pi-fabric 0.91.0 → 0.92.0

package/README.md

@@ -147,7 +147,7 @@ See the [interface & commands reference](docs/interface.md) for every view, keyb
 - [External providers](docs/providers.md): the versioned provider protocol for extensions.
 - [Architecture & security](docs/architecture.md): the host bridge, sandboxing, tool-call robustness, and limits.
 - [Catalog repairs](docs/repairs.md): unique extra keys and unknown actions promoted into silent schema maps.
-- [Tool entropy](docs/entropy.md): the deterministic entropy meter, on-demand session measurement, reduction proposals, the autonomous compile loop with its ratchet gate, and `certify:entropy`.
+- [Tool entropy](docs/entropy.md): static capability-preserving normal forms, deterministic invocation-friction metrics, bounded repair witnesses, and offline `certify:entropy` proof checks.
 - [Speculative PTC](docs/speculation.md): pre-launching literal read calls while the program streams, with epoch + freshness guarantees.
 - [Skills](docs/skills.md): the core-first invocation policy and user-invoked advanced patterns.
 

package/dist/audit/trace.d.ts

@@ -1,3 +1,4 @@
+import { type NormalFormWitness } from "../entropy/normal-form.js";
 export declare const FABRIC_EXECUTION_TRACE_KIND: "pi-fabric.execution";
 export declare const FABRIC_EXECUTION_TRACE_VERSION: 1;
 export declare const FABRIC_EXECUTION_TRACE_MAX_BYTES: number;
@@ -17,6 +18,7 @@ export interface FabricExecutionTraceOperationV1 {
         [key: string]: FabricTraceJsonValue;
     };
     outcome: FabricExecutionOutcomeV1;
+    normalization?: NormalFormWitness;
     failureStage?: FabricExecutionFailureStageV1;
     error?: string;
     result?: FabricTraceJsonValue;
@@ -61,6 +63,7 @@ interface MutableOperation {
         [key: string]: FabricTraceJsonValue;
     }>;
     outcome?: FabricExecutionOutcomeV1;
+    normalization?: NormalFormWitness;
     failureStage?: FabricExecutionFailureStageV1;
     error?: Sanitized<string>;
     result?: Sanitized<FabricTraceJsonValue>;
@@ -77,6 +80,7 @@ export declare class FabricExecutionTraceOperationHandle {
     constructor(recorder: FabricExecutionTraceRecorder, operation: MutableOperation | undefined);
     resolved(provider: string, action: string): void;
     prepared(args: Record<string, unknown>): void;
+    normalized(witness: NormalFormWitness): void;
     succeed(result: unknown, meta?: TraceResultMeta): void;
     fail(stage: FabricExecutionFailureStageV1, error: unknown, outcome?: FabricExecutionOutcomeV1, result?: unknown, meta?: TraceResultMeta): void;
 }

package/dist/audit/trace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"trace.d.ts","sourceRoot":"","sources":["../../src/audit/trace.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,2BAA2B,EAAG,qBAA8B,CAAC;AAC1E,eAAO,MAAM,8BAA8B,EAAG,CAAU,CAAC;AACzD,eAAO,MAAM,gCAAgC,QAAa,CAAC;AAc3D,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AACxE,MAAM,MAAM,oBAAoB,GAC5B,wBAAwB,GACxB,oBAAoB,EAAE,GACtB;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAAA;CAAE,CAAC;AAE5C,MAAM,MAAM,wBAAwB,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;AACxF,MAAM,MAAM,6BAA6B,GACrC,SAAS,GACT,SAAS,GACT,UAAU,GACV,SAAS,GACT,QAAQ,GACR,OAAO,CAAC;AAEZ,MAAM,WAAW,+BAA+B;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAAA;KAAE,CAAC;IAC9C,OAAO,EAAE,wBAAwB,CAAC;IAClC,YAAY,CAAC,EAAE,6BAA6B,CAAC;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,OAAO,2BAA2B,CAAC;IACzC,OAAO,EAAE,OAAO,8BAA8B,CAAC;IAC/C,OAAO,EAAE,wBAAwB,CAAC;IAClC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,+BAA+B,EAAE,CAAC;IAC9C,MAAM,EAAE,4BAA4B,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,aAAa;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,UAAU,eAAe;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,UAAU,SAAS,CAAC,CAAC,SAAS,oBAAoB;IAChD,KAAK,EAAE,CAAC,CAAC;IACT,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,UAAU,gBAAgB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,IAAI,EAAE,SAAS,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAAA;KAAE,CAAC,CAAC;IACzD,OAAO,CAAC,EAAE,wBAAwB,CAAC;IACnC,YAAY,CAAC,EAAE,6BAA6B,CAAC;IAC7C,KAAK,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,CAAC,EAAE,SAAS,CAAC,oBAAoB,CAAC,CAAC;IACzC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AA2QD,qBAAa,oBAAqB,SAAQ,KAAK;CAAG;AAGlD,qBAAa,qBAAsB,SAAQ,oBAAoB;CAAG;AA0BlE,qBAAa,mCAAmC;IAE5C,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBADT,QAAQ,EAAE,4BAA4B,EACtC,SAAS,EAAE,gBAAgB,GAAG,SAAS;IAG1D,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAYhD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAK7C,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,IAAI;IAatD,IAAI,CACF,KAAK,EAAE,6BAA6B,EACpC,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,wBAAmC,EAC5C,MAAM,CAAC,EAAE,OAAO,EAChB,IAAI,CAAC,EAAE,eAAe,GACrB,IAAI;CAwBR;AAED,qBAAa,4BAA4B;;IAKvC,MAAM,UAAS;IAEf,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,SAAuB,GAAG,MAAM;IAM1E,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,mCAAmC;IAyB1F,IAAI,CACF,OAAO,EAAE,wBAAwB,EACjC,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,SAAS,CAAC,EAAE,MAAM,GACjB,sBAAsB;CA0I1B;AAED,eAAO,MAAM,yBAAyB,GACpC,OAAO,OAAO,EACd,SAAS,WAAW,KACnB,wBAGF,CAAC;AAuCF,eAAO,MAAM,iCAAiC,GAC5C,OAAO,OAAO,KACb,KAAK,IAAI,+BAMX,CAAC;AAmBF,eAAO,MAAM,wBAAwB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,sBAMlE,CAAC;AAEF,eAAO,MAAM,0BAA0B,GAAI,OAAO,OAAO,KAAG,sBAAsB,GAAG,SAChC,CAAC"}
+{"version":3,"file":"trace.d.ts","sourceRoot":"","sources":["../../src/audit/trace.ts"],"names":[],"mappings":"AACA,OAAO,EAAuB,KAAK,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAGxF,eAAO,MAAM,2BAA2B,EAAG,qBAA8B,CAAC;AAC1E,eAAO,MAAM,8BAA8B,EAAG,CAAU,CAAC;AACzD,eAAO,MAAM,gCAAgC,QAAa,CAAC;AAc3D,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AACxE,MAAM,MAAM,oBAAoB,GAC5B,wBAAwB,GACxB,oBAAoB,EAAE,GACtB;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAAA;CAAE,CAAC;AAE5C,MAAM,MAAM,wBAAwB,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;AACxF,MAAM,MAAM,6BAA6B,GACrC,SAAS,GACT,SAAS,GACT,UAAU,GACV,SAAS,GACT,QAAQ,GACR,OAAO,CAAC;AAEZ,MAAM,WAAW,+BAA+B;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAAA;KAAE,CAAC;IAC9C,OAAO,EAAE,wBAAwB,CAAC;IAClC,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,YAAY,CAAC,EAAE,6BAA6B,CAAC;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,OAAO,2BAA2B,CAAC;IACzC,OAAO,EAAE,OAAO,8BAA8B,CAAC;IAC/C,OAAO,EAAE,wBAAwB,CAAC;IAClC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,+BAA+B,EAAE,CAAC;IAC9C,MAAM,EAAE,4BAA4B,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,aAAa;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,UAAU,eAAe;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,UAAU,SAAS,CAAC,CAAC,SAAS,oBAAoB;IAChD,KAAK,EAAE,CAAC,CAAC;IACT,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,UAAU,gBAAgB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,IAAI,EAAE,SAAS,CAAC;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAAA;KAAE,CAAC,CAAC;IACzD,OAAO,CAAC,EAAE,wBAAwB,CAAC;IACnC,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,YAAY,CAAC,EAAE,6BAA6B,CAAC;IAC7C,KAAK,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,CAAC,EAAE,SAAS,CAAC,oBAAoB,CAAC,CAAC;IACzC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AA2QD,qBAAa,oBAAqB,SAAQ,KAAK;CAAG;AAGlD,qBAAa,qBAAsB,SAAQ,oBAAoB;CAAG;AA0BlE,qBAAa,mCAAmC;IAE5C,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBADT,QAAQ,EAAE,4BAA4B,EACtC,SAAS,EAAE,gBAAgB,GAAG,SAAS;IAG1D,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAYhD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAK7C,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI;IAK5C,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,IAAI;IAatD,IAAI,CACF,KAAK,EAAE,6BAA6B,EACpC,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,wBAAmC,EAC5C,MAAM,CAAC,EAAE,OAAO,EAChB,IAAI,CAAC,EAAE,eAAe,GACrB,IAAI;CAwBR;AAED,qBAAa,4BAA4B;;IAKvC,MAAM,UAAS;IAEf,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,SAAuB,GAAG,MAAM;IAM1E,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,mCAAmC;IAyB1F,IAAI,CACF,OAAO,EAAE,wBAAwB,EACjC,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,SAAS,CAAC,EAAE,MAAM,GACjB,sBAAsB;CA2I1B;AAED,eAAO,MAAM,yBAAyB,GACpC,OAAO,OAAO,EACd,SAAS,WAAW,KACnB,wBAGF,CAAC;AAwCF,eAAO,MAAM,iCAAiC,GAC5C,OAAO,OAAO,KACb,KAAK,IAAI,+BAMX,CAAC;AAmBF,eAAO,MAAM,wBAAwB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,sBAMlE,CAAC;AAEF,eAAO,MAAM,0BAA0B,GAAI,OAAO,OAAO,KAAG,sBAAsB,GAAG,SAChC,CAAC"}

package/dist/chunks/chunk-3YZUQESG.js

@@ -0,0 +1,16 @@
+// src/core/stable-hash.ts
+import { createHash } from "node:crypto";
+var stableJsonValue = (value) => {
+  if (Array.isArray(value)) return value.map(stableJsonValue);
+  if (value instanceof URL) return value.href;
+  if (value === null || typeof value !== "object") return value;
+  return Object.fromEntries(
+    Object.entries(value).sort(([left], [right]) => left.localeCompare(right)).map(([key, nested]) => [key, stableJsonValue(nested)])
+  );
+};
+var stableJsonHash = (value) => createHash("sha256").update(JSON.stringify(stableJsonValue(value))).digest("hex");
+
+export {
+  stableJsonHash
+};
+//# sourceMappingURL=chunk-3YZUQESG.js.map

package/dist/chunks/{chunk-7363CD5A.js.map → chunk-3YZUQESG.js.map}

@@ -2,6 +2,6 @@
   "version": 3,
   "sources": ["../../src/core/stable-hash.ts"],
   "sourcesContent": ["import { createHash } from \"node:crypto\";\n\n// Deterministic JSON shaping for hashing: object keys sort recursively so\n// equivalent values hash identically regardless of key insertion order. URL\n// instances hash by href \u2014 they expose no enumerable own properties, so\n// untreated they would all collapse to \"{}\" (MCP server definitions carry\n// `URL` instances for HTTP transports).\nconst stableJsonValue = (value: unknown): unknown => {\n  if (Array.isArray(value)) return value.map(stableJsonValue);\n  if (value instanceof URL) return value.href;\n  if (value === null || typeof value !== \"object\") return value;\n  return Object.fromEntries(\n    Object.entries(value as Record<string, unknown>)\n      .sort(([left], [right]) => left.localeCompare(right))\n      .map(([key, nested]) => [key, stableJsonValue(nested)]),\n  );\n};\n\nexport const stableJsonHash = (value: unknown): string =>\n  createHash(\"sha256\").update(JSON.stringify(stableJsonValue(value))).digest(\"hex\");\nconst STABLE_HASH_ARRAY_CHUNK = 64;\n\n// Cooperative canonical hashing for large evidence arrays. Each element is\n// normalized by the same pure shaper as stableJsonHash; fixed 64-record chunks\n// keep extension hooks responsive without changing a byte of hash input.\nexport const stableJsonHashArrayAsync = async (\n  values: readonly unknown[],\n): Promise<string> => {\n  const hash = createHash(\"sha256\");\n  hash.update(\"[\");\n  let first = true;\n  let batch: string[] = [];\n  const flush = async (): Promise<void> => {\n    if (batch.length === 0) return;\n    hash.update(`${first ? \"\" : \",\"}${batch.join(\",\")}`);\n    first = false;\n    batch = [];\n    await new Promise((resolve) => setImmediate(resolve));\n  };\n  for (const value of values) {\n    // JSON.stringify renders undefined array entries as null.\n    batch.push(JSON.stringify(stableJsonValue(value)) ?? \"null\");\n    if (batch.length >= STABLE_HASH_ARRAY_CHUNK) await flush();\n  }\n  if (batch.length > 0) hash.update(`${first ? \"\" : \",\"}${batch.join(\",\")}`);\n  hash.update(\"]\");\n  return hash.digest(\"hex\");\n};\n"],
-  "mappings": ";AAAA,SAAS,kBAAkB;AAO3B,IAAM,kBAAkB,CAAC,UAA4B;AACnD,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,eAAe;AAC1D,MAAI,iBAAiB,IAAK,QAAO,MAAM;AACvC,MAAI,UAAU,QAAQ,OAAO,UAAU,SAAU,QAAO;AACxD,SAAO,OAAO;AAAA,IACZ,OAAO,QAAQ,KAAgC,EAC5C,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,MAAM,KAAK,cAAc,KAAK,CAAC,EACnD,IAAI,CAAC,CAAC,KAAK,MAAM,MAAM,CAAC,KAAK,gBAAgB,MAAM,CAAC,CAAC;AAAA,EAC1D;AACF;AAEO,IAAM,iBAAiB,CAAC,UAC7B,WAAW,QAAQ,EAAE,OAAO,KAAK,UAAU,gBAAgB,KAAK,CAAC,CAAC,EAAE,OAAO,KAAK;AAClF,IAAM,0BAA0B;AAKzB,IAAM,2BAA2B,OACtC,WACoB;AACpB,QAAM,OAAO,WAAW,QAAQ;AAChC,OAAK,OAAO,GAAG;AACf,MAAI,QAAQ;AACZ,MAAI,QAAkB,CAAC;AACvB,QAAM,QAAQ,YAA2B;AACvC,QAAI,MAAM,WAAW,EAAG;AACxB,SAAK,OAAO,GAAG,QAAQ,KAAK,GAAG,GAAG,MAAM,KAAK,GAAG,CAAC,EAAE;AACnD,YAAQ;AACR,YAAQ,CAAC;AACT,UAAM,IAAI,QAAQ,CAAC,YAAY,aAAa,OAAO,CAAC;AAAA,EACtD;AACA,aAAW,SAAS,QAAQ;AAE1B,UAAM,KAAK,KAAK,UAAU,gBAAgB,KAAK,CAAC,KAAK,MAAM;AAC3D,QAAI,MAAM,UAAU,wBAAyB,OAAM,MAAM;AAAA,EAC3D;AACA,MAAI,MAAM,SAAS,EAAG,MAAK,OAAO,GAAG,QAAQ,KAAK,GAAG,GAAG,MAAM,KAAK,GAAG,CAAC,EAAE;AACzE,OAAK,OAAO,GAAG;AACf,SAAO,KAAK,OAAO,KAAK;AAC1B;",
+  "mappings": ";AAAA,SAAS,kBAAkB;AAO3B,IAAM,kBAAkB,CAAC,UAA4B;AACnD,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,eAAe;AAC1D,MAAI,iBAAiB,IAAK,QAAO,MAAM;AACvC,MAAI,UAAU,QAAQ,OAAO,UAAU,SAAU,QAAO;AACxD,SAAO,OAAO;AAAA,IACZ,OAAO,QAAQ,KAAgC,EAC5C,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,MAAM,KAAK,cAAc,KAAK,CAAC,EACnD,IAAI,CAAC,CAAC,KAAK,MAAM,MAAM,CAAC,KAAK,gBAAgB,MAAM,CAAC,CAAC;AAAA,EAC1D;AACF;AAEO,IAAM,iBAAiB,CAAC,UAC7B,WAAW,QAAQ,EAAE,OAAO,KAAK,UAAU,gBAAgB,KAAK,CAAC,CAAC,EAAE,OAAO,KAAK;",
   "names": []
 }

package/dist/chunks/{chunk-H6FEQL2D.js → chunk-5MDFFHOO.js}

@@ -1,11 +1,206 @@
-import {
-  COMPILED_SURFACE_VERSION,
-  MAX_COMPILED_SURFACE_PROPOSALS
-} from "./chunk-FMLK3ZA7.js";
 import {
   writeJsonAtomic,
   writeJsonAtomicAsync
 } from "./chunk-KAD7UWT2.js";
+import {
+  MAX_NORMAL_FORM_PLANS,
+  isNormalFormPlan,
+  provesNormalFormPlan
+} from "./chunk-T3UYWHLT.js";
+import {
+  stableJsonHash
+} from "./chunk-3YZUQESG.js";
+
+// src/entropy/types.ts
+var ENTROPY_METRIC_VERSION = 3;
+var ENTROPY_WEIGHTS = {
+  shape: 1,
+  failureStage: 1,
+  churn: 4,
+  navigation: 4,
+  flow: 1,
+  lexicon: 2,
+  staticFreedom: 0.25
+};
+var ENTROPY_INVOCATION_STAGES = ["resolve", "prepare", "validate"];
+
+// src/entropy/compiled-surface.ts
+import { Value } from "typebox/value";
+var COMPILED_SURFACE_VERSION = 2;
+var MAX_COMPILED_SURFACE_PROPOSALS = 256;
+var emptyCompiledSurface = () => ({
+  version: COMPILED_SURFACE_VERSION,
+  metricVersion: ENTROPY_METRIC_VERSION,
+  actions: [],
+  quarantined: [],
+  normalizations: [],
+  applied: [],
+  gate: { passed: true, beforeScore: 0, afterScore: 0, reasons: [] },
+  evidenceDigest: stableJsonHash([])
+});
+var compiledSurfaceEffectChanged = (before, after) => stableJsonHash(before?.version === COMPILED_SURFACE_VERSION ? before.normalizations ?? [] : []) !== stableJsonHash(after.version === COMPILED_SURFACE_VERSION ? after.normalizations ?? [] : []);
+var isPlainRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var schemaDigest = (schema) => stableJsonHash(schema);
+var effectiveSchemaFor = (_ref, liveSchema, _file) => liveSchema;
+var applyCompiledSurface = (live, _file) => live;
+var quarantinedRefNames = (_file) => /* @__PURE__ */ new Set();
+var isQuarantinedRef = (_ref, _liveSchema, _file) => false;
+var mergeCompiledSurfaces = (local, incoming, live) => {
+  const schemas = new Map(live.actions.map((action) => [action.ref, action.inputSchema]));
+  const plans = /* @__PURE__ */ new Map();
+  let droppedNormalizations = 0;
+  for (const file of [local, incoming]) {
+    if (!file || file.version !== COMPILED_SURFACE_VERSION) continue;
+    for (const plan of file.normalizations ?? []) {
+      if (!provesNormalFormPlan(plan, schemas.get(plan.ref))) {
+        droppedNormalizations++;
+        continue;
+      }
+      if (plans.size >= MAX_NORMAL_FORM_PLANS || plans.has(plan.ref)) continue;
+      plans.set(plan.ref, plan);
+    }
+  }
+  const normalizations = [...plans.values()].sort((a, b) => a.ref < b.ref ? -1 : a.ref > b.ref ? 1 : 0);
+  return {
+    file: {
+      ...emptyCompiledSurface(),
+      normalizations,
+      applied: normalizations.slice(0, MAX_COMPILED_SURFACE_PROPOSALS).map((plan) => ({ kind: "normal-form", ref: plan.ref, detail: `${plan.rules.length} proven rules` })),
+      evidenceDigest: stableJsonHash(normalizations)
+    },
+    droppedOverlays: (local?.actions.length ?? 0) + incoming.actions.length,
+    droppedQuarantines: (local?.quarantined.length ?? 0) + incoming.quarantined.length,
+    droppedNormalizations
+  };
+};
+var replaySuccessfulCalls = (surface, before, traces, touchedRefs, auditCalls) => {
+  const schemaByRef = new Map(surface.actions.map((action) => [action.ref, action.inputSchema]));
+  const beforeByRef = new Map(before.actions.map((action) => [action.ref, action.inputSchema]));
+  const accepts = (schema, args) => {
+    try {
+      return isPlainRecord(schema) && Value.Check(schema, args);
+    } catch {
+      return false;
+    }
+  };
+  const violations = [];
+  const auditedRefs = /* @__PURE__ */ new Set();
+  if (auditCalls) {
+    const auditArgsByRef = /* @__PURE__ */ new Map();
+    for (const call of auditCalls) {
+      if (!touchedRefs.has(call.ref)) continue;
+      const bucket = auditArgsByRef.get(call.ref) ?? [];
+      bucket.push(call.args);
+      auditArgsByRef.set(call.ref, bucket);
+    }
+    for (const [ref, argsList] of auditArgsByRef) {
+      auditedRefs.add(ref);
+      const schema = schemaByRef.get(ref);
+      if (schema === void 0) {
+        violations.push({ ref, reason: "absent from the candidate surface" });
+        continue;
+      }
+      const declared = beforeByRef.get(ref);
+      for (const args of argsList) {
+        if (declared !== void 0 && !accepts(declared, args)) continue;
+        if (!accepts(schema, args)) {
+          violations.push({
+            ref,
+            reason: "recorded arguments no longer validate against the compiled schema"
+          });
+        }
+      }
+    }
+  }
+  for (const sourceTrace of traces) {
+    for (const operation of sourceTrace.operations) {
+      if (operation.outcome !== "succeeded") continue;
+      if (operation.ref.startsWith("fabric.")) continue;
+      if (!touchedRefs.has(operation.ref)) continue;
+      if (auditedRefs.has(operation.ref)) continue;
+      const schema = schemaByRef.get(operation.ref);
+      if (schema === void 0) {
+        violations.push({ ref: operation.ref, reason: "absent from the candidate surface" });
+        continue;
+      }
+      if (!accepts(schema, operation.args)) {
+        violations.push({
+          ref: operation.ref,
+          reason: "recorded arguments no longer validate against the compiled schema"
+        });
+      }
+    }
+  }
+  return violations;
+};
+var COOPERATIVE_REPLAY_CHUNK = 64;
+var replayYield = () => new Promise((resolve) => setImmediate(resolve));
+var replaySuccessfulCallsAsync = async (surface, before, traces, touchedRefs, auditCalls) => {
+  const schemaByRef = new Map(surface.actions.map((action) => [action.ref, action.inputSchema]));
+  const beforeByRef = new Map(before.actions.map((action) => [action.ref, action.inputSchema]));
+  const accepts = (schema, args) => {
+    try {
+      return isPlainRecord(schema) && Value.Check(schema, args);
+    } catch {
+      return false;
+    }
+  };
+  const violations = [];
+  const auditedRefs = /* @__PURE__ */ new Set();
+  let processed = 0;
+  await replayYield();
+  if (auditCalls) {
+    const auditArgsByRef = /* @__PURE__ */ new Map();
+    for (const call of auditCalls) {
+      if (touchedRefs.has(call.ref)) {
+        const bucket = auditArgsByRef.get(call.ref) ?? [];
+        bucket.push(call.args);
+        auditArgsByRef.set(call.ref, bucket);
+      }
+      processed += 1;
+      if (processed % COOPERATIVE_REPLAY_CHUNK === 0) await replayYield();
+    }
+    for (const [ref, argsList] of auditArgsByRef) {
+      auditedRefs.add(ref);
+      const schema = schemaByRef.get(ref);
+      if (schema === void 0) {
+        violations.push({ ref, reason: "absent from the candidate surface" });
+        continue;
+      }
+      const declared = beforeByRef.get(ref);
+      for (const args of argsList) {
+        if (declared === void 0 || accepts(declared, args)) {
+          if (!accepts(schema, args)) {
+            violations.push({
+              ref,
+              reason: "recorded arguments no longer validate against the compiled schema"
+            });
+          }
+        }
+        processed += 1;
+        if (processed % COOPERATIVE_REPLAY_CHUNK === 0) await replayYield();
+      }
+    }
+  }
+  for (const sourceTrace of traces) {
+    for (const operation of sourceTrace.operations) {
+      if (operation.outcome === "succeeded" && !operation.ref.startsWith("fabric.") && touchedRefs.has(operation.ref) && !auditedRefs.has(operation.ref)) {
+        const schema = schemaByRef.get(operation.ref);
+        if (schema === void 0) {
+          violations.push({ ref: operation.ref, reason: "absent from the candidate surface" });
+        } else if (!accepts(schema, operation.args)) {
+          violations.push({
+            ref: operation.ref,
+            reason: "recorded arguments no longer validate against the compiled schema"
+          });
+        }
+      }
+      processed += 1;
+      if (processed % COOPERATIVE_REPLAY_CHUNK === 0) await replayYield();
+    }
+  }
+  return violations;
+};
 
 // src/entropy/compiled-store.ts
 import fs2 from "node:fs";
@@ -277,7 +472,7 @@ var parseAppliedProposal = (value) => {
 };
 var parseGateRecord = (value) => {
   if (!isRecord(value) || typeof value.passed !== "boolean") return void 0;
-  if (typeof value.beforeScore !== "number" || typeof value.afterScore !== "number") {
+  if (typeof value.beforeScore !== "number" || typeof value.afterScore !== "number" || !Number.isFinite(value.beforeScore) || !Number.isFinite(value.afterScore)) {
     return void 0;
   }
   if (!Array.isArray(value.reasons) || !value.reasons.every((r) => typeof r === "string")) {
@@ -291,7 +486,11 @@ var parseGateRecord = (value) => {
   };
 };
 var parseCompiledSurfaceFile = (value) => {
-  if (!isRecord(value) || value.version !== COMPILED_SURFACE_VERSION) return void 0;
+  if (!isRecord(value) || value.version !== 1 && value.version !== COMPILED_SURFACE_VERSION) return void 0;
+  if (value.version === COMPILED_SURFACE_VERSION) {
+    if (!Array.isArray(value.normalizations) || value.normalizations.length > MAX_NORMAL_FORM_PLANS || !value.normalizations.every(isNormalFormPlan) || new Set(value.normalizations.map((plan) => plan.ref)).size !== value.normalizations.length) return void 0;
+    if (!Array.isArray(value.actions) || value.actions.length !== 0 || !Array.isArray(value.quarantined) || value.quarantined.length !== 0) return void 0;
+  }
   if (!Number.isSafeInteger(value.metricVersion) || value.metricVersion < 1) {
     return void 0;
   }
@@ -313,7 +512,8 @@ var parseCompiledSurfaceFile = (value) => {
     overlaySeen.add(parsed.ref);
   }
   return {
-    version: COMPILED_SURFACE_VERSION,
+    version: value.version,
+    ...value.version === COMPILED_SURFACE_VERSION ? { normalizations: value.normalizations } : {},
     metricVersion: value.metricVersion,
     actions: value.actions.map((entry) => parseOverlayEntry(entry)),
     quarantined: value.quarantined.map((entry) => parseQuarantineEntry(entry)),
@@ -415,6 +615,21 @@ var saveCompiledSurfaceAsync = async (agentDir, file) => withExclusiveFileLockAs
 );
 
 export {
+  ENTROPY_METRIC_VERSION,
+  ENTROPY_WEIGHTS,
+  ENTROPY_INVOCATION_STAGES,
+  COMPILED_SURFACE_VERSION,
+  MAX_COMPILED_SURFACE_PROPOSALS,
+  emptyCompiledSurface,
+  compiledSurfaceEffectChanged,
+  schemaDigest,
+  effectiveSchemaFor,
+  applyCompiledSurface,
+  quarantinedRefNames,
+  isQuarantinedRef,
+  mergeCompiledSurfaces,
+  replaySuccessfulCalls,
+  replaySuccessfulCallsAsync,
   withExclusiveFileLockAsync,
   withExclusiveFileLock,
   compiledSurfaceDirectory,
@@ -424,4 +639,4 @@ export {
   saveCompiledSurface,
   saveCompiledSurfaceAsync
 };
-//# sourceMappingURL=chunk-H6FEQL2D.js.map
+//# sourceMappingURL=chunk-5MDFFHOO.js.map

package/dist/chunks/chunk-5MDFFHOO.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/entropy/types.ts", "../../src/entropy/compiled-surface.ts", "../../src/entropy/compiled-store.ts", "../../src/core/file-lock.ts"],
+  "sourcesContent": ["// Deterministic tool-entropy measurement for the Fabric tool surface.\n//\n// The operational score is an invocation rejection fraction, not bits.\n// Shape, failure-stage, flow, churn, navigation, lexicon, and schema freedom\n// remain separate diagnostics from typed traces, repairs, and live schemas.\n// No model judges anything; identical inputs and metric version give the\n// same report. Derived metrics are rounded to six decimal places.\n\nexport const ENTROPY_METRIC_VERSION = 3 as const;\n\n// Legacy diagnostic weights retained for export compatibility. In v3 only\n// staticFreedom scales staticScore; none contribute to the operational score.\n// Changes to metric formulas require an ENTROPY_METRIC_VERSION bump.\nexport const ENTROPY_WEIGHTS = {\n  shape: 1,\n  failureStage: 1,\n  churn: 4,\n  navigation: 4,\n  flow: 1,\n  lexicon: 2,\n  staticFreedom: 0.25,\n} as const;\n\n// Failure stages that mean \"the surface rejected the call before it could\n// take effect\" \u2014 the offline residue class behind repair fingerprints.\nexport const ENTROPY_INVOCATION_STAGES: readonly string[] = [\"resolve\", \"prepare\", \"validate\"];\n\nexport type EntropyOutcome = \"succeeded\" | \"failed\" | \"aborted\" | \"timed_out\";\n\nexport interface EntropySurfaceAction {\n  ref: string;\n  inputSchema: unknown;\n}\n\nexport interface EntropySurfaceSnapshot {\n  version: 1;\n  actions: EntropySurfaceAction[];\n}\n\nexport interface EntropyOperationInput {\n  ref: string;\n  args: Record<string, unknown>;\n  outcome: EntropyOutcome;\n  failureStage?: string;\n  normalization?: import(\"./normal-form.js\").NormalFormWitness;\n}\n\nexport interface EntropyTraceInput {\n  operations: EntropyOperationInput[];\n  taskKey?: string;\n  /** Producing model, stamped from the session scan as `provider/modelId`. */\n  model?: string;\n}\n\n// Normalized compatibility alias: `ref` is the canonical target the row\n// repairs toward.\nexport interface EntropyRepairRowInput {\n  kind: \"keyAlias\" | \"actionAlias\";\n  ref: string;\n  from: string;\n  to: string;\n}\n\n// One verbatim argument value observed in persisted audits: the value-level\n// corpus for enum-tighten. Trace V1 projects values away per ref; audits\n// carry every argument the call actually used. Pooled observations carry\n// `count` multiplicity instead of one entry per call.\nexport interface EntropyValueObservation {\n  ref: string;\n  key: string;\n  value: string | number | boolean;\n  /** Observation multiplicity; window scans emit one entry per call, pools emit one per distinct value. */\n  count?: number;\n}\n\n// One verbatim call per persisted audit: the authoritative record of the\n// arguments a call actually used. Trace V1 projects values away per ref, so\n// replay validation consults these, never the projected trace args.\nexport interface EntropyAuditCall {\n  ref: string;\n  args: Record<string, unknown>;\n}\n\nexport interface EntropyShapeSignature {\n  signature: string;\n  count: number;\n}\n\nexport interface EntropyRefReport {\n  ref: string;\n  calls: number;\n  succeeded: number;\n  failed: number;\n  shapeSignatures: EntropyShapeSignature[];\n  /** Shannon entropy of argument shapes, in bits. */\n  shapeEntropyBits: number;\n  /** Shannon entropy of failed-call stages, in bits. */\n  failureStageEntropyBits: number;\n  /** Mean normalized shape distance between a failure and the next same-ref call. */\n  churnRate: number;\n  /** Count of repair rows targeting this ref. */\n  lexiconRows: number;\n  /** Heuristic schema-freedom units; zero for an unknown schema. */\n  staticFreedom: number;\n  /** Invocation rejections / calls, a fraction in [0, 1]. */\n  score: number;\n}\n\nexport interface EntropyTotals {\n  traces: number;\n  operations: number;\n  actionOperations: number;\n  discoveryOperations: number;\n  workflowOperations: number;\n  succeeded: number;\n  failed: number;\n  aborted: number;\n  timedOut: number;\n  invocationRejections: number;\n  invocationRejectionsPer1k: number;\n}\n\n// Per-model behavioral attribution over stamped traces only.\nexport interface EntropyModelReport {\n  model: string;\n  operations: number;\n  actionOperations: number;\n  succeeded: number;\n  invocationRejections: number;\n  invocationRejectionsPer1k: number;\n  /** Invocation rejections / action operations for this model, in [0, 1]; zero if none. */\n  behavioralScore: number;\n}\n\nexport interface EntropyReport {\n  metricVersion: typeof ENTROPY_METRIC_VERSION;\n  catalogDigest: string;\n  totals: EntropyTotals;\n  /** Call-weighted mean per-ref shape entropy, in bits. */\n  shapeEntropyBits: number;\n  /** Failed-call-weighted mean per-ref failure-stage entropy, in bits. */\n  failureStageEntropyBits: number;\n  /** Mean normalized failure-to-next-same-ref shape distance within traces. */\n  churnRate: number;\n  /** Discovery operations / action operations; zero without action operations. */\n  navigationRatio: number;\n  /** Trace-weighted mean per-task action-sequence entropy, in bits. */\n  flowEntropyBits: number;\n  /** Total count of supplied repair rows. */\n  lexiconRows: number;\n  /** Sum of heuristic schema-freedom units over distinct called refs. */\n  staticFreedom: number;\n  /** 0.25 \u00D7 call-weighted mean schema freedom; unknown schemas contribute zero.\n   * Diagnostic only, zero without action calls; never added to score. */\n  staticScore: number;\n  /** Identical to score: invocation rejection fraction, not entropy bits. */\n  behavioralScore: number;\n  /** Failed resolve/prepare/validate calls / all action operations, in [0, 1].\n   * Zero without action operations. Discovery/workflow operations are excluded. */\n  score: number;\n  refs: EntropyRefReport[];\n  /** Behavioral attribution per producing model; empty when no trace carries one. */\n  byModel: EntropyModelReport[];\n}\n\nexport type EntropyProposal =\n  | {\n      kind: \"normal-form\";\n      ref: string;\n      baseSchemaDigest: string;\n      rules: import(\"./normal-form.js\").NormalFormRule[];\n    }\n  | {\n      kind: \"enum-tighten\";\n      ref: string;\n      key: string;\n      values: (string | number | boolean)[];\n      calls: number;\n      distinct: number;\n      topShare: number;\n    }\n  | {\n      kind: \"declare-enum\";\n      ref: string;\n      key: string;\n      values: (string | number | boolean)[];\n      calls: number;\n      distinct: number;\n      topShare: number;\n    }\n  | {\n      kind: \"overload-split\";\n      ref: string;\n      shapeEntropyBits: number;\n      clusters: { keys: string[]; calls: number }[];\n    }\n  | {\n      kind: \"sequence-fuse\";\n      sequence: string[];\n      occurrences: number;\n    }\n  | {\n      kind: \"noise-quarantine\";\n      ref: string;\n      calls: number;\n      succeeded: number;\n      failed: number;\n      failureStageEntropyBits: number;\n    };\n\nexport interface EntropyGateResult {\n  passed: boolean;\n  beforeScore: number;\n  afterScore: number;\n  delta: number;\n  reasons: string[];\n}\n\n// Trend of a score sequence, oldest to newest: the ratchet's line. A\n// negative slopePerStep means the surface is compiling down.\nexport interface EntropyTrend {\n  count: number;\n  first?: number;\n  last?: number;\n  slopePerStep: number;\n}\n", "// Version 2 compiles compatibility normal forms, never schema restrictions.\n// Version 1 restriction artifacts remain readable for migration but are inert.\nimport { Value } from \"typebox/value\";\nimport { stableJsonHash } from \"../core/stable-hash.js\";\nimport { ENTROPY_METRIC_VERSION } from \"./types.js\";\nimport { MAX_NORMAL_FORM_PLANS, provesNormalFormPlan, type NormalFormPlan } from \"./normal-form.js\";\nimport type { EntropyAuditCall, EntropyProposal, EntropySurfaceSnapshot, EntropyTraceInput } from \"./types.js\";\n\nexport const COMPILED_SURFACE_VERSION = 2 as const;\nexport const MAX_COMPILED_SURFACE_PROPOSALS = 256;\nexport interface CompiledSurfaceOverlayEntry {\n  ref: string;\n  inputSchema: Record<string, unknown>;\n  baseSchemaDigest: string;\n}\nexport interface CompiledSurfaceQuarantineEntry { ref: string; baseSchemaDigest: string }\nexport interface CompiledSurfaceAppliedProposal { kind: EntropyProposal[\"kind\"]; ref: string; detail: string }\nexport interface CompiledSurfaceGateRecord { passed: boolean; beforeScore: number; afterScore: number; reasons: string[] }\nexport interface CompiledSurfaceFile {\n  version: 1 | typeof COMPILED_SURFACE_VERSION;\n  metricVersion: number;\n  /** Legacy restrictions are retained only when reading version 1. Never enforced. */\n  actions: CompiledSurfaceOverlayEntry[];\n  quarantined: CompiledSurfaceQuarantineEntry[];\n  normalizations?: NormalFormPlan[];\n  applied: CompiledSurfaceAppliedProposal[];\n  gate: CompiledSurfaceGateRecord;\n  evidenceDigest: string;\n}\n\nexport const emptyCompiledSurface = (): CompiledSurfaceFile => ({\n  version: COMPILED_SURFACE_VERSION, metricVersion: ENTROPY_METRIC_VERSION,\n  actions: [], quarantined: [], normalizations: [], applied: [],\n  gate: { passed: true, beforeScore: 0, afterScore: 0, reasons: [] },\n  evidenceDigest: stableJsonHash([]),\n});\nexport const compiledSurfaceEffectChanged = (before: CompiledSurfaceFile | undefined, after: CompiledSurfaceFile): boolean =>\n  stableJsonHash(before?.version === COMPILED_SURFACE_VERSION ? before.normalizations ?? [] : []) !==\n  stableJsonHash(after.version === COMPILED_SURFACE_VERSION ? after.normalizations ?? [] : []);\nconst isPlainRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\nexport const schemaDigest = (schema: unknown): string => stableJsonHash(schema);\n\n// These compatibility APIs deliberately preserve the entire declaration.\n// Neither a legacy artifact nor an imported schema may remove capabilities.\nexport const effectiveSchemaFor = (_ref: string, liveSchema: unknown, _file?: CompiledSurfaceFile): unknown => liveSchema;\nexport const applyCompiledSurface = (live: EntropySurfaceSnapshot, _file?: CompiledSurfaceFile): EntropySurfaceSnapshot => live;\nexport const quarantinedRefNames = (_file?: CompiledSurfaceFile): ReadonlySet<string> => new Set();\nexport const isQuarantinedRef = (_ref: string, _liveSchema: unknown, _file?: CompiledSurfaceFile): boolean => false;\n\nexport interface MergedCompiledSurface {\n  file: CompiledSurfaceFile;\n  droppedOverlays: number;\n  droppedQuarantines: number;\n  droppedNormalizations: number;\n}\n\n// Import proves the complete rule plan by re-derivation, not merely a base\n// digest. Forged rule kinds/targets, drift, and every legacy restriction drop.\nexport const mergeCompiledSurfaces = (\n  local: CompiledSurfaceFile | undefined,\n  incoming: CompiledSurfaceFile,\n  live: EntropySurfaceSnapshot,\n): MergedCompiledSurface => {\n  const schemas = new Map(live.actions.map((action) => [action.ref, action.inputSchema]));\n  const plans = new Map<string, NormalFormPlan>();\n  let droppedNormalizations = 0;\n  for (const file of [local, incoming]) {\n    if (!file || file.version !== COMPILED_SURFACE_VERSION) continue;\n    for (const plan of file.normalizations ?? []) {\n      if (!provesNormalFormPlan(plan, schemas.get(plan.ref))) { droppedNormalizations++; continue; }\n      if (plans.size >= MAX_NORMAL_FORM_PLANS || plans.has(plan.ref)) continue;\n      plans.set(plan.ref, plan);\n    }\n  }\n  const normalizations = [...plans.values()].sort((a, b) => a.ref < b.ref ? -1 : a.ref > b.ref ? 1 : 0);\n  return {\n    file: {\n      ...emptyCompiledSurface(), normalizations,\n      applied: normalizations.slice(0, MAX_COMPILED_SURFACE_PROPOSALS).map((plan) => ({ kind: \"normal-form\", ref: plan.ref, detail: `${plan.rules.length} proven rules` })),\n      evidenceDigest: stableJsonHash(normalizations),\n    },\n    droppedOverlays: (local?.actions.length ?? 0) + incoming.actions.length,\n    droppedQuarantines: (local?.quarantined.length ?? 0) + incoming.quarantined.length,\n    droppedNormalizations,\n  };\n};\n\nexport interface ReplayViolation {\n  ref: string;\n  reason: string;\n}\n\n// Replay preservation: every successful call to a ref the compile touched\n// must still parse against the candidate surface \u2014 resolution plus the same\n// TypeBox check the registry's validate stage uses. Untouched refs keep\n// their schema by identity, so replay stays scoped to the touched set.\n// When a touched ref has verbatim audit calls, they are the replay corpus:\n// trace V1 projects values away per ref, so validating the projected trace\n// args would phantom-reject calls that actually parsed. Audits the declared\n// surface already rejected are not protected \u2014 those calls never executed,\n// so no compile can invalidate them.\nexport const replaySuccessfulCalls = (\n  surface: EntropySurfaceSnapshot,\n  before: EntropySurfaceSnapshot,\n  traces: readonly EntropyTraceInput[],\n  touchedRefs: ReadonlySet<string>,\n  auditCalls?: readonly EntropyAuditCall[],\n): ReplayViolation[] => {\n  const schemaByRef = new Map(surface.actions.map((action) => [action.ref, action.inputSchema]));\n  const beforeByRef = new Map(before.actions.map((action) => [action.ref, action.inputSchema]));\n  const accepts = (schema: unknown, args: Record<string, unknown>): boolean => {\n    try {\n      return isPlainRecord(schema) && Value.Check(schema, args);\n    } catch {\n      return false;\n    }\n  };\n  const violations: ReplayViolation[] = [];\n  const auditedRefs = new Set<string>();\n  if (auditCalls) {\n    const auditArgsByRef = new Map<string, Record<string, unknown>[]>();\n    for (const call of auditCalls) {\n      if (!touchedRefs.has(call.ref)) continue;\n      const bucket = auditArgsByRef.get(call.ref) ?? [];\n      bucket.push(call.args);\n      auditArgsByRef.set(call.ref, bucket);\n    }\n    for (const [ref, argsList] of auditArgsByRef) {\n      auditedRefs.add(ref);\n      const schema = schemaByRef.get(ref);\n      if (schema === undefined) {\n        violations.push({ ref, reason: \"absent from the candidate surface\" });\n        continue;\n      }\n      const declared = beforeByRef.get(ref);\n      for (const args of argsList) {\n        if (declared !== undefined && !accepts(declared, args)) continue;\n        if (!accepts(schema, args)) {\n          violations.push({\n            ref,\n            reason: \"recorded arguments no longer validate against the compiled schema\",\n          });\n        }\n      }\n    }\n  }\n  for (const sourceTrace of traces) {\n    for (const operation of sourceTrace.operations) {\n      if (operation.outcome !== \"succeeded\") continue;\n      if (operation.ref.startsWith(\"fabric.\")) continue;\n      if (!touchedRefs.has(operation.ref)) continue;\n      if (auditedRefs.has(operation.ref)) continue;\n      const schema = schemaByRef.get(operation.ref);\n      if (schema === undefined) {\n        violations.push({ ref: operation.ref, reason: \"absent from the candidate surface\" });\n        continue;\n      }\n      if (!accepts(schema, operation.args)) {\n        violations.push({\n          ref: operation.ref,\n          reason: \"recorded arguments no longer validate against the compiled schema\",\n        });\n      }\n    }\n  }\n  return violations;\n};\n\nconst COOPERATIVE_REPLAY_CHUNK = 64;\n\nconst replayYield = (): Promise<void> =>\n  new Promise((resolve) => setImmediate(resolve));\n\n// Hook-safe replay gate. The ordering and validation rules match the pure\n// certification path exactly, with fixed operation chunks between TUI turns.\nexport const replaySuccessfulCallsAsync = async (\n  surface: EntropySurfaceSnapshot,\n  before: EntropySurfaceSnapshot,\n  traces: readonly EntropyTraceInput[],\n  touchedRefs: ReadonlySet<string>,\n  auditCalls?: readonly EntropyAuditCall[],\n): Promise<ReplayViolation[]> => {\n  const schemaByRef = new Map(surface.actions.map((action) => [action.ref, action.inputSchema]));\n  const beforeByRef = new Map(before.actions.map((action) => [action.ref, action.inputSchema]));\n  const accepts = (schema: unknown, args: Record<string, unknown>): boolean => {\n    try {\n      return isPlainRecord(schema) && Value.Check(schema, args);\n    } catch {\n      return false;\n    }\n  };\n  const violations: ReplayViolation[] = [];\n  const auditedRefs = new Set<string>();\n  let processed = 0;\n  await replayYield();\n  if (auditCalls) {\n    const auditArgsByRef = new Map<string, Record<string, unknown>[]>();\n    for (const call of auditCalls) {\n      if (touchedRefs.has(call.ref)) {\n        const bucket = auditArgsByRef.get(call.ref) ?? [];\n        bucket.push(call.args);\n        auditArgsByRef.set(call.ref, bucket);\n      }\n      processed += 1;\n      if (processed % COOPERATIVE_REPLAY_CHUNK === 0) await replayYield();\n    }\n    for (const [ref, argsList] of auditArgsByRef) {\n      auditedRefs.add(ref);\n      const schema = schemaByRef.get(ref);\n      if (schema === undefined) {\n        violations.push({ ref, reason: \"absent from the candidate surface\" });\n        continue;\n      }\n      const declared = beforeByRef.get(ref);\n      for (const args of argsList) {\n        if (declared === undefined || accepts(declared, args)) {\n          if (!accepts(schema, args)) {\n            violations.push({\n              ref,\n              reason: \"recorded arguments no longer validate against the compiled schema\",\n            });\n          }\n        }\n        processed += 1;\n        if (processed % COOPERATIVE_REPLAY_CHUNK === 0) await replayYield();\n      }\n    }\n  }\n  for (const sourceTrace of traces) {\n    for (const operation of sourceTrace.operations) {\n      if (\n        operation.outcome === \"succeeded\" &&\n        !operation.ref.startsWith(\"fabric.\") &&\n        touchedRefs.has(operation.ref) &&\n        !auditedRefs.has(operation.ref)\n      ) {\n        const schema = schemaByRef.get(operation.ref);\n        if (schema === undefined) {\n          violations.push({ ref: operation.ref, reason: \"absent from the candidate surface\" });\n        } else if (!accepts(schema, operation.args)) {\n          violations.push({\n            ref: operation.ref,\n            reason: \"recorded arguments no longer validate against the compiled schema\",\n          });\n        }\n      }\n      processed += 1;\n      if (processed % COOPERATIVE_REPLAY_CHUNK === 0) await replayYield();\n    }\n  }\n  return violations;\n};\n", "// Persistence for the compiled entropy surface: <agent dir>/fabric/entropy/\n// compiled.json, locked across Pi processes sharing the agent directory.\n// A damaged artifact surfaces as an error and blocks compiles from\n// overwriting it \u2014 the same discipline as the repair table. The artifact is\n// clock-free, so saving byte-identical content is a no-op.\n\nimport fs from \"node:fs\";\nimport { isNormalFormPlan, MAX_NORMAL_FORM_PLANS } from \"./normal-form.js\";\nimport path from \"node:path\";\nimport { writeJsonAtomic, writeJsonAtomicAsync } from \"../core/atomic-write.js\";\nimport { withExclusiveFileLock, withExclusiveFileLockAsync } from \"../core/file-lock.js\";\nimport {\n  COMPILED_SURFACE_VERSION,\n  MAX_COMPILED_SURFACE_PROPOSALS,\n  type CompiledSurfaceAppliedProposal,\n  type CompiledSurfaceFile,\n  type CompiledSurfaceGateRecord,\n  type CompiledSurfaceOverlayEntry,\n  type CompiledSurfaceQuarantineEntry,\n} from \"./compiled-surface.js\";\n\nconst COMPILED_LOCK_ATTEMPTS = 50;\nconst COMPILED_LOCK_DELAY_MS = 5;\nconst COMPILED_STALE_LOCK_MS = 30_000;\n\nexport const compiledSurfaceDirectory = (agentDir: string): string =>\n  path.join(agentDir, \"fabric\", \"entropy\");\n\nconst compiledPath = (directory: string): string => path.join(directory, \"compiled.json\");\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\nconst errorCode = (error: unknown): string | undefined =>\n  isRecord(error) && typeof error.code === \"string\" ? error.code : undefined;\n\nconst errorText = (error: unknown): string =>\n  (error instanceof Error ? error.message : String(error)).slice(0, 200);\n\nconst parseOverlayEntry = (value: unknown): CompiledSurfaceOverlayEntry | undefined => {\n  if (!isRecord(value) || typeof value.ref !== \"string\" || !value.ref.trim()) return undefined;\n  if (!isRecord(value.inputSchema)) return undefined;\n  if (typeof value.baseSchemaDigest !== \"string\" || !value.baseSchemaDigest.trim()) {\n    return undefined;\n  }\n  return {\n    ref: value.ref.trim(),\n    inputSchema: value.inputSchema,\n    baseSchemaDigest: value.baseSchemaDigest.trim(),\n  };\n};\n\nconst parseQuarantineEntry = (value: unknown): CompiledSurfaceQuarantineEntry | undefined => {\n  if (!isRecord(value) || typeof value.ref !== \"string\" || !value.ref.trim()) return undefined;\n  if (typeof value.baseSchemaDigest !== \"string\" || !value.baseSchemaDigest.trim()) {\n    return undefined;\n  }\n  return { ref: value.ref.trim(), baseSchemaDigest: value.baseSchemaDigest.trim() };\n};\n\nconst parseAppliedProposal = (value: unknown): CompiledSurfaceAppliedProposal | undefined => {\n  if (!isRecord(value)) return undefined;\n  if (typeof value.kind !== \"string\" || !value.kind.trim()) return undefined;\n  if (typeof value.ref !== \"string\" || !value.ref.trim()) return undefined;\n  if (typeof value.detail !== \"string\" || !value.detail.trim()) return undefined;\n  return {\n    kind: value.kind.trim() as CompiledSurfaceAppliedProposal[\"kind\"],\n    ref: value.ref.trim(),\n    detail: value.detail.trim(),\n  };\n};\n\nconst parseGateRecord = (value: unknown): CompiledSurfaceGateRecord | undefined => {\n  if (!isRecord(value) || typeof value.passed !== \"boolean\") return undefined;\n  if (typeof value.beforeScore !== \"number\" || typeof value.afterScore !== \"number\" ||\n      !Number.isFinite(value.beforeScore) || !Number.isFinite(value.afterScore)) {\n    return undefined;\n  }\n  if (!Array.isArray(value.reasons) || !value.reasons.every((r) => typeof r === \"string\")) {\n    return undefined;\n  }\n  return {\n    passed: value.passed,\n    beforeScore: value.beforeScore,\n    afterScore: value.afterScore,\n    reasons: value.reasons,\n  };\n};\n\n// Version 1 is accepted only as inert migration data. Version 2 cannot carry\n// restrictions. Its bounded plans are re-proved against live schemas at use;\n// a persisted gate flag or metric version never grants execution authority.\nconst parseCompiledSurfaceFile = (value: unknown): CompiledSurfaceFile | undefined => {\n  if (!isRecord(value) || (value.version !== 1 && value.version !== COMPILED_SURFACE_VERSION)) return undefined;\n  if (value.version === COMPILED_SURFACE_VERSION) {\n    if (!Array.isArray(value.normalizations) || value.normalizations.length > MAX_NORMAL_FORM_PLANS ||\n        !value.normalizations.every(isNormalFormPlan) ||\n        new Set(value.normalizations.map((plan) => plan.ref)).size !== value.normalizations.length) return undefined;\n    if (!Array.isArray(value.actions) || value.actions.length !== 0 ||\n        !Array.isArray(value.quarantined) || value.quarantined.length !== 0) return undefined;\n  }\n  if (!Number.isSafeInteger(value.metricVersion) || (value.metricVersion as number) < 1) {\n    return undefined;\n  }\n  if (!Array.isArray(value.actions) || !value.actions.every((entry) => parseOverlayEntry(entry))) {\n    return undefined;\n  }\n  if (\n    !Array.isArray(value.quarantined) ||\n    !value.quarantined.every((entry) => parseQuarantineEntry(entry))\n  ) {\n    return undefined;\n  }\n  if (\n    !Array.isArray(value.applied) ||\n    value.applied.length > MAX_COMPILED_SURFACE_PROPOSALS ||\n    !value.applied.every((entry) => parseAppliedProposal(entry))\n  ) {\n    return undefined;\n  }\n  if (!parseGateRecord(value.gate)) return undefined;\n  if (typeof value.evidenceDigest !== \"string\" || !value.evidenceDigest.trim()) return undefined;\n  const overlaySeen = new Set<string>();\n  for (const entry of value.actions) {\n    const parsed = parseOverlayEntry(entry)!;\n    if (overlaySeen.has(parsed.ref)) return undefined;\n    overlaySeen.add(parsed.ref);\n  }\n  return {\n    version: value.version,\n    ...(value.version === COMPILED_SURFACE_VERSION ? { normalizations: value.normalizations as import(\"./normal-form.js\").NormalFormPlan[] } : {}),\n    metricVersion: value.metricVersion as number,\n    actions: value.actions.map((entry) => parseOverlayEntry(entry)!),\n    quarantined: value.quarantined.map((entry) => parseQuarantineEntry(entry)!),\n    applied: value.applied.map((entry) => parseAppliedProposal(entry)!),\n    gate: parseGateRecord(value.gate)!,\n    evidenceDigest: value.evidenceDigest.trim(),\n  };\n};\n\n// Public guarded parse for artifact files that did not come from this\n// agent dir: exported artifacts being imported, or certification fixtures.\n// The same validation the store applies to its own file, so nothing trusts\n// an artifact shape the store would refuse to load.\nexport const parseCompiledSurfaceArtifact = (\n  value: unknown,\n): CompiledSurfaceFile | undefined => parseCompiledSurfaceFile(value);\n\nexport interface LoadedCompiledSurface {\n  file?: CompiledSurfaceFile;\n  error?: string;\n}\n\nexport const loadCompiledSurface = (agentDir: string): LoadedCompiledSurface => {\n  const file = compiledPath(compiledSurfaceDirectory(agentDir));\n  let raw: string;\n  try {\n    raw = fs.readFileSync(file, \"utf8\");\n  } catch (error) {\n    // A missing artifact means the surface was never compiled; anything\n    // else is damage that callers must surface, not silently rebuild.\n    if (errorCode(error) === \"ENOENT\") return {};\n    return { error: `compiled surface is unreadable: ${errorText(error)}` };\n  }\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    return { error: \"compiled surface is malformed JSON\" };\n  }\n  const parsedFile = parseCompiledSurfaceFile(parsed);\n  if (!parsedFile) return { error: \"compiled surface is invalid\" };\n  return { file: parsedFile };\n};\n\nexport const loadCompiledSurfaceAsync = async (\n  agentDir: string,\n): Promise<LoadedCompiledSurface> => {\n  const file = compiledPath(compiledSurfaceDirectory(agentDir));\n  let raw: string;\n  try {\n    raw = await fs.promises.readFile(file, \"utf8\");\n  } catch (error) {\n    if (errorCode(error) === \"ENOENT\") return {};\n    return { error: `compiled surface is unreadable: ${errorText(error)}` };\n  }\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    return { error: \"compiled surface is malformed JSON\" };\n  }\n  const parsedFile = parseCompiledSurfaceFile(parsed);\n  return parsedFile ? { file: parsedFile } : { error: \"compiled surface is invalid\" };\n};\n\nexport interface SavedCompiledSurface {\n  file: CompiledSurfaceFile;\n  written: boolean;\n}\n\nexport const saveCompiledSurface = (\n  agentDir: string,\n  file: CompiledSurfaceFile,\n): SavedCompiledSurface =>\n  withExclusiveFileLock(\n    {\n      directory: compiledSurfaceDirectory(agentDir),\n      lockName: \"compiled.lock\",\n      timeoutMessage: \"Timed out waiting for the compiled entropy surface lock\",\n      attempts: COMPILED_LOCK_ATTEMPTS,\n      delayMs: COMPILED_LOCK_DELAY_MS,\n      staleMs: COMPILED_STALE_LOCK_MS,\n    },\n    () => {\n      // A damaged artifact must never be silently rebuilt; fail so the\n      // compile records the rejection and leaves the file for recovery.\n      const loaded = loadCompiledSurface(agentDir);\n      if (loaded.error) throw new Error(loaded.error);\n      const target = compiledPath(compiledSurfaceDirectory(agentDir));\n      const serialized = `${JSON.stringify(file, null, 2)}\\n`;\n      try {\n        if (fs.readFileSync(target, \"utf8\") === serialized) return { file, written: false };\n      } catch {\n        // Missing file: proceed to write.\n      }\n      writeJsonAtomic(target, file, { space: 2, newline: true, mode: 0o600, dirMode: 0o700 });\n      return { file, written: true };\n    },\n  );\n\nexport const saveCompiledSurfaceAsync = async (\n  agentDir: string,\n  file: CompiledSurfaceFile,\n): Promise<SavedCompiledSurface> =>\n  withExclusiveFileLockAsync(\n    {\n      directory: compiledSurfaceDirectory(agentDir),\n      lockName: \"compiled.lock\",\n      timeoutMessage: \"Timed out waiting for the compiled entropy surface lock\",\n      attempts: COMPILED_LOCK_ATTEMPTS,\n      delayMs: COMPILED_LOCK_DELAY_MS,\n      staleMs: COMPILED_STALE_LOCK_MS,\n    },\n    async () => {\n      const loaded = await loadCompiledSurfaceAsync(agentDir);\n      if (loaded.error) throw new Error(loaded.error);\n      const target = compiledPath(compiledSurfaceDirectory(agentDir));\n      const serialized = `${JSON.stringify(file, null, 2)}\\n`;\n      try {\n        if (await fs.promises.readFile(target, \"utf8\") === serialized) {\n          return { file, written: false };\n        }\n      } catch {\n        // Missing file: proceed to write.\n      }\n      await writeJsonAtomicAsync(target, file, {\n        space: 2,\n        newline: true,\n        mode: 0o600,\n        dirMode: 0o700,\n      });\n      return { file, written: true };\n    },\n  );\n", "// Cross-process exclusive lock for Fabric's durable stores (the repair\n// table, the compiled entropy surface). Acquisition is a bounded retry over\n// mkdir; stale-lock recovery is an exclusive rename claim, so racing\n// reapers can never delete a lock a fresh writer owns.\n\nimport { randomUUID } from \"node:crypto\";\nimport fs from \"node:fs\";\nimport path from \"node:path\";\n\nconst DEFAULT_LOCK_ATTEMPTS = 50;\nconst DEFAULT_LOCK_DELAY_MS = 5;\nconst DEFAULT_STALE_LOCK_MS = 30_000;\n\nexport interface ExclusiveLockOptions {\n  directory: string;\n  lockName: string;\n  /** Error message when acquisition times out. */\n  timeoutMessage: string;\n  staleMs?: number;\n  attempts?: number;\n  delayMs?: number;\n}\n\nconst errorCode = (error: unknown): string | undefined =>\n  typeof error === \"object\" && error !== null && \"code\" in error\n    ? String((error as { code?: unknown }).code)\n    : undefined;\n\nconst sleepSync = (() => {\n  try {\n    const buffer = new Int32Array(new SharedArrayBuffer(4));\n    return (ms: number): void => {\n      Atomics.wait(buffer, 0, 0, ms);\n    };\n  } catch {\n    return (): void => undefined;\n  }\n})();\n\nconst processAlive = (pid: number): boolean => {\n  if (!Number.isSafeInteger(pid) || pid <= 0) return false;\n  try {\n    process.kill(pid, 0);\n    return true;\n  } catch {\n    return false;\n  }\n};\n\nconst sleepAsync = (ms: number): Promise<void> =>\n  new Promise((resolve) => setTimeout(resolve, ms));\n\nconst reapStaleLockAsync = async (\n  lock: string,\n  verify: (claimed: string) => Promise<boolean>,\n): Promise<boolean> => {\n  const claim = `${lock}.reap-${process.pid}-${randomUUID()}`;\n  try {\n    await fs.promises.rename(lock, claim);\n  } catch {\n    return false;\n  }\n  if (!(await verify(claim))) {\n    try {\n      await fs.promises.rename(claim, lock);\n    } catch {\n      if (await verify(claim)) {\n        await fs.promises.rm(claim, { recursive: true, force: true });\n      }\n    }\n    return false;\n  }\n  await fs.promises.rm(claim, { recursive: true, force: true });\n  return true;\n};\n\nexport const withExclusiveFileLockAsync = async <T>(\n  options: ExclusiveLockOptions,\n  operation: () => T | Promise<T>,\n): Promise<T> => {\n  const attempts = options.attempts ?? DEFAULT_LOCK_ATTEMPTS;\n  const delayMs = options.delayMs ?? DEFAULT_LOCK_DELAY_MS;\n  const staleMs = options.staleMs ?? DEFAULT_STALE_LOCK_MS;\n  await fs.promises.mkdir(options.directory, { recursive: true, mode: 0o700 });\n  const lock = path.join(options.directory, options.lockName);\n  const ownerPath = path.join(lock, \"owner\");\n  const token = randomUUID();\n  let acquired = false;\n  for (let attempt = 0; attempt < attempts; attempt++) {\n    try {\n      await fs.promises.mkdir(lock, { mode: 0o700 });\n      try {\n        await fs.promises.writeFile(ownerPath, `${token}\\n${process.pid}\\n${Date.now()}\\n`, {\n          encoding: \"utf-8\",\n          mode: 0o600,\n        });\n      } catch (error) {\n        await fs.promises.rm(lock, { recursive: true, force: true });\n        throw error;\n      }\n      acquired = true;\n      break;\n    } catch (error) {\n      if (errorCode(error) !== \"EEXIST\") throw error;\n      try {\n        const firstOwner = await fs.promises.readFile(ownerPath, \"utf8\");\n        const [, pidText, createdText] = firstOwner.trim().split(\"\\n\");\n        const stale = Date.now() - Number(createdText) > staleMs;\n        if (stale && !processAlive(Number(pidText))) {\n          const secondOwner = await fs.promises.readFile(ownerPath, \"utf8\");\n          if (\n            secondOwner === firstOwner &&\n            await reapStaleLockAsync(lock, async (claimed) => {\n              try {\n                const owner = await fs.promises.readFile(path.join(claimed, \"owner\"), \"utf8\");\n                const [, pid, created] = owner.trim().split(\"\\n\");\n                return Date.now() - Number(created) > staleMs && !processAlive(Number(pid));\n              } catch {\n                return false;\n              }\n            })\n          ) {\n            continue;\n          }\n        }\n      } catch {\n        try {\n          const first = await fs.promises.stat(lock);\n          if (\n            Date.now() - first.mtimeMs > staleMs &&\n            await reapStaleLockAsync(lock, async (claimed) => {\n              try {\n                return Date.now() - (await fs.promises.stat(claimed)).mtimeMs > staleMs;\n              } catch {\n                return false;\n              }\n            })\n          ) {\n            continue;\n          }\n        } catch {\n          // Lock creation or stale recovery raced; retry the bounded acquisition.\n        }\n      }\n      if (attempt === attempts - 1) break;\n      await sleepAsync(delayMs);\n    }\n  }\n  if (!acquired) throw new Error(options.timeoutMessage);\n  try {\n    return await operation();\n  } finally {\n    try {\n      const owner = await fs.promises.readFile(ownerPath, \"utf8\");\n      if (owner.startsWith(`${token}\\n`)) {\n        await fs.promises.rm(lock, { recursive: true, force: true });\n      }\n    } catch {\n      // A recovering process already removed this lock.\n    }\n  }\n};\n\n// Stale-lock recovery must be an exclusive claim. Stat-then-delete is\n// TOCTOU: two reapers (or a reaper and a fresh writer that recreated the\n// lock in between) can both pass their checks, and the slower rm then\n// deletes a lock the faster one already replaced. rename() is the claim \u2014\n// only one process can move the directory, and removal targets the claimed\n// path, never the live lock path. A claim that turns out to hold a live\n// lock is renamed back before any destructive step; a live lock is never\n// deleted, even if the rename-back races a fresh writer.\nconst reapStaleLock = (lock: string, verify: (claimed: string) => boolean): boolean => {\n  const claim = `${lock}.reap-${process.pid}-${randomUUID()}`;\n  try {\n    fs.renameSync(lock, claim);\n  } catch {\n    return false;\n  }\n  if (!verify(claim)) {\n    try {\n      fs.renameSync(claim, lock);\n    } catch {\n      // `lock` was recreated after the claim. Re-verify before any\n      // destructive step so a claimed live lock is only ever abandoned as\n      // garbage, never deleted.\n      if (verify(claim)) fs.rmSync(claim, { recursive: true, force: true });\n    }\n    return false;\n  }\n  fs.rmSync(claim, { recursive: true, force: true });\n  return true;\n};\n\nexport const withExclusiveFileLock = <T>(\n  options: ExclusiveLockOptions,\n  operation: () => T,\n): T => {\n  const attempts = options.attempts ?? DEFAULT_LOCK_ATTEMPTS;\n  const delayMs = options.delayMs ?? DEFAULT_LOCK_DELAY_MS;\n  const staleMs = options.staleMs ?? DEFAULT_STALE_LOCK_MS;\n  fs.mkdirSync(options.directory, { recursive: true, mode: 0o700 });\n  const lock = path.join(options.directory, options.lockName);\n  const ownerPath = path.join(lock, \"owner\");\n  const token = randomUUID();\n  let acquired = false;\n  for (let attempt = 0; attempt < attempts; attempt++) {\n    try {\n      fs.mkdirSync(lock, { mode: 0o700 });\n      try {\n        fs.writeFileSync(ownerPath, `${token}\\n${process.pid}\\n${Date.now()}\\n`, {\n          encoding: \"utf-8\",\n          mode: 0o600,\n        });\n      } catch (error) {\n        fs.rmSync(lock, { recursive: true, force: true });\n        throw error;\n      }\n      acquired = true;\n      break;\n    } catch (error) {\n      if (errorCode(error) !== \"EEXIST\") throw error;\n      try {\n        const firstOwner = fs.readFileSync(ownerPath, \"utf8\");\n        const [, pidText, createdText] = firstOwner.trim().split(\"\\n\");\n        const stale = Date.now() - Number(createdText) > staleMs;\n        if (stale && !processAlive(Number(pidText))) {\n          const secondOwner = fs.readFileSync(ownerPath, \"utf8\");\n          if (\n            secondOwner === firstOwner &&\n            reapStaleLock(lock, (claimed) => {\n              try {\n                const owner = fs.readFileSync(path.join(claimed, \"owner\"), \"utf8\");\n                const [, pid, created] = owner.trim().split(\"\\n\");\n                return Date.now() - Number(created) > staleMs && !processAlive(Number(pid));\n              } catch {\n                return false;\n              }\n            })\n          ) {\n            continue;\n          }\n        }\n      } catch {\n        try {\n          // Ownerless lock (crash between mkdir and the owner write): age is\n          // the only signal, and the claim re-verifies it after the rename.\n          const first = fs.statSync(lock);\n          if (\n            Date.now() - first.mtimeMs > staleMs &&\n            reapStaleLock(lock, (claimed) => {\n              try {\n                return Date.now() - fs.statSync(claimed).mtimeMs > staleMs;\n              } catch {\n                return false;\n              }\n            })\n          ) {\n            continue;\n          }\n        } catch {\n          // Lock creation or stale recovery raced; retry the bounded acquisition.\n        }\n      }\n      if (attempt === attempts - 1) break;\n      sleepSync(delayMs);\n    }\n  }\n  if (!acquired) throw new Error(options.timeoutMessage);\n  try {\n    return operation();\n  } finally {\n    try {\n      const owner = fs.readFileSync(ownerPath, \"utf8\");\n      if (owner.startsWith(`${token}\\n`)) {\n        fs.rmSync(lock, { recursive: true, force: true });\n      }\n    } catch {\n      // A recovering process already removed this lock.\n    }\n  }\n};"],
+  "mappings": ";;;;;;;;;;;;;;AAQO,IAAM,yBAAyB;AAK/B,IAAM,kBAAkB;AAAA,EAC7B,OAAO;AAAA,EACP,cAAc;AAAA,EACd,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,MAAM;AAAA,EACN,SAAS;AAAA,EACT,eAAe;AACjB;AAIO,IAAM,4BAA+C,CAAC,WAAW,WAAW,UAAU;;;ACvB7F,SAAS,aAAa;AAMf,IAAM,2BAA2B;AACjC,IAAM,iCAAiC;AAqBvC,IAAM,uBAAuB,OAA4B;AAAA,EAC9D,SAAS;AAAA,EAA0B,eAAe;AAAA,EAClD,SAAS,CAAC;AAAA,EAAG,aAAa,CAAC;AAAA,EAAG,gBAAgB,CAAC;AAAA,EAAG,SAAS,CAAC;AAAA,EAC5D,MAAM,EAAE,QAAQ,MAAM,aAAa,GAAG,YAAY,GAAG,SAAS,CAAC,EAAE;AAAA,EACjE,gBAAgB,eAAe,CAAC,CAAC;AACnC;AACO,IAAM,+BAA+B,CAAC,QAAyC,UACpF,eAAe,QAAQ,YAAY,2BAA2B,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,MAC9F,eAAe,MAAM,YAAY,2BAA2B,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAC7F,IAAM,gBAAgB,CAAC,UACrB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC9D,IAAM,eAAe,CAAC,WAA4B,eAAe,MAAM;AAIvE,IAAM,qBAAqB,CAAC,MAAc,YAAqB,UAAyC;AACxG,IAAM,uBAAuB,CAAC,MAA8B,UAAwD;AACpH,IAAM,sBAAsB,CAAC,UAAqD,oBAAI,IAAI;AAC1F,IAAM,mBAAmB,CAAC,MAAc,aAAsB,UAAyC;AAWvG,IAAM,wBAAwB,CACnC,OACA,UACA,SAC0B;AAC1B,QAAM,UAAU,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,OAAO,KAAK,OAAO,WAAW,CAAC,CAAC;AACtF,QAAM,QAAQ,oBAAI,IAA4B;AAC9C,MAAI,wBAAwB;AAC5B,aAAW,QAAQ,CAAC,OAAO,QAAQ,GAAG;AACpC,QAAI,CAAC,QAAQ,KAAK,YAAY,yBAA0B;AACxD,eAAW,QAAQ,KAAK,kBAAkB,CAAC,GAAG;AAC5C,UAAI,CAAC,qBAAqB,MAAM,QAAQ,IAAI,KAAK,GAAG,CAAC,GAAG;AAAE;AAAyB;AAAA,MAAU;AAC7F,UAAI,MAAM,QAAQ,yBAAyB,MAAM,IAAI,KAAK,GAAG,EAAG;AAChE,YAAM,IAAI,KAAK,KAAK,IAAI;AAAA,IAC1B;AAAA,EACF;AACA,QAAM,iBAAiB,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AACpG,SAAO;AAAA,IACL,MAAM;AAAA,MACJ,GAAG,qBAAqB;AAAA,MAAG;AAAA,MAC3B,SAAS,eAAe,MAAM,GAAG,8BAA8B,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,eAAe,KAAK,KAAK,KAAK,QAAQ,GAAG,KAAK,MAAM,MAAM,gBAAgB,EAAE;AAAA,MACpK,gBAAgB,eAAe,cAAc;AAAA,IAC/C;AAAA,IACA,kBAAkB,OAAO,QAAQ,UAAU,KAAK,SAAS,QAAQ;AAAA,IACjE,qBAAqB,OAAO,YAAY,UAAU,KAAK,SAAS,YAAY;AAAA,IAC5E;AAAA,EACF;AACF;AAgBO,IAAM,wBAAwB,CACnC,SACA,QACA,QACA,aACA,eACsB;AACtB,QAAM,cAAc,IAAI,IAAI,QAAQ,QAAQ,IAAI,CAAC,WAAW,CAAC,OAAO,KAAK,OAAO,WAAW,CAAC,CAAC;AAC7F,QAAM,cAAc,IAAI,IAAI,OAAO,QAAQ,IAAI,CAAC,WAAW,CAAC,OAAO,KAAK,OAAO,WAAW,CAAC,CAAC;AAC5F,QAAM,UAAU,CAAC,QAAiB,SAA2C;AAC3E,QAAI;AACF,aAAO,cAAc,MAAM,KAAK,MAAM,MAAM,QAAQ,IAAI;AAAA,IAC1D,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,QAAM,aAAgC,CAAC;AACvC,QAAM,cAAc,oBAAI,IAAY;AACpC,MAAI,YAAY;AACd,UAAM,iBAAiB,oBAAI,IAAuC;AAClE,eAAW,QAAQ,YAAY;AAC7B,UAAI,CAAC,YAAY,IAAI,KAAK,GAAG,EAAG;AAChC,YAAM,SAAS,eAAe,IAAI,KAAK,GAAG,KAAK,CAAC;AAChD,aAAO,KAAK,KAAK,IAAI;AACrB,qBAAe,IAAI,KAAK,KAAK,MAAM;AAAA,IACrC;AACA,eAAW,CAAC,KAAK,QAAQ,KAAK,gBAAgB;AAC5C,kBAAY,IAAI,GAAG;AACnB,YAAM,SAAS,YAAY,IAAI,GAAG;AAClC,UAAI,WAAW,QAAW;AACxB,mBAAW,KAAK,EAAE,KAAK,QAAQ,oCAAoC,CAAC;AACpE;AAAA,MACF;AACA,YAAM,WAAW,YAAY,IAAI,GAAG;AACpC,iBAAW,QAAQ,UAAU;AAC3B,YAAI,aAAa,UAAa,CAAC,QAAQ,UAAU,IAAI,EAAG;AACxD,YAAI,CAAC,QAAQ,QAAQ,IAAI,GAAG;AAC1B,qBAAW,KAAK;AAAA,YACd;AAAA,YACA,QAAQ;AAAA,UACV,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,aAAW,eAAe,QAAQ;AAChC,eAAW,aAAa,YAAY,YAAY;AAC9C,UAAI,UAAU,YAAY,YAAa;AACvC,UAAI,UAAU,IAAI,WAAW,SAAS,EAAG;AACzC,UAAI,CAAC,YAAY,IAAI,UAAU,GAAG,EAAG;AACrC,UAAI,YAAY,IAAI,UAAU,GAAG,EAAG;AACpC,YAAM,SAAS,YAAY,IAAI,UAAU,GAAG;AAC5C,UAAI,WAAW,QAAW;AACxB,mBAAW,KAAK,EAAE,KAAK,UAAU,KAAK,QAAQ,oCAAoC,CAAC;AACnF;AAAA,MACF;AACA,UAAI,CAAC,QAAQ,QAAQ,UAAU,IAAI,GAAG;AACpC,mBAAW,KAAK;AAAA,UACd,KAAK,UAAU;AAAA,UACf,QAAQ;AAAA,QACV,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,IAAM,2BAA2B;AAEjC,IAAM,cAAc,MAClB,IAAI,QAAQ,CAAC,YAAY,aAAa,OAAO,CAAC;AAIzC,IAAM,6BAA6B,OACxC,SACA,QACA,QACA,aACA,eAC+B;AAC/B,QAAM,cAAc,IAAI,IAAI,QAAQ,QAAQ,IAAI,CAAC,WAAW,CAAC,OAAO,KAAK,OAAO,WAAW,CAAC,CAAC;AAC7F,QAAM,cAAc,IAAI,IAAI,OAAO,QAAQ,IAAI,CAAC,WAAW,CAAC,OAAO,KAAK,OAAO,WAAW,CAAC,CAAC;AAC5F,QAAM,UAAU,CAAC,QAAiB,SAA2C;AAC3E,QAAI;AACF,aAAO,cAAc,MAAM,KAAK,MAAM,MAAM,QAAQ,IAAI;AAAA,IAC1D,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,QAAM,aAAgC,CAAC;AACvC,QAAM,cAAc,oBAAI,IAAY;AACpC,MAAI,YAAY;AAChB,QAAM,YAAY;AAClB,MAAI,YAAY;AACd,UAAM,iBAAiB,oBAAI,IAAuC;AAClE,eAAW,QAAQ,YAAY;AAC7B,UAAI,YAAY,IAAI,KAAK,GAAG,GAAG;AAC7B,cAAM,SAAS,eAAe,IAAI,KAAK,GAAG,KAAK,CAAC;AAChD,eAAO,KAAK,KAAK,IAAI;AACrB,uBAAe,IAAI,KAAK,KAAK,MAAM;AAAA,MACrC;AACA,mBAAa;AACb,UAAI,YAAY,6BAA6B,EAAG,OAAM,YAAY;AAAA,IACpE;AACA,eAAW,CAAC,KAAK,QAAQ,KAAK,gBAAgB;AAC5C,kBAAY,IAAI,GAAG;AACnB,YAAM,SAAS,YAAY,IAAI,GAAG;AAClC,UAAI,WAAW,QAAW;AACxB,mBAAW,KAAK,EAAE,KAAK,QAAQ,oCAAoC,CAAC;AACpE;AAAA,MACF;AACA,YAAM,WAAW,YAAY,IAAI,GAAG;AACpC,iBAAW,QAAQ,UAAU;AAC3B,YAAI,aAAa,UAAa,QAAQ,UAAU,IAAI,GAAG;AACrD,cAAI,CAAC,QAAQ,QAAQ,IAAI,GAAG;AAC1B,uBAAW,KAAK;AAAA,cACd;AAAA,cACA,QAAQ;AAAA,YACV,CAAC;AAAA,UACH;AAAA,QACF;AACA,qBAAa;AACb,YAAI,YAAY,6BAA6B,EAAG,OAAM,YAAY;AAAA,MACpE;AAAA,IACF;AAAA,EACF;AACA,aAAW,eAAe,QAAQ;AAChC,eAAW,aAAa,YAAY,YAAY;AAC9C,UACE,UAAU,YAAY,eACtB,CAAC,UAAU,IAAI,WAAW,SAAS,KACnC,YAAY,IAAI,UAAU,GAAG,KAC7B,CAAC,YAAY,IAAI,UAAU,GAAG,GAC9B;AACA,cAAM,SAAS,YAAY,IAAI,UAAU,GAAG;AAC5C,YAAI,WAAW,QAAW;AACxB,qBAAW,KAAK,EAAE,KAAK,UAAU,KAAK,QAAQ,oCAAoC,CAAC;AAAA,QACrF,WAAW,CAAC,QAAQ,QAAQ,UAAU,IAAI,GAAG;AAC3C,qBAAW,KAAK;AAAA,YACd,KAAK,UAAU;AAAA,YACf,QAAQ;AAAA,UACV,CAAC;AAAA,QACH;AAAA,MACF;AACA,mBAAa;AACb,UAAI,YAAY,6BAA6B,EAAG,OAAM,YAAY;AAAA,IACpE;AAAA,EACF;AACA,SAAO;AACT;;;ACtPA,OAAOA,SAAQ;AAEf,OAAOC,WAAU;;;ACHjB,SAAS,kBAAkB;AAC3B,OAAO,QAAQ;AACf,OAAO,UAAU;AAEjB,IAAM,wBAAwB;AAC9B,IAAM,wBAAwB;AAC9B,IAAM,wBAAwB;AAY9B,IAAM,YAAY,CAAC,UACjB,OAAO,UAAU,YAAY,UAAU,QAAQ,UAAU,QACrD,OAAQ,MAA6B,IAAI,IACzC;AAEN,IAAM,aAAa,MAAM;AACvB,MAAI;AACF,UAAM,SAAS,IAAI,WAAW,IAAI,kBAAkB,CAAC,CAAC;AACtD,WAAO,CAAC,OAAqB;AAC3B,cAAQ,KAAK,QAAQ,GAAG,GAAG,EAAE;AAAA,IAC/B;AAAA,EACF,QAAQ;AACN,WAAO,MAAY;AAAA,EACrB;AACF,GAAG;AAEH,IAAM,eAAe,CAAC,QAAyB;AAC7C,MAAI,CAAC,OAAO,cAAc,GAAG,KAAK,OAAO,EAAG,QAAO;AACnD,MAAI;AACF,YAAQ,KAAK,KAAK,CAAC;AACnB,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,IAAM,aAAa,CAAC,OAClB,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AAElD,IAAM,qBAAqB,OACzB,MACA,WACqB;AACrB,QAAM,QAAQ,GAAG,IAAI,SAAS,QAAQ,GAAG,IAAI,WAAW,CAAC;AACzD,MAAI;AACF,UAAM,GAAG,SAAS,OAAO,MAAM,KAAK;AAAA,EACtC,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,CAAE,MAAM,OAAO,KAAK,GAAI;AAC1B,QAAI;AACF,YAAM,GAAG,SAAS,OAAO,OAAO,IAAI;AAAA,IACtC,QAAQ;AACN,UAAI,MAAM,OAAO,KAAK,GAAG;AACvB,cAAM,GAAG,SAAS,GAAG,OAAO,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,MAC9D;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACA,QAAM,GAAG,SAAS,GAAG,OAAO,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC5D,SAAO;AACT;AAEO,IAAM,6BAA6B,OACxC,SACA,cACe;AACf,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,GAAG,SAAS,MAAM,QAAQ,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC3E,QAAM,OAAO,KAAK,KAAK,QAAQ,WAAW,QAAQ,QAAQ;AAC1D,QAAM,YAAY,KAAK,KAAK,MAAM,OAAO;AACzC,QAAM,QAAQ,WAAW;AACzB,MAAI,WAAW;AACf,WAAS,UAAU,GAAG,UAAU,UAAU,WAAW;AACnD,QAAI;AACF,YAAM,GAAG,SAAS,MAAM,MAAM,EAAE,MAAM,IAAM,CAAC;AAC7C,UAAI;AACF,cAAM,GAAG,SAAS,UAAU,WAAW,GAAG,KAAK;AAAA,EAAK,QAAQ,GAAG;AAAA,EAAK,KAAK,IAAI,CAAC;AAAA,GAAM;AAAA,UAClF,UAAU;AAAA,UACV,MAAM;AAAA,QACR,CAAC;AAAA,MACH,SAAS,OAAO;AACd,cAAM,GAAG,SAAS,GAAG,MAAM,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAC3D,cAAM;AAAA,MACR;AACA,iBAAW;AACX;AAAA,IACF,SAAS,OAAO;AACd,UAAI,UAAU,KAAK,MAAM,SAAU,OAAM;AACzC,UAAI;AACF,cAAM,aAAa,MAAM,GAAG,SAAS,SAAS,WAAW,MAAM;AAC/D,cAAM,CAAC,EAAE,SAAS,WAAW,IAAI,WAAW,KAAK,EAAE,MAAM,IAAI;AAC7D,cAAM,QAAQ,KAAK,IAAI,IAAI,OAAO,WAAW,IAAI;AACjD,YAAI,SAAS,CAAC,aAAa,OAAO,OAAO,CAAC,GAAG;AAC3C,gBAAM,cAAc,MAAM,GAAG,SAAS,SAAS,WAAW,MAAM;AAChE,cACE,gBAAgB,cAChB,MAAM,mBAAmB,MAAM,OAAO,YAAY;AAChD,gBAAI;AACF,oBAAM,QAAQ,MAAM,GAAG,SAAS,SAAS,KAAK,KAAK,SAAS,OAAO,GAAG,MAAM;AAC5E,oBAAM,CAAC,EAAE,KAAK,OAAO,IAAI,MAAM,KAAK,EAAE,MAAM,IAAI;AAChD,qBAAO,KAAK,IAAI,IAAI,OAAO,OAAO,IAAI,WAAW,CAAC,aAAa,OAAO,GAAG,CAAC;AAAA,YAC5E,QAAQ;AACN,qBAAO;AAAA,YACT;AAAA,UACF,CAAC,GACD;AACA;AAAA,UACF;AAAA,QACF;AAAA,MACF,QAAQ;AACN,YAAI;AACF,gBAAM,QAAQ,MAAM,GAAG,SAAS,KAAK,IAAI;AACzC,cACE,KAAK,IAAI,IAAI,MAAM,UAAU,WAC7B,MAAM,mBAAmB,MAAM,OAAO,YAAY;AAChD,gBAAI;AACF,qBAAO,KAAK,IAAI,KAAK,MAAM,GAAG,SAAS,KAAK,OAAO,GAAG,UAAU;AAAA,YAClE,QAAQ;AACN,qBAAO;AAAA,YACT;AAAA,UACF,CAAC,GACD;AACA;AAAA,UACF;AAAA,QACF,QAAQ;AAAA,QAER;AAAA,MACF;AACA,UAAI,YAAY,WAAW,EAAG;AAC9B,YAAM,WAAW,OAAO;AAAA,IAC1B;AAAA,EACF;AACA,MAAI,CAAC,SAAU,OAAM,IAAI,MAAM,QAAQ,cAAc;AACrD,MAAI;AACF,WAAO,MAAM,UAAU;AAAA,EACzB,UAAE;AACA,QAAI;AACF,YAAM,QAAQ,MAAM,GAAG,SAAS,SAAS,WAAW,MAAM;AAC1D,UAAI,MAAM,WAAW,GAAG,KAAK;AAAA,CAAI,GAAG;AAClC,cAAM,GAAG,SAAS,GAAG,MAAM,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,MAC7D;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAUA,IAAM,gBAAgB,CAAC,MAAc,WAAkD;AACrF,QAAM,QAAQ,GAAG,IAAI,SAAS,QAAQ,GAAG,IAAI,WAAW,CAAC;AACzD,MAAI;AACF,OAAG,WAAW,MAAM,KAAK;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,OAAO,KAAK,GAAG;AAClB,QAAI;AACF,SAAG,WAAW,OAAO,IAAI;AAAA,IAC3B,QAAQ;AAIN,UAAI,OAAO,KAAK,EAAG,IAAG,OAAO,OAAO,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,IACtE;AACA,WAAO;AAAA,EACT;AACA,KAAG,OAAO,OAAO,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AACjD,SAAO;AACT;AAEO,IAAM,wBAAwB,CACnC,SACA,cACM;AACN,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,UAAU,QAAQ,WAAW;AACnC,KAAG,UAAU,QAAQ,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAChE,QAAM,OAAO,KAAK,KAAK,QAAQ,WAAW,QAAQ,QAAQ;AAC1D,QAAM,YAAY,KAAK,KAAK,MAAM,OAAO;AACzC,QAAM,QAAQ,WAAW;AACzB,MAAI,WAAW;AACf,WAAS,UAAU,GAAG,UAAU,UAAU,WAAW;AACnD,QAAI;AACF,SAAG,UAAU,MAAM,EAAE,MAAM,IAAM,CAAC;AAClC,UAAI;AACF,WAAG,cAAc,WAAW,GAAG,KAAK;AAAA,EAAK,QAAQ,GAAG;AAAA,EAAK,KAAK,IAAI,CAAC;AAAA,GAAM;AAAA,UACvE,UAAU;AAAA,UACV,MAAM;AAAA,QACR,CAAC;AAAA,MACH,SAAS,OAAO;AACd,WAAG,OAAO,MAAM,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAChD,cAAM;AAAA,MACR;AACA,iBAAW;AACX;AAAA,IACF,SAAS,OAAO;AACd,UAAI,UAAU,KAAK,MAAM,SAAU,OAAM;AACzC,UAAI;AACF,cAAM,aAAa,GAAG,aAAa,WAAW,MAAM;AACpD,cAAM,CAAC,EAAE,SAAS,WAAW,IAAI,WAAW,KAAK,EAAE,MAAM,IAAI;AAC7D,cAAM,QAAQ,KAAK,IAAI,IAAI,OAAO,WAAW,IAAI;AACjD,YAAI,SAAS,CAAC,aAAa,OAAO,OAAO,CAAC,GAAG;AAC3C,gBAAM,cAAc,GAAG,aAAa,WAAW,MAAM;AACrD,cACE,gBAAgB,cAChB,cAAc,MAAM,CAAC,YAAY;AAC/B,gBAAI;AACF,oBAAM,QAAQ,GAAG,aAAa,KAAK,KAAK,SAAS,OAAO,GAAG,MAAM;AACjE,oBAAM,CAAC,EAAE,KAAK,OAAO,IAAI,MAAM,KAAK,EAAE,MAAM,IAAI;AAChD,qBAAO,KAAK,IAAI,IAAI,OAAO,OAAO,IAAI,WAAW,CAAC,aAAa,OAAO,GAAG,CAAC;AAAA,YAC5E,QAAQ;AACN,qBAAO;AAAA,YACT;AAAA,UACF,CAAC,GACD;AACA;AAAA,UACF;AAAA,QACF;AAAA,MACF,QAAQ;AACN,YAAI;AAGF,gBAAM,QAAQ,GAAG,SAAS,IAAI;AAC9B,cACE,KAAK,IAAI,IAAI,MAAM,UAAU,WAC7B,cAAc,MAAM,CAAC,YAAY;AAC/B,gBAAI;AACF,qBAAO,KAAK,IAAI,IAAI,GAAG,SAAS,OAAO,EAAE,UAAU;AAAA,YACrD,QAAQ;AACN,qBAAO;AAAA,YACT;AAAA,UACF,CAAC,GACD;AACA;AAAA,UACF;AAAA,QACF,QAAQ;AAAA,QAER;AAAA,MACF;AACA,UAAI,YAAY,WAAW,EAAG;AAC9B,gBAAU,OAAO;AAAA,IACnB;AAAA,EACF;AACA,MAAI,CAAC,SAAU,OAAM,IAAI,MAAM,QAAQ,cAAc;AACrD,MAAI;AACF,WAAO,UAAU;AAAA,EACnB,UAAE;AACA,QAAI;AACF,YAAM,QAAQ,GAAG,aAAa,WAAW,MAAM;AAC/C,UAAI,MAAM,WAAW,GAAG,KAAK;AAAA,CAAI,GAAG;AAClC,WAAG,OAAO,MAAM,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,MAClD;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACF;;;ADnQA,IAAM,yBAAyB;AAC/B,IAAM,yBAAyB;AAC/B,IAAM,yBAAyB;AAExB,IAAM,2BAA2B,CAAC,aACvCC,MAAK,KAAK,UAAU,UAAU,SAAS;AAEzC,IAAM,eAAe,CAAC,cAA8BA,MAAK,KAAK,WAAW,eAAe;AAExF,IAAM,WAAW,CAAC,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAErE,IAAMC,aAAY,CAAC,UACjB,SAAS,KAAK,KAAK,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAEnE,IAAM,YAAY,CAAC,WAChB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,MAAM,GAAG,GAAG;AAEvE,IAAM,oBAAoB,CAAC,UAA4D;AACrF,MAAI,CAAC,SAAS,KAAK,KAAK,OAAO,MAAM,QAAQ,YAAY,CAAC,MAAM,IAAI,KAAK,EAAG,QAAO;AACnF,MAAI,CAAC,SAAS,MAAM,WAAW,EAAG,QAAO;AACzC,MAAI,OAAO,MAAM,qBAAqB,YAAY,CAAC,MAAM,iBAAiB,KAAK,GAAG;AAChF,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,KAAK,MAAM,IAAI,KAAK;AAAA,IACpB,aAAa,MAAM;AAAA,IACnB,kBAAkB,MAAM,iBAAiB,KAAK;AAAA,EAChD;AACF;AAEA,IAAM,uBAAuB,CAAC,UAA+D;AAC3F,MAAI,CAAC,SAAS,KAAK,KAAK,OAAO,MAAM,QAAQ,YAAY,CAAC,MAAM,IAAI,KAAK,EAAG,QAAO;AACnF,MAAI,OAAO,MAAM,qBAAqB,YAAY,CAAC,MAAM,iBAAiB,KAAK,GAAG;AAChF,WAAO;AAAA,EACT;AACA,SAAO,EAAE,KAAK,MAAM,IAAI,KAAK,GAAG,kBAAkB,MAAM,iBAAiB,KAAK,EAAE;AAClF;AAEA,IAAM,uBAAuB,CAAC,UAA+D;AAC3F,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAC7B,MAAI,OAAO,MAAM,SAAS,YAAY,CAAC,MAAM,KAAK,KAAK,EAAG,QAAO;AACjE,MAAI,OAAO,MAAM,QAAQ,YAAY,CAAC,MAAM,IAAI,KAAK,EAAG,QAAO;AAC/D,MAAI,OAAO,MAAM,WAAW,YAAY,CAAC,MAAM,OAAO,KAAK,EAAG,QAAO;AACrE,SAAO;AAAA,IACL,MAAM,MAAM,KAAK,KAAK;AAAA,IACtB,KAAK,MAAM,IAAI,KAAK;AAAA,IACpB,QAAQ,MAAM,OAAO,KAAK;AAAA,EAC5B;AACF;AAEA,IAAM,kBAAkB,CAAC,UAA0D;AACjF,MAAI,CAAC,SAAS,KAAK,KAAK,OAAO,MAAM,WAAW,UAAW,QAAO;AAClE,MAAI,OAAO,MAAM,gBAAgB,YAAY,OAAO,MAAM,eAAe,YACrE,CAAC,OAAO,SAAS,MAAM,WAAW,KAAK,CAAC,OAAO,SAAS,MAAM,UAAU,GAAG;AAC7E,WAAO;AAAA,EACT;AACA,MAAI,CAAC,MAAM,QAAQ,MAAM,OAAO,KAAK,CAAC,MAAM,QAAQ,MAAM,CAAC,MAAM,OAAO,MAAM,QAAQ,GAAG;AACvF,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,QAAQ,MAAM;AAAA,IACd,aAAa,MAAM;AAAA,IACnB,YAAY,MAAM;AAAA,IAClB,SAAS,MAAM;AAAA,EACjB;AACF;AAKA,IAAM,2BAA2B,CAAC,UAAoD;AACpF,MAAI,CAAC,SAAS,KAAK,KAAM,MAAM,YAAY,KAAK,MAAM,YAAY,yBAA2B,QAAO;AACpG,MAAI,MAAM,YAAY,0BAA0B;AAC9C,QAAI,CAAC,MAAM,QAAQ,MAAM,cAAc,KAAK,MAAM,eAAe,SAAS,yBACtE,CAAC,MAAM,eAAe,MAAM,gBAAgB,KAC5C,IAAI,IAAI,MAAM,eAAe,IAAI,CAAC,SAAS,KAAK,GAAG,CAAC,EAAE,SAAS,MAAM,eAAe,OAAQ,QAAO;AACvG,QAAI,CAAC,MAAM,QAAQ,MAAM,OAAO,KAAK,MAAM,QAAQ,WAAW,KAC1D,CAAC,MAAM,QAAQ,MAAM,WAAW,KAAK,MAAM,YAAY,WAAW,EAAG,QAAO;AAAA,EAClF;AACA,MAAI,CAAC,OAAO,cAAc,MAAM,aAAa,KAAM,MAAM,gBAA2B,GAAG;AACrF,WAAO;AAAA,EACT;AACA,MAAI,CAAC,MAAM,QAAQ,MAAM,OAAO,KAAK,CAAC,MAAM,QAAQ,MAAM,CAAC,UAAU,kBAAkB,KAAK,CAAC,GAAG;AAC9F,WAAO;AAAA,EACT;AACA,MACE,CAAC,MAAM,QAAQ,MAAM,WAAW,KAChC,CAAC,MAAM,YAAY,MAAM,CAAC,UAAU,qBAAqB,KAAK,CAAC,GAC/D;AACA,WAAO;AAAA,EACT;AACA,MACE,CAAC,MAAM,QAAQ,MAAM,OAAO,KAC5B,MAAM,QAAQ,SAAS,kCACvB,CAAC,MAAM,QAAQ,MAAM,CAAC,UAAU,qBAAqB,KAAK,CAAC,GAC3D;AACA,WAAO;AAAA,EACT;AACA,MAAI,CAAC,gBAAgB,MAAM,IAAI,EAAG,QAAO;AACzC,MAAI,OAAO,MAAM,mBAAmB,YAAY,CAAC,MAAM,eAAe,KAAK,EAAG,QAAO;AACrF,QAAM,cAAc,oBAAI,IAAY;AACpC,aAAW,SAAS,MAAM,SAAS;AACjC,UAAM,SAAS,kBAAkB,KAAK;AACtC,QAAI,YAAY,IAAI,OAAO,GAAG,EAAG,QAAO;AACxC,gBAAY,IAAI,OAAO,GAAG;AAAA,EAC5B;AACA,SAAO;AAAA,IACL,SAAS,MAAM;AAAA,IACf,GAAI,MAAM,YAAY,2BAA2B,EAAE,gBAAgB,MAAM,eAA8D,IAAI,CAAC;AAAA,IAC5I,eAAe,MAAM;AAAA,IACrB,SAAS,MAAM,QAAQ,IAAI,CAAC,UAAU,kBAAkB,KAAK,CAAE;AAAA,IAC/D,aAAa,MAAM,YAAY,IAAI,CAAC,UAAU,qBAAqB,KAAK,CAAE;AAAA,IAC1E,SAAS,MAAM,QAAQ,IAAI,CAAC,UAAU,qBAAqB,KAAK,CAAE;AAAA,IAClE,MAAM,gBAAgB,MAAM,IAAI;AAAA,IAChC,gBAAgB,MAAM,eAAe,KAAK;AAAA,EAC5C;AACF;AAMO,IAAM,+BAA+B,CAC1C,UACoC,yBAAyB,KAAK;AAO7D,IAAM,sBAAsB,CAAC,aAA4C;AAC9E,QAAM,OAAO,aAAa,yBAAyB,QAAQ,CAAC;AAC5D,MAAI;AACJ,MAAI;AACF,UAAMC,IAAG,aAAa,MAAM,MAAM;AAAA,EACpC,SAAS,OAAO;AAGd,QAAID,WAAU,KAAK,MAAM,SAAU,QAAO,CAAC;AAC3C,WAAO,EAAE,OAAO,mCAAmC,UAAU,KAAK,CAAC,GAAG;AAAA,EACxE;AACA,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,GAAG;AAAA,EACzB,QAAQ;AACN,WAAO,EAAE,OAAO,qCAAqC;AAAA,EACvD;AACA,QAAM,aAAa,yBAAyB,MAAM;AAClD,MAAI,CAAC,WAAY,QAAO,EAAE,OAAO,8BAA8B;AAC/D,SAAO,EAAE,MAAM,WAAW;AAC5B;AAEO,IAAM,2BAA2B,OACtC,aACmC;AACnC,QAAM,OAAO,aAAa,yBAAyB,QAAQ,CAAC;AAC5D,MAAI;AACJ,MAAI;AACF,UAAM,MAAMC,IAAG,SAAS,SAAS,MAAM,MAAM;AAAA,EAC/C,SAAS,OAAO;AACd,QAAID,WAAU,KAAK,MAAM,SAAU,QAAO,CAAC;AAC3C,WAAO,EAAE,OAAO,mCAAmC,UAAU,KAAK,CAAC,GAAG;AAAA,EACxE;AACA,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,GAAG;AAAA,EACzB,QAAQ;AACN,WAAO,EAAE,OAAO,qCAAqC;AAAA,EACvD;AACA,QAAM,aAAa,yBAAyB,MAAM;AAClD,SAAO,aAAa,EAAE,MAAM,WAAW,IAAI,EAAE,OAAO,8BAA8B;AACpF;AAOO,IAAM,sBAAsB,CACjC,UACA,SAEA;AAAA,EACE;AAAA,IACE,WAAW,yBAAyB,QAAQ;AAAA,IAC5C,UAAU;AAAA,IACV,gBAAgB;AAAA,IAChB,UAAU;AAAA,IACV,SAAS;AAAA,IACT,SAAS;AAAA,EACX;AAAA,EACA,MAAM;AAGJ,UAAM,SAAS,oBAAoB,QAAQ;AAC3C,QAAI,OAAO,MAAO,OAAM,IAAI,MAAM,OAAO,KAAK;AAC9C,UAAM,SAAS,aAAa,yBAAyB,QAAQ,CAAC;AAC9D,UAAM,aAAa,GAAG,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;AAAA;AACnD,QAAI;AACF,UAAIC,IAAG,aAAa,QAAQ,MAAM,MAAM,WAAY,QAAO,EAAE,MAAM,SAAS,MAAM;AAAA,IACpF,QAAQ;AAAA,IAER;AACA,oBAAgB,QAAQ,MAAM,EAAE,OAAO,GAAG,SAAS,MAAM,MAAM,KAAO,SAAS,IAAM,CAAC;AACtF,WAAO,EAAE,MAAM,SAAS,KAAK;AAAA,EAC/B;AACF;AAEK,IAAM,2BAA2B,OACtC,UACA,SAEA;AAAA,EACE;AAAA,IACE,WAAW,yBAAyB,QAAQ;AAAA,IAC5C,UAAU;AAAA,IACV,gBAAgB;AAAA,IAChB,UAAU;AAAA,IACV,SAAS;AAAA,IACT,SAAS;AAAA,EACX;AAAA,EACA,YAAY;AACV,UAAM,SAAS,MAAM,yBAAyB,QAAQ;AACtD,QAAI,OAAO,MAAO,OAAM,IAAI,MAAM,OAAO,KAAK;AAC9C,UAAM,SAAS,aAAa,yBAAyB,QAAQ,CAAC;AAC9D,UAAM,aAAa,GAAG,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;AAAA;AACnD,QAAI;AACF,UAAI,MAAMA,IAAG,SAAS,SAAS,QAAQ,MAAM,MAAM,YAAY;AAC7D,eAAO,EAAE,MAAM,SAAS,MAAM;AAAA,MAChC;AAAA,IACF,QAAQ;AAAA,IAER;AACA,UAAM,qBAAqB,QAAQ,MAAM;AAAA,MACvC,OAAO;AAAA,MACP,SAAS;AAAA,MACT,MAAM;AAAA,MACN,SAAS;AAAA,IACX,CAAC;AACD,WAAO,EAAE,MAAM,SAAS,KAAK;AAAA,EAC/B;AACF;",
+  "names": ["fs", "path", "path", "errorCode", "fs"]
+}

package/dist/chunks/{chunk-IRPPGNUF.js → chunk-6GT4YJT2.js}

@@ -14,7 +14,7 @@ import {
   reconstructSessionLineage,
   searchMemoryIndex,
   shardPolicy
-} from "./chunk-F64KOMNS.js";
+} from "./chunk-FRONVGLX.js";
 import {
   compareLexical,
   foldSessionDigest,
@@ -26,12 +26,12 @@ import {
   enumerateAllSessions,
   resolveScope,
   resolveSessionTarget
-} from "./chunk-TDCMU5L4.js";
+} from "./chunk-KNBPIZF7.js";
 import {
   expandSessionEntriesChecked,
   normalizeRecords,
   normalizeSession
-} from "./chunk-MYCDJTSM.js";
+} from "./chunk-VJJFD42F.js";
 import {
   actionArgNormalizer
 } from "./chunk-NQOEHX62.js";
@@ -2178,4 +2178,4 @@ export {
   memoryActionSchemas,
   MemoryProvider
 };
-//# sourceMappingURL=chunk-IRPPGNUF.js.map
+//# sourceMappingURL=chunk-6GT4YJT2.js.map

package/dist/chunks/{chunk-NGAUBL2M.js → chunk-DDVCVE4D.js}

@@ -9,7 +9,7 @@ import {
   agentParticipantRecords,
   loadModelUsage,
   useBudgetLedger
-} from "./chunk-LJ6FJRFH.js";
+} from "./chunk-OJX2V36R.js";
 import {
   RESIDENT_HOST_FORMAT,
   residentDeliveryPrefix,
@@ -28,7 +28,7 @@ import {
 import {
   parseFabricOwnedModelGuidance,
   resolveFabricModelGuidance
-} from "./chunk-77FQHHZD.js";
+} from "./chunk-UKMQK5VP.js";
 
 // src/residency/host.ts
 import { randomUUID } from "node:crypto";
@@ -689,4 +689,4 @@ if (isMain) {
 export {
   runResidentHostFromConfigPath
 };
-//# sourceMappingURL=chunk-NGAUBL2M.js.map
+//# sourceMappingURL=chunk-DDVCVE4D.js.map

package/dist/chunks/{chunk-F64KOMNS.js → chunk-FRONVGLX.js}

@@ -9,7 +9,7 @@ import {
 import {
   DEFAULT_MEMORY_INDEX_PRIVACY,
   normalizeSession
-} from "./chunk-MYCDJTSM.js";
+} from "./chunk-VJJFD42F.js";
 
 // src/memory/index.ts
 import crypto2 from "node:crypto";
@@ -1239,4 +1239,4 @@ export {
   searchMemoryIndex,
   searchShards
 };
-//# sourceMappingURL=chunk-F64KOMNS.js.map
+//# sourceMappingURL=chunk-FRONVGLX.js.map

package/dist/chunks/{chunk-P22OSVIC.js → chunk-JS2THBBG.js}

@@ -1,7 +1,7 @@
 import {
   compileFabricSummary,
   rawContextTokens
-} from "./chunk-TAJUG2Q3.js";
+} from "./chunk-MF46OHNU.js";
 import {
   compactionRequestBoundsError,
   encodeCompactionRequest
@@ -444,4 +444,4 @@ export {
   buildPeerCards,
   awaitPeerSettle
 };
-//# sourceMappingURL=chunk-P22OSVIC.js.map
+//# sourceMappingURL=chunk-JS2THBBG.js.map

package/dist/chunks/{chunk-TDCMU5L4.js → chunk-KNBPIZF7.js}

@@ -1,6 +1,6 @@
 import {
   readSessionHeader
-} from "./chunk-MYCDJTSM.js";
+} from "./chunk-VJJFD42F.js";
 
 // src/memory/discovery.ts
 import fs from "node:fs";
@@ -109,4 +109,4 @@ export {
   resolveSessionTarget,
   resolveScope
 };
-//# sourceMappingURL=chunk-TDCMU5L4.js.map
+//# sourceMappingURL=chunk-KNBPIZF7.js.map