@remnic/core 9.33.0 → 9.35.0

package/dist/{chunk-N2B56SIS.js → chunk-2SHIWGY7.js}

@@ -1,6 +1,6 @@
 import {
   namespaceCollectionName
-} from "./chunk-V2MVDDJF.js";
+} from "./chunk-IOQFPVGY.js";
 import {
   NamespaceStorageRouter
 } from "./chunk-Y2ZD2RVG.js";
@@ -207,4 +207,4 @@ export {
   verifyNamespaces,
   runNamespaceMigration
 };
-//# sourceMappingURL=chunk-N2B56SIS.js.map
+//# sourceMappingURL=chunk-2SHIWGY7.js.map

package/dist/{chunk-I5DQ6KZK.js → chunk-3F2LKUMU.js}

@@ -1,6 +1,6 @@
 import {
   isValidCapsuleSince
-} from "./chunk-VDX2J7OX.js";
+} from "./chunk-KQAFEZQX.js";
 import {
   CAPSULE_ID_PATTERN
 } from "./chunk-WEHSQBFR.js";
@@ -475,4 +475,4 @@ export {
   actionConfidenceRequestSchema,
   validateRequest
 };
-//# sourceMappingURL=chunk-I5DQ6KZK.js.map
+//# sourceMappingURL=chunk-3F2LKUMU.js.map

package/dist/{chunk-ATUURSST.js → chunk-5FHE4JI7.js}

@@ -12,7 +12,7 @@ import {
 } from "./chunk-T4WDJPEZ.js";
 import {
   validateRequest
-} from "./chunk-I5DQ6KZK.js";
+} from "./chunk-3F2LKUMU.js";
 import {
   MCP_ADMIN_OPS_TOOLS,
   MCP_GIT_CONTEXT_SCHEMA_PROPS_IGNORED
@@ -22,7 +22,7 @@ import {
 } from "./chunk-WWUVONGW.js";
 import {
   getOperation
-} from "./chunk-YFQMW2TH.js";
+} from "./chunk-5HTAJCTO.js";
 import {
   assertOperationAllowed,
   capabilityAllowsOp,
@@ -3754,4 +3754,4 @@ export {
   MCP_SUPPORTED_PROTOCOL_VERSIONS,
   EngramMcpServer
 };
-//# sourceMappingURL=chunk-ATUURSST.js.map
+//# sourceMappingURL=chunk-5FHE4JI7.js.map

package/dist/{chunk-YFQMW2TH.js → chunk-5HTAJCTO.js}

@@ -8,10 +8,16 @@ import {
 } from "./chunk-GDB4J2H3.js";
 import {
   importCapsule
-} from "./chunk-6NPZ3FP2.js";
+} from "./chunk-65ZPVYTA.js";
 import {
   WriteQuarantineStore
 } from "./chunk-PJSK6OJM.js";
+import {
+  trustResultFor
+} from "./chunk-GNVZQ5JN.js";
+import {
+  renderEpistemicHedge
+} from "./chunk-YN2UN7N3.js";
 import {
   getTrustZoneStoreStatus,
   isTrustZoneName,
@@ -21,12 +27,6 @@ import {
   seedTrustZoneDemoDataset,
   summarizeTrustZonePromotionReadiness
 } from "./chunk-JGSKJHF7.js";
-import {
-  trustResultFor
-} from "./chunk-GNVZQ5JN.js";
-import {
-  renderEpistemicHedge
-} from "./chunk-YN2UN7N3.js";
 import {
   planSessionTranscriptMigration
 } from "./chunk-P5FPO2BR.js";
@@ -101,10 +101,10 @@ import {
 import {
   CorpusWatermarkCache,
   computeServiceCorpusCensus
-} from "./chunk-YJ7PWEWI.js";
+} from "./chunk-SA3WJJF2.js";
 import {
   namespaceCollectionName
-} from "./chunk-V2MVDDJF.js";
+} from "./chunk-IOQFPVGY.js";
 import {
   CrossNamespaceBudget,
   toBudgetWarning
@@ -224,7 +224,7 @@ import {
 } from "./chunk-JAKIDQB2.js";
 import {
   exportCapsule
-} from "./chunk-VDX2J7OX.js";
+} from "./chunk-KQAFEZQX.js";
 import {
   evaluateActionConfidence
 } from "./chunk-Z2YFLXHU.js";
@@ -13323,4 +13323,4 @@ export {
   EngramAccessService,
   AccessAdminOpsSurface
 };
-//# sourceMappingURL=chunk-YFQMW2TH.js.map
+//# sourceMappingURL=chunk-5HTAJCTO.js.map

package/dist/{chunk-6NPZ3FP2.js → chunk-65ZPVYTA.js}

@@ -10,7 +10,7 @@ import {
 import {
   decryptCapsuleFileInMemory,
   isEncryptedCapsuleFile
-} from "./chunk-DQEMWVMT.js";
+} from "./chunk-X7Y7WX73.js";
 import {
   assertIsDirectoryNotSymlink,
   assertRealpathInsideRoot,
@@ -231,4 +231,4 @@ function mintForkId(capsuleId, originalId, now) {
 export {
   importCapsule
 };
-//# sourceMappingURL=chunk-6NPZ3FP2.js.map
+//# sourceMappingURL=chunk-65ZPVYTA.js.map

package/dist/{chunk-MPH263X2.js → chunk-AHZYNPLX.js}

@@ -4,7 +4,7 @@ import {
 import {
   computeCorpusWatermarks,
   resolveCorpusNamespaceRoots
-} from "./chunk-YJ7PWEWI.js";
+} from "./chunk-SA3WJJF2.js";
 
 // src/operator-doctor-corpus.ts
 var DIGEST_PREFIX_LENGTH = 12;
@@ -78,4 +78,4 @@ export {
   corpusWatermarksFromCheck,
   summarizeCorpusAndReplica
 };
-//# sourceMappingURL=chunk-MPH263X2.js.map
+//# sourceMappingURL=chunk-AHZYNPLX.js.map

package/dist/{chunk-77CNV7DY.js → chunk-BLAKS3CP.js}

@@ -1,10 +1,10 @@
+import {
+  scanMemoryDir
+} from "./chunk-W7IGLX4G.js";
 import {
   isSearchAborted,
   throwIfSearchAborted
 } from "./chunk-CINZGPSJ.js";
-import {
-  scanMemoryDir
-} from "./chunk-W7IGLX4G.js";
 import {
   reportSearchDegradation,
   resolveEnsureCollectionArgs
@@ -499,4 +499,4 @@ function isMissingVectorProviderColumnError(err) {
 export {
   LanceDbBackend
 };
-//# sourceMappingURL=chunk-77CNV7DY.js.map
+//# sourceMappingURL=chunk-BLAKS3CP.js.map

package/dist/{chunk-J6BYDVPL.js → chunk-EH5U2YCX.js}

@@ -2,7 +2,7 @@ import {
   OPERATION_NAMES,
   getOperation,
   operationRequiresAuthorizedNamespace
-} from "./chunk-YFQMW2TH.js";
+} from "./chunk-5HTAJCTO.js";
 import {
   assertOperationAuthorizationAllowed
 } from "./chunk-MZWSOLMT.js";
@@ -49,4 +49,4 @@ export {
   probeOperationAuthorization,
   authorizationProbeNamespaces
 };
-//# sourceMappingURL=chunk-J6BYDVPL.js.map
+//# sourceMappingURL=chunk-EH5U2YCX.js.map

package/dist/{chunk-PTN6UAUA.js → chunk-ES36HTSC.js}

@@ -1,10 +1,10 @@
+import {
+  scanMemoryDir
+} from "./chunk-W7IGLX4G.js";
 import {
   isSearchAborted,
   throwIfSearchAborted
 } from "./chunk-CINZGPSJ.js";
-import {
-  scanMemoryDir
-} from "./chunk-W7IGLX4G.js";
 import {
   reportSearchDegradation,
   resolveEnsureCollectionArgs
@@ -613,4 +613,4 @@ export {
   resolveOramaCollectionDbFilePath,
   OramaBackend
 };
-//# sourceMappingURL=chunk-PTN6UAUA.js.map
+//# sourceMappingURL=chunk-ES36HTSC.js.map

package/dist/{chunk-SIKCTPRK.js → chunk-GHR7WHZX.js}

@@ -1,13 +1,13 @@
 import {
   memoryStoreRequestSchema
-} from "./chunk-I5DQ6KZK.js";
+} from "./chunk-3F2LKUMU.js";
 import {
   CorrectionContractError,
   DECISION_SUBCOMMANDS,
   DELTA_SUBCOMMANDS,
   defineOperation,
   isCodegraphToolName
-} from "./chunk-YFQMW2TH.js";
+} from "./chunk-5HTAJCTO.js";
 import {
   serializeMutations,
   withHeldFileLock
@@ -1805,4 +1805,4 @@ export {
   codegraphIngestTracesOperation,
   REGISTERED_OPERATIONS
 };
-//# sourceMappingURL=chunk-SIKCTPRK.js.map
+//# sourceMappingURL=chunk-GHR7WHZX.js.map

package/dist/{chunk-TITQYVKD.js → chunk-HEVWWPTL.js}

@@ -12,13 +12,7 @@ import {
 } from "./chunk-HDDRVXX4.js";
 import {
   importSqlite
-} from "./chunk-PYHOAXTI.js";
-import {
-  exportJsonBundle
-} from "./chunk-UP6MOYCB.js";
-import {
-  exportSqlite
-} from "./chunk-BV2TIZ4F.js";
+} from "./chunk-LRGSLV7M.js";
 import {
   detectImportFormat
 } from "./chunk-OZKVVUJB.js";
@@ -27,10 +21,16 @@ import {
 } from "./chunk-2DL3OFLD.js";
 import {
   backupMemoryDir
-} from "./chunk-BXLOS5AJ.js";
+} from "./chunk-2NLLXCJG.js";
+import {
+  exportJsonBundle
+} from "./chunk-UP6MOYCB.js";
 import {
   exportMarkdownBundle
 } from "./chunk-765K3SAT.js";
+import {
+  exportSqlite
+} from "./chunk-BV2TIZ4F.js";
 import {
   buildReplayNormalizerRegistry,
   clampBatchSize,
@@ -123,7 +123,7 @@ import {
   runOperatorInventory,
   runOperatorRepair,
   runOperatorSetup
-} from "./chunk-EHNENZHZ.js";
+} from "./chunk-TJLLYV2X.js";
 import {
   analyzeSessionIntegrity,
   applySessionRepair,
@@ -200,7 +200,7 @@ import {
 import {
   EngramAccessHttpServer,
   MeetingsInputError
-} from "./chunk-C4PEMCP4.js";
+} from "./chunk-SLPLPGJQ.js";
 import {
   WearablesInputError
 } from "./chunk-V7IZKJI3.js";
@@ -213,13 +213,13 @@ import {
   createProductionChatLlmAdapter,
   loadChatSession,
   sessionBelongsToPrincipal
-} from "./chunk-ATUURSST.js";
+} from "./chunk-5FHE4JI7.js";
 import {
   getAbstractionNodeStoreStatus
 } from "./chunk-OADWQ5CR.js";
 import {
   EngramAccessService
-} from "./chunk-YFQMW2TH.js";
+} from "./chunk-5HTAJCTO.js";
 import {
   WorkStorage
 } from "./chunk-GDB4J2H3.js";
@@ -250,7 +250,7 @@ import {
   listNamespaces,
   runNamespaceMigration,
   verifyNamespaces
-} from "./chunk-N2B56SIS.js";
+} from "./chunk-2SHIWGY7.js";
 import {
   analyzeGraphHealth
 } from "./chunk-L2DPF4DF.js";
@@ -4575,7 +4575,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
           }
         }
         if (sourceArchive.endsWith(".enc")) {
-          const { isEncryptedCapsuleFile } = await import("./capsule-crypto-YO5QJ6L3.js");
+          const { isEncryptedCapsuleFile } = await import("./capsule-crypto-7FJQINUR.js");
           const encDetected = await isEncryptedCapsuleFile(sourceArchive).catch(() => true);
           if (encDetected) {
             throw new Error(
@@ -4738,7 +4738,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
           const { parseExportBundle } = await import("./transfer/types.js");
           let decryptedBuf;
           try {
-            const { decryptCapsuleFileInMemory } = await import("./capsule-crypto-YO5QJ6L3.js");
+            const { decryptCapsuleFileInMemory } = await import("./capsule-crypto-7FJQINUR.js");
             decryptedBuf = await decryptCapsuleFileInMemory(archivePath, memoryDir);
           } catch (decErr) {
             const msg = decErr instanceof Error ? decErr.message : String(decErr);
@@ -7981,4 +7981,4 @@ export {
   listMemoryMarkdownFilePaths,
   registerCli
 };
-//# sourceMappingURL=chunk-TITQYVKD.js.map
+//# sourceMappingURL=chunk-HEVWWPTL.js.map

package/dist/{chunk-V2MVDDJF.js → chunk-IOQFPVGY.js}

@@ -1,6 +1,6 @@
 import {
   createSearchBackend
-} from "./chunk-SFW2NABJ.js";
+} from "./chunk-UZQCNOPS.js";
 import {
   namespaceIdentityToken,
   normalizeNamespaceIdentity
@@ -470,4 +470,4 @@ export {
   NamespaceSearchRouter,
   normalizeQmdResultPath
 };
-//# sourceMappingURL=chunk-V2MVDDJF.js.map
+//# sourceMappingURL=chunk-IOQFPVGY.js.map

package/dist/{chunk-VDX2J7OX.js → chunk-KQAFEZQX.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-WEHSQBFR.js";
 import {
   encryptCapsuleFile
-} from "./chunk-DQEMWVMT.js";
+} from "./chunk-X7Y7WX73.js";
 import {
   CAPSULE_SCHEMA_VERSION,
   EXPORT_FORMAT
@@ -261,4 +261,4 @@ export {
   exportCapsule,
   isValidCapsuleSince
 };
-//# sourceMappingURL=chunk-VDX2J7OX.js.map
+//# sourceMappingURL=chunk-KQAFEZQX.js.map

package/dist/chunk-KWMXR7XS.js

@@ -0,0 +1,138 @@
+// src/tool-scoped-memory.ts
+var BT = "`";
+var GENERIC_TOOL_NAMES = [
+  "read",
+  "write",
+  "search",
+  "fetch",
+  "browser",
+  "exec",
+  "shell",
+  "memory",
+  "edit",
+  "bash",
+  "glob",
+  "webfetch",
+  "task",
+  "remnic"
+];
+var KNOWN_CLI_NAMES = [
+  "grep",
+  "curl",
+  "git",
+  "npm",
+  "pnpm",
+  "sed",
+  "awk",
+  "jq",
+  "cat",
+  "ssh",
+  "docker",
+  "kubectl",
+  "make",
+  "rg",
+  "ls",
+  "cd"
+];
+var GENERIC_NAMES_ALT = GENERIC_TOOL_NAMES.join("|");
+var KNOWN_NAMES_ALT = [...GENERIC_TOOL_NAMES, ...KNOWN_CLI_NAMES].join("|");
+var CLI_NAMES_ALT = KNOWN_CLI_NAMES.join("|");
+var FLAG = "(?:--|-)[A-Za-z][A-Za-z0-9]*(?:-[A-Za-z0-9]+)*\\b";
+var FLAG_NAKED = "(?:--|-)[A-Za-z][A-Za-z0-9]*(?:-[A-Za-z0-9]+)*";
+var OPCODE = "[A-Za-z0-9_./-]{1,20}";
+var NO_SLASH_TOKEN = "[A-Za-z0-9_.-]{1,60}";
+var SLASH_CMD_TOKEN = "/(?:" + GENERIC_NAMES_ALT + ")\\b";
+var QUOTED_CONTENT = "(?:" + NO_SLASH_TOKEN + "|" + SLASH_CMD_TOKEN + ")";
+var QUOTED_PERMISSIVE = "(?:" + BT + QUOTED_CONTENT + BT + '|"' + QUOTED_CONTENT + `"|'` + QUOTED_CONTENT + "')";
+var SNAKE_NON_DATA = "(?:[a-z][a-z0-9]*(?:_[a-z0-9]+)*(?:_(?!id\\b|name\\b|flag\\b|count\\b|at\\b|url\\b|key\\b|type\\b)[a-z0-9]+))\\b";
+var SNAKE_KEBAB = "(?:[a-z][a-z0-9]*(?:[_-][a-z0-9]+)+)\\b";
+var KNOWN_NAMES_CI = "\\b(?:" + KNOWN_NAMES_ALT + ")\\b";
+var CLI_NAMES_CI = "\\b(?:" + CLI_NAMES_ALT + ")\\b";
+var KEYWORD = "\\b(?:mcp[ _]tool|slash[ _]command|cli[ _]flag|subcommand|tool|command)\\b";
+var IDENT = "(?:" + QUOTED_PERMISSIVE + "|" + KNOWN_NAMES_CI + "|" + SNAKE_KEBAB + "|" + FLAG + ")";
+var IMM = `[\\s'"` + BT + "]{1,4}";
+var CONN = "\\s+(?:named|called|aka)\\s+";
+var VERB = "\\b(?:use|run|call|invoke)\\b";
+var SLASH_GENERIC = "/(?:" + GENERIC_NAMES_ALT + ")\\b";
+var CLAUSE_BOUNDARY = "(?:$|[.,;(:]|(?:when|before|after|to|with|for|on|in|if|unless|whenever)\\b)";
+var ARGS = "(?:\\s+" + FLAG + "(?:\\s+" + OPCODE + "){0,4})?";
+var CLI_ARG_TOKEN = "(?:[a-z][a-z0-9-]{0,15}|" + FLAG_NAKED + "|" + OPCODE + ")";
+var CLI_ARG_RUN = "(?:\\s+" + CLI_ARG_TOKEN + "){1,4}";
+var CMD_WITH_ARGS = "(?:(?:" + CLI_NAMES_CI + "|" + SLASH_GENERIC + ")" + CLI_ARG_RUN + ")";
+var QSTRICT_CONTENT = "(?:" + KNOWN_NAMES_ALT + "|[a-z][a-z0-9]*(?:[_-][a-z0-9]+)+|" + FLAG_NAKED + "|" + SLASH_CMD_TOKEN + "|" + CMD_WITH_ARGS + "|(?:" + KNOWN_NAMES_ALT + ")" + CLI_ARG_RUN + ")";
+var QUOTED_STRICT = "(?:" + BT + QSTRICT_CONTENT + BT + '|"' + QSTRICT_CONTENT + `"|'` + QSTRICT_CONTENT + "')";
+var INVOCATION_FLAG_ARGS = VERB + "\\s+(?:" + QUOTED_STRICT + "|" + KNOWN_NAMES_CI + "|" + SNAKE_NON_DATA + "|" + SLASH_GENERIC + "|" + FLAG + ")" + ARGS + "(?=\\s*" + CLAUSE_BOUNDARY + ")";
+var INVOCATION_CLI_ARGS = VERB + "\\s+" + CMD_WITH_ARGS + "(?=\\s*" + CLAUSE_BOUNDARY + ")";
+var INVOCATION = "(?:" + INVOCATION_FLAG_ARGS + "|" + INVOCATION_CLI_ARGS + ")";
+var TOOL_REFERENCE_CI = new RegExp(
+  "(?:" + IDENT + IMM + KEYWORD + "|" + KEYWORD + IMM + IDENT + "|" + KEYWORD + CONN + IDENT + "|" + IDENT + CONN + KEYWORD + "|" + INVOCATION + ")",
+  "i"
+);
+function hasCapitalisedToolName(content) {
+  for (const re of [
+    /(?:the|a|an|this|that|these|those|use|run|call|invoke)\s+([A-Za-z][A-Za-z0-9]+)\b[\s'`<>]{0,4}\b(?:tool|command|subcommand)\b/gi,
+    /\b(?:tool|command|subcommand)\b\s+(?:named|called|aka)\s+([A-Za-z][A-Za-z0-9]+)\b/gi
+  ]) {
+    re.lastIndex = 0;
+    let match;
+    while ((match = re.exec(content)) !== null) {
+      const w = match[1];
+      if (w && w[0] >= "A" && w[0] <= "Z") return true;
+    }
+  }
+  return false;
+}
+function hasCamelCaseToolName(content) {
+  const camelRe = /\b([a-z]{3,}[a-z0-9]*[A-Z][a-z][A-Za-z0-9]*)\b/g;
+  let m;
+  while ((m = camelRe.exec(content)) !== null) {
+    const token = m[1];
+    const start = m.index;
+    const end = start + token.length;
+    const before = content.slice(Math.max(0, start - 20), start);
+    const after = content.slice(end);
+    if (/(?:^|\s)(?:use|run|call|invoke)\s*$/i.test(before) && /^(?:\s*(?:$|[.,;(:]|(?:when|before|after|to|with|for|on|in|if|unless|whenever)\b))/i.test(after)) {
+      return true;
+    }
+    if (/^(?:\s*(?:tool|command|subcommand)\b)/i.test(after) || /(?:tool|command|subcommand)\s*$/i.test(before)) {
+      return true;
+    }
+  }
+  return false;
+}
+function referencesAgentSpecificTool(content) {
+  if (typeof content !== "string" || content.length === 0) return false;
+  return TOOL_REFERENCE_CI.test(content) || hasCapitalisedToolName(content) || hasCamelCaseToolName(content);
+}
+function withholdToolScopedFromSharedNamespace({
+  content,
+  sourceConnector,
+  procedureSteps
+}) {
+  if (typeof sourceConnector !== "string" || sourceConnector.trim().length === 0) return false;
+  if (referencesAgentSpecificTool(content)) return true;
+  if (procedureSteps?.some((s) => {
+    const kind = s.toolCall?.kind;
+    if (typeof kind === "string" && kind.trim().length > 0) return true;
+    const stepText = [s.intent, s.expectedOutcome].filter((t) => typeof t === "string" && t.length > 0).join(" ");
+    return stepText.length > 0 && referencesAgentSpecificTool(stepText);
+  })) {
+    return true;
+  }
+  return false;
+}
+function shouldPromoteGlobalFactToShared(inputs) {
+  if (inputs.scope !== "global") return false;
+  return !withholdToolScopedFromSharedNamespace({
+    content: inputs.content,
+    sourceConnector: inputs.sourceConnector,
+    procedureSteps: inputs.procedureSteps
+  });
+}
+
+export {
+  referencesAgentSpecificTool,
+  withholdToolScopedFromSharedNamespace,
+  shouldPromoteGlobalFactToShared
+};
+//# sourceMappingURL=chunk-KWMXR7XS.js.map

package/dist/chunk-KWMXR7XS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/tool-scoped-memory.ts"],"sourcesContent":["/**\n * Tool-scoped memory guard (issue #2183).\n *\n * A tool-related fact extracted from a specific agent integration carries an\n * UNQUALIFIED tool name — \"use the search tool\" — with no agent identity\n * attached (the conversation handed to the extraction LLM is rendered as\n * `[role] content` only). Promoting such a fact to the shared namespace lets a\n * DIFFERENT integration that exposes a same-named but incompatible tool (Pi\n * `search` = repo code search vs OpenClaw `search` = web search) consume it.\n *\n * `referencesAgentSpecificTool` flags fact text that references a specific\n * tool/command invocation rather than portable knowledge. The promotion guard\n * in `orchestration/extraction-persist.ts` uses it — when the producing\n * integration is known (`sourceConnector`) — to keep such a fact in that\n * integration's own namespace.\n *\n * Tuning bias: a FALSE POSITIVE is cheap — the fact stays in the narrower\n * namespace, the documented safe default. A FALSE NEGATIVE is the actual\n * cross-integration collision bug, so detection leans permissive — but it must\n * not fire on ordinary prose.\n */\n\nconst BT = \"`\";\n\n// Generic tool names + host-tool names emitted by the agent adapters.\n// Evidence: \"edit\" — Pi messages.test.ts:43 ({ type: \"toolCall\", name: \"edit\" }).\n// \"bash\" — Pi messages.test.ts:70 (bashExecution tool rendering). \"glob\",\n// \"webfetch\", \"task\" — standard Claude Code tools (Pi wraps Claude Code).\nconst GENERIC_TOOL_NAMES = [\n  \"read\", \"write\", \"search\", \"fetch\", \"browser\", \"exec\", \"shell\", \"memory\",\n  \"edit\", \"bash\", \"glob\", \"webfetch\", \"task\",\n  \"remnic\",\n];\nconst KNOWN_CLI_NAMES = [\n  \"grep\", \"curl\", \"git\", \"npm\", \"pnpm\", \"sed\", \"awk\", \"jq\", \"cat\", \"ssh\",\n  \"docker\", \"kubectl\", \"make\", \"rg\", \"ls\", \"cd\",\n];\nconst GENERIC_NAMES_ALT = GENERIC_TOOL_NAMES.join(\"|\");\nconst KNOWN_NAMES_ALT = [...GENERIC_TOOL_NAMES, ...KNOWN_CLI_NAMES].join(\"|\");\nconst CLI_NAMES_ALT = KNOWN_CLI_NAMES.join(\"|\");\n\nconst FS_ROOTS = \"(?:etc|var|usr|tmp|home|opt|srv|proc|dev)\";\nconst FLAG = \"(?:--|-)[A-Za-z][A-Za-z0-9]*(?:-[A-Za-z0-9]+)*\\\\b\";\nconst FLAG_NAKED = \"(?:--|-)[A-Za-z][A-Za-z0-9]*(?:-[A-Za-z0-9]+)*\";\nconst OPCODE = \"[A-Za-z0-9_./-]{1,20}\";\n\nconst NO_SLASH_TOKEN = \"[A-Za-z0-9_.-]{1,60}\";\nconst SLASH_CMD_TOKEN = \"/(?:\" + GENERIC_NAMES_ALT + \")\\\\b\";\nconst QUOTED_CONTENT = \"(?:\" + NO_SLASH_TOKEN + \"|\" + SLASH_CMD_TOKEN + \")\";\nconst QUOTED_PERMISSIVE =\n  \"(?:\" + BT + QUOTED_CONTENT + BT + \"|\\\"\" + QUOTED_CONTENT + \"\\\"|'\" + QUOTED_CONTENT + \"')\";\n\nconst SNAKE = \"(?:[a-z][a-z0-9]*(?:_[a-z0-9]+)+)\\\\b\";\nconst SNAKE_NON_DATA = \"(?:[a-z][a-z0-9]*(?:_[a-z0-9]+)*(?:_(?!id\\\\b|name\\\\b|flag\\\\b|count\\\\b|at\\\\b|url\\\\b|key\\\\b|type\\\\b)[a-z0-9]+))\\\\b\";\nconst SNAKE_KEBAB = \"(?:[a-z][a-z0-9]*(?:[_-][a-z0-9]+)+)\\\\b\";\n\nconst KNOWN_NAMES_CI = \"\\\\b(?:\" + KNOWN_NAMES_ALT + \")\\\\b\";\nconst CLI_NAMES_CI = \"\\\\b(?:\" + CLI_NAMES_ALT + \")\\\\b\";\nconst KEYWORD = \"\\\\b(?:mcp[ _]tool|slash[ _]command|cli[ _]flag|subcommand|tool|command)\\\\b\";\n\nconst IDENT = \"(?:\" + QUOTED_PERMISSIVE + \"|\" + KNOWN_NAMES_CI + \"|\" + SNAKE_KEBAB + \"|\" + FLAG + \")\";\n\nconst IMM = \"[\\\\s'\\\"\" + BT + \"]{1,4}\";\nconst CONN = \"\\\\s+(?:named|called|aka)\\\\s+\";\nconst VERB = \"\\\\b(?:use|run|call|invoke)\\\\b\";\nconst SLASH_GENERIC = \"/(?:\" + GENERIC_NAMES_ALT + \")\\\\b\";\nconst CLAUSE_BOUNDARY = \"(?:$|[.,;(:]|(?:when|before|after|to|with|for|on|in|if|unless|whenever)\\\\b)\";\nconst ARGS = \"(?:\\\\s+\" + FLAG + \"(?:\\\\s+\" + OPCODE + \"){0,4})?\";\nconst CLI_ARG_TOKEN = \"(?:[a-z][a-z0-9-]{0,15}|\" + FLAG_NAKED + \"|\" + OPCODE + \")\";\nconst CLI_ARG_RUN = \"(?:\\\\s+\" + CLI_ARG_TOKEN + \"){1,4}\";\n\n// Shared: a CLI tool or slash command optionally followed by a bounded\n// argument run. Used by BOTH the quoted and unquoted invocation arms so\n// quoting cannot diverge from unquoted again (#2183 round 20).\nconst CMD_WITH_ARGS = \"(?:(?:\" + CLI_NAMES_CI + \"|\" + SLASH_GENERIC + \")\" + CLI_ARG_RUN + \")\";\nconst QSTRICT_CONTENT =\n  \"(?:\" + KNOWN_NAMES_ALT + \"|[a-z][a-z0-9]*(?:[_-][a-z0-9]+)+\" + \"|\" + FLAG_NAKED + \"|\" + SLASH_CMD_TOKEN +\n  \"|\" + CMD_WITH_ARGS + \"|(?:\" + KNOWN_NAMES_ALT + \")\" + CLI_ARG_RUN + \")\";\nconst QUOTED_STRICT =\n  \"(?:\" + BT + QSTRICT_CONTENT + BT + \"|\\\"\" + QSTRICT_CONTENT + \"\\\"|'\" + QSTRICT_CONTENT + \"')\";\n\nconst INVOCATION_FLAG_ARGS =\n  VERB + \"\\\\s+(?:\" + QUOTED_STRICT + \"|\" + KNOWN_NAMES_CI + \"|\" + SNAKE_NON_DATA + \"|\" + SLASH_GENERIC + \"|\" + FLAG + \")\" + ARGS + \"(?=\\\\s*\" + CLAUSE_BOUNDARY + \")\";\nconst INVOCATION_CLI_ARGS =\n  VERB + \"\\\\s+\" + CMD_WITH_ARGS + \"(?=\\\\s*\" + CLAUSE_BOUNDARY + \")\";\nconst INVOCATION = \"(?:\" + INVOCATION_FLAG_ARGS + \"|\" + INVOCATION_CLI_ARGS + \")\";\n\nconst TOOL_REFERENCE_CI = new RegExp(\n  \"(?:\" +\n    IDENT + IMM + KEYWORD + \"|\" + KEYWORD + IMM + IDENT + \"|\" +\n    KEYWORD + CONN + IDENT + \"|\" + IDENT + CONN + KEYWORD + \"|\" +\n    INVOCATION +\n  \")\",\n  \"i\",\n);\n\nfunction hasCapitalisedToolName(content: string): boolean {\n  // Structural discriminator: a capitalised identifier beside a tool/command\n  // keyword qualifies ONLY when preceded by an article or invocation verb (not\n  // sentence-initial), or connected via named/called/aka. This replaces the\n  // blocklist approach — a structural rule beats a growing STOP_WORDS set.\n  for (const re of [\n    /(?:the|a|an|this|that|these|those|use|run|call|invoke)\\s+([A-Za-z][A-Za-z0-9]+)\\b[\\s'`<>]{0,4}\\b(?:tool|command|subcommand)\\b/gi,\n    /\\b(?:tool|command|subcommand)\\b\\s+(?:named|called|aka)\\s+([A-Za-z][A-Za-z0-9]+)\\b/gi,\n  ]) {\n    re.lastIndex = 0;\n    let match;\n    while ((match = re.exec(content)) !== null) {\n      const w = match[1];\n      if (w && w[0] >= \"A\" && w[0] <= \"Z\") return true;\n    }\n  }\n  return false;\n}\n\nfunction hasCamelCaseToolName(content: string): boolean {\n  // Case-sensitive: camelCase (lowercase start, interior uppercase) is a common\n  // host-tool naming convention (bashExecution, memoryStore, webFetch). Ordinary\n  // English words are never camelCase, and PascalCase (PostgreSQL, TypeScript)\n  // starts uppercase so is handled by hasCapitalisedToolName instead.\n  const camelRe = /\\b([a-z]{3,}[a-z0-9]*[A-Z][a-z][A-Za-z0-9]*)\\b/g;\n  let m;\n  while ((m = camelRe.exec(content)) !== null) {\n    const token = m[1];\n    const start = m.index!;\n    const end = start + token.length;\n    const before = content.slice(Math.max(0, start - 20), start);\n    const after = content.slice(end);\n    // Invocation: preceded by a verb, followed by a clause boundary or call syntax.\n    if (/(?:^|\\s)(?:use|run|call|invoke)\\s*$/i.test(before) &&\n        /^(?:\\s*(?:$|[.,;(:]|(?:when|before|after|to|with|for|on|in|if|unless|whenever)\\b))/i.test(after)) {\n      return true;\n    }\n    // Keyword-adjacent: camelCase beside a tool/command keyword.\n    if (/^(?:\\s*(?:tool|command|subcommand)\\b)/i.test(after) ||\n        /(?:tool|command|subcommand)\\s*$/i.test(before)) {\n      return true;\n    }\n  }\n  return false;\n}\n\nexport function referencesAgentSpecificTool(content: string): boolean {\n  if (typeof content !== \"string\" || content.length === 0) return false;\n  return TOOL_REFERENCE_CI.test(content) || hasCapitalisedToolName(content) || hasCamelCaseToolName(content);\n}\n\nexport interface ToolScopeWithholdInputs {\n  content: string;\n  sourceConnector?: string;\n  procedureSteps?: ReadonlyArray<{ intent?: string; expectedOutcome?: string; toolCall?: { kind?: string } }>;\n}\n\nexport function withholdToolScopedFromSharedNamespace({\n  content,\n  sourceConnector,\n  procedureSteps,\n}: ToolScopeWithholdInputs): boolean {\n  if (typeof sourceConnector !== \"string\" || sourceConnector.trim().length === 0) return false;\n  if (referencesAgentSpecificTool(content)) return true;\n  if (\n    procedureSteps?.some((s) => {\n      const kind = s.toolCall?.kind;\n      if (typeof kind === \"string\" && kind.trim().length > 0) return true;\n      const stepText = [s.intent, s.expectedOutcome]\n        .filter((t): t is string => typeof t === \"string\" && t.length > 0)\n        .join(\" \");\n      return stepText.length > 0 && referencesAgentSpecificTool(stepText);\n    })\n  ) {\n    return true;\n  }\n  return false;\n}\n\nexport interface GlobalFactPromotionInputs {\n  scope: string | null | undefined;\n  content: string;\n  sourceConnector?: string;\n  procedureSteps?: ReadonlyArray<{ toolCall?: { kind?: string } }>;\n}\n\nexport function shouldPromoteGlobalFactToShared(inputs: GlobalFactPromotionInputs): boolean {\n  if (inputs.scope !== \"global\") return false;\n  return !withholdToolScopedFromSharedNamespace({\n    content: inputs.content,\n    sourceConnector: inputs.sourceConnector,\n    procedureSteps: inputs.procedureSteps,\n  });\n}\n"],"mappings":";AAsBA,IAAM,KAAK;AAMX,IAAM,qBAAqB;AAAA,EACzB;AAAA,EAAQ;AAAA,EAAS;AAAA,EAAU;AAAA,EAAS;AAAA,EAAW;AAAA,EAAQ;AAAA,EAAS;AAAA,EAChE;AAAA,EAAQ;AAAA,EAAQ;AAAA,EAAQ;AAAA,EAAY;AAAA,EACpC;AACF;AACA,IAAM,kBAAkB;AAAA,EACtB;AAAA,EAAQ;AAAA,EAAQ;AAAA,EAAO;AAAA,EAAO;AAAA,EAAQ;AAAA,EAAO;AAAA,EAAO;AAAA,EAAM;AAAA,EAAO;AAAA,EACjE;AAAA,EAAU;AAAA,EAAW;AAAA,EAAQ;AAAA,EAAM;AAAA,EAAM;AAC3C;AACA,IAAM,oBAAoB,mBAAmB,KAAK,GAAG;AACrD,IAAM,kBAAkB,CAAC,GAAG,oBAAoB,GAAG,eAAe,EAAE,KAAK,GAAG;AAC5E,IAAM,gBAAgB,gBAAgB,KAAK,GAAG;AAG9C,IAAM,OAAO;AACb,IAAM,aAAa;AACnB,IAAM,SAAS;AAEf,IAAM,iBAAiB;AACvB,IAAM,kBAAkB,SAAS,oBAAoB;AACrD,IAAM,iBAAiB,QAAQ,iBAAiB,MAAM,kBAAkB;AACxE,IAAM,oBACJ,QAAQ,KAAK,iBAAiB,KAAK,OAAQ,iBAAiB,QAAS,iBAAiB;AAGxF,IAAM,iBAAiB;AACvB,IAAM,cAAc;AAEpB,IAAM,iBAAiB,WAAW,kBAAkB;AACpD,IAAM,eAAe,WAAW,gBAAgB;AAChD,IAAM,UAAU;AAEhB,IAAM,QAAQ,QAAQ,oBAAoB,MAAM,iBAAiB,MAAM,cAAc,MAAM,OAAO;AAElG,IAAM,MAAM,WAAY,KAAK;AAC7B,IAAM,OAAO;AACb,IAAM,OAAO;AACb,IAAM,gBAAgB,SAAS,oBAAoB;AACnD,IAAM,kBAAkB;AACxB,IAAM,OAAO,YAAY,OAAO,YAAY,SAAS;AACrD,IAAM,gBAAgB,6BAA6B,aAAa,MAAM,SAAS;AAC/E,IAAM,cAAc,YAAY,gBAAgB;AAKhD,IAAM,gBAAgB,WAAW,eAAe,MAAM,gBAAgB,MAAM,cAAc;AAC1F,IAAM,kBACJ,QAAQ,kBAAkB,uCAA4C,aAAa,MAAM,kBACzF,MAAM,gBAAgB,SAAS,kBAAkB,MAAM,cAAc;AACvE,IAAM,gBACJ,QAAQ,KAAK,kBAAkB,KAAK,OAAQ,kBAAkB,QAAS,kBAAkB;AAE3F,IAAM,uBACJ,OAAO,YAAY,gBAAgB,MAAM,iBAAiB,MAAM,iBAAiB,MAAM,gBAAgB,MAAM,OAAO,MAAM,OAAO,YAAY,kBAAkB;AACjK,IAAM,sBACJ,OAAO,SAAS,gBAAgB,YAAY,kBAAkB;AAChE,IAAM,aAAa,QAAQ,uBAAuB,MAAM,sBAAsB;AAE9E,IAAM,oBAAoB,IAAI;AAAA,EAC5B,QACE,QAAQ,MAAM,UAAU,MAAM,UAAU,MAAM,QAAQ,MACtD,UAAU,OAAO,QAAQ,MAAM,QAAQ,OAAO,UAAU,MACxD,aACF;AAAA,EACA;AACF;AAEA,SAAS,uBAAuB,SAA0B;AAKxD,aAAW,MAAM;AAAA,IACf;AAAA,IACA;AAAA,EACF,GAAG;AACD,OAAG,YAAY;AACf,QAAI;AACJ,YAAQ,QAAQ,GAAG,KAAK,OAAO,OAAO,MAAM;AAC1C,YAAM,IAAI,MAAM,CAAC;AACjB,UAAI,KAAK,EAAE,CAAC,KAAK,OAAO,EAAE,CAAC,KAAK,IAAK,QAAO;AAAA,IAC9C;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,SAA0B;AAKtD,QAAM,UAAU;AAChB,MAAI;AACJ,UAAQ,IAAI,QAAQ,KAAK,OAAO,OAAO,MAAM;AAC3C,UAAM,QAAQ,EAAE,CAAC;AACjB,UAAM,QAAQ,EAAE;AAChB,UAAM,MAAM,QAAQ,MAAM;AAC1B,UAAM,SAAS,QAAQ,MAAM,KAAK,IAAI,GAAG,QAAQ,EAAE,GAAG,KAAK;AAC3D,UAAM,QAAQ,QAAQ,MAAM,GAAG;AAE/B,QAAI,uCAAuC,KAAK,MAAM,KAClD,sFAAsF,KAAK,KAAK,GAAG;AACrG,aAAO;AAAA,IACT;AAEA,QAAI,yCAAyC,KAAK,KAAK,KACnD,mCAAmC,KAAK,MAAM,GAAG;AACnD,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,4BAA4B,SAA0B;AACpE,MAAI,OAAO,YAAY,YAAY,QAAQ,WAAW,EAAG,QAAO;AAChE,SAAO,kBAAkB,KAAK,OAAO,KAAK,uBAAuB,OAAO,KAAK,qBAAqB,OAAO;AAC3G;AAQO,SAAS,sCAAsC;AAAA,EACpD;AAAA,EACA;AAAA,EACA;AACF,GAAqC;AACnC,MAAI,OAAO,oBAAoB,YAAY,gBAAgB,KAAK,EAAE,WAAW,EAAG,QAAO;AACvF,MAAI,4BAA4B,OAAO,EAAG,QAAO;AACjD,MACE,gBAAgB,KAAK,CAAC,MAAM;AAC1B,UAAM,OAAO,EAAE,UAAU;AACzB,QAAI,OAAO,SAAS,YAAY,KAAK,KAAK,EAAE,SAAS,EAAG,QAAO;AAC/D,UAAM,WAAW,CAAC,EAAE,QAAQ,EAAE,eAAe,EAC1C,OAAO,CAAC,MAAmB,OAAO,MAAM,YAAY,EAAE,SAAS,CAAC,EAChE,KAAK,GAAG;AACX,WAAO,SAAS,SAAS,KAAK,4BAA4B,QAAQ;AAAA,EACpE,CAAC,GACD;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AASO,SAAS,gCAAgC,QAA4C;AAC1F,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,SAAO,CAAC,sCAAsC;AAAA,IAC5C,SAAS,OAAO;AAAA,IAChB,iBAAiB,OAAO;AAAA,IACxB,gBAAgB,OAAO;AAAA,EACzB,CAAC;AACH;","names":[]}

package/dist/{chunk-7RZJWZ46.js → chunk-LEPOP46W.js}

@@ -1,3 +1,7 @@
+import {
+  rebuildConversationChunksFailOpen,
+  upsertConversationChunksFailOpen
+} from "./chunk-72A4L5JJ.js";
 import {
   searchConversationIndex,
   searchConversationIndexFaissFailOpen
@@ -5,10 +9,6 @@ import {
 import {
   failOpenFaissHealth
 } from "./chunk-ET356KSB.js";
-import {
-  rebuildConversationChunksFailOpen,
-  upsertConversationChunksFailOpen
-} from "./chunk-72A4L5JJ.js";
 
 // src/conversation-index/backend.ts
 function createConversationIndexBackend(options) {
@@ -235,4 +235,4 @@ function createFaissBackend(getFaiss) {
 export {
   createConversationIndexBackend
 };
-//# sourceMappingURL=chunk-7RZJWZ46.js.map
+//# sourceMappingURL=chunk-LEPOP46W.js.map

package/dist/{chunk-PYHOAXTI.js → chunk-LRGSLV7M.js}

@@ -1,10 +1,10 @@
-import {
-  SQLITE_SCHEMA_VERSION
-} from "./chunk-Z734BLO3.js";
 import {
   parseConflictPolicy,
   validateManifestRecords
 } from "./chunk-G4IAEX6D.js";
+import {
+  SQLITE_SCHEMA_VERSION
+} from "./chunk-Z734BLO3.js";
 import {
   openBetterSqlite3
 } from "./chunk-RL6NEVXT.js";
@@ -84,4 +84,4 @@ async function importSqlite(opts) {
 export {
   importSqlite
 };
-//# sourceMappingURL=chunk-PYHOAXTI.js.map
+//# sourceMappingURL=chunk-LRGSLV7M.js.map

package/dist/{chunk-2QSZNTDO.js → chunk-RKNJBZ55.js}

@@ -1,3 +1,6 @@
+import {
+  ClaudeCodeAdapter
+} from "./chunk-J64TK33U.js";
 import {
   CodexAdapter
 } from "./chunk-RSUYKGGZ.js";
@@ -7,9 +10,6 @@ import {
 import {
   ReplitAdapter
 } from "./chunk-TMSXWOBZ.js";
-import {
-  ClaudeCodeAdapter
-} from "./chunk-J64TK33U.js";
 
 // src/adapters/registry.ts
 var AdapterRegistry = class {
@@ -53,4 +53,4 @@ var AdapterRegistry = class {
 export {
   AdapterRegistry
 };
-//# sourceMappingURL=chunk-2QSZNTDO.js.map
+//# sourceMappingURL=chunk-RKNJBZ55.js.map

package/dist/{chunk-RYHWZ52A.js → chunk-S2BBISHU.js}

@@ -1,10 +1,10 @@
+import {
+  scanMemoryDir
+} from "./chunk-W7IGLX4G.js";
 import {
   isSearchAborted,
   throwIfSearchAborted
 } from "./chunk-CINZGPSJ.js";
-import {
-  scanMemoryDir
-} from "./chunk-W7IGLX4G.js";
 import {
   reportSearchDegradation,
   resolveEnsureCollectionArgs
@@ -253,4 +253,4 @@ function isMeilisearchIndexNotFoundError(err) {
 export {
   MeilisearchBackend
 };
-//# sourceMappingURL=chunk-RYHWZ52A.js.map
+//# sourceMappingURL=chunk-S2BBISHU.js.map

package/dist/{chunk-YJ7PWEWI.js → chunk-SA3WJJF2.js}

@@ -1,6 +1,6 @@
 import {
   listNamespaces
-} from "./chunk-N2B56SIS.js";
+} from "./chunk-2SHIWGY7.js";
 import {
   capabilityAllowsNamespace
 } from "./chunk-MZWSOLMT.js";
@@ -265,4 +265,4 @@ export {
   computeServiceCorpusWatermarks,
   computeServiceCorpusCensus
 };
-//# sourceMappingURL=chunk-YJ7PWEWI.js.map
+//# sourceMappingURL=chunk-SA3WJJF2.js.map

package/dist/{chunk-C4PEMCP4.js → chunk-SLPLPGJQ.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-V7IZKJI3.js";
 import {
   AdapterRegistry
-} from "./chunk-2QSZNTDO.js";
+} from "./chunk-RKNJBZ55.js";
 import {
   WriteRateLimiter
 } from "./chunk-MKQBXQKU.js";
@@ -16,10 +16,10 @@ import {
   processChatMessage,
   sessionBelongsToPrincipal,
   subscribeChatTranscript
-} from "./chunk-ATUURSST.js";
+} from "./chunk-5FHE4JI7.js";
 import {
   RelayMissionStoreError
-} from "./chunk-SIKCTPRK.js";
+} from "./chunk-GHR7WHZX.js";
 import {
   executeResolution,
   isValidResolutionVerb
@@ -31,7 +31,7 @@ import {
 } from "./chunk-35NN3ZFA.js";
 import {
   validateRequest
-} from "./chunk-I5DQ6KZK.js";
+} from "./chunk-3F2LKUMU.js";
 import {
   maybeHandleLifecycleFlush
 } from "./chunk-5IVLTFOV.js";
@@ -41,12 +41,12 @@ import {
 import {
   authorizationProbeNamespaces,
   probeOperationAuthorization
-} from "./chunk-J6BYDVPL.js";
+} from "./chunk-EH5U2YCX.js";
 import {
   CorrectionContractError,
   getOperation,
   resolveQueryNamespaceWritablePreflight
-} from "./chunk-YFQMW2TH.js";
+} from "./chunk-5HTAJCTO.js";
 import {
   isTrustZoneName
 } from "./chunk-JGSKJHF7.js";
@@ -3218,4 +3218,4 @@ export {
   MeetingsInputError,
   EngramAccessHttpServer
 };
-//# sourceMappingURL=chunk-C4PEMCP4.js.map
+//# sourceMappingURL=chunk-SLPLPGJQ.js.map