@remnic/core 9.65.8 → 9.66.0

package/dist/{chunk-5DHKCO52.js → chunk-IVIAHQBR.js}

@@ -3,7 +3,7 @@ import {
   getOperation,
   operationRequiresAuthorizedNamespace,
   operationUsesPrincipalNamespace
-} from "./chunk-OXRRJXPR.js";
+} from "./chunk-IHGMRDEE.js";
 import {
   assertOperationAuthorizationAllowed
 } from "./chunk-MZWSOLMT.js";
@@ -60,4 +60,4 @@ export {
   authorizationProbeNamespaces,
   authorizationProbeRequiresPrincipalNamespace
 };
-//# sourceMappingURL=chunk-5DHKCO52.js.map
+//# sourceMappingURL=chunk-IVIAHQBR.js.map

package/dist/{chunk-TFR3HG4K.js → chunk-J3OND5QT.js}

@@ -3,14 +3,14 @@ import {
 } from "./chunk-KJTKLXTH.js";
 import {
   StorageManager
-} from "./chunk-W2BAGGEW.js";
+} from "./chunk-GEJKYA7D.js";
 import {
   copyExistingFileToBackup,
   writeFileAtomically
 } from "./chunk-AW4QUFQF.js";
 import {
   assertInjectedStorageRooted
-} from "./chunk-5ACCD4L7.js";
+} from "./chunk-JRRQ747T.js";
 import {
   MEMORY_LIFECYCLE_LEDGER_LOCK_STALE_MS,
   buildLifecycleEventsForMemory,
@@ -28,7 +28,7 @@ import {
 } from "./chunk-FFAZ2XFU.js";
 import {
   probeEncryptedRegularFileHeader
-} from "./chunk-XQ3HXAQH.js";
+} from "./chunk-ET2CNMLD.js";
 import {
   log
 } from "./chunk-3WCASNQZ.js";
@@ -260,4 +260,4 @@ export {
   backupExistingLedger,
   rebuildMemoryLifecycleLedger
 };
-//# sourceMappingURL=chunk-TFR3HG4K.js.map
+//# sourceMappingURL=chunk-J3OND5QT.js.map

package/dist/{chunk-UW5NPZJ2.js → chunk-JALOAKSZ.js}

@@ -41,6 +41,16 @@ function fallbackLlmRuntimeContextFromConfig(config, overrides = {}) {
     ...overrides
   };
 }
+function isUnsupportedJsonSchemaError(error) {
+  const message = error instanceof Error ? error.message : String(error);
+  if (!/\b(?:400|404|422)\b/.test(message)) {
+    return false;
+  }
+  if (/(?:response[_ ]?format|json[_ ]?schema|structured[_ ]?output)/i.test(message)) {
+    return true;
+  }
+  return /\bunsupported\b[\s\S]{0,40}\b(?:schema|format)\b/i.test(message);
+}
 var PROVIDER_ALIASES = {
   "openai-codex": ["codex"],
   codex: ["openai-codex"],
@@ -97,7 +107,8 @@ var FallbackLlmClient = class {
       log.warn("fallback LLM: no models configured in gateway");
       return null;
     }
-    const runChain = async (runOptions) => {
+    const runChain = async (initialOptions) => {
+      let runOptions = initialOptions;
       let lastRejectedResponse = null;
       for (let i = 0; i < models.length; i++) {
         if (runOptions.signal?.aborted) {
@@ -127,6 +138,37 @@ var FallbackLlmClient = class {
           if (runOptions.signal?.aborted) {
             throw abortReason(runOptions.signal);
           }
+          if ((runOptions.jsonSchema || runOptions.responsesJsonSchema) && isUnsupportedJsonSchemaError(err)) {
+            log.debug(`fallback LLM: ${model.modelString} rejected native JSON schema; retrying without it`);
+            runOptions = {
+              ...runOptions,
+              jsonSchema: void 0,
+              responsesJsonSchema: void 0
+            };
+            try {
+              const result = await this.tryModel(model, messages, runOptions);
+              if (result) {
+                const response = {
+                  content: result.content,
+                  modelUsed: model.modelString,
+                  usage: result.usage
+                };
+                if (!runOptions.acceptResponse || runOptions.acceptResponse(response)) {
+                  return response;
+                }
+                lastRejectedResponse = response;
+                log.debug(`fallback LLM: ${model.modelString} unstructured retry output rejected by acceptResponse, trying next model...`);
+                continue;
+              }
+            } catch (retryError) {
+              if (runOptions.signal?.aborted) throw abortReason(runOptions.signal);
+              const retryErrorMsg = runOptions.redactProviderErrors ? "provider error details redacted" : retryError instanceof Error ? retryError.message : String(retryError);
+              log.debug(
+                `fallback LLM: ${model.modelString} unstructured retry failed (${retryErrorMsg})`
+              );
+            }
+            continue;
+          }
           const errorMsg = runOptions.redactProviderErrors ? "provider error details redacted" : err instanceof Error ? err.message : String(err);
           log.debug(`fallback LLM: ${model.modelString} failed (${errorMsg}), trying next...`);
         }
@@ -498,7 +540,17 @@ var FallbackLlmClient = class {
       }),
       ...buildChatCompletionTokenLimit(modelId, options.maxTokens ?? 4096, {
         assumeOpenAI
-      })
+      }),
+      ...options.jsonSchema ? {
+        response_format: {
+          type: "json_schema",
+          json_schema: {
+            name: options.jsonSchema.name,
+            strict: options.jsonSchema.strict ?? false,
+            schema: options.jsonSchema.schema
+          }
+        }
+      } : {}
     };
     const response = await fetch(url, {
       method: "POST",
@@ -603,13 +655,13 @@ var FallbackLlmClient = class {
         assumeOpenAI: shouldAssumeOpenAiChatCompletions(config.baseUrl)
       }),
       ...options.store === void 0 ? {} : { store: options.store },
-      ...options.responsesJsonSchema ? {
+      ...options.jsonSchema || options.responsesJsonSchema ? {
         text: {
           format: {
             type: "json_schema",
-            name: options.responsesJsonSchema.name,
-            strict: true,
-            schema: options.responsesJsonSchema.schema
+            name: (options.jsonSchema ?? options.responsesJsonSchema).name,
+            strict: options.jsonSchema?.strict ?? (options.responsesJsonSchema ? true : false),
+            schema: (options.jsonSchema ?? options.responsesJsonSchema).schema
           }
         }
       } : {}
@@ -736,4 +788,4 @@ export {
   fallbackLlmRuntimeContextFromConfig,
   FallbackLlmClient
 };
-//# sourceMappingURL=chunk-UW5NPZJ2.js.map
+//# sourceMappingURL=chunk-JALOAKSZ.js.map

package/dist/chunk-JALOAKSZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/fallback-llm.ts"],"sourcesContent":["import { log } from \"./logger.js\";\nimport path from \"node:path\";\nimport type { AgentPersonaModelConfig, GatewayConfig, ModelProviderConfig, PluginConfig } from \"./types.js\";\nimport { extractJsonCandidates } from \"./json-extract.js\";\nimport {\n  buildChatCompletionTemperature,\n  buildChatCompletionTokenLimit,\n  shouldAssumeOpenAiChatCompletions,\n} from \"./openai-chat-compat.js\";\nimport {\n  resolveProviderApiKey,\n  getGatewayRuntimeAuthForModel,\n  type GetRuntimeAuthForModelFn,\n  type ResolveApiKeyFn,\n} from \"./resolve-provider-secret.js\";\nimport { loadModelsJsonProviders } from \"./models-json.js\";\nimport { callCodexCliFallback } from \"./cli-fallback.js\";\nimport { resolveHomeDir } from \"./runtime/env.js\";\nimport { expandTildePath } from \"./utils/path.js\";\n\nexport interface FallbackLlmOptions {\n  temperature?: number;\n  maxTokens?: number;\n  timeoutMs?: number;\n  signal?: AbortSignal;\n  /** Set the Responses API storage policy. Other transports ignore this value. */\n  store?: boolean;\n  /** Request strict JSON output when a route uses the Responses API. */\n  responsesJsonSchema?: { name: string; schema: Record<string, unknown> };\n  /** Request provider-native structured output on supported JSON transports. */\n  jsonSchema?: { name: string; schema: Record<string, unknown>; strict?: boolean };\n  /** Hide provider error details that could echo private request content. */\n  redactProviderErrors?: boolean;\n  /** Explicit \"provider/model\" override to try before the configured chain. */\n  model?: string;\n  /** Explicit model chain override to use instead of the configured agent/default chain. */\n  modelChain?: AgentPersonaModelConfig;\n  /** Append the gateway default chain after an explicit model chain. */\n  includeDefaultModelFallback?: boolean;\n  /** Override which agent persona's model chain to use (by ID from agents.list[]). */\n  agentId?: string;\n  /** Reject a transport-successful response and continue through the configured model chain. */\n  acceptResponse?: (response: FallbackLlmResponse) => boolean;\n}\n\nexport interface FallbackLlmAvailabilityOptions {\n  agentId?: string;\n  modelChain?: AgentPersonaModelConfig;\n}\n\n/**\n * Resolve the gateway routing options Remnic's background tasks should pass to\n * FallbackLlmClient — extraction, fact/profile/identity consolidation,\n * summarization, calibration, and causal/semantic consolidation. Single source\n * of truth so every task path stays consistent and can't diverge (gotcha #22):\n * in gateway mode an explicit `taskModelChain` wins over the gateway agent\n * persona; otherwise the persona (if any) is used. Returns `{}` in plugin mode\n * because the chain resolves through gateway providers only. Issue #1365.\n */\nexport function gatewayTaskChainOptions(\n  config: Pick<PluginConfig, \"modelSource\" | \"taskModelChain\" | \"gatewayAgentId\">,\n): Pick<FallbackLlmOptions, \"modelChain\" | \"agentId\"> {\n  if (config.modelSource !== \"gateway\") return {};\n  if (config.taskModelChain) return { modelChain: config.taskModelChain };\n  return config.gatewayAgentId ? { agentId: config.gatewayAgentId } : {};\n}\n\nexport interface FallbackLlmResponse {\n  content: string;\n  modelUsed: string;\n  usage?: {\n    inputTokens?: number;\n    outputTokens?: number;\n    totalTokens?: number;\n  };\n}\n\nexport interface FallbackLlmRuntimeContext {\n  agentDir?: string;\n  getRuntimeAuthForModel?: GetRuntimeAuthForModelFn | null;\n  resolveApiKeyForProvider?: ResolveApiKeyFn | null;\n  workspaceDir?: string;\n}\n\nexport function fallbackLlmRuntimeContextFromConfig(\n  config: Pick<\n    GatewayBackedRuntimeConfig,\n    \"providerApiKeyResolver\" | \"runtimeAuthForModelResolver\" | \"workspaceDir\"\n  >,\n  overrides: FallbackLlmRuntimeContext = {},\n): FallbackLlmRuntimeContext {\n  return {\n    workspaceDir: config.workspaceDir,\n    resolveApiKeyForProvider: config.providerApiKeyResolver,\n    getRuntimeAuthForModel: config.runtimeAuthForModelResolver,\n    ...overrides,\n  };\n}\n\ntype GatewayBackedRuntimeConfig = {\n  providerApiKeyResolver?: ResolveApiKeyFn | null;\n  runtimeAuthForModelResolver?: GetRuntimeAuthForModelFn | null;\n  workspaceDir?: string;\n};\n\ninterface ModelRef {\n  providerId: string;\n  modelId: string;\n  providerConfig: ModelProviderConfig;\n  modelString: string;\n}\n\nfunction isUnsupportedJsonSchemaError(error: unknown): boolean {\n  const message = error instanceof Error ? error.message : String(error);\n  // Require an HTTP status plus explicit schema/format context. A bare\n  // \"unsupported\" (e.g. \"'temperature' is unsupported with this model\") must\n  // NOT trigger the schema-stripping retry, or we pay a duplicate request\n  // for unrelated provider errors.\n  if (!/\\b(?:400|404|422)\\b/.test(message)) {\n    return false;\n  }\n  if (/(?:response[_ ]?format|json[_ ]?schema|structured[_ ]?output)/i.test(message)) {\n    return true;\n  }\n  // \"unsupported\" only counts when adjacent to schema/format terminology.\n  return /\\bunsupported\\b[\\s\\S]{0,40}\\b(?:schema|format)\\b/i.test(message);\n}\n\nconst PROVIDER_ALIASES: Record<string, readonly string[]> = {\n  \"openai-codex\": [\"codex\"],\n  codex: [\"openai-codex\"],\n  \"claude-cli\": [\"anthropic\"],\n};\n\nconst LEGACY_PROVIDER_IDS = new Set([\"openai-codex\", \"claude-cli\"]);\n\nconst MANAGED_SECRETREF_MARKER = [\"secretref\", \"managed\"].join(\"-\");\nconst PROVIDER_API_KEY_FIELD = [\"api\", \"Key\"].join(\"\") as keyof ModelProviderConfig;\n\n/**\n * Built-in provider fallbacks for providers that are commonly configured via\n * OAuth or gateway-managed auth rather than an explicit apiKey in\n * openclaw.json. These entries let resolveProviderConfig() succeed so the\n * chain proceeds to tryModel() → resolveRuntimeAuth(), which is where the\n * gateway's native OAuth token exchange happens.\n *\n * Without these, OAuth-only providers like `openai` are rejected with\n * \"provider not found\" before runtime auth is ever attempted.\n */\nconst BUILT_IN_PROVIDER_FALLBACKS: Record<string, ModelProviderConfig> = {\n  anthropic: {\n    baseUrl: \"https://api.anthropic.com/v1\",\n    api: \"anthropic-messages\",\n    models: [],\n    [PROVIDER_API_KEY_FIELD]: MANAGED_SECRETREF_MARKER,\n  },\n  openai: {\n    baseUrl: \"https://api.openai.com/v1\",\n    api: \"openai-responses\",\n    models: [],\n    [PROVIDER_API_KEY_FIELD]: MANAGED_SECRETREF_MARKER,\n  },\n};\n\n/**\n * Generic fallback LLM client that uses the gateway's default AI configuration\n * and walks through the full fallback chain (primary + fallbacks).\n * Supports OpenAI and Anthropic API formats.\n */\nexport class FallbackLlmClient {\n  private gatewayConfig: GatewayConfig | undefined;\n  private runtimeContext: FallbackLlmRuntimeContext;\n\n  constructor(\n    gatewayConfig?: GatewayConfig,\n    runtimeContext: FallbackLlmRuntimeContext = {},\n  ) {\n    this.gatewayConfig = gatewayConfig;\n    this.runtimeContext = {\n      ...runtimeContext,\n      workspaceDir:\n        normalizeRuntimePath(runtimeContext.workspaceDir) ??\n        readGatewayWorkspaceDir(gatewayConfig) ??\n        defaultOpenClawWorkspaceDir(),\n    };\n  }\n\n  /**\n   * Check if fallback is available (gateway config has at least one model).\n   */\n  isAvailable(agentIdOrOptions?: string | FallbackLlmAvailabilityOptions): boolean {\n    const options = typeof agentIdOrOptions === \"string\"\n      ? { agentId: agentIdOrOptions }\n      : (agentIdOrOptions ?? {});\n    const models = this.getModelChain(options.agentId, undefined, options.modelChain);\n    return models.length > 0;\n  }\n\n  /**\n   * Make a chat completion request using the gateway's default AI chain.\n   * Tries primary first, then each fallback in order.\n   * When agentId is provided, uses that agent persona's model chain instead of defaults.\n   */\n  async chatCompletion(\n    messages: Array<{ role: \"system\" | \"user\" | \"assistant\"; content: string }>,\n    options: FallbackLlmOptions = {},\n  ): Promise<FallbackLlmResponse | null> {\n    const models = this.getModelChain(\n      options.agentId,\n      options.model,\n      options.modelChain,\n      options.includeDefaultModelFallback,\n    );\n    if (models.length === 0) {\n      log.warn(\"fallback LLM: no models configured in gateway\");\n      return null;\n    }\n\n    const runChain = async (\n      initialOptions: FallbackLlmOptions,\n    ): Promise<FallbackLlmResponse | null> => {\n      let runOptions = initialOptions;\n      let lastRejectedResponse: FallbackLlmResponse | null = null;\n      // Try each model in the chain\n      for (let i = 0; i < models.length; i++) {\n        if (runOptions.signal?.aborted) {\n          throw abortReason(runOptions.signal);\n        }\n        const model = models[i];\n        const isFallback = i > 0;\n\n        try {\n          const result = await this.tryModel(model, messages, runOptions);\n          if (result) {\n            const response = {\n              content: result.content,\n              modelUsed: model.modelString,\n              usage: result.usage,\n            };\n            if (runOptions.acceptResponse && !runOptions.acceptResponse(response)) {\n              lastRejectedResponse = response;\n              log.debug(`fallback LLM: ${model.modelString} returned rejected output, trying next...`);\n              continue;\n            }\n            if (isFallback) {\n              log.debug(`fallback LLM: succeeded using ${model.modelString} (fallback ${i})`);\n            }\n            return response;\n          }\n        } catch (err) {\n          if (runOptions.signal?.aborted) {\n            throw abortReason(runOptions.signal);\n          }\n          if (\n            (runOptions.jsonSchema || runOptions.responsesJsonSchema) &&\n            isUnsupportedJsonSchemaError(err)\n          ) {\n            log.debug(`fallback LLM: ${model.modelString} rejected native JSON schema; retrying without it`);\n            // Degrade to prompt-only for the REST of the chain too, so an\n            // N-model chain where every provider rejects structured output\n            // costs N+1 requests instead of 2N.\n            runOptions = {\n              ...runOptions,\n              jsonSchema: undefined,\n              responsesJsonSchema: undefined,\n            };\n            try {\n              const result = await this.tryModel(model, messages, runOptions);\n              if (result) {\n                const response = {\n                  content: result.content,\n                  modelUsed: model.modelString,\n                  usage: result.usage,\n                };\n                if (!runOptions.acceptResponse || runOptions.acceptResponse(response)) {\n                  return response;\n                }\n                lastRejectedResponse = response;\n                log.debug(`fallback LLM: ${model.modelString} unstructured retry output rejected by acceptResponse, trying next model...`);\n                continue;\n              }\n            } catch (retryError) {\n              if (runOptions.signal?.aborted) throw abortReason(runOptions.signal);\n              const retryErrorMsg = runOptions.redactProviderErrors\n                ? \"provider error details redacted\"\n                : retryError instanceof Error\n                  ? retryError.message\n                  : String(retryError);\n              log.debug(\n                `fallback LLM: ${model.modelString} unstructured retry failed (${retryErrorMsg})`,\n              );\n            }\n            continue;\n          }\n          const errorMsg = runOptions.redactProviderErrors\n            ? \"provider error details redacted\"\n            : err instanceof Error\n              ? err.message\n              : String(err);\n          log.debug(`fallback LLM: ${model.modelString} failed (${errorMsg}), trying next...`);\n          // Continue to next model in chain\n        }\n      }\n\n      log.warn(`fallback LLM: all ${models.length} models in chain failed`);\n      return lastRejectedResponse;\n    };\n\n    if (typeof options.timeoutMs === \"number\") {\n      if (options.timeoutMs <= 0) {\n        log.warn(\"fallback LLM: timed out before request started\");\n        return null;\n      }\n      let timeoutHandle: ReturnType<typeof setTimeout> | undefined;\n      const controller = new AbortController();\n      const onCallerAbort = (): void => {\n        controller.abort(abortReason(options.signal));\n      };\n      options.signal?.addEventListener(\"abort\", onCallerAbort, { once: true });\n      if (options.signal?.aborted) {\n        onCallerAbort();\n      }\n      const timedOptions = { ...options, signal: controller.signal };\n      const chain = runChain(timedOptions);\n      chain.catch(() => {});\n      try {\n        return await Promise.race([\n          chain,\n          new Promise<null>((resolve) => {\n            timeoutHandle = setTimeout(() => {\n              log.warn(`fallback LLM: timed out after ${options.timeoutMs}ms`);\n              controller.abort(\n                new Error(`fallback LLM timed out after ${options.timeoutMs}ms`),\n              );\n              resolve(null);\n            }, options.timeoutMs);\n          }),\n        ]);\n      } finally {\n        if (timeoutHandle) clearTimeout(timeoutHandle);\n        options.signal?.removeEventListener(\"abort\", onCallerAbort);\n      }\n    }\n\n    return await runChain(options);\n  }\n\n  /**\n   * Make a request with structured output (Zod schema).\n   * Returns parsed JSON or null on failure.\n   */\n  async parseWithSchema<T>(\n    messages: Array<{ role: \"system\" | \"user\" | \"assistant\"; content: string }>,\n    schema: { parse: (data: unknown) => T },\n    options: FallbackLlmOptions = {},\n  ): Promise<T | null> {\n    const detailed = await this.parseWithSchemaDetailed(messages, schema, options);\n    return detailed?.result ?? null;\n  }\n\n  /**\n   * Like parseWithSchema but also returns the model that was used,\n   * so callers can emit accurate trace events.\n   */\n  async parseWithSchemaDetailed<T>(\n    messages: Array<{ role: \"system\" | \"user\" | \"assistant\"; content: string }>,\n    schema: { parse: (data: unknown) => T },\n    options: FallbackLlmOptions = {},\n  ): Promise<\n    | { result: T; modelUsed: string }\n    | { result: null; failureReason: \"no_models\" | \"empty\" | \"http_error\" }\n  > {\n    let response: FallbackLlmResponse | null;\n    try {\n      response = await this.chatCompletion(messages, options);\n    } catch (err) {\n      // Caller aborts must propagate (e.g. recall planner cancellation) — do\n      // not swallow them as a provider failure, or abort-driven callers lose\n      // cancellation and treat it as an extraction error (codex review).\n      if (options.signal?.aborted) throw err;\n      log.warn(\"fallback LLM: chatCompletion threw during structured parse:\", err);\n      return { result: null, failureReason: \"http_error\" };\n    }\n    if (!response?.content) {\n      // chatCompletion returns null both when no models are configured\n      // (auth/config) and when every configured model errored (transient).\n      // Disambiguate via the resolved model chain so the retry layer can pick\n      // the right failure class.\n      const hasModels =\n        this.getModelChain(\n          options.agentId,\n          options.model,\n          options.modelChain,\n          options.includeDefaultModelFallback,\n        ).length > 0;\n      return { result: null, failureReason: hasModels ? \"http_error\" : \"no_models\" };\n    }\n\n    try {\n      const candidates = extractJsonCandidates(response.content);\n      for (const c of candidates) {\n        try {\n          const parsed = JSON.parse(c);\n          return { result: schema.parse(parsed), modelUsed: response.modelUsed };\n        } catch {\n          // keep trying other candidates\n        }\n      }\n      return { result: null, failureReason: \"empty\" };\n    } catch (err) {\n      log.warn(\"fallback LLM: failed to parse structured output:\", err);\n      return { result: null, failureReason: \"empty\" };\n    }\n  }\n\n  /**\n   * Get the full model chain from gateway config.\n   * Returns array of models in order: [primary, fallback1, fallback2, ...]\n   *\n   * When modelChainOverride is provided, uses it instead of any configured\n   * agent/default chain. Otherwise, when agentId is provided, looks up the\n   * matching entry in agents.list[] and uses that persona's model chain.\n   * Falls back to agents.defaults.model if agentId is not found or not provided.\n   */\n  private getModelChain(\n    agentId?: string,\n    modelOverride?: string,\n    modelChainOverride?: AgentPersonaModelConfig,\n    includeDefaultModelFallback = true,\n  ): ModelRef[] {\n    const chain: ModelRef[] = [];\n    const providers = this.gatewayConfig?.models?.providers ?? {};\n\n    // Resolve the model config: explicit task chain, agent persona chain, or global defaults\n    let modelConfig: AgentPersonaModelConfig | undefined;\n\n    if (modelChainOverride?.primary) {\n      modelConfig = modelChainOverride;\n      log.debug(\"fallback LLM: using explicit model chain override\");\n    } else if (modelChainOverride) {\n      log.warn(\"fallback LLM: ignoring explicit model chain override without primary model\");\n    }\n\n    if (!modelConfig && agentId) {\n      const persona = this.gatewayConfig?.agents?.list?.find(\n        (a) => a.id === agentId,\n      );\n      if (persona?.model) {\n        modelConfig = persona.model;\n        log.debug(`fallback LLM: using agent persona \"${agentId}\" model chain`);\n      } else {\n        log.warn(\n          `fallback LLM: agent persona \"${agentId}\" not found or has no model config, falling back to defaults`,\n        );\n      }\n    }\n\n    if (!modelConfig) {\n      modelConfig = this.gatewayConfig?.agents?.defaults?.model;\n    }\n\n    // Build list of model strings: primary + fallbacks\n    const modelStrings: string[] = [];\n\n    const addModelString = (value: unknown): void => {\n      if (typeof value !== \"string\") return;\n      const trimmed = value.trim();\n      if (trimmed.length > 0 && !modelStrings.includes(trimmed)) {\n        modelStrings.push(trimmed);\n      }\n    };\n\n    addModelString(modelOverride);\n    addModelString(modelConfig?.primary);\n\n    if (Array.isArray(modelConfig?.fallbacks)) {\n      for (const fb of modelConfig.fallbacks) {\n        addModelString(fb);\n      }\n    }\n\n    // Parse each model string and look up provider config\n    for (const modelString of modelStrings) {\n      const modelRef = this.parseModelString(modelString, providers);\n      if (modelRef) {\n        chain.push(modelRef);\n      }\n    }\n\n    // Implicit last-resort: when a task-specific modelChain override is active,\n    // append the gateway default model so a stale or exhausted taskModelChain\n    // never leaves the chain empty — Remnic should never be the reason a chat is\n    // interrupted by a flush failure. Keyed on `modelChainOverride?.primary` —\n    // the SAME activation condition chain resolution uses above — so a\n    // primary-less override (e.g. {}) that falls through to a persona/default\n    // chain does NOT get the default appended (gotcha #39). Issue #1365 / PR #1370.\n    if (includeDefaultModelFallback && modelChainOverride?.primary && modelStrings.length > 0) {\n      // Append the FULL gateway default chain (primary + fallbacks), not just\n      // the primary — if the default primary is also unreachable, a listed\n      // default fallback may still succeed (cursor review #1425).\n      const defaults = this.gatewayConfig?.agents?.defaults?.model;\n      const defaultStrings: string[] = [\n        ...(typeof defaults?.primary === \"string\" ? [defaults.primary] : []),\n        ...(Array.isArray(defaults?.fallbacks) ? defaults.fallbacks : []),\n      ];\n      for (const candidate of defaultStrings) {\n        if (typeof candidate !== \"string\") continue;\n        const trimmed = candidate.trim();\n        if (trimmed.length === 0 || modelStrings.includes(trimmed)) continue;\n        const defaultRef = this.parseModelString(trimmed, providers);\n        if (defaultRef) {\n          chain.push(defaultRef);\n          modelStrings.push(trimmed); // keep dedupe correct for later default fallbacks\n          log.debug(\n            `fallback LLM: appended gateway default model \"${trimmed}\" as implicit last resort`,\n          );\n        }\n      }\n    }\n\n    return chain;\n  }\n\n  /**\n   * Parse a \"provider/model\" string and look up its config.\n   */\n  private parseModelString(\n    modelString: string,\n    providers: Record<string, ModelProviderConfig>,\n  ): ModelRef | null {\n    // Parse \"provider/model\" format (e.g., \"openai/gpt-5.5\", \"anthropic/claude-opus-4-6\")\n    const parts = modelString.split(\"/\");\n    if (parts.length < 2) {\n      log.warn(`fallback LLM: invalid model format: ${modelString}`);\n      return null;\n    }\n\n    const requestedProviderId = parts[0];\n    const modelId = parts.slice(1).join(\"/\"); // Handle cases like \"openai/gpt-5.5\"\n\n    // Respect the active gateway config first so profile-local overrides and\n    // credentials win. Fall back to the materialized models.json only when\n    // the provider is absent from the loaded config (for built-in providers\n    // registered by the gateway at runtime).\n    const resolvedProvider = this.resolveProviderConfig(requestedProviderId, providers);\n    const providerConfig = resolvedProvider?.config;\n    if (!providerConfig) {\n      log.warn(\n        `fallback LLM: provider not found: ${requestedProviderId} ` +\n        `(tried: ${this.providerResolutionCandidates(requestedProviderId).join(\", \")})`,\n      );\n      return null;\n    }\n\n    return {\n      providerId: resolvedProvider.providerId,\n      modelId,\n      providerConfig,\n      modelString,\n    };\n  }\n\n  private resolveProviderConfig(\n    providerId: string,\n    providers: Record<string, ModelProviderConfig>,\n  ): { providerId: string; config: ModelProviderConfig } | null {\n    const candidates = this.providerResolutionCandidates(providerId);\n    const aliasCandidates = candidates.filter((candidate) => candidate !== providerId);\n    const fallbackCandidates = LEGACY_PROVIDER_IDS.has(providerId)\n      ? [...aliasCandidates, providerId]\n      : [providerId, ...aliasCandidates];\n    for (const candidate of candidates) {\n      const config = providers[candidate];\n      if (config) {\n        if (candidate !== providerId) {\n          log.debug(`fallback LLM: provider \"${providerId}\" resolved via alias \"${candidate}\"`);\n        }\n        return { providerId: candidate, config };\n      }\n    }\n    for (const candidate of fallbackCandidates) {\n      const config = this.resolveFromModelsJson(candidate);\n      if (config) {\n        if (candidate !== providerId) {\n          log.debug(`fallback LLM: provider \"${providerId}\" resolved via models.json alias \"${candidate}\"`);\n        }\n        return { providerId: candidate, config };\n      }\n      const builtInConfig = BUILT_IN_PROVIDER_FALLBACKS[candidate];\n      if (builtInConfig) {\n        if (candidate === providerId) {\n          log.debug(`fallback LLM: provider \"${providerId}\" resolved from built-in defaults`);\n          return { providerId, config: builtInConfig };\n        }\n        log.debug(`fallback LLM: provider \"${providerId}\" resolved via built-in alias \"${candidate}\"`);\n        return { providerId: candidate, config: builtInConfig };\n      }\n    }\n    return null;\n  }\n\n  private providerResolutionCandidates(providerId: string): string[] {\n    const candidates = [providerId, ...(PROVIDER_ALIASES[providerId] ?? [])];\n    return [...new Set(candidates)];\n  }\n\n  /**\n   * Look up a provider from the gateway's materialized models.json, which\n   * contains all providers including built-in ones (openai-codex, google-vertex,\n   * etc.) that aren't in the user's openclaw.json but are registered by\n   * gateway plugins. Returns null if the provider isn't found there either.\n   */\n  private resolveFromModelsJson(providerId: string): ModelProviderConfig | null {\n    const allProviders = loadModelsJsonProviders();\n    const config = allProviders[providerId];\n    if (config) {\n      log.debug(`fallback LLM: resolved provider \"${providerId}\" from models.json (api: ${config.api ?? \"default\"})`);\n      return config;\n    }\n    return null;\n  }\n\n  /**\n   * Try to call a single model.\n   *\n   * Uses the gateway's native getRuntimeAuthForModel when available — this\n   * handles all provider-specific auth transforms (OAuth token exchange,\n   * base URL overrides for codex/copilot/etc.) through the same codepath\n   * the gateway itself uses. Falls back to resolveProviderApiKey for\n   * simpler providers or when the runtime module isn't loaded.\n   */\n  private async tryModel(\n    model: ModelRef,\n    messages: Array<{ role: \"system\" | \"user\" | \"assistant\"; content: string }>,\n    options: FallbackLlmOptions,\n  ): Promise<{ content: string; usage?: FallbackLlmResponse[\"usage\"] } | null> {\n    // Try the gateway's native runtime auth first — it handles all provider-\n    // specific transforms (OAuth exchange, base URL rewrite, etc.)\n    const runtimeAuth = model.providerConfig.api === \"codex-cli\"\n      ? null\n      : await this.resolveRuntimeAuth(model);\n    const effectiveBaseUrl = runtimeAuth?.baseUrl ?? model.providerConfig.baseUrl;\n    const resolvedApiKey = runtimeAuth?.apiKey\n      ?? (\n        model.providerConfig.api === \"codex-cli\" && model.providerConfig.apiKey === undefined\n          ? undefined\n          : await this.resolveFallbackApiKey(model)\n      );\n\n    // If the raw key looks like an unresolved secret ref and resolution fails,\n    // skip this provider entirely so the chain falls through to the next.\n    const rawKey = model.providerConfig.apiKey;\n    const needsResolution = rawKey === \"secretref-managed\"\n      || (typeof rawKey === \"object\" && rawKey !== null);\n    if (needsResolution && !resolvedApiKey) {\n      throw new Error(`API key for provider \"${model.providerId}\" could not be resolved from secret ref`);\n    }\n\n    const effectiveConfig: ModelProviderConfig = {\n      ...model.providerConfig,\n      baseUrl: effectiveBaseUrl,\n      ...(resolvedApiKey ? { apiKey: resolvedApiKey } : {}),\n    };\n\n    if (model.providerConfig.api === \"anthropic-messages\") {\n      return await this.callAnthropic(effectiveConfig, model.modelId, messages, options);\n    }\n\n    if (model.providerConfig.api === \"codex-cli\") {\n      return await callCodexCliFallback(\n        effectiveConfig,\n        model.modelId,\n        messages,\n        { timeoutMs: options.timeoutMs, signal: options.signal },\n      );\n    }\n\n    if (model.providerConfig.api === \"ollama-chat\") {\n      return await this.callOllamaChat(effectiveConfig, model.modelId, messages, options);\n    }\n\n    if (\n      model.providerConfig.api === \"openai-responses\" ||\n      model.providerConfig.api === \"openai-codex-responses\" ||\n      model.providerConfig.api === \"azure-openai-responses\"\n    ) {\n      return await this.callOpenAIResponses(\n        effectiveConfig,\n        model.modelId,\n        messages,\n        options,\n      );\n    }\n\n    // For OpenAI-compatible chat-completions APIs (openai-completions,\n    // ollama, etc.) and unknown formats, use chat completions — the gateway's\n    // runtime auth resolver returns request-ready base URL and credentials for\n    // most providers.\n    return await this.callOpenAI(\n      effectiveConfig,\n      model.modelId,\n      messages,\n      options,\n      shouldAssumeOpenAiChatCompletions(effectiveConfig.baseUrl),\n    );\n  }\n\n  /**\n   * Resolve request-ready auth through the gateway's native runtime, which\n   * handles provider-specific transforms (OAuth token exchange for codex/copilot,\n   * base URL rewrite, etc.). Returns null if the runtime isn't available.\n   */\n  private async resolveRuntimeAuth(\n    model: ModelRef,\n  ): Promise<{ apiKey?: string; baseUrl?: string } | null> {\n    try {\n      const getRuntimeAuth = await getGatewayRuntimeAuthForModel({\n        getRuntimeAuthForModel: this.runtimeContext.getRuntimeAuthForModel,\n      });\n      if (!getRuntimeAuth) return null;\n\n      const result = await getRuntimeAuth({\n        model: {\n          provider: model.providerId,\n          id: model.modelId,\n          api: model.providerConfig.api,\n          baseUrl: model.providerConfig.baseUrl,\n        },\n        cfg: this.gatewayConfig,\n        workspaceDir: this.runtimeContext.workspaceDir,\n      });\n\n      if (result?.apiKey || result?.baseUrl) {\n        log.debug(\n          `fallback LLM: resolved runtime auth for \"${model.modelString}\" (source: ${result.source ?? \"unknown\"}, mode: ${result.mode ?? \"unknown\"})`,\n        );\n        return { apiKey: result.apiKey, baseUrl: result.baseUrl };\n      }\n    } catch (err) {\n      log.debug(\n        `fallback LLM: gateway runtime auth failed for \"${model.modelString}\": ${err instanceof Error ? err.message : String(err)}`,\n      );\n    }\n    return null;\n  }\n\n  /**\n   * Resolve API key through the existing provider-level resolution (env vars,\n   * secret refs, etc.). Used as fallback when gateway runtime auth isn't available.\n   */\n  private async resolveFallbackApiKey(model: ModelRef): Promise<string | undefined> {\n    return resolveProviderApiKey(\n      model.providerId,\n      model.providerConfig.apiKey,\n      this.gatewayConfig,\n      this.runtimeContext.agentDir,\n      {\n        resolveApiKeyForProvider: this.runtimeContext.resolveApiKeyForProvider,\n      },\n    );\n  }\n\n  /**\n   * Call OpenAI-compatible API.\n   */\n  private async callOpenAI(\n    config: ModelProviderConfig,\n    modelId: string,\n    messages: Array<{ role: \"system\" | \"user\" | \"assistant\"; content: string }>,\n    options: FallbackLlmOptions,\n    assumeOpenAI: boolean,\n  ): Promise<{ content: string; usage?: FallbackLlmResponse[\"usage\"] } | null> {\n    const base = config.baseUrl.replace(/\\/$/, \"\");\n    const url = base.endsWith(\"/v1\")\n      ? `${base}/chat/completions`\n      : `${base}/v1/chat/completions`;\n\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/json\",\n      ...config.headers,\n    };\n\n    // Handle auth — apiKey is already resolved to a string by tryModel()\n    if (config.apiKey && typeof config.apiKey === \"string\") {\n      if (config.authHeader !== false) {\n        headers[\"Authorization\"] = `Bearer ${config.apiKey}`;\n      }\n    }\n\n    const body = {\n      model: modelId,\n      messages,\n      ...buildChatCompletionTemperature(modelId, options.temperature ?? 0.3, {\n        assumeOpenAI,\n      }),\n      ...buildChatCompletionTokenLimit(modelId, options.maxTokens ?? 4096, {\n        assumeOpenAI,\n      }),\n      ...(options.jsonSchema\n        ? {\n            response_format: {\n              type: \"json_schema\",\n              json_schema: {\n                name: options.jsonSchema.name,\n                strict: options.jsonSchema.strict ?? false,\n                schema: options.jsonSchema.schema,\n              },\n            },\n          }\n        : {}),\n    };\n\n    const response = await fetch(url, {\n      method: \"POST\",\n      headers,\n      signal: options.signal,\n      body: JSON.stringify(body),\n    });\n\n    if (!response.ok) {\n      const error = await response.text();\n      throw new Error(`OpenAI API error: ${response.status} ${error}`);\n    }\n\n    const data = (await response.json()) as {\n      choices: Array<{\n        message: {\n          content: string;\n        };\n      }>;\n      usage?: {\n        prompt_tokens?: number;\n        completion_tokens?: number;\n        total_tokens?: number;\n      };\n    };\n\n    const content = data.choices?.[0]?.message?.content;\n    if (!content) {\n      throw new Error(\"Empty response from OpenAI API\");\n    }\n\n    return {\n      content,\n      usage: data.usage\n        ? {\n            inputTokens: data.usage.prompt_tokens,\n            outputTokens: data.usage.completion_tokens,\n            totalTokens: data.usage.total_tokens,\n          }\n        : undefined,\n    };\n  }\n\n  /**\n   * Call Ollama's native /api/chat transport. This lets benchmark-isolated\n   * gateway configs route Remnic's own internal LLM calls to Ollama Cloud\n   * without requiring an OpenAI-compatible shim.\n   */\n  private async callOllamaChat(\n    config: ModelProviderConfig,\n    modelId: string,\n    messages: Array<{ role: \"system\" | \"user\" | \"assistant\"; content: string }>,\n    options: FallbackLlmOptions,\n  ): Promise<{ content: string; usage?: FallbackLlmResponse[\"usage\"] } | null> {\n    const base = config.baseUrl.replace(/\\/$/, \"\");\n    const url = base.endsWith(\"/api\") ? `${base}/chat` : `${base}/api/chat`;\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/json\",\n      ...config.headers,\n    };\n    if (config.apiKey && typeof config.apiKey === \"string\" && config.authHeader !== false) {\n      headers.Authorization = `Bearer ${config.apiKey}`;\n    }\n\n    const response = await fetch(url, {\n      method: \"POST\",\n      headers,\n      signal: options.signal,\n      body: JSON.stringify({\n        model: modelId,\n        messages,\n        stream: false,\n        ...(config.disableThinking ? { think: false } : {}),\n        options: {\n          temperature: options.temperature ?? 0.3,\n          num_predict: options.maxTokens ?? 4096,\n        },\n      }),\n    });\n\n    if (!response.ok) {\n      const error = await response.text();\n      throw new Error(`Ollama API error: ${response.status} ${error}`);\n    }\n\n    const data = (await response.json()) as {\n      message?: { content?: string };\n      response?: string;\n      prompt_eval_count?: number;\n      eval_count?: number;\n    };\n    const content = data.message?.content ?? data.response;\n    if (!content) {\n      throw new Error(\"Empty response from Ollama API\");\n    }\n\n    const inputTokens = data.prompt_eval_count ?? 0;\n    const outputTokens = data.eval_count ?? 0;\n    return {\n      content,\n      usage: {\n        inputTokens,\n        outputTokens,\n        totalTokens: inputTokens + outputTokens,\n      },\n    };\n  }\n\n  /**\n   * Call an OpenAI-compatible Responses API.\n   */\n  private async callOpenAIResponses(\n    config: ModelProviderConfig,\n    modelId: string,\n    messages: Array<{ role: \"system\" | \"user\" | \"assistant\"; content: string }>,\n    options: FallbackLlmOptions,\n  ): Promise<{ content: string; usage?: FallbackLlmResponse[\"usage\"] } | null> {\n    const base = config.baseUrl.replace(/\\/$/, \"\");\n    const url = base.endsWith(\"/v1\")\n      ? `${base}/responses`\n      : `${base}/v1/responses`;\n\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/json\",\n      ...config.headers,\n    };\n\n    if (config.apiKey && typeof config.apiKey === \"string\" && config.authHeader !== false) {\n      headers[\"Authorization\"] = `Bearer ${config.apiKey}`;\n    }\n\n    const instructions = messages\n      .filter((message) => message.role === \"system\")\n      .map((message) => message.content)\n      .join(\"\\n\\n\")\n      .trim();\n    const input = messages\n      .filter((message) => message.role !== \"system\")\n      .map((message) => ({\n        role: message.role,\n        content: [{\n          type: message.role === \"assistant\" ? \"output_text\" : \"input_text\",\n          text: message.content,\n        }],\n      }));\n\n    const body: Record<string, unknown> = {\n      model: modelId,\n      input,\n      max_output_tokens: Math.max(0, Math.floor(options.maxTokens ?? 4096)),\n      ...buildChatCompletionTemperature(modelId, options.temperature ?? 0.3, {\n        assumeOpenAI: shouldAssumeOpenAiChatCompletions(config.baseUrl),\n      }),\n      ...(options.store === undefined ? {} : { store: options.store }),\n      ...(options.jsonSchema || options.responsesJsonSchema\n        ? {\n            text: {\n              format: {\n                type: \"json_schema\",\n                name: (options.jsonSchema ?? options.responsesJsonSchema)!.name,\n                strict: (options.jsonSchema?.strict ?? (options.responsesJsonSchema ? true : false)),\n                schema: (options.jsonSchema ?? options.responsesJsonSchema)!.schema,\n              },\n            },\n          }\n        : {}),\n    };\n    if (instructions.length > 0) {\n      body.instructions = instructions;\n    }\n\n    const response = await fetch(url, {\n      method: \"POST\",\n      headers,\n      signal: options.signal,\n      body: JSON.stringify(body),\n    });\n\n    if (!response.ok) {\n      const error = await response.text();\n      throw new Error(`OpenAI Responses API error: ${response.status} ${error}`);\n    }\n\n    const data = (await response.json()) as {\n      output_text?: string;\n      output?: Array<{\n        type?: string;\n        text?: string;\n        content?: Array<{\n          type?: string;\n          text?: string;\n        }>;\n      }>;\n      usage?: {\n        input_tokens?: number;\n        output_tokens?: number;\n        total_tokens?: number;\n      };\n    };\n\n    const outputText = extractResponsesOutputText(data);\n    if (!outputText) {\n      throw new Error(\"Empty response from OpenAI Responses API\");\n    }\n\n    return {\n      content: outputText,\n      usage: data.usage\n        ? {\n            inputTokens: data.usage.input_tokens,\n            outputTokens: data.usage.output_tokens,\n            totalTokens: data.usage.total_tokens,\n          }\n        : undefined,\n    };\n  }\n\n  /**\n   * Call Anthropic Messages API.\n   */\n  private async callAnthropic(\n    config: ModelProviderConfig,\n    modelId: string,\n    messages: Array<{ role: \"system\" | \"user\" | \"assistant\"; content: string }>,\n    options: FallbackLlmOptions,\n  ): Promise<{ content: string; usage?: FallbackLlmResponse[\"usage\"] } | null> {\n    const base = config.baseUrl.replace(/\\/$/, \"\");\n    const url = base.endsWith(\"/v1\")\n      ? `${base}/messages`\n      : `${base}/v1/messages`;\n\n    const headers: Record<string, string> = {\n      \"Content-Type\": \"application/json\",\n      \"anthropic-version\": \"2023-06-01\",\n      ...config.headers,\n    };\n\n    // Handle auth - Anthropic uses x-api-key header (apiKey resolved by tryModel)\n    if (config.apiKey && typeof config.apiKey === \"string\") {\n      headers[\"x-api-key\"] = config.apiKey;\n    }\n\n    // Extract system message (Anthropic handles it separately)\n    const systemMessage = messages.find((m) => m.role === \"system\")?.content;\n    const nonSystemMessages = messages.filter((m) => m.role !== \"system\");\n\n    // Convert messages to Anthropic format\n    const anthropicMessages = nonSystemMessages.map((m) => ({\n      role: m.role,\n      content: m.content,\n    }));\n\n    const body: Record<string, unknown> = {\n      model: modelId,\n      messages: anthropicMessages,\n      max_tokens: options.maxTokens ?? 4096,\n      temperature: options.temperature ?? 0.3,\n    };\n\n    if (systemMessage) {\n      body.system = systemMessage;\n    }\n\n    const response = await fetch(url, {\n      method: \"POST\",\n      headers,\n      signal: options.signal,\n      body: JSON.stringify(body),\n    });\n\n    if (!response.ok) {\n      const error = await response.text();\n      throw new Error(`Anthropic API error: ${response.status} ${error}`);\n    }\n\n    const data = (await response.json()) as {\n      content: Array<{\n        type: string;\n        text: string;\n      }>;\n      usage?: {\n        input_tokens?: number;\n        output_tokens?: number;\n      };\n    };\n\n    const content = data.content?.[0]?.text;\n    if (!content) {\n      throw new Error(\"Empty response from Anthropic API\");\n    }\n\n    return {\n      content,\n      usage: data.usage\n        ? {\n            inputTokens: data.usage.input_tokens,\n            outputTokens: data.usage.output_tokens,\n            totalTokens: (data.usage.input_tokens ?? 0) + (data.usage.output_tokens ?? 0),\n          }\n        : undefined,\n    };\n  }\n}\n\nfunction abortReason(signal: AbortSignal | undefined): Error {\n  const reason = signal?.reason;\n  return reason instanceof Error ? reason : new Error(\"fallback LLM request aborted\");\n}\n\nfunction normalizeRuntimePath(value: unknown): string | undefined {\n  if (typeof value !== \"string\") return undefined;\n  const trimmed = value.trim();\n  return trimmed.length > 0 ? expandTildePath(trimmed) : undefined;\n}\n\nfunction readGatewayWorkspaceDir(gatewayConfig: GatewayConfig | undefined): string | undefined {\n  if (!gatewayConfig || typeof gatewayConfig !== \"object\") return undefined;\n  const raw = gatewayConfig as Record<string, unknown>;\n  return (\n    normalizeRuntimePath(raw.workspaceDir) ??\n    normalizeRuntimePath(raw.workspacePath) ??\n    normalizeRuntimePath(raw.workspace)\n  );\n}\n\nfunction defaultOpenClawWorkspaceDir(): string {\n  return path.join(resolveHomeDir(), \".openclaw\", \"workspace\");\n}\n\nfunction extractResponsesOutputText(data: {\n  output_text?: string;\n  output?: Array<{\n    type?: string;\n    text?: string;\n    content?: Array<{\n      type?: string;\n      text?: string;\n    }>;\n  }>;\n}): string | null {\n  if (typeof data.output_text === \"string\" && data.output_text.trim().length > 0) {\n    return data.output_text;\n  }\n\n  const chunks: string[] = [];\n  for (const item of data.output ?? []) {\n    if (typeof item.text === \"string\" && item.text.trim().length > 0) {\n      chunks.push(item.text);\n    }\n    for (const part of item.content ?? []) {\n      if (\n        (part.type === \"output_text\" || part.type === \"text\") &&\n        typeof part.text === \"string\" &&\n        part.text.trim().length > 0\n      ) {\n        chunks.push(part.text);\n      }\n    }\n  }\n\n  const joined = chunks.join(\"\\n\").trim();\n  return joined.length > 0 ? joined : null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,OAAO,UAAU;AA0DV,SAAS,wBACd,QACoD;AACpD,MAAI,OAAO,gBAAgB,UAAW,QAAO,CAAC;AAC9C,MAAI,OAAO,eAAgB,QAAO,EAAE,YAAY,OAAO,eAAe;AACtE,SAAO,OAAO,iBAAiB,EAAE,SAAS,OAAO,eAAe,IAAI,CAAC;AACvE;AAmBO,SAAS,oCACd,QAIA,YAAuC,CAAC,GACb;AAC3B,SAAO;AAAA,IACL,cAAc,OAAO;AAAA,IACrB,0BAA0B,OAAO;AAAA,IACjC,wBAAwB,OAAO;AAAA,IAC/B,GAAG;AAAA,EACL;AACF;AAeA,SAAS,6BAA6B,OAAyB;AAC7D,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAKrE,MAAI,CAAC,sBAAsB,KAAK,OAAO,GAAG;AACxC,WAAO;AAAA,EACT;AACA,MAAI,iEAAiE,KAAK,OAAO,GAAG;AAClF,WAAO;AAAA,EACT;AAEA,SAAO,oDAAoD,KAAK,OAAO;AACzE;AAEA,IAAM,mBAAsD;AAAA,EAC1D,gBAAgB,CAAC,OAAO;AAAA,EACxB,OAAO,CAAC,cAAc;AAAA,EACtB,cAAc,CAAC,WAAW;AAC5B;AAEA,IAAM,sBAAsB,oBAAI,IAAI,CAAC,gBAAgB,YAAY,CAAC;AAElE,IAAM,2BAA2B,CAAC,aAAa,SAAS,EAAE,KAAK,GAAG;AAClE,IAAM,yBAAyB,CAAC,OAAO,KAAK,EAAE,KAAK,EAAE;AAYrD,IAAM,8BAAmE;AAAA,EACvE,WAAW;AAAA,IACT,SAAS;AAAA,IACT,KAAK;AAAA,IACL,QAAQ,CAAC;AAAA,IACT,CAAC,sBAAsB,GAAG;AAAA,EAC5B;AAAA,EACA,QAAQ;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,QAAQ,CAAC;AAAA,IACT,CAAC,sBAAsB,GAAG;AAAA,EAC5B;AACF;AAOO,IAAM,oBAAN,MAAwB;AAAA,EACrB;AAAA,EACA;AAAA,EAER,YACE,eACA,iBAA4C,CAAC,GAC7C;AACA,SAAK,gBAAgB;AACrB,SAAK,iBAAiB;AAAA,MACpB,GAAG;AAAA,MACH,cACE,qBAAqB,eAAe,YAAY,KAChD,wBAAwB,aAAa,KACrC,4BAA4B;AAAA,IAChC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,YAAY,kBAAqE;AAC/E,UAAM,UAAU,OAAO,qBAAqB,WACxC,EAAE,SAAS,iBAAiB,IAC3B,oBAAoB,CAAC;AAC1B,UAAM,SAAS,KAAK,cAAc,QAAQ,SAAS,QAAW,QAAQ,UAAU;AAChF,WAAO,OAAO,SAAS;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,eACJ,UACA,UAA8B,CAAC,GACM;AACrC,UAAM,SAAS,KAAK;AAAA,MAClB,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AACA,QAAI,OAAO,WAAW,GAAG;AACvB,UAAI,KAAK,+CAA+C;AACxD,aAAO;AAAA,IACT;AAEA,UAAM,WAAW,OACf,mBACwC;AACxC,UAAI,aAAa;AACjB,UAAI,uBAAmD;AAEvD,eAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,YAAI,WAAW,QAAQ,SAAS;AAC9B,gBAAM,YAAY,WAAW,MAAM;AAAA,QACrC;AACA,cAAM,QAAQ,OAAO,CAAC;AACtB,cAAM,aAAa,IAAI;AAEvB,YAAI;AACF,gBAAM,SAAS,MAAM,KAAK,SAAS,OAAO,UAAU,UAAU;AAC9D,cAAI,QAAQ;AACV,kBAAM,WAAW;AAAA,cACf,SAAS,OAAO;AAAA,cAChB,WAAW,MAAM;AAAA,cACjB,OAAO,OAAO;AAAA,YAChB;AACA,gBAAI,WAAW,kBAAkB,CAAC,WAAW,eAAe,QAAQ,GAAG;AACrE,qCAAuB;AACvB,kBAAI,MAAM,iBAAiB,MAAM,WAAW,2CAA2C;AACvF;AAAA,YACF;AACA,gBAAI,YAAY;AACd,kBAAI,MAAM,iCAAiC,MAAM,WAAW,cAAc,CAAC,GAAG;AAAA,YAChF;AACA,mBAAO;AAAA,UACT;AAAA,QACF,SAAS,KAAK;AACZ,cAAI,WAAW,QAAQ,SAAS;AAC9B,kBAAM,YAAY,WAAW,MAAM;AAAA,UACrC;AACA,eACG,WAAW,cAAc,WAAW,wBACrC,6BAA6B,GAAG,GAChC;AACA,gBAAI,MAAM,iBAAiB,MAAM,WAAW,mDAAmD;AAI/F,yBAAa;AAAA,cACX,GAAG;AAAA,cACH,YAAY;AAAA,cACZ,qBAAqB;AAAA,YACvB;AACA,gBAAI;AACF,oBAAM,SAAS,MAAM,KAAK,SAAS,OAAO,UAAU,UAAU;AAC9D,kBAAI,QAAQ;AACV,sBAAM,WAAW;AAAA,kBACf,SAAS,OAAO;AAAA,kBAChB,WAAW,MAAM;AAAA,kBACjB,OAAO,OAAO;AAAA,gBAChB;AACA,oBAAI,CAAC,WAAW,kBAAkB,WAAW,eAAe,QAAQ,GAAG;AACrE,yBAAO;AAAA,gBACT;AACA,uCAAuB;AACvB,oBAAI,MAAM,iBAAiB,MAAM,WAAW,6EAA6E;AACzH;AAAA,cACF;AAAA,YACF,SAAS,YAAY;AACnB,kBAAI,WAAW,QAAQ,QAAS,OAAM,YAAY,WAAW,MAAM;AACnE,oBAAM,gBAAgB,WAAW,uBAC7B,oCACA,sBAAsB,QACpB,WAAW,UACX,OAAO,UAAU;AACvB,kBAAI;AAAA,gBACF,iBAAiB,MAAM,WAAW,+BAA+B,aAAa;AAAA,cAChF;AAAA,YACF;AACA;AAAA,UACF;AACA,gBAAM,WAAW,WAAW,uBACxB,oCACA,eAAe,QACb,IAAI,UACJ,OAAO,GAAG;AAChB,cAAI,MAAM,iBAAiB,MAAM,WAAW,YAAY,QAAQ,mBAAmB;AAAA,QAErF;AAAA,MACF;AAEA,UAAI,KAAK,qBAAqB,OAAO,MAAM,yBAAyB;AACpE,aAAO;AAAA,IACT;AAEA,QAAI,OAAO,QAAQ,cAAc,UAAU;AACzC,UAAI,QAAQ,aAAa,GAAG;AAC1B,YAAI,KAAK,gDAAgD;AACzD,eAAO;AAAA,MACT;AACA,UAAI;AACJ,YAAM,aAAa,IAAI,gBAAgB;AACvC,YAAM,gBAAgB,MAAY;AAChC,mBAAW,MAAM,YAAY,QAAQ,MAAM,CAAC;AAAA,MAC9C;AACA,cAAQ,QAAQ,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AACvE,UAAI,QAAQ,QAAQ,SAAS;AAC3B,sBAAc;AAAA,MAChB;AACA,YAAM,eAAe,EAAE,GAAG,SAAS,QAAQ,WAAW,OAAO;AAC7D,YAAM,QAAQ,SAAS,YAAY;AACnC,YAAM,MAAM,MAAM;AAAA,MAAC,CAAC;AACpB,UAAI;AACF,eAAO,MAAM,QAAQ,KAAK;AAAA,UACxB;AAAA,UACA,IAAI,QAAc,CAAC,YAAY;AAC7B,4BAAgB,WAAW,MAAM;AAC/B,kBAAI,KAAK,iCAAiC,QAAQ,SAAS,IAAI;AAC/D,yBAAW;AAAA,gBACT,IAAI,MAAM,gCAAgC,QAAQ,SAAS,IAAI;AAAA,cACjE;AACA,sBAAQ,IAAI;AAAA,YACd,GAAG,QAAQ,SAAS;AAAA,UACtB,CAAC;AAAA,QACH,CAAC;AAAA,MACH,UAAE;AACA,YAAI,cAAe,cAAa,aAAa;AAC7C,gBAAQ,QAAQ,oBAAoB,SAAS,aAAa;AAAA,MAC5D;AAAA,IACF;AAEA,WAAO,MAAM,SAAS,OAAO;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,gBACJ,UACA,QACA,UAA8B,CAAC,GACZ;AACnB,UAAM,WAAW,MAAM,KAAK,wBAAwB,UAAU,QAAQ,OAAO;AAC7E,WAAO,UAAU,UAAU;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,wBACJ,UACA,QACA,UAA8B,CAAC,GAI/B;AACA,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,KAAK,eAAe,UAAU,OAAO;AAAA,IACxD,SAAS,KAAK;AAIZ,UAAI,QAAQ,QAAQ,QAAS,OAAM;AACnC,UAAI,KAAK,+DAA+D,GAAG;AAC3E,aAAO,EAAE,QAAQ,MAAM,eAAe,aAAa;AAAA,IACrD;AACA,QAAI,CAAC,UAAU,SAAS;AAKtB,YAAM,YACJ,KAAK;AAAA,QACH,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV,EAAE,SAAS;AACb,aAAO,EAAE,QAAQ,MAAM,eAAe,YAAY,eAAe,YAAY;AAAA,IAC/E;AAEA,QAAI;AACF,YAAM,aAAa,sBAAsB,SAAS,OAAO;AACzD,iBAAW,KAAK,YAAY;AAC1B,YAAI;AACF,gBAAM,SAAS,KAAK,MAAM,CAAC;AAC3B,iBAAO,EAAE,QAAQ,OAAO,MAAM,MAAM,GAAG,WAAW,SAAS,UAAU;AAAA,QACvE,QAAQ;AAAA,QAER;AAAA,MACF;AACA,aAAO,EAAE,QAAQ,MAAM,eAAe,QAAQ;AAAA,IAChD,SAAS,KAAK;AACZ,UAAI,KAAK,oDAAoD,GAAG;AAChE,aAAO,EAAE,QAAQ,MAAM,eAAe,QAAQ;AAAA,IAChD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWQ,cACN,SACA,eACA,oBACA,8BAA8B,MAClB;AACZ,UAAM,QAAoB,CAAC;AAC3B,UAAM,YAAY,KAAK,eAAe,QAAQ,aAAa,CAAC;AAG5D,QAAI;AAEJ,QAAI,oBAAoB,SAAS;AAC/B,oBAAc;AACd,UAAI,MAAM,mDAAmD;AAAA,IAC/D,WAAW,oBAAoB;AAC7B,UAAI,KAAK,4EAA4E;AAAA,IACvF;AAEA,QAAI,CAAC,eAAe,SAAS;AAC3B,YAAM,UAAU,KAAK,eAAe,QAAQ,MAAM;AAAA,QAChD,CAAC,MAAM,EAAE,OAAO;AAAA,MAClB;AACA,UAAI,SAAS,OAAO;AAClB,sBAAc,QAAQ;AACtB,YAAI,MAAM,sCAAsC,OAAO,eAAe;AAAA,MACxE,OAAO;AACL,YAAI;AAAA,UACF,gCAAgC,OAAO;AAAA,QACzC;AAAA,MACF;AAAA,IACF;AAEA,QAAI,CAAC,aAAa;AAChB,oBAAc,KAAK,eAAe,QAAQ,UAAU;AAAA,IACtD;AAGA,UAAM,eAAyB,CAAC;AAEhC,UAAM,iBAAiB,CAAC,UAAyB;AAC/C,UAAI,OAAO,UAAU,SAAU;AAC/B,YAAM,UAAU,MAAM,KAAK;AAC3B,UAAI,QAAQ,SAAS,KAAK,CAAC,aAAa,SAAS,OAAO,GAAG;AACzD,qBAAa,KAAK,OAAO;AAAA,MAC3B;AAAA,IACF;AAEA,mBAAe,aAAa;AAC5B,mBAAe,aAAa,OAAO;AAEnC,QAAI,MAAM,QAAQ,aAAa,SAAS,GAAG;AACzC,iBAAW,MAAM,YAAY,WAAW;AACtC,uBAAe,EAAE;AAAA,MACnB;AAAA,IACF;AAGA,eAAW,eAAe,cAAc;AACtC,YAAM,WAAW,KAAK,iBAAiB,aAAa,SAAS;AAC7D,UAAI,UAAU;AACZ,cAAM,KAAK,QAAQ;AAAA,MACrB;AAAA,IACF;AASA,QAAI,+BAA+B,oBAAoB,WAAW,aAAa,SAAS,GAAG;AAIzF,YAAM,WAAW,KAAK,eAAe,QAAQ,UAAU;AACvD,YAAM,iBAA2B;AAAA,QAC/B,GAAI,OAAO,UAAU,YAAY,WAAW,CAAC,SAAS,OAAO,IAAI,CAAC;AAAA,QAClE,GAAI,MAAM,QAAQ,UAAU,SAAS,IAAI,SAAS,YAAY,CAAC;AAAA,MACjE;AACA,iBAAW,aAAa,gBAAgB;AACtC,YAAI,OAAO,cAAc,SAAU;AACnC,cAAM,UAAU,UAAU,KAAK;AAC/B,YAAI,QAAQ,WAAW,KAAK,aAAa,SAAS,OAAO,EAAG;AAC5D,cAAM,aAAa,KAAK,iBAAiB,SAAS,SAAS;AAC3D,YAAI,YAAY;AACd,gBAAM,KAAK,UAAU;AACrB,uBAAa,KAAK,OAAO;AACzB,cAAI;AAAA,YACF,iDAAiD,OAAO;AAAA,UAC1D;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKQ,iBACN,aACA,WACiB;AAEjB,UAAM,QAAQ,YAAY,MAAM,GAAG;AACnC,QAAI,MAAM,SAAS,GAAG;AACpB,UAAI,KAAK,uCAAuC,WAAW,EAAE;AAC7D,aAAO;AAAA,IACT;AAEA,UAAM,sBAAsB,MAAM,CAAC;AACnC,UAAM,UAAU,MAAM,MAAM,CAAC,EAAE,KAAK,GAAG;AAMvC,UAAM,mBAAmB,KAAK,sBAAsB,qBAAqB,SAAS;AAClF,UAAM,iBAAiB,kBAAkB;AACzC,QAAI,CAAC,gBAAgB;AACnB,UAAI;AAAA,QACF,qCAAqC,mBAAmB,YAC7C,KAAK,6BAA6B,mBAAmB,EAAE,KAAK,IAAI,CAAC;AAAA,MAC9E;AACA,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,MACL,YAAY,iBAAiB;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,sBACN,YACA,WAC4D;AAC5D,UAAM,aAAa,KAAK,6BAA6B,UAAU;AAC/D,UAAM,kBAAkB,WAAW,OAAO,CAAC,cAAc,cAAc,UAAU;AACjF,UAAM,qBAAqB,oBAAoB,IAAI,UAAU,IACzD,CAAC,GAAG,iBAAiB,UAAU,IAC/B,CAAC,YAAY,GAAG,eAAe;AACnC,eAAW,aAAa,YAAY;AAClC,YAAM,SAAS,UAAU,SAAS;AAClC,UAAI,QAAQ;AACV,YAAI,cAAc,YAAY;AAC5B,cAAI,MAAM,2BAA2B,UAAU,yBAAyB,SAAS,GAAG;AAAA,QACtF;AACA,eAAO,EAAE,YAAY,WAAW,OAAO;AAAA,MACzC;AAAA,IACF;AACA,eAAW,aAAa,oBAAoB;AAC1C,YAAM,SAAS,KAAK,sBAAsB,SAAS;AACnD,UAAI,QAAQ;AACV,YAAI,cAAc,YAAY;AAC5B,cAAI,MAAM,2BAA2B,UAAU,qCAAqC,SAAS,GAAG;AAAA,QAClG;AACA,eAAO,EAAE,YAAY,WAAW,OAAO;AAAA,MACzC;AACA,YAAM,gBAAgB,4BAA4B,SAAS;AAC3D,UAAI,eAAe;AACjB,YAAI,cAAc,YAAY;AAC5B,cAAI,MAAM,2BAA2B,UAAU,mCAAmC;AAClF,iBAAO,EAAE,YAAY,QAAQ,cAAc;AAAA,QAC7C;AACA,YAAI,MAAM,2BAA2B,UAAU,kCAAkC,SAAS,GAAG;AAC7F,eAAO,EAAE,YAAY,WAAW,QAAQ,cAAc;AAAA,MACxD;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,6BAA6B,YAA8B;AACjE,UAAM,aAAa,CAAC,YAAY,GAAI,iBAAiB,UAAU,KAAK,CAAC,CAAE;AACvE,WAAO,CAAC,GAAG,IAAI,IAAI,UAAU,CAAC;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,sBAAsB,YAAgD;AAC5E,UAAM,eAAe,wBAAwB;AAC7C,UAAM,SAAS,aAAa,UAAU;AACtC,QAAI,QAAQ;AACV,UAAI,MAAM,oCAAoC,UAAU,4BAA4B,OAAO,OAAO,SAAS,GAAG;AAC9G,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAc,SACZ,OACA,UACA,SAC2E;AAG3E,UAAM,cAAc,MAAM,eAAe,QAAQ,cAC7C,OACA,MAAM,KAAK,mBAAmB,KAAK;AACvC,UAAM,mBAAmB,aAAa,WAAW,MAAM,eAAe;AACtE,UAAM,iBAAiB,aAAa,WAEhC,MAAM,eAAe,QAAQ,eAAe,MAAM,eAAe,WAAW,SACxE,SACA,MAAM,KAAK,sBAAsB,KAAK;AAK9C,UAAM,SAAS,MAAM,eAAe;AACpC,UAAM,kBAAkB,WAAW,uBAC7B,OAAO,WAAW,YAAY,WAAW;AAC/C,QAAI,mBAAmB,CAAC,gBAAgB;AACtC,YAAM,IAAI,MAAM,yBAAyB,MAAM,UAAU,yCAAyC;AAAA,IACpG;AAEA,UAAM,kBAAuC;AAAA,MAC3C,GAAG,MAAM;AAAA,MACT,SAAS;AAAA,MACT,GAAI,iBAAiB,EAAE,QAAQ,eAAe,IAAI,CAAC;AAAA,IACrD;AAEA,QAAI,MAAM,eAAe,QAAQ,sBAAsB;AACrD,aAAO,MAAM,KAAK,cAAc,iBAAiB,MAAM,SAAS,UAAU,OAAO;AAAA,IACnF;AAEA,QAAI,MAAM,eAAe,QAAQ,aAAa;AAC5C,aAAO,MAAM;AAAA,QACX;AAAA,QACA,MAAM;AAAA,QACN;AAAA,QACA,EAAE,WAAW,QAAQ,WAAW,QAAQ,QAAQ,OAAO;AAAA,MACzD;AAAA,IACF;AAEA,QAAI,MAAM,eAAe,QAAQ,eAAe;AAC9C,aAAO,MAAM,KAAK,eAAe,iBAAiB,MAAM,SAAS,UAAU,OAAO;AAAA,IACpF;AAEA,QACE,MAAM,eAAe,QAAQ,sBAC7B,MAAM,eAAe,QAAQ,4BAC7B,MAAM,eAAe,QAAQ,0BAC7B;AACA,aAAO,MAAM,KAAK;AAAA,QAChB;AAAA,QACA,MAAM;AAAA,QACN;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAMA,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,kCAAkC,gBAAgB,OAAO;AAAA,IAC3D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,mBACZ,OACuD;AACvD,QAAI;AACF,YAAM,iBAAiB,MAAM,8BAA8B;AAAA,QACzD,wBAAwB,KAAK,eAAe;AAAA,MAC9C,CAAC;AACD,UAAI,CAAC,eAAgB,QAAO;AAE5B,YAAM,SAAS,MAAM,eAAe;AAAA,QAClC,OAAO;AAAA,UACL,UAAU,MAAM;AAAA,UAChB,IAAI,MAAM;AAAA,UACV,KAAK,MAAM,eAAe;AAAA,UAC1B,SAAS,MAAM,eAAe;AAAA,QAChC;AAAA,QACA,KAAK,KAAK;AAAA,QACV,cAAc,KAAK,eAAe;AAAA,MACpC,CAAC;AAED,UAAI,QAAQ,UAAU,QAAQ,SAAS;AACrC,YAAI;AAAA,UACF,4CAA4C,MAAM,WAAW,cAAc,OAAO,UAAU,SAAS,WAAW,OAAO,QAAQ,SAAS;AAAA,QAC1I;AACA,eAAO,EAAE,QAAQ,OAAO,QAAQ,SAAS,OAAO,QAAQ;AAAA,MAC1D;AAAA,IACF,SAAS,KAAK;AACZ,UAAI;AAAA,QACF,kDAAkD,MAAM,WAAW,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,MAC3H;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,sBAAsB,OAA8C;AAChF,WAAO;AAAA,MACL,MAAM;AAAA,MACN,MAAM,eAAe;AAAA,MACrB,KAAK;AAAA,MACL,KAAK,eAAe;AAAA,MACpB;AAAA,QACE,0BAA0B,KAAK,eAAe;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,WACZ,QACA,SACA,UACA,SACA,cAC2E;AAC3E,UAAM,OAAO,OAAO,QAAQ,QAAQ,OAAO,EAAE;AAC7C,UAAM,MAAM,KAAK,SAAS,KAAK,IAC3B,GAAG,IAAI,sBACP,GAAG,IAAI;AAEX,UAAM,UAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,GAAG,OAAO;AAAA,IACZ;AAGA,QAAI,OAAO,UAAU,OAAO,OAAO,WAAW,UAAU;AACtD,UAAI,OAAO,eAAe,OAAO;AAC/B,gBAAQ,eAAe,IAAI,UAAU,OAAO,MAAM;AAAA,MACpD;AAAA,IACF;AAEA,UAAM,OAAO;AAAA,MACX,OAAO;AAAA,MACP;AAAA,MACA,GAAG,+BAA+B,SAAS,QAAQ,eAAe,KAAK;AAAA,QACrE;AAAA,MACF,CAAC;AAAA,MACD,GAAG,8BAA8B,SAAS,QAAQ,aAAa,MAAM;AAAA,QACnE;AAAA,MACF,CAAC;AAAA,MACD,GAAI,QAAQ,aACR;AAAA,QACE,iBAAiB;AAAA,UACf,MAAM;AAAA,UACN,aAAa;AAAA,YACX,MAAM,QAAQ,WAAW;AAAA,YACzB,QAAQ,QAAQ,WAAW,UAAU;AAAA,YACrC,QAAQ,QAAQ,WAAW;AAAA,UAC7B;AAAA,QACF;AAAA,MACF,IACA,CAAC;AAAA,IACP;AAEA,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ,QAAQ;AAAA,MAChB,MAAM,KAAK,UAAU,IAAI;AAAA,IAC3B,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,QAAQ,MAAM,SAAS,KAAK;AAClC,YAAM,IAAI,MAAM,qBAAqB,SAAS,MAAM,IAAI,KAAK,EAAE;AAAA,IACjE;AAEA,UAAM,OAAQ,MAAM,SAAS,KAAK;AAalC,UAAM,UAAU,KAAK,UAAU,CAAC,GAAG,SAAS;AAC5C,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,MAAM,gCAAgC;AAAA,IAClD;AAEA,WAAO;AAAA,MACL;AAAA,MACA,OAAO,KAAK,QACR;AAAA,QACE,aAAa,KAAK,MAAM;AAAA,QACxB,cAAc,KAAK,MAAM;AAAA,QACzB,aAAa,KAAK,MAAM;AAAA,MAC1B,IACA;AAAA,IACN;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,eACZ,QACA,SACA,UACA,SAC2E;AAC3E,UAAM,OAAO,OAAO,QAAQ,QAAQ,OAAO,EAAE;AAC7C,UAAM,MAAM,KAAK,SAAS,MAAM,IAAI,GAAG,IAAI,UAAU,GAAG,IAAI;AAC5D,UAAM,UAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,GAAG,OAAO;AAAA,IACZ;AACA,QAAI,OAAO,UAAU,OAAO,OAAO,WAAW,YAAY,OAAO,eAAe,OAAO;AACrF,cAAQ,gBAAgB,UAAU,OAAO,MAAM;AAAA,IACjD;AAEA,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ,QAAQ;AAAA,MAChB,MAAM,KAAK,UAAU;AAAA,QACnB,OAAO;AAAA,QACP;AAAA,QACA,QAAQ;AAAA,QACR,GAAI,OAAO,kBAAkB,EAAE,OAAO,MAAM,IAAI,CAAC;AAAA,QACjD,SAAS;AAAA,UACP,aAAa,QAAQ,eAAe;AAAA,UACpC,aAAa,QAAQ,aAAa;AAAA,QACpC;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,QAAQ,MAAM,SAAS,KAAK;AAClC,YAAM,IAAI,MAAM,qBAAqB,SAAS,MAAM,IAAI,KAAK,EAAE;AAAA,IACjE;AAEA,UAAM,OAAQ,MAAM,SAAS,KAAK;AAMlC,UAAM,UAAU,KAAK,SAAS,WAAW,KAAK;AAC9C,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,MAAM,gCAAgC;AAAA,IAClD;AAEA,UAAM,cAAc,KAAK,qBAAqB;AAC9C,UAAM,eAAe,KAAK,cAAc;AACxC,WAAO;AAAA,MACL;AAAA,MACA,OAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA,aAAa,cAAc;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,oBACZ,QACA,SACA,UACA,SAC2E;AAC3E,UAAM,OAAO,OAAO,QAAQ,QAAQ,OAAO,EAAE;AAC7C,UAAM,MAAM,KAAK,SAAS,KAAK,IAC3B,GAAG,IAAI,eACP,GAAG,IAAI;AAEX,UAAM,UAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,GAAG,OAAO;AAAA,IACZ;AAEA,QAAI,OAAO,UAAU,OAAO,OAAO,WAAW,YAAY,OAAO,eAAe,OAAO;AACrF,cAAQ,eAAe,IAAI,UAAU,OAAO,MAAM;AAAA,IACpD;AAEA,UAAM,eAAe,SAClB,OAAO,CAAC,YAAY,QAAQ,SAAS,QAAQ,EAC7C,IAAI,CAAC,YAAY,QAAQ,OAAO,EAChC,KAAK,MAAM,EACX,KAAK;AACR,UAAM,QAAQ,SACX,OAAO,CAAC,YAAY,QAAQ,SAAS,QAAQ,EAC7C,IAAI,CAAC,aAAa;AAAA,MACjB,MAAM,QAAQ;AAAA,MACd,SAAS,CAAC;AAAA,QACR,MAAM,QAAQ,SAAS,cAAc,gBAAgB;AAAA,QACrD,MAAM,QAAQ;AAAA,MAChB,CAAC;AAAA,IACH,EAAE;AAEJ,UAAM,OAAgC;AAAA,MACpC,OAAO;AAAA,MACP;AAAA,MACA,mBAAmB,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,aAAa,IAAI,CAAC;AAAA,MACpE,GAAG,+BAA+B,SAAS,QAAQ,eAAe,KAAK;AAAA,QACrE,cAAc,kCAAkC,OAAO,OAAO;AAAA,MAChE,CAAC;AAAA,MACD,GAAI,QAAQ,UAAU,SAAY,CAAC,IAAI,EAAE,OAAO,QAAQ,MAAM;AAAA,MAC9D,GAAI,QAAQ,cAAc,QAAQ,sBAC9B;AAAA,QACE,MAAM;AAAA,UACJ,QAAQ;AAAA,YACN,MAAM;AAAA,YACN,OAAO,QAAQ,cAAc,QAAQ,qBAAsB;AAAA,YAC3D,QAAS,QAAQ,YAAY,WAAW,QAAQ,sBAAsB,OAAO;AAAA,YAC7E,SAAS,QAAQ,cAAc,QAAQ,qBAAsB;AAAA,UAC/D;AAAA,QACF;AAAA,MACF,IACA,CAAC;AAAA,IACP;AACA,QAAI,aAAa,SAAS,GAAG;AAC3B,WAAK,eAAe;AAAA,IACtB;AAEA,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ,QAAQ;AAAA,MAChB,MAAM,KAAK,UAAU,IAAI;AAAA,IAC3B,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,QAAQ,MAAM,SAAS,KAAK;AAClC,YAAM,IAAI,MAAM,+BAA+B,SAAS,MAAM,IAAI,KAAK,EAAE;AAAA,IAC3E;AAEA,UAAM,OAAQ,MAAM,SAAS,KAAK;AAiBlC,UAAM,aAAa,2BAA2B,IAAI;AAClD,QAAI,CAAC,YAAY;AACf,YAAM,IAAI,MAAM,0CAA0C;AAAA,IAC5D;AAEA,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,KAAK,QACR;AAAA,QACE,aAAa,KAAK,MAAM;AAAA,QACxB,cAAc,KAAK,MAAM;AAAA,QACzB,aAAa,KAAK,MAAM;AAAA,MAC1B,IACA;AAAA,IACN;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,cACZ,QACA,SACA,UACA,SAC2E;AAC3E,UAAM,OAAO,OAAO,QAAQ,QAAQ,OAAO,EAAE;AAC7C,UAAM,MAAM,KAAK,SAAS,KAAK,IAC3B,GAAG,IAAI,cACP,GAAG,IAAI;AAEX,UAAM,UAAkC;AAAA,MACtC,gBAAgB;AAAA,MAChB,qBAAqB;AAAA,MACrB,GAAG,OAAO;AAAA,IACZ;AAGA,QAAI,OAAO,UAAU,OAAO,OAAO,WAAW,UAAU;AACtD,cAAQ,WAAW,IAAI,OAAO;AAAA,IAChC;AAGA,UAAM,gBAAgB,SAAS,KAAK,CAAC,MAAM,EAAE,SAAS,QAAQ,GAAG;AACjE,UAAM,oBAAoB,SAAS,OAAO,CAAC,MAAM,EAAE,SAAS,QAAQ;AAGpE,UAAM,oBAAoB,kBAAkB,IAAI,CAAC,OAAO;AAAA,MACtD,MAAM,EAAE;AAAA,MACR,SAAS,EAAE;AAAA,IACb,EAAE;AAEF,UAAM,OAAgC;AAAA,MACpC,OAAO;AAAA,MACP,UAAU;AAAA,MACV,YAAY,QAAQ,aAAa;AAAA,MACjC,aAAa,QAAQ,eAAe;AAAA,IACtC;AAEA,QAAI,eAAe;AACjB,WAAK,SAAS;AAAA,IAChB;AAEA,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ,QAAQ;AAAA,MAChB,MAAM,KAAK,UAAU,IAAI;AAAA,IAC3B,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,QAAQ,MAAM,SAAS,KAAK;AAClC,YAAM,IAAI,MAAM,wBAAwB,SAAS,MAAM,IAAI,KAAK,EAAE;AAAA,IACpE;AAEA,UAAM,OAAQ,MAAM,SAAS,KAAK;AAWlC,UAAM,UAAU,KAAK,UAAU,CAAC,GAAG;AACnC,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI,MAAM,mCAAmC;AAAA,IACrD;AAEA,WAAO;AAAA,MACL;AAAA,MACA,OAAO,KAAK,QACR;AAAA,QACE,aAAa,KAAK,MAAM;AAAA,QACxB,cAAc,KAAK,MAAM;AAAA,QACzB,cAAc,KAAK,MAAM,gBAAgB,MAAM,KAAK,MAAM,iBAAiB;AAAA,MAC7E,IACA;AAAA,IACN;AAAA,EACF;AACF;AAEA,SAAS,YAAY,QAAwC;AAC3D,QAAM,SAAS,QAAQ;AACvB,SAAO,kBAAkB,QAAQ,SAAS,IAAI,MAAM,8BAA8B;AACpF;AAEA,SAAS,qBAAqB,OAAoC;AAChE,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,SAAS,IAAI,gBAAgB,OAAO,IAAI;AACzD;AAEA,SAAS,wBAAwB,eAA8D;AAC7F,MAAI,CAAC,iBAAiB,OAAO,kBAAkB,SAAU,QAAO;AAChE,QAAM,MAAM;AACZ,SACE,qBAAqB,IAAI,YAAY,KACrC,qBAAqB,IAAI,aAAa,KACtC,qBAAqB,IAAI,SAAS;AAEtC;AAEA,SAAS,8BAAsC;AAC7C,SAAO,KAAK,KAAK,eAAe,GAAG,aAAa,WAAW;AAC7D;AAEA,SAAS,2BAA2B,MAUlB;AAChB,MAAI,OAAO,KAAK,gBAAgB,YAAY,KAAK,YAAY,KAAK,EAAE,SAAS,GAAG;AAC9E,WAAO,KAAK;AAAA,EACd;AAEA,QAAM,SAAmB,CAAC;AAC1B,aAAW,QAAQ,KAAK,UAAU,CAAC,GAAG;AACpC,QAAI,OAAO,KAAK,SAAS,YAAY,KAAK,KAAK,KAAK,EAAE,SAAS,GAAG;AAChE,aAAO,KAAK,KAAK,IAAI;AAAA,IACvB;AACA,eAAW,QAAQ,KAAK,WAAW,CAAC,GAAG;AACrC,WACG,KAAK,SAAS,iBAAiB,KAAK,SAAS,WAC9C,OAAO,KAAK,SAAS,YACrB,KAAK,KAAK,KAAK,EAAE,SAAS,GAC1B;AACA,eAAO,KAAK,KAAK,IAAI;AAAA,MACvB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAAS,OAAO,KAAK,IAAI,EAAE,KAAK;AACtC,SAAO,OAAO,SAAS,IAAI,SAAS;AACtC;","names":[]}

package/dist/{chunk-5ACCD4L7.js → chunk-JRRQ747T.js}

@@ -1,10 +1,6 @@
 import {
   warnProjectionFallback
 } from "./chunk-ZA53AZND.js";
-import {
-  ensureContainedSpillDir,
-  listContainedSpillFiles
-} from "./chunk-GCASGYIO.js";
 import {
   MEMORY_LIFECYCLE_LEDGER_APPEND_LOCK_MAX_WAIT_MS,
   MEMORY_LIFECYCLE_LEDGER_LOCK_STALE_MS,
@@ -20,10 +16,14 @@ import {
   readProjectedEntityMentions,
   readProjectedGovernanceRecord,
   readProjectedNativeKnowledgeChunks
-} from "./chunk-2LWQSV6A.js";
+} from "./chunk-AL3UYZ5N.js";
 import {
   displayErrorDetail
 } from "./chunk-RL6NEVXT.js";
+import {
+  ensureContainedSpillDir,
+  listContainedSpillFiles
+} from "./chunk-GCASGYIO.js";
 import {
   withHeldFileLock
 } from "./chunk-FFAZ2XFU.js";
@@ -31,7 +31,7 @@ import {
   MAGIC_HEADER_SIZE,
   SecureStoreLockedError,
   isEncryptedFile
-} from "./chunk-XQ3HXAQH.js";
+} from "./chunk-ET2CNMLD.js";
 import {
   isErrnoCode
 } from "./chunk-5UZXUTVO.js";
@@ -753,4 +753,4 @@ export {
   drainPendingLifecycleLedgerForSync,
   drainPendingLifecycleForSyncOrThrow
 };
-//# sourceMappingURL=chunk-5ACCD4L7.js.map
+//# sourceMappingURL=chunk-JRRQ747T.js.map

package/dist/{chunk-V4IDF3EZ.js → chunk-JTWZKNUH.js}

@@ -1,7 +1,7 @@
 import {
   judgeContradictionPairs,
   resolveScanStorage
-} from "./chunk-Q4WONDMJ.js";
+} from "./chunk-YYGZJPOK.js";
 import {
   CONTRADICTION_VERBS,
   PREFERENCE_DRIFT_VERBS,
@@ -10,12 +10,12 @@ import {
   resolvePair,
   writePairs
 } from "./chunk-CTVWELNK.js";
-import {
-  composeMemoryEnvelope
-} from "./chunk-H2YSH3DG.js";
 import {
   bumpMemoryCorpusVersionForDir
 } from "./chunk-XCB6QDL6.js";
+import {
+  composeMemoryEnvelope
+} from "./chunk-WKAXBXVA.js";
 import {
   readJsonFile,
   writeJsonFileAtomic
@@ -876,4 +876,4 @@ export {
   isValidResolutionVerb,
   executeResolution
 };
-//# sourceMappingURL=chunk-V4IDF3EZ.js.map
+//# sourceMappingURL=chunk-JTWZKNUH.js.map

package/dist/chunk-K66OY4EI.js

@@ -0,0 +1,202 @@
+import {
+  OKF_RESERVED_BASENAMES
+} from "./chunk-GEJKYA7D.js";
+import {
+  MAGIC_BYTES
+} from "./chunk-ET2CNMLD.js";
+
+// src/okf/lint.ts
+import fs from "fs";
+import path from "path";
+function isEncryptedBlob(raw) {
+  return raw.startsWith(MAGIC_BYTES.toString("ascii"));
+}
+function hasFrontmatter(raw) {
+  return raw.startsWith("---\n") || raw.startsWith("---\r\n");
+}
+function readType(raw) {
+  const close = raw.indexOf("\n---", 4);
+  if (close === -1) return void 0;
+  const block = raw.slice(4, close);
+  const match = /^type:[ \t]*(.*)$/m.exec(block);
+  if (!match) return void 0;
+  const value = match[1].trim().replace(/^["']|["']$/g, "");
+  return value;
+}
+function walkMarkdown(root, out) {
+  let entries;
+  try {
+    entries = fs.readdirSync(root, { withFileTypes: true });
+  } catch {
+    return;
+  }
+  for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {
+    if (entry.name === "state" || entry.name === ".git") continue;
+    const full = path.join(root, entry.name);
+    let stat;
+    try {
+      stat = fs.lstatSync(full);
+    } catch {
+      continue;
+    }
+    if (stat.isSymbolicLink()) continue;
+    if (stat.isDirectory()) {
+      walkMarkdown(full, out);
+      continue;
+    }
+    if (stat.isFile() && entry.name.endsWith(".md")) out.push(full);
+  }
+}
+function lintOkfDir(memoryDir) {
+  const files = [];
+  walkMarkdown(memoryDir, files);
+  const findings = [];
+  for (const file of files) {
+    const rel = path.relative(memoryDir, file);
+    const base = path.basename(file);
+    if (OKF_RESERVED_BASENAMES[base] === true) {
+      findings.push({
+        file: rel,
+        code: "reserved_basename",
+        message: `${base} is reserved by OKF \xA76/\xA77`
+      });
+      continue;
+    }
+    let raw;
+    try {
+      raw = fs.readFileSync(file, "utf8");
+    } catch {
+      continue;
+    }
+    if (isEncryptedBlob(raw)) {
+      findings.push({
+        file: rel,
+        code: "skipped_encrypted",
+        message: "skipped (encrypted)"
+      });
+      continue;
+    }
+    if (!hasFrontmatter(raw)) {
+      findings.push({
+        file: rel,
+        code: "missing_frontmatter",
+        message: "missing YAML frontmatter"
+      });
+      continue;
+    }
+    const type = readType(raw);
+    if (type === void 0) {
+      findings.push({ file: rel, code: "missing_type", message: "missing type" });
+    } else if (type.length === 0) {
+      findings.push({ file: rel, code: "empty_type", message: "empty type" });
+    }
+  }
+  const actionable = findings.filter((f) => f.code !== "skipped_encrypted");
+  return { ok: actionable.length === 0, scanned: files.length, findings };
+}
+
+// src/okf/render.ts
+import { lstatSync, mkdirSync, readdirSync, renameSync, rmSync, writeFileSync } from "fs";
+import path2 from "path";
+var OKF_EXPORT_VERSION = "0.1";
+function renderFrontmatter(fields) {
+  const keys = Object.keys(fields).sort((a, b) => {
+    const order = ["type", "title", "description", "tags", "timestamp"];
+    const ai = order.indexOf(a);
+    const bi = order.indexOf(b);
+    if (ai >= 0 || bi >= 0) return (ai < 0 ? 99 : ai) - (bi < 0 ? 99 : bi);
+    return a.localeCompare(b);
+  });
+  const lines = keys.flatMap((key) => yamlLine(key, fields[key]));
+  return `---
+${lines.join("\n")}
+---
+
+`;
+}
+function yamlLine(key, value) {
+  if (value === void 0) return [];
+  if (Array.isArray(value)) {
+    if (value.length === 0) return [`${key}: []`];
+    if (value.every((item) => typeof item !== "object" || item === null)) {
+      return [`${key}:`, ...value.map((item) => `  - ${yamlScalar(item)}`)];
+    }
+    return [`${key}: ${JSON.stringify(value)}`];
+  }
+  if (typeof value === "object" && value !== null) return [`${key}: ${JSON.stringify(value)}`];
+  return [`${key}: ${yamlScalar(value)}`];
+}
+function yamlScalar(value) {
+  if (typeof value === "string") {
+    if (value === "" || /[:#\n]/.test(value) || value !== value.trim()) return JSON.stringify(value);
+    return value;
+  }
+  return String(value);
+}
+function writeBundleFile(root, rel, content) {
+  const dest = path2.join(root, ...rel.split("/"));
+  mkdirSync(path2.dirname(dest), { recursive: true });
+  writeFileSync(dest, content, "utf8");
+}
+function publishBundle(staging, outDir, force) {
+  let exists = false;
+  try {
+    const stat = lstatSync(outDir);
+    if (stat.isSymbolicLink()) throw new Error(`--out must not be a symlink: ${outDir}`);
+    exists = true;
+    const entries = readdirSync(outDir).filter((name) => name !== "." && name !== "..");
+    if (entries.length > 0 && !force) {
+      rmSync(staging, { recursive: true, force: true });
+      throw new Error(`--out ${outDir} is not empty; pass --force to replace it`);
+    }
+  } catch (err) {
+    if (err.code !== "ENOENT") throw err;
+  }
+  mkdirSync(path2.dirname(outDir), { recursive: true });
+  if (exists && force) {
+    const backup = `${outDir}.okf-prev`;
+    try {
+      renameSync(outDir, backup);
+    } catch {
+      rmSync(staging, { recursive: true, force: true });
+      throw new Error(`cannot replace --out ${outDir}`);
+    }
+    try {
+      renameSync(staging, outDir);
+      rmSync(backup, { recursive: true, force: true });
+    } catch (err) {
+      try {
+        renameSync(backup, outDir);
+      } catch {
+      }
+      throw err;
+    }
+    return;
+  }
+  renameSync(staging, outDir);
+}
+function rejectSymlinkPath(target) {
+  let current = path2.resolve(target);
+  while (true) {
+    try {
+      if (lstatSync(current).isSymbolicLink()) {
+        throw new Error(`--out path component is a symlink: ${current}`);
+      }
+    } catch (err) {
+      if (err.code !== "ENOENT") throw err;
+    }
+    const parent = path2.dirname(current);
+    if (parent === current) break;
+    current = parent;
+  }
+}
+
+export {
+  lintOkfDir,
+  OKF_EXPORT_VERSION,
+  renderFrontmatter,
+  writeBundleFile,
+  publishBundle,
+  rejectSymlinkPath
+};
+//# sourceMappingURL=chunk-K66OY4EI.js.map

package/dist/chunk-K66OY4EI.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/okf/lint.ts","../src/okf/render.ts"],"sourcesContent":["import fs from \"node:fs\";\nimport path from \"node:path\";\n\nimport { MAGIC_BYTES } from \"../secure-store/secure-fs.js\";\nimport { OKF_RESERVED_BASENAMES } from \"./type-mapping.js\";\n\nexport interface OkfLintFinding {\n  file: string;\n  code: \"missing_frontmatter\" | \"missing_type\" | \"empty_type\" | \"reserved_basename\" | \"skipped_encrypted\";\n  message: string;\n}\n\nexport interface OkfLintResult {\n  ok: boolean;\n  scanned: number;\n  findings: OkfLintFinding[];\n}\n\nfunction isEncryptedBlob(raw: string): boolean {\n  // secure-store writes a binary envelope starting with MAGIC_BYTES at offset\n  // 0 — match that fixed position, never a substring anywhere in the file.\n  return raw.startsWith(MAGIC_BYTES.toString(\"ascii\"));\n}\n\nfunction hasFrontmatter(raw: string): boolean {\n  return raw.startsWith(\"---\\n\") || raw.startsWith(\"---\\r\\n\");\n}\n\nfunction readType(raw: string): string | undefined {\n  const close = raw.indexOf(\"\\n---\", 4);\n  if (close === -1) return undefined;\n  const block = raw.slice(4, close);\n  const match = /^type:[ \\t]*(.*)$/m.exec(block);\n  if (!match) return undefined;\n  const value = match[1]!.trim().replace(/^[\"']|[\"']$/g, \"\");\n  return value;\n}\n\nfunction walkMarkdown(root: string, out: string[]): void {\n  let entries: fs.Dirent[];\n  try {\n    entries = fs.readdirSync(root, { withFileTypes: true });\n  } catch {\n    return;\n  }\n  for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {\n    if (entry.name === \"state\" || entry.name === \".git\") continue;\n    const full = path.join(root, entry.name);\n    let stat: fs.Stats;\n    try {\n      stat = fs.lstatSync(full);\n    } catch {\n      continue;\n    }\n    if (stat.isSymbolicLink()) continue;\n    if (stat.isDirectory()) {\n      walkMarkdown(full, out);\n      continue;\n    }\n    if (stat.isFile() && entry.name.endsWith(\".md\")) out.push(full);\n  }\n}\n\nexport function lintOkfDir(memoryDir: string): OkfLintResult {\n  const files: string[] = [];\n  walkMarkdown(memoryDir, files);\n  const findings: OkfLintFinding[] = [];\n  for (const file of files) {\n    const rel = path.relative(memoryDir, file);\n    const base = path.basename(file);\n    if (OKF_RESERVED_BASENAMES[base] === true) {\n      findings.push({\n        file: rel,\n        code: \"reserved_basename\",\n        message: `${base} is reserved by OKF §6/§7`,\n      });\n      continue;\n    }\n    let raw: string;\n    try {\n      raw = fs.readFileSync(file, \"utf8\");\n    } catch {\n      continue;\n    }\n    if (isEncryptedBlob(raw)) {\n      findings.push({\n        file: rel,\n        code: \"skipped_encrypted\",\n        message: \"skipped (encrypted)\",\n      });\n      continue;\n    }\n    if (!hasFrontmatter(raw)) {\n      findings.push({\n        file: rel,\n        code: \"missing_frontmatter\",\n        message: \"missing YAML frontmatter\",\n      });\n      continue;\n    }\n    const type = readType(raw);\n    if (type === undefined) {\n      findings.push({ file: rel, code: \"missing_type\", message: \"missing type\" });\n    } else if (type.length === 0) {\n      findings.push({ file: rel, code: \"empty_type\", message: \"empty type\" });\n    }\n  }\n  const actionable = findings.filter((f) => f.code !== \"skipped_encrypted\");\n  return { ok: actionable.length === 0, scanned: files.length, findings };\n}\n","/**\n * Shared OKF bundle-rendering helpers (issues #1948 + #1950).\n *\n * One source of truth for the mechanics every OKF bundle exporter uses:\n * deterministic frontmatter rendering, staging-directory file writes, the\n * symlink-guarded atomic publish, and the bundle version stamp. The memory\n * exporter (transfer/export-okf.ts) and the codegraph exporter\n * (coding/export-okf-codegraph.ts) both consume this module so their\n * bundles are byte-compatible in convention (rule 38 — deterministic\n * rendering discipline; rule 9 — stable seam over shared mechanics).\n */\nimport { lstatSync, mkdirSync, readdirSync, renameSync, rmSync, writeFileSync } from \"node:fs\";\nimport path from \"node:path\";\n\n/** OKF spec version emitted in every bundle root index. */\nexport const OKF_EXPORT_VERSION = \"0.1\";\n\n/**\n * Render a YAML frontmatter block from a flat field map.\n *\n * Key order: the canonical OKF keys first (`type`, `title`, `description`,\n * `tags`, `timestamp`), everything else alphabetical — one deterministic\n * layout so identical inputs always render byte-identical files. A key set\n * to `undefined` is omitted; callers must not pass a key twice.\n */\nexport function renderFrontmatter(fields: Record<string, unknown>): string {\n  const keys = Object.keys(fields).sort((a, b) => {\n    const order = [\"type\", \"title\", \"description\", \"tags\", \"timestamp\"];\n    const ai = order.indexOf(a);\n    const bi = order.indexOf(b);\n    if (ai >= 0 || bi >= 0) return (ai < 0 ? 99 : ai) - (bi < 0 ? 99 : bi);\n    return a.localeCompare(b);\n  });\n  const lines = keys.flatMap((key) => yamlLine(key, fields[key]));\n  return `---\\n${lines.join(\"\\n\")}\\n---\\n\\n`;\n}\n\nfunction yamlLine(key: string, value: unknown): string[] {\n  if (value === undefined) return [];\n  if (Array.isArray(value)) {\n    if (value.length === 0) return [`${key}: []`];\n    if (value.every((item) => typeof item !== \"object\" || item === null)) {\n      return [`${key}:`, ...value.map((item) => `  - ${yamlScalar(item)}`)];\n    }\n    return [`${key}: ${JSON.stringify(value)}`];\n  }\n  if (typeof value === \"object\" && value !== null) return [`${key}: ${JSON.stringify(value)}`];\n  return [`${key}: ${yamlScalar(value)}`];\n}\n\nfunction yamlScalar(value: unknown): string {\n  if (typeof value === \"string\") {\n    if (value === \"\" || /[:#\\n]/.test(value) || value !== value.trim()) return JSON.stringify(value);\n    return value;\n  }\n  return String(value);\n}\n\n/**\n * Write one file into a bundle staging tree. `rel` is a POSIX-style\n * bundle-relative path; parent directories are created as needed.\n */\nexport function writeBundleFile(root: string, rel: string, content: string): void {\n  const dest = path.join(root, ...rel.split(\"/\"));\n  mkdirSync(path.dirname(dest), { recursive: true });\n  writeFileSync(dest, content, \"utf8\");\n}\n\n/**\n * Publish a staged bundle: refuse a non-empty target without `--force`,\n * swap via rename so the target is never observed half-written, and keep a\n * restorable backup when replacing an existing tree.\n */\nexport function publishBundle(staging: string, outDir: string, force: boolean): void {\n  let exists = false;\n  try {\n    const stat = lstatSync(outDir);\n    if (stat.isSymbolicLink()) throw new Error(`--out must not be a symlink: ${outDir}`);\n    exists = true;\n    const entries = readdirSync(outDir).filter((name) => name !== \".\" && name !== \"..\");\n    if (entries.length > 0 && !force) {\n      rmSync(staging, { recursive: true, force: true });\n      throw new Error(`--out ${outDir} is not empty; pass --force to replace it`);\n    }\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code !== \"ENOENT\") throw err;\n  }\n  mkdirSync(path.dirname(outDir), { recursive: true });\n  if (exists && force) {\n    const backup = `${outDir}.okf-prev`;\n    try {\n      renameSync(outDir, backup);\n    } catch {\n      rmSync(staging, { recursive: true, force: true });\n      throw new Error(`cannot replace --out ${outDir}`);\n    }\n    try {\n      renameSync(staging, outDir);\n      rmSync(backup, { recursive: true, force: true });\n    } catch (err) {\n      try {\n        renameSync(backup, outDir);\n      } catch {\n        // Keep backup if restore fails.\n      }\n      throw err;\n    }\n    return;\n  }\n  renameSync(staging, outDir);\n}\n\n/**\n * Reject a --out path with a symlink anywhere in its component chain\n * (pattern 42 + hermes-shim precedent): a symlinked component could aim\n * the atomic rename outside the operator's chosen directory.\n */\nexport function rejectSymlinkPath(target: string): void {\n  let current = path.resolve(target);\n  while (true) {\n    try {\n      if (lstatSync(current).isSymbolicLink()) {\n        throw new Error(`--out path component is a symlink: ${current}`);\n      }\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code !== \"ENOENT\") throw err;\n    }\n    const parent = path.dirname(current);\n    if (parent === current) break;\n    current = parent;\n  }\n}\n\n"],"mappings":";;;;;;;;AAAA,OAAO,QAAQ;AACf,OAAO,UAAU;AAiBjB,SAAS,gBAAgB,KAAsB;AAG7C,SAAO,IAAI,WAAW,YAAY,SAAS,OAAO,CAAC;AACrD;AAEA,SAAS,eAAe,KAAsB;AAC5C,SAAO,IAAI,WAAW,OAAO,KAAK,IAAI,WAAW,SAAS;AAC5D;AAEA,SAAS,SAAS,KAAiC;AACjD,QAAM,QAAQ,IAAI,QAAQ,SAAS,CAAC;AACpC,MAAI,UAAU,GAAI,QAAO;AACzB,QAAM,QAAQ,IAAI,MAAM,GAAG,KAAK;AAChC,QAAM,QAAQ,qBAAqB,KAAK,KAAK;AAC7C,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,MAAM,CAAC,EAAG,KAAK,EAAE,QAAQ,gBAAgB,EAAE;AACzD,SAAO;AACT;AAEA,SAAS,aAAa,MAAc,KAAqB;AACvD,MAAI;AACJ,MAAI;AACF,cAAU,GAAG,YAAY,MAAM,EAAE,eAAe,KAAK,CAAC;AAAA,EACxD,QAAQ;AACN;AAAA,EACF;AACA,aAAW,SAAS,QAAQ,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC,GAAG;AACxE,QAAI,MAAM,SAAS,WAAW,MAAM,SAAS,OAAQ;AACrD,UAAM,OAAO,KAAK,KAAK,MAAM,MAAM,IAAI;AACvC,QAAI;AACJ,QAAI;AACF,aAAO,GAAG,UAAU,IAAI;AAAA,IAC1B,QAAQ;AACN;AAAA,IACF;AACA,QAAI,KAAK,eAAe,EAAG;AAC3B,QAAI,KAAK,YAAY,GAAG;AACtB,mBAAa,MAAM,GAAG;AACtB;AAAA,IACF;AACA,QAAI,KAAK,OAAO,KAAK,MAAM,KAAK,SAAS,KAAK,EAAG,KAAI,KAAK,IAAI;AAAA,EAChE;AACF;AAEO,SAAS,WAAW,WAAkC;AAC3D,QAAM,QAAkB,CAAC;AACzB,eAAa,WAAW,KAAK;AAC7B,QAAM,WAA6B,CAAC;AACpC,aAAW,QAAQ,OAAO;AACxB,UAAM,MAAM,KAAK,SAAS,WAAW,IAAI;AACzC,UAAM,OAAO,KAAK,SAAS,IAAI;AAC/B,QAAI,uBAAuB,IAAI,MAAM,MAAM;AACzC,eAAS,KAAK;AAAA,QACZ,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS,GAAG,IAAI;AAAA,MAClB,CAAC;AACD;AAAA,IACF;AACA,QAAI;AACJ,QAAI;AACF,YAAM,GAAG,aAAa,MAAM,MAAM;AAAA,IACpC,QAAQ;AACN;AAAA,IACF;AACA,QAAI,gBAAgB,GAAG,GAAG;AACxB,eAAS,KAAK;AAAA,QACZ,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AACD;AAAA,IACF;AACA,QAAI,CAAC,eAAe,GAAG,GAAG;AACxB,eAAS,KAAK;AAAA,QACZ,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AACD;AAAA,IACF;AACA,UAAM,OAAO,SAAS,GAAG;AACzB,QAAI,SAAS,QAAW;AACtB,eAAS,KAAK,EAAE,MAAM,KAAK,MAAM,gBAAgB,SAAS,eAAe,CAAC;AAAA,IAC5E,WAAW,KAAK,WAAW,GAAG;AAC5B,eAAS,KAAK,EAAE,MAAM,KAAK,MAAM,cAAc,SAAS,aAAa,CAAC;AAAA,IACxE;AAAA,EACF;AACA,QAAM,aAAa,SAAS,OAAO,CAAC,MAAM,EAAE,SAAS,mBAAmB;AACxE,SAAO,EAAE,IAAI,WAAW,WAAW,GAAG,SAAS,MAAM,QAAQ,SAAS;AACxE;;;AClGA,SAAS,WAAW,WAAW,aAAa,YAAY,QAAQ,qBAAqB;AACrF,OAAOA,WAAU;AAGV,IAAM,qBAAqB;AAU3B,SAAS,kBAAkB,QAAyC;AACzE,QAAM,OAAO,OAAO,KAAK,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM;AAC9C,UAAM,QAAQ,CAAC,QAAQ,SAAS,eAAe,QAAQ,WAAW;AAClE,UAAM,KAAK,MAAM,QAAQ,CAAC;AAC1B,UAAM,KAAK,MAAM,QAAQ,CAAC;AAC1B,QAAI,MAAM,KAAK,MAAM,EAAG,SAAQ,KAAK,IAAI,KAAK,OAAO,KAAK,IAAI,KAAK;AACnE,WAAO,EAAE,cAAc,CAAC;AAAA,EAC1B,CAAC;AACD,QAAM,QAAQ,KAAK,QAAQ,CAAC,QAAQ,SAAS,KAAK,OAAO,GAAG,CAAC,CAAC;AAC9D,SAAO;AAAA,EAAQ,MAAM,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA;AACjC;AAEA,SAAS,SAAS,KAAa,OAA0B;AACvD,MAAI,UAAU,OAAW,QAAO,CAAC;AACjC,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,QAAI,MAAM,WAAW,EAAG,QAAO,CAAC,GAAG,GAAG,MAAM;AAC5C,QAAI,MAAM,MAAM,CAAC,SAAS,OAAO,SAAS,YAAY,SAAS,IAAI,GAAG;AACpE,aAAO,CAAC,GAAG,GAAG,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,OAAO,WAAW,IAAI,CAAC,EAAE,CAAC;AAAA,IACtE;AACA,WAAO,CAAC,GAAG,GAAG,KAAK,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,EAC5C;AACA,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO,CAAC,GAAG,GAAG,KAAK,KAAK,UAAU,KAAK,CAAC,EAAE;AAC3F,SAAO,CAAC,GAAG,GAAG,KAAK,WAAW,KAAK,CAAC,EAAE;AACxC;AAEA,SAAS,WAAW,OAAwB;AAC1C,MAAI,OAAO,UAAU,UAAU;AAC7B,QAAI,UAAU,MAAM,SAAS,KAAK,KAAK,KAAK,UAAU,MAAM,KAAK,EAAG,QAAO,KAAK,UAAU,KAAK;AAC/F,WAAO;AAAA,EACT;AACA,SAAO,OAAO,KAAK;AACrB;AAMO,SAAS,gBAAgB,MAAc,KAAa,SAAuB;AAChF,QAAM,OAAOA,MAAK,KAAK,MAAM,GAAG,IAAI,MAAM,GAAG,CAAC;AAC9C,YAAUA,MAAK,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AACjD,gBAAc,MAAM,SAAS,MAAM;AACrC;AAOO,SAAS,cAAc,SAAiB,QAAgB,OAAsB;AACnF,MAAI,SAAS;AACb,MAAI;AACF,UAAM,OAAO,UAAU,MAAM;AAC7B,QAAI,KAAK,eAAe,EAAG,OAAM,IAAI,MAAM,gCAAgC,MAAM,EAAE;AACnF,aAAS;AACT,UAAM,UAAU,YAAY,MAAM,EAAE,OAAO,CAAC,SAAS,SAAS,OAAO,SAAS,IAAI;AAClF,QAAI,QAAQ,SAAS,KAAK,CAAC,OAAO;AAChC,aAAO,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAChD,YAAM,IAAI,MAAM,SAAS,MAAM,2CAA2C;AAAA,IAC5E;AAAA,EACF,SAAS,KAAK;AACZ,QAAK,IAA8B,SAAS,SAAU,OAAM;AAAA,EAC9D;AACA,YAAUA,MAAK,QAAQ,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;AACnD,MAAI,UAAU,OAAO;AACnB,UAAM,SAAS,GAAG,MAAM;AACxB,QAAI;AACF,iBAAW,QAAQ,MAAM;AAAA,IAC3B,QAAQ;AACN,aAAO,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAChD,YAAM,IAAI,MAAM,wBAAwB,MAAM,EAAE;AAAA,IAClD;AACA,QAAI;AACF,iBAAW,SAAS,MAAM;AAC1B,aAAO,QAAQ,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,IACjD,SAAS,KAAK;AACZ,UAAI;AACF,mBAAW,QAAQ,MAAM;AAAA,MAC3B,QAAQ;AAAA,MAER;AACA,YAAM;AAAA,IACR;AACA;AAAA,EACF;AACA,aAAW,SAAS,MAAM;AAC5B;AAOO,SAAS,kBAAkB,QAAsB;AACtD,MAAI,UAAUA,MAAK,QAAQ,MAAM;AACjC,SAAO,MAAM;AACX,QAAI;AACF,UAAI,UAAU,OAAO,EAAE,eAAe,GAAG;AACvC,cAAM,IAAI,MAAM,sCAAsC,OAAO,EAAE;AAAA,MACjE;AAAA,IACF,SAAS,KAAK;AACZ,UAAK,IAA8B,SAAS,SAAU,OAAM;AAAA,IAC9D;AACA,UAAM,SAASA,MAAK,QAAQ,OAAO;AACnC,QAAI,WAAW,QAAS;AACxB,cAAU;AAAA,EACZ;AACF;","names":["path"]}

package/dist/{chunk-XAB6STPO.js → chunk-KODXCHXJ.js}

@@ -23,7 +23,8 @@ function defaultActivityConfig() {
     reviewTrust: 0.5,
     minConfidence: 0.7,
     minImportance: "normal",
-    maxMemoriesPerDay: 0
+    maxMemoriesPerDay: 0,
+    timeline: { enabled: false }
   };
 }
 function asRecord(value, name) {
@@ -148,13 +149,26 @@ function parseActivityConfig(raw) {
     reviewTrust,
     minConfidence: parseUnitInterval(config.minConfidence, "minConfidence", defaults.minConfidence),
     minImportance,
-    maxMemoriesPerDay
+    maxMemoriesPerDay,
+    timeline: parseTimelineConfig(config.timeline)
   };
 }
+function parseTimelineConfig(raw) {
+  if (raw === void 0) return { enabled: false };
+  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
+    throw new TypeError("activity.timeline must be an object");
+  }
+  const timeline = raw;
+  const enabledValue = coerceBooleanLike(timeline.enabled, "activity.timeline.enabled");
+  if (timeline.enabled !== void 0 && enabledValue === void 0) {
+    throw new TypeError("activity.timeline.enabled must be a boolean");
+  }
+  return { enabled: enabledValue ?? false };
+}
 
 export {
   defaultActivityConfig,
   validateActivityBaseUrl,
   parseActivityConfig
 };
-//# sourceMappingURL=chunk-XAB6STPO.js.map
+//# sourceMappingURL=chunk-KODXCHXJ.js.map