@remnic/core 9.3.684 → 9.3.686

package/dist/access-http.d.ts

@@ -1,5 +1,5 @@
 import { IncomingMessage } from 'node:http';
-import { b as EngramAccessService } from './access-service-D-siI-xJ.js';
+import { c as EngramAccessService } from './access-service-DmCHJ4cH.js';
 import { ResolvedIdentity } from './adapters/types.js';
 import { AdapterRegistry } from './adapters/registry.js';
 import './storage.js';
@@ -22,7 +22,7 @@ import './user-model.js';
 import './recall-audit-anomaly.js';
 import './recall-audit.js';
 import './explicit-capture.js';
-import './orchestrator-DIDDvwDw.js';
+import './orchestrator-CA6ouzBn.js';
 import './briefing.js';
 import './buffer.js';
 import './transcript.js';
@@ -54,6 +54,7 @@ import './conversation-index/backend.js';
 import './conversation-index/chunker.js';
 import './faiss-adapter-BHecI1fF.js';
 import './runtime/child-process.js';
+import './catalog-COqWZlZ6.js';
 import './namespaces/search.js';
 import './shared-context/manager.js';
 import 'zod';

package/dist/access-http.js

@@ -1,6 +1,6 @@
 import {
   EngramAccessHttpServer
-} from "./chunk-5N5DXYDW.js";
+} from "./chunk-S2OU5DZY.js";
 import "./chunk-SEDEKFYQ.js";
 import "./chunk-RKNJBZ55.js";
 import "./chunk-J64TK33U.js";
@@ -9,13 +9,13 @@ import "./chunk-42NQ7AVG.js";
 import "./chunk-TMSXWOBZ.js";
 import "./chunk-7RXCMVFQ.js";
 import "./chunk-7WV3F5DQ.js";
-import "./chunk-5OE4PYY5.js";
+import "./chunk-473JIN2U.js";
 import "./chunk-T4WDJPEZ.js";
 import "./chunk-D24OXEPB.js";
-import "./chunk-3EVIMVQU.js";
+import "./chunk-KFBOZYME.js";
 import "./chunk-UDJLF3BO.js";
-import "./chunk-FYEVFGJD.js";
-import "./chunk-3MY4W5V4.js";
+import "./chunk-NN7QYW5W.js";
+import "./chunk-FUCUR2OZ.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import "./chunk-ARV3AUOM.js";
@@ -31,40 +31,40 @@ import "./chunk-LLONI6PY.js";
 import "./chunk-BMFZLLNI.js";
 import "./chunk-CI7RKSRE.js";
 import "./chunk-6HMYUWXR.js";
-import "./chunk-WI7JKV2T.js";
-import "./chunk-DQY7NJ5L.js";
-import "./chunk-ROHLEUTH.js";
-import "./chunk-DOCTITOP.js";
+import "./chunk-4N3TFFPH.js";
+import "./chunk-CTOQEZSN.js";
+import "./chunk-2KAYTPPT.js";
+import "./chunk-WRFKZEO6.js";
 import "./chunk-CYEPCZN5.js";
-import "./chunk-Q5ZU3RNY.js";
-import "./chunk-JOASJWQR.js";
-import "./chunk-RN7MUWON.js";
-import "./chunk-OUWAQVDJ.js";
+import "./chunk-LQ6JI4VH.js";
+import "./chunk-SANZHXY2.js";
+import "./chunk-EHISUJFN.js";
+import "./chunk-5CEJH5ZN.js";
 import "./chunk-AER6MT24.js";
 import "./chunk-CINZGPSJ.js";
 import "./chunk-ZFXCQPNO.js";
-import "./chunk-7OGJQP7T.js";
-import "./chunk-E6ZDCOHM.js";
-import "./chunk-OIF36KGD.js";
-import "./chunk-7DTASS5T.js";
-import "./chunk-6RHNCKHG.js";
+import "./chunk-DCWIQFNA.js";
+import "./chunk-XBZQRZ6G.js";
+import "./chunk-KCQA46NR.js";
+import "./chunk-SJHM6I4J.js";
+import "./chunk-K43PI6DQ.js";
 import "./chunk-YNQ6DFSV.js";
 import "./chunk-EIR5VLIH.js";
-import "./chunk-YXWAILM4.js";
-import "./chunk-GKKAXVAJ.js";
+import "./chunk-YOI3ELXF.js";
+import "./chunk-U33LWTQQ.js";
 import "./chunk-EI6V5UXY.js";
-import "./chunk-QY7YA7OL.js";
+import "./chunk-PNLCEFE4.js";
 import "./chunk-O75CRYGF.js";
 import "./chunk-QDW3E4RD.js";
 import "./chunk-3ONXXHQO.js";
 import "./chunk-ODPLEWB6.js";
 import "./chunk-ZY2MNJR6.js";
-import "./chunk-2LDBXPLB.js";
+import "./chunk-KF74X62T.js";
 import "./chunk-2LSZVONP.js";
 import "./chunk-DEUNUKTD.js";
-import "./chunk-JD4SCARD.js";
-import "./chunk-K6ZN34WC.js";
-import "./chunk-53FDU4CE.js";
+import "./chunk-YN4ZT4CW.js";
+import "./chunk-OV4D5T7V.js";
+import "./chunk-BLIWOONZ.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
@@ -105,7 +105,7 @@ import "./chunk-ZPQVJEVQ.js";
 import "./chunk-4DJQYKMN.js";
 import "./chunk-EYIEWJNI.js";
 import "./chunk-JUC24CTX.js";
-import "./chunk-2ODBA7MQ.js";
+import "./chunk-NU3CSQ4H.js";
 import "./chunk-TBBDFYXW.js";
 import "./chunk-ZBJMUXZH.js";
 import "./chunk-PVGDJXVK.js";

package/dist/access-mcp.d.ts

@@ -1,5 +1,5 @@
 import { Readable, Writable } from 'node:stream';
-import { b as EngramAccessService } from './access-service-D-siI-xJ.js';
+import { c as EngramAccessService } from './access-service-DmCHJ4cH.js';
 import './storage.js';
 import './page-versioning.js';
 import './consolidation-operator.js';
@@ -20,7 +20,7 @@ import './user-model.js';
 import './recall-audit-anomaly.js';
 import './recall-audit.js';
 import './explicit-capture.js';
-import './orchestrator-DIDDvwDw.js';
+import './orchestrator-CA6ouzBn.js';
 import './briefing.js';
 import './buffer.js';
 import './transcript.js';
@@ -52,6 +52,7 @@ import './conversation-index/backend.js';
 import './conversation-index/chunker.js';
 import './faiss-adapter-BHecI1fF.js';
 import './runtime/child-process.js';
+import './catalog-COqWZlZ6.js';
 import './namespaces/search.js';
 import './shared-context/manager.js';
 import 'zod';
@@ -106,7 +107,9 @@ declare class EngramMcpServer {
      * initialize with the same JSON-RPC id concurrently.
      */
     private initSessionIds;
-    /** Whether oai-mem-citation guidance is explicitly enabled via config. */
+    /**
+     * Whether oai-mem-citation guidance is explicitly enabled via config.
+     */
     private readonly citationsEnabled;
     /** Whether to auto-enable citations for Codex adapter connections. */
     private readonly citationsAutoDetect;
@@ -116,11 +119,19 @@ declare class EngramMcpServer {
      * set false to halve the advertised `tools/list` surface.
      */
     private readonly emitLegacyTools;
+    /**
+     * Whether the `coding_decision` tool should appear in `tools/list`. Gated on
+     * `codingKnowledge.enabled && codingKnowledge.decisionRecords` (issue #1548
+     * Track A PR 2, rule 39). When false the tools array is byte-identical to
+     * pre-feature.
+     */
+    private readonly codingDecisionVisible;
     constructor(service: EngramAccessService, options?: {
         principal?: string;
         citationsEnabled?: boolean;
         citationsAutoDetect?: boolean;
         emitLegacyTools?: boolean;
+        codingDecisionVisible?: boolean;
     });
     /** Get clientInfo for a specific MCP session. Returns undefined for non-MCP requests. */
     getClientInfo(sessionId?: string): {

package/dist/access-mcp.js

@@ -1,12 +1,12 @@
 import {
   EngramMcpServer
-} from "./chunk-5OE4PYY5.js";
+} from "./chunk-473JIN2U.js";
 import "./chunk-T4WDJPEZ.js";
 import "./chunk-D24OXEPB.js";
-import "./chunk-3EVIMVQU.js";
+import "./chunk-KFBOZYME.js";
 import "./chunk-UDJLF3BO.js";
-import "./chunk-FYEVFGJD.js";
-import "./chunk-3MY4W5V4.js";
+import "./chunk-NN7QYW5W.js";
+import "./chunk-FUCUR2OZ.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import "./chunk-ARV3AUOM.js";
@@ -22,40 +22,40 @@ import "./chunk-LLONI6PY.js";
 import "./chunk-BMFZLLNI.js";
 import "./chunk-CI7RKSRE.js";
 import "./chunk-6HMYUWXR.js";
-import "./chunk-WI7JKV2T.js";
-import "./chunk-DQY7NJ5L.js";
-import "./chunk-ROHLEUTH.js";
-import "./chunk-DOCTITOP.js";
+import "./chunk-4N3TFFPH.js";
+import "./chunk-CTOQEZSN.js";
+import "./chunk-2KAYTPPT.js";
+import "./chunk-WRFKZEO6.js";
 import "./chunk-CYEPCZN5.js";
-import "./chunk-Q5ZU3RNY.js";
-import "./chunk-JOASJWQR.js";
-import "./chunk-RN7MUWON.js";
-import "./chunk-OUWAQVDJ.js";
+import "./chunk-LQ6JI4VH.js";
+import "./chunk-SANZHXY2.js";
+import "./chunk-EHISUJFN.js";
+import "./chunk-5CEJH5ZN.js";
 import "./chunk-AER6MT24.js";
 import "./chunk-CINZGPSJ.js";
 import "./chunk-ZFXCQPNO.js";
-import "./chunk-7OGJQP7T.js";
-import "./chunk-E6ZDCOHM.js";
-import "./chunk-OIF36KGD.js";
-import "./chunk-7DTASS5T.js";
-import "./chunk-6RHNCKHG.js";
+import "./chunk-DCWIQFNA.js";
+import "./chunk-XBZQRZ6G.js";
+import "./chunk-KCQA46NR.js";
+import "./chunk-SJHM6I4J.js";
+import "./chunk-K43PI6DQ.js";
 import "./chunk-YNQ6DFSV.js";
 import "./chunk-EIR5VLIH.js";
-import "./chunk-YXWAILM4.js";
-import "./chunk-GKKAXVAJ.js";
+import "./chunk-YOI3ELXF.js";
+import "./chunk-U33LWTQQ.js";
 import "./chunk-EI6V5UXY.js";
-import "./chunk-QY7YA7OL.js";
+import "./chunk-PNLCEFE4.js";
 import "./chunk-O75CRYGF.js";
 import "./chunk-QDW3E4RD.js";
 import "./chunk-3ONXXHQO.js";
 import "./chunk-ODPLEWB6.js";
 import "./chunk-ZY2MNJR6.js";
-import "./chunk-2LDBXPLB.js";
+import "./chunk-KF74X62T.js";
 import "./chunk-2LSZVONP.js";
 import "./chunk-DEUNUKTD.js";
-import "./chunk-JD4SCARD.js";
-import "./chunk-K6ZN34WC.js";
-import "./chunk-53FDU4CE.js";
+import "./chunk-YN4ZT4CW.js";
+import "./chunk-OV4D5T7V.js";
+import "./chunk-BLIWOONZ.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
@@ -96,7 +96,7 @@ import "./chunk-ZPQVJEVQ.js";
 import "./chunk-4DJQYKMN.js";
 import "./chunk-EYIEWJNI.js";
 import "./chunk-JUC24CTX.js";
-import "./chunk-2ODBA7MQ.js";
+import "./chunk-NU3CSQ4H.js";
 import "./chunk-TBBDFYXW.js";
 import "./chunk-ZBJMUXZH.js";
 import "./chunk-PVGDJXVK.js";

package/dist/access-operations.d.ts

@@ -1,6 +1,6 @@
 import { OperationName, BoundOperation } from './access-boundary.js';
 import { MemoryStoreRequest } from './access-schema.js';
-import { E as EngramAccessMemoryResponse, a as EngramAccessWriteResponse } from './access-service-D-siI-xJ.js';
+import { D as DecisionSurfaceRequest, a as DecisionSurfaceResponse, E as EngramAccessMemoryResponse, b as EngramAccessWriteResponse } from './access-service-DmCHJ4cH.js';
 import 'zod';
 import './storage.js';
 import './page-versioning.js';
@@ -22,7 +22,7 @@ import './user-model.js';
 import './recall-audit-anomaly.js';
 import './recall-audit.js';
 import './explicit-capture.js';
-import './orchestrator-DIDDvwDw.js';
+import './orchestrator-CA6ouzBn.js';
 import './briefing.js';
 import './buffer.js';
 import './transcript.js';
@@ -54,6 +54,7 @@ import './conversation-index/backend.js';
 import './conversation-index/chunker.js';
 import './faiss-adapter-BHecI1fF.js';
 import './runtime/child-process.js';
+import './catalog-COqWZlZ6.js';
 import './namespaces/search.js';
 import './shared-context/manager.js';
 import './compounding/engine.js';
@@ -117,11 +118,16 @@ declare const memoryStoreOperation: BoundOperation<{
     idempotencyKey?: string | undefined;
     projectTag?: string | undefined;
 }, MemoryStoreOutput>;
+type CodingDecisionInput = DecisionSurfaceRequest;
+type CodingDecisionOutput = {
+    result: DecisionSurfaceResponse;
+};
+declare const codingDecisionOperation: BoundOperation<DecisionSurfaceRequest, CodingDecisionOutput>;
 /**
  * The canonical short names (no `engram.`/`remnic.` prefix) of the operations
  * the boundary owns today. The fitness test treats this set as the migrated
  * set; everything else on a surface is unmigrated and counted by the ratchet.
  */
-declare const REGISTERED_OPERATIONS: readonly [OperationName, OperationName, OperationName];
+declare const REGISTERED_OPERATIONS: readonly [OperationName, OperationName, OperationName, OperationName];
 
-export { type MemoryGetInput, type MemoryGetOutput, type MemorySearchInput, type MemorySearchOutput, type MemoryStoreInput, type MemoryStoreOutput, REGISTERED_OPERATIONS, memoryGetOperation, memorySearchOperation, memoryStoreOperation };
+export { type CodingDecisionInput, type CodingDecisionOutput, type MemoryGetInput, type MemoryGetOutput, type MemorySearchInput, type MemorySearchOutput, type MemoryStoreInput, type MemoryStoreOutput, REGISTERED_OPERATIONS, codingDecisionOperation, memoryGetOperation, memorySearchOperation, memoryStoreOperation };

package/dist/access-operations.js

@@ -1,12 +1,13 @@
 import {
   REGISTERED_OPERATIONS,
+  codingDecisionOperation,
   memoryGetOperation,
   memorySearchOperation,
   memoryStoreOperation
-} from "./chunk-3EVIMVQU.js";
+} from "./chunk-KFBOZYME.js";
 import "./chunk-UDJLF3BO.js";
-import "./chunk-FYEVFGJD.js";
-import "./chunk-3MY4W5V4.js";
+import "./chunk-NN7QYW5W.js";
+import "./chunk-FUCUR2OZ.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import "./chunk-ARV3AUOM.js";
@@ -22,40 +23,40 @@ import "./chunk-LLONI6PY.js";
 import "./chunk-BMFZLLNI.js";
 import "./chunk-CI7RKSRE.js";
 import "./chunk-6HMYUWXR.js";
-import "./chunk-WI7JKV2T.js";
-import "./chunk-DQY7NJ5L.js";
-import "./chunk-ROHLEUTH.js";
-import "./chunk-DOCTITOP.js";
+import "./chunk-4N3TFFPH.js";
+import "./chunk-CTOQEZSN.js";
+import "./chunk-2KAYTPPT.js";
+import "./chunk-WRFKZEO6.js";
 import "./chunk-CYEPCZN5.js";
-import "./chunk-Q5ZU3RNY.js";
-import "./chunk-JOASJWQR.js";
-import "./chunk-RN7MUWON.js";
-import "./chunk-OUWAQVDJ.js";
+import "./chunk-LQ6JI4VH.js";
+import "./chunk-SANZHXY2.js";
+import "./chunk-EHISUJFN.js";
+import "./chunk-5CEJH5ZN.js";
 import "./chunk-AER6MT24.js";
 import "./chunk-CINZGPSJ.js";
 import "./chunk-ZFXCQPNO.js";
-import "./chunk-7OGJQP7T.js";
-import "./chunk-E6ZDCOHM.js";
-import "./chunk-OIF36KGD.js";
-import "./chunk-7DTASS5T.js";
-import "./chunk-6RHNCKHG.js";
+import "./chunk-DCWIQFNA.js";
+import "./chunk-XBZQRZ6G.js";
+import "./chunk-KCQA46NR.js";
+import "./chunk-SJHM6I4J.js";
+import "./chunk-K43PI6DQ.js";
 import "./chunk-YNQ6DFSV.js";
 import "./chunk-EIR5VLIH.js";
-import "./chunk-YXWAILM4.js";
-import "./chunk-GKKAXVAJ.js";
+import "./chunk-YOI3ELXF.js";
+import "./chunk-U33LWTQQ.js";
 import "./chunk-EI6V5UXY.js";
-import "./chunk-QY7YA7OL.js";
+import "./chunk-PNLCEFE4.js";
 import "./chunk-O75CRYGF.js";
 import "./chunk-QDW3E4RD.js";
 import "./chunk-3ONXXHQO.js";
 import "./chunk-ODPLEWB6.js";
 import "./chunk-ZY2MNJR6.js";
-import "./chunk-2LDBXPLB.js";
+import "./chunk-KF74X62T.js";
 import "./chunk-2LSZVONP.js";
 import "./chunk-DEUNUKTD.js";
-import "./chunk-JD4SCARD.js";
-import "./chunk-K6ZN34WC.js";
-import "./chunk-53FDU4CE.js";
+import "./chunk-YN4ZT4CW.js";
+import "./chunk-OV4D5T7V.js";
+import "./chunk-BLIWOONZ.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
@@ -96,7 +97,7 @@ import "./chunk-ZPQVJEVQ.js";
 import "./chunk-4DJQYKMN.js";
 import "./chunk-EYIEWJNI.js";
 import "./chunk-JUC24CTX.js";
-import "./chunk-2ODBA7MQ.js";
+import "./chunk-NU3CSQ4H.js";
 import "./chunk-TBBDFYXW.js";
 import "./chunk-ZBJMUXZH.js";
 import "./chunk-PVGDJXVK.js";
@@ -109,6 +110,7 @@ import "./chunk-VFUEZZBS.js";
 import "./chunk-PZ5AY32C.js";
 export {
   REGISTERED_OPERATIONS,
+  codingDecisionOperation,
   memoryGetOperation,
   memorySearchOperation,
   memoryStoreOperation

package/dist/access-schema.d.ts

@@ -119,9 +119,9 @@ declare const recallRequestSchema: z.ZodObject<{
     topK?: number | undefined;
     idempotencyKey?: string | undefined;
     disclosure?: "chunk" | "section" | "raw" | undefined;
+    projectTag?: string | undefined;
     asOf?: string | undefined;
     includeDebug?: boolean | undefined;
-    projectTag?: string | undefined;
     tagMatch?: "all" | "any" | undefined;
 }, {
     query: string;
@@ -140,9 +140,9 @@ declare const recallRequestSchema: z.ZodObject<{
     topK?: number | undefined;
     idempotencyKey?: string | undefined;
     disclosure?: "chunk" | "section" | "raw" | undefined;
+    projectTag?: string | undefined;
     asOf?: string | undefined;
     includeDebug?: boolean | undefined;
-    projectTag?: string | undefined;
     tagMatch?: "all" | "any" | undefined;
 }>;
 declare const recallExplainRequestSchema: z.ZodObject<{
@@ -447,13 +447,13 @@ declare const reviewDispositionRequestSchema: z.ZodObject<{
     namespace: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     status: "active" | "pending_review" | "rejected" | "quarantined" | "superseded" | "archived";
-    reasonCode: string;
     memoryId: string;
+    reasonCode: string;
     namespace?: string | undefined;
 }, {
     status: "active" | "pending_review" | "rejected" | "quarantined" | "superseded" | "archived";
-    reasonCode: string;
     memoryId: string;
+    reasonCode: string;
     namespace?: string | undefined;
 }>;
 declare const trustZonePromoteRequestSchema: z.ZodObject<{

package/dist/{access-service-D-siI-xJ.d.ts → access-service-DmCHJ4cH.d.ts}

@@ -6,7 +6,7 @@ import { AnomalyDetectorResult } from './recall-audit-anomaly.js';
 import { ExplicitCaptureInput } from './explicit-capture.js';
 import { BudgetDecision } from './cross-namespace-budget.js';
 import { readMemoryGovernanceRunArtifact } from './maintenance/memory-governance.js';
-import { O as Orchestrator, I as IntentDebugSnapshot, G as GraphRecallSnapshot, P as PatternReinforcementResult, W as WearablesService } from './orchestrator-DIDDvwDw.js';
+import { O as Orchestrator, I as IntentDebugSnapshot, G as GraphRecallSnapshot, P as PatternReinforcementResult, W as WearablesService } from './orchestrator-CA6ouzBn.js';
 import { LiveConnectorsRunSummary } from './live-connectors-runner.js';
 import { LastRecallSnapshot } from './recall-state.js';
 import { GraphSnapshotRequest, GraphSnapshotResponse } from './graph-snapshot.js';
@@ -92,6 +92,81 @@ interface ConsoleStateSnapshot {
     errors: string[];
 }
 
+/**
+ * Decision-record surface contract + handler (issue #1548 Track A PR 2).
+ *
+ * Rule 39: one gate predicate, checked identically on every surface. Rule 22
+ * spirit: one implementation behind three thin wirings. The service holds
+ * only a thin delegate that builds a {@link DecisionSurfaceContext} and calls
+ * {@link handleCodingDecision}; the handler logic lives here so the
+ * access-service god file gains thin wiring only.
+ *
+ * No orchestrator imports (rule 11 — no shared mutable state). No circular
+ * dependency on access-service.ts: validation errors are thrown via
+ * `ctx.throwInputError`, which the service wires to EngramAccessInputError.
+ */
+
+declare const DECISION_SUBCOMMANDS: readonly ["list", "get", "record", "supersede"];
+type DecisionSubcommand = (typeof DECISION_SUBCOMMANDS)[number];
+/**
+ * Canonical surface request — one shape for all three transports. The
+ * `subcommand` field selects which operation runs; the remaining fields are
+ * optional depending on the subcommand.
+ *
+ * `sessionKey` identifies the session whose coding context scopes the
+ * operation. `namespace` overrides the coding-scoped namespace (same
+ * precedence as `memory_store` — explicit namespace wins).
+ */
+interface DecisionSurfaceRequest {
+    subcommand: DecisionSubcommand;
+    sessionKey?: string;
+    namespace?: string;
+    id?: string;
+    title?: string;
+    status?: string;
+    context?: string;
+    decision?: string;
+    consequences?: string;
+    entityRefs?: string[];
+    supersedesId?: string;
+}
+/**
+ * Surface response — a discriminated union on `subcommand`. Each surface
+ * serializes this to its transport-appropriate shape.
+ */
+type DecisionSurfaceResponse = {
+    subcommand: "list";
+    records: DecisionSurfaceRecord[];
+    count: number;
+} | {
+    subcommand: "get";
+    found: boolean;
+    record?: DecisionSurfaceRecord;
+} | {
+    subcommand: "record";
+    memoryId: string;
+    status: string;
+} | {
+    subcommand: "supersede";
+    supersededMemoryId: string;
+    replacementMemoryId: string;
+};
+/**
+ * Flattened record projection surfaced to clients. Stored as markdown +
+ * frontmatter memory files (category `"decision"`) — this shape is the
+ * read-side projection, not the storage format.
+ */
+interface DecisionSurfaceRecord {
+    id: string;
+    title: string;
+    status: string;
+    context?: string;
+    decision?: string;
+    consequences?: string;
+    entityRefs: string[];
+    supersedes?: string;
+}
+
 /**
  * Procedural memory stats surface (issue #567 PR 5/5).
  *
@@ -916,40 +991,31 @@ declare class EngramAccessService {
      * priority over `cwd` (matching `maybeAttachCodingContext`).
      */
     private resolveCodingContextFromOptions;
+    /** Shared coding-scope derivation for the read/write resolvers below —
+     *  coding context, overlay, principal, scope-profile plan for an IMPLICIT
+     *  request, IDENTICAL to recall precedence (session-first, per-call fallback)
+     *  so a scoped store is discoverable by scoped recall (#1434). Single source
+     *  of truth for the namespacesEnabled/projectScope gates (rule 22; keeps the
+     *  scattered-config-read ratchet flat). READ-ONLY: never mutates session. */
+    private resolveCodingScopeInputs;
     /**
      * Resolve the write namespace for explicit-write tools (memory_store /
      * suggestion_submit), project-scoping the write the same way recall does so a
      * memory stored with a client-injected `cwd`/`projectTag` is discoverable by
-     * project-scoped recall (#1434, rule 42).
-     *
-     * Precedence:
-     *  - An explicit `namespace` always wins and is authorized strictly via
-     *    `resolveWritableNamespace` → `canWriteNamespace`. A coding-overlay
-     *    namespace string (`<base>-project-*`) is NOT a writable target via the
-     *    explicit field — project scoping is requested with `cwd`/`projectTag`,
-     *    never by naming the derived namespace — so there is no way to bypass the
-     *    policy allow-list by guessing/forging an overlay name (Codex review).
-     *  - With NO coding overlay, the write stays on `config.defaultNamespace` —
-     *    exactly the pre-#1434 behavior, so an unqualified write is NOT silently
-     *    moved to a principal self namespace (Codex review).
-     *  - WITH a coding overlay, the base is the principal self namespace
-     *    (`defaultNamespaceForPrincipal`, write-checked) — the SAME base recall,
-     *    observe, and the orchestrator buffer-flush write path overlay onto
-     *    (rule 42 / Cursor) — so a project-scoped store lands exactly where
-     *    project-scoped recall searches. The overlay namespace is always REBUILT
-     *    from the authenticated principal's base, never accepted as a caller
-     *    string, so a caller can never reach another principal's subtree.
-     *
-     * Read-only: this NEVER mutates session coding context, so the idempotency
-     * peeks and dryRun preflights that call it stay side-effect free (Codex
-     * review). It prefers the per-call `cwd`/`projectTag` (the project explicitly
-     * identified for this write), else the session's existing context. The HTTP
-     * surface lets the peek and the write each resolve independently; the peek's
-     * namespace only gates rate-limiting (memory_store/suggestion_submit run their
-     * own idempotency check), so a benign session-context change between the two
-     * never fails a write — there is no namespace to "pin".
+     * project-scoped recall (#1434, rule 42). Shared derivation lives in
+     * {@link resolveCodingScopeInputs}; this method enforces the WRITE acl
+     * (`canWriteNamespace` / profile-layer writability). Read-only: never mutates
+     * session coding context.
      */
     private resolveCodingScopedWriteNamespace;
+    /** Read-side mirror of {@link resolveCodingScopedWriteNamespace}. Decision
+     *  `list`/`get` use this so a record written by a project-scoped session is
+     *  listable/fetchable by the SAME session without manually supplying the
+     *  overlaid namespace (review P2). Derivation is IDENTICAL to the write path
+     *  (shared via {@link resolveCodingScopeInputs}); the only difference is the
+     *  ACL — reads enforce {@link canReadNamespace}, so a read-but-not-write
+     *  principal can still list/fetch (rule 42). */
+    private resolveCodingScopedReadableNamespace;
     /**
      * Resolve ONE effective memory scope plan for a write-producing request
      * (#1495 / seed for epic #1494). The returned {@link MemoryScopePlan} is the
@@ -1121,6 +1187,16 @@ declare class EngramAccessService {
     peekSuggestionSubmitIdempotency(request: EngramAccessSuggestionSubmitRequest): Promise<EngramAccessIdempotencyStatus>;
     private validateWriteCandidate;
     memoryGet(memoryId: string, namespace?: string, principal?: string): Promise<EngramAccessMemoryResponse>;
+    /** Whether the coding_decision tool should appear in tools/list (rule 39). */
+    get decisionRecordSurfaceVisible(): boolean;
+    /**
+     * Thin delegate — handler logic in coding/decision-surfaces.ts (#1548 PR2).
+     * All three surfaces (MCP/HTTP/CLI) arrive here via the boundary operation.
+     * Namespace resolution uses the SAME path as memory_store (principal ACL +
+     * coding overlay + default fallback) so decision records land in the same
+     * storage root.
+     */
+    codingDecision(request: DecisionSurfaceRequest, authenticatedPrincipal?: string): Promise<DecisionSurfaceResponse>;
     memoryBrowse(request?: EngramAccessMemoryBrowseRequest): Promise<EngramAccessMemoryBrowseResponse>;
     memoryTimeline(memoryId: string, namespace?: string, limit?: number, principal?: string): Promise<EngramAccessTimelineResponse>;
     entityList(options?: {
@@ -1781,15 +1857,6 @@ declare class EngramAccessService {
         storage: StorageManager;
     }>;
     get storageRef(): StorageManager;
-    /**
-     * Best-effort catalog write touch delegate (issue #1499 sweep). HTTP/MCP
-     * surfaces resolve a per-namespace storage and write through it directly (e.g.
-     * a contradiction merge), bypassing the extraction write path that owns
-     * `markCatalogWrite`. They call this to record the write so a (possibly
-     * dynamic) namespace's `lastWriteAt` stays accurate and QMD maintenance does
-     * not miss it. Fire-and-forget and failure-tolerant on the orchestrator side.
-     */
-    recordCatalogWrite(namespace?: string, storageDir?: string): void;
     get configRef(): PluginConfig;
     get localLlmRef(): LocalLlmClient | null;
     get fallbackLlmRef(): FallbackLlmClient | null;
@@ -1896,4 +1963,4 @@ declare class EngramAccessService {
     }): Promise<Awaited<ReturnType<WearablesService["transcriptMemories"]>>>;
 }
 
-export { type EngramAccessRecallExplainRequest as $, type EngramAccessLcmStatusResponse as A, type EngramAccessMaintenanceResponse as B, type CodingScopedWriteInput as C, type EngramAccessMemoryBrowseRequest as D, type EngramAccessMemoryResponse as E, type EngramAccessMemoryBrowseResponse as F, type EngramAccessMemoryRecord as G, type EngramAccessMemoryStoreRequest as H, type EngramAccessMemorySummary as I, type EngramAccessObserveMessage as J, type EngramAccessObserveRequest as K, type EngramAccessObserveResponse as L, type EngramAccessOfflineSyncApplyFileContentRequest as M, type EngramAccessOfflineSyncApplyFileContentResponse as N, type EngramAccessOfflineSyncApplyRequest as O, type ProcedureStatsConfigSnapshot as P, type EngramAccessOfflineSyncApplyResponse as Q, type EngramAccessOfflineSyncFileContentRequest as R, type EngramAccessOfflineSyncFileContentResponse as S, type EngramAccessOfflineSyncFilesRequest as T, type EngramAccessOfflineSyncFilesResponse as U, type EngramAccessOfflineSyncSnapshotRequest as V, type EngramAccessOfflineSyncSnapshotResponse as W, type EngramAccessOfflineSyncSnapshotStreamResponse as X, type EngramAccessQmdCollectionState as Y, type EngramAccessQmdHealthResponse as Z, type EngramAccessQualityResponse as _, type EngramAccessWriteResponse as a, type EngramAccessRecallExplainResponse as a0, type EngramAccessRecallRequest as a1, type EngramAccessReviewDispositionRequest as a2, type EngramAccessReviewDispositionResponse as a3, type EngramAccessReviewQueueResponse as a4, type EngramAccessScopeDebug as a5, type EngramAccessSetCodingContextRequest as a6, type EngramAccessSuggestionSubmitRequest as a7, type EngramAccessTimelineResponse as a8, type EngramAccessTrustZoneBrowseRequest as a9, type EngramAccessTrustZoneBrowseResponse as aa, type EngramAccessTrustZoneDemoSeedRequest as ab, type EngramAccessTrustZoneDemoSeedResponse as ac, type EngramAccessTrustZonePromoteRequest as ad, type EngramAccessTrustZonePromoteResponse as ae, type EngramAccessTrustZoneRecordSummary as af, type EngramAccessTrustZoneStatusResponse as ag, type EngramAccessWriteEnvelope as ah, type MemoryScopePlan as ai, shapeMemorySummary as aj, EngramAccessService as b, type EngramAccessRecallResponse as c, EngramAccessInputError as d, type ProcedureStatsRecent as e, type ProcedureStatsReport as f, type ProcedureStatusCounts as g, computeProcedureStats as h, formatProcedureStatsText as i, ENGRAM_ACCESS_WRITE_SCHEMA_VERSION as j, type EngramAccessActionConfidenceRequest as k, type EngramAccessActionConfidenceResponse as l, type EngramAccessBriefingRequest as m, type EngramAccessBriefingResponse as n, type EngramAccessCapsuleListResponse as o, type EngramAccessDaySummaryRequest as p, type EngramAccessEntityListResponse as q, type EngramAccessEntityResponse as r, type EngramAccessEntitySummary as s, type EngramAccessHealthResponse as t, type EngramAccessLcmCompactionFlushRequest as u, type EngramAccessLcmCompactionFlushResponse as v, type EngramAccessLcmCompactionRecordRequest as w, type EngramAccessLcmCompactionRecordResponse as x, type EngramAccessLcmSearchRequest as y, type EngramAccessLcmSearchResponse as z };
+export { type EngramAccessQmdHealthResponse as $, type EngramAccessLcmSearchResponse as A, type EngramAccessLcmStatusResponse as B, type CodingScopedWriteInput as C, type DecisionSurfaceRequest as D, type EngramAccessMemoryResponse as E, type EngramAccessMaintenanceResponse as F, type EngramAccessMemoryBrowseRequest as G, type EngramAccessMemoryBrowseResponse as H, type EngramAccessMemoryRecord as I, type EngramAccessMemoryStoreRequest as J, type EngramAccessMemorySummary as K, type EngramAccessObserveMessage as L, type EngramAccessObserveRequest as M, type EngramAccessObserveResponse as N, type EngramAccessOfflineSyncApplyFileContentRequest as O, type ProcedureStatsConfigSnapshot as P, type EngramAccessOfflineSyncApplyFileContentResponse as Q, type EngramAccessOfflineSyncApplyRequest as R, type EngramAccessOfflineSyncApplyResponse as S, type EngramAccessOfflineSyncFileContentRequest as T, type EngramAccessOfflineSyncFileContentResponse as U, type EngramAccessOfflineSyncFilesRequest as V, type EngramAccessOfflineSyncFilesResponse as W, type EngramAccessOfflineSyncSnapshotRequest as X, type EngramAccessOfflineSyncSnapshotResponse as Y, type EngramAccessOfflineSyncSnapshotStreamResponse as Z, type EngramAccessQmdCollectionState as _, type DecisionSurfaceResponse as a, type EngramAccessQualityResponse as a0, type EngramAccessRecallExplainRequest as a1, type EngramAccessRecallExplainResponse as a2, type EngramAccessRecallRequest as a3, type EngramAccessReviewDispositionRequest as a4, type EngramAccessReviewDispositionResponse as a5, type EngramAccessReviewQueueResponse as a6, type EngramAccessScopeDebug as a7, type EngramAccessSetCodingContextRequest as a8, type EngramAccessSuggestionSubmitRequest as a9, type EngramAccessTimelineResponse as aa, type EngramAccessTrustZoneBrowseRequest as ab, type EngramAccessTrustZoneBrowseResponse as ac, type EngramAccessTrustZoneDemoSeedRequest as ad, type EngramAccessTrustZoneDemoSeedResponse as ae, type EngramAccessTrustZonePromoteRequest as af, type EngramAccessTrustZonePromoteResponse as ag, type EngramAccessTrustZoneRecordSummary as ah, type EngramAccessTrustZoneStatusResponse as ai, type EngramAccessWriteEnvelope as aj, type MemoryScopePlan as ak, shapeMemorySummary as al, type EngramAccessWriteResponse as b, EngramAccessService as c, type EngramAccessRecallResponse as d, EngramAccessInputError as e, type ProcedureStatsRecent as f, type ProcedureStatsReport as g, type ProcedureStatusCounts as h, computeProcedureStats as i, formatProcedureStatsText as j, ENGRAM_ACCESS_WRITE_SCHEMA_VERSION as k, type EngramAccessActionConfidenceRequest as l, type EngramAccessActionConfidenceResponse as m, type EngramAccessBriefingRequest as n, type EngramAccessBriefingResponse as o, type EngramAccessCapsuleListResponse as p, type EngramAccessDaySummaryRequest as q, type EngramAccessEntityListResponse as r, type EngramAccessEntityResponse as s, type EngramAccessEntitySummary as t, type EngramAccessHealthResponse as u, type EngramAccessLcmCompactionFlushRequest as v, type EngramAccessLcmCompactionFlushResponse as w, type EngramAccessLcmCompactionRecordRequest as x, type EngramAccessLcmCompactionRecordResponse as y, type EngramAccessLcmSearchRequest as z };