@remnic/core 9.3.749 → 9.3.751

package/dist/{chunk-5IN26V6W.js → chunk-UU32EAIY.js}

@@ -4,19 +4,19 @@ import {
 } from "./chunk-ZFXCQPNO.js";
 import {
   StorageManager
-} from "./chunk-JHQUIH3W.js";
+} from "./chunk-ZBVQ4ZM4.js";
 import {
   MutationSerializer
 } from "./chunk-LTJAMRGI.js";
-import {
-  ALL_CATEGORY_DIRS
-} from "./chunk-VS2IYZRU.js";
 import {
   isSafeRouteNamespace
 } from "./chunk-U3PN77QT.js";
 import {
   resolveNamespaceCapabilities
 } from "./chunk-VSF7AAGE.js";
+import {
+  ALL_CATEGORY_DIRS
+} from "./chunk-VS2IYZRU.js";
 
 // src/namespaces/storage.ts
 import path from "path";
@@ -339,4 +339,4 @@ export {
   resolveNamespaceStorageRoot,
   NamespaceStorageRouter
 };
-//# sourceMappingURL=chunk-5IN26V6W.js.map
+//# sourceMappingURL=chunk-UU32EAIY.js.map

package/dist/{chunk-ZGAJB74V.js → chunk-W3BFT5OJ.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-ZBJMUXZH.js";
 import {
   StorageManager
-} from "./chunk-JHQUIH3W.js";
+} from "./chunk-ZBVQ4ZM4.js";
 import {
   getCachedRuleMemories,
   setCachedRuleMemories
@@ -117,4 +117,4 @@ export {
   compareVerifiedSemanticRuleResults,
   searchVerifiedSemanticRules
 };
-//# sourceMappingURL=chunk-ZGAJB74V.js.map
+//# sourceMappingURL=chunk-W3BFT5OJ.js.map

package/dist/{chunk-L4N7SVNN.js → chunk-WA7FECSG.js}

@@ -11,17 +11,17 @@ import {
   processChatMessage,
   sessionBelongsToPrincipal,
   subscribeChatTranscript
-} from "./chunk-LMFS64GY.js";
+} from "./chunk-E4PFDD3N.js";
 import {
   validateRequest
-} from "./chunk-FVZ2ISIX.js";
+} from "./chunk-TPLE6SNY.js";
 import {
   getOperation
-} from "./chunk-KMNYXLPL.js";
+} from "./chunk-B35L45HZ.js";
 import {
   CorrectionContractError,
   EngramAccessInputError
-} from "./chunk-24YDB5QP.js";
+} from "./chunk-UETBEHBA.js";
 import {
   isTrustZoneName
 } from "./chunk-JGSKJHF7.js";
@@ -33,18 +33,18 @@ import {
 } from "./chunk-DEUNUKTD.js";
 import {
   isRecallDisclosure
-} from "./chunk-PUR2CKX2.js";
-import {
-  OFFLINE_SYNC_APPLY_MAX_BODY_BYTES,
-  OFFLINE_SYNC_FILE_CONTENT_MAX_CHUNK_BYTES,
-  OFFLINE_SYNC_SNAPSHOT_BASE_MAX_BODY_BYTES
-} from "./chunk-PWWWLD7D.js";
+} from "./chunk-JS2HKKOK.js";
 import {
   expandTildePath
 } from "./chunk-EYIEWJNI.js";
 import {
   log
 } from "./chunk-NU3CSQ4H.js";
+import {
+  OFFLINE_SYNC_APPLY_MAX_BODY_BYTES,
+  OFFLINE_SYNC_FILE_CONTENT_MAX_CHUNK_BYTES,
+  OFFLINE_SYNC_SNAPSHOT_BASE_MAX_BODY_BYTES
+} from "./chunk-X64YLC24.js";
 
 // src/access-http.ts
 import { createServer } from "http";
@@ -2627,4 +2627,4 @@ function positiveIntQueryParam(value, label) {
 export {
   EngramAccessHttpServer
 };
-//# sourceMappingURL=chunk-L4N7SVNN.js.map
+//# sourceMappingURL=chunk-WA7FECSG.js.map

package/dist/{chunk-Q3X7GUAQ.js → chunk-WOX2UW4K.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-SFQ6QNL7.js";
 import {
   StorageManager
-} from "./chunk-JHQUIH3W.js";
+} from "./chunk-ZBVQ4ZM4.js";
 import {
   buildLifecycleEventsForMemory,
   sortMemoryLifecycleEvents
@@ -74,4 +74,4 @@ export {
   backupExistingLedger,
   rebuildMemoryLifecycleLedger
 };
-//# sourceMappingURL=chunk-Q3X7GUAQ.js.map
+//# sourceMappingURL=chunk-WOX2UW4K.js.map

package/dist/{chunk-XTEWVF3C.js → chunk-WWSXVOGY.js}

@@ -1,6 +1,6 @@
 import {
   StorageManager
-} from "./chunk-JHQUIH3W.js";
+} from "./chunk-ZBVQ4ZM4.js";
 
 // src/semantic-rule-promotion.ts
 import { createHash, randomUUID } from "crypto";
@@ -529,4 +529,4 @@ export {
   setSemanticRulePromotionTestHooks,
   promoteSemanticRuleFromMemory
 };
-//# sourceMappingURL=chunk-XTEWVF3C.js.map
+//# sourceMappingURL=chunk-WWSXVOGY.js.map

package/dist/{chunk-PWWWLD7D.js → chunk-X64YLC24.js}

@@ -51,6 +51,53 @@ var EXCLUDED_FILE_PREFIXES = [
   ".remnic-sync.",
   ".remnic-sync-state."
 ];
+var DEFAULT_OFFLINE_SYNC_EXCLUDE_GLOBS = [
+  // Leading `**/` matches zero or more segments, so each pattern covers both
+  // the root `state/` dir AND per-namespace `namespaces/<ns>/state/` dirs
+  // (Cursor review on PR #1793: multi-namespace deployments previously kept
+  // pushing their namespaced live sqlite files).
+  "**/state/*.sqlite",
+  "**/state/*.sqlite-*",
+  "**/state/index_tags.json",
+  "**/state/entity-mention-index.json",
+  "**/state/memory-governance/runs/**"
+];
+function globToRegExp(glob) {
+  if (typeof glob !== "string" || glob.length === 0) {
+    throw new Error("offlineSyncExcludes entry must be a non-empty string");
+  }
+  if (glob.includes("\0")) {
+    throw new Error("offlineSyncExcludes entry must not contain NUL bytes");
+  }
+  let source = "";
+  for (let i = 0; i < glob.length; i += 1) {
+    const ch = glob[i];
+    if (ch === "*") {
+      if (glob[i + 1] === "*") {
+        if (glob[i + 2] === "/") {
+          source += "(?:.*/)?";
+          i += 2;
+          continue;
+        }
+        source += ".*";
+        i += 1;
+        continue;
+      }
+      source += "[^/]*";
+      continue;
+    }
+    if (ch === "?") {
+      source += "[^/]";
+      continue;
+    }
+    if (ch === "/") {
+      source += "/";
+      continue;
+    }
+    source += ch.replace(/[\\^$.+()|{}\[\]]/g, "\\$&");
+  }
+  return new RegExp(`^${source}$`);
+}
 function hashText(value) {
   return createHash("sha256").update(value).digest("hex");
 }
@@ -282,7 +329,49 @@ function shouldExcludeRelPath(relPosix, includeTranscripts) {
   const basename = parts[parts.length - 1] ?? "";
   if (isCanonicalRuntimeStatePath(parts) && basename.includes(".tmp-")) return true;
   if (EXCLUDED_FILE_NAMES.has(basename)) return true;
-  return EXCLUDED_FILE_PREFIXES.some((prefix) => basename.startsWith(prefix));
+  if (EXCLUDED_FILE_PREFIXES.some((prefix) => basename.startsWith(prefix))) return true;
+  return false;
+}
+function shouldExcludePushRelPath(relPosix, includeTranscripts, userExcludeRegexps) {
+  if (shouldExcludeRelPath(relPosix, includeTranscripts)) return true;
+  if (matchesOfflineSyncDefaultExclude(relPosix)) return true;
+  if (userExcludeRegexps && userExcludeRegexps.some((re) => re.test(relPosix))) return true;
+  return false;
+}
+var DEFAULT_OFFLINE_SYNC_EXCLUDE_REGEXPS = DEFAULT_OFFLINE_SYNC_EXCLUDE_GLOBS.map((glob) => globToRegExp(glob));
+function matchesOfflineSyncDefaultExclude(relPosix) {
+  for (const regexp of DEFAULT_OFFLINE_SYNC_EXCLUDE_REGEXPS) {
+    if (regexp.test(relPosix)) return true;
+  }
+  return false;
+}
+function compileOfflineSyncExcludeGlobs(globs) {
+  const out = [];
+  for (const entry of globs) {
+    if (typeof entry !== "string" || entry.length === 0) {
+      throw new Error("offlineSyncExcludes must contain only non-empty strings");
+    }
+    out.push(globToRegExp(entry));
+  }
+  return out;
+}
+function parseOfflineSyncExcludes(raw) {
+  if (raw === void 0 || raw === null) return [];
+  if (!Array.isArray(raw)) {
+    throw new Error(
+      `offlineSyncExcludes must be an array of non-empty glob strings; got ${typeof raw}`
+    );
+  }
+  for (const entry of raw) {
+    if (typeof entry !== "string" || entry.trim().length === 0) {
+      throw new Error(
+        "offlineSyncExcludes must contain only non-empty glob strings"
+      );
+    }
+  }
+  const globs = raw.map((entry) => entry.trim());
+  compileOfflineSyncExcludeGlobs(globs);
+  return globs;
 }
 function shouldIgnoreIncomingRuntimePath(relPosix) {
   const parts = relPosix.split("/");
@@ -412,10 +501,9 @@ async function* iterateOfflineSyncSnapshotFileRecords(options) {
     let entries = await readdir(dirAbs, { withFileTypes: true });
     entries = entries.sort((left, right) => left.name.localeCompare(right.name));
     for (const entry of entries) {
-      throwIfOfflineSyncAborted(options.signal);
       const abs = path.join(dirAbs, entry.name);
       const relPosix = path.relative(root.abs, abs).split(path.sep).join("/");
-      if (shouldExcludeRelPath(relPosix, includeTranscripts)) continue;
+      if (options.excludeNodeLocalState === false ? shouldExcludeRelPath(relPosix, includeTranscripts) : shouldExcludePushRelPath(relPosix, includeTranscripts, options.userExcludeRegexps)) continue;
       if (entry.isSymbolicLink()) continue;
       if (entry.isDirectory()) {
         yield* walk(abs);
@@ -470,7 +558,7 @@ async function buildOfflineSyncSnapshotFromBase(options) {
       throwIfOfflineSyncAborted(options.signal);
       const abs = path.join(dirAbs, entry.name);
       const relPosix = path.relative(root.abs, abs).split(path.sep).join("/");
-      if (shouldExcludeRelPath(relPosix, includeTranscripts)) continue;
+      if (options.excludeNodeLocalState === false ? shouldExcludeRelPath(relPosix, includeTranscripts) : shouldExcludePushRelPath(relPosix, includeTranscripts, options.userExcludeRegexps)) continue;
       if (entry.isSymbolicLink()) continue;
       if (entry.isDirectory()) {
         await walk(abs);
@@ -517,7 +605,7 @@ async function buildOfflineSyncSnapshotForPaths(options) {
     const relPath = normalizeRelativePath(rawPath, "paths[]");
     if (seen.has(relPath)) continue;
     seen.add(relPath);
-    if (shouldExcludeRelPath(relPath, includeTranscripts)) {
+    if (options.excludeNodeLocalState === false ? shouldExcludeRelPath(relPath, includeTranscripts) : shouldExcludePushRelPath(relPath, includeTranscripts, options.userExcludeRegexps)) {
       throw new Error(`offline sync snapshot path is excluded: ${relPath}`);
     }
     const filePath = await resolveSafeArchiveTarget(root, relPath);
@@ -551,7 +639,7 @@ async function readOfflineSyncFileContentChunk(options) {
   const root = await prepareSafeArchiveRoot(rootAbs, "readOfflineSyncFileContentChunk", "root");
   const includeTranscripts = options.includeTranscripts !== false;
   const relPath = normalizeRelativePath(options.path, "path");
-  if (shouldExcludeRelPath(relPath, includeTranscripts)) {
+  if (options.excludeNodeLocalState === false ? shouldExcludeRelPath(relPath, includeTranscripts) : shouldExcludePushRelPath(relPath, includeTranscripts, options.userExcludeRegexps)) {
     throw new Error(`offline sync file content path is excluded: ${relPath}`);
   }
   const offset = options.offset === void 0 ? 0 : assertNonNegativeInteger(options.offset, "offset");
@@ -619,6 +707,7 @@ async function buildOfflineSyncChangeset(options) {
     includeContent: false,
     includeTranscripts,
     now: options.now,
+    userExcludeRegexps: options.userExcludeRegexps,
     readFile: options.readFile,
     readFileDigest: options.readFileDigest
   });
@@ -630,6 +719,7 @@ async function buildOfflineSyncChangeset(options) {
     excludePaths: options.excludePaths,
     includeTranscripts,
     now: options.now,
+    userExcludeRegexps: options.userExcludeRegexps,
     readFile: options.readFile
   });
 }
@@ -649,6 +739,7 @@ async function buildOfflineSyncChangesetFromSnapshot(options) {
   const changes = [];
   for (const relPath of unionPaths(base, currentMap)) {
     if (excludedPaths.has(relPath)) continue;
+    if (shouldExcludePushRelPath(relPath, includeTranscripts, options.userExcludeRegexps)) continue;
     if (shouldPreferIncomingOfflineRuntimeFile(relPath)) continue;
     const baseEntry = base.get(relPath);
     const currentEntry = currentMap.get(relPath);
@@ -660,6 +751,7 @@ async function buildOfflineSyncChangesetFromSnapshot(options) {
         includeContent: true,
         includeTranscripts,
         now: options.now,
+        userExcludeRegexps: options.userExcludeRegexps,
         readFile: options.readFile
       });
       const record = file.files[0];
@@ -710,13 +802,15 @@ async function summarizeOfflineSyncPendingChanges(options) {
     includeContent: false,
     includeTranscripts,
     now: options.now,
+    userExcludeRegexps: options.userExcludeRegexps,
     readFile: options.readFile,
     readFileDigest: options.readFileDigest
   });
   return summarizeOfflineSyncPendingFiles({
     baseFiles: options.baseFiles,
     currentFiles: current.files,
-    includeTranscripts
+    includeTranscripts,
+    userExcludeRegexps: options.userExcludeRegexps
   });
 }
 function summarizeOfflineSyncPendingFiles(options) {
@@ -733,6 +827,7 @@ function summarizeOfflineSyncPendingFiles(options) {
   let deletes = 0;
   for (const relPath of unionPaths(base, currentMap)) {
     if (shouldPreferIncomingOfflineRuntimeFile(relPath)) continue;
+    if (shouldExcludePushRelPath(relPath, includeTranscripts, options.userExcludeRegexps)) continue;
     const baseEntry = base.get(relPath);
     const currentEntry = currentMap.get(relPath);
     if (currentEntry && currentEntry.sha256 !== baseEntry?.sha256) {
@@ -766,7 +861,8 @@ async function applyOfflineSyncSnapshot(options) {
     includeContent: false,
     includeTranscripts: snapshot.includeTranscripts,
     readFile: options.readFile,
-    readFileDigest: options.readFileDigest
+    readFileDigest: options.readFileDigest,
+    excludeNodeLocalState: false
   })).files;
   const currentMap = byPath(currentFiles);
   const deferredPaths = new Set(options.deferredPaths ?? []);
@@ -869,6 +965,11 @@ async function applyOfflineSyncSnapshot(options) {
       if (base) nextBase.set(relPath, base);
       continue;
     }
+    if (matchesOfflineSyncDefaultExclude(relPath)) {
+      nextBase.delete(relPath);
+      skipped += 1;
+      continue;
+    }
     if (!currentEntry) {
       nextBase.delete(relPath);
       skipped += 1;
@@ -933,7 +1034,8 @@ async function applyOfflineSyncChangeset(options) {
     includeContent: false,
     includeTranscripts: changeset.includeTranscripts,
     readFile: options.readFile,
-    readFileDigest: options.readFileDigest
+    readFileDigest: options.readFileDigest,
+    excludeNodeLocalState: false
   })).files;
   const currentMap = byPath(currentFiles);
   const conflicts = [];
@@ -1021,7 +1123,8 @@ async function applyOfflineSyncChangeset(options) {
       includeContent: false,
       includeTranscripts: changeset.includeTranscripts,
       readFile: options.readFile,
-      readFileDigest: options.readFileDigest
+      readFileDigest: options.readFileDigest,
+      excludeNodeLocalState: false
     })).files,
     ...options.returnCurrentFiles === false ? { currentFilesComplete: false } : {}
   };
@@ -1126,6 +1229,34 @@ async function setSafeFileMtime(root, relPath, mtimeMs) {
   await utimes(target, mtime, mtime);
   return true;
 }
+async function readLocalFileState(options) {
+  const filePath = await resolveSafeArchiveTarget(
+    await prepareSafeArchiveRoot(options.rootAbs, "readLocalFileState", "rootAbs"),
+    options.relPath
+  );
+  const st = await lstat(filePath).catch((error) => {
+    if (error.code === "ENOENT") return null;
+    throw error;
+  });
+  if (!st || st.isSymbolicLink() || !st.isFile()) return null;
+  throwIfOfflineSyncAborted(options.signal);
+  let digest;
+  if (options.readFileDigest) {
+    digest = await options.readFileDigest({ root: options.rootAbs, path: options.relPath, filePath });
+  } else if (options.readFile) {
+    const content = await options.readFile({ root: options.rootAbs, path: options.relPath, filePath });
+    digest = sha256Buffer(content);
+  } else {
+    digest = await sha256File(filePath, options.signal);
+  }
+  throwIfOfflineSyncAborted(options.signal);
+  return {
+    path: options.relPath,
+    sha256: digest.sha256,
+    bytes: digest.bytes,
+    mtimeMs: st.mtimeMs
+  };
+}
 async function applyOfflineSyncFileContentChunk(options) {
   const root = await ensureSyncRoot(options.root, "applyOfflineSyncFileContentChunk");
   const sourceId = normalizeSourceId(options.sourceId, "sourceId");
@@ -1207,17 +1338,13 @@ async function applyOfflineSyncFileContentChunk(options) {
   };
   if (offset === 0) {
     await pruneOfflineUploadStaging(root);
-    const currentSnapshot2 = await buildOfflineSyncSnapshotForPaths({
-      root: root.abs,
-      sourceId: "local",
-      paths: [relPath],
-      includeContent: false,
-      includeTranscripts,
+    const currentFile2 = await readLocalFileState({
+      rootAbs: root.abs,
+      relPath,
       readFile: options.readFile,
       readFileDigest: options.readFileDigest
     });
-    const currentFile2 = currentSnapshot2.files[0];
-    if (currentFile2?.sha256 === sha256) {
+    if (currentFile2 && currentFile2.sha256 === sha256) {
       await setSafeFileMtime(root, relPath, mtimeMs);
       return {
         ...baseResult,
@@ -1270,16 +1397,12 @@ async function applyOfflineSyncFileContentChunk(options) {
     });
     throw new Error(`offline sync upload checksum mismatch for ${relPath}`);
   }
-  const currentSnapshot = await buildOfflineSyncSnapshotForPaths({
-    root: root.abs,
-    sourceId: "local",
-    paths: [relPath],
-    includeContent: false,
-    includeTranscripts,
+  const currentFile = await readLocalFileState({
+    rootAbs: root.abs,
+    relPath,
     readFile: options.readFile,
     readFileDigest: options.readFileDigest
   });
-  const currentFile = currentSnapshot.files[0];
   const uploadedState = {
     path: relPath,
     sha256,
@@ -1287,7 +1410,7 @@ async function applyOfflineSyncFileContentChunk(options) {
     mtimeMs
   };
   try {
-    if (currentFile?.sha256 === sha256) {
+    if (currentFile && currentFile.sha256 === sha256) {
       await setSafeFileMtime(root, relPath, mtimeMs);
       return {
         ...baseResult,
@@ -1619,8 +1742,11 @@ export {
   OFFLINE_SYNC_APPLY_MAX_BODY_BYTES,
   OFFLINE_SYNC_SNAPSHOT_BASE_MAX_BODY_BYTES,
   OFFLINE_SYNC_MAX_MTIME_MS,
+  globToRegExp,
   normalizeOfflineSyncSnapshot,
   normalizeOfflineSyncChangeset,
+  compileOfflineSyncExcludeGlobs,
+  parseOfflineSyncExcludes,
   shouldPreferIncomingOfflineRuntimeFile,
   iterateOfflineSyncSnapshotFileRecords,
   buildOfflineSyncSnapshot,
@@ -1642,4 +1768,4 @@ export {
   normalizeOfflineSyncState,
   fileStatesFromSnapshot
 };
-//# sourceMappingURL=chunk-PWWWLD7D.js.map
+//# sourceMappingURL=chunk-X64YLC24.js.map