@remnic/core 9.3.649 → 9.3.650

package/dist/{cli-DrL2Nv4j.d.ts → cli-BG4ybtJr.d.ts}

@@ -7,7 +7,7 @@ import { RebuildMemoryLifecycleLedgerResult } from './maintenance/rebuild-memory
 import { RebuildObservationsResult } from './maintenance/rebuild-observations.js';
 import { ArchiveObservationsResult } from './maintenance/archive-observations.js';
 import { Writable, Readable } from 'node:stream';
-import { O as Orchestrator } from './orchestrator-DEQW9j0Z.js';
+import { O as Orchestrator } from './orchestrator-CX-oqwJq.js';
 import { ReplayRunSummary } from './replay/runner.js';
 import { ReplaySource, ReplayTurn } from './replay/types.js';
 import { b as BulkImportResult } from './types-ByK7T3L6.js';
@@ -16,7 +16,7 @@ import { WorkProjectStatus, WorkTaskStatus, WorkTaskPriority } from './work/type
 import { RoutePatternType } from './routing/engine.js';
 import { TailscaleSyncOptions } from './network/tailscale.js';
 import { DashboardStatus } from './dashboard-runtime.js';
-import { E as EngramAccessService } from './access-service-DFXIlGvZ.js';
+import { E as EngramAccessService } from './access-service-DIZRHQ7Q.js';
 import { ResolveSecretRefFn } from './resolve-auth-token.js';
 import { CompatRunner, CompatReport } from './compat/types.js';
 import { EvalBaselineDeltaReport, EvalBaselineSnapshot, EvalCiGateReport, EvalBenchmarkPackSummary, EvalHarnessStatus, EvalStoredBaselineCiGateReport } from './evals.js';

package/dist/cli.d.ts

@@ -7,7 +7,7 @@ import './maintenance/rebuild-memory-lifecycle-ledger.js';
 import './maintenance/rebuild-observations.js';
 import './maintenance/archive-observations.js';
 import 'node:stream';
-import './orchestrator-DEQW9j0Z.js';
+import './orchestrator-CX-oqwJq.js';
 import './replay/runner.js';
 import './replay/types.js';
 import './types-ByK7T3L6.js';
@@ -16,7 +16,7 @@ import './work/types.js';
 import './routing/engine.js';
 import './network/tailscale.js';
 import './dashboard-runtime.js';
-import './access-service-DFXIlGvZ.js';
+import './access-service-DIZRHQ7Q.js';
 import './resolve-auth-token.js';
 import './compat/types.js';
 import './evals.js';
@@ -38,7 +38,7 @@ import './trust-zones.js';
 import './session-integrity.js';
 import './recall-state.js';
 import './policy-runtime.js';
-export { A as AccessHttpServeCliCommandOptions, a as ArchiveObservationsCliCommandOptions, B as BulkImportCliCommandOptions, C as CompatCliCommandOptions, b as ConnectorsRunCliOutputOptions, c as ConversationIndexHealthCliOrchestrator, D as DashboardStartCliCommandOptions, d as DedupeCandidate, E as ExactDedupePlan, G as GraphHealthCliCommandOptions, M as MemoryActionAuditCliCommandOptions, e as MemoryActionAuditCliNamespaceSummary, f as MemoryActionAuditCliReport, g as MemoryGovernanceCliCommandOptions, h as MemoryGovernanceReportCliCommandOptions, i as MemoryGovernanceRestoreCliCommandOptions, j as MemoryReviewDispositionCliCommandOptions, k as MemoryTimelineCliCommandOptions, l as MigrateCliOrchestrator, m as MigrateCliReport, n as MigrateObservationsCliCommandOptions, P as PolicyDiffCliReport, o as PolicyDiffEntry, q as PolicyRollbackCliReport, s as PolicyStatusCliReport, t as PolicyTuningCliOrchestrator, R as RebuildMemoryLifecycleLedgerCliCommandOptions, u as RebuildMemoryProjectionCliCommandOptions, v as RebuildObservationsCliCommandOptions, w as RepairMemoryProjectionCliCommandOptions, x as ReplayCliCommandOptions, y as ReplayCliOrchestrator, z as RouteCliCommandOptions, S as SessionIntegrityCliCommandOptions, F as SessionRepairCliCommandOptions, T as TailscaleStatusCliCommandOptions, H as TailscaleSyncCliCommandOptions, I as TierMigrationCliOrchestrator, J as TrainingExportCliCommandOptions, V as VerifyMemoryProjectionCliCommandOptions, W as WebDavServeCliCommandOptions, K as WorkProjectCliCommandOptions, L as WorkTaskCliCommandOptions, N as emitConnectorsRunCliResult, O as filterNormalMemorySearchResults, Q as hasDestructivePurgeFailures, U as isNormalRetrievalVisibleMemory, X as parseDurationToMs, Y as parseStrictCliDate, Z as planAggressiveDuplicateDeletions, _ as planExactDuplicateDeletions, $ as registerCli, a0 as resolveAccessPrincipalOverride, a1 as resolveMemoryDirForNamespace, a2 as runAbstractionNodeStatusCliCommand, a3 as runAccessHttpServeCliCommand, a4 as runAccessHttpStatusCliCommand, a5 as runAccessHttpStopCliCommand, a6 as runAccessMcpServeCliCommand, a7 as runArchiveObservationsCliCommand, a8 as runBenchmarkBaselineReportCliCommand, a9 as runBenchmarkBaselineSnapshotCliCommand, aa as runBenchmarkCiGateCliCommand, ab as runBenchmarkImportCliCommand, ac as runBenchmarkStatusCliCommand, ad as runBenchmarkStoredBaselineCiGateCliCommand, ae as runBenchmarkValidateCliCommand, r as runBulkImportCliCommand, af as runCausalTrajectoryStatusCliCommand, ag as runCommitmentLifecycleCliCommand, ah as runCommitmentRecordCliCommand, ai as runCommitmentSetStateCliCommand, aj as runCommitmentStatusCliCommand, ak as runCompatCliCommand, al as runCompoundingPromoteCliCommand, am as runConversationIndexHealthCliCommand, an as runConversationIndexInspectCliCommand, ao as runConversationIndexRebuildCliCommand, ap as runCueAnchorStatusCliCommand, aq as runDashboardStartCliCommand, ar as runDashboardStatusCliCommand, as as runDashboardStopCliCommand, at as runGraphHealthCliCommand, au as runHarmonicSearchCliCommand, av as runMemoryActionAuditCliCommand, aw as runMemoryGovernanceCliCommand, ax as runMemoryGovernanceReportCliCommand, ay as runMemoryGovernanceRestoreCliCommand, az as runMemoryReviewDispositionCliCommand, aA as runMemoryTimelineCliCommand, aB as runMigrateNormalizeFrontmatterCliCommand, aC as runMigrateObservationsCliCommand, aD as runMigrateRechunkCliCommand, aE as runMigrateReextractCliCommand, aF as runMigrateRescoreImportanceCliCommand, aG as runObjectiveStateStatusCliCommand, aH as runPolicyDiffCliCommand, aI as runPolicyRollbackCliCommand, aJ as runPolicyStatusCliCommand, aK as runRebuildMemoryLifecycleLedgerCliCommand, aL as runRebuildMemoryProjectionCliCommand, aM as runRebuildObservationsCliCommand, aN as runRepairMemoryProjectionCliCommand, aO as runReplayCliCommand, aP as runResumeBundleBuildCliCommand, aQ as runResumeBundleRecordCliCommand, aR as runResumeBundleStatusCliCommand, aS as runRouteCliCommand, aT as runSemanticRulePromoteCliCommand, aU as runSemanticRuleVerifyCliCommand, aV as runSessionCheckCliCommand, aW as runSessionRepairCliCommand, aX as runTailscaleStatusCliCommand, aY as runTailscaleSyncCliCommand, aZ as runTierMigrateCliCommand, a_ as runTierStatusCliCommand, a$ as runTrainingExportCliCommand, b0 as runTrustZoneDemoSeedCliCommand, b1 as runTrustZonePromoteCliCommand, b2 as runTrustZoneStatusCliCommand, b3 as runUtilityLearningCliCommand, b4 as runUtilityLearningStatusCliCommand, b5 as runUtilityTelemetryRecordCliCommand, b6 as runUtilityTelemetryStatusCliCommand, b7 as runVerifiedRecallSearchCliCommand, b8 as runVerifyMemoryProjectionCliCommand, b9 as runWebDavServeCliCommand, ba as runWebDavStopCliCommand, bb as runWorkProductRecallSearchCliCommand, bc as runWorkProductRecordCliCommand, bd as runWorkProductStatusCliCommand, be as runWorkProjectCliCommand, bf as runWorkTaskCliCommand } from './cli-DrL2Nv4j.js';
+export { A as AccessHttpServeCliCommandOptions, a as ArchiveObservationsCliCommandOptions, B as BulkImportCliCommandOptions, C as CompatCliCommandOptions, b as ConnectorsRunCliOutputOptions, c as ConversationIndexHealthCliOrchestrator, D as DashboardStartCliCommandOptions, d as DedupeCandidate, E as ExactDedupePlan, G as GraphHealthCliCommandOptions, M as MemoryActionAuditCliCommandOptions, e as MemoryActionAuditCliNamespaceSummary, f as MemoryActionAuditCliReport, g as MemoryGovernanceCliCommandOptions, h as MemoryGovernanceReportCliCommandOptions, i as MemoryGovernanceRestoreCliCommandOptions, j as MemoryReviewDispositionCliCommandOptions, k as MemoryTimelineCliCommandOptions, l as MigrateCliOrchestrator, m as MigrateCliReport, n as MigrateObservationsCliCommandOptions, P as PolicyDiffCliReport, o as PolicyDiffEntry, q as PolicyRollbackCliReport, s as PolicyStatusCliReport, t as PolicyTuningCliOrchestrator, R as RebuildMemoryLifecycleLedgerCliCommandOptions, u as RebuildMemoryProjectionCliCommandOptions, v as RebuildObservationsCliCommandOptions, w as RepairMemoryProjectionCliCommandOptions, x as ReplayCliCommandOptions, y as ReplayCliOrchestrator, z as RouteCliCommandOptions, S as SessionIntegrityCliCommandOptions, F as SessionRepairCliCommandOptions, T as TailscaleStatusCliCommandOptions, H as TailscaleSyncCliCommandOptions, I as TierMigrationCliOrchestrator, J as TrainingExportCliCommandOptions, V as VerifyMemoryProjectionCliCommandOptions, W as WebDavServeCliCommandOptions, K as WorkProjectCliCommandOptions, L as WorkTaskCliCommandOptions, N as emitConnectorsRunCliResult, O as filterNormalMemorySearchResults, Q as hasDestructivePurgeFailures, U as isNormalRetrievalVisibleMemory, X as parseDurationToMs, Y as parseStrictCliDate, Z as planAggressiveDuplicateDeletions, _ as planExactDuplicateDeletions, $ as registerCli, a0 as resolveAccessPrincipalOverride, a1 as resolveMemoryDirForNamespace, a2 as runAbstractionNodeStatusCliCommand, a3 as runAccessHttpServeCliCommand, a4 as runAccessHttpStatusCliCommand, a5 as runAccessHttpStopCliCommand, a6 as runAccessMcpServeCliCommand, a7 as runArchiveObservationsCliCommand, a8 as runBenchmarkBaselineReportCliCommand, a9 as runBenchmarkBaselineSnapshotCliCommand, aa as runBenchmarkCiGateCliCommand, ab as runBenchmarkImportCliCommand, ac as runBenchmarkStatusCliCommand, ad as runBenchmarkStoredBaselineCiGateCliCommand, ae as runBenchmarkValidateCliCommand, r as runBulkImportCliCommand, af as runCausalTrajectoryStatusCliCommand, ag as runCommitmentLifecycleCliCommand, ah as runCommitmentRecordCliCommand, ai as runCommitmentSetStateCliCommand, aj as runCommitmentStatusCliCommand, ak as runCompatCliCommand, al as runCompoundingPromoteCliCommand, am as runConversationIndexHealthCliCommand, an as runConversationIndexInspectCliCommand, ao as runConversationIndexRebuildCliCommand, ap as runCueAnchorStatusCliCommand, aq as runDashboardStartCliCommand, ar as runDashboardStatusCliCommand, as as runDashboardStopCliCommand, at as runGraphHealthCliCommand, au as runHarmonicSearchCliCommand, av as runMemoryActionAuditCliCommand, aw as runMemoryGovernanceCliCommand, ax as runMemoryGovernanceReportCliCommand, ay as runMemoryGovernanceRestoreCliCommand, az as runMemoryReviewDispositionCliCommand, aA as runMemoryTimelineCliCommand, aB as runMigrateNormalizeFrontmatterCliCommand, aC as runMigrateObservationsCliCommand, aD as runMigrateRechunkCliCommand, aE as runMigrateReextractCliCommand, aF as runMigrateRescoreImportanceCliCommand, aG as runObjectiveStateStatusCliCommand, aH as runPolicyDiffCliCommand, aI as runPolicyRollbackCliCommand, aJ as runPolicyStatusCliCommand, aK as runRebuildMemoryLifecycleLedgerCliCommand, aL as runRebuildMemoryProjectionCliCommand, aM as runRebuildObservationsCliCommand, aN as runRepairMemoryProjectionCliCommand, aO as runReplayCliCommand, aP as runResumeBundleBuildCliCommand, aQ as runResumeBundleRecordCliCommand, aR as runResumeBundleStatusCliCommand, aS as runRouteCliCommand, aT as runSemanticRulePromoteCliCommand, aU as runSemanticRuleVerifyCliCommand, aV as runSessionCheckCliCommand, aW as runSessionRepairCliCommand, aX as runTailscaleStatusCliCommand, aY as runTailscaleSyncCliCommand, aZ as runTierMigrateCliCommand, a_ as runTierStatusCliCommand, a$ as runTrainingExportCliCommand, b0 as runTrustZoneDemoSeedCliCommand, b1 as runTrustZonePromoteCliCommand, b2 as runTrustZoneStatusCliCommand, b3 as runUtilityLearningCliCommand, b4 as runUtilityLearningStatusCliCommand, b5 as runUtilityTelemetryRecordCliCommand, b6 as runUtilityTelemetryStatusCliCommand, b7 as runVerifiedRecallSearchCliCommand, b8 as runVerifyMemoryProjectionCliCommand, b9 as runWebDavServeCliCommand, ba as runWebDavStopCliCommand, bb as runWorkProductRecallSearchCliCommand, bc as runWorkProductRecordCliCommand, bd as runWorkProductStatusCliCommand, be as runWorkProjectCliCommand, bf as runWorkTaskCliCommand } from './cli-BG4ybtJr.js';
 import './connectors-cli-2iaQ5tX2.js';
 import './storage.js';
 import './page-versioning.js';

package/dist/cli.js

@@ -89,7 +89,7 @@ import {
   runWorkProductStatusCliCommand,
   runWorkProjectCliCommand,
   runWorkTaskCliCommand
-} from "./chunk-FQYFMIKG.js";
+} from "./chunk-TUMH6EDV.js";
 import "./chunk-MC4FJXPA.js";
 import "./chunk-LQHDIS7L.js";
 import "./chunk-7F7Z6MOS.js";
@@ -166,7 +166,7 @@ import "./chunk-Z5LAYHGJ.js";
 import "./chunk-LBJBNWS2.js";
 import "./chunk-HQ6NIBL6.js";
 import "./chunk-OADWQ5CR.js";
-import "./chunk-CNRZ6WJU.js";
+import "./chunk-3IJEQWQX.js";
 import "./chunk-SEDEKFYQ.js";
 import "./chunk-RKNJBZ55.js";
 import "./chunk-J64TK33U.js";
@@ -175,10 +175,10 @@ import "./chunk-42NQ7AVG.js";
 import "./chunk-TMSXWOBZ.js";
 import "./chunk-7RXCMVFQ.js";
 import "./chunk-7WV3F5DQ.js";
-import "./chunk-FUXV6HSO.js";
+import "./chunk-TVOPSKOK.js";
 import "./chunk-T4WDJPEZ.js";
 import "./chunk-D24OXEPB.js";
-import "./chunk-5ETA6OAS.js";
+import "./chunk-YAFSTKTH.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import "./chunk-NT5TINK5.js";
@@ -187,7 +187,7 @@ import "./chunk-SOBJ6NEY.js";
 import "./chunk-BT7NVCML.js";
 import "./chunk-H7XKCNR6.js";
 import "./chunk-UMTG2BN2.js";
-import "./chunk-6GIKAUTN.js";
+import "./chunk-MMJANTJX.js";
 import "./chunk-5RIRL3XL.js";
 import "./chunk-JGSKJHF7.js";
 import "./chunk-FF4KLI5W.js";

package/dist/explicit-capture.d.ts

@@ -1,4 +1,4 @@
-import { O as Orchestrator } from './orchestrator-DEQW9j0Z.js';
+import { O as Orchestrator } from './orchestrator-CX-oqwJq.js';
 import { M as MemoryCategory, P as PluginConfig } from './types-D8yUmSik.js';
 import './briefing.js';
 import './storage.js';

package/dist/index.d.ts

@@ -1,8 +1,8 @@
 export { PluginEntryResolverOptions, resolvePluginEntry } from './plugin-entry-resolver.js';
 export { isOpenaiApiKeyDisabled, parseConfig, resolveEnvVars } from './config.js';
 export { MigrationOptions, MigrationResult, RollbackResult, migrateFromEngram, rollbackFromEngramMigration } from './migrate/from-engram.js';
-import { S as SpeakerRegistry, W as WearablesService } from './orchestrator-DEQW9j0Z.js';
-export { D as DEFAULT_SELF_NAME, O as Orchestrator, R as ResolvedSpeaker, a as SpeakerOverride, b as WEARABLE_SOURCE_PREFIX, c as WearableDayTranscriptView, d as WearableMemoryGenDeps, e as WearableMemoryGenResult, f as WearableMemorySearchResult, g as WearableMemoryWriter, h as WearableSearchBackend, i as WearableStorageIo, j as WearableSyncDeps, k as WearableSyncOptions, l as WearableTranscriptSearchResult, m as WearablesServiceDeps, n as buildExtractionTurns, o as dateInTimezone, p as defaultTimezone, q as defaultWorkspaceDir, r as distinctSpeakerLabels, s as emptySpeakerRegistry, t as generateWearableMemories, u as importNativeMemories, v as loadSpeakerRegistry, w as locateTranscriptPath, x as memoryStatusForMode, y as resolveSpeaker, z as resolveSyncDates, A as sanitizeSessionKeyForFilename, B as saveSpeakerRegistry, C as speakerRegistryKey, E as speakersFilePath, F as syncWearableSource, H as wearableDayTag, J as wearableSourceLabel, K as writeDailyDigestMemory } from './orchestrator-DEQW9j0Z.js';
+import { S as SpeakerRegistry, W as WearablesService } from './orchestrator-CX-oqwJq.js';
+export { D as DEFAULT_SELF_NAME, O as Orchestrator, R as ResolvedSpeaker, a as SpeakerOverride, b as WEARABLE_SOURCE_PREFIX, c as WearableDayTranscriptView, d as WearableMemoryGenDeps, e as WearableMemoryGenResult, f as WearableMemorySearchResult, g as WearableMemoryWriter, h as WearableSearchBackend, i as WearableStorageIo, j as WearableSyncDeps, k as WearableSyncOptions, l as WearableTranscriptSearchResult, m as WearablesServiceDeps, n as buildExtractionTurns, o as dateInTimezone, p as defaultTimezone, q as defaultWorkspaceDir, r as distinctSpeakerLabels, s as emptySpeakerRegistry, t as generateWearableMemories, u as importNativeMemories, v as loadSpeakerRegistry, w as locateTranscriptPath, x as memoryStatusForMode, y as resolveSpeaker, z as resolveSyncDates, A as sanitizeSessionKeyForFilename, B as saveSpeakerRegistry, C as speakerRegistryKey, E as speakersFilePath, F as syncWearableSource, H as wearableDayTag, J as wearableSourceLabel, K as writeDailyDigestMemory } from './orchestrator-CX-oqwJq.js';
 export { normalizeProjectionPreview, normalizeProjectionTags } from './memory-projection-format.js';
 export { ModelCapabilities, ModelRegistry } from './model-registry.js';
 export { ACTIVE_STATUSES, ContradictionFilter, ContradictionJudgeBatchResult, ContradictionJudgeInput, ContradictionJudgeResult, ContradictionListResult, ContradictionVerdict, ResolutionResult, ResolutionVerb, ScanDependencies, ScanResult, computePairId, executeResolution, isCoolingDown, isValidResolutionVerb, judgeContradictionPairs, listPairs, readPair, resolvePair, runContradictionScan, writePair, writePairs } from './contradiction/index.js';
@@ -24,7 +24,7 @@ import { P as PluginConfig, aG as CodingContext, aL as CodingModeConfig, M as Me
 export { a7 as AgentAccessAuthToken, V as BriefingActiveThread, aO as BriefingConfig, Q as BriefingFocus, O as BriefingFollowup, aP as BriefingOpenCommitment, X as BriefingRecentEntity, W as BriefingResult, N as BriefingSections, aQ as BriefingWindow, o as BufferSurpriseEvent, U as CalendarEvent, S as CalendarSource, aR as CodexCompatConfig, aJ as ConsolidationObservation, s as ContinuityImprovementLoop, aS as DEFAULT_RECALL_DISCLOSURE, x as EntityFile, E as EntityStructuredSection, aT as ExtractedFact, G as GatewayConfig, ak as MemoryActionEligibilityContext, aU as MemoryActionEligibilitySource, ab as MemoryActionType, g as MemoryFile, j as MemoryFrontmatter, aV as MemoryObservation, aW as MemoryScope, aX as RECALL_DISCLOSURE_LEVELS, K as RecallDisclosure, a6 as SecretRef, aY as WearableAuthCheck, aZ as WearableFetchOptions, a_ as WearableFetchPage, az as WearableMemoryMode, ay as WearableNativeMemory, a$ as WearableNativeMemoryPage, aD as WearableSourceStatus, aC as WearableSyncSummary, b0 as WearableTranscriptSegment, b1 as isRecallDisclosure } from './types-D8yUmSik.js';
 export { JudgeBatchResult, JudgeCandidate, JudgeVerdict, JudgeVerdictKind, clearVerdictCache, createVerdictCache, getVerdictKind, isDurableVerdict, isValidCachedVerdict, judgeFactDurability, normalizeCachedVerdict, verdictCacheSize } from './extraction-judge.js';
 export { hasBroadGraphIntent, inferIntentFromText, intentCompatibilityScore, isTaskInitiationIntent, planRecallMode } from './intent.js';
-export { b as EngramAccessInputError, E as EngramAccessService, P as ProcedureStatsConfigSnapshot, c as ProcedureStatsRecent, d as ProcedureStatsReport, e as ProcedureStatusCounts, f as computeProcedureStats, g as formatProcedureStatsText } from './access-service-DFXIlGvZ.js';
+export { b as EngramAccessInputError, E as EngramAccessService, P as ProcedureStatsConfigSnapshot, c as ProcedureStatsRecent, d as ProcedureStatsReport, e as ProcedureStatusCounts, f as computeProcedureStats, g as formatProcedureStatsText } from './access-service-DIZRHQ7Q.js';
 export { FILTER_LABELS as DIRECT_ANSWER_FILTER_LABELS, DirectAnswerCandidate, DirectAnswerConfig, DirectAnswerInput, DirectAnswerReason, DirectAnswerResult, isDirectAnswerEligible } from './direct-answer.js';
 export { MemoryTier, TierRoutingPolicy, TierTransitionDecision, computeTierValueScore, decideTierTransition } from './tier-routing.js';
 export { ApplyReasoningTraceBoostOptions, BoostableResult, DEFAULT_REASONING_TRACE_BOOST, applyReasoningTraceBoost, isReasoningTracePath, looksLikeProblemSolvingQuery } from './reasoning-trace-recall.js';
@@ -78,7 +78,7 @@ export { EnrichmentAuditEntry, EnrichmentCandidate, EnrichmentCostTier, Enrichme
 export { d as BulkImportError, B as BulkImportOptions, b as BulkImportResult, a as BulkImportSource, e as BulkImportSourceAdapter, f as ImportSourceRole, I as ImportTurn, g as ImportTurnValidationIssue, i as isImportRole, p as parseIsoTimestamp, v as validateImportTurn } from './types-ByK7T3L6.js';
 export { clearBulkImportSources, getBulkImportSource, listBulkImportSources, registerBulkImportSource } from './bulk-import/index.js';
 export { a as ProcessBatchContext, P as ProcessBatchFn, b as ProcessBatchResult, f as formatBatchTranscript, r as resolveBulkImportContext, c as runBulkImportPipeline, v as validateBatchSize } from './pipeline-BSTuml0d.js';
-export { B as BulkImportCliCommandOptions, p as parseStrictCliDate, r as runBulkImportCliCommand } from './cli-DrL2Nv4j.js';
+export { B as BulkImportCliCommandOptions, p as parseStrictCliDate, r as runBulkImportCliCommand } from './cli-BG4ybtJr.js';
 export { DEFAULT_IMPORT_BATCH_SIZE, ImportProgress, ImportedMemory, ImporterAdapter, ImporterParseOptions, ImporterTransformOptions, ImporterWriteResult, ImporterWriteTarget, RunImportOptions, RunImporterResult, defaultWriteMemoriesToOrchestrator, importedMemoryToTurn, runImporter, validateImportBatchSize, validateImportRateLimit } from './importers/index.js';
 export { FallbackLlmClient, FallbackLlmOptions, FallbackLlmResponse, FallbackLlmRuntimeContext } from './fallback-llm.js';
 export { ComputeMemoryWorthInput, MemoryWorthResult, computeMemoryWorth } from './memory-worth.js';

package/dist/index.js

@@ -94,7 +94,7 @@ import {
   registerTrainingExportAdapter,
   runBulkImportCliCommand,
   runWearablesCliCommand
-} from "./chunk-FQYFMIKG.js";
+} from "./chunk-TUMH6EDV.js";
 import "./chunk-MC4FJXPA.js";
 import "./chunk-LQHDIS7L.js";
 import "./chunk-7F7Z6MOS.js";
@@ -191,7 +191,7 @@ import {
   saveTaxonomy,
   validateSlug,
   validateTaxonomy
-} from "./chunk-XUGVP7ZU.js";
+} from "./chunk-23RYLGYA.js";
 import {
   WEARABLE_SOURCE_PREFIX,
   buildExtractionTurns,
@@ -495,7 +495,7 @@ import "./chunk-HQ6NIBL6.js";
 import "./chunk-OADWQ5CR.js";
 import {
   EngramAccessHttpServer
-} from "./chunk-CNRZ6WJU.js";
+} from "./chunk-3IJEQWQX.js";
 import "./chunk-SEDEKFYQ.js";
 import "./chunk-RKNJBZ55.js";
 import "./chunk-J64TK33U.js";
@@ -509,7 +509,7 @@ import {
 } from "./chunk-7WV3F5DQ.js";
 import {
   EngramMcpServer
-} from "./chunk-FUXV6HSO.js";
+} from "./chunk-TVOPSKOK.js";
 import {
   REMNIC_CHATGPT_MEMORY_INSPECTOR_CANONICAL_TOOL,
   REMNIC_CHATGPT_MEMORY_INSPECTOR_MIME_TYPE,
@@ -530,7 +530,7 @@ import {
   EngramAccessService,
   computeProcedureStats,
   formatProcedureStatsText
-} from "./chunk-5ETA6OAS.js";
+} from "./chunk-YAFSTKTH.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import {
@@ -556,7 +556,7 @@ import {
   resolveCodingNamespaceOverlay,
   resolveGitContext,
   stableHash
-} from "./chunk-6GIKAUTN.js";
+} from "./chunk-MMJANTJX.js";
 import "./chunk-5RIRL3XL.js";
 import {
   isTrustZoneName

package/dist/mcp-memory-inspector-app.d.ts

@@ -1,4 +1,4 @@
-import { a as EngramAccessRecallResponse } from './access-service-DFXIlGvZ.js';
+import { a as EngramAccessRecallResponse } from './access-service-DIZRHQ7Q.js';
 import { ActionConfidenceRequest } from './access-schema.js';
 import { RecallXraySnapshot } from './recall-xray.js';
 import { ActionConfidenceResult } from './action-confidence.js';
@@ -20,7 +20,7 @@ import './user-model.js';
 import './recall-audit-anomaly.js';
 import './recall-audit.js';
 import './explicit-capture.js';
-import './orchestrator-DEQW9j0Z.js';
+import './orchestrator-CX-oqwJq.js';
 import './briefing.js';
 import './buffer.js';
 import './search/port.js';

package/dist/{orchestrator-DEQW9j0Z.d.ts → orchestrator-CX-oqwJq.d.ts}

@@ -996,6 +996,42 @@ declare class Orchestrator {
     clearRecallWorkspaceOverride(sessionKey: string): void;
     resolvePrincipal(sessionKey?: string): string | undefined;
     resolveSelfNamespace(sessionKey?: string): string;
+    /**
+     * Effective namespace a same-session LCM/structured-history READER must use
+     * to find what the access `observe` surface WROTE (#1495 thread 2).
+     *
+     * This MUST mirror the `observe` scope plan's write-namespace resolution, NOT
+     * `resolveSelfNamespace`: when no coding overlay applies, `observe` archives
+     * under `config.defaultNamespace` (an unqualified observed turn is NOT moved
+     * to the principal self namespace — identical to
+     * `resolveCodingScopedWriteNamespace`/`memory_store`, rule 39). Only when a
+     * coding overlay actually changes the namespace does the writer (and so the
+     * reader) use the overlaid `project-*` namespace. Returning the self base for
+     * the no-overlay case would prefix the read key with a namespace the writer
+     * never used, so the reader would miss its own evidence.
+     *
+     * Honours the access-surface `principalOverride` (#1505 thread 2, codex): when
+     * a recall supplies an authenticated principal NOT encoded in the raw
+     * `sessionKey`, `observe` archived LCM under THAT principal's base namespace.
+     * Deriving the base from `resolvePrincipal(sessionKey)` alone could fall back
+     * to `default`, so principal `alice` observing `sess-1` would write under
+     * `alice` but READ under `default`. Threading the override here keeps the read
+     * base identical to the write base.
+     *
+     * READ-AUTHORIZATION gate (#1505 round 3, codex P2 "Gate LCM recall keys by
+     * readable namespaces"): the overlay LCM read key is a `<principal>-project-*`
+     * sub-namespace of the principal SELF base. The normal recall namespace set
+     * below only substitutes the coding overlay when the principal SELF base is
+     * actually in the readable recall set (`recallNamespacesForPrincipal` — gated
+     * by `defaultRecallNamespaces.includes("self")` AND `canReadNamespace`). If a
+     * principal can WRITE but not READ its self namespace (or `defaultRecall-
+     * Namespaces` omits `self`), QMD/file recall never touches those overlay rows,
+     * so neither may the LCM read key. When the self base is NOT readable, fall
+     * back to the default store — exactly what an unqualified, unauthorized recall
+     * resolves to — rather than injecting overlay rows the rest of recall excludes
+     * (rule 42 read/write parity; rule 48 least-privilege).
+     */
+    private lcmReadNamespaceForSession;
     /**
      * Attach a coding-agent context to a session (issue #569). Called by the
      * Claude Code / Codex / Cursor connectors at session start after
@@ -1400,6 +1436,28 @@ declare class Orchestrator {
         deadlineMs?: number;
         archiveLcm?: boolean;
         abortSignal?: AbortSignal;
+        /**
+         * Pin extraction writes to this namespace instead of deriving one from
+         * `defaultNamespaceForPrincipal(resolvePrincipal(sessionKey))` + the
+         * coding overlay (#1495). The access `observe` surface resolves a single
+         * effective scope plan and passes its `writeNamespace` here so the
+         * extracted memories land in the SAME namespace as LCM archival,
+         * objective-state snapshots, and project-scoped recall — without relying
+         * on re-deriving the namespace from a namespace-prefixed session key.
+         * Same hook bulk-import uses (#460).
+         */
+        writeNamespaceOverride?: string;
+        /**
+         * Pin the provenance PRINCIPAL instead of deriving it from
+         * `resolvePrincipal(turn.sessionKey)` (#1495 thread 1). The access
+         * `observe` surface authenticates the caller at the transport layer and
+         * passes its resolved principal here so extracted-memory provenance uses
+         * the SAME identity the surface authorized — independent of storage
+         * routing (`writeNamespaceOverride`) and of whatever `resolvePrincipal`
+         * would parse from the raw session key. Mirrors the recall path's
+         * `principalOverride` (issue #570 PR 4).
+         */
+        principalOverride?: string;
     }): Promise<void>;
     /**
      * Return the namespace that `ingestBulkImportBatch` writes into (#460).

package/dist/orchestrator.d.ts

@@ -7,7 +7,7 @@ import './summarizer.js';
 import './local-llm.js';
 import './fallback-llm.js';
 import './live-connectors-runner.js';
-export { L as BulkImportBatchIngestResult, M as BulkImportBatchPartialFailureError, N as GraphRecallRankedResult, Q as GraphRecallShadowComparison, G as GraphRecallSnapshot, I as IntentDebugSnapshot, O as Orchestrator, T as QmdRecallSnapshot, U as RecallInvocationOptions, V as RecallModeDecision, X as appendMemoryToGraphContext, Y as blendGraphExpandedRecallScore, Z as buildCompressionGuidelinesMarkdown, _ as buildMemoryPathById, $ as computeArtifactCandidateFetchLimit, a0 as computeArtifactRecallLimit, a1 as computeQmdHybridFetchLimit, a2 as dedupeEntitySynthesisEvidenceEntries, q as defaultWorkspaceDir, a3 as deriveTopicsFromExtraction, a4 as filterRecallCandidates, a5 as formatCompressionGuidelinesForRecall, a6 as graphPathRelativeToStorage, a7 as hasIdentityRecoveryIntent, a8 as isArtifactMemoryPath, a9 as lifecycleRecallScoreAdjustment, aa as mergeArtifactRecallCandidates, ab as mergeGraphExpandedResults, ac as resolveEffectiveIdentityInjectionMode, ad as resolveEffectiveRecallMode, ae as resolvePersistedMemoryRelativePath, af as resolveRecallModeDecision, ag as resolveRecallModeDecisionAsync, ah as resolveRecentThreadMemoryPaths, A as sanitizeSessionKeyForFilename, ai as shouldFilterLifecycleRecallCandidate, aj as summarizeGraphShadowComparison } from './orchestrator-DEQW9j0Z.js';
+export { L as BulkImportBatchIngestResult, M as BulkImportBatchPartialFailureError, N as GraphRecallRankedResult, Q as GraphRecallShadowComparison, G as GraphRecallSnapshot, I as IntentDebugSnapshot, O as Orchestrator, T as QmdRecallSnapshot, U as RecallInvocationOptions, V as RecallModeDecision, X as appendMemoryToGraphContext, Y as blendGraphExpandedRecallScore, Z as buildCompressionGuidelinesMarkdown, _ as buildMemoryPathById, $ as computeArtifactCandidateFetchLimit, a0 as computeArtifactRecallLimit, a1 as computeQmdHybridFetchLimit, a2 as dedupeEntitySynthesisEvidenceEntries, q as defaultWorkspaceDir, a3 as deriveTopicsFromExtraction, a4 as filterRecallCandidates, a5 as formatCompressionGuidelinesForRecall, a6 as graphPathRelativeToStorage, a7 as hasIdentityRecoveryIntent, a8 as isArtifactMemoryPath, a9 as lifecycleRecallScoreAdjustment, aa as mergeArtifactRecallCandidates, ab as mergeGraphExpandedResults, ac as resolveEffectiveIdentityInjectionMode, ad as resolveEffectiveRecallMode, ae as resolvePersistedMemoryRelativePath, af as resolveRecallModeDecision, ag as resolveRecallModeDecisionAsync, ah as resolveRecentThreadMemoryPaths, A as sanitizeSessionKeyForFilename, ai as shouldFilterLifecycleRecallCandidate, aj as summarizeGraphShadowComparison } from './orchestrator-CX-oqwJq.js';
 import './model-registry.js';
 import './relevance.js';
 import './negative.js';

package/dist/orchestrator.js

@@ -28,7 +28,7 @@ import {
   sanitizeSessionKeyForFilename,
   shouldFilterLifecycleRecallCandidate,
   summarizeGraphShadowComparison
-} from "./chunk-XUGVP7ZU.js";
+} from "./chunk-23RYLGYA.js";
 import "./chunk-DDRNDPX4.js";
 import "./chunk-7HYPN2GC.js";
 import "./chunk-666A3MOW.js";
@@ -141,7 +141,7 @@ import "./chunk-H3FZVNRN.js";
 import "./chunk-HQ6NIBL6.js";
 import "./chunk-OADWQ5CR.js";
 import "./chunk-7WV3F5DQ.js";
-import "./chunk-6GIKAUTN.js";
+import "./chunk-MMJANTJX.js";
 import "./chunk-5RIRL3XL.js";
 import "./chunk-JGSKJHF7.js";
 import "./chunk-FF4KLI5W.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.3.649",
+  "version": "9.3.650",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",