@remnic/cli 9.8.0 → 9.9.0

package/dist/index.js

@@ -18,7 +18,7 @@ async function persistEnrichmentCandidate(storage, entityName, candidate) {
 }
 
 // src/index.ts
-import fs9 from "fs";
+import fs10 from "fs";
 import os from "os";
 import path12 from "path";
 import { createHash as createHash2 } from "crypto";
@@ -26,13 +26,13 @@ import * as childProcess2 from "child_process";
 import { fileURLToPath as fileURLToPath4 } from "url";
 import { gzipSync } from "zlib";
 import {
-  parseConfig as parseConfig2,
+  parseConfig as parseConfig3,
   isOpenaiApiKeyDisabled,
   resolveEnvVars,
-  resolveRemnicConfigRecord as resolveRemnicConfigRecord2,
-  Orchestrator,
-  EngramAccessService,
-  initLogger,
+  resolveRemnicConfigRecord as resolveRemnicConfigRecord3,
+  Orchestrator as Orchestrator2,
+  EngramAccessService as EngramAccessService2,
+  initLogger as initLogger2,
   onboard,
   curate,
   listReviewItems,
@@ -219,9 +219,10 @@ function buildNamespacePolicyCheck(args) {
 }
 
 // src/index.ts
-import { WriteQuarantineStore } from "@remnic/core/write-quarantine.js";
+import { WriteQuarantineStore as WriteQuarantineStore2 } from "@remnic/core/write-quarantine.js";
 
 // src/quarantine-cli.ts
+import { basename } from "path";
 function renderQuarantineList(records, format) {
   if (format === "json") {
     const summary = records.map((record) => ({
@@ -244,17 +245,172 @@ function renderQuarantineList(records, format) {
   }
   return lines.join("\n");
 }
+async function replayQuarantine(opts) {
+  const result = { replayed: 0, failures: [], deleteFailures: [] };
+  for (const entry of await opts.store.entries()) {
+    const { record } = entry;
+    const basePayload = record.payload;
+    const principal = opts.principal ?? record.principal ?? void 0;
+    const idempotencyKey = typeof basePayload.idempotencyKey === "string" && basePayload.idempotencyKey.length > 0 ? basePayload.idempotencyKey : `quarantine-replay:${basename(entry.path)}`;
+    const request = {
+      ...basePayload,
+      namespace: opts.targetNamespace,
+      suppressQuarantine: true,
+      idempotencyKey,
+      ...principal ? { authenticatedPrincipal: principal } : {}
+    };
+    try {
+      await opts.submit(record.operation, request);
+    } catch (err) {
+      result.failures.push({
+        operation: record.operation,
+        attemptedNamespace: opts.targetNamespace,
+        error: err instanceof Error ? err.message : String(err)
+      });
+      continue;
+    }
+    try {
+      const removed = await opts.store.removeEntry(entry.path);
+      if (removed) {
+        result.replayed += 1;
+      } else {
+        result.deleteFailures.push({
+          path: entry.path,
+          error: "entry not removed (outside quarantine root or already absent)"
+        });
+      }
+    } catch (err) {
+      result.deleteFailures.push({
+        path: entry.path,
+        error: err instanceof Error ? err.message : String(err)
+      });
+    }
+  }
+  return result;
+}
+function renderReplayResult(result, targetNamespace, format) {
+  if (format === "json") {
+    return JSON.stringify(
+      {
+        targetNamespace,
+        replayed: result.replayed,
+        failures: result.failures,
+        deleteFailures: result.deleteFailures
+      },
+      null,
+      2
+    );
+  }
+  if (format !== "text") {
+    throw new Error(`Unsupported quarantine format: ${String(format)}`);
+  }
+  const lines = [`Replayed ${result.replayed} quarantined write(s) into namespace ${targetNamespace}.`];
+  if (result.failures.length > 0) {
+    lines.push("", `Failures (${result.failures.length}); left parked:`);
+    for (const failure of result.failures) {
+      lines.push(`  ${failure.operation}  attemptedNamespace=${failure.attemptedNamespace}  error=${failure.error}`);
+    }
+  }
+  if (result.deleteFailures.length > 0) {
+    lines.push("", `Delete failures (${result.deleteFailures.length}); re-submitted but still parked:`);
+    for (const del of result.deleteFailures) {
+      lines.push(`  ${del.path}  error=${del.error}`);
+    }
+  }
+  return lines.join("\n");
+}
+
+// src/quarantine-replay.ts
+import * as fs from "fs";
+import { EngramAccessService, Orchestrator, initLogger, parseConfig, resolveRemnicConfigRecord } from "@remnic/core";
+import { WriteQuarantineStore } from "@remnic/core/write-quarantine.js";
+function valueFlag(args, flag) {
+  const occurrences = args.filter((a) => a === flag).length;
+  if (occurrences === 0) return void 0;
+  if (occurrences > 1) {
+    throw new Error(`${flag} may be given at most once.`);
+  }
+  const value = args[args.indexOf(flag) + 1];
+  if (value === void 0 || value.startsWith("--")) {
+    throw new Error(`${flag} requires a value. Provide it as \`${flag} <value>\`, not a bare flag.`);
+  }
+  if (value.trim().length === 0) {
+    throw new Error(`${flag} requires a non-empty value.`);
+  }
+  return value;
+}
+async function runQuarantineReplay(rest, format, resolveConfigPath2) {
+  let targetNamespace;
+  let principal;
+  try {
+    targetNamespace = valueFlag(rest, "--namespace");
+    principal = valueFlag(rest, "--principal");
+  } catch (err) {
+    process.stderr.write(`quarantine replay: ${err instanceof Error ? err.message : String(err)}
+`);
+    process.exitCode = 2;
+    return;
+  }
+  if (!targetNamespace || targetNamespace.trim().length === 0) {
+    process.stderr.write("quarantine replay: --namespace <ns> is required.\n");
+    process.exitCode = 2;
+    return;
+  }
+  const valued = /* @__PURE__ */ new Set(["--namespace", "--principal"]);
+  const bad = rest.filter((a, i) => a.startsWith("--") ? a !== "--json" && !valued.has(a) : !valued.has(rest[i - 1]));
+  if (bad.length > 0) {
+    process.stderr.write(
+      `quarantine replay: unexpected argument(s): ${bad.join(", ")}. Use: replay --namespace <ns> [--principal <p>] [--json].
+`
+    );
+    process.exitCode = 2;
+    return;
+  }
+  initLogger();
+  let orchestrator;
+  try {
+    const configPath = resolveConfigPath2();
+    const raw = fs.existsSync(configPath) ? JSON.parse(fs.readFileSync(configPath, "utf8")) : {};
+    const config = parseConfig(resolveRemnicConfigRecord(raw));
+    orchestrator = new Orchestrator(config);
+    await orchestrator.initialize();
+    await orchestrator.deferredReady;
+    const service = new EngramAccessService(orchestrator);
+    const store = new WriteQuarantineStore(config.memoryDir);
+    const result = await replayQuarantine({
+      store,
+      targetNamespace,
+      principal,
+      submit: async (operation, request) => {
+        if (operation === "observe") {
+          await service.observe(request);
+        } else if (operation === "memory_store") {
+          await service.memoryStore(request);
+        } else {
+          await service.suggestionSubmit(request);
+        }
+      }
+    });
+    console.log(renderReplayResult(result, targetNamespace, format));
+    if (result.failures.length > 0 || result.deleteFailures.length > 0) process.exitCode = 1;
+  } catch {
+    process.stderr.write("quarantine replay: unable to replay quarantine store\n");
+    process.exitCode = 2;
+  } finally {
+    if (orchestrator) await orchestrator.destroy();
+  }
+}
 
 // src/offline-impression-rotation.ts
-import fs from "fs";
-import { parseConfig, resolveRemnicConfigRecord, drainPendingImpressionsForOfflineSync } from "@remnic/core";
+import fs2 from "fs";
+import { parseConfig as parseConfig2, resolveRemnicConfigRecord as resolveRemnicConfigRecord2, drainPendingImpressionsForOfflineSync } from "@remnic/core";
 import { LastRecallStore } from "@remnic/core/recall-state";
 function parseConfigQuietly(raw) {
   const originalWarn = console.warn;
   console.warn = () => {
   };
   try {
-    return parseConfig(resolveRemnicConfigRecord(raw));
+    return parseConfig2(resolveRemnicConfigRecord2(raw));
   } finally {
     console.warn = originalWarn;
   }
@@ -268,7 +424,7 @@ var OFFLINE_CONFIG_KEYS = [
 function pickOfflineConfigRecord(raw) {
   let resolved;
   try {
-    resolved = resolveRemnicConfigRecord(raw);
+    resolved = resolveRemnicConfigRecord2(raw);
   } catch {
     resolved = raw && typeof raw === "object" && !Array.isArray(raw) ? raw : {};
   }
@@ -281,7 +437,7 @@ function pickOfflineConfigRecord(raw) {
 function resolveOfflineImpressionRotation(configPath) {
   let raw;
   try {
-    raw = fs.existsSync(configPath) ? JSON.parse(fs.readFileSync(configPath, "utf8")) : {};
+    raw = fs2.existsSync(configPath) ? JSON.parse(fs2.readFileSync(configPath, "utf8")) : {};
   } catch {
     throw new Error(
       `cannot read recall-impression rotation from ${configPath}: config file could not be read as JSON`
@@ -311,7 +467,7 @@ async function drainOfflineSyncImpressions(memoryDir, rotation) {
 
 // src/offline-storage-io.ts
 import { mkdtemp, readdir, lstat, rm } from "fs/promises";
-import fs2 from "fs";
+import fs3 from "fs";
 import path from "path";
 import { createHash, createDecipheriv } from "crypto";
 import {
@@ -447,7 +603,7 @@ async function* readOfflineSyncFileChunks(options) {
   });
 }
 async function readFilePrefix(filePath, length) {
-  const handle = await fs2.promises.open(filePath, "r");
+  const handle = await fs3.promises.open(filePath, "r");
   try {
     const out = Buffer.alloc(length);
     const { bytesRead } = await handle.read(out, 0, length, 0);
@@ -457,7 +613,7 @@ async function readFilePrefix(filePath, length) {
   }
 }
 async function* readPlainOfflineFileChunks(filePath, chunkSize) {
-  const stream = fs2.createReadStream(filePath, { highWaterMark: chunkSize });
+  const stream = fs3.createReadStream(filePath, { highWaterMark: chunkSize });
   for await (const chunk of stream) {
     yield Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
   }
@@ -500,9 +656,9 @@ async function* readEncryptedOfflineFileChunks(options) {
       });
       decipher.setAuthTag(authTag);
       decipher.setAAD(Buffer.concat([secureStoreEnvelopeHeaderAad(salt), aad]));
-      const output = fs2.createWriteStream(tempPath, { mode: 384 });
+      const output = fs3.createWriteStream(tempPath, { mode: 384 });
       try {
-        const stream = fs2.createReadStream(options.filePath, {
+        const stream = fs3.createReadStream(options.filePath, {
           start: MAGIC_HEADER_SIZE + ENVELOPE_HEADER_SIZE,
           highWaterMark: options.chunkSize
         });
@@ -570,10 +726,10 @@ function secureStoreEnvelopeHeaderAad(salt) {
 
 // src/bench-build-freshness.ts
 import {
-  existsSync,
+  existsSync as existsSync2,
   lstatSync,
   readdirSync,
-  readFileSync,
+  readFileSync as readFileSync2,
   statSync
 } from "fs";
 import path2 from "path";
@@ -602,12 +758,12 @@ function assertLocalBenchBuildFreshForDevelopment(currentModuleUrl) {
 }
 function checkBenchBuildFreshness(benchPackageDir) {
   const packageJsonPath = path2.join(benchPackageDir, "package.json");
-  if (!existsSync(packageJsonPath)) {
+  if (!existsSync2(packageJsonPath)) {
     return { stale: false };
   }
   let packageName;
   try {
-    packageName = JSON.parse(readFileSync(packageJsonPath, "utf8")).name;
+    packageName = JSON.parse(readFileSync2(packageJsonPath, "utf8")).name;
   } catch {
     return { stale: false };
   }
@@ -625,7 +781,7 @@ function checkBenchBuildFreshness(benchPackageDir) {
     path2.join(benchPackageDir, "tsconfig.json")
   ];
   const distPath = path2.join(benchPackageDir, "dist", "index.js");
-  if (!existsSync(distPath)) {
+  if (!existsSync2(distPath)) {
     return {
       stale: true,
       reason: `Missing build output: ${distPath}`,
@@ -658,7 +814,7 @@ function checkBenchBuildFreshness(benchPackageDir) {
 function newestMtime(roots) {
   let newest;
   const visit = (entryPath) => {
-    if (!existsSync(entryPath)) {
+    if (!existsSync2(entryPath)) {
       return;
     }
     const stat = lstatSync(entryPath);
@@ -699,7 +855,7 @@ function isTruthyEnv(value) {
 }
 
 // src/optional-bench.ts
-import { existsSync as existsSync2 } from "fs";
+import { existsSync as existsSync3 } from "fs";
 import path3 from "path";
 import { fileURLToPath as fileURLToPath2, pathToFileURL } from "url";
 var SPECIFIER2 = "@remnic/bench";
@@ -719,7 +875,7 @@ async function tryImportLocalWorkspaceBenchSource(err) {
     return null;
   }
   const { sourceEntry } = resolveLocalWorkspaceBenchPaths();
-  if (!existsSync2(sourceEntry)) {
+  if (!existsSync3(sourceEntry)) {
     return null;
   }
   const { tsImport } = await import(TSX_ESM_API_SPECIFIER);
@@ -737,7 +893,7 @@ function isMissingLocalWorkspaceBenchDistError(err) {
     return false;
   }
   const { distEntry, sourceEntry } = resolveLocalWorkspaceBenchPaths();
-  if (existsSync2(distEntry) || !existsSync2(sourceEntry)) {
+  if (existsSync3(distEntry) || !existsSync3(sourceEntry)) {
     return false;
   }
   const message = err.message;
@@ -798,7 +954,7 @@ function assertBenchModuleFreshForDevelopment() {
 }
 
 // src/daemon-service-candidates.ts
-import fs3 from "fs";
+import fs4 from "fs";
 import path4 from "path";
 var LAUNCHD_LABEL = "ai.remnic.daemon";
 var LEGACY_REMNIC_SERVER_LAUNCHD_LABEL = "ai.remnic.server";
@@ -820,7 +976,7 @@ function systemdUnitPaths(homeDir) {
 function anyFileExists(paths) {
   return paths.some((candidate) => {
     try {
-      return fs3.statSync(candidate).isFile();
+      return fs4.statSync(candidate).isFile();
     } catch {
       return false;
     }
@@ -832,7 +988,7 @@ function commandNames(command) {
 }
 function isRunnableNodeScript(filePath) {
   try {
-    const text = fs3.readFileSync(filePath, "utf8").slice(0, 4096);
+    const text = fs4.readFileSync(filePath, "utf8").slice(0, 4096);
     const firstLine = text.split(/\r?\n/, 1)[0] ?? "";
     if (/^#!.*\bnode\b/.test(firstLine)) return true;
     if (firstLine.startsWith("#!")) return false;
@@ -845,7 +1001,7 @@ function isRunnableNodeScript(filePath) {
 function resolveShimNodeScript(filePath) {
   let text;
   try {
-    text = fs3.readFileSync(filePath, "utf8").slice(0, 16384);
+    text = fs4.readFileSync(filePath, "utf8").slice(0, 16384);
   } catch {
     return void 0;
   }
@@ -857,8 +1013,8 @@ function resolveShimNodeScript(filePath) {
     const candidate = raw.replaceAll("${basedir}", basedir).replaceAll("$basedir", basedir).replaceAll("\\ ", " ");
     const resolved = path4.isAbsolute(candidate) ? candidate : path4.resolve(basedir, candidate);
     try {
-      if (fs3.statSync(resolved).isFile() && isRunnableNodeScript(resolved)) {
-        return fs3.realpathSync(resolved);
+      if (fs4.statSync(resolved).isFile() && isRunnableNodeScript(resolved)) {
+        return fs4.realpathSync(resolved);
       }
     } catch {
     }
@@ -866,7 +1022,7 @@ function resolveShimNodeScript(filePath) {
   return void 0;
 }
 function resolveRunnableNodeScript(filePath) {
-  const realPath = fs3.realpathSync(filePath);
+  const realPath = fs4.realpathSync(filePath);
   if (isRunnableNodeScript(realPath)) return realPath;
   return resolveShimNodeScript(realPath);
 }
@@ -876,9 +1032,9 @@ function findCommandOnPath(command, pathEnv = process.env.PATH ?? "") {
     for (const name of commandNames(command)) {
       const candidate = path4.join(dir, name);
       try {
-        const stat = fs3.statSync(candidate);
+        const stat = fs4.statSync(candidate);
         if (!stat.isFile()) continue;
-        if (process.platform !== "win32") fs3.accessSync(candidate, fs3.constants.X_OK);
+        if (process.platform !== "win32") fs4.accessSync(candidate, fs4.constants.X_OK);
         const runnable = resolveRunnableNodeScript(candidate);
         if (runnable) return runnable;
       } catch {
@@ -2233,7 +2389,7 @@ function finalizeBenchStatus(filePath) {
 }
 
 // src/bench-fallback.ts
-import fs4 from "fs";
+import fs5 from "fs";
 import path7 from "path";
 var FALLBACK_RESULTS_DIRNAME = "fallback-runs";
 function buildBenchRunnerArgs(parsed, benchmarkId, outputDir) {
@@ -2305,7 +2461,7 @@ function createFallbackBenchOutputDir(resultsDir, benchmarkId, pid, startedAtMs
   );
 }
 function resolveFallbackBenchResultPath(outputDir) {
-  const entries = fs4.readdirSync(outputDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name).sort();
+  const entries = fs5.readdirSync(outputDir, { withFileTypes: true }).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name).sort();
   if (entries.length === 0) {
     throw new Error(`Fallback benchmark runner did not write a JSON result artifact in ${outputDir}`);
   }
@@ -2313,7 +2469,7 @@ function resolveFallbackBenchResultPath(outputDir) {
 }
 
 // src/openclaw-upgrade-swap.ts
-import fs5 from "fs";
+import fs6 from "fs";
 import path8 from "path";
 function describeError(error) {
   return error instanceof Error ? error.message : String(error);
@@ -2325,7 +2481,7 @@ function createSiblingTempFilePath(targetPath, label) {
 function resolveAtomicWriteMode(targetPath, explicitMode) {
   if (explicitMode !== void 0) return explicitMode;
   try {
-    return fs5.statSync(targetPath).mode & 4095;
+    return fs6.statSync(targetPath).mode & 4095;
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
       return 384;
@@ -2335,8 +2491,8 @@ function resolveAtomicWriteMode(targetPath, explicitMode) {
 }
 function resolveAtomicReplacementPath(targetPath) {
   try {
-    if (fs5.lstatSync(targetPath).isSymbolicLink()) {
-      return fs5.realpathSync(targetPath);
+    if (fs6.lstatSync(targetPath).isSymbolicLink()) {
+      return fs6.realpathSync(targetPath);
     }
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
@@ -2353,7 +2509,7 @@ function createSiblingSwapPath(targetDir, label) {
 function cleanupDisplacedDirectoryBestEffort(displacedDir, context) {
   if (!displacedDir) return void 0;
   try {
-    fs5.rmSync(displacedDir, { recursive: true, force: true });
+    fs6.rmSync(displacedDir, { recursive: true, force: true });
     return void 0;
   } catch (error) {
     return `Warning: ${context}, but failed to remove the displaced plugin copy at ${displacedDir}: ${describeError(error)}`;
@@ -2361,55 +2517,55 @@ function cleanupDisplacedDirectoryBestEffort(displacedDir, context) {
 }
 function atomicWriteFileSync(targetPath, data, options = {}) {
   const resolvedTargetPath = resolveAtomicReplacementPath(targetPath);
-  fs5.mkdirSync(path8.dirname(resolvedTargetPath), { recursive: true });
+  fs6.mkdirSync(path8.dirname(resolvedTargetPath), { recursive: true });
   const tempPath = createSiblingTempFilePath(resolvedTargetPath, "write");
   const mode = resolveAtomicWriteMode(resolvedTargetPath, options.mode);
   try {
     if (options.hooks?.writeTempFileSync) {
       options.hooks.writeTempFileSync(tempPath);
     } else {
-      fs5.writeFileSync(tempPath, data, { mode });
+      fs6.writeFileSync(tempPath, data, { mode });
     }
-    fs5.chmodSync(tempPath, mode);
-    const renameTempFileSync = options.hooks?.renameTempFileSync ?? fs5.renameSync;
+    fs6.chmodSync(tempPath, mode);
+    const renameTempFileSync = options.hooks?.renameTempFileSync ?? fs6.renameSync;
     renameTempFileSync(tempPath, resolvedTargetPath);
   } catch (error) {
-    fs5.rmSync(tempPath, { force: true });
+    fs6.rmSync(tempPath, { force: true });
     throw error;
   }
 }
 function atomicCopyFileSync(sourcePath, targetPath, options = {}) {
-  if (!fs5.existsSync(sourcePath)) return;
+  if (!fs6.existsSync(sourcePath)) return;
   const resolvedTargetPath = resolveAtomicReplacementPath(targetPath);
-  fs5.mkdirSync(path8.dirname(resolvedTargetPath), { recursive: true });
+  fs6.mkdirSync(path8.dirname(resolvedTargetPath), { recursive: true });
   const tempPath = createSiblingTempFilePath(resolvedTargetPath, "copy");
-  const mode = fs5.statSync(sourcePath).mode & 4095;
+  const mode = fs6.statSync(sourcePath).mode & 4095;
   try {
-    const copyTempFileSync = options.hooks?.copyTempFileSync ?? fs5.copyFileSync;
+    const copyTempFileSync = options.hooks?.copyTempFileSync ?? fs6.copyFileSync;
     copyTempFileSync(sourcePath, tempPath);
-    fs5.chmodSync(tempPath, mode);
-    const renameTempFileSync = options.hooks?.renameTempFileSync ?? fs5.renameSync;
+    fs6.chmodSync(tempPath, mode);
+    const renameTempFileSync = options.hooks?.renameTempFileSync ?? fs6.renameSync;
     renameTempFileSync(tempPath, resolvedTargetPath);
   } catch (error) {
-    fs5.rmSync(tempPath, { force: true });
+    fs6.rmSync(tempPath, { force: true });
     throw error;
   }
 }
 function swapDirectoryWithRollback(stagedDir, targetDir, rollbackDir) {
   let hasRollbackCopy = false;
-  fs5.mkdirSync(path8.dirname(targetDir), { recursive: true });
-  fs5.rmSync(rollbackDir, { recursive: true, force: true });
-  if (fs5.existsSync(targetDir)) {
-    fs5.renameSync(targetDir, rollbackDir);
+  fs6.mkdirSync(path8.dirname(targetDir), { recursive: true });
+  fs6.rmSync(rollbackDir, { recursive: true, force: true });
+  if (fs6.existsSync(targetDir)) {
+    fs6.renameSync(targetDir, rollbackDir);
     hasRollbackCopy = true;
   }
   try {
-    fs5.renameSync(stagedDir, targetDir);
+    fs6.renameSync(stagedDir, targetDir);
   } catch (swapError) {
-    fs5.rmSync(targetDir, { recursive: true, force: true });
-    if (hasRollbackCopy && fs5.existsSync(rollbackDir)) {
+    fs6.rmSync(targetDir, { recursive: true, force: true });
+    if (hasRollbackCopy && fs6.existsSync(rollbackDir)) {
       try {
-        fs5.renameSync(rollbackDir, targetDir);
+        fs6.renameSync(rollbackDir, targetDir);
         hasRollbackCopy = false;
       } catch (restoreError) {
         throw new AggregateError(
@@ -2424,7 +2580,7 @@ function swapDirectoryWithRollback(stagedDir, targetDir, rollbackDir) {
 }
 function cleanupRollbackDirectory(rollbackDir) {
   if (!rollbackDir) return;
-  fs5.rmSync(rollbackDir, { recursive: true, force: true });
+  fs6.rmSync(rollbackDir, { recursive: true, force: true });
 }
 function cleanupRollbackDirectoryBestEffort(rollbackDir) {
   if (!rollbackDir) return void 0;
@@ -2436,20 +2592,20 @@ function cleanupRollbackDirectoryBestEffort(rollbackDir) {
   }
 }
 function restoreDirectoryFromRollback(targetDir, rollbackDir) {
-  if (!fs5.existsSync(rollbackDir)) {
+  if (!fs6.existsSync(rollbackDir)) {
     throw new Error(`Rollback directory is missing: ${rollbackDir}`);
   }
-  fs5.mkdirSync(path8.dirname(targetDir), { recursive: true });
-  const displacedDir = fs5.existsSync(targetDir) ? createSiblingSwapPath(targetDir, "rollback-restore") : void 0;
+  fs6.mkdirSync(path8.dirname(targetDir), { recursive: true });
+  const displacedDir = fs6.existsSync(targetDir) ? createSiblingSwapPath(targetDir, "rollback-restore") : void 0;
   if (displacedDir) {
-    fs5.renameSync(targetDir, displacedDir);
+    fs6.renameSync(targetDir, displacedDir);
   }
   try {
-    fs5.renameSync(rollbackDir, targetDir);
+    fs6.renameSync(rollbackDir, targetDir);
   } catch (restoreError) {
-    if (displacedDir && fs5.existsSync(displacedDir)) {
+    if (displacedDir && fs6.existsSync(displacedDir)) {
       try {
-        fs5.renameSync(displacedDir, targetDir);
+        fs6.renameSync(displacedDir, targetDir);
       } catch (revertError) {
         throw new AggregateError(
           [restoreError, revertError],
@@ -2468,23 +2624,23 @@ function restoreDirectoryFromRollback(targetDir, rollbackDir) {
   );
 }
 function restoreDirectoryFromBackup(targetDir, backupDir) {
-  if (!fs5.existsSync(backupDir)) {
+  if (!fs6.existsSync(backupDir)) {
     throw new Error(`Plugin backup directory is missing: ${backupDir}`);
   }
-  fs5.mkdirSync(path8.dirname(targetDir), { recursive: true });
+  fs6.mkdirSync(path8.dirname(targetDir), { recursive: true });
   const stagedDir = createSiblingSwapPath(targetDir, "backup-restore");
-  const displacedDir = fs5.existsSync(targetDir) ? createSiblingSwapPath(targetDir, "pre-backup-restore") : void 0;
-  fs5.cpSync(backupDir, stagedDir, { recursive: true });
+  const displacedDir = fs6.existsSync(targetDir) ? createSiblingSwapPath(targetDir, "pre-backup-restore") : void 0;
+  fs6.cpSync(backupDir, stagedDir, { recursive: true });
   if (displacedDir) {
-    fs5.renameSync(targetDir, displacedDir);
+    fs6.renameSync(targetDir, displacedDir);
   }
   try {
-    fs5.renameSync(stagedDir, targetDir);
+    fs6.renameSync(stagedDir, targetDir);
   } catch (restoreError) {
-    fs5.rmSync(targetDir, { recursive: true, force: true });
-    if (displacedDir && fs5.existsSync(displacedDir)) {
+    fs6.rmSync(targetDir, { recursive: true, force: true });
+    if (displacedDir && fs6.existsSync(displacedDir)) {
       try {
-        fs5.renameSync(displacedDir, targetDir);
+        fs6.renameSync(displacedDir, targetDir);
       } catch (revertError) {
         throw new AggregateError(
           [restoreError, revertError],
@@ -2492,7 +2648,7 @@ function restoreDirectoryFromBackup(targetDir, backupDir) {
         );
       }
     }
-    fs5.rmSync(stagedDir, { recursive: true, force: true });
+    fs6.rmSync(stagedDir, { recursive: true, force: true });
     throw new Error(
       `Failed to restore the plugin backup into ${targetDir}. The durable backup remains preserved at ${backupDir}.`,
       { cause: restoreError }
@@ -2518,7 +2674,7 @@ function rollbackOpenclawUpgrade({
   let rollbackRestoreError;
   let pluginRestored = false;
   try {
-    if (rollbackDir && fs5.existsSync(rollbackDir)) {
+    if (rollbackDir && fs6.existsSync(rollbackDir)) {
       const cleanupWarning = restoreDirectoryFromRollback(pluginDir, rollbackDir);
       notes.push(`Restored previous plugin from rollback copy at ${rollbackDir}`);
       if (cleanupWarning) notes.push(cleanupWarning);
@@ -2528,7 +2684,7 @@ function rollbackOpenclawUpgrade({
     rollbackRestoreError = error instanceof Error ? error.message : String(error);
   }
   try {
-    if (!pluginRestored && pluginBackupDir && fs5.existsSync(pluginBackupDir)) {
+    if (!pluginRestored && pluginBackupDir && fs6.existsSync(pluginBackupDir)) {
       const cleanupWarning = restoreDirectoryFromBackup(pluginDir, pluginBackupDir);
       if (rollbackRestoreError) {
         notes.push(
@@ -2555,7 +2711,7 @@ function rollbackOpenclawUpgrade({
     notes.push("No previous plugin copy was available for automatic restore");
   }
   try {
-    if (configBackupPath && fs5.existsSync(configBackupPath)) {
+    if (configBackupPath && fs6.existsSync(configBackupPath)) {
       restoreFileFromBackup(configPath, configBackupPath);
       notes.push(`Restored OpenClaw config from backup at ${configBackupPath}`);
     }
@@ -2595,7 +2751,7 @@ Run this manually when you're ready:
 }
 
 // src/daemon-service.ts
-import fs6 from "fs";
+import fs7 from "fs";
 import path9 from "path";
 import * as childProcess from "child_process";
 import { fileURLToPath as fileURLToPath3 } from "url";
@@ -2607,7 +2763,7 @@ function launchdUnloadPlist(plistPath, processApi = childProcess) {
   processApi.execFileSync("launchctl", ["unload", plistPath], { stdio: "pipe" });
 }
 function resolveServerBinDetails(options = {}) {
-  const existsSync3 = options.existsSync ?? fs6.existsSync;
+  const existsSync4 = options.existsSync ?? fs7.existsSync;
   const findCommandOnPath2 = options.findCommandOnPath ?? findCommandOnPath;
   const moduleDir = options.moduleDir ?? thisModuleDir;
   const packageResolve = options.packageResolve ?? resolveImportSpecifier;
@@ -2646,12 +2802,12 @@ function resolveServerBinDetails(options = {}) {
     path: path9.resolve(moduleDir, "../../remnic-server/src/index.ts"),
     source: "workspace-source"
   });
-  const selected = candidates.find((candidate) => isCandidateReady(candidate, existsSync3)) ?? candidates.find((candidate) => existsSync3(candidate.path)) ?? candidates[0] ?? {
+  const selected = candidates.find((candidate) => isCandidateReady(candidate, existsSync4)) ?? candidates.find((candidate) => existsSync4(candidate.path)) ?? candidates[0] ?? {
     path: path9.resolve(moduleDir, "../../remnic-server/dist/index.js"),
     source: "workspace-dist"
   };
-  const exists = existsSync3(selected.path);
-  const requiredExists = selected.requiredPath ? existsSync3(selected.requiredPath) : true;
+  const exists = existsSync4(selected.path);
+  const requiredExists = selected.requiredPath ? existsSync4(selected.requiredPath) : true;
   const { requiredPath: _requiredPath, ...publicSelected } = selected;
   return {
     ...publicSelected,
@@ -2659,22 +2815,22 @@ function resolveServerBinDetails(options = {}) {
     loadableByNode: exists && requiredExists && !selected.path.endsWith(".ts")
   };
 }
-function isCandidateReady(candidate, existsSync3) {
-  return existsSync3(candidate.path) && (candidate.requiredPath ? existsSync3(candidate.requiredPath) : true);
+function isCandidateReady(candidate, existsSync4) {
+  return existsSync4(candidate.path) && (candidate.requiredPath ? existsSync4(candidate.requiredPath) : true);
 }
 function resolveServerBin(options = {}) {
   return resolveServerBinDetails(options).path;
 }
 function readVerifiedDaemonPid(options) {
-  const readFileSync3 = options.readFileSync ?? fs6.readFileSync;
-  const unlinkSync = options.unlinkSync ?? fs6.unlinkSync;
+  const readFileSync4 = options.readFileSync ?? fs7.readFileSync;
+  const unlinkSync = options.unlinkSync ?? fs7.unlinkSync;
   const processKill = options.processKill ?? process.kill;
   const platform = options.platform ?? process.platform;
   const execFileSync3 = options.execFileSync ?? ((command, args, execOptions) => childProcess.execFileSync(command, args, execOptions));
   for (const file of options.pidFiles) {
     let pid;
     try {
-      pid = parseDaemonPid(readFileSync3(file, "utf8"));
+      pid = parseDaemonPid(readFileSync4(file, "utf8"));
     } catch {
       continue;
     }
@@ -2767,9 +2923,9 @@ function removePidFileBestEffort(file, unlinkSync) {
   }
 }
 function inspectLaunchdPlist(plistPath, options = {}) {
-  const existsSync3 = options.existsSync ?? fs6.existsSync;
-  const readFileSync3 = options.readFileSync ?? fs6.readFileSync;
-  if (!existsSync3(plistPath)) {
+  const existsSync4 = options.existsSync ?? fs7.existsSync;
+  const readFileSync4 = options.readFileSync ?? fs7.readFileSync;
+  if (!existsSync4(plistPath)) {
     return {
       installed: false,
       ok: true,
@@ -2779,7 +2935,7 @@ function inspectLaunchdPlist(plistPath, options = {}) {
   }
   let content;
   try {
-    content = readFileSync3(plistPath, "utf8");
+    content = readFileSync4(plistPath, "utf8");
   } catch {
     return {
       installed: true,
@@ -2815,7 +2971,7 @@ function inspectLaunchdPlist(plistPath, options = {}) {
       remediation: "Run `remnic daemon install` so launchd uses an absolute Remnic server path."
     };
   }
-  if (!existsSync3(expandedServerArg)) {
+  if (!existsSync4(expandedServerArg)) {
     return {
       installed: true,
       ok: false,
@@ -3002,7 +3158,7 @@ function stripConfigArgv(args) {
 }
 
 // src/import-dispatch.ts
-import fs7 from "fs";
+import fs8 from "fs";
 import {
   runImporter,
   validateImportBatchSize,
@@ -3010,7 +3166,7 @@ import {
 } from "@remnic/core";
 
 // src/import-bundle-detect.ts
-import { lstatSync as lstatSync2, readdirSync as readdirSync2, readFileSync as readFileSync2 } from "fs";
+import { lstatSync as lstatSync2, readdirSync as readdirSync2, readFileSync as readFileSync3 } from "fs";
 import path10 from "path";
 function detectBundleEntries(bundleDir, options = {}) {
   const readdir3 = options.readdirImpl ?? defaultReaddir;
@@ -3132,7 +3288,7 @@ function defaultReaddir(dir) {
   return readdirSync2(dir);
 }
 function defaultReadFile(p) {
-  return readFileSync2(p, "utf-8");
+  return readFileSync3(p, "utf-8");
 }
 function defaultIsDirectory(p) {
   try {
@@ -3516,7 +3672,7 @@ async function cmdImport(rest, targetFactory, disposeTarget, ioOverrides = {}) {
   let materializedTarget;
   let materializePromise;
   const io = {
-    readFile: ioOverrides.readFile ?? (async (p) => fs7.promises.readFile(p, "utf-8")),
+    readFile: ioOverrides.readFile ?? (async (p) => fs8.promises.readFile(p, "utf-8")),
     loadAdapter: ioOverrides.loadAdapter ?? (async (name) => (await loadImporterModule(name)).adapter),
     runImporter: ioOverrides.runImporter ?? runImporter,
     getWriteTarget: async () => {
@@ -3589,7 +3745,7 @@ function takeOptionalValue(args, flag) {
 }
 
 // src/import-lossless-claw-cmd.ts
-import fs8 from "fs";
+import fs9 from "fs";
 import path11 from "path";
 import {
   applyLcmSchema,
@@ -3701,15 +3857,15 @@ async function loadImportLosslessClawModule() {
 
 // src/import-lossless-claw-cmd.ts
 function assertDirectoryOrAbsent(p, label) {
-  if (fs8.existsSync(p) && !fs8.statSync(p).isDirectory()) {
+  if (fs9.existsSync(p) && !fs9.statSync(p).isDirectory()) {
     throw new Error(`${label} is not a directory: ${p}`);
   }
 }
 function assertFile(p, label) {
-  if (!fs8.existsSync(p)) {
+  if (!fs9.existsSync(p)) {
     throw new Error(`${label} does not exist: ${p}`);
   }
-  if (!fs8.statSync(p).isFile()) {
+  if (!fs9.statSync(p).isFile()) {
     throw new Error(`${label} is not a file: ${p}`);
   }
 }
@@ -3741,7 +3897,7 @@ async function cmdImportLosslessClaw(argv, io, deps = {}) {
     try {
       if (parsed.dryRun) {
         const lcmPath = path11.join(memoryDir, "state", "lcm.sqlite");
-        if (fs8.existsSync(lcmPath)) {
+        if (fs9.existsSync(lcmPath)) {
           destDb = mod.openExistingLcmDatabaseReadOnly(lcmPath);
         } else {
           destDb = mod.openInMemoryDestinationDatabase();
@@ -4174,7 +4330,7 @@ async function resolveAllBenchmarks() {
   if (packageBenchmarks) {
     return packageBenchmarks.filter((entry) => entry.runnerAvailable).map((entry) => entry.id);
   }
-  if (!fs9.existsSync(EVAL_RUNNER_PATH)) {
+  if (!fs10.existsSync(EVAL_RUNNER_PATH)) {
     return [];
   }
   return BENCHMARK_CATALOG.filter((entry) => entry.category !== "ingestion").map((entry) => entry.id);
@@ -4222,7 +4378,7 @@ async function runBenchViaFallback(parsed, benchmarkId, runtimeProfile) {
       `Fallback benchmark runner does not support provider-backed, gateway, or thinking/timeout flags (${unsupportedOptions.join(", ")}). Build/install @remnic/bench to use those options.`
     );
   }
-  if (!fs9.existsSync(EVAL_RUNNER_PATH)) {
+  if (!fs10.existsSync(EVAL_RUNNER_PATH)) {
     console.error(
       "Benchmark runner not found. Expected eval runner at evals/run.ts or a phase-1 @remnic/bench runtime export."
     );
@@ -4232,7 +4388,7 @@ async function runBenchViaFallback(parsed, benchmarkId, runtimeProfile) {
     path12.join(CLI_REPO_ROOT, "node_modules", ".bin", "tsx"),
     path12.join(CLI_REPO_ROOT, "packages", "remnic-cli", "node_modules", ".bin", "tsx")
   ];
-  const tsxCmd = tsxCandidates.find((candidate) => fs9.existsSync(candidate)) ?? "tsx";
+  const tsxCmd = tsxCandidates.find((candidate) => fs10.existsSync(candidate)) ?? "tsx";
   const fallbackOutputDir = createFallbackBenchOutputDir(
     parsed.resultsDir ?? resolveBenchOutputDir(),
     benchmarkId,
@@ -4377,9 +4533,9 @@ var PERSONAMEM_COMPLETION_MARKER = path12.join(
 );
 function resolveRealpathWithinDataset(datasetPath, relativePath) {
   try {
-    const datasetRoot = fs9.realpathSync(datasetPath);
+    const datasetRoot = fs10.realpathSync(datasetPath);
     const candidatePath = path12.resolve(datasetRoot, relativePath);
-    const candidateRealPath = fs9.realpathSync(candidatePath);
+    const candidateRealPath = fs10.realpathSync(candidatePath);
     const relativeToRoot = path12.relative(datasetRoot, candidateRealPath);
     if (relativeToRoot.startsWith("..") || path12.isAbsolute(relativeToRoot)) {
       return null;
@@ -4438,14 +4594,14 @@ function parseCsvRows(raw) {
 function isPersonaMemDatasetComplete(datasetPath) {
   try {
     const completionMarkerPath = path12.join(datasetPath, PERSONAMEM_COMPLETION_MARKER);
-    if (fs9.statSync(completionMarkerPath).isFile()) {
+    if (fs10.statSync(completionMarkerPath).isFile()) {
       return true;
     }
   } catch {
   }
   const datasetFile = PERSONAMEM_DATASET_FILE_CANDIDATES.find((candidate) => {
     try {
-      return fs9.statSync(path12.join(datasetPath, candidate)).isFile();
+      return fs10.statSync(path12.join(datasetPath, candidate)).isFile();
     } catch {
       return false;
     }
@@ -4454,7 +4610,7 @@ function isPersonaMemDatasetComplete(datasetPath) {
     return false;
   }
   try {
-    const rows = parseCsvRows(fs9.readFileSync(path12.join(datasetPath, datasetFile), "utf8"));
+    const rows = parseCsvRows(fs10.readFileSync(path12.join(datasetPath, datasetFile), "utf8"));
     if (rows.length < 2) {
       return false;
     }
@@ -4469,7 +4625,7 @@ function isPersonaMemDatasetComplete(datasetPath) {
     }
     return historyPaths.every((relativePath) => {
       const resolvedPath = resolveRealpathWithinDataset(datasetPath, relativePath);
-      return resolvedPath !== null && fs9.statSync(resolvedPath).isFile();
+      return resolvedPath !== null && fs10.statSync(resolvedPath).isFile();
     });
   } catch {
     return false;
@@ -4477,7 +4633,7 @@ function isPersonaMemDatasetComplete(datasetPath) {
 }
 function hasDatasetFile(datasetPath, relativePath) {
   try {
-    return fs9.statSync(path12.join(datasetPath, relativePath)).isFile();
+    return fs10.statSync(path12.join(datasetPath, relativePath)).isFile();
   } catch {
     return false;
   }
@@ -4497,10 +4653,10 @@ function memoryAgentBenchDatasetHasRecSysSamples(datasetPath) {
   return candidateFilenames.some((filename) => {
     const filePath = path12.join(datasetPath, filename);
     try {
-      if (!fs9.statSync(filePath).isFile()) {
+      if (!fs10.statSync(filePath).isFile()) {
         return false;
       }
-      const raw = fs9.readFileSync(filePath, "utf8");
+      const raw = fs10.readFileSync(filePath, "utf8");
       return /"source"\s*:\s*"recsys[_-]/i.test(raw);
     } catch {
       return false;
@@ -4516,7 +4672,7 @@ function isMemoryAgentBenchDatasetComplete(datasetPath) {
 function isDatasetDownloaded(datasetPath, benchmarkId) {
   let stats;
   try {
-    stats = fs9.statSync(datasetPath);
+    stats = fs10.statSync(datasetPath);
   } catch {
     return false;
   }
@@ -4526,7 +4682,7 @@ function isDatasetDownloaded(datasetPath, benchmarkId) {
   const marker = DOWNLOADED_DATASET_MARKERS[benchmarkId];
   if (!marker) {
     try {
-      return fs9.readdirSync(datasetPath).length > 0;
+      return fs10.readdirSync(datasetPath).length > 0;
     } catch {
       return false;
     }
@@ -4534,7 +4690,7 @@ function isDatasetDownloaded(datasetPath, benchmarkId) {
   if (marker.allOf) {
     const hasAllRequiredFiles = marker.allOf.every((name) => {
       try {
-        return fs9.statSync(path12.join(datasetPath, name)).isFile();
+        return fs10.statSync(path12.join(datasetPath, name)).isFile();
       } catch {
         return false;
       }
@@ -4546,7 +4702,7 @@ function isDatasetDownloaded(datasetPath, benchmarkId) {
   if (marker.anyOf) {
     const hasMarkerFile = marker.anyOf.some((name) => {
       try {
-        return fs9.statSync(path12.join(datasetPath, name)).isFile();
+        return fs10.statSync(path12.join(datasetPath, name)).isFile();
       } catch {
         return false;
       }
@@ -4564,7 +4720,7 @@ function isDatasetDownloaded(datasetPath, benchmarkId) {
   }
   if (marker.ext) {
     try {
-      return fs9.readdirSync(datasetPath).some(
+      return fs10.readdirSync(datasetPath).some(
         (name) => name.endsWith(marker.ext) && !marker.exclude?.includes(name)
       );
     } catch {
@@ -4576,7 +4732,7 @@ function isDatasetDownloaded(datasetPath, benchmarkId) {
 async function launchBenchUi(resultsDir) {
   const benchUiDir = path12.join(CLI_REPO_ROOT, "packages", "bench-ui");
   const pnpmCmd = process.platform === "win32" ? "pnpm.cmd" : "pnpm";
-  if (!fs9.existsSync(path12.join(benchUiDir, "package.json"))) {
+  if (!fs10.existsSync(path12.join(benchUiDir, "package.json"))) {
     console.error("ERROR: @remnic/bench-ui is not available in this checkout.");
     process.exit(1);
   }
@@ -4614,13 +4770,13 @@ function listDownloadableBenchmarks() {
 }
 function resolveDatasetDownloadScriptPath() {
   const bundled = path12.join(CLI_MODULE_DIR, "assets", "download-datasets.sh");
-  if (fs9.existsSync(bundled)) {
+  if (fs10.existsSync(bundled)) {
     return bundled;
   }
   return path12.join(CLI_REPO_ROOT, "evals", "scripts", "download-datasets.sh");
 }
 function isRepoCheckout() {
-  return fs9.existsSync(path12.join(CLI_REPO_ROOT, "pnpm-workspace.yaml")) && fs9.existsSync(path12.join(CLI_REPO_ROOT, "evals", "scripts", "download-datasets.sh"));
+  return fs10.existsSync(path12.join(CLI_REPO_ROOT, "pnpm-workspace.yaml")) && fs10.existsSync(path12.join(CLI_REPO_ROOT, "evals", "scripts", "download-datasets.sh"));
 }
 function runDatasetDownloadScript(scriptPath, benchmarkId, datasetRoot, jsonMode) {
   const stdio = jsonMode ? ["inherit", process.stderr, "inherit"] : "inherit";
@@ -4994,8 +5150,8 @@ async function exportBenchPackageResult(parsed) {
     ...reportCardProvenance ? { reportCardProvenance } : {}
   });
   if (parsed.output) {
-    fs9.mkdirSync(path12.dirname(parsed.output), { recursive: true });
-    fs9.writeFileSync(parsed.output, rendered);
+    fs10.mkdirSync(path12.dirname(parsed.output), { recursive: true });
+    fs10.writeFileSync(parsed.output, rendered);
     console.log(`Exported ${summary.id} as ${parsed.format} to ${parsed.output}`);
     return;
   }
@@ -5040,7 +5196,7 @@ async function manageBenchDatasets(parsed) {
     process.exit(1);
   }
   const scriptPath = resolveDatasetDownloadScriptPath();
-  if (!fs9.existsSync(scriptPath)) {
+  if (!fs10.existsSync(scriptPath)) {
     console.error(`ERROR: dataset download script not found: ${scriptPath}`);
     process.exit(1);
   }
@@ -5240,7 +5396,7 @@ async function calibrateBenchJudges(parsed, rawArgs) {
     );
     process.exit(1);
   }
-  const sourceResultSha256 = createHash2("sha256").update(fs9.readFileSync(latest.path)).digest("hex");
+  const sourceResultSha256 = createHash2("sha256").update(fs10.readFileSync(latest.path)).digest("hex");
   const expandedManifestPath = expandTilde(manifestPath);
   if (!bench.resolveLocalLabJudgeProviderConfig) {
     console.error(
@@ -5648,7 +5804,7 @@ function loadPinnedLoCoMoTaskSelector(parsed) {
   }
   let decoded;
   try {
-    decoded = JSON.parse(fs9.readFileSync(parsed.taskIdsFile, "utf8"));
+    decoded = JSON.parse(fs10.readFileSync(parsed.taskIdsFile, "utf8"));
   } catch (error) {
     throw new Error(
       `Unable to read --task-ids-file ${parsed.taskIdsFile}: ${error instanceof Error ? error.message : String(error)}`
@@ -5744,7 +5900,7 @@ async function loadPublishedPromotionHelpers() {
   const benchModule = await loadBenchModule();
   return {
     async promoteArtifactsToPublished(args) {
-      const { mkdirSync, readFileSync: readFileSync3, writeFileSync } = await import("fs");
+      const { mkdirSync, readFileSync: readFileSync4, writeFileSync } = await import("fs");
       const path13 = await import("path");
       mkdirSync(args.publishedOutDir, { recursive: true });
       if (args.artifactPaths.length === 0) {
@@ -5754,7 +5910,7 @@ async function loadPublishedPromotionHelpers() {
         return;
       }
       for (const artifactPath of args.artifactPaths) {
-        const raw = readFileSync3(artifactPath, "utf8");
+        const raw = readFileSync4(artifactPath, "utf8");
         const parsedUnknown = JSON.parse(raw);
         const parsedObj = parsedUnknown !== null && typeof parsedUnknown === "object" && !Array.isArray(parsedUnknown) ? parsedUnknown : {};
         const gitShaShort = (parsedObj.meta?.gitSha ?? "unknown").slice(0, 7);
@@ -6288,7 +6444,7 @@ function resolveBenchReproDatasetDir(datasetDir) {
     return void 0;
   }
   try {
-    return fs9.realpathSync(datasetDir);
+    return fs10.realpathSync(datasetDir);
   } catch {
     return datasetDir;
   }
@@ -6351,13 +6507,13 @@ function resolveConfigPath(cliPath) {
     path12.join(resolveHomeDir(), ".config", "engram", "config.json")
   ];
   for (const candidate of candidates) {
-    if (fs9.existsSync(candidate)) return candidate;
+    if (fs10.existsSync(candidate)) return candidate;
   }
   return path12.join(resolveHomeDir(), ".config", "remnic", "config.json");
 }
 function resolveExistingBenchRemnicConfigPath(cliPath) {
   const configPath = resolveConfigPath(cliPath);
-  if (fs9.existsSync(configPath)) {
+  if (fs10.existsSync(configPath)) {
     return configPath;
   }
   if (cliPath) {
@@ -6367,7 +6523,7 @@ function resolveExistingBenchRemnicConfigPath(cliPath) {
 }
 function resolveExistingBenchOpenclawConfigPath(cliPath) {
   const configPath = resolveOpenclawConfigPath(cliPath);
-  if (fs9.existsSync(configPath)) {
+  if (fs10.existsSync(configPath)) {
     return configPath;
   }
   if (cliPath) {
@@ -6474,8 +6630,8 @@ function resolveMemoryDir() {
     const envMemoryDir = readCompatEnv("REMNIC_MEMORY_DIR", "ENGRAM_MEMORY_DIR");
     if (envMemoryDir) return normalizeMemoryDirPath(envMemoryDir);
     const configPath = resolveConfigPath();
-    const raw = fs9.existsSync(configPath) ? JSON.parse(fs9.readFileSync(configPath, "utf8")) : {};
-    const remnicCfg = resolveRemnicConfigRecord2(raw);
+    const raw = fs10.existsSync(configPath) ? JSON.parse(fs10.readFileSync(configPath, "utf8")) : {};
+    const remnicCfg = resolveRemnicConfigRecord3(raw);
     if (typeof remnicCfg.memoryDir === "string" && remnicCfg.memoryDir.length > 0) {
       return normalizeMemoryDirPath(remnicCfg.memoryDir);
     }
@@ -6483,18 +6639,18 @@ function resolveMemoryDir() {
     const standalonePath = path12.join(home, ".remnic", "memory");
     const legacyStandalonePath = path12.join(home, ".engram", "memory");
     const openclawPath = path12.join(home, ".openclaw", "workspace", "memory", "local");
-    if (fs9.existsSync(standalonePath)) return standalonePath;
-    if (fs9.existsSync(legacyStandalonePath)) return legacyStandalonePath;
+    if (fs10.existsSync(standalonePath)) return standalonePath;
+    if (fs10.existsSync(legacyStandalonePath)) return legacyStandalonePath;
     return openclawPath;
   })();
   const manifestPath = getManifestPath();
-  if (fs9.existsSync(manifestPath)) {
+  if (fs10.existsSync(manifestPath)) {
     try {
       const active = getActiveSpace();
       if (active?.memoryDir) {
         const activeMemoryDir = normalizeMemoryDirPath(active.memoryDir);
-        if (!fs9.existsSync(activeMemoryDir)) {
-          fs9.mkdirSync(activeMemoryDir, { recursive: true });
+        if (!fs10.existsSync(activeMemoryDir)) {
+          fs10.mkdirSync(activeMemoryDir, { recursive: true });
         }
         return activeMemoryDir;
       }
@@ -6540,13 +6696,13 @@ function resolveOpenclawConfigPath(cliPath) {
   const envPath = process.env.OPENCLAW_CONFIG_PATH || process.env.OPENCLAW_ENGRAM_CONFIG_PATH;
   if (envPath) return path12.resolve(expandTilde(envPath));
   for (const candidate of DEFAULT_OPENCLAW_CONFIG_PATHS_FOR_DOCTOR) {
-    if (fs9.existsSync(candidate)) return candidate;
+    if (fs10.existsSync(candidate)) return candidate;
   }
   return path12.join(resolveHomeDir(), ".openclaw", "openclaw.json");
 }
 function readOpenclawConfig(configPath) {
-  if (!fs9.existsSync(configPath)) return {};
-  const raw = fs9.readFileSync(configPath, "utf-8");
+  if (!fs10.existsSync(configPath)) return {};
+  const raw = fs10.readFileSync(configPath, "utf-8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -6645,14 +6801,14 @@ function formatOpenclawUpgradeStamp(now = /* @__PURE__ */ new Date()) {
   return `${yyyy}${mm}${dd}-${hh}${min}${ss}`;
 }
 function backupPathIfPresent(sourcePath, backupPath) {
-  if (!fs9.existsSync(sourcePath)) return false;
-  fs9.mkdirSync(path12.dirname(backupPath), { recursive: true });
-  fs9.cpSync(sourcePath, backupPath, { recursive: true });
+  if (!fs10.existsSync(sourcePath)) return false;
+  fs10.mkdirSync(path12.dirname(backupPath), { recursive: true });
+  fs10.cpSync(sourcePath, backupPath, { recursive: true });
   return true;
 }
 function assertDirectoryPathOrMissing(targetPath, label) {
-  if (!fs9.existsSync(targetPath)) return;
-  const stat = fs9.statSync(targetPath);
+  if (!fs10.existsSync(targetPath)) return;
+  const stat = fs10.statSync(targetPath);
   if (!stat.isDirectory()) {
     throw new Error(`${label} must be a directory when it already exists: ${targetPath}`);
   }
@@ -6677,7 +6833,7 @@ var PublishedOpenclawPluginInstallError = class extends Error {
   }
 };
 function installPublishedOpenclawPlugin(spec, pluginDir) {
-  const tempRoot = fs9.mkdtempSync(path12.join(os.tmpdir(), "remnic-openclaw-upgrade-"));
+  const tempRoot = fs10.mkdtempSync(path12.join(os.tmpdir(), "remnic-openclaw-upgrade-"));
   const stagedDir = `${pluginDir}.next-${process.pid}-${Date.now()}`;
   const rollbackDir = `${pluginDir}.rollback-${process.pid}-${Date.now()}`;
   let swapRollbackDir;
@@ -6693,16 +6849,16 @@ function installPublishedOpenclawPlugin(spec, pluginDir) {
       throw new Error(`npm pack ${spec} did not return a tarball name`);
     }
     const unpackDir = path12.join(tempRoot, "unpacked");
-    fs9.mkdirSync(unpackDir, { recursive: true });
+    fs10.mkdirSync(unpackDir, { recursive: true });
     childProcess2.execFileSync("tar", ["-xzf", path12.join(tempRoot, tarballName), "-C", unpackDir], {
       stdio: ["ignore", "pipe", "pipe"]
     });
     const packagedDir = path12.join(unpackDir, "package");
-    if (!fs9.existsSync(packagedDir)) {
+    if (!fs10.existsSync(packagedDir)) {
       throw new Error(`npm pack ${spec} did not contain a package/ directory`);
     }
-    fs9.rmSync(stagedDir, { recursive: true, force: true });
-    fs9.cpSync(packagedDir, stagedDir, { recursive: true });
+    fs10.rmSync(stagedDir, { recursive: true, force: true });
+    fs10.cpSync(packagedDir, stagedDir, { recursive: true });
     childProcess2.execFileSync("npm", ["install", "--omit=dev"], {
       cwd: stagedDir,
       stdio: ["ignore", "pipe", "pipe"]
@@ -6718,7 +6874,7 @@ function installPublishedOpenclawPlugin(spec, pluginDir) {
     })();
     swapRollbackDir = swapResult.rollbackDir;
     const installedPackageJsonPath = path12.join(pluginDir, "package.json");
-    const installedPackage = fs9.existsSync(installedPackageJsonPath) ? JSON.parse(fs9.readFileSync(installedPackageJsonPath, "utf8")) : {};
+    const installedPackage = fs10.existsSync(installedPackageJsonPath) ? JSON.parse(fs10.readFileSync(installedPackageJsonPath, "utf8")) : {};
     return {
       rollbackDir: swapRollbackDir,
       version: typeof installedPackage.version === "string" ? installedPackage.version : void 0
@@ -6733,8 +6889,8 @@ function installPublishedOpenclawPlugin(spec, pluginDir) {
       }
     );
   } finally {
-    fs9.rmSync(stagedDir, { recursive: true, force: true });
-    fs9.rmSync(tempRoot, { recursive: true, force: true });
+    fs10.rmSync(stagedDir, { recursive: true, force: true });
+    fs10.rmSync(tempRoot, { recursive: true, force: true });
   }
 }
 function restartOpenclawGateway() {
@@ -6753,7 +6909,7 @@ function restartOpenclawGateway() {
 }
 function cmdInit() {
   const configPath = path12.join(process.cwd(), "remnic.config.json");
-  if (fs9.existsSync(configPath)) {
+  if (fs10.existsSync(configPath)) {
     console.log(`Config already exists: ${configPath}`);
     return;
   }
@@ -6769,7 +6925,7 @@ function cmdInit() {
       authToken: "${REMNIC_AUTH_TOKEN}"
     }
   };
-  fs9.writeFileSync(configPath, JSON.stringify(template, null, 2) + "\n");
+  fs10.writeFileSync(configPath, JSON.stringify(template, null, 2) + "\n");
   console.log(`Created ${configPath}`);
   console.log("\nSet these environment variables:");
   console.log("  export OPENAI_API_KEY=sk-...");
@@ -6839,7 +6995,7 @@ async function cmdStatus(json) {
 }
 function oauthReadConfigRecord(configPath) {
   try {
-    const parsed = JSON.parse(fs9.readFileSync(configPath, "utf8"));
+    const parsed = JSON.parse(fs10.readFileSync(configPath, "utf8"));
     if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
       return parsed;
     }
@@ -7253,14 +7409,14 @@ async function cmdQuery(queryText, json, explain) {
     console.error("Usage: remnic query <text>");
     process.exit(1);
   }
-  initLogger();
+  initLogger2();
   const configPath = resolveConfigPath();
-  const raw = fs9.existsSync(configPath) ? JSON.parse(fs9.readFileSync(configPath, "utf8")) : {};
-  const remnicCfg = resolveRemnicConfigRecord2(raw);
-  const config = parseConfig2(remnicCfg);
-  const orchestrator = new Orchestrator(config);
+  const raw = fs10.existsSync(configPath) ? JSON.parse(fs10.readFileSync(configPath, "utf8")) : {};
+  const remnicCfg = resolveRemnicConfigRecord3(raw);
+  const config = parseConfig3(remnicCfg);
+  const orchestrator = new Orchestrator2(config);
   await orchestrator.initialize();
-  const service = new EngramAccessService(orchestrator);
+  const service = new EngramAccessService2(orchestrator);
   const recallRequest = buildQueryRecallRequest(queryText);
   try {
     if (explain) {
@@ -7424,15 +7580,15 @@ async function runXrayCommand(rest, io) {
 async function cmdXray(rest) {
   const { rawQuery, options } = extractXrayRawArgs(rest);
   parseXrayCliOptions(rawQuery, options);
-  initLogger();
+  initLogger2();
   const configPath = resolveConfigPath();
-  const raw = fs9.existsSync(configPath) ? JSON.parse(fs9.readFileSync(configPath, "utf8")) : {};
-  const remnicCfg = resolveRemnicConfigRecord2(raw);
-  const config = parseConfig2(remnicCfg);
-  const orchestrator = new Orchestrator(config);
+  const raw = fs10.existsSync(configPath) ? JSON.parse(fs10.readFileSync(configPath, "utf8")) : {};
+  const remnicCfg = resolveRemnicConfigRecord3(raw);
+  const config = parseConfig3(remnicCfg);
+  const orchestrator = new Orchestrator2(config);
   await orchestrator.initialize();
   await orchestrator.deferredReady;
-  const service = new EngramAccessService(orchestrator);
+  const service = new EngramAccessService2(orchestrator);
   try {
     await runXrayCommand(rest, {
       recallXray: (request) => service.recallXray(request),
@@ -7447,11 +7603,11 @@ async function cmdXray(rest) {
   }
 }
 async function cmdVersions(rest) {
-  initLogger();
+  initLogger2();
   const configPath = resolveConfigPath();
-  const raw = fs9.existsSync(configPath) ? JSON.parse(fs9.readFileSync(configPath, "utf8")) : {};
-  const remnicCfg = resolveRemnicConfigRecord2(raw);
-  const config = parseConfig2(remnicCfg);
+  const raw = fs10.existsSync(configPath) ? JSON.parse(fs10.readFileSync(configPath, "utf8")) : {};
+  const remnicCfg = resolveRemnicConfigRecord3(raw);
+  const config = parseConfig3(remnicCfg);
   if (!config.versioningEnabled) {
     console.error("Page versioning is disabled (versioningEnabled = false).");
     process.exit(1);
@@ -7563,11 +7719,11 @@ Options:
   }
 }
 async function cmdEnrich(rest) {
-  initLogger();
+  initLogger2();
   const configPath = resolveConfigPath();
-  const raw = fs9.existsSync(configPath) ? JSON.parse(fs9.readFileSync(configPath, "utf8")) : {};
-  const remnicCfg = resolveRemnicConfigRecord2(raw);
-  const config = parseConfig2(remnicCfg);
+  const raw = fs10.existsSync(configPath) ? JSON.parse(fs10.readFileSync(configPath, "utf8")) : {};
+  const remnicCfg = resolveRemnicConfigRecord3(raw);
+  const config = parseConfig3(remnicCfg);
   const subcommand = rest[0];
   if (subcommand === "audit") {
     const memoryDir2 = expandTilde(config.memoryDir);
@@ -7595,7 +7751,7 @@ async function cmdEnrich(rest) {
     pipelineConfig2.providers = [
       { id: "web-search", enabled: true, costTier: "cheap" }
     ];
-    const orchestrator2 = new Orchestrator(config);
+    const orchestrator2 = new Orchestrator2(config);
     await orchestrator2.initialize();
     await orchestrator2.deferredReady;
     const searchBackend2 = orchestrator2.qmd;
@@ -7631,7 +7787,7 @@ Registered providers:`);
     console.error("Usage: remnic enrich <entity-name> | --all | --dry-run | audit | providers");
     process.exit(1);
   }
-  const orchestrator = new Orchestrator(config);
+  const orchestrator = new Orchestrator2(config);
   await orchestrator.initialize();
   await orchestrator.deferredReady;
   const storage = await orchestrator.getStorage(config.defaultNamespace);
@@ -7757,7 +7913,7 @@ Registered providers:`);
   }
 }
 async function cmdProcedural(rest) {
-  initLogger();
+  initLogger2();
   const subcommand = rest[0];
   if (!subcommand || subcommand === "--help" || subcommand === "-h") {
     console.log(`remnic procedural \u2014 Procedural memory operations (issue #567)
@@ -7810,9 +7966,9 @@ Shared with:
     process.exit(1);
   }
   const configPath = resolveConfigPath();
-  const raw = fs9.existsSync(configPath) ? JSON.parse(fs9.readFileSync(configPath, "utf8")) : {};
-  const remnicCfg = resolveRemnicConfigRecord2(raw);
-  const config = parseConfig2(remnicCfg);
+  const raw = fs10.existsSync(configPath) ? JSON.parse(fs10.readFileSync(configPath, "utf8")) : {};
+  const remnicCfg = resolveRemnicConfigRecord3(raw);
+  const config = parseConfig3(remnicCfg);
   const memoryDir = expandTilde(
     typeof memoryDirOverride === "string" && memoryDirOverride.length > 0 ? memoryDirOverride : config.memoryDir ?? resolveMemoryDir()
   );
@@ -7825,11 +7981,11 @@ Shared with:
   process.stdout.write(formatProcedureStatsText(report));
 }
 async function cmdExtensions(action, rest) {
-  initLogger();
+  initLogger2();
   const configPath = resolveConfigPath();
-  const raw = fs9.existsSync(configPath) ? JSON.parse(fs9.readFileSync(configPath, "utf8")) : {};
-  const remnicCfg = resolveRemnicConfigRecord2(raw);
-  const config = parseConfig2(remnicCfg);
+  const raw = fs10.existsSync(configPath) ? JSON.parse(fs10.readFileSync(configPath, "utf8")) : {};
+  const remnicCfg = resolveRemnicConfigRecord3(raw);
+  const config = parseConfig3(remnicCfg);
   const root = resolveExtensionsRoot(config);
   const noopLog = { warn: () => {
   }, debug: () => {
@@ -7878,7 +8034,7 @@ Root: ${root}`);
       const extensions = await discoverMemoryExtensions(root, warnLog);
       let entries = [];
       try {
-        entries = fs9.readdirSync(root);
+        entries = fs10.readdirSync(root);
       } catch {
         console.log(`Extensions root does not exist: ${root}`);
         process.exitCode = 0;
@@ -7889,7 +8045,7 @@ Root: ${root}`);
       for (const entry of entries) {
         const entryPath = path12.join(root, entry);
         try {
-          if (!fs9.statSync(entryPath).isDirectory()) continue;
+          if (!fs10.statSync(entryPath).isDirectory()) continue;
         } catch {
           continue;
         }
@@ -7919,11 +8075,11 @@ Root: ${root}`);
   }
 }
 async function cmdBriefing(rest) {
-  initLogger();
+  initLogger2();
   const configPath = resolveConfigPath();
-  const raw = fs9.existsSync(configPath) ? JSON.parse(fs9.readFileSync(configPath, "utf8")) : {};
-  const remnicCfg = resolveRemnicConfigRecord2(raw);
-  const config = parseConfig2(remnicCfg);
+  const raw = fs10.existsSync(configPath) ? JSON.parse(fs10.readFileSync(configPath, "utf8")) : {};
+  const remnicCfg = resolveRemnicConfigRecord3(raw);
+  const config = parseConfig3(remnicCfg);
   if (!config.briefing.enabled) {
     console.error("Briefing is disabled in config (briefing.enabled = false).");
     process.exit(1);
@@ -7976,7 +8132,7 @@ async function cmdBriefing(rest) {
     process.exit(1);
   }
   const format = effectiveFormatFlag === "json" ? "json" : effectiveFormatFlag === "markdown" ? "markdown" : config.briefing.defaultFormat;
-  const orchestrator = new Orchestrator(config);
+  const orchestrator = new Orchestrator2(config);
   await orchestrator.initialize();
   const storage = await orchestrator.getStorage(config.defaultNamespace);
   const calendarSource = config.briefing.calendarSource ? new FileCalendarSource(config.briefing.calendarSource) : void 0;
@@ -8001,10 +8157,10 @@ async function cmdBriefing(rest) {
   if (save) {
     try {
       const saveDir = resolveBriefingSaveDir(config.briefing.saveDir);
-      fs9.mkdirSync(saveDir, { recursive: true });
+      fs10.mkdirSync(saveDir, { recursive: true });
       const filename = briefingFilename(new Date(result.window.to), format);
       const filePath = path12.join(saveDir, filename);
-      fs9.writeFileSync(filePath, payload + (payload.endsWith("\n") ? "" : "\n"));
+      fs10.writeFileSync(filePath, payload + (payload.endsWith("\n") ? "" : "\n"));
       console.error(`Saved briefing: ${filePath}`);
     } catch (err) {
       console.error(`Failed to save briefing: ${err instanceof Error ? err.message : String(err)}`);
@@ -8022,7 +8178,7 @@ async function cmdDoctor() {
     detail: `${nodeVersion} (requires >= 22.12.0)`
   });
   const configPath = resolveConfigPath();
-  const configExists = fs9.existsSync(configPath);
+  const configExists = fs10.existsSync(configPath);
   checks.push({ name: "Config file", ok: configExists, detail: configPath });
   let standaloneConfig;
   let standaloneConfigError;
@@ -8030,11 +8186,11 @@ async function cmdDoctor() {
   let configuredNs = { invalid: false };
   if (configExists) {
     try {
-      const raw = JSON.parse(fs9.readFileSync(configPath, "utf8"));
-      const remnicCfg = resolveRemnicConfigRecord2(raw);
+      const raw = JSON.parse(fs10.readFileSync(configPath, "utf8"));
+      const remnicCfg = resolveRemnicConfigRecord3(raw);
       standaloneOpenaiApiKeyExplicitlyFalse = isOpenaiApiKeyDisabled(remnicCfg.openaiApiKey);
       configuredNs = readConfiguredNamespace(remnicCfg);
-      standaloneConfig = parseConfig2(remnicCfg);
+      standaloneConfig = parseConfig3(remnicCfg);
     } catch (err) {
       standaloneConfigError = err instanceof Error ? err.message : String(err);
     }
@@ -8043,16 +8199,16 @@ async function cmdDoctor() {
   try {
     memoryDir = resolveMemoryDir();
   } catch {
-    memoryDir = parseConfig2({}).memoryDir;
+    memoryDir = parseConfig3({}).memoryDir;
   }
   try {
-    fs9.mkdirSync(memoryDir, { recursive: true });
+    fs10.mkdirSync(memoryDir, { recursive: true });
     checks.push({ name: "Memory directory", ok: true, detail: memoryDir });
   } catch {
     checks.push({ name: "Memory directory", ok: false, detail: `cannot create ${memoryDir}` });
   }
   try {
-    const quarantined = await new WriteQuarantineStore(memoryDir).count();
+    const quarantined = await new WriteQuarantineStore2(memoryDir).count();
     checks.push({
       name: "Quarantined writes",
       ok: quarantined === 0,
@@ -8075,7 +8231,7 @@ async function cmdDoctor() {
   });
   if (nsPolicyCheck) checks.push(nsPolicyCheck);
   const openclawConfigPath = resolveOpenclawConfigPath();
-  const openclawConfigExists = fs9.existsSync(openclawConfigPath);
+  const openclawConfigExists = fs10.existsSync(openclawConfigPath);
   let openclawConfig = {};
   let openclawConfigValid = false;
   let openclawPluginModeConfigured = false;
@@ -8083,7 +8239,7 @@ async function cmdDoctor() {
   let activeOpenclawEntryConfig = null;
   if (openclawConfigExists) {
     try {
-      const parsed = JSON.parse(fs9.readFileSync(openclawConfigPath, "utf-8"));
+      const parsed = JSON.parse(fs10.readFileSync(openclawConfigPath, "utf-8"));
       if (typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)) {
         openclawConfig = parsed;
         openclawConfigValid = true;
@@ -8163,9 +8319,9 @@ async function cmdDoctor() {
         let memDirOk = false;
         let memDirDetail = `${resolvedMemDir} (not found)`;
         let memDirRemediation = `Run \`remnic openclaw install --memory-dir "${resolvedMemDir}"\` to create the directory.`;
-        if (fs9.existsSync(resolvedMemDir)) {
+        if (fs10.existsSync(resolvedMemDir)) {
           try {
-            const stat = fs9.statSync(resolvedMemDir);
+            const stat = fs10.statSync(resolvedMemDir);
             if (stat.isDirectory()) {
               memDirOk = true;
               memDirDetail = resolvedMemDir;
@@ -8307,12 +8463,12 @@ async function cmdDoctor() {
 }
 function cmdConfig() {
   const configPath = resolveConfigPath();
-  if (!fs9.existsSync(configPath)) {
+  if (!fs10.existsSync(configPath)) {
     console.log("No config file found. Run `remnic init` to create one.");
     return;
   }
   console.log(`Config: ${configPath}`);
-  const rawConfig = fs9.readFileSync(configPath, "utf8");
+  const rawConfig = fs10.readFileSync(configPath, "utf8");
   const redacted = rawConfig.replace(
     /("(?:openaiApiKey|localLlmApiKey|authToken|apiKey|remoteSearchApiKey|meilisearchApiKey|opikApiKey)"\s*:\s*")([^"]*)(")/g,
     "$1[REDACTED]$3"
@@ -8420,9 +8576,9 @@ async function cmdReview(action, rest) {
     const configPath = resolveConfigPath();
     let tombstonesConfig = null;
     try {
-      const rawCfg = fs9.existsSync(configPath) ? JSON.parse(fs9.readFileSync(configPath, "utf8")) : {};
-      const remnicCfg = resolveRemnicConfigRecord2(rawCfg);
-      const config = parseConfig2(remnicCfg);
+      const rawCfg = fs10.existsSync(configPath) ? JSON.parse(fs10.readFileSync(configPath, "utf8")) : {};
+      const remnicCfg = resolveRemnicConfigRecord3(rawCfg);
+      const config = parseConfig3(remnicCfg);
       tombstonesConfig = {
         enabled: config.tombstonesEnabled,
         semanticMatch: config.tombstonesSemanticMatch,
@@ -8872,8 +9028,8 @@ var APPEND_TOLERANT_RUNTIME_STATE_FILES = /* @__PURE__ */ new Set([
 function isAppendTolerantOfflineRuntimeFile(relPath) {
   if (!shouldPreferIncomingOfflineRuntimeFile(relPath)) return false;
   const parts = relPath.split("/");
-  const basename = parts[parts.length - 1] ?? "";
-  return APPEND_TOLERANT_RUNTIME_STATE_FILES.has(basename);
+  const basename2 = parts[parts.length - 1] ?? "";
+  return APPEND_TOLERANT_RUNTIME_STATE_FILES.has(basename2);
 }
 function offlineFileContentChunkMatchesExpected(options) {
   const { chunk, expected, offset } = options;
@@ -9173,7 +9329,7 @@ async function pushOfflineFileContent(args) {
 }
 async function pushOfflineFileContentFromChunkReader(args) {
   const filePath = resolveOfflineDirectHydrationPath(args.memoryDir, args.file.path);
-  const stat = fs9.statSync(filePath);
+  const stat = fs10.statSync(filePath);
   if (stat.mtimeMs !== args.file.mtimeMs) {
     throw new Error(`local file changed while pushing offline content: ${args.file.path}`);
   }
@@ -9664,7 +9820,7 @@ function advanceOfflineBaseFilesForSuccessfulPush(options) {
   return [...next.values()].sort((left, right) => left.path.localeCompare(right.path));
 }
 async function runOfflineSyncOnce(options) {
-  fs9.mkdirSync(options.memoryDir, { recursive: true });
+  fs10.mkdirSync(options.memoryDir, { recursive: true });
   let activeStatePath = options.statePath;
   let priorState = await readOfflineSyncState(activeStatePath);
   let syncNamespace = options.namespace ?? priorState?.namespace;
@@ -10290,7 +10446,7 @@ Environment fallbacks:
   const configPath = resolveConfigPath();
   let config;
   try {
-    const rawConfig = fs9.existsSync(configPath) ? JSON.parse(fs9.readFileSync(configPath, "utf8")) : {};
+    const rawConfig = fs10.existsSync(configPath) ? JSON.parse(fs10.readFileSync(configPath, "utf8")) : {};
     config = parseConfigQuietly(pickOfflineConfigRecord(rawConfig));
   } catch {
     throw new Error(
@@ -10305,7 +10461,7 @@ Environment fallbacks:
   const statePath = statePathExplicit ? path12.resolve(expandTilde(stateOverride)) : remoteUrl !== void 0 ? defaultOfflineSyncStatePath(memoryDir, remoteUrl, namespace) : void 0;
   if (action === "prepare") {
     if (!remoteUrl || !token || !statePath) throw new Error("offline prepare requires remote URL and token");
-    fs9.mkdirSync(memoryDir, { recursive: true });
+    fs10.mkdirSync(memoryDir, { recursive: true });
     const remoteSnapshot = await fetchOfflineSnapshot({
       remoteUrl,
       token,
@@ -10403,7 +10559,7 @@ Environment fallbacks:
     return;
   }
   if (action === "status") {
-    fs9.mkdirSync(memoryDir, { recursive: true });
+    fs10.mkdirSync(memoryDir, { recursive: true });
     const state = statePath ? await readOfflineSyncState(statePath) : null;
     if (state && remoteUrl && statePath) {
       assertOfflineStateMatches({
@@ -10541,7 +10697,7 @@ function cmdDedup(json) {
 function readInstalledConnectorConfig(configPath, fallback) {
   if (!configPath) return fallback;
   try {
-    const parsed = JSON.parse(fs9.readFileSync(configPath, "utf8"));
+    const parsed = JSON.parse(fs10.readFileSync(configPath, "utf8"));
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return fallback;
     const { token: _token, ...config } = parsed;
     return config;
@@ -10554,27 +10710,31 @@ function snapshotConnectorTokenEntry(connectorId) {
   return entry ? { ...entry } : null;
 }
 async function cmdQuarantine(action, rest, json) {
-  if (action !== "list") {
-    process.stderr.write(`quarantine: unknown action "${action}". Use: list [--json].
+  if (action !== "list" && action !== "replay") {
+    process.stderr.write(`quarantine: unknown action "${action}". Use: list|replay [--namespace <ns>] [--principal <p>] [--json].
 `);
     process.exitCode = 2;
     return;
   }
-  const extra = rest.filter((a) => !a.startsWith("--"));
-  if (extra.length > 0) {
-    process.stderr.write(`quarantine list: unexpected argument(s): ${extra.join(", ")}. Use: list [--json].
+  const format = json ? "json" : "text";
+  if (action === "list") {
+    const extra = rest.filter((a) => !a.startsWith("--"));
+    if (extra.length > 0) {
+      process.stderr.write(`quarantine list: unexpected argument(s): ${extra.join(", ")}. Use: list [--json].
 `);
-    process.exitCode = 2;
+      process.exitCode = 2;
+      return;
+    }
+    try {
+      const store = new WriteQuarantineStore2(resolveMemoryDir());
+      console.log(renderQuarantineList(await store.list(), format));
+    } catch {
+      process.stderr.write("quarantine list: unable to inspect quarantine store\n");
+      process.exitCode = 2;
+    }
     return;
   }
-  const format = json ? "json" : "text";
-  try {
-    const store = new WriteQuarantineStore(resolveMemoryDir());
-    console.log(renderQuarantineList(await store.list(), format));
-  } catch {
-    process.stderr.write("quarantine list: unable to inspect quarantine store\n");
-    process.exitCode = 2;
-  }
+  await runQuarantineReplay(rest, format, resolveConfigPath);
 }
 async function cmdConnectors(action, rest, json) {
   const rawNonFlagArgs = rest.filter((a) => !a.startsWith("--"));
@@ -10715,7 +10875,7 @@ async function cmdConnectors(action, rest, json) {
           const pub = factory();
           const available = await pub.isHostAvailable();
           const extRoot = available ? await pub.resolveExtensionRoot() : "(host not installed)";
-          const extensionExists = available && extRoot ? fs9.existsSync(extRoot) : false;
+          const extensionExists = available && extRoot ? fs10.existsSync(extRoot) : false;
           publisherChecks.push({
             name: `Publisher: ${targetHostId}`,
             ok: !available || extensionExists,
@@ -10789,7 +10949,7 @@ async function cmdConnectors(action, rest, json) {
     let connectorsCfg;
     const configPath = resolveConfigPath();
     try {
-      const raw = fs9.existsSync(configPath) ? JSON.parse(fs9.readFileSync(configPath, "utf8")) : {};
+      const raw = fs10.existsSync(configPath) ? JSON.parse(fs10.readFileSync(configPath, "utf8")) : {};
       connectorsCfg = parseConfigQuietly(raw).connectors;
     } catch {
       process.stderr.write(
@@ -10863,12 +11023,12 @@ async function cmdConnectors(action, rest, json) {
       process.exitCode = 2;
       return;
     }
-    initLogger();
+    initLogger2();
     const configPath = resolveConfigPath();
-    const raw = fs9.existsSync(configPath) ? JSON.parse(fs9.readFileSync(configPath, "utf8")) : {};
-    const remnicCfg = resolveRemnicConfigRecord2(raw);
-    const config = parseConfig2(remnicCfg);
-    const orchestrator = new Orchestrator(config);
+    const raw = fs10.existsSync(configPath) ? JSON.parse(fs10.readFileSync(configPath, "utf8")) : {};
+    const remnicCfg = resolveRemnicConfigRecord3(raw);
+    const config = parseConfig3(remnicCfg);
+    const orchestrator = new Orchestrator2(config);
     try {
       await orchestrator.initialize();
       await orchestrator.deferredReady;
@@ -10990,9 +11150,9 @@ async function cmdConnectorsMarketplace(subAction, rest, json) {
     console.error(`connectors marketplace: ${err instanceof Error ? err.message : String(err)}`);
     process.exit(1);
   }
-  const rawConfig = fs9.existsSync(configPath) ? JSON.parse(fs9.readFileSync(configPath, "utf8")) : {};
-  const pluginConfig = resolveRemnicConfigRecord2(rawConfig);
-  const config = parseConfig2(pluginConfig);
+  const rawConfig = fs10.existsSync(configPath) ? JSON.parse(fs10.readFileSync(configPath, "utf8")) : {};
+  const pluginConfig = resolveRemnicConfigRecord3(rawConfig);
+  const config = parseConfig3(pluginConfig);
   if (subAction === "generate") {
     let outputDir;
     try {
@@ -11012,13 +11172,13 @@ async function cmdConnectorsMarketplace(subAction, rest, json) {
   } else if (subAction === "validate") {
     const targetPath = rest.filter((a) => !a.startsWith("--"))[0] ?? path12.join(process.cwd(), "marketplace.json");
     const resolved = path12.resolve(targetPath);
-    if (!fs9.existsSync(resolved)) {
+    if (!fs10.existsSync(resolved)) {
       console.error(`File not found: ${resolved}`);
       process.exit(1);
     }
     let parsed;
     try {
-      parsed = JSON.parse(fs9.readFileSync(resolved, "utf8"));
+      parsed = JSON.parse(fs10.readFileSync(resolved, "utf8"));
     } catch {
       console.error(`Invalid JSON in ${resolved}`);
       process.exit(1);
@@ -11217,13 +11377,13 @@ async function cmdSpace(action, rest, json) {
   }
 }
 async function cmdLegacyBenchmark(action, rest, json) {
-  initLogger();
+  initLogger2();
   const configPath = resolveConfigPath();
-  const raw = fs9.existsSync(configPath) ? JSON.parse(fs9.readFileSync(configPath, "utf8")) : {};
-  const remnicCfg = resolveRemnicConfigRecord2(raw);
-  const config = parseConfig2(remnicCfg);
-  const orchestrator = new Orchestrator(config);
-  const service = new EngramAccessService(orchestrator);
+  const raw = fs10.existsSync(configPath) ? JSON.parse(fs10.readFileSync(configPath, "utf8")) : {};
+  const remnicCfg = resolveRemnicConfigRecord3(raw);
+  const config = parseConfig3(remnicCfg);
+  const orchestrator = new Orchestrator2(config);
+  const service = new EngramAccessService2(orchestrator);
   const { runBenchSuite, loadBaseline, checkRegression } = await loadBenchModule();
   const benchConfig = {
     queries: rest.filter((a) => !a.startsWith("--")).length > 0 ? rest.filter((a) => !a.startsWith("--")) : void 0,
@@ -11612,7 +11772,7 @@ function readPid() {
 function inferPort() {
   try {
     const configPath = resolveConfigPath();
-    const raw = JSON.parse(fs9.readFileSync(configPath, "utf8"));
+    const raw = JSON.parse(fs10.readFileSync(configPath, "utf8"));
     return raw.server?.port ?? 4318;
   } catch {
     return 4318;
@@ -11707,13 +11867,13 @@ function daemonInstall() {
     process.exit(1);
   }
   const vars = { HOME: home, NODE_PATH: nodePath, REMNIC_SERVER_BIN: serverBin };
-  fs9.mkdirSync(LOGS_DIR, { recursive: true });
+  fs10.mkdirSync(LOGS_DIR, { recursive: true });
   if (isMacOS()) {
     const templatePath = path12.resolve(import.meta.dirname, "../templates/launchd/ai.remnic.daemon.plist");
-    const template = fs9.readFileSync(templatePath, "utf8");
+    const template = fs10.readFileSync(templatePath, "utf8");
     const plist = renderTemplate(template, vars);
-    fs9.mkdirSync(path12.dirname(LAUNCHD_PLIST_PATH), { recursive: true });
-    fs9.writeFileSync(LAUNCHD_PLIST_PATH, plist);
+    fs10.mkdirSync(path12.dirname(LAUNCHD_PLIST_PATH), { recursive: true });
+    fs10.writeFileSync(LAUNCHD_PLIST_PATH, plist);
     try {
       launchdLoadPlist(LAUNCHD_PLIST_PATH);
     } catch (err) {
@@ -11730,10 +11890,10 @@ function daemonInstall() {
     console.log(`  Logs: ${LOGS_DIR}/daemon.log`);
   } else if (isLinux()) {
     const templatePath = path12.resolve(import.meta.dirname, "../templates/systemd/remnic.service");
-    const template = fs9.readFileSync(templatePath, "utf8");
+    const template = fs10.readFileSync(templatePath, "utf8");
     const unit = renderTemplate(template, vars);
-    fs9.mkdirSync(path12.dirname(SYSTEMD_UNIT_PATH), { recursive: true });
-    fs9.writeFileSync(SYSTEMD_UNIT_PATH, unit);
+    fs10.mkdirSync(path12.dirname(SYSTEMD_UNIT_PATH), { recursive: true });
+    fs10.writeFileSync(SYSTEMD_UNIT_PATH, unit);
     try {
       childProcess2.execSync("systemctl --user daemon-reload", { stdio: "pipe" });
     } catch (err) {
@@ -11769,7 +11929,7 @@ function daemonUninstall() {
       } catch {
       }
       try {
-        fs9.unlinkSync(plistPath);
+        fs10.unlinkSync(plistPath);
         removed = true;
         console.log(`Removed launchd service: ${plistPath}`);
       } catch {
@@ -11789,7 +11949,7 @@ function daemonUninstall() {
     let removed = false;
     for (const unitPath of SYSTEMD_UNIT_PATHS) {
       try {
-        fs9.unlinkSync(unitPath);
+        fs10.unlinkSync(unitPath);
         removed = true;
         console.log(`Removed systemd service: ${unitPath}`);
       } catch {
@@ -11856,13 +12016,13 @@ async function daemonStatus() {
   console.log(`  Port:      ${port}`);
   console.log(`  Service:   ${serviceInstalled ? "installed" : "not installed"}`);
   console.log(`  Platform:  ${process.platform}`);
-  console.log(`  PID file:  ${fs9.existsSync(PID_FILE) ? PID_FILE : LEGACY_PID_FILE}`);
-  console.log(`  Log file:  ${fs9.existsSync(LOG_FILE) ? LOG_FILE : LEGACY_LOG_FILE}`);
+  console.log(`  PID file:  ${fs10.existsSync(PID_FILE) ? PID_FILE : LEGACY_PID_FILE}`);
+  console.log(`  Log file:  ${fs10.existsSync(LOG_FILE) ? LOG_FILE : LEGACY_LOG_FILE}`);
   try {
     const configPath = resolveConfigPath();
-    const raw = fs9.existsSync(configPath) ? JSON.parse(fs9.readFileSync(configPath, "utf8")) : {};
-    const remnicCfg = resolveRemnicConfigRecord2(raw);
-    const config = parseConfig2(remnicCfg);
+    const raw = fs10.existsSync(configPath) ? JSON.parse(fs10.readFileSync(configPath, "utf8")) : {};
+    const remnicCfg = resolveRemnicConfigRecord3(raw);
+    const config = parseConfig3(remnicCfg);
     const extRoot = resolveExtensionsRoot(config);
     const noopLog = { warn: () => {
     }, debug: () => {
@@ -11901,9 +12061,9 @@ function daemonStart() {
       return;
     }
   }
-  fs9.mkdirSync(PID_DIR, { recursive: true });
-  fs9.mkdirSync(LOGS_DIR, { recursive: true });
-  const logStream = fs9.openSync(LOG_FILE, "a");
+  fs10.mkdirSync(PID_DIR, { recursive: true });
+  fs10.mkdirSync(LOGS_DIR, { recursive: true });
+  const logStream = fs10.openSync(LOG_FILE, "a");
   const serverBin = resolveServerBin();
   const isSource = serverBin.endsWith(".ts");
   let cmd;
@@ -11925,7 +12085,7 @@ function daemonStart() {
     }
   });
   child.unref();
-  fs9.writeFileSync(PID_FILE, String(child.pid));
+  fs10.writeFileSync(PID_FILE, String(child.pid));
   console.log(`Started remnic server (pid ${child.pid})`);
   console.log(`  Log: ${LOG_FILE}`);
 }
@@ -11959,11 +12119,11 @@ function daemonStop() {
     console.log("Process not found (cleaning up PID file)");
   }
   try {
-    fs9.unlinkSync(PID_FILE);
+    fs10.unlinkSync(PID_FILE);
   } catch {
   }
   try {
-    fs9.unlinkSync(LEGACY_PID_FILE);
+    fs10.unlinkSync(LEGACY_PID_FILE);
   } catch {
   }
 }
@@ -12089,11 +12249,11 @@ async function promptYesNo(question, defaultYes = true) {
   });
 }
 async function cmdBinary(rest) {
-  initLogger();
+  initLogger2();
   const configPath = resolveConfigPath();
-  const raw = fs9.existsSync(configPath) ? JSON.parse(fs9.readFileSync(configPath, "utf8")) : {};
-  const remnicCfg = resolveRemnicConfigRecord2(raw);
-  const config = parseConfig2(remnicCfg);
+  const raw = fs10.existsSync(configPath) ? JSON.parse(fs10.readFileSync(configPath, "utf8")) : {};
+  const remnicCfg = resolveRemnicConfigRecord3(raw);
+  const config = parseConfig3(remnicCfg);
   const memoryDir = resolveMemoryDir();
   const blConfig = {
     enabled: config.binaryLifecycleEnabled,
@@ -12282,7 +12442,7 @@ async function cmdOpenclawInstall(opts) {
   } else if (slotIsActiveLegacy) {
     changes.push(`  Slot left as "${REMNIC_OPENCLAW_LEGACY_PLUGIN_ID}" \u2014 re-run with --yes to activate the new entry`);
   }
-  if (!fs9.existsSync(memoryDir)) changes.push(`+ Will create memory directory: ${memoryDir}`);
+  if (!fs10.existsSync(memoryDir)) changes.push(`+ Will create memory directory: ${memoryDir}`);
   if (hasLegacy && migrateLegacy) {
     changes.push(`~ Legacy '${REMNIC_OPENCLAW_LEGACY_PLUGIN_ID}' entry retained (safe to remove after verifying hooks fire)`);
   }
@@ -12302,8 +12462,8 @@ async function cmdOpenclawInstall(opts) {
 Resulting plugins.slots.memory: ${dryRunPlugins.slots?.memory ?? "(unset)"}`);
     return;
   }
-  if (fs9.existsSync(memoryDir)) {
-    const st = fs9.statSync(memoryDir);
+  if (fs10.existsSync(memoryDir)) {
+    const st = fs10.statSync(memoryDir);
     if (!st.isDirectory()) {
       throw new Error(
         `Cannot use ${memoryDir} as the memory directory \u2014 a file already exists at that path.
@@ -12311,12 +12471,12 @@ Remove it first and re-run, or choose a different path with --memory-dir.`
       );
     }
   } else {
-    fs9.mkdirSync(memoryDir, { recursive: true });
+    fs10.mkdirSync(memoryDir, { recursive: true });
     console.log(`Created memory directory: ${memoryDir}`);
   }
   const configDir = path12.dirname(configPath);
-  if (!fs9.existsSync(configDir)) {
-    fs9.mkdirSync(configDir, { recursive: true });
+  if (!fs10.existsSync(configDir)) {
+    fs10.mkdirSync(configDir, { recursive: true });
   }
   atomicWriteFileSync(configPath, JSON.stringify(updatedConfig, null, 2) + "\n");
   console.log("\nDone! Summary of changes:");
@@ -12488,15 +12648,15 @@ async function cmdOpenclawMigrateEngram(opts) {
 }
 function createOpenclawUpgradeBackupDir() {
   const backupsRoot = path12.join(resolveHomeDir(), ".openclaw", "backups");
-  fs9.mkdirSync(backupsRoot, { recursive: true });
-  return fs9.mkdtempSync(path12.join(backupsRoot, `remnic-openclaw-upgrade-${formatOpenclawUpgradeStamp()}-`));
+  fs10.mkdirSync(backupsRoot, { recursive: true });
+  return fs10.mkdtempSync(path12.join(backupsRoot, `remnic-openclaw-upgrade-${formatOpenclawUpgradeStamp()}-`));
 }
 async function cmdTaxonomy(rest) {
-  initLogger();
+  initLogger2();
   const configPath = resolveConfigPath();
-  const raw = fs9.existsSync(configPath) ? JSON.parse(fs9.readFileSync(configPath, "utf8")) : {};
-  const remnicCfg = resolveRemnicConfigRecord2(raw);
-  const config = parseConfig2(remnicCfg);
+  const raw = fs10.existsSync(configPath) ? JSON.parse(fs10.readFileSync(configPath, "utf8")) : {};
+  const remnicCfg = resolveRemnicConfigRecord3(raw);
+  const config = parseConfig3(remnicCfg);
   if (!config.taxonomyEnabled) {
     console.error(
       "Taxonomy is disabled in config (taxonomyEnabled = false). Enable it to use taxonomy commands."
@@ -12532,8 +12692,8 @@ async function cmdTaxonomy(rest) {
       console.log(doc);
       if (config.taxonomyAutoGenResolver) {
         const resolverPath = path12.join(config.memoryDir, ".taxonomy", "RESOLVER.md");
-        fs9.mkdirSync(path12.dirname(resolverPath), { recursive: true });
-        fs9.writeFileSync(resolverPath, doc);
+        fs10.mkdirSync(path12.dirname(resolverPath), { recursive: true });
+        fs10.writeFileSync(resolverPath, doc);
         console.error(`Written: ${resolverPath}`);
       }
       break;
@@ -12579,7 +12739,7 @@ async function cmdTaxonomy(rest) {
       if (config.taxonomyAutoGenResolver) {
         const doc = generateResolverDocument(taxonomy);
         const resolverPath = path12.join(config.memoryDir, ".taxonomy", "RESOLVER.md");
-        fs9.writeFileSync(resolverPath, doc);
+        fs10.writeFileSync(resolverPath, doc);
         console.error(`Regenerated: ${resolverPath}`);
       }
       break;
@@ -12610,7 +12770,7 @@ async function cmdTaxonomy(rest) {
       if (config.taxonomyAutoGenResolver) {
         const doc = generateResolverDocument(taxonomy);
         const resolverPath = path12.join(config.memoryDir, ".taxonomy", "RESOLVER.md");
-        fs9.writeFileSync(resolverPath, doc);
+        fs10.writeFileSync(resolverPath, doc);
         console.error(`Regenerated: ${resolverPath}`);
       }
       break;
@@ -12801,12 +12961,12 @@ async function runTrainingExport(args, stdout = process.stdout) {
       `Unknown training-export format "${args.format}". ${validList}`
     );
   }
-  if (!fs9.existsSync(args.memoryDir)) {
+  if (!fs10.existsSync(args.memoryDir)) {
     throw new Error(
       `--memory-dir "${args.memoryDir}" does not exist. Provide the path to an existing memory directory.`
     );
   }
-  if (!fs9.statSync(args.memoryDir).isDirectory()) {
+  if (!fs10.statSync(args.memoryDir).isDirectory()) {
     throw new Error(
       `--memory-dir "${args.memoryDir}" is not a directory. Provide the path to a memory directory, not a file.`
     );
@@ -12892,10 +13052,10 @@ async function runTrainingExport(args, stdout = process.stdout) {
   }
   const formatted = adapter.formatRecords(records);
   const outDir = path12.dirname(args.output);
-  fs9.mkdirSync(outDir, { recursive: true });
+  fs10.mkdirSync(outDir, { recursive: true });
   const tmpPath = `${args.output}.tmp-${process.pid}-${Date.now()}`;
-  fs9.writeFileSync(tmpPath, formatted, "utf-8");
-  fs9.renameSync(tmpPath, args.output);
+  fs10.writeFileSync(tmpPath, formatted, "utf-8");
+  fs10.renameSync(tmpPath, args.output);
   stdout.write(
     `Exported ${records.length} records to ${args.output} (${adapter.name} format)
 `
@@ -13064,7 +13224,7 @@ async function main(argv = process.argv.slice(2)) {
             }
           }, 500);
         };
-        fs9.watch(memoryDir, { recursive: true }, (_event, filename) => {
+        fs10.watch(memoryDir, { recursive: true }, (_event, filename) => {
           if (filename && filename.startsWith(".")) return;
           rebuild();
         });
@@ -13072,12 +13232,12 @@ async function main(argv = process.argv.slice(2)) {
         });
       } else if (subAction === "validate") {
         const treeDir = outputDir;
-        if (!fs9.existsSync(treeDir)) {
+        if (!fs10.existsSync(treeDir)) {
           console.error(`Context tree not found at ${treeDir}. Run 'remnic tree generate' first.`);
           process.exit(1);
         }
         const indexPath = path12.join(treeDir, "INDEX.md");
-        if (!fs9.existsSync(indexPath)) {
+        if (!fs10.existsSync(indexPath)) {
           console.error(`INDEX.md missing in ${treeDir}. Tree may be corrupt \u2014 regenerate.`);
           process.exit(1);
         }
@@ -13247,10 +13407,10 @@ Other:
         let wearablesService;
         try {
           const configPath = resolveConfigPath();
-          const raw = fs9.existsSync(configPath) ? JSON.parse(fs9.readFileSync(configPath, "utf8")) : {};
-          const remnicCfg = resolveRemnicConfigRecord2(raw);
-          const config = parseConfig2(remnicCfg);
-          wearablesOrchestrator = new Orchestrator(config);
+          const raw = fs10.existsSync(configPath) ? JSON.parse(fs10.readFileSync(configPath, "utf8")) : {};
+          const remnicCfg = resolveRemnicConfigRecord3(raw);
+          const config = parseConfig3(remnicCfg);
+          wearablesOrchestrator = new Orchestrator2(config);
           await wearablesOrchestrator.initialize();
           await wearablesOrchestrator.deferredReady;
           wearablesService = wearablesOrchestrator.getWearablesService();
@@ -13291,10 +13451,10 @@ Other:
       const targetFactory = async () => {
         if (!orchestratorSingleton) {
           const configPath = resolveConfigPath();
-          const raw = fs9.existsSync(configPath) ? JSON.parse(fs9.readFileSync(configPath, "utf8")) : {};
-          const remnicCfg = resolveRemnicConfigRecord2(raw);
-          const config = parseConfig2(remnicCfg);
-          orchestratorSingleton = new Orchestrator(config);
+          const raw = fs10.existsSync(configPath) ? JSON.parse(fs10.readFileSync(configPath, "utf8")) : {};
+          const remnicCfg = resolveRemnicConfigRecord3(raw);
+          const config = parseConfig3(remnicCfg);
+          orchestratorSingleton = new Orchestrator2(config);
           await orchestratorSingleton.initialize();
           await orchestratorSingleton.deferredReady;
         }
@@ -13507,7 +13667,7 @@ Usage:
     marketplace generate    Generate marketplace.json for Codex
     marketplace validate    Validate a marketplace.json file
     marketplace install     Install from a marketplace source
-  remnic quarantine list [--json]   Inspect writes the namespace ACL rejected
+  remnic quarantine <list|replay> [--namespace <ns>] [--principal <p>] [--json]  Inspect/replay ACL-rejected writes
   remnic extensions <list|show|validate|reload>  Manage memory extensions
   remnic space <list|switch|create|delete|push|pull|share|promote|audit>  Manage spaces
     create accepts --parent <id> to set parent-child relationship