@remnic/core 9.54.4 → 9.54.6

package/dist/{chunk-6R4G7N4S.js → chunk-M4YHAODQ.js}

@@ -1,3 +1,9 @@
+import {
+  TombstoneStore,
+  applyTombstoneResurrectionGate,
+  buildRetiredFactTombstoneInputs,
+  collectRetiredMemoriesForRebuild
+} from "./chunk-MLPTFODV.js";
 import {
   WEARABLES_DIR_NAME,
   escapeSegmentText,
@@ -10,18 +16,15 @@ import {
   unescapeSpeakerLabel
 } from "./chunk-UHVXE24Y.js";
 import {
-  TombstoneStore,
-  applyTombstoneResurrectionGate,
-  buildRetiredFactTombstoneInputs,
-  collectRetiredMemoriesForRebuild
-} from "./chunk-MLPTFODV.js";
+  normalizeQmdResultPath
+} from "./chunk-TO7ZTWJW.js";
 import {
   withholdToolScopedFromSharedNamespace
 } from "./chunk-S2V7RUCL.js";
 import {
   SPECULATIVE_TTL_DAYS,
   confidenceTier
-} from "./chunk-UU3G6GUP.js";
+} from "./chunk-76JJSXK7.js";
 import {
   normalizeProjectionPreview,
   normalizeProjectionTags
@@ -29,7 +32,7 @@ import {
 import {
   rewriteProjectedEntityReferences,
   rewriteProjectedMemoryEntityReference
-} from "./chunk-WRJVB3C2.js";
+} from "./chunk-PO7NXBG2.js";
 import {
   createMemorySnapshot
 } from "./chunk-S2HLHAZ4.js";
@@ -48,15 +51,17 @@ import {
 import {
   parseFaithfulnessField,
   serializeFaithfulnessFields
-} from "./chunk-JYIJNNN3.js";
+} from "./chunk-UG6VXIOK.js";
 import {
+  DeletionRevisionStore,
   TombstoneBlockedCaptureIndexHost,
   buildCapturePathLockIdentity,
   buildExplicitCaptureDedupKey,
+  invalidationCommitFingerprint,
   isQueuedReviewMemory,
   parseTombstoneBlockedOfflineSyncMemory,
   tombstoneBlocked
-} from "./chunk-K4QS7LXU.js";
+} from "./chunk-K2UGPTYY.js";
 import {
   composeMemoryEnvelope,
   isSealedMemoryEnvelope,
@@ -153,10 +158,7 @@ import {
   readMemoryActionEventRowsFromLines,
   readProjectionRebuiltAt,
   serializeLifecycleAppendPayload
-} from "./chunk-7FGL6CGA.js";
-import {
-  namespaceIdentityFromToken
-} from "./chunk-EGGE52UU.js";
+} from "./chunk-DVYRD4HY.js";
 import {
   assertMemoryFrontmatterId,
   warnProjectionFallback
@@ -182,18 +184,24 @@ import {
   readProjectedMemoryState,
   readProjectedMemoryTimeline,
   updateProjectedMemoryPath
-} from "./chunk-3CSX3ETE.js";
-import {
-  assemblePersistedBody,
-  storedContentIdentityCandidates,
-  stripAttributesSuffix
-} from "./chunk-JDSVLVCG.js";
+} from "./chunk-2LWQSV6A.js";
 import {
   withHeldFileLock
 } from "./chunk-FFAZ2XFU.js";
 import {
   computeLegacyContentHash
 } from "./chunk-5FVVY2EB.js";
+import {
+  isSupportPassportPrivateMemory
+} from "./chunk-XX4HPFFM.js";
+import {
+  namespaceIdentityFromToken
+} from "./chunk-EGGE52UU.js";
+import {
+  assemblePersistedBody,
+  storedContentIdentityCandidates,
+  stripAttributesSuffix
+} from "./chunk-JDSVLVCG.js";
 import {
   sanitizeMemoryContent
 } from "./chunk-5GKPFL3S.js";
@@ -224,6 +232,7 @@ import {
   isErrnoCode
 } from "./chunk-5UZXUTVO.js";
 import {
+  ALL_CATEGORY_DIRS,
   RECALL_FALLBACK_DIRS,
   categoryDirName,
   getCategoryDir
@@ -234,20 +243,20 @@ import {
 
 // src/storage.ts
 import {
-  lstat as lstat4,
+  lstat as lstat3,
   readdir as readdir6,
-  readFile as readFile3,
+  readFile as readFile2,
   realpath as realpath3,
   stat as stat2,
   writeFile as writeFile2,
-  mkdir as mkdir2,
-  unlink as unlink5,
+  mkdir,
+  unlink as unlink4,
   appendFile,
-  open as open2
+  open
 } from "fs/promises";
 import { appendFileSync, createReadStream, mkdirSync, statSync } from "fs";
-import { createHash as createHash7 } from "crypto";
-import path11 from "path";
+import { createHash as createHash6 } from "crypto";
+import path10 from "path";
 
 // src/storage/memory-read-store.ts
 import { lstat, readdir, realpath, stat } from "fs/promises";
@@ -2080,425 +2089,9 @@ ${rows.join("\n")}
   }
 };
 
-// src/storage/deletion-revision-store.ts
-import { createHash, randomUUID } from "crypto";
-import { lstat as lstat2, mkdir, open, readFile, rename, unlink as unlink2 } from "fs/promises";
-import path3 from "path";
-var DELETION_REVISION_MAX_MTIME_MS = 864e13;
-var DELETION_REVISION_LOCK_STALE_MS = 6e4;
-var DELETION_REVISION_LOCK_MAX_WAIT_MS = 12e4;
-var INVALIDATION_COMMIT_MAX_TIMESTAMP_MS = 864e13;
-var INVALIDATION_PROOF_QUARANTINE_MAX_IDS = 1024;
-function canonicalizeInvalidationEvidence(value) {
-  if (Array.isArray(value)) return value.map((item) => canonicalizeInvalidationEvidence(item));
-  if (value && typeof value === "object") {
-    const result = {};
-    for (const key of Object.keys(value).sort()) {
-      result[key] = canonicalizeInvalidationEvidence(value[key]);
-    }
-    return result;
-  }
-  return value;
-}
-function invalidationCommitFingerprint(memory) {
-  const frontmatter = { ...memory.frontmatter };
-  delete frontmatter.accessCount;
-  delete frontmatter.lastAccessed;
-  return createHash("sha256").update(
-    JSON.stringify(
-      canonicalizeInvalidationEvidence({
-        content: memory.content,
-        frontmatter
-      })
-    )
-  ).digest("hex");
-}
-function isValidInvalidationCommitTimestamp(value) {
-  return typeof value === "number" && Number.isFinite(value) && value >= 0 && value <= INVALIDATION_COMMIT_MAX_TIMESTAMP_MS;
-}
-function isValidInvalidationCommitFingerprint(value) {
-  return typeof value === "string" && /^[a-f0-9]{64}$/.test(value);
-}
-function isValidMemoryId(value) {
-  return typeof value === "string" && value.length > 0 && !value.includes("\0");
-}
-function isValidDeletionRevisionPath(value) {
-  return typeof value === "string" && value.length > 0 && !value.includes("\\") && !value.includes("\0") && !path3.posix.isAbsolute(value) && path3.posix.normalize(value) === value && value !== "." && value !== ".." && !value.startsWith("../");
-}
-function deletionRevisionPathIdentity(value) {
-  return value.normalize("NFC").toUpperCase().toLowerCase();
-}
-var DeletionRevisionStore = class {
-  options;
-  invalidationProofQuarantine = /* @__PURE__ */ new Set();
-  invalidationProofQuarantineFull = false;
-  invalidationProofQuarantineFullAt = null;
-  constructor(options) {
-    this.options = options;
-  }
-  quarantineInvalidationProof(memoryId) {
-    if (this.invalidationProofQuarantineFull) {
-      const nextBoundary = Date.now() + 1;
-      this.invalidationProofQuarantineFullAt = Math.max(
-        this.invalidationProofQuarantineFullAt ?? 0,
-        nextBoundary
-      );
-      return;
-    }
-    if (this.invalidationProofQuarantine.has(memoryId)) return;
-    if (this.invalidationProofQuarantine.size >= INVALIDATION_PROOF_QUARANTINE_MAX_IDS) {
-      this.invalidationProofQuarantineFull = true;
-      this.invalidationProofQuarantineFullAt = Date.now() + 1;
-      return;
-    }
-    this.invalidationProofQuarantine.add(memoryId);
-  }
-  async resolveConfiguredStoragePath(targetPath) {
-    const baseDir = path3.resolve(this.options.baseDir);
-    const relativePath = path3.relative(baseDir, path3.resolve(targetPath));
-    return resolveSafeStoragePath(baseDir, relativePath);
-  }
-  async resolveManagedStoragePath(filePath, method) {
-    const assertedPath = this.options.assertManagedStoragePath(filePath, method);
-    const target = await this.resolveConfiguredStoragePath(assertedPath);
-    const relativePath = path3.relative(path3.resolve(this.options.baseDir), target).split(path3.sep).join("/");
-    return { target, relativePath };
-  }
-  parseDeletionRevisionMetadata(raw) {
-    let parsed;
-    try {
-      parsed = JSON.parse(raw);
-    } catch {
-      throw new Error("Deletion revision metadata is invalid.");
-    }
-    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
-      throw new Error("Deletion revision metadata is invalid.");
-    }
-    const root = parsed;
-    if (Object.keys(root).sort().join(",") !== "deletions,version" || root.version !== 1 || !Array.isArray(root.deletions)) {
-      throw new Error("Deletion revision metadata is invalid.");
-    }
-    const revisions = /* @__PURE__ */ new Map();
-    const pathByIdentity = /* @__PURE__ */ new Map();
-    for (const rawEntry of root.deletions) {
-      if (!rawEntry || typeof rawEntry !== "object" || Array.isArray(rawEntry)) {
-        throw new Error("Deletion revision metadata is invalid.");
-      }
-      const entry = rawEntry;
-      if (Object.keys(entry).sort().join(",") !== "mtimeMs,path" || !isValidDeletionRevisionPath(entry.path) || typeof entry.mtimeMs !== "number" || !Number.isFinite(entry.mtimeMs) || entry.mtimeMs < 0 || entry.mtimeMs > DELETION_REVISION_MAX_MTIME_MS || revisions.has(entry.path)) {
-        throw new Error("Deletion revision metadata is invalid.");
-      }
-      const identity = deletionRevisionPathIdentity(entry.path);
-      if (pathByIdentity.has(identity)) {
-        throw new Error("Deletion revision metadata is invalid.");
-      }
-      pathByIdentity.set(identity, entry.path);
-      revisions.set(entry.path, entry.mtimeMs);
-    }
-    return new Map([...revisions.entries()].sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0));
-  }
-  async readDeletionRevisionMetadata() {
-    const metadataPath = await this.resolveConfiguredStoragePath(this.options.deletionRevisionMetadataPath);
-    let raw;
-    try {
-      raw = await readFile(metadataPath, "utf8");
-    } catch (error) {
-      if (isErrnoCode(error, "ENOENT")) return /* @__PURE__ */ new Map();
-      throw new Error("Deletion revision metadata is unavailable.");
-    }
-    return this.parseDeletionRevisionMetadata(raw);
-  }
-  async writeDeletionRevisionMetadata(revisions, lock) {
-    const metadataPath = await this.resolveConfiguredStoragePath(this.options.deletionRevisionMetadataPath);
-    const deletions = [...revisions.entries()].sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0).map(([entryPath, mtimeMs]) => ({ path: entryPath, mtimeMs }));
-    const metadata = { version: 1, deletions };
-    const temporaryPath = await this.resolveConfiguredStoragePath(
-      `${metadataPath}.${process.pid}.${randomUUID()}.tmp`
-    );
-    let handle = null;
-    try {
-      handle = await open(temporaryPath, "wx", 384);
-      await handle.writeFile(`${JSON.stringify(metadata)}
-`, "utf8");
-      await handle.sync();
-      await handle.close();
-      handle = null;
-      if (!await lock.refresh()) {
-        throw new Error("Deletion revision metadata lock was lost.");
-      }
-      const renameTarget = await this.resolveConfiguredStoragePath(this.options.deletionRevisionMetadataPath);
-      await rename(temporaryPath, renameTarget);
-    } finally {
-      if (handle !== null) {
-        await handle.close().catch((error) => {
-          log.warn("failed to close deletion revision metadata temporary file", error);
-        });
-      }
-      const cleanupPath = await this.resolveConfiguredStoragePath(temporaryPath).catch((error) => {
-        log.warn("failed to resolve deletion revision metadata temporary file for cleanup", error);
-        return null;
-      });
-      if (cleanupPath !== null) {
-        await unlink2(cleanupPath).catch((error) => {
-          if (!isErrnoCode(error, "ENOENT")) {
-            log.warn("failed to clean up deletion revision metadata temporary file", error);
-          }
-        });
-      }
-    }
-  }
-  async withDeletionRevisionLock(task) {
-    const lockPath2 = await this.resolveConfiguredStoragePath(this.options.deletionRevisionLockPath);
-    return withHeldFileLock(
-      lockPath2,
-      {
-        staleMs: DELETION_REVISION_LOCK_STALE_MS,
-        maxWaitMs: DELETION_REVISION_LOCK_MAX_WAIT_MS
-      },
-      async (acquired, lock) => {
-        if (!acquired) throw new Error("Deletion revision metadata lock is unavailable.");
-        return task(lock);
-      }
-    );
-  }
-  async readDeletionRevisions() {
-    return this.withDeletionRevisionLock(async () => this.readDeletionRevisionMetadata());
-  }
-  parseInvalidationCommitMetadata(raw) {
-    let parsed;
-    try {
-      parsed = JSON.parse(raw);
-    } catch {
-      throw new Error("Invalidation commit metadata is invalid.");
-    }
-    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
-      throw new Error("Invalidation commit metadata is invalid.");
-    }
-    const root = parsed;
-    if (Object.keys(root).sort().join(",") !== "commits,version" || root.version !== 1 || !Array.isArray(root.commits)) {
-      throw new Error("Invalidation commit metadata is invalid.");
-    }
-    const commits = /* @__PURE__ */ new Map();
-    for (const rawEntry of root.commits) {
-      if (!rawEntry || typeof rawEntry !== "object" || Array.isArray(rawEntry)) {
-        throw new Error("Invalidation commit metadata is invalid.");
-      }
-      const entry = rawEntry;
-      if (Object.keys(entry).sort().join(",") !== "committedAt,fingerprint,memoryId" || !isValidMemoryId(entry.memoryId) || !isValidInvalidationCommitFingerprint(entry.fingerprint) || !isValidInvalidationCommitTimestamp(entry.committedAt) || commits.has(entry.memoryId)) {
-        throw new Error("Invalidation commit metadata is invalid.");
-      }
-      commits.set(entry.memoryId, {
-        fingerprint: entry.fingerprint,
-        committedAt: entry.committedAt
-      });
-    }
-    return commits;
-  }
-  async readInvalidationCommitMetadata() {
-    const metadataPath = await this.resolveConfiguredStoragePath(this.options.invalidationCommitMetadataPath);
-    let raw;
-    try {
-      raw = await readFile(metadataPath, "utf8");
-    } catch (error) {
-      if (isErrnoCode(error, "ENOENT")) return /* @__PURE__ */ new Map();
-      throw new Error("Invalidation commit metadata is unavailable.");
-    }
-    return this.parseInvalidationCommitMetadata(raw);
-  }
-  async writeInvalidationCommitMetadata(commits, lock) {
-    const metadataPath = await this.resolveConfiguredStoragePath(this.options.invalidationCommitMetadataPath);
-    const entries = [...commits.entries()].sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0).map(([memoryId, value]) => ({
-      memoryId,
-      fingerprint: value.fingerprint,
-      committedAt: value.committedAt
-    }));
-    const metadata = { version: 1, commits: entries };
-    const temporaryPath = await this.resolveConfiguredStoragePath(
-      `${metadataPath}.${process.pid}.${randomUUID()}.tmp`
-    );
-    const metadataDir = await this.resolveConfiguredStoragePath(path3.dirname(metadataPath));
-    let handle = null;
-    let renamed = false;
-    try {
-      await mkdir(metadataDir, { recursive: true });
-      handle = await open(temporaryPath, "wx", 384);
-      await handle.writeFile(`${JSON.stringify(metadata)}
-`, "utf8");
-      await handle.sync();
-      await handle.close();
-      handle = null;
-      if (!await lock.refresh()) {
-        throw new Error("Invalidation commit metadata lock was lost.");
-      }
-      const renameTarget = await this.resolveConfiguredStoragePath(this.options.invalidationCommitMetadataPath);
-      await rename(temporaryPath, renameTarget);
-      renamed = true;
-    } finally {
-      if (handle !== null) {
-        await handle.close().catch((error) => {
-          log.warn("failed to close invalidation commit metadata temporary file", error);
-        });
-      }
-      const cleanupPath = await this.resolveConfiguredStoragePath(temporaryPath).catch((error) => {
-        log.warn("failed to resolve invalidation commit metadata temporary file for cleanup", error);
-        return null;
-      });
-      if (cleanupPath !== null) {
-        await unlink2(cleanupPath).catch((error) => {
-          if (!isErrnoCode(error, "ENOENT")) {
-            log.warn(
-              `failed to clean up invalidation commit metadata temporary file after ${renamed ? "commit" : "failure"}`,
-              error
-            );
-          }
-        });
-      }
-    }
-  }
-  async hasCommittedInvalidation(memory) {
-    const memoryId = memory.frontmatter.id;
-    const fingerprint = invalidationCommitFingerprint(memory);
-    return this.withDeletionRevisionLock(async () => {
-      const entry = (await this.readInvalidationCommitMetadata()).get(memoryId);
-      if (entry?.fingerprint !== fingerprint) return false;
-      if (this.invalidationProofQuarantine.has(memoryId)) return false;
-      if (!this.invalidationProofQuarantineFull) return true;
-      const fullAt = this.invalidationProofQuarantineFullAt;
-      return fullAt !== null && entry.committedAt >= fullAt;
-    });
-  }
-  async recordCommittedInvalidation(memory) {
-    const fingerprint = invalidationCommitFingerprint(memory);
-    await this.withDeletionRevisionLock(async (lock) => {
-      const fullAt = this.invalidationProofQuarantineFullAt;
-      const committedAt = fullAt === null ? Date.now() : Math.max(Date.now(), fullAt + 1);
-      const commits = await this.readInvalidationCommitMetadata();
-      commits.set(memory.frontmatter.id, {
-        fingerprint,
-        committedAt
-      });
-      await this.writeInvalidationCommitMetadata(commits, lock);
-      this.invalidationProofQuarantine.delete(memory.frontmatter.id);
-    });
-  }
-  async clearCommittedInvalidation(memory) {
-    const memoryId = memory.frontmatter.id;
-    this.quarantineInvalidationProof(memoryId);
-    const fingerprint = invalidationCommitFingerprint(memory);
-    let cleared = false;
-    try {
-      await this.withDeletionRevisionLock(async (lock) => {
-        const commits = await this.readInvalidationCommitMetadata();
-        const current = commits.get(memoryId);
-        if (current?.fingerprint !== fingerprint) return;
-        commits.delete(memoryId);
-        await this.writeInvalidationCommitMetadata(commits, lock);
-      });
-      cleared = true;
-    } finally {
-      if (cleared) this.invalidationProofQuarantine.delete(memoryId);
-    }
-  }
-  async recordReplicatedDeletionRevision(filePath, mtimeMs) {
-    const { relativePath } = await this.resolveManagedStoragePath(
-      filePath,
-      "storage.recordReplicatedDeletionRevision"
-    );
-    if (typeof mtimeMs !== "number" || !Number.isFinite(mtimeMs) || mtimeMs < 0 || mtimeMs > DELETION_REVISION_MAX_MTIME_MS) {
-      throw new Error("Deletion revision timestamp is invalid.");
-    }
-    if (!isValidDeletionRevisionPath(relativePath)) {
-      throw new Error("Deletion revision path is invalid.");
-    }
-    await this.withDeletionRevisionLock(async (lock) => {
-      const revisions = await this.readDeletionRevisionMetadata();
-      const identity = deletionRevisionPathIdentity(relativePath);
-      let existingPath;
-      for (const candidatePath of revisions.keys()) {
-        if (deletionRevisionPathIdentity(candidatePath) === identity) {
-          existingPath = candidatePath;
-          break;
-        }
-      }
-      const existingMtimeMs = existingPath === void 0 ? void 0 : revisions.get(existingPath);
-      if (existingMtimeMs !== void 0 && existingMtimeMs >= mtimeMs) return;
-      const updated = new Map(revisions);
-      if (existingPath !== void 0) updated.delete(existingPath);
-      updated.set(relativePath, mtimeMs);
-      await this.writeDeletionRevisionMetadata(updated, lock);
-    });
-  }
-  async writeManagedStorageFile(filePath, write) {
-    const { relativePath } = await this.resolveManagedStoragePath(filePath, "storage.writeManagedStorageFile");
-    if (!isValidDeletionRevisionPath(relativePath)) {
-      throw new Error("Deletion revision path is invalid.");
-    }
-    await this.withDeletionRevisionLock(async (lock) => {
-      const before = await this.readDeletionRevisionMetadata();
-      const identity = deletionRevisionPathIdentity(relativePath);
-      const existingPath = [...before.keys()].find(
-        (candidatePath) => deletionRevisionPathIdentity(candidatePath) === identity
-      );
-      await write();
-      if (existingPath === void 0) return;
-      const updated = new Map(before);
-      updated.delete(existingPath);
-      await this.writeDeletionRevisionMetadata(updated, lock);
-    });
-  }
-  async deleteManagedStorageFile(filePath, deletionMtimeMs) {
-    const { target, relativePath } = await this.resolveManagedStoragePath(
-      filePath,
-      "storage.deleteManagedStorageFile"
-    );
-    if (deletionMtimeMs !== void 0 && deletionMtimeMs !== null && (typeof deletionMtimeMs !== "number" || !Number.isFinite(deletionMtimeMs) || deletionMtimeMs < 0 || deletionMtimeMs > DELETION_REVISION_MAX_MTIME_MS)) {
-      throw new Error("Deletion revision timestamp is invalid.");
-    }
-    return this.withDeletionRevisionLock(async (lock) => {
-      const safeTarget = await this.resolveConfiguredStoragePath(target);
-      try {
-        await lstat2(safeTarget);
-      } catch (error) {
-        if (isErrnoCode(error, "ENOENT")) return false;
-        throw error;
-      }
-      if (!isValidDeletionRevisionPath(relativePath)) {
-        throw new Error("Deletion revision path is invalid.");
-      }
-      const revision = deletionMtimeMs === null ? void 0 : deletionMtimeMs ?? Date.now();
-      const before = await this.readDeletionRevisionMetadata();
-      const identity = deletionRevisionPathIdentity(relativePath);
-      let existingPath;
-      for (const candidatePath of before.keys()) {
-        if (deletionRevisionPathIdentity(candidatePath) === identity) {
-          existingPath = candidatePath;
-          break;
-        }
-      }
-      const existing = existingPath === void 0 ? void 0 : before.get(existingPath);
-      const changed = existingPath !== void 0 && existingPath !== relativePath || (revision === void 0 ? existing !== void 0 : existing !== revision);
-      if (changed) {
-        const updated = new Map(before);
-        if (existingPath !== void 0) updated.delete(existingPath);
-        if (revision !== void 0) updated.set(relativePath, revision);
-        await this.writeDeletionRevisionMetadata(updated, lock);
-      }
-      try {
-        const unlinkTarget = await this.resolveConfiguredStoragePath(target);
-        await unlink2(unlinkTarget);
-        return true;
-      } catch (error) {
-        if (changed) await this.writeDeletionRevisionMetadata(before, lock);
-        if (isErrnoCode(error, "ENOENT")) return false;
-        throw error;
-      }
-    });
-  }
-};
-
 // src/storage/identity-continuity-store.ts
 import { readdir as readdir3 } from "fs/promises";
-import path4 from "path";
+import path3 from "path";
 var IdentityContinuityStore = class {
   constructor(deps) {
     this.deps = deps;
@@ -2523,7 +2116,7 @@ var IdentityContinuityStore = class {
     const date = nowIso.slice(0, 10);
     const id = this.deps.generateId("incident");
     const incident = createContinuityIncidentRecord(id, input, nowIso);
-    const filePath = path4.join(this.deps.identityIncidentsDir, `${date}-${id}.md`);
+    const filePath = path3.join(this.deps.identityIncidentsDir, `${date}-${id}.md`);
     await this.deps.writeStorageSecureFile(filePath, serializeContinuityIncident(incident));
     return { ...incident, filePath };
   }
@@ -2536,7 +2129,7 @@ var IdentityContinuityStore = class {
       const incidents = [];
       for (const file of candidates) {
         if (incidents.length >= cappedLimit) break;
-        const filePath = path4.join(this.deps.identityIncidentsDir, file);
+        const filePath = path3.join(this.deps.identityIncidentsDir, file);
         try {
           const raw = await this.deps.readStorageSecureFile(filePath);
           const parsed = parseContinuityIncident(raw);
@@ -2567,7 +2160,7 @@ var IdentityContinuityStore = class {
     await this.deps.ensureDirectories();
     const safeKey = this.sanitizeIdentityAuditKey(key);
     const dir = period === "weekly" ? this.deps.identityAuditsWeeklyDir : this.deps.identityAuditsMonthlyDir;
-    const filePath = path4.join(dir, `${safeKey}.md`);
+    const filePath = path3.join(dir, `${safeKey}.md`);
     await this.deps.writeStorageSecureFile(filePath, content);
     return filePath;
   }
@@ -2575,7 +2168,7 @@ var IdentityContinuityStore = class {
     try {
       const safeKey = this.sanitizeIdentityAuditKey(key);
       const dir = period === "weekly" ? this.deps.identityAuditsWeeklyDir : this.deps.identityAuditsMonthlyDir;
-      return await this.deps.readStorageSecureFile(path4.join(dir, `${safeKey}.md`));
+      return await this.deps.readStorageSecureFile(path3.join(dir, `${safeKey}.md`));
     } catch (err) {
       if (err instanceof Error && err.message === "Invalid identity audit key") return null;
       if (!isErrnoCode(err, "ENOENT")) throw err;
@@ -2631,12 +2224,12 @@ var IdentityContinuityStore = class {
     const fileNames = await this.readContinuityIncidentFileNames();
     const directMatch = fileNames.find((name) => name.endsWith(`-${id}.md`));
     if (directMatch) {
-      const directPath = path4.join(this.deps.identityIncidentsDir, directMatch);
+      const directPath = path3.join(this.deps.identityIncidentsDir, directMatch);
       const parsed = await this.readContinuityIncidentFile(directPath);
       if (parsed?.id === id) return directPath;
     }
     for (const fileName of fileNames) {
-      const filePath = path4.join(this.deps.identityIncidentsDir, fileName);
+      const filePath = path3.join(this.deps.identityIncidentsDir, fileName);
       const parsed = await this.readContinuityIncidentFile(filePath);
       if (parsed?.id === id) return filePath;
     }
@@ -2652,19 +2245,19 @@ var IdentityContinuityStore = class {
 };
 
 // src/storage/entity-canonical-id-migration.ts
-import { createHash as createHash2, randomUUID as randomUUID2 } from "crypto";
+import { createHash, randomUUID } from "crypto";
 import {
   access,
-  lstat as lstat3,
-  readFile as readFile2,
+  lstat as lstat2,
+  readFile,
   readdir as readdir4,
   realpath as realpath2,
-  rename as rename2,
+  rename,
   stat as statFile,
-  unlink as unlink3,
+  unlink as unlink2,
   writeFile
 } from "fs/promises";
-import path5 from "path";
+import path4 from "path";
 import { z } from "zod";
 var ENTITY_CANONICAL_ID_MIGRATION_VERSION = 1;
 var ENTITY_CANONICAL_ID_MIGRATION_LOCK_STALE_MS = 6e4;
@@ -2689,7 +2282,7 @@ var EntityCanonicalIdMigrationStateSchema = z.object({
 async function fingerprintPath(filePath) {
   let fileStat;
   try {
-    fileStat = await lstat3(filePath);
+    fileStat = await lstat2(filePath);
   } catch (error) {
     if (!isErrnoCode(error, "ENOENT")) throw error;
   }
@@ -2698,16 +2291,16 @@ async function fingerprintPath(filePath) {
 async function fingerprintEntityEntries(entitiesDir) {
   let names;
   try {
-    names = (await readdir4(entitiesDir)).filter((name) => path5.extname(name) === ".md").sort();
+    names = (await readdir4(entitiesDir)).filter((name) => path4.extname(name) === ".md").sort();
   } catch (error) {
     if (isErrnoCode(error, "ENOENT")) return "missing";
     throw error;
   }
-  const hash = createHash2("sha256");
+  const hash = createHash("sha256");
   for (const name of names) {
     hash.update(`${name.length}:${name}:`);
     try {
-      const entry = await lstat3(path5.join(entitiesDir, name), { bigint: true });
+      const entry = await lstat2(path4.join(entitiesDir, name), { bigint: true });
       hash.update(`${entry.dev}:${entry.ino}:${entry.size}:${entry.mtimeNs}:${entry.ctimeNs}`);
     } catch (error) {
       if (!isErrnoCode(error, "ENOENT")) throw error;
@@ -2727,9 +2320,9 @@ async function getFingerprint(baseDir, entitiesDir, getEntityMutationVersion) {
   ] = await Promise.all([
     fingerprintPath(entitiesDir),
     fingerprintEntityEntries(entitiesDir),
-    fingerprintPath(path5.join(baseDir, "config", "aliases.json")),
-    fingerprintPath(path5.join(baseDir, "state", ENTITY_CANONICAL_ID_RECONCILE_MARKER)),
-    fingerprintPath(path5.join(baseDir, "state", ENTITY_CANONICAL_ID_RECONCILE_CONSUMING_MARKER))
+    fingerprintPath(path4.join(baseDir, "config", "aliases.json")),
+    fingerprintPath(path4.join(baseDir, "state", ENTITY_CANONICAL_ID_RECONCILE_MARKER)),
+    fingerprintPath(path4.join(baseDir, "state", ENTITY_CANONICAL_ID_RECONCILE_CONSUMING_MARKER))
   ]);
   return [
     entityDirectoryFingerprint,
@@ -2743,7 +2336,7 @@ async function getFingerprint(baseDir, entitiesDir, getEntityMutationVersion) {
 async function validateRoots(baseDir, entitiesDir, stateDir, archiveDir) {
   let baseStat;
   try {
-    baseStat = await lstat3(baseDir);
+    baseStat = await lstat2(baseDir);
   } catch (error) {
     if (isErrnoCode(error, "ENOENT")) return;
     throw error;
@@ -2755,14 +2348,14 @@ async function validateRoots(baseDir, entitiesDir, stateDir, archiveDir) {
   const roots = [
     entitiesDir,
     stateDir,
-    ...RECALL_FALLBACK_DIRS.map((directory) => path5.join(baseDir, directory)),
-    path5.join(baseDir, "cold"),
+    ...RECALL_FALLBACK_DIRS.map((directory) => path4.join(baseDir, directory)),
+    path4.join(baseDir, "cold"),
     archiveDir
   ];
   for (const root of roots) {
     let rootStat;
     try {
-      rootStat = await lstat3(root);
+      rootStat = await lstat2(root);
     } catch (error) {
       if (isErrnoCode(error, "ENOENT")) continue;
       throw error;
@@ -2774,13 +2367,13 @@ async function validateRoots(baseDir, entitiesDir, stateDir, archiveDir) {
   }
 }
 function statePath(deps) {
-  return path5.join(deps.stateDir, ENTITY_CANONICAL_ID_MIGRATION_FILE);
+  return path4.join(deps.stateDir, ENTITY_CANONICAL_ID_MIGRATION_FILE);
 }
 async function assertSafeMigrationStateFile(deps) {
   const migrationStatePath = statePath(deps);
   let fileStat;
   try {
-    fileStat = await lstat3(migrationStatePath);
+    fileStat = await lstat2(migrationStatePath);
   } catch (error) {
     if (isErrnoCode(error, "ENOENT")) return;
     throw error;
@@ -2799,7 +2392,7 @@ async function assertSafeMigrationStateFile(deps) {
 async function assertSafeTombstoneFile(deps, tombstonePath) {
   let fileStat;
   try {
-    fileStat = await lstat3(tombstonePath);
+    fileStat = await lstat2(tombstonePath);
   } catch (error) {
     if (isErrnoCode(error, "ENOENT")) return false;
     throw error;
@@ -2817,13 +2410,13 @@ async function assertSafeTombstoneFile(deps, tombstonePath) {
   return true;
 }
 function lockPath(deps) {
-  return path5.join(deps.stateDir, "entity-canonical-id-migration.lock");
+  return path4.join(deps.stateDir, "entity-canonical-id-migration.lock");
 }
 async function readState(deps) {
   await assertSafeMigrationStateFile(deps);
   let raw;
   try {
-    raw = await readFile2(statePath(deps), "utf-8");
+    raw = await readFile(statePath(deps), "utf-8");
   } catch (error) {
     if (isErrnoCode(error, "ENOENT")) return null;
     throw error;
@@ -2846,13 +2439,13 @@ async function readState(deps) {
 }
 async function writeState(deps, state) {
   const destination = statePath(deps);
-  const temporary = `${destination}.${process.pid}.${randomUUID2()}.tmp`;
+  const temporary = `${destination}.${process.pid}.${randomUUID()}.tmp`;
   try {
     await writeFile(temporary, `${JSON.stringify(state, null, 2)}
 `, "utf-8");
-    await rename2(temporary, destination);
+    await rename(temporary, destination);
   } finally {
-    await unlink3(temporary).catch(() => void 0);
+    await unlink2(temporary).catch(() => void 0);
   }
 }
 async function publishState(deps, state) {
@@ -2881,7 +2474,7 @@ async function sameFileIdentity(leftPath, rightPath) {
 async function assertNotSymlink(filePath, label) {
   let stat3;
   try {
-    stat3 = await lstat3(filePath);
+    stat3 = await lstat2(filePath);
   } catch (error) {
     if (isErrnoCode(error, "ENOENT")) return;
     throw error;
@@ -2893,7 +2486,7 @@ async function assertNotSymlink(filePath, label) {
 async function assertNotMemorySymlink(filePath) {
   let stat3;
   try {
-    stat3 = await lstat3(filePath);
+    stat3 = await lstat2(filePath);
   } catch (error) {
     if (isErrnoCode(error, "ENOENT")) return;
     throw error;
@@ -2909,13 +2502,13 @@ async function assertEntityContentUnchanged(deps, filePath, expectedContent, leg
   }
 }
 async function readSafeEntityEntries(entitiesDir) {
-  const rootStat = await lstat3(entitiesDir);
+  const rootStat = await lstat2(entitiesDir);
   if (rootStat.isSymbolicLink() || !rootStat.isDirectory()) {
     throw new Error("Refusing entity canonical-id migration through a symlinked or non-directory entities root.");
   }
   const entries = await readdir4(entitiesDir);
   for (const entry of entries) {
-    await assertNotSymlink(path5.join(entitiesDir, entry), entry);
+    await assertNotSymlink(path4.join(entitiesDir, entry), entry);
   }
   return entries;
 }
@@ -2977,7 +2570,7 @@ async function rewriteReferences(deps, mappings, refreshLock) {
     const seenPaths = /* @__PURE__ */ new Set();
     let rewroteAny = false;
     for (const memory of [...hotMemories, ...coldMemories, ...archivedMemories]) {
-      const memoryPath = path5.resolve(memory.path);
+      const memoryPath = path4.resolve(memory.path);
       if (seenPaths.has(memoryPath)) continue;
       seenPaths.add(memoryPath);
       const previousEntityRef = memory.frontmatter.entityRef;
@@ -3009,7 +2602,7 @@ async function rewriteReferences(deps, mappings, refreshLock) {
         latestCanonicalId
       );
       rewroteAny = true;
-      rewroteColdMemory ||= latestMemory.path.includes(`${path5.sep}cold${path5.sep}`);
+      rewroteColdMemory ||= latestMemory.path.includes(`${path4.sep}cold${path4.sep}`);
     }
     if (!rewroteAny) return { rewroteColdMemory };
   }
@@ -3048,7 +2641,7 @@ function rewriteTombstoneLine(line, mappings, normalizedMappings) {
   return changed ? JSON.stringify(tombstone) : line;
 }
 async function rewriteTombstoneReferences(deps, mappings, refreshLock) {
-  const tombstonePath = path5.join(deps.stateDir, "tombstones.jsonl");
+  const tombstonePath = path4.join(deps.stateDir, "tombstones.jsonl");
   const normalizedMappings = /* @__PURE__ */ new Map();
   for (const [legacyId, canonicalId] of Object.entries(mappings)) {
     const normalizedLegacyId = normalizeSupersessionKey(legacyId);
@@ -3057,7 +2650,7 @@ async function rewriteTombstoneReferences(deps, mappings, refreshLock) {
     }
   }
   await withHeldFileLock(
-    path5.join(deps.stateDir, "tombstones.lock"),
+    path4.join(deps.stateDir, "tombstones.lock"),
     {
       staleMs: TOMBSTONE_LOCK_STALE_MS,
       maxWaitMs: TOMBSTONE_LOCK_MAX_WAIT_MS
@@ -3245,7 +2838,7 @@ async function migrateEntityFilePair(deps, legacyId, canonicalId, refreshMigrati
       await deps.snapshotBeforeWrite(legacyPath, "write");
       await assertNotSymlink(legacyPath, legacyId);
       await assertEntityContentUnchanged(deps, legacyPath, legacyContent, legacyId);
-      await unlink3(legacyPath);
+      await unlink2(legacyPath);
       return { deferred: false, progressed: true };
     }
     if (!legacyExists) return { deferred: false, progressed: false };
@@ -3269,13 +2862,13 @@ async function migrateEntityFilePair(deps, legacyId, canonicalId, refreshMigrati
       await deps.snapshotBeforeWrite(legacyPath, "write");
       await assertNotSymlink(legacyPath, legacyId);
       await assertEntityContentUnchanged(deps, legacyPath, entityContent, legacyId);
-      await unlink3(legacyPath);
+      await unlink2(legacyPath);
     } catch (error) {
       if (!canonicalExists && canonicalFingerprintAfterWrite !== null) {
         try {
           if (await fingerprintPath(canonicalPath) === canonicalFingerprintAfterWrite) {
             await assertNotSymlink(canonicalPath, canonicalId);
-            await unlink3(canonicalPath);
+            await unlink2(canonicalPath);
           }
         } catch {
         }
@@ -3296,12 +2889,12 @@ async function migrateLegacyEntityCanonicalIds(deps) {
       if (!acquired) throw new Error("Timed out waiting for active entity canonical-id migration.");
       await deps.validateMemoryScanRoots?.();
       await readSafeEntityEntries(deps.entitiesDir);
-      const reconcileMarkerPath = path5.join(deps.stateDir, ENTITY_CANONICAL_ID_RECONCILE_MARKER);
-      const consumingMarkerPath = path5.join(deps.stateDir, ENTITY_CANONICAL_ID_RECONCILE_CONSUMING_MARKER);
+      const reconcileMarkerPath = path4.join(deps.stateDir, ENTITY_CANONICAL_ID_RECONCILE_MARKER);
+      const consumingMarkerPath = path4.join(deps.stateDir, ENTITY_CANONICAL_ID_RECONCILE_CONSUMING_MARKER);
       let reconcileRequested = await fileExists(consumingMarkerPath);
       if (await fileExists(reconcileMarkerPath)) {
         try {
-          await rename2(reconcileMarkerPath, consumingMarkerPath);
+          await rename(reconcileMarkerPath, consumingMarkerPath);
           reconcileRequested = true;
         } catch (error) {
           if (!isErrnoCode(error, "ENOENT")) throw error;
@@ -3324,7 +2917,7 @@ async function migrateLegacyEntityCanonicalIds(deps) {
           );
         }
         if (reconcileRequested) {
-          await unlink3(consumingMarkerPath).catch((error) => {
+          await unlink2(consumingMarkerPath).catch((error) => {
             if (!isErrnoCode(error, "ENOENT")) throw error;
           });
         }
@@ -3470,7 +3063,7 @@ async function migrateLegacyEntityCanonicalIds(deps) {
 }
 
 // src/storage/entity-ref-repair.ts
-import { unlink as unlink4 } from "fs/promises";
+import { unlink as unlink3 } from "fs/promises";
 var EntityRefRepair = class {
   constructor(deps) {
     this.deps = deps;
@@ -3532,7 +3125,7 @@ ${body}
       if (opts.onFailRestore) {
         await this.restore(opts.onFailRestore);
       } else if (opts.onFailRemove) {
-        await unlink4(opts.onFailRemove).catch(() => void 0);
+        await unlink3(opts.onFailRemove).catch(() => void 0);
         this.deps.invalidateAllMemoriesCache();
       }
       throw err;
@@ -3693,7 +3286,7 @@ import {
   readFileSync,
   realpathSync
 } from "fs";
-import path6 from "path";
+import path5 from "path";
 function resolveSafeAliasRoots(baseDir, configDir) {
   let baseStat;
   try {
@@ -3720,8 +3313,8 @@ function resolveSafeAliasRoots(baseDir, configDir) {
   return memoryRoot;
 }
 function readEntityAliasConfigSync(baseDir) {
-  const configDir = path6.join(baseDir, "config");
-  const aliasPath = path6.join(configDir, "aliases.json");
+  const configDir = path5.join(baseDir, "config");
+  const aliasPath = path5.join(configDir, "aliases.json");
   let memoryRoot = resolveSafeAliasRoots(baseDir, configDir);
   if (memoryRoot === void 0) return void 0;
   let aliasPreflight;
@@ -3782,9 +3375,40 @@ function decodeYamlScalar(value) {
 }
 
 // src/orchestration/qmd-result-resolver.ts
-import path7 from "path";
+import path6 from "path";
+var INTERNAL_QMD_ROOTS = /* @__PURE__ */ new Set([
+  ...ALL_CATEGORY_DIRS,
+  "activity",
+  "archive",
+  "artifacts",
+  "cold",
+  "config",
+  "entities",
+  "identity",
+  "meetings",
+  "namespaces",
+  "state",
+  "summaries",
+  "transcripts",
+  "wearables",
+  "work",
+  "workspace"
+]);
+var PRIVATE_RESULT_RESOLUTION_CONCURRENCY = 16;
 function qmdCollectionPathParts(resultPath) {
-  if (!resultPath || path7.isAbsolute(resultPath)) return null;
+  if (!resultPath || path6.isAbsolute(resultPath)) return null;
+  if (resultPath.trim().startsWith("qmd://")) {
+    try {
+      const parsed = new URL(resultPath.trim());
+      if (parsed.protocol !== "qmd:" || !parsed.hostname) return null;
+      const collection2 = parsed.hostname;
+      const relativePath = normalizeQmdResultPath(resultPath, collection2).replace(/\\/g, "/").replace(/^\/+/, "");
+      if (!relativePath) return null;
+      return { collection: collection2, relativePath };
+    } catch {
+      return null;
+    }
+  }
   const normalized = resultPath.replace(/\\/g, "/").replace(/^\/+/, "");
   const slashIndex = normalized.indexOf("/");
   if (slashIndex <= 0 || slashIndex >= normalized.length - 1) return null;
@@ -3797,9 +3421,9 @@ function qmdCollectionPathParts(resultPath) {
 }
 function qmdResultPathCandidates(storageDir, resultPath) {
   const candidates = /* @__PURE__ */ new Set();
-  const storageRoot = path7.resolve(storageDir);
+  const storageRoot = path6.resolve(storageDir);
   const addCandidate = (candidate) => {
-    const resolved = path7.resolve(candidate);
+    const resolved = path6.resolve(candidate);
     if (isPathInsideStorageRoot(storageRoot, resolved)) {
       candidates.add(resolved);
     }
@@ -3807,18 +3431,18 @@ function qmdResultPathCandidates(storageDir, resultPath) {
   const addRelativeCandidates = (relativePath) => {
     const normalized = relativePath.replace(/\\/g, "/").replace(/^\/+/, "");
     if (!normalized) return;
-    addCandidate(path7.join(storageRoot, normalized));
+    addCandidate(path6.join(storageRoot, normalized));
     if (/^\d{4}-\d{2}-\d{2}\//.test(normalized)) {
-      addCandidate(path7.join(storageRoot, "facts", normalized));
+      addCandidate(path6.join(storageRoot, "facts", normalized));
     }
   };
-  if (path7.isAbsolute(resultPath)) {
+  if (path6.isAbsolute(resultPath)) {
     addCandidate(resultPath);
-    const relative2 = path7.relative(storageRoot, path7.resolve(resultPath));
-    if (relative2 && !relative2.startsWith("..") && !path7.isAbsolute(relative2)) {
-      const normalized = relative2.split(path7.sep).join("/");
+    const relative2 = path6.relative(storageRoot, path6.resolve(resultPath));
+    if (relative2 && !relative2.startsWith("..") && !path6.isAbsolute(relative2)) {
+      const normalized = relative2.split(path6.sep).join("/");
       if (/^\d{4}-\d{2}-\d{2}\//.test(normalized)) {
-        addCandidate(path7.join(storageRoot, "facts", normalized));
+        addCandidate(path6.join(storageRoot, "facts", normalized));
       }
     }
   } else {
@@ -3848,12 +3472,13 @@ var QmdResultResolver = class {
     const fallbackStorageDir = storageDirOrNull(fallbackStorage);
     const config = this.getConfig();
     const coldCollection = config.qmdColdCollection ?? "openclaw-engram-cold";
+    const fallbackResultPath = resultPath.trim().startsWith("qmd://") && parts?.collection === config.qmdCollection ? parts.relativePath : resultPath;
     if (parts && parts.collection === coldCollection) {
       const storages = [];
       const seenStorageDirs = /* @__PURE__ */ new Set();
       const addStorage = (storage) => {
         const storageDir = storageDirOrNull(storage);
-        const storageKey = storageDir ? path7.resolve(storageDir) : `storage-without-dir-${storages.length}`;
+        const storageKey = storageDir ? path6.resolve(storageDir) : `storage-without-dir-${storages.length}`;
         if (seenStorageDirs.has(storageKey)) return;
         seenStorageDirs.add(storageKey);
         storages.push(storage);
@@ -3883,11 +3508,8 @@ var QmdResultResolver = class {
           continue;
         }
         try {
-          const coldRoot = path7.join(storageDir, "cold");
-          for (const candidate of qmdResultPathCandidates(
-            coldRoot,
-            parts.relativePath
-          )) {
+          const coldRoot = path6.join(storageDir, "cold");
+          for (const candidate of qmdResultPathCandidates(coldRoot, parts.relativePath)) {
             const memory = await storage.readMemoryByPath(candidate);
             if (memory) return memory;
           }
@@ -3906,10 +3528,7 @@ var QmdResultResolver = class {
     if (parts && collectionNamespace) {
       try {
         const collectionStorage = await this.storageFor(collectionNamespace);
-        for (const candidate of qmdResultPathCandidates(
-          collectionStorage.dir,
-          parts.relativePath
-        )) {
+        for (const candidate of qmdResultPathCandidates(collectionStorage.dir, parts.relativePath)) {
           const memory = await collectionStorage.readMemoryByPath(candidate);
           if (memory) return memory;
         }
@@ -3927,10 +3546,7 @@ var QmdResultResolver = class {
     if (preferredNamespace) {
       try {
         const preferredStorage = await this.storageFor(preferredNamespace);
-        for (const candidate of qmdResultPathCandidates(
-          preferredStorage.dir,
-          resultPath
-        )) {
+        for (const candidate of qmdResultPathCandidates(preferredStorage.dir, fallbackResultPath)) {
           const memory = await preferredStorage.readMemoryByPath(candidate);
           if (memory) return memory;
         }
@@ -3942,54 +3558,77 @@ var QmdResultResolver = class {
           error: err.message
         });
       }
-      if (!path7.isAbsolute(resultPath)) return null;
+      if (!path6.isAbsolute(fallbackResultPath)) return null;
     }
-    if (path7.isAbsolute(resultPath)) {
+    if (path6.isAbsolute(fallbackResultPath)) {
       if (!fallbackStorageDir) {
-        return await fallbackStorage.readMemoryByPath(resultPath);
+        return await fallbackStorage.readMemoryByPath(fallbackResultPath);
       }
       const ownerStorage = await this.storageForAbsoluteQmdResultPath(
-        resultPath,
+        fallbackResultPath,
         fallbackStorage,
         recallNamespaces
       );
       if (!ownerStorage) return null;
-      for (const candidate of qmdResultPathCandidates(
-        ownerStorage.dir,
-        resultPath
-      )) {
+      for (const candidate of qmdResultPathCandidates(ownerStorage.dir, fallbackResultPath)) {
         const memory = await ownerStorage.storage.readMemoryByPath(candidate);
         if (memory) return memory;
       }
       return null;
     }
     if (!fallbackStorageDir) {
-      return await fallbackStorage.readMemoryByPath(resultPath);
+      return await fallbackStorage.readMemoryByPath(fallbackResultPath);
     }
-    for (const candidate of qmdResultPathCandidates(
-      fallbackStorageDir,
-      resultPath
-    )) {
+    for (const candidate of qmdResultPathCandidates(fallbackStorageDir, fallbackResultPath)) {
       const memory = await fallbackStorage.readMemoryByPath(candidate);
       if (memory) return memory;
     }
     return null;
   }
+  async filterPrivateSearchResults(results, fallbackStorage, namespaces = [], preserveUnresolved = false, visibilityCache = /* @__PURE__ */ new Map()) {
+    const namespaceKey = namespaces.join("\0");
+    const entries = results.filter((result) => Boolean(result.path)).map((result) => ({
+      result,
+      cacheKey: `${namespaceKey}\0${preserveUnresolved ? "1" : "0"}\0${result.namespace ?? ""}\0${result.path}`
+    }));
+    const pending = /* @__PURE__ */ new Map();
+    for (const { result, cacheKey } of entries) {
+      if (!visibilityCache.has(cacheKey)) pending.set(cacheKey, result);
+    }
+    const unresolved = [...pending];
+    for (let offset = 0; offset < unresolved.length; offset += PRIVATE_RESULT_RESOLUTION_CONCURRENCY) {
+      await Promise.all(
+        unresolved.slice(offset, offset + PRIVATE_RESULT_RESOLUTION_CONCURRENCY).map(async ([cacheKey, result]) => {
+          visibilityCache.set(
+            cacheKey,
+            await this.isVisibleSearchResult(result, fallbackStorage, namespaces, preserveUnresolved)
+          );
+        })
+      );
+    }
+    return entries.filter(({ cacheKey }) => visibilityCache.get(cacheKey) === true).map(({ result }) => result);
+  }
+  async isVisibleSearchResult(result, fallbackStorage, namespaces, preserveUnresolved) {
+    const parts = qmdCollectionPathParts(result.path);
+    const config = this.getConfig();
+    const collectionIsKnownInternal = parts !== null && INTERNAL_QMD_ROOTS.has(parts.collection);
+    const collectionIsConfigured = parts !== null && (parts.collection === config.qmdCollection || parts.collection === (config.qmdColdCollection ?? "openclaw-engram-cold") || this.qmdCollectionNamespaceFromPrefix(parts.collection) !== null);
+    let memory = await this.readQmdResultMemory(result.path, fallbackStorage, namespaces, result.namespace);
+    if (!memory && parts && !collectionIsKnownInternal && !collectionIsConfigured) {
+      memory = await this.readQmdResultMemory(parts.relativePath, fallbackStorage, namespaces, result.namespace);
+    }
+    const absoluteInsideMemoryRoot = path6.isAbsolute(result.path) && isPathInsideStorageRoot(path6.resolve(config.memoryDir), path6.resolve(result.path));
+    const hasExplicitQmdCollection = result.path.trim().startsWith("qmd://");
+    const unresolvedInternalPath = !memory && (absoluteInsideMemoryRoot || collectionIsKnownInternal && (!preserveUnresolved || hasExplicitQmdCollection) || hasExplicitQmdCollection && collectionIsConfigured);
+    const unresolvedExternalCollection = !memory && (parts !== null && !collectionIsKnownInternal && !collectionIsConfigured || path6.isAbsolute(result.path) && !isPathInsideStorageRoot(path6.resolve(config.memoryDir), path6.resolve(result.path)));
+    return memory !== null && !isSupportPassportPrivateMemory(memory) || !memory && !unresolvedInternalPath && (preserveUnresolved || unresolvedExternalCollection);
+  }
   async resolveColdQmdResultForRecall(result, fallbackStorage, recallNamespaces = []) {
-    const memory = await this.readQmdResultMemory(
-      result.path,
-      fallbackStorage,
-      recallNamespaces,
-      result.namespace
-    );
+    const memory = await this.readQmdResultMemory(result.path, fallbackStorage, recallNamespaces, result.namespace);
     if (!memory) return null;
     let ownerNamespace = null;
-    if (path7.isAbsolute(memory.path)) {
-      const ownerStorage = await this.storageForAbsoluteQmdResultPath(
-        memory.path,
-        fallbackStorage,
-        recallNamespaces
-      );
+    if (path6.isAbsolute(memory.path)) {
+      const ownerStorage = await this.storageForAbsoluteQmdResultPath(memory.path, fallbackStorage, recallNamespaces);
       ownerNamespace = ownerStorage?.namespace ?? null;
       if (!ownerNamespace && resolveNamespaceCapabilities(this.getConfig()).namespaces) return null;
     }
@@ -4008,17 +3647,17 @@ var QmdResultResolver = class {
     };
   }
   async storageForAbsoluteQmdResultPath(resultPath, fallbackStorage, recallNamespaces = []) {
-    const resolvedPath = path7.resolve(resultPath);
+    const resolvedPath = path6.resolve(resultPath);
     const config = this.getConfig();
-    const memoryRoot = path7.resolve(config.memoryDir);
-    const namespacesRoot = path7.join(memoryRoot, "namespaces");
+    const memoryRoot = path6.resolve(config.memoryDir);
+    const namespacesRoot = path6.join(memoryRoot, "namespaces");
     const fallbackStorageDir = storageDirOrNull(fallbackStorage);
     const matches = [];
     const seenDirs = /* @__PURE__ */ new Set();
     const maybeAddStorage = (storage, namespace) => {
       const storageDir = storageDirOrNull(storage);
       if (!storageDir) return;
-      const candidateRoot = path7.resolve(storageDir);
+      const candidateRoot = path6.resolve(storageDir);
       if (seenDirs.has(candidateRoot)) return;
       if (!isPathInsideStorageRoot(candidateRoot, resolvedPath)) return;
       if (candidateRoot === memoryRoot && isPathInsideStorageRoot(namespacesRoot, resolvedPath)) {
@@ -4036,12 +3675,10 @@ var QmdResultResolver = class {
       candidateNamespaces.add(ns);
     }
     if (isPathInsideStorageRoot(namespacesRoot, resolvedPath)) {
-      const relativeToNamespaces = path7.relative(namespacesRoot, resolvedPath);
+      const relativeToNamespaces = path6.relative(namespacesRoot, resolvedPath);
       const [namespaceSegment] = relativeToNamespaces.split(/[\\/]/);
       if (namespaceSegment) {
-        candidateNamespaces.add(
-          namespaceIdentityFromToken(namespaceSegment) ?? namespaceSegment
-        );
+        candidateNamespaces.add(namespaceIdentityFromToken(namespaceSegment) ?? namespaceSegment);
       }
     }
     for (const policy of config.namespacePolicies ?? []) {
@@ -4052,7 +3689,6 @@ var QmdResultResolver = class {
       try {
         maybeAddStorage(await this.storageFor(ns), ns);
       } catch {
-        continue;
       }
     }
     matches.sort((a, b) => b.dir.length - a.dir.length);
@@ -4580,7 +4216,7 @@ function collectSpeakers(tagged) {
 }
 
 // src/wearables/fusion/fuse.ts
-import { createHash as createHash3 } from "crypto";
+import { createHash as createHash2 } from "crypto";
 var FUSION_ID_PREFIX = "fusion";
 var FUSION_ALGO_VERSION = "2026-07-12-1";
 function canonicalInputsKey(date, inputs) {
@@ -4609,7 +4245,7 @@ function canonicalInputsKey(date, inputs) {
       ])
     ])
   ];
-  return createHash3("sha256").update(JSON.stringify(record), "utf-8").digest("hex");
+  return createHash2("sha256").update(JSON.stringify(record), "utf-8").digest("hex");
 }
 function configFingerprint(options, sources) {
   const proximityGapMs = options.proximityGapMs ?? DEFAULT_PROXIMITY_GAP_MS;
@@ -4624,7 +4260,7 @@ function canonicalDayKey(date, inputs, options, algoVersion = FUSION_ALGO_VERSIO
     options,
     inputs.map((conv) => conv.source)
   );
-  return createHash3("sha256").update(inputsKey).update("\n").update(fingerprint).update("\n").update(algoVersion).digest("hex");
+  return createHash2("sha256").update(inputsKey).update("\n").update(fingerprint).update("\n").update(algoVersion).digest("hex");
 }
 function buildProvenance(cluster, proximityGapMs, windowToleranceMs) {
   return {
@@ -4684,11 +4320,11 @@ function fuseDay(date, inputs, options = {}) {
 }
 
 // src/wearables/fusion/store.ts
-import { createHash as createHash4 } from "crypto";
-import * as path8 from "path";
+import { createHash as createHash3 } from "crypto";
+import * as path7 from "path";
 var FUSION_KIND = "wearable-fusion";
 function hashFusionBody(conversations) {
-  return createHash4("sha256").update(JSON.stringify(conversations), "utf-8").digest("hex");
+  return createHash3("sha256").update(JSON.stringify(conversations), "utf-8").digest("hex");
 }
 function composeFusionDayMeta(date, conversations, sources, contentHash, fusedAt) {
   return {
@@ -4872,7 +4508,7 @@ var FusionArtifactStore = class {
         `invalid wearable fusion date '${String(date)}' \u2014 expected YYYY-MM-DD`
       );
     }
-    return path8.join(this.wearablesDir, FUSION_DIR_NAME, `${date}.md`);
+    return path7.join(this.wearablesDir, FUSION_DIR_NAME, `${date}.md`);
   }
   async writeFusedDay(date, serialized) {
     const filePath = this.fusedDayPath(date);
@@ -4909,7 +4545,7 @@ var FusionArtifactStore = class {
   }
   /** List dates with stored fused artifacts, newest first. */
   async listFusedDays() {
-    const fusionDir = path8.join(this.wearablesDir, FUSION_DIR_NAME);
+    const fusionDir = path7.join(this.wearablesDir, FUSION_DIR_NAME);
     await this.assertPathContained(fusionDir);
     let entries;
     try {
@@ -4953,10 +4589,10 @@ var FusionArtifactStore = class {
     try {
       rootReal = await this.io.realpath(this.memoryDir);
     } catch {
-      rootReal = path8.resolve(this.memoryDir);
+      rootReal = path7.resolve(this.memoryDir);
     }
     await this.assertNoEscape(rootReal, this.wearablesDir);
-    await this.assertNoEscape(rootReal, path8.dirname(targetPath));
+    await this.assertNoEscape(rootReal, path7.dirname(targetPath));
     await this.assertNoEscape(rootReal, targetPath);
     await this.assertFusionDirNotSymlinked();
   }
@@ -4970,7 +4606,7 @@ var FusionArtifactStore = class {
    * (a fresh write creates a real directory lexically under the root).
    */
   async assertFusionDirNotSymlinked() {
-    const fusionDir = path8.join(this.wearablesDir, FUSION_DIR_NAME);
+    const fusionDir = path7.join(this.wearablesDir, FUSION_DIR_NAME);
     let stat3;
     try {
       stat3 = await this.io.lstat(fusionDir);
@@ -5105,8 +4741,8 @@ function reconstructFusionInputs(date, dayTranscripts) {
 }
 
 // src/meetings/store.ts
-import { createHash as createHash5 } from "crypto";
-import * as path9 from "path";
+import { createHash as createHash4 } from "crypto";
+import * as path8 from "path";
 var MEETINGS_DIR_NAME = "meetings";
 var MEETING_KIND = "meeting";
 var MEETING_FORMAT_VERSION = 1;
@@ -5136,7 +4772,7 @@ function canonicalContent(base, fused) {
   });
 }
 function composeMeetingRecord(base, fused) {
-  const contentHash = createHash5("sha256").update(canonicalContent(base, fused), "utf-8").digest("hex");
+  const contentHash = createHash4("sha256").update(canonicalContent(base, fused), "utf-8").digest("hex");
   return {
     ...base,
     ...fused,
@@ -5275,7 +4911,7 @@ var MeetingRecordStore = class {
   constructor(memoryDir, io) {
     this.memoryDir = memoryDir;
     this.io = io;
-    this.meetingsDir = path9.join(memoryDir, MEETINGS_DIR_NAME);
+    this.meetingsDir = path8.join(memoryDir, MEETINGS_DIR_NAME);
   }
   memoryDir;
   io;
@@ -5291,7 +4927,7 @@ var MeetingRecordStore = class {
     if (idDate !== date) {
       throw new Error(`meeting id '${id}' does not belong to date '${date}'`);
     }
-    return path9.join(this.meetingsDir, date, `${id}.md`);
+    return path8.join(this.meetingsDir, date, `${id}.md`);
   }
   /** Idempotently persist a record: skip the write when contentHash is unchanged. */
   async saveMeetingRecord(record) {
@@ -5322,7 +4958,7 @@ var MeetingRecordStore = class {
     if (!isValidTranscriptDate(date)) {
       throw new Error(`invalid meeting date '${String(date)}' \u2014 expected YYYY-MM-DD`);
     }
-    const dayDir = path9.join(this.meetingsDir, date);
+    const dayDir = path8.join(this.meetingsDir, date);
     await this.assertPathContained(dayDir);
     let entries;
     try {
@@ -5390,10 +5026,10 @@ var MeetingRecordStore = class {
     try {
       rootReal = await this.io.realpath(this.memoryDir);
     } catch {
-      rootReal = path9.resolve(this.memoryDir);
+      rootReal = path8.resolve(this.memoryDir);
     }
     await this.assertNoEscape(rootReal, this.meetingsDir);
-    await this.assertNoEscape(rootReal, path9.dirname(targetPath));
+    await this.assertNoEscape(rootReal, path8.dirname(targetPath));
     await this.assertNoEscape(rootReal, targetPath);
     await this.assertNotSymlink(this.meetingsDir, "directory");
     const dayDir = this.dayDirWithin(targetPath);
@@ -5403,11 +5039,11 @@ var MeetingRecordStore = class {
   /** The `<meetings>/<date>` directory on the path to `targetPath`, or null when
    *  `targetPath` is the meetings root itself. */
   dayDirWithin(targetPath) {
-    const rel = path9.relative(this.meetingsDir, targetPath);
-    if (rel === "" || rel.startsWith("..") || path9.isAbsolute(rel)) return null;
-    const first = rel.split(path9.sep)[0];
+    const rel = path8.relative(this.meetingsDir, targetPath);
+    if (rel === "" || rel.startsWith("..") || path8.isAbsolute(rel)) return null;
+    const first = rel.split(path8.sep)[0];
     if (first === void 0 || first.length === 0) return null;
-    return path9.join(this.meetingsDir, first);
+    return path8.join(this.meetingsDir, first);
   }
   async assertNotSymlink(target, kind) {
     let stat3;
@@ -5418,7 +5054,7 @@ var MeetingRecordStore = class {
       throw err;
     }
     if (stat3.isSymbolicLink) {
-      const label = path9.relative(this.memoryDir, target) || MEETINGS_DIR_NAME;
+      const label = path8.relative(this.memoryDir, target) || MEETINGS_DIR_NAME;
       throw new Error(
         `meetings ${kind} '${label}' is a symbolic link \u2014 refusing to follow it even when it resolves inside the memory dir (AGENTS.md pattern #3)`
       );
@@ -5442,8 +5078,8 @@ var SORT_STR = (a, b) => a < b ? -1 : a > b ? 1 : 0;
 
 // src/storage/supersession-audit.ts
 import { readdir as readdir5 } from "fs/promises";
-import path10 from "path";
-async function hasSupersessionAudit(lookup, oldMemoryId, newMemoryId, auditBody) {
+import path9 from "path";
+async function hasSupersessionAudit(lookup, oldMemoryId, newMemoryId, auditBody, structuredAttributes) {
   let entries;
   try {
     entries = await readdir5(lookup.correctionsDir, { withFileTypes: true });
@@ -5453,8 +5089,10 @@ async function hasSupersessionAudit(lookup, oldMemoryId, newMemoryId, auditBody)
   }
   for (const entry of entries) {
     if (!entry.isFile() || !entry.name.endsWith(".md")) continue;
-    const memory = await lookup.readMemoryByPath(path10.join(lookup.correctionsDir, entry.name));
-    if (memory?.frontmatter.category === "correction" && (memory.frontmatter.sourceMemoryId === oldMemoryId || memory.frontmatter.sourceMemoryId === void 0 && memory.frontmatter.lineage?.includes(oldMemoryId)) && memory.frontmatter.lineage?.includes(newMemoryId) && memory.content === auditBody) {
+    const memory = await lookup.readMemoryByPath(path9.join(lookup.correctionsDir, entry.name));
+    if (memory?.frontmatter.category === "correction" && (memory.frontmatter.sourceMemoryId === oldMemoryId || memory.frontmatter.sourceMemoryId === void 0 && memory.frontmatter.lineage?.includes(oldMemoryId)) && memory.frontmatter.lineage?.includes(newMemoryId) && stripAttributesSuffix(memory.content) === auditBody && (structuredAttributes === void 0 || Object.entries(structuredAttributes).every(
+      ([key, value]) => memory.frontmatter.structuredAttributes?.[key] === value
+    ))) {
       return true;
     }
   }
@@ -5502,7 +5140,7 @@ async function runSupersessionSideEffects(options) {
         if (!exists) await options.appendTombstone(exactInput);
       }
     }
-    const auditBody = `Superseded: ${currentBefore.content}
+    const auditBody = `Superseded: ${options.audit?.content ?? currentBefore.content}
 
 Reason: ${reason}`;
     const auditExists = await hasSupersessionAudit(
@@ -5512,7 +5150,8 @@ Reason: ${reason}`;
       },
       oldMemoryId,
       newMemoryId,
-      auditBody
+      auditBody,
+      options.audit?.structuredAttributes
     );
     if (!auditExists) {
       const auditEnvelope = composeMemoryEnvelope(
@@ -5520,11 +5159,13 @@ Reason: ${reason}`;
           content: auditBody,
           category: "correction",
           confidence: 1,
-          tags: ["supersession", "auto-resolved"]
+          tags: options.audit?.tags ?? ["supersession", "auto-resolved"],
+          structuredAttributes: options.audit?.structuredAttributes
         },
-        { source: "contradiction-detection" }
+        { source: options.audit?.source ?? "contradiction-detection" }
       );
       await options.writeSealedMemory(auditEnvelope, {
+        actor: options.actor,
         lineage: [oldMemoryId, newMemoryId],
         sourceMemoryId: oldMemoryId
       });
@@ -5538,7 +5179,7 @@ Reason: ${reason}`;
 }
 
 // src/storage/entity-timeline.ts
-import { createHash as createHash6 } from "crypto";
+import { createHash as createHash5 } from "crypto";
 function parseEntityTimelineBullet(bullet, fallbackTimestamp) {
   const trimmed = bullet.trim();
   if (!trimmed) return null;
@@ -5910,7 +5551,7 @@ function fingerprintEntityStructuredFacts(entity) {
     (left, right) => left.key.localeCompare(right.key) || left.title.localeCompare(right.title) || left.facts.join("\n").localeCompare(right.facts.join("\n"))
   );
   if (normalizedSections.length === 0) return void 0;
-  return createHash6("sha256").update(JSON.stringify(normalizedSections)).digest("hex");
+  return createHash5("sha256").update(JSON.stringify(normalizedSections)).digest("hex");
 }
 function isEntitySynthesisStale(entity) {
   const structuredFactCount = countEntityStructuredFacts(entity);
@@ -6457,17 +6098,17 @@ function inferEntityTypeFromContent(content) {
 }
 var KNOWN_ENTITY_FILENAME_PREFIXES = /* @__PURE__ */ new Set(["company", "other", "person", "place", "project", "tool", "topic"]);
 function inferEntityTypeFromFilename(pathRel) {
-  const basename = path11.basename(pathRel, ".md").toLowerCase();
+  const basename = path10.basename(pathRel, ".md").toLowerCase();
   const separator = basename.indexOf("-");
   if (separator <= 0) return void 0;
   const candidate = basename.slice(0, separator);
   return KNOWN_ENTITY_FILENAME_PREFIXES.has(candidate) ? candidate : void 0;
 }
 function normalizeFrontmatterForPath(frontmatter, pathRel, content = "") {
-  const normalizedPath = pathRel.split(path11.sep).join("/");
+  const normalizedPath = pathRel.split(path10.sep).join("/");
   let normalizedFrontmatter = frontmatter;
   if (normalizedPath === "entities" || normalizedPath.startsWith("entities/") || normalizedPath.includes("/entities/")) {
-    const basename = path11.basename(pathRel, ".md");
+    const basename = path10.basename(pathRel, ".md");
     const inferredType = inferEntityTypeFromContent(content) || inferEntityTypeFromFilename(pathRel) || "entity";
     const existingTags = Array.isArray(frontmatter.tags) ? frontmatter.tags : [];
     normalizedFrontmatter = {
@@ -6934,9 +6575,9 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
     this.entitySchemas = entitySchemas;
     this.deletionRevisionStore = new DeletionRevisionStore({
       baseDir,
-      deletionRevisionMetadataPath: path11.join(baseDir, ".offline-sync", "deletion-revisions.v1.json"),
-      invalidationCommitMetadataPath: path11.join(baseDir, ".offline-sync", "invalidation-commits.v1.json"),
-      deletionRevisionLockPath: path11.join(baseDir, ".offline-sync", "deletion-revisions.v1.json.lock"),
+      deletionRevisionMetadataPath: path10.join(baseDir, ".offline-sync", "deletion-revisions.v1.json"),
+      invalidationCommitMetadataPath: path10.join(baseDir, ".offline-sync", "invalidation-commits.v1.json"),
+      deletionRevisionLockPath: path10.join(baseDir, ".offline-sync", "deletion-revisions.v1.json.lock"),
       assertManagedStoragePath: (filePath, method) => this.assertManagedStoragePath(filePath, method)
     });
     this.hotMemoriesCacheEnabled = hotMemoriesCacheEnabledOverride ?? _StorageManager.hotMemoriesCacheDefaultByDir.get(baseDir) ?? _StorageManager.hotMemoriesCacheDefault;
@@ -7124,8 +6765,8 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
   }
   /** Whether `filePath` resolves to `stateDir` itself or a path contained in it. */
   isStateFilePath(filePath) {
-    const rel = path11.relative(this.stateDir, path11.resolve(filePath));
-    return rel === "" || !rel.startsWith("..") && !path11.isAbsolute(rel);
+    const rel = path10.relative(this.stateDir, path10.resolve(filePath));
+    return rel === "" || !rel.startsWith("..") && !path10.isAbsolute(rel);
   }
   // ── Tombstone store (issue #1579) ───────────────────────────────────────
   // Instance-scoped (rule 11) + namespace-scoped (rule 42) tombstone index.
@@ -7240,8 +6881,8 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
    * /srv/cold/remnic), skipping the patch and stranding a stale hot entry.
    */
   isColdOrArchiveTierPath(p) {
-    const rel = path11.relative(this.baseDir, p);
-    return rel === "cold" || rel === "archive" || rel.startsWith(`cold${path11.sep}`) || rel.startsWith(`archive${path11.sep}`);
+    const rel = path10.relative(this.baseDir, p);
+    return rel === "cold" || rel === "archive" || rel.startsWith(`cold${path10.sep}`) || rel.startsWith(`archive${path10.sep}`);
   }
   /**
    * Mark the secure-store as required for this storage instance.
@@ -7328,7 +6969,7 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
         void 0,
         this.baseDir
       );
-      const rel = path11.relative(this.baseDir, filePath).split(path11.sep).join("/");
+      const rel = path10.relative(this.baseDir, filePath).split(path10.sep).join("/");
       return `${rel}:${version.versionId}`;
     } catch (err) {
       log.warn(
@@ -7408,12 +7049,12 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
   }
   identityFilePath(workspaceDir, namespace) {
     const rawNamespace = typeof namespace === "string" ? namespace.trim() : "";
-    if (!rawNamespace) return path11.join(workspaceDir, "IDENTITY.md");
+    if (!rawNamespace) return path10.join(workspaceDir, "IDENTITY.md");
     const safeNamespace = rawNamespace.replace(/[^a-zA-Z0-9._-]/g, "-");
-    return path11.join(workspaceDir, `IDENTITY.${safeNamespace}.md`);
+    return path10.join(workspaceDir, `IDENTITY.${safeNamespace}.md`);
   }
   versionFilePath(kind) {
-    return path11.join(this.stateDir, `.${kind}-version.log`);
+    return path10.join(this.stateDir, `.${kind}-version.log`);
   }
   bumpSharedVersion(kind, fallbackMap) {
     const filePath = this.versionFilePath(kind);
@@ -7517,7 +7158,7 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
   // memories.
   // -------------------------------------------------------------------------
   get wearablesDir() {
-    return path11.join(this.baseDir, WEARABLES_DIR_NAME);
+    return path10.join(this.baseDir, WEARABLES_DIR_NAME);
   }
   /**
    * Resolve the on-disk path for a source/day transcript. Throws on
@@ -7533,7 +7174,7 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
     if (!isValidTranscriptDate(date)) {
       throw new Error(`invalid wearable transcript date '${String(date)}' \u2014 expected YYYY-MM-DD`);
     }
-    return path11.join(this.wearablesDir, sourceId, `${date}.md`);
+    return path10.join(this.wearablesDir, sourceId, `${date}.md`);
   }
   async writeWearableDayTranscript(sourceId, date, serialized) {
     const targetPath = this.wearableTranscriptPath(sourceId, date);
@@ -7560,9 +7201,9 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
       writeFile: (p, c) => this.writeStorageSecureFile(p, c),
       readFile: (p) => readMaybeEncryptedFile(p, this._secureStoreKey, this.baseDir),
       readDir: (d) => readdir6(d),
-      deleteFile: (p) => unlink5(p),
+      deleteFile: (p) => unlink4(p),
       realpath: (p) => realpath3(p),
-      lstat: (p) => lstat4(p).then((st) => ({ isSymbolicLink: st.isSymbolicLink() }))
+      lstat: (p) => lstat3(p).then((st) => ({ isSymbolicLink: st.isSymbolicLink() }))
     });
   }
   _meetingRecordStore;
@@ -7578,9 +7219,9 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
       writeFile: (p, c) => this.writeStorageSecureFile(p, c),
       readFile: (p) => readMaybeEncryptedFile(p, this._secureStoreKey, this.baseDir),
       readDir: (d) => readdir6(d),
-      deleteFile: (p) => unlink5(p),
+      deleteFile: (p) => unlink4(p),
       realpath: (p) => realpath3(p),
-      lstat: (p) => lstat4(p).then((st) => ({ isSymbolicLink: st.isSymbolicLink() }))
+      lstat: (p) => lstat3(p).then((st) => ({ isSymbolicLink: st.isSymbolicLink() }))
     });
   }
   /**
@@ -7649,25 +7290,25 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
     });
   }
   get factsDir() {
-    return path11.join(this.baseDir, "facts");
+    return path10.join(this.baseDir, "facts");
   }
   get correctionsDir() {
-    return path11.join(this.baseDir, "corrections");
+    return path10.join(this.baseDir, "corrections");
   }
   get proceduresDir() {
-    return path11.join(this.baseDir, "procedures");
+    return path10.join(this.baseDir, "procedures");
   }
   get reasoningTracesDir() {
-    return path11.join(this.baseDir, "reasoning-traces");
+    return path10.join(this.baseDir, "reasoning-traces");
   }
   get entitiesDir() {
-    return path11.join(this.baseDir, "entities");
+    return path10.join(this.baseDir, "entities");
   }
   resolveEntityFilePath(name) {
     if (typeof name !== "string") return null;
-    const filePath = path11.resolve(this.entitiesDir, `${name}.md`);
-    const relative2 = path11.relative(this.entitiesDir, filePath);
-    if (relative2 === "" || relative2.startsWith("..") || path11.isAbsolute(relative2)) {
+    const filePath = path10.resolve(this.entitiesDir, `${name}.md`);
+    const relative2 = path10.relative(this.entitiesDir, filePath);
+    if (relative2 === "" || relative2.startsWith("..") || path10.isAbsolute(relative2)) {
       return null;
     }
     return filePath;
@@ -7678,7 +7319,7 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
   async readDependencyPropagationQueueFile(filePath) {
     const target = await resolveSafeStoragePath(
       this.baseDir,
-      path11.relative(
+      path10.relative(
         this.baseDir,
         this.assertManagedStoragePath(filePath, "storage.readDependencyPropagationQueueFile")
       )
@@ -7688,7 +7329,7 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
   async writeDependencyPropagationQueueFile(filePath, content) {
     const target = await resolveSafeStoragePath(
       this.baseDir,
-      path11.relative(
+      path10.relative(
         this.baseDir,
         this.assertManagedStoragePath(filePath, "storage.writeDependencyPropagationQueueFile")
       )
@@ -7702,10 +7343,10 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
     });
   }
   assertManagedStoragePath(filePath, method) {
-    const resolved = path11.resolve(filePath);
-    const base = path11.resolve(this.baseDir);
-    const rel = path11.relative(base, resolved);
-    if (rel === "" || rel === ".." || rel.startsWith(`..${path11.sep}`) || path11.isAbsolute(rel)) {
+    const resolved = path10.resolve(filePath);
+    const base = path10.resolve(this.baseDir);
+    const rel = path10.relative(base, resolved);
+    if (rel === "" || rel === ".." || rel.startsWith(`..${path10.sep}`) || path10.isAbsolute(rel)) {
       throw new Error(`${method}: file path escapes memory dir`);
     }
     return resolved;
@@ -7738,7 +7379,7 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
   async digestOfflineSyncFile(filePath) {
     const target = this.assertManagedStoragePath(filePath, "storage.digestOfflineSyncFile");
     const st = await stat2(target);
-    const relPath = path11.relative(this.baseDir, target).split(path11.sep).join("/");
+    const relPath = path10.relative(this.baseDir, target).split(path10.sep).join("/");
     const cache = await this.loadOfflineSyncDigestCache();
     const cached = cache.get(relPath);
     if (cached && cached.statBytes === st.size && cached.mtimeMs === st.mtimeMs && cached.ctimeMs === st.ctimeMs && !cached.encrypted) {
@@ -7752,11 +7393,11 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
     if (encrypted) {
       const content = await readMaybeEncryptedFileBuffer(target, this._secureStoreKey, this.baseDir);
       digest = {
-        sha256: createHash7("sha256").update(content).digest("hex"),
+        sha256: createHash6("sha256").update(content).digest("hex"),
         bytes: content.byteLength
       };
     } else {
-      const hash = createHash7("sha256");
+      const hash = createHash6("sha256");
       let bytes = 0;
       for await (const rawChunk of createReadStream(target)) {
         const chunk = Buffer.isBuffer(rawChunk) ? rawChunk : Buffer.from(rawChunk);
@@ -7784,7 +7425,7 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
   async readOfflineSyncDigestCache() {
     const cache = /* @__PURE__ */ new Map();
     try {
-      const raw = await readFile3(this.offlineSyncDigestCachePath, "utf-8");
+      const raw = await readFile2(this.offlineSyncDigestCachePath, "utf-8");
       const parsed = JSON.parse(raw);
       if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return cache;
       const entries = parsed.entries;
@@ -7799,7 +7440,7 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
         const bytes = typeof record.bytes === "number" ? record.bytes : NaN;
         const sha256 = typeof record.sha256 === "string" ? record.sha256 : "";
         const encrypted = record.encrypted === true;
-        if (cachePath.length === 0 || cachePath === ".." || cachePath.startsWith("../") || path11.isAbsolute(cachePath) || !Number.isFinite(statBytes) || !Number.isFinite(mtimeMs) || !Number.isFinite(ctimeMs) || !Number.isFinite(bytes) || !/^[a-f0-9]{64}$/i.test(sha256)) {
+        if (cachePath.length === 0 || cachePath === ".." || cachePath.startsWith("../") || path10.isAbsolute(cachePath) || !Number.isFinite(statBytes) || !Number.isFinite(mtimeMs) || !Number.isFinite(ctimeMs) || !Number.isFinite(bytes) || !/^[a-f0-9]{64}$/i.test(sha256)) {
           continue;
         }
         cache.set(cachePath, { statBytes, mtimeMs, ctimeMs, encrypted, sha256, bytes });
@@ -7841,7 +7482,7 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
       const cache = this.offlineSyncDigestCache;
       if (!cache) return;
       const entries = [...cache.entries()].sort(([a], [b]) => a.localeCompare(b)).map(([entryPath, entry]) => ({ path: entryPath, ...entry }));
-      await mkdir2(path11.dirname(this.offlineSyncDigestCachePath), { recursive: true });
+      await mkdir(path10.dirname(this.offlineSyncDigestCachePath), { recursive: true });
       await writeFile2(this.offlineSyncDigestCachePath, `${JSON.stringify({ version: 1, entries })}
 `, "utf-8");
     }).catch((err) => {
@@ -7851,7 +7492,7 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
     });
   }
   async offlineSyncFileIsEncrypted(filePath) {
-    const handle = await open2(filePath, "r");
+    const handle = await open(filePath, "r");
     try {
       const header = Buffer.alloc(MAGIC_HEADER_SIZE);
       const { bytesRead } = await handle.read(header, 0, header.length, 0);
@@ -7910,7 +7551,7 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
     }
     let handle;
     try {
-      handle = await open2(filePath, "r");
+      handle = await open(filePath, "r");
     } catch (err) {
       if (isErrnoCode(err, "ENOENT")) return false;
       throw err;
@@ -7930,7 +7571,7 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
   }
   async appendStorageSecureFileUnlocked(filePath, content) {
     const writeKey = this.resolveWriteKey();
-    await mkdir2(path11.dirname(filePath), { recursive: true });
+    await mkdir(path10.dirname(filePath), { recursive: true });
     if (writeKey === null) {
       try {
         if (await this.isEncryptedFileHeader(filePath)) {
@@ -7956,13 +7597,13 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
     this.notifyCatalogWriteForPath(filePath);
   }
   get stateDir() {
-    return path11.join(this.baseDir, "state");
+    return path10.join(this.baseDir, "state");
   }
   get offlineSyncDigestCachePath() {
-    return path11.join(this.baseDir, ".offline-sync", "digest-cache.v1.json");
+    return path10.join(this.baseDir, ".offline-sync", "digest-cache.v1.json");
   }
   get entitySynthesisQueuePath() {
-    return path11.join(this.stateDir, "entity-synthesis-queue.json");
+    return path10.join(this.stateDir, "entity-synthesis-queue.json");
   }
   // ── Tombstone store access (issue #1579) ─────────────────────────────────
   /**
@@ -7972,7 +7613,7 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
    * helpers are injected into the store).
    */
   get tombstonesPath() {
-    return path11.join(this.stateDir, "tombstones.jsonl");
+    return path10.join(this.stateDir, "tombstones.jsonl");
   }
   /**
    * Configure the tombstone invariant for this storage instance. Installed
@@ -8002,7 +7643,7 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
         const requested = new Set(sourceMemoryIds);
         const sourcePaths = await (sourcePathsPromise ??= this.memoryReadStore.collectTombstoneMigrationPaths());
         const directPaths = sourcePaths.filter(
-          (filePath) => requested.has(path11.basename(filePath, ".md"))
+          (filePath) => requested.has(path10.basename(filePath, ".md"))
         );
         const contents = /* @__PURE__ */ new Map();
         for (const memory of await this.readParsedMemoriesFromPaths(directPaths, 50)) {
@@ -8296,55 +7937,55 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
     return legacyMatches.length > 0 ? [...new Set(legacyMatches.map((content) => ContentHashIndex.computeHash(content)))] : [persistedHash];
   }
   get questionsDir() {
-    return path11.join(this.baseDir, "questions");
+    return path10.join(this.baseDir, "questions");
   }
   get artifactsDir() {
-    return path11.join(this.baseDir, "artifacts");
+    return path10.join(this.baseDir, "artifacts");
   }
   get identityDir() {
-    return path11.join(this.baseDir, "identity");
+    return path10.join(this.baseDir, "identity");
   }
   get identityAnchorPath() {
-    return path11.join(this.identityDir, "identity-anchor.md");
+    return path10.join(this.identityDir, "identity-anchor.md");
   }
   get identityIncidentsDir() {
-    return path11.join(this.identityDir, "incidents");
+    return path10.join(this.identityDir, "incidents");
   }
   get identityAuditsWeeklyDir() {
-    return path11.join(this.identityDir, "audits", "weekly");
+    return path10.join(this.identityDir, "audits", "weekly");
   }
   get identityAuditsMonthlyDir() {
-    return path11.join(this.identityDir, "audits", "monthly");
+    return path10.join(this.identityDir, "audits", "monthly");
   }
   get identityImprovementLoopsPath() {
-    return path11.join(this.identityDir, "improvement-loops.md");
+    return path10.join(this.identityDir, "improvement-loops.md");
   }
   get identityReflectionsPath() {
-    return path11.join(this.identityDir, "reflections.md");
+    return path10.join(this.identityDir, "reflections.md");
   }
   get profilePath() {
-    return path11.join(this.baseDir, "profile.md");
+    return path10.join(this.baseDir, "profile.md");
   }
   get memoryActionsPath() {
-    return path11.join(this.stateDir, "memory-actions.jsonl");
+    return path10.join(this.stateDir, "memory-actions.jsonl");
   }
   get memoryLifecycleLedgerPath() {
-    return path11.join(this.stateDir, "memory-lifecycle-ledger.jsonl");
+    return path10.join(this.stateDir, "memory-lifecycle-ledger.jsonl");
   }
   get compressionGuidelinesPath() {
-    return path11.join(this.stateDir, "compression-guidelines.md");
+    return path10.join(this.stateDir, "compression-guidelines.md");
   }
   get compressionGuidelineDraftPath() {
-    return path11.join(this.stateDir, "compression-guidelines.draft.md");
+    return path10.join(this.stateDir, "compression-guidelines.draft.md");
   }
   get compressionGuidelineStatePath() {
-    return path11.join(this.stateDir, "compression-guideline-state.json");
+    return path10.join(this.stateDir, "compression-guideline-state.json");
   }
   get compressionGuidelineDraftStatePath() {
-    return path11.join(this.stateDir, "compression-guideline-draft-state.json");
+    return path10.join(this.stateDir, "compression-guideline-draft-state.json");
   }
   get behaviorSignalsPath() {
-    return path11.join(this.stateDir, "behavior-signals.jsonl");
+    return path10.join(this.stateDir, "behavior-signals.jsonl");
   }
   /**
    * In-memory dedup key set for behavior-signals appends (issue #1909),
@@ -8376,7 +8017,7 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
    * governance sweeps can treat it uniformly.
    */
   get bufferSurpriseLedgerPath() {
-    return path11.join(this.stateDir, "buffer-surprise-ledger.jsonl");
+    return path10.join(this.stateDir, "buffer-surprise-ledger.jsonl");
   }
   /**
    * Entity alias table loaded from THIS store's config/aliases.json.
@@ -8437,7 +8078,7 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
     this.loadAliasesSync();
   }
   loadAliasesSync() {
-    const aliasPath = path11.join(this.baseDir, "config", "aliases.json");
+    const aliasPath = path10.join(this.baseDir, "config", "aliases.json");
     this.userAliases = {};
     const raw = readEntityAliasConfigSync(this.baseDir);
     if (raw === void 0) return;
@@ -8472,22 +8113,22 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
     return completionFingerprint;
   }
   async ensureDirectories() {
-    await mkdir2(this.baseDir, { recursive: true });
+    await mkdir(this.baseDir, { recursive: true });
     await validateRoots(this.baseDir, this.entitiesDir, this.stateDir, this.archiveDir);
     const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-    await mkdir2(path11.join(this.factsDir, today), { recursive: true });
-    await mkdir2(path11.join(this.proceduresDir, today), { recursive: true });
-    await mkdir2(path11.join(this.reasoningTracesDir, today), { recursive: true });
-    await mkdir2(this.correctionsDir, { recursive: true });
-    await mkdir2(this.entitiesDir, { recursive: true });
-    await mkdir2(this.stateDir, { recursive: true });
-    await mkdir2(this.questionsDir, { recursive: true });
-    await mkdir2(this.artifactsDir, { recursive: true });
-    await mkdir2(this.identityDir, { recursive: true });
-    await mkdir2(this.identityIncidentsDir, { recursive: true });
-    await mkdir2(this.identityAuditsWeeklyDir, { recursive: true });
-    await mkdir2(this.identityAuditsMonthlyDir, { recursive: true });
-    await mkdir2(path11.join(this.baseDir, "config"), { recursive: true });
+    await mkdir(path10.join(this.factsDir, today), { recursive: true });
+    await mkdir(path10.join(this.proceduresDir, today), { recursive: true });
+    await mkdir(path10.join(this.reasoningTracesDir, today), { recursive: true });
+    await mkdir(this.correctionsDir, { recursive: true });
+    await mkdir(this.entitiesDir, { recursive: true });
+    await mkdir(this.stateDir, { recursive: true });
+    await mkdir(this.questionsDir, { recursive: true });
+    await mkdir(this.artifactsDir, { recursive: true });
+    await mkdir(this.identityDir, { recursive: true });
+    await mkdir(this.identityIncidentsDir, { recursive: true });
+    await mkdir(this.identityAuditsWeeklyDir, { recursive: true });
+    await mkdir(this.identityAuditsMonthlyDir, { recursive: true });
+    await mkdir(path10.join(this.baseDir, "config"), { recursive: true });
     await this.entityCanonicalIdMigration.ensure();
     if (this.hotMemoriesCacheEnabled && this.getMemoryCorpusVersion() === 0) {
       this.bumpMemoryCorpusVersion();
@@ -8508,12 +8149,12 @@ var StorageManager3 = class _StorageManager extends TombstoneBlockedCaptureIndex
    */
   async resolveCategoryWritePath(category, id, today) {
     if (category === "correction") {
-      await mkdir2(this.correctionsDir, { recursive: true });
-      return path11.join(this.correctionsDir, `${id}.md`);
+      await mkdir(this.correctionsDir, { recursive: true });
+      return path10.join(this.correctionsDir, `${id}.md`);
     }
-    const datedDir = path11.join(getCategoryDir(this.baseDir, category), today);
-    await mkdir2(datedDir, { recursive: true });
-    return path11.join(datedDir, `${id}.md`);
+    const datedDir = path10.join(getCategoryDir(this.baseDir, category), today);
+    await mkdir(datedDir, { recursive: true });
+    return path10.join(datedDir, `${id}.md`);
   }
   async findExistingTombstoneBlockedMemory(content, category, sourceConnector) {
     const identity = buildExplicitCaptureDedupKey(content, category, sourceConnector);
@@ -8675,7 +8316,7 @@ ${sanitized.text}
             }
           });
         } catch (err) {
-          await unlink5(filePath).catch(() => void 0);
+          await unlink4(filePath).catch(() => void 0);
           this.invalidateAllMemoriesCache();
           await this.rebuildTombstoneBlockedCaptureAfterInvalidationForPath(filePath);
           throw err;
@@ -8693,7 +8334,8 @@ ${sanitized.text}
         id: duplicateBlocked.frontmatter.id,
         tombstoneBlocked: true,
         blockedBy: duplicateBlocked.frontmatter.blockedBy,
-        duplicateOf: duplicateBlocked.frontmatter.id
+        duplicateOf: duplicateBlocked.frontmatter.id,
+        memory: duplicateBlocked
       };
     }
     await this.patchHotMemoriesCache({ addedPath: filePath }, "memory-create");
@@ -8724,7 +8366,7 @@ ${sanitized.text}
       }
     }
     log.debug(`wrote memory ${id} to ${filePath}`);
-    return { id, tombstoneBlocked: tombstoneBlocked2, ...fm.blockedBy ? { blockedBy: fm.blockedBy } : {} };
+    return { id, tombstoneBlocked: tombstoneBlocked2, ...fm.blockedBy ? { blockedBy: fm.blockedBy } : {}, memory: { path: filePath, frontmatter: fm, content: sanitized.text } };
   }
   /**
    * Sealed-envelope write entry point (issue #1989 PR2).
@@ -8877,8 +8519,8 @@ ${sanitized.text}
     await this.ensureDirectories();
     const now = /* @__PURE__ */ new Date();
     const day = now.toISOString().slice(0, 10);
-    const dir = path11.join(this.artifactsDir, day);
-    await mkdir2(dir, { recursive: true });
+    const dir = path10.join(this.artifactsDir, day);
+    await mkdir(dir, { recursive: true });
     const id = `artifact-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`;
     const fm = {
       id,
@@ -8903,7 +8545,7 @@ ${sanitized.text}
       log.warn(`artifact content rejected for ${id}; violations=${sanitized.violations.join(", ")}`);
       return "";
     }
-    const filePath = path11.join(dir, `${id}.md`);
+    const filePath = path10.join(dir, `${id}.md`);
     await this.writeStorageSecureFile(filePath, `${serializeFrontmatter(fm)}
 
 ${sanitized.text}
@@ -9191,7 +8833,7 @@ ${sanitized.text}
    * per-process in-memory cache safe across process boundaries.
    */
   invalidateColdMemoriesCache() {
-    const coldRoot = path11.join(this.baseDir, "cold");
+    const coldRoot = path10.join(this.baseDir, "cold");
     _StorageManager.coldMemoriesCache.delete(coldRoot);
     this.bumpColdWriteVersion();
     invalidateAllForDir(this.baseDir);
@@ -9311,7 +8953,7 @@ ${sanitized.text}
     const correctionPaths = [];
     const factPaths = [];
     for (const filePath of filePaths) {
-      if (filePath === this.correctionsDir || filePath.startsWith(`${this.correctionsDir}${path11.sep}`)) {
+      if (filePath === this.correctionsDir || filePath.startsWith(`${this.correctionsDir}${path10.sep}`)) {
         correctionPaths.push(filePath);
       } else {
         factPaths.push(filePath);
@@ -9374,7 +9016,7 @@ ${sanitized.text}
       try {
         const entries = await readdir6(dir, { withFileTypes: true });
         for (const entry of entries) {
-          const fullPath = path11.join(dir, entry.name);
+          const fullPath = path10.join(dir, entry.name);
           if (entry.isDirectory()) {
             await readDir(fullPath);
           } else if (entry.name.endsWith(".md")) {
@@ -9417,7 +9059,7 @@ ${sanitized.text}
     return this.rememberMemorySnapshot(await this.memoryReadStore.readMemoryByPath(filePath));
   }
   resolveTierRootDir(tier) {
-    return tier === "cold" ? path11.join(this.baseDir, "cold") : this.baseDir;
+    return tier === "cold" ? path10.join(this.baseDir, "cold") : this.baseDir;
   }
   resolveMemoryDateDir(memory) {
     const preferred = memory.frontmatter.created || memory.frontmatter.updated;
@@ -9432,13 +9074,13 @@ ${sanitized.text}
   buildTierMemoryPath(memory, tier) {
     const root = this.resolveTierRootDir(tier);
     if (this.isArtifactMemory(memory)) {
-      return path11.join(root, "artifacts", this.resolveMemoryDateDir(memory), `${memory.frontmatter.id}.md`);
+      return path10.join(root, "artifacts", this.resolveMemoryDateDir(memory), `${memory.frontmatter.id}.md`);
     }
     if (memory.frontmatter.category === "correction") {
-      return path11.join(root, "corrections", `${memory.frontmatter.id}.md`);
+      return path10.join(root, "corrections", `${memory.frontmatter.id}.md`);
     }
     const dir = categoryDirName(memory.frontmatter.category);
-    return path11.join(root, dir, this.resolveMemoryDateDir(memory), `${memory.frontmatter.id}.md`);
+    return path10.join(root, dir, this.resolveMemoryDateDir(memory), `${memory.frontmatter.id}.md`);
   }
   async writeMemoryFileAtomic(targetPath, memory) {
     const refIdsAtWrite = this.currentHistoricalIds();
@@ -9454,7 +9096,7 @@ ${memory.content}
       {},
       this.baseDir
     );
-    const priorDest = await readFile3(targetPath).catch(() => null);
+    const priorDest = await readFile2(targetPath).catch(() => null);
     await persist();
     if (typeof rawRef === "string") {
       const refBeforeRepair = frontmatter.entityRef;
@@ -9469,7 +9111,7 @@ ${memory.content}
         });
       } catch (err) {
         if (priorDest === null) {
-          await unlink5(targetPath).catch(() => void 0);
+          await unlink4(targetPath).catch(() => void 0);
         } else {
           await writeFile2(targetPath, priorDest).catch(() => void 0);
         }
@@ -9516,8 +9158,8 @@ ${memory.content}
               memory.frontmatter.entityRef = current.frontmatter.entityRef;
             }
             durable = true;
-            const sourcePath = path11.resolve(current.path);
-            const destPath = path11.resolve(targetPath);
+            const sourcePath = path10.resolve(current.path);
+            const destPath = path10.resolve(targetPath);
             if (sourcePath !== destPath) {
               await recordArchiveDelete2(this.baseDir, current.path, () => this.deleteManagedStorageFile(current.path));
               this.invalidateAllMemoriesCache();
@@ -9541,8 +9183,8 @@ ${memory.content}
   }
   async migrateMemoryToTier(memory, targetTier) {
     const targetPath = this.buildTierMemoryPath(memory, targetTier);
-    const sourcePath = path11.resolve(memory.path);
-    const destPath = path11.resolve(targetPath);
+    const sourcePath = path10.resolve(memory.path);
+    const destPath = path10.resolve(targetPath);
     if (sourcePath === destPath) {
       return { changed: false, targetPath };
     }
@@ -9552,7 +9194,7 @@ ${memory.content}
     return { changed, targetPath };
   }
   get archiveDir() {
-    return path11.join(this.baseDir, "archive");
+    return path10.join(this.baseDir, "archive");
   }
   /**
    * Archive a memory by moving it from facts/ to archive/YYYY-MM-DD/.
@@ -9565,8 +9207,8 @@ ${memory.content}
       try {
         const now = lifecycle?.at ?? /* @__PURE__ */ new Date();
         const today = now.toISOString().slice(0, 10);
-        const destDir = path11.join(this.archiveDir, today);
-        await mkdir2(destDir, { recursive: true });
+        const destDir = path10.join(this.archiveDir, today);
+        await mkdir(destDir, { recursive: true });
         const refIdsAtWrite = this.currentHistoricalIds();
         const updatedFm = canonicalizeEntityRefOption(
           {
@@ -9581,7 +9223,7 @@ ${memory.content}
 
 ${current.content}
 `;
-        const destPath = path11.join(destDir, path11.basename(current.path));
+        const destPath = path10.join(destDir, path10.basename(current.path));
         const priorDest = await this.readStorageSecureFile(destPath).catch(() => null);
         await recordArchiveWrite(this.baseDir, destPath, () => this.writeStorageSecureFile(destPath, fileContent));
         if (typeof current.frontmatter.entityRef === "string") {
@@ -9598,7 +9240,7 @@ ${current.content}
               await recordArchiveDelete2(
                 this.baseDir,
                 destPath,
-                () => unlink5(destPath).then(
+                () => unlink4(destPath).then(
                   () => true,
                   () => false
                 )
@@ -9814,7 +9456,7 @@ ${memory.content}
 `;
     await this.writeTombstoneBlockedFrontmatter(memory, fileContent, updated, async () => {
       this.invalidateAllMemoriesCache();
-      if (memory.path.includes(`${path11.sep}cold${path11.sep}`)) {
+      if (memory.path.includes(`${path10.sep}cold${path10.sep}`)) {
         this.invalidateColdMemoriesCache();
       }
     });
@@ -9825,7 +9467,7 @@ ${memory.content}
       });
     }
     await this.patchHotMemoriesCache({ addedPath: memory.path });
-    if (memory.path.includes(`${path11.sep}cold${path11.sep}`)) {
+    if (memory.path.includes(`${path10.sep}cold${path10.sep}`)) {
       this.invalidateColdMemoriesCache();
     }
     try {
@@ -9906,7 +9548,7 @@ ${memory.content}
     return deleted;
   }
   async loadBuffer() {
-    const bufferPath = path11.join(this.stateDir, "buffer.json");
+    const bufferPath = path10.join(this.stateDir, "buffer.json");
     try {
       const raw = await this.readStorageSecureFile(bufferPath);
       return JSON.parse(raw);
@@ -9918,11 +9560,11 @@ ${memory.content}
   }
   async saveBuffer(state) {
     await this.ensureDirectories();
-    const bufferPath = path11.join(this.stateDir, "buffer.json");
+    const bufferPath = path10.join(this.stateDir, "buffer.json");
     await this.writeStorageSecureFile(bufferPath, JSON.stringify(state, null, 2));
   }
   async loadMeta() {
-    const metaPath = path11.join(this.stateDir, "meta.json");
+    const metaPath = path10.join(this.stateDir, "meta.json");
     try {
       const raw = await this.readStorageSecureFile(metaPath);
       const parsed = JSON.parse(raw);
@@ -9955,7 +9597,7 @@ ${memory.content}
   }
   async saveMeta(state) {
     await this.ensureDirectories();
-    const metaPath = path11.join(this.stateDir, "meta.json");
+    const metaPath = path10.join(this.stateDir, "meta.json");
     await this.writeStorageSecureFile(metaPath, JSON.stringify(state, null, 2));
   }
   async appendMemoryActionEvents(events) {
@@ -10019,7 +9661,7 @@ ${memory.content}
       },
       (payload) => this.appendStorageSecureFile(target, payload),
       async () => {
-        await mkdir2(path11.dirname(target), { recursive: true });
+        await mkdir(path10.dirname(target), { recursive: true });
       }
     );
   }
@@ -10117,7 +9759,7 @@ ${memory.content}
   async appendReextractJobs(events) {
     if (events.length === 0) return 0;
     await this.ensureDirectories();
-    const filePath = path11.join(this.stateDir, "reextract-jobs.jsonl");
+    const filePath = path10.join(this.stateDir, "reextract-jobs.jsonl");
     const lines = events.map((event) => JSON.stringify(event)).join("\n") + "\n";
     try {
       await this.appendStorageSecureFile(filePath, lines);
@@ -10130,7 +9772,7 @@ ${memory.content}
   }
   async readReextractJobs(limit = 200) {
     const safeLimit = Number.isFinite(limit) ? Math.max(1, Math.min(1e3, Math.floor(limit))) : 200;
-    const filePath = path11.join(this.stateDir, "reextract-jobs.jsonl");
+    const filePath = path10.join(this.stateDir, "reextract-jobs.jsonl");
     try {
       const raw = await this.readStorageSecureFile(filePath);
       const lines = raw.split("\n").filter((line) => line.trim().length > 0);
@@ -10279,7 +9921,7 @@ ${memory.content}
       return false;
     }
     if (draftState.contentHash) {
-      const contentHash = createHash7("sha256").update(draftContent).digest("hex");
+      const contentHash = createHash6("sha256").update(draftContent).digest("hex");
       if (contentHash !== draftState.contentHash) return false;
     }
     await this.writeCompressionGuidelines(draftContent);
@@ -10288,8 +9930,8 @@ ${memory.content}
       activationState: "active"
     });
     await Promise.all([
-      unlink5(this.compressionGuidelineDraftPath).catch(() => void 0),
-      unlink5(this.compressionGuidelineDraftStatePath).catch(() => void 0)
+      unlink4(this.compressionGuidelineDraftPath).catch(() => void 0),
+      unlink4(this.compressionGuidelineDraftStatePath).catch(() => void 0)
     ]);
     return true;
   }
@@ -10341,7 +9983,7 @@ ${memory.content}
     return `${prefix}-${ts}-${rand}`;
   }
   async writeQuestion(question, context, priority) {
-    await mkdir2(this.questionsDir, { recursive: true });
+    await mkdir(this.questionsDir, { recursive: true });
     const id = this.generateId("q");
     const frontmatter = {
       id,
@@ -10357,7 +9999,7 @@ ${question}
 
 **Context:** ${context}
 `;
-    const filePath = path11.join(this.questionsDir, `${id}.md`);
+    const filePath = path10.join(this.questionsDir, `${id}.md`);
     await this.writeStorageSecureFile(filePath, content);
     log.debug(`wrote question ${id} to ${filePath}`);
     this.invalidateQuestionsCache();
@@ -10375,7 +10017,7 @@ ${question}
     if (!match) return null;
     const frontmatterStr = match[1];
     const body = match[2].trim();
-    const id = this.extractFrontmatterValue(frontmatterStr, "id") ?? path11.basename(filePath, ".md");
+    const id = this.extractFrontmatterValue(frontmatterStr, "id") ?? path10.basename(filePath, ".md");
     const created = this.extractFrontmatterValue(frontmatterStr, "created") ?? "";
     const priority = parseFloat(this.extractFrontmatterValue(frontmatterStr, "priority") ?? "0.5");
     const resolved = this.extractFrontmatterValue(frontmatterStr, "resolved") === "true";
@@ -10409,7 +10051,7 @@ ${question}
   async readIdentity(workspaceDir, namespace) {
     const identityPath = this.identityFilePath(workspaceDir, namespace);
     try {
-      return await readFile3(identityPath, "utf-8");
+      return await readFile2(identityPath, "utf-8");
     } catch {
       return "";
     }
@@ -10427,15 +10069,15 @@ ${question}
     const identityPath = this.identityFilePath(workspaceDir, opts?.namespace);
     let existing = "";
     try {
-      existing = await readFile3(identityPath, "utf-8");
+      existing = await readFile2(identityPath, "utf-8");
     } catch {
     }
     const hygiene = opts?.hygiene;
-    const rotateEnabled = hygiene?.enabled === true && hygiene.rotateEnabled === true && Array.isArray(hygiene.rotatePaths) && hygiene.rotatePaths.includes(path11.basename(identityPath));
+    const rotateEnabled = hygiene?.enabled === true && hygiene.rotateEnabled === true && Array.isArray(hygiene.rotatePaths) && hygiene.rotatePaths.includes(path10.basename(identityPath));
     if (rotateEnabled) {
       const maxBytes = hygiene.rotateMaxBytes;
       if (existing.length > maxBytes) {
-        const archiveDir = path11.join(workspaceDir, hygiene.archiveDir);
+        const archiveDir = path10.join(workspaceDir, hygiene.archiveDir);
         const { newContent } = await rotateMarkdownFileToArchive({
           filePath: identityPath,
           archiveDir,
@@ -10487,7 +10129,7 @@ ${reflection}
     }
   }
   async writeIdentityReflections(content) {
-    await mkdir2(this.identityDir, { recursive: true });
+    await mkdir(this.identityDir, { recursive: true });
     await this.writeStorageSecureFile(this.identityReflectionsPath, content);
   }
   async appendIdentityReflection(reflection) {
@@ -10519,7 +10161,7 @@ ${reflection}
 
 ${reflection}
 `;
-    await mkdir2(this.identityDir, { recursive: true });
+    await mkdir(this.identityDir, { recursive: true });
     await this.writeStorageSecureFile(this.identityReflectionsPath, `${existing.trimEnd()}${section}`);
     log.debug(`appended namespace-local reflection to ${this.identityReflectionsPath}`);
   }
@@ -10575,7 +10217,7 @@ ${reflection}
       const rightTs = latestEntityTimelineTimestamp(right.entity) ?? "";
       return compareEntityTimestamps(rightTs, leftTs);
     }).map(({ entityName }) => entityName);
-    await mkdir2(this.stateDir, { recursive: true });
+    await mkdir(this.stateDir, { recursive: true });
     await this.writeStorageSecureFile(
       this.entitySynthesisQueuePath,
       JSON.stringify(
@@ -10595,7 +10237,7 @@ ${reflection}
     if (queue.length === 0) return;
     const removals = new Set(entityNames);
     const nextQueue = queue.filter((name) => !removals.has(name));
-    await mkdir2(this.stateDir, { recursive: true });
+    await mkdir(this.stateDir, { recursive: true });
     await this.writeStorageSecureFile(
       this.entitySynthesisQueuePath,
       JSON.stringify(
@@ -10695,14 +10337,14 @@ ${reflection}
     if (entries.length === 0) return 0;
     const memories = await this.readAllMemories();
     const memoryMap = new Map(memories.map((m) => [m.frontmatter.id, m]));
-    const memoryPathMap = new Map(memories.map((m) => [path11.resolve(m.path), m]));
+    const memoryPathMap = new Map(memories.map((m) => [path10.resolve(m.path), m]));
     let updated = 0;
     const prevVersion = this.getMemoryCorpusVersion();
     const keyId = this.hotCacheKeyId();
     const warm = this.hotMemoriesCacheEnabled && getCachedMemories(this.baseDir, prevVersion, keyId, this.hotCacheTtlMs()) !== null;
     const appliedPatches = /* @__PURE__ */ new Map();
     for (const entry of entries) {
-      const memory = entry.memoryPath ? memoryPathMap.get(path11.resolve(entry.memoryPath)) : memoryMap.get(entry.memoryId);
+      const memory = entry.memoryPath ? memoryPathMap.get(path10.resolve(entry.memoryPath)) : memoryMap.get(entry.memoryId);
       if (!memory) continue;
       try {
         const applied = await this.withTombstoneBlockedMemoryPathLock(memory.path, async (current) => {
@@ -10733,7 +10375,7 @@ ${current.content}
         if (warm) {
           updateCacheOnWrite(this.baseDir, { ...applied.current, frontmatter: applied.newFm }, keyId);
         }
-        appliedPatches.set(path11.resolve(memory.path), {
+        appliedPatches.set(path10.resolve(memory.path), {
           accessCount: entry.newCount,
           lastAccessed: entry.lastAccessed
         });
@@ -10749,7 +10391,7 @@ ${current.content}
         const cur = getCachedMemories(this.baseDir, prevVersion, keyId);
         if (cur) {
           const reapplied = cur.map((m) => {
-            const patch = appliedPatches.get(path11.resolve(m.path));
+            const patch = appliedPatches.get(path10.resolve(m.path));
             return patch ? {
               ...m,
               frontmatter: { ...m.frontmatter, accessCount: patch.accessCount, lastAccessed: patch.lastAccessed }
@@ -10763,20 +10405,15 @@ ${current.content}
     }
     return updated;
   }
-  /**
-   * Get a memory by its ID.
-   */
   async getMemoryById(id) {
     const memories = await this.readAllMemories();
     return memories.find((m) => m.frontmatter.id === id) ?? null;
   }
-  /**
-   * Resolve existing active memory IDs to their on-disk paths.
-   *
-   * Uses a lightweight directory scan (collectActiveMemoryPaths) that reads
-   * file names without parsing frontmatter — much cheaper than readAllMemories()
-   * for citation usage tracking and other existence checks.
-   */
+  async getMemoryByIdIncludingArchived(id) {
+    const active = await this.getMemoryById(id);
+    return active ?? (await this.readAllColdMemories()).find((memory) => memory.frontmatter.id === id) ?? (await this.readArchivedMemories()).find((memory) => memory.frontmatter.id === id) ?? null;
+  }
+  /** Resolve existing active memory IDs through a lightweight directory scan. */
   async findExistingMemoryPaths(ids, preferredPaths = /* @__PURE__ */ new Map()) {
     if (ids.length === 0) return /* @__PURE__ */ new Map();
     const wantedIds = new Set(ids);
@@ -10784,7 +10421,7 @@ ${current.content}
     const pathsById = /* @__PURE__ */ new Map();
     const filePathsById = /* @__PURE__ */ new Map();
     for (const filePath of filePaths) {
-      const memoryId = path11.basename(filePath, ".md");
+      const memoryId = path10.basename(filePath, ".md");
       if (!wantedIds.has(memoryId)) continue;
       const paths = filePathsById.get(memoryId) ?? [];
       paths.push(filePath);
@@ -10796,7 +10433,7 @@ ${current.content}
       const preferredMatches = [];
       for (const preferredPath of preferred) {
         const directCandidates = new Set(qmdResultPathCandidates(this.baseDir, preferredPath));
-        const directMatch = existingPaths.find((filePath) => directCandidates.has(path11.resolve(filePath)));
+        const directMatch = existingPaths.find((filePath) => directCandidates.has(path10.resolve(filePath)));
         if (directMatch) {
           preferredMatches.push(directMatch);
           continue;
@@ -10808,7 +10445,7 @@ ${current.content}
             candidates.add(candidate);
           }
         }
-        const match = existingPaths.find((filePath) => candidates.has(path11.resolve(filePath)));
+        const match = existingPaths.find((filePath) => candidates.has(path10.resolve(filePath)));
         if (match) preferredMatches.push(match);
       }
       if (preferredMatches.length > 0) {
@@ -10862,7 +10499,8 @@ ${current.content}
       accessCount: memory.frontmatter.accessCount,
       lastAccessed: memory.frontmatter.lastAccessed,
       tags: normalizeProjectionTags(memory.frontmatter.tags),
-      preview: normalizeProjectionPreview(memory.content)
+      preview: normalizeProjectionPreview(memory.content),
+      privateRecord: isSupportPassportPrivateMemory(memory)
     };
   }
   async getMemoryTimeline(memoryId, limit = 200) {
@@ -10997,7 +10635,7 @@ ${sanitized.text}
     }
     if (!oldMemory) return false;
     const requireActiveAtWrite = options.requireActive === true || inferMemoryStatus(oldMemory.frontmatter, toMemoryPathRel(this.baseDir, oldMemory.path)) === "active";
-    const operationId = createHash7("sha256").update(
+    const operationId = createHash6("sha256").update(
       JSON.stringify({
         oldMemoryId,
         newMemoryId,
@@ -11081,6 +10719,8 @@ ${current.content}
         exactReplay,
         currentBefore,
         updatedFm,
+        actor: options.actor,
+        audit: options.audit,
         citationTemplate: this.citationTemplate,
         correctionsDir: this.correctionsDir,
         readMemoryByPath: (filePath) => this.readMemoryByPath(filePath),
@@ -11104,7 +10744,7 @@ ${current.content}
             memoryId: oldMemoryId,
             eventType: "superseded",
             timestamp: supersededAt,
-            actor: "storage.supersedeMemory",
+            actor: options.actor ?? "storage.supersedeMemory",
             reasonCode: reason,
             before: exactReplay ? { ...beforeState, status: "active" } : beforeState,
             after: afterState,
@@ -11124,11 +10764,11 @@ ${current.content}
     }
   }
   get summariesDir() {
-    return path11.join(this.baseDir, "summaries");
+    return path10.join(this.baseDir, "summaries");
   }
   async writeSummary(summary) {
-    await mkdir2(this.summariesDir, { recursive: true });
-    const filePath = path11.join(this.summariesDir, `${summary.id}.json`);
+    await mkdir(this.summariesDir, { recursive: true });
+    const filePath = path10.join(this.summariesDir, `${summary.id}.json`);
     await this.writeStorageSecureFile(filePath, JSON.stringify(summary, null, 2));
     log.debug(`wrote summary ${summary.id}`);
   }
@@ -11138,7 +10778,7 @@ ${current.content}
       const summaries = [];
       for (const file of files) {
         if (!file.endsWith(".json")) continue;
-        const filePath = path11.join(this.summariesDir, file);
+        const filePath = path10.join(this.summariesDir, file);
         const raw = await this.readStorageSecureFile(filePath);
         summaries.push(JSON.parse(raw));
       }
@@ -11208,8 +10848,8 @@ ${current.content}
     return archived;
   }
   async saveTopics(topics) {
-    const metaPath = path11.join(this.stateDir, "topics.json");
-    await mkdir2(this.stateDir, { recursive: true });
+    const metaPath = path10.join(this.stateDir, "topics.json");
+    await mkdir(this.stateDir, { recursive: true });
     await this.writeStorageSecureFile(
       metaPath,
       JSON.stringify({ topics, updatedAt: (/* @__PURE__ */ new Date()).toISOString() }, null, 2)
@@ -11217,7 +10857,7 @@ ${current.content}
     log.debug(`saved ${topics.length} topic scores`);
   }
   async loadTopics() {
-    const metaPath = path11.join(this.stateDir, "topics.json");
+    const metaPath = path10.join(this.stateDir, "topics.json");
     try {
       const raw = await this.readStorageSecureFile(metaPath);
       return JSON.parse(raw);
@@ -11332,4 +10972,4 @@ export {
   isValidBufferSurpriseEvent,
   StorageManager3 as StorageManager
 };
-//# sourceMappingURL=chunk-6R4G7N4S.js.map
+//# sourceMappingURL=chunk-M4YHAODQ.js.map