@remnic/core 9.3.725 → 9.3.727

package/dist/{chunk-XGTBNVIU.js → chunk-AAD2ZS6P.js}

@@ -15,6 +15,15 @@ async function callOpenAiCompatibleChat(endpoint, messages, options, fetchImpl =
   const url = joinBaseUrl(endpoint.baseUrl, "/chat/completions");
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), options.timeoutMs);
+  const batchSignal = options.signal;
+  const onBatchAbort = () => controller.abort();
+  if (batchSignal) {
+    if (batchSignal.aborted) {
+      controller.abort();
+    } else {
+      batchSignal.addEventListener("abort", onBatchAbort, { once: true });
+    }
+  }
   try {
     const body = {
       model: endpoint.model,
@@ -45,6 +54,7 @@ async function callOpenAiCompatibleChat(endpoint, messages, options, fetchImpl =
     return { content, modelUsed: extractModel(parsed) ?? endpoint.model };
   } finally {
     clearTimeout(timer);
+    if (batchSignal) batchSignal.removeEventListener("abort", onBatchAbort);
   }
 }
 function joinBaseUrl(base, path) {
@@ -76,4 +86,4 @@ export {
   resolveCorrectionIntentEndpoint,
   callOpenAiCompatibleChat
 };
-//# sourceMappingURL=chunk-XGTBNVIU.js.map
+//# sourceMappingURL=chunk-AAD2ZS6P.js.map

package/dist/chunk-AAD2ZS6P.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/local-model-endpoint.ts"],"sourcesContent":["/**\n * Local fine-tuned model endpoint resolver + openai-compatible caller\n * (issue #1585 model-lab integration).\n *\n * Remnic's two classification workloads — the extraction faithfulness gate\n * (#1576) and passive-correction intent detection (#1581) — can run on small\n * fine-tuned models served locally (Ollama / vLLM) instead of prompted\n * frontier LLMs. The model-lab (`model-lab/`) produces those models; this\n * module is the config-side half: it resolves the optional local endpoint\n * pointer from config and, when set, makes a minimal openai-compatible\n * chat-completions call to it.\n *\n * Design:\n *   - **Pointers are optional.** Empty defaults preserve the existing routing\n *     chain exactly (rule 39 / byte-identical pre-feature). A resolver returns\n *     `null` when the pointer is unset, so callers short-circuit before any\n *     network.\n *   - **Graceful degradation.** A local-endpoint failure (network, non-2xx,\n *     malformed body, timeout) returns `null`; callers fall back to the\n *     configured chain (checklist §4 — never block writes on a classifier).\n *   - **No inline casts.** The fetch JSON is narrowed with `in` / `typeof`\n *     guards (project rule: never assert a shape to read one property).\n *   - **Injectable fetch.** `callOpenAiCompatibleChat` takes an optional\n *     `fetchImpl` so the caller is unit-testable without a live server.\n */\n\nimport type { PluginConfig } from \"./types.js\";\n\n/** A resolved local endpoint: where to call + which model to name. */\nexport interface LocalModelEndpoint {\n  /** Base URL, e.g. `http://localhost:11434/v1` (no trailing slash required). */\n  baseUrl: string;\n  /** Model name the server expects, e.g. `remnic-faithfulness-gate-v1`. */\n  model: string;\n}\n\n/** A chat message in the openai-compatible shape this caller sends. */\nexport interface EndpointChatMessage {\n  role: \"system\" | \"user\" | \"assistant\";\n  content: string;\n}\n\n/** Options for a single local-endpoint chat call. */\nexport interface EndpointChatOptions {\n  /** Per-call timeout in ms. Bounds each attempt so one slow server can't\n   *  starve the batch (matches the local-LLM precedent). */\n  timeoutMs: number;\n  /** Optional batch AbortSignal forwarded into the probe (issue #1700 nit #5).\n   *  When the batch budget elapses (or the caller aborts), the in-flight probe\n   *  aborts immediately instead of waiting for its own `timeoutMs` — a\n   *  micro-optimization, not a correctness fix (the outer race already bounds\n   *  the total). Undefined preserves the prior per-attempt-only behavior. */\n  signal?: AbortSignal;\n  /** Sampling temperature — classification wants low entropy (0.0–0.2). */\n  temperature?: number;\n  /** Max output tokens. */\n  maxTokens?: number;\n  /** Request JSON-object output (the gate emits a JSON verdict array). */\n  responseFormatJson?: boolean;\n}\n\n/** Result of a local-endpoint chat call. */\nexport interface EndpointChatResult {\n  content: string;\n  /** The model the server reports it used (falls back to the requested name). */\n  modelUsed: string;\n}\n\n/**\n * Resolve the faithfulness-gate local endpoint from config (issue #1585).\n *\n * Returns the endpoint only when BOTH a base URL and a model name are\n * configured; otherwise `null` (gate uses its existing routing chain). The\n * gate's verifier needs a model identity, so a base URL alone is intentionally\n * insufficient — silently calling whatever the server's default model is would\n * be an unreviewed behavioral change.\n */\nexport function resolveFaithfulnessGateEndpoint(\n  config: Pick<PluginConfig, \"extractionFaithfulnessModel\" | \"extractionFaithfulnessBaseUrl\">,\n): LocalModelEndpoint | null {\n  const baseUrl = config.extractionFaithfulnessBaseUrl.trim();\n  const model = config.extractionFaithfulnessModel.trim();\n  if (!baseUrl || !model) return null;\n  return { baseUrl, model };\n}\n\n/**\n * Resolve the correction-intent local endpoint from config (issue #1581/#1585).\n *\n * Same contract as the gate resolver. Consumption by the model-backed\n * detector is the consuming child's job — the rule-based\n * `detectPassiveCorrections` remains the default path; this pointer lets a\n * future model-backed detector route to a fine-tuned local classifier when an\n * operator configures one.\n */\nexport function resolveCorrectionIntentEndpoint(\n  config: Pick<PluginConfig, \"correctionIntentModel\" | \"correctionIntentBaseUrl\">,\n): LocalModelEndpoint | null {\n  const baseUrl = config.correctionIntentBaseUrl.trim();\n  const model = config.correctionIntentModel.trim();\n  if (!baseUrl || !model) return null;\n  return { baseUrl, model };\n}\n\ntype FetchLike = typeof fetch;\n\n/**\n * Make an openai-compatible chat-completions call to a local endpoint.\n *\n * POSTs to `${baseUrl}/chat/completions` with `{ model, messages, ... }` and\n * returns the first choice's content. Any failure (non-2xx, network error,\n * malformed body, timeout) returns `null` so callers fall back gracefully.\n *\n * The response is narrowed with runtime guards — never an unchecked cast — so\n * a surprising server response fails closed (`null`) rather than reading a\n * fabricated field.\n */\nexport async function callOpenAiCompatibleChat(\n  endpoint: LocalModelEndpoint,\n  messages: EndpointChatMessage[],\n  options: EndpointChatOptions,\n  fetchImpl: FetchLike = fetch,\n): Promise<EndpointChatResult | null> {\n  const url = joinBaseUrl(endpoint.baseUrl, \"/chat/completions\");\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), options.timeoutMs);\n  // Forward the batch AbortSignal into the probe (issue #1700 nit #5): if the\n  // batch budget already elapsed, abort the in-flight probe immediately rather\n  // than waiting for the probe's own timeoutMs. AbortSignal.any is ES2024\n  // (forbidden here); wire the listener manually + guard the already-aborted\n  // case. The fetch still uses the probe's controller, so clearing the timer\n  // below is the only cleanup needed.\n  const batchSignal = options.signal;\n  const onBatchAbort = () => controller.abort();\n  if (batchSignal) {\n    if (batchSignal.aborted) {\n      controller.abort();\n    } else {\n      batchSignal.addEventListener(\"abort\", onBatchAbort, { once: true });\n    }\n  }\n  try {\n    const body: Record<string, unknown> = {\n      model: endpoint.model,\n      messages,\n      temperature: options.temperature ?? 0.1,\n    };\n    if (typeof options.maxTokens === \"number\") {\n      body.max_tokens = options.maxTokens;\n    }\n    if (options.responseFormatJson) {\n      body.response_format = { type: \"json_object\" };\n    }\n    let response: Response;\n    try {\n      response = await fetchImpl(url, {\n        method: \"POST\",\n        headers: { \"content-type\": \"application/json\" },\n        body: JSON.stringify(body),\n        signal: controller.signal,\n      });\n    } catch {\n      // Network error or abort — fail closed, let the caller fall back.\n      return null;\n    }\n    if (!response.ok) return null;\n    const parsed: unknown = await response.json().catch(() => null);\n    const content = extractFirstChoiceContent(parsed);\n    if (content === null) return null;\n    return { content, modelUsed: extractModel(parsed) ?? endpoint.model };\n  } finally {\n    clearTimeout(timer);\n    if (batchSignal) batchSignal.removeEventListener(\"abort\", onBatchAbort);\n  }\n}\n\n/** Join a base URL and a path, tolerating a trailing slash on the base. */\nfunction joinBaseUrl(base: string, path: string): string {\n  return base.endsWith(\"/\") ? `${base.slice(0, -1)}${path}` : `${base}${path}`;\n}\n\n/**\n * Narrow the openai-compatible response and pull the first choice's content.\n *\n * `in` / `typeof` guards only — no `as` cast (project rule). Returns `null`\n * for any shape that isn't `{ choices: [{ message: { content: string } }, …] }`.\n */\nfunction extractFirstChoiceContent(data: unknown): string | null {\n  if (!data || typeof data !== \"object\") return null;\n  // After `in`, TS narrows the property to `unknown` — read it directly, no cast.\n  if (!(\"choices\" in data) || !Array.isArray(data.choices)) return null;\n  const choices: unknown[] = data.choices;\n  for (const choice of choices) {\n    if (!choice || typeof choice !== \"object\") continue;\n    if (!(\"message\" in choice)) continue;\n    const message = choice.message;\n    if (!message || typeof message !== \"object\") continue;\n    if (!(\"content\" in message)) continue;\n    const content = message.content;\n    if (typeof content === \"string\" && content.length > 0) return content;\n  }\n  return null;\n}\n\n/** Narrow the `model` field from the response (best-effort, may be absent). */\nfunction extractModel(data: unknown): string | null {\n  if (!data || typeof data !== \"object\" || !(\"model\" in data)) return null;\n  const model = data.model;\n  return typeof model === \"string\" && model.length > 0 ? model : null;\n}\n"],"mappings":";AA6EO,SAAS,gCACd,QAC2B;AAC3B,QAAM,UAAU,OAAO,8BAA8B,KAAK;AAC1D,QAAM,QAAQ,OAAO,4BAA4B,KAAK;AACtD,MAAI,CAAC,WAAW,CAAC,MAAO,QAAO;AAC/B,SAAO,EAAE,SAAS,MAAM;AAC1B;AAWO,SAAS,gCACd,QAC2B;AAC3B,QAAM,UAAU,OAAO,wBAAwB,KAAK;AACpD,QAAM,QAAQ,OAAO,sBAAsB,KAAK;AAChD,MAAI,CAAC,WAAW,CAAC,MAAO,QAAO;AAC/B,SAAO,EAAE,SAAS,MAAM;AAC1B;AAeA,eAAsB,yBACpB,UACA,UACA,SACA,YAAuB,OACa;AACpC,QAAM,MAAM,YAAY,SAAS,SAAS,mBAAmB;AAC7D,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,QAAQ,SAAS;AAOpE,QAAM,cAAc,QAAQ;AAC5B,QAAM,eAAe,MAAM,WAAW,MAAM;AAC5C,MAAI,aAAa;AACf,QAAI,YAAY,SAAS;AACvB,iBAAW,MAAM;AAAA,IACnB,OAAO;AACL,kBAAY,iBAAiB,SAAS,cAAc,EAAE,MAAM,KAAK,CAAC;AAAA,IACpE;AAAA,EACF;AACA,MAAI;AACF,UAAM,OAAgC;AAAA,MACpC,OAAO,SAAS;AAAA,MAChB;AAAA,MACA,aAAa,QAAQ,eAAe;AAAA,IACtC;AACA,QAAI,OAAO,QAAQ,cAAc,UAAU;AACzC,WAAK,aAAa,QAAQ;AAAA,IAC5B;AACA,QAAI,QAAQ,oBAAoB;AAC9B,WAAK,kBAAkB,EAAE,MAAM,cAAc;AAAA,IAC/C;AACA,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,UAAU,KAAK;AAAA,QAC9B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,IAAI;AAAA,QACzB,QAAQ,WAAW;AAAA,MACrB,CAAC;AAAA,IACH,QAAQ;AAEN,aAAO;AAAA,IACT;AACA,QAAI,CAAC,SAAS,GAAI,QAAO;AACzB,UAAM,SAAkB,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,IAAI;AAC9D,UAAM,UAAU,0BAA0B,MAAM;AAChD,QAAI,YAAY,KAAM,QAAO;AAC7B,WAAO,EAAE,SAAS,WAAW,aAAa,MAAM,KAAK,SAAS,MAAM;AAAA,EACtE,UAAE;AACA,iBAAa,KAAK;AAClB,QAAI,YAAa,aAAY,oBAAoB,SAAS,YAAY;AAAA,EACxE;AACF;AAGA,SAAS,YAAY,MAAc,MAAsB;AACvD,SAAO,KAAK,SAAS,GAAG,IAAI,GAAG,KAAK,MAAM,GAAG,EAAE,CAAC,GAAG,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI;AAC5E;AAQA,SAAS,0BAA0B,MAA8B;AAC/D,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAE9C,MAAI,EAAE,aAAa,SAAS,CAAC,MAAM,QAAQ,KAAK,OAAO,EAAG,QAAO;AACjE,QAAM,UAAqB,KAAK;AAChC,aAAW,UAAU,SAAS;AAC5B,QAAI,CAAC,UAAU,OAAO,WAAW,SAAU;AAC3C,QAAI,EAAE,aAAa,QAAS;AAC5B,UAAM,UAAU,OAAO;AACvB,QAAI,CAAC,WAAW,OAAO,YAAY,SAAU;AAC7C,QAAI,EAAE,aAAa,SAAU;AAC7B,UAAM,UAAU,QAAQ;AACxB,QAAI,OAAO,YAAY,YAAY,QAAQ,SAAS,EAAG,QAAO;AAAA,EAChE;AACA,SAAO;AACT;AAGA,SAAS,aAAa,MAA8B;AAClD,MAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,EAAE,WAAW,MAAO,QAAO;AACpE,QAAM,QAAQ,KAAK;AACnB,SAAO,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ;AACjE;","names":[]}

package/dist/{chunk-Z3FGC3QE.js → chunk-AQLOP5F4.js}

@@ -1,12 +1,21 @@
 import {
   enqueuePassiveCorrectionNotification
-} from "./chunk-4WZ3J7M6.js";
+} from "./chunk-EY6MDMHK.js";
 import {
   stripAttributesSuffix
 } from "./chunk-SVOZFLIQ.js";
 import {
   serializeMutations
 } from "./chunk-LTJAMRGI.js";
+import {
+  supersessionKeysForFact
+} from "./chunk-TKZ3AL5V.js";
+import {
+  computeContentHash
+} from "./chunk-W5H6ZRPT.js";
+import {
+  sanitizeMemoryContent
+} from "./chunk-5GKPFL3S.js";
 import {
   log
 } from "./chunk-NU3CSQ4H.js";
@@ -79,22 +88,68 @@ function validateRedactionPattern(pattern) {
       `redaction_rule.pattern exceeds the ${REDACTION_PATTERN_MAX}-character bound.`
     );
   }
-  if (isRegexLike(trimmed) && isOverlyBroadRegex(trimmed)) {
+  if (isRegexLike(trimmed) && isUnsafeRedactionRegex(trimmed)) {
     throw new CorrectionContractError(
-      "redaction_rule.pattern is too broad \u2014 use a bounded literal or a more specific pattern."
+      "redaction_rule.pattern is unsafe \u2014 use a bounded literal or a regex without nested quantifiers / overlapping alternation."
     );
   }
+  if (isRegexLike(trimmed)) {
+    const regexBody = trimmed.slice(1, -1);
+    if (regexBody.length === 0) {
+      throw new CorrectionContractError("redaction_rule.pattern body is empty \u2014 use a non-empty regex.");
+    }
+    try {
+      if (new RegExp(regexBody).test("")) {
+        throw new CorrectionContractError(
+          "redaction_rule.pattern matches the empty string \u2014 it would withhold every fact."
+        );
+      }
+    } catch (e) {
+      if (e instanceof CorrectionContractError) throw e;
+    }
+  }
   return trimmed;
 }
 function isRegexLike(pattern) {
-  if (pattern.startsWith("/") && pattern.endsWith("/") && pattern.length >= 2) return true;
-  return /[\\^$.|?*+()[\]{}]/.test(pattern);
+  return pattern.startsWith("/") && pattern.endsWith("/") && pattern.length >= 2;
 }
-function isOverlyBroadRegex(pattern) {
+function isUnsafeRedactionRegex(pattern) {
   const body = pattern.startsWith("/") && pattern.endsWith("/") ? pattern.slice(1, -1) : pattern;
   if (/(?:^|[^\\])\(\.\*\)|(?:^|[^\\])\.\*|(?:^|[^\\])\.\+|^\.([^*+]?)$/.test(body)) {
     return true;
   }
+  if (body.length > 512) return true;
+  for (let i = 0; i < body.length; i++) {
+    if (body[i] !== "(") continue;
+    let depth = 1;
+    let j = i + 1;
+    while (j < body.length && depth > 0) {
+      if (body[j] === "\\") {
+        j += 2;
+        continue;
+      }
+      if (body[j] === "(") depth++;
+      else if (body[j] === ")") depth--;
+      j++;
+    }
+    if (depth !== 0) continue;
+    const afterGroup = body[j];
+    if (afterGroup !== "+" && afterGroup !== "*" && afterGroup !== "{") continue;
+    const groupBody = body.slice(i + 1, j - 1);
+    if (/[+*?]$/.test(groupBody) || /\{\d+,?\d*\}[+*?]?$/.test(groupBody)) {
+      return true;
+    }
+    if (groupBody.includes("|")) {
+      const branches = groupBody.split("|");
+      if (branches.length >= 2) {
+        const firstChars = new Set(branches.map((b) => b[0]).filter(Boolean));
+        if (firstChars.size < branches.filter((b) => b.length > 0).length) {
+          return true;
+        }
+      }
+    }
+    i = j;
+  }
   return false;
 }
 function validateCorrectionAction(action) {
@@ -198,11 +253,13 @@ var CorrectionContractError = class extends Error {
 
 // src/correction/correction-access-wiring.ts
 import path2 from "path";
+import { createHash } from "crypto";
 import { mkdir as mkdir2, writeFile as writeFile2 } from "fs/promises";
 
 // src/correction/correction-planner.ts
 import { mkdir, readFile, rename, unlink, readdir, writeFile } from "fs/promises";
 import path from "path";
+var REDACTED_REQUEST_TEXT = "[redacted \u2014 never-store/redaction correction text withheld from the pending-plan file]";
 var CorrectionPlanner = class {
   constructor(deps) {
     this.deps = deps;
@@ -386,10 +443,12 @@ var CorrectionPlanner = class {
   async persist(plan) {
     const dir = await this.pendingDir(plan.namespace);
     const target = path.join(dir, `${plan.planId}.json`);
+    const sensitive = plan.classification === "never_store" || plan.actions.some((a) => a.kind === "redaction_rule");
+    const persistedPlan = sensitive ? { ...plan, request: { ...plan.request, text: REDACTED_REQUEST_TEXT } } : plan;
     await serializeMutations(`correction-plan:${target}`, async () => {
       await mkdir(dir, { recursive: true });
       const tmp = `${target}.${process.pid}.${Date.now().toString(36)}.tmp`;
-      await writeFile(tmp, `${JSON.stringify(plan)}
+      await writeFile(tmp, `${JSON.stringify(persistedPlan)}
 `, "utf-8");
       await rename(tmp, target);
     });
@@ -451,6 +510,11 @@ var CorrectionPlanner = class {
       const plan = parsePlan(raw);
       if (!plan) return;
       plan.status = status;
+      if (status !== "applying") {
+        plan.actions = plan.actions.map(
+          (a) => a.kind === "redaction_rule" ? { ...a, pattern: "[redacted \u2014 pattern applied]" } : a
+        );
+      }
       const tmp = `${file}.${process.pid}.${Date.now().toString(36)}.tmp`;
       await writeFile(tmp, `${JSON.stringify(plan)}
 `, "utf-8");
@@ -652,7 +716,7 @@ var CorrectionExecutor = class {
             continue;
           }
           const destId = await this.deps.rescopeMemory(namespace, action.memoryId, action.toNamespace);
-          results.push({ action, status: "applied", memoryId: action.memoryId });
+          results.push({ action, status: "applied", memoryId: destId });
           appliedTouched.push(action.memoryId);
           try {
             await this.deps.propagate(action.toNamespace, [destId]);
@@ -726,7 +790,14 @@ var CorrectionExecutor = class {
         sourceMemoryId: memoryId,
         rawContent: memory.rawContent,
         ...memory.entityRef ? { entityRef: memory.entityRef } : {},
-        ...memory.supersessionKey ? { supersessionKey: memory.supersessionKey } : {}
+        ...memory.supersessionKey ? { supersessionKey: memory.supersessionKey } : {},
+        // #1672 item 4: carry the canonical contentHash (exact tier) and the
+        // full supersession-key set (keyed tier) so paraphrased re-observations
+        // of the same supersession identity are blocked, not just the literal
+        // body. Without these the tombstone projected from a structured fact
+        // dropped both fields and the fact could resurrect.
+        ...memory.contentHash ? { contentHash: memory.contentHash } : {},
+        ...memory.supersessionKeys && memory.supersessionKeys.length > 0 ? { supersessionKeys: memory.supersessionKeys } : {}
       });
       await this.deps.retireMemory(namespace, memoryId, {
         status: reason === "supersession" ? "superseded" : "retracted",
@@ -745,9 +816,15 @@ var CorrectionExecutor = class {
     }
   }
 };
+var CORRECTION_ERROR_MAX = 500;
+function sanitizeErrorMessage(raw) {
+  const stripped = raw.replace(/(^|[\s:'"(])\/(?:[^\s'">)\\]+\/)+[^\s'">)\\]*/g, "$1<path>").replace(/(^|[\s:'"(])[A-Za-z]:\\[^\s'">)\\]+(?:\\[^\s'">) ]*)*/g, "$1<path>");
+  const trimmed = stripped.trim();
+  return trimmed.length > CORRECTION_ERROR_MAX ? `${trimmed.slice(0, CORRECTION_ERROR_MAX)}\u2026` : trimmed;
+}
 function errMsg(err) {
-  if (err instanceof Error) return err.message;
-  return String(err);
+  const raw = err instanceof Error ? err.message : String(err);
+  return sanitizeErrorMessage(raw);
 }
 
 // src/correction/correction-service.ts
@@ -868,7 +945,7 @@ async function searchMemories(wiring, text, namespaces, limit) {
     const storage = await wiring.orchestrator.getStorage(ns);
     const all = await storage.readAllMemories();
     for (const m of all) {
-      if (m.frontmatter.status && m.frontmatter.status !== "active") continue;
+      if (!isEligibleCorrectionCandidate(m)) continue;
       const hay = `${m.content} ${m.frontmatter.tags?.join(" ") ?? ""}`.toLowerCase();
       let hits = 0;
       for (const tok of tokens) {
@@ -1016,7 +1093,7 @@ async function expandEntityNeighbors(wiring, seedIds, namespaces, limit) {
     for (const m of all) {
       if (out.length >= limit) break;
       if (seen.has(m.frontmatter.id)) continue;
-      if (m.frontmatter.status && m.frontmatter.status !== "active") continue;
+      if (!isEligibleCorrectionCandidate(m)) continue;
       if (m.frontmatter.entityRef && seedRefs.has(m.frontmatter.entityRef)) {
         out.push(toCandidate(m, ns, 0.5));
         seen.add(m.frontmatter.id);
@@ -1107,9 +1184,13 @@ async function applyEditMemory(wiring, namespace, memoryId, patch) {
   const storage = await wiring.orchestrator.getStorage(namespace);
   const existing = await storage.getMemoryById(memoryId);
   if (!existing) throw new CorrectionContractError(`memory not found for edit: ${memoryId}`);
+  const contentHashForPatch = existing.frontmatter.category === "fact" ? computeContentHash(sanitizeMemoryContent(patch).text) : void 0;
   await storage.writeMemoryFrontmatter(
     { ...existing, content: patch },
-    { updated: (/* @__PURE__ */ new Date()).toISOString() }
+    {
+      updated: (/* @__PURE__ */ new Date()).toISOString(),
+      ...contentHashForPatch ? { contentHash: contentHashForPatch } : {}
+    }
   );
   return memoryId;
 }
@@ -1173,26 +1254,42 @@ async function rescopeMemoryFn(wiring, namespace, memoryId, toNamespace) {
 async function appendTombstoneFn(wiring, namespace, input) {
   const storage = await wiring.orchestrator.getStorage(namespace);
   const enabled = typeof storage.isTombstonesEnabled === "function" ? storage.isTombstonesEnabled() : true;
-  const result = await storage.appendTombstone({
-    reason: input.reason,
-    createdBy: "user_correction",
-    sourceMemoryId: input.sourceMemoryId,
-    rawContent: input.rawContent,
-    ...input.entityRef ? { entityRef: input.entityRef } : {},
-    ...input.supersessionKey ? { supersessionKey: input.supersessionKey } : {}
-  });
-  if (result === null && enabled) {
-    throw new CorrectionContractError(
-      `tombstone persistence failed for memory ${input.sourceMemoryId} (tombstones enabled but store returned null \u2014 I/O error swallowed)`
-    );
+  const keys = input.supersessionKeys && input.supersessionKeys.length > 0 ? input.supersessionKeys : input.supersessionKey ? [input.supersessionKey] : [void 0];
+  const writtenIds = [];
+  let firstId = null;
+  for (const key of keys) {
+    const result = await storage.appendTombstone({
+      reason: input.reason,
+      createdBy: "user_correction",
+      sourceMemoryId: input.sourceMemoryId,
+      rawContent: input.rawContent,
+      ...input.entityRef ? { entityRef: input.entityRef } : {},
+      ...key ? { supersessionKey: key } : {},
+      ...input.contentHash ? { contentHash: input.contentHash } : {}
+    });
+    if (result === null && enabled) {
+      for (const id of writtenIds) {
+        try {
+          await storage.revokeTombstone(id, "user_correction");
+        } catch {
+        }
+      }
+      throw new CorrectionContractError(
+        `tombstone persistence failed for memory ${input.sourceMemoryId} (tombstones enabled but store returned null \u2014 I/O error swallowed)`
+      );
+    }
+    if (firstId === null) firstId = result;
+    if (result) writtenIds.push(result);
   }
-  return result;
+  return firstId;
 }
 async function registerRedactionRuleFn(wiring, namespace, pattern) {
   const storage = await wiring.orchestrator.getStorage(namespace);
   const dir = path2.join(storage.dir, "state", "corrections", "redaction-rules");
   await mkdir2(dir, { recursive: true });
-  const slug = pattern.replace(/[^a-zA-Z0-9]+/g, "-").slice(0, 64) || "rule";
+  const slugBase = pattern.replace(/[^a-zA-Z0-9]+/g, "-").slice(0, 48) || "rule";
+  const patternHash = createHash("sha256").update(pattern).digest("hex").slice(0, 16);
+  const slug = `${slugBase}-${patternHash}`;
   await writeFile2(
     path2.join(dir, `${slug}.json`),
     `${JSON.stringify({ pattern, namespace, createdAt: (/* @__PURE__ */ new Date()).toISOString() })}
@@ -1252,15 +1349,27 @@ function toCandidate(m, namespace, score) {
     // candidate for diff rendering if needed.
   };
 }
+function isEligibleCorrectionCandidate(m) {
+  if (m.frontmatter.status && m.frontmatter.status !== "active") return false;
+  if (typeof m.frontmatter.archivedAt === "string" && m.frontmatter.archivedAt.length > 0) return false;
+  return true;
+}
 function toExecutorMemory(m) {
   const fm = m.frontmatter;
   const rawBody = fm.structuredAttributes ? stripAttributesSuffix(m.content) : m.content;
+  const supersessionKeys = supersessionKeysForFact({
+    entityRef: fm.entityRef,
+    structuredAttributes: fm.structuredAttributes
+  });
   return {
     memoryId: fm.id,
     content: m.content,
     category: fm.category,
     rawContent: rawBody,
-    ...fm.entityRef ? { entityRef: fm.entityRef } : {}
+    ...fm.entityRef ? { entityRef: fm.entityRef } : {},
+    ...supersessionKeys.length > 0 ? { supersessionKeys } : {},
+    ...supersessionKeys.length > 0 ? { supersessionKey: supersessionKeys[0] } : {},
+    ...typeof fm.contentHash === "string" && fm.contentHash.length > 0 ? { contentHash: fm.contentHash } : {}
   };
 }
 function isCorrectionFeatureEnabled(config) {
@@ -1685,4 +1794,4 @@ export {
   capturePassiveCorrections,
   clusterByKey
 };
-//# sourceMappingURL=chunk-Z3FGC3QE.js.map
+//# sourceMappingURL=chunk-AQLOP5F4.js.map