@remnic/core 9.3.649 → 9.3.651

package/dist/{chunk-QKE4LHNR.js → chunk-4HYSMH7D.js}

@@ -1,6 +1,6 @@
 import {
   isValidCapsuleSince
-} from "./chunk-BUKK5SWA.js";
+} from "./chunk-KQAFEZQX.js";
 import {
   CAPSULE_ID_PATTERN
 } from "./chunk-WEHSQBFR.js";
@@ -432,4 +432,4 @@ export {
   actionConfidenceRequestSchema,
   validateRequest
 };
-//# sourceMappingURL=chunk-QKE4LHNR.js.map
+//# sourceMappingURL=chunk-4HYSMH7D.js.map

package/dist/{chunk-NMIOW7XG.js → chunk-4PTKFBST.js}

@@ -1,6 +1,6 @@
 import {
   createSearchBackend
-} from "./chunk-WPCCNSWO.js";
+} from "./chunk-6UKL6IXM.js";
 import {
   namespaceIdentityToken,
   normalizeNamespaceIdentity
@@ -257,4 +257,4 @@ export {
   namespaceCollectionName,
   NamespaceSearchRouter
 };
-//# sourceMappingURL=chunk-NMIOW7XG.js.map
+//# sourceMappingURL=chunk-4PTKFBST.js.map

package/dist/{chunk-DDRNDPX4.js → chunk-4SKKVWLQ.js}

@@ -1,6 +1,6 @@
 import {
   getVerdictKind
-} from "./chunk-M75TBFKQ.js";
+} from "./chunk-Z2OXSMZK.js";
 import {
   scoreImportance
 } from "./chunk-JXS5PDQ7.js";
@@ -1161,4 +1161,4 @@ export {
   syncWearableSource,
   defaultTimezone
 };
-//# sourceMappingURL=chunk-DDRNDPX4.js.map
+//# sourceMappingURL=chunk-4SKKVWLQ.js.map

package/dist/chunk-5FOCXX5E.js

@@ -0,0 +1,34 @@
+// src/lcm-fallback-read.ts
+var UNDEFINED_SESSION_SENTINEL = " <lcm-sessionless>";
+function resolveLcmReadSessionIds(target) {
+  const source = target.sessionIds && target.sessionIds.length > 0 ? target.sessionIds : [target.sessionId];
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const sessionId of source) {
+    const key = sessionId === void 0 ? UNDEFINED_SESSION_SENTINEL : sessionId;
+    if (seen.has(key)) continue;
+    seen.add(key);
+    out.push(sessionId);
+  }
+  return out.length > 0 ? out : [target.sessionId];
+}
+async function gatherAcrossReadSessions(sessionIds, gather) {
+  if (sessionIds.length <= 1) {
+    for (const sessionId of sessionIds) {
+      await gather(sessionId);
+    }
+    return;
+  }
+  for (const sessionId of sessionIds) {
+    try {
+      await gather(sessionId);
+    } catch {
+    }
+  }
+}
+
+export {
+  resolveLcmReadSessionIds,
+  gatherAcrossReadSessions
+};
+//# sourceMappingURL=chunk-5FOCXX5E.js.map

package/dist/chunk-5FOCXX5E.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lcm-fallback-read.ts"],"sourcesContent":["/**\n * Shared helper for reading LCM-backed recall sections across the ordered,\n * read-authorized fallback key set (#1505 codex P2 \"Merge LCM fallback reads\n * instead of short-circuiting\").\n *\n * Background: a branch-scoped session archives its LCM rows under whichever\n * coding-overlay namespace was effective at write time, so its evidence can be\n * split across the primary overlay key AND the project / root fallback keys.\n * Normal QMD/file recall already searches the primary namespace PLUS\n * `codingOverlay.readFallbacks` and MERGES the rows. The LCM read path must do\n * the same: query EVERY authorized read key and merge the candidate evidence\n * into each section's existing dedupe + rank + budget pass, instead of stopping\n * at the first key that happens to yield a (possibly weak) hit.\n *\n * Each section already owns a section-appropriate dedupe (a `seen` set or a\n * `rankAndDedupe…` step), so the fan-out only needs to resolve the ordered,\n * deduped read-key set and UNION the per-key candidates into that existing\n * pipeline — the budget is then applied exactly once to the union. Centralizing\n * the key-set resolution here (rather than re-implementing per builder) follows\n * CLAUDE.md rule 22 (scope resolution must be deduplicated).\n */\n\n/** A recall section's LCM read target: either a single key or an ordered set. */\nexport interface LcmReadSessionTarget {\n  /**\n   * The single LCM read `session_id` (pre-#1505 behavior). `undefined` means a\n   * sessionless, archive-wide read with no `session_id` filter.\n   */\n  sessionId?: string;\n  /**\n   * The ordered, read-authorized LCM read key set (primary overlay key first,\n   * then project / root fallbacks) the orchestrator derived from the same\n   * readable namespace set normal recall searches. When present and non-empty,\n   * it supersedes `sessionId`.\n   */\n  sessionIds?: readonly (string | undefined)[];\n}\n\n// `undefined` (a sessionless, archive-wide read) is a distinct, legitimate read\n// target, so it needs a non-string sentinel in the dedupe set. A leading space\n// keeps it disjoint from every real session key / namespaced LCM key (which are\n// `[A-Za-z0-9._-]` plus the U+001F namespace sentinel, never leading-space).\nconst UNDEFINED_SESSION_SENTINEL = \" <lcm-sessionless>\";\n\n/**\n * Resolve the ordered, deduped set of LCM read `session_id`s a recall section\n * must query.\n *\n * When `sessionIds` is provided (the #1505 fallback unification), it is used\n * verbatim, deduped while preserving first-seen order so the caller queries\n * keys in priority order (primary overlay → fallbacks) without re-querying an\n * identical key (e.g. when two namespaces both collapse to the default store).\n * Otherwise the section reads under the single `sessionId`, so the result is\n * `[sessionId]` — byte-for-byte the pre-#1505 single-key behavior, including a\n * single `undefined` for a sessionless archive-wide read.\n */\nexport function resolveLcmReadSessionIds(\n  target: LcmReadSessionTarget,\n): Array<string | undefined> {\n  const source =\n    target.sessionIds && target.sessionIds.length > 0\n      ? target.sessionIds\n      : [target.sessionId];\n  const seen = new Set<string>();\n  const out: Array<string | undefined> = [];\n  for (const sessionId of source) {\n    const key = sessionId === undefined ? UNDEFINED_SESSION_SENTINEL : sessionId;\n    if (seen.has(key)) continue;\n    seen.add(key);\n    out.push(sessionId);\n  }\n  // Defensive: an all-empty `sessionIds` still collapses to the single-key path.\n  return out.length > 0 ? out : [target.sessionId];\n}\n\n/**\n * Run a per-key LCM `gather` across the resolved read-key set with FAULT\n * ISOLATION across keys (#1505 codex P2 review follow-up).\n *\n * A recall section that reads every key in a bare `for…await` loop loses the\n * WHOLE section if any one key throws (e.g. a `SqliteError` from a corrupt or\n * locked fallback index) — even when the primary overlay key already gathered\n * evidence. The pre-#1505 first-non-empty read never had this problem: it\n * returned the primary key's non-empty result without ever touching a failing\n * fallback. This helper restores that resilience for the merged path: when more\n * than one key is read, a per-key failure is contained so the other keys'\n * evidence survives (best-effort recall — a total failure degrades to an empty\n * section, which the orchestrator already treats as \"no evidence\").\n *\n * SINGLE-KEY is byte-for-byte the pre-#1505 behavior: the gather runs directly,\n * so a failure PROPAGATES exactly as before (the caller / orchestrator catch\n * still logs it). Fault isolation only engages once there is a fallback key that\n * could fail independently of the primary.\n */\nexport async function gatherAcrossReadSessions(\n  sessionIds: ReadonlyArray<string | undefined>,\n  gather: (sessionId: string | undefined) => Promise<void>,\n): Promise<void> {\n  if (sessionIds.length <= 1) {\n    for (const sessionId of sessionIds) {\n      await gather(sessionId);\n    }\n    return;\n  }\n  for (const sessionId of sessionIds) {\n    try {\n      await gather(sessionId);\n    } catch {\n      // One read key failed; keep the evidence already gathered from the other\n      // keys instead of discarding the whole section.\n    }\n  }\n}\n"],"mappings":";AA0CA,IAAM,6BAA6B;AAc5B,SAAS,yBACd,QAC2B;AAC3B,QAAM,SACJ,OAAO,cAAc,OAAO,WAAW,SAAS,IAC5C,OAAO,aACP,CAAC,OAAO,SAAS;AACvB,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,MAAiC,CAAC;AACxC,aAAW,aAAa,QAAQ;AAC9B,UAAM,MAAM,cAAc,SAAY,6BAA6B;AACnE,QAAI,KAAK,IAAI,GAAG,EAAG;AACnB,SAAK,IAAI,GAAG;AACZ,QAAI,KAAK,SAAS;AAAA,EACpB;AAEA,SAAO,IAAI,SAAS,IAAI,MAAM,CAAC,OAAO,SAAS;AACjD;AAqBA,eAAsB,yBACpB,YACA,QACe;AACf,MAAI,WAAW,UAAU,GAAG;AAC1B,eAAW,aAAa,YAAY;AAClC,YAAM,OAAO,SAAS;AAAA,IACxB;AACA;AAAA,EACF;AACA,aAAW,aAAa,YAAY;AAClC,QAAI;AACF,YAAM,OAAO,SAAS;AAAA,IACxB,QAAQ;AAAA,IAGR;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-XUGVP7ZU.js → chunk-5WSDHTBO.js}

@@ -4,7 +4,7 @@ import {
   loadSyncState,
   syncWearableSource,
   wearableSourceLabel
-} from "./chunk-DDRNDPX4.js";
+} from "./chunk-4SKKVWLQ.js";
 import {
   migrateFromEngram
 } from "./chunk-7HYPN2GC.js";
@@ -19,7 +19,7 @@ import {
 } from "./chunk-666A3MOW.js";
 import {
   LcmEngine
-} from "./chunk-WEPMT6SC.js";
+} from "./chunk-V25ZAOSB.js";
 import {
   chunkTranscriptEntries
 } from "./chunk-TECVW3JP.js";
@@ -29,7 +29,7 @@ import {
 import {
   CompoundingEngine,
   defaultTierMigrationCycleBudget
-} from "./chunk-Z3PZRDLW.js";
+} from "./chunk-PRQXUSQV.js";
 import {
   SharedContextManager
 } from "./chunk-DRD2Q7HQ.js";
@@ -52,11 +52,11 @@ import {
 } from "./chunk-UHGBNIOS.js";
 import {
   HourlySummarizer
-} from "./chunk-IMWFHBG2.js";
+} from "./chunk-QWRC7GIO.js";
 import {
   buildTargetedFactRecallSection,
   shouldRecallTargetedFactEvidence
-} from "./chunk-VWT3F4IV.js";
+} from "./chunk-PS3SYNHP.js";
 import {
   applyTemporalSupersession,
   normalizeSupersessionKey,
@@ -71,7 +71,7 @@ import {
 import {
   buildResponseGuidanceRecallSection,
   shouldRecallResponseGuidance
-} from "./chunk-OZKZ2TRP.js";
+} from "./chunk-XBIACVCO.js";
 import {
   mergeWithAgentResults,
   runDirectAgent,
@@ -154,10 +154,10 @@ import {
   getVerdictKind,
   judgeFactDurability,
   validateProcedureExtraction
-} from "./chunk-M75TBFKQ.js";
+} from "./chunk-Z2OXSMZK.js";
 import {
   ExtractionEngine
-} from "./chunk-U3GQ33JC.js";
+} from "./chunk-SLTKP5WJ.js";
 import {
   parseMemoryActionEligibilityContext
 } from "./chunk-ROZJACKP.js";
@@ -170,19 +170,19 @@ import {
 import {
   buildFocusedListRecallSection,
   shouldRecallFocusedListEvidence
-} from "./chunk-DB5A3NHS.js";
+} from "./chunk-7LWRCOP7.js";
 import {
   buildEntityRecallSection,
   entityRecentTranscriptLookbackHours,
   readRecentEntityTranscriptEntries
-} from "./chunk-ALUZN7BE.js";
+} from "./chunk-XMN6MMTU.js";
 import {
   buildEventOrderRecallSection,
   shouldRecallEventOrderEvidence
-} from "./chunk-6NKAQ74D.js";
+} from "./chunk-UU6MVCJ6.js";
 import {
   buildExplicitCueRecallSection
-} from "./chunk-OAZ5MFUB.js";
+} from "./chunk-3XGWCZ63.js";
 import {
   formatDaySummaryMemories
 } from "./chunk-WLEB7WCG.js";
@@ -210,7 +210,7 @@ import {
   materializeAfterSemanticConsolidation,
   parseConsolidationResponse,
   parseOperatorAwareConsolidationResponse
-} from "./chunk-ZXWAQFDE.js";
+} from "./chunk-CFOCZPIQ.js";
 import {
   normalizeReplaySessionKey
 } from "./chunk-2PRQG7PV.js";
@@ -219,25 +219,25 @@ import {
 } from "./chunk-X6IRLNOO.js";
 import {
   searchVerifiedEpisodes
-} from "./chunk-UMKPSD35.js";
+} from "./chunk-JF7SFXTG.js";
 import {
   ThreadingManager
 } from "./chunk-W4RVMTHR.js";
 import {
   searchVerifiedSemanticRules
-} from "./chunk-4BISW7RX.js";
+} from "./chunk-AJE7FJVE.js";
 import {
   searchWorkProductLedgerEntries
 } from "./chunk-ZRWB5D4H.js";
 import {
   TranscriptManager
 } from "./chunk-AGRPGAKR.js";
-import {
-  NamespaceStorageRouter
-} from "./chunk-D6WVJIS3.js";
 import {
   PolicyRuntimeManager
 } from "./chunk-33JBK2XP.js";
+import {
+  NamespaceStorageRouter
+} from "./chunk-ORGWWNJG.js";
 import {
   isAboveImportanceThreshold,
   scoreImportance
@@ -273,7 +273,7 @@ import {
   FallbackLlmClient,
   fallbackLlmRuntimeContextFromConfig,
   gatewayTaskChainOptions
-} from "./chunk-A3BS64GV.js";
+} from "./chunk-LCC5EZTT.js";
 import {
   compileCorrectionRule,
   correctionsFilePath,
@@ -303,8 +303,9 @@ import {
 import {
   clusterByKey,
   combineNamespaces,
+  lcmReadSessionIdsForNamespaces,
   resolveCodingNamespaceOverlay
-} from "./chunk-6GIKAUTN.js";
+} from "./chunk-MMJANTJX.js";
 import {
   listTrustZoneRecords,
   searchTrustZoneRecords
@@ -317,11 +318,11 @@ import {
 } from "./chunk-BEMWL2FZ.js";
 import {
   NamespaceSearchRouter
-} from "./chunk-NMIOW7XG.js";
+} from "./chunk-4PTKFBST.js";
 import {
   createConversationIndexRuntime,
   createSearchBackend
-} from "./chunk-WPCCNSWO.js";
+} from "./chunk-6UKL6IXM.js";
 import {
   NoopSearchBackend
 } from "./chunk-CYEPCZN5.js";
@@ -352,7 +353,7 @@ import {
 } from "./chunk-Y56J7CXW.js";
 import {
   buildChainFollowupGenerator
-} from "./chunk-AMACWKM4.js";
+} from "./chunk-IJHLC5CH.js";
 import {
   ContentHashIndex,
   StorageManager,
@@ -362,7 +363,7 @@ import {
   normalizeEntityName,
   parseEntityFile,
   stripAttributesSuffix
-} from "./chunk-A4BTPHIN.js";
+} from "./chunk-Y7NWBBHV.js";
 import {
   isValidTranscriptDate,
   loadSpeakerRegistry,
@@ -2512,6 +2513,52 @@ var Orchestrator = class _Orchestrator {
     );
     return this.applyCodingNamespaceOverlay(sessionKey, base);
   }
+  /**
+   * Effective namespace a same-session LCM/structured-history READER must use
+   * to find what the access `observe` surface WROTE (#1495 thread 2).
+   *
+   * This MUST mirror the `observe` scope plan's write-namespace resolution, NOT
+   * `resolveSelfNamespace`: when no coding overlay applies, `observe` archives
+   * under `config.defaultNamespace` (an unqualified observed turn is NOT moved
+   * to the principal self namespace — identical to
+   * `resolveCodingScopedWriteNamespace`/`memory_store`, rule 39). Only when a
+   * coding overlay actually changes the namespace does the writer (and so the
+   * reader) use the overlaid `project-*` namespace. Returning the self base for
+   * the no-overlay case would prefix the read key with a namespace the writer
+   * never used, so the reader would miss its own evidence.
+   *
+   * Honours the access-surface `principalOverride` (#1505 thread 2, codex): when
+   * a recall supplies an authenticated principal NOT encoded in the raw
+   * `sessionKey`, `observe` archived LCM under THAT principal's base namespace.
+   * Deriving the base from `resolvePrincipal(sessionKey)` alone could fall back
+   * to `default`, so principal `alice` observing `sess-1` would write under
+   * `alice` but READ under `default`. Threading the override here keeps the read
+   * base identical to the write base.
+   *
+   * READ-AUTHORIZATION gate (#1505 round 3, codex P2 "Gate LCM recall keys by
+   * readable namespaces"): the overlay LCM read key is a `<principal>-project-*`
+   * sub-namespace of the principal SELF base. The normal recall namespace set
+   * below only substitutes the coding overlay when the principal SELF base is
+   * actually in the readable recall set (`recallNamespacesForPrincipal` — gated
+   * by `defaultRecallNamespaces.includes("self")` AND `canReadNamespace`). If a
+   * principal can WRITE but not READ its self namespace (or `defaultRecall-
+   * Namespaces` omits `self`), QMD/file recall never touches those overlay rows,
+   * so neither may the LCM read key. When the self base is NOT readable, fall
+   * back to the default store — exactly what an unqualified, unauthorized recall
+   * resolves to — rather than injecting overlay rows the rest of recall excludes
+   * (rule 42 read/write parity; rule 48 least-privilege).
+   */
+  lcmReadNamespaceForSession(sessionKey, principalOverride) {
+    const principal = typeof principalOverride === "string" && principalOverride.length > 0 ? principalOverride : this.resolvePrincipal(sessionKey);
+    const base = defaultNamespaceForPrincipal(principal, this.config);
+    const overlaid = this.applyCodingNamespaceOverlay(sessionKey, base);
+    if (overlaid === base) return this.config.defaultNamespace;
+    const selfReadableInRecall = recallNamespacesForPrincipal(
+      principal,
+      this.config
+    ).includes(base);
+    return selfReadableInRecall ? overlaid : this.config.defaultNamespace;
+  }
   /**
    * Attach a coding-agent context to a session (issue #569). Called by the
    * Claude Code / Codex / Cursor connectors at session start after
@@ -3378,7 +3425,7 @@ var Orchestrator = class _Orchestrator {
     if (signal.aborted) return;
     if (!this.wearablesAutoSyncHandle && this.config.wearables.enabled && this.config.wearables.autoSyncEnabled && Object.values(this.config.wearables.sources).some((source) => source.enabled)) {
       try {
-        const { startWearablesAutoSync } = await import("./auto-sync-54QQHOG5.js");
+        const { startWearablesAutoSync } = await import("./auto-sync-5CJBJMPZ.js");
         if (signal.aborted) return;
         this.wearablesAutoSyncHandle = startWearablesAutoSync(
           {
@@ -6142,6 +6189,30 @@ ${r.snippet.trim()}
       } else {
         recallNamespaces = readableRecallNamespaces;
       }
+      const codingOverlaySelfReadable = codingOverlay !== null && readableRecallNamespaces.includes(principalSelfNamespace);
+      let lcmReadNamespaces;
+      if (namespaceOverride) {
+        lcmReadNamespaces = [namespaceOverride];
+      } else if (codingOverlay && codingSelfNamespace && codingOverlaySelfReadable) {
+        const fallbackNs = codingOverlay.readFallbacks.map(
+          (fallback) => combineNamespaces(principalSelfNamespace, fallback)
+        );
+        lcmReadNamespaces = [codingSelfNamespace, ...fallbackNs];
+      } else {
+        lcmReadNamespaces = [this.config.defaultNamespace];
+      }
+      const lcmReadSessionIds = lcmReadSessionIdsForNamespaces(
+        lcmReadNamespaces,
+        sessionKey,
+        this.config.defaultNamespace
+      );
+      const firstNonEmptyLcmRead = async (read, isEmpty, empty) => {
+        for (const lcmSessionId of lcmReadSessionIds) {
+          const value = await read(lcmSessionId);
+          if (!isEmpty(value)) return value;
+        }
+        return empty;
+      };
       const qmdAvailable = this.qmd.isAvailable();
       let graphDecisionStatus = recallDecision.plannedMode === "graph_mode" ? "skipped" : "not_requested";
       let graphDecisionReason = recallDecision.graphReason;
@@ -7935,7 +8006,13 @@ ${formatted}`;
         try {
           const explicitCueSection = await buildExplicitCueRecallSection({
             engine: this.lcmEngine,
-            sessionId: sessionKey,
+            // #1495 thread 3 + #1505 fallback unification: read across the ordered
+            // LCM read key set (primary overlay → coding fallbacks) so a
+            // branch-scoped session finds its own explicit-cue evidence even when
+            // archived at project/root scope (rule 39). #1505 codex P2: the builder
+            // MERGES candidates across every key under its single budget instead of
+            // short-circuiting on the first non-empty key.
+            sessionIds: lcmReadSessionIds,
             query: retrievalQuery,
             maxChars: explicitCueMaxChars,
             maxReferences: this.getRecallSectionNumber("explicit-cue", "maxResults") ?? this.config.explicitCueRecallMaxReferences
@@ -7959,7 +8036,11 @@ ${formatted}`;
         try {
           const targetedFactSection = await buildTargetedFactRecallSection({
             engine: this.lcmEngine,
-            sessionId: sessionKey,
+            // #1495 + #1505 fallback unification: read across the ordered LCM read
+            // key set so a branch-scoped session finds its own targeted-fact
+            // evidence even when archived at project/root scope. #1505 codex P2: the
+            // builder MERGES candidates across every key under its single budget.
+            sessionIds: lcmReadSessionIds,
             query: retrievalQuery,
             maxChars: targetedFactMaxChars,
             maxSearchResults: this.getRecallSectionNumber("targeted-facts", "maxResults") ?? this.config.targetedFactRecallMaxResults,
@@ -7985,7 +8066,12 @@ ${formatted}`;
         try {
           const focusedListSection = await buildFocusedListRecallSection({
             engine: this.lcmEngine,
-            sessionId: sessionKey,
+            // #1495 thread 3 + #1505 fallback unification: read across the ordered
+            // LCM read key set so a branch-scoped session reads its own
+            // focused-list/count evidence even at project/root scope (rule 39).
+            // #1505 codex P2: the builder MERGES candidates across every key under
+            // its single budget.
+            sessionIds: lcmReadSessionIds,
             query: retrievalQuery,
             maxChars: focusedListMaxChars,
             maxSearchResults: this.getRecallSectionNumber("focused-list", "maxResults") ?? this.config.focusedListRecallMaxResults,
@@ -8014,7 +8100,12 @@ ${formatted}`;
         try {
           const responseGuidanceSection = await buildResponseGuidanceRecallSection({
             engine: this.lcmEngine,
-            sessionId: sessionKey,
+            // #1495 thread 3 + #1505 fallback unification: read across the ordered
+            // LCM read key set so a branch-scoped session reads its own
+            // response-guidance evidence even at project/root scope (rule 39).
+            // #1505 codex P2: the builder MERGES candidates across every key under
+            // its single budget.
+            sessionIds: lcmReadSessionIds,
             query: retrievalQuery,
             maxChars: responseGuidanceMaxChars,
             maxSearchResults: this.getRecallSectionNumber("response-guidance", "maxResults") ?? this.config.responseGuidanceRecallMaxResults,
@@ -8039,15 +8130,19 @@ ${formatted}`;
         this.config.eventOrderRecallEnabled
       ) && eventOrderMaxChars !== 0 && this.lcmEngine?.enabled && recallMode !== "no_recall" && shouldRecallEventOrderEvidence(retrievalQuery)) {
         try {
-          const eventOrderSection = await buildEventOrderRecallSection({
-            engine: this.lcmEngine,
-            sessionId: sessionKey,
-            query: retrievalQuery,
-            maxChars: eventOrderMaxChars,
-            maxItems: this.getRecallSectionNumber("event-order", "maxResults") ?? this.config.eventOrderRecallMaxResults,
-            maxScanWindowTurns: this.getRecallSectionNumber("event-order", "maxTurns") ?? this.config.eventOrderRecallScanWindowTurns,
-            maxScanWindowTokens: this.getRecallSectionNumber("event-order", "maxTokens") ?? this.config.eventOrderRecallScanWindowTokens
-          });
+          const eventOrderSection = await firstNonEmptyLcmRead(
+            (lcmSessionId) => buildEventOrderRecallSection({
+              engine: this.lcmEngine,
+              sessionId: lcmSessionId,
+              query: retrievalQuery,
+              maxChars: eventOrderMaxChars,
+              maxItems: this.getRecallSectionNumber("event-order", "maxResults") ?? this.config.eventOrderRecallMaxResults,
+              maxScanWindowTurns: this.getRecallSectionNumber("event-order", "maxTurns") ?? this.config.eventOrderRecallScanWindowTurns,
+              maxScanWindowTokens: this.getRecallSectionNumber("event-order", "maxTokens") ?? this.config.eventOrderRecallScanWindowTokens
+            }),
+            (s) => !s,
+            ""
+          );
           if (eventOrderSection) {
             this.appendRecallSection(
               sectionBuckets,
@@ -8182,9 +8277,26 @@ ${tmtNode.summary}`
       }
       if (this.lcmEngine?.enabled && recallMode !== "minimal" && recallMode !== "no_recall") {
         try {
-          const structuredMatches = await this.lcmEngine.searchStructuredParts(
-            sessionKey ?? "default",
-            retrievalQuery
+          const structuredSettled = await Promise.allSettled(
+            lcmReadSessionIds.map(
+              (lcmSessionId) => this.lcmEngine.searchStructuredParts(lcmSessionId ?? "", retrievalQuery)
+            )
+          );
+          for (const settled of structuredSettled) {
+            if (settled.status === "rejected") {
+              log.debug(
+                `LCM structured-parts read failed for one key: ${settled.reason}`
+              );
+            }
+          }
+          const seenStructuredParts = /* @__PURE__ */ new Set();
+          const structuredMatches = structuredSettled.flatMap((settled) => settled.status === "fulfilled" ? settled.value : []).filter((match) => {
+            const key = `${match.session_id} ${match.turn_index} ${match.part_id}`;
+            if (seenStructuredParts.has(key)) return false;
+            seenStructuredParts.add(key);
+            return true;
+          }).sort(
+            (a, b) => (b.score ?? 0) - (a.score ?? 0) || b.turn_index - a.turn_index
           );
           const structuredSection = this.lcmEngine.formatStructuredRecall(
             structuredMatches,
@@ -8208,9 +8320,13 @@ ${tmtNode.summary}`
               }
             }
           }
-          const lcmSection = await this.lcmEngine.assembleRecall(
-            sessionKey ?? "default",
-            this.config.recallBudgetChars
+          const lcmSection = await firstNonEmptyLcmRead(
+            (lcmSessionId) => this.lcmEngine.assembleRecall(
+              lcmSessionId ?? "",
+              this.config.recallBudgetChars
+            ),
+            (s) => !s,
+            ""
           );
           if (lcmSection) {
             this.appendRecallSection(
@@ -9425,6 +9541,8 @@ _Context: ${topQuestion.context}_`
           bufferKey,
           extractionDeadlineMs: options.deadlineMs,
           abortSignal: options.abortSignal,
+          writeNamespaceOverride: options.writeNamespaceOverride,
+          principalOverride: options.principalOverride,
           onTaskSettled: (err) => err ? reject(err) : resolve()
         }).catch(reject);
       })
@@ -9786,7 +9904,8 @@ _Context: ${topQuestion.context}_`
           bufferKey,
           abortSignal: options.abortSignal,
           failOnExtractionFailure: options.failOnExtractionFailure === true,
-          writeNamespaceOverride: options.writeNamespaceOverride
+          writeNamespaceOverride: options.writeNamespaceOverride,
+          principalOverride: options.principalOverride
         });
         settleTask(void 0, result);
       } catch (err) {
@@ -9963,7 +10082,7 @@ ${normalized}`).digest("hex");
         durableOutputCount: 0
       };
     }
-    const principal = resolvePrincipal(sessionKey, this.config);
+    const principal = typeof options.principalOverride === "string" && options.principalOverride.length > 0 ? options.principalOverride : resolvePrincipal(sessionKey, this.config);
     const selfNamespace = typeof options.writeNamespaceOverride === "string" && options.writeNamespaceOverride.length > 0 ? options.writeNamespaceOverride : this.applyCodingNamespaceOverlay(
       sessionKey,
       defaultNamespaceForPrincipal(principal, this.config)
@@ -14302,4 +14421,4 @@ export {
   resolvePersistedMemoryRelativePath,
   Orchestrator
 };
-//# sourceMappingURL=chunk-XUGVP7ZU.js.map
+//# sourceMappingURL=chunk-5WSDHTBO.js.map