@sema-ai/core 1.275.1

package/dist/stores/file/memory-store.d.ts

@@ -0,0 +1,95 @@
+import { type Embedder, type MemoryNoteHeader, type MemoryNoteRecord, type MemoryStore, type MemoryVectorMode, type ScoredMemory, type StructuredNoteInput } from "../../core/memory.js";
+export declare class FileMemoryStore implements MemoryStore {
+    private readonly root;
+    private readonly tmpDir;
+    /** Optional injected embedder (design/81 Slice 5). When present, note bodies are embedded (in the background,
+     *  after the durable note write) into a rebuildable sidecar index and `searchScored` ranks by cosine distance
+     *  (portable / in-process, mirrors PgMemoryStore's jsonb mode). Absent ⇒ lexical, byte-identical to before. */
+    private readonly embedder?;
+    /** ms budget for a background embed; a slower/stuck endpoint yields no vector (row stays lexical), never
+     *  blocking the durable note write (which already completed). */
+    private readonly embedTimeoutMs;
+    /** In-flight background embeds (so tests can flush + `close` can drain). */
+    private readonly pending;
+    private readonly scopes;
+    /** Set by {@link close}: a background embed that resolves AFTER close must NOT writeSync to the (now closed)
+     *  vlog fd — a stray write on a recycled fd could corrupt an unrelated file. */
+    private closed;
+    constructor(root: string, opts?: {
+        embedder?: Embedder;
+        embedTimeoutMs?: number;
+    });
+    /** design/81 Slice 5 rung: `portable` (in-process cosine over the sidecar) when an embedder is injected,
+     *  else `lexical`. File never reaches `native` (no backend index). */
+    get vectorMode(): MemoryVectorMode;
+    /** True when an embedder was injected. Exposed so a consumer/test can confirm it was accepted. */
+    get hasEmbedder(): boolean;
+    /** Await all in-flight background embeds (tests / `close`). */
+    flushEmbeds(): Promise<void>;
+    /** Open (replay) a scope's notes + sidecar vectors once and cache it. */
+    private scopeState;
+    /** Queue a background embed of `body` → sidecar vector for `id` (best-effort, timeout-bounded, non-blocking).
+     *  Only when an embedder is injected; a failure/timeout leaves the row lexical (fail-open). The durable note
+     *  write has ALREADY happened before this is called, so this never gates durability. */
+    private queueEmbed;
+    /** Rewrite the derived `MEMORY.md` projection atomically (CC markdown parity). */
+    private writeProjection;
+    read(scope: string): string | null;
+    append(scope: string, note: string): string | void;
+    appendStructured(scope: string, note: StructuredNoteInput): string;
+    /** Append + fsync the note event BEFORE updating the in-memory list, then refresh the projection. */
+    private commit;
+    clear(scope: string): void;
+    /** design/84 Seam B: read the cached periodic-consolidation cursor (replayed from the last `op:cursor`). */
+    getConsolidationCursor(scope: string): string | undefined;
+    /** design/84 Seam B: persist the periodic-consolidation cursor via a durable `op:cursor` append-log event,
+     *  then update the cached state (durable FIRST, like `commit`). */
+    setConsolidationCursor(scope: string, cursor: string): void;
+    /**
+     * Keyword search backing the `recall` tool. design/81 Slice 2b — uses the SHARED synonym/stem-aware
+     * {@link import("../../core/memory.js").lexicalSearchMatch} (the SAME matcher as
+     * {@link import("../../core/memory.js").InMemoryMemoryStore.search}, ZERO model/native/embedder dep) so
+     * "auth token" matches a note saying "credentials" / "bearer", and the `recall` tool returns IDENTICAL
+     * results across the File and InMemory backends. A bullet matches a query term iff it contains ANY of that
+     * term's expansions, and must match EVERY query term (AND across terms, OR within a term's synonyms). With
+     * no synonym/stem hit this is byte-identical to the plain substring filter.
+     */
+    search(scope: string, query: string, limit?: number): string[];
+    /** Manifest (design/65 §2.2): a header per note, body excluded — in-memory parity. */
+    listStructuredNotes(scope: string): MemoryNoteHeader[];
+    getByIds(scope: string, ids: string[]): MemoryNoteRecord[];
+    /**
+     * Id-addressable similarity retrieval (design/81 Slice 2 — the consolidation candidate source). The
+     * `score` is a cosine **DISTANCE** ∈ [0,2], **0 = identical** ({@link ScoredMemory} contract): it is the
+     * lexical `1 - Jaccard(terms)` ∈ [0,1] ⊂ [0,2] stand-in (byte-identical to
+     * {@link InMemoryMemoryStore.searchScored} / the lexical {@link import("../pg.js").PgMemoryStore} fallback),
+     * so the `{0.05, 0.3}` consolidation band needs no retune. An injected embedder is ACCEPTED but vector
+     * ranking is the DEFERRED Slice 5 — so this method ALWAYS uses the lexical distance for now (an injected
+     * embedder is harmless, NOT a throw). Excludes the query's own id (a note must not self-match — see below)
+     * and zero-overlap entries; returns the `limit` nearest, ascending by distance.
+     *
+     * **Self-id exclusion:** byte-identical to {@link InMemoryMemoryStore.searchScored} / the lexical
+     * {@link import("../pg.js").PgMemoryStore} fallback, the SOLE consumer (consolidation) excludes the
+     * query note's own id (and its sibling this-task ids) by filtering the returned `ScoredMemory[]` on its
+     * `thisTaskIds` set — keeping the store's ranking pure and the cross-backend contract identical.
+     */
+    searchScored(scope: string, query: string, limit?: number): ScoredMemory[] | Promise<ScoredMemory[]>;
+    /**
+     * Consolidation UPDATE (design/81 Slice 2): replace a note's body by id, keeping the id stable. Appends a
+     * durable `update` event FIRST, then mutates the in-memory replay + refreshes the projection — same
+     * durable-before-visible order as {@link commit}. An auto-derived description is re-derived from the new
+     * body (so the manifest doesn't drift); an explicit one is preserved (design/65 [79], in-memory parity).
+     * Unknown id → no-op (defensive). NB: no `sanitizeUntrustedText` here — the fence lives at the
+     * inlets/recall, NOT in `update` (design/81 §1; in-memory `update` only trims).
+     */
+    update(scope: string, id: string, text: string): void;
+    /**
+     * Consolidation DELETE (design/81 Slice 2): remove a note by id (id never reused afterward). Appends a
+     * durable `delete` tombstone FIRST, then drops it from the in-memory replay + refreshes the projection.
+     * Unknown id → no-op.
+     */
+    delete(scope: string, id: string): void;
+    /** Release all open scope handles (best-effort). */
+    close(): void;
+}
+//# sourceMappingURL=memory-store.d.ts.map

package/dist/stores/file/memory-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-store.d.ts","sourceRoot":"","sources":["../../../src/stores/file/memory-store.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACzB,MAAM,sBAAsB,CAAC;AA8F9B,qBAAa,eAAgB,YAAW,WAAW;IACjD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC;;mHAE+G;IAC/G,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAW;IACrC;qEACiE;IACjE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,4EAA4E;IAC5E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4B;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;IACxD;oFACgF;IAChF,OAAO,CAAC,MAAM,CAAS;gBAEX,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAO;IAQrF;0EACsE;IACtE,IAAI,UAAU,IAAI,gBAAgB,CAEjC;IAED,kGAAkG;IAClG,IAAI,WAAW,IAAI,OAAO,CAEzB;IAED,+DAA+D;IACzD,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAIlC,yEAAyE;IACzE,OAAO,CAAC,UAAU;IA4DlB;;4FAEwF;IACxF,OAAO,CAAC,UAAU;IA2BlB,kFAAkF;IAClF,OAAO,CAAC,eAAe;IAKvB,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAMlC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAQlD,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,MAAM;IAiBlE,qGAAqG;IACrG,OAAO,CAAC,MAAM;IAQd,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAS1B,4GAA4G;IAC5G,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIzD;uEACmE;IACnE,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAM3D;;;;;;;;OAQG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,MAAM,EAAE;IAU1D,sFAAsF;IACtF,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,EAAE;IAYtD,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,gBAAgB,EAAE;IAgB1D;;;;;;;;;;;;;;OAcG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAmBhG;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAuBrD;;;;OAIG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI;IASvC,oDAAoD;IACpD,KAAK,IAAI,IAAI;CAOd"}

package/dist/stores/file/memory-store.js

@@ -0,0 +1,393 @@
+import { join } from "node:path";
+import { uuidv7 } from "../../internal/harness.js";
+import { firstSentence, lexicalSearchMatch, } from "../../core/memory.js";
+import { cosineDistance, jaccardDistance, termSet } from "../../core/memory-vector.js";
+import { AppendLog, atomicWriteFile, ensureDir, readJsonlRecords, sanitizeScope, } from "./fs-atomic.js";
+export class FileMemoryStore {
+    root;
+    tmpDir;
+    /** Optional injected embedder (design/81 Slice 5). When present, note bodies are embedded (in the background,
+     *  after the durable note write) into a rebuildable sidecar index and `searchScored` ranks by cosine distance
+     *  (portable / in-process, mirrors PgMemoryStore's jsonb mode). Absent ⇒ lexical, byte-identical to before. */
+    embedder;
+    /** ms budget for a background embed; a slower/stuck endpoint yields no vector (row stays lexical), never
+     *  blocking the durable note write (which already completed). */
+    embedTimeoutMs;
+    /** In-flight background embeds (so tests can flush + `close` can drain). */
+    pending = new Set();
+    scopes = new Map();
+    /** Set by {@link close}: a background embed that resolves AFTER close must NOT writeSync to the (now closed)
+     *  vlog fd — a stray write on a recycled fd could corrupt an unrelated file. */
+    closed = false;
+    constructor(root, opts = {}) {
+        this.root = join(root, "memory");
+        this.tmpDir = join(root, "tmp");
+        this.embedder = opts.embedder;
+        this.embedTimeoutMs = Math.max(0, opts.embedTimeoutMs ?? 10_000);
+        ensureDir(this.root);
+    }
+    /** design/81 Slice 5 rung: `portable` (in-process cosine over the sidecar) when an embedder is injected,
+     *  else `lexical`. File never reaches `native` (no backend index). */
+    get vectorMode() {
+        return this.embedder ? "portable" : "lexical";
+    }
+    /** True when an embedder was injected. Exposed so a consumer/test can confirm it was accepted. */
+    get hasEmbedder() {
+        return this.embedder !== undefined;
+    }
+    /** Await all in-flight background embeds (tests / `close`). */
+    async flushEmbeds() {
+        await Promise.all([...this.pending]);
+    }
+    /** Open (replay) a scope's notes + sidecar vectors once and cache it. */
+    scopeState(scope) {
+        const existing = this.scopes.get(scope);
+        if (existing)
+            return existing;
+        const dir = join(this.root, sanitizeScope(scope));
+        ensureDir(dir);
+        const notesPath = join(dir, "notes.jsonl");
+        // Replay the log into the authoritative entry list. design/81 Slice 1 — DEFENSIVE per-op switch with an
+        // explicit unknown-op SKIP (NOT a fallthrough `else push`): an OLD binary replaying a NEW log (or vice
+        // versa) hits the `default` and leaves state untouched instead of pushing `undefined`. (The parse layer,
+        // `readJsonlRecords`, already drops unparseable lines; the hazard guarded here is the SEMANTIC replay of
+        // a well-formed event whose `op` this binary doesn't understand.)
+        const entries = [];
+        let cursor;
+        for (const ev of readJsonlRecords(notesPath)) {
+            switch (ev.op) {
+                case "append":
+                    entries.push(ev.entry);
+                    break;
+                case "clear":
+                    entries.length = 0;
+                    cursor = undefined; // design/84 Seam B: a cleared scope is logically fresh — reset its cursor
+                    break;
+                case "cursor":
+                    cursor = ev.cursor; // design/84 Seam B: last-writer-wins high-water mark
+                    break;
+                case "update": {
+                    const target = entries.find((e) => e.id === ev.id);
+                    if (target) {
+                        target.text = ev.text;
+                        target.ts = ev.ts;
+                        if (ev.description !== undefined)
+                            target.description = ev.description;
+                    }
+                    break;
+                }
+                case "delete": {
+                    const i = entries.findIndex((e) => e.id === ev.id);
+                    if (i !== -1)
+                        entries.splice(i, 1);
+                    break;
+                }
+                default:
+                    // Forward-compat guard: an unknown op (written by a newer binary) is SKIPPED, never applied.
+                    break;
+            }
+        }
+        // Slice 5 sidecar: replay the derived vector index (last-writer-wins by id). Missing/corrupt is harmless —
+        // rows without a vector fall open to the lexical distance in searchScored.
+        const vectors = new Map();
+        const vpath = join(dir, "vectors.jsonl");
+        for (const ve of readJsonlRecords(vpath)) {
+            // A pre-stamp (legacy) line lacks `h` → replay as "" so its freshness check never matches a real body hash
+            // → it fails open to the lexical distance (never scores current text with an unverifiable vector).
+            if (ve && typeof ve.id === "string" && Array.isArray(ve.embedding)) {
+                vectors.set(ve.id, { embedding: ve.embedding, h: typeof ve.h === "string" ? ve.h : "" });
+            }
+        }
+        const state = { entries, log: new AppendLog(notesPath), dir, cursor, vectors, vlog: new AppendLog(vpath) };
+        this.scopes.set(scope, state);
+        return state;
+    }
+    /** Queue a background embed of `body` → sidecar vector for `id` (best-effort, timeout-bounded, non-blocking).
+     *  Only when an embedder is injected; a failure/timeout leaves the row lexical (fail-open). The durable note
+     *  write has ALREADY happened before this is called, so this never gates durability. */
+    queueEmbed(state, id, body) {
+        const emb = this.embedder;
+        if (!emb)
+            return;
+        const h = hashBody(body); // stamp: the identity of the body we're embedding (the freshness key)
+        const job = Promise.race([
+            // Wrap the embed in a microtask so a SYNCHRONOUSLY-throwing embedder (a non-async impl that validates
+            // before returning its promise) becomes a rejection the `.catch` below swallows — never an escape that
+            // would throw out of the already-durable commit/update (which called us AFTER its fsync).
+            Promise.resolve().then(() => emb.embed(body)),
+            new Promise((r) => setTimeout(() => r(null), this.embedTimeoutMs).unref?.()),
+        ])
+            .then((vec) => {
+            if (this.closed)
+                return; // store closed mid-embed → never writeSync to a closed/recycled fd
+            if (!Array.isArray(vec) || vec.length !== emb.dimensions)
+                return; // no/bad vector → row stays lexical
+            // Freshness guard: persist ONLY if the entry STILL holds the body we embedded. Drops a late/out-of-order
+            // embed of a since-superseded body (append-then-quick-update, or update-then-update completing out of
+            // order) so the CURRENT body's vector wins; a since-deleted entry drops too. Closes the stale-vector race.
+            const cur = state.entries.find((e) => e.id === id);
+            if (!cur || hashBody(cur.text) !== h)
+                return;
+            state.vlog.append({ id, embedding: vec, h }, false); // derived cache — no fsync needed
+            state.vectors.set(id, { embedding: vec, h });
+        })
+            .catch(() => { }); // embed failed → row stays lexical
+        this.pending.add(job);
+        void job.finally(() => this.pending.delete(job));
+    }
+    /** Rewrite the derived `MEMORY.md` projection atomically (CC markdown parity). */
+    writeProjection(state) {
+        const body = state.entries.map(renderBullet).join("\n");
+        atomicWriteFile(this.tmpDir, join(state.dir, "MEMORY.md"), body ? `${body}\n` : "");
+    }
+    read(scope) {
+        const { entries } = this.scopeState(scope);
+        if (entries.length === 0)
+            return null;
+        return entries.map(renderBullet).join("\n");
+    }
+    append(scope, note) {
+        const text = note.trim().replace(/^#+\s*/, ""); // strip a leading "# " quick-add marker
+        if (!text)
+            return;
+        const entry = { id: uuidv7(), text, ts: nowTs() };
+        this.commit(scope, entry);
+        return entry.id;
+    }
+    appendStructured(scope, note) {
+        const body = note.body.trim().replace(/^#+\s*/, "");
+        if (!body)
+            return ""; // nothing to store (mirrors the in-memory empty guard)
+        const entry = {
+            id: uuidv7(),
+            text: body,
+            ts: nowTs(),
+            name: note.name,
+            type: note.type ?? "project", // default type (design/65 §2.1)
+            description: note.description?.trim() || firstSentence(body), // derived at write time (§8#6)
+            links: note.links,
+            ...(note.consolidationGenerated ? { consolidationGenerated: true } : {}), // design/84 Seam B marker
+        };
+        this.commit(scope, entry);
+        return entry.id;
+    }
+    /** Append + fsync the note event BEFORE updating the in-memory list, then refresh the projection. */
+    commit(scope, entry) {
+        const state = this.scopeState(scope);
+        state.log.append({ op: "append", entry }, true); // durable FIRST
+        state.entries.push(entry);
+        this.writeProjection(state);
+        this.queueEmbed(state, entry.id, entry.text); // Slice 5: background embed → sidecar (AFTER the durable write)
+    }
+    clear(scope) {
+        const state = this.scopeState(scope);
+        state.log.append({ op: "clear" }, true);
+        state.entries.length = 0;
+        state.cursor = undefined; // design/84 Seam B: reset the periodic-consolidation cursor on a cleared scope
+        state.vectors.clear(); // Slice 5: cleared scope has no vectors (sidecar file orphans are harmless — never looked up)
+        this.writeProjection(state);
+    }
+    /** design/84 Seam B: read the cached periodic-consolidation cursor (replayed from the last `op:cursor`). */
+    getConsolidationCursor(scope) {
+        return this.scopeState(scope).cursor;
+    }
+    /** design/84 Seam B: persist the periodic-consolidation cursor via a durable `op:cursor` append-log event,
+     *  then update the cached state (durable FIRST, like `commit`). */
+    setConsolidationCursor(scope, cursor) {
+        const state = this.scopeState(scope);
+        state.log.append({ op: "cursor", cursor }, true); // durable FIRST
+        state.cursor = cursor;
+    }
+    /**
+     * Keyword search backing the `recall` tool. design/81 Slice 2b — uses the SHARED synonym/stem-aware
+     * {@link import("../../core/memory.js").lexicalSearchMatch} (the SAME matcher as
+     * {@link import("../../core/memory.js").InMemoryMemoryStore.search}, ZERO model/native/embedder dep) so
+     * "auth token" matches a note saying "credentials" / "bearer", and the `recall` tool returns IDENTICAL
+     * results across the File and InMemory backends. A bullet matches a query term iff it contains ANY of that
+     * term's expansions, and must match EVERY query term (AND across terms, OR within a term's synonyms). With
+     * no synonym/stem hit this is byte-identical to the plain substring filter.
+     */
+    search(scope, query, limit = 10) {
+        const { entries } = this.scopeState(scope);
+        if (entries.length === 0)
+            return [];
+        if (query.trim() === "")
+            return [];
+        return entries
+            .map(renderBullet)
+            .filter((b) => lexicalSearchMatch(query, b))
+            .slice(-limit);
+    }
+    /** Manifest (design/65 §2.2): a header per note, body excluded — in-memory parity. */
+    listStructuredNotes(scope) {
+        const { entries } = this.scopeState(scope);
+        return entries.map((e) => ({
+            id: e.id,
+            description: e.description ?? firstSentence(e.text),
+            mtimeMs: mtimeMsOf(e.ts),
+            ...(e.name ? { name: e.name } : {}),
+            ...(e.type ? { type: e.type } : {}),
+            ...(e.consolidationGenerated ? { consolidationGenerated: true } : {}),
+        }));
+    }
+    getByIds(scope, ids) {
+        const { entries } = this.scopeState(scope);
+        const want = new Set(ids);
+        return entries
+            .filter((e) => want.has(e.id))
+            .map((e) => ({
+            id: e.id,
+            text: e.text,
+            description: e.description ?? firstSentence(e.text),
+            mtimeMs: mtimeMsOf(e.ts),
+            ...(e.name ? { name: e.name } : {}),
+            ...(e.type ? { type: e.type } : {}),
+            ...(e.consolidationGenerated ? { consolidationGenerated: true } : {}),
+        }));
+    }
+    /**
+     * Id-addressable similarity retrieval (design/81 Slice 2 — the consolidation candidate source). The
+     * `score` is a cosine **DISTANCE** ∈ [0,2], **0 = identical** ({@link ScoredMemory} contract): it is the
+     * lexical `1 - Jaccard(terms)` ∈ [0,1] ⊂ [0,2] stand-in (byte-identical to
+     * {@link InMemoryMemoryStore.searchScored} / the lexical {@link import("../pg.js").PgMemoryStore} fallback),
+     * so the `{0.05, 0.3}` consolidation band needs no retune. An injected embedder is ACCEPTED but vector
+     * ranking is the DEFERRED Slice 5 — so this method ALWAYS uses the lexical distance for now (an injected
+     * embedder is harmless, NOT a throw). Excludes the query's own id (a note must not self-match — see below)
+     * and zero-overlap entries; returns the `limit` nearest, ascending by distance.
+     *
+     * **Self-id exclusion:** byte-identical to {@link InMemoryMemoryStore.searchScored} / the lexical
+     * {@link import("../pg.js").PgMemoryStore} fallback, the SOLE consumer (consolidation) excludes the
+     * query note's own id (and its sibling this-task ids) by filtering the returned `ScoredMemory[]` on its
+     * `thisTaskIds` set — keeping the store's ranking pure and the cross-backend contract identical.
+     */
+    searchScored(scope, query, limit = 20) {
+        const state = this.scopeState(scope);
+        if (state.entries.length === 0)
+            return [];
+        // No embedder → lexical, BYTE-IDENTICAL to the pre-Slice-5 floor (sync return). This early-return is the
+        // constructive guarantee that a default (no-embedder) deployment is unchanged.
+        if (!this.embedder)
+            return lexicalScored(state.entries, query, limit);
+        // Portable vector ranking (mirrors PgMemoryStore's jsonb mode): embed the query, then per-row cosine over
+        // the sidecar vector (dim-matched) or lexical fail-open (no/mismatched vector). Query-embed failure/timeout
+        // → whole search falls back to lexical (never throws, consolidation stays alive).
+        const emb = this.embedder;
+        return Promise.race([
+            Promise.resolve().then(() => emb.embed(query)), // sync-throw guard (see queueEmbed) → falls open to lexical
+            new Promise((r) => setTimeout(() => r(null), this.embedTimeoutMs).unref?.()),
+        ]).then((qv) => (Array.isArray(qv) && qv.length === emb.dimensions ? vectorScored(state, qv, query, emb.dimensions, limit) : lexicalScored(state.entries, query, limit)), () => lexicalScored(state.entries, query, limit));
+    }
+    /**
+     * Consolidation UPDATE (design/81 Slice 2): replace a note's body by id, keeping the id stable. Appends a
+     * durable `update` event FIRST, then mutates the in-memory replay + refreshes the projection — same
+     * durable-before-visible order as {@link commit}. An auto-derived description is re-derived from the new
+     * body (so the manifest doesn't drift); an explicit one is preserved (design/65 [79], in-memory parity).
+     * Unknown id → no-op (defensive). NB: no `sanitizeUntrustedText` here — the fence lives at the
+     * inlets/recall, NOT in `update` (design/81 §1; in-memory `update` only trims).
+     */
+    update(scope, id, text) {
+        const clean = text.trim();
+        if (!clean)
+            return;
+        const state = this.scopeState(scope);
+        const entry = state.entries.find((e) => e.id === id);
+        if (!entry)
+            return; // unknown id → no-op (mirrors the in-memory store)
+        const newBody = clean.replace(/^#+\s*/, "");
+        const newDesc = entry.description !== undefined && entry.description === firstSentence(entry.text)
+            ? firstSentence(newBody)
+            : entry.description;
+        const ts = nowTs();
+        const ev = { op: "update", id, text: newBody, ts };
+        if (newDesc !== undefined)
+            ev.description = newDesc;
+        state.log.append(ev, true); // durable FIRST
+        entry.text = newBody;
+        entry.ts = ts;
+        entry.description = newDesc;
+        this.writeProjection(state);
+        state.vectors.delete(id); // invalidate the old vector immediately (the re-embed below re-stamps it fresh)
+        this.queueEmbed(state, id, newBody); // Slice 5: re-embed the updated body → sidecar (freshness-stamped)
+    }
+    /**
+     * Consolidation DELETE (design/81 Slice 2): remove a note by id (id never reused afterward). Appends a
+     * durable `delete` tombstone FIRST, then drops it from the in-memory replay + refreshes the projection.
+     * Unknown id → no-op.
+     */
+    delete(scope, id) {
+        const state = this.scopeState(scope);
+        const i = state.entries.findIndex((e) => e.id === id);
+        if (i === -1)
+            return; // unknown id → no-op
+        state.log.append({ op: "delete", id }, true); // durable FIRST
+        state.entries.splice(i, 1);
+        this.writeProjection(state);
+    }
+    /** Release all open scope handles (best-effort). */
+    close() {
+        this.closed = true; // a still-in-flight background embed must not writeSync to a closed fd (fd-recycle guard)
+        for (const s of this.scopes.values()) {
+            s.log.close();
+            s.vlog.close();
+        }
+    }
+}
+/** Render a stored entry as the timestamped bullet used in `read`/`search` output (in-memory parity). */
+function renderBullet(e) {
+    return `- (${e.ts} UTC) ${e.text}`;
+}
+/** Lexical `1 - Jaccard` scoring — the no-embedder floor (byte-identical to the pre-Slice-5 path + the shared
+ *  {@link jaccardDistance}). Also the per-search fallback when a query embed fails. */
+function lexicalScored(entries, query, limit) {
+    const q = termSet(query);
+    if (q.size === 0)
+        return [];
+    const scored = [];
+    for (const e of entries) {
+        const d = jaccardDistance(q, e.text);
+        if (d === null)
+            continue; // no lexical overlap → not a candidate
+        scored.push({ id: e.id, text: e.text, score: d, ...(e.consolidationGenerated ? { consolidationGenerated: true } : {}) });
+    }
+    scored.sort((a, b) => a.score - b.score);
+    return scored.slice(0, limit);
+}
+/** Portable vector scoring: cosine over the sidecar vector for a dim-matched row, else lexical fail-open for
+ *  that row (a not-yet/failed-to-embed or legacy row stays a candidate, mirrors PgMemoryStore's jsonb branch). */
+function vectorScored(state, qv, query, dims, limit) {
+    const qTerms = termSet(query); // for the per-row lexical fallback
+    const scored = [];
+    for (const e of state.entries) {
+        const ev = state.vectors.get(e.id);
+        // Use the stored vector ONLY when it is dim-matched AND its stamp matches the entry's CURRENT body — a stale
+        // vector (its body was updated, or its re-embed failed/timed-out/crashed) fails OPEN to the lexical distance
+        // (the documented guarantee) instead of scoring current text with an outdated vector.
+        const usable = ev && ev.embedding.length === dims && ev.h === hashBody(e.text);
+        const score = usable ? cosineDistance(qv, ev.embedding) : jaccardDistance(qTerms, e.text);
+        if (score === null)
+            continue;
+        scored.push({ id: e.id, text: e.text, score, ...(e.consolidationGenerated ? { consolidationGenerated: true } : {}) });
+    }
+    scored.sort((a, b) => a.score - b.score);
+    return scored.slice(0, limit);
+}
+/** FNV-1a 32-bit hash (hex) of a note body — the sidecar vector's freshness stamp. Non-crypto: a collision only
+ *  means a stale vector is momentarily trusted (bounded by the consolidation band gate), never corruption. */
+function hashBody(s) {
+    let h = 0x811c9dc5;
+    for (let i = 0; i < s.length; i++) {
+        h ^= s.charCodeAt(i);
+        h = Math.imul(h, 0x01000193);
+    }
+    return (h >>> 0).toString(16);
+}
+/** "YYYY-MM-DD HH:MM" (UTC) — the bullet-timestamp format shared with the in-memory store. */
+function nowTs() {
+    return new Date().toISOString().replace("T", " ").slice(0, 16);
+}
+/** Parse a "YYYY-MM-DD HH:MM" (UTC) timestamp to ms; 0 if unparseable (mirrors the in-memory store). */
+function mtimeMsOf(ts) {
+    const ms = Date.parse(`${ts.replace(" ", "T")}:00Z`);
+    return Number.isFinite(ms) ? ms : 0;
+}
+//# sourceMappingURL=memory-store.js.map

package/dist/stores/file/memory-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-store.js","sourceRoot":"","sources":["../../../src/stores/file/memory-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACnD,OAAO,EACL,aAAa,EACb,kBAAkB,GAQnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACvF,OAAO,EACL,SAAS,EACT,eAAe,EACf,SAAS,EACT,gBAAgB,EAChB,aAAa,GACd,MAAM,gBAAgB,CAAC;AAsFxB,MAAM,OAAO,eAAe;IACT,IAAI,CAAS;IACb,MAAM,CAAS;IAChC;;mHAE+G;IAC9F,QAAQ,CAAY;IACrC;qEACiE;IAChD,cAAc,CAAS;IACxC,4EAA4E;IAC3D,OAAO,GAAG,IAAI,GAAG,EAAiB,CAAC;IACnC,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IACxD;oFACgF;IACxE,MAAM,GAAG,KAAK,CAAC;IAEvB,YAAY,IAAY,EAAE,OAAyD,EAAE;QACnF,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,CAAC;QACjE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IAED;0EACsE;IACtE,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAChD,CAAC;IAED,kGAAkG;IAClG,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC;IACrC,CAAC;IAED,+DAA+D;IAC/D,KAAK,CAAC,WAAW;QACf,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,yEAAyE;IACjE,UAAU,CAAC,KAAa;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;QAClD,SAAS,CAAC,GAAG,CAAC,CAAC;QACf,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAC3C,wGAAwG;QACxG,uGAAuG;QACvG,yGAAyG;QACzG,yGAAyG;QACzG,kEAAkE;QAClE,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,IAAI,MAA0B,CAAC;QAC/B,KAAK,MAAM,EAAE,IAAI,gBAAgB,CAAc,SAAS,CAAC,EAAE,CAAC;YAC1D,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;gBACd,KAAK,QAAQ;oBACX,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;oBACvB,MAAM;gBACR,KAAK,OAAO;oBACV,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;oBACnB,MAAM,GAAG,SAAS,CAAC,CAAC,0EAA0E;oBAC9F,MAAM;gBACR,KAAK,QAAQ;oBACX,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,qDAAqD;oBACzE,MAAM;gBACR,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;oBACnD,IAAI,MAAM,EAAE,CAAC;wBACX,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC;wBACtB,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;wBAClB,IAAI,EAAE,CAAC,WAAW,KAAK,SAAS;4BAAE,MAAM,CAAC,WAAW,GAAG,EAAE,CAAC,WAAW,CAAC;oBACxE,CAAC;oBACD,MAAM;gBACR,CAAC;gBACD,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;oBACnD,IAAI,CAAC,KAAK,CAAC,CAAC;wBAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;oBACnC,MAAM;gBACR,CAAC;gBACD;oBACE,6FAA6F;oBAC7F,MAAM;YACV,CAAC;QACH,CAAC;QACD,2GAA2G;QAC3G,2EAA2E;QAC3E,MAAM,OAAO,GAAG,IAAI,GAAG,EAA8C,CAAC;QACtE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QACzC,KAAK,MAAM,EAAE,IAAI,gBAAgB,CAAc,KAAK,CAAC,EAAE,CAAC;YACtD,2GAA2G;YAC3G,mGAAmG;YACnG,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;gBACnE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAe,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,SAAS,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACvH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;4FAEwF;IAChF,UAAU,CAAC,KAAiB,EAAE,EAAU,EAAE,IAAY;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC1B,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,sEAAsE;QAChG,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAkB;YACxC,sGAAsG;YACtG,uGAAuG;YACvG,0FAA0F;YAC1F,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;SACnF,CAAC;aACC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YACZ,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO,CAAC,mEAAmE;YAC5F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,UAAU;gBAAE,OAAO,CAAC,oCAAoC;YACtG,yGAAyG;YACzG,sGAAsG;YACtG,2GAA2G;YAC3G,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YACnD,IAAI,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO;YAC7C,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAwB,EAAE,KAAK,CAAC,CAAC,CAAC,kCAAkC;YAC7G,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,mCAAmC;QACvD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtB,KAAK,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,kFAAkF;IAC1E,eAAe,CAAC,KAA8C;QACpE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,CAAC,KAAa;QAChB,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,IAAY;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,wCAAwC;QACxF,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,MAAM,KAAK,GAAgB,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC1B,OAAO,KAAK,CAAC,EAAE,CAAC;IAClB,CAAC;IAED,gBAAgB,CAAC,KAAa,EAAE,IAAyB;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAC,CAAC,uDAAuD;QAC7E,MAAM,KAAK,GAAgB;YACzB,EAAE,EAAE,MAAM,EAAE;YACZ,IAAI,EAAE,IAAI;YACV,EAAE,EAAE,KAAK,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS,EAAE,gCAAgC;YAC9D,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,+BAA+B;YAC7F,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,0BAA0B;SACrG,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC1B,OAAO,KAAK,CAAC,EAAE,CAAC;IAClB,CAAC;IAED,qGAAqG;IAC7F,MAAM,CAAC,KAAa,EAAE,KAAkB;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAwB,EAAE,IAAI,CAAC,CAAC,CAAC,gBAAgB;QACvF,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,gEAAgE;IAChH,CAAC;IAED,KAAK,CAAC,KAAa;QACjB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAwB,EAAE,IAAI,CAAC,CAAC;QAC9D,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QACzB,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,+EAA+E;QACzG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,8FAA8F;QACrH,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,4GAA4G;IAC5G,sBAAsB,CAAC,KAAa;QAClC,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IACvC,CAAC;IAED;uEACmE;IACnE,sBAAsB,CAAC,KAAa,EAAE,MAAc;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAwB,EAAE,IAAI,CAAC,CAAC,CAAC,gBAAgB;QACxF,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;IACxB,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,KAAa,EAAE,KAAa,EAAE,KAAK,GAAG,EAAE;QAC7C,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QACnC,OAAO,OAAO;aACX,GAAG,CAAC,YAAY,CAAC;aACjB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;aAC3C,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAED,sFAAsF;IACtF,mBAAmB,CAAC,KAAa;QAC/B,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC3C,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzB,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;YACnD,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,CAAC,CAAC,CAAC;IACN,CAAC;IAED,QAAQ,CAAC,KAAa,EAAE,GAAa;QACnC,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,OAAO,OAAO;aACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aAC7B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;YACnD,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,CAAC,CAAC,CAAC;IACR,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,YAAY,CAAC,KAAa,EAAE,KAAa,EAAE,KAAK,GAAG,EAAE;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC1C,yGAAyG;QACzG,+EAA+E;QAC/E,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACtE,0GAA0G;QAC1G,4GAA4G;QAC5G,kFAAkF;QAClF,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC1B,OAAO,OAAO,CAAC,IAAI,CAAkB;YACnC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,4DAA4D;YAC5G,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;SACnF,CAAC,CAAC,IAAI,CACL,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,EAChK,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CACjD,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,KAAa,EAAE,EAAU,EAAE,IAAY;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,mDAAmD;QACvE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC5C,MAAM,OAAO,GACX,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;YAChF,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC;YACxB,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;QACxB,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACnB,MAAM,EAAE,GAAgB,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAChE,IAAI,OAAO,KAAK,SAAS;YAAE,EAAE,CAAC,WAAW,GAAG,OAAO,CAAC;QACpD,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,gBAAgB;QAC5C,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC;QACrB,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC;QACd,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC;QAC5B,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC5B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,gFAAgF;QAC1G,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,mEAAmE;IAC1G,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,KAAa,EAAE,EAAU;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,CAAC,qBAAqB;QAC3C,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAwB,EAAE,IAAI,CAAC,CAAC,CAAC,gBAAgB;QACpF,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,oDAAoD;IACpD,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,0FAA0F;QAC9G,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YACrC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YACd,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;CACF;AAED,yGAAyG;AACzG,SAAS,YAAY,CAAC,CAAc;IAClC,OAAO,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;AACrC,CAAC;AAED;uFACuF;AACvF,SAAS,aAAa,CAAC,OAAsB,EAAE,KAAa,EAAE,KAAa;IACzE,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACzB,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS,CAAC,uCAAuC;QACjE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3H,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AAChC,CAAC;AAED;kHACkH;AAClH,SAAS,YAAY,CAAC,KAAiB,EAAE,EAAY,EAAE,KAAa,EAAE,IAAY,EAAE,KAAa;IAC/F,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,mCAAmC;IAClE,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnC,6GAA6G;QAC7G,6GAA6G;QAC7G,sFAAsF;QACtF,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/E,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,EAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3F,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACxH,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AAChC,CAAC;AAED;8GAC8G;AAC9G,SAAS,QAAQ,CAAC,CAAS;IACzB,IAAI,CAAC,GAAG,UAAU,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,8FAA8F;AAC9F,SAAS,KAAK;IACZ,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,wGAAwG;AACxG,SAAS,SAAS,CAAC,EAAU;IAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC"}

package/dist/stores/file/session-policy-store.d.ts

@@ -0,0 +1,24 @@
+import { type PutRulesOptions, type SessionPermissionRules, type SessionPolicyStore, type SessionRulesRecord, type StoredSessionRules } from "../../core/session-policy-store.js";
+/**
+ * design/99 §E6 — file-backed {@link SessionPolicyStore} for the local (TOC) backend: ONE JSON file per
+ * `(sessionId, principal)`, semantics **byte-for-byte identical to `InMemorySessionPolicyStore`** (the
+ * cross-backend equivalence contract). CAS-rev OCC + tighten-only reuse the SAME pure helpers
+ * (`loosenReasons`/`normalizeRules`/`stripRev`) as core — no re-implemented rule logic that could drift.
+ *
+ * Atomicity: the file backend is single-process (the `FileStorageBackend` boot lock guarantees ONE writer per
+ * data dir), and `getRules`/`putRules` read-check-write SYNCHRONOUSLY (no await between the rev read and the
+ * atomic write), so the read-modify-write is atomic in the one event loop — exactly the InMemory store's premise.
+ * Cross-process CORRECT concurrency is the Pg/TiDB backend's job (a CAS WHERE clause), by design.
+ */
+export declare class FileSessionPolicyStore implements SessionPolicyStore {
+    private readonly dir;
+    constructor(root: string);
+    /** `(sessionId, principal)` → a safe, INJECTIVE filename (sanitizeScope appends the full sha256 of the raw
+     *  composite key, so distinct keys never collide on disk). */
+    private pathFor;
+    private read;
+    getRules(sessionId: string, principal?: string): Promise<StoredSessionRules | null>;
+    putRules(sessionId: string, principal: string | undefined, rules: SessionPermissionRules, opts?: PutRulesOptions): Promise<StoredSessionRules>;
+    listBySession(sessionId: string): Promise<SessionRulesRecord[]>;
+}
+//# sourceMappingURL=session-policy-store.d.ts.map

package/dist/stores/file/session-policy-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-policy-store.d.ts","sourceRoot":"","sources":["../../../src/stores/file/session-policy-store.ts"],"names":[],"mappings":"AAEA,OAAO,EAKL,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACxB,MAAM,oCAAoC,CAAC;AAG5C;;;;;;;;;;GAUG;AACH,qBAAa,sBAAuB,YAAW,kBAAkB;IAC/D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;gBAEjB,IAAI,EAAE,MAAM;IAKxB;kEAC8D;IAC9D,OAAO,CAAC,OAAO;IAKf,OAAO,CAAC,IAAI;IAkCN,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAInF,QAAQ,CACZ,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,KAAK,EAAE,sBAAsB,EAC7B,IAAI,CAAC,EAAE,eAAe,GACrB,OAAO,CAAC,kBAAkB,CAAC;IAwBxB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;CA2BtE"}