@remnic/core 9.69.87 → 9.69.89

package/dist/chunk-4NSLQ7EU.js

@@ -0,0 +1,137 @@
+// src/offline-sync-exclude-globs.ts
+var OFFLINE_DECRYPT_STAGING_DIR_PREFIX = ".remnic-offline-decrypt-";
+var DEFAULT_OFFLINE_SYNC_EXCLUDE_GLOBS = [
+  // Leading `**/` matches zero or more segments, so each pattern covers both
+  // the root `state/` dir AND per-namespace `namespaces/<ns>/state/` dirs
+  // (Cursor review on PR #1793: multi-namespace deployments previously kept
+  // pushing their namespaced live sqlite files).
+  "**/state/*.sqlite",
+  "**/state/*.sqlite-*",
+  "**/state/index_tags.json",
+  "**/state/entity-mention-index.json",
+  "**/state/memory-governance/runs/**",
+  // Rotated recall-impression archives (issue #1910). The active
+  // recall_impressions.jsonl stays remote-authoritative; only the .1..N
+  // archives and the .lock are node-local and never pushed/hashed.
+  "**/state/recall_impressions.jsonl.*",
+  // Durable recall-impression pending spill directory (issue #2033). Node-local:
+  // an impression spills a per-event file here when its rotation lock cannot be
+  // acquired, and the next lock holder folds them back into the synced active
+  // recall_impressions.jsonl. The `.*` glob above matches the directory name but
+  // not its children, so exclude the contents explicitly.
+  "**/state/recall_impressions.jsonl.pending.d/**",
+  // Durable lifecycle-append pending spill directory (issue #2033). Node-local:
+  // an append spills a per-event file here when it cannot get the ledger lock,
+  // and the next lock holder folds them back into the synced
+  // memory-lifecycle-ledger.jsonl. Pushing them would duplicate rows remotely.
+  // The offline-sync snapshot entrypoints drain this queue first (access-service
+  // `drainPendingLifecycleForSync` -> `StorageManager.drainPendingMemoryLifecycleEventsForSync`),
+  // aborting the snapshot when durable rows cannot be folded, so excluding the
+  // dir never silently drops append-only lifecycle history (promotions/imports).
+  "**/state/memory-lifecycle-ledger.jsonl.pending.d/**",
+  // The active lifecycle ledger lock is node-local and must never be
+  // transferred to another node during an offline snapshot.
+  "**/state/memory-lifecycle-ledger.jsonl.lock",
+  // Transient plaintext decrypt staging (issue #2033 P1). The CLI offline
+  // decrypt path materializes a decrypted secure-store file under an owner-only
+  // `<OFFLINE_DECRYPT_STAGING_DIR_PREFIX>*` dir before hashing/pushing, removing
+  // it in a `finally`. A hard crash between create and cleanup would otherwise
+  // let a later snapshot walk `<prefix>*/content` and push decrypted secure-store
+  // plaintext to the remote. Exclude the dir and its contents unconditionally so
+  // a crash-orphan can never be enumerated into a snapshot; the leading `**/`
+  // matches the root-level dir (zero segments) and any nested placement.
+  "**/.remnic-offline-decrypt-*/**",
+  // Embedding-index transaction leftovers (issue #3146, PR #3148). The
+  // identity-replacement backup (`embeddings.pre-replace.tmp`) can hold a
+  // full obsolete generation and `embeddings.staging.tmp-*` holds a
+  // partially staged one; both are node-local recovery state that must
+  // never be enumerated into a snapshot. The demoted legacy recovery file
+  // (`embeddings.json.pre-migration.tmp-*`) is likewise node-local.
+  "**/state/embeddings.pre-replace.tmp/**",
+  "**/state/embeddings.staging.tmp-*/**",
+  "**/state/embeddings.json.pre-migration.tmp-*",
+  "**/namespaces/*/state/embeddings.pre-replace.tmp/**",
+  "**/namespaces/*/state/embeddings.staging.tmp-*/**",
+  "**/namespaces/*/state/embeddings.json.pre-migration.tmp-*"
+];
+var DEFAULT_OFFLINE_SYNC_EXCLUDE_REGEXPS = DEFAULT_OFFLINE_SYNC_EXCLUDE_GLOBS.map((glob) => globToRegExp(glob));
+function matchesOfflineSyncDefaultExclude(relPosix) {
+  for (const regexp of DEFAULT_OFFLINE_SYNC_EXCLUDE_REGEXPS) {
+    if (regexp.test(relPosix)) return true;
+  }
+  return false;
+}
+function globToRegExp(glob) {
+  if (typeof glob !== "string" || glob.length === 0) {
+    throw new Error("offlineSyncExcludes entry must be a non-empty string");
+  }
+  if (glob.includes("\0")) {
+    throw new Error("offlineSyncExcludes entry must not contain NUL bytes");
+  }
+  let source = "";
+  for (let i = 0; i < glob.length; i += 1) {
+    const ch = glob[i];
+    if (ch === "*") {
+      if (glob[i + 1] === "*") {
+        if (glob[i + 2] === "/") {
+          source += "(?:.*/)?";
+          i += 2;
+          continue;
+        }
+        source += ".*";
+        i += 1;
+        continue;
+      }
+      source += "[^/]*";
+      continue;
+    }
+    if (ch === "?") {
+      source += "[^/]";
+      continue;
+    }
+    if (ch === "/") {
+      source += "/";
+      continue;
+    }
+    source += ch.replace(/[\\^$.+()|{}\[\]]/g, "\\$&");
+  }
+  return new RegExp(`^${source}$`);
+}
+function compileOfflineSyncExcludeGlobs(globs) {
+  const out = [];
+  for (const entry of globs) {
+    if (typeof entry !== "string" || entry.length === 0) {
+      throw new Error("offlineSyncExcludes must contain only non-empty strings");
+    }
+    out.push(globToRegExp(entry));
+  }
+  return out;
+}
+function parseOfflineSyncExcludes(raw) {
+  if (raw === void 0 || raw === null) return [];
+  if (!Array.isArray(raw)) {
+    throw new Error(
+      `offlineSyncExcludes must be an array of non-empty glob strings; got ${typeof raw}`
+    );
+  }
+  for (const entry of raw) {
+    if (typeof entry !== "string" || entry.trim().length === 0) {
+      throw new Error(
+        "offlineSyncExcludes must contain only non-empty glob strings"
+      );
+    }
+  }
+  const globs = raw.map((entry) => entry.trim());
+  compileOfflineSyncExcludeGlobs(globs);
+  return globs;
+}
+
+export {
+  OFFLINE_DECRYPT_STAGING_DIR_PREFIX,
+  DEFAULT_OFFLINE_SYNC_EXCLUDE_GLOBS,
+  matchesOfflineSyncDefaultExclude,
+  globToRegExp,
+  compileOfflineSyncExcludeGlobs,
+  parseOfflineSyncExcludes
+};
+//# sourceMappingURL=chunk-4NSLQ7EU.js.map

package/dist/chunk-4NSLQ7EU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/offline-sync-exclude-globs.ts"],"sourcesContent":["// Issue #1786: node-local runtime state that each node rebuilds from synced\n// records. Pushing these wastes bandwidth, corrupts the remote's live state\n// dir, and trips the large-file push retry loop on a live SQLite database.\n// Extracted from offline-sync.ts (issue #1995) so the god-file line-count\n// ratchet does not grow when the list gains entries; behavior is unchanged.\n/**\n * Directory-name prefix for the transient plaintext staging dir the CLI offline\n * decrypt path (`offline-storage-io.ts`) creates under the memory root when it\n * must materialize a decrypted secure-store file before hashing/pushing (#2033\n * P1). Shared here so the hard-exclude glob below and the CLI's `mkdtemp` prefix\n * can never drift apart: a crash-orphaned staging dir must NEVER be enumerated\n * into an offline snapshot, or decrypted secure-store plaintext would leak into\n * the remote push.\n */\nexport const OFFLINE_DECRYPT_STAGING_DIR_PREFIX = \".remnic-offline-decrypt-\";\n\nexport const DEFAULT_OFFLINE_SYNC_EXCLUDE_GLOBS: readonly string[] = [\n  // Leading `**/` matches zero or more segments, so each pattern covers both\n  // the root `state/` dir AND per-namespace `namespaces/<ns>/state/` dirs\n  // (Cursor review on PR #1793: multi-namespace deployments previously kept\n  // pushing their namespaced live sqlite files).\n  \"**/state/*.sqlite\",\n  \"**/state/*.sqlite-*\",\n  \"**/state/index_tags.json\",\n  \"**/state/entity-mention-index.json\",\n  \"**/state/memory-governance/runs/**\",\n  // Rotated recall-impression archives (issue #1910). The active\n  // recall_impressions.jsonl stays remote-authoritative; only the .1..N\n  // archives and the .lock are node-local and never pushed/hashed.\n  \"**/state/recall_impressions.jsonl.*\",\n  // Durable recall-impression pending spill directory (issue #2033). Node-local:\n  // an impression spills a per-event file here when its rotation lock cannot be\n  // acquired, and the next lock holder folds them back into the synced active\n  // recall_impressions.jsonl. The `.*` glob above matches the directory name but\n  // not its children, so exclude the contents explicitly.\n  \"**/state/recall_impressions.jsonl.pending.d/**\",\n  // Durable lifecycle-append pending spill directory (issue #2033). Node-local:\n  // an append spills a per-event file here when it cannot get the ledger lock,\n  // and the next lock holder folds them back into the synced\n  // memory-lifecycle-ledger.jsonl. Pushing them would duplicate rows remotely.\n  // The offline-sync snapshot entrypoints drain this queue first (access-service\n  // `drainPendingLifecycleForSync` -> `StorageManager.drainPendingMemoryLifecycleEventsForSync`),\n  // aborting the snapshot when durable rows cannot be folded, so excluding the\n  // dir never silently drops append-only lifecycle history (promotions/imports).\n  \"**/state/memory-lifecycle-ledger.jsonl.pending.d/**\",\n  // The active lifecycle ledger lock is node-local and must never be\n  // transferred to another node during an offline snapshot.\n  \"**/state/memory-lifecycle-ledger.jsonl.lock\",\n  // Transient plaintext decrypt staging (issue #2033 P1). The CLI offline\n  // decrypt path materializes a decrypted secure-store file under an owner-only\n  // `<OFFLINE_DECRYPT_STAGING_DIR_PREFIX>*` dir before hashing/pushing, removing\n  // it in a `finally`. A hard crash between create and cleanup would otherwise\n  // let a later snapshot walk `<prefix>*/content` and push decrypted secure-store\n  // plaintext to the remote. Exclude the dir and its contents unconditionally so\n  // a crash-orphan can never be enumerated into a snapshot; the leading `**/`\n  // matches the root-level dir (zero segments) and any nested placement.\n  \"**/.remnic-offline-decrypt-*/**\",\n  // Embedding-index transaction leftovers (issue #3146, PR #3148). The\n  // identity-replacement backup (`embeddings.pre-replace.tmp`) can hold a\n  // full obsolete generation and `embeddings.staging.tmp-*` holds a\n  // partially staged one; both are node-local recovery state that must\n  // never be enumerated into a snapshot. The demoted legacy recovery file\n  // (`embeddings.json.pre-migration.tmp-*`) is likewise node-local.\n  \"**/state/embeddings.pre-replace.tmp/**\",\n  \"**/state/embeddings.staging.tmp-*/**\",\n  \"**/state/embeddings.json.pre-migration.tmp-*\",\n  \"**/namespaces/*/state/embeddings.pre-replace.tmp/**\",\n  \"**/namespaces/*/state/embeddings.staging.tmp-*/**\",\n  \"**/namespaces/*/state/embeddings.json.pre-migration.tmp-*\",\n];\n\n\nconst DEFAULT_OFFLINE_SYNC_EXCLUDE_REGEXPS: readonly RegExp[] =\n  DEFAULT_OFFLINE_SYNC_EXCLUDE_GLOBS.map((glob) => globToRegExp(glob));\n\n/**\n * Precompiled-once default-exclude check for the snapshot enumeration hot\n * path (Kilo review, PR #1793). Moved here from offline-sync.ts with the\n * glob list so the two can never drift (issue #1995).\n */\nexport function matchesOfflineSyncDefaultExclude(relPosix: string): boolean {\n  for (const regexp of DEFAULT_OFFLINE_SYNC_EXCLUDE_REGEXPS) {\n    if (regexp.test(relPosix)) return true;\n  }\n  return false;\n}\n\nexport function globToRegExp(glob: string): RegExp {\n  if (typeof glob !== \"string\" || glob.length === 0) {\n    throw new Error(\"offlineSyncExcludes entry must be a non-empty string\");\n  }\n  if (glob.includes(\"\\0\")) {\n    throw new Error(\"offlineSyncExcludes entry must not contain NUL bytes\");\n  }\n  let source = \"\";\n  for (let i = 0; i < glob.length; i += 1) {\n    const ch = glob[i];\n    if (ch === \"*\") {\n      if (glob[i + 1] === \"*\") {\n        // `**` is cross-segment wherever it appears:\n        //   leading `**/`  -> zero or more whole segments\n        //   `/**` at end   -> everything under the directory\n        //   `a/**/b`       -> any depth between segments\n        // (Cursor review on PR #1793: trailing `scratch/**` must match\n        // nested `scratch/a/b.md`, matching the offline-mode guide.)\n        if (glob[i + 2] === \"/\") {\n          source += \"(?:.*/)?\";\n          i += 2;\n          continue;\n        }\n        source += \".*\";\n        i += 1;\n        continue;\n      }\n      source += \"[^/]*\";\n      continue;\n    }\n    if (ch === \"?\") {\n      source += \"[^/]\";\n      continue;\n    }\n    if (ch === \"/\") {\n      source += \"/\";\n      continue;\n    }\n    source += ch.replace(/[\\\\^$.+()|{}\\[\\]]/g, \"\\\\$&\");\n  }\n  return new RegExp(`^${source}$`);\n}\n\nexport function compileOfflineSyncExcludeGlobs(\n  globs: readonly unknown[],\n): RegExp[] {\n  const out: RegExp[] = [];\n  for (const entry of globs) {\n    if (typeof entry !== \"string\" || entry.length === 0) {\n      throw new Error(\"offlineSyncExcludes must contain only non-empty strings\");\n    }\n    out.push(globToRegExp(entry));\n  }\n  return out;\n}\n\n/**\n * Validate the operator-supplied offline-sync exclude list (#1786).\n * Rejects loudly instead of silently defaulting (CLAUDE.md rule 39):\n * a misspelled key value must fail config parse, not be ignored.\n * Lives next to the glob compiler so config.ts only carries the call.\n */\nexport function parseOfflineSyncExcludes(raw: unknown): string[] {\n  if (raw === undefined || raw === null) return [];\n  if (!Array.isArray(raw)) {\n    throw new Error(\n      `offlineSyncExcludes must be an array of non-empty glob strings; got ${typeof raw}`,\n    );\n  }\n  for (const entry of raw) {\n    if (typeof entry !== \"string\" || entry.trim().length === 0) {\n      throw new Error(\n        \"offlineSyncExcludes must contain only non-empty glob strings\",\n      );\n    }\n  }\n  const globs = raw.map((entry) => (entry as string).trim());\n  // Compile-check every glob now so a bad pattern fails at parse time\n  // rather than mid-sync. compileOfflineSyncExcludeGlobs throws with a\n  // per-entry message.\n  compileOfflineSyncExcludeGlobs(globs);\n  return globs;\n}\n"],"mappings":";AAcO,IAAM,qCAAqC;AAE3C,IAAM,qCAAwD;AAAA;AAAA;AAAA;AAAA;AAAA,EAKnE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA;AAAA,EAIA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA;AAAA;AAAA;AAAA,EAGA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGA,IAAM,uCACJ,mCAAmC,IAAI,CAAC,SAAS,aAAa,IAAI,CAAC;AAO9D,SAAS,iCAAiC,UAA2B;AAC1E,aAAW,UAAU,sCAAsC;AACzD,QAAI,OAAO,KAAK,QAAQ,EAAG,QAAO;AAAA,EACpC;AACA,SAAO;AACT;AAEO,SAAS,aAAa,MAAsB;AACjD,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,GAAG;AACjD,UAAM,IAAI,MAAM,sDAAsD;AAAA,EACxE;AACA,MAAI,KAAK,SAAS,IAAI,GAAG;AACvB,UAAM,IAAI,MAAM,sDAAsD;AAAA,EACxE;AACA,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,GAAG;AACvC,UAAM,KAAK,KAAK,CAAC;AACjB,QAAI,OAAO,KAAK;AACd,UAAI,KAAK,IAAI,CAAC,MAAM,KAAK;AAOvB,YAAI,KAAK,IAAI,CAAC,MAAM,KAAK;AACvB,oBAAU;AACV,eAAK;AACL;AAAA,QACF;AACA,kBAAU;AACV,aAAK;AACL;AAAA,MACF;AACA,gBAAU;AACV;AAAA,IACF;AACA,QAAI,OAAO,KAAK;AACd,gBAAU;AACV;AAAA,IACF;AACA,QAAI,OAAO,KAAK;AACd,gBAAU;AACV;AAAA,IACF;AACA,cAAU,GAAG,QAAQ,sBAAsB,MAAM;AAAA,EACnD;AACA,SAAO,IAAI,OAAO,IAAI,MAAM,GAAG;AACjC;AAEO,SAAS,+BACd,OACU;AACV,QAAM,MAAgB,CAAC;AACvB,aAAW,SAAS,OAAO;AACzB,QAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG;AACnD,YAAM,IAAI,MAAM,yDAAyD;AAAA,IAC3E;AACA,QAAI,KAAK,aAAa,KAAK,CAAC;AAAA,EAC9B;AACA,SAAO;AACT;AAQO,SAAS,yBAAyB,KAAwB;AAC/D,MAAI,QAAQ,UAAa,QAAQ,KAAM,QAAO,CAAC;AAC/C,MAAI,CAAC,MAAM,QAAQ,GAAG,GAAG;AACvB,UAAM,IAAI;AAAA,MACR,uEAAuE,OAAO,GAAG;AAAA,IACnF;AAAA,EACF;AACA,aAAW,SAAS,KAAK;AACvB,QAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,WAAW,GAAG;AAC1D,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,QAAM,QAAQ,IAAI,IAAI,CAAC,UAAW,MAAiB,KAAK,CAAC;AAIzD,iCAA+B,KAAK;AACpC,SAAO;AACT;","names":[]}

package/dist/{chunk-7DE2NOON.js → chunk-4O4XCBOS.js}

@@ -2,11 +2,11 @@ import {
   buildExplicitCaptureDedupKey,
   isTombstoneBlockedCaptureWriteLockBusy,
   normalizeExplicitCaptureContent
-} from "./chunk-DUJYRVUD.js";
+} from "./chunk-6O2VUWV6.js";
 import {
   TAG_LIMITS,
   composeMemoryEnvelope
-} from "./chunk-GDYU6VF4.js";
+} from "./chunk-5AYUHSAU.js";
 import {
   isSupportPassportPrivateMemory
 } from "./chunk-PWPIERBM.js";
@@ -787,4 +787,4 @@ export {
   shouldProcessInlineExplicitCapture,
   InlineExplicitCaptureProcessor
 };
-//# sourceMappingURL=chunk-7DE2NOON.js.map
+//# sourceMappingURL=chunk-4O4XCBOS.js.map

package/dist/{chunk-GDYU6VF4.js → chunk-5AYUHSAU.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-BT7NVCML.js";
 import {
   isMemorySubject
-} from "./chunk-VYCOJKSX.js";
+} from "./chunk-PO7NXNGC.js";
 import {
   assemblePersistedBody
 } from "./chunk-JDSVLVCG.js";
@@ -443,4 +443,4 @@ export {
   buildAccessWriteRequestFingerprint,
   buildObserveRequestFingerprint
 };
-//# sourceMappingURL=chunk-GDYU6VF4.js.map
+//# sourceMappingURL=chunk-5AYUHSAU.js.map

package/dist/{chunk-ICZQG4XE.js → chunk-5FAGCOZD.js}

@@ -3,6 +3,9 @@ import {
   withGraphWriteLock,
   yieldForLockHeartbeat
 } from "./chunk-EUT2WCWS.js";
+import {
+  readEdgeConfidence
+} from "./chunk-2LSZVONP.js";
 import {
   emitGraphEvent
 } from "./chunk-DEUNUKTD.js";
@@ -14,9 +17,6 @@ import {
 import {
   GraphEdgeAppendError
 } from "./chunk-GKCXTSFF.js";
-import {
-  readEdgeConfidence
-} from "./chunk-2LSZVONP.js";
 import {
   isErrnoCode
 } from "./chunk-KNA3BXXL.js";
@@ -758,4 +758,4 @@ export {
   applyPageRankRefinement,
   applyLateralInhibition
 };
-//# sourceMappingURL=chunk-ICZQG4XE.js.map
+//# sourceMappingURL=chunk-5FAGCOZD.js.map

package/dist/{chunk-VKQI47DJ.js → chunk-5FNZ3G6X.js}

@@ -1,6 +1,3 @@
-import {
-  assembleCompressedHistoryWithTrace
-} from "./chunk-UXPUUL3G.js";
 import {
   ensureLcmStateDir,
   openLcmDatabase
@@ -17,6 +14,9 @@ import {
 import {
   LcmWorkQueue
 } from "./chunk-MMCO4SRG.js";
+import {
+  assembleCompressedHistoryWithTrace
+} from "./chunk-UXPUUL3G.js";
 import {
   nativeBindingRecoveryHint
 } from "./chunk-LD72P4YS.js";
@@ -602,4 +602,4 @@ export {
   extractLcmConfig,
   LcmEngine
 };
-//# sourceMappingURL=chunk-VKQI47DJ.js.map
+//# sourceMappingURL=chunk-5FNZ3G6X.js.map

package/dist/{chunk-CK5KOVHW.js → chunk-5R627MYY.js}

@@ -50,7 +50,8 @@ async function respondOfflineSnapshotStream(response, snapshot, requestId) {
     createdAt: snapshot.createdAt,
     sourceId: snapshot.sourceId,
     includeTranscripts: snapshot.includeTranscripts,
-    deletions: snapshot.deletions
+    deletions: snapshot.deletions,
+    ...snapshot.omittedEmbeddingGenerationDirs ? { omittedEmbeddingGenerationDirs: snapshot.omittedEmbeddingGenerationDirs } : {}
   }, snapshot.files, requestId);
 }
 async function respondOfflineManifestStream(response, manifest, requestId) {
@@ -66,4 +67,4 @@ export {
   respondOfflineSnapshotStream,
   respondOfflineManifestStream
 };
-//# sourceMappingURL=chunk-CK5KOVHW.js.map
+//# sourceMappingURL=chunk-5R627MYY.js.map

package/dist/{chunk-CK5KOVHW.js.map → chunk-5R627MYY.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/access-http-offline-stream.ts"],"sourcesContent":["import type { ServerResponse } from \"node:http\";\nimport type { OfflineSyncManifestStreamResponse } from \"./access-offline-manifest.js\";\nimport type { EngramAccessOfflineSyncSnapshotStreamResponse } from \"./access-service.js\";\n\nasync function respondOfflineNdjsonStream(\n  response: ServerResponse,\n  header: unknown,\n  files: AsyncIterable<unknown>,\n  requestId?: string,\n): Promise<void> {\n  response.statusCode = 200;\n  response.setHeader(\"content-type\", \"application/x-ndjson; charset=utf-8\");\n  response.setHeader(\"cache-control\", \"no-store\");\n  if (requestId) response.setHeader(\"x-request-id\", requestId);\n  const waitForDrainOrClose = async (): Promise<boolean> => {\n    const { promise, resolve, reject } = Promise.withResolvers<boolean>();\n    const cleanup = () => {\n      response.off(\"drain\", onDrain);\n      response.off(\"close\", onClose);\n      response.off(\"error\", onError);\n    };\n    const onDrain = () => {\n      cleanup();\n      resolve(true);\n    };\n    const onClose = () => {\n      cleanup();\n      resolve(false);\n    };\n    const onError = (error: Error) => {\n      cleanup();\n      reject(error);\n    };\n    response.once(\"drain\", onDrain);\n    response.once(\"close\", onClose);\n    response.once(\"error\", onError);\n    return promise;\n  };\n  const writeLine = async (payload: unknown): Promise<boolean> => {\n    if (response.destroyed || response.writableEnded) return false;\n    if (response.write(`${JSON.stringify(payload)}\\n`)) return true;\n    if (response.destroyed || response.writableEnded) return false;\n    return waitForDrainOrClose();\n  };\n  if (!await writeLine(header)) return;\n  for await (const file of files) {\n    if (!await writeLine({ type: \"file\", file })) return;\n  }\n  if (!response.destroyed && !response.writableEnded) response.end();\n}\n\nexport async function respondOfflineSnapshotStream(\n  response: ServerResponse,\n  snapshot: EngramAccessOfflineSyncSnapshotStreamResponse,\n  requestId?: string,\n): Promise<void> {\n  await respondOfflineNdjsonStream(response, {\n    type: \"snapshot\",\n    namespace: snapshot.namespace,\n    format: snapshot.format,\n    schemaVersion: snapshot.schemaVersion,\n    createdAt: snapshot.createdAt,\n    sourceId: snapshot.sourceId,\n    includeTranscripts: snapshot.includeTranscripts,\n    deletions: snapshot.deletions,\n  }, snapshot.files, requestId);\n}\n\nexport async function respondOfflineManifestStream(\n  response: ServerResponse,\n  manifest: OfflineSyncManifestStreamResponse,\n  requestId?: string,\n): Promise<void> {\n  await respondOfflineNdjsonStream(response, {\n    type: \"manifest\",\n    namespace: manifest.namespace,\n    format: manifest.format,\n    schemaVersion: manifest.schemaVersion,\n  }, manifest.files, requestId);\n}\n"],"mappings":";AAIA,eAAe,2BACb,UACA,QACA,OACA,WACe;AACf,WAAS,aAAa;AACtB,WAAS,UAAU,gBAAgB,qCAAqC;AACxE,WAAS,UAAU,iBAAiB,UAAU;AAC9C,MAAI,UAAW,UAAS,UAAU,gBAAgB,SAAS;AAC3D,QAAM,sBAAsB,YAA8B;AACxD,UAAM,EAAE,SAAS,SAAS,OAAO,IAAI,QAAQ,cAAuB;AACpE,UAAM,UAAU,MAAM;AACpB,eAAS,IAAI,SAAS,OAAO;AAC7B,eAAS,IAAI,SAAS,OAAO;AAC7B,eAAS,IAAI,SAAS,OAAO;AAAA,IAC/B;AACA,UAAM,UAAU,MAAM;AACpB,cAAQ;AACR,cAAQ,IAAI;AAAA,IACd;AACA,UAAM,UAAU,MAAM;AACpB,cAAQ;AACR,cAAQ,KAAK;AAAA,IACf;AACA,UAAM,UAAU,CAAC,UAAiB;AAChC,cAAQ;AACR,aAAO,KAAK;AAAA,IACd;AACA,aAAS,KAAK,SAAS,OAAO;AAC9B,aAAS,KAAK,SAAS,OAAO;AAC9B,aAAS,KAAK,SAAS,OAAO;AAC9B,WAAO;AAAA,EACT;AACA,QAAM,YAAY,OAAO,YAAuC;AAC9D,QAAI,SAAS,aAAa,SAAS,cAAe,QAAO;AACzD,QAAI,SAAS,MAAM,GAAG,KAAK,UAAU,OAAO,CAAC;AAAA,CAAI,EAAG,QAAO;AAC3D,QAAI,SAAS,aAAa,SAAS,cAAe,QAAO;AACzD,WAAO,oBAAoB;AAAA,EAC7B;AACA,MAAI,CAAC,MAAM,UAAU,MAAM,EAAG;AAC9B,mBAAiB,QAAQ,OAAO;AAC9B,QAAI,CAAC,MAAM,UAAU,EAAE,MAAM,QAAQ,KAAK,CAAC,EAAG;AAAA,EAChD;AACA,MAAI,CAAC,SAAS,aAAa,CAAC,SAAS,cAAe,UAAS,IAAI;AACnE;AAEA,eAAsB,6BACpB,UACA,UACA,WACe;AACf,QAAM,2BAA2B,UAAU;AAAA,IACzC,MAAM;AAAA,IACN,WAAW,SAAS;AAAA,IACpB,QAAQ,SAAS;AAAA,IACjB,eAAe,SAAS;AAAA,IACxB,WAAW,SAAS;AAAA,IACpB,UAAU,SAAS;AAAA,IACnB,oBAAoB,SAAS;AAAA,IAC7B,WAAW,SAAS;AAAA,EACtB,GAAG,SAAS,OAAO,SAAS;AAC9B;AAEA,eAAsB,6BACpB,UACA,UACA,WACe;AACf,QAAM,2BAA2B,UAAU;AAAA,IACzC,MAAM;AAAA,IACN,WAAW,SAAS;AAAA,IACpB,QAAQ,SAAS;AAAA,IACjB,eAAe,SAAS;AAAA,EAC1B,GAAG,SAAS,OAAO,SAAS;AAC9B;","names":[]}
+{"version":3,"sources":["../src/access-http-offline-stream.ts"],"sourcesContent":["import type { ServerResponse } from \"node:http\";\nimport type { OfflineSyncManifestStreamResponse } from \"./access-offline-manifest.js\";\nimport type { EngramAccessOfflineSyncSnapshotStreamResponse } from \"./access-service.js\";\n\nasync function respondOfflineNdjsonStream(\n  response: ServerResponse,\n  header: unknown,\n  files: AsyncIterable<unknown>,\n  requestId?: string,\n): Promise<void> {\n  response.statusCode = 200;\n  response.setHeader(\"content-type\", \"application/x-ndjson; charset=utf-8\");\n  response.setHeader(\"cache-control\", \"no-store\");\n  if (requestId) response.setHeader(\"x-request-id\", requestId);\n  const waitForDrainOrClose = async (): Promise<boolean> => {\n    const { promise, resolve, reject } = Promise.withResolvers<boolean>();\n    const cleanup = () => {\n      response.off(\"drain\", onDrain);\n      response.off(\"close\", onClose);\n      response.off(\"error\", onError);\n    };\n    const onDrain = () => {\n      cleanup();\n      resolve(true);\n    };\n    const onClose = () => {\n      cleanup();\n      resolve(false);\n    };\n    const onError = (error: Error) => {\n      cleanup();\n      reject(error);\n    };\n    response.once(\"drain\", onDrain);\n    response.once(\"close\", onClose);\n    response.once(\"error\", onError);\n    return promise;\n  };\n  const writeLine = async (payload: unknown): Promise<boolean> => {\n    if (response.destroyed || response.writableEnded) return false;\n    if (response.write(`${JSON.stringify(payload)}\\n`)) return true;\n    if (response.destroyed || response.writableEnded) return false;\n    return waitForDrainOrClose();\n  };\n  if (!await writeLine(header)) return;\n  for await (const file of files) {\n    if (!await writeLine({ type: \"file\", file })) return;\n  }\n  if (!response.destroyed && !response.writableEnded) response.end();\n}\n\nexport async function respondOfflineSnapshotStream(\n  response: ServerResponse,\n  snapshot: EngramAccessOfflineSyncSnapshotStreamResponse,\n  requestId?: string,\n): Promise<void> {\n  await respondOfflineNdjsonStream(response, {\n    type: \"snapshot\",\n    namespace: snapshot.namespace,\n    format: snapshot.format,\n    schemaVersion: snapshot.schemaVersion,\n    createdAt: snapshot.createdAt,\n    sourceId: snapshot.sourceId,\n    includeTranscripts: snapshot.includeTranscripts,\n    deletions: snapshot.deletions,\n    ...(snapshot.omittedEmbeddingGenerationDirs\n      ? { omittedEmbeddingGenerationDirs: snapshot.omittedEmbeddingGenerationDirs }\n      : {}),\n  }, snapshot.files, requestId);\n}\n\nexport async function respondOfflineManifestStream(\n  response: ServerResponse,\n  manifest: OfflineSyncManifestStreamResponse,\n  requestId?: string,\n): Promise<void> {\n  await respondOfflineNdjsonStream(response, {\n    type: \"manifest\",\n    namespace: manifest.namespace,\n    format: manifest.format,\n    schemaVersion: manifest.schemaVersion,\n  }, manifest.files, requestId);\n}\n"],"mappings":";AAIA,eAAe,2BACb,UACA,QACA,OACA,WACe;AACf,WAAS,aAAa;AACtB,WAAS,UAAU,gBAAgB,qCAAqC;AACxE,WAAS,UAAU,iBAAiB,UAAU;AAC9C,MAAI,UAAW,UAAS,UAAU,gBAAgB,SAAS;AAC3D,QAAM,sBAAsB,YAA8B;AACxD,UAAM,EAAE,SAAS,SAAS,OAAO,IAAI,QAAQ,cAAuB;AACpE,UAAM,UAAU,MAAM;AACpB,eAAS,IAAI,SAAS,OAAO;AAC7B,eAAS,IAAI,SAAS,OAAO;AAC7B,eAAS,IAAI,SAAS,OAAO;AAAA,IAC/B;AACA,UAAM,UAAU,MAAM;AACpB,cAAQ;AACR,cAAQ,IAAI;AAAA,IACd;AACA,UAAM,UAAU,MAAM;AACpB,cAAQ;AACR,cAAQ,KAAK;AAAA,IACf;AACA,UAAM,UAAU,CAAC,UAAiB;AAChC,cAAQ;AACR,aAAO,KAAK;AAAA,IACd;AACA,aAAS,KAAK,SAAS,OAAO;AAC9B,aAAS,KAAK,SAAS,OAAO;AAC9B,aAAS,KAAK,SAAS,OAAO;AAC9B,WAAO;AAAA,EACT;AACA,QAAM,YAAY,OAAO,YAAuC;AAC9D,QAAI,SAAS,aAAa,SAAS,cAAe,QAAO;AACzD,QAAI,SAAS,MAAM,GAAG,KAAK,UAAU,OAAO,CAAC;AAAA,CAAI,EAAG,QAAO;AAC3D,QAAI,SAAS,aAAa,SAAS,cAAe,QAAO;AACzD,WAAO,oBAAoB;AAAA,EAC7B;AACA,MAAI,CAAC,MAAM,UAAU,MAAM,EAAG;AAC9B,mBAAiB,QAAQ,OAAO;AAC9B,QAAI,CAAC,MAAM,UAAU,EAAE,MAAM,QAAQ,KAAK,CAAC,EAAG;AAAA,EAChD;AACA,MAAI,CAAC,SAAS,aAAa,CAAC,SAAS,cAAe,UAAS,IAAI;AACnE;AAEA,eAAsB,6BACpB,UACA,UACA,WACe;AACf,QAAM,2BAA2B,UAAU;AAAA,IACzC,MAAM;AAAA,IACN,WAAW,SAAS;AAAA,IACpB,QAAQ,SAAS;AAAA,IACjB,eAAe,SAAS;AAAA,IACxB,WAAW,SAAS;AAAA,IACpB,UAAU,SAAS;AAAA,IACnB,oBAAoB,SAAS;AAAA,IAC7B,WAAW,SAAS;AAAA,IACpB,GAAI,SAAS,iCACT,EAAE,gCAAgC,SAAS,+BAA+B,IAC1E,CAAC;AAAA,EACP,GAAG,SAAS,OAAO,SAAS;AAC9B;AAEA,eAAsB,6BACpB,UACA,UACA,WACe;AACf,QAAM,2BAA2B,UAAU;AAAA,IACzC,MAAM;AAAA,IACN,WAAW,SAAS;AAAA,IACpB,QAAQ,SAAS;AAAA,IACjB,eAAe,SAAS;AAAA,EAC1B,GAAG,SAAS,OAAO,SAAS;AAC9B;","names":[]}

package/dist/{chunk-VQNONC4E.js → chunk-5STPRPE7.js}

@@ -1,6 +1,6 @@
 import {
   getOperation
-} from "./chunk-FOH7AMMI.js";
+} from "./chunk-CALBQ2NG.js";
 import {
   EngramAccessInputError
 } from "./chunk-3MUKQQ7A.js";
@@ -21,4 +21,4 @@ async function respondBriefingHttp(options) {
 export {
   respondBriefingHttp
 };
-//# sourceMappingURL=chunk-VQNONC4E.js.map
+//# sourceMappingURL=chunk-5STPRPE7.js.map

package/dist/{chunk-52II7PB6.js → chunk-645WOU5I.js}

@@ -1,12 +1,12 @@
+import {
+  shouldRecallEventOrderEvidence
+} from "./chunk-BUYVPUEM.js";
 import {
   unifiedDedupeAndRank
 } from "./chunk-LUPVCGYK.js";
 import {
   buildEvidencePack
 } from "./chunk-DGFU5MSX.js";
-import {
-  shouldRecallEventOrderEvidence
-} from "./chunk-BUYVPUEM.js";
 import {
   lcmEvidenceIdentity
 } from "./chunk-C37ZRXX7.js";
@@ -2236,4 +2236,4 @@ var NUMBER_WORD_VALUES = {
 export {
   buildEventOrderRecallSection
 };
-//# sourceMappingURL=chunk-52II7PB6.js.map
+//# sourceMappingURL=chunk-645WOU5I.js.map

package/dist/{chunk-SRZW7FNU.js → chunk-64ZUALXK.js}

@@ -1,7 +1,7 @@
 import {
   canonicalCategoryForAlias,
   categoryAliasCoercion
-} from "./chunk-3C3J243X.js";
+} from "./chunk-3QKO4QN7.js";
 
 // src/access-observe-write-category.ts
 function splitCanonicalWriteRequest(request) {
@@ -22,4 +22,4 @@ function splitCanonicalWriteRequest(request) {
 export {
   splitCanonicalWriteRequest
 };
-//# sourceMappingURL=chunk-SRZW7FNU.js.map
+//# sourceMappingURL=chunk-64ZUALXK.js.map

package/dist/{chunk-4BZP2B4U.js → chunk-6MNKDTDI.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-5JMAGU26.js";
 import {
   runPostConsolidationMaterialize
-} from "./chunk-QVS22WTO.js";
+} from "./chunk-ZG5DWWKK.js";
 import {
   isSemanticConsolidationLlmOperator
 } from "./chunk-G7D6GZ5J.js";
@@ -220,4 +220,4 @@ export {
   buildExtensionsBlockForConsolidation,
   materializeAfterSemanticConsolidation
 };
-//# sourceMappingURL=chunk-4BZP2B4U.js.map
+//# sourceMappingURL=chunk-6MNKDTDI.js.map

package/dist/{chunk-DUJYRVUD.js → chunk-6O2VUWV6.js}

@@ -12,7 +12,7 @@ import {
 import {
   CONTENT_HASH_INDEX_RETRY_MAX_DELAY_MS,
   ContentHashIndex
-} from "./chunk-NB3LRY4T.js";
+} from "./chunk-N4PYB235.js";
 import {
   withHeldFileLock
 } from "./chunk-FFAZ2XFU.js";
@@ -22,7 +22,7 @@ import {
 import {
   readMaybeEncryptedFileFromChunks,
   writeMaybeEncryptedFileFromChunks
-} from "./chunk-JN72EPOE.js";
+} from "./chunk-MAAL6OZV.js";
 import {
   RECALL_FALLBACK_DIRS
 } from "./chunk-VS2IYZRU.js";
@@ -2509,4 +2509,4 @@ export {
   parseTombstoneBlockedOfflineSyncMemory,
   TombstoneBlockedCaptureIndexHost
 };
-//# sourceMappingURL=chunk-DUJYRVUD.js.map
+//# sourceMappingURL=chunk-6O2VUWV6.js.map

package/dist/chunk-75PT4N7Q.js

@@ -0,0 +1,75 @@
+import {
+  serializeMutations,
+  withHeldFileLock
+} from "./chunk-FFAZ2XFU.js";
+
+// src/embedding-generation-lock.ts
+import path from "path";
+var LOCK_STALE_MS = 3e4;
+var LOCK_MAX_WAIT_MS = 1e4;
+var EmbeddingGenerationLockLostError = class extends Error {
+  constructor(lockPath) {
+    super(
+      `embedding generation: the mutation lock for ${lockPath} was lost mid-section \u2014 a peer stale-broke and replaced it; aborting instead of clobbering the peer's write`
+    );
+    this.name = "EmbeddingGenerationLockLostError";
+  }
+};
+var EmbeddingGenerationLockUnavailableError = class extends Error {
+  constructor(lockPath, reason) {
+    super(`embedding generation: could not acquire the mutation lock for ${lockPath} (${reason})`);
+    this.name = "EmbeddingGenerationLockUnavailableError";
+  }
+};
+function embeddingGenerationLockPath(absoluteStateDir) {
+  const stateDir = path.resolve(absoluteStateDir);
+  return path.join(stateDir, ".offline-sync", "locks", "embedding-generation.lock");
+}
+async function assertEmbeddingGenerationLockHeld(lockPath, section) {
+  if (!await section.refresh()) throw new EmbeddingGenerationLockLostError(lockPath);
+}
+function withEmbeddingGenerationLock(absoluteStateDir, fn) {
+  const lockPath = embeddingGenerationLockPath(absoluteStateDir);
+  return serializeMutations(
+    lockPath,
+    () => withHeldFileLock(lockPath, { staleMs: LOCK_STALE_MS, maxWaitMs: LOCK_MAX_WAIT_MS }, (acquired, lock) => {
+      if (!acquired) {
+        throw new EmbeddingGenerationLockUnavailableError(lockPath, lock.failure ?? "error");
+      }
+      return fn(lock);
+    })
+  );
+}
+async function* withEmbeddingGenerationLockIter(absoluteStateDir, make, includeContent, verify) {
+  const lockPath = embeddingGenerationLockPath(absoluteStateDir);
+  const baseline = await withEmbeddingGenerationLock(absoluteStateDir, async (section) => {
+    await verify?.();
+    const records = [];
+    for await (const record of make(false)) {
+      await assertEmbeddingGenerationLockHeld(lockPath, section);
+      records.push({ path: record.path, sha256: record.sha256, bytes: record.bytes });
+    }
+    return records;
+  });
+  let count = 0;
+  for await (const record of make(includeContent)) {
+    const expected = baseline[count++];
+    if (!expected || expected.path !== record.path || expected.sha256 !== record.sha256 || expected.bytes !== record.bytes) {
+      throw new Error(`embedding generation changed while streaming ${absoluteStateDir}; retry the snapshot`);
+    }
+    yield record;
+  }
+  if (count !== baseline.length) {
+    throw new Error(`embedding generation changed while streaming ${absoluteStateDir}; retry the snapshot`);
+  }
+}
+
+export {
+  EmbeddingGenerationLockLostError,
+  EmbeddingGenerationLockUnavailableError,
+  embeddingGenerationLockPath,
+  assertEmbeddingGenerationLockHeld,
+  withEmbeddingGenerationLock,
+  withEmbeddingGenerationLockIter
+};
+//# sourceMappingURL=chunk-75PT4N7Q.js.map

package/dist/chunk-75PT4N7Q.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/embedding-generation-lock.ts"],"sourcesContent":["// Cross-process embedding-generation mutation lock (issue #3148, Codex P1).\n//\n// Two processes legitimately mutate the SAME embedding generation: the\n// daemon's EmbeddingFallback index mutations (load → modify → persist) and\n// the offline-sync apply transaction (census → stage → swap) — plus the\n// snapshot walkers that must capture one COMPLETE generation. All of them\n// enumerate or replace `state/embeddings/` (or the legacy marker), so an\n// unsynchronized writer's bytes are silently discarded by the other side's\n// wholesale directory swap.\n//\n// Built directly on the existing utilities: `serializeMutations` (in-process\n// keyed chain, rejection-recovering — gotcha #40) around `withHeldFileLock`\n// (cross-process held advisory lock, replacement-safe stale breaking,\n// ownership-checked release). A lock that cannot be acquired within the\n// bounded wait FAILS CLOSED — proceeding unsynchronized would reintroduce\n// the lost-write race this lock exists to prevent.\n//\n// The lock is keyed by the PHYSICAL state directory (dirname of the\n// generation's shard dir / of the legacy marker), so every caller\n// convention — memory-root-relative (`namespaces/<ns>/state`) or\n// namespace-scoped roots (`<ns>/state`) — contends on the SAME lock file\n// for the same generation. The lock file lives under that state dir's\n// `.offline-sync/` (sync-internal, excluded from every offline-sync\n// snapshot by the default excludes).\nimport path from \"node:path\";\nimport { type HeldFileLockController, serializeMutations, withHeldFileLock } from \"./utils/serialize-mutations.js\";\n\n/** Stale-lock window for a crashed holder (mirrors the graph lock). */\nconst LOCK_STALE_MS = 30_000;\n/** Bounded acquisition wait; a busy lock FAILS the operation (strict). */\nconst LOCK_MAX_WAIT_MS = 10_000;\n\n/** Control surface handed to a held embedding-generation lock section. */\nexport type EmbeddingGenerationLockSection = HeldFileLockController;\n\n/**\n * A fence the store calls immediately before a destructive write: reasserts\n * lock ownership so a peer that stale-broke and replaced the lock aborts\n * this write instead of clobbering the peer's.\n */\nexport type EmbeddingGenerationFence = () => Promise<void>;\n\n/**\n * A held embedding-generation lock section was lost mid-critical-section —\n * a peer stale-broke and replaced it. Abort; never publish.\n */\nexport class EmbeddingGenerationLockLostError extends Error {\n  constructor(lockPath: string) {\n    super(\n      `embedding generation: the mutation lock for ${lockPath} was lost mid-section — a peer stale-broke and replaced it; aborting instead of clobbering the peer's write`\n    );\n    this.name = \"EmbeddingGenerationLockLostError\";\n  }\n}\n\n/** The generation lock could not be acquired; callers fail closed and report it. */\nexport class EmbeddingGenerationLockUnavailableError extends Error {\n  constructor(lockPath: string, reason: \"timeout\" | \"error\") {\n    super(`embedding generation: could not acquire the mutation lock for ${lockPath} (${reason})`);\n    this.name = \"EmbeddingGenerationLockUnavailableError\";\n  }\n}\n\n/**\n * The lock file path for the generation whose canonical state dir is\n * `absoluteStateDir` (physical path; e.g. `<memoryRoot>/state` or\n * `<memoryRoot>/namespaces/<ns>/state`). Keyed by the physical directory so\n * every root convention contends on one lock file per generation.\n */\nexport function embeddingGenerationLockPath(absoluteStateDir: string): string {\n  const stateDir = path.resolve(absoluteStateDir);\n  return path.join(stateDir, \".offline-sync\", \"locks\", \"embedding-generation.lock\");\n}\n\n/**\n * Revalidate lock ownership immediately before a destructive publish.\n * Throws {@link EmbeddingGenerationLockLostError} when the lock was\n * broken/replaced, so the caller aborts and leaves the peer's write intact.\n */\nexport async function assertEmbeddingGenerationLockHeld(\n  lockPath: string,\n  section: EmbeddingGenerationLockSection\n): Promise<void> {\n  if (!(await section.refresh())) throw new EmbeddingGenerationLockLostError(lockPath);\n}\n\n/**\n * Run `fn` while holding the embedding-generation mutation lock for the\n * generation whose state dir is `absoluteStateDir`, handing it the section\n * controller. `serializeMutations` provides the in-process keyed chain\n * INSIDE the cross-process advisory lock, so peers serialize against every\n * section this process runs, one at a time. Times out fail-closed.\n */\nexport function withEmbeddingGenerationLock<T>(\n  absoluteStateDir: string,\n  fn: (lock: EmbeddingGenerationLockSection) => Promise<T>\n): Promise<T> {\n  const lockPath = embeddingGenerationLockPath(absoluteStateDir);\n  return serializeMutations(lockPath, () =>\n    withHeldFileLock(lockPath, { staleMs: LOCK_STALE_MS, maxWaitMs: LOCK_MAX_WAIT_MS }, (acquired, lock) => {\n      if (!acquired) {\n        throw new EmbeddingGenerationLockUnavailableError(lockPath, lock.failure ?? \"error\");\n      }\n      return fn(lock);\n    })\n  );\n}\n\n/** Capture a complete bounded digest census under lock, then stream outside\n * the lock. If any member changes, throw rather than emit a complete subset. */\nexport async function* withEmbeddingGenerationLockIter<T extends { path: string; sha256: string; bytes: number }>(\n  absoluteStateDir: string,\n  make: (includeContent: boolean) => AsyncIterable<T>,\n  includeContent: boolean,\n  verify?: () => Promise<void>\n): AsyncIterable<T> {\n  const lockPath = embeddingGenerationLockPath(absoluteStateDir);\n  // Capture only bounded metadata under the lock, never large content or\n  // network backpressure. Every emitted record must match this complete\n  // generation census; a concurrent swap/dirty write aborts the stream.\n  const baseline = await withEmbeddingGenerationLock(absoluteStateDir, async (section) => {\n    await verify?.();\n    const records: Array<{ path: string; sha256: string; bytes: number }> = [];\n    for await (const record of make(false)) {\n      await assertEmbeddingGenerationLockHeld(lockPath, section);\n      records.push({ path: record.path, sha256: record.sha256, bytes: record.bytes });\n    }\n    return records;\n  });\n  let count = 0;\n  for await (const record of make(includeContent)) {\n    const expected = baseline[count++];\n    if (!expected || expected.path !== record.path || expected.sha256 !== record.sha256 || expected.bytes !== record.bytes) {\n      throw new Error(`embedding generation changed while streaming ${absoluteStateDir}; retry the snapshot`);\n    }\n    yield record;\n  }\n  if (count !== baseline.length) {\n    throw new Error(`embedding generation changed while streaming ${absoluteStateDir}; retry the snapshot`);\n  }\n}\n"],"mappings":";;;;;;AAwBA,OAAO,UAAU;AAIjB,IAAM,gBAAgB;AAEtB,IAAM,mBAAmB;AAgBlB,IAAM,mCAAN,cAA+C,MAAM;AAAA,EAC1D,YAAY,UAAkB;AAC5B;AAAA,MACE,+CAA+C,QAAQ;AAAA,IACzD;AACA,SAAK,OAAO;AAAA,EACd;AACF;AAGO,IAAM,0CAAN,cAAsD,MAAM;AAAA,EACjE,YAAY,UAAkB,QAA6B;AACzD,UAAM,iEAAiE,QAAQ,KAAK,MAAM,GAAG;AAC7F,SAAK,OAAO;AAAA,EACd;AACF;AAQO,SAAS,4BAA4B,kBAAkC;AAC5E,QAAM,WAAW,KAAK,QAAQ,gBAAgB;AAC9C,SAAO,KAAK,KAAK,UAAU,iBAAiB,SAAS,2BAA2B;AAClF;AAOA,eAAsB,kCACpB,UACA,SACe;AACf,MAAI,CAAE,MAAM,QAAQ,QAAQ,EAAI,OAAM,IAAI,iCAAiC,QAAQ;AACrF;AASO,SAAS,4BACd,kBACA,IACY;AACZ,QAAM,WAAW,4BAA4B,gBAAgB;AAC7D,SAAO;AAAA,IAAmB;AAAA,IAAU,MAClC,iBAAiB,UAAU,EAAE,SAAS,eAAe,WAAW,iBAAiB,GAAG,CAAC,UAAU,SAAS;AACtG,UAAI,CAAC,UAAU;AACb,cAAM,IAAI,wCAAwC,UAAU,KAAK,WAAW,OAAO;AAAA,MACrF;AACA,aAAO,GAAG,IAAI;AAAA,IAChB,CAAC;AAAA,EACH;AACF;AAIA,gBAAuB,gCACrB,kBACA,MACA,gBACA,QACkB;AAClB,QAAM,WAAW,4BAA4B,gBAAgB;AAI7D,QAAM,WAAW,MAAM,4BAA4B,kBAAkB,OAAO,YAAY;AACtF,UAAM,SAAS;AACf,UAAM,UAAkE,CAAC;AACzE,qBAAiB,UAAU,KAAK,KAAK,GAAG;AACtC,YAAM,kCAAkC,UAAU,OAAO;AACzD,cAAQ,KAAK,EAAE,MAAM,OAAO,MAAM,QAAQ,OAAO,QAAQ,OAAO,OAAO,MAAM,CAAC;AAAA,IAChF;AACA,WAAO;AAAA,EACT,CAAC;AACD,MAAI,QAAQ;AACZ,mBAAiB,UAAU,KAAK,cAAc,GAAG;AAC/C,UAAM,WAAW,SAAS,OAAO;AACjC,QAAI,CAAC,YAAY,SAAS,SAAS,OAAO,QAAQ,SAAS,WAAW,OAAO,UAAU,SAAS,UAAU,OAAO,OAAO;AACtH,YAAM,IAAI,MAAM,gDAAgD,gBAAgB,sBAAsB;AAAA,IACxG;AACA,UAAM;AAAA,EACR;AACA,MAAI,UAAU,SAAS,QAAQ;AAC7B,UAAM,IAAI,MAAM,gDAAgD,gBAAgB,sBAAsB;AAAA,EACxG;AACF;","names":[]}

package/dist/{chunk-HESDNYRB.js → chunk-76M5OK7V.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-AERXJCOG.js";
 import {
   deriveSourceConnector
-} from "./chunk-TM3RXL4G.js";
+} from "./chunk-BUQKSQXL.js";
 import {
   resolvePipelineProcessingCapabilities
 } from "./chunk-BMXEBWBT.js";
@@ -112,4 +112,4 @@ export {
   renderExtractionConversation,
   applyGroundingWithConnector
 };
-//# sourceMappingURL=chunk-HESDNYRB.js.map
+//# sourceMappingURL=chunk-76M5OK7V.js.map

package/dist/{chunk-FAN73COB.js → chunk-7D7OUO5W.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-7T4TOGMS.js";
 import {
   defineOperation
-} from "./chunk-FOH7AMMI.js";
+} from "./chunk-CALBQ2NG.js";
 
 // src/external-wiki-access.ts
 import { z } from "zod";
@@ -26,4 +26,4 @@ var externalWikiSearchOperation = defineOperation({
 export {
   externalWikiSearchOperation
 };
-//# sourceMappingURL=chunk-FAN73COB.js.map
+//# sourceMappingURL=chunk-7D7OUO5W.js.map

package/dist/{chunk-DZ525SNQ.js → chunk-7QE46QXI.js}

@@ -318,4 +318,4 @@ export {
   readProjectedHarmonicGraph,
   searchHarmonicRetrieval
 };
-//# sourceMappingURL=chunk-DZ525SNQ.js.map
+//# sourceMappingURL=chunk-7QE46QXI.js.map

package/dist/{chunk-VX6GCKBS.js → chunk-7WBSMXGC.js}

@@ -7,10 +7,10 @@ import {
 import {
   listMemoryGovernanceRuns,
   readMemoryGovernanceRunArtifact
-} from "./chunk-VLLD4TOB.js";
+} from "./chunk-NMZVDRVP.js";
 import {
   StorageManager
-} from "./chunk-FRCESVV6.js";
+} from "./chunk-4HUCP4R4.js";
 import {
   normalizeProjectionPreview,
   normalizeProjectionTags
@@ -21,7 +21,7 @@ import {
   readProjectedGovernanceRows,
   readProjectedNativeKnowledgeRows,
   writeProjectionMetaHighWater
-} from "./chunk-JE334SIA.js";
+} from "./chunk-22DYJLFN.js";
 import {
   MEMORY_LIFECYCLE_EVENT_SORT_ORDER,
   buildLifecycleEventsForMemory,
@@ -1005,4 +1005,4 @@ export {
   verifyMemoryProjection,
   repairMemoryProjection
 };
-//# sourceMappingURL=chunk-VX6GCKBS.js.map
+//# sourceMappingURL=chunk-7WBSMXGC.js.map

package/dist/{chunk-VVDWZRZG.js → chunk-A6RVIHHK.js}

@@ -4,10 +4,10 @@ import {
 } from "./chunk-7CRUDH7G.js";
 import {
   composeSalvagedEnvelope
-} from "./chunk-6ET2VII7.js";
+} from "./chunk-JYG2334B.js";
 import {
   StorageManager
-} from "./chunk-FRCESVV6.js";
+} from "./chunk-4HUCP4R4.js";
 import {
   parseContinuityImprovementLoops
 } from "./chunk-LDXUBPMO.js";
@@ -1283,4 +1283,4 @@ export {
   defaultTierMigrationCycleBudget,
   CompoundingEngine
 };
-//# sourceMappingURL=chunk-VVDWZRZG.js.map
+//# sourceMappingURL=chunk-A6RVIHHK.js.map

package/dist/{chunk-M536WNTQ.js → chunk-AEJ3TE5H.js}

@@ -1,6 +1,6 @@
 import {
   runLocationSync
-} from "./chunk-MQJL6CDZ.js";
+} from "./chunk-VA4O3U7U.js";
 import {
   log
 } from "./chunk-3WCASNQZ.js";
@@ -58,4 +58,4 @@ export {
   LOCATION_SYNC_DEFAULT_INTERVAL_MS,
   startLocationAutoSync
 };
-//# sourceMappingURL=chunk-M536WNTQ.js.map
+//# sourceMappingURL=chunk-AEJ3TE5H.js.map

package/dist/{chunk-72JNNJJJ.js → chunk-AXC4WSF3.js}

@@ -37,10 +37,10 @@ import {
 } from "./chunk-YCVB7X56.js";
 import {
   fillWearableConversationLocations
-} from "./chunk-BMYZTZ5D.js";
+} from "./chunk-MY7B3HYC.js";
 import {
   composeMemoryEnvelope
-} from "./chunk-GDYU6VF4.js";
+} from "./chunk-5AYUHSAU.js";
 import {
   log
 } from "./chunk-3WCASNQZ.js";
@@ -1329,4 +1329,4 @@ export {
   syncWearableSource,
   defaultTimezone
 };
-//# sourceMappingURL=chunk-72JNNJJJ.js.map
+//# sourceMappingURL=chunk-AXC4WSF3.js.map