@remnic/core 9.40.0 → 9.42.0

package/dist/{types-CCGL-9NX.d.ts → types-CqWwMPr_.d.ts}

@@ -977,23 +977,31 @@ interface ExtractionBufferSnapshot {
 interface ExtractionBufferSource {
     getBufferSnapshot(): Promise<ExtractionBufferSnapshot>;
 }
+interface ExtractionRootStats {
+    extractionCount?: number;
+    lastConsolidationAt?: string | null;
+}
+interface ExtractionWatermarkRead {
+    lastExtractionAt: string | null;
+    readFailed: boolean;
+    readError?: string;
+    pending?: boolean;
+    rootStats?: ExtractionRootStats;
+}
+type ExtractionWatermarkOrStorage = ExtractionWatermarkRead | {
+    readMetadata(): Promise<{
+        lastExtractionAt?: string | null;
+    } | null>;
+} | {
+    loadMeta(): Promise<{
+        lastExtractionAt?: string | null;
+    }>;
+};
+declare function coerceExtractionWatermark(watermark: ExtractionWatermarkOrStorage): Promise<ExtractionWatermarkRead>;
 /**
- * The liveness payload surfaced on `/health.extraction` and in the doctor/stats
- * details.
- *
- * DAEMON-SCOPED SIGNAL: a daemon exposes a single extraction verdict; the
- * last-extraction watermark is read from the daemon's default/root store, so
- * `/health` returns the same `extraction` block for every namespace argument.
- *
- * KNOWN LIMITATION (issue #2159): extraction stamps `lastExtractionAt` on the
- * PER-NAMESPACE store (`storageFor(selfNamespace)`), so this watermark reflects
- * only extraction that stamped the root store (default-namespace work). On a
- * single-namespace deployment (the common case) the watermark and buffer share
- * one scope and the verdict is exact. On a multi-namespace deployment the verdict
- * is NOT guaranteed correct for work isolated to a non-default namespace: it can
- * over-report `degraded` (the default namespace idle while another is extracting)
- * or miss a stall confined to a non-default namespace. Aggregating the watermark
- * across namespace stores is tracked in #2159.
+ * The daemon-scoped liveness payload surfaced on `/health.extraction` and in
+ * doctor/stats details. Its watermark is the maximum successful extraction
+ * across every distinct namespace store, matching the daemon-wide buffer scope.
  */
 interface ExtractionLivenessStatus {
     lastExtractionAt: string | null;
@@ -1002,17 +1010,8 @@ interface ExtractionLivenessStatus {
     oldestBufferedTurnAgeMs: number | null;
     degraded: boolean;
     degradedReason: string | null;
-    /**
-     * Scope of the last-extraction watermark: `root-store` today (read from the
-     * daemon's default/root store only), `aggregate` once it is resolved across
-     * every namespace store (#2159). A monitor can alert on
-     * `watermarkScope !== "aggregate"` while namespaces are enabled instead of
-     * trusting a number that may be wrong in either direction.
-     */
-    watermarkScope: "root-store" | "aggregate";
-}
-interface ExtractionLivenessStorageLike {
-    loadMeta(): Promise<Pick<MetaState, "lastExtractionAt">>;
+    watermarkPending?: boolean;
+    watermarkScope: "aggregate";
 }
 interface ExtractionLivenessOrchestratorLike {
     config: Pick<PluginConfig, "extractionLiveness">;
@@ -1048,17 +1047,16 @@ declare function evaluateExtractionLiveness(input: {
     nowMs: number;
     metaReadFailed?: boolean;
     metaReadError?: string;
-    watermarkScope?: "root-store" | "aggregate";
+    watermarkPending?: boolean;
 }): ExtractionLivenessStatus;
 /**
- * Gather the liveness status from a meta store (last-extraction watermark) and
- * an optional buffer (backlog). A read failure on EITHER side is captured and
- * surfaced as a DEGRADED status with a distinct reason (§22) rather than being
- * swallowed into a healthy-looking verdict; no failure path throws.
+ * Gather the liveness status from an aggregate watermark read and an optional
+ * buffer. A read failure on either side is surfaced as a degraded status with a
+ * distinct reason rather than swallowed into a healthy-looking verdict.
  */
 declare function gatherExtractionLivenessStatus(input: {
     config: ExtractionLivenessConfig;
-    storage: ExtractionLivenessStorageLike;
+    watermark: ExtractionWatermarkOrStorage;
     buffer: ExtractionBufferSource | undefined;
     nowMs: number;
 }): Promise<ExtractionLivenessStatus>;
@@ -1089,38 +1087,22 @@ declare function resolveExtractionLivenessConfig(block: {
     staleWindowMs?: unknown;
 } | undefined): ExtractionLivenessConfig;
 /**
- * Compute the liveness status for the authenticated `/health` payload and emit
- * the throttled aggregated WARN.
- *
- * The watermark is read from the daemon's default/root store (`orchestrator.storage`),
- * which is why `/health` returns the same `extraction` block for any namespace
- * argument. KNOWN LIMITATION (issue #2159): extraction writes `lastExtractionAt`
- * per-namespace, so this watermark reflects only default-namespace extraction and
- * the verdict is exact only for a single-namespace daemon (see
- * `ExtractionLivenessStatus`).
+ * Compute the daemon-wide liveness status for the authenticated `/health`
+ * payload and emit the throttled aggregate warning.
  */
-declare function computeExtractionLivenessStatus(orchestrator: ExtractionLivenessOrchestratorLike & {
-    storage: ExtractionLivenessStorageLike;
-}, throttle?: ExtractionLivenessWarnThrottle, nowMs?: number): Promise<ExtractionLivenessStatus>;
+declare function computeExtractionLivenessStatus(orchestrator: ExtractionLivenessOrchestratorLike, watermark: ExtractionWatermarkOrStorage, throttle?: ExtractionLivenessWarnThrottle, nowMs?: number): Promise<ExtractionLivenessStatus>;
 /**
  * `remnic doctor` check for extraction-pipeline liveness. Status `warn` when
  * degraded (with a remediation hint), `ok` otherwise.
  */
-declare function summarizeExtractionLiveness(config: Pick<PluginConfig, "extractionLiveness">, storage: ExtractionLivenessStorageLike, buffer?: ExtractionBufferSource, nowMs?: number): Promise<OperatorDoctorCheck>;
-/** Meta fields the `remnic stats` view renders directly, beyond the liveness watermark. */
-type ExtractionStatsMeta = Pick<MetaState, "extractionCount" | "lastExtractionAt" | "lastConsolidationAt">;
+declare function summarizeExtractionLiveness(config: Pick<PluginConfig, "extractionLiveness">, watermark: ExtractionWatermarkOrStorage, buffer?: ExtractionBufferSource, nowMs?: number): Promise<OperatorDoctorCheck>;
 /**
- * Lines for `remnic stats`: extraction watermark, buffer backlog, and the
- * liveness verdict so dashboards can alert on a stalled pipeline. The meta
- * watermark is loaded HERE (not by the caller) so a meta-read failure surfaces
- * as an explicit DEGRADED verdict plus "unavailable" counts (§22) instead of
- * crashing the whole `stats` command.
+ * Lines for `remnic stats`: the aggregate extraction watermark, root metadata
+ * counters, buffer backlog, and liveness verdict. Root counter failures render
+ * those counters unavailable; the injected aggregate read alone determines
+ * watermark liveness so stats cannot diverge from health and doctor.
  */
-declare function renderExtractionLivenessStats(orchestrator: ExtractionLivenessOrchestratorLike & {
-    storage: {
-        loadMeta(): Promise<ExtractionStatsMeta>;
-    };
-}, nowMs?: number): Promise<string[]>;
+declare function renderExtractionLivenessStats(orchestrator: ExtractionLivenessOrchestratorLike, watermark: ExtractionWatermarkRead, nowMs?: number): Promise<string[]>;
 
 /**
  * `replicaPeers` config surface (issue #2149) — types + parser.
@@ -4690,4 +4672,4 @@ interface HourlySummary {
     generatedAt: string;
 }
 
-export { type ExtractionFailureClass as $, type AgentPersonaModelConfig as A, type BriefingSections as B, type CalendarSource as C, type DreamsPhase as D, type EntityFile as E, type FaithfulnessFrontmatter as F, type GatewayConfig as G, type HourlySummary as H, type IdentityInjectionMode as I, type ExtractionResult as J, type ConsolidationResult as K, type LiveConnectorsConfig as L, type MemoryFile as M, type DaySummaryResult as N, type ProvenanceSource as O, type PluginConfig as P, type QmdSearchResult as Q, type RecallPlanMode as R, type SessionObserverBandConfig as S, type TranscriptEntry as T, type TrustWeights as U, type ConversationThread as V, type LifecycleState as W, type VerificationState as X, type PolicyClass as Y, type ReplicaPeersConfig as Z, type ReplicaPeerConfig as _, type DreamsRunResult as a, type WearableSourceStatus as a$, type ImportanceLevel as a0, type ActiveRecallChatType as a1, type ActiveRecallQueryMode as a2, type ActiveRecallPromptStyle as a3, type ActiveRecallThinking as a4, type ActiveRecallModelFallbackPolicy as a5, type BehaviorSignalEvent as a6, type BufferSurpriseEvent as a7, type ImportTurn as a8, type BulkImportOptions as a9, type QmdSearchExplain as aA, type ActivitySnapshot as aB, type ActivityConfig as aC, type ActivitySourceConfig as aD, type ActivitySourceClient as aE, type FusedWearableConversation as aF, type FusedDayMeta as aG, type FusedDayFile as aH, type MeetingRecord as aI, type MeetingDetectionSource as aJ, type FusedMeeting as aK, type EntityTimelineEntry as aL, type MemoryLink as aM, type BufferState as aN, type MetaState as aO, type FileHygieneConfig as aP, type EntityRelationship as aQ, type EntityActivityEntry as aR, type AccessTrackingEntry as aS, type MemorySummary as aT, type WearableConversation as aU, type WearableSourceSettings as aV, type WearableNativeMemory as aW, type WearableMemoryMode as aX, type WearableSourceConnector as aY, type WearablesConfig as aZ, type WearableSyncSummary as a_, type BulkImportSource as aa, type BulkImportResult as ab, type CompressionGuidelineOptimizerEventCounts as ac, type CompressionGuidelineOptimizerActionSummary as ad, type CompressionGuidelineOptimizerRuleUpdate as ae, type MemoryActionType as af, type MemoryActionEvent as ag, type CompressionGuidelineOptimizerState as ah, type EntityMention as ai, type EntitySchemaDefinition as aj, type EntitySchemaSectionDefinition as ak, type EntityStructuredSection as al, type ProvenanceConfig as am, type ImportanceScore as an, type MemoryIntent as ao, type MemoryActionEligibilityContext as ap, type MemoryActionPolicyResult as aq, type MemoryLifecycleEventType as ar, type MemoryLifecycleStateSummary as as, type ModelProviderConfig as at, type NativeKnowledgeConfig as au, type ExtractionBufferSource as av, summarizeExtractionLiveness as aw, type RetrievalTier as ax, type SignalScanResult as ay, type TopicScore as az, type RecallDisclosure as b, type ExtractionLivenessConfig as b$, type WearableDayTranscript as b0, type WearableCorrectionRule as b1, type MeetingBuildInput as b2, type MeetingsConfig as b3, type MeetingsDetectionInput as b4, type FusionConversationInput as b5, type MeetingActivitySnapshot as b6, type DetectedMeeting as b7, type CodingContext as b8, type DreamsStatusResult as b9, type BulkImportSourceAdapter as bA, type CodexCompatConfig as bB, DEFAULT_RECALL_DISCLOSURE as bC, type DisagreementKind as bD, type ExtractedFact as bE, type FusedContribution as bF, type FusedConversationProvenance as bG, type FusedSegmentProvenance as bH, type FusionSegmentInput as bI, type ImportSourceRole as bJ, type ImportTurnValidationIssue as bK, type MeetingScreenContextEvent as bL, type MeetingSummaryMode as bM, type MemoryActionEligibilitySource as bN, type MemoryObservation as bO, type MemoryScope as bP, RECALL_DISCLOSURE_LEVELS as bQ, type SegmentPickReason as bR, type WearableAuthCheck as bS, type WearableFetchOptions as bT, type WearableFetchPage as bU, type WearableNativeMemoryPage as bV, type WearableTranscriptSegment as bW, isImportRole as bX, isRecallDisclosure as bY, parseIsoTimestamp as bZ, validateImportTurn as b_, type RecallSectionConfig as ba, type BootstrapOptions as bb, type BootstrapResult as bc, type ConsolidationObservation as bd, type CodingModeConfig as be, type FusedSpeaker as bf, type FusedSegment as bg, type FusedDisagreement as bh, type FusionOptions as bi, type FusionDayResult as bj, type CodingKnowledgeConfig as bk, type WearableCleanupSettings as bl, type WearableFusionConfig as bm, type WearableDayTranscriptMeta as bn, type ActivityDayMeta as bo, type ActivityDayDigest as bp, type ActivitySourceCheck as bq, type ActivitySnapshotPage as br, type MeetingsDetectionConfig as bs, type MeetingAudioWindow as bt, type MeetingAppSpan as bu, type ActivityExtractionMode as bv, type BriefingConfig as bw, type BriefingOpenCommitment as bx, type BriefingWindow as by, type BulkImportError as bz, type RecallTierExplain as c, type MemoryActionPolicyDecision as c$, ExtractionLivenessWarnThrottle as c0, computeExtractionLivenessStatus as c1, evaluateExtractionLiveness as c2, formatAgeMs as c3, gatherExtractionLivenessStatus as c4, parseExtractionLivenessConfig as c5, renderExtractionLivenessStats as c6, resolveExtractionLivenessConfig as c7, parseReplicaPeersConfig as c8, resolveReplicaPeersConfig as c9, type ConsolidationAction as cA, type ConsolidationItem as cB, type ContradictionScanConfig as cC, type CronConversationRecallMode as cD, type CronRecallMode as cE, type DreamingConfig as cF, type DreamingNarrativePromptStyle as cG, type DreamsDeepSleepConfig as cH, type DreamsLightSleepConfig as cI, type DreamsPhaseStatus as cJ, type DreamsPhasesConfig as cK, type DreamsRemConfig as cL, type EngramTraceEvent as cM, type ExtractedProcedureStep as cN, type ExtractedQuestion as cO, type ExtractedReasoningTrace as cP, type ExtractedReasoningTraceStep as cQ, type ExtractedRelationship as cR, type ExtractionPassSource as cS, type GitHubLiveConnectorConfig as cT, type GmailLiveConnectorConfig as cU, type GoogleDriveLiveConnectorConfig as cV, type HeartbeatConfig as cW, type HeartbeatDetectionMode as cX, type LlmTraceCallback as cY, type LlmTraceEvent as cZ, type MemoryActionOutcome as c_, type BufferTurnOwner as ca, ProbeTimeoutError as cb, bufferTurnArrayIsSuffixOfSnapshot as cc, bufferTurnArraysEqual as cd, bufferTurnsEqual as ce, copyBufferTurn as cf, describeError as cg, liveTurnsFromExtractionSnapshot as ch, matchingQueuedExtractionPrefixLength as ci, probeWithTimeout as cj, type AgentAccessHttpConfig as ck, type AgentDefaultsConfig as cl, type AgentPersona as cm, type BehaviorLoopAdjustment as cn, type BehaviorSignalDirection as co, type BehaviorSignalType as cp, type BriefingCalendarSourceError as cq, type BufferEntryState as cr, type ChatConfig as cs, type CodexCliReasoningEffort as ct, type CodexCompactionFlushMode as cu, type CodexConnectorConfig as cv, type CodingGraphLspConfig as cw, type CompressionGuidelineActivationState as cx, type CompressionGuidelineOptimizerSourceWindow as cy, type ConfidenceTier as cz, type BriefingFollowup as d, type MemoryActionStatus as d0, type MemoryLinkType as d1, type MemoryOsPresetName as d2, type ModelApi as d3, type ModelDefinitionConfig as d4, type ModelProviderAuthMode as d5, type NamespacePolicy as d6, type NativeKnowledgeFolderRuleConfig as d7, type NativeKnowledgeObsidianVaultConfig as d8, type NativeKnowledgeOpenClawWorkspaceConfig as d9, type NotionLiveConnectorConfig as da, type PrincipalFromSessionKeyMode as db, type PrincipalRule as dc, type ProceduralConfig as dd, type QuestionEntry as de, type ReasoningEffort as df, type RecallPipelineConfig as dg, type RecallTraceEvent as dh, type RelevanceFeedback as di, SPECULATIVE_TTL_DAYS as dj, type ScopeProfileAutoPromoteConfig as dk, type ScopeProfileTeamProjectConfig as dl, type ScopeTeamConfig as dm, type ScoredEntity as dn, type SemanticChunkingConfigShape as dp, type SignalLevel as dq, type SlotBehaviorConfig as dr, type SlotMismatchMode as ds, type TriggerMode as dt, confidenceTier as du, type BriefingFocus as e, type CalendarEvent as f, type BriefingActiveThread as g, type BriefingResult as h, type BriefingRecentEntity as i, type BufferTurn as j, type ExtractionBufferSnapshot as k, type MemoryFrontmatter as l, type Checkpoint as m, type SourceConnectorProvenance as n, type ScopeProfileConfig as o, type ScopeProfileLayerId as p, type ScopeProfilePromotionTarget as q, type BehaviorLoopPolicyState as r, type SecretRef as s, type AgentAccessAuthToken as t, type ExtractionLivenessStatus as u, type MemoryCategory as v, type CaptureMode as w, type MemoryStatus as x, type MemoryProjectionCurrentState as y, type MemoryLifecycleEvent as z };
+export { type ExtractionFailureClass as $, type AgentPersonaModelConfig as A, type BriefingSections as B, type CalendarSource as C, type DreamsPhase as D, type EntityFile as E, type FaithfulnessFrontmatter as F, type GatewayConfig as G, type HourlySummary as H, type IdentityInjectionMode as I, type ExtractionResult as J, type ConsolidationResult as K, type LiveConnectorsConfig as L, type MemoryFile as M, type DaySummaryResult as N, type ProvenanceSource as O, type PluginConfig as P, type QmdSearchResult as Q, type RecallPlanMode as R, type SessionObserverBandConfig as S, type TranscriptEntry as T, type TrustWeights as U, type ConversationThread as V, type LifecycleState as W, type VerificationState as X, type PolicyClass as Y, type ReplicaPeersConfig as Z, type ReplicaPeerConfig as _, type DreamsRunResult as a, type WearableSourceStatus as a$, type ImportanceLevel as a0, type ActiveRecallChatType as a1, type ActiveRecallQueryMode as a2, type ActiveRecallPromptStyle as a3, type ActiveRecallThinking as a4, type ActiveRecallModelFallbackPolicy as a5, type BehaviorSignalEvent as a6, type BufferSurpriseEvent as a7, type ImportTurn as a8, type BulkImportOptions as a9, type TopicScore as aA, type QmdSearchExplain as aB, type ActivitySnapshot as aC, type ActivityConfig as aD, type ActivitySourceConfig as aE, type ActivitySourceClient as aF, type FusedWearableConversation as aG, type FusedDayMeta as aH, type FusedDayFile as aI, type MeetingRecord as aJ, type MeetingDetectionSource as aK, type FusedMeeting as aL, type EntityTimelineEntry as aM, type MemoryLink as aN, type BufferState as aO, type FileHygieneConfig as aP, type EntityRelationship as aQ, type EntityActivityEntry as aR, type AccessTrackingEntry as aS, type MemorySummary as aT, type WearableConversation as aU, type WearableSourceSettings as aV, type WearableNativeMemory as aW, type WearableMemoryMode as aX, type WearableSourceConnector as aY, type WearablesConfig as aZ, type WearableSyncSummary as a_, type BulkImportSource as aa, type BulkImportResult as ab, type CompressionGuidelineOptimizerEventCounts as ac, type CompressionGuidelineOptimizerActionSummary as ad, type CompressionGuidelineOptimizerRuleUpdate as ae, type MemoryActionType as af, type MemoryActionEvent as ag, type CompressionGuidelineOptimizerState as ah, type EntityMention as ai, type EntitySchemaDefinition as aj, type EntitySchemaSectionDefinition as ak, type EntityStructuredSection as al, type ProvenanceConfig as am, type ImportanceScore as an, type MemoryIntent as ao, type MemoryActionEligibilityContext as ap, type MemoryActionPolicyResult as aq, type MemoryLifecycleEventType as ar, type MemoryLifecycleStateSummary as as, type ModelProviderConfig as at, type NativeKnowledgeConfig as au, type ExtractionBufferSource as av, type MetaState as aw, summarizeExtractionLiveness as ax, type RetrievalTier as ay, type SignalScanResult as az, type RecallDisclosure as b, type ExtractionLivenessConfig as b$, type WearableDayTranscript as b0, type WearableCorrectionRule as b1, type MeetingBuildInput as b2, type MeetingsConfig as b3, type MeetingsDetectionInput as b4, type FusionConversationInput as b5, type MeetingActivitySnapshot as b6, type DetectedMeeting as b7, type CodingContext as b8, type DreamsStatusResult as b9, type BulkImportSourceAdapter as bA, type CodexCompatConfig as bB, DEFAULT_RECALL_DISCLOSURE as bC, type DisagreementKind as bD, type ExtractedFact as bE, type FusedContribution as bF, type FusedConversationProvenance as bG, type FusedSegmentProvenance as bH, type FusionSegmentInput as bI, type ImportSourceRole as bJ, type ImportTurnValidationIssue as bK, type MeetingScreenContextEvent as bL, type MeetingSummaryMode as bM, type MemoryActionEligibilitySource as bN, type MemoryObservation as bO, type MemoryScope as bP, RECALL_DISCLOSURE_LEVELS as bQ, type SegmentPickReason as bR, type WearableAuthCheck as bS, type WearableFetchOptions as bT, type WearableFetchPage as bU, type WearableNativeMemoryPage as bV, type WearableTranscriptSegment as bW, isImportRole as bX, isRecallDisclosure as bY, parseIsoTimestamp as bZ, validateImportTurn as b_, type RecallSectionConfig as ba, type BootstrapOptions as bb, type BootstrapResult as bc, type ConsolidationObservation as bd, type CodingModeConfig as be, type FusedSpeaker as bf, type FusedSegment as bg, type FusedDisagreement as bh, type FusionOptions as bi, type FusionDayResult as bj, type CodingKnowledgeConfig as bk, type WearableCleanupSettings as bl, type WearableFusionConfig as bm, type WearableDayTranscriptMeta as bn, type ActivityDayMeta as bo, type ActivityDayDigest as bp, type ActivitySourceCheck as bq, type ActivitySnapshotPage as br, type MeetingsDetectionConfig as bs, type MeetingAudioWindow as bt, type MeetingAppSpan as bu, type ActivityExtractionMode as bv, type BriefingConfig as bw, type BriefingOpenCommitment as bx, type BriefingWindow as by, type BulkImportError as bz, type RecallTierExplain as c, type HeartbeatDetectionMode as c$, ExtractionLivenessWarnThrottle as c0, type ExtractionRootStats as c1, type ExtractionWatermarkOrStorage as c2, type ExtractionWatermarkRead as c3, coerceExtractionWatermark as c4, computeExtractionLivenessStatus as c5, evaluateExtractionLiveness as c6, formatAgeMs as c7, gatherExtractionLivenessStatus as c8, parseExtractionLivenessConfig as c9, type CodingGraphLspConfig as cA, type CompressionGuidelineActivationState as cB, type CompressionGuidelineOptimizerSourceWindow as cC, type ConfidenceTier as cD, type ConsolidationAction as cE, type ConsolidationItem as cF, type ContradictionScanConfig as cG, type CronConversationRecallMode as cH, type CronRecallMode as cI, type DreamingConfig as cJ, type DreamingNarrativePromptStyle as cK, type DreamsDeepSleepConfig as cL, type DreamsLightSleepConfig as cM, type DreamsPhaseStatus as cN, type DreamsPhasesConfig as cO, type DreamsRemConfig as cP, type EngramTraceEvent as cQ, type ExtractedProcedureStep as cR, type ExtractedQuestion as cS, type ExtractedReasoningTrace as cT, type ExtractedReasoningTraceStep as cU, type ExtractedRelationship as cV, type ExtractionPassSource as cW, type GitHubLiveConnectorConfig as cX, type GmailLiveConnectorConfig as cY, type GoogleDriveLiveConnectorConfig as cZ, type HeartbeatConfig as c_, renderExtractionLivenessStats as ca, resolveExtractionLivenessConfig as cb, parseReplicaPeersConfig as cc, resolveReplicaPeersConfig as cd, type BufferTurnOwner as ce, ProbeTimeoutError as cf, bufferTurnArrayIsSuffixOfSnapshot as cg, bufferTurnArraysEqual as ch, bufferTurnsEqual as ci, copyBufferTurn as cj, describeError as ck, liveTurnsFromExtractionSnapshot as cl, matchingQueuedExtractionPrefixLength as cm, probeWithTimeout as cn, type AgentAccessHttpConfig as co, type AgentDefaultsConfig as cp, type AgentPersona as cq, type BehaviorLoopAdjustment as cr, type BehaviorSignalDirection as cs, type BehaviorSignalType as ct, type BriefingCalendarSourceError as cu, type BufferEntryState as cv, type ChatConfig as cw, type CodexCliReasoningEffort as cx, type CodexCompactionFlushMode as cy, type CodexConnectorConfig as cz, type BriefingFollowup as d, type LlmTraceCallback as d0, type LlmTraceEvent as d1, type MemoryActionOutcome as d2, type MemoryActionPolicyDecision as d3, type MemoryActionStatus as d4, type MemoryLinkType as d5, type MemoryOsPresetName as d6, type ModelApi as d7, type ModelDefinitionConfig as d8, type ModelProviderAuthMode as d9, type NamespacePolicy as da, type NativeKnowledgeFolderRuleConfig as db, type NativeKnowledgeObsidianVaultConfig as dc, type NativeKnowledgeOpenClawWorkspaceConfig as dd, type NotionLiveConnectorConfig as de, type PrincipalFromSessionKeyMode as df, type PrincipalRule as dg, type ProceduralConfig as dh, type QuestionEntry as di, type ReasoningEffort as dj, type RecallPipelineConfig as dk, type RecallTraceEvent as dl, type RelevanceFeedback as dm, SPECULATIVE_TTL_DAYS as dn, type ScopeProfileAutoPromoteConfig as dp, type ScopeProfileTeamProjectConfig as dq, type ScopeTeamConfig as dr, type ScoredEntity as ds, type SemanticChunkingConfigShape as dt, type SignalLevel as du, type SlotBehaviorConfig as dv, type SlotMismatchMode as dw, type TriggerMode as dx, confidenceTier as dy, type BriefingFocus as e, type CalendarEvent as f, type BriefingActiveThread as g, type BriefingResult as h, type BriefingRecentEntity as i, type BufferTurn as j, type ExtractionBufferSnapshot as k, type MemoryFrontmatter as l, type Checkpoint as m, type SourceConnectorProvenance as n, type ScopeProfileConfig as o, type ScopeProfileLayerId as p, type ScopeProfilePromotionTarget as q, type BehaviorLoopPolicyState as r, type SecretRef as s, type AgentAccessAuthToken as t, type ExtractionLivenessStatus as u, type MemoryCategory as v, type CaptureMode as w, type MemoryStatus as x, type MemoryProjectionCurrentState as y, type MemoryLifecycleEvent as z };

package/dist/types.d.ts

@@ -1,4 +1,4 @@
-export { aS as AccessTrackingEntry, a1 as ActiveRecallChatType, a5 as ActiveRecallModelFallbackPolicy, a3 as ActiveRecallPromptStyle, a2 as ActiveRecallQueryMode, a4 as ActiveRecallThinking, t as AgentAccessAuthToken, ck as AgentAccessHttpConfig, cl as AgentDefaultsConfig, cm as AgentPersona, A as AgentPersonaModelConfig, cn as BehaviorLoopAdjustment, r as BehaviorLoopPolicyState, co as BehaviorSignalDirection, a6 as BehaviorSignalEvent, cp as BehaviorSignalType, bb as BootstrapOptions, bc as BootstrapResult, g as BriefingActiveThread, cq as BriefingCalendarSourceError, bw as BriefingConfig, e as BriefingFocus, d as BriefingFollowup, bx as BriefingOpenCommitment, i as BriefingRecentEntity, h as BriefingResult, B as BriefingSections, by as BriefingWindow, cr as BufferEntryState, aN as BufferState, a7 as BufferSurpriseEvent, j as BufferTurn, f as CalendarEvent, C as CalendarSource, w as CaptureMode, cs as ChatConfig, m as Checkpoint, ct as CodexCliReasoningEffort, cu as CodexCompactionFlushMode, bB as CodexCompatConfig, cv as CodexConnectorConfig, b8 as CodingContext, cw as CodingGraphLspConfig, bk as CodingKnowledgeConfig, be as CodingModeConfig, cx as CompressionGuidelineActivationState, ad as CompressionGuidelineOptimizerActionSummary, ac as CompressionGuidelineOptimizerEventCounts, ae as CompressionGuidelineOptimizerRuleUpdate, cy as CompressionGuidelineOptimizerSourceWindow, ah as CompressionGuidelineOptimizerState, cz as ConfidenceTier, cA as ConsolidationAction, cB as ConsolidationItem, bd as ConsolidationObservation, K as ConsolidationResult, cC as ContradictionScanConfig, V as ConversationThread, cD as CronConversationRecallMode, cE as CronRecallMode, bC as DEFAULT_RECALL_DISCLOSURE, N as DaySummaryResult, cF as DreamingConfig, cG as DreamingNarrativePromptStyle, cH as DreamsDeepSleepConfig, cI as DreamsLightSleepConfig, D as DreamsPhase, cJ as DreamsPhaseStatus, cK as DreamsPhasesConfig, cL as DreamsRemConfig, a as DreamsRunResult, b9 as DreamsStatusResult, cM as EngramTraceEvent, aR as EntityActivityEntry, E as EntityFile, ai as EntityMention, aQ as EntityRelationship, aj as EntitySchemaDefinition, ak as EntitySchemaSectionDefinition, al as EntityStructuredSection, aL as EntityTimelineEntry, bE as ExtractedFact, cN as ExtractedProcedureStep, cO as ExtractedQuestion, cP as ExtractedReasoningTrace, cQ as ExtractedReasoningTraceStep, cR as ExtractedRelationship, $ as ExtractionFailureClass, cS as ExtractionPassSource, J as ExtractionResult, F as FaithfulnessFrontmatter, aP as FileHygieneConfig, G as GatewayConfig, cT as GitHubLiveConnectorConfig, cU as GmailLiveConnectorConfig, cV as GoogleDriveLiveConnectorConfig, cW as HeartbeatConfig, cX as HeartbeatDetectionMode, H as HourlySummary, I as IdentityInjectionMode, a0 as ImportanceLevel, an as ImportanceScore, W as LifecycleState, L as LiveConnectorsConfig, cY as LlmTraceCallback, cZ as LlmTraceEvent, ap as MemoryActionEligibilityContext, bN as MemoryActionEligibilitySource, ag as MemoryActionEvent, c_ as MemoryActionOutcome, c$ as MemoryActionPolicyDecision, aq as MemoryActionPolicyResult, d0 as MemoryActionStatus, af as MemoryActionType, v as MemoryCategory, M as MemoryFile, l as MemoryFrontmatter, ao as MemoryIntent, z as MemoryLifecycleEvent, ar as MemoryLifecycleEventType, as as MemoryLifecycleStateSummary, aM as MemoryLink, d1 as MemoryLinkType, bO as MemoryObservation, d2 as MemoryOsPresetName, y as MemoryProjectionCurrentState, bP as MemoryScope, x as MemoryStatus, aT as MemorySummary, aO as MetaState, d3 as ModelApi, d4 as ModelDefinitionConfig, d5 as ModelProviderAuthMode, at as ModelProviderConfig, d6 as NamespacePolicy, au as NativeKnowledgeConfig, d7 as NativeKnowledgeFolderRuleConfig, d8 as NativeKnowledgeObsidianVaultConfig, d9 as NativeKnowledgeOpenClawWorkspaceConfig, da as NotionLiveConnectorConfig, P as PluginConfig, Y as PolicyClass, db as PrincipalFromSessionKeyMode, dc as PrincipalRule, dd as ProceduralConfig, am as ProvenanceConfig, O as ProvenanceSource, aA as QmdSearchExplain, Q as QmdSearchResult, de as QuestionEntry, bQ as RECALL_DISCLOSURE_LEVELS, df as ReasoningEffort, b as RecallDisclosure, dg as RecallPipelineConfig, R as RecallPlanMode, ba as RecallSectionConfig, c as RecallTierExplain, dh as RecallTraceEvent, di as RelevanceFeedback, ax as RetrievalTier, dj as SPECULATIVE_TTL_DAYS, dk as ScopeProfileAutoPromoteConfig, o as ScopeProfileConfig, p as ScopeProfileLayerId, q as ScopeProfilePromotionTarget, dl as ScopeProfileTeamProjectConfig, dm as ScopeTeamConfig, dn as ScoredEntity, s as SecretRef, dp as SemanticChunkingConfigShape, S as SessionObserverBandConfig, dq as SignalLevel, ay as SignalScanResult, dr as SlotBehaviorConfig, ds as SlotMismatchMode, n as SourceConnectorProvenance, az as TopicScore, T as TranscriptEntry, dt as TriggerMode, U as TrustWeights, X as VerificationState, du as confidenceTier, bY as isRecallDisclosure } from './types-CCGL-9NX.js';
+export { aS as AccessTrackingEntry, a1 as ActiveRecallChatType, a5 as ActiveRecallModelFallbackPolicy, a3 as ActiveRecallPromptStyle, a2 as ActiveRecallQueryMode, a4 as ActiveRecallThinking, t as AgentAccessAuthToken, co as AgentAccessHttpConfig, cp as AgentDefaultsConfig, cq as AgentPersona, A as AgentPersonaModelConfig, cr as BehaviorLoopAdjustment, r as BehaviorLoopPolicyState, cs as BehaviorSignalDirection, a6 as BehaviorSignalEvent, ct as BehaviorSignalType, bb as BootstrapOptions, bc as BootstrapResult, g as BriefingActiveThread, cu as BriefingCalendarSourceError, bw as BriefingConfig, e as BriefingFocus, d as BriefingFollowup, bx as BriefingOpenCommitment, i as BriefingRecentEntity, h as BriefingResult, B as BriefingSections, by as BriefingWindow, cv as BufferEntryState, aO as BufferState, a7 as BufferSurpriseEvent, j as BufferTurn, f as CalendarEvent, C as CalendarSource, w as CaptureMode, cw as ChatConfig, m as Checkpoint, cx as CodexCliReasoningEffort, cy as CodexCompactionFlushMode, bB as CodexCompatConfig, cz as CodexConnectorConfig, b8 as CodingContext, cA as CodingGraphLspConfig, bk as CodingKnowledgeConfig, be as CodingModeConfig, cB as CompressionGuidelineActivationState, ad as CompressionGuidelineOptimizerActionSummary, ac as CompressionGuidelineOptimizerEventCounts, ae as CompressionGuidelineOptimizerRuleUpdate, cC as CompressionGuidelineOptimizerSourceWindow, ah as CompressionGuidelineOptimizerState, cD as ConfidenceTier, cE as ConsolidationAction, cF as ConsolidationItem, bd as ConsolidationObservation, K as ConsolidationResult, cG as ContradictionScanConfig, V as ConversationThread, cH as CronConversationRecallMode, cI as CronRecallMode, bC as DEFAULT_RECALL_DISCLOSURE, N as DaySummaryResult, cJ as DreamingConfig, cK as DreamingNarrativePromptStyle, cL as DreamsDeepSleepConfig, cM as DreamsLightSleepConfig, D as DreamsPhase, cN as DreamsPhaseStatus, cO as DreamsPhasesConfig, cP as DreamsRemConfig, a as DreamsRunResult, b9 as DreamsStatusResult, cQ as EngramTraceEvent, aR as EntityActivityEntry, E as EntityFile, ai as EntityMention, aQ as EntityRelationship, aj as EntitySchemaDefinition, ak as EntitySchemaSectionDefinition, al as EntityStructuredSection, aM as EntityTimelineEntry, bE as ExtractedFact, cR as ExtractedProcedureStep, cS as ExtractedQuestion, cT as ExtractedReasoningTrace, cU as ExtractedReasoningTraceStep, cV as ExtractedRelationship, $ as ExtractionFailureClass, cW as ExtractionPassSource, J as ExtractionResult, F as FaithfulnessFrontmatter, aP as FileHygieneConfig, G as GatewayConfig, cX as GitHubLiveConnectorConfig, cY as GmailLiveConnectorConfig, cZ as GoogleDriveLiveConnectorConfig, c_ as HeartbeatConfig, c$ as HeartbeatDetectionMode, H as HourlySummary, I as IdentityInjectionMode, a0 as ImportanceLevel, an as ImportanceScore, W as LifecycleState, L as LiveConnectorsConfig, d0 as LlmTraceCallback, d1 as LlmTraceEvent, ap as MemoryActionEligibilityContext, bN as MemoryActionEligibilitySource, ag as MemoryActionEvent, d2 as MemoryActionOutcome, d3 as MemoryActionPolicyDecision, aq as MemoryActionPolicyResult, d4 as MemoryActionStatus, af as MemoryActionType, v as MemoryCategory, M as MemoryFile, l as MemoryFrontmatter, ao as MemoryIntent, z as MemoryLifecycleEvent, ar as MemoryLifecycleEventType, as as MemoryLifecycleStateSummary, aN as MemoryLink, d5 as MemoryLinkType, bO as MemoryObservation, d6 as MemoryOsPresetName, y as MemoryProjectionCurrentState, bP as MemoryScope, x as MemoryStatus, aT as MemorySummary, aw as MetaState, d7 as ModelApi, d8 as ModelDefinitionConfig, d9 as ModelProviderAuthMode, at as ModelProviderConfig, da as NamespacePolicy, au as NativeKnowledgeConfig, db as NativeKnowledgeFolderRuleConfig, dc as NativeKnowledgeObsidianVaultConfig, dd as NativeKnowledgeOpenClawWorkspaceConfig, de as NotionLiveConnectorConfig, P as PluginConfig, Y as PolicyClass, df as PrincipalFromSessionKeyMode, dg as PrincipalRule, dh as ProceduralConfig, am as ProvenanceConfig, O as ProvenanceSource, aB as QmdSearchExplain, Q as QmdSearchResult, di as QuestionEntry, bQ as RECALL_DISCLOSURE_LEVELS, dj as ReasoningEffort, b as RecallDisclosure, dk as RecallPipelineConfig, R as RecallPlanMode, ba as RecallSectionConfig, c as RecallTierExplain, dl as RecallTraceEvent, dm as RelevanceFeedback, ay as RetrievalTier, dn as SPECULATIVE_TTL_DAYS, dp as ScopeProfileAutoPromoteConfig, o as ScopeProfileConfig, p as ScopeProfileLayerId, q as ScopeProfilePromotionTarget, dq as ScopeProfileTeamProjectConfig, dr as ScopeTeamConfig, ds as ScoredEntity, s as SecretRef, dt as SemanticChunkingConfigShape, S as SessionObserverBandConfig, du as SignalLevel, az as SignalScanResult, dv as SlotBehaviorConfig, dw as SlotMismatchMode, n as SourceConnectorProvenance, aA as TopicScore, T as TranscriptEntry, dx as TriggerMode, U as TrustWeights, X as VerificationState, dy as confidenceTier, bY as isRecallDisclosure } from './types-CqWwMPr_.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 export { ContinuityImprovementLoop, ContinuityIncidentCloseInput, ContinuityIncidentOpenInput, ContinuityIncidentRecord, ContinuityIncidentState, ContinuityLoopCadence, ContinuityLoopReviewInput, ContinuityLoopStatus, ContinuityLoopUpsertInput } from './types-continuity.js';

package/dist/utility-runtime.d.ts

@@ -1,5 +1,5 @@
 import { TierRoutingPolicy } from './tier-routing.js';
-import './types-CCGL-9NX.js';
+import './types-CqWwMPr_.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';

package/dist/write-envelope.d.ts

@@ -1,4 +1,4 @@
-import { v as MemoryCategory } from './types-CCGL-9NX.js';
+import { v as MemoryCategory } from './types-CqWwMPr_.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.40.0",
+  "version": "9.42.0",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -3086,7 +3086,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.40.0"
+    "@remnic/coding-graph": "^9.42.0"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/access-http.test.ts

@@ -1993,7 +1993,7 @@ test("HTTP externalRequestHandler runs pre-auth, can end responses, and falls th
         oldestBufferedTurnAgeMs: null,
         degraded: false,
         degradedReason: null,
-        watermarkScope: "root-store",
+        watermarkScope: "aggregate",
       },
       corpus: [],
       corpusComplete: true,
@@ -2120,7 +2120,7 @@ test("HTTP authTokenEntriesGetter is authoritative: scope policy binds connector
         oldestBufferedTurnAgeMs: null,
         degraded: false,
         degradedReason: null,
-        watermarkScope: "root-store",
+        watermarkScope: "aggregate",
       },
       corpus: [],
       corpusComplete: true,

package/src/access-service-health.test.ts

@@ -1,11 +1,12 @@
 import assert from "node:assert/strict";
-import { mkdtemp, rm } from "node:fs/promises";
+import { mkdir, mkdtemp, rm } from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
 import test from "node:test";
 
 import { EngramAccessService } from "./access-service.js";
 import { parseConfig } from "./config.js";
+import { TOKEN_CAPABILITIES_VERSION, tokenCapabilityStore } from "./access-token-capabilities.js";
 import { namespaceCollectionName } from "./namespaces/search.js";
 import type { Orchestrator } from "./orchestrator.js";
 import type { SearchBackend } from "./search/port.js";
@@ -548,16 +549,27 @@ test("health reports extraction liveness ok when the buffer is empty (nothing to
     assert.equal(health.extraction.degraded, false);
     assert.equal(health.extraction.bufferedSessionCount, 0);
     assert.equal(health.extraction.lastExtractionAt, oldTs);
+    const scopedHealth = await tokenCapabilityStore.run(
+      { version: TOKEN_CAPABILITIES_VERSION, namespaces: ["default"] },
+      () => service.health(),
+    );
+    assert.equal(scopedHealth.extraction.degraded, health.extraction.degraded);
+    assert.equal(scopedHealth.extraction.lastExtractionAt, null);
   } finally {
     await rm(memoryDir, { recursive: true, force: true });
   }
 });
 
-test("health returns the same daemon-global extraction verdict for every namespace (issue #2151)", async () => {
+test("health returns one daemon-global aggregate extraction verdict for every namespace", async () => {
   const memoryDir = await mkdtemp(path.join(os.tmpdir(), "remnic-health-liveness-ns-"));
   try {
-    const rootTs = new Date().toISOString(); // fresh daemon-global watermark
-    const staleTs = new Date(Date.now() - 7_200_000).toISOString(); // 2h old
+    const namespaceDirs: Record<string, string> = {
+      fresh: path.join(memoryDir, "namespaces", "fresh"),
+      stale: path.join(memoryDir, "namespaces", "stale"),
+    };
+    await Promise.all(Object.values(namespaceDirs).map((dir) => mkdir(dir, { recursive: true })));
+    const freshTs = new Date().toISOString();
+    const staleTs = new Date(Date.now() - 7_200_000).toISOString();
     const config = parseConfig({
       memoryDir,
       qmdEnabled: false,
@@ -565,20 +577,25 @@ test("health returns the same daemon-global extraction verdict for every namespa
       defaultNamespace: "default",
       extractionLiveness: { staleWindowMs: 3_600_000 },
     });
-    // Per-namespace stores return DIVERGING watermarks (fresh vs 2h stale vs
-    // never), but the global buffer is shared and the watermark must be sourced
-    // from the root store. Pre-fix, the extraction verdict tracked the
-    // namespace argument; post-fix it is identical for every namespace.
-    const perNamespaceMeta: Record<string, string | null> = { fresh: rootTs, stale: staleTs };
+    const perNamespaceMeta: Record<string, string | null> = {
+      default: staleTs,
+      fresh: freshTs,
+      stale: staleTs,
+    };
     const service = new EngramAccessService({
       config,
       qmd: makeQmd({}),
       buffer: {
-        getBufferSnapshot: async () => ({ bufferedSessionCount: 3, pendingTurnCount: 12, oldestTurnTimestamp: staleTs }),
+        getBufferSnapshot: async () => ({
+          bufferedSessionCount: 3,
+          pendingTurnCount: 12,
+          oldestTurnTimestamp: staleTs,
+        }),
       },
       storage: {
+        dir: memoryDir,
         loadMeta: async () => ({
-          lastExtractionAt: rootTs,
+          lastExtractionAt: staleTs,
           extractionCount: 4,
           lastConsolidationAt: null,
           totalMemories: 0,
@@ -586,10 +603,11 @@ test("health returns the same daemon-global extraction verdict for every namespa
         }),
       },
       async getStorage(namespace?: string) {
+        const resolved = namespace ?? "default";
         return {
-          dir: memoryDir,
+          dir: namespaceDirs[resolved] ?? memoryDir,
           loadMeta: async () => ({
-            lastExtractionAt: namespace ? perNamespaceMeta[namespace] ?? null : staleTs,
+            lastExtractionAt: perNamespaceMeta[resolved] ?? null,
             extractionCount: 4,
             lastConsolidationAt: null,
             totalMemories: 0,
@@ -599,19 +617,23 @@ test("health returns the same daemon-global extraction verdict for every namespa
       },
     } as unknown as Orchestrator);
 
+    await service.health();
+    const serviceWithCache = service as unknown as {
+      corpusWatermarkCache: { whenIdle(): Promise<void> };
+    };
+    await serviceWithCache.corpusWatermarkCache.whenIdle();
+
     const fresh = (await service.health("fresh")).extraction;
     const stale = (await service.health("stale")).extraction;
     const def = (await service.health()).extraction;
-    // The namespace-governed fields must not vary with the namespace argument
-    // (oldestBufferedTurnAgeMs is time-derived and intentionally excluded).
     assert.equal(stale.degraded, fresh.degraded, "degraded must not vary by namespace");
     assert.equal(def.degraded, fresh.degraded, "default health matches namespaced health");
     assert.equal(stale.lastExtractionAt, fresh.lastExtractionAt, "watermark must not vary by namespace");
     assert.equal(def.lastExtractionAt, fresh.lastExtractionAt);
     assert.equal(stale.degradedReason, fresh.degradedReason);
-    // Sourced from the fresh root watermark → healthy despite stale per-namespace stores.
     assert.equal(fresh.degraded, false);
-    assert.equal(fresh.lastExtractionAt, rootTs);
+    assert.equal(fresh.lastExtractionAt, freshTs);
+    assert.equal(fresh.watermarkScope, "aggregate");
   } finally {
     await rm(memoryDir, { recursive: true, force: true });
   }

package/src/access-service.ts

@@ -7,6 +7,7 @@ import { createHash } from "node:crypto";
 import { ZodError } from "zod";
 import { AccessIdempotencyStore, hashAccessIdempotencyPayload } from "./access-idempotency.js";
 import { computeExtractionLivenessStatus, ExtractionLivenessWarnThrottle } from "./extraction-liveness.js";
+import { readAggregateExtractionWatermark } from "./orchestration/extraction-watermark.js";
 import { enforceNamespaceAllowList, tokenCapabilityStore } from "./access-token-capabilities.js";
 import {
   recordCitationUsage as recordCitationUsageForAccess,
@@ -2369,10 +2370,31 @@ export class EngramAccessService {
     const storage = await this.orchestrator.getStorage(resolvedNamespace);
     const searchBackend = this.orchestrator.config.searchBackend ?? "qmd";
     const qmdEnabled = resolveQmdCapabilities(this.orchestrator.config).qmd === true;
-    const extraction = await computeExtractionLivenessStatus(this.orchestrator, this.extractionLivenessWarn);
+    const caps = tokenCapabilityStore.getStore();
+    const extractionWatermark = await readAggregateExtractionWatermark({
+      config: this.orchestrator.config,
+      rootStorage: this.orchestrator.storage,
+      storageForNamespace: (candidate) => this.orchestrator.getStorage(candidate),
+      rootsCache: this.corpusWatermarkCache,
+    });
+    const extraction = await computeExtractionLivenessStatus(
+      this.orchestrator,
+      extractionWatermark,
+      caps?.namespaces !== undefined ? undefined : this.extractionLivenessWarn,
+    );
+    const visibleExtraction =
+      caps?.namespaces !== undefined
+        ? {
+            ...extraction,
+            lastExtractionAt: null,
+            bufferedSessionCount: 0,
+            pendingTurnCount: 0,
+            oldestBufferedTurnAgeMs: null,
+            degradedReason: extraction.degraded ? "daemon extraction pipeline degraded" : null,
+          }
+        : extraction;
     // ONE call: the corpus array and the flag describing it must not come from
     // two independently-cached scans (round 8, codex P1).
-    const caps = tokenCapabilityStore.getStore();
     const corpusCensus = await computeServiceCorpusCensus(this.orchestrator, {
       cache: this.corpusWatermarkCache, caps });
     let projectionAvailable = false;
@@ -2398,7 +2420,7 @@ export class EngramAccessService {
       ),
       nativeKnowledgeEnabled: this.orchestrator.config.nativeKnowledge?.enabled === true,
       projectionAvailable,
-      extraction,
+      extraction: visibleExtraction,
       corpus: corpusCensus.watermarks,
       // Describes THIS response's array (round 8): a separate scan could report
       // complete while the shipped corpus was partial, and peers trust it.

package/src/cli.ts

@@ -31,6 +31,7 @@ import { chunkContent } from "./chunking.js";
 import { rescoreMemoryImportance } from "./importance.js";
 import { renderQmdBacklogStatus } from "./qmd-status.js";
 import { renderExtractionLivenessStats } from "./extraction-liveness.js";
+import { readAggregateExtractionWatermark } from "./orchestration/extraction-watermark.js";
 import { exportJsonBundle } from "./transfer/export-json.js";
 import { exportMarkdownBundle } from "./transfer/export-md.js";
 import { backupMemoryDir } from "./transfer/backup.js";
@@ -3653,9 +3654,7 @@ export function registerCli(
         .command("stats")
         .description("Show memory system statistics")
         .action(async () => {
-          // Ensure QMD is probed before checking availability
           await orchestrator.qmd.probe();
-
           const memories = await orchestrator.storage.readAllMemories();
           const entities = await orchestrator.storage.readEntities();
           const profile = await orchestrator.storage.readProfile();
@@ -3664,7 +3663,8 @@ export function registerCli(
           console.log(`Total memories: ${memories.length}`);
           console.log(`Total entities: ${entities.length}`);
           console.log(`Profile size: ${profile.length} chars`);
-          for (const line of await renderExtractionLivenessStats(orchestrator)) console.log(line);
+          const extractionWatermark = await readAggregateExtractionWatermark({ config: orchestrator.config, rootStorage: orchestrator.storage, storageForNamespace: (ns) => orchestrator.getStorage(ns) });
+          for (const line of await renderExtractionLivenessStats(orchestrator, extractionWatermark)) console.log(line);
           console.log(`QMD: ${orchestrator.qmd.isAvailable() ? "available" : "not available"}`);
           for (const line of await renderQmdBacklogStatus(orchestrator.qmd, orchestrator.config.qmdEmbeddingBacklogThreshold)) console.log(line);
 

package/src/corpus-watermark.test.ts

@@ -780,6 +780,22 @@ test("finding round-7: namespace enumeration is cached (resolved once per TTL, s
   assert.equal(resolveCalls, 2, "re-enumerated once the TTL elapsed");
 });
 
+test("computeServiceCorpusCensus returns incomplete when roots refresh error is set in cache", async () => {
+  const cache = new CorpusWatermarkCache();
+  const host = {
+    config: parseConfig({ namespacesEnabled: true }),
+    getStorage: async () => ({ readAllMemories: async () => [] } as unknown as StorageManager),
+  };
+  const failingResolve = async (): Promise<CorpusNamespaceRoot[]> => {
+    throw new Error("disk unreadable");
+  };
+  cache.getResolvedRootsStatus(failingResolve);
+  await cache.whenIdle();
+  const census = await computeServiceCorpusCensus(host, { cache });
+  assert.equal(census.complete, false);
+  assert.deepEqual(census.watermarks, []);
+});
+
 test("finding round-9: background refresh scans are bounded to maxConcurrentRefreshes", async () => {
   const cache = new CorpusWatermarkCache({ maxConcurrentRefreshes: 2 });
   let active = 0;

package/src/corpus-watermark.ts

@@ -312,9 +312,13 @@ export interface CorpusNamespaceRoot {
  */
 export async function resolveCorpusNamespaceRoots(options: {
   config: PluginConfig;
+  propagateDiscoveryErrors?: boolean;
 }): Promise<CorpusNamespaceRoot[]> {
   const { config } = options;
-  const configDriven = await listNamespaces({ config });
+  const configDriven = await listNamespaces({
+    config,
+    propagateDiscoveryErrors: options.propagateDiscoveryErrors,
+  });
   // Default namespace first so it wins the representative label when several
   // configured names collapse onto one root (namespaces disabled → memoryDir).
   const ordered = [
@@ -376,6 +380,7 @@ export class CorpusWatermarkCache {
   private readonly clock: () => number;
   private rootsEntry: { value: CorpusNamespaceRoot[]; expiresAt: number } | undefined;
   private rootsInFlight: Promise<void> | undefined;
+  private rootsRefreshError: unknown;
   private readonly queued = new Map<string, () => void>();
   private activeRefreshes = 0;
   private readonly maxConcurrentRefreshes: number;
@@ -444,9 +449,12 @@ export class CorpusWatermarkCache {
       this.rootsInFlight = compute()
         .then((value) => {
           this.rootsEntry = { value, expiresAt: this.clock() + this.ttlMs };
+          this.rootsRefreshError = undefined;
         })
-        .catch(() => {
-          // Enumeration failed: keep serving any stale roots; retry next probe.
+        .catch((error: unknown) => {
+          this.rootsRefreshError = error;
+          // Keep serving any stale roots; callers that require completeness
+          // inspect the refresh status before trusting them.
         })
         .finally(() => {
           this.rootsInFlight = undefined;
@@ -454,6 +462,14 @@ export class CorpusWatermarkCache {
     }
     return this.rootsEntry?.value;
   }
+
+  getResolvedRootsStatus(compute: () => Promise<CorpusNamespaceRoot[]>): {
+    roots: CorpusNamespaceRoot[] | undefined;
+    refreshError: unknown;
+  } {
+    const roots = this.getResolvedRoots(compute);
+    return { roots, refreshError: this.rootsRefreshError };
+  }
   /** Await every background refresh — in-flight AND queued (issue #2156 round-9) —
    *  plus any roots refresh (shutdown / deterministic tests). */
   async whenIdle(): Promise<void> {
@@ -518,10 +534,17 @@ export async function computeServiceCorpusCensus(
 ): Promise<{ watermarks: CorpusWatermark[]; complete: boolean }> {
   let roots: CorpusNamespaceRoot[] | undefined;
   if (options.cache) {
-    roots = options.cache.getResolvedRoots(() => resolveCorpusNamespaceRoots({ config: host.config }));
+    const { roots: cachedRoots, refreshError } = options.cache.getResolvedRootsStatus(() =>
+      resolveCorpusNamespaceRoots({ config: host.config, propagateDiscoveryErrors: true }),
+    );
+    if (refreshError !== undefined) return { watermarks: [], complete: false };
+    roots = cachedRoots;
   } else {
     try {
-      roots = await resolveCorpusNamespaceRoots({ config: host.config });
+      roots = await resolveCorpusNamespaceRoots({
+        config: host.config,
+        propagateDiscoveryErrors: true,
+      });
     } catch {
       return { watermarks: [], complete: false }; // never enumerated — not an empty corpus
     }