@remnic/core 9.32.0 → 9.34.0

package/dist/{storage-dyBC3Q84.d.ts → storage-CyWa1Jm6.d.ts}

@@ -1,4 +1,4 @@
-import { aF as FusedWearableConversation, aG as FusedDayMeta, aH as FusedDayFile, aI as MeetingRecord, aJ as MeetingDetectionSource, aK as FusedMeeting, M as MemoryFile, l as MemoryFrontmatter, aL as EntityTimelineEntry, al as EntityStructuredSection, E as EntityFile, P as PluginConfig, x as MemoryStatus, v as MemoryCategory, an as ImportanceScore, aM as MemoryLink, F as FaithfulnessFrontmatter, O as ProvenanceSource, aN as BufferState, aO as MetaState, ag as MemoryActionEvent, z as MemoryLifecycleEvent, a7 as BufferSurpriseEvent, a6 as BehaviorSignalEvent, ah as CompressionGuidelineOptimizerState, aP as FileHygieneConfig, aQ as EntityRelationship, aR as EntityActivityEntry, aS as AccessTrackingEntry, y as MemoryProjectionCurrentState, aT as MemorySummary, az as TopicScore } from './types-D63ZI--P.js';
+import { aF as FusedWearableConversation, aG as FusedDayMeta, aH as FusedDayFile, aI as MeetingRecord, aJ as MeetingDetectionSource, aK as FusedMeeting, M as MemoryFile, l as MemoryFrontmatter, aL as EntityTimelineEntry, al as EntityStructuredSection, E as EntityFile, P as PluginConfig, x as MemoryStatus, v as MemoryCategory, an as ImportanceScore, aM as MemoryLink, F as FaithfulnessFrontmatter, O as ProvenanceSource, aN as BufferState, aO as MetaState, ag as MemoryActionEvent, z as MemoryLifecycleEvent, a7 as BufferSurpriseEvent, a6 as BehaviorSignalEvent, ah as CompressionGuidelineOptimizerState, aP as FileHygieneConfig, aQ as EntityRelationship, aR as EntityActivityEntry, aS as AccessTrackingEntry, y as MemoryProjectionCurrentState, aT as MemorySummary, az as TopicScore } from './types-5398p7Zm.js';
 import './entity-id-normalization.js';
 import { VersioningConfig } from './page-versioning.js';
 import { ConsolidationOperator } from './consolidation-operator.js';

package/dist/storage.d.ts

@@ -1,5 +1,5 @@
-import './types-D63ZI--P.js';
-export { C as ContentHashIndex, t as ContentHashIndexLockOptions, u as FactHashIndexNotAuthoritativeError, v as MemoryLifecycleEventWriteOptions, M as MemoryWriteResult, R as ReextractJobRequest, w as SealedWriteExtras, S as StorageManager, W as WriteMemoryOptions, x as buildEntitySchemaCacheKey, y as compareEntityTimestamps, z as compileEntityFacts, A as countEntityStructuredFacts, B as fingerprintEntityStructuredFacts, D as isEntitySynthesisStale, E as isValidBufferSurpriseEvent, G as normalizeFrontmatterForPath, H as normalizeStructuredSectionFacts, p as parseEntityFile, I as parseFrontmatter, J as parseFrontmatterStringValue, s as serializeEntityFile } from './storage-dyBC3Q84.js';
+import './types-5398p7Zm.js';
+export { C as ContentHashIndex, t as ContentHashIndexLockOptions, u as FactHashIndexNotAuthoritativeError, v as MemoryLifecycleEventWriteOptions, M as MemoryWriteResult, R as ReextractJobRequest, w as SealedWriteExtras, S as StorageManager, W as WriteMemoryOptions, x as buildEntitySchemaCacheKey, y as compareEntityTimestamps, z as compileEntityFacts, A as countEntityStructuredFacts, B as fingerprintEntityStructuredFacts, D as isEntitySynthesisStale, E as isValidBufferSurpriseEvent, G as normalizeFrontmatterForPath, H as normalizeStructuredSectionFacts, p as parseEntityFile, I as parseFrontmatter, J as parseFrontmatterStringValue, s as serializeEntityFile } from './storage-CyWa1Jm6.js';
 export { normalizeEntityName } from './entity-id-normalization.js';
 import './page-versioning.js';
 import './consolidation-operator.js';

package/dist/storage.js

@@ -13,15 +13,15 @@ import {
   parseFrontmatter,
   parseFrontmatterStringValue,
   serializeEntityFile
-} from "./chunk-FHBITMRY.js";
+} from "./chunk-4TGZCYHH.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-QNWXCJ76.js";
 import "./chunk-WIPEXG6R.js";
 import "./chunk-DNHVPZOD.js";
 import "./chunk-6CIAGZ6X.js";
-import "./chunk-J6A3CX5N.js";
 import "./chunk-HKF5VASQ.js";
-import "./chunk-VVDPPDDF.js";
+import "./chunk-J6A3CX5N.js";
+import "./chunk-HXDWZFNP.js";
 import "./chunk-7VUAG236.js";
 import "./chunk-EGGE52UU.js";
 import "./chunk-ILGC6JH6.js";
@@ -34,15 +34,15 @@ import {
   ContentHashIndex,
   FactHashIndexNotAuthoritativeError
 } from "./chunk-FBUE6PD3.js";
-import "./chunk-FFAZ2XFU.js";
-import "./chunk-3CSX3ETE.js";
-import "./chunk-RL6NEVXT.js";
 import "./chunk-CGASUJVP.js";
 import {
   normalizeAttributePairs,
   stripAttributesSuffix
 } from "./chunk-R3DJVOSM.js";
 import "./chunk-BT7NVCML.js";
+import "./chunk-FFAZ2XFU.js";
+import "./chunk-3CSX3ETE.js";
+import "./chunk-RL6NEVXT.js";
 import "./chunk-JYIJNNN3.js";
 import "./chunk-AAD2ZS6P.js";
 import {

package/dist/summarizer.d.ts

@@ -1,5 +1,5 @@
 import { ModelRegistry } from './model-registry.js';
-import { P as PluginConfig, G as GatewayConfig, T as TranscriptEntry, H as HourlySummary } from './types-D63ZI--P.js';
+import { P as PluginConfig, G as GatewayConfig, T as TranscriptEntry, H as HourlySummary } from './types-5398p7Zm.js';
 import { TranscriptManager } from './transcript.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';

package/dist/summary-snapshot.d.ts

@@ -1,4 +1,4 @@
-import { H as HourlySummary } from './types-D63ZI--P.js';
+import { H as HourlySummary } from './types-5398p7Zm.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';

package/dist/temporal-supersession.d.ts

@@ -1,5 +1,5 @@
-import { l as MemoryFrontmatter } from './types-D63ZI--P.js';
-import { S as StorageManager } from './storage-dyBC3Q84.js';
+import { l as MemoryFrontmatter } from './types-5398p7Zm.js';
+import { S as StorageManager } from './storage-CyWa1Jm6.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';

package/dist/temporal-timeline-recall.d.ts

@@ -1,4 +1,4 @@
-import { M as MemoryFile } from './types-D63ZI--P.js';
+import { M as MemoryFile } from './types-5398p7Zm.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';

package/dist/temporal-validity.d.ts

@@ -1,4 +1,4 @@
-import { l as MemoryFrontmatter } from './types-D63ZI--P.js';
+import { l as MemoryFrontmatter } from './types-5398p7Zm.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';

package/dist/threading.d.ts

@@ -1,4 +1,4 @@
-import { j as BufferTurn, V as ConversationThread } from './types-D63ZI--P.js';
+import { j as BufferTurn, V as ConversationThread } from './types-5398p7Zm.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';

package/dist/tier-migration.d.ts

@@ -1,5 +1,5 @@
-import { M as MemoryFile } from './types-D63ZI--P.js';
-import { S as StorageManager } from './storage-dyBC3Q84.js';
+import { M as MemoryFile } from './types-5398p7Zm.js';
+import { S as StorageManager } from './storage-CyWa1Jm6.js';
 import { MemoryTier } from './tier-routing.js';
 import { SearchBackend } from './search/port.js';
 import './message-parts/index.js';

package/dist/tier-routing.d.ts

@@ -1,4 +1,4 @@
-import { M as MemoryFile } from './types-D63ZI--P.js';
+import { M as MemoryFile } from './types-5398p7Zm.js';
 import { LifecycleSignals } from './lifecycle.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';

package/dist/tool-scoped-memory.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Tool-scoped memory guard (issue #2183).
+ *
+ * A tool-related fact extracted from a specific agent integration carries an
+ * UNQUALIFIED tool name — "use the search tool" — with no agent identity
+ * attached (the conversation handed to the extraction LLM is rendered as
+ * `[role] content` only). Promoting such a fact to the shared namespace lets a
+ * DIFFERENT integration that exposes a same-named but incompatible tool (Pi
+ * `search` = repo code search vs OpenClaw `search` = web search) consume it.
+ *
+ * `referencesAgentSpecificTool` flags fact text that references a specific
+ * tool/command invocation rather than portable knowledge. The promotion guard
+ * in `orchestration/extraction-persist.ts` uses it — when the producing
+ * integration is known (`sourceConnector`) — to keep such a fact in that
+ * integration's own namespace.
+ *
+ * Tuning bias: a FALSE POSITIVE is cheap — the fact stays in the narrower
+ * namespace, the documented safe default. A FALSE NEGATIVE is the actual
+ * cross-integration collision bug, so detection leans permissive — but it must
+ * not fire on ordinary prose.
+ */
+declare function referencesAgentSpecificTool(content: string): boolean;
+interface ToolScopeWithholdInputs {
+    content: string;
+    sourceConnector?: string;
+    procedureSteps?: ReadonlyArray<{
+        intent?: string;
+        expectedOutcome?: string;
+        toolCall?: {
+            kind?: string;
+        };
+    }>;
+}
+declare function withholdToolScopedFromSharedNamespace({ content, sourceConnector, procedureSteps, }: ToolScopeWithholdInputs): boolean;
+interface GlobalFactPromotionInputs {
+    scope: string | null | undefined;
+    content: string;
+    sourceConnector?: string;
+    procedureSteps?: ReadonlyArray<{
+        toolCall?: {
+            kind?: string;
+        };
+    }>;
+}
+declare function shouldPromoteGlobalFactToShared(inputs: GlobalFactPromotionInputs): boolean;
+
+export { type GlobalFactPromotionInputs, type ToolScopeWithholdInputs, referencesAgentSpecificTool, shouldPromoteGlobalFactToShared, withholdToolScopedFromSharedNamespace };

package/dist/tool-scoped-memory.js

@@ -0,0 +1,12 @@
+import {
+  referencesAgentSpecificTool,
+  shouldPromoteGlobalFactToShared,
+  withholdToolScopedFromSharedNamespace
+} from "./chunk-KWMXR7XS.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  referencesAgentSpecificTool,
+  shouldPromoteGlobalFactToShared,
+  withholdToolScopedFromSharedNamespace
+};
+//# sourceMappingURL=tool-scoped-memory.js.map

package/dist/tool-scoped-memory.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/topics.d.ts

@@ -1,4 +1,4 @@
-import { M as MemoryFile, az as TopicScore } from './types-D63ZI--P.js';
+import { M as MemoryFile, az as TopicScore } from './types-5398p7Zm.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';

package/dist/transcript.d.ts

@@ -1,4 +1,4 @@
-import { P as PluginConfig, T as TranscriptEntry, m as Checkpoint } from './types-D63ZI--P.js';
+import { P as PluginConfig, T as TranscriptEntry, m as Checkpoint } from './types-5398p7Zm.js';
 import { SessionIntegrityReport } from './session-integrity.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';

package/dist/transfer/backup.js

@@ -1,8 +1,8 @@
 import {
   backupMemoryDir
-} from "../chunk-2NLLXCJG.js";
+} from "../chunk-OWHERGF2.js";
 import "../chunk-765K3SAT.js";
-import "../chunk-X7Y7WX73.js";
+import "../chunk-UVYI6VIX.js";
 import "../chunk-J4EB7DNW.js";
 import "../chunk-BJMBJZ2Y.js";
 import "../chunk-UKJAGEXH.js";

package/dist/transfer/capsule-export.js

@@ -1,9 +1,9 @@
 import {
   exportCapsule,
   isValidCapsuleSince
-} from "../chunk-KQAFEZQX.js";
+} from "../chunk-5W7CTZ2E.js";
+import "../chunk-UVYI6VIX.js";
 import "../chunk-WEHSQBFR.js";
-import "../chunk-X7Y7WX73.js";
 import "../chunk-J4EB7DNW.js";
 import "../chunk-BJMBJZ2Y.js";
 import "../chunk-UKJAGEXH.js";

package/dist/transfer/capsule-import.js

@@ -1,13 +1,13 @@
 import {
   importCapsule
-} from "../chunk-65ZPVYTA.js";
+} from "../chunk-7CCVK67W.js";
 import "../chunk-6TAUHL33.js";
 import "../chunk-IJ7HK452.js";
 import "../chunk-PDJTHRAW.js";
 import "../chunk-XMMESCPD.js";
 import "../chunk-42JKGUFJ.js";
+import "../chunk-UVYI6VIX.js";
 import "../chunk-WEHSQBFR.js";
-import "../chunk-X7Y7WX73.js";
 import "../chunk-BJMBJZ2Y.js";
 import "../chunk-UKJAGEXH.js";
 import "../chunk-FP2373TW.js";

package/dist/trust-score-stage.d.ts

@@ -1,4 +1,4 @@
-import { F as FaithfulnessFrontmatter, O as ProvenanceSource, U as TrustWeights, Q as QmdSearchResult } from './types-D63ZI--P.js';
+import { F as FaithfulnessFrontmatter, O as ProvenanceSource, U as TrustWeights, Q as QmdSearchResult } from './types-5398p7Zm.js';
 import { TrustScoreResult, TrustSignals, TrustBand, TrustScoreComponent } from './trust-score.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';

package/dist/trust-score.d.ts

@@ -1,4 +1,4 @@
-import { U as TrustWeights } from './types-D63ZI--P.js';
+import { U as TrustWeights } from './types-5398p7Zm.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';

package/dist/{types-D63ZI--P.d.ts → types-5398p7Zm.d.ts}

@@ -1260,15 +1260,12 @@ type ExtractionPassSource = "base" | "proactive";
 /**
  * Scope classification for extracted facts (issue #XXX).
  *
- * - `"project"` — knowledge specific to one codebase: file paths, environment
- *   configs, deployment details, project-specific workarounds, team/stakeholder
- *   info tied to one project.
- * - `"global"` — knowledge that applies across projects: core framework bugs,
- *   library behavior, API patterns, user preferences, tool configurations,
- *   general coding patterns, infrastructure knowledge.
+ * - `"project"` — one codebase (paths, env configs, deployment, stakeholders);
+ *   also tool/command or CLI-flag instructions tied to one agent.
+ * - `"global"` — across projects: framework bugs, library/API behavior,
+ *   user preferences, coding patterns, infrastructure.
  *
- * Default is `"project"` when a coding context is active, `"global"` when no
- * coding context is present.
+ * Default is `"project"` with a coding context active, else `"global"`.
  */
 type MemoryScope = "project" | "global";
 type SlotMismatchMode = "error" | "warn" | "silent";
@@ -4277,6 +4274,8 @@ interface ExtractionResult {
     extractionFailure?: string;
     /** Coarse class used by the retry/backoff + circuit-breaker layer (extraction hot loop). */
     extractionFailureClass?: ExtractionFailureClass;
+    /** Trusted source connector resolved over boundedTurns; persisted verbatim by the orchestrator so it is not recomputed (#2183). */
+    sourceConnector?: string;
 }
 interface EntityMention {
     name: string;

package/dist/types.d.ts

@@ -1,4 +1,4 @@
-export { aS as AccessTrackingEntry, a1 as ActiveRecallChatType, a5 as ActiveRecallModelFallbackPolicy, a3 as ActiveRecallPromptStyle, a2 as ActiveRecallQueryMode, a4 as ActiveRecallThinking, t as AgentAccessAuthToken, ck as AgentAccessHttpConfig, cl as AgentDefaultsConfig, cm as AgentPersona, A as AgentPersonaModelConfig, cn as BehaviorLoopAdjustment, r as BehaviorLoopPolicyState, co as BehaviorSignalDirection, a6 as BehaviorSignalEvent, cp as BehaviorSignalType, bb as BootstrapOptions, bc as BootstrapResult, g as BriefingActiveThread, cq as BriefingCalendarSourceError, bw as BriefingConfig, e as BriefingFocus, d as BriefingFollowup, bx as BriefingOpenCommitment, i as BriefingRecentEntity, h as BriefingResult, B as BriefingSections, by as BriefingWindow, cr as BufferEntryState, aN as BufferState, a7 as BufferSurpriseEvent, j as BufferTurn, f as CalendarEvent, C as CalendarSource, w as CaptureMode, cs as ChatConfig, m as Checkpoint, ct as CodexCliReasoningEffort, cu as CodexCompactionFlushMode, bB as CodexCompatConfig, cv as CodexConnectorConfig, b8 as CodingContext, cw as CodingGraphLspConfig, bk as CodingKnowledgeConfig, be as CodingModeConfig, cx as CompressionGuidelineActivationState, ad as CompressionGuidelineOptimizerActionSummary, ac as CompressionGuidelineOptimizerEventCounts, ae as CompressionGuidelineOptimizerRuleUpdate, cy as CompressionGuidelineOptimizerSourceWindow, ah as CompressionGuidelineOptimizerState, cz as ConfidenceTier, cA as ConsolidationAction, cB as ConsolidationItem, bd as ConsolidationObservation, K as ConsolidationResult, cC as ContradictionScanConfig, V as ConversationThread, cD as CronConversationRecallMode, cE as CronRecallMode, bC as DEFAULT_RECALL_DISCLOSURE, N as DaySummaryResult, cF as DreamingConfig, cG as DreamingNarrativePromptStyle, cH as DreamsDeepSleepConfig, cI as DreamsLightSleepConfig, D as DreamsPhase, cJ as DreamsPhaseStatus, cK as DreamsPhasesConfig, cL as DreamsRemConfig, a as DreamsRunResult, b9 as DreamsStatusResult, cM as EngramTraceEvent, aR as EntityActivityEntry, E as EntityFile, ai as EntityMention, aQ as EntityRelationship, aj as EntitySchemaDefinition, ak as EntitySchemaSectionDefinition, al as EntityStructuredSection, aL as EntityTimelineEntry, bE as ExtractedFact, cN as ExtractedProcedureStep, cO as ExtractedQuestion, cP as ExtractedReasoningTrace, cQ as ExtractedReasoningTraceStep, cR as ExtractedRelationship, $ as ExtractionFailureClass, cS as ExtractionPassSource, J as ExtractionResult, F as FaithfulnessFrontmatter, aP as FileHygieneConfig, G as GatewayConfig, cT as GitHubLiveConnectorConfig, cU as GmailLiveConnectorConfig, cV as GoogleDriveLiveConnectorConfig, cW as HeartbeatConfig, cX as HeartbeatDetectionMode, H as HourlySummary, I as IdentityInjectionMode, a0 as ImportanceLevel, an as ImportanceScore, W as LifecycleState, L as LiveConnectorsConfig, cY as LlmTraceCallback, cZ as LlmTraceEvent, ap as MemoryActionEligibilityContext, bN as MemoryActionEligibilitySource, ag as MemoryActionEvent, c_ as MemoryActionOutcome, c$ as MemoryActionPolicyDecision, aq as MemoryActionPolicyResult, d0 as MemoryActionStatus, af as MemoryActionType, v as MemoryCategory, M as MemoryFile, l as MemoryFrontmatter, ao as MemoryIntent, z as MemoryLifecycleEvent, ar as MemoryLifecycleEventType, as as MemoryLifecycleStateSummary, aM as MemoryLink, d1 as MemoryLinkType, bO as MemoryObservation, d2 as MemoryOsPresetName, y as MemoryProjectionCurrentState, bP as MemoryScope, x as MemoryStatus, aT as MemorySummary, aO as MetaState, d3 as ModelApi, d4 as ModelDefinitionConfig, d5 as ModelProviderAuthMode, at as ModelProviderConfig, d6 as NamespacePolicy, au as NativeKnowledgeConfig, d7 as NativeKnowledgeFolderRuleConfig, d8 as NativeKnowledgeObsidianVaultConfig, d9 as NativeKnowledgeOpenClawWorkspaceConfig, da as NotionLiveConnectorConfig, P as PluginConfig, Y as PolicyClass, db as PrincipalFromSessionKeyMode, dc as PrincipalRule, dd as ProceduralConfig, am as ProvenanceConfig, O as ProvenanceSource, aA as QmdSearchExplain, Q as QmdSearchResult, de as QuestionEntry, bQ as RECALL_DISCLOSURE_LEVELS, df as ReasoningEffort, b as RecallDisclosure, dg as RecallPipelineConfig, R as RecallPlanMode, ba as RecallSectionConfig, c as RecallTierExplain, dh as RecallTraceEvent, di as RelevanceFeedback, ax as RetrievalTier, dj as SPECULATIVE_TTL_DAYS, dk as ScopeProfileAutoPromoteConfig, o as ScopeProfileConfig, p as ScopeProfileLayerId, q as ScopeProfilePromotionTarget, dl as ScopeProfileTeamProjectConfig, dm as ScopeTeamConfig, dn as ScoredEntity, s as SecretRef, dp as SemanticChunkingConfigShape, S as SessionObserverBandConfig, dq as SignalLevel, ay as SignalScanResult, dr as SlotBehaviorConfig, ds as SlotMismatchMode, n as SourceConnectorProvenance, az as TopicScore, T as TranscriptEntry, dt as TriggerMode, U as TrustWeights, X as VerificationState, du as confidenceTier, bY as isRecallDisclosure } from './types-D63ZI--P.js';
+export { aS as AccessTrackingEntry, a1 as ActiveRecallChatType, a5 as ActiveRecallModelFallbackPolicy, a3 as ActiveRecallPromptStyle, a2 as ActiveRecallQueryMode, a4 as ActiveRecallThinking, t as AgentAccessAuthToken, ck as AgentAccessHttpConfig, cl as AgentDefaultsConfig, cm as AgentPersona, A as AgentPersonaModelConfig, cn as BehaviorLoopAdjustment, r as BehaviorLoopPolicyState, co as BehaviorSignalDirection, a6 as BehaviorSignalEvent, cp as BehaviorSignalType, bb as BootstrapOptions, bc as BootstrapResult, g as BriefingActiveThread, cq as BriefingCalendarSourceError, bw as BriefingConfig, e as BriefingFocus, d as BriefingFollowup, bx as BriefingOpenCommitment, i as BriefingRecentEntity, h as BriefingResult, B as BriefingSections, by as BriefingWindow, cr as BufferEntryState, aN as BufferState, a7 as BufferSurpriseEvent, j as BufferTurn, f as CalendarEvent, C as CalendarSource, w as CaptureMode, cs as ChatConfig, m as Checkpoint, ct as CodexCliReasoningEffort, cu as CodexCompactionFlushMode, bB as CodexCompatConfig, cv as CodexConnectorConfig, b8 as CodingContext, cw as CodingGraphLspConfig, bk as CodingKnowledgeConfig, be as CodingModeConfig, cx as CompressionGuidelineActivationState, ad as CompressionGuidelineOptimizerActionSummary, ac as CompressionGuidelineOptimizerEventCounts, ae as CompressionGuidelineOptimizerRuleUpdate, cy as CompressionGuidelineOptimizerSourceWindow, ah as CompressionGuidelineOptimizerState, cz as ConfidenceTier, cA as ConsolidationAction, cB as ConsolidationItem, bd as ConsolidationObservation, K as ConsolidationResult, cC as ContradictionScanConfig, V as ConversationThread, cD as CronConversationRecallMode, cE as CronRecallMode, bC as DEFAULT_RECALL_DISCLOSURE, N as DaySummaryResult, cF as DreamingConfig, cG as DreamingNarrativePromptStyle, cH as DreamsDeepSleepConfig, cI as DreamsLightSleepConfig, D as DreamsPhase, cJ as DreamsPhaseStatus, cK as DreamsPhasesConfig, cL as DreamsRemConfig, a as DreamsRunResult, b9 as DreamsStatusResult, cM as EngramTraceEvent, aR as EntityActivityEntry, E as EntityFile, ai as EntityMention, aQ as EntityRelationship, aj as EntitySchemaDefinition, ak as EntitySchemaSectionDefinition, al as EntityStructuredSection, aL as EntityTimelineEntry, bE as ExtractedFact, cN as ExtractedProcedureStep, cO as ExtractedQuestion, cP as ExtractedReasoningTrace, cQ as ExtractedReasoningTraceStep, cR as ExtractedRelationship, $ as ExtractionFailureClass, cS as ExtractionPassSource, J as ExtractionResult, F as FaithfulnessFrontmatter, aP as FileHygieneConfig, G as GatewayConfig, cT as GitHubLiveConnectorConfig, cU as GmailLiveConnectorConfig, cV as GoogleDriveLiveConnectorConfig, cW as HeartbeatConfig, cX as HeartbeatDetectionMode, H as HourlySummary, I as IdentityInjectionMode, a0 as ImportanceLevel, an as ImportanceScore, W as LifecycleState, L as LiveConnectorsConfig, cY as LlmTraceCallback, cZ as LlmTraceEvent, ap as MemoryActionEligibilityContext, bN as MemoryActionEligibilitySource, ag as MemoryActionEvent, c_ as MemoryActionOutcome, c$ as MemoryActionPolicyDecision, aq as MemoryActionPolicyResult, d0 as MemoryActionStatus, af as MemoryActionType, v as MemoryCategory, M as MemoryFile, l as MemoryFrontmatter, ao as MemoryIntent, z as MemoryLifecycleEvent, ar as MemoryLifecycleEventType, as as MemoryLifecycleStateSummary, aM as MemoryLink, d1 as MemoryLinkType, bO as MemoryObservation, d2 as MemoryOsPresetName, y as MemoryProjectionCurrentState, bP as MemoryScope, x as MemoryStatus, aT as MemorySummary, aO as MetaState, d3 as ModelApi, d4 as ModelDefinitionConfig, d5 as ModelProviderAuthMode, at as ModelProviderConfig, d6 as NamespacePolicy, au as NativeKnowledgeConfig, d7 as NativeKnowledgeFolderRuleConfig, d8 as NativeKnowledgeObsidianVaultConfig, d9 as NativeKnowledgeOpenClawWorkspaceConfig, da as NotionLiveConnectorConfig, P as PluginConfig, Y as PolicyClass, db as PrincipalFromSessionKeyMode, dc as PrincipalRule, dd as ProceduralConfig, am as ProvenanceConfig, O as ProvenanceSource, aA as QmdSearchExplain, Q as QmdSearchResult, de as QuestionEntry, bQ as RECALL_DISCLOSURE_LEVELS, df as ReasoningEffort, b as RecallDisclosure, dg as RecallPipelineConfig, R as RecallPlanMode, ba as RecallSectionConfig, c as RecallTierExplain, dh as RecallTraceEvent, di as RelevanceFeedback, ax as RetrievalTier, dj as SPECULATIVE_TTL_DAYS, dk as ScopeProfileAutoPromoteConfig, o as ScopeProfileConfig, p as ScopeProfileLayerId, q as ScopeProfilePromotionTarget, dl as ScopeProfileTeamProjectConfig, dm as ScopeTeamConfig, dn as ScoredEntity, s as SecretRef, dp as SemanticChunkingConfigShape, S as SessionObserverBandConfig, dq as SignalLevel, ay as SignalScanResult, dr as SlotBehaviorConfig, ds as SlotMismatchMode, n as SourceConnectorProvenance, az as TopicScore, T as TranscriptEntry, dt as TriggerMode, U as TrustWeights, X as VerificationState, du as confidenceTier, bY as isRecallDisclosure } from './types-5398p7Zm.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 export { ContinuityImprovementLoop, ContinuityIncidentCloseInput, ContinuityIncidentOpenInput, ContinuityIncidentRecord, ContinuityIncidentState, ContinuityLoopCadence, ContinuityLoopReviewInput, ContinuityLoopStatus, ContinuityLoopUpsertInput } from './types-continuity.js';

package/dist/types.js

@@ -4,7 +4,7 @@ import {
   SPECULATIVE_TTL_DAYS,
   confidenceTier,
   isRecallDisclosure
-} from "./chunk-VVDPPDDF.js";
+} from "./chunk-HXDWZFNP.js";
 import "./chunk-PZ5AY32C.js";
 export {
   DEFAULT_RECALL_DISCLOSURE,

package/dist/utility-runtime.d.ts

@@ -1,5 +1,5 @@
 import { TierRoutingPolicy } from './tier-routing.js';
-import './types-D63ZI--P.js';
+import './types-5398p7Zm.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';

package/dist/verified-recall.js

@@ -1,17 +1,17 @@
 import {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
-} from "./chunk-5WZVQRHV.js";
+} from "./chunk-EO7X2LDK.js";
 import "./chunk-B7RWBZXW.js";
-import "./chunk-FHBITMRY.js";
+import "./chunk-4TGZCYHH.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-QNWXCJ76.js";
 import "./chunk-WIPEXG6R.js";
 import "./chunk-DNHVPZOD.js";
 import "./chunk-6CIAGZ6X.js";
-import "./chunk-J6A3CX5N.js";
 import "./chunk-HKF5VASQ.js";
-import "./chunk-VVDPPDDF.js";
+import "./chunk-J6A3CX5N.js";
+import "./chunk-HXDWZFNP.js";
 import "./chunk-7VUAG236.js";
 import "./chunk-EGGE52UU.js";
 import "./chunk-ILGC6JH6.js";
@@ -21,12 +21,12 @@ import "./chunk-GCASGYIO.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-FBUE6PD3.js";
-import "./chunk-FFAZ2XFU.js";
-import "./chunk-3CSX3ETE.js";
-import "./chunk-RL6NEVXT.js";
 import "./chunk-CGASUJVP.js";
 import "./chunk-R3DJVOSM.js";
 import "./chunk-BT7NVCML.js";
+import "./chunk-FFAZ2XFU.js";
+import "./chunk-3CSX3ETE.js";
+import "./chunk-RL6NEVXT.js";
 import "./chunk-JYIJNNN3.js";
 import "./chunk-AAD2ZS6P.js";
 import "./chunk-YXZG5TVN.js";

package/dist/write-envelope.d.ts

@@ -1,4 +1,4 @@
-import { v as MemoryCategory } from './types-D63ZI--P.js';
+import { v as MemoryCategory } from './types-5398p7Zm.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.32.0",
+  "version": "9.34.0",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -3076,7 +3076,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.32.0"
+    "@remnic/coding-graph": "^9.34.0"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/connector-provenance-lifecycle.test.ts

@@ -21,9 +21,12 @@ import {
 import { TurnIngestionCoordinator, type TurnIngestionDeps } from "./orchestration/turn-ingestion.js";
 import { StorageManager } from "./storage.js";
 import { hashAccessIdempotencyPayload } from "./access-idempotency.js";
-import type { ExtractionEngine } from "./extraction.js";
+import { ExtractionEngine } from "./extraction.js";
 import type { ThreadingManager } from "./threading.js";
 import type { BufferTurn, ExtractionResult, PluginConfig } from "./types.js";
+import { parseConfig } from "./config.js";
+import { resolveSourceConnector } from "./source-agent-qualifier.js";
+import type { FallbackLlmOptions } from "./fallback-llm.js";
 import { handleCodingDecision } from "./coding/decision-surfaces.js";
 import type { DecisionSurfaceContext } from "./coding/decision-surfaces.js";
 
@@ -271,11 +274,12 @@ test("runExtraction: mixed tagged+untagged turns → persistExtraction receives
         config,
         getBuffer: () => buffer,
         getExtraction: () => ({
-          extract: async (..._args: Parameters<ExtractionEngine["extract"]>): Promise<ExtractionResult> => ({
+          extract: async (turns: BufferTurn[]): Promise<ExtractionResult> => ({
             facts: [{ content: "test fact", category: "fact", confidence: 0.8, tags: [] }],
             entities: [],
             questions: [],
             profileUpdates: [],
+            sourceConnector: resolveSourceConnector(turns),
           }),
         }),
         getStorageRouter: () => ({
@@ -373,11 +377,12 @@ test("runExtraction: context-only turns without sourceConnector do not affect at
       config,
       getBuffer: () => buffer,
       getExtraction: () => ({
-        extract: async (..._args: Parameters<ExtractionEngine["extract"]>): Promise<ExtractionResult> => ({
+        extract: async (turns: BufferTurn[]): Promise<ExtractionResult> => ({
           facts: [{ content: "test fact", category: "fact", confidence: 0.8, tags: [] }],
           entities: [],
           questions: [],
           profileUpdates: [],
+          sourceConnector: resolveSourceConnector(turns),
         }),
       }),
       getStorageRouter: () => ({
@@ -616,3 +621,81 @@ test("codegraph_manage_adr operation: ctx.sourceConnector forwarded to codegraph
     "operation handler must forward ctx.sourceConnector='chatgpt' to codegraphTool"
   );
 });
+
+test("runExtraction: the Source agent header connector equals the persisted sourceConnector (boundary-drop case)", async () => {
+  // One derivation over boundedTurns: a work-layer-dropped UNTAGGED assistant
+  // turn must not suppress the connector the model effectively saw, and the
+  // value rendered in the header must be the same value persisted.
+  StorageManager.clearAllStaticCaches();
+  const baseDir = await mkdtemp(path.join(os.tmpdir(), "prov-one-"));
+  try {
+    const storage = new StorageManager(baseDir);
+    await storage.ensureDirectories();
+    const config = makeMinimalConfig();
+    const buffer = new SmartBuffer(config, storage);
+    await buffer.load();
+
+    let headerConversation = "";
+    let persistedConnector: string | undefined = "SENTINEL";
+    const engine = new ExtractionEngine(parseConfig({ modelSource: "gateway" }));
+    assert.equal(Reflect.set(engine, "fallbackLlm", {
+      async parseWithSchemaDetailed<T>(
+        messages: Array<{ role: "system" | "user" | "assistant"; content: string }>,
+        _schema: { parse: (data: unknown) => T },
+        _options?: FallbackLlmOptions,
+      ) {
+        headerConversation = messages[1]?.content ?? "";
+        return {
+          modelUsed: "fixture",
+          result: { facts: [{ content: "use the search tool", category: "fact", confidence: 0.9, tags: [] }], entities: [], questions: [], profileUpdates: [] } as unknown as T,
+        };
+      },
+    }), true);
+
+    const coordinator = new ExtractionRunCoordinator({
+      config,
+      getBuffer: () => buffer,
+      getExtraction: () => engine,
+      getStorageRouter: () => ({ storageFor: async () => storage }),
+      getThreading: () => ({ processTurn: async () => "thread-1", updateThreadTitle: async () => {} }),
+      persistExtraction: async (_r, _s, _t, sourceContext?) => {
+        persistedConnector = sourceContext?.sourceConnector;
+        return { persistedIds: ["fact-1"], memoryPathById: new Map() };
+      },
+      maybeCapturePassiveCorrections: async () => {},
+      resolveSelfNamespace: () => "default",
+      getCodingContextForSession: () => null,
+      applyCodingNamespaceOverlay: (_sk: string, ns: string) => ns,
+      boxBuilderFor: () => { throw new Error("unexpected boxBuilderFor"); },
+      appendPersistedThreadEpisodes: async () => {},
+      maybeScheduleConsolidation: () => {},
+      requestQmdMaintenance: () => {},
+      runTierMigrationCycle: async () => { throw new Error("unexpected runTierMigrationCycle"); },
+      getLastPersistExtractionDeferredCount: () => 0,
+      recordProcessedExtractionFingerprint: async () => {},
+    });
+
+    await coordinator.runExtraction(
+      [
+        makeTurn({ content: "Use the search tool.", sourceConnector: "pi" }),
+        makeTurn({ role: "assistant", content: "Found it.", sourceConnector: "pi" }),
+        // UNTAGGED assistant turn that is entirely work-layer context -> dropped
+        // by the work-layer boundary, so it is absent from boundedTurns.
+        makeTurn({
+          role: "assistant",
+          content: "[WORK_LAYER_CONTEXT link_to_memory=false]\ninternal scratch\n[/WORK_LAYER_CONTEXT]",
+        }),
+      ],
+      { skipCharThreshold: true, skipUserTurnThreshold: true }
+    );
+
+    const headerMatch = headerConversation.match(/^Source agent: (\S+)/);
+    const headerConnector = headerMatch ? headerMatch[1] : undefined;
+    assert.equal(headerConnector, "pi", "header names the connector the model saw (boundedTurns)");
+    assert.equal(persistedConnector, "pi", "persistence records the same resolved connector");
+    assert.equal(headerConnector, persistedConnector, "header connector must equal persisted connector");
+  } finally {
+    StorageManager.clearAllStaticCaches();
+    await rm(baseDir, { recursive: true, force: true });
+  }
+});

package/src/connectors/index.ts

@@ -211,7 +211,7 @@ export { coerceInstallExtension };
 
 // ── Built-in connector definitions ─────────────────────────────────────────
 
-const BUILTIN_CONNECTORS: ConnectorManifest[] = [
+export const BUILTIN_CONNECTORS: ConnectorManifest[] = [
   {
     id: "claude-code",
     name: "Claude Code",
@@ -571,7 +571,7 @@ const BUILTIN_CONNECTORS: ConnectorManifest[] = [
 
 export const CONNECTOR_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
 
-function isValidConnectorId(connectorId: unknown): connectorId is string {
+export function isValidConnectorId(connectorId: unknown): connectorId is string {
   return typeof connectorId === "string" && CONNECTOR_ID_PATTERN.test(connectorId);
 }
 

package/src/connectors/label.ts

@@ -14,5 +14,23 @@
  * stays at its ratchet ceiling.
  */
 export { CONNECTOR_ID_PATTERN } from "./index.js";
+import { loadRegistry, BUILTIN_CONNECTORS } from "./index.js";
 
 export const CONNECTOR_LABEL_MAX_LENGTH = 64;
+
+let knownIds: ReadonlySet<string> | null = null;
+let knownIdsAt = 0;
+const KNOWN_IDS_TTL_MS = 60_000;
+
+export function knownConnectorIds(): ReadonlySet<string> {
+  const now = Date.now();
+  if (knownIds !== null && now - knownIdsAt < KNOWN_IDS_TTL_MS) return knownIds;
+  try {
+    const ids = new Set(loadRegistry().connectors.map((c: { id: string }) => c.id));
+    knownIds = ids;
+    knownIdsAt = now;
+    return knownIds;
+  } catch {
+    return new Set(BUILTIN_CONNECTORS.map((c: { id: string }) => c.id));
+  }
+}

package/src/extraction-redaction-rules.test.ts

@@ -20,6 +20,7 @@ import {
   type CompiledRedactionRule,
 } from "./extraction-redaction-rules.js";
 import { validateRedactionPattern } from "./correction/correction-contract.js";
+import { shouldPromoteGlobalFactToShared } from "./tool-scoped-memory.js";
 
 const withTempDir = <T>(fn: (dir: string) => Promise<T>): Promise<T> =>
   managedWithTempDir(fn, "remnic-redact-");
@@ -378,3 +379,55 @@ test("#1713 (codex): non-global fact is NOT scope-routed to shared", async () =>
     });
   });
 });
+test("#2183: pre-judge consults the SESSION namespace rules for a tool-scoped global fact (not shared)", async () => {
+  // The pre-judge namespace prediction and the write-loop scope-routing block
+  // share shouldPromoteGlobalFactToShared, so a tool-scoped global fact from a
+  // known integration is predicted to stay in the session namespace: its
+  // redaction is evaluated against the SESSION rules, not the shared ones. A
+  // portable global fact is still predicted shared and consults shared rules.
+  // This is the read/write namespace-invariant coupling the guard preserves.
+  await withTempDir(async (sourceDir) => {
+    await withTempDir(async (sharedDir) => {
+      await writeRule(sourceDir, "session-only-secret");
+      await writeRule(sharedDir, "shared-only-secret");
+
+      const sourceNamespace: string = "default";
+      const sharedNamespace: string = "shared";
+      const sourceConnector = "pi";
+
+      // Mirror the pre-judge pass: predicted target namespace = shared ONLY
+      // when shouldPromoteGlobalFactToShared says so; load that namespace's
+      // rules and combine with the base (source) rules.
+      async function consultedRulesFor(fact: { scope: string; content: string }): Promise<CompiledRedactionRule[]> {
+        const baseRules = await loadRedactionRules(sourceDir);
+        const promote = shouldPromoteGlobalFactToShared({
+          scope: fact.scope,
+          content: fact.content,
+          sourceConnector,
+        });
+        const factNs = promote ? sharedNamespace : undefined;
+        const targetRules =
+          factNs && factNs !== sourceNamespace ? await loadRedactionRules(sharedDir) : [];
+        return [...baseRules, ...targetRules];
+      }
+
+      // (a) tool-scoped global fact + sourceConnector -> predicted SESSION.
+      const toolRules = await consultedRulesFor({ scope: "global", content: "Prefer the search tool when locating code." });
+      assert.ok(
+        contentMatchesRedactionRules("session-only-secret here", toolRules),
+        "session rules are consulted for a tool-scoped global fact",
+      );
+      assert.ok(
+        !contentMatchesRedactionRules("shared-only-secret here", toolRules),
+        "shared rules are NOT consulted for a tool-scoped global fact (the #2183 fix)",
+      );
+
+      // (b) portable global fact + sourceConnector -> predicted SHARED.
+      const portableRules = await consultedRulesFor({ scope: "global", content: "User prefers dark mode in all editors" });
+      assert.ok(
+        contentMatchesRedactionRules("shared-only-secret here", portableRules),
+        "shared rules ARE consulted for a portable global fact (no regression)",
+      );
+    });
+  });
+});