@remnic/core 9.69.54 → 9.69.56

package/dist/{chunk-Z22M4JCY.js → chunk-NZLFVLLJ.js}

@@ -2,9 +2,11 @@ import {
   composeWriteEnvelope,
   envelopeFromScalars,
   envelopeToFrontmatterLines,
+  isExpired,
+  isStrictIsoInstant,
   resolveReadAuthority,
   resolveWriteOrigin
-} from "./chunk-QKCXRS5A.js";
+} from "./chunk-OGXXGHW6.js";
 import {
   resolveConversationContextCapabilities
 } from "./chunk-JUOZ62Y7.js";
@@ -23,6 +25,97 @@ import { randomUUID } from "crypto";
 import { mkdir, readFile, readdir, appendFile, writeFile, stat, rename, rm } from "fs/promises";
 import path from "path";
 import { z } from "zod";
+
+// src/shared-context/contradictions.ts
+function detectContradictionPair(a, b) {
+  if (a.id === b.id) {
+    return { kind: "same" };
+  }
+  const keys = [];
+  for (const key of Object.keys(a.claims)) {
+    if (key in b.claims && a.claims[key] !== b.claims[key]) {
+      keys.push(key);
+    }
+  }
+  return keys.length > 0 ? { kind: "conflict", keys: keys.sort() } : { kind: "none" };
+}
+
+// src/shared-context/curation-lint.ts
+function lintCuratedClaims(input) {
+  const available = new Set(input.availableItemIds);
+  const findings = [];
+  for (const claim of input.claims) {
+    const claimId = claim.claimId;
+    if (typeof claimId !== "string" || claimId.trim().length === 0) {
+      throw new RangeError("claimId must be a non-blank string");
+    }
+    const unknown = /* @__PURE__ */ new Set();
+    let validCount = 0;
+    for (const id of claim.citedItemIds ?? []) {
+      if (id.trim().length === 0) continue;
+      if (available.has(id)) {
+        validCount += 1;
+      } else {
+        unknown.add(id);
+      }
+    }
+    if (validCount === 0) {
+      findings.push({ claimId, reason: "no_citations" });
+      continue;
+    }
+    if (unknown.size > 0) {
+      findings.push({ claimId, reason: "unknown_citation", unknownIds: [...unknown].sort() });
+    }
+  }
+  findings.sort((a, b) => {
+    if (a.claimId !== b.claimId) return a.claimId < b.claimId ? -1 : 1;
+    if (a.reason !== b.reason) return a.reason < b.reason ? -1 : 1;
+    const left = (a.unknownIds ?? []).join(",");
+    const right = (b.unknownIds ?? []).join(",");
+    if (left !== right) return left < right ? -1 : 1;
+    return 0;
+  });
+  return findings;
+}
+
+// src/shared-context/provenance.ts
+function requireActor(actor) {
+  if (typeof actor !== "string" || actor.trim().length === 0) {
+    throw new Error("stampProvenance: actor must be a non-empty string");
+  }
+  return actor;
+}
+function requireAt(at) {
+  if (typeof at !== "string" || !isStrictIsoInstant(at)) {
+    throw new Error("stampProvenance: at must be a valid ISO-8601 timestamp");
+  }
+  return at;
+}
+function stampProvenance(item, stamp) {
+  return {
+    ...item,
+    provenance: {
+      actor: requireActor(stamp.actor),
+      at: requireAt(stamp.at)
+    }
+  };
+}
+
+// src/shared-context/staleness.ts
+function filterLiveEnvelopes(items, nowMs) {
+  return items.filter((item) => !isExpired(item, nowMs));
+}
+function markSupersededCirculation(items) {
+  const supersededIds = /* @__PURE__ */ new Set();
+  for (const item of items) {
+    if (item.supersedes) supersededIds.add(item.supersedes);
+  }
+  return items.map(
+    (item) => supersededIds.has(item.id) ? { ...item, circulating: true } : item
+  );
+}
+
+// src/shared-context/manager.ts
 var SharedFeedbackEntrySchema = z.object({
   agent: z.string().min(1),
   decision: z.enum(["approved", "approved_with_feedback", "rejected"]),
@@ -317,6 +410,19 @@ function formatFeedbackLine(entry) {
 function formatOverlapLine(entry) {
   return `- \`${entry.token}\` (${entry.agentCount} agents: ${markdownLineList(entry.agents)}) [sources: ${markdownLineList(entry.sourcePaths)}]`;
 }
+function formatStalenessLines(report) {
+  const circulating = report.staleness.supersededStillCirculating;
+  return [
+    `- Expired items dropped: ${report.staleness.expiredDropped}`,
+    circulating.length === 0 ? "- Superseded items still circulating: 0" : `- Superseded items still circulating: ${circulating.length} (${markdownLineList(circulating)})`
+  ];
+}
+function formatDisputedLines(report) {
+  if (report.disputed.length === 0) return ["- No contradictory agent judgments recorded."];
+  return report.disputed.map(
+    (entry) => `- \`${entry.ref}\` disputed by ${markdownLineList(entry.agents)} (decisions: ${markdownLineList(entry.decisions)})`
+  );
+}
 async function writeFileAtomic(filePath, content) {
   await mkdir(path.dirname(filePath), { recursive: true });
   const tempPath = path.join(
@@ -561,6 +667,14 @@ var SharedContextManager = class {
     outputs.sort(
       (a, b) => a.agent.localeCompare(b.agent) || a.path.localeCompare(b.path) || a.title.localeCompare(b.title)
     );
+    const liveOutputs = filterLiveEnvelopes(
+      outputs.map((output) => ({ output, expiresAt: output.envelope.expiresAt })),
+      Date.now()
+    ).map((entry) => entry.output);
+    const expiredDropped = outputs.length - liveOutputs.length;
+    const supersededStillCirculating = markSupersededCirculation(
+      liveOutputs.map((output) => ({ id: output.path, supersedes: output.envelope.supersedes }))
+    ).filter((item) => item.circulating === true).map((item) => item.id).sort();
     const feedback = [];
     try {
       const raw = await readFile(this.feedbackInboxPath, "utf-8");
@@ -576,7 +690,7 @@ var SharedContextManager = class {
       }
     } catch {
     }
-    const sources = outputs.map((output) => {
+    const sources = liveOutputs.map((output) => {
       const body = stripYamlFrontmatter(output.raw);
       return {
         agent: output.agent,
@@ -643,15 +757,38 @@ ${body}`),
     for (const entry of feedback) {
       feedbackByDecision[entry.decision] += 1;
     }
-    const report = {
+    const claimItems = feedback.map((entry, index) => ({
+      id: `${entry.agent}#${index}`,
+      claims: Object.fromEntries((entry.refs ?? []).map((ref) => [ref, entry.decision]))
+    }));
+    const disputedByRef = /* @__PURE__ */ new Map();
+    for (let i = 0; i < claimItems.length; i++) {
+      for (let j = i + 1; j < claimItems.length; j++) {
+        const pair = detectContradictionPair(claimItems[i], claimItems[j]);
+        if (pair.kind !== "conflict") continue;
+        for (const ref of pair.keys) {
+          const slot = disputedByRef.get(ref) ?? { agents: /* @__PURE__ */ new Set(), decisions: /* @__PURE__ */ new Set() };
+          slot.agents.add(feedback[i].agent);
+          slot.agents.add(feedback[j].agent);
+          slot.decisions.add(feedback[i].decision);
+          slot.decisions.add(feedback[j].decision);
+          disputedByRef.set(ref, slot);
+        }
+      }
+    }
+    const disputed = [...disputedByRef.entries()].map(([ref, slot]) => ({ ref, agents: [...slot.agents].sort(), decisions: [...slot.decisions].sort() })).sort((a, b) => a.ref.localeCompare(b.ref));
+    const generatedAt = (/* @__PURE__ */ new Date()).toISOString();
+    const baseReport = {
       date,
-      generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      generatedAt,
       sourceCount: sources.length,
       feedbackCount: feedback.length,
       feedbackByDecision,
       feedbackEntries: [...feedback].sort(compareFeedbackPriority),
       sources,
       overlaps: mergedOverlaps,
+      staleness: { expiredDropped, supersededStillCirculating },
+      disputed,
       semantic: {
         enabled: semanticEnabled,
         applied: semanticApplied,
@@ -661,6 +798,7 @@ ${body}`),
         addedOverlapCount: semanticAddedOverlapCount
       }
     };
+    const report = stampProvenance(baseReport, { actor: "shared-context:curation", at: generatedAt });
     const crossSignalsPath = path.join(this.crossSignalsDir, `${date}.json`);
     await writeFileAtomic(crossSignalsPath, `${JSON.stringify(report, null, 2)}
 `);
@@ -681,6 +819,12 @@ ${body}`),
       `- Semantic enhancer: ${semanticEnabled ? semanticTimedOut ? "enabled (timed out, fail-open)" : semanticApplied ? "enabled (applied)" : "enabled (no additional overlaps)" : "disabled"}`,
       `- JSON report: ${crossSignalsPath}`,
       "",
+      "## Staleness",
+      ...formatStalenessLines(report),
+      "",
+      "## Disputed",
+      ...formatDisputedLines(report),
+      "",
       "## Recurring Themes",
       ...recurringThemeLines,
       "",
@@ -714,6 +858,16 @@ ${body}`),
     const date = opts.date;
     const maxChars = Math.max(2e3, opts.maxChars ?? 2e4);
     const crossSignals = await this.synthesizeCrossSignalsUnlocked({ date });
+    const lintFindings = lintCuratedClaims({
+      claims: crossSignals.report.overlaps.map((overlap) => ({
+        claimId: `overlap:${overlap.token}`,
+        citedItemIds: overlap.sourcePaths
+      })),
+      availableItemIds: crossSignals.report.sources.map((source) => source.path)
+    });
+    if (lintFindings.length > 0) {
+      throw new Error(`shared-context curation self-check failed: ${JSON.stringify(lintFindings)}`);
+    }
     const feedbackLines = crossSignals.report.feedbackEntries.length === 0 ? ["- (none)"] : crossSignals.report.feedbackEntries.map((entry) => formatFeedbackLine(entry));
     const overlapBullets = crossSignals.report.overlaps.length === 0 ? ["- No multi-agent topic overlap detected."] : crossSignals.report.overlaps.slice(0, 8).map((entry) => formatOverlapLine(entry));
     const md = [
@@ -733,6 +887,12 @@ ${body}`),
       `- Cross-signals JSON: ${crossSignals.crossSignalsPath}`,
       `- Cross-signals markdown: ${crossSignals.crossSignalsMarkdownPath}`,
       ...overlapBullets,
+      "",
+      "## Staleness",
+      ...formatStalenessLines(crossSignals.report),
+      "",
+      "## Disputed",
+      ...formatDisputedLines(crossSignals.report),
       ""
     ];
     const out = md.join("\n");
@@ -755,4 +915,4 @@ export {
   resolveSharedContextDir,
   SharedContextManager
 };
-//# sourceMappingURL=chunk-Z22M4JCY.js.map
+//# sourceMappingURL=chunk-NZLFVLLJ.js.map

package/dist/chunk-NZLFVLLJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/shared-context/manager.ts","../src/shared-context/contradictions.ts","../src/shared-context/curation-lint.ts","../src/shared-context/provenance.ts","../src/shared-context/staleness.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { mkdir, readFile, readdir, appendFile, writeFile, stat, rename, rm } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { z } from \"zod\";\nimport { log } from \"../logger.js\";\nimport type { PluginConfig } from \"../types.js\";\nimport { expandTildePath } from \"../utils/path.js\";\nimport { resolveConversationContextCapabilities } from \"../capabilities.js\";\nimport { throwIfAborted } from \"../abort-error.js\";\nimport {\n  composeWriteEnvelope,\n  envelopeFromScalars,\n  envelopeToFrontmatterLines,\n  resolveReadAuthority,\n  resolveWriteOrigin,\n} from \"./envelope-io.js\";\nimport type { SharedAuthority, SharedEnvelope } from \"./governance.js\";\nimport { detectContradictionPair } from \"./contradictions.js\";\nimport { lintCuratedClaims } from \"./curation-lint.js\";\nimport { stampProvenance } from \"./provenance.js\";\nimport { filterLiveEnvelopes, markSupersededCirculation } from \"./staleness.js\";\n\nexport const SharedFeedbackEntrySchema = z.object({\n  agent: z.string().min(1),\n  decision: z.enum([\"approved\", \"approved_with_feedback\", \"rejected\"]),\n  reason: z.string().min(1),\n  date: z.string().min(8), // ISO-ish; keep loose\n  learning: z.string().optional(),\n  outcome: z.string().optional(),\n  severity: z.enum([\"low\", \"medium\", \"high\"]).optional(),\n  confidence: z.number().min(0).max(1).optional(),\n  workflow: z.string().min(1).optional(),\n  tags: z.array(z.string().min(1)).optional(),\n  evidenceWindowStart: z.string().min(8).optional(),\n  evidenceWindowEnd: z.string().min(8).optional(),\n  refs: z.array(z.string()).optional(),\n});\n\nexport type SharedFeedbackEntry = z.infer<typeof SharedFeedbackEntrySchema>;\n\nfunction safeSlug(s: string): string {\n  let slug = s.toLowerCase().replace(/[^a-z0-9]+/g, \"-\");\n  // Trim leading/trailing dashes without ReDoS-prone anchored quantifiers\n  let start = 0;\n  while (start < slug.length && slug[start] === \"-\") start++;\n  let end = slug.length;\n  while (end > start && slug[end - 1] === \"-\") end--;\n  return slug.slice(start, end).slice(0, 80) || \"output\";\n}\n\nfunction safePathSegment(s: string, label: string): string {\n  if (s.length === 0) throw new Error(`${label} must not be empty`);\n  if (/[\\r\\n]/.test(s)) throw new Error(`${label} must not contain line breaks`);\n  const encoded = encodeURIComponent(s);\n  if (encoded === \".\" || encoded === \"..\") {\n    return encoded.replace(/\\./g, \"%2E\");\n  }\n  return encoded;\n}\n\nfunction safeDecodePathSegment(s: string): string {\n  try {\n    return decodeURIComponent(s);\n  } catch {\n    return s;\n  }\n}\n\nfunction normalizeFrontmatterScalar(value: string): string {\n  if (value.length >= 2 && value.startsWith('\"') && value.endsWith('\"')) {\n    try {\n      const parsed = JSON.parse(value);\n      if (typeof parsed === \"string\") return parsed;\n    } catch {\n      // Fall through to the legacy partial unescape below.\n    }\n    return value.slice(1, -1).replace(/\\\\\"/g, '\"').replace(/\\\\\\\\/g, \"\\\\\");\n  }\n  if (value.length >= 2 && value.startsWith(\"'\") && value.endsWith(\"'\")) {\n    return value.slice(1, -1).replace(/''/g, \"'\");\n  }\n  return value;\n}\n\nfunction formatFrontmatterScalar(value: string): string {\n  return JSON.stringify(value);\n}\n\nfunction readFrontmatterScalar(raw: string, key: string): string | null {\n  const frontmatter = raw.match(/^---\\r?\\n([\\s\\S]*?)\\r?\\n---(?:\\r?\\n|$)/)?.[1];\n  if (!frontmatter) return null;\n  for (const line of frontmatter.split(/\\r?\\n/)) {\n    if (!line.startsWith(`${key}:`)) continue;\n    const value = line.slice(key.length + 1).trim();\n    return value ? normalizeFrontmatterScalar(value) : null;\n  }\n  return null;\n}\n\nfunction ymd(d: Date): string {\n  return d.toISOString().slice(0, 10);\n}\n\nfunction safeDateSegment(date: string): string {\n  if (!/^\\d{4}-\\d{2}-\\d{2}$/.test(date)) {\n    throw new Error(`Invalid shared-context date: ${JSON.stringify(date)}; expected YYYY-MM-DD`);\n  }\n  const parsed = new Date(`${date}T00:00:00.000Z`);\n  if (!Number.isFinite(parsed.getTime()) || parsed.toISOString().slice(0, 10) !== date) {\n    throw new Error(`Invalid shared-context date: ${JSON.stringify(date)}; expected a real calendar date`);\n  }\n  return date;\n}\n\nconst CROSS_SIGNAL_STOPWORDS = new Set([\n  \"a\",\n  \"an\",\n  \"and\",\n  \"are\",\n  \"as\",\n  \"at\",\n  \"be\",\n  \"by\",\n  \"for\",\n  \"from\",\n  \"has\",\n  \"have\",\n  \"in\",\n  \"is\",\n  \"it\",\n  \"of\",\n  \"on\",\n  \"or\",\n  \"that\",\n  \"the\",\n  \"this\",\n  \"to\",\n  \"was\",\n  \"were\",\n  \"with\",\n  \"agent\",\n  \"output\",\n  \"today\",\n  \"daily\",\n  \"notes\",\n  \"note\",\n  \"summary\",\n]);\n\nfunction extractTopicTokens(text: string, maxTokens: number = 12): string[] {\n  const seen = new Set<string>();\n  const out: string[] = [];\n  const tokens = text\n    .toLowerCase()\n    .replace(/[^a-z0-9\\s]/g, \" \")\n    .split(/\\s+/)\n    .map((token) => token.trim())\n    .filter((token) => token.length >= 4)\n    .filter((token) => !CROSS_SIGNAL_STOPWORDS.has(token));\n\n  for (const token of tokens) {\n    if (seen.has(token)) continue;\n    seen.add(token);\n    out.push(token);\n    if (out.length >= maxTokens) break;\n  }\n  return out;\n}\n\nfunction stripYamlFrontmatter(text: string): string {\n  if (!text.startsWith(\"---\\n\")) return text;\n  const closing = text.indexOf(\"\\n---\\n\", 4);\n  if (closing === -1) return text;\n  return text.slice(closing + 5);\n}\n\nfunction semanticRoot(token: string): string {\n  let root = token.toLowerCase();\n  if (root.endsWith(\"izations\") && root.length > 9) {\n    root = `${root.slice(0, -8)}ize`;\n  }\n  else if (root.endsWith(\"ization\") && root.length > 8) {\n    root = `${root.slice(0, -7)}ize`;\n  } else if (root.endsWith(\"isations\") && root.length > 9) {\n    root = `${root.slice(0, -8)}ise`;\n  } else if (root.endsWith(\"isation\") && root.length > 8) {\n    root = `${root.slice(0, -7)}ise`;\n  } else {\n    const suffixes = [\n      \"ations\",\n      \"ation\",\n      \"ments\",\n      \"ment\",\n      \"ingly\",\n      \"edly\",\n      \"ings\",\n      \"ing\",\n      \"ers\",\n      \"er\",\n      \"ies\",\n      \"ied\",\n      \"ions\",\n      \"ion\",\n      \"es\",\n      \"ed\",\n      \"s\",\n    ];\n    for (const suffix of suffixes) {\n      if (root.length > suffix.length + 3 && root.endsWith(suffix)) {\n        root = root.slice(0, -suffix.length);\n        break;\n      }\n    }\n  }\n  if (root.length > 4 && root.endsWith(\"e\")) {\n    root = root.slice(0, -1);\n  }\n  return root;\n}\n\nfunction mergeOverlaps(\n  base: SharedCrossSignalOverlap[],\n  extra: SharedCrossSignalOverlap[],\n): SharedCrossSignalOverlap[] {\n  const merged = new Map<string, { agents: Set<string>; sourcePaths: Set<string> }>();\n  for (const entry of [...base, ...extra]) {\n    const existing = merged.get(entry.token);\n    if (existing) {\n      for (const agent of entry.agents) existing.agents.add(agent);\n      for (const sourcePath of entry.sourcePaths) existing.sourcePaths.add(sourcePath);\n    } else {\n      merged.set(entry.token, {\n        agents: new Set(entry.agents),\n        sourcePaths: new Set(entry.sourcePaths),\n      });\n    }\n  }\n  return [...merged.entries()]\n    .map(([token, value]) => ({\n      token,\n      agents: [...value.agents].sort(),\n      sourcePaths: [...value.sourcePaths].sort(),\n      agentCount: value.agents.size,\n    }))\n    .filter((entry) => entry.agentCount >= 2)\n    .sort((a, b) => b.agentCount - a.agentCount || a.token.localeCompare(b.token));\n}\n\nasync function computeSemanticOverlapCandidates(\n  sources: SharedCrossSignalSource[],\n  maxCandidates: number,\n  timeoutAtMs: number,\n): Promise<{ overlaps: SharedCrossSignalOverlap[]; candidateCount: number; timedOut: boolean }> {\n  const tokenRows: Array<{ token: string; agent: string; path: string }> = [];\n  for (const source of sources) {\n    for (const token of source.topics) {\n      if (Date.now() >= timeoutAtMs) return { overlaps: [], candidateCount: tokenRows.length, timedOut: true };\n      await new Promise<void>((resolve) => setImmediate(resolve));\n      tokenRows.push({ token, agent: source.agent, path: source.path });\n      if (tokenRows.length >= maxCandidates) break;\n    }\n    if (tokenRows.length >= maxCandidates) break;\n  }\n\n  const byRoot = new Map<string, Map<string, { agents: Set<string>; paths: Set<string> }>>();\n  for (const row of tokenRows) {\n    if (Date.now() >= timeoutAtMs) return { overlaps: [], candidateCount: tokenRows.length, timedOut: true };\n    await new Promise<void>((resolve) => setImmediate(resolve));\n    const root = semanticRoot(row.token);\n    if (root.length < 4) continue;\n    const rootGroup = byRoot.get(root) ?? new Map<string, { agents: Set<string>; paths: Set<string> }>();\n    const tokenGroup = rootGroup.get(row.token) ?? { agents: new Set<string>(), paths: new Set<string>() };\n    tokenGroup.agents.add(row.agent);\n    tokenGroup.paths.add(row.path);\n    rootGroup.set(row.token, tokenGroup);\n    byRoot.set(root, rootGroup);\n  }\n\n  const overlaps: SharedCrossSignalOverlap[] = [];\n  for (const [root, tokenMap] of byRoot.entries()) {\n    if (Date.now() >= timeoutAtMs) return { overlaps: [], candidateCount: tokenRows.length, timedOut: true };\n    await new Promise<void>((resolve) => setImmediate(resolve));\n    if (tokenMap.size < 2) continue;\n    const agents = new Set<string>();\n    const sourcePaths = new Set<string>();\n    for (const value of tokenMap.values()) {\n      for (const agent of value.agents) agents.add(agent);\n      for (const sourcePath of value.paths) sourcePaths.add(sourcePath);\n    }\n    if (agents.size < 2) continue;\n    overlaps.push({\n      token: `semantic:${root}`,\n      agents: [...agents].sort(),\n      sourcePaths: [...sourcePaths].sort(),\n      agentCount: agents.size,\n    });\n  }\n\n  overlaps.sort((a, b) => b.agentCount - a.agentCount || a.token.localeCompare(b.token));\n  return {\n    overlaps,\n    candidateCount: tokenRows.length,\n    timedOut: false,\n  };\n}\n\nasync function computeSemanticOverlapsWithTimeout(\n  sources: SharedCrossSignalSource[],\n  timeoutMs: number,\n  maxCandidates: number,\n): Promise<{ overlaps: SharedCrossSignalOverlap[]; candidateCount: number; timedOut: boolean }> {\n  const safeTimeoutMs = Math.max(1, Math.floor(timeoutMs));\n  const safeMaxCandidates = Math.max(0, Math.floor(maxCandidates));\n  if (safeMaxCandidates === 0 || sources.length === 0) {\n    return { overlaps: [], candidateCount: 0, timedOut: false };\n  }\n  const timeoutAtMs = Date.now() + safeTimeoutMs;\n  return computeSemanticOverlapCandidates(sources, safeMaxCandidates, timeoutAtMs);\n}\n\ninterface SharedCrossSignalSource {\n  agent: string;\n  path: string;\n  title: string;\n  topics: string[];\n  /** Resolved least-privilege authority from the item's envelope (issue #1957). */\n  authority: SharedAuthority;\n  /** Envelope origin agent id; legacy items fall back to the agent field. */\n  sharedBy: string;\n}\n\ninterface SharedCrossSignalOverlap {\n  token: string;\n  agents: string[];\n  sourcePaths: string[];\n  agentCount: number;\n}\n\ninterface SharedCrossSignalReport {\n  date: string;\n  generatedAt: string;\n  sourceCount: number;\n  feedbackCount: number;\n  feedbackByDecision: Record<\"approved\" | \"approved_with_feedback\" | \"rejected\", number>;\n  feedbackEntries: SharedFeedbackEntry[];\n  sources: SharedCrossSignalSource[];\n  overlaps: SharedCrossSignalOverlap[];\n  /** Control 2 (issue #1957): expiry drops and supersession circulation. */\n  staleness: {\n    expiredDropped: number;\n    supersededStillCirculating: string[];\n  };\n  /** Control 3 (issue #1957): refs two agents ruled on differently. */\n  disputed: Array<{ ref: string; agents: string[]; decisions: string[] }>;\n  /** Control 4 (issue #1957): who synthesized this report and when. */\n  provenance: { actor: string; at: string };\n  semantic: {\n    enabled: boolean;\n    applied: boolean;\n    timedOut: boolean;\n    candidateCount: number;\n    maxCandidates: number;\n    addedOverlapCount: number;\n  };\n}\n\nexport interface SharedCrossSignalSynthesisResult {\n  date: string;\n  crossSignalsPath: string;\n  crossSignalsMarkdownPath: string;\n  overlapCount: number;\n  report: SharedCrossSignalReport;\n}\n\nexport interface SharedDailyCurationResult {\n  date: string;\n  roundtablePath: string;\n  crossSignalsPath: string;\n  crossSignalsMarkdownPath: string;\n  overlapCount: number;\n}\n\nfunction feedbackDecisionPriority(decision: SharedFeedbackEntry[\"decision\"]): number {\n  switch (decision) {\n    case \"rejected\":\n      return 3;\n    case \"approved_with_feedback\":\n      return 2;\n    case \"approved\":\n      return 1;\n  }\n}\n\nfunction feedbackSeverityPriority(severity: SharedFeedbackEntry[\"severity\"]): number {\n  switch (severity) {\n    case \"high\":\n      return 3;\n    case \"medium\":\n      return 2;\n    case \"low\":\n      return 1;\n    default:\n      return 0;\n  }\n}\n\nfunction compareFeedbackPriority(a: SharedFeedbackEntry, b: SharedFeedbackEntry): number {\n  return (\n    feedbackDecisionPriority(b.decision) - feedbackDecisionPriority(a.decision)\n    || feedbackSeverityPriority(b.severity) - feedbackSeverityPriority(a.severity)\n    || a.date.localeCompare(b.date)\n  );\n}\n\nfunction markdownLineText(value: string): string {\n  return value.replace(/[\\r\\n]+/g, \" \").replace(/\\s+/g, \" \").trim();\n}\n\nfunction markdownLineList(values: readonly string[]): string {\n  return values.map(markdownLineText).filter(Boolean).join(\", \");\n}\n\nfunction formatFeedbackLine(entry: SharedFeedbackEntry): string {\n  const extras: string[] = [`feedback: ${markdownLineText(entry.date)}`];\n  if (entry.severity) extras.push(`severity: ${markdownLineText(entry.severity)}`);\n  if (entry.refs?.length) extras.push(`refs: ${markdownLineList(entry.refs)}`);\n  return `- [${markdownLineText(entry.agent)}] ${entry.decision}: ${markdownLineText(entry.reason)} [${extras.join(\"; \")}]`;\n}\n\nfunction formatOverlapLine(entry: SharedCrossSignalOverlap): string {\n  return `- \\`${entry.token}\\` (${entry.agentCount} agents: ${markdownLineList(entry.agents)}) [sources: ${markdownLineList(entry.sourcePaths)}]`;\n}\n\nfunction formatStalenessLines(report: SharedCrossSignalReport): string[] {\n  const circulating = report.staleness.supersededStillCirculating;\n  return [\n    `- Expired items dropped: ${report.staleness.expiredDropped}`,\n    circulating.length === 0\n      ? \"- Superseded items still circulating: 0\"\n      : `- Superseded items still circulating: ${circulating.length} (${markdownLineList(circulating)})`,\n  ];\n}\n\nfunction formatDisputedLines(report: SharedCrossSignalReport): string[] {\n  if (report.disputed.length === 0) return [\"- No contradictory agent judgments recorded.\"];\n  return report.disputed.map((entry) =>\n    `- \\`${entry.ref}\\` disputed by ${markdownLineList(entry.agents)} (decisions: ${markdownLineList(entry.decisions)})`\n  );\n}\n\nasync function writeFileAtomic(filePath: string, content: string): Promise<void> {\n  await mkdir(path.dirname(filePath), { recursive: true });\n  const tempPath = path.join(\n    path.dirname(filePath),\n    `.${path.basename(filePath)}.${process.pid}.${randomUUID()}.tmp`,\n  );\n  try {\n    await writeFile(tempPath, content, { encoding: \"utf-8\", flag: \"wx\" });\n    await rename(tempPath, filePath);\n  } catch (error) {\n    await rm(tempPath, { force: true }).catch(() => undefined);\n    throw error;\n  }\n}\n\nexport function resolveSharedContextDir(config: PluginConfig): string {\n  return typeof config.sharedContextDir === \"string\" && config.sharedContextDir.length > 0\n    ? expandTildePath(config.sharedContextDir)\n    : path.join(expandTildePath(config.workspaceDir), \"shared-context\");\n}\n\nexport class SharedContextManager {\n  readonly dir: string;\n  private readonly prioritiesPath: string;\n  private readonly prioritiesInboxPath: string;\n  private readonly outputsDir: string;\n  private readonly roundtableDir: string;\n  private readonly feedbackDir: string;\n  private readonly feedbackInboxPath: string;\n  private readonly crossSignalsDir: string;\n  private readonly allowBindingAuthority: boolean;\n  private readonly dailySynthesisChains = new Map<string, Promise<void>>();\n\n  constructor(private readonly config: PluginConfig) {\n    const base = resolveSharedContextDir(config);\n\n    this.dir = base;\n    this.prioritiesPath = path.join(base, \"priorities.md\");\n    this.prioritiesInboxPath = path.join(base, \"priorities.inbox.md\");\n    this.outputsDir = path.join(base, \"agent-outputs\");\n    this.roundtableDir = path.join(base, \"roundtable\");\n    this.feedbackDir = path.join(base, \"feedback\");\n    this.feedbackInboxPath = path.join(this.feedbackDir, \"inbox.jsonl\");\n    this.crossSignalsDir = path.join(base, \"cross-signals\");\n    this.allowBindingAuthority = config.sharedContextAllowBindingAuthority === true;\n  }\n\n  async ensureStructure(): Promise<void> {\n    await mkdir(this.dir, { recursive: true });\n    await mkdir(this.outputsDir, { recursive: true });\n    await mkdir(this.roundtableDir, { recursive: true });\n    await mkdir(this.feedbackDir, { recursive: true });\n    await mkdir(this.crossSignalsDir, { recursive: true });\n    await mkdir(path.join(this.dir, \"staging\"), { recursive: true });\n    await mkdir(path.join(this.dir, \"kpis\"), { recursive: true });\n    await mkdir(path.join(this.dir, \"calendar\"), { recursive: true });\n    await mkdir(path.join(this.dir, \"content-calendar\"), { recursive: true });\n\n    // Bootstrap files if missing.\n    await this.ensureFile(\n      this.prioritiesPath,\n      [\n        \"# Priorities\",\n        \"\",\n        \"This is the shared priority stack. Agents should read this before acting.\",\n        \"\",\n        \"## Current\",\n        \"- (empty)\",\n        \"\",\n        \"## Notes\",\n        \"- (empty)\",\n        \"\",\n      ].join(\"\\n\"),\n    );\n    await this.ensureFile(\n      this.prioritiesInboxPath,\n      [\n        \"# Priorities Inbox\",\n        \"\",\n        \"Append-only inbox. Curator merges into priorities.md.\",\n        \"\",\n      ].join(\"\\n\"),\n    );\n    await this.ensureFile(this.feedbackInboxPath, \"\");\n  }\n\n  private async ensureFile(fp: string, content: string): Promise<void> {\n    try {\n      await stat(fp);\n    } catch {\n      await writeFile(fp, content, \"utf-8\");\n    }\n  }\n\n  async readPriorities(signal?: AbortSignal): Promise<string> {\n    throwIfAborted(signal, \"shared context priorities read aborted\");\n    try {\n      const content = await readFile(this.prioritiesPath, { encoding: \"utf-8\", signal });\n      throwIfAborted(signal, \"shared context priorities read aborted\");\n      return content;\n    } catch {\n      throwIfAborted(signal, \"shared context priorities read aborted\");\n      return \"\";\n    }\n  }\n\n  async readLatestRoundtable(signal?: AbortSignal): Promise<string> {\n    throwIfAborted(signal, \"shared context roundtable read aborted\");\n    try {\n      const files = (await readdir(this.roundtableDir))\n        .filter((f) => f.endsWith(\".md\"))\n        .sort()\n        .reverse();\n      throwIfAborted(signal, \"shared context roundtable read aborted\");\n      const fp = files[0] ? path.join(this.roundtableDir, files[0]) : null;\n      if (!fp) return \"\";\n      const content = await readFile(fp, { encoding: \"utf-8\", signal });\n      throwIfAborted(signal, \"shared context roundtable read aborted\");\n      return content;\n    } catch {\n      throwIfAborted(signal, \"shared context roundtable read aborted\");\n      return \"\";\n    }\n  }\n\n  async readLatestCrossSignals(signal?: AbortSignal): Promise<string> {\n    throwIfAborted(signal, \"shared context cross-signals read aborted\");\n    try {\n      const files = (await readdir(this.crossSignalsDir))\n        .filter((f) => f.endsWith(\".md\"))\n        .sort()\n        .reverse();\n      throwIfAborted(signal, \"shared context cross-signals read aborted\");\n      const fp = files[0] ? path.join(this.crossSignalsDir, files[0]) : null;\n      if (!fp) return \"\";\n      const content = await readFile(fp, { encoding: \"utf-8\", signal });\n      throwIfAborted(signal, \"shared context cross-signals read aborted\");\n      return content;\n    } catch {\n      throwIfAborted(signal, \"shared context cross-signals read aborted\");\n      return \"\";\n    }\n  }\n\n  async writeAgentOutput(opts: {\n    agentId: string;\n    title: string;\n    content: string;\n    createdAt?: Date;\n    /** Envelope authority class (issue #1957). Unrecognized values throw. */\n    authority?: string;\n    /** Optional ISO-8601 expiry stamped on the item. */\n    expiresAt?: string;\n    /** Optional id of the shared item this output supersedes. */\n    supersedes?: string;\n    /**\n     * Server-resolved identity of the caller, supplied by the access\n     * surface (issue #1957 review). When present it IS both the producer\n     * and the envelope origin; a disagreeing caller-supplied `agentId` is\n     * rejected so no caller can publish as another agent.\n     */\n    authenticatedIdentity?: string;\n    /**\n     * Server-owned origin token for a write that crosses an external\n     * boundary but resolved no identity (issue #1957 review round 4).\n     * Stamped as the envelope origin (`sharedBy`); the caller label stays\n     * the producer so grouping never collapses.\n     */\n    unattributedOrigin?: string;\n  }): Promise<string> {\n    const identity = resolveWriteOrigin({\n      agentId: opts.agentId,\n      authenticatedIdentity: opts.authenticatedIdentity,\n      unattributedOrigin: opts.unattributedOrigin,\n    });\n    const createdAt = opts.createdAt ?? new Date();\n    const date = ymd(createdAt);\n    const time = createdAt.toISOString().slice(11, 19).replace(/:/g, \"\");\n    const slug = safeSlug(opts.title);\n    const agentPathSegment = safePathSegment(identity.agent, \"agentId\");\n\n    const envelope = composeWriteEnvelope({\n      origin: identity.origin,\n      authority: opts.authority,\n      expiresAt: opts.expiresAt,\n      supersedes: opts.supersedes,\n      allowBinding: this.allowBindingAuthority,\n      nowMs: createdAt.getTime(),\n    });\n\n    const dir = path.join(this.outputsDir, agentPathSegment, date);\n    await mkdir(dir, { recursive: true });\n\n    const body = [\n      \"---\",\n      \"kind: agent_output\",\n      `agent: ${formatFrontmatterScalar(identity.agent)}`,\n      `createdAt: ${createdAt.toISOString()}`,\n      `title: ${formatFrontmatterScalar(opts.title.replace(/\\n/g, \" \").slice(0, 200))}`,\n      ...envelopeToFrontmatterLines(envelope),\n      \"---\",\n      \"\",\n      opts.content.trimEnd(),\n      \"\",\n    ].join(\"\\n\");\n\n    for (let attempt = 0; attempt < 100; attempt++) {\n      const suffix = attempt === 0 ? \"\" : `-${attempt + 1}`;\n      const fp = path.join(dir, `${time}-${slug}${suffix}.md`);\n      try {\n        await writeFile(fp, body, { encoding: \"utf-8\", flag: \"wx\" });\n        return fp;\n      } catch (error) {\n        if (error instanceof Error && \"code\" in error && error.code === \"EEXIST\") continue;\n        throw error;\n      }\n    }\n\n    throw new Error(`Unable to allocate unique shared-context output path for ${identity.agent}`);\n  }\n\n  async appendFeedback(entry: SharedFeedbackEntry): Promise<void> {\n    const parsed = SharedFeedbackEntrySchema.parse(entry);\n    await appendFile(this.feedbackInboxPath, JSON.stringify(parsed) + \"\\n\", \"utf-8\");\n  }\n\n  async appendPrioritiesInbox(opts: { agentId: string; text: string }): Promise<void> {\n    const stamp = new Date().toISOString();\n    const lines = [\n      \"\",\n      `## ${stamp} (${opts.agentId})`,\n      \"\",\n      opts.text.trimEnd(),\n      \"\",\n    ].join(\"\\n\");\n    await appendFile(this.prioritiesInboxPath, lines, \"utf-8\");\n  }\n\n  private async withDailySynthesisLock<T>(date: string, fn: () => Promise<T>): Promise<T> {\n    const previous = this.dailySynthesisChains.get(date) ?? Promise.resolve();\n    let releaseCurrent!: () => void;\n    const current = new Promise<void>((resolve) => {\n      releaseCurrent = resolve;\n    });\n    const queued = previous.catch(() => undefined).then(() => current);\n    this.dailySynthesisChains.set(date, queued);\n    await previous.catch(() => undefined);\n    try {\n      return await fn();\n    } finally {\n      releaseCurrent();\n      if (this.dailySynthesisChains.get(date) === queued) {\n        this.dailySynthesisChains.delete(date);\n      }\n    }\n  }\n\n  async synthesizeCrossSignals(opts: {\n    date?: string;\n    maxSummaryItems?: number;\n  }): Promise<SharedCrossSignalSynthesisResult> {\n    const date = safeDateSegment(opts.date ?? ymd(new Date()));\n    return this.withDailySynthesisLock(date, () => this.synthesizeCrossSignalsUnlocked({\n      date,\n      maxSummaryItems: opts.maxSummaryItems,\n    }));\n  }\n\n  private async synthesizeCrossSignalsUnlocked(opts: {\n    date: string;\n    maxSummaryItems?: number;\n  }): Promise<SharedCrossSignalSynthesisResult> {\n    const date = opts.date;\n    const maxSummaryItems = Math.max(1, opts.maxSummaryItems ?? 8);\n\n    // Collect outputs for the day (best-effort).\n    const outputs: Array<{ agent: string; path: string; title: string; raw: string; envelope: SharedEnvelope }> = [];\n    try {\n      const agents = (await readdir(this.outputsDir, { withFileTypes: true }))\n        .sort((a, b) => a.name.localeCompare(b.name));\n      for (const a of agents) {\n        if (!a.isDirectory()) continue;\n        const dayDir = path.join(this.outputsDir, a.name, date);\n        try {\n          const files = (await readdir(dayDir)).filter((f) => f.endsWith(\".md\")).sort();\n          for (const f of files) {\n            const p = path.join(dayDir, f);\n            const raw = await readFile(p, \"utf-8\");\n            const title = readFrontmatterScalar(raw, \"title\") ?? f;\n            const agent = readFrontmatterScalar(raw, \"agent\") ?? safeDecodePathSegment(a.name);\n            const envelope = envelopeFromScalars({\n              sharedBy: readFrontmatterScalar(raw, \"sharedBy\"),\n              authority: readFrontmatterScalar(raw, \"authority\"),\n              expiresAt: readFrontmatterScalar(raw, \"expiresAt\"),\n              supersedes: readFrontmatterScalar(raw, \"supersedes\"),\n            });\n            outputs.push({ agent, path: p, title, raw, envelope });\n          }\n        } catch {\n          // no outputs for this agent/date\n        }\n      }\n    } catch {\n      // ignore\n    }\n    outputs.sort(\n      (a, b) =>\n        a.agent.localeCompare(b.agent)\n        || a.path.localeCompare(b.path)\n        || a.title.localeCompare(b.title),\n    );\n\n    // Control 2 (issue #1957): expired items never enter the working set;\n    // items another live item supersedes are marked while they circulate.\n    const liveOutputs = filterLiveEnvelopes(\n      outputs.map((output) => ({ output, expiresAt: output.envelope.expiresAt })),\n      Date.now(),\n    ).map((entry) => entry.output);\n    const expiredDropped = outputs.length - liveOutputs.length;\n    const supersededStillCirculating = markSupersededCirculation(\n      liveOutputs.map((output) => ({ id: output.path, supersedes: output.envelope.supersedes })),\n    )\n      .filter((item) => item.circulating === true)\n      .map((item) => item.id)\n      .sort();\n\n    // Collect feedback entries for the day.\n    const feedback: SharedFeedbackEntry[] = [];\n    try {\n      const raw = await readFile(this.feedbackInboxPath, \"utf-8\");\n      for (const line of raw.split(\"\\n\")) {\n        if (!line.trim()) continue;\n        try {\n          const obj = JSON.parse(line);\n          const parsed = SharedFeedbackEntrySchema.safeParse(obj);\n          if (!parsed.success) continue;\n          if (String(parsed.data.date).startsWith(date)) feedback.push(parsed.data);\n        } catch {\n          // ignore\n        }\n      }\n    } catch {\n      // ignore\n    }\n\n    const sources: SharedCrossSignalSource[] = liveOutputs.map((output) => {\n      const body = stripYamlFrontmatter(output.raw);\n      return {\n        agent: output.agent,\n        path: output.path,\n        title: output.title,\n        topics: extractTopicTokens(`${output.title}\\n${body}`),\n        authority: resolveReadAuthority(output.envelope, this.allowBindingAuthority),\n        sharedBy: output.envelope.sharedBy ?? output.agent,\n      };\n    });\n\n    const overlapMap = new Map<string, { agents: Set<string>; sourcePaths: Set<string> }>();\n    for (const source of sources) {\n      for (const token of source.topics) {\n        const existing = overlapMap.get(token);\n        if (existing) {\n          existing.agents.add(source.agent);\n          existing.sourcePaths.add(source.path);\n        } else {\n          overlapMap.set(token, {\n            agents: new Set([source.agent]),\n            sourcePaths: new Set([source.path]),\n          });\n        }\n      }\n    }\n\n    const overlaps: SharedCrossSignalOverlap[] = [...overlapMap.entries()]\n      .map(([token, v]) => ({\n        token,\n        agents: [...v.agents].sort(),\n        sourcePaths: [...v.sourcePaths].sort(),\n        agentCount: v.agents.size,\n      }))\n      .filter((entry) => entry.agentCount >= 2)\n      .sort((a, b) => b.agentCount - a.agentCount || a.token.localeCompare(b.token));\n\n    const semanticEnabled =\n      resolveConversationContextCapabilities(this.config).sharedCrossSignalSemantic === true\n      || resolveConversationContextCapabilities(this.config).crossSignalsSemantic === true;\n    const semanticTimeoutMs =\n      this.config.sharedCrossSignalSemanticTimeoutMs\n      ?? this.config.crossSignalsSemanticTimeoutMs\n      ?? 4000;\n    const semanticMaxCandidates = this.config.sharedCrossSignalSemanticMaxCandidates ?? 120;\n    let semanticApplied = false;\n    let semanticTimedOut = false;\n    let semanticCandidateCount = 0;\n    let semanticAddedOverlapCount = 0;\n    let mergedOverlaps = overlaps;\n    if (semanticEnabled) {\n      try {\n        const semanticResult = await computeSemanticOverlapsWithTimeout(\n          sources,\n          semanticTimeoutMs,\n          semanticMaxCandidates,\n        );\n        semanticTimedOut = semanticResult.timedOut;\n        semanticCandidateCount = semanticResult.candidateCount;\n        if (!semanticResult.timedOut && semanticResult.overlaps.length > 0) {\n          mergedOverlaps = mergeOverlaps(overlaps, semanticResult.overlaps);\n          semanticAddedOverlapCount = Math.max(0, mergedOverlaps.length - overlaps.length);\n          semanticApplied = semanticAddedOverlapCount > 0;\n        }\n      } catch (err) {\n        log.warn(`shared-context semantic cross-signals failed; fail-open to deterministic output: ${err}`);\n      }\n    }\n\n    const feedbackByDecision: SharedCrossSignalReport[\"feedbackByDecision\"] = {\n      approved: 0,\n      approved_with_feedback: 0,\n      rejected: 0,\n    };\n    for (const entry of feedback) {\n      feedbackByDecision[entry.decision] += 1;\n    }\n\n    // Control 3 (issue #1957): feedback refs are claim keys; two agents\n    // ruling differently on the same ref surface as disputed, never silently\n    // averaged. Pairwise scan is bounded by one day's feedback entries.\n    const claimItems = feedback.map((entry, index) => ({\n      id: `${entry.agent}#${index}`,\n      claims: Object.fromEntries((entry.refs ?? []).map((ref) => [ref, entry.decision])),\n    }));\n    const disputedByRef = new Map<string, { agents: Set<string>; decisions: Set<string> }>();\n    for (let i = 0; i < claimItems.length; i++) {\n      for (let j = i + 1; j < claimItems.length; j++) {\n        const pair = detectContradictionPair(claimItems[i]!, claimItems[j]!);\n        if (pair.kind !== \"conflict\") continue;\n        for (const ref of pair.keys) {\n          const slot = disputedByRef.get(ref) ?? { agents: new Set<string>(), decisions: new Set<string>() };\n          slot.agents.add(feedback[i]!.agent);\n          slot.agents.add(feedback[j]!.agent);\n          slot.decisions.add(feedback[i]!.decision);\n          slot.decisions.add(feedback[j]!.decision);\n          disputedByRef.set(ref, slot);\n        }\n      }\n    }\n    const disputed = [...disputedByRef.entries()]\n      .map(([ref, slot]) => ({ ref, agents: [...slot.agents].sort(), decisions: [...slot.decisions].sort() }))\n      .sort((a, b) => a.ref.localeCompare(b.ref));\n\n    const generatedAt = new Date().toISOString();\n    const baseReport = {\n      date,\n      generatedAt,\n      sourceCount: sources.length,\n      feedbackCount: feedback.length,\n      feedbackByDecision,\n      feedbackEntries: [...feedback].sort(compareFeedbackPriority),\n      sources,\n      overlaps: mergedOverlaps,\n      staleness: { expiredDropped, supersededStillCirculating },\n      disputed,\n      semantic: {\n        enabled: semanticEnabled,\n        applied: semanticApplied,\n        timedOut: semanticTimedOut,\n        candidateCount: semanticCandidateCount,\n        maxCandidates: Math.max(0, Math.floor(semanticMaxCandidates)),\n        addedOverlapCount: semanticAddedOverlapCount,\n      },\n    };\n    // Control 4 (issue #1957): stamp who synthesized the report and when.\n    const report = stampProvenance(baseReport, { actor: \"shared-context:curation\", at: generatedAt });\n\n    const crossSignalsPath = path.join(this.crossSignalsDir, `${date}.json`);\n    await writeFileAtomic(crossSignalsPath, `${JSON.stringify(report, null, 2)}\\n`);\n\n    const recurringThemeLines = mergedOverlaps.length === 0\n      ? [\"- No multi-agent topic overlap detected.\"]\n      : mergedOverlaps.slice(0, maxSummaryItems).map((entry) => formatOverlapLine(entry));\n    const riskSignals = [...feedback]\n      .filter((entry) => entry.decision !== \"approved\" || entry.severity === \"high\" || entry.severity === \"medium\")\n      .sort(compareFeedbackPriority)\n      .slice(0, maxSummaryItems);\n    const riskLines = riskSignals.length === 0\n      ? [\"- No explicit blockers or elevated review risks recorded.\"]\n      : riskSignals.map((entry) => formatFeedbackLine(entry));\n    const promotionCandidates = mergedOverlaps\n      .filter((entry) => entry.agentCount >= 3)\n      .slice(0, maxSummaryItems);\n    const promotionLines = promotionCandidates.length === 0\n      ? [\"- No promotion candidates yet.\"]\n      : promotionCandidates.map((entry) =>\n          `- Consider promoting \\`${entry.token}\\` into priorities or operating rules [sources: ${markdownLineList(entry.sourcePaths)}]`\n        );\n\n    const crossSignalsMarkdown = [\n      `# Cross-Signals — ${date}`,\n      \"\",\n      \"## Overview\",\n      `- Source outputs analyzed: ${sources.length}`,\n      `- Feedback entries analyzed: ${feedback.length}`,\n      `- Decision totals: approved=${feedbackByDecision.approved}, approved_with_feedback=${feedbackByDecision.approved_with_feedback}, rejected=${feedbackByDecision.rejected}`,\n      `- Semantic enhancer: ${semanticEnabled ? (semanticTimedOut ? \"enabled (timed out, fail-open)\" : semanticApplied ? \"enabled (applied)\" : \"enabled (no additional overlaps)\") : \"disabled\"}`,\n      `- JSON report: ${crossSignalsPath}`,\n      \"\",\n      \"## Staleness\",\n      ...formatStalenessLines(report),\n      \"\",\n      \"## Disputed\",\n      ...formatDisputedLines(report),\n      \"\",\n      \"## Recurring Themes\",\n      ...recurringThemeLines,\n      \"\",\n      \"## Risks And Blockers\",\n      ...riskLines,\n      \"\",\n      \"## Potential Promotions\",\n      ...promotionLines,\n      \"\",\n      \"## Sources\",\n      ...(sources.length === 0 ? [\"- (none)\"] : sources.map((source) =>\n        `- [${markdownLineText(source.agent)}] ${markdownLineText(source.title)} (${markdownLineText(source.path)}) [authority: ${source.authority}; sharedBy: ${markdownLineText(source.sharedBy)}]`\n      )),\n      \"\",\n    ].join(\"\\n\");\n\n    const crossSignalsMarkdownPath = path.join(this.crossSignalsDir, `${date}.md`);\n    await writeFileAtomic(crossSignalsMarkdownPath, crossSignalsMarkdown);\n\n    return {\n      date,\n      crossSignalsPath,\n      crossSignalsMarkdownPath,\n      overlapCount: mergedOverlaps.length,\n      report,\n    };\n  }\n\n  async curateDaily(opts: { date?: string; maxChars?: number }): Promise<SharedDailyCurationResult> {\n    const date = safeDateSegment(opts.date ?? ymd(new Date()));\n    return this.withDailySynthesisLock(date, () => this.curateDailyUnlocked({ ...opts, date }));\n  }\n\n  private async curateDailyUnlocked(opts: { date: string; maxChars?: number }): Promise<SharedDailyCurationResult> {\n    const date = opts.date;\n    const maxChars = Math.max(2_000, opts.maxChars ?? 20_000);\n    const crossSignals = await this.synthesizeCrossSignalsUnlocked({ date });\n    // Control 4 (issue #1957): every synthesized claim must cite at least one\n    // item this run actually had. Overlaps are built from sources, so this is\n    // a tripwire — it fires only if a synthesized section stops citing.\n    const lintFindings = lintCuratedClaims({\n      claims: crossSignals.report.overlaps.map((overlap) => ({\n        claimId: `overlap:${overlap.token}`,\n        citedItemIds: overlap.sourcePaths,\n      })),\n      availableItemIds: crossSignals.report.sources.map((source) => source.path),\n    });\n    if (lintFindings.length > 0) {\n      throw new Error(`shared-context curation self-check failed: ${JSON.stringify(lintFindings)}`);\n    }\n    const feedbackLines = crossSignals.report.feedbackEntries.length === 0\n      ? [\"- (none)\"]\n      : crossSignals.report.feedbackEntries.map((entry) => formatFeedbackLine(entry));\n    const overlapBullets = crossSignals.report.overlaps.length === 0\n      ? [\"- No multi-agent topic overlap detected.\"]\n      : crossSignals.report.overlaps.slice(0, 8).map((entry) => formatOverlapLine(entry));\n\n    const md: string[] = [\n      `# Roundtable — ${date}`,\n      \"\",\n      \"## Notable Agent Outputs\",\n      ...(crossSignals.report.sources.length === 0\n        ? [\"- (none)\"]\n        : crossSignals.report.sources.map((source) =>\n            `- ${markdownLineText(source.title)} (${markdownLineText(source.path)}) [authority: ${source.authority}; sharedBy: ${markdownLineText(source.sharedBy)}]`)),\n      \"\",\n      \"## Feedback (Approve/Reject)\",\n      ...feedbackLines,\n      \"\",\n      \"## Cross-Signals\",\n      `- Source outputs analyzed: ${crossSignals.report.sourceCount}`,\n      `- Feedback entries analyzed: ${crossSignals.report.feedbackCount}`,\n      `- Decision totals: approved=${crossSignals.report.feedbackByDecision.approved}, approved_with_feedback=${crossSignals.report.feedbackByDecision.approved_with_feedback}, rejected=${crossSignals.report.feedbackByDecision.rejected}`,\n      `- Semantic enhancer: ${crossSignals.report.semantic.enabled ? (crossSignals.report.semantic.timedOut ? \"enabled (timed out, fail-open)\" : crossSignals.report.semantic.applied ? \"enabled (applied)\" : \"enabled (no additional overlaps)\") : \"disabled\"}`,\n      `- Cross-signals JSON: ${crossSignals.crossSignalsPath}`,\n      `- Cross-signals markdown: ${crossSignals.crossSignalsMarkdownPath}`,\n      ...overlapBullets,\n      \"\",\n      \"## Staleness\",\n      ...formatStalenessLines(crossSignals.report),\n      \"\",\n      \"## Disputed\",\n      ...formatDisputedLines(crossSignals.report),\n      \"\",\n    ];\n\n\n    const out = md.join(\"\\n\");\n    const trimmed = out.length > maxChars ? out.slice(0, maxChars) + \"\\n\\n...(trimmed)\\n\" : out;\n\n    const roundtablePath = path.join(this.roundtableDir, `${date}.md`);\n    await writeFileAtomic(roundtablePath, trimmed);\n\n    log.info(`shared-context curated daily roundtable: ${roundtablePath}`);\n    return {\n      date,\n      roundtablePath,\n      crossSignalsPath: crossSignals.crossSignalsPath,\n      crossSignalsMarkdownPath: crossSignals.crossSignalsMarkdownPath,\n      overlapCount: crossSignals.overlapCount,\n    };\n  }\n}\n","/**\n * Shared-item contradiction detection (issue #1957).\n *\n * Pure helper. Same-id items are one item; overlapping claim keys with\n * unequal values are a conflict. No deletes, no persistence.\n */\n\nexport interface SharedClaimItem {\n  id: string;\n  claims: Record<string, string>;\n}\n\nexport type ContradictionPairResult =\n  | { kind: \"same\" }\n  | { kind: \"conflict\"; keys: string[] }\n  | { kind: \"none\" };\n\nexport function detectContradictionPair(\n  a: SharedClaimItem,\n  b: SharedClaimItem,\n): ContradictionPairResult {\n  if (a.id === b.id) {\n    return { kind: \"same\" };\n  }\n  const keys: string[] = [];\n  for (const key of Object.keys(a.claims)) {\n    if (key in b.claims && a.claims[key] !== b.claims[key]) {\n      keys.push(key);\n    }\n  }\n  return keys.length > 0 ? { kind: \"conflict\", keys: keys.sort() } : { kind: \"none\" };\n}\n","/**\n * Shared-context curation self-check (issue #1957 requirement 4).\n *\n * Pure. A synthesized claim with no traceable source is a lint error:\n * report claims whose citations are missing, blank, or absent from the\n * item ids the curation run actually had available.\n */\n\nexport interface CuratedClaim {\n  claimId: string;\n  /** Shared-context item ids this claim was synthesized from. */\n  citedItemIds?: readonly string[];\n}\n\nexport interface CurationLintFinding {\n  claimId: string;\n  reason: \"no_citations\" | \"unknown_citation\";\n  /** Cited ids that are not in the available set. Only for unknown_citation. */\n  unknownIds?: string[];\n}\n\nexport function lintCuratedClaims(input: {\n  claims: readonly CuratedClaim[];\n  availableItemIds: readonly string[];\n}): CurationLintFinding[] {\n  const available = new Set(input.availableItemIds);\n  const findings: CurationLintFinding[] = [];\n\n  for (const claim of input.claims) {\n    const claimId = claim.claimId;\n    if (typeof claimId !== \"string\" || claimId.trim().length === 0) {\n      throw new RangeError(\"claimId must be a non-blank string\");\n    }\n\n    const unknown = new Set<string>();\n    let validCount = 0;\n    for (const id of claim.citedItemIds ?? []) {\n      if (id.trim().length === 0) continue;\n      if (available.has(id)) {\n        validCount += 1;\n      } else {\n        unknown.add(id);\n      }\n    }\n\n    if (validCount === 0) {\n      findings.push({ claimId, reason: \"no_citations\" });\n      continue;\n    }\n    if (unknown.size > 0) {\n      findings.push({ claimId, reason: \"unknown_citation\", unknownIds: [...unknown].sort() });\n    }\n  }\n\n  findings.sort((a, b) => {\n    if (a.claimId !== b.claimId) return a.claimId < b.claimId ? -1 : 1;\n    if (a.reason !== b.reason) return a.reason < b.reason ? -1 : 1;\n    // Duplicate claim ids are linted independently, so two findings can share\n    // both keys above and still differ. Without this tertiary key the result\n    // would depend on upstream iteration order, which the deterministic-output\n    // contract forbids.\n    const left = (a.unknownIds ?? []).join(\",\");\n    const right = (b.unknownIds ?? []).join(\",\");\n    if (left !== right) return left < right ? -1 : 1;\n    return 0;\n  });\n  return findings;\n}\n","/**\n * Shared-item provenance stamp (issue #1957).\n *\n * First slice: stamp actor + at onto a new object. Curation wiring\n * comes later. Does not mutate the input.\n */\n\nimport { isStrictIsoInstant } from \"./iso-instant.js\";\n\nexport interface ProvenanceStamp {\n  actor: string;\n  at: string;\n}\n\nexport interface StampProvenanceOptions {\n  actor: string;\n  at: string;\n}\n\nfunction requireActor(actor: string): string {\n  if (typeof actor !== \"string\" || actor.trim().length === 0) {\n    throw new Error(\"stampProvenance: actor must be a non-empty string\");\n  }\n  return actor;\n}\n\nfunction requireAt(at: unknown): string {\n  if (typeof at !== \"string\" || !isStrictIsoInstant(at)) {\n    throw new Error(\"stampProvenance: at must be a valid ISO-8601 timestamp\");\n  }\n  return at;\n}\n\nexport function stampProvenance<T extends object>(\n  item: T,\n  stamp: StampProvenanceOptions,\n): T & { provenance: ProvenanceStamp } {\n  return {\n    ...item,\n    provenance: {\n      actor: requireActor(stamp.actor),\n      at: requireAt(stamp.at),\n    },\n  };\n}\n","/**\n * Shared-item staleness (issue #1957).\n *\n * Pure helpers. Expired items drop; superseded items that still circulate\n * get a marker. Callers never `rm`.\n */\nimport { isExpired } from \"./governance.js\";\n\nexport interface SharedStalenessItem {\n  id: string;\n  expiresAt?: string;\n  supersedes?: string;\n  circulating?: boolean;\n}\n\n/** Drop expired items. Half-open: `nowMs >= expiresAt` is expired. */\nexport function filterLiveEnvelopes<T extends { expiresAt?: string }>(\n  items: readonly T[],\n  nowMs: number,\n): T[] {\n  return items.filter((item) => !isExpired(item, nowMs));\n}\n\n/**\n * Mark items whose id appears in another item's `supersedes`.\n * Returns a new array. Does not mutate input and does not delete files.\n */\nexport function markSupersededCirculation<T extends SharedStalenessItem>(\n  items: readonly T[],\n): (T & { circulating?: boolean })[] {\n  const supersededIds = new Set<string>();\n  for (const item of items) {\n    if (item.supersedes) supersededIds.add(item.supersedes);\n  }\n  return items.map((item) =>\n    supersededIds.has(item.id) ? { ...item, circulating: true } : item,\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,kBAAkB;AAC3B,SAAS,OAAO,UAAU,SAAS,YAAY,WAAW,MAAM,QAAQ,UAAU;AAClF,OAAO,UAAU;AACjB,SAAS,SAAS;;;ACcX,SAAS,wBACd,GACA,GACyB;AACzB,MAAI,EAAE,OAAO,EAAE,IAAI;AACjB,WAAO,EAAE,MAAM,OAAO;AAAA,EACxB;AACA,QAAM,OAAiB,CAAC;AACxB,aAAW,OAAO,OAAO,KAAK,EAAE,MAAM,GAAG;AACvC,QAAI,OAAO,EAAE,UAAU,EAAE,OAAO,GAAG,MAAM,EAAE,OAAO,GAAG,GAAG;AACtD,WAAK,KAAK,GAAG;AAAA,IACf;AAAA,EACF;AACA,SAAO,KAAK,SAAS,IAAI,EAAE,MAAM,YAAY,MAAM,KAAK,KAAK,EAAE,IAAI,EAAE,MAAM,OAAO;AACpF;;;ACVO,SAAS,kBAAkB,OAGR;AACxB,QAAM,YAAY,IAAI,IAAI,MAAM,gBAAgB;AAChD,QAAM,WAAkC,CAAC;AAEzC,aAAW,SAAS,MAAM,QAAQ;AAChC,UAAM,UAAU,MAAM;AACtB,QAAI,OAAO,YAAY,YAAY,QAAQ,KAAK,EAAE,WAAW,GAAG;AAC9D,YAAM,IAAI,WAAW,oCAAoC;AAAA,IAC3D;AAEA,UAAM,UAAU,oBAAI,IAAY;AAChC,QAAI,aAAa;AACjB,eAAW,MAAM,MAAM,gBAAgB,CAAC,GAAG;AACzC,UAAI,GAAG,KAAK,EAAE,WAAW,EAAG;AAC5B,UAAI,UAAU,IAAI,EAAE,GAAG;AACrB,sBAAc;AAAA,MAChB,OAAO;AACL,gBAAQ,IAAI,EAAE;AAAA,MAChB;AAAA,IACF;AAEA,QAAI,eAAe,GAAG;AACpB,eAAS,KAAK,EAAE,SAAS,QAAQ,eAAe,CAAC;AACjD;AAAA,IACF;AACA,QAAI,QAAQ,OAAO,GAAG;AACpB,eAAS,KAAK,EAAE,SAAS,QAAQ,oBAAoB,YAAY,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,IACxF;AAAA,EACF;AAEA,WAAS,KAAK,CAAC,GAAG,MAAM;AACtB,QAAI,EAAE,YAAY,EAAE,QAAS,QAAO,EAAE,UAAU,EAAE,UAAU,KAAK;AACjE,QAAI,EAAE,WAAW,EAAE,OAAQ,QAAO,EAAE,SAAS,EAAE,SAAS,KAAK;AAK7D,UAAM,QAAQ,EAAE,cAAc,CAAC,GAAG,KAAK,GAAG;AAC1C,UAAM,SAAS,EAAE,cAAc,CAAC,GAAG,KAAK,GAAG;AAC3C,QAAI,SAAS,MAAO,QAAO,OAAO,QAAQ,KAAK;AAC/C,WAAO;AAAA,EACT,CAAC;AACD,SAAO;AACT;;;AChDA,SAAS,aAAa,OAAuB;AAC3C,MAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,WAAW,GAAG;AAC1D,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AACA,SAAO;AACT;AAEA,SAAS,UAAU,IAAqB;AACtC,MAAI,OAAO,OAAO,YAAY,CAAC,mBAAmB,EAAE,GAAG;AACrD,UAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E;AACA,SAAO;AACT;AAEO,SAAS,gBACd,MACA,OACqC;AACrC,SAAO;AAAA,IACL,GAAG;AAAA,IACH,YAAY;AAAA,MACV,OAAO,aAAa,MAAM,KAAK;AAAA,MAC/B,IAAI,UAAU,MAAM,EAAE;AAAA,IACxB;AAAA,EACF;AACF;;;AC5BO,SAAS,oBACd,OACA,OACK;AACL,SAAO,MAAM,OAAO,CAAC,SAAS,CAAC,UAAU,MAAM,KAAK,CAAC;AACvD;AAMO,SAAS,0BACd,OACmC;AACnC,QAAM,gBAAgB,oBAAI,IAAY;AACtC,aAAW,QAAQ,OAAO;AACxB,QAAI,KAAK,WAAY,eAAc,IAAI,KAAK,UAAU;AAAA,EACxD;AACA,SAAO,MAAM;AAAA,IAAI,CAAC,SAChB,cAAc,IAAI,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,aAAa,KAAK,IAAI;AAAA,EAChE;AACF;;;AJfO,IAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,UAAU,EAAE,KAAK,CAAC,YAAY,0BAA0B,UAAU,CAAC;AAAA,EACnE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EACtB,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,UAAU,EAAE,KAAK,CAAC,OAAO,UAAU,MAAM,CAAC,EAAE,SAAS;AAAA,EACrD,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC9C,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACrC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS;AAAA,EAC1C,qBAAqB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAChD,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC9C,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AACrC,CAAC;AAID,SAAS,SAAS,GAAmB;AACnC,MAAI,OAAO,EAAE,YAAY,EAAE,QAAQ,eAAe,GAAG;AAErD,MAAI,QAAQ;AACZ,SAAO,QAAQ,KAAK,UAAU,KAAK,KAAK,MAAM,IAAK;AACnD,MAAI,MAAM,KAAK;AACf,SAAO,MAAM,SAAS,KAAK,MAAM,CAAC,MAAM,IAAK;AAC7C,SAAO,KAAK,MAAM,OAAO,GAAG,EAAE,MAAM,GAAG,EAAE,KAAK;AAChD;AAEA,SAAS,gBAAgB,GAAW,OAAuB;AACzD,MAAI,EAAE,WAAW,EAAG,OAAM,IAAI,MAAM,GAAG,KAAK,oBAAoB;AAChE,MAAI,SAAS,KAAK,CAAC,EAAG,OAAM,IAAI,MAAM,GAAG,KAAK,+BAA+B;AAC7E,QAAM,UAAU,mBAAmB,CAAC;AACpC,MAAI,YAAY,OAAO,YAAY,MAAM;AACvC,WAAO,QAAQ,QAAQ,OAAO,KAAK;AAAA,EACrC;AACA,SAAO;AACT;AAEA,SAAS,sBAAsB,GAAmB;AAChD,MAAI;AACF,WAAO,mBAAmB,CAAC;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,2BAA2B,OAAuB;AACzD,MAAI,MAAM,UAAU,KAAK,MAAM,WAAW,GAAG,KAAK,MAAM,SAAS,GAAG,GAAG;AACrE,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,KAAK;AAC/B,UAAI,OAAO,WAAW,SAAU,QAAO;AAAA,IACzC,QAAQ;AAAA,IAER;AACA,WAAO,MAAM,MAAM,GAAG,EAAE,EAAE,QAAQ,QAAQ,GAAG,EAAE,QAAQ,SAAS,IAAI;AAAA,EACtE;AACA,MAAI,MAAM,UAAU,KAAK,MAAM,WAAW,GAAG,KAAK,MAAM,SAAS,GAAG,GAAG;AACrE,WAAO,MAAM,MAAM,GAAG,EAAE,EAAE,QAAQ,OAAO,GAAG;AAAA,EAC9C;AACA,SAAO;AACT;AAEA,SAAS,wBAAwB,OAAuB;AACtD,SAAO,KAAK,UAAU,KAAK;AAC7B;AAEA,SAAS,sBAAsB,KAAa,KAA4B;AACtE,QAAM,cAAc,IAAI,MAAM,wCAAwC,IAAI,CAAC;AAC3E,MAAI,CAAC,YAAa,QAAO;AACzB,aAAW,QAAQ,YAAY,MAAM,OAAO,GAAG;AAC7C,QAAI,CAAC,KAAK,WAAW,GAAG,GAAG,GAAG,EAAG;AACjC,UAAM,QAAQ,KAAK,MAAM,IAAI,SAAS,CAAC,EAAE,KAAK;AAC9C,WAAO,QAAQ,2BAA2B,KAAK,IAAI;AAAA,EACrD;AACA,SAAO;AACT;AAEA,SAAS,IAAI,GAAiB;AAC5B,SAAO,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AACpC;AAEA,SAAS,gBAAgB,MAAsB;AAC7C,MAAI,CAAC,sBAAsB,KAAK,IAAI,GAAG;AACrC,UAAM,IAAI,MAAM,gCAAgC,KAAK,UAAU,IAAI,CAAC,uBAAuB;AAAA,EAC7F;AACA,QAAM,SAAS,oBAAI,KAAK,GAAG,IAAI,gBAAgB;AAC/C,MAAI,CAAC,OAAO,SAAS,OAAO,QAAQ,CAAC,KAAK,OAAO,YAAY,EAAE,MAAM,GAAG,EAAE,MAAM,MAAM;AACpF,UAAM,IAAI,MAAM,gCAAgC,KAAK,UAAU,IAAI,CAAC,iCAAiC;AAAA,EACvG;AACA,SAAO;AACT;AAEA,IAAM,yBAAyB,oBAAI,IAAI;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAAS,mBAAmB,MAAc,YAAoB,IAAc;AAC1E,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,MAAgB,CAAC;AACvB,QAAM,SAAS,KACZ,YAAY,EACZ,QAAQ,gBAAgB,GAAG,EAC3B,MAAM,KAAK,EACX,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,CAAC,UAAU,MAAM,UAAU,CAAC,EACnC,OAAO,CAAC,UAAU,CAAC,uBAAuB,IAAI,KAAK,CAAC;AAEvD,aAAW,SAAS,QAAQ;AAC1B,QAAI,KAAK,IAAI,KAAK,EAAG;AACrB,SAAK,IAAI,KAAK;AACd,QAAI,KAAK,KAAK;AACd,QAAI,IAAI,UAAU,UAAW;AAAA,EAC/B;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,MAAsB;AAClD,MAAI,CAAC,KAAK,WAAW,OAAO,EAAG,QAAO;AACtC,QAAM,UAAU,KAAK,QAAQ,WAAW,CAAC;AACzC,MAAI,YAAY,GAAI,QAAO;AAC3B,SAAO,KAAK,MAAM,UAAU,CAAC;AAC/B;AAEA,SAAS,aAAa,OAAuB;AAC3C,MAAI,OAAO,MAAM,YAAY;AAC7B,MAAI,KAAK,SAAS,UAAU,KAAK,KAAK,SAAS,GAAG;AAChD,WAAO,GAAG,KAAK,MAAM,GAAG,EAAE,CAAC;AAAA,EAC7B,WACS,KAAK,SAAS,SAAS,KAAK,KAAK,SAAS,GAAG;AACpD,WAAO,GAAG,KAAK,MAAM,GAAG,EAAE,CAAC;AAAA,EAC7B,WAAW,KAAK,SAAS,UAAU,KAAK,KAAK,SAAS,GAAG;AACvD,WAAO,GAAG,KAAK,MAAM,GAAG,EAAE,CAAC;AAAA,EAC7B,WAAW,KAAK,SAAS,SAAS,KAAK,KAAK,SAAS,GAAG;AACtD,WAAO,GAAG,KAAK,MAAM,GAAG,EAAE,CAAC;AAAA,EAC7B,OAAO;AACL,UAAM,WAAW;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,eAAW,UAAU,UAAU;AAC7B,UAAI,KAAK,SAAS,OAAO,SAAS,KAAK,KAAK,SAAS,MAAM,GAAG;AAC5D,eAAO,KAAK,MAAM,GAAG,CAAC,OAAO,MAAM;AACnC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,MAAI,KAAK,SAAS,KAAK,KAAK,SAAS,GAAG,GAAG;AACzC,WAAO,KAAK,MAAM,GAAG,EAAE;AAAA,EACzB;AACA,SAAO;AACT;AAEA,SAAS,cACP,MACA,OAC4B;AAC5B,QAAM,SAAS,oBAAI,IAA+D;AAClF,aAAW,SAAS,CAAC,GAAG,MAAM,GAAG,KAAK,GAAG;AACvC,UAAM,WAAW,OAAO,IAAI,MAAM,KAAK;AACvC,QAAI,UAAU;AACZ,iBAAW,SAAS,MAAM,OAAQ,UAAS,OAAO,IAAI,KAAK;AAC3D,iBAAW,cAAc,MAAM,YAAa,UAAS,YAAY,IAAI,UAAU;AAAA,IACjF,OAAO;AACL,aAAO,IAAI,MAAM,OAAO;AAAA,QACtB,QAAQ,IAAI,IAAI,MAAM,MAAM;AAAA,QAC5B,aAAa,IAAI,IAAI,MAAM,WAAW;AAAA,MACxC,CAAC;AAAA,IACH;AAAA,EACF;AACA,SAAO,CAAC,GAAG,OAAO,QAAQ,CAAC,EACxB,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO;AAAA,IACxB;AAAA,IACA,QAAQ,CAAC,GAAG,MAAM,MAAM,EAAE,KAAK;AAAA,IAC/B,aAAa,CAAC,GAAG,MAAM,WAAW,EAAE,KAAK;AAAA,IACzC,YAAY,MAAM,OAAO;AAAA,EAC3B,EAAE,EACD,OAAO,CAAC,UAAU,MAAM,cAAc,CAAC,EACvC,KAAK,CAAC,GAAG,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,cAAc,EAAE,KAAK,CAAC;AACjF;AAEA,eAAe,iCACb,SACA,eACA,aAC8F;AAC9F,QAAM,YAAmE,CAAC;AAC1E,aAAW,UAAU,SAAS;AAC5B,eAAW,SAAS,OAAO,QAAQ;AACjC,UAAI,KAAK,IAAI,KAAK,YAAa,QAAO,EAAE,UAAU,CAAC,GAAG,gBAAgB,UAAU,QAAQ,UAAU,KAAK;AACvG,YAAM,IAAI,QAAc,CAAC,YAAY,aAAa,OAAO,CAAC;AAC1D,gBAAU,KAAK,EAAE,OAAO,OAAO,OAAO,OAAO,MAAM,OAAO,KAAK,CAAC;AAChE,UAAI,UAAU,UAAU,cAAe;AAAA,IACzC;AACA,QAAI,UAAU,UAAU,cAAe;AAAA,EACzC;AAEA,QAAM,SAAS,oBAAI,IAAsE;AACzF,aAAW,OAAO,WAAW;AAC3B,QAAI,KAAK,IAAI,KAAK,YAAa,QAAO,EAAE,UAAU,CAAC,GAAG,gBAAgB,UAAU,QAAQ,UAAU,KAAK;AACvG,UAAM,IAAI,QAAc,CAAC,YAAY,aAAa,OAAO,CAAC;AAC1D,UAAM,OAAO,aAAa,IAAI,KAAK;AACnC,QAAI,KAAK,SAAS,EAAG;AACrB,UAAM,YAAY,OAAO,IAAI,IAAI,KAAK,oBAAI,IAAyD;AACnG,UAAM,aAAa,UAAU,IAAI,IAAI,KAAK,KAAK,EAAE,QAAQ,oBAAI,IAAY,GAAG,OAAO,oBAAI,IAAY,EAAE;AACrG,eAAW,OAAO,IAAI,IAAI,KAAK;AAC/B,eAAW,MAAM,IAAI,IAAI,IAAI;AAC7B,cAAU,IAAI,IAAI,OAAO,UAAU;AACnC,WAAO,IAAI,MAAM,SAAS;AAAA,EAC5B;AAEA,QAAM,WAAuC,CAAC;AAC9C,aAAW,CAAC,MAAM,QAAQ,KAAK,OAAO,QAAQ,GAAG;AAC/C,QAAI,KAAK,IAAI,KAAK,YAAa,QAAO,EAAE,UAAU,CAAC,GAAG,gBAAgB,UAAU,QAAQ,UAAU,KAAK;AACvG,UAAM,IAAI,QAAc,CAAC,YAAY,aAAa,OAAO,CAAC;AAC1D,QAAI,SAAS,OAAO,EAAG;AACvB,UAAM,SAAS,oBAAI,IAAY;AAC/B,UAAM,cAAc,oBAAI,IAAY;AACpC,eAAW,SAAS,SAAS,OAAO,GAAG;AACrC,iBAAW,SAAS,MAAM,OAAQ,QAAO,IAAI,KAAK;AAClD,iBAAW,cAAc,MAAM,MAAO,aAAY,IAAI,UAAU;AAAA,IAClE;AACA,QAAI,OAAO,OAAO,EAAG;AACrB,aAAS,KAAK;AAAA,MACZ,OAAO,YAAY,IAAI;AAAA,MACvB,QAAQ,CAAC,GAAG,MAAM,EAAE,KAAK;AAAA,MACzB,aAAa,CAAC,GAAG,WAAW,EAAE,KAAK;AAAA,MACnC,YAAY,OAAO;AAAA,IACrB,CAAC;AAAA,EACH;AAEA,WAAS,KAAK,CAAC,GAAG,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,cAAc,EAAE,KAAK,CAAC;AACrF,SAAO;AAAA,IACL;AAAA,IACA,gBAAgB,UAAU;AAAA,IAC1B,UAAU;AAAA,EACZ;AACF;AAEA,eAAe,mCACb,SACA,WACA,eAC8F;AAC9F,QAAM,gBAAgB,KAAK,IAAI,GAAG,KAAK,MAAM,SAAS,CAAC;AACvD,QAAM,oBAAoB,KAAK,IAAI,GAAG,KAAK,MAAM,aAAa,CAAC;AAC/D,MAAI,sBAAsB,KAAK,QAAQ,WAAW,GAAG;AACnD,WAAO,EAAE,UAAU,CAAC,GAAG,gBAAgB,GAAG,UAAU,MAAM;AAAA,EAC5D;AACA,QAAM,cAAc,KAAK,IAAI,IAAI;AACjC,SAAO,iCAAiC,SAAS,mBAAmB,WAAW;AACjF;AAgEA,SAAS,yBAAyB,UAAmD;AACnF,UAAQ,UAAU;AAAA,IAChB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,EACX;AACF;AAEA,SAAS,yBAAyB,UAAmD;AACnF,UAAQ,UAAU;AAAA,IAChB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAEA,SAAS,wBAAwB,GAAwB,GAAgC;AACvF,SACE,yBAAyB,EAAE,QAAQ,IAAI,yBAAyB,EAAE,QAAQ,KACvE,yBAAyB,EAAE,QAAQ,IAAI,yBAAyB,EAAE,QAAQ,KAC1E,EAAE,KAAK,cAAc,EAAE,IAAI;AAElC;AAEA,SAAS,iBAAiB,OAAuB;AAC/C,SAAO,MAAM,QAAQ,YAAY,GAAG,EAAE,QAAQ,QAAQ,GAAG,EAAE,KAAK;AAClE;AAEA,SAAS,iBAAiB,QAAmC;AAC3D,SAAO,OAAO,IAAI,gBAAgB,EAAE,OAAO,OAAO,EAAE,KAAK,IAAI;AAC/D;AAEA,SAAS,mBAAmB,OAAoC;AAC9D,QAAM,SAAmB,CAAC,aAAa,iBAAiB,MAAM,IAAI,CAAC,EAAE;AACrE,MAAI,MAAM,SAAU,QAAO,KAAK,aAAa,iBAAiB,MAAM,QAAQ,CAAC,EAAE;AAC/E,MAAI,MAAM,MAAM,OAAQ,QAAO,KAAK,SAAS,iBAAiB,MAAM,IAAI,CAAC,EAAE;AAC3E,SAAO,MAAM,iBAAiB,MAAM,KAAK,CAAC,KAAK,MAAM,QAAQ,KAAK,iBAAiB,MAAM,MAAM,CAAC,KAAK,OAAO,KAAK,IAAI,CAAC;AACxH;AAEA,SAAS,kBAAkB,OAAyC;AAClE,SAAO,OAAO,MAAM,KAAK,OAAO,MAAM,UAAU,YAAY,iBAAiB,MAAM,MAAM,CAAC,eAAe,iBAAiB,MAAM,WAAW,CAAC;AAC9I;AAEA,SAAS,qBAAqB,QAA2C;AACvE,QAAM,cAAc,OAAO,UAAU;AACrC,SAAO;AAAA,IACL,4BAA4B,OAAO,UAAU,cAAc;AAAA,IAC3D,YAAY,WAAW,IACnB,4CACA,yCAAyC,YAAY,MAAM,KAAK,iBAAiB,WAAW,CAAC;AAAA,EACnG;AACF;AAEA,SAAS,oBAAoB,QAA2C;AACtE,MAAI,OAAO,SAAS,WAAW,EAAG,QAAO,CAAC,8CAA8C;AACxF,SAAO,OAAO,SAAS;AAAA,IAAI,CAAC,UAC1B,OAAO,MAAM,GAAG,kBAAkB,iBAAiB,MAAM,MAAM,CAAC,gBAAgB,iBAAiB,MAAM,SAAS,CAAC;AAAA,EACnH;AACF;AAEA,eAAe,gBAAgB,UAAkB,SAAgC;AAC/E,QAAM,MAAM,KAAK,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;AACvD,QAAM,WAAW,KAAK;AAAA,IACpB,KAAK,QAAQ,QAAQ;AAAA,IACrB,IAAI,KAAK,SAAS,QAAQ,CAAC,IAAI,QAAQ,GAAG,IAAI,WAAW,CAAC;AAAA,EAC5D;AACA,MAAI;AACF,UAAM,UAAU,UAAU,SAAS,EAAE,UAAU,SAAS,MAAM,KAAK,CAAC;AACpE,UAAM,OAAO,UAAU,QAAQ;AAAA,EACjC,SAAS,OAAO;AACd,UAAM,GAAG,UAAU,EAAE,OAAO,KAAK,CAAC,EAAE,MAAM,MAAM,MAAS;AACzD,UAAM;AAAA,EACR;AACF;AAEO,SAAS,wBAAwB,QAA8B;AACpE,SAAO,OAAO,OAAO,qBAAqB,YAAY,OAAO,iBAAiB,SAAS,IACnF,gBAAgB,OAAO,gBAAgB,IACvC,KAAK,KAAK,gBAAgB,OAAO,YAAY,GAAG,gBAAgB;AACtE;AAEO,IAAM,uBAAN,MAA2B;AAAA,EAYhC,YAA6B,QAAsB;AAAtB;AAC3B,UAAM,OAAO,wBAAwB,MAAM;AAE3C,SAAK,MAAM;AACX,SAAK,iBAAiB,KAAK,KAAK,MAAM,eAAe;AACrD,SAAK,sBAAsB,KAAK,KAAK,MAAM,qBAAqB;AAChE,SAAK,aAAa,KAAK,KAAK,MAAM,eAAe;AACjD,SAAK,gBAAgB,KAAK,KAAK,MAAM,YAAY;AACjD,SAAK,cAAc,KAAK,KAAK,MAAM,UAAU;AAC7C,SAAK,oBAAoB,KAAK,KAAK,KAAK,aAAa,aAAa;AAClE,SAAK,kBAAkB,KAAK,KAAK,MAAM,eAAe;AACtD,SAAK,wBAAwB,OAAO,uCAAuC;AAAA,EAC7E;AAAA,EAZ6B;AAAA,EAXpB;AAAA,EACQ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,uBAAuB,oBAAI,IAA2B;AAAA,EAgBvE,MAAM,kBAAiC;AACrC,UAAM,MAAM,KAAK,KAAK,EAAE,WAAW,KAAK,CAAC;AACzC,UAAM,MAAM,KAAK,YAAY,EAAE,WAAW,KAAK,CAAC;AAChD,UAAM,MAAM,KAAK,eAAe,EAAE,WAAW,KAAK,CAAC;AACnD,UAAM,MAAM,KAAK,aAAa,EAAE,WAAW,KAAK,CAAC;AACjD,UAAM,MAAM,KAAK,iBAAiB,EAAE,WAAW,KAAK,CAAC;AACrD,UAAM,MAAM,KAAK,KAAK,KAAK,KAAK,SAAS,GAAG,EAAE,WAAW,KAAK,CAAC;AAC/D,UAAM,MAAM,KAAK,KAAK,KAAK,KAAK,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;AAC5D,UAAM,MAAM,KAAK,KAAK,KAAK,KAAK,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AAChE,UAAM,MAAM,KAAK,KAAK,KAAK,KAAK,kBAAkB,GAAG,EAAE,WAAW,KAAK,CAAC;AAGxE,UAAM,KAAK;AAAA,MACT,KAAK;AAAA,MACL;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,EAAE,KAAK,IAAI;AAAA,IACb;AACA,UAAM,KAAK;AAAA,MACT,KAAK;AAAA,MACL;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,EAAE,KAAK,IAAI;AAAA,IACb;AACA,UAAM,KAAK,WAAW,KAAK,mBAAmB,EAAE;AAAA,EAClD;AAAA,EAEA,MAAc,WAAW,IAAY,SAAgC;AACnE,QAAI;AACF,YAAM,KAAK,EAAE;AAAA,IACf,QAAQ;AACN,YAAM,UAAU,IAAI,SAAS,OAAO;AAAA,IACtC;AAAA,EACF;AAAA,EAEA,MAAM,eAAe,QAAuC;AAC1D,mBAAe,QAAQ,wCAAwC;AAC/D,QAAI;AACF,YAAM,UAAU,MAAM,SAAS,KAAK,gBAAgB,EAAE,UAAU,SAAS,OAAO,CAAC;AACjF,qBAAe,QAAQ,wCAAwC;AAC/D,aAAO;AAAA,IACT,QAAQ;AACN,qBAAe,QAAQ,wCAAwC;AAC/D,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,qBAAqB,QAAuC;AAChE,mBAAe,QAAQ,wCAAwC;AAC/D,QAAI;AACF,YAAM,SAAS,MAAM,QAAQ,KAAK,aAAa,GAC5C,OAAO,CAAC,MAAM,EAAE,SAAS,KAAK,CAAC,EAC/B,KAAK,EACL,QAAQ;AACX,qBAAe,QAAQ,wCAAwC;AAC/D,YAAM,KAAK,MAAM,CAAC,IAAI,KAAK,KAAK,KAAK,eAAe,MAAM,CAAC,CAAC,IAAI;AAChE,UAAI,CAAC,GAAI,QAAO;AAChB,YAAM,UAAU,MAAM,SAAS,IAAI,EAAE,UAAU,SAAS,OAAO,CAAC;AAChE,qBAAe,QAAQ,wCAAwC;AAC/D,aAAO;AAAA,IACT,QAAQ;AACN,qBAAe,QAAQ,wCAAwC;AAC/D,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,uBAAuB,QAAuC;AAClE,mBAAe,QAAQ,2CAA2C;AAClE,QAAI;AACF,YAAM,SAAS,MAAM,QAAQ,KAAK,eAAe,GAC9C,OAAO,CAAC,MAAM,EAAE,SAAS,KAAK,CAAC,EAC/B,KAAK,EACL,QAAQ;AACX,qBAAe,QAAQ,2CAA2C;AAClE,YAAM,KAAK,MAAM,CAAC,IAAI,KAAK,KAAK,KAAK,iBAAiB,MAAM,CAAC,CAAC,IAAI;AAClE,UAAI,CAAC,GAAI,QAAO;AAChB,YAAM,UAAU,MAAM,SAAS,IAAI,EAAE,UAAU,SAAS,OAAO,CAAC;AAChE,qBAAe,QAAQ,2CAA2C;AAClE,aAAO;AAAA,IACT,QAAQ;AACN,qBAAe,QAAQ,2CAA2C;AAClE,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,iBAAiB,MAyBH;AAClB,UAAM,WAAW,mBAAmB;AAAA,MAClC,SAAS,KAAK;AAAA,MACd,uBAAuB,KAAK;AAAA,MAC5B,oBAAoB,KAAK;AAAA,IAC3B,CAAC;AACD,UAAM,YAAY,KAAK,aAAa,oBAAI,KAAK;AAC7C,UAAM,OAAO,IAAI,SAAS;AAC1B,UAAM,OAAO,UAAU,YAAY,EAAE,MAAM,IAAI,EAAE,EAAE,QAAQ,MAAM,EAAE;AACnE,UAAM,OAAO,SAAS,KAAK,KAAK;AAChC,UAAM,mBAAmB,gBAAgB,SAAS,OAAO,SAAS;AAElE,UAAM,WAAW,qBAAqB;AAAA,MACpC,QAAQ,SAAS;AAAA,MACjB,WAAW,KAAK;AAAA,MAChB,WAAW,KAAK;AAAA,MAChB,YAAY,KAAK;AAAA,MACjB,cAAc,KAAK;AAAA,MACnB,OAAO,UAAU,QAAQ;AAAA,IAC3B,CAAC;AAED,UAAM,MAAM,KAAK,KAAK,KAAK,YAAY,kBAAkB,IAAI;AAC7D,UAAM,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AAEpC,UAAM,OAAO;AAAA,MACX;AAAA,MACA;AAAA,MACA,UAAU,wBAAwB,SAAS,KAAK,CAAC;AAAA,MACjD,cAAc,UAAU,YAAY,CAAC;AAAA,MACrC,UAAU,wBAAwB,KAAK,MAAM,QAAQ,OAAO,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC;AAAA,MAC/E,GAAG,2BAA2B,QAAQ;AAAA,MACtC;AAAA,MACA;AAAA,MACA,KAAK,QAAQ,QAAQ;AAAA,MACrB;AAAA,IACF,EAAE,KAAK,IAAI;AAEX,aAAS,UAAU,GAAG,UAAU,KAAK,WAAW;AAC9C,YAAM,SAAS,YAAY,IAAI,KAAK,IAAI,UAAU,CAAC;AACnD,YAAM,KAAK,KAAK,KAAK,KAAK,GAAG,IAAI,IAAI,IAAI,GAAG,MAAM,KAAK;AACvD,UAAI;AACF,cAAM,UAAU,IAAI,MAAM,EAAE,UAAU,SAAS,MAAM,KAAK,CAAC;AAC3D,eAAO;AAAA,MACT,SAAS,OAAO;AACd,YAAI,iBAAiB,SAAS,UAAU,SAAS,MAAM,SAAS,SAAU;AAC1E,cAAM;AAAA,MACR;AAAA,IACF;AAEA,UAAM,IAAI,MAAM,4DAA4D,SAAS,KAAK,EAAE;AAAA,EAC9F;AAAA,EAEA,MAAM,eAAe,OAA2C;AAC9D,UAAM,SAAS,0BAA0B,MAAM,KAAK;AACpD,UAAM,WAAW,KAAK,mBAAmB,KAAK,UAAU,MAAM,IAAI,MAAM,OAAO;AAAA,EACjF;AAAA,EAEA,MAAM,sBAAsB,MAAwD;AAClF,UAAM,SAAQ,oBAAI,KAAK,GAAE,YAAY;AACrC,UAAM,QAAQ;AAAA,MACZ;AAAA,MACA,MAAM,KAAK,KAAK,KAAK,OAAO;AAAA,MAC5B;AAAA,MACA,KAAK,KAAK,QAAQ;AAAA,MAClB;AAAA,IACF,EAAE,KAAK,IAAI;AACX,UAAM,WAAW,KAAK,qBAAqB,OAAO,OAAO;AAAA,EAC3D;AAAA,EAEA,MAAc,uBAA0B,MAAc,IAAkC;AACtF,UAAM,WAAW,KAAK,qBAAqB,IAAI,IAAI,KAAK,QAAQ,QAAQ;AACxE,QAAI;AACJ,UAAM,UAAU,IAAI,QAAc,CAAC,YAAY;AAC7C,uBAAiB;AAAA,IACnB,CAAC;AACD,UAAM,SAAS,SAAS,MAAM,MAAM,MAAS,EAAE,KAAK,MAAM,OAAO;AACjE,SAAK,qBAAqB,IAAI,MAAM,MAAM;AAC1C,UAAM,SAAS,MAAM,MAAM,MAAS;AACpC,QAAI;AACF,aAAO,MAAM,GAAG;AAAA,IAClB,UAAE;AACA,qBAAe;AACf,UAAI,KAAK,qBAAqB,IAAI,IAAI,MAAM,QAAQ;AAClD,aAAK,qBAAqB,OAAO,IAAI;AAAA,MACvC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,uBAAuB,MAGiB;AAC5C,UAAM,OAAO,gBAAgB,KAAK,QAAQ,IAAI,oBAAI,KAAK,CAAC,CAAC;AACzD,WAAO,KAAK,uBAAuB,MAAM,MAAM,KAAK,+BAA+B;AAAA,MACjF;AAAA,MACA,iBAAiB,KAAK;AAAA,IACxB,CAAC,CAAC;AAAA,EACJ;AAAA,EAEA,MAAc,+BAA+B,MAGC;AAC5C,UAAM,OAAO,KAAK;AAClB,UAAM,kBAAkB,KAAK,IAAI,GAAG,KAAK,mBAAmB,CAAC;AAG7D,UAAM,UAAwG,CAAC;AAC/G,QAAI;AACF,YAAM,UAAU,MAAM,QAAQ,KAAK,YAAY,EAAE,eAAe,KAAK,CAAC,GACnE,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAC9C,iBAAW,KAAK,QAAQ;AACtB,YAAI,CAAC,EAAE,YAAY,EAAG;AACtB,cAAM,SAAS,KAAK,KAAK,KAAK,YAAY,EAAE,MAAM,IAAI;AACtD,YAAI;AACF,gBAAM,SAAS,MAAM,QAAQ,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,SAAS,KAAK,CAAC,EAAE,KAAK;AAC5E,qBAAW,KAAK,OAAO;AACrB,kBAAM,IAAI,KAAK,KAAK,QAAQ,CAAC;AAC7B,kBAAM,MAAM,MAAM,SAAS,GAAG,OAAO;AACrC,kBAAM,QAAQ,sBAAsB,KAAK,OAAO,KAAK;AACrD,kBAAM,QAAQ,sBAAsB,KAAK,OAAO,KAAK,sBAAsB,EAAE,IAAI;AACjF,kBAAM,WAAW,oBAAoB;AAAA,cACnC,UAAU,sBAAsB,KAAK,UAAU;AAAA,cAC/C,WAAW,sBAAsB,KAAK,WAAW;AAAA,cACjD,WAAW,sBAAsB,KAAK,WAAW;AAAA,cACjD,YAAY,sBAAsB,KAAK,YAAY;AAAA,YACrD,CAAC;AACD,oBAAQ,KAAK,EAAE,OAAO,MAAM,GAAG,OAAO,KAAK,SAAS,CAAC;AAAA,UACvD;AAAA,QACF,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AACA,YAAQ;AAAA,MACN,CAAC,GAAG,MACF,EAAE,MAAM,cAAc,EAAE,KAAK,KAC1B,EAAE,KAAK,cAAc,EAAE,IAAI,KAC3B,EAAE,MAAM,cAAc,EAAE,KAAK;AAAA,IACpC;AAIA,UAAM,cAAc;AAAA,MAClB,QAAQ,IAAI,CAAC,YAAY,EAAE,QAAQ,WAAW,OAAO,SAAS,UAAU,EAAE;AAAA,MAC1E,KAAK,IAAI;AAAA,IACX,EAAE,IAAI,CAAC,UAAU,MAAM,MAAM;AAC7B,UAAM,iBAAiB,QAAQ,SAAS,YAAY;AACpD,UAAM,6BAA6B;AAAA,MACjC,YAAY,IAAI,CAAC,YAAY,EAAE,IAAI,OAAO,MAAM,YAAY,OAAO,SAAS,WAAW,EAAE;AAAA,IAC3F,EACG,OAAO,CAAC,SAAS,KAAK,gBAAgB,IAAI,EAC1C,IAAI,CAAC,SAAS,KAAK,EAAE,EACrB,KAAK;AAGR,UAAM,WAAkC,CAAC;AACzC,QAAI;AACF,YAAM,MAAM,MAAM,SAAS,KAAK,mBAAmB,OAAO;AAC1D,iBAAW,QAAQ,IAAI,MAAM,IAAI,GAAG;AAClC,YAAI,CAAC,KAAK,KAAK,EAAG;AAClB,YAAI;AACF,gBAAM,MAAM,KAAK,MAAM,IAAI;AAC3B,gBAAM,SAAS,0BAA0B,UAAU,GAAG;AACtD,cAAI,CAAC,OAAO,QAAS;AACrB,cAAI,OAAO,OAAO,KAAK,IAAI,EAAE,WAAW,IAAI,EAAG,UAAS,KAAK,OAAO,IAAI;AAAA,QAC1E,QAAQ;AAAA,QAER;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAER;AAEA,UAAM,UAAqC,YAAY,IAAI,CAAC,WAAW;AACrE,YAAM,OAAO,qBAAqB,OAAO,GAAG;AAC5C,aAAO;AAAA,QACL,OAAO,OAAO;AAAA,QACd,MAAM,OAAO;AAAA,QACb,OAAO,OAAO;AAAA,QACd,QAAQ,mBAAmB,GAAG,OAAO,KAAK;AAAA,EAAK,IAAI,EAAE;AAAA,QACrD,WAAW,qBAAqB,OAAO,UAAU,KAAK,qBAAqB;AAAA,QAC3E,UAAU,OAAO,SAAS,YAAY,OAAO;AAAA,MAC/C;AAAA,IACF,CAAC;AAED,UAAM,aAAa,oBAAI,IAA+D;AACtF,eAAW,UAAU,SAAS;AAC5B,iBAAW,SAAS,OAAO,QAAQ;AACjC,cAAM,WAAW,WAAW,IAAI,KAAK;AACrC,YAAI,UAAU;AACZ,mBAAS,OAAO,IAAI,OAAO,KAAK;AAChC,mBAAS,YAAY,IAAI,OAAO,IAAI;AAAA,QACtC,OAAO;AACL,qBAAW,IAAI,OAAO;AAAA,YACpB,QAAQ,oBAAI,IAAI,CAAC,OAAO,KAAK,CAAC;AAAA,YAC9B,aAAa,oBAAI,IAAI,CAAC,OAAO,IAAI,CAAC;AAAA,UACpC,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAEA,UAAM,WAAuC,CAAC,GAAG,WAAW,QAAQ,CAAC,EAClE,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO;AAAA,MACpB;AAAA,MACA,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK;AAAA,MAC3B,aAAa,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK;AAAA,MACrC,YAAY,EAAE,OAAO;AAAA,IACvB,EAAE,EACD,OAAO,CAAC,UAAU,MAAM,cAAc,CAAC,EACvC,KAAK,CAAC,GAAG,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,cAAc,EAAE,KAAK,CAAC;AAE/E,UAAM,kBACJ,uCAAuC,KAAK,MAAM,EAAE,8BAA8B,QAC/E,uCAAuC,KAAK,MAAM,EAAE,yBAAyB;AAClF,UAAM,oBACJ,KAAK,OAAO,sCACT,KAAK,OAAO,iCACZ;AACL,UAAM,wBAAwB,KAAK,OAAO,0CAA0C;AACpF,QAAI,kBAAkB;AACtB,QAAI,mBAAmB;AACvB,QAAI,yBAAyB;AAC7B,QAAI,4BAA4B;AAChC,QAAI,iBAAiB;AACrB,QAAI,iBAAiB;AACnB,UAAI;AACF,cAAM,iBAAiB,MAAM;AAAA,UAC3B;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA,2BAAmB,eAAe;AAClC,iCAAyB,eAAe;AACxC,YAAI,CAAC,eAAe,YAAY,eAAe,SAAS,SAAS,GAAG;AAClE,2BAAiB,cAAc,UAAU,eAAe,QAAQ;AAChE,sCAA4B,KAAK,IAAI,GAAG,eAAe,SAAS,SAAS,MAAM;AAC/E,4BAAkB,4BAA4B;AAAA,QAChD;AAAA,MACF,SAAS,KAAK;AACZ,YAAI,KAAK,oFAAoF,GAAG,EAAE;AAAA,MACpG;AAAA,IACF;AAEA,UAAM,qBAAoE;AAAA,MACxE,UAAU;AAAA,MACV,wBAAwB;AAAA,MACxB,UAAU;AAAA,IACZ;AACA,eAAW,SAAS,UAAU;AAC5B,yBAAmB,MAAM,QAAQ,KAAK;AAAA,IACxC;AAKA,UAAM,aAAa,SAAS,IAAI,CAAC,OAAO,WAAW;AAAA,MACjD,IAAI,GAAG,MAAM,KAAK,IAAI,KAAK;AAAA,MAC3B,QAAQ,OAAO,aAAa,MAAM,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM,QAAQ,CAAC,CAAC;AAAA,IACnF,EAAE;AACF,UAAM,gBAAgB,oBAAI,IAA6D;AACvF,aAAS,IAAI,GAAG,IAAI,WAAW,QAAQ,KAAK;AAC1C,eAAS,IAAI,IAAI,GAAG,IAAI,WAAW,QAAQ,KAAK;AAC9C,cAAM,OAAO,wBAAwB,WAAW,CAAC,GAAI,WAAW,CAAC,CAAE;AACnE,YAAI,KAAK,SAAS,WAAY;AAC9B,mBAAW,OAAO,KAAK,MAAM;AAC3B,gBAAM,OAAO,cAAc,IAAI,GAAG,KAAK,EAAE,QAAQ,oBAAI,IAAY,GAAG,WAAW,oBAAI,IAAY,EAAE;AACjG,eAAK,OAAO,IAAI,SAAS,CAAC,EAAG,KAAK;AAClC,eAAK,OAAO,IAAI,SAAS,CAAC,EAAG,KAAK;AAClC,eAAK,UAAU,IAAI,SAAS,CAAC,EAAG,QAAQ;AACxC,eAAK,UAAU,IAAI,SAAS,CAAC,EAAG,QAAQ;AACxC,wBAAc,IAAI,KAAK,IAAI;AAAA,QAC7B;AAAA,MACF;AAAA,IACF;AACA,UAAM,WAAW,CAAC,GAAG,cAAc,QAAQ,CAAC,EACzC,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,EAAE,KAAK,QAAQ,CAAC,GAAG,KAAK,MAAM,EAAE,KAAK,GAAG,WAAW,CAAC,GAAG,KAAK,SAAS,EAAE,KAAK,EAAE,EAAE,EACtG,KAAK,CAAC,GAAG,MAAM,EAAE,IAAI,cAAc,EAAE,GAAG,CAAC;AAE5C,UAAM,eAAc,oBAAI,KAAK,GAAE,YAAY;AAC3C,UAAM,aAAa;AAAA,MACjB;AAAA,MACA;AAAA,MACA,aAAa,QAAQ;AAAA,MACrB,eAAe,SAAS;AAAA,MACxB;AAAA,MACA,iBAAiB,CAAC,GAAG,QAAQ,EAAE,KAAK,uBAAuB;AAAA,MAC3D;AAAA,MACA,UAAU;AAAA,MACV,WAAW,EAAE,gBAAgB,2BAA2B;AAAA,MACxD;AAAA,MACA,UAAU;AAAA,QACR,SAAS;AAAA,QACT,SAAS;AAAA,QACT,UAAU;AAAA,QACV,gBAAgB;AAAA,QAChB,eAAe,KAAK,IAAI,GAAG,KAAK,MAAM,qBAAqB,CAAC;AAAA,QAC5D,mBAAmB;AAAA,MACrB;AAAA,IACF;AAEA,UAAM,SAAS,gBAAgB,YAAY,EAAE,OAAO,2BAA2B,IAAI,YAAY,CAAC;AAEhG,UAAM,mBAAmB,KAAK,KAAK,KAAK,iBAAiB,GAAG,IAAI,OAAO;AACvE,UAAM,gBAAgB,kBAAkB,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA,CAAI;AAE9E,UAAM,sBAAsB,eAAe,WAAW,IAClD,CAAC,0CAA0C,IAC3C,eAAe,MAAM,GAAG,eAAe,EAAE,IAAI,CAAC,UAAU,kBAAkB,KAAK,CAAC;AACpF,UAAM,cAAc,CAAC,GAAG,QAAQ,EAC7B,OAAO,CAAC,UAAU,MAAM,aAAa,cAAc,MAAM,aAAa,UAAU,MAAM,aAAa,QAAQ,EAC3G,KAAK,uBAAuB,EAC5B,MAAM,GAAG,eAAe;AAC3B,UAAM,YAAY,YAAY,WAAW,IACrC,CAAC,2DAA2D,IAC5D,YAAY,IAAI,CAAC,UAAU,mBAAmB,KAAK,CAAC;AACxD,UAAM,sBAAsB,eACzB,OAAO,CAAC,UAAU,MAAM,cAAc,CAAC,EACvC,MAAM,GAAG,eAAe;AAC3B,UAAM,iBAAiB,oBAAoB,WAAW,IAClD,CAAC,gCAAgC,IACjC,oBAAoB;AAAA,MAAI,CAAC,UACvB,0BAA0B,MAAM,KAAK,mDAAmD,iBAAiB,MAAM,WAAW,CAAC;AAAA,IAC7H;AAEJ,UAAM,uBAAuB;AAAA,MAC3B,0BAAqB,IAAI;AAAA,MACzB;AAAA,MACA;AAAA,MACA,8BAA8B,QAAQ,MAAM;AAAA,MAC5C,gCAAgC,SAAS,MAAM;AAAA,MAC/C,+BAA+B,mBAAmB,QAAQ,4BAA4B,mBAAmB,sBAAsB,cAAc,mBAAmB,QAAQ;AAAA,MACxK,wBAAwB,kBAAmB,mBAAmB,mCAAmC,kBAAkB,sBAAsB,qCAAsC,UAAU;AAAA,MACzL,kBAAkB,gBAAgB;AAAA,MAClC;AAAA,MACA;AAAA,MACA,GAAG,qBAAqB,MAAM;AAAA,MAC9B;AAAA,MACA;AAAA,MACA,GAAG,oBAAoB,MAAM;AAAA,MAC7B;AAAA,MACA;AAAA,MACA,GAAG;AAAA,MACH;AAAA,MACA;AAAA,MACA,GAAG;AAAA,MACH;AAAA,MACA;AAAA,MACA,GAAG;AAAA,MACH;AAAA,MACA;AAAA,MACA,GAAI,QAAQ,WAAW,IAAI,CAAC,UAAU,IAAI,QAAQ;AAAA,QAAI,CAAC,WACrD,MAAM,iBAAiB,OAAO,KAAK,CAAC,KAAK,iBAAiB,OAAO,KAAK,CAAC,KAAK,iBAAiB,OAAO,IAAI,CAAC,iBAAiB,OAAO,SAAS,eAAe,iBAAiB,OAAO,QAAQ,CAAC;AAAA,MAC5L;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAEX,UAAM,2BAA2B,KAAK,KAAK,KAAK,iBAAiB,GAAG,IAAI,KAAK;AAC7E,UAAM,gBAAgB,0BAA0B,oBAAoB;AAEpE,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc,eAAe;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,MAAgF;AAChG,UAAM,OAAO,gBAAgB,KAAK,QAAQ,IAAI,oBAAI,KAAK,CAAC,CAAC;AACzD,WAAO,KAAK,uBAAuB,MAAM,MAAM,KAAK,oBAAoB,EAAE,GAAG,MAAM,KAAK,CAAC,CAAC;AAAA,EAC5F;AAAA,EAEA,MAAc,oBAAoB,MAA+E;AAC/G,UAAM,OAAO,KAAK;AAClB,UAAM,WAAW,KAAK,IAAI,KAAO,KAAK,YAAY,GAAM;AACxD,UAAM,eAAe,MAAM,KAAK,+BAA+B,EAAE,KAAK,CAAC;AAIvE,UAAM,eAAe,kBAAkB;AAAA,MACrC,QAAQ,aAAa,OAAO,SAAS,IAAI,CAAC,aAAa;AAAA,QACrD,SAAS,WAAW,QAAQ,KAAK;AAAA,QACjC,cAAc,QAAQ;AAAA,MACxB,EAAE;AAAA,MACF,kBAAkB,aAAa,OAAO,QAAQ,IAAI,CAAC,WAAW,OAAO,IAAI;AAAA,IAC3E,CAAC;AACD,QAAI,aAAa,SAAS,GAAG;AAC3B,YAAM,IAAI,MAAM,8CAA8C,KAAK,UAAU,YAAY,CAAC,EAAE;AAAA,IAC9F;AACA,UAAM,gBAAgB,aAAa,OAAO,gBAAgB,WAAW,IACjE,CAAC,UAAU,IACX,aAAa,OAAO,gBAAgB,IAAI,CAAC,UAAU,mBAAmB,KAAK,CAAC;AAChF,UAAM,iBAAiB,aAAa,OAAO,SAAS,WAAW,IAC3D,CAAC,0CAA0C,IAC3C,aAAa,OAAO,SAAS,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,UAAU,kBAAkB,KAAK,CAAC;AAEpF,UAAM,KAAe;AAAA,MACnB,uBAAkB,IAAI;AAAA,MACtB;AAAA,MACA;AAAA,MACA,GAAI,aAAa,OAAO,QAAQ,WAAW,IACvC,CAAC,UAAU,IACX,aAAa,OAAO,QAAQ,IAAI,CAAC,WAC/B,KAAK,iBAAiB,OAAO,KAAK,CAAC,KAAK,iBAAiB,OAAO,IAAI,CAAC,iBAAiB,OAAO,SAAS,eAAe,iBAAiB,OAAO,QAAQ,CAAC,GAAG;AAAA,MAC/J;AAAA,MACA;AAAA,MACA,GAAG;AAAA,MACH;AAAA,MACA;AAAA,MACA,8BAA8B,aAAa,OAAO,WAAW;AAAA,MAC7D,gCAAgC,aAAa,OAAO,aAAa;AAAA,MACjE,+BAA+B,aAAa,OAAO,mBAAmB,QAAQ,4BAA4B,aAAa,OAAO,mBAAmB,sBAAsB,cAAc,aAAa,OAAO,mBAAmB,QAAQ;AAAA,MACpO,wBAAwB,aAAa,OAAO,SAAS,UAAW,aAAa,OAAO,SAAS,WAAW,mCAAmC,aAAa,OAAO,SAAS,UAAU,sBAAsB,qCAAsC,UAAU;AAAA,MACxP,yBAAyB,aAAa,gBAAgB;AAAA,MACtD,6BAA6B,aAAa,wBAAwB;AAAA,MAClE,GAAG;AAAA,MACH;AAAA,MACA;AAAA,MACA,GAAG,qBAAqB,aAAa,MAAM;AAAA,MAC3C;AAAA,MACA;AAAA,MACA,GAAG,oBAAoB,aAAa,MAAM;AAAA,MAC1C;AAAA,IACF;AAGA,UAAM,MAAM,GAAG,KAAK,IAAI;AACxB,UAAM,UAAU,IAAI,SAAS,WAAW,IAAI,MAAM,GAAG,QAAQ,IAAI,uBAAuB;AAExF,UAAM,iBAAiB,KAAK,KAAK,KAAK,eAAe,GAAG,IAAI,KAAK;AACjE,UAAM,gBAAgB,gBAAgB,OAAO;AAE7C,QAAI,KAAK,4CAA4C,cAAc,EAAE;AACrE,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,kBAAkB,aAAa;AAAA,MAC/B,0BAA0B,aAAa;AAAA,MACvC,cAAc,aAAa;AAAA,IAC7B;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-QKCXRS5A.js → chunk-OGXXGHW6.js}

@@ -44,6 +44,14 @@ function parseSharedEnvelope(raw) {
   const authority = requested.kind === "valid" ? requested.authority : "informational";
   return withOptionalFields(authority, record);
 }
+function isExpired(envelope, nowMs) {
+  if (!Number.isFinite(nowMs)) return false;
+  const expiresAt = envelope.expiresAt?.trim();
+  if (!expiresAt) return false;
+  const expiresAtMs = Date.parse(expiresAt);
+  if (!Number.isFinite(expiresAtMs)) return false;
+  return expiresAtMs <= nowMs;
+}
 
 // src/shared-context/authority-precedence.ts
 function isKnownAuthority(value) {
@@ -203,6 +211,8 @@ function resolveReadAuthority(envelope, allowBinding) {
 }
 
 export {
+  isExpired,
+  isStrictIsoInstant,
   UNATTRIBUTED_ACCESS_WRITE_ORIGIN,
   resolveWriteOrigin,
   composeWriteEnvelope,
@@ -210,4 +220,4 @@ export {
   envelopeFromScalars,
   resolveReadAuthority
 };
-//# sourceMappingURL=chunk-QKCXRS5A.js.map
+//# sourceMappingURL=chunk-OGXXGHW6.js.map

package/dist/{chunk-QKCXRS5A.js.map → chunk-OGXXGHW6.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/shared-context/governance.ts","../src/shared-context/authority-precedence.ts","../src/shared-context/envelope-actor.ts","../src/shared-context/iso-instant.ts","../src/shared-context/envelope-at.ts","../src/shared-context/envelope-id.ts","../src/shared-context/envelope-io.ts"],"sourcesContent":["/**\n * Shared-item authority envelope (issue #1957).\n *\n * Pure parse/default/expiry helpers over the authority classes. Binding is\n * never inferred, and the authority token is validated exactly as supplied\n * or stored — a padded value never resolves to a privileged class.\n */\n\nexport const SHARED_AUTHORITIES = [\"informational\", \"advisory\", \"binding\"] as const;\nexport type SharedAuthority = (typeof SHARED_AUTHORITIES)[number];\n\nexport interface SharedEnvelope {\n  sharedBy?: string;\n  authority: SharedAuthority;\n  expiresAt?: string;\n  supersedes?: string;\n}\n\nexport interface SharedEnvelopeInput {\n  sharedBy?: string;\n  authority?: string;\n  expiresAt?: string;\n  supersedes?: string;\n}\n\nexport interface ApplyDefaultEnvelopeOptions {\n  binding?: boolean;\n}\n\nfunction isSharedAuthority(value: string): value is SharedAuthority {\n  return (SHARED_AUTHORITIES as readonly string[]).includes(value);\n}\n\nfunction optionalString(value: unknown): string | undefined {\n  if (typeof value !== \"string\") return undefined;\n  const trimmed = value.trim();\n  return trimmed.length > 0 ? trimmed : undefined;\n}\n\ntype AuthorityToken =\n  | { kind: \"absent\" }\n  | { kind: \"invalid\"; raw: string }\n  | { kind: \"valid\"; authority: SharedAuthority };\n\n/**\n * Read the authority token EXACTLY as supplied or stored. A padded value\n * such as `\" binding \"` is malformed data, never a normalized match for a\n * privileged class: trimming first would let stored whitespace resolve as\n * binding/advisory (AGENTS.md rule 45). Only the empty string counts as\n * \"unspecified\"; whitespace-only is invalid.\n */\nfunction readExactAuthority(value: unknown): AuthorityToken {\n  if (typeof value !== \"string\" || value.length === 0) return { kind: \"absent\" };\n  if (!isSharedAuthority(value)) return { kind: \"invalid\", raw: value };\n  return { kind: \"valid\", authority: value };\n}\n\nfunction withOptionalFields(\n  authority: SharedAuthority,\n  source: { sharedBy?: unknown; expiresAt?: unknown; supersedes?: unknown },\n): SharedEnvelope {\n  const envelope: SharedEnvelope = { authority };\n  const sharedBy = optionalString(source.sharedBy);\n  const expiresAt = optionalString(source.expiresAt);\n  const supersedes = optionalString(source.supersedes);\n  if (sharedBy) envelope.sharedBy = sharedBy;\n  if (expiresAt) envelope.expiresAt = expiresAt;\n  if (supersedes) envelope.supersedes = supersedes;\n  return envelope;\n}\n\nexport function applyDefaultEnvelope(\n  input: SharedEnvelopeInput = {},\n  options: ApplyDefaultEnvelopeOptions = {},\n): SharedEnvelope {\n  const requested = readExactAuthority(input.authority);\n  if (requested.kind === \"invalid\") {\n    throw new Error(\n      `applyDefaultEnvelope: authority must be informational, advisory, or binding; got ${JSON.stringify(requested.raw)}`,\n    );\n  }\n  if (requested.kind === \"valid\" && requested.authority === \"binding\" && options.binding !== true) {\n    throw new Error(\"applyDefaultEnvelope: authority \\\"binding\\\" requires an explicit binding flag\");\n  }\n  return withOptionalFields(requested.kind === \"valid\" ? requested.authority : \"informational\", input);\n}\n\nexport function parseSharedEnvelope(raw: unknown): SharedEnvelope {\n  if (typeof raw !== \"object\" || raw === null || Array.isArray(raw)) {\n    return { authority: \"informational\" };\n  }\n  const record = raw as Record<string, unknown>;\n  const requested = readExactAuthority(record.authority);\n  const authority = requested.kind === \"valid\" ? requested.authority : \"informational\";\n  return withOptionalFields(authority, record);\n}\n\nexport function isExpired(envelope: Pick<SharedEnvelope, \"expiresAt\">, nowMs: number): boolean {\n  if (!Number.isFinite(nowMs)) return false;\n  const expiresAt = envelope.expiresAt?.trim();\n  if (!expiresAt) return false;\n  const expiresAtMs = Date.parse(expiresAt);\n  if (!Number.isFinite(expiresAtMs)) return false;\n  return expiresAtMs <= nowMs;\n}\n","/**\n * Shared-item authority precedence (issue #1957).\n *\n * Pure helpers over the authority classes owned by `governance.ts`\n * (`SHARED_AUTHORITIES`). Resolution is least-privilege: an absent,\n * malformed, or unrecognized authority never resolves above\n * `informational`, and `binding` additionally requires the explicit\n * `allowBinding` flag. The helpers are exported for callers; wiring them\n * into the shared-context read and write paths is a later slice.\n */\n\nimport { SHARED_AUTHORITIES, type SharedAuthority } from \"./governance.js\";\n\nexport { SHARED_AUTHORITIES as SHARED_AUTHORITY_CLASSES };\nexport type { SharedAuthority as SharedAuthorityClass };\n\nexport interface ResolveSharedAuthorityInput {\n  /** Raw authority value from an item's envelope, if any. */\n  authority?: unknown;\n  /** Explicit opt-in required before \"binding\" is honored. */\n  allowBinding?: boolean;\n}\n\nconst AUTHORITY_RANK: Readonly<Record<SharedAuthority, number>> = {\n  informational: 0,\n  advisory: 1,\n  binding: 2,\n};\n\nfunction isKnownAuthority(value: string): value is SharedAuthority {\n  return (SHARED_AUTHORITIES as readonly string[]).includes(value);\n}\n\n\nexport function resolveSharedAuthority(input: ResolveSharedAuthorityInput): SharedAuthority {\n  // Read the security switch ONCE. A getter (or a Proxy) can return undefined\n  // during validation and true at the decision, which would let binding\n  // through without a validated opt-in.\n  const allowBinding = input.allowBinding;\n  if (allowBinding !== undefined && typeof allowBinding !== \"boolean\") {\n    // The flag is the security switch, so a truthy string or number must\n    // not enable binding: reject it instead of coercing.\n    throw new TypeError(\n      `resolveSharedAuthority: allowBinding must be a boolean when supplied, got ${typeof allowBinding}`,\n    );\n  }\n  const authority = input.authority;\n  // Absent (missing key, undefined, null) and present-but-invalid both land\n  // on informational — the least-privileged class — so an unmarked or\n  // malformed legacy item can never be treated as binding. Validate the\n  // exact value: no trim, no case-fold, because \" binding\" and \"BINDING\"\n  // are unrecognized data, not normalized matches for a known class.\n  if (typeof authority !== \"string\") return \"informational\";\n  if (!isKnownAuthority(authority)) return \"informational\";\n  if (authority === \"binding\" && allowBinding !== true) {\n    // Downgrade rather than throw: a legacy item already carrying \"binding\"\n    // is stored data, not a caller bug, so it resolves to the highest class\n    // that does not require the explicit opt-in.\n    return \"advisory\";\n  }\n  return authority;\n}\n\nexport function compareSharedAuthority(a: string, b: string): number {\n  const rankA = isKnownAuthority(a) ? AUTHORITY_RANK[a] : AUTHORITY_RANK.informational;\n  const rankB = isKnownAuthority(b) ? AUTHORITY_RANK[b] : AUTHORITY_RANK.informational;\n  return Math.sign(rankA - rankB);\n}\n","/**\n * Shared-item envelope actor parse (issue #1957 leftover).\n *\n * Pure. Empty is missing_actor. Newline is invalid_actor.\n */\n\nexport type ParseEnvelopeActorResult =\n  | { ok: true; actor: string }\n  | { ok: false; error: \"missing_actor\" | \"invalid_actor\" };\n\nexport function parseEnvelopeActor(value: string): ParseEnvelopeActorResult {\n  const actor = value.trim();\n  if (actor.length === 0) return { ok: false, error: \"missing_actor\" };\n  if (actor.includes(\"\\n\")) return { ok: false, error: \"invalid_actor\" };\n  return { ok: true, actor };\n}\n","/**\n * Strict ISO-8601 instant validation for shared-context envelopes\n * (issue #1957 review round 3).\n *\n * `Date.parse` is permissive: under the supported Node runtime it reads\n * `\"2026-02-30\"` as March 2 and `\"1\"` as January 1 2001. A caller-supplied\n * expiry would therefore be silently reinterpreted into a governance deadline\n * the caller never asked for. Validate the ISO shape AND the calendar\n * components against the exact input, and reject rather than normalize.\n *\n * Extracted from `provenance.ts` so the envelope write path and the\n * provenance stamp share one validator instead of two copies.\n */\n\n// Linear ISO instant. No nested quantifiers.\nconst ISO_INSTANT =\n  /^(\\d{4})-(\\d{2})-(\\d{2})T(\\d{2}):(\\d{2}):(\\d{2})(?:\\.\\d+)?(?:Z|[+-]\\d{2}:\\d{2})$/;\n\n/**\n * True only for a calendar-valid ISO-8601 instant carrying an explicit zone.\n * Non-strings and non-finite parses are rejected explicitly, never coerced.\n */\nexport function isStrictIsoInstant(value: unknown): boolean {\n  if (typeof value !== \"string\") return false;\n  const match = ISO_INSTANT.exec(value);\n  if (!match) return false;\n  const year = Number(match[1]);\n  const month = Number(match[2]);\n  const day = Number(match[3]);\n  const hour = Number(match[4]);\n  const minute = Number(match[5]);\n  const second = Number(match[6]);\n  const utc = new Date(Date.UTC(year, month - 1, day, hour, minute, second));\n  return (\n    Number.isFinite(Date.parse(value)) &&\n    utc.getUTCFullYear() === year &&\n    utc.getUTCMonth() === month - 1 &&\n    utc.getUTCDate() === day &&\n    utc.getUTCHours() === hour &&\n    utc.getUTCMinutes() === minute &&\n    utc.getUTCSeconds() === second\n  );\n}\n","/**\n * Shared-item envelope at parse (issue #1957 leftover).\n *\n * Pure. Blank is missing_at. Anything that is not a calendar-valid ISO-8601\n * instant is invalid_at — including values permissive `Date.parse` would\n * silently reinterpret (`\"2026-02-30\"` -> March 2, `\"1\"` -> January 1 2001),\n * a whitespace-padded timestamp, and any non-string or non-finite input\n * (review round 3). `trim()` only detects blankness; validation reads the\n * exact value, so normalization can never widen what passes.\n */\n\nimport { isStrictIsoInstant } from \"./iso-instant.js\";\n\nexport type ParseEnvelopeAtResult =\n  | { ok: true; at: string }\n  | { ok: false; error: \"missing_at\" | \"invalid_at\" };\n\nexport function parseEnvelopeAt(value: string): ParseEnvelopeAtResult {\n  if (typeof value !== \"string\") return { ok: false, error: \"invalid_at\" };\n  if (value.trim().length === 0) return { ok: false, error: \"missing_at\" };\n  if (!isStrictIsoInstant(value)) return { ok: false, error: \"invalid_at\" };\n  return { ok: true, at: new Date(Date.parse(value)).toISOString() };\n}\n","/**\n * Shared-item envelope id parse (issue #1957 leftover).\n *\n * Pure. Empty is missing_id. Newline is invalid_id.\n */\n\nexport type ParseEnvelopeIdResult =\n  | { ok: true; id: string }\n  | { ok: false; error: \"missing_id\" | \"invalid_id\" };\n\nexport function parseEnvelopeId(value: string): ParseEnvelopeIdResult {\n  const id = value.trim();\n  if (id.length === 0) return { ok: false, error: \"missing_id\" };\n  if (id.includes(\"\\n\")) return { ok: false, error: \"invalid_id\" };\n  return { ok: true, id };\n}\n","/**\n * Shared-item envelope wiring (issue #1957, control 1: origin + authority).\n *\n * Bridges the pure envelope helpers onto the markdown frontmatter the\n * shared-context manager reads and writes.\n *\n * Write side rejects invalid input (an unrecognized authority or a binding\n * request without the config opt-in throws — never silently reinterpreted).\n * Read side resolves least privilege: a missing, malformed, or unrecognized\n * authority never resolves above informational, and stored binding\n * downgrades to advisory unless config opted in.\n */\n\nimport { applyDefaultEnvelope, parseSharedEnvelope, type SharedEnvelope } from \"./governance.js\";\nimport { resolveSharedAuthority } from \"./authority-precedence.js\";\nimport type { SharedAuthority } from \"./governance.js\";\nimport { parseEnvelopeActor } from \"./envelope-actor.js\";\nimport { parseEnvelopeAt } from \"./envelope-at.js\";\nimport { parseEnvelopeId } from \"./envelope-id.js\";\n\nexport interface ComposeWriteEnvelopeInput {\n  /** Governance origin. Becomes the envelope's `sharedBy`. */\n  origin: string;\n  /** Requested authority class. Unrecognized values throw. */\n  authority?: string;\n  /** Optional ISO-8601 expiry. Invalid timestamps throw. */\n  expiresAt?: string;\n  /** Optional id of the item this one supersedes. */\n  supersedes?: string;\n  /** Config opt-in (`sharedContextAllowBindingAuthority`). Binding throws without it. */\n  allowBinding: boolean;\n  /**\n   * Write instant for the expiry TTL policy (issue #2920). When finite, an\n   * `expiresAt` must land strictly after it and within the maximum TTL —\n   * a past or effectively-immortal expiry is a client input error, never a\n   * silently accepted stamp.\n   */\n  nowMs?: number;\n}\n\nfunction requireEnvelopeActor(agentId: string): string {\n  const parsed = parseEnvelopeActor(agentId);\n  if (!parsed.ok) {\n    throw new Error(`composeWriteEnvelope: agentId must be a non-blank single-line string (${parsed.error})`);\n  }\n  return parsed.actor;\n}\n\nfunction optionalEnvelopeAt(expiresAt: string | undefined): string | undefined {\n  if (expiresAt === undefined) return undefined;\n  const parsed = parseEnvelopeAt(expiresAt);\n  if (!parsed.ok) {\n    throw new Error(`composeWriteEnvelope: expiresAt must be a valid ISO-8601 timestamp (${parsed.error})`);\n  }\n  return parsed.at;\n}\n\n/** Maximum write-side TTL: 10 years. A farther `expiresAt` is rejected. */\nexport const MAX_WRITE_EXPIRES_AT_TTL_MS = 3650 * 24 * 60 * 60 * 1000;\n\nfunction assertBoundedFutureExpiry(expiresAt: string, nowMs: number): void {\n  const expiresAtMs = Date.parse(expiresAt);\n  if (expiresAtMs <= nowMs) {\n    throw new Error(\"composeWriteEnvelope: expiresAt must be an instant strictly after the write time\");\n  }\n  if (expiresAtMs - nowMs > MAX_WRITE_EXPIRES_AT_TTL_MS) {\n    throw new Error(\n      `composeWriteEnvelope: expiresAt exceeds the maximum TTL of ${MAX_WRITE_EXPIRES_AT_TTL_MS}ms`,\n    );\n  }\n}\n\nfunction optionalEnvelopeId(supersedes: string | undefined): string | undefined {\n  if (supersedes === undefined) return undefined;\n  const parsed = parseEnvelopeId(supersedes);\n  if (!parsed.ok) {\n    throw new Error(`composeWriteEnvelope: supersedes must be a non-blank single-line id (${parsed.error})`);\n  }\n  return parsed.id;\n}\n\n/**\n * Reserved governance origin for an authenticated external access write that\n * resolved no principal (`agentAccessHttp.principal` unset, no adapter\n * identity). Server-owned: the caller cannot mint or influence it, and the\n * caller-supplied `agentId` never becomes audit metadata on that path.\n */\nexport const UNATTRIBUTED_ACCESS_WRITE_ORIGIN = \"unattributed:access-surface\";\n\nexport interface ResolvedWriteIdentity {\n  /**\n   * Producer identity: frontmatter `agent`, on-disk segment, and the\n   * cross-signals grouping key. Self-declared by the caller only on\n   * surfaces that resolved no server identity; never decides authority.\n   */\n  agent: string;\n  /** Governance origin stamped as the envelope's `sharedBy`. */\n  origin: string;\n}\n\n/**\n * Resolve the producer identity and governance origin for a shared-context\n * write. They are different fields with different trust requirements:\n *\n * - The origin (`sharedBy`) is audit metadata and is always server-derived.\n *   When the surface resolved an authenticated identity, that identity IS the\n *   origin; when it resolved none but the write crosses an external\n *   boundary, the caller-supplied `unattributedOrigin` token is stamped\n *   instead — never the caller's value. Only a trusted in-process caller\n *   (no identity, no token) may stamp its own id as the origin.\n * - The producer (`agent`) drives grouping and display only. When an\n *   authenticated identity exists it is also the producer, and a\n *   caller-supplied `agentId` naming a different agent is REJECTED, so a\n *   caller can never publish an item attributed to another agent. Without a\n *   server identity the caller's label stands as the producer — collapsing\n *   it instead would merge every writer into one agent and erase\n *   multi-agent overlaps from `synthesizeCrossSignals`.\n */\nexport function resolveWriteOrigin(input: {\n  agentId: string;\n  authenticatedIdentity?: string;\n  unattributedOrigin?: string;\n}): ResolvedWriteIdentity {\n  const identity = input.authenticatedIdentity?.trim() ?? \"\";\n  if (identity.length > 0) {\n    const requested = input.agentId.trim();\n    if (requested.length > 0 && requested !== identity) {\n      throw new Error(\n        `shared-context write origin mismatch: authenticated identity ${JSON.stringify(identity)} cannot publish as ${JSON.stringify(requested)}`,\n      );\n    }\n    return { agent: identity, origin: identity };\n  }\n  const unattributed = input.unattributedOrigin?.trim() ?? \"\";\n  if (unattributed.length > 0) {\n    const label = input.agentId.trim();\n    return {\n      agent: label.length > 0 ? requireProducer(label) : requireProducer(unattributed),\n      origin: requireProducer(unattributed),\n    };\n  }\n  const actor = requireProducer(input.agentId);\n  return { agent: actor, origin: actor };\n}\n\nfunction requireProducer(value: string): string {\n  const parsed = parseEnvelopeActor(value);\n  if (!parsed.ok) {\n    throw new Error(`shared-context write producer must be a non-blank single-line string (${parsed.error})`);\n  }\n  return parsed.actor;\n}\n\n/**\n * Validate and compose the envelope for a shared-context write.\n * `sharedBy` is stamped from the server-derived origin — provenance is\n * never injected through item content or the caller's producer label.\n */\nexport function composeWriteEnvelope(input: ComposeWriteEnvelopeInput): SharedEnvelope {\n  const sharedBy = requireEnvelopeActor(input.origin);\n  const expiresAt = optionalEnvelopeAt(input.expiresAt);\n  if (expiresAt !== undefined && Number.isFinite(input.nowMs ?? Number.NaN)) {\n    assertBoundedFutureExpiry(expiresAt, input.nowMs as number);\n  }\n  const supersedes = optionalEnvelopeId(input.supersedes);\n  return applyDefaultEnvelope(\n    { sharedBy, authority: input.authority, expiresAt, supersedes },\n    { binding: input.allowBinding },\n  );\n}\n\n/** Serialize an envelope into frontmatter lines (caller adds the `---` fences). */\nexport function envelopeToFrontmatterLines(envelope: SharedEnvelope): string[] {\n  const line = (key: string, value: string) => `${key}: ${JSON.stringify(value)}`;\n  const lines = [line(\"sharedBy\", envelope.sharedBy ?? \"\"), line(\"authority\", envelope.authority)];\n  if (envelope.expiresAt !== undefined) lines.push(line(\"expiresAt\", envelope.expiresAt));\n  if (envelope.supersedes !== undefined) lines.push(line(\"supersedes\", envelope.supersedes));\n  return lines;\n}\n\n/**\n * Build an envelope from frontmatter scalars already read off a stored item.\n * Missing scalars (legacy items) compose to informational with no expiry.\n */\nexport function envelopeFromScalars(scalars: {\n  sharedBy: string | null;\n  authority: string | null;\n  expiresAt: string | null;\n  supersedes: string | null;\n}): SharedEnvelope {\n  const record: Record<string, string> = {};\n  if (scalars.sharedBy !== null) record.sharedBy = scalars.sharedBy;\n  if (scalars.authority !== null) record.authority = scalars.authority;\n  if (scalars.expiresAt !== null) record.expiresAt = scalars.expiresAt;\n  if (scalars.supersedes !== null) record.supersedes = scalars.supersedes;\n  return parseSharedEnvelope(record);\n}\n\n/**\n * Resolve a stored envelope's authority for read-side consumption.\n * Least privilege: unrecognized/missing stays informational; binding\n * requires the config opt-in or downgrades to advisory.\n */\nexport function resolveReadAuthority(\n  envelope: Pick<SharedEnvelope, \"authority\">,\n  allowBinding: boolean,\n): SharedAuthority {\n  return resolveSharedAuthority({ authority: envelope.authority, allowBinding });\n}\n"],"mappings":";AAQO,IAAM,qBAAqB,CAAC,iBAAiB,YAAY,SAAS;AAqBzE,SAAS,kBAAkB,OAAyC;AAClE,SAAQ,mBAAyC,SAAS,KAAK;AACjE;AAEA,SAAS,eAAe,OAAoC;AAC1D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAcA,SAAS,mBAAmB,OAAgC;AAC1D,MAAI,OAAO,UAAU,YAAY,MAAM,WAAW,EAAG,QAAO,EAAE,MAAM,SAAS;AAC7E,MAAI,CAAC,kBAAkB,KAAK,EAAG,QAAO,EAAE,MAAM,WAAW,KAAK,MAAM;AACpE,SAAO,EAAE,MAAM,SAAS,WAAW,MAAM;AAC3C;AAEA,SAAS,mBACP,WACA,QACgB;AAChB,QAAM,WAA2B,EAAE,UAAU;AAC7C,QAAM,WAAW,eAAe,OAAO,QAAQ;AAC/C,QAAM,YAAY,eAAe,OAAO,SAAS;AACjD,QAAM,aAAa,eAAe,OAAO,UAAU;AACnD,MAAI,SAAU,UAAS,WAAW;AAClC,MAAI,UAAW,UAAS,YAAY;AACpC,MAAI,WAAY,UAAS,aAAa;AACtC,SAAO;AACT;AAEO,SAAS,qBACd,QAA6B,CAAC,GAC9B,UAAuC,CAAC,GACxB;AAChB,QAAM,YAAY,mBAAmB,MAAM,SAAS;AACpD,MAAI,UAAU,SAAS,WAAW;AAChC,UAAM,IAAI;AAAA,MACR,oFAAoF,KAAK,UAAU,UAAU,GAAG,CAAC;AAAA,IACnH;AAAA,EACF;AACA,MAAI,UAAU,SAAS,WAAW,UAAU,cAAc,aAAa,QAAQ,YAAY,MAAM;AAC/F,UAAM,IAAI,MAAM,6EAA+E;AAAA,EACjG;AACA,SAAO,mBAAmB,UAAU,SAAS,UAAU,UAAU,YAAY,iBAAiB,KAAK;AACrG;AAEO,SAAS,oBAAoB,KAA8B;AAChE,MAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,MAAM,QAAQ,GAAG,GAAG;AACjE,WAAO,EAAE,WAAW,gBAAgB;AAAA,EACtC;AACA,QAAM,SAAS;AACf,QAAM,YAAY,mBAAmB,OAAO,SAAS;AACrD,QAAM,YAAY,UAAU,SAAS,UAAU,UAAU,YAAY;AACrE,SAAO,mBAAmB,WAAW,MAAM;AAC7C;;;AClEA,SAAS,iBAAiB,OAAyC;AACjE,SAAQ,mBAAyC,SAAS,KAAK;AACjE;AAGO,SAAS,uBAAuB,OAAqD;AAI1F,QAAM,eAAe,MAAM;AAC3B,MAAI,iBAAiB,UAAa,OAAO,iBAAiB,WAAW;AAGnE,UAAM,IAAI;AAAA,MACR,6EAA6E,OAAO,YAAY;AAAA,IAClG;AAAA,EACF;AACA,QAAM,YAAY,MAAM;AAMxB,MAAI,OAAO,cAAc,SAAU,QAAO;AAC1C,MAAI,CAAC,iBAAiB,SAAS,EAAG,QAAO;AACzC,MAAI,cAAc,aAAa,iBAAiB,MAAM;AAIpD,WAAO;AAAA,EACT;AACA,SAAO;AACT;;;ACnDO,SAAS,mBAAmB,OAAyC;AAC1E,QAAM,QAAQ,MAAM,KAAK;AACzB,MAAI,MAAM,WAAW,EAAG,QAAO,EAAE,IAAI,OAAO,OAAO,gBAAgB;AACnE,MAAI,MAAM,SAAS,IAAI,EAAG,QAAO,EAAE,IAAI,OAAO,OAAO,gBAAgB;AACrE,SAAO,EAAE,IAAI,MAAM,MAAM;AAC3B;;;ACAA,IAAM,cACJ;AAMK,SAAS,mBAAmB,OAAyB;AAC1D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,QAAQ,YAAY,KAAK,KAAK;AACpC,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,OAAO,MAAM,CAAC,CAAC;AAC5B,QAAM,QAAQ,OAAO,MAAM,CAAC,CAAC;AAC7B,QAAM,MAAM,OAAO,MAAM,CAAC,CAAC;AAC3B,QAAM,OAAO,OAAO,MAAM,CAAC,CAAC;AAC5B,QAAM,SAAS,OAAO,MAAM,CAAC,CAAC;AAC9B,QAAM,SAAS,OAAO,MAAM,CAAC,CAAC;AAC9B,QAAM,MAAM,IAAI,KAAK,KAAK,IAAI,MAAM,QAAQ,GAAG,KAAK,MAAM,QAAQ,MAAM,CAAC;AACzE,SACE,OAAO,SAAS,KAAK,MAAM,KAAK,CAAC,KACjC,IAAI,eAAe,MAAM,QACzB,IAAI,YAAY,MAAM,QAAQ,KAC9B,IAAI,WAAW,MAAM,OACrB,IAAI,YAAY,MAAM,QACtB,IAAI,cAAc,MAAM,UACxB,IAAI,cAAc,MAAM;AAE5B;;;ACzBO,SAAS,gBAAgB,OAAsC;AACpE,MAAI,OAAO,UAAU,SAAU,QAAO,EAAE,IAAI,OAAO,OAAO,aAAa;AACvE,MAAI,MAAM,KAAK,EAAE,WAAW,EAAG,QAAO,EAAE,IAAI,OAAO,OAAO,aAAa;AACvE,MAAI,CAAC,mBAAmB,KAAK,EAAG,QAAO,EAAE,IAAI,OAAO,OAAO,aAAa;AACxE,SAAO,EAAE,IAAI,MAAM,IAAI,IAAI,KAAK,KAAK,MAAM,KAAK,CAAC,EAAE,YAAY,EAAE;AACnE;;;ACZO,SAAS,gBAAgB,OAAsC;AACpE,QAAM,KAAK,MAAM,KAAK;AACtB,MAAI,GAAG,WAAW,EAAG,QAAO,EAAE,IAAI,OAAO,OAAO,aAAa;AAC7D,MAAI,GAAG,SAAS,IAAI,EAAG,QAAO,EAAE,IAAI,OAAO,OAAO,aAAa;AAC/D,SAAO,EAAE,IAAI,MAAM,GAAG;AACxB;;;ACyBA,SAAS,qBAAqB,SAAyB;AACrD,QAAM,SAAS,mBAAmB,OAAO;AACzC,MAAI,CAAC,OAAO,IAAI;AACd,UAAM,IAAI,MAAM,yEAAyE,OAAO,KAAK,GAAG;AAAA,EAC1G;AACA,SAAO,OAAO;AAChB;AAEA,SAAS,mBAAmB,WAAmD;AAC7E,MAAI,cAAc,OAAW,QAAO;AACpC,QAAM,SAAS,gBAAgB,SAAS;AACxC,MAAI,CAAC,OAAO,IAAI;AACd,UAAM,IAAI,MAAM,uEAAuE,OAAO,KAAK,GAAG;AAAA,EACxG;AACA,SAAO,OAAO;AAChB;AAGO,IAAM,8BAA8B,OAAO,KAAK,KAAK,KAAK;AAEjE,SAAS,0BAA0B,WAAmB,OAAqB;AACzE,QAAM,cAAc,KAAK,MAAM,SAAS;AACxC,MAAI,eAAe,OAAO;AACxB,UAAM,IAAI,MAAM,kFAAkF;AAAA,EACpG;AACA,MAAI,cAAc,QAAQ,6BAA6B;AACrD,UAAM,IAAI;AAAA,MACR,8DAA8D,2BAA2B;AAAA,IAC3F;AAAA,EACF;AACF;AAEA,SAAS,mBAAmB,YAAoD;AAC9E,MAAI,eAAe,OAAW,QAAO;AACrC,QAAM,SAAS,gBAAgB,UAAU;AACzC,MAAI,CAAC,OAAO,IAAI;AACd,UAAM,IAAI,MAAM,wEAAwE,OAAO,KAAK,GAAG;AAAA,EACzG;AACA,SAAO,OAAO;AAChB;AAQO,IAAM,mCAAmC;AA+BzC,SAAS,mBAAmB,OAIT;AACxB,QAAM,WAAW,MAAM,uBAAuB,KAAK,KAAK;AACxD,MAAI,SAAS,SAAS,GAAG;AACvB,UAAM,YAAY,MAAM,QAAQ,KAAK;AACrC,QAAI,UAAU,SAAS,KAAK,cAAc,UAAU;AAClD,YAAM,IAAI;AAAA,QACR,gEAAgE,KAAK,UAAU,QAAQ,CAAC,sBAAsB,KAAK,UAAU,SAAS,CAAC;AAAA,MACzI;AAAA,IACF;AACA,WAAO,EAAE,OAAO,UAAU,QAAQ,SAAS;AAAA,EAC7C;AACA,QAAM,eAAe,MAAM,oBAAoB,KAAK,KAAK;AACzD,MAAI,aAAa,SAAS,GAAG;AAC3B,UAAM,QAAQ,MAAM,QAAQ,KAAK;AACjC,WAAO;AAAA,MACL,OAAO,MAAM,SAAS,IAAI,gBAAgB,KAAK,IAAI,gBAAgB,YAAY;AAAA,MAC/E,QAAQ,gBAAgB,YAAY;AAAA,IACtC;AAAA,EACF;AACA,QAAM,QAAQ,gBAAgB,MAAM,OAAO;AAC3C,SAAO,EAAE,OAAO,OAAO,QAAQ,MAAM;AACvC;AAEA,SAAS,gBAAgB,OAAuB;AAC9C,QAAM,SAAS,mBAAmB,KAAK;AACvC,MAAI,CAAC,OAAO,IAAI;AACd,UAAM,IAAI,MAAM,yEAAyE,OAAO,KAAK,GAAG;AAAA,EAC1G;AACA,SAAO,OAAO;AAChB;AAOO,SAAS,qBAAqB,OAAkD;AACrF,QAAM,WAAW,qBAAqB,MAAM,MAAM;AAClD,QAAM,YAAY,mBAAmB,MAAM,SAAS;AACpD,MAAI,cAAc,UAAa,OAAO,SAAS,MAAM,SAAS,OAAO,GAAG,GAAG;AACzE,8BAA0B,WAAW,MAAM,KAAe;AAAA,EAC5D;AACA,QAAM,aAAa,mBAAmB,MAAM,UAAU;AACtD,SAAO;AAAA,IACL,EAAE,UAAU,WAAW,MAAM,WAAW,WAAW,WAAW;AAAA,IAC9D,EAAE,SAAS,MAAM,aAAa;AAAA,EAChC;AACF;AAGO,SAAS,2BAA2B,UAAoC;AAC7E,QAAM,OAAO,CAAC,KAAa,UAAkB,GAAG,GAAG,KAAK,KAAK,UAAU,KAAK,CAAC;AAC7E,QAAM,QAAQ,CAAC,KAAK,YAAY,SAAS,YAAY,EAAE,GAAG,KAAK,aAAa,SAAS,SAAS,CAAC;AAC/F,MAAI,SAAS,cAAc,OAAW,OAAM,KAAK,KAAK,aAAa,SAAS,SAAS,CAAC;AACtF,MAAI,SAAS,eAAe,OAAW,OAAM,KAAK,KAAK,cAAc,SAAS,UAAU,CAAC;AACzF,SAAO;AACT;AAMO,SAAS,oBAAoB,SAKjB;AACjB,QAAM,SAAiC,CAAC;AACxC,MAAI,QAAQ,aAAa,KAAM,QAAO,WAAW,QAAQ;AACzD,MAAI,QAAQ,cAAc,KAAM,QAAO,YAAY,QAAQ;AAC3D,MAAI,QAAQ,cAAc,KAAM,QAAO,YAAY,QAAQ;AAC3D,MAAI,QAAQ,eAAe,KAAM,QAAO,aAAa,QAAQ;AAC7D,SAAO,oBAAoB,MAAM;AACnC;AAOO,SAAS,qBACd,UACA,cACiB;AACjB,SAAO,uBAAuB,EAAE,WAAW,SAAS,WAAW,aAAa,CAAC;AAC/E;","names":[]}
+{"version":3,"sources":["../src/shared-context/governance.ts","../src/shared-context/authority-precedence.ts","../src/shared-context/envelope-actor.ts","../src/shared-context/iso-instant.ts","../src/shared-context/envelope-at.ts","../src/shared-context/envelope-id.ts","../src/shared-context/envelope-io.ts"],"sourcesContent":["/**\n * Shared-item authority envelope (issue #1957).\n *\n * Pure parse/default/expiry helpers over the authority classes. Binding is\n * never inferred, and the authority token is validated exactly as supplied\n * or stored — a padded value never resolves to a privileged class.\n */\n\nexport const SHARED_AUTHORITIES = [\"informational\", \"advisory\", \"binding\"] as const;\nexport type SharedAuthority = (typeof SHARED_AUTHORITIES)[number];\n\nexport interface SharedEnvelope {\n  sharedBy?: string;\n  authority: SharedAuthority;\n  expiresAt?: string;\n  supersedes?: string;\n}\n\nexport interface SharedEnvelopeInput {\n  sharedBy?: string;\n  authority?: string;\n  expiresAt?: string;\n  supersedes?: string;\n}\n\nexport interface ApplyDefaultEnvelopeOptions {\n  binding?: boolean;\n}\n\nfunction isSharedAuthority(value: string): value is SharedAuthority {\n  return (SHARED_AUTHORITIES as readonly string[]).includes(value);\n}\n\nfunction optionalString(value: unknown): string | undefined {\n  if (typeof value !== \"string\") return undefined;\n  const trimmed = value.trim();\n  return trimmed.length > 0 ? trimmed : undefined;\n}\n\ntype AuthorityToken =\n  | { kind: \"absent\" }\n  | { kind: \"invalid\"; raw: string }\n  | { kind: \"valid\"; authority: SharedAuthority };\n\n/**\n * Read the authority token EXACTLY as supplied or stored. A padded value\n * such as `\" binding \"` is malformed data, never a normalized match for a\n * privileged class: trimming first would let stored whitespace resolve as\n * binding/advisory (AGENTS.md rule 45). Only the empty string counts as\n * \"unspecified\"; whitespace-only is invalid.\n */\nfunction readExactAuthority(value: unknown): AuthorityToken {\n  if (typeof value !== \"string\" || value.length === 0) return { kind: \"absent\" };\n  if (!isSharedAuthority(value)) return { kind: \"invalid\", raw: value };\n  return { kind: \"valid\", authority: value };\n}\n\nfunction withOptionalFields(\n  authority: SharedAuthority,\n  source: { sharedBy?: unknown; expiresAt?: unknown; supersedes?: unknown },\n): SharedEnvelope {\n  const envelope: SharedEnvelope = { authority };\n  const sharedBy = optionalString(source.sharedBy);\n  const expiresAt = optionalString(source.expiresAt);\n  const supersedes = optionalString(source.supersedes);\n  if (sharedBy) envelope.sharedBy = sharedBy;\n  if (expiresAt) envelope.expiresAt = expiresAt;\n  if (supersedes) envelope.supersedes = supersedes;\n  return envelope;\n}\n\nexport function applyDefaultEnvelope(\n  input: SharedEnvelopeInput = {},\n  options: ApplyDefaultEnvelopeOptions = {},\n): SharedEnvelope {\n  const requested = readExactAuthority(input.authority);\n  if (requested.kind === \"invalid\") {\n    throw new Error(\n      `applyDefaultEnvelope: authority must be informational, advisory, or binding; got ${JSON.stringify(requested.raw)}`,\n    );\n  }\n  if (requested.kind === \"valid\" && requested.authority === \"binding\" && options.binding !== true) {\n    throw new Error(\"applyDefaultEnvelope: authority \\\"binding\\\" requires an explicit binding flag\");\n  }\n  return withOptionalFields(requested.kind === \"valid\" ? requested.authority : \"informational\", input);\n}\n\nexport function parseSharedEnvelope(raw: unknown): SharedEnvelope {\n  if (typeof raw !== \"object\" || raw === null || Array.isArray(raw)) {\n    return { authority: \"informational\" };\n  }\n  const record = raw as Record<string, unknown>;\n  const requested = readExactAuthority(record.authority);\n  const authority = requested.kind === \"valid\" ? requested.authority : \"informational\";\n  return withOptionalFields(authority, record);\n}\n\nexport function isExpired(envelope: Pick<SharedEnvelope, \"expiresAt\">, nowMs: number): boolean {\n  if (!Number.isFinite(nowMs)) return false;\n  const expiresAt = envelope.expiresAt?.trim();\n  if (!expiresAt) return false;\n  const expiresAtMs = Date.parse(expiresAt);\n  if (!Number.isFinite(expiresAtMs)) return false;\n  return expiresAtMs <= nowMs;\n}\n","/**\n * Shared-item authority precedence (issue #1957).\n *\n * Pure helpers over the authority classes owned by `governance.ts`\n * (`SHARED_AUTHORITIES`). Resolution is least-privilege: an absent,\n * malformed, or unrecognized authority never resolves above\n * `informational`, and `binding` additionally requires the explicit\n * `allowBinding` flag. The helpers are exported for callers; wiring them\n * into the shared-context read and write paths is a later slice.\n */\n\nimport { SHARED_AUTHORITIES, type SharedAuthority } from \"./governance.js\";\n\nexport { SHARED_AUTHORITIES as SHARED_AUTHORITY_CLASSES };\nexport type { SharedAuthority as SharedAuthorityClass };\n\nexport interface ResolveSharedAuthorityInput {\n  /** Raw authority value from an item's envelope, if any. */\n  authority?: unknown;\n  /** Explicit opt-in required before \"binding\" is honored. */\n  allowBinding?: boolean;\n}\n\nconst AUTHORITY_RANK: Readonly<Record<SharedAuthority, number>> = {\n  informational: 0,\n  advisory: 1,\n  binding: 2,\n};\n\nfunction isKnownAuthority(value: string): value is SharedAuthority {\n  return (SHARED_AUTHORITIES as readonly string[]).includes(value);\n}\n\n\nexport function resolveSharedAuthority(input: ResolveSharedAuthorityInput): SharedAuthority {\n  // Read the security switch ONCE. A getter (or a Proxy) can return undefined\n  // during validation and true at the decision, which would let binding\n  // through without a validated opt-in.\n  const allowBinding = input.allowBinding;\n  if (allowBinding !== undefined && typeof allowBinding !== \"boolean\") {\n    // The flag is the security switch, so a truthy string or number must\n    // not enable binding: reject it instead of coercing.\n    throw new TypeError(\n      `resolveSharedAuthority: allowBinding must be a boolean when supplied, got ${typeof allowBinding}`,\n    );\n  }\n  const authority = input.authority;\n  // Absent (missing key, undefined, null) and present-but-invalid both land\n  // on informational — the least-privileged class — so an unmarked or\n  // malformed legacy item can never be treated as binding. Validate the\n  // exact value: no trim, no case-fold, because \" binding\" and \"BINDING\"\n  // are unrecognized data, not normalized matches for a known class.\n  if (typeof authority !== \"string\") return \"informational\";\n  if (!isKnownAuthority(authority)) return \"informational\";\n  if (authority === \"binding\" && allowBinding !== true) {\n    // Downgrade rather than throw: a legacy item already carrying \"binding\"\n    // is stored data, not a caller bug, so it resolves to the highest class\n    // that does not require the explicit opt-in.\n    return \"advisory\";\n  }\n  return authority;\n}\n\nexport function compareSharedAuthority(a: string, b: string): number {\n  const rankA = isKnownAuthority(a) ? AUTHORITY_RANK[a] : AUTHORITY_RANK.informational;\n  const rankB = isKnownAuthority(b) ? AUTHORITY_RANK[b] : AUTHORITY_RANK.informational;\n  return Math.sign(rankA - rankB);\n}\n","/**\n * Shared-item envelope actor parse (issue #1957 leftover).\n *\n * Pure. Empty is missing_actor. Newline is invalid_actor.\n */\n\nexport type ParseEnvelopeActorResult =\n  | { ok: true; actor: string }\n  | { ok: false; error: \"missing_actor\" | \"invalid_actor\" };\n\nexport function parseEnvelopeActor(value: string): ParseEnvelopeActorResult {\n  const actor = value.trim();\n  if (actor.length === 0) return { ok: false, error: \"missing_actor\" };\n  if (actor.includes(\"\\n\")) return { ok: false, error: \"invalid_actor\" };\n  return { ok: true, actor };\n}\n","/**\n * Strict ISO-8601 instant validation for shared-context envelopes\n * (issue #1957 review round 3).\n *\n * `Date.parse` is permissive: under the supported Node runtime it reads\n * `\"2026-02-30\"` as March 2 and `\"1\"` as January 1 2001. A caller-supplied\n * expiry would therefore be silently reinterpreted into a governance deadline\n * the caller never asked for. Validate the ISO shape AND the calendar\n * components against the exact input, and reject rather than normalize.\n *\n * Extracted from `provenance.ts` so the envelope write path and the\n * provenance stamp share one validator instead of two copies.\n */\n\n// Linear ISO instant. No nested quantifiers.\nconst ISO_INSTANT =\n  /^(\\d{4})-(\\d{2})-(\\d{2})T(\\d{2}):(\\d{2}):(\\d{2})(?:\\.\\d+)?(?:Z|[+-]\\d{2}:\\d{2})$/;\n\n/**\n * True only for a calendar-valid ISO-8601 instant carrying an explicit zone.\n * Non-strings and non-finite parses are rejected explicitly, never coerced.\n */\nexport function isStrictIsoInstant(value: unknown): boolean {\n  if (typeof value !== \"string\") return false;\n  const match = ISO_INSTANT.exec(value);\n  if (!match) return false;\n  const year = Number(match[1]);\n  const month = Number(match[2]);\n  const day = Number(match[3]);\n  const hour = Number(match[4]);\n  const minute = Number(match[5]);\n  const second = Number(match[6]);\n  const utc = new Date(Date.UTC(year, month - 1, day, hour, minute, second));\n  return (\n    Number.isFinite(Date.parse(value)) &&\n    utc.getUTCFullYear() === year &&\n    utc.getUTCMonth() === month - 1 &&\n    utc.getUTCDate() === day &&\n    utc.getUTCHours() === hour &&\n    utc.getUTCMinutes() === minute &&\n    utc.getUTCSeconds() === second\n  );\n}\n","/**\n * Shared-item envelope at parse (issue #1957 leftover).\n *\n * Pure. Blank is missing_at. Anything that is not a calendar-valid ISO-8601\n * instant is invalid_at — including values permissive `Date.parse` would\n * silently reinterpret (`\"2026-02-30\"` -> March 2, `\"1\"` -> January 1 2001),\n * a whitespace-padded timestamp, and any non-string or non-finite input\n * (review round 3). `trim()` only detects blankness; validation reads the\n * exact value, so normalization can never widen what passes.\n */\n\nimport { isStrictIsoInstant } from \"./iso-instant.js\";\n\nexport type ParseEnvelopeAtResult =\n  | { ok: true; at: string }\n  | { ok: false; error: \"missing_at\" | \"invalid_at\" };\n\nexport function parseEnvelopeAt(value: string): ParseEnvelopeAtResult {\n  if (typeof value !== \"string\") return { ok: false, error: \"invalid_at\" };\n  if (value.trim().length === 0) return { ok: false, error: \"missing_at\" };\n  if (!isStrictIsoInstant(value)) return { ok: false, error: \"invalid_at\" };\n  return { ok: true, at: new Date(Date.parse(value)).toISOString() };\n}\n","/**\n * Shared-item envelope id parse (issue #1957 leftover).\n *\n * Pure. Empty is missing_id. Newline is invalid_id.\n */\n\nexport type ParseEnvelopeIdResult =\n  | { ok: true; id: string }\n  | { ok: false; error: \"missing_id\" | \"invalid_id\" };\n\nexport function parseEnvelopeId(value: string): ParseEnvelopeIdResult {\n  const id = value.trim();\n  if (id.length === 0) return { ok: false, error: \"missing_id\" };\n  if (id.includes(\"\\n\")) return { ok: false, error: \"invalid_id\" };\n  return { ok: true, id };\n}\n","/**\n * Shared-item envelope wiring (issue #1957, control 1: origin + authority).\n *\n * Bridges the pure envelope helpers onto the markdown frontmatter the\n * shared-context manager reads and writes.\n *\n * Write side rejects invalid input (an unrecognized authority or a binding\n * request without the config opt-in throws — never silently reinterpreted).\n * Read side resolves least privilege: a missing, malformed, or unrecognized\n * authority never resolves above informational, and stored binding\n * downgrades to advisory unless config opted in.\n */\n\nimport { applyDefaultEnvelope, parseSharedEnvelope, type SharedEnvelope } from \"./governance.js\";\nimport { resolveSharedAuthority } from \"./authority-precedence.js\";\nimport type { SharedAuthority } from \"./governance.js\";\nimport { parseEnvelopeActor } from \"./envelope-actor.js\";\nimport { parseEnvelopeAt } from \"./envelope-at.js\";\nimport { parseEnvelopeId } from \"./envelope-id.js\";\n\nexport interface ComposeWriteEnvelopeInput {\n  /** Governance origin. Becomes the envelope's `sharedBy`. */\n  origin: string;\n  /** Requested authority class. Unrecognized values throw. */\n  authority?: string;\n  /** Optional ISO-8601 expiry. Invalid timestamps throw. */\n  expiresAt?: string;\n  /** Optional id of the item this one supersedes. */\n  supersedes?: string;\n  /** Config opt-in (`sharedContextAllowBindingAuthority`). Binding throws without it. */\n  allowBinding: boolean;\n  /**\n   * Write instant for the expiry TTL policy (issue #2920). When finite, an\n   * `expiresAt` must land strictly after it and within the maximum TTL —\n   * a past or effectively-immortal expiry is a client input error, never a\n   * silently accepted stamp.\n   */\n  nowMs?: number;\n}\n\nfunction requireEnvelopeActor(agentId: string): string {\n  const parsed = parseEnvelopeActor(agentId);\n  if (!parsed.ok) {\n    throw new Error(`composeWriteEnvelope: agentId must be a non-blank single-line string (${parsed.error})`);\n  }\n  return parsed.actor;\n}\n\nfunction optionalEnvelopeAt(expiresAt: string | undefined): string | undefined {\n  if (expiresAt === undefined) return undefined;\n  const parsed = parseEnvelopeAt(expiresAt);\n  if (!parsed.ok) {\n    throw new Error(`composeWriteEnvelope: expiresAt must be a valid ISO-8601 timestamp (${parsed.error})`);\n  }\n  return parsed.at;\n}\n\n/** Maximum write-side TTL: 10 years. A farther `expiresAt` is rejected. */\nexport const MAX_WRITE_EXPIRES_AT_TTL_MS = 3650 * 24 * 60 * 60 * 1000;\n\nfunction assertBoundedFutureExpiry(expiresAt: string, nowMs: number): void {\n  const expiresAtMs = Date.parse(expiresAt);\n  if (expiresAtMs <= nowMs) {\n    throw new Error(\"composeWriteEnvelope: expiresAt must be an instant strictly after the write time\");\n  }\n  if (expiresAtMs - nowMs > MAX_WRITE_EXPIRES_AT_TTL_MS) {\n    throw new Error(\n      `composeWriteEnvelope: expiresAt exceeds the maximum TTL of ${MAX_WRITE_EXPIRES_AT_TTL_MS}ms`,\n    );\n  }\n}\n\nfunction optionalEnvelopeId(supersedes: string | undefined): string | undefined {\n  if (supersedes === undefined) return undefined;\n  const parsed = parseEnvelopeId(supersedes);\n  if (!parsed.ok) {\n    throw new Error(`composeWriteEnvelope: supersedes must be a non-blank single-line id (${parsed.error})`);\n  }\n  return parsed.id;\n}\n\n/**\n * Reserved governance origin for an authenticated external access write that\n * resolved no principal (`agentAccessHttp.principal` unset, no adapter\n * identity). Server-owned: the caller cannot mint or influence it, and the\n * caller-supplied `agentId` never becomes audit metadata on that path.\n */\nexport const UNATTRIBUTED_ACCESS_WRITE_ORIGIN = \"unattributed:access-surface\";\n\nexport interface ResolvedWriteIdentity {\n  /**\n   * Producer identity: frontmatter `agent`, on-disk segment, and the\n   * cross-signals grouping key. Self-declared by the caller only on\n   * surfaces that resolved no server identity; never decides authority.\n   */\n  agent: string;\n  /** Governance origin stamped as the envelope's `sharedBy`. */\n  origin: string;\n}\n\n/**\n * Resolve the producer identity and governance origin for a shared-context\n * write. They are different fields with different trust requirements:\n *\n * - The origin (`sharedBy`) is audit metadata and is always server-derived.\n *   When the surface resolved an authenticated identity, that identity IS the\n *   origin; when it resolved none but the write crosses an external\n *   boundary, the caller-supplied `unattributedOrigin` token is stamped\n *   instead — never the caller's value. Only a trusted in-process caller\n *   (no identity, no token) may stamp its own id as the origin.\n * - The producer (`agent`) drives grouping and display only. When an\n *   authenticated identity exists it is also the producer, and a\n *   caller-supplied `agentId` naming a different agent is REJECTED, so a\n *   caller can never publish an item attributed to another agent. Without a\n *   server identity the caller's label stands as the producer — collapsing\n *   it instead would merge every writer into one agent and erase\n *   multi-agent overlaps from `synthesizeCrossSignals`.\n */\nexport function resolveWriteOrigin(input: {\n  agentId: string;\n  authenticatedIdentity?: string;\n  unattributedOrigin?: string;\n}): ResolvedWriteIdentity {\n  const identity = input.authenticatedIdentity?.trim() ?? \"\";\n  if (identity.length > 0) {\n    const requested = input.agentId.trim();\n    if (requested.length > 0 && requested !== identity) {\n      throw new Error(\n        `shared-context write origin mismatch: authenticated identity ${JSON.stringify(identity)} cannot publish as ${JSON.stringify(requested)}`,\n      );\n    }\n    return { agent: identity, origin: identity };\n  }\n  const unattributed = input.unattributedOrigin?.trim() ?? \"\";\n  if (unattributed.length > 0) {\n    const label = input.agentId.trim();\n    return {\n      agent: label.length > 0 ? requireProducer(label) : requireProducer(unattributed),\n      origin: requireProducer(unattributed),\n    };\n  }\n  const actor = requireProducer(input.agentId);\n  return { agent: actor, origin: actor };\n}\n\nfunction requireProducer(value: string): string {\n  const parsed = parseEnvelopeActor(value);\n  if (!parsed.ok) {\n    throw new Error(`shared-context write producer must be a non-blank single-line string (${parsed.error})`);\n  }\n  return parsed.actor;\n}\n\n/**\n * Validate and compose the envelope for a shared-context write.\n * `sharedBy` is stamped from the server-derived origin — provenance is\n * never injected through item content or the caller's producer label.\n */\nexport function composeWriteEnvelope(input: ComposeWriteEnvelopeInput): SharedEnvelope {\n  const sharedBy = requireEnvelopeActor(input.origin);\n  const expiresAt = optionalEnvelopeAt(input.expiresAt);\n  if (expiresAt !== undefined && Number.isFinite(input.nowMs ?? Number.NaN)) {\n    assertBoundedFutureExpiry(expiresAt, input.nowMs as number);\n  }\n  const supersedes = optionalEnvelopeId(input.supersedes);\n  return applyDefaultEnvelope(\n    { sharedBy, authority: input.authority, expiresAt, supersedes },\n    { binding: input.allowBinding },\n  );\n}\n\n/** Serialize an envelope into frontmatter lines (caller adds the `---` fences). */\nexport function envelopeToFrontmatterLines(envelope: SharedEnvelope): string[] {\n  const line = (key: string, value: string) => `${key}: ${JSON.stringify(value)}`;\n  const lines = [line(\"sharedBy\", envelope.sharedBy ?? \"\"), line(\"authority\", envelope.authority)];\n  if (envelope.expiresAt !== undefined) lines.push(line(\"expiresAt\", envelope.expiresAt));\n  if (envelope.supersedes !== undefined) lines.push(line(\"supersedes\", envelope.supersedes));\n  return lines;\n}\n\n/**\n * Build an envelope from frontmatter scalars already read off a stored item.\n * Missing scalars (legacy items) compose to informational with no expiry.\n */\nexport function envelopeFromScalars(scalars: {\n  sharedBy: string | null;\n  authority: string | null;\n  expiresAt: string | null;\n  supersedes: string | null;\n}): SharedEnvelope {\n  const record: Record<string, string> = {};\n  if (scalars.sharedBy !== null) record.sharedBy = scalars.sharedBy;\n  if (scalars.authority !== null) record.authority = scalars.authority;\n  if (scalars.expiresAt !== null) record.expiresAt = scalars.expiresAt;\n  if (scalars.supersedes !== null) record.supersedes = scalars.supersedes;\n  return parseSharedEnvelope(record);\n}\n\n/**\n * Resolve a stored envelope's authority for read-side consumption.\n * Least privilege: unrecognized/missing stays informational; binding\n * requires the config opt-in or downgrades to advisory.\n */\nexport function resolveReadAuthority(\n  envelope: Pick<SharedEnvelope, \"authority\">,\n  allowBinding: boolean,\n): SharedAuthority {\n  return resolveSharedAuthority({ authority: envelope.authority, allowBinding });\n}\n"],"mappings":";AAQO,IAAM,qBAAqB,CAAC,iBAAiB,YAAY,SAAS;AAqBzE,SAAS,kBAAkB,OAAyC;AAClE,SAAQ,mBAAyC,SAAS,KAAK;AACjE;AAEA,SAAS,eAAe,OAAoC;AAC1D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAcA,SAAS,mBAAmB,OAAgC;AAC1D,MAAI,OAAO,UAAU,YAAY,MAAM,WAAW,EAAG,QAAO,EAAE,MAAM,SAAS;AAC7E,MAAI,CAAC,kBAAkB,KAAK,EAAG,QAAO,EAAE,MAAM,WAAW,KAAK,MAAM;AACpE,SAAO,EAAE,MAAM,SAAS,WAAW,MAAM;AAC3C;AAEA,SAAS,mBACP,WACA,QACgB;AAChB,QAAM,WAA2B,EAAE,UAAU;AAC7C,QAAM,WAAW,eAAe,OAAO,QAAQ;AAC/C,QAAM,YAAY,eAAe,OAAO,SAAS;AACjD,QAAM,aAAa,eAAe,OAAO,UAAU;AACnD,MAAI,SAAU,UAAS,WAAW;AAClC,MAAI,UAAW,UAAS,YAAY;AACpC,MAAI,WAAY,UAAS,aAAa;AACtC,SAAO;AACT;AAEO,SAAS,qBACd,QAA6B,CAAC,GAC9B,UAAuC,CAAC,GACxB;AAChB,QAAM,YAAY,mBAAmB,MAAM,SAAS;AACpD,MAAI,UAAU,SAAS,WAAW;AAChC,UAAM,IAAI;AAAA,MACR,oFAAoF,KAAK,UAAU,UAAU,GAAG,CAAC;AAAA,IACnH;AAAA,EACF;AACA,MAAI,UAAU,SAAS,WAAW,UAAU,cAAc,aAAa,QAAQ,YAAY,MAAM;AAC/F,UAAM,IAAI,MAAM,6EAA+E;AAAA,EACjG;AACA,SAAO,mBAAmB,UAAU,SAAS,UAAU,UAAU,YAAY,iBAAiB,KAAK;AACrG;AAEO,SAAS,oBAAoB,KAA8B;AAChE,MAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,MAAM,QAAQ,GAAG,GAAG;AACjE,WAAO,EAAE,WAAW,gBAAgB;AAAA,EACtC;AACA,QAAM,SAAS;AACf,QAAM,YAAY,mBAAmB,OAAO,SAAS;AACrD,QAAM,YAAY,UAAU,SAAS,UAAU,UAAU,YAAY;AACrE,SAAO,mBAAmB,WAAW,MAAM;AAC7C;AAEO,SAAS,UAAU,UAA6C,OAAwB;AAC7F,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACpC,QAAM,YAAY,SAAS,WAAW,KAAK;AAC3C,MAAI,CAAC,UAAW,QAAO;AACvB,QAAM,cAAc,KAAK,MAAM,SAAS;AACxC,MAAI,CAAC,OAAO,SAAS,WAAW,EAAG,QAAO;AAC1C,SAAO,eAAe;AACxB;;;AC3EA,SAAS,iBAAiB,OAAyC;AACjE,SAAQ,mBAAyC,SAAS,KAAK;AACjE;AAGO,SAAS,uBAAuB,OAAqD;AAI1F,QAAM,eAAe,MAAM;AAC3B,MAAI,iBAAiB,UAAa,OAAO,iBAAiB,WAAW;AAGnE,UAAM,IAAI;AAAA,MACR,6EAA6E,OAAO,YAAY;AAAA,IAClG;AAAA,EACF;AACA,QAAM,YAAY,MAAM;AAMxB,MAAI,OAAO,cAAc,SAAU,QAAO;AAC1C,MAAI,CAAC,iBAAiB,SAAS,EAAG,QAAO;AACzC,MAAI,cAAc,aAAa,iBAAiB,MAAM;AAIpD,WAAO;AAAA,EACT;AACA,SAAO;AACT;;;ACnDO,SAAS,mBAAmB,OAAyC;AAC1E,QAAM,QAAQ,MAAM,KAAK;AACzB,MAAI,MAAM,WAAW,EAAG,QAAO,EAAE,IAAI,OAAO,OAAO,gBAAgB;AACnE,MAAI,MAAM,SAAS,IAAI,EAAG,QAAO,EAAE,IAAI,OAAO,OAAO,gBAAgB;AACrE,SAAO,EAAE,IAAI,MAAM,MAAM;AAC3B;;;ACAA,IAAM,cACJ;AAMK,SAAS,mBAAmB,OAAyB;AAC1D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,QAAQ,YAAY,KAAK,KAAK;AACpC,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,OAAO,MAAM,CAAC,CAAC;AAC5B,QAAM,QAAQ,OAAO,MAAM,CAAC,CAAC;AAC7B,QAAM,MAAM,OAAO,MAAM,CAAC,CAAC;AAC3B,QAAM,OAAO,OAAO,MAAM,CAAC,CAAC;AAC5B,QAAM,SAAS,OAAO,MAAM,CAAC,CAAC;AAC9B,QAAM,SAAS,OAAO,MAAM,CAAC,CAAC;AAC9B,QAAM,MAAM,IAAI,KAAK,KAAK,IAAI,MAAM,QAAQ,GAAG,KAAK,MAAM,QAAQ,MAAM,CAAC;AACzE,SACE,OAAO,SAAS,KAAK,MAAM,KAAK,CAAC,KACjC,IAAI,eAAe,MAAM,QACzB,IAAI,YAAY,MAAM,QAAQ,KAC9B,IAAI,WAAW,MAAM,OACrB,IAAI,YAAY,MAAM,QACtB,IAAI,cAAc,MAAM,UACxB,IAAI,cAAc,MAAM;AAE5B;;;ACzBO,SAAS,gBAAgB,OAAsC;AACpE,MAAI,OAAO,UAAU,SAAU,QAAO,EAAE,IAAI,OAAO,OAAO,aAAa;AACvE,MAAI,MAAM,KAAK,EAAE,WAAW,EAAG,QAAO,EAAE,IAAI,OAAO,OAAO,aAAa;AACvE,MAAI,CAAC,mBAAmB,KAAK,EAAG,QAAO,EAAE,IAAI,OAAO,OAAO,aAAa;AACxE,SAAO,EAAE,IAAI,MAAM,IAAI,IAAI,KAAK,KAAK,MAAM,KAAK,CAAC,EAAE,YAAY,EAAE;AACnE;;;ACZO,SAAS,gBAAgB,OAAsC;AACpE,QAAM,KAAK,MAAM,KAAK;AACtB,MAAI,GAAG,WAAW,EAAG,QAAO,EAAE,IAAI,OAAO,OAAO,aAAa;AAC7D,MAAI,GAAG,SAAS,IAAI,EAAG,QAAO,EAAE,IAAI,OAAO,OAAO,aAAa;AAC/D,SAAO,EAAE,IAAI,MAAM,GAAG;AACxB;;;ACyBA,SAAS,qBAAqB,SAAyB;AACrD,QAAM,SAAS,mBAAmB,OAAO;AACzC,MAAI,CAAC,OAAO,IAAI;AACd,UAAM,IAAI,MAAM,yEAAyE,OAAO,KAAK,GAAG;AAAA,EAC1G;AACA,SAAO,OAAO;AAChB;AAEA,SAAS,mBAAmB,WAAmD;AAC7E,MAAI,cAAc,OAAW,QAAO;AACpC,QAAM,SAAS,gBAAgB,SAAS;AACxC,MAAI,CAAC,OAAO,IAAI;AACd,UAAM,IAAI,MAAM,uEAAuE,OAAO,KAAK,GAAG;AAAA,EACxG;AACA,SAAO,OAAO;AAChB;AAGO,IAAM,8BAA8B,OAAO,KAAK,KAAK,KAAK;AAEjE,SAAS,0BAA0B,WAAmB,OAAqB;AACzE,QAAM,cAAc,KAAK,MAAM,SAAS;AACxC,MAAI,eAAe,OAAO;AACxB,UAAM,IAAI,MAAM,kFAAkF;AAAA,EACpG;AACA,MAAI,cAAc,QAAQ,6BAA6B;AACrD,UAAM,IAAI;AAAA,MACR,8DAA8D,2BAA2B;AAAA,IAC3F;AAAA,EACF;AACF;AAEA,SAAS,mBAAmB,YAAoD;AAC9E,MAAI,eAAe,OAAW,QAAO;AACrC,QAAM,SAAS,gBAAgB,UAAU;AACzC,MAAI,CAAC,OAAO,IAAI;AACd,UAAM,IAAI,MAAM,wEAAwE,OAAO,KAAK,GAAG;AAAA,EACzG;AACA,SAAO,OAAO;AAChB;AAQO,IAAM,mCAAmC;AA+BzC,SAAS,mBAAmB,OAIT;AACxB,QAAM,WAAW,MAAM,uBAAuB,KAAK,KAAK;AACxD,MAAI,SAAS,SAAS,GAAG;AACvB,UAAM,YAAY,MAAM,QAAQ,KAAK;AACrC,QAAI,UAAU,SAAS,KAAK,cAAc,UAAU;AAClD,YAAM,IAAI;AAAA,QACR,gEAAgE,KAAK,UAAU,QAAQ,CAAC,sBAAsB,KAAK,UAAU,SAAS,CAAC;AAAA,MACzI;AAAA,IACF;AACA,WAAO,EAAE,OAAO,UAAU,QAAQ,SAAS;AAAA,EAC7C;AACA,QAAM,eAAe,MAAM,oBAAoB,KAAK,KAAK;AACzD,MAAI,aAAa,SAAS,GAAG;AAC3B,UAAM,QAAQ,MAAM,QAAQ,KAAK;AACjC,WAAO;AAAA,MACL,OAAO,MAAM,SAAS,IAAI,gBAAgB,KAAK,IAAI,gBAAgB,YAAY;AAAA,MAC/E,QAAQ,gBAAgB,YAAY;AAAA,IACtC;AAAA,EACF;AACA,QAAM,QAAQ,gBAAgB,MAAM,OAAO;AAC3C,SAAO,EAAE,OAAO,OAAO,QAAQ,MAAM;AACvC;AAEA,SAAS,gBAAgB,OAAuB;AAC9C,QAAM,SAAS,mBAAmB,KAAK;AACvC,MAAI,CAAC,OAAO,IAAI;AACd,UAAM,IAAI,MAAM,yEAAyE,OAAO,KAAK,GAAG;AAAA,EAC1G;AACA,SAAO,OAAO;AAChB;AAOO,SAAS,qBAAqB,OAAkD;AACrF,QAAM,WAAW,qBAAqB,MAAM,MAAM;AAClD,QAAM,YAAY,mBAAmB,MAAM,SAAS;AACpD,MAAI,cAAc,UAAa,OAAO,SAAS,MAAM,SAAS,OAAO,GAAG,GAAG;AACzE,8BAA0B,WAAW,MAAM,KAAe;AAAA,EAC5D;AACA,QAAM,aAAa,mBAAmB,MAAM,UAAU;AACtD,SAAO;AAAA,IACL,EAAE,UAAU,WAAW,MAAM,WAAW,WAAW,WAAW;AAAA,IAC9D,EAAE,SAAS,MAAM,aAAa;AAAA,EAChC;AACF;AAGO,SAAS,2BAA2B,UAAoC;AAC7E,QAAM,OAAO,CAAC,KAAa,UAAkB,GAAG,GAAG,KAAK,KAAK,UAAU,KAAK,CAAC;AAC7E,QAAM,QAAQ,CAAC,KAAK,YAAY,SAAS,YAAY,EAAE,GAAG,KAAK,aAAa,SAAS,SAAS,CAAC;AAC/F,MAAI,SAAS,cAAc,OAAW,OAAM,KAAK,KAAK,aAAa,SAAS,SAAS,CAAC;AACtF,MAAI,SAAS,eAAe,OAAW,OAAM,KAAK,KAAK,cAAc,SAAS,UAAU,CAAC;AACzF,SAAO;AACT;AAMO,SAAS,oBAAoB,SAKjB;AACjB,QAAM,SAAiC,CAAC;AACxC,MAAI,QAAQ,aAAa,KAAM,QAAO,WAAW,QAAQ;AACzD,MAAI,QAAQ,cAAc,KAAM,QAAO,YAAY,QAAQ;AAC3D,MAAI,QAAQ,cAAc,KAAM,QAAO,YAAY,QAAQ;AAC3D,MAAI,QAAQ,eAAe,KAAM,QAAO,aAAa,QAAQ;AAC7D,SAAO,oBAAoB,MAAM;AACnC;AAOO,SAAS,qBACd,UACA,cACiB;AACjB,SAAO,uBAAuB,EAAE,WAAW,SAAS,WAAW,aAAa,CAAC;AAC/E;","names":[]}

package/dist/{chunk-CO7KBRPF.js → chunk-TJNDFNCU.js}

@@ -29,7 +29,7 @@ import {
   defineOperation,
   parseNamespacePreflightWriteOp,
   resolveAuthorizedNamespaceWritablePreflight
-} from "./chunk-HUQMVI3A.js";
+} from "./chunk-ZBYVR5W4.js";
 import {
   parseSharedWriteOutputControls
 } from "./chunk-IFBSZGW3.js";
@@ -594,4 +594,4 @@ defineOperation({ name: "graph_events", description: "SSE graph events.", schema
 defineOperation({ name: "chat_message", description: "Chat message.", schema: strictSchema({ message: S.str, chatSessionId: S.str }), handler: async (_i, _ctx) => ({ result: { ok: true } }) });
 defineOperation({ name: "chat_events", description: "SSE chat events.", schema: strictSchema({}), handler: async (_i, _ctx) => ({ result: { stream: "sse" } }) });
 defineOperation({ name: "adapters_status", description: "Adapter registry metadata (issue #1850 round 5). Marker op: the HTTP transport builds the response from its own adapterRegistry, but the op still must be registered so it appears in listRegisteredOperations and enforceTokenOp can gate it for scoped tokens.", schema: strictSchema({}), handler: async (_i, _ctx) => ({ result: { ok: true } }) });
-//# sourceMappingURL=chunk-CO7KBRPF.js.map
+//# sourceMappingURL=chunk-TJNDFNCU.js.map