@theokit/sdk 5.9.2 → 5.10.0

package/dist/chunk-ASK2OQM5.cjs

@@ -0,0 +1,84 @@
+'use strict';
+
+var chunkZF2LDKQQ_cjs = require('./chunk-ZF2LDKQQ.cjs');
+var chunk6LHQPOMI_cjs = require('./chunk-6LHQPOMI.cjs');
+
+// src/internal/persistence/file-lock.ts
+var cached;
+var warnedMissing = false;
+var warnedStructural = false;
+var loadFailure;
+function isModuleAbsent(err) {
+  const code = err?.code;
+  return code === "ERR_MODULE_NOT_FOUND" || code === "MODULE_NOT_FOUND";
+}
+function describeLockLoadFailure(err) {
+  const consequence = "cross-process file lock unavailable \u2014 concurrent processes over the same file are NOT serialized.";
+  if (isModuleAbsent(err)) {
+    return `[theokit-sdk] proper-lockfile not installed; ${consequence} Install with: pnpm add proper-lockfile
+`;
+  }
+  const code = err?.code;
+  const detail = err instanceof Error ? err.message : String(err);
+  return `[theokit-sdk] proper-lockfile could not be loaded${code !== void 0 ? ` (${String(code)})` : ""}: ${detail}. ${consequence} The package resolves for the SDK but failed to load \u2014 check bundling and module-format interop before re-checking the install.
+`;
+}
+async function getProperLockfile() {
+  if (cached !== void 0) return cached;
+  try {
+    const mod = await import('proper-lockfile');
+    if (!validateLockModule(mod)) {
+      if (!warnedStructural) {
+        warnedStructural = true;
+        chunk6LHQPOMI_cjs.diag(
+          "[theokit-sdk] proper-lockfile: imported module does NOT expose the expected `lock`/`unlock` API surface. This may indicate a supply-chain compromise or an incompatible major version. Falling back to in-process mutex (no cross-process safety). Reinstall with: pnpm add proper-lockfile@^11\n"
+        );
+      }
+      cached = null;
+      return cached;
+    }
+    cached = mod;
+  } catch (err) {
+    loadFailure = err;
+    cached = null;
+  }
+  return cached;
+}
+function validateLockModule(mod) {
+  if (mod === null || mod === void 0 || typeof mod !== "object") return false;
+  const m = mod;
+  return typeof m.lock === "function" && typeof m.unlock === "function";
+}
+async function withFileLock(path, fn, options) {
+  const lib = await getProperLockfile();
+  if (lib === null) {
+    if (!warnedMissing && !warnedStructural) {
+      warnedMissing = true;
+      chunk6LHQPOMI_cjs.diag(describeLockLoadFailure(loadFailure));
+    }
+    return chunkZF2LDKQQ_cjs.withCwdMutex(`file-lock:${path}`, fn);
+  }
+  return chunkZF2LDKQQ_cjs.withCwdMutex(`file-lock:${path}`, async () => {
+    const release = await lib.lock(path, {
+      // EC-1: companion lockfile, target path may not exist yet.
+      lockfilePath: `${path}.lock`,
+      realpath: false,
+      stale: options?.stale ?? 3e4,
+      retries: {
+        retries: options?.retries ?? 5,
+        factor: options?.retryFactor ?? 1.5,
+        minTimeout: 100,
+        maxTimeout: 5e3
+      }
+    });
+    try {
+      return await fn();
+    } finally {
+      await release();
+    }
+  });
+}
+
+exports.withFileLock = withFileLock;
+//# sourceMappingURL=chunk-ASK2OQM5.cjs.map
+//# sourceMappingURL=chunk-ASK2OQM5.cjs.map

package/dist/chunk-ASK2OQM5.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/internal/persistence/file-lock.ts"],"names":["diag","withCwdMutex"],"mappings":";;;;;;AAiCA,IAAI,MAAA;AACJ,IAAI,aAAA,GAAgB,KAAA;AACpB,IAAI,gBAAA,GAAmB,KAAA;AAEvB,IAAI,WAAA;AAGJ,SAAS,eAAe,GAAA,EAAuB;AAC7C,EAAA,MAAM,OAAQ,GAAA,EAA+C,IAAA;AAC7D,EAAA,OAAO,IAAA,KAAS,0BAA0B,IAAA,KAAS,kBAAA;AACrD;AAgBA,SAAS,wBAAwB,GAAA,EAAsB;AACrD,EAAA,MAAM,WAAA,GACJ,wGAAA;AACF,EAAA,IAAI,cAAA,CAAe,GAAG,CAAA,EAAG;AACvB,IAAA,OAAO,gDAAgD,WAAW,CAAA;AAAA,CAAA;AAAA,EACpE;AACA,EAAA,MAAM,OAAQ,GAAA,EAA+C,IAAA;AAC7D,EAAA,MAAM,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC9D,EAAA,OACE,CAAA,iDAAA,EAAoD,IAAA,KAAS,MAAA,GAAY,CAAA,EAAA,EAAK,MAAA,CAAO,IAAI,CAAC,CAAA,CAAA,CAAA,GAAM,EAAE,CAAA,EAAA,EAC/F,MAAM,CAAA,EAAA,EAAK,WAAW,CAAA;AAAA,CAAA;AAG7B;AAOA,eAAe,iBAAA,GAA0D;AACvE,EAAA,IAAI,MAAA,KAAW,QAAW,OAAO,MAAA;AACjC,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,OAAO,iBAAiB,CAAA;AAM1C,IAAA,IAAI,CAAC,kBAAA,CAAmB,GAAG,CAAA,EAAG;AAC5B,MAAA,IAAI,CAAC,gBAAA,EAAkB;AACrB,QAAA,gBAAA,GAAmB,IAAA;AACnB,QAAAA,sBAAA;AAAA,UACE;AAAA,SAKF;AAAA,MACF;AACA,MAAA,MAAA,GAAS,IAAA;AACT,MAAA,OAAO,MAAA;AAAA,IACT;AACA,IAAA,MAAA,GAAS,GAAA;AAAA,EACX,SAAS,GAAA,EAAK;AAGZ,IAAA,WAAA,GAAc,GAAA;AACd,IAAA,MAAA,GAAS,IAAA;AAAA,EACX;AACA,EAAA,OAAO,MAAA;AACT;AAaA,SAAS,mBAAmB,GAAA,EAAuB;AACjD,EAAA,IAAI,QAAQ,IAAA,IAAQ,GAAA,KAAQ,UAAa,OAAO,GAAA,KAAQ,UAAU,OAAO,KAAA;AACzE,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,OAAO,OAAO,CAAA,CAAE,IAAA,KAAS,UAAA,IAAc,OAAO,EAAE,MAAA,KAAW,UAAA;AAC7D;AAkEA,eAAsB,YAAA,CACpB,IAAA,EACA,EAAA,EACA,OAAA,EACY;AACZ,EAAA,MAAM,GAAA,GAAM,MAAM,iBAAA,EAAkB;AAEpC,EAAA,IAAI,QAAQ,IAAA,EAAM;AAIhB,IAAA,IAAI,CAAC,aAAA,IAAiB,CAAC,gBAAA,EAAkB;AACvC,MAAA,aAAA,GAAgB,IAAA;AAChB,MAAAA,sBAAA,CAAK,uBAAA,CAAwB,WAAW,CAAC,CAAA;AAAA,IAC3C;AACA,IAAA,OAAOC,8BAAA,CAAa,CAAA,UAAA,EAAa,IAAI,CAAA,CAAA,EAAI,EAAE,CAAA;AAAA,EAC7C;AAOA,EAAA,OAAOA,8BAAA,CAAa,CAAA,UAAA,EAAa,IAAI,CAAA,CAAA,EAAI,YAAY;AACnD,IAAA,MAAM,OAAA,GAAU,MAAM,GAAA,CAAI,IAAA,CAAK,IAAA,EAAM;AAAA;AAAA,MAEnC,YAAA,EAAc,GAAG,IAAI,CAAA,KAAA,CAAA;AAAA,MACrB,QAAA,EAAU,KAAA;AAAA,MACV,KAAA,EAAO,SAAS,KAAA,IAAS,GAAA;AAAA,MACzB,OAAA,EAAS;AAAA,QACP,OAAA,EAAS,SAAS,OAAA,IAAW,CAAA;AAAA,QAC7B,MAAA,EAAQ,SAAS,WAAA,IAAe,GAAA;AAAA,QAChC,UAAA,EAAY,GAAA;AAAA,QACZ,UAAA,EAAY;AAAA;AACd,KACD,CAAA;AAED,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,EAAA,EAAG;AAAA,IAClB,CAAA,SAAE;AACA,MAAA,MAAM,OAAA,EAAQ;AAAA,IAChB;AAAA,EACF,CAAC,CAAA;AACH","file":"chunk-ASK2OQM5.cjs","sourcesContent":["/**\n * Cross-process file lock helper (ADR D61).\n *\n * Uses `proper-lockfile` (optional peer dep) for cross-process locks. When\n * the peer dep is absent, falls back to `withCwdMutex` (in-process only)\n * with a one-shot stderr warning.\n *\n * EC-1 fix: uses a companion `<path>.lock` file with `realpath: false` so\n * `withFileLock` works even when the target `path` does not exist yet.\n * Without this, fresh installs that lock-then-create would crash with ENOENT.\n *\n * @internal\n */\n\nimport { diag } from \"../diagnostics.js\";\nimport { withCwdMutex } from \"./cwd-mutex.js\";\n\ninterface ProperLockfileModule {\n  lock: (file: string, options: ProperLockfileOptions) => Promise<() => Promise<void>>;\n}\n\ninterface ProperLockfileOptions {\n  lockfilePath?: string;\n  realpath?: boolean;\n  stale?: number;\n  retries?: {\n    retries: number;\n    factor?: number;\n    minTimeout?: number;\n    maxTimeout?: number;\n  };\n}\n\nlet cached: ProperLockfileModule | null | undefined;\nlet warnedMissing = false;\nlet warnedStructural = false;\n/** Why the import failed, kept so the warning can report the observation instead of a guess (#174). */\nlet loadFailure: unknown;\n\n/** Node reports a missing module as `ERR_MODULE_NOT_FOUND` (ESM loader) or `MODULE_NOT_FOUND` (CJS). */\nfunction isModuleAbsent(err: unknown): boolean {\n  const code = (err as { code?: unknown } | null | undefined)?.code;\n  return code === \"ERR_MODULE_NOT_FOUND\" || code === \"MODULE_NOT_FOUND\";\n}\n\n/**\n * #174 — build the fallback warning from what actually happened.\n *\n * This used to always read \"proper-lockfile not installed\", because the import was wrapped in a\n * bare `catch` that discarded the error (Unbreakable Rule 8: a swallowed error is the dangerous\n * kind). A consumer whose package WAS installed, declared and resolvable spent a debugging session\n * re-verifying the install, because the message named a cause the code had never checked.\n *\n * Absence is now the only case that claims absence. Every other failure — a broken install, an\n * interop problem, a bundler that rewrote the specifier — reports its own code and message, which\n * is what points at the real cause.\n *\n * @internal\n */\nfunction describeLockLoadFailure(err: unknown): string {\n  const consequence =\n    \"cross-process file lock unavailable — concurrent processes over the same file are NOT serialized.\";\n  if (isModuleAbsent(err)) {\n    return `[theokit-sdk] proper-lockfile not installed; ${consequence} Install with: pnpm add proper-lockfile\\n`;\n  }\n  const code = (err as { code?: unknown } | null | undefined)?.code;\n  const detail = err instanceof Error ? err.message : String(err);\n  return (\n    `[theokit-sdk] proper-lockfile could not be loaded${code !== undefined ? ` (${String(code)})` : \"\"}: ` +\n    `${detail}. ${consequence} The package resolves for the SDK but failed to load — check bundling ` +\n    \"and module-format interop before re-checking the install.\\n\"\n  );\n}\n\n/** Test seam for the message builder — NOT in the public barrel. @internal */\nexport function __TESTING__describeLockLoadFailure(err: unknown): string {\n  return describeLockLoadFailure(err);\n}\n\nasync function getProperLockfile(): Promise<ProperLockfileModule | null> {\n  if (cached !== undefined) return cached;\n  try {\n    const mod = await import(\"proper-lockfile\");\n    // T5.9 — supply-chain hardening: validate the imported module\n    // exposes the API surface we depend on BEFORE caching it. A\n    // tampered or incompatible version that lacks `lock`/`unlock`\n    // functions gets treated as \"not installed\" with an advisory\n    // warning — never silently used.\n    if (!validateLockModule(mod)) {\n      if (!warnedStructural) {\n        warnedStructural = true;\n        diag(\n          \"[theokit-sdk] proper-lockfile: imported module does NOT expose \" +\n            \"the expected `lock`/`unlock` API surface. This may indicate a \" +\n            \"supply-chain compromise or an incompatible major version. \" +\n            \"Falling back to in-process mutex (no cross-process safety). \" +\n            \"Reinstall with: pnpm add proper-lockfile@^11\\n\",\n        );\n      }\n      cached = null;\n      return cached;\n    }\n    cached = mod as ProperLockfileModule;\n  } catch (err) {\n    // #174 — keep WHY. Discarding it here is what made the fallback warning assert a cause it had\n    // never observed, and sent a consumer to re-check an install that was already correct.\n    loadFailure = err;\n    cached = null;\n  }\n  return cached;\n}\n\n/**\n * T5.9 — Structural validation of the dynamically-imported\n * `proper-lockfile` module. Verifies the API surface we depend on\n * (`lock` and `unlock` as functions) is present. Pure function —\n * never throws, never mutates, never performs I/O.\n *\n * Exported via `__TESTING__validateLockModule` seam so unit tests\n * can drive the check without spinning up the dynamic import.\n *\n * @internal\n */\nfunction validateLockModule(mod: unknown): boolean {\n  if (mod === null || mod === undefined || typeof mod !== \"object\") return false;\n  const m = mod as Record<string, unknown>;\n  return typeof m.lock === \"function\" && typeof m.unlock === \"function\";\n}\n\n/**\n * T5.9 — Test seam: expose the structural validator for unit tests.\n * NOT included in the public barrel.\n *\n * @internal\n */\nexport function __TESTING__validateLockModule(mod: unknown): boolean {\n  return validateLockModule(mod);\n}\n\n/**\n * T5.9 — Test seam: reset the module cache + warning flags between\n * tests so each test starts fresh. NOT included in the public barrel.\n *\n * @internal\n */\nexport function __TESTING__resetFileLockCache(): void {\n  cached = undefined;\n  warnedMissing = false;\n  warnedStructural = false;\n  loadFailure = undefined;\n}\n\n/**\n * Retry and staleness tuning for `withFileLock`.\n *\n * Every field is optional and the defaults are applied per call, so `undefined` means the default\n * rather than \"no limit\". They are handed to `proper-lockfile` and have NO effect on the fallback\n * path: when that package is absent, `withFileLock` degrades to the in-process mutex, which\n * queues indefinitely and never goes stale.\n *\n * `stale` (default 30000 ms) is how old a lock file must be before it is treated as abandoned by a\n * dead process and broken. Setting it below the longest a legitimate holder can run is what turns\n * a slow operation into two concurrent ones.\n *\n * `retries` (default 5) is the number of acquisition attempts AFTER the first, and `retryFactor`\n * (default 1.5) the backoff multiplier between them. The per-attempt wait is clamped to\n * 100–5000 ms, which the caller cannot change. Exhausting the retries rejects — it does not fall\n * through to running `fn` unlocked.\n *\n * @public — re-exported from the semver-protected `@theokit/sdk/persistence` barrel, and (for\n * back-compat) from the semver-exempt `@theokit/sdk/internal/persistence` alias.\n */\nexport interface FileLockOptions {\n  /** Stale lock timeout in ms. Default 30_000 (30s). */\n  stale?: number;\n  /** Max retries on busy lock. Default 5. */\n  retries?: number;\n  /** Backoff factor between retries. Default 1.5. */\n  retryFactor?: number;\n}\n\n/**\n * Run `fn` while holding an OS-level cross-process lock on `path`.\n *\n * If `proper-lockfile` is installed, uses it with a companion `<path>.lock`\n * file (`realpath: false`, so target file does NOT need to exist yet).\n * Otherwise falls back to in-process `withCwdMutex` and prints a one-shot\n * stderr warning telling the user to install `proper-lockfile` for\n * cross-process safety.\n *\n * The lock is released even when `fn` throws.\n *\n */\nexport async function withFileLock<T>(\n  path: string,\n  fn: () => Promise<T>,\n  options?: FileLockOptions,\n): Promise<T> {\n  const lib = await getProperLockfile();\n\n  if (lib === null) {\n    // #174 — stay silent when the structural check already explained itself. Emitting \"not\n    // installed\" on top of \"does not expose lock/unlock\" would be two contradictory diagnoses of\n    // one failure, and the reader has no way to tell which is true.\n    if (!warnedMissing && !warnedStructural) {\n      warnedMissing = true;\n      diag(describeLockLoadFailure(loadFailure));\n    }\n    return withCwdMutex(`file-lock:${path}`, fn);\n  }\n\n  // proper-lockfile errors immediately on same-process concurrent acquire\n  // (\"Lock file is already being held\"). Wrap with cwd-mutex first so\n  // in-process callers queue and only ONE thread at a time enters the\n  // cross-process acquire path. Combined: full in-process + cross-process\n  // serialization.\n  return withCwdMutex(`file-lock:${path}`, async () => {\n    const release = await lib.lock(path, {\n      // EC-1: companion lockfile, target path may not exist yet.\n      lockfilePath: `${path}.lock`,\n      realpath: false,\n      stale: options?.stale ?? 30_000,\n      retries: {\n        retries: options?.retries ?? 5,\n        factor: options?.retryFactor ?? 1.5,\n        minTimeout: 100,\n        maxTimeout: 5_000,\n      },\n    });\n\n    try {\n      return await fn();\n    } finally {\n      await release();\n    }\n  });\n}\n\n/**\n * Test helper — resets the cached proper-lockfile module + warning flag.\n * Allows tests to simulate \"module absent\" by clearing cache then\n * monkey-patching the dynamic import resolution.\n *\n * @internal\n */\nexport function _resetFileLockCacheForTesting(): void {\n  cached = undefined;\n  warnedMissing = false;\n}\n"]}

package/dist/{chunk-JU76WCW7.cjs → chunk-CVEQ5366.cjs}

@@ -2,13 +2,13 @@
 
 var chunkJ6GXS5A2_cjs = require('./chunk-J6GXS5A2.cjs');
 var chunkFR6COQXZ_cjs = require('./chunk-FR6COQXZ.cjs');
-var chunkDLUCTZ56_cjs = require('./chunk-DLUCTZ56.cjs');
+var chunkL3C6CCBG_cjs = require('./chunk-L3C6CCBG.cjs');
 var chunkKIKKTW5O_cjs = require('./chunk-KIKKTW5O.cjs');
 var chunkBV2MWEMV_cjs = require('./chunk-BV2MWEMV.cjs');
 var chunkYEHQ3SIC_cjs = require('./chunk-YEHQ3SIC.cjs');
 var chunkTMKTSYDS_cjs = require('./chunk-TMKTSYDS.cjs');
-var chunkVZ2JZ2EH_cjs = require('./chunk-VZ2JZ2EH.cjs');
-var chunkRX3CFWQ2_cjs = require('./chunk-RX3CFWQ2.cjs');
+var chunkZD66GFH5_cjs = require('./chunk-ZD66GFH5.cjs');
+var chunkNQVWSSX2_cjs = require('./chunk-NQVWSSX2.cjs');
 var chunkQY3CIMUV_cjs = require('./chunk-QY3CIMUV.cjs');
 var chunk2ZPEDVLM_cjs = require('./chunk-2ZPEDVLM.cjs');
 var chunkXKZFIP7Z_cjs = require('./chunk-XKZFIP7Z.cjs');
@@ -24,7 +24,7 @@ var chunkGM54F4FE_cjs = require('./chunk-GM54F4FE.cjs');
 var chunkSA6K24NB_cjs = require('./chunk-SA6K24NB.cjs');
 var chunkIIYJMXYW_cjs = require('./chunk-IIYJMXYW.cjs');
 var chunkZWACQM5U_cjs = require('./chunk-ZWACQM5U.cjs');
-var chunkOF2CLCTH_cjs = require('./chunk-OF2CLCTH.cjs');
+var chunkASK2OQM5_cjs = require('./chunk-ASK2OQM5.cjs');
 var chunkZF2LDKQQ_cjs = require('./chunk-ZF2LDKQQ.cjs');
 var chunkJLRLCBJ4_cjs = require('./chunk-JLRLCBJ4.cjs');
 var chunkC7GKRGKN_cjs = require('./chunk-C7GKRGKN.cjs');
@@ -338,6 +338,8 @@ function serializeMemory(memory) {
   if (memory.scope !== void 0) out.scope = memory.scope;
   if (memory.activeRecall !== void 0) out.activeRecall = { ...memory.activeRecall };
   if (memory.index !== void 0) out.index = serializeMemoryIndex(memory.index);
+  if (memory.maxFacts !== void 0) out.maxFacts = memory.maxFacts;
+  if (memory.directory !== void 0) out.directory = memory.directory;
   return out;
 }
 function serializeMemoryIndex(index) {
@@ -821,7 +823,7 @@ async function readLegacyFacts(jsonPath) {
 }
 async function writeMigratedFacts(cwd, jsonPath, facts) {
   try {
-    for (const fact of facts) await chunkVZ2JZ2EH_cjs.appendFactToMarkdown(cwd, fact);
+    for (const fact of facts) await chunkZD66GFH5_cjs.appendFactToMarkdown(cwd, fact);
     await promises.unlink(jsonPath).catch(() => void 0);
     chunk6LHQPOMI_cjs.diag(`[theokit-sdk] migrated ${facts.length} fact(s) from ${jsonPath} to MEMORY.md
 `);
@@ -838,11 +840,11 @@ async function migrateLegacyJson(cwd, config) {
   const key = `${cwd}::${config.namespace ?? "default"}::${config.scope ?? "agent"}::${config.userId ?? "default"}`;
   if (migrationRun.has(key)) return { migrated: false, factCount: 0, reason: "already-migrated" };
   migrationRun.add(key);
-  const jsonPath = chunkVZ2JZ2EH_cjs.legacyMemoryJsonPath(cwd, config);
+  const jsonPath = chunkZD66GFH5_cjs.legacyMemoryJsonPath(cwd, config);
   if (!await fileExists(jsonPath)) {
     return { migrated: false, factCount: 0, reason: "no-legacy-json" };
   }
-  if (await fileExists(chunkVZ2JZ2EH_cjs.memoryMdPath(chunkVZ2JZ2EH_cjs.resolveMemoryRoot(cwd, config)))) {
+  if (await fileExists(chunkZD66GFH5_cjs.memoryMdPath(chunkZD66GFH5_cjs.resolveMemoryRoot(cwd, config)))) {
     chunk6LHQPOMI_cjs.diag(
       `[theokit-sdk] memory migration skipped: both MEMORY.md and legacy JSON exist at ${jsonPath}; leaving both intact
 `
@@ -871,28 +873,29 @@ function unstoredRememberWarning(message) {
   if (isMemoryWritePrompt(message) && extractMemoryFact(message).length > 0) return void 0;
   const trimmed = message.trim();
   const quoted = trimmed.length > QUOTED_MESSAGE_MAX ? `${trimmed.slice(0, QUOTED_MESSAGE_MAX)}\u2026` : trimmed;
-  return `[theokit-sdk] NOTHING WAS STORED \u2014 this message does not match the memory capture pattern: ${JSON.stringify(quoted)}. Supported: "Remember: <fact>" or "Remember (${chunkVZ2JZ2EH_cjs.MEMORY_KINDS.join("|")}): <fact>". It still reaches the session transcript, so a follow-up may answer from it \u2014 that is search over transcripts, not a durable memory.`;
+  return `[theokit-sdk] NOTHING WAS STORED \u2014 this message does not match the memory capture pattern: ${JSON.stringify(quoted)}. Supported: "Remember: <fact>" or "Remember (${chunkZD66GFH5_cjs.MEMORY_KINDS.join("|")}): <fact>". It still reaches the session transcript, so a follow-up may answer from it \u2014 that is search over transcripts, not a durable memory.`;
 }
 function extractMemoryKind(message) {
   const match = REMEMBER_PATTERN.exec(message);
   const declared = match?.[1];
   if (declared === void 0) return void 0;
   const lowered = declared.toLowerCase();
-  return chunkVZ2JZ2EH_cjs.MEMORY_KINDS.includes(lowered) ? lowered : void 0;
+  return chunkZD66GFH5_cjs.MEMORY_KINDS.includes(lowered) ? lowered : void 0;
 }
 async function readMemoryFacts(cwd, config) {
   if (!config.enabled) return [];
   await migrateLegacyJson(cwd, config);
-  return chunkVZ2JZ2EH_cjs.readFacts(cwd, config);
+  return chunkZD66GFH5_cjs.readFacts(cwd, config);
 }
 async function appendMemoryFact(cwd, config, fact) {
   if (!config.enabled) return;
+  chunkZD66GFH5_cjs.resolveMaxFacts(config.maxFacts);
   await migrateLegacyJson(cwd, config);
   const sanitized = {
     text: chunk6LHQPOMI_cjs.redactSecrets(fact.text),
     ...fact.kind === void 0 ? {} : { kind: fact.kind }
   };
-  await chunkVZ2JZ2EH_cjs.appendFact(cwd, config, sanitized);
+  await chunkZD66GFH5_cjs.appendFact(cwd, config, sanitized);
 }
 
 // src/internal/runtime/fixtures/fixture-scripts.ts
@@ -2199,7 +2202,7 @@ var PersonalityStore = class {
   async #persist(agentId, slug) {
     const filePath = this.#filePath();
     await promises.mkdir(path.dirname(filePath), { recursive: true });
-    await chunkOF2CLCTH_cjs.withFileLock(filePath, async () => {
+    await chunkASK2OQM5_cjs.withFileLock(filePath, async () => {
       const current = await readState(filePath);
       const nextAgents = { ...current.agents };
       if (slug === void 0) delete nextAgents[agentId];
@@ -2980,7 +2983,7 @@ async function runPostRunLifecycle(inputs) {
       cwd: workspaceCwd,
       // Resolved once, here, and handed to both writers. Recomputing it inside either one is how
       // the summary ended up in a directory the indexer never scanned (#463).
-      memoryRoot: chunkVZ2JZ2EH_cjs.resolveMemoryRoot(workspaceCwd, inputs.memory),
+      memoryRoot: chunkZD66GFH5_cjs.resolveMemoryRoot(workspaceCwd, inputs.memory),
       runId: result.id,
       agentId,
       userText,
@@ -2992,7 +2995,7 @@ async function runPostRunLifecycle(inputs) {
       if (memoryProvider?.recordSessionSummary !== void 0) {
         await memoryProvider.recordSessionSummary(summaryArgs);
       } else {
-        await chunkVZ2JZ2EH_cjs.writeSessionSummary(summaryArgs);
+        await chunkZD66GFH5_cjs.writeSessionSummary(summaryArgs);
       }
     } catch (cause) {
       const message = cause instanceof Error ? cause.message : String(cause);
@@ -3614,6 +3617,7 @@ function validateToolSchema(tool) {
 }
 function validateMemory(options) {
   const memory = options.memory;
+  chunkZD66GFH5_cjs.resolveMaxFacts(memory?.maxFacts);
   if (memory?.storePath === void 0) return;
   const storePath = memory.storePath;
   if (storePath.includes("..") || storePath.startsWith("/") || /^[A-Z]:/i.test(storePath)) {
@@ -3639,7 +3643,7 @@ var HISTOGRAM_NAMES = {
 };
 function safeRequire(moduleName) {
   try {
-    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-JU76WCW7.cjs', document.baseURI).href)));
+    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-CVEQ5366.cjs', document.baseURI).href)));
     return r(moduleName);
   } catch {
     return void 0;
@@ -3882,7 +3886,7 @@ var cachedOtel;
 function loadOtel() {
   if (cachedOtel === void 0) {
     try {
-      const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-JU76WCW7.cjs', document.baseURI).href)));
+      const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-CVEQ5366.cjs', document.baseURI).href)));
       const mod = r("@opentelemetry/api");
       cachedOtel = mod;
     } catch {
@@ -8385,7 +8389,7 @@ async function finalize(args, queryMode, result) {
   };
   args.cache?.set(args.userText, queryMode, result, tenantCtx);
   if (args.persistTranscripts === true && args.cwd !== void 0) {
-    await chunkTMKTSYDS_cjs.persistActiveMemoryTranscript(args.memoryRoot ?? chunkVZ2JZ2EH_cjs.resolveMemoryRoot(args.cwd), {
+    await chunkTMKTSYDS_cjs.persistActiveMemoryTranscript(args.memoryRoot ?? chunkZD66GFH5_cjs.resolveMemoryRoot(args.cwd), {
       runId: args.runId ?? `run-${Date.now()}`,
       startedAtMs: Date.now() - result.durationMs,
       userText: args.userText,
@@ -8976,7 +8980,7 @@ var LocalAgentMemory = class {
       const openOpts = { cwd: this.workspaceCwd, memoryRoot };
       if (embedding !== void 0) openOpts.embedding = embedding;
       if (cfg?.backend !== void 0) openOpts.backend = cfg.backend;
-      this.index = await chunkDLUCTZ56_cjs.IndexManager.open(openOpts);
+      this.index = await chunkL3C6CCBG_cjs.IndexManager.open(openOpts);
       await this.index.sync();
       this.toolsCache = [
         createMemorySearchTool({ index: this.index }),
@@ -9020,7 +9024,7 @@ var LocalAgentMemory = class {
    * and the active-memory transcript writer. Three separate resolutions is how they drifted (#463).
    */
   memoryRoot() {
-    this.memoryRootCache ??= chunkVZ2JZ2EH_cjs.resolveMemoryRoot(this.workspaceCwd, this.options.memory);
+    this.memoryRootCache ??= chunkZD66GFH5_cjs.resolveMemoryRoot(this.workspaceCwd, this.options.memory);
     return this.memoryRootCache;
   }
   buildActiveMemoryOptions(cfg) {
@@ -9135,7 +9139,7 @@ function createLocalAgentMemoryProvider(opts) {
       return { facts: [], systemPromptAdditions: summary };
     },
     async recordSessionSummary(args) {
-      await chunkVZ2JZ2EH_cjs.writeSessionSummary(args);
+      await chunkZD66GFH5_cjs.writeSessionSummary(args);
     },
     async sync(handle) {
       const state = handle[INTERNAL_LAM_KEY];
@@ -10133,7 +10137,7 @@ var LocalAgent = class {
     this.options = options;
     this.workspaceCwd = resolveCwd(options.local?.cwd);
     this.transcriptBaseDir = resolveSessionDir(options.local);
-    this.sessionStore = options.local?.sessionStore ?? new chunkRX3CFWQ2_cjs.FsSessionStore({ baseDir: this.transcriptBaseDir, cwd: this.workspaceCwd });
+    this.sessionStore = options.local?.sessionStore ?? new chunkNQVWSSX2_cjs.FsSessionStore({ baseDir: this.transcriptBaseDir, cwd: this.workspaceCwd });
     this.settingSourcesIncludeProject = includesSetting(options, "project");
     this.settingSourcesIncludePlugins = includesSetting(options, "plugins");
     const sub = bootstrapSubmanagers({
@@ -10610,10 +10614,12 @@ async function rehydrateExistingAgent(agentId, existing, options) {
   await chunkQY3CIMUV_cjs.discoverProviderPlugins();
   await validateRehydratedAgent(agentId, existing);
   const mergedLocal = options.local !== void 0 && existing.options.local !== void 0 ? { ...existing.options.local, ...options.local } : options.local ?? existing.options.local;
+  const mergedMemory = mergeResumedMemory(existing.options.memory, options.memory);
   const mergedOptions = {
     ...existing.options,
     ...options,
     ...mergedLocal !== void 0 ? { local: mergedLocal } : {},
+    ...mergedMemory !== void 0 ? { memory: mergedMemory } : {},
     // SE8 — normalize a caller-supplied bare-string model override at this resume
     // boundary (Agent.resume never flows through runCreateUnderSpan). Cloud resume
     // honors it; local resume forces the persisted model below.
@@ -10621,6 +10627,7 @@ async function rehydrateExistingAgent(agentId, existing, options) {
     mcpServers: void 0,
     agentId
   };
+  chunkZD66GFH5_cjs.resolveMaxFacts(mergedOptions.memory?.maxFacts);
   if (existing.runtime === "cloud") {
     return new CloudAgent(mergedOptions, agentId);
   }
@@ -10628,6 +10635,12 @@ async function rehydrateExistingAgent(agentId, existing, options) {
   await agent.initialize();
   return agent;
 }
+function mergeResumedMemory(persisted, override) {
+  if (override === void 0) return persisted;
+  if (persisted === void 0) return override;
+  const named = Object.entries(override).filter(([, value]) => value !== void 0);
+  return { ...persisted, ...Object.fromEntries(named) };
+}
 async function validateRehydratedAgent(agentId, entry) {
   if (entry.runtime !== "local") return;
   const candidate = entry.options.local?.cwd ?? entry.cwd;
@@ -11236,7 +11249,7 @@ async function openLocalStore(reg) {
   const cwd = reg.cwd ?? process.cwd();
   const optModel = reg.options.model;
   const model = reg.model?.id ?? (typeof optModel === "string" ? optModel : optModel?.id) ?? "unknown";
-  const { FsSessionStore: FsSessionStore2 } = await import('./fs-session-store-SVEMRE4K.cjs');
+  const { FsSessionStore: FsSessionStore2 } = await import('./fs-session-store-IQ6PEHYF.cjs');
   const { defaultBaseDir: defaultBaseDir2, expandTilde: expandTilde2 } = await import('./session-transcript-RACG7BK2.cjs');
   const configuredSessionDir = reg.options.local?.sessionDir ?? reg.options.local?.baseDir;
   const baseDir = configuredSessionDir !== void 0 ? expandTilde2(configuredSessionDir) : defaultBaseDir2();
@@ -11257,5 +11270,5 @@ exports.managedSettingsPathFor = managedSettingsPathFor;
 exports.openRouterMemoryEmbeddingProviderAdapter = openRouterMemoryEmbeddingProviderAdapter;
 exports.readManagedSettings = readManagedSettings;
 exports.resolveSessionDir = resolveSessionDir;
-//# sourceMappingURL=chunk-JU76WCW7.cjs.map
-//# sourceMappingURL=chunk-JU76WCW7.cjs.map
+//# sourceMappingURL=chunk-CVEQ5366.cjs.map
+//# sourceMappingURL=chunk-CVEQ5366.cjs.map