@remnic/cli 9.66.1 → 9.66.3

package/dist/index.js

@@ -18,7 +18,7 @@ async function persistEnrichmentCandidate(storage, entityName, candidate) {
 }
 
 // src/index.ts
-import fs26 from "fs";
+import fs28 from "fs";
 import os3 from "os";
 import path19 from "path";
 import { createHash as createHash4 } from "crypto";
@@ -588,45 +588,9 @@ async function runJournalBinaryCommand(rest) {
   }
 }
 
-// src/commands/external-wiki.ts
+// src/commands/journal-vault.ts
 import fs10 from "fs";
-import { parseConfig as parseConfig10, resolveRemnicConfigRecord as resolveRemnicConfigRecord10, runExternalWikiCliCommand } from "@remnic/core";
-async function runExternalWikiBinaryCommand(rest) {
-  let roots;
-  try {
-    const configPath = resolveConfigPath();
-    const raw = fs10.existsSync(configPath) ? JSON.parse(fs10.readFileSync(configPath, "utf8")) : {};
-    roots = parseConfig10(resolveRemnicConfigRecord10(raw)).externalWikis;
-  } catch {
-    console.error(
-      "external-wiki: failed to load the Remnic config - run `remnic doctor` and check the config file for errors"
-    );
-    process.exitCode = 1;
-    return;
-  }
-  try {
-    const code = await runExternalWikiCliCommand(roots, rest, {
-      stdout: process.stdout,
-      stderr: process.stderr
-    });
-    if (code !== 0) process.exitCode = code;
-  } catch {
-    console.error("external-wiki: search failed");
-    process.exitCode = 1;
-  }
-}
-
-// src/commands/procedural.ts
-import fs11 from "fs";
-import {
-  StorageManager,
-  computeProcedureStats,
-  formatProcedureStatsText,
-  initLogger,
-  parseConfig as parseConfig11,
-  resolveRemnicConfigRecord as resolveRemnicConfigRecord11,
-  runProcedureLibraryMaintenance
-} from "@remnic/core";
+import { readVaultJournal } from "@remnic/core";
 
 // src/cli-args.ts
 function resolveFlag(args, flag) {
@@ -684,6 +648,324 @@ function parseTaxonomyResolveArgs(args, booleanFlags = TAXONOMY_RESOLVE_BOOLEAN_
   return { textParts, values, booleans };
 }
 
+// src/commands/journal-vault.ts
+var defaultIo = {
+  stdout: (line) => {
+    process.stdout.write(`${line}
+`);
+  },
+  stderr: (line) => {
+    process.stderr.write(`${line}
+`);
+  }
+};
+function journalVaultHelp() {
+  return `Usage: remnic journal-vault show --file <path> --section <heading>
+
+  show  Print the stripped journal section. Missing file or heading prints exists:false.
+`;
+}
+function runJournalVaultCommand(rest, io = defaultIo) {
+  if (rest.length === 0 || rest[0] === "--help" || rest[0] === "-h" || rest[0] === "help") {
+    io.stdout(journalVaultHelp().trimEnd());
+    return 0;
+  }
+  if (rest[0] !== "show") {
+    io.stderr(`journal-vault: unknown action "${rest[0]}".`);
+    io.stderr(journalVaultHelp().trimEnd());
+    return 1;
+  }
+  const filePath = resolveFlag(rest, "--file");
+  const section = resolveFlag(rest, "--section");
+  if (filePath === void 0 || section === void 0) {
+    io.stderr("journal-vault: show requires --file <path> and --section <heading>");
+    return 1;
+  }
+  let fileText = null;
+  try {
+    fileText = fs10.readFileSync(filePath, "utf8");
+  } catch (err) {
+    if (err.code !== "ENOENT") {
+      io.stderr(err instanceof Error ? err.message : String(err));
+      return 1;
+    }
+  }
+  const result = readVaultJournal({ fileText, journalSection: section });
+  if (!result.ok) {
+    io.stderr(`journal-vault: duplicate heading at lines ${result.lines.join(", ")}`);
+    return 1;
+  }
+  if (!result.exists) {
+    io.stdout("exists:false");
+    return 0;
+  }
+  io.stdout(result.text);
+  return 0;
+}
+async function runJournalVaultBinaryCommand(rest) {
+  const code = runJournalVaultCommand(rest);
+  if (code !== 0) process.exitCode = code;
+}
+
+// src/commands/activity-privacy.ts
+import { parseFlexibleIsoTimestamp, shouldRetain } from "@remnic/core";
+var defaultIo2 = {
+  stdout: (line) => {
+    process.stdout.write(`${line}
+`);
+  },
+  stderr: (line) => {
+    process.stderr.write(`${line}
+`);
+  }
+};
+function activityPrivacyHelp() {
+  return `Usage: remnic activity-privacy retain --captured <iso> --now <iso> --days <n> [--enabled <true|false>]
+
+  retain  Print retain=true or retain=false. --days 0 keeps forever.
+`;
+}
+function parseEnabled(rest, io) {
+  const raw = resolveFlag(rest, "--enabled");
+  if (raw === void 0) {
+    if (hasFlag(rest, "--enabled")) {
+      io.stderr("activity-privacy: --enabled requires true or false");
+      return void 0;
+    }
+    return true;
+  }
+  if (raw === "true") return true;
+  if (raw === "false") return false;
+  io.stderr("activity-privacy: --enabled must be true or false");
+  return void 0;
+}
+function runActivityPrivacyCommand(rest, io = defaultIo2) {
+  if (rest.length === 0 || rest[0] === "--help" || rest[0] === "-h" || rest[0] === "help") {
+    io.stdout(activityPrivacyHelp().trimEnd());
+    return 0;
+  }
+  if (rest[0] !== "retain") {
+    io.stderr(`activity-privacy: unknown action "${rest[0]}".`);
+    io.stderr(activityPrivacyHelp().trimEnd());
+    return 1;
+  }
+  const capturedRaw = resolveFlag(rest, "--captured");
+  const nowRaw = resolveFlag(rest, "--now");
+  const daysRaw = resolveFlag(rest, "--days");
+  if (capturedRaw === void 0 || nowRaw === void 0 || daysRaw === void 0) {
+    io.stderr("activity-privacy: retain requires --captured <iso>, --now <iso>, and --days <n>");
+    return 1;
+  }
+  const capturedAtMs = parseFlexibleIsoTimestamp(capturedRaw);
+  const nowMs = parseFlexibleIsoTimestamp(nowRaw);
+  if (capturedAtMs === null || nowMs === null) {
+    io.stderr("activity-privacy: --captured and --now must be ISO timestamps");
+    return 1;
+  }
+  const days = Number(daysRaw);
+  if (!Number.isInteger(days) || days < 0) {
+    io.stderr("activity-privacy: --days must be a non-negative integer");
+    return 1;
+  }
+  const enabled = parseEnabled(rest, io);
+  if (enabled === void 0) return 1;
+  io.stdout(`retain=${shouldRetain(capturedAtMs, nowMs, days, enabled)}`);
+  return 0;
+}
+async function runActivityPrivacyBinaryCommand(rest) {
+  const code = runActivityPrivacyCommand(rest);
+  if (code !== 0) process.exitCode = code;
+}
+
+// src/commands/activity-export.ts
+import { observationsForExport, parseActivityPrivacy, parseFlexibleIsoTimestamp as parseFlexibleIsoTimestamp2 } from "@remnic/core";
+var defaultIo3 = {
+  stdout: (line) => {
+    process.stdout.write(`${line}
+`);
+  },
+  stderr: (line) => {
+    process.stderr.write(`${line}
+`);
+  }
+};
+function activityExportHelp() {
+  return `Usage: remnic activity-export --from <iso> [--to <iso>] [--format json] [--enabled <true|false>]
+
+  Print a JSON array of {id, capturedAt} in the half-open [from, to) window.
+`;
+}
+function parseEnabled2(rest, io) {
+  const raw = resolveFlag(rest, "--enabled");
+  if (raw === void 0) {
+    if (hasFlag(rest, "--enabled")) {
+      io.stderr("activity-export: --enabled requires true or false");
+      return void 0;
+    }
+    return true;
+  }
+  if (raw === "true") return true;
+  if (raw === "false") return false;
+  io.stderr("activity-export: --enabled must be true or false");
+  return void 0;
+}
+function runActivityExportCommand(rest, io = defaultIo3, items = [], nowMs = Date.now()) {
+  if (rest.length === 0 || rest[0] === "--help" || rest[0] === "-h" || rest[0] === "help") {
+    io.stdout(activityExportHelp().trimEnd());
+    return 0;
+  }
+  const fromRaw = resolveFlag(rest, "--from");
+  if (fromRaw === void 0) {
+    io.stderr("activity-export: --from <iso> is required");
+    return 1;
+  }
+  const fromMs = parseFlexibleIsoTimestamp2(fromRaw);
+  if (fromMs === null) {
+    io.stderr("activity-export: --from must be an ISO timestamp");
+    return 1;
+  }
+  const toRaw = resolveFlag(rest, "--to");
+  let toMs;
+  if (toRaw === void 0) {
+    if (hasFlag(rest, "--to")) {
+      io.stderr("activity-export: --to requires an ISO timestamp");
+      return 1;
+    }
+    toMs = nowMs;
+  } else {
+    const parsed = parseFlexibleIsoTimestamp2(toRaw);
+    if (parsed === null) {
+      io.stderr("activity-export: --to must be an ISO timestamp");
+      return 1;
+    }
+    toMs = parsed;
+  }
+  const format = resolveFlag(rest, "--format");
+  if (format === void 0) {
+    if (hasFlag(rest, "--format")) {
+      io.stderr("activity-export: --format requires json");
+      return 1;
+    }
+  } else if (format !== "json") {
+    io.stderr("activity-export: --format must be json");
+    return 1;
+  }
+  const enabled = parseEnabled2(rest, io);
+  if (enabled === void 0) return 1;
+  const policy = parseActivityPrivacy({ enabled, exportIncludeObservations: true });
+  const exported = observationsForExport(items, policy).filter((item) => {
+    const at = parseFlexibleIsoTimestamp2(item.capturedAt);
+    return at !== null && at >= fromMs && at < toMs;
+  }).map((item) => ({ id: item.id, capturedAt: item.capturedAt }));
+  io.stdout(JSON.stringify(exported));
+  return 0;
+}
+async function runActivityExportBinaryCommand(rest) {
+  const code = runActivityExportCommand(rest);
+  if (code !== 0) process.exitCode = code;
+}
+
+// src/commands/vault-publish.ts
+import fs11 from "fs";
+import { applyManagedRegion } from "@remnic/core";
+var defaultIo4 = {
+  stdout: (line) => {
+    process.stdout.write(`${line}
+`);
+  },
+  stderr: (line) => {
+    process.stderr.write(`${line}
+`);
+  }
+};
+function vaultPublishHelp() {
+  return `Usage: remnic vault-publish apply --file <path> --name <region> --content <text>
+
+  apply  Replace the marked region. Missing markers print no_marker.
+`;
+}
+function runVaultPublishCommand(rest, io = defaultIo4) {
+  if (rest.length === 0 || rest[0] === "--help" || rest[0] === "-h" || rest[0] === "help") {
+    io.stdout(vaultPublishHelp().trimEnd());
+    return 0;
+  }
+  if (rest[0] !== "apply") {
+    io.stderr(`vault-publish: unknown action "${rest[0]}".`);
+    io.stderr(vaultPublishHelp().trimEnd());
+    return 1;
+  }
+  const filePath = resolveFlag(rest, "--file");
+  const name = resolveFlag(rest, "--name");
+  const content = resolveFlag(rest, "--content");
+  if (filePath === void 0 || name === void 0 || content === void 0) {
+    io.stderr("vault-publish: apply requires --file <path>, --name <region>, and --content <text>");
+    return 1;
+  }
+  let fileText;
+  try {
+    fileText = fs11.readFileSync(filePath, "utf8");
+  } catch (err) {
+    if (err.code === "ENOENT") {
+      io.stderr("missing_file");
+      return 1;
+    }
+    io.stderr(err instanceof Error ? err.message : String(err));
+    return 1;
+  }
+  const applied = applyManagedRegion(fileText, { strategy: "markers", name, content });
+  if (!applied.ok) {
+    io.stderr(applied.reason);
+    return 1;
+  }
+  if (applied.text !== fileText) fs11.writeFileSync(filePath, applied.text);
+  io.stdout("ok");
+  return 0;
+}
+async function runVaultPublishBinaryCommand(rest) {
+  const code = runVaultPublishCommand(rest);
+  if (code !== 0) process.exitCode = code;
+}
+
+// src/commands/external-wiki.ts
+import fs12 from "fs";
+import { parseConfig as parseConfig10, resolveRemnicConfigRecord as resolveRemnicConfigRecord10, runExternalWikiCliCommand } from "@remnic/core";
+async function runExternalWikiBinaryCommand(rest) {
+  let roots;
+  try {
+    const configPath = resolveConfigPath();
+    const raw = fs12.existsSync(configPath) ? JSON.parse(fs12.readFileSync(configPath, "utf8")) : {};
+    roots = parseConfig10(resolveRemnicConfigRecord10(raw)).externalWikis;
+  } catch {
+    console.error(
+      "external-wiki: failed to load the Remnic config - run `remnic doctor` and check the config file for errors"
+    );
+    process.exitCode = 1;
+    return;
+  }
+  try {
+    const code = await runExternalWikiCliCommand(roots, rest, {
+      stdout: process.stdout,
+      stderr: process.stderr
+    });
+    if (code !== 0) process.exitCode = code;
+  } catch {
+    console.error("external-wiki: search failed");
+    process.exitCode = 1;
+  }
+}
+
+// src/commands/procedural.ts
+import fs13 from "fs";
+import {
+  StorageManager,
+  computeProcedureStats,
+  formatProcedureStatsText,
+  initLogger,
+  parseConfig as parseConfig11,
+  resolveRemnicConfigRecord as resolveRemnicConfigRecord11,
+  runProcedureLibraryMaintenance
+} from "@remnic/core";
+
 // src/path-utils.ts
 function resolveHomeDir() {
   return process.env.HOME ?? process.env.USERPROFILE ?? "~";
@@ -755,7 +1037,7 @@ Shared with:
     process.exit(1);
   }
   const configPath = resolveConfigPath();
-  const raw = fs11.existsSync(configPath) ? JSON.parse(fs11.readFileSync(configPath, "utf8")) : {};
+  const raw = fs13.existsSync(configPath) ? JSON.parse(fs13.readFileSync(configPath, "utf8")) : {};
   const config = parseConfig11(resolveRemnicConfigRecord11(raw));
   const memoryDir = expandTilde(
     typeof memoryDirOverride === "string" && memoryDirOverride.length > 0 ? memoryDirOverride : config.memoryDir ?? resolveMemoryDir()
@@ -811,7 +1093,7 @@ function formatProcedureMaintenanceText(report) {
 }
 
 // src/commands/drift.ts
-import fs12 from "fs";
+import fs14 from "fs";
 import {
   Orchestrator as Orchestrator7,
   initLogger as initLogger2,
@@ -876,7 +1158,7 @@ Resolve a drifted item with the existing review surface:
     process.exit(1);
   }
   const configPath = resolveConfigPath();
-  const raw = fs12.existsSync(configPath) ? JSON.parse(fs12.readFileSync(configPath, "utf8")) : {};
+  const raw = fs14.existsSync(configPath) ? JSON.parse(fs14.readFileSync(configPath, "utf8")) : {};
   const config = parseConfig12(resolveRemnicConfigRecord12(raw));
   const memoryDirOverridden = typeof memoryDirOverride === "string" && memoryDirOverride.length > 0;
   const memoryDir = expandTilde(
@@ -940,6 +1222,104 @@ function formatPreferenceDriftText(report) {
   return lines.join("\n") + "\n";
 }
 
+// src/commands/recall-navigate.ts
+import {
+  expandRecallNode,
+  traverseRecallLink
+} from "@remnic/core";
+var RECALL_NAV_UNAVAILABLE_TAG = "[unavailable] budget_off";
+function recallNavigateHelp() {
+  return `Usage: remnic recall <expand|traverse> --node <json> [--budget <n>] [--type <linkType>]
+
+  expand    Re-render one node at the next disclosure level
+  traverse  Follow typed links from a node
+
+  --budget 0 turns navigation off and prints ${RECALL_NAV_UNAVAILABLE_TAG}
+  --type    required for traverse: supports, contradicts, elaborates, supersedes, causes
+`;
+}
+function takeFlag5(rest, name) {
+  const index = rest.indexOf(name);
+  if (index < 0) return void 0;
+  const value = rest[index + 1];
+  if (value === void 0 || value.startsWith("-")) {
+    throw new Error(`${name} requires a value`);
+  }
+  return value;
+}
+function parseBudget(rest) {
+  if (!rest.includes("--budget")) return 1;
+  const raw = takeFlag5(rest, "--budget");
+  const budget = Number(raw);
+  if (!Number.isFinite(budget)) {
+    throw new Error(`--budget must be a number (got ${JSON.stringify(raw)})`);
+  }
+  return budget;
+}
+function parseNode(raw) {
+  let value;
+  try {
+    value = JSON.parse(raw);
+  } catch {
+    throw new Error("--node must be JSON");
+  }
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("--node must be a JSON object");
+  }
+  const node = value;
+  if (typeof node.id !== "string" || node.id.length === 0) {
+    throw new Error("--node.id must be a non-empty string");
+  }
+  if (typeof node.disclosure !== "string") {
+    throw new Error("--node.disclosure is required");
+  }
+  return node;
+}
+function emitUnavailable(io) {
+  io.stdout(RECALL_NAV_UNAVAILABLE_TAG);
+  return 0;
+}
+function runRecallNavigate(rest, io) {
+  const action = rest[0];
+  if (rest.length === 0 || action === "--help" || action === "-h" || action === "help") {
+    io.stdout(recallNavigateHelp());
+    return 0;
+  }
+  try {
+    const budget = parseBudget(rest);
+    const nodeRaw = takeFlag5(rest, "--node");
+    if (nodeRaw === void 0) throw new Error("--node is required");
+    const node = parseNode(nodeRaw);
+    if (action === "expand") {
+      const result = expandRecallNode(node, { budget });
+      if (result.status === "unavailable") return emitUnavailable(io);
+      io.stdout(JSON.stringify(result));
+      return 0;
+    }
+    if (action === "traverse") {
+      const linkType = takeFlag5(rest, "--type");
+      if (linkType === void 0) throw new Error("traverse requires --type");
+      const result = traverseRecallLink(node, linkType, { budget });
+      if (result.status === "unavailable") return emitUnavailable(io);
+      io.stdout(JSON.stringify(result));
+      return 0;
+    }
+    io.stderr(`recall: unknown action "${action}".`);
+    io.stderr(recallNavigateHelp());
+    return 1;
+  } catch (err) {
+    io.stderr(err instanceof Error ? err.message : String(err));
+    return 1;
+  }
+}
+async function runRecallNavigateCommand(rest) {
+  const code = runRecallNavigate(rest, {
+    stdout: (line) => console.log(line),
+    stderr: (line) => console.error(line)
+  });
+  if (code !== 0) process.exitCode = code;
+}
+
 // src/optional-module-loader.ts
 function isSpecifierNotFoundError(err, specifier) {
   if (!err || typeof err !== "object") {
@@ -990,7 +1370,7 @@ async function loadWecloneExportModule() {
 }
 
 // src/converge.ts
-import * as fs14 from "fs";
+import * as fs16 from "fs";
 import { createHash as createHash3 } from "crypto";
 import * as path3 from "path";
 import {
@@ -1022,7 +1402,7 @@ import {
 
 // src/offline-storage-io.ts
 import { createDecipheriv, createHash } from "crypto";
-import fs13 from "fs";
+import fs15 from "fs";
 import { lstat, mkdtemp, readdir, rm } from "fs/promises";
 import path2 from "path";
 import {
@@ -1184,7 +1564,7 @@ async function* readOfflineSyncFileChunks(options) {
   });
 }
 async function readFilePrefix(filePath, length) {
-  const handle = await fs13.promises.open(filePath, "r");
+  const handle = await fs15.promises.open(filePath, "r");
   try {
     const out = Buffer.alloc(length);
     const { bytesRead } = await handle.read(out, 0, length, 0);
@@ -1194,7 +1574,7 @@ async function readFilePrefix(filePath, length) {
   }
 }
 async function* readPlainOfflineFileChunks(filePath, chunkSize) {
-  const stream = fs13.createReadStream(filePath, { highWaterMark: chunkSize });
+  const stream = fs15.createReadStream(filePath, { highWaterMark: chunkSize });
   for await (const chunk of stream) {
     yield Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
   }
@@ -1231,9 +1611,9 @@ async function* readEncryptedOfflineFileChunks(options) {
       });
       decipher.setAuthTag(authTag);
       decipher.setAAD(Buffer.concat([secureStoreEnvelopeHeaderAad(salt), aad]));
-      const output = fs13.createWriteStream(tempPath, { mode: 384 });
+      const output = fs15.createWriteStream(tempPath, { mode: 384 });
       try {
-        const stream = fs13.createReadStream(options.filePath, {
+        const stream = fs15.createReadStream(options.filePath, {
           start: MAGIC_HEADER_SIZE + ENVELOPE_HEADER_SIZE,
           highWaterMark: options.chunkSize
         });
@@ -1843,7 +2223,7 @@ async function readLocalTombstoneEvidence(rootDir) {
   for (const relativePath of TOMBSTONE_PATHS) {
     let content;
     try {
-      content = await fs14.promises.readFile(path3.join(rootDir, relativePath), "utf-8");
+      content = await fs16.promises.readFile(path3.join(rootDir, relativePath), "utf-8");
     } catch (error) {
       if (error.code === "ENOENT") continue;
       throw error;
@@ -1858,7 +2238,7 @@ async function discoverCursorNamespaces(memoryDir, peerUrl) {
   const cursorDir = path3.join(path3.resolve(memoryDir), ".remnic", "state", "converge-cursors");
   let entries;
   try {
-    entries = await fs14.promises.readdir(cursorDir, { withFileTypes: true });
+    entries = await fs16.promises.readdir(cursorDir, { withFileTypes: true });
   } catch (error) {
     if (error.code === "ENOENT") return [];
     throw error;
@@ -2348,7 +2728,7 @@ async function executeConvergeApply(options = {}) {
             if (current.sha256 !== entry.localSha256) {
               throw new Error(`local file changed during push: ${localPath}`);
             }
-            const stat2 = await fs14.promises.stat(filePath);
+            const stat2 = await fs16.promises.stat(filePath);
             let chunks;
             let chunkOffset = 0;
             const resetChunks = async () => {
@@ -2831,7 +3211,7 @@ function renderReplayResult(result, targetNamespace, format) {
 }
 
 // src/quarantine-replay.ts
-import * as fs15 from "fs";
+import * as fs17 from "fs";
 import { EngramAccessService, Orchestrator as Orchestrator8, initLogger as initLogger3, parseConfig as parseConfig14, resolveRemnicConfigRecord as resolveRemnicConfigRecord13 } from "@remnic/core";
 import { WriteQuarantineStore } from "@remnic/core/write-quarantine.js";
 function valueFlag(args, flag) {
@@ -2880,7 +3260,7 @@ async function runQuarantineReplay(rest, format, resolveConfigPath2) {
   let orchestrator;
   try {
     const configPath = resolveConfigPath2();
-    const raw = fs15.existsSync(configPath) ? JSON.parse(fs15.readFileSync(configPath, "utf8")) : {};
+    const raw = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
     const config = parseConfig14(resolveRemnicConfigRecord13(raw));
     orchestrator = new Orchestrator8(config);
     await orchestrator.initialize();
@@ -2912,7 +3292,7 @@ async function runQuarantineReplay(rest, format, resolveConfigPath2) {
 }
 
 // src/offline-impression-rotation.ts
-import fs16 from "fs";
+import fs18 from "fs";
 import { parseConfig as parseConfig15, resolveRemnicConfigRecord as resolveRemnicConfigRecord14, drainPendingImpressionsForOfflineSync } from "@remnic/core";
 import { LastRecallStore } from "@remnic/core/recall-state";
 function parseConfigQuietly(raw) {
@@ -2947,7 +3327,7 @@ function pickOfflineConfigRecord(raw) {
 function resolveOfflineImpressionRotation(configPath) {
   let raw;
   try {
-    raw = fs16.existsSync(configPath) ? JSON.parse(fs16.readFileSync(configPath, "utf8")) : {};
+    raw = fs18.existsSync(configPath) ? JSON.parse(fs18.readFileSync(configPath, "utf8")) : {};
   } catch {
     throw new Error(
       `cannot read recall-impression rotation from ${configPath}: config file could not be read as JSON`
@@ -3205,7 +3585,7 @@ function assertBenchModuleFreshForDevelopment() {
 }
 
 // src/cmd-security.ts
-import fs17 from "fs";
+import fs19 from "fs";
 import {
   Orchestrator as Orchestrator9,
   parseConfig as parseConfig16,
@@ -3225,7 +3605,7 @@ async function cmdSecurity(rest) {
   }
   initLogger4();
   const configPath = resolveConfigPath();
-  const raw = fs17.existsSync(configPath) ? JSON.parse(fs17.readFileSync(configPath, "utf8")) : {};
+  const raw = fs19.existsSync(configPath) ? JSON.parse(fs19.readFileSync(configPath, "utf8")) : {};
   const config = parseConfig16(resolveRemnicConfigRecord15(raw));
   const orchestrator = new Orchestrator9(config);
   await orchestrator.initialize();
@@ -3250,7 +3630,7 @@ async function cmdSecurity(rest) {
 }
 
 // src/daemon-service-candidates.ts
-import fs18 from "fs";
+import fs20 from "fs";
 import path6 from "path";
 var LAUNCHD_LABEL = "ai.remnic.daemon";
 var LEGACY_REMNIC_SERVER_LAUNCHD_LABEL = "ai.remnic.server";
@@ -3272,7 +3652,7 @@ function systemdUnitPaths(homeDir) {
 function anyFileExists(paths) {
   return paths.some((candidate) => {
     try {
-      return fs18.statSync(candidate).isFile();
+      return fs20.statSync(candidate).isFile();
     } catch {
       return false;
     }
@@ -3284,7 +3664,7 @@ function commandNames(command) {
 }
 function isRunnableNodeScript(filePath) {
   try {
-    const text = fs18.readFileSync(filePath, "utf8").slice(0, 4096);
+    const text = fs20.readFileSync(filePath, "utf8").slice(0, 4096);
     const firstLine = text.split(/\r?\n/, 1)[0] ?? "";
     if (/^#!.*\bnode\b/.test(firstLine)) return true;
     if (firstLine.startsWith("#!")) return false;
@@ -3297,7 +3677,7 @@ function isRunnableNodeScript(filePath) {
 function resolveShimNodeScript(filePath) {
   let text;
   try {
-    text = fs18.readFileSync(filePath, "utf8").slice(0, 16384);
+    text = fs20.readFileSync(filePath, "utf8").slice(0, 16384);
   } catch {
     return void 0;
   }
@@ -3309,8 +3689,8 @@ function resolveShimNodeScript(filePath) {
     const candidate = raw.replaceAll("${basedir}", basedir).replaceAll("$basedir", basedir).replaceAll("\\ ", " ");
     const resolved = path6.isAbsolute(candidate) ? candidate : path6.resolve(basedir, candidate);
     try {
-      if (fs18.statSync(resolved).isFile() && isRunnableNodeScript(resolved)) {
-        return fs18.realpathSync(resolved);
+      if (fs20.statSync(resolved).isFile() && isRunnableNodeScript(resolved)) {
+        return fs20.realpathSync(resolved);
       }
     } catch {
     }
@@ -3318,7 +3698,7 @@ function resolveShimNodeScript(filePath) {
   return void 0;
 }
 function resolveRunnableNodeScript(filePath) {
-  const realPath = fs18.realpathSync(filePath);
+  const realPath = fs20.realpathSync(filePath);
   if (isRunnableNodeScript(realPath)) return realPath;
   return resolveShimNodeScript(realPath);
 }
@@ -3328,9 +3708,9 @@ function findCommandOnPath(command, pathEnv = process.env.PATH ?? "") {
     for (const name of commandNames(command)) {
       const candidate = path6.join(dir, name);
       try {
-        const stat2 = fs18.statSync(candidate);
+        const stat2 = fs20.statSync(candidate);
         if (!stat2.isFile()) continue;
-        if (process.platform !== "win32") fs18.accessSync(candidate, fs18.constants.X_OK);
+        if (process.platform !== "win32") fs20.accessSync(candidate, fs20.constants.X_OK);
         const runnable = resolveRunnableNodeScript(candidate);
         if (runnable) return runnable;
       } catch {
@@ -4803,7 +5183,7 @@ function finalizeBenchStatus(filePath) {
 }
 
 // src/bench-fallback.ts
-import fs19 from "fs";
+import fs21 from "fs";
 import path10 from "path";
 var FALLBACK_RESULTS_DIRNAME = "fallback-runs";
 function buildBenchRunnerArgs(parsed, benchmarkId, outputDir) {
@@ -4875,7 +5255,7 @@ function createFallbackBenchOutputDir(resultsDir, benchmarkId, pid, startedAtMs
   );
 }
 function resolveFallbackBenchResultPath(outputDir) {
-  const entries = fs19.readdirSync(outputDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name).sort();
+  const entries = fs21.readdirSync(outputDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name).sort();
   if (entries.length === 0) {
     throw new Error(`Fallback benchmark runner did not write a JSON result artifact in ${outputDir}`);
   }
@@ -4883,7 +5263,7 @@ function resolveFallbackBenchResultPath(outputDir) {
 }
 
 // src/openclaw-upgrade-swap.ts
-import fs20 from "fs";
+import fs22 from "fs";
 import path11 from "path";
 function describeError(error) {
   return error instanceof Error ? error.message : String(error);
@@ -4895,7 +5275,7 @@ function createSiblingTempFilePath(targetPath, label) {
 function resolveAtomicWriteMode(targetPath, explicitMode) {
   if (explicitMode !== void 0) return explicitMode;
   try {
-    return fs20.statSync(targetPath).mode & 4095;
+    return fs22.statSync(targetPath).mode & 4095;
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
       return 384;
@@ -4905,8 +5285,8 @@ function resolveAtomicWriteMode(targetPath, explicitMode) {
 }
 function resolveAtomicReplacementPath(targetPath) {
   try {
-    if (fs20.lstatSync(targetPath).isSymbolicLink()) {
-      return fs20.realpathSync(targetPath);
+    if (fs22.lstatSync(targetPath).isSymbolicLink()) {
+      return fs22.realpathSync(targetPath);
     }
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
@@ -4923,7 +5303,7 @@ function createSiblingSwapPath(targetDir, label) {
 function cleanupDisplacedDirectoryBestEffort(displacedDir, context) {
   if (!displacedDir) return void 0;
   try {
-    fs20.rmSync(displacedDir, { recursive: true, force: true });
+    fs22.rmSync(displacedDir, { recursive: true, force: true });
     return void 0;
   } catch (error) {
     return `Warning: ${context}, but failed to remove the displaced plugin copy at ${displacedDir}: ${describeError(error)}`;
@@ -4931,43 +5311,43 @@ function cleanupDisplacedDirectoryBestEffort(displacedDir, context) {
 }
 function atomicWriteFileSync(targetPath, data, options = {}) {
   const resolvedTargetPath = resolveAtomicReplacementPath(targetPath);
-  fs20.mkdirSync(path11.dirname(resolvedTargetPath), { recursive: true });
+  fs22.mkdirSync(path11.dirname(resolvedTargetPath), { recursive: true });
   const tempPath = createSiblingTempFilePath(resolvedTargetPath, "write");
   const mode = resolveAtomicWriteMode(resolvedTargetPath, options.mode);
   try {
     if (options.hooks?.writeTempFileSync) {
       options.hooks.writeTempFileSync(tempPath);
     } else {
-      fs20.writeFileSync(tempPath, data, { mode });
+      fs22.writeFileSync(tempPath, data, { mode });
     }
-    fs20.chmodSync(tempPath, mode);
-    const renameTempFileSync = options.hooks?.renameTempFileSync ?? fs20.renameSync;
+    fs22.chmodSync(tempPath, mode);
+    const renameTempFileSync = options.hooks?.renameTempFileSync ?? fs22.renameSync;
     renameTempFileSync(tempPath, resolvedTargetPath);
   } catch (error) {
-    fs20.rmSync(tempPath, { force: true });
+    fs22.rmSync(tempPath, { force: true });
     throw error;
   }
 }
 function atomicCopyFileSync(sourcePath, targetPath, options = {}) {
-  if (!fs20.existsSync(sourcePath)) return;
+  if (!fs22.existsSync(sourcePath)) return;
   const resolvedTargetPath = resolveAtomicReplacementPath(targetPath);
-  fs20.mkdirSync(path11.dirname(resolvedTargetPath), { recursive: true });
+  fs22.mkdirSync(path11.dirname(resolvedTargetPath), { recursive: true });
   const tempPath = createSiblingTempFilePath(resolvedTargetPath, "copy");
-  const mode = fs20.statSync(sourcePath).mode & 4095;
+  const mode = fs22.statSync(sourcePath).mode & 4095;
   try {
-    const copyTempFileSync = options.hooks?.copyTempFileSync ?? fs20.copyFileSync;
+    const copyTempFileSync = options.hooks?.copyTempFileSync ?? fs22.copyFileSync;
     copyTempFileSync(sourcePath, tempPath);
-    fs20.chmodSync(tempPath, mode);
-    const renameTempFileSync = options.hooks?.renameTempFileSync ?? fs20.renameSync;
+    fs22.chmodSync(tempPath, mode);
+    const renameTempFileSync = options.hooks?.renameTempFileSync ?? fs22.renameSync;
     renameTempFileSync(tempPath, resolvedTargetPath);
   } catch (error) {
-    fs20.rmSync(tempPath, { force: true });
+    fs22.rmSync(tempPath, { force: true });
     throw error;
   }
 }
 function cleanupRollbackDirectory(rollbackDir) {
   if (!rollbackDir) return;
-  fs20.rmSync(rollbackDir, { recursive: true, force: true });
+  fs22.rmSync(rollbackDir, { recursive: true, force: true });
 }
 function cleanupRollbackDirectoryBestEffort(rollbackDir) {
   if (!rollbackDir) return void 0;
@@ -4979,20 +5359,20 @@ function cleanupRollbackDirectoryBestEffort(rollbackDir) {
   }
 }
 function restoreDirectoryFromRollback(targetDir, rollbackDir) {
-  if (!fs20.existsSync(rollbackDir)) {
+  if (!fs22.existsSync(rollbackDir)) {
     throw new Error(`Rollback directory is missing: ${rollbackDir}`);
   }
-  fs20.mkdirSync(path11.dirname(targetDir), { recursive: true });
-  const displacedDir = fs20.existsSync(targetDir) ? createSiblingSwapPath(targetDir, "rollback-restore") : void 0;
+  fs22.mkdirSync(path11.dirname(targetDir), { recursive: true });
+  const displacedDir = fs22.existsSync(targetDir) ? createSiblingSwapPath(targetDir, "rollback-restore") : void 0;
   if (displacedDir) {
-    fs20.renameSync(targetDir, displacedDir);
+    fs22.renameSync(targetDir, displacedDir);
   }
   try {
-    fs20.renameSync(rollbackDir, targetDir);
+    fs22.renameSync(rollbackDir, targetDir);
   } catch (restoreError) {
-    if (displacedDir && fs20.existsSync(displacedDir)) {
+    if (displacedDir && fs22.existsSync(displacedDir)) {
       try {
-        fs20.renameSync(displacedDir, targetDir);
+        fs22.renameSync(displacedDir, targetDir);
       } catch (revertError) {
         throw new AggregateError(
           [restoreError, revertError],
@@ -5008,23 +5388,23 @@ function restoreDirectoryFromRollback(targetDir, rollbackDir) {
   return cleanupDisplacedDirectoryBestEffort(displacedDir, `restored the previous plugin copy into ${targetDir}`);
 }
 function restoreDirectoryFromBackup(targetDir, backupDir) {
-  if (!fs20.existsSync(backupDir)) {
+  if (!fs22.existsSync(backupDir)) {
     throw new Error(`Plugin backup directory is missing: ${backupDir}`);
   }
-  fs20.mkdirSync(path11.dirname(targetDir), { recursive: true });
+  fs22.mkdirSync(path11.dirname(targetDir), { recursive: true });
   const stagedDir = createSiblingSwapPath(targetDir, "backup-restore");
-  const displacedDir = fs20.existsSync(targetDir) ? createSiblingSwapPath(targetDir, "pre-backup-restore") : void 0;
-  fs20.cpSync(backupDir, stagedDir, { recursive: true });
+  const displacedDir = fs22.existsSync(targetDir) ? createSiblingSwapPath(targetDir, "pre-backup-restore") : void 0;
+  fs22.cpSync(backupDir, stagedDir, { recursive: true });
   if (displacedDir) {
-    fs20.renameSync(targetDir, displacedDir);
+    fs22.renameSync(targetDir, displacedDir);
   }
   try {
-    fs20.renameSync(stagedDir, targetDir);
+    fs22.renameSync(stagedDir, targetDir);
   } catch (restoreError) {
-    fs20.rmSync(targetDir, { recursive: true, force: true });
-    if (displacedDir && fs20.existsSync(displacedDir)) {
+    fs22.rmSync(targetDir, { recursive: true, force: true });
+    if (displacedDir && fs22.existsSync(displacedDir)) {
       try {
-        fs20.renameSync(displacedDir, targetDir);
+        fs22.renameSync(displacedDir, targetDir);
       } catch (revertError) {
         throw new AggregateError(
           [restoreError, revertError],
@@ -5032,7 +5412,7 @@ function restoreDirectoryFromBackup(targetDir, backupDir) {
         );
       }
     }
-    fs20.rmSync(stagedDir, { recursive: true, force: true });
+    fs22.rmSync(stagedDir, { recursive: true, force: true });
     throw new Error(
       `Failed to restore the plugin backup into ${targetDir}. The durable backup remains preserved at ${backupDir}.`,
       { cause: restoreError }
@@ -5057,7 +5437,7 @@ function rollbackOpenclawUpgrade({
   let configRemovalAttempted = false;
   let pluginRestored = false;
   try {
-    if (rollbackDir && fs20.existsSync(rollbackDir)) {
+    if (rollbackDir && fs22.existsSync(rollbackDir)) {
       const cleanupWarning = restoreDirectoryFromRollback(pluginDir, rollbackDir);
       notes.push(`Restored previous plugin from rollback copy at ${rollbackDir}`);
       if (cleanupWarning) notes.push(cleanupWarning);
@@ -5067,7 +5447,7 @@ function rollbackOpenclawUpgrade({
     rollbackRestoreError = error instanceof Error ? error.message : String(error);
   }
   try {
-    if (!pluginRestored && pluginBackupDir && fs20.existsSync(pluginBackupDir)) {
+    if (!pluginRestored && pluginBackupDir && fs22.existsSync(pluginBackupDir)) {
       const cleanupWarning = restoreDirectoryFromBackup(pluginDir, pluginBackupDir);
       if (rollbackRestoreError) {
         notes.push(`Rollback copy restore failed; restored previous plugin from durable backup at ${pluginBackupDir}`);
@@ -5092,12 +5472,12 @@ function rollbackOpenclawUpgrade({
     notes.push("No previous plugin copy was available for automatic restore");
   }
   try {
-    if (configBackupPath && fs20.existsSync(configBackupPath)) {
+    if (configBackupPath && fs22.existsSync(configBackupPath)) {
       restoreFileFromBackup(configPath, configBackupPath);
       notes.push(`Restored OpenClaw config from backup at ${configBackupPath}`);
-    } else if (removeConfigIfUnbacked && fs20.existsSync(configPath)) {
+    } else if (removeConfigIfUnbacked && fs22.existsSync(configPath)) {
       configRemovalAttempted = true;
-      fs20.rmSync(configPath, { force: true });
+      fs22.rmSync(configPath, { force: true });
       notes.push("Removed OpenClaw config created during the failed upgrade");
     }
   } catch (error) {
@@ -5150,7 +5530,7 @@ Run this manually when you're ready:
 
 // src/openclaw-managed-upgrade-loader.ts
 import { execFileSync } from "child_process";
-import fs21 from "fs";
+import fs23 from "fs";
 import os from "os";
 import path12 from "path";
 import { fileURLToPath as fileURLToPath3, pathToFileURL as pathToFileURL2 } from "url";
@@ -5226,7 +5606,7 @@ function buildOpenclawManagedUpgradePackageSpec(version = "latest") {
 function readCliAdapterRange() {
   const moduleDir = path12.dirname(fileURLToPath3(import.meta.url));
   const manifestPath = path12.resolve(moduleDir, "../package.json");
-  const manifest = JSON.parse(fs21.readFileSync(manifestPath, "utf8"));
+  const manifest = JSON.parse(fs23.readFileSync(manifestPath, "utf8"));
   if (manifest.name !== "@remnic/cli") {
     throw new Error(`Invalid @remnic/cli package manifest at ${manifestPath}.`);
   }
@@ -5270,7 +5650,7 @@ async function loadOpenclawManagedUpgradeModule(packageSpec, hooks = {}) {
     const adapterMissing = isSpecifierNotFoundError(error, OPENCLAW_PLUGIN_PACKAGE) || isSpecifierNotFoundError(error, MANAGED_UPGRADE_SPECIFIER) || isManagedUpgradeSubpathMissing(error);
     if (!adapterMissing) throw error;
   }
-  const temporaryRoot = fs21.mkdtempSync(path12.join(os.tmpdir(), "remnic-openclaw-upgrade-"));
+  const temporaryRoot = fs23.mkdtempSync(path12.join(os.tmpdir(), "remnic-openclaw-upgrade-"));
   try {
     const toolingPackageSpec = `${OPENCLAW_PLUGIN_PACKAGE}@${readCliAdapterRange()}`;
     const installArgs = [
@@ -5285,12 +5665,12 @@ async function loadOpenclawManagedUpgradeModule(packageSpec, hooks = {}) {
     ];
     (hooks.runNpmInstall ?? runNpmInstall)(installArgs);
     const resolverPath = path12.join(temporaryRoot, "load-managed-upgrade.mjs");
-    fs21.writeFileSync(resolverPath, `export * from ${JSON.stringify(MANAGED_UPGRADE_SPECIFIER)};
+    fs23.writeFileSync(resolverPath, `export * from ${JSON.stringify(MANAGED_UPGRADE_SPECIFIER)};
 `, "utf8");
     return await importModule(pathToFileURL2(resolverPath).href);
   } finally {
     try {
-      fs21.rmSync(temporaryRoot, { recursive: true, force: true });
+      fs23.rmSync(temporaryRoot, { recursive: true, force: true });
     } catch (error) {
       const detail = error instanceof Error ? error.message : String(error);
       console.warn(`Could not remove temporary managed upgrade project at ${temporaryRoot}: ${detail}`);
@@ -5299,13 +5679,13 @@ async function loadOpenclawManagedUpgradeModule(packageSpec, hooks = {}) {
 }
 
 // src/remote-daemon.ts
-import fs22 from "fs";
+import fs24 from "fs";
 function readCompatEnv(primary, legacy) {
   return process.env[primary] ?? process.env[legacy];
 }
 function readRemnicConfigRecord(configPath) {
   try {
-    const parsed = JSON.parse(fs22.readFileSync(configPath, "utf8"));
+    const parsed = JSON.parse(fs24.readFileSync(configPath, "utf8"));
     if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
       return parsed;
     }
@@ -5534,7 +5914,7 @@ async function remoteRecallXray(daemon, request) {
 }
 
 // src/daemon-service.ts
-import fs23 from "fs";
+import fs25 from "fs";
 import path13 from "path";
 import * as childProcess from "child_process";
 import { fileURLToPath as fileURLToPath4 } from "url";
@@ -5546,7 +5926,7 @@ function launchdUnloadPlist(plistPath, processApi = childProcess) {
   processApi.execFileSync("launchctl", ["unload", plistPath], { stdio: "pipe" });
 }
 function resolveServerBinDetails(options = {}) {
-  const existsSync4 = options.existsSync ?? fs23.existsSync;
+  const existsSync4 = options.existsSync ?? fs25.existsSync;
   const findCommandOnPath2 = options.findCommandOnPath ?? findCommandOnPath;
   const moduleDir = options.moduleDir ?? thisModuleDir;
   const packageResolve = options.packageResolve ?? resolveImportSpecifier;
@@ -5605,8 +5985,8 @@ function resolveServerBin(options = {}) {
   return resolveServerBinDetails(options).path;
 }
 function readVerifiedDaemonPid(options) {
-  const readFileSync4 = options.readFileSync ?? fs23.readFileSync;
-  const unlinkSync = options.unlinkSync ?? fs23.unlinkSync;
+  const readFileSync4 = options.readFileSync ?? fs25.readFileSync;
+  const unlinkSync = options.unlinkSync ?? fs25.unlinkSync;
   const processKill = options.processKill ?? process.kill;
   const platform = options.platform ?? process.platform;
   const execFileSync4 = options.execFileSync ?? ((command, args, execOptions) => childProcess.execFileSync(command, args, execOptions));
@@ -5706,8 +6086,8 @@ function removePidFileBestEffort(file, unlinkSync) {
   }
 }
 function inspectLaunchdPlist(plistPath, options = {}) {
-  const existsSync4 = options.existsSync ?? fs23.existsSync;
-  const readFileSync4 = options.readFileSync ?? fs23.readFileSync;
+  const existsSync4 = options.existsSync ?? fs25.existsSync;
+  const readFileSync4 = options.readFileSync ?? fs25.readFileSync;
   if (!existsSync4(plistPath)) {
     return {
       installed: false,
@@ -5885,7 +6265,7 @@ function stripConfigArgv(args) {
 }
 
 // src/import-dispatch.ts
-import fs24 from "fs";
+import fs26 from "fs";
 import {
   runImporter,
   validateImportBatchSize,
@@ -6405,7 +6785,7 @@ async function cmdImport(rest, targetFactory, disposeTarget, ioOverrides = {}) {
   let materializedTarget;
   let materializePromise;
   const io = {
-    readFile: ioOverrides.readFile ?? (async (p) => fs24.promises.readFile(p, "utf-8")),
+    readFile: ioOverrides.readFile ?? (async (p) => fs26.promises.readFile(p, "utf-8")),
     loadAdapter: ioOverrides.loadAdapter ?? (async (name) => (await loadImporterModule(name)).adapter),
     runImporter: ioOverrides.runImporter ?? runImporter,
     getWriteTarget: async () => {
@@ -6518,7 +6898,7 @@ async function cmdCapture(rest, io) {
 }
 
 // src/import-lossless-claw-cmd.ts
-import fs25 from "fs";
+import fs27 from "fs";
 import path15 from "path";
 import {
   applyLcmSchema,
@@ -6630,15 +7010,15 @@ async function loadImportLosslessClawModule() {
 
 // src/import-lossless-claw-cmd.ts
 function assertDirectoryOrAbsent(p, label) {
-  if (fs25.existsSync(p) && !fs25.statSync(p).isDirectory()) {
+  if (fs27.existsSync(p) && !fs27.statSync(p).isDirectory()) {
     throw new Error(`${label} is not a directory: ${p}`);
   }
 }
 function assertFile(p, label) {
-  if (!fs25.existsSync(p)) {
+  if (!fs27.existsSync(p)) {
     throw new Error(`${label} does not exist: ${p}`);
   }
-  if (!fs25.statSync(p).isFile()) {
+  if (!fs27.statSync(p).isFile()) {
     throw new Error(`${label} is not a file: ${p}`);
   }
 }
@@ -6670,7 +7050,7 @@ async function cmdImportLosslessClaw(argv, io, deps = {}) {
     try {
       if (parsed.dryRun) {
         const lcmPath = path15.join(memoryDir, "state", "lcm.sqlite");
-        if (fs25.existsSync(lcmPath)) {
+        if (fs27.existsSync(lcmPath)) {
           destDb = mod.openExistingLcmDatabaseReadOnly(lcmPath);
         } else {
           destDb = mod.openInMemoryDestinationDatabase();
@@ -8022,7 +8402,7 @@ async function resolveAllBenchmarks() {
   if (packageBenchmarks) {
     return packageBenchmarks.filter((entry) => entry.runnerAvailable).map((entry) => entry.id);
   }
-  if (!fs26.existsSync(EVAL_RUNNER_PATH)) {
+  if (!fs28.existsSync(EVAL_RUNNER_PATH)) {
     return [];
   }
   return BENCHMARK_CATALOG.filter((entry) => entry.category !== "ingestion").map((entry) => entry.id);
@@ -8070,7 +8450,7 @@ async function runBenchViaFallback(parsed, benchmarkId, runtimeProfile) {
       `Fallback benchmark runner does not support provider-backed, gateway, or thinking/timeout flags (${unsupportedOptions.join(", ")}). Build/install @remnic/bench to use those options.`
     );
   }
-  if (!fs26.existsSync(EVAL_RUNNER_PATH)) {
+  if (!fs28.existsSync(EVAL_RUNNER_PATH)) {
     console.error(
       "Benchmark runner not found. Expected eval runner at evals/run.ts or a phase-1 @remnic/bench runtime export."
     );
@@ -8080,7 +8460,7 @@ async function runBenchViaFallback(parsed, benchmarkId, runtimeProfile) {
     path19.join(CLI_REPO_ROOT, "node_modules", ".bin", "tsx"),
     path19.join(CLI_REPO_ROOT, "packages", "remnic-cli", "node_modules", ".bin", "tsx")
   ];
-  const tsxCmd = tsxCandidates.find((candidate) => fs26.existsSync(candidate)) ?? "tsx";
+  const tsxCmd = tsxCandidates.find((candidate) => fs28.existsSync(candidate)) ?? "tsx";
   const fallbackOutputDir = createFallbackBenchOutputDir(
     parsed.resultsDir ?? resolveBenchOutputDir(),
     benchmarkId,
@@ -8225,9 +8605,9 @@ var PERSONAMEM_COMPLETION_MARKER = path19.join(
 );
 function resolveRealpathWithinDataset(datasetPath, relativePath) {
   try {
-    const datasetRoot = fs26.realpathSync(datasetPath);
+    const datasetRoot = fs28.realpathSync(datasetPath);
     const candidatePath = path19.resolve(datasetRoot, relativePath);
-    const candidateRealPath = fs26.realpathSync(candidatePath);
+    const candidateRealPath = fs28.realpathSync(candidatePath);
     const relativeToRoot = path19.relative(datasetRoot, candidateRealPath);
     if (relativeToRoot.startsWith("..") || path19.isAbsolute(relativeToRoot)) {
       return null;
@@ -8286,14 +8666,14 @@ function parseCsvRows(raw) {
 function isPersonaMemDatasetComplete(datasetPath) {
   try {
     const completionMarkerPath = path19.join(datasetPath, PERSONAMEM_COMPLETION_MARKER);
-    if (fs26.statSync(completionMarkerPath).isFile()) {
+    if (fs28.statSync(completionMarkerPath).isFile()) {
       return true;
     }
   } catch {
   }
   const datasetFile = PERSONAMEM_DATASET_FILE_CANDIDATES.find((candidate) => {
     try {
-      return fs26.statSync(path19.join(datasetPath, candidate)).isFile();
+      return fs28.statSync(path19.join(datasetPath, candidate)).isFile();
     } catch {
       return false;
     }
@@ -8302,7 +8682,7 @@ function isPersonaMemDatasetComplete(datasetPath) {
     return false;
   }
   try {
-    const rows = parseCsvRows(fs26.readFileSync(path19.join(datasetPath, datasetFile), "utf8"));
+    const rows = parseCsvRows(fs28.readFileSync(path19.join(datasetPath, datasetFile), "utf8"));
     if (rows.length < 2) {
       return false;
     }
@@ -8317,7 +8697,7 @@ function isPersonaMemDatasetComplete(datasetPath) {
     }
     return historyPaths.every((relativePath) => {
       const resolvedPath = resolveRealpathWithinDataset(datasetPath, relativePath);
-      return resolvedPath !== null && fs26.statSync(resolvedPath).isFile();
+      return resolvedPath !== null && fs28.statSync(resolvedPath).isFile();
     });
   } catch {
     return false;
@@ -8325,7 +8705,7 @@ function isPersonaMemDatasetComplete(datasetPath) {
 }
 function hasDatasetFile(datasetPath, relativePath) {
   try {
-    return fs26.statSync(path19.join(datasetPath, relativePath)).isFile();
+    return fs28.statSync(path19.join(datasetPath, relativePath)).isFile();
   } catch {
     return false;
   }
@@ -8345,10 +8725,10 @@ function memoryAgentBenchDatasetHasRecSysSamples(datasetPath) {
   return candidateFilenames.some((filename) => {
     const filePath = path19.join(datasetPath, filename);
     try {
-      if (!fs26.statSync(filePath).isFile()) {
+      if (!fs28.statSync(filePath).isFile()) {
         return false;
       }
-      const raw = fs26.readFileSync(filePath, "utf8");
+      const raw = fs28.readFileSync(filePath, "utf8");
       return /"source"\s*:\s*"recsys[_-]/i.test(raw);
     } catch {
       return false;
@@ -8364,7 +8744,7 @@ function isMemoryAgentBenchDatasetComplete(datasetPath) {
 function isDatasetDownloaded(datasetPath, benchmarkId) {
   let stats;
   try {
-    stats = fs26.statSync(datasetPath);
+    stats = fs28.statSync(datasetPath);
   } catch {
     return false;
   }
@@ -8374,7 +8754,7 @@ function isDatasetDownloaded(datasetPath, benchmarkId) {
   const marker = DOWNLOADED_DATASET_MARKERS[benchmarkId];
   if (!marker) {
     try {
-      return fs26.readdirSync(datasetPath).length > 0;
+      return fs28.readdirSync(datasetPath).length > 0;
     } catch {
       return false;
     }
@@ -8382,7 +8762,7 @@ function isDatasetDownloaded(datasetPath, benchmarkId) {
   if (marker.allOf) {
     const hasAllRequiredFiles = marker.allOf.every((name) => {
       try {
-        return fs26.statSync(path19.join(datasetPath, name)).isFile();
+        return fs28.statSync(path19.join(datasetPath, name)).isFile();
       } catch {
         return false;
       }
@@ -8394,7 +8774,7 @@ function isDatasetDownloaded(datasetPath, benchmarkId) {
   if (marker.anyOf) {
     const hasMarkerFile = marker.anyOf.some((name) => {
       try {
-        return fs26.statSync(path19.join(datasetPath, name)).isFile();
+        return fs28.statSync(path19.join(datasetPath, name)).isFile();
       } catch {
         return false;
       }
@@ -8412,7 +8792,7 @@ function isDatasetDownloaded(datasetPath, benchmarkId) {
   }
   if (marker.ext) {
     try {
-      return fs26.readdirSync(datasetPath).some(
+      return fs28.readdirSync(datasetPath).some(
         (name) => name.endsWith(marker.ext) && !marker.exclude?.includes(name)
       );
     } catch {
@@ -8424,7 +8804,7 @@ function isDatasetDownloaded(datasetPath, benchmarkId) {
 async function launchBenchUi(resultsDir) {
   const benchUiDir = path19.join(CLI_REPO_ROOT, "packages", "bench-ui");
   const pnpmCmd = process.platform === "win32" ? "pnpm.cmd" : "pnpm";
-  if (!fs26.existsSync(path19.join(benchUiDir, "package.json"))) {
+  if (!fs28.existsSync(path19.join(benchUiDir, "package.json"))) {
     console.error("ERROR: @remnic/bench-ui is not available in this checkout.");
     process.exit(1);
   }
@@ -8462,13 +8842,13 @@ function listDownloadableBenchmarks() {
 }
 function resolveDatasetDownloadScriptPath() {
   const bundled = path19.join(CLI_MODULE_DIR, "assets", "download-datasets.sh");
-  if (fs26.existsSync(bundled)) {
+  if (fs28.existsSync(bundled)) {
     return bundled;
   }
   return path19.join(CLI_REPO_ROOT, "evals", "scripts", "download-datasets.sh");
 }
 function isRepoCheckout() {
-  return fs26.existsSync(path19.join(CLI_REPO_ROOT, "pnpm-workspace.yaml")) && fs26.existsSync(path19.join(CLI_REPO_ROOT, "evals", "scripts", "download-datasets.sh"));
+  return fs28.existsSync(path19.join(CLI_REPO_ROOT, "pnpm-workspace.yaml")) && fs28.existsSync(path19.join(CLI_REPO_ROOT, "evals", "scripts", "download-datasets.sh"));
 }
 function runDatasetDownloadScript(scriptPath, benchmarkId, datasetRoot, jsonMode) {
   const stdio = jsonMode ? ["inherit", process.stderr, "inherit"] : "inherit";
@@ -8781,8 +9161,8 @@ async function exportBenchPackageResult(parsed) {
     ...reportCardProvenance ? { reportCardProvenance } : {}
   });
   if (parsed.output) {
-    fs26.mkdirSync(path19.dirname(parsed.output), { recursive: true });
-    fs26.writeFileSync(parsed.output, rendered);
+    fs28.mkdirSync(path19.dirname(parsed.output), { recursive: true });
+    fs28.writeFileSync(parsed.output, rendered);
     console.log(`Exported ${summary.id} as ${parsed.format} to ${parsed.output}`);
     return;
   }
@@ -8827,7 +9207,7 @@ async function manageBenchDatasets(parsed) {
     process.exit(1);
   }
   const scriptPath = resolveDatasetDownloadScriptPath();
-  if (!fs26.existsSync(scriptPath)) {
+  if (!fs28.existsSync(scriptPath)) {
     console.error(`ERROR: dataset download script not found: ${scriptPath}`);
     process.exit(1);
   }
@@ -9027,7 +9407,7 @@ async function calibrateBenchJudges(parsed, rawArgs) {
     );
     process.exit(1);
   }
-  const sourceResultSha256 = createHash4("sha256").update(fs26.readFileSync(latest.path)).digest("hex");
+  const sourceResultSha256 = createHash4("sha256").update(fs28.readFileSync(latest.path)).digest("hex");
   const expandedManifestPath = expandTilde(manifestPath);
   if (!bench.resolveLocalLabJudgeProviderConfig) {
     console.error(
@@ -9442,7 +9822,7 @@ function loadPinnedLoCoMoTaskSelector(parsed) {
   }
   let decoded;
   try {
-    decoded = JSON.parse(fs26.readFileSync(parsed.taskIdsFile, "utf8"));
+    decoded = JSON.parse(fs28.readFileSync(parsed.taskIdsFile, "utf8"));
   } catch (error) {
     throw new Error(
       `Unable to read --task-ids-file ${parsed.taskIdsFile}: ${error instanceof Error ? error.message : String(error)}`
@@ -10117,7 +10497,7 @@ function resolveBenchReproDatasetDir(datasetDir) {
     return void 0;
   }
   try {
-    return fs26.realpathSync(datasetDir);
+    return fs28.realpathSync(datasetDir);
   } catch {
     return datasetDir;
   }
@@ -10171,7 +10551,7 @@ async function writeBenchReproManifestForPackageRun(args) {
 }
 function loadStandaloneConvergeCommandConfig() {
   const configPath = resolveConfigPath();
-  const raw = fs26.existsSync(configPath) ? JSON.parse(fs26.readFileSync(configPath, "utf8")) : {};
+  const raw = fs28.existsSync(configPath) ? JSON.parse(fs28.readFileSync(configPath, "utf8")) : {};
   return parseConfig17(resolveRemnicConfigRecord16(raw));
 }
 function parseConvergePluginConfig(value) {
@@ -10200,13 +10580,13 @@ function resolveConfigPath(cliPath) {
     path19.join(resolveHomeDir(), ".config", "engram", "config.json")
   ];
   for (const candidate of candidates) {
-    if (fs26.existsSync(candidate)) return candidate;
+    if (fs28.existsSync(candidate)) return candidate;
   }
   return path19.join(resolveHomeDir(), ".config", "remnic", "config.json");
 }
 function resolveExistingBenchRemnicConfigPath(cliPath) {
   const configPath = resolveConfigPath(cliPath);
-  if (fs26.existsSync(configPath)) {
+  if (fs28.existsSync(configPath)) {
     return configPath;
   }
   if (cliPath) {
@@ -10216,7 +10596,7 @@ function resolveExistingBenchRemnicConfigPath(cliPath) {
 }
 function resolveExistingBenchOpenclawConfigPath(cliPath) {
   const configPath = resolveOpenclawConfigPath(cliPath);
-  if (fs26.existsSync(configPath)) {
+  if (fs28.existsSync(configPath)) {
     return configPath;
   }
   if (cliPath) {
@@ -10323,7 +10703,7 @@ function resolveMemoryDir() {
     const envMemoryDir = readCompatEnv("REMNIC_MEMORY_DIR", "ENGRAM_MEMORY_DIR");
     if (envMemoryDir) return normalizeMemoryDirPath(envMemoryDir);
     const configPath = resolveConfigPath();
-    const raw = fs26.existsSync(configPath) ? JSON.parse(fs26.readFileSync(configPath, "utf8")) : {};
+    const raw = fs28.existsSync(configPath) ? JSON.parse(fs28.readFileSync(configPath, "utf8")) : {};
     const remnicCfg = resolveRemnicConfigRecord16(raw);
     if (typeof remnicCfg.memoryDir === "string" && remnicCfg.memoryDir.length > 0) {
       return normalizeMemoryDirPath(remnicCfg.memoryDir);
@@ -10332,18 +10712,18 @@ function resolveMemoryDir() {
     const standalonePath = path19.join(home, ".remnic", "memory");
     const legacyStandalonePath = path19.join(home, ".engram", "memory");
     const openclawPath = path19.join(resolveOpenclawStateDir(), "workspace", "memory", "local");
-    if (fs26.existsSync(standalonePath)) return standalonePath;
-    if (fs26.existsSync(legacyStandalonePath)) return legacyStandalonePath;
+    if (fs28.existsSync(standalonePath)) return standalonePath;
+    if (fs28.existsSync(legacyStandalonePath)) return legacyStandalonePath;
     return openclawPath;
   })();
   const manifestPath = getManifestPath();
-  if (fs26.existsSync(manifestPath)) {
+  if (fs28.existsSync(manifestPath)) {
     try {
       const active = getActiveSpace();
       if (active?.memoryDir) {
         const activeMemoryDir = normalizeMemoryDirPath(active.memoryDir);
-        if (!fs26.existsSync(activeMemoryDir)) {
-          fs26.mkdirSync(activeMemoryDir, { recursive: true });
+        if (!fs28.existsSync(activeMemoryDir)) {
+          fs28.mkdirSync(activeMemoryDir, { recursive: true });
         }
         return activeMemoryDir;
       }
@@ -10392,13 +10772,13 @@ function resolveOpenclawConfigPath(cliPath) {
   const envPath = process.env.OPENCLAW_CONFIG_PATH || process.env.OPENCLAW_ENGRAM_CONFIG_PATH;
   if (envPath) return path19.resolve(expandTilde(envPath));
   for (const candidate of DEFAULT_OPENCLAW_CONFIG_PATHS_FOR_DOCTOR) {
-    if (fs26.existsSync(candidate)) return candidate;
+    if (fs28.existsSync(candidate)) return candidate;
   }
   return path19.join(resolveOpenclawStateDir(), "openclaw.json");
 }
 function readOpenclawConfig(configPath) {
-  if (!fs26.existsSync(configPath)) return {};
-  const raw = fs26.readFileSync(configPath, "utf-8");
+  if (!fs28.existsSync(configPath)) return {};
+  const raw = fs28.readFileSync(configPath, "utf-8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -10500,9 +10880,9 @@ function formatOpenclawUpgradeStamp(now = /* @__PURE__ */ new Date()) {
   return `${yyyy}${mm}${dd}-${hh}${min}${ss}`;
 }
 function backupPathIfPresent(sourcePath, backupPath) {
-  if (!fs26.existsSync(sourcePath)) return false;
-  fs26.mkdirSync(path19.dirname(backupPath), { recursive: true });
-  fs26.cpSync(sourcePath, backupPath, { recursive: true });
+  if (!fs28.existsSync(sourcePath)) return false;
+  fs28.mkdirSync(path19.dirname(backupPath), { recursive: true });
+  fs28.cpSync(sourcePath, backupPath, { recursive: true });
   return true;
 }
 function restartOpenclawGateway() {
@@ -10521,7 +10901,7 @@ function restartOpenclawGateway() {
 }
 function cmdInit() {
   const configPath = path19.join(process.cwd(), "remnic.config.json");
-  if (fs26.existsSync(configPath)) {
+  if (fs28.existsSync(configPath)) {
     console.log(`Config already exists: ${configPath}`);
     return;
   }
@@ -10537,7 +10917,7 @@ function cmdInit() {
       authToken: "${REMNIC_AUTH_TOKEN}"
     }
   };
-  fs26.writeFileSync(configPath, JSON.stringify(template, null, 2) + "\n");
+  fs28.writeFileSync(configPath, JSON.stringify(template, null, 2) + "\n");
   console.log(`Created ${configPath}`);
   console.log("\nSet these environment variables:");
   console.log("  export OPENAI_API_KEY=sk-...");
@@ -10959,7 +11339,7 @@ async function cmdQuery(queryText, json, explain) {
   }
   initLogger5();
   const configPath = resolveConfigPath();
-  const raw = fs26.existsSync(configPath) ? JSON.parse(fs26.readFileSync(configPath, "utf8")) : {};
+  const raw = fs28.existsSync(configPath) ? JSON.parse(fs28.readFileSync(configPath, "utf8")) : {};
   const remnicCfg = resolveRemnicConfigRecord16(raw);
   const config = parseConfig17(remnicCfg);
   const orchestrator = new Orchestrator10(config);
@@ -11139,7 +11519,7 @@ async function cmdXray(rest) {
   }
   initLogger5();
   const configPath = resolveConfigPath();
-  const raw = fs26.existsSync(configPath) ? JSON.parse(fs26.readFileSync(configPath, "utf8")) : {};
+  const raw = fs28.existsSync(configPath) ? JSON.parse(fs28.readFileSync(configPath, "utf8")) : {};
   const remnicCfg = resolveRemnicConfigRecord16(raw);
   const config = parseConfig17(remnicCfg);
   const orchestrator = new Orchestrator10(config);
@@ -11172,7 +11552,7 @@ async function runWhoKnowsCommand(rest, io) {
 async function withLocalService(fn) {
   initLogger5();
   const configPath = resolveConfigPath();
-  const raw = fs26.existsSync(configPath) ? JSON.parse(fs26.readFileSync(configPath, "utf8")) : {};
+  const raw = fs28.existsSync(configPath) ? JSON.parse(fs28.readFileSync(configPath, "utf8")) : {};
   const orchestrator = new Orchestrator10(parseConfig17(resolveRemnicConfigRecord16(raw)));
   await orchestrator.initialize();
   await orchestrator.deferredReady;
@@ -11205,7 +11585,7 @@ async function cmdPromotionCandidates(rest) {
 async function cmdVersions(rest) {
   initLogger5();
   const configPath = resolveConfigPath();
-  const raw = fs26.existsSync(configPath) ? JSON.parse(fs26.readFileSync(configPath, "utf8")) : {};
+  const raw = fs28.existsSync(configPath) ? JSON.parse(fs28.readFileSync(configPath, "utf8")) : {};
   const remnicCfg = resolveRemnicConfigRecord16(raw);
   const config = parseConfig17(remnicCfg);
   if (!config.versioningEnabled) {
@@ -11321,7 +11701,7 @@ Options:
 async function cmdEnrich(rest) {
   initLogger5();
   const configPath = resolveConfigPath();
-  const raw = fs26.existsSync(configPath) ? JSON.parse(fs26.readFileSync(configPath, "utf8")) : {};
+  const raw = fs28.existsSync(configPath) ? JSON.parse(fs28.readFileSync(configPath, "utf8")) : {};
   const remnicCfg = resolveRemnicConfigRecord16(raw);
   const config = parseConfig17(remnicCfg);
   const subcommand = rest[0];
@@ -11515,7 +11895,7 @@ Registered providers:`);
 async function cmdExtensions(action, rest) {
   initLogger5();
   const configPath = resolveConfigPath();
-  const raw = fs26.existsSync(configPath) ? JSON.parse(fs26.readFileSync(configPath, "utf8")) : {};
+  const raw = fs28.existsSync(configPath) ? JSON.parse(fs28.readFileSync(configPath, "utf8")) : {};
   const remnicCfg = resolveRemnicConfigRecord16(raw);
   const config = parseConfig17(remnicCfg);
   const root = resolveExtensionsRoot(config);
@@ -11566,7 +11946,7 @@ Root: ${root}`);
       const extensions = await discoverMemoryExtensions(root, warnLog);
       let entries = [];
       try {
-        entries = fs26.readdirSync(root);
+        entries = fs28.readdirSync(root);
       } catch {
         console.log(`Extensions root does not exist: ${root}`);
         process.exitCode = 0;
@@ -11577,7 +11957,7 @@ Root: ${root}`);
       for (const entry of entries) {
         const entryPath = path19.join(root, entry);
         try {
-          if (!fs26.statSync(entryPath).isDirectory()) continue;
+          if (!fs28.statSync(entryPath).isDirectory()) continue;
         } catch {
           continue;
         }
@@ -11609,7 +11989,7 @@ Root: ${root}`);
 async function cmdBriefing(rest) {
   initLogger5();
   const configPath = resolveConfigPath();
-  const raw = fs26.existsSync(configPath) ? JSON.parse(fs26.readFileSync(configPath, "utf8")) : {};
+  const raw = fs28.existsSync(configPath) ? JSON.parse(fs28.readFileSync(configPath, "utf8")) : {};
   const remnicCfg = resolveRemnicConfigRecord16(raw);
   const config = parseConfig17(remnicCfg);
   if (!config.briefing.enabled) {
@@ -11689,10 +12069,10 @@ async function cmdBriefing(rest) {
   if (save) {
     try {
       const saveDir = resolveBriefingSaveDir(config.briefing.saveDir);
-      fs26.mkdirSync(saveDir, { recursive: true });
+      fs28.mkdirSync(saveDir, { recursive: true });
       const filename = briefingFilename(new Date(result.window.to), format);
       const filePath = path19.join(saveDir, filename);
-      fs26.writeFileSync(filePath, payload + (payload.endsWith("\n") ? "" : "\n"));
+      fs28.writeFileSync(filePath, payload + (payload.endsWith("\n") ? "" : "\n"));
       console.error(`Saved briefing: ${filePath}`);
     } catch (err) {
       console.error(`Failed to save briefing: ${err instanceof Error ? err.message : String(err)}`);
@@ -11710,7 +12090,7 @@ async function cmdDoctor() {
     detail: `${nodeVersion} (requires >= 22.12.0)`
   });
   const configPath = resolveConfigPath();
-  const configExists = fs26.existsSync(configPath);
+  const configExists = fs28.existsSync(configPath);
   checks.push({ name: "Config file", ok: configExists, detail: configPath });
   let standaloneConfig;
   let standaloneConfigError;
@@ -11718,7 +12098,7 @@ async function cmdDoctor() {
   let configuredNs = { invalid: false };
   if (configExists) {
     try {
-      const raw = JSON.parse(fs26.readFileSync(configPath, "utf8"));
+      const raw = JSON.parse(fs28.readFileSync(configPath, "utf8"));
       const remnicCfg = resolveRemnicConfigRecord16(raw);
       standaloneOpenaiApiKeyExplicitlyFalse = isOpenaiApiKeyDisabled(remnicCfg.openaiApiKey);
       configuredNs = readConfiguredNamespace(remnicCfg);
@@ -11734,7 +12114,7 @@ async function cmdDoctor() {
     memoryDir = parseConfig17({}).memoryDir;
   }
   try {
-    fs26.mkdirSync(memoryDir, { recursive: true });
+    fs28.mkdirSync(memoryDir, { recursive: true });
     checks.push({ name: "Memory directory", ok: true, detail: memoryDir });
   } catch {
     checks.push({ name: "Memory directory", ok: false, detail: `cannot create ${memoryDir}` });
@@ -11763,7 +12143,7 @@ async function cmdDoctor() {
   });
   if (nsPolicyCheck) checks.push(nsPolicyCheck);
   const openclawConfigPath = resolveOpenclawConfigPath();
-  const openclawConfigExists = fs26.existsSync(openclawConfigPath);
+  const openclawConfigExists = fs28.existsSync(openclawConfigPath);
   let openclawConfig = {};
   let openclawConfigValid = false;
   let openclawPluginModeConfigured = false;
@@ -11771,7 +12151,7 @@ async function cmdDoctor() {
   let activeOpenclawEntryConfig = null;
   if (openclawConfigExists) {
     try {
-      const parsed = JSON.parse(fs26.readFileSync(openclawConfigPath, "utf-8"));
+      const parsed = JSON.parse(fs28.readFileSync(openclawConfigPath, "utf-8"));
       if (typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)) {
         openclawConfig = parsed;
         openclawConfigValid = true;
@@ -11851,9 +12231,9 @@ async function cmdDoctor() {
         let memDirOk = false;
         let memDirDetail = `${resolvedMemDir} (not found)`;
         let memDirRemediation = `Run \`remnic openclaw install --memory-dir "${resolvedMemDir}"\` to create the directory.`;
-        if (fs26.existsSync(resolvedMemDir)) {
+        if (fs28.existsSync(resolvedMemDir)) {
           try {
-            const stat2 = fs26.statSync(resolvedMemDir);
+            const stat2 = fs28.statSync(resolvedMemDir);
             if (stat2.isDirectory()) {
               memDirOk = true;
               memDirDetail = resolvedMemDir;
@@ -12008,12 +12388,12 @@ async function cmdDoctor() {
 }
 function cmdConfig() {
   const configPath = resolveConfigPath();
-  if (!fs26.existsSync(configPath)) {
+  if (!fs28.existsSync(configPath)) {
     console.log("No config file found. Run `remnic init` to create one.");
     return;
   }
   console.log(`Config: ${configPath}`);
-  const rawConfig = fs26.readFileSync(configPath, "utf8");
+  const rawConfig = fs28.readFileSync(configPath, "utf8");
   const redacted = rawConfig.replace(
     /("(?:openaiApiKey|localLlmApiKey|authToken|apiKey|remoteSearchApiKey|meilisearchApiKey|opikApiKey)"\s*:\s*")([^"]*)(")/g,
     "$1[REDACTED]$3"
@@ -12121,7 +12501,7 @@ async function cmdReview(action, rest) {
     const configPath = resolveConfigPath();
     let tombstonesConfig = null;
     try {
-      const rawCfg = fs26.existsSync(configPath) ? JSON.parse(fs26.readFileSync(configPath, "utf8")) : {};
+      const rawCfg = fs28.existsSync(configPath) ? JSON.parse(fs28.readFileSync(configPath, "utf8")) : {};
       const remnicCfg = resolveRemnicConfigRecord16(rawCfg);
       const config = parseConfig17(remnicCfg);
       tombstonesConfig = {
@@ -12865,7 +13245,7 @@ async function pushOfflineFileContent(args) {
 }
 async function pushOfflineFileContentFromChunkReader(args) {
   const filePath = resolveOfflineDirectHydrationPath(args.memoryDir, args.file.path);
-  const stat2 = fs26.statSync(filePath);
+  const stat2 = fs28.statSync(filePath);
   if (stat2.mtimeMs !== args.file.mtimeMs) {
     throw new Error(`local file changed while pushing offline content: ${args.file.path}`);
   }
@@ -13356,7 +13736,7 @@ function advanceOfflineBaseFilesForSuccessfulPush(options) {
   return [...next.values()].sort((left, right) => left.path.localeCompare(right.path));
 }
 async function runOfflineSyncOnce(options) {
-  fs26.mkdirSync(options.memoryDir, { recursive: true });
+  fs28.mkdirSync(options.memoryDir, { recursive: true });
   let activeStatePath = options.statePath;
   let priorState = await readOfflineSyncState(activeStatePath);
   let syncNamespace = options.namespace ?? priorState?.namespace;
@@ -13989,7 +14369,7 @@ Environment fallbacks:
   const configPath = resolveConfigPath();
   let config;
   try {
-    const rawConfig = fs26.existsSync(configPath) ? JSON.parse(fs26.readFileSync(configPath, "utf8")) : {};
+    const rawConfig = fs28.existsSync(configPath) ? JSON.parse(fs28.readFileSync(configPath, "utf8")) : {};
     config = parseConfigQuietly(pickOfflineConfigRecord(rawConfig));
   } catch {
     throw new Error(
@@ -14004,7 +14384,7 @@ Environment fallbacks:
   const statePath = statePathExplicit ? path19.resolve(expandTilde(stateOverride)) : remoteUrl !== void 0 ? defaultOfflineSyncStatePath(memoryDir, remoteUrl, namespace) : void 0;
   if (action === "prepare") {
     if (!remoteUrl || !token || !statePath) throw new Error("offline prepare requires remote URL and token");
-    fs26.mkdirSync(memoryDir, { recursive: true });
+    fs28.mkdirSync(memoryDir, { recursive: true });
     const remoteSnapshot = await fetchOfflineSnapshot({
       remoteUrl,
       token,
@@ -14103,7 +14483,7 @@ Environment fallbacks:
     return;
   }
   if (action === "status") {
-    fs26.mkdirSync(memoryDir, { recursive: true });
+    fs28.mkdirSync(memoryDir, { recursive: true });
     const state = statePath ? await readOfflineSyncState(statePath) : null;
     if (state && remoteUrl && statePath) {
       assertOfflineStateMatches({
@@ -14241,7 +14621,7 @@ function cmdDedup(json) {
 function readInstalledConnectorConfig(configPath, fallback) {
   if (!configPath) return fallback;
   try {
-    const parsed = JSON.parse(fs26.readFileSync(configPath, "utf8"));
+    const parsed = JSON.parse(fs28.readFileSync(configPath, "utf8"));
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return fallback;
     const { token: _token, ...config } = parsed;
     return config;
@@ -14419,7 +14799,7 @@ async function cmdConnectors(action, rest, json) {
           const pub = factory();
           const available = await pub.isHostAvailable();
           const extRoot = available ? await pub.resolveExtensionRoot() : "(host not installed)";
-          const extensionExists = available && extRoot ? fs26.existsSync(extRoot) : false;
+          const extensionExists = available && extRoot ? fs28.existsSync(extRoot) : false;
           publisherChecks.push({
             name: `Publisher: ${targetHostId}`,
             ok: !available || extensionExists,
@@ -14493,7 +14873,7 @@ async function cmdConnectors(action, rest, json) {
     let connectorsCfg;
     const configPath = resolveConfigPath();
     try {
-      const raw = fs26.existsSync(configPath) ? JSON.parse(fs26.readFileSync(configPath, "utf8")) : {};
+      const raw = fs28.existsSync(configPath) ? JSON.parse(fs28.readFileSync(configPath, "utf8")) : {};
       connectorsCfg = parseConfigQuietly(raw).connectors;
     } catch {
       process.stderr.write(
@@ -14569,7 +14949,7 @@ async function cmdConnectors(action, rest, json) {
     }
     initLogger5();
     const configPath = resolveConfigPath();
-    const raw = fs26.existsSync(configPath) ? JSON.parse(fs26.readFileSync(configPath, "utf8")) : {};
+    const raw = fs28.existsSync(configPath) ? JSON.parse(fs28.readFileSync(configPath, "utf8")) : {};
     const remnicCfg = resolveRemnicConfigRecord16(raw);
     const config = parseConfig17(remnicCfg);
     const orchestrator = new Orchestrator10(config);
@@ -14694,7 +15074,7 @@ async function cmdConnectorsMarketplace(subAction, rest, json) {
     console.error(`connectors marketplace: ${err instanceof Error ? err.message : String(err)}`);
     process.exit(1);
   }
-  const rawConfig = fs26.existsSync(configPath) ? JSON.parse(fs26.readFileSync(configPath, "utf8")) : {};
+  const rawConfig = fs28.existsSync(configPath) ? JSON.parse(fs28.readFileSync(configPath, "utf8")) : {};
   const pluginConfig = resolveRemnicConfigRecord16(rawConfig);
   const config = parseConfig17(pluginConfig);
   if (subAction === "generate") {
@@ -14716,13 +15096,13 @@ async function cmdConnectorsMarketplace(subAction, rest, json) {
   } else if (subAction === "validate") {
     const targetPath = rest.filter((a) => !a.startsWith("--"))[0] ?? path19.join(process.cwd(), "marketplace.json");
     const resolved = path19.resolve(targetPath);
-    if (!fs26.existsSync(resolved)) {
+    if (!fs28.existsSync(resolved)) {
       console.error(`File not found: ${resolved}`);
       process.exit(1);
     }
     let parsed;
     try {
-      parsed = JSON.parse(fs26.readFileSync(resolved, "utf8"));
+      parsed = JSON.parse(fs28.readFileSync(resolved, "utf8"));
     } catch {
       console.error(`Invalid JSON in ${resolved}`);
       process.exit(1);
@@ -14925,7 +15305,7 @@ async function cmdSpace(action, rest, json) {
 async function cmdLegacyBenchmark(action, rest, json) {
   initLogger5();
   const configPath = resolveConfigPath();
-  const raw = fs26.existsSync(configPath) ? JSON.parse(fs26.readFileSync(configPath, "utf8")) : {};
+  const raw = fs28.existsSync(configPath) ? JSON.parse(fs28.readFileSync(configPath, "utf8")) : {};
   const remnicCfg = resolveRemnicConfigRecord16(raw);
   const config = parseConfig17(remnicCfg);
   const orchestrator = new Orchestrator10(config);
@@ -15330,7 +15710,7 @@ function readPid() {
 function inferPort() {
   try {
     const configPath = resolveConfigPath();
-    const raw = JSON.parse(fs26.readFileSync(configPath, "utf8"));
+    const raw = JSON.parse(fs28.readFileSync(configPath, "utf8"));
     return raw.server?.port ?? 4318;
   } catch {
     return 4318;
@@ -15425,13 +15805,13 @@ function daemonInstall() {
     process.exit(1);
   }
   const vars = { HOME: home, NODE_PATH: nodePath, REMNIC_SERVER_BIN: serverBin };
-  fs26.mkdirSync(LOGS_DIR, { recursive: true });
+  fs28.mkdirSync(LOGS_DIR, { recursive: true });
   if (isMacOS()) {
     const templatePath = path19.resolve(import.meta.dirname, "../templates/launchd/ai.remnic.daemon.plist");
-    const template = fs26.readFileSync(templatePath, "utf8");
+    const template = fs28.readFileSync(templatePath, "utf8");
     const plist = renderTemplate(template, vars);
-    fs26.mkdirSync(path19.dirname(LAUNCHD_PLIST_PATH), { recursive: true });
-    fs26.writeFileSync(LAUNCHD_PLIST_PATH, plist);
+    fs28.mkdirSync(path19.dirname(LAUNCHD_PLIST_PATH), { recursive: true });
+    fs28.writeFileSync(LAUNCHD_PLIST_PATH, plist);
     try {
       launchdLoadPlist(LAUNCHD_PLIST_PATH);
     } catch (err) {
@@ -15448,10 +15828,10 @@ function daemonInstall() {
     console.log(`  Logs: ${LOGS_DIR}/daemon.log`);
   } else if (isLinux()) {
     const templatePath = path19.resolve(import.meta.dirname, "../templates/systemd/remnic.service");
-    const template = fs26.readFileSync(templatePath, "utf8");
+    const template = fs28.readFileSync(templatePath, "utf8");
     const unit = renderTemplate(template, vars);
-    fs26.mkdirSync(path19.dirname(SYSTEMD_UNIT_PATH), { recursive: true });
-    fs26.writeFileSync(SYSTEMD_UNIT_PATH, unit);
+    fs28.mkdirSync(path19.dirname(SYSTEMD_UNIT_PATH), { recursive: true });
+    fs28.writeFileSync(SYSTEMD_UNIT_PATH, unit);
     try {
       childProcess2.execSync("systemctl --user daemon-reload", { stdio: "pipe" });
     } catch (err) {
@@ -15487,7 +15867,7 @@ function daemonUninstall() {
       } catch {
       }
       try {
-        fs26.unlinkSync(plistPath);
+        fs28.unlinkSync(plistPath);
         removed = true;
         console.log(`Removed launchd service: ${plistPath}`);
       } catch {
@@ -15507,7 +15887,7 @@ function daemonUninstall() {
     let removed = false;
     for (const unitPath of SYSTEMD_UNIT_PATHS) {
       try {
-        fs26.unlinkSync(unitPath);
+        fs28.unlinkSync(unitPath);
         removed = true;
         console.log(`Removed systemd service: ${unitPath}`);
       } catch {
@@ -15574,11 +15954,11 @@ async function daemonStatus() {
   console.log(`  Port:      ${port}`);
   console.log(`  Service:   ${serviceInstalled ? "installed" : "not installed"}`);
   console.log(`  Platform:  ${process.platform}`);
-  console.log(`  PID file:  ${fs26.existsSync(PID_FILE) ? PID_FILE : LEGACY_PID_FILE}`);
-  console.log(`  Log file:  ${fs26.existsSync(LOG_FILE) ? LOG_FILE : LEGACY_LOG_FILE}`);
+  console.log(`  PID file:  ${fs28.existsSync(PID_FILE) ? PID_FILE : LEGACY_PID_FILE}`);
+  console.log(`  Log file:  ${fs28.existsSync(LOG_FILE) ? LOG_FILE : LEGACY_LOG_FILE}`);
   try {
     const configPath = resolveConfigPath();
-    const raw = fs26.existsSync(configPath) ? JSON.parse(fs26.readFileSync(configPath, "utf8")) : {};
+    const raw = fs28.existsSync(configPath) ? JSON.parse(fs28.readFileSync(configPath, "utf8")) : {};
     const remnicCfg = resolveRemnicConfigRecord16(raw);
     const config = parseConfig17(remnicCfg);
     const extRoot = resolveExtensionsRoot(config);
@@ -15619,9 +15999,9 @@ function daemonStart() {
       return;
     }
   }
-  fs26.mkdirSync(PID_DIR, { recursive: true });
-  fs26.mkdirSync(LOGS_DIR, { recursive: true });
-  const logStream = fs26.openSync(LOG_FILE, "a");
+  fs28.mkdirSync(PID_DIR, { recursive: true });
+  fs28.mkdirSync(LOGS_DIR, { recursive: true });
+  const logStream = fs28.openSync(LOG_FILE, "a");
   const serverBin = resolveServerBin();
   const isSource = serverBin.endsWith(".ts");
   let cmd;
@@ -15643,7 +16023,7 @@ function daemonStart() {
     }
   });
   child.unref();
-  fs26.writeFileSync(PID_FILE, String(child.pid));
+  fs28.writeFileSync(PID_FILE, String(child.pid));
   console.log(`Started remnic server (pid ${child.pid})`);
   console.log(`  Log: ${LOG_FILE}`);
 }
@@ -15677,11 +16057,11 @@ function daemonStop() {
     console.log("Process not found (cleaning up PID file)");
   }
   try {
-    fs26.unlinkSync(PID_FILE);
+    fs28.unlinkSync(PID_FILE);
   } catch {
   }
   try {
-    fs26.unlinkSync(LEGACY_PID_FILE);
+    fs28.unlinkSync(LEGACY_PID_FILE);
   } catch {
   }
 }
@@ -15809,7 +16189,7 @@ async function promptYesNo(question, defaultYes = true) {
 async function cmdBinary(rest) {
   initLogger5();
   const configPath = resolveConfigPath();
-  const raw = fs26.existsSync(configPath) ? JSON.parse(fs26.readFileSync(configPath, "utf8")) : {};
+  const raw = fs28.existsSync(configPath) ? JSON.parse(fs28.readFileSync(configPath, "utf8")) : {};
   const remnicCfg = resolveRemnicConfigRecord16(raw);
   const config = parseConfig17(remnicCfg);
   const memoryDir = resolveMemoryDir();
@@ -16000,7 +16380,7 @@ async function cmdOpenclawInstall(opts) {
   } else if (slotIsActiveLegacy) {
     changes.push(`  Slot left as "${REMNIC_OPENCLAW_LEGACY_PLUGIN_ID}" \u2014 re-run with --yes to activate the new entry`);
   }
-  if (!fs26.existsSync(memoryDir)) changes.push(`+ Will create memory directory: ${memoryDir}`);
+  if (!fs28.existsSync(memoryDir)) changes.push(`+ Will create memory directory: ${memoryDir}`);
   if (hasLegacy && migrateLegacy) {
     changes.push(`~ Legacy '${REMNIC_OPENCLAW_LEGACY_PLUGIN_ID}' entry retained (safe to remove after verifying hooks fire)`);
   }
@@ -16020,8 +16400,8 @@ async function cmdOpenclawInstall(opts) {
 Resulting plugins.slots.memory: ${dryRunPlugins.slots?.memory ?? "(unset)"}`);
     return;
   }
-  if (fs26.existsSync(memoryDir)) {
-    const st = fs26.statSync(memoryDir);
+  if (fs28.existsSync(memoryDir)) {
+    const st = fs28.statSync(memoryDir);
     if (!st.isDirectory()) {
       throw new Error(
         `Cannot use ${memoryDir} as the memory directory \u2014 a file already exists at that path.
@@ -16029,12 +16409,12 @@ Remove it first and re-run, or choose a different path with --memory-dir.`
       );
     }
   } else {
-    fs26.mkdirSync(memoryDir, { recursive: true });
+    fs28.mkdirSync(memoryDir, { recursive: true });
     console.log(`Created memory directory: ${memoryDir}`);
   }
   const configDir = path19.dirname(configPath);
-  if (!fs26.existsSync(configDir)) {
-    fs26.mkdirSync(configDir, { recursive: true });
+  if (!fs28.existsSync(configDir)) {
+    fs28.mkdirSync(configDir, { recursive: true });
   }
   atomicWriteFileSync(configPath, JSON.stringify(updatedConfig, null, 2) + "\n");
   console.log("\nDone! Summary of changes:");
@@ -16063,7 +16443,7 @@ async function cmdOpenclawUpgrade(opts) {
   const legacyPluginDirForBackup = opts.legacyPluginDirForBackup ? resolveOpenclawLegacyPluginDir(opts.legacyPluginDirForBackup) : void 0;
   const fallbackMemoryDir = path19.join(resolveOpenclawStateDir(), "workspace", "memory", "local");
   const packageSpec = buildOpenclawManagedUpgradePackageSpec(opts.version);
-  const configExistedBefore = fs26.existsSync(configPath);
+  const configExistedBefore = fs28.existsSync(configPath);
   const existingConfig = readOpenclawConfig(configPath);
   const { entries, slots } = parseOpenclawPluginState(existingConfig, configPath);
   const preservedMemoryDir = opts.memoryDir ? path19.resolve(expandTilde(opts.memoryDir)) : resolveCurrentOpenclawMemoryDir(entries, slots, fallbackMemoryDir);
@@ -16288,13 +16668,13 @@ async function cmdOpenclawMigrateEngram(opts) {
 }
 function createOpenclawUpgradeBackupDir() {
   const backupsRoot = path19.join(resolveOpenclawStateDir(), "backups");
-  fs26.mkdirSync(backupsRoot, { recursive: true });
-  return fs26.mkdtempSync(path19.join(backupsRoot, `remnic-openclaw-upgrade-${formatOpenclawUpgradeStamp()}-`));
+  fs28.mkdirSync(backupsRoot, { recursive: true });
+  return fs28.mkdtempSync(path19.join(backupsRoot, `remnic-openclaw-upgrade-${formatOpenclawUpgradeStamp()}-`));
 }
 async function cmdTaxonomy(rest) {
   initLogger5();
   const configPath = resolveConfigPath();
-  const raw = fs26.existsSync(configPath) ? JSON.parse(fs26.readFileSync(configPath, "utf8")) : {};
+  const raw = fs28.existsSync(configPath) ? JSON.parse(fs28.readFileSync(configPath, "utf8")) : {};
   const remnicCfg = resolveRemnicConfigRecord16(raw);
   const config = parseConfig17(remnicCfg);
   if (!config.taxonomyEnabled) {
@@ -16332,8 +16712,8 @@ async function cmdTaxonomy(rest) {
       console.log(doc);
       if (config.taxonomyAutoGenResolver) {
         const resolverPath = path19.join(config.memoryDir, ".taxonomy", "RESOLVER.md");
-        fs26.mkdirSync(path19.dirname(resolverPath), { recursive: true });
-        fs26.writeFileSync(resolverPath, doc);
+        fs28.mkdirSync(path19.dirname(resolverPath), { recursive: true });
+        fs28.writeFileSync(resolverPath, doc);
         console.error(`Written: ${resolverPath}`);
       }
       break;
@@ -16379,7 +16759,7 @@ async function cmdTaxonomy(rest) {
       if (config.taxonomyAutoGenResolver) {
         const doc = generateResolverDocument(taxonomy);
         const resolverPath = path19.join(config.memoryDir, ".taxonomy", "RESOLVER.md");
-        fs26.writeFileSync(resolverPath, doc);
+        fs28.writeFileSync(resolverPath, doc);
         console.error(`Regenerated: ${resolverPath}`);
       }
       break;
@@ -16410,7 +16790,7 @@ async function cmdTaxonomy(rest) {
       if (config.taxonomyAutoGenResolver) {
         const doc = generateResolverDocument(taxonomy);
         const resolverPath = path19.join(config.memoryDir, ".taxonomy", "RESOLVER.md");
-        fs26.writeFileSync(resolverPath, doc);
+        fs28.writeFileSync(resolverPath, doc);
         console.error(`Regenerated: ${resolverPath}`);
       }
       break;
@@ -16601,12 +16981,12 @@ async function runTrainingExport(args, stdout = process.stdout) {
       `Unknown training-export format "${args.format}". ${validList}`
     );
   }
-  if (!fs26.existsSync(args.memoryDir)) {
+  if (!fs28.existsSync(args.memoryDir)) {
     throw new Error(
       `--memory-dir "${args.memoryDir}" does not exist. Provide the path to an existing memory directory.`
     );
   }
-  if (!fs26.statSync(args.memoryDir).isDirectory()) {
+  if (!fs28.statSync(args.memoryDir).isDirectory()) {
     throw new Error(
       `--memory-dir "${args.memoryDir}" is not a directory. Provide the path to a memory directory, not a file.`
     );
@@ -16692,10 +17072,10 @@ async function runTrainingExport(args, stdout = process.stdout) {
   }
   const formatted = adapter.formatRecords(records);
   const outDir = path19.dirname(args.output);
-  fs26.mkdirSync(outDir, { recursive: true });
+  fs28.mkdirSync(outDir, { recursive: true });
   const tmpPath = `${args.output}.tmp-${process.pid}-${Date.now()}`;
-  fs26.writeFileSync(tmpPath, formatted, "utf-8");
-  fs26.renameSync(tmpPath, args.output);
+  fs28.writeFileSync(tmpPath, formatted, "utf-8");
+  fs28.renameSync(tmpPath, args.output);
   stdout.write(
     `Exported ${records.length} records to ${args.output} (${adapter.name} format)
 `
@@ -16738,6 +17118,9 @@ async function main(argv = process.argv.slice(2)) {
       await cmdQuery(queryText, json, explain);
       break;
     }
+    case "recall":
+      await runRecallNavigateCommand(rest);
+      break;
     case "action-confidence":
       await cmdActionConfidence(rest);
       break;
@@ -16873,7 +17256,7 @@ async function main(argv = process.argv.slice(2)) {
             }
           }, 500);
         };
-        fs26.watch(memoryDir, { recursive: true }, (_event, filename) => {
+        fs28.watch(memoryDir, { recursive: true }, (_event, filename) => {
           if (filename && filename.startsWith(".")) return;
           rebuild();
         });
@@ -16881,12 +17264,12 @@ async function main(argv = process.argv.slice(2)) {
         });
       } else if (subAction === "validate") {
         const treeDir = outputDir;
-        if (!fs26.existsSync(treeDir)) {
+        if (!fs28.existsSync(treeDir)) {
           console.error(`Context tree not found at ${treeDir}. Run 'remnic tree generate' first.`);
           process.exit(1);
         }
         const indexPath = path19.join(treeDir, "INDEX.md");
-        if (!fs26.existsSync(indexPath)) {
+        if (!fs28.existsSync(indexPath)) {
           console.error(`INDEX.md missing in ${treeDir}. Tree may be corrupt \u2014 regenerate.`);
           process.exit(1);
         }
@@ -17092,6 +17475,18 @@ Other:
     case "journal":
       await runJournalBinaryCommand(rest);
       break;
+    case "journal-vault":
+      await runJournalVaultBinaryCommand(rest);
+      break;
+    case "activity-privacy":
+      await runActivityPrivacyBinaryCommand(rest);
+      break;
+    case "activity-export":
+      await runActivityExportBinaryCommand(rest);
+      break;
+    case "vault-publish":
+      await runVaultPublishBinaryCommand(rest);
+      break;
     case "codegraph":
       await runCodegraphBinaryCommand(rest);
       break;
@@ -17108,7 +17503,7 @@ Other:
       const targetFactory = async () => {
         if (!orchestratorSingleton) {
           const configPath = resolveConfigPath();
-          const raw = fs26.existsSync(configPath) ? JSON.parse(fs26.readFileSync(configPath, "utf8")) : {};
+          const raw = fs28.existsSync(configPath) ? JSON.parse(fs28.readFileSync(configPath, "utf8")) : {};
           const remnicCfg = resolveRemnicConfigRecord16(raw);
           const config = parseConfig17(remnicCfg);
           orchestratorSingleton = new Orchestrator10(config);