@oscharko-dev/keiko 0.2.0-beta.5 → 0.2.0-beta.6

package/node_modules/@oscharko-dev/keiko-server/dist/grounded-qa.js

@@ -12,6 +12,7 @@ import { redact } from "@oscharko-dev/keiko-security";
 import { RepoSearchInvalidQueryError, RepoSearchInvalidRangeError, RepoSearchUnsupportedFileError, } from "@oscharko-dev/keiko-workspace";
 import { CONNECTED_CONTEXT_SCHEMA_VERSION, validateConnectedContextPack, } from "@oscharko-dev/keiko-contracts/connected-context";
 import { buildGroundedAnswerContextPackSummary, } from "@oscharko-dev/keiko-contracts/bff-wire";
+import { stripUnsafeFormatChars } from "@oscharko-dev/keiko-contracts/text-safety";
 import { errorBody } from "./routes.js";
 import { currentGatewayConfig, currentGroundingLimits, currentRedactionSecrets } from "./deps.js";
 import { ClarificationNeededError, clarificationUserMessage, runGroundedExploration, } from "./grounded-orchestrator.js";
@@ -273,7 +274,8 @@ function requestAbortSignal(ctx) {
             controller.abort("grounded request cancelled");
         }
     };
-    ctx.req.on("aborted", abort);
+    // The req "aborted" event is deprecated since Node 17 and fires unreliably.
+    // The res "close" event is the canonical signal for a disconnected client.
     ctx.res.on("close", () => {
         if (!ctx.res.writableEnded)
             abort();
@@ -291,8 +293,12 @@ function formatLineRange(citation) {
     return `${citation.scopePath}:${String(citation.lineRange.startLine)}-${String(citation.lineRange.endLine)}`;
 }
 function redactedString(redactor, value) {
-    const redacted = redactor(value);
-    return typeof redacted === "string" ? redacted : value;
+    // GRD-001: strip Trojan-source / invisible format chars BEFORE redaction so a zero-width
+    // character cannot split a secret shape past the redactor, and so reordered/hidden text
+    // never reaches the prompt or the browser-rendered wire.
+    const safe = stripUnsafeFormatChars(value);
+    const redacted = redactor(safe);
+    return typeof redacted === "string" ? redacted : safe;
 }
 export function promptSafeExcerptText(value) {
     return value.split("```").join("` ` `");
@@ -479,7 +485,8 @@ function defaultRunner(deps, modelId, signal) {
 }
 // ─── Citation projection ──────────────────────────────────────────────────────
 export function redactString(redactor, value) {
-    return redactor(value);
+    // GRD-001: strip Trojan-source / invisible format chars before redaction (see redactedString).
+    return redactor(stripUnsafeFormatChars(value));
 }
 export function buildCitations(pack, redactor) {
     const citations = [];

package/node_modules/@oscharko-dev/keiko-server/dist/index.d.ts

@@ -18,6 +18,7 @@ export { handleDeleteLocalKnowledgeCapsule, handleGetLocalKnowledgeCapsule, hand
 export { createTerminalExecutionManager, buildTerminalPolicySummary, listDirectories, type TerminalDirectoryListing, type TerminalExecutionInput, type TerminalExecutionManager, type TerminalExecutionResult, type TerminalEventEmitter, type TerminalEventEnvelope, type TerminalEventKind, type TerminalPolicySummary, } from "./terminal.js";
 export { TerminalToolError, type TerminalErrorCode } from "./terminal-errors.js";
 export { runMemoryMaintenance, type MaintenanceCounts } from "./memory-maintenance-handlers.js";
+export { exportMemoryDiagnostics, type ExportMemoryDiagnosticsOptions, type MemoryDiagnostics, type MemoryScopeCount, type MemoryStatusHistogram, } from "./memory-diagnostics.js";
 export { createMemoryEmbedder, selectMemoryEmbeddingModelId, type MemoryEmbedder, } from "./memory-embedding.js";
 export { buildTerminalEvidenceEntry, appendTerminalEvidence, type TerminalEvidenceEntry, } from "./terminal-evidence.js";
 export { handleFilesContent, listFilesDirectories, readFilesContent, readFilesPreview, readFilesTree, writeFilesContent, type FilesContentResponse, type FilesDirectoryEntry, type FilesDirectoryListing, type FilesDirectoryRoot, type FilesEntryKind, type FilesPreviewResponse, type FilesTreeEntry, type FilesTreeResponse, } from "./files.js";

package/node_modules/@oscharko-dev/keiko-server/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAC1F,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,MAAM,UAAU,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EACL,UAAU,EACV,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,WAAW,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,KAAK,aAAa,EAClB,KAAK,uBAAuB,EAC5B,KAAK,QAAQ,EACb,KAAK,gBAAgB,GACtB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,iBAAiB,GACvB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,cAAc,EAAE,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,KAAK,UAAU,EAAE,KAAK,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EACL,eAAe,EACf,eAAe,EACf,eAAe,EACf,YAAY,EACZ,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,WAAW,GACjB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,cAAc,EACd,aAAa,EACb,cAAc,EACd,YAAY,EACZ,mBAAmB,EACnB,KAAK,IAAI,EACT,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,OAAO,EACZ,KAAK,OAAO,EACZ,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,cAAc,GACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iCAAiC,EACjC,8BAA8B,EAC9B,gCAAgC,EAChC,kCAAkC,GACnC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,EAC1B,eAAe,EACf,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,KAAK,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAChG,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,KAAK,cAAc,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,iBAAiB,GACvB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAC1F,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,MAAM,UAAU,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EACL,UAAU,EACV,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,WAAW,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,KAAK,aAAa,EAClB,KAAK,uBAAuB,EAC5B,KAAK,QAAQ,EACb,KAAK,gBAAgB,GACtB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,iBAAiB,GACvB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,cAAc,EAAE,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,KAAK,UAAU,EAAE,KAAK,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EACL,eAAe,EACf,eAAe,EACf,eAAe,EACf,YAAY,EACZ,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,WAAW,GACjB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,cAAc,EACd,aAAa,EACb,cAAc,EACd,YAAY,EACZ,mBAAmB,EACnB,KAAK,IAAI,EACT,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,OAAO,EACZ,KAAK,OAAO,EACZ,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,cAAc,GACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iCAAiC,EACjC,8BAA8B,EAC9B,gCAAgC,EAChC,kCAAkC,GACnC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,EAC1B,eAAe,EACf,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,KAAK,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAChG,OAAO,EACL,uBAAuB,EACvB,KAAK,8BAA8B,EACnC,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,GAC3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,KAAK,cAAc,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,iBAAiB,GACvB,MAAM,YAAY,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/index.js

@@ -23,6 +23,7 @@ export { handleDeleteLocalKnowledgeCapsule, handleGetLocalKnowledgeCapsule, hand
 export { createTerminalExecutionManager, buildTerminalPolicySummary, listDirectories, } from "./terminal.js";
 export { TerminalToolError } from "./terminal-errors.js";
 export { runMemoryMaintenance } from "./memory-maintenance-handlers.js";
+export { exportMemoryDiagnostics, } from "./memory-diagnostics.js";
 export { createMemoryEmbedder, selectMemoryEmbeddingModelId, } from "./memory-embedding.js";
 export { buildTerminalEvidenceEntry, appendTerminalEvidence, } from "./terminal-evidence.js";
 export { handleFilesContent, listFilesDirectories, readFilesContent, readFilesPreview, readFilesTree, writeFilesContent, } from "./files.js";

package/node_modules/@oscharko-dev/keiko-server/dist/local-knowledge-grounded-qa.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local-knowledge-grounded-qa.d.ts","sourceRoot":"","sources":["../src/local-knowledge-grounded-qa.ts"],"names":[],"mappings":"AAGA,OAAO,EAQL,iBAAiB,EAEjB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACpB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EACV,IAAI,EACJ,uBAAuB,EAIvB,8BAA8B,EAE/B,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EACV,gBAAgB,EAGhB,kBAAkB,EACnB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAOL,KAAK,sBAAsB,EAG5B,MAAM,mCAAmC,CAAC;AAE3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAI/C,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAC3C,eAAO,MAAM,iBAAiB,MAAM,CAAC;AACrC,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,eAAO,MAAM,6BAA6B,QAKuE,CAAC;AAYlH,UAAU,QAAQ;IAChB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,aAAa,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,kCAAkC,GAAG,CAC/C,SAAS,EAAE,kBAAkB,KAC1B,MAAM,GAAG,SAAS,CAAC;AAExB,KAAK,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;AAC/C,KAAK,cAAc,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;AAqB7E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,aAAa,GAAG;IACrD,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,KAAK,IAAI,IAAI,CAAC;CACf,CAaA;AAmCD,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,aAAa,EACnB,QAAQ,EAAE,SAAS,gBAAgB,EAAE,GACpC,sBAAsB,GAAG,WAAW,CA0CtC;AAKD,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,uBAAuB,EAC9B,KAAK,EAAE,cAAc,GACpB,2BAA2B,GAAG,WAAW,CAqB3C;AAaD,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,2BAA2B,GACpC;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CA0BnE;AA8DD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,cAAc,EAAE,WAAW,CAAC,EAAE,aAAa,GAAG,MAAM,CAejG;AAeD,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,cAAc,EACrB,QAAQ,EAAE,2BAA2B,GACpC,kCAAkC,CAgBpC;AAED,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,kBAAkB,EAC7B,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,kCAAkC,EACjD,WAAW,CAAC,EAAE,aAAa,GAC1B,8BAA8B,CAgBhC;AAoRD,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,GACpD,MAAM,GAAG,SAAS,CAWpB;AAED,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,EACrD,gBAAgB,EAAE,MAAM,GAAG,SAAS,EACpC,YAAY,CAAC,EAAE,kCAAkC,EACjD,WAAW,CAAC,EAAE,aAAa,GAC1B,SAAS,8BAA8B,EAAE,CAe3C;AAqLD,wBAAsB,+BAA+B,CACnD,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,QAAQ,EACf,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,WAAW,CAAC,CAuCtB"}
+{"version":3,"file":"local-knowledge-grounded-qa.d.ts","sourceRoot":"","sources":["../src/local-knowledge-grounded-qa.ts"],"names":[],"mappings":"AAGA,OAAO,EAQL,iBAAiB,EAEjB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACpB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EACV,IAAI,EACJ,uBAAuB,EAIvB,8BAA8B,EAE/B,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EACV,gBAAgB,EAGhB,kBAAkB,EACnB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAOL,KAAK,sBAAsB,EAG5B,MAAM,mCAAmC,CAAC;AAE3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAI/C,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAC3C,eAAO,MAAM,iBAAiB,MAAM,CAAC;AACrC,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,eAAO,MAAM,6BAA6B,QAKuE,CAAC;AAYlH,UAAU,QAAQ;IAChB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,aAAa,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,kCAAkC,GAAG,CAC/C,SAAS,EAAE,kBAAkB,KAC1B,MAAM,GAAG,SAAS,CAAC;AAExB,KAAK,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;AAC/C,KAAK,cAAc,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;AAqB7E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,aAAa,GAAG;IACrD,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,KAAK,IAAI,IAAI,CAAC;CACf,CAaA;AAmCD,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,aAAa,EACnB,QAAQ,EAAE,SAAS,gBAAgB,EAAE,GACpC,sBAAsB,GAAG,WAAW,CA0CtC;AAKD,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,uBAAuB,EAC9B,KAAK,EAAE,cAAc,GACpB,2BAA2B,GAAG,WAAW,CAqB3C;AAaD,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,2BAA2B,GACpC;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CA0BnE;AA8DD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,cAAc,EAAE,WAAW,CAAC,EAAE,aAAa,GAAG,MAAM,CAejG;AAeD,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,cAAc,EACrB,QAAQ,EAAE,2BAA2B,GACpC,kCAAkC,CAgBpC;AAED,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,kBAAkB,EAC7B,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,kCAAkC,EACjD,WAAW,CAAC,EAAE,aAAa,GAC1B,8BAA8B,CAgBhC;AAuRD,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,GACpD,MAAM,GAAG,SAAS,CAWpB;AAED,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,EACrD,gBAAgB,EAAE,MAAM,GAAG,SAAS,EACpC,YAAY,CAAC,EAAE,kCAAkC,EACjD,WAAW,CAAC,EAAE,aAAa,GAC1B,SAAS,8BAA8B,EAAE,CAe3C;AAqLD,wBAAsB,+BAA+B,CACnD,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,QAAQ,EACf,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,WAAW,CAAC,CAuCtB"}

package/node_modules/@oscharko-dev/keiko-server/dist/local-knowledge-grounded-qa.js

@@ -1,6 +1,7 @@
 import { createHash } from "node:crypto";
 import { dirname } from "node:path";
 import { createSqliteAuditSink, getCapsule, getCapsuleSet, listCapsuleSources, openKnowledgeStore, readCitationExcerpt, resolveKnowledgeStorePath, runGroundedAnswer, } from "@oscharko-dev/keiko-local-knowledge";
+import { stripUnsafeFormatChars } from "@oscharko-dev/keiko-contracts/text-safety";
 import { CancelledError, GatewayError, findCapability, findConfiguredCapability, requestOpenAIEmbedding, } from "@oscharko-dev/keiko-model-gateway";
 import { redact } from "@oscharko-dev/keiko-security";
 import { currentGatewayConfig, currentRedactionSecrets } from "./deps.js";
@@ -280,16 +281,19 @@ export function projectLocalKnowledgeCitation(reference, marker, sourceLookup, r
 function buildReferenceLines(input, store, redactExcerpt) {
     const lines = [];
     const references = input.references.slice(0, MAX_PROMPT_REFERENCES);
+    // GRD-001: strip Trojan-source / invisible format chars before redaction so reordered or
+    // hidden instructions in indexed document text never reach the model or the rendered wire.
+    const safeRedact = (value) => redactExcerpt(stripUnsafeFormatChars(value));
     for (let i = 0; i < references.length; i += 1) {
         const reference = references[i];
         if (reference === undefined)
             continue;
-        const label = renderCitationLabel(reference.citation, redactExcerpt);
+        const label = renderCitationLabel(reference.citation, safeRedact);
         // Redact secret-shaped strings out of document excerpts before they reach the model,
         // matching the hybrid grounded-ask path (grounded-qa-hybrid.ts). Without this the
         // single-connector path would forward raw document content (e.g. an embedded API key)
         // verbatim to the configured gateway.
-        const excerpt = redactExcerpt(readCitationExcerpt(store, reference.capsuleId, reference.citation, MAX_EXCERPT_CHARS));
+        const excerpt = safeRedact(readCitationExcerpt(store, reference.capsuleId, reference.citation, MAX_EXCERPT_CHARS));
         lines.push(`[${String(i + 1)}] ${label}`);
         if (excerpt.length > 0) {
             lines.push("```text");
@@ -590,7 +594,7 @@ function resolveModel(deps, modelId) {
 }
 function redactText(deps, value) {
     const redacted = deps.redactor(value);
-    return typeof redacted === "string" ? redacted : value;
+    return typeof redacted === "string" ? redacted : stripUnsafeFormatChars(value);
 }
 function persistScopedGroundedAnswer(chat, input, deps, env, selected, result, startedAt) {
     const elapsedMs = Date.now() - startedAt;

package/node_modules/@oscharko-dev/keiko-server/dist/local-knowledge-handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local-knowledge-handlers.d.ts","sourceRoot":"","sources":["../src/local-knowledge-handlers.ts"],"names":[],"mappings":"AA0CA,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE7D,OAAO,EAIL,KAAK,aAAa,EAKnB,MAAM,mCAAmC,CAAC;AAgO3C,UAAU,wBAAwB;IAChC,QAAQ,CAAC,SAAS,EAAE,SAAS;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5D,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;CACvD;AAikBD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,wBAAwB,GAAG,IAAI,GAAG,SAAS,GAClD,MAAM,GAAG,SAAS,CAIpB;AAwQD,wBAAsB,gCAAgC,CACpD,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAgBtB;AAED,wBAAsB,mCAAmC,CACvD,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAetB;AA4CD,wBAAsB,oCAAoC,CACxD,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAgCtB;AAmCD,wBAAsB,iCAAiC,CACrD,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAetB;AAED,wBAAsB,iCAAiC,CACrD,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAkCtB;AAED,wBAAsB,8BAA8B,CAClD,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAiBtB;AAED,wBAAsB,wCAAwC,CAC5D,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CA2CtB;AAED,wBAAsB,yCAAyC,CAC7D,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAkBtB;AAqFD,wBAAsB,kCAAkC,CACtD,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CA4CtB;AAED,wBAAsB,qCAAqC,CACzD,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAgBtB;AAED,wBAAsB,iCAAiC,CACrD,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAYtB;AAED,wBAAsB,kCAAkC,CACtD,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CA+CtB"}
+{"version":3,"file":"local-knowledge-handlers.d.ts","sourceRoot":"","sources":["../src/local-knowledge-handlers.ts"],"names":[],"mappings":"AA0CA,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE7D,OAAO,EAKL,KAAK,aAAa,EAOnB,MAAM,mCAAmC,CAAC;AAgO3C,UAAU,wBAAwB;IAChC,QAAQ,CAAC,SAAS,EAAE,SAAS;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5D,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;CACvD;AAilBD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,wBAAwB,GAAG,IAAI,GAAG,SAAS,GAClD,MAAM,GAAG,SAAS,CAIpB;AAgRD,wBAAsB,gCAAgC,CACpD,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAgBtB;AAED,wBAAsB,mCAAmC,CACvD,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAetB;AA4CD,wBAAsB,oCAAoC,CACxD,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAgCtB;AAmCD,wBAAsB,iCAAiC,CACrD,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAetB;AAED,wBAAsB,iCAAiC,CACrD,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAkCtB;AAED,wBAAsB,8BAA8B,CAClD,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAiBtB;AAED,wBAAsB,wCAAwC,CAC5D,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CA2CtB;AAED,wBAAsB,yCAAyC,CAC7D,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAkBtB;AAqFD,wBAAsB,kCAAkC,CACtD,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CA4CtB;AAED,wBAAsB,qCAAqC,CACzD,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAgBtB;AAED,wBAAsB,iCAAiC,CACrD,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAYtB;AAED,wBAAsB,kCAAkC,CACtD,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CA+CtB"}

package/node_modules/@oscharko-dev/keiko-server/dist/local-knowledge-handlers.js

@@ -6,7 +6,7 @@ import { KnowledgeNotFoundError, KnowledgeStoreError } from "@oscharko-dev/keiko
 import { CAPSULE_SET_MAX_MEMBERS, isSafeDisplaySummary, validateCapsuleReindexRequest, validateKnowledgeSourceScope, } from "@oscharko-dev/keiko-contracts";
 import { currentGatewayConfig } from "./deps.js";
 import { errorBody } from "./routes.js";
-import { findConfiguredCapability, requestOpenAIEmbedding, verifyEmbeddingCapability, } from "@oscharko-dev/keiko-model-gateway";
+import { findConfiguredCapability, requestOpenAIEmbedding, requestOpenAIEmbeddingBatch, verifyEmbeddingCapability, } from "@oscharko-dev/keiko-model-gateway";
 import { nodeWorkspaceFs } from "@oscharko-dev/keiko-workspace/internal/fs";
 import { isDenied } from "@oscharko-dev/keiko-workspace";
 import { localKnowledgeIndexingRegistry } from "./local-knowledge-indexing-registry.js";
@@ -438,28 +438,40 @@ function buildCapsuleHealth(deps, store, dbPath, capsule) {
         staleReasons: compatibility.staleReasons,
     };
 }
-function createEmbeddingAdapter(provider, requestImpl) {
-    return {
+function createEmbeddingAdapter(provider, requestImpl, batchImpl) {
+    const providerCreds = {
         endpoint: provider.baseUrl,
         apiKey: provider.apiKey,
         ...(provider.apiKeyHeaderName !== undefined
             ? { apiKeyHeaderName: provider.apiKeyHeaderName }
             : {}),
         ...(provider.egress !== undefined ? { egress: provider.egress } : {}),
-        request: (request) => requestImpl({
-            ...request,
-            endpoint: provider.baseUrl,
-            apiKey: provider.apiKey,
-            ...(provider.apiKeyHeaderName !== undefined
-                ? { apiKeyHeaderName: provider.apiKeyHeaderName }
-                : {}),
-            ...(provider.egress !== undefined ? { egress: provider.egress } : {}),
-        }),
+    };
+    return {
+        ...providerCreds,
+        request: (request) => requestImpl({ ...request, ...providerCreds }),
+        // #189 GRD-004: the indexing batcher prefers this array-batch port when present, turning
+        // up to batchSize per-chunk HTTPS round-trips into a single array call. Omitted when no
+        // batch impl is wired (scalar-stub tests) so those keep the one-request-per-chunk path.
+        ...(batchImpl !== undefined
+            ? {
+                requestBatch: (request) => batchImpl({ ...request, ...providerCreds }),
+            }
+            : {}),
     };
 }
 function requestEmbeddingImpl(deps) {
     return deps.localKnowledgeEmbeddingRequest ?? requestOpenAIEmbedding;
 }
+// #189 GRD-004: returns the array-batch impl, or undefined to fall back to per-chunk scalar
+// embedding. A test that stubs only the scalar request (localKnowledgeEmbeddingRequest) gets
+// no batch port unless it also stubs the batch request — keeping existing call-count tests valid.
+function requestEmbeddingBatchImpl(deps) {
+    if (deps.localKnowledgeEmbeddingRequest !== undefined) {
+        return deps.localKnowledgeEmbeddingBatchRequest;
+    }
+    return requestOpenAIEmbeddingBatch;
+}
 function canonicalizeScopeRoot(scope) {
     const safeRealPath = (path) => {
         try {
@@ -603,7 +615,7 @@ function createCapsuleStorageReference(capsuleId) {
     return `capsules/${capsuleId}`;
 }
 async function verifiedNewCapsuleEmbeddingIdentity(deps, provider) {
-    const adapter = createEmbeddingAdapter(provider, requestEmbeddingImpl(deps));
+    const adapter = createEmbeddingAdapter(provider, requestEmbeddingImpl(deps), requestEmbeddingBatchImpl(deps));
     try {
         const result = await verifyEmbeddingCapability(adapter, {
             modelId: provider.modelId,
@@ -708,7 +720,7 @@ async function runCapsuleIndexingJob(deps, store, capsule, options) {
         return { kind: "job-failed", jobId: "" };
     }
     canonicalizeCapsuleSourceRoots(store, capsule);
-    const adapter = createEmbeddingAdapter(provider, requestEmbeddingImpl(deps));
+    const adapter = createEmbeddingAdapter(provider, requestEmbeddingImpl(deps), requestEmbeddingBatchImpl(deps));
     const sourceSelection = resolveIndexingSourceSelection(store, capsule, options.mode);
     if (!sourceSelection.shouldRun) {
         return undefined;

package/node_modules/@oscharko-dev/keiko-server/dist/memory-audit-handler.d.ts

@@ -18,5 +18,6 @@ export interface RecordMemoryAuditOptions {
     readonly onPersistError?: (error: unknown) => void;
 }
 export declare function recordMemoryAudit(options: RecordMemoryAuditOptions, event: MemoryAuditEvent): void;
+export declare function recordMemoryAudits(options: RecordMemoryAuditOptions, events: readonly MemoryAuditEvent[]): void;
 export declare function createNoopMemoryAuditHandler(): MemoryAuditHandler;
 //# sourceMappingURL=memory-audit-handler.d.ts.map

package/node_modules/@oscharko-dev/keiko-server/dist/memory-audit-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory-audit-handler.d.ts","sourceRoot":"","sources":["../src/memory-audit-handler.ts"],"names":[],"mappings":"AAmCA,OAAO,KAAK,EACV,gBAAgB,EAGjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAYpE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IAEjD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAE5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,MAAM,CAAC;IAEnC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACpD;AAED,MAAM,MAAM,kBAAkB,GAAG,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;AAW9D,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAInD;AAkCD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,yBAAyB,GAAG,kBAAkB,CAiC/F;AAgED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IAClD,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACpD;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,wBAAwB,EACjC,KAAK,EAAE,gBAAgB,GACtB,IAAI,CAiBN;AAMD,wBAAgB,4BAA4B,IAAI,kBAAkB,CAEjE"}
+{"version":3,"file":"memory-audit-handler.d.ts","sourceRoot":"","sources":["../src/memory-audit-handler.ts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAAE,gBAAgB,EAA0B,MAAM,+BAA+B,CAAC;AAC9F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAYpE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IAEjD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAE5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,MAAM,CAAC;IAEnC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACpD;AAED,MAAM,MAAM,kBAAkB,GAAG,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;AAW9D,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAInD;AAgDD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,yBAAyB,GAAG,kBAAkB,CA+B/F;AAgED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IAClD,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACpD;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,wBAAwB,EACjC,KAAK,EAAE,gBAAgB,GACtB,IAAI,CAEN;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,wBAAwB,EACjC,MAAM,EAAE,SAAS,gBAAgB,EAAE,GAClC,IAAI,CA4BN;AAMD,wBAAgB,4BAA4B,IAAI,kBAAkB,CAEjE"}

package/node_modules/@oscharko-dev/keiko-server/dist/memory-audit-handler.js

@@ -11,12 +11,15 @@
 //   3. Appends the audit event to a date-bucketed JSON manifest in the existing
 //      keiko-evidence ledger (runId = `memory-audit-YYYY-MM-DD`).
 //
-// Persistence shape: ONE manifest per UTC date. `EvidenceStore.put()` overwrites, so the
-// handler reads-appends-writes. Single-process BFF makes this safe; documented limit.
-// A multi-process deployment would lose audit events under concurrent writes.
+// Persistence shape: ONE manifest per UTC date. Stores that expose `EvidenceStore.update()`
+// serialize the read-append-write step so concurrent audit appenders do not drop events.
+// Custom stores without that optional method still work through get+put, but the built-in
+// Node and in-memory stores use the safer update path.
 //
 // Failure mode: persistence errors are caught and logged to console.error; the handler
 // never throws. An audit-persistence failure must NEVER break the user's memory mutation.
+// Corrupt audit manifests are never reset or overwritten; append attempts fail closed and
+// preserve the existing artifact for operator investigation.
 //
 // Known limitation: the `previousStatus` map is in-memory only. After a server restart the
 // first `memory:updated` for any record lacks transition context and is classified as a
@@ -28,9 +31,8 @@
 // edges + embeddings encode structural derivations the body-level audit already covers
 // via the related record mutations).
 //
-// "memory:retrieved" and "memory:workflow-used" kinds are NOT vault-derived. The
-// `recordMemoryAudit()` helper exported below is the single emission point for those
-// kinds; the retrieval and workflow packages adopt the audit boundary in a follow-up.
+// Retrieval/workflow-specific kinds are NOT vault-derived. The `recordMemoryAudit()`
+// helper exported below is the single emission point for those direct audit signals.
 import { randomUUID } from "node:crypto";
 import { buildDeletedEvent, buildInsertedEvent, buildTombstonedEvent, buildUpdatedEvent, } from "./memory-audit-event-builders.js";
 import { sanitizeAuditEvent } from "./memory-scope-sanitizer.js";
@@ -46,14 +48,19 @@ export function auditRunIdFor(nowMs) {
     return `${RUNID_PREFIX}${iso.slice(0, 10)}`;
 }
 // ─── Persistence ──────────────────────────────────────────────────────────────
-// Appends a single audit event to the date-bucketed manifest. Read-existing-or-empty,
-// parse-or-reset (corrupt-file safe: a parse failure starts a fresh array; the audit
-// ledger is append-only by intent, but a corrupt manifest must not break ongoing audit).
-function appendAuditEvent(store, runId, event) {
-    const existing = store.get(runId);
-    const list = parseExistingEvents(existing);
-    list.push(event);
-    store.put(runId, JSON.stringify(list));
+// Appends audit events to the date-bucketed manifest. The built-in evidence stores expose an
+// atomic update path; fallback stores still get parse-safe get+put behavior. Batch callers should
+// pass every event for one operation at once so the daily JSON manifest is parsed and rewritten once.
+function appendAuditEvents(store, runId, events) {
+    if (events.length === 0) {
+        return;
+    }
+    const append = (existingJson) => JSON.stringify([...parseExistingEvents(existingJson), ...events]);
+    if (store.update !== undefined) {
+        store.update(runId, append);
+        return;
+    }
+    store.put(runId, append(store.get(runId)));
 }
 function parseExistingEvents(json) {
     if (json === undefined) {
@@ -61,16 +68,13 @@ function parseExistingEvents(json) {
     }
     try {
         const parsed = JSON.parse(json);
-        if (Array.isArray(parsed)) {
-            // We trust the manifest is what we wrote; a hostile editor of the file could plant
-            // arbitrary JSON, but the file is in the contained evidence dir and the worst case
-            // is that the next read sees a corrupt list — handled by the catch.
-            return parsed;
+        if (!Array.isArray(parsed)) {
+            throw new Error("memory audit manifest has unexpected shape");
         }
-        return [];
+        return parsed;
     }
-    catch {
-        return [];
+    catch (error) {
+        throw new Error(`memory audit manifest is corrupt; refusing to overwrite existing audit evidence: ${error instanceof Error ? error.message : "unknown"}`, { cause: error });
     }
 }
 // ─── Public factory ───────────────────────────────────────────────────────────
@@ -96,7 +100,9 @@ export function createMemoryAuditHandler(options) {
             return;
         }
         try {
-            appendAuditEvent(options.evidenceStore, auditRunIdFor(auditEvent.occurredAt), sanitizeAuditEvent(auditEvent, options.redactString));
+            appendAuditEvents(options.evidenceStore, auditRunIdFor(auditEvent.occurredAt), [
+                sanitizeAuditEvent(auditEvent, options.redactString),
+            ]);
         }
         catch (error) {
             onPersistError(error);
@@ -145,17 +151,36 @@ function updateStateCache(event, previousStatus, previousPinned) {
     }
 }
 export function recordMemoryAudit(options, event) {
+    recordMemoryAudits(options, [event]);
+}
+export function recordMemoryAudits(options, events) {
+    if (events.length === 0) {
+        return;
+    }
     const redactString = options.redactString ?? ((input) => input);
     const onPersistError = options.onPersistError ??
         ((error) => {
             // eslint-disable-next-line no-console
             console.error("memory-audit-handler: direct emission failed", error);
         });
-    try {
-        appendAuditEvent(options.evidenceStore, auditRunIdFor(event.occurredAt), sanitizeAuditEvent(event, redactString));
+    const eventsByRunId = new Map();
+    for (const event of events) {
+        const runId = auditRunIdFor(event.occurredAt);
+        const bucket = eventsByRunId.get(runId);
+        if (bucket === undefined) {
+            eventsByRunId.set(runId, [sanitizeAuditEvent(event, redactString)]);
+        }
+        else {
+            bucket.push(sanitizeAuditEvent(event, redactString));
+        }
     }
-    catch (error) {
-        onPersistError(error);
+    for (const [runId, bucket] of eventsByRunId) {
+        try {
+            appendAuditEvents(options.evidenceStore, runId, bucket);
+        }
+        catch (error) {
+            onPersistError(error);
+        }
     }
 }
 // ─── No-op handler ────────────────────────────────────────────────────────────

package/node_modules/@oscharko-dev/keiko-server/dist/memory-capture-policy.d.ts

@@ -0,0 +1,10 @@
+import type { CaptureOutcome, CapturePolicyOptions, RejectionReason } from "@oscharko-dev/keiko-memory-capture";
+import type { UiHandlerDeps } from "./deps.js";
+export declare const SENSITIVE_MEMORY_REJECTION_REASON: RejectionReason;
+export declare function memoryCaptureCustomerMatchers(deps: UiHandlerDeps): readonly RegExp[];
+export declare function memoryCapturePolicyForDeps(deps: UiHandlerDeps, base?: CapturePolicyOptions): CapturePolicyOptions;
+export declare function isPersistableMemoryCandidate(outcome: CaptureOutcome): outcome is Extract<CaptureOutcome, {
+    readonly kind: "candidate";
+}>;
+export declare function enforcePersistableMemoryOutcome(outcome: CaptureOutcome): CaptureOutcome;
+//# sourceMappingURL=memory-capture-policy.d.ts.map

package/node_modules/@oscharko-dev/keiko-server/dist/memory-capture-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-capture-policy.d.ts","sourceRoot":"","sources":["../src/memory-capture-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,oBAAoB,EACpB,eAAe,EAChB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG/C,eAAO,MAAM,iCAAiC,EAAE,eACV,CAAC;AAcvC,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,MAAM,EAAE,CAapF;AAED,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,aAAa,EACnB,IAAI,GAAE,oBAAyB,GAC9B,oBAAoB,CAMtB;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,cAAc,GACtB,OAAO,IAAI,OAAO,CAAC,cAAc,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC,CAMpE;AAED,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,cAAc,GAAG,cAAc,CAKvF"}

package/node_modules/@oscharko-dev/keiko-server/dist/memory-capture-policy.js

@@ -0,0 +1,44 @@
+import { currentRedactionSecrets } from "./deps.js";
+export const SENSITIVE_MEMORY_REJECTION_REASON = "sensitive-memory-requires-approval";
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function exactMatcherFor(value) {
+    const trimmed = value.trim();
+    if (trimmed.length === 0) {
+        return null;
+    }
+    return new RegExp(escapeRegExp(trimmed));
+}
+export function memoryCaptureCustomerMatchers(deps) {
+    const literals = new Set([
+        ...(deps.redactionSecrets ?? []),
+        ...currentRedactionSecrets(deps),
+    ]);
+    const matchers = [];
+    for (const literal of literals) {
+        const matcher = exactMatcherFor(literal);
+        if (matcher !== null) {
+            matchers.push(matcher);
+        }
+    }
+    return matchers;
+}
+export function memoryCapturePolicyForDeps(deps, base = {}) {
+    const matchers = [
+        ...(base.customerIdentifierMatchers ?? []),
+        ...memoryCaptureCustomerMatchers(deps),
+    ];
+    return matchers.length === 0 ? base : { ...base, customerIdentifierMatchers: matchers };
+}
+export function isPersistableMemoryCandidate(outcome) {
+    return (outcome.kind === "candidate" &&
+        !outcome.requiresApproval &&
+        outcome.proposal.provenance.sensitivity === "public");
+}
+export function enforcePersistableMemoryOutcome(outcome) {
+    if (outcome.kind !== "candidate" || isPersistableMemoryCandidate(outcome)) {
+        return outcome;
+    }
+    return { kind: "rejected", reason: SENSITIVE_MEMORY_REJECTION_REASON };
+}

package/node_modules/@oscharko-dev/keiko-server/dist/memory-consolidation-handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory-consolidation-handlers.d.ts","sourceRoot":"","sources":["../src/memory-consolidation-handlers.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAse7D,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CAoCtB;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAe7F;AAED,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAoBhG"}
+{"version":3,"file":"memory-consolidation-handlers.d.ts","sourceRoot":"","sources":["../src/memory-consolidation-handlers.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAigB7D,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,WAAW,CAAC,CA0BtB;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAe7F;AAED,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAoBhG"}