@remnic/cli 9.65.1 → 9.65.3

package/dist/index.js

@@ -18,7 +18,7 @@ async function persistEnrichmentCandidate(storage, entityName, candidate) {
 }
 
 // src/index.ts
-import fs17 from "fs";
+import fs19 from "fs";
 import os3 from "os";
 import path18 from "path";
 import { createHash as createHash4 } from "crypto";
@@ -27,13 +27,13 @@ import * as childProcess2 from "child_process";
 import { fileURLToPath as fileURLToPath5 } from "url";
 import { gzipSync } from "zlib";
 import {
-  parseConfig as parseConfig8,
+  parseConfig as parseConfig10,
   isOpenaiApiKeyDisabled,
   resolveEnvVars,
-  resolveRemnicConfigRecord as resolveRemnicConfigRecord7,
-  Orchestrator as Orchestrator5,
+  resolveRemnicConfigRecord as resolveRemnicConfigRecord9,
+  Orchestrator as Orchestrator6,
   EngramAccessService as EngramAccessService2,
-  initLogger as initLogger3,
+  initLogger as initLogger5,
   onboard,
   curate,
   listReviewItems,
@@ -105,9 +105,7 @@ import {
   discoverMemoryExtensions,
   resolveExtensionsRoot,
   coerceInstallExtension,
-  StorageManager as StorageManager2,
-  computeProcedureStats,
-  formatProcedureStatsText,
+  StorageManager as StorageManager3,
   parseXrayCliOptions,
   renderXray,
   extractWhoKnowsRawArgs,
@@ -119,6 +117,7 @@ import {
   OFFLINE_SYNC_SNAPSHOT_BASE_MAX_BODY_BYTES,
   applyOfflineSyncFileContentChunk as applyOfflineSyncFileContentChunk2,
   applyOfflineSyncSnapshot,
+  runPromotionCandidatesCommand,
   buildOfflineSyncChangesetFromSnapshot,
   drainPendingLifecycleForOfflineSync,
   compileOfflineSyncExcludeGlobs,
@@ -259,6 +258,330 @@ async function runExternalWikiBinaryCommand(rest) {
   }
 }
 
+// src/commands/procedural.ts
+import fs4 from "fs";
+import {
+  StorageManager,
+  computeProcedureStats,
+  formatProcedureStatsText,
+  initLogger,
+  parseConfig as parseConfig4,
+  resolveRemnicConfigRecord as resolveRemnicConfigRecord4,
+  runProcedureLibraryMaintenance
+} from "@remnic/core";
+
+// src/cli-args.ts
+function resolveFlag(args, flag) {
+  const idx = args.indexOf(flag);
+  if (idx === -1 || idx + 1 >= args.length) return void 0;
+  const value = args[idx + 1];
+  return isOptionToken(value) ? void 0 : value;
+}
+function isOptionToken(value) {
+  if (!value.startsWith("-")) return false;
+  if (/^-\d/.test(value) || /^-\.\d/.test(value)) return false;
+  return true;
+}
+function hasFlag(args, flag) {
+  return args.indexOf(flag) !== -1;
+}
+var TAXONOMY_RESOLVE_BOOLEAN_FLAGS = /* @__PURE__ */ new Set(["--json"]);
+var TAXONOMY_RESOLVE_VALUE_FLAGS = /* @__PURE__ */ new Set(["--category"]);
+function stripResolveFlags(args, booleanFlags = TAXONOMY_RESOLVE_BOOLEAN_FLAGS, valueFlags = TAXONOMY_RESOLVE_VALUE_FLAGS) {
+  return parseTaxonomyResolveArgs(args, booleanFlags, valueFlags).textParts;
+}
+function parseTaxonomyResolveArgs(args, booleanFlags = TAXONOMY_RESOLVE_BOOLEAN_FLAGS, valueFlags = TAXONOMY_RESOLVE_VALUE_FLAGS) {
+  const textParts = [];
+  const values = {};
+  const booleans = /* @__PURE__ */ new Set();
+  let literalText = false;
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (literalText) {
+      textParts.push(arg);
+      continue;
+    }
+    if (arg === "--") {
+      literalText = true;
+      continue;
+    }
+    if (arg.startsWith("--")) {
+      if (booleanFlags.has(arg)) {
+        booleans.add(arg);
+        continue;
+      }
+      if (valueFlags.has(arg)) {
+        const value = args[i + 1];
+        if (value === void 0 || value.startsWith("--")) {
+          throw new Error(`${arg} requires a value`);
+        }
+        values[arg] = value;
+        i++;
+        continue;
+      }
+      throw new Error(`Unknown flag: ${arg}`);
+    }
+    textParts.push(arg);
+  }
+  return { textParts, values, booleans };
+}
+
+// src/path-utils.ts
+function resolveHomeDir() {
+  return process.env.HOME ?? process.env.USERPROFILE ?? "~";
+}
+function expandTilde(p) {
+  if (p === "~" || p.startsWith("~/") || p.startsWith("~\\")) {
+    return resolveHomeDir() + p.slice(1);
+  }
+  const home = resolveHomeDir();
+  if (p === "$HOME" || p.startsWith("$HOME/") || p.startsWith("$HOME\\")) {
+    return home + p.slice(5);
+  }
+  if (p === "${HOME}" || p.startsWith("${HOME}/") || p.startsWith("${HOME}\\")) {
+    return home + p.slice(7);
+  }
+  return p;
+}
+
+// src/commands/procedural.ts
+async function runProceduralBinaryCommand(rest) {
+  initLogger();
+  const subcommand = rest[0];
+  if (!subcommand || subcommand === "--help" || subcommand === "-h") {
+    console.log(`remnic procedural \u2014 Procedural memory operations (issue #567)
+
+Usage:
+  remnic procedural stats [--format json|text] [--memory-dir <path>]
+  remnic procedural maintain [--apply] [--format json|text] [--memory-dir <path>]
+
+Subcommands:
+  stats                Print counts by status + recent activity + active config.
+  maintain             Run library-health maintenance (issue #2370): shadow
+                       report of merge / repair-flag / retire proposals.
+                       --apply executes them (requires
+                       procedural.maintenance.enabled in config).
+
+Shared with:
+  GET /engram/v1/procedural/stats
+  MCP remnic.procedural_stats (alias engram.procedural_stats)
+  MCP remnic.procedure_library_maintenance (alias engram.procedure_library_maintenance)`);
+    return;
+  }
+  if (subcommand !== "stats" && subcommand !== "maintain") {
+    console.error(
+      `Unknown procedural subcommand "${subcommand}". Run \`remnic procedural --help\` for usage.`
+    );
+    process.exit(1);
+  }
+  const args = rest.slice(1);
+  const formatPresent = hasFlag(args, "--format");
+  const formatRaw = resolveFlag(args, "--format");
+  if (formatPresent && (formatRaw === void 0 || formatRaw === null)) {
+    console.error("--format requires a value. Use `--format json` or `--format text`.");
+    process.exit(1);
+  }
+  const format = (() => {
+    if (!formatPresent || formatRaw === void 0 || formatRaw === null) return "text";
+    const normalized = String(formatRaw).trim().toLowerCase();
+    if (normalized !== "text" && normalized !== "json") {
+      console.error(`Invalid --format "${formatRaw}". Allowed: text, json.`);
+      process.exit(1);
+    }
+    return normalized;
+  })();
+  const memoryDirPresent = hasFlag(args, "--memory-dir");
+  const memoryDirOverride = resolveFlag(args, "--memory-dir");
+  if (memoryDirPresent && (memoryDirOverride === void 0 || memoryDirOverride === null)) {
+    console.error("--memory-dir requires a path. Omit the flag to use the resolved default.");
+    process.exit(1);
+  }
+  const configPath = resolveConfigPath();
+  const raw = fs4.existsSync(configPath) ? JSON.parse(fs4.readFileSync(configPath, "utf8")) : {};
+  const config = parseConfig4(resolveRemnicConfigRecord4(raw));
+  const memoryDir = expandTilde(
+    typeof memoryDirOverride === "string" && memoryDirOverride.length > 0 ? memoryDirOverride : config.memoryDir ?? resolveMemoryDir()
+  );
+  const storage = new StorageManager(memoryDir);
+  if (subcommand === "maintain") {
+    const report2 = await runProcedureLibraryMaintenance({
+      memoryDir,
+      storage,
+      config,
+      apply: hasFlag(args, "--apply")
+    });
+    if (format === "json") {
+      process.stdout.write(JSON.stringify(report2, null, 2) + "\n");
+      return;
+    }
+    process.stdout.write(formatProcedureMaintenanceText(report2));
+    return;
+  }
+  const report = await computeProcedureStats({ storage, config });
+  if (format === "json") {
+    process.stdout.write(JSON.stringify(report, null, 2) + "\n");
+    return;
+  }
+  process.stdout.write(formatProcedureStatsText(report));
+}
+function formatProcedureMaintenanceText(report) {
+  const lines = [
+    `Procedure library maintenance (schema v${report.schemaVersion}, ${report.mode})`,
+    `  generated:        ${report.generatedAt}`,
+    `  scanned:          ${report.scannedProcedures}`
+  ];
+  if (report.skippedReason) {
+    lines.push(`  skipped:          ${report.skippedReason}`);
+  }
+  lines.push(`  proposed:         ${report.proposed.length}`);
+  lines.push(`  applied:          ${report.appliedCount}`);
+  for (const action of report.proposed) {
+    lines.push("");
+    lines.push(`  [${action.action}] ${action.reasonCode}`);
+    lines.push(`    ids:      ${action.memoryIds.join(", ")}`);
+    if (action.canonicalId) {
+      lines.push(`    canonical: ${action.canonicalId}`);
+    }
+    lines.push(`    reason:   ${action.reason}`);
+    for (const ev of action.evidence) {
+      lines.push(
+        `    ${ev.memoryId}: mw_success=${ev.mwSuccess} mw_fail=${ev.mwFail} lastAccessed=${ev.lastAccessed ?? "(none)"}`
+      );
+    }
+  }
+  return lines.join("\n") + "\n";
+}
+
+// src/commands/drift.ts
+import fs5 from "fs";
+import {
+  Orchestrator as Orchestrator3,
+  initLogger as initLogger2,
+  parseConfig as parseConfig5,
+  resolveRemnicConfigRecord as resolveRemnicConfigRecord5,
+  runPreferenceDriftScan
+} from "@remnic/core";
+async function runDriftBinaryCommand(rest) {
+  initLogger2();
+  const subcommand = rest[0];
+  if (!subcommand || subcommand === "--help" || subcommand === "-h") {
+    console.log(`remnic drift \u2014 Preference drift detection (issue #2371)
+
+Usage:
+  remnic drift scan [--apply] [--namespace <ns>] [--format json|text] [--memory-dir <path>]
+
+Subcommands:
+  scan                 Classify aging preference memories as corroborated /
+                       stale / drifted from recent evidence. Reports only by
+                       default. --apply stamps lastCorroborated / driftState
+                       and opens one review item per drifted preference
+                       (requires driftDetection.enabled in config). Never
+                       auto-deletes and never auto-supersedes.
+
+Shared with:
+  MCP remnic.preference_drift_scan (alias engram.preference_drift_scan)
+
+Resolve a drifted item with the existing review surface:
+  remnic.review_list / remnic.review_resolve, verbs: keep, supersede, archive`);
+    return;
+  }
+  if (subcommand !== "scan") {
+    console.error(`Unknown drift subcommand "${subcommand}". Run \`remnic drift --help\` for usage.`);
+    process.exit(1);
+  }
+  const args = rest.slice(1);
+  const formatPresent = hasFlag(args, "--format");
+  const formatRaw = resolveFlag(args, "--format");
+  if (formatPresent && (formatRaw === void 0 || formatRaw === null)) {
+    console.error("--format requires a value. Use `--format json` or `--format text`.");
+    process.exit(1);
+  }
+  const format = (() => {
+    if (!formatPresent || formatRaw === void 0 || formatRaw === null) return "text";
+    const normalized = String(formatRaw).trim().toLowerCase();
+    if (normalized !== "text" && normalized !== "json") {
+      console.error(`Invalid --format "${formatRaw}". Allowed: text, json.`);
+      process.exit(1);
+    }
+    return normalized;
+  })();
+  const memoryDirPresent = hasFlag(args, "--memory-dir");
+  const memoryDirOverride = resolveFlag(args, "--memory-dir");
+  if (memoryDirPresent && (memoryDirOverride === void 0 || memoryDirOverride === null)) {
+    console.error("--memory-dir requires a path. Omit the flag to use the resolved default.");
+    process.exit(1);
+  }
+  const namespacePresent = hasFlag(args, "--namespace");
+  const namespaceOverride = resolveFlag(args, "--namespace");
+  if (namespacePresent && (namespaceOverride === void 0 || namespaceOverride === null)) {
+    console.error("--namespace requires a value. Omit the flag to scan the default namespace.");
+    process.exit(1);
+  }
+  const configPath = resolveConfigPath();
+  const raw = fs5.existsSync(configPath) ? JSON.parse(fs5.readFileSync(configPath, "utf8")) : {};
+  const config = parseConfig5(resolveRemnicConfigRecord5(raw));
+  const memoryDirOverridden = typeof memoryDirOverride === "string" && memoryDirOverride.length > 0;
+  const memoryDir = expandTilde(
+    memoryDirOverridden ? memoryDirOverride : config.memoryDir ?? resolveMemoryDir()
+  );
+  const orchestrator = new Orchestrator3(
+    memoryDirOverridden ? { ...config, memoryDir } : config
+  );
+  await orchestrator.initialize();
+  const storage = await orchestrator.getStorageForNamespace(
+    typeof namespaceOverride === "string" && namespaceOverride.length > 0 ? namespaceOverride : void 0
+  );
+  const report = await runPreferenceDriftScan({
+    storage,
+    config: orchestrator.config,
+    memoryDir,
+    // Deliberately NOT wrapped in a swallowing try/catch: the drift scan's
+    // §22 contract is that a thrown lookup means `backend_unavailable`, and
+    // returning `[]` on failure would misreport a live preference as stale.
+    embeddingLookupFactory: (scanStorage) => (content, limit) => orchestrator.semanticDedupLookup(content, limit, scanStorage),
+    storageForNamespace: async (namespace) => {
+      const resolvedNamespace = namespace?.trim() || void 0;
+      return {
+        storage: await orchestrator.getStorageForNamespace(resolvedNamespace),
+        namespace: resolvedNamespace
+      };
+    },
+    localLlm: orchestrator.localLlm ?? null,
+    fallbackLlm: orchestrator.fastGatewayLlm ?? null,
+    namespace: typeof namespaceOverride === "string" ? namespaceOverride : void 0,
+    apply: hasFlag(args, "--apply")
+  });
+  if (format === "json") {
+    process.stdout.write(JSON.stringify(report, null, 2) + "\n");
+    return;
+  }
+  process.stdout.write(formatPreferenceDriftText(report));
+}
+function formatPreferenceDriftText(report) {
+  const lines = [];
+  lines.push(`Preference drift \u2014 ${report.mode} run at ${report.generatedAt}`);
+  if (report.skippedReason) {
+    lines.push(
+      report.skippedReason === "drift_disabled" ? "  skipped: driftDetection.enabled is false" : "  skipped: driftDetection.maxCandidatesPerRun is 0"
+    );
+    return lines.join("\n") + "\n";
+  }
+  if (report.namespace) lines.push(`  namespace: ${report.namespace}`);
+  lines.push(`  eligible preferences: ${report.eligible} (classified ${report.scanned})`);
+  lines.push(
+    `  corroborated=${report.counts.corroborated} stale=${report.counts.stale} drifted=${report.counts.drifted} skipped=${report.counts.skipped}`
+  );
+  lines.push(`  applied writes: ${report.appliedCount} (review items opened: ${report.reviewItemsOpened})`);
+  for (const finding of report.findings) {
+    const skip = finding.skipped ? ` [${finding.skipped}]` : "";
+    lines.push(`  - ${finding.memoryId}: ${finding.classification}${skip} (${finding.ageDays}d old)`);
+    lines.push(`      ${finding.reason}`);
+    if (finding.reviewPairId) lines.push(`      review item: ${finding.reviewPairId}`);
+  }
+  lines.push(`  elapsed: ${report.elapsedMs}ms`);
+  return lines.join("\n") + "\n";
+}
+
 // src/optional-module-loader.ts
 function isSpecifierNotFoundError(err, specifier) {
   if (!err || typeof err !== "object") {
@@ -309,13 +632,13 @@ async function loadWecloneExportModule() {
 }
 
 // src/converge.ts
-import * as fs5 from "fs";
+import * as fs7 from "fs";
 import { createHash as createHash3 } from "crypto";
 import * as path2 from "path";
 import {
   CONVERGE_CONFLICT_POLICIES,
   DEFAULT_CONVERGE_CONFLICT_POLICY,
-  parseConfig as parseConfig4,
+  parseConfig as parseConfig6,
   buildOfflineSyncSnapshotFromBase,
   applyOfflineSyncFileContentChunk,
   isInternalRemnicStatePath as isInternalRemnicStatePath3,
@@ -341,12 +664,12 @@ import {
 
 // src/offline-storage-io.ts
 import { createDecipheriv, createHash } from "crypto";
-import fs4 from "fs";
+import fs6 from "fs";
 import { lstat, mkdtemp, readdir, rm } from "fs/promises";
 import path from "path";
 import {
   OFFLINE_SYNC_FILE_CONTENT_TRANSFER_CHUNK_BYTES,
-  StorageManager,
+  StorageManager as StorageManager2,
   createSupportPassportPrivateFileExclusion
 } from "@remnic/core";
 import { OFFLINE_DECRYPT_STAGING_DIR_PREFIX } from "@remnic/core/offline-sync-exclude-globs";
@@ -391,7 +714,7 @@ async function filterOfflineSyncBaseFiles(memoryDir, files, excludeFile) {
   return files.filter((_file, index) => excluded[index] === false);
 }
 async function createConfiguredOfflineStorage(memoryDir, secureStoreEncryptOnWrite = true) {
-  const storage = new StorageManager(memoryDir);
+  const storage = new StorageManager2(memoryDir);
   const header = await readHeader(memoryDir);
   let secureStoreKey = null;
   let secureStoreRequired = false;
@@ -416,7 +739,7 @@ async function createOfflineStorageForPath(memoryDir, filePath, configured, secu
   if (storageRoot !== memoryRoot && !storageRoot.startsWith(`${memoryRoot}${path.sep}`)) {
     throw new Error(`lifecycle ledger path is outside the offline memory directory: ${filePath}`);
   }
-  const storage = new StorageManager(storageRoot);
+  const storage = new StorageManager2(storageRoot);
   if (configured.secureStoreRequired) {
     storage.setSecureStoreRequired(true);
   }
@@ -503,7 +826,7 @@ async function* readOfflineSyncFileChunks(options) {
   });
 }
 async function readFilePrefix(filePath, length) {
-  const handle = await fs4.promises.open(filePath, "r");
+  const handle = await fs6.promises.open(filePath, "r");
   try {
     const out = Buffer.alloc(length);
     const { bytesRead } = await handle.read(out, 0, length, 0);
@@ -513,7 +836,7 @@ async function readFilePrefix(filePath, length) {
   }
 }
 async function* readPlainOfflineFileChunks(filePath, chunkSize) {
-  const stream = fs4.createReadStream(filePath, { highWaterMark: chunkSize });
+  const stream = fs6.createReadStream(filePath, { highWaterMark: chunkSize });
   for await (const chunk of stream) {
     yield Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
   }
@@ -550,9 +873,9 @@ async function* readEncryptedOfflineFileChunks(options) {
       });
       decipher.setAuthTag(authTag);
       decipher.setAAD(Buffer.concat([secureStoreEnvelopeHeaderAad(salt), aad]));
-      const output = fs4.createWriteStream(tempPath, { mode: 384 });
+      const output = fs6.createWriteStream(tempPath, { mode: 384 });
       try {
-        const stream = fs4.createReadStream(options.filePath, {
+        const stream = fs6.createReadStream(options.filePath, {
           start: MAGIC_HEADER_SIZE + ENVELOPE_HEADER_SIZE,
           highWaterMark: options.chunkSize
         });
@@ -1162,7 +1485,7 @@ async function readLocalTombstoneEvidence(rootDir) {
   for (const relativePath of TOMBSTONE_PATHS) {
     let content;
     try {
-      content = await fs5.promises.readFile(path2.join(rootDir, relativePath), "utf-8");
+      content = await fs7.promises.readFile(path2.join(rootDir, relativePath), "utf-8");
     } catch (error) {
       if (error.code === "ENOENT") continue;
       throw error;
@@ -1177,7 +1500,7 @@ async function discoverCursorNamespaces(memoryDir, peerUrl) {
   const cursorDir = path2.join(path2.resolve(memoryDir), ".remnic", "state", "converge-cursors");
   let entries;
   try {
-    entries = await fs5.promises.readdir(cursorDir, { withFileTypes: true });
+    entries = await fs7.promises.readdir(cursorDir, { withFileTypes: true });
   } catch (error) {
     if (error.code === "ENOENT") return [];
     throw error;
@@ -1253,7 +1576,7 @@ async function computeConvergePlan(options = {}) {
   let config = options.config;
   if (!config) {
     try {
-      config = parseConfig4({});
+      config = parseConfig6({});
     } catch {
     }
   }
@@ -1504,7 +1827,7 @@ async function executeConvergeApply(options = {}) {
   let config = options.config;
   if (!config) {
     try {
-      config = parseConfig4({});
+      config = parseConfig6({});
     } catch {
     }
   }
@@ -1667,7 +1990,7 @@ async function executeConvergeApply(options = {}) {
             if (current.sha256 !== entry.localSha256) {
               throw new Error(`local file changed during push: ${localPath}`);
             }
-            const stat2 = await fs5.promises.stat(filePath);
+            const stat2 = await fs7.promises.stat(filePath);
             let chunks;
             let chunkOffset = 0;
             const resetChunks = async () => {
@@ -1944,7 +2267,7 @@ function formatConvergeApplyReport(result) {
   lines.push(formatConvergeReport(result.plan));
   return lines.join("\n");
 }
-async function cmdConverge(action, rest, json, config = parseConfig4({})) {
+async function cmdConverge(action, rest, json, config = parseConfig6({})) {
   if (action === "help" || action === "--help" || action === "-h" || rest.includes("--help") || rest.includes("-h")) {
     console.log(`Usage: remnic converge <plan|apply> [options]
 
@@ -2150,8 +2473,8 @@ function renderReplayResult(result, targetNamespace, format) {
 }
 
 // src/quarantine-replay.ts
-import * as fs6 from "fs";
-import { EngramAccessService, Orchestrator as Orchestrator3, initLogger, parseConfig as parseConfig5, resolveRemnicConfigRecord as resolveRemnicConfigRecord4 } from "@remnic/core";
+import * as fs8 from "fs";
+import { EngramAccessService, Orchestrator as Orchestrator4, initLogger as initLogger3, parseConfig as parseConfig7, resolveRemnicConfigRecord as resolveRemnicConfigRecord6 } from "@remnic/core";
 import { WriteQuarantineStore } from "@remnic/core/write-quarantine.js";
 function valueFlag(args, flag) {
   const occurrences = args.filter((a) => a === flag).length;
@@ -2195,13 +2518,13 @@ async function runQuarantineReplay(rest, format, resolveConfigPath2) {
     process.exitCode = 2;
     return;
   }
-  initLogger();
+  initLogger3();
   let orchestrator;
   try {
     const configPath = resolveConfigPath2();
-    const raw = fs6.existsSync(configPath) ? JSON.parse(fs6.readFileSync(configPath, "utf8")) : {};
-    const config = parseConfig5(resolveRemnicConfigRecord4(raw));
-    orchestrator = new Orchestrator3(config);
+    const raw = fs8.existsSync(configPath) ? JSON.parse(fs8.readFileSync(configPath, "utf8")) : {};
+    const config = parseConfig7(resolveRemnicConfigRecord6(raw));
+    orchestrator = new Orchestrator4(config);
     await orchestrator.initialize();
     await orchestrator.deferredReady;
     const service = new EngramAccessService(orchestrator);
@@ -2231,15 +2554,15 @@ async function runQuarantineReplay(rest, format, resolveConfigPath2) {
 }
 
 // src/offline-impression-rotation.ts
-import fs7 from "fs";
-import { parseConfig as parseConfig6, resolveRemnicConfigRecord as resolveRemnicConfigRecord5, drainPendingImpressionsForOfflineSync } from "@remnic/core";
+import fs9 from "fs";
+import { parseConfig as parseConfig8, resolveRemnicConfigRecord as resolveRemnicConfigRecord7, drainPendingImpressionsForOfflineSync } from "@remnic/core";
 import { LastRecallStore } from "@remnic/core/recall-state";
 function parseConfigQuietly(raw) {
   const originalWarn = console.warn;
   console.warn = () => {
   };
   try {
-    return parseConfig6(resolveRemnicConfigRecord5(raw));
+    return parseConfig8(resolveRemnicConfigRecord7(raw));
   } finally {
     console.warn = originalWarn;
   }
@@ -2253,7 +2576,7 @@ var OFFLINE_CONFIG_KEYS = [
 function pickOfflineConfigRecord(raw) {
   let resolved;
   try {
-    resolved = resolveRemnicConfigRecord5(raw);
+    resolved = resolveRemnicConfigRecord7(raw);
   } catch {
     resolved = raw && typeof raw === "object" && !Array.isArray(raw) ? raw : {};
   }
@@ -2266,7 +2589,7 @@ function pickOfflineConfigRecord(raw) {
 function resolveOfflineImpressionRotation(configPath) {
   let raw;
   try {
-    raw = fs7.existsSync(configPath) ? JSON.parse(fs7.readFileSync(configPath, "utf8")) : {};
+    raw = fs9.existsSync(configPath) ? JSON.parse(fs9.readFileSync(configPath, "utf8")) : {};
   } catch {
     throw new Error(
       `cannot read recall-impression rotation from ${configPath}: config file could not be read as JSON`
@@ -2524,12 +2847,12 @@ function assertBenchModuleFreshForDevelopment() {
 }
 
 // src/cmd-security.ts
-import fs8 from "fs";
+import fs10 from "fs";
 import {
-  Orchestrator as Orchestrator4,
-  parseConfig as parseConfig7,
-  initLogger as initLogger2,
-  resolveRemnicConfigRecord as resolveRemnicConfigRecord6,
+  Orchestrator as Orchestrator5,
+  parseConfig as parseConfig9,
+  initLogger as initLogger4,
+  resolveRemnicConfigRecord as resolveRemnicConfigRecord8,
   runAuditMemoryCliCommand,
   formatAuditMemoryReport
 } from "@remnic/core";
@@ -2542,11 +2865,11 @@ async function cmdSecurity(rest) {
     process.exitCode = 1;
     return;
   }
-  initLogger2();
+  initLogger4();
   const configPath = resolveConfigPath();
-  const raw = fs8.existsSync(configPath) ? JSON.parse(fs8.readFileSync(configPath, "utf8")) : {};
-  const config = parseConfig7(resolveRemnicConfigRecord6(raw));
-  const orchestrator = new Orchestrator4(config);
+  const raw = fs10.existsSync(configPath) ? JSON.parse(fs10.readFileSync(configPath, "utf8")) : {};
+  const config = parseConfig9(resolveRemnicConfigRecord8(raw));
+  const orchestrator = new Orchestrator5(config);
   await orchestrator.initialize();
   try {
     const sinceFlag = rest.indexOf("--since");
@@ -2569,7 +2892,7 @@ async function cmdSecurity(rest) {
 }
 
 // src/daemon-service-candidates.ts
-import fs9 from "fs";
+import fs11 from "fs";
 import path5 from "path";
 var LAUNCHD_LABEL = "ai.remnic.daemon";
 var LEGACY_REMNIC_SERVER_LAUNCHD_LABEL = "ai.remnic.server";
@@ -2591,7 +2914,7 @@ function systemdUnitPaths(homeDir) {
 function anyFileExists(paths) {
   return paths.some((candidate) => {
     try {
-      return fs9.statSync(candidate).isFile();
+      return fs11.statSync(candidate).isFile();
     } catch {
       return false;
     }
@@ -2603,7 +2926,7 @@ function commandNames(command) {
 }
 function isRunnableNodeScript(filePath) {
   try {
-    const text = fs9.readFileSync(filePath, "utf8").slice(0, 4096);
+    const text = fs11.readFileSync(filePath, "utf8").slice(0, 4096);
     const firstLine = text.split(/\r?\n/, 1)[0] ?? "";
     if (/^#!.*\bnode\b/.test(firstLine)) return true;
     if (firstLine.startsWith("#!")) return false;
@@ -2616,7 +2939,7 @@ function isRunnableNodeScript(filePath) {
 function resolveShimNodeScript(filePath) {
   let text;
   try {
-    text = fs9.readFileSync(filePath, "utf8").slice(0, 16384);
+    text = fs11.readFileSync(filePath, "utf8").slice(0, 16384);
   } catch {
     return void 0;
   }
@@ -2628,8 +2951,8 @@ function resolveShimNodeScript(filePath) {
     const candidate = raw.replaceAll("${basedir}", basedir).replaceAll("$basedir", basedir).replaceAll("\\ ", " ");
     const resolved = path5.isAbsolute(candidate) ? candidate : path5.resolve(basedir, candidate);
     try {
-      if (fs9.statSync(resolved).isFile() && isRunnableNodeScript(resolved)) {
-        return fs9.realpathSync(resolved);
+      if (fs11.statSync(resolved).isFile() && isRunnableNodeScript(resolved)) {
+        return fs11.realpathSync(resolved);
       }
     } catch {
     }
@@ -2637,7 +2960,7 @@ function resolveShimNodeScript(filePath) {
   return void 0;
 }
 function resolveRunnableNodeScript(filePath) {
-  const realPath = fs9.realpathSync(filePath);
+  const realPath = fs11.realpathSync(filePath);
   if (isRunnableNodeScript(realPath)) return realPath;
   return resolveShimNodeScript(realPath);
 }
@@ -2647,9 +2970,9 @@ function findCommandOnPath(command, pathEnv = process.env.PATH ?? "") {
     for (const name of commandNames(command)) {
       const candidate = path5.join(dir, name);
       try {
-        const stat2 = fs9.statSync(candidate);
+        const stat2 = fs11.statSync(candidate);
         if (!stat2.isFile()) continue;
-        if (process.platform !== "win32") fs9.accessSync(candidate, fs9.constants.X_OK);
+        if (process.platform !== "win32") fs11.accessSync(candidate, fs11.constants.X_OK);
         const runnable = resolveRunnableNodeScript(candidate);
         if (runnable) return runnable;
       } catch {
@@ -3049,24 +3372,6 @@ function collectBenchmarks(argv) {
   return benchmarks;
 }
 
-// src/path-utils.ts
-function resolveHomeDir() {
-  return process.env.HOME ?? process.env.USERPROFILE ?? "~";
-}
-function expandTilde(p) {
-  if (p === "~" || p.startsWith("~/") || p.startsWith("~\\")) {
-    return resolveHomeDir() + p.slice(1);
-  }
-  const home = resolveHomeDir();
-  if (p === "$HOME" || p.startsWith("$HOME/") || p.startsWith("$HOME\\")) {
-    return home + p.slice(5);
-  }
-  if (p === "${HOME}" || p.startsWith("${HOME}/") || p.startsWith("${HOME}\\")) {
-    return home + p.slice(7);
-  }
-  return p;
-}
-
 // src/bench-args-research.ts
 import path6 from "path";
 function readPositiveInteger(args, flag) {
@@ -4140,7 +4445,7 @@ function finalizeBenchStatus(filePath) {
 }
 
 // src/bench-fallback.ts
-import fs10 from "fs";
+import fs12 from "fs";
 import path9 from "path";
 var FALLBACK_RESULTS_DIRNAME = "fallback-runs";
 function buildBenchRunnerArgs(parsed, benchmarkId, outputDir) {
@@ -4212,7 +4517,7 @@ function createFallbackBenchOutputDir(resultsDir, benchmarkId, pid, startedAtMs
   );
 }
 function resolveFallbackBenchResultPath(outputDir) {
-  const entries = fs10.readdirSync(outputDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name).sort();
+  const entries = fs12.readdirSync(outputDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name).sort();
   if (entries.length === 0) {
     throw new Error(`Fallback benchmark runner did not write a JSON result artifact in ${outputDir}`);
   }
@@ -4220,7 +4525,7 @@ function resolveFallbackBenchResultPath(outputDir) {
 }
 
 // src/openclaw-upgrade-swap.ts
-import fs11 from "fs";
+import fs13 from "fs";
 import path10 from "path";
 function describeError(error) {
   return error instanceof Error ? error.message : String(error);
@@ -4232,7 +4537,7 @@ function createSiblingTempFilePath(targetPath, label) {
 function resolveAtomicWriteMode(targetPath, explicitMode) {
   if (explicitMode !== void 0) return explicitMode;
   try {
-    return fs11.statSync(targetPath).mode & 4095;
+    return fs13.statSync(targetPath).mode & 4095;
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
       return 384;
@@ -4242,8 +4547,8 @@ function resolveAtomicWriteMode(targetPath, explicitMode) {
 }
 function resolveAtomicReplacementPath(targetPath) {
   try {
-    if (fs11.lstatSync(targetPath).isSymbolicLink()) {
-      return fs11.realpathSync(targetPath);
+    if (fs13.lstatSync(targetPath).isSymbolicLink()) {
+      return fs13.realpathSync(targetPath);
     }
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
@@ -4260,7 +4565,7 @@ function createSiblingSwapPath(targetDir, label) {
 function cleanupDisplacedDirectoryBestEffort(displacedDir, context) {
   if (!displacedDir) return void 0;
   try {
-    fs11.rmSync(displacedDir, { recursive: true, force: true });
+    fs13.rmSync(displacedDir, { recursive: true, force: true });
     return void 0;
   } catch (error) {
     return `Warning: ${context}, but failed to remove the displaced plugin copy at ${displacedDir}: ${describeError(error)}`;
@@ -4268,43 +4573,43 @@ function cleanupDisplacedDirectoryBestEffort(displacedDir, context) {
 }
 function atomicWriteFileSync(targetPath, data, options = {}) {
   const resolvedTargetPath = resolveAtomicReplacementPath(targetPath);
-  fs11.mkdirSync(path10.dirname(resolvedTargetPath), { recursive: true });
+  fs13.mkdirSync(path10.dirname(resolvedTargetPath), { recursive: true });
   const tempPath = createSiblingTempFilePath(resolvedTargetPath, "write");
   const mode = resolveAtomicWriteMode(resolvedTargetPath, options.mode);
   try {
     if (options.hooks?.writeTempFileSync) {
       options.hooks.writeTempFileSync(tempPath);
     } else {
-      fs11.writeFileSync(tempPath, data, { mode });
+      fs13.writeFileSync(tempPath, data, { mode });
     }
-    fs11.chmodSync(tempPath, mode);
-    const renameTempFileSync = options.hooks?.renameTempFileSync ?? fs11.renameSync;
+    fs13.chmodSync(tempPath, mode);
+    const renameTempFileSync = options.hooks?.renameTempFileSync ?? fs13.renameSync;
     renameTempFileSync(tempPath, resolvedTargetPath);
   } catch (error) {
-    fs11.rmSync(tempPath, { force: true });
+    fs13.rmSync(tempPath, { force: true });
     throw error;
   }
 }
 function atomicCopyFileSync(sourcePath, targetPath, options = {}) {
-  if (!fs11.existsSync(sourcePath)) return;
+  if (!fs13.existsSync(sourcePath)) return;
   const resolvedTargetPath = resolveAtomicReplacementPath(targetPath);
-  fs11.mkdirSync(path10.dirname(resolvedTargetPath), { recursive: true });
+  fs13.mkdirSync(path10.dirname(resolvedTargetPath), { recursive: true });
   const tempPath = createSiblingTempFilePath(resolvedTargetPath, "copy");
-  const mode = fs11.statSync(sourcePath).mode & 4095;
+  const mode = fs13.statSync(sourcePath).mode & 4095;
   try {
-    const copyTempFileSync = options.hooks?.copyTempFileSync ?? fs11.copyFileSync;
+    const copyTempFileSync = options.hooks?.copyTempFileSync ?? fs13.copyFileSync;
     copyTempFileSync(sourcePath, tempPath);
-    fs11.chmodSync(tempPath, mode);
-    const renameTempFileSync = options.hooks?.renameTempFileSync ?? fs11.renameSync;
+    fs13.chmodSync(tempPath, mode);
+    const renameTempFileSync = options.hooks?.renameTempFileSync ?? fs13.renameSync;
     renameTempFileSync(tempPath, resolvedTargetPath);
   } catch (error) {
-    fs11.rmSync(tempPath, { force: true });
+    fs13.rmSync(tempPath, { force: true });
     throw error;
   }
 }
 function cleanupRollbackDirectory(rollbackDir) {
   if (!rollbackDir) return;
-  fs11.rmSync(rollbackDir, { recursive: true, force: true });
+  fs13.rmSync(rollbackDir, { recursive: true, force: true });
 }
 function cleanupRollbackDirectoryBestEffort(rollbackDir) {
   if (!rollbackDir) return void 0;
@@ -4316,20 +4621,20 @@ function cleanupRollbackDirectoryBestEffort(rollbackDir) {
   }
 }
 function restoreDirectoryFromRollback(targetDir, rollbackDir) {
-  if (!fs11.existsSync(rollbackDir)) {
+  if (!fs13.existsSync(rollbackDir)) {
     throw new Error(`Rollback directory is missing: ${rollbackDir}`);
   }
-  fs11.mkdirSync(path10.dirname(targetDir), { recursive: true });
-  const displacedDir = fs11.existsSync(targetDir) ? createSiblingSwapPath(targetDir, "rollback-restore") : void 0;
+  fs13.mkdirSync(path10.dirname(targetDir), { recursive: true });
+  const displacedDir = fs13.existsSync(targetDir) ? createSiblingSwapPath(targetDir, "rollback-restore") : void 0;
   if (displacedDir) {
-    fs11.renameSync(targetDir, displacedDir);
+    fs13.renameSync(targetDir, displacedDir);
   }
   try {
-    fs11.renameSync(rollbackDir, targetDir);
+    fs13.renameSync(rollbackDir, targetDir);
   } catch (restoreError) {
-    if (displacedDir && fs11.existsSync(displacedDir)) {
+    if (displacedDir && fs13.existsSync(displacedDir)) {
       try {
-        fs11.renameSync(displacedDir, targetDir);
+        fs13.renameSync(displacedDir, targetDir);
       } catch (revertError) {
         throw new AggregateError(
           [restoreError, revertError],
@@ -4345,23 +4650,23 @@ function restoreDirectoryFromRollback(targetDir, rollbackDir) {
   return cleanupDisplacedDirectoryBestEffort(displacedDir, `restored the previous plugin copy into ${targetDir}`);
 }
 function restoreDirectoryFromBackup(targetDir, backupDir) {
-  if (!fs11.existsSync(backupDir)) {
+  if (!fs13.existsSync(backupDir)) {
     throw new Error(`Plugin backup directory is missing: ${backupDir}`);
   }
-  fs11.mkdirSync(path10.dirname(targetDir), { recursive: true });
+  fs13.mkdirSync(path10.dirname(targetDir), { recursive: true });
   const stagedDir = createSiblingSwapPath(targetDir, "backup-restore");
-  const displacedDir = fs11.existsSync(targetDir) ? createSiblingSwapPath(targetDir, "pre-backup-restore") : void 0;
-  fs11.cpSync(backupDir, stagedDir, { recursive: true });
+  const displacedDir = fs13.existsSync(targetDir) ? createSiblingSwapPath(targetDir, "pre-backup-restore") : void 0;
+  fs13.cpSync(backupDir, stagedDir, { recursive: true });
   if (displacedDir) {
-    fs11.renameSync(targetDir, displacedDir);
+    fs13.renameSync(targetDir, displacedDir);
   }
   try {
-    fs11.renameSync(stagedDir, targetDir);
+    fs13.renameSync(stagedDir, targetDir);
   } catch (restoreError) {
-    fs11.rmSync(targetDir, { recursive: true, force: true });
-    if (displacedDir && fs11.existsSync(displacedDir)) {
+    fs13.rmSync(targetDir, { recursive: true, force: true });
+    if (displacedDir && fs13.existsSync(displacedDir)) {
       try {
-        fs11.renameSync(displacedDir, targetDir);
+        fs13.renameSync(displacedDir, targetDir);
       } catch (revertError) {
         throw new AggregateError(
           [restoreError, revertError],
@@ -4369,7 +4674,7 @@ function restoreDirectoryFromBackup(targetDir, backupDir) {
         );
       }
     }
-    fs11.rmSync(stagedDir, { recursive: true, force: true });
+    fs13.rmSync(stagedDir, { recursive: true, force: true });
     throw new Error(
       `Failed to restore the plugin backup into ${targetDir}. The durable backup remains preserved at ${backupDir}.`,
       { cause: restoreError }
@@ -4394,7 +4699,7 @@ function rollbackOpenclawUpgrade({
   let configRemovalAttempted = false;
   let pluginRestored = false;
   try {
-    if (rollbackDir && fs11.existsSync(rollbackDir)) {
+    if (rollbackDir && fs13.existsSync(rollbackDir)) {
       const cleanupWarning = restoreDirectoryFromRollback(pluginDir, rollbackDir);
       notes.push(`Restored previous plugin from rollback copy at ${rollbackDir}`);
       if (cleanupWarning) notes.push(cleanupWarning);
@@ -4404,7 +4709,7 @@ function rollbackOpenclawUpgrade({
     rollbackRestoreError = error instanceof Error ? error.message : String(error);
   }
   try {
-    if (!pluginRestored && pluginBackupDir && fs11.existsSync(pluginBackupDir)) {
+    if (!pluginRestored && pluginBackupDir && fs13.existsSync(pluginBackupDir)) {
       const cleanupWarning = restoreDirectoryFromBackup(pluginDir, pluginBackupDir);
       if (rollbackRestoreError) {
         notes.push(`Rollback copy restore failed; restored previous plugin from durable backup at ${pluginBackupDir}`);
@@ -4429,12 +4734,12 @@ function rollbackOpenclawUpgrade({
     notes.push("No previous plugin copy was available for automatic restore");
   }
   try {
-    if (configBackupPath && fs11.existsSync(configBackupPath)) {
+    if (configBackupPath && fs13.existsSync(configBackupPath)) {
       restoreFileFromBackup(configPath, configBackupPath);
       notes.push(`Restored OpenClaw config from backup at ${configBackupPath}`);
-    } else if (removeConfigIfUnbacked && fs11.existsSync(configPath)) {
+    } else if (removeConfigIfUnbacked && fs13.existsSync(configPath)) {
       configRemovalAttempted = true;
-      fs11.rmSync(configPath, { force: true });
+      fs13.rmSync(configPath, { force: true });
       notes.push("Removed OpenClaw config created during the failed upgrade");
     }
   } catch (error) {
@@ -4487,7 +4792,7 @@ Run this manually when you're ready:
 
 // src/openclaw-managed-upgrade-loader.ts
 import { execFileSync } from "child_process";
-import fs12 from "fs";
+import fs14 from "fs";
 import os from "os";
 import path11 from "path";
 import { fileURLToPath as fileURLToPath3, pathToFileURL as pathToFileURL2 } from "url";
@@ -4563,7 +4868,7 @@ function buildOpenclawManagedUpgradePackageSpec(version = "latest") {
 function readCliAdapterRange() {
   const moduleDir = path11.dirname(fileURLToPath3(import.meta.url));
   const manifestPath = path11.resolve(moduleDir, "../package.json");
-  const manifest = JSON.parse(fs12.readFileSync(manifestPath, "utf8"));
+  const manifest = JSON.parse(fs14.readFileSync(manifestPath, "utf8"));
   if (manifest.name !== "@remnic/cli") {
     throw new Error(`Invalid @remnic/cli package manifest at ${manifestPath}.`);
   }
@@ -4607,7 +4912,7 @@ async function loadOpenclawManagedUpgradeModule(packageSpec, hooks = {}) {
     const adapterMissing = isSpecifierNotFoundError(error, OPENCLAW_PLUGIN_PACKAGE) || isSpecifierNotFoundError(error, MANAGED_UPGRADE_SPECIFIER) || isManagedUpgradeSubpathMissing(error);
     if (!adapterMissing) throw error;
   }
-  const temporaryRoot = fs12.mkdtempSync(path11.join(os.tmpdir(), "remnic-openclaw-upgrade-"));
+  const temporaryRoot = fs14.mkdtempSync(path11.join(os.tmpdir(), "remnic-openclaw-upgrade-"));
   try {
     const toolingPackageSpec = `${OPENCLAW_PLUGIN_PACKAGE}@${readCliAdapterRange()}`;
     const installArgs = [
@@ -4622,12 +4927,12 @@ async function loadOpenclawManagedUpgradeModule(packageSpec, hooks = {}) {
     ];
     (hooks.runNpmInstall ?? runNpmInstall)(installArgs);
     const resolverPath = path11.join(temporaryRoot, "load-managed-upgrade.mjs");
-    fs12.writeFileSync(resolverPath, `export * from ${JSON.stringify(MANAGED_UPGRADE_SPECIFIER)};
+    fs14.writeFileSync(resolverPath, `export * from ${JSON.stringify(MANAGED_UPGRADE_SPECIFIER)};
 `, "utf8");
     return await importModule(pathToFileURL2(resolverPath).href);
   } finally {
     try {
-      fs12.rmSync(temporaryRoot, { recursive: true, force: true });
+      fs14.rmSync(temporaryRoot, { recursive: true, force: true });
     } catch (error) {
       const detail = error instanceof Error ? error.message : String(error);
       console.warn(`Could not remove temporary managed upgrade project at ${temporaryRoot}: ${detail}`);
@@ -4636,13 +4941,13 @@ async function loadOpenclawManagedUpgradeModule(packageSpec, hooks = {}) {
 }
 
 // src/remote-daemon.ts
-import fs13 from "fs";
+import fs15 from "fs";
 function readCompatEnv(primary, legacy) {
   return process.env[primary] ?? process.env[legacy];
 }
 function readRemnicConfigRecord(configPath) {
   try {
-    const parsed = JSON.parse(fs13.readFileSync(configPath, "utf8"));
+    const parsed = JSON.parse(fs15.readFileSync(configPath, "utf8"));
     if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
       return parsed;
     }
@@ -4871,7 +5176,7 @@ async function remoteRecallXray(daemon, request) {
 }
 
 // src/daemon-service.ts
-import fs14 from "fs";
+import fs16 from "fs";
 import path12 from "path";
 import * as childProcess from "child_process";
 import { fileURLToPath as fileURLToPath4 } from "url";
@@ -4883,7 +5188,7 @@ function launchdUnloadPlist(plistPath, processApi = childProcess) {
   processApi.execFileSync("launchctl", ["unload", plistPath], { stdio: "pipe" });
 }
 function resolveServerBinDetails(options = {}) {
-  const existsSync4 = options.existsSync ?? fs14.existsSync;
+  const existsSync4 = options.existsSync ?? fs16.existsSync;
   const findCommandOnPath2 = options.findCommandOnPath ?? findCommandOnPath;
   const moduleDir = options.moduleDir ?? thisModuleDir;
   const packageResolve = options.packageResolve ?? resolveImportSpecifier;
@@ -4942,8 +5247,8 @@ function resolveServerBin(options = {}) {
   return resolveServerBinDetails(options).path;
 }
 function readVerifiedDaemonPid(options) {
-  const readFileSync4 = options.readFileSync ?? fs14.readFileSync;
-  const unlinkSync = options.unlinkSync ?? fs14.unlinkSync;
+  const readFileSync4 = options.readFileSync ?? fs16.readFileSync;
+  const unlinkSync = options.unlinkSync ?? fs16.unlinkSync;
   const processKill = options.processKill ?? process.kill;
   const platform = options.platform ?? process.platform;
   const execFileSync4 = options.execFileSync ?? ((command, args, execOptions) => childProcess.execFileSync(command, args, execOptions));
@@ -5043,8 +5348,8 @@ function removePidFileBestEffort(file, unlinkSync) {
   }
 }
 function inspectLaunchdPlist(plistPath, options = {}) {
-  const existsSync4 = options.existsSync ?? fs14.existsSync;
-  const readFileSync4 = options.readFileSync ?? fs14.readFileSync;
+  const existsSync4 = options.existsSync ?? fs16.existsSync;
+  const readFileSync4 = options.readFileSync ?? fs16.readFileSync;
   if (!existsSync4(plistPath)) {
     return {
       installed: false,
@@ -5168,62 +5473,6 @@ function unescapeXml(input) {
   return input.replaceAll("&quot;", '"').replaceAll("&apos;", "'").replaceAll("&lt;", "<").replaceAll("&gt;", ">").replaceAll("&amp;", "&");
 }
 
-// src/cli-args.ts
-function resolveFlag(args, flag) {
-  const idx = args.indexOf(flag);
-  if (idx === -1 || idx + 1 >= args.length) return void 0;
-  const value = args[idx + 1];
-  return isOptionToken(value) ? void 0 : value;
-}
-function isOptionToken(value) {
-  if (!value.startsWith("-")) return false;
-  if (/^-\d/.test(value) || /^-\.\d/.test(value)) return false;
-  return true;
-}
-function hasFlag(args, flag) {
-  return args.indexOf(flag) !== -1;
-}
-var TAXONOMY_RESOLVE_BOOLEAN_FLAGS = /* @__PURE__ */ new Set(["--json"]);
-var TAXONOMY_RESOLVE_VALUE_FLAGS = /* @__PURE__ */ new Set(["--category"]);
-function stripResolveFlags(args, booleanFlags = TAXONOMY_RESOLVE_BOOLEAN_FLAGS, valueFlags = TAXONOMY_RESOLVE_VALUE_FLAGS) {
-  return parseTaxonomyResolveArgs(args, booleanFlags, valueFlags).textParts;
-}
-function parseTaxonomyResolveArgs(args, booleanFlags = TAXONOMY_RESOLVE_BOOLEAN_FLAGS, valueFlags = TAXONOMY_RESOLVE_VALUE_FLAGS) {
-  const textParts = [];
-  const values = {};
-  const booleans = /* @__PURE__ */ new Set();
-  let literalText = false;
-  for (let i = 0; i < args.length; i++) {
-    const arg = args[i];
-    if (literalText) {
-      textParts.push(arg);
-      continue;
-    }
-    if (arg === "--") {
-      literalText = true;
-      continue;
-    }
-    if (arg.startsWith("--")) {
-      if (booleanFlags.has(arg)) {
-        booleans.add(arg);
-        continue;
-      }
-      if (valueFlags.has(arg)) {
-        const value = args[i + 1];
-        if (value === void 0 || value.startsWith("--")) {
-          throw new Error(`${arg} requires a value`);
-        }
-        values[arg] = value;
-        i++;
-        continue;
-      }
-      throw new Error(`Unknown flag: ${arg}`);
-    }
-    textParts.push(arg);
-  }
-  return { textParts, values, booleans };
-}
-
 // src/parse-connector-config.ts
 function parseConfigAssignment(raw, flag) {
   const eqIdx = raw.indexOf("=");
@@ -5278,7 +5527,7 @@ function stripConfigArgv(args) {
 }
 
 // src/import-dispatch.ts
-import fs15 from "fs";
+import fs17 from "fs";
 import {
   runImporter,
   validateImportBatchSize,
@@ -5792,7 +6041,7 @@ async function cmdImport(rest, targetFactory, disposeTarget, ioOverrides = {}) {
   let materializedTarget;
   let materializePromise;
   const io = {
-    readFile: ioOverrides.readFile ?? (async (p) => fs15.promises.readFile(p, "utf-8")),
+    readFile: ioOverrides.readFile ?? (async (p) => fs17.promises.readFile(p, "utf-8")),
     loadAdapter: ioOverrides.loadAdapter ?? (async (name) => (await loadImporterModule(name)).adapter),
     runImporter: ioOverrides.runImporter ?? runImporter,
     getWriteTarget: async () => {
@@ -5905,7 +6154,7 @@ async function cmdCapture(rest, io) {
 }
 
 // src/import-lossless-claw-cmd.ts
-import fs16 from "fs";
+import fs18 from "fs";
 import path14 from "path";
 import {
   applyLcmSchema,
@@ -6017,15 +6266,15 @@ async function loadImportLosslessClawModule() {
 
 // src/import-lossless-claw-cmd.ts
 function assertDirectoryOrAbsent(p, label) {
-  if (fs16.existsSync(p) && !fs16.statSync(p).isDirectory()) {
+  if (fs18.existsSync(p) && !fs18.statSync(p).isDirectory()) {
     throw new Error(`${label} is not a directory: ${p}`);
   }
 }
 function assertFile(p, label) {
-  if (!fs16.existsSync(p)) {
+  if (!fs18.existsSync(p)) {
     throw new Error(`${label} does not exist: ${p}`);
   }
-  if (!fs16.statSync(p).isFile()) {
+  if (!fs18.statSync(p).isFile()) {
     throw new Error(`${label} is not a file: ${p}`);
   }
 }
@@ -6057,7 +6306,7 @@ async function cmdImportLosslessClaw(argv, io, deps = {}) {
     try {
       if (parsed.dryRun) {
         const lcmPath = path14.join(memoryDir, "state", "lcm.sqlite");
-        if (fs16.existsSync(lcmPath)) {
+        if (fs18.existsSync(lcmPath)) {
           destDb = mod.openExistingLcmDatabaseReadOnly(lcmPath);
         } else {
           destDb = mod.openInMemoryDestinationDatabase();
@@ -7409,7 +7658,7 @@ async function resolveAllBenchmarks() {
   if (packageBenchmarks) {
     return packageBenchmarks.filter((entry) => entry.runnerAvailable).map((entry) => entry.id);
   }
-  if (!fs17.existsSync(EVAL_RUNNER_PATH)) {
+  if (!fs19.existsSync(EVAL_RUNNER_PATH)) {
     return [];
   }
   return BENCHMARK_CATALOG.filter((entry) => entry.category !== "ingestion").map((entry) => entry.id);
@@ -7457,7 +7706,7 @@ async function runBenchViaFallback(parsed, benchmarkId, runtimeProfile) {
       `Fallback benchmark runner does not support provider-backed, gateway, or thinking/timeout flags (${unsupportedOptions.join(", ")}). Build/install @remnic/bench to use those options.`
     );
   }
-  if (!fs17.existsSync(EVAL_RUNNER_PATH)) {
+  if (!fs19.existsSync(EVAL_RUNNER_PATH)) {
     console.error(
       "Benchmark runner not found. Expected eval runner at evals/run.ts or a phase-1 @remnic/bench runtime export."
     );
@@ -7467,7 +7716,7 @@ async function runBenchViaFallback(parsed, benchmarkId, runtimeProfile) {
     path18.join(CLI_REPO_ROOT, "node_modules", ".bin", "tsx"),
     path18.join(CLI_REPO_ROOT, "packages", "remnic-cli", "node_modules", ".bin", "tsx")
   ];
-  const tsxCmd = tsxCandidates.find((candidate) => fs17.existsSync(candidate)) ?? "tsx";
+  const tsxCmd = tsxCandidates.find((candidate) => fs19.existsSync(candidate)) ?? "tsx";
   const fallbackOutputDir = createFallbackBenchOutputDir(
     parsed.resultsDir ?? resolveBenchOutputDir(),
     benchmarkId,
@@ -7612,9 +7861,9 @@ var PERSONAMEM_COMPLETION_MARKER = path18.join(
 );
 function resolveRealpathWithinDataset(datasetPath, relativePath) {
   try {
-    const datasetRoot = fs17.realpathSync(datasetPath);
+    const datasetRoot = fs19.realpathSync(datasetPath);
     const candidatePath = path18.resolve(datasetRoot, relativePath);
-    const candidateRealPath = fs17.realpathSync(candidatePath);
+    const candidateRealPath = fs19.realpathSync(candidatePath);
     const relativeToRoot = path18.relative(datasetRoot, candidateRealPath);
     if (relativeToRoot.startsWith("..") || path18.isAbsolute(relativeToRoot)) {
       return null;
@@ -7673,14 +7922,14 @@ function parseCsvRows(raw) {
 function isPersonaMemDatasetComplete(datasetPath) {
   try {
     const completionMarkerPath = path18.join(datasetPath, PERSONAMEM_COMPLETION_MARKER);
-    if (fs17.statSync(completionMarkerPath).isFile()) {
+    if (fs19.statSync(completionMarkerPath).isFile()) {
       return true;
     }
   } catch {
   }
   const datasetFile = PERSONAMEM_DATASET_FILE_CANDIDATES.find((candidate) => {
     try {
-      return fs17.statSync(path18.join(datasetPath, candidate)).isFile();
+      return fs19.statSync(path18.join(datasetPath, candidate)).isFile();
     } catch {
       return false;
     }
@@ -7689,7 +7938,7 @@ function isPersonaMemDatasetComplete(datasetPath) {
     return false;
   }
   try {
-    const rows = parseCsvRows(fs17.readFileSync(path18.join(datasetPath, datasetFile), "utf8"));
+    const rows = parseCsvRows(fs19.readFileSync(path18.join(datasetPath, datasetFile), "utf8"));
     if (rows.length < 2) {
       return false;
     }
@@ -7704,7 +7953,7 @@ function isPersonaMemDatasetComplete(datasetPath) {
     }
     return historyPaths.every((relativePath) => {
       const resolvedPath = resolveRealpathWithinDataset(datasetPath, relativePath);
-      return resolvedPath !== null && fs17.statSync(resolvedPath).isFile();
+      return resolvedPath !== null && fs19.statSync(resolvedPath).isFile();
     });
   } catch {
     return false;
@@ -7712,7 +7961,7 @@ function isPersonaMemDatasetComplete(datasetPath) {
 }
 function hasDatasetFile(datasetPath, relativePath) {
   try {
-    return fs17.statSync(path18.join(datasetPath, relativePath)).isFile();
+    return fs19.statSync(path18.join(datasetPath, relativePath)).isFile();
   } catch {
     return false;
   }
@@ -7732,10 +7981,10 @@ function memoryAgentBenchDatasetHasRecSysSamples(datasetPath) {
   return candidateFilenames.some((filename) => {
     const filePath = path18.join(datasetPath, filename);
     try {
-      if (!fs17.statSync(filePath).isFile()) {
+      if (!fs19.statSync(filePath).isFile()) {
         return false;
       }
-      const raw = fs17.readFileSync(filePath, "utf8");
+      const raw = fs19.readFileSync(filePath, "utf8");
       return /"source"\s*:\s*"recsys[_-]/i.test(raw);
     } catch {
       return false;
@@ -7751,7 +8000,7 @@ function isMemoryAgentBenchDatasetComplete(datasetPath) {
 function isDatasetDownloaded(datasetPath, benchmarkId) {
   let stats;
   try {
-    stats = fs17.statSync(datasetPath);
+    stats = fs19.statSync(datasetPath);
   } catch {
     return false;
   }
@@ -7761,7 +8010,7 @@ function isDatasetDownloaded(datasetPath, benchmarkId) {
   const marker = DOWNLOADED_DATASET_MARKERS[benchmarkId];
   if (!marker) {
     try {
-      return fs17.readdirSync(datasetPath).length > 0;
+      return fs19.readdirSync(datasetPath).length > 0;
     } catch {
       return false;
     }
@@ -7769,7 +8018,7 @@ function isDatasetDownloaded(datasetPath, benchmarkId) {
   if (marker.allOf) {
     const hasAllRequiredFiles = marker.allOf.every((name) => {
       try {
-        return fs17.statSync(path18.join(datasetPath, name)).isFile();
+        return fs19.statSync(path18.join(datasetPath, name)).isFile();
       } catch {
         return false;
       }
@@ -7781,7 +8030,7 @@ function isDatasetDownloaded(datasetPath, benchmarkId) {
   if (marker.anyOf) {
     const hasMarkerFile = marker.anyOf.some((name) => {
       try {
-        return fs17.statSync(path18.join(datasetPath, name)).isFile();
+        return fs19.statSync(path18.join(datasetPath, name)).isFile();
       } catch {
         return false;
       }
@@ -7799,7 +8048,7 @@ function isDatasetDownloaded(datasetPath, benchmarkId) {
   }
   if (marker.ext) {
     try {
-      return fs17.readdirSync(datasetPath).some(
+      return fs19.readdirSync(datasetPath).some(
         (name) => name.endsWith(marker.ext) && !marker.exclude?.includes(name)
       );
     } catch {
@@ -7811,7 +8060,7 @@ function isDatasetDownloaded(datasetPath, benchmarkId) {
 async function launchBenchUi(resultsDir) {
   const benchUiDir = path18.join(CLI_REPO_ROOT, "packages", "bench-ui");
   const pnpmCmd = process.platform === "win32" ? "pnpm.cmd" : "pnpm";
-  if (!fs17.existsSync(path18.join(benchUiDir, "package.json"))) {
+  if (!fs19.existsSync(path18.join(benchUiDir, "package.json"))) {
     console.error("ERROR: @remnic/bench-ui is not available in this checkout.");
     process.exit(1);
   }
@@ -7849,13 +8098,13 @@ function listDownloadableBenchmarks() {
 }
 function resolveDatasetDownloadScriptPath() {
   const bundled = path18.join(CLI_MODULE_DIR, "assets", "download-datasets.sh");
-  if (fs17.existsSync(bundled)) {
+  if (fs19.existsSync(bundled)) {
     return bundled;
   }
   return path18.join(CLI_REPO_ROOT, "evals", "scripts", "download-datasets.sh");
 }
 function isRepoCheckout() {
-  return fs17.existsSync(path18.join(CLI_REPO_ROOT, "pnpm-workspace.yaml")) && fs17.existsSync(path18.join(CLI_REPO_ROOT, "evals", "scripts", "download-datasets.sh"));
+  return fs19.existsSync(path18.join(CLI_REPO_ROOT, "pnpm-workspace.yaml")) && fs19.existsSync(path18.join(CLI_REPO_ROOT, "evals", "scripts", "download-datasets.sh"));
 }
 function runDatasetDownloadScript(scriptPath, benchmarkId, datasetRoot, jsonMode) {
   const stdio = jsonMode ? ["inherit", process.stderr, "inherit"] : "inherit";
@@ -8168,8 +8417,8 @@ async function exportBenchPackageResult(parsed) {
     ...reportCardProvenance ? { reportCardProvenance } : {}
   });
   if (parsed.output) {
-    fs17.mkdirSync(path18.dirname(parsed.output), { recursive: true });
-    fs17.writeFileSync(parsed.output, rendered);
+    fs19.mkdirSync(path18.dirname(parsed.output), { recursive: true });
+    fs19.writeFileSync(parsed.output, rendered);
     console.log(`Exported ${summary.id} as ${parsed.format} to ${parsed.output}`);
     return;
   }
@@ -8214,7 +8463,7 @@ async function manageBenchDatasets(parsed) {
     process.exit(1);
   }
   const scriptPath = resolveDatasetDownloadScriptPath();
-  if (!fs17.existsSync(scriptPath)) {
+  if (!fs19.existsSync(scriptPath)) {
     console.error(`ERROR: dataset download script not found: ${scriptPath}`);
     process.exit(1);
   }
@@ -8414,7 +8663,7 @@ async function calibrateBenchJudges(parsed, rawArgs) {
     );
     process.exit(1);
   }
-  const sourceResultSha256 = createHash4("sha256").update(fs17.readFileSync(latest.path)).digest("hex");
+  const sourceResultSha256 = createHash4("sha256").update(fs19.readFileSync(latest.path)).digest("hex");
   const expandedManifestPath = expandTilde(manifestPath);
   if (!bench.resolveLocalLabJudgeProviderConfig) {
     console.error(
@@ -8829,7 +9078,7 @@ function loadPinnedLoCoMoTaskSelector(parsed) {
   }
   let decoded;
   try {
-    decoded = JSON.parse(fs17.readFileSync(parsed.taskIdsFile, "utf8"));
+    decoded = JSON.parse(fs19.readFileSync(parsed.taskIdsFile, "utf8"));
   } catch (error) {
     throw new Error(
       `Unable to read --task-ids-file ${parsed.taskIdsFile}: ${error instanceof Error ? error.message : String(error)}`
@@ -9504,7 +9753,7 @@ function resolveBenchReproDatasetDir(datasetDir) {
     return void 0;
   }
   try {
-    return fs17.realpathSync(datasetDir);
+    return fs19.realpathSync(datasetDir);
   } catch {
     return datasetDir;
   }
@@ -9558,13 +9807,13 @@ async function writeBenchReproManifestForPackageRun(args) {
 }
 function loadStandaloneConvergeCommandConfig() {
   const configPath = resolveConfigPath();
-  const raw = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
-  return parseConfig8(resolveRemnicConfigRecord7(raw));
+  const raw = fs19.existsSync(configPath) ? JSON.parse(fs19.readFileSync(configPath, "utf8")) : {};
+  return parseConfig10(resolveRemnicConfigRecord9(raw));
 }
 function parseConvergePluginConfig(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) return void 0;
   if (Object.keys(value).length === 0) return void 0;
-  return parseConfig8(resolveRemnicConfigRecord7(value));
+  return parseConfig10(resolveRemnicConfigRecord9(value));
 }
 function loadConvergeCommandConfig() {
   if (readCompatEnv("REMNIC_CONFIG_PATH", "ENGRAM_CONFIG_PATH")) {
@@ -9587,13 +9836,13 @@ function resolveConfigPath(cliPath) {
     path18.join(resolveHomeDir(), ".config", "engram", "config.json")
   ];
   for (const candidate of candidates) {
-    if (fs17.existsSync(candidate)) return candidate;
+    if (fs19.existsSync(candidate)) return candidate;
   }
   return path18.join(resolveHomeDir(), ".config", "remnic", "config.json");
 }
 function resolveExistingBenchRemnicConfigPath(cliPath) {
   const configPath = resolveConfigPath(cliPath);
-  if (fs17.existsSync(configPath)) {
+  if (fs19.existsSync(configPath)) {
     return configPath;
   }
   if (cliPath) {
@@ -9603,7 +9852,7 @@ function resolveExistingBenchRemnicConfigPath(cliPath) {
 }
 function resolveExistingBenchOpenclawConfigPath(cliPath) {
   const configPath = resolveOpenclawConfigPath(cliPath);
-  if (fs17.existsSync(configPath)) {
+  if (fs19.existsSync(configPath)) {
     return configPath;
   }
   if (cliPath) {
@@ -9710,8 +9959,8 @@ function resolveMemoryDir() {
     const envMemoryDir = readCompatEnv("REMNIC_MEMORY_DIR", "ENGRAM_MEMORY_DIR");
     if (envMemoryDir) return normalizeMemoryDirPath(envMemoryDir);
     const configPath = resolveConfigPath();
-    const raw = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
-    const remnicCfg = resolveRemnicConfigRecord7(raw);
+    const raw = fs19.existsSync(configPath) ? JSON.parse(fs19.readFileSync(configPath, "utf8")) : {};
+    const remnicCfg = resolveRemnicConfigRecord9(raw);
     if (typeof remnicCfg.memoryDir === "string" && remnicCfg.memoryDir.length > 0) {
       return normalizeMemoryDirPath(remnicCfg.memoryDir);
     }
@@ -9719,18 +9968,18 @@ function resolveMemoryDir() {
     const standalonePath = path18.join(home, ".remnic", "memory");
     const legacyStandalonePath = path18.join(home, ".engram", "memory");
     const openclawPath = path18.join(resolveOpenclawStateDir(), "workspace", "memory", "local");
-    if (fs17.existsSync(standalonePath)) return standalonePath;
-    if (fs17.existsSync(legacyStandalonePath)) return legacyStandalonePath;
+    if (fs19.existsSync(standalonePath)) return standalonePath;
+    if (fs19.existsSync(legacyStandalonePath)) return legacyStandalonePath;
     return openclawPath;
   })();
   const manifestPath = getManifestPath();
-  if (fs17.existsSync(manifestPath)) {
+  if (fs19.existsSync(manifestPath)) {
     try {
       const active = getActiveSpace();
       if (active?.memoryDir) {
         const activeMemoryDir = normalizeMemoryDirPath(active.memoryDir);
-        if (!fs17.existsSync(activeMemoryDir)) {
-          fs17.mkdirSync(activeMemoryDir, { recursive: true });
+        if (!fs19.existsSync(activeMemoryDir)) {
+          fs19.mkdirSync(activeMemoryDir, { recursive: true });
         }
         return activeMemoryDir;
       }
@@ -9779,13 +10028,13 @@ function resolveOpenclawConfigPath(cliPath) {
   const envPath = process.env.OPENCLAW_CONFIG_PATH || process.env.OPENCLAW_ENGRAM_CONFIG_PATH;
   if (envPath) return path18.resolve(expandTilde(envPath));
   for (const candidate of DEFAULT_OPENCLAW_CONFIG_PATHS_FOR_DOCTOR) {
-    if (fs17.existsSync(candidate)) return candidate;
+    if (fs19.existsSync(candidate)) return candidate;
   }
   return path18.join(resolveOpenclawStateDir(), "openclaw.json");
 }
 function readOpenclawConfig(configPath) {
-  if (!fs17.existsSync(configPath)) return {};
-  const raw = fs17.readFileSync(configPath, "utf-8");
+  if (!fs19.existsSync(configPath)) return {};
+  const raw = fs19.readFileSync(configPath, "utf-8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -9887,9 +10136,9 @@ function formatOpenclawUpgradeStamp(now = /* @__PURE__ */ new Date()) {
   return `${yyyy}${mm}${dd}-${hh}${min}${ss}`;
 }
 function backupPathIfPresent(sourcePath, backupPath) {
-  if (!fs17.existsSync(sourcePath)) return false;
-  fs17.mkdirSync(path18.dirname(backupPath), { recursive: true });
-  fs17.cpSync(sourcePath, backupPath, { recursive: true });
+  if (!fs19.existsSync(sourcePath)) return false;
+  fs19.mkdirSync(path18.dirname(backupPath), { recursive: true });
+  fs19.cpSync(sourcePath, backupPath, { recursive: true });
   return true;
 }
 function restartOpenclawGateway() {
@@ -9908,7 +10157,7 @@ function restartOpenclawGateway() {
 }
 function cmdInit() {
   const configPath = path18.join(process.cwd(), "remnic.config.json");
-  if (fs17.existsSync(configPath)) {
+  if (fs19.existsSync(configPath)) {
     console.log(`Config already exists: ${configPath}`);
     return;
   }
@@ -9924,7 +10173,7 @@ function cmdInit() {
       authToken: "${REMNIC_AUTH_TOKEN}"
     }
   };
-  fs17.writeFileSync(configPath, JSON.stringify(template, null, 2) + "\n");
+  fs19.writeFileSync(configPath, JSON.stringify(template, null, 2) + "\n");
   console.log(`Created ${configPath}`);
   console.log("\nSet these environment variables:");
   console.log("  export OPENAI_API_KEY=sk-...");
@@ -10344,12 +10593,12 @@ async function cmdQuery(queryText, json, explain) {
     printQueryResult(result, json);
     return;
   }
-  initLogger3();
+  initLogger5();
   const configPath = resolveConfigPath();
-  const raw = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
-  const remnicCfg = resolveRemnicConfigRecord7(raw);
-  const config = parseConfig8(remnicCfg);
-  const orchestrator = new Orchestrator5(config);
+  const raw = fs19.existsSync(configPath) ? JSON.parse(fs19.readFileSync(configPath, "utf8")) : {};
+  const remnicCfg = resolveRemnicConfigRecord9(raw);
+  const config = parseConfig10(remnicCfg);
+  const orchestrator = new Orchestrator6(config);
   await orchestrator.initialize();
   const service = new EngramAccessService2(orchestrator);
   const recallRequest = buildQueryRecallRequest(queryText);
@@ -10524,12 +10773,12 @@ async function cmdXray(rest) {
     await runXrayCommand(rest, xrayCliIo((request) => remoteRecallXray(remote, request)));
     return;
   }
-  initLogger3();
+  initLogger5();
   const configPath = resolveConfigPath();
-  const raw = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
-  const remnicCfg = resolveRemnicConfigRecord7(raw);
-  const config = parseConfig8(remnicCfg);
-  const orchestrator = new Orchestrator5(config);
+  const raw = fs19.existsSync(configPath) ? JSON.parse(fs19.readFileSync(configPath, "utf8")) : {};
+  const remnicCfg = resolveRemnicConfigRecord9(raw);
+  const config = parseConfig10(remnicCfg);
+  const orchestrator = new Orchestrator6(config);
   await orchestrator.initialize();
   await orchestrator.deferredReady;
   const service = new EngramAccessService2(orchestrator);
@@ -10556,36 +10805,45 @@ async function runWhoKnowsCommand(rest, io) {
   });
   io.stdout(renderWhoKnows(result, parsed.json));
 }
-async function cmdWhoKnows(rest) {
-  const { topic, options } = extractWhoKnowsRawArgs(rest);
-  parseWhoKnowsCliOptions(topic, options);
-  if (resolveRemoteDaemon(resolveConfigPath())) {
-    throw new Error("who-knows: remote daemon mode is not supported yet; run with a local config");
-  }
-  initLogger3();
+async function withLocalService(fn) {
+  initLogger5();
   const configPath = resolveConfigPath();
-  const raw = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
-  const config = parseConfig8(resolveRemnicConfigRecord7(raw));
-  const orchestrator = new Orchestrator5(config);
+  const raw = fs19.existsSync(configPath) ? JSON.parse(fs19.readFileSync(configPath, "utf8")) : {};
+  const orchestrator = new Orchestrator6(parseConfig10(resolveRemnicConfigRecord9(raw)));
   await orchestrator.initialize();
   await orchestrator.deferredReady;
   const service = new EngramAccessService2(orchestrator);
   try {
-    await runWhoKnowsCommand(rest, {
-      whoKnows: (request) => service.whoKnows(request),
-      stdout: (line) => console.log(line)
-    });
+    return await fn(service, orchestrator);
   } finally {
     orchestrator.abortDeferredInit();
     await orchestrator.destroy();
   }
 }
+async function cmdWhoKnows(rest) {
+  const { topic, options } = extractWhoKnowsRawArgs(rest);
+  parseWhoKnowsCliOptions(topic, options);
+  if (resolveRemoteDaemon(resolveConfigPath())) {
+    throw new Error("who-knows: remote daemon mode is not supported yet; run with a local config");
+  }
+  await withLocalService((service) => runWhoKnowsCommand(rest, {
+    whoKnows: (request) => service.whoKnows(request),
+    stdout: (line) => console.log(line)
+  }));
+}
+async function cmdPromotionCandidates(rest) {
+  if (resolveRemoteDaemon(resolveConfigPath())) throw new Error("promotion-candidates: remote daemon mode is not supported yet; run with a local config");
+  await withLocalService((service) => runPromotionCandidatesCommand(rest, {
+    promotionCandidates: (request) => service.promotionCandidates(request),
+    stdout: (line) => console.log(line)
+  }));
+}
 async function cmdVersions(rest) {
-  initLogger3();
+  initLogger5();
   const configPath = resolveConfigPath();
-  const raw = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
-  const remnicCfg = resolveRemnicConfigRecord7(raw);
-  const config = parseConfig8(remnicCfg);
+  const raw = fs19.existsSync(configPath) ? JSON.parse(fs19.readFileSync(configPath, "utf8")) : {};
+  const remnicCfg = resolveRemnicConfigRecord9(raw);
+  const config = parseConfig10(remnicCfg);
   if (!config.versioningEnabled) {
     console.error("Page versioning is disabled (versioningEnabled = false).");
     process.exit(1);
@@ -10697,11 +10955,11 @@ Options:
   }
 }
 async function cmdEnrich(rest) {
-  initLogger3();
+  initLogger5();
   const configPath = resolveConfigPath();
-  const raw = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
-  const remnicCfg = resolveRemnicConfigRecord7(raw);
-  const config = parseConfig8(remnicCfg);
+  const raw = fs19.existsSync(configPath) ? JSON.parse(fs19.readFileSync(configPath, "utf8")) : {};
+  const remnicCfg = resolveRemnicConfigRecord9(raw);
+  const config = parseConfig10(remnicCfg);
   const subcommand = rest[0];
   if (subcommand === "audit") {
     const memoryDir2 = expandTilde(config.memoryDir);
@@ -10729,7 +10987,7 @@ async function cmdEnrich(rest) {
     pipelineConfig2.providers = [
       { id: "web-search", enabled: true, costTier: "cheap" }
     ];
-    const orchestrator2 = new Orchestrator5(config);
+    const orchestrator2 = new Orchestrator6(config);
     await orchestrator2.initialize();
     await orchestrator2.deferredReady;
     const searchBackend2 = orchestrator2.qmd;
@@ -10765,7 +11023,7 @@ Registered providers:`);
     console.error("Usage: remnic enrich <entity-name> | --all | --dry-run | audit | providers");
     process.exit(1);
   }
-  const orchestrator = new Orchestrator5(config);
+  const orchestrator = new Orchestrator6(config);
   await orchestrator.initialize();
   await orchestrator.deferredReady;
   const storage = await orchestrator.getStorage(config.defaultNamespace);
@@ -10890,80 +11148,12 @@ Registered providers:`);
   ${totalPersisted} candidate(s) persisted to memory store.`);
   }
 }
-async function cmdProcedural(rest) {
-  initLogger3();
-  const subcommand = rest[0];
-  if (!subcommand || subcommand === "--help" || subcommand === "-h") {
-    console.log(`remnic procedural \u2014 Procedural memory operations (issue #567)
-
-Usage:
-  remnic procedural stats [--format json|text] [--memory-dir <path>]
-
-Subcommands:
-  stats                Print counts by status + recent activity + active config.
-
-Shared with:
-  GET /engram/v1/procedural/stats
-  MCP remnic.procedural_stats (alias engram.procedural_stats)`);
-    return;
-  }
-  if (subcommand !== "stats") {
-    console.error(
-      `Unknown procedural subcommand "${subcommand}". Run \`remnic procedural --help\` for usage.`
-    );
-    process.exit(1);
-  }
-  const args = rest.slice(1);
-  const formatPresent = hasFlag(args, "--format");
-  const formatRaw = resolveFlag(args, "--format");
-  if (formatPresent && (formatRaw === void 0 || formatRaw === null)) {
-    console.error(
-      "--format requires a value. Use `--format json` or `--format text`."
-    );
-    process.exit(1);
-  }
-  const format = (() => {
-    if (!formatPresent || formatRaw === void 0 || formatRaw === null) {
-      return "text";
-    }
-    const normalized = String(formatRaw).trim().toLowerCase();
-    if (normalized !== "text" && normalized !== "json") {
-      console.error(
-        `Invalid --format "${formatRaw}". Allowed: text, json.`
-      );
-      process.exit(1);
-    }
-    return normalized;
-  })();
-  const memoryDirPresent = hasFlag(args, "--memory-dir");
-  const memoryDirOverride = resolveFlag(args, "--memory-dir");
-  if (memoryDirPresent && (memoryDirOverride === void 0 || memoryDirOverride === null)) {
-    console.error(
-      "--memory-dir requires a path. Omit the flag to use the resolved default."
-    );
-    process.exit(1);
-  }
-  const configPath = resolveConfigPath();
-  const raw = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
-  const remnicCfg = resolveRemnicConfigRecord7(raw);
-  const config = parseConfig8(remnicCfg);
-  const memoryDir = expandTilde(
-    typeof memoryDirOverride === "string" && memoryDirOverride.length > 0 ? memoryDirOverride : config.memoryDir ?? resolveMemoryDir()
-  );
-  const storage = new StorageManager2(memoryDir);
-  const report = await computeProcedureStats({ storage, config });
-  if (format === "json") {
-    process.stdout.write(JSON.stringify(report, null, 2) + "\n");
-    return;
-  }
-  process.stdout.write(formatProcedureStatsText(report));
-}
 async function cmdExtensions(action, rest) {
-  initLogger3();
+  initLogger5();
   const configPath = resolveConfigPath();
-  const raw = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
-  const remnicCfg = resolveRemnicConfigRecord7(raw);
-  const config = parseConfig8(remnicCfg);
+  const raw = fs19.existsSync(configPath) ? JSON.parse(fs19.readFileSync(configPath, "utf8")) : {};
+  const remnicCfg = resolveRemnicConfigRecord9(raw);
+  const config = parseConfig10(remnicCfg);
   const root = resolveExtensionsRoot(config);
   const noopLog = { warn: () => {
   }, debug: () => {
@@ -11012,7 +11202,7 @@ Root: ${root}`);
       const extensions = await discoverMemoryExtensions(root, warnLog);
       let entries = [];
       try {
-        entries = fs17.readdirSync(root);
+        entries = fs19.readdirSync(root);
       } catch {
         console.log(`Extensions root does not exist: ${root}`);
         process.exitCode = 0;
@@ -11023,7 +11213,7 @@ Root: ${root}`);
       for (const entry of entries) {
         const entryPath = path18.join(root, entry);
         try {
-          if (!fs17.statSync(entryPath).isDirectory()) continue;
+          if (!fs19.statSync(entryPath).isDirectory()) continue;
         } catch {
           continue;
         }
@@ -11053,11 +11243,11 @@ Root: ${root}`);
   }
 }
 async function cmdBriefing(rest) {
-  initLogger3();
+  initLogger5();
   const configPath = resolveConfigPath();
-  const raw = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
-  const remnicCfg = resolveRemnicConfigRecord7(raw);
-  const config = parseConfig8(remnicCfg);
+  const raw = fs19.existsSync(configPath) ? JSON.parse(fs19.readFileSync(configPath, "utf8")) : {};
+  const remnicCfg = resolveRemnicConfigRecord9(raw);
+  const config = parseConfig10(remnicCfg);
   if (!config.briefing.enabled) {
     console.error("Briefing is disabled in config (briefing.enabled = false).");
     process.exit(1);
@@ -11110,7 +11300,7 @@ async function cmdBriefing(rest) {
     process.exit(1);
   }
   const format = effectiveFormatFlag === "json" ? "json" : effectiveFormatFlag === "markdown" ? "markdown" : config.briefing.defaultFormat;
-  const orchestrator = new Orchestrator5(config);
+  const orchestrator = new Orchestrator6(config);
   await orchestrator.initialize();
   const storage = await orchestrator.getStorage(config.defaultNamespace);
   const calendarSource = config.briefing.calendarSource ? new FileCalendarSource(config.briefing.calendarSource) : void 0;
@@ -11135,10 +11325,10 @@ async function cmdBriefing(rest) {
   if (save) {
     try {
       const saveDir = resolveBriefingSaveDir(config.briefing.saveDir);
-      fs17.mkdirSync(saveDir, { recursive: true });
+      fs19.mkdirSync(saveDir, { recursive: true });
       const filename = briefingFilename(new Date(result.window.to), format);
       const filePath = path18.join(saveDir, filename);
-      fs17.writeFileSync(filePath, payload + (payload.endsWith("\n") ? "" : "\n"));
+      fs19.writeFileSync(filePath, payload + (payload.endsWith("\n") ? "" : "\n"));
       console.error(`Saved briefing: ${filePath}`);
     } catch (err) {
       console.error(`Failed to save briefing: ${err instanceof Error ? err.message : String(err)}`);
@@ -11156,7 +11346,7 @@ async function cmdDoctor() {
     detail: `${nodeVersion} (requires >= 22.12.0)`
   });
   const configPath = resolveConfigPath();
-  const configExists = fs17.existsSync(configPath);
+  const configExists = fs19.existsSync(configPath);
   checks.push({ name: "Config file", ok: configExists, detail: configPath });
   let standaloneConfig;
   let standaloneConfigError;
@@ -11164,11 +11354,11 @@ async function cmdDoctor() {
   let configuredNs = { invalid: false };
   if (configExists) {
     try {
-      const raw = JSON.parse(fs17.readFileSync(configPath, "utf8"));
-      const remnicCfg = resolveRemnicConfigRecord7(raw);
+      const raw = JSON.parse(fs19.readFileSync(configPath, "utf8"));
+      const remnicCfg = resolveRemnicConfigRecord9(raw);
       standaloneOpenaiApiKeyExplicitlyFalse = isOpenaiApiKeyDisabled(remnicCfg.openaiApiKey);
       configuredNs = readConfiguredNamespace(remnicCfg);
-      standaloneConfig = parseConfig8(remnicCfg);
+      standaloneConfig = parseConfig10(remnicCfg);
     } catch (err) {
       standaloneConfigError = err instanceof Error ? err.message : String(err);
     }
@@ -11177,10 +11367,10 @@ async function cmdDoctor() {
   try {
     memoryDir = resolveMemoryDir();
   } catch {
-    memoryDir = parseConfig8({}).memoryDir;
+    memoryDir = parseConfig10({}).memoryDir;
   }
   try {
-    fs17.mkdirSync(memoryDir, { recursive: true });
+    fs19.mkdirSync(memoryDir, { recursive: true });
     checks.push({ name: "Memory directory", ok: true, detail: memoryDir });
   } catch {
     checks.push({ name: "Memory directory", ok: false, detail: `cannot create ${memoryDir}` });
@@ -11209,7 +11399,7 @@ async function cmdDoctor() {
   });
   if (nsPolicyCheck) checks.push(nsPolicyCheck);
   const openclawConfigPath = resolveOpenclawConfigPath();
-  const openclawConfigExists = fs17.existsSync(openclawConfigPath);
+  const openclawConfigExists = fs19.existsSync(openclawConfigPath);
   let openclawConfig = {};
   let openclawConfigValid = false;
   let openclawPluginModeConfigured = false;
@@ -11217,7 +11407,7 @@ async function cmdDoctor() {
   let activeOpenclawEntryConfig = null;
   if (openclawConfigExists) {
     try {
-      const parsed = JSON.parse(fs17.readFileSync(openclawConfigPath, "utf-8"));
+      const parsed = JSON.parse(fs19.readFileSync(openclawConfigPath, "utf-8"));
       if (typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)) {
         openclawConfig = parsed;
         openclawConfigValid = true;
@@ -11297,9 +11487,9 @@ async function cmdDoctor() {
         let memDirOk = false;
         let memDirDetail = `${resolvedMemDir} (not found)`;
         let memDirRemediation = `Run \`remnic openclaw install --memory-dir "${resolvedMemDir}"\` to create the directory.`;
-        if (fs17.existsSync(resolvedMemDir)) {
+        if (fs19.existsSync(resolvedMemDir)) {
           try {
-            const stat2 = fs17.statSync(resolvedMemDir);
+            const stat2 = fs19.statSync(resolvedMemDir);
             if (stat2.isDirectory()) {
               memDirOk = true;
               memDirDetail = resolvedMemDir;
@@ -11454,12 +11644,12 @@ async function cmdDoctor() {
 }
 function cmdConfig() {
   const configPath = resolveConfigPath();
-  if (!fs17.existsSync(configPath)) {
+  if (!fs19.existsSync(configPath)) {
     console.log("No config file found. Run `remnic init` to create one.");
     return;
   }
   console.log(`Config: ${configPath}`);
-  const rawConfig = fs17.readFileSync(configPath, "utf8");
+  const rawConfig = fs19.readFileSync(configPath, "utf8");
   const redacted = rawConfig.replace(
     /("(?:openaiApiKey|localLlmApiKey|authToken|apiKey|remoteSearchApiKey|meilisearchApiKey|opikApiKey)"\s*:\s*")([^"]*)(")/g,
     "$1[REDACTED]$3"
@@ -11563,13 +11753,13 @@ async function cmdReview(action, rest) {
       console.error("Usage: remnic review <approve|dismiss|flag> <id>");
       process.exit(1);
     }
-    const storage = new StorageManager2(memoryDir);
+    const storage = new StorageManager3(memoryDir);
     const configPath = resolveConfigPath();
     let tombstonesConfig = null;
     try {
-      const rawCfg = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
-      const remnicCfg = resolveRemnicConfigRecord7(rawCfg);
-      const config = parseConfig8(remnicCfg);
+      const rawCfg = fs19.existsSync(configPath) ? JSON.parse(fs19.readFileSync(configPath, "utf8")) : {};
+      const remnicCfg = resolveRemnicConfigRecord9(rawCfg);
+      const config = parseConfig10(remnicCfg);
       tombstonesConfig = {
         enabled: config.tombstonesEnabled,
         semanticMatch: config.tombstonesSemanticMatch,
@@ -12311,7 +12501,7 @@ async function pushOfflineFileContent(args) {
 }
 async function pushOfflineFileContentFromChunkReader(args) {
   const filePath = resolveOfflineDirectHydrationPath(args.memoryDir, args.file.path);
-  const stat2 = fs17.statSync(filePath);
+  const stat2 = fs19.statSync(filePath);
   if (stat2.mtimeMs !== args.file.mtimeMs) {
     throw new Error(`local file changed while pushing offline content: ${args.file.path}`);
   }
@@ -12802,7 +12992,7 @@ function advanceOfflineBaseFilesForSuccessfulPush(options) {
   return [...next.values()].sort((left, right) => left.path.localeCompare(right.path));
 }
 async function runOfflineSyncOnce(options) {
-  fs17.mkdirSync(options.memoryDir, { recursive: true });
+  fs19.mkdirSync(options.memoryDir, { recursive: true });
   let activeStatePath = options.statePath;
   let priorState = await readOfflineSyncState(activeStatePath);
   let syncNamespace = options.namespace ?? priorState?.namespace;
@@ -13435,7 +13625,7 @@ Environment fallbacks:
   const configPath = resolveConfigPath();
   let config;
   try {
-    const rawConfig = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
+    const rawConfig = fs19.existsSync(configPath) ? JSON.parse(fs19.readFileSync(configPath, "utf8")) : {};
     config = parseConfigQuietly(pickOfflineConfigRecord(rawConfig));
   } catch {
     throw new Error(
@@ -13450,7 +13640,7 @@ Environment fallbacks:
   const statePath = statePathExplicit ? path18.resolve(expandTilde(stateOverride)) : remoteUrl !== void 0 ? defaultOfflineSyncStatePath(memoryDir, remoteUrl, namespace) : void 0;
   if (action === "prepare") {
     if (!remoteUrl || !token || !statePath) throw new Error("offline prepare requires remote URL and token");
-    fs17.mkdirSync(memoryDir, { recursive: true });
+    fs19.mkdirSync(memoryDir, { recursive: true });
     const remoteSnapshot = await fetchOfflineSnapshot({
       remoteUrl,
       token,
@@ -13549,7 +13739,7 @@ Environment fallbacks:
     return;
   }
   if (action === "status") {
-    fs17.mkdirSync(memoryDir, { recursive: true });
+    fs19.mkdirSync(memoryDir, { recursive: true });
     const state = statePath ? await readOfflineSyncState(statePath) : null;
     if (state && remoteUrl && statePath) {
       assertOfflineStateMatches({
@@ -13687,7 +13877,7 @@ function cmdDedup(json) {
 function readInstalledConnectorConfig(configPath, fallback) {
   if (!configPath) return fallback;
   try {
-    const parsed = JSON.parse(fs17.readFileSync(configPath, "utf8"));
+    const parsed = JSON.parse(fs19.readFileSync(configPath, "utf8"));
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return fallback;
     const { token: _token, ...config } = parsed;
     return config;
@@ -13865,7 +14055,7 @@ async function cmdConnectors(action, rest, json) {
           const pub = factory();
           const available = await pub.isHostAvailable();
           const extRoot = available ? await pub.resolveExtensionRoot() : "(host not installed)";
-          const extensionExists = available && extRoot ? fs17.existsSync(extRoot) : false;
+          const extensionExists = available && extRoot ? fs19.existsSync(extRoot) : false;
           publisherChecks.push({
             name: `Publisher: ${targetHostId}`,
             ok: !available || extensionExists,
@@ -13939,7 +14129,7 @@ async function cmdConnectors(action, rest, json) {
     let connectorsCfg;
     const configPath = resolveConfigPath();
     try {
-      const raw = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
+      const raw = fs19.existsSync(configPath) ? JSON.parse(fs19.readFileSync(configPath, "utf8")) : {};
       connectorsCfg = parseConfigQuietly(raw).connectors;
     } catch {
       process.stderr.write(
@@ -14013,12 +14203,12 @@ async function cmdConnectors(action, rest, json) {
       process.exitCode = 2;
       return;
     }
-    initLogger3();
+    initLogger5();
     const configPath = resolveConfigPath();
-    const raw = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
-    const remnicCfg = resolveRemnicConfigRecord7(raw);
-    const config = parseConfig8(remnicCfg);
-    const orchestrator = new Orchestrator5(config);
+    const raw = fs19.existsSync(configPath) ? JSON.parse(fs19.readFileSync(configPath, "utf8")) : {};
+    const remnicCfg = resolveRemnicConfigRecord9(raw);
+    const config = parseConfig10(remnicCfg);
+    const orchestrator = new Orchestrator6(config);
     try {
       await orchestrator.initialize();
       await orchestrator.deferredReady;
@@ -14140,9 +14330,9 @@ async function cmdConnectorsMarketplace(subAction, rest, json) {
     console.error(`connectors marketplace: ${err instanceof Error ? err.message : String(err)}`);
     process.exit(1);
   }
-  const rawConfig = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
-  const pluginConfig = resolveRemnicConfigRecord7(rawConfig);
-  const config = parseConfig8(pluginConfig);
+  const rawConfig = fs19.existsSync(configPath) ? JSON.parse(fs19.readFileSync(configPath, "utf8")) : {};
+  const pluginConfig = resolveRemnicConfigRecord9(rawConfig);
+  const config = parseConfig10(pluginConfig);
   if (subAction === "generate") {
     let outputDir;
     try {
@@ -14162,13 +14352,13 @@ async function cmdConnectorsMarketplace(subAction, rest, json) {
   } else if (subAction === "validate") {
     const targetPath = rest.filter((a) => !a.startsWith("--"))[0] ?? path18.join(process.cwd(), "marketplace.json");
     const resolved = path18.resolve(targetPath);
-    if (!fs17.existsSync(resolved)) {
+    if (!fs19.existsSync(resolved)) {
       console.error(`File not found: ${resolved}`);
       process.exit(1);
     }
     let parsed;
     try {
-      parsed = JSON.parse(fs17.readFileSync(resolved, "utf8"));
+      parsed = JSON.parse(fs19.readFileSync(resolved, "utf8"));
     } catch {
       console.error(`Invalid JSON in ${resolved}`);
       process.exit(1);
@@ -14339,12 +14529,14 @@ async function cmdSpace(action, rest, json) {
     }
     const result = await promoteSpace(sourceId, targetId, {
       force: rest.includes("--force"),
-      forceOverwrite: rest.includes("--force-overwrite")
+      forceOverwrite: rest.includes("--force-overwrite"),
+      allowUserSubject: rest.includes("--allow-user-subject")
     });
     if (json) {
       console.log(JSON.stringify(result, null, 2));
     } else {
       console.log(`Promoted ${result.memoriesPromoted} memories`);
+      if (result.subjectWarnings && result.subjectWarnings.length > 0) console.log(`Subject-guard warnings: ${result.subjectWarnings.length} (see --json)`);
       if (result.conflicts.length > 0) console.log(`Conflicts: ${result.conflicts.length}`);
       console.log(`Duration: ${result.durationMs}ms`);
     }
@@ -14367,12 +14559,12 @@ async function cmdSpace(action, rest, json) {
   }
 }
 async function cmdLegacyBenchmark(action, rest, json) {
-  initLogger3();
+  initLogger5();
   const configPath = resolveConfigPath();
-  const raw = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
-  const remnicCfg = resolveRemnicConfigRecord7(raw);
-  const config = parseConfig8(remnicCfg);
-  const orchestrator = new Orchestrator5(config);
+  const raw = fs19.existsSync(configPath) ? JSON.parse(fs19.readFileSync(configPath, "utf8")) : {};
+  const remnicCfg = resolveRemnicConfigRecord9(raw);
+  const config = parseConfig10(remnicCfg);
+  const orchestrator = new Orchestrator6(config);
   const service = new EngramAccessService2(orchestrator);
   const { runBenchSuite, loadBaseline, checkRegression } = await loadBenchModule();
   const benchConfig = {
@@ -14774,7 +14966,7 @@ function readPid() {
 function inferPort() {
   try {
     const configPath = resolveConfigPath();
-    const raw = JSON.parse(fs17.readFileSync(configPath, "utf8"));
+    const raw = JSON.parse(fs19.readFileSync(configPath, "utf8"));
     return raw.server?.port ?? 4318;
   } catch {
     return 4318;
@@ -14869,13 +15061,13 @@ function daemonInstall() {
     process.exit(1);
   }
   const vars = { HOME: home, NODE_PATH: nodePath, REMNIC_SERVER_BIN: serverBin };
-  fs17.mkdirSync(LOGS_DIR, { recursive: true });
+  fs19.mkdirSync(LOGS_DIR, { recursive: true });
   if (isMacOS()) {
     const templatePath = path18.resolve(import.meta.dirname, "../templates/launchd/ai.remnic.daemon.plist");
-    const template = fs17.readFileSync(templatePath, "utf8");
+    const template = fs19.readFileSync(templatePath, "utf8");
     const plist = renderTemplate(template, vars);
-    fs17.mkdirSync(path18.dirname(LAUNCHD_PLIST_PATH), { recursive: true });
-    fs17.writeFileSync(LAUNCHD_PLIST_PATH, plist);
+    fs19.mkdirSync(path18.dirname(LAUNCHD_PLIST_PATH), { recursive: true });
+    fs19.writeFileSync(LAUNCHD_PLIST_PATH, plist);
     try {
       launchdLoadPlist(LAUNCHD_PLIST_PATH);
     } catch (err) {
@@ -14892,10 +15084,10 @@ function daemonInstall() {
     console.log(`  Logs: ${LOGS_DIR}/daemon.log`);
   } else if (isLinux()) {
     const templatePath = path18.resolve(import.meta.dirname, "../templates/systemd/remnic.service");
-    const template = fs17.readFileSync(templatePath, "utf8");
+    const template = fs19.readFileSync(templatePath, "utf8");
     const unit = renderTemplate(template, vars);
-    fs17.mkdirSync(path18.dirname(SYSTEMD_UNIT_PATH), { recursive: true });
-    fs17.writeFileSync(SYSTEMD_UNIT_PATH, unit);
+    fs19.mkdirSync(path18.dirname(SYSTEMD_UNIT_PATH), { recursive: true });
+    fs19.writeFileSync(SYSTEMD_UNIT_PATH, unit);
     try {
       childProcess2.execSync("systemctl --user daemon-reload", { stdio: "pipe" });
     } catch (err) {
@@ -14931,7 +15123,7 @@ function daemonUninstall() {
       } catch {
       }
       try {
-        fs17.unlinkSync(plistPath);
+        fs19.unlinkSync(plistPath);
         removed = true;
         console.log(`Removed launchd service: ${plistPath}`);
       } catch {
@@ -14951,7 +15143,7 @@ function daemonUninstall() {
     let removed = false;
     for (const unitPath of SYSTEMD_UNIT_PATHS) {
       try {
-        fs17.unlinkSync(unitPath);
+        fs19.unlinkSync(unitPath);
         removed = true;
         console.log(`Removed systemd service: ${unitPath}`);
       } catch {
@@ -15018,13 +15210,13 @@ async function daemonStatus() {
   console.log(`  Port:      ${port}`);
   console.log(`  Service:   ${serviceInstalled ? "installed" : "not installed"}`);
   console.log(`  Platform:  ${process.platform}`);
-  console.log(`  PID file:  ${fs17.existsSync(PID_FILE) ? PID_FILE : LEGACY_PID_FILE}`);
-  console.log(`  Log file:  ${fs17.existsSync(LOG_FILE) ? LOG_FILE : LEGACY_LOG_FILE}`);
+  console.log(`  PID file:  ${fs19.existsSync(PID_FILE) ? PID_FILE : LEGACY_PID_FILE}`);
+  console.log(`  Log file:  ${fs19.existsSync(LOG_FILE) ? LOG_FILE : LEGACY_LOG_FILE}`);
   try {
     const configPath = resolveConfigPath();
-    const raw = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
-    const remnicCfg = resolveRemnicConfigRecord7(raw);
-    const config = parseConfig8(remnicCfg);
+    const raw = fs19.existsSync(configPath) ? JSON.parse(fs19.readFileSync(configPath, "utf8")) : {};
+    const remnicCfg = resolveRemnicConfigRecord9(raw);
+    const config = parseConfig10(remnicCfg);
     const extRoot = resolveExtensionsRoot(config);
     const noopLog = { warn: () => {
     }, debug: () => {
@@ -15063,9 +15255,9 @@ function daemonStart() {
       return;
     }
   }
-  fs17.mkdirSync(PID_DIR, { recursive: true });
-  fs17.mkdirSync(LOGS_DIR, { recursive: true });
-  const logStream = fs17.openSync(LOG_FILE, "a");
+  fs19.mkdirSync(PID_DIR, { recursive: true });
+  fs19.mkdirSync(LOGS_DIR, { recursive: true });
+  const logStream = fs19.openSync(LOG_FILE, "a");
   const serverBin = resolveServerBin();
   const isSource = serverBin.endsWith(".ts");
   let cmd;
@@ -15087,7 +15279,7 @@ function daemonStart() {
     }
   });
   child.unref();
-  fs17.writeFileSync(PID_FILE, String(child.pid));
+  fs19.writeFileSync(PID_FILE, String(child.pid));
   console.log(`Started remnic server (pid ${child.pid})`);
   console.log(`  Log: ${LOG_FILE}`);
 }
@@ -15121,11 +15313,11 @@ function daemonStop() {
     console.log("Process not found (cleaning up PID file)");
   }
   try {
-    fs17.unlinkSync(PID_FILE);
+    fs19.unlinkSync(PID_FILE);
   } catch {
   }
   try {
-    fs17.unlinkSync(LEGACY_PID_FILE);
+    fs19.unlinkSync(LEGACY_PID_FILE);
   } catch {
   }
 }
@@ -15251,11 +15443,11 @@ async function promptYesNo(question, defaultYes = true) {
   });
 }
 async function cmdBinary(rest) {
-  initLogger3();
+  initLogger5();
   const configPath = resolveConfigPath();
-  const raw = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
-  const remnicCfg = resolveRemnicConfigRecord7(raw);
-  const config = parseConfig8(remnicCfg);
+  const raw = fs19.existsSync(configPath) ? JSON.parse(fs19.readFileSync(configPath, "utf8")) : {};
+  const remnicCfg = resolveRemnicConfigRecord9(raw);
+  const config = parseConfig10(remnicCfg);
   const memoryDir = resolveMemoryDir();
   const blConfig = {
     enabled: config.binaryLifecycleEnabled,
@@ -15444,7 +15636,7 @@ async function cmdOpenclawInstall(opts) {
   } else if (slotIsActiveLegacy) {
     changes.push(`  Slot left as "${REMNIC_OPENCLAW_LEGACY_PLUGIN_ID}" \u2014 re-run with --yes to activate the new entry`);
   }
-  if (!fs17.existsSync(memoryDir)) changes.push(`+ Will create memory directory: ${memoryDir}`);
+  if (!fs19.existsSync(memoryDir)) changes.push(`+ Will create memory directory: ${memoryDir}`);
   if (hasLegacy && migrateLegacy) {
     changes.push(`~ Legacy '${REMNIC_OPENCLAW_LEGACY_PLUGIN_ID}' entry retained (safe to remove after verifying hooks fire)`);
   }
@@ -15464,8 +15656,8 @@ async function cmdOpenclawInstall(opts) {
 Resulting plugins.slots.memory: ${dryRunPlugins.slots?.memory ?? "(unset)"}`);
     return;
   }
-  if (fs17.existsSync(memoryDir)) {
-    const st = fs17.statSync(memoryDir);
+  if (fs19.existsSync(memoryDir)) {
+    const st = fs19.statSync(memoryDir);
     if (!st.isDirectory()) {
       throw new Error(
         `Cannot use ${memoryDir} as the memory directory \u2014 a file already exists at that path.
@@ -15473,12 +15665,12 @@ Remove it first and re-run, or choose a different path with --memory-dir.`
       );
     }
   } else {
-    fs17.mkdirSync(memoryDir, { recursive: true });
+    fs19.mkdirSync(memoryDir, { recursive: true });
     console.log(`Created memory directory: ${memoryDir}`);
   }
   const configDir = path18.dirname(configPath);
-  if (!fs17.existsSync(configDir)) {
-    fs17.mkdirSync(configDir, { recursive: true });
+  if (!fs19.existsSync(configDir)) {
+    fs19.mkdirSync(configDir, { recursive: true });
   }
   atomicWriteFileSync(configPath, JSON.stringify(updatedConfig, null, 2) + "\n");
   console.log("\nDone! Summary of changes:");
@@ -15507,7 +15699,7 @@ async function cmdOpenclawUpgrade(opts) {
   const legacyPluginDirForBackup = opts.legacyPluginDirForBackup ? resolveOpenclawLegacyPluginDir(opts.legacyPluginDirForBackup) : void 0;
   const fallbackMemoryDir = path18.join(resolveOpenclawStateDir(), "workspace", "memory", "local");
   const packageSpec = buildOpenclawManagedUpgradePackageSpec(opts.version);
-  const configExistedBefore = fs17.existsSync(configPath);
+  const configExistedBefore = fs19.existsSync(configPath);
   const existingConfig = readOpenclawConfig(configPath);
   const { entries, slots } = parseOpenclawPluginState(existingConfig, configPath);
   const preservedMemoryDir = opts.memoryDir ? path18.resolve(expandTilde(opts.memoryDir)) : resolveCurrentOpenclawMemoryDir(entries, slots, fallbackMemoryDir);
@@ -15732,15 +15924,15 @@ async function cmdOpenclawMigrateEngram(opts) {
 }
 function createOpenclawUpgradeBackupDir() {
   const backupsRoot = path18.join(resolveOpenclawStateDir(), "backups");
-  fs17.mkdirSync(backupsRoot, { recursive: true });
-  return fs17.mkdtempSync(path18.join(backupsRoot, `remnic-openclaw-upgrade-${formatOpenclawUpgradeStamp()}-`));
+  fs19.mkdirSync(backupsRoot, { recursive: true });
+  return fs19.mkdtempSync(path18.join(backupsRoot, `remnic-openclaw-upgrade-${formatOpenclawUpgradeStamp()}-`));
 }
 async function cmdTaxonomy(rest) {
-  initLogger3();
+  initLogger5();
   const configPath = resolveConfigPath();
-  const raw = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
-  const remnicCfg = resolveRemnicConfigRecord7(raw);
-  const config = parseConfig8(remnicCfg);
+  const raw = fs19.existsSync(configPath) ? JSON.parse(fs19.readFileSync(configPath, "utf8")) : {};
+  const remnicCfg = resolveRemnicConfigRecord9(raw);
+  const config = parseConfig10(remnicCfg);
   if (!config.taxonomyEnabled) {
     console.error(
       "Taxonomy is disabled in config (taxonomyEnabled = false). Enable it to use taxonomy commands."
@@ -15776,8 +15968,8 @@ async function cmdTaxonomy(rest) {
       console.log(doc);
       if (config.taxonomyAutoGenResolver) {
         const resolverPath = path18.join(config.memoryDir, ".taxonomy", "RESOLVER.md");
-        fs17.mkdirSync(path18.dirname(resolverPath), { recursive: true });
-        fs17.writeFileSync(resolverPath, doc);
+        fs19.mkdirSync(path18.dirname(resolverPath), { recursive: true });
+        fs19.writeFileSync(resolverPath, doc);
         console.error(`Written: ${resolverPath}`);
       }
       break;
@@ -15823,7 +16015,7 @@ async function cmdTaxonomy(rest) {
       if (config.taxonomyAutoGenResolver) {
         const doc = generateResolverDocument(taxonomy);
         const resolverPath = path18.join(config.memoryDir, ".taxonomy", "RESOLVER.md");
-        fs17.writeFileSync(resolverPath, doc);
+        fs19.writeFileSync(resolverPath, doc);
         console.error(`Regenerated: ${resolverPath}`);
       }
       break;
@@ -15854,7 +16046,7 @@ async function cmdTaxonomy(rest) {
       if (config.taxonomyAutoGenResolver) {
         const doc = generateResolverDocument(taxonomy);
         const resolverPath = path18.join(config.memoryDir, ".taxonomy", "RESOLVER.md");
-        fs17.writeFileSync(resolverPath, doc);
+        fs19.writeFileSync(resolverPath, doc);
         console.error(`Regenerated: ${resolverPath}`);
       }
       break;
@@ -16045,12 +16237,12 @@ async function runTrainingExport(args, stdout = process.stdout) {
       `Unknown training-export format "${args.format}". ${validList}`
     );
   }
-  if (!fs17.existsSync(args.memoryDir)) {
+  if (!fs19.existsSync(args.memoryDir)) {
     throw new Error(
       `--memory-dir "${args.memoryDir}" does not exist. Provide the path to an existing memory directory.`
     );
   }
-  if (!fs17.statSync(args.memoryDir).isDirectory()) {
+  if (!fs19.statSync(args.memoryDir).isDirectory()) {
     throw new Error(
       `--memory-dir "${args.memoryDir}" is not a directory. Provide the path to a memory directory, not a file.`
     );
@@ -16136,10 +16328,10 @@ async function runTrainingExport(args, stdout = process.stdout) {
   }
   const formatted = adapter.formatRecords(records);
   const outDir = path18.dirname(args.output);
-  fs17.mkdirSync(outDir, { recursive: true });
+  fs19.mkdirSync(outDir, { recursive: true });
   const tmpPath = `${args.output}.tmp-${process.pid}-${Date.now()}`;
-  fs17.writeFileSync(tmpPath, formatted, "utf-8");
-  fs17.renameSync(tmpPath, args.output);
+  fs19.writeFileSync(tmpPath, formatted, "utf-8");
+  fs19.renameSync(tmpPath, args.output);
   stdout.write(
     `Exported ${records.length} records to ${args.output} (${adapter.name} format)
 `
@@ -16191,6 +16383,9 @@ async function main(argv = process.argv.slice(2)) {
     case "who-knows":
       await cmdWhoKnows(rest);
       break;
+    case "promotion-candidates":
+      await cmdPromotionCandidates(rest);
+      break;
     case "security":
       await cmdSecurity(rest);
       break;
@@ -16314,7 +16509,7 @@ async function main(argv = process.argv.slice(2)) {
             }
           }, 500);
         };
-        fs17.watch(memoryDir, { recursive: true }, (_event, filename) => {
+        fs19.watch(memoryDir, { recursive: true }, (_event, filename) => {
           if (filename && filename.startsWith(".")) return;
           rebuild();
         });
@@ -16322,12 +16517,12 @@ async function main(argv = process.argv.slice(2)) {
         });
       } else if (subAction === "validate") {
         const treeDir = outputDir;
-        if (!fs17.existsSync(treeDir)) {
+        if (!fs19.existsSync(treeDir)) {
           console.error(`Context tree not found at ${treeDir}. Run 'remnic tree generate' first.`);
           process.exit(1);
         }
         const indexPath = path18.join(treeDir, "INDEX.md");
-        if (!fs17.existsSync(indexPath)) {
+        if (!fs19.existsSync(indexPath)) {
           console.error(`INDEX.md missing in ${treeDir}. Tree may be corrupt \u2014 regenerate.`);
           process.exit(1);
         }
@@ -16449,7 +16644,11 @@ Options:
       break;
     }
     case "procedural": {
-      await cmdProcedural(rest);
+      await runProceduralBinaryCommand(rest);
+      break;
+    }
+    case "drift": {
+      await runDriftBinaryCommand(rest);
       break;
     }
     case "extensions": {
@@ -16509,10 +16708,10 @@ Other:
         let wearablesService;
         try {
           const configPath = resolveConfigPath();
-          const raw = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
-          const remnicCfg = resolveRemnicConfigRecord7(raw);
-          const config = parseConfig8(remnicCfg);
-          wearablesOrchestrator = new Orchestrator5(config);
+          const raw = fs19.existsSync(configPath) ? JSON.parse(fs19.readFileSync(configPath, "utf8")) : {};
+          const remnicCfg = resolveRemnicConfigRecord9(raw);
+          const config = parseConfig10(remnicCfg);
+          wearablesOrchestrator = new Orchestrator6(config);
           await wearablesOrchestrator.initialize();
           await wearablesOrchestrator.deferredReady;
           wearablesService = wearablesOrchestrator.getWearablesService();
@@ -16567,10 +16766,10 @@ Other:
       const targetFactory = async () => {
         if (!orchestratorSingleton) {
           const configPath = resolveConfigPath();
-          const raw = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
-          const remnicCfg = resolveRemnicConfigRecord7(raw);
-          const config = parseConfig8(remnicCfg);
-          orchestratorSingleton = new Orchestrator5(config);
+          const raw = fs19.existsSync(configPath) ? JSON.parse(fs19.readFileSync(configPath, "utf8")) : {};
+          const remnicCfg = resolveRemnicConfigRecord9(raw);
+          const config = parseConfig10(remnicCfg);
+          orchestratorSingleton = new Orchestrator6(config);
           await orchestratorSingleton.initialize();
           await orchestratorSingleton.deferredReady;
         }
@@ -16821,6 +17020,17 @@ Usage:
     Print procedural memory stats (counts + recency + config). Mirrors
     GET /engram/v1/procedural/stats and remnic.procedural_stats MCP tool
     (issue #567).
+  remnic procedural maintain [--apply] [--format json|text] [--memory-dir <path>]
+    Run procedure library-health maintenance (issue #2370): shadow report of
+    merge / repair-flag / retire proposals from outcome telemetry; --apply
+    executes them (requires procedural.maintenance.enabled). Mirrors the
+    remnic.procedure_library_maintenance MCP tool.
+  remnic drift scan [--apply] [--namespace <ns>] [--format json|text] [--memory-dir <path>]
+    Run preference drift detection (issue #2371): classify aging preference
+    memories as corroborated / stale / drifted from recent evidence; --apply
+    stamps lastCorroborated / driftState and opens a review item per drifted
+    preference (requires driftDetection.enabled). Mirrors the
+    remnic.preference_drift_scan MCP tool.
   remnic training:export --format <name> --output <path> [options]
     Export memories as a fine-tuning dataset (issue #459). Run
     'remnic training:export --help' for the full option list.