@remnic/core 9.3.708 → 9.3.709

package/dist/access-http.js

@@ -1,6 +1,6 @@
 import {
   EngramAccessHttpServer
-} from "./chunk-EJDAXR7O.js";
+} from "./chunk-VWB3HDY6.js";
 import "./chunk-SEDEKFYQ.js";
 import "./chunk-JBPKEARU.js";
 import "./chunk-TMSXWOBZ.js";
@@ -9,14 +9,14 @@ import "./chunk-RSUYKGGZ.js";
 import "./chunk-42NQ7AVG.js";
 import "./chunk-7RXCMVFQ.js";
 import "./chunk-7WV3F5DQ.js";
-import "./chunk-WSWYIKXX.js";
+import "./chunk-KOEKDZ6A.js";
 import "./chunk-T4WDJPEZ.js";
 import "./chunk-D24OXEPB.js";
-import "./chunk-24FGNOQS.js";
-import "./chunk-N75N5SNX.js";
+import "./chunk-P6PRSI3W.js";
+import "./chunk-XD33EX2F.js";
 import "./chunk-NUWZFSKC.js";
-import "./chunk-66TSLESZ.js";
-import "./chunk-STYMKPFT.js";
+import "./chunk-PKE7EJMX.js";
+import "./chunk-EVX52NCY.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import "./chunk-ARV3AUOM.js";
@@ -25,15 +25,15 @@ import "./chunk-ERA5RSMZ.js";
 import "./chunk-IQ7WCZRW.js";
 import "./chunk-BT7NVCML.js";
 import "./chunk-H7XKCNR6.js";
-import "./chunk-XKMDDM7P.js";
+import "./chunk-Y6PIFKXX.js";
 import "./chunk-SOBJ6NEY.js";
-import "./chunk-ESMY4RJ4.js";
+import "./chunk-XKU4YE6Z.js";
 import "./chunk-SHRRWOVY.js";
 import "./chunk-RS25QOKZ.js";
 import "./chunk-JGSKJHF7.js";
 import "./chunk-S4DDLTPX.js";
 import "./chunk-FF4KLI5W.js";
-import "./chunk-SPETAWFE.js";
+import "./chunk-AZVHBFI3.js";
 import "./chunk-K22IJO4R.js";
 import "./chunk-OMSTU233.js";
 import "./chunk-CYEPCZN5.js";
@@ -70,8 +70,8 @@ import "./chunk-DEUNUKTD.js";
 import "./chunk-2LSZVONP.js";
 import "./chunk-TBBDFYXW.js";
 import "./chunk-ZBJMUXZH.js";
-import "./chunk-W2WQ4LE7.js";
-import "./chunk-2VQYHHWB.js";
+import "./chunk-35YJ6KCV.js";
+import "./chunk-JSDZMOT7.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-3JJWNZTT.js";
 import "./chunk-5UZXUTVO.js";
@@ -81,7 +81,7 @@ import "./chunk-6CIAGZ6X.js";
 import "./chunk-SVOZFLIQ.js";
 import "./chunk-LTJAMRGI.js";
 import "./chunk-J6A3CX5N.js";
-import "./chunk-MLLTU5FX.js";
+import "./chunk-BOGENF7P.js";
 import "./chunk-RULE4VG5.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-MB5RSUW6.js";

package/dist/access-mcp.d.ts

@@ -1,7 +1,7 @@
 import { Readable, Writable } from 'node:stream';
-import { g as EngramAccessService } from './access-service-j1c1gptF.js';
-import './catalog-CKxilpzS.js';
-import './types-Couvz-L3.js';
+import { g as EngramAccessService } from './access-service-CoIA0NrG.js';
+import './catalog-DQCZrBjw.js';
+import './types-DUK4vVnN.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
 import './storage.js';
@@ -21,8 +21,7 @@ import './memory-provenance.js';
 import './user-model.js';
 import './recall-audit-anomaly.js';
 import './recall-audit.js';
-import './explicit-capture.js';
-import './orchestrator-D4ovYV3x.js';
+import './orchestrator-DsVKLEBk.js';
 import './briefing.js';
 import './buffer.js';
 import './extraction-faithfulness.js';
@@ -50,7 +49,7 @@ import './lcm/archive.js';
 import './lcm/summarizer.js';
 import './lcm/dag.js';
 import './lcm/queue.js';
-import './semantic-consolidation-DyMUCsfN.js';
+import './semantic-consolidation-_hVxkTuF.js';
 import './connectors/codex-materialize.js';
 import './logger.js';
 import './conversation-index/backend.js';
@@ -62,6 +61,7 @@ import 'zod';
 import './compounding/engine.js';
 import './policy-runtime.js';
 import './profiling.js';
+import './explicit-capture.js';
 import './cross-namespace-budget.js';
 import './graph-snapshot.js';
 import './graph.js';
@@ -142,6 +142,13 @@ declare class EngramMcpServer {
      */
     private readonly codegraphVisible;
     private readonly sessionDeltaVisible;
+    /**
+     * Whether the two correction tools (memory_correct_plan / memory_correct_apply)
+     * should appear in `tools/list` (issue #1580). Gated on `correction.enabled`
+     * (default true — plan is read-only; safe on). When false the tools array is
+     * byte-identical to pre-feature.
+     */
+    private readonly correctionVisible;
     constructor(service: EngramAccessService, options?: {
         principal?: string;
         citationsEnabled?: boolean;
@@ -151,6 +158,7 @@ declare class EngramMcpServer {
         architectureCardVisible?: boolean;
         codegraphVisible?: boolean;
         sessionDeltaVisible?: boolean;
+        correctionVisible?: boolean;
     });
     /** Get clientInfo for a specific MCP session. Returns undefined for non-MCP requests. */
     getClientInfo(sessionId?: string): {

package/dist/access-mcp.js

@@ -1,13 +1,13 @@
 import {
   EngramMcpServer
-} from "./chunk-WSWYIKXX.js";
+} from "./chunk-KOEKDZ6A.js";
 import "./chunk-T4WDJPEZ.js";
 import "./chunk-D24OXEPB.js";
-import "./chunk-24FGNOQS.js";
-import "./chunk-N75N5SNX.js";
+import "./chunk-P6PRSI3W.js";
+import "./chunk-XD33EX2F.js";
 import "./chunk-NUWZFSKC.js";
-import "./chunk-66TSLESZ.js";
-import "./chunk-STYMKPFT.js";
+import "./chunk-PKE7EJMX.js";
+import "./chunk-EVX52NCY.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import "./chunk-ARV3AUOM.js";
@@ -16,15 +16,15 @@ import "./chunk-ERA5RSMZ.js";
 import "./chunk-IQ7WCZRW.js";
 import "./chunk-BT7NVCML.js";
 import "./chunk-H7XKCNR6.js";
-import "./chunk-XKMDDM7P.js";
+import "./chunk-Y6PIFKXX.js";
 import "./chunk-SOBJ6NEY.js";
-import "./chunk-ESMY4RJ4.js";
+import "./chunk-XKU4YE6Z.js";
 import "./chunk-SHRRWOVY.js";
 import "./chunk-RS25QOKZ.js";
 import "./chunk-JGSKJHF7.js";
 import "./chunk-S4DDLTPX.js";
 import "./chunk-FF4KLI5W.js";
-import "./chunk-SPETAWFE.js";
+import "./chunk-AZVHBFI3.js";
 import "./chunk-K22IJO4R.js";
 import "./chunk-OMSTU233.js";
 import "./chunk-CYEPCZN5.js";
@@ -61,8 +61,8 @@ import "./chunk-DEUNUKTD.js";
 import "./chunk-2LSZVONP.js";
 import "./chunk-TBBDFYXW.js";
 import "./chunk-ZBJMUXZH.js";
-import "./chunk-W2WQ4LE7.js";
-import "./chunk-2VQYHHWB.js";
+import "./chunk-35YJ6KCV.js";
+import "./chunk-JSDZMOT7.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-3JJWNZTT.js";
 import "./chunk-5UZXUTVO.js";
@@ -72,7 +72,7 @@ import "./chunk-6CIAGZ6X.js";
 import "./chunk-SVOZFLIQ.js";
 import "./chunk-LTJAMRGI.js";
 import "./chunk-J6A3CX5N.js";
-import "./chunk-MLLTU5FX.js";
+import "./chunk-BOGENF7P.js";
 import "./chunk-RULE4VG5.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-MB5RSUW6.js";

package/dist/access-operations-batch.js

@@ -1,6 +1,6 @@
-import "./chunk-N75N5SNX.js";
-import "./chunk-66TSLESZ.js";
-import "./chunk-STYMKPFT.js";
+import "./chunk-XD33EX2F.js";
+import "./chunk-PKE7EJMX.js";
+import "./chunk-EVX52NCY.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import "./chunk-ARV3AUOM.js";
@@ -9,15 +9,15 @@ import "./chunk-ERA5RSMZ.js";
 import "./chunk-IQ7WCZRW.js";
 import "./chunk-BT7NVCML.js";
 import "./chunk-H7XKCNR6.js";
-import "./chunk-XKMDDM7P.js";
+import "./chunk-Y6PIFKXX.js";
 import "./chunk-SOBJ6NEY.js";
-import "./chunk-ESMY4RJ4.js";
+import "./chunk-XKU4YE6Z.js";
 import "./chunk-SHRRWOVY.js";
 import "./chunk-RS25QOKZ.js";
 import "./chunk-JGSKJHF7.js";
 import "./chunk-S4DDLTPX.js";
 import "./chunk-FF4KLI5W.js";
-import "./chunk-SPETAWFE.js";
+import "./chunk-AZVHBFI3.js";
 import "./chunk-K22IJO4R.js";
 import "./chunk-OMSTU233.js";
 import "./chunk-CYEPCZN5.js";
@@ -54,8 +54,8 @@ import "./chunk-DEUNUKTD.js";
 import "./chunk-2LSZVONP.js";
 import "./chunk-TBBDFYXW.js";
 import "./chunk-ZBJMUXZH.js";
-import "./chunk-W2WQ4LE7.js";
-import "./chunk-2VQYHHWB.js";
+import "./chunk-35YJ6KCV.js";
+import "./chunk-JSDZMOT7.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-3JJWNZTT.js";
 import "./chunk-5UZXUTVO.js";
@@ -65,7 +65,7 @@ import "./chunk-6CIAGZ6X.js";
 import "./chunk-SVOZFLIQ.js";
 import "./chunk-LTJAMRGI.js";
 import "./chunk-J6A3CX5N.js";
-import "./chunk-MLLTU5FX.js";
+import "./chunk-BOGENF7P.js";
 import "./chunk-RULE4VG5.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-MB5RSUW6.js";

package/dist/access-operations.d.ts

@@ -1,9 +1,9 @@
 import { OperationName, BoundOperation } from './access-boundary.js';
 import { MemoryStoreRequest } from './access-schema.js';
-import { A as ArchitectureSurfaceRequest, a as ArchitectureSurfaceResponse, D as DecisionSurfaceRequest, b as DecisionSurfaceResponse, c as DeltaSurfaceRequest, d as DeltaSurfaceResponse, E as EngramAccessMemoryResponse, e as EngramAccessWriteResponse, C as CodegraphSurfaceRequest, f as CodegraphSurfaceResponse } from './access-service-j1c1gptF.js';
+import { A as ArchitectureSurfaceRequest, a as ArchitectureSurfaceResponse, D as DecisionSurfaceRequest, b as DecisionSurfaceResponse, c as DeltaSurfaceRequest, d as DeltaSurfaceResponse, E as EngramAccessMemoryResponse, e as EngramAccessWriteResponse, C as CodegraphSurfaceRequest, f as CodegraphSurfaceResponse } from './access-service-CoIA0NrG.js';
 import 'zod';
-import './catalog-CKxilpzS.js';
-import './types-Couvz-L3.js';
+import './catalog-DQCZrBjw.js';
+import './types-DUK4vVnN.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
 import './storage.js';
@@ -23,8 +23,7 @@ import './memory-provenance.js';
 import './user-model.js';
 import './recall-audit-anomaly.js';
 import './recall-audit.js';
-import './explicit-capture.js';
-import './orchestrator-D4ovYV3x.js';
+import './orchestrator-DsVKLEBk.js';
 import './briefing.js';
 import './buffer.js';
 import './extraction-faithfulness.js';
@@ -52,7 +51,7 @@ import './lcm/archive.js';
 import './lcm/summarizer.js';
 import './lcm/dag.js';
 import './lcm/queue.js';
-import './semantic-consolidation-DyMUCsfN.js';
+import './semantic-consolidation-_hVxkTuF.js';
 import './connectors/codex-materialize.js';
 import './logger.js';
 import './conversation-index/backend.js';
@@ -63,6 +62,7 @@ import './shared-context/manager.js';
 import './compounding/engine.js';
 import './policy-runtime.js';
 import './profiling.js';
+import './explicit-capture.js';
 import './cross-namespace-budget.js';
 import './graph-snapshot.js';
 import './graph.js';
@@ -136,6 +136,26 @@ type CodingDeltaOutput = {
     result: DeltaSurfaceResponse;
 };
 declare const codingDeltaOperation: BoundOperation<DeltaSurfaceRequest, CodingDeltaOutput>;
+interface MemoryCorrectPlanInput {
+    text: string;
+    targetIds?: string[];
+    sessionKey?: string;
+    namespace?: string;
+}
+interface MemoryCorrectPlanOutput {
+    readonly result: unknown;
+}
+declare const memoryCorrectPlanOperation: BoundOperation<MemoryCorrectPlanInput, MemoryCorrectPlanOutput>;
+interface MemoryCorrectApplyInput {
+    planId: string;
+    confirm?: boolean;
+    sessionKey?: string;
+    namespace?: string;
+}
+interface MemoryCorrectApplyOutput {
+    readonly result: unknown;
+}
+declare const memoryCorrectApplyOperation: BoundOperation<MemoryCorrectApplyInput, MemoryCorrectApplyOutput>;
 /**
  * The canonical short names (no `engram.`/`remnic.` prefix) of the operations
  * the boundary owns today. The fitness test treats this set as the migrated
@@ -184,6 +204,6 @@ declare const codegraphIngestTracesOperation: BoundOperation<CodegraphSurfaceReq
     result: CodegraphSurfaceResponse;
 }>;
 
-declare const REGISTERED_OPERATIONS: readonly [OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName];
+declare const REGISTERED_OPERATIONS: readonly [OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName, OperationName];
 
-export { type CodingArchitectureInput, type CodingArchitectureOutput, type CodingDecisionInput, type CodingDecisionOutput, type CodingDeltaInput, type CodingDeltaOutput, type MemoryGetInput, type MemoryGetOutput, type MemorySearchInput, type MemorySearchOutput, type MemoryStoreInput, type MemoryStoreOutput, REGISTERED_OPERATIONS, codegraphDeleteProjectOperation, codegraphDetectChangesOperation, codegraphGetArchitectureOperation, codegraphGetSchemaOperation, codegraphGetSnippetOperation, codegraphIndexOperation, codegraphIndexStatusOperation, codegraphIngestTracesOperation, codegraphListProjectsOperation, codegraphManageAdrOperation, codegraphQueryGraphOperation, codegraphSearchCodeOperation, codegraphSearchGraphOperation, codegraphTracePathOperation, codingArchitectureOperation, codingDecisionOperation, codingDeltaOperation, memoryGetOperation, memorySearchOperation, memoryStoreOperation };
+export { type CodingArchitectureInput, type CodingArchitectureOutput, type CodingDecisionInput, type CodingDecisionOutput, type CodingDeltaInput, type CodingDeltaOutput, type MemoryCorrectApplyInput, type MemoryCorrectApplyOutput, type MemoryCorrectPlanInput, type MemoryCorrectPlanOutput, type MemoryGetInput, type MemoryGetOutput, type MemorySearchInput, type MemorySearchOutput, type MemoryStoreInput, type MemoryStoreOutput, REGISTERED_OPERATIONS, codegraphDeleteProjectOperation, codegraphDetectChangesOperation, codegraphGetArchitectureOperation, codegraphGetSchemaOperation, codegraphGetSnippetOperation, codegraphIndexOperation, codegraphIndexStatusOperation, codegraphIngestTracesOperation, codegraphListProjectsOperation, codegraphManageAdrOperation, codegraphQueryGraphOperation, codegraphSearchCodeOperation, codegraphSearchGraphOperation, codegraphTracePathOperation, codingArchitectureOperation, codingDecisionOperation, codingDeltaOperation, memoryCorrectApplyOperation, memoryCorrectPlanOperation, memoryGetOperation, memorySearchOperation, memoryStoreOperation };

package/dist/access-operations.js

@@ -17,14 +17,16 @@ import {
   codingArchitectureOperation,
   codingDecisionOperation,
   codingDeltaOperation,
+  memoryCorrectApplyOperation,
+  memoryCorrectPlanOperation,
   memoryGetOperation,
   memorySearchOperation,
   memoryStoreOperation
-} from "./chunk-24FGNOQS.js";
-import "./chunk-N75N5SNX.js";
+} from "./chunk-P6PRSI3W.js";
+import "./chunk-XD33EX2F.js";
 import "./chunk-NUWZFSKC.js";
-import "./chunk-66TSLESZ.js";
-import "./chunk-STYMKPFT.js";
+import "./chunk-PKE7EJMX.js";
+import "./chunk-EVX52NCY.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import "./chunk-ARV3AUOM.js";
@@ -33,15 +35,15 @@ import "./chunk-ERA5RSMZ.js";
 import "./chunk-IQ7WCZRW.js";
 import "./chunk-BT7NVCML.js";
 import "./chunk-H7XKCNR6.js";
-import "./chunk-XKMDDM7P.js";
+import "./chunk-Y6PIFKXX.js";
 import "./chunk-SOBJ6NEY.js";
-import "./chunk-ESMY4RJ4.js";
+import "./chunk-XKU4YE6Z.js";
 import "./chunk-SHRRWOVY.js";
 import "./chunk-RS25QOKZ.js";
 import "./chunk-JGSKJHF7.js";
 import "./chunk-S4DDLTPX.js";
 import "./chunk-FF4KLI5W.js";
-import "./chunk-SPETAWFE.js";
+import "./chunk-AZVHBFI3.js";
 import "./chunk-K22IJO4R.js";
 import "./chunk-OMSTU233.js";
 import "./chunk-CYEPCZN5.js";
@@ -78,8 +80,8 @@ import "./chunk-DEUNUKTD.js";
 import "./chunk-2LSZVONP.js";
 import "./chunk-TBBDFYXW.js";
 import "./chunk-ZBJMUXZH.js";
-import "./chunk-W2WQ4LE7.js";
-import "./chunk-2VQYHHWB.js";
+import "./chunk-35YJ6KCV.js";
+import "./chunk-JSDZMOT7.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-3JJWNZTT.js";
 import "./chunk-5UZXUTVO.js";
@@ -89,7 +91,7 @@ import "./chunk-6CIAGZ6X.js";
 import "./chunk-SVOZFLIQ.js";
 import "./chunk-LTJAMRGI.js";
 import "./chunk-J6A3CX5N.js";
-import "./chunk-MLLTU5FX.js";
+import "./chunk-BOGENF7P.js";
 import "./chunk-RULE4VG5.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-MB5RSUW6.js";
@@ -160,6 +162,8 @@ export {
   codingArchitectureOperation,
   codingDecisionOperation,
   codingDeltaOperation,
+  memoryCorrectApplyOperation,
+  memoryCorrectPlanOperation,
   memoryGetOperation,
   memorySearchOperation,
   memoryStoreOperation

package/dist/access-schema.d.ts

@@ -718,20 +718,20 @@ declare const actionConfidenceRequestSchema: z.ZodObject<{
         matched: z.ZodEffects<z.ZodNullable<z.ZodOptional<z.ZodBoolean>>, boolean | undefined, boolean | null | undefined>;
     }, "strict", z.ZodTypeAny, {
         kind: "never" | "do-not-use-outside-this-context" | "ask-before" | "requires-escalation";
-        description?: string | undefined;
         matched?: boolean | undefined;
+        description?: string | undefined;
     }, {
         kind: "never" | "do-not-use-outside-this-context" | "ask-before" | "requires-escalation";
-        description?: string | null | undefined;
         matched?: boolean | null | undefined;
+        description?: string | null | undefined;
     }>, "many">>>, {
         kind: "never" | "do-not-use-outside-this-context" | "ask-before" | "requires-escalation";
-        description?: string | undefined;
         matched?: boolean | undefined;
+        description?: string | undefined;
     }[] | undefined, {
         kind: "never" | "do-not-use-outside-this-context" | "ask-before" | "requires-escalation";
-        description?: string | null | undefined;
         matched?: boolean | null | undefined;
+        description?: string | null | undefined;
     }[] | null | undefined>;
     retrievedMemories: z.ZodEffects<z.ZodNullable<z.ZodOptional<z.ZodArray<z.ZodObject<{
         source: z.ZodEffects<z.ZodNullable<z.ZodOptional<z.ZodString>>, string | undefined, string | null | undefined>;
@@ -812,8 +812,8 @@ declare const actionConfidenceRequestSchema: z.ZodObject<{
     contextReadiness?: NonNullable<"none" | "partial" | "sufficient"> | undefined;
     userRules?: {
         kind: "never" | "do-not-use-outside-this-context" | "ask-before" | "requires-escalation";
-        description?: string | undefined;
         matched?: boolean | undefined;
+        description?: string | undefined;
     }[] | undefined;
     retrievedMemories?: {
         source?: string | undefined;
@@ -838,8 +838,8 @@ declare const actionConfidenceRequestSchema: z.ZodObject<{
     contextReadiness?: "none" | "partial" | "sufficient" | null | undefined;
     userRules?: {
         kind: "never" | "do-not-use-outside-this-context" | "ask-before" | "requires-escalation";
-        description?: string | null | undefined;
         matched?: boolean | null | undefined;
+        description?: string | null | undefined;
     }[] | null | undefined;
     retrievedMemories?: {
         source?: string | null | undefined;

package/dist/{access-service-j1c1gptF.d.ts → access-service-CoIA0NrG.d.ts}

@@ -1,13 +1,13 @@
-import { b as NamespaceRecord } from './catalog-CKxilpzS.js';
-import { aL as ScopeProfileLayerId, aM as ScopeProfilePromotionTarget, aN as ScopeProfileConfig, P as PluginConfig, aG as CodingContext, a2 as DaySummaryResult, i as RecallPlanMode, j as RecallDisclosure, g as MemoryFile, m as MemoryLifecycleEvent, E as EntityFile, h as MemoryStatus, aO as DreamsStatusResult, aP as DreamsPhase, aQ as DreamsRunResult } from './types-Couvz-L3.js';
+import { b as NamespaceRecord } from './catalog-DQCZrBjw.js';
+import { aL as ScopeProfileLayerId, aM as ScopeProfilePromotionTarget, aN as ScopeProfileConfig, P as PluginConfig, aG as CodingContext, M as MemoryCategory, a2 as DaySummaryResult, i as RecallPlanMode, j as RecallDisclosure, g as MemoryFile, m as MemoryLifecycleEvent, E as EntityFile, h as MemoryStatus, aO as DreamsStatusResult, aP as DreamsPhase, aQ as DreamsRunResult } from './types-DUK4vVnN.js';
 import { StorageManager } from './storage.js';
 import { a as Peer, b as PeerProfile } from './types-B1VHaf2w.js';
 import { RecallExplainJsonPayload } from './recall-explain-renderer.js';
 import { AnomalyDetectorResult } from './recall-audit-anomaly.js';
+import { O as Orchestrator, I as IntentDebugSnapshot, G as GraphRecallSnapshot, P as PatternReinforcementResult, W as WearablesService } from './orchestrator-DsVKLEBk.js';
 import { ExplicitCaptureInput } from './explicit-capture.js';
 import { BudgetDecision } from './cross-namespace-budget.js';
 import { readMemoryGovernanceRunArtifact } from './maintenance/memory-governance.js';
-import { O as Orchestrator, I as IntentDebugSnapshot, G as GraphRecallSnapshot, P as PatternReinforcementResult, W as WearablesService } from './orchestrator-D4ovYV3x.js';
 import { LiveConnectorsRunSummary } from './live-connectors-runner.js';
 import { LastRecallSnapshot } from './recall-state.js';
 import { GraphSnapshotRequest, GraphSnapshotResponse } from './graph-snapshot.js';
@@ -745,6 +745,167 @@ type DeltaSurfaceResponse = {
     nextState?: LastSeenState;
 };
 
+/**
+ * correction/correction-contract.ts — Types for the Correction Contract
+ * (issue #1580).
+ *
+ * The Correction Contract is the SINGLE plan/apply pipeline every memory
+ * correction flows through: supersession, invalidation, tombstone, edit,
+ * rescope, redaction. A correction arrives as a plain-language statement
+ * ("we migrated to MySQL in March"); the planner turns it into a structured
+ * {@link CorrectionPlan}; the executor applies the plan in non-destructive
+ * order through the existing storage/orchestrator chokepoints.
+ *
+ * This module is PURE types + validation helpers — no I/O, no side effects.
+ * The planner and executor live in sibling modules and inject their own
+ * collaborators so the contract is testable in isolation (rule 33).
+ *
+ * Design rules honored (issue #1580 design section):
+ *   - Plans are per-request state on disk, never module-level (rules 11/47).
+ *   - Caller-supplied namespaces are NEVER trusted raw — the service
+ *     resolves them through the normal namespace policy (rule 42).
+ *   - Bulk operations refuse past maxAffected (no silent truncation, §39).
+ *   - `never_store` redaction patterns must be bounded and safe (§34).
+ */
+
+/**
+ * The user-facing input: a plain-language correction plus optional explicit
+ * targets. This is what every surface (MCP / HTTP / CLI) collects before
+ * handing off to the planner.
+ */
+interface CorrectionRequest {
+    /** Natural-language correction statement. Required, non-empty. */
+    text: string;
+    /**
+     * Explicit target memory ids (or handles via #1582). When present the
+     * planner resolves these directly; an unknown id is an explicit error
+     * (rule 34), never a silent empty plan. When absent the planner searches.
+     */
+    targetIds?: string[];
+    /** Session key for namespace/principal resolution. */
+    sessionKey?: string;
+    /** Authenticated principal (resolved by the service, never trusted raw). */
+    principal?: string;
+    /**
+     * Caller-suggested namespace. ALWAYS re-resolved through the namespace
+     * policy by the service before reaching the planner (rule 42). The
+     * planner only sees the ALREADY-AUTHORIZED namespace.
+     */
+    namespace?: string;
+}
+type CorrectionClassification = "wrong" | "outdated" | "incomplete" | "wrong_scope" | "never_store";
+/**
+ * A draft for a replacement memory (supersede action). Mirrors the subset of
+ * {@link MemoryFrontmatter} a correction caller may legitimately set; the
+ * executor fills in id/created/updated/source.
+ */
+interface MemoryDraft {
+    content: string;
+    category?: MemoryCategory;
+    confidence?: number;
+    tags?: string[];
+    entityRef?: string;
+    /** Optional event-time anchor for bi-temporal supersession (#1578). */
+    validAt?: string;
+    /** Optional observed-at anchor for bi-temporal supersession (#1578). */
+    observedAt?: string;
+    structuredAttributes?: Record<string, string>;
+}
+type CorrectionAction = 
+/** Outdated: a new fact replaces the loser. */
+{
+    kind: "supersede";
+    loserId: string;
+    replacement?: MemoryDraft;
+}
+/** Incomplete / minor-wrong: a versioned edit to an existing memory. */
+ | {
+    kind: "edit";
+    memoryId: string;
+    patch: string;
+}
+/** Wrong: retire + tombstone. */
+ | {
+    kind: "retract";
+    memoryId: string;
+}
+/** Wrong scope: move to a different namespace. */
+ | {
+    kind: "rescope";
+    memoryId: string;
+    toNamespace: string;
+}
+/** Never-store: a future-extraction redaction rule. */
+ | {
+    kind: "redaction_rule";
+    pattern: string;
+};
+/**
+ * One affected memory in a plan: where it lives, an excerpt, why it is
+ * affected, and (when available) the source quote that supports the
+ * correction (#1575 provenance).
+ */
+interface CorrectionAffectedEntry {
+    memoryId: string;
+    /** File path relative to the storage dir, for diff rendering. */
+    path: string;
+    excerpt: string;
+    why: string;
+    sourceQuote?: string;
+}
+/**
+ * A persisted, expiring correction plan. Read-only artifact produced by the
+ * planner; consumed (once) by the executor.
+ */
+interface CorrectionPlan {
+    planId: string;
+    request: CorrectionRequest;
+    /** Authorized namespace the plan is scoped to (resolved by the service). */
+    namespace: string;
+    affected: CorrectionAffectedEntry[];
+    classification: CorrectionClassification;
+    actions: CorrectionAction[];
+    /** Human-readable diff preview rendered via page-versioning. */
+    diff: string;
+    /** Planner confidence in [0, 1]. `0` means manual selection required. */
+    confidence: number;
+    warnings: string[];
+    createdAt: string;
+    /** ISO timestamp after which apply rejects the plan as expired. */
+    expiresAt: string;
+    /**
+     * Lifecycle: `pending` → `applying` → `applied`|`partial` (or `discarded`).
+     * The executor flips a plan to `applying` BEFORE running any mutation
+     * (review thread OgIqt): if the process dies mid-apply, the plan stays
+     * `applying` and is NOT silently retryable — a partially-applied plan must
+     * never be re-applied wholesale (it would duplicate succeeded actions).
+     */
+    status?: "pending" | "applying" | "applied" | "discarded" | "partial";
+}
+/**
+ * Per-action outcome recorded by the executor. An action whose new-state
+ * write failed is `failed`; the executor never destroys old state for a
+ * failed action (rule 25 / checklist §14).
+ */
+interface CorrectionActionResult {
+    action: CorrectionAction;
+    status: "applied" | "failed" | "skipped";
+    /** For supersede: the new memory id. For edit: the memory id. */
+    memoryId?: string;
+    /** For supersede/retract: the emitted tombstone id (if any). */
+    tombstoneId?: string;
+    error?: string;
+}
+interface CorrectionOutcome {
+    planId: string;
+    status: "applied" | "partial";
+    results: CorrectionActionResult[];
+    /** Audit-record memory id (corrections are themselves memories). */
+    auditMemoryId: string;
+    /** ISO timestamp of the apply. */
+    appliedAt: string;
+}
+
 /**
  * Procedural memory stats surface (issue #567 PR 5/5).
  *
@@ -1791,6 +1952,28 @@ declare class EngramAccessService {
      * `<memoryDir>/state/coding-knowledge/<namespace>.json`.
      */
     codingDelta(request: DeltaSurfaceRequest, authenticatedPrincipal?: string): Promise<DeltaSurfaceResponse>;
+    /** Whether the memory_correct_plan / memory_correct_apply tools should appear in tools/list (rule 39). Same reader as the runtime gate so visibility + enforcement stay in sync. */
+    get correctionSurfaceVisible(): boolean;
+    private _correctionService;
+    /** Lazily construct + cache the CorrectionService with deps wired from the orchestrator. */
+    private correctionService;
+    correctionPlan(request: CorrectionRequest): Promise<CorrectionPlan>;
+    correctionApply(planId: string, opts: {
+        confirm?: boolean;
+        namespace?: string;
+        sessionKey?: string;
+        principal?: string;
+    }): Promise<CorrectionOutcome>;
+    correctionListPending(opts: {
+        namespace?: string;
+        sessionKey?: string;
+        principal?: string;
+    }): Promise<CorrectionPlan[]>;
+    correctionDiscard(planId: string, opts: {
+        namespace?: string;
+        sessionKey?: string;
+        principal?: string;
+    }): Promise<void>;
     memoryBrowse(request?: EngramAccessMemoryBrowseRequest): Promise<EngramAccessMemoryBrowseResponse>;
     memoryTimeline(memoryId: string, namespace?: string, limit?: number, principal?: string): Promise<EngramAccessTimelineResponse>;
     entityList(options?: {