@remnic/core 9.3.682 → 9.3.684

package/dist/{chunk-M4I3TREG.js → chunk-OXNOINIP.js}

@@ -7,12 +7,15 @@ import {
 import {
   openclawReplayNormalizer
 } from "./chunk-7F7Z6MOS.js";
+import {
+  exportSqlite
+} from "./chunk-7VFZTJ7K.js";
 import {
   importMarkdownBundle
 } from "./chunk-HDDRVXX4.js";
 import {
   importSqlite
-} from "./chunk-APJQ6UEA.js";
+} from "./chunk-AGNBY3VG.js";
 import {
   detectImportFormat
 } from "./chunk-OZKVVUJB.js";
@@ -28,9 +31,6 @@ import {
 import {
   exportMarkdownBundle
 } from "./chunk-765K3SAT.js";
-import {
-  exportSqlite
-} from "./chunk-7VFZTJ7K.js";
 import {
   TailscaleHelper
 } from "./chunk-EEC4PCG5.js";
@@ -44,12 +44,12 @@ import {
 } from "./chunk-HOJZMQ4J.js";
 import {
   rebuildMemoryLifecycleLedger
-} from "./chunk-H6PMGMNP.js";
+} from "./chunk-6VMIHVGO.js";
 import {
   rebuildMemoryProjection,
   repairMemoryProjection,
   verifyMemoryProjection
-} from "./chunk-UAODC6GJ.js";
+} from "./chunk-J2FBJ63F.js";
 import {
   rebuildObservations
 } from "./chunk-LZZNTPLR.js";
@@ -74,18 +74,18 @@ import {
 } from "./chunk-EVWIEEKZ.js";
 import {
   promoteSemanticRuleFromMemory
-} from "./chunk-3IND7N4X.js";
+} from "./chunk-3Z7NPD5T.js";
 import {
   buildResumeBundleFromState,
   getResumeBundleStatus,
   recordResumeBundle
-} from "./chunk-ODWI5XU2.js";
+} from "./chunk-GWKCEM3S.js";
 import {
   resolveAgentAccessAuthToken
 } from "./chunk-TGQ2NTWH.js";
 import {
   parseXrayCliOptions
-} from "./chunk-GSTYVG5L.js";
+} from "./chunk-BFVPIKDY.js";
 import {
   collectPatternMemories,
   explainPatternMemory,
@@ -102,12 +102,12 @@ import {
   runOperatorInventory,
   runOperatorRepair,
   runOperatorSetup
-} from "./chunk-TOQEZ63C.js";
+} from "./chunk-M3FWYURP.js";
 import {
   listNamespaces,
   runNamespaceMigration,
   verifyNamespaces
-} from "./chunk-QUA2JPH2.js";
+} from "./chunk-NHQGDVJF.js";
 import {
   GraphDashboardServer
 } from "./chunk-YNDLCWXS.js";
@@ -128,13 +128,13 @@ import {
 } from "./chunk-TERNBNJB.js";
 import {
   searchVerifiedEpisodes
-} from "./chunk-I75DF4FZ.js";
+} from "./chunk-XEA4Z7JU.js";
 import {
   ThreadingManager
 } from "./chunk-W4RVMTHR.js";
 import {
   searchVerifiedSemanticRules
-} from "./chunk-KACIOX42.js";
+} from "./chunk-OMLIFZ4I.js";
 import {
   getWorkProductLedgerStatus,
   recordWorkProductLedgerEntry,
@@ -210,22 +210,22 @@ import {
 } from "./chunk-UQ7RN5HK.js";
 import {
   parseConfig
-} from "./chunk-IUZWBCJX.js";
+} from "./chunk-6QM24CP7.js";
 import {
   getAbstractionNodeStoreStatus
 } from "./chunk-OADWQ5CR.js";
 import {
   EngramAccessHttpServer
-} from "./chunk-QVWM4C24.js";
+} from "./chunk-5N5DXYDW.js";
 import {
   WearablesInputError
 } from "./chunk-7WV3F5DQ.js";
 import {
   EngramMcpServer
-} from "./chunk-FDSOMA6M.js";
+} from "./chunk-5OE4PYY5.js";
 import {
   EngramAccessService
-} from "./chunk-H4BDNIKQ.js";
+} from "./chunk-3MY4W5V4.js";
 import {
   WorkStorage
 } from "./chunk-GDB4J2H3.js";
@@ -233,7 +233,7 @@ import {
   parseRecallExplainFormat,
   renderRecallExplain,
   renderXray
-} from "./chunk-OHX52AOS.js";
+} from "./chunk-GTDH3IUH.js";
 import {
   getTrustZoneStoreStatus,
   promoteTrustZoneRecord,
@@ -247,7 +247,7 @@ import {
   readMemoryGovernanceRunArtifact,
   restoreMemoryGovernanceRun,
   runMemoryGovernance
-} from "./chunk-L5MUA6Q7.js";
+} from "./chunk-WI7JKV2T.js";
 import {
   analyzeGraphHealth
 } from "./chunk-2LDBXPLB.js";
@@ -260,7 +260,7 @@ import {
 import {
   RECALL_DISCLOSURE_LEVELS,
   isRecallDisclosure
-} from "./chunk-FMSDA2D3.js";
+} from "./chunk-NGFEWFNK.js";
 import {
   RECALL_FALLBACK_DIRS
 } from "./chunk-VS2IYZRU.js";
@@ -7311,4 +7311,4 @@ export {
   listMemoryMarkdownFilePaths,
   registerCli
 };
-//# sourceMappingURL=chunk-M4I3TREG.js.map
+//# sourceMappingURL=chunk-OXNOINIP.js.map

package/dist/{chunk-2QSZNTDO.js → chunk-RKNJBZ55.js}

@@ -1,3 +1,6 @@
+import {
+  ClaudeCodeAdapter
+} from "./chunk-J64TK33U.js";
 import {
   CodexAdapter
 } from "./chunk-RSUYKGGZ.js";
@@ -7,9 +10,6 @@ import {
 import {
   ReplitAdapter
 } from "./chunk-TMSXWOBZ.js";
-import {
-  ClaudeCodeAdapter
-} from "./chunk-J64TK33U.js";
 
 // src/adapters/registry.ts
 var AdapterRegistry = class {
@@ -53,4 +53,4 @@ var AdapterRegistry = class {
 export {
   AdapterRegistry
 };
-//# sourceMappingURL=chunk-2QSZNTDO.js.map
+//# sourceMappingURL=chunk-RKNJBZ55.js.map

package/dist/{chunk-UJDV2NLT.js → chunk-ROHLEUTH.js}

@@ -1,3 +1,6 @@
+import {
+  MeilisearchBackend
+} from "./chunk-DOCTITOP.js";
 import {
   NoopSearchBackend
 } from "./chunk-CYEPCZN5.js";
@@ -13,9 +16,6 @@ import {
 import {
   LanceDbBackend
 } from "./chunk-OUWAQVDJ.js";
-import {
-  MeilisearchBackend
-} from "./chunk-DOCTITOP.js";
 import {
   createConversationIndexBackend
 } from "./chunk-7OGJQP7T.js";
@@ -170,4 +170,4 @@ export {
   createConversationSearchBackend,
   createConversationIndexRuntime
 };
-//# sourceMappingURL=chunk-UJDV2NLT.js.map
+//# sourceMappingURL=chunk-ROHLEUTH.js.map

package/dist/{chunk-WEPMT6SC.js → chunk-V25ZAOSB.js}

@@ -1,3 +1,7 @@
+import {
+  ensureLcmStateDir,
+  openLcmDatabase
+} from "./chunk-MAV46GWQ.js";
 import {
   LcmSummarizer
 } from "./chunk-5VDJMYTF.js";
@@ -13,10 +17,6 @@ import {
 import {
   assembleCompressedHistory
 } from "./chunk-KCYE2MZM.js";
-import {
-  ensureLcmStateDir,
-  openLcmDatabase
-} from "./chunk-MAV46GWQ.js";
 import {
   log
 } from "./chunk-2ODBA7MQ.js";
@@ -513,4 +513,4 @@ export {
   extractLcmConfig,
   LcmEngine
 };
-//# sourceMappingURL=chunk-WEPMT6SC.js.map
+//# sourceMappingURL=chunk-V25ZAOSB.js.map

package/dist/{chunk-L5MUA6Q7.js → chunk-WI7JKV2T.js}

@@ -1,6 +1,6 @@
 import {
   StorageManager
-} from "./chunk-TY5NT3T3.js";
+} from "./chunk-53FDU4CE.js";
 import {
   assertPathInsideRoot
 } from "./chunk-5GPPACXK.js";
@@ -751,4 +751,4 @@ export {
   listMemoryGovernanceRuns,
   readMemoryGovernanceRunArtifact
 };
-//# sourceMappingURL=chunk-L5MUA6Q7.js.map
+//# sourceMappingURL=chunk-WI7JKV2T.js.map

package/dist/{chunk-NQMBSSWW.js → chunk-WRE3JPAW.js}

@@ -4,7 +4,7 @@ import {
 import {
   compareEntityTimestamps,
   normalizeEntityName
-} from "./chunk-TY5NT3T3.js";
+} from "./chunk-53FDU4CE.js";
 import {
   sanitizeMemoryContent
 } from "./chunk-FVQJYWH7.js";
@@ -679,4 +679,4 @@ export {
   entityIndexVersion,
   entityRecentTranscriptLookbackHours
 };
-//# sourceMappingURL=chunk-NQMBSSWW.js.map
+//# sourceMappingURL=chunk-WRE3JPAW.js.map

package/dist/{chunk-I75DF4FZ.js → chunk-XEA4Z7JU.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-HQ6NIBL6.js";
 import {
   StorageManager
-} from "./chunk-TY5NT3T3.js";
+} from "./chunk-53FDU4CE.js";
 import {
   getCachedEpisodeMap,
   setCachedEpisodeMap
@@ -107,4 +107,4 @@ export {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
 };
-//# sourceMappingURL=chunk-I75DF4FZ.js.map
+//# sourceMappingURL=chunk-XEA4Z7JU.js.map

package/dist/{chunk-G7Z3C2X6.js → chunk-XWEXT4XU.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-3UXOZBHV.js";
 import {
   StorageManager
-} from "./chunk-TY5NT3T3.js";
+} from "./chunk-53FDU4CE.js";
 import {
   isSafeRouteNamespace
 } from "./chunk-U3PN77QT.js";
@@ -118,4 +118,4 @@ export {
   runCodexMaterialize,
   runPostConsolidationMaterialize
 };
-//# sourceMappingURL=chunk-G7Z3C2X6.js.map
+//# sourceMappingURL=chunk-XWEXT4XU.js.map

package/dist/chunk-ZPQVJEVQ.js

@@ -0,0 +1,184 @@
+import {
+  readEnvVar
+} from "./chunk-JUC24CTX.js";
+
+// src/provenance.ts
+import { z } from "zod";
+
+// src/connectors/coerce.ts
+function coerceBool(value) {
+  if (typeof value === "boolean") return value;
+  if (typeof value === "string") {
+    const v = value.trim().toLowerCase();
+    if (["false", "0", "no", "off"].includes(v)) return false;
+    if (["true", "1", "yes", "on"].includes(v)) return true;
+  }
+  return void 0;
+}
+function coerceInstallExtension(value) {
+  return coerceBool(value);
+}
+function coerceNumber(value) {
+  if (typeof value === "number") {
+    return Number.isFinite(value) ? value : void 0;
+  }
+  if (typeof value === "string") {
+    const trimmed = value.trim();
+    if (trimmed.length === 0) return void 0;
+    const n = Number(trimmed);
+    return Number.isFinite(n) ? n : void 0;
+  }
+  return void 0;
+}
+
+// src/provenance.ts
+var PROVENANCE_SOURCE_KEY_ORDER = [
+  "sessionKey",
+  "turnId",
+  "observedAt",
+  "quote",
+  "charStart",
+  "charEnd"
+];
+function canonicalProvenanceSource(src) {
+  const out = {};
+  for (const key of PROVENANCE_SOURCE_KEY_ORDER) {
+    const value = src[key];
+    if (value !== void 0) out[key] = value;
+  }
+  return out;
+}
+function serializeProvenanceFields(fm, lines) {
+  let hasValidSources = false;
+  if (fm.sources && fm.sources.length > 0) {
+    const canonical = [];
+    for (const src of fm.sources) {
+      const result = ProvenanceSourceSchema.safeParse(src);
+      if (result.success) canonical.push(canonicalProvenanceSource(result.data));
+    }
+    if (canonical.length > 0) {
+      lines.push(`sources: ${JSON.stringify(canonical)}`);
+      hasValidSources = true;
+    }
+  }
+  const tag = (fm.provenance === "verified" || fm.provenance === "unverified") && !hasValidSources ? "none" : fm.provenance;
+  if (tag) {
+    lines.push(`provenance: ${tag}`);
+  }
+}
+function parseProvenanceTag(raw) {
+  if (raw === void 0) return void 0;
+  const trimmed = raw.trim();
+  if (trimmed.length === 0) return void 0;
+  if (trimmed === "verified" || trimmed === "unverified" || trimmed === "none") {
+    return trimmed;
+  }
+  return void 0;
+}
+function reconcileProvenanceRead(tag, sources) {
+  if ((tag === "verified" || tag === "unverified") && (!sources || sources.length === 0)) {
+    return "none";
+  }
+  return tag;
+}
+function isStrictIsoTimestamp(s) {
+  const m = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.\d+)?(?:Z|[+-]\d{2}:\d{2})$/.exec(s);
+  if (!m) return false;
+  const y = Number(m[1]), mo = Number(m[2]), da = Number(m[3]);
+  const h = Number(m[4]), mi = Number(m[5]), se = Number(m[6]);
+  const d = new Date(Date.UTC(y, mo - 1, da, h, mi, se));
+  return !Number.isNaN(Date.parse(s)) && d.getUTCFullYear() === y && d.getUTCMonth() === mo - 1 && d.getUTCDate() === da && d.getUTCHours() === h && d.getUTCMinutes() === mi && d.getUTCSeconds() === se;
+}
+var ProvenanceSourceSchema = z.object({
+  sessionKey: z.string().min(1),
+  observedAt: z.string().min(1).refine(isStrictIsoTimestamp, "must be a valid ISO 8601 timestamp (YYYY-MM-DDTHH:MM:SS[Z|\xB1HH:MM], no calendar overflow)"),
+  quote: z.string().min(1),
+  turnId: z.string().min(1).optional(),
+  charStart: z.number().finite().nonnegative().int().optional(),
+  charEnd: z.number().finite().nonnegative().int().optional()
+}).refine(
+  (src) => src.charStart === void 0 || src.charEnd === void 0 || src.charEnd >= src.charStart,
+  { message: "charEnd must be >= charStart (half-open interval, rule 35)" }
+);
+function parseProvenanceSources(raw) {
+  if (raw === void 0) return void 0;
+  const trimmed = raw.trim();
+  if (trimmed.length === 0) return void 0;
+  let parsed;
+  try {
+    parsed = JSON.parse(trimmed);
+  } catch {
+    return void 0;
+  }
+  if (!Array.isArray(parsed)) return void 0;
+  const sources = [];
+  for (const entry of parsed) {
+    const result = ProvenanceSourceSchema.safeParse(entry);
+    if (result.success) sources.push(result.data);
+  }
+  return sources.length > 0 ? sources : void 0;
+}
+function parseProvenanceConfig(raw) {
+  if (raw !== void 0 && (raw === null || typeof raw !== "object" || Array.isArray(raw))) {
+    throw new Error(
+      `provenance must be an object (got ${JSON.stringify(raw)}). Use provenance: { enabled: false } to opt out; omit the key to use the default-on behavior (issue #1575).`
+    );
+  }
+  const rawProvenance = raw && typeof raw === "object" && !Array.isArray(raw) ? raw : {};
+  return {
+    enabled: (() => {
+      if (rawProvenance.enabled === void 0) {
+        const envEnabled = readEnvVar("REMNIC_PROVENANCE_ENABLED") ?? readEnvVar("ENGRAM_PROVENANCE_ENABLED");
+        if (envEnabled !== void 0) {
+          const coerced2 = coerceBool(envEnabled);
+          if (coerced2 === void 0) {
+            throw new Error(
+              `REMNIC_PROVENANCE_ENABLED must be a boolean-like value (true/false/1/0/yes/no/on/off); got ${JSON.stringify(envEnabled)}`
+            );
+          }
+          return coerced2;
+        }
+        return true;
+      }
+      const coerced = coerceBool(rawProvenance.enabled);
+      if (coerced === void 0) {
+        throw new Error(
+          `provenance.enabled must be a boolean or one of "true"/"false"/"1"/"0"/"yes"/"no"/"on"/"off" (got ${JSON.stringify(rawProvenance.enabled)}). Omit the key to use the default-on behavior (issue #1575).`
+        );
+      }
+      return coerced;
+    })(),
+    maxQuoteChars: (() => {
+      if (rawProvenance.maxQuoteChars === void 0) return 300;
+      const rawCap = coerceNumber(rawProvenance.maxQuoteChars);
+      if (rawCap === void 0 || !Number.isFinite(rawCap) || rawCap < 1 || !Number.isInteger(rawCap)) {
+        throw new Error(
+          `provenance.maxQuoteChars must be a positive integer >= 1 (got ${JSON.stringify(rawProvenance.maxQuoteChars)}).`
+        );
+      }
+      return rawCap;
+    })(),
+    requireSpans: (() => {
+      if (rawProvenance.requireSpans === void 0) return false;
+      const coerced = coerceBool(rawProvenance.requireSpans);
+      if (coerced === void 0) {
+        throw new Error(
+          `provenance.requireSpans must be a boolean or one of "true"/"false"/"1"/"0"/"yes"/"no"/"on"/"off" (got ${JSON.stringify(rawProvenance.requireSpans)}).`
+        );
+      }
+      return coerced;
+    })()
+  };
+}
+
+export {
+  coerceBool,
+  coerceInstallExtension,
+  coerceNumber,
+  serializeProvenanceFields,
+  parseProvenanceTag,
+  reconcileProvenanceRead,
+  parseProvenanceSources,
+  parseProvenanceConfig
+};
+//# sourceMappingURL=chunk-ZPQVJEVQ.js.map

package/dist/chunk-ZPQVJEVQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/provenance.ts","../src/connectors/coerce.ts"],"sourcesContent":["/**\n * Claim-level provenance spans (issue #1575 PR 1).\n *\n * Centralizes the parse/serialize logic for the `sources` array and the\n * coarse `provenance` strength tag, plus the `provenance` config-block\n * parser.  Extracted from `storage.ts` and `config.ts` so those files keep\n * only thin delegation call-sites — the frontmatter round-trip and config\n * parsing growth lives here (issue #1520 ratchet discipline).\n *\n * Contract:\n *  - When no provenance fields are present, output is byte-identical to\n *    pre-feature behavior (rule 39).\n *  - Corrupt `sources` lines / unknown `provenance` tags drop to\n *    `undefined` on read so a malformed frontmatter never poisons\n *    downstream readers (rule 34 spirit — drop corrupt rather than poison).\n *  - Validation lives on the write path; this module only parses.\n *  - Invariant (review round 5, cursor thread KQN): a `verified` or\n *    `unverified` tag is NEVER persisted/read without surviving sources —\n *    without excerpts the tag is indistinguishable from a grounded fact to\n *    downstream faithfulness/correction/TrustScore surfaces. The invariant\n *    is enforced symmetrically: `serializeProvenanceFields` (write) and\n *    `reconcileProvenanceRead` (read) both downgrade the tag to `none`\n *    when no source survives.\n */\n\nimport { z } from \"zod\";\n\nimport { coerceBool, coerceNumber } from \"./connectors/coerce.js\";\nimport { readEnvVar } from \"./runtime/env.js\";\nimport type { MemoryFrontmatter, ProvenanceConfig, ProvenanceSource } from \"./types.js\";\n\n/**\n * Canonical key order for a serialized `ProvenanceSource` (issue #1575).\n * Deterministic emission (rule 38) — readers and the byte-identical-when-off\n * contract (rule 39) depend on this order never drifting.\n */\nconst PROVENANCE_SOURCE_KEY_ORDER = [\n  \"sessionKey\",\n  \"turnId\",\n  \"observedAt\",\n  \"quote\",\n  \"charStart\",\n  \"charEnd\",\n] as const;\n\n/**\n * Build a single `ProvenanceSource` object whose keys appear in the canonical\n * order, omitting absent optional fields. The result is what gets fed to\n * `JSON.stringify` so the on-disk line is deterministic.\n */\nfunction canonicalProvenanceSource(src: ProvenanceSource): Record<string, unknown> {\n  const out: Record<string, unknown> = {};\n  for (const key of PROVENANCE_SOURCE_KEY_ORDER) {\n    const value = src[key];\n    if (value !== undefined) out[key] = value;\n  }\n  return out;\n}\n\n/**\n * Serialize the `sources` array (issue #1575) as a single JSON line, matching\n * the `structuredAttributes` precedent. Each entry is rebuilt in canonical key\n * order (rule 38) so the output is byte-stable. The `provenance` enum is\n * emitted bare (same style as `status`) — only the three documented values\n * are ever written.\n *\n * Verified-requires-evidence invariant (review round 5, cursor thread KQN):\n * a `verified`/`unverified` tag is downgraded to `none` whenever no source\n * survives write validation — whether sources were absent, an empty array,\n * or all entries failed the schema. This covers all three failure shapes the\n * earlier 3-branch logic left open (`{provenance:\"verified\"}`,\n * `{sources:[],provenance:\"verified\"}`, `{sources:[invalid…],provenance:\"verified\"}`).\n */\nexport function serializeProvenanceFields(fm: MemoryFrontmatter, lines: string[]): void {\n  let hasValidSources = false;\n  if (fm.sources && fm.sources.length > 0) {\n    // Validate each entry against the same schema used on read so invalid\n    // in-memory sources are dropped at write time, not silently lost on the\n    // next read (review thread 4 — write-path validation parity).\n    const canonical: Record<string, unknown>[] = [];\n    for (const src of fm.sources) {\n      const result = ProvenanceSourceSchema.safeParse(src);\n      if (result.success) canonical.push(canonicalProvenanceSource(result.data));\n    }\n    if (canonical.length > 0) {\n      lines.push(`sources: ${JSON.stringify(canonical)}`);\n      hasValidSources = true;\n    }\n  }\n  // A verified/unverified tag requires surviving evidence; without it the\n  // tag is meaningless downstream (faithfulness/TrustScore cannot distinguish\n  // it from a grounded fact). Downgrade to \"none\" regardless of WHY no source\n  // survived (absent / empty / all-invalid) — single invariant, all cases.\n  const tag =\n    (fm.provenance === \"verified\" || fm.provenance === \"unverified\") && !hasValidSources\n      ? \"none\"\n      : fm.provenance;\n  if (tag) {\n    lines.push(`provenance: ${tag}`);\n  }\n}\n\n/**\n * Parse the coarse `provenance` strength tag (issue #1575). Returns\n * `undefined` for missing/blank/unknown values so a corrupt or hand-edited\n * field fails safely to the legacy-equivalent `\"none\"` semantics on read\n * (rule 34 spirit — drop corrupt rather than poison).\n */\nexport function parseProvenanceTag(\n  raw: string | undefined,\n): \"verified\" | \"unverified\" | \"none\" | undefined {\n  if (raw === undefined) return undefined;\n  const trimmed = raw.trim();\n  if (trimmed.length === 0) return undefined;\n  if (trimmed === \"verified\" || trimmed === \"unverified\" || trimmed === \"none\") {\n    return trimmed;\n  }\n  return undefined;\n}\n\n/**\n * Enforce the verified-requires-evidence invariant on the READ path.\n * `parseProvenanceTag` and `parseProvenanceSources` are independent (they\n * parse separate frontmatter lines), so a hand-edited or imported memory may\n * carry `provenance: verified` with no surviving `sources` — a corrupt line,\n * an empty array, or all-invalid entries. Downgrade such a tag to `none` so\n * the in-memory object never exposes an ungrounded \"verified\" fact\n * (review round 5, cursor thread KQN — read-path parity with the write-path\n * downgrade in `serializeProvenanceFields`). `none`/`undefined` tags pass\n * through unchanged.\n */\nexport function reconcileProvenanceRead(\n  tag: \"verified\" | \"unverified\" | \"none\" | undefined,\n  sources: ProvenanceSource[] | undefined,\n): \"verified\" | \"unverified\" | \"none\" | undefined {\n  if ((tag === \"verified\" || tag === \"unverified\") && (!sources || sources.length === 0)) {\n    return \"none\";\n  }\n  return tag;\n}\n\n/**\n * Strict ISO-8601 timestamp check (review round 6, codex thread OXPAp).\n * `Date.parse` accepts non-ISO strings (bare years like `\"123\"`) and\n * silently normalizes calendar overflow (`2026-02-30` -> March 2, hour 25\n * -> next day), so malformed provenance survives as if valid. Require the\n * full `YYYY-MM-DDTHH:MM:SS[.fff](Z|±HH:MM)` shape and reject overflow via a\n * `Date.UTC` round-trip component check — the offset does not affect whether\n * a wall-clock field overflows, so this is correct for any timezone suffix.\n */\nfunction isStrictIsoTimestamp(s: string): boolean {\n  const m = /^(\\d{4})-(\\d{2})-(\\d{2})T(\\d{2}):(\\d{2}):(\\d{2})(?:\\.\\d+)?(?:Z|[+-]\\d{2}:\\d{2})$/.exec(s);\n  if (!m) return false;\n  const y = Number(m[1]), mo = Number(m[2]), da = Number(m[3]);\n  const h = Number(m[4]), mi = Number(m[5]), se = Number(m[6]);\n  // Date.UTC normalizes overflow (Feb 30 -> Mar 2); a component round-trip\n  // catches what Date.parse silently accepts.\n  const d = new Date(Date.UTC(y, mo - 1, da, h, mi, se));\n  // The component round-trip validates wall-clock overflow (Feb 30 -> Mar 2);\n  // Date.parse additionally rejects impossible timezone offsets such as\n  // +99:99, which the regex accepts but the runtime treats as NaN\n  // (codex thread OXQ0e).\n  return (\n    !Number.isNaN(Date.parse(s)) &&\n    d.getUTCFullYear() === y &&\n    d.getUTCMonth() === mo - 1 &&\n    d.getUTCDate() === da &&\n    d.getUTCHours() === h &&\n    d.getUTCMinutes() === mi &&\n    d.getUTCSeconds() === se\n  );\n}\n\n/**\n * Zod schema for a single `ProvenanceSource` entry (issue #1575).  Parsed\n * JSON from frontmatter is external data, so each entry is validated here\n * rather than trusted via a cast (rule: no inline-cast-access on parsed\n * blobs).  `safeParse` lets us drop corrupt entries individually instead of\n * failing the whole field.\n */\nconst ProvenanceSourceSchema = z\n  .object({\n    sessionKey: z.string().min(1),\n    observedAt: z\n      .string()\n      .min(1)\n      .refine(isStrictIsoTimestamp, \"must be a valid ISO 8601 timestamp (YYYY-MM-DDTHH:MM:SS[Z|±HH:MM], no calendar overflow)\"),\n    quote: z.string().min(1),\n    turnId: z.string().min(1).optional(),\n    charStart: z.number().finite().nonnegative().int().optional(),\n    charEnd: z.number().finite().nonnegative().int().optional(),\n  })\n  .refine(\n    (src) => src.charStart === undefined || src.charEnd === undefined || src.charEnd >= src.charStart,\n    { message: \"charEnd must be >= charStart (half-open interval, rule 35)\" },\n  );\n\n/**\n * Parse the `sources` array (issue #1575) from its single-line JSON form.\n * Mirrors `parseStructuredAttributes` (JSON.parse) but validates each entry\n * against `ProvenanceSourceSchema` and DROPS corrupt ones rather than\n * poisoning downstream readers — the same \"drop corrupt rather than poison\"\n * contract as `parseMemoryWorthCounterField`.  If no entry survives, the\n * whole field is `undefined` (legacy-equivalent).\n */\nexport function parseProvenanceSources(raw: string | undefined): ProvenanceSource[] | undefined {\n  if (raw === undefined) return undefined;\n  const trimmed = raw.trim();\n  if (trimmed.length === 0) return undefined;\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(trimmed);\n  } catch {\n    return undefined;\n  }\n  if (!Array.isArray(parsed)) return undefined;\n  const sources: ProvenanceSource[] = [];\n  for (const entry of parsed) {\n    const result = ProvenanceSourceSchema.safeParse(entry);\n    if (result.success) sources.push(result.data);\n  }\n  return sources.length > 0 ? sources : undefined;\n}\n\n/**\n * Parse the `provenance` config block (issue #1575 PR 1).  Validates the\n * shape before applying defaults — a shorthand like `provenance: false` must\n * reject loudly rather than normalize to `{}` and silently enable the feature\n * (rule 51).  Booleans coerce via `coerceBool` (rule 36); numeric cap clamps\n * at 1 (rule 28).  `REMNIC_PROVENANCE_ENABLED` / `ENGRAM_PROVENANCE_ENABLED`\n * are honored only when the `enabled` key is omitted (explicit config wins).\n *\n * Schema-default note (review rounds 1–3, settled): `provenance.enabled` has\n * NO `\"default\"` in any plugin.json schema. OpenClaw's loader runs\n * `applyDefaults: true` before exposing `api.pluginConfig` (src/index.ts:1345,\n * PR #1593 round 8), so a schema default would be materialized into the\n * merged config and mask the `REMNIC_`/`ENGRAM_` env override. The code-level\n * default-on here (`return true` when `enabled` is omitted) supplies the\n * default-on behavior without that materialization. This matches the\n * emitLegacyTools/namespaceCatalogEnabled precedent, which omits the env\n * override only after a raw-vs-effective split — overkill for a single\n * boolean, so this field uses the simpler omit-the-default approach.\n */\nexport function parseProvenanceConfig(raw: unknown): ProvenanceConfig {\n  if (\n    raw !== undefined &&\n    (raw === null || typeof raw !== \"object\" || Array.isArray(raw))\n  ) {\n    throw new Error(\n      `provenance must be an object (got ${JSON.stringify(raw)}). Use provenance: { enabled: false } to opt out; omit the key to use the default-on behavior (issue #1575).`,\n    );\n  }\n  const rawProvenance =\n    raw && typeof raw === \"object\" && !Array.isArray(raw)\n      ? (raw as Record<string, unknown>)\n      : {};\n  return {\n    enabled: (() => {\n      if (rawProvenance.enabled === undefined) {\n        const envEnabled =\n          readEnvVar(\"REMNIC_PROVENANCE_ENABLED\") ?? readEnvVar(\"ENGRAM_PROVENANCE_ENABLED\");\n        if (envEnabled !== undefined) {\n          const coerced = coerceBool(envEnabled);\n          if (coerced === undefined) {\n            throw new Error(\n              `REMNIC_PROVENANCE_ENABLED must be a boolean-like value (true/false/1/0/yes/no/on/off); got ${JSON.stringify(envEnabled)}`,\n            );\n          }\n          return coerced;\n        }\n        return true;\n      }\n      const coerced = coerceBool(rawProvenance.enabled);\n      if (coerced === undefined) {\n        throw new Error(\n          `provenance.enabled must be a boolean or one of \"true\"/\"false\"/\"1\"/\"0\"/\"yes\"/\"no\"/\"on\"/\"off\" (got ${JSON.stringify(rawProvenance.enabled)}). Omit the key to use the default-on behavior (issue #1575).`,\n        );\n      }\n      return coerced;\n    })(),\n    maxQuoteChars: (() => {\n      if (rawProvenance.maxQuoteChars === undefined) return 300;\n      const rawCap = coerceNumber(rawProvenance.maxQuoteChars);\n      // Reject present-but-invalid rather than silently widening the cap\n      // (AGENTS.md input-validation rule — a typo should not persist more\n      // text than the operator configured).\n      if (rawCap === undefined || !Number.isFinite(rawCap) || rawCap < 1 || !Number.isInteger(rawCap)) {\n        throw new Error(\n          `provenance.maxQuoteChars must be a positive integer >= 1 (got ${JSON.stringify(rawProvenance.maxQuoteChars)}).`,\n        );\n      }\n      return rawCap;\n    })(),\n    requireSpans: (() => {\n      if (rawProvenance.requireSpans === undefined) return false;\n      const coerced = coerceBool(rawProvenance.requireSpans);\n      if (coerced === undefined) {\n        throw new Error(\n          `provenance.requireSpans must be a boolean or one of \"true\"/\"false\"/\"1\"/\"0\"/\"yes\"/\"no\"/\"on\"/\"off\" (got ${JSON.stringify(rawProvenance.requireSpans)}).`,\n        );\n      }\n      return coerced;\n    })(),\n  };\n}\n","/**\n * Shared boolean coercion helpers.\n *\n * Extracted from connectors/index.ts so that both config.ts and\n * connectors/index.ts can import them without creating a circular dependency.\n */\n\n/**\n * Generic boolean coercion: converts string representations of booleans\n * (e.g. from CLI `--config someFlag=false`) to proper boolean values.\n * Accepts the same truthy/falsy strings that common shells and env vars use.\n *\n * Returns `undefined` when the value is neither a boolean nor a recognised\n * string, so callers can fall back to a default.\n *\n * CLAUDE.md gotcha #36: String \"false\" is truthy in JavaScript.\n * CLAUDE.md gotcha #28: Coerce CLI values to expected types at input boundaries.\n */\nexport function coerceBool(value: unknown): boolean | undefined {\n  if (typeof value === \"boolean\") return value;\n  if (typeof value === \"string\") {\n    const v = value.trim().toLowerCase();\n    if ([\"false\", \"0\", \"no\", \"off\"].includes(v)) return false;\n    if ([\"true\", \"1\", \"yes\", \"on\"].includes(v)) return true;\n  }\n  return undefined;\n}\n\n/**\n * Coerce the `installExtension` config value from a string (e.g. from CLI\n * `--config installExtension=false`) to a proper boolean.\n *\n * Delegates to the generic `coerceBool` helper. Kept for backward compatibility.\n */\nexport function coerceInstallExtension(value: unknown): boolean | undefined {\n  return coerceBool(value);\n}\n\n/**\n * Generic numeric coercion: accepts a finite number or a string that\n * parses cleanly to one. Returns `undefined` otherwise so callers can\n * fall back to a default.\n *\n * Rules:\n * - number: returned as-is only if finite (NaN / ±Infinity → undefined).\n * - string: trimmed, parsed with `Number()`. Returns `undefined` on\n *   empty, NaN, or Infinity.\n *\n * CLAUDE.md gotcha #28: Coerce CLI values to expected types at input boundaries.\n */\nexport function coerceNumber(value: unknown): number | undefined {\n  if (typeof value === \"number\") {\n    return Number.isFinite(value) ? value : undefined;\n  }\n  if (typeof value === \"string\") {\n    const trimmed = value.trim();\n    if (trimmed.length === 0) return undefined;\n    const n = Number(trimmed);\n    return Number.isFinite(n) ? n : undefined;\n  }\n  return undefined;\n}\n"],"mappings":";;;;;AAyBA,SAAS,SAAS;;;ACPX,SAAS,WAAW,OAAqC;AAC9D,MAAI,OAAO,UAAU,UAAW,QAAO;AACvC,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,IAAI,MAAM,KAAK,EAAE,YAAY;AACnC,QAAI,CAAC,SAAS,KAAK,MAAM,KAAK,EAAE,SAAS,CAAC,EAAG,QAAO;AACpD,QAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,EAAE,SAAS,CAAC,EAAG,QAAO;AAAA,EACrD;AACA,SAAO;AACT;AAQO,SAAS,uBAAuB,OAAqC;AAC1E,SAAO,WAAW,KAAK;AACzB;AAcO,SAAS,aAAa,OAAoC;AAC/D,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,OAAO,SAAS,KAAK,IAAI,QAAQ;AAAA,EAC1C;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,UAAU,MAAM,KAAK;AAC3B,QAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,UAAM,IAAI,OAAO,OAAO;AACxB,WAAO,OAAO,SAAS,CAAC,IAAI,IAAI;AAAA,EAClC;AACA,SAAO;AACT;;;ADzBA,IAAM,8BAA8B;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAOA,SAAS,0BAA0B,KAAgD;AACjF,QAAM,MAA+B,CAAC;AACtC,aAAW,OAAO,6BAA6B;AAC7C,UAAM,QAAQ,IAAI,GAAG;AACrB,QAAI,UAAU,OAAW,KAAI,GAAG,IAAI;AAAA,EACtC;AACA,SAAO;AACT;AAgBO,SAAS,0BAA0B,IAAuB,OAAuB;AACtF,MAAI,kBAAkB;AACtB,MAAI,GAAG,WAAW,GAAG,QAAQ,SAAS,GAAG;AAIvC,UAAM,YAAuC,CAAC;AAC9C,eAAW,OAAO,GAAG,SAAS;AAC5B,YAAM,SAAS,uBAAuB,UAAU,GAAG;AACnD,UAAI,OAAO,QAAS,WAAU,KAAK,0BAA0B,OAAO,IAAI,CAAC;AAAA,IAC3E;AACA,QAAI,UAAU,SAAS,GAAG;AACxB,YAAM,KAAK,YAAY,KAAK,UAAU,SAAS,CAAC,EAAE;AAClD,wBAAkB;AAAA,IACpB;AAAA,EACF;AAKA,QAAM,OACH,GAAG,eAAe,cAAc,GAAG,eAAe,iBAAiB,CAAC,kBACjE,SACA,GAAG;AACT,MAAI,KAAK;AACP,UAAM,KAAK,eAAe,GAAG,EAAE;AAAA,EACjC;AACF;AAQO,SAAS,mBACd,KACgD;AAChD,MAAI,QAAQ,OAAW,QAAO;AAC9B,QAAM,UAAU,IAAI,KAAK;AACzB,MAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,MAAI,YAAY,cAAc,YAAY,gBAAgB,YAAY,QAAQ;AAC5E,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAaO,SAAS,wBACd,KACA,SACgD;AAChD,OAAK,QAAQ,cAAc,QAAQ,kBAAkB,CAAC,WAAW,QAAQ,WAAW,IAAI;AACtF,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAWA,SAAS,qBAAqB,GAAoB;AAChD,QAAM,IAAI,mFAAmF,KAAK,CAAC;AACnG,MAAI,CAAC,EAAG,QAAO;AACf,QAAM,IAAI,OAAO,EAAE,CAAC,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC,CAAC;AAC3D,QAAM,IAAI,OAAO,EAAE,CAAC,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC,CAAC;AAG3D,QAAM,IAAI,IAAI,KAAK,KAAK,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;AAKrD,SACE,CAAC,OAAO,MAAM,KAAK,MAAM,CAAC,CAAC,KAC3B,EAAE,eAAe,MAAM,KACvB,EAAE,YAAY,MAAM,KAAK,KACzB,EAAE,WAAW,MAAM,MACnB,EAAE,YAAY,MAAM,KACpB,EAAE,cAAc,MAAM,MACtB,EAAE,cAAc,MAAM;AAE1B;AASA,IAAM,yBAAyB,EAC5B,OAAO;AAAA,EACN,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC5B,YAAY,EACT,OAAO,EACP,IAAI,CAAC,EACL,OAAO,sBAAsB,6FAA0F;AAAA,EAC1H,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS;AAAA,EAC5D,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS;AAC5D,CAAC,EACA;AAAA,EACC,CAAC,QAAQ,IAAI,cAAc,UAAa,IAAI,YAAY,UAAa,IAAI,WAAW,IAAI;AAAA,EACxF,EAAE,SAAS,6DAA6D;AAC1E;AAUK,SAAS,uBAAuB,KAAyD;AAC9F,MAAI,QAAQ,OAAW,QAAO;AAC9B,QAAM,UAAU,IAAI,KAAK;AACzB,MAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,OAAO;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,CAAC,MAAM,QAAQ,MAAM,EAAG,QAAO;AACnC,QAAM,UAA8B,CAAC;AACrC,aAAW,SAAS,QAAQ;AAC1B,UAAM,SAAS,uBAAuB,UAAU,KAAK;AACrD,QAAI,OAAO,QAAS,SAAQ,KAAK,OAAO,IAAI;AAAA,EAC9C;AACA,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAqBO,SAAS,sBAAsB,KAAgC;AACpE,MACE,QAAQ,WACP,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,IAC7D;AACA,UAAM,IAAI;AAAA,MACR,qCAAqC,KAAK,UAAU,GAAG,CAAC;AAAA,IAC1D;AAAA,EACF;AACA,QAAM,gBACJ,OAAO,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,GAAG,IAC/C,MACD,CAAC;AACP,SAAO;AAAA,IACL,UAAU,MAAM;AACd,UAAI,cAAc,YAAY,QAAW;AACvC,cAAM,aACJ,WAAW,2BAA2B,KAAK,WAAW,2BAA2B;AACnF,YAAI,eAAe,QAAW;AAC5B,gBAAMA,WAAU,WAAW,UAAU;AACrC,cAAIA,aAAY,QAAW;AACzB,kBAAM,IAAI;AAAA,cACR,8FAA8F,KAAK,UAAU,UAAU,CAAC;AAAA,YAC1H;AAAA,UACF;AACA,iBAAOA;AAAA,QACT;AACA,eAAO;AAAA,MACT;AACA,YAAM,UAAU,WAAW,cAAc,OAAO;AAChD,UAAI,YAAY,QAAW;AACzB,cAAM,IAAI;AAAA,UACR,oGAAoG,KAAK,UAAU,cAAc,OAAO,CAAC;AAAA,QAC3I;AAAA,MACF;AACA,aAAO;AAAA,IACT,GAAG;AAAA,IACH,gBAAgB,MAAM;AACpB,UAAI,cAAc,kBAAkB,OAAW,QAAO;AACtD,YAAM,SAAS,aAAa,cAAc,aAAa;AAIvD,UAAI,WAAW,UAAa,CAAC,OAAO,SAAS,MAAM,KAAK,SAAS,KAAK,CAAC,OAAO,UAAU,MAAM,GAAG;AAC/F,cAAM,IAAI;AAAA,UACR,iEAAiE,KAAK,UAAU,cAAc,aAAa,CAAC;AAAA,QAC9G;AAAA,MACF;AACA,aAAO;AAAA,IACT,GAAG;AAAA,IACH,eAAe,MAAM;AACnB,UAAI,cAAc,iBAAiB,OAAW,QAAO;AACrD,YAAM,UAAU,WAAW,cAAc,YAAY;AACrD,UAAI,YAAY,QAAW;AACzB,cAAM,IAAI;AAAA,UACR,yGAAyG,KAAK,UAAU,cAAc,YAAY,CAAC;AAAA,QACrJ;AAAA,MACF;AACA,aAAO;AAAA,IACT,GAAG;AAAA,EACL;AACF;","names":["coerced"]}

package/dist/{cli-feUe-x3I.d.ts → cli-ooj6JQBS.d.ts}

@@ -1,13 +1,13 @@
 import { CompoundingPromotionReport } from './compounding/engine.js';
 import { MigrateObservationsResult } from './maintenance/migrate-observations.js';
 import { MemoryGovernanceRunResult, MemoryGovernanceSummary, MemoryGovernanceMetrics, MemoryGovernanceQualityScore, MemoryGovernanceReviewQueueEntry, MemoryGovernanceAppliedAction, MemoryGovernanceTransitionReport, MemoryGovernanceManifest, MemoryGovernanceRestoreManifest, RestoreMemoryGovernanceRunResult } from './maintenance/memory-governance.js';
-import { h as MemoryStatus, g as MemoryFile, B as BehaviorSignalEvent, Q as QmdSearchResult, m as MemoryActionEvent, n as MemoryLifecycleEvent } from './types-D3pm4NhH.js';
+import { h as MemoryStatus, g as MemoryFile, B as BehaviorSignalEvent, Q as QmdSearchResult, m as MemoryActionEvent, n as MemoryLifecycleEvent } from './types-Dm5xxVrr.js';
 import { RebuildMemoryProjectionResult, RepairMemoryProjectionResult, VerifyMemoryProjectionResult } from './maintenance/rebuild-memory-projection.js';
 import { RebuildMemoryLifecycleLedgerResult } from './maintenance/rebuild-memory-lifecycle-ledger.js';
 import { RebuildObservationsResult } from './maintenance/rebuild-observations.js';
 import { ArchiveObservationsResult } from './maintenance/archive-observations.js';
 import { Writable, Readable } from 'node:stream';
-import { O as Orchestrator } from './orchestrator-7zPqGupX.js';
+import { O as Orchestrator } from './orchestrator-DIDDvwDw.js';
 import { ReplayRunSummary } from './replay/runner.js';
 import { ReplaySource, ReplayTurn } from './replay/types.js';
 import { b as BulkImportResult } from './types-ByK7T3L6.js';
@@ -16,7 +16,7 @@ import { WorkProjectStatus, WorkTaskStatus, WorkTaskPriority } from './work/type
 import { RoutePatternType } from './routing/engine.js';
 import { TailscaleSyncOptions } from './network/tailscale.js';
 import { DashboardStatus } from './dashboard-runtime.js';
-import { b as EngramAccessService } from './access-service-DvA6jyHL.js';
+import { b as EngramAccessService } from './access-service-D-siI-xJ.js';
 import { ResolveSecretRefFn } from './resolve-auth-token.js';
 import { CompatRunner, CompatReport } from './compat/types.js';
 import { EvalBaselineDeltaReport, EvalBaselineSnapshot, EvalCiGateReport, EvalBenchmarkPackSummary, EvalHarnessStatus, EvalStoredBaselineCiGateReport } from './evals.js';

package/dist/cli.d.ts

@@ -1,13 +1,13 @@
 import './compounding/engine.js';
 import './maintenance/migrate-observations.js';
 import './maintenance/memory-governance.js';
-import './types-D3pm4NhH.js';
+import './types-Dm5xxVrr.js';
 import './maintenance/rebuild-memory-projection.js';
 import './maintenance/rebuild-memory-lifecycle-ledger.js';
 import './maintenance/rebuild-observations.js';
 import './maintenance/archive-observations.js';
 import 'node:stream';
-import './orchestrator-7zPqGupX.js';
+import './orchestrator-DIDDvwDw.js';
 import './replay/runner.js';
 import './replay/types.js';
 import './types-ByK7T3L6.js';
@@ -16,7 +16,7 @@ import './work/types.js';
 import './routing/engine.js';
 import './network/tailscale.js';
 import './dashboard-runtime.js';
-import './access-service-DvA6jyHL.js';
+import './access-service-D-siI-xJ.js';
 import './resolve-auth-token.js';
 import './compat/types.js';
 import './evals.js';
@@ -38,7 +38,7 @@ import './trust-zones.js';
 import './session-integrity.js';
 import './recall-state.js';
 import './policy-runtime.js';
-export { A as AccessHttpServeCliCommandOptions, a as ArchiveObservationsCliCommandOptions, B as BulkImportCliCommandOptions, C as CompatCliCommandOptions, b as ConnectorsRunCliOutputOptions, c as ConversationIndexHealthCliOrchestrator, D as DashboardStartCliCommandOptions, d as DedupeCandidate, E as ExactDedupePlan, G as GraphHealthCliCommandOptions, M as MemoryActionAuditCliCommandOptions, e as MemoryActionAuditCliNamespaceSummary, f as MemoryActionAuditCliReport, g as MemoryGovernanceCliCommandOptions, h as MemoryGovernanceReportCliCommandOptions, i as MemoryGovernanceRestoreCliCommandOptions, j as MemoryReviewDispositionCliCommandOptions, k as MemoryTimelineCliCommandOptions, l as MigrateCliOrchestrator, m as MigrateCliReport, n as MigrateObservationsCliCommandOptions, P as PolicyDiffCliReport, o as PolicyDiffEntry, q as PolicyRollbackCliReport, s as PolicyStatusCliReport, t as PolicyTuningCliOrchestrator, R as RebuildMemoryLifecycleLedgerCliCommandOptions, u as RebuildMemoryProjectionCliCommandOptions, v as RebuildObservationsCliCommandOptions, w as RepairMemoryProjectionCliCommandOptions, x as ReplayCliCommandOptions, y as ReplayCliOrchestrator, z as RouteCliCommandOptions, S as SessionIntegrityCliCommandOptions, F as SessionRepairCliCommandOptions, T as TailscaleStatusCliCommandOptions, H as TailscaleSyncCliCommandOptions, I as TierMigrationCliOrchestrator, J as TrainingExportCliCommandOptions, V as VerifyMemoryProjectionCliCommandOptions, W as WebDavServeCliCommandOptions, K as WorkProjectCliCommandOptions, L as WorkTaskCliCommandOptions, N as emitConnectorsRunCliResult, O as filterNormalMemorySearchResults, Q as hasDestructivePurgeFailures, U as isNormalRetrievalVisibleMemory, X as listMemoryMarkdownFilePaths, Y as parseDurationToMs, Z as parseStrictCliDate, _ as planAggressiveDuplicateDeletions, $ as planExactDuplicateDeletions, a0 as registerCli, a1 as resolveAccessPrincipalOverride, a2 as resolveMemoryDirForNamespace, a3 as runAbstractionNodeStatusCliCommand, a4 as runAccessHttpServeCliCommand, a5 as runAccessHttpStatusCliCommand, a6 as runAccessHttpStopCliCommand, a7 as runAccessMcpServeCliCommand, a8 as runArchiveObservationsCliCommand, a9 as runBenchmarkBaselineReportCliCommand, aa as runBenchmarkBaselineSnapshotCliCommand, ab as runBenchmarkCiGateCliCommand, ac as runBenchmarkImportCliCommand, ad as runBenchmarkStatusCliCommand, ae as runBenchmarkStoredBaselineCiGateCliCommand, af as runBenchmarkValidateCliCommand, r as runBulkImportCliCommand, ag as runCausalTrajectoryStatusCliCommand, ah as runCommitmentLifecycleCliCommand, ai as runCommitmentRecordCliCommand, aj as runCommitmentSetStateCliCommand, ak as runCommitmentStatusCliCommand, al as runCompatCliCommand, am as runCompoundingPromoteCliCommand, an as runConversationIndexHealthCliCommand, ao as runConversationIndexInspectCliCommand, ap as runConversationIndexRebuildCliCommand, aq as runCueAnchorStatusCliCommand, ar as runDashboardStartCliCommand, as as runDashboardStatusCliCommand, at as runDashboardStopCliCommand, au as runGraphHealthCliCommand, av as runHarmonicSearchCliCommand, aw as runMemoryActionAuditCliCommand, ax as runMemoryGovernanceCliCommand, ay as runMemoryGovernanceReportCliCommand, az as runMemoryGovernanceRestoreCliCommand, aA as runMemoryReviewDispositionCliCommand, aB as runMemoryTimelineCliCommand, aC as runMigrateNormalizeFrontmatterCliCommand, aD as runMigrateObservationsCliCommand, aE as runMigrateRechunkCliCommand, aF as runMigrateReextractCliCommand, aG as runMigrateRescoreImportanceCliCommand, aH as runObjectiveStateStatusCliCommand, aI as runPolicyDiffCliCommand, aJ as runPolicyRollbackCliCommand, aK as runPolicyStatusCliCommand, aL as runRebuildMemoryLifecycleLedgerCliCommand, aM as runRebuildMemoryProjectionCliCommand, aN as runRebuildObservationsCliCommand, aO as runRepairMemoryProjectionCliCommand, aP as runReplayCliCommand, aQ as runResumeBundleBuildCliCommand, aR as runResumeBundleRecordCliCommand, aS as runResumeBundleStatusCliCommand, aT as runRouteCliCommand, aU as runSemanticRulePromoteCliCommand, aV as runSemanticRuleVerifyCliCommand, aW as runSessionCheckCliCommand, aX as runSessionRepairCliCommand, aY as runTailscaleStatusCliCommand, aZ as runTailscaleSyncCliCommand, a_ as runTierMigrateCliCommand, a$ as runTierStatusCliCommand, b0 as runTrainingExportCliCommand, b1 as runTrustZoneDemoSeedCliCommand, b2 as runTrustZonePromoteCliCommand, b3 as runTrustZoneStatusCliCommand, b4 as runUtilityLearningCliCommand, b5 as runUtilityLearningStatusCliCommand, b6 as runUtilityTelemetryRecordCliCommand, b7 as runUtilityTelemetryStatusCliCommand, b8 as runVerifiedRecallSearchCliCommand, b9 as runVerifyMemoryProjectionCliCommand, ba as runWebDavServeCliCommand, bb as runWebDavStopCliCommand, bc as runWorkProductRecallSearchCliCommand, bd as runWorkProductRecordCliCommand, be as runWorkProductStatusCliCommand, bf as runWorkProjectCliCommand, bg as runWorkTaskCliCommand } from './cli-feUe-x3I.js';
+export { A as AccessHttpServeCliCommandOptions, a as ArchiveObservationsCliCommandOptions, B as BulkImportCliCommandOptions, C as CompatCliCommandOptions, b as ConnectorsRunCliOutputOptions, c as ConversationIndexHealthCliOrchestrator, D as DashboardStartCliCommandOptions, d as DedupeCandidate, E as ExactDedupePlan, G as GraphHealthCliCommandOptions, M as MemoryActionAuditCliCommandOptions, e as MemoryActionAuditCliNamespaceSummary, f as MemoryActionAuditCliReport, g as MemoryGovernanceCliCommandOptions, h as MemoryGovernanceReportCliCommandOptions, i as MemoryGovernanceRestoreCliCommandOptions, j as MemoryReviewDispositionCliCommandOptions, k as MemoryTimelineCliCommandOptions, l as MigrateCliOrchestrator, m as MigrateCliReport, n as MigrateObservationsCliCommandOptions, P as PolicyDiffCliReport, o as PolicyDiffEntry, q as PolicyRollbackCliReport, s as PolicyStatusCliReport, t as PolicyTuningCliOrchestrator, R as RebuildMemoryLifecycleLedgerCliCommandOptions, u as RebuildMemoryProjectionCliCommandOptions, v as RebuildObservationsCliCommandOptions, w as RepairMemoryProjectionCliCommandOptions, x as ReplayCliCommandOptions, y as ReplayCliOrchestrator, z as RouteCliCommandOptions, S as SessionIntegrityCliCommandOptions, F as SessionRepairCliCommandOptions, T as TailscaleStatusCliCommandOptions, H as TailscaleSyncCliCommandOptions, I as TierMigrationCliOrchestrator, J as TrainingExportCliCommandOptions, V as VerifyMemoryProjectionCliCommandOptions, W as WebDavServeCliCommandOptions, K as WorkProjectCliCommandOptions, L as WorkTaskCliCommandOptions, N as emitConnectorsRunCliResult, O as filterNormalMemorySearchResults, Q as hasDestructivePurgeFailures, U as isNormalRetrievalVisibleMemory, X as listMemoryMarkdownFilePaths, Y as parseDurationToMs, Z as parseStrictCliDate, _ as planAggressiveDuplicateDeletions, $ as planExactDuplicateDeletions, a0 as registerCli, a1 as resolveAccessPrincipalOverride, a2 as resolveMemoryDirForNamespace, a3 as runAbstractionNodeStatusCliCommand, a4 as runAccessHttpServeCliCommand, a5 as runAccessHttpStatusCliCommand, a6 as runAccessHttpStopCliCommand, a7 as runAccessMcpServeCliCommand, a8 as runArchiveObservationsCliCommand, a9 as runBenchmarkBaselineReportCliCommand, aa as runBenchmarkBaselineSnapshotCliCommand, ab as runBenchmarkCiGateCliCommand, ac as runBenchmarkImportCliCommand, ad as runBenchmarkStatusCliCommand, ae as runBenchmarkStoredBaselineCiGateCliCommand, af as runBenchmarkValidateCliCommand, r as runBulkImportCliCommand, ag as runCausalTrajectoryStatusCliCommand, ah as runCommitmentLifecycleCliCommand, ai as runCommitmentRecordCliCommand, aj as runCommitmentSetStateCliCommand, ak as runCommitmentStatusCliCommand, al as runCompatCliCommand, am as runCompoundingPromoteCliCommand, an as runConversationIndexHealthCliCommand, ao as runConversationIndexInspectCliCommand, ap as runConversationIndexRebuildCliCommand, aq as runCueAnchorStatusCliCommand, ar as runDashboardStartCliCommand, as as runDashboardStatusCliCommand, at as runDashboardStopCliCommand, au as runGraphHealthCliCommand, av as runHarmonicSearchCliCommand, aw as runMemoryActionAuditCliCommand, ax as runMemoryGovernanceCliCommand, ay as runMemoryGovernanceReportCliCommand, az as runMemoryGovernanceRestoreCliCommand, aA as runMemoryReviewDispositionCliCommand, aB as runMemoryTimelineCliCommand, aC as runMigrateNormalizeFrontmatterCliCommand, aD as runMigrateObservationsCliCommand, aE as runMigrateRechunkCliCommand, aF as runMigrateReextractCliCommand, aG as runMigrateRescoreImportanceCliCommand, aH as runObjectiveStateStatusCliCommand, aI as runPolicyDiffCliCommand, aJ as runPolicyRollbackCliCommand, aK as runPolicyStatusCliCommand, aL as runRebuildMemoryLifecycleLedgerCliCommand, aM as runRebuildMemoryProjectionCliCommand, aN as runRebuildObservationsCliCommand, aO as runRepairMemoryProjectionCliCommand, aP as runReplayCliCommand, aQ as runResumeBundleBuildCliCommand, aR as runResumeBundleRecordCliCommand, aS as runResumeBundleStatusCliCommand, aT as runRouteCliCommand, aU as runSemanticRulePromoteCliCommand, aV as runSemanticRuleVerifyCliCommand, aW as runSessionCheckCliCommand, aX as runSessionRepairCliCommand, aY as runTailscaleStatusCliCommand, aZ as runTailscaleSyncCliCommand, a_ as runTierMigrateCliCommand, a$ as runTierStatusCliCommand, b0 as runTrainingExportCliCommand, b1 as runTrustZoneDemoSeedCliCommand, b2 as runTrustZonePromoteCliCommand, b3 as runTrustZoneStatusCliCommand, b4 as runUtilityLearningCliCommand, b5 as runUtilityLearningStatusCliCommand, b6 as runUtilityTelemetryRecordCliCommand, b7 as runUtilityTelemetryStatusCliCommand, b8 as runVerifiedRecallSearchCliCommand, b9 as runVerifyMemoryProjectionCliCommand, ba as runWebDavServeCliCommand, bb as runWebDavStopCliCommand, bc as runWorkProductRecallSearchCliCommand, bd as runWorkProductRecordCliCommand, be as runWorkProductStatusCliCommand, bf as runWorkProjectCliCommand, bg as runWorkTaskCliCommand } from './cli-ooj6JQBS.js';
 import './connectors-cli-2iaQ5tX2.js';
 import './storage.js';
 import './page-versioning.js';
@@ -75,7 +75,7 @@ import './lcm/archive.js';
 import './lcm/summarizer.js';
 import './lcm/dag.js';
 import './lcm/queue.js';
-import './semantic-consolidation-BX9Z9_aK.js';
+import './semantic-consolidation-CWch5uM7.js';
 import './connectors/codex-materialize.js';
 import './logger.js';
 import './conversation-index/backend.js';