@remnic/core 9.3.771 → 9.4.1

package/dist/verified-recall.js

@@ -1,37 +1,37 @@
 import {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
-} from "./chunk-OTMAYEY5.js";
-import "./chunk-7FL4CNPV.js";
-import "./chunk-EGLUVV6B.js";
-import "./chunk-L2B3EE7B.js";
+} from "./chunk-66FLU5BT.js";
+import "./chunk-2A3OXAP2.js";
+import "./chunk-M7GGMGMZ.js";
 import "./chunk-M7XQSUBB.js";
+import "./chunk-L2B3EE7B.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
-import "./chunk-TKZ3AL5V.js";
+import "./chunk-EHK6KZHK.js";
 import "./chunk-6CIAGZ6X.js";
 import "./chunk-SVOZFLIQ.js";
 import "./chunk-LTJAMRGI.js";
 import "./chunk-J6A3CX5N.js";
-import "./chunk-DQC3ZZYM.js";
+import "./chunk-4KJLYTLS.js";
 import "./chunk-JS2HKKOK.js";
 import "./chunk-AWJ2FHCF.js";
 import "./chunk-42JKGUFJ.js";
 import "./chunk-RULE4VG5.js";
 import "./chunk-SCU65EZI.js";
-import "./chunk-SXN3LCUT.js";
-import "./chunk-6KYMPV2O.js";
+import "./chunk-RHOZ5LLO.js";
+import "./chunk-RL6NEVXT.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
-import "./chunk-YTU7WKYN.js";
+import "./chunk-MNUHL34L.js";
 import "./chunk-AAD2ZS6P.js";
 import "./chunk-G7D6GZ5J.js";
 import "./chunk-VF4XKTX3.js";
 import "./chunk-W5H6ZRPT.js";
-import "./chunk-VUA4S7P6.js";
-import "./chunk-IQVQJJL7.js";
+import "./chunk-JIKJPDQJ.js";
+import "./chunk-K2ZLHESQ.js";
 import "./chunk-L2EXJQJP.js";
-import "./chunk-VL7DP3OW.js";
+import "./chunk-VFSP73LP.js";
 import "./chunk-RGMVMVMF.js";
 import "./chunk-N7RWREIQ.js";
 import "./chunk-OEHCMALU.js";
@@ -40,7 +40,7 @@ import "./chunk-5GKPFL3S.js";
 import "./chunk-4DJQYKMN.js";
 import "./chunk-EYIEWJNI.js";
 import "./chunk-JUC24CTX.js";
-import "./chunk-NU3CSQ4H.js";
+import "./chunk-37CTGERM.js";
 import "./chunk-J2HSAU72.js";
 import "./chunk-A6XUJE5D.js";
 import "./chunk-P7FMDTKL.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.3.771",
+  "version": "9.4.1",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -3000,7 +3000,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.3.771"
+    "@remnic/coding-graph": "^9.4.1"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/logger.test.ts

@@ -0,0 +1,120 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+
+import { type LoggerBackend, initLogger, log } from "./logger.js";
+
+const FIXED = "2026-07-11T20:00:00.000Z";
+
+function capture(): { lines: string[]; backend: LoggerBackend } {
+  const lines: string[] = [];
+  const push =
+    (level: string) =>
+    (msg: string, ...args: unknown[]) => {
+      lines.push(args.length ? `${level}|${msg}|${JSON.stringify(args)}` : `${level}|${msg}`);
+    };
+  return {
+    lines,
+    backend: {
+      info: push("info"),
+      warn: push("warn"),
+      error: push("error"),
+      debug: push("debug"),
+    },
+  };
+}
+
+const savedEnv = process.env.REMNIC_LOG_TIMESTAMPS;
+test.afterEach(() => {
+  if (savedEnv === undefined) Reflect.deleteProperty(process.env, "REMNIC_LOG_TIMESTAMPS");
+  else process.env.REMNIC_LOG_TIMESTAMPS = savedEnv;
+  // Reset to a silent backend (module default is NOOP) so this suite never
+  // leaks console output or timestamp state into sibling suites in-process.
+  initLogger({ info() {}, warn() {}, error() {}, debug() {} }, false, { timestamps: true });
+});
+
+test("prefixes each level with an ISO 8601 timestamp by default", () => {
+  const { lines, backend } = capture();
+  Reflect.deleteProperty(process.env, "REMNIC_LOG_TIMESTAMPS");
+  initLogger(backend, true, { clock: () => FIXED });
+
+  log.info("hello");
+  log.warn("careful");
+  log.error("boom", new Error("bad"));
+  log.debug("trace");
+
+  assert.deepEqual(lines, [
+    `info|${FIXED} remnic: hello`,
+    `warn|${FIXED} remnic: careful`,
+    `error|${FIXED} remnic: boom — bad`,
+    `debug|${FIXED} remnic [debug]: trace`,
+  ]);
+});
+
+test("timestamps: false restores the legacy 'remnic: ' format", () => {
+  const { lines, backend } = capture();
+  initLogger(backend, false, { timestamps: false, clock: () => FIXED });
+
+  log.info("hello");
+  assert.equal(lines[0], "info|remnic: hello");
+  assert.ok(!lines[0].includes(FIXED));
+});
+
+test("REMNIC_LOG_TIMESTAMPS=false disables the prefix", () => {
+  const { lines, backend } = capture();
+  process.env.REMNIC_LOG_TIMESTAMPS = "false";
+  initLogger(backend, false, { clock: () => FIXED });
+
+  log.info("hello");
+  assert.equal(lines[0], "info|remnic: hello");
+});
+
+test("explicit option overrides the env var", () => {
+  const { lines, backend } = capture();
+  process.env.REMNIC_LOG_TIMESTAMPS = "false";
+  initLogger(backend, false, { timestamps: true, clock: () => FIXED });
+
+  log.info("hello");
+  assert.equal(lines[0], `info|${FIXED} remnic: hello`);
+});
+
+test("emits a real ISO 8601 timestamp when no clock is injected", () => {
+  const { lines, backend } = capture();
+  Reflect.deleteProperty(process.env, "REMNIC_LOG_TIMESTAMPS");
+  initLogger(backend, false);
+
+  log.info("hello");
+  const m = /^info\|(\S+) remnic: hello$/.exec(lines[0]);
+  assert.ok(m, `unexpected line: ${lines[0]}`);
+  assert.ok(!Number.isNaN(Date.parse(m[1])));
+  assert.equal(new Date(m[1]).toISOString(), m[1]);
+});
+
+test("preserves variadic args and gates debug on the debug flag", () => {
+  const { lines, backend } = capture();
+  initLogger(backend, false, { clock: () => FIXED });
+  log.debug("suppressed");
+  assert.equal(lines.length, 0, "debug must be gated when debug=false");
+
+  initLogger(backend, true, { clock: () => FIXED });
+  log.info("withargs", { a: 1 });
+  assert.equal(lines.at(-1), `info|${FIXED} remnic: withargs|[{"a":1}]`);
+});
+
+test("unrecognized REMNIC_LOG_TIMESTAMPS falls through to the default (on)", () => {
+  const { lines, backend } = capture();
+  process.env.REMNIC_LOG_TIMESTAMPS = "maybe";
+  initLogger(backend, false, { clock: () => FIXED });
+
+  log.info("hello");
+  assert.equal(lines[0], `info|${FIXED} remnic: hello`);
+});
+
+test("empty or whitespace-only REMNIC_LOG_TIMESTAMPS reads as unset (default on)", () => {
+  for (const raw of ["", "   "]) {
+    const { lines, backend } = capture();
+    process.env.REMNIC_LOG_TIMESTAMPS = raw;
+    initLogger(backend, false, { clock: () => FIXED });
+    log.info("hello");
+    assert.equal(lines[0], `info|${FIXED} remnic: hello`, `raw=${JSON.stringify(raw)}`);
+  }
+});

package/src/logger.ts

@@ -12,8 +12,29 @@ const NOOP_LOGGER: LoggerBackend = {
   debug() {},
 };
 
+export interface LoggerOptions {
+  /** Prefix each emitted line with an ISO 8601 timestamp. Defaults to true. */
+  timestamps?: boolean;
+  /** Clock source for the timestamp prefix; injectable for tests. */
+  clock?: () => string;
+}
+
 let _backend: LoggerBackend = NOOP_LOGGER;
 let _debug = false;
+let _timestamps = true;
+let _clock: () => string = () => new Date().toISOString();
+
+// Coerce a boolean-like env string. Empty/whitespace-only and unrecognized
+// values return undefined so callers fall through to the default (timestamps
+// on) rather than silently disabling — an empty env var reads as "unset".
+function coerceBool(value: string | undefined): boolean | undefined {
+  if (value === undefined) return undefined;
+  const s = value.trim().toLowerCase();
+  if (s === "") return undefined;
+  if (s === "0" || s === "false" || s === "no" || s === "off") return false;
+  if (s === "1" || s === "true" || s === "yes" || s === "on") return true;
+  return undefined;
+}
 
 // Late-bind console.* rather than capturing references at module import
 // time. In production this is behaviour-identical to the pre-bound
@@ -31,28 +52,35 @@ const CONSOLE_LOGGER: LoggerBackend = {
   debug: (msg, ...args) => console.debug(msg, ...args),
 };
 
-export function initLogger(backend?: LoggerBackend, debug?: boolean): void {
+export function initLogger(backend?: LoggerBackend, debug?: boolean, options?: LoggerOptions): void {
   _backend = backend ?? CONSOLE_LOGGER;
   _debug = debug ?? false;
+  // Precedence: explicit option > REMNIC_LOG_TIMESTAMPS env > default (on).
+  _timestamps = options?.timestamps ?? coerceBool(process.env.REMNIC_LOG_TIMESTAMPS) ?? true;
+  _clock = options?.clock ?? (() => new Date().toISOString());
+}
+
+// Format one log line: "<iso> remnic: <msg>" when timestamps are enabled,
+// otherwise the legacy "remnic: <msg>". Timestamp is per-call.
+function fmt(msg: string, label = "remnic"): string {
+  const ts = _timestamps ? `${_clock()} ` : "";
+  return `${ts}${label}: ${msg}`;
 }
 
 export const log = {
   info(msg: string, ...args: unknown[]): void {
-    _backend.info(`remnic: ${msg}`, ...args);
+    _backend.info(fmt(msg), ...args);
   },
   warn(msg: string, ...args: unknown[]): void {
-    _backend.warn(`remnic: ${msg}`, ...args);
+    _backend.warn(fmt(msg), ...args);
   },
   error(msg: string, err?: unknown): void {
-    const detail =
-      err instanceof Error ? err.message : err ? String(err) : "";
-    _backend.error(
-      `remnic: ${msg}${detail ? ` — ${detail}` : ""}`,
-    );
+    const detail = err instanceof Error ? err.message : err ? String(err) : "";
+    _backend.error(fmt(`${msg}${detail ? ` — ${detail}` : ""}`));
   },
   debug(msg: string, ...args: unknown[]): void {
     if (!_debug) return;
     const fn = _backend.debug ?? _backend.info;
-    fn(`remnic [debug]: ${msg}`, ...args);
+    fn(fmt(msg, "remnic [debug]"), ...args);
   },
 };

package/src/memory-projection-open-failure.test.ts

@@ -0,0 +1,322 @@
+import assert from "node:assert/strict";
+import { mkdir, mkdtemp, rm, writeFile } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import test from "node:test";
+
+import { initLogger } from "./logger.js";
+import { rebuildMemoryProjection } from "./maintenance/rebuild-memory-projection.js";
+import {
+  __resetProjectionOpenFailureSuppressionForTest,
+  __setProjectionReadonlyOpenerForTest,
+  getMemoryProjectionPath,
+  probeProjectionHealth,
+  readProjectedMemoryBrowse,
+} from "./memory-projection-store.js";
+import { summarizeProjectionHealth } from "./operator-toolkit.js";
+import { openBetterSqlite3 } from "./runtime/better-sqlite.js";
+import { StorageManager } from "./storage.js";
+
+// Serialized: every test mutates the process-global logger backend and the
+// module-level projection opener / rate-limit map. concurrency:false keeps
+// them from racing each other.
+const SERIAL = { concurrency: false } as const;
+
+// The opener seam expects the real opener signature; derive it without
+// importing the (unexported) alias.
+type ProjectionOpener = NonNullable<Parameters<typeof __setProjectionReadonlyOpenerForTest>[0]>;
+
+function abiStyleError(): Error {
+  // Mirrors the real native-binding mismatch better-sqlite3 throws when its
+  // addon was compiled for a different Node.js ABI (issue #1829 root cause).
+  // Classified as a native mismatch by isLikelyBetterSqlite3NativeBindingError.
+  return new Error(
+    "The module was compiled against a different Node.js version using NODE_MODULE_VERSION 127. " +
+      "This version of Node.js requires NODE_MODULE_VERSION 137."
+  );
+}
+
+function captureLogs(): { warns: string[]; errors: string[]; restore: () => void } {
+  const warns: string[] = [];
+  const errors: string[] = [];
+  initLogger({
+    info() {},
+    warn(msg) {
+      warns.push(msg);
+    },
+    error(msg) {
+      errors.push(msg);
+    },
+    debug() {},
+  });
+  return { warns, errors, restore: () => initLogger() };
+}
+
+test("absent projection index → quiet fallback, no error log, probe reports absent", SERIAL, async () => {
+  const dir = await mkdtemp(path.join(os.tmpdir(), "remnic-proj-absent-"));
+  const { warns, restore } = captureLogs();
+  try {
+    // No projection file exists — the normal cold-install / never-built case.
+    assert.equal(probeProjectionHealth(dir).state, "absent");
+    assert.equal(readProjectedMemoryBrowse(dir, { limit: 5, offset: 0 }), null);
+    // The distinguishing guarantee from issue #1829: a MISSING file must stay
+    // quiet (no error spam). Only a PRESENT-but-unopenable file logs.
+    assert.equal(warns.length, 0);
+  } finally {
+    restore();
+    await rm(dir, { recursive: true, force: true });
+  }
+});
+
+test("present index + ABI-style open failure → distinct rate-limited warn + null + doctor signal", SERIAL, async () => {
+  const dir = await mkdtemp(path.join(os.tmpdir(), "remnic-proj-abi-"));
+  const { warns, restore } = captureLogs();
+  __resetProjectionOpenFailureSuppressionForTest();
+  try {
+    // Build a real projection so the index file genuinely EXISTS on disk;
+    // then inject an opener that throws the wrong-ABI error on every open.
+    await rebuildMemoryProjection({ memoryDir: dir, dryRun: false });
+    assert.ok(getMemoryProjectionPath(dir));
+    const throwingOpener: ProjectionOpener = () => {
+      throw abiStyleError();
+    };
+    const restoreOpener = __setProjectionReadonlyOpenerForTest(throwingOpener);
+
+    try {
+      // The read path returns null (full-scan fallback trigger preserved),
+      // but now emits the DISTINCT real-error warn that was missing before.
+      const first = readProjectedMemoryBrowse(dir, { limit: 5, offset: 0 });
+      assert.equal(first, null);
+      assert.equal(warns.length, 1);
+      const msg = warns[0];
+      assert.ok(msg, "expected a distinct projection open-failure warn");
+      assert.match(msg, /present but could not be opened/);
+      assert.match(msg, /wrong Node\.js ABI/);
+
+      // Doctor lens classifies the same failure.
+      const probe = probeProjectionHealth(dir);
+      assert.equal(probe.state, "unopenable");
+      assert.equal(probe.nativeBindingMismatch, true);
+
+      // Rate limit: a second open within the window is suppressed.
+      const second = readProjectedMemoryBrowse(dir, { limit: 5, offset: 0 });
+      assert.equal(second, null);
+      assert.equal(warns.length, 1, "rate limit must suppress the repeat warn");
+
+      // After resetting suppression, the warn fires again.
+      __resetProjectionOpenFailureSuppressionForTest();
+      readProjectedMemoryBrowse(dir, { limit: 5, offset: 0 });
+      assert.equal(warns.length, 2, "warn fires again after suppression reset");
+    } finally {
+      restoreOpener();
+    }
+  } finally {
+    restore();
+    await rm(dir, { recursive: true, force: true });
+  }
+});
+
+test("present index + WRAPPED ABI open failure (cause = native-binding error) → still reports the native-binding hint", SERIAL, async () => {
+  const dir = await mkdtemp(path.join(os.tmpdir(), "remnic-proj-wrapped-abi-"));
+  const { warns, restore } = captureLogs();
+  __resetProjectionOpenFailureSuppressionForTest();
+  try {
+    await rebuildMemoryProjection({ memoryDir: dir, dryRun: false });
+    // Mirrors the production path: loadBetterSqlite3() catches the ABI error
+    // and re-throws a sanitized unavailableError WRAPPER whose message drops
+    // the ABI markers. The original error survives only on .cause. Before
+    // #1848 the classifier inspected only the wrapper's message and MISSED the
+    // mismatch, so the warn and doctor check wrongly suggested rebuilding the
+    // projection instead of better-sqlite3.
+    const throwingOpener: ProjectionOpener = () => {
+      throw new Error(
+        "better-sqlite3 is unavailable. Remnic attempted to load the native SQLite binding and could not.",
+        { cause: abiStyleError() },
+      );
+    };
+    const restoreOpener = __setProjectionReadonlyOpenerForTest(throwingOpener);
+
+    try {
+      // Browse warn carries the native-binding ABI hint (not the projection-rebuild hint).
+      const first = readProjectedMemoryBrowse(dir, { limit: 5, offset: 0 });
+      assert.equal(first, null);
+      assert.equal(warns.length, 1);
+      assert.match(warns[0], /wrong Node\.js ABI/);
+      assert.doesNotMatch(warns[0], /rebuild-memory-projection/);
+
+      // Doctor lens classifies the SAME wrapped failure as a native-binding mismatch.
+      const probe = probeProjectionHealth(dir);
+      assert.equal(probe.state, "unopenable");
+      assert.equal(probe.nativeBindingMismatch, true);
+    } finally {
+      restoreOpener();
+    }
+  } finally {
+    restore();
+    await rm(dir, { recursive: true, force: true });
+  }
+});
+
+test("present index + non-ABI open failure → distinct warn without the native-binding hint", SERIAL, async () => {
+  const dir = await mkdtemp(path.join(os.tmpdir(), "remnic-proj-cantopen-"));
+  const { warns, restore } = captureLogs();
+  __resetProjectionOpenFailureSuppressionForTest();
+  try {
+    await rebuildMemoryProjection({ memoryDir: dir, dryRun: false });
+    // A corrupt-file / permission style failure: carries a stable SQLite
+    // code but is NOT a native-binding mismatch. Tests the failure CLASS,
+    // not just the reported ABI instance (hardening playbook).
+    const cantOpen = Object.assign(new Error("unable to open database file"), {
+      code: "SQLITE_CANTOPEN",
+    });
+    const restoreOpener = __setProjectionReadonlyOpenerForTest((() => {
+      throw cantOpen;
+    }) as ProjectionOpener);
+    try {
+      assert.equal(readProjectedMemoryBrowse(dir, { limit: 5, offset: 0 }), null);
+      assert.equal(warns.length, 1);
+      const msg = warns[0];
+      assert.ok(msg, "expected a distinct projection open-failure warn");
+      assert.match(msg, /present but could not be opened/);
+      assert.match(msg, /SQLITE_CANTOPEN/);
+      assert.doesNotMatch(msg, /native binding/);
+      const probe = probeProjectionHealth(dir);
+      assert.equal(probe.state, "unopenable");
+      assert.equal(probe.nativeBindingMismatch, false);
+    } finally {
+      restoreOpener();
+    }
+  } finally {
+    restore();
+    await rm(dir, { recursive: true, force: true });
+  }
+});
+
+test("full-scan fallback still returns results when the projection cannot serve", SERIAL, async () => {
+  const dir = await mkdtemp(path.join(os.tmpdir(), "remnic-proj-fullscan-"));
+  const { restore } = captureLogs();
+  try {
+    const storage = new StorageManager(dir);
+    const a = await storage.writeMemory("fact", "alpha synthetic fact", { source: "test" });
+    const b = await storage.writeMemory("fact", "beta synthetic fact", { source: "test" });
+
+    // Absent projection: the browse returns null (the trigger the access
+    // layer keys on to run its full-corpus scan) ...
+    assert.equal(readProjectedMemoryBrowse(dir, { limit: 10, offset: 0 }), null);
+
+    // ... and the full-corpus data source the access layer scans still
+    // holds every memory (issue #1829: the fallback must keep serving).
+    const full = [...(await storage.readAllMemories()), ...(await storage.readArchivedMemories())];
+    const ids = new Set(full.map((m) => m.frontmatter.id));
+    assert.ok(ids.has(a.id));
+    assert.ok(ids.has(b.id));
+    assert.equal(full.length, 2);
+
+    // Regression guard for the exact #1829 failure: build the projection,
+    // then make it unopenable, and confirm the null trigger STILL fires so
+    // the full scan is reached (not a throw, not a stale cached page).
+    await rebuildMemoryProjection({ memoryDir: dir, dryRun: false });
+    const restoreOpener = __setProjectionReadonlyOpenerForTest((() => {
+      throw abiStyleError();
+    }) as ProjectionOpener);
+    try {
+      assert.equal(
+        readProjectedMemoryBrowse(dir, { limit: 10, offset: 0 }),
+        null,
+        "unopenable projection must return null so the full scan runs"
+      );
+    } finally {
+      restoreOpener();
+    }
+  } finally {
+    restore();
+    await rm(dir, { recursive: true, force: true });
+  }
+});
+
+test("present + valid projection → probe openable + doctor ok (schema validation passes)", SERIAL, async () => {
+  const dir = await mkdtemp(path.join(os.tmpdir(), "remnic-proj-healthy-"));
+  try {
+    await rebuildMemoryProjection({ memoryDir: dir, dryRun: false });
+    const probe = probeProjectionHealth(dir);
+    assert.equal(probe.state, "openable");
+    assert.equal(probe.nativeBindingMismatch, false);
+    // Doctor lens reports OK for a schema-valid projection (issue #1848 round 2).
+    const check = summarizeProjectionHealth({ memoryDir: dir });
+    assert.equal(check.status, "ok");
+    assert.match(check.summary, /opens cleanly/i);
+  } finally {
+    await rm(dir, { recursive: true, force: true });
+  }
+});
+
+test("present projection with MISSING schema tables → probe present-but-invalid (doctor non-ok, rebuild hint)", SERIAL, async () => {
+  const dir = await mkdtemp(path.join(os.tmpdir(), "remnic-proj-no-tables-"));
+  try {
+    // Create a sqlite file that OPENS cleanly but has NO projection tables
+    // (mirrors a half-built / stale / externally-created .sqlite that opens
+    // but cannot serve any browse query — issue #1848 round 2 root cause).
+    const dbPath = getMemoryProjectionPath(dir);
+    await mkdir(path.dirname(dbPath), { recursive: true });
+    const empty = openBetterSqlite3(dbPath); // creates a valid empty db
+    empty.close();
+
+    // Before #1848 round 2 this reported "openable" → doctor said ok while
+    // browse silently fell back to full-corpus scans on every memory list.
+    const probe = probeProjectionHealth(dir);
+    assert.equal(probe.state, "present-but-invalid");
+    assert.equal(probe.nativeBindingMismatch, false);
+    assert.ok(probe.detail, "expected a path-free detail for the schema failure");
+
+    // Doctor lens surfaces this as an ERROR with a rebuild hint — NOT ok.
+    const check = summarizeProjectionHealth({ memoryDir: dir });
+    assert.equal(check.status, "error");
+    assert.match(check.summary, /missing or unreadable/i);
+    assert.ok(check.remediation);
+    assert.match(check.remediation, /rebuild-memory-projection/);
+
+    // Browse still returns null (full-scan fallback trigger) — the projection
+    // is unusable, so the access layer must reach the full corpus.
+    assert.equal(readProjectedMemoryBrowse(dir, { limit: 5, offset: 0 }), null);
+  } finally {
+    await rm(dir, { recursive: true, force: true });
+  }
+});
+
+test("present projection with memory_current MISSING required columns → probe present-but-invalid (doctor non-ok, rebuild hint)", SERIAL, async () => {
+  const dir = await mkdtemp(path.join(os.tmpdir(), "remnic-proj-no-cols-"));
+  try {
+    // A sqlite file that opens cleanly AND has a `memory_current` table, but
+    // the table is stale/half-built with none of the columns
+    // readProjectedMemoryBrowse SELECTs (issue #1848 round 3 root cause). The
+    // round-2 check only verified the table exists + answers `SELECT 1`, so a
+    // file like `CREATE TABLE memory_current (x INTEGER)` was reported
+    // "openable" → doctor said healthy while browse threw on the missing
+    // memory_id/path_rel/category/... columns and silently fell back.
+    const dbPath = getMemoryProjectionPath(dir);
+    await mkdir(path.dirname(dbPath), { recursive: true });
+    const stale = openBetterSqlite3(dbPath); // creates a valid db
+    stale.exec("CREATE TABLE memory_current (x INTEGER)");
+    stale.close();
+
+    // Before round 3 this reported "openable" → doctor said ok.
+    const probe = probeProjectionHealth(dir);
+    assert.equal(probe.state, "present-but-invalid");
+    assert.equal(probe.nativeBindingMismatch, false);
+    // displayErrorDetail surfaces only the path-free error class (ProjectionSchemaError).
+    assert.ok(probe.detail, "expected a path-free detail for the missing-column schema failure");
+
+    // Doctor lens surfaces this as an ERROR with a rebuild hint — NOT ok.
+    const check = summarizeProjectionHealth({ memoryDir: dir });
+    assert.equal(check.status, "error");
+    assert.match(check.summary, /missing or unreadable/i);
+    assert.ok(check.remediation);
+    assert.match(check.remediation, /rebuild-memory-projection/);
+
+    // Browse still returns null (full-scan fallback trigger) — the projection
+    // cannot serve queries missing the browse columns.
+    assert.equal(readProjectedMemoryBrowse(dir, { limit: 5, offset: 0 }), null);
+  } finally {
+    await rm(dir, { recursive: true, force: true });
+  }
+});