@remnic/core 9.3.689 → 9.3.690

package/dist/schemas.d.ts

@@ -351,13 +351,13 @@ declare const ExtractedRelationshipSchema: z.ZodObject<{
     promptedByQuestion: z.ZodNullable<z.ZodOptional<z.ZodString>>;
 }, "strip", z.ZodTypeAny, {
     source: string;
-    label: string;
     target: string;
+    label: string;
     promptedByQuestion?: string | null | undefined;
 }, {
     source: string;
-    label: string;
     target: string;
+    label: string;
     promptedByQuestion?: string | null | undefined;
 }>;
 declare const ProactiveExtractionResultSchema: z.ZodObject<{
@@ -620,13 +620,13 @@ declare const ProactiveExtractionResultSchema: z.ZodObject<{
         promptedByQuestion: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     }, "strip", z.ZodTypeAny, {
         source: string;
-        label: string;
         target: string;
+        label: string;
         promptedByQuestion?: string | null | undefined;
     }, {
         source: string;
-        label: string;
         target: string;
+        label: string;
         promptedByQuestion?: string | null | undefined;
     }>, "many">>>;
 }, "strip", z.ZodTypeAny, {
@@ -674,8 +674,8 @@ declare const ProactiveExtractionResultSchema: z.ZodObject<{
     profileUpdates: string[];
     relationships?: {
         source: string;
-        label: string;
         target: string;
+        label: string;
         promptedByQuestion?: string | null | undefined;
     }[] | null | undefined;
 }, {
@@ -723,8 +723,8 @@ declare const ProactiveExtractionResultSchema: z.ZodObject<{
     profileUpdates: string[];
     relationships?: {
         source: string;
-        label: string;
         target: string;
+        label: string;
         promptedByQuestion?: string | null | undefined;
     }[] | null | undefined;
 }>;
@@ -1002,13 +1002,13 @@ declare const ExtractionResultSchema: z.ZodObject<{
         promptedByQuestion: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     }, "strip", z.ZodTypeAny, {
         source: string;
-        label: string;
         target: string;
+        label: string;
         promptedByQuestion?: string | null | undefined;
     }, {
         source: string;
-        label: string;
         target: string;
+        label: string;
         promptedByQuestion?: string | null | undefined;
     }>, "many">>>;
 }, "strip", z.ZodTypeAny, {
@@ -1061,8 +1061,8 @@ declare const ExtractionResultSchema: z.ZodObject<{
     profileUpdates: string[];
     relationships?: {
         source: string;
-        label: string;
         target: string;
+        label: string;
         promptedByQuestion?: string | null | undefined;
     }[] | null | undefined;
     identityReflection?: string | null | undefined;
@@ -1116,8 +1116,8 @@ declare const ExtractionResultSchema: z.ZodObject<{
     profileUpdates: string[];
     relationships?: {
         source: string;
-        label: string;
         target: string;
+        label: string;
         promptedByQuestion?: string | null | undefined;
     }[] | null | undefined;
     identityReflection?: string | null | undefined;

package/dist/search/factory.js

@@ -2,7 +2,7 @@ import {
   createConversationIndexRuntime,
   createConversationSearchBackend,
   createSearchBackend
-} from "../chunk-JPETDXED.js";
+} from "../chunk-TYF3D4MS.js";
 import "../chunk-5CEJH5ZN.js";
 import "../chunk-WRFKZEO6.js";
 import "../chunk-CYEPCZN5.js";
@@ -11,10 +11,10 @@ import "../chunk-SANZHXY2.js";
 import "../chunk-AER6MT24.js";
 import "../chunk-EHISUJFN.js";
 import "../chunk-CINZGPSJ.js";
-import "../chunk-T422SYM6.js";
+import "../chunk-ZUDM75KG.js";
+import "../chunk-KCQA46NR.js";
 import "../chunk-SJHM6I4J.js";
 import "../chunk-XBZQRZ6G.js";
-import "../chunk-KCQA46NR.js";
 import "../chunk-K43PI6DQ.js";
 import "../chunk-YNQ6DFSV.js";
 import "../chunk-O75CRYGF.js";

package/dist/search/index.js

@@ -2,7 +2,7 @@ import {
   createConversationIndexRuntime,
   createConversationSearchBackend,
   createSearchBackend
-} from "../chunk-JPETDXED.js";
+} from "../chunk-TYF3D4MS.js";
 import {
   LanceDbBackend
 } from "../chunk-5CEJH5ZN.js";
@@ -25,10 +25,10 @@ import {
   EmbedHelper
 } from "../chunk-EHISUJFN.js";
 import "../chunk-CINZGPSJ.js";
-import "../chunk-T422SYM6.js";
+import "../chunk-ZUDM75KG.js";
+import "../chunk-KCQA46NR.js";
 import "../chunk-SJHM6I4J.js";
 import "../chunk-XBZQRZ6G.js";
-import "../chunk-KCQA46NR.js";
 import "../chunk-K43PI6DQ.js";
 import "../chunk-YNQ6DFSV.js";
 import "../chunk-O75CRYGF.js";

package/dist/semantic-consolidation.js

@@ -7,17 +7,18 @@ import {
   materializeAfterSemanticConsolidation,
   parseConsolidationResponse,
   parseOperatorAwareConsolidationResponse
-} from "./chunk-GS55WYRL.js";
-import "./chunk-QANVLERJ.js";
+} from "./chunk-PHZKALOE.js";
+import "./chunk-UPIBE2DK.js";
 import "./chunk-UUH4YQOF.js";
 import {
   resolveExtensionsRoot
 } from "./chunk-JLNBQWZ2.js";
 import "./chunk-3UXOZBHV.js";
-import "./chunk-BLIWOONZ.js";
+import "./chunk-CUNTLEJP.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
+import "./chunk-SVOZFLIQ.js";
 import "./chunk-J6A3CX5N.js";
 import "./chunk-NGFEWFNK.js";
 import "./chunk-MB5RSUW6.js";

package/dist/semantic-rule-promotion.js

@@ -1,11 +1,12 @@
 import {
   promoteSemanticRuleFromMemory,
   setSemanticRulePromotionTestHooks
-} from "./chunk-UTYBJR7M.js";
-import "./chunk-BLIWOONZ.js";
+} from "./chunk-SB6CQTKP.js";
+import "./chunk-CUNTLEJP.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
+import "./chunk-SVOZFLIQ.js";
 import "./chunk-J6A3CX5N.js";
 import "./chunk-NGFEWFNK.js";
 import "./chunk-MB5RSUW6.js";

package/dist/semantic-rule-verifier.js

@@ -1,11 +1,12 @@
 import {
   compareVerifiedSemanticRuleResults,
   searchVerifiedSemanticRules
-} from "./chunk-PH3HOKYW.js";
-import "./chunk-BLIWOONZ.js";
+} from "./chunk-67MMWC74.js";
+import "./chunk-CUNTLEJP.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
+import "./chunk-SVOZFLIQ.js";
 import "./chunk-J6A3CX5N.js";
 import "./chunk-NGFEWFNK.js";
 import "./chunk-MB5RSUW6.js";

package/dist/storage.d.ts

@@ -2,6 +2,7 @@ import { VersioningConfig } from './page-versioning.js';
 import { ConsolidationOperator } from './consolidation-operator.js';
 import { P as PluginConfig, h as MemoryStatus, M as MemoryCategory, I as ImportanceScore, i as MemoryLink, j as MemoryFrontmatter, g as MemoryFile, E as EntityStructuredSection, k as BufferState, l as MetaState, m as MemoryActionEvent, n as MemoryLifecycleEvent, o as BufferSurpriseEvent, B as BehaviorSignalEvent, C as CompressionGuidelineOptimizerState, p as ContinuityIncidentOpenInput, q as ContinuityIncidentRecord, r as ContinuityIncidentCloseInput, s as ContinuityImprovementLoop, t as ContinuityLoopUpsertInput, u as ContinuityLoopReviewInput, F as FileHygieneConfig, v as EntityRelationship, w as EntityActivityEntry, x as EntityFile, y as AccessTrackingEntry, z as MemoryProjectionCurrentState, D as MemorySummary, T as TopicScore } from './types-Dm5xxVrr.js';
 import { ProjectedMemoryBrowseOptions, ProjectedMemoryBrowsePage, readProjectedGovernanceRecord } from './memory-projection-store.js';
+export { stripAttributesSuffix } from './structured-attributes.js';
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';
 import './maintenance/memory-governance.js';
@@ -84,32 +85,7 @@ declare class ContentHashIndex {
     /** Normalize content and compute SHA-256 hash. */
     static computeHash(content: string): string;
 }
-/**
- * Render a structured-attributes map into a stable, canonical string fragment
- * suitable for appending to enriched memory content before hashing.
- *
- * Normalization rules:
- *   - Keys are trimmed and lowercased (values are trimmed but preserve case)
- *   - Key-value pairs are sorted alphabetically by normalized key
- *   - Pairs are joined with "; " and rendered as "key: value"
- *
- * Using this helper at BOTH the write path (enrichedContent) and the
- * dedup-lookup path (dedupContent) guarantees identical output regardless of
- * the insertion order or casing used by the caller.
- *
- * @example
- *   normalizeAttributePairs({ foo: "bar", BAZ: "qux" })
- *   // → "baz: qux; foo: bar"
- */
-/**
- * Remove the "[Attributes: ...]" suffix `writeMemory` appends to the
- * stored body when structuredAttributes are present, yielding the raw
- * fact text for content comparison. Inverse companion of
- * `normalizeAttributePairs` enrichment. String operations, not regex —
- * CodeQL js/polynomial-redos on a suffix-anchored pattern over
- * library-supplied content.
- */
-declare function stripAttributesSuffix(content: string): string;
+
 declare function normalizeAttributePairs(pairs: Record<string, string>): string;
 declare function compareEntityTimestamps(left?: string, right?: string): number;
 declare function fingerprintEntityStructuredFacts(entity: Pick<EntityFile, "structuredSections">): string | undefined;
@@ -893,4 +869,4 @@ declare class StorageManager {
     private appendGeneratedMemoryLifecycleEventFailOpen;
 }
 
-export { ContentHashIndex, type MemoryLifecycleEventWriteOptions, type ReextractJobRequest, StorageManager, compareEntityTimestamps, fingerprintEntityStructuredFacts, isEntitySynthesisStale, normalizeAttributePairs, normalizeEntityName, parseEntityFile, serializeEntityFile, stripAttributesSuffix };
+export { ContentHashIndex, type MemoryLifecycleEventWriteOptions, type ReextractJobRequest, StorageManager, compareEntityTimestamps, fingerprintEntityStructuredFacts, isEntitySynthesisStale, normalizeAttributePairs, normalizeEntityName, parseEntityFile, serializeEntityFile };

package/dist/storage.js

@@ -7,12 +7,14 @@ import {
   normalizeAttributePairs,
   normalizeEntityName,
   parseEntityFile,
-  serializeEntityFile,
-  stripAttributesSuffix
-} from "./chunk-BLIWOONZ.js";
+  serializeEntityFile
+} from "./chunk-CUNTLEJP.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
+import {
+  stripAttributesSuffix
+} from "./chunk-SVOZFLIQ.js";
 import "./chunk-J6A3CX5N.js";
 import "./chunk-NGFEWFNK.js";
 import "./chunk-MB5RSUW6.js";

package/dist/structured-attributes.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Shared helpers for the `\n[Attributes: …]` enrichment suffix that
+ * `writeMemory` appends to a stored body when `structuredAttributes` are
+ * present.
+ *
+ * Extracted here (out of `storage.ts`) so every reader — the storage
+ * manager, the wearable service, and the coding surfaces — strips the suffix
+ * with ONE definition. Previously `coding/architecture-surfaces.ts` carried a
+ * weaker local copy that only checked the trailing `]`, which could truncate
+ * card markdown that legitimately ends in a `[Attributes: …]` line (cursor
+ * review: duplicate attribute suffix stripper).
+ *
+ * String operations, not regex — CodeQL `js/polynomial-redos` flags
+ * suffix-anchored patterns over library-supplied content.
+ */
+/**
+ * Remove the `[Attributes: …]` suffix `writeMemory` appends to the stored
+ * body when structuredAttributes are present, yielding the raw fact/card text
+ * for content comparison or client display. Inverse companion of
+ * `normalizeAttributePairs` enrichment in `storage.ts`.
+ *
+ * Returns the stripped (trimmed) body when the marker opens the final
+ * non-empty line and its inner payload contains no premature `]` or newline
+ * (mirrors the exact shape `normalizeAttributePairs` emits). Otherwise
+ * returns the trimmed input unchanged — never truncates legitimate content.
+ */
+declare function stripAttributesSuffix(content: string): string;
+
+export { stripAttributesSuffix };

package/dist/structured-attributes.js

@@ -0,0 +1,8 @@
+import {
+  stripAttributesSuffix
+} from "./chunk-SVOZFLIQ.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  stripAttributesSuffix
+};
+//# sourceMappingURL=structured-attributes.js.map

package/dist/structured-attributes.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/temporal-supersession.d.ts

@@ -8,6 +8,7 @@ import './memory-projection-store.js';
 import './maintenance/memory-governance.js';
 import './runtime/better-sqlite.js';
 import 'better-sqlite3';
+import './structured-attributes.js';
 
 /**
  * Temporal Supersession (issue #375)

package/dist/tier-migration.d.ts

@@ -10,6 +10,7 @@ import './memory-projection-store.js';
 import './maintenance/memory-governance.js';
 import './runtime/better-sqlite.js';
 import 'better-sqlite3';
+import './structured-attributes.js';
 import './lifecycle.js';
 
 interface TierMigrationRequest {

package/dist/verified-recall.js

@@ -1,12 +1,13 @@
 import {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
-} from "./chunk-4FE2K57M.js";
+} from "./chunk-RTFAZOIR.js";
 import "./chunk-7FL4CNPV.js";
-import "./chunk-BLIWOONZ.js";
+import "./chunk-CUNTLEJP.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
+import "./chunk-SVOZFLIQ.js";
 import "./chunk-J6A3CX5N.js";
 import "./chunk-NGFEWFNK.js";
 import "./chunk-MB5RSUW6.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.3.689",
+  "version": "9.3.690",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -2931,7 +2931,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.3.689"
+    "@remnic/coding-graph": "^9.3.690"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/access-boundary.ts

@@ -34,7 +34,8 @@ export type OperationName =
   | "memory_get"
   | "memory_search"
   | "memory_store"
-  | "coding_decision";
+  | "coding_decision"
+  | "coding_architecture";
 
 // ---------------------------------------------------------------------------
 // Operation context — what every handler receives

package/src/access-cli.test.ts

@@ -522,3 +522,43 @@ test("access-cli rejects adjacent option-looking values", async () => {
 
   assert.match(output, /missing required option: --content/);
 });
+
+// ──────────────────────────────────────────────────────────────────────────
+// architecture command — wired through the boundary operation (#1548 PR3)
+// ──────────────────────────────────────────────────────────────────────────
+
+test("access-cli architecture is a known command (unknown options rejected, not unsupported-command)", async () => {
+  const output = await captureRunCliFailure(["architecture", "--typo", "x"]);
+  assert.match(output, /unknown option: --typo/);
+});
+
+test("access-cli architecture accepts its documented value options", async () => {
+  // Valid option spellings parse cleanly; the invocation only fails once it
+  // reaches the runtime (no OpenClaw config here), proving the options were
+  // accepted by parseArgs rather than rejected as unknown.
+  const output = await captureRunCliFailure([
+    "architecture",
+    "--subcommand",
+    "get",
+    "--session-key",
+    "s1",
+    "--namespace",
+    "ns",
+    "--project-tag",
+    "myproj",
+  ]);
+  assert.doesNotMatch(output, /unknown option/);
+  assert.doesNotMatch(output, /unsupported command/);
+});
+
+test("access-cli usage lists the architecture command and its options", async () => {
+  const output = await captureRunCliFailure(["architecture", "--typo"]);
+  assert.match(output, /engram-access architecture \[options\]/);
+  assert.match(output, /Architecture options:/);
+  assert.match(output, /--subcommand <get\|refresh>/);
+});
+
+test("access-cli still rejects truly unknown commands as unsupported", async () => {
+  const output = await captureRunCliFailure(["bogus-command"]);
+  assert.match(output, /unsupported command/);
+});

package/src/access-cli.ts

@@ -15,7 +15,7 @@ import { projectTagProjectId } from "./coding/coding-namespace.js";
 
 const OPENCLAW_REMNIC_PLUGIN_IDS = ["openclaw-remnic", "openclaw-engram"] as const;
 
-type CommandName = "browse" | "store" | "decision";
+type CommandName = "browse" | "store" | "decision" | "architecture";
 
 type ParsedArgs = {
   command: CommandName;
@@ -137,6 +137,7 @@ function usage(): string {
     "  engram-access browse [options]",
     "  engram-access store [options]",
     "  engram-access decision [options]",
+    "  engram-access architecture [options]",
     "",
     "Browse options:",
     "  --namespace <name>",
@@ -176,6 +177,14 @@ function usage(): string {
     "  --entity-ref <ref> (repeatable)",
     "  --project-tag <tag> (attach coding context for this invocation)",
     "  --supersedes-id <id> (alias for --id on supersede)",
+    "",
+    "Architecture options:",
+    "  --subcommand <get|refresh>",
+    "  --namespace <name>",
+    "  --session-key <key>",
+    "  --principal <principal>",
+    "  --project-tag <tag> (attach coding context for this invocation)",
+    "  --repo-root <path> (repo to scan for refresh; defaults to the current directory)",
   ].join("\n");
 }
 
@@ -228,6 +237,17 @@ const COMMAND_SPECS: Record<CommandName, CommandSpec> = {
     ]),
     flagOptions: new Set(),
   },
+  architecture: {
+    valueOptions: new Set([
+      "subcommand",
+      "namespace",
+      "session-key",
+      "principal",
+      "project-tag",
+      "repo-root",
+    ]),
+    flagOptions: new Set(),
+  },
 };
 const BROWSE_SORT_VALUES = Object.freeze([
   "updated_desc",
@@ -238,9 +258,19 @@ const BROWSE_SORT_VALUES = Object.freeze([
 
 type BrowseSort = (typeof BROWSE_SORT_VALUES)[number];
 
+/**
+ * Type guard for {@link CommandName}. Enumerating the union (rather than a
+ * bare `value in COMMAND_SPECS`) is what lets TypeScript NARROW the string
+ * to `CommandName` — the `in` operator alone yields TS2322 on the
+ * `command: commandRaw` assignment below (codex review P2).
+ */
+function isCommandName(value: string): value is CommandName {
+  return value === "browse" || value === "store" || value === "decision" || value === "architecture";
+}
+
 function parseArgs(argv: string[]): ParsedArgs {
   const [commandRaw, ...rest] = argv;
-  if (commandRaw !== "browse" && commandRaw !== "store" && commandRaw !== "decision") {
+  if (!isCommandName(commandRaw)) {
     throw new UsageError("unsupported-command");
   }
   const spec = COMMAND_SPECS[commandRaw];
@@ -552,6 +582,60 @@ async function runDecision(args: ParsedArgs, preferredId?: string): Promise<void
   console.log(JSON.stringify(output.result, null, 2));
 }
 
+/**
+ * Architecture-card surface (issue #1548 Track A PR 3). Dispatches through
+ * the same `coding_architecture` operation as the MCP tool and HTTP route —
+ * one validation boundary, three transports.
+ */
+async function runArchitecture(args: ParsedArgs, preferredId?: string): Promise<void> {
+  const subcommand = requireOption(args, "subcommand");
+  const { config, service } = buildRuntime(preferredId);
+  // Same coding-context attachment as runDecision (review P2): the CLI's
+  // fresh Orchestrator has an empty session coding-context map, so attach
+  // a context BEFORE dispatching when --project-tag + --session-key are
+  // given, so the gate passes and writes resolve to the right namespace.
+  const projectTag = getLastOption(args, "project-tag");
+  const sessionKey = getLastOption(args, "session-key");
+  if (sessionKey && sessionKey.trim().length > 0) {
+    // refresh scans codingContext.rootPath, so it must be a REAL checkout
+    // path. Default to the CWD (or an explicit --repo-root) so a one-shot
+    // CLI refresh scans the caller's repo, not a non-existent tag path.
+    const repoRoot = expandOptionalPath(getLastOption(args, "repo-root")) ?? process.cwd();
+    // --project-tag supplies the context id (namespace); when absent, derive
+    // a default from the repo-root basename so refresh works with just
+    // --session-key + --repo-root (codex review).
+    const projectId =
+      projectTag && projectTag.trim().length > 0
+        ? projectTagProjectId(projectTag.trim())
+        : projectTagProjectId(path.basename(repoRoot));
+    service.setCodingContext({
+      sessionKey,
+      codingContext: {
+        projectId,
+        branch: null,
+        rootPath: repoRoot,
+        defaultBranch: null,
+      },
+    });
+  }
+  const op = getOperation("coding_architecture");
+  if (!op) {
+    throw new Error("access-boundary: operation not registered: coding_architecture");
+  }
+  const output = (await op.run(
+    {
+      subcommand,
+      namespace: getLastOption(args, "namespace"),
+      sessionKey,
+    },
+    {
+      service,
+      authenticatedPrincipal: getLastOption(args, "principal") ?? config.agentAccessHttp.principal,
+    },
+  )) as { result: unknown };
+  console.log(JSON.stringify(output.result, null, 2));
+}
+
 export async function main(
   argv: string[] = process.argv.slice(2),
   options: AccessCliOptions = {},
@@ -565,6 +649,10 @@ export async function main(
     await runDecision(args, options.preferredId);
     return;
   }
+  if (args.command === "architecture") {
+    await runArchitecture(args, options.preferredId);
+    return;
+  }
   await runStore(args, options.preferredId);
 }
 

package/src/access-http.ts

@@ -316,6 +316,7 @@ export class EngramAccessHttpServer {
       citationsAutoDetect: options.citationsAutoDetect,
       emitLegacyTools: options.emitLegacyTools,
       codingDecisionVisible: this.service.decisionRecordSurfaceVisible,
+      architectureCardVisible: this.service.architectureCardSurfaceVisible,
     });
   }
 
@@ -1361,6 +1362,30 @@ export class EngramAccessHttpServer {
       return;
     }
 
+    if (req.method === "POST" && pathname === "/engram/v1/coding/architecture") {
+      // Migrated through the access boundary (issue #1525/#1548 PR3):
+      // refresh persists the card, so it is gated by the 30/min write quota;
+      // get is a pure read and stays uncounted.
+      const body = await this.readJsonBody(req);
+      const isWriteSubcommand = body.subcommand === "refresh";
+      if (isWriteSubcommand) {
+        this.ensureWriteRateLimitAvailable();
+      }
+      const op = getOperation("coding_architecture");
+      if (!op) {
+        throw new EngramAccessInputError("access-boundary: operation not registered: coding_architecture");
+      }
+      const output = (await op.run(body, {
+        service: this.service,
+        authenticatedPrincipal: this.resolveRequestPrincipal(req),
+      })) as { result: unknown };
+      if (isWriteSubcommand) {
+        this.recordWriteRateLimitHit();
+      }
+      this.respondJson(res, 200, output.result);
+      return;
+    }
+
     if (req.method === "POST" && pathname === "/engram/v1/suggestions") {
       const body = await this.readValidatedBody(req, "suggestionSubmit");
       const request = {
@@ -2213,13 +2238,16 @@ export class EngramAccessHttpServer {
       typeof toolArgs === "object" &&
       !Array.isArray(toolArgs) &&
       (toolArgs as { dryRun?: unknown }).dryRun === true;
+    const toolArgsSubcommand =
+      toolArgs !== null && typeof toolArgs === "object" && !Array.isArray(toolArgs) && "subcommand" in toolArgs
+        ? toolArgs.subcommand
+        : undefined;
     const codingDecisionWrite =
       (toolName === "engram.coding_decision" || toolName === "remnic.coding_decision") &&
-      toolArgs !== null &&
-      typeof toolArgs === "object" &&
-      !Array.isArray(toolArgs) &&
-      ((toolArgs as { subcommand?: unknown }).subcommand === "record" ||
-        (toolArgs as { subcommand?: unknown }).subcommand === "supersede");
+      (toolArgsSubcommand === "record" || toolArgsSubcommand === "supersede");
+    const codingArchitectureWrite =
+      (toolName === "engram.coding_architecture" || toolName === "remnic.coding_architecture") &&
+      toolArgsSubcommand === "refresh";
     const isMcpWrite =
       request.method === "tools/call" &&
       (
@@ -2248,7 +2276,8 @@ export class EngramAccessHttpServer {
             toolName === "remnic.memory_action_apply"
           )
         ) ||
-        codingDecisionWrite
+        codingDecisionWrite ||
+        codingArchitectureWrite
       );
     if (isMcpWrite) {
       this.ensureWriteRateLimitAvailable();