@remnic/core 9.69.39 → 9.69.41

package/dist/{chunk-TG3FAM2S.js.map → chunk-JL4TQYM5.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/source-attribution.ts"],"sourcesContent":["/**\n * Inline Source Attribution Protocol (issue #369)\n *\n * Extracted facts carry provenance inline inside the fact body, so the\n * citation survives hostile memory text, copy/paste, and LLM quoting. This\n * complements — never replaces — the YAML frontmatter provenance stored on\n * disk.\n *\n * Default format (matches issue #369 proposal):\n *\n *   The foo service uses Redis for rate limiting. [Source: agent=planner, session=abc123, ts=2026-04-10T14:25:07Z]\n *\n * Key properties:\n *   - Inline (part of the body, not metadata).\n *   - Compact (typically <80 chars of overhead per fact).\n *   - Machine-parseable by a single regex.\n *   - Opt-in via `inlineSourceAttributionEnabled` config flag (default off\n *     for backwards compatibility with existing downstream consumers).\n *   - Legacy facts without a citation remain fully readable.\n *\n * The format template is configurable via `inlineSourceAttributionFormat`\n * with supported placeholders:\n *\n *   {agent}     — principal / agent identifier\n *   {session}   — full session key (colon-delimited)\n *   {sessionId} — short stable session id (trailing component)\n *   {ts}        — extraction timestamp (ISO 8601)\n *   {date}      — extraction date (YYYY-MM-DD)\n *\n * Any privacy-sensitive identifiers should be normalized before being passed\n * to `formatCitation` — the helper treats them as opaque strings.\n */\n\n/** Default citation format template (matches issue #369). */\nexport const DEFAULT_CITATION_FORMAT =\n  \"[Source: agent={agent}, session={sessionId}, ts={ts}]\";\n\n/** Sentinel value used when a provenance field is missing. */\nexport const CITATION_UNKNOWN = \"unknown\";\n\nexport interface CitationContext {\n  /** Principal / agent identifier (e.g. resolved via resolvePrincipal). */\n  agent?: string;\n  /** Full session key (e.g. \"agent:planner:main\"). */\n  session?: string;\n  /**\n   * Opaque short session id. Derived from the trailing component of the\n   * session key when not provided explicitly. Use this for compact formats\n   * that do not need the full colon-delimited session key.\n   */\n  sessionId?: string;\n  /** Extraction timestamp as an ISO 8601 string. */\n  ts?: string;\n}\n\nexport interface ParsedCitation {\n  /** Agent identifier parsed from the citation (never crashes on malformed input). */\n  agent?: string;\n  /** Session identifier parsed from the citation. */\n  session?: string;\n  /** Extraction timestamp parsed from the citation. */\n  ts?: string;\n  /** The full matched citation substring. */\n  raw: string;\n}\n\n/**\n * Regex that matches the default `[Source: agent=X, session=Y, ts=Z]` shape\n * as well as human-edited variants (extra whitespace, reordered fields,\n * subset of fields). Matches non-greedily so it can be anchored anywhere in\n * the text. Kept as a getter factory so callers do not share regex state.\n */\nfunction defaultCitationMatcher(): RegExp {\n  // Bounded repetition {1,1024} instead of + so the match cannot backtrack\n  // polynomially over hostile memory text (CodeQL js/polynomial-redos). A real\n  // citation is far shorter than 1024 chars, so this is behavior-preserving for\n  // any genuine [Source: …] block; only pathological/oversized input is excluded.\n  return /\\[Source:([^\\]\\n]{1,1024})\\]/gi;\n}\n\n// Linear trailing-whitespace trim. Replaces text.replace(/\\s+$/u, \"\"), whose\n// anchored quantifier backtracks polynomially on long inputs (CodeQL\n// js/polynomial-redos). Matches the exact \\s (with u flag) semantics one char\n// at a time, so the trailing-content preservation logic in attachCitation is\n// unaffected.\nfunction trimTrailingWhitespace(text: string): string {\n  let end = text.length;\n  while (end > 0 && /\\s/u.test(text[end - 1]!)) end--;\n  return text.slice(0, end);\n}\n\n/**\n * Derive a short session id from a full session key.\n * Falls back to the raw session string if no colon is present.\n */\nexport function deriveSessionId(session: string | undefined): string | undefined {\n  if (!session) return undefined;\n  const trimmed = session.trim();\n  if (trimmed.length === 0) return undefined;\n  const parts = trimmed.split(\":\").filter((p) => p.length > 0);\n  if (parts.length === 0) return trimmed;\n  return parts[parts.length - 1];\n}\n\n/**\n * Format an inline citation tag using the provided template.\n *\n * Missing context fields fall back to {@link CITATION_UNKNOWN} — the caller\n * should always get a non-empty, parseable tag.\n *\n * Uses a single-pass substitution so that values which themselves contain\n * placeholder syntax (e.g. an agent literally named `\"{ts}\"`) cannot be\n * re-interpreted by subsequent replacement steps. Each placeholder slot\n * receives exactly one lookup and the substituted value is treated as\n * terminal text, not template source.\n */\nexport function formatCitation(\n  ctx: CitationContext,\n  template: string = DEFAULT_CITATION_FORMAT,\n): string {\n  const session = ctx.session ?? \"\";\n  const sessionId = ctx.sessionId ?? deriveSessionId(session) ?? CITATION_UNKNOWN;\n  const ts = ctx.ts ?? CITATION_UNKNOWN;\n  const agent = ctx.agent && ctx.agent.trim().length > 0 ? ctx.agent : CITATION_UNKNOWN;\n  const date = ts && ts !== CITATION_UNKNOWN ? ts.slice(0, 10) : CITATION_UNKNOWN;\n  const sessionForTemplate = session.trim().length > 0 ? session : CITATION_UNKNOWN;\n\n  // Map from recognised placeholder names to their resolved value. Unknown\n  // placeholder names are left intact (returning the original `{name}`).\n  const values: Record<string, string> = {\n    agent,\n    session: sessionForTemplate,\n    sessionId,\n    ts,\n    date,\n  };\n\n  // Single-pass scan: replace every recognised `{name}` in one sweep so that\n  // substituted values cannot themselves be treated as template source on a\n  // subsequent pass. The replacer-function form also guarantees that `$` /\n  // `$&` / `$1` sequences inside values are emitted literally.\n  return template.replace(/\\{([a-zA-Z_][\\w]*)\\}/g, (match, name: string) => {\n    return Object.prototype.hasOwnProperty.call(values, name)\n      ? values[name]!\n      : match;\n  });\n}\n\n/**\n * Returns true if the text already carries at least one citation marker.\n * Safe to call on any string — never throws.\n */\nexport function hasCitation(text: string): boolean {\n  if (typeof text !== \"string\" || text.length === 0) return false;\n  return defaultCitationMatcher().test(text);\n}\n\n/**\n * Escape a string for use as a regex literal.\n */\nfunction escapeRegExp(s: string): string {\n  return s.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\");\n}\n\n/**\n * Escape a single character for use INSIDE a character class `[...]`.\n * Special chars inside character classes: `]`, `\\`, `^`, `-`.\n */\nfunction escapeRegExpCharClass(ch: string): string {\n  if (ch === \"]\") return \"\\\\]\";\n  if (ch === \"\\\\\") return \"\\\\\\\\\";\n  if (ch === \"^\") return \"\\\\^\";\n  if (ch === \"-\") return \"\\\\-\";\n  // Other regex meta chars are NOT special inside [...] but escaping them is safe.\n  return escapeRegExp(ch);\n}\n\n/**\n * Build a per-placeholder token pattern that excludes newlines, whitespace,\n * and any punctuation characters used as inner separators in the template.\n *\n * This prevents a placeholder span from consuming separator bytes and\n * matching strings that cross separator boundaries in user-supplied content.\n *\n * @param nonWordSepChars - Set of non-word (non-alphanumeric, non-`_`) chars\n *   extracted from the inner separator literals of the template.\n */\nfunction buildTokenPattern(nonWordSepChars: Set<string>): string {\n  // Always exclude newlines and whitespace.\n  const base = \"\\\\n\\\\s\";\n  if (nonWordSepChars.size === 0) {\n    // No inner separator punctuation — the placeholder spans the full space\n    // between prefix and suffix. Fall back to a generous no-newline match.\n    return `[^\\\\n]+?`;\n  }\n  const escaped = [...nonWordSepChars].map(escapeRegExpCharClass).join(\"\");\n  return `[^${base}${escaped}]+?`;\n}\n\n/** Regex that matches a `{placeholder}` token inside a template string. */\nconst PLACEHOLDER_REGEX = /\\{[a-zA-Z_][\\w]*\\}/g;\n\n/**\n * Build a regex that matches a citation produced by the given template.\n *\n * The approach depends on the shape of the template:\n *\n *  - **Normal case (non-empty literal prefix or suffix).** Anchor the match\n *    on the outer literal frame and reconstruct the interior as\n *    `interToken + sep + interToken + sep + ... + sep + lastToken`.\n *    All **intermediate** per-placeholder tokens exclude the combined set of\n *    non-word separator characters used between any two adjacent placeholders,\n *    preventing a value from consuming a separator and crossing placeholder\n *    boundaries.  The **last** token is only required to avoid newlines because\n *    it is terminated by the literal suffix anchor — this lets placeholder\n *    values that legitimately contain a separator character be recognised (e.g.\n *    an ISO-8601 timestamp `2026-04-10T14:25:07Z` in `[src:{agent}:{ts}]`\n *    where `:` is the inter-placeholder separator).  A template like\n *    `[src:{agent}/{sessionId}@{date}]` emits\n *    `\\[src:[^\\n\\s/@]+?\\/[^\\n\\s/@]+?@[^\\n]+?\\]` so that `[src:foo/bar]`\n *    is NOT matched (wrong separator count), `[src:foo/bar/extra@2026]`\n *    is NOT matched (intermediate token crosses a `/` boundary), and\n *    `[src:planner/main@2026-04-10]` IS matched correctly.\n *\n *  - **Placeholder-bounded with whitespace separator.** Both prefix and\n *    suffix are empty and the separator literal(s) between placeholders\n *    contain at least one whitespace character (e.g. `{source}: {content}`,\n *    `{agent} {sessionId}`). A whitespace-containing separator produces\n *    output that is visually indistinguishable from ordinary prose, so the\n *    safe strategy is to require a **hard bracket/paren/angle delimiter** on\n *    both sides of the reconstructed match. Prose almost never places\n *    `[...]` / `(...)` / `<...>` around a phrase, so this yields clean\n *    false-positive rejection.\n *\n *  - **Placeholder-bounded with compact (non-whitespace) separator.** Both\n *    prefix and suffix are empty and the separator literal(s) contain NO\n *    whitespace (e.g. `{agent}:{sessionId}`, `{agent}/{sessionId}`).\n *    `formatCitation` emits a compact token like `planner:main` with no\n *    surrounding delimiters, so the bracket strategy cannot detect it.\n *    Instead, the pattern requires that the entire token is bordered by\n *    whitespace or a bracket/paren/angle on each side:\n *\n *      `(?:(?<=[\\[\\(\\<])|(?<!\\S))[\\w.-]+<sep>[\\w.-]+(?:(?=[\\]\\)\\>])|(?!\\S))`\n *\n *    This accepts `planner:main` when it appears standalone or inside a\n *    bracket-wrapped token, and rejects `host:80` embedded inside a URL like\n *    `http://host:80` because `host` is immediately preceded by `/`\n *    (non-whitespace, non-bracket).\n *\n *  - **All-placeholder case (no literals between placeholders either).** No\n *    reliable regex can be built — a template like `{agent}{sessionId}`\n *    contains no anchor characters. Returns `null`; {@link\n *    hasCitationForTemplate} treats this as \"cannot detect\" and returns\n *    false, falling back on explicit sentinel/format detection only for the\n *    default `[Source: ...]` shape.\n *\n * Returns `null` when the template has no placeholders (fully-literal\n * citation, handled by the string-equality fast path in {@link\n * hasCitationForTemplate}) **or** when the template is entirely placeholder-\n * only with no literal content whatsoever.\n */\nfunction templateMatcher(template: string): RegExp | null {\n  // Split around all {placeholder} tokens.\n  const parts = template.split(PLACEHOLDER_REGEX);\n  if (parts.length <= 1) return null;\n\n  const prefix = parts[0] ?? \"\";\n  const suffix = parts[parts.length - 1] ?? \"\";\n\n  // Normal case: at least one literal frame on the outside.\n  // Tighten the per-placeholder token so it cannot consume separator\n  // characters and match strings that cross separator boundaries\n  // (Finding 3 — Uru3).\n  if (prefix.length > 0 || suffix.length > 0) {\n    const escapedPrefix = escapeRegExp(prefix);\n    const escapedSuffix = escapeRegExp(suffix);\n\n    // Inner parts: literal separators that sit between adjacent placeholders.\n    // For `[src:{agent}/{sessionId}@{date}]`, parts = [\"[src:\", \"/\", \"@\", \"]\"]\n    // so innerParts = [\"/\", \"@\"].\n    const innerParts = parts.slice(1, -1);\n\n    // Collect only the non-word (punctuation/symbol) characters from each\n    // inner separator so alphabetic separator text (unlikely but valid) does\n    // not exclude letters from the per-placeholder token pattern.\n    const nonWordSepChars = new Set<string>();\n    for (const sep of innerParts) {\n      for (const ch of sep) {\n        if (!/\\w/.test(ch)) {\n          nonWordSepChars.add(ch);\n        }\n      }\n    }\n\n    // All intermediate tokens (every placeholder except the last) use the\n    // combined exclusion so they cannot cross placeholder boundaries.\n    //\n    // The LAST token is different: it is terminated by the literal suffix anchor\n    // (e.g. `\\]`), so it does not need to exclude inner-separator characters.\n    // Dropping that restriction lets placeholder values that legitimately contain\n    // a separator character (e.g. an ISO-8601 timestamp `2026-04-10T14:25:07Z`\n    // in template `[src:{agent}:{ts}]`) be recognised correctly instead of\n    // producing false-negative misses that trigger duplicate citation injection.\n    //\n    // Only the LAST token is relaxed.  Intermediate tokens keep the combined\n    // exclusion so that cross-boundary false positives are still rejected\n    // (e.g. `[src:foo/bar/extra@2026-04-11]` for `[src:{a}/{b}@{c}]`).\n    const interToken = buildTokenPattern(nonWordSepChars);\n    // Last token: terminated by suffix anchor — exclude only newlines.\n    const lastToken = buildTokenPattern(new Set<string>());\n\n    // Reconstruct the interior: interToken sep interToken sep ... sep lastToken\n    // (or just lastToken when there are no inner separators at all).\n    const middle =\n      innerParts.length === 0\n        ? lastToken\n        : interToken +\n          innerParts\n            .slice(0, -1)\n            .map((sep) => escapeRegExp(sep) + interToken)\n            .join(\"\") +\n          escapeRegExp(innerParts[innerParts.length - 1]!) +\n          lastToken;\n\n    const pattern = escapedPrefix + middle + escapedSuffix;\n    return new RegExp(pattern, \"i\");\n  }\n\n  // Placeholder-bounded case: prefix and suffix are both empty.\n  const middleLiterals = parts.slice(1, -1);\n  const hasNonEmptyMiddle = middleLiterals.some((p) => p.length > 0);\n  if (!hasNonEmptyMiddle) {\n    // All-placeholder template with no literal content. Impossible to anchor\n    // reliably without sentinel markers; signal the caller.\n    return null;\n  }\n\n  // Identifier token: one or more word chars, dots, dashes, or colons.\n  // Colons are included to allow timestamp values like \"10:30\" or session\n  // keys like \"agent:planner:main\" inside compact placeholder-bounded\n  // templates.  URL-like fragments (`http://host:80`) are still rejected\n  // because the lead anchor requires whitespace or a bracket immediately\n  // before the first id-token group (`http` is preceded by `/`).\n  const idToken = \"[\\\\w.:-]+\";\n  const body =\n    idToken +\n    middleLiterals.map((lit) => escapeRegExp(lit) + idToken).join(\"\");\n\n  const separatorText = middleLiterals.join(\"\");\n  if (/\\s/.test(separatorText)) {\n    // Separator contains whitespace: the emitted citation looks like ordinary\n    // prose (e.g. `planner main`). Require a hard bracket/paren/angle\n    // delimiter on both sides to prevent false matches on English text.\n    const opener = \"[\\\\[\\\\(\\\\<]\";\n    const closer = \"[\\\\]\\\\)\\\\>]\";\n    return new RegExp(opener + body + closer, \"i\");\n  }\n\n  // Separator is compact (no whitespace): `formatCitation` emits a token like\n  // `planner:main` without surrounding delimiters. The challenge is that the\n  // same token shape also matches ordinary hyphenated or slashed prose words\n  // (e.g. `long-term`, `docs/setup`), causing `hasCitationForTemplate` to\n  // return true on uncited fact bodies and silently suppress citation injection\n  // from `attachCitation`.\n  //\n  // Fix (Finding 1): tighten the trail anchor so a bare compact token is only\n  // accepted when it sits at the very end of the string (possibly followed by\n  // optional trailing whitespace or a newline). Since `attachCitation` always\n  // appends the citation at the trimmed end of the fact body, a real citation\n  // token will always appear at the tail. Prose like `\"long-term solution\"`\n  // has `long-term` in the middle of the string (followed by ` solution`), so\n  // the end-of-string anchor rejects it — no false positive, no silent drop.\n  //\n  // The lead anchor still accepts either a bracket opener or a whitespace\n  // boundary (or start of string), so `\"Fact. planner:main\"` and standalone\n  // `\"planner:main\"` are both detected after the first attachment pass.\n  //\n  // Bracket-wrapped form (e.g. `[planner:main]`) is also accepted via the\n  // opener/closer pair — bracket still takes precedence over end-of-string.\n  //\n  // Example — why `http://host:80` does NOT match:\n  //   Trying to match `host:80`: the char before `h` is `/` (non-whitespace,\n  //   non-bracket), so `(?<=[\\[\\(\\<])` and `(?<!\\S)` both fail ⟹ no match.\n  //   Trying to match `http:...`: after `http:` the next chars are `//` which\n  //   are not `[\\w.-]+`, so the second id-token group fails ⟹ no match.\n  const leadAnchor = \"(?:(?<=[\\\\[\\\\(\\\\<])|(?<!\\\\S))\";\n  // Trail: either a bracket closer (for `[token]` shape) or end-of-string\n  // optionally preceded by whitespace. The `(?!\\S)` is deliberately removed\n  // so that a compact token in the MIDDLE of a sentence does not match.\n  const trailAnchor = \"(?:(?=[\\\\]\\\\)\\\\>])|(?=\\\\s*$))\";\n  return new RegExp(leadAnchor + body + trailAnchor, \"i\");\n}\n\n/**\n * Returns true if `text` already carries a citation produced by `template`\n * **or** by the default `[Source: ...]` format (for facts that were tagged\n * before a config change).\n *\n * Use this instead of {@link hasCitation} whenever the caller has access to\n * the configured `inlineSourceAttributionFormat`.\n *\n * All-placeholder templates such as `{agent}{sessionId}` have no literal\n * content to anchor on and therefore cannot be reliably detected without\n * dedicated sentinel markers. In that case the function returns `false` —\n * callers that need idempotent dedup for such templates should either adopt\n * a template with literal delimiters (recommended) or rely on the default\n * `[Source: ...]` marker detection which is always available via\n * {@link hasCitation}.\n */\nexport function hasCitationForTemplate(text: string, template: string): boolean {\n  if (typeof text !== \"string\" || text.length === 0) return false;\n  // Always accept the default format as a fallback so facts tagged before a\n  // configuration change are not double-tagged on reprocessing.\n  if (hasCitation(text)) return true;\n  // If the configured template matches the default, we're done.\n  //\n  // Known limitation (Thread 2 — Codex P2): this fast path exits without\n  // checking whether the content carries a citation from a DIFFERENT custom\n  // template that was active before the config was changed back to the default.\n  // Such a fact would be detected by `hasCitation` above only if the prior\n  // custom template happened to match the default `[Source: ...]` pattern.\n  // In practice, template changes mid-stream are rare, and the false-negative\n  // (missing an old custom citation) produces a benign duplicate citation rather\n  // than data loss. A full fix would require storing the citation template used\n  // at write time in the frontmatter and checking that here.\n  if (template === DEFAULT_CITATION_FORMAT) return false;\n\n  // Fully-literal template (no placeholders): exact inclusion check.\n  if (!PLACEHOLDER_REGEX.test(template)) {\n    // Reset lastIndex because PLACEHOLDER_REGEX is declared with /g.\n    PLACEHOLDER_REGEX.lastIndex = 0;\n    return text.includes(template);\n  }\n  // Reset lastIndex after the .test() probe above.\n  PLACEHOLDER_REGEX.lastIndex = 0;\n\n  const matcher = templateMatcher(template);\n  if (!matcher) {\n    // All-placeholder template: cannot build a reliable matcher. See the\n    // docstring — callers should not rely on dedup for this shape.\n    return false;\n  }\n  return matcher.test(text);\n}\n\n/**\n * Return the LAST citation marker in `text` for the given template (or the\n * default `[Source: ...]` shape). `attachCitation` always appends at the\n * trimmed end, so the last occurrence is the most recently attached marker —\n * callers use this to lift a just-attached citation off a cited body and\n * re-attach it to a derived body (the merged-target commit path). Returns\n * null when the text carries no marker of this template (including\n * all-placeholder templates that cannot be matched reliably).\n */\nexport function lastCitationMarkerForTemplate(\n  text: string,\n  template: string = DEFAULT_CITATION_FORMAT,\n): string | null {\n  if (typeof text !== \"string\" || text.length === 0) return null;\n  let matcher: RegExp | null;\n  if (template === DEFAULT_CITATION_FORMAT) {\n    matcher = defaultCitationMatcher();\n  } else if (!PLACEHOLDER_REGEX.test(template)) {\n    // Fully-literal template: presence is exact inclusion (no placeholders\n    // to widen the match).\n    PLACEHOLDER_REGEX.lastIndex = 0;\n    return text.includes(template) ? template : null;\n  } else {\n    PLACEHOLDER_REGEX.lastIndex = 0;\n    matcher = templateMatcher(template);\n  }\n  if (!matcher) return null;\n  const global = new RegExp(\n    matcher.source,\n    matcher.flags.includes(\"g\") ? matcher.flags : matcher.flags + \"g\",\n  );\n  let last: string | null = null;\n  for (let match = global.exec(text); match !== null; match = global.exec(text)) {\n    last = match[0];\n    if (match[0].length === 0) global.lastIndex++;\n  }\n  return last;\n}\n\n/**\n * Attach an inline citation to fact text.\n *\n * If the text already has a citation — either the default `[Source: ...]`\n * marker or one produced by the configured template — it is returned unchanged.\n * Existing provenance is respected and never overwritten. Otherwise the\n * citation is appended to the trimmed text with a single space separator,\n * which keeps the marker visually adjacent to the fact body.\n */\nexport function attachCitation(\n  text: string,\n  ctx: CitationContext,\n  template: string = DEFAULT_CITATION_FORMAT,\n): string {\n  if (typeof text !== \"string\") return text as unknown as string;\n  if (hasCitationForTemplate(text, template)) return text;\n  const trimmedEnd = trimTrailingWhitespace(text);\n  if (trimmedEnd.length === 0) return text;\n  const citation = formatCitation(ctx, template);\n  // Preserve any trailing newline that callers rely on for markdown rendering.\n  const trailing = text.slice(trimmedEnd.length);\n  return `${trimmedEnd} ${citation}${trailing}`;\n}\n\n/**\n * Parse a single inline citation from a piece of text. Returns the first\n * citation encountered or `null` when none is present. Malformed citations\n * do not throw — fields that cannot be parsed simply remain `undefined`.\n */\nexport function parseCitation(text: string): ParsedCitation | null {\n  if (typeof text !== \"string\" || text.length === 0) return null;\n  const matcher = defaultCitationMatcher();\n  const match = matcher.exec(text);\n  if (!match) return null;\n\n  const body = match[1] ?? \"\";\n  const raw = match[0] ?? \"\";\n  const parsed: ParsedCitation = { raw };\n\n  const fields = body\n    .split(\",\")\n    .map((segment) => segment.trim())\n    .filter((segment) => segment.length > 0);\n\n  for (const field of fields) {\n    const eqIdx = field.indexOf(\"=\");\n    if (eqIdx <= 0) continue;\n    const key = field.slice(0, eqIdx).trim().toLowerCase();\n    const value = field.slice(eqIdx + 1).trim();\n    if (value.length === 0) continue;\n    switch (key) {\n      case \"agent\":\n        parsed.agent = value;\n        break;\n      case \"session\":\n      case \"sessionid\":\n        parsed.session = value;\n        break;\n      case \"ts\":\n      case \"timestamp\":\n        parsed.ts = value;\n        break;\n      default:\n        // Unknown fields are ignored defensively so human edits never crash.\n        break;\n    }\n  }\n\n  return parsed;\n}\n\n/**\n * Parse every citation embedded in the text. Always returns an array; empty\n * when none are present.\n */\nexport function parseAllCitations(text: string): ParsedCitation[] {\n  if (typeof text !== \"string\" || text.length === 0) return [];\n  const matcher = defaultCitationMatcher();\n  const results: ParsedCitation[] = [];\n  let match: RegExpExecArray | null;\n  while ((match = matcher.exec(text)) !== null) {\n    const parsed = parseCitation(match[0]);\n    if (parsed) results.push(parsed);\n  }\n  return results;\n}\n\n/**\n * Remove all inline citations from a piece of text.\n *\n * Callers that want the raw fact body (for dedup hashing, display, or\n * comparison) should use this helper instead of hand-rolled regexes so the\n * whole codebase agrees on the citation syntax.\n *\n * Finding 2 fix: when the input contains no citation marker, the input is\n * returned byte-for-byte unchanged. When a citation IS removed, whitespace\n * normalization is applied only at each join seam (the single space between\n * the preceding text and where the citation was), rather than across the\n * entire string. This preserves markdown hard-break spacing, aligned text,\n * and code-like snippets in fact bodies that happen to carry a citation.\n *\n * Implementation: each citation match is replaced by its \"seam fix\" — the\n * content before the match has its trailing whitespace trimmed and then a\n * single space is appended if any text remains, collapsing only the gap\n * left by the removed marker. Whitespace elsewhere in the body is untouched.\n */\nexport function stripCitation(text: string): string {\n  if (typeof text !== \"string\" || text.length === 0) return text;\n  // Early exit: no citation marker present — return the input unchanged so\n  // that callers never lose formatting fidelity on uncited strings.\n  if (!hasCitation(text)) return text;\n\n  // Walk through all citations and slice them out one by one so that we can\n  // normalise ONLY the whitespace at each seam rather than the entire string.\n  const matcher = defaultCitationMatcher();\n  let result = \"\";\n  let lastIndex = 0;\n\n  let match: RegExpExecArray | null;\n  while ((match = matcher.exec(text)) !== null) {\n    // Text before this citation. Trim trailing spaces/tabs at the seam only.\n    const before = text.slice(lastIndex, match.index).replace(/[ \\t]+$/, \"\");\n    result += before;\n    lastIndex = match.index + match[0].length;\n  }\n\n  // Append any trailing text after the last citation. Trim leading\n  // spaces/tabs and trailing whitespace at the join seam.\n  const after = text.slice(lastIndex).replace(/^[ \\t]+/, \"\");\n  if (after.length > 0) {\n    if (result.length > 0) result += \" \";\n    result += after;\n  }\n\n  return result.trimEnd();\n}\n\n/**\n * Strip an inline citation from text using a specific template regex.\n *\n * This is the template-aware counterpart to {@link stripCitation}. When the\n * caller holds the configured `inlineSourceAttributionFormat`, use this\n * function to strip citations produced by that template — including custom\n * templates that differ from the default `[Source: ...]` pattern.\n *\n * Behaviour:\n *  - If the text has a **default-format** citation, strips it first\n *    (always safe).\n *  - Then, if the result has a **custom-template** citation detected by\n *    `hasCitationForTemplate`, builds the template regex and removes every\n *    occurrence. BOTH passes run when a body carries both forms — a target\n *    written under the default format can carry the default marker plus a\n *    custom marker appended after a config change; returning after the\n *    default pass alone left the custom marker inside hash inputs (#2330).\n *  - All-placeholder templates (no literal prefix/suffix/separator) cannot\n *    produce a reliable matcher. `hasCitationForTemplate` already returns\n *    `false` for such templates, so this function never attempts to strip an\n *    undetectable citation. The text is returned unchanged when no citation\n *    is detected.\n *  - If no citation is detected for the given template, returns the text\n *    unchanged.\n *\n * @returns The stripped text (or the original text when no citation is found).\n */\nexport function stripCitationForTemplate(\n  text: string,\n  template: string,\n): string {\n  if (typeof text !== \"string\" || text.length === 0) return text;\n\n  // First pass: the default-format marker, if any. A second pass below still\n  // runs — a body can carry the default marker AND the custom template's\n  // marker, and canonicalization must remove every recognized form.\n  const afterDefault = hasCitation(text) ? stripCitation(text) : text;\n\n  if (!hasCitationForTemplate(afterDefault, template)) return afterDefault;\n\n  // Build the template matcher. hasCitationForTemplate already returned true,\n  // which means templateMatcher produced a non-null result. The null branch\n  // here is a defensive fallback only — the default pass already ran.\n  const matcher = templateMatcher(template);\n  if (!matcher) return afterDefault;\n\n  // The matcher regex was built without the global flag; add it for exec loop.\n  const globalMatcher = new RegExp(\n    matcher.source,\n    matcher.flags.includes(\"g\") ? matcher.flags : matcher.flags + \"g\",\n  );\n  let result = \"\";\n  let lastIndex = 0;\n  let match: RegExpExecArray | null;\n\n  while ((match = globalMatcher.exec(afterDefault)) !== null) {\n    const matchEnd = match.index + match[0].length;\n    const enclosure = enclosingDelimiterRange(afterDefault, match.index, matchEnd);\n    const removalStart = enclosure?.start ?? match.index;\n    const removalEnd = enclosure?.end ?? matchEnd;\n    const before = afterDefault.slice(lastIndex, removalStart).replace(/[ \\t]+$/, \"\");\n    result += before;\n    lastIndex = removalEnd;\n    // Guard against zero-width matches causing an infinite loop.\n    if (match[0].length === 0) {\n      globalMatcher.lastIndex++;\n    }\n  }\n\n  const after = afterDefault.slice(lastIndex).replace(/^[ \\t]+/, \"\");\n  if (after.length > 0) {\n    if (result.length > 0) result += \" \";\n    result += after;\n  }\n\n  return result.trimEnd();\n}\n\nfunction enclosingDelimiterRange(\n  text: string,\n  start: number,\n  end: number,\n): { start: number; end: number } | undefined {\n  if (start <= 0 || end >= text.length) return undefined;\n  const opener = text[start - 1];\n  const closer = text[end];\n  if (\n    (opener === \"[\" && closer === \"]\") ||\n    (opener === \"(\" && closer === \")\") ||\n    (opener === \"<\" && closer === \">\")\n  ) {\n    return { start: start - 1, end: end + 1 };\n  }\n  return undefined;\n}\n"],"mappings":";AAkCO,IAAM,0BACX;AAGK,IAAM,mBAAmB;AAkChC,SAAS,yBAAiC;AAKxC,SAAO;AACT;AAOA,SAAS,uBAAuB,MAAsB;AACpD,MAAI,MAAM,KAAK;AACf,SAAO,MAAM,KAAK,MAAM,KAAK,KAAK,MAAM,CAAC,CAAE,EAAG;AAC9C,SAAO,KAAK,MAAM,GAAG,GAAG;AAC1B;AAMO,SAAS,gBAAgB,SAAiD;AAC/E,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,UAAU,QAAQ,KAAK;AAC7B,MAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,QAAM,QAAQ,QAAQ,MAAM,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;AAC3D,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,SAAO,MAAM,MAAM,SAAS,CAAC;AAC/B;AAcO,SAAS,eACd,KACA,WAAmB,yBACX;AACR,QAAM,UAAU,IAAI,WAAW;AAC/B,QAAM,YAAY,IAAI,aAAa,gBAAgB,OAAO,KAAK;AAC/D,QAAM,KAAK,IAAI,MAAM;AACrB,QAAM,QAAQ,IAAI,SAAS,IAAI,MAAM,KAAK,EAAE,SAAS,IAAI,IAAI,QAAQ;AACrE,QAAM,OAAO,MAAM,OAAO,mBAAmB,GAAG,MAAM,GAAG,EAAE,IAAI;AAC/D,QAAM,qBAAqB,QAAQ,KAAK,EAAE,SAAS,IAAI,UAAU;AAIjE,QAAM,SAAiC;AAAA,IACrC;AAAA,IACA,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAMA,SAAO,SAAS,QAAQ,yBAAyB,CAAC,OAAO,SAAiB;AACxE,WAAO,OAAO,UAAU,eAAe,KAAK,QAAQ,IAAI,IACpD,OAAO,IAAI,IACX;AAAA,EACN,CAAC;AACH;AAMO,SAAS,YAAY,MAAuB;AACjD,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAC1D,SAAO,uBAAuB,EAAE,KAAK,IAAI;AAC3C;AAKA,SAAS,aAAa,GAAmB;AACvC,SAAO,EAAE,QAAQ,uBAAuB,MAAM;AAChD;AAMA,SAAS,sBAAsB,IAAoB;AACjD,MAAI,OAAO,IAAK,QAAO;AACvB,MAAI,OAAO,KAAM,QAAO;AACxB,MAAI,OAAO,IAAK,QAAO;AACvB,MAAI,OAAO,IAAK,QAAO;AAEvB,SAAO,aAAa,EAAE;AACxB;AAYA,SAAS,kBAAkB,iBAAsC;AAE/D,QAAM,OAAO;AACb,MAAI,gBAAgB,SAAS,GAAG;AAG9B,WAAO;AAAA,EACT;AACA,QAAM,UAAU,CAAC,GAAG,eAAe,EAAE,IAAI,qBAAqB,EAAE,KAAK,EAAE;AACvE,SAAO,KAAK,IAAI,GAAG,OAAO;AAC5B;AAGA,IAAM,oBAAoB;AA6D1B,SAAS,gBAAgB,UAAiC;AAExD,QAAM,QAAQ,SAAS,MAAM,iBAAiB;AAC9C,MAAI,MAAM,UAAU,EAAG,QAAO;AAE9B,QAAM,SAAS,MAAM,CAAC,KAAK;AAC3B,QAAM,SAAS,MAAM,MAAM,SAAS,CAAC,KAAK;AAM1C,MAAI,OAAO,SAAS,KAAK,OAAO,SAAS,GAAG;AAC1C,UAAM,gBAAgB,aAAa,MAAM;AACzC,UAAM,gBAAgB,aAAa,MAAM;AAKzC,UAAM,aAAa,MAAM,MAAM,GAAG,EAAE;AAKpC,UAAM,kBAAkB,oBAAI,IAAY;AACxC,eAAW,OAAO,YAAY;AAC5B,iBAAW,MAAM,KAAK;AACpB,YAAI,CAAC,KAAK,KAAK,EAAE,GAAG;AAClB,0BAAgB,IAAI,EAAE;AAAA,QACxB;AAAA,MACF;AAAA,IACF;AAeA,UAAM,aAAa,kBAAkB,eAAe;AAEpD,UAAM,YAAY,kBAAkB,oBAAI,IAAY,CAAC;AAIrD,UAAM,SACJ,WAAW,WAAW,IAClB,YACA,aACA,WACG,MAAM,GAAG,EAAE,EACX,IAAI,CAAC,QAAQ,aAAa,GAAG,IAAI,UAAU,EAC3C,KAAK,EAAE,IACV,aAAa,WAAW,WAAW,SAAS,CAAC,CAAE,IAC/C;AAEN,UAAM,UAAU,gBAAgB,SAAS;AACzC,WAAO,IAAI,OAAO,SAAS,GAAG;AAAA,EAChC;AAGA,QAAM,iBAAiB,MAAM,MAAM,GAAG,EAAE;AACxC,QAAM,oBAAoB,eAAe,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC;AACjE,MAAI,CAAC,mBAAmB;AAGtB,WAAO;AAAA,EACT;AAQA,QAAM,UAAU;AAChB,QAAM,OACJ,UACA,eAAe,IAAI,CAAC,QAAQ,aAAa,GAAG,IAAI,OAAO,EAAE,KAAK,EAAE;AAElE,QAAM,gBAAgB,eAAe,KAAK,EAAE;AAC5C,MAAI,KAAK,KAAK,aAAa,GAAG;AAI5B,UAAM,SAAS;AACf,UAAM,SAAS;AACf,WAAO,IAAI,OAAO,SAAS,OAAO,QAAQ,GAAG;AAAA,EAC/C;AA6BA,QAAM,aAAa;AAInB,QAAM,cAAc;AACpB,SAAO,IAAI,OAAO,aAAa,OAAO,aAAa,GAAG;AACxD;AAkBO,SAAS,uBAAuB,MAAc,UAA2B;AAC9E,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAG1D,MAAI,YAAY,IAAI,EAAG,QAAO;AAY9B,MAAI,aAAa,wBAAyB,QAAO;AAGjD,MAAI,CAAC,kBAAkB,KAAK,QAAQ,GAAG;AAErC,sBAAkB,YAAY;AAC9B,WAAO,KAAK,SAAS,QAAQ;AAAA,EAC/B;AAEA,oBAAkB,YAAY;AAE9B,QAAM,UAAU,gBAAgB,QAAQ;AACxC,MAAI,CAAC,SAAS;AAGZ,WAAO;AAAA,EACT;AACA,SAAO,QAAQ,KAAK,IAAI;AAC1B;AAWO,SAAS,8BACd,MACA,WAAmB,yBACJ;AACf,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAC1D,MAAI;AACJ,MAAI,aAAa,yBAAyB;AACxC,cAAU,uBAAuB;AAAA,EACnC,WAAW,CAAC,kBAAkB,KAAK,QAAQ,GAAG;AAG5C,sBAAkB,YAAY;AAC9B,WAAO,KAAK,SAAS,QAAQ,IAAI,WAAW;AAAA,EAC9C,OAAO;AACL,sBAAkB,YAAY;AAC9B,cAAU,gBAAgB,QAAQ;AAAA,EACpC;AACA,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,SAAS,IAAI;AAAA,IACjB,QAAQ;AAAA,IACR,QAAQ,MAAM,SAAS,GAAG,IAAI,QAAQ,QAAQ,QAAQ,QAAQ;AAAA,EAChE;AACA,MAAI,OAAsB;AAC1B,WAAS,QAAQ,OAAO,KAAK,IAAI,GAAG,UAAU,MAAM,QAAQ,OAAO,KAAK,IAAI,GAAG;AAC7E,WAAO,MAAM,CAAC;AACd,QAAI,MAAM,CAAC,EAAE,WAAW,EAAG,QAAO;AAAA,EACpC;AACA,SAAO;AACT;AAWO,SAAS,eACd,MACA,KACA,WAAmB,yBACX;AACR,MAAI,OAAO,SAAS,SAAU,QAAO;AACrC,MAAI,uBAAuB,MAAM,QAAQ,EAAG,QAAO;AACnD,QAAM,aAAa,uBAAuB,IAAI;AAC9C,MAAI,WAAW,WAAW,EAAG,QAAO;AACpC,QAAM,WAAW,eAAe,KAAK,QAAQ;AAE7C,QAAM,WAAW,KAAK,MAAM,WAAW,MAAM;AAC7C,SAAO,GAAG,UAAU,IAAI,QAAQ,GAAG,QAAQ;AAC7C;AAOO,SAAS,cAAc,MAAqC;AACjE,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAC1D,QAAM,UAAU,uBAAuB;AACvC,QAAM,QAAQ,QAAQ,KAAK,IAAI;AAC/B,MAAI,CAAC,MAAO,QAAO;AAEnB,QAAM,OAAO,MAAM,CAAC,KAAK;AACzB,QAAM,MAAM,MAAM,CAAC,KAAK;AACxB,QAAM,SAAyB,EAAE,IAAI;AAErC,QAAM,SAAS,KACZ,MAAM,GAAG,EACT,IAAI,CAAC,YAAY,QAAQ,KAAK,CAAC,EAC/B,OAAO,CAAC,YAAY,QAAQ,SAAS,CAAC;AAEzC,aAAW,SAAS,QAAQ;AAC1B,UAAM,QAAQ,MAAM,QAAQ,GAAG;AAC/B,QAAI,SAAS,EAAG;AAChB,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,EAAE,KAAK,EAAE,YAAY;AACrD,UAAM,QAAQ,MAAM,MAAM,QAAQ,CAAC,EAAE,KAAK;AAC1C,QAAI,MAAM,WAAW,EAAG;AACxB,YAAQ,KAAK;AAAA,MACX,KAAK;AACH,eAAO,QAAQ;AACf;AAAA,MACF,KAAK;AAAA,MACL,KAAK;AACH,eAAO,UAAU;AACjB;AAAA,MACF,KAAK;AAAA,MACL,KAAK;AACH,eAAO,KAAK;AACZ;AAAA,MACF;AAEE;AAAA,IACJ;AAAA,EACF;AAEA,SAAO;AACT;AAMO,SAAS,kBAAkB,MAAgC;AAChE,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO,CAAC;AAC3D,QAAM,UAAU,uBAAuB;AACvC,QAAM,UAA4B,CAAC;AACnC,MAAI;AACJ,UAAQ,QAAQ,QAAQ,KAAK,IAAI,OAAO,MAAM;AAC5C,UAAM,SAAS,cAAc,MAAM,CAAC,CAAC;AACrC,QAAI,OAAQ,SAAQ,KAAK,MAAM;AAAA,EACjC;AACA,SAAO;AACT;AAqBO,SAAS,cAAc,MAAsB;AAClD,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAG1D,MAAI,CAAC,YAAY,IAAI,EAAG,QAAO;AAI/B,QAAM,UAAU,uBAAuB;AACvC,MAAI,SAAS;AACb,MAAI,YAAY;AAEhB,MAAI;AACJ,UAAQ,QAAQ,QAAQ,KAAK,IAAI,OAAO,MAAM;AAE5C,UAAM,SAAS,KAAK,MAAM,WAAW,MAAM,KAAK,EAAE,QAAQ,WAAW,EAAE;AACvE,cAAU;AACV,gBAAY,MAAM,QAAQ,MAAM,CAAC,EAAE;AAAA,EACrC;AAIA,QAAM,QAAQ,KAAK,MAAM,SAAS,EAAE,QAAQ,WAAW,EAAE;AACzD,MAAI,MAAM,SAAS,GAAG;AACpB,QAAI,OAAO,SAAS,EAAG,WAAU;AACjC,cAAU;AAAA,EACZ;AAEA,SAAO,OAAO,QAAQ;AACxB;AA6BO,SAAS,yBACd,MACA,UACQ;AACR,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAK1D,QAAM,eAAe,YAAY,IAAI,IAAI,cAAc,IAAI,IAAI;AAE/D,MAAI,CAAC,uBAAuB,cAAc,QAAQ,EAAG,QAAO;AAK5D,QAAM,UAAU,gBAAgB,QAAQ;AACxC,MAAI,CAAC,QAAS,QAAO;AAGrB,QAAM,gBAAgB,IAAI;AAAA,IACxB,QAAQ;AAAA,IACR,QAAQ,MAAM,SAAS,GAAG,IAAI,QAAQ,QAAQ,QAAQ,QAAQ;AAAA,EAChE;AACA,MAAI,SAAS;AACb,MAAI,YAAY;AAChB,MAAI;AAEJ,UAAQ,QAAQ,cAAc,KAAK,YAAY,OAAO,MAAM;AAC1D,UAAM,WAAW,MAAM,QAAQ,MAAM,CAAC,EAAE;AACxC,UAAM,YAAY,wBAAwB,cAAc,MAAM,OAAO,QAAQ;AAC7E,UAAM,eAAe,WAAW,SAAS,MAAM;AAC/C,UAAM,aAAa,WAAW,OAAO;AACrC,UAAM,SAAS,aAAa,MAAM,WAAW,YAAY,EAAE,QAAQ,WAAW,EAAE;AAChF,cAAU;AACV,gBAAY;AAEZ,QAAI,MAAM,CAAC,EAAE,WAAW,GAAG;AACzB,oBAAc;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,QAAQ,aAAa,MAAM,SAAS,EAAE,QAAQ,WAAW,EAAE;AACjE,MAAI,MAAM,SAAS,GAAG;AACpB,QAAI,OAAO,SAAS,EAAG,WAAU;AACjC,cAAU;AAAA,EACZ;AAEA,SAAO,OAAO,QAAQ;AACxB;AAEA,SAAS,wBACP,MACA,OACA,KAC4C;AAC5C,MAAI,SAAS,KAAK,OAAO,KAAK,OAAQ,QAAO;AAC7C,QAAM,SAAS,KAAK,QAAQ,CAAC;AAC7B,QAAM,SAAS,KAAK,GAAG;AACvB,MACG,WAAW,OAAO,WAAW,OAC7B,WAAW,OAAO,WAAW,OAC7B,WAAW,OAAO,WAAW,KAC9B;AACA,WAAO,EAAE,OAAO,QAAQ,GAAG,KAAK,MAAM,EAAE;AAAA,EAC1C;AACA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/source-attribution.ts"],"sourcesContent":["/**\n * Inline Source Attribution Protocol (issue #369)\n *\n * Extracted facts carry provenance inline inside the fact body, so the\n * citation survives hostile memory text, copy/paste, and LLM quoting. This\n * complements — never replaces — the YAML frontmatter provenance stored on\n * disk.\n *\n * Default format (matches issue #369 proposal):\n *\n *   The foo service uses Redis for rate limiting. [Source: agent=planner, session=abc123, ts=2026-04-10T14:25:07Z]\n *\n * Key properties:\n *   - Inline (part of the body, not metadata).\n *   - Compact (typically <80 chars of overhead per fact).\n *   - Machine-parseable by a single regex.\n *   - Opt-in via `inlineSourceAttributionEnabled` config flag (default off\n *     for backwards compatibility with existing downstream consumers).\n *   - Legacy facts without a citation remain fully readable.\n *\n * The format template is configurable via `inlineSourceAttributionFormat`\n * with supported placeholders:\n *\n *   {agent}     — principal / agent identifier\n *   {session}   — full session key (colon-delimited)\n *   {sessionId} — short stable session id (trailing component)\n *   {ts}        — extraction timestamp (ISO 8601)\n *   {date}      — extraction date (YYYY-MM-DD)\n *\n * Any privacy-sensitive identifiers should be normalized before being passed\n * to `formatCitation` — the helper treats them as opaque strings.\n */\n\n/** Default citation format template (matches issue #369). */\nexport const DEFAULT_CITATION_FORMAT =\n  \"[Source: agent={agent}, session={sessionId}, ts={ts}]\";\n\n/** Sentinel value used when a provenance field is missing. */\nexport const CITATION_UNKNOWN = \"unknown\";\n\nexport interface CitationContext {\n  /** Principal / agent identifier (e.g. resolved via resolvePrincipal). */\n  agent?: string;\n  /** Full session key (e.g. \"agent:planner:main\"). */\n  session?: string;\n  /**\n   * Opaque short session id. Derived from the trailing component of the\n   * session key when not provided explicitly. Use this for compact formats\n   * that do not need the full colon-delimited session key.\n   */\n  sessionId?: string;\n  /** Extraction timestamp as an ISO 8601 string. */\n  ts?: string;\n}\n\nexport interface ParsedCitation {\n  /** Agent identifier parsed from the citation (never crashes on malformed input). */\n  agent?: string;\n  /** Session identifier parsed from the citation. */\n  session?: string;\n  /** Extraction timestamp parsed from the citation. */\n  ts?: string;\n  /** The full matched citation substring. */\n  raw: string;\n}\n\n/**\n * Regex that matches the default `[Source: agent=X, session=Y, ts=Z]` shape\n * as well as human-edited variants (extra whitespace, reordered fields,\n * subset of fields). Matches non-greedily so it can be anchored anywhere in\n * the text. Kept as a getter factory so callers do not share regex state.\n */\nfunction defaultCitationMatcher(): RegExp {\n  // Bounded repetition {1,1024} instead of + so the match cannot backtrack\n  // polynomially over hostile memory text (CodeQL js/polynomial-redos). A real\n  // citation is far shorter than 1024 chars, so this is behavior-preserving for\n  // any genuine [Source: …] block; only pathological/oversized input is excluded.\n  return /\\[Source:([^\\]\\n]{1,1024})\\]/gi;\n}\n\n// Linear trailing-whitespace trim. Replaces text.replace(/\\s+$/u, \"\"), whose\n// anchored quantifier backtracks polynomially on long inputs (CodeQL\n// js/polynomial-redos). Matches the exact \\s (with u flag) semantics one char\n// at a time, so the trailing-content preservation logic in attachCitation is\n// unaffected.\nfunction trimTrailingWhitespace(text: string): string {\n  let end = text.length;\n  while (end > 0 && /\\s/u.test(text[end - 1]!)) end--;\n  return text.slice(0, end);\n}\n\n/**\n * Derive a short session id from a full session key.\n * Falls back to the raw session string if no colon is present.\n */\nexport function deriveSessionId(session: string | undefined): string | undefined {\n  if (!session) return undefined;\n  const trimmed = session.trim();\n  if (trimmed.length === 0) return undefined;\n  const parts = trimmed.split(\":\").filter((p) => p.length > 0);\n  if (parts.length === 0) return trimmed;\n  return parts[parts.length - 1];\n}\n\n/**\n * Format an inline citation tag using the provided template.\n *\n * Missing context fields fall back to {@link CITATION_UNKNOWN} — the caller\n * should always get a non-empty, parseable tag.\n *\n * Uses a single-pass substitution so that values which themselves contain\n * placeholder syntax (e.g. an agent literally named `\"{ts}\"`) cannot be\n * re-interpreted by subsequent replacement steps. Each placeholder slot\n * receives exactly one lookup and the substituted value is treated as\n * terminal text, not template source.\n */\nexport function formatCitation(\n  ctx: CitationContext,\n  template: string = DEFAULT_CITATION_FORMAT,\n): string {\n  const session = ctx.session ?? \"\";\n  const sessionId = ctx.sessionId ?? deriveSessionId(session) ?? CITATION_UNKNOWN;\n  const ts = ctx.ts ?? CITATION_UNKNOWN;\n  const agent = ctx.agent && ctx.agent.trim().length > 0 ? ctx.agent : CITATION_UNKNOWN;\n  const date = ts && ts !== CITATION_UNKNOWN ? ts.slice(0, 10) : CITATION_UNKNOWN;\n  const sessionForTemplate = session.trim().length > 0 ? session : CITATION_UNKNOWN;\n\n  // Map from recognised placeholder names to their resolved value. Unknown\n  // placeholder names are left intact (returning the original `{name}`).\n  const values: Record<string, string> = {\n    agent,\n    session: sessionForTemplate,\n    sessionId,\n    ts,\n    date,\n  };\n\n  // Single-pass scan: replace every recognised `{name}` in one sweep so that\n  // substituted values cannot themselves be treated as template source on a\n  // subsequent pass. The replacer-function form also guarantees that `$` /\n  // `$&` / `$1` sequences inside values are emitted literally.\n  return template.replace(/\\{([a-zA-Z_][\\w]*)\\}/g, (match, name: string) => {\n    return Object.prototype.hasOwnProperty.call(values, name)\n      ? values[name]!\n      : match;\n  });\n}\n\n/**\n * Returns true if the text already carries at least one citation marker.\n * Safe to call on any string — never throws.\n */\nexport function hasCitation(text: string): boolean {\n  if (typeof text !== \"string\" || text.length === 0) return false;\n  return defaultCitationMatcher().test(text);\n}\n\n/**\n * Escape a string for use as a regex literal.\n */\nfunction escapeRegExp(s: string): string {\n  return s.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\");\n}\n\n/**\n * Escape a single character for use INSIDE a character class `[...]`.\n * Special chars inside character classes: `]`, `\\`, `^`, `-`.\n */\nfunction escapeRegExpCharClass(ch: string): string {\n  if (ch === \"]\") return \"\\\\]\";\n  if (ch === \"\\\\\") return \"\\\\\\\\\";\n  if (ch === \"^\") return \"\\\\^\";\n  if (ch === \"-\") return \"\\\\-\";\n  // Other regex meta chars are NOT special inside [...] but escaping them is safe.\n  return escapeRegExp(ch);\n}\n\n/**\n * Build a per-placeholder token pattern that excludes newlines, whitespace,\n * and any punctuation characters used as inner separators in the template.\n *\n * This prevents a placeholder span from consuming separator bytes and\n * matching strings that cross separator boundaries in user-supplied content.\n *\n * @param nonWordSepChars - Set of non-word (non-alphanumeric, non-`_`) chars\n *   extracted from the inner separator literals of the template.\n */\nfunction buildTokenPattern(nonWordSepChars: Set<string>): string {\n  // Always exclude newlines and whitespace.\n  const base = \"\\\\n\\\\s\";\n  if (nonWordSepChars.size === 0) {\n    // No inner separator punctuation — the placeholder spans the full space\n    // between prefix and suffix. Fall back to a generous no-newline match.\n    return `[^\\\\n]+?`;\n  }\n  const escaped = [...nonWordSepChars].map(escapeRegExpCharClass).join(\"\");\n  return `[^${base}${escaped}]+?`;\n}\n\n/** Regex that matches a `{placeholder}` token inside a template string. */\nconst PLACEHOLDER_REGEX = /\\{[a-zA-Z_][\\w]*\\}/g;\n\n/**\n * Build a regex that matches a citation produced by the given template.\n *\n * The approach depends on the shape of the template:\n *\n *  - **Normal case (non-empty literal prefix or suffix).** Anchor the match\n *    on the outer literal frame and reconstruct the interior as\n *    `interToken + sep + interToken + sep + ... + sep + lastToken`.\n *    All **intermediate** per-placeholder tokens exclude the combined set of\n *    non-word separator characters used between any two adjacent placeholders,\n *    preventing a value from consuming a separator and crossing placeholder\n *    boundaries.  The **last** token is only required to avoid newlines because\n *    it is terminated by the literal suffix anchor — this lets placeholder\n *    values that legitimately contain a separator character be recognised (e.g.\n *    an ISO-8601 timestamp `2026-04-10T14:25:07Z` in `[src:{agent}:{ts}]`\n *    where `:` is the inter-placeholder separator).  A template like\n *    `[src:{agent}/{sessionId}@{date}]` emits\n *    `\\[src:[^\\n\\s/@]+?\\/[^\\n\\s/@]+?@[^\\n]+?\\]` so that `[src:foo/bar]`\n *    is NOT matched (wrong separator count), `[src:foo/bar/extra@2026]`\n *    is NOT matched (intermediate token crosses a `/` boundary), and\n *    `[src:planner/main@2026-04-10]` IS matched correctly.\n *\n *  - **Placeholder-bounded with whitespace separator.** Both prefix and\n *    suffix are empty and the separator literal(s) between placeholders\n *    contain at least one whitespace character (e.g. `{source}: {content}`,\n *    `{agent} {sessionId}`). A whitespace-containing separator produces\n *    output that is visually indistinguishable from ordinary prose, so the\n *    safe strategy is to require a **hard bracket/paren/angle delimiter** on\n *    both sides of the reconstructed match. Prose almost never places\n *    `[...]` / `(...)` / `<...>` around a phrase, so this yields clean\n *    false-positive rejection.\n *\n *  - **Placeholder-bounded with compact (non-whitespace) separator.** Both\n *    prefix and suffix are empty and the separator literal(s) contain NO\n *    whitespace (e.g. `{agent}:{sessionId}`, `{agent}/{sessionId}`).\n *    `formatCitation` emits a compact token like `planner:main` with no\n *    surrounding delimiters, so the bracket strategy cannot detect it.\n *    Instead, the pattern requires that the entire token is bordered by\n *    whitespace or a bracket/paren/angle on each side:\n *\n *      `(?:(?<=[\\[\\(\\<])|(?<!\\S))[\\w.-]+<sep>[\\w.-]+(?:(?=[\\]\\)\\>])|(?!\\S))`\n *\n *    This accepts `planner:main` when it appears standalone or inside a\n *    bracket-wrapped token, and rejects `host:80` embedded inside a URL like\n *    `http://host:80` because `host` is immediately preceded by `/`\n *    (non-whitespace, non-bracket).\n *\n *  - **All-placeholder case (no literals between placeholders either).** No\n *    reliable regex can be built — a template like `{agent}{sessionId}`\n *    contains no anchor characters. Returns `null`; {@link\n *    hasCitationForTemplate} treats this as \"cannot detect\" and returns\n *    false, falling back on explicit sentinel/format detection only for the\n *    default `[Source: ...]` shape.\n *\n * Returns `null` when the template has no placeholders (fully-literal\n * citation, handled by the string-equality fast path in {@link\n * hasCitationForTemplate}) **or** when the template is entirely placeholder-\n * only with no literal content whatsoever.\n */\nfunction templateMatcher(template: string): RegExp | null {\n  // Split around all {placeholder} tokens.\n  const parts = template.split(PLACEHOLDER_REGEX);\n  if (parts.length <= 1) return null;\n\n  const prefix = parts[0] ?? \"\";\n  const suffix = parts[parts.length - 1] ?? \"\";\n\n  // Normal case: at least one literal frame on the outside.\n  // Tighten the per-placeholder token so it cannot consume separator\n  // characters and match strings that cross separator boundaries\n  // (Finding 3 — Uru3).\n  if (prefix.length > 0 || suffix.length > 0) {\n    const escapedPrefix = escapeRegExp(prefix);\n    const escapedSuffix = escapeRegExp(suffix);\n\n    // Inner parts: literal separators that sit between adjacent placeholders.\n    // For `[src:{agent}/{sessionId}@{date}]`, parts = [\"[src:\", \"/\", \"@\", \"]\"]\n    // so innerParts = [\"/\", \"@\"].\n    const innerParts = parts.slice(1, -1);\n\n    // Collect only the non-word (punctuation/symbol) characters from each\n    // inner separator so alphabetic separator text (unlikely but valid) does\n    // not exclude letters from the per-placeholder token pattern.\n    const nonWordSepChars = new Set<string>();\n    for (const sep of innerParts) {\n      for (const ch of sep) {\n        if (!/\\w/.test(ch)) {\n          nonWordSepChars.add(ch);\n        }\n      }\n    }\n\n    // All intermediate tokens (every placeholder except the last) use the\n    // combined exclusion so they cannot cross placeholder boundaries.\n    //\n    // The LAST token is different: it is terminated by the literal suffix anchor\n    // (e.g. `\\]`), so it does not need to exclude inner-separator characters.\n    // Dropping that restriction lets placeholder values that legitimately contain\n    // a separator character (e.g. an ISO-8601 timestamp `2026-04-10T14:25:07Z`\n    // in template `[src:{agent}:{ts}]`) be recognised correctly instead of\n    // producing false-negative misses that trigger duplicate citation injection.\n    //\n    // Only the LAST token is relaxed.  Intermediate tokens keep the combined\n    // exclusion so that cross-boundary false positives are still rejected\n    // (e.g. `[src:foo/bar/extra@2026-04-11]` for `[src:{a}/{b}@{c}]`).\n    const interToken = buildTokenPattern(nonWordSepChars);\n    // Last token: terminated by suffix anchor — exclude only newlines.\n    const lastToken = buildTokenPattern(new Set<string>());\n\n    // Reconstruct the interior: interToken sep interToken sep ... sep lastToken\n    // (or just lastToken when there are no inner separators at all).\n    const middle =\n      innerParts.length === 0\n        ? lastToken\n        : interToken +\n          innerParts\n            .slice(0, -1)\n            .map((sep) => escapeRegExp(sep) + interToken)\n            .join(\"\") +\n          escapeRegExp(innerParts[innerParts.length - 1]!) +\n          lastToken;\n\n    const pattern = escapedPrefix + middle + escapedSuffix;\n    return new RegExp(pattern, \"i\");\n  }\n\n  // Placeholder-bounded case: prefix and suffix are both empty.\n  const middleLiterals = parts.slice(1, -1);\n  const hasNonEmptyMiddle = middleLiterals.some((p) => p.length > 0);\n  if (!hasNonEmptyMiddle) {\n    // All-placeholder template with no literal content. Impossible to anchor\n    // reliably without sentinel markers; signal the caller.\n    return null;\n  }\n\n  // Identifier token: one or more word chars, dots, dashes, or colons.\n  // Colons are included to allow timestamp values like \"10:30\" or session\n  // keys like \"agent:planner:main\" inside compact placeholder-bounded\n  // templates.  URL-like fragments (`http://host:80`) are still rejected\n  // because the lead anchor requires whitespace or a bracket immediately\n  // before the first id-token group (`http` is preceded by `/`).\n  const idToken = \"[\\\\w.:-]+\";\n  const body =\n    idToken +\n    middleLiterals.map((lit) => escapeRegExp(lit) + idToken).join(\"\");\n\n  const separatorText = middleLiterals.join(\"\");\n  if (/\\s/.test(separatorText)) {\n    // Separator contains whitespace: the emitted citation looks like ordinary\n    // prose (e.g. `planner main`). Require a hard bracket/paren/angle\n    // delimiter on both sides to prevent false matches on English text.\n    const opener = \"[\\\\[\\\\(\\\\<]\";\n    const closer = \"[\\\\]\\\\)\\\\>]\";\n    return new RegExp(opener + body + closer, \"i\");\n  }\n\n  // Separator is compact (no whitespace): `formatCitation` emits a token like\n  // `planner:main` without surrounding delimiters. The challenge is that the\n  // same token shape also matches ordinary hyphenated or slashed prose words\n  // (e.g. `long-term`, `docs/setup`), causing `hasCitationForTemplate` to\n  // return true on uncited fact bodies and silently suppress citation injection\n  // from `attachCitation`.\n  //\n  // Fix (Finding 1): tighten the trail anchor so a bare compact token is only\n  // accepted when it sits at the very end of the string (possibly followed by\n  // optional trailing whitespace or a newline). Since `attachCitation` always\n  // appends the citation at the trimmed end of the fact body, a real citation\n  // token will always appear at the tail. Prose like `\"long-term solution\"`\n  // has `long-term` in the middle of the string (followed by ` solution`), so\n  // the end-of-string anchor rejects it — no false positive, no silent drop.\n  //\n  // The lead anchor still accepts either a bracket opener or a whitespace\n  // boundary (or start of string), so `\"Fact. planner:main\"` and standalone\n  // `\"planner:main\"` are both detected after the first attachment pass.\n  //\n  // Bracket-wrapped form (e.g. `[planner:main]`) is also accepted via the\n  // opener/closer pair — bracket still takes precedence over end-of-string.\n  //\n  // Example — why `http://host:80` does NOT match:\n  //   Trying to match `host:80`: the char before `h` is `/` (non-whitespace,\n  //   non-bracket), so `(?<=[\\[\\(\\<])` and `(?<!\\S)` both fail ⟹ no match.\n  //   Trying to match `http:...`: after `http:` the next chars are `//` which\n  //   are not `[\\w.-]+`, so the second id-token group fails ⟹ no match.\n  const leadAnchor = \"(?:(?<=[\\\\[\\\\(\\\\<])|(?<!\\\\S))\";\n  // Trail: either a bracket closer (for `[token]` shape) or end-of-string\n  // optionally preceded by whitespace. The `(?!\\S)` is deliberately removed\n  // so that a compact token in the MIDDLE of a sentence does not match.\n  const trailAnchor = \"(?:(?=[\\\\]\\\\)\\\\>])|(?=\\\\s*$))\";\n  return new RegExp(leadAnchor + body + trailAnchor, \"i\");\n}\n\n/**\n * Returns true if `text` already carries a citation produced by `template`\n * **or** by the default `[Source: ...]` format (for facts that were tagged\n * before a config change).\n *\n * Use this instead of {@link hasCitation} whenever the caller has access to\n * the configured `inlineSourceAttributionFormat`.\n *\n * All-placeholder templates such as `{agent}{sessionId}` have no literal\n * content to anchor on and therefore cannot be reliably detected without\n * dedicated sentinel markers. In that case the function returns `false` —\n * callers that need idempotent dedup for such templates should either adopt\n * a template with literal delimiters (recommended) or rely on the default\n * `[Source: ...]` marker detection which is always available via\n * {@link hasCitation}.\n */\nexport function hasCitationForTemplate(text: string, template: string): boolean {\n  if (typeof text !== \"string\" || text.length === 0) return false;\n  // Always accept the default format as a fallback so facts tagged before a\n  // configuration change are not double-tagged on reprocessing.\n  if (hasCitation(text)) return true;\n  // If the configured template matches the default, we're done.\n  //\n  // Known limitation (Thread 2 — Codex P2): this fast path exits without\n  // checking whether the content carries a citation from a DIFFERENT custom\n  // template that was active before the config was changed back to the default.\n  // Such a fact would be detected by `hasCitation` above only if the prior\n  // custom template happened to match the default `[Source: ...]` pattern.\n  // In practice, template changes mid-stream are rare, and the false-negative\n  // (missing an old custom citation) produces a benign duplicate citation rather\n  // than data loss. A full fix would require storing the citation template used\n  // at write time in the frontmatter and checking that here.\n  if (template === DEFAULT_CITATION_FORMAT) return false;\n\n  // Fully-literal template (no placeholders): exact inclusion check.\n  if (!PLACEHOLDER_REGEX.test(template)) {\n    // Reset lastIndex because PLACEHOLDER_REGEX is declared with /g.\n    PLACEHOLDER_REGEX.lastIndex = 0;\n    return text.includes(template);\n  }\n  // Reset lastIndex after the .test() probe above.\n  PLACEHOLDER_REGEX.lastIndex = 0;\n\n  const matcher = templateMatcher(template);\n  if (!matcher) {\n    // All-placeholder template: cannot build a reliable matcher. See the\n    // docstring — callers should not rely on dedup for this shape.\n    return false;\n  }\n  return matcher.test(text);\n}\n\n/**\n * Return the LAST citation marker in `text` for the given template (or the\n * default `[Source: ...]` shape). `attachCitation` always appends at the\n * trimmed end, so the last occurrence is the most recently attached marker —\n * callers use this to lift a just-attached citation off a cited body and\n * re-attach it to a derived body (the merged-target commit path). Returns\n * null when the text carries no marker of this template (including\n * all-placeholder templates that cannot be matched reliably).\n */\nexport function lastCitationMarkerForTemplate(\n  text: string,\n  template: string = DEFAULT_CITATION_FORMAT,\n): string | null {\n  if (typeof text !== \"string\" || text.length === 0) return null;\n  let matcher: RegExp | null;\n  if (template === DEFAULT_CITATION_FORMAT) {\n    matcher = defaultCitationMatcher();\n  } else if (!PLACEHOLDER_REGEX.test(template)) {\n    // Fully-literal template: presence is exact inclusion (no placeholders\n    // to widen the match).\n    PLACEHOLDER_REGEX.lastIndex = 0;\n    return text.includes(template) ? template : null;\n  } else {\n    PLACEHOLDER_REGEX.lastIndex = 0;\n    matcher = templateMatcher(template);\n  }\n  if (!matcher) return null;\n  const global = new RegExp(\n    matcher.source,\n    matcher.flags.includes(\"g\") ? matcher.flags : matcher.flags + \"g\",\n  );\n  let last: string | null = null;\n  for (let match = global.exec(text); match !== null; match = global.exec(text)) {\n    last = match[0];\n    if (match[0].length === 0) global.lastIndex++;\n  }\n  return last;\n}\n\n/**\n * True when a template can be matched and stripped later. All-placeholder\n * templates such as `{agent}{sessionId}` have no literal anchors.\n */\nexport function citationTemplateIsDetectable(template: string): boolean {\n  if (typeof template !== \"string\" || template.length === 0) return false;\n  if (template === DEFAULT_CITATION_FORMAT) return true;\n  PLACEHOLDER_REGEX.lastIndex = 0;\n  if (!PLACEHOLDER_REGEX.test(template)) {\n    PLACEHOLDER_REGEX.lastIndex = 0;\n    return true;\n  }\n  PLACEHOLDER_REGEX.lastIndex = 0;\n  return templateMatcher(template) !== null;\n}\n\n/**\n * Templates the merge path may lift, preserve, or strip: the default\n * format, the current format when it is detectable, then any prior\n * configured formats the caller still holds. Undetectable shapes are\n * dropped so we never hash or attach a marker we cannot re-match.\n */\nexport function citationTemplatesToRecognize(\n  primary: string | undefined,\n  extra: readonly string[] = [],\n): string[] {\n  const out: string[] = [];\n  const add = (template: string | undefined): void => {\n    if (typeof template !== \"string\" || template.length === 0) return;\n    if (!citationTemplateIsDetectable(template)) return;\n    if (!out.includes(template)) out.push(template);\n  };\n  add(DEFAULT_CITATION_FORMAT);\n  add(primary);\n  for (const template of extra) add(template);\n  return out;\n}\n\n/**\n * Prior formats the caller still holds, if any. Absent or malformed\n * history is ignored — fail safe, do not invent templates.\n */\nexport function citationTemplatesForMerge(config: {\n  inlineSourceAttributionFormat?: string;\n  inlineSourceAttributionFormatHistory?: unknown;\n}): string[] {\n  const raw = config.inlineSourceAttributionFormatHistory;\n  const extra = Array.isArray(raw)\n    ? raw.filter((value): value is string => typeof value === \"string\" && value.length > 0)\n    : [];\n  return citationTemplatesToRecognize(config.inlineSourceAttributionFormat, extra);\n}\n\nexport function lastRecognizedCitationMarker(\n  text: string,\n  templates: readonly string[],\n): string | null {\n  for (const template of templates) {\n    const marker = lastCitationMarkerForTemplate(text, template);\n    if (marker) return marker;\n  }\n  return null;\n}\n\nexport function stripRecognizedCitations(text: string, templates: readonly string[]): string {\n  let out = text;\n  for (const template of templates) {\n    out = stripCitationForTemplate(out, template);\n  }\n  return out;\n}\n\n/**\n * Attach an inline citation to fact text.\n *\n * If the text already has a citation — either the default `[Source: ...]`\n * marker or one produced by the configured template — it is returned unchanged.\n * Existing provenance is respected and never overwritten. Otherwise the\n * citation is appended to the trimmed text with a single space separator,\n * which keeps the marker visually adjacent to the fact body.\n */\nexport function attachCitation(\n  text: string,\n  ctx: CitationContext,\n  template: string = DEFAULT_CITATION_FORMAT,\n): string {\n  if (typeof text !== \"string\") return text as unknown as string;\n  if (hasCitationForTemplate(text, template)) return text;\n  const trimmedEnd = trimTrailingWhitespace(text);\n  if (trimmedEnd.length === 0) return text;\n  const citation = formatCitation(ctx, template);\n  // Preserve any trailing newline that callers rely on for markdown rendering.\n  const trailing = text.slice(trimmedEnd.length);\n  return `${trimmedEnd} ${citation}${trailing}`;\n}\n\n/**\n * Parse a single inline citation from a piece of text. Returns the first\n * citation encountered or `null` when none is present. Malformed citations\n * do not throw — fields that cannot be parsed simply remain `undefined`.\n */\nexport function parseCitation(text: string): ParsedCitation | null {\n  if (typeof text !== \"string\" || text.length === 0) return null;\n  const matcher = defaultCitationMatcher();\n  const match = matcher.exec(text);\n  if (!match) return null;\n\n  const body = match[1] ?? \"\";\n  const raw = match[0] ?? \"\";\n  const parsed: ParsedCitation = { raw };\n\n  const fields = body\n    .split(\",\")\n    .map((segment) => segment.trim())\n    .filter((segment) => segment.length > 0);\n\n  for (const field of fields) {\n    const eqIdx = field.indexOf(\"=\");\n    if (eqIdx <= 0) continue;\n    const key = field.slice(0, eqIdx).trim().toLowerCase();\n    const value = field.slice(eqIdx + 1).trim();\n    if (value.length === 0) continue;\n    switch (key) {\n      case \"agent\":\n        parsed.agent = value;\n        break;\n      case \"session\":\n      case \"sessionid\":\n        parsed.session = value;\n        break;\n      case \"ts\":\n      case \"timestamp\":\n        parsed.ts = value;\n        break;\n      default:\n        // Unknown fields are ignored defensively so human edits never crash.\n        break;\n    }\n  }\n\n  return parsed;\n}\n\n/**\n * Parse every citation embedded in the text. Always returns an array; empty\n * when none are present.\n */\nexport function parseAllCitations(text: string): ParsedCitation[] {\n  if (typeof text !== \"string\" || text.length === 0) return [];\n  const matcher = defaultCitationMatcher();\n  const results: ParsedCitation[] = [];\n  let match: RegExpExecArray | null;\n  while ((match = matcher.exec(text)) !== null) {\n    const parsed = parseCitation(match[0]);\n    if (parsed) results.push(parsed);\n  }\n  return results;\n}\n\n/**\n * Remove all inline citations from a piece of text.\n *\n * Callers that want the raw fact body (for dedup hashing, display, or\n * comparison) should use this helper instead of hand-rolled regexes so the\n * whole codebase agrees on the citation syntax.\n *\n * Finding 2 fix: when the input contains no citation marker, the input is\n * returned byte-for-byte unchanged. When a citation IS removed, whitespace\n * normalization is applied only at each join seam (the single space between\n * the preceding text and where the citation was), rather than across the\n * entire string. This preserves markdown hard-break spacing, aligned text,\n * and code-like snippets in fact bodies that happen to carry a citation.\n *\n * Implementation: each citation match is replaced by its \"seam fix\" — the\n * content before the match has its trailing whitespace trimmed and then a\n * single space is appended if any text remains, collapsing only the gap\n * left by the removed marker. Whitespace elsewhere in the body is untouched.\n */\nexport function stripCitation(text: string): string {\n  if (typeof text !== \"string\" || text.length === 0) return text;\n  // Early exit: no citation marker present — return the input unchanged so\n  // that callers never lose formatting fidelity on uncited strings.\n  if (!hasCitation(text)) return text;\n\n  // Walk through all citations and slice them out one by one so that we can\n  // normalise ONLY the whitespace at each seam rather than the entire string.\n  const matcher = defaultCitationMatcher();\n  let result = \"\";\n  let lastIndex = 0;\n\n  let match: RegExpExecArray | null;\n  while ((match = matcher.exec(text)) !== null) {\n    // Text before this citation. Trim trailing spaces/tabs at the seam only.\n    const before = text.slice(lastIndex, match.index).replace(/[ \\t]+$/, \"\");\n    result += before;\n    lastIndex = match.index + match[0].length;\n  }\n\n  // Append any trailing text after the last citation. Trim leading\n  // spaces/tabs and trailing whitespace at the join seam.\n  const after = text.slice(lastIndex).replace(/^[ \\t]+/, \"\");\n  if (after.length > 0) {\n    if (result.length > 0) result += \" \";\n    result += after;\n  }\n\n  return result.trimEnd();\n}\n\n/**\n * Strip an inline citation from text using a specific template regex.\n *\n * This is the template-aware counterpart to {@link stripCitation}. When the\n * caller holds the configured `inlineSourceAttributionFormat`, use this\n * function to strip citations produced by that template — including custom\n * templates that differ from the default `[Source: ...]` pattern.\n *\n * Behaviour:\n *  - If the text has a **default-format** citation, strips it first\n *    (always safe).\n *  - Then, if the result has a **custom-template** citation detected by\n *    `hasCitationForTemplate`, builds the template regex and removes every\n *    occurrence. BOTH passes run when a body carries both forms — a target\n *    written under the default format can carry the default marker plus a\n *    custom marker appended after a config change; returning after the\n *    default pass alone left the custom marker inside hash inputs (#2330).\n *  - All-placeholder templates (no literal prefix/suffix/separator) cannot\n *    produce a reliable matcher. `hasCitationForTemplate` already returns\n *    `false` for such templates, so this function never attempts to strip an\n *    undetectable citation. The text is returned unchanged when no citation\n *    is detected.\n *  - If no citation is detected for the given template, returns the text\n *    unchanged.\n *\n * @returns The stripped text (or the original text when no citation is found).\n */\nexport function stripCitationForTemplate(\n  text: string,\n  template: string,\n): string {\n  if (typeof text !== \"string\" || text.length === 0) return text;\n\n  // First pass: the default-format marker, if any. A second pass below still\n  // runs — a body can carry the default marker AND the custom template's\n  // marker, and canonicalization must remove every recognized form.\n  const afterDefault = hasCitation(text) ? stripCitation(text) : text;\n\n  if (!hasCitationForTemplate(afterDefault, template)) return afterDefault;\n\n  // Build the template matcher. hasCitationForTemplate already returned true,\n  // which means templateMatcher produced a non-null result. The null branch\n  // here is a defensive fallback only — the default pass already ran.\n  const matcher = templateMatcher(template);\n  if (!matcher) return afterDefault;\n\n  // The matcher regex was built without the global flag; add it for exec loop.\n  const globalMatcher = new RegExp(\n    matcher.source,\n    matcher.flags.includes(\"g\") ? matcher.flags : matcher.flags + \"g\",\n  );\n  let result = \"\";\n  let lastIndex = 0;\n  let match: RegExpExecArray | null;\n\n  while ((match = globalMatcher.exec(afterDefault)) !== null) {\n    const matchEnd = match.index + match[0].length;\n    const enclosure = enclosingDelimiterRange(afterDefault, match.index, matchEnd);\n    const removalStart = enclosure?.start ?? match.index;\n    const removalEnd = enclosure?.end ?? matchEnd;\n    const before = afterDefault.slice(lastIndex, removalStart).replace(/[ \\t]+$/, \"\");\n    result += before;\n    lastIndex = removalEnd;\n    // Guard against zero-width matches causing an infinite loop.\n    if (match[0].length === 0) {\n      globalMatcher.lastIndex++;\n    }\n  }\n\n  const after = afterDefault.slice(lastIndex).replace(/^[ \\t]+/, \"\");\n  if (after.length > 0) {\n    if (result.length > 0) result += \" \";\n    result += after;\n  }\n\n  return result.trimEnd();\n}\n\nfunction enclosingDelimiterRange(\n  text: string,\n  start: number,\n  end: number,\n): { start: number; end: number } | undefined {\n  if (start <= 0 || end >= text.length) return undefined;\n  const opener = text[start - 1];\n  const closer = text[end];\n  if (\n    (opener === \"[\" && closer === \"]\") ||\n    (opener === \"(\" && closer === \")\") ||\n    (opener === \"<\" && closer === \">\")\n  ) {\n    return { start: start - 1, end: end + 1 };\n  }\n  return undefined;\n}\n"],"mappings":";AAkCO,IAAM,0BACX;AAGK,IAAM,mBAAmB;AAkChC,SAAS,yBAAiC;AAKxC,SAAO;AACT;AAOA,SAAS,uBAAuB,MAAsB;AACpD,MAAI,MAAM,KAAK;AACf,SAAO,MAAM,KAAK,MAAM,KAAK,KAAK,MAAM,CAAC,CAAE,EAAG;AAC9C,SAAO,KAAK,MAAM,GAAG,GAAG;AAC1B;AAMO,SAAS,gBAAgB,SAAiD;AAC/E,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,UAAU,QAAQ,KAAK;AAC7B,MAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,QAAM,QAAQ,QAAQ,MAAM,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;AAC3D,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,SAAO,MAAM,MAAM,SAAS,CAAC;AAC/B;AAcO,SAAS,eACd,KACA,WAAmB,yBACX;AACR,QAAM,UAAU,IAAI,WAAW;AAC/B,QAAM,YAAY,IAAI,aAAa,gBAAgB,OAAO,KAAK;AAC/D,QAAM,KAAK,IAAI,MAAM;AACrB,QAAM,QAAQ,IAAI,SAAS,IAAI,MAAM,KAAK,EAAE,SAAS,IAAI,IAAI,QAAQ;AACrE,QAAM,OAAO,MAAM,OAAO,mBAAmB,GAAG,MAAM,GAAG,EAAE,IAAI;AAC/D,QAAM,qBAAqB,QAAQ,KAAK,EAAE,SAAS,IAAI,UAAU;AAIjE,QAAM,SAAiC;AAAA,IACrC;AAAA,IACA,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAMA,SAAO,SAAS,QAAQ,yBAAyB,CAAC,OAAO,SAAiB;AACxE,WAAO,OAAO,UAAU,eAAe,KAAK,QAAQ,IAAI,IACpD,OAAO,IAAI,IACX;AAAA,EACN,CAAC;AACH;AAMO,SAAS,YAAY,MAAuB;AACjD,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAC1D,SAAO,uBAAuB,EAAE,KAAK,IAAI;AAC3C;AAKA,SAAS,aAAa,GAAmB;AACvC,SAAO,EAAE,QAAQ,uBAAuB,MAAM;AAChD;AAMA,SAAS,sBAAsB,IAAoB;AACjD,MAAI,OAAO,IAAK,QAAO;AACvB,MAAI,OAAO,KAAM,QAAO;AACxB,MAAI,OAAO,IAAK,QAAO;AACvB,MAAI,OAAO,IAAK,QAAO;AAEvB,SAAO,aAAa,EAAE;AACxB;AAYA,SAAS,kBAAkB,iBAAsC;AAE/D,QAAM,OAAO;AACb,MAAI,gBAAgB,SAAS,GAAG;AAG9B,WAAO;AAAA,EACT;AACA,QAAM,UAAU,CAAC,GAAG,eAAe,EAAE,IAAI,qBAAqB,EAAE,KAAK,EAAE;AACvE,SAAO,KAAK,IAAI,GAAG,OAAO;AAC5B;AAGA,IAAM,oBAAoB;AA6D1B,SAAS,gBAAgB,UAAiC;AAExD,QAAM,QAAQ,SAAS,MAAM,iBAAiB;AAC9C,MAAI,MAAM,UAAU,EAAG,QAAO;AAE9B,QAAM,SAAS,MAAM,CAAC,KAAK;AAC3B,QAAM,SAAS,MAAM,MAAM,SAAS,CAAC,KAAK;AAM1C,MAAI,OAAO,SAAS,KAAK,OAAO,SAAS,GAAG;AAC1C,UAAM,gBAAgB,aAAa,MAAM;AACzC,UAAM,gBAAgB,aAAa,MAAM;AAKzC,UAAM,aAAa,MAAM,MAAM,GAAG,EAAE;AAKpC,UAAM,kBAAkB,oBAAI,IAAY;AACxC,eAAW,OAAO,YAAY;AAC5B,iBAAW,MAAM,KAAK;AACpB,YAAI,CAAC,KAAK,KAAK,EAAE,GAAG;AAClB,0BAAgB,IAAI,EAAE;AAAA,QACxB;AAAA,MACF;AAAA,IACF;AAeA,UAAM,aAAa,kBAAkB,eAAe;AAEpD,UAAM,YAAY,kBAAkB,oBAAI,IAAY,CAAC;AAIrD,UAAM,SACJ,WAAW,WAAW,IAClB,YACA,aACA,WACG,MAAM,GAAG,EAAE,EACX,IAAI,CAAC,QAAQ,aAAa,GAAG,IAAI,UAAU,EAC3C,KAAK,EAAE,IACV,aAAa,WAAW,WAAW,SAAS,CAAC,CAAE,IAC/C;AAEN,UAAM,UAAU,gBAAgB,SAAS;AACzC,WAAO,IAAI,OAAO,SAAS,GAAG;AAAA,EAChC;AAGA,QAAM,iBAAiB,MAAM,MAAM,GAAG,EAAE;AACxC,QAAM,oBAAoB,eAAe,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC;AACjE,MAAI,CAAC,mBAAmB;AAGtB,WAAO;AAAA,EACT;AAQA,QAAM,UAAU;AAChB,QAAM,OACJ,UACA,eAAe,IAAI,CAAC,QAAQ,aAAa,GAAG,IAAI,OAAO,EAAE,KAAK,EAAE;AAElE,QAAM,gBAAgB,eAAe,KAAK,EAAE;AAC5C,MAAI,KAAK,KAAK,aAAa,GAAG;AAI5B,UAAM,SAAS;AACf,UAAM,SAAS;AACf,WAAO,IAAI,OAAO,SAAS,OAAO,QAAQ,GAAG;AAAA,EAC/C;AA6BA,QAAM,aAAa;AAInB,QAAM,cAAc;AACpB,SAAO,IAAI,OAAO,aAAa,OAAO,aAAa,GAAG;AACxD;AAkBO,SAAS,uBAAuB,MAAc,UAA2B;AAC9E,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAG1D,MAAI,YAAY,IAAI,EAAG,QAAO;AAY9B,MAAI,aAAa,wBAAyB,QAAO;AAGjD,MAAI,CAAC,kBAAkB,KAAK,QAAQ,GAAG;AAErC,sBAAkB,YAAY;AAC9B,WAAO,KAAK,SAAS,QAAQ;AAAA,EAC/B;AAEA,oBAAkB,YAAY;AAE9B,QAAM,UAAU,gBAAgB,QAAQ;AACxC,MAAI,CAAC,SAAS;AAGZ,WAAO;AAAA,EACT;AACA,SAAO,QAAQ,KAAK,IAAI;AAC1B;AAWO,SAAS,8BACd,MACA,WAAmB,yBACJ;AACf,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAC1D,MAAI;AACJ,MAAI,aAAa,yBAAyB;AACxC,cAAU,uBAAuB;AAAA,EACnC,WAAW,CAAC,kBAAkB,KAAK,QAAQ,GAAG;AAG5C,sBAAkB,YAAY;AAC9B,WAAO,KAAK,SAAS,QAAQ,IAAI,WAAW;AAAA,EAC9C,OAAO;AACL,sBAAkB,YAAY;AAC9B,cAAU,gBAAgB,QAAQ;AAAA,EACpC;AACA,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,SAAS,IAAI;AAAA,IACjB,QAAQ;AAAA,IACR,QAAQ,MAAM,SAAS,GAAG,IAAI,QAAQ,QAAQ,QAAQ,QAAQ;AAAA,EAChE;AACA,MAAI,OAAsB;AAC1B,WAAS,QAAQ,OAAO,KAAK,IAAI,GAAG,UAAU,MAAM,QAAQ,OAAO,KAAK,IAAI,GAAG;AAC7E,WAAO,MAAM,CAAC;AACd,QAAI,MAAM,CAAC,EAAE,WAAW,EAAG,QAAO;AAAA,EACpC;AACA,SAAO;AACT;AAMO,SAAS,6BAA6B,UAA2B;AACtE,MAAI,OAAO,aAAa,YAAY,SAAS,WAAW,EAAG,QAAO;AAClE,MAAI,aAAa,wBAAyB,QAAO;AACjD,oBAAkB,YAAY;AAC9B,MAAI,CAAC,kBAAkB,KAAK,QAAQ,GAAG;AACrC,sBAAkB,YAAY;AAC9B,WAAO;AAAA,EACT;AACA,oBAAkB,YAAY;AAC9B,SAAO,gBAAgB,QAAQ,MAAM;AACvC;AAQO,SAAS,6BACd,SACA,QAA2B,CAAC,GAClB;AACV,QAAM,MAAgB,CAAC;AACvB,QAAM,MAAM,CAAC,aAAuC;AAClD,QAAI,OAAO,aAAa,YAAY,SAAS,WAAW,EAAG;AAC3D,QAAI,CAAC,6BAA6B,QAAQ,EAAG;AAC7C,QAAI,CAAC,IAAI,SAAS,QAAQ,EAAG,KAAI,KAAK,QAAQ;AAAA,EAChD;AACA,MAAI,uBAAuB;AAC3B,MAAI,OAAO;AACX,aAAW,YAAY,MAAO,KAAI,QAAQ;AAC1C,SAAO;AACT;AAMO,SAAS,0BAA0B,QAG7B;AACX,QAAM,MAAM,OAAO;AACnB,QAAM,QAAQ,MAAM,QAAQ,GAAG,IAC3B,IAAI,OAAO,CAAC,UAA2B,OAAO,UAAU,YAAY,MAAM,SAAS,CAAC,IACpF,CAAC;AACL,SAAO,6BAA6B,OAAO,+BAA+B,KAAK;AACjF;AAEO,SAAS,6BACd,MACA,WACe;AACf,aAAW,YAAY,WAAW;AAChC,UAAM,SAAS,8BAA8B,MAAM,QAAQ;AAC3D,QAAI,OAAQ,QAAO;AAAA,EACrB;AACA,SAAO;AACT;AAEO,SAAS,yBAAyB,MAAc,WAAsC;AAC3F,MAAI,MAAM;AACV,aAAW,YAAY,WAAW;AAChC,UAAM,yBAAyB,KAAK,QAAQ;AAAA,EAC9C;AACA,SAAO;AACT;AAWO,SAAS,eACd,MACA,KACA,WAAmB,yBACX;AACR,MAAI,OAAO,SAAS,SAAU,QAAO;AACrC,MAAI,uBAAuB,MAAM,QAAQ,EAAG,QAAO;AACnD,QAAM,aAAa,uBAAuB,IAAI;AAC9C,MAAI,WAAW,WAAW,EAAG,QAAO;AACpC,QAAM,WAAW,eAAe,KAAK,QAAQ;AAE7C,QAAM,WAAW,KAAK,MAAM,WAAW,MAAM;AAC7C,SAAO,GAAG,UAAU,IAAI,QAAQ,GAAG,QAAQ;AAC7C;AAOO,SAAS,cAAc,MAAqC;AACjE,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAC1D,QAAM,UAAU,uBAAuB;AACvC,QAAM,QAAQ,QAAQ,KAAK,IAAI;AAC/B,MAAI,CAAC,MAAO,QAAO;AAEnB,QAAM,OAAO,MAAM,CAAC,KAAK;AACzB,QAAM,MAAM,MAAM,CAAC,KAAK;AACxB,QAAM,SAAyB,EAAE,IAAI;AAErC,QAAM,SAAS,KACZ,MAAM,GAAG,EACT,IAAI,CAAC,YAAY,QAAQ,KAAK,CAAC,EAC/B,OAAO,CAAC,YAAY,QAAQ,SAAS,CAAC;AAEzC,aAAW,SAAS,QAAQ;AAC1B,UAAM,QAAQ,MAAM,QAAQ,GAAG;AAC/B,QAAI,SAAS,EAAG;AAChB,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,EAAE,KAAK,EAAE,YAAY;AACrD,UAAM,QAAQ,MAAM,MAAM,QAAQ,CAAC,EAAE,KAAK;AAC1C,QAAI,MAAM,WAAW,EAAG;AACxB,YAAQ,KAAK;AAAA,MACX,KAAK;AACH,eAAO,QAAQ;AACf;AAAA,MACF,KAAK;AAAA,MACL,KAAK;AACH,eAAO,UAAU;AACjB;AAAA,MACF,KAAK;AAAA,MACL,KAAK;AACH,eAAO,KAAK;AACZ;AAAA,MACF;AAEE;AAAA,IACJ;AAAA,EACF;AAEA,SAAO;AACT;AAMO,SAAS,kBAAkB,MAAgC;AAChE,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO,CAAC;AAC3D,QAAM,UAAU,uBAAuB;AACvC,QAAM,UAA4B,CAAC;AACnC,MAAI;AACJ,UAAQ,QAAQ,QAAQ,KAAK,IAAI,OAAO,MAAM;AAC5C,UAAM,SAAS,cAAc,MAAM,CAAC,CAAC;AACrC,QAAI,OAAQ,SAAQ,KAAK,MAAM;AAAA,EACjC;AACA,SAAO;AACT;AAqBO,SAAS,cAAc,MAAsB;AAClD,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAG1D,MAAI,CAAC,YAAY,IAAI,EAAG,QAAO;AAI/B,QAAM,UAAU,uBAAuB;AACvC,MAAI,SAAS;AACb,MAAI,YAAY;AAEhB,MAAI;AACJ,UAAQ,QAAQ,QAAQ,KAAK,IAAI,OAAO,MAAM;AAE5C,UAAM,SAAS,KAAK,MAAM,WAAW,MAAM,KAAK,EAAE,QAAQ,WAAW,EAAE;AACvE,cAAU;AACV,gBAAY,MAAM,QAAQ,MAAM,CAAC,EAAE;AAAA,EACrC;AAIA,QAAM,QAAQ,KAAK,MAAM,SAAS,EAAE,QAAQ,WAAW,EAAE;AACzD,MAAI,MAAM,SAAS,GAAG;AACpB,QAAI,OAAO,SAAS,EAAG,WAAU;AACjC,cAAU;AAAA,EACZ;AAEA,SAAO,OAAO,QAAQ;AACxB;AA6BO,SAAS,yBACd,MACA,UACQ;AACR,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,EAAG,QAAO;AAK1D,QAAM,eAAe,YAAY,IAAI,IAAI,cAAc,IAAI,IAAI;AAE/D,MAAI,CAAC,uBAAuB,cAAc,QAAQ,EAAG,QAAO;AAK5D,QAAM,UAAU,gBAAgB,QAAQ;AACxC,MAAI,CAAC,QAAS,QAAO;AAGrB,QAAM,gBAAgB,IAAI;AAAA,IACxB,QAAQ;AAAA,IACR,QAAQ,MAAM,SAAS,GAAG,IAAI,QAAQ,QAAQ,QAAQ,QAAQ;AAAA,EAChE;AACA,MAAI,SAAS;AACb,MAAI,YAAY;AAChB,MAAI;AAEJ,UAAQ,QAAQ,cAAc,KAAK,YAAY,OAAO,MAAM;AAC1D,UAAM,WAAW,MAAM,QAAQ,MAAM,CAAC,EAAE;AACxC,UAAM,YAAY,wBAAwB,cAAc,MAAM,OAAO,QAAQ;AAC7E,UAAM,eAAe,WAAW,SAAS,MAAM;AAC/C,UAAM,aAAa,WAAW,OAAO;AACrC,UAAM,SAAS,aAAa,MAAM,WAAW,YAAY,EAAE,QAAQ,WAAW,EAAE;AAChF,cAAU;AACV,gBAAY;AAEZ,QAAI,MAAM,CAAC,EAAE,WAAW,GAAG;AACzB,oBAAc;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,QAAQ,aAAa,MAAM,SAAS,EAAE,QAAQ,WAAW,EAAE;AACjE,MAAI,MAAM,SAAS,GAAG;AACpB,QAAI,OAAO,SAAS,EAAG,WAAU;AACjC,cAAU;AAAA,EACZ;AAEA,SAAO,OAAO,QAAQ;AACxB;AAEA,SAAS,wBACP,MACA,OACA,KAC4C;AAC5C,MAAI,SAAS,KAAK,OAAO,KAAK,OAAQ,QAAO;AAC7C,QAAM,SAAS,KAAK,QAAQ,CAAC;AAC7B,QAAM,SAAS,KAAK,GAAG;AACvB,MACG,WAAW,OAAO,WAAW,OAC7B,WAAW,OAAO,WAAW,OAC7B,WAAW,OAAO,WAAW,KAC9B;AACA,WAAO,EAAE,OAAO,QAAQ,GAAG,KAAK,MAAM,EAAE;AAAA,EAC1C;AACA,SAAO;AACT;","names":[]}

package/dist/{chunk-UZZ7SQT3.js → chunk-JMWUPUE6.js}

@@ -3,7 +3,7 @@ import {
   isArtifactMemoryPath,
   isLocationDayPath,
   isMeetingRecordPath
-} from "./chunk-BV4ZKIZH.js";
+} from "./chunk-7ZLC4DTZ.js";
 import {
   OKF_RESERVED_BASENAMES
 } from "./chunk-PCEYGOSL.js";
@@ -208,4 +208,4 @@ export {
   isGenericRecallExcludedPath,
   filterRecallCandidates
 };
-//# sourceMappingURL=chunk-UZZ7SQT3.js.map
+//# sourceMappingURL=chunk-JMWUPUE6.js.map

package/dist/{chunk-ENBPQEVU.js → chunk-JSD7Q7LD.js}

@@ -1,6 +1,6 @@
 import {
   StorageManager
-} from "./chunk-CZTPU65V.js";
+} from "./chunk-ICN37XHG.js";
 import {
   composeMemoryEnvelope
 } from "./chunk-GDYU6VF4.js";
@@ -546,4 +546,4 @@ export {
   setSemanticRulePromotionTestHooks,
   promoteSemanticRuleFromMemory
 };
-//# sourceMappingURL=chunk-ENBPQEVU.js.map
+//# sourceMappingURL=chunk-JSD7Q7LD.js.map

package/dist/{chunk-QTQ6XKGT.js → chunk-K5D2XVNN.js}

@@ -1,15 +1,15 @@
 import {
   applyRecallStateViews
-} from "./chunk-LMLGBG6H.js";
+} from "./chunk-DBB5JPSL.js";
 import {
   isGenericRecallExcludedPath
-} from "./chunk-UZZ7SQT3.js";
+} from "./chunk-JMWUPUE6.js";
 import {
   shouldFilterSupersededFromRecall
 } from "./chunk-5WITETWU.js";
 import {
   isChangeOrientedQuery
-} from "./chunk-YDVAM7S4.js";
+} from "./chunk-EH3HNCAM.js";
 
 // src/recall-state-view-admission.ts
 function resolveRecallStateViewActive(options, config, query) {
@@ -69,4 +69,4 @@ export {
   filterRecentScanMemoriesForStateView,
   indexStateViewAnnotatedResults
 };
-//# sourceMappingURL=chunk-QTQ6XKGT.js.map
+//# sourceMappingURL=chunk-K5D2XVNN.js.map

package/dist/chunk-K5D2XVNN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/recall-state-view-admission.ts"],"sourcesContent":["/**\n * Recall-internal state-view admission (issue #1952).\n *\n * Flag resolution, recent-scan successor-anchor admission, and the X-ray\n * inject-seam annotation live here so recall-internal.ts stays under its\n * ratchet ceiling. Callers keep one-line sites.\n */\n\nimport { isGenericRecallExcludedPath, type GenericRecallPathPolicy } from \"./orchestration/generic-recall-paths.js\";\nimport { isChangeOrientedQuery, type StateViewResult } from \"./recall-state-view.js\";\nimport { applyRecallStateViews } from \"./recall-state-view-wire.js\";\nimport { shouldFilterSupersededFromRecall } from \"./temporal-supersession.js\";\nimport type { MemoryFile } from \"./types.js\";\n\n/**\n * Config flag OR per-call override, gated on change intent; computed once\n * for all branches.\n *\n * #2893: `query` MUST be the ORIGINAL prompt, not the cron-normalized\n * retrievalQuery — buildRecallQueryPolicy truncates standard prompts at\n * maxChars and strips stop-words (\"when\", \"before\", \"after\") from\n * instruction-heavy ones, either of which can erase the change-intent\n * signal before retrieval. Only the resulting boolean flows downstream;\n * retrieval itself keeps using the normalized query.\n */\nexport function resolveRecallStateViewActive(\n  options: { stateView?: boolean },\n  config: { recallStateViews?: boolean },\n  query: string,\n): boolean {\n  return (options.stateView === true || config.recallStateViews === true) && isChangeOrientedQuery(query);\n}\n\n/**\n * Superseded-status filtering delegates to shouldFilterSupersededFromRecall\n * so recent-scan and the QMD safety filter share semantics (kill switch,\n * audit mode, PR #402).\n *\n * #1952: an active state view admits a superseded memory whose successor\n * ALSO survives this admission filter — a successor excluded by status or\n * path can never anchor (mirrors the filterSearchResultsByRecallSafety\n * fixpoint). Anchors grow through admitted chain links, so iterate to a\n * fixpoint.\n *\n * PR #713: when `as_of` is active, pass superseded candidates through here\n * — boostSearchResults's `[valid_at, invalid_at)` evaluation is the\n * authoritative historical gate. Other non-active statuses stay excluded.\n */\nexport function filterRecentScanMemoriesForStateView(\n  memories: readonly MemoryFile[],\n  config: GenericRecallPathPolicy,\n  supersessionOptions: { enabled: boolean; includeInRecall: boolean },\n  stateViewActive: boolean,\n  asOfMs: number | undefined,\n): MemoryFile[] {\n  const asOfActive = typeof asOfMs === \"number\" && Number.isFinite(asOfMs);\n  let stateViewAdmittedIds: Set<string> | null = null;\n  if (stateViewActive && !asOfActive) {\n    stateViewAdmittedIds = new Set(\n      memories\n        .filter(\n          (m) =>\n            !isGenericRecallExcludedPath(m.path, config) &&\n            m.frontmatter.status !== \"superseded\" &&\n            !shouldFilterSupersededFromRecall(m.frontmatter, supersessionOptions),\n        )\n        .map((m) => m.frontmatter.id)\n        .filter((id): id is string => typeof id === \"string\" && id.length > 0),\n    );\n    for (let progress = true; progress; ) {\n      progress = false;\n      for (const m of memories) {\n        const id = m.frontmatter.id;\n        if (typeof id !== \"string\" || id.length === 0) continue;\n        if (stateViewAdmittedIds.has(id)) continue;\n        if (isGenericRecallExcludedPath(m.path, config)) continue;\n        if (m.frontmatter.status !== \"superseded\") continue;\n        if (!shouldFilterSupersededFromRecall(m.frontmatter, supersessionOptions)) continue;\n        if (stateViewAdmittedIds.has(m.frontmatter.supersededBy ?? \"\")) {\n          stateViewAdmittedIds.add(id);\n          progress = true;\n        }\n      }\n    }\n  }\n  return memories.filter((m) => {\n    if (isGenericRecallExcludedPath(m.path, config)) return false;\n    const status = m.frontmatter.status;\n    if (!status || status === \"active\") return true;\n    if (status === \"superseded\") {\n      if (asOfActive) return true;\n      const id = m.frontmatter.id;\n      if (\n        stateViewAdmittedIds !== null &&\n        typeof id === \"string\" &&\n        stateViewAdmittedIds.has(id)\n      ) {\n        return true;\n      }\n      // Include superseded memory only if the canonical gate says\n      // NOT to filter it (kill switch off or audit mode on).\n      return !shouldFilterSupersededFromRecall(m.frontmatter, supersessionOptions);\n    }\n    // Other non-active statuses (archived, retired, etc.) are\n    // excluded from the recent-scan path by default.\n    return false;\n  });\n}\n\n/** Label the captured X-ray branch through the same inject-seam annotator. */\nexport function indexStateViewAnnotatedResults<T extends StateViewResult & { path: string; namespace?: string }>(\n  results: T[],\n  query: string,\n  config: unknown,\n  stateViewActive?: boolean,\n  asOfMs?: number,\n): Map<string, T> {\n  return new Map(\n    applyRecallStateViews(results, query, config, stateViewActive, asOfMs).map((xr) => [\n      `${xr.namespace ?? \"\"}\\0${xr.path}`,\n      xr,\n    ]),\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;AAyBO,SAAS,6BACd,SACA,QACA,OACS;AACT,UAAQ,QAAQ,cAAc,QAAQ,OAAO,qBAAqB,SAAS,sBAAsB,KAAK;AACxG;AAiBO,SAAS,qCACd,UACA,QACA,qBACA,iBACA,QACc;AACd,QAAM,aAAa,OAAO,WAAW,YAAY,OAAO,SAAS,MAAM;AACvE,MAAI,uBAA2C;AAC/C,MAAI,mBAAmB,CAAC,YAAY;AAClC,2BAAuB,IAAI;AAAA,MACzB,SACG;AAAA,QACC,CAAC,MACC,CAAC,4BAA4B,EAAE,MAAM,MAAM,KAC3C,EAAE,YAAY,WAAW,gBACzB,CAAC,iCAAiC,EAAE,aAAa,mBAAmB;AAAA,MACxE,EACC,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,EAC3B,OAAO,CAAC,OAAqB,OAAO,OAAO,YAAY,GAAG,SAAS,CAAC;AAAA,IACzE;AACA,aAAS,WAAW,MAAM,YAAY;AACpC,iBAAW;AACX,iBAAW,KAAK,UAAU;AACxB,cAAM,KAAK,EAAE,YAAY;AACzB,YAAI,OAAO,OAAO,YAAY,GAAG,WAAW,EAAG;AAC/C,YAAI,qBAAqB,IAAI,EAAE,EAAG;AAClC,YAAI,4BAA4B,EAAE,MAAM,MAAM,EAAG;AACjD,YAAI,EAAE,YAAY,WAAW,aAAc;AAC3C,YAAI,CAAC,iCAAiC,EAAE,aAAa,mBAAmB,EAAG;AAC3E,YAAI,qBAAqB,IAAI,EAAE,YAAY,gBAAgB,EAAE,GAAG;AAC9D,+BAAqB,IAAI,EAAE;AAC3B,qBAAW;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO,SAAS,OAAO,CAAC,MAAM;AAC5B,QAAI,4BAA4B,EAAE,MAAM,MAAM,EAAG,QAAO;AACxD,UAAM,SAAS,EAAE,YAAY;AAC7B,QAAI,CAAC,UAAU,WAAW,SAAU,QAAO;AAC3C,QAAI,WAAW,cAAc;AAC3B,UAAI,WAAY,QAAO;AACvB,YAAM,KAAK,EAAE,YAAY;AACzB,UACE,yBAAyB,QACzB,OAAO,OAAO,YACd,qBAAqB,IAAI,EAAE,GAC3B;AACA,eAAO;AAAA,MACT;AAGA,aAAO,CAAC,iCAAiC,EAAE,aAAa,mBAAmB;AAAA,IAC7E;AAGA,WAAO;AAAA,EACT,CAAC;AACH;AAGO,SAAS,+BACd,SACA,OACA,QACA,iBACA,QACgB;AAChB,SAAO,IAAI;AAAA,IACT,sBAAsB,SAAS,OAAO,QAAQ,iBAAiB,MAAM,EAAE,IAAI,CAAC,OAAO;AAAA,MACjF,GAAG,GAAG,aAAa,EAAE,KAAK,GAAG,IAAI;AAAA,MACjC;AAAA,IACF,CAAC;AAAA,EACH;AACF;","names":[]}

package/dist/{chunk-3CBI2ZSA.js → chunk-KG2OOAFF.js}

@@ -1,6 +1,6 @@
 import {
   resolveEnsureCollectionArgs
-} from "./chunk-JXN77SGO.js";
+} from "./chunk-U2VDCFXW.js";
 import {
   QMD_PROBE_RETRY_BACKOFF_MS,
   QMD_PROBE_TIMEOUT_MS,
@@ -887,8 +887,10 @@ var QmdClient = class _QmdClient {
     }
     return env;
   }
-  async probe() {
-    const cliOk = await this.probeCli();
+  async probe(execution) {
+    if (execution?.signal?.aborted) return false;
+    const cliOk = await this.probeCli({ signal: execution?.signal });
+    if (execution?.signal?.aborted) return false;
     if (this.daemonEnabled) {
       await this.probeDaemon();
     }
@@ -980,14 +982,15 @@ var QmdClient = class _QmdClient {
       this.lastCliProbeError = configuredProbeFailure;
     };
     const recordProbeSuccess = async (result, qmdPath, source) => {
+      if (options.signal?.aborted) return;
       this.available = true;
       this.qmdPath = qmdPath;
       this.qmdPathSource = source;
       this.cliVersion = parseQmdVersionOutput(result.stdout, result.stderr);
       this.qmdCapabilities = resolveQmdCapabilities(this.cliVersion);
       this.lastCliProbeError = null;
-      if (options.allowAutoUpgrade !== false) {
-        await this.maybeAutoUpgradeQmd();
+      if (options.allowAutoUpgrade !== false && !options.signal?.aborted) {
+        await this.maybeAutoUpgradeQmd(options.signal);
       }
     };
     if (this.configuredQmdPath) {
@@ -1069,8 +1072,8 @@ var QmdClient = class _QmdClient {
       return false;
     }
   }
-  async maybeAutoUpgradeQmd() {
-    if (!this.qmdAutoUpgradeEnabled) return;
+  async maybeAutoUpgradeQmd(signal) {
+    if (signal?.aborted || !this.qmdAutoUpgradeEnabled) return;
     const state = getGlobalQmdState();
     const targetKey = this.autoUpgradeTargetKey();
     const now = Date.now();
@@ -1104,13 +1107,16 @@ var QmdClient = class _QmdClient {
       );
       return;
     }
+    if (signal?.aborted) return;
     const packageSpec = `${QMD_PACKAGE_NAME}@${this.qmdSupportedVersion}`;
     try {
       log.warn(
         `QMD auto-upgrade: installed=${qmdVersionToString(installed)} supported=${qmdVersionToString(supported)}; running npm install -g ${packageSpec}`
       );
-      await runProcessCommand("npm", ["install", "-g", packageSpec], QMD_AUTO_UPGRADE_TIMEOUT_MS);
-      const postInstall = await this.probePostInstallQmdVersion(supported);
+      await runProcessCommand("npm", ["install", "-g", packageSpec], QMD_AUTO_UPGRADE_TIMEOUT_MS, signal);
+      if (signal?.aborted) return;
+      const postInstall = await this.probePostInstallQmdVersion(supported, signal);
+      if (signal?.aborted) return;
       this.qmdPath = postInstall.qmdPath;
       this.qmdPathSource = postInstall.source;
       this.cliVersion = postInstall.version;
@@ -1133,21 +1139,23 @@ var QmdClient = class _QmdClient {
         `upgraded: installed=${this.cliVersion ?? "unknown"} target=${this.qmdSupportedVersion}`
       );
     } catch (err) {
+      if (signal?.aborted) return;
       const msg = err instanceof Error ? err.message : String(err);
       recordAutoUpgradeStatus(state, targetKey, `failed: ${msg}`);
       log.warn(`QMD auto-upgrade failed: ${msg}`);
     }
   }
-  async probePostInstallQmdVersion(supported) {
+  async probePostInstallQmdVersion(supported, signal) {
     let lastErr;
     let lastResult = null;
     for (const candidate of getQmdPostInstallProbeTargets(this.qmdPath, this.qmdPathSource)) {
+      if (signal?.aborted) throw new Error("QMD auto-upgrade post-install probe aborted");
       try {
         const result = await runQmd(
           ["--version"],
           QMD_PROBE_TIMEOUT_MS,
           candidate.qmdPath,
-          void 0,
+          signal,
           this.qmdRuntimeEnv
         );
         const postInstall = {
@@ -2245,4 +2253,4 @@ export {
   sharedDaemonSessionCountForTest,
   QmdClient
 };
-//# sourceMappingURL=chunk-3CBI2ZSA.js.map
+//# sourceMappingURL=chunk-KG2OOAFF.js.map