@remnic/core 9.3.733 → 9.3.735

package/dist/{chunk-646B5ERJ.js → chunk-HLPYL6LC.js}

@@ -69,10 +69,10 @@ import {
   resolveScopeProfilePlan,
   resolveWritableNamespaceValue,
   sanitizeFragment
-} from "./chunk-J6BH2OBA.js";
+} from "./chunk-GB2FZOWB.js";
 import {
   namespaceCollectionName
-} from "./chunk-KQYGNGON.js";
+} from "./chunk-ZBZ4XULO.js";
 import {
   namespaceIdentityFromToken
 } from "./chunk-ZFXCQPNO.js";
@@ -96,16 +96,10 @@ import {
   persistExplicitCapture,
   queueExplicitCaptureForReview,
   validateExplicitCaptureInput
-} from "./chunk-PMAQRUN4.js";
+} from "./chunk-NDKW67ER.js";
 import {
   CrossNamespaceBudget
 } from "./chunk-ODPLEWB6.js";
-import {
-  resolveAccessSetupCapabilities,
-  resolveGraphConstructionCapabilities,
-  resolveIndexingCapabilities,
-  resolveMemoryLifecycleCapabilities
-} from "./chunk-ESF7TRYJ.js";
 import {
   defaultCapsulesDir
 } from "./chunk-ZY2MNJR6.js";
@@ -171,7 +165,19 @@ import {
   defaultNamespaceForPrincipal,
   recallNamespacesForPrincipal,
   resolvePrincipal
-} from "./chunk-UZYLX7M6.js";
+} from "./chunk-OYHYBHHI.js";
+import {
+  resolveAccessSetupCapabilities,
+  resolveCompressionCapabilities,
+  resolveGraphConstructionCapabilities,
+  resolveIdentityContinuityCapabilities,
+  resolveIndexingCapabilities,
+  resolveMemoryLifecycleCapabilities,
+  resolveNamespaceCapabilities,
+  resolveObjectiveStateCapabilities,
+  resolveQmdCapabilities,
+  resolveSecurityCapabilities
+} from "./chunk-JWDE7OVJ.js";
 import {
   expandTildePath
 } from "./chunk-EYIEWJNI.js";
@@ -2487,7 +2493,7 @@ function walkRedact(value, key) {
 }
 function inspectScope(options) {
   const { config } = options;
-  const namespacesEnabled = options.namespacesEnabled ?? config.namespacesEnabled === true;
+  const namespacesEnabled = options.namespacesEnabled ?? resolveNamespaceCapabilities(config).namespaces === true;
   const plan = resolveScopePlan({
     config,
     sessionKey: options.sessionKey,
@@ -3097,7 +3103,7 @@ var EngramAccessService = class {
   resolveNamespace(namespace) {
     const requested = namespace?.trim();
     if (!requested) return this.orchestrator.config.defaultNamespace;
-    if (!this.orchestrator.config.namespacesEnabled && requested !== this.orchestrator.config.defaultNamespace) {
+    if (!resolveNamespaceCapabilities(this.orchestrator.config).namespaces && requested !== this.orchestrator.config.defaultNamespace) {
       throw new EngramAccessInputError(`unsupported namespace: ${requested}`);
     }
     return requested;
@@ -3174,8 +3180,8 @@ var EngramAccessService = class {
    *  scattered-config-read ratchet flat). READ-ONLY: never mutates session. */
   async resolveCodingScopeInputs(request) {
     const hasSession = typeof request.sessionKey === "string" && request.sessionKey.length > 0;
-    const codingContext = hasSession && this.orchestrator.config.namespacesEnabled && this.orchestrator.config.codingMode?.projectScope ? this.orchestrator.getCodingContextForSession(request.sessionKey) ?? await this.resolveCodingContextFromOptions(request) : null;
-    const overlay = hasSession && this.orchestrator.config.namespacesEnabled && this.orchestrator.config.codingMode?.projectScope ? resolveCodingNamespaceOverlay(
+    const codingContext = hasSession && resolveNamespaceCapabilities(this.orchestrator.config).namespaces && this.orchestrator.config.codingMode?.projectScope ? this.orchestrator.getCodingContextForSession(request.sessionKey) ?? await this.resolveCodingContextFromOptions(request) : null;
+    const overlay = hasSession && resolveNamespaceCapabilities(this.orchestrator.config).namespaces && this.orchestrator.config.codingMode?.projectScope ? resolveCodingNamespaceOverlay(
       codingContext,
       this.orchestrator.config.codingMode,
       this.orchestrator.config.defaultNamespace
@@ -3321,7 +3327,7 @@ var EngramAccessService = class {
       this.orchestrator.config
     );
     const hasSession = typeof request.sessionKey === "string" && request.sessionKey.length > 0;
-    const overlayEligible = hasSession && this.orchestrator.config.namespacesEnabled === true && this.orchestrator.config.codingMode?.projectScope === true;
+    const overlayEligible = hasSession && resolveNamespaceCapabilities(this.orchestrator.config).namespaces === true && this.orchestrator.config.codingMode?.projectScope === true;
     let attachedContext = hasSession ? this.orchestrator.getCodingContextForSession(request.sessionKey) : null;
     let seededContext = false;
     if (overlayEligible && !attachedContext) {
@@ -3399,8 +3405,8 @@ var EngramAccessService = class {
         request.sessionKey,
         request.authenticatedPrincipal
       );
-      const willWriteObjectiveState = this.orchestrator.config.objectiveStateMemoryEnabled === true && this.orchestrator.config.objectiveStateSnapshotWritesEnabled === true;
-      if (willWriteObjectiveState && this.orchestrator.config.namespacesEnabled === true && !canWriteNamespace(principal, baseNamespace, this.orchestrator.config)) {
+      const willWriteObjectiveState = resolveObjectiveStateCapabilities(this.orchestrator.config).objectiveStateMemory === true && resolveObjectiveStateCapabilities(this.orchestrator.config).objectiveStateSnapshotWrites === true;
+      if (willWriteObjectiveState && resolveNamespaceCapabilities(this.orchestrator.config).namespaces === true && !canWriteNamespace(principal, baseNamespace, this.orchestrator.config)) {
         clearSeededContext();
         throw new EngramAccessInputError(
           `namespace is not writable: ${baseNamespace}`
@@ -3454,7 +3460,7 @@ var EngramAccessService = class {
     return scope.codingOverlayApplied ? this.orchestrator.config.defaultNamespace : scope.writeNamespace;
   }
   async objectiveStateStoreLocationForNamespace(namespace) {
-    if (!this.orchestrator.config.namespacesEnabled) {
+    if (!resolveNamespaceCapabilities(this.orchestrator.config).namespaces) {
       return {
         memoryDir: this.orchestrator.config.memoryDir,
         objectiveStateStoreDir: this.orchestrator.config.objectiveStateStoreDir
@@ -3466,14 +3472,14 @@ var EngramAccessService = class {
       objectiveStateStoreDir: objectiveStateStoreOverrideForNamespace({
         memoryDir: this.orchestrator.config.memoryDir,
         configuredStoreDir: this.orchestrator.config.objectiveStateStoreDir,
-        namespacesEnabled: this.orchestrator.config.namespacesEnabled,
+        namespacesEnabled: resolveNamespaceCapabilities(this.orchestrator.config).namespaces,
         namespace
       })
     };
   }
   resolveReadableNamespace(namespace, principal) {
     const resolved = this.resolveNamespace(namespace);
-    const namespacesEnabled = this.orchestrator.config.namespacesEnabled;
+    const namespacesEnabled = resolveNamespaceCapabilities(this.orchestrator.config).namespaces;
     if (!namespacesEnabled) {
       return resolved;
     }
@@ -3492,7 +3498,7 @@ var EngramAccessService = class {
     if (requested) {
       return [this.resolveReadableNamespace(requested, principal)];
     }
-    if (!this.orchestrator.config.namespacesEnabled) {
+    if (!resolveNamespaceCapabilities(this.orchestrator.config).namespaces) {
       return [this.resolveNamespace(void 0)];
     }
     if (!principal) {
@@ -3533,7 +3539,7 @@ var EngramAccessService = class {
     return [...new Set(candidates)].filter((namespace) => canReadNamespace(principal, namespace, config));
   }
   resolveMemorySearchNamespacesForCollection(collection, namespaces, collectionPrincipal) {
-    if (!this.orchestrator.config.namespacesEnabled) {
+    if (!resolveNamespaceCapabilities(this.orchestrator.config).namespaces) {
       return namespaces;
     }
     const baseCollection = this.orchestrator.config.qmdCollection;
@@ -4011,7 +4017,7 @@ var EngramAccessService = class {
     const resolvedNamespace = this.resolveNamespace(namespace);
     const storage = await this.orchestrator.getStorage(resolvedNamespace);
     const searchBackend = this.orchestrator.config.searchBackend ?? "qmd";
-    const qmdEnabled = this.orchestrator.config.qmdEnabled === true;
+    const qmdEnabled = resolveQmdCapabilities(this.orchestrator.config).qmd === true;
     let projectionAvailable = false;
     try {
       await stat2(getMemoryProjectionPath(storage.dir));
@@ -4022,7 +4028,7 @@ var EngramAccessService = class {
     return {
       ok: true,
       memoryDir: storage.dir,
-      namespacesEnabled: this.orchestrator.config.namespacesEnabled === true,
+      namespacesEnabled: resolveNamespaceCapabilities(this.orchestrator.config).namespaces === true,
       defaultNamespace: this.orchestrator.config.defaultNamespace,
       searchBackend,
       qmdEnabled,
@@ -4037,7 +4043,7 @@ var EngramAccessService = class {
     };
   }
   qmdCollectionForHealth(namespace, storageDir) {
-    if (this.orchestrator.config.namespacesEnabled !== true) {
+    if (resolveNamespaceCapabilities(this.orchestrator.config).namespaces !== true) {
       return this.orchestrator.config.qmdCollection;
     }
     const useLegacyDefaultCollection = namespace === this.orchestrator.config.defaultNamespace && storageDir === this.orchestrator.config.memoryDir;
@@ -4063,7 +4069,7 @@ var EngramAccessService = class {
         debugStatus: searchBackend !== "qmd" ? `backend=${searchBackend}` : "backend=disabled"
       };
     }
-    if (this.orchestrator.config.namespacesEnabled === true) {
+    if (resolveNamespaceCapabilities(this.orchestrator.config).namespaces === true) {
       const namespaceHealth = await this.namespaceQmdHealth(searchBackend, qmdEnabled, namespace, collection);
       if (namespaceHealth) return namespaceHealth;
     }
@@ -4387,7 +4393,7 @@ var EngramAccessService = class {
     const normalizedRequest = { ...request, query };
     const authenticatedPrincipal = request.authenticatedPrincipal?.trim();
     const principal = this.resolveRequestPrincipal(request.sessionKey, authenticatedPrincipal);
-    if (this.orchestrator.config.namespacesEnabled && !principal) {
+    if (resolveNamespaceCapabilities(this.orchestrator.config).namespaces && !principal) {
       throw new EngramAccessInputError(
         "authentication required: namespaces are enabled and no principal was supplied"
       );
@@ -4452,7 +4458,7 @@ var EngramAccessService = class {
     const namespace = namespaceOverride ?? this.orchestrator.config.defaultNamespace;
     const mode = this.normalizeRecallMode(request.mode);
     const maybePrincipal = this.resolveRequestPrincipal(request.sessionKey, authenticatedPrincipal);
-    if (this.orchestrator.config.namespacesEnabled && !maybePrincipal) {
+    if (resolveNamespaceCapabilities(this.orchestrator.config).namespaces && !maybePrincipal) {
       throw new EngramAccessInputError(
         "authentication required: namespaces are enabled and no principal was supplied"
       );
@@ -4460,7 +4466,7 @@ var EngramAccessService = class {
     const principal = maybePrincipal ?? "default";
     const principalNamespace = defaultNamespaceForPrincipal(principal, this.orchestrator.config);
     const profileCodingContext = request.sessionKey && typeof this.orchestrator.getCodingContextForSession === "function" ? this.orchestrator.getCodingContextForSession(request.sessionKey) : null;
-    const profileCodingOverlay = !namespaceOverride && profileCodingContext && this.orchestrator.config.namespacesEnabled && this.orchestrator.config.codingMode?.projectScope ? resolveCodingNamespaceOverlay(
+    const profileCodingOverlay = !namespaceOverride && profileCodingContext && resolveNamespaceCapabilities(this.orchestrator.config).namespaces && this.orchestrator.config.codingMode?.projectScope ? resolveCodingNamespaceOverlay(
       profileCodingContext,
       this.orchestrator.config.codingMode,
       this.orchestrator.config.defaultNamespace
@@ -4707,7 +4713,7 @@ var EngramAccessService = class {
       if (!canReadNamespace(principal, requestedNamespace, this.orchestrator.config)) {
         return { found: false };
       }
-    } else if (this.orchestrator.config.namespacesEnabled && !principal) {
+    } else if (resolveNamespaceCapabilities(this.orchestrator.config).namespaces && !principal) {
       return { found: false };
     }
     const snapshot = request.sessionKey ? (() => {
@@ -4722,7 +4728,7 @@ var EngramAccessService = class {
       return candidate.namespace === requestedNamespace ? candidate : null;
     })();
     const readableSnapshot = (() => {
-      if (!snapshot || !this.orchestrator.config.namespacesEnabled) return snapshot;
+      if (!snapshot || !resolveNamespaceCapabilities(this.orchestrator.config).namespaces) return snapshot;
       const snapshotNamespace = snapshot.namespace ?? this.orchestrator.config.defaultNamespace;
       return canReadNamespace(principal, snapshotNamespace, this.orchestrator.config) ? snapshot : null;
     })();
@@ -4730,7 +4736,7 @@ var EngramAccessService = class {
       if (requestedNamespace) return requestedNamespace;
       if (readableSnapshot?.namespace) return readableSnapshot.namespace;
       const fallbackNamespace = this.orchestrator.config.defaultNamespace;
-      if (!this.orchestrator.config.namespacesEnabled) return fallbackNamespace;
+      if (!resolveNamespaceCapabilities(this.orchestrator.config).namespaces) return fallbackNamespace;
       return canReadNamespace(principal, fallbackNamespace, this.orchestrator.config) ? fallbackNamespace : null;
     })();
     if (!namespace) return { found: false };
@@ -4742,7 +4748,7 @@ var EngramAccessService = class {
     return { found: true, snapshot: readableSnapshot ?? void 0, intent, graph };
   }
   async recallTierExplain(sessionKey, namespace, authenticatedPrincipal) {
-    const namespacesEnabled = this.orchestrator.config.namespacesEnabled;
+    const namespacesEnabled = resolveNamespaceCapabilities(this.orchestrator.config).namespaces;
     const requestedNamespace = namespace?.trim() ? this.resolveNamespace(namespace) : void 0;
     const principal = authenticatedPrincipal?.trim() || resolvePrincipal(sessionKey, this.orchestrator.config);
     if (requestedNamespace) {
@@ -4783,7 +4789,7 @@ var EngramAccessService = class {
         `recallXray: disclosure must be one of: chunk, section, raw (got: ${String(request.disclosure)})`
       );
     }
-    const namespacesEnabled = this.orchestrator.config.namespacesEnabled;
+    const namespacesEnabled = resolveNamespaceCapabilities(this.orchestrator.config).namespaces;
     const requestedNamespace = request.namespace?.trim() ? this.resolveNamespace(request.namespace) : void 0;
     const authenticatedPrincipal = request.authenticatedPrincipal?.trim();
     const principal = authenticatedPrincipal || resolvePrincipal(request.sessionKey, this.orchestrator.config);
@@ -6017,9 +6023,9 @@ var EngramAccessService = class {
       status: await getTrustZoneStoreStatus({
         memoryDir: storage.dir,
         trustZoneStoreDir: this.orchestrator.config.trustZoneStoreDir,
-        enabled: this.orchestrator.config.trustZonesEnabled === true,
-        promotionEnabled: this.orchestrator.config.quarantinePromotionEnabled === true,
-        poisoningDefenseEnabled: this.orchestrator.config.memoryPoisoningDefenseEnabled === true
+        enabled: resolveSecurityCapabilities(this.orchestrator.config).trustZones === true,
+        promotionEnabled: resolveSecurityCapabilities(this.orchestrator.config).quarantinePromotion === true,
+        poisoningDefenseEnabled: resolveSecurityCapabilities(this.orchestrator.config).memoryPoisoningDefense === true
       })
     };
   }
@@ -6046,9 +6052,9 @@ var EngramAccessService = class {
         entry.record,
         entry.filePath,
         result.allRecords,
-        this.orchestrator.config.memoryPoisoningDefenseEnabled === true,
-        this.orchestrator.config.trustZonesEnabled === true,
-        this.orchestrator.config.quarantinePromotionEnabled === true
+        resolveSecurityCapabilities(this.orchestrator.config).memoryPoisoningDefense === true,
+        resolveSecurityCapabilities(this.orchestrator.config).trustZones === true,
+        resolveSecurityCapabilities(this.orchestrator.config).quarantinePromotion === true
       ))
     };
   }
@@ -6067,9 +6073,9 @@ var EngramAccessService = class {
       result = await promoteTrustZoneRecord({
         memoryDir: storage.dir,
         trustZoneStoreDir: this.orchestrator.config.trustZoneStoreDir,
-        enabled: this.orchestrator.config.trustZonesEnabled === true,
-        promotionEnabled: this.orchestrator.config.quarantinePromotionEnabled === true,
-        poisoningDefenseEnabled: this.orchestrator.config.memoryPoisoningDefenseEnabled === true,
+        enabled: resolveSecurityCapabilities(this.orchestrator.config).trustZones === true,
+        promotionEnabled: resolveSecurityCapabilities(this.orchestrator.config).quarantinePromotion === true,
+        poisoningDefenseEnabled: resolveSecurityCapabilities(this.orchestrator.config).memoryPoisoningDefense === true,
         sourceRecordId: request.recordId,
         targetZone: request.targetZone,
         recordedAt: request.recordedAt ?? (/* @__PURE__ */ new Date()).toISOString(),
@@ -6098,7 +6104,7 @@ var EngramAccessService = class {
       result = await seedTrustZoneDemoDataset({
         memoryDir: storage.dir,
         trustZoneStoreDir: this.orchestrator.config.trustZoneStoreDir,
-        enabled: this.orchestrator.config.trustZonesEnabled === true,
+        enabled: resolveSecurityCapabilities(this.orchestrator.config).trustZones === true,
         scenario: request.scenario,
         recordedAt: request.recordedAt,
         dryRun: request.dryRun === true
@@ -6226,7 +6232,7 @@ var EngramAccessService = class {
     const scope = await this.resolveMemoryScopePlan(request);
     const writeNamespace = scope.writeNamespace;
     const namespace = this.legacyResponseNamespaceForScope(scope);
-    const shouldWriteObjectiveState = this.orchestrator.config.objectiveStateMemoryEnabled === true && this.orchestrator.config.objectiveStateSnapshotWritesEnabled === true;
+    const shouldWriteObjectiveState = resolveObjectiveStateCapabilities(this.orchestrator.config).objectiveStateMemory === true && resolveObjectiveStateCapabilities(this.orchestrator.config).objectiveStateSnapshotWrites === true;
     await this.maybeAttachCodingContext(request.sessionKey, {
       cwd: request.cwd,
       projectTag: request.projectTag
@@ -6244,8 +6250,8 @@ var EngramAccessService = class {
         await recordObjectiveStateSnapshotsFromObservedMessages({
           memoryDir: objectiveStateLocation.memoryDir,
           objectiveStateStoreDir: objectiveStateLocation.objectiveStateStoreDir,
-          objectiveStateMemoryEnabled: this.orchestrator.config.objectiveStateMemoryEnabled,
-          objectiveStateSnapshotWritesEnabled: this.orchestrator.config.objectiveStateSnapshotWritesEnabled,
+          objectiveStateMemoryEnabled: resolveObjectiveStateCapabilities(this.orchestrator.config).objectiveStateMemory,
+          objectiveStateSnapshotWritesEnabled: resolveObjectiveStateCapabilities(this.orchestrator.config).objectiveStateSnapshotWrites,
           sessionKey: request.sessionKey,
           recordedAt: (/* @__PURE__ */ new Date()).toISOString(),
           messages: request.messages
@@ -6284,7 +6290,7 @@ var EngramAccessService = class {
         sourceFormat: m.sourceFormat,
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
       }));
-      const writeNamespaceOverride = this.orchestrator.config.namespacesEnabled === true ? writeNamespace : void 0;
+      const writeNamespaceOverride = resolveNamespaceCapabilities(this.orchestrator.config).namespaces === true ? writeNamespace : void 0;
       const principalOverride = typeof scope.principal === "string" && scope.principal.length > 0 ? scope.principal : void 0;
       try {
         const extractionPromise = this.orchestrator.ingestReplayBatch(turns, {
@@ -6389,7 +6395,7 @@ var EngramAccessService = class {
       ) ?? request.sessionPrefix
     ] : [void 0];
     const hasScopedSession = typeof request.sessionKey === "string" && request.sessionKey.length > 0 || lcmSessionPrefixes.some((prefix) => typeof prefix === "string" && prefix.length > 0);
-    if (!hasScopedSession && this.orchestrator.config.namespacesEnabled === true) {
+    if (!hasScopedSession && resolveNamespaceCapabilities(this.orchestrator.config).namespaces === true) {
       return {
         query: request.query,
         namespace,
@@ -6620,7 +6626,7 @@ var EngramAccessService = class {
    */
   resolveImplicitLcmReadFallbackNamespace(principal) {
     const config = this.orchestrator.config;
-    if (!config.namespacesEnabled) return config.defaultNamespace;
+    if (!resolveNamespaceCapabilities(config).namespaces) return config.defaultNamespace;
     if (canReadNamespace(principal, config.defaultNamespace, config)) {
       return config.defaultNamespace;
     }
@@ -6844,7 +6850,7 @@ var EngramAccessService = class {
   // ── Parity tools (match OpenClaw plugin feature set) ──────────────────
   // ── Continuity / Identity ──────────────────────────────────────────────
   async continuityAuditGenerate(request) {
-    if (!this.orchestrator.config.identityContinuityEnabled) {
+    if (!resolveIdentityContinuityCapabilities(this.orchestrator.config).identityContinuity) {
       return { enabled: false, reason: "Identity continuity is disabled. Enable `identityContinuityEnabled: true`." };
     }
     if (!this.orchestrator.config.continuityAuditEnabled) {
@@ -6859,7 +6865,7 @@ var EngramAccessService = class {
     return { enabled: true, period: audit.period, key: audit.key, reportPath: audit.reportPath };
   }
   async continuityIncidentOpen(request) {
-    if (!this.orchestrator.config.identityContinuityEnabled) {
+    if (!resolveIdentityContinuityCapabilities(this.orchestrator.config).identityContinuity) {
       return { enabled: false, reason: "Identity continuity is disabled. Enable `identityContinuityEnabled: true`." };
     }
     if (!this.orchestrator.config.continuityIncidentLoggingEnabled) {
@@ -6877,7 +6883,7 @@ var EngramAccessService = class {
     return { created: true, incident: created };
   }
   async continuityIncidentClose(request) {
-    if (!this.orchestrator.config.identityContinuityEnabled) {
+    if (!resolveIdentityContinuityCapabilities(this.orchestrator.config).identityContinuity) {
       return { enabled: false, reason: "Identity continuity is disabled." };
     }
     if (!this.orchestrator.config.continuityIncidentLoggingEnabled) {
@@ -6900,7 +6906,7 @@ var EngramAccessService = class {
     return { closed: true, incident: closed };
   }
   async continuityIncidentList(request) {
-    if (!this.orchestrator.config.identityContinuityEnabled) {
+    if (!resolveIdentityContinuityCapabilities(this.orchestrator.config).identityContinuity) {
       return { enabled: false, reason: "Identity continuity is disabled." };
     }
     const state = request.state === "closed" || request.state === "all" ? request.state : "open";
@@ -6911,7 +6917,7 @@ var EngramAccessService = class {
     return { state, incidents, count: incidents.length };
   }
   async continuityLoopAddOrUpdate(request) {
-    if (!this.orchestrator.config.identityContinuityEnabled) {
+    if (!resolveIdentityContinuityCapabilities(this.orchestrator.config).identityContinuity) {
       return { enabled: false, reason: "Identity continuity is disabled." };
     }
     const resolvedNs = this.writableNamespaceFor(request.namespace, void 0, request.principal);
@@ -6928,7 +6934,7 @@ var EngramAccessService = class {
     return { saved: true, loop };
   }
   async continuityLoopReview(request) {
-    if (!this.orchestrator.config.identityContinuityEnabled) {
+    if (!resolveIdentityContinuityCapabilities(this.orchestrator.config).identityContinuity) {
       return { enabled: false, reason: "Identity continuity is disabled." };
     }
     const id = request.id?.trim();
@@ -6944,7 +6950,7 @@ var EngramAccessService = class {
     return { reviewed: true, loop: reviewed };
   }
   async identityAnchorGet(request) {
-    if (!this.orchestrator.config.identityContinuityEnabled) {
+    if (!resolveIdentityContinuityCapabilities(this.orchestrator.config).identityContinuity) {
       return { enabled: false, reason: "Identity continuity is disabled." };
     }
     const resolvedNs = this.resolveReadableNamespace(request.namespace, request.principal);
@@ -6962,7 +6968,7 @@ var EngramAccessService = class {
    * compatibility but will be removed in a future major version.
    */
   async identityAnchorUpdate(request) {
-    if (!this.orchestrator.config.identityContinuityEnabled) {
+    if (!resolveIdentityContinuityCapabilities(this.orchestrator.config).identityContinuity) {
       return { enabled: false, reason: "Identity continuity is disabled." };
     }
     const updates = {
@@ -7217,7 +7223,7 @@ var EngramAccessService = class {
   }
   // ── Compression Guidelines ────────────────────────────────────────────
   async compressionGuidelinesOptimize(request) {
-    if (!this.orchestrator.config.compressionGuidelineLearningEnabled) {
+    if (!resolveCompressionCapabilities(this.orchestrator.config).compressionGuidelineLearning) {
       return { enabled: false, reason: "Compression guideline learning is disabled. Enable `compressionGuidelineLearningEnabled: true`." };
     }
     return await this.orchestrator.optimizeCompressionGuidelines({
@@ -7226,7 +7232,7 @@ var EngramAccessService = class {
     });
   }
   async compressionGuidelinesActivate(request) {
-    if (!this.orchestrator.config.compressionGuidelineLearningEnabled) {
+    if (!resolveCompressionCapabilities(this.orchestrator.config).compressionGuidelineLearning) {
       return { enabled: false, reason: "Compression guideline learning is disabled." };
     }
     return await this.orchestrator.activateCompressionGuidelineDraft({
@@ -7301,7 +7307,7 @@ ${next}`);
       throw new EngramAccessInputError("collection must be a non-empty string");
     }
     let results;
-    if (!this.orchestrator.config.namespacesEnabled) {
+    if (!resolveNamespaceCapabilities(this.orchestrator.config).namespaces) {
       this.resolveReadableNamespace(namespace, principal);
       results = collection === "global" ? await this.orchestrator.qmd.searchGlobal(query, maxResults) : await this.orchestrator.qmd.search(query, collection, maxResults);
     } else {
@@ -7513,7 +7519,7 @@ ${next}`);
         `memory_action_apply: invalid action ${JSON.stringify(request.action)}`
       );
     }
-    if (this.orchestrator.config.contextCompressionActionsEnabled !== true) {
+    if (resolveCompressionCapabilities(this.orchestrator.config).contextCompressionActions !== true) {
       throw new EngramAccessInputError(
         "memory_action_apply is disabled; enable contextCompressionActionsEnabled to use this tool"
       );
@@ -7823,7 +7829,7 @@ ${next}`);
     return { namespace: resolved, storage };
   }
   async getWritableStorageForNamespace(namespace, principal) {
-    if (this.orchestrator.config.namespacesEnabled && !principal?.trim()) {
+    if (resolveNamespaceCapabilities(this.orchestrator.config).namespaces && !principal?.trim()) {
       throw new EngramAccessInputError(
         "authentication required: namespaces are enabled and no principal was supplied"
       );
@@ -8380,7 +8386,7 @@ ${next}`);
    */
   async adminPromoteMemory(request) {
     const config = this.orchestrator.config;
-    const namespacesEnabled = config.namespacesEnabled === true;
+    const namespacesEnabled = resolveNamespaceCapabilities(config).namespaces === true;
     let sourceNamespace;
     if (request.namespace) {
       sourceNamespace = this.resolveReadableNamespace(
@@ -8480,4 +8486,4 @@ export {
   shapeMemorySummary,
   EngramAccessService
 };
-//# sourceMappingURL=chunk-646B5ERJ.js.map
+//# sourceMappingURL=chunk-HLPYL6LC.js.map