@remnic/core 9.3.700 → 9.3.702

package/dist/{access-service-Cte3ol0W.d.ts → access-service-COCzhgEL.d.ts}

@@ -1,12 +1,13 @@
+import { b as NamespaceRecord } from './catalog-DxCzhjE6.js';
+import { aL as ScopeProfileLayerId, aM as ScopeProfilePromotionTarget, aN as ScopeProfileConfig, P as PluginConfig, aG as CodingContext, a2 as DaySummaryResult, i as RecallPlanMode, j as RecallDisclosure, g as MemoryFile, m as MemoryLifecycleEvent, E as EntityFile, h as MemoryStatus, aO as DreamsStatusResult, aP as DreamsPhase, aQ as DreamsRunResult } from './types-MWKPZnM0.js';
 import { StorageManager } from './storage.js';
 import { a as Peer, b as PeerProfile } from './types-B1VHaf2w.js';
 import { RecallExplainJsonPayload } from './recall-explain-renderer.js';
-import { P as PluginConfig, aw as ScopeProfileLayerId, ax as ScopeProfilePromotionTarget, a2 as DaySummaryResult, i as RecallPlanMode, j as RecallDisclosure, g as MemoryFile, m as MemoryLifecycleEvent, E as EntityFile, h as MemoryStatus, ay as DreamsStatusResult, az as DreamsPhase, aA as DreamsRunResult } from './types-PuiPZ9iE.js';
 import { AnomalyDetectorResult } from './recall-audit-anomaly.js';
 import { ExplicitCaptureInput } from './explicit-capture.js';
 import { BudgetDecision } from './cross-namespace-budget.js';
 import { readMemoryGovernanceRunArtifact } from './maintenance/memory-governance.js';
-import { O as Orchestrator, I as IntentDebugSnapshot, G as GraphRecallSnapshot, P as PatternReinforcementResult, W as WearablesService } from './orchestrator-CJI4xdqV.js';
+import { O as Orchestrator, I as IntentDebugSnapshot, G as GraphRecallSnapshot, P as PatternReinforcementResult, W as WearablesService } from './orchestrator-C9CDWAm6.js';
 import { LiveConnectorsRunSummary } from './live-connectors-runner.js';
 import { LastRecallSnapshot } from './recall-state.js';
 import { GraphSnapshotRequest, GraphSnapshotResponse } from './graph-snapshot.js';
@@ -15,7 +16,7 @@ import { RecallXraySnapshot } from './recall-xray.js';
 import { L as LcmMessagePartInput, M as MessagePartSourceFormat } from './index-DJ9QWMw-.js';
 import { LocalLlmClient } from './local-llm.js';
 import { FallbackLlmClient } from './fallback-llm.js';
-import { S as SemanticDedupLookup } from './semantic-DJR8_DMQ.js';
+import { a as SemanticDedupLookup } from './semantic-SLAa_prH.js';
 import { MemoryOutcomeKind, RecordMemoryOutcomeResult } from './memory-worth-outcomes.js';
 import { ImportCapsuleOptions, ImportCapsuleResult } from './transfer/capsule-import.js';
 import { ExportCapsuleOptions, ExportCapsuleResult } from './transfer/capsule-export.js';
@@ -23,6 +24,355 @@ import { CapsuleListEntry } from './capsule-cli.js';
 import { OfflineSyncFileState, OfflineSyncSnapshot, OfflineSyncFileRecord, OfflineSyncFileContentChunk, OfflineSyncApplyFileContentChunkResult, OfflineSyncApplyChangesetResult } from './offline-sync.js';
 import { ActionConfidenceInput, ActionConfidenceResult } from './action-confidence.js';
 
+interface ScopeProfileLayerResolution {
+    id: ScopeProfileLayerId;
+    kind: "user-project" | "team-project" | "user-global" | "server-shared";
+    namespace?: string;
+    readable: boolean;
+    writable: boolean;
+    promotable: boolean;
+    reason: string;
+}
+interface ScopeProfilePromotionResolution {
+    target: ScopeProfilePromotionTarget;
+    namespace?: string;
+    authorized: boolean;
+    reason: string;
+}
+interface ResolvedScopeProfilePlan {
+    profileId: string;
+    profile: ScopeProfileConfig;
+    baseNamespace: string;
+    writeLayer: ScopeProfileLayerId;
+    writeNamespace: string;
+    readNamespaces: string[];
+    layers: ScopeProfileLayerResolution[];
+    promotionTargets: ScopeProfilePromotionResolution[];
+    warnings: string[];
+}
+
+/**
+ * ScopePlan resolver (issue #1521).
+ *
+ * A single pure function that resolves every namespace-bearing read/write path
+ * to one {@link ScopePlan} value object. Consumers (recall tiers, QMD router,
+ * LCM reads, maintenance) never call the ad-hoc resolution helpers directly —
+ * they receive a resolved plan and read its fields.
+ *
+ * The resolver DELEGATES to the existing helpers (`resolvePrincipal`,
+ * `recallNamespacesForPrincipal`, `resolveCodingNamespaceOverlay`,
+ * `resolveScopeProfilePlan`, `expandScopeProfileReadNamespaces`,
+ * `combineNamespaces`, `lcmReadSessionIdsForNamespaces`) — no logic rewrite.
+ * The ad-hoc inline resolution that previously lived in the orchestrator's
+ * `recallInternal` and `enqueueDirectAnswerObservation` paths is replaced by a
+ * single call to {@link resolveScopePlan}, eliminating the duplicated
+ * namespace-set construction that produced the largest share of #1519's review
+ * threads (scope-profile recall paths missing `readFallbacks` appends).
+ *
+ * Migration tranches (issue #1521 step 4):
+ *  - recall tiers (this PR): the two orchestrator recall entry points consume
+ *    the plan instead of building `recallNamespaces`/`observationNamespaces`
+ *    inline;
+ *  - QMD router calls, LCM reads, maintenance: follow-up PRs.
+ *
+ * CLAUDE.md rules honoured (pitfalls from the issue):
+ *  - rule 42: read/write resolve through the same layer; the coding overlay is
+ *    COMBINED with the principal base via `combineNamespaces`;
+ *  - rule 39: feature gates identical across every path the plan feeds;
+ *  - rule 22/48: LCM keys derived through `lcmSessionKeyForNamespace` (via
+ *    `lcmReadSessionIdsForNamespaces`), never hardcoded `:`-joins; unscoped LCM
+ *    search stays suppressed when `namespacesEnabled`.
+ */
+
+/**
+ * A resolved scope plan: every namespace-bearing field a read or write path
+ * needs, produced by ONE call to {@link resolveScopePlan}.
+ *
+ * Consumers read these fields directly — they never re-resolve namespaces.
+ */
+interface ScopePlan {
+    /**
+     * Resolved principal under which the operation runs. `undefined` only when
+     * `namespacesEnabled` is false (collapses to `"default"`) or no session key
+     * was supplied in single-user mode.
+     */
+    readonly principal: string | undefined;
+    /**
+     * Explicit namespace override, trimmed, when the caller supplied one AND it
+     * is readable by the principal. `undefined` when no override was given or the
+     * override is not readable (the plan falls through to the coding/scope-profile
+     * resolution in that case, mirroring the pre-existing observe-path behavior).
+     */
+    readonly namespaceOverride: string | undefined;
+    /**
+     * Resolved base (self) namespace — the effective namespace absent an explicit
+     * override. This is the principal-self namespace, optionally substituted by a
+     * scope-profile write layer or a coding overlay.
+     *
+     * Callers that persisted this as the `selfNamespace` / response namespace
+     * read it here.
+     */
+    readonly baseNamespace: string;
+    /**
+     * Ordered, deduped read-namespace set. Includes the coding overlay fallbacks
+     * (branch → project → root) combined with the principal base exactly once, so
+     * the #1519 miss (scope-profile path omitted `readFallbacks` appends) cannot
+     * recur — the fallback appends live in ONE place.
+     */
+    readonly readNamespaces: string[];
+    /**
+     * Coding overlay fallback namespaces combined with the principal base (rule
+     * 42). Empty when no coding overlay applies. These are the SAME entries
+     * appended into {@link readNamespaces} for the coding-overlay branch,
+     * surfaced separately so consumers that need just the fallback set (e.g.
+     * LCM read-key derivation) can read them without re-deriving.
+     */
+    readonly readFallbacks: string[];
+    /**
+     * LCM read namespace set. May differ from {@link readNamespaces} for
+     * read-authorization reasons: when the principal self base is NOT in the
+     * readable recall set, the overlay LCM keys collapse to the default store
+     * (rule 42 read/write parity; rule 48 least-privilege) even though
+     * {@link readNamespaces} still searches the overlay for QMD/file recall.
+     */
+    readonly lcmReadNamespaces: string[];
+    /**
+     * LCM read `session_id` set, encoded via
+     * `lcmReadSessionIdsForNamespaces` (which delegates to
+     * `lcmSessionKeyForNamespace`). Ordered and deduped; the primary overlay key
+     * is first. Single-user / no-overlay recall collapses to `[sessionKey]` —
+     * byte-for-byte the pre-#1495 behavior.
+     *
+     * Empty (`[]`) when a scope-profile plan is active and no `sessionKey` was
+     * supplied (mirrors the pre-existing guard).
+     */
+    readonly lcmReadSessionIds: ReadonlyArray<string | undefined>;
+    /**
+     * Resolved coding overlay, or `null` when none applies (no coding context,
+     * `codingMode.projectScope` false, `namespacesEnabled` false, or an explicit
+     * readable namespace override is set).
+     */
+    readonly codingOverlay: {
+        readonly namespace: string;
+        readonly readFallbacks: readonly string[];
+    } | null;
+    /**
+     * Resolved scope-profile plan, or `null` when no scope profile is active.
+     * Consumers that branched on "profile vs. non-profile" read this directly.
+     */
+    readonly scopeProfilePlan: ResolvedScopeProfilePlan | null;
+}
+
+/**
+ * One layer's contribution to the effective scope, with a human-readable
+ * reason it was included or skipped. Mirrors the layer set surfaced by the
+ * scope-profile plan plus the coding overlay and explicit override.
+ */
+interface ScopeInspectionLayer {
+    /** Layer id — `userProject` / `teamProject` / `userGlobal` / `serverShared` / `coding` / `explicit` / `self`. */
+    id: string;
+    /** Resolved namespace for the layer, when applicable. */
+    namespace?: string;
+    /** Whether the layer is in the active read set. */
+    readable: boolean;
+    /** Whether the layer is the effective write target. */
+    writable: boolean;
+    /** Whether the layer is an authorized promotion target. */
+    promotable: boolean;
+    /** Human-readable explanation — used verbatim by the console "why" column. */
+    reason: string;
+}
+/** Promotion target resolved against policy + scope profile. */
+interface ScopeInspectionPromotionTarget {
+    target: string;
+    namespace?: string;
+    authorized: boolean;
+    reason: string;
+}
+/** Output of {@link inspectScope}. */
+interface ScopeInspection {
+    /** Resolved principal (or `undefined` in single-user mode). */
+    principal: string | undefined;
+    /** Explicit namespace override, when readable. */
+    namespaceOverride: string | undefined;
+    /** Effective write namespace. */
+    writeNamespace: string;
+    /** Read namespaces in the order recall searches them. */
+    readNamespaces: string[];
+    /** Coding overlay details (branch → project → root fallbacks). */
+    codingOverlay: {
+        namespace: string;
+        readFallbacks: readonly string[];
+    } | null;
+    /** Active scope profile id, if any. */
+    scopeProfileId: string | null;
+    /** Per-layer explanations. */
+    layers: ScopeInspectionLayer[];
+    /** Promotion targets available for this session/principal. */
+    promotionTargets: ScopeInspectionPromotionTarget[];
+    /** Operator warnings (missing project, disabled scope, auth failures, …). */
+    warnings: string[];
+    /**
+     * Frozen copy of the {@link ScopePlan} the runtime resolver produced. The
+     * dashboard MUST display this verbatim — never a re-derived copy — so the
+     * "scope inspector returns the same plan as runtime resolver" acceptance
+     * test (issue #1502) holds by construction.
+     */
+    plan: ScopePlan;
+}
+/** Operation type the caller intends to inspect (informational only). */
+type ScopeInspectionOperation = "recall" | "observe" | "memory_store" | "maintenance" | "dashboard";
+/** Inputs for {@link inspectScope}. */
+interface InspectScopeOptions {
+    readonly config: PluginConfig;
+    readonly sessionKey?: string;
+    readonly namespace?: string;
+    readonly principalOverride?: string;
+    readonly codingContext?: CodingContext | null;
+    readonly operation?: ScopeInspectionOperation;
+    /**
+     * Whether namespace routing is enabled. Callers that already resolved the
+     * flag (e.g. the access-service layer, threading it through the shared
+     * scope-plan chokepoint) pass it here so this pure helper does not need to
+     * re-read the namespace gate. Defaults to reading the config flag when
+     * omitted so direct callers (tests, CLI) keep working.
+     */
+    readonly namespacesEnabled?: boolean;
+}
+/** Filters the namespace browser accepts (superset of {@link NamespaceCatalogFilter}). */
+interface AdminNamespaceFilter {
+    kind?: NamespaceRecord["kind"];
+    principal?: string;
+    projectId?: string;
+    discoveredBy?: NamespaceRecord["discoveredBy"];
+    /** Only namespaces with a write at/after this instant. */
+    writtenSince?: Date;
+    /** Only namespaces whose last write is older than this instant (stale). */
+    staleBefore?: Date;
+}
+/** One namespace row augmented with the operator-facing diagnostics the issue lists. */
+interface AdminNamespaceEntry {
+    namespace: string;
+    identityToken: string;
+    kind: NamespaceRecord["kind"];
+    principal?: string;
+    projectId?: string;
+    branch?: string;
+    parentNamespace?: string;
+    createdAt: string;
+    lastReadAt?: string;
+    lastWriteAt?: string;
+    lastMaintenanceAt?: Record<string, string>;
+    storageDir: string;
+    discoveredBy: NamespaceRecord["discoveredBy"];
+    /** True when last write is older than `staleThresholdDays` (or never written). */
+    stale: boolean;
+}
+/** Output of {@link listAdminNamespaces}. */
+interface AdminNamespaceList {
+    /** Whether the namespace catalog is enabled. `false` collapses the list. */
+    enabled: boolean;
+    entries: AdminNamespaceEntry[];
+}
+/** QMD/search health snapshot for one namespace (delegated to NamespaceSearchRouter). */
+interface AdminNamespaceQmdHealth {
+    namespace: string;
+    collection: string;
+    available: boolean;
+    collectionState: string;
+    debugStatus: string;
+    installedVersion: string | null;
+    supportedVersion: string | null;
+    supported: boolean | null;
+    upgradeAvailable: boolean | null;
+    daemonMode: boolean | null;
+}
+/** Maintenance + QMD health for one namespace. */
+interface AdminNamespaceHealth {
+    namespace: string;
+    kind?: NamespaceRecord["kind"];
+    lastMaintenanceAt?: Record<string, string>;
+    /** True when no maintenance has ever been recorded. */
+    maintenanceMissing: boolean;
+    /** True when QMD is unavailable OR its collection is missing for this namespace. */
+    qmdDegraded: boolean;
+    qmd?: AdminNamespaceQmdHealth;
+    /** Reason the QMD probe failed, when it did. */
+    qmdError?: string;
+}
+/** Output of {@link gatherMaintenanceHealth}. */
+interface MaintenanceHealthReport {
+    /** Whether the catalog is enabled. */
+    enabled: boolean;
+    /** Aggregate degraded-mode flag — true when ANY namespace is QMD-degraded. */
+    degradedMode: boolean;
+    perNamespace: AdminNamespaceHealth[];
+}
+/** One file the dry-run migration planner would re-home. */
+interface TranscriptAuditFile {
+    sourceRelPath: string;
+    fileName: string;
+    distinctSessions: number;
+    movedEntries: number;
+    unmovableLines: number;
+}
+/** Output of {@link auditTranscripts}. */
+interface TranscriptAuditReport {
+    /** Generated timestamp (ISO). */
+    generatedAt: string;
+    /** Always true — the admin surface is dry-run only. */
+    dryRun: true;
+    /** Absolute transcripts directory scanned. */
+    transcriptsDir: string;
+    /** True when any legacy fallback file (e.g. `other/default`) holds mixed sessions. */
+    mixedOtherDefault: boolean;
+    /** Distinct sessions the planner would re-home. */
+    distinctSessions: number;
+    /** Total JSONL entries that would move. */
+    movedEntries: number;
+    /** Per-file plans with at least one entry to move. */
+    files: TranscriptAuditFile[];
+    /** Operator-facing summary of the risk. */
+    summary: string;
+}
+/** Promotion target kind the console can request. */
+type MemoryPromotionTargetKind = "teamProject" | "serverShared" | "userProject" | "userGlobal" | "explicit";
+/** Result of one promotion attempt. */
+interface MemoryPromotionTargetResult {
+    target: MemoryPromotionTargetKind;
+    namespace: string;
+    authorized: boolean;
+    promoted: boolean;
+    promotedMemoryId?: string;
+    reason: string;
+}
+/** Output of {@link promoteMemory}. */
+interface MemoryPromotionResult {
+    /** Whether the caller-supplied reason was accepted. */
+    ok: boolean;
+    /** Source memory id. */
+    sourceMemoryId: string;
+    /** Source namespace the memory was read from. */
+    sourceNamespace: string;
+    /** Per-target outcomes. Empty when authorization fails up front. */
+    targets: MemoryPromotionTargetResult[];
+    /** Audit record — caller appends to the access audit log. */
+    audit: MemoryPromotionAudit;
+}
+/** Audit trail for a promotion operation. */
+interface MemoryPromotionAudit {
+    at: string;
+    actor: string;
+    sourceMemoryId: string;
+    sourceNamespace: string;
+    reason: string;
+    targets: Array<{
+        target: MemoryPromotionTargetKind;
+        namespace: string;
+        promoted: boolean;
+    }>;
+}
+
 interface ConsoleBufferState {
     /** Number of turns currently held in the default buffer slot. */
     turnsCount: number;
@@ -458,22 +808,6 @@ declare function computeProcedureStats(options: {
  */
 declare function formatProcedureStatsText(report: ProcedureStatsReport): string;
 
-interface ScopeProfileLayerResolution {
-    id: ScopeProfileLayerId;
-    kind: "user-project" | "team-project" | "user-global" | "server-shared";
-    namespace?: string;
-    readable: boolean;
-    writable: boolean;
-    promotable: boolean;
-    reason: string;
-}
-interface ScopeProfilePromotionResolution {
-    target: ScopeProfilePromotionTarget;
-    namespace?: string;
-    authorized: boolean;
-    reason: string;
-}
-
 declare class EngramAccessInputError extends Error {
 }
 type AccessProfilingReportRequest = {
@@ -2221,6 +2555,50 @@ declare class EngramAccessService {
         date?: string;
         limit?: number;
     }): Promise<Awaited<ReturnType<WearablesService["transcriptMemories"]>>>;
+    /**
+     * Resolve an effective scope inspection for the console. Inputs are
+     * redacted before return so an operator-supplied principal preview /
+     * namespace override never echoes a pasted credential back.
+     */
+    adminInspectScope(options: {
+        sessionKey?: string;
+        namespace?: string;
+        principalOverride?: string;
+        operation?: InspectScopeOptions["operation"];
+    }): Promise<ScopeInspection>;
+    /**
+     * List configured + discovered namespaces from the catalog with the
+     * admin filters the console exposes.
+     */
+    adminListNamespaces(filter?: AdminNamespaceFilter): Promise<AdminNamespaceList>;
+    /**
+     * Per-namespace maintenance + QMD health. QMD diagnostics are probed via
+     * the orchestrator's search health accessor (one probe per namespace).
+     */
+    adminMaintenanceHealth(): Promise<MaintenanceHealthReport>;
+    /**
+     * Dry-run transcript/session audit. Detects mixed `other/default` data
+     * and legacy stranded directories. Never applies a migration.
+     */
+    adminTranscriptAudit(): Promise<TranscriptAuditReport>;
+    /**
+     * Manually promote a memory into one or more authorized targets. Requires
+     * a non-empty reason (audit-logged). Reuses the scope-profile promotion
+     * resolution and `canWriteNamespace` gate — there is no dashboard-only
+     * write path.
+     */
+    adminPromoteMemory(request: {
+        sourceMemoryId: string;
+        namespace?: string;
+        principal?: string;
+        sessionKey?: string;
+        targets: ReadonlyArray<{
+            kind: MemoryPromotionTargetKind;
+            namespace?: string;
+        }>;
+        reason: string;
+        actor?: never;
+    }): Promise<MemoryPromotionResult>;
 }
 
 export { type EngramAccessOfflineSyncFilesRequest as $, type ArchitectureSurfaceRequest as A, type EngramAccessLcmCompactionFlushRequest as B, type CodegraphSurfaceRequest as C, type DecisionSurfaceRequest as D, type EngramAccessMemoryResponse as E, type EngramAccessLcmCompactionFlushResponse as F, type EngramAccessLcmCompactionRecordRequest as G, type EngramAccessLcmCompactionRecordResponse as H, type EngramAccessLcmSearchRequest as I, type EngramAccessLcmSearchResponse as J, type EngramAccessLcmStatusResponse as K, type EngramAccessMaintenanceResponse as L, type EngramAccessMemoryBrowseRequest as M, type EngramAccessMemoryBrowseResponse as N, type EngramAccessMemoryRecord as O, type ProcedureStatsConfigSnapshot as P, type EngramAccessMemoryStoreRequest as Q, type EngramAccessMemorySummary as R, type EngramAccessObserveMessage as S, type EngramAccessObserveRequest as T, type EngramAccessObserveResponse as U, type EngramAccessOfflineSyncApplyFileContentRequest as V, type EngramAccessOfflineSyncApplyFileContentResponse as W, type EngramAccessOfflineSyncApplyRequest as X, type EngramAccessOfflineSyncApplyResponse as Y, type EngramAccessOfflineSyncFileContentRequest as Z, type EngramAccessOfflineSyncFileContentResponse as _, type ArchitectureSurfaceResponse as a, type EngramAccessOfflineSyncFilesResponse as a0, type EngramAccessOfflineSyncSnapshotRequest as a1, type EngramAccessOfflineSyncSnapshotResponse as a2, type EngramAccessOfflineSyncSnapshotStreamResponse as a3, type EngramAccessQmdCollectionState as a4, type EngramAccessQmdHealthResponse as a5, type EngramAccessQualityResponse as a6, type EngramAccessRecallExplainRequest as a7, type EngramAccessRecallExplainResponse as a8, type EngramAccessRecallRequest as a9, type EngramAccessReviewDispositionRequest as aa, type EngramAccessReviewDispositionResponse as ab, type EngramAccessReviewQueueResponse as ac, type EngramAccessScopeDebug as ad, type EngramAccessSetCodingContextRequest as ae, type EngramAccessSuggestionSubmitRequest as af, type EngramAccessTimelineResponse as ag, type EngramAccessTrustZoneBrowseRequest as ah, type EngramAccessTrustZoneBrowseResponse as ai, type EngramAccessTrustZoneDemoSeedRequest as aj, type EngramAccessTrustZoneDemoSeedResponse as ak, type EngramAccessTrustZonePromoteRequest as al, type EngramAccessTrustZonePromoteResponse as am, type EngramAccessTrustZoneRecordSummary as an, type EngramAccessTrustZoneStatusResponse as ao, type EngramAccessWriteEnvelope as ap, type MemoryScopePlan as aq, shapeMemorySummary as ar, type DecisionSurfaceResponse as b, type DeltaSurfaceRequest as c, type DeltaSurfaceResponse as d, type EngramAccessWriteResponse as e, type CodegraphSurfaceResponse as f, EngramAccessService as g, type EngramAccessRecallResponse as h, EngramAccessInputError as i, type ProcedureStatsRecent as j, type ProcedureStatsReport as k, type ProcedureStatusCounts as l, computeProcedureStats as m, formatProcedureStatsText as n, type CodingScopedWriteInput as o, ENGRAM_ACCESS_WRITE_SCHEMA_VERSION as p, type EngramAccessActionConfidenceRequest as q, type EngramAccessActionConfidenceResponse as r, type EngramAccessBriefingRequest as s, type EngramAccessBriefingResponse as t, type EngramAccessCapsuleListResponse as u, type EngramAccessDaySummaryRequest as v, type EngramAccessEntityListResponse as w, type EngramAccessEntityResponse as x, type EngramAccessEntitySummary as y, type EngramAccessHealthResponse as z };

package/dist/access-service.d.ts

@@ -1,13 +1,13 @@
+export { o as CodingScopedWriteInput, p as ENGRAM_ACCESS_WRITE_SCHEMA_VERSION, q as EngramAccessActionConfidenceRequest, r as EngramAccessActionConfidenceResponse, s as EngramAccessBriefingRequest, t as EngramAccessBriefingResponse, u as EngramAccessCapsuleListResponse, v as EngramAccessDaySummaryRequest, w as EngramAccessEntityListResponse, x as EngramAccessEntityResponse, y as EngramAccessEntitySummary, z as EngramAccessHealthResponse, i as EngramAccessInputError, B as EngramAccessLcmCompactionFlushRequest, F as EngramAccessLcmCompactionFlushResponse, G as EngramAccessLcmCompactionRecordRequest, H as EngramAccessLcmCompactionRecordResponse, I as EngramAccessLcmSearchRequest, J as EngramAccessLcmSearchResponse, K as EngramAccessLcmStatusResponse, L as EngramAccessMaintenanceResponse, M as EngramAccessMemoryBrowseRequest, N as EngramAccessMemoryBrowseResponse, O as EngramAccessMemoryRecord, E as EngramAccessMemoryResponse, Q as EngramAccessMemoryStoreRequest, R as EngramAccessMemorySummary, S as EngramAccessObserveMessage, T as EngramAccessObserveRequest, U as EngramAccessObserveResponse, V as EngramAccessOfflineSyncApplyFileContentRequest, W as EngramAccessOfflineSyncApplyFileContentResponse, X as EngramAccessOfflineSyncApplyRequest, Y as EngramAccessOfflineSyncApplyResponse, Z as EngramAccessOfflineSyncFileContentRequest, _ as EngramAccessOfflineSyncFileContentResponse, $ as EngramAccessOfflineSyncFilesRequest, a0 as EngramAccessOfflineSyncFilesResponse, a1 as EngramAccessOfflineSyncSnapshotRequest, a2 as EngramAccessOfflineSyncSnapshotResponse, a3 as EngramAccessOfflineSyncSnapshotStreamResponse, a4 as EngramAccessQmdCollectionState, a5 as EngramAccessQmdHealthResponse, a6 as EngramAccessQualityResponse, a7 as EngramAccessRecallExplainRequest, a8 as EngramAccessRecallExplainResponse, a9 as EngramAccessRecallRequest, h as EngramAccessRecallResponse, aa as EngramAccessReviewDispositionRequest, ab as EngramAccessReviewDispositionResponse, ac as EngramAccessReviewQueueResponse, ad as EngramAccessScopeDebug, g as EngramAccessService, ae as EngramAccessSetCodingContextRequest, af as EngramAccessSuggestionSubmitRequest, ag as EngramAccessTimelineResponse, ah as EngramAccessTrustZoneBrowseRequest, ai as EngramAccessTrustZoneBrowseResponse, aj as EngramAccessTrustZoneDemoSeedRequest, ak as EngramAccessTrustZoneDemoSeedResponse, al as EngramAccessTrustZonePromoteRequest, am as EngramAccessTrustZonePromoteResponse, an as EngramAccessTrustZoneRecordSummary, ao as EngramAccessTrustZoneStatusResponse, ap as EngramAccessWriteEnvelope, e as EngramAccessWriteResponse, aq as MemoryScopePlan, ar as shapeMemorySummary } from './access-service-COCzhgEL.js';
 import './storage.js';
 import './types-B1VHaf2w.js';
-export { o as CodingScopedWriteInput, p as ENGRAM_ACCESS_WRITE_SCHEMA_VERSION, q as EngramAccessActionConfidenceRequest, r as EngramAccessActionConfidenceResponse, s as EngramAccessBriefingRequest, t as EngramAccessBriefingResponse, u as EngramAccessCapsuleListResponse, v as EngramAccessDaySummaryRequest, w as EngramAccessEntityListResponse, x as EngramAccessEntityResponse, y as EngramAccessEntitySummary, z as EngramAccessHealthResponse, i as EngramAccessInputError, B as EngramAccessLcmCompactionFlushRequest, F as EngramAccessLcmCompactionFlushResponse, G as EngramAccessLcmCompactionRecordRequest, H as EngramAccessLcmCompactionRecordResponse, I as EngramAccessLcmSearchRequest, J as EngramAccessLcmSearchResponse, K as EngramAccessLcmStatusResponse, L as EngramAccessMaintenanceResponse, M as EngramAccessMemoryBrowseRequest, N as EngramAccessMemoryBrowseResponse, O as EngramAccessMemoryRecord, E as EngramAccessMemoryResponse, Q as EngramAccessMemoryStoreRequest, R as EngramAccessMemorySummary, S as EngramAccessObserveMessage, T as EngramAccessObserveRequest, U as EngramAccessObserveResponse, V as EngramAccessOfflineSyncApplyFileContentRequest, W as EngramAccessOfflineSyncApplyFileContentResponse, X as EngramAccessOfflineSyncApplyRequest, Y as EngramAccessOfflineSyncApplyResponse, Z as EngramAccessOfflineSyncFileContentRequest, _ as EngramAccessOfflineSyncFileContentResponse, $ as EngramAccessOfflineSyncFilesRequest, a0 as EngramAccessOfflineSyncFilesResponse, a1 as EngramAccessOfflineSyncSnapshotRequest, a2 as EngramAccessOfflineSyncSnapshotResponse, a3 as EngramAccessOfflineSyncSnapshotStreamResponse, a4 as EngramAccessQmdCollectionState, a5 as EngramAccessQmdHealthResponse, a6 as EngramAccessQualityResponse, a7 as EngramAccessRecallExplainRequest, a8 as EngramAccessRecallExplainResponse, a9 as EngramAccessRecallRequest, h as EngramAccessRecallResponse, aa as EngramAccessReviewDispositionRequest, ab as EngramAccessReviewDispositionResponse, ac as EngramAccessReviewQueueResponse, ad as EngramAccessScopeDebug, g as EngramAccessService, ae as EngramAccessSetCodingContextRequest, af as EngramAccessSuggestionSubmitRequest, ag as EngramAccessTimelineResponse, ah as EngramAccessTrustZoneBrowseRequest, ai as EngramAccessTrustZoneBrowseResponse, aj as EngramAccessTrustZoneDemoSeedRequest, ak as EngramAccessTrustZoneDemoSeedResponse, al as EngramAccessTrustZonePromoteRequest, am as EngramAccessTrustZonePromoteResponse, an as EngramAccessTrustZoneRecordSummary, ao as EngramAccessTrustZoneStatusResponse, ap as EngramAccessWriteEnvelope, e as EngramAccessWriteResponse, aq as MemoryScopePlan, ar as shapeMemorySummary } from './access-service-Cte3ol0W.js';
 import './recall-explain-renderer.js';
-import './types-PuiPZ9iE.js';
+import './types-MWKPZnM0.js';
 import './recall-audit-anomaly.js';
 import './explicit-capture.js';
 import './cross-namespace-budget.js';
 import './maintenance/memory-governance.js';
-import './orchestrator-CJI4xdqV.js';
+import './orchestrator-C9CDWAm6.js';
 import './live-connectors-runner.js';
 import './recall-state.js';
 import './graph-snapshot.js';
@@ -16,13 +16,14 @@ import './recall-xray.js';
 import './index-DJ9QWMw-.js';
 import './local-llm.js';
 import './fallback-llm.js';
-import './semantic-DJR8_DMQ.js';
+import './semantic-SLAa_prH.js';
 import './memory-worth-outcomes.js';
 import './transfer/capsule-import.js';
 import './transfer/capsule-export.js';
 import './capsule-cli.js';
 import './offline-sync.js';
 import './action-confidence.js';
+import './catalog-DxCzhjE6.js';
 import './page-versioning.js';
 import './consolidation-operator.js';
 import './memory-projection-store.js';
@@ -44,7 +45,6 @@ import './session-integrity.js';
 import './summarizer.js';
 import './orchestration/maintenance.js';
 import './namespaces/search.js';
-import './catalog-DN1PzThs.js';
 import './framework-CNDn2164.js';
 import './relevance.js';
 import './negative.js';
@@ -58,7 +58,7 @@ import './lcm/archive.js';
 import './lcm/summarizer.js';
 import './lcm/dag.js';
 import './lcm/queue.js';
-import './semantic-consolidation-BtUfv-AL.js';
+import './semantic-consolidation-DgFXyALl.js';
 import './connectors/codex-materialize.js';
 import './logger.js';
 import './conversation-index/backend.js';

package/dist/access-service.js

@@ -3,25 +3,27 @@ import {
   EngramAccessInputError,
   EngramAccessService,
   shapeMemorySummary
-} from "./chunk-3E5WRQNQ.js";
+} from "./chunk-OXEAMU42.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import "./chunk-DL6H3D7S.js";
 import "./chunk-VQ7B2Q6M.js";
 import "./chunk-ERA5RSMZ.js";
-import "./chunk-D75JXBV4.js";
+import "./chunk-IQ7WCZRW.js";
+import "./chunk-WN4GHSDH.js";
 import "./chunk-SOBJ6NEY.js";
 import "./chunk-BT7NVCML.js";
 import "./chunk-H7XKCNR6.js";
-import "./chunk-HRUULBBV.js";
+import "./chunk-SHRRWOVY.js";
 import "./chunk-RS25QOKZ.js";
 import "./chunk-JGSKJHF7.js";
+import "./chunk-S4DDLTPX.js";
 import "./chunk-FF4KLI5W.js";
-import "./chunk-SDPDU2PM.js";
+import "./chunk-YTMDF6S7.js";
 import "./chunk-BMFZLLNI.js";
 import "./chunk-CI7RKSRE.js";
 import "./chunk-6HMYUWXR.js";
-import "./chunk-RJ2THZ4H.js";
+import "./chunk-MBUM2Y3L.js";
 import "./chunk-VPAFWWCL.js";
 import "./chunk-QQW2LIEA.js";
 import "./chunk-SANZHXY2.js";
@@ -44,7 +46,7 @@ import "./chunk-YOI3ELXF.js";
 import "./chunk-EI6V5UXY.js";
 import "./chunk-PNLCEFE4.js";
 import "./chunk-O75CRYGF.js";
-import "./chunk-U33LWTQQ.js";
+import "./chunk-HV57RHMD.js";
 import "./chunk-QDW3E4RD.js";
 import "./chunk-3ONXXHQO.js";
 import "./chunk-ODPLEWB6.js";
@@ -53,18 +55,18 @@ import "./chunk-KF74X62T.js";
 import "./chunk-2LSZVONP.js";
 import "./chunk-DEUNUKTD.js";
 import "./chunk-YN4ZT4CW.js";
-import "./chunk-6JDGADXK.js";
-import "./chunk-X74FJSW7.js";
-import "./chunk-PCZR32VL.js";
+import "./chunk-6VVP6NK7.js";
+import "./chunk-GFIARMA7.js";
+import "./chunk-3JJWNZTT.js";
 import "./chunk-M7XQSUBB.js";
-import "./chunk-YPR7DOPD.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
 import "./chunk-OMNTQPZO.js";
 import "./chunk-IREVVFTM.js";
 import "./chunk-SVOZFLIQ.js";
+import "./chunk-LTJAMRGI.js";
 import "./chunk-J6A3CX5N.js";
-import "./chunk-IKNQAGBV.js";
+import "./chunk-IX3UQT4H.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-MB5RSUW6.js";
 import "./chunk-6KYMPV2O.js";
@@ -73,7 +75,6 @@ import "./chunk-42JKGUFJ.js";
 import "./chunk-RULE4VG5.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-DM2T26WE.js";
-import "./chunk-FVQJYWH7.js";
 import "./chunk-FEB7W5JG.js";
 import "./chunk-G7D6GZ5J.js";
 import "./chunk-VF4XKTX3.js";
@@ -102,11 +103,13 @@ import "./chunk-I4WBNM3M.js";
 import "./chunk-SOAU2OE2.js";
 import "./chunk-UZYLX7M6.js";
 import "./chunk-U3PN77QT.js";
-import "./chunk-ZPQVJEVQ.js";
+import "./chunk-SK2CR6MW.js";
+import "./chunk-FVQJYWH7.js";
 import "./chunk-4DJQYKMN.js";
 import "./chunk-EYIEWJNI.js";
 import "./chunk-JUC24CTX.js";
 import "./chunk-NU3CSQ4H.js";
+import "./chunk-6MKAMLQL.js";
 import "./chunk-TBBDFYXW.js";
 import "./chunk-ZBJMUXZH.js";
 import "./chunk-PVGDJXVK.js";

package/dist/access-surface-catalog.d.ts

@@ -1,10 +1,11 @@
 import { OperationName } from './access-boundary.js';
 import 'zod';
-import './access-service-Cte3ol0W.js';
-import './storage.js';
-import './types-PuiPZ9iE.js';
+import './access-service-COCzhgEL.js';
+import './catalog-DxCzhjE6.js';
+import './types-MWKPZnM0.js';
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';
+import './storage.js';
 import './page-versioning.js';
 import './consolidation-operator.js';
 import './memory-projection-store.js';
@@ -22,7 +23,7 @@ import './user-model.js';
 import './recall-audit-anomaly.js';
 import './recall-audit.js';
 import './explicit-capture.js';
-import './orchestrator-CJI4xdqV.js';
+import './orchestrator-C9CDWAm6.js';
 import './briefing.js';
 import './buffer.js';
 import './extraction-faithfulness.js';
@@ -35,14 +36,13 @@ import './session-integrity.js';
 import './summarizer.js';
 import './orchestration/maintenance.js';
 import './namespaces/search.js';
-import './catalog-DN1PzThs.js';
 import './live-connectors-runner.js';
 import './framework-CNDn2164.js';
 import './relevance.js';
 import './negative.js';
 import './session-observer-state.js';
 import './embedding-fallback.js';
-import './semantic-DJR8_DMQ.js';
+import './semantic-SLAa_prH.js';
 import './capabilities.js';
 import './replay/types.js';
 import './extraction-judge.js';
@@ -51,7 +51,7 @@ import './lcm/archive.js';
 import './lcm/summarizer.js';
 import './lcm/dag.js';
 import './lcm/queue.js';
-import './semantic-consolidation-BtUfv-AL.js';
+import './semantic-consolidation-DgFXyALl.js';
 import './connectors/codex-materialize.js';
 import './logger.js';
 import './conversation-index/backend.js';

package/dist/action-confidence.d.ts

@@ -1,5 +1,5 @@
 import { RetrievedMemoryCorrectionState, RetrievedMemorySafety } from './memory-provenance.js';
-import './types-PuiPZ9iE.js';
+import './types-MWKPZnM0.js';
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';
 import './user-model.js';

package/dist/active-memory-bridge.d.ts

@@ -1,4 +1,4 @@
-import { P as PluginConfig, g as MemoryFile } from './types-PuiPZ9iE.js';
+import { P as PluginConfig, g as MemoryFile } from './types-MWKPZnM0.js';
 import './types-ByK7T3L6.js';
 import './index-DJ9QWMw-.js';