@remnic/core 9.3.690 → 9.3.691

package/dist/transfer/capsule-export.js

@@ -1,10 +1,10 @@
 import {
   exportCapsule,
   isValidCapsuleSince
-} from "../chunk-KQAFEZQX.js";
+} from "../chunk-IPLYGWQF.js";
+import "../chunk-J4EB7DNW.js";
 import "../chunk-WEHSQBFR.js";
 import "../chunk-X7Y7WX73.js";
-import "../chunk-J4EB7DNW.js";
 import "../chunk-BJMBJZ2Y.js";
 import "../chunk-UKJAGEXH.js";
 import "../chunk-FP2373TW.js";

package/dist/{types-Dm5xxVrr.d.ts → types-2NoBoRBM.d.ts}

@@ -1062,6 +1062,25 @@ interface PluginConfig {
      * filtered out.
      */
     temporalSupersessionIncludeInRecall: boolean;
+    /**
+     * Bi-temporal validity master gate (issue #1578). When `false` (default),
+     * the recall validity-injection filter and `asOf` semantics behave
+     * byte-identically to pre-#1578.
+     *
+     * Turn on to exclude validity-expired facts from default injection
+     * candidates (they remain findable by explicit search and `as_of`
+     * queries). Storage round-trips `observedAt`/`eventTimeSource`; the
+     * extraction prompt → `resolveEventTime` write-time wiring lands in a
+     * follow-on PR, so new extractions are not yet event-time-resolved.
+     */
+    temporalBiTemporal: boolean;
+    /**
+     * Escape hatch for the bi-temporal injection filter (issue #1578). When
+     * `true`, facts whose `[valid_at, invalid_at)` interval ended before now
+     * are kept in injection candidates even with `temporalBiTemporal` on — some
+     * deployments prefer the older (always-inject) behavior. Default `false`.
+     */
+    temporalExpiredInInjection: boolean;
     /**
      * When true, recall checks whether a single validated memory in a
      * high-trust taxonomy bucket can answer the query before invoking QMD.
@@ -2570,6 +2589,25 @@ interface MemoryFrontmatter {
      * point in time.
      */
     invalid_at?: string;
+    /**
+     * Ingestion time (issue #1578) — when Remnic *learned* this fact.
+     * Distinct from `created` (file creation) and `valid_at` (event-time
+     * start).  Aligns with the source turn timestamp (#1575
+     * `sources[].observedAt`).  When `eventTimeSource === "assumed"`,
+     * `valid_at` is copied from this value.
+     */
+    observedAt?: string;
+    /**
+     * Provenance of the event-time interval (issue #1578).
+     *   - `"extracted"` — a per-fact `eventTime` expression was resolved
+     *     against the source turn's timestamp and produced `valid_at` /
+     *     `invalid_at`.
+     *   - `"assumed"` — no resolvable expression; `valid_at` was copied from
+     *     `observedAt` (the ingestion anchor).
+     * Absent on memories written before #1578; readers treat absent as
+     * `"assumed"` for display purposes.
+     */
+    eventTimeSource?: "extracted" | "assumed";
     /**
      * Timestamp when the operator explicitly forgot this memory
      * (issue #686 PR 4/6).  Set by `remnic forget <id>`.  Memories with

package/dist/types.d.ts

@@ -1,3 +1,3 @@
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';
-export { y as AccessTrackingEntry, A as ActiveRecallChatType, d as ActiveRecallModelFallbackPolicy, b as ActiveRecallPromptStyle, a as ActiveRecallQueryMode, c as ActiveRecallThinking, a7 as AgentAccessAuthToken, b6 as AgentAccessHttpConfig, b7 as AgentDefaultsConfig, b8 as AgentPersona, f as AgentPersonaModelConfig, b9 as BehaviorLoopAdjustment, e as BehaviorLoopPolicyState, ba as BehaviorSignalDirection, B as BehaviorSignalEvent, bb as BehaviorSignalType, aL as BootstrapOptions, aM as BootstrapResult, W as BriefingActiveThread, bc as BriefingCalendarSourceError, aS as BriefingConfig, S as BriefingFocus, O as BriefingFollowup, aT as BriefingOpenCommitment, Y as BriefingRecentEntity, X as BriefingResult, N as BriefingSections, aU as BriefingWindow, bd as BufferEntryState, k as BufferState, o as BufferSurpriseEvent, Z as BufferTurn, V as CalendarEvent, U as CalendarSource, be as CaptureMode, $ as Checkpoint, bf as CodexCliReasoningEffort, bg as CodexCompactionFlushMode, aV as CodexCompatConfig, bh as CodexConnectorConfig, aK as CodingContext, bi as CodingKnowledgeConfig, aP as CodingModeConfig, bj as CompressionGuidelineActivationState, a9 as CompressionGuidelineOptimizerActionSummary, a8 as CompressionGuidelineOptimizerEventCounts, aa as CompressionGuidelineOptimizerRuleUpdate, bk as CompressionGuidelineOptimizerSourceWindow, C as CompressionGuidelineOptimizerState, bl as ConfidenceTier, bm as ConsolidationAction, bn as ConsolidationItem, aN as ConsolidationObservation, ag as ConsolidationResult, s as ContinuityImprovementLoop, r as ContinuityIncidentCloseInput, p as ContinuityIncidentOpenInput, q as ContinuityIncidentRecord, bo as ContinuityIncidentState, bp as ContinuityLoopCadence, u as ContinuityLoopReviewInput, bq as ContinuityLoopStatus, t as ContinuityLoopUpsertInput, br as ContradictionScanConfig, au as ConversationThread, bs as CronConversationRecallMode, bt as CronRecallMode, aW as DEFAULT_RECALL_DISCLOSURE, ah as DaySummaryResult, bu as DreamingConfig, bv as DreamingNarrativePromptStyle, bw as DreamsDeepSleepConfig, bx as DreamsLightSleepConfig, ay as DreamsPhase, by as DreamsPhaseStatus, bz as DreamsPhasesConfig, bA as DreamsRemConfig, az as DreamsRunResult, ax as DreamsStatusResult, bB as EngramTraceEvent, w as EntityActivityEntry, x as EntityFile, ac as EntityMention, v as EntityRelationship, ad as EntitySchemaDefinition, ae as EntitySchemaSectionDefinition, E as EntityStructuredSection, aO as EntityTimelineEntry, aX as ExtractedFact, bC as ExtractedProcedureStep, bD as ExtractedQuestion, bE as ExtractedReasoningTrace, bF as ExtractedReasoningTraceStep, bG as ExtractedRelationship, bH as ExtractionPassSource, af as ExtractionResult, F as FileHygieneConfig, G as GatewayConfig, bI as GitHubLiveConnectorConfig, bJ as GmailLiveConnectorConfig, bK as GoogleDriveLiveConnectorConfig, bL as HeartbeatConfig, bM as HeartbeatDetectionMode, a0 as HourlySummary, J as IdentityInjectionMode, a5 as ImportanceLevel, I as ImportanceScore, a2 as LifecycleState, L as LiveConnectorsConfig, bN as LlmTraceCallback, bO as LlmTraceEvent, ak as MemoryActionEligibilityContext, aY as MemoryActionEligibilitySource, m as MemoryActionEvent, bP as MemoryActionOutcome, bQ as MemoryActionPolicyDecision, al as MemoryActionPolicyResult, bR as MemoryActionStatus, ab as MemoryActionType, M as MemoryCategory, g as MemoryFile, j as MemoryFrontmatter, ai as MemoryIntent, n as MemoryLifecycleEvent, am as MemoryLifecycleEventType, an as MemoryLifecycleStateSummary, i as MemoryLink, bS as MemoryLinkType, aZ as MemoryObservation, bT as MemoryOsPresetName, z as MemoryProjectionCurrentState, a_ as MemoryScope, h as MemoryStatus, D as MemorySummary, l as MetaState, bU as ModelApi, bV as ModelDefinitionConfig, bW as ModelProviderAuthMode, ao as ModelProviderConfig, bX as NamespacePolicy, ap as NativeKnowledgeConfig, bY as NativeKnowledgeFolderRuleConfig, bZ as NativeKnowledgeObsidianVaultConfig, b_ as NativeKnowledgeOpenClawWorkspaceConfig, b$ as NotionLiveConnectorConfig, P as PluginConfig, a4 as PolicyClass, c0 as PrincipalFromSessionKeyMode, c1 as PrincipalRule, c2 as ProceduralConfig, aq as ProvenanceConfig, ar as ProvenanceSource, aj as QmdSearchExplain, Q as QmdSearchResult, c3 as QuestionEntry, a$ as RECALL_DISCLOSURE_LEVELS, c4 as ReasoningEffort, K as RecallDisclosure, c5 as RecallPipelineConfig, H as RecallPlanMode, c6 as RecallSectionConfig, R as RecallTierExplain, c7 as RecallTraceEvent, c8 as RelevanceFeedback, as as RetrievalTier, c9 as SPECULATIVE_TTL_DAYS, ca as ScopeProfileAutoPromoteConfig, cb as ScopeProfileConfig, av as ScopeProfileLayerId, aw as ScopeProfilePromotionTarget, cc as ScopeProfileTeamProjectConfig, cd as ScopeTeamConfig, ce as ScoredEntity, a6 as SecretRef, cf as SemanticChunkingConfigShape, a1 as SessionObserverBandConfig, cg as SignalLevel, at as SignalScanResult, ch as SlotBehaviorConfig, ci as SlotMismatchMode, T as TopicScore, _ as TranscriptEntry, cj as TriggerMode, a3 as VerificationState, ck as confidenceTier, b5 as isRecallDisclosure } from './types-Dm5xxVrr.js';
+export { y as AccessTrackingEntry, A as ActiveRecallChatType, d as ActiveRecallModelFallbackPolicy, b as ActiveRecallPromptStyle, a as ActiveRecallQueryMode, c as ActiveRecallThinking, a7 as AgentAccessAuthToken, b6 as AgentAccessHttpConfig, b7 as AgentDefaultsConfig, b8 as AgentPersona, f as AgentPersonaModelConfig, b9 as BehaviorLoopAdjustment, e as BehaviorLoopPolicyState, ba as BehaviorSignalDirection, B as BehaviorSignalEvent, bb as BehaviorSignalType, aL as BootstrapOptions, aM as BootstrapResult, W as BriefingActiveThread, bc as BriefingCalendarSourceError, aS as BriefingConfig, S as BriefingFocus, O as BriefingFollowup, aT as BriefingOpenCommitment, Y as BriefingRecentEntity, X as BriefingResult, N as BriefingSections, aU as BriefingWindow, bd as BufferEntryState, k as BufferState, o as BufferSurpriseEvent, Z as BufferTurn, V as CalendarEvent, U as CalendarSource, be as CaptureMode, $ as Checkpoint, bf as CodexCliReasoningEffort, bg as CodexCompactionFlushMode, aV as CodexCompatConfig, bh as CodexConnectorConfig, aK as CodingContext, bi as CodingKnowledgeConfig, aP as CodingModeConfig, bj as CompressionGuidelineActivationState, a9 as CompressionGuidelineOptimizerActionSummary, a8 as CompressionGuidelineOptimizerEventCounts, aa as CompressionGuidelineOptimizerRuleUpdate, bk as CompressionGuidelineOptimizerSourceWindow, C as CompressionGuidelineOptimizerState, bl as ConfidenceTier, bm as ConsolidationAction, bn as ConsolidationItem, aN as ConsolidationObservation, ag as ConsolidationResult, s as ContinuityImprovementLoop, r as ContinuityIncidentCloseInput, p as ContinuityIncidentOpenInput, q as ContinuityIncidentRecord, bo as ContinuityIncidentState, bp as ContinuityLoopCadence, u as ContinuityLoopReviewInput, bq as ContinuityLoopStatus, t as ContinuityLoopUpsertInput, br as ContradictionScanConfig, au as ConversationThread, bs as CronConversationRecallMode, bt as CronRecallMode, aW as DEFAULT_RECALL_DISCLOSURE, ah as DaySummaryResult, bu as DreamingConfig, bv as DreamingNarrativePromptStyle, bw as DreamsDeepSleepConfig, bx as DreamsLightSleepConfig, ay as DreamsPhase, by as DreamsPhaseStatus, bz as DreamsPhasesConfig, bA as DreamsRemConfig, az as DreamsRunResult, ax as DreamsStatusResult, bB as EngramTraceEvent, w as EntityActivityEntry, x as EntityFile, ac as EntityMention, v as EntityRelationship, ad as EntitySchemaDefinition, ae as EntitySchemaSectionDefinition, E as EntityStructuredSection, aO as EntityTimelineEntry, aX as ExtractedFact, bC as ExtractedProcedureStep, bD as ExtractedQuestion, bE as ExtractedReasoningTrace, bF as ExtractedReasoningTraceStep, bG as ExtractedRelationship, bH as ExtractionPassSource, af as ExtractionResult, F as FileHygieneConfig, G as GatewayConfig, bI as GitHubLiveConnectorConfig, bJ as GmailLiveConnectorConfig, bK as GoogleDriveLiveConnectorConfig, bL as HeartbeatConfig, bM as HeartbeatDetectionMode, a0 as HourlySummary, J as IdentityInjectionMode, a5 as ImportanceLevel, I as ImportanceScore, a2 as LifecycleState, L as LiveConnectorsConfig, bN as LlmTraceCallback, bO as LlmTraceEvent, ak as MemoryActionEligibilityContext, aY as MemoryActionEligibilitySource, m as MemoryActionEvent, bP as MemoryActionOutcome, bQ as MemoryActionPolicyDecision, al as MemoryActionPolicyResult, bR as MemoryActionStatus, ab as MemoryActionType, M as MemoryCategory, g as MemoryFile, j as MemoryFrontmatter, ai as MemoryIntent, n as MemoryLifecycleEvent, am as MemoryLifecycleEventType, an as MemoryLifecycleStateSummary, i as MemoryLink, bS as MemoryLinkType, aZ as MemoryObservation, bT as MemoryOsPresetName, z as MemoryProjectionCurrentState, a_ as MemoryScope, h as MemoryStatus, D as MemorySummary, l as MetaState, bU as ModelApi, bV as ModelDefinitionConfig, bW as ModelProviderAuthMode, ao as ModelProviderConfig, bX as NamespacePolicy, ap as NativeKnowledgeConfig, bY as NativeKnowledgeFolderRuleConfig, bZ as NativeKnowledgeObsidianVaultConfig, b_ as NativeKnowledgeOpenClawWorkspaceConfig, b$ as NotionLiveConnectorConfig, P as PluginConfig, a4 as PolicyClass, c0 as PrincipalFromSessionKeyMode, c1 as PrincipalRule, c2 as ProceduralConfig, aq as ProvenanceConfig, ar as ProvenanceSource, aj as QmdSearchExplain, Q as QmdSearchResult, c3 as QuestionEntry, a$ as RECALL_DISCLOSURE_LEVELS, c4 as ReasoningEffort, K as RecallDisclosure, c5 as RecallPipelineConfig, H as RecallPlanMode, c6 as RecallSectionConfig, R as RecallTierExplain, c7 as RecallTraceEvent, c8 as RelevanceFeedback, as as RetrievalTier, c9 as SPECULATIVE_TTL_DAYS, ca as ScopeProfileAutoPromoteConfig, cb as ScopeProfileConfig, av as ScopeProfileLayerId, aw as ScopeProfilePromotionTarget, cc as ScopeProfileTeamProjectConfig, cd as ScopeTeamConfig, ce as ScoredEntity, a6 as SecretRef, cf as SemanticChunkingConfigShape, a1 as SessionObserverBandConfig, cg as SignalLevel, at as SignalScanResult, ch as SlotBehaviorConfig, ci as SlotMismatchMode, T as TopicScore, _ as TranscriptEntry, cj as TriggerMode, a3 as VerificationState, ck as confidenceTier, b5 as isRecallDisclosure } from './types-2NoBoRBM.js';

package/dist/types.js

@@ -4,7 +4,7 @@ import {
   SPECULATIVE_TTL_DAYS,
   confidenceTier,
   isRecallDisclosure
-} from "./chunk-NGFEWFNK.js";
+} from "./chunk-DQHZA7Y3.js";
 import "./chunk-PZ5AY32C.js";
 export {
   DEFAULT_RECALL_DISCLOSURE,

package/dist/utility-runtime.d.ts

@@ -1,5 +1,5 @@
 import { TierRoutingPolicy } from './tier-routing.js';
-import './types-Dm5xxVrr.js';
+import './types-2NoBoRBM.js';
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';
 import './lifecycle.js';

package/dist/verified-recall.js

@@ -1,23 +1,23 @@
 import {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
-} from "./chunk-RTFAZOIR.js";
+} from "./chunk-3VVH6ZQW.js";
 import "./chunk-7FL4CNPV.js";
-import "./chunk-CUNTLEJP.js";
+import "./chunk-VFVG4NS2.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
 import "./chunk-SVOZFLIQ.js";
 import "./chunk-J6A3CX5N.js";
-import "./chunk-NGFEWFNK.js";
+import "./chunk-DQHZA7Y3.js";
+import "./chunk-SCU65EZI.js";
 import "./chunk-MB5RSUW6.js";
 import "./chunk-6KYMPV2O.js";
 import "./chunk-AWJ2FHCF.js";
 import "./chunk-42JKGUFJ.js";
 import "./chunk-RULE4VG5.js";
-import "./chunk-SCU65EZI.js";
-import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
+import "./chunk-DM2T26WE.js";
 import "./chunk-FVQJYWH7.js";
 import "./chunk-G7D6GZ5J.js";
 import "./chunk-VF4XKTX3.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.3.690",
+  "version": "9.3.691",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -2931,7 +2931,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.3.690"
+    "@remnic/coding-graph": "^9.3.691"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/bitemporal-frontmatter.test.ts

@@ -0,0 +1,177 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import os from "node:os";
+import path from "node:path";
+import { mkdtemp, rm } from "node:fs/promises";
+
+import { StorageManager } from "./storage.js";
+import { isValidityExpiredNow } from "./temporal-validity.js";
+
+/**
+ * Issue #1578 PR 1 — bi-temporal validity frontmatter round-trip + injection
+ * filter unit tests.
+ *
+ * These tests pin the on-disk contract added by #1578 (`observedAt`,
+ * `eventTimeSource`) AND prove the pre-existing temporal/lifecycle fields
+ * (`created`, `updated`, `source`, `valid_at`, `invalid_at`, `forgottenAt`)
+ * round-trip unchanged alongside them — i.e. the parser was not corrupted by
+ * the additive change.  Every test goes through the public StorageManager API
+ * (`writeMemory` + `writeMemoryFrontmatter`, both of which route through the
+ * `serializeFrontmatter` chokepoint) so the serialize → parse round trip is
+ * exercised end to end.
+ *
+ * The injection filter (`isValidityExpiredNow`) is a pure function, so it is
+ * unit-tested directly with minimal frontmatter fragments.
+ */
+
+const OBSERVED = "2026-06-20T14:02:11.000Z";
+const VALID_FROM = "2026-03-01T00:00:00.000Z";
+const VALID_UNTIL = "2026-06-15T00:00:00.000Z";
+
+test("round-trip: observedAt + eventTimeSource + valid_at survive write → readAllMemories", async () => {
+  const dir = await mkdtemp(path.join(os.tmpdir(), "remnic-bitemporal-rt-"));
+  try {
+    const storage = new StorageManager(dir);
+    await storage.ensureDirectories();
+
+    const id = await storage.writeMemory("fact", "We moved offices in March.", {
+      observedAt: OBSERVED,
+      eventTimeSource: "extracted",
+      validAt: VALID_FROM,
+    });
+
+    const memories = await storage.readAllMemories();
+    const written = memories.find((m) => m.frontmatter.id === id);
+    assert.ok(written, "fact must be discoverable after write");
+    assert.equal(written!.frontmatter.observedAt, OBSERVED);
+    assert.equal(written!.frontmatter.eventTimeSource, "extracted");
+    assert.equal(written!.frontmatter.valid_at, VALID_FROM);
+    // The auto-set baseline fields must remain present and well-formed.
+    assert.ok(typeof written!.frontmatter.created === "string" && written!.frontmatter.created!.length > 0);
+    assert.ok(typeof written!.frontmatter.updated === "string" && written!.frontmatter.updated!.length > 0);
+    assert.equal(written!.frontmatter.source, "extraction");
+  } finally {
+    await rm(dir, { recursive: true, force: true });
+  }
+});
+
+test("round-trip: invalid_at + forgottenAt coexist with observedAt/eventTimeSource (parser not corrupted)", async () => {
+  // Exercises the full serialize→parse round trip through the
+  // writeMemoryFrontmatter chokepoint for the fields writeMemory does not
+  // accept as options (invalid_at, forgottenAt).  This is the direct
+  // regression guard for the "frontmatter parser corruption" risk: every
+  // pre-existing field must survive alongside the new bi-temporal fields,
+  // with no field dropped or duplicated.
+  const dir = await mkdtemp(path.join(os.tmpdir(), "remnic-bitemporal-coexist-"));
+  try {
+    const storage = new StorageManager(dir);
+    await storage.ensureDirectories();
+
+    const id = await storage.writeMemory("fact", "Old stack was Node 18.", {
+      observedAt: OBSERVED,
+      eventTimeSource: "assumed",
+      validAt: VALID_FROM,
+    });
+
+    const before = await storage.readAllMemories();
+    const memory = before.find((m) => m.frontmatter.id === id);
+    assert.ok(memory);
+
+    const ok = await storage.writeMemoryFrontmatter(memory!, {
+      invalid_at: VALID_UNTIL,
+      forgottenAt: "2026-07-01T00:00:00.000Z",
+    });
+    assert.equal(ok, true);
+
+    const after = await storage.readAllMemories();
+    const patched = after.find((m) => m.frontmatter.id === id);
+    assert.ok(patched, "patched fact must be readable");
+    const fm = patched!.frontmatter;
+    // New bi-temporal fields.
+    assert.equal(fm.observedAt, OBSERVED);
+    assert.equal(fm.eventTimeSource, "assumed");
+    // Pre-existing temporal/lifecycle fields — all present, correct values.
+    assert.equal(fm.valid_at, VALID_FROM);
+    assert.equal(fm.invalid_at, VALID_UNTIL);
+    assert.equal(fm.forgottenAt, "2026-07-01T00:00:00.000Z");
+    // Baseline identity fields untouched by the patch.
+    assert.ok(typeof fm.created === "string" && fm.created!.length > 0);
+    assert.ok(typeof fm.source === "string" && fm.source!.length > 0);
+  } finally {
+    await rm(dir, { recursive: true, force: true });
+  }
+});
+
+test("legacy memory without bi-temporal fields reads cleanly — observedAt/eventTimeSource undefined", async () => {
+  const dir = await mkdtemp(path.join(os.tmpdir(), "remnic-bitemporal-legacy-"));
+  try {
+    const storage = new StorageManager(dir);
+    await storage.ensureDirectories();
+
+    const id = await storage.writeMemory("fact", "Legacy fact pre-dating #1578.");
+
+    const memories = await storage.readAllMemories();
+    const written = memories.find((m) => m.frontmatter.id === id);
+    assert.ok(written);
+    assert.equal(written!.frontmatter.observedAt, undefined);
+    assert.equal(written!.frontmatter.eventTimeSource, undefined);
+  } finally {
+    await rm(dir, { recursive: true, force: true });
+  }
+});
+
+test("garbage observedAt is rejected on write — corrupt timestamps cannot leak to disk", async () => {
+  const dir = await mkdtemp(path.join(os.tmpdir(), "remnic-bitemporal-reject-"));
+  try {
+    const storage = new StorageManager(dir);
+    await storage.ensureDirectories();
+
+    await assert.rejects(
+      () => storage.writeMemory("fact", "Bad observedAt.", { observedAt: "not-a-timestamp" }),
+      /observedAt must be a valid ISO timestamp/,
+    );
+  } finally {
+    await rm(dir, { recursive: true, force: true });
+  }
+});
+
+test("isValidityExpiredNow: absent invalid_at → never expired (still valid)", () => {
+  assert.equal(isValidityExpiredNow({ invalid_at: undefined }, Date.now()), false);
+  assert.equal(isValidityExpiredNow({ invalid_at: "" }, Date.now()), false);
+});
+
+test("isValidityExpiredNow: invalid_at in the past → expired (interval ended)", () => {
+  const now = Date.parse("2026-06-20T00:00:00.000Z");
+  assert.equal(
+    isValidityExpiredNow({ invalid_at: "2026-06-15T00:00:00.000Z" }, now),
+    true,
+  );
+});
+
+test("isValidityExpiredNow: invalid_at in the future → not expired (still within window)", () => {
+  const now = Date.parse("2026-06-20T00:00:00.000Z");
+  assert.equal(
+    isValidityExpiredNow({ invalid_at: "2026-12-31T00:00:00.000Z" }, now),
+    false,
+  );
+});
+
+test("isValidityExpiredNow: exclusive end — invalid_at == now is EXPIRED ([from, until) ended)", () => {
+  const boundary = Date.parse("2026-06-15T00:00:00.000Z");
+  // At the exact exclusive boundary the interval has ended.
+  assert.equal(
+    isValidityExpiredNow({ invalid_at: "2026-06-15T00:00:00.000Z" }, boundary),
+    true,
+  );
+});
+
+test("isValidityExpiredNow: status-orthogonal — considers invalid_at only, ignores status", () => {
+  // The filter must be status-orthogonal (issue pitfall matrix): an `active`
+  // memory can be validity-expired.  isValidityExpiredNow only receives the
+  // invalid_at field, so status never enters the decision.
+  const now = Date.parse("2026-06-20T00:00:00.000Z");
+  assert.equal(
+    isValidityExpiredNow({ invalid_at: "2026-06-15T00:00:00.000Z" }, now),
+    true,
+  );
+});

package/src/config.ts

@@ -2084,6 +2084,19 @@ export function parseConfig(
     temporalSupersessionEnabled: cfg.temporalSupersessionEnabled !== false, // On by default
     temporalSupersessionIncludeInRecall:
       cfg.temporalSupersessionIncludeInRecall === true, // Off by default
+    // Bi-temporal validity (issue #1578). Default `false` so recall behaves
+    // byte-identically to pre-#1578 until an operator opts in. Uses coerceBool
+    // (same as recallDirectAnswerEnabled below) so CLI string "true" works.
+    //
+    // CURRENT scope (this PR): the recall injection filter (expired-validity
+    // facts leave default injection but stay findable by explicit search and
+    // as_of queries) + the observedAt/eventTimeSource storage fields. The
+    // extraction prompt → resolveEventTime write-time wiring lands in a
+    // follow-on PR; until then, enabling the gate exercises the filter and
+    // storage round-trip but new extractions are not yet event-time-resolved
+    // (docs kept honest — review: wire resolver before exposing the gate).
+    temporalBiTemporal: coerceBool(cfg.temporalBiTemporal) ?? false,
+    temporalExpiredInInjection: coerceBool(cfg.temporalExpiredInInjection) ?? false,
     // Direct-answer retrieval tier (issue #518).  Default off so the
     // recall path keeps least-privileged behavior unless operators
     // explicitly opt in.