@remnic/core 9.3.653 → 9.3.655

package/dist/chunk-XRKQOQLY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/namespaces/storage.ts"],"sourcesContent":["import path from \"node:path\";\nimport { access, lstat, readdir } from \"node:fs/promises\";\nimport { isSafeRouteNamespace } from \"../routing/engine.js\";\nimport { StorageManager } from \"../storage.js\";\nimport type { PluginConfig } from \"../types.js\";\nimport { ALL_CATEGORY_DIRS } from \"../utils/category-dir.js\";\nimport { namespaceIdentityToken, normalizeNamespaceIdentity } from \"./identity.js\";\n\nasync function exists(p: string): Promise<boolean> {\n  try {\n    await access(p);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nasync function hasStoredEntries(p: string): Promise<boolean> {\n  try {\n    const entry = await lstat(p);\n    if (entry.isSymbolicLink()) return true;\n    if (!entry.isDirectory()) return true;\n    const children = await readdir(p, { withFileTypes: true });\n    for (const child of children) {\n      const childPath = path.join(p, child.name);\n      if (child.isSymbolicLink() || child.isFile()) return true;\n      if (child.isDirectory() && (await hasStoredEntries(childPath))) return true;\n    }\n    return false;\n  } catch {\n    return false;\n  }\n}\n\n// Build a per-namespace directory under `<memoryDir>/namespaces` and assert the\n// resolved path stays inside that base. Namespace identifiers can originate from\n// operator config (config.defaultNamespace) and request-derived routing, so this\n// containment check prevents directory traversal (CodeQL js/path-injection).\n// For safe segments this returns exactly `path.join(base, segment)`, so there is\n// no behavioral change for valid namespaces.\nfunction resolveNamespaceDir(memoryDir: string, segment: string): string {\n  // Mirror isSafeRouteNamespace's separator/parent-ref rejection (without its\n  // 64-char cap, so identity tokens still pass). Rejecting separators and \"..\"\n  // up front keeps the value a single contained child of <memoryDir>/namespaces.\n  if (\n    segment.length === 0 ||\n    segment.includes(\"/\") ||\n    segment.includes(\"\\\\\") ||\n    segment.includes(\"..\") ||\n    path.isAbsolute(segment)\n  ) {\n    throw new Error(`unsafe namespace path segment: ${segment}`);\n  }\n  return path.join(memoryDir, \"namespaces\", segment);\n}\n\nconst LEGACY_NAMESPACE_CONTENT_CHILDREN = [\n  ...ALL_CATEGORY_DIRS,\n  \"entities\",\n  \"artifacts\",\n  \"identity\",\n  \"config\",\n  \"summaries\",\n  \"profile.md\",\n] as const;\n\nconst LEGACY_NAMESPACE_RUNTIME_CHILDREN = [\"state\"] as const;\n\nasync function hasAnyLegacyData(\n  rootDir: string,\n  options: { includeRuntimeState?: boolean } = {},\n): Promise<boolean> {\n  const children = options.includeRuntimeState === true\n    ? [...LEGACY_NAMESPACE_CONTENT_CHILDREN, ...LEGACY_NAMESPACE_RUNTIME_CHILDREN]\n    : LEGACY_NAMESPACE_CONTENT_CHILDREN;\n  for (const child of children) {\n    if (await hasStoredEntries(path.join(rootDir, child))) return true;\n  }\n  return false;\n}\n\nasync function hasAnyNamespaceStorageMarker(\n  rootDir: string,\n  options: { includeRuntimeState?: boolean } = {},\n): Promise<boolean> {\n  const children = options.includeRuntimeState === true\n    ? [...LEGACY_NAMESPACE_CONTENT_CHILDREN, ...LEGACY_NAMESPACE_RUNTIME_CHILDREN]\n    : LEGACY_NAMESPACE_CONTENT_CHILDREN;\n  for (const child of children) {\n    if (await exists(path.join(rootDir, child))) return true;\n  }\n  return false;\n}\n\n/**\n * Storage routing for namespaces.\n *\n * Compatibility note:\n * - When namespaces are enabled, existing raw namespace roots are preserved.\n *   New namespace roots use tokenized names under `memoryDir/namespaces/<token>`.\n * - The default namespace continues to use the legacy `memoryDir` root unless the caller\n *   has created `memoryDir/namespaces/<defaultNamespace>` (in which case we use that).\n *\n * This avoids surprising \"lost memories\" when an install flips namespaces on without\n * migrating existing data.\n */\n/**\n * Optional hooks for the storage router. `onResolve` fires whenever a namespace's\n * storage is resolved/created, so a downstream consumer (e.g. the namespace\n * catalog, issue #1499) can register the namespace. The hook MUST NOT throw into\n * the router; the router invokes it defensively and a hook failure never affects\n * storage resolution.\n *\n * The hook MAY return (or resolve to) a boolean indicating whether the\n * registration actually PERSISTED (round 6, codex P2 — NEFoX). When it resolves\n * to `false` (a dropped/no-op registration), the router does NOT mark the\n * (namespace, storageDir) pair as notified, so the next resolve RETRIES it\n * instead of suppressing it forever. A `void`/`undefined` result is treated as\n * success (legacy hooks).\n */\nexport interface NamespaceStorageRouterHooks {\n  onResolve?: (\n    namespace: string,\n    storageDir: string,\n  ) => void | boolean | Promise<void | boolean>;\n}\n\n/**\n * Resolve the runtime storage root for the configured DEFAULT namespace.\n *\n * Shared between the live router (`NamespaceStorageRouter.defaultNamespaceRoot`)\n * and the rebuildable catalog (`NamespaceCatalog.rebuildFromDisk`) so the two\n * can never diverge (CLAUDE.md rule #22/#42 — read & write paths resolve through\n * the same logic). The contract is: while legacy memory data still lives\n * directly under `memoryDir`, the default root stays `memoryDir`; only once the\n * legacy root is empty and a `namespaces/<default|token>` dir holds data does\n * the default migrate into that tokenized/legacy-named dir.\n */\nexport async function resolveDefaultNamespaceRoot(config: PluginConfig): Promise<string> {\n  if (!config.namespacesEnabled) {\n    return config.memoryDir;\n  }\n\n  // Build the legacy default root from the NORMALIZED (trimmed) name so a\n  // whitespace-padded `defaultNamespace` still finds the live `namespaces/default`\n  // root (NIabe). `storageFor()` classifies the trimmed value as the default, and\n  // the on-disk legacy dir is created under the trimmed name; using the raw spaced\n  // name here would look for `namespaces/<spaced>` and miss the real root, falling\n  // back to memoryDir/tokenized. `namespaceIdentityToken` already normalizes\n  // internally, so the tokenized path is unaffected.\n  const defaultIdentity = normalizeNamespaceIdentity(config.defaultNamespace);\n  const legacyNsDir = resolveNamespaceDir(config.memoryDir, defaultIdentity);\n  const tokenizedNsDir = resolveNamespaceDir(\n    config.memoryDir,\n    namespaceIdentityToken(config.defaultNamespace),\n  );\n  const tokenizedHasData =\n    (await exists(tokenizedNsDir)) &&\n    (await hasAnyNamespaceStorageMarker(tokenizedNsDir, { includeRuntimeState: true }));\n  const nsDir = tokenizedHasData\n    ? tokenizedNsDir\n    : (await exists(legacyNsDir))\n      ? legacyNsDir\n      : tokenizedNsDir;\n  return (await exists(nsDir)) && !(await hasAnyLegacyData(config.memoryDir))\n    ? nsDir\n    : config.memoryDir;\n}\n\n/**\n * Resolve the runtime storage root for ANY namespace exactly as the live router\n * would (`NamespaceStorageRouter.namespaceRoot`). Shared so the rebuildable\n * catalog records the SAME on-disk root the router routes to — a recall/read\n * touch must not guess `namespaces/<token>` when the router actually serves a\n * legacy raw-name dir or a migrated default root (CLAUDE.md rule #22/#42; round\n * 4, cursor Medium). The default namespace delegates to `resolveDefaultNamespaceRoot`;\n * every other namespace prefers the tokenized root when it has a storage marker,\n * else a legacy raw-name dir when present, else the tokenized root.\n */\nexport async function resolveNamespaceStorageRoot(\n  config: PluginConfig,\n  namespace: string,\n): Promise<string> {\n  if (!config.namespacesEnabled) return config.memoryDir;\n  // Compare on NORMALIZED identity so a whitespace-padded configured default name\n  // still routes to the default root rather than a tokenized non-default dir\n  // (NH-FH). The catalog keys records by the same normalized identity.\n  if (normalizeNamespaceIdentity(namespace) === normalizeNamespaceIdentity(config.defaultNamespace)) {\n    return resolveDefaultNamespaceRoot(config);\n  }\n  const legacyRoot = resolveNamespaceDir(config.memoryDir, namespace);\n  const tokenizedRoot = resolveNamespaceDir(config.memoryDir, namespaceIdentityToken(namespace));\n  if (\n    (await exists(tokenizedRoot)) &&\n    (await hasAnyNamespaceStorageMarker(tokenizedRoot, { includeRuntimeState: true }))\n  ) {\n    return tokenizedRoot;\n  }\n  return (await exists(legacyRoot)) ? legacyRoot : tokenizedRoot;\n}\n\nexport class NamespaceStorageRouter {\n  private readonly cache = new Map<string, StorageManager>();\n  private defaultNsRootResolved: string | null = null;\n  // Dedup the resolve hook (round 6, cursor Medium — NCNL2). Recall/extraction\n  // call `storageFor` repeatedly; firing `onResolve` (→ catalog loadCompacted +\n  // append) on every cache hit grows `namespaces.jsonl` without bound between\n  // rebuilds. We fire the hook only when the (namespace, storageDir) pair is new\n  // or its dir changed, so a steady-state cache hit is a no-op for the catalog.\n  private readonly notifiedResolved = new Map<string, string>();\n  // In-flight resolve-hook dedup (NFJV-, codex P2). The catalog's `onResolve`\n  // hook is ASYNC (it returns `registerResolved(...)`), so `notifiedResolved` is\n  // only set after the hook's promise SETTLES. Without tracking the in-flight\n  // window, a burst of `storageFor()` cache hits for the SAME namespace before\n  // the first registration finishes would each pass the `notifiedResolved` guard\n  // and fire their OWN `onResolve` — queueing N duplicate catalog touches + lock\n  // acquisitions despite the once-per-namespace intent. We therefore record the\n  // (namespace → storageDir) being registered BEFORE awaiting the hook so a\n  // concurrent call for the same pair skips firing. On SUCCESS the pair is\n  // promoted to `notifiedResolved` (future calls skip permanently); on `false`\n  // (dropped touch — e.g. rebuild-lock timeout) OR rejection the in-flight marker\n  // is CLEARED so a later `storageFor()` can RETRY the dropped registration. The\n  // entry is always removed when the promise settles, so the map cannot grow\n  // unbounded (one transient entry per concurrently-resolving namespace).\n  private readonly inFlightResolved = new Map<string, string>();\n\n  // Normalized (trimmed) default namespace identity (NH-FH). `storageFor`\n  // normalizes its input, so default-namespace branches must compare against the\n  // normalized config default too — otherwise a whitespace-padded configured\n  // default name routes the default namespace to a tokenized non-default root.\n  private readonly defaultNamespaceIdentity: string;\n\n  constructor(\n    private readonly config: PluginConfig,\n    private readonly hooks: NamespaceStorageRouterHooks = {},\n  ) {\n    this.defaultNamespaceIdentity = normalizeNamespaceIdentity(config.defaultNamespace);\n  }\n\n  private async defaultNamespaceRoot(): Promise<string> {\n    this.defaultNsRootResolved = await resolveDefaultNamespaceRoot(this.config);\n    return this.defaultNsRootResolved;\n  }\n\n  private async namespaceRoot(namespace: string): Promise<string> {\n    // NOTE: only used after defaultNamespaceRoot() resolution.\n    if (!this.config.namespacesEnabled) return this.config.memoryDir;\n    if (normalizeNamespaceIdentity(namespace) === this.defaultNamespaceIdentity) {\n      return this.defaultNsRootResolved ?? this.config.memoryDir;\n    }\n    return resolveNamespaceStorageRoot(this.config, namespace);\n  }\n\n  async storageFor(namespace: string): Promise<StorageManager> {\n    const ns = normalizeNamespaceIdentity(namespace || this.config.defaultNamespace);\n    if (ns !== this.defaultNamespaceIdentity && !isSafeRouteNamespace(ns)) {\n      throw new Error(`unsafe namespace: ${ns}`);\n    }\n    // Even when the default namespace is exempt from the check above, every\n    // on-disk path is built through resolveNamespaceDir(), which rejects\n    // traversal segments — so an unsafe configured default still cannot escape\n    // <memoryDir>/namespaces (CodeQL js/path-injection).\n\n    let root: string;\n    if (ns === this.defaultNamespaceIdentity) {\n      root = await this.defaultNamespaceRoot();\n      const cached = this.cache.get(ns);\n      if (cached && cached.dir === root) {\n        this.notifyResolved(ns, root);\n        return cached;\n      }\n    } else {\n      const cached = this.cache.get(ns);\n      root = await this.namespaceRoot(ns);\n      if (cached && cached.dir === root) {\n        this.notifyResolved(ns, root);\n        return cached;\n      }\n    }\n\n    const sm = new StorageManager(root, this.config.entitySchemas);\n    // Propagate the inline-attribution template so that router-created storages\n    // (used by extraction and shared-promotion paths) strip citations consistently,\n    // matching the behaviour of the primary this.storage instance in the orchestrator.\n    sm.citationTemplate = this.config.inlineSourceAttributionFormat;\n    this.cache.set(ns, sm);\n    this.notifyResolved(ns, root);\n    return sm;\n  }\n\n  /**\n   * Fire the resolve hook defensively. A hook failure (e.g. a catalog write\n   * error) MUST NOT crash storage resolution — see CLAUDE.md gotcha #13.\n   */\n  private notifyResolved(namespace: string, storageDir: string): void {\n    const hook = this.hooks.onResolve;\n    if (!hook) return;\n    // Skip when we've already SUCCESSFULLY notified this exact (namespace,\n    // storageDir) — a steady-state cache hit must not re-append to the catalog\n    // log (NCNL2). A changed dir (rare: migration/realignment) still re-fires\n    // once. We mark the pair as notified ONLY AFTER the hook succeeds, and CLEAR\n    // it on failure, so a dropped registration (e.g. rebuild-lock timeout) is\n    // RETRIED on the next cache hit instead of being suppressed forever (round 6,\n    // cursor Medium — ND3EJ).\n    if (this.notifiedResolved.get(namespace) === storageDir) return;\n    // In-flight dedup (NFJV-, codex P2): if a registration for this exact\n    // (namespace, storageDir) is already AWAITING its async hook, do not fire a\n    // second one. Without this, concurrent cache-hit bursts before the first\n    // append settles each pass the `notifiedResolved` guard above and queue\n    // duplicate catalog touches/lock acquisitions. A pair with a DIFFERENT\n    // in-flight dir (rare mid-migration realignment) still fires once.\n    if (this.inFlightResolved.get(namespace) === storageDir) return;\n    try {\n      // Handle BOTH synchronous throws and asynchronous rejections (round 6,\n      // codex P2 — NDo8C). The hook may be `async`; its rejected promise would\n      // bypass this try/catch and, where unhandled rejections are fatal, crash\n      // storage resolution. Mark the dedup pair as notified ONLY when the hook\n      // resolves to a PERSISTED result (round 6, codex P2 — NEFoX): a result of\n      // `false` means the registration was dropped/no-op (e.g. rebuild-lock\n      // timeout), so we must NOT suppress its retry. `void`/`undefined` is treated\n      // as success for legacy hooks. On rejection we leave it un-notified to retry.\n      //\n      // Record the in-flight marker BEFORE awaiting so concurrent calls for the\n      // same pair skip (NFJV-). It is always cleared once the promise settles, so\n      // the map holds at most one transient entry per concurrently-resolving\n      // namespace and cannot grow unbounded.\n      this.inFlightResolved.set(namespace, storageDir);\n      Promise.resolve(hook(namespace, storageDir)).then(\n        (persisted) => {\n          // Clear the in-flight marker ONLY if it is still ours (a newer resolve\n          // for a different dir may have replaced it).\n          if (this.inFlightResolved.get(namespace) === storageDir) {\n            this.inFlightResolved.delete(namespace);\n          }\n          if (persisted !== false) {\n            this.notifiedResolved.set(namespace, storageDir);\n          }\n          // On `false` (dropped touch) we intentionally do NOT mark notified, so\n          // a later `storageFor()` retries the registration. Clearing the\n          // in-flight marker above is what re-enables that retry.\n        },\n        () => {\n          // Registration failed — clear in-flight AND do NOT mark as notified, so\n          // it is retried on the next cache hit.\n          if (this.inFlightResolved.get(namespace) === storageDir) {\n            this.inFlightResolved.delete(namespace);\n          }\n          if (this.notifiedResolved.get(namespace) === storageDir) {\n            this.notifiedResolved.delete(namespace);\n          }\n        },\n      );\n    } catch {\n      // Synchronous throw: clear any in-flight marker we just set and leave the\n      // pair un-notified so a later resolve retries.\n      if (this.inFlightResolved.get(namespace) === storageDir) {\n        this.inFlightResolved.delete(namespace);\n      }\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAAA,OAAO,UAAU;AACjB,SAAS,QAAQ,OAAO,eAAe;AAOvC,eAAe,OAAO,GAA6B;AACjD,MAAI;AACF,UAAM,OAAO,CAAC;AACd,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,iBAAiB,GAA6B;AAC3D,MAAI;AACF,UAAM,QAAQ,MAAM,MAAM,CAAC;AAC3B,QAAI,MAAM,eAAe,EAAG,QAAO;AACnC,QAAI,CAAC,MAAM,YAAY,EAAG,QAAO;AACjC,UAAM,WAAW,MAAM,QAAQ,GAAG,EAAE,eAAe,KAAK,CAAC;AACzD,eAAW,SAAS,UAAU;AAC5B,YAAM,YAAY,KAAK,KAAK,GAAG,MAAM,IAAI;AACzC,UAAI,MAAM,eAAe,KAAK,MAAM,OAAO,EAAG,QAAO;AACrD,UAAI,MAAM,YAAY,KAAM,MAAM,iBAAiB,SAAS,EAAI,QAAO;AAAA,IACzE;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAQA,SAAS,oBAAoB,WAAmB,SAAyB;AAIvE,MACE,QAAQ,WAAW,KACnB,QAAQ,SAAS,GAAG,KACpB,QAAQ,SAAS,IAAI,KACrB,QAAQ,SAAS,IAAI,KACrB,KAAK,WAAW,OAAO,GACvB;AACA,UAAM,IAAI,MAAM,kCAAkC,OAAO,EAAE;AAAA,EAC7D;AACA,SAAO,KAAK,KAAK,WAAW,cAAc,OAAO;AACnD;AAEA,IAAM,oCAAoC;AAAA,EACxC,GAAG;AAAA,EACH;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,oCAAoC,CAAC,OAAO;AAElD,eAAe,iBACb,SACA,UAA6C,CAAC,GAC5B;AAClB,QAAM,WAAW,QAAQ,wBAAwB,OAC7C,CAAC,GAAG,mCAAmC,GAAG,iCAAiC,IAC3E;AACJ,aAAW,SAAS,UAAU;AAC5B,QAAI,MAAM,iBAAiB,KAAK,KAAK,SAAS,KAAK,CAAC,EAAG,QAAO;AAAA,EAChE;AACA,SAAO;AACT;AAEA,eAAe,6BACb,SACA,UAA6C,CAAC,GAC5B;AAClB,QAAM,WAAW,QAAQ,wBAAwB,OAC7C,CAAC,GAAG,mCAAmC,GAAG,iCAAiC,IAC3E;AACJ,aAAW,SAAS,UAAU;AAC5B,QAAI,MAAM,OAAO,KAAK,KAAK,SAAS,KAAK,CAAC,EAAG,QAAO;AAAA,EACtD;AACA,SAAO;AACT;AA8CA,eAAsB,4BAA4B,QAAuC;AACvF,MAAI,CAAC,OAAO,mBAAmB;AAC7B,WAAO,OAAO;AAAA,EAChB;AASA,QAAM,kBAAkB,2BAA2B,OAAO,gBAAgB;AAC1E,QAAM,cAAc,oBAAoB,OAAO,WAAW,eAAe;AACzE,QAAM,iBAAiB;AAAA,IACrB,OAAO;AAAA,IACP,uBAAuB,OAAO,gBAAgB;AAAA,EAChD;AACA,QAAM,mBACH,MAAM,OAAO,cAAc,KAC3B,MAAM,6BAA6B,gBAAgB,EAAE,qBAAqB,KAAK,CAAC;AACnF,QAAM,QAAQ,mBACV,iBACC,MAAM,OAAO,WAAW,IACvB,cACA;AACN,SAAQ,MAAM,OAAO,KAAK,KAAM,CAAE,MAAM,iBAAiB,OAAO,SAAS,IACrE,QACA,OAAO;AACb;AAYA,eAAsB,4BACpB,QACA,WACiB;AACjB,MAAI,CAAC,OAAO,kBAAmB,QAAO,OAAO;AAI7C,MAAI,2BAA2B,SAAS,MAAM,2BAA2B,OAAO,gBAAgB,GAAG;AACjG,WAAO,4BAA4B,MAAM;AAAA,EAC3C;AACA,QAAM,aAAa,oBAAoB,OAAO,WAAW,SAAS;AAClE,QAAM,gBAAgB,oBAAoB,OAAO,WAAW,uBAAuB,SAAS,CAAC;AAC7F,MACG,MAAM,OAAO,aAAa,KAC1B,MAAM,6BAA6B,eAAe,EAAE,qBAAqB,KAAK,CAAC,GAChF;AACA,WAAO;AAAA,EACT;AACA,SAAQ,MAAM,OAAO,UAAU,IAAK,aAAa;AACnD;AAEO,IAAM,yBAAN,MAA6B;AAAA,EA+BlC,YACmB,QACA,QAAqC,CAAC,GACvD;AAFiB;AACA;AAEjB,SAAK,2BAA2B,2BAA2B,OAAO,gBAAgB;AAAA,EACpF;AAAA,EAJmB;AAAA,EACA;AAAA,EAhCF,QAAQ,oBAAI,IAA4B;AAAA,EACjD,wBAAuC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM9B,mBAAmB,oBAAI,IAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAe3C,mBAAmB,oBAAI,IAAoB;AAAA;AAAA;AAAA;AAAA;AAAA,EAM3C;AAAA,EASjB,MAAc,uBAAwC;AACpD,SAAK,wBAAwB,MAAM,4BAA4B,KAAK,MAAM;AAC1E,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAc,cAAc,WAAoC;AAE9D,QAAI,CAAC,KAAK,OAAO,kBAAmB,QAAO,KAAK,OAAO;AACvD,QAAI,2BAA2B,SAAS,MAAM,KAAK,0BAA0B;AAC3E,aAAO,KAAK,yBAAyB,KAAK,OAAO;AAAA,IACnD;AACA,WAAO,4BAA4B,KAAK,QAAQ,SAAS;AAAA,EAC3D;AAAA,EAEA,MAAM,WAAW,WAA4C;AAC3D,UAAM,KAAK,2BAA2B,aAAa,KAAK,OAAO,gBAAgB;AAC/E,QAAI,OAAO,KAAK,4BAA4B,CAAC,qBAAqB,EAAE,GAAG;AACrE,YAAM,IAAI,MAAM,qBAAqB,EAAE,EAAE;AAAA,IAC3C;AAMA,QAAI;AACJ,QAAI,OAAO,KAAK,0BAA0B;AACxC,aAAO,MAAM,KAAK,qBAAqB;AACvC,YAAM,SAAS,KAAK,MAAM,IAAI,EAAE;AAChC,UAAI,UAAU,OAAO,QAAQ,MAAM;AACjC,aAAK,eAAe,IAAI,IAAI;AAC5B,eAAO;AAAA,MACT;AAAA,IACF,OAAO;AACL,YAAM,SAAS,KAAK,MAAM,IAAI,EAAE;AAChC,aAAO,MAAM,KAAK,cAAc,EAAE;AAClC,UAAI,UAAU,OAAO,QAAQ,MAAM;AACjC,aAAK,eAAe,IAAI,IAAI;AAC5B,eAAO;AAAA,MACT;AAAA,IACF;AAEA,UAAM,KAAK,IAAI,eAAe,MAAM,KAAK,OAAO,aAAa;AAI7D,OAAG,mBAAmB,KAAK,OAAO;AAClC,SAAK,MAAM,IAAI,IAAI,EAAE;AACrB,SAAK,eAAe,IAAI,IAAI;AAC5B,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,eAAe,WAAmB,YAA0B;AAClE,UAAM,OAAO,KAAK,MAAM;AACxB,QAAI,CAAC,KAAM;AAQX,QAAI,KAAK,iBAAiB,IAAI,SAAS,MAAM,WAAY;AAOzD,QAAI,KAAK,iBAAiB,IAAI,SAAS,MAAM,WAAY;AACzD,QAAI;AAcF,WAAK,iBAAiB,IAAI,WAAW,UAAU;AAC/C,cAAQ,QAAQ,KAAK,WAAW,UAAU,CAAC,EAAE;AAAA,QAC3C,CAAC,cAAc;AAGb,cAAI,KAAK,iBAAiB,IAAI,SAAS,MAAM,YAAY;AACvD,iBAAK,iBAAiB,OAAO,SAAS;AAAA,UACxC;AACA,cAAI,cAAc,OAAO;AACvB,iBAAK,iBAAiB,IAAI,WAAW,UAAU;AAAA,UACjD;AAAA,QAIF;AAAA,QACA,MAAM;AAGJ,cAAI,KAAK,iBAAiB,IAAI,SAAS,MAAM,YAAY;AACvD,iBAAK,iBAAiB,OAAO,SAAS;AAAA,UACxC;AACA,cAAI,KAAK,iBAAiB,IAAI,SAAS,MAAM,YAAY;AACvD,iBAAK,iBAAiB,OAAO,SAAS;AAAA,UACxC;AAAA,QACF;AAAA,MACF;AAAA,IACF,QAAQ;AAGN,UAAI,KAAK,iBAAiB,IAAI,SAAS,MAAM,YAAY;AACvD,aAAK,iBAAiB,OAAO,SAAS;AAAA,MACxC;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-WTI35CVJ.js → chunk-YYN3LIYA.js}

@@ -1,6 +1,6 @@
 import {
   listNamespaces
-} from "./chunk-GI45G4BK.js";
+} from "./chunk-2RCGZ67B.js";
 import {
   runConsolidationProvenanceCheck
 } from "./chunk-AL4RAJL5.js";
@@ -32,17 +32,17 @@ import {
 } from "./chunk-AJU4PJGY.js";
 import {
   parseConfig
-} from "./chunk-C63WC454.js";
+} from "./chunk-KOI765XP.js";
 import {
   listMemoryGovernanceRuns,
   readMemoryGovernanceRunArtifact
-} from "./chunk-V4UDXYGG.js";
+} from "./chunk-WDTUYOLS.js";
 import {
   analyzeGraphHealth
 } from "./chunk-Y56J7CXW.js";
 import {
   StorageManager
-} from "./chunk-Y7NWBBHV.js";
+} from "./chunk-TEO46GMM.js";
 import {
   lintWorkspaceFiles
 } from "./chunk-DM2T26WE.js";
@@ -1336,4 +1336,4 @@ export {
   runBenchmarkRecall,
   runOperatorRepair
 };
-//# sourceMappingURL=chunk-WTI35CVJ.js.map
+//# sourceMappingURL=chunk-YYN3LIYA.js.map

package/dist/{cli-DDo7Qgs-.d.ts → cli-BGahB_d3.d.ts}

@@ -1,13 +1,13 @@
 import { CompoundingPromotionReport } from './compounding/engine.js';
 import { MigrateObservationsResult } from './maintenance/migrate-observations.js';
 import { MemoryGovernanceRunResult, MemoryGovernanceSummary, MemoryGovernanceMetrics, MemoryGovernanceQualityScore, MemoryGovernanceReviewQueueEntry, MemoryGovernanceAppliedAction, MemoryGovernanceTransitionReport, MemoryGovernanceManifest, MemoryGovernanceRestoreManifest, RestoreMemoryGovernanceRunResult } from './maintenance/memory-governance.js';
-import { h as MemoryStatus, g as MemoryFile, B as BehaviorSignalEvent, Z as QmdSearchResult, m as MemoryActionEvent, n as MemoryLifecycleEvent } from './types-D8yUmSik.js';
+import { h as MemoryStatus, g as MemoryFile, B as BehaviorSignalEvent, Z as QmdSearchResult, m as MemoryActionEvent, n as MemoryLifecycleEvent } from './types-2OPlQWJG.js';
 import { RebuildMemoryProjectionResult, RepairMemoryProjectionResult, VerifyMemoryProjectionResult } from './maintenance/rebuild-memory-projection.js';
 import { RebuildMemoryLifecycleLedgerResult } from './maintenance/rebuild-memory-lifecycle-ledger.js';
 import { RebuildObservationsResult } from './maintenance/rebuild-observations.js';
 import { ArchiveObservationsResult } from './maintenance/archive-observations.js';
 import { Writable, Readable } from 'node:stream';
-import { O as Orchestrator } from './orchestrator-8fTZsa0y.js';
+import { O as Orchestrator } from './orchestrator-BgzZlWxH.js';
 import { ReplayRunSummary } from './replay/runner.js';
 import { ReplaySource, ReplayTurn } from './replay/types.js';
 import { b as BulkImportResult } from './types-ByK7T3L6.js';
@@ -16,7 +16,7 @@ import { WorkProjectStatus, WorkTaskStatus, WorkTaskPriority } from './work/type
 import { RoutePatternType } from './routing/engine.js';
 import { TailscaleSyncOptions } from './network/tailscale.js';
 import { DashboardStatus } from './dashboard-runtime.js';
-import { E as EngramAccessService } from './access-service-CdJFd3_b.js';
+import { E as EngramAccessService } from './access-service-BEJvriUt.js';
 import { ResolveSecretRefFn } from './resolve-auth-token.js';
 import { CompatRunner, CompatReport } from './compat/types.js';
 import { EvalBaselineDeltaReport, EvalBaselineSnapshot, EvalCiGateReport, EvalBenchmarkPackSummary, EvalHarnessStatus, EvalStoredBaselineCiGateReport } from './evals.js';

package/dist/cli.d.ts

@@ -1,13 +1,13 @@
 import './compounding/engine.js';
 import './maintenance/migrate-observations.js';
 import './maintenance/memory-governance.js';
-import './types-D8yUmSik.js';
+import './types-2OPlQWJG.js';
 import './maintenance/rebuild-memory-projection.js';
 import './maintenance/rebuild-memory-lifecycle-ledger.js';
 import './maintenance/rebuild-observations.js';
 import './maintenance/archive-observations.js';
 import 'node:stream';
-import './orchestrator-8fTZsa0y.js';
+import './orchestrator-BgzZlWxH.js';
 import './replay/runner.js';
 import './replay/types.js';
 import './types-ByK7T3L6.js';
@@ -16,7 +16,7 @@ import './work/types.js';
 import './routing/engine.js';
 import './network/tailscale.js';
 import './dashboard-runtime.js';
-import './access-service-CdJFd3_b.js';
+import './access-service-BEJvriUt.js';
 import './resolve-auth-token.js';
 import './compat/types.js';
 import './evals.js';
@@ -38,7 +38,7 @@ import './trust-zones.js';
 import './session-integrity.js';
 import './recall-state.js';
 import './policy-runtime.js';
-export { A as AccessHttpServeCliCommandOptions, a as ArchiveObservationsCliCommandOptions, B as BulkImportCliCommandOptions, C as CompatCliCommandOptions, b as ConnectorsRunCliOutputOptions, c as ConversationIndexHealthCliOrchestrator, D as DashboardStartCliCommandOptions, d as DedupeCandidate, E as ExactDedupePlan, G as GraphHealthCliCommandOptions, M as MemoryActionAuditCliCommandOptions, e as MemoryActionAuditCliNamespaceSummary, f as MemoryActionAuditCliReport, g as MemoryGovernanceCliCommandOptions, h as MemoryGovernanceReportCliCommandOptions, i as MemoryGovernanceRestoreCliCommandOptions, j as MemoryReviewDispositionCliCommandOptions, k as MemoryTimelineCliCommandOptions, l as MigrateCliOrchestrator, m as MigrateCliReport, n as MigrateObservationsCliCommandOptions, P as PolicyDiffCliReport, o as PolicyDiffEntry, q as PolicyRollbackCliReport, s as PolicyStatusCliReport, t as PolicyTuningCliOrchestrator, R as RebuildMemoryLifecycleLedgerCliCommandOptions, u as RebuildMemoryProjectionCliCommandOptions, v as RebuildObservationsCliCommandOptions, w as RepairMemoryProjectionCliCommandOptions, x as ReplayCliCommandOptions, y as ReplayCliOrchestrator, z as RouteCliCommandOptions, S as SessionIntegrityCliCommandOptions, F as SessionRepairCliCommandOptions, T as TailscaleStatusCliCommandOptions, H as TailscaleSyncCliCommandOptions, I as TierMigrationCliOrchestrator, J as TrainingExportCliCommandOptions, V as VerifyMemoryProjectionCliCommandOptions, W as WebDavServeCliCommandOptions, K as WorkProjectCliCommandOptions, L as WorkTaskCliCommandOptions, N as emitConnectorsRunCliResult, O as filterNormalMemorySearchResults, Q as hasDestructivePurgeFailures, U as isNormalRetrievalVisibleMemory, X as parseDurationToMs, Y as parseStrictCliDate, Z as planAggressiveDuplicateDeletions, _ as planExactDuplicateDeletions, $ as registerCli, a0 as resolveAccessPrincipalOverride, a1 as resolveMemoryDirForNamespace, a2 as runAbstractionNodeStatusCliCommand, a3 as runAccessHttpServeCliCommand, a4 as runAccessHttpStatusCliCommand, a5 as runAccessHttpStopCliCommand, a6 as runAccessMcpServeCliCommand, a7 as runArchiveObservationsCliCommand, a8 as runBenchmarkBaselineReportCliCommand, a9 as runBenchmarkBaselineSnapshotCliCommand, aa as runBenchmarkCiGateCliCommand, ab as runBenchmarkImportCliCommand, ac as runBenchmarkStatusCliCommand, ad as runBenchmarkStoredBaselineCiGateCliCommand, ae as runBenchmarkValidateCliCommand, r as runBulkImportCliCommand, af as runCausalTrajectoryStatusCliCommand, ag as runCommitmentLifecycleCliCommand, ah as runCommitmentRecordCliCommand, ai as runCommitmentSetStateCliCommand, aj as runCommitmentStatusCliCommand, ak as runCompatCliCommand, al as runCompoundingPromoteCliCommand, am as runConversationIndexHealthCliCommand, an as runConversationIndexInspectCliCommand, ao as runConversationIndexRebuildCliCommand, ap as runCueAnchorStatusCliCommand, aq as runDashboardStartCliCommand, ar as runDashboardStatusCliCommand, as as runDashboardStopCliCommand, at as runGraphHealthCliCommand, au as runHarmonicSearchCliCommand, av as runMemoryActionAuditCliCommand, aw as runMemoryGovernanceCliCommand, ax as runMemoryGovernanceReportCliCommand, ay as runMemoryGovernanceRestoreCliCommand, az as runMemoryReviewDispositionCliCommand, aA as runMemoryTimelineCliCommand, aB as runMigrateNormalizeFrontmatterCliCommand, aC as runMigrateObservationsCliCommand, aD as runMigrateRechunkCliCommand, aE as runMigrateReextractCliCommand, aF as runMigrateRescoreImportanceCliCommand, aG as runObjectiveStateStatusCliCommand, aH as runPolicyDiffCliCommand, aI as runPolicyRollbackCliCommand, aJ as runPolicyStatusCliCommand, aK as runRebuildMemoryLifecycleLedgerCliCommand, aL as runRebuildMemoryProjectionCliCommand, aM as runRebuildObservationsCliCommand, aN as runRepairMemoryProjectionCliCommand, aO as runReplayCliCommand, aP as runResumeBundleBuildCliCommand, aQ as runResumeBundleRecordCliCommand, aR as runResumeBundleStatusCliCommand, aS as runRouteCliCommand, aT as runSemanticRulePromoteCliCommand, aU as runSemanticRuleVerifyCliCommand, aV as runSessionCheckCliCommand, aW as runSessionRepairCliCommand, aX as runTailscaleStatusCliCommand, aY as runTailscaleSyncCliCommand, aZ as runTierMigrateCliCommand, a_ as runTierStatusCliCommand, a$ as runTrainingExportCliCommand, b0 as runTrustZoneDemoSeedCliCommand, b1 as runTrustZonePromoteCliCommand, b2 as runTrustZoneStatusCliCommand, b3 as runUtilityLearningCliCommand, b4 as runUtilityLearningStatusCliCommand, b5 as runUtilityTelemetryRecordCliCommand, b6 as runUtilityTelemetryStatusCliCommand, b7 as runVerifiedRecallSearchCliCommand, b8 as runVerifyMemoryProjectionCliCommand, b9 as runWebDavServeCliCommand, ba as runWebDavStopCliCommand, bb as runWorkProductRecallSearchCliCommand, bc as runWorkProductRecordCliCommand, bd as runWorkProductStatusCliCommand, be as runWorkProjectCliCommand, bf as runWorkTaskCliCommand } from './cli-DDo7Qgs-.js';
+export { A as AccessHttpServeCliCommandOptions, a as ArchiveObservationsCliCommandOptions, B as BulkImportCliCommandOptions, C as CompatCliCommandOptions, b as ConnectorsRunCliOutputOptions, c as ConversationIndexHealthCliOrchestrator, D as DashboardStartCliCommandOptions, d as DedupeCandidate, E as ExactDedupePlan, G as GraphHealthCliCommandOptions, M as MemoryActionAuditCliCommandOptions, e as MemoryActionAuditCliNamespaceSummary, f as MemoryActionAuditCliReport, g as MemoryGovernanceCliCommandOptions, h as MemoryGovernanceReportCliCommandOptions, i as MemoryGovernanceRestoreCliCommandOptions, j as MemoryReviewDispositionCliCommandOptions, k as MemoryTimelineCliCommandOptions, l as MigrateCliOrchestrator, m as MigrateCliReport, n as MigrateObservationsCliCommandOptions, P as PolicyDiffCliReport, o as PolicyDiffEntry, q as PolicyRollbackCliReport, s as PolicyStatusCliReport, t as PolicyTuningCliOrchestrator, R as RebuildMemoryLifecycleLedgerCliCommandOptions, u as RebuildMemoryProjectionCliCommandOptions, v as RebuildObservationsCliCommandOptions, w as RepairMemoryProjectionCliCommandOptions, x as ReplayCliCommandOptions, y as ReplayCliOrchestrator, z as RouteCliCommandOptions, S as SessionIntegrityCliCommandOptions, F as SessionRepairCliCommandOptions, T as TailscaleStatusCliCommandOptions, H as TailscaleSyncCliCommandOptions, I as TierMigrationCliOrchestrator, J as TrainingExportCliCommandOptions, V as VerifyMemoryProjectionCliCommandOptions, W as WebDavServeCliCommandOptions, K as WorkProjectCliCommandOptions, L as WorkTaskCliCommandOptions, N as emitConnectorsRunCliResult, O as filterNormalMemorySearchResults, Q as hasDestructivePurgeFailures, U as isNormalRetrievalVisibleMemory, X as parseDurationToMs, Y as parseStrictCliDate, Z as planAggressiveDuplicateDeletions, _ as planExactDuplicateDeletions, $ as registerCli, a0 as resolveAccessPrincipalOverride, a1 as resolveMemoryDirForNamespace, a2 as runAbstractionNodeStatusCliCommand, a3 as runAccessHttpServeCliCommand, a4 as runAccessHttpStatusCliCommand, a5 as runAccessHttpStopCliCommand, a6 as runAccessMcpServeCliCommand, a7 as runArchiveObservationsCliCommand, a8 as runBenchmarkBaselineReportCliCommand, a9 as runBenchmarkBaselineSnapshotCliCommand, aa as runBenchmarkCiGateCliCommand, ab as runBenchmarkImportCliCommand, ac as runBenchmarkStatusCliCommand, ad as runBenchmarkStoredBaselineCiGateCliCommand, ae as runBenchmarkValidateCliCommand, r as runBulkImportCliCommand, af as runCausalTrajectoryStatusCliCommand, ag as runCommitmentLifecycleCliCommand, ah as runCommitmentRecordCliCommand, ai as runCommitmentSetStateCliCommand, aj as runCommitmentStatusCliCommand, ak as runCompatCliCommand, al as runCompoundingPromoteCliCommand, am as runConversationIndexHealthCliCommand, an as runConversationIndexInspectCliCommand, ao as runConversationIndexRebuildCliCommand, ap as runCueAnchorStatusCliCommand, aq as runDashboardStartCliCommand, ar as runDashboardStatusCliCommand, as as runDashboardStopCliCommand, at as runGraphHealthCliCommand, au as runHarmonicSearchCliCommand, av as runMemoryActionAuditCliCommand, aw as runMemoryGovernanceCliCommand, ax as runMemoryGovernanceReportCliCommand, ay as runMemoryGovernanceRestoreCliCommand, az as runMemoryReviewDispositionCliCommand, aA as runMemoryTimelineCliCommand, aB as runMigrateNormalizeFrontmatterCliCommand, aC as runMigrateObservationsCliCommand, aD as runMigrateRechunkCliCommand, aE as runMigrateReextractCliCommand, aF as runMigrateRescoreImportanceCliCommand, aG as runObjectiveStateStatusCliCommand, aH as runPolicyDiffCliCommand, aI as runPolicyRollbackCliCommand, aJ as runPolicyStatusCliCommand, aK as runRebuildMemoryLifecycleLedgerCliCommand, aL as runRebuildMemoryProjectionCliCommand, aM as runRebuildObservationsCliCommand, aN as runRepairMemoryProjectionCliCommand, aO as runReplayCliCommand, aP as runResumeBundleBuildCliCommand, aQ as runResumeBundleRecordCliCommand, aR as runResumeBundleStatusCliCommand, aS as runRouteCliCommand, aT as runSemanticRulePromoteCliCommand, aU as runSemanticRuleVerifyCliCommand, aV as runSessionCheckCliCommand, aW as runSessionRepairCliCommand, aX as runTailscaleStatusCliCommand, aY as runTailscaleSyncCliCommand, aZ as runTierMigrateCliCommand, a_ as runTierStatusCliCommand, a$ as runTrainingExportCliCommand, b0 as runTrustZoneDemoSeedCliCommand, b1 as runTrustZonePromoteCliCommand, b2 as runTrustZoneStatusCliCommand, b3 as runUtilityLearningCliCommand, b4 as runUtilityLearningStatusCliCommand, b5 as runUtilityTelemetryRecordCliCommand, b6 as runUtilityTelemetryStatusCliCommand, b7 as runVerifiedRecallSearchCliCommand, b8 as runVerifyMemoryProjectionCliCommand, b9 as runWebDavServeCliCommand, ba as runWebDavStopCliCommand, bb as runWorkProductRecallSearchCliCommand, bc as runWorkProductRecordCliCommand, bd as runWorkProductStatusCliCommand, be as runWorkProjectCliCommand, bf as runWorkTaskCliCommand } from './cli-BGahB_d3.js';
 import './connectors-cli-2iaQ5tX2.js';
 import './storage.js';
 import './page-versioning.js';
@@ -74,7 +74,7 @@ import './lcm/archive.js';
 import './lcm/summarizer.js';
 import './lcm/dag.js';
 import './lcm/queue.js';
-import './semantic-consolidation-DKdYzQOg.js';
+import './semantic-consolidation-Z8d_uMq8.js';
 import './connectors/codex-materialize.js';
 import './logger.js';
 import './conversation-index/backend.js';

package/dist/cli.js

@@ -89,7 +89,7 @@ import {
   runWorkProductStatusCliCommand,
   runWorkProjectCliCommand,
   runWorkTaskCliCommand
-} from "./chunk-QQHIQ7JD.js";
+} from "./chunk-COVZLGMR.js";
 import "./chunk-MC4FJXPA.js";
 import "./chunk-LQHDIS7L.js";
 import "./chunk-7F7Z6MOS.js";
@@ -107,8 +107,8 @@ import "./chunk-765K3SAT.js";
 import "./chunk-EEC4PCG5.js";
 import "./chunk-PYIFUBRK.js";
 import "./chunk-HOJZMQ4J.js";
-import "./chunk-KWM33SPU.js";
-import "./chunk-KJDKZVF3.js";
+import "./chunk-PVE7KSQP.js";
+import "./chunk-A3Y37UWI.js";
 import "./chunk-LZZNTPLR.js";
 import "./chunk-WMWVO45V.js";
 import "./chunk-KJTKLXTH.js";
@@ -118,12 +118,12 @@ import "./chunk-CKITWVWJ.js";
 import "./chunk-OUELRE5E.js";
 import "./chunk-GQL52GQ5.js";
 import "./chunk-EVWIEEKZ.js";
-import "./chunk-EHQLDFSH.js";
+import "./chunk-IQ53ZSXV.js";
 import "./chunk-TGQ2NTWH.js";
-import "./chunk-RZOBQ23O.js";
-import "./chunk-WLGE6KEO.js";
-import "./chunk-WTI35CVJ.js";
-import "./chunk-GI45G4BK.js";
+import "./chunk-XOFXKASO.js";
+import "./chunk-67G4T7KI.js";
+import "./chunk-YYN3LIYA.js";
+import "./chunk-2RCGZ67B.js";
 import "./chunk-3T74IZB3.js";
 import "./chunk-HL4DB7TO.js";
 import "./chunk-YNDLCWXS.js";
@@ -136,15 +136,15 @@ import "./chunk-2PRQG7PV.js";
 import "./chunk-X6IRLNOO.js";
 import "./chunk-2F6NP3NT.js";
 import "./chunk-TERNBNJB.js";
-import "./chunk-JF7SFXTG.js";
+import "./chunk-NCSJKK23.js";
 import "./chunk-W4RVMTHR.js";
-import "./chunk-AJE7FJVE.js";
+import "./chunk-UCEABZZN.js";
 import "./chunk-ZRWB5D4H.js";
 import "./chunk-AGRPGAKR.js";
 import "./chunk-S4DDLTPX.js";
 import "./chunk-SFQ6QNL7.js";
 import "./chunk-33JBK2XP.js";
-import "./chunk-ORGWWNJG.js";
+import "./chunk-XRKQOQLY.js";
 import "./chunk-KFY3SGN7.js";
 import "./chunk-CMTINOFS.js";
 import "./chunk-TQNRI55H.js";
@@ -159,14 +159,14 @@ import "./chunk-LMDRGRJ2.js";
 import "./chunk-OKTXM5H4.js";
 import "./chunk-3UXOZBHV.js";
 import "./chunk-UQ7RN5HK.js";
-import "./chunk-C63WC454.js";
+import "./chunk-KOI765XP.js";
 import "./chunk-PHK3HARR.js";
 import "./chunk-NDAH7BJ5.js";
 import "./chunk-Z5LAYHGJ.js";
 import "./chunk-LBJBNWS2.js";
 import "./chunk-HQ6NIBL6.js";
 import "./chunk-OADWQ5CR.js";
-import "./chunk-EW52H5EM.js";
+import "./chunk-QDVQ4AN2.js";
 import "./chunk-SEDEKFYQ.js";
 import "./chunk-RKNJBZ55.js";
 import "./chunk-J64TK33U.js";
@@ -175,31 +175,31 @@ import "./chunk-42NQ7AVG.js";
 import "./chunk-TMSXWOBZ.js";
 import "./chunk-7RXCMVFQ.js";
 import "./chunk-7WV3F5DQ.js";
-import "./chunk-NOBL7OUP.js";
+import "./chunk-OKW6F5S5.js";
 import "./chunk-T4WDJPEZ.js";
 import "./chunk-D24OXEPB.js";
-import "./chunk-E3J6O6N7.js";
+import "./chunk-55ZMNKMQ.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import "./chunk-DHGSZ3UD.js";
 import "./chunk-H7XKCNR6.js";
-import "./chunk-IENGGY2C.js";
+import "./chunk-UCEDY5M7.js";
 import "./chunk-SOBJ6NEY.js";
 import "./chunk-BT7NVCML.js";
-import "./chunk-V4UDXYGG.js";
+import "./chunk-WDTUYOLS.js";
 import "./chunk-MMJANTJX.js";
 import "./chunk-5RIRL3XL.js";
 import "./chunk-JGSKJHF7.js";
 import "./chunk-FF4KLI5W.js";
-import "./chunk-BEMWL2FZ.js";
-import "./chunk-JVRPJ7D4.js";
-import "./chunk-YM3LR4LS.js";
-import "./chunk-JX2RINDR.js";
+import "./chunk-54LOUIBE.js";
+import "./chunk-EKQMQQ3U.js";
+import "./chunk-SSSXWIBP.js";
+import "./chunk-6G5JEN55.js";
 import "./chunk-CYEPCZN5.js";
-import "./chunk-JBHXMCYN.js";
+import "./chunk-GRYAECRV.js";
 import "./chunk-JOASJWQR.js";
 import "./chunk-RN7MUWON.js";
-import "./chunk-7WEB3FLJ.js";
+import "./chunk-5PLUC5OB.js";
 import "./chunk-Q4CAQGKQ.js";
 import "./chunk-CINZGPSJ.js";
 import "./chunk-ZFXCQPNO.js";
@@ -207,8 +207,8 @@ import "./chunk-7OGJQP7T.js";
 import "./chunk-E6ZDCOHM.js";
 import "./chunk-OIF36KGD.js";
 import "./chunk-7DTASS5T.js";
-import "./chunk-PYWNNF2I.js";
-import "./chunk-2DGQLOOM.js";
+import "./chunk-QRSKPI62.js";
+import "./chunk-M3VYPE2H.js";
 import "./chunk-BMFZLLNI.js";
 import "./chunk-CI7RKSRE.js";
 import "./chunk-6HMYUWXR.js";
@@ -218,18 +218,18 @@ import "./chunk-EI6V5UXY.js";
 import "./chunk-QY7YA7OL.js";
 import "./chunk-O75CRYGF.js";
 import "./chunk-QDW3E4RD.js";
-import "./chunk-H3PHZLMF.js";
+import "./chunk-GKKAXVAJ.js";
 import "./chunk-ODPLEWB6.js";
 import "./chunk-3ONXXHQO.js";
 import "./chunk-Y56J7CXW.js";
 import "./chunk-2LSZVONP.js";
 import "./chunk-DEUNUKTD.js";
-import "./chunk-BNFRL6QW.js";
-import "./chunk-Y7NWBBHV.js";
+import "./chunk-PTMJ2FH2.js";
+import "./chunk-TEO46GMM.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-J6A3CX5N.js";
-import "./chunk-C43KEWEV.js";
+import "./chunk-TDZSSJV4.js";
 import "./chunk-CPPS65WS.js";
 import "./chunk-RULE4VG5.js";
 import "./chunk-SCU65EZI.js";

package/dist/compounding/engine.d.ts

@@ -1,5 +1,5 @@
 import { StorageManager } from '../storage.js';
-import { P as PluginConfig } from '../types-D8yUmSik.js';
+import { P as PluginConfig } from '../types-2OPlQWJG.js';
 import { SharedFeedbackEntry } from '../shared-context/manager.js';
 import '../page-versioning.js';
 import '../consolidation-operator.js';

package/dist/compounding/engine.js

@@ -1,13 +1,13 @@
 import {
   CompoundingEngine,
   defaultTierMigrationCycleBudget
-} from "../chunk-PRQXUSQV.js";
+} from "../chunk-UYNFWZWG.js";
 import "../chunk-DRD2Q7HQ.js";
-import "../chunk-Y7NWBBHV.js";
+import "../chunk-TEO46GMM.js";
 import "../chunk-M7XQSUBB.js";
 import "../chunk-5UZXUTVO.js";
 import "../chunk-J6A3CX5N.js";
-import "../chunk-C43KEWEV.js";
+import "../chunk-TDZSSJV4.js";
 import "../chunk-CPPS65WS.js";
 import "../chunk-RULE4VG5.js";
 import "../chunk-SCU65EZI.js";

package/dist/compounding/preference-consolidator.d.ts

@@ -1,4 +1,4 @@
-import { M as MemoryCategory, g as MemoryFile } from '../types-D8yUmSik.js';
+import { M as MemoryCategory, g as MemoryFile } from '../types-2OPlQWJG.js';
 import { LcmEngine } from '../lcm/engine.js';
 import '../types-ByK7T3L6.js';
 import '../index-DJ9QWMw-.js';

package/dist/compression-optimizer.d.ts

@@ -1,4 +1,4 @@
-import { a8 as CompressionGuidelineOptimizerEventCounts, a9 as CompressionGuidelineOptimizerActionSummary, aa as CompressionGuidelineOptimizerRuleUpdate, ab as MemoryActionType, m as MemoryActionEvent, C as CompressionGuidelineOptimizerState } from './types-D8yUmSik.js';
+import { a8 as CompressionGuidelineOptimizerEventCounts, a9 as CompressionGuidelineOptimizerActionSummary, aa as CompressionGuidelineOptimizerRuleUpdate, ab as MemoryActionType, m as MemoryActionEvent, C as CompressionGuidelineOptimizerState } from './types-2OPlQWJG.js';
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';
 

package/dist/config.d.ts

@@ -1,4 +1,4 @@
-import { P as PluginConfig } from './types-D8yUmSik.js';
+import { P as PluginConfig } from './types-2OPlQWJG.js';
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';
 

package/dist/config.js

@@ -4,7 +4,7 @@ import {
   isOpenaiApiKeyDisabled,
   parseConfig,
   resolveEnvVars
-} from "./chunk-C63WC454.js";
+} from "./chunk-KOI765XP.js";
 import "./chunk-PHK3HARR.js";
 import "./chunk-NDAH7BJ5.js";
 import "./chunk-Z5LAYHGJ.js";

package/dist/connectors/codex-materialize-runner.d.ts

@@ -1,4 +1,4 @@
-import { P as PluginConfig, g as MemoryFile } from '../types-D8yUmSik.js';
+import { P as PluginConfig, g as MemoryFile } from '../types-2OPlQWJG.js';
 import { RolloutSummaryInput, MaterializeResult } from './codex-materialize.js';
 import '../types-ByK7T3L6.js';
 import '../index-DJ9QWMw-.js';

package/dist/connectors/codex-materialize-runner.js

@@ -1,14 +1,14 @@
 import {
   runCodexMaterialize,
   runPostConsolidationMaterialize
-} from "../chunk-IVYSVAC6.js";
+} from "../chunk-KZZ4YAEC.js";
 import "../chunk-LN4YGHTM.js";
 import "../chunk-3UXOZBHV.js";
-import "../chunk-Y7NWBBHV.js";
+import "../chunk-TEO46GMM.js";
 import "../chunk-M7XQSUBB.js";
 import "../chunk-5UZXUTVO.js";
 import "../chunk-J6A3CX5N.js";
-import "../chunk-C43KEWEV.js";
+import "../chunk-TDZSSJV4.js";
 import "../chunk-CPPS65WS.js";
 import "../chunk-RULE4VG5.js";
 import "../chunk-SCU65EZI.js";

package/dist/connectors/codex-materialize.d.ts

@@ -1,4 +1,4 @@
-import { g as MemoryFile } from '../types-D8yUmSik.js';
+import { g as MemoryFile } from '../types-2OPlQWJG.js';
 import '../types-ByK7T3L6.js';
 import '../index-DJ9QWMw-.js';
 

package/dist/connectors/index.d.ts

@@ -1,6 +1,6 @@
 export { MATERIALIZE_VERSION, MaterializeOptions, MaterializeResult, MemoryMdValidation, RolloutSummaryInput, SENTINEL_FILE, TMP_DIR, approximateTokenCount, describeMemoriesDir, ensureSentinel, materializeForNamespace, renderMemoryMd, renderMemorySummary, renderRawMemories, renderRolloutSummary, truncateToTokenBudget, validateMemoryMd } from './codex-materialize.js';
 export { RunMaterializeOptions, runCodexMaterialize } from './codex-materialize-runner.js';
-import { P as PluginConfig } from '../types-D8yUmSik.js';
+import { P as PluginConfig } from '../types-2OPlQWJG.js';
 import '../types-ByK7T3L6.js';
 import '../index-DJ9QWMw-.js';
 

package/dist/connectors/index.js

@@ -27,7 +27,7 @@ import {
 import "../chunk-G56P5RLD.js";
 import {
   runCodexMaterialize
-} from "../chunk-IVYSVAC6.js";
+} from "../chunk-KZZ4YAEC.js";
 import {
   MATERIALIZE_VERSION,
   SENTINEL_FILE,
@@ -48,11 +48,11 @@ import {
   coerceInstallExtension
 } from "../chunk-PHK3HARR.js";
 import "../chunk-O75CRYGF.js";
-import "../chunk-Y7NWBBHV.js";
+import "../chunk-TEO46GMM.js";
 import "../chunk-M7XQSUBB.js";
 import "../chunk-5UZXUTVO.js";
 import "../chunk-J6A3CX5N.js";
-import "../chunk-C43KEWEV.js";
+import "../chunk-TDZSSJV4.js";
 import "../chunk-CPPS65WS.js";
 import "../chunk-RULE4VG5.js";
 import "../chunk-SCU65EZI.js";

package/dist/consolidation-provenance-check.d.ts

@@ -1,7 +1,7 @@
 import { StorageManager } from './storage.js';
 import './page-versioning.js';
 import './consolidation-operator.js';
-import './types-D8yUmSik.js';
+import './types-2OPlQWJG.js';
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';
 import './memory-projection-store.js';

package/dist/consolidation-undo.d.ts

@@ -1,7 +1,7 @@
 import { StorageManager } from './storage.js';
 import { VersioningConfig } from './page-versioning.js';
 import './consolidation-operator.js';
-import './types-D8yUmSik.js';
+import './types-2OPlQWJG.js';
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';
 import './memory-projection-store.js';

package/dist/contradiction/index.d.ts

@@ -1,5 +1,5 @@
 import { StorageManager } from '../storage.js';
-import { h as MemoryStatus, P as PluginConfig, M as MemoryCategory } from '../types-D8yUmSik.js';
+import { h as MemoryStatus, P as PluginConfig, M as MemoryCategory } from '../types-2OPlQWJG.js';
 import { S as SemanticDedupLookup } from '../semantic-DJR8_DMQ.js';
 import { LocalLlmClient } from '../local-llm.js';
 import { FallbackLlmClient } from '../fallback-llm.js';
@@ -244,6 +244,24 @@ interface ExecuteResolutionOptions {
     mergedCategory?: MemoryCategory;
     /** Resolve storage for the pair namespace, or the default namespace for legacy unscoped pairs. */
     storageForNamespace?: (namespace: string | undefined) => StorageManager | Promise<StorageManager>;
+    /**
+     * Best-effort hook invoked after a contradiction resolution leaves a durable
+     * mutation in the namespace's memory files (issue #1499 sweep, NH1dX / NH3X3).
+     * Every mutating verb — `merge` (creates a new memory and supersedes both
+     * sources), `keep-a`, and `keep-b` (supersede the losing source + rewrite
+     * frontmatter) — writes directly to the pair's (possibly DYNAMIC) namespace
+     * storage, bypassing the extraction write path that records catalog writes. So
+     * without this the namespace's `lastWriteAt` stays stale and QMD maintenance /
+     * `writtenSince` can skip a namespace whose only post-write mutation is
+     * resolving a contradiction. It fires after the resolution commits, or after a
+     * failed resolution/rollback path when durable memory changes are still left on
+     * disk. If a failure rolls back cleanly, this is never called, so the catalog
+     * never records a write that did not survive (rule #25). Non-mutating verbs
+     * (`both-valid`, `needs-more-context`) never trigger it. Callers wire this to
+     * `Orchestrator.recordCatalogWrite(namespace, storageDir)`. Must be
+     * failure-tolerant: it is fire-and-forget and must never affect resolution.
+     */
+    onMergedMemoryWritten?: (namespace: string | undefined, storageDir: string) => void;
 }
 declare function isValidResolutionVerb(value: string): value is ResolutionVerb;
 /**

package/dist/contradiction/index.js

@@ -2,7 +2,7 @@ import "../chunk-V5OCT34X.js";
 import {
   executeResolution,
   isValidResolutionVerb
-} from "../chunk-R3PQUPQ4.js";
+} from "../chunk-6IMKOIZ6.js";
 import {
   ACTIVE_STATUSES,
   clearVerdictCache,

package/dist/conversation-index/backend.d.ts

@@ -1,7 +1,7 @@
 import { SearchBackend, SearchExecutionOptions } from '../search/port.js';
 import { ConversationChunk } from './chunker.js';
 import { C as ConversationSearchResult, F as FaissConversationIndexAdapter } from '../faiss-adapter-BHecI1fF.js';
-import '../types-D8yUmSik.js';
+import '../types-2OPlQWJG.js';
 import '../types-ByK7T3L6.js';
 import '../index-DJ9QWMw-.js';
 import '../runtime/child-process.js';

package/dist/conversation-index/chunker.d.ts

@@ -1,4 +1,4 @@
-import { _ as TranscriptEntry } from '../types-D8yUmSik.js';
+import { _ as TranscriptEntry } from '../types-2OPlQWJG.js';
 import '../types-ByK7T3L6.js';
 import '../index-DJ9QWMw-.js';
 

package/dist/conversation-index/faiss-adapter.d.ts

@@ -1,7 +1,7 @@
 import './chunker.js';
 export { b as FaissAdapterConfig, c as FaissAdapterError, F as FaissConversationIndexAdapter, d as FaissHealthResult, e as FaissInspectResult, f as failOpenFaissHealth, r as resolveDefaultFaissScriptPath } from '../faiss-adapter-BHecI1fF.js';
 import '../runtime/child-process.js';
-import '../types-D8yUmSik.js';
+import '../types-2OPlQWJG.js';
 import '../types-ByK7T3L6.js';
 import '../index-DJ9QWMw-.js';
 import '../search/port.js';

package/dist/conversation-index/indexer.d.ts

@@ -1,7 +1,7 @@
 import { F as FaissConversationIndexAdapter } from '../faiss-adapter-BHecI1fF.js';
 import { ConversationChunk } from './chunker.js';
 import '../search/port.js';
-import '../types-D8yUmSik.js';
+import '../types-2OPlQWJG.js';
 import '../types-ByK7T3L6.js';
 import '../index-DJ9QWMw-.js';
 import '../runtime/child-process.js';

package/dist/conversation-index/search.d.ts

@@ -1,6 +1,6 @@
 import '../search/port.js';
 export { C as ConversationSearchResult, s as searchConversationIndex, a as searchConversationIndexFaissFailOpen } from '../faiss-adapter-BHecI1fF.js';
-import '../types-D8yUmSik.js';
+import '../types-2OPlQWJG.js';
 import '../types-ByK7T3L6.js';
 import '../index-DJ9QWMw-.js';
 import './chunker.js';

package/dist/day-summary.d.ts

@@ -1,4 +1,4 @@
-import { P as PluginConfig, g as MemoryFile } from './types-D8yUmSik.js';
+import { P as PluginConfig, g as MemoryFile } from './types-2OPlQWJG.js';
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';
 

package/dist/delinearize.d.ts

@@ -1,4 +1,4 @@
-import { ac as EntityMention } from './types-D8yUmSik.js';
+import { ac as EntityMention } from './types-2OPlQWJG.js';
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';
 

package/dist/direct-answer-wiring.d.ts

@@ -1,4 +1,4 @@
-import { g as MemoryFile, P as PluginConfig } from './types-D8yUmSik.js';
+import { g as MemoryFile, P as PluginConfig } from './types-2OPlQWJG.js';
 import { TrustZoneName } from './trust-zones.js';
 import { T as Taxonomy } from './types-DJhqDJUV.js';
 import { DirectAnswerResult } from './direct-answer.js';

package/dist/direct-answer.d.ts

@@ -1,5 +1,5 @@
 import { TrustZoneName } from './trust-zones.js';
-import { g as MemoryFile } from './types-D8yUmSik.js';
+import { g as MemoryFile } from './types-2OPlQWJG.js';
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';
 

package/dist/embedding-fallback.d.ts

@@ -1,4 +1,4 @@
-import { P as PluginConfig } from './types-D8yUmSik.js';
+import { P as PluginConfig } from './types-2OPlQWJG.js';
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';
 

package/dist/enrichment/index.d.ts

@@ -1,4 +1,4 @@
-import { M as MemoryCategory, a5 as ImportanceLevel } from '../types-D8yUmSik.js';
+import { M as MemoryCategory, a5 as ImportanceLevel } from '../types-2OPlQWJG.js';
 import { LoggerBackend } from '../logger.js';
 import '../types-ByK7T3L6.js';
 import '../index-DJ9QWMw-.js';

package/dist/entity-retrieval.d.ts

@@ -1,5 +1,5 @@
 import { StorageManager } from './storage.js';
-import { P as PluginConfig, _ as TranscriptEntry } from './types-D8yUmSik.js';
+import { P as PluginConfig, _ as TranscriptEntry } from './types-2OPlQWJG.js';
 import './page-versioning.js';
 import './consolidation-operator.js';
 import './memory-projection-store.js';