@unbrained/pm-cli 2026.9.7 → 2026.9.9

package/dist/sdk/context/recency.js

@@ -1,34 +1,2 @@
-/**
- * @module sdk/context/recency
- *
- * Canonicalizes the absolute timestamps used as durable context-recency
- * coordinates without accepting relative or host-local date-time values.
- */
-
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="377499d7-13b3-55f0-9d44-425bfcaf7964")}catch(e){}}();
-import { isMillisecondPrecisionRfc3339DateTime, resolveIsoOrRelative, } from "../../core/shared/time.js";
-/** Deterministic oldest coordinate used when legacy creation metadata is invalid. */
-export const CONTEXT_RECENCY_EPOCH = "1970-01-01T00:00:00.000Z";
-/**
- * Canonicalize a calendar-valid RFC 3339 instant or dashed legacy date-only
- * value. Compact dates, sub-millisecond instants, and host-local date-times are
- * rejected because they cannot round-trip through the strict timestamp contract
- * losslessly and deterministically.
- */
-export function canonicalizeContextRecencyCoordinate(value) {
-    if (typeof value !== "string")
-        return null;
-    const trimmed = value.trim();
-    if (!isMillisecondPrecisionRfc3339DateTime(trimmed) &&
-        !/^\d{4}-\d{2}-\d{2}$/u.test(trimmed)) {
-        return null;
-    }
-    try {
-        return resolveIsoOrRelative(trimmed, new Date(Number.NaN), "context signal recency coordinate");
-    }
-    catch {
-        return null;
-    }
-}
+!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="9a4301eb-d8a5-52c0-8bf0-f65b3b9a96a3")}catch(e2){}})();import{isMillisecondPrecisionRfc3339DateTime,resolveIsoOrRelative}from"../../core/shared/time.js";const CONTEXT_RECENCY_EPOCH="1970-01-01T00:00:00.000Z";function canonicalizeContextRecencyCoordinate(value){if(typeof value!=="string")return null;const trimmed=value.trim();if(!isMillisecondPrecisionRfc3339DateTime(trimmed)&&!/^\d{4}-\d{2}-\d{2}$/u.test(trimmed)){return null}try{return resolveIsoOrRelative(trimmed,new Date(Number.NaN),"context signal recency coordinate")}catch{return null}}export{CONTEXT_RECENCY_EPOCH,canonicalizeContextRecencyCoordinate};
 //# sourceMappingURL=recency.js.map
-//# debugId=377499d7-13b3-55f0-9d44-425bfcaf7964

package/dist/sdk/context/semantic-session-attribution.js

@@ -1,83 +1,2 @@
-/**
- * @module sdk/semantic-session-attribution
- *
- * Maintains bounded claimed/focused lineage evidence used by automatic
- * mutation provenance without scanning history or retaining prompt content.
- */
-
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="97c1e310-3cd9-5846-a54c-d019b0351541")}catch(e){}}();
-import { getActiveExtensionRegistrations } from "../../core/extensions/index.js";
-import { resolveItemTypeRegistry } from "../../core/item/type-registry.js";
-import { recordClaimedWorkAttribution, recordFocusedWorkAttribution, releaseClaimedWorkAttribution, } from "../../core/session/session-state.js";
-import { locateItem, readLocatedItem } from "../../core/store/item-store.js";
-const MAX_SEMANTIC_LINEAGE_DEPTH = 16;
-/** Resolve an item's canonical parent lineage under a strict depth bound. */
-export async function resolveSemanticLineageIds(pmRoot, settings, itemId) {
-    const typeToFolder = resolveItemTypeRegistry(settings, getActiveExtensionRegistrations()).type_to_folder;
-    const lineage = [];
-    const seen = new Set();
-    let cursor = itemId;
-    while (cursor && lineage.length < MAX_SEMANTIC_LINEAGE_DEPTH) {
-        const normalized = cursor.trim().toLowerCase();
-        if (!normalized || seen.has(normalized))
-            break;
-        seen.add(normalized);
-        const located = await locateItem(pmRoot, cursor, settings.id_prefix, settings.item_format, typeToFolder);
-        if (!located)
-            break;
-        const loaded = await readLocatedItem(located, { schema: settings.schema });
-        lineage.push(loaded.document.metadata.id);
-        cursor = loaded.document.metadata.parent;
-    }
-    return lineage;
-}
-/** Record one successful claim and its bounded canonical lineage. */
-export async function recordClaimSemanticAttribution(params) {
-    await recordClaimedWorkAttribution({
-        pmRoot: params.pmRoot,
-        principal: params.principal,
-        itemId: params.itemId,
-        lineageIds: await resolveSemanticLineageIds(params.pmRoot, params.settings, params.itemId),
-    });
-}
-/** Remove one released claim from the active semantic workset. */
-export async function recordReleaseSemanticAttribution(params) {
-    await releaseClaimedWorkAttribution(params);
-}
-/** Set or clear focused semantic work with canonical lineage evidence. */
-export async function recordFocusSemanticAttribution(params) {
-    await recordFocusedWorkAttribution({
-        pmRoot: params.pmRoot,
-        principal: params.principal,
-        ...(params.itemId
-            ? {
-                itemId: params.itemId,
-                lineageIds: await resolveSemanticLineageIds(params.pmRoot, params.settings, params.itemId),
-            }
-            : {}),
-    });
-}
-/** Public constants used by scale and negative-control tests. */
-export const SEMANTIC_ATTRIBUTION_LIMITS = {
-    lineage_depth: MAX_SEMANTIC_LINEAGE_DEPTH,
-    active_items: 64,
-    evidence_rows: 32,
-};
-/** Convert bounded claim/focus evidence into normalized context affinity. */
-export function semanticAttributionAffinity(attribution) {
-    if (!attribution)
-        return undefined;
-    const affinity = {};
-    for (const itemId of attribution.active_item_ids)
-        affinity[itemId] = 1;
-    if (attribution.focused_item_id)
-        affinity[attribution.focused_item_id] = 1;
-    for (const evidence of attribution.evidence) {
-        const lineage = /^lineage:(.+)$/u.exec(evidence)?.[1];
-        if (lineage && affinity[lineage] === undefined)
-            affinity[lineage] = 0.75;
-    }
-    return Object.keys(affinity).length > 0 ? affinity : undefined;
-}
+!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="05df81b3-2fbd-5d83-88e3-be300091dd09")}catch(e2){}})();import{getActiveExtensionRegistrations}from"../../core/extensions/index.js";import{resolveItemTypeRegistry}from"../../core/item/type-registry.js";import{recordClaimedWorkAttribution,recordFocusedWorkAttribution,releaseClaimedWorkAttribution}from"../../core/session/session-state.js";import{locateItem,readLocatedItem}from"../../core/store/item-store.js";const MAX_SEMANTIC_LINEAGE_DEPTH=16;async function resolveSemanticLineageIds(pmRoot,settings,itemId){const typeToFolder=resolveItemTypeRegistry(settings,getActiveExtensionRegistrations()).type_to_folder;const lineage=[];const seen=new Set;let cursor=itemId;while(cursor&&lineage.length<MAX_SEMANTIC_LINEAGE_DEPTH){const normalized=cursor.trim().toLowerCase();if(!normalized||seen.has(normalized))break;seen.add(normalized);const located=await locateItem(pmRoot,cursor,settings.id_prefix,settings.item_format,typeToFolder);if(!located)break;const loaded=await readLocatedItem(located,{schema:settings.schema});lineage.push(loaded.document.metadata.id);cursor=loaded.document.metadata.parent}return lineage}async function recordClaimSemanticAttribution(params){await recordClaimedWorkAttribution({pmRoot:params.pmRoot,principal:params.principal,itemId:params.itemId,lineageIds:await resolveSemanticLineageIds(params.pmRoot,params.settings,params.itemId)})}async function recordReleaseSemanticAttribution(params){await releaseClaimedWorkAttribution(params)}async function recordFocusSemanticAttribution(params){await recordFocusedWorkAttribution({pmRoot:params.pmRoot,principal:params.principal,...params.itemId?{itemId:params.itemId,lineageIds:await resolveSemanticLineageIds(params.pmRoot,params.settings,params.itemId)}:{}})}const SEMANTIC_ATTRIBUTION_LIMITS={lineage_depth:MAX_SEMANTIC_LINEAGE_DEPTH,active_items:64,evidence_rows:32};function semanticAttributionAffinity(attribution){if(!attribution)return void 0;const affinity={};for(const itemId of attribution.active_item_ids)affinity[itemId]=1;if(attribution.focused_item_id)affinity[attribution.focused_item_id]=1;for(const evidence of attribution.evidence){const lineage=/^lineage:(.+)$/u.exec(evidence)?.[1];if(lineage&&affinity[lineage]===void 0)affinity[lineage]=.75}return Object.keys(affinity).length>0?affinity:void 0}export{SEMANTIC_ATTRIBUTION_LIMITS,recordClaimSemanticAttribution,recordFocusSemanticAttribution,recordReleaseSemanticAttribution,resolveSemanticLineageIds,semanticAttributionAffinity};
 //# sourceMappingURL=semantic-session-attribution.js.map
-//# debugId=97c1e310-3cd9-5846-a54c-d019b0351541

package/dist/sdk/context/usage-egress.js

@@ -1,30 +1,2 @@
-/**
- * @module sdk/context/usage-egress
- *
- * Keeps post-projection context feedback best-effort without weakening the
- * response contract returned by embedded SDK and MCP hosts.
- */
-
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="c5a14f99-ce5b-5da7-8b17-6b6a56f0644a")}catch(e){}}();
-import { finalizeContextUsageDelivery } from "../context-usage.js";
-/** Finalize derived usage feedback and attach a stable warning on failure. */
-export async function finalizeContextUsageEgress(pmRoot, projected, finalize = finalizeContextUsageDelivery) {
-    try {
-        await finalize({ pmRoot, result: projected });
-    }
-    catch {
-        if (typeof projected === "object" &&
-            projected !== null &&
-            !Array.isArray(projected)) {
-            const record = projected;
-            const warnings = Array.isArray(record.warnings)
-                ? record.warnings.filter((warning) => typeof warning === "string")
-                : [];
-            record.warnings = [
-                ...new Set([...warnings, "context_usage_feedback_write_failed"]),
-            ].sort();
-        }
-    }
-}
+!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="c2766f4e-6354-55bb-9e40-676273ee901f")}catch(e2){}})();import{finalizeContextUsageDelivery}from"../context-usage.js";async function finalizeContextUsageEgress(pmRoot,projected,finalize=finalizeContextUsageDelivery){try{await finalize({pmRoot,result:projected})}catch{if(typeof projected==="object"&&projected!==null&&!Array.isArray(projected)){const record=projected;const warnings=Array.isArray(record.warnings)?record.warnings.filter(warning=>typeof warning==="string"):[];record.warnings=[...new Set([...warnings,"context_usage_feedback_write_failed"])].sort()}}}export{finalizeContextUsageEgress};
 //# sourceMappingURL=usage-egress.js.map
-//# debugId=c5a14f99-ce5b-5da7-8b17-6b6a56f0644a

package/dist/sdk/context/usage-ledger.js

@@ -1,186 +1,4 @@
-/**
- * @module sdk/context/usage-ledger
- *
- * Bounds derived feedback reads and writes in bytes. High-water compaction
- * retains a half-full suffix under the same lock as append, leaving headroom
- * for subsequent serves without rewriting on every context request.
- */
-
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="f3af7f8f-a462-5eb4-af08-c64c3c327e62")}catch(e){}}();
-import { randomUUID } from "node:crypto";
-import { constants } from "node:fs";
-import { lstat, mkdir, open, rename, rm } from "node:fs/promises";
-import path from "node:path";
-import { isFileMissingError } from "../../core/fs/fs-utils.js";
-import { acquireLock } from "../../core/lock/lock.js";
-/** Public storage and sampling ceilings shared by every feedback producer. */
-export const CONTEXT_USAGE_LIMITS = {
-    max_serving_rows: 256,
-    max_bytes: 262_144,
-    max_event_bytes: 32_768,
-    retained_byte_fraction: 0.5,
-    max_events: 2_048,
-    retention_days: 30,
-};
-/** Named validation failure emitted by context-usage SDK inputs. */
-export class ContextUsageValidationError extends TypeError {
-    /** Stable code for package and CLI hosts. */
-    code = "context_usage_validation_failed";
-    /** Reject invalid feedback controls without exposing ledger contents. */
-    constructor(message) {
-        super(message);
-        this.name = "ContextUsageValidationError";
-    }
-}
-/** Normalize one timestamp so filtering and serialization share the same clock. */
-export function resolveNow(options) {
-    const ms = Date.parse(options.now ?? new Date().toISOString());
-    if (!Number.isFinite(ms))
-        throw new ContextUsageValidationError("Context usage now must be a valid timestamp");
-    return { iso: new Date(ms).toISOString(), ms };
-}
-/** Resolve checked byte, count and time bounds before touching storage. */
-function bounds(options) {
-    const maxBytes = options.maxBytes ?? CONTEXT_USAGE_LIMITS.max_bytes;
-    const maxEvents = options.maxEvents ?? CONTEXT_USAGE_LIMITS.max_events;
-    const retentionDays = options.retentionDays ?? CONTEXT_USAGE_LIMITS.retention_days;
-    if (!Number.isSafeInteger(maxBytes) || maxBytes < 1024 || maxBytes > CONTEXT_USAGE_LIMITS.max_bytes ||
-        !Number.isSafeInteger(maxEvents) || maxEvents < 1 || !Number.isFinite(retentionDays) || retentionDays <= 0) {
-        throw new ContextUsageValidationError("Context usage retention requires positive maxEvents and retentionDays, and maxBytes from 1024 through 262144");
-    }
-    return { maxBytes, maxEvents, cutoff: resolveNow(options).ms - retentionDays * 86_400_000 };
-}
-/** Open only a private regular ledger, refusing redirected runtime directories and file links. */
-async function openLedger(target, flags) {
-    if (!(await lstat(path.dirname(target))).isDirectory()) {
-        throw new ContextUsageValidationError("Context usage runtime must be a real directory");
-    }
-    try {
-        if ((await lstat(target)).isSymbolicLink()) {
-            throw new ContextUsageValidationError("Context usage ledger must not be a symbolic link");
-        }
-    }
-    catch (error) {
-        if (!isFileMissingError(error))
-            throw error;
-    }
-    // Unsupported platform flags contribute zero to the numeric bit mask. The
-    // lstat check also rejects existing links where no-follow is unavailable.
-    const handle = await open(target, flags | constants.O_NOFOLLOW | constants.O_NONBLOCK, 0o600);
-    try {
-        const metadata = await handle.stat();
-        if (!metadata.isFile() || metadata.nlink !== 1) {
-            throw new ContextUsageValidationError("Context usage ledger must be an unshared regular file");
-        }
-        return handle;
-    }
-    catch (error) {
-        await handle.close();
-        throw error;
-    }
-}
-/** Read only a bounded file suffix, dropping a partial first JSONL row. */
-export async function readEvents(options) {
-    const policy = bounds(options);
-    try {
-        const handle = await openLedger(path.join(options.pmRoot, "runtime", "context-usage.jsonl"), constants.O_RDONLY);
-        try {
-            const size = (await handle.stat()).size;
-            const start = Math.max(0, size - policy.maxBytes);
-            const buffer = Buffer.alloc(Math.min(size, policy.maxBytes));
-            const { bytesRead } = await handle.read(buffer, 0, buffer.length, start);
-            const text = buffer.subarray(0, bytesRead).toString("utf8");
-            const lines = (start > 0 ? (text.includes("\n") ? text.slice(text.indexOf("\n") + 1) : "") : text).split("\n");
-            return lines.flatMap((line) => {
-                try {
-                    const event = JSON.parse(line);
-                    return event && Date.parse(event.at) >= policy.cutoff ? [event] : [];
-                }
-                catch {
-                    return [];
-                }
-            }).slice(-policy.maxEvents);
-        }
-        finally {
-            await handle.close();
-        }
-    }
-    catch {
-        return [];
-    }
-}
-/** Retain a contiguous newest suffix within both byte and event-count bounds. */
-function retainedText(events, byteLimit, maxEvents) {
-    const lines = [];
-    let bytes = 0;
-    for (let index = events.length - 1; index >= 0 && lines.length < maxEvents; index -= 1) {
-        const line = `${JSON.stringify(events[index])}\n`;
-        bytes += Buffer.byteLength(line);
-        if (bytes > byteLimit)
-            break;
-        lines.push(line);
-    }
-    return lines.reverse().join("");
-}
-/**
- * Append once, or compact atomically to a half-full suffix at the high-water mark.
- * Requires trusted, stable workspace directory entries and ancestors; the lock
- * coordinates cooperating writers and cannot constrain hostile path replacement.
- */
-export async function appendEvents(options, events, deliveryServeId) {
-    const policy = bounds(options);
-    const target = path.join(options.pmRoot, "runtime", "context-usage.jsonl");
-    const retainedBytes = Math.floor(policy.maxBytes * CONTEXT_USAGE_LIMITS.retained_byte_fraction);
-    const eventLimit = Math.min(CONTEXT_USAGE_LIMITS.max_event_bytes, retainedBytes);
-    if (events.some((event) => Buffer.byteLength(`${JSON.stringify(event)}\n`) > eventLimit)) {
-        throw new ContextUsageValidationError("Context usage event exceeds the declared byte ceiling");
-    }
-    const current = events.filter((event) => Date.parse(event.at) >= policy.cutoff);
-    const appended = retainedText(current, retainedBytes, policy.maxEvents);
-    const lockStarted = performance.now();
-    const releaseLock = await acquireLock(options.pmRoot, "context-usage-ledger", 30, `context-usage:${process.pid}`, false, false, 3_000);
-    const lockWaitMs = performance.now() - lockStarted;
-    try {
-        await mkdir(path.dirname(target), { recursive: true });
-        let handle = await openLedger(target, constants.O_WRONLY | constants.O_CREAT | constants.O_APPEND);
-        try {
-            const size = (await handle.stat()).size;
-            const previous = deliveryServeId === undefined ? undefined : await readEvents(options);
-            if (previous?.some((event) => event.kind === "delivery" && event.serve_id === deliveryServeId)) {
-                return { written_bytes: 0, ledger_bytes: size, compacted: false, lock_wait_ms: lockWaitMs };
-            }
-            const customRetention = options.maxEvents !== undefined || options.retentionDays !== undefined;
-            if (!customRetention && size + Buffer.byteLength(appended) <= policy.maxBytes) {
-                await handle.writeFile(appended, "utf8");
-                return { written_bytes: Buffer.byteLength(appended), ledger_bytes: size + Buffer.byteLength(appended), compacted: false, lock_wait_ms: lockWaitMs };
-            }
-            const retained = retainedText([...(previous ?? await readEvents(options)), ...current], retainedBytes, policy.maxEvents);
-            const temporary = `${target}.${process.pid}.${randomUUID()}.tmp`;
-            const replacement = await open(temporary, "wx", 0o600);
-            try {
-                try {
-                    await replacement.writeFile(retained, "utf8");
-                }
-                finally {
-                    await replacement.close();
-                }
-                // Windows cannot replace the destination while our append handle is open.
-                await handle.close();
-                handle = undefined;
-                await rename(temporary, target);
-                return { written_bytes: Buffer.byteLength(retained), ledger_bytes: Buffer.byteLength(retained), compacted: true, lock_wait_ms: lockWaitMs };
-            }
-            finally {
-                await rm(temporary, { force: true });
-            }
-        }
-        finally {
-            await handle?.close();
-        }
-    }
-    finally {
-        await releaseLock();
-    }
-}
+!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="72eb01a9-e8b8-59cd-b178-3c594d3faff9")}catch(e2){}})();import{randomUUID}from"node:crypto";import{constants}from"node:fs";import{lstat,mkdir,open,rename,rm}from"node:fs/promises";import path from"node:path";import{isFileMissingError}from"../../core/fs/fs-utils.js";import{acquireLock}from"../../core/lock/lock.js";const CONTEXT_USAGE_LIMITS={max_serving_rows:256,max_bytes:262144,max_event_bytes:32768,retained_byte_fraction:.5,max_events:2048,retention_days:30};class ContextUsageValidationError extends TypeError{code="context_usage_validation_failed";constructor(message){super(message);this.name="ContextUsageValidationError"}}function resolveNow(options){const ms=Date.parse(options.now??new Date().toISOString());if(!Number.isFinite(ms))throw new ContextUsageValidationError("Context usage now must be a valid timestamp");return{iso:new Date(ms).toISOString(),ms}}function bounds(options){const maxBytes=options.maxBytes??CONTEXT_USAGE_LIMITS.max_bytes;const maxEvents=options.maxEvents??CONTEXT_USAGE_LIMITS.max_events;const retentionDays=options.retentionDays??CONTEXT_USAGE_LIMITS.retention_days;if(!Number.isSafeInteger(maxBytes)||maxBytes<1024||maxBytes>CONTEXT_USAGE_LIMITS.max_bytes||!Number.isSafeInteger(maxEvents)||maxEvents<1||!Number.isFinite(retentionDays)||retentionDays<=0){throw new ContextUsageValidationError("Context usage retention requires positive maxEvents and retentionDays, and maxBytes from 1024 through 262144")}return{maxBytes,maxEvents,cutoff:resolveNow(options).ms-retentionDays*864e5}}async function openLedger(target,flags){if(!(await lstat(path.dirname(target))).isDirectory()){throw new ContextUsageValidationError("Context usage runtime must be a real directory")}try{if((await lstat(target)).isSymbolicLink()){throw new ContextUsageValidationError("Context usage ledger must not be a symbolic link")}}catch(error){if(!isFileMissingError(error))throw error}const handle=await open(target,flags|constants.O_NOFOLLOW|constants.O_NONBLOCK,384);try{const metadata=await handle.stat();if(!metadata.isFile()||metadata.nlink!==1){throw new ContextUsageValidationError("Context usage ledger must be an unshared regular file")}return handle}catch(error){await handle.close();throw error}}async function readEvents(options){const policy=bounds(options);try{const handle=await openLedger(path.join(options.pmRoot,"runtime","context-usage.jsonl"),constants.O_RDONLY);try{const size=(await handle.stat()).size;const start=Math.max(0,size-policy.maxBytes);const buffer=Buffer.alloc(Math.min(size,policy.maxBytes));const{bytesRead}=await handle.read(buffer,0,buffer.length,start);const text=buffer.subarray(0,bytesRead).toString("utf8");const lines=(start>0?text.includes("\n")?text.slice(text.indexOf("\n")+1):"":text).split("\n");return lines.flatMap(line=>{try{const event=JSON.parse(line);return event&&Date.parse(event.at)>=policy.cutoff?[event]:[]}catch{return[]}}).slice(-policy.maxEvents)}finally{await handle.close()}}catch{return[]}}function retainedText(events,byteLimit,maxEvents){const lines=[];let bytes=0;for(let index=events.length-1;index>=0&&lines.length<maxEvents;index-=1){const line=`${JSON.stringify(events[index])}
+`;bytes+=Buffer.byteLength(line);if(bytes>byteLimit)break;lines.push(line)}return lines.reverse().join("")}async function appendEvents(options,events,deliveryServeId){const policy=bounds(options);const target=path.join(options.pmRoot,"runtime","context-usage.jsonl");const retainedBytes=Math.floor(policy.maxBytes*CONTEXT_USAGE_LIMITS.retained_byte_fraction);const eventLimit=Math.min(CONTEXT_USAGE_LIMITS.max_event_bytes,retainedBytes);if(events.some(event=>Buffer.byteLength(`${JSON.stringify(event)}
+`)>eventLimit)){throw new ContextUsageValidationError("Context usage event exceeds the declared byte ceiling")}const current=events.filter(event=>Date.parse(event.at)>=policy.cutoff);const appended=retainedText(current,retainedBytes,policy.maxEvents);const lockStarted=performance.now();const releaseLock=await acquireLock(options.pmRoot,"context-usage-ledger",30,`context-usage:${process.pid}`,false,false,3e3);const lockWaitMs=performance.now()-lockStarted;try{await mkdir(path.dirname(target),{recursive:true});let handle=await openLedger(target,constants.O_WRONLY|constants.O_CREAT|constants.O_APPEND);try{const size=(await handle.stat()).size;const previous=deliveryServeId===void 0?void 0:await readEvents(options);if(previous?.some(event=>event.kind==="delivery"&&event.serve_id===deliveryServeId)){return{written_bytes:0,ledger_bytes:size,compacted:false,lock_wait_ms:lockWaitMs}}const customRetention=options.maxEvents!==void 0||options.retentionDays!==void 0;if(!customRetention&&size+Buffer.byteLength(appended)<=policy.maxBytes){await handle.writeFile(appended,"utf8");return{written_bytes:Buffer.byteLength(appended),ledger_bytes:size+Buffer.byteLength(appended),compacted:false,lock_wait_ms:lockWaitMs}}const retained=retainedText([...previous??await readEvents(options),...current],retainedBytes,policy.maxEvents);const temporary=`${target}.${process.pid}.${randomUUID()}.tmp`;const replacement=await open(temporary,"wx",384);try{try{await replacement.writeFile(retained,"utf8")}finally{await replacement.close()}await handle.close();handle=void 0;await rename(temporary,target);return{written_bytes:Buffer.byteLength(retained),ledger_bytes:Buffer.byteLength(retained),compacted:true,lock_wait_ms:lockWaitMs}}finally{await rm(temporary,{force:true})}}finally{await handle?.close()}}finally{await releaseLock()}}export{CONTEXT_USAGE_LIMITS,ContextUsageValidationError,appendEvents,readEvents,resolveNow};
 //# sourceMappingURL=usage-ledger.js.map
-//# debugId=f3af7f8f-a462-5eb4-af08-c64c3c327e62