@remnic/core 9.69.33 → 9.69.35

package/dist/{chunk-XU6OEECT.js → chunk-OQQXGYMX.js}

@@ -1,7 +1,7 @@
 import {
   expandScopeProfileReadNamespaces,
   resolveScopeProfilePlan
-} from "./chunk-VGXM5B4H.js";
+} from "./chunk-MNIPH6LD.js";
 import {
   canReadNamespace,
   canWriteNamespace,
@@ -22,7 +22,7 @@ import {
   combineNamespaces,
   lcmReadSessionIdsForNamespaces,
   resolveCodingNamespaceOverlay
-} from "./chunk-NZXEK3UF.js";
+} from "./chunk-3Q3N35W7.js";
 
 // src/scopes/scope-plan.ts
 import path from "path";
@@ -204,4 +204,4 @@ export {
   resolveWritableNamespaceValue,
   resolveScopedWritableNamespaceValue
 };
-//# sourceMappingURL=chunk-XU6OEECT.js.map
+//# sourceMappingURL=chunk-OQQXGYMX.js.map

package/dist/{chunk-4MHYKEOM.js → chunk-OS2AT2JU.js}

@@ -8,10 +8,10 @@ import {
   executeResolution,
   isValidResolutionVerb,
   runPreferenceDriftScan
-} from "./chunk-XOVKXJEP.js";
+} from "./chunk-R3TLVTWW.js";
 import {
   runContradictionScan
-} from "./chunk-YYGZJPOK.js";
+} from "./chunk-42DJ235G.js";
 import {
   isDefaultReviewNamespace,
   listPairs,
@@ -25,28 +25,28 @@ import {
   buildChatGptMemoryInspectorActionRequest,
   buildChatGptMemoryInspectorResult
 } from "./chunk-E4RMZGRS.js";
-import {
-  observeRequestSchema,
-  recallRequestSchema
-} from "./chunk-JEIXTYVG.js";
 import {
   defineOperation,
   parseNamespacePreflightWriteOp,
   resolveAuthorizedNamespaceWritablePreflight
-} from "./chunk-UGPUYIET.js";
+} from "./chunk-JHZCXUQI.js";
 import {
   validateBriefingFormat
-} from "./chunk-5NANRSCD.js";
+} from "./chunk-CNV2A557.js";
 import {
   enforceNamespaceAllowList,
   tokenCapabilityStore
 } from "./chunk-MZWSOLMT.js";
+import {
+  observeRequestSchema,
+  recallRequestSchema
+} from "./chunk-L2QLDZJC.js";
 import {
   resolvePrincipal
 } from "./chunk-MRV7VSQK.js";
 import {
   projectTagProjectId
-} from "./chunk-NZXEK3UF.js";
+} from "./chunk-3Q3N35W7.js";
 import {
   expandTildePath
 } from "./chunk-6KH5NLQS.js";
@@ -543,4 +543,4 @@ defineOperation({ name: "graph_events", description: "SSE graph events.", schema
 defineOperation({ name: "chat_message", description: "Chat message.", schema: strictSchema({ message: S.str, chatSessionId: S.str }), handler: async (_i, _ctx) => ({ result: { ok: true } }) });
 defineOperation({ name: "chat_events", description: "SSE chat events.", schema: strictSchema({}), handler: async (_i, _ctx) => ({ result: { stream: "sse" } }) });
 defineOperation({ name: "adapters_status", description: "Adapter registry metadata (issue #1850 round 5). Marker op: the HTTP transport builds the response from its own adapterRegistry, but the op still must be registered so it appears in listRegisteredOperations and enforceTokenOp can gate it for scoped tokens.", schema: strictSchema({}), handler: async (_i, _ctx) => ({ result: { ok: true } }) });
-//# sourceMappingURL=chunk-4MHYKEOM.js.map
+//# sourceMappingURL=chunk-OS2AT2JU.js.map

package/dist/{chunk-N57A4KPV.js → chunk-P3ONDDIJ.js}

@@ -1,6 +1,6 @@
 import {
   isNamespaceKind
-} from "./chunk-OQDPBRQ6.js";
+} from "./chunk-VYXDUPYE.js";
 import {
   EngramAccessInputError
 } from "./chunk-2Z24E5W2.js";
@@ -40,4 +40,4 @@ export {
   positiveIntQueryParam,
   optionalNamespaceKindQueryParam
 };
-//# sourceMappingURL=chunk-N57A4KPV.js.map
+//# sourceMappingURL=chunk-P3ONDDIJ.js.map

package/dist/chunk-PCEYGOSL.js

@@ -0,0 +1,66 @@
+// src/okf/type-mapping.ts
+import path from "path";
+var OKF_TYPE_BY_CATEGORY = Object.freeze({
+  fact: "Memory Fact",
+  decision: "Decision",
+  preference: "Preference",
+  commitment: "Commitment",
+  relationship: "Relationship",
+  principle: "Principle",
+  moment: "Moment",
+  skill: "Skill",
+  correction: "Correction",
+  rule: "Rule"
+});
+var OKF_TYPE_FALLBACK = "Memory";
+function okfTypeForCategory(category) {
+  return OKF_TYPE_BY_CATEGORY[category] ?? OKF_TYPE_FALLBACK;
+}
+function okfTypeForMemory(fm) {
+  return fm.artifactType ? "Artifact" : okfTypeForCategory(fm.category);
+}
+var OKF_TYPE_BY_ENTITY_KIND = Object.freeze({
+  person: "Person",
+  company: "Company",
+  organization: "Organization",
+  project: "Project",
+  topic: "Topic",
+  technology: "Technology",
+  place: "Place",
+  event: "Event"
+});
+function okfTypeForEntityKind(kind) {
+  const normalized = kind?.trim().toLowerCase();
+  return normalized !== void 0 && OKF_TYPE_BY_ENTITY_KIND[normalized] || "Entity";
+}
+var OKF_PROFILE_TYPE = "Profile";
+var OKF_QUESTION_TYPE = "Question";
+var OKF_DECISION_RECORD_TYPE = "Decision Record";
+var OKF_ARCHITECTURE_CARD_TYPE = "Architecture Card";
+var OKF_CODE_MODULE_TYPE = "Code Module";
+var OKF_RESERVED_BASENAMES = Object.freeze({
+  "index.md": true,
+  "log.md": true
+});
+function assertNotOkfReservedBasename(filePath) {
+  const basename = path.basename(filePath);
+  if (OKF_RESERVED_BASENAMES[basename] === true) {
+    throw new Error(
+      `OKF reserved basename '${basename}' is not a valid memory file target (${filePath}); OKF \xA76/\xA77 reserves it for bundle-level files.`
+    );
+  }
+}
+
+export {
+  okfTypeForCategory,
+  okfTypeForMemory,
+  okfTypeForEntityKind,
+  OKF_PROFILE_TYPE,
+  OKF_QUESTION_TYPE,
+  OKF_DECISION_RECORD_TYPE,
+  OKF_ARCHITECTURE_CARD_TYPE,
+  OKF_CODE_MODULE_TYPE,
+  OKF_RESERVED_BASENAMES,
+  assertNotOkfReservedBasename
+};
+//# sourceMappingURL=chunk-PCEYGOSL.js.map

package/dist/chunk-PCEYGOSL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/okf/type-mapping.ts"],"sourcesContent":["/**\n * OKF v0.1 `type` mapping (issue #1946) — the single source of truth for\n * the inert `type` metadata emitted alongside Remnic's canonical fields.\n *\n * `category` remains the canonical internal field; `type` is\n * presentation/interop metadata for OKF consumers and NEVER overrides\n * `category` on parse (the parser reads `type` into its own field only).\n */\nimport path from \"node:path\";\n\n/** OKF `type` values derived from Remnic memory categories. */\nexport const OKF_TYPE_BY_CATEGORY: Readonly<Record<string, string>> = Object.freeze({\n  fact: \"Memory Fact\",\n  decision: \"Decision\",\n  preference: \"Preference\",\n  commitment: \"Commitment\",\n  relationship: \"Relationship\",\n  principle: \"Principle\",\n  moment: \"Moment\",\n  skill: \"Skill\",\n  correction: \"Correction\",\n  rule: \"Rule\",\n});\n\n/** Fallback for categories not listed above (unknown/future categories). */\nexport const OKF_TYPE_FALLBACK = \"Memory\";\n\n/** Stable domain seam over the category table (single mapping source, AGENTS.md pattern 9). */\nexport function okfTypeForCategory(category: string): string {\n  return OKF_TYPE_BY_CATEGORY[category] ?? OKF_TYPE_FALLBACK;\n}\n\n/** Artifact memories report `Artifact` regardless of their storage category. */\nexport function okfTypeForMemory(fm: { category: string; artifactType?: string }): string {\n  return fm.artifactType ? \"Artifact\" : okfTypeForCategory(fm.category);\n}\n\n/** OKF types for entity files, derived from the entity kind. */\nexport const OKF_TYPE_BY_ENTITY_KIND: Readonly<Record<string, string>> = Object.freeze({\n  person: \"Person\",\n  company: \"Company\",\n  organization: \"Organization\",\n  project: \"Project\",\n  topic: \"Topic\",\n  technology: \"Technology\",\n  place: \"Place\",\n  event: \"Event\",\n});\n\n/** Stable domain seam over the entity-kind table (single mapping source). */\nexport function okfTypeForEntityKind(kind: string | undefined): string {\n  const normalized = kind?.trim().toLowerCase();\n  return (normalized !== undefined && OKF_TYPE_BY_ENTITY_KIND[normalized]) || \"Entity\";\n}\n\n/** Fixed OKF types for non-memory bundle files. */\nexport const OKF_PROFILE_TYPE = \"Profile\";\nexport const OKF_QUESTION_TYPE = \"Question\";\nexport const OKF_DECISION_RECORD_TYPE = \"Decision Record\";\nexport const OKF_ARCHITECTURE_CARD_TYPE = \"Architecture Card\";\nexport const OKF_CODE_MODULE_TYPE = \"Code Module\";\n\n/**\n * OKF §6/§7 reserve `index.md` and `log.md` for bundle-level files with a\n * different contract. Remnic never writes them (separate issue), and writes\n * targeting those basenames are rejected outright so a stray ID can never\n * shadow a reserved bundle file.\n */\nexport const OKF_RESERVED_BASENAMES: Readonly<Record<string, true>> = Object.freeze({\n  \"index.md\": true,\n  \"log.md\": true,\n});\n\nexport function assertNotOkfReservedBasename(filePath: string): void {\n  const basename = path.basename(filePath);\n  if (OKF_RESERVED_BASENAMES[basename] === true) {\n    throw new Error(\n      `OKF reserved basename '${basename}' is not a valid memory file target (${filePath}); OKF §6/§7 reserves it for bundle-level files.`,\n    );\n  }\n}\n"],"mappings":";AAQA,OAAO,UAAU;AAGV,IAAM,uBAAyD,OAAO,OAAO;AAAA,EAClF,MAAM;AAAA,EACN,UAAU;AAAA,EACV,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,cAAc;AAAA,EACd,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,MAAM;AACR,CAAC;AAGM,IAAM,oBAAoB;AAG1B,SAAS,mBAAmB,UAA0B;AAC3D,SAAO,qBAAqB,QAAQ,KAAK;AAC3C;AAGO,SAAS,iBAAiB,IAAyD;AACxF,SAAO,GAAG,eAAe,aAAa,mBAAmB,GAAG,QAAQ;AACtE;AAGO,IAAM,0BAA4D,OAAO,OAAO;AAAA,EACrF,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,cAAc;AAAA,EACd,SAAS;AAAA,EACT,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,OAAO;AAAA,EACP,OAAO;AACT,CAAC;AAGM,SAAS,qBAAqB,MAAkC;AACrE,QAAM,aAAa,MAAM,KAAK,EAAE,YAAY;AAC5C,SAAQ,eAAe,UAAa,wBAAwB,UAAU,KAAM;AAC9E;AAGO,IAAM,mBAAmB;AACzB,IAAM,oBAAoB;AAC1B,IAAM,2BAA2B;AACjC,IAAM,6BAA6B;AACnC,IAAM,uBAAuB;AAQ7B,IAAM,yBAAyD,OAAO,OAAO;AAAA,EAClF,YAAY;AAAA,EACZ,UAAU;AACZ,CAAC;AAEM,SAAS,6BAA6B,UAAwB;AACnE,QAAM,WAAW,KAAK,SAAS,QAAQ;AACvC,MAAI,uBAAuB,QAAQ,MAAM,MAAM;AAC7C,UAAM,IAAI;AAAA,MACR,0BAA0B,QAAQ,wCAAwC,QAAQ;AAAA,IACpF;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-R3HKWWUB.js → chunk-PHP3MUGF.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-B7RWBZXW.js";
 import {
   StorageManager
-} from "./chunk-HV7OY4DM.js";
+} from "./chunk-5VAF4ID4.js";
 import {
   getCachedEpisodeMap,
   setCachedEpisodeMap
@@ -109,4 +109,4 @@ export {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
 };
-//# sourceMappingURL=chunk-R3HKWWUB.js.map
+//# sourceMappingURL=chunk-PHP3MUGF.js.map

package/dist/{chunk-EEOUMG3J.js → chunk-PWPIERBM.js}

@@ -114,6 +114,39 @@ function isSupportPassportPrivateMemory(memory) {
 function excludeSupportPassportPrivateMemories(memories) {
   return memories.filter((memory) => !isSupportPassportPrivateMemory(memory));
 }
+function supportPassportStatIdentity(file) {
+  return `${file.dev}:${file.ino}:${file.size}:${file.mtimeMs}:${file.ctimeMs}`;
+}
+function createPersistedSupportPassportPrivateFileExclusion(storage, persisted, updates) {
+  const inFlight = /* @__PURE__ */ new Map();
+  return async ({ filePath, path: relPath }) => {
+    let file;
+    try {
+      file = await lstat(filePath);
+    } catch (error) {
+      if (error.code === "ENOENT") {
+        inFlight.delete(filePath);
+        return false;
+      }
+      throw error;
+    }
+    const identity = supportPassportStatIdentity(file);
+    const known = persisted.get(relPath);
+    if (known?.statIdentity === identity && known.excluded !== void 0) {
+      updates.set(relPath, { statIdentity: identity, excluded: known.excluded });
+      return known.excluded;
+    }
+    const cached = inFlight.get(filePath);
+    if (cached?.identity === identity) return await cached.excluded;
+    const excluded = storage.readMemoryByPath(filePath).then((memory) => memory ? isSupportPassportPrivateMemory(memory) : false).finally(() => {
+      if (inFlight.get(filePath)?.identity === identity) inFlight.delete(filePath);
+    });
+    inFlight.set(filePath, { identity, excluded });
+    const result = await excluded;
+    updates.set(relPath, { statIdentity: identity, excluded: result });
+    return result;
+  };
+}
 function createSupportPassportPrivateFileExclusion(storage) {
   const classifications = /* @__PURE__ */ new Map();
   return async ({ filePath }) => {
@@ -233,11 +266,8 @@ function parseSupportPassportCardMetadata(memory) {
   const attributes = frontmatter.structuredAttributes;
   if (frontmatter.category !== "preference") return null;
   if (!frontmatter.tags?.includes(SUPPORT_PASSPORT_CARD_TAG)) return null;
-  if (!attributes || frontmatter.blockedBy || frontmatter.archivedAt || frontmatter.supersededBy)
-    return null;
-  const category = SupportPassportCardCategorySchema.safeParse(
-    attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.category]
-  );
+  if (!attributes || frontmatter.blockedBy || frontmatter.archivedAt || frontmatter.supersededBy) return null;
+  const category = SupportPassportCardCategorySchema.safeParse(attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.category]);
   const status = SupportPassportCardStatusSchema.safeParse(frontmatter.status);
   const rawOrder = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.order];
   const order = Number(rawOrder);
@@ -359,6 +389,8 @@ export {
   SUPPORT_PASSPORT_AUDIT_TAG,
   isSupportPassportPrivateMemory,
   excludeSupportPassportPrivateMemories,
+  supportPassportStatIdentity,
+  createPersistedSupportPassportPrivateFileExclusion,
   createSupportPassportPrivateFileExclusion,
   SUPPORT_PASSPORT_ATTRIBUTE_KEYS,
   encodeSupportPassportNamespaceAttributes,
@@ -368,4 +400,4 @@ export {
   hasLiveSupportPassportCard,
   projectSupportPassportCard
 };
-//# sourceMappingURL=chunk-EEOUMG3J.js.map
+//# sourceMappingURL=chunk-PWPIERBM.js.map

package/dist/chunk-PWPIERBM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/support-passport/contracts.ts","../src/support-passport/card-projection.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { z } from \"zod\";\n\nimport { normalizeNamespaceIdentity } from \"../namespaces/identity.js\";\nimport { parseIsoOffsetTimestamp } from \"../utils/iso-timestamp.js\";\n\nexport const SUPPORT_PASSPORT_CARD_CATEGORIES = [\n  \"communication\",\n  \"environment\",\n  \"transitions\",\n  \"sensory\",\n  \"regulation\",\n  \"interests\",\n  \"other\",\n] as const;\n\nexport const SUPPORT_PASSPORT_CARD_STATUSES = [\n  \"pending_review\",\n  \"active\",\n  \"rejected\",\n  \"superseded\",\n  \"archived\",\n] as const;\n\nexport const SupportPassportCardCategorySchema = z.enum(SUPPORT_PASSPORT_CARD_CATEGORIES);\nexport const SupportPassportCardStatusSchema = z.enum(SUPPORT_PASSPORT_CARD_STATUSES);\nexport const SupportPassportCardTitleSchema = z\n  .string()\n  .trim()\n  .min(1)\n  .max(80)\n  .refine((title) => !title.includes(\"]\") && !title.includes(\"\\n\") && !title.includes(\"\\r\"), {\n    message: \"card titles cannot contain closing brackets or line breaks\",\n  });\n\nconst IsoTimestampSchema = z\n  .string()\n  .datetime({ offset: true })\n  .refine((value) => parseIsoOffsetTimestamp(value) !== null, {\n    message: \"timestamps must be valid ISO 8601 values\",\n  });\nexport const SupportPassportNamespaceSchema = z\n  .string()\n  .min(1)\n  .refine((namespace) => namespace === normalizeNamespaceIdentity(namespace), {\n    message: \"namespaces must be canonical\",\n  });\nexport const SupportPassportMemoryIdSchema = z\n  .string()\n  .trim()\n  .min(1)\n  .max(128)\n  .regex(/^[A-Za-z0-9._:-]+$/);\nexport const SUPPORT_PASSPORT_SOURCE_MEMORY_ID_MAX_LENGTH = 512;\nexport const SupportPassportSourceMemoryIdSchema = z\n  .string()\n  .trim()\n  .min(1)\n  .max(SUPPORT_PASSPORT_SOURCE_MEMORY_ID_MAX_LENGTH);\n\nexport const SupportPassportCardSchema = z\n  .object({\n    cardId: SupportPassportMemoryIdSchema,\n    title: SupportPassportCardTitleSchema,\n    statement: z.string().trim().min(1).max(500),\n    category: SupportPassportCardCategorySchema,\n    status: SupportPassportCardStatusSchema,\n    updatedAt: IsoTimestampSchema,\n    reviewBy: IsoTimestampSchema,\n    revision: z.string().regex(/^[a-f0-9]{64}$/),\n  })\n  .strict();\n\nexport const SupportPassportCardListSchema = z\n  .array(SupportPassportCardSchema)\n  .max(100)\n  .superRefine((cards, ctx) => {\n    const seen = new Set<string>();\n    for (const [index, card] of cards.entries()) {\n      if (seen.has(card.cardId)) {\n        ctx.addIssue({\n          code: z.ZodIssueCode.custom,\n          message: \"card IDs must be unique\",\n          path: [index, \"cardId\"],\n        });\n      }\n      seen.add(card.cardId);\n    }\n  });\n\nexport const SupportPassportListCardsInputSchema = z\n  .object({\n    principal: z.string().trim().min(1).max(512),\n  })\n  .strict();\n\nexport const SupportPassportManualDraftInputSchema = z\n  .object({\n    principal: z.string().trim().min(1).max(512),\n    title: SupportPassportCardTitleSchema,\n    statement: z.string().trim().min(1).max(500),\n    category: SupportPassportCardCategorySchema,\n    reviewBy: IsoTimestampSchema,\n  })\n  .strict();\n\nexport const SupportPassportCardMutationInputSchema = z\n  .object({\n    principal: z.string().trim().min(1).max(512),\n    cardId: SupportPassportMemoryIdSchema,\n    expectedRevision: z.string().regex(/^[a-f0-9]{64}$/),\n    reasonCode: z\n      .string()\n      .trim()\n      .min(1)\n      .max(64)\n      .regex(/^[a-z0-9-]+$/)\n      .optional(),\n  })\n  .strict();\n\nexport const SupportPassportReplaceCardInputSchema = SupportPassportCardMutationInputSchema.extend({\n  title: SupportPassportCardTitleSchema,\n  statement: z.string().trim().min(1).max(500),\n  category: SupportPassportCardCategorySchema,\n  reviewBy: IsoTimestampSchema,\n}).strict();\n\nexport type SupportPassportCard = z.infer<typeof SupportPassportCardSchema>;\nexport type SupportPassportCardCategory = z.infer<typeof SupportPassportCardCategorySchema>;\nexport type SupportPassportCardStatus = z.infer<typeof SupportPassportCardStatusSchema>;\nexport type SupportPassportManualDraftInput = z.input<typeof SupportPassportManualDraftInputSchema>;\nexport type SupportPassportCardMutationInput = z.input<typeof SupportPassportCardMutationInputSchema>;\nexport type SupportPassportReplaceCardInput = z.input<typeof SupportPassportReplaceCardInputSchema>;\n\ntype RevisionFields = Omit<SupportPassportCard, \"revision\">;\n\nexport function computeSupportPassportCardRevision(fields: RevisionFields): string {\n  const canonicalFields = {\n    cardId: fields.cardId,\n    category: fields.category,\n    reviewBy: fields.reviewBy,\n    statement: fields.statement,\n    status: fields.status,\n    title: fields.title,\n    updatedAt: fields.updatedAt,\n  };\n  return createHash(\"sha256\").update(JSON.stringify(canonicalFields)).digest(\"hex\");\n}\n","import { createHash } from \"node:crypto\";\nimport { lstat } from \"node:fs/promises\";\n\nimport type { OfflineSyncExcludeFile } from \"../offline-sync-file-io.js\";\nimport { stripAttributesSuffix } from \"../structured-attributes.js\";\nimport type { MemoryFile } from \"../types.js\";\nimport {\n  type SupportPassportCard,\n  SupportPassportCardCategorySchema,\n  SupportPassportCardSchema,\n  SupportPassportCardStatusSchema,\n  SupportPassportMemoryIdSchema,\n  SupportPassportNamespaceSchema,\n  SupportPassportSourceMemoryIdSchema,\n  computeSupportPassportCardRevision,\n} from \"./contracts.js\";\n\nexport const SUPPORT_PASSPORT_CARD_TAG = \"support-passport-card\";\nexport const SUPPORT_PASSPORT_AUDIT_TAG = \"support-passport-audit\";\n\nexport function isSupportPassportPrivateMemory(memory: {\n  frontmatter: {\n    tags?: readonly string[];\n    structuredAttributes?: Readonly<Record<string, string>>;\n  };\n}): boolean {\n  const tags = memory.frontmatter.tags;\n  if (tags?.includes(SUPPORT_PASSPORT_CARD_TAG) === true || tags?.includes(SUPPORT_PASSPORT_AUDIT_TAG) === true) {\n    return true;\n  }\n  return Object.keys(memory.frontmatter.structuredAttributes ?? {}).some((key) => key.startsWith(\"support-passport-\"));\n}\n\nexport function excludeSupportPassportPrivateMemories<T extends Pick<MemoryFile, \"frontmatter\">>(\n  memories: readonly T[]\n): T[] {\n  return memories.filter((memory) => !isSupportPassportPrivateMemory(memory));\n}\n\n/**\n * Stat identity a persisted exclusion classification is keyed on. Any content\n * change rewrites the file, which moves ctime, so a matching identity implies\n * the same bytes and therefore the same classification.\n */\nexport function supportPassportStatIdentity(file: {\n  dev: number;\n  ino: number;\n  size: number;\n  mtimeMs: number;\n  ctimeMs: number;\n}): string {\n  return `${file.dev}:${file.ino}:${file.size}:${file.mtimeMs}:${file.ctimeMs}`;\n}\n\nexport interface PersistedSupportPassportClassification {\n  statIdentity: string;\n  excluded: boolean;\n}\n\n/**\n * `createSupportPassportPrivateFileExclusion` variant that consults a\n * PERSISTED classification before touching the file. The plain factory\n * classifies by reading and parsing every candidate (readMemoryByPath), which\n * is fine once per process but defeats any persisted-parse optimization: a\n * warm reconcile plan that should skip per-file reads would still read every\n * file just to decide exclusion. When the persisted stat identity matches, the\n * classification is reused and the file is not opened; on mismatch it is\n * recomputed once and recorded into `updates` so the caller can persist it.\n */\nexport function createPersistedSupportPassportPrivateFileExclusion(\n  storage: {\n    readMemoryByPath(filePath: string): Promise<MemoryFile | null>;\n  },\n  persisted: ReadonlyMap<string, { statIdentity?: string; excluded?: boolean }>,\n  updates: Map<string, PersistedSupportPassportClassification>\n): OfflineSyncExcludeFile {\n  const inFlight = new Map<string, { identity: string; excluded: Promise<boolean> }>();\n  return async ({ filePath, path: relPath }) => {\n    let file: Awaited<ReturnType<typeof lstat>>;\n    try {\n      file = await lstat(filePath);\n    } catch (error) {\n      if ((error as NodeJS.ErrnoException).code === \"ENOENT\") {\n        inFlight.delete(filePath);\n        return false;\n      }\n      throw error;\n    }\n    const identity = supportPassportStatIdentity(file);\n    const known = persisted.get(relPath);\n    if (known?.statIdentity === identity && known.excluded !== undefined) {\n      updates.set(relPath, { statIdentity: identity, excluded: known.excluded });\n      return known.excluded;\n    }\n    const cached = inFlight.get(filePath);\n    if (cached?.identity === identity) return await cached.excluded;\n    const excluded = storage\n      .readMemoryByPath(filePath)\n      .then((memory) => (memory ? isSupportPassportPrivateMemory(memory) : false))\n      .finally(() => {\n        if (inFlight.get(filePath)?.identity === identity) inFlight.delete(filePath);\n      });\n    inFlight.set(filePath, { identity, excluded });\n    const result = await excluded;\n    updates.set(relPath, { statIdentity: identity, excluded: result });\n    return result;\n  };\n}\n\nexport function createSupportPassportPrivateFileExclusion(storage: {\n  readMemoryByPath(filePath: string): Promise<MemoryFile | null>;\n}): OfflineSyncExcludeFile {\n  const classifications = new Map<string, { identity: string; excluded: Promise<boolean> }>();\n  return async ({ filePath }) => {\n    let file: Awaited<ReturnType<typeof lstat>>;\n    try {\n      file = await lstat(filePath);\n    } catch (error) {\n      if ((error as NodeJS.ErrnoException).code === \"ENOENT\") {\n        classifications.delete(filePath);\n        return false;\n      }\n      throw error;\n    }\n    const identity = `${file.dev}:${file.ino}:${file.size}:${file.mtimeMs}:${file.ctimeMs}`;\n    const cached = classifications.get(filePath);\n    if (cached?.identity === identity) return await cached.excluded;\n    const excluded = storage\n      .readMemoryByPath(filePath)\n      .then((memory) => (memory ? isSupportPassportPrivateMemory(memory) : false));\n    classifications.set(filePath, { identity, excluded });\n    try {\n      return await excluded;\n    } catch (error) {\n      if (classifications.get(filePath)?.excluded === excluded) classifications.delete(filePath);\n      throw error;\n    }\n  };\n}\n\nexport const SUPPORT_PASSPORT_ATTRIBUTE_KEYS = Object.freeze({\n  namespace: \"support-passport-namespace\",\n  namespaceEncoding: \"support-passport-namespace-encoding\",\n  owner: \"support-passport-owner\",\n  title: \"support-passport-title\",\n  category: \"support-passport-category\",\n  order: \"support-passport-order\",\n  reviewBy: \"support-passport-review-by\",\n  sourceMemoryIds: \"support-passport-source-ids\",\n  replacesDraftId: \"support-passport-replaces-draft-id\",\n  replacedRevision: \"support-passport-replaced-revision\",\n  draftReplacementPrepared: \"support-passport-draft-replacement-prepared\",\n  replacementComplete: \"support-passport-replacement-complete\",\n  generatedBatchId: \"support-passport-generated-batch-id\",\n  generatedBatchSize: \"support-passport-generated-batch-size\",\n});\n\nconst SUPPORT_PASSPORT_NAMESPACE_ENCODING = \"base64url-v1\";\nconst SUPPORT_PASSPORT_NAMESPACE_CHUNK_PREFIX = \"support-passport-namespace-\";\nconst SUPPORT_PASSPORT_NAMESPACE_CHUNK_SIZE = 1_024;\nconst LegacySupportPassportNamespaceSchema = SupportPassportNamespaceSchema.refine(\n  (namespace) =>\n    !namespace.includes(\"/\") &&\n    !namespace.includes(\"\\\\\") &&\n    !namespace.includes(\"..\") &&\n    !namespace.includes(\"]\") &&\n    !namespace.includes(\"\\0\") &&\n    !namespace.includes(\"\\n\") &&\n    !namespace.includes(\"\\r\")\n);\n\nexport function encodeSupportPassportNamespaceAttributes(namespace: string): Record<string, string> {\n  const canonical = SupportPassportNamespaceSchema.parse(namespace);\n  const encoded = Buffer.from(canonical, \"utf8\").toString(\"base64url\");\n  const chunks = encoded.match(new RegExp(`.{1,${SUPPORT_PASSPORT_NAMESPACE_CHUNK_SIZE}}`, \"g\")) ?? [];\n  const digest = createHash(\"sha256\").update(encoded).digest(\"hex\");\n  return Object.fromEntries([\n    [SUPPORT_PASSPORT_ATTRIBUTE_KEYS.namespace, chunks[0] ?? \"\"],\n    [\n      SUPPORT_PASSPORT_ATTRIBUTE_KEYS.namespaceEncoding,\n      `${SUPPORT_PASSPORT_NAMESPACE_ENCODING}:${chunks.length}:${digest}`,\n    ],\n    ...chunks.slice(1).map((chunk, index) => [`${SUPPORT_PASSPORT_NAMESPACE_CHUNK_PREFIX}${index + 1}`, chunk]),\n  ]);\n}\n\nexport function decodeSupportPassportNamespaceAttributes(attributes: Readonly<Record<string, string>>): string | null {\n  const firstChunk = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.namespace];\n  const encoding = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.namespaceEncoding];\n  if (encoding === undefined) {\n    const legacy = LegacySupportPassportNamespaceSchema.safeParse(firstChunk);\n    return legacy.success ? legacy.data : null;\n  }\n  const match = /^base64url-v1:([1-9]\\d*):([a-f0-9]{64})$/.exec(encoding);\n  if (!match || typeof firstChunk !== \"string\") return null;\n  const chunkCount = Number(match[1]);\n  if (!Number.isSafeInteger(chunkCount)) return null;\n  const chunkIndexes = Object.keys(attributes).flatMap((key) => {\n    const chunkMatch = /^support-passport-namespace-(\\d+)$/.exec(key);\n    return chunkMatch ? [Number(chunkMatch[1])] : [];\n  });\n  if (\n    chunkIndexes.length !== chunkCount - 1 ||\n    chunkIndexes.some((index) => !Number.isSafeInteger(index) || index < 1 || index >= chunkCount)\n  )\n    return null;\n  const chunks = [firstChunk];\n  for (let index = 1; index < chunkCount; index += 1) {\n    const chunk = attributes[`${SUPPORT_PASSPORT_NAMESPACE_CHUNK_PREFIX}${index}`];\n    if (typeof chunk !== \"string\" || chunk.length === 0) return null;\n    chunks.push(chunk);\n  }\n  const encoded = chunks.join(\"\");\n  if (createHash(\"sha256\").update(encoded).digest(\"hex\") !== match[2]) return null;\n  const decoded = Buffer.from(encoded, \"base64url\").toString(\"utf8\");\n  if (Buffer.from(decoded, \"utf8\").toString(\"base64url\") !== encoded) return null;\n  const namespace = SupportPassportNamespaceSchema.safeParse(decoded);\n  return namespace.success ? namespace.data : null;\n}\n\nexport interface StoredSupportPassportCard {\n  card: SupportPassportCard;\n  memory: MemoryFile;\n  order: number;\n  sourceMemoryIds: string[];\n  namespace: string;\n  owner: string;\n  replacesDraftId?: string;\n  replacedRevision?: string;\n  draftReplacementPrepared: boolean;\n  generatedBatchId?: string;\n  generatedBatchSize?: number;\n}\n\nexport function computeSupportPassportOwnerKey(principal: string): string {\n  return createHash(\"sha256\").update(principal).digest(\"hex\");\n}\n\nexport function activeSupportPassportReplacementPredecessorIds(\n  cards: readonly StoredSupportPassportCard[]\n): Set<string> {\n  return new Set(\n    cards\n      .filter((item) => item.card.status === \"active\")\n      .map((item) => item.memory.frontmatter.supersedes)\n      .filter((cardId): cardId is string => typeof cardId === \"string\")\n  );\n}\n\nfunction parseSourceMemoryIds(frontmatter: MemoryFile[\"frontmatter\"]): string[] | null {\n  const lineage = frontmatter.lineage;\n  const legacyValue = frontmatter.structuredAttributes?.[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.sourceMemoryIds];\n  const rawIds = lineage ?? (legacyValue === undefined || legacyValue === \"\" ? [] : legacyValue.split(\",\"));\n  if (rawIds.length > 5) return null;\n  const normalized: string[] = [];\n  for (const rawId of rawIds) {\n    const parsed = SupportPassportSourceMemoryIdSchema.safeParse(rawId);\n    if (!parsed.success) return null;\n    normalized.push(parsed.data);\n  }\n  if (new Set(normalized).size !== normalized.length) return null;\n  return normalized;\n}\n\ninterface SupportPassportCardMetadata {\n  fields: Omit<SupportPassportCard, \"revision\" | \"statement\">;\n  order: number;\n  sourceMemoryIds: string[];\n  namespace: string;\n  owner: string;\n  replacesDraftId?: string;\n  replacedRevision?: string;\n  draftReplacementPrepared: boolean;\n  generatedBatchId?: string;\n  generatedBatchSize?: number;\n}\n\nfunction parseSupportPassportCardMetadata(memory: Pick<MemoryFile, \"frontmatter\">): SupportPassportCardMetadata | null {\n  const frontmatter = memory.frontmatter;\n  const attributes = frontmatter.structuredAttributes;\n  if (frontmatter.category !== \"preference\") return null;\n  if (!frontmatter.tags?.includes(SUPPORT_PASSPORT_CARD_TAG)) return null;\n  if (!attributes || frontmatter.blockedBy || frontmatter.archivedAt || frontmatter.supersededBy) return null;\n\n  const category = SupportPassportCardCategorySchema.safeParse(attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.category]);\n  const status = SupportPassportCardStatusSchema.safeParse(frontmatter.status);\n  const rawOrder = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.order];\n  const order = Number(rawOrder);\n  const sourceMemoryIds = parseSourceMemoryIds(frontmatter);\n  const namespace = decodeSupportPassportNamespaceAttributes(attributes);\n  const owner = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.owner];\n  let replacesDraftId: string | undefined;\n  const rawReplacesDraftId = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.replacesDraftId];\n  if (rawReplacesDraftId !== undefined) {\n    const parsedReplacesDraftId = SupportPassportMemoryIdSchema.safeParse(rawReplacesDraftId);\n    if (!parsedReplacesDraftId.success) return null;\n    replacesDraftId = parsedReplacesDraftId.data;\n  }\n  let replacedRevision: string | undefined;\n  const rawReplacedRevision = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.replacedRevision];\n  if (rawReplacedRevision !== undefined) {\n    if (!/^[a-f0-9]{64}$/.test(rawReplacedRevision)) return null;\n    replacedRevision = rawReplacedRevision;\n  }\n  const generatedBatchId = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.generatedBatchId];\n  const rawGeneratedBatchSize = attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.generatedBatchSize];\n  let generatedBatchSize: number | undefined;\n  if (generatedBatchId !== undefined) {\n    if (!/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(generatedBatchId)) {\n      return null;\n    }\n    if (typeof rawGeneratedBatchSize !== \"string\" || !/^[1-8]$/.test(rawGeneratedBatchSize)) {\n      return null;\n    }\n    generatedBatchSize = Number(rawGeneratedBatchSize);\n  } else if (rawGeneratedBatchSize !== undefined) {\n    return null;\n  }\n  if (\n    !category.success ||\n    !status.success ||\n    status.data === \"superseded\" ||\n    typeof rawOrder !== \"string\" ||\n    !/^(?:0|[1-9]\\d*)$/.test(rawOrder) ||\n    !Number.isSafeInteger(order) ||\n    namespace === null ||\n    typeof owner !== \"string\" ||\n    !/^[a-f0-9]{64}$/.test(owner) ||\n    !sourceMemoryIds\n  )\n    return null;\n  const fields = SupportPassportCardSchema.omit({\n    revision: true,\n    statement: true,\n  }).safeParse({\n    cardId: frontmatter.id,\n    title: attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.title],\n    category: category.data,\n    status: status.data,\n    updatedAt: frontmatter.updated,\n    reviewBy: attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.reviewBy],\n  });\n  if (!fields.success) return null;\n  return {\n    fields: fields.data,\n    order,\n    sourceMemoryIds,\n    namespace,\n    owner,\n    replacesDraftId,\n    replacedRevision,\n    draftReplacementPrepared: attributes[SUPPORT_PASSPORT_ATTRIBUTE_KEYS.draftReplacementPrepared] === \"true\",\n    generatedBatchId,\n    generatedBatchSize,\n  };\n}\n\nexport function hasLiveSupportPassportCard(memory: Pick<MemoryFile, \"frontmatter\" | \"content\">): boolean {\n  const metadata = parseSupportPassportCardMetadata(memory);\n  if (metadata?.fields.status !== \"active\" && metadata?.fields.status !== \"pending_review\") return false;\n  if (metadata.sourceMemoryIds.length === 0) return false;\n  return SupportPassportCardSchema.omit({ revision: true }).safeParse({\n    ...metadata.fields,\n    statement: stripAttributesSuffix(memory.content),\n  }).success;\n}\n\nexport function projectSupportPassportCard(memory: MemoryFile): StoredSupportPassportCard | null {\n  const metadata = parseSupportPassportCardMetadata(memory);\n  if (!metadata) return null;\n\n  const fields = {\n    ...metadata.fields,\n    statement: stripAttributesSuffix(memory.content),\n  };\n  const normalized = SupportPassportCardSchema.omit({\n    revision: true,\n  }).safeParse(fields);\n  if (!normalized.success) return null;\n  const parsed = SupportPassportCardSchema.safeParse({\n    ...normalized.data,\n    revision: computeSupportPassportCardRevision(normalized.data),\n  });\n  if (!parsed.success) return null;\n  return {\n    card: parsed.data,\n    memory,\n    order: metadata.order,\n    sourceMemoryIds: metadata.sourceMemoryIds,\n    namespace: metadata.namespace,\n    owner: metadata.owner,\n    replacesDraftId: metadata.replacesDraftId,\n    replacedRevision: metadata.replacedRevision,\n    draftReplacementPrepared: metadata.draftReplacementPrepared,\n    generatedBatchId: metadata.generatedBatchId,\n    generatedBatchSize: metadata.generatedBatchSize,\n  };\n}\n"],"mappings":";;;;;;;;;;;AAAA,SAAS,kBAAkB;AAC3B,SAAS,SAAS;AAKX,IAAM,mCAAmC;AAAA,EAC9C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,iCAAiC;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,oCAAoC,EAAE,KAAK,gCAAgC;AACjF,IAAM,kCAAkC,EAAE,KAAK,8BAA8B;AAC7E,IAAM,iCAAiC,EAC3C,OAAO,EACP,KAAK,EACL,IAAI,CAAC,EACL,IAAI,EAAE,EACN,OAAO,CAAC,UAAU,CAAC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,SAAS,IAAI,KAAK,CAAC,MAAM,SAAS,IAAI,GAAG;AAAA,EACzF,SAAS;AACX,CAAC;AAEH,IAAM,qBAAqB,EACxB,OAAO,EACP,SAAS,EAAE,QAAQ,KAAK,CAAC,EACzB,OAAO,CAAC,UAAU,wBAAwB,KAAK,MAAM,MAAM;AAAA,EAC1D,SAAS;AACX,CAAC;AACI,IAAM,iCAAiC,EAC3C,OAAO,EACP,IAAI,CAAC,EACL,OAAO,CAAC,cAAc,cAAc,2BAA2B,SAAS,GAAG;AAAA,EAC1E,SAAS;AACX,CAAC;AACI,IAAM,gCAAgC,EAC1C,OAAO,EACP,KAAK,EACL,IAAI,CAAC,EACL,IAAI,GAAG,EACP,MAAM,oBAAoB;AACtB,IAAM,+CAA+C;AACrD,IAAM,sCAAsC,EAChD,OAAO,EACP,KAAK,EACL,IAAI,CAAC,EACL,IAAI,4CAA4C;AAE5C,IAAM,4BAA4B,EACtC,OAAO;AAAA,EACN,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC3C,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,UAAU;AAAA,EACV,UAAU,EAAE,OAAO,EAAE,MAAM,gBAAgB;AAC7C,CAAC,EACA,OAAO;AAEH,IAAM,gCAAgC,EAC1C,MAAM,yBAAyB,EAC/B,IAAI,GAAG,EACP,YAAY,CAAC,OAAO,QAAQ;AAC3B,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,CAAC,OAAO,IAAI,KAAK,MAAM,QAAQ,GAAG;AAC3C,QAAI,KAAK,IAAI,KAAK,MAAM,GAAG;AACzB,UAAI,SAAS;AAAA,QACX,MAAM,EAAE,aAAa;AAAA,QACrB,SAAS;AAAA,QACT,MAAM,CAAC,OAAO,QAAQ;AAAA,MACxB,CAAC;AAAA,IACH;AACA,SAAK,IAAI,KAAK,MAAM;AAAA,EACtB;AACF,CAAC;AAEI,IAAM,sCAAsC,EAChD,OAAO;AAAA,EACN,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAC7C,CAAC,EACA,OAAO;AAEH,IAAM,wCAAwC,EAClD,OAAO;AAAA,EACN,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC3C,OAAO;AAAA,EACP,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC3C,UAAU;AAAA,EACV,UAAU;AACZ,CAAC,EACA,OAAO;AAEH,IAAM,yCAAyC,EACnD,OAAO;AAAA,EACN,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC3C,QAAQ;AAAA,EACR,kBAAkB,EAAE,OAAO,EAAE,MAAM,gBAAgB;AAAA,EACnD,YAAY,EACT,OAAO,EACP,KAAK,EACL,IAAI,CAAC,EACL,IAAI,EAAE,EACN,MAAM,cAAc,EACpB,SAAS;AACd,CAAC,EACA,OAAO;AAEH,IAAM,wCAAwC,uCAAuC,OAAO;AAAA,EACjG,OAAO;AAAA,EACP,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC3C,UAAU;AAAA,EACV,UAAU;AACZ,CAAC,EAAE,OAAO;AAWH,SAAS,mCAAmC,QAAgC;AACjF,QAAM,kBAAkB;AAAA,IACtB,QAAQ,OAAO;AAAA,IACf,UAAU,OAAO;AAAA,IACjB,UAAU,OAAO;AAAA,IACjB,WAAW,OAAO;AAAA,IAClB,QAAQ,OAAO;AAAA,IACf,OAAO,OAAO;AAAA,IACd,WAAW,OAAO;AAAA,EACpB;AACA,SAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,UAAU,eAAe,CAAC,EAAE,OAAO,KAAK;AAClF;;;ACpJA,SAAS,cAAAA,mBAAkB;AAC3B,SAAS,aAAa;AAgBf,IAAM,4BAA4B;AAClC,IAAM,6BAA6B;AAEnC,SAAS,+BAA+B,QAKnC;AACV,QAAM,OAAO,OAAO,YAAY;AAChC,MAAI,MAAM,SAAS,yBAAyB,MAAM,QAAQ,MAAM,SAAS,0BAA0B,MAAM,MAAM;AAC7G,WAAO;AAAA,EACT;AACA,SAAO,OAAO,KAAK,OAAO,YAAY,wBAAwB,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,IAAI,WAAW,mBAAmB,CAAC;AACrH;AAEO,SAAS,sCACd,UACK;AACL,SAAO,SAAS,OAAO,CAAC,WAAW,CAAC,+BAA+B,MAAM,CAAC;AAC5E;AAOO,SAAS,4BAA4B,MAMjC;AACT,SAAO,GAAG,KAAK,GAAG,IAAI,KAAK,GAAG,IAAI,KAAK,IAAI,IAAI,KAAK,OAAO,IAAI,KAAK,OAAO;AAC7E;AAiBO,SAAS,mDACd,SAGA,WACA,SACwB;AACxB,QAAM,WAAW,oBAAI,IAA8D;AACnF,SAAO,OAAO,EAAE,UAAU,MAAM,QAAQ,MAAM;AAC5C,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,MAAM,QAAQ;AAAA,IAC7B,SAAS,OAAO;AACd,UAAK,MAAgC,SAAS,UAAU;AACtD,iBAAS,OAAO,QAAQ;AACxB,eAAO;AAAA,MACT;AACA,YAAM;AAAA,IACR;AACA,UAAM,WAAW,4BAA4B,IAAI;AACjD,UAAM,QAAQ,UAAU,IAAI,OAAO;AACnC,QAAI,OAAO,iBAAiB,YAAY,MAAM,aAAa,QAAW;AACpE,cAAQ,IAAI,SAAS,EAAE,cAAc,UAAU,UAAU,MAAM,SAAS,CAAC;AACzE,aAAO,MAAM;AAAA,IACf;AACA,UAAM,SAAS,SAAS,IAAI,QAAQ;AACpC,QAAI,QAAQ,aAAa,SAAU,QAAO,MAAM,OAAO;AACvD,UAAM,WAAW,QACd,iBAAiB,QAAQ,EACzB,KAAK,CAAC,WAAY,SAAS,+BAA+B,MAAM,IAAI,KAAM,EAC1E,QAAQ,MAAM;AACb,UAAI,SAAS,IAAI,QAAQ,GAAG,aAAa,SAAU,UAAS,OAAO,QAAQ;AAAA,IAC7E,CAAC;AACH,aAAS,IAAI,UAAU,EAAE,UAAU,SAAS,CAAC;AAC7C,UAAM,SAAS,MAAM;AACrB,YAAQ,IAAI,SAAS,EAAE,cAAc,UAAU,UAAU,OAAO,CAAC;AACjE,WAAO;AAAA,EACT;AACF;AAEO,SAAS,0CAA0C,SAE/B;AACzB,QAAM,kBAAkB,oBAAI,IAA8D;AAC1F,SAAO,OAAO,EAAE,SAAS,MAAM;AAC7B,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,MAAM,QAAQ;AAAA,IAC7B,SAAS,OAAO;AACd,UAAK,MAAgC,SAAS,UAAU;AACtD,wBAAgB,OAAO,QAAQ;AAC/B,eAAO;AAAA,MACT;AACA,YAAM;AAAA,IACR;AACA,UAAM,WAAW,GAAG,KAAK,GAAG,IAAI,KAAK,GAAG,IAAI,KAAK,IAAI,IAAI,KAAK,OAAO,IAAI,KAAK,OAAO;AACrF,UAAM,SAAS,gBAAgB,IAAI,QAAQ;AAC3C,QAAI,QAAQ,aAAa,SAAU,QAAO,MAAM,OAAO;AACvD,UAAM,WAAW,QACd,iBAAiB,QAAQ,EACzB,KAAK,CAAC,WAAY,SAAS,+BAA+B,MAAM,IAAI,KAAM;AAC7E,oBAAgB,IAAI,UAAU,EAAE,UAAU,SAAS,CAAC;AACpD,QAAI;AACF,aAAO,MAAM;AAAA,IACf,SAAS,OAAO;AACd,UAAI,gBAAgB,IAAI,QAAQ,GAAG,aAAa,SAAU,iBAAgB,OAAO,QAAQ;AACzF,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAEO,IAAM,kCAAkC,OAAO,OAAO;AAAA,EAC3D,WAAW;AAAA,EACX,mBAAmB;AAAA,EACnB,OAAO;AAAA,EACP,OAAO;AAAA,EACP,UAAU;AAAA,EACV,OAAO;AAAA,EACP,UAAU;AAAA,EACV,iBAAiB;AAAA,EACjB,iBAAiB;AAAA,EACjB,kBAAkB;AAAA,EAClB,0BAA0B;AAAA,EAC1B,qBAAqB;AAAA,EACrB,kBAAkB;AAAA,EAClB,oBAAoB;AACtB,CAAC;AAED,IAAM,sCAAsC;AAC5C,IAAM,0CAA0C;AAChD,IAAM,wCAAwC;AAC9C,IAAM,uCAAuC,+BAA+B;AAAA,EAC1E,CAAC,cACC,CAAC,UAAU,SAAS,GAAG,KACvB,CAAC,UAAU,SAAS,IAAI,KACxB,CAAC,UAAU,SAAS,IAAI,KACxB,CAAC,UAAU,SAAS,GAAG,KACvB,CAAC,UAAU,SAAS,IAAI,KACxB,CAAC,UAAU,SAAS,IAAI,KACxB,CAAC,UAAU,SAAS,IAAI;AAC5B;AAEO,SAAS,yCAAyC,WAA2C;AAClG,QAAM,YAAY,+BAA+B,MAAM,SAAS;AAChE,QAAM,UAAU,OAAO,KAAK,WAAW,MAAM,EAAE,SAAS,WAAW;AACnE,QAAM,SAAS,QAAQ,MAAM,IAAI,OAAO,OAAO,qCAAqC,KAAK,GAAG,CAAC,KAAK,CAAC;AACnG,QAAM,SAASC,YAAW,QAAQ,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK;AAChE,SAAO,OAAO,YAAY;AAAA,IACxB,CAAC,gCAAgC,WAAW,OAAO,CAAC,KAAK,EAAE;AAAA,IAC3D;AAAA,MACE,gCAAgC;AAAA,MAChC,GAAG,mCAAmC,IAAI,OAAO,MAAM,IAAI,MAAM;AAAA,IACnE;AAAA,IACA,GAAG,OAAO,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,UAAU,CAAC,GAAG,uCAAuC,GAAG,QAAQ,CAAC,IAAI,KAAK,CAAC;AAAA,EAC5G,CAAC;AACH;AAEO,SAAS,yCAAyC,YAA6D;AACpH,QAAM,aAAa,WAAW,gCAAgC,SAAS;AACvE,QAAM,WAAW,WAAW,gCAAgC,iBAAiB;AAC7E,MAAI,aAAa,QAAW;AAC1B,UAAM,SAAS,qCAAqC,UAAU,UAAU;AACxE,WAAO,OAAO,UAAU,OAAO,OAAO;AAAA,EACxC;AACA,QAAM,QAAQ,2CAA2C,KAAK,QAAQ;AACtE,MAAI,CAAC,SAAS,OAAO,eAAe,SAAU,QAAO;AACrD,QAAM,aAAa,OAAO,MAAM,CAAC,CAAC;AAClC,MAAI,CAAC,OAAO,cAAc,UAAU,EAAG,QAAO;AAC9C,QAAM,eAAe,OAAO,KAAK,UAAU,EAAE,QAAQ,CAAC,QAAQ;AAC5D,UAAM,aAAa,qCAAqC,KAAK,GAAG;AAChE,WAAO,aAAa,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;AAAA,EACjD,CAAC;AACD,MACE,aAAa,WAAW,aAAa,KACrC,aAAa,KAAK,CAAC,UAAU,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,KAAK,SAAS,UAAU;AAE7F,WAAO;AACT,QAAM,SAAS,CAAC,UAAU;AAC1B,WAAS,QAAQ,GAAG,QAAQ,YAAY,SAAS,GAAG;AAClD,UAAM,QAAQ,WAAW,GAAG,uCAAuC,GAAG,KAAK,EAAE;AAC7E,QAAI,OAAO,UAAU,YAAY,MAAM,WAAW,EAAG,QAAO;AAC5D,WAAO,KAAK,KAAK;AAAA,EACnB;AACA,QAAM,UAAU,OAAO,KAAK,EAAE;AAC9B,MAAIA,YAAW,QAAQ,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK,MAAM,MAAM,CAAC,EAAG,QAAO;AAC5E,QAAM,UAAU,OAAO,KAAK,SAAS,WAAW,EAAE,SAAS,MAAM;AACjE,MAAI,OAAO,KAAK,SAAS,MAAM,EAAE,SAAS,WAAW,MAAM,QAAS,QAAO;AAC3E,QAAM,YAAY,+BAA+B,UAAU,OAAO;AAClE,SAAO,UAAU,UAAU,UAAU,OAAO;AAC9C;AAgBO,SAAS,+BAA+B,WAA2B;AACxE,SAAOA,YAAW,QAAQ,EAAE,OAAO,SAAS,EAAE,OAAO,KAAK;AAC5D;AAEO,SAAS,+CACd,OACa;AACb,SAAO,IAAI;AAAA,IACT,MACG,OAAO,CAAC,SAAS,KAAK,KAAK,WAAW,QAAQ,EAC9C,IAAI,CAAC,SAAS,KAAK,OAAO,YAAY,UAAU,EAChD,OAAO,CAAC,WAA6B,OAAO,WAAW,QAAQ;AAAA,EACpE;AACF;AAEA,SAAS,qBAAqB,aAAyD;AACrF,QAAM,UAAU,YAAY;AAC5B,QAAM,cAAc,YAAY,uBAAuB,gCAAgC,eAAe;AACtG,QAAM,SAAS,YAAY,gBAAgB,UAAa,gBAAgB,KAAK,CAAC,IAAI,YAAY,MAAM,GAAG;AACvG,MAAI,OAAO,SAAS,EAAG,QAAO;AAC9B,QAAM,aAAuB,CAAC;AAC9B,aAAW,SAAS,QAAQ;AAC1B,UAAM,SAAS,oCAAoC,UAAU,KAAK;AAClE,QAAI,CAAC,OAAO,QAAS,QAAO;AAC5B,eAAW,KAAK,OAAO,IAAI;AAAA,EAC7B;AACA,MAAI,IAAI,IAAI,UAAU,EAAE,SAAS,WAAW,OAAQ,QAAO;AAC3D,SAAO;AACT;AAeA,SAAS,iCAAiC,QAA6E;AACrH,QAAM,cAAc,OAAO;AAC3B,QAAM,aAAa,YAAY;AAC/B,MAAI,YAAY,aAAa,aAAc,QAAO;AAClD,MAAI,CAAC,YAAY,MAAM,SAAS,yBAAyB,EAAG,QAAO;AACnE,MAAI,CAAC,cAAc,YAAY,aAAa,YAAY,cAAc,YAAY,aAAc,QAAO;AAEvG,QAAM,WAAW,kCAAkC,UAAU,WAAW,gCAAgC,QAAQ,CAAC;AACjH,QAAM,SAAS,gCAAgC,UAAU,YAAY,MAAM;AAC3E,QAAM,WAAW,WAAW,gCAAgC,KAAK;AACjE,QAAM,QAAQ,OAAO,QAAQ;AAC7B,QAAM,kBAAkB,qBAAqB,WAAW;AACxD,QAAM,YAAY,yCAAyC,UAAU;AACrE,QAAM,QAAQ,WAAW,gCAAgC,KAAK;AAC9D,MAAI;AACJ,QAAM,qBAAqB,WAAW,gCAAgC,eAAe;AACrF,MAAI,uBAAuB,QAAW;AACpC,UAAM,wBAAwB,8BAA8B,UAAU,kBAAkB;AACxF,QAAI,CAAC,sBAAsB,QAAS,QAAO;AAC3C,sBAAkB,sBAAsB;AAAA,EAC1C;AACA,MAAI;AACJ,QAAM,sBAAsB,WAAW,gCAAgC,gBAAgB;AACvF,MAAI,wBAAwB,QAAW;AACrC,QAAI,CAAC,iBAAiB,KAAK,mBAAmB,EAAG,QAAO;AACxD,uBAAmB;AAAA,EACrB;AACA,QAAM,mBAAmB,WAAW,gCAAgC,gBAAgB;AACpF,QAAM,wBAAwB,WAAW,gCAAgC,kBAAkB;AAC3F,MAAI;AACJ,MAAI,qBAAqB,QAAW;AAClC,QAAI,CAAC,wEAAwE,KAAK,gBAAgB,GAAG;AACnG,aAAO;AAAA,IACT;AACA,QAAI,OAAO,0BAA0B,YAAY,CAAC,UAAU,KAAK,qBAAqB,GAAG;AACvF,aAAO;AAAA,IACT;AACA,yBAAqB,OAAO,qBAAqB;AAAA,EACnD,WAAW,0BAA0B,QAAW;AAC9C,WAAO;AAAA,EACT;AACA,MACE,CAAC,SAAS,WACV,CAAC,OAAO,WACR,OAAO,SAAS,gBAChB,OAAO,aAAa,YACpB,CAAC,mBAAmB,KAAK,QAAQ,KACjC,CAAC,OAAO,cAAc,KAAK,KAC3B,cAAc,QACd,OAAO,UAAU,YACjB,CAAC,iBAAiB,KAAK,KAAK,KAC5B,CAAC;AAED,WAAO;AACT,QAAM,SAAS,0BAA0B,KAAK;AAAA,IAC5C,UAAU;AAAA,IACV,WAAW;AAAA,EACb,CAAC,EAAE,UAAU;AAAA,IACX,QAAQ,YAAY;AAAA,IACpB,OAAO,WAAW,gCAAgC,KAAK;AAAA,IACvD,UAAU,SAAS;AAAA,IACnB,QAAQ,OAAO;AAAA,IACf,WAAW,YAAY;AAAA,IACvB,UAAU,WAAW,gCAAgC,QAAQ;AAAA,EAC/D,CAAC;AACD,MAAI,CAAC,OAAO,QAAS,QAAO;AAC5B,SAAO;AAAA,IACL,QAAQ,OAAO;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,0BAA0B,WAAW,gCAAgC,wBAAwB,MAAM;AAAA,IACnG;AAAA,IACA;AAAA,EACF;AACF;AAEO,SAAS,2BAA2B,QAA8D;AACvG,QAAM,WAAW,iCAAiC,MAAM;AACxD,MAAI,UAAU,OAAO,WAAW,YAAY,UAAU,OAAO,WAAW,iBAAkB,QAAO;AACjG,MAAI,SAAS,gBAAgB,WAAW,EAAG,QAAO;AAClD,SAAO,0BAA0B,KAAK,EAAE,UAAU,KAAK,CAAC,EAAE,UAAU;AAAA,IAClE,GAAG,SAAS;AAAA,IACZ,WAAW,sBAAsB,OAAO,OAAO;AAAA,EACjD,CAAC,EAAE;AACL;AAEO,SAAS,2BAA2B,QAAsD;AAC/F,QAAM,WAAW,iCAAiC,MAAM;AACxD,MAAI,CAAC,SAAU,QAAO;AAEtB,QAAM,SAAS;AAAA,IACb,GAAG,SAAS;AAAA,IACZ,WAAW,sBAAsB,OAAO,OAAO;AAAA,EACjD;AACA,QAAM,aAAa,0BAA0B,KAAK;AAAA,IAChD,UAAU;AAAA,EACZ,CAAC,EAAE,UAAU,MAAM;AACnB,MAAI,CAAC,WAAW,QAAS,QAAO;AAChC,QAAM,SAAS,0BAA0B,UAAU;AAAA,IACjD,GAAG,WAAW;AAAA,IACd,UAAU,mCAAmC,WAAW,IAAI;AAAA,EAC9D,CAAC;AACD,MAAI,CAAC,OAAO,QAAS,QAAO;AAC5B,SAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb;AAAA,IACA,OAAO,SAAS;AAAA,IAChB,iBAAiB,SAAS;AAAA,IAC1B,WAAW,SAAS;AAAA,IACpB,OAAO,SAAS;AAAA,IAChB,iBAAiB,SAAS;AAAA,IAC1B,kBAAkB,SAAS;AAAA,IAC3B,0BAA0B,SAAS;AAAA,IACnC,kBAAkB,SAAS;AAAA,IAC3B,oBAAoB,SAAS;AAAA,EAC/B;AACF;","names":["createHash","createHash"]}

package/dist/chunk-Q4AUIFUA.js

@@ -0,0 +1,111 @@
+import {
+  ClaudeCodeAdapter
+} from "./chunk-J64TK33U.js";
+import {
+  CodexAdapter
+} from "./chunk-RSUYKGGZ.js";
+import {
+  HermesAdapter
+} from "./chunk-42NQ7AVG.js";
+import {
+  ReplitAdapter
+} from "./chunk-TMSXWOBZ.js";
+import {
+  headerValue
+} from "./chunk-7RXCMVFQ.js";
+
+// src/adapters/grok.ts
+var GrokAdapter = class {
+  id = "grok";
+  matches(context) {
+    const clientName = context.clientInfo?.name?.toLowerCase() ?? "";
+    if (clientName.includes("grok")) return true;
+    const ua = headerValue(context.headers, "user-agent");
+    if (ua && ua.toLowerCase().startsWith("grok/")) return true;
+    const clientId = headerValue(context.headers, "x-engram-client-id");
+    if (clientId?.toLowerCase() === "grok") return true;
+    return false;
+  }
+  resolveIdentity(context) {
+    const mcpSessionId = headerValue(context.headers, "mcp-session-id");
+    const namespace = headerValue(context.headers, "x-engram-namespace") || "grok";
+    return {
+      namespace,
+      principal: "grok",
+      sessionKey: mcpSessionId ?? context.sessionKey,
+      adapterId: this.id
+    };
+  }
+};
+
+// src/adapters/opencode.ts
+var OpenCodeAdapter = class {
+  id = "opencode";
+  matches(context) {
+    const clientName = context.clientInfo?.name?.toLowerCase() ?? "";
+    if (clientName.includes("opencode")) return true;
+    const ua = headerValue(context.headers, "user-agent");
+    if (ua && ua.toLowerCase().startsWith("opencode/")) return true;
+    const clientId = headerValue(context.headers, "x-engram-client-id");
+    if (clientId?.toLowerCase() === "opencode") return true;
+    return false;
+  }
+  resolveIdentity(context) {
+    const mcpSessionId = headerValue(context.headers, "mcp-session-id");
+    const namespace = headerValue(context.headers, "x-engram-namespace") || "opencode";
+    return {
+      namespace,
+      principal: "opencode",
+      sessionKey: mcpSessionId ?? context.sessionKey,
+      adapterId: this.id
+    };
+  }
+};
+
+// src/adapters/registry.ts
+var AdapterRegistry = class {
+  adapters;
+  constructor(adapters) {
+    this.adapters = adapters ?? [
+      new HermesAdapter(),
+      new ReplitAdapter(),
+      new CodexAdapter(),
+      new ClaudeCodeAdapter(),
+      new GrokAdapter(),
+      new OpenCodeAdapter()
+    ];
+  }
+  /**
+   * Try each adapter in order. Return the first match, or null if
+   * no adapter recognizes the request context.
+   */
+  resolve(context) {
+    for (const adapter of this.adapters) {
+      if (adapter.matches(context)) {
+        return adapter.resolveIdentity(context);
+      }
+    }
+    const namespace = context.namespace?.trim();
+    const principal = context.principal?.trim();
+    if (namespace && principal) {
+      return {
+        namespace,
+        principal,
+        sessionKey: context.sessionKey,
+        adapterId: "explicit"
+      };
+    }
+    return null;
+  }
+  /** List registered adapter IDs */
+  list() {
+    return this.adapters.map((a) => a.id);
+  }
+};
+
+export {
+  GrokAdapter,
+  OpenCodeAdapter,
+  AdapterRegistry
+};
+//# sourceMappingURL=chunk-Q4AUIFUA.js.map

package/dist/chunk-Q4AUIFUA.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/adapters/grok.ts","../src/adapters/opencode.ts","../src/adapters/registry.ts"],"sourcesContent":["import { headerValue, type AdapterContext, type EngramAdapter, type ResolvedIdentity } from \"./types.js\";\n\n/**\n * Grok adapter.\n *\n * Detection: Grok clients identify themselves with a clientInfo name\n * containing \"grok\" in the MCP initialize handshake, and send\n * User-Agent: grok/<version> on HTTP requests. The exact clientInfo\n * name is not yet stable across Grok surfaces (desktop app, CLI), so\n * detection uses a contains-match for forward compatibility.\n *\n * User-configured identification is also supported via headers:\n *      \"headers\": { \"X-Engram-Client-Id\": \"grok\" }\n *\n * Principal overrides are intentionally handled only by the HTTP server's\n * trustPrincipalHeader gate. Adapters must not independently trust\n * X-Engram-Principal.\n */\nexport class GrokAdapter implements EngramAdapter {\n  readonly id = \"grok\";\n\n  matches(context: AdapterContext): boolean {\n    // Primary: MCP clientInfo from initialize handshake\n    const clientName = context.clientInfo?.name?.toLowerCase() ?? \"\";\n    if (clientName.includes(\"grok\")) return true;\n\n    // Fallback: User-Agent header (\"grok/<version>\")\n    const ua = headerValue(context.headers, \"user-agent\");\n    if (ua && ua.toLowerCase().startsWith(\"grok/\")) return true;\n\n    // Fallback: user-configured client identifier header\n    const clientId = headerValue(context.headers, \"x-engram-client-id\");\n    if (clientId?.toLowerCase() === \"grok\") return true;\n\n    return false;\n  }\n\n  resolveIdentity(context: AdapterContext): ResolvedIdentity {\n    // MCP session ID (standard MCP header, server-assigned)\n    const mcpSessionId = headerValue(context.headers, \"mcp-session-id\");\n\n    // Namespace: explicit header > default\n    const namespace = headerValue(context.headers, \"x-engram-namespace\")\n      || \"grok\";\n\n    return {\n      namespace,\n      principal: \"grok\",\n      sessionKey: mcpSessionId ?? context.sessionKey,\n      adapterId: this.id,\n    };\n  }\n}\n","import { headerValue, type AdapterContext, type EngramAdapter, type ResolvedIdentity } from \"./types.js\";\n\n/**\n * OpenCode adapter.\n *\n * Detection: OpenCode identifies itself as \"opencode\" in the MCP\n * clientInfo of its initialize handshake, and sends\n * User-Agent: opencode/<version> on HTTP requests.\n *\n * User-configured identification is also supported via headers in the\n * OpenCode MCP server config:\n *      \"headers\": { \"X-Engram-Client-Id\": \"opencode\" }\n *\n * Principal overrides are intentionally handled only by the HTTP server's\n * trustPrincipalHeader gate. Adapters must not independently trust\n * X-Engram-Principal.\n */\nexport class OpenCodeAdapter implements EngramAdapter {\n  readonly id = \"opencode\";\n\n  matches(context: AdapterContext): boolean {\n    // Primary: MCP clientInfo from initialize handshake\n    const clientName = context.clientInfo?.name?.toLowerCase() ?? \"\";\n    if (clientName.includes(\"opencode\")) return true;\n\n    // Fallback: User-Agent header (\"opencode/<version>\")\n    const ua = headerValue(context.headers, \"user-agent\");\n    if (ua && ua.toLowerCase().startsWith(\"opencode/\")) return true;\n\n    // Fallback: user-configured client identifier header\n    const clientId = headerValue(context.headers, \"x-engram-client-id\");\n    if (clientId?.toLowerCase() === \"opencode\") return true;\n\n    return false;\n  }\n\n  resolveIdentity(context: AdapterContext): ResolvedIdentity {\n    // MCP session ID (standard MCP header, server-assigned)\n    const mcpSessionId = headerValue(context.headers, \"mcp-session-id\");\n\n    // Namespace: explicit header > default\n    const namespace = headerValue(context.headers, \"x-engram-namespace\")\n      || \"opencode\";\n\n    return {\n      namespace,\n      principal: \"opencode\",\n      sessionKey: mcpSessionId ?? context.sessionKey,\n      adapterId: this.id,\n    };\n  }\n}\n","import type { AdapterContext, EngramAdapter, ResolvedIdentity } from \"./types.js\";\nimport { ClaudeCodeAdapter } from \"./claude-code.js\";\nimport { CodexAdapter } from \"./codex.js\";\nimport { GrokAdapter } from \"./grok.js\";\nimport { OpenCodeAdapter } from \"./opencode.js\";\nimport { ReplitAdapter } from \"./replit.js\";\nimport { HermesAdapter } from \"./hermes.js\";\n\n/**\n * Adapter registry. Attempts to identify which external system is\n * connecting by checking each registered adapter in order. Falls back\n * to explicit namespace/principal from the request args.\n */\nexport class AdapterRegistry {\n  private readonly adapters: EngramAdapter[];\n\n  constructor(adapters?: EngramAdapter[]) {\n    this.adapters = adapters ?? [\n      new HermesAdapter(),\n      new ReplitAdapter(),\n      new CodexAdapter(),\n      new ClaudeCodeAdapter(),\n      new GrokAdapter(),\n      new OpenCodeAdapter(),\n    ];\n  }\n\n  /**\n   * Try each adapter in order. Return the first match, or null if\n   * no adapter recognizes the request context.\n   */\n  resolve(context: AdapterContext): ResolvedIdentity | null {\n    for (const adapter of this.adapters) {\n      if (adapter.matches(context)) {\n        return adapter.resolveIdentity(context);\n      }\n    }\n    const namespace = context.namespace?.trim();\n    const principal = context.principal?.trim();\n    if (namespace && principal) {\n      return {\n        namespace,\n        principal,\n        sessionKey: context.sessionKey,\n        adapterId: \"explicit\",\n      };\n    }\n    return null;\n  }\n\n  /** List registered adapter IDs */\n  list(): string[] {\n    return this.adapters.map((a) => a.id);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAkBO,IAAM,cAAN,MAA2C;AAAA,EACvC,KAAK;AAAA,EAEd,QAAQ,SAAkC;AAExC,UAAM,aAAa,QAAQ,YAAY,MAAM,YAAY,KAAK;AAC9D,QAAI,WAAW,SAAS,MAAM,EAAG,QAAO;AAGxC,UAAM,KAAK,YAAY,QAAQ,SAAS,YAAY;AACpD,QAAI,MAAM,GAAG,YAAY,EAAE,WAAW,OAAO,EAAG,QAAO;AAGvD,UAAM,WAAW,YAAY,QAAQ,SAAS,oBAAoB;AAClE,QAAI,UAAU,YAAY,MAAM,OAAQ,QAAO;AAE/C,WAAO;AAAA,EACT;AAAA,EAEA,gBAAgB,SAA2C;AAEzD,UAAM,eAAe,YAAY,QAAQ,SAAS,gBAAgB;AAGlE,UAAM,YAAY,YAAY,QAAQ,SAAS,oBAAoB,KAC9D;AAEL,WAAO;AAAA,MACL;AAAA,MACA,WAAW;AAAA,MACX,YAAY,gBAAgB,QAAQ;AAAA,MACpC,WAAW,KAAK;AAAA,IAClB;AAAA,EACF;AACF;;;ACnCO,IAAM,kBAAN,MAA+C;AAAA,EAC3C,KAAK;AAAA,EAEd,QAAQ,SAAkC;AAExC,UAAM,aAAa,QAAQ,YAAY,MAAM,YAAY,KAAK;AAC9D,QAAI,WAAW,SAAS,UAAU,EAAG,QAAO;AAG5C,UAAM,KAAK,YAAY,QAAQ,SAAS,YAAY;AACpD,QAAI,MAAM,GAAG,YAAY,EAAE,WAAW,WAAW,EAAG,QAAO;AAG3D,UAAM,WAAW,YAAY,QAAQ,SAAS,oBAAoB;AAClE,QAAI,UAAU,YAAY,MAAM,WAAY,QAAO;AAEnD,WAAO;AAAA,EACT;AAAA,EAEA,gBAAgB,SAA2C;AAEzD,UAAM,eAAe,YAAY,QAAQ,SAAS,gBAAgB;AAGlE,UAAM,YAAY,YAAY,QAAQ,SAAS,oBAAoB,KAC9D;AAEL,WAAO;AAAA,MACL;AAAA,MACA,WAAW;AAAA,MACX,YAAY,gBAAgB,QAAQ;AAAA,MACpC,WAAW,KAAK;AAAA,IAClB;AAAA,EACF;AACF;;;ACtCO,IAAM,kBAAN,MAAsB;AAAA,EACV;AAAA,EAEjB,YAAY,UAA4B;AACtC,SAAK,WAAW,YAAY;AAAA,MAC1B,IAAI,cAAc;AAAA,MAClB,IAAI,cAAc;AAAA,MAClB,IAAI,aAAa;AAAA,MACjB,IAAI,kBAAkB;AAAA,MACtB,IAAI,YAAY;AAAA,MAChB,IAAI,gBAAgB;AAAA,IACtB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,QAAQ,SAAkD;AACxD,eAAW,WAAW,KAAK,UAAU;AACnC,UAAI,QAAQ,QAAQ,OAAO,GAAG;AAC5B,eAAO,QAAQ,gBAAgB,OAAO;AAAA,MACxC;AAAA,IACF;AACA,UAAM,YAAY,QAAQ,WAAW,KAAK;AAC1C,UAAM,YAAY,QAAQ,WAAW,KAAK;AAC1C,QAAI,aAAa,WAAW;AAC1B,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA,YAAY,QAAQ;AAAA,QACpB,WAAW;AAAA,MACb;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,OAAiB;AACf,WAAO,KAAK,SAAS,IAAI,CAAC,MAAM,EAAE,EAAE;AAAA,EACtC;AACF;","names":[]}

package/dist/{chunk-P3SB5BNT.js → chunk-QATYVTP7.js}

@@ -2,7 +2,7 @@ import {
   WHO_KNOWS_DEFAULT_LIMIT,
   WHO_KNOWS_MAX_LIMIT,
   validateWhoKnowsInput
-} from "./chunk-MWFGUESQ.js";
+} from "./chunk-3FJKJ5UZ.js";
 
 // src/who-knows-cli.ts
 function extractWhoKnowsRawArgs(rest) {
@@ -74,4 +74,4 @@ export {
   renderWhoKnowsText,
   renderWhoKnows
 };
-//# sourceMappingURL=chunk-P3SB5BNT.js.map
+//# sourceMappingURL=chunk-QATYVTP7.js.map

package/dist/{chunk-LSYDG6MJ.js → chunk-QBLDCI6E.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-5JMAGU26.js";
 import {
   runPostConsolidationMaterialize
-} from "./chunk-PFFZWDPE.js";
+} from "./chunk-XCOV45MO.js";
 import {
   isSemanticConsolidationLlmOperator
 } from "./chunk-G7D6GZ5J.js";
@@ -220,4 +220,4 @@ export {
   buildExtensionsBlockForConsolidation,
   materializeAfterSemanticConsolidation
 };
-//# sourceMappingURL=chunk-LSYDG6MJ.js.map
+//# sourceMappingURL=chunk-QBLDCI6E.js.map

package/dist/{chunk-KCB7F4J7.js → chunk-QURNMKME.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-KJTKLXTH.js";
 import {
   StorageManager
-} from "./chunk-HV7OY4DM.js";
+} from "./chunk-5VAF4ID4.js";
 import {
   assertInjectedStorageRooted
 } from "./chunk-TBXAY2SS.js";
@@ -260,4 +260,4 @@ export {
   backupExistingLedger,
   rebuildMemoryLifecycleLedger
 };
-//# sourceMappingURL=chunk-KCB7F4J7.js.map
+//# sourceMappingURL=chunk-QURNMKME.js.map

package/dist/{chunk-XOVKXJEP.js → chunk-R3TLVTWW.js}

@@ -1,7 +1,7 @@
 import {
   judgeContradictionPairs,
   resolveScanStorage
-} from "./chunk-YYGZJPOK.js";
+} from "./chunk-42DJ235G.js";
 import {
   CONTRADICTION_VERBS,
   PREFERENCE_DRIFT_VERBS,
@@ -15,7 +15,7 @@ import {
 } from "./chunk-XCB6QDL6.js";
 import {
   composeMemoryEnvelope
-} from "./chunk-3QQTXYZ6.js";
+} from "./chunk-LSLCFCCQ.js";
 import {
   readJsonFile,
   writeJsonFileAtomic
@@ -876,4 +876,4 @@ export {
   isValidResolutionVerb,
   executeResolution
 };
-//# sourceMappingURL=chunk-XOVKXJEP.js.map
+//# sourceMappingURL=chunk-R3TLVTWW.js.map

package/dist/{chunk-XXE5P6HJ.js → chunk-RRZKTSFG.js}

@@ -2,7 +2,7 @@ import {
   SupportPassportError,
   SupportPassportOwnerCreateGrantRequestSchema,
   getOperation
-} from "./chunk-UGPUYIET.js";
+} from "./chunk-JHZCXUQI.js";
 
 // src/support-passport/access-http.ts
 var OWNER_ROOT = "/engram/v1/support-passport";
@@ -137,4 +137,4 @@ export {
   SUPPORT_PASSPORT_OWNER_HTTP_ROUTES,
   handleSupportPassportOwnerHttp
 };
-//# sourceMappingURL=chunk-XXE5P6HJ.js.map
+//# sourceMappingURL=chunk-RRZKTSFG.js.map

package/dist/{chunk-44T3Y7SZ.js → chunk-RUXPVSML.js}

@@ -1,13 +1,13 @@
 import {
   StorageManager
-} from "./chunk-HV7OY4DM.js";
-import {
-  MutationSerializer
-} from "./chunk-FFAZ2XFU.js";
+} from "./chunk-5VAF4ID4.js";
 import {
   keyring_exports,
   secureStoreDir
 } from "./chunk-BJMBJZ2Y.js";
+import {
+  MutationSerializer
+} from "./chunk-FFAZ2XFU.js";
 import {
   isSafeRouteNamespace
 } from "./chunk-PCXDUHQH.js";
@@ -412,4 +412,4 @@ export {
   resolveNamespaceStorageRoot,
   NamespaceStorageRouter
 };
-//# sourceMappingURL=chunk-44T3Y7SZ.js.map
+//# sourceMappingURL=chunk-RUXPVSML.js.map

package/dist/{chunk-DCJ3YFIC.js → chunk-S2ULTQZR.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-AAD2ZS6P.js";
 import {
   gatewayTaskChainOptions
-} from "./chunk-TLPZ6MKZ.js";
+} from "./chunk-YEN4TREG.js";
 import {
   extractJsonCandidates
 } from "./chunk-RGMVMVMF.js";
@@ -685,4 +685,4 @@ export {
   serializeFaithfulnessFields,
   parseFaithfulnessField
 };
-//# sourceMappingURL=chunk-DCJ3YFIC.js.map
+//# sourceMappingURL=chunk-S2ULTQZR.js.map