@remnic/core 9.3.723 → 9.3.724

package/src/access-mcp.ts

@@ -137,6 +137,88 @@ const MCP_MIGRATED_OPERATIONS: Readonly<Record<string, OperationName>> = {
   // Correction Contract (issue #1580) — one plan/apply pipeline.
   "engram.memory_correct_plan": "memory_correct_plan",
   "engram.memory_correct_apply": "memory_correct_apply",
+  // Fully migrated through the strict-schema boundary (#1668).
+  "engram.recall": "recall",
+  "engram.recall_explain": "recall_explain",
+  "engram.set_coding_context": "set_coding_context",
+  "engram.recall_tier_explain": "recall_tier_explain",
+  "engram.recall_xray": "recall_xray",
+  "engram.wearables_status": "wearables_status",
+  "engram.wearables_sync": "wearables_sync",
+  "engram.transcript_day": "transcript_day",
+  "engram.transcript_search": "transcript_search",
+  "engram.transcript_memories": "transcript_memories",
+  "engram.action_confidence": "action_confidence",
+  "engram.chatgpt_memory_inspector": "chatgpt_memory_inspector",
+  "engram.day_summary": "day_summary",
+  "engram.capsule_export": "capsule_export",
+  "engram.capsule_import": "capsule_import",
+  "engram.capsule_list": "capsule_list",
+  "engram.memory_governance_run": "memory_governance_run",
+  "engram.procedure_mining_run": "procedure_mining_run",
+  "engram.pattern_reinforcement_run": "pattern_reinforcement_run",
+  "engram.procedural_stats": "procedural_stats",
+  "engram.memory_timeline": "memory_timeline",
+  "engram.suggestion_submit": "suggestion_submit",
+  "engram.entity_get": "entity_get",
+  "engram.review_queue_list": "review_queue_list",
+  "engram.observe": "observe",
+  "engram.lcm_search": "lcm_search",
+  "engram.lcm_compaction_flush": "lcm_compaction_flush",
+  "engram.lcm_compaction_record": "lcm_compaction_record",
+  "engram.continuity_audit_generate": "continuity_audit_generate",
+  "engram.continuity_incident_open": "continuity_incident_open",
+  "engram.continuity_incident_close": "continuity_incident_close",
+  "engram.continuity_incident_list": "continuity_incident_list",
+  "engram.continuity_loop_add_or_update": "continuity_loop_add_or_update",
+  "engram.continuity_loop_review": "continuity_loop_review",
+  "engram.identity_anchor_get": "identity_anchor_get",
+  "engram.identity_anchor_update": "identity_anchor_update",
+  "engram.memory_identity": "memory_identity",
+  "engram.work_task": "work_task",
+  "engram.work_project": "work_project",
+  "engram.work_board": "work_board",
+  "engram.shared_context_write_output": "shared_context_write_output",
+  "engram.shared_feedback_record": "shared_feedback_record",
+  "engram.shared_priorities_append": "shared_priorities_append",
+  "engram.shared_context_cross_signals_run": "shared_context_cross_signals_run",
+  "engram.shared_context_curate_daily": "shared_context_curate_daily",
+  "engram.compounding_weekly_synthesize": "compounding_weekly_synthesize",
+  "engram.compounding_promote_candidate": "compounding_promote_candidate",
+  "engram.compression_guidelines_optimize": "compression_guidelines_optimize",
+  "engram.compression_guidelines_activate": "compression_guidelines_activate",
+  "engram.memory_profile": "memory_profile",
+  "engram.memory_entities_list": "memory_entities_list",
+  "engram.memory_questions": "memory_questions",
+  "engram.memory_last_recall": "memory_last_recall",
+  "engram.memory_intent_debug": "memory_intent_debug",
+  "engram.memory_qmd_debug": "memory_qmd_debug",
+  "engram.memory_graph_explain": "memory_graph_explain",
+  "engram.graph_snapshot": "graph_snapshot",
+  "engram.memory_feedback": "memory_feedback",
+  "engram.memory_promote": "memory_promote",
+  "engram.memory_outcome": "memory_outcome",
+  "engram.memory_action_apply": "memory_action_apply",
+  "engram.context_checkpoint": "context_checkpoint",
+  "engram.briefing": "briefing",
+  "engram.review_list": "review_list",
+  "engram.review_resolve": "review_resolve",
+  "engram.contradiction_scan_run": "contradiction_scan_run",
+  "engram.memory_summarize_hourly": "memory_summarize_hourly",
+  "engram.conversation_index_update": "conversation_index_update",
+  "engram.profiling_report": "profiling_report",
+  "engram.graph_edge_decay_run": "graph_edge_decay_run",
+  "engram.live_connectors_run": "live_connectors_run",
+  "engram.peer_list": "peer_list",
+  "engram.peer_get": "peer_get",
+  "engram.peer_set": "peer_set",
+  "engram.peer_delete": "peer_delete",
+  "engram.peer_profile_get": "peer_profile_get",
+  "engram.peer_forget": "peer_forget",
+  "engram.console_state": "console_state",
+  "engram.dreams_status": "dreams_status",
+  "engram.dreams_run": "dreams_run",
+  "engram.memory_chat": "chat_message",
 };
 
 function resolveChatGptInspectorRecallSessionKey(
@@ -2615,1200 +2697,78 @@ export class EngramMcpServer {
   }
 
   private async callTool(name: string, args: Record<string, unknown>, effectivePrincipal?: string, mcpSessionId?: string, scope?: { namespace?: string; sessionKey?: string }, enforceWriteQuota?: () => void | Promise<void>): Promise<unknown> {
-    // Migrated operations dispatch through the access boundary (issue #1525):
-    // one registry entry owns schema validation, normalization (rules
-    // 17/28/36/48/51), and error mapping for every surface. The switch
-    // below still serves the not-yet-migrated tools. memory_store keeps its
-    // parseMcpRequest strict-keys guard (MCP transport contract) before the
-    // boundary re-validates the cleaned body.
     const migrated = MCP_MIGRATED_OPERATIONS[toLegacyToolName(name)];
-    if (migrated) {
-      const op = getOperation(migrated);
-      if (!op) {
-        throw new EngramAccessInputError(`access-boundary: operation not registered: ${migrated}`);
-      }
-      let envelope: Record<string, unknown>;
-      if (migrated === "memory_store") {
-        envelope = parseMcpRequest("memoryStore", args);
-      } else if (migrated.startsWith("codegraph_")) {
-        // codegraph parity tools (issue #1554): the surface handler dispatches
-        // on the `tool` field. The MCP tool name encodes it (e.g.
-        // codegraph_search_graph → tool: "search_graph"); inject it so the
-        // client payload does not need to carry the internal dispatch field.
-        envelope = { ...args, tool: migrated.slice("codegraph_".length) };
-      } else {
-        envelope = args;
-      }
-      // The registry erases In/Out at the Map boundary; the caller knows the
-      // concrete output shape ({ result: <service response> }) so the cast is
-      // the type-erasure seam, not a leap of faith.
-      const output = (await op.run(envelope, {
-        service: this.service,
-        authenticatedPrincipal: effectivePrincipal,
-      })) as { result: unknown };
-      return output.result;
+    if (!migrated) {
+      throw new Error("unknown tool: " + name);
     }
-    switch (toLegacyToolName(name)) {
-      case "engram.recall": {
-        // Forward `disclosure` only when the caller actually supplied it,
-        // so the service layer's default-application path stays the
-        // single source of truth.  We must distinguish "absent" from
-        // "present-but-wrong-type": absence forwards as `undefined`
-        // (service applies the chunk default), while a present-but-
-        // non-string value (e.g. `1`, `true`) is rejected here as a
-        // structured input error instead of silently being coerced to
-        // `undefined`.  CLAUDE.md rule 51: never silently default on
-        // malformed input.  String values are forwarded as-is; the
-        // service's `isRecallDisclosure` guard rejects unknown enum
-        // strings (e.g. `"verbose"`) with the same error class.
-        let disclosure: RecallDisclosure | undefined;
-        if ("disclosure" in args && args.disclosure !== undefined && args.disclosure !== null) {
-          if (typeof args.disclosure !== "string") {
-            throw new EngramAccessInputError(
-              "disclosure must be a string (one of: chunk, section, raw)",
-            );
-          }
-          disclosure = args.disclosure as RecallDisclosure;
-        }
-        // Reject non-string cwd/projectTag (CLAUDE.md #51) — these control
-        // namespace routing so silent coercion to undefined would mix memories.
-        if ("cwd" in args && args.cwd !== undefined && args.cwd !== null && typeof args.cwd !== "string") {
-          throw new EngramAccessInputError("cwd must be a string");
-        }
-        if ("projectTag" in args && args.projectTag !== undefined && args.projectTag !== null && typeof args.projectTag !== "string") {
-          throw new EngramAccessInputError("projectTag must be a string");
-        }
-        // Issue #680 — historical recall pin. Reject non-string asOf
-        // values up-front so malformed payloads surface as structured
-        // input errors. The service layer performs Date.parse on the
-        // string value.
-        if ("asOf" in args && args.asOf !== undefined && args.asOf !== null && typeof args.asOf !== "string") {
-          throw new EngramAccessInputError("asOf must be a string (ISO 8601 timestamp)");
-        }
-        // Tag filter (issue #689). Reject malformed tags / tagMatch
-        // up front rather than silently dropping (CLAUDE.md rule 51).
-        let tags: string[] | undefined;
-        if ("tags" in args && args.tags !== undefined && args.tags !== null) {
-          if (!Array.isArray(args.tags) || !args.tags.every((t) => typeof t === "string")) {
-            throw new EngramAccessInputError("tags must be an array of strings");
-          }
-          tags = args.tags;
-        }
-        let tagMatch: "any" | "all" | undefined;
-        if ("tagMatch" in args && args.tagMatch !== undefined && args.tagMatch !== null) {
-          if (typeof args.tagMatch !== "string" || (args.tagMatch !== "any" && args.tagMatch !== "all")) {
-            throw new EngramAccessInputError(
-              `tagMatch must be one of: any, all (got: ${String(args.tagMatch)})`,
-            );
-          }
-          tagMatch = args.tagMatch;
-        }
-        const response = await this.service.recall({
-          query: typeof args.query === "string" ? args.query : "",
-          sessionKey: typeof args.sessionKey === "string" ? args.sessionKey : undefined,
-          authenticatedPrincipal: effectivePrincipal,
-          namespace: typeof args.namespace === "string" ? args.namespace : undefined,
-          topK: typeof args.topK === "number" && Number.isFinite(args.topK) ? args.topK : undefined,
-          mode: typeof args.mode === "string" ? args.mode as RecallPlanMode | "auto" : undefined,
-          includeDebug: args.includeDebug === true,
-          disclosure,
-          cwd: typeof args.cwd === "string" ? args.cwd : undefined,
-          projectTag: typeof args.projectTag === "string" ? args.projectTag : undefined,
-          asOf: typeof args.asOf === "string" ? args.asOf : undefined,
-          ...(tags !== undefined ? { tags } : {}),
-          ...(tagMatch !== undefined ? { tagMatch } : {}),
-        });
-
-        if (this.shouldEmitCitations(mcpSessionId)) {
-          const citations = this.buildRecallCitations(response);
-          const guidance = buildCitationGuidance(citations);
-          if (guidance.length > 0) {
-            return {
-              ...response,
-              context: response.context + guidance,
-              citations,
-            };
-          }
-        }
-        return response;
-      }
-      case "engram.recall_explain":
-        return this.service.recallExplain({
-          sessionKey: typeof args.sessionKey === "string" ? args.sessionKey : undefined,
-          namespace: typeof args.namespace === "string" ? args.namespace : undefined,
-          authenticatedPrincipal: effectivePrincipal,
-        });
-      case "engram.set_coding_context": {
-        // Issue #569 PR 7 — MCP tool for clients that don't ship cwd.
-        // Validation lives in EngramAccessService.setCodingContext; any
-        // EngramAccessInputError surfaces as a structured tool-call error.
-        const sessionKey = typeof args.sessionKey === "string" ? args.sessionKey : "";
-        // Support projectTag as an alternative to full codingContext.
-        // When projectTag is provided and codingContext is absent, create
-        // a tag-based context (issue #569 wiring).
-        const hasProjectTag = typeof args.projectTag === "string" && args.projectTag.trim().length > 0;
-        const hasCodingContext = "codingContext" in args;
-        if (!hasCodingContext && hasProjectTag) {
-          const tag = (args.projectTag as string).trim();
-          const projectId = projectTagProjectId(tag);
-          this.service.setCodingContext({
-            sessionKey,
-            codingContext: {
-              projectId,
-              branch: null,
-              rootPath: projectId,
-              defaultBranch: null,
-            },
-          });
-          return { ok: true };
-        }
-        // Require at least one of codingContext or projectTag (CLAUDE.md #51).
-        if (!hasCodingContext && !hasProjectTag) {
-          throw new EngramAccessInputError(
-            "set_coding_context requires either codingContext or projectTag",
-          );
-        }
-        const rawCtx = args.codingContext;
-        let codingContext: {
-          projectId: string;
-          branch: string | null;
-          rootPath: string;
-          defaultBranch: string | null;
-        } | null = null;
-        if (rawCtx !== null) {
-          if (typeof rawCtx !== "object" || rawCtx === undefined) {
-            throw new EngramAccessInputError("codingContext must be an object or null");
-          }
-          const obj = rawCtx as Record<string, unknown>;
-          const projectId = typeof obj.projectId === "string" ? obj.projectId : "";
-          const rootPath = typeof obj.rootPath === "string" ? obj.rootPath : "";
-          const branch = obj.branch === null
-            ? null
-            : typeof obj.branch === "string" ? obj.branch : undefined;
-          const defaultBranch = obj.defaultBranch === null
-            ? null
-            : typeof obj.defaultBranch === "string" ? obj.defaultBranch : undefined;
-          if (branch === undefined) {
-            throw new EngramAccessInputError("codingContext.branch must be a string or null");
-          }
-          if (defaultBranch === undefined) {
-            throw new EngramAccessInputError("codingContext.defaultBranch must be a string or null");
-          }
-          codingContext = { projectId, branch, rootPath, defaultBranch };
-        }
-        this.service.setCodingContext({ sessionKey, codingContext });
-        return { ok: true };
-      }
-      case "engram.recall_tier_explain":
-        return this.service.recallTierExplain(
-          typeof args.sessionKey === "string" && args.sessionKey.length > 0
-            ? args.sessionKey
-            : undefined,
-          typeof args.namespace === "string" && args.namespace.length > 0
-            ? args.namespace
-            : undefined,
-          effectivePrincipal,
-        );
-      case "engram.recall_xray": {
-        // `recallXray` throws on empty query / invalid budget; surface
-        // those as MCP errors with a listed-options message rather
-        // than silently returning `snapshotFound: false` (CLAUDE.md
-        // rule 51).  Namespace scope is enforced inside the service
-        // via `canReadNamespace`.
-        const query = typeof args.query === "string" ? args.query : "";
-        const sessionKey =
-          typeof args.sessionKey === "string" && args.sessionKey.length > 0
-            ? args.sessionKey
-            : undefined;
-        const namespace =
-          typeof args.namespace === "string" && args.namespace.length > 0
-            ? args.namespace
-            : undefined;
-        // `budget` may arrive as a JSON number or a string ('4096')
-        // from loosely-typed MCP clients; coerce + validate here so
-        // the service sees a number.  Reject booleans, objects, and
-        // other non-string-non-number inputs explicitly — `Number()`
-        // otherwise coerces `true` to `1`, which would silently force
-        // an extremely small recall budget (CLAUDE.md rule 51).
-        let budget: number | undefined;
-        if (args.budget !== undefined && args.budget !== null) {
-          if (typeof args.budget !== "number" && typeof args.budget !== "string") {
-            throw new Error(
-              `engram.recall_xray: budget expects a positive integer; got ${JSON.stringify(args.budget)}`,
-            );
-          }
-          const parsed =
-            typeof args.budget === "number"
-              ? args.budget
-              : Number(args.budget);
-          if (
-            !Number.isFinite(parsed)
-            || parsed <= 0
-            || !Number.isInteger(parsed)
-          ) {
-            throw new Error(
-              `engram.recall_xray: budget expects a positive integer; got ${JSON.stringify(args.budget)}`,
-            );
-          }
-          budget = parsed;
-        }
-        // Forward disclosure depth so the recallXray telemetry table is
-        // populated for MCP callers (issue #677 PR 3/4).  Reject
-        // non-string types explicitly (matches the strict input
-        // contract used elsewhere in this handler — see `budget` /
-        // `disclosure` in engram.recall around line 1198 — and the
-        // HTTP path's 400-on-bad-disclosure handling).  Treat empty
-        // string as absent so HTTP `?disclosure=` and MCP align on
-        // the same observable contract for that pathological input.
-        // Non-empty strings flow through to the service's strict
-        // allow-list validator (which throws on unknown values).
-        let disclosure: string | undefined;
-        if (
-          "disclosure" in args &&
-          args.disclosure !== undefined &&
-          args.disclosure !== null &&
-          args.disclosure !== ""
-        ) {
-          if (typeof args.disclosure !== "string") {
-            throw new Error(
-              "engram.recall_xray: disclosure must be a string (one of: chunk, section, raw)",
-            );
-          }
-          disclosure = args.disclosure;
-        }
-        return this.service.recallXray({
-          query,
-          sessionKey,
-          namespace,
-          budget,
-          authenticatedPrincipal: effectivePrincipal,
-          ...(disclosure !== undefined
-            ? { disclosure: disclosure as import("./types.js").RecallDisclosure }
-            : {}),
-        });
-      }
-      case "engram.wearables_status":
-        return this.service.wearablesStatus();
-      case "engram.wearables_sync": {
-        const source = optionalNonEmptyString(args.source, "engram.wearables_sync: source");
-        const date = optionalNonEmptyString(args.date, "engram.wearables_sync: date");
-        const days = optionalPositiveInteger(args.days, "engram.wearables_sync: days");
-        let forceMemories: boolean | undefined;
-        if (args.forceMemories !== undefined && args.forceMemories !== null) {
-          if (typeof args.forceMemories !== "boolean") {
-            throw new Error(
-              `engram.wearables_sync: forceMemories expects a boolean; got ${JSON.stringify(args.forceMemories)}`,
-            );
-          }
-          forceMemories = args.forceMemories;
-        }
-        // Date/days/source validation beyond shape lives in the shared
-        // WearablesService so CLI/HTTP/MCP reject identically.
-        return this.service.wearablesSync({ source, date, days, forceMemories });
-      }
-      case "engram.transcript_day": {
-        const date = typeof args.date === "string" ? args.date : "";
-        if (date.trim().length === 0) {
-          throw new Error(
-            "engram.transcript_day: date is required and must be YYYY-MM-DD",
-          );
-        }
-        const source = optionalNonEmptyString(args.source, "engram.transcript_day: source");
-        return this.service.wearablesTranscriptDay({ date, source });
-      }
-      case "engram.transcript_search": {
-        const query = typeof args.query === "string" ? args.query : "";
-        if (query.trim().length === 0) {
-          throw new Error(
-            "engram.transcript_search: query is required and must be non-empty",
-          );
-        }
-        return this.service.wearablesTranscriptSearch({
-          query,
-          source: optionalNonEmptyString(args.source, "engram.transcript_search: source"),
-          from: optionalNonEmptyString(args.from, "engram.transcript_search: from"),
-          to: optionalNonEmptyString(args.to, "engram.transcript_search: to"),
-          limit: optionalPositiveInteger(args.limit, "engram.transcript_search: limit"),
-        });
-      }
-      case "engram.transcript_memories":
-        return this.service.wearablesTranscriptMemories({
-          source: optionalNonEmptyString(args.source, "engram.transcript_memories: source"),
-          date: optionalNonEmptyString(args.date, "engram.transcript_memories: date"),
-          limit: optionalPositiveInteger(args.limit, "engram.transcript_memories: limit"),
-        });
-      case "engram.action_confidence": {
-        const body: ActionConfidenceRequest = parseMcpRequest("actionConfidence", args);
-        return this.service.actionConfidence(body);
-      }
-      case REMNIC_CHATGPT_MEMORY_INSPECTOR_TOOL: {
-        if (typeof args.query !== "string" || args.query.trim().length === 0) {
-          throw new EngramAccessInputError(
-            "chatgpt_memory_inspector requires a non-empty query string",
-          );
-        }
-        if (
-          "sessionKey" in args &&
-          args.sessionKey !== undefined &&
-          args.sessionKey !== null &&
-          typeof args.sessionKey !== "string"
-        ) {
-          throw new EngramAccessInputError("sessionKey must be a string");
-        }
-        if (
-          "namespace" in args &&
-          args.namespace !== undefined &&
-          args.namespace !== null &&
-          typeof args.namespace !== "string"
-        ) {
-          throw new EngramAccessInputError("namespace must be a string");
-        }
-        let currentContextScopes: string[] | undefined;
-        if (args.currentContextScopes !== undefined && args.currentContextScopes !== null) {
-          if (
-            !Array.isArray(args.currentContextScopes) ||
-            !args.currentContextScopes.every((scope) => typeof scope === "string")
-          ) {
-            throw new EngramAccessInputError(
-              "currentContextScopes must be an array of strings",
-            );
-          }
-          currentContextScopes = args.currentContextScopes;
-        }
-
-        const input: RemnicChatGptMemoryInspectorInput = {
-          query: args.query.trim(),
-        };
-        if (typeof args.sessionKey === "string" && args.sessionKey.trim().length > 0) {
-          input.sessionKey = args.sessionKey;
-        }
-        if (typeof args.namespace === "string" && args.namespace.trim().length > 0) {
-          input.namespace = args.namespace;
-        }
-        if (currentContextScopes !== undefined) {
-          input.currentContextScopes = currentContextScopes;
-        }
-        if (
-          args.allowUnverifiedPreview !== undefined &&
-          args.allowUnverifiedPreview !== null
-        ) {
-          if (typeof args.allowUnverifiedPreview !== "boolean") {
-            throw new EngramAccessInputError(
-              "allowUnverifiedPreview must be a boolean",
-            );
-          }
-          input.allowUnverifiedPreview = args.allowUnverifiedPreview;
-        }
-        const recallSessionKey = resolveChatGptInspectorRecallSessionKey(
-          input.sessionKey,
-          effectivePrincipal,
-        );
-        const xrayResponse = await this.service.recallXray({
-          query: input.query,
-          sessionKey: recallSessionKey,
-          namespace: input.namespace,
-          currentContextScopes: input.currentContextScopes,
-          authenticatedPrincipal: effectivePrincipal,
-          mode: "full",
-          disclosure: "chunk",
-          includeRecall: true,
-        });
-        const xray = xrayResponse.snapshotFound === true
-          ? xrayResponse.snapshot ?? null
-          : null;
-        const recall = xrayResponse.recall ?? {
-          query: input.query,
-          namespace: input.namespace ?? xray?.namespace ?? "global",
-          context: "",
-          count: 0,
-          memoryIds: [],
-          results: [],
-          fallbackUsed: false,
-          sourcesUsed: [],
-          disclosure: "chunk",
-        };
-        const actionRequest = buildChatGptMemoryInspectorActionRequest(
-          input,
-          recall,
-          xray,
-        );
-        const actionConfidence = await this.service.actionConfidence(actionRequest);
-        return buildChatGptMemoryInspectorResult(
-          input,
-          recall,
-          xray,
-          actionConfidence,
-        );
-      }
-      case "engram.day_summary": {
-        const body: DaySummaryRequest = parseMcpRequest("daySummary", args);
-        return this.service.daySummary(body);
-      }
-      case "engram.capsule_export": {
-        const body: CapsuleExportRequest = parseMcpRequest("capsuleExport", args);
-        return this.service.capsuleExport({
-          name: body.name,
-          namespace: body.namespace,
-          principal: effectivePrincipal,
-          since: body.since,
-          includeKinds: body.includeKinds,
-          peerIds: body.peerIds,
-          includeTranscripts: body.includeTranscripts,
-          encrypt: body.encrypt,
-        });
-      }
-      case "engram.capsule_import": {
-        const body: CapsuleImportRequest = parseMcpRequest("capsuleImport", args);
-        return this.service.capsuleImport({
-          archivePath: expandTildePath(body.archivePath),
-          namespace: body.namespace,
-          principal: effectivePrincipal,
-          mode: body.mode,
-          passphrase: body.passphrase,
-        });
-      }
-      case "engram.capsule_list": {
-        const body: CapsuleListRequest = parseMcpRequest("capsuleList", args);
-        const requestPrincipal =
-          effectivePrincipal ??
-          (body.sessionKey && this.service.configRef
-            ? resolvePrincipal(body.sessionKey, this.service.configRef)
-            : undefined);
-        return this.service.capsuleList({
-          namespace: body.namespace,
-          principal: requestPrincipal,
-        });
-      }
-      case "engram.memory_governance_run":
-        return this.service.governanceRun({
-          namespace: typeof args.namespace === "string" ? args.namespace : undefined,
-          mode: args.mode === "apply" ? "apply" : "shadow",
-          recentDays: typeof args.recentDays === "number" && Number.isFinite(args.recentDays) ? args.recentDays : undefined,
-          maxMemories: typeof args.maxMemories === "number" && Number.isFinite(args.maxMemories) ? args.maxMemories : undefined,
-          batchSize: typeof args.batchSize === "number" && Number.isFinite(args.batchSize) ? args.batchSize : undefined,
-          authenticatedPrincipal: effectivePrincipal,
-        }, effectivePrincipal);
-      case "engram.procedure_mining_run":
-        return this.service.procedureMiningRun(
-          {
-            namespace: typeof args.namespace === "string" ? args.namespace : undefined,
-            authenticatedPrincipal: effectivePrincipal,
-          },
-          effectivePrincipal,
-        );
-      case "engram.pattern_reinforcement_run":
-        return this.service.patternReinforcementRun(
-          {
-            namespace: typeof args.namespace === "string" ? args.namespace : undefined,
-            authenticatedPrincipal: effectivePrincipal,
-            force: args.force === true,
-          },
-          effectivePrincipal,
-        );
-      case "remnic.procedural_stats":
-      case "engram.procedural_stats":
-        return this.service.procedureStats(
-          {
-            namespace:
-              typeof args.namespace === "string" ? args.namespace : undefined,
-          },
-          effectivePrincipal,
-        );
-      case "engram.memory_timeline": {
-        const limit = typeof args.limit === "number" && Number.isFinite(args.limit) ? args.limit : 200;
-        return this.service.memoryTimeline(
-          typeof args.memoryId === "string" ? args.memoryId : "",
-          typeof args.namespace === "string" ? args.namespace : undefined,
-          limit,
-          effectivePrincipal,
-        );
-      }
-      case "engram.suggestion_submit": {
-        const body: SuggestionSubmitRequest = parseMcpRequest("suggestionSubmit", args);
-        return this.service.suggestionSubmit({
-          schemaVersion: body.schemaVersion,
-          idempotencyKey: body.idempotencyKey,
-          dryRun: body.dryRun,
-          sessionKey: body.sessionKey,
-          authenticatedPrincipal: effectivePrincipal,
-          content: body.content,
-          category: body.category,
-          confidence: body.confidence,
-          namespace: body.namespace,
-          tags: body.tags,
-          entityRef: body.entityRef,
-          ttl: body.ttl,
-          sourceReason: body.sourceReason,
-          cwd: body.cwd,
-          projectTag: body.projectTag,
-        });
-      }
-      case "engram.entity_get":
-        return this.service.entityGet(
-          typeof args.name === "string" ? args.name : "",
-          typeof args.namespace === "string" ? args.namespace : undefined,
-        );
-      case "engram.review_queue_list":
-        return this.service.reviewQueue(
-          typeof args.runId === "string" ? args.runId : undefined,
-          typeof args.namespace === "string" ? args.namespace : undefined,
-          effectivePrincipal,
-        );
-      case "engram.observe": {
-        const body = parseMcpRequest("observe", args);
-        return this.service.observe(
-          {
-            sessionKey: body.sessionKey,
-            messages: body.messages.map((message) => ({
-              role: message.role,
-              content: message.content,
-              parts: message.parts ?? undefined,
-              rawContent: message.rawContent ?? undefined,
-              sourceFormat: message.sourceFormat ?? undefined,
-            })),
-            skipExtraction: body.skipExtraction === true,
-            idempotencyKey: body.idempotencyKey,
-            namespace: body.namespace,
-            authenticatedPrincipal: effectivePrincipal,
-            cwd: body.cwd,
-            projectTag: body.projectTag,
-          },
-          // Forward the transport's write-quota enforcer into observe's
-          // idempotency lock so a replay is never 429'd (issue #1649).
-          enforceWriteQuota ? { enforceWriteQuota } : undefined,
-        );
-      }
-      case "engram.lcm_search":
-        return this.service.lcmSearch({
-          query: typeof args.query === "string" ? args.query : "",
-          sessionKey: typeof args.sessionKey === "string" ? args.sessionKey : undefined,
-          sessionPrefix: typeof args.sessionPrefix === "string" ? args.sessionPrefix : undefined,
-          namespace: typeof args.namespace === "string" ? args.namespace : undefined,
-          limit: typeof args.limit === "number" && Number.isFinite(args.limit) ? args.limit : undefined,
-          authenticatedPrincipal: effectivePrincipal,
-        });
-      case "engram.lcm_compaction_flush": {
-        const body = parseMcpRequest("lcmCompactionFlush", args);
-        return this.service.lcmCompactionFlush({
-          sessionKey: body.sessionKey,
-          namespace: body.namespace,
-          authenticatedPrincipal: effectivePrincipal,
-        });
-      }
-      case "engram.lcm_compaction_record": {
-        const body = parseMcpRequest("lcmCompactionRecord", args);
-        return this.service.lcmCompactionRecord({
-          sessionKey: body.sessionKey,
-          namespace: body.namespace,
-          tokensBefore: body.tokensBefore,
-          tokensAfter: body.tokensAfter,
-          authenticatedPrincipal: effectivePrincipal,
-        });
-      }
-      // ── Continuity / Identity tools ───────────────────────────────────
-      case "engram.continuity_audit_generate":
-        return this.service.continuityAuditGenerate({
-          period: args.period === "monthly" ? "monthly" : args.period === "weekly" ? "weekly" : undefined,
-          key: typeof args.key === "string" ? args.key : undefined,
-        });
-      case "engram.continuity_incident_open":
-        return this.service.continuityIncidentOpen({
-          symptom: typeof args.symptom === "string" ? args.symptom : "",
-          namespace: typeof args.namespace === "string" ? args.namespace : undefined,
-          principal: effectivePrincipal,
-          triggerWindow: typeof args.triggerWindow === "string" ? args.triggerWindow : undefined,
-          suspectedCause: typeof args.suspectedCause === "string" ? args.suspectedCause : undefined,
-        });
-      case "engram.continuity_incident_close":
-        return this.service.continuityIncidentClose({
-          id: typeof args.id === "string" ? args.id : "",
-          namespace: typeof args.namespace === "string" ? args.namespace : undefined,
-          principal: effectivePrincipal,
-          fixApplied: typeof args.fixApplied === "string" ? args.fixApplied : "",
-          verificationResult: typeof args.verificationResult === "string" ? args.verificationResult : "",
-          preventiveRule: typeof args.preventiveRule === "string" ? args.preventiveRule : undefined,
-        });
-      case "engram.continuity_incident_list":
-        return this.service.continuityIncidentList({
-          state: args.state === "closed" ? "closed" : args.state === "all" ? "all" : args.state === "open" ? "open" : undefined,
-          namespace: typeof args.namespace === "string" ? args.namespace : undefined,
-          principal: effectivePrincipal,
-          limit: typeof args.limit === "number" ? args.limit : undefined,
-        });
-      case "engram.continuity_loop_add_or_update":
-        return this.service.continuityLoopAddOrUpdate({
-          id: typeof args.id === "string" ? args.id : "",
-          cadence: (args.cadence as "daily" | "weekly" | "monthly" | "quarterly") ?? "weekly",
-          purpose: typeof args.purpose === "string" ? args.purpose : "",
-          status: (args.status as "active" | "paused" | "retired") ?? "active",
-          killCondition: typeof args.killCondition === "string" ? args.killCondition : "",
-          namespace: typeof args.namespace === "string" ? args.namespace : undefined,
-          principal: effectivePrincipal,
-          lastReviewed: typeof args.lastReviewed === "string" ? args.lastReviewed : undefined,
-          notes: typeof args.notes === "string" ? args.notes : undefined,
-        });
-      case "engram.continuity_loop_review":
-        return this.service.continuityLoopReview({
-          id: typeof args.id === "string" ? args.id : "",
-          namespace: typeof args.namespace === "string" ? args.namespace : undefined,
-          principal: effectivePrincipal,
-          status: args.status === "active" || args.status === "paused" || args.status === "retired" ? args.status : undefined,
-          notes: typeof args.notes === "string" ? args.notes : undefined,
-          reviewedAt: typeof args.reviewedAt === "string" ? args.reviewedAt : undefined,
-        });
-      case "engram.identity_anchor_get":
-        return this.service.identityAnchorGet({
-          namespace: typeof args.namespace === "string" ? args.namespace : undefined,
-          principal: effectivePrincipal,
-        });
-      case "engram.identity_anchor_update":
-        return this.service.identityAnchorUpdate({
-          namespace: typeof args.namespace === "string" ? args.namespace : undefined,
-          principal: effectivePrincipal,
-          identityTraits: typeof args.identityTraits === "string" ? args.identityTraits : undefined,
-          communicationPreferences: typeof args.communicationPreferences === "string" ? args.communicationPreferences : undefined,
-          operatingPrinciples: typeof args.operatingPrinciples === "string" ? args.operatingPrinciples : undefined,
-          continuityNotes: typeof args.continuityNotes === "string" ? args.continuityNotes : undefined,
-        });
-      case "engram.memory_identity":
-        return this.service.memoryIdentity({
-          namespace: typeof args.namespace === "string" ? args.namespace : undefined,
-          principal: effectivePrincipal,
-        });
-      // ── Work Layer tools ──────────────────────────────────────────────
-      case "engram.work_task":
-        return this.service.workTask({
-          action: (args.action as any) ?? "list",
-          id: typeof args.id === "string" ? args.id : undefined,
-          title: typeof args.title === "string" ? args.title : undefined,
-          description: typeof args.description === "string" ? args.description : undefined,
-          status: typeof args.status === "string" ? args.status : undefined,
-          priority: typeof args.priority === "string" ? args.priority : undefined,
-          owner: typeof args.owner === "string" ? args.owner : undefined,
-          assignee: typeof args.assignee === "string" ? args.assignee : undefined,
-          projectId: typeof args.projectId === "string" ? args.projectId : undefined,
-          tags: Array.isArray(args.tags) ? args.tags.filter((x: unknown): x is string => typeof x === "string") : undefined,
-          dueAt: typeof args.dueAt === "string" ? args.dueAt : undefined,
-        });
-      case "engram.work_project":
-        return this.service.workProject({
-          action: (args.action as any) ?? "list",
-          id: typeof args.id === "string" ? args.id : undefined,
-          name: typeof args.name === "string" ? args.name : undefined,
-          description: typeof args.description === "string" ? args.description : undefined,
-          status: typeof args.status === "string" ? args.status : undefined,
-          owner: typeof args.owner === "string" ? args.owner : undefined,
-          tags: Array.isArray(args.tags) ? args.tags.filter((x: unknown): x is string => typeof x === "string") : undefined,
-          taskId: typeof args.taskId === "string" ? args.taskId : undefined,
-          projectId: typeof args.projectId === "string" ? args.projectId : undefined,
-        });
-      case "engram.work_board":
-        return this.service.workBoard({
-          action: (args.action as any) ?? "export_markdown",
-          projectId: typeof args.projectId === "string" ? args.projectId : undefined,
-          snapshotJson: typeof args.snapshotJson === "string" ? args.snapshotJson : undefined,
-          linkToMemory: args.linkToMemory === true,
-        });
-      // ── Shared Context / Compounding tools ─────────────────────────
-      case "engram.shared_context_write_output":
-        return this.service.sharedContextWriteOutput({
-          agentId: typeof args.agentId === "string" ? args.agentId : "",
-          title: typeof args.title === "string" ? args.title : "",
-          content: typeof args.content === "string" ? args.content : "",
-        });
-      case "engram.shared_feedback_record":
-        return this.service.sharedFeedbackRecord({
-          agent: typeof args.agent === "string" ? args.agent : "",
-          decision: (args.decision as any) ?? "approved",
-          reason: typeof args.reason === "string" ? args.reason : "",
-          date: typeof args.date === "string" ? args.date : undefined,
-          learning: typeof args.learning === "string" ? args.learning : undefined,
-          outcome: typeof args.outcome === "string" ? args.outcome : undefined,
-          severity: args.severity === "low" || args.severity === "medium" || args.severity === "high" ? args.severity : undefined,
-          confidence: typeof args.confidence === "number" ? args.confidence : undefined,
-          workflow: typeof args.workflow === "string" ? args.workflow : undefined,
-          tags: Array.isArray(args.tags) ? args.tags.filter((x: unknown): x is string => typeof x === "string") : undefined,
-          evidenceWindowStart: typeof args.evidenceWindowStart === "string" ? args.evidenceWindowStart : undefined,
-          evidenceWindowEnd: typeof args.evidenceWindowEnd === "string" ? args.evidenceWindowEnd : undefined,
-          refs: Array.isArray(args.refs) ? args.refs.filter((x: unknown): x is string => typeof x === "string") : undefined,
-        });
-      case "engram.shared_priorities_append":
-        return this.service.sharedPrioritiesAppend({
-          agentId: typeof args.agentId === "string" ? args.agentId : "",
-          text: typeof args.text === "string" ? args.text : "",
-        });
-      case "engram.shared_context_cross_signals_run":
-        return this.service.sharedContextCrossSignalsRun({
-          date: typeof args.date === "string" ? args.date : undefined,
-        });
-      case "engram.shared_context_curate_daily":
-        return this.service.sharedContextCurateDaily({
-          date: typeof args.date === "string" ? args.date : undefined,
-        });
-      case "engram.compounding_weekly_synthesize":
-        return this.service.compoundingWeeklySynthesize({
-          weekId: typeof args.weekId === "string" ? args.weekId : undefined,
-        });
-      case "engram.compounding_promote_candidate":
-        return this.service.compoundingPromoteCandidate({
-          weekId: typeof args.weekId === "string" ? args.weekId : "",
-          candidateId: typeof args.candidateId === "string" ? args.candidateId : "",
-          dryRun: args.dryRun === true,
-        });
-      // ── Compression Guidelines tools ───────────────────────────────────
-      case "engram.compression_guidelines_optimize":
-        return this.service.compressionGuidelinesOptimize({
-          dryRun: args.dryRun === true,
-          eventLimit: typeof args.eventLimit === "number" ? args.eventLimit : undefined,
-        });
-      case "engram.compression_guidelines_activate":
-        return this.service.compressionGuidelinesActivate({
-          expectedContentHash: typeof args.expectedContentHash === "string" ? args.expectedContentHash : undefined,
-          expectedGuidelineVersion: typeof args.expectedGuidelineVersion === "number" ? args.expectedGuidelineVersion : undefined,
-        });
-      // ── Memory search & debug tools ──────────────────────────────────
-      case "engram.memory_profile":
-        return this.service.memoryProfile(
-          typeof args.namespace === "string" ? args.namespace : undefined,
-          effectivePrincipal,
-        );
-      case "engram.memory_entities_list":
-        return this.service.memoryEntitiesList(
-          typeof args.namespace === "string" ? args.namespace : undefined,
-          effectivePrincipal,
-        );
-      case "engram.memory_questions":
-        return this.service.memoryQuestions(
-          typeof args.namespace === "string" ? args.namespace : undefined,
-          effectivePrincipal,
-        );
-      case "engram.memory_last_recall":
-        return this.service.lastRecallSnapshot(
-          typeof args.sessionKey === "string" ? args.sessionKey : undefined,
-        );
-      case "engram.memory_intent_debug":
-        return this.service.intentDebug(
-          typeof args.namespace === "string" ? args.namespace : undefined,
-        );
-      case "engram.memory_qmd_debug":
-        return this.service.qmdDebug(
-          typeof args.namespace === "string" ? args.namespace : undefined,
-        );
-      case "engram.memory_graph_explain":
-        return this.service.graphExplainLastRecall(
-          typeof args.namespace === "string" ? args.namespace : undefined,
-        );
-      case "engram.graph_snapshot": {
-        // Validate the typed inputs at the boundary — silently coercing
-        // unknown shapes (e.g. `limit: "200"`) would defeat the access
-        // service's tighter parser (CLAUDE.md rule 28 + 51).
-        if (args.limit !== undefined && typeof args.limit !== "number") {
-          throw new Error("engram.graph_snapshot: limit must be a number");
-        }
-        if (args.since !== undefined && typeof args.since !== "string") {
-          throw new Error("engram.graph_snapshot: since must be a string");
-        }
-        if (
-          args.focusNodeId !== undefined
-          && typeof args.focusNodeId !== "string"
-        ) {
-          throw new Error("engram.graph_snapshot: focusNodeId must be a string");
-        }
-        let categories: string[] | undefined;
-        if (args.categories !== undefined) {
-          if (!Array.isArray(args.categories)) {
-            throw new Error(
-              "engram.graph_snapshot: categories must be an array of strings",
-            );
-          }
-          categories = args.categories.map((value, index) => {
-            if (typeof value !== "string") {
-              throw new Error(
-                `engram.graph_snapshot: categories[${index}] must be a string`,
-              );
-            }
-            return value;
-          });
-        }
-        return this.service.graphSnapshot(
-          {
-            namespace: typeof args.namespace === "string" ? args.namespace : undefined,
-            limit: typeof args.limit === "number" ? args.limit : undefined,
-            since: typeof args.since === "string" ? args.since : undefined,
-            focusNodeId: typeof args.focusNodeId === "string"
-              ? args.focusNodeId
-              : undefined,
-            ...(categories !== undefined ? { categories } : {}),
-          },
-          effectivePrincipal,
-        );
-      }
-      case "engram.memory_feedback":
-        return this.service.memoryFeedback({
-          memoryId: typeof args.memoryId === "string" ? args.memoryId : "",
-          vote: args.vote === "down" ? "down" : "up",
-          note: typeof args.note === "string" ? args.note : undefined,
-        });
-      case "engram.memory_promote":
-        return this.service.memoryPromote({
-          memoryId: typeof args.memoryId === "string" ? args.memoryId : "",
-          namespace: typeof args.namespace === "string" ? args.namespace : undefined,
-          principal: effectivePrincipal,
-          sessionKey: typeof args.sessionKey === "string" ? args.sessionKey : undefined,
-        });
-      case "engram.memory_outcome": {
-        // Validate `outcome` up front — silently defaulting unknown values
-        // to "success" or "failure" would poison the counters a downstream
-        // recall filter (PR 4) will trust.
-        const outcome = args.outcome;
-        if (outcome !== "success" && outcome !== "failure") {
-          throw new Error(
-            `engram.memory_outcome: outcome must be "success" or "failure"; got ${JSON.stringify(outcome)}`,
-          );
-        }
-        return this.service.memoryOutcome({
-          memoryId: typeof args.memoryId === "string" ? args.memoryId : "",
-          outcome,
-          namespace: typeof args.namespace === "string" ? args.namespace : undefined,
-          principal: effectivePrincipal,
-          sessionKey: typeof args.sessionKey === "string" ? args.sessionKey : undefined,
-          timestamp: typeof args.timestamp === "string" ? args.timestamp : undefined,
-        });
-      }
-      case "engram.memory_action_apply":
-        return this.service.memoryActionApply({
-          action: typeof args.action === "string" ? args.action : "",
-          outcome: typeof args.outcome === "string" ? args.outcome : undefined,
-          reason: typeof args.reason === "string" ? args.reason : undefined,
-          memoryId: typeof args.memoryId === "string" ? args.memoryId : undefined,
-          namespace: typeof args.namespace === "string" ? args.namespace : undefined,
-          principal: effectivePrincipal,
-          sessionKey: typeof args.sessionKey === "string" ? args.sessionKey : undefined,
-          content: typeof args.content === "string" ? args.content : undefined,
-          category: typeof args.category === "string" ? args.category : undefined,
-          linkTargetId: typeof args.linkTargetId === "string" ? args.linkTargetId : undefined,
-          linkType: typeof args.linkType === "string" ? args.linkType : undefined,
-          linkStrength: typeof args.linkStrength === "number" ? args.linkStrength : undefined,
-          artifactType: typeof args.artifactType === "string" ? args.artifactType : undefined,
-          execute: typeof args.execute === "boolean" ? args.execute : undefined,
-          sourcePrompt: typeof args.sourcePrompt === "string" ? args.sourcePrompt : undefined,
-          dryRun: args.dryRun === true,
-        });
-      case "engram.context_checkpoint":
-        return this.service.contextCheckpoint({
-          sessionKey: typeof args.sessionKey === "string" ? args.sessionKey : "",
-          context: typeof args.context === "string" ? args.context : "",
-          namespace: typeof args.namespace === "string" ? args.namespace : undefined,
-          principal: effectivePrincipal,
-        });
-      // ── Daily Context Briefing (#370) ───────────────────────────────────
-      case "engram.briefing": {
-        // Validate the format value upfront — unsupported values (e.g. "xml")
-        // must be rejected with a descriptive error rather than silently
-        // falling back to the default format.
-        const rawFormat = typeof args.format === "string" ? args.format : undefined;
-        const formatErr = validateBriefingFormat(rawFormat);
-        if (formatErr) throw new Error(formatErr);
-        return this.service.briefing({
-          since: typeof args.since === "string" ? args.since : undefined,
-          focus: typeof args.focus === "string" ? args.focus : undefined,
-          namespace: typeof args.namespace === "string" ? args.namespace : undefined,
-          format: rawFormat as "json" | "markdown" | undefined,
-          maxFollowups:
-            typeof args.maxFollowups === "number" ? args.maxFollowups : undefined,
-          principal: effectivePrincipal,
-        });
-      }
-      // ── Contradiction Review (issue #520) ──────────────────────────────────
-      case "engram.review_list":
-      case "remnic.review_list": {
-        const {
-          isDefaultReviewNamespace,
-          listPairs,
-        } = await import("./contradiction/contradiction-review.js");
-        const VALID_REVIEW_FILTERS = new Set(["all", "unresolved", "contradicts", "independent", "duplicates", "needs-user"]);
-        const rawFilter = typeof args.filter === "string" ? args.filter : "unresolved";
-        if (!VALID_REVIEW_FILTERS.has(rawFilter)) {
-          throw new Error(`Invalid filter '${rawFilter}'. Valid: ${[...VALID_REVIEW_FILTERS].join(", ")}`);
-        }
-        const filter = rawFilter as "all" | "unresolved" | "contradicts" | "independent" | "duplicates" | "needs-user";
-        const ns = typeof args.namespace === "string" ? args.namespace : undefined;
-        const limit = typeof args.limit === "number" ? args.limit : 50;
-        const resolved = await this.service.getReadableStorageForNamespace(ns, effectivePrincipal);
-        const reviewNamespace = this.service.configRef.namespacesEnabled ? resolved.namespace : undefined;
-        const includeUnscopedForNamespace = Boolean(
-          reviewNamespace && isDefaultReviewNamespace(this.service.configRef.defaultNamespace, ns, reviewNamespace),
-        );
-        return listPairs(this.service.memoryDir, {
-          filter,
-          namespace: reviewNamespace,
-          includeUnscopedForNamespace,
-          limit,
-        });
-      }
-      case "engram.review_resolve":
-      case "remnic.review_resolve": {
-        const pairId = typeof args.pairId === "string" ? args.pairId : "";
-        const verb = typeof args.verb === "string" ? args.verb : "";
-        if (!pairId) throw new Error("pairId is required");
-        if (!verb) throw new Error("verb is required");
-        const { isValidResolutionVerb } = await import("./contradiction/resolution.js");
-        if (!isValidResolutionVerb(verb)) throw new Error(`Invalid verb: ${verb}. Must be one of: keep-a, keep-b, merge, both-valid, needs-more-context`);
-        const { executeResolution } = await import("./contradiction/resolution.js");
-        return executeResolution(this.service.memoryDir, this.service.storageRef, pairId, verb, {
-          mergedMemoryId: typeof args.mergedMemoryId === "string" ? args.mergedMemoryId : undefined,
-          mergedContent: typeof args.mergedContent === "string" ? args.mergedContent : undefined,
-          storageForNamespace: async (namespace) => {
-            const resolved = await this.service.getWritableStorageForNamespace(namespace, effectivePrincipal);
-            return resolved.storage;
-          },
-          // Catalog write touch (issue #1499 sweep): a contradiction merge writes
-          // a new memory directly to the resolved namespace storage, bypassing the
-          // extraction write path. Record it so QMD maintenance / writtenSince
-          // don't miss the write. Best-effort and failure-tolerant.
-          onMergedMemoryWritten: (namespace, storageDir) => {
-            // #1522: catalog touch handled at the storage chokepoint.
-          },
-        });
-      }
-      case "engram.contradiction_scan_run":
-      case "remnic.contradiction_scan_run": {
-        const { runContradictionScan } = await import("./contradiction/contradiction-scan.js");
-        return runContradictionScan({
-          storage: this.service.storageRef,
-          config: this.service.configRef,
-          memoryDir: this.service.memoryDir,
-          embeddingLookupFactory: this.service.embeddingLookupFactoryRef,
-          storageForNamespace: (namespace) =>
-            this.service.getWritableStorageForNamespace(namespace, effectivePrincipal),
-          localLlm: this.service.localLlmRef,
-          fallbackLlm: this.service.fallbackLlmRef,
-          namespace: typeof args.namespace === "string" ? args.namespace : undefined,
-        });
-      }
-      case "engram.memory_summarize_hourly":
-      case "remnic.memory_summarize_hourly":
-        return this.service.memorySummarizeHourly();
-      case "engram.conversation_index_update":
-      case "remnic.conversation_index_update": {
-        if ("sessionKey" in args && args.sessionKey !== undefined && typeof args.sessionKey !== "string") {
-          throw new Error("sessionKey must be a string when provided");
-        }
-        const sessionKey = typeof args.sessionKey === "string" ? args.sessionKey : undefined;
-        return this.service.conversationIndexUpdate({
-          sessionKey,
-          hours: typeof args.hours === "number" && Number.isFinite(args.hours) ? args.hours : undefined,
-          embed: typeof args.embed === "boolean" ? args.embed : undefined,
-        });
-      }
-      case "engram.profiling_report":
-      case "remnic.profiling_report": {
-        if ("format" in args && args.format !== undefined && typeof args.format !== "string") {
-          throw new EngramAccessInputError("format must be a string when provided");
-        }
-        if ("limit" in args && args.limit !== undefined && typeof args.limit !== "number") {
-          throw new EngramAccessInputError("limit must be a number when provided");
-        }
-        return this.service.profilingReport({
-          format: typeof args.format === "string" ? args.format : undefined,
-          limit: typeof args.limit === "number" ? args.limit : undefined,
-        });
-      }
-      case "engram.graph_edge_decay_run":
-      case "remnic.graph_edge_decay_run": {
-        // Issue #681 PR 2/3 — gated by config; tool always callable, but
-        // the job is a no-op when disabled (and the response indicates it).
-        const cfg = this.service.configRef;
-        if (!cfg.graphEdgeDecayEnabled) {
-          return {
-            ranAt: new Date().toISOString(),
-            disabled: true,
-            reason: "graphEdgeDecayEnabled is false",
-          };
-        }
-        const { runGraphEdgeDecayMaintenanceAcrossNamespaces } = await import(
-          "./maintenance/graph-edge-decay.js"
-        );
-        const dryRun = args.dryRun === true;
-        // Codex P2 / gotcha #42: enumerate every namespace storage root
-        // so non-default namespaces (memoryDir/namespaces/<ns>) also get
-        // confidence decay applied. Returns a list of per-namespace
-        // results — each with telemetry or an error string.
-        const results = await runGraphEdgeDecayMaintenanceAcrossNamespaces(
-          this.service.memoryDir,
-          {
-            windowMs: cfg.graphEdgeDecayWindowMs,
-            perWindow: cfg.graphEdgeDecayPerWindow,
-            floor: cfg.graphEdgeDecayFloor,
-            visibilityThreshold: cfg.graphEdgeDecayVisibilityThreshold,
-            dryRun,
-            namespacesEnabled: cfg.namespacesEnabled === true,
-            defaultNamespace: cfg.defaultNamespace,
-          },
-        );
-        return { results };
-      }
-      case "engram.live_connectors_run":
-      case "remnic.live_connectors_run":
-        return this.service.liveConnectorsRun(
-          {
-            authenticatedPrincipal: effectivePrincipal,
-            force: args.force === true,
-          },
-          effectivePrincipal,
-        );
-      // ── Peer Registry dispatchers (issue #679 PR 4/5) ─────────────────
-      case "engram.peer_list":
-      case "remnic.peer_list":
-        return this.service.peerList();
-      case "engram.peer_get":
-      case "remnic.peer_get": {
-        const id = typeof args.id === "string" ? args.id : "";
-        if (!id) throw new Error("engram.peer_get: id is required");
-        return this.service.peerGet(id);
-      }
-      case "engram.peer_set":
-      case "remnic.peer_set": {
-        const id = typeof args.id === "string" ? args.id : "";
-        if (!id) throw new Error("engram.peer_set: id is required");
-        // Codex P2 (PR #756 round 2): mirror the HTTP surface — reject
-        // non-string `kind`/`displayName`/`notes` rather than silently
-        // coercing to `undefined` and letting peerSet fall back to its
-        // "human" default. Symmetry across access surfaces (CLAUDE.md
-        // rule 39) and no-silent-defaults on bad input (rule 51).
-        if (args.kind !== undefined && typeof args.kind !== "string") {
-          throw new Error("engram.peer_set: kind must be a string when provided");
-        }
-        if (args.displayName !== undefined && typeof args.displayName !== "string") {
-          throw new Error("engram.peer_set: displayName must be a string when provided");
-        }
-        if (args.notes !== undefined && typeof args.notes !== "string") {
-          throw new Error("engram.peer_set: notes must be a string when provided");
-        }
-        return this.service.peerSet({
-          id,
-          kind: typeof args.kind === "string" ? args.kind : undefined,
-          displayName: typeof args.displayName === "string" ? args.displayName : undefined,
-          notes: typeof args.notes === "string" ? args.notes : undefined,
-        });
-      }
-      case "engram.peer_delete":
-      case "remnic.peer_delete": {
-        const id = typeof args.id === "string" ? args.id : "";
-        if (!id) throw new Error("engram.peer_delete: id is required");
-        return this.service.peerDelete(id);
-      }
-      case "engram.peer_profile_get":
-      case "remnic.peer_profile_get": {
-        const id = typeof args.id === "string" ? args.id : "";
-        if (!id) throw new Error("engram.peer_profile_get: id is required");
-        return this.service.peerProfileGet(id);
-      }
-      case "engram.peer_forget":
-      case "remnic.peer_forget": {
-        const id = typeof args.id === "string" ? args.id : "";
-        if (!id) throw new Error("engram.peer_forget: id is required");
-        const confirm = typeof args.confirm === "string" ? args.confirm : "";
-        if (confirm !== "yes") {
-          throw new Error(
-            "engram.peer_forget: confirm must be 'yes' to prevent accidental data loss",
-          );
-        }
-        return this.service.peerForget(id, { confirm: "yes" });
-      }
-      // ── Operator Console state (issue #688 PR 2/3) ──────────────────────────
-      case "engram.console_state":
-      case "remnic.console_state":
-        return this.service.consoleState(
-          typeof args.namespace === "string" ? args.namespace : undefined,
-          effectivePrincipal,
-        );
-      // ── Dreams telemetry (issue #678 PR 3+4) ──────────────────────────────
-      case "engram.dreams_status":
-      case "remnic.dreams_status": {
-        const { normalizeDreamsStatusWindowHours } = await import("./maintenance/dreams-ledger.js");
-        let windowHours = 24;
-        try {
-          windowHours = normalizeDreamsStatusWindowHours(args.windowHours);
-        } catch {
-          throw new Error(
-            `engram.dreams_status: windowHours must be a positive integer (e.g. 24). Got: ${String(args.windowHours)}`,
-          );
-        }
-        if (
-          "namespace" in args &&
-          args.namespace !== undefined &&
-          typeof args.namespace !== "string"
-        ) {
-          throw new Error("engram.dreams_status: namespace must be a string when provided");
-        }
-        const namespace =
-          typeof args.namespace === "string" ? args.namespace : undefined;
-        return this.service.dreamsStatus({
-          windowHours,
-          namespace,
-          principal: effectivePrincipal,
-        });
-      }
-      case "engram.dreams_run":
-      case "remnic.dreams_run": {
-        const VALID_PHASES = ["lightSleep", "rem", "deepSleep"];
-        const phase = typeof args.phase === "string" ? args.phase : "";
-        if (!phase || !VALID_PHASES.includes(phase)) {
-          throw new Error(
-            `engram.dreams_run: phase is required and must be one of: ${VALID_PHASES.join(", ")}`,
-          );
-        }
-        if (
-          "dryRun" in args &&
-          args.dryRun !== undefined &&
-          typeof args.dryRun !== "boolean"
-        ) {
-          throw new Error("engram.dreams_run: dryRun must be a boolean when provided");
-        }
-        if (
-          "namespace" in args &&
-          args.namespace !== undefined &&
-          typeof args.namespace !== "string"
-        ) {
-          throw new Error("engram.dreams_run: namespace must be a string when provided");
-        }
-        const namespace =
-          typeof args.namespace === "string" ? args.namespace : undefined;
-        const dryRun = args.dryRun === true;
-        return this.service.dreamsRun({
-          phase: phase as import("./types.js").DreamsPhase,
-          dryRun,
-          namespace,
-          authenticatedPrincipal: effectivePrincipal,
-        });
+    const op = getOperation(migrated);
+    if (!op) {
+      throw new EngramAccessInputError("access-boundary: operation not registered: " + migrated);
+    }
+    let envelope: Record<string, unknown>;
+    if (migrated === "memory_store") {
+      envelope = parseMcpRequest("memoryStore", args);
+    } else if (migrated === "suggestion_submit") {
+      envelope = parseMcpRequest("suggestionSubmit", args);
+    } else if (migrated === "action_confidence") {
+      envelope = parseMcpRequest("actionConfidence", args);
+    } else if (migrated === "day_summary") {
+      envelope = parseMcpRequest("daySummary", args);
+    } else if (migrated === "capsule_export") {
+      envelope = parseMcpRequest("capsuleExport", args);
+    } else if (migrated === "capsule_import") {
+      envelope = parseMcpRequest("capsuleImport", args);
+    } else if (migrated === "capsule_list") {
+      envelope = parseMcpRequest("capsuleList", args);
+    } else if (migrated === "observe") {
+      envelope = parseMcpRequest("observe", args);
+    } else if (migrated === "lcm_compaction_flush") {
+      envelope = parseMcpRequest("lcmCompactionFlush", args);
+    } else if (migrated === "lcm_compaction_record") {
+      envelope = parseMcpRequest("lcmCompactionRecord", args);
+    } else if (migrated.startsWith("codegraph_")) {
+      envelope = { ...args, tool: migrated.slice("codegraph_".length) };
+    } else if (migrated === "chat_message") {
+      // memory_chat dispatches to processChatMessage, not a pure service call.
+      const message = typeof args.message === "string" ? args.message : "";
+      if (!message) throw new EngramAccessInputError("message is required");
+      const chatSessionId = typeof args.chatSessionId === "string" ? args.chatSessionId : undefined;
+      const chatResult = await processChatMessage({
+        service: this.service,
+        config: this.service.configRef?.chat,
+        memoryDir: this.service.memoryDir,
+        message,
+        ...(chatSessionId ? { chatSessionId } : {}),
+        ...(effectivePrincipal ? { principal: effectivePrincipal } : {}),
+        ...(scope?.namespace ? { namespace: scope.namespace } : {}),
+        ...(scope?.sessionKey ? { sessionKey: scope.sessionKey } : {}),
+      });
+      if (chatResult && typeof chatResult === "object" && "error" in chatResult) {
+        const { error: _stripped, ...wireResult } = chatResult as unknown as Record<string, unknown>;
+        return wireResult;
       }
-      case "engram.memory_chat": {
-        const message = typeof args.message === "string" ? args.message : "";
-        if (!message) {
-          throw new EngramAccessInputError("message is required");
-        }
-        const chatSessionId = typeof args.chatSessionId === "string" ? args.chatSessionId : undefined;
-        const chatResult = await processChatMessage({
-          service: this.service,
-          config: this.service.configRef?.chat,
-          memoryDir: this.service.memoryDir,
-          message,
-          ...(chatSessionId ? { chatSessionId } : {}),
-          ...(effectivePrincipal ? { principal: effectivePrincipal } : {}),
-          ...(scope?.namespace ? { namespace: scope.namespace } : {}),
-          ...(scope?.sessionKey ? { sessionKey: scope.sessionKey } : {}),
-        });
-        // Strip internal error details — MCP clients get the tagged reply only,
-        // matching the HTTP handler (cursor security review, Thread 17).
-        if (chatResult && typeof chatResult === "object" && "error" in chatResult) {
-          const { error: _stripped, ...wireResult } = chatResult as unknown as Record<string, unknown>;
-          return wireResult;
+      return chatResult;
+    } else {
+      envelope = args;
+    }
+    // recall citation guidance (MCP-specific post-processing).
+    if (migrated === "recall") {
+      const result = await op.run(envelope, { service: this.service, authenticatedPrincipal: effectivePrincipal }) as { result: unknown };
+      const response = result.result as Record<string, unknown>;
+      if (this.shouldEmitCitations(mcpSessionId)) {
+        const citations = this.buildRecallCitations(response as unknown as EngramAccessRecallResponse);
+        const guidance = buildCitationGuidance(citations);
+        if (guidance.length > 0) {
+          return { ...response, context: ((response as Record<string, unknown>).context as string ?? "") + guidance, citations };
         }
-        return chatResult;
       }
-      default:
-        throw new Error(`unknown tool: ${name}`);
+      return response;
     }
+    const output = (await op.run(envelope, {
+      service: this.service,
+      authenticatedPrincipal: effectivePrincipal,
+      ...(enforceWriteQuota ? { hooks: { enforceWriteQuota } } : {}),
+    })) as { result: unknown };
+    return output.result;
   }
 }