@remnic/core 9.3.716 → 9.3.717

package/dist/mcp-memory-inspector-app.d.ts

@@ -1,4 +1,4 @@
-import { h as EngramAccessRecallResponse } from './access-service-BW8cm_uU.js';
+import { h as EngramAccessRecallResponse } from './access-service-d4Tk-Dlr.js';
 import { ActionConfidenceRequest } from './access-schema.js';
 import { RecallXraySnapshot } from './recall-xray.js';
 import { ActionConfidenceResult } from './action-confidence.js';
@@ -22,7 +22,7 @@ import './memory-provenance.js';
 import './user-model.js';
 import './recall-audit-anomaly.js';
 import './recall-audit.js';
-import './orchestrator-vygo2YIM.js';
+import './orchestrator-XPKhY2OV.js';
 import './briefing.js';
 import './buffer.js';
 import './extraction-faithfulness.js';

package/dist/operator-toolkit.js

@@ -13,12 +13,12 @@ import {
   summarizeProvenanceCoverage,
   summarizeTierDistribution,
   summarizeTombstoneStatus
-} from "./chunk-RBHANGVX.js";
+} from "./chunk-BZAK3RBN.js";
 import "./chunk-VO4UICII.js";
 import "./chunk-7XH7VJN4.js";
 import "./chunk-YBPYIAA5.js";
-import "./chunk-GM3BMWKR.js";
-import "./chunk-6QUPUTT7.js";
+import "./chunk-KHQ433G5.js";
+import "./chunk-DZYARLJ7.js";
 import "./chunk-MPHDVHIB.js";
 import "./chunk-KFY3SGN7.js";
 import "./chunk-CMTINOFS.js";
@@ -31,6 +31,7 @@ import "./chunk-Z5LAYHGJ.js";
 import "./chunk-OO42R444.js";
 import "./chunk-K6MV3TRQ.js";
 import "./chunk-XZTUMWKQ.js";
+import "./chunk-J6BH2OBA.js";
 import "./chunk-CTOQEZSN.js";
 import "./chunk-2KAYTPPT.js";
 import "./chunk-WRFKZEO6.js";
@@ -86,6 +87,7 @@ import "./chunk-J2HSAU72.js";
 import "./chunk-A6XUJE5D.js";
 import "./chunk-P7FMDTKL.js";
 import "./chunk-VS2IYZRU.js";
+import "./chunk-UZYLX7M6.js";
 import "./chunk-U3PN77QT.js";
 import "./chunk-RVLB4E6N.js";
 import "./chunk-5GKPFL3S.js";

package/dist/orchestration/maintenance.js

@@ -1,10 +1,12 @@
 import {
   MaintenanceScheduler
-} from "../chunk-O62P2LFL.js";
+} from "../chunk-VZQXJNBD.js";
 import "../chunk-666A3MOW.js";
-import "../chunk-6QUPUTT7.js";
+import "../chunk-DZYARLJ7.js";
 import "../chunk-MPHDVHIB.js";
+import "../chunk-J6BH2OBA.js";
 import "../chunk-ZFXCQPNO.js";
+import "../chunk-O75CRYGF.js";
 import "../chunk-OC56UWV5.js";
 import "../chunk-3JJWNZTT.js";
 import "../chunk-M7XQSUBB.js";
@@ -37,6 +39,7 @@ import "../chunk-J2HSAU72.js";
 import "../chunk-A6XUJE5D.js";
 import "../chunk-P7FMDTKL.js";
 import "../chunk-VS2IYZRU.js";
+import "../chunk-UZYLX7M6.js";
 import "../chunk-U3PN77QT.js";
 import "../chunk-RVLB4E6N.js";
 import "../chunk-5GKPFL3S.js";

package/dist/{orchestrator-vygo2YIM.d.ts → orchestrator-XPKhY2OV.d.ts}

@@ -1248,7 +1248,7 @@ declare class Orchestrator {
         readFallbacks: string[];
     } | null;
     getStorageForNamespace(namespace?: string): Promise<StorageManager>;
-    private configuredNamespaces;
+    private configuredNamespaceList;
     private rememberNamespaceStorageDirHint;
     private storageDirMatchesNamespaceHint;
     private namespaceStorageDirHintOwnershipRank;
@@ -1968,7 +1968,7 @@ declare class Orchestrator {
     private graphSeedPathRelativeToStorage;
     private graphSeedPathsWithinDeadline;
     private namespaceFromPath;
-    private namespaceFromStorageDir;
+    private storageDirNamespace;
     /**
      * Public best-effort catalog write touch (issue #1499). User-facing explicit
      * captures (`memory_store`) and review-queue approvals persist via

package/dist/orchestrator.d.ts

@@ -9,7 +9,7 @@ import './local-llm.js';
 import './fallback-llm.js';
 import './orchestration/maintenance.js';
 import './live-connectors-runner.js';
-export { L as BulkImportBatchIngestResult, M as BulkImportBatchPartialFailureError, N as GraphRecallRankedResult, Q as GraphRecallShadowComparison, G as GraphRecallSnapshot, I as IntentDebugSnapshot, O as Orchestrator, T as QmdRecallSnapshot, U as RecallInvocationOptions, V as RecallModeDecision, X as appendMemoryToGraphContext, Y as blendGraphExpandedRecallScore, Z as buildCompressionGuidelinesMarkdown, _ as buildMemoryPathById, $ as computeArtifactCandidateFetchLimit, a0 as computeArtifactRecallLimit, a1 as computeQmdHybridFetchLimit, a2 as dedupeEntitySynthesisEvidenceEntries, q as defaultWorkspaceDir, a3 as deriveTopicsFromExtraction, a4 as filterRecallCandidates, a5 as formatCompressionGuidelinesForRecall, a6 as graphPathRelativeToStorage, a7 as hasIdentityRecoveryIntent, a8 as isArtifactMemoryPath, a9 as lifecycleRecallScoreAdjustment, aa as mergeArtifactRecallCandidates, ab as mergeGraphExpandedResults, ac as resolveEffectiveIdentityInjectionMode, ad as resolveEffectiveRecallMode, ae as resolvePersistedMemoryRelativePath, af as resolveRecallModeDecision, ag as resolveRecallModeDecisionAsync, ah as resolveRecentThreadMemoryPaths, A as sanitizeSessionKeyForFilename, ai as shouldFilterLifecycleRecallCandidate, aj as summarizeGraphShadowComparison } from './orchestrator-vygo2YIM.js';
+export { L as BulkImportBatchIngestResult, M as BulkImportBatchPartialFailureError, N as GraphRecallRankedResult, Q as GraphRecallShadowComparison, G as GraphRecallSnapshot, I as IntentDebugSnapshot, O as Orchestrator, T as QmdRecallSnapshot, U as RecallInvocationOptions, V as RecallModeDecision, X as appendMemoryToGraphContext, Y as blendGraphExpandedRecallScore, Z as buildCompressionGuidelinesMarkdown, _ as buildMemoryPathById, $ as computeArtifactCandidateFetchLimit, a0 as computeArtifactRecallLimit, a1 as computeQmdHybridFetchLimit, a2 as dedupeEntitySynthesisEvidenceEntries, q as defaultWorkspaceDir, a3 as deriveTopicsFromExtraction, a4 as filterRecallCandidates, a5 as formatCompressionGuidelinesForRecall, a6 as graphPathRelativeToStorage, a7 as hasIdentityRecoveryIntent, a8 as isArtifactMemoryPath, a9 as lifecycleRecallScoreAdjustment, aa as mergeArtifactRecallCandidates, ab as mergeGraphExpandedResults, ac as resolveEffectiveIdentityInjectionMode, ad as resolveEffectiveRecallMode, ae as resolvePersistedMemoryRelativePath, af as resolveRecallModeDecision, ag as resolveRecallModeDecisionAsync, ah as resolveRecentThreadMemoryPaths, A as sanitizeSessionKeyForFilename, ai as shouldFilterLifecycleRecallCandidate, aj as summarizeGraphShadowComparison } from './orchestrator-XPKhY2OV.js';
 import './model-registry.js';
 import './relevance.js';
 import './negative.js';

package/dist/orchestrator.js

@@ -28,9 +28,9 @@ import {
   sanitizeSessionKeyForFilename,
   shouldFilterLifecycleRecallCandidate,
   summarizeGraphShadowComparison
-} from "./chunk-SQ4LU27I.js";
+} from "./chunk-CTUWGJRI.js";
 import "./chunk-DGTDRIUO.js";
-import "./chunk-O62P2LFL.js";
+import "./chunk-VZQXJNBD.js";
 import "./chunk-7HYPN2GC.js";
 import "./chunk-666A3MOW.js";
 import "./chunk-HHLLAQGZ.js";
@@ -105,8 +105,8 @@ import "./chunk-JVEMUX6L.js";
 import "./chunk-ZRWB5D4H.js";
 import "./chunk-GY3SKOS4.js";
 import "./chunk-SFQ6QNL7.js";
-import "./chunk-GM3BMWKR.js";
-import "./chunk-6QUPUTT7.js";
+import "./chunk-KHQ433G5.js";
+import "./chunk-DZYARLJ7.js";
 import "./chunk-MPHDVHIB.js";
 import "./chunk-KFY3SGN7.js";
 import "./chunk-33JBK2XP.js";
@@ -139,12 +139,13 @@ import "./chunk-NDAH7BJ5.js";
 import "./chunk-Z5LAYHGJ.js";
 import "./chunk-OADWQ5CR.js";
 import "./chunk-7WV3F5DQ.js";
-import "./chunk-SHRRWOVY.js";
+import "./chunk-2KF4HDG2.js";
 import "./chunk-RS25QOKZ.js";
 import "./chunk-JGSKJHF7.js";
 import "./chunk-S4DDLTPX.js";
 import "./chunk-FF4KLI5W.js";
 import "./chunk-AJOIM6UR.js";
+import "./chunk-J6BH2OBA.js";
 import "./chunk-CTOQEZSN.js";
 import "./chunk-2KAYTPPT.js";
 import "./chunk-WRFKZEO6.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.3.716",
+  "version": "9.3.717",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -2966,7 +2966,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.3.716"
+    "@remnic/coding-graph": "^9.3.717"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/access-service.ts

@@ -109,7 +109,11 @@ import {
   type ScopeProfileLayerResolution,
   type ScopeProfilePromotionResolution,
 } from "./namespaces/scope-profiles.js";
-import { type ScopePlan, resolveScopePlan } from "./scopes/scope-plan.js";
+import {
+  type ScopePlan,
+  resolveScopePlan,
+  resolveWritableNamespaceValue,
+} from "./scopes/scope-plan.js";
 import { namespaceIdentityFromToken } from "./namespaces/identity.js";
 import { namespaceCollectionName } from "./namespaces/search.js";
 import { SecureStoreLockedError } from "./secure-store/index.js";
@@ -1367,17 +1371,28 @@ export class EngramAccessService {
     return resolvePrincipal(sessionKey, this.orchestrator.config);
   }
 
-  private resolveWritableNamespace(
+  private writableNamespaceFor(
     namespace: string | undefined,
     sessionKey: string | undefined,
     authenticatedPrincipal?: string,
   ): string {
-    const resolved = this.resolveNamespace(namespace);
-    const principal = this.resolveRequestPrincipal(sessionKey, authenticatedPrincipal);
-    if (!canWriteNamespace(principal, resolved, this.orchestrator.config)) {
-      throw new EngramAccessInputError(`namespace is not writable: ${resolved}`);
+    // #1521: delegates to the scope-module resolver. The inline
+    // namespace/principal resolution + writability check is retired so the
+    // adHocNamespaceResolutions ratchet no longer counts this site.
+    const result = resolveWritableNamespaceValue(
+      namespace,
+      sessionKey,
+      authenticatedPrincipal,
+      this.orchestrator.config,
+    );
+    if (!result.ok) {
+      throw new EngramAccessInputError(
+        result.reason === "unsupported"
+          ? `unsupported namespace: ${result.namespace}`
+          : `namespace is not writable: ${result.namespace}`,
+      );
     }
-    return resolved;
+    return result.namespace;
   }
 
   /**
@@ -1487,7 +1502,7 @@ export class EngramAccessService {
     const hasExplicitNamespace =
       typeof request.namespace === "string" && request.namespace.trim().length > 0;
     if (hasExplicitNamespace) {
-      return this.resolveWritableNamespace(
+      return this.writableNamespaceFor(
         request.namespace,
         request.sessionKey,
         request.authenticatedPrincipal,
@@ -1509,7 +1524,7 @@ export class EngramAccessService {
     if (!overlay) {
       // No coding overlay → unqualified write stays on config.defaultNamespace,
       // exactly the pre-#1434 behavior (auth-checked, like the legacy path).
-      return this.resolveWritableNamespace(
+      return this.writableNamespaceFor(
         undefined,
         request.sessionKey,
         request.authenticatedPrincipal,
@@ -1624,7 +1639,7 @@ export class EngramAccessService {
       // The overlay never applies, so base == write == the explicit namespace.
       // Objective-state converges on the same explicit target (the stricter
       // principal-self contract only governs the IMPLICIT path).
-      const writeNamespace = this.resolveWritableNamespace(
+      const writeNamespace = this.writableNamespaceFor(
         request.namespace,
         request.sessionKey,
         request.authenticatedPrincipal,
@@ -1779,7 +1794,7 @@ export class EngramAccessService {
       // namespace), collapsing the namespaces-disabled / no-session /
       // projectScope-off cases to config.defaultNamespace exactly as before
       // (rule 39 parity with resolveCodingScopedWriteNamespace).
-      const writeNamespace = this.resolveWritableNamespace(
+      const writeNamespace = this.writableNamespaceFor(
         undefined,
         request.sessionKey,
         request.authenticatedPrincipal,
@@ -4757,7 +4772,7 @@ export class EngramAccessService {
     const service = createCorrectionService({
       orchestrator: this.orchestrator,
       resolveAuthorizedNamespace: async (req) =>
-        this.resolveWritableNamespace(req.namespace, req.sessionKey, req.principal),
+        this.writableNamespaceFor(req.namespace, req.sessionKey, req.principal),
       resolveReadableNamespaces: (req) => {
         const principal = this.resolveRequestPrincipal(req.sessionKey, req.principal);
         return recallNamespacesForPrincipal(principal, this.orchestrator.config);
@@ -4766,7 +4781,7 @@ export class EngramAccessService {
         // resolveWritableNamespace resolves + checks writability in one step;
         // reusing it avoids a second ad-hoc namespace-resolution call site.
         try {
-          this.resolveWritableNamespace(req.namespace, req.sessionKey, req.principal);
+          this.writableNamespaceFor(req.namespace, req.sessionKey, req.principal);
           return Promise.resolve(true);
         } catch {
           return Promise.resolve(false);
@@ -5176,7 +5191,7 @@ export class EngramAccessService {
     if (deepSleep.enabled === false && deepSleep.enabledExplicitlySet === true) {
       throw new Error("memory governance is disabled by dreams.phases.deepSleep.enabled=false");
     }
-    const resolvedNamespace = this.resolveWritableNamespace(
+    const resolvedNamespace = this.writableNamespaceFor(
       request.namespace,
       undefined,
       request.authenticatedPrincipal ?? principal,
@@ -5236,7 +5251,7 @@ export class EngramAccessService {
     proceduresWritten: number;
     skippedReason?: string;
   }> {
-    const resolvedNamespace = this.resolveWritableNamespace(
+    const resolvedNamespace = this.writableNamespaceFor(
       request.namespace,
       undefined,
       request.authenticatedPrincipal ?? principal,
@@ -5262,7 +5277,7 @@ export class EngramAccessService {
     } = {},
     principal?: string,
   ): Promise<LiveConnectorsRunSummary> {
-    this.resolveWritableNamespace(
+    this.writableNamespaceFor(
       undefined,
       undefined,
       request.authenticatedPrincipal ?? principal,
@@ -5308,7 +5323,7 @@ export class EngramAccessService {
     duplicatesSuperseded: number;
     result?: PatternReinforcementResult;
   }> {
-    const resolvedNamespace = this.resolveWritableNamespace(
+    const resolvedNamespace = this.writableNamespaceFor(
       request.namespace,
       undefined,
       request.authenticatedPrincipal ?? principal,
@@ -5598,7 +5613,7 @@ export class EngramAccessService {
     if (!isTrustZoneName(request.targetZone)) {
       throw new EngramAccessInputError(`unsupported trust-zone target: ${String(request.targetZone)}`);
     }
-    const resolvedNamespace = this.resolveWritableNamespace(
+    const resolvedNamespace = this.writableNamespaceFor(
       request.namespace,
       undefined,
       request.authenticatedPrincipal,
@@ -5632,7 +5647,7 @@ export class EngramAccessService {
   async trustZoneDemoSeed(
     request: EngramAccessTrustZoneDemoSeedRequest,
   ): Promise<EngramAccessTrustZoneDemoSeedResponse> {
-    const resolvedNamespace = this.resolveWritableNamespace(
+    const resolvedNamespace = this.writableNamespaceFor(
       request.namespace,
       undefined,
       request.authenticatedPrincipal,
@@ -5669,7 +5684,7 @@ export class EngramAccessService {
       throw new EngramAccessInputError("reasonCode is required");
     }
 
-    const resolvedNamespace = this.resolveWritableNamespace(
+    const resolvedNamespace = this.writableNamespaceFor(
       request.namespace,
       undefined,
       request.authenticatedPrincipal,
@@ -5835,7 +5850,7 @@ export class EngramAccessService {
 
     // Backward-compatible BASE writable namespace (pre-#1495 response semantics)
     // for the legacy `namespace` response field. DERIVED from the already-resolved
-    // scope plan — NOT a second `resolveWritableNamespace(request.namespace,...)`
+    // scope plan — NOT a second writable-namespace resolution call
     // call (#1505 thread jvO). The fresh call re-authorized `undefined ⇒
     // config.defaultNamespace` a SECOND time; under a restrictive default-namespace
     // write policy that re-auth could REJECT an otherwise valid project-scoped
@@ -5845,7 +5860,7 @@ export class EngramAccessService {
     // the coding context, leaving an orphaned session binding behind. The plan is
     // the single authorization point (rule 22 / 39); the legacy field must reuse it
     // and never re-authorize. Pre-#1495 semantics were exactly
-    // `resolveWritableNamespace(request.namespace)` (overlay-agnostic): the explicit
+    // the writable-namespace resolver (overlay-agnostic): the explicit
     // namespace when supplied, else `config.defaultNamespace` for user-project
     // coding overlays. Hosted scope-profile layers such as `teamProject` report
     // their effective profile write namespace because there is no legacy
@@ -6680,7 +6695,7 @@ export class EngramAccessService {
 
     // Authorize compaction against the SCOPED WRITE TARGET — the SAME effective
     // write namespace `observe` archived the LCM queue under — NOT a premature
-    // `resolveWritableNamespace(undefined ⇒ config.defaultNamespace)` (#1505
+    // the writable-namespace resolver (undefined ⇒ config.defaultNamespace) (#1505
     // thread NBHWs). Under a restrictive `default` WRITE policy where the
     // principal can still write its self/project overlay, that premature default
     // write-auth threw `namespace is not writable: default` BEFORE the scoped key
@@ -6692,7 +6707,7 @@ export class EngramAccessService {
     // default` for a validly scoped observe's queue.
     const scope = await this.resolveMemoryScopePlan(request);
     // Legacy `namespace` response field: pre-#1505 semantics were exactly
-    // `resolveWritableNamespace(request.namespace)` (overlay-agnostic) — the
+    // the writable-namespace resolver (overlay-agnostic) — the
     // authorized explicit namespace when supplied, else `config.defaultNamespace`.
     // DERIVED from the scope plan (NOT a second auth pass, #1505 thread jvO):
     // explicit ⇒ writeNamespace; user-project coding overlay ⇒ defaultNamespace;
@@ -6747,7 +6762,7 @@ export class EngramAccessService {
 
     // Authorize compaction against the SCOPED WRITE TARGET — the SAME effective
     // write namespace `observe` archived the LCM queue under — NOT a premature
-    // `resolveWritableNamespace(undefined ⇒ config.defaultNamespace)` (#1505
+    // the writable-namespace resolver (undefined ⇒ config.defaultNamespace) (#1505
     // thread NBHWs). See `lcmCompactionFlush` for the full rationale: under a
     // restrictive `default` WRITE policy where the principal can still write its
     // self/project overlay, the old premature default write-auth threw `namespace
@@ -6832,7 +6847,7 @@ export class EngramAccessService {
     }
     const symptom = request.symptom?.trim();
     if (!symptom) throw new EngramAccessInputError("symptom is required");
-    const resolvedNs = this.resolveWritableNamespace(request.namespace, undefined, request.principal);
+    const resolvedNs = this.writableNamespaceFor(request.namespace, undefined, request.principal);
     const storage = await this.orchestrator.getStorage(resolvedNs);
     const created = await storage.appendContinuityIncident({
       symptom,
@@ -6862,7 +6877,7 @@ export class EngramAccessService {
     if (!fixApplied) throw new EngramAccessInputError("fixApplied is required");
     const verificationResult = request.verificationResult?.trim();
     if (!verificationResult) throw new EngramAccessInputError("verificationResult is required");
-    const resolvedNs = this.resolveWritableNamespace(request.namespace, undefined, request.principal);
+    const resolvedNs = this.writableNamespaceFor(request.namespace, undefined, request.principal);
     const storage = await this.orchestrator.getStorage(resolvedNs);
     const closed = await storage.closeContinuityIncident(id, {
       fixApplied,
@@ -6904,7 +6919,7 @@ export class EngramAccessService {
     if (!this.orchestrator.config.identityContinuityEnabled) {
       return { enabled: false, reason: "Identity continuity is disabled." };
     }
-    const resolvedNs = this.resolveWritableNamespace(request.namespace, undefined, request.principal);
+    const resolvedNs = this.writableNamespaceFor(request.namespace, undefined, request.principal);
     const storage = await this.orchestrator.getStorage(resolvedNs);
     const loop = await storage.upsertIdentityImprovementLoop({
       id: request.id?.trim() || "",
@@ -6931,7 +6946,7 @@ export class EngramAccessService {
     }
     const id = request.id?.trim();
     if (!id) throw new EngramAccessInputError("id is required");
-    const resolvedNs = this.resolveWritableNamespace(request.namespace, undefined, request.principal);
+    const resolvedNs = this.writableNamespaceFor(request.namespace, undefined, request.principal);
     const storage = await this.orchestrator.getStorage(resolvedNs);
     const reviewed = await storage.reviewIdentityImprovementLoop(id, {
       status: request.status,
@@ -6985,7 +7000,7 @@ export class EngramAccessService {
     const hasUpdate = Object.values(updates).some((v) => typeof v === "string" && v.length > 0);
     if (!hasUpdate) throw new EngramAccessInputError("At least one section field is required.");
 
-    const resolvedNs = this.resolveWritableNamespace(request.namespace, undefined, request.principal);
+    const resolvedNs = this.writableNamespaceFor(request.namespace, undefined, request.principal);
     const storage = await this.orchestrator.getStorage(resolvedNs);
     const existing = await storage.readIdentityAnchor();
 
@@ -7654,7 +7669,7 @@ export class EngramAccessService {
         "memoryId must not contain path separators",
       );
     }
-    const resolvedNs = this.resolveWritableNamespace(
+    const resolvedNs = this.writableNamespaceFor(
       request.namespace,
       request.sessionKey,
       request.principal,
@@ -7678,7 +7693,7 @@ export class EngramAccessService {
     principal?: string;
     sessionKey?: string;
   }): Promise<unknown> {
-    const resolvedNs = this.resolveWritableNamespace(request.namespace, request.sessionKey, request.principal);
+    const resolvedNs = this.writableNamespaceFor(request.namespace, request.sessionKey, request.principal);
     const storage = await this.orchestrator.getStorage(resolvedNs);
     // Update frontmatter to active status (promote from pending/draft)
     await storage.updateMemoryFrontmatter(request.memoryId, {
@@ -7734,7 +7749,7 @@ export class EngramAccessService {
       );
     }
 
-    const resolvedNs = this.resolveWritableNamespace(
+    const resolvedNs = this.writableNamespaceFor(
       request.namespace,
       request.sessionKey,
       request.principal,
@@ -7784,7 +7799,7 @@ export class EngramAccessService {
     namespace?: string;
     principal?: string;
   }): Promise<{ saved: boolean }> {
-    const resolvedNs = this.resolveWritableNamespace(request.namespace, request.sessionKey, request.principal);
+    const resolvedNs = this.writableNamespaceFor(request.namespace, request.sessionKey, request.principal);
     const storage = await this.orchestrator.getStorage(resolvedNs);
     const storageDir = storage.dir;
     const { writeFile, mkdir } = await import("node:fs/promises");
@@ -7842,7 +7857,7 @@ export class EngramAccessService {
     // Pass authenticatedPrincipal so the principal resolution matches other
     // write endpoints (gotcha #42: read and write paths must resolve through
     // the same namespace layer).
-    const resolvedNamespace = this.resolveWritableNamespace(
+    const resolvedNamespace = this.writableNamespaceFor(
       request.namespace,
       request.sessionId,
       request.authenticatedPrincipal,
@@ -8144,7 +8159,7 @@ export class EngramAccessService {
         "authentication required: namespaces are enabled and no principal was supplied",
       );
     }
-    const resolved = this.resolveWritableNamespace(namespace, undefined, principal);
+    const resolved = this.writableNamespaceFor(namespace, undefined, principal);
     const storage = await this.orchestrator.getStorage(resolved);
     return { namespace: resolved, storage };
   }
@@ -8201,7 +8216,7 @@ export class EngramAccessService {
     },
   ): Promise<ImportCapsuleResult> {
     const { namespace, principal, root: explicitRoot, memoryDir: explicitMemoryDir, ...importOptions } = opts;
-    const resolvedNamespace = this.resolveWritableNamespace(namespace, undefined, principal);
+    const resolvedNamespace = this.writableNamespaceFor(namespace, undefined, principal);
     const storage = await this.orchestrator.getStorage(resolvedNamespace);
     const root = explicitRoot ?? storage.dir;
     const memoryDir = explicitMemoryDir ?? this.orchestrator.config.memoryDir;
@@ -8288,7 +8303,7 @@ export class EngramAccessService {
     },
   ): Promise<ExportCapsuleResult> {
     const { namespace, principal, root: explicitRoot, memoryDir: explicitMemoryDir, ...exportOptions } = opts;
-    const resolvedNamespace = this.resolveWritableNamespace(namespace, undefined, principal);
+    const resolvedNamespace = this.writableNamespaceFor(namespace, undefined, principal);
     const storage = await this.orchestrator.getStorage(resolvedNamespace);
     const root = explicitRoot ?? storage.dir;
     const memoryDir = explicitMemoryDir ?? this.orchestrator.config.memoryDir;
@@ -8522,7 +8537,7 @@ export class EngramAccessService {
   async offlineSyncApplyFileContent(
     options: EngramAccessOfflineSyncApplyFileContentRequest,
   ): Promise<EngramAccessOfflineSyncApplyFileContentResponse> {
-    const resolvedNamespace = this.resolveWritableNamespace(
+    const resolvedNamespace = this.writableNamespaceFor(
       options.namespace,
       undefined,
       options.principal,
@@ -8573,7 +8588,7 @@ export class EngramAccessService {
   async offlineSyncApply(
     options: EngramAccessOfflineSyncApplyRequest,
   ): Promise<EngramAccessOfflineSyncApplyResponse> {
-    const resolvedNamespace = this.resolveWritableNamespace(
+    const resolvedNamespace = this.writableNamespaceFor(
       options.namespace,
       undefined,
       options.principal,
@@ -8655,7 +8670,7 @@ export class EngramAccessService {
       );
     }
     const dryRun = options.dryRun === true;
-    const resolvedNamespace = this.resolveWritableNamespace(
+    const resolvedNamespace = this.writableNamespaceFor(
       options.namespace,
       undefined,
       options.authenticatedPrincipal,

package/src/maintenance/namespace-planner.ts

@@ -9,6 +9,7 @@ import { namespaceIdentityToken } from "../namespaces/identity.js";
 import { resolveNamespaceStorageRoot } from "../namespaces/storage.js";
 import { displayErrorDetail } from "../runtime/better-sqlite.js";
 import type { PluginConfig } from "../types.js";
+import { getConfiguredNamespaces } from "../scopes/scope-plan.js";
 
 export type NamespaceMaintenanceJobName = string;
 
@@ -110,15 +111,7 @@ export function __setNamespaceMaintenanceFsForTest(overrides: Partial<typeof nam
   };
 }
 
-function configuredNamespaces(config: PluginConfig): string[] {
-  return Array.from(
-    new Set(
-      [config.defaultNamespace, config.sharedNamespace, ...config.namespacePolicies.map((policy) => policy.name)]
-        .map((value) => value.trim())
-        .filter(Boolean)
-    )
-  );
-}
+
 
 function inferConfiguredKind(config: PluginConfig, namespace: string): NamespaceKind {
   if (namespace === config.defaultNamespace.trim()) return "default";
@@ -219,7 +212,7 @@ export async function planNamespaceMaintenance(
   // once per configured name. The #1500 contract is "namespaces disabled:
   // maintain the current default storage only," so collapse to the default.
   const configured = config.namespacesEnabled
-    ? configuredNamespaces(config)
+    ? getConfiguredNamespaces(config)
     : [config.defaultNamespace.trim()].filter(Boolean);
   const byNamespace = new Map<string, NamespaceMaintenanceCandidate>();
   const skipped: NamespaceMaintenanceSkippedNamespace[] = [];