@remnic/core 9.3.708 → 9.3.709

package/dist/{chunk-WDH3KUZU.js → chunk-NXL5CVE7.js}

@@ -1,6 +1,6 @@
 import {
   runPostConsolidationMaterialize
-} from "./chunk-4E2QCH46.js";
+} from "./chunk-CNVIWMQI.js";
 import {
   discoverMemoryExtensions,
   renderExtensionsBlock,
@@ -217,4 +217,4 @@ export {
   buildExtensionsBlockForConsolidation,
   materializeAfterSemanticConsolidation
 };
-//# sourceMappingURL=chunk-WDH3KUZU.js.map
+//# sourceMappingURL=chunk-NXL5CVE7.js.map

package/dist/{chunk-BGAHTI4C.js → chunk-OK7FUX6R.js}

@@ -1,6 +1,6 @@
 import {
   listNamespaces
-} from "./chunk-NM6TSEGQ.js";
+} from "./chunk-JNOYYWCA.js";
 import {
   runConsolidationProvenanceCheck
 } from "./chunk-7XH7VJN4.js";
@@ -9,7 +9,7 @@ import {
 } from "./chunk-YBPYIAA5.js";
 import {
   summarizeNamespaceMaintenanceHealth
-} from "./chunk-Y6YHAGQP.js";
+} from "./chunk-7NDYFAJS.js";
 import {
   analyzeSessionIntegrity,
   applySessionRepair,
@@ -35,17 +35,17 @@ import {
 } from "./chunk-3PY7VHV7.js";
 import {
   parseConfig
-} from "./chunk-WRGPE6AW.js";
+} from "./chunk-3XHD3XGK.js";
 import {
   listMemoryGovernanceRuns,
   readMemoryGovernanceRunArtifact
-} from "./chunk-ESMY4RJ4.js";
+} from "./chunk-XKU4YE6Z.js";
 import {
   analyzeGraphHealth
 } from "./chunk-YGKUAX2B.js";
 import {
   StorageManager
-} from "./chunk-2VQYHHWB.js";
+} from "./chunk-JSDZMOT7.js";
 import {
   lintWorkspaceFiles
 } from "./chunk-DM2T26WE.js";
@@ -1395,4 +1395,4 @@ export {
   runBenchmarkRecall,
   runOperatorRepair
 };
-//# sourceMappingURL=chunk-BGAHTI4C.js.map
+//# sourceMappingURL=chunk-OK7FUX6R.js.map

package/dist/{chunk-24FGNOQS.js → chunk-P6PRSI3W.js}

@@ -3,12 +3,14 @@ import {
 } from "./chunk-NUWZFSKC.js";
 import {
   defineOperation
-} from "./chunk-66TSLESZ.js";
+} from "./chunk-PKE7EJMX.js";
 import {
+  CorrectionContractError,
   DECISION_SUBCOMMANDS,
   DELTA_SUBCOMMANDS,
+  EngramAccessInputError,
   isCodegraphToolName
-} from "./chunk-STYMKPFT.js";
+} from "./chunk-EVX52NCY.js";
 
 // src/access-operations.ts
 import { z } from "zod";
@@ -206,6 +208,81 @@ var codingDeltaOperation = defineOperation({
     return { result };
   }
 });
+var memoryCorrectPlanSchema = z.preprocess(
+  (data) => {
+    if (data && typeof data === "object" && !Array.isArray(data)) {
+      const out = {};
+      for (const [k, v] of Object.entries(data)) {
+        if (v !== null) out[k] = v;
+      }
+      return out;
+    }
+    return data;
+  },
+  z.object({
+    text: z.string().trim().min(1).max(1e4),
+    targetIds: z.array(z.string().trim().min(1).max(512)).optional(),
+    sessionKey: z.string().trim().max(512).optional(),
+    namespace: z.string().trim().max(256).optional()
+  })
+);
+var memoryCorrectPlanOperation = defineOperation({
+  name: "memory_correct_plan",
+  description: "Plan a memory correction from a plain-language statement (issue #1580). Returns a CorrectionPlan with a diff preview; apply via memory_correct_apply.",
+  schema: memoryCorrectPlanSchema,
+  handler: async (input, ctx) => {
+    try {
+      const result = await ctx.service.correctionPlan({
+        text: input.text,
+        ...input.targetIds ? { targetIds: input.targetIds } : {},
+        ...input.sessionKey ? { sessionKey: input.sessionKey } : {},
+        ...input.namespace ? { namespace: input.namespace } : {},
+        ...ctx.authenticatedPrincipal ? { principal: ctx.authenticatedPrincipal } : {}
+      });
+      return { result };
+    } catch (err) {
+      if (err instanceof CorrectionContractError) throw new EngramAccessInputError(err.message);
+      throw err;
+    }
+  }
+});
+var memoryCorrectApplySchema = z.preprocess(
+  (data) => {
+    if (data && typeof data === "object" && !Array.isArray(data)) {
+      const out = {};
+      for (const [k, v] of Object.entries(data)) {
+        if (v !== null) out[k] = v;
+      }
+      return out;
+    }
+    return data;
+  },
+  z.object({
+    planId: z.string().trim().min(1).max(512),
+    confirm: z.boolean().optional(),
+    sessionKey: z.string().trim().max(512).optional(),
+    namespace: z.string().trim().max(256).optional()
+  })
+);
+var memoryCorrectApplyOperation = defineOperation({
+  name: "memory_correct_apply",
+  description: "Apply a planned memory correction by planId (issue #1580). Requires confirm: true when correction.applyRequiresConfirm is on (default).",
+  schema: memoryCorrectApplySchema,
+  handler: async (input, ctx) => {
+    try {
+      const result = await ctx.service.correctionApply(input.planId, {
+        confirm: input.confirm === true,
+        ...input.sessionKey ? { sessionKey: input.sessionKey } : {},
+        ...input.namespace ? { namespace: input.namespace } : {},
+        ...ctx.authenticatedPrincipal ? { principal: ctx.authenticatedPrincipal } : {}
+      });
+      return { result };
+    } catch (err) {
+      if (err instanceof CorrectionContractError) throw new EngramAccessInputError(err.message);
+      throw err;
+    }
+  }
+});
 var codegraphIndexOperation = defineOperation({
   name: "codegraph_index",
   description: "Codegraph parity tool (issue #1554): index. Delegates to the shared codegraph surface handler.",
@@ -352,7 +429,9 @@ var REGISTERED_OPERATIONS = [
   codegraphSearchCodeOperation.spec.name,
   codegraphManageAdrOperation.spec.name,
   codegraphIngestTracesOperation.spec.name,
-  codingDeltaOperation.spec.name
+  codingDeltaOperation.spec.name,
+  memoryCorrectPlanOperation.spec.name,
+  memoryCorrectApplyOperation.spec.name
 ];
 
 export {
@@ -362,6 +441,8 @@ export {
   codingDecisionOperation,
   codingArchitectureOperation,
   codingDeltaOperation,
+  memoryCorrectPlanOperation,
+  memoryCorrectApplyOperation,
   codegraphIndexOperation,
   codegraphListProjectsOperation,
   codegraphDeleteProjectOperation,
@@ -378,4 +459,4 @@ export {
   codegraphIngestTracesOperation,
   REGISTERED_OPERATIONS
 };
-//# sourceMappingURL=chunk-24FGNOQS.js.map
+//# sourceMappingURL=chunk-P6PRSI3W.js.map

package/dist/chunk-P6PRSI3W.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/access-operations.ts"],"sourcesContent":["/**\n * Pilot operation definitions for the access boundary (issue #1525).\n *\n * Three operations migrate through the registry in this PR — `memory_get`,\n * `memory_search`, and the `memory_store` write op — so the boundary's\n * normalization matrix (rules 17/28/36/48/51) and shared error mapping reach\n * MCP, HTTP, and CLI from one place. Domain-group migrations (memory ops →\n * connectors → namespaces …) land as follow-up PRs that add `defineOperation`\n * calls here and delete the surface-local validation they replace.\n *\n * Importing this module for its side effects registers the pilot operations;\n * surfaces then dispatch via {@link getOperation} from `./access-boundary.js`.\n */\n\nimport { z } from \"zod\";\n\nimport { defineOperation } from \"./access-boundary.js\";\nimport { memoryStoreRequestSchema, type MemoryStoreRequest } from \"./access-schema.js\";\nimport { EngramAccessInputError } from \"./access-service.js\";\nimport { CorrectionContractError } from \"./correction/correction-contract.js\";\nimport type {\n  EngramAccessMemoryResponse,\n  EngramAccessWriteResponse,\n} from \"./access-service.js\";\nimport {\n  DECISION_SUBCOMMANDS,\n  type DecisionSurfaceRequest,\n  type DecisionSurfaceResponse,\n} from \"./coding/decision-surfaces.js\";\nimport {\n  type ArchitectureSurfaceRequest,\n  type ArchitectureSurfaceResponse,\n} from \"./coding/architecture-surfaces.js\";\nimport {\n  type CodegraphSurfaceRequest,\n  type CodegraphSurfaceResponse,\n  isCodegraphToolName,\n} from \"./coding/codegraph-surfaces.js\";\nimport {\n  DELTA_SUBCOMMANDS,\n  type DeltaSurfaceRequest,\n  type DeltaSurfaceResponse,\n} from \"./coding/session-delta-surfaces.js\";\n\n// ---------------------------------------------------------------------------\n// memory_get — fetch one memory by id\n// ---------------------------------------------------------------------------\n\n/**\n * `memoryId` is required and non-empty (rule 51: the MCP dispatcher previously\n * fell back to `typeof args.memoryId === \"string\" ? args.memoryId : \"\"`,\n * silently passing an empty id into the service). `namespace` is\n * `.nullable().optional()` because MCP clients send `null` (gotcha #2).\n * `namespace` has no `.min(1)` because the pre-boundary handlers forwarded\n * empty/whitespace strings, and `resolveNamespace` treats empty identically\n * to absent (both trim to falsy → default namespace). Rejecting empty would\n * break HTTP callers that send a bare `?namespace=` (Cursor review).\n */\nconst memoryGetSchema = z.object({\n  memoryId: z.string().trim().min(1, \"memoryId is required\").max(512),\n  namespace: z.string().trim().max(256).nullable().optional(),\n});\n\nexport interface MemoryGetInput {\n  readonly memoryId: string;\n  readonly namespace?: string | null;\n}\n\nexport interface MemoryGetOutput {\n  readonly result: EngramAccessMemoryResponse;\n}\n\nexport const memoryGetOperation = defineOperation<MemoryGetInput, MemoryGetOutput>({\n  name: \"memory_get\",\n  description: \"Fetch one memory by id.\",\n  schema: memoryGetSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.memoryGet(\n      input.memoryId,\n      input.namespace ?? undefined,\n      ctx.authenticatedPrincipal,\n    );\n    return { result };\n  },\n});\n\n// ---------------------------------------------------------------------------\n// memory_search — semantic search across memories\n// ---------------------------------------------------------------------------\n\nconst memorySearchSchema = z.object({\n  query: z.string().trim().min(1, \"query is required\").max(2048),\n  namespace: z.string().trim().max(256).nullable().optional(),\n  // No upper cap: the pre-boundary MCP handler forwarded any finite number to\n  // memorySearch, and the QMD/search backends honor large limits. Capping at\n  // 100 would reject existing clients that request larger result sets.\n  maxResults: z.number().int().min(1).nullable().optional(),\n  collection: z.string().trim().min(1).max(256).nullable().optional(),\n});\n\nexport interface MemorySearchInput {\n  readonly query: string;\n  readonly namespace?: string | null;\n  readonly maxResults?: number | null;\n  readonly collection?: string | null;\n}\n\nexport interface MemorySearchOutput {\n  readonly result: {\n    readonly query: string;\n    readonly results: ReadonlyArray<{ path: string; score: number; snippet: string }>;\n    readonly count: number;\n  };\n}\n\nexport const memorySearchOperation = defineOperation<MemorySearchInput, MemorySearchOutput>({\n  name: \"memory_search\",\n  description: \"Search memories across readable namespaces.\",\n  schema: memorySearchSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.memorySearch({\n      query: input.query,\n      namespace: input.namespace ?? undefined,\n      maxResults: input.maxResults ?? undefined,\n      collection: input.collection ?? undefined,\n      principal: ctx.authenticatedPrincipal,\n    });\n    return { result };\n  },\n});\n\n// ---------------------------------------------------------------------------\n// memory_store — the pilot WRITE op\n// ---------------------------------------------------------------------------\n\nexport type MemoryStoreInput = MemoryStoreRequest;\n\nexport interface MemoryStoreOutput {\n  readonly result: EngramAccessWriteResponse;\n}\n\nexport const memoryStoreOperation = defineOperation<MemoryStoreInput, MemoryStoreOutput>({\n  name: \"memory_store\",\n  description: \"Store an explicit memory through the access layer.\",\n  // Reuse the existing schema verbatim — the migration is behavior-preserving;\n  // the schema's external contract is NOT changing in this PR (per the issue's\n  // pitfall note).\n  schema: memoryStoreRequestSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.memoryStore(\n      {\n        ...input,\n        authenticatedPrincipal: ctx.authenticatedPrincipal,\n      },\n      // Forward transport-level hooks (e.g. HTTP's atomic write-quota gate)\n      // so the hook still fires inside the service's idempotent-write lock —\n      // never before, never on a replay (#1434 invariant preserved by the\n      // boundary migration).\n\n      ctx.hooks,\n    );\n    return { result };\n  },\n});\n\n// ---------------------------------------------------------------------------\n// coding_decision — decision-record surfaces (issue #1548 Track A PR 2)\n// ---------------------------------------------------------------------------\n\n/**\n * The subcommand field is required and MUST be one of the four valid values\n * (rule 51 — reject loudly, list the options, never silently default). The\n * remaining fields are optional because each subcommand uses a different\n * subset; the handler validates subcommand-specific requirements after\n * routing.\n */\n/**\n * MCP clients send `null` for absent optional fields. Zod `.optional()`\n * rejects `null`, so strip nulls at the object level before the inner\n * schema validates (review: cursor null-field thread).\n */\nconst codingDecisionSchema = z.preprocess(\n  (data) => {\n    if (data && typeof data === \"object\" && !Array.isArray(data)) {\n      const out: Record<string, unknown> = {};\n      for (const [k, v] of Object.entries(data as Record<string, unknown>)) {\n        if (v !== null) out[k] = v;\n      }\n      return out;\n    }\n    return data;\n  },\n  z.object({\n    subcommand: z.enum(DECISION_SUBCOMMANDS),\n    sessionKey: z.string().trim().max(512).optional(),\n    namespace: z.string().trim().max(256).optional(),\n    id: z.string().trim().max(512).optional(),\n    title: z.string().trim().max(512).optional(),\n    status: z.string().trim().max(64).optional(),\n    context: z.string().trim().max(8192).optional(),\n    decision: z.string().trim().max(8192).optional(),\n    consequences: z.string().trim().max(8192).optional(),\n    entityRefs: z.array(z.string().trim().min(1).max(256)).optional(),\n    supersedesId: z.string().trim().max(512).optional(),\n  }),\n);\n\nexport type CodingDecisionInput = DecisionSurfaceRequest;\nexport type CodingDecisionOutput = { result: DecisionSurfaceResponse };\n\nexport const codingDecisionOperation = defineOperation<\n  CodingDecisionInput,\n  CodingDecisionOutput\n>({\n  name: \"coding_decision\",\n  description:\n    \"List, get, record, or supersede decision records in the session's coding namespace (issue #1548 Track A).\",\n  schema: codingDecisionSchema as z.ZodType<CodingDecisionInput>,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codingDecision(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\n// ---------------------------------------------------------------------------\n// coding_architecture — architecture-card surfaces (issue #1548 Track A PR 3)\n// ---------------------------------------------------------------------------\n\nconst codingArchitectureSchema = z.preprocess(\n  (data) => {\n    if (data !== null && typeof data === \"object\" && !Array.isArray(data)) {\n      const obj = data as Record<string, unknown>;\n      const cleaned: Record<string, unknown> = {};\n      for (const [key, value] of Object.entries(obj)) {\n        if (value !== null) cleaned[key] = value;\n      }\n      return cleaned;\n    }\n    return data;\n  },\n  z.object({\n    subcommand: z.enum([\"get\", \"refresh\"]),\n    sessionKey: z.string().optional(),\n    namespace: z.string().optional(),\n  }),\n);\n\nexport type CodingArchitectureInput = ArchitectureSurfaceRequest;\nexport type CodingArchitectureOutput = { result: ArchitectureSurfaceResponse };\n\nexport const codingArchitectureOperation = defineOperation<\n  CodingArchitectureInput,\n  CodingArchitectureOutput\n>({\n  name: \"coding_architecture\",\n  description:\n    \"Get or refresh the architecture card for the session's coding namespace (issue #1548 Track A PR 3).\",\n  schema: codingArchitectureSchema as z.ZodType<CodingArchitectureInput>,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codingArchitecture(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nconst codegraphSurfaceSchema = z.preprocess(\n  (data) => {\n    if (data !== null && typeof data === \"object\" && !Array.isArray(data)) {\n      const obj = data as Record<string, unknown>;\n      const cleaned: Record<string, unknown> = {};\n      for (const [key, value] of Object.entries(obj)) {\n        if (value !== null) cleaned[key] = value;\n      }\n      return cleaned;\n    }\n    return data;\n  },\n  z.object({\n    tool: z.string().refine(isCodegraphToolName, {\n      message: \"tool must be one of the codegraph tool names\",\n    }),\n    sessionKey: z.string().max(512).optional(),\n    principal: z.string().max(256).optional(),\n    project: z.string().max(256).optional(),\n    query: z.string().max(2048).optional(),\n    limit: z.number().int().positive().max(200).optional(),\n    start: z.string().max(512).optional(),\n    direction: z.string().max(64).optional(),\n    depth: z.number().int().positive().max(10).optional(),\n    qualifiedName: z.string().max(1024).optional(),\n    path: z.string().max(2048).optional(),\n    structuredQuery: z.record(z.string(), z.unknown()).optional(),\n    head: z.string().max(256).optional(),\n    repoRoot: z.string().max(2048).optional(),\n    mode: z.string().max(64).optional(),\n    confirm: z.boolean().optional(),\n    subcommand: z.string().max(64).optional(),\n    id: z.string().max(512).optional(),\n    title: z.string().max(512).optional(),\n    status: z.string().max(64).optional(),\n    context: z.string().max(8192).optional(),\n    decision: z.string().max(8192).optional(),\n    consequences: z.string().max(8192).optional(),\n    entityRefs: z.array(z.string().max(256)).optional(),\n    supersedesId: z.string().max(512).optional(),\n    traces: z.array(z.unknown()).optional(),\n  }),\n) as z.ZodType<CodegraphSurfaceRequest>;\n\n// ---------------------------------------------------------------------------\n// coding_delta — session-delta surface (issue #1548 Track A PR 4)\n// ---------------------------------------------------------------------------\n\nconst codingDeltaSchema = z.preprocess(\n  (data) => {\n    if (data !== null && typeof data === \"object\" && !Array.isArray(data)) {\n      const obj = data as Record<string, unknown>;\n      const cleaned: Record<string, unknown> = {};\n      for (const [key, value] of Object.entries(obj)) {\n        if (value !== null) cleaned[key] = value;\n      }\n      return cleaned;\n    }\n    return data;\n  },\n  z.object({\n    subcommand: z.enum(DELTA_SUBCOMMANDS),\n    sessionKey: z.string().trim().max(512).optional(),\n    namespace: z.string().trim().max(256).optional(),\n  }),\n);\n\nexport type CodingDeltaInput = DeltaSurfaceRequest;\nexport type CodingDeltaOutput = { result: DeltaSurfaceResponse };\n\nexport const codingDeltaOperation = defineOperation<\n  CodingDeltaInput,\n  CodingDeltaOutput\n>({\n  name: \"coding_delta\",\n  description:\n    \"Get the session delta (commits + touched files since last seen) for the session's coding namespace (issue #1548 Track A PR 4).\",\n  schema: codingDeltaSchema as z.ZodType<CodingDeltaInput>,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codingDelta(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\n// ---------------------------------------------------------------------------\n// memory_correct_plan / memory_correct_apply — Correction Contract (#1580)\n// ---------------------------------------------------------------------------\n//\n// One plan/apply pipeline for every memory correction (supersession,\n// invalidation, tombstone, edit, rescope, redaction). The MCP/HTTP/CLI\n// surfaces all dispatch through these two ops so the boundary's validation +\n// error mapping reach every correction path (rule 22 / 39).\n\nconst memoryCorrectPlanSchema = z.preprocess(\n  (data) => {\n    if (data && typeof data === \"object\" && !Array.isArray(data)) {\n      const out: Record<string, unknown> = {};\n      for (const [k, v] of Object.entries(data as Record<string, unknown>)) {\n        if (v !== null) out[k] = v;\n      }\n      return out;\n    }\n    return data;\n  },\n  z.object({\n    text: z.string().trim().min(1).max(10_000),\n    targetIds: z.array(z.string().trim().min(1).max(512)).optional(),\n    sessionKey: z.string().trim().max(512).optional(),\n    namespace: z.string().trim().max(256).optional(),\n  }),\n);\n\nexport interface MemoryCorrectPlanInput {\n  text: string;\n  targetIds?: string[];\n  sessionKey?: string;\n  namespace?: string;\n}\n\nexport interface MemoryCorrectPlanOutput {\n  readonly result: unknown; // CorrectionPlan — opaque to the boundary\n}\n\nexport const memoryCorrectPlanOperation = defineOperation<\n  MemoryCorrectPlanInput,\n  MemoryCorrectPlanOutput\n>({\n  name: \"memory_correct_plan\",\n  description:\n    \"Plan a memory correction from a plain-language statement (issue #1580). Returns a CorrectionPlan with a diff preview; apply via memory_correct_apply.\",\n  schema: memoryCorrectPlanSchema as z.ZodType<MemoryCorrectPlanInput>,\n  handler: async (input, ctx) => {\n    try {\n      const result = await ctx.service.correctionPlan({\n        text: input.text,\n        ...(input.targetIds ? { targetIds: input.targetIds } : {}),\n        ...(input.sessionKey ? { sessionKey: input.sessionKey } : {}),\n        ...(input.namespace ? { namespace: input.namespace } : {}),\n        ...(ctx.authenticatedPrincipal ? { principal: ctx.authenticatedPrincipal } : {}),\n      });\n      return { result };\n    } catch (err) {\n      if (err instanceof CorrectionContractError) throw new EngramAccessInputError(err.message);\n      throw err;\n    }\n  },\n});\n\nconst memoryCorrectApplySchema = z.preprocess(\n  (data) => {\n    if (data && typeof data === \"object\" && !Array.isArray(data)) {\n      const out: Record<string, unknown> = {};\n      for (const [k, v] of Object.entries(data as Record<string, unknown>)) {\n        if (v !== null) out[k] = v;\n      }\n      return out;\n    }\n    return data;\n  },\n  z.object({\n    planId: z.string().trim().min(1).max(512),\n    confirm: z.boolean().optional(),\n    sessionKey: z.string().trim().max(512).optional(),\n    namespace: z.string().trim().max(256).optional(),\n  }),\n);\n\nexport interface MemoryCorrectApplyInput {\n  planId: string;\n  confirm?: boolean;\n  sessionKey?: string;\n  namespace?: string;\n}\n\nexport interface MemoryCorrectApplyOutput {\n  readonly result: unknown; // CorrectionOutcome — opaque to the boundary\n}\n\nexport const memoryCorrectApplyOperation = defineOperation<\n  MemoryCorrectApplyInput,\n  MemoryCorrectApplyOutput\n>({\n  name: \"memory_correct_apply\",\n  description:\n    \"Apply a planned memory correction by planId (issue #1580). Requires confirm: true when correction.applyRequiresConfirm is on (default).\",\n  schema: memoryCorrectApplySchema as z.ZodType<MemoryCorrectApplyInput>,\n  handler: async (input, ctx) => {\n    try {\n      const result = await ctx.service.correctionApply(input.planId, {\n        confirm: input.confirm === true,\n        ...(input.sessionKey ? { sessionKey: input.sessionKey } : {}),\n        ...(input.namespace ? { namespace: input.namespace } : {}),\n        ...(ctx.authenticatedPrincipal ? { principal: ctx.authenticatedPrincipal } : {}),\n      });\n      return { result };\n    } catch (err) {\n      if (err instanceof CorrectionContractError) throw new EngramAccessInputError(err.message);\n      throw err;\n    }\n  },\n});\n\n// ---------------------------------------------------------------------------\n// Surface registration map — what each transport calls the pilot ops\n// ---------------------------------------------------------------------------\n\n/**\n * The canonical short names (no `engram.`/`remnic.` prefix) of the operations\n * the boundary owns today. The fitness test treats this set as the migrated\n * set; everything else on a surface is unmigrated and counted by the ratchet.\n */\nexport const codegraphIndexOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_index\",\n  description:\n    \"Codegraph parity tool (issue #1554): index. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphListProjectsOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_list_projects\",\n  description:\n    \"Codegraph parity tool (issue #1554): list_projects. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphDeleteProjectOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_delete_project\",\n  description:\n    \"Codegraph parity tool (issue #1554): delete_project. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphIndexStatusOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_index_status\",\n  description:\n    \"Codegraph parity tool (issue #1554): index_status. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphSearchGraphOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_search_graph\",\n  description:\n    \"Codegraph parity tool (issue #1554): search_graph. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphTracePathOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_trace_path\",\n  description:\n    \"Codegraph parity tool (issue #1554): trace_path. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphDetectChangesOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_detect_changes\",\n  description:\n    \"Codegraph parity tool (issue #1554): detect_changes. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphQueryGraphOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_query_graph\",\n  description:\n    \"Codegraph parity tool (issue #1554): query_graph. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphGetSchemaOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_get_schema\",\n  description:\n    \"Codegraph parity tool (issue #1554): get_schema. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphGetSnippetOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_get_snippet\",\n  description:\n    \"Codegraph parity tool (issue #1554): get_snippet. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphGetArchitectureOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_get_architecture\",\n  description:\n    \"Codegraph parity tool (issue #1554): get_architecture. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphSearchCodeOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_search_code\",\n  description:\n    \"Codegraph parity tool (issue #1554): search_code. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphManageAdrOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_manage_adr\",\n  description:\n    \"Codegraph parity tool (issue #1554): manage_adr. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\nexport const codegraphIngestTracesOperation = defineOperation<\n  CodegraphSurfaceRequest,\n  { result: CodegraphSurfaceResponse }\n>({\n  name: \"codegraph_ingest_traces\",\n  description:\n    \"Codegraph parity tool (issue #1554): ingest_traces. Delegates to the shared codegraph surface handler.\",\n  schema: codegraphSurfaceSchema,\n  handler: async (input, ctx) => {\n    const result = await ctx.service.codegraphTool(input, ctx.authenticatedPrincipal);\n    return { result };\n  },\n});\n\n// Batch-migrated operations (issue #1525): registers all remaining\n// handlers through the boundary as a side effect of importing this module.\nimport \"./access-operations-batch.js\";\n\nexport const REGISTERED_OPERATIONS = [\n  memoryGetOperation.spec.name,\n  memorySearchOperation.spec.name,\n  memoryStoreOperation.spec.name,\n  codingDecisionOperation.spec.name,\n  codingArchitectureOperation.spec.name,\n  codegraphIndexOperation.spec.name,\n  codegraphListProjectsOperation.spec.name,\n  codegraphDeleteProjectOperation.spec.name,\n  codegraphIndexStatusOperation.spec.name,\n  codegraphSearchGraphOperation.spec.name,\n  codegraphTracePathOperation.spec.name,\n  codegraphDetectChangesOperation.spec.name,\n  codegraphQueryGraphOperation.spec.name,\n  codegraphGetSchemaOperation.spec.name,\n  codegraphGetSnippetOperation.spec.name,\n  codegraphGetArchitectureOperation.spec.name,\n  codegraphSearchCodeOperation.spec.name,\n  codegraphManageAdrOperation.spec.name,\n  codegraphIngestTracesOperation.spec.name,\n  codingDeltaOperation.spec.name,\n  memoryCorrectPlanOperation.spec.name,\n  memoryCorrectApplyOperation.spec.name,\n] as const;\n"],"mappings":";;;;;;;;;;;;;;;AAcA,SAAS,SAAS;AA4ClB,IAAM,kBAAkB,EAAE,OAAO;AAAA,EAC/B,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,sBAAsB,EAAE,IAAI,GAAG;AAAA,EAClE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AAC5D,CAAC;AAWM,IAAM,qBAAqB,gBAAiD;AAAA,EACjF,MAAM;AAAA,EACN,aAAa;AAAA,EACb,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ;AAAA,MAC/B,MAAM;AAAA,MACN,MAAM,aAAa;AAAA,MACnB,IAAI;AAAA,IACN;AACA,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAMD,IAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,mBAAmB,EAAE,IAAI,IAAI;AAAA,EAC7D,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA,EAI1D,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EACxD,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AACpE,CAAC;AAiBM,IAAM,wBAAwB,gBAAuD;AAAA,EAC1F,MAAM;AAAA,EACN,aAAa;AAAA,EACb,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,aAAa;AAAA,MAC5C,OAAO,MAAM;AAAA,MACb,WAAW,MAAM,aAAa;AAAA,MAC9B,YAAY,MAAM,cAAc;AAAA,MAChC,YAAY,MAAM,cAAc;AAAA,MAChC,WAAW,IAAI;AAAA,IACjB,CAAC;AACD,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAYM,IAAM,uBAAuB,gBAAqD;AAAA,EACvF,MAAM;AAAA,EACN,aAAa;AAAA;AAAA;AAAA;AAAA,EAIb,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ;AAAA,MAC/B;AAAA,QACE,GAAG;AAAA,QACH,wBAAwB,IAAI;AAAA,MAC9B;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,IAAI;AAAA,IACN;AACA,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAkBD,IAAM,uBAAuB,EAAE;AAAA,EAC7B,CAAC,SAAS;AACR,QAAI,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,GAAG;AAC5D,YAAM,MAA+B,CAAC;AACtC,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,IAA+B,GAAG;AACpE,YAAI,MAAM,KAAM,KAAI,CAAC,IAAI;AAAA,MAC3B;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EACA,EAAE,OAAO;AAAA,IACP,YAAY,EAAE,KAAK,oBAAoB;AAAA,IACvC,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IAChD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IAC/C,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACxC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IAC3C,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,IAC3C,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,IAC9C,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,IAC/C,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,IACnD,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,SAAS;AAAA,IAChE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACpD,CAAC;AACH;AAKO,IAAM,0BAA0B,gBAGrC;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,eAAe,OAAO,IAAI,sBAAsB;AACjF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAMD,IAAM,2BAA2B,EAAE;AAAA,EACjC,CAAC,SAAS;AACR,QAAI,SAAS,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,GAAG;AACrE,YAAM,MAAM;AACZ,YAAM,UAAmC,CAAC;AAC1C,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC9C,YAAI,UAAU,KAAM,SAAQ,GAAG,IAAI;AAAA,MACrC;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EACA,EAAE,OAAO;AAAA,IACP,YAAY,EAAE,KAAK,CAAC,OAAO,SAAS,CAAC;AAAA,IACrC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,IAChC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,CAAC;AACH;AAKO,IAAM,8BAA8B,gBAGzC;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,mBAAmB,OAAO,IAAI,sBAAsB;AACrF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAED,IAAM,yBAAyB,EAAE;AAAA,EAC/B,CAAC,SAAS;AACR,QAAI,SAAS,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,GAAG;AACrE,YAAM,MAAM;AACZ,YAAM,UAAmC,CAAC;AAC1C,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC9C,YAAI,UAAU,KAAM,SAAQ,GAAG,IAAI;AAAA,MACrC;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EACA,EAAE,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,EAAE,OAAO,qBAAqB;AAAA,MAC3C,SAAS;AAAA,IACX,CAAC;AAAA,IACD,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACzC,WAAW,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACxC,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACtC,OAAO,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,IACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACrD,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACpC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,IACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,IACpD,eAAe,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,IAC7C,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,IACpC,iBAAiB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,IAC5D,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACnC,UAAU,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,IACxC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,IAClC,SAAS,EAAE,QAAQ,EAAE,SAAS;AAAA,IAC9B,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,IACxC,IAAI,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACjC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACpC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,IACpC,SAAS,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,IACvC,UAAU,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,IACxC,cAAc,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,IAC5C,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,EAAE,SAAS;AAAA,IAClD,cAAc,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IAC3C,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACxC,CAAC;AACH;AAMA,IAAM,oBAAoB,EAAE;AAAA,EAC1B,CAAC,SAAS;AACR,QAAI,SAAS,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,GAAG;AACrE,YAAM,MAAM;AACZ,YAAM,UAAmC,CAAC;AAC1C,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC9C,YAAI,UAAU,KAAM,SAAQ,GAAG,IAAI;AAAA,MACrC;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EACA,EAAE,OAAO;AAAA,IACP,YAAY,EAAE,KAAK,iBAAiB;AAAA,IACpC,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IAChD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACjD,CAAC;AACH;AAKO,IAAM,uBAAuB,gBAGlC;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,YAAY,OAAO,IAAI,sBAAsB;AAC9E,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAWD,IAAM,0BAA0B,EAAE;AAAA,EAChC,CAAC,SAAS;AACR,QAAI,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,GAAG;AAC5D,YAAM,MAA+B,CAAC;AACtC,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,IAA+B,GAAG;AACpE,YAAI,MAAM,KAAM,KAAI,CAAC,IAAI;AAAA,MAC3B;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EACA,EAAE,OAAO;AAAA,IACP,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAM;AAAA,IACzC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,SAAS;AAAA,IAC/D,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IAChD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACjD,CAAC;AACH;AAaO,IAAM,6BAA6B,gBAGxC;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,QAAI;AACF,YAAM,SAAS,MAAM,IAAI,QAAQ,eAAe;AAAA,QAC9C,MAAM,MAAM;AAAA,QACZ,GAAI,MAAM,YAAY,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;AAAA,QACxD,GAAI,MAAM,aAAa,EAAE,YAAY,MAAM,WAAW,IAAI,CAAC;AAAA,QAC3D,GAAI,MAAM,YAAY,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;AAAA,QACxD,GAAI,IAAI,yBAAyB,EAAE,WAAW,IAAI,uBAAuB,IAAI,CAAC;AAAA,MAChF,CAAC;AACD,aAAO,EAAE,OAAO;AAAA,IAClB,SAAS,KAAK;AACZ,UAAI,eAAe,wBAAyB,OAAM,IAAI,uBAAuB,IAAI,OAAO;AACxF,YAAM;AAAA,IACR;AAAA,EACF;AACF,CAAC;AAED,IAAM,2BAA2B,EAAE;AAAA,EACjC,CAAC,SAAS;AACR,QAAI,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,GAAG;AAC5D,YAAM,MAA+B,CAAC;AACtC,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,IAA+B,GAAG;AACpE,YAAI,MAAM,KAAM,KAAI,CAAC,IAAI;AAAA,MAC3B;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EACA,EAAE,OAAO;AAAA,IACP,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,IACxC,SAAS,EAAE,QAAQ,EAAE,SAAS;AAAA,IAC9B,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IAChD,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACjD,CAAC;AACH;AAaO,IAAM,8BAA8B,gBAGzC;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,QAAI;AACF,YAAM,SAAS,MAAM,IAAI,QAAQ,gBAAgB,MAAM,QAAQ;AAAA,QAC7D,SAAS,MAAM,YAAY;AAAA,QAC3B,GAAI,MAAM,aAAa,EAAE,YAAY,MAAM,WAAW,IAAI,CAAC;AAAA,QAC3D,GAAI,MAAM,YAAY,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;AAAA,QACxD,GAAI,IAAI,yBAAyB,EAAE,WAAW,IAAI,uBAAuB,IAAI,CAAC;AAAA,MAChF,CAAC;AACD,aAAO,EAAE,OAAO;AAAA,IAClB,SAAS,KAAK;AACZ,UAAI,eAAe,wBAAyB,OAAM,IAAI,uBAAuB,IAAI,OAAO;AACxF,YAAM;AAAA,IACR;AAAA,EACF;AACF,CAAC;AAWM,IAAM,0BAA0B,gBAGrC;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,iCAAiC,gBAG5C;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,kCAAkC,gBAG7C;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,gCAAgC,gBAG3C;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,gCAAgC,gBAG3C;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,8BAA8B,gBAGzC;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,kCAAkC,gBAG7C;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,+BAA+B,gBAG1C;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,8BAA8B,gBAGzC;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,+BAA+B,gBAG1C;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,oCAAoC,gBAG/C;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,+BAA+B,gBAG1C;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,8BAA8B,gBAGzC;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAEM,IAAM,iCAAiC,gBAG5C;AAAA,EACA,MAAM;AAAA,EACN,aACE;AAAA,EACF,QAAQ;AAAA,EACR,SAAS,OAAO,OAAO,QAAQ;AAC7B,UAAM,SAAS,MAAM,IAAI,QAAQ,cAAc,OAAO,IAAI,sBAAsB;AAChF,WAAO,EAAE,OAAO;AAAA,EAClB;AACF,CAAC;AAMM,IAAM,wBAAwB;AAAA,EACnC,mBAAmB,KAAK;AAAA,EACxB,sBAAsB,KAAK;AAAA,EAC3B,qBAAqB,KAAK;AAAA,EAC1B,wBAAwB,KAAK;AAAA,EAC7B,4BAA4B,KAAK;AAAA,EACjC,wBAAwB,KAAK;AAAA,EAC7B,+BAA+B,KAAK;AAAA,EACpC,gCAAgC,KAAK;AAAA,EACrC,8BAA8B,KAAK;AAAA,EACnC,8BAA8B,KAAK;AAAA,EACnC,4BAA4B,KAAK;AAAA,EACjC,gCAAgC,KAAK;AAAA,EACrC,6BAA6B,KAAK;AAAA,EAClC,4BAA4B,KAAK;AAAA,EACjC,6BAA6B,KAAK;AAAA,EAClC,kCAAkC,KAAK;AAAA,EACvC,6BAA6B,KAAK;AAAA,EAClC,4BAA4B,KAAK;AAAA,EACjC,+BAA+B,KAAK;AAAA,EACpC,qBAAqB,KAAK;AAAA,EAC1B,2BAA2B,KAAK;AAAA,EAChC,4BAA4B,KAAK;AACnC;","names":[]}

package/dist/{chunk-66TSLESZ.js → chunk-PKE7EJMX.js}

@@ -1,6 +1,6 @@
 import {
   EngramAccessInputError
-} from "./chunk-STYMKPFT.js";
+} from "./chunk-EVX52NCY.js";
 import {
   expandTildePath
 } from "./chunk-EYIEWJNI.js";
@@ -104,4 +104,4 @@ export {
   listRegisteredOperations,
   __resetRegistryForTest
 };
-//# sourceMappingURL=chunk-66TSLESZ.js.map
+//# sourceMappingURL=chunk-PKE7EJMX.js.map

package/dist/chunk-PKE7EJMX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/access-boundary.ts"],"sourcesContent":["/**\n * Single input-validation and error boundary for the CLI/MCP/HTTP access\n * surfaces (issue #1525, epic #1520 Phase 1).\n *\n * Every operation that crosses the access-service facade passes through ONE\n * registry entry: a zod-validated request envelope, a shared error mapper,\n * and the \"reject invalid input and list valid options\" behavior that\n * CLAUDE.md rules 14/17/24/28/36/48/51 previously had to be re-implemented\n * per handler. The three surfaces become thin adapters — one operation\n * definition, three transports — so a validation fix lands everywhere at\n * once.\n *\n * Host-agnostic (rule 31): operation names carry no `openclaw-*`/`engram-*`\n * prefix. Session/namespace tenancy stays in the handler layer (resolved via\n * ScopePlan #1521); the boundary validates SHAPE, not tenancy.\n */\n\nimport { z } from \"zod\";\nimport { EngramAccessInputError, type EngramAccessService } from \"./access-service.js\";\nimport { expandTildePath } from \"./utils/path.js\";\n\n// ---------------------------------------------------------------------------\n// Canonical operation names — host-agnostic (rule 31)\n// ---------------------------------------------------------------------------\n\n/**\n * Canonical operation ids. One id is shared by the MCP tool, the HTTP route,\n * and the CLI command that expose the same operation. Add to this union as\n * each domain-group migration PR (memory ops → connectors → namespaces …)\n * lands; the fitness test in `access-surface-catalog.test.ts` treats the\n * registered set as the migration state.\n */\nexport type OperationName =\n  | \"memory_get\"\n  | \"memory_search\"\n  | \"memory_store\"\n  | \"coding_decision\"\n  | \"coding_architecture\"\n  // codegraph parity tools (issue #1554) -- each maps to one codegraph_*\n  // boundary operation that delegates to the surface handler in\n  // coding/codegraph-surfaces.ts. Names match the external tool suffixes.\n  | \"codegraph_index\"\n  | \"codegraph_list_projects\"\n  | \"codegraph_delete_project\"\n  | \"codegraph_index_status\"\n  | \"codegraph_search_graph\"\n  | \"codegraph_trace_path\"\n  | \"codegraph_detect_changes\"\n  | \"codegraph_query_graph\"\n  | \"codegraph_get_schema\"\n  | \"codegraph_get_snippet\"\n  | \"codegraph_get_architecture\"\n  | \"codegraph_search_code\"\n  | \"codegraph_manage_adr\"\n  | \"codegraph_ingest_traces\"\n  | \"memory_correct_plan\"\n  | \"memory_correct_apply\"\n  | \"coding_delta\"\n  // Remaining MCP/HTTP handlers migrated through the boundary (issue #1525).\n  | \"recall\"\n  | \"recall_explain\"\n  | \"set_coding_context\"\n  | \"recall_tier_explain\"\n  | \"recall_xray\"\n  | \"wearables_status\"\n  | \"wearables_sync\"\n  | \"transcript_day\"\n  | \"transcript_search\"\n  | \"transcript_memories\"\n  | \"action_confidence\"\n  | \"chatgpt_memory_inspector\"\n  | \"day_summary\"\n  | \"capsule_export\"\n  | \"capsule_import\"\n  | \"capsule_list\"\n  | \"memory_governance_run\"\n  | \"procedure_mining_run\"\n  | \"pattern_reinforcement_run\"\n  | \"procedural_stats\"\n  | \"memory_timeline\"\n  | \"suggestion_submit\"\n  | \"entity_get\"\n  | \"review_queue_list\"\n  | \"observe\"\n  | \"lcm_search\"\n  | \"lcm_compaction_flush\"\n  | \"lcm_compaction_record\"\n  | \"continuity_audit_generate\"\n  | \"continuity_incident_open\"\n  | \"continuity_incident_close\"\n  | \"continuity_incident_list\"\n  | \"continuity_loop_add_or_update\"\n  | \"continuity_loop_review\"\n  | \"identity_anchor_get\"\n  | \"identity_anchor_update\"\n  | \"memory_identity\"\n  | \"work_task\"\n  | \"work_project\"\n  | \"work_board\"\n  | \"shared_context_write_output\"\n  | \"shared_feedback_record\"\n  | \"shared_priorities_append\"\n  | \"shared_context_cross_signals_run\"\n  | \"shared_context_curate_daily\"\n  | \"compounding_weekly_synthesize\"\n  | \"compounding_promote_candidate\"\n  | \"compression_guidelines_optimize\"\n  | \"compression_guidelines_activate\"\n  | \"memory_profile\"\n  | \"memory_entities_list\"\n  | \"memory_questions\"\n  | \"memory_last_recall\"\n  | \"memory_intent_debug\"\n  | \"memory_qmd_debug\"\n  | \"memory_graph_explain\"\n  | \"graph_snapshot\"\n  | \"memory_feedback\"\n  | \"memory_promote\"\n  | \"memory_outcome\"\n  | \"memory_action_apply\"\n  | \"context_checkpoint\"\n  | \"briefing\"\n  | \"review_list\"\n  | \"review_resolve\"\n  | \"contradiction_scan_run\"\n  | \"memory_summarize_hourly\"\n  | \"conversation_index_update\"\n  | \"profiling_report\"\n  | \"graph_edge_decay_run\"\n  | \"live_connectors_run\"\n  | \"peer_list\"\n  | \"peer_get\"\n  | \"peer_set\"\n  | \"peer_delete\"\n  | \"peer_profile_get\"\n  | \"peer_forget\"\n  | \"console_state\"\n  | \"dreams_status\"\n  | \"dreams_run\"\n  // HTTP-only routes (no direct MCP tool equivalent).\n  | \"offline_sync_snapshot\"\n  | \"offline_sync_snapshot_stream\"\n  | \"offline_sync_files\"\n  | \"offline_sync_file_content\"\n  | \"offline_sync_apply_file_content\"\n  | \"offline_sync_apply\"\n  | \"lcm_status\"\n  | \"memory_list\"\n  | \"entity_list\"\n  | \"maintenance_status\"\n  | \"quality_status\"\n  | \"trust_zones_status\"\n  | \"trust_zones_records\"\n  | \"review_disposition\"\n  | \"trust_zones_promote\"\n  | \"trust_zones_demo_seed\"\n  | \"citations_observed\"\n  | \"contradiction_detail\"\n  | \"graph_events\";\n\n// ---------------------------------------------------------------------------\n// Operation context — what every handler receives\n// ---------------------------------------------------------------------------\n\n/**\n * Per-call context. `service` is the facade the handler delegates to; the\n * boundary never reaches past it. `authenticatedPrincipal` is resolved by\n * the SURFACE (MCP header / HTTP identity / CLI flag) before the boundary\n * runs, so handlers stay principal-source-agnostic. `hooks` carries\n * transport-level callbacks (e.g. HTTP write-quota enforcement) that must\n * fire atomically inside the service call; surfaces that have no such hook\n * leave it undefined.\n */\nexport interface OperationContext {\n  readonly service: EngramAccessService;\n  readonly authenticatedPrincipal?: string;\n  readonly hooks?: OperationHooks;\n}\n\n/**\n * Transport-level callbacks a handler forwards into the service call. Kept\n * narrow on purpose: the boundary owns validation + dispatch shape, not\n * transport policy. Add fields here only when a surface genuinely needs a\n * callback the service itself consumes.\n */\nexport interface OperationHooks {\n  /** HTTP write-quota gate; throws to reject the write when exhausted. */\n  readonly enforceWriteQuota?: () => void | Promise<void>;\n}\n\n// ---------------------------------------------------------------------------\n// Operation spec + bound operation\n// ---------------------------------------------------------------------------\n\nexport interface OperationSpec<In, Out> {\n  /** Canonical operation id; matches an {@link OperationName}. */\n  readonly name: OperationName;\n  readonly description: string;\n  /** Zod schema validating the raw request envelope. */\n  readonly schema: z.ZodType<In>;\n  /** Handler invoked with the parsed input; throws EngramAccessInputError for domain faults. */\n  readonly handler: (input: In, ctx: OperationContext) => Promise<Out>;\n}\n\nexport interface BoundOperation<In = unknown, Out = unknown> {\n  readonly spec: OperationSpec<In, Out>;\n  /** Validate the raw envelope, then invoke the handler. Throws EngramAccessInputError on any validation failure. */\n  readonly run: (rawInput: unknown, ctx: OperationContext) => Promise<Out>;\n}\n\n// ---------------------------------------------------------------------------\n// Shared normalizers the boundary owns (rules 17, 28, 36, 48, 51)\n// ---------------------------------------------------------------------------\n\n/**\n * Coerce boolean-like strings at the edge (rule 36). Accepts actual booleans\n * and the string spellings clients send (\"true\"/\"false\"/\"1\"/\"0\"/\"yes\"/\"no\"/\n * \"on\"/\"off\", case-insensitive). Rejects anything else loudly — `Boolean(\"false\")`\n * would silently be `true`, which is the bug rule 36 exists to prevent.\n *\n * `undefined`/`null`/`\"\"` → `undefined`, so callers can keep treating an\n * absent flag as \"use the default\" without a separate presence check.\n */\nexport function coerceBooleanLike(value: unknown): boolean | undefined {\n  if (value === undefined || value === null || value === \"\") return undefined;\n  if (typeof value === \"boolean\") return value;\n  if (typeof value === \"string\") {\n    const lower = value.trim().toLowerCase();\n    if (lower === \"true\" || lower === \"1\" || lower === \"yes\" || lower === \"on\") return true;\n    if (lower === \"false\" || lower === \"0\" || lower === \"no\" || lower === \"off\") return false;\n  }\n  throw new EngramAccessInputError(\n    `expected a boolean-like value (true|false|1|0|yes|no|on|off); got ${JSON.stringify(value)}`,\n  );\n}\n\n/**\n * Coerce + validate a positive integer from a numeric string or number\n * (rule 28). Loosely-typed MCP/CLI clients send `\"5\"`; `typeof saved === \"number\"`\n * on read-back would reject it later, so we coerce at the edge and reject\n * booleans/objects loudly (`Number(true) === 1` would silently pass otherwise).\n *\n * `undefined`/`null`/`\"\"` → `undefined`.\n */\nexport function coercePositiveInteger(value: unknown, label: string): number | undefined {\n  if (value === undefined || value === null || value === \"\") return undefined;\n  if (typeof value === \"number\") {\n    if (!Number.isFinite(value) || value <= 0 || !Number.isInteger(value)) {\n      throw new EngramAccessInputError(`${label} expects a positive integer; got ${JSON.stringify(value)}`);\n    }\n    return value;\n  }\n  if (typeof value === \"string\") {\n    const trimmed = value.trim();\n    if (!/^[+-]?\\d+$/.test(trimmed)) {\n      throw new EngramAccessInputError(`${label} expects a positive integer; got ${JSON.stringify(value)}`);\n    }\n    const parsed = Number(trimmed);\n    if (!Number.isSafeInteger(parsed) || parsed <= 0) {\n      throw new EngramAccessInputError(`${label} expects a positive integer; got ${JSON.stringify(value)}`);\n    }\n    return parsed;\n  }\n  throw new EngramAccessInputError(`${label} expects a positive integer; got ${JSON.stringify(value)}`);\n}\n\n/**\n * Expand `~` in a path-shaped input (rule 17). Node `fs` does NOT expand `~`;\n * ad-hoc regex drifts. `undefined`/`null`/`\"\"` → `undefined`.\n */\nexport function normalizeOptionalPath(value: unknown): string | undefined {\n  if (value === undefined || value === null || value === \"\") return undefined;\n  if (typeof value !== \"string\") {\n    throw new EngramAccessInputError(`expected a path string; got ${JSON.stringify(value)}`);\n  }\n  return expandTildePath(value);\n}\n\n// ---------------------------------------------------------------------------\n// Error formatting — rule 51: list valid options, never silently default\n// ---------------------------------------------------------------------------\n\n/**\n * Turn a zod failure into an {@link EngramAccessInputError} whose message\n * names the offending field and — for enum/union issues — lists the valid\n * options, so the caller can correct rather than guess (rule 51).\n */\nexport function formatZodIssues(error: z.ZodError): string {\n  const parts: string[] = [];\n  for (const issue of error.issues) {\n    const path = issue.path.length > 0 ? issue.path.join(\".\") : \"(root)\";\n    const options = enumOptionsFromIssue(issue);\n    const suffix = options ? `. Valid: ${options.join(\", \")}` : \"\";\n    parts.push(`${path}: ${issue.message}${suffix}`);\n  }\n  return parts.length > 0\n    ? `request validation failed: ${parts.join(\"; \")}`\n    : \"request validation failed\";\n}\n\nfunction enumOptionsFromIssue(issue: z.ZodIssue): readonly string[] | undefined {\n  // zod exposes accepted enum values on the issue for ZodEnum / ZodNativeEnum\n  // and on the options of invalid_union discriminators. Reading them here\n  // keeps \"list valid options\" in ONE place rather than per handler.\n  if (issue.code === z.ZodIssueCode.invalid_enum_value) {\n    const rawOptions = (issue as { options?: unknown }).options;\n    if (Array.isArray(rawOptions)) {\n      return rawOptions.map((opt) => String(opt));\n    }\n  }\n  return undefined;\n}\n\n// ---------------------------------------------------------------------------\n// Registry\n// ---------------------------------------------------------------------------\n\nconst registry = new Map<OperationName, BoundOperation>();\n\n/**\n * Register an operation. Throws if the name is already registered — duplicate\n * registration is a programming error, not a runtime input fault, so it throws\n * a plain Error (not the input-error class surfaces translate for clients).\n */\nexport function defineOperation<In, Out>(spec: OperationSpec<In, Out>): BoundOperation<In, Out> {\n  if (registry.has(spec.name)) {\n    throw new Error(`access-boundary: operation already registered: ${spec.name}`);\n  }\n  const bound: BoundOperation<In, Out> = {\n    spec,\n    run: async (rawInput, ctx) => {\n      const parseResult = spec.schema.safeParse(rawInput);\n      if (!parseResult.success) {\n        throw new EngramAccessInputError(formatZodIssues(parseResult.error));\n      }\n      return spec.handler(parseResult.data, ctx);\n    },\n  };\n  // Store under the canonical name; the cast is safe because In/Out are\n  // erased at the registry boundary and recovered by callers via getOperation.\n  registry.set(spec.name, bound as unknown as BoundOperation);\n  return bound;\n}\n\n/** Look up a registered operation by canonical name. */\nexport function getOperation(name: OperationName): BoundOperation | undefined {\n  return registry.get(name);\n}\n\n/** All registered operation names. */\nexport function listRegisteredOperations(): readonly OperationName[] {\n  return [...registry.keys()];\n}\n\n/** Test-only: clear the registry so pilot definitions can be re-registered. */\nexport function __resetRegistryForTest(): void {\n  registry.clear();\n}\n"],"mappings":";;;;;;;;AAiBA,SAAS,SAAS;AA8MX,SAAS,kBAAkB,OAAqC;AACrE,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,GAAI,QAAO;AAClE,MAAI,OAAO,UAAU,UAAW,QAAO;AACvC,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,QAAQ,MAAM,KAAK,EAAE,YAAY;AACvC,QAAI,UAAU,UAAU,UAAU,OAAO,UAAU,SAAS,UAAU,KAAM,QAAO;AACnF,QAAI,UAAU,WAAW,UAAU,OAAO,UAAU,QAAQ,UAAU,MAAO,QAAO;AAAA,EACtF;AACA,QAAM,IAAI;AAAA,IACR,qEAAqE,KAAK,UAAU,KAAK,CAAC;AAAA,EAC5F;AACF;AAUO,SAAS,sBAAsB,OAAgB,OAAmC;AACvF,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,GAAI,QAAO;AAClE,MAAI,OAAO,UAAU,UAAU;AAC7B,QAAI,CAAC,OAAO,SAAS,KAAK,KAAK,SAAS,KAAK,CAAC,OAAO,UAAU,KAAK,GAAG;AACrE,YAAM,IAAI,uBAAuB,GAAG,KAAK,oCAAoC,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,IACtG;AACA,WAAO;AAAA,EACT;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,UAAU,MAAM,KAAK;AAC3B,QAAI,CAAC,aAAa,KAAK,OAAO,GAAG;AAC/B,YAAM,IAAI,uBAAuB,GAAG,KAAK,oCAAoC,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,IACtG;AACA,UAAM,SAAS,OAAO,OAAO;AAC7B,QAAI,CAAC,OAAO,cAAc,MAAM,KAAK,UAAU,GAAG;AAChD,YAAM,IAAI,uBAAuB,GAAG,KAAK,oCAAoC,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,IACtG;AACA,WAAO;AAAA,EACT;AACA,QAAM,IAAI,uBAAuB,GAAG,KAAK,oCAAoC,KAAK,UAAU,KAAK,CAAC,EAAE;AACtG;AAMO,SAAS,sBAAsB,OAAoC;AACxE,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,GAAI,QAAO;AAClE,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,IAAI,uBAAuB,+BAA+B,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,EACzF;AACA,SAAO,gBAAgB,KAAK;AAC9B;AAWO,SAAS,gBAAgB,OAA2B;AACzD,QAAM,QAAkB,CAAC;AACzB,aAAW,SAAS,MAAM,QAAQ;AAChC,UAAM,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK,GAAG,IAAI;AAC5D,UAAM,UAAU,qBAAqB,KAAK;AAC1C,UAAM,SAAS,UAAU,YAAY,QAAQ,KAAK,IAAI,CAAC,KAAK;AAC5D,UAAM,KAAK,GAAG,IAAI,KAAK,MAAM,OAAO,GAAG,MAAM,EAAE;AAAA,EACjD;AACA,SAAO,MAAM,SAAS,IAClB,8BAA8B,MAAM,KAAK,IAAI,CAAC,KAC9C;AACN;AAEA,SAAS,qBAAqB,OAAkD;AAI9E,MAAI,MAAM,SAAS,EAAE,aAAa,oBAAoB;AACpD,UAAM,aAAc,MAAgC;AACpD,QAAI,MAAM,QAAQ,UAAU,GAAG;AAC7B,aAAO,WAAW,IAAI,CAAC,QAAQ,OAAO,GAAG,CAAC;AAAA,IAC5C;AAAA,EACF;AACA,SAAO;AACT;AAMA,IAAM,WAAW,oBAAI,IAAmC;AAOjD,SAAS,gBAAyB,MAAuD;AAC9F,MAAI,SAAS,IAAI,KAAK,IAAI,GAAG;AAC3B,UAAM,IAAI,MAAM,kDAAkD,KAAK,IAAI,EAAE;AAAA,EAC/E;AACA,QAAM,QAAiC;AAAA,IACrC;AAAA,IACA,KAAK,OAAO,UAAU,QAAQ;AAC5B,YAAM,cAAc,KAAK,OAAO,UAAU,QAAQ;AAClD,UAAI,CAAC,YAAY,SAAS;AACxB,cAAM,IAAI,uBAAuB,gBAAgB,YAAY,KAAK,CAAC;AAAA,MACrE;AACA,aAAO,KAAK,QAAQ,YAAY,MAAM,GAAG;AAAA,IAC3C;AAAA,EACF;AAGA,WAAS,IAAI,KAAK,MAAM,KAAkC;AAC1D,SAAO;AACT;AAGO,SAAS,aAAa,MAAiD;AAC5E,SAAO,SAAS,IAAI,IAAI;AAC1B;AAGO,SAAS,2BAAqD;AACnE,SAAO,CAAC,GAAG,SAAS,KAAK,CAAC;AAC5B;AAGO,SAAS,yBAA+B;AAC7C,WAAS,MAAM;AACjB;","names":[]}

package/dist/{chunk-MOXFPLD6.js → chunk-QXNFQKWU.js}

@@ -11,7 +11,7 @@ import {
 } from "./chunk-LMDRGRJ2.js";
 import {
   parseConfig
-} from "./chunk-WRGPE6AW.js";
+} from "./chunk-3XHD3XGK.js";
 import {
   resolveObjectiveStateStoreDir,
   validateObjectiveStateSnapshot
@@ -268,4 +268,4 @@ export {
   recordResumeBundle,
   getResumeBundleStatus
 };
-//# sourceMappingURL=chunk-MOXFPLD6.js.map
+//# sourceMappingURL=chunk-QXNFQKWU.js.map

package/dist/{chunk-MRX6ZXHZ.js → chunk-S6FQLQGH.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-ZBJMUXZH.js";
 import {
   StorageManager
-} from "./chunk-2VQYHHWB.js";
+} from "./chunk-JSDZMOT7.js";
 import {
   getCachedEpisodeMap,
   setCachedEpisodeMap
@@ -107,4 +107,4 @@ export {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
 };
-//# sourceMappingURL=chunk-MRX6ZXHZ.js.map
+//# sourceMappingURL=chunk-S6FQLQGH.js.map

package/dist/{chunk-6HPJMR5I.js → chunk-SKQCFAYU.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-ZBJMUXZH.js";
 import {
   StorageManager
-} from "./chunk-2VQYHHWB.js";
+} from "./chunk-JSDZMOT7.js";
 import {
   getCachedRuleMemories,
   setCachedRuleMemories
@@ -117,4 +117,4 @@ export {
   compareVerifiedSemanticRuleResults,
   searchVerifiedSemanticRules
 };
-//# sourceMappingURL=chunk-6HPJMR5I.js.map
+//# sourceMappingURL=chunk-SKQCFAYU.js.map

package/dist/{chunk-EJDAXR7O.js → chunk-VWB3HDY6.js}

@@ -6,16 +6,17 @@ import {
 } from "./chunk-7WV3F5DQ.js";
 import {
   EngramMcpServer
-} from "./chunk-WSWYIKXX.js";
+} from "./chunk-KOEKDZ6A.js";
 import {
   validateRequest
 } from "./chunk-NUWZFSKC.js";
 import {
   getOperation
-} from "./chunk-66TSLESZ.js";
+} from "./chunk-PKE7EJMX.js";
 import {
+  CorrectionContractError,
   EngramAccessInputError
-} from "./chunk-STYMKPFT.js";
+} from "./chunk-EVX52NCY.js";
 import {
   projectTagProjectId
 } from "./chunk-SHRRWOVY.js";
@@ -27,7 +28,7 @@ import {
 } from "./chunk-DEUNUKTD.js";
 import {
   isRecallDisclosure
-} from "./chunk-MLLTU5FX.js";
+} from "./chunk-BOGENF7P.js";
 import {
   OFFLINE_SYNC_APPLY_MAX_BODY_BYTES,
   OFFLINE_SYNC_FILE_CONTENT_MAX_CHUNK_BYTES,
@@ -209,7 +210,8 @@ var EngramAccessHttpServer = class {
       codingDecisionVisible: this.service.decisionRecordSurfaceVisible,
       architectureCardVisible: this.service.architectureCardSurfaceVisible,
       codegraphVisible: this.service.codegraphSurfaceVisible,
-      sessionDeltaVisible: this.service.sessionDeltaSurfaceVisible
+      sessionDeltaVisible: this.service.sessionDeltaSurfaceVisible,
+      correctionVisible: this.service.correctionSurfaceVisible
     });
   }
   async start() {
@@ -232,6 +234,10 @@ var EngramAccessHttpServer = class {
             this.respondJson(res, 400, { error: err.message, code: "input_error" });
             return;
           }
+          if (err instanceof CorrectionContractError) {
+            this.respondJson(res, 400, { error: err.message, code: "correction_contract_error" });
+            return;
+          }
           if (res.headersSent) {
             res.destroy(err);
             return;
@@ -1050,6 +1056,47 @@ var EngramAccessHttpServer = class {
       this.respondJson(res, 200, output.result);
       return;
     }
+    if (req.method === "POST" && pathname === "/engram/v1/correction/plan") {
+      this.ensureWriteRateLimitAvailable();
+      const body = await this.readJsonBody(req);
+      const op = getOperation("memory_correct_plan");
+      if (!op) {
+        throw new EngramAccessInputError("access-boundary: operation not registered: memory_correct_plan");
+      }
+      const output = await op.run(body, {
+        service: this.service,
+        authenticatedPrincipal: this.resolveRequestPrincipal(req)
+      });
+      this.recordWriteRateLimitHit();
+      this.respondJson(res, 200, output.result);
+      return;
+    }
+    if (req.method === "POST" && pathname === "/engram/v1/correction/apply") {
+      this.ensureWriteRateLimitAvailable();
+      const body = await this.readJsonBody(req);
+      const op = getOperation("memory_correct_apply");
+      if (!op) {
+        throw new EngramAccessInputError("access-boundary: operation not registered: memory_correct_apply");
+      }
+      const output = await op.run(body, {
+        service: this.service,
+        authenticatedPrincipal: this.resolveRequestPrincipal(req)
+      });
+      this.recordWriteRateLimitHit();
+      this.respondJson(res, 200, output.result);
+      return;
+    }
+    if (req.method === "GET" && pathname === "/engram/v1/correction/pending") {
+      const namespace = parsed.searchParams.get("namespace") ?? void 0;
+      const sessionKey = parsed.searchParams.get("sessionKey") ?? void 0;
+      const plans = await this.service.correctionListPending({
+        ...namespace ? { namespace } : {},
+        ...sessionKey ? { sessionKey } : {},
+        principal: this.resolveRequestPrincipal(req)
+      });
+      this.respondJson(res, 200, plans);
+      return;
+    }
     if (req.method === "POST" && pathname === "/engram/v1/suggestions") {
       void getOperation("suggestion_submit");
       const body = await this.readValidatedBody(req, "suggestionSubmit");
@@ -1913,7 +1960,7 @@ var EngramAccessHttpServer = class {
     ]);
     const isCodegraphManageAdr = toolName === "engram.codegraph_manage_adr" || toolName === "remnic.codegraph_manage_adr";
     const codegraphWrite = CODEGRAPH_WRITE_TOOLS.has(toolName) || isCodegraphManageAdr && (toolArgsSubcommand === "record" || toolArgsSubcommand === "supersede");
-    const isMcpWrite = request.method === "tools/call" && (toolName === "engram.memory_store" || toolName === "remnic.memory_store" || toolName === "engram.suggestion_submit" || toolName === "remnic.suggestion_submit" || toolName === "engram.observe" || toolName === "remnic.observe" || toolName === "engram.lcm_compaction_flush" || toolName === "remnic.lcm_compaction_flush" || toolName === "engram.lcm_compaction_record" || toolName === "remnic.lcm_compaction_record" || toolName === "engram.capsule_export" || toolName === "remnic.capsule_export" || toolName === "engram.capsule_import" || toolName === "remnic.capsule_import" || !dreamsRunDryRun && (toolName === "engram.dreams_run" || toolName === "remnic.dreams_run") || !memoryActionApplyDryRun && (toolName === "engram.memory_action_apply" || toolName === "remnic.memory_action_apply") || codingDecisionWrite || codingArchitectureWrite || codegraphWrite);
+    const isMcpWrite = request.method === "tools/call" && (toolName === "engram.memory_store" || toolName === "remnic.memory_store" || toolName === "engram.suggestion_submit" || toolName === "remnic.suggestion_submit" || toolName === "engram.observe" || toolName === "remnic.observe" || toolName === "engram.lcm_compaction_flush" || toolName === "remnic.lcm_compaction_flush" || toolName === "engram.lcm_compaction_record" || toolName === "remnic.lcm_compaction_record" || toolName === "engram.capsule_export" || toolName === "remnic.capsule_export" || toolName === "engram.capsule_import" || toolName === "remnic.capsule_import" || !dreamsRunDryRun && (toolName === "engram.dreams_run" || toolName === "remnic.dreams_run") || !memoryActionApplyDryRun && (toolName === "engram.memory_action_apply" || toolName === "remnic.memory_action_apply") || (toolName === "engram.memory_correct_apply" || toolName === "remnic.memory_correct_apply" || toolName === "engram.memory_correct_plan" || toolName === "remnic.memory_correct_plan") || codingDecisionWrite || codingArchitectureWrite || codegraphWrite);
     if (isMcpWrite) {
       this.ensureWriteRateLimitAvailable();
     }
@@ -1935,7 +1982,8 @@ var EngramAccessHttpServer = class {
       const isError = result?.isError === true;
       const structured = result?.structuredContent;
       const isRejectedCodegraph = structured?.ok === false;
-      if (!isError && !isRejectedCodegraph && structured && this.shouldCountWriteRateLimit(structured)) {
+      const counts = structured ? this.shouldCountWriteRateLimit(structured) : true;
+      if (!isError && !isRejectedCodegraph && counts) {
         this.recordWriteRateLimitHit();
       }
     }
@@ -2302,4 +2350,4 @@ function positiveIntQueryParam(value, label) {
 export {
   EngramAccessHttpServer
 };
-//# sourceMappingURL=chunk-EJDAXR7O.js.map
+//# sourceMappingURL=chunk-VWB3HDY6.js.map