@remnic/core 9.33.0 → 9.34.0

package/dist/chunk-KWMXR7XS.js

@@ -0,0 +1,138 @@
+// src/tool-scoped-memory.ts
+var BT = "`";
+var GENERIC_TOOL_NAMES = [
+  "read",
+  "write",
+  "search",
+  "fetch",
+  "browser",
+  "exec",
+  "shell",
+  "memory",
+  "edit",
+  "bash",
+  "glob",
+  "webfetch",
+  "task",
+  "remnic"
+];
+var KNOWN_CLI_NAMES = [
+  "grep",
+  "curl",
+  "git",
+  "npm",
+  "pnpm",
+  "sed",
+  "awk",
+  "jq",
+  "cat",
+  "ssh",
+  "docker",
+  "kubectl",
+  "make",
+  "rg",
+  "ls",
+  "cd"
+];
+var GENERIC_NAMES_ALT = GENERIC_TOOL_NAMES.join("|");
+var KNOWN_NAMES_ALT = [...GENERIC_TOOL_NAMES, ...KNOWN_CLI_NAMES].join("|");
+var CLI_NAMES_ALT = KNOWN_CLI_NAMES.join("|");
+var FLAG = "(?:--|-)[A-Za-z][A-Za-z0-9]*(?:-[A-Za-z0-9]+)*\\b";
+var FLAG_NAKED = "(?:--|-)[A-Za-z][A-Za-z0-9]*(?:-[A-Za-z0-9]+)*";
+var OPCODE = "[A-Za-z0-9_./-]{1,20}";
+var NO_SLASH_TOKEN = "[A-Za-z0-9_.-]{1,60}";
+var SLASH_CMD_TOKEN = "/(?:" + GENERIC_NAMES_ALT + ")\\b";
+var QUOTED_CONTENT = "(?:" + NO_SLASH_TOKEN + "|" + SLASH_CMD_TOKEN + ")";
+var QUOTED_PERMISSIVE = "(?:" + BT + QUOTED_CONTENT + BT + '|"' + QUOTED_CONTENT + `"|'` + QUOTED_CONTENT + "')";
+var SNAKE_NON_DATA = "(?:[a-z][a-z0-9]*(?:_[a-z0-9]+)*(?:_(?!id\\b|name\\b|flag\\b|count\\b|at\\b|url\\b|key\\b|type\\b)[a-z0-9]+))\\b";
+var SNAKE_KEBAB = "(?:[a-z][a-z0-9]*(?:[_-][a-z0-9]+)+)\\b";
+var KNOWN_NAMES_CI = "\\b(?:" + KNOWN_NAMES_ALT + ")\\b";
+var CLI_NAMES_CI = "\\b(?:" + CLI_NAMES_ALT + ")\\b";
+var KEYWORD = "\\b(?:mcp[ _]tool|slash[ _]command|cli[ _]flag|subcommand|tool|command)\\b";
+var IDENT = "(?:" + QUOTED_PERMISSIVE + "|" + KNOWN_NAMES_CI + "|" + SNAKE_KEBAB + "|" + FLAG + ")";
+var IMM = `[\\s'"` + BT + "]{1,4}";
+var CONN = "\\s+(?:named|called|aka)\\s+";
+var VERB = "\\b(?:use|run|call|invoke)\\b";
+var SLASH_GENERIC = "/(?:" + GENERIC_NAMES_ALT + ")\\b";
+var CLAUSE_BOUNDARY = "(?:$|[.,;(:]|(?:when|before|after|to|with|for|on|in|if|unless|whenever)\\b)";
+var ARGS = "(?:\\s+" + FLAG + "(?:\\s+" + OPCODE + "){0,4})?";
+var CLI_ARG_TOKEN = "(?:[a-z][a-z0-9-]{0,15}|" + FLAG_NAKED + "|" + OPCODE + ")";
+var CLI_ARG_RUN = "(?:\\s+" + CLI_ARG_TOKEN + "){1,4}";
+var CMD_WITH_ARGS = "(?:(?:" + CLI_NAMES_CI + "|" + SLASH_GENERIC + ")" + CLI_ARG_RUN + ")";
+var QSTRICT_CONTENT = "(?:" + KNOWN_NAMES_ALT + "|[a-z][a-z0-9]*(?:[_-][a-z0-9]+)+|" + FLAG_NAKED + "|" + SLASH_CMD_TOKEN + "|" + CMD_WITH_ARGS + "|(?:" + KNOWN_NAMES_ALT + ")" + CLI_ARG_RUN + ")";
+var QUOTED_STRICT = "(?:" + BT + QSTRICT_CONTENT + BT + '|"' + QSTRICT_CONTENT + `"|'` + QSTRICT_CONTENT + "')";
+var INVOCATION_FLAG_ARGS = VERB + "\\s+(?:" + QUOTED_STRICT + "|" + KNOWN_NAMES_CI + "|" + SNAKE_NON_DATA + "|" + SLASH_GENERIC + "|" + FLAG + ")" + ARGS + "(?=\\s*" + CLAUSE_BOUNDARY + ")";
+var INVOCATION_CLI_ARGS = VERB + "\\s+" + CMD_WITH_ARGS + "(?=\\s*" + CLAUSE_BOUNDARY + ")";
+var INVOCATION = "(?:" + INVOCATION_FLAG_ARGS + "|" + INVOCATION_CLI_ARGS + ")";
+var TOOL_REFERENCE_CI = new RegExp(
+  "(?:" + IDENT + IMM + KEYWORD + "|" + KEYWORD + IMM + IDENT + "|" + KEYWORD + CONN + IDENT + "|" + IDENT + CONN + KEYWORD + "|" + INVOCATION + ")",
+  "i"
+);
+function hasCapitalisedToolName(content) {
+  for (const re of [
+    /(?:the|a|an|this|that|these|those|use|run|call|invoke)\s+([A-Za-z][A-Za-z0-9]+)\b[\s'`<>]{0,4}\b(?:tool|command|subcommand)\b/gi,
+    /\b(?:tool|command|subcommand)\b\s+(?:named|called|aka)\s+([A-Za-z][A-Za-z0-9]+)\b/gi
+  ]) {
+    re.lastIndex = 0;
+    let match;
+    while ((match = re.exec(content)) !== null) {
+      const w = match[1];
+      if (w && w[0] >= "A" && w[0] <= "Z") return true;
+    }
+  }
+  return false;
+}
+function hasCamelCaseToolName(content) {
+  const camelRe = /\b([a-z]{3,}[a-z0-9]*[A-Z][a-z][A-Za-z0-9]*)\b/g;
+  let m;
+  while ((m = camelRe.exec(content)) !== null) {
+    const token = m[1];
+    const start = m.index;
+    const end = start + token.length;
+    const before = content.slice(Math.max(0, start - 20), start);
+    const after = content.slice(end);
+    if (/(?:^|\s)(?:use|run|call|invoke)\s*$/i.test(before) && /^(?:\s*(?:$|[.,;(:]|(?:when|before|after|to|with|for|on|in|if|unless|whenever)\b))/i.test(after)) {
+      return true;
+    }
+    if (/^(?:\s*(?:tool|command|subcommand)\b)/i.test(after) || /(?:tool|command|subcommand)\s*$/i.test(before)) {
+      return true;
+    }
+  }
+  return false;
+}
+function referencesAgentSpecificTool(content) {
+  if (typeof content !== "string" || content.length === 0) return false;
+  return TOOL_REFERENCE_CI.test(content) || hasCapitalisedToolName(content) || hasCamelCaseToolName(content);
+}
+function withholdToolScopedFromSharedNamespace({
+  content,
+  sourceConnector,
+  procedureSteps
+}) {
+  if (typeof sourceConnector !== "string" || sourceConnector.trim().length === 0) return false;
+  if (referencesAgentSpecificTool(content)) return true;
+  if (procedureSteps?.some((s) => {
+    const kind = s.toolCall?.kind;
+    if (typeof kind === "string" && kind.trim().length > 0) return true;
+    const stepText = [s.intent, s.expectedOutcome].filter((t) => typeof t === "string" && t.length > 0).join(" ");
+    return stepText.length > 0 && referencesAgentSpecificTool(stepText);
+  })) {
+    return true;
+  }
+  return false;
+}
+function shouldPromoteGlobalFactToShared(inputs) {
+  if (inputs.scope !== "global") return false;
+  return !withholdToolScopedFromSharedNamespace({
+    content: inputs.content,
+    sourceConnector: inputs.sourceConnector,
+    procedureSteps: inputs.procedureSteps
+  });
+}
+
+export {
+  referencesAgentSpecificTool,
+  withholdToolScopedFromSharedNamespace,
+  shouldPromoteGlobalFactToShared
+};
+//# sourceMappingURL=chunk-KWMXR7XS.js.map

package/dist/chunk-KWMXR7XS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/tool-scoped-memory.ts"],"sourcesContent":["/**\n * Tool-scoped memory guard (issue #2183).\n *\n * A tool-related fact extracted from a specific agent integration carries an\n * UNQUALIFIED tool name — \"use the search tool\" — with no agent identity\n * attached (the conversation handed to the extraction LLM is rendered as\n * `[role] content` only). Promoting such a fact to the shared namespace lets a\n * DIFFERENT integration that exposes a same-named but incompatible tool (Pi\n * `search` = repo code search vs OpenClaw `search` = web search) consume it.\n *\n * `referencesAgentSpecificTool` flags fact text that references a specific\n * tool/command invocation rather than portable knowledge. The promotion guard\n * in `orchestration/extraction-persist.ts` uses it — when the producing\n * integration is known (`sourceConnector`) — to keep such a fact in that\n * integration's own namespace.\n *\n * Tuning bias: a FALSE POSITIVE is cheap — the fact stays in the narrower\n * namespace, the documented safe default. A FALSE NEGATIVE is the actual\n * cross-integration collision bug, so detection leans permissive — but it must\n * not fire on ordinary prose.\n */\n\nconst BT = \"`\";\n\n// Generic tool names + host-tool names emitted by the agent adapters.\n// Evidence: \"edit\" — Pi messages.test.ts:43 ({ type: \"toolCall\", name: \"edit\" }).\n// \"bash\" — Pi messages.test.ts:70 (bashExecution tool rendering). \"glob\",\n// \"webfetch\", \"task\" — standard Claude Code tools (Pi wraps Claude Code).\nconst GENERIC_TOOL_NAMES = [\n  \"read\", \"write\", \"search\", \"fetch\", \"browser\", \"exec\", \"shell\", \"memory\",\n  \"edit\", \"bash\", \"glob\", \"webfetch\", \"task\",\n  \"remnic\",\n];\nconst KNOWN_CLI_NAMES = [\n  \"grep\", \"curl\", \"git\", \"npm\", \"pnpm\", \"sed\", \"awk\", \"jq\", \"cat\", \"ssh\",\n  \"docker\", \"kubectl\", \"make\", \"rg\", \"ls\", \"cd\",\n];\nconst GENERIC_NAMES_ALT = GENERIC_TOOL_NAMES.join(\"|\");\nconst KNOWN_NAMES_ALT = [...GENERIC_TOOL_NAMES, ...KNOWN_CLI_NAMES].join(\"|\");\nconst CLI_NAMES_ALT = KNOWN_CLI_NAMES.join(\"|\");\n\nconst FS_ROOTS = \"(?:etc|var|usr|tmp|home|opt|srv|proc|dev)\";\nconst FLAG = \"(?:--|-)[A-Za-z][A-Za-z0-9]*(?:-[A-Za-z0-9]+)*\\\\b\";\nconst FLAG_NAKED = \"(?:--|-)[A-Za-z][A-Za-z0-9]*(?:-[A-Za-z0-9]+)*\";\nconst OPCODE = \"[A-Za-z0-9_./-]{1,20}\";\n\nconst NO_SLASH_TOKEN = \"[A-Za-z0-9_.-]{1,60}\";\nconst SLASH_CMD_TOKEN = \"/(?:\" + GENERIC_NAMES_ALT + \")\\\\b\";\nconst QUOTED_CONTENT = \"(?:\" + NO_SLASH_TOKEN + \"|\" + SLASH_CMD_TOKEN + \")\";\nconst QUOTED_PERMISSIVE =\n  \"(?:\" + BT + QUOTED_CONTENT + BT + \"|\\\"\" + QUOTED_CONTENT + \"\\\"|'\" + QUOTED_CONTENT + \"')\";\n\nconst SNAKE = \"(?:[a-z][a-z0-9]*(?:_[a-z0-9]+)+)\\\\b\";\nconst SNAKE_NON_DATA = \"(?:[a-z][a-z0-9]*(?:_[a-z0-9]+)*(?:_(?!id\\\\b|name\\\\b|flag\\\\b|count\\\\b|at\\\\b|url\\\\b|key\\\\b|type\\\\b)[a-z0-9]+))\\\\b\";\nconst SNAKE_KEBAB = \"(?:[a-z][a-z0-9]*(?:[_-][a-z0-9]+)+)\\\\b\";\n\nconst KNOWN_NAMES_CI = \"\\\\b(?:\" + KNOWN_NAMES_ALT + \")\\\\b\";\nconst CLI_NAMES_CI = \"\\\\b(?:\" + CLI_NAMES_ALT + \")\\\\b\";\nconst KEYWORD = \"\\\\b(?:mcp[ _]tool|slash[ _]command|cli[ _]flag|subcommand|tool|command)\\\\b\";\n\nconst IDENT = \"(?:\" + QUOTED_PERMISSIVE + \"|\" + KNOWN_NAMES_CI + \"|\" + SNAKE_KEBAB + \"|\" + FLAG + \")\";\n\nconst IMM = \"[\\\\s'\\\"\" + BT + \"]{1,4}\";\nconst CONN = \"\\\\s+(?:named|called|aka)\\\\s+\";\nconst VERB = \"\\\\b(?:use|run|call|invoke)\\\\b\";\nconst SLASH_GENERIC = \"/(?:\" + GENERIC_NAMES_ALT + \")\\\\b\";\nconst CLAUSE_BOUNDARY = \"(?:$|[.,;(:]|(?:when|before|after|to|with|for|on|in|if|unless|whenever)\\\\b)\";\nconst ARGS = \"(?:\\\\s+\" + FLAG + \"(?:\\\\s+\" + OPCODE + \"){0,4})?\";\nconst CLI_ARG_TOKEN = \"(?:[a-z][a-z0-9-]{0,15}|\" + FLAG_NAKED + \"|\" + OPCODE + \")\";\nconst CLI_ARG_RUN = \"(?:\\\\s+\" + CLI_ARG_TOKEN + \"){1,4}\";\n\n// Shared: a CLI tool or slash command optionally followed by a bounded\n// argument run. Used by BOTH the quoted and unquoted invocation arms so\n// quoting cannot diverge from unquoted again (#2183 round 20).\nconst CMD_WITH_ARGS = \"(?:(?:\" + CLI_NAMES_CI + \"|\" + SLASH_GENERIC + \")\" + CLI_ARG_RUN + \")\";\nconst QSTRICT_CONTENT =\n  \"(?:\" + KNOWN_NAMES_ALT + \"|[a-z][a-z0-9]*(?:[_-][a-z0-9]+)+\" + \"|\" + FLAG_NAKED + \"|\" + SLASH_CMD_TOKEN +\n  \"|\" + CMD_WITH_ARGS + \"|(?:\" + KNOWN_NAMES_ALT + \")\" + CLI_ARG_RUN + \")\";\nconst QUOTED_STRICT =\n  \"(?:\" + BT + QSTRICT_CONTENT + BT + \"|\\\"\" + QSTRICT_CONTENT + \"\\\"|'\" + QSTRICT_CONTENT + \"')\";\n\nconst INVOCATION_FLAG_ARGS =\n  VERB + \"\\\\s+(?:\" + QUOTED_STRICT + \"|\" + KNOWN_NAMES_CI + \"|\" + SNAKE_NON_DATA + \"|\" + SLASH_GENERIC + \"|\" + FLAG + \")\" + ARGS + \"(?=\\\\s*\" + CLAUSE_BOUNDARY + \")\";\nconst INVOCATION_CLI_ARGS =\n  VERB + \"\\\\s+\" + CMD_WITH_ARGS + \"(?=\\\\s*\" + CLAUSE_BOUNDARY + \")\";\nconst INVOCATION = \"(?:\" + INVOCATION_FLAG_ARGS + \"|\" + INVOCATION_CLI_ARGS + \")\";\n\nconst TOOL_REFERENCE_CI = new RegExp(\n  \"(?:\" +\n    IDENT + IMM + KEYWORD + \"|\" + KEYWORD + IMM + IDENT + \"|\" +\n    KEYWORD + CONN + IDENT + \"|\" + IDENT + CONN + KEYWORD + \"|\" +\n    INVOCATION +\n  \")\",\n  \"i\",\n);\n\nfunction hasCapitalisedToolName(content: string): boolean {\n  // Structural discriminator: a capitalised identifier beside a tool/command\n  // keyword qualifies ONLY when preceded by an article or invocation verb (not\n  // sentence-initial), or connected via named/called/aka. This replaces the\n  // blocklist approach — a structural rule beats a growing STOP_WORDS set.\n  for (const re of [\n    /(?:the|a|an|this|that|these|those|use|run|call|invoke)\\s+([A-Za-z][A-Za-z0-9]+)\\b[\\s'`<>]{0,4}\\b(?:tool|command|subcommand)\\b/gi,\n    /\\b(?:tool|command|subcommand)\\b\\s+(?:named|called|aka)\\s+([A-Za-z][A-Za-z0-9]+)\\b/gi,\n  ]) {\n    re.lastIndex = 0;\n    let match;\n    while ((match = re.exec(content)) !== null) {\n      const w = match[1];\n      if (w && w[0] >= \"A\" && w[0] <= \"Z\") return true;\n    }\n  }\n  return false;\n}\n\nfunction hasCamelCaseToolName(content: string): boolean {\n  // Case-sensitive: camelCase (lowercase start, interior uppercase) is a common\n  // host-tool naming convention (bashExecution, memoryStore, webFetch). Ordinary\n  // English words are never camelCase, and PascalCase (PostgreSQL, TypeScript)\n  // starts uppercase so is handled by hasCapitalisedToolName instead.\n  const camelRe = /\\b([a-z]{3,}[a-z0-9]*[A-Z][a-z][A-Za-z0-9]*)\\b/g;\n  let m;\n  while ((m = camelRe.exec(content)) !== null) {\n    const token = m[1];\n    const start = m.index!;\n    const end = start + token.length;\n    const before = content.slice(Math.max(0, start - 20), start);\n    const after = content.slice(end);\n    // Invocation: preceded by a verb, followed by a clause boundary or call syntax.\n    if (/(?:^|\\s)(?:use|run|call|invoke)\\s*$/i.test(before) &&\n        /^(?:\\s*(?:$|[.,;(:]|(?:when|before|after|to|with|for|on|in|if|unless|whenever)\\b))/i.test(after)) {\n      return true;\n    }\n    // Keyword-adjacent: camelCase beside a tool/command keyword.\n    if (/^(?:\\s*(?:tool|command|subcommand)\\b)/i.test(after) ||\n        /(?:tool|command|subcommand)\\s*$/i.test(before)) {\n      return true;\n    }\n  }\n  return false;\n}\n\nexport function referencesAgentSpecificTool(content: string): boolean {\n  if (typeof content !== \"string\" || content.length === 0) return false;\n  return TOOL_REFERENCE_CI.test(content) || hasCapitalisedToolName(content) || hasCamelCaseToolName(content);\n}\n\nexport interface ToolScopeWithholdInputs {\n  content: string;\n  sourceConnector?: string;\n  procedureSteps?: ReadonlyArray<{ intent?: string; expectedOutcome?: string; toolCall?: { kind?: string } }>;\n}\n\nexport function withholdToolScopedFromSharedNamespace({\n  content,\n  sourceConnector,\n  procedureSteps,\n}: ToolScopeWithholdInputs): boolean {\n  if (typeof sourceConnector !== \"string\" || sourceConnector.trim().length === 0) return false;\n  if (referencesAgentSpecificTool(content)) return true;\n  if (\n    procedureSteps?.some((s) => {\n      const kind = s.toolCall?.kind;\n      if (typeof kind === \"string\" && kind.trim().length > 0) return true;\n      const stepText = [s.intent, s.expectedOutcome]\n        .filter((t): t is string => typeof t === \"string\" && t.length > 0)\n        .join(\" \");\n      return stepText.length > 0 && referencesAgentSpecificTool(stepText);\n    })\n  ) {\n    return true;\n  }\n  return false;\n}\n\nexport interface GlobalFactPromotionInputs {\n  scope: string | null | undefined;\n  content: string;\n  sourceConnector?: string;\n  procedureSteps?: ReadonlyArray<{ toolCall?: { kind?: string } }>;\n}\n\nexport function shouldPromoteGlobalFactToShared(inputs: GlobalFactPromotionInputs): boolean {\n  if (inputs.scope !== \"global\") return false;\n  return !withholdToolScopedFromSharedNamespace({\n    content: inputs.content,\n    sourceConnector: inputs.sourceConnector,\n    procedureSteps: inputs.procedureSteps,\n  });\n}\n"],"mappings":";AAsBA,IAAM,KAAK;AAMX,IAAM,qBAAqB;AAAA,EACzB;AAAA,EAAQ;AAAA,EAAS;AAAA,EAAU;AAAA,EAAS;AAAA,EAAW;AAAA,EAAQ;AAAA,EAAS;AAAA,EAChE;AAAA,EAAQ;AAAA,EAAQ;AAAA,EAAQ;AAAA,EAAY;AAAA,EACpC;AACF;AACA,IAAM,kBAAkB;AAAA,EACtB;AAAA,EAAQ;AAAA,EAAQ;AAAA,EAAO;AAAA,EAAO;AAAA,EAAQ;AAAA,EAAO;AAAA,EAAO;AAAA,EAAM;AAAA,EAAO;AAAA,EACjE;AAAA,EAAU;AAAA,EAAW;AAAA,EAAQ;AAAA,EAAM;AAAA,EAAM;AAC3C;AACA,IAAM,oBAAoB,mBAAmB,KAAK,GAAG;AACrD,IAAM,kBAAkB,CAAC,GAAG,oBAAoB,GAAG,eAAe,EAAE,KAAK,GAAG;AAC5E,IAAM,gBAAgB,gBAAgB,KAAK,GAAG;AAG9C,IAAM,OAAO;AACb,IAAM,aAAa;AACnB,IAAM,SAAS;AAEf,IAAM,iBAAiB;AACvB,IAAM,kBAAkB,SAAS,oBAAoB;AACrD,IAAM,iBAAiB,QAAQ,iBAAiB,MAAM,kBAAkB;AACxE,IAAM,oBACJ,QAAQ,KAAK,iBAAiB,KAAK,OAAQ,iBAAiB,QAAS,iBAAiB;AAGxF,IAAM,iBAAiB;AACvB,IAAM,cAAc;AAEpB,IAAM,iBAAiB,WAAW,kBAAkB;AACpD,IAAM,eAAe,WAAW,gBAAgB;AAChD,IAAM,UAAU;AAEhB,IAAM,QAAQ,QAAQ,oBAAoB,MAAM,iBAAiB,MAAM,cAAc,MAAM,OAAO;AAElG,IAAM,MAAM,WAAY,KAAK;AAC7B,IAAM,OAAO;AACb,IAAM,OAAO;AACb,IAAM,gBAAgB,SAAS,oBAAoB;AACnD,IAAM,kBAAkB;AACxB,IAAM,OAAO,YAAY,OAAO,YAAY,SAAS;AACrD,IAAM,gBAAgB,6BAA6B,aAAa,MAAM,SAAS;AAC/E,IAAM,cAAc,YAAY,gBAAgB;AAKhD,IAAM,gBAAgB,WAAW,eAAe,MAAM,gBAAgB,MAAM,cAAc;AAC1F,IAAM,kBACJ,QAAQ,kBAAkB,uCAA4C,aAAa,MAAM,kBACzF,MAAM,gBAAgB,SAAS,kBAAkB,MAAM,cAAc;AACvE,IAAM,gBACJ,QAAQ,KAAK,kBAAkB,KAAK,OAAQ,kBAAkB,QAAS,kBAAkB;AAE3F,IAAM,uBACJ,OAAO,YAAY,gBAAgB,MAAM,iBAAiB,MAAM,iBAAiB,MAAM,gBAAgB,MAAM,OAAO,MAAM,OAAO,YAAY,kBAAkB;AACjK,IAAM,sBACJ,OAAO,SAAS,gBAAgB,YAAY,kBAAkB;AAChE,IAAM,aAAa,QAAQ,uBAAuB,MAAM,sBAAsB;AAE9E,IAAM,oBAAoB,IAAI;AAAA,EAC5B,QACE,QAAQ,MAAM,UAAU,MAAM,UAAU,MAAM,QAAQ,MACtD,UAAU,OAAO,QAAQ,MAAM,QAAQ,OAAO,UAAU,MACxD,aACF;AAAA,EACA;AACF;AAEA,SAAS,uBAAuB,SAA0B;AAKxD,aAAW,MAAM;AAAA,IACf;AAAA,IACA;AAAA,EACF,GAAG;AACD,OAAG,YAAY;AACf,QAAI;AACJ,YAAQ,QAAQ,GAAG,KAAK,OAAO,OAAO,MAAM;AAC1C,YAAM,IAAI,MAAM,CAAC;AACjB,UAAI,KAAK,EAAE,CAAC,KAAK,OAAO,EAAE,CAAC,KAAK,IAAK,QAAO;AAAA,IAC9C;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,SAA0B;AAKtD,QAAM,UAAU;AAChB,MAAI;AACJ,UAAQ,IAAI,QAAQ,KAAK,OAAO,OAAO,MAAM;AAC3C,UAAM,QAAQ,EAAE,CAAC;AACjB,UAAM,QAAQ,EAAE;AAChB,UAAM,MAAM,QAAQ,MAAM;AAC1B,UAAM,SAAS,QAAQ,MAAM,KAAK,IAAI,GAAG,QAAQ,EAAE,GAAG,KAAK;AAC3D,UAAM,QAAQ,QAAQ,MAAM,GAAG;AAE/B,QAAI,uCAAuC,KAAK,MAAM,KAClD,sFAAsF,KAAK,KAAK,GAAG;AACrG,aAAO;AAAA,IACT;AAEA,QAAI,yCAAyC,KAAK,KAAK,KACnD,mCAAmC,KAAK,MAAM,GAAG;AACnD,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,4BAA4B,SAA0B;AACpE,MAAI,OAAO,YAAY,YAAY,QAAQ,WAAW,EAAG,QAAO;AAChE,SAAO,kBAAkB,KAAK,OAAO,KAAK,uBAAuB,OAAO,KAAK,qBAAqB,OAAO;AAC3G;AAQO,SAAS,sCAAsC;AAAA,EACpD;AAAA,EACA;AAAA,EACA;AACF,GAAqC;AACnC,MAAI,OAAO,oBAAoB,YAAY,gBAAgB,KAAK,EAAE,WAAW,EAAG,QAAO;AACvF,MAAI,4BAA4B,OAAO,EAAG,QAAO;AACjD,MACE,gBAAgB,KAAK,CAAC,MAAM;AAC1B,UAAM,OAAO,EAAE,UAAU;AACzB,QAAI,OAAO,SAAS,YAAY,KAAK,KAAK,EAAE,SAAS,EAAG,QAAO;AAC/D,UAAM,WAAW,CAAC,EAAE,QAAQ,EAAE,eAAe,EAC1C,OAAO,CAAC,MAAmB,OAAO,MAAM,YAAY,EAAE,SAAS,CAAC,EAChE,KAAK,GAAG;AACX,WAAO,SAAS,SAAS,KAAK,4BAA4B,QAAQ;AAAA,EACpE,CAAC,GACD;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AASO,SAAS,gCAAgC,QAA4C;AAC1F,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,SAAO,CAAC,sCAAsC;AAAA,IAC5C,SAAS,OAAO;AAAA,IAChB,iBAAiB,OAAO;AAAA,IACxB,gBAAgB,OAAO;AAAA,EACzB,CAAC;AACH;","names":[]}

package/dist/{chunk-7RZJWZ46.js → chunk-LEPOP46W.js}

@@ -1,3 +1,7 @@
+import {
+  rebuildConversationChunksFailOpen,
+  upsertConversationChunksFailOpen
+} from "./chunk-72A4L5JJ.js";
 import {
   searchConversationIndex,
   searchConversationIndexFaissFailOpen
@@ -5,10 +9,6 @@ import {
 import {
   failOpenFaissHealth
 } from "./chunk-ET356KSB.js";
-import {
-  rebuildConversationChunksFailOpen,
-  upsertConversationChunksFailOpen
-} from "./chunk-72A4L5JJ.js";
 
 // src/conversation-index/backend.ts
 function createConversationIndexBackend(options) {
@@ -235,4 +235,4 @@ function createFaissBackend(getFaiss) {
 export {
   createConversationIndexBackend
 };
-//# sourceMappingURL=chunk-7RZJWZ46.js.map
+//# sourceMappingURL=chunk-LEPOP46W.js.map

package/dist/{chunk-TITQYVKD.js → chunk-LRYAQGDR.js}

@@ -13,6 +13,9 @@ import {
 import {
   importSqlite
 } from "./chunk-PYHOAXTI.js";
+import {
+  backupMemoryDir
+} from "./chunk-OWHERGF2.js";
 import {
   exportJsonBundle
 } from "./chunk-UP6MOYCB.js";
@@ -25,9 +28,6 @@ import {
 import {
   importJsonBundle
 } from "./chunk-2DL3OFLD.js";
-import {
-  backupMemoryDir
-} from "./chunk-BXLOS5AJ.js";
 import {
   exportMarkdownBundle
 } from "./chunk-765K3SAT.js";
@@ -123,7 +123,7 @@ import {
   runOperatorInventory,
   runOperatorRepair,
   runOperatorSetup
-} from "./chunk-EHNENZHZ.js";
+} from "./chunk-RQBF54FC.js";
 import {
   analyzeSessionIntegrity,
   applySessionRepair,
@@ -200,7 +200,7 @@ import {
 import {
   EngramAccessHttpServer,
   MeetingsInputError
-} from "./chunk-C4PEMCP4.js";
+} from "./chunk-RLOVRJZN.js";
 import {
   WearablesInputError
 } from "./chunk-V7IZKJI3.js";
@@ -213,13 +213,13 @@ import {
   createProductionChatLlmAdapter,
   loadChatSession,
   sessionBelongsToPrincipal
-} from "./chunk-ATUURSST.js";
+} from "./chunk-FL3AM5KE.js";
 import {
   getAbstractionNodeStoreStatus
 } from "./chunk-OADWQ5CR.js";
 import {
   EngramAccessService
-} from "./chunk-YFQMW2TH.js";
+} from "./chunk-DG2R7M7K.js";
 import {
   WorkStorage
 } from "./chunk-GDB4J2H3.js";
@@ -250,7 +250,7 @@ import {
   listNamespaces,
   runNamespaceMigration,
   verifyNamespaces
-} from "./chunk-N2B56SIS.js";
+} from "./chunk-KJT3PZAR.js";
 import {
   analyzeGraphHealth
 } from "./chunk-L2DPF4DF.js";
@@ -4575,7 +4575,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
           }
         }
         if (sourceArchive.endsWith(".enc")) {
-          const { isEncryptedCapsuleFile } = await import("./capsule-crypto-YO5QJ6L3.js");
+          const { isEncryptedCapsuleFile } = await import("./capsule-crypto-GWVG7LGC.js");
           const encDetected = await isEncryptedCapsuleFile(sourceArchive).catch(() => true);
           if (encDetected) {
             throw new Error(
@@ -4738,7 +4738,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
           const { parseExportBundle } = await import("./transfer/types.js");
           let decryptedBuf;
           try {
-            const { decryptCapsuleFileInMemory } = await import("./capsule-crypto-YO5QJ6L3.js");
+            const { decryptCapsuleFileInMemory } = await import("./capsule-crypto-GWVG7LGC.js");
             decryptedBuf = await decryptCapsuleFileInMemory(archivePath, memoryDir);
           } catch (decErr) {
             const msg = decErr instanceof Error ? decErr.message : String(decErr);
@@ -7981,4 +7981,4 @@ export {
   listMemoryMarkdownFilePaths,
   registerCli
 };
-//# sourceMappingURL=chunk-TITQYVKD.js.map
+//# sourceMappingURL=chunk-LRYAQGDR.js.map

package/dist/{chunk-BXLOS5AJ.js → chunk-OWHERGF2.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-765K3SAT.js";
 import {
   encryptCapsuleFile
-} from "./chunk-DQEMWVMT.js";
+} from "./chunk-UVYI6VIX.js";
 import {
   computeTransferOutputRel,
   isTransferPathExcluded
@@ -109,4 +109,4 @@ async function enforceRetention(outDirAbs, retentionDays) {
 export {
   backupMemoryDir
 };
-//# sourceMappingURL=chunk-BXLOS5AJ.js.map
+//# sourceMappingURL=chunk-OWHERGF2.js.map

package/dist/{chunk-6JE3HGS4.js → chunk-OXBPHIKH.js}

@@ -4,13 +4,13 @@ import {
 import {
   normalizeDreamsStatusWindowHours
 } from "./chunk-EQWEIIKQ.js";
-import {
-  runContradictionScan
-} from "./chunk-UTRO5UJU.js";
 import {
   executeResolution,
   isValidResolutionVerb
 } from "./chunk-WG5HSQ4P.js";
+import {
+  runContradictionScan
+} from "./chunk-UTRO5UJU.js";
 import {
   isDefaultReviewNamespace,
   listPairs,
@@ -28,7 +28,7 @@ import {
   defineOperation,
   parseNamespacePreflightWriteOp,
   resolveAuthorizedNamespaceWritablePreflight
-} from "./chunk-YFQMW2TH.js";
+} from "./chunk-DG2R7M7K.js";
 import {
   projectTagProjectId
 } from "./chunk-BUE5E2HL.js";
@@ -485,4 +485,4 @@ defineOperation({ name: "graph_events", description: "SSE graph events.", schema
 defineOperation({ name: "chat_message", description: "Chat message.", schema: strictSchema({ message: S.str, chatSessionId: S.str }), handler: async (_i, _ctx) => ({ result: { ok: true } }) });
 defineOperation({ name: "chat_events", description: "SSE chat events.", schema: strictSchema({}), handler: async (_i, _ctx) => ({ result: { stream: "sse" } }) });
 defineOperation({ name: "adapters_status", description: "Adapter registry metadata (issue #1850 round 5). Marker op: the HTTP transport builds the response from its own adapterRegistry, but the op still must be registered so it appears in listRegisteredOperations and enforceTokenOp can gate it for scoped tokens.", schema: strictSchema({}), handler: async (_i, _ctx) => ({ result: { ok: true } }) });
-//# sourceMappingURL=chunk-6JE3HGS4.js.map
+//# sourceMappingURL=chunk-OXBPHIKH.js.map

package/dist/{chunk-SIKCTPRK.js → chunk-QEPNZBBC.js}

@@ -1,13 +1,13 @@
 import {
   memoryStoreRequestSchema
-} from "./chunk-I5DQ6KZK.js";
+} from "./chunk-FYO2GAZJ.js";
 import {
   CorrectionContractError,
   DECISION_SUBCOMMANDS,
   DELTA_SUBCOMMANDS,
   defineOperation,
   isCodegraphToolName
-} from "./chunk-YFQMW2TH.js";
+} from "./chunk-DG2R7M7K.js";
 import {
   serializeMutations,
   withHeldFileLock
@@ -1805,4 +1805,4 @@ export {
   codegraphIngestTracesOperation,
   REGISTERED_OPERATIONS
 };
-//# sourceMappingURL=chunk-SIKCTPRK.js.map
+//# sourceMappingURL=chunk-QEPNZBBC.js.map

package/dist/{chunk-2QSZNTDO.js → chunk-RKNJBZ55.js}

@@ -1,3 +1,6 @@
+import {
+  ClaudeCodeAdapter
+} from "./chunk-J64TK33U.js";
 import {
   CodexAdapter
 } from "./chunk-RSUYKGGZ.js";
@@ -7,9 +10,6 @@ import {
 import {
   ReplitAdapter
 } from "./chunk-TMSXWOBZ.js";
-import {
-  ClaudeCodeAdapter
-} from "./chunk-J64TK33U.js";
 
 // src/adapters/registry.ts
 var AdapterRegistry = class {
@@ -53,4 +53,4 @@ var AdapterRegistry = class {
 export {
   AdapterRegistry
 };
-//# sourceMappingURL=chunk-2QSZNTDO.js.map
+//# sourceMappingURL=chunk-RKNJBZ55.js.map

package/dist/{chunk-C4PEMCP4.js → chunk-RLOVRJZN.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-V7IZKJI3.js";
 import {
   AdapterRegistry
-} from "./chunk-2QSZNTDO.js";
+} from "./chunk-RKNJBZ55.js";
 import {
   WriteRateLimiter
 } from "./chunk-MKQBXQKU.js";
@@ -16,10 +16,10 @@ import {
   processChatMessage,
   sessionBelongsToPrincipal,
   subscribeChatTranscript
-} from "./chunk-ATUURSST.js";
+} from "./chunk-FL3AM5KE.js";
 import {
   RelayMissionStoreError
-} from "./chunk-SIKCTPRK.js";
+} from "./chunk-QEPNZBBC.js";
 import {
   executeResolution,
   isValidResolutionVerb
@@ -31,7 +31,7 @@ import {
 } from "./chunk-35NN3ZFA.js";
 import {
   validateRequest
-} from "./chunk-I5DQ6KZK.js";
+} from "./chunk-FYO2GAZJ.js";
 import {
   maybeHandleLifecycleFlush
 } from "./chunk-5IVLTFOV.js";
@@ -41,12 +41,12 @@ import {
 import {
   authorizationProbeNamespaces,
   probeOperationAuthorization
-} from "./chunk-J6BYDVPL.js";
+} from "./chunk-6HXQ2YO5.js";
 import {
   CorrectionContractError,
   getOperation,
   resolveQueryNamespaceWritablePreflight
-} from "./chunk-YFQMW2TH.js";
+} from "./chunk-DG2R7M7K.js";
 import {
   isTrustZoneName
 } from "./chunk-JGSKJHF7.js";
@@ -3218,4 +3218,4 @@ export {
   MeetingsInputError,
   EngramAccessHttpServer
 };
-//# sourceMappingURL=chunk-C4PEMCP4.js.map
+//# sourceMappingURL=chunk-RLOVRJZN.js.map

package/dist/{chunk-EHNENZHZ.js → chunk-RQBF54FC.js}

@@ -14,7 +14,7 @@ import {
 } from "./chunk-CMTINOFS.js";
 import {
   summarizeCorpusAndReplica
-} from "./chunk-MPH263X2.js";
+} from "./chunk-HULSU7PS.js";
 import {
   readJudgeVerdictStats
 } from "./chunk-OZKOPQCM.js";
@@ -45,7 +45,7 @@ import {
 } from "./chunk-J6SLNQRO.js";
 import {
   listNamespaces
-} from "./chunk-N2B56SIS.js";
+} from "./chunk-KJT3PZAR.js";
 import {
   analyzeGraphHealth
 } from "./chunk-L2DPF4DF.js";
@@ -1679,4 +1679,4 @@ export {
   runBenchmarkRecall,
   runOperatorRepair
 };
-//# sourceMappingURL=chunk-EHNENZHZ.js.map
+//# sourceMappingURL=chunk-RQBF54FC.js.map

package/dist/{chunk-SPPL77NI.js → chunk-RSFWAI4D.js}

@@ -7,6 +7,9 @@ import {
   syncWearableSource,
   wearableSourceLabel
 } from "./chunk-UV72DEZD.js";
+import {
+  runPeerProfileReasoner
+} from "./chunk-I74SUMNI.js";
 import {
   CompressionGuidelineCoordinator
 } from "./chunk-6LKEUCEM.js";
@@ -14,15 +17,12 @@ import {
   ActivityStore,
   MaintenanceScheduler
 } from "./chunk-IZXTZ7BF.js";
-import {
-  runPeerProfileReasoner
-} from "./chunk-I74SUMNI.js";
 import {
   migrateFromEngram
 } from "./chunk-7HYPN2GC.js";
 import {
   LcmEngine
-} from "./chunk-6NNNURLK.js";
+} from "./chunk-Z54EM5YZ.js";
 import {
   chunkTranscriptEntries
 } from "./chunk-TECVW3JP.js";
@@ -50,6 +50,10 @@ import {
 import {
   TmtBuilder
 } from "./chunk-ECZU5BJH.js";
+import {
+  shouldPromoteGlobalFactToShared,
+  withholdToolScopedFromSharedNamespace
+} from "./chunk-KWMXR7XS.js";
 import {
   extractTopics
 } from "./chunk-UHGBNIOS.js";
@@ -210,7 +214,7 @@ import {
   ensureBuiltInWearableConnectors,
   getWearableConnector,
   listWearableConnectors
-} from "./chunk-TITQYVKD.js";
+} from "./chunk-LRYAQGDR.js";
 import {
   normalizeReplaySessionKey
 } from "./chunk-AJVLDJU6.js";
@@ -240,7 +244,7 @@ import {
 import {
   runNamespaceMaintenanceFanout,
   summarizeNamespaceMaintenanceHealth
-} from "./chunk-EHNENZHZ.js";
+} from "./chunk-RQBF54FC.js";
 import {
   NamespaceCatalog,
   planNamespaceMaintenance
@@ -318,7 +322,7 @@ import {
 } from "./chunk-LBJBNWS2.js";
 import {
   MeetingsInputError
-} from "./chunk-C4PEMCP4.js";
+} from "./chunk-RLOVRJZN.js";
 import {
   WearablesInputError,
   describeErrorForOperator
@@ -336,17 +340,13 @@ import {
   capturePassiveCorrections,
   clusterByKey,
   detectPassiveCorrections
-} from "./chunk-YFQMW2TH.js";
+} from "./chunk-DG2R7M7K.js";
 import {
   importCapsule
-} from "./chunk-6NPZ3FP2.js";
+} from "./chunk-7CCVK67W.js";
 import {
   isCodingGraphInstalled
 } from "./chunk-VQ7B2Q6M.js";
-import {
-  listTrustZoneRecords,
-  searchTrustZoneRecords
-} from "./chunk-JGSKJHF7.js";
 import {
   applyTrustScoreStage,
   buildTrustSignalsForRerank,
@@ -354,6 +354,10 @@ import {
   trustResultFor,
   trustResultKey
 } from "./chunk-GNVZQ5JN.js";
+import {
+  listTrustZoneRecords,
+  searchTrustZoneRecords
+} from "./chunk-JGSKJHF7.js";
 import {
   buildXraySnapshot
 } from "./chunk-KWU6MAD4.js";
@@ -385,11 +389,11 @@ import {
 import {
   NamespaceSearchRouter,
   namespaceCollectionName
-} from "./chunk-V2MVDDJF.js";
+} from "./chunk-SUZI6BHQ.js";
 import {
   createConversationIndexRuntime,
   createSearchBackend
-} from "./chunk-SFW2NABJ.js";
+} from "./chunk-Y6XRTQMV.js";
 import {
   NoopSearchBackend
 } from "./chunk-CYEPCZN5.js";
@@ -3490,6 +3494,7 @@ var ExtractionPersistCoordinator = class {
       scopeProfileWritePlan.profile.readOrder.includes("serverShared") && scopeProfileWritePlan.readNamespaces.includes(this.deps.config.sharedNamespace) && sharedProfileLayer?.readable && sharedProfileLayer.writable && sharedPromotionTarget?.authorized
     );
     const namespacesEnabled = resolveNamespaceCapabilities(this.deps.config).namespaces;
+    const sourceConnector = sourceContext?.sourceConnector;
     const promoteMemoryToProfileTargets = async (options) => {
       if (!scopeProfileWritePlan || !profileAutoPromotionAllows(scopeProfileWritePlan, options.category, options.confidence))
         return;
@@ -3618,6 +3623,7 @@ var ExtractionPersistCoordinator = class {
     };
     const promoteMemoryToShared = async (options) => {
       await promoteMemoryToProfileTargets(options);
+      if (lifecycleCaps.extractionScopeClassification && withholdToolScopedFromSharedNamespace(options)) return;
       if (!shouldPromoteToShared(
         this.deps.config,
         scopeProfileWritePlan,
@@ -4006,7 +4012,12 @@ var ExtractionPersistCoordinator = class {
           }
           let factRedactionRules = preJudgeRedactionRules;
           let factNs = preRoutedNamespaceByFact[fi];
-          if (!factNs && lifecycleCaps.extractionScopeClassification && namespacesEnabled && f.scope === "global" && profileAllowsSharedWrites && this.deps.storageDirNamespace(storage.dir) !== this.deps.config.sharedNamespace) {
+          if (!factNs && lifecycleCaps.extractionScopeClassification && namespacesEnabled && f.scope === "global" && profileAllowsSharedWrites && this.deps.storageDirNamespace(storage.dir) !== this.deps.config.sharedNamespace && shouldPromoteGlobalFactToShared({
+            scope: f.scope,
+            content: f.content,
+            sourceConnector,
+            procedureSteps: f.procedureSteps
+          })) {
             factNs = this.deps.config.sharedNamespace;
           }
           if (factNs) {
@@ -4168,18 +4179,25 @@ var ExtractionPersistCoordinator = class {
       if (lifecycleCaps.extractionScopeClassification && namespacesEnabled && fact.scope === "global" && !routedNamespaceExplicit) {
         const currentNs = this.deps.storageDirNamespace(targetStorage.dir);
         if (currentNs !== this.deps.config.sharedNamespace && profileAllowsSharedWrites) {
-          try {
-            targetStorage = await this.deps.getStorageRouter().storageFor(
-              this.deps.config.sharedNamespace
-            );
-            targetNamespaceName = this.deps.config.sharedNamespace;
-            log.debug(
-              `scope-routing: fact "${fact.content.slice(0, 60)}\u2026" routed to shared namespace (scope=global)`
-            );
-          } catch (scopeRouteErr) {
-            log.warn(
-              `scope-routing: failed to resolve shared namespace storage; writing to session namespace (fail-open): ${scopeRouteErr}`
-            );
+          if (shouldPromoteGlobalFactToShared({
+            scope: fact.scope,
+            content: fact.content,
+            sourceConnector,
+            procedureSteps: fact.procedureSteps
+          })) {
+            try {
+              targetStorage = await this.deps.getStorageRouter().storageFor(
+                this.deps.config.sharedNamespace
+              );
+              targetNamespaceName = this.deps.config.sharedNamespace;
+              log.debug(
+                `scope-routing: fact "${fact.content.slice(0, 60)}\u2026" routed to shared namespace (scope=global)`
+              );
+            } catch (scopeRouteErr) {
+              log.warn(
+                `scope-routing: failed to resolve shared namespace storage; writing to session namespace (fail-open): ${scopeRouteErr}`
+              );
+            }
           }
         } else if (currentNs !== this.deps.config.sharedNamespace) {
           log.debug(
@@ -4602,6 +4620,7 @@ var ExtractionPersistCoordinator = class {
             } : {},
             source: extractionWriteSource,
             ...extractionSourceConnector ? { sourceConnector: extractionSourceConnector } : {},
+            ...fact.procedureSteps && fact.procedureSteps.length ? { procedureSteps: fact.procedureSteps } : {},
             ...fact.sources && fact.sources.length > 0 ? { sources: fact.sources } : {},
             ...fact.provenance ? { provenance: fact.provenance } : {}
           });
@@ -4807,6 +4826,7 @@ var ExtractionPersistCoordinator = class {
           } : {},
           source: extractionWriteSource,
           ...extractionSourceConnector ? { sourceConnector: extractionSourceConnector } : {},
+          ...fact.procedureSteps && fact.procedureSteps.length ? { procedureSteps: fact.procedureSteps } : {},
           ...fact.sources && fact.sources.length > 0 ? { sources: fact.sources } : {},
           ...fact.provenance ? { provenance: fact.provenance } : {}
         });
@@ -23731,4 +23751,4 @@ export {
   filterRecallCandidates,
   Orchestrator
 };
-//# sourceMappingURL=chunk-SPPL77NI.js.map
+//# sourceMappingURL=chunk-RSFWAI4D.js.map