@remnic/core 9.69.32 → 9.69.34

package/dist/chunk-NPNSKE76.js

@@ -0,0 +1,220 @@
+import {
+  RECONCILE_MANIFEST_FORMAT,
+  RECONCILE_MANIFEST_SCHEMA_VERSION,
+  buildReconcileManifestFile,
+  citationTemplateFingerprint,
+  isCachedIdentityReusable,
+  isReconcileMemoryIdentity
+} from "./chunk-UBG4GAEP.js";
+import {
+  offlineSyncStorageForSnapshot
+} from "./chunk-C6KRO3SU.js";
+import {
+  createPersistedSupportPassportPrivateFileExclusion
+} from "./chunk-PWPIERBM.js";
+import {
+  iterateOfflineSyncSnapshotFileRecords
+} from "./chunk-WQZZDN5M.js";
+
+// src/access-offline-manifest.ts
+import * as nodePath from "path";
+function planServerIdentityCacheWrite(input) {
+  const entries = input.streamCompleted ? [...input.persisted.values()].filter((entry) => input.yieldedPaths.has(entry.path)) : [...input.persisted.values()];
+  return { shouldWrite: input.cacheDirty || entries.length !== input.persisted.size, entries };
+}
+function serverIdentityCachePath(storageDir) {
+  return nodePath.join(storageDir, ".remnic", "state", "converge-identity-cache.json");
+}
+async function loadServerIdentityCache(storageDir, citationTemplate) {
+  const cache = /* @__PURE__ */ new Map();
+  try {
+    const raw = JSON.parse(
+      await import("fs/promises").then((fs) => fs.readFile(serverIdentityCachePath(storageDir), "utf8"))
+    );
+    if (raw.citationTemplate !== citationTemplateFingerprint(citationTemplate)) return cache;
+    for (const candidate of raw.files ?? []) {
+      const entry = candidate;
+      if (typeof entry?.path !== "string" || typeof entry.sha256 !== "string") continue;
+      if (entry.memory !== void 0 && !isReconcileMemoryIdentity(entry.memory)) continue;
+      if (entry.statIdentity !== void 0 && typeof entry.statIdentity !== "string") continue;
+      if (entry.excluded !== void 0 && typeof entry.excluded !== "boolean") continue;
+      if (entry.normalizerVersion !== void 0 && typeof entry.normalizerVersion !== "number") continue;
+      if (entry.identityResolutionVersion !== void 0 && typeof entry.identityResolutionVersion !== "number") {
+        continue;
+      }
+      cache.set(entry.path, {
+        path: entry.path,
+        sha256: entry.sha256,
+        ...entry.memory ? { memory: entry.memory } : {},
+        ...entry.memory ? {} : {
+          ...typeof entry.normalizerVersion === "number" ? { normalizerVersion: entry.normalizerVersion } : {},
+          ...typeof entry.identityResolutionVersion === "number" ? { identityResolutionVersion: entry.identityResolutionVersion } : {}
+        },
+        ...entry.statIdentity !== void 0 && entry.excluded !== void 0 ? { statIdentity: entry.statIdentity, excluded: entry.excluded } : {}
+      });
+    }
+  } catch {
+  }
+  return cache;
+}
+var serverIdentityCacheWriteLocks = /* @__PURE__ */ new Map();
+async function withServerIdentityCacheWriteLock(cachePath, write) {
+  const previous = serverIdentityCacheWriteLocks.get(cachePath) ?? Promise.resolve();
+  const next = previous.then(write, write);
+  serverIdentityCacheWriteLocks.set(cachePath, next);
+  try {
+    await next;
+  } finally {
+    if (serverIdentityCacheWriteLocks.get(cachePath) === next) {
+      serverIdentityCacheWriteLocks.delete(cachePath);
+    }
+  }
+}
+async function mergeServerIdentityCacheEntries(fs, cachePath, entries, citationTemplate, dropped = /* @__PURE__ */ new Set()) {
+  const merged = new Map(entries.map((entry) => [entry.path, entry]));
+  try {
+    const raw = JSON.parse(await fs.readFile(cachePath, "utf8"));
+    if (raw.citationTemplate === citationTemplateFingerprint(citationTemplate)) {
+      for (const candidate of raw.files ?? []) {
+        const entry = candidate;
+        if (typeof entry?.path !== "string" || typeof entry.sha256 !== "string") continue;
+        if (entry.memory !== void 0 && !isReconcileMemoryIdentity(entry.memory)) continue;
+        if (dropped.has(entry.path) || merged.has(entry.path)) continue;
+        merged.set(entry.path, {
+          path: entry.path,
+          sha256: entry.sha256,
+          ...entry.memory ? { memory: entry.memory } : {},
+          ...entry.memory ? {} : {
+            ...typeof entry.normalizerVersion === "number" ? { normalizerVersion: entry.normalizerVersion } : {},
+            ...typeof entry.identityResolutionVersion === "number" ? { identityResolutionVersion: entry.identityResolutionVersion } : {}
+          }
+        });
+      }
+    }
+  } catch {
+  }
+  return [...merged.values()];
+}
+async function createOfflineSyncManifestStream(orchestrator, namespace, userExcludeRegexps, options, parseMemory) {
+  const storage = await offlineSyncStorageForSnapshot(orchestrator, namespace);
+  const citationTemplate = orchestrator.config.inlineSourceAttributionFormat;
+  const identityCache = await loadServerIdentityCache(storage.dir, citationTemplate);
+  const classificationUpdates = /* @__PURE__ */ new Map();
+  const snapshotFiles = iterateOfflineSyncSnapshotFileRecords({
+    root: storage.dir,
+    includeContent: false,
+    includeTranscripts: options.includeTranscripts !== false,
+    readFileDigest: async ({ filePath }) => storage.digestOfflineSyncFile(filePath),
+    signal: options.signal,
+    userExcludeRegexps,
+    excludeFile: createPersistedSupportPassportPrivateFileExclusion(storage, identityCache, classificationUpdates)
+  });
+  return {
+    namespace,
+    format: RECONCILE_MANIFEST_FORMAT,
+    schemaVersion: RECONCILE_MANIFEST_SCHEMA_VERSION,
+    files: (async function* () {
+      let cacheDirty = false;
+      let streamCompleted = false;
+      const persistedEntries = new Map(identityCache);
+      const yieldedPaths = /* @__PURE__ */ new Set();
+      const flush = async () => {
+        const { shouldWrite, entries } = planServerIdentityCacheWrite({
+          persisted: persistedEntries,
+          yieldedPaths,
+          streamCompleted,
+          cacheDirty
+        });
+        if (!shouldWrite) return;
+        try {
+          const fs = await import("fs/promises");
+          const cachePath = serverIdentityCachePath(storage.dir);
+          await withServerIdentityCacheWriteLock(cachePath, async () => {
+            const written = new Set(entries.map((entry) => entry.path));
+            const dropped = streamCompleted ? new Set([...identityCache.keys()].filter((pathName) => !written.has(pathName))) : /* @__PURE__ */ new Set();
+            const merged = await mergeServerIdentityCacheEntries(
+              fs,
+              cachePath,
+              entries,
+              citationTemplate,
+              dropped
+            );
+            await fs.mkdir(nodePath.dirname(cachePath), { recursive: true });
+            const tmp = `${cachePath}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;
+            await fs.writeFile(
+              tmp,
+              JSON.stringify({ citationTemplate: citationTemplateFingerprint(citationTemplate), files: merged })
+            );
+            await fs.rename(tmp, cachePath);
+          });
+        } catch {
+        }
+      };
+      try {
+        const applyClassification = (path, sha256) => {
+          const classification = classificationUpdates.get(path);
+          if (classification === void 0) return;
+          const entry = persistedEntries.get(path) ?? { path, sha256 };
+          if (entry.statIdentity === classification.statIdentity && entry.excluded === classification.excluded) {
+            return;
+          }
+          persistedEntries.set(path, {
+            ...entry,
+            ...entry.memory ? { memory: entry.memory } : {},
+            statIdentity: classification.statIdentity,
+            excluded: classification.excluded
+          });
+          cacheDirty = true;
+        };
+        for await (const file of snapshotFiles) {
+          yieldedPaths.add(file.path);
+          const cached = identityCache.get(file.path);
+          if (cached !== void 0 && cached.sha256.toLowerCase() === file.sha256.toLowerCase() && isCachedIdentityReusable(cached)) {
+            applyClassification(file.path, file.sha256);
+            yield {
+              ...file,
+              ...cached.memory ? { memory: cached.memory } : {
+                normalizerVersion: cached.normalizerVersion,
+                identityResolutionVersion: cached.identityResolutionVersion
+              }
+            };
+            continue;
+          }
+          const built = await buildReconcileManifestFile(
+            file,
+            async ({ path }) => storage.readOfflineSyncFile(nodePath.join(storage.dir, path)),
+            parseMemory,
+            citationTemplate
+          );
+          const previous = persistedEntries.get(built.path);
+          if (previous?.sha256 !== built.sha256 || built.memory !== void 0 && previous?.memory !== built.memory) {
+            cacheDirty = true;
+          }
+          if (built.memory === void 0 && built.normalizerVersion === void 0) {
+            yield built;
+            continue;
+          }
+          persistedEntries.set(built.path, {
+            path: built.path,
+            sha256: built.sha256,
+            ...built.memory !== void 0 ? { memory: built.memory } : {
+              normalizerVersion: built.normalizerVersion,
+              identityResolutionVersion: built.identityResolutionVersion
+            }
+          });
+          applyClassification(built.path, built.sha256);
+          yield built;
+        }
+        streamCompleted = true;
+      } finally {
+        await flush();
+      }
+    })()
+  };
+}
+
+export {
+  planServerIdentityCacheWrite,
+  createOfflineSyncManifestStream
+};
+//# sourceMappingURL=chunk-NPNSKE76.js.map

package/dist/chunk-NPNSKE76.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/access-offline-manifest.ts"],"sourcesContent":["import * as nodePath from \"node:path\";\nimport { offlineSyncStorageForSnapshot } from \"./offline-sync-impression-drain.js\";\nimport { iterateOfflineSyncSnapshotFileRecords } from \"./offline-sync.js\";\nimport type { Orchestrator } from \"./orchestrator.js\";\nimport {\n  CONTENT_HASH_NORMALIZER_VERSION,\n  IDENTITY_RESOLUTION_VERSION,\n  RECONCILE_MANIFEST_FORMAT,\n  RECONCILE_MANIFEST_SCHEMA_VERSION,\n  type ReconcileManifest,\n  type ReconcileManifestFile,\n  type ReconcileMemoryIdentity,\n  type ReconcileMemoryParser,\n  buildReconcileManifestFile,\n  citationTemplateFingerprint,\n  isCachedIdentityReusable,\n  isReconcileMemoryIdentity,\n} from \"./reconcile/manifest.js\";\nimport { createPersistedSupportPassportPrivateFileExclusion } from \"./support-passport/card-projection.js\";\n\nexport interface OfflineSyncManifestRequest {\n  includeTranscripts?: boolean;\n  signal?: AbortSignal;\n}\n\nexport interface OfflineSyncManifestStreamResponse extends Omit<ReconcileManifest, \"files\"> {\n  namespace: string;\n  files: AsyncIterable<ReconcileManifestFile>;\n}\n\nexport interface ServerIdentityCacheEntry {\n  path: string;\n  sha256: string;\n  memory?: ReconcileMemoryIdentity;\n  /** Stamped on sha-only entries so an upgrade re-parses them. */\n  normalizerVersion?: number;\n  identityResolutionVersion?: number;\n  /** Stat identity the exclusion classification was computed against. */\n  statIdentity?: string;\n  /** Persisted support-passport private-memory classification for statIdentity. */\n  excluded?: boolean;\n}\n\n/**\n * Decide what the manifest stream should persist, and whether a write is\n * needed at all.\n *\n * A write is required whenever the persisted set changed — an identity was\n * rebuilt, or an entry was dropped because its file lost its identity — and\n * also when a completed walk leaves entries for paths it never saw, which are\n * files that have since been deleted. Skipping the write in that last case\n * would strand those entries on disk forever.\n *\n * Pruning is gated on the walk completing: an aborted or partially consumed\n * stream has simply not observed the remaining paths, so it may only add.\n */\nexport function planServerIdentityCacheWrite(input: {\n  persisted: ReadonlyMap<string, ServerIdentityCacheEntry>;\n  yieldedPaths: ReadonlySet<string>;\n  streamCompleted: boolean;\n  cacheDirty: boolean;\n}): { shouldWrite: boolean; entries: ServerIdentityCacheEntry[] } {\n  const entries = input.streamCompleted\n    ? [...input.persisted.values()].filter((entry) => input.yieldedPaths.has(entry.path))\n    : [...input.persisted.values()];\n  return { shouldWrite: input.cacheDirty || entries.length !== input.persisted.size, entries };\n}\n\n/**\n * The cache lives under `.remnic/` rather than `state/`: snapshot enumeration\n * excludes internal `.remnic/` paths structurally (`isInternalRemnicStatePath`),\n * whereas `state/` is only filtered by an allowlist of known node-local\n * artifacts. Under `state/` this node-local cache would be advertised as a peer\n * file, so convergence would transfer the cache itself — and the stream rewrites\n * it during finalization, so the advertised digest could go stale mid-transfer.\n */\nfunction serverIdentityCachePath(storageDir: string): string {\n  return nodePath.join(storageDir, \".remnic\", \"state\", \"converge-identity-cache.json\");\n}\n\nasync function loadServerIdentityCache(\n  storageDir: string,\n  citationTemplate?: string\n): Promise<Map<string, ServerIdentityCacheEntry>> {\n  const cache = new Map<string, ServerIdentityCacheEntry>();\n  try {\n    const raw = JSON.parse(\n      await import(\"node:fs/promises\").then((fs) => fs.readFile(serverIdentityCachePath(storageDir), \"utf8\"))\n    ) as {\n      citationTemplate?: string;\n      files?: unknown[];\n    };\n    // Identities are derived after stripping inline attribution for a specific\n    // citation template; entries written under a different one would produce\n    // wrong contentHash values for unchanged files.\n    if (raw.citationTemplate !== citationTemplateFingerprint(citationTemplate)) return cache;\n    for (const candidate of raw.files ?? []) {\n      const entry = candidate as Partial<ServerIdentityCacheEntry> | null;\n      if (typeof entry?.path !== \"string\" || typeof entry.sha256 !== \"string\") continue;\n      if (entry.memory !== undefined && !isReconcileMemoryIdentity(entry.memory)) continue;\n      if (entry.statIdentity !== undefined && typeof entry.statIdentity !== \"string\") continue;\n      if (entry.excluded !== undefined && typeof entry.excluded !== \"boolean\") continue;\n      if (entry.normalizerVersion !== undefined && typeof entry.normalizerVersion !== \"number\") continue;\n      if (entry.identityResolutionVersion !== undefined && typeof entry.identityResolutionVersion !== \"number\") {\n        continue;\n      }\n      cache.set(entry.path, {\n        path: entry.path,\n        sha256: entry.sha256,\n        ...(entry.memory ? { memory: entry.memory } : {}),\n        ...(entry.memory\n          ? {}\n          : {\n              ...(typeof entry.normalizerVersion === \"number\" ? { normalizerVersion: entry.normalizerVersion } : {}),\n              ...(typeof entry.identityResolutionVersion === \"number\"\n                ? { identityResolutionVersion: entry.identityResolutionVersion }\n                : {}),\n            }),\n        ...(entry.statIdentity !== undefined && entry.excluded !== undefined\n          ? { statIdentity: entry.statIdentity, excluded: entry.excluded }\n          : {}),\n      });\n    }\n  } catch {\n    // missing or corrupt cache: cold build\n  }\n  return cache;\n}\n\nconst serverIdentityCacheWriteLocks = new Map<string, Promise<void>>();\n\n/** Serialize cache replacements per path: overlapping manifest streams for one\n * namespace would otherwise each publish a whole-file snapshot, and the slower\n * stream built from older filesystem state would overwrite the newer one. */\nasync function withServerIdentityCacheWriteLock(cachePath: string, write: () => Promise<void>): Promise<void> {\n  const previous = serverIdentityCacheWriteLocks.get(cachePath) ?? Promise.resolve();\n  const next = previous.then(write, write);\n  serverIdentityCacheWriteLocks.set(cachePath, next);\n  try {\n    await next;\n  } finally {\n    if (serverIdentityCacheWriteLocks.get(cachePath) === next) {\n      serverIdentityCacheWriteLocks.delete(cachePath);\n    }\n  }\n}\n\n/** Union of the entries being written and the current on-disk set; on conflict\n * the write wins (it reflects the newer run). Callers hold the write lock. */\nasync function mergeServerIdentityCacheEntries(\n  fs: typeof import(\"node:fs/promises\"),\n  cachePath: string,\n  entries: readonly ServerIdentityCacheEntry[],\n  citationTemplate: string | undefined,\n  dropped: ReadonlySet<string> = new Set()\n): Promise<ServerIdentityCacheEntry[]> {\n  const merged = new Map(entries.map((entry) => [entry.path, entry]));\n  try {\n    const raw = JSON.parse(await fs.readFile(cachePath, \"utf8\")) as {\n      citationTemplate?: string;\n      files?: unknown[];\n    };\n    if (raw.citationTemplate === citationTemplateFingerprint(citationTemplate)) {\n      for (const candidate of raw.files ?? []) {\n        const entry = candidate as Partial<ServerIdentityCacheEntry> | null;\n        if (typeof entry?.path !== \"string\" || typeof entry.sha256 !== \"string\") continue;\n        if (entry.memory !== undefined && !isReconcileMemoryIdentity(entry.memory)) continue;\n        if (dropped.has(entry.path) || merged.has(entry.path)) continue;\n        merged.set(entry.path, {\n          path: entry.path,\n          sha256: entry.sha256,\n          ...(entry.memory ? { memory: entry.memory } : {}),\n          ...(entry.memory\n            ? {}\n            : {\n                ...(typeof entry.normalizerVersion === \"number\" ? { normalizerVersion: entry.normalizerVersion } : {}),\n                ...(typeof entry.identityResolutionVersion === \"number\"\n                  ? { identityResolutionVersion: entry.identityResolutionVersion }\n                  : {}),\n              }),\n        });\n      }\n    }\n  } catch {\n    // missing or unreadable current cache: the write set stands alone\n  }\n  return [...merged.values()];\n}\n\nexport async function createOfflineSyncManifestStream(\n  orchestrator: Orchestrator,\n  namespace: string,\n  userExcludeRegexps: RegExp[],\n  options: OfflineSyncManifestRequest,\n  parseMemory: ReconcileMemoryParser\n): Promise<OfflineSyncManifestStreamResponse> {\n  const storage = await offlineSyncStorageForSnapshot(orchestrator, namespace);\n  const citationTemplate = orchestrator.config.inlineSourceAttributionFormat;\n  const identityCache = await loadServerIdentityCache(storage.dir, citationTemplate);\n  // The exclusion callback runs before every yield; without the persisted\n  // classification it would read and parse every candidate file, defeating the\n  // warm-cache skip entirely.\n  const classificationUpdates = new Map<string, { statIdentity: string; excluded: boolean }>();\n  const snapshotFiles = iterateOfflineSyncSnapshotFileRecords({\n    root: storage.dir,\n    includeContent: false,\n    includeTranscripts: options.includeTranscripts !== false,\n    readFileDigest: async ({ filePath }) => storage.digestOfflineSyncFile(filePath),\n    signal: options.signal,\n    userExcludeRegexps,\n    excludeFile: createPersistedSupportPassportPrivateFileExclusion(storage, identityCache, classificationUpdates),\n  });\n  return {\n    namespace,\n    format: RECONCILE_MANIFEST_FORMAT,\n    schemaVersion: RECONCILE_MANIFEST_SCHEMA_VERSION,\n    files: (async function* () {\n      // Any change to the persisted set, not just a rebuilt identity: a file\n      // that lost its identity, or a completed walk that must prune vanished\n      // paths, also has to reach disk or the removal is lost forever.\n      let cacheDirty = false;\n      let streamCompleted = false;\n      // Seeded with every previously cached entry so a partially consumed\n      // stream (client disconnect, abort) can only add to the cache. Writing\n      // just this run's rebuilds would drop every cache hit, so one edit to a\n      // large corpus would shrink the cache to that single entry and force a\n      // near-cold rebuild on the next request.\n      const persistedEntries = new Map(identityCache);\n      const yieldedPaths = new Set<string>();\n      const flush = async (): Promise<void> => {\n        const { shouldWrite, entries } = planServerIdentityCacheWrite({\n          persisted: persistedEntries,\n          yieldedPaths,\n          streamCompleted,\n          cacheDirty,\n        });\n        if (!shouldWrite) return;\n        try {\n          const fs = await import(\"node:fs/promises\");\n          const cachePath = serverIdentityCachePath(storage.dir);\n          await withServerIdentityCacheWriteLock(cachePath, async () => {\n            // Merge with whatever is on disk NOW: a concurrent stream for the\n            // same namespace may have published newer entries after this\n            // request loaded its snapshot, and a blind whole-file replace\n            // would discard them.\n            const written = new Set(entries.map((entry) => entry.path));\n            const dropped = streamCompleted\n              ? new Set([...identityCache.keys()].filter((pathName) => !written.has(pathName)))\n              : new Set<string>();\n            const merged = await mergeServerIdentityCacheEntries(\n              fs,\n              cachePath,\n              entries,\n              citationTemplate,\n              dropped\n            );\n            await fs.mkdir(nodePath.dirname(cachePath), { recursive: true });\n            const tmp = `${cachePath}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;\n            await fs.writeFile(\n              tmp,\n              JSON.stringify({ citationTemplate: citationTemplateFingerprint(citationTemplate), files: merged })\n            );\n            await fs.rename(tmp, cachePath);\n          });\n        } catch {\n          // cache persistence is best-effort\n        }\n      };\n      try {\n        const applyClassification = (path: string, sha256: string): void => {\n          const classification = classificationUpdates.get(path);\n          if (classification === undefined) return;\n          const entry = persistedEntries.get(path) ?? { path, sha256 };\n          if (entry.statIdentity === classification.statIdentity && entry.excluded === classification.excluded) {\n            return;\n          }\n          persistedEntries.set(path, {\n            ...entry,\n            ...(entry.memory ? { memory: entry.memory } : {}),\n            statIdentity: classification.statIdentity,\n            excluded: classification.excluded,\n          });\n          cacheDirty = true;\n        };\n        for await (const file of snapshotFiles) {\n          yieldedPaths.add(file.path);\n          const cached = identityCache.get(file.path);\n          if (\n            cached !== undefined &&\n            cached.sha256.toLowerCase() === file.sha256.toLowerCase() &&\n            isCachedIdentityReusable(cached)\n          ) {\n            applyClassification(file.path, file.sha256);\n            yield {\n              ...file,\n              ...(cached.memory\n                ? { memory: cached.memory }\n                : {\n                    normalizerVersion: cached.normalizerVersion,\n                    identityResolutionVersion: cached.identityResolutionVersion,\n                  }),\n            };\n            continue;\n          }\n          const built = await buildReconcileManifestFile(\n            file,\n            async ({ path }) => storage.readOfflineSyncFile(nodePath.join(storage.dir, path)),\n            parseMemory,\n            citationTemplate\n          );\n          // Negative results persist too: a memory-shaped file that parses\n          // without an identity would otherwise be re-read on every warm run.\n          const previous = persistedEntries.get(built.path);\n          if (previous?.sha256 !== built.sha256 || (built.memory !== undefined && previous?.memory !== built.memory)) {\n            cacheDirty = true;\n          }\n          if (built.memory === undefined && built.normalizerVersion === undefined) {\n            // Read failed: do not persist a negative identity for this SHA.\n            yield built;\n            continue;\n          }\n          persistedEntries.set(built.path, {\n            path: built.path,\n            sha256: built.sha256,\n            ...(built.memory !== undefined\n              ? { memory: built.memory }\n              : {\n                  normalizerVersion: built.normalizerVersion,\n                  identityResolutionVersion: built.identityResolutionVersion,\n                }),\n          });\n          applyClassification(built.path, built.sha256);\n          yield built;\n        }\n        streamCompleted = true;\n      } finally {\n        await flush();\n      }\n    })(),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA,YAAY,cAAc;AAwDnB,SAAS,6BAA6B,OAKqB;AAChE,QAAM,UAAU,MAAM,kBAClB,CAAC,GAAG,MAAM,UAAU,OAAO,CAAC,EAAE,OAAO,CAAC,UAAU,MAAM,aAAa,IAAI,MAAM,IAAI,CAAC,IAClF,CAAC,GAAG,MAAM,UAAU,OAAO,CAAC;AAChC,SAAO,EAAE,aAAa,MAAM,cAAc,QAAQ,WAAW,MAAM,UAAU,MAAM,QAAQ;AAC7F;AAUA,SAAS,wBAAwB,YAA4B;AAC3D,SAAgB,cAAK,YAAY,WAAW,SAAS,8BAA8B;AACrF;AAEA,eAAe,wBACb,YACA,kBACgD;AAChD,QAAM,QAAQ,oBAAI,IAAsC;AACxD,MAAI;AACF,UAAM,MAAM,KAAK;AAAA,MACf,MAAM,OAAO,aAAkB,EAAE,KAAK,CAAC,OAAO,GAAG,SAAS,wBAAwB,UAAU,GAAG,MAAM,CAAC;AAAA,IACxG;AAOA,QAAI,IAAI,qBAAqB,4BAA4B,gBAAgB,EAAG,QAAO;AACnF,eAAW,aAAa,IAAI,SAAS,CAAC,GAAG;AACvC,YAAM,QAAQ;AACd,UAAI,OAAO,OAAO,SAAS,YAAY,OAAO,MAAM,WAAW,SAAU;AACzE,UAAI,MAAM,WAAW,UAAa,CAAC,0BAA0B,MAAM,MAAM,EAAG;AAC5E,UAAI,MAAM,iBAAiB,UAAa,OAAO,MAAM,iBAAiB,SAAU;AAChF,UAAI,MAAM,aAAa,UAAa,OAAO,MAAM,aAAa,UAAW;AACzE,UAAI,MAAM,sBAAsB,UAAa,OAAO,MAAM,sBAAsB,SAAU;AAC1F,UAAI,MAAM,8BAA8B,UAAa,OAAO,MAAM,8BAA8B,UAAU;AACxG;AAAA,MACF;AACA,YAAM,IAAI,MAAM,MAAM;AAAA,QACpB,MAAM,MAAM;AAAA,QACZ,QAAQ,MAAM;AAAA,QACd,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,QAC/C,GAAI,MAAM,SACN,CAAC,IACD;AAAA,UACE,GAAI,OAAO,MAAM,sBAAsB,WAAW,EAAE,mBAAmB,MAAM,kBAAkB,IAAI,CAAC;AAAA,UACpG,GAAI,OAAO,MAAM,8BAA8B,WAC3C,EAAE,2BAA2B,MAAM,0BAA0B,IAC7D,CAAC;AAAA,QACP;AAAA,QACJ,GAAI,MAAM,iBAAiB,UAAa,MAAM,aAAa,SACvD,EAAE,cAAc,MAAM,cAAc,UAAU,MAAM,SAAS,IAC7D,CAAC;AAAA,MACP,CAAC;AAAA,IACH;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAEA,IAAM,gCAAgC,oBAAI,IAA2B;AAKrE,eAAe,iCAAiC,WAAmB,OAA2C;AAC5G,QAAM,WAAW,8BAA8B,IAAI,SAAS,KAAK,QAAQ,QAAQ;AACjF,QAAM,OAAO,SAAS,KAAK,OAAO,KAAK;AACvC,gCAA8B,IAAI,WAAW,IAAI;AACjD,MAAI;AACF,UAAM;AAAA,EACR,UAAE;AACA,QAAI,8BAA8B,IAAI,SAAS,MAAM,MAAM;AACzD,oCAA8B,OAAO,SAAS;AAAA,IAChD;AAAA,EACF;AACF;AAIA,eAAe,gCACb,IACA,WACA,SACA,kBACA,UAA+B,oBAAI,IAAI,GACF;AACrC,QAAM,SAAS,IAAI,IAAI,QAAQ,IAAI,CAAC,UAAU,CAAC,MAAM,MAAM,KAAK,CAAC,CAAC;AAClE,MAAI;AACF,UAAM,MAAM,KAAK,MAAM,MAAM,GAAG,SAAS,WAAW,MAAM,CAAC;AAI3D,QAAI,IAAI,qBAAqB,4BAA4B,gBAAgB,GAAG;AAC1E,iBAAW,aAAa,IAAI,SAAS,CAAC,GAAG;AACvC,cAAM,QAAQ;AACd,YAAI,OAAO,OAAO,SAAS,YAAY,OAAO,MAAM,WAAW,SAAU;AACzE,YAAI,MAAM,WAAW,UAAa,CAAC,0BAA0B,MAAM,MAAM,EAAG;AAC5E,YAAI,QAAQ,IAAI,MAAM,IAAI,KAAK,OAAO,IAAI,MAAM,IAAI,EAAG;AACvD,eAAO,IAAI,MAAM,MAAM;AAAA,UACrB,MAAM,MAAM;AAAA,UACZ,QAAQ,MAAM;AAAA,UACd,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,UAC/C,GAAI,MAAM,SACN,CAAC,IACD;AAAA,YACE,GAAI,OAAO,MAAM,sBAAsB,WAAW,EAAE,mBAAmB,MAAM,kBAAkB,IAAI,CAAC;AAAA,YACpG,GAAI,OAAO,MAAM,8BAA8B,WAC3C,EAAE,2BAA2B,MAAM,0BAA0B,IAC7D,CAAC;AAAA,UACP;AAAA,QACN,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO,CAAC,GAAG,OAAO,OAAO,CAAC;AAC5B;AAEA,eAAsB,gCACpB,cACA,WACA,oBACA,SACA,aAC4C;AAC5C,QAAM,UAAU,MAAM,8BAA8B,cAAc,SAAS;AAC3E,QAAM,mBAAmB,aAAa,OAAO;AAC7C,QAAM,gBAAgB,MAAM,wBAAwB,QAAQ,KAAK,gBAAgB;AAIjF,QAAM,wBAAwB,oBAAI,IAAyD;AAC3F,QAAM,gBAAgB,sCAAsC;AAAA,IAC1D,MAAM,QAAQ;AAAA,IACd,gBAAgB;AAAA,IAChB,oBAAoB,QAAQ,uBAAuB;AAAA,IACnD,gBAAgB,OAAO,EAAE,SAAS,MAAM,QAAQ,sBAAsB,QAAQ;AAAA,IAC9E,QAAQ,QAAQ;AAAA,IAChB;AAAA,IACA,aAAa,mDAAmD,SAAS,eAAe,qBAAqB;AAAA,EAC/G,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,QAAQ,mBAAmB;AAIzB,UAAI,aAAa;AACjB,UAAI,kBAAkB;AAMtB,YAAM,mBAAmB,IAAI,IAAI,aAAa;AAC9C,YAAM,eAAe,oBAAI,IAAY;AACrC,YAAM,QAAQ,YAA2B;AACvC,cAAM,EAAE,aAAa,QAAQ,IAAI,6BAA6B;AAAA,UAC5D,WAAW;AAAA,UACX;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AACD,YAAI,CAAC,YAAa;AAClB,YAAI;AACF,gBAAM,KAAK,MAAM,OAAO,aAAkB;AAC1C,gBAAM,YAAY,wBAAwB,QAAQ,GAAG;AACrD,gBAAM,iCAAiC,WAAW,YAAY;AAK5D,kBAAM,UAAU,IAAI,IAAI,QAAQ,IAAI,CAAC,UAAU,MAAM,IAAI,CAAC;AAC1D,kBAAM,UAAU,kBACZ,IAAI,IAAI,CAAC,GAAG,cAAc,KAAK,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,IAC9E,oBAAI,IAAY;AACpB,kBAAM,SAAS,MAAM;AAAA,cACnB;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,YACF;AACA,kBAAM,GAAG,MAAe,iBAAQ,SAAS,GAAG,EAAE,WAAW,KAAK,CAAC;AAC/D,kBAAM,MAAM,GAAG,SAAS,IAAI,QAAQ,GAAG,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AAC9E,kBAAM,GAAG;AAAA,cACP;AAAA,cACA,KAAK,UAAU,EAAE,kBAAkB,4BAA4B,gBAAgB,GAAG,OAAO,OAAO,CAAC;AAAA,YACnG;AACA,kBAAM,GAAG,OAAO,KAAK,SAAS;AAAA,UAChC,CAAC;AAAA,QACH,QAAQ;AAAA,QAER;AAAA,MACF;AACA,UAAI;AACF,cAAM,sBAAsB,CAAC,MAAc,WAAyB;AAClE,gBAAM,iBAAiB,sBAAsB,IAAI,IAAI;AACrD,cAAI,mBAAmB,OAAW;AAClC,gBAAM,QAAQ,iBAAiB,IAAI,IAAI,KAAK,EAAE,MAAM,OAAO;AAC3D,cAAI,MAAM,iBAAiB,eAAe,gBAAgB,MAAM,aAAa,eAAe,UAAU;AACpG;AAAA,UACF;AACA,2BAAiB,IAAI,MAAM;AAAA,YACzB,GAAG;AAAA,YACH,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,YAC/C,cAAc,eAAe;AAAA,YAC7B,UAAU,eAAe;AAAA,UAC3B,CAAC;AACD,uBAAa;AAAA,QACf;AACA,yBAAiB,QAAQ,eAAe;AACtC,uBAAa,IAAI,KAAK,IAAI;AAC1B,gBAAM,SAAS,cAAc,IAAI,KAAK,IAAI;AAC1C,cACE,WAAW,UACX,OAAO,OAAO,YAAY,MAAM,KAAK,OAAO,YAAY,KACxD,yBAAyB,MAAM,GAC/B;AACA,gCAAoB,KAAK,MAAM,KAAK,MAAM;AAC1C,kBAAM;AAAA,cACJ,GAAG;AAAA,cACH,GAAI,OAAO,SACP,EAAE,QAAQ,OAAO,OAAO,IACxB;AAAA,gBACE,mBAAmB,OAAO;AAAA,gBAC1B,2BAA2B,OAAO;AAAA,cACpC;AAAA,YACN;AACA;AAAA,UACF;AACA,gBAAM,QAAQ,MAAM;AAAA,YAClB;AAAA,YACA,OAAO,EAAE,KAAK,MAAM,QAAQ,oBAA6B,cAAK,QAAQ,KAAK,IAAI,CAAC;AAAA,YAChF;AAAA,YACA;AAAA,UACF;AAGA,gBAAM,WAAW,iBAAiB,IAAI,MAAM,IAAI;AAChD,cAAI,UAAU,WAAW,MAAM,UAAW,MAAM,WAAW,UAAa,UAAU,WAAW,MAAM,QAAS;AAC1G,yBAAa;AAAA,UACf;AACA,cAAI,MAAM,WAAW,UAAa,MAAM,sBAAsB,QAAW;AAEvE,kBAAM;AACN;AAAA,UACF;AACA,2BAAiB,IAAI,MAAM,MAAM;AAAA,YAC/B,MAAM,MAAM;AAAA,YACZ,QAAQ,MAAM;AAAA,YACd,GAAI,MAAM,WAAW,SACjB,EAAE,QAAQ,MAAM,OAAO,IACvB;AAAA,cACE,mBAAmB,MAAM;AAAA,cACzB,2BAA2B,MAAM;AAAA,YACnC;AAAA,UACN,CAAC;AACD,8BAAoB,MAAM,MAAM,MAAM,MAAM;AAC5C,gBAAM;AAAA,QACR;AACA,0BAAkB;AAAA,MACpB,UAAE;AACA,cAAM,MAAM;AAAA,MACd;AAAA,IACF,GAAG;AAAA,EACL;AACF;","names":[]}

package/dist/{chunk-MKWKYHXJ.js → chunk-OB3XMWX5.js}

@@ -1,10 +1,10 @@
+import {
+  scanMemoryDir
+} from "./chunk-4O6WRBGE.js";
 import {
   isSearchAborted,
   throwIfSearchAborted
 } from "./chunk-GUMZC2BO.js";
-import {
-  scanMemoryDir
-} from "./chunk-4O6WRBGE.js";
 import {
   reportSearchDegradation,
   resolveEnsureCollectionArgs
@@ -253,4 +253,4 @@ function isMeilisearchIndexNotFoundError(err) {
 export {
   MeilisearchBackend
 };
-//# sourceMappingURL=chunk-MKWKYHXJ.js.map
+//# sourceMappingURL=chunk-OB3XMWX5.js.map

package/dist/{chunk-XU6OEECT.js → chunk-OQQXGYMX.js}

@@ -1,7 +1,7 @@
 import {
   expandScopeProfileReadNamespaces,
   resolveScopeProfilePlan
-} from "./chunk-VGXM5B4H.js";
+} from "./chunk-MNIPH6LD.js";
 import {
   canReadNamespace,
   canWriteNamespace,
@@ -22,7 +22,7 @@ import {
   combineNamespaces,
   lcmReadSessionIdsForNamespaces,
   resolveCodingNamespaceOverlay
-} from "./chunk-NZXEK3UF.js";
+} from "./chunk-3Q3N35W7.js";
 
 // src/scopes/scope-plan.ts
 import path from "path";
@@ -204,4 +204,4 @@ export {
   resolveWritableNamespaceValue,
   resolveScopedWritableNamespaceValue
 };
-//# sourceMappingURL=chunk-XU6OEECT.js.map
+//# sourceMappingURL=chunk-OQQXGYMX.js.map

package/dist/{chunk-GTWHVXPA.js → chunk-OZUXKUPD.js}

@@ -5,18 +5,20 @@ import {
   rejectSymlinkPath,
   renderFrontmatter,
   writeBundleFile
-} from "./chunk-HY55QQD7.js";
+} from "./chunk-UJX4I26O.js";
 import {
   parseOaiMemCitation
 } from "./chunk-D24OXEPB.js";
 import {
   resolveNamespaceChildRoot
 } from "./chunk-3UXOZBHV.js";
+import {
+  StorageManager
+} from "./chunk-ZMKYCFJ7.js";
 import {
   OKF_PROFILE_TYPE,
-  StorageManager,
   okfTypeForMemory
-} from "./chunk-GVG3JYBI.js";
+} from "./chunk-PCEYGOSL.js";
 import {
   normalizeProjectionPreview
 } from "./chunk-SCU65EZI.js";
@@ -270,4 +272,4 @@ export {
   exportOkfBundle,
   firstHeading
 };
-//# sourceMappingURL=chunk-GTWHVXPA.js.map
+//# sourceMappingURL=chunk-OZUXKUPD.js.map

package/dist/{chunk-GTWHVXPA.js.map → chunk-OZUXKUPD.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/transfer/export-okf.ts"],"sourcesContent":["import { mkdirSync, rmSync } from \"node:fs\";\nimport { mkdtemp } from \"node:fs/promises\";\nimport path from \"node:path\";\n\nimport { parseOaiMemCitation } from \"../citations.js\";\nimport { inferMemoryStatus } from \"../memory-lifecycle-ledger-utils.js\";\nimport { normalizeProjectionPreview } from \"../memory-projection-format.js\";\nimport { lintOkfDir } from \"../okf/lint.js\";\nimport { okfTypeForMemory, OKF_PROFILE_TYPE } from \"../okf/type-mapping.js\";\nimport { resolveNamespaceChildRoot } from \"../namespaces/path.js\";\nimport {\n  OKF_EXPORT_VERSION,\n  publishBundle,\n  renderFrontmatter,\n  rejectSymlinkPath,\n  writeBundleFile,\n} from \"../okf/render.js\";\n// Re-exported for the existing `@remnic/core/export-okf` consumers and tests\n// (one public surface; the value itself now lives in okf/render.ts).\nexport { OKF_EXPORT_VERSION };\nimport { StorageManager } from \"../storage.js\";\nimport type { MemoryFile, MemoryLink, MemoryStatus } from \"../types.js\";\n\n// Shared bundle mechanics (frontmatter, publish, symlink guard, file write)\n// live in ../okf/render.ts — one source of truth for every OKF exporter.\nexport const OKF_LOG_TRUNCATION_MARKER = \"<!-- okf-log-truncated -->\";\nexport const DEFAULT_OKF_LOG_MAX_ENTRIES = 500;\n\nconst MEMORY_STATUSES: readonly MemoryStatus[] = [\n  \"active\",\n  \"pending_review\",\n  \"rejected\",\n  \"quarantined\",\n  \"superseded\",\n  \"archived\",\n  \"forgotten\",\n];\n\nexport interface ExportOkfOptions {\n  memoryDir: string;\n  /**\n   * Optional namespace segment. Resolved here, once, through the shared\n   * containment guard: both CLI entry points used to join the raw operator\n   * value onto `memoryDir/namespaces`, so `--namespace ../../..` escaped the\n   * namespace root and exported an arbitrary tree (rule 9 — one resolver, not\n   * a per-caller guard).\n   */\n  namespace?: string;\n  outDir: string;\n  includeStatus?: readonly string[];\n  includeCategories?: readonly string[];\n  excludeTags?: readonly string[];\n  includeProfile?: boolean;\n  includeWearables?: boolean;\n  includeLog?: boolean;\n  logMaxEntries?: number;\n  force?: boolean;\n}\n\nexport interface ExportOkfResult {\n  exported: number;\n  excluded: number;\n  byCategory: Record<string, number>;\n  plaintextWarning: boolean;\n}\n\nexport function parseIncludeStatus(raw: unknown): MemoryStatus[] {\n  const values = splitCsv(raw);\n  if (values.length === 0) return [\"active\"];\n  const allowed = new Set<string>(MEMORY_STATUSES);\n  for (const value of values) {\n    if (!allowed.has(value)) {\n      throw new Error(`invalid --include-status ${value}; allowed: ${MEMORY_STATUSES.join(\", \")}`);\n    }\n  }\n  return values as MemoryStatus[];\n}\n\nexport async function exportOkfBundle(opts: ExportOkfOptions): Promise<ExportOkfResult> {\n  const outDir = path.resolve(opts.outDir);\n  rejectSymlinkPath(outDir);\n  const namespace = (opts.namespace ?? \"\").trim();\n  const memoryDir = namespace\n    ? resolveNamespaceChildRoot(opts.memoryDir, namespace, \"--namespace\")\n    : opts.memoryDir;\n  const includeStatus = new Set(parseIncludeStatus(opts.includeStatus));\n  const includeCategories = opts.includeCategories?.length ? new Set(opts.includeCategories) : null;\n  const excludeTags = new Set(opts.excludeTags ?? []);\n  const storage = new StorageManager(memoryDir);\n  const memories = await storage.readAllMemories();\n  const included: MemoryFile[] = [];\n  let excluded = 0;\n  for (const memory of memories) {\n    const rel = toRel(memory.path, memoryDir);\n    if (!opts.includeWearables && rel.startsWith(\"wearables/\")) {\n      excluded += 1;\n      continue;\n    }\n    const status = inferMemoryStatus(memory.frontmatter, memory.path);\n    if (!includeStatus.has(status)) {\n      excluded += 1;\n      continue;\n    }\n    if (includeCategories && !includeCategories.has(memory.frontmatter.category)) {\n      excluded += 1;\n      continue;\n    }\n    if ((memory.frontmatter.tags ?? []).some((tag) => excludeTags.has(tag))) {\n      excluded += 1;\n      continue;\n    }\n    included.push(memory);\n  }\n  included.sort((a, b) => toRel(a.path, memoryDir).localeCompare(toRel(b.path, memoryDir)));\n\n  // Stage inside the destination's parent, not the OS temp dir: publishBundle\n  // finishes with a rename, and a rename across filesystems fails with EXDEV\n  // whenever --out lives on a different mount than /tmp.\n  mkdirSync(path.dirname(outDir), { recursive: true });\n  const staging = await mkdtemp(path.join(path.dirname(outDir), \".remnic-okf-export-\"));\n  const byCategory: Record<string, number> = {};\n  const idToRel = new Map<string, string>();\n  for (const memory of included) {\n    const rel = toRel(memory.path, memoryDir);\n    idToRel.set(memory.frontmatter.id, rel);\n  }\n  for (const memory of included) {\n    const rel = toRel(memory.path, memoryDir);\n    const rendered = renderMemory(memory, rel, idToRel);\n    writeBundleFile(staging, rel, rendered);\n    const category = memory.frontmatter.category;\n    byCategory[category] = (byCategory[category] ?? 0) + 1;\n  }\n\n  if (opts.includeProfile) {\n    try {\n      const profile = await storage.readProfile();\n      if (profile) {\n        writeBundleFile(\n          staging,\n          \"profile.md\",\n          renderFrontmatter({\n            type: OKF_PROFILE_TYPE,\n            title: \"User Profile\",\n            timestamp: new Date(0).toISOString(),\n          }) + profile.replace(/^\\uFEFF/, \"\"),\n        );\n      }\n    } catch {\n      // Profile is optional even when requested.\n    }\n  }\n\n  if (opts.includeLog) {\n    const events = await storage.readAllMemoryLifecycleEvents();\n    writeBundleFile(staging, \"log.md\", renderLog(events, idToRel, opts.logMaxEntries ?? DEFAULT_OKF_LOG_MAX_ENTRIES));\n  }\n\n  writeIndexes(staging, included, memoryDir);\n  const lint = lintOkfDir(staging);\n  const blocking = lint.findings.filter((f) => f.code !== \"skipped_encrypted\" && f.code !== \"reserved_basename\");\n  if (blocking.length > 0) {\n    rmSync(staging, { recursive: true, force: true });\n    throw new Error(`OKF export failed lint: ${blocking.map((f) => `${f.file}: ${f.message}`).join(\"; \")}`);\n  }\n\n  publishBundle(staging, outDir, opts.force === true);\n  return {\n    exported: included.length,\n    excluded,\n    byCategory,\n    plaintextWarning: true,\n  };\n}\n\n\nfunction renderMemory(memory: MemoryFile, rel: string, idToRel: Map<string, string>): string {\n  const fm = memory.frontmatter;\n  const title = firstHeading(memory.content) ?? `${humanize(fm.category)} ${fm.created.slice(0, 10)}`;\n  const type = fm.type ?? okfTypeForMemory(fm);\n  const fields: Record<string, unknown> = {\n    ...fm,\n    type,\n    title,\n    description: normalizeProjectionPreview(memory.content),\n    tags: fm.tags ?? [],\n    timestamp: fm.updated,\n  };\n  if (fm.artifactType) fields.resource = rel;\n  let body = memory.content.trim();\n  const citation = parseOaiMemCitation(body);\n  if (citation) {\n    const start = body.indexOf(\"<oai-mem-citation>\");\n    const end = body.indexOf(\"</oai-mem-citation>\");\n    if (start >= 0 && end > start) {\n      body = `${body.slice(0, start).trimEnd()}\\n\\n${body.slice(end + \"</oai-mem-citation>\".length).trimStart()}`.trim();\n    }\n    const lines = citation.entries.map((entry, index) => `${index + 1}. [${entry.path}](${entry.path})`);\n    body = `${body}\\n\\n# Citations\\n\\n${lines.join(\"\\n\")}\\n`;\n  }\n  const links = fm.links ?? [];\n  if (links.length > 0) {\n    body += `\\n# Related\\n\\n${links.map((link) => renderRelated(link, idToRel)).join(\"\\n\")}\\n`;\n  }\n  return renderFrontmatter(fields) + body + (body.endsWith(\"\\n\") ? \"\" : \"\\n\");\n}\n\nfunction renderRelated(link: MemoryLink, idToRel: Map<string, string>): string {\n  const target = idToRel.get(link.targetId) ?? link.targetId;\n  const href = target.startsWith(\"/\") ? target : `/${target}`;\n  return `- ${link.linkType}: [${link.targetId}](${href})`;\n}\n\nfunction writeIndexes(root: string, memories: MemoryFile[], memoryDir: string): void {\n  const groups = new Map<string, MemoryFile[]>();\n  for (const memory of memories) {\n    const rel = toRel(memory.path, memoryDir);\n    const dir = path.posix.dirname(rel);\n    const key = dir === \".\" ? \"\" : dir.split(\"/\")[0] ?? \"\";\n    const list = groups.get(key) ?? [];\n    list.push(memory);\n    groups.set(key, list);\n  }\n  const sections = [...groups.keys()].sort().map((key) => {\n    const heading = key === \"\" ? \"Root\" : humanize(key);\n    const lines = (groups.get(key) ?? [])\n      .sort((a, b) => toRel(a.path, memoryDir).localeCompare(toRel(b.path, memoryDir)))\n      .map((memory) => {\n        const rel = toRel(memory.path, memoryDir);\n        const title = firstHeading(memory.content) ?? memory.frontmatter.id;\n        const description = normalizeProjectionPreview(memory.content);\n        return `* [${title}](/${rel}) - ${description}`;\n      });\n    return `## ${heading}\\n\\n${lines.join(\"\\n\")}`;\n  });\n  writeBundleFile(root, \"index.md\", `---\\nokf_version: \"${OKF_EXPORT_VERSION}\"\\n---\\n\\n${sections.join(\"\\n\\n\")}\\n`);\n}\n\nfunction renderLog(\n  events: Array<{ timestamp?: string; type?: string; action?: string; memoryId?: string }>,\n  idToRel: Map<string, string>,\n  maxEntries: number,\n): string {\n  const sorted = [...events].sort((a, b) => String(b.timestamp ?? \"\").localeCompare(String(a.timestamp ?? \"\")));\n  const truncated = sorted.length > maxEntries;\n  const kept = sorted.slice(0, maxEntries);\n  const byDay = new Map<string, typeof kept>();\n  for (const event of kept) {\n    const day = String(event.timestamp ?? \"\").slice(0, 10) || \"unknown\";\n    const list = byDay.get(day) ?? [];\n    list.push(event);\n    byDay.set(day, list);\n  }\n  const days = [...byDay.keys()].sort((a, b) => b.localeCompare(a));\n  const parts = [\"# Log\", \"\"];\n  for (const day of days) {\n    parts.push(`## ${day}`, \"\");\n    for (const event of byDay.get(day) ?? []) {\n      const action = boldAction(event.type ?? event.action ?? \"Update\");\n      const id = event.memoryId;\n      const rel = id ? idToRel.get(id) : undefined;\n      const target = rel ? `[${id}](/${rel})` : id ?? \"\";\n      parts.push(`- **${action}** ${target}`.trimEnd());\n    }\n    parts.push(\"\");\n  }\n  if (truncated) parts.push(OKF_LOG_TRUNCATION_MARKER, \"\");\n  return `${parts.join(\"\\n\")}\\n`;\n}\n\nfunction boldAction(raw: string): string {\n  const lower = raw.toLowerCase();\n  if (lower.includes(\"create\") || lower.includes(\"add\")) return \"Creation\";\n  if (lower.includes(\"deprecat\") || lower.includes(\"delete\") || lower.includes(\"archiv\")) return \"Deprecation\";\n  return \"Update\";\n}\n\n\nexport function firstHeading(content: string): string | undefined {\n  for (const line of content.split(\"\\n\")) {\n    // `\\S` makes the capture boundary disjoint from `\\s+`, so the regex\n    // cannot backtrack across split points — `\\s+(.+)` was superlinear on\n    // whitespace-heavy lines (CodeQL js/polynomial-redos). `.` still excludes\n    // \\r\\u2028\\u2029, preserving the skip-line behavior on those lines.\n    const match = /^#\\s+(\\S.*)$/.exec(line.trim());\n    if (match) return match[1]!.trim();\n  }\n  return undefined;\n}\n\nfunction humanize(value: string): string {\n  return value.replace(/[_-]/g, \" \").replace(/\\b\\w/g, (ch) => ch.toUpperCase());\n}\n\n\n\nfunction splitCsv(raw: unknown): string[] {\n  if (raw === undefined || raw === null || raw === \"\") return [];\n  const parts = Array.isArray(raw) ? raw.map(String) : String(raw).split(\",\");\n  return parts.map((part) => part.trim()).filter((part) => part.length > 0);\n}\n\nfunction toRel(abs: string, root: string): string {\n  return path.relative(path.resolve(root), path.resolve(abs)).split(path.sep).join(\"/\");\n}\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,WAAW,cAAc;AAClC,SAAS,eAAe;AACxB,OAAO,UAAU;AAuBV,IAAM,4BAA4B;AAClC,IAAM,8BAA8B;AAE3C,IAAM,kBAA2C;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AA8BO,SAAS,mBAAmB,KAA8B;AAC/D,QAAM,SAAS,SAAS,GAAG;AAC3B,MAAI,OAAO,WAAW,EAAG,QAAO,CAAC,QAAQ;AACzC,QAAM,UAAU,IAAI,IAAY,eAAe;AAC/C,aAAW,SAAS,QAAQ;AAC1B,QAAI,CAAC,QAAQ,IAAI,KAAK,GAAG;AACvB,YAAM,IAAI,MAAM,4BAA4B,KAAK,cAAc,gBAAgB,KAAK,IAAI,CAAC,EAAE;AAAA,IAC7F;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAsB,gBAAgB,MAAkD;AACtF,QAAM,SAAS,KAAK,QAAQ,KAAK,MAAM;AACvC,oBAAkB,MAAM;AACxB,QAAM,aAAa,KAAK,aAAa,IAAI,KAAK;AAC9C,QAAM,YAAY,YACd,0BAA0B,KAAK,WAAW,WAAW,aAAa,IAClE,KAAK;AACT,QAAM,gBAAgB,IAAI,IAAI,mBAAmB,KAAK,aAAa,CAAC;AACpE,QAAM,oBAAoB,KAAK,mBAAmB,SAAS,IAAI,IAAI,KAAK,iBAAiB,IAAI;AAC7F,QAAM,cAAc,IAAI,IAAI,KAAK,eAAe,CAAC,CAAC;AAClD,QAAM,UAAU,IAAI,eAAe,SAAS;AAC5C,QAAM,WAAW,MAAM,QAAQ,gBAAgB;AAC/C,QAAM,WAAyB,CAAC;AAChC,MAAI,WAAW;AACf,aAAW,UAAU,UAAU;AAC7B,UAAM,MAAM,MAAM,OAAO,MAAM,SAAS;AACxC,QAAI,CAAC,KAAK,oBAAoB,IAAI,WAAW,YAAY,GAAG;AAC1D,kBAAY;AACZ;AAAA,IACF;AACA,UAAM,SAAS,kBAAkB,OAAO,aAAa,OAAO,IAAI;AAChE,QAAI,CAAC,cAAc,IAAI,MAAM,GAAG;AAC9B,kBAAY;AACZ;AAAA,IACF;AACA,QAAI,qBAAqB,CAAC,kBAAkB,IAAI,OAAO,YAAY,QAAQ,GAAG;AAC5E,kBAAY;AACZ;AAAA,IACF;AACA,SAAK,OAAO,YAAY,QAAQ,CAAC,GAAG,KAAK,CAAC,QAAQ,YAAY,IAAI,GAAG,CAAC,GAAG;AACvE,kBAAY;AACZ;AAAA,IACF;AACA,aAAS,KAAK,MAAM;AAAA,EACtB;AACA,WAAS,KAAK,CAAC,GAAG,MAAM,MAAM,EAAE,MAAM,SAAS,EAAE,cAAc,MAAM,EAAE,MAAM,SAAS,CAAC,CAAC;AAKxF,YAAU,KAAK,QAAQ,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;AACnD,QAAM,UAAU,MAAM,QAAQ,KAAK,KAAK,KAAK,QAAQ,MAAM,GAAG,qBAAqB,CAAC;AACpF,QAAM,aAAqC,CAAC;AAC5C,QAAM,UAAU,oBAAI,IAAoB;AACxC,aAAW,UAAU,UAAU;AAC7B,UAAM,MAAM,MAAM,OAAO,MAAM,SAAS;AACxC,YAAQ,IAAI,OAAO,YAAY,IAAI,GAAG;AAAA,EACxC;AACA,aAAW,UAAU,UAAU;AAC7B,UAAM,MAAM,MAAM,OAAO,MAAM,SAAS;AACxC,UAAM,WAAW,aAAa,QAAQ,KAAK,OAAO;AAClD,oBAAgB,SAAS,KAAK,QAAQ;AACtC,UAAM,WAAW,OAAO,YAAY;AACpC,eAAW,QAAQ,KAAK,WAAW,QAAQ,KAAK,KAAK;AAAA,EACvD;AAEA,MAAI,KAAK,gBAAgB;AACvB,QAAI;AACF,YAAM,UAAU,MAAM,QAAQ,YAAY;AAC1C,UAAI,SAAS;AACX;AAAA,UACE;AAAA,UACA;AAAA,UACA,kBAAkB;AAAA,YAChB,MAAM;AAAA,YACN,OAAO;AAAA,YACP,YAAW,oBAAI,KAAK,CAAC,GAAE,YAAY;AAAA,UACrC,CAAC,IAAI,QAAQ,QAAQ,WAAW,EAAE;AAAA,QACpC;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,MAAI,KAAK,YAAY;AACnB,UAAM,SAAS,MAAM,QAAQ,6BAA6B;AAC1D,oBAAgB,SAAS,UAAU,UAAU,QAAQ,SAAS,KAAK,iBAAiB,2BAA2B,CAAC;AAAA,EAClH;AAEA,eAAa,SAAS,UAAU,SAAS;AACzC,QAAM,OAAO,WAAW,OAAO;AAC/B,QAAM,WAAW,KAAK,SAAS,OAAO,CAAC,MAAM,EAAE,SAAS,uBAAuB,EAAE,SAAS,mBAAmB;AAC7G,MAAI,SAAS,SAAS,GAAG;AACvB,WAAO,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAChD,UAAM,IAAI,MAAM,2BAA2B,SAAS,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI,CAAC,EAAE;AAAA,EACxG;AAEA,gBAAc,SAAS,QAAQ,KAAK,UAAU,IAAI;AAClD,SAAO;AAAA,IACL,UAAU,SAAS;AAAA,IACnB;AAAA,IACA;AAAA,IACA,kBAAkB;AAAA,EACpB;AACF;AAGA,SAAS,aAAa,QAAoB,KAAa,SAAsC;AAC3F,QAAM,KAAK,OAAO;AAClB,QAAM,QAAQ,aAAa,OAAO,OAAO,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAC,IAAI,GAAG,QAAQ,MAAM,GAAG,EAAE,CAAC;AACjG,QAAM,OAAO,GAAG,QAAQ,iBAAiB,EAAE;AAC3C,QAAM,SAAkC;AAAA,IACtC,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA,aAAa,2BAA2B,OAAO,OAAO;AAAA,IACtD,MAAM,GAAG,QAAQ,CAAC;AAAA,IAClB,WAAW,GAAG;AAAA,EAChB;AACA,MAAI,GAAG,aAAc,QAAO,WAAW;AACvC,MAAI,OAAO,OAAO,QAAQ,KAAK;AAC/B,QAAM,WAAW,oBAAoB,IAAI;AACzC,MAAI,UAAU;AACZ,UAAM,QAAQ,KAAK,QAAQ,oBAAoB;AAC/C,UAAM,MAAM,KAAK,QAAQ,qBAAqB;AAC9C,QAAI,SAAS,KAAK,MAAM,OAAO;AAC7B,aAAO,GAAG,KAAK,MAAM,GAAG,KAAK,EAAE,QAAQ,CAAC;AAAA;AAAA,EAAO,KAAK,MAAM,MAAM,sBAAsB,MAAM,EAAE,UAAU,CAAC,GAAG,KAAK;AAAA,IACnH;AACA,UAAM,QAAQ,SAAS,QAAQ,IAAI,CAAC,OAAO,UAAU,GAAG,QAAQ,CAAC,MAAM,MAAM,IAAI,KAAK,MAAM,IAAI,GAAG;AACnG,WAAO,GAAG,IAAI;AAAA;AAAA;AAAA;AAAA,EAAsB,MAAM,KAAK,IAAI,CAAC;AAAA;AAAA,EACtD;AACA,QAAM,QAAQ,GAAG,SAAS,CAAC;AAC3B,MAAI,MAAM,SAAS,GAAG;AACpB,YAAQ;AAAA;AAAA;AAAA,EAAkB,MAAM,IAAI,CAAC,SAAS,cAAc,MAAM,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC;AAAA;AAAA,EACxF;AACA,SAAO,kBAAkB,MAAM,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,KAAK;AACxE;AAEA,SAAS,cAAc,MAAkB,SAAsC;AAC7E,QAAM,SAAS,QAAQ,IAAI,KAAK,QAAQ,KAAK,KAAK;AAClD,QAAM,OAAO,OAAO,WAAW,GAAG,IAAI,SAAS,IAAI,MAAM;AACzD,SAAO,KAAK,KAAK,QAAQ,MAAM,KAAK,QAAQ,KAAK,IAAI;AACvD;AAEA,SAAS,aAAa,MAAc,UAAwB,WAAyB;AACnF,QAAM,SAAS,oBAAI,IAA0B;AAC7C,aAAW,UAAU,UAAU;AAC7B,UAAM,MAAM,MAAM,OAAO,MAAM,SAAS;AACxC,UAAM,MAAM,KAAK,MAAM,QAAQ,GAAG;AAClC,UAAM,MAAM,QAAQ,MAAM,KAAK,IAAI,MAAM,GAAG,EAAE,CAAC,KAAK;AACpD,UAAM,OAAO,OAAO,IAAI,GAAG,KAAK,CAAC;AACjC,SAAK,KAAK,MAAM;AAChB,WAAO,IAAI,KAAK,IAAI;AAAA,EACtB;AACA,QAAM,WAAW,CAAC,GAAG,OAAO,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ;AACtD,UAAM,UAAU,QAAQ,KAAK,SAAS,SAAS,GAAG;AAClD,UAAM,SAAS,OAAO,IAAI,GAAG,KAAK,CAAC,GAChC,KAAK,CAAC,GAAG,MAAM,MAAM,EAAE,MAAM,SAAS,EAAE,cAAc,MAAM,EAAE,MAAM,SAAS,CAAC,CAAC,EAC/E,IAAI,CAAC,WAAW;AACf,YAAM,MAAM,MAAM,OAAO,MAAM,SAAS;AACxC,YAAM,QAAQ,aAAa,OAAO,OAAO,KAAK,OAAO,YAAY;AACjE,YAAM,cAAc,2BAA2B,OAAO,OAAO;AAC7D,aAAO,MAAM,KAAK,MAAM,GAAG,OAAO,WAAW;AAAA,IAC/C,CAAC;AACH,WAAO,MAAM,OAAO;AAAA;AAAA,EAAO,MAAM,KAAK,IAAI,CAAC;AAAA,EAC7C,CAAC;AACD,kBAAgB,MAAM,YAAY;AAAA,gBAAsB,kBAAkB;AAAA;AAAA;AAAA,EAAa,SAAS,KAAK,MAAM,CAAC;AAAA,CAAI;AAClH;AAEA,SAAS,UACP,QACA,SACA,YACQ;AACR,QAAM,SAAS,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,EAAE,aAAa,EAAE,EAAE,cAAc,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;AAC5G,QAAM,YAAY,OAAO,SAAS;AAClC,QAAM,OAAO,OAAO,MAAM,GAAG,UAAU;AACvC,QAAM,QAAQ,oBAAI,IAAyB;AAC3C,aAAW,SAAS,MAAM;AACxB,UAAM,MAAM,OAAO,MAAM,aAAa,EAAE,EAAE,MAAM,GAAG,EAAE,KAAK;AAC1D,UAAM,OAAO,MAAM,IAAI,GAAG,KAAK,CAAC;AAChC,SAAK,KAAK,KAAK;AACf,UAAM,IAAI,KAAK,IAAI;AAAA,EACrB;AACA,QAAM,OAAO,CAAC,GAAG,MAAM,KAAK,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;AAChE,QAAM,QAAQ,CAAC,SAAS,EAAE;AAC1B,aAAW,OAAO,MAAM;AACtB,UAAM,KAAK,MAAM,GAAG,IAAI,EAAE;AAC1B,eAAW,SAAS,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG;AACxC,YAAM,SAAS,WAAW,MAAM,QAAQ,MAAM,UAAU,QAAQ;AAChE,YAAM,KAAK,MAAM;AACjB,YAAM,MAAM,KAAK,QAAQ,IAAI,EAAE,IAAI;AACnC,YAAM,SAAS,MAAM,IAAI,EAAE,MAAM,GAAG,MAAM,MAAM;AAChD,YAAM,KAAK,OAAO,MAAM,MAAM,MAAM,GAAG,QAAQ,CAAC;AAAA,IAClD;AACA,UAAM,KAAK,EAAE;AAAA,EACf;AACA,MAAI,UAAW,OAAM,KAAK,2BAA2B,EAAE;AACvD,SAAO,GAAG,MAAM,KAAK,IAAI,CAAC;AAAA;AAC5B;AAEA,SAAS,WAAW,KAAqB;AACvC,QAAM,QAAQ,IAAI,YAAY;AAC9B,MAAI,MAAM,SAAS,QAAQ,KAAK,MAAM,SAAS,KAAK,EAAG,QAAO;AAC9D,MAAI,MAAM,SAAS,UAAU,KAAK,MAAM,SAAS,QAAQ,KAAK,MAAM,SAAS,QAAQ,EAAG,QAAO;AAC/F,SAAO;AACT;AAGO,SAAS,aAAa,SAAqC;AAChE,aAAW,QAAQ,QAAQ,MAAM,IAAI,GAAG;AAKtC,UAAM,QAAQ,eAAe,KAAK,KAAK,KAAK,CAAC;AAC7C,QAAI,MAAO,QAAO,MAAM,CAAC,EAAG,KAAK;AAAA,EACnC;AACA,SAAO;AACT;AAEA,SAAS,SAAS,OAAuB;AACvC,SAAO,MAAM,QAAQ,SAAS,GAAG,EAAE,QAAQ,SAAS,CAAC,OAAO,GAAG,YAAY,CAAC;AAC9E;AAIA,SAAS,SAAS,KAAwB;AACxC,MAAI,QAAQ,UAAa,QAAQ,QAAQ,QAAQ,GAAI,QAAO,CAAC;AAC7D,QAAM,QAAQ,MAAM,QAAQ,GAAG,IAAI,IAAI,IAAI,MAAM,IAAI,OAAO,GAAG,EAAE,MAAM,GAAG;AAC1E,SAAO,MAAM,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EAAE,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC;AAC1E;AAEA,SAAS,MAAM,KAAa,MAAsB;AAChD,SAAO,KAAK,SAAS,KAAK,QAAQ,IAAI,GAAG,KAAK,QAAQ,GAAG,CAAC,EAAE,MAAM,KAAK,GAAG,EAAE,KAAK,GAAG;AACtF;","names":[]}
+{"version":3,"sources":["../src/transfer/export-okf.ts"],"sourcesContent":["import { mkdirSync, rmSync } from \"node:fs\";\nimport { mkdtemp } from \"node:fs/promises\";\nimport path from \"node:path\";\n\nimport { parseOaiMemCitation } from \"../citations.js\";\nimport { inferMemoryStatus } from \"../memory-lifecycle-ledger-utils.js\";\nimport { normalizeProjectionPreview } from \"../memory-projection-format.js\";\nimport { lintOkfDir } from \"../okf/lint.js\";\nimport { okfTypeForMemory, OKF_PROFILE_TYPE } from \"../okf/type-mapping.js\";\nimport { resolveNamespaceChildRoot } from \"../namespaces/path.js\";\nimport {\n  OKF_EXPORT_VERSION,\n  publishBundle,\n  renderFrontmatter,\n  rejectSymlinkPath,\n  writeBundleFile,\n} from \"../okf/render.js\";\n// Re-exported for the existing `@remnic/core/export-okf` consumers and tests\n// (one public surface; the value itself now lives in okf/render.ts).\nexport { OKF_EXPORT_VERSION };\nimport { StorageManager } from \"../storage.js\";\nimport type { MemoryFile, MemoryLink, MemoryStatus } from \"../types.js\";\n\n// Shared bundle mechanics (frontmatter, publish, symlink guard, file write)\n// live in ../okf/render.ts — one source of truth for every OKF exporter.\nexport const OKF_LOG_TRUNCATION_MARKER = \"<!-- okf-log-truncated -->\";\nexport const DEFAULT_OKF_LOG_MAX_ENTRIES = 500;\n\nconst MEMORY_STATUSES: readonly MemoryStatus[] = [\n  \"active\",\n  \"pending_review\",\n  \"rejected\",\n  \"quarantined\",\n  \"superseded\",\n  \"archived\",\n  \"forgotten\",\n];\n\nexport interface ExportOkfOptions {\n  memoryDir: string;\n  /**\n   * Optional namespace segment. Resolved here, once, through the shared\n   * containment guard: both CLI entry points used to join the raw operator\n   * value onto `memoryDir/namespaces`, so `--namespace ../../..` escaped the\n   * namespace root and exported an arbitrary tree (rule 9 — one resolver, not\n   * a per-caller guard).\n   */\n  namespace?: string;\n  outDir: string;\n  includeStatus?: readonly string[];\n  includeCategories?: readonly string[];\n  excludeTags?: readonly string[];\n  includeProfile?: boolean;\n  includeWearables?: boolean;\n  includeLog?: boolean;\n  logMaxEntries?: number;\n  force?: boolean;\n}\n\nexport interface ExportOkfResult {\n  exported: number;\n  excluded: number;\n  byCategory: Record<string, number>;\n  plaintextWarning: boolean;\n}\n\nexport function parseIncludeStatus(raw: unknown): MemoryStatus[] {\n  const values = splitCsv(raw);\n  if (values.length === 0) return [\"active\"];\n  const allowed = new Set<string>(MEMORY_STATUSES);\n  for (const value of values) {\n    if (!allowed.has(value)) {\n      throw new Error(`invalid --include-status ${value}; allowed: ${MEMORY_STATUSES.join(\", \")}`);\n    }\n  }\n  return values as MemoryStatus[];\n}\n\nexport async function exportOkfBundle(opts: ExportOkfOptions): Promise<ExportOkfResult> {\n  const outDir = path.resolve(opts.outDir);\n  rejectSymlinkPath(outDir);\n  const namespace = (opts.namespace ?? \"\").trim();\n  const memoryDir = namespace\n    ? resolveNamespaceChildRoot(opts.memoryDir, namespace, \"--namespace\")\n    : opts.memoryDir;\n  const includeStatus = new Set(parseIncludeStatus(opts.includeStatus));\n  const includeCategories = opts.includeCategories?.length ? new Set(opts.includeCategories) : null;\n  const excludeTags = new Set(opts.excludeTags ?? []);\n  const storage = new StorageManager(memoryDir);\n  const memories = await storage.readAllMemories();\n  const included: MemoryFile[] = [];\n  let excluded = 0;\n  for (const memory of memories) {\n    const rel = toRel(memory.path, memoryDir);\n    if (!opts.includeWearables && rel.startsWith(\"wearables/\")) {\n      excluded += 1;\n      continue;\n    }\n    const status = inferMemoryStatus(memory.frontmatter, memory.path);\n    if (!includeStatus.has(status)) {\n      excluded += 1;\n      continue;\n    }\n    if (includeCategories && !includeCategories.has(memory.frontmatter.category)) {\n      excluded += 1;\n      continue;\n    }\n    if ((memory.frontmatter.tags ?? []).some((tag) => excludeTags.has(tag))) {\n      excluded += 1;\n      continue;\n    }\n    included.push(memory);\n  }\n  included.sort((a, b) => toRel(a.path, memoryDir).localeCompare(toRel(b.path, memoryDir)));\n\n  // Stage inside the destination's parent, not the OS temp dir: publishBundle\n  // finishes with a rename, and a rename across filesystems fails with EXDEV\n  // whenever --out lives on a different mount than /tmp.\n  mkdirSync(path.dirname(outDir), { recursive: true });\n  const staging = await mkdtemp(path.join(path.dirname(outDir), \".remnic-okf-export-\"));\n  const byCategory: Record<string, number> = {};\n  const idToRel = new Map<string, string>();\n  for (const memory of included) {\n    const rel = toRel(memory.path, memoryDir);\n    idToRel.set(memory.frontmatter.id, rel);\n  }\n  for (const memory of included) {\n    const rel = toRel(memory.path, memoryDir);\n    const rendered = renderMemory(memory, rel, idToRel);\n    writeBundleFile(staging, rel, rendered);\n    const category = memory.frontmatter.category;\n    byCategory[category] = (byCategory[category] ?? 0) + 1;\n  }\n\n  if (opts.includeProfile) {\n    try {\n      const profile = await storage.readProfile();\n      if (profile) {\n        writeBundleFile(\n          staging,\n          \"profile.md\",\n          renderFrontmatter({\n            type: OKF_PROFILE_TYPE,\n            title: \"User Profile\",\n            timestamp: new Date(0).toISOString(),\n          }) + profile.replace(/^\\uFEFF/, \"\"),\n        );\n      }\n    } catch {\n      // Profile is optional even when requested.\n    }\n  }\n\n  if (opts.includeLog) {\n    const events = await storage.readAllMemoryLifecycleEvents();\n    writeBundleFile(staging, \"log.md\", renderLog(events, idToRel, opts.logMaxEntries ?? DEFAULT_OKF_LOG_MAX_ENTRIES));\n  }\n\n  writeIndexes(staging, included, memoryDir);\n  const lint = lintOkfDir(staging);\n  const blocking = lint.findings.filter((f) => f.code !== \"skipped_encrypted\" && f.code !== \"reserved_basename\");\n  if (blocking.length > 0) {\n    rmSync(staging, { recursive: true, force: true });\n    throw new Error(`OKF export failed lint: ${blocking.map((f) => `${f.file}: ${f.message}`).join(\"; \")}`);\n  }\n\n  publishBundle(staging, outDir, opts.force === true);\n  return {\n    exported: included.length,\n    excluded,\n    byCategory,\n    plaintextWarning: true,\n  };\n}\n\n\nfunction renderMemory(memory: MemoryFile, rel: string, idToRel: Map<string, string>): string {\n  const fm = memory.frontmatter;\n  const title = firstHeading(memory.content) ?? `${humanize(fm.category)} ${fm.created.slice(0, 10)}`;\n  const type = fm.type ?? okfTypeForMemory(fm);\n  const fields: Record<string, unknown> = {\n    ...fm,\n    type,\n    title,\n    description: normalizeProjectionPreview(memory.content),\n    tags: fm.tags ?? [],\n    timestamp: fm.updated,\n  };\n  if (fm.artifactType) fields.resource = rel;\n  let body = memory.content.trim();\n  const citation = parseOaiMemCitation(body);\n  if (citation) {\n    const start = body.indexOf(\"<oai-mem-citation>\");\n    const end = body.indexOf(\"</oai-mem-citation>\");\n    if (start >= 0 && end > start) {\n      body = `${body.slice(0, start).trimEnd()}\\n\\n${body.slice(end + \"</oai-mem-citation>\".length).trimStart()}`.trim();\n    }\n    const lines = citation.entries.map((entry, index) => `${index + 1}. [${entry.path}](${entry.path})`);\n    body = `${body}\\n\\n# Citations\\n\\n${lines.join(\"\\n\")}\\n`;\n  }\n  const links = fm.links ?? [];\n  if (links.length > 0) {\n    body += `\\n# Related\\n\\n${links.map((link) => renderRelated(link, idToRel)).join(\"\\n\")}\\n`;\n  }\n  return renderFrontmatter(fields) + body + (body.endsWith(\"\\n\") ? \"\" : \"\\n\");\n}\n\nfunction renderRelated(link: MemoryLink, idToRel: Map<string, string>): string {\n  const target = idToRel.get(link.targetId) ?? link.targetId;\n  const href = target.startsWith(\"/\") ? target : `/${target}`;\n  return `- ${link.linkType}: [${link.targetId}](${href})`;\n}\n\nfunction writeIndexes(root: string, memories: MemoryFile[], memoryDir: string): void {\n  const groups = new Map<string, MemoryFile[]>();\n  for (const memory of memories) {\n    const rel = toRel(memory.path, memoryDir);\n    const dir = path.posix.dirname(rel);\n    const key = dir === \".\" ? \"\" : dir.split(\"/\")[0] ?? \"\";\n    const list = groups.get(key) ?? [];\n    list.push(memory);\n    groups.set(key, list);\n  }\n  const sections = [...groups.keys()].sort().map((key) => {\n    const heading = key === \"\" ? \"Root\" : humanize(key);\n    const lines = (groups.get(key) ?? [])\n      .sort((a, b) => toRel(a.path, memoryDir).localeCompare(toRel(b.path, memoryDir)))\n      .map((memory) => {\n        const rel = toRel(memory.path, memoryDir);\n        const title = firstHeading(memory.content) ?? memory.frontmatter.id;\n        const description = normalizeProjectionPreview(memory.content);\n        return `* [${title}](/${rel}) - ${description}`;\n      });\n    return `## ${heading}\\n\\n${lines.join(\"\\n\")}`;\n  });\n  writeBundleFile(root, \"index.md\", `---\\nokf_version: \"${OKF_EXPORT_VERSION}\"\\n---\\n\\n${sections.join(\"\\n\\n\")}\\n`);\n}\n\nfunction renderLog(\n  events: Array<{ timestamp?: string; type?: string; action?: string; memoryId?: string }>,\n  idToRel: Map<string, string>,\n  maxEntries: number,\n): string {\n  const sorted = [...events].sort((a, b) => String(b.timestamp ?? \"\").localeCompare(String(a.timestamp ?? \"\")));\n  const truncated = sorted.length > maxEntries;\n  const kept = sorted.slice(0, maxEntries);\n  const byDay = new Map<string, typeof kept>();\n  for (const event of kept) {\n    const day = String(event.timestamp ?? \"\").slice(0, 10) || \"unknown\";\n    const list = byDay.get(day) ?? [];\n    list.push(event);\n    byDay.set(day, list);\n  }\n  const days = [...byDay.keys()].sort((a, b) => b.localeCompare(a));\n  const parts = [\"# Log\", \"\"];\n  for (const day of days) {\n    parts.push(`## ${day}`, \"\");\n    for (const event of byDay.get(day) ?? []) {\n      const action = boldAction(event.type ?? event.action ?? \"Update\");\n      const id = event.memoryId;\n      const rel = id ? idToRel.get(id) : undefined;\n      const target = rel ? `[${id}](/${rel})` : id ?? \"\";\n      parts.push(`- **${action}** ${target}`.trimEnd());\n    }\n    parts.push(\"\");\n  }\n  if (truncated) parts.push(OKF_LOG_TRUNCATION_MARKER, \"\");\n  return `${parts.join(\"\\n\")}\\n`;\n}\n\nfunction boldAction(raw: string): string {\n  const lower = raw.toLowerCase();\n  if (lower.includes(\"create\") || lower.includes(\"add\")) return \"Creation\";\n  if (lower.includes(\"deprecat\") || lower.includes(\"delete\") || lower.includes(\"archiv\")) return \"Deprecation\";\n  return \"Update\";\n}\n\n\nexport function firstHeading(content: string): string | undefined {\n  for (const line of content.split(\"\\n\")) {\n    // `\\S` makes the capture boundary disjoint from `\\s+`, so the regex\n    // cannot backtrack across split points — `\\s+(.+)` was superlinear on\n    // whitespace-heavy lines (CodeQL js/polynomial-redos). `.` still excludes\n    // \\r\\u2028\\u2029, preserving the skip-line behavior on those lines.\n    const match = /^#\\s+(\\S.*)$/.exec(line.trim());\n    if (match) return match[1]!.trim();\n  }\n  return undefined;\n}\n\nfunction humanize(value: string): string {\n  return value.replace(/[_-]/g, \" \").replace(/\\b\\w/g, (ch) => ch.toUpperCase());\n}\n\n\n\nfunction splitCsv(raw: unknown): string[] {\n  if (raw === undefined || raw === null || raw === \"\") return [];\n  const parts = Array.isArray(raw) ? raw.map(String) : String(raw).split(\",\");\n  return parts.map((part) => part.trim()).filter((part) => part.length > 0);\n}\n\nfunction toRel(abs: string, root: string): string {\n  return path.relative(path.resolve(root), path.resolve(abs)).split(path.sep).join(\"/\");\n}\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,WAAW,cAAc;AAClC,SAAS,eAAe;AACxB,OAAO,UAAU;AAuBV,IAAM,4BAA4B;AAClC,IAAM,8BAA8B;AAE3C,IAAM,kBAA2C;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AA8BO,SAAS,mBAAmB,KAA8B;AAC/D,QAAM,SAAS,SAAS,GAAG;AAC3B,MAAI,OAAO,WAAW,EAAG,QAAO,CAAC,QAAQ;AACzC,QAAM,UAAU,IAAI,IAAY,eAAe;AAC/C,aAAW,SAAS,QAAQ;AAC1B,QAAI,CAAC,QAAQ,IAAI,KAAK,GAAG;AACvB,YAAM,IAAI,MAAM,4BAA4B,KAAK,cAAc,gBAAgB,KAAK,IAAI,CAAC,EAAE;AAAA,IAC7F;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAsB,gBAAgB,MAAkD;AACtF,QAAM,SAAS,KAAK,QAAQ,KAAK,MAAM;AACvC,oBAAkB,MAAM;AACxB,QAAM,aAAa,KAAK,aAAa,IAAI,KAAK;AAC9C,QAAM,YAAY,YACd,0BAA0B,KAAK,WAAW,WAAW,aAAa,IAClE,KAAK;AACT,QAAM,gBAAgB,IAAI,IAAI,mBAAmB,KAAK,aAAa,CAAC;AACpE,QAAM,oBAAoB,KAAK,mBAAmB,SAAS,IAAI,IAAI,KAAK,iBAAiB,IAAI;AAC7F,QAAM,cAAc,IAAI,IAAI,KAAK,eAAe,CAAC,CAAC;AAClD,QAAM,UAAU,IAAI,eAAe,SAAS;AAC5C,QAAM,WAAW,MAAM,QAAQ,gBAAgB;AAC/C,QAAM,WAAyB,CAAC;AAChC,MAAI,WAAW;AACf,aAAW,UAAU,UAAU;AAC7B,UAAM,MAAM,MAAM,OAAO,MAAM,SAAS;AACxC,QAAI,CAAC,KAAK,oBAAoB,IAAI,WAAW,YAAY,GAAG;AAC1D,kBAAY;AACZ;AAAA,IACF;AACA,UAAM,SAAS,kBAAkB,OAAO,aAAa,OAAO,IAAI;AAChE,QAAI,CAAC,cAAc,IAAI,MAAM,GAAG;AAC9B,kBAAY;AACZ;AAAA,IACF;AACA,QAAI,qBAAqB,CAAC,kBAAkB,IAAI,OAAO,YAAY,QAAQ,GAAG;AAC5E,kBAAY;AACZ;AAAA,IACF;AACA,SAAK,OAAO,YAAY,QAAQ,CAAC,GAAG,KAAK,CAAC,QAAQ,YAAY,IAAI,GAAG,CAAC,GAAG;AACvE,kBAAY;AACZ;AAAA,IACF;AACA,aAAS,KAAK,MAAM;AAAA,EACtB;AACA,WAAS,KAAK,CAAC,GAAG,MAAM,MAAM,EAAE,MAAM,SAAS,EAAE,cAAc,MAAM,EAAE,MAAM,SAAS,CAAC,CAAC;AAKxF,YAAU,KAAK,QAAQ,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;AACnD,QAAM,UAAU,MAAM,QAAQ,KAAK,KAAK,KAAK,QAAQ,MAAM,GAAG,qBAAqB,CAAC;AACpF,QAAM,aAAqC,CAAC;AAC5C,QAAM,UAAU,oBAAI,IAAoB;AACxC,aAAW,UAAU,UAAU;AAC7B,UAAM,MAAM,MAAM,OAAO,MAAM,SAAS;AACxC,YAAQ,IAAI,OAAO,YAAY,IAAI,GAAG;AAAA,EACxC;AACA,aAAW,UAAU,UAAU;AAC7B,UAAM,MAAM,MAAM,OAAO,MAAM,SAAS;AACxC,UAAM,WAAW,aAAa,QAAQ,KAAK,OAAO;AAClD,oBAAgB,SAAS,KAAK,QAAQ;AACtC,UAAM,WAAW,OAAO,YAAY;AACpC,eAAW,QAAQ,KAAK,WAAW,QAAQ,KAAK,KAAK;AAAA,EACvD;AAEA,MAAI,KAAK,gBAAgB;AACvB,QAAI;AACF,YAAM,UAAU,MAAM,QAAQ,YAAY;AAC1C,UAAI,SAAS;AACX;AAAA,UACE;AAAA,UACA;AAAA,UACA,kBAAkB;AAAA,YAChB,MAAM;AAAA,YACN,OAAO;AAAA,YACP,YAAW,oBAAI,KAAK,CAAC,GAAE,YAAY;AAAA,UACrC,CAAC,IAAI,QAAQ,QAAQ,WAAW,EAAE;AAAA,QACpC;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,MAAI,KAAK,YAAY;AACnB,UAAM,SAAS,MAAM,QAAQ,6BAA6B;AAC1D,oBAAgB,SAAS,UAAU,UAAU,QAAQ,SAAS,KAAK,iBAAiB,2BAA2B,CAAC;AAAA,EAClH;AAEA,eAAa,SAAS,UAAU,SAAS;AACzC,QAAM,OAAO,WAAW,OAAO;AAC/B,QAAM,WAAW,KAAK,SAAS,OAAO,CAAC,MAAM,EAAE,SAAS,uBAAuB,EAAE,SAAS,mBAAmB;AAC7G,MAAI,SAAS,SAAS,GAAG;AACvB,WAAO,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAChD,UAAM,IAAI,MAAM,2BAA2B,SAAS,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI,CAAC,EAAE;AAAA,EACxG;AAEA,gBAAc,SAAS,QAAQ,KAAK,UAAU,IAAI;AAClD,SAAO;AAAA,IACL,UAAU,SAAS;AAAA,IACnB;AAAA,IACA;AAAA,IACA,kBAAkB;AAAA,EACpB;AACF;AAGA,SAAS,aAAa,QAAoB,KAAa,SAAsC;AAC3F,QAAM,KAAK,OAAO;AAClB,QAAM,QAAQ,aAAa,OAAO,OAAO,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAC,IAAI,GAAG,QAAQ,MAAM,GAAG,EAAE,CAAC;AACjG,QAAM,OAAO,GAAG,QAAQ,iBAAiB,EAAE;AAC3C,QAAM,SAAkC;AAAA,IACtC,GAAG;AAAA,IACH;AAAA,IACA;AAAA,IACA,aAAa,2BAA2B,OAAO,OAAO;AAAA,IACtD,MAAM,GAAG,QAAQ,CAAC;AAAA,IAClB,WAAW,GAAG;AAAA,EAChB;AACA,MAAI,GAAG,aAAc,QAAO,WAAW;AACvC,MAAI,OAAO,OAAO,QAAQ,KAAK;AAC/B,QAAM,WAAW,oBAAoB,IAAI;AACzC,MAAI,UAAU;AACZ,UAAM,QAAQ,KAAK,QAAQ,oBAAoB;AAC/C,UAAM,MAAM,KAAK,QAAQ,qBAAqB;AAC9C,QAAI,SAAS,KAAK,MAAM,OAAO;AAC7B,aAAO,GAAG,KAAK,MAAM,GAAG,KAAK,EAAE,QAAQ,CAAC;AAAA;AAAA,EAAO,KAAK,MAAM,MAAM,sBAAsB,MAAM,EAAE,UAAU,CAAC,GAAG,KAAK;AAAA,IACnH;AACA,UAAM,QAAQ,SAAS,QAAQ,IAAI,CAAC,OAAO,UAAU,GAAG,QAAQ,CAAC,MAAM,MAAM,IAAI,KAAK,MAAM,IAAI,GAAG;AACnG,WAAO,GAAG,IAAI;AAAA;AAAA;AAAA;AAAA,EAAsB,MAAM,KAAK,IAAI,CAAC;AAAA;AAAA,EACtD;AACA,QAAM,QAAQ,GAAG,SAAS,CAAC;AAC3B,MAAI,MAAM,SAAS,GAAG;AACpB,YAAQ;AAAA;AAAA;AAAA,EAAkB,MAAM,IAAI,CAAC,SAAS,cAAc,MAAM,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC;AAAA;AAAA,EACxF;AACA,SAAO,kBAAkB,MAAM,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,KAAK;AACxE;AAEA,SAAS,cAAc,MAAkB,SAAsC;AAC7E,QAAM,SAAS,QAAQ,IAAI,KAAK,QAAQ,KAAK,KAAK;AAClD,QAAM,OAAO,OAAO,WAAW,GAAG,IAAI,SAAS,IAAI,MAAM;AACzD,SAAO,KAAK,KAAK,QAAQ,MAAM,KAAK,QAAQ,KAAK,IAAI;AACvD;AAEA,SAAS,aAAa,MAAc,UAAwB,WAAyB;AACnF,QAAM,SAAS,oBAAI,IAA0B;AAC7C,aAAW,UAAU,UAAU;AAC7B,UAAM,MAAM,MAAM,OAAO,MAAM,SAAS;AACxC,UAAM,MAAM,KAAK,MAAM,QAAQ,GAAG;AAClC,UAAM,MAAM,QAAQ,MAAM,KAAK,IAAI,MAAM,GAAG,EAAE,CAAC,KAAK;AACpD,UAAM,OAAO,OAAO,IAAI,GAAG,KAAK,CAAC;AACjC,SAAK,KAAK,MAAM;AAChB,WAAO,IAAI,KAAK,IAAI;AAAA,EACtB;AACA,QAAM,WAAW,CAAC,GAAG,OAAO,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ;AACtD,UAAM,UAAU,QAAQ,KAAK,SAAS,SAAS,GAAG;AAClD,UAAM,SAAS,OAAO,IAAI,GAAG,KAAK,CAAC,GAChC,KAAK,CAAC,GAAG,MAAM,MAAM,EAAE,MAAM,SAAS,EAAE,cAAc,MAAM,EAAE,MAAM,SAAS,CAAC,CAAC,EAC/E,IAAI,CAAC,WAAW;AACf,YAAM,MAAM,MAAM,OAAO,MAAM,SAAS;AACxC,YAAM,QAAQ,aAAa,OAAO,OAAO,KAAK,OAAO,YAAY;AACjE,YAAM,cAAc,2BAA2B,OAAO,OAAO;AAC7D,aAAO,MAAM,KAAK,MAAM,GAAG,OAAO,WAAW;AAAA,IAC/C,CAAC;AACH,WAAO,MAAM,OAAO;AAAA;AAAA,EAAO,MAAM,KAAK,IAAI,CAAC;AAAA,EAC7C,CAAC;AACD,kBAAgB,MAAM,YAAY;AAAA,gBAAsB,kBAAkB;AAAA;AAAA;AAAA,EAAa,SAAS,KAAK,MAAM,CAAC;AAAA,CAAI;AAClH;AAEA,SAAS,UACP,QACA,SACA,YACQ;AACR,QAAM,SAAS,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,EAAE,aAAa,EAAE,EAAE,cAAc,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;AAC5G,QAAM,YAAY,OAAO,SAAS;AAClC,QAAM,OAAO,OAAO,MAAM,GAAG,UAAU;AACvC,QAAM,QAAQ,oBAAI,IAAyB;AAC3C,aAAW,SAAS,MAAM;AACxB,UAAM,MAAM,OAAO,MAAM,aAAa,EAAE,EAAE,MAAM,GAAG,EAAE,KAAK;AAC1D,UAAM,OAAO,MAAM,IAAI,GAAG,KAAK,CAAC;AAChC,SAAK,KAAK,KAAK;AACf,UAAM,IAAI,KAAK,IAAI;AAAA,EACrB;AACA,QAAM,OAAO,CAAC,GAAG,MAAM,KAAK,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;AAChE,QAAM,QAAQ,CAAC,SAAS,EAAE;AAC1B,aAAW,OAAO,MAAM;AACtB,UAAM,KAAK,MAAM,GAAG,IAAI,EAAE;AAC1B,eAAW,SAAS,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG;AACxC,YAAM,SAAS,WAAW,MAAM,QAAQ,MAAM,UAAU,QAAQ;AAChE,YAAM,KAAK,MAAM;AACjB,YAAM,MAAM,KAAK,QAAQ,IAAI,EAAE,IAAI;AACnC,YAAM,SAAS,MAAM,IAAI,EAAE,MAAM,GAAG,MAAM,MAAM;AAChD,YAAM,KAAK,OAAO,MAAM,MAAM,MAAM,GAAG,QAAQ,CAAC;AAAA,IAClD;AACA,UAAM,KAAK,EAAE;AAAA,EACf;AACA,MAAI,UAAW,OAAM,KAAK,2BAA2B,EAAE;AACvD,SAAO,GAAG,MAAM,KAAK,IAAI,CAAC;AAAA;AAC5B;AAEA,SAAS,WAAW,KAAqB;AACvC,QAAM,QAAQ,IAAI,YAAY;AAC9B,MAAI,MAAM,SAAS,QAAQ,KAAK,MAAM,SAAS,KAAK,EAAG,QAAO;AAC9D,MAAI,MAAM,SAAS,UAAU,KAAK,MAAM,SAAS,QAAQ,KAAK,MAAM,SAAS,QAAQ,EAAG,QAAO;AAC/F,SAAO;AACT;AAGO,SAAS,aAAa,SAAqC;AAChE,aAAW,QAAQ,QAAQ,MAAM,IAAI,GAAG;AAKtC,UAAM,QAAQ,eAAe,KAAK,KAAK,KAAK,CAAC;AAC7C,QAAI,MAAO,QAAO,MAAM,CAAC,EAAG,KAAK;AAAA,EACnC;AACA,SAAO;AACT;AAEA,SAAS,SAAS,OAAuB;AACvC,SAAO,MAAM,QAAQ,SAAS,GAAG,EAAE,QAAQ,SAAS,CAAC,OAAO,GAAG,YAAY,CAAC;AAC9E;AAIA,SAAS,SAAS,KAAwB;AACxC,MAAI,QAAQ,UAAa,QAAQ,QAAQ,QAAQ,GAAI,QAAO,CAAC;AAC7D,QAAM,QAAQ,MAAM,QAAQ,GAAG,IAAI,IAAI,IAAI,MAAM,IAAI,OAAO,GAAG,EAAE,MAAM,GAAG;AAC1E,SAAO,MAAM,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EAAE,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC;AAC1E;AAEA,SAAS,MAAM,KAAa,MAAsB;AAChD,SAAO,KAAK,SAAS,KAAK,QAAQ,IAAI,GAAG,KAAK,QAAQ,GAAG,CAAC,EAAE,MAAM,KAAK,GAAG,EAAE,KAAK,GAAG;AACtF;","names":[]}

package/dist/chunk-PCEYGOSL.js

@@ -0,0 +1,66 @@
+// src/okf/type-mapping.ts
+import path from "path";
+var OKF_TYPE_BY_CATEGORY = Object.freeze({
+  fact: "Memory Fact",
+  decision: "Decision",
+  preference: "Preference",
+  commitment: "Commitment",
+  relationship: "Relationship",
+  principle: "Principle",
+  moment: "Moment",
+  skill: "Skill",
+  correction: "Correction",
+  rule: "Rule"
+});
+var OKF_TYPE_FALLBACK = "Memory";
+function okfTypeForCategory(category) {
+  return OKF_TYPE_BY_CATEGORY[category] ?? OKF_TYPE_FALLBACK;
+}
+function okfTypeForMemory(fm) {
+  return fm.artifactType ? "Artifact" : okfTypeForCategory(fm.category);
+}
+var OKF_TYPE_BY_ENTITY_KIND = Object.freeze({
+  person: "Person",
+  company: "Company",
+  organization: "Organization",
+  project: "Project",
+  topic: "Topic",
+  technology: "Technology",
+  place: "Place",
+  event: "Event"
+});
+function okfTypeForEntityKind(kind) {
+  const normalized = kind?.trim().toLowerCase();
+  return normalized !== void 0 && OKF_TYPE_BY_ENTITY_KIND[normalized] || "Entity";
+}
+var OKF_PROFILE_TYPE = "Profile";
+var OKF_QUESTION_TYPE = "Question";
+var OKF_DECISION_RECORD_TYPE = "Decision Record";
+var OKF_ARCHITECTURE_CARD_TYPE = "Architecture Card";
+var OKF_CODE_MODULE_TYPE = "Code Module";
+var OKF_RESERVED_BASENAMES = Object.freeze({
+  "index.md": true,
+  "log.md": true
+});
+function assertNotOkfReservedBasename(filePath) {
+  const basename = path.basename(filePath);
+  if (OKF_RESERVED_BASENAMES[basename] === true) {
+    throw new Error(
+      `OKF reserved basename '${basename}' is not a valid memory file target (${filePath}); OKF \xA76/\xA77 reserves it for bundle-level files.`
+    );
+  }
+}
+
+export {
+  okfTypeForCategory,
+  okfTypeForMemory,
+  okfTypeForEntityKind,
+  OKF_PROFILE_TYPE,
+  OKF_QUESTION_TYPE,
+  OKF_DECISION_RECORD_TYPE,
+  OKF_ARCHITECTURE_CARD_TYPE,
+  OKF_CODE_MODULE_TYPE,
+  OKF_RESERVED_BASENAMES,
+  assertNotOkfReservedBasename
+};
+//# sourceMappingURL=chunk-PCEYGOSL.js.map

package/dist/chunk-PCEYGOSL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/okf/type-mapping.ts"],"sourcesContent":["/**\n * OKF v0.1 `type` mapping (issue #1946) — the single source of truth for\n * the inert `type` metadata emitted alongside Remnic's canonical fields.\n *\n * `category` remains the canonical internal field; `type` is\n * presentation/interop metadata for OKF consumers and NEVER overrides\n * `category` on parse (the parser reads `type` into its own field only).\n */\nimport path from \"node:path\";\n\n/** OKF `type` values derived from Remnic memory categories. */\nexport const OKF_TYPE_BY_CATEGORY: Readonly<Record<string, string>> = Object.freeze({\n  fact: \"Memory Fact\",\n  decision: \"Decision\",\n  preference: \"Preference\",\n  commitment: \"Commitment\",\n  relationship: \"Relationship\",\n  principle: \"Principle\",\n  moment: \"Moment\",\n  skill: \"Skill\",\n  correction: \"Correction\",\n  rule: \"Rule\",\n});\n\n/** Fallback for categories not listed above (unknown/future categories). */\nexport const OKF_TYPE_FALLBACK = \"Memory\";\n\n/** Stable domain seam over the category table (single mapping source, AGENTS.md pattern 9). */\nexport function okfTypeForCategory(category: string): string {\n  return OKF_TYPE_BY_CATEGORY[category] ?? OKF_TYPE_FALLBACK;\n}\n\n/** Artifact memories report `Artifact` regardless of their storage category. */\nexport function okfTypeForMemory(fm: { category: string; artifactType?: string }): string {\n  return fm.artifactType ? \"Artifact\" : okfTypeForCategory(fm.category);\n}\n\n/** OKF types for entity files, derived from the entity kind. */\nexport const OKF_TYPE_BY_ENTITY_KIND: Readonly<Record<string, string>> = Object.freeze({\n  person: \"Person\",\n  company: \"Company\",\n  organization: \"Organization\",\n  project: \"Project\",\n  topic: \"Topic\",\n  technology: \"Technology\",\n  place: \"Place\",\n  event: \"Event\",\n});\n\n/** Stable domain seam over the entity-kind table (single mapping source). */\nexport function okfTypeForEntityKind(kind: string | undefined): string {\n  const normalized = kind?.trim().toLowerCase();\n  return (normalized !== undefined && OKF_TYPE_BY_ENTITY_KIND[normalized]) || \"Entity\";\n}\n\n/** Fixed OKF types for non-memory bundle files. */\nexport const OKF_PROFILE_TYPE = \"Profile\";\nexport const OKF_QUESTION_TYPE = \"Question\";\nexport const OKF_DECISION_RECORD_TYPE = \"Decision Record\";\nexport const OKF_ARCHITECTURE_CARD_TYPE = \"Architecture Card\";\nexport const OKF_CODE_MODULE_TYPE = \"Code Module\";\n\n/**\n * OKF §6/§7 reserve `index.md` and `log.md` for bundle-level files with a\n * different contract. Remnic never writes them (separate issue), and writes\n * targeting those basenames are rejected outright so a stray ID can never\n * shadow a reserved bundle file.\n */\nexport const OKF_RESERVED_BASENAMES: Readonly<Record<string, true>> = Object.freeze({\n  \"index.md\": true,\n  \"log.md\": true,\n});\n\nexport function assertNotOkfReservedBasename(filePath: string): void {\n  const basename = path.basename(filePath);\n  if (OKF_RESERVED_BASENAMES[basename] === true) {\n    throw new Error(\n      `OKF reserved basename '${basename}' is not a valid memory file target (${filePath}); OKF §6/§7 reserves it for bundle-level files.`,\n    );\n  }\n}\n"],"mappings":";AAQA,OAAO,UAAU;AAGV,IAAM,uBAAyD,OAAO,OAAO;AAAA,EAClF,MAAM;AAAA,EACN,UAAU;AAAA,EACV,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,cAAc;AAAA,EACd,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,MAAM;AACR,CAAC;AAGM,IAAM,oBAAoB;AAG1B,SAAS,mBAAmB,UAA0B;AAC3D,SAAO,qBAAqB,QAAQ,KAAK;AAC3C;AAGO,SAAS,iBAAiB,IAAyD;AACxF,SAAO,GAAG,eAAe,aAAa,mBAAmB,GAAG,QAAQ;AACtE;AAGO,IAAM,0BAA4D,OAAO,OAAO;AAAA,EACrF,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,cAAc;AAAA,EACd,SAAS;AAAA,EACT,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,OAAO;AAAA,EACP,OAAO;AACT,CAAC;AAGM,SAAS,qBAAqB,MAAkC;AACrE,QAAM,aAAa,MAAM,KAAK,EAAE,YAAY;AAC5C,SAAQ,eAAe,UAAa,wBAAwB,UAAU,KAAM;AAC9E;AAGO,IAAM,mBAAmB;AACzB,IAAM,oBAAoB;AAC1B,IAAM,2BAA2B;AACjC,IAAM,6BAA6B;AACnC,IAAM,uBAAuB;AAQ7B,IAAM,yBAAyD,OAAO,OAAO;AAAA,EAClF,YAAY;AAAA,EACZ,UAAU;AACZ,CAAC;AAEM,SAAS,6BAA6B,UAAwB;AACnE,QAAM,WAAW,KAAK,SAAS,QAAQ;AACvC,MAAI,uBAAuB,QAAQ,MAAM,MAAM;AAC7C,UAAM,IAAI;AAAA,MACR,0BAA0B,QAAQ,wCAAwC,QAAQ;AAAA,IACpF;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-47DEYNMR.js → chunk-PEXW2JCK.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-5JMAGU26.js";
 import {
   runPostConsolidationMaterialize
-} from "./chunk-D5LORF7A.js";
+} from "./chunk-JZDH2ZZK.js";
 import {
   isSemanticConsolidationLlmOperator
 } from "./chunk-G7D6GZ5J.js";
@@ -220,4 +220,4 @@ export {
   buildExtensionsBlockForConsolidation,
   materializeAfterSemanticConsolidation
 };
-//# sourceMappingURL=chunk-47DEYNMR.js.map
+//# sourceMappingURL=chunk-PEXW2JCK.js.map

package/dist/{chunk-EEOUMG3J.js → chunk-PWPIERBM.js}

@@ -114,6 +114,39 @@ function isSupportPassportPrivateMemory(memory) {
 function excludeSupportPassportPrivateMemories(memories) {
   return memories.filter((memory) => !isSupportPassportPrivateMemory(memory));
 }
+function supportPassportStatIdentity(file) {
+  return `${file.dev}:${file.ino}:${file.size}:${file.mtimeMs}:${file.ctimeMs}`;
+}
+function createPersistedSupportPassportPrivateFileExclusion(storage, persisted, updates) {
+  const inFlight = /* @__PURE__ */ new Map();
+  return async ({ filePath, path: relPath }) => {
+    let file;
+    try {
+      file = await lstat(filePath);
+    } catch (error) {
+      if (error.code === "ENOENT") {
+        inFlight.delete(filePath);
+        return false;
+      }
+      throw error;
+    }
+    const identity = supportPassportStatIdentity(file);
+    const known = persisted.get(relPath);
+    if (known?.statIdentity === identity && known.excluded !== void 0) {
+      updates.set(relPath, { statIdentity: identity, excluded: known.excluded });
+      return known.excluded;
+    }
+    const cached = inFlight.get(filePath);
+    if (cached?.identity === identity) return await cached.excluded;
+    const excluded = storage.readMemoryByPath(filePath).then((memory) => memory ? isSupportPassportPrivateMemory(memory) : false).finally(() => {
+      if (inFlight.get(filePath)?.identity === identity) inFlight.delete(filePath);
+    });
+    inFlight.set(filePath, { identity, excluded });
+    const result = await excluded;
+    updates.set(relPath, { statIdentity: identity, excluded: result });
+    return result;
+  };
+}
 function createSupportPassportPrivateFileExclusion(storage) {
   const classifications = /* @__PURE__ */ new Map();
   return async ({ filePath }) => {
@@ -233,11 +266,8 @@ function parseSupportPassportCardMetadata(memory) {
   const attributes = frontmatter.structuredAttributes;
   if (frontmatter.category !== "preference") return null;
   if (!frontmatter.tags?.includes(SUPPORT_PASSPORT_CARD_TAG)) return null;
-  if (!attributes || frontmatter.blockedBy || frontmatter.archivedAt || frontmatter.supersededBy)
-    return null;
-  const category = SupportPassportCardCategorySchema.safeParse(
-    attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.category]
-  );
+  if (!attributes || frontmatter.blockedBy || frontmatter.archivedAt || frontmatter.supersededBy) return null;
+  const category = SupportPassportCardCategorySchema.safeParse(attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.category]);
   const status = SupportPassportCardStatusSchema.safeParse(frontmatter.status);
   const rawOrder = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.order];
   const order = Number(rawOrder);
@@ -359,6 +389,8 @@ export {
   SUPPORT_PASSPORT_AUDIT_TAG,
   isSupportPassportPrivateMemory,
   excludeSupportPassportPrivateMemories,
+  supportPassportStatIdentity,
+  createPersistedSupportPassportPrivateFileExclusion,
   createSupportPassportPrivateFileExclusion,
   SUPPORT_PASSPORT_ATTRIBUTE_KEYS,
   encodeSupportPassportNamespaceAttributes,
@@ -368,4 +400,4 @@ export {
   hasLiveSupportPassportCard,
   projectSupportPassportCard
 };
-//# sourceMappingURL=chunk-EEOUMG3J.js.map
+//# sourceMappingURL=chunk-PWPIERBM.js.map