@remnic/core 9.3.726 → 9.3.727

package/dist/{chunk-PKMQK2WY.js → chunk-773DPI6T.js}

@@ -1,3 +1,6 @@
+import {
+  LcmDag
+} from "./chunk-7N4KAIGN.js";
 import {
   LcmWorkQueue
 } from "./chunk-TPDBFYEG.js";
@@ -14,9 +17,6 @@ import {
 import {
   LcmArchive
 } from "./chunk-HW5EF6LV.js";
-import {
-  LcmDag
-} from "./chunk-7N4KAIGN.js";
 import {
   log
 } from "./chunk-NU3CSQ4H.js";
@@ -513,4 +513,4 @@ export {
   extractLcmConfig,
   LcmEngine
 };
-//# sourceMappingURL=chunk-PKMQK2WY.js.map
+//# sourceMappingURL=chunk-773DPI6T.js.map

package/dist/{chunk-MQVKHFIU.js → chunk-7RLCCNHU.js}

@@ -1,12 +1,12 @@
-import {
-  WEARABLES_DIR_NAME,
-  isValidTranscriptDate
-} from "./chunk-M7XQSUBB.js";
 import {
   TombstoneStore,
   buildRetiredFactTombstoneInputs,
   collectRetiredMemoriesForRebuild
 } from "./chunk-L2B3EE7B.js";
+import {
+  WEARABLES_DIR_NAME,
+  isValidTranscriptDate
+} from "./chunk-M7XQSUBB.js";
 import {
   isErrnoCode
 } from "./chunk-5UZXUTVO.js";
@@ -27,7 +27,7 @@ import {
 import {
   SPECULATIVE_TTL_DAYS,
   confidenceTier
-} from "./chunk-7AG54AF3.js";
+} from "./chunk-PUR2CKX2.js";
 import {
   getCachedEntities,
   invalidateAllForDir,
@@ -64,7 +64,7 @@ import {
 import {
   parseFaithfulnessField,
   serializeFaithfulnessFields
-} from "./chunk-6OIDDKAA.js";
+} from "./chunk-YTU7WKYN.js";
 import {
   isConsolidationOperator,
   isValidDerivedFromEntry
@@ -98,7 +98,7 @@ import {
   parseProvenanceTag,
   reconcileProvenanceRead,
   serializeProvenanceFields
-} from "./chunk-MDBZTH7N.js";
+} from "./chunk-YKBHOBJK.js";
 import {
   sanitizeMemoryContent
 } from "./chunk-5GKPFL3S.js";
@@ -5866,4 +5866,4 @@ export {
   serializeEntityFile,
   StorageManager
 };
-//# sourceMappingURL=chunk-MQVKHFIU.js.map
+//# sourceMappingURL=chunk-7RLCCNHU.js.map

package/dist/{chunk-XGTBNVIU.js → chunk-AAD2ZS6P.js}

@@ -15,6 +15,15 @@ async function callOpenAiCompatibleChat(endpoint, messages, options, fetchImpl =
   const url = joinBaseUrl(endpoint.baseUrl, "/chat/completions");
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), options.timeoutMs);
+  const batchSignal = options.signal;
+  const onBatchAbort = () => controller.abort();
+  if (batchSignal) {
+    if (batchSignal.aborted) {
+      controller.abort();
+    } else {
+      batchSignal.addEventListener("abort", onBatchAbort, { once: true });
+    }
+  }
   try {
     const body = {
       model: endpoint.model,
@@ -45,6 +54,7 @@ async function callOpenAiCompatibleChat(endpoint, messages, options, fetchImpl =
     return { content, modelUsed: extractModel(parsed) ?? endpoint.model };
   } finally {
     clearTimeout(timer);
+    if (batchSignal) batchSignal.removeEventListener("abort", onBatchAbort);
   }
 }
 function joinBaseUrl(base, path) {
@@ -76,4 +86,4 @@ export {
   resolveCorrectionIntentEndpoint,
   callOpenAiCompatibleChat
 };
-//# sourceMappingURL=chunk-XGTBNVIU.js.map
+//# sourceMappingURL=chunk-AAD2ZS6P.js.map

package/dist/chunk-AAD2ZS6P.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/local-model-endpoint.ts"],"sourcesContent":["/**\n * Local fine-tuned model endpoint resolver + openai-compatible caller\n * (issue #1585 model-lab integration).\n *\n * Remnic's two classification workloads — the extraction faithfulness gate\n * (#1576) and passive-correction intent detection (#1581) — can run on small\n * fine-tuned models served locally (Ollama / vLLM) instead of prompted\n * frontier LLMs. The model-lab (`model-lab/`) produces those models; this\n * module is the config-side half: it resolves the optional local endpoint\n * pointer from config and, when set, makes a minimal openai-compatible\n * chat-completions call to it.\n *\n * Design:\n *   - **Pointers are optional.** Empty defaults preserve the existing routing\n *     chain exactly (rule 39 / byte-identical pre-feature). A resolver returns\n *     `null` when the pointer is unset, so callers short-circuit before any\n *     network.\n *   - **Graceful degradation.** A local-endpoint failure (network, non-2xx,\n *     malformed body, timeout) returns `null`; callers fall back to the\n *     configured chain (checklist §4 — never block writes on a classifier).\n *   - **No inline casts.** The fetch JSON is narrowed with `in` / `typeof`\n *     guards (project rule: never assert a shape to read one property).\n *   - **Injectable fetch.** `callOpenAiCompatibleChat` takes an optional\n *     `fetchImpl` so the caller is unit-testable without a live server.\n */\n\nimport type { PluginConfig } from \"./types.js\";\n\n/** A resolved local endpoint: where to call + which model to name. */\nexport interface LocalModelEndpoint {\n  /** Base URL, e.g. `http://localhost:11434/v1` (no trailing slash required). */\n  baseUrl: string;\n  /** Model name the server expects, e.g. `remnic-faithfulness-gate-v1`. */\n  model: string;\n}\n\n/** A chat message in the openai-compatible shape this caller sends. */\nexport interface EndpointChatMessage {\n  role: \"system\" | \"user\" | \"assistant\";\n  content: string;\n}\n\n/** Options for a single local-endpoint chat call. */\nexport interface EndpointChatOptions {\n  /** Per-call timeout in ms. Bounds each attempt so one slow server can't\n   *  starve the batch (matches the local-LLM precedent). */\n  timeoutMs: number;\n  /** Optional batch AbortSignal forwarded into the probe (issue #1700 nit #5).\n   *  When the batch budget elapses (or the caller aborts), the in-flight probe\n   *  aborts immediately instead of waiting for its own `timeoutMs` — a\n   *  micro-optimization, not a correctness fix (the outer race already bounds\n   *  the total). Undefined preserves the prior per-attempt-only behavior. */\n  signal?: AbortSignal;\n  /** Sampling temperature — classification wants low entropy (0.0–0.2). */\n  temperature?: number;\n  /** Max output tokens. */\n  maxTokens?: number;\n  /** Request JSON-object output (the gate emits a JSON verdict array). */\n  responseFormatJson?: boolean;\n}\n\n/** Result of a local-endpoint chat call. */\nexport interface EndpointChatResult {\n  content: string;\n  /** The model the server reports it used (falls back to the requested name). */\n  modelUsed: string;\n}\n\n/**\n * Resolve the faithfulness-gate local endpoint from config (issue #1585).\n *\n * Returns the endpoint only when BOTH a base URL and a model name are\n * configured; otherwise `null` (gate uses its existing routing chain). The\n * gate's verifier needs a model identity, so a base URL alone is intentionally\n * insufficient — silently calling whatever the server's default model is would\n * be an unreviewed behavioral change.\n */\nexport function resolveFaithfulnessGateEndpoint(\n  config: Pick<PluginConfig, \"extractionFaithfulnessModel\" | \"extractionFaithfulnessBaseUrl\">,\n): LocalModelEndpoint | null {\n  const baseUrl = config.extractionFaithfulnessBaseUrl.trim();\n  const model = config.extractionFaithfulnessModel.trim();\n  if (!baseUrl || !model) return null;\n  return { baseUrl, model };\n}\n\n/**\n * Resolve the correction-intent local endpoint from config (issue #1581/#1585).\n *\n * Same contract as the gate resolver. Consumption by the model-backed\n * detector is the consuming child's job — the rule-based\n * `detectPassiveCorrections` remains the default path; this pointer lets a\n * future model-backed detector route to a fine-tuned local classifier when an\n * operator configures one.\n */\nexport function resolveCorrectionIntentEndpoint(\n  config: Pick<PluginConfig, \"correctionIntentModel\" | \"correctionIntentBaseUrl\">,\n): LocalModelEndpoint | null {\n  const baseUrl = config.correctionIntentBaseUrl.trim();\n  const model = config.correctionIntentModel.trim();\n  if (!baseUrl || !model) return null;\n  return { baseUrl, model };\n}\n\ntype FetchLike = typeof fetch;\n\n/**\n * Make an openai-compatible chat-completions call to a local endpoint.\n *\n * POSTs to `${baseUrl}/chat/completions` with `{ model, messages, ... }` and\n * returns the first choice's content. Any failure (non-2xx, network error,\n * malformed body, timeout) returns `null` so callers fall back gracefully.\n *\n * The response is narrowed with runtime guards — never an unchecked cast — so\n * a surprising server response fails closed (`null`) rather than reading a\n * fabricated field.\n */\nexport async function callOpenAiCompatibleChat(\n  endpoint: LocalModelEndpoint,\n  messages: EndpointChatMessage[],\n  options: EndpointChatOptions,\n  fetchImpl: FetchLike = fetch,\n): Promise<EndpointChatResult | null> {\n  const url = joinBaseUrl(endpoint.baseUrl, \"/chat/completions\");\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), options.timeoutMs);\n  // Forward the batch AbortSignal into the probe (issue #1700 nit #5): if the\n  // batch budget already elapsed, abort the in-flight probe immediately rather\n  // than waiting for the probe's own timeoutMs. AbortSignal.any is ES2024\n  // (forbidden here); wire the listener manually + guard the already-aborted\n  // case. The fetch still uses the probe's controller, so clearing the timer\n  // below is the only cleanup needed.\n  const batchSignal = options.signal;\n  const onBatchAbort = () => controller.abort();\n  if (batchSignal) {\n    if (batchSignal.aborted) {\n      controller.abort();\n    } else {\n      batchSignal.addEventListener(\"abort\", onBatchAbort, { once: true });\n    }\n  }\n  try {\n    const body: Record<string, unknown> = {\n      model: endpoint.model,\n      messages,\n      temperature: options.temperature ?? 0.1,\n    };\n    if (typeof options.maxTokens === \"number\") {\n      body.max_tokens = options.maxTokens;\n    }\n    if (options.responseFormatJson) {\n      body.response_format = { type: \"json_object\" };\n    }\n    let response: Response;\n    try {\n      response = await fetchImpl(url, {\n        method: \"POST\",\n        headers: { \"content-type\": \"application/json\" },\n        body: JSON.stringify(body),\n        signal: controller.signal,\n      });\n    } catch {\n      // Network error or abort — fail closed, let the caller fall back.\n      return null;\n    }\n    if (!response.ok) return null;\n    const parsed: unknown = await response.json().catch(() => null);\n    const content = extractFirstChoiceContent(parsed);\n    if (content === null) return null;\n    return { content, modelUsed: extractModel(parsed) ?? endpoint.model };\n  } finally {\n    clearTimeout(timer);\n    if (batchSignal) batchSignal.removeEventListener(\"abort\", onBatchAbort);\n  }\n}\n\n/** Join a base URL and a path, tolerating a trailing slash on the base. */\nfunction joinBaseUrl(base: string, path: string): string {\n  return base.endsWith(\"/\") ? `${base.slice(0, -1)}${path}` : `${base}${path}`;\n}\n\n/**\n * Narrow the openai-compatible response and pull the first choice's content.\n *\n * `in` / `typeof` guards only — no `as` cast (project rule). Returns `null`\n * for any shape that isn't `{ choices: [{ message: { content: string } }, …] }`.\n */\nfunction extractFirstChoiceContent(data: unknown): string | null {\n  if (!data || typeof data !== \"object\") return null;\n  // After `in`, TS narrows the property to `unknown` — read it directly, no cast.\n  if (!(\"choices\" in data) || !Array.isArray(data.choices)) return null;\n  const choices: unknown[] = data.choices;\n  for (const choice of choices) {\n    if (!choice || typeof choice !== \"object\") continue;\n    if (!(\"message\" in choice)) continue;\n    const message = choice.message;\n    if (!message || typeof message !== \"object\") continue;\n    if (!(\"content\" in message)) continue;\n    const content = message.content;\n    if (typeof content === \"string\" && content.length > 0) return content;\n  }\n  return null;\n}\n\n/** Narrow the `model` field from the response (best-effort, may be absent). */\nfunction extractModel(data: unknown): string | null {\n  if (!data || typeof data !== \"object\" || !(\"model\" in data)) return null;\n  const model = data.model;\n  return typeof model === \"string\" && model.length > 0 ? model : null;\n}\n"],"mappings":";AA6EO,SAAS,gCACd,QAC2B;AAC3B,QAAM,UAAU,OAAO,8BAA8B,KAAK;AAC1D,QAAM,QAAQ,OAAO,4BAA4B,KAAK;AACtD,MAAI,CAAC,WAAW,CAAC,MAAO,QAAO;AAC/B,SAAO,EAAE,SAAS,MAAM;AAC1B;AAWO,SAAS,gCACd,QAC2B;AAC3B,QAAM,UAAU,OAAO,wBAAwB,KAAK;AACpD,QAAM,QAAQ,OAAO,sBAAsB,KAAK;AAChD,MAAI,CAAC,WAAW,CAAC,MAAO,QAAO;AAC/B,SAAO,EAAE,SAAS,MAAM;AAC1B;AAeA,eAAsB,yBACpB,UACA,UACA,SACA,YAAuB,OACa;AACpC,QAAM,MAAM,YAAY,SAAS,SAAS,mBAAmB;AAC7D,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,QAAQ,SAAS;AAOpE,QAAM,cAAc,QAAQ;AAC5B,QAAM,eAAe,MAAM,WAAW,MAAM;AAC5C,MAAI,aAAa;AACf,QAAI,YAAY,SAAS;AACvB,iBAAW,MAAM;AAAA,IACnB,OAAO;AACL,kBAAY,iBAAiB,SAAS,cAAc,EAAE,MAAM,KAAK,CAAC;AAAA,IACpE;AAAA,EACF;AACA,MAAI;AACF,UAAM,OAAgC;AAAA,MACpC,OAAO,SAAS;AAAA,MAChB;AAAA,MACA,aAAa,QAAQ,eAAe;AAAA,IACtC;AACA,QAAI,OAAO,QAAQ,cAAc,UAAU;AACzC,WAAK,aAAa,QAAQ;AAAA,IAC5B;AACA,QAAI,QAAQ,oBAAoB;AAC9B,WAAK,kBAAkB,EAAE,MAAM,cAAc;AAAA,IAC/C;AACA,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,UAAU,KAAK;AAAA,QAC9B,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,IAAI;AAAA,QACzB,QAAQ,WAAW;AAAA,MACrB,CAAC;AAAA,IACH,QAAQ;AAEN,aAAO;AAAA,IACT;AACA,QAAI,CAAC,SAAS,GAAI,QAAO;AACzB,UAAM,SAAkB,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,IAAI;AAC9D,UAAM,UAAU,0BAA0B,MAAM;AAChD,QAAI,YAAY,KAAM,QAAO;AAC7B,WAAO,EAAE,SAAS,WAAW,aAAa,MAAM,KAAK,SAAS,MAAM;AAAA,EACtE,UAAE;AACA,iBAAa,KAAK;AAClB,QAAI,YAAa,aAAY,oBAAoB,SAAS,YAAY;AAAA,EACxE;AACF;AAGA,SAAS,YAAY,MAAc,MAAsB;AACvD,SAAO,KAAK,SAAS,GAAG,IAAI,GAAG,KAAK,MAAM,GAAG,EAAE,CAAC,GAAG,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI;AAC5E;AAQA,SAAS,0BAA0B,MAA8B;AAC/D,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAE9C,MAAI,EAAE,aAAa,SAAS,CAAC,MAAM,QAAQ,KAAK,OAAO,EAAG,QAAO;AACjE,QAAM,UAAqB,KAAK;AAChC,aAAW,UAAU,SAAS;AAC5B,QAAI,CAAC,UAAU,OAAO,WAAW,SAAU;AAC3C,QAAI,EAAE,aAAa,QAAS;AAC5B,UAAM,UAAU,OAAO;AACvB,QAAI,CAAC,WAAW,OAAO,YAAY,SAAU;AAC7C,QAAI,EAAE,aAAa,SAAU;AAC7B,UAAM,UAAU,QAAQ;AACxB,QAAI,OAAO,YAAY,YAAY,QAAQ,SAAS,EAAG,QAAO;AAAA,EAChE;AACA,SAAO;AACT;AAGA,SAAS,aAAa,MAA8B;AAClD,MAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,EAAE,WAAW,MAAO,QAAO;AACpE,QAAM,QAAQ,KAAK;AACnB,SAAO,OAAO,UAAU,YAAY,MAAM,SAAS,IAAI,QAAQ;AACjE;","names":[]}

package/dist/{chunk-EZNDNMRH.js → chunk-AQLOP5F4.js}

@@ -1,6 +1,6 @@
 import {
   enqueuePassiveCorrectionNotification
-} from "./chunk-KJR66XOM.js";
+} from "./chunk-EY6MDMHK.js";
 import {
   stripAttributesSuffix
 } from "./chunk-SVOZFLIQ.js";
@@ -1794,4 +1794,4 @@ export {
   capturePassiveCorrections,
   clusterByKey
 };
-//# sourceMappingURL=chunk-EZNDNMRH.js.map
+//# sourceMappingURL=chunk-AQLOP5F4.js.map

package/dist/{chunk-UNNDFYUX.js → chunk-ARV3AUOM.js}

@@ -1,13 +1,13 @@
 import {
   createVersion
 } from "./chunk-VF4XKTX3.js";
-import {
-  decryptCapsuleFileInMemory,
-  isEncryptedCapsuleFile
-} from "./chunk-UVYI6VIX.js";
 import {
   parseExportBundle
 } from "./chunk-WEHSQBFR.js";
+import {
+  decryptCapsuleFileInMemory,
+  isEncryptedCapsuleFile
+} from "./chunk-X7Y7WX73.js";
 import {
   assertIsDirectoryNotSymlink,
   assertRealpathInsideRoot,
@@ -227,4 +227,4 @@ function mintForkId(capsuleId, originalId, now) {
 export {
   importCapsule
 };
-//# sourceMappingURL=chunk-UNNDFYUX.js.map
+//# sourceMappingURL=chunk-ARV3AUOM.js.map

package/dist/{chunk-NPL7VDM6.js → chunk-ASKXIAHD.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-ZBJMUXZH.js";
 import {
   StorageManager
-} from "./chunk-MQVKHFIU.js";
+} from "./chunk-7RLCCNHU.js";
 import {
   getCachedEpisodeMap,
   setCachedEpisodeMap
@@ -107,4 +107,4 @@ export {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
 };
-//# sourceMappingURL=chunk-NPL7VDM6.js.map
+//# sourceMappingURL=chunk-ASKXIAHD.js.map

package/dist/{chunk-K4ZNARDO.js → chunk-CBWI22JN.js}

@@ -3,7 +3,7 @@ import {
   readNamespaceMaintenanceLastRanStatuses,
   readNamespaceMaintenanceStatuses,
   runNamespaceMaintenancePlan
-} from "./chunk-YTZ3VGC7.js";
+} from "./chunk-M4V2JVSZ.js";
 
 // src/maintenance/namespace-maintenance-fanout.ts
 var NAMESPACE_MAINTENANCE_JOBS = [
@@ -146,4 +146,4 @@ export {
   summarizeNamespaceMaintenanceHealth,
   formatNamespaceMaintenanceHealthText
 };
-//# sourceMappingURL=chunk-K4ZNARDO.js.map
+//# sourceMappingURL=chunk-CBWI22JN.js.map

package/dist/{chunk-ZOHMPFOB.js → chunk-CKFLLAIS.js}

@@ -1,10 +1,10 @@
 import {
   parseXrayFormat
-} from "./chunk-6SQQOJ4U.js";
+} from "./chunk-GKRLPHPU.js";
 import {
   RECALL_DISCLOSURE_LEVELS,
   isRecallDisclosure
-} from "./chunk-7AG54AF3.js";
+} from "./chunk-PUR2CKX2.js";
 
 // src/recall-xray-cli.ts
 function parseXrayDisclosureFlag(value) {
@@ -50,4 +50,4 @@ export {
   parseXrayBudgetFlag,
   parseXrayCliOptions
 };
-//# sourceMappingURL=chunk-ZOHMPFOB.js.map
+//# sourceMappingURL=chunk-CKFLLAIS.js.map

package/dist/{chunk-DCKNMLEQ.js → chunk-CSRXQ6NB.js}

@@ -50,7 +50,7 @@ import {
 } from "./chunk-RGMVMVMF.js";
 import {
   buildFactProvenance
-} from "./chunk-MDBZTH7N.js";
+} from "./chunk-YKBHOBJK.js";
 import {
   sanitizeMemoryContent
 } from "./chunk-5GKPFL3S.js";
@@ -2422,4 +2422,4 @@ ${memoryList}` }
 export {
   ExtractionEngine
 };
-//# sourceMappingURL=chunk-DCKNMLEQ.js.map
+//# sourceMappingURL=chunk-CSRXQ6NB.js.map

package/dist/{chunk-6AFVIOVZ.js → chunk-CTOQEZSN.js}

@@ -1,6 +1,6 @@
 import {
   createSearchBackend
-} from "./chunk-53EEQYE5.js";
+} from "./chunk-2KAYTPPT.js";
 import {
   namespaceIdentityToken,
   normalizeNamespaceIdentity
@@ -401,4 +401,4 @@ export {
   namespaceCollectionName,
   NamespaceSearchRouter
 };
-//# sourceMappingURL=chunk-6AFVIOVZ.js.map
+//# sourceMappingURL=chunk-CTOQEZSN.js.map

package/dist/{chunk-7NS7AWMZ.js → chunk-DKJCRGWM.js}

@@ -1,9 +1,9 @@
 import {
   NamespaceStorageRouter
-} from "./chunk-RRHHQYJS.js";
+} from "./chunk-3TSTGI6F.js";
 import {
   namespaceCollectionName
-} from "./chunk-6AFVIOVZ.js";
+} from "./chunk-CTOQEZSN.js";
 import {
   namespaceIdentityFromToken,
   namespaceIdentityToken
@@ -204,4 +204,4 @@ export {
   verifyNamespaces,
   runNamespaceMigration
 };
-//# sourceMappingURL=chunk-7NS7AWMZ.js.map
+//# sourceMappingURL=chunk-DKJCRGWM.js.map

package/dist/{chunk-JPUT5NGH.js → chunk-DMQWV6SQ.js}

@@ -1,6 +1,6 @@
 import {
   runPostConsolidationMaterialize
-} from "./chunk-UQSVUEN2.js";
+} from "./chunk-37436GML.js";
 import {
   discoverMemoryExtensions,
   renderExtensionsBlock,
@@ -217,4 +217,4 @@ export {
   buildExtensionsBlockForConsolidation,
   materializeAfterSemanticConsolidation
 };
-//# sourceMappingURL=chunk-JPUT5NGH.js.map
+//# sourceMappingURL=chunk-DMQWV6SQ.js.map

package/dist/{chunk-F3XZN24Z.js → chunk-DRUDC2UX.js}

@@ -1,6 +1,6 @@
 import {
   isRecallDisclosure
-} from "./chunk-7AG54AF3.js";
+} from "./chunk-PUR2CKX2.js";
 import {
   normalizeRetrievedMemoryProvenance
 } from "./chunk-I4WBNM3M.js";
@@ -292,4 +292,4 @@ export {
   RecallXrayBuilder,
   summarizeDisclosureTokens
 };
-//# sourceMappingURL=chunk-F3XZN24Z.js.map
+//# sourceMappingURL=chunk-DRUDC2UX.js.map

package/dist/{chunk-KJR66XOM.js → chunk-EY6MDMHK.js}

@@ -1,7 +1,7 @@
 import {
   StorageManager,
   normalizeEntityName
-} from "./chunk-MQVKHFIU.js";
+} from "./chunk-7RLCCNHU.js";
 import {
   serializeMutations
 } from "./chunk-LTJAMRGI.js";
@@ -956,4 +956,4 @@ export {
   resolveBriefingSaveDir,
   briefingFilename
 };
-//# sourceMappingURL=chunk-KJR66XOM.js.map
+//# sourceMappingURL=chunk-EY6MDMHK.js.map

package/dist/{chunk-3TUT4PWB.js → chunk-FVZ2ISIX.js}

@@ -1,6 +1,6 @@
 import {
   isValidCapsuleSince
-} from "./chunk-5W7CTZ2E.js";
+} from "./chunk-KQAFEZQX.js";
 import {
   CAPSULE_ID_PATTERN
 } from "./chunk-WEHSQBFR.js";
@@ -441,4 +441,4 @@ export {
   actionConfidenceRequestSchema,
   validateRequest
 };
-//# sourceMappingURL=chunk-3TUT4PWB.js.map
+//# sourceMappingURL=chunk-FVZ2ISIX.js.map

package/dist/{chunk-C4X4QGIO.js → chunk-G6NKALRN.js}

@@ -1,4 +1,5 @@
 import {
+  coerceBool,
   coerceNumber
 } from "./chunk-PHK3HARR.js";
 
@@ -38,12 +39,14 @@ function parseFaithfulnessGateConfig(cfg) {
     parseIntegerAtLeast(cfg.extractionFaithfulnessTimeoutMs, 8e3, 1, "extractionFaithfulnessTimeoutMs"),
     6e4
   );
+  const extractionFaithfulnessLocalParseFallback = coerceBool(cfg.extractionFaithfulnessLocalParseFallback) === true;
   return {
     extractionFaithfulnessGate,
     extractionFaithfulnessModel,
     extractionFaithfulnessBaseUrl,
     extractionFaithfulnessContextChars,
-    extractionFaithfulnessTimeoutMs
+    extractionFaithfulnessTimeoutMs,
+    extractionFaithfulnessLocalParseFallback
   };
 }
 function parseCorrectionIntentConfig(cfg) {
@@ -57,4 +60,4 @@ export {
   parseFaithfulnessGateConfig,
   parseCorrectionIntentConfig
 };
-//# sourceMappingURL=chunk-C4X4QGIO.js.map
+//# sourceMappingURL=chunk-G6NKALRN.js.map

package/dist/chunk-G6NKALRN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/faithfulness-config.ts"],"sourcesContent":["/**\n * Faithfulness-gate + correction-intent config parsing (issue #1576 / #1585).\n *\n * Extracted verbatim from `config.ts` (a watchlisted god file) so the gate\n * config block can grow — the model-lab pointer keys\n * `extractionFaithfulnessBaseUrl` (#1585) and the correction-intent pointers\n * (`correctionIntentModel` / `correctionIntentBaseUrl`) — without growing the\n * god file. This is a behavior-preserving extraction (#1526-style): the\n * validation, defaults, and error messages are byte-identical to the inline\n * block it replaces, which the existing extraction-faithfulness + config\n * tests pin.\n *\n * Why a dedicated module (and not inline): the ratchet\n * (`scripts/check-ratchets.mjs`) forbids `config.ts` from growing, and the\n * model-lab integration needs three new optional keys. Centralizing the whole\n * gate+intent parsing here keeps it unit-testable in isolation and lets\n * `config.ts` spread the result in one line.\n */\n\nimport { coerceBool, coerceNumber } from \"./connectors/coerce.js\";\n\n/**\n * Parse a value as a strict integer >= `min`, throwing on anything else.\n *\n * Mirrors `parseIntegerAtLeast` in `config.ts` byte-for-byte (issue #1634:\n * reject non-numeric, <=0, non-integer, NaN, Infinity, booleans, objects —\n * gotcha #51). Reimplemented locally rather than exported from `config.ts`\n * so this module has no dependency on the god file (and vice versa).\n */\nfunction parseIntegerAtLeast(\n  value: unknown,\n  fallback: number,\n  min: number,\n  keyName: string,\n): number {\n  if (value === undefined || value === null) return fallback;\n  const coerced = coerceNumber(value);\n  if (\n    coerced === undefined ||\n    !Number.isFinite(coerced) ||\n    !Number.isInteger(coerced) ||\n    coerced < min\n  ) {\n    throw new Error(\n      `${keyName} must be an integer greater than or equal to ${min}; got ${JSON.stringify(value)}`,\n    );\n  }\n  return coerced;\n}\n\n/**\n * Parse the extraction faithfulness gate config block.\n *\n * Returns exactly the `PluginConfig` fields this block owns. Defaults preserve\n * the byte-identical pre-feature pipeline (rule 39): gate \"off\", empty model\n * + base URL, context 400 chars, timeout 8000 ms. Invalid `gate` values reject\n * listing valid options (rule 51); invalid integers throw (issue #1634).\n *\n * `extractionFaithfulnessBaseUrl` (issue #1585) is the model-lab pointer: when\n * set together with `extractionFaithfulnessModel`, the gate routes to that\n * local openai-compatible endpoint before the configured chain; empty string\n * (default) preserves the existing routing exactly.\n */\nexport function parseFaithfulnessGateConfig(cfg: Record<string, unknown>): {\n  extractionFaithfulnessGate: \"off\" | \"shadow\" | \"enforce\";\n  extractionFaithfulnessModel: string;\n  extractionFaithfulnessBaseUrl: string;\n  extractionFaithfulnessContextChars: number;\n  extractionFaithfulnessTimeoutMs: number;\n  extractionFaithfulnessLocalParseFallback: boolean;\n} {\n  const gateValue = cfg.extractionFaithfulnessGate;\n  let extractionFaithfulnessGate: \"off\" | \"shadow\" | \"enforce\";\n  if (gateValue === undefined || gateValue === null) {\n    extractionFaithfulnessGate = \"off\";\n  } else {\n    // Present-but-invalid (true/1/{}) must reject, not silently disable the gate (Ob4RQ).\n    const raw = typeof gateValue === \"string\" ? gateValue.trim().toLowerCase() : gateValue;\n    if (raw === \"off\" || raw === \"shadow\" || raw === \"enforce\") {\n      extractionFaithfulnessGate = raw;\n    } else {\n      throw new Error(\n        `extractionFaithfulnessGate must be one of \"off\" | \"shadow\" | \"enforce\" (got ${JSON.stringify(gateValue)})`,\n      );\n    }\n  }\n\n  const extractionFaithfulnessModel =\n    typeof cfg.extractionFaithfulnessModel === \"string\" ? cfg.extractionFaithfulnessModel : \"\";\n\n  // Issue #1585: model-lab pointer. Empty default → gate uses its existing\n  // routing chain (byte-identical). Non-empty + a model name → gate prefers\n  // the local served endpoint, falling back to the chain on failure.\n  const extractionFaithfulnessBaseUrl =\n    typeof cfg.extractionFaithfulnessBaseUrl === \"string\"\n      ? cfg.extractionFaithfulnessBaseUrl\n      : \"\";\n\n  const extractionFaithfulnessContextChars = Math.min(\n    parseIntegerAtLeast(cfg.extractionFaithfulnessContextChars, 400, 1, \"extractionFaithfulnessContextChars\"),\n    4000,\n  );\n\n  const extractionFaithfulnessTimeoutMs = Math.min(\n    parseIntegerAtLeast(cfg.extractionFaithfulnessTimeoutMs, 8000, 1, \"extractionFaithfulnessTimeoutMs\"),\n    60_000,\n  );\n\n  // Issue #1700 nit #6: resilient-fallback toggle for the local model-lab\n  // endpoint. Default false preserves the loud-signal behavior (a 200-with-\n  // garbage local response surfaces malformed_output so a misconfigured\n  // endpoint is visible); true falls back to the configured chain on local\n  // parse failure. Byte-identical pre-feature when unset (rule 39).\n  // coerceBool for CLI-string parity: a CLI override like\n  // --config extractionFaithfulnessLocalParseFallback=true reaches here as the\n  // string \"true\"; === true would silently leave the flag disabled. Matches\n  // every other CLI-settable boolean in config.ts (gotcha 36, codex P2\n  // PRRT_kwDORJXyws6O6gDQ / cursor BUGBOT e273b22c).\n  const extractionFaithfulnessLocalParseFallback =\n    coerceBool(cfg.extractionFaithfulnessLocalParseFallback) === true;\n\n  return {\n    extractionFaithfulnessGate,\n    extractionFaithfulnessModel,\n    extractionFaithfulnessBaseUrl,\n    extractionFaithfulnessContextChars,\n    extractionFaithfulnessTimeoutMs,\n    extractionFaithfulnessLocalParseFallback,\n  };\n}\n\n/**\n * Parse the correction-intent config block (issue #1581 / #1585).\n *\n * The model-lab pointer for passive-correction detection: when both\n * `correctionIntentModel` and `correctionIntentBaseUrl` are set, the detection\n * path can route to that local fine-tuned classifier; empty defaults (the\n * common case) keep the rule-based `detectPassiveCorrections` heuristic as the\n * sole detector — byte-identical to the pre-feature path. Consumption by the\n * detector is the consuming child's job (#1581's detector is a pure function;\n * wiring a model call into it is out of scope for this config-pointer PR).\n */\nexport function parseCorrectionIntentConfig(cfg: Record<string, unknown>): {\n  correctionIntentModel: string;\n  correctionIntentBaseUrl: string;\n} {\n  return {\n    correctionIntentModel:\n      typeof cfg.correctionIntentModel === \"string\" ? cfg.correctionIntentModel : \"\",\n    correctionIntentBaseUrl:\n      typeof cfg.correctionIntentBaseUrl === \"string\" ? cfg.correctionIntentBaseUrl : \"\",\n  };\n}\n"],"mappings":";;;;;;AA6BA,SAAS,oBACP,OACA,UACA,KACA,SACQ;AACR,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,QAAM,UAAU,aAAa,KAAK;AAClC,MACE,YAAY,UACZ,CAAC,OAAO,SAAS,OAAO,KACxB,CAAC,OAAO,UAAU,OAAO,KACzB,UAAU,KACV;AACA,UAAM,IAAI;AAAA,MACR,GAAG,OAAO,gDAAgD,GAAG,SAAS,KAAK,UAAU,KAAK,CAAC;AAAA,IAC7F;AAAA,EACF;AACA,SAAO;AACT;AAeO,SAAS,4BAA4B,KAO1C;AACA,QAAM,YAAY,IAAI;AACtB,MAAI;AACJ,MAAI,cAAc,UAAa,cAAc,MAAM;AACjD,iCAA6B;AAAA,EAC/B,OAAO;AAEL,UAAM,MAAM,OAAO,cAAc,WAAW,UAAU,KAAK,EAAE,YAAY,IAAI;AAC7E,QAAI,QAAQ,SAAS,QAAQ,YAAY,QAAQ,WAAW;AAC1D,mCAA6B;AAAA,IAC/B,OAAO;AACL,YAAM,IAAI;AAAA,QACR,+EAA+E,KAAK,UAAU,SAAS,CAAC;AAAA,MAC1G;AAAA,IACF;AAAA,EACF;AAEA,QAAM,8BACJ,OAAO,IAAI,gCAAgC,WAAW,IAAI,8BAA8B;AAK1F,QAAM,gCACJ,OAAO,IAAI,kCAAkC,WACzC,IAAI,gCACJ;AAEN,QAAM,qCAAqC,KAAK;AAAA,IAC9C,oBAAoB,IAAI,oCAAoC,KAAK,GAAG,oCAAoC;AAAA,IACxG;AAAA,EACF;AAEA,QAAM,kCAAkC,KAAK;AAAA,IAC3C,oBAAoB,IAAI,iCAAiC,KAAM,GAAG,iCAAiC;AAAA,IACnG;AAAA,EACF;AAYA,QAAM,2CACJ,WAAW,IAAI,wCAAwC,MAAM;AAE/D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAaO,SAAS,4BAA4B,KAG1C;AACA,SAAO;AAAA,IACL,uBACE,OAAO,IAAI,0BAA0B,WAAW,IAAI,wBAAwB;AAAA,IAC9E,yBACE,OAAO,IAAI,4BAA4B,WAAW,IAAI,0BAA0B;AAAA,EACpF;AACF;","names":[]}

package/dist/{chunk-6SQQOJ4U.js → chunk-GKRLPHPU.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-SOBJ6NEY.js";
 import {
   summarizeDisclosureTokens
-} from "./chunk-F3XZN24Z.js";
+} from "./chunk-DRUDC2UX.js";
 import {
   summarizeRetrievedMemoryProvenance
 } from "./chunk-I4WBNM3M.js";
@@ -587,4 +587,4 @@ export {
   renderRecallExplain,
   parseRecallExplainFormat
 };
-//# sourceMappingURL=chunk-6SQQOJ4U.js.map
+//# sourceMappingURL=chunk-GKRLPHPU.js.map

package/dist/{chunk-5NWYQUQC.js → chunk-HOHVIVDR.js}

@@ -11,7 +11,7 @@ import {
 } from "./chunk-LMDRGRJ2.js";
 import {
   parseConfig
-} from "./chunk-BIA7ELIB.js";
+} from "./chunk-36SEDFAU.js";
 import {
   resolveObjectiveStateStoreDir,
   validateObjectiveStateSnapshot
@@ -268,4 +268,4 @@ export {
   recordResumeBundle,
   getResumeBundleStatus
 };
-//# sourceMappingURL=chunk-5NWYQUQC.js.map
+//# sourceMappingURL=chunk-HOHVIVDR.js.map

package/dist/{chunk-6WAJQKBS.js → chunk-JYLFZWUX.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-SFQ6QNL7.js";
 import {
   StorageManager
-} from "./chunk-MQVKHFIU.js";
+} from "./chunk-7RLCCNHU.js";
 import {
   buildLifecycleEventsForMemory,
   sortMemoryLifecycleEvents
@@ -74,4 +74,4 @@ export {
   backupExistingLedger,
   rebuildMemoryLifecycleLedger
 };
-//# sourceMappingURL=chunk-6WAJQKBS.js.map
+//# sourceMappingURL=chunk-JYLFZWUX.js.map

package/dist/{chunk-5W7CTZ2E.js → chunk-KQAFEZQX.js}

@@ -1,12 +1,12 @@
-import {
-  encryptCapsuleFile
-} from "./chunk-UVYI6VIX.js";
 import {
   CAPSULE_ID_PATTERN,
   CapsuleBlockSchema,
   ExportBundleV2Schema,
   ExportManifestV2Schema
 } from "./chunk-WEHSQBFR.js";
+import {
+  encryptCapsuleFile
+} from "./chunk-X7Y7WX73.js";
 import {
   CAPSULE_SCHEMA_VERSION,
   EXPORT_FORMAT
@@ -261,4 +261,4 @@ export {
   exportCapsule,
   isValidCapsuleSince
 };
-//# sourceMappingURL=chunk-5W7CTZ2E.js.map
+//# sourceMappingURL=chunk-KQAFEZQX.js.map

package/dist/{chunk-YTZ3VGC7.js → chunk-M4V2JVSZ.js}

@@ -1,7 +1,7 @@
 import {
   resolveDefaultNamespaceRoot,
   resolveNamespaceStorageRoot
-} from "./chunk-RRHHQYJS.js";
+} from "./chunk-3TSTGI6F.js";
 import {
   getConfiguredNamespaces
 } from "./chunk-J6BH2OBA.js";
@@ -1946,4 +1946,4 @@ export {
   runNamespaceMaintenancePlan,
   runNamespaceMaintenanceBatchPlan
 };
-//# sourceMappingURL=chunk-YTZ3VGC7.js.map
+//# sourceMappingURL=chunk-M4V2JVSZ.js.map