agent-recall-core 3.4.30 → 3.4.35

package/dist/storage/content-guard.js

@@ -0,0 +1,179 @@
+/**
+ * content-guard.ts — pre-sync content scrubbing for opt-in cloud users.
+ *
+ * Applied BEFORE any journalWrite → syncToSupabase call so that secrets and
+ * prompt-injection attempts do not reach Supabase or the embedding API.
+ *
+ * Two-layer scrub:
+ *   1. scrubPromptInjection — strip XML system-marker tags, bidi overrides,
+ *      null bytes, and explicit injection phrases. Extracted from bootstrap.ts
+ *      and re-exported here so journal-write/palace-write can import from a
+ *      single source of truth.
+ *   2. scrubSecretContent — redact known secret token prefixes (AKIA…, ghp_…,
+ *      gho_…, ghs_…, sk-…, xoxb-…, PEM markers). Operates on content, not
+ *      filenames (bootstrap.ts isSecretFile() handles filename-level rejection).
+ *
+ * scrubForCloud(content) = scrubSecretContent(scrubPromptInjection(content))
+ *
+ * Design guarantees:
+ *   - Never throws — any failure returns the original content unchanged.
+ *   - Pure function, no I/O, no Supabase imports.
+ *   - Returns a SecretScanResult so callers can log/block if desired.
+ *
+ * Usage: call scrubForCloud(content) in journal-write.ts and palace-write.ts
+ * before passing content to syncToSupabase.
+ */
+// ---------------------------------------------------------------------------
+// Layer 1 — prompt-injection scrub (re-export from bootstrap logic)
+// ---------------------------------------------------------------------------
+/**
+ * Strip prompt-injection patterns from content before it leaves the machine.
+ * Same logic as bootstrap.ts:scrubPromptInjection but exported here for
+ * journal-write and palace-write to use at sync time.
+ */
+export function scrubPromptInjection(s) {
+    try {
+        return s
+            .replace(/<\/?\s*(system[-_]?(reminder|prompt|message|instruction)|important|critical)\b[^>]*>/gi, "[stripped tag]")
+            .replace(/<\|im_(start|end)\|>/gi, "[stripped]")
+            .replace(/\b(ignore|disregard|forget)\s+(all\s+)?(previous|prior|above)\s+(instructions?|prompts?|messages?)/gi, "[stripped injection attempt]")
+            .replace(/[‪-‮⁦-⁩]/g, "") // bidi override chars
+            .replace(/\0/g, ""); // null bytes
+    }
+    catch {
+        return s;
+    }
+}
+// ---------------------------------------------------------------------------
+// Layer 2 — content-level secret scan
+// ---------------------------------------------------------------------------
+/**
+ * Patterns that match known secret token prefixes / PEM markers in CONTENT.
+ * Complements isSecretFile() in bootstrap.ts which tests filenames only.
+ *
+ * Prefix list (grounding: packages/core/src/supabase/sync.ts risk analysis):
+ *   AKIA…        — AWS access key
+ *   ghp_…        — GitHub personal access token
+ *   gho_…        — GitHub OAuth token
+ *   ghs_…        — GitHub app installation token
+ *   sk-…         — OpenAI / Anthropic secret key (≥20 chars to avoid false-positives)
+ *   xoxb-…       — Slack bot token
+ *   xoxp-…       — Slack user token
+ *   -----BEGIN … KEY/CERTIFICATE— PEM markers
+ */
+// NOTE: generic `Authorization: Bearer <jwt>` is intentionally NOT scanned here.
+// JWTs are short-lived and the pattern has a very high false-positive rate on
+// normal journal content. This is a documented scope decision, not a silent gap.
+const SECRET_CONTENT_PATTERNS = [
+    { re: /\bAKIA[0-9A-Z]{16,}\b/g, label: "AWS access key" },
+    { re: /\bghp_[A-Za-z0-9_]{20,}\b/g, label: "GitHub PAT (ghp_)" },
+    { re: /\bgho_[A-Za-z0-9_]{20,}\b/g, label: "GitHub OAuth token (gho_)" },
+    { re: /\bghs_[A-Za-z0-9_]{20,}\b/g, label: "GitHub app token (ghs_)" },
+    { re: /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g, label: "GitHub fine-grained PAT (github_pat_)" },
+    { re: /\bghr_[A-Za-z0-9]{20,}\b/g, label: "GitHub refresh token (ghr_)" },
+    { re: /\bsk-[A-Za-z0-9\-_]{20,}\b/g, label: "OpenAI/Anthropic secret key (sk-)" },
+    { re: /\bxoxb-[A-Za-z0-9\-]{20,}\b/g, label: "Slack bot token (xoxb-)" },
+    { re: /\bxoxp-[A-Za-z0-9\-]{20,}\b/g, label: "Slack user token (xoxp-)" },
+    { re: /\bnpm_[A-Za-z0-9]{20,}\b/g, label: "npm registry token" },
+    { re: /_authToken=[^\s"'\r\n]{8,}/g, label: "npm _authToken (.npmrc)" },
+    {
+        re: /-----BEGIN\s+(?:RSA |EC |DSA |OPENSSH |ENCRYPTED )?(?:PRIVATE KEY|CERTIFICATE)-----[\s\S]*?-----END\s+(?:RSA |EC |DSA |OPENSSH |ENCRYPTED )?(?:PRIVATE KEY|CERTIFICATE)-----/g,
+        label: "PEM private key/certificate block",
+    },
+];
+const REDACTED_PLACEHOLDER = "[REDACTED-SECRET]";
+/**
+ * Scan content for known secret token patterns and redact them in-place.
+ * Returns the redacted content and a count of how many matches were replaced.
+ */
+export function scrubSecretContent(content) {
+    try {
+        let result = content;
+        let redactedCount = 0;
+        const labels = [];
+        for (const { re, label } of SECRET_CONTENT_PATTERNS) {
+            // Reset lastIndex for global regexes (they carry state across calls if reused).
+            re.lastIndex = 0;
+            const matches = result.match(re);
+            if (matches && matches.length > 0) {
+                re.lastIndex = 0;
+                result = result.replace(re, REDACTED_PLACEHOLDER);
+                redactedCount += matches.length;
+                labels.push(label);
+            }
+        }
+        return { content: result, redactedCount, labels };
+    }
+    catch {
+        // Never throw — return original content on error.
+        return { content, redactedCount: 0, labels: [] };
+    }
+}
+// ---------------------------------------------------------------------------
+// Composite scrub — the single call site for journal-write / palace-write
+// ---------------------------------------------------------------------------
+/**
+ * scrubForCloud(content) applies both layers in order:
+ *   1. scrubPromptInjection  — removes injection/override attempts
+ *   2. scrubSecretContent    — redacts known secret token patterns
+ *
+ * Returns the sanitised string. Never throws.
+ */
+export function scrubForCloud(content) {
+    try {
+        const afterInjection = scrubPromptInjection(content);
+        const { content: afterSecrets } = scrubSecretContent(afterInjection);
+        return afterSecrets;
+    }
+    catch {
+        return content;
+    }
+}
+// ---------------------------------------------------------------------------
+// Fail-CLOSED export scrub — for deliberate egress (e.g. `ar corrections export`)
+// ---------------------------------------------------------------------------
+/**
+ * Raised by scrubForExport when a secret survives scrubbing. Distinct error type
+ * so callers can abort an export and name the offending record.
+ */
+export class SecretScanError extends Error {
+    label;
+    constructor(label) {
+        super(`secret survived export scrub (${label}) — refusing to emit`);
+        this.label = label;
+        this.name = "SecretScanError";
+    }
+}
+/**
+ * scrubForExport(content) — the fail-CLOSED sibling of scrubForCloud.
+ *
+ * scrubForCloud is fail-OPEN: on any internal error it returns the ORIGINAL
+ * content unchanged, which is the right call on the sync hot-path (never block a
+ * write) but the WRONG call for a deliberate export that will be handed to an
+ * external store. scrubForExport adds a post-condition: it re-scans the scrubbed
+ * output and THROWS SecretScanError if any known secret pattern still matches —
+ * so a redaction that silently failed open aborts the export instead of leaking.
+ *
+ * Use this for every string that leaves AgentRecall via an export/adapter path.
+ */
+export function scrubForExport(content) {
+    const scrubbed = scrubForCloud(content);
+    // Fail-CLOSED post-condition. Re-scan the OUTPUT with the secret patterns
+    // DIRECTLY — not via scrubSecretContent(), whose own try/catch returns
+    // redactedCount:0 on an internal error and would silently re-open the fail-open
+    // hole this function exists to close. A bare re.test() here lets any regex-engine
+    // error propagate and abort the export rather than leak.
+    //
+    // Under scrubForCloud's current contract a successful scrub leaves no residue,
+    // so this never fires on normal input — it is a defense-in-depth guard that trips
+    // only if scrubForCloud fails open (its outer catch returns the original) or its
+    // redaction contract regresses. Either way: refuse to emit.
+    for (const { re, label } of SECRET_CONTENT_PATTERNS) {
+        re.lastIndex = 0;
+        if (re.test(scrubbed)) {
+            throw new SecretScanError(label);
+        }
+    }
+    return scrubbed;
+}
+//# sourceMappingURL=content-guard.js.map

package/dist/storage/content-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-guard.js","sourceRoot":"","sources":["../../src/storage/content-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,8EAA8E;AAC9E,oEAAoE;AACpE,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,CAAS;IAC5C,IAAI,CAAC;QACH,OAAO,CAAC;aACL,OAAO,CACN,wFAAwF,EACxF,gBAAgB,CACjB;aACA,OAAO,CAAC,wBAAwB,EAAE,YAAY,CAAC;aAC/C,OAAO,CACN,sGAAsG,EACtG,8BAA8B,CAC/B;aACA,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,sBAAsB;aAC/C,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,sCAAsC;AACtC,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,iFAAiF;AACjF,8EAA8E;AAC9E,iFAAiF;AACjF,MAAM,uBAAuB,GAAiD;IAC5E,EAAE,EAAE,EAAE,wBAAwB,EAAW,KAAK,EAAE,gBAAgB,EAAE;IAClE,EAAE,EAAE,EAAE,4BAA4B,EAAO,KAAK,EAAE,mBAAmB,EAAE;IACrE,EAAE,EAAE,EAAE,4BAA4B,EAAO,KAAK,EAAE,2BAA2B,EAAE;IAC7E,EAAE,EAAE,EAAE,4BAA4B,EAAO,KAAK,EAAE,yBAAyB,EAAE;IAC3E,EAAE,EAAE,EAAE,mCAAmC,EAAE,KAAK,EAAE,uCAAuC,EAAE;IAC3F,EAAE,EAAE,EAAE,2BAA2B,EAAQ,KAAK,EAAE,6BAA6B,EAAE;IAC/E,EAAE,EAAE,EAAE,6BAA6B,EAAM,KAAK,EAAE,mCAAmC,EAAE;IACrF,EAAE,EAAE,EAAE,8BAA8B,EAAK,KAAK,EAAE,yBAAyB,EAAE;IAC3E,EAAE,EAAE,EAAE,8BAA8B,EAAK,KAAK,EAAE,0BAA0B,EAAE;IAC5E,EAAE,EAAE,EAAE,2BAA2B,EAAS,KAAK,EAAE,oBAAoB,EAAE;IACvE,EAAE,EAAE,EAAE,6BAA6B,EAAQ,KAAK,EAAE,yBAAyB,EAAE;IAC7E;QACE,EAAE,EAAE,+KAA+K;QACnL,KAAK,EAAE,mCAAmC;KAC3C;CACF,CAAC;AAEF,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AAWjD;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,IAAI,CAAC;QACH,IAAI,MAAM,GAAG,OAAO,CAAC;QACrB,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,KAAK,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,uBAAuB,EAAE,CAAC;YACpD,gFAAgF;YAChF,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjC,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;gBACjB,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;gBAClD,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;gBAChC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;QAClD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACnD,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,kBAAkB,CAAC,cAAc,CAAC,CAAC;QACrE,OAAO,YAAY,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,kFAAkF;AAClF,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACZ;IAA5B,YAA4B,KAAa;QACvC,KAAK,CAAC,iCAAiC,KAAK,sBAAsB,CAAC,CAAC;QAD1C,UAAK,GAAL,KAAK,CAAQ;QAEvC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACxC,0EAA0E;IAC1E,uEAAuE;IACvE,gFAAgF;IAChF,kFAAkF;IAClF,yDAAyD;IACzD,EAAE;IACF,+EAA+E;IAC/E,kFAAkF;IAClF,iFAAiF;IACjF,4DAA4D;IAC5D,KAAK,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,uBAAuB,EAAE,CAAC;QACpD,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;QACjB,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/storage/corrections.d.ts

@@ -30,12 +30,63 @@ export interface CorrectionRecord {
     /** Set when retractCorrection() soft-deletes this record. */
     retracted_at?: string;
     retract_reason?: string;
+    /**
+     * Wave 5 — corrections-prediction (north-star).
+     *
+     * `authoritative`: a human correction is GROUND TRUTH that can OVERRIDE the
+     * model (check_action `verdict:'blocked'`). Defaults true for `kind:'correction'`
+     * via applyCorrectionDefaults; explicit `authoritative:false` opts a record out
+     * of the override gate. Insights/hunches/facts default to NOT authoritative.
+     *
+     * predict_* counters track the predict-the-correction loop. They are kept
+     * STRICTLY SEPARATE from `precision` (= heeded/retrieved) — `predict_precision`
+     * = predict_hits / predicted_count and must never mutate the heeded metric.
+     */
+    authoritative?: boolean;
+    predicted_count?: number;
+    predict_hits?: number;
+    predict_precision?: number;
+    last_predicted?: string;
+    /**
+     * Consolidation & lifecycle (2026-06-29). Borrowed from Hindsight's REAL
+     * mechanisms — proof-count evidence grounding, refine-not-overwrite
+     * consolidation, contradiction→supersession, staleness — implemented
+     * AR-native (local, file-backed, no LLM on the storage path). Every field is
+     * optional and defaulted in applyCorrectionDefaults so pre-existing JSON
+     * (which has none of them) normalizes on read with no migration.
+     */
+    proof_count?: number;
+    proof_confidence?: number;
+    superseded_by?: string;
+    merged_from?: string[];
+    stale?: boolean;
+}
+/**
+ * One discarded correction-candidate, appended to corrections/_rejected.jsonl
+ * when the capture gate rejects the text. This is the survivorship-bias probe:
+ * the soft corrections the palace never sees ("that's not what I meant",
+ * "closer but the spacing is off") become VISIBLE here instead of vanishing.
+ *
+ * Written best-effort only — see logRejectedCorrection. A rejection log can
+ * NEVER throw into the capture path.
+ */
+export interface RejectedCorrectionRecord {
+    ts: string;
+    project: string;
+    rule: string;
+    reason: string;
+    gate_version: string;
 }
 export interface CorrectionOutcome {
     correction_id: string;
     project: string;
-    /** "heeded" = agent's action honored the warning. "recurred" = same bug happened again. */
-    kind: "retrieved" | "heeded" | "recurred";
+    /**
+     * "retrieved" = surfaced via check/recall. "heeded" = agent's action honored
+     * the warning. "recurred" = same bug happened again.
+     * Wave 5 — "predicted" = predictCorrection fired this risk before the user
+     * corrected; "predict_hit" = that prediction later became a real recurrence.
+     */
+    kind: "retrieved" | "heeded" | "recurred" | "predicted" | "predict_hit";
     /** ISO timestamp */
     at: string;
     /** Free-text evidence — what made you decide. */
@@ -63,30 +114,105 @@ export interface CorrectionKPI {
         precision: number;
         retrieved: number;
     }>;
+    /** P4: active corrections untouched > STALE_DAYS — review candidates. */
+    stale_candidates: Array<{
+        id: string;
+        rule: string;
+        last_seen: string;
+    }>;
 }
+/**
+ * Gate version stamp — bump whenever isLikelyRealCorrection's accept criteria
+ * change so a rejected-log analysis can attribute discard rates to a specific
+ * gate revision. Kept in lock-step with the classifier below.
+ *
+ * v3 (2026-06-21, Loop 8): the gate now scans the FULL correction text (and its
+ * decimal-safe sentence fragments) for an actionable marker instead of only the
+ * truncated first sentence. Loop 7 proved the first-sentence-slice discarded
+ * genuine soft corrections whose directive lived in sentence 2. The NOISE
+ * filters (system-fragment / too-short / pure-acknowledgment / doc-header) are
+ * unchanged and still run FIRST so the precision floor holds.
+ *
+ * v4 (2026-06-22, Loop 14): split directive markers into STRONG (accept anywhere)
+ * vs WEAK (accept only outside a hedged/reporting frame), closing the round-table's
+ * MEDIUM false-accept where tentative filler ("I think we should use it") passed on
+ * a bare weak verb. Recall-safe — no fixture correction relies on a hedged weak verb.
+ */
+export declare const GATE_VERSION = "v4-2026-06-22";
+/**
+ * P4: a correction is stale when its most recent touch (last_retrieved, else
+ * last_outcome, else its date) is older than STALE_DAYS. Pure — `nowMs` is
+ * injectable for tests. INFORMATIONAL ONLY: the corrections room is decay-
+ * protected, so this never archives on its own; it surfaces a review candidate.
+ */
+export declare function isStaleCorrection(rec: CorrectionRecord, nowMs?: number): boolean;
+/**
+ * Decimal-safe sentence splitter. Splits on sentence-ending punctuation
+ * (`.`, `!`, `?`, or a newline) ONLY when followed by whitespace or end-of-text
+ * — NOT on a bare `.` that sits between digits/word chars. This protects
+ * version/model tokens like "Opus 4.7", "v3.4.32", "novada-search" and URLs
+ * from being chopped mid-fragment (the exact Loop-7 mis-split that hid the
+ * imperative in "Show BOTH Opus 4.7 and 4.8" behind the slice "Show BOTH Opus 4").
+ *
+ * Returns the FULL text as a single fragment when no sentence boundary is found.
+ * Empty fragments are dropped. This is a classifier helper, not a linguistic
+ * tokenizer — it deliberately errs toward NOT splitting.
+ */
+export declare function splitSentences(text: string): string[];
 /**
  * Capture-quality gate — rejects context-free fragments, pure acknowledgments,
  * and text that carries no actionable signal.
  *
- * v2 (2026-06-12): classifies on the RULE field only (context param reserved for
- * future use but never classified on — prevents long context from bypassing the
- * acknowledgment gate).
- *
- * Gates (in order):
- *  1. Must be >= 12 chars after trim.
- *  2. Must NOT be a pure acknowledgment/fragment — applied unconditionally (no
- *     length cap — v1 60-char cap allowed long-context bypass).
- *  3. Reject system/tool fragments: starts with '<', is a pure number, or is a
- *     bare file path (no spaces, contains path separator, no verb-ish content).
- *  4. PASS if any of:
- *     a) imperative/modal marker present
- *     b) preference statement ("user wants/prefers/likes/needs", CJK equiv.)
- *     c) substantive rule: len >= 40 AND >= 2 words of >= 5 chars AND verb-ish
- *  5. else reject: "no actionable signal"
- *
- * Returns { ok: true } when the text passes all gates, or { ok: false, reason }
- * explaining which gate fired. Callers may surface the reason in a warning.
+ * v3 (2026-06-21, Loop 8): the ACTIONABLE-signal scan now runs over the FULL
+ * text AND each decimal-safe sentence fragment — accepting if ANY fragment
+ * carries an imperative/modal/preference marker. This fixes the Loop-7 root
+ * cause where the gate only ever saw the truncated first sentence
+ * (`text.split(/[.\n]/)[0].slice(0,100)`), discarding ~60% of genuine soft
+ * corrections whose directive lived in sentence 2 (e.g. "No, that's wrong.
+ * Don't use dark backgrounds.") or whose first sentence was chopped by a
+ * decimal ("Show BOTH Opus 4.7 and 4.8" → "Show BOTH Opus 4").
+ *
+ * PRECISION FLOOR: the HARD noise gates run FIRST, on the WHOLE text — these can
+ * never be rescued by the actionable scan:
+ *  1. too-short (< 12 chars).
+ *  2. system/tool fragment: starts with '<', pure number, bare file path.
+ *  3. doc/report/transcript header (starts with '#', a report/mission title,
+ *     or a file:// URL) — pasted artifacts, never a behavioral rule.
+ *
+ * Then the ACTIONABLE-signal scan runs over the FULL text + each fragment. A
+ * text that OPENS like an acknowledgment ("No, that's wrong …") is RESCUED only
+ * if a fragment carries a genuine directive (the Loop-7 leak: "No, that's wrong.
+ * Don't use dark backgrounds." → fragment 2 "Don't use …" is a real rule).
+ *
+ * Finally the SOFT acknowledgment gate rejects pure acks that the actionable
+ * scan did NOT rescue (bare "ok sure", "no that's not what I meant"). Because it
+ * runs AFTER the actionable scan, it can no longer eat a genuine correction that
+ * merely opens with "no" — but a content-free ack still has no directive to
+ * rescue it, so it is still dropped. The marker set is TIGHT (dropped the v2
+ * loose "verb-ish anywhere" path) so a long prose blob with no real directive
+ * is NOT re-admitted just because it contains a generic verb.
+ *
+ * Returns { ok: true } when the text passes, or { ok: false, reason } explaining
+ * which gate fired. Callers may surface the reason in a warning.
  */
+/**
+ * dropHardNoise — the four hard-noise precision-floor gates extracted so they
+ * can be called independently by the two-lane router (both lanes apply the same
+ * pre-filter before routing).
+ *
+ * Returns true  = text passes (KEEP — not obviously noise)
+ * Returns false = text fails a hard gate (DROP — un-rescuable by actionable scan)
+ *
+ * Identical semantics to the inline gates in isLikelyRealCorrection; this
+ * extraction must NOT change gate v4 behaviour (Loops 7/8/14 must stay intact).
+ *
+ * Gate 1  — minimum length (< 12 chars)
+ * Gate 2a — starts with '<' (system/tool fragment)
+ * Gate 2b — pure digits (bare number, no rule content)
+ * Gate 2c — bare file path (no spaces, has / or \, no 4+ letter word)
+ * Gate 3  — doc/report/transcript header (markdown '#', file://, ⏺, report title)
+ */
+export declare function dropHardNoise(text: string): boolean;
 export declare function isLikelyRealCorrection(rule: string, _context?: string): {
     ok: boolean;
     reason?: string;
@@ -94,6 +220,10 @@ export declare function isLikelyRealCorrection(rule: string, _context?: string):
 export interface WriteCorrectionResult {
     written: boolean;
     reason?: string;
+    /** P1 consolidation: true when this intake was folded into an existing record. */
+    merged?: boolean;
+    /** id of the written record, or the existing record's id on a merge. */
+    id?: string;
 }
 /**
  * Write a correction to persistent storage.
@@ -128,15 +258,110 @@ export interface RetractCorrectionResult {
  * The file is rewritten atomically — never deleted. The record remains in
  * _outcomes.jsonl history and can be manually reactivated by editing the JSON.
  */
-export declare function retractCorrection(project: string, id: string, reason?: string): RetractCorrectionResult;
+export declare function retractCorrection(project: string, id: string, reason?: string, supersededBy?: string): RetractCorrectionResult;
 /**
  * Record an outcome event for a correction (retrieved / heeded / recurred).
  * Appends to _outcomes.jsonl and also updates the correction JSON's counters
  * + precision cache. Atomic per-write.
  */
 export declare function recordOutcome(outcome: CorrectionOutcome): void;
+/**
+ * Best-effort: append one row to corrections/_rejected.jsonl recording a
+ * gate-rejected correction candidate. INVARIANT: never throws — every fs op is
+ * wrapped so a rejection log can never escalate into the capture path. Reads
+ * nothing on the hot path except the (already-small) file it rotates.
+ *
+ * Rotation: when the file exceeds REJECTED_LOG_CAP rows, it is rewritten with
+ * only the most-recent rows (append-only semantics, bounded size). Rotation is
+ * itself best-effort — a rotation failure still leaves the append intact.
+ */
+export declare function logRejectedCorrection(project: string, rule: string, reason: string): void;
+/**
+ * Read all rejected correction candidates for a project, oldest-first (file
+ * order). Returns [] when no log exists — never throws. Skips malformed lines.
+ */
+export declare function readRejectedCorrections(project: string): RejectedCorrectionRecord[];
+export interface RejectedStats {
+    project: string;
+    discarded: number;
+    /** Discard rate = discarded / (discarded + accepted). undefined if accepted unknown. */
+    rate?: number;
+    /** Accepted count if known (e.g. from readCorrections). */
+    accepted?: number;
+    /** Reasons sorted by descending count. */
+    top_reasons: Array<{
+        reason: string;
+        count: number;
+    }>;
+}
+/**
+ * Aggregate the rejected log into discard count + per-reason breakdown. When
+ * `acceptedCount` is supplied the discard RATE is computed too. Read-only.
+ */
+export declare function getRejectedStats(project: string, acceptedCount?: number): RejectedStats;
+/**
+ * Wave 5 — single source for "what outcomes already fired today" across the
+ * predict / check-action / session-start / session-end call sites. Reads the
+ * _outcomes.jsonl audit trail and buckets today's events (local-TZ) per
+ * correction id. Returns an empty Map when no log exists — never throws.
+ *
+ * Local-TZ date (`sv` locale → YYYY-MM-DD) matches the 1/day guards elsewhere
+ * (session-start/session-end) so "today" agrees across all four readers.
+ */
+export declare function readOutcomesForToday(project: string): Map<string, Set<CorrectionOutcome["kind"]>>;
+/**
+ * Loop 3 — bucket outcome events recorded STRICTLY BEFORE a given ISO/date
+ * cutoff (local-TZ day comparison). Mirrors readOutcomesForToday but with an
+ * explicit date arg, so the cross-day predict_hit path can ask "was this risk
+ * already PREDICTED on an earlier day?" without depending on today's bucket.
+ *
+ * `isoCutoff` may be a full ISO timestamp or a YYYY-MM-DD date; only its
+ * local-TZ day is used. An event on the SAME day as the cutoff is EXCLUDED
+ * (strictly-before) — this is what keeps a same-session/same-day prediction
+ * from ever counting as a cross-day hit.
+ */
+export declare function readOutcomesBefore(project: string, isoCutoff: string): Map<string, Set<CorrectionOutcome["kind"]>>;
+/**
+ * Loop 3 — bucket outcome events recorded ON a specific local-TZ day. Mirrors
+ * readOutcomesForToday but with an explicit date arg (for replaying a past day
+ * in tests / offline analysis). `isoDate` may be a full ISO timestamp or a
+ * YYYY-MM-DD date; only its local-TZ day is used.
+ */
+export declare function readOutcomesOnDate(project: string, isoDate: string): Map<string, Set<CorrectionOutcome["kind"]>>;
 /**
  * Aggregate KPIs over all corrections for a project — the "is this learning loop working?" view.
  */
 export declare function getCorrectionKPIs(project: string): CorrectionKPI;
+export interface NoiseReview {
+    /** Low-signal corrections (precision<0.3, retrieved≥3) proposed for archiving. */
+    suggestions: Array<{
+        id: string;
+        rule: string;
+        precision: number;
+    }>;
+    /** ids actually retracted — non-empty ONLY when auto mode is on. */
+    pruned: string[];
+    /** Whether this call ran in auto-prune mode. */
+    auto: boolean;
+}
+/**
+ * P4: review low-signal corrections for archiving. SUGGEST-ONLY by default —
+ * returns candidates and mutates NOTHING. Set AR_CONSOLIDATE_AUTO=1 (or pass
+ * { auto: true }) to actually retract them. This mirrors AR's conservative
+ * posture: deleting belief is a deliberate act, so the default never mutates;
+ * an explicit human (or opt-in flag) triggers the retraction.
+ */
+export declare function reviewNoiseCorrections(project: string, opts?: {
+    auto?: boolean;
+}): NoiseReview;
+/**
+ * P5: order corrections for surfacing when a cap applies. Today P0s are surfaced
+ * `slice(0, 10)` in newest-first FILENAME order — so when a project has >10 P0s
+ * the ones that survive are arbitrary (just the most-recently-dated). This ranks
+ * by a composite LOCAL score (NO key, NO network) so the most authoritative +
+ * evidence-backed + recently-relevant rules win the cap:
+ *   severity (p0 always above p1) ≫ proof_confidence ≫ recency ≫ proof_count.
+ * Deterministic and stable; pure (Date.now only for recency decay).
+ */
+export declare function rankCorrections(records: CorrectionRecord[], limit?: number): CorrectionRecord[];
 //# sourceMappingURL=corrections.d.ts.map

package/dist/storage/corrections.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"corrections.d.ts","sourceRoot":"","sources":["../../src/storage/corrections.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,2FAA2F;IAC3F,IAAI,EAAE,WAAW,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC1C,oBAAoB;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,iDAAiD;IACjD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,gBAAgB,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzE,4EAA4E;IAC5E,WAAW,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxF;AA8DD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CA4DxG;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,GAAG,qBAAqB,CAwBpG;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAqBnE;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAEzE;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAErE;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,uBAAuB,CAyBvG;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAyC9D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,CAkChE"}
+{"version":3,"file":"corrections.d.ts","sourceRoot":"","sources":["../../src/storage/corrections.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,YAAY,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,IAAI,EAAE,WAAW,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,GAAG,aAAa,CAAC;IACxE,oBAAoB;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,iDAAiD;IACjD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,gBAAgB,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzE,4EAA4E;IAC5E,WAAW,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvF,yEAAyE;IACzE,gBAAgB,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1E;AA6BD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,YAAY,kBAAkB,CAAC;AAyD5C;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,gBAAgB,EAAE,KAAK,GAAE,MAAmB,GAAG,OAAO,CAK5F;AA4BD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CA0BrD;AA8BD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAsBnD;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CA2ExG;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kFAAkF;IAClF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,wEAAwE;IACxE,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAoBD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,GAAG,qBAAqB,CAsEpG;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAqBnE;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAEzE;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAErE;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,MAAM,EACV,MAAM,CAAC,EAAE,MAAM,EACf,YAAY,CAAC,EAAE,MAAM,GACpB,uBAAuB,CAyBzB;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAsE9D;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,IAAI,CA+BN;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,wBAAwB,EAAE,CAuBnF;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,wFAAwF;IACxF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,WAAW,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,aAAa,CAkBvF;AAmDD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAGjG;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAChB,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAQ7C;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAQ7C;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,CA2ChE;AAED,MAAM,WAAW,WAAW;IAC1B,kFAAkF;IAClF,WAAW,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpE,oEAAoE;IACpE,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,gDAAgD;IAChD,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,WAAW,CAW9F;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,gBAAgB,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAe/F"}