@remnic/core 1.0.3 → 1.1.0

package/dist/intent.js

@@ -4,7 +4,7 @@ import {
   intentCompatibilityScore,
   isTaskInitiationIntent,
   planRecallMode
-} from "./chunk-BKQJBXXX.js";
+} from "./chunk-GGD5W7TB.js";
 export {
   hasBroadGraphIntent,
   inferIntentFromText,

package/dist/local-llm.d.ts

@@ -52,9 +52,16 @@ declare class LocalLlmClient {
     private static readonly LMS_CACHE_INTERVAL_MS;
     constructor(config: PluginConfig, modelRegistry?: ModelRegistry);
     /**
-     * Disable thinking/reasoning mode for models that support it (e.g. Qwen 3.5).
-     * When enabled, adds chat_template_kwargs to suppress chain-of-thought,
-     * reducing latency for fast-tier operations.
+     * Request thinking/reasoning suppression on the next chat completion.
+     *
+     * When `true`, the client will inject
+     * `chat_template_kwargs: { enable_thinking: false }` into the request
+     * body — **but only when the detected backend is known to support it**
+     * (LM Studio, vLLM; see `THINKING_COMPATIBLE_BACKENDS`).  Strict
+     * OpenAI-compat backends reject unknown fields with 400; on those the
+     * client fails open (thinking runs normally).  This is the safe
+     * default for Remnic extraction / consolidation: measurable latency
+     * win on thinking-capable backends, zero risk on others.  Issue #548.
      */
     set disableThinking(value: boolean);
     private resolveHomeDir;

package/dist/local-llm.js

@@ -1,6 +1,6 @@
 import {
   LocalLlmClient
-} from "./chunk-UPMD5XND.js";
+} from "./chunk-JL2PU6AI.js";
 import "./chunk-LK6SGL53.js";
 import "./chunk-MARWOCVP.js";
 import "./chunk-2ODBA7MQ.js";

package/dist/operator-toolkit.js

@@ -5,32 +5,33 @@ import {
   runOperatorInventory,
   runOperatorRepair,
   runOperatorSetup
-} from "./chunk-X4WESCKA.js";
-import "./chunk-HITJFT7E.js";
+} from "./chunk-3QHL5ABG.js";
+import "./chunk-ZVBB3T7V.js";
 import "./chunk-YRMVARQP.js";
+import "./chunk-BLKTA7MM.js";
 import "./chunk-U66YHYC7.js";
-import "./chunk-7PA4OZEU.js";
+import "./chunk-LK6SGL53.js";
 import "./chunk-7SEAZFFB.js";
 import "./chunk-K6WK37A6.js";
-import "./chunk-LK6SGL53.js";
-import "./chunk-OJFGVJS6.js";
+import "./chunk-MBJHSA7F.js";
 import "./chunk-Z5LAYHGJ.js";
 import "./chunk-C2EFFULQ.js";
+import "./chunk-PVGDJXVK.js";
 import "./chunk-MARWOCVP.js";
-import "./chunk-POBPGDWI.js";
+import "./chunk-ITRLGI2T.js";
 import "./chunk-QNJMBKFK.js";
 import "./chunk-TBBDFYXW.js";
 import "./chunk-LPSF4OQH.js";
-import "./chunk-POMSFKTB.js";
-import "./chunk-U2IQTSBY.js";
+import "./chunk-GV6NLQ4X.js";
+import "./chunk-3WHVNEN7.js";
 import "./chunk-4KAN3GZ3.js";
 import "./chunk-6ZH4TU6I.js";
-import "./chunk-6PFRXT4K.js";
-import "./chunk-TP4FZJIZ.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-BOUYNNYD.js";
-import "./chunk-QSVPYQPG.js";
+import "./chunk-6PFRXT4K.js";
+import "./chunk-TP4FZJIZ.js";
 import "./chunk-DM2T26WE.js";
+import "./chunk-QSVPYQPG.js";
 import "./chunk-M62O4P4T.js";
 import "./chunk-4DJQYKMN.js";
 import "./chunk-2ODBA7MQ.js";

package/dist/{orchestrator-B9kwlCep.d.ts → orchestrator-DRYA6_lW.d.ts}

@@ -240,11 +240,11 @@ declare const SharedFeedbackEntrySchema: z.ZodObject<{
     date: string;
     reason: string;
     confidence?: number | undefined;
+    workflow?: string | undefined;
     tags?: string[] | undefined;
     severity?: "low" | "medium" | "high" | undefined;
     outcome?: string | undefined;
     refs?: string[] | undefined;
-    workflow?: string | undefined;
     learning?: string | undefined;
     evidenceWindowStart?: string | undefined;
     evidenceWindowEnd?: string | undefined;
@@ -254,11 +254,11 @@ declare const SharedFeedbackEntrySchema: z.ZodObject<{
     date: string;
     reason: string;
     confidence?: number | undefined;
+    workflow?: string | undefined;
     tags?: string[] | undefined;
     severity?: "low" | "medium" | "high" | undefined;
     outcome?: string | undefined;
     refs?: string[] | undefined;
-    workflow?: string | undefined;
     learning?: string | undefined;
     evidenceWindowStart?: string | undefined;
     evidenceWindowEnd?: string | undefined;
@@ -917,6 +917,7 @@ declare class Orchestrator {
     private autoRegisterDaySummaryCron;
     private autoRegisterNightlyGovernanceCron;
     private autoRegisterProceduralMiningCron;
+    private autoRegisterContradictionScanCron;
     applyBehaviorRuntimePolicy(state: BehaviorLoopPolicyState): Promise<{
         applied: boolean;
         rolledBack: boolean;
@@ -1153,6 +1154,24 @@ declare class Orchestrator {
      * Called automatically when items are queued.
      */
     private processQueue;
+    /**
+     * Classify + log a failure from either the per-task catch inside
+     * `processQueue()` or the outer `processQueue().catch(...)` in
+     * `queueBufferedExtraction()`.  Issue #549: `throwIfRecallAborted`
+     * (used throughout `runExtraction`) raises an Error whose `name` is
+     * `"AbortError"`.  That path fires when `before_reset` aborts a
+     * queued task to avoid duplicate extraction — it is intentional
+     * cancellation, not a failure.  Downgrading the log to debug
+     * prevents spurious `error`-level lines that routinely appear
+     * right next to a successful `persisted: N facts, M entities` log
+     * and that confuse operators into thinking extraction is broken.
+     * Genuine extraction failures (network, parse, I/O) still log at
+     * `error`.
+     *
+     * Source differentiates the two call sites so the log message
+     * names the right layer (`task` vs `processor`).
+     */
+    private logExtractionQueueFailure;
     private runExtraction;
     private recordProcessedExtractionFingerprint;
     private runTierMigrationCycle;

package/dist/orchestrator.d.ts

@@ -10,7 +10,7 @@ import './negative.js';
 import './recall-state.js';
 import './session-observer-state.js';
 import './embedding-fallback.js';
-export { l as GraphRecallRankedResult, m as GraphRecallShadowComparison, G as GraphRecallSnapshot, I as IntentDebugSnapshot, O as Orchestrator, Q as QmdRecallSnapshot, n as RecallInvocationOptions, o as RecallModeDecision, q as appendMemoryToGraphContext, r as blendGraphExpandedRecallScore, t as buildCompressionGuidelinesMarkdown, u as buildMemoryPathById, w as computeArtifactCandidateFetchLimit, x as computeArtifactRecallLimit, y as computeQmdHybridFetchLimit, z as dedupeEntitySynthesisEvidenceEntries, j as defaultWorkspaceDir, A as deriveTopicsFromExtraction, D as filterRecallCandidates, E as formatCompressionGuidelinesForRecall, F as graphPathRelativeToStorage, H as hasIdentityRecoveryIntent, J as isArtifactMemoryPath, K as lifecycleRecallScoreAdjustment, L as mergeArtifactRecallCandidates, M as mergeGraphExpandedResults, N as resolveEffectiveIdentityInjectionMode, P as resolveEffectiveRecallMode, S as resolvePersistedMemoryRelativePath, T as resolveRecallModeDecision, U as resolveRecentThreadMemoryPaths, s as sanitizeSessionKeyForFilename, V as shouldFilterLifecycleRecallCandidate, W as summarizeGraphShadowComparison } from './orchestrator-B9kwlCep.js';
+export { l as GraphRecallRankedResult, m as GraphRecallShadowComparison, G as GraphRecallSnapshot, I as IntentDebugSnapshot, O as Orchestrator, Q as QmdRecallSnapshot, n as RecallInvocationOptions, o as RecallModeDecision, q as appendMemoryToGraphContext, r as blendGraphExpandedRecallScore, t as buildCompressionGuidelinesMarkdown, u as buildMemoryPathById, w as computeArtifactCandidateFetchLimit, x as computeArtifactRecallLimit, y as computeQmdHybridFetchLimit, z as dedupeEntitySynthesisEvidenceEntries, j as defaultWorkspaceDir, A as deriveTopicsFromExtraction, D as filterRecallCandidates, E as formatCompressionGuidelinesForRecall, F as graphPathRelativeToStorage, H as hasIdentityRecoveryIntent, J as isArtifactMemoryPath, K as lifecycleRecallScoreAdjustment, L as mergeArtifactRecallCandidates, M as mergeGraphExpandedResults, N as resolveEffectiveIdentityInjectionMode, P as resolveEffectiveRecallMode, S as resolvePersistedMemoryRelativePath, T as resolveRecallModeDecision, U as resolveRecentThreadMemoryPaths, s as sanitizeSessionKeyForFilename, V as shouldFilterLifecycleRecallCandidate, W as summarizeGraphShadowComparison } from './orchestrator-DRYA6_lW.js';
 import './types.js';
 import './semantic-consolidation-DrvSYRdB.js';
 import './policy-runtime.js';

package/dist/orchestrator.js

@@ -26,67 +26,72 @@ import {
   sanitizeSessionKeyForFilename,
   shouldFilterLifecycleRecallCandidate,
   summarizeGraphShadowComparison
-} from "./chunk-XMGSSBFX.js";
-import "./chunk-JROGC36Y.js";
+} from "./chunk-DEPL3635.js";
+import "./chunk-DHHP2Z4X.js";
+import "./chunk-UHGBNIOS.js";
 import "./chunk-FSFEQI74.js";
+import "./chunk-N42IWANG.js";
+import "./chunk-ETOW6ACV.js";
 import "./chunk-W6SL7OFG.js";
 import "./chunk-Z5AAYHUC.js";
 import "./chunk-S75M5ZRK.js";
 import "./chunk-TPB3I2AC.js";
-import "./chunk-UHGBNIOS.js";
-import "./chunk-BTY5RRRF.js";
-import "./chunk-ETOW6ACV.js";
-import "./chunk-KVE7R4CG.js";
 import "./chunk-JR4ZC3G4.js";
+import "./chunk-KVE7R4CG.js";
+import "./chunk-X7XN6YU4.js";
+import "./chunk-5NPGSAVB.js";
 import "./chunk-C7VW7C3F.js";
 import "./chunk-K4FLSOR5.js";
 import "./chunk-V3RXWQIE.js";
 import "./chunk-5IZL4DCV.js";
+import "./chunk-YCN4BVDK.js";
 import "./chunk-YDBIWGNI.js";
 import "./chunk-7DHTMOND.js";
-import "./chunk-S4LX5EBI.js";
-import "./chunk-X7XN6YU4.js";
-import "./chunk-5NPGSAVB.js";
-import "./chunk-YCN4BVDK.js";
+import "./chunk-47UU5PU2.js";
 import "./chunk-D654IBA6.js";
 import "./chunk-H63EDPFJ.js";
-import "./chunk-BKQJBXXX.js";
 import "./chunk-YAZNBMNF.js";
-import "./chunk-ALXMCZEU.js";
-import "./chunk-74JR4N5J.js";
+import "./chunk-GGD5W7TB.js";
 import "./chunk-LAYN4LDC.js";
-import "./chunk-2VFW5K5U.js";
+import "./chunk-3SV6CQHO.js";
 import "./chunk-UEYA6UC7.js";
 import "./chunk-NBNN5GOB.js";
-import "./chunk-UPMD5XND.js";
 import "./chunk-FEMOX5AD.js";
+import "./chunk-JL2PU6AI.js";
+import "./chunk-GZCUW5IC.js";
 import "./chunk-VEWZZM3H.js";
+import "./chunk-ALXMCZEU.js";
+import "./chunk-7WQ6SLIE.js";
 import "./chunk-PAORGQRI.js";
+import "./chunk-6UJ47TVX.js";
 import "./chunk-PYXS46O7.js";
 import "./chunk-3QKK7QOS.js";
-import "./chunk-GJQPH5G3.js";
 import "./chunk-JRNQ3RNA.js";
-import "./chunk-MYQWXITD.js";
+import "./chunk-JIU55F3X.js";
 import "./chunk-CULXMQJH.js";
 import "./chunk-E6K4NIEU.js";
+import "./chunk-ZVBB3T7V.js";
+import "./chunk-YRMVARQP.js";
+import "./chunk-BLKTA7MM.js";
 import "./chunk-EABGC2TL.js";
 import "./chunk-LOBRX7VD.js";
-import "./chunk-HITJFT7E.js";
-import "./chunk-YRMVARQP.js";
-import "./chunk-7PA4OZEU.js";
+import "./chunk-HMDCOMYU.js";
 import "./chunk-J4IYOZZ5.js";
-import "./chunk-AAI7JARD.js";
+import "./chunk-LK6SGL53.js";
 import "./chunk-7SEAZFFB.js";
 import "./chunk-K6WK37A6.js";
-import "./chunk-LK6SGL53.js";
 import "./chunk-3PG3H5TD.js";
 import "./chunk-FYIYMQ5N.js";
 import "./chunk-2NMMFZ5T.js";
 import "./chunk-Z5LAYHGJ.js";
 import "./chunk-C6QPK5GG.js";
-import "./chunk-GZCUW5IC.js";
-import "./chunk-RCICHSHL.js";
+import "./chunk-SYUK3VLY.js";
 import "./chunk-EJI5XIBB.js";
+import "./chunk-44ICJRF3.js";
+import "./chunk-XZ2TIKGC.js";
+import "./chunk-Y27UJK6V.js";
+import "./chunk-ODWDQNRE.js";
+import "./chunk-UZB5KHKX.js";
 import "./chunk-C2EFFULQ.js";
 import "./chunk-4WMCPJWX.js";
 import "./chunk-6HZ6AO2P.js";
@@ -95,11 +100,7 @@ import "./chunk-N53K2EXC.js";
 import "./chunk-URB2WSKZ.js";
 import "./chunk-UVJFDP7P.js";
 import "./chunk-XYIK4LF6.js";
-import "./chunk-QKAH5B6E.js";
-import "./chunk-KEG4GNGI.js";
-import "./chunk-ODWDQNRE.js";
-import "./chunk-Y27UJK6V.js";
-import "./chunk-UZB5KHKX.js";
+import "./chunk-PVGDJXVK.js";
 import "./chunk-NGAVDO7E.js";
 import "./chunk-MARWOCVP.js";
 import "./chunk-EQINRHYR.js";
@@ -109,23 +110,23 @@ import "./chunk-EEQLFRUM.js";
 import "./chunk-QDW3E4RD.js";
 import "./chunk-4NRAJUDS.js";
 import "./chunk-DT5TVLJE.js";
+import "./chunk-N5AKDXAI.js";
 import "./chunk-TBBDFYXW.js";
 import "./chunk-DGXUHMOV.js";
 import "./chunk-LPSF4OQH.js";
-import "./chunk-POMSFKTB.js";
-import "./chunk-U2IQTSBY.js";
+import "./chunk-GV6NLQ4X.js";
+import "./chunk-3WHVNEN7.js";
 import "./chunk-4KAN3GZ3.js";
 import "./chunk-6ZH4TU6I.js";
-import "./chunk-6PFRXT4K.js";
-import "./chunk-TP4FZJIZ.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-BOUYNNYD.js";
-import "./chunk-QSVPYQPG.js";
+import "./chunk-6PFRXT4K.js";
+import "./chunk-TP4FZJIZ.js";
 import "./chunk-DM2T26WE.js";
+import "./chunk-QSVPYQPG.js";
 import "./chunk-M62O4P4T.js";
 import "./chunk-4DJQYKMN.js";
 import "./chunk-2ODBA7MQ.js";
-import "./chunk-N5AKDXAI.js";
 export {
   Orchestrator,
   appendMemoryToGraphContext,

package/dist/qmd.js

@@ -1,8 +1,9 @@
 import {
   QmdClient,
   parseQmdExplain
-} from "./chunk-7PA4OZEU.js";
+} from "./chunk-BLKTA7MM.js";
 import "./chunk-LK6SGL53.js";
+import "./chunk-PVGDJXVK.js";
 import "./chunk-MARWOCVP.js";
 import "./chunk-6PFRXT4K.js";
 import "./chunk-2ODBA7MQ.js";

package/dist/recall-state.d.ts

@@ -1,4 +1,4 @@
-import { RecallPlanMode, IdentityInjectionMode } from './types.js';
+import { RecallPlanMode, IdentityInjectionMode, RecallTierExplain } from './types.js';
 
 interface LastRecallBudgetSummary {
     requestedTopK?: number;
@@ -32,6 +32,15 @@ interface LastRecallSnapshot {
     identityInjectionMode?: IdentityInjectionMode | "none";
     identityInjectedChars?: number;
     identityInjectionTruncated?: boolean;
+    /**
+     * Optional tier-level explanation of how recall was served
+     * (issue #518).  Populated by orchestrator call sites that can
+     * identify a concrete tier; surfaces expose the block via
+     * `engram query --explain`, the `?explain=1` HTTP flag, and the
+     * `remnic_recall_explain` MCP tool.  Orthogonal to the existing
+     * graph-path `recallExplain` operation.
+     */
+    tierExplain?: RecallTierExplain;
 }
 interface GraphRecallExpandedEntry {
     path: string;
@@ -99,7 +108,25 @@ declare class LastRecallStore {
             injectedChars: number;
             truncated: boolean;
         };
+        /**
+         * Per-tier explain annotation (issue #518).  When supplied, the
+         * snapshot carries it so downstream surfaces (CLI / HTTP / MCP)
+         * can render which retrieval tier served the query.
+         */
+        tierExplain?: RecallTierExplain;
     }): Promise<void>;
+    /**
+     * Attach a RecallTierExplain block to the existing snapshot for a
+     * session without rewriting the entire snapshot.  Used by the
+     * post-recall direct-answer annotation path (issue #518 slice 3c):
+     * recallInternal records the snapshot first, then the orchestrator
+     * fires the direct-answer tier in observation mode and annotates
+     * the stored snapshot with whichever tier served the query.
+     *
+     * No-op when no snapshot exists for the given session; callers do
+     * not need to guard on existence.
+     */
+    annotateTierExplain(sessionKey: string, tierExplain: RecallTierExplain): Promise<void>;
 }
 declare class TierMigrationStatusStore {
     private readonly statePath;

package/dist/recall-state.js

@@ -2,7 +2,7 @@ import {
   LastRecallStore,
   TierMigrationStatusStore,
   clampGraphRecallExpandedEntries
-} from "./chunk-S4LX5EBI.js";
+} from "./chunk-47UU5PU2.js";
 import "./chunk-2ODBA7MQ.js";
 export {
   LastRecallStore,

package/dist/resolution-QBTDHTG7.js

@@ -0,0 +1,100 @@
+import {
+  readPair,
+  resolvePair
+} from "./chunk-YNB73F22.js";
+import {
+  log
+} from "./chunk-2ODBA7MQ.js";
+
+// src/contradiction/resolution.ts
+var VALID_VERBS = ["keep-a", "keep-b", "merge", "both-valid", "needs-more-context"];
+function isValidResolutionVerb(value) {
+  return VALID_VERBS.includes(value);
+}
+async function executeResolution(memoryDir, storage, pairId, verb) {
+  const pair = readPair(memoryDir, pairId);
+  if (!pair) {
+    return { pairId, verb, affectedIds: [], message: `Pair ${pairId} not found` };
+  }
+  if (pair.resolution) {
+    return { pairId, verb, affectedIds: [], message: `Pair already resolved with verb "${pair.resolution}"` };
+  }
+  const [idA, idB] = pair.memoryIds;
+  const affectedIds = [];
+  let message = "";
+  let supersedeFailed = false;
+  switch (verb) {
+    case "keep-a": {
+      const ok = await supersedeSafe(storage, idB, idA, "contradiction-resolution:keep-a");
+      if (ok) {
+        affectedIds.push(idB);
+        message = `Kept ${idA}, superseded ${idB}`;
+      } else {
+        supersedeFailed = true;
+        message = `Supersede failed for ${idB}; not resolving`;
+      }
+      break;
+    }
+    case "keep-b": {
+      const ok = await supersedeSafe(storage, idA, idB, "contradiction-resolution:keep-b");
+      if (ok) {
+        affectedIds.push(idA);
+        message = `Kept ${idB}, superseded ${idA}`;
+      } else {
+        supersedeFailed = true;
+        message = `Supersede failed for ${idA}; not resolving`;
+      }
+      break;
+    }
+    case "merge": {
+      const mergedId = `merged-${pairId}`;
+      const okA = await supersedeSafe(storage, idA, mergedId, "contradiction-resolution:merge");
+      const okB = await supersedeSafe(storage, idB, mergedId, "contradiction-resolution:merge");
+      if (okA) affectedIds.push(idA);
+      if (okB) affectedIds.push(idB);
+      if (!okA || !okB) {
+        supersedeFailed = true;
+        message = `Merge incomplete: ${affectedIds.length}/2 superseded; not resolving to allow retry`;
+      } else {
+        message = `Both memories superseded by merged ${mergedId}`;
+      }
+      break;
+    }
+    case "both-valid": {
+      message = "Pair marked as both-valid; cooldown applied";
+      break;
+    }
+    case "needs-more-context": {
+      message = "Deferred; no action taken, short cooldown applied";
+      break;
+    }
+  }
+  if (!supersedeFailed) {
+    resolvePair(memoryDir, pairId, verb);
+  }
+  log.info("[contradiction-resolution] pair=%s verb=%s affected=%d", pairId, verb, affectedIds.length);
+  return { pairId, verb, affectedIds, message };
+}
+async function supersedeSafe(storage, oldId, newId, reason) {
+  try {
+    const result = await storage.supersedeMemory(oldId, newId, reason);
+    if (result === false) {
+      log.warn("[contradiction-resolution] supersede returned false for %s \u2192 %s", oldId, newId);
+      return false;
+    }
+    return true;
+  } catch (err) {
+    log.warn(
+      "[contradiction-resolution] supersede failed %s \u2192 %s: %s",
+      oldId,
+      newId,
+      err instanceof Error ? err.message : err
+    );
+    return false;
+  }
+}
+export {
+  executeResolution,
+  isValidResolutionVerb
+};
+//# sourceMappingURL=resolution-QBTDHTG7.js.map

package/dist/resolution-QBTDHTG7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/contradiction/resolution.ts"],"sourcesContent":["/**\n * Resolution Verbs — executes user-chosen resolution actions on contradiction pairs (issue #520).\n *\n * All resolution paths delegate to StorageManager.supersedeMemory. Do not\n * reimplement supersession logic here (rule 22: deduplicate resolution).\n */\n\nimport type { StorageManager } from \"../storage.js\";\nimport type { ResolutionVerb } from \"./contradiction-review.js\";\nimport { resolvePair, readPair } from \"./contradiction-review.js\";\nimport { log } from \"../logger.js\";\n\nexport interface ResolutionResult {\n  pairId: string;\n  verb: ResolutionVerb;\n  /** Memory IDs affected by the resolution. */\n  affectedIds: string[];\n  /** Human-readable status. */\n  message: string;\n}\n\nconst VALID_VERBS: ResolutionVerb[] = [\"keep-a\", \"keep-b\", \"merge\", \"both-valid\", \"needs-more-context\"];\n\nexport function isValidResolutionVerb(value: string): value is ResolutionVerb {\n  return VALID_VERBS.includes(value as ResolutionVerb);\n}\n\n/**\n * Execute a resolution verb on a contradiction pair.\n *\n * - `keep-a`: Supersede B, keep A active.\n * - `keep-b`: Supersede A, keep B active.\n * - `merge`: Mark both as superseded by a synthetic merged ID.\n * - `both-valid`: Mark pair as reviewed; no memories are superseded.\n * - `needs-more-context`: Defer; no action, short cooldown.\n */\nexport async function executeResolution(\n  memoryDir: string,\n  storage: StorageManager,\n  pairId: string,\n  verb: ResolutionVerb,\n): Promise<ResolutionResult> {\n  const pair = readPair(memoryDir, pairId);\n  if (!pair) {\n    return { pairId, verb, affectedIds: [], message: `Pair ${pairId} not found` };\n  }\n\n  if (pair.resolution) {\n    return { pairId, verb, affectedIds: [], message: `Pair already resolved with verb \"${pair.resolution}\"` };\n  }\n\n  const [idA, idB] = pair.memoryIds;\n  const affectedIds: string[] = [];\n  let message = \"\";\n  let supersedeFailed = false;\n\n  switch (verb) {\n    case \"keep-a\": {\n      const ok = await supersedeSafe(storage, idB, idA, \"contradiction-resolution:keep-a\");\n      if (ok) { affectedIds.push(idB); message = `Kept ${idA}, superseded ${idB}`; }\n      else { supersedeFailed = true; message = `Supersede failed for ${idB}; not resolving`; }\n      break;\n    }\n    case \"keep-b\": {\n      const ok = await supersedeSafe(storage, idA, idB, \"contradiction-resolution:keep-b\");\n      if (ok) { affectedIds.push(idA); message = `Kept ${idB}, superseded ${idA}`; }\n      else { supersedeFailed = true; message = `Supersede failed for ${idA}; not resolving`; }\n      break;\n    }\n    case \"merge\": {\n      const mergedId = `merged-${pairId}`;\n      const okA = await supersedeSafe(storage, idA, mergedId, \"contradiction-resolution:merge\");\n      const okB = await supersedeSafe(storage, idB, mergedId, \"contradiction-resolution:merge\");\n      if (okA) affectedIds.push(idA);\n      if (okB) affectedIds.push(idB);\n      if (!okA || !okB) {\n        supersedeFailed = true;\n        message = `Merge incomplete: ${affectedIds.length}/2 superseded; not resolving to allow retry`;\n      } else {\n        message = `Both memories superseded by merged ${mergedId}`;\n      }\n      break;\n    }\n    case \"both-valid\": {\n      message = \"Pair marked as both-valid; cooldown applied\";\n      break;\n    }\n    case \"needs-more-context\": {\n      message = \"Deferred; no action taken, short cooldown applied\";\n      break;\n    }\n  }\n\n  if (!supersedeFailed) {\n    resolvePair(memoryDir, pairId, verb);\n  }\n  log.info(\"[contradiction-resolution] pair=%s verb=%s affected=%d\", pairId, verb, affectedIds.length);\n  return { pairId, verb, affectedIds, message };\n}\n\nasync function supersedeSafe(\n  storage: StorageManager,\n  oldId: string,\n  newId: string,\n  reason: string,\n): Promise<boolean> {\n  try {\n    const result = await storage.supersedeMemory(oldId, newId, reason);\n    if (result === false) {\n      log.warn(\"[contradiction-resolution] supersede returned false for %s → %s\", oldId, newId);\n      return false;\n    }\n    return true;\n  } catch (err) {\n    log.warn(\n      \"[contradiction-resolution] supersede failed %s → %s: %s\",\n      oldId,\n      newId,\n      err instanceof Error ? err.message : err,\n    );\n    return false;\n  }\n}\n"],"mappings":";;;;;;;;;AAqBA,IAAM,cAAgC,CAAC,UAAU,UAAU,SAAS,cAAc,oBAAoB;AAE/F,SAAS,sBAAsB,OAAwC;AAC5E,SAAO,YAAY,SAAS,KAAuB;AACrD;AAWA,eAAsB,kBACpB,WACA,SACA,QACA,MAC2B;AAC3B,QAAM,OAAO,SAAS,WAAW,MAAM;AACvC,MAAI,CAAC,MAAM;AACT,WAAO,EAAE,QAAQ,MAAM,aAAa,CAAC,GAAG,SAAS,QAAQ,MAAM,aAAa;AAAA,EAC9E;AAEA,MAAI,KAAK,YAAY;AACnB,WAAO,EAAE,QAAQ,MAAM,aAAa,CAAC,GAAG,SAAS,oCAAoC,KAAK,UAAU,IAAI;AAAA,EAC1G;AAEA,QAAM,CAAC,KAAK,GAAG,IAAI,KAAK;AACxB,QAAM,cAAwB,CAAC;AAC/B,MAAI,UAAU;AACd,MAAI,kBAAkB;AAEtB,UAAQ,MAAM;AAAA,IACZ,KAAK,UAAU;AACb,YAAM,KAAK,MAAM,cAAc,SAAS,KAAK,KAAK,iCAAiC;AACnF,UAAI,IAAI;AAAE,oBAAY,KAAK,GAAG;AAAG,kBAAU,QAAQ,GAAG,gBAAgB,GAAG;AAAA,MAAI,OACxE;AAAE,0BAAkB;AAAM,kBAAU,wBAAwB,GAAG;AAAA,MAAmB;AACvF;AAAA,IACF;AAAA,IACA,KAAK,UAAU;AACb,YAAM,KAAK,MAAM,cAAc,SAAS,KAAK,KAAK,iCAAiC;AACnF,UAAI,IAAI;AAAE,oBAAY,KAAK,GAAG;AAAG,kBAAU,QAAQ,GAAG,gBAAgB,GAAG;AAAA,MAAI,OACxE;AAAE,0BAAkB;AAAM,kBAAU,wBAAwB,GAAG;AAAA,MAAmB;AACvF;AAAA,IACF;AAAA,IACA,KAAK,SAAS;AACZ,YAAM,WAAW,UAAU,MAAM;AACjC,YAAM,MAAM,MAAM,cAAc,SAAS,KAAK,UAAU,gCAAgC;AACxF,YAAM,MAAM,MAAM,cAAc,SAAS,KAAK,UAAU,gCAAgC;AACxF,UAAI,IAAK,aAAY,KAAK,GAAG;AAC7B,UAAI,IAAK,aAAY,KAAK,GAAG;AAC7B,UAAI,CAAC,OAAO,CAAC,KAAK;AAChB,0BAAkB;AAClB,kBAAU,qBAAqB,YAAY,MAAM;AAAA,MACnD,OAAO;AACL,kBAAU,sCAAsC,QAAQ;AAAA,MAC1D;AACA;AAAA,IACF;AAAA,IACA,KAAK,cAAc;AACjB,gBAAU;AACV;AAAA,IACF;AAAA,IACA,KAAK,sBAAsB;AACzB,gBAAU;AACV;AAAA,IACF;AAAA,EACF;AAEA,MAAI,CAAC,iBAAiB;AACpB,gBAAY,WAAW,QAAQ,IAAI;AAAA,EACrC;AACA,MAAI,KAAK,0DAA0D,QAAQ,MAAM,YAAY,MAAM;AACnG,SAAO,EAAE,QAAQ,MAAM,aAAa,QAAQ;AAC9C;AAEA,eAAe,cACb,SACA,OACA,OACA,QACkB;AAClB,MAAI;AACF,UAAM,SAAS,MAAM,QAAQ,gBAAgB,OAAO,OAAO,MAAM;AACjE,QAAI,WAAW,OAAO;AACpB,UAAI,KAAK,wEAAmE,OAAO,KAAK;AACxF,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,MACA,eAAe,QAAQ,IAAI,UAAU;AAAA,IACvC;AACA,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/resolve-provider-secret.d.ts

@@ -1,3 +1,25 @@
+/**
+ * Resolve a provider API key using OpenClaw's own auth resolution system.
+ *
+ * This module delegates to the gateway's `resolveApiKeyForProvider()` function,
+ * which handles all secret reference formats (SecretRef objects, auth profiles,
+ * "secretref-managed" markers, environment variables, etc.) using the same
+ * codepath the gateway uses for its own agent sessions.
+ *
+ * For plain-text API keys, a fast path returns them directly without
+ * involving the gateway auth system.
+ *
+ * Results are cached per provider for the gateway process lifetime.
+ */
+type ResolveApiKeyFn = (params: {
+    provider: string;
+    cfg?: unknown;
+    agentDir?: string;
+}) => Promise<{
+    apiKey?: string;
+    source?: string;
+    mode?: string;
+} | null>;
 /**
  * Resolve request-ready auth for a model, including provider-owned transforms
  * (e.g., OAuth token exchange, base URL override for openai-codex).
@@ -40,5 +62,6 @@ declare function getGatewayRuntimeAuthForModel(): Promise<GetRuntimeAuthForModel
  * Clear the resolution cache (useful for testing or key rotation).
  */
 declare function clearSecretCache(): void;
+declare function __setGatewayResolverForTest(resolver: ResolveApiKeyFn | null): void;
 
-export { type GetRuntimeAuthForModelFn, clearSecretCache, getGatewayRuntimeAuthForModel, resolveProviderApiKey };
+export { type GetRuntimeAuthForModelFn, __setGatewayResolverForTest, clearSecretCache, getGatewayRuntimeAuthForModel, resolveProviderApiKey };

package/dist/resolve-provider-secret.js

@@ -1,11 +1,13 @@
 import {
+  __setGatewayResolverForTest,
   clearSecretCache,
   getGatewayRuntimeAuthForModel,
   resolveProviderApiKey
-} from "./chunk-KEG4GNGI.js";
+} from "./chunk-XZ2TIKGC.js";
 import "./chunk-MARWOCVP.js";
 import "./chunk-2ODBA7MQ.js";
 export {
+  __setGatewayResolverForTest,
   clearSecretCache,
   getGatewayRuntimeAuthForModel,
   resolveProviderApiKey

package/dist/resume-bundles.js

@@ -4,13 +4,13 @@ import {
   recordResumeBundle,
   resolveResumeBundleDir,
   validateResumeBundle
-} from "./chunk-AYPYCLR7.js";
+} from "./chunk-6LX5ORAS.js";
 import "./chunk-CULXMQJH.js";
 import "./chunk-E6K4NIEU.js";
-import "./chunk-LOBRX7VD.js";
 import "./chunk-YRMVARQP.js";
+import "./chunk-LOBRX7VD.js";
 import "./chunk-FYIYMQ5N.js";
-import "./chunk-OJFGVJS6.js";
+import "./chunk-MBJHSA7F.js";
 import "./chunk-Z5LAYHGJ.js";
 import "./chunk-MARWOCVP.js";
 import "./chunk-DT5TVLJE.js";