@remnic/core 9.3.663 → 9.3.664

package/dist/{chunk-HSCJYHYV.js → chunk-NLF54XMD.js}

@@ -44,12 +44,12 @@ import {
 } from "./chunk-HOJZMQ4J.js";
 import {
   rebuildMemoryLifecycleLedger
-} from "./chunk-F6O7IOS3.js";
+} from "./chunk-6JBKHTQD.js";
 import {
   rebuildMemoryProjection,
   repairMemoryProjection,
   verifyMemoryProjection
-} from "./chunk-PXVFMQLD.js";
+} from "./chunk-BZG2CWOQ.js";
 import {
   rebuildObservations
 } from "./chunk-LZZNTPLR.js";
@@ -74,7 +74,7 @@ import {
 } from "./chunk-EVWIEEKZ.js";
 import {
   promoteSemanticRuleFromMemory
-} from "./chunk-QXHBWFR3.js";
+} from "./chunk-IHG6CC7T.js";
 import {
   resolveAgentAccessAuthToken
 } from "./chunk-TGQ2NTWH.js";
@@ -93,12 +93,12 @@ import {
   runOperatorInventory,
   runOperatorRepair,
   runOperatorSetup
-} from "./chunk-5AYAZN45.js";
+} from "./chunk-YKX63GBK.js";
 import {
   listNamespaces,
   runNamespaceMigration,
   verifyNamespaces
-} from "./chunk-YYQRVNSV.js";
+} from "./chunk-XB5P5P2L.js";
 import {
   collectPatternMemories,
   explainPatternMemory,
@@ -128,13 +128,13 @@ import {
 } from "./chunk-TERNBNJB.js";
 import {
   searchVerifiedEpisodes
-} from "./chunk-TYIXG4VR.js";
+} from "./chunk-YW52BQSU.js";
 import {
   ThreadingManager
 } from "./chunk-W4RVMTHR.js";
 import {
   searchVerifiedSemanticRules
-} from "./chunk-NMPEJV5M.js";
+} from "./chunk-DSLUOQDY.js";
 import {
   getWorkProductLedgerStatus,
   recordWorkProductLedgerEntry,
@@ -216,16 +216,16 @@ import {
 } from "./chunk-OADWQ5CR.js";
 import {
   EngramAccessHttpServer
-} from "./chunk-4KDLCMLK.js";
+} from "./chunk-IROWLAWG.js";
 import {
   WearablesInputError
 } from "./chunk-7WV3F5DQ.js";
 import {
   EngramMcpServer
-} from "./chunk-2KDQI363.js";
+} from "./chunk-2HEZXPYU.js";
 import {
   EngramAccessService
-} from "./chunk-DFAXGZKI.js";
+} from "./chunk-JIX3ZL2J.js";
 import {
   WorkStorage
 } from "./chunk-GDB4J2H3.js";
@@ -239,12 +239,15 @@ import {
   readMemoryGovernanceRunArtifact,
   restoreMemoryGovernanceRun,
   runMemoryGovernance
-} from "./chunk-A7EF2XRO.js";
+} from "./chunk-EXXBA5OM.js";
 import {
   getTrustZoneStoreStatus,
   promoteTrustZoneRecord,
   seedTrustZoneDemoDataset
 } from "./chunk-JGSKJHF7.js";
+import {
+  assertPathInsideRoot
+} from "./chunk-5GPPACXK.js";
 import {
   getObjectiveStateStoreStatus
 } from "./chunk-6HMYUWXR.js";
@@ -268,6 +271,9 @@ import {
 import {
   resolveHomeDir
 } from "./chunk-JUC24CTX.js";
+import {
+  RECALL_FALLBACK_DIRS
+} from "./chunk-VS2IYZRU.js";
 import {
   buildActionConfidenceInputFromOptions,
   evaluateActionConfidence,
@@ -276,7 +282,7 @@ import {
 
 // src/cli.ts
 import path2 from "path";
-import { access, readFile, readdir as readdir2, unlink } from "fs/promises";
+import { access, lstat as lstat2, readFile, readdir as readdir2, realpath as realpath2, unlink } from "fs/promises";
 import { createHash } from "crypto";
 
 // src/wearables/cli.ts
@@ -845,9 +851,7 @@ async function convertMemoriesToRecords(options) {
   const { memoryDir } = options;
   const containmentRoot = await safeRealpath(memoryDir);
   if (!containmentRoot) return [];
-  const factsDir = path.join(memoryDir, "facts");
-  const correctionsDir = path.join(memoryDir, "corrections");
-  const dirs = [factsDir, correctionsDir];
+  const dirs = RECALL_FALLBACK_DIRS.map((dir) => path.join(memoryDir, dir));
   if (options.includeEntities) {
     dirs.push(path.join(memoryDir, "entities"));
   }
@@ -2648,8 +2652,26 @@ async function resolveMemoryDirForNamespace(orchestrator, namespace, options) {
   return candidate;
 }
 async function walkMemoryMarkdownFiles(memoryDir, visit) {
-  const roots = [path2.join(memoryDir, "facts"), path2.join(memoryDir, "corrections")];
+  let memoryRootReal;
+  try {
+    memoryRootReal = await realpath2(memoryDir);
+  } catch {
+    return;
+  }
+  const skip = (target, err) => {
+    if (!(err instanceof Error && /ENOENT/.test(err.message))) {
+      console.debug(`walkMemoryMarkdownFiles: skipping ${target}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+  };
   const walk = async (dir) => {
+    try {
+      const dirStat = await lstat2(dir);
+      if (dirStat.isSymbolicLink() || !dirStat.isDirectory()) return;
+      assertPathInsideRoot(memoryRootReal, await realpath2(dir), dir);
+    } catch (err) {
+      skip(dir, err);
+      return;
+    }
     let entries;
     try {
       entries = await readdir2(dir, { withFileTypes: true });
@@ -2657,8 +2679,15 @@ async function walkMemoryMarkdownFiles(memoryDir, visit) {
       return;
     }
     for (const entry of entries) {
+      if (entry.isSymbolicLink()) continue;
       const entryName = typeof entry.name === "string" ? entry.name : entry.name.toString("utf-8");
       const fullPath = path2.join(dir, entryName);
+      try {
+        assertPathInsideRoot(memoryRootReal, await realpath2(fullPath), fullPath);
+      } catch (err) {
+        skip(fullPath, err);
+        continue;
+      }
       if (entry.isDirectory()) {
         await walk(fullPath);
         continue;
@@ -2667,7 +2696,7 @@ async function walkMemoryMarkdownFiles(memoryDir, visit) {
       await visit(fullPath);
     }
   };
-  for (const root of roots) {
+  for (const root of RECALL_FALLBACK_DIRS.map((dir) => path2.join(memoryDir, dir))) {
     await walk(root);
   }
 }
@@ -3596,7 +3625,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
             );
           }
         }
-        const { mergeCapsule } = await import("./capsule-merge-T2JRE46P.js");
+        const { mergeCapsule } = await import("./capsule-merge-GK5E647P.js");
         const result = await mergeCapsule({
           sourceArchive,
           targetRoot: memoryDir,
@@ -7279,6 +7308,7 @@ export {
   runReplayCliCommand,
   runBulkImportCliCommand,
   resolveMemoryDirForNamespace,
+  listMemoryMarkdownFilePaths,
   registerCli
 };
-//# sourceMappingURL=chunk-HSCJYHYV.js.map
+//# sourceMappingURL=chunk-NLF54XMD.js.map