@remnic/core 9.3.649 → 9.3.651

package/dist/lcm/engine.js

@@ -1,13 +1,13 @@
 import {
   LcmEngine,
   extractLcmConfig
-} from "../chunk-WEPMT6SC.js";
+} from "../chunk-V25ZAOSB.js";
+import "../chunk-MAV46GWQ.js";
 import "../chunk-5VDJMYTF.js";
 import "../chunk-HP5FMB6L.js";
 import "../chunk-7N4KAIGN.js";
 import "../chunk-TPDBFYEG.js";
 import "../chunk-KCYE2MZM.js";
-import "../chunk-MAV46GWQ.js";
 import "../chunk-4RA3C3EV.js";
 import "../chunk-CI7RKSRE.js";
 import "../chunk-6KYMPV2O.js";

package/dist/lcm/index.js

@@ -5,7 +5,11 @@ import {
 import {
   LcmEngine,
   extractLcmConfig
-} from "../chunk-WEPMT6SC.js";
+} from "../chunk-V25ZAOSB.js";
+import {
+  ensureLcmStateDir,
+  openLcmDatabase
+} from "../chunk-MAV46GWQ.js";
 import {
   LcmSummarizer
 } from "../chunk-5VDJMYTF.js";
@@ -20,10 +24,6 @@ import "../chunk-TPDBFYEG.js";
 import {
   assembleCompressedHistory
 } from "../chunk-KCYE2MZM.js";
-import {
-  ensureLcmStateDir,
-  openLcmDatabase
-} from "../chunk-MAV46GWQ.js";
 import "../chunk-4RA3C3EV.js";
 import "../chunk-CI7RKSRE.js";
 import "../chunk-6KYMPV2O.js";

package/dist/lcm-fallback-read.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Shared helper for reading LCM-backed recall sections across the ordered,
+ * read-authorized fallback key set (#1505 codex P2 "Merge LCM fallback reads
+ * instead of short-circuiting").
+ *
+ * Background: a branch-scoped session archives its LCM rows under whichever
+ * coding-overlay namespace was effective at write time, so its evidence can be
+ * split across the primary overlay key AND the project / root fallback keys.
+ * Normal QMD/file recall already searches the primary namespace PLUS
+ * `codingOverlay.readFallbacks` and MERGES the rows. The LCM read path must do
+ * the same: query EVERY authorized read key and merge the candidate evidence
+ * into each section's existing dedupe + rank + budget pass, instead of stopping
+ * at the first key that happens to yield a (possibly weak) hit.
+ *
+ * Each section already owns a section-appropriate dedupe (a `seen` set or a
+ * `rankAndDedupe…` step), so the fan-out only needs to resolve the ordered,
+ * deduped read-key set and UNION the per-key candidates into that existing
+ * pipeline — the budget is then applied exactly once to the union. Centralizing
+ * the key-set resolution here (rather than re-implementing per builder) follows
+ * CLAUDE.md rule 22 (scope resolution must be deduplicated).
+ */
+/** A recall section's LCM read target: either a single key or an ordered set. */
+interface LcmReadSessionTarget {
+    /**
+     * The single LCM read `session_id` (pre-#1505 behavior). `undefined` means a
+     * sessionless, archive-wide read with no `session_id` filter.
+     */
+    sessionId?: string;
+    /**
+     * The ordered, read-authorized LCM read key set (primary overlay key first,
+     * then project / root fallbacks) the orchestrator derived from the same
+     * readable namespace set normal recall searches. When present and non-empty,
+     * it supersedes `sessionId`.
+     */
+    sessionIds?: readonly (string | undefined)[];
+}
+/**
+ * Resolve the ordered, deduped set of LCM read `session_id`s a recall section
+ * must query.
+ *
+ * When `sessionIds` is provided (the #1505 fallback unification), it is used
+ * verbatim, deduped while preserving first-seen order so the caller queries
+ * keys in priority order (primary overlay → fallbacks) without re-querying an
+ * identical key (e.g. when two namespaces both collapse to the default store).
+ * Otherwise the section reads under the single `sessionId`, so the result is
+ * `[sessionId]` — byte-for-byte the pre-#1505 single-key behavior, including a
+ * single `undefined` for a sessionless archive-wide read.
+ */
+declare function resolveLcmReadSessionIds(target: LcmReadSessionTarget): Array<string | undefined>;
+/**
+ * Run a per-key LCM `gather` across the resolved read-key set with FAULT
+ * ISOLATION across keys (#1505 codex P2 review follow-up).
+ *
+ * A recall section that reads every key in a bare `for…await` loop loses the
+ * WHOLE section if any one key throws (e.g. a `SqliteError` from a corrupt or
+ * locked fallback index) — even when the primary overlay key already gathered
+ * evidence. The pre-#1505 first-non-empty read never had this problem: it
+ * returned the primary key's non-empty result without ever touching a failing
+ * fallback. This helper restores that resilience for the merged path: when more
+ * than one key is read, a per-key failure is contained so the other keys'
+ * evidence survives (best-effort recall — a total failure degrades to an empty
+ * section, which the orchestrator already treats as "no evidence").
+ *
+ * SINGLE-KEY is byte-for-byte the pre-#1505 behavior: the gather runs directly,
+ * so a failure PROPAGATES exactly as before (the caller / orchestrator catch
+ * still logs it). Fault isolation only engages once there is a fallback key that
+ * could fail independently of the primary.
+ */
+declare function gatherAcrossReadSessions(sessionIds: ReadonlyArray<string | undefined>, gather: (sessionId: string | undefined) => Promise<void>): Promise<void>;
+
+export { type LcmReadSessionTarget, gatherAcrossReadSessions, resolveLcmReadSessionIds };

package/dist/lcm-fallback-read.js

@@ -0,0 +1,10 @@
+import {
+  gatherAcrossReadSessions,
+  resolveLcmReadSessionIds
+} from "./chunk-5FOCXX5E.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  gatherAcrossReadSessions,
+  resolveLcmReadSessionIds
+};
+//# sourceMappingURL=lcm-fallback-read.js.map

package/dist/lcm-fallback-read.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/maintenance/memory-governance.js

@@ -7,17 +7,17 @@ import {
   readMemoryGovernanceRunArtifact,
   restoreMemoryGovernanceRun,
   runMemoryGovernance
-} from "../chunk-UMTG2BN2.js";
-import "../chunk-A4BTPHIN.js";
+} from "../chunk-V4UDXYGG.js";
+import "../chunk-Y7NWBBHV.js";
 import "../chunk-M7XQSUBB.js";
 import "../chunk-5UZXUTVO.js";
 import "../chunk-J6A3CX5N.js";
 import "../chunk-C43KEWEV.js";
+import "../chunk-CPPS65WS.js";
 import "../chunk-RULE4VG5.js";
 import "../chunk-SCU65EZI.js";
 import "../chunk-MB5RSUW6.js";
 import "../chunk-6KYMPV2O.js";
-import "../chunk-CPPS65WS.js";
 import "../chunk-DM2T26WE.js";
 import "../chunk-LDXUBPMO.js";
 import "../chunk-FVQJYWH7.js";

package/dist/maintenance/rebuild-memory-lifecycle-ledger.js

@@ -1,19 +1,19 @@
 import {
   backupExistingLedger,
   rebuildMemoryLifecycleLedger
-} from "../chunk-PQFUUXWK.js";
+} from "../chunk-KWM33SPU.js";
 import "../chunk-KJTKLXTH.js";
 import "../chunk-SFQ6QNL7.js";
-import "../chunk-A4BTPHIN.js";
+import "../chunk-Y7NWBBHV.js";
 import "../chunk-M7XQSUBB.js";
 import "../chunk-5UZXUTVO.js";
 import "../chunk-J6A3CX5N.js";
 import "../chunk-C43KEWEV.js";
+import "../chunk-CPPS65WS.js";
 import "../chunk-RULE4VG5.js";
 import "../chunk-SCU65EZI.js";
 import "../chunk-MB5RSUW6.js";
 import "../chunk-6KYMPV2O.js";
-import "../chunk-CPPS65WS.js";
 import "../chunk-DM2T26WE.js";
 import "../chunk-LDXUBPMO.js";
 import "../chunk-FVQJYWH7.js";

package/dist/maintenance/rebuild-memory-projection.js

@@ -3,21 +3,21 @@ import {
   rebuildMemoryProjection,
   repairMemoryProjection,
   verifyMemoryProjection
-} from "../chunk-MCYT2RNT.js";
+} from "../chunk-KJDKZVF3.js";
 import "../chunk-KJTKLXTH.js";
 import "../chunk-SFQ6QNL7.js";
 import "../chunk-BEUDU7Y4.js";
-import "../chunk-UMTG2BN2.js";
-import "../chunk-A4BTPHIN.js";
+import "../chunk-V4UDXYGG.js";
+import "../chunk-Y7NWBBHV.js";
 import "../chunk-M7XQSUBB.js";
 import "../chunk-5UZXUTVO.js";
 import "../chunk-J6A3CX5N.js";
 import "../chunk-C43KEWEV.js";
+import "../chunk-CPPS65WS.js";
 import "../chunk-RULE4VG5.js";
 import "../chunk-SCU65EZI.js";
 import "../chunk-MB5RSUW6.js";
 import "../chunk-6KYMPV2O.js";
-import "../chunk-CPPS65WS.js";
 import "../chunk-DM2T26WE.js";
 import "../chunk-LDXUBPMO.js";
 import "../chunk-FVQJYWH7.js";

package/dist/mcp-memory-inspector-app.d.ts

@@ -1,4 +1,4 @@
-import { a as EngramAccessRecallResponse } from './access-service-DFXIlGvZ.js';
+import { a as EngramAccessRecallResponse } from './access-service-DIZRHQ7Q.js';
 import { ActionConfidenceRequest } from './access-schema.js';
 import { RecallXraySnapshot } from './recall-xray.js';
 import { ActionConfidenceResult } from './action-confidence.js';
@@ -20,7 +20,7 @@ import './user-model.js';
 import './recall-audit-anomaly.js';
 import './recall-audit.js';
 import './explicit-capture.js';
-import './orchestrator-DEQW9j0Z.js';
+import './orchestrator-CX-oqwJq.js';
 import './briefing.js';
 import './buffer.js';
 import './search/port.js';

package/dist/namespaces/migrate.js

@@ -2,16 +2,16 @@ import {
   listNamespaces,
   runNamespaceMigration,
   verifyNamespaces
-} from "../chunk-RRRCNIPK.js";
-import "../chunk-D6WVJIS3.js";
-import "../chunk-NMIOW7XG.js";
-import "../chunk-WPCCNSWO.js";
+} from "../chunk-WJK75OCH.js";
+import "../chunk-ORGWWNJG.js";
+import "../chunk-4PTKFBST.js";
+import "../chunk-6UKL6IXM.js";
+import "../chunk-TQUWNX7C.js";
 import "../chunk-CYEPCZN5.js";
 import "../chunk-76QTEJ2Q.js";
 import "../chunk-JOASJWQR.js";
 import "../chunk-RN7MUWON.js";
 import "../chunk-FOVPSMGI.js";
-import "../chunk-TQUWNX7C.js";
 import "../chunk-Q4CAQGKQ.js";
 import "../chunk-CINZGPSJ.js";
 import "../chunk-ZFXCQPNO.js";
@@ -23,16 +23,16 @@ import "../chunk-I4COC5XW.js";
 import "../chunk-QT4THOLT.js";
 import "../chunk-O75CRYGF.js";
 import "../chunk-3ONXXHQO.js";
-import "../chunk-A4BTPHIN.js";
+import "../chunk-Y7NWBBHV.js";
 import "../chunk-M7XQSUBB.js";
 import "../chunk-5UZXUTVO.js";
 import "../chunk-J6A3CX5N.js";
 import "../chunk-C43KEWEV.js";
+import "../chunk-CPPS65WS.js";
 import "../chunk-RULE4VG5.js";
 import "../chunk-SCU65EZI.js";
 import "../chunk-MB5RSUW6.js";
 import "../chunk-6KYMPV2O.js";
-import "../chunk-CPPS65WS.js";
 import "../chunk-DM2T26WE.js";
 import "../chunk-LDXUBPMO.js";
 import "../chunk-FVQJYWH7.js";

package/dist/namespaces/search.js

@@ -1,14 +1,14 @@
 import {
   NamespaceSearchRouter,
   namespaceCollectionName
-} from "../chunk-NMIOW7XG.js";
-import "../chunk-WPCCNSWO.js";
+} from "../chunk-4PTKFBST.js";
+import "../chunk-6UKL6IXM.js";
+import "../chunk-TQUWNX7C.js";
 import "../chunk-CYEPCZN5.js";
 import "../chunk-76QTEJ2Q.js";
 import "../chunk-JOASJWQR.js";
 import "../chunk-RN7MUWON.js";
 import "../chunk-FOVPSMGI.js";
-import "../chunk-TQUWNX7C.js";
 import "../chunk-Q4CAQGKQ.js";
 import "../chunk-CINZGPSJ.js";
 import "../chunk-ZFXCQPNO.js";

package/dist/namespaces/storage.js

@@ -1,17 +1,17 @@
 import {
   NamespaceStorageRouter
-} from "../chunk-D6WVJIS3.js";
+} from "../chunk-ORGWWNJG.js";
 import "../chunk-ZFXCQPNO.js";
-import "../chunk-A4BTPHIN.js";
+import "../chunk-Y7NWBBHV.js";
 import "../chunk-M7XQSUBB.js";
 import "../chunk-5UZXUTVO.js";
 import "../chunk-J6A3CX5N.js";
 import "../chunk-C43KEWEV.js";
+import "../chunk-CPPS65WS.js";
 import "../chunk-RULE4VG5.js";
 import "../chunk-SCU65EZI.js";
 import "../chunk-MB5RSUW6.js";
 import "../chunk-6KYMPV2O.js";
-import "../chunk-CPPS65WS.js";
 import "../chunk-DM2T26WE.js";
 import "../chunk-LDXUBPMO.js";
 import "../chunk-FVQJYWH7.js";

package/dist/operator-toolkit.js

@@ -11,11 +11,11 @@ import {
   summarizeMemoryWorthLegacyCounters,
   summarizeObservationThroughput,
   summarizeTierDistribution
-} from "./chunk-ZT6R3WR3.js";
-import "./chunk-RRRCNIPK.js";
+} from "./chunk-LFTLXOFX.js";
+import "./chunk-WJK75OCH.js";
 import "./chunk-AL4RAJL5.js";
 import "./chunk-YBPYIAA5.js";
-import "./chunk-D6WVJIS3.js";
+import "./chunk-ORGWWNJG.js";
 import "./chunk-KFY3SGN7.js";
 import "./chunk-CMTINOFS.js";
 import "./chunk-BEUDU7Y4.js";
@@ -25,15 +25,15 @@ import "./chunk-C63WC454.js";
 import "./chunk-PHK3HARR.js";
 import "./chunk-NDAH7BJ5.js";
 import "./chunk-Z5LAYHGJ.js";
-import "./chunk-UMTG2BN2.js";
-import "./chunk-NMIOW7XG.js";
-import "./chunk-WPCCNSWO.js";
+import "./chunk-V4UDXYGG.js";
+import "./chunk-4PTKFBST.js";
+import "./chunk-6UKL6IXM.js";
+import "./chunk-TQUWNX7C.js";
 import "./chunk-CYEPCZN5.js";
 import "./chunk-76QTEJ2Q.js";
 import "./chunk-JOASJWQR.js";
 import "./chunk-RN7MUWON.js";
 import "./chunk-FOVPSMGI.js";
-import "./chunk-TQUWNX7C.js";
 import "./chunk-Q4CAQGKQ.js";
 import "./chunk-CINZGPSJ.js";
 import "./chunk-ZFXCQPNO.js";
@@ -48,16 +48,16 @@ import "./chunk-3ONXXHQO.js";
 import "./chunk-Y56J7CXW.js";
 import "./chunk-2LSZVONP.js";
 import "./chunk-DEUNUKTD.js";
-import "./chunk-A4BTPHIN.js";
+import "./chunk-Y7NWBBHV.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-J6A3CX5N.js";
 import "./chunk-C43KEWEV.js";
+import "./chunk-CPPS65WS.js";
 import "./chunk-RULE4VG5.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-MB5RSUW6.js";
 import "./chunk-6KYMPV2O.js";
-import "./chunk-CPPS65WS.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-FVQJYWH7.js";

package/dist/{orchestrator-DEQW9j0Z.d.ts → orchestrator-CX-oqwJq.d.ts}

@@ -996,6 +996,42 @@ declare class Orchestrator {
     clearRecallWorkspaceOverride(sessionKey: string): void;
     resolvePrincipal(sessionKey?: string): string | undefined;
     resolveSelfNamespace(sessionKey?: string): string;
+    /**
+     * Effective namespace a same-session LCM/structured-history READER must use
+     * to find what the access `observe` surface WROTE (#1495 thread 2).
+     *
+     * This MUST mirror the `observe` scope plan's write-namespace resolution, NOT
+     * `resolveSelfNamespace`: when no coding overlay applies, `observe` archives
+     * under `config.defaultNamespace` (an unqualified observed turn is NOT moved
+     * to the principal self namespace — identical to
+     * `resolveCodingScopedWriteNamespace`/`memory_store`, rule 39). Only when a
+     * coding overlay actually changes the namespace does the writer (and so the
+     * reader) use the overlaid `project-*` namespace. Returning the self base for
+     * the no-overlay case would prefix the read key with a namespace the writer
+     * never used, so the reader would miss its own evidence.
+     *
+     * Honours the access-surface `principalOverride` (#1505 thread 2, codex): when
+     * a recall supplies an authenticated principal NOT encoded in the raw
+     * `sessionKey`, `observe` archived LCM under THAT principal's base namespace.
+     * Deriving the base from `resolvePrincipal(sessionKey)` alone could fall back
+     * to `default`, so principal `alice` observing `sess-1` would write under
+     * `alice` but READ under `default`. Threading the override here keeps the read
+     * base identical to the write base.
+     *
+     * READ-AUTHORIZATION gate (#1505 round 3, codex P2 "Gate LCM recall keys by
+     * readable namespaces"): the overlay LCM read key is a `<principal>-project-*`
+     * sub-namespace of the principal SELF base. The normal recall namespace set
+     * below only substitutes the coding overlay when the principal SELF base is
+     * actually in the readable recall set (`recallNamespacesForPrincipal` — gated
+     * by `defaultRecallNamespaces.includes("self")` AND `canReadNamespace`). If a
+     * principal can WRITE but not READ its self namespace (or `defaultRecall-
+     * Namespaces` omits `self`), QMD/file recall never touches those overlay rows,
+     * so neither may the LCM read key. When the self base is NOT readable, fall
+     * back to the default store — exactly what an unqualified, unauthorized recall
+     * resolves to — rather than injecting overlay rows the rest of recall excludes
+     * (rule 42 read/write parity; rule 48 least-privilege).
+     */
+    private lcmReadNamespaceForSession;
     /**
      * Attach a coding-agent context to a session (issue #569). Called by the
      * Claude Code / Codex / Cursor connectors at session start after
@@ -1400,6 +1436,28 @@ declare class Orchestrator {
         deadlineMs?: number;
         archiveLcm?: boolean;
         abortSignal?: AbortSignal;
+        /**
+         * Pin extraction writes to this namespace instead of deriving one from
+         * `defaultNamespaceForPrincipal(resolvePrincipal(sessionKey))` + the
+         * coding overlay (#1495). The access `observe` surface resolves a single
+         * effective scope plan and passes its `writeNamespace` here so the
+         * extracted memories land in the SAME namespace as LCM archival,
+         * objective-state snapshots, and project-scoped recall — without relying
+         * on re-deriving the namespace from a namespace-prefixed session key.
+         * Same hook bulk-import uses (#460).
+         */
+        writeNamespaceOverride?: string;
+        /**
+         * Pin the provenance PRINCIPAL instead of deriving it from
+         * `resolvePrincipal(turn.sessionKey)` (#1495 thread 1). The access
+         * `observe` surface authenticates the caller at the transport layer and
+         * passes its resolved principal here so extracted-memory provenance uses
+         * the SAME identity the surface authorized — independent of storage
+         * routing (`writeNamespaceOverride`) and of whatever `resolvePrincipal`
+         * would parse from the raw session key. Mirrors the recall path's
+         * `principalOverride` (issue #570 PR 4).
+         */
+        principalOverride?: string;
     }): Promise<void>;
     /**
      * Return the namespace that `ingestBulkImportBatch` writes into (#460).

package/dist/orchestrator.d.ts

@@ -7,7 +7,7 @@ import './summarizer.js';
 import './local-llm.js';
 import './fallback-llm.js';
 import './live-connectors-runner.js';
-export { L as BulkImportBatchIngestResult, M as BulkImportBatchPartialFailureError, N as GraphRecallRankedResult, Q as GraphRecallShadowComparison, G as GraphRecallSnapshot, I as IntentDebugSnapshot, O as Orchestrator, T as QmdRecallSnapshot, U as RecallInvocationOptions, V as RecallModeDecision, X as appendMemoryToGraphContext, Y as blendGraphExpandedRecallScore, Z as buildCompressionGuidelinesMarkdown, _ as buildMemoryPathById, $ as computeArtifactCandidateFetchLimit, a0 as computeArtifactRecallLimit, a1 as computeQmdHybridFetchLimit, a2 as dedupeEntitySynthesisEvidenceEntries, q as defaultWorkspaceDir, a3 as deriveTopicsFromExtraction, a4 as filterRecallCandidates, a5 as formatCompressionGuidelinesForRecall, a6 as graphPathRelativeToStorage, a7 as hasIdentityRecoveryIntent, a8 as isArtifactMemoryPath, a9 as lifecycleRecallScoreAdjustment, aa as mergeArtifactRecallCandidates, ab as mergeGraphExpandedResults, ac as resolveEffectiveIdentityInjectionMode, ad as resolveEffectiveRecallMode, ae as resolvePersistedMemoryRelativePath, af as resolveRecallModeDecision, ag as resolveRecallModeDecisionAsync, ah as resolveRecentThreadMemoryPaths, A as sanitizeSessionKeyForFilename, ai as shouldFilterLifecycleRecallCandidate, aj as summarizeGraphShadowComparison } from './orchestrator-DEQW9j0Z.js';
+export { L as BulkImportBatchIngestResult, M as BulkImportBatchPartialFailureError, N as GraphRecallRankedResult, Q as GraphRecallShadowComparison, G as GraphRecallSnapshot, I as IntentDebugSnapshot, O as Orchestrator, T as QmdRecallSnapshot, U as RecallInvocationOptions, V as RecallModeDecision, X as appendMemoryToGraphContext, Y as blendGraphExpandedRecallScore, Z as buildCompressionGuidelinesMarkdown, _ as buildMemoryPathById, $ as computeArtifactCandidateFetchLimit, a0 as computeArtifactRecallLimit, a1 as computeQmdHybridFetchLimit, a2 as dedupeEntitySynthesisEvidenceEntries, q as defaultWorkspaceDir, a3 as deriveTopicsFromExtraction, a4 as filterRecallCandidates, a5 as formatCompressionGuidelinesForRecall, a6 as graphPathRelativeToStorage, a7 as hasIdentityRecoveryIntent, a8 as isArtifactMemoryPath, a9 as lifecycleRecallScoreAdjustment, aa as mergeArtifactRecallCandidates, ab as mergeGraphExpandedResults, ac as resolveEffectiveIdentityInjectionMode, ad as resolveEffectiveRecallMode, ae as resolvePersistedMemoryRelativePath, af as resolveRecallModeDecision, ag as resolveRecallModeDecisionAsync, ah as resolveRecentThreadMemoryPaths, A as sanitizeSessionKeyForFilename, ai as shouldFilterLifecycleRecallCandidate, aj as summarizeGraphShadowComparison } from './orchestrator-CX-oqwJq.js';
 import './model-registry.js';
 import './relevance.js';
 import './negative.js';

package/dist/orchestrator.js

@@ -28,35 +28,35 @@ import {
   sanitizeSessionKeyForFilename,
   shouldFilterLifecycleRecallCandidate,
   summarizeGraphShadowComparison
-} from "./chunk-XUGVP7ZU.js";
-import "./chunk-DDRNDPX4.js";
+} from "./chunk-5WSDHTBO.js";
+import "./chunk-4SKKVWLQ.js";
 import "./chunk-7HYPN2GC.js";
 import "./chunk-666A3MOW.js";
 import "./chunk-HHLLAQGZ.js";
 import "./chunk-UWK5OXUJ.js";
-import "./chunk-WEPMT6SC.js";
+import "./chunk-V25ZAOSB.js";
+import "./chunk-MAV46GWQ.js";
 import "./chunk-5VDJMYTF.js";
 import "./chunk-HP5FMB6L.js";
 import "./chunk-7N4KAIGN.js";
 import "./chunk-TPDBFYEG.js";
 import "./chunk-KCYE2MZM.js";
-import "./chunk-MAV46GWQ.js";
 import "./chunk-TECVW3JP.js";
 import "./chunk-T2PO5MUF.js";
-import "./chunk-Z3PZRDLW.js";
+import "./chunk-PRQXUSQV.js";
 import "./chunk-DRD2Q7HQ.js";
 import "./chunk-LXOM6IQU.js";
 import "./chunk-VOUOLGIP.js";
 import "./chunk-S75M5ZRK.js";
 import "./chunk-ECZU5BJH.js";
 import "./chunk-UHGBNIOS.js";
-import "./chunk-IMWFHBG2.js";
+import "./chunk-QWRC7GIO.js";
 import "./chunk-XJNBEDFE.js";
-import "./chunk-VWT3F4IV.js";
+import "./chunk-PS3SYNHP.js";
 import "./chunk-YTWNKQ2G.js";
 import "./chunk-MDYG7VI7.js";
 import "./chunk-MHQC2WU2.js";
-import "./chunk-OZKZ2TRP.js";
+import "./chunk-XBIACVCO.js";
 import "./chunk-6GC5SGFE.js";
 import "./chunk-MGN7VHWQ.js";
 import "./chunk-5IZL4DCV.js";
@@ -76,17 +76,18 @@ import "./chunk-H63EDPFJ.js";
 import "./chunk-PD6O7AXF.js";
 import "./chunk-YAZNBMNF.js";
 import "./chunk-7YX23JBA.js";
-import "./chunk-M75TBFKQ.js";
-import "./chunk-U3GQ33JC.js";
+import "./chunk-Z2OXSMZK.js";
+import "./chunk-SLTKP5WJ.js";
 import "./chunk-4RA3C3EV.js";
 import "./chunk-ROZJACKP.js";
 import "./chunk-54V4BZWP.js";
 import "./chunk-XZ4WBBB5.js";
 import "./chunk-H3HDXD3U.js";
-import "./chunk-DB5A3NHS.js";
-import "./chunk-ALUZN7BE.js";
-import "./chunk-6NKAQ74D.js";
-import "./chunk-OAZ5MFUB.js";
+import "./chunk-7LWRCOP7.js";
+import "./chunk-XMN6MMTU.js";
+import "./chunk-UU6MVCJ6.js";
+import "./chunk-3XGWCZ63.js";
+import "./chunk-5FOCXX5E.js";
 import "./chunk-PYPOFEMK.js";
 import "./chunk-WLEB7WCG.js";
 import "./chunk-VEWZZM3H.js";
@@ -95,24 +96,24 @@ import "./chunk-6HEM6HTQ.js";
 import "./chunk-XCAZF7KQ.js";
 import "./chunk-3PG3H5TD.js";
 import "./chunk-OD4FM2U7.js";
-import "./chunk-ZXWAQFDE.js";
-import "./chunk-OR7R6M5Z.js";
+import "./chunk-CFOCZPIQ.js";
+import "./chunk-IVYSVAC6.js";
 import "./chunk-LN4YGHTM.js";
 import "./chunk-JLNBQWZ2.js";
 import "./chunk-2PRQG7PV.js";
 import "./chunk-X6IRLNOO.js";
 import "./chunk-2F6NP3NT.js";
 import "./chunk-TERNBNJB.js";
-import "./chunk-UMKPSD35.js";
+import "./chunk-JF7SFXTG.js";
 import "./chunk-W4RVMTHR.js";
-import "./chunk-4BISW7RX.js";
+import "./chunk-AJE7FJVE.js";
 import "./chunk-ZRWB5D4H.js";
 import "./chunk-AGRPGAKR.js";
 import "./chunk-S4DDLTPX.js";
 import "./chunk-SFQ6QNL7.js";
-import "./chunk-D6WVJIS3.js";
-import "./chunk-KFY3SGN7.js";
 import "./chunk-33JBK2XP.js";
+import "./chunk-ORGWWNJG.js";
+import "./chunk-KFY3SGN7.js";
 import "./chunk-TQNRI55H.js";
 import "./chunk-6GUG4YNM.js";
 import "./chunk-JXS5PDQ7.js";
@@ -127,10 +128,10 @@ import "./chunk-3UXOZBHV.js";
 import "./chunk-P4BC54KI.js";
 import "./chunk-UQ7RN5HK.js";
 import "./chunk-IBTZEBUD.js";
-import "./chunk-A3BS64GV.js";
+import "./chunk-LCC5EZTT.js";
 import "./chunk-B5XMS73R.js";
-import "./chunk-7SI52C65.js";
 import "./chunk-L2EXJQJP.js";
+import "./chunk-7SI52C65.js";
 import "./chunk-RK6F44Y6.js";
 import "./chunk-NDAH7BJ5.js";
 import "./chunk-Z5LAYHGJ.js";
@@ -141,19 +142,19 @@ import "./chunk-H3FZVNRN.js";
 import "./chunk-HQ6NIBL6.js";
 import "./chunk-OADWQ5CR.js";
 import "./chunk-7WV3F5DQ.js";
-import "./chunk-6GIKAUTN.js";
+import "./chunk-MMJANTJX.js";
 import "./chunk-5RIRL3XL.js";
 import "./chunk-JGSKJHF7.js";
 import "./chunk-FF4KLI5W.js";
 import "./chunk-BEMWL2FZ.js";
-import "./chunk-NMIOW7XG.js";
-import "./chunk-WPCCNSWO.js";
+import "./chunk-4PTKFBST.js";
+import "./chunk-6UKL6IXM.js";
+import "./chunk-TQUWNX7C.js";
 import "./chunk-CYEPCZN5.js";
 import "./chunk-76QTEJ2Q.js";
 import "./chunk-JOASJWQR.js";
 import "./chunk-RN7MUWON.js";
 import "./chunk-FOVPSMGI.js";
-import "./chunk-TQUWNX7C.js";
 import "./chunk-Q4CAQGKQ.js";
 import "./chunk-CINZGPSJ.js";
 import "./chunk-ZFXCQPNO.js";
@@ -174,17 +175,17 @@ import "./chunk-3ONXXHQO.js";
 import "./chunk-Y56J7CXW.js";
 import "./chunk-2LSZVONP.js";
 import "./chunk-DEUNUKTD.js";
-import "./chunk-AMACWKM4.js";
-import "./chunk-A4BTPHIN.js";
+import "./chunk-IJHLC5CH.js";
+import "./chunk-Y7NWBBHV.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-J6A3CX5N.js";
 import "./chunk-C43KEWEV.js";
+import "./chunk-CPPS65WS.js";
 import "./chunk-RULE4VG5.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-MB5RSUW6.js";
 import "./chunk-6KYMPV2O.js";
-import "./chunk-CPPS65WS.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-FVQJYWH7.js";

package/dist/recall-planner-llm.js

@@ -5,10 +5,10 @@ import {
   FallbackLlmClient,
   fallbackLlmRuntimeContextFromConfig,
   gatewayTaskChainOptions
-} from "./chunk-A3BS64GV.js";
+} from "./chunk-LCC5EZTT.js";
 import "./chunk-B5XMS73R.js";
-import "./chunk-7SI52C65.js";
 import "./chunk-L2EXJQJP.js";
+import "./chunk-7SI52C65.js";
 import "./chunk-RK6F44Y6.js";
 import "./chunk-RGMVMVMF.js";
 import "./chunk-EYIEWJNI.js";

package/dist/response-guidance-recall.d.ts

@@ -3,6 +3,12 @@ import { ExplicitCueRecallEngine } from './explicit-cue-recall.js';
 interface ResponseGuidanceRecallOptions {
     engine: ExplicitCueRecallEngine | null | undefined;
     sessionId?: string;
+    /**
+     * Ordered, read-authorized LCM read key set (primary overlay → project/root
+     * fallbacks). When present, evidence is gathered across EVERY key and merged
+     * under this section's budget (#1505 codex P2). Falls back to `sessionId`.
+     */
+    sessionIds?: readonly (string | undefined)[];
     query: string;
     maxChars: number;
     maxItemChars?: number;

package/dist/response-guidance-recall.js

@@ -1,7 +1,8 @@
 import {
   buildResponseGuidanceRecallSection,
   shouldRecallResponseGuidance
-} from "./chunk-OZKZ2TRP.js";
+} from "./chunk-XBIACVCO.js";
+import "./chunk-5FOCXX5E.js";
 import "./chunk-PYPOFEMK.js";
 import "./chunk-PZ5AY32C.js";
 export {