nlm-memory 0.21.0 → 0.21.12

package/dist/core/alerts/drift-transition.js

@@ -0,0 +1,56 @@
+/**
+ * Version-drift alert transition logic — decides WHEN to fire, not
+ * whether to fire on every poll. Firing on every `behind: true` read
+ * would spam the webhook on every scheduled check; instead this tracks
+ * the false→true edge (fire once) and a daily re-fire while the daemon
+ * stays behind past a 48h grace window (so a long-ignored update still
+ * resurfaces, but not hourly).
+ *
+ * Pure and clock-injected — no fs/network here. Callers (see
+ * check-and-alert.ts) own reading/writing the persisted state and
+ * calling fireAlert with the returned event.
+ */
+export const DEFAULT_DRIFT_ALERT_STATE = {
+    behindSince: null,
+    lastFiredAt: null,
+};
+const SUSTAIN_THRESHOLD_MS = 48 * 60 * 60 * 1000;
+const REFIRE_INTERVAL_MS = 24 * 60 * 60 * 1000;
+export function evaluateDriftTransition(state, status, now) {
+    if (!status.behind) {
+        // Recovered (or never behind) — reset so a future false→true edge
+        // fires again instead of being suppressed by stale state.
+        if (state.behindSince === null)
+            return { fire: false, event: null, next: state };
+        return { fire: false, event: null, next: DEFAULT_DRIFT_ALERT_STATE };
+    }
+    const nowIso = now.toISOString();
+    const latest = status.latest ?? "unknown";
+    if (state.behindSince === null) {
+        // false → true edge: fire once.
+        return {
+            fire: true,
+            event: {
+                type: "nlm.drift.version_behind",
+                data: { current: status.current, latest, since: nowIso },
+            },
+            next: { behindSince: nowIso, lastFiredAt: nowIso },
+        };
+    }
+    const sustainedMs = now.getTime() - Date.parse(state.behindSince);
+    const sinceLastFireMs = state.lastFiredAt
+        ? now.getTime() - Date.parse(state.lastFiredAt)
+        : Infinity;
+    if (sustainedMs >= SUSTAIN_THRESHOLD_MS && sinceLastFireMs >= REFIRE_INTERVAL_MS) {
+        return {
+            fire: true,
+            event: {
+                type: "nlm.drift.version_behind",
+                data: { current: status.current, latest, since: state.behindSince },
+            },
+            next: { behindSince: state.behindSince, lastFiredAt: nowIso },
+        };
+    }
+    return { fire: false, event: null, next: state };
+}
+//# sourceMappingURL=drift-transition.js.map

package/dist/core/alerts/drift-transition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"drift-transition.js","sourceRoot":"","sources":["../../../src/core/alerts/drift-transition.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAYH,MAAM,CAAC,MAAM,yBAAyB,GAAoB;IACxD,WAAW,EAAE,IAAI;IACjB,WAAW,EAAE,IAAI;CAClB,CAAC;AAEF,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACjD,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAQ/C,MAAM,UAAU,uBAAuB,CACrC,KAAsB,EACtB,MAA2D,EAC3D,GAAS;IAET,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,kEAAkE;QAClE,0DAA0D;QAC1D,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACjF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;IACvE,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC;IAE1C,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QAC/B,gCAAgC;QAChC,OAAO;YACL,IAAI,EAAE,IAAI;YACV,KAAK,EAAE;gBACL,IAAI,EAAE,0BAA0B;gBAChC,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE;aACzD;YACD,IAAI,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE;SACnD,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClE,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW;QACvC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC;QAC/C,CAAC,CAAC,QAAQ,CAAC;IAEb,IAAI,WAAW,IAAI,oBAAoB,IAAI,eAAe,IAAI,kBAAkB,EAAE,CAAC;QACjF,OAAO;YACL,IAAI,EAAE,IAAI;YACV,KAAK,EAAE;gBACL,IAAI,EAAE,0BAA0B;gBAChC,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;aACpE;YACD,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE;SAC9D,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACnD,CAAC"}

package/dist/core/alerts/embedder-transition.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Embedder-cold alert transition logic — fires once when the embedder
+ * warmup flag flips ready→not-ready and STAYS not-ready across two
+ * consecutive checks. A single-check dip is treated as a transient
+ * blip (e.g. a lane restart mid-check), not an outage worth alerting on.
+ *
+ * Pure and clock-injected. See check-and-alert.ts for the caller that
+ * reads warmupSnapshot(), threads the persisted state, and fires.
+ */
+import type { EmbedderAlertEvent } from "./types.js";
+export interface EmbedderAlertState {
+    /** Consecutive not-ready checks seen so far (resets to 0 once ready again). */
+    readonly notReadyStreak: number;
+    /** ISO timestamp of the first not-ready check in the current streak, or null. */
+    readonly since: string | null;
+}
+export declare const DEFAULT_EMBEDDER_ALERT_STATE: EmbedderAlertState;
+export interface EmbedderTransitionResult {
+    readonly fire: boolean;
+    readonly event: EmbedderAlertEvent | null;
+    readonly next: EmbedderAlertState;
+}
+export declare function evaluateEmbedderTransition(state: EmbedderAlertState, ready: boolean, now: Date): EmbedderTransitionResult;

package/dist/core/alerts/embedder-transition.js

@@ -0,0 +1,40 @@
+/**
+ * Embedder-cold alert transition logic — fires once when the embedder
+ * warmup flag flips ready→not-ready and STAYS not-ready across two
+ * consecutive checks. A single-check dip is treated as a transient
+ * blip (e.g. a lane restart mid-check), not an outage worth alerting on.
+ *
+ * Pure and clock-injected. See check-and-alert.ts for the caller that
+ * reads warmupSnapshot(), threads the persisted state, and fires.
+ */
+export const DEFAULT_EMBEDDER_ALERT_STATE = {
+    notReadyStreak: 0,
+    since: null,
+};
+const SUSTAIN_CHECK_COUNT = 2;
+export function evaluateEmbedderTransition(state, ready, now) {
+    if (ready) {
+        if (state.notReadyStreak === 0 && state.since === null) {
+            return { fire: false, event: null, next: state };
+        }
+        // Recovered — reset so the next ready→not-ready edge can fire again.
+        return { fire: false, event: null, next: DEFAULT_EMBEDDER_ALERT_STATE };
+    }
+    const streak = state.notReadyStreak + 1;
+    const since = state.since ?? now.toISOString();
+    if (streak === SUSTAIN_CHECK_COUNT) {
+        // Sustained across the 2nd consecutive check — fire once. Streak
+        // keeps climbing on later checks but never re-hits exactly this
+        // value, so this is a single edge-triggered fire per cold episode.
+        return {
+            fire: true,
+            event: {
+                type: "nlm.health.embedder_cold",
+                data: { current: "cold", latest: "ready", since },
+            },
+            next: { notReadyStreak: streak, since },
+        };
+    }
+    return { fire: false, event: null, next: { notReadyStreak: streak, since } };
+}
+//# sourceMappingURL=embedder-transition.js.map

package/dist/core/alerts/embedder-transition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embedder-transition.js","sourceRoot":"","sources":["../../../src/core/alerts/embedder-transition.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAWH,MAAM,CAAC,MAAM,4BAA4B,GAAuB;IAC9D,cAAc,EAAE,CAAC;IACjB,KAAK,EAAE,IAAI;CACZ,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAQ9B,MAAM,UAAU,0BAA0B,CACxC,KAAyB,EACzB,KAAc,EACd,GAAS;IAET,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,KAAK,CAAC,cAAc,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACvD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACnD,CAAC;QACD,qEAAqE;QACrE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;IAE/C,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;QACnC,iEAAiE;QACjE,gEAAgE;QAChE,mEAAmE;QACnE,OAAO;YACL,IAAI,EAAE,IAAI;YACV,KAAK,EAAE;gBACL,IAAI,EAAE,0BAA0B;gBAChC,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE;aAClD;YACD,IAAI,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE;SACxC,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;AAC/E,CAAC"}

package/dist/core/alerts/fire-alert.d.ts

@@ -0,0 +1,24 @@
+/**
+ * fireAlert — POST a CloudEvents-shaped daemon self-report to an
+ * operator-owned webhook.
+ *
+ * What this is: an opt-in outbound notification for drift/health
+ * transitions (see drift-transition.ts, embedder-transition.ts) that the
+ * operator wants pushed somewhere (Slack relay, PagerDuty, a log sink)
+ * instead of only surfacing on the next `nlm start` banner or
+ * `GET /api/health` poll.
+ *
+ * What this is not: telemetry back to an NLM-owned server. Nothing
+ * fires unless the operator sets NLM_ALERT_WEBHOOK themselves, and the
+ * payload never leaves the process until then.
+ *
+ * Contract: skip silently (zero network calls) when NLM_ALERT_WEBHOOK is
+ * unset. Otherwise POST with a 5s timeout, one retry on failure, and
+ * never throw — a webhook outage must never take the daemon down.
+ */
+import type { AlertEvent } from "./types.js";
+export interface FireAlertDeps {
+    readonly now?: () => Date;
+    readonly fetchImpl?: typeof fetch;
+}
+export declare function fireAlert(event: AlertEvent, deps?: FireAlertDeps): Promise<void>;

package/dist/core/alerts/fire-alert.js

@@ -0,0 +1,72 @@
+/**
+ * fireAlert — POST a CloudEvents-shaped daemon self-report to an
+ * operator-owned webhook.
+ *
+ * What this is: an opt-in outbound notification for drift/health
+ * transitions (see drift-transition.ts, embedder-transition.ts) that the
+ * operator wants pushed somewhere (Slack relay, PagerDuty, a log sink)
+ * instead of only surfacing on the next `nlm start` banner or
+ * `GET /api/health` poll.
+ *
+ * What this is not: telemetry back to an NLM-owned server. Nothing
+ * fires unless the operator sets NLM_ALERT_WEBHOOK themselves, and the
+ * payload never leaves the process until then.
+ *
+ * Contract: skip silently (zero network calls) when NLM_ALERT_WEBHOOK is
+ * unset. Otherwise POST with a 5s timeout, one retry on failure, and
+ * never throw — a webhook outage must never take the daemon down.
+ */
+import { randomUUID } from "node:crypto";
+const TIMEOUT_MS = 5_000;
+const SOURCE = "nlm-memory";
+export async function fireAlert(event, deps = {}) {
+    const url = process.env["NLM_ALERT_WEBHOOK"];
+    if (!url)
+        return;
+    const now = deps.now ?? (() => new Date());
+    const fetchImpl = deps.fetchImpl ?? fetch;
+    const envelope = {
+        specversion: "1.0",
+        id: randomUUID(),
+        source: SOURCE,
+        type: event.type,
+        time: now().toISOString(),
+        datacontenttype: "application/json",
+        data: event.data,
+    };
+    const ok = await attemptPost(url, envelope, fetchImpl);
+    if (!ok) {
+        // Single retry on the first failure (network error, timeout, or
+        // non-2xx) — best-effort delivery, no third attempt.
+        await attemptPost(url, envelope, fetchImpl);
+    }
+}
+async function attemptPost(url, envelope, fetchImpl) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), TIMEOUT_MS);
+    try {
+        const token = process.env["NLM_ALERT_WEBHOOK_TOKEN"];
+        const headers = {
+            "content-type": "application/cloudevents+json",
+        };
+        if (token)
+            headers["authorization"] = `Bearer ${token}`;
+        const r = await fetchImpl(url, {
+            method: "POST",
+            headers,
+            body: JSON.stringify(envelope),
+            signal: controller.signal,
+        });
+        return r.ok;
+    }
+    catch {
+        // Network failure, abort-on-timeout, or a thrown Response error —
+        // alert delivery is best-effort, so the caller decides whether to
+        // retry rather than propagating this up.
+        return false;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=fire-alert.js.map

package/dist/core/alerts/fire-alert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fire-alert.js","sourceRoot":"","sources":["../../../src/core/alerts/fire-alert.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,UAAU,GAAG,KAAK,CAAC;AACzB,MAAM,MAAM,GAAG,YAAY,CAAC;AAO5B,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,KAAiB,EACjB,OAAsB,EAAE;IAExB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC7C,IAAI,CAAC,GAAG;QAAE,OAAO;IAEjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,QAAQ,GAAG;QACf,WAAW,EAAE,KAAK;QAClB,EAAE,EAAE,UAAU,EAAE;QAChB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;QACzB,eAAe,EAAE,kBAAkB;QACnC,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC;IAEF,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,gEAAgE;QAChE,qDAAqD;QACrD,MAAM,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAW,EACX,QAAiC,EACjC,SAAuB;IAEvB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACrD,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,8BAA8B;SAC/C,CAAC;QACF,IAAI,KAAK;YAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QACxD,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YAC7B,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC9B,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,EAAE,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;QAClE,kEAAkE;QAClE,yCAAyC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/core/alerts/job-alert.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Builds the `nlm.job.stalled` AlertEvent from a JobSupervisor event
+ * (core/jobs/job-supervisor.ts). Pure — no fs/network, no debounce state
+ * (unlike drift-transition.ts / embedder-transition.ts): JobSupervisor
+ * already only emits one event per stalled/exhausted/spawn_failed episode,
+ * so every event maps 1:1 to a fired alert. The daemon composition
+ * root wires JobSupervisor's `onEvent` straight to
+ * `fireAlert(buildJobAlertEvent(event))`.
+ */
+import type { JobSupervisorEvent } from "../jobs/job-supervisor.js";
+import type { JobAlertEvent } from "./types.js";
+export declare function buildJobAlertEvent(event: JobSupervisorEvent): JobAlertEvent;

package/dist/core/alerts/job-alert.js

@@ -0,0 +1,37 @@
+/**
+ * Builds the `nlm.job.stalled` AlertEvent from a JobSupervisor event
+ * (core/jobs/job-supervisor.ts). Pure — no fs/network, no debounce state
+ * (unlike drift-transition.ts / embedder-transition.ts): JobSupervisor
+ * already only emits one event per stalled/exhausted/spawn_failed episode,
+ * so every event maps 1:1 to a fired alert. The daemon composition
+ * root wires JobSupervisor's `onEvent` straight to
+ * `fireAlert(buildJobAlertEvent(event))`.
+ */
+export function buildJobAlertEvent(event) {
+    // `restarts` at "exhausted" is the number of respawns that actually
+    // happened before the cap refused the next one — not restarts still
+    // ahead. Spelling that out in prose here is the fix for a reviewer
+    // misreading "restarts: 3" as "3 more restarts about to happen".
+    const message = event.kind === "exhausted"
+        ? `${event.job} gave up after ${event.restarts} fruitless restart${event.restarts === 1 ? "" : "s"} ` +
+            `(${event.processed}/${event.total} processed)`
+        : event.kind === "spawn_failed"
+            ? `${event.job} failed to start — the child process itself would not spawn ` +
+                `(${event.processed}/${event.total} processed, ${event.restarts} prior restarts)`
+            : `${event.job} stalled — no progress since ${event.lastAdvanceAt ?? "start"} ` +
+                `(${event.processed}/${event.total} processed)`;
+    return {
+        type: "nlm.job.stalled",
+        data: {
+            job: event.job,
+            reason: event.kind,
+            processed: event.processed,
+            total: event.total,
+            restarts: event.restarts,
+            restartsTotal: event.restartsTotal,
+            lastAdvanceAt: event.lastAdvanceAt,
+            message,
+        },
+    };
+}
+//# sourceMappingURL=job-alert.js.map

package/dist/core/alerts/job-alert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-alert.js","sourceRoot":"","sources":["../../../src/core/alerts/job-alert.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,MAAM,UAAU,kBAAkB,CAAC,KAAyB;IAC1D,oEAAoE;IACpE,oEAAoE;IACpE,mEAAmE;IACnE,iEAAiE;IACjE,MAAM,OAAO,GACX,KAAK,CAAC,IAAI,KAAK,WAAW;QACxB,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,kBAAkB,KAAK,CAAC,QAAQ,qBAAqB,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG;YACnG,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,aAAa;QACjD,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc;YAC7B,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,8DAA8D;gBAC1E,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,eAAe,KAAK,CAAC,QAAQ,kBAAkB;YACnF,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,gCAAgC,KAAK,CAAC,aAAa,IAAI,OAAO,GAAG;gBAC7E,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,aAAa,CAAC;IAExD,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE;YACJ,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,MAAM,EAAE,KAAK,CAAC,IAAI;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,OAAO;SACR;KACF,CAAC;AACJ,CAAC"}

package/dist/core/alerts/types.d.ts

@@ -0,0 +1,104 @@
+/**
+ * Alert event shapes for NLM_ALERT_WEBHOOK daemon self-reporting.
+ *
+ * Field naming follows the CloudEvents 1.0 attribute set (specversion,
+ * id, source, type, time, data) so a receiving webhook can decode the
+ * envelope with an off-the-shelf CloudEvents SDK instead of a bespoke
+ * NLM schema. `fireAlert` (see fire-alert.ts) builds the envelope; this
+ * file only defines the event-specific `data` payload callers construct.
+ */
+export type AlertEventType = "nlm.drift.version_behind" | "nlm.health.embedder_cold" | "nlm.job.stalled" | "nlm.wiki.projection_failed" | "nlm.wiki.coverage_drift";
+/**
+ * Generic across both transition-based event types: `current` is the
+ * observed value, `latest` is the target/expected value, `since` is the
+ * ISO timestamp the current state began holding. For version drift that's
+ * the installed vs. npm-latest version; for embedder health it's the
+ * degraded ("cold") vs. healthy ("ready") state label.
+ */
+export interface AlertEventData {
+    readonly current: string;
+    readonly latest: string;
+    readonly since: string;
+}
+/**
+ * `nlm.job.stalled` payload — built by core/alerts/job-alert.ts from a
+ * JobSupervisor event (core/jobs/job-supervisor.ts). Unlike the two
+ * transition-based events above there's no debounce state: JobSupervisor
+ * itself only emits "stalled"/"exhausted"/"spawn_failed" once per episode,
+ * so every JobSupervisorEvent maps 1:1 to a fired alert.
+ *
+ * `restarts` is the restarts-without-progress counter AT the moment of
+ * firing — for an "exhausted" event this is the number of respawns that
+ * actually happened (it is always exactly the configured cap, e.g. 3), not
+ * a count of restarts still to come, and not the cap plus the refused final
+ * attempt. `message` spells this out in prose so a receiving Slack
+ * relay/PagerDuty rule can't misread the number as restarts remaining.
+ *
+ * `restartsTotal` is the run's lifetime respawn count (never reset by
+ * progress, unlike `restarts`) — see job-supervisor.ts's file-level doc.
+ * It surfaces OOM-churn on a run that keeps making progress between
+ * crashes, where `restarts` alone would read 0.
+ *
+ * `reason: "spawn_failed"` covers the case where `spawnChild` itself threw
+ * synchronously (EMFILE/ENOMEM/bad binary) instead of the child ever
+ * running — distinct from "exhausted" (ran, kept dying, used up its
+ * restart budget) so an operator isn't left guessing why a job never
+ * produced a single progress line.
+ */
+export interface JobAlertEventData {
+    readonly job: "reprocess";
+    readonly reason: "stalled" | "exhausted" | "spawn_failed";
+    readonly processed: number;
+    readonly total: number;
+    readonly restarts: number;
+    readonly restartsTotal: number;
+    readonly lastAdvanceAt: string | null;
+    readonly message: string;
+}
+/**
+ * Wiki projection self-report. `drift` is qualifying-subjects minus
+ * pages-on-disk after a run: positive means pages the corpus earned are
+ * missing, negative means stale pages survived removal. Either direction
+ * means the run did not fully apply, so both fire.
+ */
+export interface WikiAlertEventData {
+    readonly reason: "projection_failed" | "coverage_drift";
+    readonly qualifying: number;
+    readonly onDisk: number;
+    readonly drift: number;
+    readonly message: string;
+}
+export type AlertEvent = {
+    readonly type: "nlm.drift.version_behind";
+    readonly data: AlertEventData;
+} | {
+    readonly type: "nlm.health.embedder_cold";
+    readonly data: AlertEventData;
+} | {
+    readonly type: "nlm.job.stalled";
+    readonly data: JobAlertEventData;
+} | {
+    readonly type: "nlm.wiki.projection_failed";
+    readonly data: WikiAlertEventData;
+} | {
+    readonly type: "nlm.wiki.coverage_drift";
+    readonly data: WikiAlertEventData;
+};
+/**
+ * Per-producer narrowings of `AlertEvent`. Each transition/builder module
+ * only ever constructs one union member, but declaring its return type as
+ * the full `AlertEvent` erases the discriminant for callers (including
+ * tests) that don't re-narrow via a type guard — `event.type` checked
+ * through `expect()` doesn't narrow `event.data`. Producers should return
+ * these instead; `fireAlert` still accepts any of them since each is a
+ * subtype of `AlertEvent`.
+ */
+export type DriftAlertEvent = Extract<AlertEvent, {
+    type: "nlm.drift.version_behind";
+}>;
+export type EmbedderAlertEvent = Extract<AlertEvent, {
+    type: "nlm.health.embedder_cold";
+}>;
+export type JobAlertEvent = Extract<AlertEvent, {
+    type: "nlm.job.stalled";
+}>;

package/dist/core/alerts/types.js

@@ -0,0 +1,11 @@
+/**
+ * Alert event shapes for NLM_ALERT_WEBHOOK daemon self-reporting.
+ *
+ * Field naming follows the CloudEvents 1.0 attribute set (specversion,
+ * id, source, type, time, data) so a receiving webhook can decode the
+ * envelope with an off-the-shelf CloudEvents SDK instead of a bespoke
+ * NLM schema. `fireAlert` (see fire-alert.ts) builds the envelope; this
+ * file only defines the event-specific `data` payload callers construct.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/alerts/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/alerts/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/core/alerts/wiki-alert.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Wiki projection alert builders.
+ *
+ * Return types are Extract<> narrowings rather than the bare AlertEvent union
+ * so callers and tests keep the discriminant, matching the convention the
+ * other producers in this directory follow.
+ */
+import type { AlertEvent } from "./types.js";
+import type { ProjectionResult } from "../wiki/types.js";
+export declare function buildWikiFailureEvent(error: unknown): Extract<AlertEvent, {
+    type: "nlm.wiki.projection_failed";
+}>;
+export declare function buildWikiDriftEvent(result: ProjectionResult): Extract<AlertEvent, {
+    type: "nlm.wiki.coverage_drift";
+}> | null;

package/dist/core/alerts/wiki-alert.js

@@ -0,0 +1,31 @@
+export function buildWikiFailureEvent(error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    return {
+        type: "nlm.wiki.projection_failed",
+        data: {
+            reason: "projection_failed",
+            qualifying: 0,
+            onDisk: 0,
+            drift: 0,
+            message: `wiki projection failed and the previous tree was left untouched: ${detail}`,
+        },
+    };
+}
+export function buildWikiDriftEvent(result) {
+    if (result.coverageDrift === 0)
+        return null;
+    const direction = result.coverageDrift > 0
+        ? `${result.coverageDrift} page(s) the corpus earned are missing from disk`
+        : `${-result.coverageDrift} stale page(s) survived removal`;
+    return {
+        type: "nlm.wiki.coverage_drift",
+        data: {
+            reason: "coverage_drift",
+            qualifying: result.qualifying,
+            onDisk: result.onDisk,
+            drift: result.coverageDrift,
+            message: `wiki coverage drift: ${direction} (${result.qualifying} qualifying, ${result.onDisk} on disk)`,
+        },
+    };
+}
+//# sourceMappingURL=wiki-alert.js.map

package/dist/core/alerts/wiki-alert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wiki-alert.js","sourceRoot":"","sources":["../../../src/core/alerts/wiki-alert.ts"],"names":[],"mappings":"AAUA,MAAM,UAAU,qBAAqB,CACnC,KAAc;IAEd,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtE,OAAO;QACL,IAAI,EAAE,4BAA4B;QAClC,IAAI,EAAE;YACJ,MAAM,EAAE,mBAAmB;YAC3B,UAAU,EAAE,CAAC;YACb,MAAM,EAAE,CAAC;YACT,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,oEAAoE,MAAM,EAAE;SACtF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,MAAwB;IAExB,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,SAAS,GACb,MAAM,CAAC,aAAa,GAAG,CAAC;QACtB,CAAC,CAAC,GAAG,MAAM,CAAC,aAAa,kDAAkD;QAC3E,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,iCAAiC,CAAC;IAChE,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,IAAI,EAAE;YACJ,MAAM,EAAE,gBAAgB;YACxB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,aAAa;YAC3B,OAAO,EAAE,wBAAwB,SAAS,KAAK,MAAM,CAAC,UAAU,gBAAgB,MAAM,CAAC,MAAM,WAAW;SACzG;KACF,CAAC;AACJ,CAAC"}

package/dist/core/classifier/prompt.d.ts

@@ -117,6 +117,19 @@ interface CoercedFact {
  * (NLM #325). Deterministic gate — we do not trust the model to self-police.
  */
 export declare function isNonAnswerValue(value: string): boolean;
+/**
+ * A fact SUBJECT that names a per-run build artifact rather than a durable
+ * entity — "tsc", "test suite", "commit", "task-4-review". Their values are
+ * true only for the session that observed them ("tsc status = clean",
+ * "test suite status = 303 passed"), so each new session asserts a fresh one
+ * and none ever supersedes the last. Left ungated they accumulate as duplicate
+ * active facts (the I5a integrity violation: 56 rows by 2026-08-12, ~16 groups
+ * of pure build noise) and crowd real answers out of recall.
+ *
+ * Sibling of isNonAnswerValue — same call site, same rationale, keyed on
+ * subject instead of value.
+ */
+export declare function isEphemeralSubject(subject: string): boolean;
 export declare function coerceClassifyResult(data: Record<string, unknown>): {
     label: string;
     summary: string;

package/dist/core/classifier/prompt.js

@@ -69,10 +69,18 @@ You MUST return JSON with EXACTLY these seven top-level keys: label, summary, en
 
 The transcript may contain JSON examples, code, or schema definitions inside it — IGNORE those. Do not copy them into your output. Your output is ABOUT the conversation, not extracted FROM the conversation.
 
+Session triage (decide this first): is this session WORK or a LOOKUP? A LOOKUP session is a short exchange that reads state and reports it — a version check, listing files, dumping a config, explaining what something means — with nothing built, changed, chosen, or debugged. For a LOOKUP session: entities: [], decisions: [], facts: [] unless the session established a durable attribute worth recalling later, and confidence 0.4 or below. Names appearing in a LOOKUP's command output are incidental to the answer, not what the session was about — do not extract them into any field.
+
 Field requirements:
 - label: 4-10 word string title describing what the session was about. Example: "Beacon architecture decisions"
 - summary: 1-3 sentence string (max ~80 tokens) describing what was worked on and the outcome
-- entities: array of strings. Each string is a stable named thing referenced across the session (tools like "n8n" or "Qdrant", projects like "Beacon", services, people). NOT topics, NOT decisions.
+- entities: array of strings. Each string is a stable named thing central to the session's work (tools like "n8n" or "Qdrant", projects like "Beacon", services, people). NOT topics, NOT decisions. Entities must be STABLE — the kind of name you'd search for months later to find this session again. A thing that only exists inside one repo or one run is not stable: file and directory paths, specific hostnames, URLs, config keys, script names, branch names, commit SHAs, and env-var names are NEVER entities, even when the session's work centered on them — name the system instead, and put the specific value in facts[] under the matching predicate (host, endpoint, repo, branch, commit, version).
+  CAPTURE (examples):
+  - Session debugging a Postgres connection pool leak -> entities: ["Postgres", "connection pool"]
+  - Session where the agent added a new n8n workflow -> entities: ["n8n"]
+  DO NOT capture (examples):
+  - "What version of Node.js is installed?" / "node --version" -> entities: [] (LOOKUP session — see Session triage above)
+  - Session fixing a bug in "src/routes/events.ts" against "staging.db.example.com" -> entities: ["events API", "Postgres"] (the path and hostname go in facts[], not here)
 - decisions: array of strings. Each string is ONE decision that changed what was built or done in this session. A decision counts if the user chose it, OR the agent proposed it and the user accepted — explicitly ("yes", "do it", "go with that") or implicitly (the agent stated the proposal and then proceeded under it with no user objection). Implicit acceptance applies ONLY to proposals that changed the direction of the work — never to the agent's routine implementation choices (helper names, file layout, minor refactors) that were never surfaced as a choice. Capture the decision AND its reason when given ("X instead of Y because Z"). Do NOT include: options discussed but not chosen, approaches considered and rejected, next-step suggestions the agent raised at the end that the user never acted on, or decisions already listed in PRIOR CONTEXT unless they were reversed this session. Scan the WHOLE transcript, including the middle, for decision signals such as (not only): "let's", "go with", "instead of", "switch to", "actually,", "agreed", and any point where one approach was abandoned and replaced. Return [] if no commitments were made.
   CAPTURE (examples):
   - "Use HTTP polling instead of Kafka for the event pipeline (lower ops overhead)"  [user choice]
@@ -84,7 +92,7 @@ Field requirements:
   - At the end the agent suggested "we could add rate limiting next" and the user didn't respond  [unratified next-step]
   - The agent picked a helper-function name and file layout without asking  [routine implementation, not a decision]
 - open: array of strings. Each string is one unresolved question. Skip if none.
-- confidence: number between 0.0 and 1.0. How sure you are the extraction is good. Use 0.4 or below for routine/trivial sessions.
+- confidence: number between 0.0 and 1.0. How sure you are the extraction is good. See Session triage above for the LOOKUP-session threshold.
 - facts: array of objects. Each object has exactly these keys: kind, subject, predicate, value, sourceQuote (optional).
     - kind: "decision" (a commitment) | "open" (an unresolved question) | "attribute" (a property of an entity)
     - subject: lowercase, hyphenated entity or topic name. Examples: "nlm-memory-ts", "local-llm-host", "acme-client"
@@ -189,6 +197,44 @@ export function isNonAnswerValue(value) {
         return true;
     return NON_ANSWER_SUBSTRINGS.some((p) => v.includes(p));
 }
+const EPHEMERAL_SUBJECTS = new Set([
+    "tsc",
+    "typecheck",
+    "test suite",
+    "tests",
+    "test-result",
+    "test-results",
+    "npm test",
+    "commit",
+    "commit-sha",
+    "main",
+    "security-review",
+    "code-quality",
+]);
+// A numbered work item from one plan — "task-4", "task-3.1", "task-12b",
+// "task-8-task-quality", "task-2-brief.md". The number is only meaningful
+// inside the plan that issued it, so every plan mints a fresh colliding set.
+// Requiring a digit right after "task-" keeps durable subjects that merely
+// start with the word ("task-tracking", "taskwarrior") out of the gate.
+const EPHEMERAL_SUBJECT_PATTERNS = [/^task-\d/];
+/**
+ * A fact SUBJECT that names a per-run build artifact rather than a durable
+ * entity — "tsc", "test suite", "commit", "task-4-review". Their values are
+ * true only for the session that observed them ("tsc status = clean",
+ * "test suite status = 303 passed"), so each new session asserts a fresh one
+ * and none ever supersedes the last. Left ungated they accumulate as duplicate
+ * active facts (the I5a integrity violation: 56 rows by 2026-08-12, ~16 groups
+ * of pure build noise) and crowd real answers out of recall.
+ *
+ * Sibling of isNonAnswerValue — same call site, same rationale, keyed on
+ * subject instead of value.
+ */
+export function isEphemeralSubject(subject) {
+    const s = subject.trim().toLowerCase();
+    if (EPHEMERAL_SUBJECTS.has(s))
+        return true;
+    return EPHEMERAL_SUBJECT_PATTERNS.some((p) => p.test(s));
+}
 function coerceFacts(raw) {
     if (!Array.isArray(raw))
         return [];
@@ -209,6 +255,10 @@ function coerceFacts(raw) {
         // not knowledge, and pollute recall at high confidence (NLM #325).
         if (isNonAnswerValue(value))
             continue;
+        // Drop per-run build artifacts — durable-looking subjects whose value is
+        // only true for one session, so they never supersede and pile up (I5a).
+        if (isEphemeralSubject(subject))
+            continue;
         // Closed vocab — drop the fact entirely if the predicate isn't recognized.
         // Pilot data (Phase B.5) showed `other` was 43% of writes and almost all
         // slop; the prompt now instructs the model to leave such observations in

package/dist/core/classifier/prompt.js.map

@@ -1 +1 @@
-{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../../../src/core/classifier/prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,WAAW;IACX,UAAU;IACV,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,SAAS;IACT,MAAM;IACN,UAAU;IACV,QAAQ;IACR,OAAO;IACP,SAAS;IACT,SAAS;IACT,SAAS;IACT,YAAY;IACZ,QAAQ;IACR,aAAa;IACb,YAAY;IACZ,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,aAAa;IACb,YAAY;IACZ,YAAY;IACZ,SAAS;CACD,CAAC;AAEX,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,oBAAoB,CAAC,CAAC;AAExD,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;uDA2Be,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;;;;;;;;gFAaN,CAAC;AAEjF,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QACtD,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QACvD,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QAClD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;QACtD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC7B,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE;oBACjE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC3B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,oBAAoB,CAAC,EAAE;oBAC9D,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAChC;gBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC;aACpD,EAAE;KACJ;IACD,QAAQ,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC;CAC9E,CAAC;AAEX,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAE3C,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,WAAmB,oBAAoB;IACtF,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,OAAO,CACL,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;QACnB,sEAAsE;QACtE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED,MAAM,QAAQ,GAAG,4BAA4B,CAAC;AAE9C,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,CAAU,CAAC;AAEnG,MAAM,UAAU,sBAAsB,CAAC,IAAa;IAClD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3E,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,wEAAwE;IACxE,yEAAyE;IACzE,qBAAqB;IACrB,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,UAAkB,EAAE,YAAoB;IACtE,MAAM,SAAS,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,YAAY;QAAE,KAAK,CAAC,IAAI,CAAC,mCAAmC,YAAY,IAAI,CAAC,CAAC;IAClF,KAAK,CAAC,IAAI,CAAC,4BAA4B,SAAS,EAAE,CAAC,CAAC;IACpD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAUD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;AAC9E,MAAM,qBAAqB,GAAG;IAC5B,cAAc;IACd,WAAW;IACX,aAAa;IACb,WAAW;IACX,mBAAmB;IACnB,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;IACrB,qBAAqB;IACrB,oBAAoB;IACpB,kBAAkB;IAClB,aAAa;CACd,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS;QACvE,MAAM,CAAC,GAAG,IAA+B,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAC7D,IAAI,OAAO,KAAK,UAAU,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,WAAW;YAAE,SAAS;QACtF,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAChE,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QACvE,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,OAAO,IAAI,CAAC,YAAY,IAAI,CAAC,KAAK;YAAE,SAAS;QAClD,yEAAyE;QACzE,mEAAmE;QACnE,IAAI,gBAAgB,CAAC,KAAK,CAAC;YAAE,SAAS;QACtC,2EAA2E;QAC3E,yEAAyE;QACzE,yEAAyE;QACzE,+DAA+D;QAC/D,qEAAqE;QACrE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC;YAAE,SAAS;QAC3C,MAAM,SAAS,GAAG,YAAY,CAAC;QAC/B,MAAM,cAAc,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC;QACxC,MAAM,WAAW,GACf,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YACpE,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACrC,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,IAAI,GAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACvE,IAAI,WAAW,KAAK,SAAS;YAAE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAA6B;IAShE,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAY,EAAE;QACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,UAAU,CAAC;IAC7E,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAChF,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AAC1E,CAAC"}
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../../../src/core/classifier/prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,WAAW;IACX,UAAU;IACV,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,SAAS;IACT,MAAM;IACN,UAAU;IACV,QAAQ;IACR,OAAO;IACP,SAAS;IACT,SAAS;IACT,SAAS;IACT,YAAY;IACZ,QAAQ;IACR,aAAa;IACb,YAAY;IACZ,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,aAAa;IACb,YAAY;IACZ,YAAY;IACZ,SAAS;CACD,CAAC;AAEX,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,oBAAoB,CAAC,CAAC;AAExD,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uDAmCe,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;;;;;;;;gFAaN,CAAC;AAEjF,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QACtD,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QACvD,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QAClD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;QACtD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC7B,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE;oBACjE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC3B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,oBAAoB,CAAC,EAAE;oBAC9D,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAChC;gBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC;aACpD,EAAE;KACJ;IACD,QAAQ,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC;CAC9E,CAAC;AAEX,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAE3C,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,WAAmB,oBAAoB;IACtF,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,OAAO,CACL,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;QACnB,sEAAsE;QACtE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED,MAAM,QAAQ,GAAG,4BAA4B,CAAC;AAE9C,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,CAAU,CAAC;AAEnG,MAAM,UAAU,sBAAsB,CAAC,IAAa;IAClD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3E,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,wEAAwE;IACxE,yEAAyE;IACzE,qBAAqB;IACrB,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,UAAkB,EAAE,YAAoB;IACtE,MAAM,SAAS,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,YAAY;QAAE,KAAK,CAAC,IAAI,CAAC,mCAAmC,YAAY,IAAI,CAAC,CAAC;IAClF,KAAK,CAAC,IAAI,CAAC,4BAA4B,SAAS,EAAE,CAAC,CAAC;IACpD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAUD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;AAC9E,MAAM,qBAAqB,GAAG;IAC5B,cAAc;IACd,WAAW;IACX,aAAa;IACb,WAAW;IACX,mBAAmB;IACnB,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;IACrB,qBAAqB;IACrB,oBAAoB;IACpB,kBAAkB;IAClB,aAAa;CACd,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,KAAK;IACL,WAAW;IACX,YAAY;IACZ,OAAO;IACP,aAAa;IACb,cAAc;IACd,UAAU;IACV,QAAQ;IACR,YAAY;IACZ,MAAM;IACN,iBAAiB;IACjB,cAAc;CACf,CAAC,CAAC;AAEH,yEAAyE;AACzE,0EAA0E;AAC1E,6EAA6E;AAC7E,2EAA2E;AAC3E,wEAAwE;AACxE,MAAM,0BAA0B,GAAG,CAAC,UAAU,CAAC,CAAC;AAEhD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS;QACvE,MAAM,CAAC,GAAG,IAA+B,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAC7D,IAAI,OAAO,KAAK,UAAU,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,WAAW;YAAE,SAAS;QACtF,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAChE,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QACvE,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,OAAO,IAAI,CAAC,YAAY,IAAI,CAAC,KAAK;YAAE,SAAS;QAClD,yEAAyE;QACzE,mEAAmE;QACnE,IAAI,gBAAgB,CAAC,KAAK,CAAC;YAAE,SAAS;QACtC,yEAAyE;QACzE,wEAAwE;QACxE,IAAI,kBAAkB,CAAC,OAAO,CAAC;YAAE,SAAS;QAC1C,2EAA2E;QAC3E,yEAAyE;QACzE,yEAAyE;QACzE,+DAA+D;QAC/D,qEAAqE;QACrE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC;YAAE,SAAS;QAC3C,MAAM,SAAS,GAAG,YAAY,CAAC;QAC/B,MAAM,cAAc,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC;QACxC,MAAM,WAAW,GACf,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YACpE,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACrC,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,IAAI,GAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACvE,IAAI,WAAW,KAAK,SAAS;YAAE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAA6B;IAShE,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAY,EAAE;QACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,UAAU,CAAC;IAC7E,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAChF,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AAC1E,CAAC"}

package/dist/core/dataset/build-dataset.d.ts

@@ -6,6 +6,21 @@
  * alerts, snoozed entities, retired labels, merged variants) are deferred:
  * the action log isn't yet exposed by the TS daemon. Returns persisted
  * state directly.
+ *
+ * Tenancy (program spec §4.6 hardening 1, M2 plan Wave B6): `buildDataset`
+ * takes `tenantId` and constrains every table read — direct WHERE via
+ * `tenantClause` for the STAMP tables (`sessions`, `entities`), a join back
+ * to the tenant-filtered session id set for the DERIVE tables
+ * (`session_entities`, `markers`, `session_edges`), and the same
+ * subject-resolvability predicate as `actions-log.ts` for the action
+ * overlay — even though the `GET /api/dataset` route itself is
+ * LOCAL-dispositioned and 403s in hosted mode (Wave C's hosted-mode gate).
+ * This is defense-in-depth: the guard test scans this file's SQL
+ * regardless of the route's gate, and a future caller that reuses this
+ * function outside the gated route stays safe by construction.
+ * `computeIntegrityAlerts` (below) is the one exception, documented at its
+ * call site — it stays whole-DB, matching the `sqliteDataStats` treatment
+ * of migration/structural bookkeeping.
  */
 import type { SessionStatus } from "../../shared/types.js";
 export interface DatasetSession {
@@ -109,5 +124,5 @@ export interface BuildDatasetOptions {
      *  Default false — they pollute the catalog without adding signal. */
     readonly includePaths?: boolean;
 }
-export declare function buildDataset(dbPath: string, options?: BuildDatasetOptions): DatasetResponse;
+export declare function buildDataset(dbPath: string, tenantId: string, options?: BuildDatasetOptions): DatasetResponse;
 export declare function isPathShapedEntity(canonical: string): boolean;