@remnic/core 9.48.1 → 9.49.1

package/dist/{chunk-45OTV7FZ.js → chunk-PWIMF7LP.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-GDB4J2H3.js";
 import {
   importCapsule
-} from "./chunk-A4JMGKCD.js";
+} from "./chunk-5XCN4XBU.js";
 import {
   WriteQuarantineStore
 } from "./chunk-PJSK6OJM.js";
@@ -26,41 +26,44 @@ import {
   scoreTrustZoneProvenance,
   seedTrustZoneDemoDataset,
   summarizeTrustZonePromotionReadiness
-} from "./chunk-JGSKJHF7.js";
+} from "./chunk-KQS72GCR.js";
 import {
   planSessionTranscriptMigration
 } from "./chunk-P5FPO2BR.js";
-import {
-  boundRecallContextComposition,
-  composeRecallContext
-} from "./chunk-AHVEHR6K.js";
 import {
   decideDisclosureEscalation
 } from "./chunk-H7XKCNR6.js";
 import {
   toRecallExplainJson
-} from "./chunk-SXWHN7GC.js";
+} from "./chunk-PDEKQWDV.js";
 import {
   estimateRecallTokens
-} from "./chunk-P2OTGMTR.js";
+} from "./chunk-NSGU76YO.js";
 import {
-  readAggregateExtractionWatermark
-} from "./chunk-RSPSHRZA.js";
+  boundRecallContextComposition,
+  composeRecallContext
+} from "./chunk-AHVEHR6K.js";
 import {
-  ReplicaDivergenceMonitor
-} from "./chunk-CVILPI77.js";
+  readAggregateExtractionWatermark
+} from "./chunk-FV7YQTN3.js";
 import {
   recordObjectiveStateSnapshotsFromObservedMessages
-} from "./chunk-ICP53SKG.js";
+} from "./chunk-2HIJHXB3.js";
 import {
   objectiveStateStoreOverrideForNamespace
-} from "./chunk-6HMYUWXR.js";
+} from "./chunk-HTP6XRUI.js";
+import {
+  ReplicaDivergenceMonitor
+} from "./chunk-CVILPI77.js";
 import {
   recordMemoryOutcome
 } from "./chunk-EIR5VLIH.js";
 import {
   buildGraphSnapshot
 } from "./chunk-JYIFGGEM.js";
+import {
+  REDACTION_RULES_SUBDIR
+} from "./chunk-LTHVM4XN.js";
 import {
   wrapWorkLayerContext
 } from "./chunk-EI6V5UXY.js";
@@ -77,24 +80,21 @@ import {
   buildProcedurePersistBody,
   normalizeProcedureSteps
 } from "./chunk-QDW3E4RD.js";
-import {
-  REDACTION_RULES_SUBDIR
-} from "./chunk-LTHVM4XN.js";
 import {
   persistExplicitCapture,
   queueExplicitCaptureForReview,
   validateExplicitCaptureInput
-} from "./chunk-S5NZBKKQ.js";
+} from "./chunk-N3CXAYPJ.js";
 import {
   lcmEvidenceIdentity
 } from "./chunk-C37ZRXX7.js";
 import {
   CorpusWatermarkCache,
   computeServiceCorpusCensus
-} from "./chunk-JYPO7L3G.js";
+} from "./chunk-ZN4EYMKJ.js";
 import {
   namespaceCollectionName
-} from "./chunk-PRVJH7CY.js";
+} from "./chunk-KMWYZTIE.js";
 import {
   CrossNamespaceBudget,
   toBudgetWarning
@@ -106,32 +106,32 @@ import {
   listMemoryGovernanceRuns,
   readMemoryGovernanceRunArtifact,
   runMemoryGovernance
-} from "./chunk-WOEVJKKQ.js";
+} from "./chunk-WPZX7MEA.js";
 import {
   defaultCapsulesDir
 } from "./chunk-ZY2MNJR6.js";
 import {
   filterTrajectoriesByLookbackDays,
   readCausalTrajectoryRecords
-} from "./chunk-W4FBGYGK.js";
+} from "./chunk-M4MP34AQ.js";
 import {
   FileCalendarSource,
   buildBriefing,
   enqueuePassiveCorrectionNotification,
   parseBriefingFocus,
   parseBriefingWindow
-} from "./chunk-3NDN5P55.js";
+} from "./chunk-4S3ECH3U.js";
 import {
   parseEntityFile,
   parseFrontmatter,
   qmdCollectionPathParts,
   qmdResultPathCandidates,
   selfDeps
-} from "./chunk-PLCZD3LG.js";
+} from "./chunk-24BKGKGO.js";
 import {
   DEFAULT_RECALL_DISCLOSURE,
   isRecallDisclosure
-} from "./chunk-3S63QIFQ.js";
+} from "./chunk-LAQ33B5D.js";
 import {
   normalizeProjectionPreview,
   normalizeProjectionTags
@@ -142,27 +142,27 @@ import {
   buildObserveRequestFingerprint,
   composeMemoryEnvelope,
   isMemoryCategory
-} from "./chunk-CGASUJVP.js";
-import {
-  stripAttributesSuffix
-} from "./chunk-R3DJVOSM.js";
+} from "./chunk-5V6IXHPI.js";
 import {
   applyTagFilter,
   normalizeTags,
   parseTagMatch
 } from "./chunk-BT7NVCML.js";
+import {
+  stripAttributesSuffix
+} from "./chunk-R3DJVOSM.js";
 import {
   createVersion
-} from "./chunk-7YKVM5H3.js";
+} from "./chunk-PWLB4TRK.js";
 import {
   supersessionKeysForFact
-} from "./chunk-DNHVPZOD.js";
+} from "./chunk-P26YHAQH.js";
 import {
   ExtractionDeadlineError,
   isActivityDigestPath,
   isArtifactMemoryPath,
   isMeetingRecordPath
-} from "./chunk-WQIHRA5F.js";
+} from "./chunk-N3LL5NEU.js";
 import {
   ExtractionLivenessWarnThrottle,
   computeExtractionLivenessStatus
@@ -179,7 +179,7 @@ import {
 } from "./chunk-JAKIDQB2.js";
 import {
   exportCapsule
-} from "./chunk-KQAFEZQX.js";
+} from "./chunk-IPLYGWQF.js";
 import {
   evaluateActionConfidence
 } from "./chunk-Z2YFLXHU.js";
@@ -208,10 +208,10 @@ import {
 } from "./chunk-LNEWDF2A.js";
 import {
   createOfflineSyncManifestStream
-} from "./chunk-UMOO7IY7.js";
+} from "./chunk-P2KBDJJ6.js";
 import {
   offlineSyncStorageForSnapshot
-} from "./chunk-UTVZKHJK.js";
+} from "./chunk-GUKBW4HL.js";
 import {
   resolveScopePlan,
   resolveScopedWritableNamespaceValue,
@@ -219,7 +219,7 @@ import {
 } from "./chunk-YN6ASZUG.js";
 import {
   writeFileAtomically
-} from "./chunk-R6YJI3HE.js";
+} from "./chunk-AW4QUFQF.js";
 import {
   namespaceIdentityFromToken
 } from "./chunk-EGGE52UU.js";
@@ -317,7 +317,7 @@ import {
 } from "./chunk-BTTPKDIL.js";
 import {
   AccessAuditAdapter
-} from "./chunk-7K5Q6COX.js";
+} from "./chunk-TVVEYCNW.js";
 import {
   decodeCitationNamespace
 } from "./chunk-JIYDRBVZ.js";
@@ -13523,4 +13523,4 @@ export {
   EngramAccessService,
   AccessAdminOpsSurface
 };
-//# sourceMappingURL=chunk-45OTV7FZ.js.map
+//# sourceMappingURL=chunk-PWIMF7LP.js.map

package/dist/{chunk-7YKVM5H3.js → chunk-PWLB4TRK.js}

@@ -1,11 +1,11 @@
 import {
   bumpMemoryCorpusVersionForDir
-} from "./chunk-IJ7HK452.js";
+} from "./chunk-KMAP7SNQ.js";
 import {
   pathMayCarryEntityRefs,
   requestEntityCanonicalIdReconcile,
   withRawEntityPageMutation
-} from "./chunk-NZBZ7IS2.js";
+} from "./chunk-JDCQK3C5.js";
 import {
   ALL_CATEGORY_DIRS,
   RECALL_FALLBACK_DIRS
@@ -281,4 +281,4 @@ export {
   revertToVersion,
   diffVersions
 };
-//# sourceMappingURL=chunk-7YKVM5H3.js.map
+//# sourceMappingURL=chunk-PWLB4TRK.js.map

package/dist/{chunk-RVYVMQK4.js → chunk-QSYL5CXK.js}

@@ -1,10 +1,10 @@
 import {
   parseXrayFormat
-} from "./chunk-SXWHN7GC.js";
+} from "./chunk-PDEKQWDV.js";
 import {
   RECALL_DISCLOSURE_LEVELS,
   isRecallDisclosure
-} from "./chunk-3S63QIFQ.js";
+} from "./chunk-LAQ33B5D.js";
 
 // src/recall-xray-cli.ts
 function parseXrayDisclosureFlag(value) {
@@ -50,4 +50,4 @@ export {
   parseXrayBudgetFlag,
   parseXrayCliOptions
 };
-//# sourceMappingURL=chunk-RVYVMQK4.js.map
+//# sourceMappingURL=chunk-QSYL5CXK.js.map

package/dist/{chunk-NXUJRXSF.js → chunk-QWLW3VQH.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-7T4TOGMS.js";
 import {
   defineOperation
-} from "./chunk-45OTV7FZ.js";
+} from "./chunk-PWIMF7LP.js";
 
 // src/external-wiki-access.ts
 import { z } from "zod";
@@ -26,4 +26,4 @@ var externalWikiSearchOperation = defineOperation({
 export {
   externalWikiSearchOperation
 };
-//# sourceMappingURL=chunk-NXUJRXSF.js.map
+//# sourceMappingURL=chunk-QWLW3VQH.js.map

package/dist/chunk-RBOJCG4T.js

@@ -0,0 +1,77 @@
+// src/in-flight-reads.ts
+var inFlightReadsByKey = /* @__PURE__ */ new Map();
+var DIR_SEP = "\0";
+function composeKey(baseDir, keyId) {
+  return `${baseDir}${DIR_SEP}${keyId}`;
+}
+function trackWaiter(entry, callerSignal) {
+  let left = false;
+  const leave = () => {
+    if (left) return;
+    left = true;
+    callerSignal?.removeEventListener("abort", onAbort);
+    entry.waiters -= 1;
+    if (entry.waiters <= 0) entry.cancel?.();
+  };
+  function onAbort() {
+    leave();
+  }
+  callerSignal?.addEventListener("abort", onAbort, { once: true });
+  return { leave };
+}
+function attachInFlightReader(baseDir, keyId = "", callerSignal) {
+  const entry = inFlightReadsByKey.get(composeKey(baseDir, keyId));
+  if (entry === void 0) return void 0;
+  entry.waiters += 1;
+  return { read: entry.read, waiter: trackWaiter(entry, callerSignal) };
+}
+function beginCoalescedScan(baseDir, keyId, callerSignal) {
+  const controller = new AbortController();
+  let waiter;
+  return {
+    scanSignal: controller.signal,
+    arm(read) {
+      const entry = {
+        read,
+        waiters: 1,
+        cancel: () => {
+          deleteInFlightRead(baseDir, keyId, read);
+          controller.abort();
+        }
+      };
+      inFlightReadsByKey.set(composeKey(baseDir, keyId), entry);
+      waiter = trackWaiter(entry, callerSignal);
+    },
+    leave() {
+      waiter?.leave();
+    }
+  };
+}
+function setInFlightRead(baseDir, keyId, read) {
+  inFlightReadsByKey.set(composeKey(baseDir, keyId), { read, waiters: 1 });
+}
+function deleteInFlightRead(baseDir, keyId = "", expected) {
+  const key = composeKey(baseDir, keyId);
+  if (expected === void 0 || inFlightReadsByKey.get(key)?.read === expected) {
+    inFlightReadsByKey.delete(key);
+  }
+}
+function deleteInFlightReadsForDir(baseDir) {
+  const prefix = `${baseDir}${DIR_SEP}`;
+  for (const key of inFlightReadsByKey.keys()) {
+    if (key.startsWith(prefix)) inFlightReadsByKey.delete(key);
+  }
+}
+function clearInFlightReads() {
+  inFlightReadsByKey.clear();
+}
+
+export {
+  attachInFlightReader,
+  beginCoalescedScan,
+  setInFlightRead,
+  deleteInFlightRead,
+  deleteInFlightReadsForDir,
+  clearInFlightReads
+};
+//# sourceMappingURL=chunk-RBOJCG4T.js.map

package/dist/chunk-RBOJCG4T.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/in-flight-reads.ts"],"sourcesContent":["import type { MemoryFile } from \"./types.js\";\n\n/**\n * In-flight readAllMemories() dedup registry (issue #1902).\n *\n * NOT a cache layer — it holds transient per-(directory, secure-store key) scan\n * promises so temporally-overlapping reads collapse onto ONE disk scan; the slot\n * is deleted when the promise settles. It lives in its own module (not\n * memory-cache.ts) so it is not swept by the ALL_CACHE_LAYERS invalidation\n * contract, yet remains importable by both StorageManager and the out-of-band\n * corpus-bump helper (memory-corpus-version.ts).\n *\n * Keyed by baseDir AND secure-store key identity (Codex P1 / Cursor Medium):\n * an unlocked manager's decrypted scan must NOT be handed to a locked or\n * differently-keyed manager for the same dir — that would bypass the keyId\n * isolation getCachedMemories enforces. Locked/plaintext stores use keyId \"\".\n *\n * Since issue #2307 the registry also owns the scan's CANCELLATION, because\n * whether a shared scan may be cancelled is purely a question of who is still\n * attached to it — see `beginCoalescedScan`.\n */\ntype InFlightEntry = {\n  read: Promise<MemoryFile[]>;\n  /** Readers still awaiting this scan. At zero the scan has no reason to finish. */\n  waiters: number;\n  /** Withdraw the slot and abort the scan. Absent for an uncancellable scan. */\n  cancel?: () => void;\n};\n\nconst inFlightReadsByKey = new Map<string, InFlightEntry>();\n\nconst DIR_SEP = \"\\u0000\";\n\nfunction composeKey(baseDir: string, keyId: string): string {\n  return `${baseDir}${DIR_SEP}${keyId}`;\n}\n\n/**\n * A reader's attachment to a shared scan. `leave()` is idempotent per reader and\n * must be called when that reader stops waiting — because its own signal fired, or\n * because the scan settled.\n */\nexport interface CoalescedScanWaiter {\n  leave(): void;\n}\n\n/**\n * Cancellation lifecycle for a coalesced corpus scan (issue #2307).\n *\n * The rule is reference counting, not ownership: **the scan is cancelled when its\n * LAST waiter leaves, and never before.** One reader can therefore not cancel work\n * another still needs, and two readers that both give up do not leave a full disk\n * scan running for nobody — which was the abandoned I/O this whole change exists to\n * remove.\n *\n * On the last leave the slot is withdrawn from the registry BEFORE the controller\n * fires, so a reader arriving later cannot attach to a promise already doomed to\n * reject with an `AbortError` it never asked for; it starts a fresh scan instead.\n */\nexport interface CoalescedScan extends CoalescedScanWaiter {\n  /** The signal the shared scan itself observes. */\n  readonly scanSignal: AbortSignal;\n  /** Publish the scan to the registry and arm cancellation. */\n  arm(read: Promise<MemoryFile[]>): void;\n}\n\n/** Build the per-reader `leave` closure: decrement once, cancel at zero. */\nfunction trackWaiter(entry: InFlightEntry, callerSignal?: AbortSignal): CoalescedScanWaiter {\n  let left = false;\n  const leave = () => {\n    if (left) return;\n    left = true;\n    callerSignal?.removeEventListener(\"abort\", onAbort);\n    entry.waiters -= 1;\n    if (entry.waiters <= 0) entry.cancel?.();\n  };\n  // Named so the listener can be removed again; `once` alone would leak the\n  // reference for a reader that leaves normally.\n  function onAbort() {\n    leave();\n  }\n  callerSignal?.addEventListener(\"abort\", onAbort, { once: true });\n  return { leave };\n}\n\n/**\n * Attach to an existing scan for (baseDir, keyId), or `undefined` when none is in\n * flight. The caller MUST `leave()` once it stops awaiting the returned promise.\n */\nexport function attachInFlightReader(\n  baseDir: string,\n  keyId = \"\",\n  callerSignal?: AbortSignal,\n): { read: Promise<MemoryFile[]>; waiter: CoalescedScanWaiter } | undefined {\n  const entry = inFlightReadsByKey.get(composeKey(baseDir, keyId));\n  if (entry === undefined) return undefined;\n  entry.waiters += 1;\n  return { read: entry.read, waiter: trackWaiter(entry, callerSignal) };\n}\n\n/** Start a cancellable coalesced scan as its first waiter. */\nexport function beginCoalescedScan(\n  baseDir: string,\n  keyId: string,\n  callerSignal?: AbortSignal,\n): CoalescedScan {\n  const controller = new AbortController();\n  let waiter: CoalescedScanWaiter | undefined;\n  return {\n    scanSignal: controller.signal,\n    arm(read: Promise<MemoryFile[]>): void {\n      // `waiters: 1` IS the starter; trackWaiter only builds its leave closure\n      // (attaching readers do their own increment).\n      const entry: InFlightEntry = {\n        read,\n        waiters: 1,\n        cancel: () => {\n          deleteInFlightRead(baseDir, keyId, read);\n          controller.abort();\n        },\n      };\n      inFlightReadsByKey.set(composeKey(baseDir, keyId), entry);\n      waiter = trackWaiter(entry, callerSignal);\n    },\n    leave(): void {\n      waiter?.leave();\n    },\n  };\n}\n\n/**\n * Register a scan promise directly, with no cancellation attached.\n *\n * For callers that own a promise rather than a scan they can abort — tests that\n * seed a stale in-flight read, and any future producer outside `beginCoalescedScan`.\n * The entry has no `cancel`, so waiters leaving is a no-op: an externally-owned\n * promise is not this module's to abort.\n */\nexport function setInFlightRead(\n  baseDir: string,\n  keyId: string,\n  read: Promise<MemoryFile[]>,\n): void {\n  inFlightReadsByKey.set(composeKey(baseDir, keyId), { read, waiters: 1 });\n}\n\n/**\n * Delete the in-flight slot for one (baseDir, keyId). When `expected` is given,\n * only deletes if the slot still holds that exact promise (owner-only clear).\n */\nexport function deleteInFlightRead(\n  baseDir: string,\n  keyId = \"\",\n  expected?: Promise<MemoryFile[]>,\n): void {\n  const key = composeKey(baseDir, keyId);\n  if (expected === undefined || inFlightReadsByKey.get(key)?.read === expected) {\n    inFlightReadsByKey.delete(key);\n  }\n}\n\n/**\n * Drop EVERY in-flight slot for `baseDir` across all secure-store identities.\n * Used by mutations / invalidation / out-of-band corpus bumps: after the corpus\n * changes, no reader of any key identity may attach to a pre-mutation scan.\n */\nexport function deleteInFlightReadsForDir(baseDir: string): void {\n  const prefix = `${baseDir}${DIR_SEP}`;\n  for (const key of inFlightReadsByKey.keys()) {\n    if (key.startsWith(prefix)) inFlightReadsByKey.delete(key);\n  }\n}\n\nexport function clearInFlightReads(): void {\n  inFlightReadsByKey.clear();\n}\n"],"mappings":";AA6BA,IAAM,qBAAqB,oBAAI,IAA2B;AAE1D,IAAM,UAAU;AAEhB,SAAS,WAAW,SAAiB,OAAuB;AAC1D,SAAO,GAAG,OAAO,GAAG,OAAO,GAAG,KAAK;AACrC;AAgCA,SAAS,YAAY,OAAsB,cAAiD;AAC1F,MAAI,OAAO;AACX,QAAM,QAAQ,MAAM;AAClB,QAAI,KAAM;AACV,WAAO;AACP,kBAAc,oBAAoB,SAAS,OAAO;AAClD,UAAM,WAAW;AACjB,QAAI,MAAM,WAAW,EAAG,OAAM,SAAS;AAAA,EACzC;AAGA,WAAS,UAAU;AACjB,UAAM;AAAA,EACR;AACA,gBAAc,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAC/D,SAAO,EAAE,MAAM;AACjB;AAMO,SAAS,qBACd,SACA,QAAQ,IACR,cAC0E;AAC1E,QAAM,QAAQ,mBAAmB,IAAI,WAAW,SAAS,KAAK,CAAC;AAC/D,MAAI,UAAU,OAAW,QAAO;AAChC,QAAM,WAAW;AACjB,SAAO,EAAE,MAAM,MAAM,MAAM,QAAQ,YAAY,OAAO,YAAY,EAAE;AACtE;AAGO,SAAS,mBACd,SACA,OACA,cACe;AACf,QAAM,aAAa,IAAI,gBAAgB;AACvC,MAAI;AACJ,SAAO;AAAA,IACL,YAAY,WAAW;AAAA,IACvB,IAAI,MAAmC;AAGrC,YAAM,QAAuB;AAAA,QAC3B;AAAA,QACA,SAAS;AAAA,QACT,QAAQ,MAAM;AACZ,6BAAmB,SAAS,OAAO,IAAI;AACvC,qBAAW,MAAM;AAAA,QACnB;AAAA,MACF;AACA,yBAAmB,IAAI,WAAW,SAAS,KAAK,GAAG,KAAK;AACxD,eAAS,YAAY,OAAO,YAAY;AAAA,IAC1C;AAAA,IACA,QAAc;AACZ,cAAQ,MAAM;AAAA,IAChB;AAAA,EACF;AACF;AAUO,SAAS,gBACd,SACA,OACA,MACM;AACN,qBAAmB,IAAI,WAAW,SAAS,KAAK,GAAG,EAAE,MAAM,SAAS,EAAE,CAAC;AACzE;AAMO,SAAS,mBACd,SACA,QAAQ,IACR,UACM;AACN,QAAM,MAAM,WAAW,SAAS,KAAK;AACrC,MAAI,aAAa,UAAa,mBAAmB,IAAI,GAAG,GAAG,SAAS,UAAU;AAC5E,uBAAmB,OAAO,GAAG;AAAA,EAC/B;AACF;AAOO,SAAS,0BAA0B,SAAuB;AAC/D,QAAM,SAAS,GAAG,OAAO,GAAG,OAAO;AACnC,aAAW,OAAO,mBAAmB,KAAK,GAAG;AAC3C,QAAI,IAAI,WAAW,MAAM,EAAG,oBAAmB,OAAO,GAAG;AAAA,EAC3D;AACF;AAEO,SAAS,qBAA2B;AACzC,qBAAmB,MAAM;AAC3B;","names":[]}