@saihm/shm 0.0.0-stage → 0.38.0

package/dist/inject/token_estimate.d.ts

@@ -0,0 +1,3 @@
+export type TokenEstimate = (text: string) => number;
+export declare const estimateTokens: TokenEstimate;
+//# sourceMappingURL=token_estimate.d.ts.map

package/dist/inject/token_estimate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token_estimate.d.ts","sourceRoot":"","sources":["../../src/inject/token_estimate.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;AAErD,eAAO,MAAM,cAAc,EAAE,aAAoD,CAAC"}

package/dist/inject/token_estimate.js

@@ -0,0 +1,2 @@
+export const estimateTokens = (text) => Math.ceil(text.length / 4);
+//# sourceMappingURL=token_estimate.js.map

package/dist/inject/token_estimate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token_estimate.js","sourceRoot":"","sources":["../../src/inject/token_estimate.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,cAAc,GAAkB,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC"}

package/dist/inject/window.d.ts

@@ -0,0 +1,6 @@
+export interface InjectionWindowParts {
+    readonly sessionId?: string;
+    readonly compactCount?: number;
+}
+export declare function injectionWindowId(parts: InjectionWindowParts): string | undefined;
+//# sourceMappingURL=window.d.ts.map

package/dist/inject/window.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"window.d.ts","sourceRoot":"","sources":["../../src/inject/window.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,oBAAoB,GAC1B,MAAM,GAAG,SAAS,CAQpB"}

package/dist/inject/window.js

@@ -0,0 +1,10 @@
+export function injectionWindowId(parts) {
+    const { sessionId, compactCount } = parts;
+    if (typeof sessionId !== "string" || sessionId.trim() === "")
+        return undefined;
+    if (!Number.isInteger(compactCount) || compactCount < 0) {
+        return undefined;
+    }
+    return `${sessionId.trim()}#${compactCount}`;
+}
+//# sourceMappingURL=window.js.map

package/dist/inject/window.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"window.js","sourceRoot":"","sources":["../../src/inject/window.ts"],"names":[],"mappings":"AAKA,MAAM,UAAU,iBAAiB,CAC/B,KAA2B;IAE3B,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;IAC1C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE;QAC1D,OAAO,SAAS,CAAC;IACnB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,IAAK,YAAuB,GAAG,CAAC,EAAE,CAAC;QACpE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,YAAsB,EAAE,CAAC;AACzD,CAAC"}

package/dist/modes/behaviour_modes.d.ts

@@ -0,0 +1,21 @@
+export interface BehaviourMode {
+    readonly id: string;
+    readonly name: string;
+    readonly question: string;
+    readonly cues: readonly string[];
+    readonly source: string;
+}
+export interface ModeSelection {
+    readonly applied: readonly BehaviourMode[];
+    readonly deferred: readonly BehaviourMode[];
+    readonly costWords: number;
+    readonly budgetWords: number;
+}
+export interface ModeSelectOptions {
+    readonly budgetWords: number;
+}
+export declare function costOf(mode: BehaviourMode): number;
+export declare function validateRegistry(modes: readonly BehaviourMode[]): void;
+export declare function selectModes(action: string, registry: readonly BehaviourMode[], opts: ModeSelectOptions): ModeSelection;
+export declare const DEFAULT_MODES: readonly BehaviourMode[];
+//# sourceMappingURL=behaviour_modes.d.ts.map

package/dist/modes/behaviour_modes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"behaviour_modes.d.ts","sourceRoot":"","sources":["../../src/modes/behaviour_modes.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;IAC3C,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CAElD;AAYD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,aAAa,EAAE,GAAG,IAAI,CActE;AASD,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,SAAS,aAAa,EAAE,EAClC,IAAI,EAAE,iBAAiB,GACtB,aAAa,CAkBf;AAED,eAAO,MAAM,aAAa,EAAE,SAAS,aAAa,EAuEjD,CAAC"}

package/dist/modes/behaviour_modes.js

@@ -0,0 +1,137 @@
+export function costOf(mode) {
+    return mode.question.trim().split(/\s+/).filter((w) => w.length > 0).length;
+}
+function questionProblem(q) {
+    const t = q.trim();
+    if (t.length === 0)
+        return "empty";
+    if (!t.endsWith("?"))
+        return "not a question (must end with ?)";
+    if (t.slice(0, -1).includes("?"))
+        return "more than one question";
+    if (/\n/.test(t))
+        return "contains a line break — that is a protocol, not a question";
+    if (/[.!]\s+[A-Z]/.test(t))
+        return "contains a sentence break — compile the mode, do not recite it";
+    return undefined;
+}
+export function validateRegistry(modes) {
+    const seen = new Set();
+    for (const m of modes) {
+        if (seen.has(m.id))
+            throw new Error(`duplicate mode id: ${m.id}`);
+        seen.add(m.id);
+        const bad = questionProblem(m.question);
+        if (bad !== undefined)
+            throw new Error(`mode ${m.id}: question ${bad}`);
+        if (m.cues.length === 0)
+            throw new Error(`mode ${m.id}: no cues — it could never be selected`);
+        for (const c of m.cues) {
+            if (c !== c.toLowerCase())
+                throw new Error(`mode ${m.id}: cue "${c}" must be lowercase`);
+            if (c.trim().length === 0)
+                throw new Error(`mode ${m.id}: empty cue`);
+        }
+        if (m.source.trim().length === 0)
+            throw new Error(`mode ${m.id}: no provenance`);
+    }
+}
+function cueMatches(cue, hay) {
+    const esc = cue.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    const left = /^\w/.test(cue) ? "\\b" : "";
+    const right = /\w$/.test(cue) ? "\\b" : "";
+    return new RegExp(`${left}${esc}${right}`).test(hay);
+}
+export function selectModes(action, registry, opts) {
+    const hay = action.toLowerCase();
+    const matched = registry.filter((m) => m.cues.some((c) => cueMatches(c, hay)));
+    const applied = [];
+    const deferred = [];
+    let cost = 0;
+    let full = false;
+    for (const m of matched) {
+        const c = costOf(m);
+        if (!full && cost + c <= opts.budgetWords) {
+            applied.push(m);
+            cost += c;
+        }
+        else {
+            full = true;
+            deferred.push(m);
+        }
+    }
+    return { applied, deferred, costWords: cost, budgetWords: opts.budgetWords };
+}
+export const DEFAULT_MODES = [
+    {
+        id: "hostile-review",
+        name: "Hostile review",
+        question: "What would make this wrong?",
+        cues: ["ship", "commit", "merge", "implement", "build", "fix", "refactor", "release"],
+        source: "review practice: three hostile passes, for correctness, integration and specification, before a change ships",
+    },
+    {
+        id: "decide-dont-ask",
+        name: "Decide analytically",
+        question: "Could I settle this by measuring instead of asking?",
+        cues: ["ask", "question", "decide", "choose", "option", "which"],
+        source: "decision practice: a question that a measurement can settle is not a question to ask",
+    },
+    {
+        id: "selector-blindness",
+        name: "Selector blindness",
+        question: "Does my selector filter on the field the defect corrupts?",
+        cues: ["audit", "scan", "select", "filter", "census", "grep", "probe", "instrument"],
+        source: "measurement practice: a selector that filters on the corrupted field reports a false all-clear",
+    },
+    {
+        id: "known-positive",
+        name: "Known-positive first",
+        question: "Have I seen this instrument fail on a case I know is positive?",
+        cues: ["measure", "probe", "test", "gate", "verify", "control", "null", "instrument"],
+        source: "measurement practice: trust an instrument only after it has failed on a planted positive",
+    },
+    {
+        id: "denominator",
+        name: "Denominator",
+        question: "What is my n, and is it independent draws rather than printed rows?",
+        cues: ["measure", "rate", "correlation", "percent", "recall@", "precision", "n=", "average"],
+        source: "measurement practice: repeated rows from one source are not independent samples",
+    },
+    {
+        id: "stale-value",
+        name: "Staleness with authority",
+        question: "Is this a stored value where it should be a pointer to a measurement?",
+        cues: ["version", "status", "state", "head", "sha", "count", "resume", "claim"],
+        source: "memory practice: a stored value goes stale; a pointer to its measurement does not",
+    },
+    {
+        id: "fail-open",
+        name: "Fail-open check",
+        question: "If this check is misconfigured, does it fail closed or fail open?",
+        cues: ["policy", "guard", "deny", "refuse", "allow", "security", "boundary", "validate"],
+        source: "configuration practice: a check that fails open on a configuration error passes every test nobody wrote",
+    },
+    {
+        id: "reader-predicate",
+        name: "Writer gated on the reader",
+        question: "Is the writer gated on the reader's own predicate, or merely tested against it?",
+        cues: ["write", "append", "emit", "serialize", "send", "share", "publish"],
+        source: "data practice: a writer gated on the reader's own predicate cannot store what the reader refuses",
+    },
+    {
+        id: "index-budget",
+        name: "Index budget",
+        question: "Will this append push the always-loaded index past its silent-truncation point?",
+        cues: ["memory.md", "index", "append", "remember", "memory file"],
+        source: "memory practice: an always-loaded index cut at its size limit loses its last entries without warning",
+    },
+    {
+        id: "cost-of-compliance",
+        name: "Cost of compliance",
+        question: "Am I judging this proactive feature on firing rate instead of what it costs to obey?",
+        cues: ["proactive", "inject", "surface", "remind", "render", "hook", "firing"],
+        source: "measurement practice: judge a proactive feature by what obeying it costs, not by how often it fires",
+    },
+];
+//# sourceMappingURL=behaviour_modes.js.map

package/dist/modes/behaviour_modes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"behaviour_modes.js","sourceRoot":"","sources":["../../src/modes/behaviour_modes.ts"],"names":[],"mappings":"AAmBA,MAAM,UAAU,MAAM,CAAC,IAAmB;IACxC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;AAC9E,CAAC;AAED,SAAS,eAAe,CAAC,CAAS;IAChC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACnC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,kCAAkC,CAAC;IAChE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,wBAAwB,CAAC;IAClE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,4DAA4D,CAAC;IACtF,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,gEAAgE,CAAC;IACpG,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAA+B;IAC9D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACf,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,cAAc,GAAG,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,wCAAwC,CAAC,CAAC;QAC/F,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,qBAAqB,CAAC,CAAC;YACzF,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,GAAW;IAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3C,OAAO,IAAI,MAAM,CAAC,GAAG,IAAI,GAAG,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,QAAkC,EAClC,IAAuB;IAEvB,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,IAAI,IAAI,CAAC,CAAC;QACZ,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,IAAI,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAA6B;IACrD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,6BAA6B;QACvC,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,CAAC;QACrF,MAAM,EAAE,8GAA8G;KACvH;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,qDAAqD;QAC/D,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC;QAChE,MAAM,EAAE,sFAAsF;KAC/F;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,2DAA2D;QACrE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC;QACpF,MAAM,EAAE,gGAAgG;KACzG;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,gEAAgE;QAC1E,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC;QACrF,MAAM,EAAE,0FAA0F;KACnG;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,qEAAqE;QAC/E,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC;QAC5F,MAAM,EAAE,iFAAiF;KAC1F;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,uEAAuE;QACjF,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC;QAC/E,MAAM,EAAE,mFAAmF;KAC5F;IACD;QACE,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,mEAAmE;QAC7E,IAAI,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC;QACxF,MAAM,EAAE,yGAAyG;KAClH;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,4BAA4B;QAClC,QAAQ,EAAE,iFAAiF;QAC3F,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC;QAC1E,MAAM,EAAE,kGAAkG;KAC3G;IACD;QACE,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,iFAAiF;QAC3F,IAAI,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,CAAC;QACjE,MAAM,EAAE,sGAAsG;KAC/G;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,sFAAsF;QAChG,IAAI,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;QAC9E,MAAM,EAAE,qGAAqG;KAC9G;CACF,CAAC"}

package/dist/policy/index.d.ts

@@ -0,0 +1,2 @@
+export { validateStorePolicy, encodePolicyCell, parsePolicyCell, degradedPolicy, resolveStorePolicy, assertWriteAllowed, POLICY_MARKER, type StorePolicy, type StoreTier, type PolicyAuthority, type OnUnavailable, type ResolvedPolicy, type PolicySource, type SharedCellReader, } from "./store_policy.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/policy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/policy/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EAAE,gBAAgB,EAAE,eAAe,EAAE,cAAc,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,aAAa,EAC7H,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,KAAK,eAAe,EAAE,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,KAAK,YAAY,EAAE,KAAK,gBAAgB,GAC1I,MAAM,mBAAmB,CAAC"}

package/dist/policy/index.js

@@ -0,0 +1,2 @@
+export { validateStorePolicy, encodePolicyCell, parsePolicyCell, degradedPolicy, resolveStorePolicy, assertWriteAllowed, POLICY_MARKER, } from "./store_policy.js";
+//# sourceMappingURL=index.js.map

package/dist/policy/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/policy/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EAAE,gBAAgB,EAAE,eAAe,EAAE,cAAc,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,aAAa,GAE9H,MAAM,mBAAmB,CAAC"}

package/dist/policy/store_policy.d.ts

@@ -0,0 +1,47 @@
+export type StoreTier = "local" | "saihm" | "central";
+export type PolicyAuthority = "agent" | "central" | "hybrid";
+export type OnUnavailable = "refuse-writes-keep-local-reads" | "refuse-all";
+export interface StorePolicy {
+    readonly version: 1;
+    readonly authority: PolicyAuthority;
+    readonly primary: StoreTier;
+    readonly allowed: readonly StoreTier[];
+    readonly onUnavailable: OnUnavailable;
+    readonly organization?: string;
+    readonly issuedAtEpoch?: number;
+}
+export interface ResolvedPolicy {
+    readonly policy: StorePolicy;
+    readonly provenance: "agent" | "central" | "degraded";
+    readonly issuer?: string;
+    readonly degraded?: string;
+}
+export declare function validateStorePolicy(raw: unknown): StorePolicy;
+export declare const POLICY_MARKER = "SHM-POLICY:v1";
+export declare function encodePolicyCell(policy: StorePolicy): string;
+export declare function parsePolicyCell(plaintext: string): StorePolicy | undefined;
+export declare function degradedPolicy(reason: string, onUnavailable?: OnUnavailable): ResolvedPolicy;
+export interface SharedCellReader {
+    readShared?(sharerAgentIdHash: string, sharerRecord: {
+        readonly mldsaPubKey: string;
+        readonly mlkemPubKey: string;
+        readonly mlkemPubKeySelfSig: string;
+    }, cellId: string): Promise<string | undefined>;
+}
+export type PolicySource = {
+    readonly kind: "agent";
+    readonly policy: StorePolicy;
+} | {
+    readonly kind: "central";
+    readonly organization: string;
+    readonly organizationRecord: {
+        readonly mldsaPubKey: string;
+        readonly mlkemPubKey: string;
+        readonly mlkemPubKeySelfSig: string;
+    };
+    readonly policyCellId: string;
+    readonly agentPrimary?: StoreTier;
+};
+export declare function resolveStorePolicy(source: PolicySource, port: SharedCellReader): Promise<ResolvedPolicy>;
+export declare function assertWriteAllowed(resolved: ResolvedPolicy, tier: StoreTier, what: string): void;
+//# sourceMappingURL=store_policy.d.ts.map

package/dist/policy/store_policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store_policy.d.ts","sourceRoot":"","sources":["../../src/policy/store_policy.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;AACtD,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC;AAC7D,MAAM,MAAM,aAAa,GAAG,gCAAgC,GAAG,YAAY,CAAC;AAE5E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS,SAAS,EAAE,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,OAAO,GAAG,SAAS,GAAG,UAAU,CAAC;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAWD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,CA8B7D;AAED,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAE7C,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAE5D;AAED,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAW1E;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,GAAE,aAAgD,GAAG,cAAc,CAM9H;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CAAC,CAAC,iBAAiB,EAAE,MAAM,EAAE,YAAY,EAAE;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;KAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CACxM;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAAE,GACxD;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,kBAAkB,EAAE;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;KAAE,CAAC;IACjI,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC;CACnC,CAAC;AAEN,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAgC9G;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAIhG"}

package/dist/policy/store_policy.js

@@ -0,0 +1,125 @@
+import { verifyBinding } from "../coordination/identity.js";
+const TIERS = new Set(["local", "saihm", "central"]);
+const AUTH = new Set(["agent", "central", "hybrid"]);
+const ONU = new Set(["refuse-writes-keep-local-reads", "refuse-all"]);
+const HEX64 = /^[0-9a-f]{64}$/;
+function bad(msg) {
+    throw new Error(`store policy: ${msg}`);
+}
+export function validateStorePolicy(raw) {
+    if (typeof raw !== "object" || raw === null || Array.isArray(raw))
+        bad("not an object");
+    const p = raw;
+    if (p["version"] !== 1)
+        bad(`unsupported version ${JSON.stringify(p["version"])}`);
+    if (typeof p["authority"] !== "string" || !AUTH.has(p["authority"]))
+        bad(`unknown authority ${JSON.stringify(p["authority"])}`);
+    if (!Array.isArray(p["allowed"]) || p["allowed"].length === 0 || !p["allowed"].every((t) => typeof t === "string" && TIERS.has(t)))
+        bad("allowed must be a non-empty list of tiers");
+    const allowed = [...new Set(p["allowed"])];
+    if (typeof p["primary"] !== "string" || !TIERS.has(p["primary"]))
+        bad(`unknown primary ${JSON.stringify(p["primary"])}`);
+    if (!allowed.includes(p["primary"]))
+        bad(`primary ${p["primary"]} is not in allowed [${allowed.join(",")}]`);
+    if (typeof p["onUnavailable"] !== "string" || !ONU.has(p["onUnavailable"]))
+        bad(`unknown onUnavailable ${JSON.stringify(p["onUnavailable"])}`);
+    let organization;
+    if (p["organization"] !== undefined) {
+        if (typeof p["organization"] !== "string" || !HEX64.test(p["organization"]))
+            bad("organization must be a 64-hex agentIdHash");
+        organization = p["organization"];
+    }
+    if ((p["authority"] === "central" || p["authority"] === "hybrid") && organization === undefined)
+        bad(`authority ${p["authority"]} requires an organization id`);
+    let issuedAtEpoch;
+    if (p["issuedAtEpoch"] !== undefined) {
+        if (typeof p["issuedAtEpoch"] !== "number" || !Number.isFinite(p["issuedAtEpoch"]) || p["issuedAtEpoch"] < 0)
+            bad("issuedAtEpoch must be a non-negative finite number");
+        issuedAtEpoch = p["issuedAtEpoch"];
+    }
+    return {
+        version: 1,
+        authority: p["authority"],
+        primary: p["primary"],
+        allowed,
+        onUnavailable: p["onUnavailable"],
+        ...(organization !== undefined ? { organization } : {}),
+        ...(issuedAtEpoch !== undefined ? { issuedAtEpoch } : {}),
+    };
+}
+export const POLICY_MARKER = "SHM-POLICY:v1";
+export function encodePolicyCell(policy) {
+    return `${POLICY_MARKER}\n${JSON.stringify(validateStorePolicy(policy))}`;
+}
+export function parsePolicyCell(plaintext) {
+    if (!plaintext.startsWith(POLICY_MARKER))
+        return undefined;
+    const nl = plaintext.indexOf("\n");
+    if (nl < 0)
+        bad("policy marker with no body");
+    let raw;
+    try {
+        raw = JSON.parse(plaintext.slice(nl + 1));
+    }
+    catch {
+        bad("policy body is not JSON");
+    }
+    return validateStorePolicy(raw);
+}
+export function degradedPolicy(reason, onUnavailable = "refuse-writes-keep-local-reads") {
+    return {
+        policy: { version: 1, authority: "central", primary: "local", allowed: ["local"], onUnavailable },
+        provenance: "degraded",
+        degraded: reason,
+    };
+}
+export async function resolveStorePolicy(source, port) {
+    if (source.kind === "agent") {
+        return { policy: validateStorePolicy(source.policy), provenance: "agent" };
+    }
+    const org = source.organization.trim().toLowerCase();
+    const bind = verifyBinding(org, source.organizationRecord);
+    if (!bind.ok)
+        return degradedPolicy(`organization record does not bind to the pinned id: ${bind.reason}`);
+    if (typeof port.readShared !== "function")
+        return degradedPolicy("this port cannot read a shared cell (no readShared) — central policy unreachable");
+    let text;
+    try {
+        text = await port.readShared(org, source.organizationRecord, source.policyCellId);
+    }
+    catch (e) {
+        return degradedPolicy(`policy cell read failed: ${e.message}`);
+    }
+    if (text === undefined)
+        return degradedPolicy("policy cell not readable from the pinned organization");
+    let policy;
+    try {
+        policy = parsePolicyCell(text);
+    }
+    catch (e) {
+        return degradedPolicy(`policy cell malformed: ${e.message}`);
+    }
+    if (policy === undefined)
+        return degradedPolicy("the shared cell is not a policy cell");
+    if (policy.authority === "agent")
+        return degradedPolicy("a centrally shared policy declares authority `agent` — refused as contradictory");
+    if (policy.organization !== undefined && policy.organization !== org)
+        return degradedPolicy("policy names a different organization than the one pinned");
+    let effective = policy;
+    if (policy.authority === "hybrid" && source.agentPrimary !== undefined) {
+        if (!policy.allowed.includes(source.agentPrimary))
+            return degradedPolicy(`agent primary ${source.agentPrimary} is outside allowed [${policy.allowed.join(",")}]`);
+        effective = { ...policy, primary: source.agentPrimary };
+    }
+    else if (policy.authority === "central" && source.agentPrimary !== undefined && source.agentPrimary !== policy.primary) {
+        return degradedPolicy("authority is central: the agent may not choose a primary");
+    }
+    return { policy: effective, provenance: "central", issuer: org };
+}
+export function assertWriteAllowed(resolved, tier, what) {
+    if (resolved.policy.allowed.includes(tier))
+        return;
+    const why = resolved.provenance === "degraded" ? ` (degraded: ${resolved.degraded})` : "";
+    throw new Error(`${what} refused: store policy does not allow writes to tier ${tier}${why}; allowed [${resolved.policy.allowed.join(",")}]`);
+}
+//# sourceMappingURL=store_policy.js.map

package/dist/policy/store_policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store_policy.js","sourceRoot":"","sources":["../../src/policy/store_policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAuB5D,MAAM,KAAK,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAC1E,MAAM,IAAI,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC1E,MAAM,GAAG,GAAwB,IAAI,GAAG,CAAC,CAAC,gCAAgC,EAAE,YAAY,CAAC,CAAC,CAAC;AAC3F,MAAM,KAAK,GAAG,gBAAgB,CAAC;AAE/B,SAAS,GAAG,CAAC,GAAW;IACtB,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,eAAe,CAAC,CAAC;IACxF,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,GAAG,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;IACnF,IAAI,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAAE,GAAG,CAAC,qBAAqB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC;IAChI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAAE,GAAG,CAAC,2CAA2C,CAAC,CAAC;IACrL,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAgB,CAAC,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAAE,GAAG,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;IACzH,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAc,CAAC;QAAE,GAAG,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,uBAAuB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1H,IAAI,OAAO,CAAC,CAAC,eAAe,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAAE,GAAG,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/I,IAAI,YAAgC,CAAC;IACrC,IAAI,CAAC,CAAC,cAAc,CAAC,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,OAAO,CAAC,CAAC,cAAc,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;YAAE,GAAG,CAAC,2CAA2C,CAAC,CAAC;QAC9H,YAAY,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,IAAI,YAAY,KAAK,SAAS;QAAE,GAAG,CAAC,aAAa,CAAC,CAAC,WAAW,CAAC,8BAA8B,CAAC,CAAC;IAChK,IAAI,aAAiC,CAAC;IACtC,IAAI,CAAC,CAAC,eAAe,CAAC,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,CAAC,eAAe,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,oDAAoD,CAAC,CAAC;QACxK,aAAa,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;IACD,OAAO;QACL,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,CAAC,CAAC,WAAW,CAAoB;QAC5C,OAAO,EAAE,CAAC,CAAC,SAAS,CAAc;QAClC,OAAO;QACP,aAAa,EAAE,CAAC,CAAC,eAAe,CAAkB;QAClD,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC;AAE7C,MAAM,UAAU,gBAAgB,CAAC,MAAmB;IAClD,OAAO,GAAG,aAAa,KAAK,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3D,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,EAAE,GAAG,CAAC;QAAE,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAC9C,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,gBAA+B,gCAAgC;IAC5G,OAAO;QACL,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE;QACjG,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,MAAM;KACjB,CAAC;AACJ,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAoB,EAAE,IAAsB;IACnF,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IAC7E,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrD,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,cAAc,CAAC,uDAAuD,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1G,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,UAAU;QAAE,OAAO,cAAc,CAAC,kFAAkF,CAAC,CAAC;IACrJ,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IACpF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,cAAc,CAAC,4BAA6B,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,cAAc,CAAC,uDAAuD,CAAC,CAAC;IACvG,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,cAAc,CAAC,0BAA2B,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,cAAc,CAAC,sCAAsC,CAAC,CAAC;IACxF,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO;QAAE,OAAO,cAAc,CAAC,iFAAiF,CAAC,CAAC;IAC3I,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,GAAG;QAAE,OAAO,cAAc,CAAC,2DAA2D,CAAC,CAAC;IACzJ,IAAI,SAAS,GAAG,MAAM,CAAC;IACvB,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACvE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC;YAAE,OAAO,cAAc,CAAC,iBAAiB,MAAM,CAAC,YAAY,wBAAwB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClK,SAAS,GAAG,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;IAC1D,CAAC;SAAM,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;QACzH,OAAO,cAAc,CAAC,0DAA0D,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAwB,EAAE,IAAe,EAAE,IAAY;IACxF,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO;IACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,eAAe,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1F,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,wDAAwD,IAAI,GAAG,GAAG,cAAc,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC/I,CAAC"}

package/dist/profile/index.d.ts

@@ -0,0 +1,5 @@
+export { PRODUCTION_PROFILE, productionSessionOptions } from "./production.js";
+export type { ProductionProfile } from "./production.js";
+export { HOT_SWAPPABLE_LEVERS, INDEX_TIME_LEVERS, LeverProfileError, isHotSwappable, normalizeLeverProfile, } from "./lever_profile.js";
+export type { HotSwappableLever, LeverProfile, NormalizeLeverOptions } from "./lever_profile.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/profile/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/profile/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC/E,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/profile/index.js

@@ -0,0 +1,3 @@
+export { PRODUCTION_PROFILE, productionSessionOptions } from "./production.js";
+export { HOT_SWAPPABLE_LEVERS, INDEX_TIME_LEVERS, LeverProfileError, isHotSwappable, normalizeLeverProfile, } from "./lever_profile.js";
+//# sourceMappingURL=index.js.map

package/dist/profile/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/profile/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAE/E,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,qBAAqB,GACtB,MAAM,oBAAoB,CAAC"}

package/dist/profile/lever_profile.d.ts

@@ -0,0 +1,27 @@
+import type { DemoteMode } from "../retrieval/thread_lifecycle.js";
+export declare const HOT_SWAPPABLE_LEVERS: readonly ["rerankK", "rerankOnBody", "rerankBodyWindowChars", "queryExpansion", "queryExpansionN", "queryExpansionM", "threadLifecycle", "threadJoin", "threadDemote", "threadPoolK", "threadMaxGroup", "allowThreadPoolWiderThanRerank"];
+export declare const INDEX_TIME_LEVERS: readonly ["rrf", "excludeNamespaces", "tenantId"];
+export type HotSwappableLever = (typeof HOT_SWAPPABLE_LEVERS)[number];
+export interface LeverProfile {
+    readonly rerankK?: number;
+    readonly rerankOnBody?: boolean;
+    readonly rerankBodyWindowChars?: number;
+    readonly queryExpansion?: boolean;
+    readonly queryExpansionN?: number;
+    readonly queryExpansionM?: number;
+    readonly threadLifecycle?: boolean;
+    readonly threadJoin?: boolean;
+    readonly threadDemote?: DemoteMode;
+    readonly threadPoolK?: number;
+    readonly threadMaxGroup?: number;
+    readonly allowThreadPoolWiderThanRerank?: boolean;
+}
+export interface NormalizeLeverOptions {
+    readonly hasReranker?: boolean;
+}
+export declare class LeverProfileError extends Error {
+    constructor(message: string);
+}
+export declare function normalizeLeverProfile(input: unknown, opts?: NormalizeLeverOptions): LeverProfile;
+export declare function isHotSwappable(lever: string): boolean;
+//# sourceMappingURL=lever_profile.d.ts.map

package/dist/profile/lever_profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lever_profile.d.ts","sourceRoot":"","sources":["../../src/profile/lever_profile.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAEnE,eAAO,MAAM,oBAAoB,2OAavB,CAAC;AAEX,eAAO,MAAM,iBAAiB,mDAAoD,CAAC;AAEnF,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;IACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,8BAA8B,CAAC,EAAE,OAAO,CAAC;CACnD;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,OAAO,EACd,IAAI,GAAE,qBAA0B,GAC/B,YAAY,CAkCd;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAErD"}

package/dist/profile/lever_profile.js

@@ -0,0 +1,55 @@
+import { assertThreadPoolWithinRerank } from "../retrieval/thread_lifecycle.js";
+export const HOT_SWAPPABLE_LEVERS = [
+    "rerankK",
+    "rerankOnBody",
+    "rerankBodyWindowChars",
+    "queryExpansion",
+    "queryExpansionN",
+    "queryExpansionM",
+    "threadLifecycle",
+    "threadJoin",
+    "threadDemote",
+    "threadPoolK",
+    "threadMaxGroup",
+    "allowThreadPoolWiderThanRerank",
+];
+export const INDEX_TIME_LEVERS = ["rrf", "excludeNamespaces", "tenantId"];
+export class LeverProfileError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "LeverProfileError";
+    }
+}
+export function normalizeLeverProfile(input, opts = {}) {
+    if (input === null || typeof input !== "object" || Array.isArray(input)) {
+        throw new LeverProfileError(`lever profile must be an object, got ${Array.isArray(input) ? "array" : String(input === null ? "null" : typeof input)}`);
+    }
+    const raw = input;
+    const allowed = new Set(HOT_SWAPPABLE_LEVERS);
+    const indexTime = new Set(INDEX_TIME_LEVERS);
+    for (const key of Object.keys(raw)) {
+        if (raw[key] === undefined)
+            continue;
+        if (indexTime.has(key)) {
+            throw new LeverProfileError(`\`${key}\` is an INDEX-TIME lever and cannot be hot-swapped: it is consumed while building ` +
+                `the index, so setting it in a per-agent or per-task profile would have no effect and no ` +
+                `error. Change it by re-opening the session (vectors are loaded from the store, not ` +
+                `re-embedded). Hot-swappable levers: ${HOT_SWAPPABLE_LEVERS.join(", ")}.`);
+        }
+        if (!allowed.has(key)) {
+            throw new LeverProfileError(`unknown lever \`${key}\`. Refused rather than ignored, because an ignored key is a lever ` +
+                `that silently never applies. Hot-swappable levers: ${HOT_SWAPPABLE_LEVERS.join(", ")}.`);
+        }
+    }
+    assertThreadPoolWithinRerank({
+        rerankK: raw["rerankK"],
+        threadPoolK: raw["threadPoolK"],
+        hasReranker: opts.hasReranker ?? true,
+        allowWider: raw["allowThreadPoolWiderThanRerank"] === true,
+    });
+    return raw;
+}
+export function isHotSwappable(lever) {
+    return HOT_SWAPPABLE_LEVERS.includes(lever);
+}
+//# sourceMappingURL=lever_profile.js.map

package/dist/profile/lever_profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lever_profile.js","sourceRoot":"","sources":["../../src/profile/lever_profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAGhF,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,SAAS;IACT,cAAc;IACd,uBAAuB;IACvB,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,YAAY;IACZ,cAAc;IACd,aAAa;IACb,gBAAgB;IAChB,gCAAgC;CACxB,CAAC;AAEX,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,mBAAmB,EAAE,UAAU,CAAU,CAAC;AAuBnF,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAc,EACd,OAA8B,EAAE;IAEhC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,iBAAiB,CAAC,wCAAwC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC;IACzJ,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,oBAAoB,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,iBAAiB,CAAC,CAAC;IAErD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,SAAS;QACrC,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,iBAAiB,CACzB,KAAK,GAAG,qFAAqF;gBAC3F,0FAA0F;gBAC1F,qFAAqF;gBACrF,uCAAuC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC5E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,iBAAiB,CACzB,mBAAmB,GAAG,qEAAqE;gBACzF,sDAAsD,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4BAA4B,CAAC;QAC3B,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC;QACvB,WAAW,EAAE,GAAG,CAAC,aAAa,CAAC;QAC/B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACrC,UAAU,EAAE,GAAG,CAAC,gCAAgC,CAAC,KAAK,IAAI;KAC3D,CAAC,CAAC;IAEH,OAAO,GAAmB,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAQ,oBAA0C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC"}

package/dist/profile/production.d.ts

@@ -0,0 +1,12 @@
+import type { Reranker } from "../rerank/types.js";
+import type { OpenMemorySessionOptions } from "../session/index.js";
+export interface ProductionProfile {
+    readonly rerankK: number;
+    readonly topK: number;
+    readonly relevanceFloor: number;
+}
+export declare const PRODUCTION_PROFILE: ProductionProfile;
+export declare function productionSessionOptions(overrides?: {
+    readonly reranker?: Reranker;
+}): Pick<OpenMemorySessionOptions, "reranker" | "rerankK">;
+//# sourceMappingURL=production.d.ts.map

package/dist/profile/production.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"production.d.ts","sourceRoot":"","sources":["../../src/profile/production.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAEpE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,eAAO,MAAM,kBAAkB,EAAE,iBAIhC,CAAC;AAEF,wBAAgB,wBAAwB,CACtC,SAAS,GAAE;IAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAA;CAAO,GAC/C,IAAI,CAAC,wBAAwB,EAAE,UAAU,GAAG,SAAS,CAAC,CAKxD"}

package/dist/profile/production.js

@@ -0,0 +1,13 @@
+import { CrossEncoderReranker } from "../rerank/index.js";
+export const PRODUCTION_PROFILE = {
+    rerankK: 30,
+    topK: 10,
+    relevanceFloor: -9,
+};
+export function productionSessionOptions(overrides = {}) {
+    return {
+        reranker: overrides.reranker ?? new CrossEncoderReranker(),
+        rerankK: PRODUCTION_PROFILE.rerankK,
+    };
+}
+//# sourceMappingURL=production.js.map

package/dist/profile/production.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"production.js","sourceRoot":"","sources":["../../src/profile/production.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAU1D,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,OAAO,EAAE,EAAE;IACX,IAAI,EAAE,EAAE;IACR,cAAc,EAAE,CAAC,CAAC;CACnB,CAAC;AAEF,MAAM,UAAU,wBAAwB,CACtC,YAA8C,EAAE;IAEhD,OAAO;QACL,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,IAAI,oBAAoB,EAAE;QAC1D,OAAO,EAAE,kBAAkB,CAAC,OAAO;KACpC,CAAC;AACJ,CAAC"}

package/dist/provenance/build_fingerprint.d.ts

@@ -0,0 +1,9 @@
+export declare function sourceFilesUnder(dir: string, filter?: (p: string) => boolean): string[];
+export declare function fingerprintSources(files: readonly string[]): string;
+export interface BuildMismatch {
+    readonly running: string;
+    readonly onDisk: string;
+    readonly message: string;
+}
+export declare function compareBuild(running: string | undefined, onDisk: string): BuildMismatch | undefined;
+//# sourceMappingURL=build_fingerprint.d.ts.map

package/dist/provenance/build_fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build_fingerprint.d.ts","sourceRoot":"","sources":["../../src/provenance/build_fingerprint.ts"],"names":[],"mappings":"AAIA,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAkC,GAAG,MAAM,EAAE,CAajH;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAanE;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAUnG"}