open-multi-agent-kit 0.97.0 → 0.98.0

package/dist/core/compaction/knowledge-triage.js

@@ -0,0 +1,189 @@
+import { createHash } from "node:crypto";
+import { redactSensitiveTextForced } from "../redaction.js";
+import { containsReservedRuleToken, renderPreservedRulesBlock, stripGeneratedRulesSection, } from "./knowledge-triage-format.js";
+import { redactCredentialShapedContent } from "./transaction.js";
+export { PRESERVED_RULES_END, PRESERVED_RULES_HEADER, PRESERVED_RULES_START, renderPreservedRulesBlock, } from "./knowledge-triage-format.js";
+const MAX_PRESERVED_RULES = 64;
+const MAX_RULE_LENGTH = 1000;
+const MAX_SOURCE_ID_LENGTH = 256;
+const SOURCE_ID_PATTERN = /^[A-Za-z0-9._:-]+$/u;
+const CONTROL_CHARACTERS = /[\u0000-\u001f\u007f\u2028\u2029]/u;
+const EXPLICIT_RULE_PREFIX = /^(?:[-*]\s*)?(?:(?:RULE|INVARIANT|CONSTRAINT|REQUIREMENT)\s*:|(?:MUST|NEVER|ALWAYS)\b|(?:규칙|불변식|제약|요구사항)\s*:|(?:반드시|절대)(?:\s|:))/u;
+export function buildCompactionRuleHistory(previous, entries) {
+    if (previous.fromHook)
+        return undefined;
+    const details = previous.details;
+    const rules = verifyPreservedRulesAgainstEntries(details?.preservedRules, previous.summary, entries);
+    return rules.length > 0 ? { rules, entries } : undefined;
+}
+/** Extract canonical rule records from exact user session entries. */
+export function extractCompactionRuleSources(entries) {
+    const records = [];
+    for (const entry of entries) {
+        if (entry.type !== "message" || entry.message.role !== "user")
+            continue;
+        const text = directUserText(entry.message);
+        if (text !== null)
+            records.push(...extractRules(text, entry.id));
+    }
+    return deduplicateRules(records);
+}
+/** Parse untrusted persisted details into a bounded canonical record set. */
+export function normalizePreservedRules(value) {
+    if (!Array.isArray(value))
+        return [];
+    const records = [];
+    for (const candidate of value.slice(0, MAX_PRESERVED_RULES)) {
+        const record = parseRuleRecord(candidate);
+        if (record !== null)
+            records.push(record);
+    }
+    return deduplicateRules(records);
+}
+/** Preserve explicit user rules outside the LLM-controlled summary body. */
+export function applyCompactionKnowledgeTriage(input) {
+    const generatedSummary = stripGeneratedRulesSection(input.generatedSummary);
+    const previous = verifyPreservedRulesAgainstEntries(input.previousRules, input.previousSummary, input.previousEntries);
+    const messageRuleKeys = extractRuleKeysFromMessages(input.currentMessages);
+    const current = input.currentEntries !== undefined ? verifiedCurrentEntries(input.currentEntries, messageRuleKeys) : [];
+    const preservedRules = deduplicateRules([...previous, ...current]);
+    if (preservedRules.length === 0)
+        return { summary: generatedSummary, preservedRules };
+    return { summary: `${generatedSummary}\n\n${renderPreservedRulesBlock(preservedRules)}`, preservedRules };
+}
+function extractRuleKeysFromMessages(messages) {
+    const keys = new Set();
+    for (const message of messages) {
+        if (message.role !== "user")
+            continue;
+        const text = directUserText(message);
+        if (text === null)
+            continue;
+        const lines = text.split(/\r?\n/u);
+        for (let index = 0; index < lines.length; index++) {
+            const canonical = canonicalRuleText(lines[index]);
+            if (canonical !== null)
+                keys.add(`${index + 1}\0${canonical}`);
+        }
+    }
+    return keys;
+}
+function extractRules(text, sourceEntryId) {
+    const records = [];
+    const lines = text.split(/\r?\n/u);
+    for (let index = 0; index < lines.length; index++) {
+        const record = createRuleRecord(lines[index], sourceEntryId, index + 1);
+        if (record !== null)
+            records.push(record);
+    }
+    return records;
+}
+function createRuleRecord(text, sourceEntryId, sourceLine) {
+    const sanitized = canonicalRuleText(text);
+    if (sanitized === null || !isSourceLocation(sourceEntryId, sourceLine))
+        return null;
+    return {
+        text: sanitized,
+        sourceEntryId,
+        sourceLine,
+        sourceDigest: sourceDigest(sanitized, sourceEntryId, sourceLine),
+    };
+}
+function parseRuleRecord(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        return null;
+    const record = value;
+    if (Object.keys(record).sort().join(",") !== "sourceDigest,sourceEntryId,sourceLine,text")
+        return null;
+    if (typeof record.text !== "string" || typeof record.sourceEntryId !== "string")
+        return null;
+    if (typeof record.sourceLine !== "number" || typeof record.sourceDigest !== "string")
+        return null;
+    const sanitized = redactCredentialShapedContent(redactSensitiveTextForced(record.text)).trim();
+    if (sanitized !== record.text)
+        return null;
+    if (!isExplicitSafeRule(record.text) || !isSourceLocation(record.sourceEntryId, record.sourceLine))
+        return null;
+    if (record.sourceDigest !== sourceDigest(record.text, record.sourceEntryId, record.sourceLine))
+        return null;
+    return {
+        text: record.text,
+        sourceEntryId: record.sourceEntryId,
+        sourceLine: record.sourceLine,
+        sourceDigest: record.sourceDigest,
+    };
+}
+function verifiedCurrentEntries(entries, messageRuleKeys) {
+    return extractCompactionRuleSources(entries).filter((rule) => messageRuleKeys.has(`${rule.sourceLine}\0${rule.text}`));
+}
+function verifyPreservedRulesAgainstEntries(value, previousSummary, entries) {
+    if (previousSummary === undefined || entries === undefined)
+        return [];
+    const records = normalizePreservedRules(value);
+    if (records.length === 0 || !previousSummary.includes(renderPreservedRulesBlock(records)))
+        return [];
+    const sourceRecords = extractCompactionRuleSources(entries);
+    const sourceKeys = new Set(sourceRecords.map(ruleRecordKey));
+    return records.every((record) => sourceKeys.has(ruleRecordKey(record))) ? records : [];
+}
+function directUserText(message) {
+    const text = userText(message);
+    return /<(?:file\b|stdin>)/iu.test(text) ? null : text;
+}
+function userText(message) {
+    if (typeof message.content === "string")
+        return message.content;
+    return message.content
+        .filter((part) => part.type === "text")
+        .map((part) => part.text)
+        .join("\n");
+}
+function deduplicateRules(records) {
+    const unique = [];
+    const seen = new Set();
+    for (const record of records) {
+        if (seen.has(record.text))
+            continue;
+        seen.add(record.text);
+        unique.push(record);
+        if (unique.length >= MAX_PRESERVED_RULES)
+            break;
+    }
+    return unique;
+}
+function canonicalRuleText(raw) {
+    if (raw.length === 0 ||
+        raw.length > MAX_RULE_LENGTH ||
+        CONTROL_CHARACTERS.test(raw) ||
+        containsReservedRuleToken(raw)) {
+        return null;
+    }
+    const trimmed = raw.trim();
+    if (!EXPLICIT_RULE_PREFIX.test(trimmed))
+        return null;
+    const sanitized = redactCredentialShapedContent(redactSensitiveTextForced(trimmed)).trim();
+    return isExplicitSafeRule(sanitized) ? sanitized : null;
+}
+function isExplicitSafeRule(value) {
+    return (value.length > 0 &&
+        value.length <= MAX_RULE_LENGTH &&
+        EXPLICIT_RULE_PREFIX.test(value) &&
+        !CONTROL_CHARACTERS.test(value) &&
+        !containsReservedRuleToken(value));
+}
+function isSourceLocation(sourceEntryId, sourceLine) {
+    return (sourceEntryId.length > 0 &&
+        sourceEntryId.length <= MAX_SOURCE_ID_LENGTH &&
+        SOURCE_ID_PATTERN.test(sourceEntryId) &&
+        redactSensitiveTextForced(sourceEntryId) === sourceEntryId &&
+        redactCredentialShapedContent(sourceEntryId) === sourceEntryId &&
+        Number.isSafeInteger(sourceLine) &&
+        sourceLine >= 1);
+}
+function ruleRecordKey(record) {
+    return `${record.sourceEntryId}\0${record.sourceLine}\0${record.sourceDigest}\0${record.text}`;
+}
+function sourceDigest(text, sourceEntryId, sourceLine) {
+    return createHash("sha256").update(`${sourceEntryId}\0${sourceLine}\0${text}`).digest("hex");
+}
+//# sourceMappingURL=knowledge-triage.js.map

package/dist/core/compaction/knowledge-triage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"knowledge-triage.js","sourceRoot":"","sources":["../../../src/core/compaction/knowledge-triage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,OAAO,EACN,yBAAyB,EACzB,yBAAyB,EACzB,0BAA0B,GAC1B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AAEjE,OAAO,EACN,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,yBAAyB,GACzB,MAAM,8BAA8B,CAAC;AAGtC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,eAAe,GAAG,IAAI,CAAC;AAC7B,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAChD,MAAM,kBAAkB,GAAG,oCAAoC,CAAC;AAChE,MAAM,oBAAoB,GACzB,mKAAmI,CAAC;AAqBrI,MAAM,UAAU,0BAA0B,CACzC,QAAyB,EACzB,OAAgC,EACI;IACpC,IAAI,QAAQ,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAA4D,CAAC;IACtF,MAAM,KAAK,GAAG,kCAAkC,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrG,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CACzD;AAED,sEAAsE;AACtE,MAAM,UAAU,4BAA4B,CAAC,OAAgC,EAAkC;IAC9G,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QACxE,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAAA,CACjC;AAED,6EAA6E;AAC7E,MAAM,UAAU,uBAAuB,CAAC,KAAc,EAAkC;IACvF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,EAAE,CAAC;QAC7D,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAAA,CACjC;AAED,4EAA4E;AAC5E,MAAM,UAAU,8BAA8B,CAAC,KAAqC,EAAmC;IACtH,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,kCAAkC,CAClD,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,eAAe,EACrB,KAAK,CAAC,eAAe,CACrB,CAAC;IACF,MAAM,eAAe,GAAG,2BAA2B,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC3E,MAAM,OAAO,GACZ,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzG,MAAM,cAAc,GAAG,gBAAgB,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;IACnE,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC;IACtF,OAAO,EAAE,OAAO,EAAE,GAAG,gBAAgB,OAAO,yBAAyB,CAAC,cAAc,CAAC,EAAE,EAAE,cAAc,EAAE,CAAC;AAAA,CAC1G;AAED,SAAS,2BAA2B,CAAC,QAAiC,EAAuB;IAC5F,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QACtC,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;YACnD,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YAClD,IAAI,SAAS,KAAK,IAAI;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC,CAAC;QAChE,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,aAAqB,EAAkC;IAC1F,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACxE,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,OAAO,CAAC;AAAA,CACf;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,aAAqB,EAAE,UAAkB,EAA8B;IAC9G,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACpF,OAAO;QACN,IAAI,EAAE,SAAS;QACf,aAAa;QACb,UAAU;QACV,YAAY,EAAE,YAAY,CAAC,SAAS,EAAE,aAAa,EAAE,UAAU,CAAC;KAChE,CAAC;AAAA,CACF;AAED,SAAS,eAAe,CAAC,KAAc,EAA8B;IACpE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,4CAA4C;QAAE,OAAO,IAAI,CAAC;IACvG,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7F,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAClG,MAAM,SAAS,GAAG,6BAA6B,CAAC,yBAAyB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/F,IAAI,SAAS,KAAK,MAAM,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAChH,IAAI,MAAM,CAAC,YAAY,KAAK,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5G,OAAO;QACN,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;KACjC,CAAC;AAAA,CACF;AAED,SAAS,sBAAsB,CAC9B,OAAgC,EAChC,eAAoC,EACH;IACjC,OAAO,4BAA4B,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAC5D,eAAe,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,CACvD,CAAC;AAAA,CACF;AAED,SAAS,kCAAkC,CAC1C,KAAc,EACd,eAAmC,EACnC,OAA4C,EACX;IACjC,IAAI,eAAe,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACtE,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IACrG,MAAM,aAAa,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IAC7D,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AAAA,CACvF;AAED,SAAS,cAAc,CAAC,OAAgD,EAAiB;IACxF,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAAA,CACvD;AAED,SAAS,QAAQ,CAAC,OAAgD,EAAU;IAC3E,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IAChE,OAAO,OAAO,CAAC,OAAO;SACpB,MAAM,CAAC,CAAC,IAAI,EAAuE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC;SAC3G,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;SACxB,IAAI,CAAC,IAAI,CAAC,CAAC;AAAA,CACb;AAED,SAAS,gBAAgB,CAAC,OAAuC,EAAkC;IAClG,MAAM,MAAM,GAA0B,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,SAAS;QACpC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,MAAM,CAAC,MAAM,IAAI,mBAAmB;YAAE,MAAM;IACjD,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,iBAAiB,CAAC,GAAW,EAAiB;IACtD,IACC,GAAG,CAAC,MAAM,KAAK,CAAC;QAChB,GAAG,CAAC,MAAM,GAAG,eAAe;QAC5B,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC5B,yBAAyB,CAAC,GAAG,CAAC,EAC7B,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,SAAS,GAAG,6BAA6B,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3F,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAAA,CACxD;AAED,SAAS,kBAAkB,CAAC,KAAa,EAAW;IACnD,OAAO,CACN,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,MAAM,IAAI,eAAe;QAC/B,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC/B,CAAC,yBAAyB,CAAC,KAAK,CAAC,CACjC,CAAC;AAAA,CACF;AAED,SAAS,gBAAgB,CAAC,aAAqB,EAAE,UAAkB,EAAW;IAC7E,OAAO,CACN,aAAa,CAAC,MAAM,GAAG,CAAC;QACxB,aAAa,CAAC,MAAM,IAAI,oBAAoB;QAC5C,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC;QACrC,yBAAyB,CAAC,aAAa,CAAC,KAAK,aAAa;QAC1D,6BAA6B,CAAC,aAAa,CAAC,KAAK,aAAa;QAC9D,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;QAChC,UAAU,IAAI,CAAC,CACf,CAAC;AAAA,CACF;AAED,SAAS,aAAa,CAAC,MAA2B,EAAU;IAC3D,OAAO,GAAG,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;AAAA,CAC/F;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,aAAqB,EAAE,UAAkB,EAAU;IACtF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,aAAa,KAAK,UAAU,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CAC7F","sourcesContent":["import { createHash } from \"node:crypto\";\nimport type { AgentMessage } from \"omk-agent-core\";\nimport { redactSensitiveTextForced } from \"../redaction.ts\";\nimport type { CompactionEntry, SessionEntry } from \"../session-manager.ts\";\nimport {\n\tcontainsReservedRuleToken,\n\trenderPreservedRulesBlock,\n\tstripGeneratedRulesSection,\n} from \"./knowledge-triage-format.ts\";\nimport type { PreservedRuleRecord } from \"./knowledge-triage-types.ts\";\nimport { redactCredentialShapedContent } from \"./transaction.ts\";\n\nexport {\n\tPRESERVED_RULES_END,\n\tPRESERVED_RULES_HEADER,\n\tPRESERVED_RULES_START,\n\trenderPreservedRulesBlock,\n} from \"./knowledge-triage-format.ts\";\nexport type { PreservedRuleRecord } from \"./knowledge-triage-types.ts\";\n\nconst MAX_PRESERVED_RULES = 64;\nconst MAX_RULE_LENGTH = 1000;\nconst MAX_SOURCE_ID_LENGTH = 256;\nconst SOURCE_ID_PATTERN = /^[A-Za-z0-9._:-]+$/u;\nconst CONTROL_CHARACTERS = /[\\u0000-\\u001f\\u007f\\u2028\\u2029]/u;\nconst EXPLICIT_RULE_PREFIX =\n\t/^(?:[-*]\\s*)?(?:(?:RULE|INVARIANT|CONSTRAINT|REQUIREMENT)\\s*:|(?:MUST|NEVER|ALWAYS)\\b|(?:규칙|불변식|제약|요구사항)\\s*:|(?:반드시|절대)(?:\\s|:))/u;\n\nexport interface CompactionKnowledgeTriageInput {\n\treadonly generatedSummary: string;\n\treadonly currentMessages: readonly AgentMessage[];\n\treadonly currentEntries?: readonly SessionEntry[];\n\treadonly previousRules?: unknown;\n\treadonly previousSummary?: string;\n\treadonly previousEntries?: readonly SessionEntry[];\n}\n\nexport interface CompactionKnowledgeTriageResult {\n\treadonly summary: string;\n\treadonly preservedRules: readonly PreservedRuleRecord[];\n}\n\nexport interface CompactionRuleHistory {\n\treadonly rules: readonly PreservedRuleRecord[];\n\treadonly entries: readonly SessionEntry[];\n}\n\nexport function buildCompactionRuleHistory(\n\tprevious: CompactionEntry,\n\tentries: readonly SessionEntry[],\n): CompactionRuleHistory | undefined {\n\tif (previous.fromHook) return undefined;\n\tconst details = previous.details as { readonly preservedRules?: unknown } | undefined;\n\tconst rules = verifyPreservedRulesAgainstEntries(details?.preservedRules, previous.summary, entries);\n\treturn rules.length > 0 ? { rules, entries } : undefined;\n}\n\n/** Extract canonical rule records from exact user session entries. */\nexport function extractCompactionRuleSources(entries: readonly SessionEntry[]): readonly PreservedRuleRecord[] {\n\tconst records: PreservedRuleRecord[] = [];\n\tfor (const entry of entries) {\n\t\tif (entry.type !== \"message\" || entry.message.role !== \"user\") continue;\n\t\tconst text = directUserText(entry.message);\n\t\tif (text !== null) records.push(...extractRules(text, entry.id));\n\t}\n\treturn deduplicateRules(records);\n}\n\n/** Parse untrusted persisted details into a bounded canonical record set. */\nexport function normalizePreservedRules(value: unknown): readonly PreservedRuleRecord[] {\n\tif (!Array.isArray(value)) return [];\n\tconst records: PreservedRuleRecord[] = [];\n\tfor (const candidate of value.slice(0, MAX_PRESERVED_RULES)) {\n\t\tconst record = parseRuleRecord(candidate);\n\t\tif (record !== null) records.push(record);\n\t}\n\treturn deduplicateRules(records);\n}\n\n/** Preserve explicit user rules outside the LLM-controlled summary body. */\nexport function applyCompactionKnowledgeTriage(input: CompactionKnowledgeTriageInput): CompactionKnowledgeTriageResult {\n\tconst generatedSummary = stripGeneratedRulesSection(input.generatedSummary);\n\tconst previous = verifyPreservedRulesAgainstEntries(\n\t\tinput.previousRules,\n\t\tinput.previousSummary,\n\t\tinput.previousEntries,\n\t);\n\tconst messageRuleKeys = extractRuleKeysFromMessages(input.currentMessages);\n\tconst current =\n\t\tinput.currentEntries !== undefined ? verifiedCurrentEntries(input.currentEntries, messageRuleKeys) : [];\n\tconst preservedRules = deduplicateRules([...previous, ...current]);\n\tif (preservedRules.length === 0) return { summary: generatedSummary, preservedRules };\n\treturn { summary: `${generatedSummary}\\n\\n${renderPreservedRulesBlock(preservedRules)}`, preservedRules };\n}\n\nfunction extractRuleKeysFromMessages(messages: readonly AgentMessage[]): ReadonlySet<string> {\n\tconst keys = new Set<string>();\n\tfor (const message of messages) {\n\t\tif (message.role !== \"user\") continue;\n\t\tconst text = directUserText(message);\n\t\tif (text === null) continue;\n\t\tconst lines = text.split(/\\r?\\n/u);\n\t\tfor (let index = 0; index < lines.length; index++) {\n\t\t\tconst canonical = canonicalRuleText(lines[index]);\n\t\t\tif (canonical !== null) keys.add(`${index + 1}\\0${canonical}`);\n\t\t}\n\t}\n\treturn keys;\n}\n\nfunction extractRules(text: string, sourceEntryId: string): readonly PreservedRuleRecord[] {\n\tconst records: PreservedRuleRecord[] = [];\n\tconst lines = text.split(/\\r?\\n/u);\n\tfor (let index = 0; index < lines.length; index++) {\n\t\tconst record = createRuleRecord(lines[index], sourceEntryId, index + 1);\n\t\tif (record !== null) records.push(record);\n\t}\n\treturn records;\n}\n\nfunction createRuleRecord(text: string, sourceEntryId: string, sourceLine: number): PreservedRuleRecord | null {\n\tconst sanitized = canonicalRuleText(text);\n\tif (sanitized === null || !isSourceLocation(sourceEntryId, sourceLine)) return null;\n\treturn {\n\t\ttext: sanitized,\n\t\tsourceEntryId,\n\t\tsourceLine,\n\t\tsourceDigest: sourceDigest(sanitized, sourceEntryId, sourceLine),\n\t};\n}\n\nfunction parseRuleRecord(value: unknown): PreservedRuleRecord | null {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) return null;\n\tconst record = value as Record<string, unknown>;\n\tif (Object.keys(record).sort().join(\",\") !== \"sourceDigest,sourceEntryId,sourceLine,text\") return null;\n\tif (typeof record.text !== \"string\" || typeof record.sourceEntryId !== \"string\") return null;\n\tif (typeof record.sourceLine !== \"number\" || typeof record.sourceDigest !== \"string\") return null;\n\tconst sanitized = redactCredentialShapedContent(redactSensitiveTextForced(record.text)).trim();\n\tif (sanitized !== record.text) return null;\n\tif (!isExplicitSafeRule(record.text) || !isSourceLocation(record.sourceEntryId, record.sourceLine)) return null;\n\tif (record.sourceDigest !== sourceDigest(record.text, record.sourceEntryId, record.sourceLine)) return null;\n\treturn {\n\t\ttext: record.text,\n\t\tsourceEntryId: record.sourceEntryId,\n\t\tsourceLine: record.sourceLine,\n\t\tsourceDigest: record.sourceDigest,\n\t};\n}\n\nfunction verifiedCurrentEntries(\n\tentries: readonly SessionEntry[],\n\tmessageRuleKeys: ReadonlySet<string>,\n): readonly PreservedRuleRecord[] {\n\treturn extractCompactionRuleSources(entries).filter((rule) =>\n\t\tmessageRuleKeys.has(`${rule.sourceLine}\\0${rule.text}`),\n\t);\n}\n\nfunction verifyPreservedRulesAgainstEntries(\n\tvalue: unknown,\n\tpreviousSummary: string | undefined,\n\tentries: readonly SessionEntry[] | undefined,\n): readonly PreservedRuleRecord[] {\n\tif (previousSummary === undefined || entries === undefined) return [];\n\tconst records = normalizePreservedRules(value);\n\tif (records.length === 0 || !previousSummary.includes(renderPreservedRulesBlock(records))) return [];\n\tconst sourceRecords = extractCompactionRuleSources(entries);\n\tconst sourceKeys = new Set(sourceRecords.map(ruleRecordKey));\n\treturn records.every((record) => sourceKeys.has(ruleRecordKey(record))) ? records : [];\n}\n\nfunction directUserText(message: Extract<AgentMessage, { role: \"user\" }>): string | null {\n\tconst text = userText(message);\n\treturn /<(?:file\\b|stdin>)/iu.test(text) ? null : text;\n}\n\nfunction userText(message: Extract<AgentMessage, { role: \"user\" }>): string {\n\tif (typeof message.content === \"string\") return message.content;\n\treturn message.content\n\t\t.filter((part): part is Extract<(typeof message.content)[number], { type: \"text\" }> => part.type === \"text\")\n\t\t.map((part) => part.text)\n\t\t.join(\"\\n\");\n}\n\nfunction deduplicateRules(records: readonly PreservedRuleRecord[]): readonly PreservedRuleRecord[] {\n\tconst unique: PreservedRuleRecord[] = [];\n\tconst seen = new Set<string>();\n\tfor (const record of records) {\n\t\tif (seen.has(record.text)) continue;\n\t\tseen.add(record.text);\n\t\tunique.push(record);\n\t\tif (unique.length >= MAX_PRESERVED_RULES) break;\n\t}\n\treturn unique;\n}\n\nfunction canonicalRuleText(raw: string): string | null {\n\tif (\n\t\traw.length === 0 ||\n\t\traw.length > MAX_RULE_LENGTH ||\n\t\tCONTROL_CHARACTERS.test(raw) ||\n\t\tcontainsReservedRuleToken(raw)\n\t) {\n\t\treturn null;\n\t}\n\tconst trimmed = raw.trim();\n\tif (!EXPLICIT_RULE_PREFIX.test(trimmed)) return null;\n\tconst sanitized = redactCredentialShapedContent(redactSensitiveTextForced(trimmed)).trim();\n\treturn isExplicitSafeRule(sanitized) ? sanitized : null;\n}\n\nfunction isExplicitSafeRule(value: string): boolean {\n\treturn (\n\t\tvalue.length > 0 &&\n\t\tvalue.length <= MAX_RULE_LENGTH &&\n\t\tEXPLICIT_RULE_PREFIX.test(value) &&\n\t\t!CONTROL_CHARACTERS.test(value) &&\n\t\t!containsReservedRuleToken(value)\n\t);\n}\n\nfunction isSourceLocation(sourceEntryId: string, sourceLine: number): boolean {\n\treturn (\n\t\tsourceEntryId.length > 0 &&\n\t\tsourceEntryId.length <= MAX_SOURCE_ID_LENGTH &&\n\t\tSOURCE_ID_PATTERN.test(sourceEntryId) &&\n\t\tredactSensitiveTextForced(sourceEntryId) === sourceEntryId &&\n\t\tredactCredentialShapedContent(sourceEntryId) === sourceEntryId &&\n\t\tNumber.isSafeInteger(sourceLine) &&\n\t\tsourceLine >= 1\n\t);\n}\n\nfunction ruleRecordKey(record: PreservedRuleRecord): string {\n\treturn `${record.sourceEntryId}\\0${record.sourceLine}\\0${record.sourceDigest}\\0${record.text}`;\n}\n\nfunction sourceDigest(text: string, sourceEntryId: string, sourceLine: number): string {\n\treturn createHash(\"sha256\").update(`${sourceEntryId}\\0${sourceLine}\\0${text}`).digest(\"hex\");\n}\n"]}

package/dist/core/compaction/transaction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transaction.d.ts","sourceRoot":"","sources":["../../../src/core/compaction/transaction.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAGX,sBAAsB,EACtB,MAAM,yBAAyB,CAAC;AAEjC,eAAO,MAAM,qCAAqC,GAAa,CAAC;AAChE,eAAO,MAAM,qCAAqC,GAAa,CAAC;AAChE,eAAO,MAAM,kCAAkC,GAAa,CAAC;AAuB7D,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMnE;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,aAAa,EAAE,OAAO,qCAAqC,CAAC;IACrE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC;CAC5C;AAED,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,qCAAqC,CAAC;IACtE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC;CAC5C;AAED,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IACnD,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC9D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kCAAkC;IAClD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IACnD,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC9D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,aAAa,EAAE,OAAO,qCAAqC,CAAC;IACrE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,6BAA6B,CAAC;CAClD;AAED,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,qCAAqC,CAAC;IACtE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,yBAAyB,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,kCAAkC,CAAC;CACvD;AAED,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,OAAO,GAAG,aAAa,CAAC;AACxE,MAAM,MAAM,uBAAuB,GAChC,sBAAsB,GACtB,oBAAoB,GACpB,6BAA6B,GAC7B,0BAA0B,GAC1B,+BAA+B,GAC/B,8BAA8B,GAC9B,6BAA6B,CAAC;AAEjC,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/C;AAED,MAAM,MAAM,wBAAwB,GACjC;IACA,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CACzC,GACD;IACA,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,GAAG,iBAAiB,CAAC;IACzD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAC9B,GACD;IACA,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAC9B,GACD;IACA,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;CAC/C,GACD;IACA,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,GAAG,qBAAqB,GAAG,sBAAsB,CAAC;IACxF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,uBAAuB,CAAC;CAChD,CAAC;AAEL,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,oBAAoB,CAAC;IAC/C,QAAQ,CAAC,aAAa,EAAE,wBAAwB,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,2BAA2B,EAAE,SAAS,MAAM,EAAE,CAAC;CACxD;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,aAAa,EAAE,OAAO,kCAAkC,CAAC;IAClE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,6BAA6B,CAAC;CAClD;AAED,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,4KAA4K;IAC5K,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAC/B;AAuOD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAkD/E;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,wBAAwB,CAkCvF;AAUD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,0BAA0B,GAAG,qBAAqB,CA4BpG;AA+QD,wFAAwF;AACxF,wBAAgB,yBAAyB,CACxC,MAAM,EAAE,sBAAsB,EAC9B,kBAAkB,EAAE,SAAS,MAAM,EAAE,GACnC,uBAAuB,CAgCzB;AAoED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,2BAA2B,GAAG,wBAAwB,CAmFnG;AAcD,uEAAuE;AACvE,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CA0B7E;AAED,sFAAsF;AACtF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,6BAA6B,GAAG,kBAAkB,CA8BjG","sourcesContent":["import type { TranscriptIntegrityIssue, TranscriptIntegrityReport } from \"omk-agent-core\";\nimport { inspectTranscriptIntegrity } from \"omk-agent-core\";\nimport type {\n\tSessionIntegrityFinding,\n\tSessionIntegrityReasonCode,\n\tSessionIntegrityReport,\n} from \"../session-integrity.ts\";\n\nexport const SESSION_REVISION_TOKEN_SCHEMA_VERSION = 1 as const;\nexport const COMPACTION_TRANSACTION_SCHEMA_VERSION = 1 as const;\nexport const COMPACTION_ENVELOPE_SCHEMA_VERSION = 2 as const;\n\nconst MAX_METADATA_LENGTH = 256;\nconst MAX_FILE_IDENTITY_LENGTH = 32;\nconst MAX_SOURCE_ENTRIES = 4096;\nconst MAX_PROVENANCE_IDS = 1024;\nconst MAX_LATEST_INTENT_LENGTH = 16_384;\nconst MAX_SUMMARY_LENGTH = 262_144;\nconst MAX_PROVENANCE_TEXT_LENGTH = 4096;\nconst MAX_NEXT_ACTION_LENGTH = 4096;\nconst MAX_MODEL_HISTORY_ENTRIES = 256;\nconst EMPTY_SHA256 = \"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\";\nconst SHA256_PATTERN = /^[a-f0-9]{64}$/u;\nconst DECIMAL_STRING_PATTERN = /^[0-9]+$/u;\nconst CANONICAL_TIMESTAMP_PATTERN = /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/u;\nconst METADATA_CONTROL_PATTERN = /[\\u0000-\\u001f\\u007f]/u;\nconst CONTENT_CONTROL_PATTERN = /[\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f\\u007f]/u;\nconst CREDENTIAL_SHAPE_PATTERN =\n\t/-----BEGIN [A-Z ]*PRIVATE KEY-----|(?:^|[\\s\"'`:])bearer\\s+[A-Za-z0-9._~+/-]{8,}|(?:api[-_ ]?key|access[-_ ]?token|refresh[-_ ]?token|password|passwd|client[-_ ]?secret|secret[-_ ]?(?:key|token))\\s*[:=]\\s*[\"']?[^\\s\"',;]{3,}|(?<![A-Za-z0-9])(?:sk|ghp|gho|ghu|ghs|github_pat|xox[baprs])[-_][A-Za-z0-9_-]{8,}|(?<![A-Za-z0-9])AKIA[A-Z0-9]{16}(?![A-Z0-9])|(?<![A-Za-z0-9_-])eyJ[A-Za-z0-9_-]{10,}\\.[A-Za-z0-9_-]{10,}\\.[A-Za-z0-9_-]{10,}(?![A-Za-z0-9_-])|(?<![A-Za-z0-9_-])gAAAAA[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])|(?<![A-Za-z0-9])v2:[A-Za-z0-9_+/=-]{20,}/iu;\nconst REDACTED_ASSIGNMENT_PATTERN =\n\t/\\s*[:=]\\s*(?:\"\\[REDACTED\\]\"(?![A-Za-z0-9_+/-])|'\\[REDACTED\\]'(?![A-Za-z0-9_+/-])|\\[REDACTED\\](?![A-Za-z0-9._~+/-]))/giu;\nconst CREDENTIAL_SHAPE_MASK_PATTERN = new RegExp(CREDENTIAL_SHAPE_PATTERN.source, \"giu\");\n\nexport function containsCredentialShape(value: string): boolean {\n\treturn CREDENTIAL_SHAPE_PATTERN.test(value.replace(REDACTED_ASSIGNMENT_PATTERN, \"\"));\n}\n\n/**\n * Deterministically mask credential-shaped spans so sanitized text always\n * satisfies this module's fail-closed content validators. Producers (compaction\n * summaries, preserved provenance) must route generated text through this\n * before validation; otherwise a paranoid validator match would abort the\n * entire compaction and strand an overflowed session.\n */\nexport function redactCredentialShapedContent(value: string): string {\n\tlet result = value;\n\tfor (let pass = 0; pass < 8 && containsCredentialShape(result); pass += 1) {\n\t\tresult = result.replace(CREDENTIAL_SHAPE_MASK_PATTERN, \"[REDACTED]\");\n\t}\n\treturn containsCredentialShape(result) ? \"[REDACTED]\" : result;\n}\n\nexport interface SessionFileIdentity {\n\treadonly dev: string;\n\treadonly ino: string;\n}\n\nexport interface SessionRevisionToken {\n\treadonly schemaVersion: typeof SESSION_REVISION_TOKEN_SCHEMA_VERSION;\n\treadonly sessionId: string;\n\treadonly completeBytes: number;\n\treadonly recordCount: number;\n\treadonly leafId: string | null;\n\treadonly lastEntryId: string | null;\n\treadonly completePrefixSha256: string;\n\treadonly fileIdentity?: SessionFileIdentity;\n}\n\nexport interface SessionRevisionTokenInput {\n\treadonly schemaVersion?: typeof SESSION_REVISION_TOKEN_SCHEMA_VERSION;\n\treadonly sessionId: string;\n\treadonly completeBytes: number;\n\treadonly recordCount: number;\n\treadonly leafId: string | null;\n\treadonly lastEntryId: string | null;\n\treadonly completePrefixSha256: string;\n\treadonly fileIdentity?: SessionFileIdentity;\n}\n\nexport interface CompactionSourceIdentity {\n\treadonly sessionId: string;\n\treadonly entryIds: readonly string[];\n\treadonly firstEntryId: string;\n\treadonly lastEntryId: string;\n\treadonly sourceSha256: string;\n\treadonly activeLeafId: string;\n\treadonly messageCount: number;\n}\n\nexport interface CompactionSourceIdentityInput {\n\treadonly sessionId: string;\n\treadonly entryIds: readonly string[];\n\treadonly firstEntryId: string;\n\treadonly lastEntryId: string;\n\treadonly sourceSha256: string;\n\treadonly activeLeafId: string;\n\treadonly messageCount: number;\n}\n\nexport interface CompactionModelIdentity {\n\treadonly provider: string;\n\treadonly id: string;\n}\n\nexport interface CompactionModelHistoryEntry {\n\treadonly entryId: string;\n\treadonly provider: string;\n\treadonly modelId: string;\n}\n\nexport interface CompactionPreservedProvenance {\n\treadonly latestIntent: string;\n\treadonly openTasks: readonly string[];\n\treadonly laneIds: readonly string[];\n\treadonly acceptancePredicateIds: readonly string[];\n\treadonly evidenceReceiptIds: readonly string[];\n\treadonly blockerReasons: readonly string[];\n\treadonly repairEventIds: readonly string[];\n\treadonly branch: string | null;\n\treadonly worktree: string | null;\n\treadonly modelHistory: readonly CompactionModelHistoryEntry[];\n\treadonly nextAction: string;\n}\n\nexport interface CompactionPreservedProvenanceInput {\n\treadonly latestIntent: string;\n\treadonly openTasks: readonly string[];\n\treadonly laneIds: readonly string[];\n\treadonly acceptancePredicateIds: readonly string[];\n\treadonly evidenceReceiptIds: readonly string[];\n\treadonly blockerReasons: readonly string[];\n\treadonly repairEventIds: readonly string[];\n\treadonly branch: string | null;\n\treadonly worktree: string | null;\n\treadonly modelHistory: readonly CompactionModelHistoryEntry[];\n\treadonly nextAction: string;\n}\n\nexport interface CompactionTransaction {\n\treadonly schemaVersion: typeof COMPACTION_TRANSACTION_SCHEMA_VERSION;\n\treadonly transactionId: string;\n\treadonly baseRevision: SessionRevisionToken;\n\treadonly source: CompactionSourceIdentity;\n\treadonly createdAt: string;\n\treadonly model: CompactionModelIdentity;\n\treadonly preserved: CompactionPreservedProvenance;\n}\n\nexport interface CompactionTransactionInput {\n\treadonly schemaVersion?: typeof COMPACTION_TRANSACTION_SCHEMA_VERSION;\n\treadonly transactionId: string;\n\treadonly baseRevision: SessionRevisionTokenInput;\n\treadonly source: CompactionSourceIdentityInput;\n\treadonly createdAt: string;\n\treadonly model: CompactionModelIdentity;\n\treadonly preserved: CompactionPreservedProvenanceInput;\n}\n\nexport type CompactionBarrierStatus = \"ready\" | \"defer\" | \"fail_closed\";\nexport type CompactionBarrierReason =\n\t| \"closed_active_branch\"\n\t| \"pending_tool_calls\"\n\t| \"missing_active_tail_results\"\n\t| \"invalid_pending_tool_ids\"\n\t| \"inconsistent_integrity_report\"\n\t| \"structural_integrity_failure\"\n\t| \"unsafe_missing_tool_results\";\n\nexport interface CompactionBarrierResult {\n\treadonly status: CompactionBarrierStatus;\n\treadonly reason: CompactionBarrierReason;\n\treadonly pendingToolCallIds: readonly string[];\n\treadonly missingToolCallIds: readonly string[];\n}\n\nexport type CompactionCommitDecision =\n\t| {\n\t\t\treadonly decision: \"commit\";\n\t\t\treadonly reason: \"exact_match\";\n\t\t\treadonly transactionId: string;\n\t\t\treadonly revision: SessionRevisionToken;\n\t\t\treadonly source: CompactionSourceIdentity;\n\t  }\n\t| {\n\t\t\treadonly decision: \"stale\";\n\t\t\treadonly reason: \"revision_mismatch\" | \"source_mismatch\";\n\t\t\treadonly transactionId: string;\n\t  }\n\t| {\n\t\t\treadonly decision: \"duplicate\";\n\t\t\treadonly reason: \"source_already_committed\";\n\t\t\treadonly transactionId: string;\n\t  }\n\t| {\n\t\t\treadonly decision: \"defer\";\n\t\t\treadonly reason: \"barrier_defer\";\n\t\t\treadonly transactionId: string;\n\t\t\treadonly barrierReason: CompactionBarrierReason;\n\t  }\n\t| {\n\t\t\treadonly decision: \"fail_closed\";\n\t\t\treadonly reason: \"barrier_fail_closed\" | \"invalid_transaction\" | \"invalid_commit_input\";\n\t\t\treadonly transactionId?: string;\n\t\t\treadonly barrierReason?: CompactionBarrierReason;\n\t  };\n\nexport interface DecideCompactionCommitInput {\n\treadonly transaction: CompactionTransaction;\n\treadonly currentRevision: SessionRevisionToken;\n\treadonly currentSource: CompactionSourceIdentity;\n\treadonly barrier: CompactionBarrierResult;\n\treadonly priorCommittedSourceDigests: readonly string[];\n}\n\nexport interface CompactionEnvelope {\n\treadonly schemaVersion: typeof COMPACTION_ENVELOPE_SCHEMA_VERSION;\n\treadonly transactionId: string;\n\treadonly baseRevision: SessionRevisionToken;\n\treadonly source: CompactionSourceIdentity;\n\treadonly createdAt: string;\n\treadonly model: CompactionModelIdentity;\n\treadonly summary: string;\n\treadonly summarySha256: string;\n\treadonly preserved: CompactionPreservedProvenance;\n}\n\nexport interface CreateCompactionEnvelopeInput {\n\treadonly transaction: CompactionTransaction;\n\treadonly decision: CompactionCommitDecision;\n\treadonly summary: string;\n\t/** Caller-supplied lowercase 64-hex SHA-256 digest of `summary`. OMK does not compute or verify the digest here; the caller is responsible for computing and binding it. */\n\treadonly summarySha256: string;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction assertOnlyKeys(value: Record<string, unknown>, allowed: readonly string[], field: string): void {\n\tconst allowedKeys = new Set(allowed);\n\tif (Object.keys(value).some((key) => !allowedKeys.has(key))) {\n\t\tthrow new TypeError(`${field} contains unsupported metadata`);\n\t}\n}\n\nfunction assertSafeInteger(value: unknown, field: string): asserts value is number {\n\tif (!Number.isSafeInteger(value) || (value as number) < 0) {\n\t\tthrow new TypeError(`${field} must be a non-negative safe integer`);\n\t}\n}\n\nfunction assertMetadataText(value: unknown, field: string, maxLength = MAX_METADATA_LENGTH): asserts value is string {\n\tif (\n\t\ttypeof value !== \"string\" ||\n\t\tvalue.length === 0 ||\n\t\tvalue.length > maxLength ||\n\t\tMETADATA_CONTROL_PATTERN.test(value)\n\t) {\n\t\tthrow new TypeError(`${field} must be non-empty bounded metadata without control characters`);\n\t}\n\tif (containsCredentialShape(value)) {\n\t\tthrow new TypeError(`${field} must not contain credential-shaped metadata`);\n\t}\n}\n\nfunction assertContentText(value: unknown, field: string, maxLength: number): asserts value is string {\n\tif (\n\t\ttypeof value !== \"string\" ||\n\t\tvalue.length === 0 ||\n\t\tvalue.length > maxLength ||\n\t\tCONTENT_CONTROL_PATTERN.test(value)\n\t) {\n\t\tthrow new TypeError(`${field} must be non-empty bounded text without unsafe control characters`);\n\t}\n\tif (containsCredentialShape(value)) {\n\t\tthrow new TypeError(`${field} must not contain credential-shaped content`);\n\t}\n}\n\nfunction assertSha256(value: unknown, field: string): asserts value is string {\n\tif (typeof value !== \"string\" || !SHA256_PATTERN.test(value)) {\n\t\tthrow new TypeError(`${field} must be a lowercase 64-hex SHA-256 digest`);\n\t}\n}\n\nfunction assertCanonicalTimestamp(value: unknown): asserts value is string {\n\tassertMetadataText(value, \"createdAt\");\n\tif (!CANONICAL_TIMESTAMP_PATTERN.test(value)) {\n\t\tthrow new TypeError(\"createdAt must be a canonical UTC ISO-8601 timestamp\");\n\t}\n\tconst parsed = new Date(value);\n\tif (!Number.isFinite(parsed.valueOf()) || parsed.toISOString() !== value) {\n\t\tthrow new TypeError(\"createdAt must be a canonical UTC ISO-8601 timestamp\");\n\t}\n}\n\nfunction copyFileIdentity(value: unknown): SessionFileIdentity | undefined {\n\tif (value === undefined) return undefined;\n\tif (!isRecord(value)) throw new TypeError(\"fileIdentity must be an object\");\n\tassertOnlyKeys(value, [\"dev\", \"ino\"], \"fileIdentity\");\n\tfor (const field of [\"dev\", \"ino\"] as const) {\n\t\tconst part = value[field];\n\t\tif (\n\t\t\ttypeof part !== \"string\" ||\n\t\t\tpart.length === 0 ||\n\t\t\tpart.length > MAX_FILE_IDENTITY_LENGTH ||\n\t\t\t!DECIMAL_STRING_PATTERN.test(part)\n\t\t) {\n\t\t\tthrow new TypeError(`fileIdentity.${field} must be a bounded decimal string`);\n\t\t}\n\t}\n\treturn Object.freeze({ dev: value.dev as string, ino: value.ino as string });\n}\n\nfunction copyIdArray(value: unknown, field: string, maxItems: number): readonly string[] {\n\tif (!Array.isArray(value) || value.length > maxItems) {\n\t\tthrow new TypeError(`${field} must be a bounded array`);\n\t}\n\tconst copy = value.map((item, index) => {\n\t\tassertMetadataText(item, `${field}[${index}]`);\n\t\treturn item;\n\t});\n\tif (new Set(copy).size !== copy.length) throw new TypeError(`${field} must contain unique IDs`);\n\treturn Object.freeze(copy);\n}\n\nfunction assertProvenanceText(value: unknown, field: string, maxLength: number): asserts value is string {\n\tif (\n\t\ttypeof value !== \"string\" ||\n\t\tvalue.length === 0 ||\n\t\tvalue.length > maxLength ||\n\t\tCONTENT_CONTROL_PATTERN.test(value)\n\t) {\n\t\tthrow new TypeError(`${field} must be non-empty bounded text without unsafe control characters`);\n\t}\n\tif (containsCredentialShape(value)) {\n\t\tthrow new TypeError(`${field} must not contain credential-shaped content`);\n\t}\n}\n\nfunction assertNullableMetadataText(\n\tvalue: unknown,\n\tfield: string,\n\tmaxLength = MAX_METADATA_LENGTH,\n): asserts value is string | null {\n\tif (value === null) return;\n\tassertMetadataText(value, field, maxLength);\n}\n\nfunction copyTextArray(\n\tvalue: unknown,\n\tfield: string,\n\tmaxItems: number,\n\tmaxLength: number,\n\trequireUnique: boolean,\n): readonly string[] {\n\tif (!Array.isArray(value) || value.length > maxItems) {\n\t\tthrow new TypeError(`${field} must be a bounded array`);\n\t}\n\tconst copy = value.map((item, index) => {\n\t\tassertProvenanceText(item, `${field}[${index}]`, maxLength);\n\t\treturn item;\n\t});\n\tif (requireUnique && new Set(copy).size !== copy.length) {\n\t\tthrow new TypeError(`${field} must contain unique entries`);\n\t}\n\treturn Object.freeze(copy);\n}\n\nfunction copyModelHistory(value: unknown): readonly CompactionModelHistoryEntry[] {\n\tif (!Array.isArray(value) || value.length > MAX_MODEL_HISTORY_ENTRIES) {\n\t\tthrow new TypeError(\"preserved.modelHistory must be a bounded array\");\n\t}\n\tconst seenEntryIds = new Set<string>();\n\tconst copy = value.map((item, index) => {\n\t\tif (!isRecord(item)) throw new TypeError(`preserved.modelHistory[${index}] must be an object`);\n\t\tassertOnlyKeys(item, [\"entryId\", \"provider\", \"modelId\"], `preserved.modelHistory[${index}]`);\n\t\tassertMetadataText(item.entryId, `preserved.modelHistory[${index}].entryId`);\n\t\tassertMetadataText(item.provider, `preserved.modelHistory[${index}].provider`);\n\t\tassertMetadataText(item.modelId, `preserved.modelHistory[${index}].modelId`);\n\t\tconst entryId = item.entryId as string;\n\t\tif (seenEntryIds.has(entryId)) throw new TypeError(\"preserved.modelHistory must contain unique entryId values\");\n\t\tseenEntryIds.add(entryId);\n\t\treturn Object.freeze({ entryId, provider: item.provider as string, modelId: item.modelId as string });\n\t});\n\treturn Object.freeze(copy);\n}\n\nfunction copyPreservedProvenance(input: unknown): CompactionPreservedProvenance {\n\tif (!isRecord(input)) throw new TypeError(\"preserved must be an object\");\n\tassertOnlyKeys(\n\t\tinput,\n\t\t[\n\t\t\t\"latestIntent\",\n\t\t\t\"openTasks\",\n\t\t\t\"laneIds\",\n\t\t\t\"acceptancePredicateIds\",\n\t\t\t\"evidenceReceiptIds\",\n\t\t\t\"blockerReasons\",\n\t\t\t\"repairEventIds\",\n\t\t\t\"branch\",\n\t\t\t\"worktree\",\n\t\t\t\"modelHistory\",\n\t\t\t\"nextAction\",\n\t\t],\n\t\t\"preserved\",\n\t);\n\tassertProvenanceText(input.latestIntent, \"preserved.latestIntent\", MAX_LATEST_INTENT_LENGTH);\n\tconst openTasks = copyTextArray(\n\t\tinput.openTasks,\n\t\t\"preserved.openTasks\",\n\t\tMAX_PROVENANCE_IDS,\n\t\tMAX_PROVENANCE_TEXT_LENGTH,\n\t\tfalse,\n\t);\n\tconst laneIds = copyTextArray(input.laneIds, \"preserved.laneIds\", MAX_PROVENANCE_IDS, MAX_METADATA_LENGTH, true);\n\tconst acceptancePredicateIds = copyTextArray(\n\t\tinput.acceptancePredicateIds,\n\t\t\"preserved.acceptancePredicateIds\",\n\t\tMAX_PROVENANCE_IDS,\n\t\tMAX_METADATA_LENGTH,\n\t\ttrue,\n\t);\n\tconst evidenceReceiptIds = copyTextArray(\n\t\tinput.evidenceReceiptIds,\n\t\t\"preserved.evidenceReceiptIds\",\n\t\tMAX_PROVENANCE_IDS,\n\t\tMAX_METADATA_LENGTH,\n\t\ttrue,\n\t);\n\tconst blockerReasons = copyTextArray(\n\t\tinput.blockerReasons,\n\t\t\"preserved.blockerReasons\",\n\t\tMAX_PROVENANCE_IDS,\n\t\tMAX_PROVENANCE_TEXT_LENGTH,\n\t\tfalse,\n\t);\n\tconst repairEventIds = copyTextArray(\n\t\tinput.repairEventIds,\n\t\t\"preserved.repairEventIds\",\n\t\tMAX_PROVENANCE_IDS,\n\t\tMAX_METADATA_LENGTH,\n\t\ttrue,\n\t);\n\tassertNullableMetadataText(input.branch, \"preserved.branch\", MAX_PROVENANCE_TEXT_LENGTH);\n\tassertNullableMetadataText(input.worktree, \"preserved.worktree\", MAX_PROVENANCE_TEXT_LENGTH);\n\tconst modelHistory = copyModelHistory(input.modelHistory);\n\tassertProvenanceText(input.nextAction, \"preserved.nextAction\", MAX_NEXT_ACTION_LENGTH);\n\treturn Object.freeze({\n\t\tlatestIntent: input.latestIntent,\n\t\topenTasks,\n\t\tlaneIds,\n\t\tacceptancePredicateIds,\n\t\tevidenceReceiptIds,\n\t\tblockerReasons,\n\t\trepairEventIds,\n\t\tbranch: input.branch,\n\t\tworktree: input.worktree,\n\t\tmodelHistory,\n\t\tnextAction: input.nextAction,\n\t});\n}\n\nexport function createSessionRevisionToken(input: unknown): SessionRevisionToken {\n\tif (!isRecord(input)) throw new TypeError(\"session revision token must be an object\");\n\tassertOnlyKeys(\n\t\tinput,\n\t\t[\n\t\t\t\"schemaVersion\",\n\t\t\t\"sessionId\",\n\t\t\t\"completeBytes\",\n\t\t\t\"recordCount\",\n\t\t\t\"leafId\",\n\t\t\t\"lastEntryId\",\n\t\t\t\"completePrefixSha256\",\n\t\t\t\"fileIdentity\",\n\t\t],\n\t\t\"session revision token\",\n\t);\n\tif (input.schemaVersion !== undefined && input.schemaVersion !== SESSION_REVISION_TOKEN_SCHEMA_VERSION) {\n\t\tthrow new TypeError(\"unsupported session revision token schema version\");\n\t}\n\tassertMetadataText(input.sessionId, \"sessionId\");\n\tassertSafeInteger(input.completeBytes, \"completeBytes\");\n\tassertSafeInteger(input.recordCount, \"recordCount\");\n\tif (input.leafId !== null) assertMetadataText(input.leafId, \"leafId\");\n\tif (input.lastEntryId !== null) assertMetadataText(input.lastEntryId, \"lastEntryId\");\n\tassertSha256(input.completePrefixSha256, \"completePrefixSha256\");\n\n\tif ((input.completeBytes === 0) !== (input.recordCount === 0)) {\n\t\tthrow new TypeError(\"completeBytes and recordCount must both be empty or both be non-empty\");\n\t}\n\tif (input.recordCount === 0 && (input.leafId !== null || input.lastEntryId !== null)) {\n\t\tthrow new TypeError(\"an empty revision cannot identify entries\");\n\t}\n\tif (input.leafId !== null && input.lastEntryId === null) {\n\t\tthrow new TypeError(\"leafId requires a lastEntryId\");\n\t}\n\tif (input.completeBytes === 0 && input.completePrefixSha256 !== EMPTY_SHA256) {\n\t\tthrow new TypeError(\"an empty revision must use the SHA-256 digest of empty bytes\");\n\t}\n\n\tconst fileIdentity = copyFileIdentity(input.fileIdentity);\n\treturn Object.freeze({\n\t\tschemaVersion: SESSION_REVISION_TOKEN_SCHEMA_VERSION,\n\t\tsessionId: input.sessionId,\n\t\tcompleteBytes: input.completeBytes,\n\t\trecordCount: input.recordCount,\n\t\tleafId: input.leafId,\n\t\tlastEntryId: input.lastEntryId,\n\t\tcompletePrefixSha256: input.completePrefixSha256,\n\t\t...(fileIdentity === undefined ? {} : { fileIdentity }),\n\t});\n}\n\nexport function createCompactionSourceIdentity(input: unknown): CompactionSourceIdentity {\n\tif (!isRecord(input)) throw new TypeError(\"compaction source identity must be an object\");\n\tassertOnlyKeys(\n\t\tinput,\n\t\t[\"sessionId\", \"entryIds\", \"firstEntryId\", \"lastEntryId\", \"sourceSha256\", \"activeLeafId\", \"messageCount\"],\n\t\t\"compaction source identity\",\n\t);\n\tassertMetadataText(input.sessionId, \"source.sessionId\");\n\tconst entryIds = copyIdArray(input.entryIds, \"source.entryIds\", MAX_SOURCE_ENTRIES);\n\tif (entryIds.length === 0) throw new TypeError(\"source.entryIds must be non-empty\");\n\tassertMetadataText(input.firstEntryId, \"source.firstEntryId\");\n\tassertMetadataText(input.lastEntryId, \"source.lastEntryId\");\n\tassertMetadataText(input.activeLeafId, \"source.activeLeafId\");\n\tassertSha256(input.sourceSha256, \"source.sourceSha256\");\n\tassertSafeInteger(input.messageCount, \"source.messageCount\");\n\tif (input.messageCount > entryIds.length) {\n\t\tthrow new TypeError(\"source.messageCount cannot exceed source.entryIds length\");\n\t}\n\tif (input.firstEntryId !== entryIds[0] || input.lastEntryId !== entryIds.at(-1)) {\n\t\tthrow new TypeError(\"source first/last IDs must match the ordered entry IDs\");\n\t}\n\t// R30 P2: active leaf must be the last entry in the source range\n\tif (input.activeLeafId !== input.lastEntryId) {\n\t\tthrow new TypeError(\"source.activeLeafId must match source.lastEntryId\");\n\t}\n\treturn Object.freeze({\n\t\tsessionId: input.sessionId,\n\t\tentryIds,\n\t\tfirstEntryId: input.firstEntryId,\n\t\tlastEntryId: input.lastEntryId,\n\t\tsourceSha256: input.sourceSha256,\n\t\tactiveLeafId: input.activeLeafId,\n\t\tmessageCount: input.messageCount,\n\t});\n}\n\nfunction copyModelIdentity(value: unknown): CompactionModelIdentity {\n\tif (!isRecord(value)) throw new TypeError(\"model must be an object\");\n\tassertOnlyKeys(value, [\"provider\", \"id\"], \"model\");\n\tassertMetadataText(value.provider, \"model.provider\");\n\tassertMetadataText(value.id, \"model.id\");\n\treturn Object.freeze({ provider: value.provider, id: value.id });\n}\n\nexport function createCompactionTransaction(input: CompactionTransactionInput): CompactionTransaction {\n\tif (!isRecord(input)) throw new TypeError(\"compaction transaction must be an object\");\n\tassertOnlyKeys(\n\t\tinput,\n\t\t[\"schemaVersion\", \"transactionId\", \"baseRevision\", \"source\", \"createdAt\", \"model\", \"preserved\"],\n\t\t\"compaction transaction\",\n\t);\n\tif (input.schemaVersion !== undefined && input.schemaVersion !== COMPACTION_TRANSACTION_SCHEMA_VERSION) {\n\t\tthrow new TypeError(\"unsupported compaction transaction schema version\");\n\t}\n\tassertMetadataText(input.transactionId, \"transactionId\");\n\tassertCanonicalTimestamp(input.createdAt);\n\tconst baseRevision = createSessionRevisionToken(input.baseRevision);\n\tconst source = createCompactionSourceIdentity(input.source);\n\tif (baseRevision.sessionId !== source.sessionId || baseRevision.leafId !== source.activeLeafId) {\n\t\tthrow new TypeError(\"transaction revision and source must identify the same session and active leaf\");\n\t}\n\tconst model = copyModelIdentity(input.model);\n\tconst preserved = copyPreservedProvenance(input.preserved);\n\treturn Object.freeze({\n\t\tschemaVersion: COMPACTION_TRANSACTION_SCHEMA_VERSION,\n\t\ttransactionId: input.transactionId,\n\t\tbaseRevision,\n\t\tsource,\n\t\tcreatedAt: input.createdAt,\n\t\tmodel,\n\t\tpreserved,\n\t});\n}\n\nconst KNOWN_FINDING_REASONS = new Set<SessionIntegrityReasonCode>([\n\t\"trailing_fragment\",\n\t\"invalid_utf8\",\n\t\"malformed_json\",\n\t\"missing_header\",\n\t\"invalid_header\",\n\t\"unsupported_header\",\n\t\"multiple_header\",\n\t\"late_header\",\n\t\"invalid_entry\",\n\t\"unsupported_entry\",\n\t\"duplicate_entry_id\",\n\t\"missing_parent\",\n\t\"self_cycle\",\n\t\"parent_cycle\",\n\t\"active_leaf_missing\",\n\t\"compaction_first_kept_not_ancestor\",\n\t\"active_branch_context_invalid\",\n\t\"transcript_missing_result\",\n\t\"transcript_duplicate_result\",\n\t\"transcript_orphan_result\",\n\t\"transcript_duplicate_call_id\",\n\t\"transcript_interleaved_non_result\",\n]);\nconst TRANSCRIPT_FINDING_REASONS = new Set<SessionIntegrityReasonCode>([\n\t\"transcript_missing_result\",\n\t\"transcript_duplicate_result\",\n\t\"transcript_orphan_result\",\n\t\"transcript_duplicate_call_id\",\n\t\"transcript_interleaved_non_result\",\n]);\nconst HEADER_FINDING_REASONS = new Set<SessionIntegrityReasonCode>([\n\t\"missing_header\",\n\t\"invalid_header\",\n\t\"unsupported_header\",\n\t\"multiple_header\",\n\t\"late_header\",\n]);\nconst TRANSCRIPT_ISSUE_KINDS = new Set<string>([\n\t\"missing_result\",\n\t\"duplicate_result\",\n\t\"orphan_result\",\n\t\"duplicate_call_id\",\n\t\"interleaved_non_result\",\n]);\n\nfunction messageToolCalls(message: SessionIntegrityReport[\"activeMessages\"][number]): readonly {\n\treadonly id: string;\n\treadonly name: string;\n}[] {\n\tif (message.role !== \"assistant\") return [];\n\treturn message.content.flatMap((block) => (block.type === \"toolCall\" ? [{ id: block.id, name: block.name }] : []));\n}\n\nfunction transcriptFindingReason(issue: TranscriptIntegrityIssue): SessionIntegrityReasonCode {\n\tswitch (issue.kind) {\n\t\tcase \"missing_result\":\n\t\t\treturn \"transcript_missing_result\";\n\t\tcase \"duplicate_result\":\n\t\t\treturn \"transcript_duplicate_result\";\n\t\tcase \"orphan_result\":\n\t\t\treturn \"transcript_orphan_result\";\n\t\tcase \"duplicate_call_id\":\n\t\t\treturn \"transcript_duplicate_call_id\";\n\t\tcase \"interleaved_non_result\":\n\t\t\treturn \"transcript_interleaved_non_result\";\n\t}\n}\n\nfunction issueIdentity(issue: {\n\treadonly kind: string;\n\treadonly toolCallId: string;\n\treadonly toolName?: string;\n}): string {\n\treturn JSON.stringify([issue.kind, issue.toolCallId, issue.toolName ?? null]);\n}\n\nfunction findingIdentity(finding: SessionIntegrityFinding): string {\n\treturn JSON.stringify([\n\t\tfinding.reason,\n\t\tfinding.line ?? null,\n\t\tfinding.entryId ?? null,\n\t\tfinding.parentId ?? null,\n\t\tfinding.cycleEntryIds ?? null,\n\t\tfinding.toolCallId ?? null,\n\t\tfinding.toolName ?? null,\n\t]);\n}\n\nfunction sameMultiset(left: readonly string[], right: readonly string[]): boolean {\n\tif (left.length !== right.length) return false;\n\tconst counts = new Map<string, number>();\n\tfor (const item of left) counts.set(item, (counts.get(item) ?? 0) + 1);\n\tfor (const item of right) {\n\t\tconst count = counts.get(item);\n\t\tif (count === undefined) return false;\n\t\tif (count === 1) counts.delete(item);\n\t\telse counts.set(item, count - 1);\n\t}\n\treturn counts.size === 0;\n}\n\nfunction validByteDigest(value: unknown, completePrefix: boolean): boolean {\n\tif (!isRecord(value)) return false;\n\tconst keys = completePrefix ? [\"byteCount\", \"sha256\", \"lineCount\"] : [\"byteCount\", \"sha256\"];\n\tif (Object.keys(value).some((key) => !keys.includes(key))) return false;\n\tif (!Number.isSafeInteger(value.byteCount) || (value.byteCount as number) < 0) return false;\n\tif (typeof value.sha256 !== \"string\" || !SHA256_PATTERN.test(value.sha256)) return false;\n\tif (!completePrefix) return true;\n\treturn Number.isSafeInteger(value.lineCount) && (value.lineCount as number) >= 0;\n}\n\nfunction validFinding(value: unknown): value is SessionIntegrityFinding {\n\tif (!isRecord(value) || typeof value.reason !== \"string\") return false;\n\tif (!KNOWN_FINDING_REASONS.has(value.reason as SessionIntegrityReasonCode)) return false;\n\tconst allowed = [\"reason\", \"line\", \"entryId\", \"parentId\", \"cycleEntryIds\", \"toolCallId\", \"toolName\"];\n\tif (Object.keys(value).some((key) => !allowed.includes(key))) return false;\n\tif (value.line !== undefined && (!Number.isSafeInteger(value.line) || (value.line as number) < 1)) return false;\n\tfor (const field of [\"entryId\", \"parentId\", \"toolCallId\", \"toolName\"] as const) {\n\t\tif (value[field] !== undefined && typeof value[field] !== \"string\") return false;\n\t}\n\treturn (\n\t\tvalue.cycleEntryIds === undefined ||\n\t\t(Array.isArray(value.cycleEntryIds) && value.cycleEntryIds.every((item) => typeof item === \"string\"))\n\t);\n}\n\nfunction validTranscriptIssue(value: unknown): value is TranscriptIntegrityIssue {\n\tif (!isRecord(value) || !TRANSCRIPT_ISSUE_KINDS.has(value.kind as string)) return false;\n\tif (typeof value.toolCallId !== \"string\" || value.toolCallId.length === 0) return false;\n\tif (value.toolName !== undefined && typeof value.toolName !== \"string\") return false;\n\treturn Object.keys(value).every((key) => [\"kind\", \"toolCallId\", \"toolName\"].includes(key));\n}\n\nfunction activeBranchIsConsistent(report: SessionIntegrityReport): boolean {\n\tif (!Array.isArray(report.entries) || !Array.isArray(report.activeBranch) || !Array.isArray(report.activeMessages)) {\n\t\treturn false;\n\t}\n\tconst entryIds = new Set<string>();\n\tfor (const entry of report.entries) {\n\t\tif (!isRecord(entry) || typeof entry.id !== \"string\" || entry.id.length === 0) return false;\n\t\tentryIds.add(entry.id);\n\t}\n\tif (report.activeLeafId === null) return report.activeBranch.length === 0;\n\tif (typeof report.activeLeafId !== \"string\" || report.activeBranch.length === 0) return false;\n\tconst branchIds = new Set<string>();\n\tfor (let index = 0; index < report.activeBranch.length; index++) {\n\t\tconst entry = report.activeBranch[index];\n\t\tif (!isRecord(entry) || typeof entry.id !== \"string\" || branchIds.has(entry.id) || !entryIds.has(entry.id)) {\n\t\t\treturn false;\n\t\t}\n\t\tbranchIds.add(entry.id);\n\t\tconst expectedParent = index === 0 ? null : report.activeBranch[index - 1]?.id;\n\t\tif (entry.parentId !== expectedParent) return false;\n\t}\n\treturn report.activeBranch.at(-1)?.id === report.activeLeafId;\n}\n\nfunction reportIsConsistent(report: SessionIntegrityReport): boolean {\n\tif (!isRecord(report)) return false;\n\tif (!validByteDigest(report.source, false) || !validByteDigest(report.completePrefix, true)) return false;\n\tif (report.trailingFragment !== null && !validByteDigest(report.trailingFragment, false)) return false;\n\tconst trailingBytes = report.trailingFragment?.byteCount ?? 0;\n\tif (report.source.byteCount !== report.completePrefix.byteCount + trailingBytes) return false;\n\tif (report.completePrefix.lineCount > report.completePrefix.byteCount) return false;\n\tif (report.completePrefix.byteCount === 0 && report.completePrefix.sha256 !== EMPTY_SHA256) return false;\n\tif (report.trailingFragment === null && report.source.sha256 !== report.completePrefix.sha256) return false;\n\tif (!Array.isArray(report.findings) || !report.findings.every(validFinding)) return false;\n\tif (typeof report.ok !== \"boolean\" || report.ok !== (report.findings.length === 0)) return false;\n\n\tconst trailingFindings = report.findings.filter((finding) => finding.reason === \"trailing_fragment\");\n\tif (\n\t\ttrailingFindings.length !== (report.trailingFragment === null ? 0 : 1) ||\n\t\ttrailingFindings.some((finding) => Object.keys(finding).length !== 1)\n\t) {\n\t\treturn false;\n\t}\n\tif (report.header === null) {\n\t\tif (!report.findings.some((finding) => HEADER_FINDING_REASONS.has(finding.reason))) return false;\n\t} else if (!isRecord(report.header) || typeof report.header.id !== \"string\" || report.header.id.length === 0) {\n\t\treturn false;\n\t}\n\tif (!activeBranchIsConsistent(report)) return false;\n\n\tconst transcriptFindings = report.findings.filter((finding) => TRANSCRIPT_FINDING_REASONS.has(finding.reason));\n\tif (report.transcript === null) {\n\t\t// R30 P1-2: null transcript can never produce ready.\n\t\t// A producer-consistent null transcript requires activeMessages to be empty\n\t\t// and a structural finding to explain why no transcript was produced.\n\t\tif (report.activeMessages.length > 0) return false;\n\t\tif (transcriptFindings.length !== 0) return false;\n\t\tconst hasStructuralFinding = report.findings.some(\n\t\t\t(finding) => finding.reason !== \"trailing_fragment\" && !TRANSCRIPT_FINDING_REASONS.has(finding.reason),\n\t\t);\n\t\treturn hasStructuralFinding;\n\t}\n\tif (!isRecord(report.transcript) || !Array.isArray(report.transcript.issues)) return false;\n\tif (!report.transcript.issues.every(validTranscriptIssue)) return false;\n\tif (report.transcript.ok !== (report.transcript.issues.length === 0)) return false;\n\tif (\n\t\treport.findings.some(\n\t\t\t(finding) => finding.reason !== \"trailing_fragment\" && !TRANSCRIPT_FINDING_REASONS.has(finding.reason),\n\t\t)\n\t) {\n\t\treturn false;\n\t}\n\n\tlet inspected: TranscriptIntegrityReport;\n\ttry {\n\t\tinspected = inspectTranscriptIntegrity(report.activeMessages);\n\t} catch {\n\t\treturn false;\n\t}\n\tif (\n\t\tinspected.ok !== report.transcript.ok ||\n\t\t!sameMultiset(inspected.issues.map(issueIdentity), report.transcript.issues.map(issueIdentity))\n\t) {\n\t\treturn false;\n\t}\n\treturn sameMultiset(\n\t\ttranscriptFindings.map(findingIdentity),\n\t\tinspected.issues.map((issue) =>\n\t\t\tJSON.stringify([\n\t\t\t\ttranscriptFindingReason(issue),\n\t\t\t\tnull,\n\t\t\t\tnull,\n\t\t\t\tnull,\n\t\t\t\tnull,\n\t\t\t\tissue.toolCallId,\n\t\t\t\tissue.toolName ?? null,\n\t\t\t]),\n\t\t),\n\t);\n}\n\nfunction missingCallsAreAtActiveTail(report: SessionIntegrityReport, missingIds: ReadonlySet<string>): boolean {\n\tlet lastAssistantIndex = -1;\n\tfor (let index = report.activeMessages.length - 1; index >= 0; index--) {\n\t\tif (report.activeMessages[index]?.role === \"assistant\") {\n\t\t\tlastAssistantIndex = index;\n\t\t\tbreak;\n\t\t}\n\t}\n\tif (lastAssistantIndex === -1) return false;\n\tconst assistant = report.activeMessages[lastAssistantIndex];\n\tif (!assistant || assistant.role !== \"assistant\") return false;\n\tconst tailCallIds = new Set(messageToolCalls(assistant).map((call) => call.id));\n\tif ([...missingIds].some((id) => !tailCallIds.has(id))) return false;\n\tfor (let index = lastAssistantIndex + 1; index < report.activeMessages.length; index++) {\n\t\tconst message = report.activeMessages[index];\n\t\tif (!message || message.role !== \"toolResult\" || !tailCallIds.has(message.toolCallId)) return false;\n\t}\n\treturn true;\n}\n\nfunction barrierResult(\n\tstatus: CompactionBarrierStatus,\n\treason: CompactionBarrierReason,\n\tpendingToolCallIds: readonly string[],\n\tmissingToolCallIds: readonly string[] = [],\n): CompactionBarrierResult {\n\treturn Object.freeze({\n\t\tstatus,\n\t\treason,\n\t\tpendingToolCallIds: Object.freeze([...pendingToolCallIds]),\n\t\tmissingToolCallIds: Object.freeze([...missingToolCallIds]),\n\t});\n}\n\n/** Derive a closed-turn compaction barrier without repairing or mutating the report. */\nexport function evaluateCompactionBarrier(\n\treport: SessionIntegrityReport,\n\tpendingToolCallIds: readonly string[],\n): CompactionBarrierResult {\n\tlet pending: readonly string[];\n\ttry {\n\t\tpending = copyIdArray(pendingToolCallIds, \"pendingToolCallIds\", MAX_PROVENANCE_IDS);\n\t} catch {\n\t\treturn barrierResult(\"fail_closed\", \"invalid_pending_tool_ids\", []);\n\t}\n\tif (!reportIsConsistent(report)) {\n\t\treturn barrierResult(\"fail_closed\", \"inconsistent_integrity_report\", pending);\n\t}\n\tconst blockingFinding = report.findings.find((finding) => finding.reason !== \"transcript_missing_result\");\n\tconst blockingIssue = report.transcript?.issues.find((issue) => issue.kind !== \"missing_result\");\n\tif (blockingFinding || blockingIssue) {\n\t\treturn barrierResult(\"fail_closed\", \"structural_integrity_failure\", pending);\n\t}\n\n\tconst missing = Object.freeze(\n\t\t(report.transcript?.issues ?? [])\n\t\t\t.filter((issue) => issue.kind === \"missing_result\")\n\t\t\t.map((issue) => issue.toolCallId),\n\t);\n\tconst missingSet = new Set(missing);\n\tconst pendingSet = new Set(pending);\n\tif (\n\t\tmissing.length > 0 &&\n\t\t(!missingCallsAreAtActiveTail(report, missingSet) || missing.some((toolCallId) => !pendingSet.has(toolCallId)))\n\t) {\n\t\treturn barrierResult(\"fail_closed\", \"unsafe_missing_tool_results\", pending, missing);\n\t}\n\tif (missing.length > 0) return barrierResult(\"defer\", \"missing_active_tail_results\", pending, missing);\n\tif (pending.length > 0) return barrierResult(\"defer\", \"pending_tool_calls\", pending);\n\treturn barrierResult(\"ready\", \"closed_active_branch\", []);\n}\n\nfunction sameRevision(left: SessionRevisionToken, right: SessionRevisionToken): boolean {\n\treturn (\n\t\tleft.schemaVersion === right.schemaVersion &&\n\t\tleft.sessionId === right.sessionId &&\n\t\tleft.completeBytes === right.completeBytes &&\n\t\tleft.recordCount === right.recordCount &&\n\t\tleft.leafId === right.leafId &&\n\t\tleft.lastEntryId === right.lastEntryId &&\n\t\tleft.completePrefixSha256 === right.completePrefixSha256 &&\n\t\tleft.fileIdentity?.dev === right.fileIdentity?.dev &&\n\t\tleft.fileIdentity?.ino === right.fileIdentity?.ino\n\t);\n}\n\nfunction sameSource(left: CompactionSourceIdentity, right: CompactionSourceIdentity): boolean {\n\treturn (\n\t\tleft.sessionId === right.sessionId &&\n\t\tleft.firstEntryId === right.firstEntryId &&\n\t\tleft.lastEntryId === right.lastEntryId &&\n\t\tleft.sourceSha256 === right.sourceSha256 &&\n\t\tleft.activeLeafId === right.activeLeafId &&\n\t\tleft.messageCount === right.messageCount &&\n\t\tleft.entryIds.length === right.entryIds.length &&\n\t\tleft.entryIds.every((id, index) => id === right.entryIds[index])\n\t);\n}\n\nfunction validBarrierResult(barrier: CompactionBarrierResult): boolean {\n\tif (!isRecord(barrier) || !Array.isArray(barrier.pendingToolCallIds) || !Array.isArray(barrier.missingToolCallIds)) {\n\t\treturn false;\n\t}\n\tconst pending = barrier.pendingToolCallIds;\n\tconst missing = barrier.missingToolCallIds;\n\t// R30 P1-3: validate all IDs are bounded, unique, safe metadata text\n\ttry {\n\t\tfor (const ids of [pending, missing]) {\n\t\t\tif (ids.length > MAX_PROVENANCE_IDS) return false;\n\t\t\tif (new Set(ids).size !== ids.length) return false;\n\t\t\tfor (const id of ids) assertMetadataText(id, \"barrier toolCallId\");\n\t\t}\n\t} catch {\n\t\treturn false;\n\t}\n\tswitch (barrier.status) {\n\t\tcase \"ready\":\n\t\t\treturn barrier.reason === \"closed_active_branch\" && pending.length === 0 && missing.length === 0;\n\t\tcase \"defer\":\n\t\t\tif (barrier.reason === \"pending_tool_calls\") {\n\t\t\t\treturn pending.length > 0 && missing.length === 0;\n\t\t\t}\n\t\t\tif (barrier.reason === \"missing_active_tail_results\") {\n\t\t\t\treturn missing.length > 0 && missing.every((id) => pending.includes(id));\n\t\t\t}\n\t\t\treturn false;\n\t\tcase \"fail_closed\":\n\t\t\treturn (\n\t\t\t\tbarrier.reason === \"invalid_pending_tool_ids\" ||\n\t\t\t\tbarrier.reason === \"inconsistent_integrity_report\" ||\n\t\t\t\tbarrier.reason === \"structural_integrity_failure\" ||\n\t\t\t\tbarrier.reason === \"unsafe_missing_tool_results\"\n\t\t\t);\n\t\tdefault:\n\t\t\treturn false;\n\t}\n}\n\n/**\n * Authorize an in-memory commit attempt. A \"commit\" decision is not evidence of\n * durable persistence; the integration layer must still perform its own atomic CAS write.\n */\nexport function decideCompactionCommit(input: DecideCompactionCommitInput): CompactionCommitDecision {\n\tlet transaction: CompactionTransaction;\n\ttry {\n\t\ttransaction = createCompactionTransaction(input.transaction);\n\t} catch {\n\t\treturn Object.freeze({ decision: \"fail_closed\", reason: \"invalid_transaction\" });\n\t}\n\tif (!validBarrierResult(input.barrier)) {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"fail_closed\",\n\t\t\treason: \"invalid_commit_input\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t});\n\t}\n\tif (input.barrier.status === \"fail_closed\") {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"fail_closed\",\n\t\t\treason: \"barrier_fail_closed\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t\tbarrierReason: input.barrier.reason,\n\t\t});\n\t}\n\tif (input.barrier.status === \"defer\") {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"defer\",\n\t\t\treason: \"barrier_defer\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t\tbarrierReason: input.barrier.reason,\n\t\t});\n\t}\n\n\tlet currentRevision: SessionRevisionToken;\n\tlet currentSource: CompactionSourceIdentity;\n\tlet priorDigests: readonly string[];\n\ttry {\n\t\tcurrentRevision = createSessionRevisionToken(input.currentRevision);\n\t\tcurrentSource = createCompactionSourceIdentity(input.currentSource);\n\t\tif (\n\t\t\t!Array.isArray(input.priorCommittedSourceDigests) ||\n\t\t\tinput.priorCommittedSourceDigests.length > MAX_SOURCE_ENTRIES\n\t\t) {\n\t\t\tthrow new TypeError(\"priorCommittedSourceDigests must be a bounded array\");\n\t\t}\n\t\tpriorDigests = input.priorCommittedSourceDigests.map((digest, index) => {\n\t\t\tassertSha256(digest, `priorCommittedSourceDigests[${index}]`);\n\t\t\treturn digest;\n\t\t});\n\t} catch {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"fail_closed\",\n\t\t\treason: \"invalid_commit_input\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t});\n\t}\n\n\tif (priorDigests.includes(transaction.source.sourceSha256)) {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"duplicate\",\n\t\t\treason: \"source_already_committed\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t});\n\t}\n\tif (!sameRevision(transaction.baseRevision, currentRevision)) {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"stale\",\n\t\t\treason: \"revision_mismatch\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t});\n\t}\n\tif (!sameSource(transaction.source, currentSource)) {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"stale\",\n\t\t\treason: \"source_mismatch\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t});\n\t}\n\treturn Object.freeze({\n\t\tdecision: \"commit\",\n\t\treason: \"exact_match\",\n\t\ttransactionId: transaction.transactionId,\n\t\trevision: currentRevision,\n\t\tsource: currentSource,\n\t});\n}\n\nconst COMPACTION_ENVELOPE_KEYS = [\n\t\"schemaVersion\",\n\t\"transactionId\",\n\t\"baseRevision\",\n\t\"source\",\n\t\"createdAt\",\n\t\"model\",\n\t\"summary\",\n\t\"summarySha256\",\n\t\"preserved\",\n] as const;\n\n/** Parse and deep-freeze a persisted schema-v2 compaction envelope. */\nexport function validateCompactionEnvelope(input: unknown): CompactionEnvelope {\n\tif (!isRecord(input)) throw new TypeError(\"compaction envelope must be an object\");\n\tassertOnlyKeys(input, COMPACTION_ENVELOPE_KEYS, \"compaction envelope\");\n\tif (input.schemaVersion !== COMPACTION_ENVELOPE_SCHEMA_VERSION) {\n\t\tthrow new TypeError(\"unsupported compaction envelope schema version\");\n\t}\n\tassertMetadataText(input.transactionId, \"transactionId\");\n\tassertCanonicalTimestamp(input.createdAt);\n\tassertContentText(input.summary, \"summary\", MAX_SUMMARY_LENGTH);\n\tassertSha256(input.summarySha256, \"summarySha256\");\n\tconst baseRevision = createSessionRevisionToken(input.baseRevision);\n\tconst source = createCompactionSourceIdentity(input.source);\n\tif (baseRevision.sessionId !== source.sessionId || baseRevision.leafId !== source.activeLeafId) {\n\t\tthrow new TypeError(\"envelope revision and source must identify the same session and active leaf\");\n\t}\n\treturn Object.freeze({\n\t\tschemaVersion: COMPACTION_ENVELOPE_SCHEMA_VERSION,\n\t\ttransactionId: input.transactionId,\n\t\tbaseRevision,\n\t\tsource,\n\t\tcreatedAt: input.createdAt,\n\t\tmodel: copyModelIdentity(input.model),\n\t\tsummary: input.summary,\n\t\tsummarySha256: input.summarySha256,\n\t\tpreserved: copyPreservedProvenance(input.preserved),\n\t});\n}\n\n/** Create provenance-bearing summary data only from an exact commit authorization. */\nexport function createCompactionEnvelope(input: CreateCompactionEnvelopeInput): CompactionEnvelope {\n\tif (!isRecord(input)) throw new TypeError(\"compaction envelope input must be an object\");\n\tassertOnlyKeys(input, [\"transaction\", \"decision\", \"summary\", \"summarySha256\"], \"compaction envelope input\");\n\tassertContentText(input.summary, \"summary\", MAX_SUMMARY_LENGTH);\n\tassertSha256(input.summarySha256, \"summarySha256\");\n\tif (input.decision.decision !== \"commit\" || input.decision.reason !== \"exact_match\") {\n\t\tthrow new TypeError(\"a commit decision is required to create a compaction envelope\");\n\t}\n\tconst transaction = createCompactionTransaction(input.transaction);\n\tconst decisionRevision = createSessionRevisionToken(input.decision.revision);\n\tconst decisionSource = createCompactionSourceIdentity(input.decision.source);\n\tif (\n\t\tinput.decision.transactionId !== transaction.transactionId ||\n\t\t!sameRevision(transaction.baseRevision, decisionRevision) ||\n\t\t!sameSource(transaction.source, decisionSource)\n\t) {\n\t\tthrow new TypeError(\"commit decision does not match the compaction transaction\");\n\t}\n\n\treturn validateCompactionEnvelope({\n\t\tschemaVersion: COMPACTION_ENVELOPE_SCHEMA_VERSION,\n\t\ttransactionId: transaction.transactionId,\n\t\tbaseRevision: transaction.baseRevision,\n\t\tsource: transaction.source,\n\t\tcreatedAt: transaction.createdAt,\n\t\tmodel: transaction.model,\n\t\tsummary: input.summary,\n\t\tsummarySha256: input.summarySha256,\n\t\tpreserved: transaction.preserved,\n\t});\n}\n"]}
+{"version":3,"file":"transaction.d.ts","sourceRoot":"","sources":["../../../src/core/compaction/transaction.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAGX,sBAAsB,EACtB,MAAM,yBAAyB,CAAC;AAEjC,eAAO,MAAM,qCAAqC,GAAa,CAAC;AAChE,eAAO,MAAM,qCAAqC,GAAa,CAAC;AAChE,eAAO,MAAM,kCAAkC,GAAa,CAAC;AAuB7D,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMnE;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,aAAa,EAAE,OAAO,qCAAqC,CAAC;IACrE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC;CAC5C;AAED,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,qCAAqC,CAAC;IACtE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC;CAC5C;AAED,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IACnD,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC9D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kCAAkC;IAClD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IACnD,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC9D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,aAAa,EAAE,OAAO,qCAAqC,CAAC;IACrE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,6BAA6B,CAAC;CAClD;AAED,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,qCAAqC,CAAC;IACtE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,yBAAyB,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,kCAAkC,CAAC;CACvD;AAED,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,OAAO,GAAG,aAAa,CAAC;AACxE,MAAM,MAAM,uBAAuB,GAChC,sBAAsB,GACtB,oBAAoB,GACpB,6BAA6B,GAC7B,0BAA0B,GAC1B,+BAA+B,GAC/B,8BAA8B,GAC9B,6BAA6B,CAAC;AAEjC,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/C;AAED,MAAM,MAAM,wBAAwB,GACjC;IACA,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CACzC,GACD;IACA,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,GAAG,iBAAiB,CAAC;IACzD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAC9B,GACD;IACA,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAC9B,GACD;IACA,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;CAC/C,GACD;IACA,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,GAAG,qBAAqB,GAAG,sBAAsB,CAAC;IACxF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,uBAAuB,CAAC;CAChD,CAAC;AAEL,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,oBAAoB,CAAC;IAC/C,QAAQ,CAAC,aAAa,EAAE,wBAAwB,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,2BAA2B,EAAE,SAAS,MAAM,EAAE,CAAC;CACxD;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,aAAa,EAAE,OAAO,kCAAkC,CAAC;IAClE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,6BAA6B,CAAC;CAClD;AAED,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,4KAA4K;IAC5K,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAC/B;AAuOD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAkD/E;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,wBAAwB,CAkCvF;AAUD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,0BAA0B,GAAG,qBAAqB,CA4BpG;AA+QD,wFAAwF;AACxF,wBAAgB,yBAAyB,CACxC,MAAM,EAAE,sBAAsB,EAC9B,kBAAkB,EAAE,SAAS,MAAM,EAAE,GACnC,uBAAuB,CAgCzB;AAoED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,2BAA2B,GAAG,wBAAwB,CAmFnG;AAcD,uEAAuE;AACvE,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CA0B7E;AAED,sFAAsF;AACtF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,6BAA6B,GAAG,kBAAkB,CA8BjG","sourcesContent":["import type { TranscriptIntegrityIssue, TranscriptIntegrityReport } from \"omk-agent-core\";\nimport { inspectTranscriptIntegrity } from \"omk-agent-core\";\nimport type {\n\tSessionIntegrityFinding,\n\tSessionIntegrityReasonCode,\n\tSessionIntegrityReport,\n} from \"../session-integrity.ts\";\n\nexport const SESSION_REVISION_TOKEN_SCHEMA_VERSION = 1 as const;\nexport const COMPACTION_TRANSACTION_SCHEMA_VERSION = 1 as const;\nexport const COMPACTION_ENVELOPE_SCHEMA_VERSION = 2 as const;\n\nconst MAX_METADATA_LENGTH = 256;\nconst MAX_FILE_IDENTITY_LENGTH = 32;\nconst MAX_SOURCE_ENTRIES = 4096;\nconst MAX_PROVENANCE_IDS = 1024;\nconst MAX_LATEST_INTENT_LENGTH = 16_384;\nconst MAX_SUMMARY_LENGTH = 262_144;\nconst MAX_PROVENANCE_TEXT_LENGTH = 4096;\nconst MAX_NEXT_ACTION_LENGTH = 4096;\nconst MAX_MODEL_HISTORY_ENTRIES = 256;\nconst EMPTY_SHA256 = \"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855\";\nconst SHA256_PATTERN = /^[a-f0-9]{64}$/u;\nconst DECIMAL_STRING_PATTERN = /^[0-9]+$/u;\nconst CANONICAL_TIMESTAMP_PATTERN = /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/u;\nconst METADATA_CONTROL_PATTERN = /[\\u0000-\\u001f\\u007f]/u;\nconst CONTENT_CONTROL_PATTERN = /[\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f\\u007f]/u;\nconst CREDENTIAL_SHAPE_PATTERN =\n\t/-----BEGIN [A-Z ]*PRIVATE KEY-----|(?:^|[\\s\"'`:])bearer\\s+[A-Za-z0-9._~+/-]{8,}|(?:api[-_ ]?key|access[-_ ]?token|refresh[-_ ]?token|password|passwd|client[-_ ]?secret|secret[-_ ]?(?:key|token))\\s*[:=]\\s*[\"']?[^\\s\"',;]{3,}|(?<![A-Za-z0-9])(?:sk|ghp|gho|ghu|ghs|github_pat|xox[ebaprs])[-_][A-Za-z0-9_-]{8,}|(?<![A-Za-z0-9])AKIA[A-Z0-9]{16}(?![A-Z0-9])|(?<![A-Za-z0-9_-])eyJ[A-Za-z0-9_-]{10,}\\.[A-Za-z0-9_-]{10,}\\.[A-Za-z0-9_-]{10,}(?![A-Za-z0-9_-])|(?<![A-Za-z0-9_-])gAAAAA[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])|(?<![A-Za-z0-9])v2:[A-Za-z0-9_+/=-]{20,}/iu;\nconst REDACTED_ASSIGNMENT_PATTERN =\n\t/\\s*[:=]\\s*(?:\"\\[REDACTED\\]\"(?![A-Za-z0-9_+/-])|'\\[REDACTED\\]'(?![A-Za-z0-9_+/-])|\\[REDACTED\\](?![A-Za-z0-9._~+/-]))/giu;\nconst CREDENTIAL_SHAPE_MASK_PATTERN = new RegExp(CREDENTIAL_SHAPE_PATTERN.source, \"giu\");\n\nexport function containsCredentialShape(value: string): boolean {\n\treturn CREDENTIAL_SHAPE_PATTERN.test(value.replace(REDACTED_ASSIGNMENT_PATTERN, \"\"));\n}\n\n/**\n * Deterministically mask credential-shaped spans so sanitized text always\n * satisfies this module's fail-closed content validators. Producers (compaction\n * summaries, preserved provenance) must route generated text through this\n * before validation; otherwise a paranoid validator match would abort the\n * entire compaction and strand an overflowed session.\n */\nexport function redactCredentialShapedContent(value: string): string {\n\tlet result = value;\n\tfor (let pass = 0; pass < 8 && containsCredentialShape(result); pass += 1) {\n\t\tresult = result.replace(CREDENTIAL_SHAPE_MASK_PATTERN, \"[REDACTED]\");\n\t}\n\treturn containsCredentialShape(result) ? \"[REDACTED]\" : result;\n}\n\nexport interface SessionFileIdentity {\n\treadonly dev: string;\n\treadonly ino: string;\n}\n\nexport interface SessionRevisionToken {\n\treadonly schemaVersion: typeof SESSION_REVISION_TOKEN_SCHEMA_VERSION;\n\treadonly sessionId: string;\n\treadonly completeBytes: number;\n\treadonly recordCount: number;\n\treadonly leafId: string | null;\n\treadonly lastEntryId: string | null;\n\treadonly completePrefixSha256: string;\n\treadonly fileIdentity?: SessionFileIdentity;\n}\n\nexport interface SessionRevisionTokenInput {\n\treadonly schemaVersion?: typeof SESSION_REVISION_TOKEN_SCHEMA_VERSION;\n\treadonly sessionId: string;\n\treadonly completeBytes: number;\n\treadonly recordCount: number;\n\treadonly leafId: string | null;\n\treadonly lastEntryId: string | null;\n\treadonly completePrefixSha256: string;\n\treadonly fileIdentity?: SessionFileIdentity;\n}\n\nexport interface CompactionSourceIdentity {\n\treadonly sessionId: string;\n\treadonly entryIds: readonly string[];\n\treadonly firstEntryId: string;\n\treadonly lastEntryId: string;\n\treadonly sourceSha256: string;\n\treadonly activeLeafId: string;\n\treadonly messageCount: number;\n}\n\nexport interface CompactionSourceIdentityInput {\n\treadonly sessionId: string;\n\treadonly entryIds: readonly string[];\n\treadonly firstEntryId: string;\n\treadonly lastEntryId: string;\n\treadonly sourceSha256: string;\n\treadonly activeLeafId: string;\n\treadonly messageCount: number;\n}\n\nexport interface CompactionModelIdentity {\n\treadonly provider: string;\n\treadonly id: string;\n}\n\nexport interface CompactionModelHistoryEntry {\n\treadonly entryId: string;\n\treadonly provider: string;\n\treadonly modelId: string;\n}\n\nexport interface CompactionPreservedProvenance {\n\treadonly latestIntent: string;\n\treadonly openTasks: readonly string[];\n\treadonly laneIds: readonly string[];\n\treadonly acceptancePredicateIds: readonly string[];\n\treadonly evidenceReceiptIds: readonly string[];\n\treadonly blockerReasons: readonly string[];\n\treadonly repairEventIds: readonly string[];\n\treadonly branch: string | null;\n\treadonly worktree: string | null;\n\treadonly modelHistory: readonly CompactionModelHistoryEntry[];\n\treadonly nextAction: string;\n}\n\nexport interface CompactionPreservedProvenanceInput {\n\treadonly latestIntent: string;\n\treadonly openTasks: readonly string[];\n\treadonly laneIds: readonly string[];\n\treadonly acceptancePredicateIds: readonly string[];\n\treadonly evidenceReceiptIds: readonly string[];\n\treadonly blockerReasons: readonly string[];\n\treadonly repairEventIds: readonly string[];\n\treadonly branch: string | null;\n\treadonly worktree: string | null;\n\treadonly modelHistory: readonly CompactionModelHistoryEntry[];\n\treadonly nextAction: string;\n}\n\nexport interface CompactionTransaction {\n\treadonly schemaVersion: typeof COMPACTION_TRANSACTION_SCHEMA_VERSION;\n\treadonly transactionId: string;\n\treadonly baseRevision: SessionRevisionToken;\n\treadonly source: CompactionSourceIdentity;\n\treadonly createdAt: string;\n\treadonly model: CompactionModelIdentity;\n\treadonly preserved: CompactionPreservedProvenance;\n}\n\nexport interface CompactionTransactionInput {\n\treadonly schemaVersion?: typeof COMPACTION_TRANSACTION_SCHEMA_VERSION;\n\treadonly transactionId: string;\n\treadonly baseRevision: SessionRevisionTokenInput;\n\treadonly source: CompactionSourceIdentityInput;\n\treadonly createdAt: string;\n\treadonly model: CompactionModelIdentity;\n\treadonly preserved: CompactionPreservedProvenanceInput;\n}\n\nexport type CompactionBarrierStatus = \"ready\" | \"defer\" | \"fail_closed\";\nexport type CompactionBarrierReason =\n\t| \"closed_active_branch\"\n\t| \"pending_tool_calls\"\n\t| \"missing_active_tail_results\"\n\t| \"invalid_pending_tool_ids\"\n\t| \"inconsistent_integrity_report\"\n\t| \"structural_integrity_failure\"\n\t| \"unsafe_missing_tool_results\";\n\nexport interface CompactionBarrierResult {\n\treadonly status: CompactionBarrierStatus;\n\treadonly reason: CompactionBarrierReason;\n\treadonly pendingToolCallIds: readonly string[];\n\treadonly missingToolCallIds: readonly string[];\n}\n\nexport type CompactionCommitDecision =\n\t| {\n\t\t\treadonly decision: \"commit\";\n\t\t\treadonly reason: \"exact_match\";\n\t\t\treadonly transactionId: string;\n\t\t\treadonly revision: SessionRevisionToken;\n\t\t\treadonly source: CompactionSourceIdentity;\n\t  }\n\t| {\n\t\t\treadonly decision: \"stale\";\n\t\t\treadonly reason: \"revision_mismatch\" | \"source_mismatch\";\n\t\t\treadonly transactionId: string;\n\t  }\n\t| {\n\t\t\treadonly decision: \"duplicate\";\n\t\t\treadonly reason: \"source_already_committed\";\n\t\t\treadonly transactionId: string;\n\t  }\n\t| {\n\t\t\treadonly decision: \"defer\";\n\t\t\treadonly reason: \"barrier_defer\";\n\t\t\treadonly transactionId: string;\n\t\t\treadonly barrierReason: CompactionBarrierReason;\n\t  }\n\t| {\n\t\t\treadonly decision: \"fail_closed\";\n\t\t\treadonly reason: \"barrier_fail_closed\" | \"invalid_transaction\" | \"invalid_commit_input\";\n\t\t\treadonly transactionId?: string;\n\t\t\treadonly barrierReason?: CompactionBarrierReason;\n\t  };\n\nexport interface DecideCompactionCommitInput {\n\treadonly transaction: CompactionTransaction;\n\treadonly currentRevision: SessionRevisionToken;\n\treadonly currentSource: CompactionSourceIdentity;\n\treadonly barrier: CompactionBarrierResult;\n\treadonly priorCommittedSourceDigests: readonly string[];\n}\n\nexport interface CompactionEnvelope {\n\treadonly schemaVersion: typeof COMPACTION_ENVELOPE_SCHEMA_VERSION;\n\treadonly transactionId: string;\n\treadonly baseRevision: SessionRevisionToken;\n\treadonly source: CompactionSourceIdentity;\n\treadonly createdAt: string;\n\treadonly model: CompactionModelIdentity;\n\treadonly summary: string;\n\treadonly summarySha256: string;\n\treadonly preserved: CompactionPreservedProvenance;\n}\n\nexport interface CreateCompactionEnvelopeInput {\n\treadonly transaction: CompactionTransaction;\n\treadonly decision: CompactionCommitDecision;\n\treadonly summary: string;\n\t/** Caller-supplied lowercase 64-hex SHA-256 digest of `summary`. OMK does not compute or verify the digest here; the caller is responsible for computing and binding it. */\n\treadonly summarySha256: string;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction assertOnlyKeys(value: Record<string, unknown>, allowed: readonly string[], field: string): void {\n\tconst allowedKeys = new Set(allowed);\n\tif (Object.keys(value).some((key) => !allowedKeys.has(key))) {\n\t\tthrow new TypeError(`${field} contains unsupported metadata`);\n\t}\n}\n\nfunction assertSafeInteger(value: unknown, field: string): asserts value is number {\n\tif (!Number.isSafeInteger(value) || (value as number) < 0) {\n\t\tthrow new TypeError(`${field} must be a non-negative safe integer`);\n\t}\n}\n\nfunction assertMetadataText(value: unknown, field: string, maxLength = MAX_METADATA_LENGTH): asserts value is string {\n\tif (\n\t\ttypeof value !== \"string\" ||\n\t\tvalue.length === 0 ||\n\t\tvalue.length > maxLength ||\n\t\tMETADATA_CONTROL_PATTERN.test(value)\n\t) {\n\t\tthrow new TypeError(`${field} must be non-empty bounded metadata without control characters`);\n\t}\n\tif (containsCredentialShape(value)) {\n\t\tthrow new TypeError(`${field} must not contain credential-shaped metadata`);\n\t}\n}\n\nfunction assertContentText(value: unknown, field: string, maxLength: number): asserts value is string {\n\tif (\n\t\ttypeof value !== \"string\" ||\n\t\tvalue.length === 0 ||\n\t\tvalue.length > maxLength ||\n\t\tCONTENT_CONTROL_PATTERN.test(value)\n\t) {\n\t\tthrow new TypeError(`${field} must be non-empty bounded text without unsafe control characters`);\n\t}\n\tif (containsCredentialShape(value)) {\n\t\tthrow new TypeError(`${field} must not contain credential-shaped content`);\n\t}\n}\n\nfunction assertSha256(value: unknown, field: string): asserts value is string {\n\tif (typeof value !== \"string\" || !SHA256_PATTERN.test(value)) {\n\t\tthrow new TypeError(`${field} must be a lowercase 64-hex SHA-256 digest`);\n\t}\n}\n\nfunction assertCanonicalTimestamp(value: unknown): asserts value is string {\n\tassertMetadataText(value, \"createdAt\");\n\tif (!CANONICAL_TIMESTAMP_PATTERN.test(value)) {\n\t\tthrow new TypeError(\"createdAt must be a canonical UTC ISO-8601 timestamp\");\n\t}\n\tconst parsed = new Date(value);\n\tif (!Number.isFinite(parsed.valueOf()) || parsed.toISOString() !== value) {\n\t\tthrow new TypeError(\"createdAt must be a canonical UTC ISO-8601 timestamp\");\n\t}\n}\n\nfunction copyFileIdentity(value: unknown): SessionFileIdentity | undefined {\n\tif (value === undefined) return undefined;\n\tif (!isRecord(value)) throw new TypeError(\"fileIdentity must be an object\");\n\tassertOnlyKeys(value, [\"dev\", \"ino\"], \"fileIdentity\");\n\tfor (const field of [\"dev\", \"ino\"] as const) {\n\t\tconst part = value[field];\n\t\tif (\n\t\t\ttypeof part !== \"string\" ||\n\t\t\tpart.length === 0 ||\n\t\t\tpart.length > MAX_FILE_IDENTITY_LENGTH ||\n\t\t\t!DECIMAL_STRING_PATTERN.test(part)\n\t\t) {\n\t\t\tthrow new TypeError(`fileIdentity.${field} must be a bounded decimal string`);\n\t\t}\n\t}\n\treturn Object.freeze({ dev: value.dev as string, ino: value.ino as string });\n}\n\nfunction copyIdArray(value: unknown, field: string, maxItems: number): readonly string[] {\n\tif (!Array.isArray(value) || value.length > maxItems) {\n\t\tthrow new TypeError(`${field} must be a bounded array`);\n\t}\n\tconst copy = value.map((item, index) => {\n\t\tassertMetadataText(item, `${field}[${index}]`);\n\t\treturn item;\n\t});\n\tif (new Set(copy).size !== copy.length) throw new TypeError(`${field} must contain unique IDs`);\n\treturn Object.freeze(copy);\n}\n\nfunction assertProvenanceText(value: unknown, field: string, maxLength: number): asserts value is string {\n\tif (\n\t\ttypeof value !== \"string\" ||\n\t\tvalue.length === 0 ||\n\t\tvalue.length > maxLength ||\n\t\tCONTENT_CONTROL_PATTERN.test(value)\n\t) {\n\t\tthrow new TypeError(`${field} must be non-empty bounded text without unsafe control characters`);\n\t}\n\tif (containsCredentialShape(value)) {\n\t\tthrow new TypeError(`${field} must not contain credential-shaped content`);\n\t}\n}\n\nfunction assertNullableMetadataText(\n\tvalue: unknown,\n\tfield: string,\n\tmaxLength = MAX_METADATA_LENGTH,\n): asserts value is string | null {\n\tif (value === null) return;\n\tassertMetadataText(value, field, maxLength);\n}\n\nfunction copyTextArray(\n\tvalue: unknown,\n\tfield: string,\n\tmaxItems: number,\n\tmaxLength: number,\n\trequireUnique: boolean,\n): readonly string[] {\n\tif (!Array.isArray(value) || value.length > maxItems) {\n\t\tthrow new TypeError(`${field} must be a bounded array`);\n\t}\n\tconst copy = value.map((item, index) => {\n\t\tassertProvenanceText(item, `${field}[${index}]`, maxLength);\n\t\treturn item;\n\t});\n\tif (requireUnique && new Set(copy).size !== copy.length) {\n\t\tthrow new TypeError(`${field} must contain unique entries`);\n\t}\n\treturn Object.freeze(copy);\n}\n\nfunction copyModelHistory(value: unknown): readonly CompactionModelHistoryEntry[] {\n\tif (!Array.isArray(value) || value.length > MAX_MODEL_HISTORY_ENTRIES) {\n\t\tthrow new TypeError(\"preserved.modelHistory must be a bounded array\");\n\t}\n\tconst seenEntryIds = new Set<string>();\n\tconst copy = value.map((item, index) => {\n\t\tif (!isRecord(item)) throw new TypeError(`preserved.modelHistory[${index}] must be an object`);\n\t\tassertOnlyKeys(item, [\"entryId\", \"provider\", \"modelId\"], `preserved.modelHistory[${index}]`);\n\t\tassertMetadataText(item.entryId, `preserved.modelHistory[${index}].entryId`);\n\t\tassertMetadataText(item.provider, `preserved.modelHistory[${index}].provider`);\n\t\tassertMetadataText(item.modelId, `preserved.modelHistory[${index}].modelId`);\n\t\tconst entryId = item.entryId as string;\n\t\tif (seenEntryIds.has(entryId)) throw new TypeError(\"preserved.modelHistory must contain unique entryId values\");\n\t\tseenEntryIds.add(entryId);\n\t\treturn Object.freeze({ entryId, provider: item.provider as string, modelId: item.modelId as string });\n\t});\n\treturn Object.freeze(copy);\n}\n\nfunction copyPreservedProvenance(input: unknown): CompactionPreservedProvenance {\n\tif (!isRecord(input)) throw new TypeError(\"preserved must be an object\");\n\tassertOnlyKeys(\n\t\tinput,\n\t\t[\n\t\t\t\"latestIntent\",\n\t\t\t\"openTasks\",\n\t\t\t\"laneIds\",\n\t\t\t\"acceptancePredicateIds\",\n\t\t\t\"evidenceReceiptIds\",\n\t\t\t\"blockerReasons\",\n\t\t\t\"repairEventIds\",\n\t\t\t\"branch\",\n\t\t\t\"worktree\",\n\t\t\t\"modelHistory\",\n\t\t\t\"nextAction\",\n\t\t],\n\t\t\"preserved\",\n\t);\n\tassertProvenanceText(input.latestIntent, \"preserved.latestIntent\", MAX_LATEST_INTENT_LENGTH);\n\tconst openTasks = copyTextArray(\n\t\tinput.openTasks,\n\t\t\"preserved.openTasks\",\n\t\tMAX_PROVENANCE_IDS,\n\t\tMAX_PROVENANCE_TEXT_LENGTH,\n\t\tfalse,\n\t);\n\tconst laneIds = copyTextArray(input.laneIds, \"preserved.laneIds\", MAX_PROVENANCE_IDS, MAX_METADATA_LENGTH, true);\n\tconst acceptancePredicateIds = copyTextArray(\n\t\tinput.acceptancePredicateIds,\n\t\t\"preserved.acceptancePredicateIds\",\n\t\tMAX_PROVENANCE_IDS,\n\t\tMAX_METADATA_LENGTH,\n\t\ttrue,\n\t);\n\tconst evidenceReceiptIds = copyTextArray(\n\t\tinput.evidenceReceiptIds,\n\t\t\"preserved.evidenceReceiptIds\",\n\t\tMAX_PROVENANCE_IDS,\n\t\tMAX_METADATA_LENGTH,\n\t\ttrue,\n\t);\n\tconst blockerReasons = copyTextArray(\n\t\tinput.blockerReasons,\n\t\t\"preserved.blockerReasons\",\n\t\tMAX_PROVENANCE_IDS,\n\t\tMAX_PROVENANCE_TEXT_LENGTH,\n\t\tfalse,\n\t);\n\tconst repairEventIds = copyTextArray(\n\t\tinput.repairEventIds,\n\t\t\"preserved.repairEventIds\",\n\t\tMAX_PROVENANCE_IDS,\n\t\tMAX_METADATA_LENGTH,\n\t\ttrue,\n\t);\n\tassertNullableMetadataText(input.branch, \"preserved.branch\", MAX_PROVENANCE_TEXT_LENGTH);\n\tassertNullableMetadataText(input.worktree, \"preserved.worktree\", MAX_PROVENANCE_TEXT_LENGTH);\n\tconst modelHistory = copyModelHistory(input.modelHistory);\n\tassertProvenanceText(input.nextAction, \"preserved.nextAction\", MAX_NEXT_ACTION_LENGTH);\n\treturn Object.freeze({\n\t\tlatestIntent: input.latestIntent,\n\t\topenTasks,\n\t\tlaneIds,\n\t\tacceptancePredicateIds,\n\t\tevidenceReceiptIds,\n\t\tblockerReasons,\n\t\trepairEventIds,\n\t\tbranch: input.branch,\n\t\tworktree: input.worktree,\n\t\tmodelHistory,\n\t\tnextAction: input.nextAction,\n\t});\n}\n\nexport function createSessionRevisionToken(input: unknown): SessionRevisionToken {\n\tif (!isRecord(input)) throw new TypeError(\"session revision token must be an object\");\n\tassertOnlyKeys(\n\t\tinput,\n\t\t[\n\t\t\t\"schemaVersion\",\n\t\t\t\"sessionId\",\n\t\t\t\"completeBytes\",\n\t\t\t\"recordCount\",\n\t\t\t\"leafId\",\n\t\t\t\"lastEntryId\",\n\t\t\t\"completePrefixSha256\",\n\t\t\t\"fileIdentity\",\n\t\t],\n\t\t\"session revision token\",\n\t);\n\tif (input.schemaVersion !== undefined && input.schemaVersion !== SESSION_REVISION_TOKEN_SCHEMA_VERSION) {\n\t\tthrow new TypeError(\"unsupported session revision token schema version\");\n\t}\n\tassertMetadataText(input.sessionId, \"sessionId\");\n\tassertSafeInteger(input.completeBytes, \"completeBytes\");\n\tassertSafeInteger(input.recordCount, \"recordCount\");\n\tif (input.leafId !== null) assertMetadataText(input.leafId, \"leafId\");\n\tif (input.lastEntryId !== null) assertMetadataText(input.lastEntryId, \"lastEntryId\");\n\tassertSha256(input.completePrefixSha256, \"completePrefixSha256\");\n\n\tif ((input.completeBytes === 0) !== (input.recordCount === 0)) {\n\t\tthrow new TypeError(\"completeBytes and recordCount must both be empty or both be non-empty\");\n\t}\n\tif (input.recordCount === 0 && (input.leafId !== null || input.lastEntryId !== null)) {\n\t\tthrow new TypeError(\"an empty revision cannot identify entries\");\n\t}\n\tif (input.leafId !== null && input.lastEntryId === null) {\n\t\tthrow new TypeError(\"leafId requires a lastEntryId\");\n\t}\n\tif (input.completeBytes === 0 && input.completePrefixSha256 !== EMPTY_SHA256) {\n\t\tthrow new TypeError(\"an empty revision must use the SHA-256 digest of empty bytes\");\n\t}\n\n\tconst fileIdentity = copyFileIdentity(input.fileIdentity);\n\treturn Object.freeze({\n\t\tschemaVersion: SESSION_REVISION_TOKEN_SCHEMA_VERSION,\n\t\tsessionId: input.sessionId,\n\t\tcompleteBytes: input.completeBytes,\n\t\trecordCount: input.recordCount,\n\t\tleafId: input.leafId,\n\t\tlastEntryId: input.lastEntryId,\n\t\tcompletePrefixSha256: input.completePrefixSha256,\n\t\t...(fileIdentity === undefined ? {} : { fileIdentity }),\n\t});\n}\n\nexport function createCompactionSourceIdentity(input: unknown): CompactionSourceIdentity {\n\tif (!isRecord(input)) throw new TypeError(\"compaction source identity must be an object\");\n\tassertOnlyKeys(\n\t\tinput,\n\t\t[\"sessionId\", \"entryIds\", \"firstEntryId\", \"lastEntryId\", \"sourceSha256\", \"activeLeafId\", \"messageCount\"],\n\t\t\"compaction source identity\",\n\t);\n\tassertMetadataText(input.sessionId, \"source.sessionId\");\n\tconst entryIds = copyIdArray(input.entryIds, \"source.entryIds\", MAX_SOURCE_ENTRIES);\n\tif (entryIds.length === 0) throw new TypeError(\"source.entryIds must be non-empty\");\n\tassertMetadataText(input.firstEntryId, \"source.firstEntryId\");\n\tassertMetadataText(input.lastEntryId, \"source.lastEntryId\");\n\tassertMetadataText(input.activeLeafId, \"source.activeLeafId\");\n\tassertSha256(input.sourceSha256, \"source.sourceSha256\");\n\tassertSafeInteger(input.messageCount, \"source.messageCount\");\n\tif (input.messageCount > entryIds.length) {\n\t\tthrow new TypeError(\"source.messageCount cannot exceed source.entryIds length\");\n\t}\n\tif (input.firstEntryId !== entryIds[0] || input.lastEntryId !== entryIds.at(-1)) {\n\t\tthrow new TypeError(\"source first/last IDs must match the ordered entry IDs\");\n\t}\n\t// R30 P2: active leaf must be the last entry in the source range\n\tif (input.activeLeafId !== input.lastEntryId) {\n\t\tthrow new TypeError(\"source.activeLeafId must match source.lastEntryId\");\n\t}\n\treturn Object.freeze({\n\t\tsessionId: input.sessionId,\n\t\tentryIds,\n\t\tfirstEntryId: input.firstEntryId,\n\t\tlastEntryId: input.lastEntryId,\n\t\tsourceSha256: input.sourceSha256,\n\t\tactiveLeafId: input.activeLeafId,\n\t\tmessageCount: input.messageCount,\n\t});\n}\n\nfunction copyModelIdentity(value: unknown): CompactionModelIdentity {\n\tif (!isRecord(value)) throw new TypeError(\"model must be an object\");\n\tassertOnlyKeys(value, [\"provider\", \"id\"], \"model\");\n\tassertMetadataText(value.provider, \"model.provider\");\n\tassertMetadataText(value.id, \"model.id\");\n\treturn Object.freeze({ provider: value.provider, id: value.id });\n}\n\nexport function createCompactionTransaction(input: CompactionTransactionInput): CompactionTransaction {\n\tif (!isRecord(input)) throw new TypeError(\"compaction transaction must be an object\");\n\tassertOnlyKeys(\n\t\tinput,\n\t\t[\"schemaVersion\", \"transactionId\", \"baseRevision\", \"source\", \"createdAt\", \"model\", \"preserved\"],\n\t\t\"compaction transaction\",\n\t);\n\tif (input.schemaVersion !== undefined && input.schemaVersion !== COMPACTION_TRANSACTION_SCHEMA_VERSION) {\n\t\tthrow new TypeError(\"unsupported compaction transaction schema version\");\n\t}\n\tassertMetadataText(input.transactionId, \"transactionId\");\n\tassertCanonicalTimestamp(input.createdAt);\n\tconst baseRevision = createSessionRevisionToken(input.baseRevision);\n\tconst source = createCompactionSourceIdentity(input.source);\n\tif (baseRevision.sessionId !== source.sessionId || baseRevision.leafId !== source.activeLeafId) {\n\t\tthrow new TypeError(\"transaction revision and source must identify the same session and active leaf\");\n\t}\n\tconst model = copyModelIdentity(input.model);\n\tconst preserved = copyPreservedProvenance(input.preserved);\n\treturn Object.freeze({\n\t\tschemaVersion: COMPACTION_TRANSACTION_SCHEMA_VERSION,\n\t\ttransactionId: input.transactionId,\n\t\tbaseRevision,\n\t\tsource,\n\t\tcreatedAt: input.createdAt,\n\t\tmodel,\n\t\tpreserved,\n\t});\n}\n\nconst KNOWN_FINDING_REASONS = new Set<SessionIntegrityReasonCode>([\n\t\"trailing_fragment\",\n\t\"invalid_utf8\",\n\t\"malformed_json\",\n\t\"missing_header\",\n\t\"invalid_header\",\n\t\"unsupported_header\",\n\t\"multiple_header\",\n\t\"late_header\",\n\t\"invalid_entry\",\n\t\"unsupported_entry\",\n\t\"duplicate_entry_id\",\n\t\"missing_parent\",\n\t\"self_cycle\",\n\t\"parent_cycle\",\n\t\"active_leaf_missing\",\n\t\"compaction_first_kept_not_ancestor\",\n\t\"active_branch_context_invalid\",\n\t\"transcript_missing_result\",\n\t\"transcript_duplicate_result\",\n\t\"transcript_orphan_result\",\n\t\"transcript_duplicate_call_id\",\n\t\"transcript_interleaved_non_result\",\n]);\nconst TRANSCRIPT_FINDING_REASONS = new Set<SessionIntegrityReasonCode>([\n\t\"transcript_missing_result\",\n\t\"transcript_duplicate_result\",\n\t\"transcript_orphan_result\",\n\t\"transcript_duplicate_call_id\",\n\t\"transcript_interleaved_non_result\",\n]);\nconst HEADER_FINDING_REASONS = new Set<SessionIntegrityReasonCode>([\n\t\"missing_header\",\n\t\"invalid_header\",\n\t\"unsupported_header\",\n\t\"multiple_header\",\n\t\"late_header\",\n]);\nconst TRANSCRIPT_ISSUE_KINDS = new Set<string>([\n\t\"missing_result\",\n\t\"duplicate_result\",\n\t\"orphan_result\",\n\t\"duplicate_call_id\",\n\t\"interleaved_non_result\",\n]);\n\nfunction messageToolCalls(message: SessionIntegrityReport[\"activeMessages\"][number]): readonly {\n\treadonly id: string;\n\treadonly name: string;\n}[] {\n\tif (message.role !== \"assistant\") return [];\n\treturn message.content.flatMap((block) => (block.type === \"toolCall\" ? [{ id: block.id, name: block.name }] : []));\n}\n\nfunction transcriptFindingReason(issue: TranscriptIntegrityIssue): SessionIntegrityReasonCode {\n\tswitch (issue.kind) {\n\t\tcase \"missing_result\":\n\t\t\treturn \"transcript_missing_result\";\n\t\tcase \"duplicate_result\":\n\t\t\treturn \"transcript_duplicate_result\";\n\t\tcase \"orphan_result\":\n\t\t\treturn \"transcript_orphan_result\";\n\t\tcase \"duplicate_call_id\":\n\t\t\treturn \"transcript_duplicate_call_id\";\n\t\tcase \"interleaved_non_result\":\n\t\t\treturn \"transcript_interleaved_non_result\";\n\t}\n}\n\nfunction issueIdentity(issue: {\n\treadonly kind: string;\n\treadonly toolCallId: string;\n\treadonly toolName?: string;\n}): string {\n\treturn JSON.stringify([issue.kind, issue.toolCallId, issue.toolName ?? null]);\n}\n\nfunction findingIdentity(finding: SessionIntegrityFinding): string {\n\treturn JSON.stringify([\n\t\tfinding.reason,\n\t\tfinding.line ?? null,\n\t\tfinding.entryId ?? null,\n\t\tfinding.parentId ?? null,\n\t\tfinding.cycleEntryIds ?? null,\n\t\tfinding.toolCallId ?? null,\n\t\tfinding.toolName ?? null,\n\t]);\n}\n\nfunction sameMultiset(left: readonly string[], right: readonly string[]): boolean {\n\tif (left.length !== right.length) return false;\n\tconst counts = new Map<string, number>();\n\tfor (const item of left) counts.set(item, (counts.get(item) ?? 0) + 1);\n\tfor (const item of right) {\n\t\tconst count = counts.get(item);\n\t\tif (count === undefined) return false;\n\t\tif (count === 1) counts.delete(item);\n\t\telse counts.set(item, count - 1);\n\t}\n\treturn counts.size === 0;\n}\n\nfunction validByteDigest(value: unknown, completePrefix: boolean): boolean {\n\tif (!isRecord(value)) return false;\n\tconst keys = completePrefix ? [\"byteCount\", \"sha256\", \"lineCount\"] : [\"byteCount\", \"sha256\"];\n\tif (Object.keys(value).some((key) => !keys.includes(key))) return false;\n\tif (!Number.isSafeInteger(value.byteCount) || (value.byteCount as number) < 0) return false;\n\tif (typeof value.sha256 !== \"string\" || !SHA256_PATTERN.test(value.sha256)) return false;\n\tif (!completePrefix) return true;\n\treturn Number.isSafeInteger(value.lineCount) && (value.lineCount as number) >= 0;\n}\n\nfunction validFinding(value: unknown): value is SessionIntegrityFinding {\n\tif (!isRecord(value) || typeof value.reason !== \"string\") return false;\n\tif (!KNOWN_FINDING_REASONS.has(value.reason as SessionIntegrityReasonCode)) return false;\n\tconst allowed = [\"reason\", \"line\", \"entryId\", \"parentId\", \"cycleEntryIds\", \"toolCallId\", \"toolName\"];\n\tif (Object.keys(value).some((key) => !allowed.includes(key))) return false;\n\tif (value.line !== undefined && (!Number.isSafeInteger(value.line) || (value.line as number) < 1)) return false;\n\tfor (const field of [\"entryId\", \"parentId\", \"toolCallId\", \"toolName\"] as const) {\n\t\tif (value[field] !== undefined && typeof value[field] !== \"string\") return false;\n\t}\n\treturn (\n\t\tvalue.cycleEntryIds === undefined ||\n\t\t(Array.isArray(value.cycleEntryIds) && value.cycleEntryIds.every((item) => typeof item === \"string\"))\n\t);\n}\n\nfunction validTranscriptIssue(value: unknown): value is TranscriptIntegrityIssue {\n\tif (!isRecord(value) || !TRANSCRIPT_ISSUE_KINDS.has(value.kind as string)) return false;\n\tif (typeof value.toolCallId !== \"string\" || value.toolCallId.length === 0) return false;\n\tif (value.toolName !== undefined && typeof value.toolName !== \"string\") return false;\n\treturn Object.keys(value).every((key) => [\"kind\", \"toolCallId\", \"toolName\"].includes(key));\n}\n\nfunction activeBranchIsConsistent(report: SessionIntegrityReport): boolean {\n\tif (!Array.isArray(report.entries) || !Array.isArray(report.activeBranch) || !Array.isArray(report.activeMessages)) {\n\t\treturn false;\n\t}\n\tconst entryIds = new Set<string>();\n\tfor (const entry of report.entries) {\n\t\tif (!isRecord(entry) || typeof entry.id !== \"string\" || entry.id.length === 0) return false;\n\t\tentryIds.add(entry.id);\n\t}\n\tif (report.activeLeafId === null) return report.activeBranch.length === 0;\n\tif (typeof report.activeLeafId !== \"string\" || report.activeBranch.length === 0) return false;\n\tconst branchIds = new Set<string>();\n\tfor (let index = 0; index < report.activeBranch.length; index++) {\n\t\tconst entry = report.activeBranch[index];\n\t\tif (!isRecord(entry) || typeof entry.id !== \"string\" || branchIds.has(entry.id) || !entryIds.has(entry.id)) {\n\t\t\treturn false;\n\t\t}\n\t\tbranchIds.add(entry.id);\n\t\tconst expectedParent = index === 0 ? null : report.activeBranch[index - 1]?.id;\n\t\tif (entry.parentId !== expectedParent) return false;\n\t}\n\treturn report.activeBranch.at(-1)?.id === report.activeLeafId;\n}\n\nfunction reportIsConsistent(report: SessionIntegrityReport): boolean {\n\tif (!isRecord(report)) return false;\n\tif (!validByteDigest(report.source, false) || !validByteDigest(report.completePrefix, true)) return false;\n\tif (report.trailingFragment !== null && !validByteDigest(report.trailingFragment, false)) return false;\n\tconst trailingBytes = report.trailingFragment?.byteCount ?? 0;\n\tif (report.source.byteCount !== report.completePrefix.byteCount + trailingBytes) return false;\n\tif (report.completePrefix.lineCount > report.completePrefix.byteCount) return false;\n\tif (report.completePrefix.byteCount === 0 && report.completePrefix.sha256 !== EMPTY_SHA256) return false;\n\tif (report.trailingFragment === null && report.source.sha256 !== report.completePrefix.sha256) return false;\n\tif (!Array.isArray(report.findings) || !report.findings.every(validFinding)) return false;\n\tif (typeof report.ok !== \"boolean\" || report.ok !== (report.findings.length === 0)) return false;\n\n\tconst trailingFindings = report.findings.filter((finding) => finding.reason === \"trailing_fragment\");\n\tif (\n\t\ttrailingFindings.length !== (report.trailingFragment === null ? 0 : 1) ||\n\t\ttrailingFindings.some((finding) => Object.keys(finding).length !== 1)\n\t) {\n\t\treturn false;\n\t}\n\tif (report.header === null) {\n\t\tif (!report.findings.some((finding) => HEADER_FINDING_REASONS.has(finding.reason))) return false;\n\t} else if (!isRecord(report.header) || typeof report.header.id !== \"string\" || report.header.id.length === 0) {\n\t\treturn false;\n\t}\n\tif (!activeBranchIsConsistent(report)) return false;\n\n\tconst transcriptFindings = report.findings.filter((finding) => TRANSCRIPT_FINDING_REASONS.has(finding.reason));\n\tif (report.transcript === null) {\n\t\t// R30 P1-2: null transcript can never produce ready.\n\t\t// A producer-consistent null transcript requires activeMessages to be empty\n\t\t// and a structural finding to explain why no transcript was produced.\n\t\tif (report.activeMessages.length > 0) return false;\n\t\tif (transcriptFindings.length !== 0) return false;\n\t\tconst hasStructuralFinding = report.findings.some(\n\t\t\t(finding) => finding.reason !== \"trailing_fragment\" && !TRANSCRIPT_FINDING_REASONS.has(finding.reason),\n\t\t);\n\t\treturn hasStructuralFinding;\n\t}\n\tif (!isRecord(report.transcript) || !Array.isArray(report.transcript.issues)) return false;\n\tif (!report.transcript.issues.every(validTranscriptIssue)) return false;\n\tif (report.transcript.ok !== (report.transcript.issues.length === 0)) return false;\n\tif (\n\t\treport.findings.some(\n\t\t\t(finding) => finding.reason !== \"trailing_fragment\" && !TRANSCRIPT_FINDING_REASONS.has(finding.reason),\n\t\t)\n\t) {\n\t\treturn false;\n\t}\n\n\tlet inspected: TranscriptIntegrityReport;\n\ttry {\n\t\tinspected = inspectTranscriptIntegrity(report.activeMessages);\n\t} catch {\n\t\treturn false;\n\t}\n\tif (\n\t\tinspected.ok !== report.transcript.ok ||\n\t\t!sameMultiset(inspected.issues.map(issueIdentity), report.transcript.issues.map(issueIdentity))\n\t) {\n\t\treturn false;\n\t}\n\treturn sameMultiset(\n\t\ttranscriptFindings.map(findingIdentity),\n\t\tinspected.issues.map((issue) =>\n\t\t\tJSON.stringify([\n\t\t\t\ttranscriptFindingReason(issue),\n\t\t\t\tnull,\n\t\t\t\tnull,\n\t\t\t\tnull,\n\t\t\t\tnull,\n\t\t\t\tissue.toolCallId,\n\t\t\t\tissue.toolName ?? null,\n\t\t\t]),\n\t\t),\n\t);\n}\n\nfunction missingCallsAreAtActiveTail(report: SessionIntegrityReport, missingIds: ReadonlySet<string>): boolean {\n\tlet lastAssistantIndex = -1;\n\tfor (let index = report.activeMessages.length - 1; index >= 0; index--) {\n\t\tif (report.activeMessages[index]?.role === \"assistant\") {\n\t\t\tlastAssistantIndex = index;\n\t\t\tbreak;\n\t\t}\n\t}\n\tif (lastAssistantIndex === -1) return false;\n\tconst assistant = report.activeMessages[lastAssistantIndex];\n\tif (!assistant || assistant.role !== \"assistant\") return false;\n\tconst tailCallIds = new Set(messageToolCalls(assistant).map((call) => call.id));\n\tif ([...missingIds].some((id) => !tailCallIds.has(id))) return false;\n\tfor (let index = lastAssistantIndex + 1; index < report.activeMessages.length; index++) {\n\t\tconst message = report.activeMessages[index];\n\t\tif (!message || message.role !== \"toolResult\" || !tailCallIds.has(message.toolCallId)) return false;\n\t}\n\treturn true;\n}\n\nfunction barrierResult(\n\tstatus: CompactionBarrierStatus,\n\treason: CompactionBarrierReason,\n\tpendingToolCallIds: readonly string[],\n\tmissingToolCallIds: readonly string[] = [],\n): CompactionBarrierResult {\n\treturn Object.freeze({\n\t\tstatus,\n\t\treason,\n\t\tpendingToolCallIds: Object.freeze([...pendingToolCallIds]),\n\t\tmissingToolCallIds: Object.freeze([...missingToolCallIds]),\n\t});\n}\n\n/** Derive a closed-turn compaction barrier without repairing or mutating the report. */\nexport function evaluateCompactionBarrier(\n\treport: SessionIntegrityReport,\n\tpendingToolCallIds: readonly string[],\n): CompactionBarrierResult {\n\tlet pending: readonly string[];\n\ttry {\n\t\tpending = copyIdArray(pendingToolCallIds, \"pendingToolCallIds\", MAX_PROVENANCE_IDS);\n\t} catch {\n\t\treturn barrierResult(\"fail_closed\", \"invalid_pending_tool_ids\", []);\n\t}\n\tif (!reportIsConsistent(report)) {\n\t\treturn barrierResult(\"fail_closed\", \"inconsistent_integrity_report\", pending);\n\t}\n\tconst blockingFinding = report.findings.find((finding) => finding.reason !== \"transcript_missing_result\");\n\tconst blockingIssue = report.transcript?.issues.find((issue) => issue.kind !== \"missing_result\");\n\tif (blockingFinding || blockingIssue) {\n\t\treturn barrierResult(\"fail_closed\", \"structural_integrity_failure\", pending);\n\t}\n\n\tconst missing = Object.freeze(\n\t\t(report.transcript?.issues ?? [])\n\t\t\t.filter((issue) => issue.kind === \"missing_result\")\n\t\t\t.map((issue) => issue.toolCallId),\n\t);\n\tconst missingSet = new Set(missing);\n\tconst pendingSet = new Set(pending);\n\tif (\n\t\tmissing.length > 0 &&\n\t\t(!missingCallsAreAtActiveTail(report, missingSet) || missing.some((toolCallId) => !pendingSet.has(toolCallId)))\n\t) {\n\t\treturn barrierResult(\"fail_closed\", \"unsafe_missing_tool_results\", pending, missing);\n\t}\n\tif (missing.length > 0) return barrierResult(\"defer\", \"missing_active_tail_results\", pending, missing);\n\tif (pending.length > 0) return barrierResult(\"defer\", \"pending_tool_calls\", pending);\n\treturn barrierResult(\"ready\", \"closed_active_branch\", []);\n}\n\nfunction sameRevision(left: SessionRevisionToken, right: SessionRevisionToken): boolean {\n\treturn (\n\t\tleft.schemaVersion === right.schemaVersion &&\n\t\tleft.sessionId === right.sessionId &&\n\t\tleft.completeBytes === right.completeBytes &&\n\t\tleft.recordCount === right.recordCount &&\n\t\tleft.leafId === right.leafId &&\n\t\tleft.lastEntryId === right.lastEntryId &&\n\t\tleft.completePrefixSha256 === right.completePrefixSha256 &&\n\t\tleft.fileIdentity?.dev === right.fileIdentity?.dev &&\n\t\tleft.fileIdentity?.ino === right.fileIdentity?.ino\n\t);\n}\n\nfunction sameSource(left: CompactionSourceIdentity, right: CompactionSourceIdentity): boolean {\n\treturn (\n\t\tleft.sessionId === right.sessionId &&\n\t\tleft.firstEntryId === right.firstEntryId &&\n\t\tleft.lastEntryId === right.lastEntryId &&\n\t\tleft.sourceSha256 === right.sourceSha256 &&\n\t\tleft.activeLeafId === right.activeLeafId &&\n\t\tleft.messageCount === right.messageCount &&\n\t\tleft.entryIds.length === right.entryIds.length &&\n\t\tleft.entryIds.every((id, index) => id === right.entryIds[index])\n\t);\n}\n\nfunction validBarrierResult(barrier: CompactionBarrierResult): boolean {\n\tif (!isRecord(barrier) || !Array.isArray(barrier.pendingToolCallIds) || !Array.isArray(barrier.missingToolCallIds)) {\n\t\treturn false;\n\t}\n\tconst pending = barrier.pendingToolCallIds;\n\tconst missing = barrier.missingToolCallIds;\n\t// R30 P1-3: validate all IDs are bounded, unique, safe metadata text\n\ttry {\n\t\tfor (const ids of [pending, missing]) {\n\t\t\tif (ids.length > MAX_PROVENANCE_IDS) return false;\n\t\t\tif (new Set(ids).size !== ids.length) return false;\n\t\t\tfor (const id of ids) assertMetadataText(id, \"barrier toolCallId\");\n\t\t}\n\t} catch {\n\t\treturn false;\n\t}\n\tswitch (barrier.status) {\n\t\tcase \"ready\":\n\t\t\treturn barrier.reason === \"closed_active_branch\" && pending.length === 0 && missing.length === 0;\n\t\tcase \"defer\":\n\t\t\tif (barrier.reason === \"pending_tool_calls\") {\n\t\t\t\treturn pending.length > 0 && missing.length === 0;\n\t\t\t}\n\t\t\tif (barrier.reason === \"missing_active_tail_results\") {\n\t\t\t\treturn missing.length > 0 && missing.every((id) => pending.includes(id));\n\t\t\t}\n\t\t\treturn false;\n\t\tcase \"fail_closed\":\n\t\t\treturn (\n\t\t\t\tbarrier.reason === \"invalid_pending_tool_ids\" ||\n\t\t\t\tbarrier.reason === \"inconsistent_integrity_report\" ||\n\t\t\t\tbarrier.reason === \"structural_integrity_failure\" ||\n\t\t\t\tbarrier.reason === \"unsafe_missing_tool_results\"\n\t\t\t);\n\t\tdefault:\n\t\t\treturn false;\n\t}\n}\n\n/**\n * Authorize an in-memory commit attempt. A \"commit\" decision is not evidence of\n * durable persistence; the integration layer must still perform its own atomic CAS write.\n */\nexport function decideCompactionCommit(input: DecideCompactionCommitInput): CompactionCommitDecision {\n\tlet transaction: CompactionTransaction;\n\ttry {\n\t\ttransaction = createCompactionTransaction(input.transaction);\n\t} catch {\n\t\treturn Object.freeze({ decision: \"fail_closed\", reason: \"invalid_transaction\" });\n\t}\n\tif (!validBarrierResult(input.barrier)) {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"fail_closed\",\n\t\t\treason: \"invalid_commit_input\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t});\n\t}\n\tif (input.barrier.status === \"fail_closed\") {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"fail_closed\",\n\t\t\treason: \"barrier_fail_closed\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t\tbarrierReason: input.barrier.reason,\n\t\t});\n\t}\n\tif (input.barrier.status === \"defer\") {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"defer\",\n\t\t\treason: \"barrier_defer\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t\tbarrierReason: input.barrier.reason,\n\t\t});\n\t}\n\n\tlet currentRevision: SessionRevisionToken;\n\tlet currentSource: CompactionSourceIdentity;\n\tlet priorDigests: readonly string[];\n\ttry {\n\t\tcurrentRevision = createSessionRevisionToken(input.currentRevision);\n\t\tcurrentSource = createCompactionSourceIdentity(input.currentSource);\n\t\tif (\n\t\t\t!Array.isArray(input.priorCommittedSourceDigests) ||\n\t\t\tinput.priorCommittedSourceDigests.length > MAX_SOURCE_ENTRIES\n\t\t) {\n\t\t\tthrow new TypeError(\"priorCommittedSourceDigests must be a bounded array\");\n\t\t}\n\t\tpriorDigests = input.priorCommittedSourceDigests.map((digest, index) => {\n\t\t\tassertSha256(digest, `priorCommittedSourceDigests[${index}]`);\n\t\t\treturn digest;\n\t\t});\n\t} catch {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"fail_closed\",\n\t\t\treason: \"invalid_commit_input\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t});\n\t}\n\n\tif (priorDigests.includes(transaction.source.sourceSha256)) {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"duplicate\",\n\t\t\treason: \"source_already_committed\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t});\n\t}\n\tif (!sameRevision(transaction.baseRevision, currentRevision)) {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"stale\",\n\t\t\treason: \"revision_mismatch\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t});\n\t}\n\tif (!sameSource(transaction.source, currentSource)) {\n\t\treturn Object.freeze({\n\t\t\tdecision: \"stale\",\n\t\t\treason: \"source_mismatch\",\n\t\t\ttransactionId: transaction.transactionId,\n\t\t});\n\t}\n\treturn Object.freeze({\n\t\tdecision: \"commit\",\n\t\treason: \"exact_match\",\n\t\ttransactionId: transaction.transactionId,\n\t\trevision: currentRevision,\n\t\tsource: currentSource,\n\t});\n}\n\nconst COMPACTION_ENVELOPE_KEYS = [\n\t\"schemaVersion\",\n\t\"transactionId\",\n\t\"baseRevision\",\n\t\"source\",\n\t\"createdAt\",\n\t\"model\",\n\t\"summary\",\n\t\"summarySha256\",\n\t\"preserved\",\n] as const;\n\n/** Parse and deep-freeze a persisted schema-v2 compaction envelope. */\nexport function validateCompactionEnvelope(input: unknown): CompactionEnvelope {\n\tif (!isRecord(input)) throw new TypeError(\"compaction envelope must be an object\");\n\tassertOnlyKeys(input, COMPACTION_ENVELOPE_KEYS, \"compaction envelope\");\n\tif (input.schemaVersion !== COMPACTION_ENVELOPE_SCHEMA_VERSION) {\n\t\tthrow new TypeError(\"unsupported compaction envelope schema version\");\n\t}\n\tassertMetadataText(input.transactionId, \"transactionId\");\n\tassertCanonicalTimestamp(input.createdAt);\n\tassertContentText(input.summary, \"summary\", MAX_SUMMARY_LENGTH);\n\tassertSha256(input.summarySha256, \"summarySha256\");\n\tconst baseRevision = createSessionRevisionToken(input.baseRevision);\n\tconst source = createCompactionSourceIdentity(input.source);\n\tif (baseRevision.sessionId !== source.sessionId || baseRevision.leafId !== source.activeLeafId) {\n\t\tthrow new TypeError(\"envelope revision and source must identify the same session and active leaf\");\n\t}\n\treturn Object.freeze({\n\t\tschemaVersion: COMPACTION_ENVELOPE_SCHEMA_VERSION,\n\t\ttransactionId: input.transactionId,\n\t\tbaseRevision,\n\t\tsource,\n\t\tcreatedAt: input.createdAt,\n\t\tmodel: copyModelIdentity(input.model),\n\t\tsummary: input.summary,\n\t\tsummarySha256: input.summarySha256,\n\t\tpreserved: copyPreservedProvenance(input.preserved),\n\t});\n}\n\n/** Create provenance-bearing summary data only from an exact commit authorization. */\nexport function createCompactionEnvelope(input: CreateCompactionEnvelopeInput): CompactionEnvelope {\n\tif (!isRecord(input)) throw new TypeError(\"compaction envelope input must be an object\");\n\tassertOnlyKeys(input, [\"transaction\", \"decision\", \"summary\", \"summarySha256\"], \"compaction envelope input\");\n\tassertContentText(input.summary, \"summary\", MAX_SUMMARY_LENGTH);\n\tassertSha256(input.summarySha256, \"summarySha256\");\n\tif (input.decision.decision !== \"commit\" || input.decision.reason !== \"exact_match\") {\n\t\tthrow new TypeError(\"a commit decision is required to create a compaction envelope\");\n\t}\n\tconst transaction = createCompactionTransaction(input.transaction);\n\tconst decisionRevision = createSessionRevisionToken(input.decision.revision);\n\tconst decisionSource = createCompactionSourceIdentity(input.decision.source);\n\tif (\n\t\tinput.decision.transactionId !== transaction.transactionId ||\n\t\t!sameRevision(transaction.baseRevision, decisionRevision) ||\n\t\t!sameSource(transaction.source, decisionSource)\n\t) {\n\t\tthrow new TypeError(\"commit decision does not match the compaction transaction\");\n\t}\n\n\treturn validateCompactionEnvelope({\n\t\tschemaVersion: COMPACTION_ENVELOPE_SCHEMA_VERSION,\n\t\ttransactionId: transaction.transactionId,\n\t\tbaseRevision: transaction.baseRevision,\n\t\tsource: transaction.source,\n\t\tcreatedAt: transaction.createdAt,\n\t\tmodel: transaction.model,\n\t\tsummary: input.summary,\n\t\tsummarySha256: input.summarySha256,\n\t\tpreserved: transaction.preserved,\n\t});\n}\n"]}

package/dist/core/compaction/transaction.js

@@ -17,7 +17,7 @@ const DECIMAL_STRING_PATTERN = /^[0-9]+$/u;
 const CANONICAL_TIMESTAMP_PATTERN = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u;
 const METADATA_CONTROL_PATTERN = /[\u0000-\u001f\u007f]/u;
 const CONTENT_CONTROL_PATTERN = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/u;
-const CREDENTIAL_SHAPE_PATTERN = /-----BEGIN [A-Z ]*PRIVATE KEY-----|(?:^|[\s"'`:])bearer\s+[A-Za-z0-9._~+/-]{8,}|(?:api[-_ ]?key|access[-_ ]?token|refresh[-_ ]?token|password|passwd|client[-_ ]?secret|secret[-_ ]?(?:key|token))\s*[:=]\s*["']?[^\s"',;]{3,}|(?<![A-Za-z0-9])(?:sk|ghp|gho|ghu|ghs|github_pat|xox[baprs])[-_][A-Za-z0-9_-]{8,}|(?<![A-Za-z0-9])AKIA[A-Z0-9]{16}(?![A-Z0-9])|(?<![A-Za-z0-9_-])eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}(?![A-Za-z0-9_-])|(?<![A-Za-z0-9_-])gAAAAA[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])|(?<![A-Za-z0-9])v2:[A-Za-z0-9_+/=-]{20,}/iu;
+const CREDENTIAL_SHAPE_PATTERN = /-----BEGIN [A-Z ]*PRIVATE KEY-----|(?:^|[\s"'`:])bearer\s+[A-Za-z0-9._~+/-]{8,}|(?:api[-_ ]?key|access[-_ ]?token|refresh[-_ ]?token|password|passwd|client[-_ ]?secret|secret[-_ ]?(?:key|token))\s*[:=]\s*["']?[^\s"',;]{3,}|(?<![A-Za-z0-9])(?:sk|ghp|gho|ghu|ghs|github_pat|xox[ebaprs])[-_][A-Za-z0-9_-]{8,}|(?<![A-Za-z0-9])AKIA[A-Z0-9]{16}(?![A-Z0-9])|(?<![A-Za-z0-9_-])eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}(?![A-Za-z0-9_-])|(?<![A-Za-z0-9_-])gAAAAA[A-Za-z0-9_-]{20,}(?![A-Za-z0-9_-])|(?<![A-Za-z0-9])v2:[A-Za-z0-9_+/=-]{20,}/iu;
 const REDACTED_ASSIGNMENT_PATTERN = /\s*[:=]\s*(?:"\[REDACTED\]"(?![A-Za-z0-9_+/-])|'\[REDACTED\]'(?![A-Za-z0-9_+/-])|\[REDACTED\](?![A-Za-z0-9._~+/-]))/giu;
 const CREDENTIAL_SHAPE_MASK_PATTERN = new RegExp(CREDENTIAL_SHAPE_PATTERN.source, "giu");
 export function containsCredentialShape(value) {