@the-40-thieves/obsidian-tc-shared 1.31.3 → 1.31.4

package/dist/config/indexing-embeddings.schema.d.ts

@@ -1,4 +1,20 @@
 import { z } from "zod";
+/** THE-1122 review (item 7): each "local" catalog entry's native vector width, duplicated from
+ *  packages/embedder-local/src/model-info.ts for the SAME reason LOCAL_DEFAULT_MODEL above is
+ *  duplicated rather than imported (this schema leaf cannot depend on that optional, Node-fs-
+ *  shaped package — see this file's own header). Kept in sync by the same mechanism:
+ *  embedder-local's own test/model-info.test.ts pins each catalog entry's real `dimensions`, so a
+ *  future catalog change that drifts from this map is caught there, not only by this comment.
+ *
+ *  Exported for packages/server/src/config/load.ts's finalizeConfig, which uses this to (a)
+ *  DERIVE `embeddings.dimensions` when a "local" config omits it (this schema's own `dimensions`
+ *  default is a PROVIDER-AGNOSTIC 768 — see LOCAL_DEFAULT_MODEL's comment above for why it cannot
+ *  be provider-conditional at the schema level — so a config selecting a 384-dim catalog entry
+ *  with no explicit `dimensions` would otherwise silently inherit the wrong width and crash later
+ *  at vec0 column-width mismatch), and (b) REJECT an explicit `dimensions` that contradicts the
+ *  selected model's real width, naming both numbers, rather than letting that surface as an opaque
+ *  failure far from the config that caused it. */
+export declare const LOCAL_CATALOG_DIMENSIONS: Readonly<Record<string, number>>;
 export declare const EmbeddingsConfigSchema: z.ZodObject<{
     provider: z.ZodDefault<z.ZodString>;
     model: z.ZodDefault<z.ZodString>;
@@ -32,6 +48,8 @@ export declare const EmbeddingsConfigSchema: z.ZodObject<{
             dimensions: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
+    quantized: z.ZodDefault<z.ZodBoolean>;
+    threads: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
 export declare const IndexingConfigSchema: z.ZodPrefault<z.ZodObject<{
     writeConcurrency: z.ZodDefault<z.ZodNumber>;

package/dist/config/indexing-embeddings.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"indexing-embeddings.schema.d.ts","sourceRoot":"","sources":["../../src/config/indexing-embeddings.schema.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAqMjC,CAAC;AAOH,eAAO,MAAM,oBAAoB;;;;;;kBA8DlB,CAAC;AAChB,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}
+{"version":3,"file":"indexing-embeddings.schema.d.ts","sourceRoot":"","sources":["../../src/config/indexing-embeddings.schema.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAoCxB;;;;;;;;;;;;;;kDAckD;AAClD,eAAO,MAAM,wBAAwB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAIrE,CAAC;AAEF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuNjC,CAAC;AAOH,eAAO,MAAM,oBAAoB;;;;;;kBA8DlB,CAAC;AAChB,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/config/indexing-embeddings.schema.js

@@ -6,22 +6,76 @@
 // `.prefault({})` (a default-application combinator, not a `.refine`/`.superRefine`) — there is
 // no cross-domain field read to keep back in config.schema.ts, so the whole schema moves here.
 import { z } from "zod";
+// THE-1122: `LOCAL_DEFAULT_MODEL` MUST stay in sync with packages/embedder-local/src/model-info.ts's
+// DEFAULT_MODEL_NAME — this file cannot import that optional, non-workspace package (it is
+// Node-fs- and network-shaped; this schema leaf is isomorphic and imports Zod only, see the file
+// header). embedder-local's own test/model-info.test.ts pins its DEFAULT_MODEL_NAME to the same
+// literal string, so a future change to one side is caught by that test, not just by this comment.
+//
+// NOT the smallest/fastest catalog entry — measured, not assumed, each model with its own
+// correct pooling strategy (docs/EVALUATION.md's "Local embedder model selection"). Both 384-dim
+// candidates FAILED the −0.015 non-inferiority floor against this exact model — MiniLM's deficit
+// is real and clearly detected; bge-small's nDCG@10 does not reach conventional significance at
+// this n, so read that one number as non-inferiority not established at this corpus's resolution
+// rather than a pass (its recall@10 IS significant, and it still fails the floor either way).
+// nomic-embed-text-v1.5 is the default as the conservative choice under this underpowered
+// comparison, not a claimed decisive win — see model-info.ts's own comment on DEFAULT_MODEL_NAME
+// for the exact numbers.
+//
+// WHY THIS IS A PLAIN UNCONDITIONAL DEFAULT, NOT PROVIDER-CONDITIONAL: an earlier version of this
+// change made `model`/`dimensions` default based on `provider` via a schema-level `.transform()`.
+// That broke scripts/docgen/extract-config.ts's hand-rolled Zod introspection walker (it requires
+// every nested config section to literally be `def.type === "object"` with a `.shape` to recurse
+// into it; a `.transform()` turns the schema into a ZodPipe, and the WHOLE `embeddings` subtree
+// silently vanished from generated docs — caught by test/docgen-config.test.ts, not by inspection).
+// The plain default below is the one-line fix: `provider`/`model`/`dimensions` keep the exact
+// unconditional-default shape every OTHER field in this schema already has. The one behavioural
+// cost: `{ "provider": "ollama" }` with no `model` now resolves `model` to "nomic-embed-text-v1.5"
+// (the new schema default) rather than the old "nomic-embed-text" (no version suffix — Ollama's
+// own tag name) — Ollama then 404s LOUDLY on a model it was never asked to pull, rather than
+// silently misconfiguring anything (the two happen to share `dimensions: 768`, so that half is
+// unaffected). This shorthand (provider set, model omitted) was never actually documented
+// anywhere in this repo's own config examples, which always pair `"provider": "ollama"` with an
+// explicit `"model"` — see docs/src/content/docs/configuration/config-yaml.md and
+// docs/wiki/Configuration.md.
+const LOCAL_DEFAULT_MODEL = "nomic-embed-text-v1.5";
+/** THE-1122 review (item 7): each "local" catalog entry's native vector width, duplicated from
+ *  packages/embedder-local/src/model-info.ts for the SAME reason LOCAL_DEFAULT_MODEL above is
+ *  duplicated rather than imported (this schema leaf cannot depend on that optional, Node-fs-
+ *  shaped package — see this file's own header). Kept in sync by the same mechanism:
+ *  embedder-local's own test/model-info.test.ts pins each catalog entry's real `dimensions`, so a
+ *  future catalog change that drifts from this map is caught there, not only by this comment.
+ *
+ *  Exported for packages/server/src/config/load.ts's finalizeConfig, which uses this to (a)
+ *  DERIVE `embeddings.dimensions` when a "local" config omits it (this schema's own `dimensions`
+ *  default is a PROVIDER-AGNOSTIC 768 — see LOCAL_DEFAULT_MODEL's comment above for why it cannot
+ *  be provider-conditional at the schema level — so a config selecting a 384-dim catalog entry
+ *  with no explicit `dimensions` would otherwise silently inherit the wrong width and crash later
+ *  at vec0 column-width mismatch), and (b) REJECT an explicit `dimensions` that contradicts the
+ *  selected model's real width, naming both numbers, rather than letting that surface as an opaque
+ *  failure far from the config that caused it. */
+export const LOCAL_CATALOG_DIMENSIONS = {
+    "all-MiniLM-L6-v2": 384,
+    "bge-small-en-v1.5": 384,
+    "nomic-embed-text-v1.5": 768,
+};
 export const EmbeddingsConfigSchema = z.object({
     provider: z
         .string()
         .min(1)
-        .default("ollama")
-        .describe("Embeddings backend name, resolved against the provider registry at startup. Built-ins: ollama, openai, voyage, cohere, bge-m3, model-tier (splits dense and multi-vector across two services), the generic openai-compatible, and the profile-gated module. An unregistered name is a startup error listing every valid option."),
+        .default("local")
+        .describe("Embeddings backend name, resolved against the provider registry at startup. Built-ins: local (a bundled, fully offline dense embedder via the optional @the-40-thieves/obsidian-tc-embedder-local package; no network, no Ollama, no API key), ollama, openai, voyage, cohere, bge-m3, model-tier (splits dense and multi-vector across two services), the generic openai-compatible, and the profile-gated module. `local` is the DEFAULT when this whole block is absent — semantic search works with zero configuration. An unregistered name is a startup error listing every valid option."),
     model: z
         .string()
-        .default("nomic-embed-text")
-        .describe("Embedding model name as the provider names it."),
+        .min(1)
+        .default(LOCAL_DEFAULT_MODEL)
+        .describe('Embedding model name as the provider names it. Defaults to nomic-embed-text-v1.5, the "local" provider\'s default catalog entry — set this explicitly for every other provider. Under provider "local" this MUST be one of embedder-local\'s pinned catalog names (all-MiniLM-L6-v2, bge-small-en-v1.5, nomic-embed-text-v1.5) — an unrecognized name is refused, since the local provider only ever loads checksum-verified weights it has a pinned manifest for.'),
     dimensions: z
         .number()
         .int()
         .positive()
         .default(768)
-        .describe("Stored vector width, and the width of the vec0 column. Changing it requires a fresh index — existing vectors are not re-projected."),
+        .describe("Stored vector width, and the width of the vec0 column. Changing it requires a fresh index — existing vectors are not re-projected. Defaults to 768, nomic-embed-text-v1.5's native width (the \"local\" provider's default model) — set this explicitly to match whatever model you configure (e.g. 384 for the smaller local catalog entries)."),
     baseUrl: z
         .string()
         .url()
@@ -167,6 +221,17 @@ export const EmbeddingsConfigSchema = z.object({
     })
         .optional()
         .describe("Polyglot model tier: dense retrieval from one service and sparse/ColBERT from another, fused by RRF on ranks. Required when provider is model-tier."),
+    // THE-1122: only read by provider "local".
+    quantized: z
+        .boolean()
+        .default(true)
+        .describe('provider "local" only. true (default) loads the pinned q8 (int8) quantized ONNX export; false loads the pinned fp32 export instead — larger, slower, marginally more precise. Both are separately checksum-verified; toggling this re-downloads the other variant on first use if it is not already cached.'),
+    threads: z
+        .number()
+        .int()
+        .positive()
+        .optional()
+        .describe('provider "local" only. onnxruntime-node intra-/inter-op thread count. Absent lets the runtime pick its own default (usually the CPU core count).'),
 });
 // THE-458 (audit #5): index-on-write coordinator concurrency + backpressure. Fully defaulted so a
 // config predating it validates unchanged. `writeConcurrency` bounds concurrent index/embed calls

package/dist/config/indexing-embeddings.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"indexing-embeddings.schema.js","sourceRoot":"","sources":["../../src/config/indexing-embeddings.schema.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,2FAA2F;AAC3F,EAAE;AACF,oFAAoF;AACpF,iFAAiF;AACjF,gGAAgG;AAChG,+FAA+F;AAC/F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,OAAO,CAAC,QAAQ,CAAC;SACjB,QAAQ,CACP,iUAAiU,CAClU;IACH,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,OAAO,CAAC,kBAAkB,CAAC;SAC3B,QAAQ,CAAC,gDAAgD,CAAC;IAC7D,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,GAAG,CAAC;SACZ,QAAQ,CACP,oIAAoI,CACrI;IACH,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CACP,oGAAoG,CACrG;IACH,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,gEAAgE,CAAC;IAC7E,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,8LAA8L,CAC/L;IACH,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,8oBAA8oB,CAC/oB;IACH,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,+TAA+T,CAChU;IACH,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,6WAA6W,CAC9W;IACH,gGAAgG;IAChG,uFAAuF;IACvF,gGAAgG;IAChG,kGAAkG;IAClG,+FAA+F;IAC/F,qGAAqG;IACrG,+FAA+F;IAC/F,+FAA+F;IAC/F,+FAA+F;IAC/F,8FAA8F;IAC9F,6DAA6D;IAC7D,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,MAAM,CAAC;SACf,QAAQ,CACP,gHAAgH,CACjH;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IACjG,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,wTAAwT,CACzT;IACH,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,CAAC,CAAC;SACV,QAAQ,CAAC,gDAAgD,CAAC;IAC7D,6FAA6F;IAC7F,iGAAiG;IACjG,kGAAkG;IAClG,8EAA8E;IAC9E,QAAQ,EAAE,CAAC;SACR,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,mPAAmP,CACpP;IACH;;;;;;;;uCAQmC;IACnC,YAAY,EAAE,CAAC;SACZ,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,+TAA+T,CAChU;IACH;;;;;;+DAM2D;IAC3D,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,uJAAuJ,CACxJ;IACH,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,mNAAmN,CACpN;IACH;;;2EAGuE;IACvE,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,KAAK,EAAE,CAAC;aACL,MAAM,CAAC;YACN,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,CAAC,+DAA+D,CAAC;YAC5E,KAAK,EAAE,CAAC;iBACL,MAAM,EAAE;iBACR,OAAO,CAAC,2BAA2B,CAAC;iBACpC,QAAQ,CAAC,qEAAqE,CAAC;YAClF,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,4PAA4P,CAC7P;YACH,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,OAAO,CAAC,YAAY,CAAC;iBACrB,QAAQ,CAAC,uCAAuC,CAAC;SACrD,CAAC;aACD,QAAQ,CAAC,+EAA+E,CAAC;QAC5F,IAAI,EAAE,CAAC;aACJ,MAAM,CAAC;YACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;YACpF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;YAC3E,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,mQAAmQ,CACpQ;YACH,SAAS,EAAE,CAAC;iBACT,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,oDAAoD,CAAC;YACjE,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,EAAE;iBACV,OAAO,CAAC,IAAI,CAAC;iBACb,QAAQ,CACP,6EAA6E,CAC9E;SACJ,CAAC;aACD,QAAQ,EAAE;aACV,QAAQ,CACP,gHAAgH,CACjH;KACJ,CAAC;SACD,QAAQ,EAAE;SACV,QAAQ,CACP,qJAAqJ,CACtJ;CACJ,CAAC,CAAC;AAEH,kGAAkG;AAClG,kGAAkG;AAClG,8FAA8F;AAC9F,qGAAqG;AACrG,sBAAsB;AACtB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,CAAC,CAAC;SACV,QAAQ,CAAC,4DAA4D,CAAC;IACzE,wBAAwB,EAAE,CAAC;SACxB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,CAAC,CAAC;SACV,QAAQ,CAAC,6DAA6D,CAAC;IAC1E,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,8HAA8H,CAC/H;IACH;;;;;;wFAMoF;IACpF,aAAa,EAAE,CAAC;SACb,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,2MAA2M,CAC5M;IACH;;;;;;;;;;;;;;;;+FAgB2F;IAC3F,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,EAAE,CAAC;SACP,GAAG,CAAC,IAAI,CAAC;SACT,OAAO,CAAC,GAAG,CAAC;SACZ,QAAQ,CACP,8UAA8U,CAC/U;CACJ,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC"}
+{"version":3,"file":"indexing-embeddings.schema.js","sourceRoot":"","sources":["../../src/config/indexing-embeddings.schema.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,2FAA2F;AAC3F,EAAE;AACF,oFAAoF;AACpF,iFAAiF;AACjF,gGAAgG;AAChG,+FAA+F;AAC/F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,qGAAqG;AACrG,2FAA2F;AAC3F,iGAAiG;AACjG,gGAAgG;AAChG,mGAAmG;AACnG,EAAE;AACF,0FAA0F;AAC1F,iGAAiG;AACjG,iGAAiG;AACjG,gGAAgG;AAChG,iGAAiG;AACjG,8FAA8F;AAC9F,0FAA0F;AAC1F,iGAAiG;AACjG,yBAAyB;AACzB,EAAE;AACF,kGAAkG;AAClG,kGAAkG;AAClG,kGAAkG;AAClG,iGAAiG;AACjG,gGAAgG;AAChG,oGAAoG;AACpG,8FAA8F;AAC9F,gGAAgG;AAChG,mGAAmG;AACnG,gGAAgG;AAChG,6FAA6F;AAC7F,+FAA+F;AAC/F,0FAA0F;AAC1F,gGAAgG;AAChG,kFAAkF;AAClF,8BAA8B;AAC9B,MAAM,mBAAmB,GAAG,uBAAuB,CAAC;AAEpD;;;;;;;;;;;;;;kDAckD;AAClD,MAAM,CAAC,MAAM,wBAAwB,GAAqC;IACxE,kBAAkB,EAAE,GAAG;IACvB,mBAAmB,EAAE,GAAG;IACxB,uBAAuB,EAAE,GAAG;CAC7B,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,OAAO,CAAC,OAAO,CAAC;SAChB,QAAQ,CACP,ikBAAikB,CAClkB;IACH,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,OAAO,CAAC,mBAAmB,CAAC;SAC5B,QAAQ,CACP,ocAAoc,CACrc;IACH,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,GAAG,CAAC;SACZ,QAAQ,CACP,iVAAiV,CAClV;IACH,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CACP,oGAAoG,CACrG;IACH,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,gEAAgE,CAAC;IAC7E,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,8LAA8L,CAC/L;IACH,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,8oBAA8oB,CAC/oB;IACH,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,+TAA+T,CAChU;IACH,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,6WAA6W,CAC9W;IACH,gGAAgG;IAChG,uFAAuF;IACvF,gGAAgG;IAChG,kGAAkG;IAClG,+FAA+F;IAC/F,qGAAqG;IACrG,+FAA+F;IAC/F,+FAA+F;IAC/F,+FAA+F;IAC/F,8FAA8F;IAC9F,6DAA6D;IAC7D,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,MAAM,CAAC;SACf,QAAQ,CACP,gHAAgH,CACjH;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IACjG,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,wTAAwT,CACzT;IACH,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,CAAC,CAAC;SACV,QAAQ,CAAC,gDAAgD,CAAC;IAC7D,6FAA6F;IAC7F,iGAAiG;IACjG,kGAAkG;IAClG,8EAA8E;IAC9E,QAAQ,EAAE,CAAC;SACR,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,mPAAmP,CACpP;IACH;;;;;;;;uCAQmC;IACnC,YAAY,EAAE,CAAC;SACZ,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,+TAA+T,CAChU;IACH;;;;;;+DAM2D;IAC3D,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,uJAAuJ,CACxJ;IACH,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,mNAAmN,CACpN;IACH;;;2EAGuE;IACvE,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,KAAK,EAAE,CAAC;aACL,MAAM,CAAC;YACN,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,CAAC,+DAA+D,CAAC;YAC5E,KAAK,EAAE,CAAC;iBACL,MAAM,EAAE;iBACR,OAAO,CAAC,2BAA2B,CAAC;iBACpC,QAAQ,CAAC,qEAAqE,CAAC;YAClF,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,4PAA4P,CAC7P;YACH,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,OAAO,CAAC,YAAY,CAAC;iBACrB,QAAQ,CAAC,uCAAuC,CAAC;SACrD,CAAC;aACD,QAAQ,CAAC,+EAA+E,CAAC;QAC5F,IAAI,EAAE,CAAC;aACJ,MAAM,CAAC;YACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;YACpF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;YAC3E,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,mQAAmQ,CACpQ;YACH,SAAS,EAAE,CAAC;iBACT,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,oDAAoD,CAAC;YACjE,UAAU,EAAE,CAAC;iBACV,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,QAAQ,EAAE;iBACV,OAAO,CAAC,IAAI,CAAC;iBACb,QAAQ,CACP,6EAA6E,CAC9E;SACJ,CAAC;aACD,QAAQ,EAAE;aACV,QAAQ,CACP,gHAAgH,CACjH;KACJ,CAAC;SACD,QAAQ,EAAE;SACV,QAAQ,CACP,qJAAqJ,CACtJ;IACH,2CAA2C;IAC3C,SAAS,EAAE,CAAC;SACT,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,6SAA6S,CAC9S;IACH,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CACP,kJAAkJ,CACnJ;CACJ,CAAC,CAAC;AAEH,kGAAkG;AAClG,kGAAkG;AAClG,8FAA8F;AAC9F,qGAAqG;AACrG,sBAAsB;AACtB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,CAAC,CAAC;SACV,QAAQ,CAAC,4DAA4D,CAAC;IACzE,wBAAwB,EAAE,CAAC;SACxB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,CAAC,CAAC;SACV,QAAQ,CAAC,6DAA6D,CAAC;IAC1E,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,8HAA8H,CAC/H;IACH;;;;;;wFAMoF;IACpF,aAAa,EAAE,CAAC;SACb,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,2MAA2M,CAC5M;IACH;;;;;;;;;;;;;;;;+FAgB2F;IAC3F,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,EAAE,CAAC;SACP,GAAG,CAAC,IAAI,CAAC;SACT,OAAO,CAAC,GAAG,CAAC;SACZ,QAAQ,CACP,8UAA8U,CAC/U;CACJ,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC"}

package/dist/config/observability.schema.d.ts

@@ -84,4 +84,10 @@ export declare const ReadwiseConfigSchema: z.ZodObject<{
 export declare const PensieveConfigSchema: z.ZodObject<{
     baseUrl: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
+export declare const TelemetryConfigSchema: z.ZodPrefault<z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    endpoint: z.ZodOptional<z.ZodString>;
+    intervalMinutes: z.ZodDefault<z.ZodNumber>;
+    authTokenEnv: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>;
 //# sourceMappingURL=observability.schema.d.ts.map

package/dist/config/observability.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"observability.schema.d.ts","sourceRoot":"","sources":["../../src/config/observability.schema.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;iBA8EpC,CAAC;AAGH,eAAO,MAAM,qBAAqB;;;kBAgBnB,CAAC;AAGhB,eAAO,MAAM,uBAAuB;;;;;;;;kBAoErB,CAAC;AAOhB,eAAO,MAAM,iBAAiB;;;kBAiBf,CAAC;AAWhB,eAAO,MAAM,qBAAqB;;kBAWnB,CAAC;AAgBhB,eAAO,MAAM,iBAAiB;;;;;;kBAuCf,CAAC;AAUhB;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAIrE;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAOvE;AAED,eAAO,MAAM,kBAAkB;;kBAchB,CAAC;AAUhB,eAAO,MAAM,gBAAgB;;;;;;iBAgC3B,CAAC;AAOH,eAAO,MAAM,oBAAoB;;iBAO/B,CAAC;AASH,eAAO,MAAM,oBAAoB;;iBAO/B,CAAC"}
+{"version":3,"file":"observability.schema.d.ts","sourceRoot":"","sources":["../../src/config/observability.schema.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;iBA8EpC,CAAC;AAGH,eAAO,MAAM,qBAAqB;;;kBAgBnB,CAAC;AAGhB,eAAO,MAAM,uBAAuB;;;;;;;;kBAoErB,CAAC;AAOhB,eAAO,MAAM,iBAAiB;;;kBAiBf,CAAC;AAWhB,eAAO,MAAM,qBAAqB;;kBAWnB,CAAC;AAgBhB,eAAO,MAAM,iBAAiB;;;;;;kBAuCf,CAAC;AAUhB;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAIrE;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAOvE;AAED,eAAO,MAAM,kBAAkB;;kBAchB,CAAC;AAUhB,eAAO,MAAM,gBAAgB;;;;;;iBAgC3B,CAAC;AAOH,eAAO,MAAM,oBAAoB;;iBAO/B,CAAC;AASH,eAAO,MAAM,oBAAoB;;iBAO/B,CAAC;AAIH,eAAO,MAAM,qBAAqB;;;;;kBAqFnB,CAAC"}

package/dist/config/observability.schema.js

@@ -1,16 +1,16 @@
 // WP1.6: extracted from ../config.schema.ts (which stays a compatibility facade re-exporting
-// these same symbol names). Leaf schema — imports Zod only, no shared scalars needed here.
+// these same symbol names). Leaf schema — imports Zod plus net-host.ts (a shared scalar helper,
+// not a schema module; retrieval.schema.ts's judge.baseUrl sets this precedent).
 //
 // Import direction is non-negotiable: this file must never import config.schema.ts,
-// server.schema.ts, or any other schema module. All seven schemas below chain only
-// `.prefault({})` (a default-application combinator, not a `.refine`/`.superRefine`) or nothing
-// at all — there is no cross-domain field read to keep back in config.schema.ts, so all move
-// here whole.
+// server.schema.ts, or any other schema module. Every schema below chains only `.prefault({})`
+// or a SELF-CONTAINED `.superRefine`/`.refine` reading only its own fields (EgressConfigSchema's
+// pattern refusal, TelemetryConfigSchema's enabled-requires-endpoint check below) — no cross-domain read.
 //
-// The http/auth interlock (ServerConfigSchema.superRefine) is NOT here — it reads
-// cfg.transports.http together with cfg.auth, which live in runtime.schema.ts and
-// auth-acl.schema.ts respectively, so it is cross-domain and stays in config.schema.ts.
+// The http/auth interlock (ServerConfigSchema.superRefine) is NOT here — cross-domain
+// (cfg.transports.http + cfg.auth), so it stays in config.schema.ts.
 import { z } from "zod";
+import { classifyJudgeBaseUrl, isDisallowedLiteralHost, isLoopbackHost } from "../net-host";
 export const ObservabilityConfigSchema = z.object({
     // traceDetail / tracesSampleRate were declared here and read by NOTHING: no sampling was ever applied
     // and no detail switch existed. Removed rather than left as a lie in a schema operators trust. Re-add
@@ -77,7 +77,7 @@ export const ObservabilityConfigSchema = z.object({
             .int()
             .positive()
             .default(30)
-            .describe("Days of workspace session trace files (<vault>/<traceFolder>/*.jsonl) kept by the maintenance sweep. Traces are per-vault and live INSIDE the vault, so they are also picked up by whatever syncs or backs it up. Orphans from a failed start_session are pruned by the same age rule (THE-572 writes the trace before the session row, so a failed attempt leaves a file with no row referencing it)."),
+            .describe("Days of workspace session trace files (<vault>/<traceFolder>/*.jsonl) kept by the maintenance sweep. Traces are per-vault and live INSIDE the vault, so they are also picked up by whatever syncs or backs it up. Orphans from a failed start_session are pruned by the same age rule (the trace is written before the session row, so a failed attempt leaves a file with no row referencing it)."),
     })
         .prefault({})
         .describe("Retention policy for locally stored observability data."),
@@ -215,7 +215,7 @@ export const PlaneConfigSchema = z
     enabled: z
         .boolean()
         .default(false)
-        .describe("Run ambient sleep-time consolidation (synthesis and audit jobs). Only meaningful when the inference gateway roles are configured. Opt-in (THE-825): a deployment with a gateway configured and this key unset gets a boot-time notice explaining how to turn it on."),
+        .describe("Run ambient sleep-time consolidation (synthesis and audit jobs). Only meaningful when the inference gateway roles are configured. Opt-in: a deployment with a gateway configured and this key unset gets a boot-time notice explaining how to turn it on."),
     intervalMinutes: z
         .number()
         .int()
@@ -227,7 +227,7 @@ export const PlaneConfigSchema = z
         .int()
         .positive()
         .default(6)
-        .describe("Attempts a consolidation job's gateway call may make before failing, each with its own fresh timeout. Higher than the interactive default (3) because the models behind the gateway roles may be serverless and scale to zero: a cold start measured at over 180s exceeded 3 attempts x 60s, so every scheduled pass failed with a timeout while the same request against a warm endpoint took 4.8s. Separate from the interactive path on purpose: a multi-minute budget suits a background weekly pass and not a user-facing call. NOTE (THE-709): attempts alone were not sufficient — retries only help a TRANSIENT failure, and a request that deterministically exceeds the per-attempt timeout fails identically on every attempt. See planeGatewayTimeoutMs, which is the knob for that case."),
+        .describe("Attempts a consolidation job's gateway call may make before failing, each with its own fresh timeout. Higher than the interactive default (3) because the models behind the gateway roles may be serverless and scale to zero: a cold start measured at over 180s exceeded 3 attempts x 60s, so every scheduled pass failed with a timeout while the same request against a warm endpoint took 4.8s. Separate from the interactive path on purpose: a multi-minute budget suits a background weekly pass and not a user-facing call. NOTE: attempts alone were not sufficient — retries only help a TRANSIENT failure, and a request that deterministically exceeds the per-attempt timeout fails identically on every attempt. See planeGatewayTimeoutMs, which is the knob for that case."),
     gatewayTimeoutMs: z
         .number()
         .int()
@@ -239,7 +239,7 @@ export const PlaneConfigSchema = z
         .int()
         .positive()
         .default(45535)
-        .describe("Aggregate character cap on a consolidation job's WHOLE gateway request (system prompt + user message). Not a per-item cap: the synthesis job already truncated each chunk to 1000 chars and still built a 169,258-char prompt from 200 of them, which the serving window rejected as ContextWindowExceeded. Sized in characters, not tokens, because no tokenizer is available on this side. The default is conservative on purpose — the model behind a gateway role is swappable at the gateway, and the server does not advertise its max_model_len through the LiteLLM /v1/models passthrough, so this side cannot discover the real ceiling. THE-891 item 7: sized so every vault shape keeps the SAME ~14,554-token output reserve inside a 32768-token window, not just prose-like ones — derived from the worst-case density this job documents (code/CJK, ~2.5 chars/token): (32768 - 14554) x 2.5 = 45535 chars. A prose-dense vault (measured on a real vault at 3.294 chars/token) gets MORE reserve than this, never less. Raise it when the role points at a larger serving window."),
+        .describe("Aggregate character cap on a consolidation job's WHOLE gateway request (system prompt + user message). Not a per-item cap: the synthesis job already truncated each chunk to 1000 chars and still built a 169,258-char prompt from 200 of them, which the serving window rejected as ContextWindowExceeded. Sized in characters, not tokens, because no tokenizer is available on this side. The default is conservative on purpose — the model behind a gateway role is swappable at the gateway, and the server does not advertise its max_model_len through the LiteLLM /v1/models passthrough, so this side cannot discover the real ceiling. Sized so every vault shape keeps the SAME ~14,554-token output reserve inside a 32768-token window, not just prose-like ones — derived from the worst-case density this job documents (code/CJK, ~2.5 chars/token): (32768 - 14554) x 2.5 = 45535 chars. A prose-dense vault (measured on a real vault at 3.294 chars/token) gets MORE reserve than this, never less. Raise it when the role points at a larger serving window."),
 })
     .prefault({});
 // THE-934 — the egress boundary. `readPaths` (auth-acl.schema.ts) is a whitelist that ALSO governs
@@ -355,4 +355,82 @@ export const PensieveConfigSchema = z.object({
         .optional()
         .describe("Base URL of a Pensieve instance (e.g. http://100.x.x.x:8839, its default port), queried at `/api/search`. Pensieve's API has no auth — access control is expected at the network layer (tailscale). Absent means `import-ambient` no-ops with NO network call."),
 });
+// Opt-in, anonymous usage telemetry (THE-1125). Full disclosure: docs/configuration/telemetry.md,
+// SECURITY.md; the closed key set enforcing "never sent" lives in server/src/telemetry/document.ts.
+export const TelemetryConfigSchema = z
+    .object({
+    enabled: z
+        .boolean()
+        .default(false)
+        .describe("Opt in to anonymous usage telemetry. Off by default. Turning this on with no `endpoint` set is a CONFIG ERROR at boot (refused below), never a silent no-op — there is no default telemetry endpoint. When on, an aggregate document (never paths, note content, queries, vault ids, principals, tokens, hostnames or env) is POSTed to `endpoint` once every `intervalMinutes`, never at boot before the first interval elapses. `obsidian-tc telemetry preview` prints the exact document that would be sent right now."),
+    endpoint: z
+        .string()
+        .url()
+        .optional()
+        .describe("Collector URL the telemetry document is POSTed to. Required when `enabled` is true — refused below when absent. Must be `https://` unless the host is loopback (`localhost`/`127.0.0.1`/`[::1]`), which is allowed ONLY for tests and a locally-run reference collector; unlike experiential.citationInfer.judge.baseUrl there is no `allowPlainHttp` widening here for a remote host — a bearer token (`authTokenEnv`) and the document both travel over it, so a remote endpoint must be encrypted in transit. Must not name a literal private, link-local, carrier-grade-NAT, unspecified, or cloud-metadata IP address (loopback is the one such range that IS allowed) — a hostname that happens to resolve to one is not checked here, by design."),
+    intervalMinutes: z
+        .number()
+        .int()
+        .min(60)
+        .default(1440)
+        .describe("Minutes between telemetry sends. Minimum 60 — this is aggregate, low-frequency telemetry, not a heartbeat. The first send happens no sooner than this many minutes after boot; there is never a send at boot itself."),
+    authTokenEnv: z
+        .string()
+        .min(1)
+        .optional()
+        .describe('Name of an environment variable holding a bearer token, sent as "Authorization: Bearer <value>" on the telemetry POST. Optional — most reference collectors need no auth at all. Never put a secret in `endpoint` itself (refused below); this is the only supported way to authenticate to a collector.'),
+})
+    .superRefine((cfg, ctx) => {
+    if (cfg.enabled && cfg.endpoint === undefined) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["endpoint"],
+            message: "telemetry.enabled is true but telemetry.endpoint is not set. There is no default telemetry endpoint — obsidian-tc never phones home unless you opt in AND name a collector. Set telemetry.endpoint to the URL you want the aggregate usage document sent to, or leave telemetry.enabled false.",
+        });
+    }
+    if (cfg.endpoint !== undefined) {
+        const cls = classifyJudgeBaseUrl(cfg.endpoint);
+        if (cls === "invalid") {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["endpoint"],
+                message: 'telemetry.endpoint must be a canonical "scheme://host" URL with scheme https or http — either it could not be parsed that way, or its scheme is neither (e.g. ftp:/file:).',
+            });
+        }
+        else if (cls === "http-remote") {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["endpoint"],
+                message: "telemetry.endpoint must use https:// unless the host is loopback (localhost/127.0.0.1/[::1]) for tests or a locally-run reference collector. There is no allowPlainHttp-style widening for telemetry: a remote endpoint is always required to be https.",
+            });
+        }
+        let hasUserinfo = false;
+        try {
+            const u = new URL(cfg.endpoint);
+            hasUserinfo = u.username.length > 0 || u.password.length > 0;
+        }
+        catch { }
+        if (hasUserinfo) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["endpoint"],
+                message: "telemetry.endpoint must not contain userinfo (a username/password embedded in the URL) — the endpoint is shown by `telemetry preview`/`status`, `doctor` and `server_health`, and logged on a failed send, so a credential placed there will leak. Put a collector secret in telemetry.authTokenEnv (an environment variable name) instead; it is sent as an Authorization header and never printed or logged.",
+            });
+        }
+        // https alone does not stop a literal private/link-local/metadata host (loopback excepted).
+        let host;
+        try {
+            host = new URL(cfg.endpoint).hostname;
+        }
+        catch { }
+        if (host !== undefined && !isLoopbackHost(host) && isDisallowedLiteralHost(host)) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["endpoint"],
+                message: "telemetry.endpoint must not name a literal private, link-local, carrier-grade-NAT, unspecified, or cloud-metadata IP address — this collector would then be reachable only from inside your own network, or (for a metadata address) could reach a cloud instance's credential-issuing endpoint. Loopback (localhost/127.0.0.1/[::1]) is the one such range that stays allowed, for tests and a locally-run collector.",
+            });
+        }
+    }
+})
+    .prefault({});
 //# sourceMappingURL=observability.schema.js.map

package/dist/config/observability.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"observability.schema.js","sourceRoot":"","sources":["../../src/config/observability.schema.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,2FAA2F;AAC3F,EAAE;AACF,oFAAoF;AACpF,mFAAmF;AACnF,gGAAgG;AAChG,6FAA6F;AAC7F,cAAc;AACd,EAAE;AACF,kFAAkF;AAClF,kFAAkF;AAClF,wFAAwF;AACxF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,sGAAsG;IACtG,sGAAsG;IACtG,gDAAgD;IAChD,IAAI,EAAE,CAAC;SACJ,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,QAAQ,CAAC,6EAA6E,CAAC;QAC1F,OAAO,EAAE,CAAC;aACP,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;aAC9B,QAAQ,CAAC,EAAE,CAAC;aACZ,QAAQ,CACP,iFAAiF,CAClF;KACJ,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;SACZ,QAAQ,CAAC,6BAA6B,CAAC;IAC1C,UAAU,EAAE,CAAC;SACV,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC;QACvF,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,KAAK,CAAC;aACV,OAAO,CAAC,IAAI,CAAC;aACb,QAAQ,CAAC,0CAA0C,CAAC;QACvD,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,OAAO,CAAC,WAAW,CAAC;aACpB,QAAQ,CACP,0FAA0F,CAC3F;KACJ,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;SACZ,QAAQ,CAAC,8BAA8B,CAAC;IAC3C,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,gDAAgD,CAAC;QAC3F,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,QAAQ,CAAC,+EAA+E,CAAC;QAC5F,WAAW,EAAE,CAAC;aACX,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;aAC9B,QAAQ,CAAC,EAAE,CAAC;aACZ,QAAQ,CAAC,6DAA6D,CAAC;KAC3E,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;SACZ,QAAQ,CAAC,4BAA4B,CAAC;IACzC,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,6FAA6F;QAC7F,6FAA6F;QAC7F,8EAA8E;QAC9E,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,OAAO,CAAC,EAAE,CAAC;aACX,QAAQ,CACP,6HAA6H,CAC9H;QACH,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,OAAO,CAAC,EAAE,CAAC;aACX,QAAQ,CACP,wYAAwY,CACzY;KACJ,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;SACZ,QAAQ,CAAC,yDAAyD,CAAC;CACvE,CAAC,CAAC;AACH,8FAA8F;AAC9F,mGAAmG;AACnG,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,4MAA4M,CAC7M;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,IAAI,CAAC;SACT,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,qEAAqE,CAAC;CACnF,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAChB,6FAA6F;AAC7F,4FAA4F;AAC5F,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,+HAA+H,CAChI;IACH,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,qCAAqC,CAAC;IAClD,4FAA4F;IAC5F,sFAAsF;IACtF,yBAAyB,EAAE,CAAC;SACzB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,CAAC,CAAC;SACV,QAAQ,CACP,oUAAoU,CACrU;IACH,wFAAwF;IACxF,6FAA6F;IAC7F,0DAA0D;IAC1D,6FAA6F;IAC7F,8FAA8F;IAC9F,8FAA8F;IAC9F,6FAA6F;IAC7F,2FAA2F;IAC3F,4FAA4F;IAC5F,0FAA0F;IAC1F,4FAA4F;IAC5F,wBAAwB,EAAE,CAAC;SACxB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CACP,2fAA2f,CAC5f;IACH,qBAAqB,EAAE,CAAC;SACrB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,qQAAqQ,CACtQ;IACH,uBAAuB,EAAE,CAAC;SACvB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,GAAG,CAAC;SACZ,QAAQ,CACP,0bAA0b,CAC3b;IACH,uBAAuB,EAAE,CAAC;SACvB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,8MAA8M,CAC/M;CACJ,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAEhB,mGAAmG;AACnG,kGAAkG;AAClG,kGAAkG;AAClG,oGAAoG;AACpG,4CAA4C;AAC5C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,4jBAA4jB,CAC7jB;IACH,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,GAAG,CAAC;SACZ,QAAQ,CACP,qRAAqR,CACtR;CACJ,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAEhB,6FAA6F;AAC7F,4FAA4F;AAC5F,+FAA+F;AAC/F,iGAAiG;AACjG,gGAAgG;AAChG,iEAAiE;AACjE,EAAE;AACF,kGAAkG;AAClG,+DAA+D;AAC/D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CACP,oeAAoe,CACre;CACJ,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAEhB,6FAA6F;AAC7F,mGAAmG;AACnG,gGAAgG;AAChG,iGAAiG;AACjG,2FAA2F;AAC3F,EAAE;AACF,6FAA6F;AAC7F,mGAAmG;AACnG,mGAAmG;AACnG,oGAAoG;AACpG,iGAAiG;AACjG,gGAAgG;AAChG,6FAA6F;AAC7F,kGAAkG;AAClG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,qQAAqQ,CACtQ;IACH,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,GAAG,CAAC;SACZ,QAAQ,CAAC,uCAAuC,CAAC;IACpD,kBAAkB,EAAE,CAAC;SAClB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,CAAC,CAAC;SACV,QAAQ,CACP,uwBAAuwB,CACxwB;IACH,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,OAAO,CAAC;SAChB,QAAQ,CACP,6jCAA6jC,CAC9jC;IACH,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,miCAAmiC,CACpiC;CACJ,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAEhB,mGAAmG;AACnG,kGAAkG;AAClG,mGAAmG;AACnG,8FAA8F;AAC9F,mGAAmG;AACnG,0FAA0F;AAC1F,iGAAiG;AACjG,uEAAuE;AACvE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAAC,OAAe;IAC3D,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACxC,OAAO,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjG,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,8BAA8B,CAAC,OAAe;IAC5D,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,8FAA8F;IAC9F,mFAAmF;IACnF,IAAI,CAAC,GAAG,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3C,OAAO,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,YAAY,EAAE,CAAC;SACZ,KAAK,CACJ,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,EAAE;QAC3D,OAAO,EACL,wNAAwN;KAC3N,CAAC,CACH;SACA,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,wqHAAwqH,CACzqH;CACJ,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAEhB,oFAAoF;AACpF,kFAAkF;AAClF,yEAAyE;AACzE,2EAA2E;AAC3E,kFAAkF;AAClF,kFAAkF;AAClF,qFAAqF;AACrF,wBAAwB;AACxB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CACP,qIAAqI,CACtI;IACH,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,8IAA8I,CAC/I;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACvF,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,qCAAqC,CAAC;IAClD,0FAA0F;IAC1F,4FAA4F;IAC5F,wEAAwE;IACxE,iFAAiF;IACjF,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,iIAAiI,CAClI;CACJ,CAAC,CAAC;AAEH,gGAAgG;AAChG,6FAA6F;AAC7F,gGAAgG;AAChG,+FAA+F;AAC/F,oFAAoF;AACpF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,sPAAsP,CACvP;CACJ,CAAC,CAAC;AAEH,6FAA6F;AAC7F,0FAA0F;AAC1F,mGAAmG;AACnG,gGAAgG;AAChG,6FAA6F;AAC7F,gGAAgG;AAChG,kGAAkG;AAClG,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,gQAAgQ,CACjQ;CACJ,CAAC,CAAC"}
+{"version":3,"file":"observability.schema.js","sourceRoot":"","sources":["../../src/config/observability.schema.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,gGAAgG;AAChG,iFAAiF;AACjF,EAAE;AACF,oFAAoF;AACpF,+FAA+F;AAC/F,iGAAiG;AACjG,0GAA0G;AAC1G,EAAE;AACF,sFAAsF;AACtF,qEAAqE;AACrE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE5F,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,sGAAsG;IACtG,sGAAsG;IACtG,gDAAgD;IAChD,IAAI,EAAE,CAAC;SACJ,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC;aACR,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,QAAQ,CAAC,6EAA6E,CAAC;QAC1F,OAAO,EAAE,CAAC;aACP,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;aAC9B,QAAQ,CAAC,EAAE,CAAC;aACZ,QAAQ,CACP,iFAAiF,CAClF;KACJ,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;SACZ,QAAQ,CAAC,6BAA6B,CAAC;IAC1C,UAAU,EAAE,CAAC;SACV,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC;QACvF,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,KAAK,CAAC;aACV,OAAO,CAAC,IAAI,CAAC;aACb,QAAQ,CAAC,0CAA0C,CAAC;QACvD,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,OAAO,CAAC,WAAW,CAAC;aACpB,QAAQ,CACP,0FAA0F,CAC3F;KACJ,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;SACZ,QAAQ,CAAC,8BAA8B,CAAC;IAC3C,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,gDAAgD,CAAC;QAC3F,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,QAAQ,CAAC,+EAA+E,CAAC;QAC5F,WAAW,EAAE,CAAC;aACX,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;aAC9B,QAAQ,CAAC,EAAE,CAAC;aACZ,QAAQ,CAAC,6DAA6D,CAAC;KAC3E,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;SACZ,QAAQ,CAAC,4BAA4B,CAAC;IACzC,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,6FAA6F;QAC7F,6FAA6F;QAC7F,8EAA8E;QAC9E,YAAY,EAAE,CAAC;aACZ,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,OAAO,CAAC,EAAE,CAAC;aACX,QAAQ,CACP,6HAA6H,CAC9H;QACH,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,OAAO,CAAC,EAAE,CAAC;aACX,QAAQ,CACP,oYAAoY,CACrY;KACJ,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;SACZ,QAAQ,CAAC,yDAAyD,CAAC;CACvE,CAAC,CAAC;AACH,8FAA8F;AAC9F,mGAAmG;AACnG,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,4MAA4M,CAC7M;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,IAAI,CAAC;SACT,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,qEAAqE,CAAC;CACnF,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAChB,6FAA6F;AAC7F,4FAA4F;AAC5F,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,+HAA+H,CAChI;IACH,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,qCAAqC,CAAC;IAClD,4FAA4F;IAC5F,sFAAsF;IACtF,yBAAyB,EAAE,CAAC;SACzB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,CAAC,CAAC;SACV,QAAQ,CACP,oUAAoU,CACrU;IACH,wFAAwF;IACxF,6FAA6F;IAC7F,0DAA0D;IAC1D,6FAA6F;IAC7F,8FAA8F;IAC9F,8FAA8F;IAC9F,6FAA6F;IAC7F,2FAA2F;IAC3F,4FAA4F;IAC5F,0FAA0F;IAC1F,4FAA4F;IAC5F,wBAAwB,EAAE,CAAC;SACxB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CACP,2fAA2f,CAC5f;IACH,qBAAqB,EAAE,CAAC;SACrB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,qQAAqQ,CACtQ;IACH,uBAAuB,EAAE,CAAC;SACvB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,GAAG,CAAC;SACZ,QAAQ,CACP,0bAA0b,CAC3b;IACH,uBAAuB,EAAE,CAAC;SACvB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,8MAA8M,CAC/M;CACJ,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAEhB,mGAAmG;AACnG,kGAAkG;AAClG,kGAAkG;AAClG,oGAAoG;AACpG,4CAA4C;AAC5C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,4jBAA4jB,CAC7jB;IACH,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,GAAG,CAAC;SACZ,QAAQ,CACP,qRAAqR,CACtR;CACJ,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAEhB,6FAA6F;AAC7F,4FAA4F;AAC5F,+FAA+F;AAC/F,iGAAiG;AACjG,gGAAgG;AAChG,iEAAiE;AACjE,EAAE;AACF,kGAAkG;AAClG,+DAA+D;AAC/D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CACP,oeAAoe,CACre;CACJ,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAEhB,6FAA6F;AAC7F,mGAAmG;AACnG,gGAAgG;AAChG,iGAAiG;AACjG,2FAA2F;AAC3F,EAAE;AACF,6FAA6F;AAC7F,mGAAmG;AACnG,mGAAmG;AACnG,oGAAoG;AACpG,iGAAiG;AACjG,gGAAgG;AAChG,6FAA6F;AAC7F,kGAAkG;AAClG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,2PAA2P,CAC5P;IACH,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,GAAG,CAAC;SACZ,QAAQ,CAAC,uCAAuC,CAAC;IACpD,kBAAkB,EAAE,CAAC;SAClB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,CAAC,CAAC;SACV,QAAQ,CACP,6vBAA6vB,CAC9vB;IACH,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,OAAO,CAAC;SAChB,QAAQ,CACP,6jCAA6jC,CAC9jC;IACH,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,mhCAAmhC,CACphC;CACJ,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAEhB,mGAAmG;AACnG,kGAAkG;AAClG,mGAAmG;AACnG,8FAA8F;AAC9F,mGAAmG;AACnG,0FAA0F;AAC1F,iGAAiG;AACjG,uEAAuE;AACvE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAAC,OAAe;IAC3D,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACxC,OAAO,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjG,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,8BAA8B,CAAC,OAAe;IAC5D,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,8FAA8F;IAC9F,mFAAmF;IACnF,IAAI,CAAC,GAAG,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3C,OAAO,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,YAAY,EAAE,CAAC;SACZ,KAAK,CACJ,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,EAAE;QAC3D,OAAO,EACL,wNAAwN;KAC3N,CAAC,CACH;SACA,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,wqHAAwqH,CACzqH;CACJ,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAEhB,oFAAoF;AACpF,kFAAkF;AAClF,yEAAyE;AACzE,2EAA2E;AAC3E,kFAAkF;AAClF,kFAAkF;AAClF,qFAAqF;AACrF,wBAAwB;AACxB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CACP,qIAAqI,CACtI;IACH,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,8IAA8I,CAC/I;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACvF,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,qCAAqC,CAAC;IAClD,0FAA0F;IAC1F,4FAA4F;IAC5F,wEAAwE;IACxE,iFAAiF;IACjF,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,iIAAiI,CAClI;CACJ,CAAC,CAAC;AAEH,gGAAgG;AAChG,6FAA6F;AAC7F,gGAAgG;AAChG,+FAA+F;AAC/F,oFAAoF;AACpF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,sPAAsP,CACvP;CACJ,CAAC,CAAC;AAEH,6FAA6F;AAC7F,0FAA0F;AAC1F,mGAAmG;AACnG,gGAAgG;AAChG,6FAA6F;AAC7F,gGAAgG;AAChG,kGAAkG;AAClG,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,gQAAgQ,CACjQ;CACJ,CAAC,CAAC;AAEH,kGAAkG;AAClG,oGAAoG;AACpG,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC;SACP,OAAO,EAAE;SACT,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,2fAA2f,CAC5f;IACH,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CACP,ytBAAytB,CAC1tB;IACH,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,EAAE,CAAC;SACP,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CACP,sNAAsN,CACvN;IACH,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,0SAA0S,CAC3S;CACJ,CAAC;KACD,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACxB,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC9C,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,OAAO,EACL,gSAAgS;SACnS,CAAC,CAAC;IACL,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,UAAU,CAAC;gBAClB,OAAO,EACL,4KAA4K;aAC/K,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YACjC,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,UAAU,CAAC;gBAClB,OAAO,EACL,yPAAyP;aAC5P,CAAC,CAAC;QACL,CAAC;QACD,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAChC,WAAW,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,IAAI,WAAW,EAAE,CAAC;YAChB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,UAAU,CAAC;gBAClB,OAAO,EACL,gZAAgZ;aACnZ,CAAC,CAAC;QACL,CAAC;QACD,4FAA4F;QAC5F,IAAI,IAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;YACjF,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,UAAU,CAAC;gBAClB,OAAO,EACL,wZAAwZ;aAC3Z,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC"}

package/dist/config/personas.schema.js

@@ -18,7 +18,7 @@ export const PersonaConfigSchema = z.object({
         .array(z.string())
         .min(1)
         .describe("The scopes a token carrying this persona is granted — REPLACES whatever scopes the token itself carries, never unioned with them, so a persona claim can only narrow or redirect a grant, never widen it beyond what the operator configured here."),
-    toolVisibility: ToolVisibilityConfigSchema.optional().describe("Optional per-persona tool-visibility mask, composed with the server's static `toolVisibility` at the same disabled > hidden > scope_denied > listed chokepoint (THE-645 item 2's existence-oracle constraint still holds). Can only narrow what the static config already allows, never restore a tool the static config hid or disabled."),
+    toolVisibility: ToolVisibilityConfigSchema.optional().describe("Optional per-persona tool-visibility mask, composed with the server's static `toolVisibility` at the same disabled > hidden > scope_denied > listed chokepoint (the existence-oracle constraint still holds). Can only narrow what the static config already allows, never restore a tool the static config hid or disabled."),
 });
 // A name -> bundle map. Wired into ServerConfigObject as `.optional()` — absent (the default)
 // means no persona claim can ever resolve; see auth/persona.ts, which fails closed on an

package/dist/config/personas.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"personas.schema.js","sourceRoot":"","sources":["../../src/config/personas.schema.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,kFAAkF;AAClF,iGAAiG;AACjG,EAAE;AACF,+FAA+F;AAC/F,qFAAqF;AACrF,yFAAyF;AACzF,0FAA0F;AAC1F,6FAA6F;AAC7F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAE5D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,EAAE,CAAC;SACN,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,mPAAmP,CACpP;IACH,MAAM,EAAE,CAAC;SACN,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,oPAAoP,CACrP;IACH,cAAc,EAAE,0BAA0B,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAC5D,2UAA2U,CAC5U;CACF,CAAC,CAAC;AAGH,8FAA8F;AAC9F,yFAAyF;AACzF,gFAAgF;AAChF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC"}
+{"version":3,"file":"personas.schema.js","sourceRoot":"","sources":["../../src/config/personas.schema.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,kFAAkF;AAClF,iGAAiG;AACjG,EAAE;AACF,+FAA+F;AAC/F,qFAAqF;AACrF,yFAAyF;AACzF,0FAA0F;AAC1F,6FAA6F;AAC7F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAE5D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,EAAE,CAAC;SACN,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,mPAAmP,CACpP;IACH,MAAM,EAAE,CAAC;SACN,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,oPAAoP,CACrP;IACH,cAAc,EAAE,0BAA0B,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAC5D,8TAA8T,CAC/T;CACF,CAAC,CAAC;AAGH,8FAA8F;AAC9F,yFAAyF;AACzF,gFAAgF;AAChF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC"}

package/dist/config/reranker.schema.js

@@ -6,7 +6,7 @@ export const RerankerConfigSchema = z.object({
     provider: z
         .string()
         .min(1)
-        .describe("Reranker backend name, resolved against the provider registry at startup. Built-ins: cohere-compatible (any Cohere-format /rerank endpoint), model-tier (the BGE cross-encoder, configured via embeddings.modelTier.full), gateway (the inference gateway passthrough), local (THE-705/THE-944: a bundled, fully offline cross-encoder — no gateway or Python service required; requires the optional @the-40-thieves/obsidian-tc-reranker-local package, and is also tried AUTOMATICALLY — no need to set provider: 'local' explicitly — when this whole block is left unset, model-tier is not configured, and no gateway URL is configured either), and the profile-gated module."),
+        .describe("Reranker backend name, resolved against the provider registry at startup. Built-ins: cohere-compatible (any Cohere-format /rerank endpoint), model-tier (the BGE cross-encoder, configured via embeddings.modelTier.full), gateway (the inference gateway passthrough), local (a bundled, fully offline cross-encoder — no gateway or Python service required; requires the optional @the-40-thieves/obsidian-tc-reranker-local package, and is also tried AUTOMATICALLY — no need to set provider: 'local' explicitly — when this whole block is left unset, model-tier is not configured, and no gateway URL is configured either), and the profile-gated module."),
     // Optional at the schema level because "required" is not uniform across entries: cohere-compatible
     // genuinely needs one and throws its own actionable boot error when it is absent; model-tier
     // ignores it entirely (its model comes from embeddings.modelTier.full.model) and throws its own
@@ -48,7 +48,7 @@ export const RerankerConfigSchema = z.object({
         .string()
         .min(1)
         .optional()
-        .describe("Absolute path to the ROOT directory under which <model-id>/<revision>/ lives (config.json, tokenizer.json, onnx/model_int8.onnx — see @the-40-thieves/obsidian-tc-reranker-local's README) for provider 'local'. THE-944: no longer required to be pre-populated — fetched and sha256-verified automatically on the first rerank call if not already present. Defaults to that package's own models/ directory. `bun run fetch-model` still works, for offline/CI pre-population. Ignored — and refused at boot if set — by every other provider."),
+        .describe("Absolute path to the ROOT directory under which <model-id>/<revision>/ lives (config.json, tokenizer.json, onnx/model_int8.onnx — see @the-40-thieves/obsidian-tc-reranker-local's README) for provider 'local'. No longer required to be pre-populated — fetched and sha256-verified automatically on the first rerank call if not already present. Defaults to that package's own models/ directory. `bun run fetch-model` still works, for offline/CI pre-population. Ignored — and refused at boot if set — by every other provider."),
     // THE-705 round 2: route (i) of provider "local"'s resolution ladder (registry.ts's
     // resolveLocalRerankerModule) — the escape hatch for every deployment shape the bare package
     // specifier and the source-checkout default don't cover (an npm-installed server pointed at a

package/dist/config/reranker.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"reranker.schema.js","sourceRoot":"","sources":["../../src/config/reranker.schema.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,mGAAmG;AACnG,uEAAuE;AACvE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,spBAAspB,CACvpB;IACH,mGAAmG;IACnG,6FAA6F;IAC7F,gGAAgG;IAChG,iGAAiG;IACjG,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,iTAAiT,CAClT;IACH,qEAAqE;IACrE,OAAO,EAAE,CAAC;SACP,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CACP,kTAAkT,CACnT;IACH,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,6JAA6J,CAC9J;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,kIAAkI,CACnI;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CACP,2IAA2I,CAC5I;IACH,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,2UAA2U,CAC5U;IACH,+FAA+F;IAC/F,8FAA8F;IAC9F,+BAA+B;IAC/B,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,mhBAAmhB,CACphB;IACH,oFAAoF;IACpF,6FAA6F;IAC7F,8FAA8F;IAC9F,8FAA8F;IAC9F,6CAA6C;IAC7C,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,4XAA4X,CAC7X;CACJ,CAAC,CAAC"}
+{"version":3,"file":"reranker.schema.js","sourceRoot":"","sources":["../../src/config/reranker.schema.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,mGAAmG;AACnG,uEAAuE;AACvE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,qoBAAqoB,CACtoB;IACH,mGAAmG;IACnG,6FAA6F;IAC7F,gGAAgG;IAChG,iGAAiG;IACjG,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,iTAAiT,CAClT;IACH,qEAAqE;IACrE,OAAO,EAAE,CAAC;SACP,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CACP,kTAAkT,CACnT;IACH,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,6JAA6J,CAC9J;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,kIAAkI,CACnI;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CACP,2IAA2I,CAC5I;IACH,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,2UAA2U,CAC5U;IACH,+FAA+F;IAC/F,8FAA8F;IAC9F,+BAA+B;IAC/B,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,0gBAA0gB,CAC3gB;IACH,oFAAoF;IACpF,6FAA6F;IAC7F,8FAA8F;IAC9F,8FAA8F;IAC9F,6CAA6C;IAC7C,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CACP,4XAA4X,CAC7X;CACJ,CAAC,CAAC"}

package/dist/config/retrieval.schema.d.ts

@@ -77,6 +77,7 @@ export declare const RankingConfigSchema: z.ZodObject<{
 /** THE-230: experiential-tier (membrane store, experiential.db) knobs. */
 export declare const ExperientialConfigSchema: z.ZodObject<{
     logRetrievals: z.ZodDefault<z.ZodBoolean>;
+    allowFeedbackInReadOnly: z.ZodDefault<z.ZodBoolean>;
     captureEpisodes: z.ZodDefault<z.ZodBoolean>;
     captureContent: z.ZodDefault<z.ZodBoolean>;
     captureRetentionDays: z.ZodDefault<z.ZodNumber>;
@@ -115,4 +116,13 @@ export declare const ExperientialConfigSchema: z.ZodObject<{
         dismissalPenalty: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
+export type ExperientialConfig = z.infer<typeof ExperientialConfigSchema>;
+/** THE-1099 (GH #964 part 2): the ONE place `allowFeedbackInReadOnly && logRetrievals` is
+ *  computed — every consumer (server-runtime.ts's `toolVisibility.allowReadOnlyDerivedTelemetry`
+ *  wiring, boot-notices.ts's boot-line) calls this rather than restating the AND, so the two can
+ *  never read different answers to "is the exemption live right now". `logRetrievals` is required
+ *  because with it false there are no `chunk_retrievals` rows for `record_retrieval_feedback` to
+ *  update — the exemption would be live but inert, which is a confusing thing for a boot line or
+ *  a dispatch decision to imply. */
+export declare function isFeedbackExemptFromReadOnly(experiential: Pick<ExperientialConfig, "allowFeedbackInReadOnly" | "logRetrievals">): boolean;
 //# sourceMappingURL=retrieval.schema.d.ts.map

package/dist/config/retrieval.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"retrieval.schema.d.ts","sourceRoot":"","sources":["../../src/config/retrieval.schema.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,oFAAoF;AACpF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA0WhC,CAAC;AAEH;;;;0DAI0D;AAC1D,eAAO,MAAM,uBAAuB;;;;iBAQlC,CAAC;AAEH;yEACyE;AACzE,eAAO,MAAM,mBAAmB;;;;;;;;;;iBA+B9B,CAAC;AAEH,0EAA0E;AAC1E,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmcnC,CAAC"}
+{"version":3,"file":"retrieval.schema.d.ts","sourceRoot":"","sources":["../../src/config/retrieval.schema.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,oFAAoF;AACpF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA0WhC,CAAC;AAEH;;;;0DAI0D;AAC1D,eAAO,MAAM,uBAAuB;;;;iBAQlC,CAAC;AAEH;yEACyE;AACzE,eAAO,MAAM,mBAAmB;;;;;;;;;;iBA+B9B,CAAC;AAEH,0EAA0E;AAC1E,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAqdnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;;;;;oCAMoC;AACpC,wBAAgB,4BAA4B,CAC1C,YAAY,EAAE,IAAI,CAAC,kBAAkB,EAAE,yBAAyB,GAAG,eAAe,CAAC,GAClF,OAAO,CAET"}

package/dist/config/retrieval.schema.js

@@ -79,7 +79,7 @@ export const RetrievalConfigSchema = z.object({
         mode: z
             .enum(["cosine", "zMargin"])
             .default("cosine")
-            .describe("Which hardness rule gates the rerank: absolute top-1 cosine, or the model-agnostic z-margin. Default `cosine` preserves the shipped behaviour; `zMargin` is what THE-400 built and has never been the production default."),
+            .describe("Which hardness rule gates the rerank: absolute top-1 cosine, or the model-agnostic z-margin. Default `cosine` preserves the shipped behaviour; `zMargin` is a model-agnostic alternative that has never been the production default."),
         hardTop1: z
             .number()
             .min(0)
@@ -232,7 +232,7 @@ export const RetrievalConfigSchema = z.object({
             .describe("Strength of the tilt, clamped to [0,1] so stream weights stay within [0,2] — an over-unity gain would drive a weight negative and invert its ranking rather than just reweight it."),
     })
         .prefault({})
-        .describe("Adaptive per-stream RRF weighting (THE-391): tilts dense vs lexical/sparse stream weight by per-query lexical specificity. Off by default."),
+        .describe("Adaptive per-stream RRF weighting: tilts dense vs lexical/sparse stream weight by per-query lexical specificity. Off by default."),
     /** THE-497: the in-process query-product cache. Keyed by the vault generation (THE-496) + the
      *  caller's ACL fingerprint + the query text + the full retrieval option set, so a hit is only
      *  ever the SAME caller re-asking the SAME question of an UNCHANGED vault under the SAME
@@ -261,7 +261,7 @@ export const RetrievalConfigSchema = z.object({
             .describe("Entry lifetime. Bounds staleness from inputs the key cannot see: wall-clock recency decay, and derived state (densified edges, activation scores) written by jobs that do not bump the vault generation."),
     })
         .prefault({})
-        .describe("THE-497 in-process query-product cache. Off by default; a hit requires the same caller, query, vault generation and retrieval configuration."),
+        .describe("In-process query-product cache. Off by default; a hit requires the same caller, query, vault generation and retrieval configuration."),
     /** THE-628 (first PR): note-level (leaf) summary tier for global/thematic queries a chunk-only
      *  index has no answer for ("what are the main themes in my vault"). A summary is generated per
      *  note at index time (gateway `extract` role), embedded, and stored in `note_summaries` keyed on
@@ -280,7 +280,7 @@ export const RetrievalConfigSchema = z.object({
         enabled: z
             .boolean()
             .default(false)
-            .describe("Generate + retrieve note-level summaries (THE-628). Off ships the mechanism dark: zero gateway calls at index time, no summary candidates at retrieval time. Gated on a pre-registered global-query eval, not built here."),
+            .describe("Generate + retrieve note-level summaries. Off ships the mechanism dark: zero gateway calls at index time, no summary candidates at retrieval time. Gated on a pre-registered global-query eval, not built here."),
         model: z
             .string()
             .optional()
@@ -306,7 +306,7 @@ export const RetrievalConfigSchema = z.object({
             enabled: z
                 .boolean()
                 .default(false)
-                .describe("Generate + retrieve cluster-level (tier-2/RAPTOR) summaries (THE-628, second PR). Off ships the mechanism dark: zero gateway/embed calls at the offline cluster pass, no cluster_summary candidates at retrieval time. Gated on the SAME pre-registered global-query eval as the note-level tier."),
+                .describe("Generate + retrieve cluster-level (tier-2/RAPTOR) summaries. Off ships the mechanism dark: zero gateway/embed calls at the offline cluster pass, no cluster_summary candidates at retrieval time. Gated on the SAME pre-registered global-query eval as the note-level tier."),
             maxConcurrency: z
                 .number()
                 .int()
@@ -315,10 +315,10 @@ export const RetrievalConfigSchema = z.object({
                 .describe("In-flight extract() calls across clusters during a cluster-summary pass. Same 8-16 recommended range as the note-level tier."),
         })
             .prefault({})
-            .describe("THE-628 cluster-level (tier-2) summary tier (second PR: mechanism only, dark by default). Independent enable flag from the note-level tier above — see this block's comment."),
+            .describe("Cluster-level (tier-2) summary tier (mechanism only, dark by default). Independent enable flag from the note-level tier above — see this block's comment."),
     })
         .prefault({})
-        .describe("THE-628 note-level summary tier (first PR: mechanism only, dark by default). See the block comment for the eval gate this is built ahead of."),
+        .describe("Note-level summary tier (mechanism only, dark by default). See the block comment for the eval gate this is built ahead of."),
 });
 /** Metadata-prior (authority-boost) rule: add `boost` to the fused score of a result whose note
  *  frontmatter[field] === value. Ported from the retired KMS/vault-sync hardcoded prior
@@ -375,6 +375,22 @@ export const ExperientialConfigSchema = z.object({
         .boolean()
         .default(true)
         .describe("Append serve-path retrieval events (chunk id, rank, score, query text, surface) to experiential.db. Local-only telemetry feeding activation recompute and usage stats; eval runs never log."),
+    /** THE-1099 (GH #964 part 2): let `record_retrieval_feedback` — and only it, enumerated by name
+     *  in mcp/visibility.ts's READ_ONLY_DERIVED_TELEMETRY_EXEMPT_TOOLS — bypass the `acl.readOnly`
+     *  kill switch and `toolVisibility.requireReadOnly` hiding. Its writes land in
+     *  `chunk_retrievals` in experiential.db, the derived-cognition plane (SECURITY.md; THE-563/564),
+     *  never in authored vault content, so a caller that must keep the vault itself read-only can
+     *  still close the retrieval-feedback loop the server's own instructions ask for.
+     *
+     *  Default false: nothing changes for an existing config. Requires `logRetrievals: true` as
+     *  well — with it false there are no `chunk_retrievals` rows for feedback to update, so the
+     *  exemption is inert and the tool stays hidden/blocked exactly as before. `write:workspace`
+     *  stays required for scoped-JWT callers either way; this setting relaxes the read-only
+     *  POLICIES, not authorization. */
+    allowFeedbackInReadOnly: z
+        .boolean()
+        .default(false)
+        .describe("Exempt record_retrieval_feedback (only) from acl.readOnly and toolVisibility.requireReadOnly, because its writes are derived telemetry in experiential.db, never authored vault content. Default false. Needs logRetrievals: true as well — otherwise there is nothing for it to update and the exemption is inert. The write:workspace scope requirement is unchanged."),
     /** THE-228: capture every dispatch outcome as an agent_episodes row (action axis: tool,
      *  status, duration, sizes, hashes, attribution — no payloads). Local-only work-memory in
      *  experiential.db; the sleep-time evaluator stamps retrieval-eligibility. */
@@ -483,7 +499,7 @@ export const ExperientialConfigSchema = z.object({
     activationRerank: z
         .boolean()
         .default(false)
-        .describe("Apply the ACT-R cached-activation-score signal to graph search ranking: builds the lookup, threads it to every M7 graphSearch call, and enables the bounded bubble pass that composes it into the fused order (each item moves at most one position). Ships off; the A/B that would justify turning it on is THE-424 Part B."),
+        .describe("Apply the ACT-R cached-activation-score signal to graph search ranking: builds the lookup, threads it to every M7 graphSearch call, and enables the bounded bubble pass that composes it into the fused order (each item moves at most one position). Ships off; the A/B that would justify turning it on has not shipped."),
     /** THE-644: fold the RETRIEVAL-level citation verdict (`chunk_retrievals.citation_state` /
      *  `cited_in_response`) into the deterministic `preferred.search_mode` counter alongside the
      *  existing episode-level `task_result` evidence — so a search-family tool whose results are
@@ -670,10 +686,10 @@ export const ExperientialConfigSchema = z.object({
             }
         })
             .optional()
-            .describe("THE-1078: opt-in judge provider for the citation-inference stage-2 verdict. Absent -> today's behaviour unchanged (the gateway `judge` role when configured, or stage-1-only mode)."),
+            .describe("Opt-in judge provider for the citation-inference stage-2 verdict. Absent -> today's behaviour unchanged (the gateway `judge` role when configured, or stage-1-only mode)."),
     })
         .prefault({})
-        .describe("THE-717: scheduled citation-inference pass over a transcript index. Needs an out-of-tree producer for transcriptIndex — no MCP surface gives a server the assistant's answer."),
+        .describe("Scheduled citation-inference pass over a transcript index. Needs an out-of-tree producer for transcriptIndex — no MCP surface gives a server the assistant's answer."),
     /** THE-719: the scheduled coverage-gap sweep. `detectGaps` had exactly one caller — the offline
      *  `obsidian-tc gaps` CLI — so `gap_reports` held 0 rows and the THE-611 read tool had nothing to
      *  read: correct code, complete tests, no scheduled caller.
@@ -703,7 +719,7 @@ export const ExperientialConfigSchema = z.object({
             .describe("Upper bound on queries per sweep. The sweep draws the most recent DISTINCT logged queries from chunk_retrievals, so this caps both gateway cost and how far back a single pass reaches."),
     })
         .prefault({})
-        .describe("THE-719: scheduled coverage-gap sweep over recently logged queries. Advisory only — nothing auto-tunes retrieval config from its own gap measurements."),
+        .describe("Scheduled coverage-gap sweep over recently logged queries. Advisory only — nothing auto-tunes retrieval config from its own gap measurements."),
     /** THE-634: the scheduled proactive-advisory sweep — the caller `scoreAgainstGoals` +
      *  `selectAdvisories` (PR #779, `experiential/advisory.ts` + `experiential/advisory-policy.ts`)
      *  never had. Same shape as citationInfer/gapSweep above and the same lesson: correct code,
@@ -751,6 +767,16 @@ export const ExperientialConfigSchema = z.object({
             .describe("Budget removed per dismissal (a -1 stamped through record_retrieval_feedback on an advisory row). At 1, five dismissals exhaust a maxPerSession of five."),
     })
         .prefault({})
-        .describe("THE-634: scheduled proactive-advisory sweep over goal-anchored candidates (vault-watcher note changes, open contradictions, recent syntheses). Publishes into subscriptions/listen for modern-era (2026-07-28) sessions only; legacy-era sessions — the LiteLLM-fronted production majority — receive no delivery attempt, by design. See docs/MCP-COMPATIBILITY.md."),
+        .describe("Scheduled proactive-advisory sweep over goal-anchored candidates (vault-watcher note changes, open contradictions, recent syntheses). Publishes into subscriptions/listen for modern-era (2026-07-28) sessions only; legacy-era sessions — the LiteLLM-fronted production majority — receive no delivery attempt, by design. See docs/MCP-COMPATIBILITY.md."),
 });
+/** THE-1099 (GH #964 part 2): the ONE place `allowFeedbackInReadOnly && logRetrievals` is
+ *  computed — every consumer (server-runtime.ts's `toolVisibility.allowReadOnlyDerivedTelemetry`
+ *  wiring, boot-notices.ts's boot-line) calls this rather than restating the AND, so the two can
+ *  never read different answers to "is the exemption live right now". `logRetrievals` is required
+ *  because with it false there are no `chunk_retrievals` rows for `record_retrieval_feedback` to
+ *  update — the exemption would be live but inert, which is a confusing thing for a boot line or
+ *  a dispatch decision to imply. */
+export function isFeedbackExemptFromReadOnly(experiential) {
+    return experiential.allowFeedbackInReadOnly && experiential.logRetrievals;
+}
 //# sourceMappingURL=retrieval.schema.js.map