@remnic/core 9.3.680 → 9.3.682

package/dist/{chunk-RC3AFF6Z.js → chunk-JD4SCARD.js}

@@ -216,4 +216,4 @@ export {
   getCausalTrajectoryStoreStatus,
   searchCausalTrajectories
 };
-//# sourceMappingURL=chunk-RC3AFF6Z.js.map
+//# sourceMappingURL=chunk-JD4SCARD.js.map

package/dist/{chunk-LVTTO3VC.js → chunk-KACIOX42.js}

@@ -1,6 +1,6 @@
 import {
   StorageManager
-} from "./chunk-EUM7CZFM.js";
+} from "./chunk-TY5NT3T3.js";
 import {
   getCachedRuleMemories,
   setCachedRuleMemories
@@ -117,4 +117,4 @@ export {
   compareVerifiedSemanticRuleResults,
   searchVerifiedSemanticRules
 };
-//# sourceMappingURL=chunk-LVTTO3VC.js.map
+//# sourceMappingURL=chunk-KACIOX42.js.map

package/dist/{chunk-VDX2J7OX.js → chunk-KQAFEZQX.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-WEHSQBFR.js";
 import {
   encryptCapsuleFile
-} from "./chunk-DQEMWVMT.js";
+} from "./chunk-X7Y7WX73.js";
 import {
   CAPSULE_SCHEMA_VERSION,
   EXPORT_FORMAT
@@ -261,4 +261,4 @@ export {
   exportCapsule,
   isValidCapsuleSince
 };
-//# sourceMappingURL=chunk-VDX2J7OX.js.map
+//# sourceMappingURL=chunk-KQAFEZQX.js.map

package/dist/{chunk-ATRB6Q25.js → chunk-KV6CX4ON.js}

@@ -1,7 +1,7 @@
 import {
   StorageManager,
   normalizeEntityName
-} from "./chunk-EUM7CZFM.js";
+} from "./chunk-TY5NT3T3.js";
 import {
   extractJsonCandidates
 } from "./chunk-RGMVMVMF.js";
@@ -870,4 +870,4 @@ export {
   resolveBriefingSaveDir,
   briefingFilename
 };
-//# sourceMappingURL=chunk-ATRB6Q25.js.map
+//# sourceMappingURL=chunk-KV6CX4ON.js.map

package/dist/{chunk-VL5JJOOY.js → chunk-L5MUA6Q7.js}

@@ -1,15 +1,15 @@
 import {
   StorageManager
-} from "./chunk-EUM7CZFM.js";
+} from "./chunk-TY5NT3T3.js";
 import {
   assertPathInsideRoot
 } from "./chunk-5GPPACXK.js";
-import {
-  decideLifecycleTransition
-} from "./chunk-TBBDFYXW.js";
 import {
   RECALL_FALLBACK_DIRS
 } from "./chunk-VS2IYZRU.js";
+import {
+  decideLifecycleTransition
+} from "./chunk-TBBDFYXW.js";
 
 // src/maintenance/memory-governance.ts
 import path from "path";
@@ -751,4 +751,4 @@ export {
   listMemoryGovernanceRuns,
   readMemoryGovernanceRunArtifact
 };
-//# sourceMappingURL=chunk-VL5JJOOY.js.map
+//# sourceMappingURL=chunk-L5MUA6Q7.js.map

package/dist/{chunk-W67ZZDHO.js → chunk-M4I3TREG.js}

@@ -7,18 +7,12 @@ import {
 import {
   openclawReplayNormalizer
 } from "./chunk-7F7Z6MOS.js";
-import {
-  importSqlite
-} from "./chunk-AGNBY3VG.js";
-import {
-  exportJsonBundle
-} from "./chunk-UP6MOYCB.js";
-import {
-  exportSqlite
-} from "./chunk-7VFZTJ7K.js";
 import {
   importMarkdownBundle
 } from "./chunk-HDDRVXX4.js";
+import {
+  importSqlite
+} from "./chunk-APJQ6UEA.js";
 import {
   detectImportFormat
 } from "./chunk-OZKVVUJB.js";
@@ -27,15 +21,16 @@ import {
 } from "./chunk-2DL3OFLD.js";
 import {
   backupMemoryDir
-} from "./chunk-BXLOS5AJ.js";
+} from "./chunk-2NLLXCJG.js";
+import {
+  exportJsonBundle
+} from "./chunk-UP6MOYCB.js";
 import {
   exportMarkdownBundle
 } from "./chunk-765K3SAT.js";
 import {
-  buildReplayNormalizerRegistry,
-  clampBatchSize,
-  runReplay
-} from "./chunk-HOJZMQ4J.js";
+  exportSqlite
+} from "./chunk-7VFZTJ7K.js";
 import {
   TailscaleHelper
 } from "./chunk-EEC4PCG5.js";
@@ -43,49 +38,63 @@ import {
   WebDavServer
 } from "./chunk-PYIFUBRK.js";
 import {
-  migrateObservations
-} from "./chunk-D6RIFG4O.js";
+  buildReplayNormalizerRegistry,
+  clampBatchSize,
+  runReplay
+} from "./chunk-HOJZMQ4J.js";
 import {
   rebuildMemoryLifecycleLedger
-} from "./chunk-MTJ2LFAJ.js";
+} from "./chunk-H6PMGMNP.js";
 import {
   rebuildMemoryProjection,
   repairMemoryProjection,
   verifyMemoryProjection
-} from "./chunk-ZCVPFDHB.js";
+} from "./chunk-UAODC6GJ.js";
 import {
   rebuildObservations
 } from "./chunk-LZZNTPLR.js";
 import {
   archiveObservations
 } from "./chunk-WMWVO45V.js";
+import {
+  migrateObservations
+} from "./chunk-D6RIFG4O.js";
+import {
+  runCompatChecks
+} from "./chunk-GQL52GQ5.js";
 import {
   getBulkImportSource,
   listBulkImportSources,
   registerBulkImportSource,
   runBulkImportPipeline
 } from "./chunk-CKITWVWJ.js";
-import {
-  runCompatChecks
-} from "./chunk-GQL52GQ5.js";
 import {
   migrateSessionTranscripts,
   planSessionTranscriptMigration
 } from "./chunk-EVWIEEKZ.js";
 import {
   promoteSemanticRuleFromMemory
-} from "./chunk-3OKWZT7F.js";
-import {
-  resolveAgentAccessAuthToken
-} from "./chunk-TGQ2NTWH.js";
+} from "./chunk-3IND7N4X.js";
 import {
   buildResumeBundleFromState,
   getResumeBundleStatus,
   recordResumeBundle
 } from "./chunk-ODWI5XU2.js";
+import {
+  resolveAgentAccessAuthToken
+} from "./chunk-TGQ2NTWH.js";
 import {
   parseXrayCliOptions
 } from "./chunk-GSTYVG5L.js";
+import {
+  collectPatternMemories,
+  explainPatternMemory,
+  parsePatternsExplainOptions,
+  parsePatternsListOptions,
+  parseStrictCliDate,
+  renderPatternExplain,
+  renderPatternsList
+} from "./chunk-3T74IZB3.js";
 import {
   runBenchmarkRecall,
   runOperatorConfigReview,
@@ -93,24 +102,15 @@ import {
   runOperatorInventory,
   runOperatorRepair,
   runOperatorSetup
-} from "./chunk-2AP4QJX5.js";
+} from "./chunk-TOQEZ63C.js";
 import {
   listNamespaces,
   runNamespaceMigration,
   verifyNamespaces
-} from "./chunk-ACYX37IM.js";
-import {
-  collectPatternMemories,
-  explainPatternMemory,
-  parsePatternsExplainOptions,
-  parsePatternsListOptions,
-  parseStrictCliDate,
-  renderPatternExplain,
-  renderPatternsList
-} from "./chunk-3T74IZB3.js";
+} from "./chunk-QUA2JPH2.js";
 import {
   GraphDashboardServer
-} from "./chunk-EZ25VE3G.js";
+} from "./chunk-YNDLCWXS.js";
 import {
   isReplaySource,
   normalizeReplaySessionKey
@@ -118,9 +118,6 @@ import {
 import {
   RoutingRulesStore
 } from "./chunk-X6IRLNOO.js";
-import {
-  searchVerifiedEpisodes
-} from "./chunk-NXBXM7Q6.js";
 import {
   getUtilityLearningStatus,
   learnUtilityPromotionWeights
@@ -129,12 +126,15 @@ import {
   getUtilityTelemetryStatus,
   recordUtilityTelemetryEvent
 } from "./chunk-TERNBNJB.js";
+import {
+  searchVerifiedEpisodes
+} from "./chunk-I75DF4FZ.js";
 import {
   ThreadingManager
 } from "./chunk-W4RVMTHR.js";
 import {
   searchVerifiedSemanticRules
-} from "./chunk-LVTTO3VC.js";
+} from "./chunk-KACIOX42.js";
 import {
   getWorkProductLedgerStatus,
   recordWorkProductLedgerEntry,
@@ -169,12 +169,12 @@ import {
 import {
   listConnectorStates
 } from "./chunk-6GUG4YNM.js";
-import {
-  searchHarmonicRetrieval
-} from "./chunk-AV5ZEH4M.js";
 import {
   rescoreMemoryImportance
 } from "./chunk-JXS5PDQ7.js";
+import {
+  searchHarmonicRetrieval
+} from "./chunk-AV5ZEH4M.js";
 import {
   createEvalBaselineSnapshot,
   getEvalHarnessStatus,
@@ -184,15 +184,6 @@ import {
   runEvalStoredBaselineCiGate,
   validateEvalBenchmarkPack
 } from "./chunk-3PY7VHV7.js";
-import {
-  getCueAnchorStoreStatus
-} from "./chunk-FZZ2QTJI.js";
-import {
-  applyCommitmentLedgerLifecycle,
-  getCommitmentLedgerStatus,
-  recordCommitmentLedgerEntry,
-  transitionCommitmentLedgerEntryState
-} from "./chunk-LMDRGRJ2.js";
 import {
   buildConnectorRowsFromDefinitions,
   parseConnectorsListOptions,
@@ -202,6 +193,15 @@ import {
   renderConnectorsRunResult,
   runConnectorPollOnce
 } from "./chunk-OKTXM5H4.js";
+import {
+  getCueAnchorStoreStatus
+} from "./chunk-FZZ2QTJI.js";
+import {
+  applyCommitmentLedgerLifecycle,
+  getCommitmentLedgerStatus,
+  recordCommitmentLedgerEntry,
+  transitionCommitmentLedgerEntryState
+} from "./chunk-LMDRGRJ2.js";
 import {
   resolveNamespaceChildRoot
 } from "./chunk-3UXOZBHV.js";
@@ -216,16 +216,16 @@ import {
 } from "./chunk-OADWQ5CR.js";
 import {
   EngramAccessHttpServer
-} from "./chunk-DWQPM67F.js";
+} from "./chunk-QVWM4C24.js";
 import {
   WearablesInputError
 } from "./chunk-7WV3F5DQ.js";
 import {
   EngramMcpServer
-} from "./chunk-5TEYIXMP.js";
+} from "./chunk-FDSOMA6M.js";
 import {
   EngramAccessService
-} from "./chunk-OBM7EVFU.js";
+} from "./chunk-H4BDNIKQ.js";
 import {
   WorkStorage
 } from "./chunk-GDB4J2H3.js";
@@ -234,12 +234,6 @@ import {
   renderRecallExplain,
   renderXray
 } from "./chunk-OHX52AOS.js";
-import {
-  listMemoryGovernanceRuns,
-  readMemoryGovernanceRunArtifact,
-  restoreMemoryGovernanceRun,
-  runMemoryGovernance
-} from "./chunk-VL5JJOOY.js";
 import {
   getTrustZoneStoreStatus,
   promoteTrustZoneRecord,
@@ -248,9 +242,18 @@ import {
 import {
   getObjectiveStateStoreStatus
 } from "./chunk-6HMYUWXR.js";
+import {
+  listMemoryGovernanceRuns,
+  readMemoryGovernanceRunArtifact,
+  restoreMemoryGovernanceRun,
+  runMemoryGovernance
+} from "./chunk-L5MUA6Q7.js";
 import {
   analyzeGraphHealth
 } from "./chunk-2LDBXPLB.js";
+import {
+  getCausalTrajectoryStoreStatus
+} from "./chunk-JD4SCARD.js";
 import {
   assertPathInsideRoot
 } from "./chunk-5GPPACXK.js";
@@ -259,8 +262,13 @@ import {
   isRecallDisclosure
 } from "./chunk-FMSDA2D3.js";
 import {
-  getCausalTrajectoryStoreStatus
-} from "./chunk-RC3AFF6Z.js";
+  RECALL_FALLBACK_DIRS
+} from "./chunk-VS2IYZRU.js";
+import {
+  buildActionConfidenceInputFromOptions,
+  evaluateActionConfidence,
+  renderActionConfidenceText
+} from "./chunk-AH2JUU6X.js";
 import {
   selectRouteRule,
   validateRouteTarget
@@ -271,14 +279,6 @@ import {
 import {
   resolveHomeDir
 } from "./chunk-JUC24CTX.js";
-import {
-  RECALL_FALLBACK_DIRS
-} from "./chunk-VS2IYZRU.js";
-import {
-  buildActionConfidenceInputFromOptions,
-  evaluateActionConfidence,
-  renderActionConfidenceText
-} from "./chunk-AH2JUU6X.js";
 
 // src/cli.ts
 import path2 from "path";
@@ -3617,7 +3617,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
           }
         }
         if (sourceArchive.endsWith(".enc")) {
-          const { isEncryptedCapsuleFile } = await import("./capsule-crypto-YO5QJ6L3.js");
+          const { isEncryptedCapsuleFile } = await import("./capsule-crypto-7FJQINUR.js");
           const encDetected = await isEncryptedCapsuleFile(sourceArchive).catch(() => true);
           if (encDetected) {
             throw new Error(
@@ -3780,7 +3780,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
           const { parseExportBundle } = await import("./transfer/types.js");
           let decryptedBuf;
           try {
-            const { decryptCapsuleFileInMemory } = await import("./capsule-crypto-YO5QJ6L3.js");
+            const { decryptCapsuleFileInMemory } = await import("./capsule-crypto-7FJQINUR.js");
             decryptedBuf = await decryptCapsuleFileInMemory(archivePath, memoryDir);
           } catch (decErr) {
             const msg = decErr instanceof Error ? decErr.message : String(decErr);
@@ -7311,4 +7311,4 @@ export {
   listMemoryMarkdownFilePaths,
   registerCli
 };
-//# sourceMappingURL=chunk-W67ZZDHO.js.map
+//# sourceMappingURL=chunk-M4I3TREG.js.map

package/dist/chunk-NHFXF4ZO.js

@@ -0,0 +1,107 @@
+import {
+  EngramAccessInputError
+} from "./chunk-H4BDNIKQ.js";
+import {
+  expandTildePath
+} from "./chunk-EYIEWJNI.js";
+
+// src/access-boundary.ts
+import { z } from "zod";
+function coerceBooleanLike(value) {
+  if (value === void 0 || value === null || value === "") return void 0;
+  if (typeof value === "boolean") return value;
+  if (typeof value === "string") {
+    const lower = value.trim().toLowerCase();
+    if (lower === "true" || lower === "1" || lower === "yes" || lower === "on") return true;
+    if (lower === "false" || lower === "0" || lower === "no" || lower === "off") return false;
+  }
+  throw new EngramAccessInputError(
+    `expected a boolean-like value (true|false|1|0|yes|no|on|off); got ${JSON.stringify(value)}`
+  );
+}
+function coercePositiveInteger(value, label) {
+  if (value === void 0 || value === null || value === "") return void 0;
+  if (typeof value === "number") {
+    if (!Number.isFinite(value) || value <= 0 || !Number.isInteger(value)) {
+      throw new EngramAccessInputError(`${label} expects a positive integer; got ${JSON.stringify(value)}`);
+    }
+    return value;
+  }
+  if (typeof value === "string") {
+    const trimmed = value.trim();
+    if (!/^[+-]?\d+$/.test(trimmed)) {
+      throw new EngramAccessInputError(`${label} expects a positive integer; got ${JSON.stringify(value)}`);
+    }
+    const parsed = Number(trimmed);
+    if (!Number.isSafeInteger(parsed) || parsed <= 0) {
+      throw new EngramAccessInputError(`${label} expects a positive integer; got ${JSON.stringify(value)}`);
+    }
+    return parsed;
+  }
+  throw new EngramAccessInputError(`${label} expects a positive integer; got ${JSON.stringify(value)}`);
+}
+function normalizeOptionalPath(value) {
+  if (value === void 0 || value === null || value === "") return void 0;
+  if (typeof value !== "string") {
+    throw new EngramAccessInputError(`expected a path string; got ${JSON.stringify(value)}`);
+  }
+  return expandTildePath(value);
+}
+function formatZodIssues(error) {
+  const parts = [];
+  for (const issue of error.issues) {
+    const path = issue.path.length > 0 ? issue.path.join(".") : "(root)";
+    const options = enumOptionsFromIssue(issue);
+    const suffix = options ? `. Valid: ${options.join(", ")}` : "";
+    parts.push(`${path}: ${issue.message}${suffix}`);
+  }
+  return parts.length > 0 ? `request validation failed: ${parts.join("; ")}` : "request validation failed";
+}
+function enumOptionsFromIssue(issue) {
+  if (issue.code === z.ZodIssueCode.invalid_enum_value) {
+    const rawOptions = issue.options;
+    if (Array.isArray(rawOptions)) {
+      return rawOptions.map((opt) => String(opt));
+    }
+  }
+  return void 0;
+}
+var registry = /* @__PURE__ */ new Map();
+function defineOperation(spec) {
+  if (registry.has(spec.name)) {
+    throw new Error(`access-boundary: operation already registered: ${spec.name}`);
+  }
+  const bound = {
+    spec,
+    run: async (rawInput, ctx) => {
+      const parseResult = spec.schema.safeParse(rawInput);
+      if (!parseResult.success) {
+        throw new EngramAccessInputError(formatZodIssues(parseResult.error));
+      }
+      return spec.handler(parseResult.data, ctx);
+    }
+  };
+  registry.set(spec.name, bound);
+  return bound;
+}
+function getOperation(name) {
+  return registry.get(name);
+}
+function listRegisteredOperations() {
+  return [...registry.keys()];
+}
+function __resetRegistryForTest() {
+  registry.clear();
+}
+
+export {
+  coerceBooleanLike,
+  coercePositiveInteger,
+  normalizeOptionalPath,
+  formatZodIssues,
+  defineOperation,
+  getOperation,
+  listRegisteredOperations,
+  __resetRegistryForTest
+};
+//# sourceMappingURL=chunk-NHFXF4ZO.js.map

package/dist/chunk-NHFXF4ZO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/access-boundary.ts"],"sourcesContent":["/**\n * Single input-validation and error boundary for the CLI/MCP/HTTP access\n * surfaces (issue #1525, epic #1520 Phase 1).\n *\n * Every operation that crosses the access-service facade passes through ONE\n * registry entry: a zod-validated request envelope, a shared error mapper,\n * and the \"reject invalid input and list valid options\" behavior that\n * CLAUDE.md rules 14/17/24/28/36/48/51 previously had to be re-implemented\n * per handler. The three surfaces become thin adapters — one operation\n * definition, three transports — so a validation fix lands everywhere at\n * once.\n *\n * Host-agnostic (rule 31): operation names carry no `openclaw-*`/`engram-*`\n * prefix. Session/namespace tenancy stays in the handler layer (resolved via\n * ScopePlan #1521); the boundary validates SHAPE, not tenancy.\n */\n\nimport { z } from \"zod\";\nimport { EngramAccessInputError, type EngramAccessService } from \"./access-service.js\";\nimport { expandTildePath } from \"./utils/path.js\";\n\n// ---------------------------------------------------------------------------\n// Canonical operation names — host-agnostic (rule 31)\n// ---------------------------------------------------------------------------\n\n/**\n * Canonical operation ids. One id is shared by the MCP tool, the HTTP route,\n * and the CLI command that expose the same operation. Add to this union as\n * each domain-group migration PR (memory ops → connectors → namespaces …)\n * lands; the fitness test in `access-surface-catalog.test.ts` treats the\n * registered set as the migration state.\n */\nexport type OperationName =\n  | \"memory_get\"\n  | \"memory_search\"\n  | \"memory_store\";\n\n// ---------------------------------------------------------------------------\n// Operation context — what every handler receives\n// ---------------------------------------------------------------------------\n\n/**\n * Per-call context. `service` is the facade the handler delegates to; the\n * boundary never reaches past it. `authenticatedPrincipal` is resolved by\n * the SURFACE (MCP header / HTTP identity / CLI flag) before the boundary\n * runs, so handlers stay principal-source-agnostic. `hooks` carries\n * transport-level callbacks (e.g. HTTP write-quota enforcement) that must\n * fire atomically inside the service call; surfaces that have no such hook\n * leave it undefined.\n */\nexport interface OperationContext {\n  readonly service: EngramAccessService;\n  readonly authenticatedPrincipal?: string;\n  readonly hooks?: OperationHooks;\n}\n\n/**\n * Transport-level callbacks a handler forwards into the service call. Kept\n * narrow on purpose: the boundary owns validation + dispatch shape, not\n * transport policy. Add fields here only when a surface genuinely needs a\n * callback the service itself consumes.\n */\nexport interface OperationHooks {\n  /** HTTP write-quota gate; throws to reject the write when exhausted. */\n  readonly enforceWriteQuota?: () => void | Promise<void>;\n}\n\n// ---------------------------------------------------------------------------\n// Operation spec + bound operation\n// ---------------------------------------------------------------------------\n\nexport interface OperationSpec<In, Out> {\n  /** Canonical operation id; matches an {@link OperationName}. */\n  readonly name: OperationName;\n  readonly description: string;\n  /** Zod schema validating the raw request envelope. */\n  readonly schema: z.ZodType<In>;\n  /** Handler invoked with the parsed input; throws EngramAccessInputError for domain faults. */\n  readonly handler: (input: In, ctx: OperationContext) => Promise<Out>;\n}\n\nexport interface BoundOperation<In = unknown, Out = unknown> {\n  readonly spec: OperationSpec<In, Out>;\n  /** Validate the raw envelope, then invoke the handler. Throws EngramAccessInputError on any validation failure. */\n  readonly run: (rawInput: unknown, ctx: OperationContext) => Promise<Out>;\n}\n\n// ---------------------------------------------------------------------------\n// Shared normalizers the boundary owns (rules 17, 28, 36, 48, 51)\n// ---------------------------------------------------------------------------\n\n/**\n * Coerce boolean-like strings at the edge (rule 36). Accepts actual booleans\n * and the string spellings clients send (\"true\"/\"false\"/\"1\"/\"0\"/\"yes\"/\"no\"/\n * \"on\"/\"off\", case-insensitive). Rejects anything else loudly — `Boolean(\"false\")`\n * would silently be `true`, which is the bug rule 36 exists to prevent.\n *\n * `undefined`/`null`/`\"\"` → `undefined`, so callers can keep treating an\n * absent flag as \"use the default\" without a separate presence check.\n */\nexport function coerceBooleanLike(value: unknown): boolean | undefined {\n  if (value === undefined || value === null || value === \"\") return undefined;\n  if (typeof value === \"boolean\") return value;\n  if (typeof value === \"string\") {\n    const lower = value.trim().toLowerCase();\n    if (lower === \"true\" || lower === \"1\" || lower === \"yes\" || lower === \"on\") return true;\n    if (lower === \"false\" || lower === \"0\" || lower === \"no\" || lower === \"off\") return false;\n  }\n  throw new EngramAccessInputError(\n    `expected a boolean-like value (true|false|1|0|yes|no|on|off); got ${JSON.stringify(value)}`,\n  );\n}\n\n/**\n * Coerce + validate a positive integer from a numeric string or number\n * (rule 28). Loosely-typed MCP/CLI clients send `\"5\"`; `typeof saved === \"number\"`\n * on read-back would reject it later, so we coerce at the edge and reject\n * booleans/objects loudly (`Number(true) === 1` would silently pass otherwise).\n *\n * `undefined`/`null`/`\"\"` → `undefined`.\n */\nexport function coercePositiveInteger(value: unknown, label: string): number | undefined {\n  if (value === undefined || value === null || value === \"\") return undefined;\n  if (typeof value === \"number\") {\n    if (!Number.isFinite(value) || value <= 0 || !Number.isInteger(value)) {\n      throw new EngramAccessInputError(`${label} expects a positive integer; got ${JSON.stringify(value)}`);\n    }\n    return value;\n  }\n  if (typeof value === \"string\") {\n    const trimmed = value.trim();\n    if (!/^[+-]?\\d+$/.test(trimmed)) {\n      throw new EngramAccessInputError(`${label} expects a positive integer; got ${JSON.stringify(value)}`);\n    }\n    const parsed = Number(trimmed);\n    if (!Number.isSafeInteger(parsed) || parsed <= 0) {\n      throw new EngramAccessInputError(`${label} expects a positive integer; got ${JSON.stringify(value)}`);\n    }\n    return parsed;\n  }\n  throw new EngramAccessInputError(`${label} expects a positive integer; got ${JSON.stringify(value)}`);\n}\n\n/**\n * Expand `~` in a path-shaped input (rule 17). Node `fs` does NOT expand `~`;\n * ad-hoc regex drifts. `undefined`/`null`/`\"\"` → `undefined`.\n */\nexport function normalizeOptionalPath(value: unknown): string | undefined {\n  if (value === undefined || value === null || value === \"\") return undefined;\n  if (typeof value !== \"string\") {\n    throw new EngramAccessInputError(`expected a path string; got ${JSON.stringify(value)}`);\n  }\n  return expandTildePath(value);\n}\n\n// ---------------------------------------------------------------------------\n// Error formatting — rule 51: list valid options, never silently default\n// ---------------------------------------------------------------------------\n\n/**\n * Turn a zod failure into an {@link EngramAccessInputError} whose message\n * names the offending field and — for enum/union issues — lists the valid\n * options, so the caller can correct rather than guess (rule 51).\n */\nexport function formatZodIssues(error: z.ZodError): string {\n  const parts: string[] = [];\n  for (const issue of error.issues) {\n    const path = issue.path.length > 0 ? issue.path.join(\".\") : \"(root)\";\n    const options = enumOptionsFromIssue(issue);\n    const suffix = options ? `. Valid: ${options.join(\", \")}` : \"\";\n    parts.push(`${path}: ${issue.message}${suffix}`);\n  }\n  return parts.length > 0\n    ? `request validation failed: ${parts.join(\"; \")}`\n    : \"request validation failed\";\n}\n\nfunction enumOptionsFromIssue(issue: z.ZodIssue): readonly string[] | undefined {\n  // zod exposes accepted enum values on the issue for ZodEnum / ZodNativeEnum\n  // and on the options of invalid_union discriminators. Reading them here\n  // keeps \"list valid options\" in ONE place rather than per handler.\n  if (issue.code === z.ZodIssueCode.invalid_enum_value) {\n    const rawOptions = (issue as { options?: unknown }).options;\n    if (Array.isArray(rawOptions)) {\n      return rawOptions.map((opt) => String(opt));\n    }\n  }\n  return undefined;\n}\n\n// ---------------------------------------------------------------------------\n// Registry\n// ---------------------------------------------------------------------------\n\nconst registry = new Map<OperationName, BoundOperation>();\n\n/**\n * Register an operation. Throws if the name is already registered — duplicate\n * registration is a programming error, not a runtime input fault, so it throws\n * a plain Error (not the input-error class surfaces translate for clients).\n */\nexport function defineOperation<In, Out>(spec: OperationSpec<In, Out>): BoundOperation<In, Out> {\n  if (registry.has(spec.name)) {\n    throw new Error(`access-boundary: operation already registered: ${spec.name}`);\n  }\n  const bound: BoundOperation<In, Out> = {\n    spec,\n    run: async (rawInput, ctx) => {\n      const parseResult = spec.schema.safeParse(rawInput);\n      if (!parseResult.success) {\n        throw new EngramAccessInputError(formatZodIssues(parseResult.error));\n      }\n      return spec.handler(parseResult.data, ctx);\n    },\n  };\n  // Store under the canonical name; the cast is safe because In/Out are\n  // erased at the registry boundary and recovered by callers via getOperation.\n  registry.set(spec.name, bound as unknown as BoundOperation);\n  return bound;\n}\n\n/** Look up a registered operation by canonical name. */\nexport function getOperation(name: OperationName): BoundOperation | undefined {\n  return registry.get(name);\n}\n\n/** All registered operation names. */\nexport function listRegisteredOperations(): readonly OperationName[] {\n  return [...registry.keys()];\n}\n\n/** Test-only: clear the registry so pilot definitions can be re-registered. */\nexport function __resetRegistryForTest(): void {\n  registry.clear();\n}\n"],"mappings":";;;;;;;;AAiBA,SAAS,SAAS;AAmFX,SAAS,kBAAkB,OAAqC;AACrE,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,GAAI,QAAO;AAClE,MAAI,OAAO,UAAU,UAAW,QAAO;AACvC,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,QAAQ,MAAM,KAAK,EAAE,YAAY;AACvC,QAAI,UAAU,UAAU,UAAU,OAAO,UAAU,SAAS,UAAU,KAAM,QAAO;AACnF,QAAI,UAAU,WAAW,UAAU,OAAO,UAAU,QAAQ,UAAU,MAAO,QAAO;AAAA,EACtF;AACA,QAAM,IAAI;AAAA,IACR,qEAAqE,KAAK,UAAU,KAAK,CAAC;AAAA,EAC5F;AACF;AAUO,SAAS,sBAAsB,OAAgB,OAAmC;AACvF,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,GAAI,QAAO;AAClE,MAAI,OAAO,UAAU,UAAU;AAC7B,QAAI,CAAC,OAAO,SAAS,KAAK,KAAK,SAAS,KAAK,CAAC,OAAO,UAAU,KAAK,GAAG;AACrE,YAAM,IAAI,uBAAuB,GAAG,KAAK,oCAAoC,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,IACtG;AACA,WAAO;AAAA,EACT;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,UAAU,MAAM,KAAK;AAC3B,QAAI,CAAC,aAAa,KAAK,OAAO,GAAG;AAC/B,YAAM,IAAI,uBAAuB,GAAG,KAAK,oCAAoC,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,IACtG;AACA,UAAM,SAAS,OAAO,OAAO;AAC7B,QAAI,CAAC,OAAO,cAAc,MAAM,KAAK,UAAU,GAAG;AAChD,YAAM,IAAI,uBAAuB,GAAG,KAAK,oCAAoC,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,IACtG;AACA,WAAO;AAAA,EACT;AACA,QAAM,IAAI,uBAAuB,GAAG,KAAK,oCAAoC,KAAK,UAAU,KAAK,CAAC,EAAE;AACtG;AAMO,SAAS,sBAAsB,OAAoC;AACxE,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,GAAI,QAAO;AAClE,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,IAAI,uBAAuB,+BAA+B,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,EACzF;AACA,SAAO,gBAAgB,KAAK;AAC9B;AAWO,SAAS,gBAAgB,OAA2B;AACzD,QAAM,QAAkB,CAAC;AACzB,aAAW,SAAS,MAAM,QAAQ;AAChC,UAAM,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK,GAAG,IAAI;AAC5D,UAAM,UAAU,qBAAqB,KAAK;AAC1C,UAAM,SAAS,UAAU,YAAY,QAAQ,KAAK,IAAI,CAAC,KAAK;AAC5D,UAAM,KAAK,GAAG,IAAI,KAAK,MAAM,OAAO,GAAG,MAAM,EAAE;AAAA,EACjD;AACA,SAAO,MAAM,SAAS,IAClB,8BAA8B,MAAM,KAAK,IAAI,CAAC,KAC9C;AACN;AAEA,SAAS,qBAAqB,OAAkD;AAI9E,MAAI,MAAM,SAAS,EAAE,aAAa,oBAAoB;AACpD,UAAM,aAAc,MAAgC;AACpD,QAAI,MAAM,QAAQ,UAAU,GAAG;AAC7B,aAAO,WAAW,IAAI,CAAC,QAAQ,OAAO,GAAG,CAAC;AAAA,IAC5C;AAAA,EACF;AACA,SAAO;AACT;AAMA,IAAM,WAAW,oBAAI,IAAmC;AAOjD,SAAS,gBAAyB,MAAuD;AAC9F,MAAI,SAAS,IAAI,KAAK,IAAI,GAAG;AAC3B,UAAM,IAAI,MAAM,kDAAkD,KAAK,IAAI,EAAE;AAAA,EAC/E;AACA,QAAM,QAAiC;AAAA,IACrC;AAAA,IACA,KAAK,OAAO,UAAU,QAAQ;AAC5B,YAAM,cAAc,KAAK,OAAO,UAAU,QAAQ;AAClD,UAAI,CAAC,YAAY,SAAS;AACxB,cAAM,IAAI,uBAAuB,gBAAgB,YAAY,KAAK,CAAC;AAAA,MACrE;AACA,aAAO,KAAK,QAAQ,YAAY,MAAM,GAAG;AAAA,IAC3C;AAAA,EACF;AAGA,WAAS,IAAI,KAAK,MAAM,KAAkC;AAC1D,SAAO;AACT;AAGO,SAAS,aAAa,MAAiD;AAC5E,SAAO,SAAS,IAAI,IAAI;AAC1B;AAGO,SAAS,2BAAqD;AACnE,SAAO,CAAC,GAAG,SAAS,KAAK,CAAC;AAC5B;AAGO,SAAS,yBAA+B;AAC7C,WAAS,MAAM;AACjB;","names":[]}

package/dist/{chunk-MNUPGYIV.js → chunk-NQMBSSWW.js}

@@ -4,7 +4,7 @@ import {
 import {
   compareEntityTimestamps,
   normalizeEntityName
-} from "./chunk-EUM7CZFM.js";
+} from "./chunk-TY5NT3T3.js";
 import {
   sanitizeMemoryContent
 } from "./chunk-FVQJYWH7.js";
@@ -679,4 +679,4 @@ export {
   entityIndexVersion,
   entityRecentTranscriptLookbackHours
 };
-//# sourceMappingURL=chunk-MNUPGYIV.js.map
+//# sourceMappingURL=chunk-NQMBSSWW.js.map

package/dist/{chunk-V4ZHKCGA.js → chunk-O2WELT5C.js}

@@ -1,6 +1,6 @@
 import {
   runPostConsolidationMaterialize
-} from "./chunk-CTCPB57O.js";
+} from "./chunk-G7Z3C2X6.js";
 import {
   discoverMemoryExtensions,
   renderExtensionsBlock,
@@ -9,13 +9,13 @@ import {
 import {
   isSemanticConsolidationLlmOperator
 } from "./chunk-G7D6GZ5J.js";
+import {
+  log
+} from "./chunk-2ODBA7MQ.js";
 import {
   countRecallTokenOverlap,
   normalizeRecallTokens
 } from "./chunk-ZBJMUXZH.js";
-import {
-  log
-} from "./chunk-2ODBA7MQ.js";
 
 // src/semantic-consolidation.ts
 function findSimilarClusters(memories, config) {
@@ -217,4 +217,4 @@ export {
   buildExtensionsBlockForConsolidation,
   materializeAfterSemanticConsolidation
 };
-//# sourceMappingURL=chunk-V4ZHKCGA.js.map
+//# sourceMappingURL=chunk-O2WELT5C.js.map

package/dist/{chunk-Z6SEG36L.js → chunk-OUWAQVDJ.js}

@@ -1,10 +1,10 @@
+import {
+  scanMemoryDir
+} from "./chunk-AER6MT24.js";
 import {
   isSearchAborted,
   throwIfSearchAborted
 } from "./chunk-CINZGPSJ.js";
-import {
-  scanMemoryDir
-} from "./chunk-AER6MT24.js";
 import {
   resolveEnsureCollectionArgs
 } from "./chunk-YNQ6DFSV.js";
@@ -491,4 +491,4 @@ function isMissingVectorProviderColumnError(err) {
 export {
   LanceDbBackend
 };
-//# sourceMappingURL=chunk-Z6SEG36L.js.map
+//# sourceMappingURL=chunk-OUWAQVDJ.js.map

package/dist/{chunk-57ME5VSI.js → chunk-Q5ZU3RNY.js}

@@ -1,10 +1,10 @@
+import {
+  scanMemoryDir
+} from "./chunk-AER6MT24.js";
 import {
   isSearchAborted,
   throwIfSearchAborted
 } from "./chunk-CINZGPSJ.js";
-import {
-  scanMemoryDir
-} from "./chunk-AER6MT24.js";
 import {
   resolveEnsureCollectionArgs
 } from "./chunk-YNQ6DFSV.js";
@@ -605,4 +605,4 @@ export {
   resolveOramaCollectionDbFilePath,
   OramaBackend
 };
-//# sourceMappingURL=chunk-57ME5VSI.js.map
+//# sourceMappingURL=chunk-Q5ZU3RNY.js.map

package/dist/{chunk-ACYX37IM.js → chunk-QUA2JPH2.js}

@@ -1,19 +1,19 @@
 import {
   NamespaceStorageRouter
-} from "./chunk-LZSMQHXC.js";
+} from "./chunk-ARLRTZZZ.js";
 import {
   namespaceCollectionName
-} from "./chunk-EQYP3HA6.js";
+} from "./chunk-EG4TCVMU.js";
 import {
   namespaceIdentityFromToken,
   namespaceIdentityToken
 } from "./chunk-ZFXCQPNO.js";
-import {
-  isSafeRouteNamespace
-} from "./chunk-U3PN77QT.js";
 import {
   ALL_CATEGORY_DIRS
 } from "./chunk-VS2IYZRU.js";
+import {
+  isSafeRouteNamespace
+} from "./chunk-U3PN77QT.js";
 
 // src/namespaces/migrate.ts
 import path from "path";
@@ -204,4 +204,4 @@ export {
   verifyNamespaces,
   runNamespaceMigration
 };
-//# sourceMappingURL=chunk-ACYX37IM.js.map
+//# sourceMappingURL=chunk-QUA2JPH2.js.map