@remnic/core 9.3.725 → 9.3.727

package/dist/{chunk-JJJCVCCQ.js → chunk-DMQWV6SQ.js}

@@ -1,6 +1,6 @@
 import {
   runPostConsolidationMaterialize
-} from "./chunk-ZK2L72VN.js";
+} from "./chunk-37436GML.js";
 import {
   discoverMemoryExtensions,
   renderExtensionsBlock,
@@ -217,4 +217,4 @@ export {
   buildExtensionsBlockForConsolidation,
   materializeAfterSemanticConsolidation
 };
-//# sourceMappingURL=chunk-JJJCVCCQ.js.map
+//# sourceMappingURL=chunk-DMQWV6SQ.js.map

package/dist/{chunk-F3XZN24Z.js → chunk-DRUDC2UX.js}

@@ -1,6 +1,6 @@
 import {
   isRecallDisclosure
-} from "./chunk-7AG54AF3.js";
+} from "./chunk-PUR2CKX2.js";
 import {
   normalizeRetrievedMemoryProvenance
 } from "./chunk-I4WBNM3M.js";
@@ -292,4 +292,4 @@ export {
   RecallXrayBuilder,
   summarizeDisclosureTokens
 };
-//# sourceMappingURL=chunk-F3XZN24Z.js.map
+//# sourceMappingURL=chunk-DRUDC2UX.js.map

package/dist/{chunk-4WZ3J7M6.js → chunk-EY6MDMHK.js}

@@ -1,7 +1,7 @@
 import {
   StorageManager,
   normalizeEntityName
-} from "./chunk-4R3CGCI5.js";
+} from "./chunk-7RLCCNHU.js";
 import {
   serializeMutations
 } from "./chunk-LTJAMRGI.js";
@@ -956,4 +956,4 @@ export {
   resolveBriefingSaveDir,
   briefingFilename
 };
-//# sourceMappingURL=chunk-4WZ3J7M6.js.map
+//# sourceMappingURL=chunk-EY6MDMHK.js.map

package/dist/{chunk-YNDLCWXS.js → chunk-EZ25VE3G.js}

@@ -1,9 +1,9 @@
-import {
-  diffGraphSnapshots
-} from "./chunk-AUDJPF4N.js";
 import {
   graphSnapshotFromMemoryDir
 } from "./chunk-44442YCH.js";
+import {
+  diffGraphSnapshots
+} from "./chunk-AUDJPF4N.js";
 
 // src/dashboard-runtime.ts
 import { createHash, timingSafeEqual } from "crypto";
@@ -370,4 +370,4 @@ var GraphDashboardServer = class {
 export {
   GraphDashboardServer
 };
-//# sourceMappingURL=chunk-YNDLCWXS.js.map
+//# sourceMappingURL=chunk-EZ25VE3G.js.map

package/dist/{chunk-C4X4QGIO.js → chunk-G6NKALRN.js}

@@ -1,4 +1,5 @@
 import {
+  coerceBool,
   coerceNumber
 } from "./chunk-PHK3HARR.js";
 
@@ -38,12 +39,14 @@ function parseFaithfulnessGateConfig(cfg) {
     parseIntegerAtLeast(cfg.extractionFaithfulnessTimeoutMs, 8e3, 1, "extractionFaithfulnessTimeoutMs"),
     6e4
   );
+  const extractionFaithfulnessLocalParseFallback = coerceBool(cfg.extractionFaithfulnessLocalParseFallback) === true;
   return {
     extractionFaithfulnessGate,
     extractionFaithfulnessModel,
     extractionFaithfulnessBaseUrl,
     extractionFaithfulnessContextChars,
-    extractionFaithfulnessTimeoutMs
+    extractionFaithfulnessTimeoutMs,
+    extractionFaithfulnessLocalParseFallback
   };
 }
 function parseCorrectionIntentConfig(cfg) {
@@ -57,4 +60,4 @@ export {
   parseFaithfulnessGateConfig,
   parseCorrectionIntentConfig
 };
-//# sourceMappingURL=chunk-C4X4QGIO.js.map
+//# sourceMappingURL=chunk-G6NKALRN.js.map

package/dist/chunk-G6NKALRN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/faithfulness-config.ts"],"sourcesContent":["/**\n * Faithfulness-gate + correction-intent config parsing (issue #1576 / #1585).\n *\n * Extracted verbatim from `config.ts` (a watchlisted god file) so the gate\n * config block can grow — the model-lab pointer keys\n * `extractionFaithfulnessBaseUrl` (#1585) and the correction-intent pointers\n * (`correctionIntentModel` / `correctionIntentBaseUrl`) — without growing the\n * god file. This is a behavior-preserving extraction (#1526-style): the\n * validation, defaults, and error messages are byte-identical to the inline\n * block it replaces, which the existing extraction-faithfulness + config\n * tests pin.\n *\n * Why a dedicated module (and not inline): the ratchet\n * (`scripts/check-ratchets.mjs`) forbids `config.ts` from growing, and the\n * model-lab integration needs three new optional keys. Centralizing the whole\n * gate+intent parsing here keeps it unit-testable in isolation and lets\n * `config.ts` spread the result in one line.\n */\n\nimport { coerceBool, coerceNumber } from \"./connectors/coerce.js\";\n\n/**\n * Parse a value as a strict integer >= `min`, throwing on anything else.\n *\n * Mirrors `parseIntegerAtLeast` in `config.ts` byte-for-byte (issue #1634:\n * reject non-numeric, <=0, non-integer, NaN, Infinity, booleans, objects —\n * gotcha #51). Reimplemented locally rather than exported from `config.ts`\n * so this module has no dependency on the god file (and vice versa).\n */\nfunction parseIntegerAtLeast(\n  value: unknown,\n  fallback: number,\n  min: number,\n  keyName: string,\n): number {\n  if (value === undefined || value === null) return fallback;\n  const coerced = coerceNumber(value);\n  if (\n    coerced === undefined ||\n    !Number.isFinite(coerced) ||\n    !Number.isInteger(coerced) ||\n    coerced < min\n  ) {\n    throw new Error(\n      `${keyName} must be an integer greater than or equal to ${min}; got ${JSON.stringify(value)}`,\n    );\n  }\n  return coerced;\n}\n\n/**\n * Parse the extraction faithfulness gate config block.\n *\n * Returns exactly the `PluginConfig` fields this block owns. Defaults preserve\n * the byte-identical pre-feature pipeline (rule 39): gate \"off\", empty model\n * + base URL, context 400 chars, timeout 8000 ms. Invalid `gate` values reject\n * listing valid options (rule 51); invalid integers throw (issue #1634).\n *\n * `extractionFaithfulnessBaseUrl` (issue #1585) is the model-lab pointer: when\n * set together with `extractionFaithfulnessModel`, the gate routes to that\n * local openai-compatible endpoint before the configured chain; empty string\n * (default) preserves the existing routing exactly.\n */\nexport function parseFaithfulnessGateConfig(cfg: Record<string, unknown>): {\n  extractionFaithfulnessGate: \"off\" | \"shadow\" | \"enforce\";\n  extractionFaithfulnessModel: string;\n  extractionFaithfulnessBaseUrl: string;\n  extractionFaithfulnessContextChars: number;\n  extractionFaithfulnessTimeoutMs: number;\n  extractionFaithfulnessLocalParseFallback: boolean;\n} {\n  const gateValue = cfg.extractionFaithfulnessGate;\n  let extractionFaithfulnessGate: \"off\" | \"shadow\" | \"enforce\";\n  if (gateValue === undefined || gateValue === null) {\n    extractionFaithfulnessGate = \"off\";\n  } else {\n    // Present-but-invalid (true/1/{}) must reject, not silently disable the gate (Ob4RQ).\n    const raw = typeof gateValue === \"string\" ? gateValue.trim().toLowerCase() : gateValue;\n    if (raw === \"off\" || raw === \"shadow\" || raw === \"enforce\") {\n      extractionFaithfulnessGate = raw;\n    } else {\n      throw new Error(\n        `extractionFaithfulnessGate must be one of \"off\" | \"shadow\" | \"enforce\" (got ${JSON.stringify(gateValue)})`,\n      );\n    }\n  }\n\n  const extractionFaithfulnessModel =\n    typeof cfg.extractionFaithfulnessModel === \"string\" ? cfg.extractionFaithfulnessModel : \"\";\n\n  // Issue #1585: model-lab pointer. Empty default → gate uses its existing\n  // routing chain (byte-identical). Non-empty + a model name → gate prefers\n  // the local served endpoint, falling back to the chain on failure.\n  const extractionFaithfulnessBaseUrl =\n    typeof cfg.extractionFaithfulnessBaseUrl === \"string\"\n      ? cfg.extractionFaithfulnessBaseUrl\n      : \"\";\n\n  const extractionFaithfulnessContextChars = Math.min(\n    parseIntegerAtLeast(cfg.extractionFaithfulnessContextChars, 400, 1, \"extractionFaithfulnessContextChars\"),\n    4000,\n  );\n\n  const extractionFaithfulnessTimeoutMs = Math.min(\n    parseIntegerAtLeast(cfg.extractionFaithfulnessTimeoutMs, 8000, 1, \"extractionFaithfulnessTimeoutMs\"),\n    60_000,\n  );\n\n  // Issue #1700 nit #6: resilient-fallback toggle for the local model-lab\n  // endpoint. Default false preserves the loud-signal behavior (a 200-with-\n  // garbage local response surfaces malformed_output so a misconfigured\n  // endpoint is visible); true falls back to the configured chain on local\n  // parse failure. Byte-identical pre-feature when unset (rule 39).\n  // coerceBool for CLI-string parity: a CLI override like\n  // --config extractionFaithfulnessLocalParseFallback=true reaches here as the\n  // string \"true\"; === true would silently leave the flag disabled. Matches\n  // every other CLI-settable boolean in config.ts (gotcha 36, codex P2\n  // PRRT_kwDORJXyws6O6gDQ / cursor BUGBOT e273b22c).\n  const extractionFaithfulnessLocalParseFallback =\n    coerceBool(cfg.extractionFaithfulnessLocalParseFallback) === true;\n\n  return {\n    extractionFaithfulnessGate,\n    extractionFaithfulnessModel,\n    extractionFaithfulnessBaseUrl,\n    extractionFaithfulnessContextChars,\n    extractionFaithfulnessTimeoutMs,\n    extractionFaithfulnessLocalParseFallback,\n  };\n}\n\n/**\n * Parse the correction-intent config block (issue #1581 / #1585).\n *\n * The model-lab pointer for passive-correction detection: when both\n * `correctionIntentModel` and `correctionIntentBaseUrl` are set, the detection\n * path can route to that local fine-tuned classifier; empty defaults (the\n * common case) keep the rule-based `detectPassiveCorrections` heuristic as the\n * sole detector — byte-identical to the pre-feature path. Consumption by the\n * detector is the consuming child's job (#1581's detector is a pure function;\n * wiring a model call into it is out of scope for this config-pointer PR).\n */\nexport function parseCorrectionIntentConfig(cfg: Record<string, unknown>): {\n  correctionIntentModel: string;\n  correctionIntentBaseUrl: string;\n} {\n  return {\n    correctionIntentModel:\n      typeof cfg.correctionIntentModel === \"string\" ? cfg.correctionIntentModel : \"\",\n    correctionIntentBaseUrl:\n      typeof cfg.correctionIntentBaseUrl === \"string\" ? cfg.correctionIntentBaseUrl : \"\",\n  };\n}\n"],"mappings":";;;;;;AA6BA,SAAS,oBACP,OACA,UACA,KACA,SACQ;AACR,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,QAAM,UAAU,aAAa,KAAK;AAClC,MACE,YAAY,UACZ,CAAC,OAAO,SAAS,OAAO,KACxB,CAAC,OAAO,UAAU,OAAO,KACzB,UAAU,KACV;AACA,UAAM,IAAI;AAAA,MACR,GAAG,OAAO,gDAAgD,GAAG,SAAS,KAAK,UAAU,KAAK,CAAC;AAAA,IAC7F;AAAA,EACF;AACA,SAAO;AACT;AAeO,SAAS,4BAA4B,KAO1C;AACA,QAAM,YAAY,IAAI;AACtB,MAAI;AACJ,MAAI,cAAc,UAAa,cAAc,MAAM;AACjD,iCAA6B;AAAA,EAC/B,OAAO;AAEL,UAAM,MAAM,OAAO,cAAc,WAAW,UAAU,KAAK,EAAE,YAAY,IAAI;AAC7E,QAAI,QAAQ,SAAS,QAAQ,YAAY,QAAQ,WAAW;AAC1D,mCAA6B;AAAA,IAC/B,OAAO;AACL,YAAM,IAAI;AAAA,QACR,+EAA+E,KAAK,UAAU,SAAS,CAAC;AAAA,MAC1G;AAAA,IACF;AAAA,EACF;AAEA,QAAM,8BACJ,OAAO,IAAI,gCAAgC,WAAW,IAAI,8BAA8B;AAK1F,QAAM,gCACJ,OAAO,IAAI,kCAAkC,WACzC,IAAI,gCACJ;AAEN,QAAM,qCAAqC,KAAK;AAAA,IAC9C,oBAAoB,IAAI,oCAAoC,KAAK,GAAG,oCAAoC;AAAA,IACxG;AAAA,EACF;AAEA,QAAM,kCAAkC,KAAK;AAAA,IAC3C,oBAAoB,IAAI,iCAAiC,KAAM,GAAG,iCAAiC;AAAA,IACnG;AAAA,EACF;AAYA,QAAM,2CACJ,WAAW,IAAI,wCAAwC,MAAM;AAE/D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAaO,SAAS,4BAA4B,KAG1C;AACA,SAAO;AAAA,IACL,uBACE,OAAO,IAAI,0BAA0B,WAAW,IAAI,wBAAwB;AAAA,IAC9E,yBACE,OAAO,IAAI,4BAA4B,WAAW,IAAI,0BAA0B;AAAA,EACpF;AACF;","names":[]}

package/dist/{chunk-6SQQOJ4U.js → chunk-GKRLPHPU.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-SOBJ6NEY.js";
 import {
   summarizeDisclosureTokens
-} from "./chunk-F3XZN24Z.js";
+} from "./chunk-DRUDC2UX.js";
 import {
   summarizeRetrievedMemoryProvenance
 } from "./chunk-I4WBNM3M.js";
@@ -587,4 +587,4 @@ export {
   renderRecallExplain,
   parseRecallExplainFormat
 };
-//# sourceMappingURL=chunk-6SQQOJ4U.js.map
+//# sourceMappingURL=chunk-GKRLPHPU.js.map

package/dist/{chunk-D7EBTQ24.js → chunk-HOHVIVDR.js}

@@ -11,7 +11,7 @@ import {
 } from "./chunk-LMDRGRJ2.js";
 import {
   parseConfig
-} from "./chunk-4SF232E6.js";
+} from "./chunk-36SEDFAU.js";
 import {
   resolveObjectiveStateStoreDir,
   validateObjectiveStateSnapshot
@@ -268,4 +268,4 @@ export {
   recordResumeBundle,
   getResumeBundleStatus
 };
-//# sourceMappingURL=chunk-D7EBTQ24.js.map
+//# sourceMappingURL=chunk-HOHVIVDR.js.map

package/dist/{chunk-RKNJBZ55.js → chunk-JBPKEARU.js}

@@ -1,3 +1,6 @@
+import {
+  ReplitAdapter
+} from "./chunk-TMSXWOBZ.js";
 import {
   ClaudeCodeAdapter
 } from "./chunk-J64TK33U.js";
@@ -7,9 +10,6 @@ import {
 import {
   HermesAdapter
 } from "./chunk-42NQ7AVG.js";
-import {
-  ReplitAdapter
-} from "./chunk-TMSXWOBZ.js";
 
 // src/adapters/registry.ts
 var AdapterRegistry = class {
@@ -53,4 +53,4 @@ var AdapterRegistry = class {
 export {
   AdapterRegistry
 };
-//# sourceMappingURL=chunk-RKNJBZ55.js.map
+//# sourceMappingURL=chunk-JBPKEARU.js.map

package/dist/{chunk-UBHVAGO7.js → chunk-JYLFZWUX.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-SFQ6QNL7.js";
 import {
   StorageManager
-} from "./chunk-4R3CGCI5.js";
+} from "./chunk-7RLCCNHU.js";
 import {
   buildLifecycleEventsForMemory,
   sortMemoryLifecycleEvents
@@ -74,4 +74,4 @@ export {
   backupExistingLedger,
   rebuildMemoryLifecycleLedger
 };
-//# sourceMappingURL=chunk-UBHVAGO7.js.map
+//# sourceMappingURL=chunk-JYLFZWUX.js.map

package/dist/{chunk-LD53WPMU.js → chunk-LQ6JI4VH.js}

@@ -1,10 +1,10 @@
+import {
+  scanMemoryDir
+} from "./chunk-AER6MT24.js";
 import {
   isSearchAborted,
   throwIfSearchAborted
 } from "./chunk-CINZGPSJ.js";
-import {
-  scanMemoryDir
-} from "./chunk-AER6MT24.js";
 import {
   resolveEnsureCollectionArgs
 } from "./chunk-YNQ6DFSV.js";
@@ -605,4 +605,4 @@ export {
   resolveOramaCollectionDbFilePath,
   OramaBackend
 };
-//# sourceMappingURL=chunk-LD53WPMU.js.map
+//# sourceMappingURL=chunk-LQ6JI4VH.js.map

package/dist/chunk-LTHVM4XN.js

@@ -0,0 +1,109 @@
+// src/extraction-redaction-rules.ts
+import { readdir, readFile } from "fs/promises";
+import path from "path";
+var REDACTION_RULES_SUBDIR = path.join("state", "corrections", "redaction-rules");
+var MAX_RULE_FILES = 256;
+function isRegexLike(pattern) {
+  return pattern.startsWith("/") && pattern.endsWith("/") && pattern.length >= 2;
+}
+function isSafeRegex(source) {
+  if (source.length === 0 || source.length > 512) return false;
+  if (/(?:^|[^\\])\(\.\*\)|(?:^|[^\\])\.\*|(?:^|[^\\])\.\+|^\.([^*+]?)$/.test(source)) {
+    return false;
+  }
+  for (let i = 0; i < source.length; i++) {
+    if (source[i] !== "(") continue;
+    let depth = 1;
+    let j = i + 1;
+    while (j < source.length && depth > 0) {
+      if (source[j] === "\\") {
+        j += 2;
+        continue;
+      }
+      if (source[j] === "(") depth++;
+      else if (source[j] === ")") depth--;
+      j++;
+    }
+    if (depth !== 0) continue;
+    const afterGroup = source[j];
+    if (afterGroup !== "+" && afterGroup !== "*" && afterGroup !== "{") continue;
+    const groupBody = source.slice(i + 1, j - 1);
+    if (/[+*?]$/.test(groupBody) || /\{\d+,?\d*\}[+*?]?$/.test(groupBody)) {
+      return false;
+    }
+    if (groupBody.includes("|")) {
+      const branches = groupBody.split("|");
+      if (branches.length >= 2) {
+        const firstChars = new Set(branches.map((b) => b[0]).filter(Boolean));
+        if (firstChars.size < branches.filter((b) => b.length > 0).length) {
+          return false;
+        }
+      }
+    }
+    i = j;
+  }
+  return true;
+}
+function compileRedactionPattern(pattern) {
+  const trimmed = pattern.trim();
+  if (!isRegexLike(trimmed)) {
+    return { pattern: trimmed, matcher: (content) => content.includes(trimmed) };
+  }
+  const body = trimmed.slice(1, -1);
+  try {
+    if (!isSafeRegex(body)) {
+      if (body.length === 0) return { pattern: trimmed, matcher: () => false };
+      return { pattern: trimmed, matcher: (content) => content.includes(body) };
+    }
+    const re = new RegExp(body);
+    if (re.test("")) {
+      return { pattern: trimmed, matcher: (content) => content.includes(body) };
+    }
+    return { pattern: trimmed, matcher: (content) => re.test(content) };
+  } catch {
+    return { pattern: trimmed, matcher: (content) => content.includes(body) };
+  }
+}
+async function loadRedactionRules(stateDir) {
+  const dir = path.join(stateDir, REDACTION_RULES_SUBDIR);
+  let names;
+  try {
+    names = await readdir(dir);
+  } catch {
+    return [];
+  }
+  const jsonFiles = names.filter((n) => n.endsWith(".json")).sort();
+  if (jsonFiles.length > MAX_RULE_FILES) {
+    console.warn(
+      `extraction-redaction: ${jsonFiles.length} redaction rules in ${dir} exceed the ${MAX_RULE_FILES} cap; ${jsonFiles.length - MAX_RULE_FILES} rules will NOT be enforced. Remove unused rules or raise the cap.`
+    );
+  }
+  const rules = [];
+  for (const name of jsonFiles.slice(0, MAX_RULE_FILES)) {
+    try {
+      const raw = await readFile(path.join(dir, name), "utf-8");
+      const parsed = JSON.parse(raw);
+      if (typeof parsed?.pattern !== "string" || parsed.pattern.trim().length === 0) continue;
+      rules.push(compileRedactionPattern(parsed.pattern));
+    } catch {
+    }
+  }
+  return rules;
+}
+function contentMatchesRedactionRules(content, rules) {
+  for (const rule of rules) {
+    try {
+      if (rule.matcher(content)) return true;
+    } catch {
+    }
+  }
+  return false;
+}
+
+export {
+  REDACTION_RULES_SUBDIR,
+  compileRedactionPattern,
+  loadRedactionRules,
+  contentMatchesRedactionRules
+};
+//# sourceMappingURL=chunk-LTHVM4XN.js.map

package/dist/chunk-LTHVM4XN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/extraction-redaction-rules.ts"],"sourcesContent":["/**\n * extraction-redaction-rules.ts — consults persisted correction redaction\n * rules during the extraction→persist path so a `never_store` / redaction_rule\n * correction actually blocks future extraction of matching content (issue\n * #1669, #1580 follow-up).\n *\n * The Correction Contract persists `redaction_rule` patterns to\n * `<storage>/state/corrections/redaction-rules/<slug>.json` (one file per\n * rule, idempotent on pattern). This module reads those patterns at the start\n * of each extraction persist pass and exposes a pure matcher the orchestrator\n * consults BEFORE a fact reaches the storage write chokepoint — mirroring how\n * tombstones are consulted at the write chokepoint (#1579), but one stage\n * earlier so the content never even lands as `pending_review`.\n *\n * Scope (issue #1669): the extraction layer consults the rules. Persistence\n * stays owned by the correction module. This helper is the read surface.\n *\n * Safety: patterns are validated at correction-apply time\n * (`validateRedactionPattern` — bounded literal/safe-regex, no catastrophic\n * shapes). We compile defensively here too: a pattern that fails to compile\n * as a regex is treated as a literal substring, and any matcher error is\n * swallowed (fail-open to \"no match\") so a malformed rule can never block the\n * entire extraction pipeline.\n */\nimport { readdir, readFile } from \"node:fs/promises\";\nimport path from \"node:path\";\n\n/**\n * Directory (relative to a namespace storage dir) where redaction rules live.\n * Kept in sync with `registerRedactionRuleFn` in correction-access-wiring.ts.\n */\nexport const REDACTION_RULES_SUBDIR = path.join(\"state\", \"corrections\", \"redaction-rules\");\n\n/** Maximum number of rule files read per pass (defense in depth). */\nconst MAX_RULE_FILES = 256;\n\n/**\n * A compiled redaction rule. `pattern` is the original (validated) pattern;\n * `matcher` returns true when content should be withheld.\n */\nexport interface CompiledRedactionRule {\n  pattern: string;\n  matcher: (content: string) => boolean;\n}\n\n/** Shape persisted by `registerRedactionRuleFn`. */\ninterface RedactionRuleFile {\n  pattern: string;\n  namespace?: string;\n  createdAt?: string;\n}\n\n/**\n * Only `/…/`-wrapped patterns compile as RegExp; everything else is a literal\n * substring (review thread P1). An unwrapped pattern like `abc+def` must match\n * the literal string `abc+def`, NOT the regex `abccccdef`.\n */\nfunction isRegexLike(pattern: string): boolean {\n  return pattern.startsWith(\"/\") && pattern.endsWith(\"/\") && pattern.length >= 2;\n}\n\n/**\n * Reject patterns prone to catastrophic backtracking (ReDoS, review thread #3).\n * Mirrors the safe-regex heuristic: a quantifier inside a group that is itself\n * quantified creates exponential blowup on near-miss inputs. Also rejects\n * patterns with overlapping alternation under repetition\n * (e.g. (a|a)*). Returns true when the pattern is safe to compile.\n *\n * This is a second line of defense — validateRedactionPattern runs first at\n * apply time, but a hand-edited rule file or an edge case can still slip past.\n */\nfunction isSafeRegex(source: string): boolean {\n  if (source.length === 0 || source.length > 512) return false;\n  // Reject overly-broad patterns (.*) that would match every fact and\n  // withhold all extraction (cursor Bugbot thread — mirrors\n  // isUnsafeRedactionRegex in correction-contract.ts).\n  if (/(?:^|[^\\\\])\\(\\.\\*\\)|(?:^|[^\\\\])\\.\\*|(?:^|[^\\\\])\\.\\+|^\\.([^*+]?)$/.test(source)) {\n    return false;\n  }\n  // group body itself ends with a quantifier. This catches (a+)+, (a*)*, etc.\n  // Also catches overlapping alternation like (a|a)+.\n  for (let i = 0; i < source.length; i++) {\n    if (source[i] !== \"(\") continue;\n    // Find the matching close paren\n    let depth = 1;\n    let j = i + 1;\n    while (j < source.length && depth > 0) {\n      if (source[j] === \"\\\\\") { j += 2; continue; }\n      if (source[j] === \"(\") depth++;\n      else if (source[j] === \")\") depth--;\n      j++;\n    }\n    if (depth !== 0) continue; // unbalanced — will fail RegExp compile anyway\n    // Check if the char after the closing paren is a quantifier\n    const afterGroup = source[j];\n    if (afterGroup !== \"+\" && afterGroup !== \"*\" && afterGroup !== \"{\") continue;\n    const groupBody = source.slice(i + 1, j - 1);\n    // The group body ends with a quantifier on a non-escape char\n    if (/[+*?]$/.test(groupBody) || /\\{\\d+,?\\d*\\}[+*?]?$/.test(groupBody)) {\n      // Nested quantifier → potential ReDoS\n      return false;\n    }\n    // Overlapping alternation: (a|a)+ where branches share a common prefix\n    if (groupBody.includes(\"|\")) {\n      const branches = groupBody.split(\"|\");\n      if (branches.length >= 2) {\n        const firstChars = new Set(branches.map((b) => b[0]).filter(Boolean));\n        if (firstChars.size < branches.filter((b) => b.length > 0).length) {\n          return false;\n        }\n      }\n    }\n    i = j;\n  }\n  return true;\n}\n\n/**\n * Compile a single pattern into a matcher. A literal pattern matches by\n * case-sensitive substring; a `/…/`-wrapped pattern compiles into a RegExp\n * anchored to search (global flag off — we only need a boolean). Compilation\n * failures fall back to literal substring so a bad pattern never throws here.\n */\nexport function compileRedactionPattern(pattern: string): CompiledRedactionRule {\n  const trimmed = pattern.trim();\n  if (!isRegexLike(trimmed)) {\n    return { pattern: trimmed, matcher: (content) => content.includes(trimmed) };\n  }\n  const body = trimmed.slice(1, -1);\n  try {\n    if (!isSafeRegex(body)) {\n      if (body.length === 0) return { pattern: trimmed, matcher: () => false };\n      return { pattern: trimmed, matcher: (content) => content.includes(body) };\n    }\n    const re = new RegExp(body);\n    if (re.test(\"\")) {\n      // Zero-width regex matches every string — would withhold all extraction.\n      return { pattern: trimmed, matcher: (content) => content.includes(body) };\n    }\n    return { pattern: trimmed, matcher: (content) => re.test(content) };\n  } catch {\n    // Malformed regex despite validation (e.g. rule file hand-edited) —\n    // treat as a literal on the BODY so the rule still does something useful.\n    return { pattern: trimmed, matcher: (content) => content.includes(body) };\n  }\n}\n\n/**\n * Load + compile every redaction rule persisted under a namespace's storage\n * dir. Returns an empty array when the directory is absent or unreadable\n * (fail-open — a missing or corrupt rules dir must never block extraction).\n */\nexport async function loadRedactionRules(stateDir: string): Promise<CompiledRedactionRule[]> {\n  const dir = path.join(stateDir, REDACTION_RULES_SUBDIR);\n  let names: string[];\n  try {\n    names = await readdir(dir);\n  } catch {\n    // ENOENT (cold install, no rules yet) or permission error — no rules.\n    return [];\n  }\n  // Sort deterministically (alphabetical by filename) so the set of rules\n  // that survives the MAX_RULE_FILES cap is NOT filesystem-dependent (review\n  // thread P2). Without this, readdir order varies by OS/FS and the silently\n  // truncated rules are arbitrary — a never-store pattern could be dropped.\n  const jsonFiles = names.filter((n) => n.endsWith(\".json\")).sort();\n  if (jsonFiles.length > MAX_RULE_FILES) {\n    // Visible failure mode: log a warning so the operator knows rules were\n    // truncated, rather than silently dropping enforcement.\n    console.warn(\n      `extraction-redaction: ${jsonFiles.length} redaction rules in ${dir} exceed the ${MAX_RULE_FILES} cap; ` +\n      `${jsonFiles.length - MAX_RULE_FILES} rules will NOT be enforced. Remove unused rules or raise the cap.`,\n    );\n  }\n  const rules: CompiledRedactionRule[] = [];\n  for (const name of jsonFiles.slice(0, MAX_RULE_FILES)) {\n    try {\n      const raw = await readFile(path.join(dir, name), \"utf-8\");\n      const parsed = JSON.parse(raw) as RedactionRuleFile;\n      if (typeof parsed?.pattern !== \"string\" || parsed.pattern.trim().length === 0) continue;\n      rules.push(compileRedactionPattern(parsed.pattern));\n    } catch {\n      // Skip a corrupt rule file rather than failing the pass (rule 34 —\n      // visible skip, never a silent pipeline block).\n    }\n  }\n  return rules;\n}\n\n/**\n * Test content against a set of compiled rules. Returns true if ANY rule\n * matches (the content should be withheld). An empty rule set never matches.\n */\nexport function contentMatchesRedactionRules(\n  content: string,\n  rules: readonly CompiledRedactionRule[],\n): boolean {\n  for (const rule of rules) {\n    try {\n      if (rule.matcher(content)) return true;\n    } catch {\n      // A matcher should not throw (compilation already fell back), but if a\n      // RegExp blows up on pathological input we skip that rule rather than\n      // failing the whole gate.\n    }\n  }\n  return false;\n}\n"],"mappings":";AAwBA,SAAS,SAAS,gBAAgB;AAClC,OAAO,UAAU;AAMV,IAAM,yBAAyB,KAAK,KAAK,SAAS,eAAe,iBAAiB;AAGzF,IAAM,iBAAiB;AAuBvB,SAAS,YAAY,SAA0B;AAC7C,SAAO,QAAQ,WAAW,GAAG,KAAK,QAAQ,SAAS,GAAG,KAAK,QAAQ,UAAU;AAC/E;AAYA,SAAS,YAAY,QAAyB;AAC5C,MAAI,OAAO,WAAW,KAAK,OAAO,SAAS,IAAK,QAAO;AAIvD,MAAI,mEAAmE,KAAK,MAAM,GAAG;AACnF,WAAO;AAAA,EACT;AAGA,WAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,QAAI,OAAO,CAAC,MAAM,IAAK;AAEvB,QAAI,QAAQ;AACZ,QAAI,IAAI,IAAI;AACZ,WAAO,IAAI,OAAO,UAAU,QAAQ,GAAG;AACrC,UAAI,OAAO,CAAC,MAAM,MAAM;AAAE,aAAK;AAAG;AAAA,MAAU;AAC5C,UAAI,OAAO,CAAC,MAAM,IAAK;AAAA,eACd,OAAO,CAAC,MAAM,IAAK;AAC5B;AAAA,IACF;AACA,QAAI,UAAU,EAAG;AAEjB,UAAM,aAAa,OAAO,CAAC;AAC3B,QAAI,eAAe,OAAO,eAAe,OAAO,eAAe,IAAK;AACpE,UAAM,YAAY,OAAO,MAAM,IAAI,GAAG,IAAI,CAAC;AAE3C,QAAI,SAAS,KAAK,SAAS,KAAK,sBAAsB,KAAK,SAAS,GAAG;AAErE,aAAO;AAAA,IACT;AAEA,QAAI,UAAU,SAAS,GAAG,GAAG;AAC3B,YAAM,WAAW,UAAU,MAAM,GAAG;AACpC,UAAI,SAAS,UAAU,GAAG;AACxB,cAAM,aAAa,IAAI,IAAI,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,OAAO,OAAO,CAAC;AACpE,YAAI,WAAW,OAAO,SAAS,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,QAAQ;AACjE,iBAAO;AAAA,QACT;AAAA,MACF;AAAA,IACF;AACA,QAAI;AAAA,EACN;AACA,SAAO;AACT;AAQO,SAAS,wBAAwB,SAAwC;AAC9E,QAAM,UAAU,QAAQ,KAAK;AAC7B,MAAI,CAAC,YAAY,OAAO,GAAG;AACzB,WAAO,EAAE,SAAS,SAAS,SAAS,CAAC,YAAY,QAAQ,SAAS,OAAO,EAAE;AAAA,EAC7E;AACA,QAAM,OAAO,QAAQ,MAAM,GAAG,EAAE;AAChC,MAAI;AACF,QAAI,CAAC,YAAY,IAAI,GAAG;AACtB,UAAI,KAAK,WAAW,EAAG,QAAO,EAAE,SAAS,SAAS,SAAS,MAAM,MAAM;AACvE,aAAO,EAAE,SAAS,SAAS,SAAS,CAAC,YAAY,QAAQ,SAAS,IAAI,EAAE;AAAA,IAC1E;AACA,UAAM,KAAK,IAAI,OAAO,IAAI;AAC1B,QAAI,GAAG,KAAK,EAAE,GAAG;AAEf,aAAO,EAAE,SAAS,SAAS,SAAS,CAAC,YAAY,QAAQ,SAAS,IAAI,EAAE;AAAA,IAC1E;AACA,WAAO,EAAE,SAAS,SAAS,SAAS,CAAC,YAAY,GAAG,KAAK,OAAO,EAAE;AAAA,EACpE,QAAQ;AAGN,WAAO,EAAE,SAAS,SAAS,SAAS,CAAC,YAAY,QAAQ,SAAS,IAAI,EAAE;AAAA,EAC1E;AACF;AAOA,eAAsB,mBAAmB,UAAoD;AAC3F,QAAM,MAAM,KAAK,KAAK,UAAU,sBAAsB;AACtD,MAAI;AACJ,MAAI;AACF,YAAQ,MAAM,QAAQ,GAAG;AAAA,EAC3B,QAAQ;AAEN,WAAO,CAAC;AAAA,EACV;AAKA,QAAM,YAAY,MAAM,OAAO,CAAC,MAAM,EAAE,SAAS,OAAO,CAAC,EAAE,KAAK;AAChE,MAAI,UAAU,SAAS,gBAAgB;AAGrC,YAAQ;AAAA,MACN,yBAAyB,UAAU,MAAM,uBAAuB,GAAG,eAAe,cAAc,SAC7F,UAAU,SAAS,cAAc;AAAA,IACtC;AAAA,EACF;AACA,QAAM,QAAiC,CAAC;AACxC,aAAW,QAAQ,UAAU,MAAM,GAAG,cAAc,GAAG;AACrD,QAAI;AACF,YAAM,MAAM,MAAM,SAAS,KAAK,KAAK,KAAK,IAAI,GAAG,OAAO;AACxD,YAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,UAAI,OAAO,QAAQ,YAAY,YAAY,OAAO,QAAQ,KAAK,EAAE,WAAW,EAAG;AAC/E,YAAM,KAAK,wBAAwB,OAAO,OAAO,CAAC;AAAA,IACpD,QAAQ;AAAA,IAGR;AAAA,EACF;AACA,SAAO;AACT;AAMO,SAAS,6BACd,SACA,OACS;AACT,aAAW,QAAQ,OAAO;AACxB,QAAI;AACF,UAAI,KAAK,QAAQ,OAAO,EAAG,QAAO;AAAA,IACpC,QAAQ;AAAA,IAIR;AAAA,EACF;AACA,SAAO;AACT;","names":[]}

package/dist/{chunk-WM7DNKBD.js → chunk-M4V2JVSZ.js}

@@ -1,7 +1,7 @@
 import {
   resolveDefaultNamespaceRoot,
   resolveNamespaceStorageRoot
-} from "./chunk-SC2YAWRF.js";
+} from "./chunk-3TSTGI6F.js";
 import {
   getConfiguredNamespaces
 } from "./chunk-J6BH2OBA.js";
@@ -1946,4 +1946,4 @@ export {
   runNamespaceMaintenancePlan,
   runNamespaceMaintenanceBatchPlan
 };
-//# sourceMappingURL=chunk-WM7DNKBD.js.map
+//# sourceMappingURL=chunk-M4V2JVSZ.js.map

package/dist/{chunk-I2HL5M6T.js → chunk-MJIHJ7OG.js}

@@ -7,18 +7,15 @@ import {
 import {
   openclawReplayNormalizer
 } from "./chunk-7F7Z6MOS.js";
-import {
-  importSqlite
-} from "./chunk-AGNBY3VG.js";
-import {
-  exportJsonBundle
-} from "./chunk-UP6MOYCB.js";
 import {
   exportSqlite
 } from "./chunk-7VFZTJ7K.js";
 import {
   importMarkdownBundle
 } from "./chunk-HDDRVXX4.js";
+import {
+  importSqlite
+} from "./chunk-AGNBY3VG.js";
 import {
   detectImportFormat
 } from "./chunk-OZKVVUJB.js";
@@ -28,14 +25,12 @@ import {
 import {
   backupMemoryDir
 } from "./chunk-2NLLXCJG.js";
+import {
+  exportJsonBundle
+} from "./chunk-UP6MOYCB.js";
 import {
   exportMarkdownBundle
 } from "./chunk-765K3SAT.js";
-import {
-  buildReplayNormalizerRegistry,
-  clampBatchSize,
-  runReplay
-} from "./chunk-HOJZMQ4J.js";
 import {
   TailscaleHelper
 } from "./chunk-EEC4PCG5.js";
@@ -43,22 +38,27 @@ import {
   WebDavServer
 } from "./chunk-PYIFUBRK.js";
 import {
-  migrateObservations
-} from "./chunk-D6RIFG4O.js";
-import {
-  rebuildMemoryLifecycleLedger
-} from "./chunk-UBHVAGO7.js";
+  buildReplayNormalizerRegistry,
+  clampBatchSize,
+  runReplay
+} from "./chunk-HOJZMQ4J.js";
 import {
   rebuildMemoryProjection,
   repairMemoryProjection,
   verifyMemoryProjection
-} from "./chunk-H7HUQIY7.js";
+} from "./chunk-Y4YD5TYW.js";
 import {
   rebuildObservations
 } from "./chunk-LZZNTPLR.js";
 import {
   archiveObservations
 } from "./chunk-WMWVO45V.js";
+import {
+  migrateObservations
+} from "./chunk-D6RIFG4O.js";
+import {
+  rebuildMemoryLifecycleLedger
+} from "./chunk-JYLFZWUX.js";
 import {
   getBulkImportSource,
   listBulkImportSources,
@@ -70,18 +70,27 @@ import {
 } from "./chunk-GQL52GQ5.js";
 import {
   promoteSemanticRuleFromMemory
-} from "./chunk-FACTVMXQ.js";
-import {
-  resolveAgentAccessAuthToken
-} from "./chunk-TGQ2NTWH.js";
+} from "./chunk-4H4F3BFL.js";
 import {
   buildResumeBundleFromState,
   getResumeBundleStatus,
   recordResumeBundle
-} from "./chunk-D7EBTQ24.js";
+} from "./chunk-HOHVIVDR.js";
+import {
+  resolveAgentAccessAuthToken
+} from "./chunk-TGQ2NTWH.js";
 import {
   parseXrayCliOptions
-} from "./chunk-ZOHMPFOB.js";
+} from "./chunk-CKFLLAIS.js";
+import {
+  collectPatternMemories,
+  explainPatternMemory,
+  parsePatternsExplainOptions,
+  parsePatternsListOptions,
+  parseStrictCliDate,
+  renderPatternExplain,
+  renderPatternsList
+} from "./chunk-3T74IZB3.js";
 import {
   runBenchmarkRecall,
   runOperatorConfigReview,
@@ -89,24 +98,15 @@ import {
   runOperatorInventory,
   runOperatorRepair,
   runOperatorSetup
-} from "./chunk-DF3I6JGP.js";
+} from "./chunk-NSA5ZRUL.js";
 import {
   listNamespaces,
   runNamespaceMigration,
   verifyNamespaces
-} from "./chunk-6CWGS2LY.js";
-import {
-  collectPatternMemories,
-  explainPatternMemory,
-  parsePatternsExplainOptions,
-  parsePatternsListOptions,
-  parseStrictCliDate,
-  renderPatternExplain,
-  renderPatternsList
-} from "./chunk-3T74IZB3.js";
+} from "./chunk-DKJCRGWM.js";
 import {
   GraphDashboardServer
-} from "./chunk-YNDLCWXS.js";
+} from "./chunk-EZ25VE3G.js";
 import {
   isReplaySource,
   normalizeReplaySessionKey
@@ -114,6 +114,9 @@ import {
 import {
   RoutingRulesStore
 } from "./chunk-WIWPSQYU.js";
+import {
+  searchVerifiedEpisodes
+} from "./chunk-ASKXIAHD.js";
 import {
   getUtilityLearningStatus,
   learnUtilityPromotionWeights
@@ -122,15 +125,12 @@ import {
   getUtilityTelemetryStatus,
   recordUtilityTelemetryEvent
 } from "./chunk-TERNBNJB.js";
-import {
-  searchVerifiedEpisodes
-} from "./chunk-FXCIOLRB.js";
 import {
   ThreadingManager
 } from "./chunk-QRDOSYOR.js";
 import {
   searchVerifiedSemanticRules
-} from "./chunk-T55EGZSJ.js";
+} from "./chunk-UVPL565C.js";
 import {
   getWorkProductLedgerStatus,
   recordWorkProductLedgerEntry,
@@ -145,7 +145,7 @@ import {
 } from "./chunk-33JBK2XP.js";
 import {
   formatNamespaceMaintenanceHealthText
-} from "./chunk-5OPYYPJN.js";
+} from "./chunk-CBWI22JN.js";
 import {
   analyzeSessionIntegrity,
   applySessionRepair,
@@ -168,12 +168,12 @@ import {
 import {
   listConnectorStates
 } from "./chunk-6GUG4YNM.js";
-import {
-  rescoreMemoryImportance
-} from "./chunk-JXS5PDQ7.js";
 import {
   searchHarmonicRetrieval
 } from "./chunk-AV5ZEH4M.js";
+import {
+  rescoreMemoryImportance
+} from "./chunk-JXS5PDQ7.js";
 import {
   createEvalBaselineSnapshot,
   getEvalHarnessStatus,
@@ -209,13 +209,13 @@ import {
 } from "./chunk-UQ7RN5HK.js";
 import {
   parseConfig
-} from "./chunk-4SF232E6.js";
+} from "./chunk-36SEDFAU.js";
 import {
   getAbstractionNodeStoreStatus
 } from "./chunk-OADWQ5CR.js";
 import {
   EngramAccessHttpServer
-} from "./chunk-C6BWLYW5.js";
+} from "./chunk-N3VNUM4Z.js";
 import {
   WearablesInputError
 } from "./chunk-7WV3F5DQ.js";
@@ -228,10 +228,10 @@ import {
   createProductionChatLlmAdapter,
   loadChatSession,
   sessionBelongsToPrincipal
-} from "./chunk-FN6QP7JQ.js";
+} from "./chunk-6PY5YJAV.js";
 import {
   EngramAccessService
-} from "./chunk-KGZF2VO3.js";
+} from "./chunk-27QQC7ZX.js";
 import {
   WorkStorage
 } from "./chunk-GDB4J2H3.js";
@@ -243,13 +243,13 @@ import {
   parseRecallExplainFormat,
   renderRecallExplain,
   renderXray
-} from "./chunk-6SQQOJ4U.js";
+} from "./chunk-GKRLPHPU.js";
 import {
   listMemoryGovernanceRuns,
   readMemoryGovernanceRunArtifact,
   restoreMemoryGovernanceRun,
   runMemoryGovernance
-} from "./chunk-WAFDHKES.js";
+} from "./chunk-4NOI577P.js";
 import {
   getTrustZoneStoreStatus,
   promoteTrustZoneRecord,
@@ -274,7 +274,7 @@ import {
 import {
   RECALL_DISCLOSURE_LEVELS,
   isRecallDisclosure
-} from "./chunk-7AG54AF3.js";
+} from "./chunk-PUR2CKX2.js";
 import {
   RECALL_FALLBACK_DIRS
 } from "./chunk-VS2IYZRU.js";
@@ -3575,7 +3575,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
         const idArg = typeof args[0] === "string" ? args[0] : "";
         const options = args[1] ?? {};
         const reason = typeof options.reason === "string" && options.reason.trim().length > 0 ? options.reason.trim() : void 0;
-        const { forgetMemory } = await import("./forget-OEE5OELK.js");
+        const { forgetMemory } = await import("./forget-WYLR4ZFV.js");
         try {
           const result = await forgetMemory(orchestrator.storage, {
             id: idArg,
@@ -7505,4 +7505,4 @@ export {
   listMemoryMarkdownFilePaths,
   registerCli
 };
-//# sourceMappingURL=chunk-I2HL5M6T.js.map
+//# sourceMappingURL=chunk-MJIHJ7OG.js.map

package/dist/{chunk-J334N6QV.js → chunk-MLKWJOAJ.js}

@@ -10,7 +10,7 @@ import {
 import {
   planNamespaceMaintenance,
   runNamespaceMaintenanceBatchPlan
-} from "./chunk-WM7DNKBD.js";
+} from "./chunk-M4V2JVSZ.js";
 import {
   resolveHomeDir
 } from "./chunk-JUC24CTX.js";
@@ -441,4 +441,4 @@ var MaintenanceScheduler = class {
 export {
   MaintenanceScheduler
 };
-//# sourceMappingURL=chunk-J334N6QV.js.map
+//# sourceMappingURL=chunk-MLKWJOAJ.js.map