@remnic/core 9.27.0 → 9.29.0

package/dist/{chunk-2QSZNTDO.js → chunk-RKNJBZ55.js}

@@ -1,3 +1,6 @@
+import {
+  ClaudeCodeAdapter
+} from "./chunk-J64TK33U.js";
 import {
   CodexAdapter
 } from "./chunk-RSUYKGGZ.js";
@@ -7,9 +10,6 @@ import {
 import {
   ReplitAdapter
 } from "./chunk-TMSXWOBZ.js";
-import {
-  ClaudeCodeAdapter
-} from "./chunk-J64TK33U.js";
 
 // src/adapters/registry.ts
 var AdapterRegistry = class {
@@ -53,4 +53,4 @@ var AdapterRegistry = class {
 export {
   AdapterRegistry
 };
-//# sourceMappingURL=chunk-2QSZNTDO.js.map
+//# sourceMappingURL=chunk-RKNJBZ55.js.map

package/dist/chunk-RMMVQQA6.js

@@ -0,0 +1,70 @@
+import {
+  gateReportByCensus,
+  pollReplicaPeers
+} from "./chunk-CVILPI77.js";
+import {
+  resolveReplicaPeersConfig
+} from "./chunk-WNIUPHWV.js";
+
+// src/operator-doctor-replica.ts
+function formatPeerLine(peer) {
+  if (peer.state === "unreachable" || peer.state === "unknown") {
+    return `${peer.peer}: ${peer.state} (${peer.reason ?? "unknown"})`;
+  }
+  if (peer.state === "converged") return `${peer.peer}: converged`;
+  const divergedNamespaces = peer.namespaces.filter((delta) => delta.diverged).map((delta) => `${delta.namespace}: ${delta.reasons.join("+")}`);
+  return `${peer.peer}: diverged [${divergedNamespaces.join(", ")}]`;
+}
+async function summarizeReplicaDivergence(rawConfig, localWatermarks, options = {}) {
+  const replicaConfig = resolveReplicaPeersConfig(rawConfig);
+  if (!replicaConfig.enabled) {
+    return {
+      key: "replica_divergence",
+      status: "ok",
+      summary: "Replica divergence detection is disabled.",
+      details: { enabled: false, pending: false, polledAt: null, peers: [] }
+    };
+  }
+  if (replicaConfig.peers.length === 0) {
+    return {
+      key: "replica_divergence",
+      status: "ok",
+      summary: "Replica divergence detection is enabled, but no peers are configured.",
+      details: { enabled: true, pending: false, polledAt: null, peers: [] }
+    };
+  }
+  const report = await pollReplicaPeers({
+    config: replicaConfig,
+    localWatermarks,
+    now: options.now,
+    resolveSecretRef: options.resolveSecretRef,
+    fetchImpl: options.fetchImpl
+  });
+  const gated = gateReportByCensus(report, options.localCensusComplete !== false);
+  const diverged = gated.peers.filter((peer) => peer.state === "diverged");
+  const unreachable = gated.peers.filter((peer) => peer.state === "unreachable" || peer.state === "unknown");
+  const lines = gated.peers.map(formatPeerLine);
+  const censusIncomplete = gated.censusComplete === false;
+  if (diverged.length > 0 || unreachable.length > 0 || censusIncomplete) {
+    const counts = [`${diverged.length} diverged`, `${unreachable.length} unreachable/unknown`];
+    if (censusIncomplete) counts.push("local census incomplete");
+    return {
+      key: "replica_divergence",
+      status: "warn",
+      summary: `Replica divergence across ${gated.peers.length} peer(s): ${counts.join(", ")}. ${lines.join("; ")}`,
+      remediation: (censusIncomplete ? "The local corpus census was incomplete (see the corpus_watermark check), so convergence cannot be certified \u2014 resolve that first. " : "") + "Investigate the flagged peer(s): a diverged peer's corpus differs beyond the configured threshold (a possible split-brain \u2014 the pair's recall will differ across failover); an unreachable/unknown peer could not be polled or compared. Detection only; reconciliation is tracked in issue #2150.",
+      details: gated
+    };
+  }
+  return {
+    key: "replica_divergence",
+    status: "ok",
+    summary: `All ${gated.peers.length} replica peer(s) converged. ${lines.join("; ")}`,
+    details: gated
+  };
+}
+
+export {
+  summarizeReplicaDivergence
+};
+//# sourceMappingURL=chunk-RMMVQQA6.js.map

package/dist/chunk-RMMVQQA6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/operator-doctor-replica.ts"],"sourcesContent":["/**\n * Replica-divergence doctor check (issue #2149).\n *\n * Kept deliberately LIGHT: it takes the ALREADY-computed local corpus watermark\n * set (the same array the `corpus_watermark` check produces) instead of importing\n * the corpus census helpers or `PluginConfig`. That keeps this new tsup DTS entry\n * from pulling the heavy `PluginConfig` type graph into its `.d.ts` — two sibling\n * PRs OOMed the default-heap DTS worker exactly that way (the issue #1562 heap\n * cliff). `runOperatorDoctor` computes the local watermarks once for the corpus\n * check and hands them here via `corpusWatermarksFromCheck`, so there is also no\n * second corpus scan.\n *\n * Status: `ok` when disabled, peerless, or every peer converged; `warn` when any\n * peer diverged beyond threshold, could not be polled (unreachable/unknown), or\n * the local corpus census was incomplete — a scan that cannot ask a peer, or\n * cannot fully read its OWN corpus, must never read as agreement (AGENTS.md §22).\n * The summary carries concrete deltas so an operator sees numbers, not a verdict.\n * Peer tokens are never resolved into, logged from, or printed by this check; a\n * peer is identified only by its redacted host:port. The CLI forwards the host\n * SecretRef resolver (when one is configured) so a SecretRef peer token\n * authenticates here too; without a resolver such a token degrades to a per-peer\n * `token_error` (never a throw). The always-on `/health` surface remains the\n * primary reporting path. Reconciliation is issue #2150.\n */\n\nimport type { CorpusWatermark } from \"./corpus-watermark.js\";\nimport type { OperatorDoctorCheck } from \"./operator-doctor-types.js\";\nimport { type FetchLike, type ReplicaPeerReport, gateReportByCensus, pollReplicaPeers } from \"./replica-divergence.js\";\nimport { resolveReplicaPeersConfig, type ReplicaPeersConfig } from \"./replica-peers-config.js\";\nimport type { ResolveSecretRefFn } from \"./resolve-auth-token.js\";\n\nexport interface SummarizeReplicaDivergenceOptions {\n  now?: Date;\n  resolveSecretRef?: ResolveSecretRefFn | null;\n  /** Injectable for tests; production polls with global fetch. */\n  fetchImpl?: FetchLike;\n  /**\n   * Whether the LOCAL corpus census that produced `localWatermarks` was complete\n   * (the `corpus_watermark` check was `ok`). When false, a would-be-converged\n   * result is downgraded to `warn`: a namespace missing from an incomplete local\n   * scan must never let the replica check certify convergence (cursor finding).\n   */\n  localCensusComplete?: boolean;\n}\n\nfunction formatPeerLine(peer: ReplicaPeerReport): string {\n  if (peer.state === \"unreachable\" || peer.state === \"unknown\") {\n    return `${peer.peer}: ${peer.state} (${peer.reason ?? \"unknown\"})`;\n  }\n  if (peer.state === \"converged\") return `${peer.peer}: converged`;\n  const divergedNamespaces = peer.namespaces\n    .filter((delta) => delta.diverged)\n    .map((delta) => `${delta.namespace}: ${delta.reasons.join(\"+\")}`);\n  return `${peer.peer}: diverged [${divergedNamespaces.join(\", \")}]`;\n}\n\nexport async function summarizeReplicaDivergence(\n  rawConfig: ReplicaPeersConfig | undefined,\n  localWatermarks: readonly CorpusWatermark[],\n  options: SummarizeReplicaDivergenceOptions = {},\n): Promise<OperatorDoctorCheck> {\n  // A host adapter or hand-built PluginConfig can omit the block entirely;\n  // normalize through the same read-boundary resolver /health uses so doctor\n  // degrades to disabled instead of aborting the whole run (round 5, codex P2).\n  const replicaConfig = resolveReplicaPeersConfig(rawConfig);\n  if (!replicaConfig.enabled) {\n    return {\n      key: \"replica_divergence\",\n      status: \"ok\",\n      summary: \"Replica divergence detection is disabled.\",\n      details: { enabled: false, pending: false, polledAt: null, peers: [] },\n    };\n  }\n  if (replicaConfig.peers.length === 0) {\n    return {\n      key: \"replica_divergence\",\n      status: \"ok\",\n      summary: \"Replica divergence detection is enabled, but no peers are configured.\",\n      details: { enabled: true, pending: false, polledAt: null, peers: [] },\n    };\n  }\n\n  const report = await pollReplicaPeers({\n    config: replicaConfig,\n    localWatermarks,\n    now: options.now,\n    resolveSecretRef: options.resolveSecretRef,\n    fetchImpl: options.fetchImpl,\n  });\n  // Apply the SAME census gate /health uses (round 6): otherwise the doctor\n  // renders `peer: converged` lines and converged `details` while /health\n  // downgrades those same peers to `unknown`/`local_census_incomplete`, so a\n  // machine reading doctor JSON sees agreement /health denies. Gating here\n  // turns every would-be-converged peer into `unknown` when the local census\n  // was incomplete, so both surfaces derive peer state from one function.\n  const gated = gateReportByCensus(report, options.localCensusComplete !== false);\n  const diverged = gated.peers.filter((peer) => peer.state === \"diverged\");\n  const unreachable = gated.peers.filter((peer) => peer.state === \"unreachable\" || peer.state === \"unknown\");\n  const lines = gated.peers.map(formatPeerLine);\n  const censusIncomplete = gated.censusComplete === false;\n\n  if (diverged.length > 0 || unreachable.length > 0 || censusIncomplete) {\n    const counts = [`${diverged.length} diverged`, `${unreachable.length} unreachable/unknown`];\n    if (censusIncomplete) counts.push(\"local census incomplete\");\n    return {\n      key: \"replica_divergence\",\n      status: \"warn\",\n      summary:\n        `Replica divergence across ${gated.peers.length} peer(s): ` +\n        `${counts.join(\", \")}. ${lines.join(\"; \")}`,\n      remediation:\n        (censusIncomplete\n          ? \"The local corpus census was incomplete (see the corpus_watermark check), so convergence cannot be \" +\n            \"certified — resolve that first. \"\n          : \"\") +\n        \"Investigate the flagged peer(s): a diverged peer's corpus differs beyond the configured threshold \" +\n        \"(a possible split-brain — the pair's recall will differ across failover); an unreachable/unknown peer \" +\n        \"could not be polled or compared. Detection only; reconciliation is tracked in issue #2150.\",\n      details: gated,\n    };\n  }\n\n  return {\n    key: \"replica_divergence\",\n    status: \"ok\",\n    summary: `All ${gated.peers.length} replica peer(s) converged. ${lines.join(\"; \")}`,\n    details: gated,\n  };\n}\n"],"mappings":";;;;;;;;;AA6CA,SAAS,eAAe,MAAiC;AACvD,MAAI,KAAK,UAAU,iBAAiB,KAAK,UAAU,WAAW;AAC5D,WAAO,GAAG,KAAK,IAAI,KAAK,KAAK,KAAK,KAAK,KAAK,UAAU,SAAS;AAAA,EACjE;AACA,MAAI,KAAK,UAAU,YAAa,QAAO,GAAG,KAAK,IAAI;AACnD,QAAM,qBAAqB,KAAK,WAC7B,OAAO,CAAC,UAAU,MAAM,QAAQ,EAChC,IAAI,CAAC,UAAU,GAAG,MAAM,SAAS,KAAK,MAAM,QAAQ,KAAK,GAAG,CAAC,EAAE;AAClE,SAAO,GAAG,KAAK,IAAI,eAAe,mBAAmB,KAAK,IAAI,CAAC;AACjE;AAEA,eAAsB,2BACpB,WACA,iBACA,UAA6C,CAAC,GAChB;AAI9B,QAAM,gBAAgB,0BAA0B,SAAS;AACzD,MAAI,CAAC,cAAc,SAAS;AAC1B,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,SAAS,EAAE,SAAS,OAAO,SAAS,OAAO,UAAU,MAAM,OAAO,CAAC,EAAE;AAAA,IACvE;AAAA,EACF;AACA,MAAI,cAAc,MAAM,WAAW,GAAG;AACpC,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,MACT,SAAS,EAAE,SAAS,MAAM,SAAS,OAAO,UAAU,MAAM,OAAO,CAAC,EAAE;AAAA,IACtE;AAAA,EACF;AAEA,QAAM,SAAS,MAAM,iBAAiB;AAAA,IACpC,QAAQ;AAAA,IACR;AAAA,IACA,KAAK,QAAQ;AAAA,IACb,kBAAkB,QAAQ;AAAA,IAC1B,WAAW,QAAQ;AAAA,EACrB,CAAC;AAOD,QAAM,QAAQ,mBAAmB,QAAQ,QAAQ,wBAAwB,KAAK;AAC9E,QAAM,WAAW,MAAM,MAAM,OAAO,CAAC,SAAS,KAAK,UAAU,UAAU;AACvE,QAAM,cAAc,MAAM,MAAM,OAAO,CAAC,SAAS,KAAK,UAAU,iBAAiB,KAAK,UAAU,SAAS;AACzG,QAAM,QAAQ,MAAM,MAAM,IAAI,cAAc;AAC5C,QAAM,mBAAmB,MAAM,mBAAmB;AAElD,MAAI,SAAS,SAAS,KAAK,YAAY,SAAS,KAAK,kBAAkB;AACrE,UAAM,SAAS,CAAC,GAAG,SAAS,MAAM,aAAa,GAAG,YAAY,MAAM,sBAAsB;AAC1F,QAAI,iBAAkB,QAAO,KAAK,yBAAyB;AAC3D,WAAO;AAAA,MACL,KAAK;AAAA,MACL,QAAQ;AAAA,MACR,SACE,6BAA6B,MAAM,MAAM,MAAM,aAC5C,OAAO,KAAK,IAAI,CAAC,KAAK,MAAM,KAAK,IAAI,CAAC;AAAA,MAC3C,cACG,mBACG,4IAEA,MACJ;AAAA,MAGF,SAAS;AAAA,IACX;AAAA,EACF;AAEA,SAAO;AAAA,IACL,KAAK;AAAA,IACL,QAAQ;AAAA,IACR,SAAS,OAAO,MAAM,MAAM,MAAM,+BAA+B,MAAM,KAAK,IAAI,CAAC;AAAA,IACjF,SAAS;AAAA,EACX;AACF;","names":[]}

package/dist/{chunk-FCCMFVS6.js → chunk-RPSYDM6C.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-JLNBQWZ2.js";
 import {
   resolvePipelineProcessingCapabilities
-} from "./chunk-RDQGLJRR.js";
+} from "./chunk-2XRE6FLM.js";
 import {
   log
 } from "./chunk-3WCASNQZ.js";
@@ -116,4 +116,4 @@ export {
   formatDaySummaryMemories,
   buildExtensionsFooterForSummary
 };
-//# sourceMappingURL=chunk-FCCMFVS6.js.map
+//# sourceMappingURL=chunk-RPSYDM6C.js.map

package/dist/chunk-RPW2NOU6.js

@@ -0,0 +1,33 @@
+import {
+  applyExtractionSourceGrounding,
+  filterExtractionResultBySource
+} from "./chunk-WOCNN776.js";
+import {
+  delinearize
+} from "./chunk-VEWZZM3H.js";
+
+// src/extraction-source-grounding.ts
+function applyExtractionSourceGrounding2(result, sourceText, assertionSourceText = sourceText, roleAssertionSources, messageTimestamp, options) {
+  const sourceForGrounding = (source) => source === void 0 || !options.anchorTemporalExpressions ? source : delinearize(source, result.entities, messageTimestamp ?? /* @__PURE__ */ new Date());
+  const groundedRoleSources = roleAssertionSources === void 0 ? void 0 : {
+    profile: sourceForGrounding(roleAssertionSources.profile),
+    identity: sourceForGrounding(roleAssertionSources.identity)
+  };
+  return applyExtractionSourceGrounding(
+    result,
+    sourceForGrounding(sourceText) ?? sourceText,
+    sourceForGrounding(assertionSourceText) ?? assertionSourceText,
+    groundedRoleSources,
+    messageTimestamp,
+    options
+  );
+}
+function filterExtractionResultBySource2(result, source, assertionSource, roleAssertionSources, eventTimeNormalizer) {
+  return filterExtractionResultBySource(result, source, assertionSource, roleAssertionSources, eventTimeNormalizer);
+}
+
+export {
+  applyExtractionSourceGrounding2 as applyExtractionSourceGrounding,
+  filterExtractionResultBySource2 as filterExtractionResultBySource
+};
+//# sourceMappingURL=chunk-RPW2NOU6.js.map

package/dist/chunk-RPW2NOU6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/extraction-source-grounding.ts"],"sourcesContent":["import type { ExtractionResult } from \"./types.js\";\nimport { delinearize } from \"./delinearize.js\";\nimport {\n  applyExtractionSourceGrounding as applyGroundingRules,\n  filterExtractionResultBySource as filterGroundingRules,\n} from \"./extraction-source-grounding-rules.js\";\nimport type {\n  ExtractionGroundingRoleSources,\n  ExtractionSourceGroundingOptions,\n} from \"./extraction-source-grounding-rules.js\";\n\nexport type { ExtractionGroundingRoleSources, ExtractionSourceGroundingOptions } from \"./extraction-source-grounding-rules.js\";\n\nexport function applyExtractionSourceGrounding(\n  result: ExtractionResult,\n  sourceText: string,\n  assertionSourceText: string = sourceText,\n  roleAssertionSources: ExtractionGroundingRoleSources | undefined,\n  messageTimestamp: Date | undefined,\n  options: ExtractionSourceGroundingOptions,\n): ExtractionResult {\n  const sourceForGrounding = (source: string | undefined): string | undefined =>\n    source === undefined || !options.anchorTemporalExpressions\n      ? source\n      : delinearize(source, result.entities, messageTimestamp ?? new Date());\n  const groundedRoleSources = roleAssertionSources === undefined\n    ? undefined\n    : {\n      profile: sourceForGrounding(roleAssertionSources.profile),\n      identity: sourceForGrounding(roleAssertionSources.identity),\n    };\n  return applyGroundingRules(\n    result,\n    sourceForGrounding(sourceText) ?? sourceText,\n    sourceForGrounding(assertionSourceText) ?? assertionSourceText,\n    groundedRoleSources,\n    messageTimestamp,\n    options,\n  );\n}\n\nexport function filterExtractionResultBySource(\n  result: ExtractionResult,\n  source: string,\n  assertionSource?: string,\n  roleAssertionSources?: ExtractionGroundingRoleSources,\n  eventTimeNormalizer?: (eventTime: string) => string,\n): ExtractionResult {\n  return filterGroundingRules(result, source, assertionSource, roleAssertionSources, eventTimeNormalizer);\n}\n"],"mappings":";;;;;;;;;AAaO,SAASA,gCACd,QACA,YACA,sBAA8B,YAC9B,sBACA,kBACA,SACkB;AAClB,QAAM,qBAAqB,CAAC,WAC1B,WAAW,UAAa,CAAC,QAAQ,4BAC7B,SACA,YAAY,QAAQ,OAAO,UAAU,oBAAoB,oBAAI,KAAK,CAAC;AACzE,QAAM,sBAAsB,yBAAyB,SACjD,SACA;AAAA,IACA,SAAS,mBAAmB,qBAAqB,OAAO;AAAA,IACxD,UAAU,mBAAmB,qBAAqB,QAAQ;AAAA,EAC5D;AACF,SAAO;AAAA,IACL;AAAA,IACA,mBAAmB,UAAU,KAAK;AAAA,IAClC,mBAAmB,mBAAmB,KAAK;AAAA,IAC3C;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEO,SAASC,gCACd,QACA,QACA,iBACA,sBACA,qBACkB;AAClB,SAAO,+BAAqB,QAAQ,QAAQ,iBAAiB,sBAAsB,mBAAmB;AACxG;","names":["applyExtractionSourceGrounding","filterExtractionResultBySource"]}

package/dist/{chunk-RYHWZ52A.js → chunk-S2BBISHU.js}

@@ -1,10 +1,10 @@
+import {
+  scanMemoryDir
+} from "./chunk-W7IGLX4G.js";
 import {
   isSearchAborted,
   throwIfSearchAborted
 } from "./chunk-CINZGPSJ.js";
-import {
-  scanMemoryDir
-} from "./chunk-W7IGLX4G.js";
 import {
   reportSearchDegradation,
   resolveEnsureCollectionArgs
@@ -253,4 +253,4 @@ function isMeilisearchIndexNotFoundError(err) {
 export {
   MeilisearchBackend
 };
-//# sourceMappingURL=chunk-RYHWZ52A.js.map
+//# sourceMappingURL=chunk-S2BBISHU.js.map

package/dist/{chunk-RSYJV25N.js → chunk-SG265CVF.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-V7IZKJI3.js";
 import {
   AdapterRegistry
-} from "./chunk-2QSZNTDO.js";
+} from "./chunk-RKNJBZ55.js";
 import {
   WriteRateLimiter
 } from "./chunk-MKQBXQKU.js";
@@ -16,13 +16,13 @@ import {
   processChatMessage,
   sessionBelongsToPrincipal,
   subscribeChatTranscript
-} from "./chunk-YSGBD3QN.js";
+} from "./chunk-ZGOQTOYA.js";
 import {
   RelayMissionStoreError
-} from "./chunk-4MJZTF42.js";
+} from "./chunk-QAOGGNE3.js";
 import {
   validateRequest
-} from "./chunk-KGTD2KZJ.js";
+} from "./chunk-PKRIQL3V.js";
 import {
   executeResolution,
   isValidResolutionVerb
@@ -39,24 +39,24 @@ import {
 import {
   authorizationProbeNamespaces,
   probeOperationAuthorization
-} from "./chunk-U3TH5Q2Q.js";
+} from "./chunk-P3MH72CI.js";
 import {
   CorrectionContractError,
   getOperation,
   resolveQueryNamespaceWritablePreflight
-} from "./chunk-NUWMZIYZ.js";
+} from "./chunk-2XC73SHY.js";
 import {
   isTrustZoneName
 } from "./chunk-JGSKJHF7.js";
 import {
   projectTagProjectId
-} from "./chunk-MQVINOJQ.js";
+} from "./chunk-IYZ5K7MU.js";
 import {
   subscribeGraphEvents
 } from "./chunk-DEUNUKTD.js";
 import {
   isRecallDisclosure
-} from "./chunk-V25OWXAC.js";
+} from "./chunk-HUHX2OCX.js";
 import {
   expandTildePath
 } from "./chunk-EYIEWJNI.js";
@@ -2168,7 +2168,7 @@ var EngramAccessHttpServer = class {
     if (req.method === "POST" && pathname === "/engram/v1/contradiction-scan") {
       this.enforceTokenOp("contradiction_scan_run");
       const body = await this.readJsonBody(req);
-      const { runContradictionScan } = await import("./contradiction-scan-HMF7CNKD.js");
+      const { runContradictionScan } = await import("./contradiction-scan-HYLIRMJ2.js");
       const principal = this.resolveRequestPrincipal(req);
       const result = await runContradictionScan({
         storage: this.service.storageRef,
@@ -3218,4 +3218,4 @@ export {
   MeetingsInputError,
   EngramAccessHttpServer
 };
-//# sourceMappingURL=chunk-RSYJV25N.js.map
+//# sourceMappingURL=chunk-SG265CVF.js.map

package/dist/{chunk-UGH6VPPO.js → chunk-SH6YO3LT.js}

@@ -3,11 +3,11 @@ import {
 } from "./chunk-R6YJI3HE.js";
 import {
   getConfiguredNamespaces
-} from "./chunk-MQVINOJQ.js";
+} from "./chunk-IYZ5K7MU.js";
 import {
   drainPendingLifecycleForSyncOrThrow,
   drainPendingLifecycleLedgerForSync
-} from "./chunk-XKGPIWGI.js";
+} from "./chunk-OFHFH655.js";
 import {
   namespaceIdentityFromToken
 } from "./chunk-EGGE52UU.js";
@@ -181,4 +181,4 @@ export {
   offlineSyncStorageForSnapshot,
   drainPendingLifecycleForOfflineSync
 };
-//# sourceMappingURL=chunk-UGH6VPPO.js.map
+//# sourceMappingURL=chunk-SH6YO3LT.js.map

package/dist/{chunk-2RAC4JIG.js → chunk-T3GCXULH.js}

@@ -3,7 +3,7 @@ import {
   readNamespaceMaintenanceLastRanStatuses,
   readNamespaceMaintenanceStatuses,
   runNamespaceMaintenancePlan
-} from "./chunk-RNY3BO35.js";
+} from "./chunk-ZXAGJFHJ.js";
 import {
   analyzeSessionIntegrity,
   applySessionRepair,
@@ -13,16 +13,11 @@ import {
   resolvePluginEntry
 } from "./chunk-CMTINOFS.js";
 import {
-  summarizeCorpusWatermark
-} from "./chunk-EOLC6EXV.js";
+  summarizeCorpusAndReplica
+} from "./chunk-IMA2EWLV.js";
 import {
   readJudgeVerdictStats
 } from "./chunk-OZKOPQCM.js";
-import {
-  resolveCuratedIncludeFilesStatePath,
-  resolveNativeKnowledgeStatePath,
-  resolveOpenClawWorkspaceStatePath
-} from "./chunk-2DQ2XREU.js";
 import {
   createEvalBaselineSnapshot,
   getEvalHarnessStatus,
@@ -30,6 +25,11 @@ import {
   runEvalBenchmarkCiGate,
   validateEvalBenchmarkPack
 } from "./chunk-3PY7VHV7.js";
+import {
+  resolveCuratedIncludeFilesStatePath,
+  resolveNativeKnowledgeStatePath,
+  resolveOpenClawWorkspaceStatePath
+} from "./chunk-2DQ2XREU.js";
 import {
   runConsolidationProvenanceCheck
 } from "./chunk-2SA56WMI.js";
@@ -38,20 +38,20 @@ import {
 } from "./chunk-YBPYIAA5.js";
 import {
   parseConfig
-} from "./chunk-GJJBPI6I.js";
+} from "./chunk-DRBXHRXE.js";
 import {
   listMemoryGovernanceRuns,
   readMemoryGovernanceRunArtifact
-} from "./chunk-FRVTCCGD.js";
+} from "./chunk-GGUBDXRR.js";
 import {
   listNamespaces
-} from "./chunk-EYJSW2RV.js";
+} from "./chunk-NBDCZWP4.js";
 import {
   analyzeGraphHealth
 } from "./chunk-L2DPF4DF.js";
 import {
   StorageManager
-} from "./chunk-CIQXI47W.js";
+} from "./chunk-FCDWWCLX.js";
 import {
   probeProjectionHealth
 } from "./chunk-3CSX3ETE.js";
@@ -75,7 +75,7 @@ import {
   resolveNamespaceCapabilities,
   resolvePresentationCapabilities,
   resolveQmdCapabilities
-} from "./chunk-RDQGLJRR.js";
+} from "./chunk-2XRE6FLM.js";
 
 // src/operator-toolkit.ts
 import path from "path";
@@ -954,7 +954,7 @@ async function runOperatorDoctor(options) {
   checks.push(await summarizeTierDistribution(options.orchestrator.storage));
   checks.push(await summarizeDreamsPhases(config, storage));
   checks.push(await summarizeExtractionLiveness(config, storage, options.orchestrator.buffer));
-  checks.push(await summarizeCorpusWatermark(config, (dir) => new StorageManager(dir)));
+  checks.push(...await summarizeCorpusAndReplica(config, (d) => new StorageManager(d), options.resolveSecretRef));
   checks.push(summarizeSecurityMitigations(config));
   checks.push(await summarizeObservationThroughput(config.memoryDir));
   const namespaceMaintenanceHealth = await summarizeNamespaceMaintenanceHealth(config);
@@ -1105,7 +1105,7 @@ async function summarizeGraphEdgeDecayStatus(config) {
 }
 async function summarizeTierDistribution(storage) {
   try {
-    const { summarizeTiers } = await import("./tier-stats-XKD7SXYY.js");
+    const { summarizeTiers } = await import("./tier-stats-OPTSBNRH.js");
     const summary = await summarizeTiers(storage);
     const storageDir = storage.dir ?? "";
     const journalPath = storageDir.length > 0 ? path.join(storageDir, "state", "tier-migration-journal.jsonl") : null;
@@ -1679,4 +1679,4 @@ export {
   runBenchmarkRecall,
   runOperatorRepair
 };
-//# sourceMappingURL=chunk-2RAC4JIG.js.map
+//# sourceMappingURL=chunk-T3GCXULH.js.map