@the-40-thieves/obsidian-tc-shared 1.24.0 → 1.26.0

package/dist/config/observability.schema.d.ts

@@ -46,6 +46,31 @@ export declare const PlaneConfigSchema: z.ZodPrefault<z.ZodObject<{
     gatewayTimeoutMs: z.ZodDefault<z.ZodNumber>;
     maxPromptChars: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strip>>;
+/**
+ * THE-934 fix round 4 (1): the SPELLING normalisation every `egress.excludePaths` pattern goes
+ * through before compilation — repeated separators collapse, a leading `/` or `./` is stripped —
+ * so `/Private`, `./Private`, `Private//` and `Private` are one root-anchored pattern. All are
+ * idiomatic gitignore; each previously compiled to a regex anchored on a character no
+ * vault-relative path starts with, so the exclusion matched NOTHING and said so nowhere. Defined
+ * here rather than beside the compiler (server's plane/egress-filter.ts) so the refusal below and
+ * the compiler cannot drift into two dialects — the exact failure this item closes. Deliberately
+ * NOT done: trimming surrounding whitespace (a folder may legitimately carry it) and case folding
+ * (acl.ts's platform-dependent decision, shared with auth.acl.readPaths).
+ */
+export declare function normalizeEgressExcludePattern(pattern: string): string;
+/**
+ * THE-934 fix round 4 (1): a pattern that, once normalised, names NOTHING — empty, "/", "./", or
+ * whitespace only. Refused at config load rather than compiled, because it is a typo that would
+ * sit in the config looking like a configured exclusion while protecting nothing.
+ *
+ * A bare double-star is NOT unusable: it is the exclude-all form, and withholding every note from
+ * every hosted provider is a legitimate fully-local deployment. Refusing it would turn a valid
+ * config into a boot failure.
+ */
+export declare function isUnusableEgressExcludePattern(pattern: string): boolean;
+export declare const EgressConfigSchema: z.ZodPrefault<z.ZodObject<{
+    excludePaths: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>>;
 export declare const PlurConfigSchema: z.ZodObject<{
     endpoint: z.ZodOptional<z.ZodString>;
     apiKey: z.ZodOptional<z.ZodString>;

package/dist/config/observability.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"observability.schema.d.ts","sourceRoot":"","sources":["../../src/config/observability.schema.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;iBA8EpC,CAAC;AAGH,eAAO,MAAM,qBAAqB;;;kBAgBnB,CAAC;AAGhB,eAAO,MAAM,uBAAuB;;;;;;;;kBAoErB,CAAC;AAOhB,eAAO,MAAM,iBAAiB;;;kBAiBf,CAAC;AAWhB,eAAO,MAAM,qBAAqB;;kBAWnB,CAAC;AAgBhB,eAAO,MAAM,iBAAiB;;;;;;kBAuCf,CAAC;AAUhB,eAAO,MAAM,gBAAgB;;;;;;iBAgC3B,CAAC;AAOH,eAAO,MAAM,oBAAoB;;iBAO/B,CAAC;AASH,eAAO,MAAM,oBAAoB;;iBAO/B,CAAC"}
+{"version":3,"file":"observability.schema.d.ts","sourceRoot":"","sources":["../../src/config/observability.schema.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;iBA8EpC,CAAC;AAGH,eAAO,MAAM,qBAAqB;;;kBAgBnB,CAAC;AAGhB,eAAO,MAAM,uBAAuB;;;;;;;;kBAoErB,CAAC;AAOhB,eAAO,MAAM,iBAAiB;;;kBAiBf,CAAC;AAWhB,eAAO,MAAM,qBAAqB;;kBAWnB,CAAC;AAgBhB,eAAO,MAAM,iBAAiB;;;;;;kBAuCf,CAAC;AAUhB;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAIrE;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAOvE;AAED,eAAO,MAAM,kBAAkB;;kBAchB,CAAC;AAUhB,eAAO,MAAM,gBAAgB;;;;;;iBAgC3B,CAAC;AAOH,eAAO,MAAM,oBAAoB;;iBAO/B,CAAC;AASH,eAAO,MAAM,oBAAoB;;iBAO/B,CAAC"}

package/dist/config/observability.schema.js

@@ -242,6 +242,60 @@ export const PlaneConfigSchema = z
         .describe("Aggregate character cap on a consolidation job's WHOLE gateway request (system prompt + user message). Not a per-item cap: the synthesis job already truncated each chunk to 1000 chars and still built a 169,258-char prompt from 200 of them, which the serving window rejected as ContextWindowExceeded. Sized in characters, not tokens, because no tokenizer is available on this side. The default is conservative on purpose — the model behind a gateway role is swappable at the gateway, and the server does not advertise its max_model_len through the LiteLLM /v1/models passthrough, so this side cannot discover the real ceiling. THE-891 item 7: sized so every vault shape keeps the SAME ~14,554-token output reserve inside a 32768-token window, not just prose-like ones — derived from the worst-case density this job documents (code/CJK, ~2.5 chars/token): (32768 - 14554) x 2.5 = 45535 chars. A prose-dense vault (measured on a real vault at 3.294 chars/token) gets MORE reserve than this, never less. Raise it when the role points at a larger serving window."),
 })
     .prefault({});
+// THE-934 — the egress boundary. `readPaths` (auth-acl.schema.ts) is a whitelist that ALSO governs
+// every caller's read visibility and search enumeration; narrowing it to keep two folders off the
+// ambient plane would mean whitelisting every OTHER folder for every caller, which is a much wider
+// change than the operator asked for (THE-825/#786 already made the plane opt-in for the same
+// privacy reason). `egress.excludePaths` answers a DIFFERENT question — not "what can be read" but
+// "what may leave the machine through the plane" — and is enforced at the point of egress
+// (contradiction judging, synthesis, citation inference, index-time embedding), never at read or
+// search visibility, which stay governed by the ACL exactly as before.
+/**
+ * THE-934 fix round 4 (1): the SPELLING normalisation every `egress.excludePaths` pattern goes
+ * through before compilation — repeated separators collapse, a leading `/` or `./` is stripped —
+ * so `/Private`, `./Private`, `Private//` and `Private` are one root-anchored pattern. All are
+ * idiomatic gitignore; each previously compiled to a regex anchored on a character no
+ * vault-relative path starts with, so the exclusion matched NOTHING and said so nowhere. Defined
+ * here rather than beside the compiler (server's plane/egress-filter.ts) so the refusal below and
+ * the compiler cannot drift into two dialects — the exact failure this item closes. Deliberately
+ * NOT done: trimming surrounding whitespace (a folder may legitimately carry it) and case folding
+ * (acl.ts's platform-dependent decision, shared with auth.acl.readPaths).
+ */
+export function normalizeEgressExcludePattern(pattern) {
+    let p = pattern.replace(/\/{2,}/g, "/");
+    while (p.startsWith("./") || p.startsWith("/"))
+        p = p.startsWith("./") ? p.slice(2) : p.slice(1);
+    return p;
+}
+/**
+ * THE-934 fix round 4 (1): a pattern that, once normalised, names NOTHING — empty, "/", "./", or
+ * whitespace only. Refused at config load rather than compiled, because it is a typo that would
+ * sit in the config looking like a configured exclusion while protecting nothing.
+ *
+ * A bare double-star is NOT unusable: it is the exclude-all form, and withholding every note from
+ * every hosted provider is a legitimate fully-local deployment. Refusing it would turn a valid
+ * config into a boot failure.
+ */
+export function isUnusableEgressExcludePattern(pattern) {
+    if (pattern.trim().length === 0)
+        return true;
+    // Trailing slashes are stripped with a loop, not a regex: CodeQL flags `/\/+$/` as polynomial
+    // on inputs with many repeated slashes, and this runs on operator-supplied config.
+    let p = normalizeEgressExcludePattern(pattern);
+    while (p.endsWith("/"))
+        p = p.slice(0, -1);
+    return p === "";
+}
+export const EgressConfigSchema = z
+    .object({
+    excludePaths: z
+        .array(z.string().refine((p) => !isUnusableEgressExcludePattern(p), {
+        message: 'egress.excludePaths: pattern normalises to nothing ("", "/", "./", or whitespace only), so it would exclude nothing at all. Name a real folder or glob ("Private", "Private/**"), or "**" to withhold the whole vault.',
+    }))
+        .default([])
+        .describe('Gitignore-style glob patterns (vault-relative), compiled with the same glob engine as auth.acl.readPaths, plus a NORMALISATION and a WIDENING that auth.acl.readPaths does not get, because a pattern here that matches nothing protects nothing and says so nowhere. Normalisation: a leading "/" or "./" is stripped and repeated separators collapse, so "/Private", "./Private", "Private" and "Private//" are one and the same root-anchored pattern. Widening: EVERY pattern also matches everything beneath it, so "Private", "Private/", "Private*/" and "Private/*" each withhold that folder\'s whole subtree, not just its direct children; "**/Private" matches a Private folder at ANY depth (root included) and its subtree. Consequences worth stating, both in the safe direction (this is a security control, so an ambiguous pattern excludes too much, never too little): a folder-shaped pattern also matches a FILE of that exact name, so "Private/" or "Private*/" additionally excludes a root note named "Private.md"; a literal pattern naming a specific file ("Private/a.md") still matches only that exact file, never a sibling like "Private/a.md.bak"; and matching stays case- and unicode-sensitive exactly as auth.acl.readPaths is. "**" is the EXCLUDE-ALL form: it withholds every note from every hosted provider, which is a supported fully-local deployment (the plane still runs; nothing vault-derived leaves the machine through it). One spelling is REFUSED at config load rather than compiled: a pattern that normalises to nothing ("", "/", "./", or whitespace only), which would sit in the config looking like a configured exclusion while protecting nothing. Enforced at the PORT, not merely by each caller: every GatewayClient this server constructs (gateway/client.ts\'s createGatewayClient) and every EmbeddingProvider it constructs (embeddings/index.ts\'s createEmbeddingProvider(Async)) refuses a request that does not declare which vault paths its text came from, or that names an excluded one — so a call site that forgets to filter fails loudly instead of leaking, not only the ones that remember to check first. Covers every content-bearing egress leg in the tree: contradiction judging, synthesis, citation inference (both the scheduled job and the citation-infer CLI), index-time embedding (the batched reconcile AND the single-note write path — write_note/append_note/patch_note and the filesystem watcher), reflect and knowledge_challenge\'s gateway calls, the note- and cluster-level summarizers (the `obsidian-tc index`/`cluster` CLI passes), densify-llm\'s semantic-edge extraction, the hosted /rerank passthrough, and the scheduled proactive-advisory sweep\'s candidate embedding. An excluded chunk is still chunked, stored, and text/regex-searchable, but gets no vector, so semantic_search will not surface it. This is the documented COST of exclusion: embeddings are themselves egress (a hosted embedding provider can, in principle, receive text it never sees in plaintext form), so an excluded folder is withheld from embedding too, not only from generative jobs. Best-effort, like every comparable exclusion file in this ecosystem (.gitignore, .cursorignore, .aiignore): a caller with direct filesystem or MCP-tool read access to the vault is unaffected — this is an EGRESS control, not a read-visibility control (see auth.acl.readPaths for that). NOT covered: lexical/regex search over an excluded chunk stays local and searchable by design (the point is withholding it from a model, not hiding it from the vault owner). Paths are re-evaluated on every pass, not baked in once: renaming a folder into or out of the exclusion re-includes or re-excludes it on the very next consolidation pass, reconcile, or write, never retroactively.'),
+})
+    .prefault({});
 // plur read-API proxy config (M5 / THE-181, G2.1 Domain 24). GLOBAL, not per-vault:
 // the plur engram store is global and the plur tools take no `vault` argument, so
 // this lives at the server root. endpoint/apiKey come from config or the

package/dist/config/observability.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"observability.schema.js","sourceRoot":"","sources":["../../src/config/observability.schema.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,2FAA2F;AAC3F,EAAE;AACF,oFAAoF;AACpF,mFAAmF;AACnF,gGAAgG;AAChG,6FAA6F;AAC7F,cAAc;AACd,EAAE;AACF,kFAAkF;AAClF,kFAAkF;AAClF,wFAAwF;AACxF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,sGAAsG;IACtG,sGAAsG;IACtG,gDAAgD;IAChD,IAAI,EAAE,CAAC;SACJ,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,QAAQ,CAAC,6EAA6E,CAAC;QAC1F,OAAO,EAAE,CAAC;aACP,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;aAC9B,QAAQ,CAAC,EAAE,CAAC;aACZ,QAAQ,CACP,iFAAiF,CAClF;KACJ,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;SACZ,QAAQ,CAAC,6BAA6B,CAAC;IAC1C,UAAU,EAAE,CAAC;SACV,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC;QACvF,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,KAAK,CAAC;aACV,OAAO,CAAC,IAAI,CAAC;aACb,QAAQ,CAAC,0CAA0C,CAAC;QACvD,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,OAAO,CAAC,WAAW,CAAC;aACpB,QAAQ,CACP,0FAA0F,CAC3F;KACJ,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;SACZ,QAAQ,CAAC,8BAA8B,CAAC;IAC3C,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,gDAAgD,CAAC;QAC3F,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,QAAQ,CAAC,+EAA+E,CAAC;QAC5F,WAAW,EAAE,CAAC;aACX,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;aAC9B,QAAQ,CAAC,EAAE,CAAC;aACZ,QAAQ,CAAC,6DAA6D,CAAC;KAC3E,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;SACZ,QAAQ,CAAC,4BAA4B,CAAC;IACzC,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,6FAA6F;QAC7F,6FAA6F;QAC7F,8EAA8E;QAC9E,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,OAAO,CAAC,EAAE,CAAC;aACX,QAAQ,CACP,6HAA6H,CAC9H;QACH,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,OAAO,CAAC,EAAE,CAAC;aACX,QAAQ,CACP,wYAAwY,CACzY;KACJ,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;SACZ,QAAQ,CAAC,yDAAyD,CAAC;CACvE,CAAC,CAAC;AACH,8FAA8F;AAC9F,mGAAmG;AACnG,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,4MAA4M,CAC7M;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,IAAI,CAAC;SACT,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,qEAAqE,CAAC;CACnF,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAChB,6FAA6F;AAC7F,4FAA4F;AAC5F,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,+HAA+H,CAChI;IACH,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,qCAAqC,CAAC;IAClD,4FAA4F;IAC5F,sFAAsF;IACtF,yBAAyB,EAAE,CAAC;SACzB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,CAAC,CAAC;SACV,QAAQ,CACP,oUAAoU,CACrU;IACH,wFAAwF;IACxF,6FAA6F;IAC7F,0DAA0D;IAC1D,6FAA6F;IAC7F,8FAA8F;IAC9F,8FAA8F;IAC9F,6FAA6F;IAC7F,2FAA2F;IAC3F,4FAA4F;IAC5F,0FAA0F;IAC1F,4FAA4F;IAC5F,wBAAwB,EAAE,CAAC;SACxB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CACP,2fAA2f,CAC5f;IACH,qBAAqB,EAAE,CAAC;SACrB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,qQAAqQ,CACtQ;IACH,uBAAuB,EAAE,CAAC;SACvB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,GAAG,CAAC;SACZ,QAAQ,CACP,0bAA0b,CAC3b;IACH,uBAAuB,EAAE,CAAC;SACvB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,8MAA8M,CAC/M;CACJ,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAEhB,mGAAmG;AACnG,kGAAkG;AAClG,kGAAkG;AAClG,oGAAoG;AACpG,4CAA4C;AAC5C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,4jBAA4jB,CAC7jB;IACH,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,GAAG,CAAC;SACZ,QAAQ,CACP,qRAAqR,CACtR;CACJ,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAEhB,6FAA6F;AAC7F,4FAA4F;AAC5F,+FAA+F;AAC/F,iGAAiG;AACjG,gGAAgG;AAChG,iEAAiE;AACjE,EAAE;AACF,kGAAkG;AAClG,+DAA+D;AAC/D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CACP,oeAAoe,CACre;CACJ,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAEhB,6FAA6F;AAC7F,mGAAmG;AACnG,gGAAgG;AAChG,iGAAiG;AACjG,2FAA2F;AAC3F,EAAE;AACF,6FAA6F;AAC7F,mGAAmG;AACnG,mGAAmG;AACnG,oGAAoG;AACpG,iGAAiG;AACjG,gGAAgG;AAChG,6FAA6F;AAC7F,kGAAkG;AAClG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,qQAAqQ,CACtQ;IACH,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,GAAG,CAAC;SACZ,QAAQ,CAAC,uCAAuC,CAAC;IACpD,kBAAkB,EAAE,CAAC;SAClB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,CAAC,CAAC;SACV,QAAQ,CACP,uwBAAuwB,CACxwB;IACH,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,OAAO,CAAC;SAChB,QAAQ,CACP,6jCAA6jC,CAC9jC;IACH,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,miCAAmiC,CACpiC;CACJ,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAEhB,oFAAoF;AACpF,kFAAkF;AAClF,yEAAyE;AACzE,2EAA2E;AAC3E,kFAAkF;AAClF,kFAAkF;AAClF,qFAAqF;AACrF,wBAAwB;AACxB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CACP,qIAAqI,CACtI;IACH,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,8IAA8I,CAC/I;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACvF,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,qCAAqC,CAAC;IAClD,0FAA0F;IAC1F,4FAA4F;IAC5F,wEAAwE;IACxE,iFAAiF;IACjF,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,iIAAiI,CAClI;CACJ,CAAC,CAAC;AAEH,gGAAgG;AAChG,6FAA6F;AAC7F,gGAAgG;AAChG,+FAA+F;AAC/F,oFAAoF;AACpF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,sPAAsP,CACvP;CACJ,CAAC,CAAC;AAEH,6FAA6F;AAC7F,0FAA0F;AAC1F,mGAAmG;AACnG,gGAAgG;AAChG,6FAA6F;AAC7F,gGAAgG;AAChG,kGAAkG;AAClG,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,gQAAgQ,CACjQ;CACJ,CAAC,CAAC"}
+{"version":3,"file":"observability.schema.js","sourceRoot":"","sources":["../../src/config/observability.schema.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,2FAA2F;AAC3F,EAAE;AACF,oFAAoF;AACpF,mFAAmF;AACnF,gGAAgG;AAChG,6FAA6F;AAC7F,cAAc;AACd,EAAE;AACF,kFAAkF;AAClF,kFAAkF;AAClF,wFAAwF;AACxF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,sGAAsG;IACtG,sGAAsG;IACtG,gDAAgD;IAChD,IAAI,EAAE,CAAC;SACJ,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,QAAQ,CAAC,6EAA6E,CAAC;QAC1F,OAAO,EAAE,CAAC;aACP,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;aAC9B,QAAQ,CAAC,EAAE,CAAC;aACZ,QAAQ,CACP,iFAAiF,CAClF;KACJ,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;SACZ,QAAQ,CAAC,6BAA6B,CAAC;IAC1C,UAAU,EAAE,CAAC;SACV,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC;QACvF,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,KAAK,CAAC;aACV,OAAO,CAAC,IAAI,CAAC;aACb,QAAQ,CAAC,0CAA0C,CAAC;QACvD,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,OAAO,CAAC,WAAW,CAAC;aACpB,QAAQ,CACP,0FAA0F,CAC3F;KACJ,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;SACZ,QAAQ,CAAC,8BAA8B,CAAC;IAC3C,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,gDAAgD,CAAC;QAC3F,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,QAAQ,CAAC,+EAA+E,CAAC;QAC5F,WAAW,EAAE,CAAC;aACX,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;aAC9B,QAAQ,CAAC,EAAE,CAAC;aACZ,QAAQ,CAAC,6DAA6D,CAAC;KAC3E,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;SACZ,QAAQ,CAAC,4BAA4B,CAAC;IACzC,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,6FAA6F;QAC7F,6FAA6F;QAC7F,8EAA8E;QAC9E,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,OAAO,CAAC,EAAE,CAAC;aACX,QAAQ,CACP,6HAA6H,CAC9H;QACH,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,OAAO,CAAC,EAAE,CAAC;aACX,QAAQ,CACP,wYAAwY,CACzY;KACJ,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;SACZ,QAAQ,CAAC,yDAAyD,CAAC;CACvE,CAAC,CAAC;AACH,8FAA8F;AAC9F,mGAAmG;AACnG,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,4MAA4M,CAC7M;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,IAAI,CAAC;SACT,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,qEAAqE,CAAC;CACnF,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAChB,6FAA6F;AAC7F,4FAA4F;AAC5F,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,+HAA+H,CAChI;IACH,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,qCAAqC,CAAC;IAClD,4FAA4F;IAC5F,sFAAsF;IACtF,yBAAyB,EAAE,CAAC;SACzB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,CAAC,CAAC;SACV,QAAQ,CACP,oUAAoU,CACrU;IACH,wFAAwF;IACxF,6FAA6F;IAC7F,0DAA0D;IAC1D,6FAA6F;IAC7F,8FAA8F;IAC9F,8FAA8F;IAC9F,6FAA6F;IAC7F,2FAA2F;IAC3F,4FAA4F;IAC5F,0FAA0F;IAC1F,4FAA4F;IAC5F,wBAAwB,EAAE,CAAC;SACxB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CACP,2fAA2f,CAC5f;IACH,qBAAqB,EAAE,CAAC;SACrB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,qQAAqQ,CACtQ;IACH,uBAAuB,EAAE,CAAC;SACvB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,GAAG,CAAC;SACZ,QAAQ,CACP,0bAA0b,CAC3b;IACH,uBAAuB,EAAE,CAAC;SACvB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,8MAA8M,CAC/M;CACJ,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAEhB,mGAAmG;AACnG,kGAAkG;AAClG,kGAAkG;AAClG,oGAAoG;AACpG,4CAA4C;AAC5C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,4jBAA4jB,CAC7jB;IACH,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,GAAG,CAAC;SACZ,QAAQ,CACP,qRAAqR,CACtR;CACJ,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAEhB,6FAA6F;AAC7F,4FAA4F;AAC5F,+FAA+F;AAC/F,iGAAiG;AACjG,gGAAgG;AAChG,iEAAiE;AACjE,EAAE;AACF,kGAAkG;AAClG,+DAA+D;AAC/D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CACP,oeAAoe,CACre;CACJ,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAEhB,6FAA6F;AAC7F,mGAAmG;AACnG,gGAAgG;AAChG,iGAAiG;AACjG,2FAA2F;AAC3F,EAAE;AACF,6FAA6F;AAC7F,mGAAmG;AACnG,mGAAmG;AACnG,oGAAoG;AACpG,iGAAiG;AACjG,gGAAgG;AAChG,6FAA6F;AAC7F,kGAAkG;AAClG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,qQAAqQ,CACtQ;IACH,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,GAAG,CAAC;SACZ,QAAQ,CAAC,uCAAuC,CAAC;IACpD,kBAAkB,EAAE,CAAC;SAClB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,CAAC,CAAC;SACV,QAAQ,CACP,uwBAAuwB,CACxwB;IACH,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,OAAO,CAAC;SAChB,QAAQ,CACP,6jCAA6jC,CAC9jC;IACH,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,miCAAmiC,CACpiC;CACJ,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAEhB,mGAAmG;AACnG,kGAAkG;AAClG,mGAAmG;AACnG,8FAA8F;AAC9F,mGAAmG;AACnG,0FAA0F;AAC1F,iGAAiG;AACjG,uEAAuE;AACvE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAAC,OAAe;IAC3D,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACxC,OAAO,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjG,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,8BAA8B,CAAC,OAAe;IAC5D,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,8FAA8F;IAC9F,mFAAmF;IACnF,IAAI,CAAC,GAAG,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3C,OAAO,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,YAAY,EAAE,CAAC;SACZ,KAAK,CACJ,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,EAAE;QAC3D,OAAO,EACL,wNAAwN;KAC3N,CAAC,CACH;SACA,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,wqHAAwqH,CACzqH;CACJ,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAEhB,oFAAoF;AACpF,kFAAkF;AAClF,yEAAyE;AACzE,2EAA2E;AAC3E,kFAAkF;AAClF,kFAAkF;AAClF,qFAAqF;AACrF,wBAAwB;AACxB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CACP,qIAAqI,CACtI;IACH,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,8IAA8I,CAC/I;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACvF,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,qCAAqC,CAAC;IAClD,0FAA0F;IAC1F,4FAA4F;IAC5F,wEAAwE;IACxE,iFAAiF;IACjF,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,iIAAiI,CAClI;CACJ,CAAC,CAAC;AAEH,gGAAgG;AAChG,6FAA6F;AAC7F,gGAAgG;AAChG,+FAA+F;AAC/F,oFAAoF;AACpF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,sPAAsP,CACvP;CACJ,CAAC,CAAC;AAEH,6FAA6F;AAC7F,0FAA0F;AAC1F,mGAAmG;AACnG,gGAAgG;AAChG,6FAA6F;AAC7F,gGAAgG;AAChG,kGAAkG;AAClG,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,gQAAgQ,CACjQ;CACJ,CAAC,CAAC"}

package/dist/config/reranker.schema.js

@@ -6,7 +6,7 @@ export const RerankerConfigSchema = z.object({
     provider: z
         .string()
         .min(1)
-        .describe("Reranker backend name, resolved against the provider registry at startup. Built-ins: cohere-compatible (any Cohere-format /rerank endpoint), model-tier (the BGE cross-encoder, configured via embeddings.modelTier.full), gateway (the inference gateway passthrough), local (THE-705: a bundled, fully offline cross-encoder — no gateway or Python service required; requires the optional @the-40-thieves/obsidian-tc-reranker-local package), and the profile-gated module."),
+        .describe("Reranker backend name, resolved against the provider registry at startup. Built-ins: cohere-compatible (any Cohere-format /rerank endpoint), model-tier (the BGE cross-encoder, configured via embeddings.modelTier.full), gateway (the inference gateway passthrough), local (THE-705/THE-944: a bundled, fully offline cross-encoder — no gateway or Python service required; requires the optional @the-40-thieves/obsidian-tc-reranker-local package, and is also tried AUTOMATICALLY — no need to set provider: 'local' explicitly — when this whole block is left unset, model-tier is not configured, and no gateway URL is configured either), and the profile-gated module."),
     // Optional at the schema level because "required" is not uniform across entries: cohere-compatible
     // genuinely needs one and throws its own actionable boot error when it is absent; model-tier
     // ignores it entirely (its model comes from embeddings.modelTier.full.model) and throws its own
@@ -48,7 +48,7 @@ export const RerankerConfigSchema = z.object({
         .string()
         .min(1)
         .optional()
-        .describe("Absolute path to the local cross-encoder model directory for provider 'local' (containing <model-id>/config.json, tokenizer.json, onnx/model_int8.onnx — see @the-40-thieves/obsidian-tc-reranker-local's README). Defaults to that package's own models/ directory, populated by its `bun run fetch-model` script. Ignored — and refused at boot if set — by every other provider."),
+        .describe("Absolute path to the ROOT directory under which <model-id>/<revision>/ lives (config.json, tokenizer.json, onnx/model_int8.onnx — see @the-40-thieves/obsidian-tc-reranker-local's README) for provider 'local'. THE-944: no longer required to be pre-populated — fetched and sha256-verified automatically on the first rerank call if not already present. Defaults to that package's own models/ directory. `bun run fetch-model` still works, for offline/CI pre-population. Ignored — and refused at boot if set — by every other provider."),
     // THE-705 round 2: route (i) of provider "local"'s resolution ladder (registry.ts's
     // resolveLocalRerankerModule) — the escape hatch for every deployment shape the bare package
     // specifier and the source-checkout default don't cover (an npm-installed server pointed at a

package/dist/config/reranker.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"reranker.schema.js","sourceRoot":"","sources":["../../src/config/reranker.schema.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,mGAAmG;AACnG,uEAAuE;AACvE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,kdAAkd,CACnd;IACH,mGAAmG;IACnG,6FAA6F;IAC7F,gGAAgG;IAChG,iGAAiG;IACjG,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,iTAAiT,CAClT;IACH,qEAAqE;IACrE,OAAO,EAAE,CAAC;SACP,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CACP,kTAAkT,CACnT;IACH,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,6JAA6J,CAC9J;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,kIAAkI,CACnI;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CACP,2IAA2I,CAC5I;IACH,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,2UAA2U,CAC5U;IACH,+FAA+F;IAC/F,8FAA8F;IAC9F,+BAA+B;IAC/B,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,qXAAqX,CACtX;IACH,oFAAoF;IACpF,6FAA6F;IAC7F,8FAA8F;IAC9F,8FAA8F;IAC9F,6CAA6C;IAC7C,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,4XAA4X,CAC7X;CACJ,CAAC,CAAC"}
+{"version":3,"file":"reranker.schema.js","sourceRoot":"","sources":["../../src/config/reranker.schema.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,mGAAmG;AACnG,uEAAuE;AACvE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,spBAAspB,CACvpB;IACH,mGAAmG;IACnG,6FAA6F;IAC7F,gGAAgG;IAChG,iGAAiG;IACjG,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,iTAAiT,CAClT;IACH,qEAAqE;IACrE,OAAO,EAAE,CAAC;SACP,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CACP,kTAAkT,CACnT;IACH,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,6JAA6J,CAC9J;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,kIAAkI,CACnI;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CACP,2IAA2I,CAC5I;IACH,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,2UAA2U,CAC5U;IACH,+FAA+F;IAC/F,8FAA8F;IAC9F,+BAA+B;IAC/B,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,mhBAAmhB,CACphB;IACH,oFAAoF;IACpF,6FAA6F;IAC7F,8FAA8F;IAC9F,8FAA8F;IAC9F,6CAA6C;IAC7C,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,4XAA4X,CAC7X;CACJ,CAAC,CAAC"}

package/dist/config/server.schema.d.ts

@@ -375,6 +375,9 @@ export declare const ServerConfigObject: z.ZodObject<{
         gatewayTimeoutMs: z.ZodDefault<z.ZodNumber>;
         maxPromptChars: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strip>>;
+    egress: z.ZodPrefault<z.ZodObject<{
+        excludePaths: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
     sessions: z.ZodPrefault<z.ZodObject<{
         autoOpen: z.ZodDefault<z.ZodBoolean>;
         traceContent: z.ZodDefault<z.ZodBoolean>;
@@ -760,6 +763,9 @@ export declare const ServerConfigSchema: z.ZodObject<{
         gatewayTimeoutMs: z.ZodDefault<z.ZodNumber>;
         maxPromptChars: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strip>>;
+    egress: z.ZodPrefault<z.ZodObject<{
+        excludePaths: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
     sessions: z.ZodPrefault<z.ZodObject<{
         autoOpen: z.ZodDefault<z.ZodBoolean>;
         traceContent: z.ZodDefault<z.ZodBoolean>;

package/dist/config/server.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.schema.d.ts","sourceRoot":"","sources":["../../src/config/server.schema.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAqCxB,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuH7B,CAAC;AAKH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA6C7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE1D"}
+{"version":3,"file":"server.schema.d.ts","sourceRoot":"","sources":["../../src/config/server.schema.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAsCxB,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA0H7B,CAAC;AAKH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA6C7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE1D"}

package/dist/config/server.schema.js

@@ -10,7 +10,7 @@ import { isLoopbackHost } from "../net-host";
 import { AclConfigSchema, AuthConfigSchema } from "./auth-acl.schema";
 import { GatewayConfigSchema } from "./gateway.schema";
 import { EmbeddingsConfigSchema, IndexingConfigSchema } from "./indexing-embeddings.schema";
-import { MaintenanceConfigSchema, ObservabilityConfigSchema, PensieveConfigSchema, PlaneConfigSchema, PlurConfigSchema, ReadwiseConfigSchema, SchedulerConfigSchema, SnapshotsConfigSchema, WatchConfigSchema, } from "./observability.schema";
+import { EgressConfigSchema, MaintenanceConfigSchema, ObservabilityConfigSchema, PensieveConfigSchema, PlaneConfigSchema, PlurConfigSchema, ReadwiseConfigSchema, SchedulerConfigSchema, SnapshotsConfigSchema, WatchConfigSchema, } from "./observability.schema";
 import { PersonasConfigSchema } from "./personas.schema";
 import { RerankerConfigSchema } from "./reranker.schema";
 import { ExperientialConfigSchema, RankingConfigSchema, RetrievalConfigSchema, } from "./retrieval.schema";
@@ -48,7 +48,7 @@ export const ServerConfigObject = z.object({
     auth: AuthConfigSchema.prefault({ mode: "none" }).describe("Authentication and token verification."),
     acl: AclConfigSchema.prefault({}).describe("Default path ACL, inherited by any vault without its own."),
     embeddings: EmbeddingsConfigSchema.prefault({}).describe("Embedding provider and indexing throughput."),
-    reranker: RerankerConfigSchema.optional().describe("Reranker backend. ABSENT is meaningful: it preserves the historical behaviour of preferring the model-tier cross-encoder when configured, else the gateway passthrough, else a graceful no-op."),
+    reranker: RerankerConfigSchema.optional().describe("Reranker backend. ABSENT is meaningful: it preserves the historical behaviour of preferring the model-tier cross-encoder when configured, else the gateway passthrough, else — THE-944 — the bundled offline 'local' cross-encoder IF the optional @the-40-thieves/obsidian-tc-reranker-local package happens to resolve on this deployment and no gateway URL is configured; else a graceful RRF-only no-op, exactly as before THE-944."),
     // THE-832: connection config for the inference gateway itself (extract/synthesize/judge/rerank).
     // ABSENT preserves today's behaviour exactly: falls through to OBSIDIAN_TC_GATEWAY_URL /
     // OBSIDIAN_TC_GATEWAY_TOKEN, then to every generative seam degrading gracefully.
@@ -74,6 +74,7 @@ export const ServerConfigObject = z.object({
     watch: WatchConfigSchema.describe("Filesystem watch that reindexes notes changed outside."),
     snapshots: SnapshotsConfigSchema.describe("Point-in-time note snapshot policy."),
     plane: PlaneConfigSchema.describe("Ambient sleep-time consolidation jobs."),
+    egress: EgressConfigSchema.describe("Paths withheld from the inference gateway and the embedding provider (THE-934) — a different question from auth.acl.readPaths, which governs read visibility."),
     sessions: SessionsConfigSchema.describe("Whether the server opens workspace sessions itself, and how long one stays open."),
     idempotencyTtlSeconds: z
         .number()

package/dist/config/server.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.schema.js","sourceRoot":"","sources":["../../src/config/server.schema.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,kGAAkG;AAClG,+FAA+F;AAC/F,yFAAyF;AACzF,iGAAiG;AACjG,mGAAmG;AACnG,iGAAiG;AACjG,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAC5F,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,uFAAuF;IACvF,kGAAkG;IAClG,kGAAkG;IAClG,mGAAmG;IACnG,0FAA0F;IAC1F,eAAe,EAAE,CAAC;SACf,IAAI,CAAC,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;SACnC,QAAQ,EAAE;SACV,QAAQ,CACP,8PAA8P,CAC/P;IACH,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,OAAO,CAAC,cAAc,CAAC;SACvB,QAAQ,CACP,uJAAuJ,CACxJ;IACH,MAAM,EAAE,CAAC;SACN,KAAK,CAAC,iBAAiB,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,sDAAsD,CAAC;IACnE,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACxC,6FAA6F,CAC9F;IACD,2FAA2F;IAC3F,2FAA2F;IAC3F,+FAA+F;IAC/F,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAChD,6GAA6G,CAC9G;IACD,4FAA4F;IAC5F,gGAAgG;IAChG,uFAAuF;IACvF,6FAA6F;IAC7F,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAChD,2GAA2G,CAC5G;IACD,IAAI,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CACxD,wCAAwC,CACzC;IACD,GAAG,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CACxC,2DAA2D,CAC5D;IACD,UAAU,EAAE,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CACtD,6CAA6C,CAC9C;IACD,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAChD,gMAAgM,CACjM;IACD,iGAAiG;IACjG,yFAAyF;IACzF,iFAAiF;IACjF,OAAO,EAAE,mBAAmB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAC9C,kJAAkJ,CACnJ;IACD,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IACvF,SAAS,EAAE,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CACpD,2CAA2C,CAC5C;IACD,OAAO,EAAE,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IACnF,YAAY,EAAE,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAC1D,yCAAyC,CAC1C;IACD,UAAU,EAAE,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC5F,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACjG,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IAC3D,cAAc,EAAE,0BAA0B,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAC5D,sDAAsD,CACvD;IACD,UAAU,EAAE,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CACtD,2CAA2C,CAC5C;IACD,0FAA0F;IAC1F,4FAA4F;IAC5F,2EAA2E;IAC3E,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAChD,2LAA2L,CAC5L;IACD,SAAS,EAAE,qBAAqB,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACrF,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IAC7F,aAAa,EAAE,yBAAyB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAC5D,mCAAmC,CACpC;IACD,WAAW,EAAE,uBAAuB,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IACrF,SAAS,EAAE,qBAAqB,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAChF,KAAK,EAAE,iBAAiB,CAAC,QAAQ,CAAC,wDAAwD,CAAC;IAC3F,SAAS,EAAE,qBAAqB,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAChF,KAAK,EAAE,iBAAiB,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAC3E,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,CACrC,kFAAkF,CACnF;IACD,qBAAqB,EAAE,CAAC;SACrB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,sGAAsG,CACvG;IACH,6FAA6F;IAC7F,uFAAuF;IACvF,uCAAuC;IACvC,yBAAyB,EAAE,CAAC;SACzB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,0MAA0M,CAC3M;IACH,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,GAAG,CAAC;SACZ,QAAQ,CACP,yFAAyF,CAC1F;CACJ,CAAC,CAAC;AAEH,6FAA6F;AAC7F,8FAA8F;AAC9F,4FAA4F;AAC5F,MAAM,CAAC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IAC5E,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;IACjC,IAAI,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC;YACpC,OAAO,EAAE,4FAA4F,IAAI,CAAC,IAAI,qKAAqK;SACpR,CAAC,CAAC;IACL,CAAC;IACD,oGAAoG;IACpG,sGAAsG;IACtG,iGAAiG;IACjG,4FAA4F;IAC5F,+FAA+F;IAC/F,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC5B,2FAA2F;QAC3F,8FAA8F;QAC9F,mDAAmD;QACnD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChF,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,OAAO,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAC3C,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC;gBAC1B,OAAO,EACL,sPAAsP;aACzP,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAC1C,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC;gBAC1B,OAAO,EAAE,iFAAiF,IAAI,CAAC,IAAI,6JAA6J;aACjQ,CAAC,CAAC;QACL,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YACjE,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC;gBAC1B,OAAO,EACL,sPAAsP;aACzP,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAGH;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,CAAC,CAAC,YAAY,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAA4B,CAAC;AACxF,CAAC"}
+{"version":3,"file":"server.schema.js","sourceRoot":"","sources":["../../src/config/server.schema.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,kGAAkG;AAClG,+FAA+F;AAC/F,yFAAyF;AACzF,iGAAiG;AACjG,mGAAmG;AACnG,iGAAiG;AACjG,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAC5F,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,yBAAyB,EACzB,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,uFAAuF;IACvF,kGAAkG;IAClG,kGAAkG;IAClG,mGAAmG;IACnG,0FAA0F;IAC1F,eAAe,EAAE,CAAC;SACf,IAAI,CAAC,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;SACnC,QAAQ,EAAE;SACV,QAAQ,CACP,8PAA8P,CAC/P;IACH,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,OAAO,CAAC,cAAc,CAAC;SACvB,QAAQ,CACP,uJAAuJ,CACxJ;IACH,MAAM,EAAE,CAAC;SACN,KAAK,CAAC,iBAAiB,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,sDAAsD,CAAC;IACnE,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACxC,6FAA6F,CAC9F;IACD,2FAA2F;IAC3F,2FAA2F;IAC3F,+FAA+F;IAC/F,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAChD,6GAA6G,CAC9G;IACD,4FAA4F;IAC5F,gGAAgG;IAChG,uFAAuF;IACvF,6FAA6F;IAC7F,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAChD,2GAA2G,CAC5G;IACD,IAAI,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CACxD,wCAAwC,CACzC;IACD,GAAG,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CACxC,2DAA2D,CAC5D;IACD,UAAU,EAAE,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CACtD,6CAA6C,CAC9C;IACD,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAChD,0aAA0a,CAC3a;IACD,iGAAiG;IACjG,yFAAyF;IACzF,iFAAiF;IACjF,OAAO,EAAE,mBAAmB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAC9C,kJAAkJ,CACnJ;IACD,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IACvF,SAAS,EAAE,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CACpD,2CAA2C,CAC5C;IACD,OAAO,EAAE,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IACnF,YAAY,EAAE,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAC1D,yCAAyC,CAC1C;IACD,UAAU,EAAE,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC5F,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACjG,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IAC3D,cAAc,EAAE,0BAA0B,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAC5D,sDAAsD,CACvD;IACD,UAAU,EAAE,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CACtD,2CAA2C,CAC5C;IACD,0FAA0F;IAC1F,4FAA4F;IAC5F,2EAA2E;IAC3E,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAChD,2LAA2L,CAC5L;IACD,SAAS,EAAE,qBAAqB,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACrF,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IAC7F,aAAa,EAAE,yBAAyB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAC5D,mCAAmC,CACpC;IACD,WAAW,EAAE,uBAAuB,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IACrF,SAAS,EAAE,qBAAqB,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAChF,KAAK,EAAE,iBAAiB,CAAC,QAAQ,CAAC,wDAAwD,CAAC;IAC3F,SAAS,EAAE,qBAAqB,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAChF,KAAK,EAAE,iBAAiB,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAC3E,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CACjC,+JAA+J,CAChK;IACD,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,CACrC,kFAAkF,CACnF;IACD,qBAAqB,EAAE,CAAC;SACrB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,sGAAsG,CACvG;IACH,6FAA6F;IAC7F,uFAAuF;IACvF,uCAAuC;IACvC,yBAAyB,EAAE,CAAC;SACzB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,0MAA0M,CAC3M;IACH,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,GAAG,CAAC;SACZ,QAAQ,CACP,yFAAyF,CAC1F;CACJ,CAAC,CAAC;AAEH,6FAA6F;AAC7F,8FAA8F;AAC9F,4FAA4F;AAC5F,MAAM,CAAC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IAC5E,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;IACjC,IAAI,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC;YACpC,OAAO,EAAE,4FAA4F,IAAI,CAAC,IAAI,qKAAqK;SACpR,CAAC,CAAC;IACL,CAAC;IACD,oGAAoG;IACpG,sGAAsG;IACtG,iGAAiG;IACjG,4FAA4F;IAC5F,+FAA+F;IAC/F,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC5B,2FAA2F;QAC3F,8FAA8F;QAC9F,mDAAmD;QACnD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChF,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,OAAO,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAC3C,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC;gBAC1B,OAAO,EACL,sPAAsP;aACzP,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAC1C,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC;gBAC1B,OAAO,EAAE,iFAAiF,IAAI,CAAC,IAAI,6JAA6J;aACjQ,CAAC,CAAC;QACL,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YACjE,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC;gBAC1B,OAAO,EACL,sPAAsP;aACzP,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAGH;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,CAAC,CAAC,YAAY,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAA4B,CAAC;AACxF,CAAC"}

package/dist/config.schema.d.ts

@@ -1,7 +1,7 @@
 import { AclConfigSchema, AclRuleSchema, AuthConfigSchema } from "./config/auth-acl.schema";
 import { type GatewayConfig, GatewayConfigSchema } from "./config/gateway.schema";
 import { EmbeddingsConfigSchema, type IndexingConfig, IndexingConfigSchema } from "./config/indexing-embeddings.schema";
-import { MaintenanceConfigSchema, ObservabilityConfigSchema, PlaneConfigSchema, PlurConfigSchema, ReadwiseConfigSchema, SchedulerConfigSchema, SnapshotsConfigSchema, WatchConfigSchema } from "./config/observability.schema";
+import { isUnusableEgressExcludePattern, MaintenanceConfigSchema, normalizeEgressExcludePattern, ObservabilityConfigSchema, PlaneConfigSchema, PlurConfigSchema, ReadwiseConfigSchema, SchedulerConfigSchema, SnapshotsConfigSchema, WatchConfigSchema } from "./config/observability.schema";
 import { type PersonaConfig, PersonaConfigSchema, type PersonasConfig, PersonasConfigSchema } from "./config/personas.schema";
 import { type RerankerConfig, RerankerConfigSchema } from "./config/reranker.schema";
 import { ExperientialConfigSchema, MetadataPriorRuleSchema, RankingConfigSchema, RetrievalConfigSchema } from "./config/retrieval.schema";
@@ -11,5 +11,5 @@ import { type BootstrapConfig, BootstrapConfigSchema, BootstrapDomainSchema, DEF
 import type { VaultConfig, VaultConfigInput, VaultKind } from "./config/vault.schema";
 import { DEFAULT_MEMORY_FOLDER, VaultBridgesConfigSchema, VaultCommandsConfigSchema, VaultConfigSchema, VaultMemoryConfigSchema, VaultPluginsConfigSchema, VaultWorkspaceConfigSchema } from "./config/vault.schema";
 export type { BootstrapConfig, GatewayConfig, IndexingConfig, PersonaConfig, PersonasConfig, RerankerConfig, ServerConfig, ThrottleConfig, ToolVisibilityConfig, VaultConfig, VaultConfigInput, VaultKind, };
-export { AclConfigSchema, AclRuleSchema, AuthConfigSchema, BootstrapConfigSchema, BootstrapDomainSchema, configJsonSchema, DEFAULT_DEEP_PHRASES, DEFAULT_MEMORY_FOLDER, EmbeddingsConfigSchema, ExperientialConfigSchema, GatewayConfigSchema, GovernorConfigSchema, HttpConfigSchema, IndexingConfigSchema, MaintenanceConfigSchema, MetadataPriorRuleSchema, ObservabilityConfigSchema, PersonaConfigSchema, PersonasConfigSchema, PlaneConfigSchema, PlurConfigSchema, RankingConfigSchema, ReadwiseConfigSchema, RerankerConfigSchema, RetrievalConfigSchema, SchedulerConfigSchema, ServerConfigObject, ServerConfigSchema, SessionsConfigSchema, SnapshotsConfigSchema, ThrottleConfigSchema, ToolFacadeConfigSchema, ToolVisibilityConfigSchema, TransportsConfigSchema, VaultBridgesConfigSchema, VaultCommandsConfigSchema, VaultConfigSchema, VaultMemoryConfigSchema, VaultPluginsConfigSchema, VaultWorkspaceConfigSchema, WatchConfigSchema, WritesConfigSchema, };
+export { AclConfigSchema, AclRuleSchema, AuthConfigSchema, BootstrapConfigSchema, BootstrapDomainSchema, configJsonSchema, DEFAULT_DEEP_PHRASES, DEFAULT_MEMORY_FOLDER, EmbeddingsConfigSchema, ExperientialConfigSchema, GatewayConfigSchema, GovernorConfigSchema, HttpConfigSchema, IndexingConfigSchema, isUnusableEgressExcludePattern, MaintenanceConfigSchema, MetadataPriorRuleSchema, normalizeEgressExcludePattern, ObservabilityConfigSchema, PersonaConfigSchema, PersonasConfigSchema, PlaneConfigSchema, PlurConfigSchema, RankingConfigSchema, ReadwiseConfigSchema, RerankerConfigSchema, RetrievalConfigSchema, SchedulerConfigSchema, ServerConfigObject, ServerConfigSchema, SessionsConfigSchema, SnapshotsConfigSchema, ThrottleConfigSchema, ToolFacadeConfigSchema, ToolVisibilityConfigSchema, TransportsConfigSchema, VaultBridgesConfigSchema, VaultCommandsConfigSchema, VaultConfigSchema, VaultMemoryConfigSchema, VaultPluginsConfigSchema, VaultWorkspaceConfigSchema, WatchConfigSchema, WritesConfigSchema, };
 //# sourceMappingURL=config.schema.d.ts.map

package/dist/config.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.schema.d.ts","sourceRoot":"","sources":["../src/config.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5F,OAAO,EAAE,KAAK,aAAa,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EACL,sBAAsB,EACtB,KAAK,cAAc,EACnB,oBAAoB,EACrB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EAClB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,cAAc,EACnB,oBAAoB,EACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,KAAK,cAAc,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrF,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,qBAAqB,EACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,cAAc,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,gBAAgB,EAChB,KAAK,YAAY,EACjB,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,eAAe,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,KAAK,oBAAoB,EACzB,0BAA0B,EAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACtF,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC3B,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,eAAe,EACf,aAAa,EACb,cAAc,EACd,aAAa,EACb,cAAc,EACd,cAAc,EACd,YAAY,EACZ,cAAc,EACd,oBAAoB,EACpB,WAAW,EACX,gBAAgB,EAChB,SAAS,GACV,CAAC;AAcF,OAAO,EACL,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,yBAAyB,EACzB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,iBAAiB,EACjB,kBAAkB,GACnB,CAAC"}
+{"version":3,"file":"config.schema.d.ts","sourceRoot":"","sources":["../src/config.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5F,OAAO,EAAE,KAAK,aAAa,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EACL,sBAAsB,EACtB,KAAK,cAAc,EACnB,oBAAoB,EACrB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,8BAA8B,EAC9B,uBAAuB,EACvB,6BAA6B,EAC7B,yBAAyB,EACzB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EAClB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,cAAc,EACnB,oBAAoB,EACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,KAAK,cAAc,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrF,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,qBAAqB,EACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,cAAc,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,gBAAgB,EAChB,KAAK,YAAY,EACjB,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,eAAe,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,KAAK,oBAAoB,EACzB,0BAA0B,EAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACtF,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC3B,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,eAAe,EACf,aAAa,EACb,cAAc,EACd,aAAa,EACb,cAAc,EACd,cAAc,EACd,YAAY,EACZ,cAAc,EACd,oBAAoB,EACpB,WAAW,EACX,gBAAgB,EAChB,SAAS,GACV,CAAC;AAcF,OAAO,EACL,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EACpB,8BAA8B,EAC9B,uBAAuB,EACvB,uBAAuB,EACvB,6BAA6B,EAC7B,yBAAyB,EACzB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,iBAAiB,EACjB,kBAAkB,GACnB,CAAC"}

package/dist/config.schema.js

@@ -1,7 +1,7 @@
 import { AclConfigSchema, AclRuleSchema, AuthConfigSchema } from "./config/auth-acl.schema";
 import { GatewayConfigSchema } from "./config/gateway.schema";
 import { EmbeddingsConfigSchema, IndexingConfigSchema, } from "./config/indexing-embeddings.schema";
-import { MaintenanceConfigSchema, ObservabilityConfigSchema, PlaneConfigSchema, PlurConfigSchema, ReadwiseConfigSchema, SchedulerConfigSchema, SnapshotsConfigSchema, WatchConfigSchema, } from "./config/observability.schema";
+import { isUnusableEgressExcludePattern, MaintenanceConfigSchema, normalizeEgressExcludePattern, ObservabilityConfigSchema, PlaneConfigSchema, PlurConfigSchema, ReadwiseConfigSchema, SchedulerConfigSchema, SnapshotsConfigSchema, WatchConfigSchema, } from "./config/observability.schema";
 import { PersonaConfigSchema, PersonasConfigSchema, } from "./config/personas.schema";
 import { RerankerConfigSchema } from "./config/reranker.schema";
 import { ExperientialConfigSchema, MetadataPriorRuleSchema, RankingConfigSchema, RetrievalConfigSchema, } from "./config/retrieval.schema";
@@ -22,5 +22,5 @@ import { DEFAULT_MEMORY_FOLDER, VaultBridgesConfigSchema, VaultCommandsConfigSch
 // composition point that imports all seven sibling leaves above. This file is now a pure
 // re-export facade: every existing import of these names keeps working, but nothing is defined
 // here anymore.
-export { AclConfigSchema, AclRuleSchema, AuthConfigSchema, BootstrapConfigSchema, BootstrapDomainSchema, configJsonSchema, DEFAULT_DEEP_PHRASES, DEFAULT_MEMORY_FOLDER, EmbeddingsConfigSchema, ExperientialConfigSchema, GatewayConfigSchema, GovernorConfigSchema, HttpConfigSchema, IndexingConfigSchema, MaintenanceConfigSchema, MetadataPriorRuleSchema, ObservabilityConfigSchema, PersonaConfigSchema, PersonasConfigSchema, PlaneConfigSchema, PlurConfigSchema, RankingConfigSchema, ReadwiseConfigSchema, RerankerConfigSchema, RetrievalConfigSchema, SchedulerConfigSchema, ServerConfigObject, ServerConfigSchema, SessionsConfigSchema, SnapshotsConfigSchema, ThrottleConfigSchema, ToolFacadeConfigSchema, ToolVisibilityConfigSchema, TransportsConfigSchema, VaultBridgesConfigSchema, VaultCommandsConfigSchema, VaultConfigSchema, VaultMemoryConfigSchema, VaultPluginsConfigSchema, VaultWorkspaceConfigSchema, WatchConfigSchema, WritesConfigSchema, };
+export { AclConfigSchema, AclRuleSchema, AuthConfigSchema, BootstrapConfigSchema, BootstrapDomainSchema, configJsonSchema, DEFAULT_DEEP_PHRASES, DEFAULT_MEMORY_FOLDER, EmbeddingsConfigSchema, ExperientialConfigSchema, GatewayConfigSchema, GovernorConfigSchema, HttpConfigSchema, IndexingConfigSchema, isUnusableEgressExcludePattern, MaintenanceConfigSchema, MetadataPriorRuleSchema, normalizeEgressExcludePattern, ObservabilityConfigSchema, PersonaConfigSchema, PersonasConfigSchema, PlaneConfigSchema, PlurConfigSchema, RankingConfigSchema, ReadwiseConfigSchema, RerankerConfigSchema, RetrievalConfigSchema, SchedulerConfigSchema, ServerConfigObject, ServerConfigSchema, SessionsConfigSchema, SnapshotsConfigSchema, ThrottleConfigSchema, ToolFacadeConfigSchema, ToolVisibilityConfigSchema, TransportsConfigSchema, VaultBridgesConfigSchema, VaultCommandsConfigSchema, VaultConfigSchema, VaultMemoryConfigSchema, VaultPluginsConfigSchema, VaultWorkspaceConfigSchema, WatchConfigSchema, WritesConfigSchema, };
 //# sourceMappingURL=config.schema.js.map

package/dist/config.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.schema.js","sourceRoot":"","sources":["../src/config.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5F,OAAO,EAAsB,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EACL,sBAAsB,EAEtB,oBAAoB,GACrB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAEL,mBAAmB,EAEnB,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAuB,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrF,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EAEpB,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,gBAAgB,EAEhB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAEL,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EAEtB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAgB/B,mEAAmE;AACnE,6DAA6D;AAC7D,0FAA0F;AAC1F,yFAAyF;AACzF,kGAAkG;AAClG,4FAA4F;AAC5F,oCAAoC;AACpC,6FAA6F;AAC7F,2FAA2F;AAC3F,0FAA0F;AAC1F,yFAAyF;AACzF,+FAA+F;AAC/F,gBAAgB;AAChB,OAAO,EACL,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,yBAAyB,EACzB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,iBAAiB,EACjB,kBAAkB,GACnB,CAAC"}
+{"version":3,"file":"config.schema.js","sourceRoot":"","sources":["../src/config.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5F,OAAO,EAAsB,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EACL,sBAAsB,EAEtB,oBAAoB,GACrB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,8BAA8B,EAC9B,uBAAuB,EACvB,6BAA6B,EAC7B,yBAAyB,EACzB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAEL,mBAAmB,EAEnB,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAuB,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AACrF,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EAEpB,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,gBAAgB,EAEhB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAEL,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EAEtB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAgB/B,mEAAmE;AACnE,6DAA6D;AAC7D,0FAA0F;AAC1F,yFAAyF;AACzF,kGAAkG;AAClG,4FAA4F;AAC5F,oCAAoC;AACpC,6FAA6F;AAC7F,2FAA2F;AAC3F,0FAA0F;AAC1F,yFAAyF;AACzF,+FAA+F;AAC/F,gBAAgB;AAChB,OAAO,EACL,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EACpB,8BAA8B,EAC9B,uBAAuB,EACvB,uBAAuB,EACvB,6BAA6B,EAC7B,yBAAyB,EACzB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,iBAAiB,EACjB,kBAAkB,GACnB,CAAC"}

package/dist/errors.d.ts

@@ -1,4 +1,4 @@
-export type ErrorCode = "unauthorized" | "forbidden" | "validation_error" | "not_found" | "vault_not_found" | "conflict" | "idempotency_key_mismatch" | "idempotency_in_flight" | "elicit_required" | "elicit_invalid" | "overflow" | "throttled" | "read_only" | "plugin_unavailable" | "internal" | "note_not_found" | "path_invalid" | "path_ambiguous" | "acl_denied" | "read_only_mode" | "note_exists" | "concurrent_modification" | "invalid_input" | "internal_error" | "embedding_provider_error" | "operation_timeout" | "dql_error" | "jsonlogic_error" | "plugin_missing" | "plugin_unreachable" | "bases_syntax_error" | "unsupported_base_filter" | "execute_command_disabled" | "command_not_allowlisted" | "requires_live_obsidian" | "compute_budget_exceeded" | "plugin_incompatible" | "indeterminate_outcome" | "aborted" | "content_rejected";
+export type ErrorCode = "unauthorized" | "forbidden" | "validation_error" | "not_found" | "vault_not_found" | "conflict" | "idempotency_key_mismatch" | "idempotency_in_flight" | "elicit_required" | "elicit_invalid" | "overflow" | "throttled" | "read_only" | "plugin_unavailable" | "internal" | "note_not_found" | "path_invalid" | "path_ambiguous" | "acl_denied" | "read_only_mode" | "note_exists" | "concurrent_modification" | "invalid_input" | "internal_error" | "embedding_provider_error" | "operation_timeout" | "dql_error" | "jsonlogic_error" | "plugin_missing" | "plugin_unreachable" | "bases_syntax_error" | "unsupported_base_filter" | "execute_command_disabled" | "command_not_allowlisted" | "requires_live_obsidian" | "compute_budget_exceeded" | "plugin_incompatible" | "indeterminate_outcome" | "aborted" | "content_rejected" | "egress_excluded";
 /** THE-512: the recovery hint for a code, or undefined when none is useful. */
 export declare function recoveryFor(code: ErrorCode): string | undefined;
 export interface ErrorJSON {

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,SAAS,GAEjB,cAAc,GACd,WAAW,GACX,kBAAkB,GAClB,WAAW,GACX,iBAAiB,GACjB,UAAU,GACV,0BAA0B,GAC1B,uBAAuB,GACvB,iBAAiB,GACjB,gBAAgB,GAChB,UAAU,GACV,WAAW,GACX,WAAW,GACX,oBAAoB,GACpB,UAAU,GAEV,gBAAgB,GAChB,cAAc,GACd,gBAAgB,GAChB,YAAY,GACZ,gBAAgB,GAChB,aAAa,GACb,yBAAyB,GACzB,eAAe,GACf,gBAAgB,GAEhB,0BAA0B,GAC1B,mBAAmB,GACnB,WAAW,GACX,iBAAiB,GACjB,gBAAgB,GAChB,oBAAoB,GAEpB,oBAAoB,GACpB,yBAAyB,GAEzB,0BAA0B,GAC1B,yBAAyB,GAEzB,wBAAwB,GAGxB,yBAAyB,GAGzB,qBAAqB,GAIrB,uBAAuB,GAIvB,SAAS,GAKT,kBAAkB,CAAC;AAmIvB,+EAA+E;AAC/E,wBAAgB,WAAW,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAE/D;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,kGAAkG;IAClG,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAE5B,YAAY,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAO9E;IAED,MAAM,IAAI,SAAS,CASlB;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,eAAe,CAE9D;AAED,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,eAAe,CAAC;AAMnF,eAAO,MAAM,GAAG;aAEd,YAAY;aACZ,SAAS;aACT,UAAU;aACV,QAAQ;aACR,aAAa;aACb,QAAQ;aACR,cAAc;aACd,aAAa;aACb,QAAQ;aACR,SAAS;aACT,QAAQ;aACR,QAAQ;aAER,YAAY;aACZ,WAAW;aACX,aAAa;aACb,SAAS;aACT,YAAY;aACZ,UAAU;aACV,sBAAsB;aACtB,YAAY;aACZ,aAAa;aAEb,sBAAsB;aACtB,gBAAgB;aAChB,QAAQ;aACR,cAAc;aACd,aAAa;aACb,iBAAiB;aAEjB,gBAAgB;aAChB,qBAAqB;aAKrB,sBAAsB;aAItB,qBAAqB;aAErB,oBAAoB;aAKpB,qBAAqB;aAErB,kBAAkB;aAKlB,OAAO;aAEP,eAAe;CACP,CAAC"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,SAAS,GAEjB,cAAc,GACd,WAAW,GACX,kBAAkB,GAClB,WAAW,GACX,iBAAiB,GACjB,UAAU,GACV,0BAA0B,GAC1B,uBAAuB,GACvB,iBAAiB,GACjB,gBAAgB,GAChB,UAAU,GACV,WAAW,GACX,WAAW,GACX,oBAAoB,GACpB,UAAU,GAEV,gBAAgB,GAChB,cAAc,GACd,gBAAgB,GAChB,YAAY,GACZ,gBAAgB,GAChB,aAAa,GACb,yBAAyB,GACzB,eAAe,GACf,gBAAgB,GAEhB,0BAA0B,GAC1B,mBAAmB,GACnB,WAAW,GACX,iBAAiB,GACjB,gBAAgB,GAChB,oBAAoB,GAEpB,oBAAoB,GACpB,yBAAyB,GAEzB,0BAA0B,GAC1B,yBAAyB,GAEzB,wBAAwB,GAGxB,yBAAyB,GAGzB,qBAAqB,GAIrB,uBAAuB,GAIvB,SAAS,GAKT,kBAAkB,GAMlB,iBAAiB,CAAC;AAsItB,+EAA+E;AAC/E,wBAAgB,WAAW,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAE/D;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,kGAAkG;IAClG,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAE5B,YAAY,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAO9E;IAED,MAAM,IAAI,SAAS,CASlB;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,eAAe,CAE9D;AAED,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,eAAe,CAAC;AAMnF,eAAO,MAAM,GAAG;aAEd,YAAY;aACZ,SAAS;aACT,UAAU;aACV,QAAQ;aACR,aAAa;aACb,QAAQ;aACR,cAAc;aACd,aAAa;aACb,QAAQ;aACR,SAAS;aACT,QAAQ;aACR,QAAQ;aAER,YAAY;aACZ,WAAW;aACX,aAAa;aACb,SAAS;aACT,YAAY;aACZ,UAAU;aACV,sBAAsB;aACtB,YAAY;aACZ,aAAa;aAEb,sBAAsB;aACtB,gBAAgB;aAChB,QAAQ;aACR,cAAc;aACd,aAAa;aACb,iBAAiB;aAEjB,gBAAgB;aAChB,qBAAqB;aAKrB,sBAAsB;aAItB,qBAAqB;aAErB,oBAAoB;aAKpB,qBAAqB;aAErB,kBAAkB;aAKlB,OAAO;aAEP,eAAe;CACP,CAAC"}

package/dist/errors.js

@@ -85,6 +85,8 @@ const RECOVERY = {
     aborted: "The caller's AbortSignal fired before the operation finished. Re-issue the call fresh if the work is still wanted; this is not a transient failure of the operation itself.",
     // THE-639 — poison-scan gate on agent_synthesis note writes.
     content_rejected: 'The content tripped the poison scan (risk: high) and was not written. Revise it to remove instruction-override, persistence-directive, hidden-text, or exfiltration-like phrasing, or write it with provenance: "authored" if a human is vouching for it.',
+    // THE-934 fix round 3 (H) — the egress port guard refused a content-bearing request.
+    egress_excluded: "A gateway/embedding/reranker request either declared no sourcePaths or named one under egress.excludePaths. Declare the real vault paths the text came from (an empty array is fine when there genuinely are none), or leave the excluded path out of the request.",
 };
 /** THE-512: the recovery hint for a code, or undefined when none is useful. */
 export function recoveryFor(code) {

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AA8DA,MAAM,SAAS,GAA2B,IAAI,GAAG,CAAY;IAC3D,uBAAuB;IACvB,WAAW;IACX,UAAU;IACV,gBAAgB;IAChB,oEAAoE;IACpE,yBAAyB;IACzB,2FAA2F;IAC3F,0BAA0B;IAC1B,mBAAmB;IACnB,oBAAoB;IACpB,gGAAgG;IAChG,SAAS;CACV,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,QAAQ,GAAqC;IACjD,4BAA4B;IAC5B,YAAY,EACV,oFAAoF;IACtF,SAAS,EACP,gKAAgK;IAClK,gBAAgB,EACd,iJAAiJ;IACnJ,SAAS,EACP,mKAAmK;IACrK,eAAe,EACb,sGAAsG;IACxG,QAAQ,EAAE,yEAAyE;IACnF,wBAAwB,EACtB,4HAA4H;IAC9H,qBAAqB,EACnB,8HAA8H;IAChI,6FAA6F;IAC7F,gFAAgF;IAChF,eAAe,EACb,iNAAiN;IACnN,cAAc,EACZ,qHAAqH;IACvH,QAAQ,EACN,yJAAyJ;IAC3J,SAAS,EACP,gJAAgJ;IAClJ,SAAS,EACP,8IAA8I;IAChJ,kBAAkB,EAChB,mJAAmJ;IACrJ,QAAQ,EACN,sIAAsI;IACxI,2BAA2B;IAC3B,cAAc,EACZ,0HAA0H;IAC5H,YAAY,EACV,+HAA+H;IACjI,cAAc,EACZ,wIAAwI;IAC1I,UAAU,EACR,sIAAsI;IACxI,cAAc,EACZ,yHAAyH;IAC3H,WAAW,EACT,sHAAsH;IACxH,uBAAuB,EACrB,yJAAyJ;IAC3J,aAAa,EACX,yGAAyG;IAC3G,cAAc,EACZ,mHAAmH;IACrH,qCAAqC;IACrC,wBAAwB,EACtB,sKAAsK;IACxK,iBAAiB,EACf,8IAA8I;IAChJ,SAAS,EACP,6GAA6G;IAC/G,eAAe,EACb,oHAAoH;IACtH,cAAc,EACZ,oJAAoJ;IACtJ,kBAAkB,EAChB,sIAAsI;IACxI,2BAA2B;IAC3B,kBAAkB,EAChB,6GAA6G;IAC/G,uBAAuB,EACrB,gKAAgK;IAClK,wBAAwB;IACxB,wBAAwB,EACtB,mIAAmI;IACrI,uBAAuB,EACrB,gJAAgJ;IAClJ,cAAc;IACd,sBAAsB,EACpB,0JAA0J;IAC5J,WAAW;IACX,uBAAuB,EACrB,0JAA0J;IAC5J,WAAW;IACX,mBAAmB,EACjB,8HAA8H;IAChI,gEAAgE;IAChE,qBAAqB,EACnB,oNAAoN;IACtN,gDAAgD;IAChD,OAAO,EACL,6KAA6K;IAC/K,6DAA6D;IAC7D,gBAAgB,EACd,2PAA2P;CAC9P,CAAC;AAEF,+EAA+E;AAC/E,MAAM,UAAU,WAAW,CAAC,IAAe;IACzC,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;AACrC,CAAC;AAWD,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAC/B,IAAI,CAAY;IAChB,OAAO,CAA2B;IAClC,SAAS,CAAU;IAE5B,YAAY,IAAe,EAAE,OAAe,EAAE,OAAiC;QAC7E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;IAED,MAAM;QACJ,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClC,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,aAAa,CAAC,CAAU;IACtC,OAAO,CAAC,YAAY,eAAe,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACjF,CAAC;AAGD,MAAM,EAAE,GACN,CAAC,IAAe,EAAE,QAAgB,EAAM,EAAE,CAC1C,CAAC,OAAO,GAAG,QAAQ,EAAE,OAAQ,EAAE,EAAE,CAC/B,IAAI,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAEhD,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,KAAK;IACL,YAAY,EAAE,EAAE,CAAC,cAAc,EAAE,yBAAyB,CAAC;IAC3D,SAAS,EAAE,EAAE,CAAC,WAAW,EAAE,qBAAqB,CAAC;IACjD,UAAU,EAAE,EAAE,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;IAC7D,QAAQ,EAAE,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;IACtC,aAAa,EAAE,EAAE,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IACvD,QAAQ,EAAE,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;IACpC,cAAc,EAAE,EAAE,CAAC,iBAAiB,EAAE,6BAA6B,CAAC;IACpE,aAAa,EAAE,EAAE,CAAC,gBAAgB,EAAE,iCAAiC,CAAC;IACtE,QAAQ,EAAE,EAAE,CAAC,UAAU,EAAE,8BAA8B,CAAC;IACxD,SAAS,EAAE,EAAE,CAAC,WAAW,EAAE,qBAAqB,CAAC;IACjD,QAAQ,EAAE,EAAE,CAAC,WAAW,EAAE,6BAA6B,CAAC;IACxD,QAAQ,EAAE,EAAE,CAAC,UAAU,EAAE,gBAAgB,CAAC;IAC1C,KAAK;IACL,YAAY,EAAE,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IACpD,WAAW,EAAE,EAAE,CAAC,cAAc,EAAE,iBAAiB,CAAC;IAClD,aAAa,EAAE,EAAE,CAAC,gBAAgB,EAAE,iCAAiC,CAAC;IACtE,SAAS,EAAE,EAAE,CAAC,YAAY,EAAE,2BAA2B,CAAC;IACxD,YAAY,EAAE,EAAE,CAAC,gBAAgB,EAAE,4BAA4B,CAAC;IAChE,UAAU,EAAE,EAAE,CAAC,aAAa,EAAE,qBAAqB,CAAC;IACpD,sBAAsB,EAAE,EAAE,CAAC,yBAAyB,EAAE,gCAAgC,CAAC;IACvF,YAAY,EAAE,EAAE,CAAC,eAAe,EAAE,eAAe,CAAC;IAClD,aAAa,EAAE,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IACrD,mDAAmD;IACnD,sBAAsB,EAAE,EAAE,CAAC,0BAA0B,EAAE,2BAA2B,CAAC;IACnF,gBAAgB,EAAE,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;IAChE,QAAQ,EAAE,EAAE,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC/C,cAAc,EAAE,EAAE,CAAC,iBAAiB,EAAE,8BAA8B,CAAC;IACrE,aAAa,EAAE,EAAE,CAAC,gBAAgB,EAAE,uCAAuC,CAAC;IAC5E,iBAAiB,EAAE,EAAE,CAAC,oBAAoB,EAAE,0CAA0C,CAAC;IACvF,+CAA+C;IAC/C,gBAAgB,EAAE,EAAE,CAAC,oBAAoB,EAAE,qCAAqC,CAAC;IACjF,qBAAqB,EAAE,EAAE,CACvB,yBAAyB,EACzB,iFAAiF,CAClF;IACD,2EAA2E;IAC3E,sBAAsB,EAAE,EAAE,CACxB,0BAA0B,EAC1B,8CAA8C,CAC/C;IACD,qBAAqB,EAAE,EAAE,CAAC,yBAAyB,EAAE,uCAAuC,CAAC;IAC7F,+FAA+F;IAC/F,oBAAoB,EAAE,EAAE,CACtB,wBAAwB,EACxB,qEAAqE,CACtE;IACD,6DAA6D;IAC7D,qBAAqB,EAAE,EAAE,CAAC,yBAAyB,EAAE,uCAAuC,CAAC;IAC7F,yCAAyC;IACzC,kBAAkB,EAAE,EAAE,CACpB,qBAAqB,EACrB,+DAA+D,CAChE;IACD,kDAAkD;IAClD,OAAO,EAAE,EAAE,CAAC,SAAS,EAAE,6BAA6B,CAAC;IACrD,8FAA8F;IAC9F,eAAe,EAAE,EAAE,CAAC,kBAAkB,EAAE,iCAAiC,CAAC;CAClE,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAoEA,MAAM,SAAS,GAA2B,IAAI,GAAG,CAAY;IAC3D,uBAAuB;IACvB,WAAW;IACX,UAAU;IACV,gBAAgB;IAChB,oEAAoE;IACpE,yBAAyB;IACzB,2FAA2F;IAC3F,0BAA0B;IAC1B,mBAAmB;IACnB,oBAAoB;IACpB,gGAAgG;IAChG,SAAS;CACV,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,QAAQ,GAAqC;IACjD,4BAA4B;IAC5B,YAAY,EACV,oFAAoF;IACtF,SAAS,EACP,gKAAgK;IAClK,gBAAgB,EACd,iJAAiJ;IACnJ,SAAS,EACP,mKAAmK;IACrK,eAAe,EACb,sGAAsG;IACxG,QAAQ,EAAE,yEAAyE;IACnF,wBAAwB,EACtB,4HAA4H;IAC9H,qBAAqB,EACnB,8HAA8H;IAChI,6FAA6F;IAC7F,gFAAgF;IAChF,eAAe,EACb,iNAAiN;IACnN,cAAc,EACZ,qHAAqH;IACvH,QAAQ,EACN,yJAAyJ;IAC3J,SAAS,EACP,gJAAgJ;IAClJ,SAAS,EACP,8IAA8I;IAChJ,kBAAkB,EAChB,mJAAmJ;IACrJ,QAAQ,EACN,sIAAsI;IACxI,2BAA2B;IAC3B,cAAc,EACZ,0HAA0H;IAC5H,YAAY,EACV,+HAA+H;IACjI,cAAc,EACZ,wIAAwI;IAC1I,UAAU,EACR,sIAAsI;IACxI,cAAc,EACZ,yHAAyH;IAC3H,WAAW,EACT,sHAAsH;IACxH,uBAAuB,EACrB,yJAAyJ;IAC3J,aAAa,EACX,yGAAyG;IAC3G,cAAc,EACZ,mHAAmH;IACrH,qCAAqC;IACrC,wBAAwB,EACtB,sKAAsK;IACxK,iBAAiB,EACf,8IAA8I;IAChJ,SAAS,EACP,6GAA6G;IAC/G,eAAe,EACb,oHAAoH;IACtH,cAAc,EACZ,oJAAoJ;IACtJ,kBAAkB,EAChB,sIAAsI;IACxI,2BAA2B;IAC3B,kBAAkB,EAChB,6GAA6G;IAC/G,uBAAuB,EACrB,gKAAgK;IAClK,wBAAwB;IACxB,wBAAwB,EACtB,mIAAmI;IACrI,uBAAuB,EACrB,gJAAgJ;IAClJ,cAAc;IACd,sBAAsB,EACpB,0JAA0J;IAC5J,WAAW;IACX,uBAAuB,EACrB,0JAA0J;IAC5J,WAAW;IACX,mBAAmB,EACjB,8HAA8H;IAChI,gEAAgE;IAChE,qBAAqB,EACnB,oNAAoN;IACtN,gDAAgD;IAChD,OAAO,EACL,6KAA6K;IAC/K,6DAA6D;IAC7D,gBAAgB,EACd,2PAA2P;IAC7P,qFAAqF;IACrF,eAAe,EACb,oQAAoQ;CACvQ,CAAC;AAEF,+EAA+E;AAC/E,MAAM,UAAU,WAAW,CAAC,IAAe;IACzC,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;AACrC,CAAC;AAWD,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAC/B,IAAI,CAAY;IAChB,OAAO,CAA2B;IAClC,SAAS,CAAU;IAE5B,YAAY,IAAe,EAAE,OAAe,EAAE,OAAiC;QAC7E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;IAED,MAAM;QACJ,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClC,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,aAAa,CAAC,CAAU;IACtC,OAAO,CAAC,YAAY,eAAe,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACjF,CAAC;AAGD,MAAM,EAAE,GACN,CAAC,IAAe,EAAE,QAAgB,EAAM,EAAE,CAC1C,CAAC,OAAO,GAAG,QAAQ,EAAE,OAAQ,EAAE,EAAE,CAC/B,IAAI,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAEhD,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,KAAK;IACL,YAAY,EAAE,EAAE,CAAC,cAAc,EAAE,yBAAyB,CAAC;IAC3D,SAAS,EAAE,EAAE,CAAC,WAAW,EAAE,qBAAqB,CAAC;IACjD,UAAU,EAAE,EAAE,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;IAC7D,QAAQ,EAAE,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;IACtC,aAAa,EAAE,EAAE,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IACvD,QAAQ,EAAE,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;IACpC,cAAc,EAAE,EAAE,CAAC,iBAAiB,EAAE,6BAA6B,CAAC;IACpE,aAAa,EAAE,EAAE,CAAC,gBAAgB,EAAE,iCAAiC,CAAC;IACtE,QAAQ,EAAE,EAAE,CAAC,UAAU,EAAE,8BAA8B,CAAC;IACxD,SAAS,EAAE,EAAE,CAAC,WAAW,EAAE,qBAAqB,CAAC;IACjD,QAAQ,EAAE,EAAE,CAAC,WAAW,EAAE,6BAA6B,CAAC;IACxD,QAAQ,EAAE,EAAE,CAAC,UAAU,EAAE,gBAAgB,CAAC;IAC1C,KAAK;IACL,YAAY,EAAE,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IACpD,WAAW,EAAE,EAAE,CAAC,cAAc,EAAE,iBAAiB,CAAC;IAClD,aAAa,EAAE,EAAE,CAAC,gBAAgB,EAAE,iCAAiC,CAAC;IACtE,SAAS,EAAE,EAAE,CAAC,YAAY,EAAE,2BAA2B,CAAC;IACxD,YAAY,EAAE,EAAE,CAAC,gBAAgB,EAAE,4BAA4B,CAAC;IAChE,UAAU,EAAE,EAAE,CAAC,aAAa,EAAE,qBAAqB,CAAC;IACpD,sBAAsB,EAAE,EAAE,CAAC,yBAAyB,EAAE,gCAAgC,CAAC;IACvF,YAAY,EAAE,EAAE,CAAC,eAAe,EAAE,eAAe,CAAC;IAClD,aAAa,EAAE,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IACrD,mDAAmD;IACnD,sBAAsB,EAAE,EAAE,CAAC,0BAA0B,EAAE,2BAA2B,CAAC;IACnF,gBAAgB,EAAE,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;IAChE,QAAQ,EAAE,EAAE,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC/C,cAAc,EAAE,EAAE,CAAC,iBAAiB,EAAE,8BAA8B,CAAC;IACrE,aAAa,EAAE,EAAE,CAAC,gBAAgB,EAAE,uCAAuC,CAAC;IAC5E,iBAAiB,EAAE,EAAE,CAAC,oBAAoB,EAAE,0CAA0C,CAAC;IACvF,+CAA+C;IAC/C,gBAAgB,EAAE,EAAE,CAAC,oBAAoB,EAAE,qCAAqC,CAAC;IACjF,qBAAqB,EAAE,EAAE,CACvB,yBAAyB,EACzB,iFAAiF,CAClF;IACD,2EAA2E;IAC3E,sBAAsB,EAAE,EAAE,CACxB,0BAA0B,EAC1B,8CAA8C,CAC/C;IACD,qBAAqB,EAAE,EAAE,CAAC,yBAAyB,EAAE,uCAAuC,CAAC;IAC7F,+FAA+F;IAC/F,oBAAoB,EAAE,EAAE,CACtB,wBAAwB,EACxB,qEAAqE,CACtE;IACD,6DAA6D;IAC7D,qBAAqB,EAAE,EAAE,CAAC,yBAAyB,EAAE,uCAAuC,CAAC;IAC7F,yCAAyC;IACzC,kBAAkB,EAAE,EAAE,CACpB,qBAAqB,EACrB,+DAA+D,CAChE;IACD,kDAAkD;IAClD,OAAO,EAAE,EAAE,CAAC,SAAS,EAAE,6BAA6B,CAAC;IACrD,8FAA8F;IAC9F,eAAe,EAAE,EAAE,CAAC,kBAAkB,EAAE,iCAAiC,CAAC;CAClE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@the-40-thieves/obsidian-tc-shared",
-  "version": "1.24.0",
+  "version": "1.26.0",
   "description": "Shared Zod schemas and types for obsidian-tc",
   "license": "AGPL-3.0-only",
   "type": "module",