@remnic/core 9.3.697 → 9.3.698

package/dist/namespaces/storage.js

@@ -2,9 +2,9 @@ import {
   NamespaceStorageRouter,
   resolveDefaultNamespaceRoot,
   resolveNamespaceStorageRoot
-} from "../chunk-75KYTVFK.js";
+} from "../chunk-2K64VH66.js";
 import "../chunk-ZFXCQPNO.js";
-import "../chunk-UZW4UWIK.js";
+import "../chunk-RIC5U67B.js";
 import "../chunk-M7XQSUBB.js";
 import "../chunk-5UZXUTVO.js";
 import "../chunk-5GPPACXK.js";
@@ -20,7 +20,7 @@ import "../chunk-RULE4VG5.js";
 import "../chunk-LDXUBPMO.js";
 import "../chunk-DM2T26WE.js";
 import "../chunk-FVQJYWH7.js";
-import "../chunk-4X3LO5OF.js";
+import "../chunk-FEB7W5JG.js";
 import "../chunk-G7D6GZ5J.js";
 import "../chunk-VF4XKTX3.js";
 import "../chunk-5J4OL7TJ.js";

package/dist/operator-toolkit.js

@@ -11,13 +11,13 @@ import {
   summarizeMemoryWorthLegacyCounters,
   summarizeObservationThroughput,
   summarizeTierDistribution
-} from "./chunk-5JTY7OXQ.js";
-import "./chunk-VXNJGBUK.js";
+} from "./chunk-UDDSC6PO.js";
+import "./chunk-YY2HGKWR.js";
 import "./chunk-7XH7VJN4.js";
 import "./chunk-YBPYIAA5.js";
-import "./chunk-BQEZPX6Z.js";
-import "./chunk-4LM6W5SX.js";
-import "./chunk-75KYTVFK.js";
+import "./chunk-SIDSEXUG.js";
+import "./chunk-M4DQWUKX.js";
+import "./chunk-2K64VH66.js";
 import "./chunk-KFY3SGN7.js";
 import "./chunk-CMTINOFS.js";
 import "./chunk-BVKCV2ZY.js";
@@ -28,7 +28,7 @@ import "./chunk-NDAH7BJ5.js";
 import "./chunk-Z5LAYHGJ.js";
 import "./chunk-OO42R444.js";
 import "./chunk-K6MV3TRQ.js";
-import "./chunk-6YXRSHKG.js";
+import "./chunk-ANZLT74L.js";
 import "./chunk-VPAFWWCL.js";
 import "./chunk-QQW2LIEA.js";
 import "./chunk-SANZHXY2.js";
@@ -51,7 +51,7 @@ import "./chunk-3ONXXHQO.js";
 import "./chunk-KF74X62T.js";
 import "./chunk-2LSZVONP.js";
 import "./chunk-DEUNUKTD.js";
-import "./chunk-UZW4UWIK.js";
+import "./chunk-RIC5U67B.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
@@ -67,7 +67,7 @@ import "./chunk-RULE4VG5.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-FVQJYWH7.js";
-import "./chunk-4X3LO5OF.js";
+import "./chunk-FEB7W5JG.js";
 import "./chunk-G7D6GZ5J.js";
 import "./chunk-VF4XKTX3.js";
 import "./chunk-5J4OL7TJ.js";

package/dist/orchestration/maintenance.js

@@ -1,11 +1,11 @@
 import {
   MaintenanceScheduler
-} from "../chunk-WDLJCSZ4.js";
+} from "../chunk-MRX6S22R.js";
 import "../chunk-666A3MOW.js";
-import "../chunk-4LM6W5SX.js";
-import "../chunk-75KYTVFK.js";
+import "../chunk-M4DQWUKX.js";
+import "../chunk-2K64VH66.js";
 import "../chunk-ZFXCQPNO.js";
-import "../chunk-UZW4UWIK.js";
+import "../chunk-RIC5U67B.js";
 import "../chunk-M7XQSUBB.js";
 import "../chunk-5UZXUTVO.js";
 import "../chunk-5GPPACXK.js";
@@ -21,7 +21,7 @@ import "../chunk-RULE4VG5.js";
 import "../chunk-LDXUBPMO.js";
 import "../chunk-DM2T26WE.js";
 import "../chunk-FVQJYWH7.js";
-import "../chunk-4X3LO5OF.js";
+import "../chunk-FEB7W5JG.js";
 import "../chunk-G7D6GZ5J.js";
 import "../chunk-VF4XKTX3.js";
 import "../chunk-5J4OL7TJ.js";

package/dist/orchestrator.js

@@ -28,10 +28,10 @@ import {
   sanitizeSessionKeyForFilename,
   shouldFilterLifecycleRecallCandidate,
   summarizeGraphShadowComparison
-} from "./chunk-FLV6YAS3.js";
+} from "./chunk-JYVD2XZ4.js";
 import "./chunk-VKJHM6PL.js";
 import "./chunk-7HYPN2GC.js";
-import "./chunk-WDLJCSZ4.js";
+import "./chunk-MRX6S22R.js";
 import "./chunk-666A3MOW.js";
 import "./chunk-HHLLAQGZ.js";
 import "./chunk-X5J3JZR3.js";
@@ -43,7 +43,7 @@ import "./chunk-UWK5OXUJ.js";
 import "./chunk-O7GOFAM3.js";
 import "./chunk-MDJURR27.js";
 import "./chunk-7N4KAIGN.js";
-import "./chunk-AEPUGOPY.js";
+import "./chunk-PJIHCOGV.js";
 import "./chunk-UFS7OXGL.js";
 import "./chunk-TECVW3JP.js";
 import "./chunk-UHGBNIOS.js";
@@ -90,26 +90,26 @@ import "./chunk-TH7WMHVK.js";
 import "./chunk-OQH5XUH3.js";
 import "./chunk-6HEM6HTQ.js";
 import "./chunk-ZA2S2VLL.js";
-import "./chunk-N5UHWRGK.js";
+import "./chunk-COEZR6F5.js";
 import "./chunk-UU6MVCJ6.js";
 import "./chunk-PYPOFEMK.js";
 import "./chunk-EO5QWINU.js";
 import "./chunk-VEWZZM3H.js";
 import "./chunk-2PRQG7PV.js";
 import "./chunk-WIWPSQYU.js";
-import "./chunk-GPHHYOQC.js";
+import "./chunk-FSEQXHEZ.js";
 import "./chunk-2F6NP3NT.js";
 import "./chunk-TERNBNJB.js";
 import "./chunk-QRDOSYOR.js";
-import "./chunk-TFZKNDVY.js";
+import "./chunk-N55RJT4N.js";
 import "./chunk-ZRWB5D4H.js";
 import "./chunk-PONNZ54D.js";
 import "./chunk-S4DDLTPX.js";
 import "./chunk-SFQ6QNL7.js";
 import "./chunk-33JBK2XP.js";
-import "./chunk-BQEZPX6Z.js";
-import "./chunk-4LM6W5SX.js";
-import "./chunk-75KYTVFK.js";
+import "./chunk-SIDSEXUG.js";
+import "./chunk-M4DQWUKX.js";
+import "./chunk-2K64VH66.js";
 import "./chunk-KFY3SGN7.js";
 import "./chunk-TQNRI55H.js";
 import "./chunk-6GUG4YNM.js";
@@ -123,8 +123,8 @@ import "./chunk-LMDRGRJ2.js";
 import "./chunk-OD4FM2U7.js";
 import "./chunk-OKTXM5H4.js";
 import "./chunk-PBH4JUAB.js";
-import "./chunk-4FXCAY7J.js";
-import "./chunk-AYMVRRDP.js";
+import "./chunk-SJQ4HY3E.js";
+import "./chunk-2ULWWAQH.js";
 import "./chunk-UUH4YQOF.js";
 import "./chunk-JLNBQWZ2.js";
 import "./chunk-3UXOZBHV.js";
@@ -174,8 +174,8 @@ import "./chunk-KF74X62T.js";
 import "./chunk-2LSZVONP.js";
 import "./chunk-DEUNUKTD.js";
 import "./chunk-YN4ZT4CW.js";
-import "./chunk-WHJ4WTHH.js";
-import "./chunk-UZW4UWIK.js";
+import "./chunk-EZWQZYLK.js";
+import "./chunk-RIC5U67B.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
@@ -191,7 +191,7 @@ import "./chunk-RULE4VG5.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-FVQJYWH7.js";
-import "./chunk-4X3LO5OF.js";
+import "./chunk-FEB7W5JG.js";
 import "./chunk-G7D6GZ5J.js";
 import "./chunk-VF4XKTX3.js";
 import "./chunk-5J4OL7TJ.js";

package/dist/semantic-consolidation.js

@@ -7,14 +7,14 @@ import {
   materializeAfterSemanticConsolidation,
   parseConsolidationResponse,
   parseOperatorAwareConsolidationResponse
-} from "./chunk-4FXCAY7J.js";
-import "./chunk-AYMVRRDP.js";
+} from "./chunk-SJQ4HY3E.js";
+import "./chunk-2ULWWAQH.js";
 import "./chunk-UUH4YQOF.js";
 import {
   resolveExtensionsRoot
 } from "./chunk-JLNBQWZ2.js";
 import "./chunk-3UXOZBHV.js";
-import "./chunk-UZW4UWIK.js";
+import "./chunk-RIC5U67B.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
@@ -30,7 +30,7 @@ import "./chunk-RULE4VG5.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-FVQJYWH7.js";
-import "./chunk-4X3LO5OF.js";
+import "./chunk-FEB7W5JG.js";
 import {
   CONSOLIDATION_OPERATORS,
   isConsolidationOperator,

package/dist/semantic-rule-promotion.js

@@ -1,8 +1,8 @@
 import {
   promoteSemanticRuleFromMemory,
   setSemanticRulePromotionTestHooks
-} from "./chunk-62Q2QA4Z.js";
-import "./chunk-UZW4UWIK.js";
+} from "./chunk-2KJG6ZZK.js";
+import "./chunk-RIC5U67B.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
@@ -18,7 +18,7 @@ import "./chunk-RULE4VG5.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-FVQJYWH7.js";
-import "./chunk-4X3LO5OF.js";
+import "./chunk-FEB7W5JG.js";
 import "./chunk-G7D6GZ5J.js";
 import "./chunk-VF4XKTX3.js";
 import "./chunk-5J4OL7TJ.js";

package/dist/semantic-rule-verifier.js

@@ -1,8 +1,8 @@
 import {
   compareVerifiedSemanticRuleResults,
   searchVerifiedSemanticRules
-} from "./chunk-TFZKNDVY.js";
-import "./chunk-UZW4UWIK.js";
+} from "./chunk-N55RJT4N.js";
+import "./chunk-RIC5U67B.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
@@ -18,7 +18,7 @@ import "./chunk-RULE4VG5.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-FVQJYWH7.js";
-import "./chunk-4X3LO5OF.js";
+import "./chunk-FEB7W5JG.js";
 import "./chunk-G7D6GZ5J.js";
 import "./chunk-VF4XKTX3.js";
 import "./chunk-5J4OL7TJ.js";

package/dist/storage.js

@@ -8,7 +8,7 @@ import {
   normalizeEntityName,
   parseEntityFile,
   serializeEntityFile
-} from "./chunk-UZW4UWIK.js";
+} from "./chunk-RIC5U67B.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
@@ -26,7 +26,7 @@ import "./chunk-RULE4VG5.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-FVQJYWH7.js";
-import "./chunk-4X3LO5OF.js";
+import "./chunk-FEB7W5JG.js";
 import "./chunk-G7D6GZ5J.js";
 import "./chunk-VF4XKTX3.js";
 import "./chunk-5J4OL7TJ.js";

package/dist/verified-recall.js

@@ -1,9 +1,9 @@
 import {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
-} from "./chunk-GPHHYOQC.js";
+} from "./chunk-FSEQXHEZ.js";
 import "./chunk-7FL4CNPV.js";
-import "./chunk-UZW4UWIK.js";
+import "./chunk-RIC5U67B.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
@@ -19,7 +19,7 @@ import "./chunk-RULE4VG5.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-FVQJYWH7.js";
-import "./chunk-4X3LO5OF.js";
+import "./chunk-FEB7W5JG.js";
 import "./chunk-G7D6GZ5J.js";
 import "./chunk-VF4XKTX3.js";
 import "./chunk-5J4OL7TJ.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.3.697",
+  "version": "9.3.698",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -2941,7 +2941,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.3.697"
+    "@remnic/coding-graph": "^9.3.698"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/access-service.ts

@@ -4665,9 +4665,26 @@ export class EngramAccessService {
         // non-default namespaces route to memoryDir/namespaces/<token>, so
         // session-delta markers must read/write from the routed tree, mirroring
         // the decision/architecture siblings (cursor review).
+        // Issue #1630 fix 2: gate the marker write on the WRITE-path resolver
+        // — it mirrors memory_store's exact authorization (base ACL for coding
+        // overlays, selectedLayer.writable for scope-profiles), not the raw
+        // canWriteNamespace which misses overlay/profile grants (cursor+codex
+        // review). A throw = read-only caller; delta computed but no advance.
+        let canAdvanceState = false;
+        try {
+          await this.resolveCodingScopedWriteNamespace({
+            namespace: req.namespace,
+            sessionKey: req.sessionKey,
+            authenticatedPrincipal,
+          });
+          canAdvanceState = true;
+        } catch {
+          canAdvanceState = false;
+        }
         return {
           memoryDir: storage.dir,
           namespace: ns,
+          canAdvanceState,
         } satisfies DeltaSurfaceStorage;
       },
       gitInvoker: (cwd, args) => {

package/src/coding/session-delta-surfaces.test.ts

@@ -81,9 +81,10 @@ function makeContext(overrides: Partial<DeltaSurfaceContext> = {}): DeltaSurface
 // shimming its filesystem. The handler imports readLastSeenState / writeLastSeenState
 // from ./session-delta.js, which hit the real fs. We point memoryDir at a
 // temp dir per-test.
-import { mkdtemp, rm } from "node:fs/promises";
+import { mkdtemp, rm, readFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import path from "node:path";
+import { sessionDeltaStatePath } from "./session-delta.js";
 
 async function makeTempStorage(): Promise<{ storage: DeltaSurfaceStorage; cleanup: () => Promise<void> }> {
   const dir = await mkdtemp(path.join(tmpdir(), "delta-surface-"));
@@ -383,3 +384,186 @@ test("handler/get: state file is created after a successful first_run", async ()
     await cleanup();
   }
 });
+
+// ──────────────────────────────────────────────────────────────────────────
+// Issue #1630 fix 1 — uncapped totals surface in the changed response
+// ──────────────────────────────────────────────────────────────────────────
+
+test("handler/get: changed response surfaces uncapped totals alongside capped slices (issue #1630 fix 1)", async () => {
+  const { storage, cleanup } = await makeTempStorage();
+  try {
+    // Seed: first run on headA.
+    const invoker1 = makeInvoker([
+      { args: ["rev-parse", "HEAD"], stdout: "headA\n" },
+    ]);
+    await handleCodingDelta(
+      { subcommand: "get", sessionKey: "s1" },
+      makeContext({ resolveStorage: async () => storage, gitInvoker: invoker1 }),
+    );
+
+    // Now head moved to headB with 25 commits / 60 files — both exceed the
+    // caps (MAX_DELTA_COMMITS=20, MAX_DELTA_FILES=50).
+    const sep = "\x1f";
+    const commitBlocks = Array.from({ length: 25 }, (_, i) => [
+      `sha${i}${sep}fix ${i}`,
+      "",
+      `src/file${i}.ts`,
+      "",
+    ].join("\n"));
+    // Add 35 more distinct files so the total crosses the file cap.
+    const extraFiles = Array.from({ length: 35 }, (_, i) => `extra${i}.ts`);
+    const lastBlock = [
+      `shaExtra${sep}extra`,
+      "",
+      ...extraFiles,
+      "",
+    ].join("\n");
+    const log = [...commitBlocks, lastBlock].join("\n");
+    const invoker2 = makeInvoker([
+      { args: ["rev-parse", "HEAD"], stdout: "headB\n" },
+      { args: ["log", "--reverse", "--pretty=format:%H\x1f%s", "--name-only", "headA..headB"], stdout: log },
+    ]);
+    const result = await handleCodingDelta(
+      { subcommand: "get", sessionKey: "s1" },
+      makeContext({ resolveStorage: async () => storage, gitInvoker: invoker2 }),
+    );
+    if (!("ok" in result) || !result.ok || result.kind !== "changed") {
+      assert.fail(`expected changed, got ${JSON.stringify(result)}`);
+      return;
+    }
+    // Capped display slices.
+    assert.equal(result.delta.commits.length, 20, "commits slice must be capped to MAX_DELTA_COMMITS");
+    assert.equal(result.delta.touchedFiles.length, 50, "touchedFiles slice must be capped to MAX_DELTA_FILES");
+    // Uncapped totals — the TRUE delta size, NOT the capped length.
+    assert.equal(result.delta.totalCommits, 26, "totalCommits must report the uncapped commit count");
+    assert.ok(
+      result.delta.totalTouchedFiles > 50,
+      `totalTouchedFiles must report the uncapped file count (got ${result.delta.totalTouchedFiles})`,
+    );
+  } finally {
+    await cleanup();
+  }
+});
+
+// ──────────────────────────────────────────────────────────────────────────
+// Issue #1630 fix 2 — read-only callers do NOT advance the state marker
+// ──────────────────────────────────────────────────────────────────────────
+
+test("handler/get: read-only caller (canAdvanceState=false) does NOT advance the state marker (issue #1630 fix 2)", async () => {
+  const { storage, cleanup } = await makeTempStorage();
+  try {
+    // Seed headA with a WRITE-capable caller (default canAdvanceState=true).
+    const invoker1 = makeInvoker([
+      { args: ["rev-parse", "HEAD"], stdout: "headA\n" },
+    ]);
+    await handleCodingDelta(
+      { subcommand: "get", sessionKey: "s1" },
+      makeContext({
+        resolveStorage: async () => ({ ...storage, canAdvanceState: true }),
+        gitInvoker: invoker1,
+      }),
+    );
+    // Confirm the marker landed at headA.
+    const statePath = sessionDeltaStatePath(storage.memoryDir, storage.namespace);
+    const seeded = JSON.parse(await readFile(statePath, "utf8"));
+    assert.equal(seeded.head, "headA");
+
+    // A READ-ONLY caller (canAdvanceState=false) on headB. The delta is
+    // computed and returned, but the marker MUST NOT advance.
+    const sep = "\x1f";
+    const log = [
+      `shaRO${sep}read only commit`,
+      "",
+      "src/ro.ts",
+      "",
+    ].join("\n");
+    const invoker2 = makeInvoker([
+      { args: ["rev-parse", "HEAD"], stdout: "headB\n" },
+      { args: ["log", "--reverse", "--pretty=format:%H\x1f%s", "--name-only", "headA..headB"], stdout: log },
+    ]);
+    const result = await handleCodingDelta(
+      { subcommand: "get", sessionKey: "s1" },
+      makeContext({
+        resolveStorage: async () => ({ ...storage, canAdvanceState: false }),
+        gitInvoker: invoker2,
+      }),
+    );
+    // The delta is still computed and returned — read-only callers see the data.
+    if (!("ok" in result) || !result.ok || result.kind !== "changed") {
+      assert.fail(`expected changed, got ${JSON.stringify(result)}`);
+      return;
+    }
+    assert.equal(result.delta.commits.length, 1);
+    // But the persisted marker stayed at headA — read-only did not advance it.
+    const persisted = JSON.parse(await readFile(statePath, "utf8"));
+    assert.equal(persisted.head, "headA", "read-only caller must NOT advance the state marker");
+  } finally {
+    await cleanup();
+  }
+});
+
+test("handler/get: write-capable caller (canAdvanceState=true) DOES advance the state marker (issue #1630 fix 2)", async () => {
+  const { storage, cleanup } = await makeTempStorage();
+  try {
+    // Seed headA.
+    const invoker1 = makeInvoker([
+      { args: ["rev-parse", "HEAD"], stdout: "headA\n" },
+    ]);
+    await handleCodingDelta(
+      { subcommand: "get", sessionKey: "s1" },
+      makeContext({
+        resolveStorage: async () => ({ ...storage, canAdvanceState: true }),
+        gitInvoker: invoker1,
+      }),
+    );
+
+    // A WRITE-capable caller on headB — the marker MUST advance.
+    const sep = "\x1f";
+    const log = [
+      `shaW${sep}write commit`,
+      "",
+      "src/w.ts",
+      "",
+    ].join("\n");
+    const invoker2 = makeInvoker([
+      { args: ["rev-parse", "HEAD"], stdout: "headB\n" },
+      { args: ["log", "--reverse", "--pretty=format:%H\x1f%s", "--name-only", "headA..headB"], stdout: log },
+    ]);
+    await handleCodingDelta(
+      { subcommand: "get", sessionKey: "s1" },
+      makeContext({
+        resolveStorage: async () => ({ ...storage, canAdvanceState: true }),
+        gitInvoker: invoker2,
+      }),
+    );
+    const statePath = sessionDeltaStatePath(storage.memoryDir, storage.namespace);
+    const persisted = JSON.parse(await readFile(statePath, "utf8"));
+    assert.equal(persisted.head, "headB", "write-capable caller must advance the state marker");
+  } finally {
+    await cleanup();
+  }
+});
+
+test("handler/get: canAdvanceState defaults to true when omitted (back-compat) (issue #1630 fix 2)", async () => {
+  // Legacy callers that don't set canAdvanceState keep pre-fix behavior:
+  // the marker advances. This protects the existing surface contract.
+  const { storage, cleanup } = await makeTempStorage();
+  try {
+    const invoker = makeInvoker([
+      { args: ["rev-parse", "HEAD"], stdout: "headDefault\n" },
+    ]);
+    await handleCodingDelta(
+      { subcommand: "get", sessionKey: "s1" },
+      makeContext({
+        // canAdvanceState intentionally omitted.
+        resolveStorage: async () => storage,
+        gitInvoker: invoker,
+      }),
+    );
+    const statePath = sessionDeltaStatePath(storage.memoryDir, storage.namespace);
+    const persisted = JSON.parse(await readFile(statePath, "utf8"));
+    assert.equal(persisted.head, "headDefault", "omitted canAdvanceState defaults to true (back-compat)");
+  } finally {
+    await cleanup();
+  }
+});

package/src/coding/session-delta-surfaces.ts

@@ -117,6 +117,16 @@ export type DeltaSurfaceResponse =
       delta: {
         commits: ReadonlyArray<{ sha: string; subject: string }>;
         touchedFiles: readonly string[];
+        /**
+         * Uncapped total commit count (the {@link commits} slice is capped
+         * for transport). Issue #1630 fix 1.
+         */
+        totalCommits: number;
+        /**
+         * Uncapped total touched-file count (the {@link touchedFiles} slice
+         * is capped for transport). Issue #1630 fix 1.
+         */
+        totalTouchedFiles: number;
         summaryLine: string;
       };
       nextState: LastSeenState;
@@ -161,6 +171,15 @@ export interface DeltaSurfaceStorage {
   readonly memoryDir: string;
   /** The resolved coding-scoped namespace — basis for the state filename. */
   readonly namespace: string;
+  /**
+   * Whether the calling principal may WRITE the namespace — i.e. advance the
+   * last-seen-head marker. Read-only callers (e.g. a principal with read-but-
+   * not-write on the shared namespace) receive the computed delta but the
+   * state file is NOT advanced, so they cannot move another principal's
+   * baseline (issue #1630 fix 2). Defaults to `true` when omitted so existing
+   * callers (and the surface contract tests) keep their pre-fix behavior.
+   */
+  readonly canAdvanceState?: boolean;
 }
 
 /**
@@ -265,13 +284,21 @@ async function deltaGet(
   // 5. Persist the new state (rule 25 + rule 54). Failures here are logged
   //    but do NOT fail the operation — the delta was computed; the next
   //    session may re-derive it. A write failure surfaces in doctor/xray.
+  //
+  //    Issue #1630 fix 2: the marker write is gated on a write-capable
+  //    principal. A read-only caller (e.g. read-but-not-write on the shared
+  //    namespace) receives the computed delta but does NOT advance the state
+  //    marker, so it cannot move another principal's baseline. The default
+  //    is `true` so legacy callers and the surface contract tests keep their
+  //    pre-fix behavior.
+  const canAdvanceState = storage.canAdvanceState !== false;
   let nextState: LastSeenState | null = null;
   if (result.ok) {
     nextState = result.nextState;
   } else if (result.code === "unreachable_head") {
     nextState = result.nextState;
   }
-  if (nextState) {
+  if (nextState && canAdvanceState) {
     try {
       await writeLastSeenState(statePath, nextState);
     } catch (err) {
@@ -312,6 +339,8 @@ async function deltaGet(
         delta: {
           commits: result.delta.commits,
           touchedFiles: result.delta.touchedFiles,
+          totalCommits: result.delta.totalCommits,
+          totalTouchedFiles: result.delta.totalTouchedFiles,
           summaryLine: result.delta.summaryLine,
         },
         nextState: result.nextState,

package/src/coding/session-delta.test.ts

@@ -171,6 +171,52 @@ test("computeSessionDelta caps a large delta to MAX constants", () => {
   assert.equal(result.delta.touchedFiles.length, MAX_DELTA_FILES);
 });
 
+test("computeSessionDelta reports uncapped totals alongside capped slices (issue #1630 fix 1)", () => {
+  // A repo exceeding both caps: 100 commits / 200 files. The slices are
+  // capped for transport, but totalCommits/totalTouchedFiles must report
+  // the TRUE delta size so summaries never under-report.
+  const commitCount = 100;
+  const fileCount = 200;
+  const commits: GitCommit[] = Array.from({ length: commitCount }, (_, i) => ({
+    sha: `c${i}`,
+    subject: `s ${i}`,
+  }));
+  const files = Array.from({ length: fileCount }, (_, i) => `f${i}.ts`);
+  const result = computeSessionDelta(PRIOR, slice("head", commits, files));
+  if (!result.ok || result.kind !== "changed") {
+    assert.fail(`expected changed, got ${JSON.stringify(result)}`);
+    return;
+  }
+  // Capped display lists — transport-sized.
+  assert.equal(result.delta.commits.length, MAX_DELTA_COMMITS);
+  assert.equal(result.delta.touchedFiles.length, MAX_DELTA_FILES);
+  // Uncapped totals — the true delta size, NOT the capped slice length.
+  assert.equal(result.delta.totalCommits, commitCount);
+  assert.equal(result.delta.totalTouchedFiles, fileCount);
+  // The summary line must report the UNCAPPED totals, not the capped slice
+  // length — otherwise the briefing under-reports the delta size (codex review).
+  assert.match(result.delta.summaryLine, /100 commits, 200 files touched/);
+  assert.ok(!result.delta.summaryLine.match(/^.*20 commits, 50 files/), "summary must NOT use capped counts");
+});
+
+test("computeSessionDelta totals equal slice lengths when under the cap (issue #1630 fix 1)", () => {
+  // Below the caps, totals === slice lengths (no information lost).
+  const commits: GitCommit[] = [
+    { sha: "u1", subject: "under cap 1" },
+    { sha: "u2", subject: "under cap 2" },
+  ];
+  const files = ["a.ts", "b.ts", "c.ts"];
+  const result = computeSessionDelta(PRIOR, slice("head", commits, files));
+  if (!result.ok || result.kind !== "changed") {
+    assert.fail(`expected changed, got ${JSON.stringify(result)}`);
+    return;
+  }
+  assert.equal(result.delta.totalCommits, 2);
+  assert.equal(result.delta.totalTouchedFiles, 3);
+  assert.equal(result.delta.totalCommits, result.delta.commits.length);
+  assert.equal(result.delta.totalTouchedFiles, result.delta.touchedFiles.length);
+});
+
 // ──────────────────────────────────────────────────────────────────────────
 // State persistence — rule 25 (write after compute) + rule 54 (temp+rename)
 // ──────────────────────────────────────────────────────────────────────────