@remnic/core 9.23.2 → 9.23.4

package/dist/{chunk-DLKRXYRL.js → chunk-EXH5AK46.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-V7IZKJI3.js";
 import {
   AdapterRegistry
-} from "./chunk-AU7Q3LSC.js";
+} from "./chunk-RKNJBZ55.js";
 import {
   WriteRateLimiter
 } from "./chunk-MKQBXQKU.js";
@@ -16,13 +16,13 @@ import {
   processChatMessage,
   sessionBelongsToPrincipal,
   subscribeChatTranscript
-} from "./chunk-M6LJXJ3J.js";
+} from "./chunk-AT7XL2JJ.js";
 import {
   RelayMissionStoreError
-} from "./chunk-3L5O7SMT.js";
+} from "./chunk-JVOA5VDZ.js";
 import {
   validateRequest
-} from "./chunk-V2XVMCP6.js";
+} from "./chunk-M2PG7OTI.js";
 import {
   executeResolution,
   isValidResolutionVerb
@@ -36,7 +36,7 @@ import {
   CorrectionContractError,
   getOperation,
   resolveQueryNamespaceWritablePreflight
-} from "./chunk-WZVIB5BK.js";
+} from "./chunk-6MFMTNY4.js";
 import {
   isTrustZoneName
 } from "./chunk-JGSKJHF7.js";
@@ -3197,4 +3197,4 @@ export {
   MeetingsInputError,
   EngramAccessHttpServer
 };
-//# sourceMappingURL=chunk-DLKRXYRL.js.map
+//# sourceMappingURL=chunk-EXH5AK46.js.map

package/dist/{chunk-JNIJBXVK.js → chunk-FPJWQZ35.js}

@@ -1,7 +1,7 @@
 import {
   StorageManager,
   normalizeEntityName
-} from "./chunk-XWPFZX6S.js";
+} from "./chunk-GCQIMJFH.js";
 import {
   serializeMutations
 } from "./chunk-WL5EBRDH.js";
@@ -956,4 +956,4 @@ export {
   resolveBriefingSaveDir,
   briefingFilename
 };
-//# sourceMappingURL=chunk-JNIJBXVK.js.map
+//# sourceMappingURL=chunk-FPJWQZ35.js.map

package/dist/{chunk-XWPFZX6S.js → chunk-GCQIMJFH.js}

@@ -1,8 +1,3 @@
-import {
-  TombstoneStore,
-  buildRetiredFactTombstoneInputs,
-  collectRetiredMemoriesForRebuild
-} from "./chunk-2QMKMVHH.js";
 import {
   WEARABLES_DIR_NAME,
   escapeSegmentText,
@@ -14,6 +9,11 @@ import {
   unescapeSegmentText,
   unescapeSpeakerLabel
 } from "./chunk-UHVXE24Y.js";
+import {
+  TombstoneStore,
+  buildRetiredFactTombstoneInputs,
+  collectRetiredMemoriesForRebuild
+} from "./chunk-2QMKMVHH.js";
 import {
   supersessionKeysForFact
 } from "./chunk-DNHVPZOD.js";
@@ -69,6 +69,9 @@ import {
   readProjectedMemoryTimeline,
   updateProjectedMemoryPath
 } from "./chunk-3CSX3ETE.js";
+import {
+  rotateMarkdownFileToArchive
+} from "./chunk-DM2T26WE.js";
 import {
   closeContinuityIncidentRecord,
   createContinuityIncidentRecord,
@@ -78,13 +81,6 @@ import {
   serializeContinuityIncident,
   upsertContinuityLoopInMarkdown
 } from "./chunk-LDXUBPMO.js";
-import {
-  rotateMarkdownFileToArchive
-} from "./chunk-DM2T26WE.js";
-import {
-  parseFaithfulnessField,
-  serializeFaithfulnessFields
-} from "./chunk-JYIJNNN3.js";
 import {
   composeMemoryEnvelope,
   isSealedMemoryEnvelope,
@@ -94,6 +90,10 @@ import {
   assemblePersistedBody,
   stripAttributesSuffix
 } from "./chunk-R3DJVOSM.js";
+import {
+  parseFaithfulnessField,
+  serializeFaithfulnessFields
+} from "./chunk-JYIJNNN3.js";
 import {
   isConsolidationOperator,
   isValidDerivedFromEntry
@@ -131,14 +131,14 @@ import {
   reconcileProvenanceRead,
   serializeProvenanceFields
 } from "./chunk-5I4M26Q7.js";
+import {
+  sanitizeMemoryContent
+} from "./chunk-5GKPFL3S.js";
 import {
   matchEntitySchemaSection,
   normalizeEntityStructuredSection,
   sortStructuredSectionsBySchema
 } from "./chunk-4DJQYKMN.js";
-import {
-  sanitizeMemoryContent
-} from "./chunk-5GKPFL3S.js";
 import {
   parseFlexibleIsoTimestamp
 } from "./chunk-P7FMDTKL.js";
@@ -213,6 +213,10 @@ import path9 from "path";
 // src/storage/memory-read-store.ts
 import { lstat, readdir, realpath, stat } from "fs/promises";
 import path2 from "path";
+function isPropagatableReadError(err) {
+  const code = err.code;
+  return typeof code === "string" && code !== "ENOENT";
+}
 var MemoryReadStore = class {
   constructor(deps) {
     this.deps = deps;
@@ -302,22 +306,44 @@ var MemoryReadStore = class {
     this.deps.artifactIndexCache = null;
     return latestArtifacts;
   }
-  async collectActiveMemoryPaths() {
+  /**
+   * Recursively collect `*.md` paths under `startDirs`, hardened against symlink
+   * escape: a category dir symlinked outside memoryDir (e.g. decisions/ -> an
+   * external dir) must NOT pull out-of-store files into a scan (info leak). Same
+   * walker-hardening pattern as document-scanner.ts / cli.ts /
+   * consolidation-provenance-check.ts; reuses the shared containment helper.
+   * Paths only — no frontmatter parse.
+   */
+  async collectContainedMarkdownPaths(startDirs, propagateReadErrors = false) {
     const filePaths = [];
     let memoryRootReal;
     try {
       memoryRootReal = await realpath(this.deps.baseDir);
-    } catch {
+    } catch (err) {
+      if (propagateReadErrors && isPropagatableReadError(err)) throw err;
       return filePaths;
     }
     const collectPaths = async (dir) => {
+      let dirStat;
+      try {
+        dirStat = await lstat(dir);
+      } catch (err) {
+        if (propagateReadErrors && isPropagatableReadError(err)) throw err;
+        return;
+      }
+      if (dirStat.isSymbolicLink()) return;
+      if (!dirStat.isDirectory()) {
+        if (propagateReadErrors) {
+          throw new Error(`corpus scan: expected a directory but found a non-directory at ${dir}`);
+        }
+        return;
+      }
       let entries;
       try {
-        const dirStat = await lstat(dir);
-        if (dirStat.isSymbolicLink() || !dirStat.isDirectory()) return;
         assertPathInsideRoot(memoryRootReal, await realpath(dir), dir);
         entries = await readdir(dir, { withFileTypes: true });
-      } catch {
+      } catch (err) {
+        if (propagateReadErrors && isPropagatableReadError(err)) throw err;
         return;
       }
       const subdirs = [];
@@ -330,7 +356,8 @@ var MemoryReadStore = class {
           try {
             assertPathInsideRoot(memoryRootReal, await realpath(fullPath), fullPath);
             filePaths.push(fullPath);
-          } catch {
+          } catch (err) {
+            if (propagateReadErrors && isPropagatableReadError(err)) throw err;
           }
         }
       }
@@ -338,11 +365,32 @@ var MemoryReadStore = class {
         await collectPaths(subdir);
       }
     };
-    for (const dir of RECALL_FALLBACK_DIRS) {
-      await collectPaths(path2.join(this.deps.baseDir, dir));
+    for (const dir of startDirs) {
+      await collectPaths(dir);
     }
     return filePaths;
   }
+  async collectActiveMemoryPaths(options) {
+    return this.collectContainedMarkdownPaths(
+      RECALL_FALLBACK_DIRS.map((dir) => path2.join(this.deps.baseDir, dir)),
+      options?.propagateReadErrors ?? false
+    );
+  }
+  /**
+   * Cold-tier memory paths for the corpus census (issue #2156 finding D).
+   * Demoted memories move to `<baseDir>/cold/...` but stay active and reachable
+   * via cold recall, so the divergence census MUST count them — otherwise two
+   * replicas whose cold tiers differ show a false "converged" digest. Paths
+   * only, same symlink/containment hardening as the hot scan. This is NOT part
+   * of the recall fallback corpus (collectActiveMemoryPaths), whose scan is
+   * intentionally unchanged.
+   */
+  async collectColdMemoryPaths(options) {
+    return this.collectContainedMarkdownPaths(
+      [this.deps.resolveTierRootDir("cold")],
+      options?.propagateReadErrors ?? false
+    );
+  }
   async readMemoriesWindow(options = {}) {
     const allPaths = await this.deps.collectActiveMemoryPaths();
     const sortedPaths = this.deps.orderWindowPaths(allPaths);
@@ -7009,8 +7057,31 @@ ${sanitized.text}
     }
     return Math.max(1, Math.floor(batchSize));
   }
-  async collectActiveMemoryPaths() {
-    return this.memoryReadStore.collectActiveMemoryPaths();
+  /**
+   * Public cheap active-memory path scan (issue #2149 corpus watermark). Lists
+   * active memory file paths without parsing frontmatter — safe on a 100k+
+   * corpus, unlike readAllMemories().
+   */
+  async collectActiveMemoryPaths(options) {
+    return this.memoryReadStore.collectActiveMemoryPaths(options);
+  }
+  /**
+   * Public cheap cold-tier path scan (issue #2156 finding D corpus census).
+   * Lists demoted-but-reachable memory paths under `cold/` without parsing
+   * frontmatter, so the divergence watermark counts the cold tier too.
+   */
+  async collectColdMemoryPaths(options) {
+    return this.memoryReadStore.collectColdMemoryPaths(options);
+  }
+  /**
+   * Combined hot+cold corpus-mutation sentinel (issue #2156). Changes whenever
+   * EITHER tier is written, so a divergence census can bracket its hot/cold scan
+   * and detect a tier migration (write-cold-then-unlink-hot) racing the walkers,
+   * then retry for a consistent snapshot instead of caching a transient
+   * double-count or miss.
+   */
+  getCorpusScanVersion() {
+    return `${this.getMemoryCorpusVersion()}:${this.readColdWriteVersion()}`;
   }
   async readParsedMemoriesFromPaths(filePaths, batchSize) {
     if (filePaths.length === 0) return [];
@@ -8911,4 +8982,4 @@ export {
   isValidBufferSurpriseEvent,
   StorageManager3 as StorageManager
 };
-//# sourceMappingURL=chunk-XWPFZX6S.js.map
+//# sourceMappingURL=chunk-GCQIMJFH.js.map