@remnic/core 9.7.15 → 9.8.0

package/dist/chunk-NWTGD4AN.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/local-llm.ts"],"sourcesContent":["import { log } from \"./logger.js\";\nimport type { PluginConfig } from \"./types.js\";\nimport fs from \"node:fs\";\nimport os from \"node:os\";\nimport type { ModelRegistry } from \"./model-registry.js\";\nimport { launchProcessSync } from \"./runtime/child-process.js\";\nimport { mergeEnv, readEnvVar } from \"./runtime/env.js\";\nimport { resolveLocalLlmCapabilities } from \"./capabilities.js\";\nimport { resolvePipelineProcessingCapabilities } from \"./capabilities.js\";\n\n/** Trim trailing slash characters without backtracking regex. */\nfunction trimTrailingSlashes(s: string): string {\n  let end = s.length;\n  while (end > 0 && s[end - 1] === \"/\") end--;\n  return s.substring(0, end);\n}\n\nfunction stripTrailingV1Path(s: string): string {\n  return s.endsWith(\"/v1\") ? s.slice(0, -3) : s;\n}\n\nfunction explicitPortFromUrl(s: string): number | null {\n  try {\n    const parsed = new URL(s);\n    if (!parsed.port) return null;\n    const port = Number(parsed.port);\n    return Number.isInteger(port) ? port : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction isObjectRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null;\n}\n\nfunction isLlamaCppPropsResponse(value: unknown): boolean {\n  return (\n    isObjectRecord(value) &&\n    isObjectRecord(value.default_generation_settings) &&\n    typeof value.total_slots === \"number\" &&\n    (\n      typeof value.model_path === \"string\" ||\n      typeof value.chat_template === \"string\" ||\n      typeof value.build_info === \"string\"\n    )\n  );\n}\n\nfunction isLlamaCppModelsResponse(value: unknown): boolean {\n  if (!isObjectRecord(value) || !Array.isArray(value.data)) {\n    return false;\n  }\n  return value.data.some((entry) => {\n    if (!isObjectRecord(entry)) return false;\n    if (entry.owned_by === \"llamacpp\") return true;\n    if (typeof entry.id === \"string\" && entry.id.endsWith(\".gguf\")) return true;\n    const meta = entry.meta;\n    return (\n      isObjectRecord(meta) &&\n      (\"n_ctx_train\" in meta || \"n_params\" in meta || \"vocab_type\" in meta)\n    );\n  });\n}\n\nfunction isLmStudioApiV1ModelsResponse(value: unknown): boolean {\n  if (!isObjectRecord(value) || !Array.isArray(value.models)) {\n    return false;\n  }\n  return value.models.some((entry) => {\n    if (!isObjectRecord(entry)) return false;\n    return (\n      typeof entry.key === \"string\" &&\n      typeof entry.display_name === \"string\" &&\n      (\n        typeof entry.format === \"string\" ||\n        typeof entry.max_context_length === \"number\" ||\n        Array.isArray(entry.loaded_instances)\n      )\n    );\n  });\n}\n\nfunction isLmStudioApiV0ModelsResponse(value: unknown): boolean {\n  if (!isObjectRecord(value) || !Array.isArray(value.data)) {\n    return false;\n  }\n  return value.data.some((entry) => {\n    if (!isObjectRecord(entry)) return false;\n    return (\n      typeof entry.id === \"string\" &&\n      typeof entry.publisher === \"string\" &&\n      (\n        typeof entry.compatibility_type === \"string\" ||\n        typeof entry.max_context_length === \"number\" ||\n        typeof entry.state === \"string\"\n      )\n    );\n  });\n}\n\nfunction isLmStudioNativeModelsResponse(value: unknown): boolean {\n  return isLmStudioApiV1ModelsResponse(value) || isLmStudioApiV0ModelsResponse(value);\n}\n\n/**\n * Local LLM client for OpenAI-compatible endpoints (LM Studio, Ollama, MLX, etc.)\n *\n * Based on openclaw-tactician's provider detection patterns for consistency.\n * Provides privacy-preserving, cost-effective LLM operations with\n * graceful fallback to cloud providers when local LLM is unavailable.\n */\nexport type LocalLlmType = \"lmstudio\" | \"ollama\" | \"mlx\" | \"vllm\" | \"llamacpp\" | \"generic\";\n\n/**\n * Backends known to honor `chat_template_kwargs: { enable_thinking: false }`\n * on OpenAI-compatible `/v1/chat/completions`.  LM Studio, vLLM, and\n * llama.cpp forward this field to the jinja chat template, where thinking-capable\n * models (Qwen 3.5, Gemma 4, DeepSeek) suppress reasoning tokens.\n *\n * Strict OpenAI-compatible backends (standard OpenAI, Azure OpenAI, some\n * proxies) reject unknown request fields with 400 — which trips the\n * `localLlm400*` cooldown path.  `LocalLlmClient` therefore only injects\n * the kwarg when the detected backend is in this set; unknown / `generic`\n * / `ollama` / `mlx` fail open (no injection, no 400 risk).  Issue #548.\n */\nconst THINKING_COMPATIBLE_BACKENDS: ReadonlySet<LocalLlmType> = new Set([\n  \"lmstudio\",\n  \"vllm\",\n  \"llamacpp\",\n]);\n\nconst THINKING_SUPPRESSED_OPERATIONS: ReadonlySet<string> = new Set([\n  \"extraction\",\n  \"extraction-judge\",\n  \"extraction-faithfulness\",\n  \"contradiction-judge\",\n  \"contradiction_verification\",\n  \"link_suggestion\",\n  \"memory_summarization\",\n  \"proactive_extraction\",\n  \"lcm-summarize\",\n  \"day_summary\",\n  \"hourly_summary\",\n  \"hourly_summary_extended\",\n]);\n\ninterface LocalServerConfig {\n  type: LocalLlmType;\n  defaultPort: number;\n  healthEndpoint: string;\n  modelsEndpoint: string;\n  detectFn: (response: unknown) => boolean;\n}\n\nconst LOCAL_SERVERS: LocalServerConfig[] = [\n  {\n    type: \"ollama\",\n    defaultPort: 11434,\n    healthEndpoint: \"/\",\n    modelsEndpoint: \"/api/tags\",\n    detectFn: (resp) => typeof resp === \"string\" && resp.includes(\"Ollama\"),\n  },\n  {\n    type: \"llamacpp\",\n    defaultPort: 8080,\n    healthEndpoint: \"/health\",\n    modelsEndpoint: \"/v1/models\",\n    detectFn: (resp) => isObjectRecord(resp) && resp.status === \"ok\",\n  },\n  {\n    type: \"mlx\",\n    defaultPort: 8080,\n    healthEndpoint: \"/v1/models\",\n    modelsEndpoint: \"/v1/models\",\n    detectFn: (resp) => isObjectRecord(resp) && Array.isArray(resp.data),\n  },\n  {\n    type: \"lmstudio\",\n    defaultPort: 1234,\n    healthEndpoint: \"/v1/models\",\n    modelsEndpoint: \"/v1/models\",\n    detectFn: (resp) => isObjectRecord(resp) && Array.isArray(resp.data),\n  },\n  {\n    type: \"vllm\",\n    defaultPort: 8000,\n    healthEndpoint: \"/health\",\n    modelsEndpoint: \"/v1/models\",\n    detectFn: (resp) => resp === \"\" || (isObjectRecord(resp) && !(\"status\" in resp)),\n  },\n];\n\nfunction orderedLocalServers(configuredBaseUrl: string): LocalServerConfig[] {\n  const configuredPort = explicitPortFromUrl(configuredBaseUrl);\n  if (configuredPort === null) return LOCAL_SERVERS;\n  const matching = LOCAL_SERVERS.filter(\n    (serverConfig) => serverConfig.defaultPort === configuredPort,\n  );\n  if (matching.length === 0) return LOCAL_SERVERS;\n  const matchingTypes = new Set(matching.map((serverConfig) => serverConfig.type));\n  return [\n    ...matching,\n    ...LOCAL_SERVERS.filter((serverConfig) => !matchingTypes.has(serverConfig.type)),\n  ];\n}\n\nexport interface LocalModelInfo {\n  id: string;\n  contextWindow?: number;\n  maxTokens?: number;\n}\n\nexport type LocalLlmRequestPriority = \"recall-critical\" | \"background\";\n\ninterface LocalLlmChatCompletionOptions {\n  temperature?: number;\n  maxTokens?: number;\n  responseFormat?: { type: string };\n  timeoutMs?: number;\n  operation?: string;\n  forceDisableThinking?: boolean;\n  priority?: LocalLlmRequestPriority;\n}\n\ninterface LocalLlmQueuedRequest {\n  messages: Array<{ role: string; content: string }>;\n  options: LocalLlmChatCompletionOptions;\n  priority: LocalLlmRequestPriority;\n  enqueuedAtMs: number;\n  resolve: (value: LocalLlmChatCompletionResult | null) => void;\n}\n\ninterface LocalLlmChatCompletionResult {\n  content: string;\n  usage?: { promptTokens: number; completionTokens: number; totalTokens: number };\n}\n\nconst LOCAL_LLM_GLOBAL_BACKEND_STATE = \"__openclawEngramLocalLlmBackendState\";\n\ntype LocalLlmBackendState = {\n  untilMs: number;\n  reason: string;\n};\nexport class LocalLlmClient {\n  private config: PluginConfig;\n  private isAvailable: boolean | null = null;\n  private lastHealthCheck: number = 0;\n  private detectedType: LocalLlmType | null = null;\n  private cachedModelInfo: LocalModelInfo | null = null;\n  private cachedLmsContext: number | null = null;\n  private lastLmsCheck: number = 0;\n  private consecutive400s: number = 0;\n  private cooldownUntilMs: number = 0;\n  private modelRegistry?: ModelRegistry;\n  private _disableThinking: boolean = false;\n  private readonly requestQueues: Record<LocalLlmRequestPriority, LocalLlmQueuedRequest[]> = {\n    \"recall-critical\": [],\n    background: [],\n  };\n  private readonly queueProcessing = new Set<LocalLlmRequestPriority>();\n  private queueDrainScheduled: boolean = false;\n  private static readonly HEALTH_CHECK_INTERVAL_MS = 60000; // 1 minute\n  private static readonly LMS_CACHE_INTERVAL_MS = 30000; // 30 seconds\n\n  constructor(config: PluginConfig, modelRegistry?: ModelRegistry) {\n    this.config = config;\n    this.modelRegistry = modelRegistry;\n  }\n\n  /**\n   * Request thinking/reasoning suppression on the next chat completion.\n   *\n   * When `true`, the client will inject\n   * `chat_template_kwargs: { enable_thinking: false }` into the request\n   * body — **but only when the detected backend is known to support it**\n   * (LM Studio, vLLM; see `THINKING_COMPATIBLE_BACKENDS`).  Strict\n   * OpenAI-compat backends reject unknown fields with 400; on those the\n   * client fails open (thinking runs normally).  This is the safe\n   * default for Remnic extraction-style operations: measurable latency\n   * win on thinking-capable backends, zero risk on others. Consolidation\n   * operations keep thinking enabled unless explicitly added to\n   * `THINKING_SUPPRESSED_OPERATIONS`. Issues #548 and #979.\n   */\n  set disableThinking(value: boolean) {\n    this._disableThinking = value;\n  }\n\n  private resolveHomeDir(): string {\n    return this.config.localLlmHomeDir || readEnvVar(\"HOME\") || os.homedir();\n  }\n\n  private buildRequestHeaders(base: Record<string, string> = {}): Record<string, string> {\n    const headers: Record<string, string> = {\n      ...base,\n      ...(this.config.localLlmHeaders ?? {}),\n    };\n    if (this.config.localLlmApiKey && this.config.localLlmAuthHeader !== false) {\n      headers.Authorization = `Bearer ${this.config.localLlmApiKey}`;\n    }\n    return headers;\n  }\n\n  private isAbortError(err: unknown): boolean {\n    if (!err || typeof err !== \"object\") return false;\n    const maybe = err as { name?: string; message?: string };\n    return (\n      maybe.name === \"AbortError\" ||\n      maybe.message === \"This operation was aborted\" ||\n      maybe.message === \"The operation was aborted\"\n    );\n  }\n\n  /**\n   * Set the ModelRegistry for caching detected capabilities\n   */\n  setModelRegistry(registry: ModelRegistry): void {\n    this.modelRegistry = registry;\n  }\n\n  /**\n   * Get the detected server type (null if not detected)\n   */\n  getDetectedType(): LocalLlmType | null {\n    return this.detectedType;\n  }\n\n  private getBackendKey(): string {\n    return trimTrailingSlashes(\n      this.config.localLlmUrl.replace(\"localhost\", \"127.0.0.1\"),\n    ).replace(/\\/v1$/, \"\");\n  }\n\n  private getGlobalBackendState(): Map<string, LocalLlmBackendState> {\n    const globalAny = globalThis as typeof globalThis & {\n      [LOCAL_LLM_GLOBAL_BACKEND_STATE]?: Map<string, LocalLlmBackendState>;\n    };\n    if (!globalAny[LOCAL_LLM_GLOBAL_BACKEND_STATE]) {\n      globalAny[LOCAL_LLM_GLOBAL_BACKEND_STATE] = new Map();\n    }\n    return globalAny[LOCAL_LLM_GLOBAL_BACKEND_STATE];\n  }\n\n  private getTrippedBackendState(now: number): LocalLlmBackendState | null {\n    const state = this.getGlobalBackendState().get(this.getBackendKey()) ?? null;\n    if (!state) return null;\n    if (state.untilMs <= now) {\n      this.getGlobalBackendState().delete(this.getBackendKey());\n      this.lastHealthCheck = 0;\n      return null;\n    }\n    return state;\n  }\n\n  private markBackendUnavailable(reason: string, durationMs: number): void {\n    const normalizedReason = this.normalizeBackendTripReason(reason);\n    if (durationMs > 0) {\n      const untilMs = Date.now() + durationMs;\n      this.getGlobalBackendState().set(this.getBackendKey(), { untilMs, reason: normalizedReason });\n    } else {\n      this.getGlobalBackendState().delete(this.getBackendKey());\n    }\n    this.isAvailable = false;\n    this.lastHealthCheck = 0;\n    log.warn(\n      `local LLM backend unavailable for ${durationMs}ms: model=${this.config.localLlmModel} reason=${normalizedReason}`,\n    );\n  }\n\n  private extractNonRecoverableBackendReason(reason: string): string | null {\n    const match = reason.match(\n      /Failed to load model|Library not loaded|different Team IDs|code signature|llm_engine_mlx_amphibian/i,\n    );\n    return match?.[0] ?? null;\n  }\n\n  private extractNonRecoverableBackendReasonFromErrorText(errorText: string): string | null {\n    const directReason = this.extractNonRecoverableBackendReason(errorText);\n    if (directReason) return directReason;\n    try {\n      const parsed = JSON.parse(errorText) as { error?: { message?: string } };\n      return this.extractNonRecoverableBackendReason(parsed?.error?.message ?? \"\");\n    } catch {\n      return null;\n    }\n  }\n\n  private normalizeBackendTripReason(reason: string): string {\n    const cleaned = reason.replace(/\\s+/g, \" \").replace(/^[-:–—\\s]+/, \"\").trim();\n    if (!cleaned) return \"unknown local backend failure\";\n    return cleaned.length > 160 ? `${cleaned.slice(0, 157)}...` : cleaned;\n  }\n\n  /**\n   * Fetch with timeout for health checks\n   */\n  private async fetchWithTimeout(\n    url: string,\n    timeoutMs: number = 2000,\n    headers?: Record<string, string>,\n  ): Promise<{ ok: boolean; data: unknown; status: number | null }> {\n    const controller = new AbortController();\n    const timeout = setTimeout(() => controller.abort(), timeoutMs);\n\n    try {\n      const response = await fetch(url, {\n        signal: controller.signal,\n        headers: this.buildRequestHeaders({ Accept: \"application/json\", ...(headers ?? {}) }),\n      });\n      clearTimeout(timeout);\n\n      if (!response.ok) {\n        return { ok: false, data: null, status: response.status };\n      }\n\n      const contentType = response.headers.get(\"content-type\");\n      if (contentType?.includes(\"application/json\")) {\n        return { ok: true, data: await response.json(), status: response.status };\n      } else {\n        return { ok: true, data: await response.text(), status: response.status };\n      }\n    } catch (err) {\n      clearTimeout(timeout);\n      return { ok: false, data: null, status: null };\n    }\n  }\n\n  private async probeLmStudioNativeModels(\n    probeBaseUrl: string,\n  ): Promise<{ matched: boolean; unauthorized: boolean }> {\n    let unauthorized = false;\n    for (const endpoint of [\"/api/v1/models\", \"/api/v0/models\"]) {\n      const probe = await this.fetchWithTimeout(`${probeBaseUrl}${endpoint}`);\n      if (probe.ok && isLmStudioNativeModelsResponse(probe.data)) {\n        return { matched: true, unauthorized };\n      }\n      if (probe.status === 401 || probe.status === 403) {\n        unauthorized = true;\n      }\n    }\n    return { matched: false, unauthorized };\n  }\n\n  /**\n   * Check if local LLM is available\n   * Uses 127.0.0.1 instead of localhost to avoid DNS issues (consistent with tactician)\n   */\n  async checkAvailability(): Promise<boolean> {\n    // Cache health check results for 1 minute\n    const now = Date.now();\n    const trippedState = this.getTrippedBackendState(now);\n    if (trippedState) {\n      this.isAvailable = false;\n      this.lastHealthCheck = 0;\n      log.info(\n        `local LLM availability: backend circuit open for ${Math.max(0, trippedState.untilMs - now)}ms (${trippedState.reason})`,\n      );\n      return false;\n    }\n    if (this.isAvailable !== null && now - this.lastHealthCheck < LocalLlmClient.HEALTH_CHECK_INTERVAL_MS) {\n      return this.isAvailable;\n    }\n\n    // Normalize URL - replace localhost with 127.0.0.1, remove trailing slashes.\n    // Probe server-native endpoints from the server root even when users configure\n    // the OpenAI-compatible `/v1` base URL for chat completions.\n    const configuredBaseUrl = trimTrailingSlashes(\n      this.config.localLlmUrl.replace(\"localhost\", \"127.0.0.1\"),\n    );\n    const probeBaseUrl = stripTrailingV1Path(configuredBaseUrl);\n    let sawUnauthorizedProbe = false;\n\n    // Try to detect which server type is running\n    for (const serverConfig of orderedLocalServers(configuredBaseUrl)) {\n      const healthUrl = `${probeBaseUrl}${serverConfig.healthEndpoint}`;\n      log.debug(`checking ${serverConfig.type} at ${healthUrl}`);\n\n      const result = await this.fetchWithTimeout(healthUrl);\n      if (result.ok && serverConfig.detectFn(result.data)) {\n        if (serverConfig.type === \"mlx\") {\n          const lmStudioProbe = await this.probeLmStudioNativeModels(probeBaseUrl);\n          if (lmStudioProbe.unauthorized) {\n            sawUnauthorizedProbe = true;\n          }\n          if (lmStudioProbe.matched) {\n            this.isAvailable = true;\n            this.detectedType = \"lmstudio\";\n            this.lastHealthCheck = now;\n            log.info(`detected lmstudio at ${configuredBaseUrl}`);\n            return true;\n          }\n        }\n        if (serverConfig.type === \"llamacpp\") {\n          let sawLlamaCppSignal = false;\n          const propsProbe = await this.fetchWithTimeout(`${probeBaseUrl}/props`);\n          if (propsProbe.ok && isLlamaCppPropsResponse(propsProbe.data)) {\n            sawLlamaCppSignal = true;\n          }\n          if (propsProbe.status === 401 || propsProbe.status === 403) {\n            sawUnauthorizedProbe = true;\n          }\n\n          const modelsUrl = `${probeBaseUrl}${serverConfig.modelsEndpoint}`;\n          const modelsProbe = await this.fetchWithTimeout(modelsUrl);\n          if (modelsProbe.ok && isLlamaCppModelsResponse(modelsProbe.data)) {\n            sawLlamaCppSignal = true;\n          }\n          if (modelsProbe.status === 401 || modelsProbe.status === 403) {\n            sawUnauthorizedProbe = true;\n            continue;\n          }\n\n          const authConfigured =\n            Boolean(this.config.localLlmApiKey) &&\n            this.config.localLlmAuthHeader !== false;\n          if (!sawLlamaCppSignal || (authConfigured && !modelsProbe.ok)) {\n            continue;\n          }\n        }\n        this.isAvailable = true;\n        this.detectedType = serverConfig.type;\n        this.lastHealthCheck = now;\n        log.info(`detected ${serverConfig.type} at ${configuredBaseUrl}`);\n        return true;\n      }\n      if (result.status === 401 || result.status === 403) {\n        sawUnauthorizedProbe = true;\n      }\n    }\n\n    // Generic check if specific detection failed\n    try {\n      const modelsUrl = `${probeBaseUrl}/v1/models`;\n      const result = await this.fetchWithTimeout(modelsUrl);\n      if (result.ok) {\n        this.isAvailable = true;\n        this.detectedType = \"generic\";\n        this.lastHealthCheck = now;\n        log.info(`detected generic OpenAI-compatible server at ${configuredBaseUrl}`);\n        return true;\n      }\n      if (result.status === 401 || result.status === 403) {\n        sawUnauthorizedProbe = true;\n      }\n    } catch {\n      // Fall through to unavailable\n    }\n\n    this.isAvailable = false;\n    this.detectedType = null;\n    this.lastHealthCheck = now;\n    if (sawUnauthorizedProbe) {\n      log.warn(\n        `local LLM availability probe was unauthorized at ${configuredBaseUrl}; verify localLlmApiKey and localLlmAuthHeader settings`,\n      );\n    }\n    log.debug(\"local LLM not available at\", configuredBaseUrl);\n    return false;\n  }\n\n  /**\n   * Try to get context window from LM Studio settings.json as fallback.\n   * This reads the defaultContextLength setting which is what LM Studio uses\n   * when loading models without explicit context configuration.\n   */\n  private getContextFromLmStudioSettings(): number | null {\n    try {\n      const homeDir = this.resolveHomeDir();\n      const settingsPath = `${homeDir}/.cache/lm-studio/settings.json`;\n\n      if (!fs.existsSync(settingsPath)) {\n        log.debug(`LM Studio settings: file not found at ${settingsPath}`);\n        return null;\n      }\n\n      const content = fs.readFileSync(settingsPath, \"utf-8\");\n      const settings = JSON.parse(content) as {\n        defaultContextLength?: {\n          type?: string;\n          value?: number;\n        };\n      };\n\n      if (settings.defaultContextLength?.value) {\n        const contextWindow = settings.defaultContextLength.value;\n        log.debug(`LM Studio settings: found default context length: ${contextWindow}`);\n        return contextWindow;\n      }\n\n      return null;\n    } catch (err) {\n      const errorMsg = err instanceof Error ? err.message : String(err);\n      log.debug(`LM Studio settings: failed to read - ${errorMsg}`);\n      return null;\n    }\n  }\n\n  /**\n   * Try to get context window from LMS CLI (LM Studio specific).\n   * Uses --json flag for reliable parsing.\n   * Returns null if LMS CLI is not available or model not found.\n   */\n  private getContextFromLmsCli(modelId: string): number | null {\n    try {\n      // Check if lms CLI exists in common locations.\n      // HOME may be absent in launchd environments, so prefer the resolved helper.\n      const homeDir = this.resolveHomeDir();\n      const lmsPaths = [\n        this.config.localLmsCliPath || \"\",\n        `${homeDir}/.cache/lm-studio/bin/lms`,\n        \"/usr/local/bin/lms\",\n        \"/opt/homebrew/bin/lms\",\n      ];\n\n      const lmsPath = lmsPaths.find((p) => p.length > 0 && fs.existsSync(p));\n      if (!lmsPath) {\n        log.debug(`LMS CLI: not found in standard locations (checked: ${lmsPaths.join(\", \")})`);\n        return null;\n      }\n\n      // Run lms ps --json to get loaded models with context\n      // Use spawnSync with shell and explicit PATH to ensure lms can find its dependencies\n      log.debug(`LMS CLI: running: ${lmsPath} ps --json`);\n      const existingPath = readEnvVar(\"PATH\") || \"\";\n      const result = launchProcessSync(lmsPath, [\"ps\", \"--json\"], {\n        encoding: \"utf-8\",\n        timeout: 5000,\n        shell: false, // Don't use shell for JSON output - more reliable\n        env: mergeEnv({\n          PATH: `${this.config.localLmsBinDir || `${homeDir}/.cache/lm-studio/bin`}:/usr/local/bin:/opt/homebrew/bin:/usr/bin:/bin:${existingPath}`,\n          HOME: homeDir,\n        }),\n      });\n\n      if (result.error) {\n        log.debug(`LMS CLI: spawn error - ${result.error.message}`);\n        return null;\n      }\n\n      if (result.stderr && result.stderr.trim()) {\n        log.debug(`LMS CLI: stderr - ${result.stderr.slice(0, 200)}`);\n      }\n\n      const output = result.stdout || \"\";\n      if (!output.trim()) {\n        log.debug(\"LMS CLI: empty output - LM Studio may not be running or no models loaded\");\n        return null;\n      }\n\n      // Parse JSON output\n      let models: Array<{\n        identifier?: string;\n        modelKey?: string;\n        contextLength?: number;\n        maxContextLength?: number;\n      }>;\n\n      try {\n        models = JSON.parse(output) as typeof models;\n      } catch (parseErr) {\n        log.debug(`LMS CLI: JSON parse error - ${parseErr}`);\n        return null;\n      }\n\n      if (!Array.isArray(models) || models.length === 0) {\n        log.debug(\"LMS CLI: no models loaded\");\n        return null;\n      }\n\n      // Find the model matching our configured model ID\n      const model = models.find((m) =>\n        m.identifier === modelId ||\n        m.modelKey === modelId ||\n        (m.identifier?.includes(modelId.replace(/@\\d+bit$/, \"\")))\n      );\n\n      if (!model) {\n        log.debug(`LMS CLI: model \"${modelId}\" not found in loaded models: ${models.map(m => m.identifier).join(\", \")}`);\n        return null;\n      }\n\n      // Use contextLength (actual configured) or fall back to maxContextLength (model max)\n      const contextWindow = model.contextLength || model.maxContextLength;\n\n      if (contextWindow) {\n        log.info(`LMS CLI detected context window: ${contextWindow} for ${modelId} (max: ${model.maxContextLength})`);\n        return contextWindow;\n      }\n\n      return null;\n    } catch (err) {\n      // LMS CLI not available or failed\n      const errorMsg = err instanceof Error ? err.message : String(err);\n      log.debug(`LMS CLI: failed - ${errorMsg}`);\n      return null;\n    }\n  }\n\n  /**\n   * Get full model info from LMS CLI including context length and max context length.\n   * Returns null if LMS CLI is unavailable or model not found.\n   */\n  private getLmsModelInfo(modelId: string): { contextLength: number; maxContextLength: number; identifier: string } | null {\n    try {\n      const result = launchProcessSync(\"lms\", [\"ps\", \"--json\"], {\n        encoding: \"utf-8\",\n        timeout: 5000,\n        shell: false,\n      });\n\n      if (result.error) {\n        return null;\n      }\n\n      const output = result.stdout || \"\";\n      if (!output.trim()) {\n        return null;\n      }\n\n      let models: Array<{\n        identifier?: string;\n        modelKey?: string;\n        contextLength?: number;\n        maxContextLength?: number;\n      }>;\n\n      try {\n        models = JSON.parse(output) as typeof models;\n      } catch {\n        return null;\n      }\n\n      if (!Array.isArray(models) || models.length === 0) {\n        return null;\n      }\n\n      const model = models.find((m) =>\n        m.identifier === modelId ||\n        m.modelKey === modelId ||\n        (m.identifier?.includes(modelId.replace(/@\\d+bit$/, \"\")))\n      );\n\n      if (!model || !model.contextLength) {\n        return null;\n      }\n\n      return {\n        contextLength: model.contextLength,\n        maxContextLength: model.maxContextLength || model.contextLength,\n        identifier: model.identifier || modelId,\n      };\n    } catch {\n      return null;\n    }\n  }\n\n  /**\n   * Get context window for the configured model, using cache if available.\n   * This method caches the result to avoid repeated LMS CLI calls.\n   * Order: ModelRegistry (persistent) -> memory cache -> LMS CLI -> settings.json\n   */\n  getCachedContextWindow(modelId: string): number | null {\n    const now = Date.now();\n\n    // 1. Check ModelRegistry for persisted context window\n    if (this.modelRegistry) {\n      const caps = this.modelRegistry.getCapabilities(modelId);\n      if (caps.source === \"lmstudio\" && caps.contextWindow) {\n        log.debug(`ModelRegistry: using persisted LM Studio context: ${caps.contextWindow}`);\n        // Also update memory cache\n        this.cachedLmsContext = caps.contextWindow;\n        this.lastLmsCheck = now;\n        return caps.contextWindow;\n      }\n    }\n\n    // 2. Return in-memory cached value if still valid\n    if (this.cachedLmsContext && now - this.lastLmsCheck < LocalLlmClient.LMS_CACHE_INTERVAL_MS) {\n      log.debug(`LMS CLI: returning in-memory cached context: ${this.cachedLmsContext}`);\n      return this.cachedLmsContext;\n    }\n\n    // 3. Try LMS CLI (authoritative source)\n    const lmsInfo = this.getLmsModelInfo(modelId);\n    if (lmsInfo?.contextLength) {\n      this.cachedLmsContext = lmsInfo.contextLength;\n      this.lastLmsCheck = now;\n      // Calculate appropriate output tokens based on context size\n      // Use 12.5% of context window, capped at 16K (generous but safe)\n      const calculatedOutputTokens = Math.min(Math.floor(lmsInfo.contextLength / 8), 16384);\n      const outputTokens = Math.max(calculatedOutputTokens, 4096); // Minimum 4K\n      // Persist to ModelRegistry with detected capabilities\n      if (this.modelRegistry) {\n        this.modelRegistry.setCapabilities(modelId, {\n          maxPositionEmbeddings: lmsInfo.maxContextLength || lmsInfo.contextLength,\n          contextWindow: lmsInfo.contextLength,\n          supportsExtendedContext: (lmsInfo.maxContextLength || lmsInfo.contextLength) > 65536,\n          typicalOutputTokens: outputTokens,\n          source: \"lmstudio\",\n        });\n        log.info(`LMS CLI: Stored capabilities for ${modelId}: ${lmsInfo.contextLength} context, ${outputTokens} output tokens`);\n      }\n      return lmsInfo.contextLength;\n    }\n\n    // Legacy: Try LMS CLI context only (fallback)\n    const legacyContext = this.getContextFromLmsCli(modelId);\n    if (legacyContext) {\n      this.cachedLmsContext = legacyContext;\n      this.lastLmsCheck = now;\n      // Persist to ModelRegistry with calculated output tokens\n      if (this.modelRegistry) {\n        const calculatedOutputTokens = Math.min(Math.floor(legacyContext / 8), 16384);\n        const outputTokens = Math.max(calculatedOutputTokens, 4096);\n        this.modelRegistry.setCapabilities(modelId, {\n          maxPositionEmbeddings: legacyContext,\n          contextWindow: legacyContext,\n          supportsExtendedContext: false,\n          typicalOutputTokens: outputTokens,\n          source: \"lmstudio\",\n        });\n      }\n      return legacyContext;\n    }\n\n    // 4. Fall back to LM Studio settings.json\n    const settingsContext = this.getContextFromLmStudioSettings();\n    if (settingsContext) {\n      log.info(`LM Studio settings: using default context: ${settingsContext}`);\n      this.cachedLmsContext = settingsContext;\n      this.lastLmsCheck = now;\n      return settingsContext;\n    }\n\n    return null;\n  }\n\n  /**\n   * Clear the LMS context cache. Call this when the model changes.\n   */\n  clearContextCache(): void {\n    this.cachedLmsContext = null;\n    this.lastLmsCheck = 0;\n    log.debug(\"LMS CLI: context cache cleared\");\n  }\n\n  private remainingCooldownMs(now: number = Date.now()): number {\n    return Math.max(0, this.cooldownUntilMs - now);\n  }\n\n  private scheduleQueueDrain(): void {\n    if (this.queueDrainScheduled) return;\n    this.queueDrainScheduled = true;\n\n    queueMicrotask(() => {\n      this.queueDrainScheduled = false;\n      this.startAvailableQueuedRequests();\n    });\n  }\n\n  private hasQueuedRequests(): boolean {\n    return (\n      this.requestQueues[\"recall-critical\"].length > 0 ||\n      this.requestQueues.background.length > 0\n    );\n  }\n\n  private dequeueQueuedRequest(priority: LocalLlmRequestPriority): LocalLlmQueuedRequest | null {\n    const next = this.requestQueues[priority].shift();\n    return next ?? null;\n  }\n\n  private failOpenQueuedRequestsForCooldown(): number {\n    let dropped = 0;\n    for (const priority of [\"recall-critical\", \"background\"] as const) {\n      while (this.requestQueues[priority].length > 0) {\n        const queued = this.requestQueues[priority].shift();\n        queued?.resolve(null);\n        dropped += 1;\n      }\n    }\n    return dropped;\n  }\n\n  private startAvailableQueuedRequests(): void {\n    if (!this.queueProcessing.has(\"recall-critical\")) {\n      const nextCritical = this.dequeueQueuedRequest(\"recall-critical\");\n      if (nextCritical) {\n        this.queueProcessing.add(\"recall-critical\");\n        void this.runQueuedRequest(nextCritical);\n      }\n    }\n\n    if (!this.queueProcessing.has(\"background\")) {\n      const nextBackground = this.dequeueQueuedRequest(\"background\");\n      if (nextBackground) {\n        this.queueProcessing.add(\"background\");\n        void this.runQueuedRequest(nextBackground);\n      }\n    }\n  }\n\n  private async runQueuedRequest(next: LocalLlmQueuedRequest): Promise<void> {\n    try {\n      const remainingCooldownMs = this.remainingCooldownMs();\n      if (remainingCooldownMs > 0) {\n        const additionalDropped = this.failOpenQueuedRequestsForCooldown();\n        log.warn(\n          `local LLM: cooldown active (${remainingCooldownMs}ms remaining), dropping ${additionalDropped + 1} queued request(s) fail-open`,\n        );\n        next.resolve(null);\n        return;\n      }\n\n      let result: LocalLlmChatCompletionResult | null = null;\n      try {\n        result = await this.runChatCompletionRequest(next.messages, next.options, {\n          priority: next.priority,\n          enqueuedAtMs: next.enqueuedAtMs,\n        });\n      } catch (err) {\n        log.warn(`local LLM queue drain failed open: ${err instanceof Error ? err.message : String(err)}`);\n      }\n      next.resolve(result);\n    } finally {\n      this.queueProcessing.delete(next.priority);\n      if (this.hasQueuedRequests()) {\n        this.scheduleQueueDrain();\n      }\n    }\n  }\n\n  private async runChatCompletionRequest(\n    messages: Array<{ role: string; content: string }>,\n    options: LocalLlmChatCompletionOptions,\n    queueMeta?: { priority: LocalLlmRequestPriority; enqueuedAtMs: number },\n  ): Promise<LocalLlmChatCompletionResult | null> {\n    log.debug(\n      `local LLM chatCompletion: localLlmEnabled=${resolveLocalLlmCapabilities(this.config).localLlm}, model=${this.config.localLlmModel}`,\n    );\n\n    const operation = options.operation ?? \"unspecified\";\n    const startedAtMs = Date.now();\n    if (queueMeta) {\n        log.debug(\n          `local LLM queue start: priority=${queueMeta.priority} waitMs=${startedAtMs - queueMeta.enqueuedAtMs} op=${operation}`,\n        );\n    }\n\n    try {\n      const isAvailable = await this.checkAvailability();\n      if (!isAvailable) {\n        log.debug(\n          `local LLM: checkAvailability returned false for ${this.config.localLlmUrl}`,\n        );\n        return null;\n      }\n\n      const promptChars = messages.reduce((sum, m) => sum + (m.content?.length ?? 0), 0);\n      const requestBody: Record<string, unknown> = {\n        model: this.config.localLlmModel,\n        messages,\n        temperature: options.temperature ?? 0.7,\n        // Use max_tokens consistent with cloud models\n        max_tokens: options.maxTokens ?? 4096,\n      };\n\n      // Skip response_format for local LLMs - they don't support json_object type\n      // The prompts already instruct the model to output JSON\n      // Only send if it's json_schema type which some local LLMs support\n      if (options.responseFormat?.type === \"json_schema\") {\n        requestBody.response_format = options.responseFormat;\n      }\n\n      // Suppress thinking/reasoning for operations that benefit from terse,\n      // structured output. Thinking-capable models (Qwen 3.5, Gemma 4,\n      // DeepSeek) default to thinking-on via their chat template; sending\n      // `chat_template_kwargs: { enable_thinking: false }` tells the template\n      // to skip reasoning tokens. Consolidation operations on the main client\n      // intentionally keep thinking enabled so entity resolution and\n      // deduplication can use the model's reasoning path. Fast-tier callers can\n      // still force suppression per request to preserve their low-latency\n      // contract.\n      //\n      // Gate the injection on detected backend support (issue #548,\n      // Codex P1 on PR #550): `chat_template_kwargs` is an LM Studio /\n      // vLLM / llama.cpp extension, not part of standard OpenAI chat\n      // completions.  Strict OpenAI-compatible backends reject\n      // unknown fields with 400, which trips the 400-cooldown path and\n      // can effectively disable local extraction.  Fail open when the\n      // backend hasn't been positively identified as thinking-capable.\n      const shouldSuppressThinking =\n        options.forceDisableThinking === true ||\n        (this._disableThinking &&\n          THINKING_SUPPRESSED_OPERATIONS.has(operation));\n      if (\n        shouldSuppressThinking &&\n        this.detectedType !== null &&\n        THINKING_COMPATIBLE_BACKENDS.has(this.detectedType)\n      ) {\n        requestBody.chat_template_kwargs = { enable_thinking: false };\n      } else if (shouldSuppressThinking && this.detectedType === \"ollama\") {\n        // Ollama's /v1 endpoint silently drops `chat_template_kwargs` AND\n        // `enable_thinking` — the ONLY field it maps to think-off is\n        // `reasoning_effort` (\"none\" → ThinkValue{false} in openai.go;\n        // verified against Ollama 0.32.0 source and live probes,\n        // issue #1996). Without this, thinking-capable models (Gemma 4,\n        // Qwen 3.5+) burn 1,700-2,000 reasoning tokens per extraction on\n        // Ollama, exceed the client timeout, and retry forever. The effort\n        // is configurable via `localLlmReasoningEffort` (default \"none\");\n        // an empty value disables injection (pre-#1996 behavior).\n        const effort = this.config.localLlmReasoningEffort;\n        if (effort) {\n          requestBody.reasoning_effort = effort;\n        }\n      }\n\n      // Normalize URL (use 127.0.0.1 instead of localhost)\n      const baseUrl = trimTrailingSlashes(\n        this.config.localLlmUrl.replace(\"localhost\", \"127.0.0.1\"),\n      );\n      const chatUrl = baseUrl.endsWith(\"/v1\")\n        ? `${baseUrl}/chat/completions`\n        : `${baseUrl}/v1/chat/completions`;\n\n      const requestBodyJson = JSON.stringify(requestBody);\n      log.debug(\n        `local LLM: sending request to ${chatUrl} with model ${this.config.localLlmModel}`,\n      );\n      // Avoid logging request bodies by default (can contain sensitive user content).\n      log.debug(`local LLM: request body length=${requestBodyJson.length}`);\n\n      // Write request body to file for debugging\n      if (this.config.debug) {\n        try {\n          const { writeFileSync } = await import(\"node:fs\");\n          writeFileSync(\"/tmp/engram-last-request.json\", requestBodyJson);\n        } catch {\n          /* ignore */\n        }\n      }\n\n      const effectiveTimeoutMs =\n        typeof options.timeoutMs === \"number\"\n          ? Math.min(this.config.localLlmTimeoutMs, options.timeoutMs)\n          : this.config.localLlmTimeoutMs;\n      const maxAttempts = 1 + Math.max(0, this.config.localLlmRetry5xxCount);\n      let response: Response | null = null;\n      let lastAbortError: Error | null = null;\n      for (let attempt = 1; attempt <= maxAttempts; attempt += 1) {\n        const attemptAbort = new AbortController();\n        const attemptTimeout = setTimeout(() => attemptAbort.abort(), effectiveTimeoutMs);\n        try {\n          response = await fetch(chatUrl, {\n            method: \"POST\",\n            headers: this.buildRequestHeaders({\n              \"Content-Type\": \"application/json\",\n            }),\n            body: JSON.stringify(requestBody),\n            signal: attemptAbort.signal,\n          });\n        } catch (err) {\n          if (!this.isAbortError(err)) throw err;\n          lastAbortError = err instanceof Error ? err : new Error(String(err));\n          if (attempt < maxAttempts) {\n            const backoffMs = this.config.localLlmRetryBackoffMs * attempt;\n            log.warn(\n              `local LLM request aborted: op=${operation} attempt=${attempt}/${maxAttempts} timeoutMs=${effectiveTimeoutMs} model=${this.config.localLlmModel}; retrying after ${backoffMs}ms`,\n            );\n            await new Promise((resolve) => setTimeout(resolve, backoffMs));\n            continue;\n          }\n          break;\n        } finally {\n          clearTimeout(attemptTimeout);\n        }\n\n        if (response.ok) break;\n        if (response.status >= 500 && attempt < maxAttempts) {\n          try {\n            const errorText = await response.clone().text();\n            const nonRecoverableReason =\n              this.extractNonRecoverableBackendReasonFromErrorText(errorText);\n            if (nonRecoverableReason) {\n              this.markBackendUnavailable(\n                nonRecoverableReason,\n                this.config.localLlm400CooldownMs,\n              );\n              this.consecutive400s = 0;\n              return null;\n            }\n          } catch (e) {\n            log.debug(`local LLM failed to inspect retryable error body: ${e}`);\n          }\n        }\n        if (response.status < 500 || attempt >= maxAttempts) break;\n\n        const backoffMs = this.config.localLlmRetryBackoffMs * attempt;\n        log.warn(\n          `local LLM request got ${response.status}; retrying (attempt ${attempt + 1}/${maxAttempts}) after ${backoffMs}ms`,\n        );\n        await new Promise((resolve) => setTimeout(resolve, backoffMs));\n      }\n      log.debug(\n        `local LLM: received response, status=${response?.status}, ok=${response?.ok}`,\n      );\n\n      if (!response) {\n        if (lastAbortError) {\n          log.warn(\n            `local LLM request aborted after ${maxAttempts} attempt(s): op=${operation} timeoutMs=${effectiveTimeoutMs} model=${this.config.localLlmModel} promptChars=${promptChars} durationMs=${Date.now() - startedAtMs}`,\n          );\n        } else {\n          log.warn(\n            `local LLM request failed: no response object (op=${operation} model=${this.config.localLlmModel} durationMs=${Date.now() - startedAtMs})`,\n          );\n        }\n        return null;\n      }\n\n      if (!response.ok) {\n        let reason = \"\";\n        let errorText = \"\";\n        try {\n          errorText = await response.text();\n          // Try to extract a stable error message without logging content.\n          try {\n            const parsed = JSON.parse(errorText) as { error?: { message?: string } };\n            reason = parsed?.error?.message ? ` — ${parsed.error.message}` : \"\";\n          } catch {\n            // Keep a short preview in debug only.\n            log.debug(`local LLM error body: ${errorText.slice(0, 500)}`);\n          }\n        } catch (e) {\n          log.debug(`local LLM failed to read error body: ${e}`);\n        }\n        log.warn(\n          `local LLM request failed: ${response.status} ${response.statusText}${reason} ` +\n          `(op=${operation}, model=${this.config.localLlmModel}, url=${chatUrl}, promptChars=${promptChars}, maxTokens=${requestBody.max_tokens as number})`,\n        );\n        const nonRecoverableReason =\n          this.extractNonRecoverableBackendReason(reason) ??\n          this.extractNonRecoverableBackendReasonFromErrorText(errorText);\n        if (nonRecoverableReason) {\n          this.markBackendUnavailable(\n            nonRecoverableReason,\n            this.config.localLlm400CooldownMs,\n          );\n          this.consecutive400s = 0;\n          return null;\n        }\n        if (response.status === 400) {\n          this.consecutive400s += 1;\n          if (this.consecutive400s >= this.config.localLlm400TripThreshold) {\n            this.cooldownUntilMs = Date.now() + this.config.localLlm400CooldownMs;\n            log.warn(\n              `local LLM: entering cooldown for ${this.config.localLlm400CooldownMs}ms ` +\n                `after ${this.consecutive400s} consecutive 400 responses`,\n            );\n            this.consecutive400s = 0;\n          }\n        } else {\n          this.consecutive400s = 0;\n        }\n        return null;\n      }\n      this.consecutive400s = 0;\n\n      const data = (await response.json()) as {\n        choices?: Array<{\n          message?: { content?: string; reasoning_content?: string };\n        }>;\n        usage?: {\n          prompt_tokens?: number;\n          completion_tokens?: number;\n          total_tokens?: number;\n        };\n      };\n\n      log.debug(\n        `local LLM response: choices=${data.choices?.length}, usage=${JSON.stringify(data.usage)}`,\n      );\n\n      // Thinking models (e.g. Qwen 3.5) may put their response in\n      // `reasoning_content` and leave `content` empty. Fall back to\n      // reasoning_content so engram still gets a usable result.\n      const msg = data.choices?.[0]?.message;\n      const content = msg?.content || msg?.reasoning_content || \"\";\n      if (!content) {\n        log.warn(`local LLM returned empty content. choices=${JSON.stringify(data.choices)?.slice(0, 200)}`);\n        return null;\n      }\n\n      // Estimate tokens if not provided by local LLM\n      const usage = data.usage\n        ? {\n            promptTokens: data.usage.prompt_tokens ?? 0,\n            completionTokens: data.usage.completion_tokens ?? 0,\n            totalTokens: data.usage.total_tokens ?? 0,\n          }\n        : this.estimateTokens(messages, content);\n\n      const durationMs = Date.now() - startedAtMs;\n      if (resolvePipelineProcessingCapabilities(this.config).slowLog && durationMs >= this.config.slowLogThresholdMs) {\n        const promptChars = messages.reduce((sum, m) => sum + (m.content?.length ?? 0), 0);\n        const op = options.operation ? ` op=${options.operation}` : \"\";\n        log.warn(\n          `SLOW local LLM:${op} durationMs=${durationMs} model=${this.config.localLlmModel} url=${chatUrl} promptChars=${promptChars} outputTokens=${usage.completionTokens} totalTokens=${usage.totalTokens}`,\n        );\n      }\n\n      log.debug(\"local LLM: request succeeded, tokens:\", usage.totalTokens);\n      return { content, usage };\n    } catch (err) {\n      const errMsg = err instanceof Error ? err.message : String(err);\n      const durationMs = Date.now() - startedAtMs;\n      if (this.isAbortError(err)) {\n        log.warn(\n          `local LLM request aborted: op=${operation} timeoutMs=${options.timeoutMs ?? this.config.localLlmTimeoutMs} model=${this.config.localLlmModel} durationMs=${durationMs} error=${errMsg}`,\n        );\n        return null;\n      }\n      log.warn(`local LLM request error: op=${operation} error=${errMsg}`);\n      this.isAvailable = false; // Mark as unavailable on non-abort errors\n      const nonRecoverableReason = this.extractNonRecoverableBackendReason(errMsg);\n      if (nonRecoverableReason) {\n        this.markBackendUnavailable(\n          nonRecoverableReason,\n          this.config.localLlm400CooldownMs,\n        );\n      }\n      return null;\n    } finally {\n      if (queueMeta) {\n        const finishedAtMs = Date.now();\n        const waitMs = startedAtMs - queueMeta.enqueuedAtMs;\n        log.debug(\n          `local LLM queue finish: priority=${queueMeta.priority} waitMs=${waitMs} runMs=${finishedAtMs - startedAtMs} totalMs=${finishedAtMs - queueMeta.enqueuedAtMs} op=${operation}`,\n        );\n      }\n    }\n  }\n\n  /**\n   * Query the local LLM server for loaded model information.\n   * Returns null if unavailable or if the model is not found.\n   */\n  async getLoadedModelInfo(): Promise<LocalModelInfo | null> {\n    const baseUrl = trimTrailingSlashes(\n      this.config.localLlmUrl.replace(\"localhost\", \"127.0.0.1\"),\n    );\n\n    // Handle URL construction - localLlmUrl may already include /v1\n    const modelsUrl = baseUrl.endsWith(\"/v1\")\n      ? `${baseUrl}/models`\n      : `${baseUrl}/v1/models`;\n    log.debug(`Fetching model info from ${modelsUrl}`);\n\n    try {\n      const result = await this.fetchWithTimeout(modelsUrl, 3000);\n      if (!result.ok) {\n        if (result.status === 401 || result.status === 403) {\n          log.warn(\n            `Local LLM: unauthorized while fetching models from ${modelsUrl}; verify localLlmApiKey and localLlmAuthHeader settings`,\n          );\n        }\n        log.warn(`Local LLM: Failed to fetch models from ${modelsUrl} - server returned error`);\n        return null;\n      }\n      if (!result.data) {\n        log.warn(`Local LLM: No data returned from ${modelsUrl}`);\n        return null;\n      }\n\n      const data = result.data as {\n        data?: Array<{\n          id?: string;\n          object?: string;\n          owned_by?: string;\n          // LM Studio specific fields\n          max_context_length?: number;\n          max_tokens?: number;\n          // Ollama specific\n          name?: string;\n          details?: {\n            parameter_size?: string;\n            family?: string;\n          };\n        }>;\n      };\n\n      if (!Array.isArray(data.data) || data.data.length === 0) {\n        log.warn(\"Local LLM returned no models\");\n        return null;\n      }\n\n      // Verbose model listings are noisy on every gateway restart. Keep it debug-only.\n      const modelIds = data.data.map((m) => m.id).filter(Boolean);\n      log.debug(\n        `Local LLM: Found ${modelIds.length} model(s). First 10: ${modelIds.slice(0, 10).join(\", \")}`,\n      );\n\n      // Find the model matching our configured model ID\n      const configuredModel = this.config.localLlmModel;\n      let model = data.data.find((m) => m.id === configuredModel);\n\n      // If not found by exact match, try partial match (handle suffixes like @4bit)\n      if (!model) {\n        model = data.data.find((m) =>\n          configuredModel.includes(m.id || \"\") ||\n          (m.id || \"\").includes(configuredModel.replace(/@\\d+bit$/, \"\"))\n        );\n      }\n\n      // If still not found, use the first loaded model and warn\n      if (!model) {\n        model = data.data[0];\n        const availablePreview = data.data\n          .map((m) => m.id)\n          .filter(Boolean)\n          .slice(0, 10)\n          .join(\", \");\n        log.warn(\n          `Configured model \"${configuredModel}\" not found in local LLM. ` +\n          `Using \"${model.id}\" instead. Available (first 10): ${availablePreview}`\n        );\n      }\n\n      // Extract context window - try multiple field names\n      let contextWindow = model.max_context_length || model.max_tokens;\n\n      // If API doesn't report context window, try LMS CLI (LM Studio specific)\n      if (!contextWindow) {\n        log.info(\"Local LLM: API did not report context window, trying LMS CLI...\");\n        const lmsContext = this.getCachedContextWindow(model.id || \"\");\n        if (lmsContext) {\n          contextWindow = lmsContext;\n        }\n      }\n\n      this.cachedModelInfo = {\n        id: model.id || \"unknown\",\n        contextWindow: contextWindow,\n        maxTokens: model.max_tokens,\n      };\n\n      log.info(\n        `Local LLM model detected: ${this.cachedModelInfo.id}, ` +\n        `context window: ${contextWindow?.toLocaleString() || \"unknown (may use default)\"}`\n      );\n\n      return this.cachedModelInfo;\n    } catch (err) {\n      log.warn(`Failed to fetch model info: ${err}`);\n      return null;\n    }\n  }\n\n  /**\n   * Check if the configured model is available and get its actual context window.\n   * Warns if there's a mismatch between expected and actual context.\n   */\n  async validateModelConfig(expectedContextWindow?: number): Promise<{\n    available: boolean;\n    actualContextWindow?: number;\n    warnings: string[];\n  }> {\n    const warnings: string[] = [];\n\n    const modelInfo = await this.getLoadedModelInfo();\n    if (!modelInfo) {\n      return { available: false, warnings: [\"Could not query local LLM for model info\"] };\n    }\n\n    // If we have expected context and the server reports one, check for mismatch\n    if (expectedContextWindow && modelInfo.contextWindow) {\n      if (modelInfo.contextWindow < expectedContextWindow) {\n        warnings.push(\n          `Context window mismatch: Model ${modelInfo.id} supports ${modelInfo.contextWindow.toLocaleString()} tokens, ` +\n          `but engram is configured for ${expectedContextWindow.toLocaleString()}. ` +\n          `Set localLlmMaxContext: ${modelInfo.contextWindow} in config to avoid errors.`\n        );\n      }\n    }\n\n    // Warn if server doesn't report context window (common with some local LLM setups)\n    if (!modelInfo.contextWindow) {\n      warnings.push(\n        `Local LLM server did not report context window for ${modelInfo.id}. ` +\n        `If you get \"context length exceeded\" errors, set localLlmMaxContext in config.`\n      );\n    }\n\n    return {\n      available: true,\n      actualContextWindow: modelInfo.contextWindow,\n      warnings,\n    };\n  }\n\n  /**\n   * Make a chat completion request to local LLM\n   */\n  async chatCompletion(\n    messages: Array<{ role: string; content: string }>,\n    options: LocalLlmChatCompletionOptions = {},\n  ): Promise<LocalLlmChatCompletionResult | null> {\n    if (!resolveLocalLlmCapabilities(this.config).localLlm) {\n      log.debug(\"local LLM: disabled, returning null\");\n      return null;\n    }\n\n    const remainingMs = this.remainingCooldownMs();\n    if (remainingMs > 0) {\n      log.debug(`local LLM: cooldown active (${remainingMs}ms remaining), skipping request`);\n      return null;\n    }\n    if (options.priority) {\n      const priority = options.priority;\n      return await new Promise<LocalLlmChatCompletionResult | null>((resolve) => {\n        this.requestQueues[priority].push({\n          messages,\n          options,\n          priority,\n          enqueuedAtMs: Date.now(),\n          resolve,\n        });\n        this.scheduleQueueDrain();\n      });\n    }\n\n    return await this.runChatCompletionRequest(messages, options);\n  }\n\n  /**\n   * Estimate tokens when local LLM doesn't return usage stats\n   * Rough estimate: 1 token ≈ 4 characters\n   */\n  private estimateTokens(\n    messages: Array<{ role: string; content: string }>,\n    response: string\n  ): { promptTokens: number; completionTokens: number; totalTokens: number } {\n    const promptChars = messages.reduce((sum, m) => sum + m.content.length, 0);\n    const promptTokens = Math.ceil(promptChars / 4);\n    const completionTokens = Math.ceil(response.length / 4);\n\n    return {\n      promptTokens,\n      completionTokens,\n      totalTokens: promptTokens + completionTokens,\n    };\n  }\n\n  /**\n   * Try local LLM first, fallback to cloud provider if configured\n   */\n  async withFallback<T>(\n    localOperation: () => Promise<T | null>,\n    fallbackOperation: () => Promise<T>,\n    operationName: string\n  ): Promise<T> {\n    // Try local LLM first if enabled\n    if (resolveLocalLlmCapabilities(this.config).localLlm) {\n      const localResult = await localOperation();\n      if (localResult !== null) {\n        log.debug(`${operationName}: used local LLM`);\n        return localResult;\n      }\n\n      // Local failed or unavailable\n      if (this.config.localLlmFallback) {\n        log.info(`${operationName}: local LLM unavailable, falling back to cloud`);\n      } else {\n        throw new Error(`${operationName}: local LLM unavailable and fallback disabled`);\n      }\n    }\n\n    // Use fallback (cloud provider)\n    return fallbackOperation();\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAEA,OAAO,QAAQ;AACf,OAAO,QAAQ;AAQf,SAAS,oBAAoB,GAAmB;AAC9C,MAAI,MAAM,EAAE;AACZ,SAAO,MAAM,KAAK,EAAE,MAAM,CAAC,MAAM,IAAK;AACtC,SAAO,EAAE,UAAU,GAAG,GAAG;AAC3B;AAEA,SAAS,oBAAoB,GAAmB;AAC9C,SAAO,EAAE,SAAS,KAAK,IAAI,EAAE,MAAM,GAAG,EAAE,IAAI;AAC9C;AAEA,SAAS,oBAAoB,GAA0B;AACrD,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,CAAC;AACxB,QAAI,CAAC,OAAO,KAAM,QAAO;AACzB,UAAM,OAAO,OAAO,OAAO,IAAI;AAC/B,WAAO,OAAO,UAAU,IAAI,IAAI,OAAO;AAAA,EACzC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,eAAe,OAAkD;AACxE,SAAO,OAAO,UAAU,YAAY,UAAU;AAChD;AAEA,SAAS,wBAAwB,OAAyB;AACxD,SACE,eAAe,KAAK,KACpB,eAAe,MAAM,2BAA2B,KAChD,OAAO,MAAM,gBAAgB,aAE3B,OAAO,MAAM,eAAe,YAC5B,OAAO,MAAM,kBAAkB,YAC/B,OAAO,MAAM,eAAe;AAGlC;AAEA,SAAS,yBAAyB,OAAyB;AACzD,MAAI,CAAC,eAAe,KAAK,KAAK,CAAC,MAAM,QAAQ,MAAM,IAAI,GAAG;AACxD,WAAO;AAAA,EACT;AACA,SAAO,MAAM,KAAK,KAAK,CAAC,UAAU;AAChC,QAAI,CAAC,eAAe,KAAK,EAAG,QAAO;AACnC,QAAI,MAAM,aAAa,WAAY,QAAO;AAC1C,QAAI,OAAO,MAAM,OAAO,YAAY,MAAM,GAAG,SAAS,OAAO,EAAG,QAAO;AACvE,UAAM,OAAO,MAAM;AACnB,WACE,eAAe,IAAI,MAClB,iBAAiB,QAAQ,cAAc,QAAQ,gBAAgB;AAAA,EAEpE,CAAC;AACH;AAEA,SAAS,8BAA8B,OAAyB;AAC9D,MAAI,CAAC,eAAe,KAAK,KAAK,CAAC,MAAM,QAAQ,MAAM,MAAM,GAAG;AAC1D,WAAO;AAAA,EACT;AACA,SAAO,MAAM,OAAO,KAAK,CAAC,UAAU;AAClC,QAAI,CAAC,eAAe,KAAK,EAAG,QAAO;AACnC,WACE,OAAO,MAAM,QAAQ,YACrB,OAAO,MAAM,iBAAiB,aAE5B,OAAO,MAAM,WAAW,YACxB,OAAO,MAAM,uBAAuB,YACpC,MAAM,QAAQ,MAAM,gBAAgB;AAAA,EAG1C,CAAC;AACH;AAEA,SAAS,8BAA8B,OAAyB;AAC9D,MAAI,CAAC,eAAe,KAAK,KAAK,CAAC,MAAM,QAAQ,MAAM,IAAI,GAAG;AACxD,WAAO;AAAA,EACT;AACA,SAAO,MAAM,KAAK,KAAK,CAAC,UAAU;AAChC,QAAI,CAAC,eAAe,KAAK,EAAG,QAAO;AACnC,WACE,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,cAAc,aAEzB,OAAO,MAAM,uBAAuB,YACpC,OAAO,MAAM,uBAAuB,YACpC,OAAO,MAAM,UAAU;AAAA,EAG7B,CAAC;AACH;AAEA,SAAS,+BAA+B,OAAyB;AAC/D,SAAO,8BAA8B,KAAK,KAAK,8BAA8B,KAAK;AACpF;AAuBA,IAAM,+BAA0D,oBAAI,IAAI;AAAA,EACtE;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,iCAAsD,oBAAI,IAAI;AAAA,EAClE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAUD,IAAM,gBAAqC;AAAA,EACzC;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,gBAAgB;AAAA,IAChB,gBAAgB;AAAA,IAChB,UAAU,CAAC,SAAS,OAAO,SAAS,YAAY,KAAK,SAAS,QAAQ;AAAA,EACxE;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,gBAAgB;AAAA,IAChB,gBAAgB;AAAA,IAChB,UAAU,CAAC,SAAS,eAAe,IAAI,KAAK,KAAK,WAAW;AAAA,EAC9D;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,gBAAgB;AAAA,IAChB,gBAAgB;AAAA,IAChB,UAAU,CAAC,SAAS,eAAe,IAAI,KAAK,MAAM,QAAQ,KAAK,IAAI;AAAA,EACrE;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,gBAAgB;AAAA,IAChB,gBAAgB;AAAA,IAChB,UAAU,CAAC,SAAS,eAAe,IAAI,KAAK,MAAM,QAAQ,KAAK,IAAI;AAAA,EACrE;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,gBAAgB;AAAA,IAChB,gBAAgB;AAAA,IAChB,UAAU,CAAC,SAAS,SAAS,MAAO,eAAe,IAAI,KAAK,EAAE,YAAY;AAAA,EAC5E;AACF;AAEA,SAAS,oBAAoB,mBAAgD;AAC3E,QAAM,iBAAiB,oBAAoB,iBAAiB;AAC5D,MAAI,mBAAmB,KAAM,QAAO;AACpC,QAAM,WAAW,cAAc;AAAA,IAC7B,CAAC,iBAAiB,aAAa,gBAAgB;AAAA,EACjD;AACA,MAAI,SAAS,WAAW,EAAG,QAAO;AAClC,QAAM,gBAAgB,IAAI,IAAI,SAAS,IAAI,CAAC,iBAAiB,aAAa,IAAI,CAAC;AAC/E,SAAO;AAAA,IACL,GAAG;AAAA,IACH,GAAG,cAAc,OAAO,CAAC,iBAAiB,CAAC,cAAc,IAAI,aAAa,IAAI,CAAC;AAAA,EACjF;AACF;AAiCA,IAAM,iCAAiC;AAMhC,IAAM,iBAAN,MAAM,gBAAe;AAAA,EAClB;AAAA,EACA,cAA8B;AAAA,EAC9B,kBAA0B;AAAA,EAC1B,eAAoC;AAAA,EACpC,kBAAyC;AAAA,EACzC,mBAAkC;AAAA,EAClC,eAAuB;AAAA,EACvB,kBAA0B;AAAA,EAC1B,kBAA0B;AAAA,EAC1B;AAAA,EACA,mBAA4B;AAAA,EACnB,gBAA0E;AAAA,IACzF,mBAAmB,CAAC;AAAA,IACpB,YAAY,CAAC;AAAA,EACf;AAAA,EACiB,kBAAkB,oBAAI,IAA6B;AAAA,EAC5D,sBAA+B;AAAA,EACvC,OAAwB,2BAA2B;AAAA;AAAA,EACnD,OAAwB,wBAAwB;AAAA;AAAA,EAEhD,YAAY,QAAsB,eAA+B;AAC/D,SAAK,SAAS;AACd,SAAK,gBAAgB;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,IAAI,gBAAgB,OAAgB;AAClC,SAAK,mBAAmB;AAAA,EAC1B;AAAA,EAEQ,iBAAyB;AAC/B,WAAO,KAAK,OAAO,mBAAmB,WAAW,MAAM,KAAK,GAAG,QAAQ;AAAA,EACzE;AAAA,EAEQ,oBAAoB,OAA+B,CAAC,GAA2B;AACrF,UAAM,UAAkC;AAAA,MACtC,GAAG;AAAA,MACH,GAAI,KAAK,OAAO,mBAAmB,CAAC;AAAA,IACtC;AACA,QAAI,KAAK,OAAO,kBAAkB,KAAK,OAAO,uBAAuB,OAAO;AAC1E,cAAQ,gBAAgB,UAAU,KAAK,OAAO,cAAc;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,aAAa,KAAuB;AAC1C,QAAI,CAAC,OAAO,OAAO,QAAQ,SAAU,QAAO;AAC5C,UAAM,QAAQ;AACd,WACE,MAAM,SAAS,gBACf,MAAM,YAAY,gCAClB,MAAM,YAAY;AAAA,EAEtB;AAAA;AAAA;AAAA;AAAA,EAKA,iBAAiB,UAA+B;AAC9C,SAAK,gBAAgB;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,kBAAuC;AACrC,WAAO,KAAK;AAAA,EACd;AAAA,EAEQ,gBAAwB;AAC9B,WAAO;AAAA,MACL,KAAK,OAAO,YAAY,QAAQ,aAAa,WAAW;AAAA,IAC1D,EAAE,QAAQ,SAAS,EAAE;AAAA,EACvB;AAAA,EAEQ,wBAA2D;AACjE,UAAM,YAAY;AAGlB,QAAI,CAAC,UAAU,8BAA8B,GAAG;AAC9C,gBAAU,8BAA8B,IAAI,oBAAI,IAAI;AAAA,IACtD;AACA,WAAO,UAAU,8BAA8B;AAAA,EACjD;AAAA,EAEQ,uBAAuB,KAA0C;AACvE,UAAM,QAAQ,KAAK,sBAAsB,EAAE,IAAI,KAAK,cAAc,CAAC,KAAK;AACxE,QAAI,CAAC,MAAO,QAAO;AACnB,QAAI,MAAM,WAAW,KAAK;AACxB,WAAK,sBAAsB,EAAE,OAAO,KAAK,cAAc,CAAC;AACxD,WAAK,kBAAkB;AACvB,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,uBAAuB,QAAgB,YAA0B;AACvE,UAAM,mBAAmB,KAAK,2BAA2B,MAAM;AAC/D,QAAI,aAAa,GAAG;AAClB,YAAM,UAAU,KAAK,IAAI,IAAI;AAC7B,WAAK,sBAAsB,EAAE,IAAI,KAAK,cAAc,GAAG,EAAE,SAAS,QAAQ,iBAAiB,CAAC;AAAA,IAC9F,OAAO;AACL,WAAK,sBAAsB,EAAE,OAAO,KAAK,cAAc,CAAC;AAAA,IAC1D;AACA,SAAK,cAAc;AACnB,SAAK,kBAAkB;AACvB,QAAI;AAAA,MACF,qCAAqC,UAAU,aAAa,KAAK,OAAO,aAAa,WAAW,gBAAgB;AAAA,IAClH;AAAA,EACF;AAAA,EAEQ,mCAAmC,QAA+B;AACxE,UAAM,QAAQ,OAAO;AAAA,MACnB;AAAA,IACF;AACA,WAAO,QAAQ,CAAC,KAAK;AAAA,EACvB;AAAA,EAEQ,gDAAgD,WAAkC;AACxF,UAAM,eAAe,KAAK,mCAAmC,SAAS;AACtE,QAAI,aAAc,QAAO;AACzB,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,SAAS;AACnC,aAAO,KAAK,mCAAmC,QAAQ,OAAO,WAAW,EAAE;AAAA,IAC7E,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEQ,2BAA2B,QAAwB;AACzD,UAAM,UAAU,OAAO,QAAQ,QAAQ,GAAG,EAAE,QAAQ,cAAc,EAAE,EAAE,KAAK;AAC3E,QAAI,CAAC,QAAS,QAAO;AACrB,WAAO,QAAQ,SAAS,MAAM,GAAG,QAAQ,MAAM,GAAG,GAAG,CAAC,QAAQ;AAAA,EAChE;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,iBACZ,KACA,YAAoB,KACpB,SACgE;AAChE,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,UAAU,WAAW,MAAM,WAAW,MAAM,GAAG,SAAS;AAE9D,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,KAAK;AAAA,QAChC,QAAQ,WAAW;AAAA,QACnB,SAAS,KAAK,oBAAoB,EAAE,QAAQ,oBAAoB,GAAI,WAAW,CAAC,EAAG,CAAC;AAAA,MACtF,CAAC;AACD,mBAAa,OAAO;AAEpB,UAAI,CAAC,SAAS,IAAI;AAChB,eAAO,EAAE,IAAI,OAAO,MAAM,MAAM,QAAQ,SAAS,OAAO;AAAA,MAC1D;AAEA,YAAM,cAAc,SAAS,QAAQ,IAAI,cAAc;AACvD,UAAI,aAAa,SAAS,kBAAkB,GAAG;AAC7C,eAAO,EAAE,IAAI,MAAM,MAAM,MAAM,SAAS,KAAK,GAAG,QAAQ,SAAS,OAAO;AAAA,MAC1E,OAAO;AACL,eAAO,EAAE,IAAI,MAAM,MAAM,MAAM,SAAS,KAAK,GAAG,QAAQ,SAAS,OAAO;AAAA,MAC1E;AAAA,IACF,SAAS,KAAK;AACZ,mBAAa,OAAO;AACpB,aAAO,EAAE,IAAI,OAAO,MAAM,MAAM,QAAQ,KAAK;AAAA,IAC/C;AAAA,EACF;AAAA,EAEA,MAAc,0BACZ,cACsD;AACtD,QAAI,eAAe;AACnB,eAAW,YAAY,CAAC,kBAAkB,gBAAgB,GAAG;AAC3D,YAAM,QAAQ,MAAM,KAAK,iBAAiB,GAAG,YAAY,GAAG,QAAQ,EAAE;AACtE,UAAI,MAAM,MAAM,+BAA+B,MAAM,IAAI,GAAG;AAC1D,eAAO,EAAE,SAAS,MAAM,aAAa;AAAA,MACvC;AACA,UAAI,MAAM,WAAW,OAAO,MAAM,WAAW,KAAK;AAChD,uBAAe;AAAA,MACjB;AAAA,IACF;AACA,WAAO,EAAE,SAAS,OAAO,aAAa;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,oBAAsC;AAE1C,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,eAAe,KAAK,uBAAuB,GAAG;AACpD,QAAI,cAAc;AAChB,WAAK,cAAc;AACnB,WAAK,kBAAkB;AACvB,UAAI;AAAA,QACF,oDAAoD,KAAK,IAAI,GAAG,aAAa,UAAU,GAAG,CAAC,OAAO,aAAa,MAAM;AAAA,MACvH;AACA,aAAO;AAAA,IACT;AACA,QAAI,KAAK,gBAAgB,QAAQ,MAAM,KAAK,kBAAkB,gBAAe,0BAA0B;AACrG,aAAO,KAAK;AAAA,IACd;AAKA,UAAM,oBAAoB;AAAA,MACxB,KAAK,OAAO,YAAY,QAAQ,aAAa,WAAW;AAAA,IAC1D;AACA,UAAM,eAAe,oBAAoB,iBAAiB;AAC1D,QAAI,uBAAuB;AAG3B,eAAW,gBAAgB,oBAAoB,iBAAiB,GAAG;AACjE,YAAM,YAAY,GAAG,YAAY,GAAG,aAAa,cAAc;AAC/D,UAAI,MAAM,YAAY,aAAa,IAAI,OAAO,SAAS,EAAE;AAEzD,YAAM,SAAS,MAAM,KAAK,iBAAiB,SAAS;AACpD,UAAI,OAAO,MAAM,aAAa,SAAS,OAAO,IAAI,GAAG;AACnD,YAAI,aAAa,SAAS,OAAO;AAC/B,gBAAM,gBAAgB,MAAM,KAAK,0BAA0B,YAAY;AACvE,cAAI,cAAc,cAAc;AAC9B,mCAAuB;AAAA,UACzB;AACA,cAAI,cAAc,SAAS;AACzB,iBAAK,cAAc;AACnB,iBAAK,eAAe;AACpB,iBAAK,kBAAkB;AACvB,gBAAI,KAAK,wBAAwB,iBAAiB,EAAE;AACpD,mBAAO;AAAA,UACT;AAAA,QACF;AACA,YAAI,aAAa,SAAS,YAAY;AACpC,cAAI,oBAAoB;AACxB,gBAAM,aAAa,MAAM,KAAK,iBAAiB,GAAG,YAAY,QAAQ;AACtE,cAAI,WAAW,MAAM,wBAAwB,WAAW,IAAI,GAAG;AAC7D,gCAAoB;AAAA,UACtB;AACA,cAAI,WAAW,WAAW,OAAO,WAAW,WAAW,KAAK;AAC1D,mCAAuB;AAAA,UACzB;AAEA,gBAAM,YAAY,GAAG,YAAY,GAAG,aAAa,cAAc;AAC/D,gBAAM,cAAc,MAAM,KAAK,iBAAiB,SAAS;AACzD,cAAI,YAAY,MAAM,yBAAyB,YAAY,IAAI,GAAG;AAChE,gCAAoB;AAAA,UACtB;AACA,cAAI,YAAY,WAAW,OAAO,YAAY,WAAW,KAAK;AAC5D,mCAAuB;AACvB;AAAA,UACF;AAEA,gBAAM,iBACJ,QAAQ,KAAK,OAAO,cAAc,KAClC,KAAK,OAAO,uBAAuB;AACrC,cAAI,CAAC,qBAAsB,kBAAkB,CAAC,YAAY,IAAK;AAC7D;AAAA,UACF;AAAA,QACF;AACA,aAAK,cAAc;AACnB,aAAK,eAAe,aAAa;AACjC,aAAK,kBAAkB;AACvB,YAAI,KAAK,YAAY,aAAa,IAAI,OAAO,iBAAiB,EAAE;AAChE,eAAO;AAAA,MACT;AACA,UAAI,OAAO,WAAW,OAAO,OAAO,WAAW,KAAK;AAClD,+BAAuB;AAAA,MACzB;AAAA,IACF;AAGA,QAAI;AACF,YAAM,YAAY,GAAG,YAAY;AACjC,YAAM,SAAS,MAAM,KAAK,iBAAiB,SAAS;AACpD,UAAI,OAAO,IAAI;AACb,aAAK,cAAc;AACnB,aAAK,eAAe;AACpB,aAAK,kBAAkB;AACvB,YAAI,KAAK,gDAAgD,iBAAiB,EAAE;AAC5E,eAAO;AAAA,MACT;AACA,UAAI,OAAO,WAAW,OAAO,OAAO,WAAW,KAAK;AAClD,+BAAuB;AAAA,MACzB;AAAA,IACF,QAAQ;AAAA,IAER;AAEA,SAAK,cAAc;AACnB,SAAK,eAAe;AACpB,SAAK,kBAAkB;AACvB,QAAI,sBAAsB;AACxB,UAAI;AAAA,QACF,oDAAoD,iBAAiB;AAAA,MACvE;AAAA,IACF;AACA,QAAI,MAAM,8BAA8B,iBAAiB;AACzD,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,iCAAgD;AACtD,QAAI;AACF,YAAM,UAAU,KAAK,eAAe;AACpC,YAAM,eAAe,GAAG,OAAO;AAE/B,UAAI,CAAC,GAAG,WAAW,YAAY,GAAG;AAChC,YAAI,MAAM,yCAAyC,YAAY,EAAE;AACjE,eAAO;AAAA,MACT;AAEA,YAAM,UAAU,GAAG,aAAa,cAAc,OAAO;AACrD,YAAM,WAAW,KAAK,MAAM,OAAO;AAOnC,UAAI,SAAS,sBAAsB,OAAO;AACxC,cAAM,gBAAgB,SAAS,qBAAqB;AACpD,YAAI,MAAM,qDAAqD,aAAa,EAAE;AAC9E,eAAO;AAAA,MACT;AAEA,aAAO;AAAA,IACT,SAAS,KAAK;AACZ,YAAM,WAAW,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAChE,UAAI,MAAM,wCAAwC,QAAQ,EAAE;AAC5D,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,qBAAqB,SAAgC;AAC3D,QAAI;AAGF,YAAM,UAAU,KAAK,eAAe;AACpC,YAAM,WAAW;AAAA,QACf,KAAK,OAAO,mBAAmB;AAAA,QAC/B,GAAG,OAAO;AAAA,QACV;AAAA,QACA;AAAA,MACF;AAEA,YAAM,UAAU,SAAS,KAAK,CAAC,MAAM,EAAE,SAAS,KAAK,GAAG,WAAW,CAAC,CAAC;AACrE,UAAI,CAAC,SAAS;AACZ,YAAI,MAAM,sDAAsD,SAAS,KAAK,IAAI,CAAC,GAAG;AACtF,eAAO;AAAA,MACT;AAIA,UAAI,MAAM,qBAAqB,OAAO,YAAY;AAClD,YAAM,eAAe,WAAW,MAAM,KAAK;AAC3C,YAAM,SAAS,kBAAkB,SAAS,CAAC,MAAM,QAAQ,GAAG;AAAA,QAC1D,UAAU;AAAA,QACV,SAAS;AAAA,QACT,OAAO;AAAA;AAAA,QACP,KAAK,SAAS;AAAA,UACZ,MAAM,GAAG,KAAK,OAAO,kBAAkB,GAAG,OAAO,uBAAuB,mDAAmD,YAAY;AAAA,UACvI,MAAM;AAAA,QACR,CAAC;AAAA,MACH,CAAC;AAED,UAAI,OAAO,OAAO;AAChB,YAAI,MAAM,0BAA0B,OAAO,MAAM,OAAO,EAAE;AAC1D,eAAO;AAAA,MACT;AAEA,UAAI,OAAO,UAAU,OAAO,OAAO,KAAK,GAAG;AACzC,YAAI,MAAM,qBAAqB,OAAO,OAAO,MAAM,GAAG,GAAG,CAAC,EAAE;AAAA,MAC9D;AAEA,YAAM,SAAS,OAAO,UAAU;AAChC,UAAI,CAAC,OAAO,KAAK,GAAG;AAClB,YAAI,MAAM,0EAA0E;AACpF,eAAO;AAAA,MACT;AAGA,UAAI;AAOJ,UAAI;AACF,iBAAS,KAAK,MAAM,MAAM;AAAA,MAC5B,SAAS,UAAU;AACjB,YAAI,MAAM,+BAA+B,QAAQ,EAAE;AACnD,eAAO;AAAA,MACT;AAEA,UAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,OAAO,WAAW,GAAG;AACjD,YAAI,MAAM,2BAA2B;AACrC,eAAO;AAAA,MACT;AAGA,YAAM,QAAQ,OAAO;AAAA,QAAK,CAAC,MACzB,EAAE,eAAe,WACjB,EAAE,aAAa,WACd,EAAE,YAAY,SAAS,QAAQ,QAAQ,YAAY,EAAE,CAAC;AAAA,MACzD;AAEA,UAAI,CAAC,OAAO;AACV,YAAI,MAAM,mBAAmB,OAAO,iCAAiC,OAAO,IAAI,OAAK,EAAE,UAAU,EAAE,KAAK,IAAI,CAAC,EAAE;AAC/G,eAAO;AAAA,MACT;AAGA,YAAM,gBAAgB,MAAM,iBAAiB,MAAM;AAEnD,UAAI,eAAe;AACjB,YAAI,KAAK,oCAAoC,aAAa,QAAQ,OAAO,UAAU,MAAM,gBAAgB,GAAG;AAC5G,eAAO;AAAA,MACT;AAEA,aAAO;AAAA,IACT,SAAS,KAAK;AAEZ,YAAM,WAAW,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAChE,UAAI,MAAM,qBAAqB,QAAQ,EAAE;AACzC,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,gBAAgB,SAAiG;AACvH,QAAI;AACF,YAAM,SAAS,kBAAkB,OAAO,CAAC,MAAM,QAAQ,GAAG;AAAA,QACxD,UAAU;AAAA,QACV,SAAS;AAAA,QACT,OAAO;AAAA,MACT,CAAC;AAED,UAAI,OAAO,OAAO;AAChB,eAAO;AAAA,MACT;AAEA,YAAM,SAAS,OAAO,UAAU;AAChC,UAAI,CAAC,OAAO,KAAK,GAAG;AAClB,eAAO;AAAA,MACT;AAEA,UAAI;AAOJ,UAAI;AACF,iBAAS,KAAK,MAAM,MAAM;AAAA,MAC5B,QAAQ;AACN,eAAO;AAAA,MACT;AAEA,UAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,OAAO,WAAW,GAAG;AACjD,eAAO;AAAA,MACT;AAEA,YAAM,QAAQ,OAAO;AAAA,QAAK,CAAC,MACzB,EAAE,eAAe,WACjB,EAAE,aAAa,WACd,EAAE,YAAY,SAAS,QAAQ,QAAQ,YAAY,EAAE,CAAC;AAAA,MACzD;AAEA,UAAI,CAAC,SAAS,CAAC,MAAM,eAAe;AAClC,eAAO;AAAA,MACT;AAEA,aAAO;AAAA,QACL,eAAe,MAAM;AAAA,QACrB,kBAAkB,MAAM,oBAAoB,MAAM;AAAA,QAClD,YAAY,MAAM,cAAc;AAAA,MAClC;AAAA,IACF,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,uBAAuB,SAAgC;AACrD,UAAM,MAAM,KAAK,IAAI;AAGrB,QAAI,KAAK,eAAe;AACtB,YAAM,OAAO,KAAK,cAAc,gBAAgB,OAAO;AACvD,UAAI,KAAK,WAAW,cAAc,KAAK,eAAe;AACpD,YAAI,MAAM,qDAAqD,KAAK,aAAa,EAAE;AAEnF,aAAK,mBAAmB,KAAK;AAC7B,aAAK,eAAe;AACpB,eAAO,KAAK;AAAA,MACd;AAAA,IACF;AAGA,QAAI,KAAK,oBAAoB,MAAM,KAAK,eAAe,gBAAe,uBAAuB;AAC3F,UAAI,MAAM,gDAAgD,KAAK,gBAAgB,EAAE;AACjF,aAAO,KAAK;AAAA,IACd;AAGA,UAAM,UAAU,KAAK,gBAAgB,OAAO;AAC5C,QAAI,SAAS,eAAe;AAC1B,WAAK,mBAAmB,QAAQ;AAChC,WAAK,eAAe;AAGpB,YAAM,yBAAyB,KAAK,IAAI,KAAK,MAAM,QAAQ,gBAAgB,CAAC,GAAG,KAAK;AACpF,YAAM,eAAe,KAAK,IAAI,wBAAwB,IAAI;AAE1D,UAAI,KAAK,eAAe;AACtB,aAAK,cAAc,gBAAgB,SAAS;AAAA,UAC1C,uBAAuB,QAAQ,oBAAoB,QAAQ;AAAA,UAC3D,eAAe,QAAQ;AAAA,UACvB,0BAA0B,QAAQ,oBAAoB,QAAQ,iBAAiB;AAAA,UAC/E,qBAAqB;AAAA,UACrB,QAAQ;AAAA,QACV,CAAC;AACD,YAAI,KAAK,oCAAoC,OAAO,KAAK,QAAQ,aAAa,aAAa,YAAY,gBAAgB;AAAA,MACzH;AACA,aAAO,QAAQ;AAAA,IACjB;AAGA,UAAM,gBAAgB,KAAK,qBAAqB,OAAO;AACvD,QAAI,eAAe;AACjB,WAAK,mBAAmB;AACxB,WAAK,eAAe;AAEpB,UAAI,KAAK,eAAe;AACtB,cAAM,yBAAyB,KAAK,IAAI,KAAK,MAAM,gBAAgB,CAAC,GAAG,KAAK;AAC5E,cAAM,eAAe,KAAK,IAAI,wBAAwB,IAAI;AAC1D,aAAK,cAAc,gBAAgB,SAAS;AAAA,UAC1C,uBAAuB;AAAA,UACvB,eAAe;AAAA,UACf,yBAAyB;AAAA,UACzB,qBAAqB;AAAA,UACrB,QAAQ;AAAA,QACV,CAAC;AAAA,MACH;AACA,aAAO;AAAA,IACT;AAGA,UAAM,kBAAkB,KAAK,+BAA+B;AAC5D,QAAI,iBAAiB;AACnB,UAAI,KAAK,8CAA8C,eAAe,EAAE;AACxE,WAAK,mBAAmB;AACxB,WAAK,eAAe;AACpB,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,oBAA0B;AACxB,SAAK,mBAAmB;AACxB,SAAK,eAAe;AACpB,QAAI,MAAM,gCAAgC;AAAA,EAC5C;AAAA,EAEQ,oBAAoB,MAAc,KAAK,IAAI,GAAW;AAC5D,WAAO,KAAK,IAAI,GAAG,KAAK,kBAAkB,GAAG;AAAA,EAC/C;AAAA,EAEQ,qBAA2B;AACjC,QAAI,KAAK,oBAAqB;AAC9B,SAAK,sBAAsB;AAE3B,mBAAe,MAAM;AACnB,WAAK,sBAAsB;AAC3B,WAAK,6BAA6B;AAAA,IACpC,CAAC;AAAA,EACH;AAAA,EAEQ,oBAA6B;AACnC,WACE,KAAK,cAAc,iBAAiB,EAAE,SAAS,KAC/C,KAAK,cAAc,WAAW,SAAS;AAAA,EAE3C;AAAA,EAEQ,qBAAqB,UAAiE;AAC5F,UAAM,OAAO,KAAK,cAAc,QAAQ,EAAE,MAAM;AAChD,WAAO,QAAQ;AAAA,EACjB;AAAA,EAEQ,oCAA4C;AAClD,QAAI,UAAU;AACd,eAAW,YAAY,CAAC,mBAAmB,YAAY,GAAY;AACjE,aAAO,KAAK,cAAc,QAAQ,EAAE,SAAS,GAAG;AAC9C,cAAM,SAAS,KAAK,cAAc,QAAQ,EAAE,MAAM;AAClD,gBAAQ,QAAQ,IAAI;AACpB,mBAAW;AAAA,MACb;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,+BAAqC;AAC3C,QAAI,CAAC,KAAK,gBAAgB,IAAI,iBAAiB,GAAG;AAChD,YAAM,eAAe,KAAK,qBAAqB,iBAAiB;AAChE,UAAI,cAAc;AAChB,aAAK,gBAAgB,IAAI,iBAAiB;AAC1C,aAAK,KAAK,iBAAiB,YAAY;AAAA,MACzC;AAAA,IACF;AAEA,QAAI,CAAC,KAAK,gBAAgB,IAAI,YAAY,GAAG;AAC3C,YAAM,iBAAiB,KAAK,qBAAqB,YAAY;AAC7D,UAAI,gBAAgB;AAClB,aAAK,gBAAgB,IAAI,YAAY;AACrC,aAAK,KAAK,iBAAiB,cAAc;AAAA,MAC3C;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,iBAAiB,MAA4C;AACzE,QAAI;AACF,YAAM,sBAAsB,KAAK,oBAAoB;AACrD,UAAI,sBAAsB,GAAG;AAC3B,cAAM,oBAAoB,KAAK,kCAAkC;AACjE,YAAI;AAAA,UACF,+BAA+B,mBAAmB,2BAA2B,oBAAoB,CAAC;AAAA,QACpG;AACA,aAAK,QAAQ,IAAI;AACjB;AAAA,MACF;AAEA,UAAI,SAA8C;AAClD,UAAI;AACF,iBAAS,MAAM,KAAK,yBAAyB,KAAK,UAAU,KAAK,SAAS;AAAA,UACxE,UAAU,KAAK;AAAA,UACf,cAAc,KAAK;AAAA,QACrB,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,YAAI,KAAK,sCAAsC,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,EAAE;AAAA,MACnG;AACA,WAAK,QAAQ,MAAM;AAAA,IACrB,UAAE;AACA,WAAK,gBAAgB,OAAO,KAAK,QAAQ;AACzC,UAAI,KAAK,kBAAkB,GAAG;AAC5B,aAAK,mBAAmB;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,yBACZ,UACA,SACA,WAC8C;AAC9C,QAAI;AAAA,MACF,6CAA6C,4BAA4B,KAAK,MAAM,EAAE,QAAQ,WAAW,KAAK,OAAO,aAAa;AAAA,IACpI;AAEA,UAAM,YAAY,QAAQ,aAAa;AACvC,UAAM,cAAc,KAAK,IAAI;AAC7B,QAAI,WAAW;AACX,UAAI;AAAA,QACF,mCAAmC,UAAU,QAAQ,WAAW,cAAc,UAAU,YAAY,OAAO,SAAS;AAAA,MACtH;AAAA,IACJ;AAEA,QAAI;AACF,YAAM,cAAc,MAAM,KAAK,kBAAkB;AACjD,UAAI,CAAC,aAAa;AAChB,YAAI;AAAA,UACF,mDAAmD,KAAK,OAAO,WAAW;AAAA,QAC5E;AACA,eAAO;AAAA,MACT;AAEA,YAAM,cAAc,SAAS,OAAO,CAAC,KAAK,MAAM,OAAO,EAAE,SAAS,UAAU,IAAI,CAAC;AACjF,YAAM,cAAuC;AAAA,QAC3C,OAAO,KAAK,OAAO;AAAA,QACnB;AAAA,QACA,aAAa,QAAQ,eAAe;AAAA;AAAA,QAEpC,YAAY,QAAQ,aAAa;AAAA,MACnC;AAKA,UAAI,QAAQ,gBAAgB,SAAS,eAAe;AAClD,oBAAY,kBAAkB,QAAQ;AAAA,MACxC;AAmBA,YAAM,yBACJ,QAAQ,yBAAyB,QAChC,KAAK,oBACJ,+BAA+B,IAAI,SAAS;AAChD,UACE,0BACA,KAAK,iBAAiB,QACtB,6BAA6B,IAAI,KAAK,YAAY,GAClD;AACA,oBAAY,uBAAuB,EAAE,iBAAiB,MAAM;AAAA,MAC9D,WAAW,0BAA0B,KAAK,iBAAiB,UAAU;AAUnE,cAAM,SAAS,KAAK,OAAO;AAC3B,YAAI,QAAQ;AACV,sBAAY,mBAAmB;AAAA,QACjC;AAAA,MACF;AAGA,YAAM,UAAU;AAAA,QACd,KAAK,OAAO,YAAY,QAAQ,aAAa,WAAW;AAAA,MAC1D;AACA,YAAM,UAAU,QAAQ,SAAS,KAAK,IAClC,GAAG,OAAO,sBACV,GAAG,OAAO;AAEd,YAAM,kBAAkB,KAAK,UAAU,WAAW;AAClD,UAAI;AAAA,QACF,iCAAiC,OAAO,eAAe,KAAK,OAAO,aAAa;AAAA,MAClF;AAEA,UAAI,MAAM,kCAAkC,gBAAgB,MAAM,EAAE;AAGpE,UAAI,KAAK,OAAO,OAAO;AACrB,YAAI;AACF,gBAAM,EAAE,cAAc,IAAI,MAAM,OAAO,IAAS;AAChD,wBAAc,iCAAiC,eAAe;AAAA,QAChE,QAAQ;AAAA,QAER;AAAA,MACF;AAEA,YAAM,qBACJ,OAAO,QAAQ,cAAc,WACzB,KAAK,IAAI,KAAK,OAAO,mBAAmB,QAAQ,SAAS,IACzD,KAAK,OAAO;AAClB,YAAM,cAAc,IAAI,KAAK,IAAI,GAAG,KAAK,OAAO,qBAAqB;AACrE,UAAI,WAA4B;AAChC,UAAI,iBAA+B;AACnC,eAAS,UAAU,GAAG,WAAW,aAAa,WAAW,GAAG;AAC1D,cAAM,eAAe,IAAI,gBAAgB;AACzC,cAAM,iBAAiB,WAAW,MAAM,aAAa,MAAM,GAAG,kBAAkB;AAChF,YAAI;AACF,qBAAW,MAAM,MAAM,SAAS;AAAA,YAC9B,QAAQ;AAAA,YACR,SAAS,KAAK,oBAAoB;AAAA,cAChC,gBAAgB;AAAA,YAClB,CAAC;AAAA,YACD,MAAM,KAAK,UAAU,WAAW;AAAA,YAChC,QAAQ,aAAa;AAAA,UACvB,CAAC;AAAA,QACH,SAAS,KAAK;AACZ,cAAI,CAAC,KAAK,aAAa,GAAG,EAAG,OAAM;AACnC,2BAAiB,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC;AACnE,cAAI,UAAU,aAAa;AACzB,kBAAMA,aAAY,KAAK,OAAO,yBAAyB;AACvD,gBAAI;AAAA,cACF,iCAAiC,SAAS,YAAY,OAAO,IAAI,WAAW,cAAc,kBAAkB,UAAU,KAAK,OAAO,aAAa,oBAAoBA,UAAS;AAAA,YAC9K;AACA,kBAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAASA,UAAS,CAAC;AAC7D;AAAA,UACF;AACA;AAAA,QACF,UAAE;AACA,uBAAa,cAAc;AAAA,QAC7B;AAEA,YAAI,SAAS,GAAI;AACjB,YAAI,SAAS,UAAU,OAAO,UAAU,aAAa;AACnD,cAAI;AACF,kBAAM,YAAY,MAAM,SAAS,MAAM,EAAE,KAAK;AAC9C,kBAAM,uBACJ,KAAK,gDAAgD,SAAS;AAChE,gBAAI,sBAAsB;AACxB,mBAAK;AAAA,gBACH;AAAA,gBACA,KAAK,OAAO;AAAA,cACd;AACA,mBAAK,kBAAkB;AACvB,qBAAO;AAAA,YACT;AAAA,UACF,SAAS,GAAG;AACV,gBAAI,MAAM,qDAAqD,CAAC,EAAE;AAAA,UACpE;AAAA,QACF;AACA,YAAI,SAAS,SAAS,OAAO,WAAW,YAAa;AAErD,cAAM,YAAY,KAAK,OAAO,yBAAyB;AACvD,YAAI;AAAA,UACF,yBAAyB,SAAS,MAAM,uBAAuB,UAAU,CAAC,IAAI,WAAW,WAAW,SAAS;AAAA,QAC/G;AACA,cAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,SAAS,CAAC;AAAA,MAC/D;AACA,UAAI;AAAA,QACF,wCAAwC,UAAU,MAAM,QAAQ,UAAU,EAAE;AAAA,MAC9E;AAEA,UAAI,CAAC,UAAU;AACb,YAAI,gBAAgB;AAClB,cAAI;AAAA,YACF,mCAAmC,WAAW,mBAAmB,SAAS,cAAc,kBAAkB,UAAU,KAAK,OAAO,aAAa,gBAAgB,WAAW,eAAe,KAAK,IAAI,IAAI,WAAW;AAAA,UACjN;AAAA,QACF,OAAO;AACL,cAAI;AAAA,YACF,oDAAoD,SAAS,UAAU,KAAK,OAAO,aAAa,eAAe,KAAK,IAAI,IAAI,WAAW;AAAA,UACzI;AAAA,QACF;AACA,eAAO;AAAA,MACT;AAEA,UAAI,CAAC,SAAS,IAAI;AAChB,YAAI,SAAS;AACb,YAAI,YAAY;AAChB,YAAI;AACF,sBAAY,MAAM,SAAS,KAAK;AAEhC,cAAI;AACF,kBAAM,SAAS,KAAK,MAAM,SAAS;AACnC,qBAAS,QAAQ,OAAO,UAAU,WAAM,OAAO,MAAM,OAAO,KAAK;AAAA,UACnE,QAAQ;AAEN,gBAAI,MAAM,yBAAyB,UAAU,MAAM,GAAG,GAAG,CAAC,EAAE;AAAA,UAC9D;AAAA,QACF,SAAS,GAAG;AACV,cAAI,MAAM,wCAAwC,CAAC,EAAE;AAAA,QACvD;AACA,YAAI;AAAA,UACF,6BAA6B,SAAS,MAAM,IAAI,SAAS,UAAU,GAAG,MAAM,QACrE,SAAS,WAAW,KAAK,OAAO,aAAa,SAAS,OAAO,iBAAiB,WAAW,eAAe,YAAY,UAAoB;AAAA,QACjJ;AACA,cAAM,uBACJ,KAAK,mCAAmC,MAAM,KAC9C,KAAK,gDAAgD,SAAS;AAChE,YAAI,sBAAsB;AACxB,eAAK;AAAA,YACH;AAAA,YACA,KAAK,OAAO;AAAA,UACd;AACA,eAAK,kBAAkB;AACvB,iBAAO;AAAA,QACT;AACA,YAAI,SAAS,WAAW,KAAK;AAC3B,eAAK,mBAAmB;AACxB,cAAI,KAAK,mBAAmB,KAAK,OAAO,0BAA0B;AAChE,iBAAK,kBAAkB,KAAK,IAAI,IAAI,KAAK,OAAO;AAChD,gBAAI;AAAA,cACF,oCAAoC,KAAK,OAAO,qBAAqB,YAC1D,KAAK,eAAe;AAAA,YACjC;AACA,iBAAK,kBAAkB;AAAA,UACzB;AAAA,QACF,OAAO;AACL,eAAK,kBAAkB;AAAA,QACzB;AACA,eAAO;AAAA,MACT;AACA,WAAK,kBAAkB;AAEvB,YAAM,OAAQ,MAAM,SAAS,KAAK;AAWlC,UAAI;AAAA,QACF,+BAA+B,KAAK,SAAS,MAAM,WAAW,KAAK,UAAU,KAAK,KAAK,CAAC;AAAA,MAC1F;AAKA,YAAM,MAAM,KAAK,UAAU,CAAC,GAAG;AAC/B,YAAM,UAAU,KAAK,WAAW,KAAK,qBAAqB;AAC1D,UAAI,CAAC,SAAS;AACZ,YAAI,KAAK,6CAA6C,KAAK,UAAU,KAAK,OAAO,GAAG,MAAM,GAAG,GAAG,CAAC,EAAE;AACnG,eAAO;AAAA,MACT;AAGA,YAAM,QAAQ,KAAK,QACf;AAAA,QACE,cAAc,KAAK,MAAM,iBAAiB;AAAA,QAC1C,kBAAkB,KAAK,MAAM,qBAAqB;AAAA,QAClD,aAAa,KAAK,MAAM,gBAAgB;AAAA,MAC1C,IACA,KAAK,eAAe,UAAU,OAAO;AAEzC,YAAM,aAAa,KAAK,IAAI,IAAI;AAChC,UAAI,sCAAsC,KAAK,MAAM,EAAE,WAAW,cAAc,KAAK,OAAO,oBAAoB;AAC9G,cAAMC,eAAc,SAAS,OAAO,CAAC,KAAK,MAAM,OAAO,EAAE,SAAS,UAAU,IAAI,CAAC;AACjF,cAAM,KAAK,QAAQ,YAAY,OAAO,QAAQ,SAAS,KAAK;AAC5D,YAAI;AAAA,UACF,kBAAkB,EAAE,eAAe,UAAU,UAAU,KAAK,OAAO,aAAa,QAAQ,OAAO,gBAAgBA,YAAW,iBAAiB,MAAM,gBAAgB,gBAAgB,MAAM,WAAW;AAAA,QACpM;AAAA,MACF;AAEA,UAAI,MAAM,yCAAyC,MAAM,WAAW;AACpE,aAAO,EAAE,SAAS,MAAM;AAAA,IAC1B,SAAS,KAAK;AACZ,YAAM,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC9D,YAAM,aAAa,KAAK,IAAI,IAAI;AAChC,UAAI,KAAK,aAAa,GAAG,GAAG;AAC1B,YAAI;AAAA,UACF,iCAAiC,SAAS,cAAc,QAAQ,aAAa,KAAK,OAAO,iBAAiB,UAAU,KAAK,OAAO,aAAa,eAAe,UAAU,UAAU,MAAM;AAAA,QACxL;AACA,eAAO;AAAA,MACT;AACA,UAAI,KAAK,+BAA+B,SAAS,UAAU,MAAM,EAAE;AACnE,WAAK,cAAc;AACnB,YAAM,uBAAuB,KAAK,mCAAmC,MAAM;AAC3E,UAAI,sBAAsB;AACxB,aAAK;AAAA,UACH;AAAA,UACA,KAAK,OAAO;AAAA,QACd;AAAA,MACF;AACA,aAAO;AAAA,IACT,UAAE;AACA,UAAI,WAAW;AACb,cAAM,eAAe,KAAK,IAAI;AAC9B,cAAM,SAAS,cAAc,UAAU;AACvC,YAAI;AAAA,UACF,oCAAoC,UAAU,QAAQ,WAAW,MAAM,UAAU,eAAe,WAAW,YAAY,eAAe,UAAU,YAAY,OAAO,SAAS;AAAA,QAC9K;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,qBAAqD;AACzD,UAAM,UAAU;AAAA,MACd,KAAK,OAAO,YAAY,QAAQ,aAAa,WAAW;AAAA,IAC1D;AAGA,UAAM,YAAY,QAAQ,SAAS,KAAK,IACpC,GAAG,OAAO,YACV,GAAG,OAAO;AACd,QAAI,MAAM,4BAA4B,SAAS,EAAE;AAEjD,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,iBAAiB,WAAW,GAAI;AAC1D,UAAI,CAAC,OAAO,IAAI;AACd,YAAI,OAAO,WAAW,OAAO,OAAO,WAAW,KAAK;AAClD,cAAI;AAAA,YACF,sDAAsD,SAAS;AAAA,UACjE;AAAA,QACF;AACA,YAAI,KAAK,0CAA0C,SAAS,0BAA0B;AACtF,eAAO;AAAA,MACT;AACA,UAAI,CAAC,OAAO,MAAM;AAChB,YAAI,KAAK,oCAAoC,SAAS,EAAE;AACxD,eAAO;AAAA,MACT;AAEA,YAAM,OAAO,OAAO;AAiBpB,UAAI,CAAC,MAAM,QAAQ,KAAK,IAAI,KAAK,KAAK,KAAK,WAAW,GAAG;AACvD,YAAI,KAAK,8BAA8B;AACvC,eAAO;AAAA,MACT;AAGA,YAAM,WAAW,KAAK,KAAK,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,OAAO;AAC1D,UAAI;AAAA,QACF,oBAAoB,SAAS,MAAM,wBAAwB,SAAS,MAAM,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC;AAAA,MAC7F;AAGA,YAAM,kBAAkB,KAAK,OAAO;AACpC,UAAI,QAAQ,KAAK,KAAK,KAAK,CAAC,MAAM,EAAE,OAAO,eAAe;AAG1D,UAAI,CAAC,OAAO;AACV,gBAAQ,KAAK,KAAK;AAAA,UAAK,CAAC,MACtB,gBAAgB,SAAS,EAAE,MAAM,EAAE,MAClC,EAAE,MAAM,IAAI,SAAS,gBAAgB,QAAQ,YAAY,EAAE,CAAC;AAAA,QAC/D;AAAA,MACF;AAGA,UAAI,CAAC,OAAO;AACV,gBAAQ,KAAK,KAAK,CAAC;AACnB,cAAM,mBAAmB,KAAK,KAC3B,IAAI,CAAC,MAAM,EAAE,EAAE,EACf,OAAO,OAAO,EACd,MAAM,GAAG,EAAE,EACX,KAAK,IAAI;AACZ,YAAI;AAAA,UACF,qBAAqB,eAAe,oCAC1B,MAAM,EAAE,oCAAoC,gBAAgB;AAAA,QACxE;AAAA,MACF;AAGA,UAAI,gBAAgB,MAAM,sBAAsB,MAAM;AAGtD,UAAI,CAAC,eAAe;AAClB,YAAI,KAAK,iEAAiE;AAC1E,cAAM,aAAa,KAAK,uBAAuB,MAAM,MAAM,EAAE;AAC7D,YAAI,YAAY;AACd,0BAAgB;AAAA,QAClB;AAAA,MACF;AAEA,WAAK,kBAAkB;AAAA,QACrB,IAAI,MAAM,MAAM;AAAA,QAChB;AAAA,QACA,WAAW,MAAM;AAAA,MACnB;AAEA,UAAI;AAAA,QACF,6BAA6B,KAAK,gBAAgB,EAAE,qBACjC,eAAe,eAAe,KAAK,2BAA2B;AAAA,MACnF;AAEA,aAAO,KAAK;AAAA,IACd,SAAS,KAAK;AACZ,UAAI,KAAK,+BAA+B,GAAG,EAAE;AAC7C,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,oBAAoB,uBAIvB;AACD,UAAM,WAAqB,CAAC;AAE5B,UAAM,YAAY,MAAM,KAAK,mBAAmB;AAChD,QAAI,CAAC,WAAW;AACd,aAAO,EAAE,WAAW,OAAO,UAAU,CAAC,0CAA0C,EAAE;AAAA,IACpF;AAGA,QAAI,yBAAyB,UAAU,eAAe;AACpD,UAAI,UAAU,gBAAgB,uBAAuB;AACnD,iBAAS;AAAA,UACP,kCAAkC,UAAU,EAAE,aAAa,UAAU,cAAc,eAAe,CAAC,yCACnE,sBAAsB,eAAe,CAAC,6BAC3C,UAAU,aAAa;AAAA,QACpD;AAAA,MACF;AAAA,IACF;AAGA,QAAI,CAAC,UAAU,eAAe;AAC5B,eAAS;AAAA,QACP,sDAAsD,UAAU,EAAE;AAAA,MAEpE;AAAA,IACF;AAEA,WAAO;AAAA,MACL,WAAW;AAAA,MACX,qBAAqB,UAAU;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,eACJ,UACA,UAAyC,CAAC,GACI;AAC9C,QAAI,CAAC,4BAA4B,KAAK,MAAM,EAAE,UAAU;AACtD,UAAI,MAAM,qCAAqC;AAC/C,aAAO;AAAA,IACT;AAEA,UAAM,cAAc,KAAK,oBAAoB;AAC7C,QAAI,cAAc,GAAG;AACnB,UAAI,MAAM,+BAA+B,WAAW,iCAAiC;AACrF,aAAO;AAAA,IACT;AACA,QAAI,QAAQ,UAAU;AACpB,YAAM,WAAW,QAAQ;AACzB,aAAO,MAAM,IAAI,QAA6C,CAAC,YAAY;AACzE,aAAK,cAAc,QAAQ,EAAE,KAAK;AAAA,UAChC;AAAA,UACA;AAAA,UACA;AAAA,UACA,cAAc,KAAK,IAAI;AAAA,UACvB;AAAA,QACF,CAAC;AACD,aAAK,mBAAmB;AAAA,MAC1B,CAAC;AAAA,IACH;AAEA,WAAO,MAAM,KAAK,yBAAyB,UAAU,OAAO;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,eACN,UACA,UACyE;AACzE,UAAM,cAAc,SAAS,OAAO,CAAC,KAAK,MAAM,MAAM,EAAE,QAAQ,QAAQ,CAAC;AACzE,UAAM,eAAe,KAAK,KAAK,cAAc,CAAC;AAC9C,UAAM,mBAAmB,KAAK,KAAK,SAAS,SAAS,CAAC;AAEtD,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,aAAa,eAAe;AAAA,IAC9B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,aACJ,gBACA,mBACA,eACY;AAEZ,QAAI,4BAA4B,KAAK,MAAM,EAAE,UAAU;AACrD,YAAM,cAAc,MAAM,eAAe;AACzC,UAAI,gBAAgB,MAAM;AACxB,YAAI,MAAM,GAAG,aAAa,kBAAkB;AAC5C,eAAO;AAAA,MACT;AAGA,UAAI,KAAK,OAAO,kBAAkB;AAChC,YAAI,KAAK,GAAG,aAAa,gDAAgD;AAAA,MAC3E,OAAO;AACL,cAAM,IAAI,MAAM,GAAG,aAAa,+CAA+C;AAAA,MACjF;AAAA,IACF;AAGA,WAAO,kBAAkB;AAAA,EAC3B;AACF;","names":["backoffMs","promptChars"]}

package/dist/chunk-ODPLEWB6.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/cross-namespace-budget.ts"],"sourcesContent":["/**\n * Per-principal cross-namespace query-budget limiter (issue #565 PR 4/5).\n *\n * Detects and throttles bursts of recall-type operations that a principal\n * issues against namespaces *other than their own*. Thresholds come from the\n * memory-extraction threat model (`docs/security/memory-extraction-threat-model.md`\n * §6.2) and the ADAM baseline report (`docs/security/adam-baseline-2026-04.md`):\n * a T2-class same-namespace attacker plateaus at 61 queries in the published\n * baseline, so the default window is set well below that to force any\n * adaptive loop to noticeably slow down.\n *\n * Shape:\n * - Pure, in-process, per-principal sliding window. No persistence.\n * - Only cross-namespace reads count: a principal hitting only their own\n *   namespace is never throttled.\n * - The limiter is behind the `recallCrossNamespaceBudgetEnabled` feature\n *   flag (defaults to `false`) and is a no-op when disabled. This mirrors\n *   the canonical \"new filter/transform needs an enabled check\" pattern\n *   (see CLAUDE.md gotcha #30).\n *\n * The module has no side effects beyond incrementing its own counters, and\n * it does NOT take a clock dependency — callers pass the current epoch ms\n * (or let the default `Date.now()` do it) so tests can step time\n * deterministically.\n */\n\nexport interface CrossNamespaceBudgetConfig {\n  /** Feature flag. Defaults to false — a disabled limiter is always allow. */\n  enabled?: boolean;\n  /**\n   * Rolling window size in milliseconds. Counts decay out of the window\n   * as the clock advances. Default: 60_000 (1 minute).\n   */\n  windowMs?: number;\n  /**\n   * Soft cap. Once a principal has `softLimit` cross-namespace reads in the\n   * window, the limiter *records* a warning on the decision but still\n   * allows the call. Used by PR 5's anomaly detector to surface flags\n   * without blocking. Default: 10.\n   */\n  softLimit?: number;\n  /**\n   * Hard cap. Once `hardLimit` is reached, the limiter denies the call.\n   * Default: 30 — picked to be well below the T2 baseline of ~60 queries\n   * at half-plateau, so an ADAM-style adaptive loop is throttled before it\n   * meaningfully leaks.\n   */\n  hardLimit?: number;\n}\n\nexport const DEFAULT_CROSS_NAMESPACE_BUDGET: Required<CrossNamespaceBudgetConfig> =\n  Object.freeze({\n    enabled: false,\n    windowMs: 60_000,\n    softLimit: 10,\n    hardLimit: 30,\n  });\n\n/**\n * Why a call was denied / warned. Stable strings so callers can key log\n * lines and metrics on them.\n */\nexport type BudgetDecisionReason =\n  | \"allowed-same-namespace\"\n  | \"allowed-no-limit\"\n  | \"allowed-under-soft\"\n  | \"warn-over-soft\"\n  | \"deny-over-hard\";\n\nexport interface BudgetDecision {\n  allowed: boolean;\n  reason: BudgetDecisionReason;\n  /** Cross-namespace reads by this principal currently in the window. */\n  count: number;\n  /** Active config snapshot at decision time. */\n  limit: {\n    softLimit: number;\n    hardLimit: number;\n    windowMs: number;\n  };\n}\n\ninterface PrincipalBucket {\n  /** Epoch-ms timestamps of cross-namespace reads in the active window. */\n  timestamps: number[];\n}\n\n/**\n * Normalize the provided config against the defaults and reject clearly\n * invalid shapes (non-positive windows, inverted limits). Never throws —\n * returns a safe effective config the limiter can use.\n */\nfunction effectiveConfig(\n  raw: CrossNamespaceBudgetConfig | undefined,\n): Required<CrossNamespaceBudgetConfig> {\n  const base = { ...DEFAULT_CROSS_NAMESPACE_BUDGET };\n  if (!raw) return base;\n  const out = { ...base };\n  if (typeof raw.enabled === \"boolean\") out.enabled = raw.enabled;\n  if (\n    typeof raw.windowMs === \"number\" &&\n    Number.isFinite(raw.windowMs) &&\n    raw.windowMs > 0\n  ) {\n    out.windowMs = raw.windowMs;\n  }\n  if (\n    typeof raw.softLimit === \"number\" &&\n    Number.isFinite(raw.softLimit) &&\n    raw.softLimit >= 0\n  ) {\n    out.softLimit = Math.floor(raw.softLimit);\n  }\n  if (\n    typeof raw.hardLimit === \"number\" &&\n    Number.isFinite(raw.hardLimit) &&\n    raw.hardLimit >= 1\n  ) {\n    // Floor the value, then defensively require the floored result is\n    // still >= 1. `raw.hardLimit = 0.5` previously passed the `> 0`\n    // gate and floored to 0, turning a minor misconfiguration into a\n    // full denial of cross-namespace reads. Now we fall back to the\n    // default instead.\n    const floored = Math.floor(raw.hardLimit);\n    if (floored >= 1) out.hardLimit = floored;\n  }\n  if (out.softLimit > out.hardLimit) {\n    // Inverted limits -> treat soft = hard so we never warn past the deny\n    // threshold. Defensive, should never happen with well-formed config.\n    out.softLimit = out.hardLimit;\n  }\n  return out;\n}\n\nfunction normalizeClock(now: number | undefined): number {\n  if (now === undefined) return Date.now();\n  if (Number.isFinite(now)) return Math.floor(now);\n  return 0;\n}\n\n/**\n * In-process cross-namespace budget limiter. Instantiate once per\n * orchestrator / access-service.\n *\n * Threadsafe-by-construction: Node.js is single-threaded per process for\n * application code, and the limiter never awaits between read-modify-write\n * operations on its internal state.\n */\nexport class CrossNamespaceBudget {\n  private readonly config: Required<CrossNamespaceBudgetConfig>;\n  private readonly buckets = new Map<string, PrincipalBucket>();\n\n  constructor(config?: CrossNamespaceBudgetConfig) {\n    this.config = effectiveConfig(config);\n  }\n\n  /** Exposed for tests / audit surfaces. Never mutate the returned value. */\n  getConfig(): Required<CrossNamespaceBudgetConfig> {\n    return this.config;\n  }\n\n  /**\n   * Check whether `principal` is allowed to issue another cross-namespace\n   * read. Call site is expected to compare `principalNamespace` against\n   * `queryNamespace` and only pass through reads where they differ — the\n   * limiter treats every call as a cross-namespace event.\n   *\n   * @param principal Stable identifier for the calling principal (token\n   *   subject, session principal, etc.). Must be non-empty.\n   * @param now Epoch-ms clock read. Defaults to `Date.now()`; tests pass a\n   *   fixed value to step time deterministically.\n   */\n  record(principal: string, now?: number): BudgetDecision {\n    const normalizedNow = normalizeClock(now);\n    const { enabled, windowMs, softLimit, hardLimit } = this.config;\n    const limit = { softLimit, hardLimit, windowMs };\n\n    if (!enabled) {\n      return {\n        allowed: true,\n        reason: \"allowed-no-limit\",\n        count: 0,\n        limit,\n      };\n    }\n\n    if (typeof principal !== \"string\" || principal.length === 0) {\n      // A missing principal means \"we can't attribute this call\". Rather\n      // than fail open, treat it as a cross-namespace event against a\n      // shared bucket — denial-of-service risk is bounded because the\n      // bucket is scoped per-process.\n      principal = \"__anonymous__\";\n    }\n\n    const bucket = this.buckets.get(principal) ?? { timestamps: [] };\n    const cutoff = normalizedNow - windowMs;\n    // Drop timestamps that slid out of the window.\n    while (bucket.timestamps.length > 0 && bucket.timestamps[0]! < cutoff) {\n      bucket.timestamps.shift();\n    }\n\n    // Count the current call against the window BEFORE deciding — a call\n    // that crosses the deny threshold should itself be denied, not the\n    // next one. This is what the threat model calls \"fail at the Nth,\n    // not the (N+1)th\".\n    bucket.timestamps.push(normalizedNow);\n    this.buckets.set(principal, bucket);\n    const count = bucket.timestamps.length;\n\n    if (count >= hardLimit) {\n      // Denied: roll back the timestamp we just added so a repeated denied\n      // call does not push the bucket further into the future. This keeps\n      // the limiter stateless with respect to denied attempts.\n      bucket.timestamps.pop();\n      // Evict empty buckets (e.g. the first record after a long idle\n      // rolled the only timestamp out, then got denied and rolled back).\n      // Prevents unbounded map growth across many transient principals.\n      if (bucket.timestamps.length === 0) {\n        this.buckets.delete(principal);\n      }\n      return {\n        allowed: false,\n        reason: \"deny-over-hard\",\n        count: bucket.timestamps.length,\n        limit,\n      };\n    }\n\n    if (count > softLimit) {\n      return {\n        allowed: true,\n        reason: \"warn-over-soft\",\n        count,\n        limit,\n      };\n    }\n\n    return {\n      allowed: true,\n      reason: \"allowed-under-soft\",\n      count,\n      limit,\n    };\n  }\n\n  /**\n   * Read-only peek at whether a call would be allowed, WITHOUT recording a\n   * timestamp. Useful when the caller must inspect multiple namespaces before\n   * deciding to record a single event. The returned `count` reflects the\n   * current window state at call time.\n   */\n  peek(args: {\n    principal: string;\n    principalNamespace: string;\n    queryNamespace: string;\n    now?: number;\n  }): BudgetDecision {\n    const pn = args.principalNamespace;\n    const qn = args.queryNamespace;\n    const bothPresent =\n      typeof pn === \"string\" && pn.length > 0 &&\n      typeof qn === \"string\" && qn.length > 0;\n    if (bothPresent && pn === qn) {\n      return {\n        allowed: true,\n        reason: \"allowed-same-namespace\",\n        count: 0,\n        limit: {\n          softLimit: this.config.softLimit,\n          hardLimit: this.config.hardLimit,\n          windowMs: this.config.windowMs,\n        },\n      };\n    }\n    // Cross-namespace: simulate what record() would do without the push.\n    const { enabled, windowMs, softLimit, hardLimit } = this.config;\n    const limit = { softLimit, hardLimit, windowMs };\n    if (!enabled) {\n      return { allowed: true, reason: \"allowed-no-limit\", count: 0, limit };\n    }\n    let principal = args.principal;\n    if (typeof principal !== \"string\" || principal.length === 0) {\n      principal = \"__anonymous__\";\n    }\n    const now = normalizeClock(args.now);\n    const bucket = this.buckets.get(principal) ?? { timestamps: [] };\n    const cutoff = now - windowMs;\n    let liveCount = 0;\n    for (const ts of bucket.timestamps) {\n      if (ts >= cutoff) liveCount++;\n    }\n    const projected = liveCount + 1; // +1 for the current call\n    if (projected >= hardLimit) {\n      return { allowed: false, reason: \"deny-over-hard\", count: liveCount, limit };\n    }\n    if (projected > softLimit) {\n      return { allowed: true, reason: \"warn-over-soft\", count: projected, limit };\n    }\n    return { allowed: true, reason: \"allowed-under-soft\", count: projected, limit };\n  }\n\n  /**\n   * Convenience guard that also skips the limiter when `principalNamespace`\n   * equals `queryNamespace` (same-namespace is never cross-namespace).\n   * Returns an `allowed-same-namespace` decision in that case.\n   */\n  check(args: {\n    principal: string;\n    principalNamespace: string;\n    queryNamespace: string;\n    now?: number;\n  }): BudgetDecision {\n    // Same-namespace short-circuit requires BOTH namespaces to be\n    // non-empty strings. Two empty/undefined namespaces at runtime\n    // would otherwise compare equal and fail-open — a critical bypass\n    // in a security-critical module. Force the limiter to engage when\n    // either side is missing so we never silently skip enforcement.\n    const pn = args.principalNamespace;\n    const qn = args.queryNamespace;\n    const bothPresent =\n      typeof pn === \"string\" && pn.length > 0 &&\n      typeof qn === \"string\" && qn.length > 0;\n    if (bothPresent && pn === qn) {\n      return {\n        allowed: true,\n        reason: \"allowed-same-namespace\",\n        count: 0,\n        limit: {\n          softLimit: this.config.softLimit,\n          hardLimit: this.config.hardLimit,\n          windowMs: this.config.windowMs,\n        },\n      };\n    }\n    return this.record(args.principal, args.now);\n  }\n\n  /**\n   * Clear all state. Intended for tests and for the orchestrator's\n   * lifecycle `before_reset` hook.\n   */\n  reset(): void {\n    this.buckets.clear();\n  }\n\n  /**\n   * Evict buckets whose entire timestamp list has slid out of the\n   * active window by `now`. Intended to be called periodically by a\n   * long-lived host process (e.g. from a maintenance cron) that sees\n   * many transient principals. Safe to call at any time; returns the\n   * number of buckets evicted.\n   */\n  gc(now?: number): number {\n    const normalizedNow = normalizeClock(now);\n    const cutoff = normalizedNow - this.config.windowMs;\n    let evicted = 0;\n    for (const [principal, bucket] of this.buckets.entries()) {\n      while (bucket.timestamps.length > 0 && bucket.timestamps[0]! < cutoff) {\n        bucket.timestamps.shift();\n      }\n      if (bucket.timestamps.length === 0) {\n        this.buckets.delete(principal);\n        evicted++;\n      }\n    }\n    return evicted;\n  }\n\n  /** For tests: current number of live buckets. */\n  bucketCount(): number {\n    return this.buckets.size;\n  }\n}\n"],"mappings":";AAkDO,IAAM,iCACX,OAAO,OAAO;AAAA,EACZ,SAAS;AAAA,EACT,UAAU;AAAA,EACV,WAAW;AAAA,EACX,WAAW;AACb,CAAC;AAoCH,SAAS,gBACP,KACsC;AACtC,QAAM,OAAO,EAAE,GAAG,+BAA+B;AACjD,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,MAAM,EAAE,GAAG,KAAK;AACtB,MAAI,OAAO,IAAI,YAAY,UAAW,KAAI,UAAU,IAAI;AACxD,MACE,OAAO,IAAI,aAAa,YACxB,OAAO,SAAS,IAAI,QAAQ,KAC5B,IAAI,WAAW,GACf;AACA,QAAI,WAAW,IAAI;AAAA,EACrB;AACA,MACE,OAAO,IAAI,cAAc,YACzB,OAAO,SAAS,IAAI,SAAS,KAC7B,IAAI,aAAa,GACjB;AACA,QAAI,YAAY,KAAK,MAAM,IAAI,SAAS;AAAA,EAC1C;AACA,MACE,OAAO,IAAI,cAAc,YACzB,OAAO,SAAS,IAAI,SAAS,KAC7B,IAAI,aAAa,GACjB;AAMA,UAAM,UAAU,KAAK,MAAM,IAAI,SAAS;AACxC,QAAI,WAAW,EAAG,KAAI,YAAY;AAAA,EACpC;AACA,MAAI,IAAI,YAAY,IAAI,WAAW;AAGjC,QAAI,YAAY,IAAI;AAAA,EACtB;AACA,SAAO;AACT;AAEA,SAAS,eAAe,KAAiC;AACvD,MAAI,QAAQ,OAAW,QAAO,KAAK,IAAI;AACvC,MAAI,OAAO,SAAS,GAAG,EAAG,QAAO,KAAK,MAAM,GAAG;AAC/C,SAAO;AACT;AAUO,IAAM,uBAAN,MAA2B;AAAA,EACf;AAAA,EACA,UAAU,oBAAI,IAA6B;AAAA,EAE5D,YAAY,QAAqC;AAC/C,SAAK,SAAS,gBAAgB,MAAM;AAAA,EACtC;AAAA;AAAA,EAGA,YAAkD;AAChD,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,OAAO,WAAmB,KAA8B;AACtD,UAAM,gBAAgB,eAAe,GAAG;AACxC,UAAM,EAAE,SAAS,UAAU,WAAW,UAAU,IAAI,KAAK;AACzD,UAAM,QAAQ,EAAE,WAAW,WAAW,SAAS;AAE/C,QAAI,CAAC,SAAS;AACZ,aAAO;AAAA,QACL,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,OAAO;AAAA,QACP;AAAA,MACF;AAAA,IACF;AAEA,QAAI,OAAO,cAAc,YAAY,UAAU,WAAW,GAAG;AAK3D,kBAAY;AAAA,IACd;AAEA,UAAM,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,EAAE,YAAY,CAAC,EAAE;AAC/D,UAAM,SAAS,gBAAgB;AAE/B,WAAO,OAAO,WAAW,SAAS,KAAK,OAAO,WAAW,CAAC,IAAK,QAAQ;AACrE,aAAO,WAAW,MAAM;AAAA,IAC1B;AAMA,WAAO,WAAW,KAAK,aAAa;AACpC,SAAK,QAAQ,IAAI,WAAW,MAAM;AAClC,UAAM,QAAQ,OAAO,WAAW;AAEhC,QAAI,SAAS,WAAW;AAItB,aAAO,WAAW,IAAI;AAItB,UAAI,OAAO,WAAW,WAAW,GAAG;AAClC,aAAK,QAAQ,OAAO,SAAS;AAAA,MAC/B;AACA,aAAO;AAAA,QACL,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,OAAO,OAAO,WAAW;AAAA,QACzB;AAAA,MACF;AAAA,IACF;AAEA,QAAI,QAAQ,WAAW;AACrB,aAAO;AAAA,QACL,SAAS;AAAA,QACT,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,MACL,SAAS;AAAA,MACT,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,KAAK,MAKc;AACjB,UAAM,KAAK,KAAK;AAChB,UAAM,KAAK,KAAK;AAChB,UAAM,cACJ,OAAO,OAAO,YAAY,GAAG,SAAS,KACtC,OAAO,OAAO,YAAY,GAAG,SAAS;AACxC,QAAI,eAAe,OAAO,IAAI;AAC5B,aAAO;AAAA,QACL,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,OAAO;AAAA,QACP,OAAO;AAAA,UACL,WAAW,KAAK,OAAO;AAAA,UACvB,WAAW,KAAK,OAAO;AAAA,UACvB,UAAU,KAAK,OAAO;AAAA,QACxB;AAAA,MACF;AAAA,IACF;AAEA,UAAM,EAAE,SAAS,UAAU,WAAW,UAAU,IAAI,KAAK;AACzD,UAAM,QAAQ,EAAE,WAAW,WAAW,SAAS;AAC/C,QAAI,CAAC,SAAS;AACZ,aAAO,EAAE,SAAS,MAAM,QAAQ,oBAAoB,OAAO,GAAG,MAAM;AAAA,IACtE;AACA,QAAI,YAAY,KAAK;AACrB,QAAI,OAAO,cAAc,YAAY,UAAU,WAAW,GAAG;AAC3D,kBAAY;AAAA,IACd;AACA,UAAM,MAAM,eAAe,KAAK,GAAG;AACnC,UAAM,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,EAAE,YAAY,CAAC,EAAE;AAC/D,UAAM,SAAS,MAAM;AACrB,QAAI,YAAY;AAChB,eAAW,MAAM,OAAO,YAAY;AAClC,UAAI,MAAM,OAAQ;AAAA,IACpB;AACA,UAAM,YAAY,YAAY;AAC9B,QAAI,aAAa,WAAW;AAC1B,aAAO,EAAE,SAAS,OAAO,QAAQ,kBAAkB,OAAO,WAAW,MAAM;AAAA,IAC7E;AACA,QAAI,YAAY,WAAW;AACzB,aAAO,EAAE,SAAS,MAAM,QAAQ,kBAAkB,OAAO,WAAW,MAAM;AAAA,IAC5E;AACA,WAAO,EAAE,SAAS,MAAM,QAAQ,sBAAsB,OAAO,WAAW,MAAM;AAAA,EAChF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,MAKa;AAMjB,UAAM,KAAK,KAAK;AAChB,UAAM,KAAK,KAAK;AAChB,UAAM,cACJ,OAAO,OAAO,YAAY,GAAG,SAAS,KACtC,OAAO,OAAO,YAAY,GAAG,SAAS;AACxC,QAAI,eAAe,OAAO,IAAI;AAC5B,aAAO;AAAA,QACL,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,OAAO;AAAA,QACP,OAAO;AAAA,UACL,WAAW,KAAK,OAAO;AAAA,UACvB,WAAW,KAAK,OAAO;AAAA,UACvB,UAAU,KAAK,OAAO;AAAA,QACxB;AAAA,MACF;AAAA,IACF;AACA,WAAO,KAAK,OAAO,KAAK,WAAW,KAAK,GAAG;AAAA,EAC7C;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,QAAc;AACZ,SAAK,QAAQ,MAAM;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,GAAG,KAAsB;AACvB,UAAM,gBAAgB,eAAe,GAAG;AACxC,UAAM,SAAS,gBAAgB,KAAK,OAAO;AAC3C,QAAI,UAAU;AACd,eAAW,CAAC,WAAW,MAAM,KAAK,KAAK,QAAQ,QAAQ,GAAG;AACxD,aAAO,OAAO,WAAW,SAAS,KAAK,OAAO,WAAW,CAAC,IAAK,QAAQ;AACrE,eAAO,WAAW,MAAM;AAAA,MAC1B;AACA,UAAI,OAAO,WAAW,WAAW,GAAG;AAClC,aAAK,QAAQ,OAAO,SAAS;AAC7B;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,cAAsB;AACpB,WAAO,KAAK,QAAQ;AAAA,EACtB;AACF;","names":[]}