@remnic/core 9.3.614 → 9.3.615

package/dist/{cli-DWeu7eTY.d.ts → cli-Cw729yLf.d.ts}

@@ -16,7 +16,7 @@ import { WorkProjectStatus, WorkTaskStatus, WorkTaskPriority } from './work/type
 import { RoutePatternType } from './routing/engine.js';
 import { TailscaleSyncOptions } from './network/tailscale.js';
 import { DashboardStatus } from './dashboard-runtime.js';
-import { E as EngramAccessService } from './access-service-DGG_2xPK.js';
+import { E as EngramAccessService } from './access-service-CBNEKjzN.js';
 import { ResolveSecretRefFn } from './resolve-auth-token.js';
 import { CompatRunner, CompatReport } from './compat/types.js';
 import { EvalBaselineDeltaReport, EvalBaselineSnapshot, EvalCiGateReport, EvalBenchmarkPackSummary, EvalHarnessStatus, EvalStoredBaselineCiGateReport } from './evals.js';

package/dist/cli.d.ts

@@ -16,7 +16,7 @@ import './work/types.js';
 import './routing/engine.js';
 import './network/tailscale.js';
 import './dashboard-runtime.js';
-import './access-service-DGG_2xPK.js';
+import './access-service-CBNEKjzN.js';
 import './resolve-auth-token.js';
 import './compat/types.js';
 import './evals.js';
@@ -38,7 +38,7 @@ import './trust-zones.js';
 import './session-integrity.js';
 import './recall-state.js';
 import './policy-runtime.js';
-export { A as AccessHttpServeCliCommandOptions, a as ArchiveObservationsCliCommandOptions, B as BulkImportCliCommandOptions, C as CompatCliCommandOptions, b as ConnectorsRunCliOutputOptions, c as ConversationIndexHealthCliOrchestrator, D as DashboardStartCliCommandOptions, d as DedupeCandidate, E as ExactDedupePlan, G as GraphHealthCliCommandOptions, M as MemoryActionAuditCliCommandOptions, e as MemoryActionAuditCliNamespaceSummary, f as MemoryActionAuditCliReport, g as MemoryGovernanceCliCommandOptions, h as MemoryGovernanceReportCliCommandOptions, i as MemoryGovernanceRestoreCliCommandOptions, j as MemoryReviewDispositionCliCommandOptions, k as MemoryTimelineCliCommandOptions, l as MigrateCliOrchestrator, m as MigrateCliReport, n as MigrateObservationsCliCommandOptions, P as PolicyDiffCliReport, o as PolicyDiffEntry, q as PolicyRollbackCliReport, s as PolicyStatusCliReport, t as PolicyTuningCliOrchestrator, R as RebuildMemoryLifecycleLedgerCliCommandOptions, u as RebuildMemoryProjectionCliCommandOptions, v as RebuildObservationsCliCommandOptions, w as RepairMemoryProjectionCliCommandOptions, x as ReplayCliCommandOptions, y as ReplayCliOrchestrator, z as RouteCliCommandOptions, S as SessionIntegrityCliCommandOptions, F as SessionRepairCliCommandOptions, T as TailscaleStatusCliCommandOptions, H as TailscaleSyncCliCommandOptions, I as TierMigrationCliOrchestrator, J as TrainingExportCliCommandOptions, V as VerifyMemoryProjectionCliCommandOptions, W as WebDavServeCliCommandOptions, K as WorkProjectCliCommandOptions, L as WorkTaskCliCommandOptions, N as emitConnectorsRunCliResult, O as filterNormalMemorySearchResults, Q as hasDestructivePurgeFailures, U as isNormalRetrievalVisibleMemory, X as parseDurationToMs, Y as parseStrictCliDate, Z as planAggressiveDuplicateDeletions, _ as planExactDuplicateDeletions, $ as registerCli, a0 as resolveAccessPrincipalOverride, a1 as resolveMemoryDirForNamespace, a2 as runAbstractionNodeStatusCliCommand, a3 as runAccessHttpServeCliCommand, a4 as runAccessHttpStatusCliCommand, a5 as runAccessHttpStopCliCommand, a6 as runAccessMcpServeCliCommand, a7 as runArchiveObservationsCliCommand, a8 as runBenchmarkBaselineReportCliCommand, a9 as runBenchmarkBaselineSnapshotCliCommand, aa as runBenchmarkCiGateCliCommand, ab as runBenchmarkImportCliCommand, ac as runBenchmarkStatusCliCommand, ad as runBenchmarkStoredBaselineCiGateCliCommand, ae as runBenchmarkValidateCliCommand, r as runBulkImportCliCommand, af as runCausalTrajectoryStatusCliCommand, ag as runCommitmentLifecycleCliCommand, ah as runCommitmentRecordCliCommand, ai as runCommitmentSetStateCliCommand, aj as runCommitmentStatusCliCommand, ak as runCompatCliCommand, al as runCompoundingPromoteCliCommand, am as runConversationIndexHealthCliCommand, an as runConversationIndexInspectCliCommand, ao as runConversationIndexRebuildCliCommand, ap as runCueAnchorStatusCliCommand, aq as runDashboardStartCliCommand, ar as runDashboardStatusCliCommand, as as runDashboardStopCliCommand, at as runGraphHealthCliCommand, au as runHarmonicSearchCliCommand, av as runMemoryActionAuditCliCommand, aw as runMemoryGovernanceCliCommand, ax as runMemoryGovernanceReportCliCommand, ay as runMemoryGovernanceRestoreCliCommand, az as runMemoryReviewDispositionCliCommand, aA as runMemoryTimelineCliCommand, aB as runMigrateNormalizeFrontmatterCliCommand, aC as runMigrateObservationsCliCommand, aD as runMigrateRechunkCliCommand, aE as runMigrateReextractCliCommand, aF as runMigrateRescoreImportanceCliCommand, aG as runObjectiveStateStatusCliCommand, aH as runPolicyDiffCliCommand, aI as runPolicyRollbackCliCommand, aJ as runPolicyStatusCliCommand, aK as runRebuildMemoryLifecycleLedgerCliCommand, aL as runRebuildMemoryProjectionCliCommand, aM as runRebuildObservationsCliCommand, aN as runRepairMemoryProjectionCliCommand, aO as runReplayCliCommand, aP as runResumeBundleBuildCliCommand, aQ as runResumeBundleRecordCliCommand, aR as runResumeBundleStatusCliCommand, aS as runRouteCliCommand, aT as runSemanticRulePromoteCliCommand, aU as runSemanticRuleVerifyCliCommand, aV as runSessionCheckCliCommand, aW as runSessionRepairCliCommand, aX as runTailscaleStatusCliCommand, aY as runTailscaleSyncCliCommand, aZ as runTierMigrateCliCommand, a_ as runTierStatusCliCommand, a$ as runTrainingExportCliCommand, b0 as runTrustZoneDemoSeedCliCommand, b1 as runTrustZonePromoteCliCommand, b2 as runTrustZoneStatusCliCommand, b3 as runUtilityLearningCliCommand, b4 as runUtilityLearningStatusCliCommand, b5 as runUtilityTelemetryRecordCliCommand, b6 as runUtilityTelemetryStatusCliCommand, b7 as runVerifiedRecallSearchCliCommand, b8 as runVerifyMemoryProjectionCliCommand, b9 as runWebDavServeCliCommand, ba as runWebDavStopCliCommand, bb as runWorkProductRecallSearchCliCommand, bc as runWorkProductRecordCliCommand, bd as runWorkProductStatusCliCommand, be as runWorkProjectCliCommand, bf as runWorkTaskCliCommand } from './cli-DWeu7eTY.js';
+export { A as AccessHttpServeCliCommandOptions, a as ArchiveObservationsCliCommandOptions, B as BulkImportCliCommandOptions, C as CompatCliCommandOptions, b as ConnectorsRunCliOutputOptions, c as ConversationIndexHealthCliOrchestrator, D as DashboardStartCliCommandOptions, d as DedupeCandidate, E as ExactDedupePlan, G as GraphHealthCliCommandOptions, M as MemoryActionAuditCliCommandOptions, e as MemoryActionAuditCliNamespaceSummary, f as MemoryActionAuditCliReport, g as MemoryGovernanceCliCommandOptions, h as MemoryGovernanceReportCliCommandOptions, i as MemoryGovernanceRestoreCliCommandOptions, j as MemoryReviewDispositionCliCommandOptions, k as MemoryTimelineCliCommandOptions, l as MigrateCliOrchestrator, m as MigrateCliReport, n as MigrateObservationsCliCommandOptions, P as PolicyDiffCliReport, o as PolicyDiffEntry, q as PolicyRollbackCliReport, s as PolicyStatusCliReport, t as PolicyTuningCliOrchestrator, R as RebuildMemoryLifecycleLedgerCliCommandOptions, u as RebuildMemoryProjectionCliCommandOptions, v as RebuildObservationsCliCommandOptions, w as RepairMemoryProjectionCliCommandOptions, x as ReplayCliCommandOptions, y as ReplayCliOrchestrator, z as RouteCliCommandOptions, S as SessionIntegrityCliCommandOptions, F as SessionRepairCliCommandOptions, T as TailscaleStatusCliCommandOptions, H as TailscaleSyncCliCommandOptions, I as TierMigrationCliOrchestrator, J as TrainingExportCliCommandOptions, V as VerifyMemoryProjectionCliCommandOptions, W as WebDavServeCliCommandOptions, K as WorkProjectCliCommandOptions, L as WorkTaskCliCommandOptions, N as emitConnectorsRunCliResult, O as filterNormalMemorySearchResults, Q as hasDestructivePurgeFailures, U as isNormalRetrievalVisibleMemory, X as parseDurationToMs, Y as parseStrictCliDate, Z as planAggressiveDuplicateDeletions, _ as planExactDuplicateDeletions, $ as registerCli, a0 as resolveAccessPrincipalOverride, a1 as resolveMemoryDirForNamespace, a2 as runAbstractionNodeStatusCliCommand, a3 as runAccessHttpServeCliCommand, a4 as runAccessHttpStatusCliCommand, a5 as runAccessHttpStopCliCommand, a6 as runAccessMcpServeCliCommand, a7 as runArchiveObservationsCliCommand, a8 as runBenchmarkBaselineReportCliCommand, a9 as runBenchmarkBaselineSnapshotCliCommand, aa as runBenchmarkCiGateCliCommand, ab as runBenchmarkImportCliCommand, ac as runBenchmarkStatusCliCommand, ad as runBenchmarkStoredBaselineCiGateCliCommand, ae as runBenchmarkValidateCliCommand, r as runBulkImportCliCommand, af as runCausalTrajectoryStatusCliCommand, ag as runCommitmentLifecycleCliCommand, ah as runCommitmentRecordCliCommand, ai as runCommitmentSetStateCliCommand, aj as runCommitmentStatusCliCommand, ak as runCompatCliCommand, al as runCompoundingPromoteCliCommand, am as runConversationIndexHealthCliCommand, an as runConversationIndexInspectCliCommand, ao as runConversationIndexRebuildCliCommand, ap as runCueAnchorStatusCliCommand, aq as runDashboardStartCliCommand, ar as runDashboardStatusCliCommand, as as runDashboardStopCliCommand, at as runGraphHealthCliCommand, au as runHarmonicSearchCliCommand, av as runMemoryActionAuditCliCommand, aw as runMemoryGovernanceCliCommand, ax as runMemoryGovernanceReportCliCommand, ay as runMemoryGovernanceRestoreCliCommand, az as runMemoryReviewDispositionCliCommand, aA as runMemoryTimelineCliCommand, aB as runMigrateNormalizeFrontmatterCliCommand, aC as runMigrateObservationsCliCommand, aD as runMigrateRechunkCliCommand, aE as runMigrateReextractCliCommand, aF as runMigrateRescoreImportanceCliCommand, aG as runObjectiveStateStatusCliCommand, aH as runPolicyDiffCliCommand, aI as runPolicyRollbackCliCommand, aJ as runPolicyStatusCliCommand, aK as runRebuildMemoryLifecycleLedgerCliCommand, aL as runRebuildMemoryProjectionCliCommand, aM as runRebuildObservationsCliCommand, aN as runRepairMemoryProjectionCliCommand, aO as runReplayCliCommand, aP as runResumeBundleBuildCliCommand, aQ as runResumeBundleRecordCliCommand, aR as runResumeBundleStatusCliCommand, aS as runRouteCliCommand, aT as runSemanticRulePromoteCliCommand, aU as runSemanticRuleVerifyCliCommand, aV as runSessionCheckCliCommand, aW as runSessionRepairCliCommand, aX as runTailscaleStatusCliCommand, aY as runTailscaleSyncCliCommand, aZ as runTierMigrateCliCommand, a_ as runTierStatusCliCommand, a$ as runTrainingExportCliCommand, b0 as runTrustZoneDemoSeedCliCommand, b1 as runTrustZonePromoteCliCommand, b2 as runTrustZoneStatusCliCommand, b3 as runUtilityLearningCliCommand, b4 as runUtilityLearningStatusCliCommand, b5 as runUtilityTelemetryRecordCliCommand, b6 as runUtilityTelemetryStatusCliCommand, b7 as runVerifiedRecallSearchCliCommand, b8 as runVerifyMemoryProjectionCliCommand, b9 as runWebDavServeCliCommand, ba as runWebDavStopCliCommand, bb as runWorkProductRecallSearchCliCommand, bc as runWorkProductRecordCliCommand, bd as runWorkProductStatusCliCommand, be as runWorkProjectCliCommand, bf as runWorkTaskCliCommand } from './cli-Cw729yLf.js';
 import './connectors-cli-2iaQ5tX2.js';
 import './storage.js';
 import './page-versioning.js';

package/dist/cli.js

@@ -89,7 +89,7 @@ import {
   runWorkProductStatusCliCommand,
   runWorkProjectCliCommand,
   runWorkTaskCliCommand
-} from "./chunk-7YQFWOF7.js";
+} from "./chunk-KGLPJROV.js";
 import "./chunk-MC4FJXPA.js";
 import "./chunk-LQHDIS7L.js";
 import "./chunk-7F7Z6MOS.js";
@@ -183,7 +183,7 @@ import "./chunk-LBJBNWS2.js";
 import "./chunk-HQ6NIBL6.js";
 import "./chunk-PVGDJXVK.js";
 import "./chunk-OADWQ5CR.js";
-import "./chunk-VPGUMLBA.js";
+import "./chunk-NM5NQYJE.js";
 import "./chunk-SEDEKFYQ.js";
 import "./chunk-2QSZNTDO.js";
 import "./chunk-RSUYKGGZ.js";
@@ -191,10 +191,10 @@ import "./chunk-42NQ7AVG.js";
 import "./chunk-TMSXWOBZ.js";
 import "./chunk-J64TK33U.js";
 import "./chunk-7RXCMVFQ.js";
-import "./chunk-B6FDZPCF.js";
+import "./chunk-5OHHEORR.js";
 import "./chunk-6L46YAEZ.js";
 import "./chunk-D24OXEPB.js";
-import "./chunk-ADNZVFXG.js";
+import "./chunk-ZK32E74R.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import "./chunk-DGNQRNLL.js";
@@ -215,7 +215,7 @@ import "./chunk-EI6V5UXY.js";
 import "./chunk-QY7YA7OL.js";
 import "./chunk-NNVTUXEB.js";
 import "./chunk-QDW3E4RD.js";
-import "./chunk-EUML3N6B.js";
+import "./chunk-IMA6GU4Y.js";
 import "./chunk-ODPLEWB6.js";
 import "./chunk-XL7FK7PJ.js";
 import "./chunk-2LSZVONP.js";
@@ -251,7 +251,7 @@ import "./chunk-TVVEYCNW.js";
 import "./chunk-RFYAYKTD.js";
 import "./chunk-LBLXEFWK.js";
 import "./chunk-VFUEZZBS.js";
-import "./chunk-QEMCQFDW.js";
+import "./chunk-WD2W4234.js";
 import "./chunk-VDX2J7OX.js";
 import "./chunk-WEHSQBFR.js";
 import "./chunk-DQEMWVMT.js";

package/dist/explicit-capture.d.ts

@@ -67,6 +67,16 @@ type ValidExplicitCapture = {
     entityRef?: string;
     expiresAt?: string;
     sourceReason?: string;
+    /**
+     * When true, `namespace` was already resolved AND authorized by the caller
+     * (the access service's `resolveCodingScopedWriteNamespace`, which auth-checks
+     * the base and derives a session-owned `project-*` overlay). The persist /
+     * queue layer then routes to it directly instead of re-validating against the
+     * static policy allow-list — which would otherwise reject legitimately-derived
+     * dynamic project namespaces (#1434). Callers that do NOT pre-authorize the
+     * namespace must leave this unset so the allow-list guard still applies.
+     */
+    namespacePreResolved?: boolean;
 };
 type ExplicitCaptureSource = "memory_store" | "memory_capture" | "suggestion_submit" | "inline";
 type ExplicitCaptureValidationMode = "legacy_tool" | "strict_explicit";

package/dist/explicit-capture.js

@@ -7,7 +7,7 @@ import {
   shouldSkipImplicitExtraction,
   stripInlineExplicitCaptureNotes,
   validateExplicitCaptureInput
-} from "./chunk-EUML3N6B.js";
+} from "./chunk-IMA6GU4Y.js";
 import "./chunk-FVQJYWH7.js";
 import "./chunk-U3PN77QT.js";
 import "./chunk-PZ5AY32C.js";

package/dist/index.d.ts

@@ -23,7 +23,7 @@ import { PluginConfig, CodingContext, CodingModeConfig, MemoryCategory } from '.
 export { AgentAccessAuthToken, BriefingActiveThread, BriefingConfig, BriefingFocus, BriefingFollowup, BriefingOpenCommitment, BriefingRecentEntity, BriefingResult, BriefingSections, BriefingWindow, BufferSurpriseEvent, CalendarEvent, CalendarSource, CodexCompatConfig, ConsolidationObservation, ContinuityImprovementLoop, DEFAULT_RECALL_DISCLOSURE, EntityFile, EntityStructuredSection, ExtractedFact, GatewayConfig, MemoryActionEligibilityContext, MemoryActionEligibilitySource, MemoryActionType, MemoryFile, MemoryFrontmatter, MemoryObservation, MemoryScope, RECALL_DISCLOSURE_LEVELS, RecallDisclosure, SecretRef, isRecallDisclosure } from './types.js';
 export { JudgeBatchResult, JudgeCandidate, JudgeVerdict, JudgeVerdictKind, clearVerdictCache, createVerdictCache, getVerdictKind, isDurableVerdict, isValidCachedVerdict, judgeFactDurability, normalizeCachedVerdict, verdictCacheSize } from './extraction-judge.js';
 export { hasBroadGraphIntent, inferIntentFromText, intentCompatibilityScore, isTaskInitiationIntent, planRecallMode } from './intent.js';
-export { b as EngramAccessInputError, E as EngramAccessService, P as ProcedureStatsConfigSnapshot, c as ProcedureStatsRecent, d as ProcedureStatsReport, e as ProcedureStatusCounts, f as computeProcedureStats, g as formatProcedureStatsText } from './access-service-DGG_2xPK.js';
+export { b as EngramAccessInputError, E as EngramAccessService, P as ProcedureStatsConfigSnapshot, c as ProcedureStatsRecent, d as ProcedureStatsReport, e as ProcedureStatusCounts, f as computeProcedureStats, g as formatProcedureStatsText } from './access-service-CBNEKjzN.js';
 export { FILTER_LABELS as DIRECT_ANSWER_FILTER_LABELS, DirectAnswerCandidate, DirectAnswerConfig, DirectAnswerInput, DirectAnswerReason, DirectAnswerResult, isDirectAnswerEligible } from './direct-answer.js';
 export { MemoryTier, TierRoutingPolicy, TierTransitionDecision, computeTierValueScore, decideTierTransition } from './tier-routing.js';
 export { ApplyReasoningTraceBoostOptions, BoostableResult, DEFAULT_REASONING_TRACE_BOOST, applyReasoningTraceBoost, isReasoningTracePath, looksLikeProblemSolvingQuery } from './reasoning-trace-recall.js';
@@ -75,7 +75,7 @@ export { EnrichmentAuditEntry, EnrichmentCandidate, EnrichmentCostTier, Enrichme
 export { d as BulkImportError, B as BulkImportOptions, b as BulkImportResult, a as BulkImportSource, e as BulkImportSourceAdapter, f as ImportSourceRole, I as ImportTurn, g as ImportTurnValidationIssue, i as isImportRole, p as parseIsoTimestamp, v as validateImportTurn } from './types-BliCnURB.js';
 export { clearBulkImportSources, getBulkImportSource, listBulkImportSources, registerBulkImportSource } from './bulk-import/index.js';
 export { a as ProcessBatchContext, P as ProcessBatchFn, b as ProcessBatchResult, f as formatBatchTranscript, r as resolveBulkImportContext, c as runBulkImportPipeline, v as validateBatchSize } from './pipeline-D18UAKlN.js';
-export { B as BulkImportCliCommandOptions, p as parseStrictCliDate, r as runBulkImportCliCommand } from './cli-DWeu7eTY.js';
+export { B as BulkImportCliCommandOptions, p as parseStrictCliDate, r as runBulkImportCliCommand } from './cli-Cw729yLf.js';
 export { DEFAULT_IMPORT_BATCH_SIZE, ImportProgress, ImportedMemory, ImporterAdapter, ImporterParseOptions, ImporterTransformOptions, ImporterWriteResult, ImporterWriteTarget, RunImportOptions, RunImporterResult, defaultWriteMemoriesToOrchestrator, importedMemoryToTurn, runImporter, validateImportBatchSize, validateImportRateLimit } from './importers/index.js';
 export { FallbackLlmClient, FallbackLlmOptions, FallbackLlmResponse, FallbackLlmRuntimeContext } from './fallback-llm.js';
 export { ComputeMemoryWorthInput, MemoryWorthResult, computeMemoryWorth } from './memory-worth.js';

package/dist/index.js

@@ -93,7 +93,7 @@ import {
   listTrainingExportAdapters,
   registerTrainingExportAdapter,
   runBulkImportCliCommand
-} from "./chunk-7YQFWOF7.js";
+} from "./chunk-KGLPJROV.js";
 import "./chunk-MC4FJXPA.js";
 import "./chunk-LQHDIS7L.js";
 import "./chunk-7F7Z6MOS.js";
@@ -182,7 +182,7 @@ import {
   saveTaxonomy,
   validateSlug,
   validateTaxonomy
-} from "./chunk-T5XWMMU2.js";
+} from "./chunk-EXUAP5LH.js";
 import "./chunk-5RIRL3XL.js";
 import {
   migrateFromEngram,
@@ -478,7 +478,7 @@ import "./chunk-PVGDJXVK.js";
 import "./chunk-OADWQ5CR.js";
 import {
   EngramAccessHttpServer
-} from "./chunk-VPGUMLBA.js";
+} from "./chunk-NM5NQYJE.js";
 import "./chunk-SEDEKFYQ.js";
 import "./chunk-2QSZNTDO.js";
 import "./chunk-RSUYKGGZ.js";
@@ -488,7 +488,7 @@ import "./chunk-J64TK33U.js";
 import "./chunk-7RXCMVFQ.js";
 import {
   EngramMcpServer
-} from "./chunk-B6FDZPCF.js";
+} from "./chunk-5OHHEORR.js";
 import {
   REMNIC_CHATGPT_MEMORY_INSPECTOR_CANONICAL_TOOL,
   REMNIC_CHATGPT_MEMORY_INSPECTOR_MIME_TYPE,
@@ -509,7 +509,7 @@ import {
   EngramAccessService,
   computeProcedureStats,
   formatProcedureStatsText
-} from "./chunk-ADNZVFXG.js";
+} from "./chunk-ZK32E74R.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import {
@@ -564,7 +564,7 @@ import {
   buildProcedureMarkdownBody,
   parseProcedureStepsFromBody
 } from "./chunk-QDW3E4RD.js";
-import "./chunk-EUML3N6B.js";
+import "./chunk-IMA6GU4Y.js";
 import {
   CrossNamespaceBudget,
   DEFAULT_CROSS_NAMESPACE_BUDGET
@@ -665,7 +665,7 @@ import {
   recallRequestSchema,
   suggestionSubmitRequestSchema,
   validateRequest
-} from "./chunk-QEMCQFDW.js";
+} from "./chunk-WD2W4234.js";
 import "./chunk-VDX2J7OX.js";
 import {
   CAPSULE_ID_PATTERN

package/dist/mcp-memory-inspector-app.d.ts

@@ -1,4 +1,4 @@
-import { a as EngramAccessRecallResponse } from './access-service-DGG_2xPK.js';
+import { a as EngramAccessRecallResponse } from './access-service-CBNEKjzN.js';
 import { ActionConfidenceRequest } from './access-schema.js';
 import { RecallXraySnapshot } from './recall-xray.js';
 import { ActionConfidenceResult } from './action-confidence.js';

package/dist/orchestrator.js

@@ -27,7 +27,7 @@ import {
   sanitizeSessionKeyForFilename,
   shouldFilterLifecycleRecallCandidate,
   summarizeGraphShadowComparison
-} from "./chunk-T5XWMMU2.js";
+} from "./chunk-EXUAP5LH.js";
 import "./chunk-5RIRL3XL.js";
 import "./chunk-4HFJQCJZ.js";
 import "./chunk-6BDVBBBY.js";
@@ -167,7 +167,7 @@ import "./chunk-EI6V5UXY.js";
 import "./chunk-QY7YA7OL.js";
 import "./chunk-NNVTUXEB.js";
 import "./chunk-QDW3E4RD.js";
-import "./chunk-EUML3N6B.js";
+import "./chunk-IMA6GU4Y.js";
 import "./chunk-XL7FK7PJ.js";
 import "./chunk-2LSZVONP.js";
 import "./chunk-DEUNUKTD.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.3.614",
+  "version": "9.3.615",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",

package/src/access-http.ts

@@ -1094,12 +1094,20 @@ export class EngramAccessHttpServer {
         entityRef: body.entityRef,
         ttl: body.ttl,
         sourceReason: body.sourceReason,
+        cwd: body.cwd,
+        projectTag: body.projectTag,
       };
-      const idempotencyStatus = await this.service.peekMemoryStoreIdempotency(request);
-      if (idempotencyStatus === "miss" && request.dryRun !== true) {
-        this.ensureWriteRateLimitAvailable();
-      }
-      const response = await this.service.memoryStore(request);
+      // Rate-limit enforcement is SOLELY authoritative inside memoryStore via
+      // enforceWriteQuota: it runs atomically with the real idempotency-miss
+      // determination (and the real resolved namespace), and is never invoked
+      // for a replay. We deliberately do NOT pre-check here: the write namespace
+      // is resolved from mutable session/git context, so a stale peek could
+      // report "miss" for a request that is actually an idempotent replay in the
+      // now-scoped namespace and hard-reject a safe replay with 429 (#1434 Codex
+      // review). Letting the in-lock hook be the only hard gate avoids that.
+      const response = await this.service.memoryStore(request, {
+        enforceWriteQuota: () => this.ensureWriteRateLimitAvailable(),
+      });
       if (this.shouldCountWriteRateLimit(response as { dryRun?: boolean; idempotencyReplay?: boolean })) {
         this.recordWriteRateLimitHit();
       }
@@ -1123,12 +1131,15 @@ export class EngramAccessHttpServer {
         entityRef: body.entityRef,
         ttl: body.ttl,
         sourceReason: body.sourceReason,
+        cwd: body.cwd,
+        projectTag: body.projectTag,
       };
-      const idempotencyStatus = await this.service.peekSuggestionSubmitIdempotency(request);
-      if (idempotencyStatus === "miss" && request.dryRun !== true) {
-        this.ensureWriteRateLimitAvailable();
-      }
-      const response = await this.service.suggestionSubmit(request);
+      // Quota enforcement is solely authoritative inside suggestionSubmit
+      // (enforceWriteQuota), atomic with the real miss and never on a replay; no
+      // HTTP pre-check, so a stale peek can't 429 a safe replay (#1434 Codex review).
+      const response = await this.service.suggestionSubmit(request, {
+        enforceWriteQuota: () => this.ensureWriteRateLimitAvailable(),
+      });
       if (this.shouldCountWriteRateLimit(response as { dryRun?: boolean; idempotencyReplay?: boolean })) {
         this.recordWriteRateLimitHit();
       }

package/src/access-mcp.test.ts

@@ -262,6 +262,115 @@ test("MCP memory write tools reject malformed arguments before dispatch", async
   }
 });
 
+test("MCP write tools accept and forward client-injected cwd/projectTag (#1434)", async () => {
+  for (const toolName of ["engram.memory_store", "engram.suggestion_submit"]) {
+    let received: Record<string, unknown> | undefined;
+    const service = {
+      ...makeMockService(),
+      memoryStore: async (args: Record<string, unknown>) => {
+        received = args;
+        return {
+          schemaVersion: 1,
+          operation: "memory_store",
+          namespace: "default",
+          dryRun: true,
+          accepted: true,
+          queued: false,
+          status: "validated",
+        };
+      },
+      suggestionSubmit: async (args: Record<string, unknown>) => {
+        received = args;
+        return {
+          schemaVersion: 1,
+          operation: "suggestion_submit",
+          namespace: "default",
+          dryRun: true,
+          accepted: true,
+          queued: false,
+          status: "validated",
+        };
+      },
+    } as unknown as EngramAccessService;
+    const server = new EngramMcpServer(service);
+
+    const response = await server.handleRequest(
+      makeToolRequest(toolName, {
+        content: "valid durable content",
+        category: "fact",
+        dryRun: true,
+        cwd: "/home/dev/project-x",
+        projectTag: "Blend/Supply",
+      }),
+    );
+    const result = (response as Record<string, unknown> & {
+      result?: { isError?: boolean };
+    }).result;
+
+    assert.equal(result?.isError, false, `${toolName} should accept cwd/projectTag`);
+    assert.equal(received?.cwd, "/home/dev/project-x", `${toolName} must forward cwd`);
+    assert.equal(received?.projectTag, "Blend/Supply", `${toolName} must forward projectTag`);
+  }
+});
+
+test("MCP write tools still reject genuinely-unknown keys after the cwd fix (#1434)", async () => {
+  let dispatched = false;
+  const service = {
+    ...makeMockService(),
+    memoryStore: async () => {
+      dispatched = true;
+      return {
+        schemaVersion: 1,
+        operation: "memory_store",
+        namespace: "default",
+        dryRun: true,
+        accepted: true,
+        queued: false,
+        status: "validated",
+      };
+    },
+  } as unknown as EngramAccessService;
+  const server = new EngramMcpServer(service);
+  const response = await server.handleRequest(
+    makeToolRequest("engram.memory_store", {
+      content: "valid durable content",
+      category: "fact",
+      dryRun: true,
+      cwd: "/ok",
+      bogusField: "must still be rejected",
+    }),
+  );
+  const result = (response as Record<string, unknown> & {
+    result?: { isError?: boolean; content?: Array<{ text?: string }> };
+  }).result;
+  assert.equal(result?.isError, true, "unknown keys must still be rejected");
+  assert.equal(dispatched, false, "malformed write must not dispatch");
+});
+
+test("MCP capsule tools tolerate client-injected cwd/projectTag (#1434)", async () => {
+  for (const toolName of [
+    "engram.capsule_list",
+    "engram.capsule_export",
+    "engram.capsule_import",
+  ]) {
+    const service = {
+      ...makeMockService(),
+      capsuleList: async () => ({ capsules: [] }),
+      capsuleExport: async () => ({ exported: true }),
+      capsuleImport: async () => ({ imported: true }),
+    } as unknown as EngramAccessService;
+    const server = new EngramMcpServer(service);
+    const args: Record<string, unknown> = { cwd: "/x", projectTag: "t" };
+    if (toolName === "engram.capsule_export") args.name = "cap-1";
+    if (toolName === "engram.capsule_import") args.archivePath = "/tmp/a.capsule.json.gz";
+    const response = await server.handleRequest(makeToolRequest(toolName, args));
+    const result = (response as Record<string, unknown> & {
+      result?: { isError?: boolean };
+    }).result;
+    assert.equal(result?.isError, false, `${toolName} should tolerate cwd/projectTag`);
+  }
+});
+
 test("MCP session override is injected only into tools that accept sessionKey", async () => {
   let capsuleListArgs: Record<string, unknown> | undefined;
   let observeArgs: Record<string, unknown> | undefined;

package/src/access-mcp.ts

@@ -115,6 +115,8 @@ const STRICT_MCP_SCHEMA_KEYS: Partial<Record<SchemaName, readonly string[]>> = {
     "entityRef",
     "ttl",
     "sourceReason",
+    "cwd",
+    "projectTag",
   ],
   suggestionSubmit: [
     "schemaVersion",
@@ -129,6 +131,8 @@ const STRICT_MCP_SCHEMA_KEYS: Partial<Record<SchemaName, readonly string[]>> = {
     "entityRef",
     "ttl",
     "sourceReason",
+    "cwd",
+    "projectTag",
   ],
   capsuleExport: [
     "name",
@@ -138,9 +142,40 @@ const STRICT_MCP_SCHEMA_KEYS: Partial<Record<SchemaName, readonly string[]>> = {
     "peerIds",
     "includeTranscripts",
     "encrypt",
+    "cwd",
+    "projectTag",
   ],
-  capsuleImport: ["archivePath", "namespace", "mode", "passphrase"],
-  capsuleList: ["namespace"],
+  capsuleImport: ["archivePath", "namespace", "mode", "passphrase", "cwd", "projectTag"],
+  capsuleList: ["namespace", "cwd", "projectTag"],
+};
+
+// Shared JSON-schema fragments for the client-injected git/project context
+// fields (#1434). Declared once to avoid drift across tool definitions.
+// `_SCOPED` is for write tools that resolve a project namespace from these
+// fields; `_IGNORED` is for tools that merely tolerate them for MCP client
+// compatibility (clients like Pi MCPorter auto-inject `cwd` on every call).
+const MCP_GIT_CONTEXT_SCHEMA_PROPS_SCOPED: Record<string, unknown> = {
+  cwd: {
+    type: "string",
+    description:
+      "Optional working directory. When no explicit namespace is given, resolves the project namespace this write is stored in (mirrors recall/observe).",
+  },
+  projectTag: {
+    type: "string",
+    description:
+      "Optional project tag for non-git project scoping. When no explicit namespace is given, routes this write to the tagged project namespace.",
+  },
+};
+const MCP_GIT_CONTEXT_SCHEMA_PROPS_IGNORED: Record<string, unknown> = {
+  cwd: {
+    type: "string",
+    description:
+      "Accepted for MCP client compatibility (git-context auto-injection); ignored by this tool.",
+  },
+  projectTag: {
+    type: "string",
+    description: "Accepted for MCP client compatibility; ignored by this tool.",
+  },
 };
 
 function parseMcpRequest<N extends SchemaName>(
@@ -614,6 +649,7 @@ export class EngramMcpServer {
             },
             includeTranscripts: { type: "boolean" },
             encrypt: { type: "boolean" },
+            ...MCP_GIT_CONTEXT_SCHEMA_PROPS_IGNORED,
           },
           required: ["name"],
           additionalProperties: false,
@@ -639,6 +675,7 @@ export class EngramMcpServer {
               type: "string",
               description: "Passphrase for encrypted capsule archives.",
             },
+            ...MCP_GIT_CONTEXT_SCHEMA_PROPS_IGNORED,
           },
           required: ["archivePath"],
           additionalProperties: false,
@@ -651,6 +688,7 @@ export class EngramMcpServer {
           type: "object",
           properties: {
             namespace: { type: "string" },
+            ...MCP_GIT_CONTEXT_SCHEMA_PROPS_IGNORED,
           },
           additionalProperties: false,
         },
@@ -755,6 +793,7 @@ export class EngramMcpServer {
             entityRef: { type: "string" },
             ttl: { type: "string" },
             sourceReason: { type: "string" },
+            ...MCP_GIT_CONTEXT_SCHEMA_PROPS_SCOPED,
           },
           required: ["content"],
           additionalProperties: false,
@@ -778,6 +817,7 @@ export class EngramMcpServer {
             entityRef: { type: "string" },
             ttl: { type: "string" },
             sourceReason: { type: "string" },
+            ...MCP_GIT_CONTEXT_SCHEMA_PROPS_SCOPED,
           },
           required: ["content"],
           additionalProperties: false,
@@ -2502,6 +2542,8 @@ export class EngramMcpServer {
           entityRef: body.entityRef,
           ttl: body.ttl,
           sourceReason: body.sourceReason,
+          cwd: body.cwd,
+          projectTag: body.projectTag,
         });
       }
       case "engram.suggestion_submit": {
@@ -2520,6 +2562,8 @@ export class EngramMcpServer {
           entityRef: body.entityRef,
           ttl: body.ttl,
           sourceReason: body.sourceReason,
+          cwd: body.cwd,
+          projectTag: body.projectTag,
         });
       }
       case "engram.entity_get":

package/src/access-schema.ts

@@ -243,6 +243,17 @@ export const memoryStoreRequestSchema = z.object({
   entityRef: entityRefSchema,
   ttl: ttlSchema,
   sourceReason: sourceReasonSchema,
+  // Git/project context for project-scoped writes (#1434). When no explicit
+  // `namespace` is given, these route the write to the same project namespace
+  // recall/observe resolve from `cwd`/`projectTag` (issue #569, rule 42). Also
+  // lets MCP clients that auto-inject `cwd` (e.g. Pi MCPorter) call write tools.
+  cwd: z.string().trim().min(1, "cwd must be non-empty when provided").max(2048).optional(),
+  projectTag: z
+    .string()
+    .trim()
+    .min(1, "projectTag must be non-empty when provided")
+    .max(256)
+    .optional(),
 });
 
 export const suggestionSubmitRequestSchema = memoryStoreRequestSchema;