@remnic/core 10.0.85 → 10.0.86

package/dist/chunk-EQ4U73UH.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/extraction-quote-grounding.ts"],"sourcesContent":["/**\n * Quote-anchored source grounding.\n *\n * An extracted fact carries the exact words that support it in `quote`. A quote\n * that is a verbatim substring of the source (whitespace-normalized) is real\n * evidence: the claim only has to be supported by the text around that span,\n * not by word overlap against the whole conversation. Items without such a\n * quote never get an anchor here and stay on the whole-source rules.\n */\n\nimport type { ExtractionResult } from \"./types.js\";\nimport {\n  GROUNDING_MIN_SHARED_TOKENS,\n  areGroundingTokensCompatible,\n  entityNameStart,\n  hasDenialReporting,\n  hasNonAssertiveReporting,\n  isGroundedEntityName,\n  normalizedEntityIdentifierTokens,\n  sourceSentences,\n  tokenize,\n} from \"./extraction-source-grounding-helpers.js\";\n\n/** Shortest normalized quote that counts as evidence; \"the\" or \"I\" prove nothing. */\nexport const QUOTE_ANCHOR_MIN_CHARS = 12;\n/** Characters of context kept on each side of the quote inside its turn. */\nexport const QUOTE_ANCHOR_CONTEXT_CHARS = 400;\n/** Share of a claim's content words that must occur in the quote's window. */\nexport const QUOTE_ANCHOR_MIN_WINDOW_COVERAGE = 0.35;\n/** Share of a claim's content words that must occur anywhere in the source; the rest is invented. */\nexport const QUOTE_ANCHOR_MIN_SOURCE_COVERAGE = 0.75;\nconst QUOTE_ANCHOR_MAX_OCCURRENCES = 8;\nconst TURN_SEPARATOR = \"\\n\\n\";\nconst NEGATOR_PATTERN = /\\b(?:not|no|never|cannot|without|neither|nor)\\b|n't\\b/iu;\nconst EXCLUSION_PATTERN =\n  /\\b(?:exclu\\w*|avoid\\w*|omit\\w*|skip\\w*|ignor\\w*|forbid\\w*|prohibit\\w*|disallow\\w*|prevent\\w*|reject\\w*|refus\\w*|insufficient|instead|rather|unless|except)\\b/iu;\n\n/** A verbatim quote and the text around it inside its turn. */\nexport interface QuoteAnchor {\n  /** Whitespace-normalized quote, exactly as it appears in the source. */\n  quote: string;\n  /** `quote` with its turn-local context; `;` inside the quote is rewritten to `,`. */\n  window: string;\n}\n\nexport type TokenPool = (token: string) => boolean;\n\ntype Entity = ExtractionResult[\"entities\"][number];\ntype Relationship = NonNullable<ExtractionResult[\"relationships\"]>[number];\n\nfunction normalizeWhitespaceWithMap(source: string): { text: string; originalIndex: number[] } {\n  const chars: string[] = [];\n  const originalIndex: number[] = [];\n  let inSpace = false;\n  for (let index = 0; index < source.length; index += 1) {\n    const char = source[index]!;\n    if (/\\s/u.test(char)) {\n      if (inSpace) continue;\n      inSpace = true;\n      chars.push(\" \");\n    } else {\n      inSpace = false;\n      chars.push(char);\n    }\n    originalIndex.push(index);\n  }\n  return { text: chars.join(\"\"), originalIndex };\n}\n\nfunction turnStartOffsets(source: string, turns: readonly string[]): readonly number[] | undefined {\n  const offsets: number[] = [];\n  let at = 0;\n  for (const turn of turns) {\n    if (!source.startsWith(turn, at)) return undefined;\n    offsets.push(at);\n    at += turn.length + TURN_SEPARATOR.length;\n  }\n  return at - TURN_SEPARATOR.length === source.length ? offsets : undefined;\n}\n\nfunction findQuoteAnchors(quote: string, source: string, bounds?: readonly number[]): QuoteAnchor[] {\n  const needle = quote.replace(/\\s+/gu, \" \").trim();\n  if (needle.length < QUOTE_ANCHOR_MIN_CHARS) return [];\n  const normalized = normalizeWhitespaceWithMap(source);\n  const anchors: QuoteAnchor[] = [];\n  let from = 0;\n  while (anchors.length < QUOTE_ANCHOR_MAX_OCCURRENCES) {\n    const at = normalized.text.indexOf(needle, from);\n    if (at < 0) break;\n    from = at + 1;\n    const start = normalized.originalIndex[at]!;\n    const end = normalized.originalIndex[at + needle.length - 1]! + 1;\n\n    let before: string;\n    let after: string;\n    if (bounds === undefined) {\n      if (source.slice(start, end).includes(TURN_SEPARATOR)) continue;\n      before = source.slice(Math.max(0, start - QUOTE_ANCHOR_CONTEXT_CHARS), start);\n      const sepBefore = before.lastIndexOf(TURN_SEPARATOR);\n      if (sepBefore >= 0) before = before.slice(sepBefore + TURN_SEPARATOR.length);\n      else if (start > QUOTE_ANCHOR_CONTEXT_CHARS) before = before.replace(/^\\S+/u, \"\");\n      after = source.slice(end, end + QUOTE_ANCHOR_CONTEXT_CHARS);\n      const sepAfter = after.indexOf(TURN_SEPARATOR);\n      if (sepAfter >= 0) after = after.slice(0, sepAfter);\n      else if (source.length - end > QUOTE_ANCHOR_CONTEXT_CHARS) after = after.replace(/\\S+$/u, \"\");\n    } else {\n      let turnStart = 0;\n      let turnEnd = source.length;\n      for (const bound of bounds) {\n        if (bound <= start) turnStart = bound;\n        else {\n          turnEnd = bound - TURN_SEPARATOR.length;\n          break;\n        }\n      }\n      if (turnEnd < end) continue;\n      before = source.slice(Math.max(turnStart, start - QUOTE_ANCHOR_CONTEXT_CHARS), start);\n      if (start - QUOTE_ANCHOR_CONTEXT_CHARS > turnStart) before = before.replace(/^\\S+/u, \"\");\n      const contextEnd = Math.min(turnEnd, end + QUOTE_ANCHOR_CONTEXT_CHARS);\n      after = source.slice(end, contextEnd);\n      if (end + QUOTE_ANCHOR_CONTEXT_CHARS < turnEnd) after = after.replace(/\\S+$/u, \"\");\n    }\n\n    anchors.push({ quote: needle, window: `${before}${needle.replace(/;/gu, \",\")}${after}` });\n  }\n  return anchors;\n}\n\n/**\n * Returns one anchor per place `quote` occurs verbatim in `source`, or [] when\n * the quote is absent, too short, or not an exact substring. A quote that\n * spans a turn separator is not one turn's words and yields no anchor; windows\n * never extend past their turn.\n *\n * The quote is one evidence unit: a `;` inside it is rewritten to `,` in the\n * window so sentence splitting cannot cut it, or a claim that merges two of\n * its clauses could never be grounded in a single sentence.\n *\n * `source` may have been rewritten before grounding (temporal anchoring,\n * pronoun resolution) while the model quoted the original words. When the raw\n * quote is not found, `transformQuote` applies the same rewrite to the quote.\n *\n * `turns` are the texts `source` was joined from; when they tile `source`\n * exactly, quotes and windows cut at real turn boundaries instead of any\n * blank line. Without them, every `TURN_SEPARATOR` run is a boundary.\n */\nexport function quoteAnchors(\n  quote: string | undefined,\n  source: string,\n  transformQuote?: (quote: string) => string,\n  turns?: readonly string[],\n): QuoteAnchor[] {\n  if (typeof quote !== \"string\") return [];\n  const bounds = turns === undefined ? undefined : turnStartOffsets(source, turns);\n  const exact = findQuoteAnchors(quote, source, bounds);\n  if (exact.length > 0 || transformQuote === undefined) return exact;\n  return findQuoteAnchors(transformQuote(quote), source, bounds);\n}\n\nexport function tokenPool(tokens: ReadonlySet<string>): TokenPool {\n  const list = [...tokens];\n  return (token) => tokens.has(token) || list.some((poolToken) => areGroundingTokensCompatible(token, poolToken));\n}\n\nfunction hasNegation(text: string): boolean {\n  return NEGATOR_PATTERN.test(text.replace(/[\\u2018\\u2019]/gu, \"'\")) || hasDenialReporting(text);\n}\n\nconst CLAUSE_PATTERN = /[^;.!?\\n]+[;.!?]*/gu;\n/** Split \"X, and Y\" claim coordination without touching list commas. */\nconst CLAIM_COORD_SPLIT = /,\\s{1,8}(?:and|but|or|nor)\\s{1,8}/iu;\n\nfunction splitClaimClauses(content: string): string[] {\n  return (content.match(CLAUSE_PATTERN) ?? [content]).flatMap((clause) => {\n    const parts = clause\n      .split(CLAIM_COORD_SPLIT)\n      .map((part) => part.trim())\n      .filter((part) => part.length > 0);\n    return parts.length > 0 ? parts : [clause];\n  });\n}\n\nfunction clauseOverlap(clauseTokens: readonly string[], target: string) {\n  const has = tokenPool(tokenize(target));\n  const shared = clauseTokens.filter(has).length;\n  return { shared, ratio: clauseTokens.length === 0 ? 0 : shared / clauseTokens.length };\n}\n\n/** What a quote clause's first negator governs: the words after it. */\nfunction negatedScope(clause: string): string {\n  const match = NEGATOR_PATTERN.exec(clause.replace(/[\\u2018\\u2019]/gu, \"'\"));\n  return match ? clause.slice(match.index + match[0].length) : clause;\n}\n\n/**\n * True when the claim asserts what a quote clause denies or does not assert:\n * \"did not approve the budget\" or \"denied approving it\" restated as \"approved\n * the budget\", \"suspects Bob stole funds\" or \"Is Alice the CEO?\" restated as a\n * plain statement. The claim must restate the quote clause, and none of its\n * clauses that share a word with what the negator governs may keep the\n * negator, exclusion word, or reporting marker (\"do not X\" reworded as \"X is\n * excluded\", or \"Alice reviewed it, but she did not approve it\"). A negator in\n * a clause about something else does not count, so a claim that keeps one\n * quote negation can still misstate another quote clause, and a claim clause\n * that shares only the subject does not satisfy the check.\n */\nfunction misstatesQuote(content: string, quote: string): boolean {\n  const claimClauses = splitClaimClauses(content);\n  return (quote.match(CLAUSE_PATTERN) ?? []).some((quoteClause) => {\n    const needsNegation = hasNegation(quoteClause);\n    const needsReporting = quoteClause.trim().endsWith(\"?\") || hasNonAssertiveReporting(quoteClause);\n    if (!needsNegation && !needsReporting) return false;\n    const clauseTokens = [...tokenize(quoteClause)];\n    const whole = clauseOverlap(clauseTokens, content);\n    if (whole.shared < GROUNDING_MIN_SHARED_TOKENS || whole.ratio < 0.5) return false;\n    const clausesSharing = (tokens: readonly string[]) =>\n      claimClauses.filter((claimClause) => clauseOverlap(tokens, claimClause).shared > 0);\n    if (needsNegation) {\n      const scopeTokens = [...tokenize(negatedScope(quoteClause))];\n      const related = clausesSharing(scopeTokens.length > 0 ? scopeTokens : clauseTokens);\n      if (!related.some((text) => hasNegation(text) || EXCLUSION_PATTERN.test(text))) return true;\n    }\n    return needsReporting\n      && !clausesSharing(clauseTokens).some((text) => hasNonAssertiveReporting(text) || text.trim().endsWith(\"?\"));\n  });\n}\n\n/**\n * A claim is supported by a verbatim quote when it shares at least\n * GROUNDING_MIN_SHARED_TOKENS content words with the quote, a good part of its\n * words sit in the text around the quote, nearly all of them occur in the\n * source at all, and it does not invert a negated clause of the quote. Reworded\n * and lightly elaborated claims pass; claims that bring words the conversation\n * never used, or that have nothing to do with the quote, do not.\n */\nexport function isQuoteAnchoredClaim(content: string, anchor: QuoteAnchor, sourceHas: TokenPool): boolean {\n  const contentTokens = [...tokenize(content)];\n  if (contentTokens.length === 0) return false;\n  const quoteHas = tokenPool(tokenize(anchor.quote));\n  if (contentTokens.filter(quoteHas).length < GROUNDING_MIN_SHARED_TOKENS) return false;\n  const windowHas = tokenPool(tokenize(anchor.window));\n  if (contentTokens.filter(windowHas).length / contentTokens.length < QUOTE_ANCHOR_MIN_WINDOW_COVERAGE) {\n    return false;\n  }\n  return contentTokens.filter(sourceHas).length / contentTokens.length >= QUOTE_ANCHOR_MIN_SOURCE_COVERAGE\n    && !misstatesQuote(content, anchor.quote);\n}\n\n/** Keeps the entity facts (flat and sectioned) `isSupported` accepts; undefined when none remain. */\nexport function filterEntityFacts(entity: Entity, isSupported: (fact: string) => boolean): Entity | undefined {\n  const facts = entity.facts.filter(isSupported);\n  const structuredSections = entity.structuredSections?.flatMap((section) => {\n    const groundedFacts = section.facts.filter(isSupported);\n    return groundedFacts.length > 0 ? [{ ...section, facts: groundedFacts }] : [];\n  });\n  if (facts.length === 0 && (structuredSections === undefined || structuredSections.length === 0)) {\n    return undefined;\n  }\n  const { structuredSections: _structuredSections, ...entityWithoutSections } = entity;\n  return {\n    ...entityWithoutSections,\n    facts,\n    ...(structuredSections && structuredSections.length > 0 ? { structuredSections } : {}),\n  };\n}\n\n/**\n * Entities carry no quote of their own; the anchors of facts that kept support\n * them. Returns a fact predicate, or undefined when no anchor window names the entity.\n */\nexport function quoteAnchoredEntitySupport(\n  entity: Entity,\n  anchors: readonly QuoteAnchor[],\n  sourceHas: TokenPool,\n): ((fact: string) => boolean) | undefined {\n  const nameAnchors = anchors.filter((anchor) => isGroundedEntityName(entity.name, anchor.window));\n  if (nameAnchors.length === 0) return undefined;\n  return (fact) => nameAnchors.some((anchor) => isQuoteAnchoredClaim(fact, anchor, sourceHas));\n}\n\n/**\n * The label words and both names must sit in one anchor-window sentence, source\n * before target, so an invented label or a reversed edge never passes.\n */\nexport function isQuoteAnchoredRelationship(\n  relationship: Relationship,\n  anchors: readonly QuoteAnchor[],\n  sourceHas: TokenPool,\n): boolean {\n  const labelTokens = [...tokenize(relationship.label)];\n  if (labelTokens.length === 0) return false;\n  const relationText = [\n    normalizedEntityIdentifierTokens(relationship.source).join(\" \"),\n    relationship.label,\n    normalizedEntityIdentifierTokens(relationship.target).join(\" \"),\n  ].join(\" \");\n  return anchors.some((anchor) => {\n    const windowHas = tokenPool(tokenize(anchor.window));\n    return labelTokens.every(windowHas)\n      && sourceSentences(anchor.window).some((sentence) => {\n        const sourceStart = entityNameStart(relationship.source, sentence);\n        return sourceStart >= 0 && entityNameStart(relationship.target, sentence) > sourceStart;\n      })\n      && isQuoteAnchoredClaim(relationText, anchor, sourceHas);\n  });\n}\n"],"mappings":";;;;;;;;;;;;;AAwBO,IAAM,yBAAyB;AAE/B,IAAM,6BAA6B;AAEnC,IAAM,mCAAmC;AAEzC,IAAM,mCAAmC;AAChD,IAAM,+BAA+B;AACrC,IAAM,iBAAiB;AACvB,IAAM,kBAAkB;AACxB,IAAM,oBACJ;AAeF,SAAS,2BAA2B,QAA2D;AAC7F,QAAM,QAAkB,CAAC;AACzB,QAAM,gBAA0B,CAAC;AACjC,MAAI,UAAU;AACd,WAAS,QAAQ,GAAG,QAAQ,OAAO,QAAQ,SAAS,GAAG;AACrD,UAAM,OAAO,OAAO,KAAK;AACzB,QAAI,MAAM,KAAK,IAAI,GAAG;AACpB,UAAI,QAAS;AACb,gBAAU;AACV,YAAM,KAAK,GAAG;AAAA,IAChB,OAAO;AACL,gBAAU;AACV,YAAM,KAAK,IAAI;AAAA,IACjB;AACA,kBAAc,KAAK,KAAK;AAAA,EAC1B;AACA,SAAO,EAAE,MAAM,MAAM,KAAK,EAAE,GAAG,cAAc;AAC/C;AAEA,SAAS,iBAAiB,QAAgB,OAAyD;AACjG,QAAM,UAAoB,CAAC;AAC3B,MAAI,KAAK;AACT,aAAW,QAAQ,OAAO;AACxB,QAAI,CAAC,OAAO,WAAW,MAAM,EAAE,EAAG,QAAO;AACzC,YAAQ,KAAK,EAAE;AACf,UAAM,KAAK,SAAS,eAAe;AAAA,EACrC;AACA,SAAO,KAAK,eAAe,WAAW,OAAO,SAAS,UAAU;AAClE;AAEA,SAAS,iBAAiB,OAAe,QAAgB,QAA2C;AAClG,QAAM,SAAS,MAAM,QAAQ,SAAS,GAAG,EAAE,KAAK;AAChD,MAAI,OAAO,SAAS,uBAAwB,QAAO,CAAC;AACpD,QAAM,aAAa,2BAA2B,MAAM;AACpD,QAAM,UAAyB,CAAC;AAChC,MAAI,OAAO;AACX,SAAO,QAAQ,SAAS,8BAA8B;AACpD,UAAM,KAAK,WAAW,KAAK,QAAQ,QAAQ,IAAI;AAC/C,QAAI,KAAK,EAAG;AACZ,WAAO,KAAK;AACZ,UAAM,QAAQ,WAAW,cAAc,EAAE;AACzC,UAAM,MAAM,WAAW,cAAc,KAAK,OAAO,SAAS,CAAC,IAAK;AAEhE,QAAI;AACJ,QAAI;AACJ,QAAI,WAAW,QAAW;AACxB,UAAI,OAAO,MAAM,OAAO,GAAG,EAAE,SAAS,cAAc,EAAG;AACvD,eAAS,OAAO,MAAM,KAAK,IAAI,GAAG,QAAQ,0BAA0B,GAAG,KAAK;AAC5E,YAAM,YAAY,OAAO,YAAY,cAAc;AACnD,UAAI,aAAa,EAAG,UAAS,OAAO,MAAM,YAAY,eAAe,MAAM;AAAA,eAClE,QAAQ,2BAA4B,UAAS,OAAO,QAAQ,SAAS,EAAE;AAChF,cAAQ,OAAO,MAAM,KAAK,MAAM,0BAA0B;AAC1D,YAAM,WAAW,MAAM,QAAQ,cAAc;AAC7C,UAAI,YAAY,EAAG,SAAQ,MAAM,MAAM,GAAG,QAAQ;AAAA,eACzC,OAAO,SAAS,MAAM,2BAA4B,SAAQ,MAAM,QAAQ,SAAS,EAAE;AAAA,IAC9F,OAAO;AACL,UAAI,YAAY;AAChB,UAAI,UAAU,OAAO;AACrB,iBAAW,SAAS,QAAQ;AAC1B,YAAI,SAAS,MAAO,aAAY;AAAA,aAC3B;AACH,oBAAU,QAAQ,eAAe;AACjC;AAAA,QACF;AAAA,MACF;AACA,UAAI,UAAU,IAAK;AACnB,eAAS,OAAO,MAAM,KAAK,IAAI,WAAW,QAAQ,0BAA0B,GAAG,KAAK;AACpF,UAAI,QAAQ,6BAA6B,UAAW,UAAS,OAAO,QAAQ,SAAS,EAAE;AACvF,YAAM,aAAa,KAAK,IAAI,SAAS,MAAM,0BAA0B;AACrE,cAAQ,OAAO,MAAM,KAAK,UAAU;AACpC,UAAI,MAAM,6BAA6B,QAAS,SAAQ,MAAM,QAAQ,SAAS,EAAE;AAAA,IACnF;AAEA,YAAQ,KAAK,EAAE,OAAO,QAAQ,QAAQ,GAAG,MAAM,GAAG,OAAO,QAAQ,OAAO,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC;AAAA,EAC1F;AACA,SAAO;AACT;AAoBO,SAAS,aACd,OACA,QACA,gBACA,OACe;AACf,MAAI,OAAO,UAAU,SAAU,QAAO,CAAC;AACvC,QAAM,SAAS,UAAU,SAAY,SAAY,iBAAiB,QAAQ,KAAK;AAC/E,QAAM,QAAQ,iBAAiB,OAAO,QAAQ,MAAM;AACpD,MAAI,MAAM,SAAS,KAAK,mBAAmB,OAAW,QAAO;AAC7D,SAAO,iBAAiB,eAAe,KAAK,GAAG,QAAQ,MAAM;AAC/D;AAEO,SAAS,UAAU,QAAwC;AAChE,QAAM,OAAO,CAAC,GAAG,MAAM;AACvB,SAAO,CAAC,UAAU,OAAO,IAAI,KAAK,KAAK,KAAK,KAAK,CAAC,cAAc,6BAA6B,OAAO,SAAS,CAAC;AAChH;AAEA,SAAS,YAAY,MAAuB;AAC1C,SAAO,gBAAgB,KAAK,KAAK,QAAQ,oBAAoB,GAAG,CAAC,KAAK,mBAAmB,IAAI;AAC/F;AAEA,IAAM,iBAAiB;AAEvB,IAAM,oBAAoB;AAE1B,SAAS,kBAAkB,SAA2B;AACpD,UAAQ,QAAQ,MAAM,cAAc,KAAK,CAAC,OAAO,GAAG,QAAQ,CAAC,WAAW;AACtE,UAAM,QAAQ,OACX,MAAM,iBAAiB,EACvB,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC;AACnC,WAAO,MAAM,SAAS,IAAI,QAAQ,CAAC,MAAM;AAAA,EAC3C,CAAC;AACH;AAEA,SAAS,cAAc,cAAiC,QAAgB;AACtE,QAAM,MAAM,UAAU,SAAS,MAAM,CAAC;AACtC,QAAM,SAAS,aAAa,OAAO,GAAG,EAAE;AACxC,SAAO,EAAE,QAAQ,OAAO,aAAa,WAAW,IAAI,IAAI,SAAS,aAAa,OAAO;AACvF;AAGA,SAAS,aAAa,QAAwB;AAC5C,QAAM,QAAQ,gBAAgB,KAAK,OAAO,QAAQ,oBAAoB,GAAG,CAAC;AAC1E,SAAO,QAAQ,OAAO,MAAM,MAAM,QAAQ,MAAM,CAAC,EAAE,MAAM,IAAI;AAC/D;AAcA,SAAS,eAAe,SAAiB,OAAwB;AAC/D,QAAM,eAAe,kBAAkB,OAAO;AAC9C,UAAQ,MAAM,MAAM,cAAc,KAAK,CAAC,GAAG,KAAK,CAAC,gBAAgB;AAC/D,UAAM,gBAAgB,YAAY,WAAW;AAC7C,UAAM,iBAAiB,YAAY,KAAK,EAAE,SAAS,GAAG,KAAK,yBAAyB,WAAW;AAC/F,QAAI,CAAC,iBAAiB,CAAC,eAAgB,QAAO;AAC9C,UAAM,eAAe,CAAC,GAAG,SAAS,WAAW,CAAC;AAC9C,UAAM,QAAQ,cAAc,cAAc,OAAO;AACjD,QAAI,MAAM,SAAS,+BAA+B,MAAM,QAAQ,IAAK,QAAO;AAC5E,UAAM,iBAAiB,CAAC,WACtB,aAAa,OAAO,CAAC,gBAAgB,cAAc,QAAQ,WAAW,EAAE,SAAS,CAAC;AACpF,QAAI,eAAe;AACjB,YAAM,cAAc,CAAC,GAAG,SAAS,aAAa,WAAW,CAAC,CAAC;AAC3D,YAAM,UAAU,eAAe,YAAY,SAAS,IAAI,cAAc,YAAY;AAClF,UAAI,CAAC,QAAQ,KAAK,CAAC,SAAS,YAAY,IAAI,KAAK,kBAAkB,KAAK,IAAI,CAAC,EAAG,QAAO;AAAA,IACzF;AACA,WAAO,kBACF,CAAC,eAAe,YAAY,EAAE,KAAK,CAAC,SAAS,yBAAyB,IAAI,KAAK,KAAK,KAAK,EAAE,SAAS,GAAG,CAAC;AAAA,EAC/G,CAAC;AACH;AAUO,SAAS,qBAAqB,SAAiB,QAAqB,WAA+B;AACxG,QAAM,gBAAgB,CAAC,GAAG,SAAS,OAAO,CAAC;AAC3C,MAAI,cAAc,WAAW,EAAG,QAAO;AACvC,QAAM,WAAW,UAAU,SAAS,OAAO,KAAK,CAAC;AACjD,MAAI,cAAc,OAAO,QAAQ,EAAE,SAAS,4BAA6B,QAAO;AAChF,QAAM,YAAY,UAAU,SAAS,OAAO,MAAM,CAAC;AACnD,MAAI,cAAc,OAAO,SAAS,EAAE,SAAS,cAAc,SAAS,kCAAkC;AACpG,WAAO;AAAA,EACT;AACA,SAAO,cAAc,OAAO,SAAS,EAAE,SAAS,cAAc,UAAU,oCACnE,CAAC,eAAe,SAAS,OAAO,KAAK;AAC5C;AAGO,SAAS,kBAAkB,QAAgB,aAA4D;AAC5G,QAAM,QAAQ,OAAO,MAAM,OAAO,WAAW;AAC7C,QAAM,qBAAqB,OAAO,oBAAoB,QAAQ,CAAC,YAAY;AACzE,UAAM,gBAAgB,QAAQ,MAAM,OAAO,WAAW;AACtD,WAAO,cAAc,SAAS,IAAI,CAAC,EAAE,GAAG,SAAS,OAAO,cAAc,CAAC,IAAI,CAAC;AAAA,EAC9E,CAAC;AACD,MAAI,MAAM,WAAW,MAAM,uBAAuB,UAAa,mBAAmB,WAAW,IAAI;AAC/F,WAAO;AAAA,EACT;AACA,QAAM,EAAE,oBAAoB,qBAAqB,GAAG,sBAAsB,IAAI;AAC9E,SAAO;AAAA,IACL,GAAG;AAAA,IACH;AAAA,IACA,GAAI,sBAAsB,mBAAmB,SAAS,IAAI,EAAE,mBAAmB,IAAI,CAAC;AAAA,EACtF;AACF;AAMO,SAAS,2BACd,QACA,SACA,WACyC;AACzC,QAAM,cAAc,QAAQ,OAAO,CAAC,WAAW,qBAAqB,OAAO,MAAM,OAAO,MAAM,CAAC;AAC/F,MAAI,YAAY,WAAW,EAAG,QAAO;AACrC,SAAO,CAAC,SAAS,YAAY,KAAK,CAAC,WAAW,qBAAqB,MAAM,QAAQ,SAAS,CAAC;AAC7F;AAMO,SAAS,4BACd,cACA,SACA,WACS;AACT,QAAM,cAAc,CAAC,GAAG,SAAS,aAAa,KAAK,CAAC;AACpD,MAAI,YAAY,WAAW,EAAG,QAAO;AACrC,QAAM,eAAe;AAAA,IACnB,iCAAiC,aAAa,MAAM,EAAE,KAAK,GAAG;AAAA,IAC9D,aAAa;AAAA,IACb,iCAAiC,aAAa,MAAM,EAAE,KAAK,GAAG;AAAA,EAChE,EAAE,KAAK,GAAG;AACV,SAAO,QAAQ,KAAK,CAAC,WAAW;AAC9B,UAAM,YAAY,UAAU,SAAS,OAAO,MAAM,CAAC;AACnD,WAAO,YAAY,MAAM,SAAS,KAC7B,gBAAgB,OAAO,MAAM,EAAE,KAAK,CAAC,aAAa;AACnD,YAAM,cAAc,gBAAgB,aAAa,QAAQ,QAAQ;AACjE,aAAO,eAAe,KAAK,gBAAgB,aAAa,QAAQ,QAAQ,IAAI;AAAA,IAC9E,CAAC,KACE,qBAAqB,cAAc,QAAQ,SAAS;AAAA,EAC3D,CAAC;AACH;","names":[]}

package/dist/{chunk-ONN2E5QD.js → chunk-EUBDYOLD.js}

@@ -1,25 +1,25 @@
 import {
   ExtractionDrain,
   TurnIngestionCoordinator
-} from "./chunk-H4D5YURJ.js";
+} from "./chunk-3CTKEXXF.js";
 import {
   headerConnector,
   renderExtractionConversation,
   resolveSourceConnector
-} from "./chunk-DM4RRTN7.js";
+} from "./chunk-BLSHFIR6.js";
 import {
   SmartBuffer
-} from "./chunk-SGHV6LZ7.js";
+} from "./chunk-TQ4SCPGQ.js";
 import {
   shouldSkipImplicitExtraction
 } from "./chunk-MTTYIXSU.js";
 import {
   selfDeps
-} from "./chunk-ELWI2R6H.js";
+} from "./chunk-CC4V7HNP.js";
 import {
   describeError,
   groupTurnsByExtractionScope
-} from "./chunk-WLNWFHX3.js";
+} from "./chunk-UXXK523X.js";
 import {
   resolveMemoryLifecycleCapabilities
 } from "./chunk-C5LWPYS3.js";
@@ -449,4 +449,4 @@ export {
   ClaimBufferStorage,
   BufferDrainRunner
 };
-//# sourceMappingURL=chunk-ONN2E5QD.js.map
+//# sourceMappingURL=chunk-EUBDYOLD.js.map

package/dist/{chunk-YNDLCWXS.js → chunk-EZ25VE3G.js}

@@ -1,9 +1,9 @@
-import {
-  diffGraphSnapshots
-} from "./chunk-AUDJPF4N.js";
 import {
   graphSnapshotFromMemoryDir
 } from "./chunk-44442YCH.js";
+import {
+  diffGraphSnapshots
+} from "./chunk-AUDJPF4N.js";
 
 // src/dashboard-runtime.ts
 import { createHash, timingSafeEqual } from "crypto";
@@ -370,4 +370,4 @@ var GraphDashboardServer = class {
 export {
   GraphDashboardServer
 };
-//# sourceMappingURL=chunk-YNDLCWXS.js.map
+//# sourceMappingURL=chunk-EZ25VE3G.js.map

package/dist/{chunk-3LHPTBWG.js → chunk-F74G4KIH.js}

@@ -1,6 +1,6 @@
 import {
   rebuildMemoryProjection
-} from "./chunk-N6II66E5.js";
+} from "./chunk-DT7SNJH6.js";
 
 // src/convergence-refresh.ts
 async function refreshConvergedNamespaces(namespaces, namespaceSearchRouter, getStorage, searchEnabled) {
@@ -32,4 +32,4 @@ async function refreshConvergedNamespaces(namespaces, namespaceSearchRouter, get
 export {
   refreshConvergedNamespaces
 };
-//# sourceMappingURL=chunk-3LHPTBWG.js.map
+//# sourceMappingURL=chunk-F74G4KIH.js.map

package/dist/{chunk-X7REO4CH.js → chunk-FF3EFLUT.js}

@@ -1,17 +1,19 @@
 import {
   defineOperation
-} from "./chunk-HVFX2N2G.js";
+} from "./chunk-UAUV3BWS.js";
 import {
-  EngramAccessInputError
-} from "./chunk-LGEH473S.js";
+  EngramAccessInputError,
+  rejectReservedArgumentKey
+} from "./chunk-CJCTKL6Y.js";
 
 // src/recall-navigation-operations.ts
 import { z } from "zod";
 function stripNulls(data) {
   if (data !== null && typeof data === "object" && !Array.isArray(data)) {
     const obj = data;
-    const cleaned = {};
+    const cleaned = /* @__PURE__ */ Object.create(null);
     for (const [key, value] of Object.entries(obj)) {
+      rejectReservedArgumentKey(key);
       if (value !== null) cleaned[key] = value;
     }
     return cleaned;
@@ -92,4 +94,4 @@ defineOperation({
     };
   }
 });
-//# sourceMappingURL=chunk-X7REO4CH.js.map
+//# sourceMappingURL=chunk-FF3EFLUT.js.map

package/dist/chunk-FF3EFLUT.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/recall-navigation-operations.ts"],"sourcesContent":["/**\n * Recall-navigation boundary operations (issue #1956).\n *\n * `memory_expand` / `memory_traverse` route MCP, HTTP, and CLI dispatch\n * through the shared validation + error-mapping layer (access-boundary.ts)\n * to the single `EngramAccessService.recallNavigate` implementation.\n * Sibling module so access-operations-batch.ts stays at its ceiling seam\n * (same layout as deep-recall's extraction).\n */\n\nimport { z } from \"zod\";\n\nimport { defineOperation } from \"./access-boundary.js\";\nimport { EngramAccessInputError, rejectReservedArgumentKey } from \"./access-errors.js\";\n\n/**\n * Null-prototype accumulator for cleaned request arguments, matching the\n * batch preprocessors (issue #3225 B1): a copied own `__proto__` member on a\n * plain `{}` switches the accumulator's prototype and an inherited field then\n * reaches the zod parse.\n */\nfunction stripNulls(data: unknown): unknown {\n  if (data !== null && typeof data === \"object\" && !Array.isArray(data)) {\n    const obj = data as Record<string, unknown>;\n    const cleaned = Object.create(null);\n    for (const [key, value] of Object.entries(obj)) {\n      rejectReservedArgumentKey(key);\n      if (value !== null) cleaned[key] = value;\n    }\n    return cleaned;\n  }\n  return data;\n}\n\nfunction strictSchema<T extends z.ZodRawShape>(shape: T): z.ZodType<Record<string, unknown>> {\n  return z.preprocess(stripNulls, z.object(shape).passthrough()) as unknown as z.ZodType<Record<string, unknown>>;\n}\n\nconst str = z.string().optional();\n\nfunction optStr(value: unknown): string | undefined {\n  return typeof value === \"string\" ? value : undefined;\n}\n\nfunction optInt(value: unknown): number | undefined {\n  if (typeof value === \"number\") return value;\n  if (typeof value === \"string\" && Number.isFinite(Number(value))) return Number(value);\n  return undefined;\n}\n\nfunction reqStr(value: unknown, field: string): string {\n  if (typeof value !== \"string\" || value.trim().length === 0) {\n    throw new EngramAccessInputError(`${field} is required`);\n  }\n  return value;\n}\n\nconst baseShape = {\n  memoryId: z.string(),\n  sessionKey: z.string(),\n  namespace: str,\n};\n\ndefineOperation({\n  name: \"memory_expand\",\n  description: \"Re-render one already-served recall result at a deeper disclosure level (chunk → section → raw).\",\n  schema: strictSchema({ ...baseShape, disclosure: z.enum([\"chunk\", \"section\", \"raw\"]).optional() }),\n  handler: async (input, ctx) => {\n    const disclosure = optStr(input.disclosure);\n    return {\n      result: await ctx.service.recallNavigate({\n        action: \"expand\",\n        memoryId: reqStr(input.memoryId, \"memoryId\"),\n        sessionKey: reqStr(input.sessionKey, \"sessionKey\"),\n        ...(disclosure === \"chunk\" || disclosure === \"section\" || disclosure === \"raw\" ? { disclosure } : {}),\n        namespace: optStr(input.namespace),\n        authenticatedPrincipal: ctx.authenticatedPrincipal,\n      }),\n    };\n  },\n});\n\ndefineOperation({\n  name: \"memory_traverse\",\n  description:\n    \"Follow typed frontmatter links from an already-served recall result; neighbors return as chunk-level summaries.\",\n  schema: strictSchema({\n    ...baseShape,\n    relation: z\n      .enum([\n        \"supports\",\n        \"contradicts\",\n        \"elaborates\",\n        \"causes\",\n        \"caused_by\",\n        \"supersedes\",\n        \"follows\",\n        \"references\",\n        \"related\",\n      ])\n      .optional(),\n    limit: z.union([z.number(), z.string()]).optional(),\n  }),\n  handler: async (input, ctx) => {\n    const relation = optStr(input.relation);\n    return {\n      result: await ctx.service.recallNavigate({\n        action: \"traverse\",\n        memoryId: reqStr(input.memoryId, \"memoryId\"),\n        sessionKey: reqStr(input.sessionKey, \"sessionKey\"),\n        ...(relation !== undefined ? { relation } : {}),\n        limit: optInt(input.limit),\n        namespace: optStr(input.namespace),\n        authenticatedPrincipal: ctx.authenticatedPrincipal,\n      }),\n    };\n  },\n});\n"],"mappings":";;;;;;;;;AAUA,SAAS,SAAS;AAWlB,SAAS,WAAW,MAAwB;AAC1C,MAAI,SAAS,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,GAAG;AACrE,UAAM,MAAM;AACZ,UAAM,UAAU,uBAAO,OAAO,IAAI;AAClC,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC9C,gCAA0B,GAAG;AAC7B,UAAI,UAAU,KAAM,SAAQ,GAAG,IAAI;AAAA,IACrC;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,aAAsC,OAA8C;AAC3F,SAAO,EAAE,WAAW,YAAY,EAAE,OAAO,KAAK,EAAE,YAAY,CAAC;AAC/D;AAEA,IAAM,MAAM,EAAE,OAAO,EAAE,SAAS;AAEhC,SAAS,OAAO,OAAoC;AAClD,SAAO,OAAO,UAAU,WAAW,QAAQ;AAC7C;AAEA,SAAS,OAAO,OAAoC;AAClD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,OAAO,UAAU,YAAY,OAAO,SAAS,OAAO,KAAK,CAAC,EAAG,QAAO,OAAO,KAAK;AACpF,SAAO;AACT;AAEA,SAAS,OAAO,OAAgB,OAAuB;AACrD,MAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,WAAW,GAAG;AAC1D,UAAM,IAAI,uBAAuB,GAAG,KAAK,cAAc;AAAA,EACzD;AACA,SAAO;AACT;AAEA,IAAM,YAAY;AAAA,EAChB,UAAU,EAAE,OAAO;AAAA,EACnB,YAAY,EAAE,OAAO;AAAA,EACrB,WAAW;AACb;AAEA,gBAAgB;AAAA,EACd,MAAM;AAAA,EACN,aAAa;AAAA,EACb,QAAQ,aAAa,EAAE,GAAG,WAAW,YAAY,EAAE,KAAK,CAAC,SAAS,WAAW,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;AAAA,EACjG,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,aAAa,OAAO,MAAM,UAAU;AAC1C,WAAO;AAAA,MACL,QAAQ,MAAM,IAAI,QAAQ,eAAe;AAAA,QACvC,QAAQ;AAAA,QACR,UAAU,OAAO,MAAM,UAAU,UAAU;AAAA,QAC3C,YAAY,OAAO,MAAM,YAAY,YAAY;AAAA,QACjD,GAAI,eAAe,WAAW,eAAe,aAAa,eAAe,QAAQ,EAAE,WAAW,IAAI,CAAC;AAAA,QACnG,WAAW,OAAO,MAAM,SAAS;AAAA,QACjC,wBAAwB,IAAI;AAAA,MAC9B,CAAC;AAAA,IACH;AAAA,EACF;AACF,CAAC;AAED,gBAAgB;AAAA,EACd,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ,aAAa;AAAA,IACnB,GAAG;AAAA,IACH,UAAU,EACP,KAAK;AAAA,MACJ;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC,EACA,SAAS;AAAA,IACZ,OAAO,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,SAAS;AAAA,EACpD,CAAC;AAAA,EACD,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,WAAW,OAAO,MAAM,QAAQ;AACtC,WAAO;AAAA,MACL,QAAQ,MAAM,IAAI,QAAQ,eAAe;AAAA,QACvC,QAAQ;AAAA,QACR,UAAU,OAAO,MAAM,UAAU,UAAU;AAAA,QAC3C,YAAY,OAAO,MAAM,YAAY,YAAY;AAAA,QACjD,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,QAC7C,OAAO,OAAO,MAAM,KAAK;AAAA,QACzB,WAAW,OAAO,MAAM,SAAS;AAAA,QACjC,wBAAwB,IAAI;AAAA,MAC9B,CAAC;AAAA,IACH;AAAA,EACF;AACF,CAAC;","names":[]}

package/dist/chunk-FKBGK3NC.js

@@ -0,0 +1,62 @@
+import {
+  defaultCapsulesDir
+} from "./chunk-ZY2MNJR6.js";
+import {
+  EngramAccessInputError
+} from "./chunk-CJCTKL6Y.js";
+
+// src/capsule-import-gate.ts
+import { constants as fsConstants } from "fs";
+import { access, realpath, stat } from "fs/promises";
+import path from "path";
+import { ZodError } from "zod";
+function hasFsErrorCode(cause, code) {
+  return cause instanceof Object && "code" in cause && cause.code === code;
+}
+function isInputFsError(cause) {
+  return hasFsErrorCode(cause, "ENOENT") || hasFsErrorCode(cause, "ENOTDIR") || hasFsErrorCode(cause, "EACCES") || hasFsErrorCode(cause, "EPERM") || hasFsErrorCode(cause, "ELOOP") || hasFsErrorCode(cause, "ENAMETOOLONG") || hasFsErrorCode(cause, "ERR_INVALID_ARG_VALUE");
+}
+var ZOD_STYLE_CODE = /^Z_/;
+function hasZodStyleErrorCode(cause) {
+  return cause instanceof Object && "code" in cause && ZOD_STYLE_CODE.test(String(cause.code));
+}
+function isCapsuleImportArchiveInputError(cause, message) {
+  if (cause instanceof ZodError) return true;
+  if (hasZodStyleErrorCode(cause)) return true;
+  return message.startsWith("importCapsule: archive") || message.startsWith("importCapsule: bundle") || message.startsWith("importCapsule: manifest") || message.startsWith("importCapsule: record") || /incorrect header check|invalid stored block lengths|not in gzip format|unexpected end of file/i.test(message);
+}
+var IMPORT_SOURCE_REFUSED = "capsule import failed: archivePath must be an existing file inside the namespace capsule store";
+async function realpathOrNull(target) {
+  try {
+    return await realpath(target);
+  } catch (cause) {
+    if (!isInputFsError(cause)) throw cause;
+    return null;
+  }
+}
+function isInsideDirectory(directory, target) {
+  const rel = path.relative(directory, target);
+  return rel !== "" && rel !== ".." && !rel.startsWith(`..${path.sep}`) && !path.isAbsolute(rel);
+}
+async function validateCapsuleImportArchive(archivePath, storageDir) {
+  const storeReal = await realpathOrNull(defaultCapsulesDir(storageDir));
+  const archiveReal = await realpathOrNull(archivePath);
+  if (storeReal === null || archiveReal === null || !isInsideDirectory(storeReal, archiveReal)) {
+    throw new EngramAccessInputError(IMPORT_SOURCE_REFUSED);
+  }
+  if (!(await stat(archiveReal)).isFile()) {
+    throw new EngramAccessInputError("capsule import failed: archivePath must point to a file");
+  }
+  try {
+    await access(archiveReal, fsConstants.R_OK);
+  } catch (cause) {
+    if (!isInputFsError(cause)) throw cause;
+    throw new EngramAccessInputError("capsule import failed: archive is not readable");
+  }
+}
+
+export {
+  isCapsuleImportArchiveInputError,
+  validateCapsuleImportArchive
+};
+//# sourceMappingURL=chunk-FKBGK3NC.js.map

package/dist/chunk-FKBGK3NC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/capsule-import-gate.ts"],"sourcesContent":["import { constants as fsConstants } from \"node:fs\";\nimport { access, realpath, stat } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { ZodError } from \"zod\";\nimport { EngramAccessInputError } from \"./access-errors.js\";\nimport { defaultCapsulesDir } from \"./capsule-cli.js\";\n\n/**\n * Import-path gate for remote capsule imports (issue #3225 C1).\n *\n * `EngramAccessService.capsuleImport` serves the HTTP route and the\n * `capsule_import` MCP operation, where the caller supplies `archivePath`.\n * The destination namespace is authorized, but the source archive previously\n * was not: any path the server process could read was accepted. This module\n * confines the source to the namespace capsule store, `defaultCapsulesDir`\n * of the destination storage dir, which is the same store `capsule export`\n * writes and `capsule_list` lists.\n *\n * The CLI import path does not go through this gate; it is the explicit\n * operator authority and keeps unrestricted local-path imports.\n */\n\n/** True when the caught error carries the given errno-style code. */\nfunction hasFsErrorCode(cause: unknown, code: string): boolean {\n  return cause instanceof Object && \"code\" in cause && cause.code === code;\n}\n\n/** True when `cause` is a path error the gate reports as an input error instead of a server fault. */\nfunction isInputFsError(cause: unknown): boolean {\n  return (\n    hasFsErrorCode(cause, \"ENOENT\") ||\n    hasFsErrorCode(cause, \"ENOTDIR\") ||\n    hasFsErrorCode(cause, \"EACCES\") ||\n    hasFsErrorCode(cause, \"EPERM\") ||\n    hasFsErrorCode(cause, \"ELOOP\") ||\n    hasFsErrorCode(cause, \"ENAMETOOLONG\") ||\n    hasFsErrorCode(cause, \"ERR_INVALID_ARG_VALUE\")\n  );\n}\n\n/** Matches zod-style `Z_` error codes carried on error objects. */\nconst ZOD_STYLE_CODE = /^Z_/;\n\n/** True when the caught error carries a zod-style `Z_` code. */\nfunction hasZodStyleErrorCode(cause: unknown): boolean {\n  return cause instanceof Object && \"code\" in cause && ZOD_STYLE_CODE.test(String(cause.code));\n}\n\n/** True when the importer failed on archive input (shape, gzip, checksum) rather than backend errors. */\nexport function isCapsuleImportArchiveInputError(cause: unknown, message: string): boolean {\n  if (cause instanceof ZodError) return true;\n  if (hasZodStyleErrorCode(cause)) return true;\n  return (\n    message.startsWith(\"importCapsule: archive\") ||\n    message.startsWith(\"importCapsule: bundle\") ||\n    message.startsWith(\"importCapsule: manifest\") ||\n    message.startsWith(\"importCapsule: record\") ||\n    /incorrect header check|invalid stored block lengths|not in gzip format|unexpected end of file/i.test(message)\n  );\n}\n\n/**\n * One message for every refusal before confinement is proven. A caller that\n * can name any server path must not learn from the error whether that path\n * exists, is a directory, or is unreadable.\n */\nconst IMPORT_SOURCE_REFUSED =\n  \"capsule import failed: archivePath must be an existing file inside the namespace capsule store\";\n\n/** Resolve a path to its real path; a missing, looping, or unreadable path resolves to null. */\nasync function realpathOrNull(target: string): Promise<string | null> {\n  try {\n    return await realpath(target);\n  } catch (cause) {\n    if (!isInputFsError(cause)) throw cause;\n    return null;\n  }\n}\n\n/** True when `target` is a strict descendant of `directory` (both already resolved). */\nfunction isInsideDirectory(directory: string, target: string): boolean {\n  const rel = path.relative(directory, target);\n  return rel !== \"\" && rel !== \"..\" && !rel.startsWith(`..${path.sep}`) && !path.isAbsolute(rel);\n}\n\n/**\n * Validate a remote import source and confine it to the namespace capsule\n * store. Both real paths are resolved first, so `..` segments and store\n * symlinks that point outside are refused. Confinement is checked before the\n * file is inspected in any other way, and every failure before it proves\n * confinement raises the same message.\n */\nexport async function validateCapsuleImportArchive(archivePath: string, storageDir: string): Promise<void> {\n  const storeReal = await realpathOrNull(defaultCapsulesDir(storageDir));\n  const archiveReal = await realpathOrNull(archivePath);\n  if (storeReal === null || archiveReal === null || !isInsideDirectory(storeReal, archiveReal)) {\n    throw new EngramAccessInputError(IMPORT_SOURCE_REFUSED);\n  }\n  // The path now names a store entry, so the checks below only describe the store.\n  if (!(await stat(archiveReal)).isFile()) {\n    throw new EngramAccessInputError(\"capsule import failed: archivePath must point to a file\");\n  }\n  try {\n    await access(archiveReal, fsConstants.R_OK);\n  } catch (cause) {\n    if (!isInputFsError(cause)) throw cause;\n    throw new EngramAccessInputError(\"capsule import failed: archive is not readable\");\n  }\n}\n"],"mappings":";;;;;;;;AAAA,SAAS,aAAa,mBAAmB;AACzC,SAAS,QAAQ,UAAU,YAAY;AACvC,OAAO,UAAU;AACjB,SAAS,gBAAgB;AAoBzB,SAAS,eAAe,OAAgB,MAAuB;AAC7D,SAAO,iBAAiB,UAAU,UAAU,SAAS,MAAM,SAAS;AACtE;AAGA,SAAS,eAAe,OAAyB;AAC/C,SACE,eAAe,OAAO,QAAQ,KAC9B,eAAe,OAAO,SAAS,KAC/B,eAAe,OAAO,QAAQ,KAC9B,eAAe,OAAO,OAAO,KAC7B,eAAe,OAAO,OAAO,KAC7B,eAAe,OAAO,cAAc,KACpC,eAAe,OAAO,uBAAuB;AAEjD;AAGA,IAAM,iBAAiB;AAGvB,SAAS,qBAAqB,OAAyB;AACrD,SAAO,iBAAiB,UAAU,UAAU,SAAS,eAAe,KAAK,OAAO,MAAM,IAAI,CAAC;AAC7F;AAGO,SAAS,iCAAiC,OAAgB,SAA0B;AACzF,MAAI,iBAAiB,SAAU,QAAO;AACtC,MAAI,qBAAqB,KAAK,EAAG,QAAO;AACxC,SACE,QAAQ,WAAW,wBAAwB,KAC3C,QAAQ,WAAW,uBAAuB,KAC1C,QAAQ,WAAW,yBAAyB,KAC5C,QAAQ,WAAW,uBAAuB,KAC1C,iGAAiG,KAAK,OAAO;AAEjH;AAOA,IAAM,wBACJ;AAGF,eAAe,eAAe,QAAwC;AACpE,MAAI;AACF,WAAO,MAAM,SAAS,MAAM;AAAA,EAC9B,SAAS,OAAO;AACd,QAAI,CAAC,eAAe,KAAK,EAAG,OAAM;AAClC,WAAO;AAAA,EACT;AACF;AAGA,SAAS,kBAAkB,WAAmB,QAAyB;AACrE,QAAM,MAAM,KAAK,SAAS,WAAW,MAAM;AAC3C,SAAO,QAAQ,MAAM,QAAQ,QAAQ,CAAC,IAAI,WAAW,KAAK,KAAK,GAAG,EAAE,KAAK,CAAC,KAAK,WAAW,GAAG;AAC/F;AASA,eAAsB,6BAA6B,aAAqB,YAAmC;AACzG,QAAM,YAAY,MAAM,eAAe,mBAAmB,UAAU,CAAC;AACrE,QAAM,cAAc,MAAM,eAAe,WAAW;AACpD,MAAI,cAAc,QAAQ,gBAAgB,QAAQ,CAAC,kBAAkB,WAAW,WAAW,GAAG;AAC5F,UAAM,IAAI,uBAAuB,qBAAqB;AAAA,EACxD;AAEA,MAAI,EAAE,MAAM,KAAK,WAAW,GAAG,OAAO,GAAG;AACvC,UAAM,IAAI,uBAAuB,yDAAyD;AAAA,EAC5F;AACA,MAAI;AACF,UAAM,OAAO,aAAa,YAAY,IAAI;AAAA,EAC5C,SAAS,OAAO;AACd,QAAI,CAAC,eAAe,KAAK,EAAG,OAAM;AAClC,UAAM,IAAI,uBAAuB,gDAAgD;AAAA,EACnF;AACF;","names":[]}

package/dist/{chunk-X2KO4FK5.js → chunk-FNFURZBZ.js}

@@ -6,18 +6,18 @@ import {
 // src/briefing-deadline.ts
 var BRIEFING_DEADLINE_MS = 3e4;
 var BriefingTimeoutError = class extends Error {
-  constructor(deadlineMs) {
-    super(`briefing timed out after ${deadlineMs}ms`);
+  constructor(deadlineMs, label = "briefing") {
+    super(`${label} timed out after ${deadlineMs}ms`);
     this.deadlineMs = deadlineMs;
     this.name = "TimeoutError";
   }
   deadlineMs;
 };
-async function withBriefingDeadline(run, abortSignal) {
+async function withBriefingDeadline(run, abortSignal, label = "briefing") {
   const controller = new AbortController();
   const signal = abortSignal ? AbortSignal.any([abortSignal, controller.signal]) : controller.signal;
   const timer = setTimeout(
-    () => controller.abort(new BriefingTimeoutError(BRIEFING_DEADLINE_MS)),
+    () => controller.abort(new BriefingTimeoutError(BRIEFING_DEADLINE_MS, label)),
     BRIEFING_DEADLINE_MS
   );
   try {
@@ -37,4 +37,4 @@ export {
   BriefingTimeoutError,
   withBriefingDeadline
 };
-//# sourceMappingURL=chunk-X2KO4FK5.js.map
+//# sourceMappingURL=chunk-FNFURZBZ.js.map

package/dist/chunk-FNFURZBZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/briefing-deadline.ts"],"sourcesContent":["import { isAbortError, raceAbort } from \"./abort-error.js\";\n\nexport const BRIEFING_DEADLINE_MS = 30_000;\n\nexport class BriefingTimeoutError extends Error {\n  constructor(readonly deadlineMs: number, label = \"briefing\") {\n    super(`${label} timed out after ${deadlineMs}ms`);\n    this.name = \"TimeoutError\";\n  }\n}\n\nexport async function withBriefingDeadline<T>(\n  run: (signal: AbortSignal) => Promise<T>,\n  abortSignal?: AbortSignal,\n  label = \"briefing\",\n): Promise<T> {\n  const controller = new AbortController();\n  const signal = abortSignal ? AbortSignal.any([abortSignal, controller.signal]) : controller.signal;\n  const timer = setTimeout(\n    () => controller.abort(new BriefingTimeoutError(BRIEFING_DEADLINE_MS, label)),\n    BRIEFING_DEADLINE_MS\n  );\n  try {\n    signal.throwIfAborted();\n    return await raceAbort(run(signal), signal, \"briefing aborted\");\n  } catch (err) {\n    // raceAbort normalizes cancellation; retain the distinct deadline reason.\n    const reason: unknown = signal.reason;\n    if (signal.aborted && (reason instanceof BriefingTimeoutError || isAbortError(reason))) throw reason;\n    throw err;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n"],"mappings":";;;;;;AAEO,IAAM,uBAAuB;AAE7B,IAAM,uBAAN,cAAmC,MAAM;AAAA,EAC9C,YAAqB,YAAoB,QAAQ,YAAY;AAC3D,UAAM,GAAG,KAAK,oBAAoB,UAAU,IAAI;AAD7B;AAEnB,SAAK,OAAO;AAAA,EACd;AAAA,EAHqB;AAIvB;AAEA,eAAsB,qBACpB,KACA,aACA,QAAQ,YACI;AACZ,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,SAAS,cAAc,YAAY,IAAI,CAAC,aAAa,WAAW,MAAM,CAAC,IAAI,WAAW;AAC5F,QAAM,QAAQ;AAAA,IACZ,MAAM,WAAW,MAAM,IAAI,qBAAqB,sBAAsB,KAAK,CAAC;AAAA,IAC5E;AAAA,EACF;AACA,MAAI;AACF,WAAO,eAAe;AACtB,WAAO,MAAM,UAAU,IAAI,MAAM,GAAG,QAAQ,kBAAkB;AAAA,EAChE,SAAS,KAAK;AAEZ,UAAM,SAAkB,OAAO;AAC/B,QAAI,OAAO,YAAY,kBAAkB,wBAAwB,aAAa,MAAM,GAAI,OAAM;AAC9F,UAAM;AAAA,EACR,UAAE;AACA,iBAAa,KAAK;AAAA,EACpB;AACF;","names":[]}

package/dist/{chunk-MYCCO6AA.js → chunk-G54BOKZ6.js}

@@ -1,6 +1,6 @@
 import {
   StorageManager
-} from "./chunk-ELWI2R6H.js";
+} from "./chunk-CC4V7HNP.js";
 import {
   keyring_exports,
   secureStoreDir
@@ -416,4 +416,4 @@ export {
   resolveNamespaceStorageRoot,
   NamespaceStorageRouter
 };
-//# sourceMappingURL=chunk-MYCCO6AA.js.map
+//# sourceMappingURL=chunk-G54BOKZ6.js.map

package/dist/{chunk-JFH6JAGY.js → chunk-G67EUQAB.js}

@@ -16,13 +16,13 @@ import {
   requestEntityCanonicalIdReconcile,
   withRawEntityPageMutation
 } from "./chunk-IAYUTGF2.js";
-import {
-  parseExportBundle
-} from "./chunk-WEHSQBFR.js";
 import {
   decryptCapsuleFileInMemory,
   isEncryptedCapsuleFile
-} from "./chunk-UVYI6VIX.js";
+} from "./chunk-X7Y7WX73.js";
+import {
+  parseExportBundle
+} from "./chunk-WEHSQBFR.js";
 import {
   assertIsDirectoryNotSymlink,
   assertRealpathInsideRoot,
@@ -296,4 +296,4 @@ function mintForkId(capsuleId, originalId, now) {
 export {
   importCapsule
 };
-//# sourceMappingURL=chunk-JFH6JAGY.js.map
+//# sourceMappingURL=chunk-G67EUQAB.js.map

package/dist/{chunk-TV65NR7L.js → chunk-GULUWOA5.js}

@@ -1,7 +1,7 @@
 import {
   SupportPassportCreateGrantRequestSchema,
   defineOperation
-} from "./chunk-HVFX2N2G.js";
+} from "./chunk-UAUV3BWS.js";
 import {
   SupportPassportCardCategorySchema,
   SupportPassportMemoryIdSchema,
@@ -220,4 +220,4 @@ var supportPassportGrantAskOperation = defineOperation({
     result: await ctx.service.supportPassportAskGrant(grantId, secret, question, ctx.abortSignal)
   })
 });
-//# sourceMappingURL=chunk-TV65NR7L.js.map
+//# sourceMappingURL=chunk-GULUWOA5.js.map

package/dist/{chunk-6DANGCMO.js → chunk-HFUKXOUW.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-7T4TOGMS.js";
 import {
   defineOperation
-} from "./chunk-HVFX2N2G.js";
+} from "./chunk-UAUV3BWS.js";
 
 // src/external-wiki-access.ts
 import { z } from "zod";
@@ -26,4 +26,4 @@ var externalWikiSearchOperation = defineOperation({
 export {
   externalWikiSearchOperation
 };
-//# sourceMappingURL=chunk-6DANGCMO.js.map
+//# sourceMappingURL=chunk-HFUKXOUW.js.map

package/dist/{chunk-Y3IYKNBY.js → chunk-HLN2HOXX.js}

@@ -1,7 +1,7 @@
 import {
   resolveDefaultNamespaceRoot,
   resolveNamespaceStorageRoot
-} from "./chunk-MYCCO6AA.js";
+} from "./chunk-G54BOKZ6.js";
 import {
   MutationSerializer,
   withHeldFileLock
@@ -1596,4 +1596,4 @@ export {
   isNamespaceKind,
   NamespaceCatalog
 };
-//# sourceMappingURL=chunk-Y3IYKNBY.js.map
+//# sourceMappingURL=chunk-HLN2HOXX.js.map

package/dist/{chunk-Y43X3E24.js → chunk-IBDWYRDR.js}

@@ -1,12 +1,12 @@
 import {
   parseEntityFile
-} from "./chunk-ELWI2R6H.js";
+} from "./chunk-CC4V7HNP.js";
 import {
   inferMemoryStatus
 } from "./chunk-7RJUVTVF.js";
 import {
   EngramAccessInputError
-} from "./chunk-LGEH473S.js";
+} from "./chunk-CJCTKL6Y.js";
 
 // src/who-knows.ts
 var WHO_KNOWS_DEFAULT_LIMIT = 5;
@@ -253,4 +253,4 @@ export {
   WHO_KNOWS_MCP_TOOLS,
   handleWhoKnowsHttpQuery
 };
-//# sourceMappingURL=chunk-Y43X3E24.js.map
+//# sourceMappingURL=chunk-IBDWYRDR.js.map

package/dist/{chunk-XSFQN7TP.js → chunk-IBGU6AN6.js}

@@ -24,7 +24,7 @@ import {
 } from "./chunk-E4RMZGRS.js";
 import {
   RECALL_WHY_MCP_TOOLS
-} from "./chunk-ZXF3O7P4.js";
+} from "./chunk-ARRTLPRC.js";
 import {
   McpFrameReader
 } from "./chunk-IGLJNHOX.js";
@@ -52,22 +52,22 @@ import {
 } from "./chunk-KIUVEMBI.js";
 import {
   getOperation
-} from "./chunk-HVFX2N2G.js";
+} from "./chunk-UAUV3BWS.js";
 import {
   WHO_KNOWS_MCP_TOOLS
-} from "./chunk-Y43X3E24.js";
+} from "./chunk-IBDWYRDR.js";
 import {
   PROMOTION_CANDIDATES_MCP_TOOLS
 } from "./chunk-R6HMAIKM.js";
 import {
   validateRequest
-} from "./chunk-GYNRNKMW.js";
+} from "./chunk-YMJRLT7S.js";
 import {
   assertOperationAllowed,
   capabilityAllowsOp,
   enforceNamespaceAllowList,
   tokenCapabilityStore
-} from "./chunk-YO2JEX2Z.js";
+} from "./chunk-OGBQMY46.js";
 import {
   SUPPORT_PASSPORT_SOURCE_MEMORY_ID_MAX_LENGTH
 } from "./chunk-PWPIERBM.js";
@@ -78,7 +78,7 @@ import {
   EngramAccessForbiddenError,
   EngramAccessInputError,
   unknownToolError
-} from "./chunk-LGEH473S.js";
+} from "./chunk-CJCTKL6Y.js";
 import {
   abortError,
   isAbortError
@@ -3734,14 +3734,15 @@ var EngramMcpServer = class {
       } catch (err) {
         if (isAbortError(err)) throw err;
         const message = mcpToolErrorMessage(err instanceof Error ? err : new Error(String(err)));
-        return {
-          jsonrpc: "2.0",
-          id,
-          result: {
-            content: [{ type: "text", text: message }],
-            isError: true
-          }
+        const admissionBackpressure = err instanceof Error && (err.name === "ReplayAdmissionRefusedError" || err.name === "BufferAdmissionRefusedError");
+        const result = {
+          content: [{ type: "text", text: message }],
+          isError: true
         };
+        if (admissionBackpressure) {
+          result.structuredContent = { code: "buffer_admission_refused", retryable: true };
+        }
+        return { jsonrpc: "2.0", id, result };
       }
     }
     return {
@@ -3985,4 +3986,4 @@ export {
   MCP_MIGRATED_OPERATIONS,
   EngramMcpServer
 };
-//# sourceMappingURL=chunk-XSFQN7TP.js.map
+//# sourceMappingURL=chunk-IBGU6AN6.js.map