@remnic/core 9.3.751 → 9.3.752

package/dist/access-recall-surface.d.ts

@@ -0,0 +1,363 @@
+import { AccessAuditAdapter } from './access-audit.js';
+import { CrossNamespaceBudget } from './cross-namespace-budget.js';
+import { O as Orchestrator } from './orchestrator-BhxMxtQJ.js';
+import { LastRecallSnapshot } from './recall-state.js';
+import { RecallXraySnapshot } from './recall-xray.js';
+import { R as RecallDisclosure, a as RecallPlanMode, M as MemoryFile } from './types-BfI4uJeb.js';
+import { StorageManager } from './storage.js';
+import { g as EngramAccessRecallResponse, h as EngramAccessMemorySummary, i as EngramAccessSetCodingContextRequest, j as EngramAccessRecallRequest } from './access-service-C2cOHQvg.js';
+import './recall-audit.js';
+import './recall-audit-anomaly.js';
+import './briefing.js';
+import './buffer.js';
+import './extraction-faithfulness.js';
+import './local-llm.js';
+import './model-registry.js';
+import './fallback-llm.js';
+import './resolve-provider-secret.js';
+import './search/port.js';
+import './transcript.js';
+import './session-integrity.js';
+import './summarizer.js';
+import './orchestration/maintenance.js';
+import './namespaces/search.js';
+import './catalog-D_FvzTM0.js';
+import './compounding/engine.js';
+import './shared-context/manager.js';
+import 'zod';
+import './capabilities.js';
+import './utility-runtime.js';
+import './tier-routing.js';
+import './lifecycle.js';
+import './orchestration/compression-guideline-coordinator.js';
+import './semantic-consolidation-BrsoFeMP.js';
+import './connectors/codex-materialize.js';
+import './logger.js';
+import './consolidation-operator.js';
+import './embedding-fallback.js';
+import './extraction.js';
+import './schemas.js';
+import './profiling.js';
+import './objective-state.js';
+import './causal-trajectory.js';
+import './trust-zones.js';
+import './harmonic-retrieval.js';
+import './abstraction-nodes.js';
+import './cue-anchors.js';
+import './verified-recall.js';
+import './boxes.js';
+import './semantic-rule-verifier.js';
+import './work-product-ledger.js';
+import './trust-score-stage.js';
+import './trust-score.js';
+import './conversation-index/chunker.js';
+import './conversation-index/backend.js';
+import './faiss-adapter-BHecI1fF.js';
+import './runtime/child-process.js';
+import './namespaces/storage.js';
+import './threading.js';
+import './graph.js';
+import './live-connectors-runner.js';
+import './framework-CNDn2164.js';
+import './relevance.js';
+import './negative.js';
+import './session-observer-state.js';
+import './semantic-DJR8_DMQ.js';
+import './replay/types.js';
+import './message-parts/index.js';
+import './types-gb_SNtjR.js';
+import './extraction-judge.js';
+import './lcm/engine.js';
+import './lcm/archive.js';
+import 'better-sqlite3';
+import './lcm/summarizer.js';
+import './lcm/dag.js';
+import './lcm/queue.js';
+import './policy-runtime.js';
+import './memory-provenance.js';
+import './user-model.js';
+import './page-versioning.js';
+import './memory-projection-store.js';
+import './maintenance/memory-governance.js';
+import './runtime/better-sqlite.js';
+import './structured-attributes.js';
+import './types-B1VHaf2w.js';
+import './recall-explain-renderer.js';
+import './explicit-capture.js';
+import './graph-snapshot.js';
+import './memory-worth-outcomes.js';
+import './transfer/capsule-import.js';
+import './transfer/types.js';
+import './transfer/capsule-export.js';
+import './capsule-cli.js';
+import './offline-sync.js';
+import './action-confidence.js';
+
+/**
+ * Access recall read-surface (extracted from access-service.ts; god-file
+ * decomposition follow-through of #1526, same playbook: verbatim move +
+ * live selfDeps wiring so Object.create(prototype) fakes and instance
+ * stubs keep working).
+ *
+ * Owns the recall read pipeline of the access layer:
+ *   - executeRecall (budget/audit-gated recall + serialization)
+ *   - recallXray (X-ray capture surface, #570)
+ *   - serializeRecallResults / buildRecallResponseFromXraySnapshot
+ *   - fetchRawExcerpts (raw-excerpt read gate)
+ */
+
+interface AccessRecallSurfaceDeps {
+    readonly auditAdapter: AccessAuditAdapter | null;
+    readonly budget: CrossNamespaceBudget;
+    buildRecallDebug(snapshot: LastRecallSnapshot | null, namespace: string, includeDebug: boolean, sessionKey?: string): Promise<EngramAccessRecallResponse["debug"] | undefined>;
+    buildRecallResponseFromXraySnapshot(options: {
+        query: string;
+        sessionKey?: string;
+        snapshot: RecallXraySnapshot;
+        disclosure: RecallDisclosure;
+        startedAt: number;
+        requestedMode?: RecallPlanMode | "auto";
+        normalizedMode?: RecallPlanMode;
+        /**
+         * Read-authorization-gated namespace for the raw-excerpt LCM lookup (#1505
+         * thread 2f7). Threaded through to `serializeRecallResults` so the
+         * `includeRecall` x-ray path honours the SAME read gate as normal recall and
+         * never attaches overlay transcript rows the gate excludes.
+         */
+        rawExcerptNamespace?: string;
+        /**
+         * Ordered, read-authorized LCM read session_id SET (#1505 fallback
+         * unification). Threaded through to `serializeRecallResults` so the x-ray raw
+         * disclosure path also finds excerpts archived at the coding read fallbacks.
+         */
+        rawExcerptSessionIds?: string[];
+        /**
+         * Force NO raw excerpts (#1505 thread NBHWz). Set when the IMPLICIT
+         * raw-excerpt read gate found NO readable LCM namespace, so the x-ray
+         * includeRecall path degrades to empty excerpts rather than falling back to
+         * the write/overlay namespace the read gate excludes.
+         */
+        rawExcerptsSuppressed?: boolean;
+    }): Promise<EngramAccessRecallResponse>;
+    fetchRawExcerpts(disclosure: RecallDisclosure, context: {
+        query: string;
+        sessionKey?: string;
+        namespace?: string;
+        /**
+         * Pre-resolved, ordered, read-authorized LCM read session_id SET (#1505
+         * fallback unification). When supplied, raw disclosure queries each key in
+         * order (primary coding overlay → read fallbacks) and merges rows, exactly
+         * as the orchestrator recall path and `lcmSearch` do, so a branch-scoped
+         * session finds excerpts archived at project/root scope. Already
+         * read-gated by `resolveLcmReadSessionIds`, so an unauthorized
+         * `<principal>-project-*` key is never present. Falls back to the legacy
+         * single `namespace`-prefixed key when absent (sessionless / legacy
+         * callers).
+         */
+        lcmSessionIds?: string[];
+    } | null): Promise<EngramAccessMemorySummary["rawExcerpts"] | null>;
+    maybeAttachCodingContext(sessionKey: string | undefined, options: {
+        cwd?: string;
+        projectTag?: string;
+    }): Promise<void>;
+    normalizeRecallMode(mode?: RecallPlanMode | "auto"): RecallPlanMode | undefined;
+    readonly orchestrator: Orchestrator;
+    resolveLcmReadSessionIds(explicitNamespace: string | undefined, resolvedNamespace: string, sessionKey: string, authenticatedPrincipal: string | undefined): string[];
+    resolveNamespace(namespace?: string): string;
+    resolveRawExcerptReadNamespace(explicitNamespace: string | undefined, sessionKey: string | undefined, authenticatedPrincipal: string | undefined): string | undefined;
+    resolveRecallNamespace(namespace: string | undefined, sessionKey: string | undefined, authenticatedPrincipal?: string): string | undefined;
+    resolveRequestPrincipal(sessionKey: string | undefined, authenticatedPrincipal?: string): string | undefined;
+    serializeMemorySummary(memory: MemoryFile, baseDir: string, disclosure?: RecallDisclosure, rawExcerpts?: EngramAccessMemorySummary["rawExcerpts"]): EngramAccessMemorySummary;
+    serializeRecallResults(snapshot: LastRecallSnapshot | null, disclosure: RecallDisclosure, rawContext?: {
+        query: string;
+        sessionKey?: string;
+        /**
+         * Read-authorization-gated namespace for the raw-excerpt LCM lookup
+         * (#1505 thread 2f7). When the caller supplies it, the raw lookup uses
+         * THIS namespace prefix instead of `snapshot.namespace` (the
+         * write/overlay namespace), so raw disclosure honours the SAME read
+         * gate as normal recall + `lcmSearch`. Omitted ⇒ falls back to the
+         * snapshot namespace (single-store / sessionless callers, unchanged).
+         */
+        rawExcerptNamespace?: string;
+        /**
+         * Ordered, read-authorized LCM read session_id SET (#1505 fallback
+         * unification). When supplied, raw disclosure queries each key (primary
+         * coding overlay → read fallbacks) and merges rows so a branch-scoped
+         * session finds excerpts archived at project/root scope. Already
+         * read-gated, so no unauthorized overlay key is present. Omitted ⇒ the
+         * legacy single `rawExcerptNamespace`-prefixed key (unchanged).
+         */
+        rawExcerptSessionIds?: string[];
+        /**
+         * Force NO raw excerpts even when `disclosure === "raw"` (#1505 thread
+         * NBHWz). Set by callers when the IMPLICIT raw-excerpt read gate found
+         * NO readable LCM namespace (a restrictive `default` READ policy with
+         * no readable overlay/self namespace). The lookup must NOT fall back to
+         * `snapshot.namespace` (the write/overlay namespace the read gate
+         * excludes) — it returns empty excerpts so raw recall degrades
+         * gracefully instead of leaking unreadable rows or throwing.
+         */
+        rawExcerptsSuppressed?: boolean;
+    } | null): Promise<EngramAccessMemorySummary[]>;
+    setCodingContext(request: EngramAccessSetCodingContextRequest): void;
+    storageForAbsoluteRecallPath(memoryPath: string, primaryNamespace: string, recallNamespaces?: readonly string[]): Promise<{
+        storage: StorageManager;
+        dir: string;
+    } | null>;
+    xrayQueue: Promise<void>;
+}
+declare class AccessRecallSurface {
+    private readonly deps;
+    constructor(deps: AccessRecallSurfaceDeps);
+    buildRecallResponseFromXraySnapshot(options: {
+        query: string;
+        sessionKey?: string;
+        snapshot: RecallXraySnapshot;
+        disclosure: RecallDisclosure;
+        startedAt: number;
+        requestedMode?: RecallPlanMode | "auto";
+        normalizedMode?: RecallPlanMode;
+        /**
+         * Read-authorization-gated namespace for the raw-excerpt LCM lookup (#1505
+         * thread 2f7). Threaded through to `serializeRecallResults` so the
+         * `includeRecall` x-ray path honours the SAME read gate as normal recall and
+         * never attaches overlay transcript rows the gate excludes.
+         */
+        rawExcerptNamespace?: string;
+        /**
+         * Ordered, read-authorized LCM read session_id SET (#1505 fallback
+         * unification). Threaded through to `serializeRecallResults` so the x-ray raw
+         * disclosure path also finds excerpts archived at the coding read fallbacks.
+         */
+        rawExcerptSessionIds?: string[];
+        /**
+         * Force NO raw excerpts (#1505 thread NBHWz). Set when the IMPLICIT
+         * raw-excerpt read gate found NO readable LCM namespace, so the x-ray
+         * includeRecall path degrades to empty excerpts rather than falling back to
+         * the write/overlay namespace the read gate excludes.
+         */
+        rawExcerptsSuppressed?: boolean;
+    }): Promise<EngramAccessRecallResponse>;
+    serializeRecallResults(snapshot: LastRecallSnapshot | null, disclosure: RecallDisclosure, rawContext?: {
+        query: string;
+        sessionKey?: string;
+        /**
+         * Read-authorization-gated namespace for the raw-excerpt LCM lookup
+         * (#1505 thread 2f7). When the caller supplies it, the raw lookup uses
+         * THIS namespace prefix instead of `snapshot.namespace` (the
+         * write/overlay namespace), so raw disclosure honours the SAME read
+         * gate as normal recall + `lcmSearch`. Omitted ⇒ falls back to the
+         * snapshot namespace (single-store / sessionless callers, unchanged).
+         */
+        rawExcerptNamespace?: string;
+        /**
+         * Ordered, read-authorized LCM read session_id SET (#1505 fallback
+         * unification). When supplied, raw disclosure queries each key (primary
+         * coding overlay → read fallbacks) and merges rows so a branch-scoped
+         * session finds excerpts archived at project/root scope. Already
+         * read-gated, so no unauthorized overlay key is present. Omitted ⇒ the
+         * legacy single `rawExcerptNamespace`-prefixed key (unchanged).
+         */
+        rawExcerptSessionIds?: string[];
+        /**
+         * Force NO raw excerpts even when `disclosure === "raw"` (#1505 thread
+         * NBHWz). Set by callers when the IMPLICIT raw-excerpt read gate found
+         * NO readable LCM namespace (a restrictive `default` READ policy with
+         * no readable overlay/self namespace). The lookup must NOT fall back to
+         * `snapshot.namespace` (the write/overlay namespace the read gate
+         * excludes) — it returns empty excerpts so raw recall degrades
+         * gracefully instead of leaking unreadable rows or throwing.
+         */
+        rawExcerptsSuppressed?: boolean;
+    } | null): Promise<EngramAccessMemorySummary[]>;
+    /**
+     * Fetch raw transcript excerpts from the LCM archive for `disclosure ===
+     * "raw"` recalls (issue #677 PR 2/4).  Returns `null` for non-raw recall
+     * depths, an empty array when LCM is disabled / not initialized / has no
+     * matches, and an array of LCM-side excerpts otherwise.  Errors are
+     * swallowed and treated as "no excerpts" so a failing LCM never breaks
+     * the recall response.
+     *
+     * Namespace handling: LCM archival prefixes non-default-namespace
+     * sessions with `${namespace}:${sessionKey}` (see `observe()` around
+     * line 2498), so the lookup must mirror that prefix or raw recalls in
+     * non-default namespaces miss their own excerpts.
+     */
+    fetchRawExcerpts(disclosure: RecallDisclosure, context: {
+        query: string;
+        sessionKey?: string;
+        namespace?: string;
+        /**
+         * Pre-resolved, ordered, read-authorized LCM read session_id SET (#1505
+         * fallback unification). When supplied, raw disclosure queries each key in
+         * order (primary coding overlay → read fallbacks) and merges rows, exactly
+         * as the orchestrator recall path and `lcmSearch` do, so a branch-scoped
+         * session finds excerpts archived at project/root scope. Already
+         * read-gated by `resolveLcmReadSessionIds`, so an unauthorized
+         * `<principal>-project-*` key is never present. Falls back to the legacy
+         * single `namespace`-prefixed key when absent (sessionless / legacy
+         * callers).
+         */
+        lcmSessionIds?: string[];
+    } | null): Promise<EngramAccessMemorySummary["rawExcerpts"] | null>;
+    executeRecall(request: EngramAccessRecallRequest): Promise<{
+        response: EngramAccessRecallResponse;
+        budgetRecordPrincipal: string | null;
+    }>;
+    /**
+     * Recall X-ray (issue #570).  Runs a recall with `xrayCapture: true`
+     * and returns the resulting snapshot as structured JSON so every
+     * surface (CLI / HTTP / MCP) gets the same payload.  Namespace scope
+     * is enforced before the recall fires (CLAUDE.md rule 42 — read and
+     * write paths must resolve through the same namespace layer) so an
+     * unauthorized principal cannot capture an x-ray for a namespace it
+     * cannot read.
+     */
+    recallXray(request: {
+        query: string;
+        sessionKey?: string;
+        namespace?: string;
+        budget?: number;
+        authenticatedPrincipal?: string;
+        /**
+         * Disclosure depth used to shape per-result payload (issue #677
+         * PR 3/4).  When set, each X-ray result is decorated with the
+         * matching `disclosure` field and `estimatedTokens` computed from
+         * the actual rendered content at that depth, so the renderer's
+         * "Token spend by disclosure" summary reflects real spend rather
+         * than staying empty when no caller wires the depth knob through.
+         */
+        disclosure?: RecallDisclosure;
+        /**
+         * Free-form recall tag filter (issue #689). Mirrors the field on
+         * `EngramAccessRecallRequest`. When non-empty, the captured X-ray
+         * snapshot's `results` are filtered down to memories whose
+         * frontmatter tags satisfy `tagMatch` ("any" by default), and a
+         * `tag-filter` entry is appended to `filters`.
+         */
+        tags?: string[];
+        /** Match mode for `tags`. See `EngramAccessRecallRequest.tagMatch`. */
+        tagMatch?: "any" | "all";
+        /** Recall planner mode override. Mirrors `EngramAccessRecallRequest.mode`. */
+        mode?: RecallPlanMode | "auto";
+        /**
+         * User-aware context scopes active for this recall. Forwarded into
+         * provenance construction so boundary scopes are evaluated against
+         * the caller's real context instead of an empty-context default.
+         */
+        currentContextScopes?: readonly unknown[];
+        /**
+         * Internal inspector affordance: include a recall-shaped response
+         * derived from the same X-ray snapshot. Left off by default so the
+         * regular X-ray API/CLI/MCP surfaces keep their existing payload shape.
+         */
+        includeRecall?: boolean;
+    }): Promise<{
+        snapshotFound: boolean;
+        snapshot?: RecallXraySnapshot;
+        recall?: EngramAccessRecallResponse;
+    }>;
+}
+
+export { AccessRecallSurface, type AccessRecallSurfaceDeps };

package/dist/access-recall-surface.js

@@ -0,0 +1,128 @@
+import {
+  AccessRecallSurface
+} from "./chunk-VX2RYM2K.js";
+import "./chunk-GDASG7NC.js";
+import "./chunk-GDB4J2H3.js";
+import "./chunk-M5QKGHCR.js";
+import "./chunk-64SE4X5G.js";
+import "./chunk-VQ7B2Q6M.js";
+import "./chunk-ERA5RSMZ.js";
+import "./chunk-JGSKJHF7.js";
+import "./chunk-IQ7WCZRW.js";
+import "./chunk-S4DDLTPX.js";
+import "./chunk-FF4KLI5W.js";
+import "./chunk-BT7NVCML.js";
+import "./chunk-H7XKCNR6.js";
+import "./chunk-2KK5WNQB.js";
+import "./chunk-SOBJ6NEY.js";
+import "./chunk-6MMONPHM.js";
+import "./chunk-ICP53SKG.js";
+import "./chunk-AQEJKOKI.js";
+import "./chunk-6HMYUWXR.js";
+import "./chunk-GECEETQ3.js";
+import "./chunk-5DXUE7GB.js";
+import "./chunk-QRM3K3XT.js";
+import "./chunk-5CEJH5ZN.js";
+import "./chunk-WRFKZEO6.js";
+import "./chunk-CYEPCZN5.js";
+import "./chunk-LQ6JI4VH.js";
+import "./chunk-SANZHXY2.js";
+import "./chunk-AER6MT24.js";
+import "./chunk-R7TGDLV3.js";
+import "./chunk-CINZGPSJ.js";
+import "./chunk-ZFXCQPNO.js";
+import "./chunk-JHZ3LEM7.js";
+import "./chunk-DCWIQFNA.js";
+import "./chunk-XBZQRZ6G.js";
+import "./chunk-KCQA46NR.js";
+import "./chunk-SJHM6I4J.js";
+import "./chunk-K43PI6DQ.js";
+import "./chunk-YNQ6DFSV.js";
+import "./chunk-EIR5VLIH.js";
+import "./chunk-TQT3USCG.js";
+import "./chunk-EI6V5UXY.js";
+import "./chunk-PNLCEFE4.js";
+import "./chunk-O75CRYGF.js";
+import "./chunk-QDW3E4RD.js";
+import "./chunk-XKAOT4ZB.js";
+import "./chunk-3ONXXHQO.js";
+import "./chunk-ODPLEWB6.js";
+import "./chunk-EHQ5HO5T.js";
+import "./chunk-2LSZVONP.js";
+import "./chunk-DEUNUKTD.js";
+import "./chunk-ZY2MNJR6.js";
+import "./chunk-V5UV7BOA.js";
+import "./chunk-TBBDFYXW.js";
+import "./chunk-ZBJMUXZH.js";
+import "./chunk-MTN2G4DT.js";
+import "./chunk-YGNQG4Q6.js";
+import "./chunk-L2B3EE7B.js";
+import "./chunk-M7XQSUBB.js";
+import "./chunk-5UZXUTVO.js";
+import "./chunk-5GPPACXK.js";
+import "./chunk-SVOZFLIQ.js";
+import "./chunk-LTJAMRGI.js";
+import "./chunk-TKZ3AL5V.js";
+import "./chunk-6CIAGZ6X.js";
+import "./chunk-J6A3CX5N.js";
+import "./chunk-JS2HKKOK.js";
+import "./chunk-AWJ2FHCF.js";
+import "./chunk-42JKGUFJ.js";
+import "./chunk-RULE4VG5.js";
+import "./chunk-SCU65EZI.js";
+import "./chunk-MB5RSUW6.js";
+import "./chunk-6KYMPV2O.js";
+import "./chunk-DM2T26WE.js";
+import "./chunk-LDXUBPMO.js";
+import "./chunk-YTU7WKYN.js";
+import "./chunk-AAD2ZS6P.js";
+import "./chunk-G7D6GZ5J.js";
+import "./chunk-VF4XKTX3.js";
+import "./chunk-W5H6ZRPT.js";
+import "./chunk-VUA4S7P6.js";
+import "./chunk-IQVQJJL7.js";
+import "./chunk-L2EXJQJP.js";
+import "./chunk-VL7DP3OW.js";
+import "./chunk-RGMVMVMF.js";
+import "./chunk-N7RWREIQ.js";
+import "./chunk-OEHCMALU.js";
+import "./chunk-PHK3HARR.js";
+import "./chunk-4DJQYKMN.js";
+import "./chunk-5GKPFL3S.js";
+import "./chunk-EYIEWJNI.js";
+import "./chunk-JUC24CTX.js";
+import "./chunk-NU3CSQ4H.js";
+import "./chunk-FLVL4L3L.js";
+import "./chunk-WEHSQBFR.js";
+import "./chunk-437S3G37.js";
+import "./chunk-J4EB7DNW.js";
+import "./chunk-GWTFLF2P.js";
+import "./chunk-UKJAGEXH.js";
+import "./chunk-FP2373TW.js";
+import "./chunk-X64YLC24.js";
+import "./chunk-UI3NYK34.js";
+import "./chunk-GCGJW34D.js";
+import "./chunk-J2HSAU72.js";
+import "./chunk-A6XUJE5D.js";
+import "./chunk-P7FMDTKL.js";
+import "./chunk-VS2IYZRU.js";
+import "./chunk-Z2YFLXHU.js";
+import "./chunk-I4WBNM3M.js";
+import "./chunk-SOAU2OE2.js";
+import "./chunk-PE6XR4GG.js";
+import "./chunk-U3PN77QT.js";
+import "./chunk-VSF7AAGE.js";
+import "./chunk-6MKAMLQL.js";
+import "./chunk-JAKIDQB2.js";
+import "./chunk-PVGDJXVK.js";
+import "./chunk-A2IYSXDQ.js";
+import "./chunk-LPSF4OQH.js";
+import "./chunk-TVVEYCNW.js";
+import "./chunk-RFYAYKTD.js";
+import "./chunk-LBLXEFWK.js";
+import "./chunk-VFUEZZBS.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  AccessRecallSurface
+};
+//# sourceMappingURL=access-recall-surface.js.map

package/dist/access-schema.js

@@ -25,17 +25,14 @@ import {
   trustZoneDemoSeedRequestSchema,
   trustZonePromoteRequestSchema,
   validateRequest
-} from "./chunk-TPLE6SNY.js";
-import "./chunk-KQAFEZQX.js";
+} from "./chunk-KFNG72W7.js";
+import "./chunk-FLVL4L3L.js";
 import "./chunk-WEHSQBFR.js";
-import "./chunk-X7Y7WX73.js";
+import "./chunk-437S3G37.js";
 import "./chunk-J4EB7DNW.js";
-import "./chunk-BJMBJZ2Y.js";
+import "./chunk-GWTFLF2P.js";
 import "./chunk-UKJAGEXH.js";
 import "./chunk-FP2373TW.js";
-import "./chunk-Z2YFLXHU.js";
-import "./chunk-I4WBNM3M.js";
-import "./chunk-SOAU2OE2.js";
 import "./chunk-X64YLC24.js";
 import "./chunk-UI3NYK34.js";
 import "./chunk-GCGJW34D.js";
@@ -43,6 +40,9 @@ import "./chunk-J2HSAU72.js";
 import "./chunk-A6XUJE5D.js";
 import "./chunk-P7FMDTKL.js";
 import "./chunk-VS2IYZRU.js";
+import "./chunk-Z2YFLXHU.js";
+import "./chunk-I4WBNM3M.js";
+import "./chunk-SOAU2OE2.js";
 import "./chunk-PZ5AY32C.js";
 export {
   actionConfidenceRequestSchema,

package/dist/{access-service-DmAEOJdJ.d.ts → access-service-C2cOHQvg.d.ts}

@@ -1,6 +1,6 @@
-import { a as NamespaceRecord } from './catalog-BpOcwHdE.js';
-import { P as PluginConfig, ax as CodingContext, M as MemoryCategory, D as DaySummaryResult, h as RecallPlanMode, i as RecallDisclosure, g as MemoryFile, m as MemoryLifecycleEvent, E as EntityFile, f as MemoryStatus, ay as DreamsStatusResult, az as DreamsPhase, aA as DreamsRunResult } from './types-D4NYDtXI.js';
-import { R as ResolvedScopeProfilePlan, O as Orchestrator, I as IntentDebugSnapshot, G as GraphRecallSnapshot, P as PatternReinforcementResult, S as ScopeProfileLayerResolution, a as ScopeProfilePromotionResolution, W as WearablesService } from './orchestrator-D7bb8ZGp.js';
+import { a as NamespaceRecord } from './catalog-D_FvzTM0.js';
+import { P as PluginConfig, ax as CodingContext, g as MemoryCategory, D as DaySummaryResult, a as RecallPlanMode, R as RecallDisclosure, M as MemoryFile, m as MemoryLifecycleEvent, E as EntityFile, i as MemoryStatus, ay as DreamsStatusResult, az as DreamsPhase, aA as DreamsRunResult } from './types-BfI4uJeb.js';
+import { R as ResolvedScopeProfilePlan, O as Orchestrator, I as IntentDebugSnapshot, G as GraphRecallSnapshot, P as PatternReinforcementResult, S as ScopeProfileLayerResolution, a as ScopeProfilePromotionResolution, W as WearablesService } from './orchestrator-BhxMxtQJ.js';
 import { StorageManager } from './storage.js';
 import { a as Peer, b as PeerProfile } from './types-B1VHaf2w.js';
 import { RecallExplainJsonPayload } from './recall-explain-renderer.js';
@@ -1724,6 +1724,9 @@ declare class EngramAccessService {
     private readonly budgetLocks;
     private readonly budget;
     private readonly auditAdapter;
+    /** AccessRecallSurface (access-service decomposition). Lazy; selfDeps live wiring. */
+    private _accessRecallSurface;
+    private get accessRecallSurface();
     constructor(orchestrator: Orchestrator);
     get briefingEnabled(): boolean;
     private resolveNamespace;
@@ -1798,19 +1801,6 @@ declare class EngramAccessService {
     private buildRecallResponseFromXraySnapshot;
     private serializeRecallResults;
     private storageForAbsoluteRecallPath;
-    /**
-     * Fetch raw transcript excerpts from the LCM archive for `disclosure ===
-     * "raw"` recalls (issue #677 PR 2/4).  Returns `null` for non-raw recall
-     * depths, an empty array when LCM is disabled / not initialized / has no
-     * matches, and an array of LCM-side excerpts otherwise.  Errors are
-     * swallowed and treated as "no excerpts" so a failing LCM never breaks
-     * the recall response.
-     *
-     * Namespace handling: LCM archival prefixes non-default-namespace
-     * sessions with `${namespace}:${sessionKey}` (see `observe()` around
-     * line 2498), so the lookup must mirror that prefix or raw recalls in
-     * non-default namespaces miss their own excerpts.
-     */
     private fetchRawExcerpts;
     private handleIdempotentWrite;
     private handleIdempotentRead;
@@ -1870,15 +1860,6 @@ declare class EngramAccessService {
     private executeRecall;
     recallExplain(request?: EngramAccessRecallExplainRequest): Promise<EngramAccessRecallExplainResponse>;
     recallTierExplain(sessionKey?: string, namespace?: string, authenticatedPrincipal?: string): Promise<RecallExplainJsonPayload>;
-    /**
-     * Recall X-ray (issue #570).  Runs a recall with `xrayCapture: true`
-     * and returns the resulting snapshot as structured JSON so every
-     * surface (CLI / HTTP / MCP) gets the same payload.  Namespace scope
-     * is enforced before the recall fires (CLAUDE.md rule 42 — read and
-     * write paths must resolve through the same namespace layer) so an
-     * unauthorized principal cannot capture an x-ray for a namespace it
-     * cannot read.
-     */
     recallXray(request: {
         query: string;
         sessionKey?: string;
@@ -2827,4 +2808,4 @@ declare class EngramAccessService {
     }): Promise<MemoryPromotionResult>;
 }
 
-export { type EngramAccessOfflineSyncFilesRequest as $, type ArchitectureSurfaceRequest as A, type EngramAccessLcmCompactionFlushRequest as B, type CodegraphSurfaceRequest as C, type DecisionSurfaceRequest as D, type EngramAccessMemoryResponse as E, type EngramAccessLcmCompactionFlushResponse as F, type EngramAccessLcmCompactionRecordRequest as G, type EngramAccessLcmCompactionRecordResponse as H, type EngramAccessLcmSearchRequest as I, type EngramAccessLcmSearchResponse as J, type EngramAccessLcmStatusResponse as K, type EngramAccessMaintenanceResponse as L, type EngramAccessMemoryBrowseRequest as M, type EngramAccessMemoryBrowseResponse as N, type EngramAccessMemoryRecord as O, type ProcedureStatsConfigSnapshot as P, type EngramAccessMemoryStoreRequest as Q, type EngramAccessMemorySummary as R, type EngramAccessObserveMessage as S, type EngramAccessObserveRequest as T, type EngramAccessObserveResponse as U, type EngramAccessOfflineSyncApplyFileContentRequest as V, type EngramAccessOfflineSyncApplyFileContentResponse as W, type EngramAccessOfflineSyncApplyRequest as X, type EngramAccessOfflineSyncApplyResponse as Y, type EngramAccessOfflineSyncFileContentRequest as Z, type EngramAccessOfflineSyncFileContentResponse as _, type ArchitectureSurfaceResponse as a, type EngramAccessOfflineSyncFilesResponse as a0, type EngramAccessOfflineSyncSnapshotRequest as a1, type EngramAccessOfflineSyncSnapshotResponse as a2, type EngramAccessOfflineSyncSnapshotStreamResponse as a3, type EngramAccessQmdCollectionState as a4, type EngramAccessQmdHealthResponse as a5, type EngramAccessQualityResponse as a6, type EngramAccessRecallExplainRequest as a7, type EngramAccessRecallExplainResponse as a8, type EngramAccessRecallRequest as a9, type EngramAccessReviewDispositionRequest as aa, type EngramAccessReviewDispositionResponse as ab, type EngramAccessReviewQueueResponse as ac, type EngramAccessScopeDebug as ad, type EngramAccessSetCodingContextRequest as ae, type EngramAccessSuggestionSubmitRequest as af, type EngramAccessTimelineResponse as ag, type EngramAccessTrustZoneBrowseRequest as ah, type EngramAccessTrustZoneBrowseResponse as ai, type EngramAccessTrustZoneDemoSeedRequest as aj, type EngramAccessTrustZoneDemoSeedResponse as ak, type EngramAccessTrustZonePromoteRequest as al, type EngramAccessTrustZonePromoteResponse as am, type EngramAccessTrustZoneRecordSummary as an, type EngramAccessTrustZoneStatusResponse as ao, type EngramAccessWriteEnvelope as ap, type MemoryScopePlan as aq, shapeMemorySummary as ar, type DecisionSurfaceResponse as b, type DeltaSurfaceRequest as c, type DeltaSurfaceResponse as d, type EngramAccessWriteResponse as e, type CodegraphSurfaceResponse as f, EngramAccessService as g, type EngramAccessRecallResponse as h, EngramAccessInputError as i, type ProcedureStatsRecent as j, type ProcedureStatsReport as k, type ProcedureStatusCounts as l, computeProcedureStats as m, formatProcedureStatsText as n, type CodingScopedWriteInput as o, ENGRAM_ACCESS_WRITE_SCHEMA_VERSION as p, type EngramAccessActionConfidenceRequest as q, type EngramAccessActionConfidenceResponse as r, type EngramAccessBriefingRequest as s, type EngramAccessBriefingResponse as t, type EngramAccessCapsuleListResponse as u, type EngramAccessDaySummaryRequest as v, type EngramAccessEntityListResponse as w, type EngramAccessEntityResponse as x, type EngramAccessEntitySummary as y, type EngramAccessHealthResponse as z };
+export { type EngramAccessOfflineSyncFileContentRequest as $, type ArchitectureSurfaceRequest as A, type EngramAccessEntityResponse as B, type CodegraphSurfaceRequest as C, type DecisionSurfaceRequest as D, type EngramAccessMemoryResponse as E, type EngramAccessEntitySummary as F, type EngramAccessHealthResponse as G, type EngramAccessLcmCompactionFlushRequest as H, type EngramAccessLcmCompactionFlushResponse as I, type EngramAccessLcmCompactionRecordRequest as J, type EngramAccessLcmCompactionRecordResponse as K, type EngramAccessLcmSearchRequest as L, type EngramAccessLcmSearchResponse as M, type EngramAccessLcmStatusResponse as N, type EngramAccessMaintenanceResponse as O, type ProcedureStatsConfigSnapshot as P, type EngramAccessMemoryBrowseRequest as Q, type EngramAccessMemoryBrowseResponse as R, type EngramAccessMemoryRecord as S, type EngramAccessMemoryStoreRequest as T, type EngramAccessObserveMessage as U, type EngramAccessObserveRequest as V, type EngramAccessObserveResponse as W, type EngramAccessOfflineSyncApplyFileContentRequest as X, type EngramAccessOfflineSyncApplyFileContentResponse as Y, type EngramAccessOfflineSyncApplyRequest as Z, type EngramAccessOfflineSyncApplyResponse as _, type ArchitectureSurfaceResponse as a, type EngramAccessOfflineSyncFileContentResponse as a0, type EngramAccessOfflineSyncFilesRequest as a1, type EngramAccessOfflineSyncFilesResponse as a2, type EngramAccessOfflineSyncSnapshotRequest as a3, type EngramAccessOfflineSyncSnapshotResponse as a4, type EngramAccessOfflineSyncSnapshotStreamResponse as a5, type EngramAccessQmdCollectionState as a6, type EngramAccessQmdHealthResponse as a7, type EngramAccessQualityResponse as a8, type EngramAccessRecallExplainRequest as a9, type EngramAccessRecallExplainResponse as aa, type EngramAccessReviewDispositionRequest as ab, type EngramAccessReviewDispositionResponse as ac, type EngramAccessReviewQueueResponse as ad, type EngramAccessScopeDebug as ae, type EngramAccessSuggestionSubmitRequest as af, type EngramAccessTimelineResponse as ag, type EngramAccessTrustZoneBrowseRequest as ah, type EngramAccessTrustZoneBrowseResponse as ai, type EngramAccessTrustZoneDemoSeedRequest as aj, type EngramAccessTrustZoneDemoSeedResponse as ak, type EngramAccessTrustZonePromoteRequest as al, type EngramAccessTrustZonePromoteResponse as am, type EngramAccessTrustZoneRecordSummary as an, type EngramAccessTrustZoneStatusResponse as ao, type EngramAccessWriteEnvelope as ap, type MemoryScopePlan as aq, shapeMemorySummary as ar, type DecisionSurfaceResponse as b, type DeltaSurfaceRequest as c, type DeltaSurfaceResponse as d, type EngramAccessWriteResponse as e, type CodegraphSurfaceResponse as f, type EngramAccessRecallResponse as g, type EngramAccessMemorySummary as h, type EngramAccessSetCodingContextRequest as i, type EngramAccessRecallRequest as j, EngramAccessService as k, EngramAccessInputError as l, type ProcedureStatsRecent as m, type ProcedureStatsReport as n, type ProcedureStatusCounts as o, computeProcedureStats as p, formatProcedureStatsText as q, type CodingScopedWriteInput as r, ENGRAM_ACCESS_WRITE_SCHEMA_VERSION as s, type EngramAccessActionConfidenceRequest as t, type EngramAccessActionConfidenceResponse as u, type EngramAccessBriefingRequest as v, type EngramAccessBriefingResponse as w, type EngramAccessCapsuleListResponse as x, type EngramAccessDaySummaryRequest as y, type EngramAccessEntityListResponse as z };

package/dist/access-service.d.ts

@@ -1,10 +1,10 @@
-export { o as CodingScopedWriteInput, p as ENGRAM_ACCESS_WRITE_SCHEMA_VERSION, q as EngramAccessActionConfidenceRequest, r as EngramAccessActionConfidenceResponse, s as EngramAccessBriefingRequest, t as EngramAccessBriefingResponse, u as EngramAccessCapsuleListResponse, v as EngramAccessDaySummaryRequest, w as EngramAccessEntityListResponse, x as EngramAccessEntityResponse, y as EngramAccessEntitySummary, z as EngramAccessHealthResponse, i as EngramAccessInputError, B as EngramAccessLcmCompactionFlushRequest, F as EngramAccessLcmCompactionFlushResponse, G as EngramAccessLcmCompactionRecordRequest, H as EngramAccessLcmCompactionRecordResponse, I as EngramAccessLcmSearchRequest, J as EngramAccessLcmSearchResponse, K as EngramAccessLcmStatusResponse, L as EngramAccessMaintenanceResponse, M as EngramAccessMemoryBrowseRequest, N as EngramAccessMemoryBrowseResponse, O as EngramAccessMemoryRecord, E as EngramAccessMemoryResponse, Q as EngramAccessMemoryStoreRequest, R as EngramAccessMemorySummary, S as EngramAccessObserveMessage, T as EngramAccessObserveRequest, U as EngramAccessObserveResponse, V as EngramAccessOfflineSyncApplyFileContentRequest, W as EngramAccessOfflineSyncApplyFileContentResponse, X as EngramAccessOfflineSyncApplyRequest, Y as EngramAccessOfflineSyncApplyResponse, Z as EngramAccessOfflineSyncFileContentRequest, _ as EngramAccessOfflineSyncFileContentResponse, $ as EngramAccessOfflineSyncFilesRequest, a0 as EngramAccessOfflineSyncFilesResponse, a1 as EngramAccessOfflineSyncSnapshotRequest, a2 as EngramAccessOfflineSyncSnapshotResponse, a3 as EngramAccessOfflineSyncSnapshotStreamResponse, a4 as EngramAccessQmdCollectionState, a5 as EngramAccessQmdHealthResponse, a6 as EngramAccessQualityResponse, a7 as EngramAccessRecallExplainRequest, a8 as EngramAccessRecallExplainResponse, a9 as EngramAccessRecallRequest, h as EngramAccessRecallResponse, aa as EngramAccessReviewDispositionRequest, ab as EngramAccessReviewDispositionResponse, ac as EngramAccessReviewQueueResponse, ad as EngramAccessScopeDebug, g as EngramAccessService, ae as EngramAccessSetCodingContextRequest, af as EngramAccessSuggestionSubmitRequest, ag as EngramAccessTimelineResponse, ah as EngramAccessTrustZoneBrowseRequest, ai as EngramAccessTrustZoneBrowseResponse, aj as EngramAccessTrustZoneDemoSeedRequest, ak as EngramAccessTrustZoneDemoSeedResponse, al as EngramAccessTrustZonePromoteRequest, am as EngramAccessTrustZonePromoteResponse, an as EngramAccessTrustZoneRecordSummary, ao as EngramAccessTrustZoneStatusResponse, ap as EngramAccessWriteEnvelope, e as EngramAccessWriteResponse, aq as MemoryScopePlan, ar as shapeMemorySummary } from './access-service-DmAEOJdJ.js';
+export { r as CodingScopedWriteInput, s as ENGRAM_ACCESS_WRITE_SCHEMA_VERSION, t as EngramAccessActionConfidenceRequest, u as EngramAccessActionConfidenceResponse, v as EngramAccessBriefingRequest, w as EngramAccessBriefingResponse, x as EngramAccessCapsuleListResponse, y as EngramAccessDaySummaryRequest, z as EngramAccessEntityListResponse, B as EngramAccessEntityResponse, F as EngramAccessEntitySummary, G as EngramAccessHealthResponse, l as EngramAccessInputError, H as EngramAccessLcmCompactionFlushRequest, I as EngramAccessLcmCompactionFlushResponse, J as EngramAccessLcmCompactionRecordRequest, K as EngramAccessLcmCompactionRecordResponse, L as EngramAccessLcmSearchRequest, M as EngramAccessLcmSearchResponse, N as EngramAccessLcmStatusResponse, O as EngramAccessMaintenanceResponse, Q as EngramAccessMemoryBrowseRequest, R as EngramAccessMemoryBrowseResponse, S as EngramAccessMemoryRecord, E as EngramAccessMemoryResponse, T as EngramAccessMemoryStoreRequest, h as EngramAccessMemorySummary, U as EngramAccessObserveMessage, V as EngramAccessObserveRequest, W as EngramAccessObserveResponse, X as EngramAccessOfflineSyncApplyFileContentRequest, Y as EngramAccessOfflineSyncApplyFileContentResponse, Z as EngramAccessOfflineSyncApplyRequest, _ as EngramAccessOfflineSyncApplyResponse, $ as EngramAccessOfflineSyncFileContentRequest, a0 as EngramAccessOfflineSyncFileContentResponse, a1 as EngramAccessOfflineSyncFilesRequest, a2 as EngramAccessOfflineSyncFilesResponse, a3 as EngramAccessOfflineSyncSnapshotRequest, a4 as EngramAccessOfflineSyncSnapshotResponse, a5 as EngramAccessOfflineSyncSnapshotStreamResponse, a6 as EngramAccessQmdCollectionState, a7 as EngramAccessQmdHealthResponse, a8 as EngramAccessQualityResponse, a9 as EngramAccessRecallExplainRequest, aa as EngramAccessRecallExplainResponse, j as EngramAccessRecallRequest, g as EngramAccessRecallResponse, ab as EngramAccessReviewDispositionRequest, ac as EngramAccessReviewDispositionResponse, ad as EngramAccessReviewQueueResponse, ae as EngramAccessScopeDebug, k as EngramAccessService, i as EngramAccessSetCodingContextRequest, af as EngramAccessSuggestionSubmitRequest, ag as EngramAccessTimelineResponse, ah as EngramAccessTrustZoneBrowseRequest, ai as EngramAccessTrustZoneBrowseResponse, aj as EngramAccessTrustZoneDemoSeedRequest, ak as EngramAccessTrustZoneDemoSeedResponse, al as EngramAccessTrustZonePromoteRequest, am as EngramAccessTrustZonePromoteResponse, an as EngramAccessTrustZoneRecordSummary, ao as EngramAccessTrustZoneStatusResponse, ap as EngramAccessWriteEnvelope, e as EngramAccessWriteResponse, aq as MemoryScopePlan, ar as shapeMemorySummary } from './access-service-C2cOHQvg.js';
 import './storage.js';
 import './types-B1VHaf2w.js';
 import './recall-explain-renderer.js';
-import './types-D4NYDtXI.js';
+import './types-BfI4uJeb.js';
 import './recall-audit-anomaly.js';
-import './orchestrator-D7bb8ZGp.js';
+import './orchestrator-BhxMxtQJ.js';
 import './explicit-capture.js';
 import './cross-namespace-budget.js';
 import './maintenance/memory-governance.js';
@@ -23,7 +23,7 @@ import './transfer/capsule-export.js';
 import './capsule-cli.js';
 import './offline-sync.js';
 import './action-confidence.js';
-import './catalog-BpOcwHdE.js';
+import './catalog-D_FvzTM0.js';
 import './page-versioning.js';
 import './consolidation-operator.js';
 import './memory-projection-store.js';
@@ -53,7 +53,7 @@ import './utility-runtime.js';
 import './tier-routing.js';
 import './lifecycle.js';
 import './orchestration/compression-guideline-coordinator.js';
-import './semantic-consolidation-CTfbVwCA.js';
+import './semantic-consolidation-BrsoFeMP.js';
 import './connectors/codex-materialize.js';
 import './logger.js';
 import './embedding-fallback.js';