `all` / last-N spans are never inferred. Filter keeps messages\n * with `score >= threshold` using a caller-supplied fixed score rule — an\n * LLM never picks drop IDs. Event counts back the design; no ship claim.\n */\nimport { createHash } from \"node:crypto\";\nimport { DEFAULT_ACTIVE_CONTEXT_CAPS, type ActiveContextCapabilitySet } from \"./active-context-config.js\";\nimport {\n  ContextSummaryUnavailableError,\n  summarizeContextPure,\n  type SummarizeFn,\n} from \"./context-summary.js\";\nimport { evaluateActiveContextTransformPolicy } from \"./memory-action-policy.js\";\n\nexport const ACTIVE_CONTEXT_ALGORITHM_VERSION = \"active-context-transform/1\";\nexport const ACTIVE_CONTEXT_SNAPSHOT_SCHEMA_VERSION = 1;\nexport const ACTIVE_CONTEXT_PLAN_SCHEMA_VERSION = 1;\nexport const ACTIVE_CONTEXT_RECEIPT_SCHEMA_VERSION = 1;\nexport const ACTIVE_CONTEXT_RECORD_SCHEMA_VERSION = 1;\n\nexport type ActiveContextOperation = \"SUMMARY\" | \"FILTER\";\nexport type ActiveContextPhase = \"plan\" | \"prepare\";\nexport type ActiveContextMessageRole = \"system\" | \"developer\" | \"user\" | \"assistant\" | \"tool\";\n\nexport type ActiveContextErrorCode =\n  | \"feature_disabled\"\n  | \"scope_mismatch\"\n  | \"invalid_request\"\n  | \"stale_context\"\n  | \"plan_conflict\"\n  | \"preserve_conflict\"\n  | \"filter_unavailable\"\n  | \"summary_unavailable\"\n  | \"unsupported\"\n  | \"retention_unavailable\"\n  | \"retention_expired\"\n  | \"invalid_receipt\"\n  | \"host_error\";\n\n/** Roles that can never be removed by any operation or selector. */\nconst PROTECTED_ROLES: Record<string, true> = { system: true, developer: true };\n\nexport interface ActiveContextMessage {\n  id: string;\n  /** Snapshot order; plans sort by it and never reorder sources. */\n  ordinal: number;\n  role: ActiveContextMessageRole;\n  content: string;\n  /** Caller-marked protection; equivalent to a preserve-listed ID. */\n  protected?: boolean;\n}\n\nexport interface ActiveContextSnapshot {\n  schemaVersion: 1;\n  sessionKey: string;\n  /** Data routing only — never authorization. */\n  namespace: string;\n  /** Host revision/turn identifier the plan binds as a precondition. */\n  revision: string | number;\n  messages: ActiveContextMessage[];\n}\n\n/**\n * Trusted scope resolved by the access layer BEFORE any plan work\n * (mirrors `ResolvedIdentity` from adapters/types.ts). Core never treats\n * `snapshot.namespace` as auth.\n */\nexport interface ActiveContextResolvedScope {\n  sessionKey: string;\n  namespace: string;\n  principal: string;\n  adapterId: string;\n}\n\n/** Fixed, caller-supplied score rule. Must return a finite score in [0,1]. */\nexport type ActiveContextScoreMessageFn = (message: ActiveContextMessage) => number | undefined;\n\nexport interface ActiveContextTransformDeps {\n  resolvedScope: ActiveContextResolvedScope;\n  /** Filter score rule — required for FILTER plans. */\n  scoreMessage?: ActiveContextScoreMessageFn;\n  /** Model seam for SUMMARY; the same pure seam LCM uses. */\n  summarize?: SummarizeFn;\n  /** Config-projected caps; defaults are conservative (see capabilities.ts). */\n  caps?: ActiveContextCapabilitySet;\n  /** Gate override; defaults to `caps.activeContextTransforms`. */\n  actionsEnabled?: boolean;\n  /** Clock seam for deterministic expiry tests. */\n  now?: () => Date;\n}\n\nexport interface ActiveContextSpanSelector {\n  /** Closed span: inclusive start (by snapshot order). */\n  startMessageId: string;\n  /** Closed span: inclusive end (by snapshot order). */\n  endMessageId: string;\n}\n\nexport interface ActiveContextTransformRequest {\n  schemaVersion: 1;\n  operation: ActiveContextOperation;\n  phase: ActiveContextPhase;\n  snapshot: ActiveContextSnapshot;\n  /** Exactly one of `messageIds` or `span`. */\n  selector: { messageIds?: string[]; span?: ActiveContextSpanSelector };\n  preserve?: {\n    messageIds?: string[];\n    roles?: ActiveContextMessageRole[];\n    minRetainedMessages?: number;\n  };\n  summary?: { method: \"deterministic\" | \"llm\" | \"auto\"; targetTokens?: number };\n  filter?: { keepCriterion: string; threshold: number };\n  expectedRevision?: string | number;\n  requestId?: string;\n  sourcePromptHash?: string;\n}\n\nexport interface ActiveContextScoreRow {\n  messageId: string;\n  score: number;\n  decision: \"keep\" | \"drop\";\n}\n\nexport interface ActiveContextPlanReplacement {\n  messageId: string;\n  /** Filled by prepare — plans never carry raw text. */\n  contentHash?: string;\n  sourceMessageIds: string[];\n  method: \"deterministic\" | \"llm\";\n  /** Whether prepare may degrade to deterministic output (auto mode only). */\n  fallbackPolicy: \"allowed\" | \"none\";\n  targetTokens: number;\n  modelUsed?: string;\n  fallback?: boolean;\n}\n\nexport interface ActiveContextTransformPlan {\n  schemaVersion: 1;\n  planId: string;\n  planHash: string;\n  operation: ActiveContextOperation;\n  status: \"ready\" | \"rejected\";\n  errorCode?: ActiveContextErrorCode;\n  precondition: {\n    principal: string;\n    sessionKey: string;\n    namespace: string;\n    adapterId: string;\n    snapshotRevision: string | number;\n    expiresAt: string;\n  };\n  /** Selected sources in snapshot order. */\n  selectedMessageIds: string[];\n  /** Messages that stay after the plan applies. */\n  retainedMessageIds: string[];\n  /** Removable IDs the plan proposes to drop or fold into a replacement. */\n  proposedRemovalIds: string[];\n  scoreRows?: ActiveContextScoreRow[];\n  replacement?: ActiveContextPlanReplacement;\n  preserve: { protectedMessageIds: string[]; minimumRetainedMessages: number };\n  inverse: {\n    kind: \"restore-source-message-ids\";\n    sourceMessageIds: string[];\n    removeReplacementMessageId?: string;\n    expectedAppliedPlanHash?: string;\n  };\n  retention: {\n    planId: string;\n    mode: \"adapter-local\";\n    expiresAt: string;\n    maxBytes: number;\n    snapshotContentHash: string;\n  };\n  provenance: {\n    algorithmVersion: string;\n    selectorHash: string;\n    snapshotContentHash: string;\n    criterionHash?: string;\n    sourcePromptHash?: string;\n    generatedAt: string;\n  };\n  policy: { decision: \"allow\" | \"deny\"; rationale: string };\n}\n\nexport interface ActiveContextHostCapability {\n  capabilityId: string;\n  trustedScope: ActiveContextResolvedScope;\n  hostRevision: string | number;\n  operations: ActiveContextOperation[];\n  expiresAt: string;\n}\n\nexport interface ActiveContextApplyReceipt {\n  schemaVersion: 1;\n  planId: string;\n  planHash: string;\n  adapterId: string;\n  outcome: \"applied\" | \"skipped\" | \"failed\";\n  errorCode?: ActiveContextErrorCode;\n  hostRevisionBefore?: string | number;\n  hostRevisionAfter?: string | number;\n  appliedMessageIds?: string[];\n  removedMessageIds?: string[];\n  replacementMessageId?: string;\n  retentionExpiresAt?: string;\n  appliedAt: string;\n}\n\n/** Discriminated ledger record appended to `state/memory-actions.jsonl`. */\nexport interface ContextTransformTelemetryRecord {\n  recordKind: \"context_transform\";\n  schemaVersion: 1;\n  timestamp: string;\n  /** Plan ID doubles as the record action ID. */\n  actionId: string;\n  action: \"summarize_context\" | \"filter_context\";\n  outcome: \"applied\" | \"skipped\" | \"failed\";\n  status: \"validated\" | \"applied\" | \"rejected\";\n  actor?: string;\n  subsystem: string;\n  namespace: string;\n  sourceSessionKey: string;\n  planHash: string;\n  snapshotRevision: string | number;\n  adapterId?: string;\n  algorithmVersion?: string;\n  selectedCount: number;\n  retainedCount: number;\n  proposedRemovalCount: number;\n  receiptOutcome?: \"applied\" | \"skipped\" | \"failed\";\n  selectorHash: string;\n  snapshotContentHash: string;\n  criterionHash?: string;\n  sourcePromptHash?: string;\n  replacementContentHash?: string;\n  policyDecision?: \"allow\" | \"defer\" | \"deny\";\n  policyRationale?: string;\n  telemetryRecorded?: boolean;\n}\n\nexport interface ActiveContextPreparedReplacement {\n  messageId: string;\n  text: string;\n  contentHash: string;\n  method: \"deterministic\" | \"llm\";\n  modelUsed?: string;\n  fallback: boolean;\n  sourceMessageIds: string[];\n}\n\nexport interface ActiveContextPreparedTransform {\n  status: \"ready\" | \"rejected\" | \"failed\";\n  plan: ActiveContextTransformPlan;\n  replacement?: ActiveContextPreparedReplacement;\n  errorCode?: ActiveContextErrorCode;\n}\n\n// ── hashing ────────────────────────────────────────────────────────────────\n\nfunction sha256Hex(value: string): string {\n  return createHash(\"sha256\").update(value, \"utf8\").digest(\"hex\");\n}\n\n/** Deterministic JSON: sorted keys, so field order never changes a hash. */\nfunction canonicalJson(value: unknown): string {\n  if (value === null || typeof value !== \"object\") return JSON.stringify(value);\n  if (Array.isArray(value)) return `[${value.map(canonicalJson).join(\",\")}]`;\n  const entries = Object.entries(value as Record<string, unknown>)\n    .filter(([, v]) => v !== undefined)\n    .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))\n    .map(([k, v]) => `${JSON.stringify(k)}:${canonicalJson(v)}`);\n  return `{${entries.join(\",\")}}`;\n}\n\nfunction hashSnapshot(snapshot: ActiveContextSnapshot): string {\n  return sha256Hex(\n    canonicalJson({\n      namespace: snapshot.namespace,\n      revision: snapshot.revision,\n      sessionKey: snapshot.sessionKey,\n      messages: snapshot.messages.map((m) => ({\n        contentHash: sha256Hex(m.content),\n        id: m.id,\n        ordinal: m.ordinal,\n        role: m.role,\n      })),\n    }),\n  );\n}\n\n// ── shared validation ──────────────────────────────────────────────────────\n\ninterface PlanContext {\n  caps: ActiveContextCapabilitySet;\n  scope: ActiveContextResolvedScope;\n  snapshotRevision: string | number;\n  byId: Map<string, ActiveContextMessage>;\n  ordered: ActiveContextMessage[];\n  snapshotContentHash: string;\n  generatedAt: string;\n  expiresAt: string;\n}\n\nconst VALID_PHASES: Record<string, true> = { plan: true, prepare: true };\nconst VALID_ROLES: Record<string, true> = {\n  system: true,\n  developer: true,\n  user: true,\n  assistant: true,\n  tool: true,\n};\n\nfunction rejectedPlan(\n  operation: ActiveContextOperation,\n  errorCode: ActiveContextErrorCode,\n  context: PlanContext | null,\n  policy: { decision: \"allow\" | \"deny\"; rationale: string },\n): ActiveContextTransformPlan {\n  const planId = `actx-rejected-${sha256Hex(`${operation}:${errorCode}:${policy.rationale}`).slice(0, 12)}`;\n  return {\n    schemaVersion: ACTIVE_CONTEXT_PLAN_SCHEMA_VERSION,\n    planId,\n    planHash: sha256Hex(canonicalJson({ planId, errorCode, operation })),\n    operation,\n    status: \"rejected\",\n    errorCode,\n    precondition: context\n      ? {\n          principal: context.scope.principal,\n          sessionKey: context.scope.sessionKey,\n          namespace: context.scope.namespace,\n          adapterId: context.scope.adapterId,\n          snapshotRevision: context.snapshotRevision,\n          expiresAt: context.expiresAt,\n        }\n      : {\n          principal: \"\",\n          sessionKey: \"\",\n          namespace: \"\",\n          adapterId: \"\",\n          snapshotRevision: \"\",\n          expiresAt: \"\",\n        },\n    selectedMessageIds: [],\n    retainedMessageIds: [],\n    proposedRemovalIds: [],\n    preserve: { protectedMessageIds: [], minimumRetainedMessages: 0 },\n    inverse: { kind: \"restore-source-message-ids\", sourceMessageIds: [] },\n    retention: {\n      planId,\n      mode: \"adapter-local\",\n      expiresAt: \"\",\n      maxBytes: 0,\n      snapshotContentHash: context?.snapshotContentHash ?? \"\",\n    },\n    provenance: {\n      algorithmVersion: ACTIVE_CONTEXT_ALGORITHM_VERSION,\n      selectorHash: \"\",\n      snapshotContentHash: context?.snapshotContentHash ?? \"\",\n      generatedAt: context?.generatedAt ?? new Date().toISOString(),\n    },\n    policy,\n  };\n}\n\n/** Scope + snapshot validation shared by plan and prepare. Throws PlanReject. */\nclass PlanReject extends Error {\n  constructor(readonly code: ActiveContextErrorCode) {\n    super(code);\n  }\n}\n\nfunction buildContext(\n  request: ActiveContextTransformRequest,\n  deps: ActiveContextTransformDeps,\n): PlanContext {\n  const caps = deps.caps ?? {\n    ...DEFAULT_ACTIVE_CONTEXT_CAPS,\n    activeContextTransforms: true,\n    activeContextLlm: false,\n  };\n  const scope = deps.resolvedScope;\n  if (!scope || !scope.sessionKey || !scope.namespace || !scope.principal || !scope.adapterId) {\n    throw new PlanReject(\"scope_mismatch\");\n  }\n  // Trusted-scope checks run before any ID selection or model work.\n  if (request.snapshot.sessionKey !== scope.sessionKey) throw new PlanReject(\"scope_mismatch\");\n  if (request.snapshot.namespace !== scope.namespace) throw new PlanReject(\"scope_mismatch\");\n\n  const snapshot = request.snapshot;\n  if (snapshot.schemaVersion !== ACTIVE_CONTEXT_SNAPSHOT_SCHEMA_VERSION) {\n    throw new PlanReject(\"invalid_request\");\n  }\n  if (!Array.isArray(snapshot.messages) || snapshot.messages.length === 0) {\n    throw new PlanReject(\"invalid_request\");\n  }\n  const byId = new Map<string, ActiveContextMessage>();\n  let totalChars = 0;\n  for (const message of snapshot.messages) {\n    if (\n      typeof message?.id !== \"string\" ||\n      message.id.length === 0 ||\n      typeof message.content !== \"string\" ||\n      VALID_ROLES[message.role] !== true\n    ) {\n      throw new PlanReject(\"invalid_request\");\n    }\n    if (byId.has(message.id)) throw new PlanReject(\"invalid_request\"); // duplicate IDs\n    byId.set(message.id, message);\n    totalChars += message.content.length;\n  }\n  if (snapshot.messages.length > caps.activeContextMaxMessages) throw new PlanReject(\"invalid_request\");\n  if (totalChars > caps.activeContextMaxSnapshotChars) throw new PlanReject(\"invalid_request\");\n\n  const now = (deps.now ?? (() => new Date()))();\n  const generatedAt = now.toISOString();\n  const expiresAt = new Date(now.getTime() + caps.activeContextPlanTtlMinutes * 60_000).toISOString();\n  return {\n    caps,\n    scope,\n    snapshotRevision: snapshot.revision,\n    byId,\n    ordered: [...snapshot.messages].sort((a, b) => a.ordinal - b.ordinal || a.id.localeCompare(b.id)),\n    snapshotContentHash: hashSnapshot(snapshot),\n    generatedAt,\n    expiresAt,\n  };\n}\n\n/** Resolve the selector to ordered source messages. Exactly one form allowed. */\nfunction resolveSelection(\n  request: ActiveContextTransformRequest,\n  context: PlanContext,\n): ActiveContextMessage[] {\n  const messageIds = request.selector?.messageIds;\n  const span = request.selector?.span;\n  const hasIds = Array.isArray(messageIds) && messageIds.length > 0;\n  if (hasIds === (span !== undefined)) throw new PlanReject(\"invalid_request\"); // both or neither\n\n  if (hasIds && messageIds) {\n    const seen = new Set<string>();\n    const picked: ActiveContextMessage[] = [];\n    for (const id of messageIds) {\n      if (seen.has(id)) throw new PlanReject(\"invalid_request\"); // duplicate IDs\n      seen.add(id);\n      const message = context.byId.get(id);\n      if (!message) throw new PlanReject(\"invalid_request\"); // unknown IDs\n      picked.push(message);\n    }\n    return picked.sort((a, b) => a.ordinal - b.ordinal || a.id.localeCompare(b.id)); // snapshot order\n  }\n\n  if (!span) throw new PlanReject(\"invalid_request\");\n  const { startMessageId, endMessageId } = span;\n  const start = context.byId.get(startMessageId);\n  const end = context.byId.get(endMessageId);\n  if (!start || !end) throw new PlanReject(\"invalid_request\");\n  if (start.ordinal > end.ordinal) throw new PlanReject(\"invalid_request\"); // inverted span\n  const inSpan = context.ordered.filter(\n    (m) => m.ordinal >= start.ordinal && m.ordinal <= end.ordinal, // closed and full\n  );\n  if (inSpan.length === 0) throw new PlanReject(\"invalid_request\"); // empty span\n  return inSpan;\n}\n\nfunction protectedIdSet(\n  request: ActiveContextTransformRequest,\n  context: PlanContext,\n): Set<string> {\n  const protectedIds = new Set<string>();\n  for (const message of context.ordered) {\n    if (PROTECTED_ROLES[message.role] === true || message.protected === true) {\n      protectedIds.add(message.id);\n    }\n  }\n  for (const role of request.preserve?.roles ?? []) {\n    if (PROTECTED_ROLES[role] === true) continue;\n    for (const message of context.ordered) {\n      if (message.role === role) protectedIds.add(message.id);\n    }\n  }\n  for (const id of request.preserve?.messageIds ?? []) {\n    if (context.byId.has(id)) protectedIds.add(id);\n  }\n  return protectedIds;\n}\n\n// ── plan ───────────────────────────────────────────────────────────────────\n\n/**\n * Build one bounded, content-addressed SUMMARY or FILTER plan. Returns a\n * rejected plan (with a stable error code) instead of throwing on bad\n * input — bad input is never hidden behind a no-op. `planHash` binds the\n * scope, revision, and every selected/removal/replacement ID; replay\n * across principal, session, namespace, adapter, or revision therefore\n * fails the adapter's comparisons before retain, apply, or undo.\n */\nexport function planActiveContextTransform(\n  request: ActiveContextTransformRequest,\n  deps: ActiveContextTransformDeps,\n): ActiveContextTransformPlan {\n  const caps =\n    deps.caps ?? { ...DEFAULT_ACTIVE_CONTEXT_CAPS, activeContextTransforms: true, activeContextLlm: false };\n  const policy = evaluateActiveContextTransformPolicy({\n    actionsEnabled: deps.actionsEnabled ?? caps.activeContextTransforms,\n    operation: request.operation,\n  });\n  if (policy.decision === \"deny\") {\n    // feature_disabled — evaluated before scope or selection work.\n    return rejectedPlan(request.operation, \"feature_disabled\", null, policy);\n  }\n  let context: PlanContext | null = null;\n  try {\n    if (request.schemaVersion !== ACTIVE_CONTEXT_SNAPSHOT_SCHEMA_VERSION) {\n      throw new PlanReject(\"invalid_request\");\n    }\n    if (request.operation !== \"SUMMARY\" && request.operation !== \"FILTER\") {\n      throw new PlanReject(\"invalid_request\");\n    }\n    if (VALID_PHASES[request.phase] !== true) throw new PlanReject(\"invalid_request\");\n    context = buildContext(request, deps);\n\n    if (\n      request.expectedRevision !== undefined &&\n      request.expectedRevision !== request.snapshot.revision\n    ) {\n      throw new PlanReject(\"stale_context\");\n    }\n\n    const selected = resolveSelection(request, context);\n    const protectedIds = protectedIdSet(request, context);\n    const removable = selected.filter((m) => !protectedIds.has(m.id));\n    if (removable.length === 0) {\n      throw new PlanReject(\"preserve_conflict\"); // nothing chosen is removable\n    }\n\n    const minimumRetained = Math.max(\n      1,\n      request.preserve?.minRetainedMessages ?? caps.activeContextMinRetainedMessages,\n    );\n    const idList = (messages: ActiveContextMessage[]) => messages.map((m) => m.id);\n    const allIds = idList(context.ordered);\n    const selectorHash = sha256Hex(canonicalJson(request.selector ?? {}));\n\n    if (request.operation === \"FILTER\") {\n      return buildFilterPlan(request, deps, context, {\n        selected,\n        removable,\n        protectedIds,\n        minimumRetained,\n        allIds,\n        selectorHash,\n        policy,\n      });\n    }\n    return buildSummaryPlan(request, deps, context, {\n      selected,\n      removable,\n      protectedIds,\n      minimumRetained,\n      allIds,\n      selectorHash,\n      policy,\n    });\n  } catch (err) {\n    if (err instanceof PlanReject) {\n      return rejectedPlan(request.operation, err.code, context, policy);\n    }\n    throw err;\n  }\n}\n\ninterface SelectionBundle {\n  selected: ActiveContextMessage[];\n  removable: ActiveContextMessage[];\n  protectedIds: Set<string>;\n  minimumRetained: number;\n  allIds: string[];\n  selectorHash: string;\n  policy: { decision: \"allow\" | \"deny\"; rationale: string };\n}\n\nfunction finalizePlan(\n  operation: ActiveContextOperation,\n  context: PlanContext,\n  bundle: SelectionBundle,\n  proposedRemovalIds: string[],\n  extras: {\n    scoreRows?: ActiveContextScoreRow[];\n    replacement?: ActiveContextPlanReplacement;\n    criterionHash?: string;\n    sourcePromptHash?: string;\n  },\n): ActiveContextTransformPlan {\n  const retainedIds = bundle.allIds.filter((id) => !proposedRemovalIds.includes(id));\n  if (retainedIds.length < bundle.minimumRetained) {\n    throw new PlanReject(\"preserve_conflict\"); // below keep floor / no safe message left\n  }\n  const sourceMessageIds = bundle.removable.map((m) => m.id);\n  const precondition = {\n    principal: context.scope.principal,\n    sessionKey: context.scope.sessionKey,\n    namespace: context.scope.namespace,\n    adapterId: context.scope.adapterId,\n    snapshotRevision: context.snapshotRevision,\n    expiresAt: context.expiresAt,\n  };\n  const provenance = {\n    algorithmVersion: ACTIVE_CONTEXT_ALGORITHM_VERSION,\n    selectorHash: bundle.selectorHash,\n    snapshotContentHash: context.snapshotContentHash,\n    ...(extras.criterionHash ? { criterionHash: extras.criterionHash } : {}),\n    ...(extras.sourcePromptHash ? { sourcePromptHash: extras.sourcePromptHash } : {}),\n    generatedAt: context.generatedAt,\n  };\n  const planId = `actx-${sha256Hex(\n    canonicalJson({\n      adapterId: precondition.adapterId,\n      criterionHash: extras.criterionHash,\n      namespace: precondition.namespace,\n      operation,\n      principal: precondition.principal,\n      selectorHash: bundle.selectorHash,\n      sessionKey: precondition.sessionKey,\n      snapshotContentHash: context.snapshotContentHash,\n    }),\n  ).slice(0, 16)}`;\n  const planBody = {\n    operation,\n    planId,\n    precondition,\n    proposedRemovalIds,\n    replacementMessageId: extras.replacement?.messageId,\n    replacementSourceIds: extras.replacement?.sourceMessageIds,\n    retainedIds,\n    selectedIds: bundle.selected.map((m) => m.id),\n  };\n  const planHash = sha256Hex(canonicalJson(planBody));\n  return {\n    schemaVersion: ACTIVE_CONTEXT_PLAN_SCHEMA_VERSION,\n    planId,\n    planHash,\n    operation,\n    status: \"ready\",\n    precondition,\n    selectedMessageIds: planBody.selectedIds,\n    retainedMessageIds: retainedIds,\n    proposedRemovalIds,\n    ...(extras.scoreRows ? { scoreRows: extras.scoreRows } : {}),\n    ...(extras.replacement ? { replacement: extras.replacement } : {}),\n    preserve: {\n      protectedMessageIds: [...bundle.protectedIds],\n      minimumRetainedMessages: bundle.minimumRetained,\n    },\n    inverse: {\n      kind: \"restore-source-message-ids\",\n      sourceMessageIds,\n      ...(extras.replacement ? { removeReplacementMessageId: extras.replacement.messageId } : {}),\n      expectedAppliedPlanHash: planHash,\n    },\n    retention: {\n      planId,\n      mode: \"adapter-local\",\n      expiresAt: context.expiresAt,\n      maxBytes: context.caps.activeContextRetentionMaxBytes,\n      snapshotContentHash: context.snapshotContentHash,\n    },\n    provenance,\n    policy: bundle.policy,\n  };\n}\n\nfunction buildFilterPlan(\n  request: ActiveContextTransformRequest,\n  deps: ActiveContextTransformDeps,\n  context: PlanContext,\n  bundle: SelectionBundle,\n): ActiveContextTransformPlan {\n  const filter = request.filter;\n  if (!filter || typeof filter.keepCriterion !== \"string\" || filter.keepCriterion.length === 0) {\n    throw new PlanReject(\"invalid_request\"); // Filter needs keepCriterion\n  }\n  const threshold = filter.threshold;\n  if (typeof threshold !== \"number\" || !Number.isFinite(threshold) || threshold < 0 || threshold > 1) {\n    throw new PlanReject(\"invalid_request\"); // fixed limit in [0,1], never defaulted\n  }\n  if (!deps.scoreMessage) {\n    throw new PlanReject(\"filter_unavailable\"); // Filter needs a score function\n  }\n\n  const scoreRows: ActiveContextScoreRow[] = [];\n  const removalIds: string[] = [];\n  for (const message of bundle.removable) {\n    const score = deps.scoreMessage(message);\n    if (typeof score !== \"number\" || !Number.isFinite(score) || score < 0 || score > 1) {\n      throw new PlanReject(\"filter_unavailable\"); // missing / NaN / out of range\n    }\n    const decision = score >= threshold ? \"keep\" : \"drop\"; // fixed keep rule\n    scoreRows.push({ messageId: message.id, score, decision });\n    if (decision === \"drop\") removalIds.push(message.id);\n  }\n\n  return finalizePlan(\"FILTER\", context, bundle, removalIds, {\n    scoreRows,\n    criterionHash: sha256Hex(filter.keepCriterion), // hash, never the rule text\n    sourcePromptHash: request.sourcePromptHash,\n  });\n}\n\nfunction buildSummaryPlan(\n  request: ActiveContextTransformRequest,\n  deps: ActiveContextTransformDeps,\n  context: PlanContext,\n  bundle: SelectionBundle,\n): ActiveContextTransformPlan {\n  const requested = request.summary?.method ?? \"deterministic\";\n  const llmEnabled = context.caps.activeContextLlm;\n  let method: \"deterministic\" | \"llm\";\n  let fallbackPolicy: \"allowed\" | \"none\";\n  if (requested === \"deterministic\") {\n    method = \"deterministic\";\n    fallbackPolicy = \"none\";\n  } else if (requested === \"llm\") {\n    if (!llmEnabled) throw new PlanReject(\"unsupported\"); // explicit llm behind a closed gate\n    method = \"llm\";\n    fallbackPolicy = \"none\"; // fallback only in auto mode\n  } else {\n    // auto: prefer the LLM seam when allowed; deterministic otherwise.\n    method = llmEnabled && deps.summarize ? \"llm\" : \"deterministic\";\n    fallbackPolicy = method === \"llm\" ? \"allowed\" : \"none\";\n  }\n\n  const requestedTokens = request.summary?.targetTokens ?? context.caps.activeContextSummaryMaxTokens;\n  if (\n    typeof requestedTokens !== \"number\" ||\n    !Number.isFinite(requestedTokens) ||\n    requestedTokens <= 0 ||\n    requestedTokens > context.caps.activeContextSummaryMaxTokens\n  ) {\n    throw new PlanReject(\"invalid_request\");\n  }\n  const targetTokens = Math.floor(requestedTokens);\n\n  // planId is derived inside finalizePlan; the replacement ID must be stable\n  // relative to it, so derive from the same stable inputs.\n  const replacementSeed = sha256Hex(\n    canonicalJson({\n      operation: \"SUMMARY\",\n      selectorHash: bundle.selectorHash,\n      snapshotContentHash: context.snapshotContentHash,\n      sessionKey: context.scope.sessionKey,\n      namespace: context.scope.namespace,\n      principal: context.scope.principal,\n      adapterId: context.scope.adapterId,\n    }),\n  );\n  const replacement: ActiveContextPlanReplacement = {\n    messageId: `actxr-${replacementSeed.slice(0, 16)}`,\n    sourceMessageIds: bundle.removable.map((m) => m.id),\n    method,\n    fallbackPolicy,\n    targetTokens,\n  };\n\n  const plan = finalizePlan(\"SUMMARY\", context, bundle, [...replacement.sourceMessageIds], {\n    replacement,\n    sourcePromptHash: request.sourcePromptHash,\n  });\n  return plan;\n}\n\n// ── prepare ────────────────────────────────────────────────────────────────\n\n/**\n * Produce the SUMMARY replacement text for a ready plan through the pure\n * summary seam (context-summary.ts). Never calls `LcmSummarizer`. FILTER\n * plans pass through unchanged after revalidation. The caller must supply\n * the same snapshot the plan was built from; a changed transcript fence\n * rejects with `plan_conflict`.\n */\nexport async function prepareActiveContextTransform(\n  plan: ActiveContextTransformPlan,\n  deps: ActiveContextTransformDeps & { snapshot: ActiveContextSnapshot },\n): Promise<ActiveContextPreparedTransform> {\n  if (plan.status !== \"ready\") {\n    return { status: \"rejected\", plan, errorCode: plan.errorCode ?? \"invalid_request\" };\n  }\n\n  const scope = deps.resolvedScope;\n  const p = plan.precondition;\n  if (\n    !scope ||\n    scope.principal !== p.principal ||\n    scope.sessionKey !== p.sessionKey ||\n    scope.namespace !== p.namespace ||\n    scope.adapterId !== p.adapterId\n  ) {\n    return { status: \"rejected\", plan, errorCode: \"scope_mismatch\" };\n  }\n  const now = deps.now?.() ?? new Date();\n  if (now.getTime() >= new Date(plan.retention.expiresAt).getTime()) {\n    return { status: \"rejected\", plan, errorCode: \"stale_context\" }; // expired plan\n  }\n  if (deps.snapshot.sessionKey !== p.sessionKey || deps.snapshot.namespace !== p.namespace) {\n    return { status: \"rejected\", plan, errorCode: \"scope_mismatch\" };\n  }\n  const fenceHash = hashSnapshot(deps.snapshot);\n  if (fenceHash !== plan.provenance.snapshotContentHash) {\n    return { status: \"rejected\", plan, errorCode: \"plan_conflict\" }; // changed fence\n  }\n\n  if (plan.operation === \"FILTER\") {\n    return { status: \"ready\", plan };\n  }\n\n  const replacement = plan.replacement;\n  if (!replacement) {\n    return { status: \"failed\", plan, errorCode: \"invalid_request\" };\n  }\n  const byId = new Map(deps.snapshot.messages.map((m) => [m.id, m] as const));\n  const sourceText = replacement.sourceMessageIds\n    .map((id) => byId.get(id))\n    .filter((m): m is ActiveContextMessage => m !== undefined)\n    .sort((a, b) => a.ordinal - b.ordinal || a.id.localeCompare(b.id))\n    .map((m) => m.content)\n    .join(\"\\n\\n\"); // exact order, exact text\n\n  const method =\n    replacement.method === \"deterministic\"\n      ? \"deterministic\"\n      : replacement.fallbackPolicy === \"allowed\"\n        ? \"auto\"\n        : \"llm\";\n  try {\n    const result = await summarizeContextPure(sourceText, replacement.targetTokens, method, {\n      llm: deps.summarize,\n      deterministicMaxTokens: deps.caps?.activeContextSummaryMaxTokens ?? replacement.targetTokens,\n    });\n    if (result.text.trim().length === 0) {\n      return { status: \"failed\", plan, errorCode: \"summary_unavailable\" }; // bad model text\n    }\n    return {\n      status: \"ready\",\n      plan,\n      replacement: {\n        messageId: replacement.messageId,\n        text: result.text,\n        contentHash: sha256Hex(result.text),\n        method: result.method,\n        ...(result.modelUsed ? { modelUsed: result.modelUsed } : {}),\n        fallback: result.fallback,\n        sourceMessageIds: replacement.sourceMessageIds,\n      },\n    };\n  } catch (err) {\n    if (err instanceof ContextSummaryUnavailableError) {\n      return { status: \"failed\", plan, errorCode: \"summary_unavailable\" };\n    }\n    throw err;\n  }\n}\n\n// ── receipts and telemetry ─────────────────────────────────────────────────\n\n/**\n * Validate a host receipt against the plan's bindings and append one\n * context record to the ledger. Order of checks: scope → hash → revision →\n * shape. One-time use is enforced by the adapter's persisted apply/undo\n * markers (retention store); this recorder appends only. A ledger write\n * failure returns `recorded: false` and never fabricates an apply.\n */\nexport async function recordActiveContextApplyReceipt(\n  plan: ActiveContextTransformPlan,\n  receipt: ActiveContextApplyReceipt,\n  trustedScope: ActiveContextResolvedScope,\n  recorder: {\n    append(record: ContextTransformTelemetryRecord): Promise<boolean>;\n  },\n): Promise<{ recorded: boolean; event: ContextTransformTelemetryRecord }> {\n  const p = plan.precondition;\n  const scopeMatch =\n    trustedScope.principal === p.principal &&\n    trustedScope.sessionKey === p.sessionKey &&\n    trustedScope.namespace === p.namespace &&\n    trustedScope.adapterId === p.adapterId &&\n    receipt.adapterId === trustedScope.adapterId;\n  if (!scopeMatch) throw new PlanReject(\"scope_mismatch\");\n  if (receipt.planHash !== plan.planHash) throw new PlanReject(\"plan_conflict\"); // bad hash\n  if (receipt.hostRevisionBefore === undefined || receipt.hostRevisionBefore !== p.snapshotRevision) {\n    throw new PlanReject(\"stale_context\"); // old plan / bad revision\n  }\n  const shapeOk =\n    receipt.schemaVersion === ACTIVE_CONTEXT_RECEIPT_SCHEMA_VERSION &&\n    receipt.planId === plan.planId &&\n    (receipt.outcome === \"applied\" || receipt.outcome === \"skipped\" || receipt.outcome === \"failed\") &&\n    typeof receipt.appliedAt === \"string\" &&\n    !Number.isNaN(Date.parse(receipt.appliedAt));\n  if (!shapeOk) throw new PlanReject(\"invalid_receipt\");\n\n  const event: ContextTransformTelemetryRecord = {\n    recordKind: \"context_transform\",\n    schemaVersion: ACTIVE_CONTEXT_RECORD_SCHEMA_VERSION,\n    timestamp: receipt.appliedAt,\n    actionId: plan.planId,\n    action: plan.operation === \"SUMMARY\" ? \"summarize_context\" : \"filter_context\",\n    outcome: receipt.outcome,\n    status: receipt.outcome === \"applied\" ? \"applied\" : receipt.outcome === \"failed\" ? \"rejected\" : \"validated\",\n    subsystem: \"active-context\",\n    namespace: p.namespace,\n    sourceSessionKey: p.sessionKey,\n    planHash: plan.planHash,\n    snapshotRevision: p.snapshotRevision,\n    adapterId: receipt.adapterId,\n    algorithmVersion: plan.provenance.algorithmVersion,\n    selectedCount: plan.selectedMessageIds.length,\n    retainedCount: plan.retainedMessageIds.length,\n    proposedRemovalCount: plan.proposedRemovalIds.length,\n    receiptOutcome: receipt.outcome,\n    selectorHash: plan.provenance.selectorHash,\n    snapshotContentHash: plan.provenance.snapshotContentHash,\n    ...(plan.provenance.criterionHash ? { criterionHash: plan.provenance.criterionHash } : {}),\n    ...(plan.provenance.sourcePromptHash ? { sourcePromptHash: plan.provenance.sourcePromptHash } : {}),\n    policyDecision: plan.policy.decision,\n    policyRationale: plan.policy.rationale,\n  };\n\n  let recorded = false;\n  try {\n    recorded = await recorder.append(event);\n  } catch {\n    recorded = false; // ledger errors surface in the result, never as an apply\n  }\n  return { recorded, event: { ...event, telemetryRecorded: recorded } };\n}\n\n/**\n * Build a plan-stage ledger record (plan produced, rejected, skipped, or\n * failed before host apply). Receipt-backed applies use\n * {@link recordActiveContextApplyReceipt} instead.\n */\nexport function buildContextTransformPlanEvent(\n  plan: ActiveContextTransformPlan,\n  outcome: \"skipped\" | \"failed\",\n): ContextTransformTelemetryRecord {\n  return {\n    recordKind: \"context_transform\",\n    schemaVersion: ACTIVE_CONTEXT_RECORD_SCHEMA_VERSION,\n    timestamp: plan.provenance.generatedAt,\n    actionId: plan.planId,\n    action: plan.operation === \"SUMMARY\" ? \"summarize_context\" : \"filter_context\",\n    outcome,\n    status: plan.status === \"ready\" ? \"validated\" : \"rejected\",\n    subsystem: \"active-context\",\n    namespace: plan.precondition.namespace,\n    sourceSessionKey: plan.precondition.sessionKey,\n    planHash: plan.planHash,\n    snapshotRevision: plan.precondition.snapshotRevision,\n    algorithmVersion: plan.provenance.algorithmVersion,\n    selectedCount: plan.selectedMessageIds.length,\n    retainedCount: plan.retainedMessageIds.length,\n    proposedRemovalCount: plan.proposedRemovalIds.length,\n    selectorHash: plan.provenance.selectorHash,\n    snapshotContentHash: plan.provenance.snapshotContentHash,\n    ...(plan.provenance.criterionHash ? { criterionHash: plan.provenance.criterionHash } : {}),\n    ...(plan.provenance.sourcePromptHash ? { sourcePromptHash: plan.provenance.sourcePromptHash } : {}),\n    policyDecision: plan.policy.decision,\n    policyRationale: plan.policy.rationale,\n    telemetryRecorded: true,\n  };\n}\n"],"mappings":";;;;;;;;;;;;AAgBA,SAAS,kBAAkB;AASpB,IAAM,mCAAmC;AACzC,IAAM,yCAAyC;AAC/C,IAAM,qCAAqC;AAC3C,IAAM,wCAAwC;AAC9C,IAAM,uCAAuC;AAsBpD,IAAM,kBAAwC,EAAE,QAAQ,MAAM,WAAW,KAAK;AA2N9E,SAAS,UAAU,OAAuB;AACxC,SAAO,WAAW,QAAQ,EAAE,OAAO,OAAO,MAAM,EAAE,OAAO,KAAK;AAChE;AAGA,SAAS,cAAc,OAAwB;AAC7C,MAAI,UAAU,QAAQ,OAAO,UAAU,SAAU,QAAO,KAAK,UAAU,KAAK;AAC5E,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,IAAI,MAAM,IAAI,aAAa,EAAE,KAAK,GAAG,CAAC;AACvE,QAAM,UAAU,OAAO,QAAQ,KAAgC,EAC5D,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,MAAM,MAAS,EACjC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAO,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAE,EAC/C,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,KAAK,UAAU,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,EAAE;AAC7D,SAAO,IAAI,QAAQ,KAAK,GAAG,CAAC;AAC9B;AAEA,SAAS,aAAa,UAAyC;AAC7D,SAAO;AAAA,IACL,cAAc;AAAA,MACZ,WAAW,SAAS;AAAA,MACpB,UAAU,SAAS;AAAA,MACnB,YAAY,SAAS;AAAA,MACrB,UAAU,SAAS,SAAS,IAAI,CAAC,OAAO;AAAA,QACtC,aAAa,UAAU,EAAE,OAAO;AAAA,QAChC,IAAI,EAAE;AAAA,QACN,SAAS,EAAE;AAAA,QACX,MAAM,EAAE;AAAA,MACV,EAAE;AAAA,IACJ,CAAC;AAAA,EACH;AACF;AAeA,IAAM,eAAqC,EAAE,MAAM,MAAM,SAAS,KAAK;AACvE,IAAM,cAAoC;AAAA,EACxC,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,MAAM;AAAA,EACN,WAAW;AAAA,EACX,MAAM;AACR;AAEA,SAAS,aACP,WACA,WACA,SACA,QAC4B;AAC5B,QAAM,SAAS,iBAAiB,UAAU,GAAG,SAAS,IAAI,SAAS,IAAI,OAAO,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC;AACvG,SAAO;AAAA,IACL,eAAe;AAAA,IACf;AAAA,IACA,UAAU,UAAU,cAAc,EAAE,QAAQ,WAAW,UAAU,CAAC,CAAC;AAAA,IACnE;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,IACA,cAAc,UACV;AAAA,MACE,WAAW,QAAQ,MAAM;AAAA,MACzB,YAAY,QAAQ,MAAM;AAAA,MAC1B,WAAW,QAAQ,MAAM;AAAA,MACzB,WAAW,QAAQ,MAAM;AAAA,MACzB,kBAAkB,QAAQ;AAAA,MAC1B,WAAW,QAAQ;AAAA,IACrB,IACA;AAAA,MACE,WAAW;AAAA,MACX,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,WAAW;AAAA,MACX,kBAAkB;AAAA,MAClB,WAAW;AAAA,IACb;AAAA,IACJ,oBAAoB,CAAC;AAAA,IACrB,oBAAoB,CAAC;AAAA,IACrB,oBAAoB,CAAC;AAAA,IACrB,UAAU,EAAE,qBAAqB,CAAC,GAAG,yBAAyB,EAAE;AAAA,IAChE,SAAS,EAAE,MAAM,8BAA8B,kBAAkB,CAAC,EAAE;AAAA,IACpE,WAAW;AAAA,MACT;AAAA,MACA,MAAM;AAAA,MACN,WAAW;AAAA,MACX,UAAU;AAAA,MACV,qBAAqB,SAAS,uBAAuB;AAAA,IACvD;AAAA,IACA,YAAY;AAAA,MACV,kBAAkB;AAAA,MAClB,cAAc;AAAA,MACd,qBAAqB,SAAS,uBAAuB;AAAA,MACrD,aAAa,SAAS,gBAAe,oBAAI,KAAK,GAAE,YAAY;AAAA,IAC9D;AAAA,IACA;AAAA,EACF;AACF;AAGA,IAAM,aAAN,cAAyB,MAAM;AAAA,EAC7B,YAAqB,MAA8B;AACjD,UAAM,IAAI;AADS;AAAA,EAErB;AAAA,EAFqB;AAGvB;AAEA,SAAS,aACP,SACA,MACa;AACb,QAAM,OAAO,KAAK,QAAQ;AAAA,IACxB,GAAG;AAAA,IACH,yBAAyB;AAAA,IACzB,kBAAkB;AAAA,EACpB;AACA,QAAM,QAAQ,KAAK;AACnB,MAAI,CAAC,SAAS,CAAC,MAAM,cAAc,CAAC,MAAM,aAAa,CAAC,MAAM,aAAa,CAAC,MAAM,WAAW;AAC3F,UAAM,IAAI,WAAW,gBAAgB;AAAA,EACvC;AAEA,MAAI,QAAQ,SAAS,eAAe,MAAM,WAAY,OAAM,IAAI,WAAW,gBAAgB;AAC3F,MAAI,QAAQ,SAAS,cAAc,MAAM,UAAW,OAAM,IAAI,WAAW,gBAAgB;AAEzF,QAAM,WAAW,QAAQ;AACzB,MAAI,SAAS,kBAAkB,wCAAwC;AACrE,UAAM,IAAI,WAAW,iBAAiB;AAAA,EACxC;AACA,MAAI,CAAC,MAAM,QAAQ,SAAS,QAAQ,KAAK,SAAS,SAAS,WAAW,GAAG;AACvE,UAAM,IAAI,WAAW,iBAAiB;AAAA,EACxC;AACA,QAAM,OAAO,oBAAI,IAAkC;AACnD,MAAI,aAAa;AACjB,aAAW,WAAW,SAAS,UAAU;AACvC,QACE,OAAO,SAAS,OAAO,YACvB,QAAQ,GAAG,WAAW,KACtB,OAAO,QAAQ,YAAY,YAC3B,YAAY,QAAQ,IAAI,MAAM,MAC9B;AACA,YAAM,IAAI,WAAW,iBAAiB;AAAA,IACxC;AACA,QAAI,KAAK,IAAI,QAAQ,EAAE,EAAG,OAAM,IAAI,WAAW,iBAAiB;AAChE,SAAK,IAAI,QAAQ,IAAI,OAAO;AAC5B,kBAAc,QAAQ,QAAQ;AAAA,EAChC;AACA,MAAI,SAAS,SAAS,SAAS,KAAK,yBAA0B,OAAM,IAAI,WAAW,iBAAiB;AACpG,MAAI,aAAa,KAAK,8BAA+B,OAAM,IAAI,WAAW,iBAAiB;AAE3F,QAAM,OAAO,KAAK,QAAQ,MAAM,oBAAI,KAAK,IAAI;AAC7C,QAAM,cAAc,IAAI,YAAY;AACpC,QAAM,YAAY,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,8BAA8B,GAAM,EAAE,YAAY;AAClG,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,kBAAkB,SAAS;AAAA,IAC3B;AAAA,IACA,SAAS,CAAC,GAAG,SAAS,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,cAAc,EAAE,EAAE,CAAC;AAAA,IAChG,qBAAqB,aAAa,QAAQ;AAAA,IAC1C;AAAA,IACA;AAAA,EACF;AACF;AAGA,SAAS,iBACP,SACA,SACwB;AACxB,QAAM,aAAa,QAAQ,UAAU;AACrC,QAAM,OAAO,QAAQ,UAAU;AAC/B,QAAM,SAAS,MAAM,QAAQ,UAAU,KAAK,WAAW,SAAS;AAChE,MAAI,YAAY,SAAS,QAAY,OAAM,IAAI,WAAW,iBAAiB;AAE3E,MAAI,UAAU,YAAY;AACxB,UAAM,OAAO,oBAAI,IAAY;AAC7B,UAAM,SAAiC,CAAC;AACxC,eAAW,MAAM,YAAY;AAC3B,UAAI,KAAK,IAAI,EAAE,EAAG,OAAM,IAAI,WAAW,iBAAiB;AACxD,WAAK,IAAI,EAAE;AACX,YAAM,UAAU,QAAQ,KAAK,IAAI,EAAE;AACnC,UAAI,CAAC,QAAS,OAAM,IAAI,WAAW,iBAAiB;AACpD,aAAO,KAAK,OAAO;AAAA,IACrB;AACA,WAAO,OAAO,KAAK,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,cAAc,EAAE,EAAE,CAAC;AAAA,EAChF;AAEA,MAAI,CAAC,KAAM,OAAM,IAAI,WAAW,iBAAiB;AACjD,QAAM,EAAE,gBAAgB,aAAa,IAAI;AACzC,QAAM,QAAQ,QAAQ,KAAK,IAAI,cAAc;AAC7C,QAAM,MAAM,QAAQ,KAAK,IAAI,YAAY;AACzC,MAAI,CAAC,SAAS,CAAC,IAAK,OAAM,IAAI,WAAW,iBAAiB;AAC1D,MAAI,MAAM,UAAU,IAAI,QAAS,OAAM,IAAI,WAAW,iBAAiB;AACvE,QAAM,SAAS,QAAQ,QAAQ;AAAA,IAC7B,CAAC,MAAM,EAAE,WAAW,MAAM,WAAW,EAAE,WAAW,IAAI;AAAA;AAAA,EACxD;AACA,MAAI,OAAO,WAAW,EAAG,OAAM,IAAI,WAAW,iBAAiB;AAC/D,SAAO;AACT;AAEA,SAAS,eACP,SACA,SACa;AACb,QAAM,eAAe,oBAAI,IAAY;AACrC,aAAW,WAAW,QAAQ,SAAS;AACrC,QAAI,gBAAgB,QAAQ,IAAI,MAAM,QAAQ,QAAQ,cAAc,MAAM;AACxE,mBAAa,IAAI,QAAQ,EAAE;AAAA,IAC7B;AAAA,EACF;AACA,aAAW,QAAQ,QAAQ,UAAU,SAAS,CAAC,GAAG;AAChD,QAAI,gBAAgB,IAAI,MAAM,KAAM;AACpC,eAAW,WAAW,QAAQ,SAAS;AACrC,UAAI,QAAQ,SAAS,KAAM,cAAa,IAAI,QAAQ,EAAE;AAAA,IACxD;AAAA,EACF;AACA,aAAW,MAAM,QAAQ,UAAU,cAAc,CAAC,GAAG;AACnD,QAAI,QAAQ,KAAK,IAAI,EAAE,EAAG,cAAa,IAAI,EAAE;AAAA,EAC/C;AACA,SAAO;AACT;AAYO,SAAS,2BACd,SACA,MAC4B;AAC5B,QAAM,OACJ,KAAK,QAAQ,EAAE,GAAG,6BAA6B,yBAAyB,MAAM,kBAAkB,MAAM;AACxG,QAAM,SAAS,qCAAqC;AAAA,IAClD,gBAAgB,KAAK,kBAAkB,KAAK;AAAA,IAC5C,WAAW,QAAQ;AAAA,EACrB,CAAC;AACD,MAAI,OAAO,aAAa,QAAQ;AAE9B,WAAO,aAAa,QAAQ,WAAW,oBAAoB,MAAM,MAAM;AAAA,EACzE;AACA,MAAI,UAA8B;AAClC,MAAI;AACF,QAAI,QAAQ,kBAAkB,wCAAwC;AACpE,YAAM,IAAI,WAAW,iBAAiB;AAAA,IACxC;AACA,QAAI,QAAQ,cAAc,aAAa,QAAQ,cAAc,UAAU;AACrE,YAAM,IAAI,WAAW,iBAAiB;AAAA,IACxC;AACA,QAAI,aAAa,QAAQ,KAAK,MAAM,KAAM,OAAM,IAAI,WAAW,iBAAiB;AAChF,cAAU,aAAa,SAAS,IAAI;AAEpC,QACE,QAAQ,qBAAqB,UAC7B,QAAQ,qBAAqB,QAAQ,SAAS,UAC9C;AACA,YAAM,IAAI,WAAW,eAAe;AAAA,IACtC;AAEA,UAAM,WAAW,iBAAiB,SAAS,OAAO;AAClD,UAAM,eAAe,eAAe,SAAS,OAAO;AACpD,UAAM,YAAY,SAAS,OAAO,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;AAChE,QAAI,UAAU,WAAW,GAAG;AAC1B,YAAM,IAAI,WAAW,mBAAmB;AAAA,IAC1C;AAEA,UAAM,kBAAkB,KAAK;AAAA,MAC3B;AAAA,MACA,QAAQ,UAAU,uBAAuB,KAAK;AAAA,IAChD;AACA,UAAM,SAAS,CAAC,aAAqC,SAAS,IAAI,CAAC,MAAM,EAAE,EAAE;AAC7E,UAAM,SAAS,OAAO,QAAQ,OAAO;AACrC,UAAM,eAAe,UAAU,cAAc,QAAQ,YAAY,CAAC,CAAC,CAAC;AAEpE,QAAI,QAAQ,cAAc,UAAU;AAClC,aAAO,gBAAgB,SAAS,MAAM,SAAS;AAAA,QAC7C;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AACA,WAAO,iBAAiB,SAAS,MAAM,SAAS;AAAA,MAC9C;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,eAAe,YAAY;AAC7B,aAAO,aAAa,QAAQ,WAAW,IAAI,MAAM,SAAS,MAAM;AAAA,IAClE;AACA,UAAM;AAAA,EACR;AACF;AAYA,SAAS,aACP,WACA,SACA,QACA,oBACA,QAM4B;AAC5B,QAAM,cAAc,OAAO,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,SAAS,EAAE,CAAC;AACjF,MAAI,YAAY,SAAS,OAAO,iBAAiB;AAC/C,UAAM,IAAI,WAAW,mBAAmB;AAAA,EAC1C;AACA,QAAM,mBAAmB,OAAO,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE;AACzD,QAAM,eAAe;AAAA,IACnB,WAAW,QAAQ,MAAM;AAAA,IACzB,YAAY,QAAQ,MAAM;AAAA,IAC1B,WAAW,QAAQ,MAAM;AAAA,IACzB,WAAW,QAAQ,MAAM;AAAA,IACzB,kBAAkB,QAAQ;AAAA,IAC1B,WAAW,QAAQ;AAAA,EACrB;AACA,QAAM,aAAa;AAAA,IACjB,kBAAkB;AAAA,IAClB,cAAc,OAAO;AAAA,IACrB,qBAAqB,QAAQ;AAAA,IAC7B,GAAI,OAAO,gBAAgB,EAAE,eAAe,OAAO,cAAc,IAAI,CAAC;AAAA,IACtE,GAAI,OAAO,mBAAmB,EAAE,kBAAkB,OAAO,iBAAiB,IAAI,CAAC;AAAA,IAC/E,aAAa,QAAQ;AAAA,EACvB;AACA,QAAM,SAAS,QAAQ;AAAA,IACrB,cAAc;AAAA,MACZ,WAAW,aAAa;AAAA,MACxB,eAAe,OAAO;AAAA,MACtB,WAAW,aAAa;AAAA,MACxB;AAAA,MACA,WAAW,aAAa;AAAA,MACxB,cAAc,OAAO;AAAA,MACrB,YAAY,aAAa;AAAA,MACzB,qBAAqB,QAAQ;AAAA,IAC/B,CAAC;AAAA,EACH,EAAE,MAAM,GAAG,EAAE,CAAC;AACd,QAAM,WAAW;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,sBAAsB,OAAO,aAAa;AAAA,IAC1C,sBAAsB,OAAO,aAAa;AAAA,IAC1C;AAAA,IACA,aAAa,OAAO,SAAS,IAAI,CAAC,MAAM,EAAE,EAAE;AAAA,EAC9C;AACA,QAAM,WAAW,UAAU,cAAc,QAAQ,CAAC;AAClD,SAAO;AAAA,IACL,eAAe;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,IACA,oBAAoB,SAAS;AAAA,IAC7B,oBAAoB;AAAA,IACpB;AAAA,IACA,GAAI,OAAO,YAAY,EAAE,WAAW,OAAO,UAAU,IAAI,CAAC;AAAA,IAC1D,GAAI,OAAO,cAAc,EAAE,aAAa,OAAO,YAAY,IAAI,CAAC;AAAA,IAChE,UAAU;AAAA,MACR,qBAAqB,CAAC,GAAG,OAAO,YAAY;AAAA,MAC5C,yBAAyB,OAAO;AAAA,IAClC;AAAA,IACA,SAAS;AAAA,MACP,MAAM;AAAA,MACN;AAAA,MACA,GAAI,OAAO,cAAc,EAAE,4BAA4B,OAAO,YAAY,UAAU,IAAI,CAAC;AAAA,MACzF,yBAAyB;AAAA,IAC3B;AAAA,IACA,WAAW;AAAA,MACT;AAAA,MACA,MAAM;AAAA,MACN,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ,KAAK;AAAA,MACvB,qBAAqB,QAAQ;AAAA,IAC/B;AAAA,IACA;AAAA,IACA,QAAQ,OAAO;AAAA,EACjB;AACF;AAEA,SAAS,gBACP,SACA,MACA,SACA,QAC4B;AAC5B,QAAM,SAAS,QAAQ;AACvB,MAAI,CAAC,UAAU,OAAO,OAAO,kBAAkB,YAAY,OAAO,cAAc,WAAW,GAAG;AAC5F,UAAM,IAAI,WAAW,iBAAiB;AAAA,EACxC;AACA,QAAM,YAAY,OAAO;AACzB,MAAI,OAAO,cAAc,YAAY,CAAC,OAAO,SAAS,SAAS,KAAK,YAAY,KAAK,YAAY,GAAG;AAClG,UAAM,IAAI,WAAW,iBAAiB;AAAA,EACxC;AACA,MAAI,CAAC,KAAK,cAAc;AACtB,UAAM,IAAI,WAAW,oBAAoB;AAAA,EAC3C;AAEA,QAAM,YAAqC,CAAC;AAC5C,QAAM,aAAuB,CAAC;AAC9B,aAAW,WAAW,OAAO,WAAW;AACtC,UAAM,QAAQ,KAAK,aAAa,OAAO;AACvC,QAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,KAAK,QAAQ,KAAK,QAAQ,GAAG;AAClF,YAAM,IAAI,WAAW,oBAAoB;AAAA,IAC3C;AACA,UAAM,WAAW,SAAS,YAAY,SAAS;AAC/C,cAAU,KAAK,EAAE,WAAW,QAAQ,IAAI,OAAO,SAAS,CAAC;AACzD,QAAI,aAAa,OAAQ,YAAW,KAAK,QAAQ,EAAE;AAAA,EACrD;AAEA,SAAO,aAAa,UAAU,SAAS,QAAQ,YAAY;AAAA,IACzD;AAAA,IACA,eAAe,UAAU,OAAO,aAAa;AAAA;AAAA,IAC7C,kBAAkB,QAAQ;AAAA,EAC5B,CAAC;AACH;AAEA,SAAS,iBACP,SACA,MACA,SACA,QAC4B;AAC5B,QAAM,YAAY,QAAQ,SAAS,UAAU;AAC7C,QAAM,aAAa,QAAQ,KAAK;AAChC,MAAI;AACJ,MAAI;AACJ,MAAI,cAAc,iBAAiB;AACjC,aAAS;AACT,qBAAiB;AAAA,EACnB,WAAW,cAAc,OAAO;AAC9B,QAAI,CAAC,WAAY,OAAM,IAAI,WAAW,aAAa;AACnD,aAAS;AACT,qBAAiB;AAAA,EACnB,OAAO;AAEL,aAAS,cAAc,KAAK,YAAY,QAAQ;AAChD,qBAAiB,WAAW,QAAQ,YAAY;AAAA,EAClD;AAEA,QAAM,kBAAkB,QAAQ,SAAS,gBAAgB,QAAQ,KAAK;AACtE,MACE,OAAO,oBAAoB,YAC3B,CAAC,OAAO,SAAS,eAAe,KAChC,mBAAmB,KACnB,kBAAkB,QAAQ,KAAK,+BAC/B;AACA,UAAM,IAAI,WAAW,iBAAiB;AAAA,EACxC;AACA,QAAM,eAAe,KAAK,MAAM,eAAe;AAI/C,QAAM,kBAAkB;AAAA,IACtB,cAAc;AAAA,MACZ,WAAW;AAAA,MACX,cAAc,OAAO;AAAA,MACrB,qBAAqB,QAAQ;AAAA,MAC7B,YAAY,QAAQ,MAAM;AAAA,MAC1B,WAAW,QAAQ,MAAM;AAAA,MACzB,WAAW,QAAQ,MAAM;AAAA,MACzB,WAAW,QAAQ,MAAM;AAAA,IAC3B,CAAC;AAAA,EACH;AACA,QAAM,cAA4C;AAAA,IAChD,WAAW,SAAS,gBAAgB,MAAM,GAAG,EAAE,CAAC;AAAA,IAChD,kBAAkB,OAAO,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE;AAAA,IAClD;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,QAAM,OAAO,aAAa,WAAW,SAAS,QAAQ,CAAC,GAAG,YAAY,gBAAgB,GAAG;AAAA,IACvF;AAAA,IACA,kBAAkB,QAAQ;AAAA,EAC5B,CAAC;AACD,SAAO;AACT;AAWA,eAAsB,8BACpB,MACA,MACyC;AACzC,MAAI,KAAK,WAAW,SAAS;AAC3B,WAAO,EAAE,QAAQ,YAAY,MAAM,WAAW,KAAK,aAAa,kBAAkB;AAAA,EACpF;AAEA,QAAM,QAAQ,KAAK;AACnB,QAAM,IAAI,KAAK;AACf,MACE,CAAC,SACD,MAAM,cAAc,EAAE,aACtB,MAAM,eAAe,EAAE,cACvB,MAAM,cAAc,EAAE,aACtB,MAAM,cAAc,EAAE,WACtB;AACA,WAAO,EAAE,QAAQ,YAAY,MAAM,WAAW,iBAAiB;AAAA,EACjE;AACA,QAAM,MAAM,KAAK,MAAM,KAAK,oBAAI,KAAK;AACrC,MAAI,IAAI,QAAQ,KAAK,IAAI,KAAK,KAAK,UAAU,SAAS,EAAE,QAAQ,GAAG;AACjE,WAAO,EAAE,QAAQ,YAAY,MAAM,WAAW,gBAAgB;AAAA,EAChE;AACA,MAAI,KAAK,SAAS,eAAe,EAAE,cAAc,KAAK,SAAS,cAAc,EAAE,WAAW;AACxF,WAAO,EAAE,QAAQ,YAAY,MAAM,WAAW,iBAAiB;AAAA,EACjE;AACA,QAAM,YAAY,aAAa,KAAK,QAAQ;AAC5C,MAAI,cAAc,KAAK,WAAW,qBAAqB;AACrD,WAAO,EAAE,QAAQ,YAAY,MAAM,WAAW,gBAAgB;AAAA,EAChE;AAEA,MAAI,KAAK,cAAc,UAAU;AAC/B,WAAO,EAAE,QAAQ,SAAS,KAAK;AAAA,EACjC;AAEA,QAAM,cAAc,KAAK;AACzB,MAAI,CAAC,aAAa;AAChB,WAAO,EAAE,QAAQ,UAAU,MAAM,WAAW,kBAAkB;AAAA,EAChE;AACA,QAAM,OAAO,IAAI,IAAI,KAAK,SAAS,SAAS,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAU,CAAC;AAC1E,QAAM,aAAa,YAAY,iBAC5B,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC,EACxB,OAAO,CAAC,MAAiC,MAAM,MAAS,EACxD,KAAK,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,cAAc,EAAE,EAAE,CAAC,EAChE,IAAI,CAAC,MAAM,EAAE,OAAO,EACpB,KAAK,MAAM;AAEd,QAAM,SACJ,YAAY,WAAW,kBACnB,kBACA,YAAY,mBAAmB,YAC7B,SACA;AACR,MAAI;AACF,UAAM,SAAS,MAAM,qBAAqB,YAAY,YAAY,cAAc,QAAQ;AAAA,MACtF,KAAK,KAAK;AAAA,MACV,wBAAwB,KAAK,MAAM,iCAAiC,YAAY;AAAA,IAClF,CAAC;AACD,QAAI,OAAO,KAAK,KAAK,EAAE,WAAW,GAAG;AACnC,aAAO,EAAE,QAAQ,UAAU,MAAM,WAAW,sBAAsB;AAAA,IACpE;AACA,WAAO;AAAA,MACL,QAAQ;AAAA,MACR;AAAA,MACA,aAAa;AAAA,QACX,WAAW,YAAY;AAAA,QACvB,MAAM,OAAO;AAAA,QACb,aAAa,UAAU,OAAO,IAAI;AAAA,QAClC,QAAQ,OAAO;AAAA,QACf,GAAI,OAAO,YAAY,EAAE,WAAW,OAAO,UAAU,IAAI,CAAC;AAAA,QAC1D,UAAU,OAAO;AAAA,QACjB,kBAAkB,YAAY;AAAA,MAChC;AAAA,IACF;AAAA,EACF,SAAS,KAAK;AACZ,QAAI,eAAe,gCAAgC;AACjD,aAAO,EAAE,QAAQ,UAAU,MAAM,WAAW,sBAAsB;AAAA,IACpE;AACA,UAAM;AAAA,EACR;AACF;AAWA,eAAsB,gCACpB,MACA,SACA,cACA,UAGwE;AACxE,QAAM,IAAI,KAAK;AACf,QAAM,aACJ,aAAa,cAAc,EAAE,aAC7B,aAAa,eAAe,EAAE,cAC9B,aAAa,cAAc,EAAE,aAC7B,aAAa,cAAc,EAAE,aAC7B,QAAQ,cAAc,aAAa;AACrC,MAAI,CAAC,WAAY,OAAM,IAAI,WAAW,gBAAgB;AACtD,MAAI,QAAQ,aAAa,KAAK,SAAU,OAAM,IAAI,WAAW,eAAe;AAC5E,MAAI,QAAQ,uBAAuB,UAAa,QAAQ,uBAAuB,EAAE,kBAAkB;AACjG,UAAM,IAAI,WAAW,eAAe;AAAA,EACtC;AACA,QAAM,UACJ,QAAQ,kBAAkB,yCAC1B,QAAQ,WAAW,KAAK,WACvB,QAAQ,YAAY,aAAa,QAAQ,YAAY,aAAa,QAAQ,YAAY,aACvF,OAAO,QAAQ,cAAc,YAC7B,CAAC,OAAO,MAAM,KAAK,MAAM,QAAQ,SAAS,CAAC;AAC7C,MAAI,CAAC,QAAS,OAAM,IAAI,WAAW,iBAAiB;AAEpD,QAAM,QAAyC;AAAA,IAC7C,YAAY;AAAA,IACZ,eAAe;AAAA,IACf,WAAW,QAAQ;AAAA,IACnB,UAAU,KAAK;AAAA,IACf,QAAQ,KAAK,cAAc,YAAY,sBAAsB;AAAA,IAC7D,SAAS,QAAQ;AAAA,IACjB,QAAQ,QAAQ,YAAY,YAAY,YAAY,QAAQ,YAAY,WAAW,aAAa;AAAA,IAChG,WAAW;AAAA,IACX,WAAW,EAAE;AAAA,IACb,kBAAkB,EAAE;AAAA,IACpB,UAAU,KAAK;AAAA,IACf,kBAAkB,EAAE;AAAA,IACpB,WAAW,QAAQ;AAAA,IACnB,kBAAkB,KAAK,WAAW;AAAA,IAClC,eAAe,KAAK,mBAAmB;AAAA,IACvC,eAAe,KAAK,mBAAmB;AAAA,IACvC,sBAAsB,KAAK,mBAAmB;AAAA,IAC9C,gBAAgB,QAAQ;AAAA,IACxB,cAAc,KAAK,WAAW;AAAA,IAC9B,qBAAqB,KAAK,WAAW;AAAA,IACrC,GAAI,KAAK,WAAW,gBAAgB,EAAE,eAAe,KAAK,WAAW,cAAc,IAAI,CAAC;AAAA,IACxF,GAAI,KAAK,WAAW,mBAAmB,EAAE,kBAAkB,KAAK,WAAW,iBAAiB,IAAI,CAAC;AAAA,IACjG,gBAAgB,KAAK,OAAO;AAAA,IAC5B,iBAAiB,KAAK,OAAO;AAAA,EAC/B;AAEA,MAAI,WAAW;AACf,MAAI;AACF,eAAW,MAAM,SAAS,OAAO,KAAK;AAAA,EACxC,QAAQ;AACN,eAAW;AAAA,EACb;AACA,SAAO,EAAE,UAAU,OAAO,EAAE,GAAG,OAAO,mBAAmB,SAAS,EAAE;AACtE;AAOO,SAAS,+BACd,MACA,SACiC;AACjC,SAAO;AAAA,IACL,YAAY;AAAA,IACZ,eAAe;AAAA,IACf,WAAW,KAAK,WAAW;AAAA,IAC3B,UAAU,KAAK;AAAA,IACf,QAAQ,KAAK,cAAc,YAAY,sBAAsB;AAAA,IAC7D;AAAA,IACA,QAAQ,KAAK,WAAW,UAAU,cAAc;AAAA,IAChD,WAAW;AAAA,IACX,WAAW,KAAK,aAAa;AAAA,IAC7B,kBAAkB,KAAK,aAAa;AAAA,IACpC,UAAU,KAAK;AAAA,IACf,kBAAkB,KAAK,aAAa;AAAA,IACpC,kBAAkB,KAAK,WAAW;AAAA,IAClC,eAAe,KAAK,mBAAmB;AAAA,IACvC,eAAe,KAAK,mBAAmB;AAAA,IACvC,sBAAsB,KAAK,mBAAmB;AAAA,IAC9C,cAAc,KAAK,WAAW;AAAA,IAC9B,qBAAqB,KAAK,WAAW;AAAA,IACrC,GAAI,KAAK,WAAW,gBAAgB,EAAE,eAAe,KAAK,WAAW,cAAc,IAAI,CAAC;AAAA,IACxF,GAAI,KAAK,WAAW,mBAAmB,EAAE,kBAAkB,KAAK,WAAW,iBAAiB,IAAI,CAAC;AAAA,IACjG,gBAAgB,KAAK,OAAO;AAAA,IAC5B,iBAAiB,KAAK,OAAO;AAAA,IAC7B,mBAAmB;AAAA,EACrB;AACF;","names":[]}