@remnic/core 9.3.692 → 9.3.694

package/dist/summary-snapshot.d.ts

@@ -1,4 +1,4 @@
-import { a0 as HourlySummary } from './types-2NoBoRBM.js';
+import { a0 as HourlySummary } from './types-CEWBmjCH.js';
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';
 

package/dist/temporal-supersession.d.ts

@@ -1,4 +1,4 @@
-import { j as MemoryFrontmatter } from './types-2NoBoRBM.js';
+import { j as MemoryFrontmatter } from './types-CEWBmjCH.js';
 import { StorageManager } from './storage.js';
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';

package/dist/temporal-validity.d.ts

@@ -1,4 +1,4 @@
-import { j as MemoryFrontmatter } from './types-2NoBoRBM.js';
+import { j as MemoryFrontmatter } from './types-CEWBmjCH.js';
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';
 

package/dist/threading.d.ts

@@ -1,4 +1,4 @@
-import { Z as BufferTurn, au as ConversationThread } from './types-2NoBoRBM.js';
+import { Z as BufferTurn, au as ConversationThread } from './types-CEWBmjCH.js';
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';
 

package/dist/tier-migration.d.ts

@@ -1,4 +1,4 @@
-import { g as MemoryFile } from './types-2NoBoRBM.js';
+import { g as MemoryFile } from './types-CEWBmjCH.js';
 import { StorageManager } from './storage.js';
 import { MemoryTier } from './tier-routing.js';
 import { SearchBackend } from './search/port.js';

package/dist/tier-routing.d.ts

@@ -1,4 +1,4 @@
-import { g as MemoryFile } from './types-2NoBoRBM.js';
+import { g as MemoryFile } from './types-CEWBmjCH.js';
 import { LifecycleSignals } from './lifecycle.js';
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';

package/dist/topics.d.ts

@@ -1,4 +1,4 @@
-import { g as MemoryFile, T as TopicScore } from './types-2NoBoRBM.js';
+import { g as MemoryFile, T as TopicScore } from './types-CEWBmjCH.js';
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';
 

package/dist/transcript.d.ts

@@ -1,4 +1,4 @@
-import { P as PluginConfig, _ as TranscriptEntry, $ as Checkpoint } from './types-2NoBoRBM.js';
+import { P as PluginConfig, _ as TranscriptEntry, $ as Checkpoint } from './types-CEWBmjCH.js';
 import { SessionIntegrityReport } from './session-integrity.js';
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';

package/dist/transfer/types.d.ts

@@ -313,13 +313,13 @@ declare const CapsuleBlockSchema: z.ZodObject<{
         peerProfiles: boolean;
     }>;
 }, "strip", z.ZodTypeAny, {
+    schemaVersion: string;
     includes: {
         procedural: boolean;
         taxonomy: boolean;
         identityAnchors: boolean;
         peerProfiles: boolean;
     };
-    schemaVersion: string;
     id: string;
     description: string;
     version: string;
@@ -334,13 +334,13 @@ declare const CapsuleBlockSchema: z.ZodObject<{
         directAnswerEnabled: boolean;
     };
 }, {
+    schemaVersion: string;
     includes: {
         procedural: boolean;
         taxonomy: boolean;
         identityAnchors: boolean;
         peerProfiles: boolean;
     };
-    schemaVersion: string;
     id: string;
     description: string;
     version: string;
@@ -464,13 +464,13 @@ declare const ExportManifestV2Schema: z.ZodObject<{
             peerProfiles: boolean;
         }>;
     }, "strip", z.ZodTypeAny, {
+        schemaVersion: string;
         includes: {
             procedural: boolean;
             taxonomy: boolean;
             identityAnchors: boolean;
             peerProfiles: boolean;
         };
-        schemaVersion: string;
         id: string;
         description: string;
         version: string;
@@ -485,13 +485,13 @@ declare const ExportManifestV2Schema: z.ZodObject<{
             directAnswerEnabled: boolean;
         };
     }, {
+        schemaVersion: string;
         includes: {
             procedural: boolean;
             taxonomy: boolean;
             identityAnchors: boolean;
             peerProfiles: boolean;
         };
-        schemaVersion: string;
         id: string;
         description: string;
         version: string;
@@ -518,13 +518,13 @@ declare const ExportManifestV2Schema: z.ZodObject<{
     pluginVersion: string;
     includesTranscripts: boolean;
     capsule: {
+        schemaVersion: string;
         includes: {
             procedural: boolean;
             taxonomy: boolean;
             identityAnchors: boolean;
             peerProfiles: boolean;
         };
-        schemaVersion: string;
         id: string;
         description: string;
         version: string;
@@ -551,13 +551,13 @@ declare const ExportManifestV2Schema: z.ZodObject<{
     pluginVersion: string;
     includesTranscripts: boolean;
     capsule: {
+        schemaVersion: string;
         includes: {
             procedural: boolean;
             taxonomy: boolean;
             identityAnchors: boolean;
             peerProfiles: boolean;
         };
-        schemaVersion: string;
         id: string;
         description: string;
         version: string;
@@ -683,13 +683,13 @@ declare const ExportBundleV2Schema: z.ZodObject<{
                 peerProfiles: boolean;
             }>;
         }, "strip", z.ZodTypeAny, {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            schemaVersion: string;
             id: string;
             description: string;
             version: string;
@@ -704,13 +704,13 @@ declare const ExportBundleV2Schema: z.ZodObject<{
                 directAnswerEnabled: boolean;
             };
         }, {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            schemaVersion: string;
             id: string;
             description: string;
             version: string;
@@ -737,13 +737,13 @@ declare const ExportBundleV2Schema: z.ZodObject<{
         pluginVersion: string;
         includesTranscripts: boolean;
         capsule: {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            schemaVersion: string;
             id: string;
             description: string;
             version: string;
@@ -770,13 +770,13 @@ declare const ExportBundleV2Schema: z.ZodObject<{
         pluginVersion: string;
         includesTranscripts: boolean;
         capsule: {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            schemaVersion: string;
             id: string;
             description: string;
             version: string;
@@ -819,13 +819,13 @@ declare const ExportBundleV2Schema: z.ZodObject<{
         pluginVersion: string;
         includesTranscripts: boolean;
         capsule: {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            schemaVersion: string;
             id: string;
             description: string;
             version: string;
@@ -858,13 +858,13 @@ declare const ExportBundleV2Schema: z.ZodObject<{
         pluginVersion: string;
         includesTranscripts: boolean;
         capsule: {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            schemaVersion: string;
             id: string;
             description: string;
             version: string;

package/dist/{types-2NoBoRBM.d.ts → types-CEWBmjCH.d.ts}

@@ -791,6 +791,20 @@ interface CodingKnowledgeConfig {
      * check at boot, not at every call.
      */
     structuralProviderCommand: string;
+    /**
+     * Gate for the 14 codegraph parity tools (issue #1554). Off by default --
+     * tools/list, HTTP routes, and CLI help are byte-identical to pre-feature
+     * until this is true. The runtime also requires the @remnic/coding-graph
+     * package to be installed (rule 39: single gate predicate
+     * codegraphSurfaceVisible(config) && isCodingGraphInstalled()).
+     */
+    codegraphTools: boolean;
+    /**
+     * Root directory for per-project graph SQLite DBs. Empty string = derive
+     * from memoryDir (<memoryDir>/codegraph/<principal>/<projectId>.sqlite).
+     * Absolute path required when set explicitly (rule 11 -- no relative paths).
+     */
+    codegraphDbDir: string;
 }
 /**
  * Session-scoped coding context. Produced by `resolveGitContext()` in the

package/dist/types.d.ts

@@ -1,3 +1,3 @@
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';
-export { y as AccessTrackingEntry, A as ActiveRecallChatType, d as ActiveRecallModelFallbackPolicy, b as ActiveRecallPromptStyle, a as ActiveRecallQueryMode, c as ActiveRecallThinking, a7 as AgentAccessAuthToken, b6 as AgentAccessHttpConfig, b7 as AgentDefaultsConfig, b8 as AgentPersona, f as AgentPersonaModelConfig, b9 as BehaviorLoopAdjustment, e as BehaviorLoopPolicyState, ba as BehaviorSignalDirection, B as BehaviorSignalEvent, bb as BehaviorSignalType, aL as BootstrapOptions, aM as BootstrapResult, W as BriefingActiveThread, bc as BriefingCalendarSourceError, aS as BriefingConfig, S as BriefingFocus, O as BriefingFollowup, aT as BriefingOpenCommitment, Y as BriefingRecentEntity, X as BriefingResult, N as BriefingSections, aU as BriefingWindow, bd as BufferEntryState, k as BufferState, o as BufferSurpriseEvent, Z as BufferTurn, V as CalendarEvent, U as CalendarSource, be as CaptureMode, $ as Checkpoint, bf as CodexCliReasoningEffort, bg as CodexCompactionFlushMode, aV as CodexCompatConfig, bh as CodexConnectorConfig, aK as CodingContext, bi as CodingKnowledgeConfig, aP as CodingModeConfig, bj as CompressionGuidelineActivationState, a9 as CompressionGuidelineOptimizerActionSummary, a8 as CompressionGuidelineOptimizerEventCounts, aa as CompressionGuidelineOptimizerRuleUpdate, bk as CompressionGuidelineOptimizerSourceWindow, C as CompressionGuidelineOptimizerState, bl as ConfidenceTier, bm as ConsolidationAction, bn as ConsolidationItem, aN as ConsolidationObservation, ag as ConsolidationResult, s as ContinuityImprovementLoop, r as ContinuityIncidentCloseInput, p as ContinuityIncidentOpenInput, q as ContinuityIncidentRecord, bo as ContinuityIncidentState, bp as ContinuityLoopCadence, u as ContinuityLoopReviewInput, bq as ContinuityLoopStatus, t as ContinuityLoopUpsertInput, br as ContradictionScanConfig, au as ConversationThread, bs as CronConversationRecallMode, bt as CronRecallMode, aW as DEFAULT_RECALL_DISCLOSURE, ah as DaySummaryResult, bu as DreamingConfig, bv as DreamingNarrativePromptStyle, bw as DreamsDeepSleepConfig, bx as DreamsLightSleepConfig, ay as DreamsPhase, by as DreamsPhaseStatus, bz as DreamsPhasesConfig, bA as DreamsRemConfig, az as DreamsRunResult, ax as DreamsStatusResult, bB as EngramTraceEvent, w as EntityActivityEntry, x as EntityFile, ac as EntityMention, v as EntityRelationship, ad as EntitySchemaDefinition, ae as EntitySchemaSectionDefinition, E as EntityStructuredSection, aO as EntityTimelineEntry, aX as ExtractedFact, bC as ExtractedProcedureStep, bD as ExtractedQuestion, bE as ExtractedReasoningTrace, bF as ExtractedReasoningTraceStep, bG as ExtractedRelationship, bH as ExtractionPassSource, af as ExtractionResult, F as FileHygieneConfig, G as GatewayConfig, bI as GitHubLiveConnectorConfig, bJ as GmailLiveConnectorConfig, bK as GoogleDriveLiveConnectorConfig, bL as HeartbeatConfig, bM as HeartbeatDetectionMode, a0 as HourlySummary, J as IdentityInjectionMode, a5 as ImportanceLevel, I as ImportanceScore, a2 as LifecycleState, L as LiveConnectorsConfig, bN as LlmTraceCallback, bO as LlmTraceEvent, ak as MemoryActionEligibilityContext, aY as MemoryActionEligibilitySource, m as MemoryActionEvent, bP as MemoryActionOutcome, bQ as MemoryActionPolicyDecision, al as MemoryActionPolicyResult, bR as MemoryActionStatus, ab as MemoryActionType, M as MemoryCategory, g as MemoryFile, j as MemoryFrontmatter, ai as MemoryIntent, n as MemoryLifecycleEvent, am as MemoryLifecycleEventType, an as MemoryLifecycleStateSummary, i as MemoryLink, bS as MemoryLinkType, aZ as MemoryObservation, bT as MemoryOsPresetName, z as MemoryProjectionCurrentState, a_ as MemoryScope, h as MemoryStatus, D as MemorySummary, l as MetaState, bU as ModelApi, bV as ModelDefinitionConfig, bW as ModelProviderAuthMode, ao as ModelProviderConfig, bX as NamespacePolicy, ap as NativeKnowledgeConfig, bY as NativeKnowledgeFolderRuleConfig, bZ as NativeKnowledgeObsidianVaultConfig, b_ as NativeKnowledgeOpenClawWorkspaceConfig, b$ as NotionLiveConnectorConfig, P as PluginConfig, a4 as PolicyClass, c0 as PrincipalFromSessionKeyMode, c1 as PrincipalRule, c2 as ProceduralConfig, aq as ProvenanceConfig, ar as ProvenanceSource, aj as QmdSearchExplain, Q as QmdSearchResult, c3 as QuestionEntry, a$ as RECALL_DISCLOSURE_LEVELS, c4 as ReasoningEffort, K as RecallDisclosure, c5 as RecallPipelineConfig, H as RecallPlanMode, c6 as RecallSectionConfig, R as RecallTierExplain, c7 as RecallTraceEvent, c8 as RelevanceFeedback, as as RetrievalTier, c9 as SPECULATIVE_TTL_DAYS, ca as ScopeProfileAutoPromoteConfig, cb as ScopeProfileConfig, av as ScopeProfileLayerId, aw as ScopeProfilePromotionTarget, cc as ScopeProfileTeamProjectConfig, cd as ScopeTeamConfig, ce as ScoredEntity, a6 as SecretRef, cf as SemanticChunkingConfigShape, a1 as SessionObserverBandConfig, cg as SignalLevel, at as SignalScanResult, ch as SlotBehaviorConfig, ci as SlotMismatchMode, T as TopicScore, _ as TranscriptEntry, cj as TriggerMode, a3 as VerificationState, ck as confidenceTier, b5 as isRecallDisclosure } from './types-2NoBoRBM.js';
+export { y as AccessTrackingEntry, A as ActiveRecallChatType, d as ActiveRecallModelFallbackPolicy, b as ActiveRecallPromptStyle, a as ActiveRecallQueryMode, c as ActiveRecallThinking, a7 as AgentAccessAuthToken, b6 as AgentAccessHttpConfig, b7 as AgentDefaultsConfig, b8 as AgentPersona, f as AgentPersonaModelConfig, b9 as BehaviorLoopAdjustment, e as BehaviorLoopPolicyState, ba as BehaviorSignalDirection, B as BehaviorSignalEvent, bb as BehaviorSignalType, aL as BootstrapOptions, aM as BootstrapResult, W as BriefingActiveThread, bc as BriefingCalendarSourceError, aS as BriefingConfig, S as BriefingFocus, O as BriefingFollowup, aT as BriefingOpenCommitment, Y as BriefingRecentEntity, X as BriefingResult, N as BriefingSections, aU as BriefingWindow, bd as BufferEntryState, k as BufferState, o as BufferSurpriseEvent, Z as BufferTurn, V as CalendarEvent, U as CalendarSource, be as CaptureMode, $ as Checkpoint, bf as CodexCliReasoningEffort, bg as CodexCompactionFlushMode, aV as CodexCompatConfig, bh as CodexConnectorConfig, aK as CodingContext, bi as CodingKnowledgeConfig, aP as CodingModeConfig, bj as CompressionGuidelineActivationState, a9 as CompressionGuidelineOptimizerActionSummary, a8 as CompressionGuidelineOptimizerEventCounts, aa as CompressionGuidelineOptimizerRuleUpdate, bk as CompressionGuidelineOptimizerSourceWindow, C as CompressionGuidelineOptimizerState, bl as ConfidenceTier, bm as ConsolidationAction, bn as ConsolidationItem, aN as ConsolidationObservation, ag as ConsolidationResult, s as ContinuityImprovementLoop, r as ContinuityIncidentCloseInput, p as ContinuityIncidentOpenInput, q as ContinuityIncidentRecord, bo as ContinuityIncidentState, bp as ContinuityLoopCadence, u as ContinuityLoopReviewInput, bq as ContinuityLoopStatus, t as ContinuityLoopUpsertInput, br as ContradictionScanConfig, au as ConversationThread, bs as CronConversationRecallMode, bt as CronRecallMode, aW as DEFAULT_RECALL_DISCLOSURE, ah as DaySummaryResult, bu as DreamingConfig, bv as DreamingNarrativePromptStyle, bw as DreamsDeepSleepConfig, bx as DreamsLightSleepConfig, ay as DreamsPhase, by as DreamsPhaseStatus, bz as DreamsPhasesConfig, bA as DreamsRemConfig, az as DreamsRunResult, ax as DreamsStatusResult, bB as EngramTraceEvent, w as EntityActivityEntry, x as EntityFile, ac as EntityMention, v as EntityRelationship, ad as EntitySchemaDefinition, ae as EntitySchemaSectionDefinition, E as EntityStructuredSection, aO as EntityTimelineEntry, aX as ExtractedFact, bC as ExtractedProcedureStep, bD as ExtractedQuestion, bE as ExtractedReasoningTrace, bF as ExtractedReasoningTraceStep, bG as ExtractedRelationship, bH as ExtractionPassSource, af as ExtractionResult, F as FileHygieneConfig, G as GatewayConfig, bI as GitHubLiveConnectorConfig, bJ as GmailLiveConnectorConfig, bK as GoogleDriveLiveConnectorConfig, bL as HeartbeatConfig, bM as HeartbeatDetectionMode, a0 as HourlySummary, J as IdentityInjectionMode, a5 as ImportanceLevel, I as ImportanceScore, a2 as LifecycleState, L as LiveConnectorsConfig, bN as LlmTraceCallback, bO as LlmTraceEvent, ak as MemoryActionEligibilityContext, aY as MemoryActionEligibilitySource, m as MemoryActionEvent, bP as MemoryActionOutcome, bQ as MemoryActionPolicyDecision, al as MemoryActionPolicyResult, bR as MemoryActionStatus, ab as MemoryActionType, M as MemoryCategory, g as MemoryFile, j as MemoryFrontmatter, ai as MemoryIntent, n as MemoryLifecycleEvent, am as MemoryLifecycleEventType, an as MemoryLifecycleStateSummary, i as MemoryLink, bS as MemoryLinkType, aZ as MemoryObservation, bT as MemoryOsPresetName, z as MemoryProjectionCurrentState, a_ as MemoryScope, h as MemoryStatus, D as MemorySummary, l as MetaState, bU as ModelApi, bV as ModelDefinitionConfig, bW as ModelProviderAuthMode, ao as ModelProviderConfig, bX as NamespacePolicy, ap as NativeKnowledgeConfig, bY as NativeKnowledgeFolderRuleConfig, bZ as NativeKnowledgeObsidianVaultConfig, b_ as NativeKnowledgeOpenClawWorkspaceConfig, b$ as NotionLiveConnectorConfig, P as PluginConfig, a4 as PolicyClass, c0 as PrincipalFromSessionKeyMode, c1 as PrincipalRule, c2 as ProceduralConfig, aq as ProvenanceConfig, ar as ProvenanceSource, aj as QmdSearchExplain, Q as QmdSearchResult, c3 as QuestionEntry, a$ as RECALL_DISCLOSURE_LEVELS, c4 as ReasoningEffort, K as RecallDisclosure, c5 as RecallPipelineConfig, H as RecallPlanMode, c6 as RecallSectionConfig, R as RecallTierExplain, c7 as RecallTraceEvent, c8 as RelevanceFeedback, as as RetrievalTier, c9 as SPECULATIVE_TTL_DAYS, ca as ScopeProfileAutoPromoteConfig, cb as ScopeProfileConfig, av as ScopeProfileLayerId, aw as ScopeProfilePromotionTarget, cc as ScopeProfileTeamProjectConfig, cd as ScopeTeamConfig, ce as ScoredEntity, a6 as SecretRef, cf as SemanticChunkingConfigShape, a1 as SessionObserverBandConfig, cg as SignalLevel, at as SignalScanResult, ch as SlotBehaviorConfig, ci as SlotMismatchMode, T as TopicScore, _ as TranscriptEntry, cj as TriggerMode, a3 as VerificationState, ck as confidenceTier, b5 as isRecallDisclosure } from './types-CEWBmjCH.js';

package/dist/types.js

@@ -4,7 +4,7 @@ import {
   SPECULATIVE_TTL_DAYS,
   confidenceTier,
   isRecallDisclosure
-} from "./chunk-DQHZA7Y3.js";
+} from "./chunk-U62ZGWU7.js";
 import "./chunk-PZ5AY32C.js";
 export {
   DEFAULT_RECALL_DISCLOSURE,

package/dist/utility-runtime.d.ts

@@ -1,5 +1,5 @@
 import { TierRoutingPolicy } from './tier-routing.js';
-import './types-2NoBoRBM.js';
+import './types-CEWBmjCH.js';
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';
 import './lifecycle.js';

package/dist/verified-recall.js

@@ -1,15 +1,15 @@
 import {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
-} from "./chunk-3VVH6ZQW.js";
+} from "./chunk-5S53ZBPH.js";
 import "./chunk-7FL4CNPV.js";
-import "./chunk-VFVG4NS2.js";
+import "./chunk-NXNUG7IA.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
 import "./chunk-SVOZFLIQ.js";
 import "./chunk-J6A3CX5N.js";
-import "./chunk-DQHZA7Y3.js";
+import "./chunk-U62ZGWU7.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-MB5RSUW6.js";
 import "./chunk-6KYMPV2O.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.3.692",
+  "version": "9.3.694",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -2941,7 +2941,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.3.692"
+    "@remnic/coding-graph": "^9.3.694"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/access-boundary.ts

@@ -35,7 +35,25 @@ export type OperationName =
   | "memory_search"
   | "memory_store"
   | "coding_decision"
-  | "coding_architecture";
+  | "coding_architecture"
+  // codegraph parity tools (issue #1554) -- each maps to one codegraph_*
+  // boundary operation that delegates to the surface handler in
+  // coding/codegraph-surfaces.ts. Names match the external tool suffixes.
+  | "codegraph_index"
+  | "codegraph_list_projects"
+  | "codegraph_delete_project"
+  | "codegraph_index_status"
+  | "codegraph_search_graph"
+  | "codegraph_trace_path"
+  | "codegraph_detect_changes"
+  | "codegraph_query_graph"
+  | "codegraph_get_schema"
+  | "codegraph_get_snippet"
+  | "codegraph_get_architecture"
+  | "codegraph_search_code"
+  | "codegraph_manage_adr"
+  | "codegraph_ingest_traces"
+  | "coding_delta";
 
 // ---------------------------------------------------------------------------
 // Operation context — what every handler receives

package/src/access-cli.ts

@@ -15,7 +15,7 @@ import { projectTagProjectId } from "./coding/coding-namespace.js";
 
 const OPENCLAW_REMNIC_PLUGIN_IDS = ["openclaw-remnic", "openclaw-engram"] as const;
 
-type CommandName = "browse" | "store" | "decision" | "architecture";
+type CommandName = "browse" | "store" | "decision" | "architecture" | "delta";
 
 type ParsedArgs = {
   command: CommandName;
@@ -138,6 +138,7 @@ function usage(): string {
     "  engram-access store [options]",
     "  engram-access decision [options]",
     "  engram-access architecture [options]",
+    "  engram-access delta [options]",
     "",
     "Browse options:",
     "  --namespace <name>",
@@ -248,6 +249,17 @@ const COMMAND_SPECS: Record<CommandName, CommandSpec> = {
     ]),
     flagOptions: new Set(),
   },
+  delta: {
+    valueOptions: new Set([
+      "subcommand",
+      "namespace",
+      "session-key",
+      "principal",
+      "project-tag",
+      "repo-root",
+    ]),
+    flagOptions: new Set(),
+  },
 };
 const BROWSE_SORT_VALUES = Object.freeze([
   "updated_desc",
@@ -265,7 +277,7 @@ type BrowseSort = (typeof BROWSE_SORT_VALUES)[number];
  * `command: commandRaw` assignment below (codex review P2).
  */
 function isCommandName(value: string): value is CommandName {
-  return value === "browse" || value === "store" || value === "decision" || value === "architecture";
+  return value === "browse" || value === "store" || value === "decision" || value === "architecture" || value === "delta";
 }
 
 function parseArgs(argv: string[]): ParsedArgs {
@@ -636,6 +648,53 @@ async function runArchitecture(args: ParsedArgs, preferredId?: string): Promise<
   console.log(JSON.stringify(output.result, null, 2));
 }
 
+/**
+ * Session-delta surface (issue #1548 Track A PR 4). Dispatches through the
+ * same `coding_delta` operation as the MCP tool and HTTP route — one
+ * validation boundary, three transports.
+ */
+async function runDelta(args: ParsedArgs, preferredId?: string): Promise<void> {
+  const subcommand = requireOption(args, "subcommand");
+  const { config, service } = buildRuntime(preferredId);
+  // Same coding-context attachment as runArchitecture/runDecision: the CLI's
+  // fresh Orchestrator has an empty session coding-context map, so attach a
+  // context BEFORE dispatching so the gate passes.
+  const projectTag = getLastOption(args, "project-tag");
+  const sessionKey = getLastOption(args, "session-key");
+  if (sessionKey && sessionKey.trim().length > 0) {
+    const repoRoot = expandOptionalPath(getLastOption(args, "repo-root")) ?? process.cwd();
+    const projectId =
+      projectTag && projectTag.trim().length > 0
+        ? projectTagProjectId(projectTag.trim())
+        : projectTagProjectId(path.basename(repoRoot));
+    service.setCodingContext({
+      sessionKey,
+      codingContext: {
+        projectId,
+        branch: null,
+        rootPath: repoRoot,
+        defaultBranch: null,
+      },
+    });
+  }
+  const op = getOperation("coding_delta");
+  if (!op) {
+    throw new Error("access-boundary: operation not registered: coding_delta");
+  }
+  const output = (await op.run(
+    {
+      subcommand,
+      namespace: getLastOption(args, "namespace"),
+      sessionKey,
+    },
+    {
+      service,
+      authenticatedPrincipal: getLastOption(args, "principal") ?? config.agentAccessHttp.principal,
+    },
+  )) as { result: unknown };
+  console.log(JSON.stringify(output.result, null, 2));
+}
+
 export async function main(
   argv: string[] = process.argv.slice(2),
   options: AccessCliOptions = {},
@@ -653,6 +712,10 @@ export async function main(
     await runArchitecture(args, options.preferredId);
     return;
   }
+  if (args.command === "delta") {
+    await runDelta(args, options.preferredId);
+    return;
+  }
   await runStore(args, options.preferredId);
 }
 

package/src/access-http.ts

@@ -317,6 +317,8 @@ export class EngramAccessHttpServer {
       emitLegacyTools: options.emitLegacyTools,
       codingDecisionVisible: this.service.decisionRecordSurfaceVisible,
       architectureCardVisible: this.service.architectureCardSurfaceVisible,
+      codegraphVisible: this.service.codegraphSurfaceVisible,
+      sessionDeltaVisible: this.service.sessionDeltaSurfaceVisible,
     });
   }
 
@@ -1386,6 +1388,25 @@ export class EngramAccessHttpServer {
       return;
     }
 
+    if (req.method === "POST" && pathname === "/engram/v1/coding/delta") {
+      // Migrated through the access boundary (issue #1525/#1548 PR4):
+      // get is read-only with respect to user memory content. It DOES write
+      // the operator-side state file (last-seen-head marker), but that is
+      // bookkeeping — the same way calibration.ts writes are uncounted. No
+      // write-quota enforcement.
+      const body = await this.readJsonBody(req);
+      const op = getOperation("coding_delta");
+      if (!op) {
+        throw new EngramAccessInputError("access-boundary: operation not registered: coding_delta");
+      }
+      const output = (await op.run(body, {
+        service: this.service,
+        authenticatedPrincipal: this.resolveRequestPrincipal(req),
+      })) as { result: unknown };
+      this.respondJson(res, 200, output.result);
+      return;
+    }
+
     if (req.method === "POST" && pathname === "/engram/v1/suggestions") {
       const body = await this.readValidatedBody(req, "suggestionSubmit");
       const request = {
@@ -2248,6 +2269,20 @@ export class EngramAccessHttpServer {
     const codingArchitectureWrite =
       (toolName === "engram.coding_architecture" || toolName === "remnic.coding_architecture") &&
       toolArgsSubcommand === "refresh";
+    // codegraph parity tools (issue #1554): only mutating tools count as
+    // writes — index, delete_project, ingest_traces, and manage_adr
+    // (record|supersede). Read-only tools (search_graph, get_schema,
+    // list_projects, etc.) must NOT hit the write quota.
+    const CODEGRAPH_WRITE_TOOLS = new Set([
+      "engram.codegraph_index", "remnic.codegraph_index",
+      "engram.codegraph_delete_project", "remnic.codegraph_delete_project",
+      "engram.codegraph_ingest_traces", "remnic.codegraph_ingest_traces",
+    ]);
+    const isCodegraphManageAdr =
+      toolName === "engram.codegraph_manage_adr" || toolName === "remnic.codegraph_manage_adr";
+    const codegraphWrite =
+      CODEGRAPH_WRITE_TOOLS.has(toolName) ||
+      (isCodegraphManageAdr && (toolArgsSubcommand === "record" || toolArgsSubcommand === "supersede"));
     const isMcpWrite =
       request.method === "tools/call" &&
       (
@@ -2277,7 +2312,8 @@ export class EngramAccessHttpServer {
           )
         ) ||
         codingDecisionWrite ||
-        codingArchitectureWrite
+        codingArchitectureWrite ||
+        codegraphWrite
       );
     if (isMcpWrite) {
       this.ensureWriteRateLimitAvailable();
@@ -2300,8 +2336,16 @@ export class EngramAccessHttpServer {
     if (isMcpWrite && response !== null) {
       const result = (response as Record<string, unknown>).result as Record<string, unknown> | undefined;
       const isError = result?.isError === true;
-      const structured = result?.structuredContent as { dryRun?: boolean; idempotencyReplay?: boolean } | undefined;
-      if (!isError && structured && this.shouldCountWriteRateLimit(structured)) {
+      const structured = result?.structuredContent as
+        | { dryRun?: boolean; idempotencyReplay?: boolean; ok?: boolean }
+        | undefined;
+      // Rejected codegraph calls carry { ok: false } in structuredContent
+      // (confirm_required, package_missing, runtime_unavailable, ...). The
+      // MCP layer sets isError:false for these, so without this guard they
+      // would consume the write quota despite no mutation occurring
+      // (issue #1554 review thread: don't bill rejected calls as writes).
+      const isRejectedCodegraph = structured?.ok === false;
+      if (!isError && !isRejectedCodegraph && structured && this.shouldCountWriteRateLimit(structured)) {
         this.recordWriteRateLimitHit();
       }
     }