@remnic/core 9.3.676 → 9.3.677

package/dist/orchestrator.js

@@ -28,23 +28,23 @@ import {
   sanitizeSessionKeyForFilename,
   shouldFilterLifecycleRecallCandidate,
   summarizeGraphShadowComparison
-} from "./chunk-R37A3BEW.js";
+} from "./chunk-YEQBJXVO.js";
 import "./chunk-4SKKVWLQ.js";
-import "./chunk-666A3MOW.js";
 import "./chunk-7HYPN2GC.js";
+import "./chunk-666A3MOW.js";
 import "./chunk-HHLLAQGZ.js";
-import "./chunk-UWK5OXUJ.js";
 import "./chunk-3IE22DJ2.js";
 import "./chunk-TPDBFYEG.js";
 import "./chunk-KCYE2MZM.js";
 import "./chunk-MAV46GWQ.js";
 import "./chunk-5VDJMYTF.js";
+import "./chunk-UWK5OXUJ.js";
+import "./chunk-T2PO5MUF.js";
 import "./chunk-HP5FMB6L.js";
 import "./chunk-7N4KAIGN.js";
-import "./chunk-TECVW3JP.js";
-import "./chunk-T2PO5MUF.js";
 import "./chunk-B6IUW76R.js";
 import "./chunk-DRD2Q7HQ.js";
+import "./chunk-TECVW3JP.js";
 import "./chunk-UHGBNIOS.js";
 import "./chunk-LXOM6IQU.js";
 import "./chunk-YTWNKQ2G.js";
@@ -99,8 +99,8 @@ import "./chunk-V4ZHKCGA.js";
 import "./chunk-CTCPB57O.js";
 import "./chunk-LN4YGHTM.js";
 import "./chunk-JLNBQWZ2.js";
-import "./chunk-X6IRLNOO.js";
 import "./chunk-2PRQG7PV.js";
+import "./chunk-X6IRLNOO.js";
 import "./chunk-NXBXM7Q6.js";
 import "./chunk-2F6NP3NT.js";
 import "./chunk-TERNBNJB.js";
@@ -147,16 +147,16 @@ import "./chunk-RS25QOKZ.js";
 import "./chunk-JGSKJHF7.js";
 import "./chunk-FF4KLI5W.js";
 import "./chunk-6VP3YUCS.js";
-import "./chunk-Q6MIDQEL.js";
-import "./chunk-B55KFEGS.js";
-import "./chunk-OUWAQVDJ.js";
-import "./chunk-DOCTITOP.js";
-import "./chunk-CYEPCZN5.js";
-import "./chunk-Q5ZU3RNY.js";
+import "./chunk-EQYP3HA6.js";
+import "./chunk-YJ4J2JJ2.js";
 import "./chunk-JOASJWQR.js";
-import "./chunk-AER6MT24.js";
 import "./chunk-RN7MUWON.js";
+import "./chunk-Z6SEG36L.js";
+import "./chunk-DGEZKYVI.js";
+import "./chunk-CYEPCZN5.js";
+import "./chunk-57ME5VSI.js";
 import "./chunk-CINZGPSJ.js";
+import "./chunk-AER6MT24.js";
 import "./chunk-ZFXCQPNO.js";
 import "./chunk-7OGJQP7T.js";
 import "./chunk-E6ZDCOHM.js";

package/dist/search/factory.js

@@ -2,15 +2,15 @@ import {
   createConversationIndexRuntime,
   createConversationSearchBackend,
   createSearchBackend
-} from "../chunk-B55KFEGS.js";
-import "../chunk-OUWAQVDJ.js";
-import "../chunk-DOCTITOP.js";
-import "../chunk-CYEPCZN5.js";
-import "../chunk-Q5ZU3RNY.js";
+} from "../chunk-YJ4J2JJ2.js";
 import "../chunk-JOASJWQR.js";
-import "../chunk-AER6MT24.js";
 import "../chunk-RN7MUWON.js";
+import "../chunk-Z6SEG36L.js";
+import "../chunk-DGEZKYVI.js";
+import "../chunk-CYEPCZN5.js";
+import "../chunk-57ME5VSI.js";
 import "../chunk-CINZGPSJ.js";
+import "../chunk-AER6MT24.js";
 import "../chunk-7OGJQP7T.js";
 import "../chunk-E6ZDCOHM.js";
 import "../chunk-OIF36KGD.js";

package/dist/search/index.js

@@ -2,29 +2,29 @@ import {
   createConversationIndexRuntime,
   createConversationSearchBackend,
   createSearchBackend
-} from "../chunk-B55KFEGS.js";
+} from "../chunk-YJ4J2JJ2.js";
+import {
+  RemoteSearchBackend
+} from "../chunk-JOASJWQR.js";
+import {
+  EmbedHelper
+} from "../chunk-RN7MUWON.js";
 import {
   LanceDbBackend
-} from "../chunk-OUWAQVDJ.js";
+} from "../chunk-Z6SEG36L.js";
 import {
   MeilisearchBackend
-} from "../chunk-DOCTITOP.js";
+} from "../chunk-DGEZKYVI.js";
 import {
   NoopSearchBackend
 } from "../chunk-CYEPCZN5.js";
 import {
   OramaBackend
-} from "../chunk-Q5ZU3RNY.js";
-import {
-  RemoteSearchBackend
-} from "../chunk-JOASJWQR.js";
+} from "../chunk-57ME5VSI.js";
+import "../chunk-CINZGPSJ.js";
 import {
   scanMemoryDir
 } from "../chunk-AER6MT24.js";
-import {
-  EmbedHelper
-} from "../chunk-RN7MUWON.js";
-import "../chunk-CINZGPSJ.js";
 import "../chunk-7OGJQP7T.js";
 import "../chunk-E6ZDCOHM.js";
 import "../chunk-OIF36KGD.js";

package/dist/search/lancedb-backend.js

@@ -1,8 +1,8 @@
 import {
   LanceDbBackend
-} from "../chunk-OUWAQVDJ.js";
-import "../chunk-AER6MT24.js";
+} from "../chunk-Z6SEG36L.js";
 import "../chunk-CINZGPSJ.js";
+import "../chunk-AER6MT24.js";
 import "../chunk-YNQ6DFSV.js";
 import "../chunk-5GPPACXK.js";
 import "../chunk-2ODBA7MQ.js";

package/dist/search/meilisearch-backend.js

@@ -1,8 +1,8 @@
 import {
   MeilisearchBackend
-} from "../chunk-DOCTITOP.js";
-import "../chunk-AER6MT24.js";
+} from "../chunk-DGEZKYVI.js";
 import "../chunk-CINZGPSJ.js";
+import "../chunk-AER6MT24.js";
 import "../chunk-YNQ6DFSV.js";
 import "../chunk-5GPPACXK.js";
 import "../chunk-2ODBA7MQ.js";

package/dist/search/orama-backend.js

@@ -1,9 +1,9 @@
 import {
   OramaBackend,
   resolveOramaCollectionDbFilePath
-} from "../chunk-Q5ZU3RNY.js";
-import "../chunk-AER6MT24.js";
+} from "../chunk-57ME5VSI.js";
 import "../chunk-CINZGPSJ.js";
+import "../chunk-AER6MT24.js";
 import "../chunk-YNQ6DFSV.js";
 import "../chunk-5GPPACXK.js";
 import "../chunk-2ODBA7MQ.js";

package/dist/transfer/autodetect.js

@@ -4,8 +4,8 @@ import {
 import "../chunk-2DL3OFLD.js";
 import "../chunk-G4IAEX6D.js";
 import "../chunk-765K3SAT.js";
-import "../chunk-J4EB7DNW.js";
 import "../chunk-WEHSQBFR.js";
+import "../chunk-J4EB7DNW.js";
 import "../chunk-UI3NYK34.js";
 import "../chunk-GCGJW34D.js";
 import "../chunk-PZ5AY32C.js";

package/dist/transfer/backup.js

@@ -2,8 +2,8 @@ import {
   backupMemoryDir
 } from "../chunk-2NLLXCJG.js";
 import "../chunk-765K3SAT.js";
-import "../chunk-J4EB7DNW.js";
 import "../chunk-X7Y7WX73.js";
+import "../chunk-J4EB7DNW.js";
 import "../chunk-UI3NYK34.js";
 import "../chunk-GCGJW34D.js";
 import "../chunk-BJMBJZ2Y.js";

package/dist/transfer/capsule-export.js

@@ -1,10 +1,10 @@
 import {
   exportCapsule,
   isValidCapsuleSince
-} from "../chunk-IPLYGWQF.js";
-import "../chunk-J4EB7DNW.js";
+} from "../chunk-KQAFEZQX.js";
 import "../chunk-WEHSQBFR.js";
 import "../chunk-X7Y7WX73.js";
+import "../chunk-J4EB7DNW.js";
 import "../chunk-UI3NYK34.js";
 import "../chunk-GCGJW34D.js";
 import "../chunk-BJMBJZ2Y.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.3.676",
+  "version": "9.3.677",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -451,6 +451,11 @@
       "remnic-source": "./src/coding/optional-coding-graph.ts",
       "import": "./dist/coding/optional-coding-graph.js"
     },
+    "./coding/coding-graph-types": {
+      "types": "./dist/coding/coding-graph-types.d.ts",
+      "remnic-source": "./src/coding/coding-graph-types.ts",
+      "import": "./dist/coding/coding-graph-types.js"
+    },
     "./commitment-ledger": {
       "types": "./dist/commitment-ledger.d.ts",
       "remnic-source": "./src/commitment-ledger.ts",
@@ -2916,7 +2921,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.3.676"
+    "@remnic/coding-graph": "^9.3.677"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/orchestrator.ts

@@ -325,6 +325,7 @@ import {
   recallNamespacesForPrincipal,
   resolvePrincipal,
 } from "./namespaces/principal.js";
+import { resolveScopePlan } from "./scopes/scope-plan.js";
 import {
   expandScopeProfileReadNamespaces,
   resolveScopeProfilePlan,
@@ -5770,7 +5771,8 @@ export class Orchestrator {
       options.principalOverride.length > 0
         ? options.principalOverride
         : resolvePrincipal(sessionKey, this.config);
-    if (this.config.namespacesEnabled && !principal) {
+    const namespacesEnabled = this.config.namespacesEnabled;
+    if (namespacesEnabled && !principal) {
       throw new Error("authentication required: namespaces are enabled and no principal was supplied");
     }
 
@@ -5862,6 +5864,7 @@ export class Orchestrator {
             options.namespace?.trim() || undefined,
             options.principalOverride,
             caps,
+            namespacesEnabled,
           );
         } catch (err) {
           log.debug(`direct-answer observation setup failed: ${err}`);
@@ -5931,62 +5934,27 @@ export class Orchestrator {
     namespaceOverride: string | undefined,
     principalOverride: string | undefined,
     caps: CapabilitySet,
+    namespacesEnabled: boolean,
   ): void {
     const expectedSnapshot = this.lastRecall.get(sessionKey);
     if (expectedSnapshot === null) return;
     if (expectedSnapshot.plannerMode === "no_recall") return;
 
-    const principal = principalOverride ?? resolvePrincipal(sessionKey, this.config);
-    // Coding-agent overlay (issue #569) is applied when the session has a
-    // coding context and there is no explicit namespaceOverride — mirrors
-    // the main recall path above.
-    const observationCodingOverlay =
-      namespaceOverride && canReadNamespace(principal, namespaceOverride, this.config)
-        ? null
-        : this.applyCodingRecallOverlay(sessionKey);
-    const observationPrincipalSelf = defaultNamespaceForPrincipal(principal, this.config);
-    const observationCodingSelf = observationCodingOverlay
-      ? combineNamespaces(observationPrincipalSelf, observationCodingOverlay.namespace)
-      : null;
-    const observationScopeProfilePlan =
-      namespaceOverride && canReadNamespace(principal, namespaceOverride, this.config)
-        ? null
-        : resolveScopeProfilePlan({
-            config: this.config,
-            principal,
-            codingContext: sessionKey
-              ? this.getCodingContextForSession(sessionKey)
-              : null,
-            codingOverlay: observationCodingOverlay,
-          });
-    let observationNamespaces: string[];
-    if (namespaceOverride && canReadNamespace(principal, namespaceOverride, this.config)) {
-      observationNamespaces = [namespaceOverride];
-    } else if (observationScopeProfilePlan) {
-      observationNamespaces = expandScopeProfileReadNamespaces({
-        profilePlan: observationScopeProfilePlan,
-        principalSelfNamespace: observationScopeProfilePlan.baseNamespace,
-        config: this.config,
-        principal,
-        codingOverlay: observationCodingOverlay,
-        legacyRecallNamespaces: recallNamespacesForPrincipal(principal, this.config),
-      });
-    } else if (observationCodingOverlay && observationCodingSelf) {
-      // Rule 42 / parity with the main recall path: substitute the self
-      // namespace within the principal's recall list rather than
-      // replacing the full list. Preserves shared and policy-include
-      // namespaces for direct-answer observation queries.
-      const base = recallNamespacesForPrincipal(principal, this.config);
-      const mapped = base.map((ns) =>
-        ns === observationPrincipalSelf ? observationCodingSelf : ns,
-      );
-      const fallbackNs = observationCodingOverlay.readFallbacks.map((fallback) =>
-        combineNamespaces(observationPrincipalSelf, fallback),
-      );
-      observationNamespaces = Array.from(new Set<string>([...mapped, ...fallbackNs]));
-    } else {
-      observationNamespaces = recallNamespacesForPrincipal(principal, this.config);
-    }
+    // Resolve the observation namespace set through the SAME ScopePlan resolver
+    // the main recall path uses (#1521). The observe path does NOT throw on an
+    // unreadable override (it falls through to the coding/legacy branches), so
+    // we skip the readability gate the recall path enforces.
+    const observationScopePlan = resolveScopePlan({
+      config: this.config,
+      sessionKey,
+      namespace: namespaceOverride,
+      principalOverride,
+      codingContext: sessionKey
+        ? this.getCodingContextForSession(sessionKey)
+        : null,
+      namespacesEnabled,
+    });
+    const observationNamespaces = observationScopePlan.readNamespaces;
     const observationQueryPolicy = buildRecallQueryPolicy(prompt, sessionKey, {
       cronRecallPolicyEnabled: this.config.cronRecallPolicyEnabled,
       cronRecallNormalizedQueryMaxChars:
@@ -7587,14 +7555,11 @@ export class Orchestrator {
         && options.principalOverride.length > 0
         ? options.principalOverride
         : resolvePrincipal(sessionKey, this.config);
-    if (this.config.namespacesEnabled && !principal) {
+    const namespacesEnabled = this.config.namespacesEnabled;
+    if (namespacesEnabled && !principal) {
       throw new Error("authentication required: namespaces are enabled and no principal was supplied");
     }
     const namespaceOverride = options.namespace?.trim() || undefined;
-    const readableRecallNamespaces = recallNamespacesForPrincipal(
-      principal,
-      this.config,
-    );
     if (
       namespaceOverride &&
       !canReadNamespace(principal, namespaceOverride, this.config)
@@ -7603,147 +7568,35 @@ export class Orchestrator {
         `namespace override is not readable: ${namespaceOverride}`,
       );
     }
-    // Recall path — overlay the coding-agent namespace (issue #569) when
-    // the session has a codingContext and `codingMode.projectScope` is true.
-    // Explicit `namespace` option still wins, preserving pre-#569 semantics.
-    //
-    // Rule 42: the overlay substitutes the SELF namespace within the
-    // principal's recall list — it does NOT replace the full list. Shared
-    // and `includeInRecallByDefault` policy namespaces stay in the recall
-    // set so coding sessions continue to see team/shared memories. The
-    // overlay is combined with the principal base through `combineNamespaces`
-    // to preserve principal isolation (cross-tenant leakage guard).
-    const codingOverlay = namespaceOverride ? null : this.applyCodingRecallOverlay(sessionKey);
-    const principalSelfNamespace = defaultNamespaceForPrincipal(principal, this.config);
-    const codingSelfNamespace = codingOverlay
-      ? combineNamespaces(principalSelfNamespace, codingOverlay.namespace)
-      : null;
-    const scopeProfilePlan = namespaceOverride
-      ? null
-      : resolveScopeProfilePlan({
-          config: this.config,
-          principal,
-          codingContext: sessionKey
-            ? this.getCodingContextForSession(sessionKey)
-            : null,
-          codingOverlay,
-        });
-    const profileEffectiveNamespace = scopeProfilePlan?.writeNamespace || scopeProfilePlan?.readNamespaces[0];
-    const selfNamespace =
-      namespaceOverride ??
-      profileEffectiveNamespace ??
-      codingSelfNamespace ??
-      principalSelfNamespace;
-    let recallNamespaces: string[];
-    if (namespaceOverride) {
-      recallNamespaces = [namespaceOverride];
-    } else if (scopeProfilePlan) {
-      recallNamespaces = expandScopeProfileReadNamespaces({
-        profilePlan: scopeProfilePlan,
-        principalSelfNamespace: scopeProfilePlan.baseNamespace,
-        config: this.config,
-        principal,
-        codingOverlay,
-        legacyRecallNamespaces: readableRecallNamespaces,
-      });
-    } else if (codingOverlay && codingSelfNamespace) {
-      // Substitute the principal's self namespace with the coding-scoped
-      // one, and append any read fallbacks (branch→project, PR 3) combined
-      // with the principal base so principal isolation is preserved on
-      // fallback entries as well.
-      const mapped = readableRecallNamespaces.map((ns) =>
-        ns === principalSelfNamespace ? codingSelfNamespace : ns,
-      );
-      const fallbackNs = codingOverlay.readFallbacks.map((fallback) =>
-        combineNamespaces(principalSelfNamespace, fallback),
-      );
-      recallNamespaces = Array.from(new Set<string>([...mapped, ...fallbackNs]));
-    } else {
-      recallNamespaces = readableRecallNamespaces;
-    }
-    // Catalog touch (issue #1499): record reads against the recalled namespaces
-    // so the catalog reflects active read scopes. Best-effort, failure-tolerant.
-    // Round 3 (codex P2): gate behind the no_recall guard — when the planner
-    // selects `no_recall` retrieval is skipped entirely (see the early return at
-    // `recallMode === "no_recall"` below), so marking every readable namespace as
-    // read would falsely inflate `lastReadAt` / catalog recency.
-    // Round 4 (codex P2): also skip when the effective memory result limit is
-    // zero (`topK: 0`, a disabled/zero `memories` recall section, etc.). The QMD
-    // path explicitly returns before searching when `recallResultLimit <= 0`, so
-    // no namespace is actually read and the touch would be spurious.
-    // NOTE: the catalog read touch is recorded LATER, immediately after the
-    // Phase 1 `throwIfRecallAborted` gate (round 6, codex P2 / cursor Medium —
-    // NDXHa/NDmle), so it fires only once retrieval is actually about to run.
-    // Recording it here (recall entry) would set `lastReadAt` for recalls that
-    // are aborted, error out, or short-circuit before any QMD/filesystem read.
-
-    // Effective LCM read NAMESPACE SET (#1505 thread "Include coding fallback
-    // namespaces in LCM reads"). `observe` archives LCM / structured history
-    // under `${effectiveNamespace}:${sessionKey}` for whichever namespace was
-    // effective at write time. A branch-scoped session whose evidence was
-    // archived at project / root scope must still surface it, exactly as normal
-    // QMD/file recall does — QMD/file recall searches the primary overlay key AND
-    // `codingOverlay.readFallbacks` (project / root), NOT just the primary
-    // overlay key. The prior single `lcmReadSessionId` only targeted the primary
-    // overlay, so branch-scoped sessions missed fallback LCM evidence.
+    // Resolve every namespace-bearing field through ONE ScopePlan (#1521): the
+    // read set, the LCM read keys, the coding overlay, and the scope-profile plan
+    // all come from a single pure resolver that delegates to the same helpers
+    // the inline code used. Parity snapshots in scope-plan.test.ts pin the
+    // outputs so this migration cannot change behavior.
     //
-    // READ-AUTHORIZATION (preserved from the prior round's
-    // `lcmReadNamespaceForSession` gate; rule 39 / 42 / 48): the coding-overlay
-    // namespace AND its fallbacks are `<principal>-project-*` sub-namespaces of
-    // the principal SELF base, authorized transitively by that base. They are
-    // included ONLY when the principal self base is in the readable recall set
-    // (`readableRecallNamespaces` — gated by `defaultRecallNamespaces.includes
-    // ("self")` AND `canReadNamespace`). When the self base is NOT readable (e.g.
-    // a write-only / self-omitted principal), the overlay rows are unauthorized
-    // for this reader, so the LCM read collapses to the default store — exactly
-    // what an unqualified, unauthorized recall resolves to — and NEVER searches a
-    // `<principal>-project-*` key (no cross-tenant read leak). This mirrors what
-    // the rest of recall surfaces for such a principal (its readable
-    // shared/policy namespaces have no per-session LCM key, so they contribute
-    // nothing here). `recallNamespaces` itself appends fallbacks unconditionally
-    // for QMD/file recall; the LCM read keys apply the stricter, self-base gate
-    // so the prior round's authorization invariant is preserved.
-    const codingOverlaySelfReadable =
-      codingOverlay !== null &&
-      (scopeProfilePlan
-        ? scopeProfilePlan.layers.some((layer) => layer.id === "userProject" && layer.readable)
-        : readableRecallNamespaces.includes(principalSelfNamespace));
-    let lcmReadNamespaces: string[];
-    if (namespaceOverride) {
-      // Explicit namespace already read-authorized above (canReadNamespace gate).
-      lcmReadNamespaces = [namespaceOverride];
-    } else if (scopeProfilePlan) {
-      // Scope profiles define a layered read stack; LCM-backed evidence uses the
-      // same namespace set as QMD/file recall so team/global/shared observations
-      // are not silently skipped.
-      lcmReadNamespaces = recallNamespaces;
-    } else if (codingOverlay && codingSelfNamespace && codingOverlaySelfReadable) {
-      // Self base readable → overlay rows authorized. Read the primary overlay
-      // key first, then each coding read fallback (project → root), combined with
-      // the principal base for isolation — the SAME ordered set QMD/file recall
-      // searches for this authorized coding session.
-      const fallbackNs = codingOverlay.readFallbacks.map((fallback) =>
-        combineNamespaces(principalSelfNamespace, fallback),
-      );
-      lcmReadNamespaces = [codingSelfNamespace, ...fallbackNs];
-    } else {
-      // No overlay, OR overlay present but self base unreadable → collapse to the
-      // default store (raw sessionKey), exactly as the prior round did. No
-      // `<principal>-project-*` overlay key is searched.
-      lcmReadNamespaces = [this.config.defaultNamespace];
-    }
-    // Map the ordered, read-authorized namespace set → ordered, deduped LCM read
-    // session_id set. Single-user / no-overlay recall passes a single-namespace
-    // set that collapses to the raw `sessionKey`, so this is `[sessionKey]` —
-    // byte-for-byte the pre-#1495 single-key behavior.
-    const lcmReadSessionIds =
-      scopeProfilePlan && !sessionKey
-        ? []
-        : lcmReadSessionIdsForNamespaces(
-            lcmReadNamespaces,
-            sessionKey,
-            this.config.defaultNamespace,
-          );
+    // Catalog read touch (issue #1499) is recorded LATER — after the Phase 1
+    // abort gate — so it fires only when retrieval actually runs, not for
+    // aborted / short-circuited recalls.
+    const scopePlan = resolveScopePlan({
+      config: this.config,
+      sessionKey,
+      namespace: options.namespace,
+      principalOverride:
+        typeof options.principalOverride === "string"
+          && options.principalOverride.length > 0
+          ? options.principalOverride
+          : undefined,
+      codingContext: sessionKey
+        ? this.getCodingContextForSession(sessionKey)
+        : null,
+      namespacesEnabled,
+    });
+    const {
+      readNamespaces: recallNamespaces,
+      baseNamespace: selfNamespace,
+      scopeProfilePlan,
+      lcmReadSessionIds,
+    } = scopePlan;
     // Query an LCM-backed read across the ordered read key set and return the
     // FIRST non-empty result (#1505 fallback-namespace unification). The primary
     // overlay key is tried first; if a branch-scoped session has no rows under its