@remnic/core 9.54.5 → 9.54.6

package/dist/{chunk-UWJNKGBA.js → chunk-QZLDRQ4I.js}

@@ -1,3 +1,6 @@
+import {
+  LanceDbBackend
+} from "./chunk-XL3TATMJ.js";
 import {
   MeilisearchBackend
 } from "./chunk-VANZKHTN.js";
@@ -13,12 +16,9 @@ import {
 import {
   EmbedHelper
 } from "./chunk-GWFSVJ4P.js";
-import {
-  LanceDbBackend
-} from "./chunk-XL3TATMJ.js";
 import {
   createConversationIndexBackend
-} from "./chunk-7RZJWZ46.js";
+} from "./chunk-LEPOP46W.js";
 import {
   FaissConversationIndexAdapter
 } from "./chunk-ET356KSB.js";
@@ -178,4 +178,4 @@ export {
   createConversationSearchBackend,
   createConversationIndexRuntime
 };
-//# sourceMappingURL=chunk-UWJNKGBA.js.map
+//# sourceMappingURL=chunk-QZLDRQ4I.js.map

package/dist/{chunk-UYOXFFEY.js → chunk-RUNORG2P.js}

@@ -1,6 +1,6 @@
 import {
   StorageManager
-} from "./chunk-QQXWFDRD.js";
+} from "./chunk-M4YHAODQ.js";
 import {
   normalizeEntityName
 } from "./chunk-YXZG5TVN.js";
@@ -12,7 +12,7 @@ import {
 } from "./chunk-FFAZ2XFU.js";
 import {
   excludeSupportPassportPrivateMemories
-} from "./chunk-HNDIND7P.js";
+} from "./chunk-XX4HPFFM.js";
 import {
   readEnvVar,
   resolveHomeDir
@@ -961,4 +961,4 @@ export {
   resolveBriefingSaveDir,
   briefingFilename
 };
-//# sourceMappingURL=chunk-UYOXFFEY.js.map
+//# sourceMappingURL=chunk-RUNORG2P.js.map

package/dist/{chunk-LC3FD4BV.js → chunk-RZQ6W2W4.js}

@@ -1,12 +1,15 @@
-import {
-  openclawReplayNormalizer
-} from "./chunk-H4CKS5B2.js";
 import {
   chatgptReplayNormalizer
 } from "./chunk-MMACM5G2.js";
 import {
   claudeReplayNormalizer
 } from "./chunk-54BGIBCR.js";
+import {
+  openclawReplayNormalizer
+} from "./chunk-H4CKS5B2.js";
+import {
+  exportJsonBundle
+} from "./chunk-UP6MOYCB.js";
 import {
   exportSqlite
 } from "./chunk-BV2TIZ4F.js";
@@ -29,8 +32,8 @@ import {
   exportMarkdownBundle
 } from "./chunk-765K3SAT.js";
 import {
-  exportJsonBundle
-} from "./chunk-UP6MOYCB.js";
+  RoutingRulesStore
+} from "./chunk-XL24QQ63.js";
 import {
   buildReplayNormalizerRegistry,
   clampBatchSize,
@@ -40,9 +43,6 @@ import {
   isReplaySource,
   normalizeReplaySessionKey
 } from "./chunk-AJVLDJU6.js";
-import {
-  RoutingRulesStore
-} from "./chunk-XL24QQ63.js";
 import {
   TailscaleHelper
 } from "./chunk-EEC4PCG5.js";
@@ -54,7 +54,7 @@ import {
 } from "./chunk-IIFFC3RL.js";
 import {
   rebuildMemoryLifecycleLedger
-} from "./chunk-LVKYLMSM.js";
+} from "./chunk-46SZBVDS.js";
 import {
   rebuildObservations
 } from "./chunk-DQTCGVFK.js";
@@ -70,6 +70,9 @@ import {
   registerBulkImportSource,
   runBulkImportPipeline
 } from "./chunk-HSSERO3E.js";
+import {
+  searchVerifiedEpisodes
+} from "./chunk-5FD7JMTX.js";
 import {
   getUtilityLearningStatus,
   learnUtilityPromotionWeights
@@ -78,23 +81,20 @@ import {
   getUtilityTelemetryStatus,
   recordUtilityTelemetryEvent
 } from "./chunk-6FC3IZ26.js";
-import {
-  searchVerifiedEpisodes
-} from "./chunk-YKZLOPTC.js";
 import {
   ThreadingManager
 } from "./chunk-OJP3N7UK.js";
 import {
   promoteSemanticRuleFromMemory
-} from "./chunk-DBY26JJJ.js";
+} from "./chunk-IQ4NVWEF.js";
 import {
   searchVerifiedSemanticRules
-} from "./chunk-6PZGKGAO.js";
+} from "./chunk-FWX7W5PM.js";
 import {
   buildResumeBundleFromState,
   getResumeBundleStatus,
   recordResumeBundle
-} from "./chunk-FFEBSFVT.js";
+} from "./chunk-HGJ6NJ4E.js";
 import {
   getWorkProductLedgerStatus,
   recordWorkProductLedgerEntry,
@@ -105,7 +105,11 @@ import {
 } from "./chunk-HYQJQGD3.js";
 import {
   parseXrayCliOptions
-} from "./chunk-TY6MKIWP.js";
+} from "./chunk-FONWBCVY.js";
+import {
+  readRuntimePolicySnapshot,
+  sanitizeRuntimePolicyValues
+} from "./chunk-33JBK2XP.js";
 import {
   formatNamespaceMaintenanceHealthText,
   runBenchmarkRecall,
@@ -114,7 +118,7 @@ import {
   runOperatorInventory,
   runOperatorRepair,
   runOperatorSetup
-} from "./chunk-CLKBV3Z3.js";
+} from "./chunk-ZUKIUXHQ.js";
 import {
   analyzeSessionIntegrity,
   applySessionRepair,
@@ -129,10 +133,6 @@ import {
   renderPatternExplain,
   renderPatternsList
 } from "./chunk-3T74IZB3.js";
-import {
-  readRuntimePolicySnapshot,
-  sanitizeRuntimePolicyValues
-} from "./chunk-33JBK2XP.js";
 import {
   GITHUB_CONNECTOR_ID,
   GMAIL_CONNECTOR_ID,
@@ -152,7 +152,7 @@ import {
 } from "./chunk-6GUG4YNM.js";
 import {
   searchHarmonicRetrieval
-} from "./chunk-B4T3FQMT.js";
+} from "./chunk-43SEBY2M.js";
 import {
   rescoreMemoryImportance
 } from "./chunk-JXS5PDQ7.js";
@@ -169,7 +169,7 @@ import {
   rebuildMemoryProjection,
   repairMemoryProjection,
   verifyMemoryProjection
-} from "./chunk-TKFGFDPJ.js";
+} from "./chunk-3TIZPSJC.js";
 import {
   getCueAnchorStoreStatus
 } from "./chunk-ACPCA4NO.js";
@@ -196,11 +196,11 @@ import {
 } from "./chunk-UQ7RN5HK.js";
 import {
   parseConfig
-} from "./chunk-2INWPC6E.js";
+} from "./chunk-PG4QBPVG.js";
 import {
   EngramAccessHttpServer,
   MeetingsInputError
-} from "./chunk-DDA55IVB.js";
+} from "./chunk-PT54WISF.js";
 import {
   WearablesInputError
 } from "./chunk-V7IZKJI3.js";
@@ -213,13 +213,13 @@ import {
   createProductionChatLlmAdapter,
   loadChatSession,
   sessionBelongsToPrincipal
-} from "./chunk-3SXLD5T3.js";
+} from "./chunk-7BD6O7ZV.js";
 import {
   getAbstractionNodeStoreStatus
 } from "./chunk-DJUKBGAD.js";
 import {
   EngramAccessService
-} from "./chunk-3WGI7F4V.js";
+} from "./chunk-D3LBIUWV.js";
 import {
   WorkStorage
 } from "./chunk-GDB4J2H3.js";
@@ -236,10 +236,10 @@ import {
   parseRecallExplainFormat,
   renderRecallExplain,
   renderXray
-} from "./chunk-RG426DJO.js";
+} from "./chunk-H7NAZ3UB.js";
 import {
   readAggregateExtractionWatermark
-} from "./chunk-7Q7JWLQ4.js";
+} from "./chunk-JYG4OLWH.js";
 import {
   getObjectiveStateStoreStatus
 } from "./chunk-HTP6XRUI.js";
@@ -248,15 +248,15 @@ import {
   readMemoryGovernanceRunArtifact,
   restoreMemoryGovernanceRun,
   runMemoryGovernance
-} from "./chunk-2DD6ZHOM.js";
+} from "./chunk-GJ776BC2.js";
 import {
   listNamespaces,
   runNamespaceMigration,
   verifyNamespaces
-} from "./chunk-NGT35IGQ.js";
+} from "./chunk-MIH3CJPN.js";
 import {
   resolveNamespaceChildRoot
-} from "./chunk-YR65W7BV.js";
+} from "./chunk-BRR5EUTF.js";
 import {
   getCausalTrajectoryStoreStatus
 } from "./chunk-AHZOMHWN.js";
@@ -265,14 +265,14 @@ import {
 } from "./chunk-BIJAWZYW.js";
 import {
   meetingIdDate
-} from "./chunk-QQXWFDRD.js";
+} from "./chunk-M4YHAODQ.js";
 import {
   isValidTranscriptDate
 } from "./chunk-UHVXE24Y.js";
 import {
   RECALL_DISCLOSURE_LEVELS,
   isRecallDisclosure
-} from "./chunk-BIF4SHMD.js";
+} from "./chunk-76JJSXK7.js";
 import {
   bumpMemoryCorpusVersionForDir
 } from "./chunk-KMAP7SNQ.js";
@@ -300,7 +300,7 @@ import {
 } from "./chunk-GCASGYIO.js";
 import {
   isSupportPassportPrivateMemory
-} from "./chunk-HNDIND7P.js";
+} from "./chunk-XX4HPFFM.js";
 import {
   selectRouteRule,
   validateRouteTarget
@@ -3987,7 +3987,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
       );
       tierCmd.command("list").description("Summarize tier distribution across all memories").option("--json", "Emit machine-readable JSON only").action(async (...args) => {
         const options = args[0] ?? {};
-        const { summarizeTiers, formatTierSummaryText } = await import("./tier-stats-JDN6HRNT.js");
+        const { summarizeTiers, formatTierSummaryText } = await import("./tier-stats-EXYSKSVN.js");
         const summary = await summarizeTiers(orchestrator.storage);
         if (reportHasMachineReadableOutput(options)) {
           console.log(JSON.stringify(summary, null, 2));
@@ -3998,7 +3998,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
       tierCmd.command("explain").description("Explain the tier-transition decision for a single memory").argument("<id>", "Memory id to explain").option("--json", "Emit machine-readable JSON only").action(async (...args) => {
         const idArg = typeof args[0] === "string" ? args[0] : "";
         const options = args[1] ?? {};
-        const { explainTierForMemory, formatTierExplainText } = await import("./tier-stats-JDN6HRNT.js");
+        const { explainTierForMemory, formatTierExplainText } = await import("./tier-stats-EXYSKSVN.js");
         try {
           const explain = await explainTierForMemory(
             orchestrator.storage,
@@ -7268,7 +7268,7 @@ Semantic consolidation complete. clusters=${result.clustersFound}, consolidated=
       });
       reviewCmd.command("scan").description("Run an on-demand contradiction scan").option("--namespace <ns>", "Namespace to scan").action(async (...args) => {
         const options = args[0] ?? {};
-        const { runContradictionScan } = await import("./contradiction-scan-KCADHXPE.js");
+        const { runContradictionScan } = await import("./contradiction-scan-JDTBXRGW.js");
         console.log("Running contradiction scan...");
         const result = await runContradictionScan({
           storage: orchestrator.storage,
@@ -7995,4 +7995,4 @@ export {
   listMemoryMarkdownFilePaths,
   registerCli
 };
-//# sourceMappingURL=chunk-LC3FD4BV.js.map
+//# sourceMappingURL=chunk-RZQ6W2W4.js.map

package/dist/{chunk-MRGJZ75M.js → chunk-SMNYAMJD.js}

@@ -2,14 +2,14 @@ import {
   buildExplicitCaptureDedupKey,
   isTombstoneBlockedCaptureWriteLockBusy,
   normalizeExplicitCaptureContent
-} from "./chunk-WZWZRZ2V.js";
+} from "./chunk-K2UGPTYY.js";
 import {
   TAG_LIMITS,
   composeMemoryEnvelope
 } from "./chunk-NSVDUN76.js";
 import {
   isSupportPassportPrivateMemory
-} from "./chunk-HNDIND7P.js";
+} from "./chunk-XX4HPFFM.js";
 import {
   sanitizeMemoryContent
 } from "./chunk-5GKPFL3S.js";
@@ -787,4 +787,4 @@ export {
   shouldProcessInlineExplicitCapture,
   InlineExplicitCaptureProcessor
 };
-//# sourceMappingURL=chunk-MRGJZ75M.js.map
+//# sourceMappingURL=chunk-SMNYAMJD.js.map

package/dist/{chunk-MKQBXQKU.js → chunk-TB6CBZ5V.js}

@@ -16,6 +16,7 @@ var WriteRateLimiter = class {
   // One rolling window per principal. Empty buckets are pruned so the map does
   // not grow without bound.
   buckets = /* @__PURE__ */ new Map();
+  inFlight = /* @__PURE__ */ new Map();
   lastLogAt = 0;
   suppressed = 0;
   constructor(maxRequests, windowMs) {
@@ -37,15 +38,19 @@ var WriteRateLimiter = class {
       if (slots.length === 0) this.buckets.delete(key);
     }
   }
-  /** Live reservation/record count for a principal (test/introspection). */
+  /** Committed slots for a principal (test/introspection). */
   slotsFor(principal) {
     return this.buckets.get(this.key(principal)) ?? [];
   }
+  inFlightFor(principal) {
+    return this.inFlight.get(this.key(principal)) ?? 0;
+  }
   /** Total live reservations across all principals (test/introspection). */
   totalSlots() {
     this.sweep(Date.now());
     let total = 0;
     for (const slots of this.buckets.values()) total += slots.length;
+    for (const count of this.inFlight.values()) total += count;
     return total;
   }
   /** True if a write may proceed for the principal. Logs (sampled) when not. */
@@ -53,7 +58,7 @@ var WriteRateLimiter = class {
     this.sweep(Date.now());
     const key = this.key(principal);
     const slots = this.buckets.get(key);
-    if (slots && slots.length >= this.maxRequests) {
+    if ((slots?.length ?? 0) + (this.inFlight.get(key) ?? 0) >= this.maxRequests) {
       this.logRejected(key);
       return false;
     }
@@ -63,29 +68,31 @@ var WriteRateLimiter = class {
   record(principal) {
     this.sweep(Date.now());
     const key = this.key(principal);
-    const slots = this.buckets.get(key) ?? this.buckets.set(key, []).get(key);
+    let slots = this.buckets.get(key);
+    if (!slots) {
+      slots = [];
+      this.buckets.set(key, slots);
+    }
     slots.push({ recordedAt: Date.now() });
   }
   /**
-   * Reserve a slot for an in-flight write. Returns a release function, or
-   * `null` when the principal is already at the limit (caller raises its 429).
+   * Reserve a slot for an in-flight write. Commit starts the rolling window
+   * when persistence finishes. Release restores capacity after a failed write.
    */
   reserve(principal) {
     if (!this.hasCapacity(principal)) return null;
     const key = this.key(principal);
-    const slots = this.buckets.get(key) ?? this.buckets.set(key, []).get(key);
-    const slot = { recordedAt: Date.now() };
-    slots.push(slot);
+    this.inFlight.set(key, (this.inFlight.get(key) ?? 0) + 1);
     let active = true;
-    return () => {
+    const finish = (committed) => {
       if (!active) return;
       active = false;
-      const current = this.buckets.get(key);
-      if (!current) return;
-      const index = current.indexOf(slot);
-      if (index >= 0) current.splice(index, 1);
-      if (current.length === 0) this.buckets.delete(key);
+      const count = this.inFlight.get(key) ?? 0;
+      if (count <= 1) this.inFlight.delete(key);
+      else this.inFlight.set(key, count - 1);
+      if (committed) this.record(principal);
     };
+    return { commit: () => finish(true), release: () => finish(false) };
   }
   logRejected(principal) {
     const now = Date.now();
@@ -104,4 +111,4 @@ var WriteRateLimiter = class {
 export {
   WriteRateLimiter
 };
-//# sourceMappingURL=chunk-MKQBXQKU.js.map
+//# sourceMappingURL=chunk-TB6CBZ5V.js.map

package/dist/chunk-TB6CBZ5V.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/write-rate-limiter.ts"],"sourcesContent":["/**\n * Per-principal write rate limiter for the access HTTP surface\n * (issues #1937 / #2029).\n *\n * Extracted from access-http.ts so the limiter is a cohesive unit. Each\n * principal (authenticated caller identity) gets its own rolling-window\n * bucket, so one chatty connector cannot starve writes for the others;\n * requests with no resolved principal share a single global bucket.\n *\n * Deliberately transport-agnostic: it never throws `HttpError` — callers\n * translate a refusal into their own 429. It logs a sampled warning when it\n * refuses a write, so a sustained limit condition is diagnosable server-side\n * (previously the refusal was a bare throw with no trace).\n */\n\nimport { log } from \"./logger.js\";\n\n// Defaults; overridable per instance via the constructor (config/env feed these\n// through the server's `writeRateLimit*` settings).\nconst DEFAULT_WINDOW_MS = 60_000;\nconst DEFAULT_MAX_REQUESTS = 30;\n// At most one rejection warning per this interval, carrying a rejected-count,\n// so a storm is visible without flooding the log.\nconst LOG_INTERVAL_MS = 10_000;\n// Bucket key for requests with no resolved principal.\nconst GLOBAL_BUCKET = \"\";\n\ntype Slot = { readonly recordedAt: number };\n\nexport interface WriteRateLimitReservation {\n  commit(): void;\n  release(): void;\n}\n\nfunction sanitizePositiveInteger(value: number | undefined, fallback: number): number {\n  return typeof value === \"number\" && Number.isInteger(value) && value >= 1 ? value : fallback;\n}\n\nexport class WriteRateLimiter {\n  readonly maxRequests: number;\n  readonly windowMs: number;\n  // One rolling window per principal. Empty buckets are pruned so the map does\n  // not grow without bound.\n  private readonly buckets = new Map<string, Slot[]>();\n  private readonly inFlight = new Map<string, number>();\n  private lastLogAt = 0;\n  private suppressed = 0;\n\n  constructor(maxRequests?: number, windowMs?: number) {\n    this.maxRequests = sanitizePositiveInteger(maxRequests, DEFAULT_MAX_REQUESTS);\n    this.windowMs = sanitizePositiveInteger(windowMs, DEFAULT_WINDOW_MS);\n  }\n\n  private key(principal?: string): string {\n    return principal?.trim() ? principal.trim() : GLOBAL_BUCKET;\n  }\n\n  private prune(slots: Slot[], now: number): void {\n    while (slots.length > 0 && now - (slots[0]?.recordedAt ?? 0) >= this.windowMs) {\n      slots.shift();\n    }\n  }\n\n  /** Prune every bucket to the current window; drop buckets that go empty. */\n  private sweep(now: number): void {\n    for (const [key, slots] of this.buckets) {\n      this.prune(slots, now);\n      if (slots.length === 0) this.buckets.delete(key);\n    }\n  }\n\n  /** Committed slots for a principal (test/introspection). */\n  slotsFor(principal?: string): ReadonlyArray<Slot> {\n    return this.buckets.get(this.key(principal)) ?? [];\n  }\n\n  inFlightFor(principal?: string): number {\n    return this.inFlight.get(this.key(principal)) ?? 0;\n  }\n\n  /** Total live reservations across all principals (test/introspection). */\n  totalSlots(): number {\n    this.sweep(Date.now());\n    let total = 0;\n    for (const slots of this.buckets.values()) total += slots.length;\n    for (const count of this.inFlight.values()) total += count;\n    return total;\n  }\n\n  /** True if a write may proceed for the principal. Logs (sampled) when not. */\n  hasCapacity(principal?: string): boolean {\n    this.sweep(Date.now());\n    const key = this.key(principal);\n    const slots = this.buckets.get(key);\n    if ((slots?.length ?? 0) + (this.inFlight.get(key) ?? 0) >= this.maxRequests) {\n      this.logRejected(key);\n      return false;\n    }\n    return true;\n  }\n\n  /** Record a committed write against the principal's rolling window. */\n  record(principal?: string): void {\n    this.sweep(Date.now());\n    const key = this.key(principal);\n    let slots = this.buckets.get(key);\n    if (!slots) {\n      slots = [];\n      this.buckets.set(key, slots);\n    }\n    slots.push({ recordedAt: Date.now() });\n  }\n\n  /**\n   * Reserve a slot for an in-flight write. Commit starts the rolling window\n   * when persistence finishes. Release restores capacity after a failed write.\n   */\n  reserve(principal?: string): WriteRateLimitReservation | null {\n    if (!this.hasCapacity(principal)) return null;\n    const key = this.key(principal);\n    this.inFlight.set(key, (this.inFlight.get(key) ?? 0) + 1);\n    let active = true;\n    const finish = (committed: boolean) => {\n      if (!active) return;\n      active = false;\n      const count = this.inFlight.get(key) ?? 0;\n      if (count <= 1) this.inFlight.delete(key);\n      else this.inFlight.set(key, count - 1);\n      if (committed) this.record(principal);\n    };\n    return { commit: () => finish(true), release: () => finish(false) };\n  }\n\n  private logRejected(principal: string): void {\n    const now = Date.now();\n    this.suppressed += 1;\n    if (now - this.lastLogAt < LOG_INTERVAL_MS) return;\n    const rejected = this.suppressed;\n    this.suppressed = 0;\n    this.lastLogAt = now;\n    const who = principal === GLOBAL_BUCKET ? \"(no principal)\" : principal;\n    log.warn(\n      `write_rate_limited: rejected ${rejected} write(s) for principal ${who}; per-principal limit is ${this.maxRequests} per ${this.windowMs}ms. Raise server.writeRateLimitMaxRequests (or REMNIC_WRITE_RATE_LIMIT_MAX_REQUESTS) if sustained.`\n    );\n  }\n}\n"],"mappings":";;;;;AAmBA,IAAM,oBAAoB;AAC1B,IAAM,uBAAuB;AAG7B,IAAM,kBAAkB;AAExB,IAAM,gBAAgB;AAStB,SAAS,wBAAwB,OAA2B,UAA0B;AACpF,SAAO,OAAO,UAAU,YAAY,OAAO,UAAU,KAAK,KAAK,SAAS,IAAI,QAAQ;AACtF;AAEO,IAAM,mBAAN,MAAuB;AAAA,EACnB;AAAA,EACA;AAAA;AAAA;AAAA,EAGQ,UAAU,oBAAI,IAAoB;AAAA,EAClC,WAAW,oBAAI,IAAoB;AAAA,EAC5C,YAAY;AAAA,EACZ,aAAa;AAAA,EAErB,YAAY,aAAsB,UAAmB;AACnD,SAAK,cAAc,wBAAwB,aAAa,oBAAoB;AAC5E,SAAK,WAAW,wBAAwB,UAAU,iBAAiB;AAAA,EACrE;AAAA,EAEQ,IAAI,WAA4B;AACtC,WAAO,WAAW,KAAK,IAAI,UAAU,KAAK,IAAI;AAAA,EAChD;AAAA,EAEQ,MAAM,OAAe,KAAmB;AAC9C,WAAO,MAAM,SAAS,KAAK,OAAO,MAAM,CAAC,GAAG,cAAc,MAAM,KAAK,UAAU;AAC7E,YAAM,MAAM;AAAA,IACd;AAAA,EACF;AAAA;AAAA,EAGQ,MAAM,KAAmB;AAC/B,eAAW,CAAC,KAAK,KAAK,KAAK,KAAK,SAAS;AACvC,WAAK,MAAM,OAAO,GAAG;AACrB,UAAI,MAAM,WAAW,EAAG,MAAK,QAAQ,OAAO,GAAG;AAAA,IACjD;AAAA,EACF;AAAA;AAAA,EAGA,SAAS,WAAyC;AAChD,WAAO,KAAK,QAAQ,IAAI,KAAK,IAAI,SAAS,CAAC,KAAK,CAAC;AAAA,EACnD;AAAA,EAEA,YAAY,WAA4B;AACtC,WAAO,KAAK,SAAS,IAAI,KAAK,IAAI,SAAS,CAAC,KAAK;AAAA,EACnD;AAAA;AAAA,EAGA,aAAqB;AACnB,SAAK,MAAM,KAAK,IAAI,CAAC;AACrB,QAAI,QAAQ;AACZ,eAAW,SAAS,KAAK,QAAQ,OAAO,EAAG,UAAS,MAAM;AAC1D,eAAW,SAAS,KAAK,SAAS,OAAO,EAAG,UAAS;AACrD,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,YAAY,WAA6B;AACvC,SAAK,MAAM,KAAK,IAAI,CAAC;AACrB,UAAM,MAAM,KAAK,IAAI,SAAS;AAC9B,UAAM,QAAQ,KAAK,QAAQ,IAAI,GAAG;AAClC,SAAK,OAAO,UAAU,MAAM,KAAK,SAAS,IAAI,GAAG,KAAK,MAAM,KAAK,aAAa;AAC5E,WAAK,YAAY,GAAG;AACpB,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,OAAO,WAA0B;AAC/B,SAAK,MAAM,KAAK,IAAI,CAAC;AACrB,UAAM,MAAM,KAAK,IAAI,SAAS;AAC9B,QAAI,QAAQ,KAAK,QAAQ,IAAI,GAAG;AAChC,QAAI,CAAC,OAAO;AACV,cAAQ,CAAC;AACT,WAAK,QAAQ,IAAI,KAAK,KAAK;AAAA,IAC7B;AACA,UAAM,KAAK,EAAE,YAAY,KAAK,IAAI,EAAE,CAAC;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,QAAQ,WAAsD;AAC5D,QAAI,CAAC,KAAK,YAAY,SAAS,EAAG,QAAO;AACzC,UAAM,MAAM,KAAK,IAAI,SAAS;AAC9B,SAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,GAAG,KAAK,KAAK,CAAC;AACxD,QAAI,SAAS;AACb,UAAM,SAAS,CAAC,cAAuB;AACrC,UAAI,CAAC,OAAQ;AACb,eAAS;AACT,YAAM,QAAQ,KAAK,SAAS,IAAI,GAAG,KAAK;AACxC,UAAI,SAAS,EAAG,MAAK,SAAS,OAAO,GAAG;AAAA,UACnC,MAAK,SAAS,IAAI,KAAK,QAAQ,CAAC;AACrC,UAAI,UAAW,MAAK,OAAO,SAAS;AAAA,IACtC;AACA,WAAO,EAAE,QAAQ,MAAM,OAAO,IAAI,GAAG,SAAS,MAAM,OAAO,KAAK,EAAE;AAAA,EACpE;AAAA,EAEQ,YAAY,WAAyB;AAC3C,UAAM,MAAM,KAAK,IAAI;AACrB,SAAK,cAAc;AACnB,QAAI,MAAM,KAAK,YAAY,gBAAiB;AAC5C,UAAM,WAAW,KAAK;AACtB,SAAK,aAAa;AAClB,SAAK,YAAY;AACjB,UAAM,MAAM,cAAc,gBAAgB,mBAAmB;AAC7D,QAAI;AAAA,MACF,gCAAgC,QAAQ,2BAA2B,GAAG,4BAA4B,KAAK,WAAW,QAAQ,KAAK,QAAQ;AAAA,IACzI;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-DN2IDKI5.js → chunk-TO7ZTWJW.js}

@@ -1,6 +1,6 @@
 import {
   createSearchBackend
-} from "./chunk-UWJNKGBA.js";
+} from "./chunk-QZLDRQ4I.js";
 import {
   namespaceIdentityToken,
   normalizeNamespaceIdentity
@@ -470,4 +470,4 @@ export {
   NamespaceSearchRouter,
   normalizeQmdResultPath
 };
-//# sourceMappingURL=chunk-DN2IDKI5.js.map
+//# sourceMappingURL=chunk-TO7ZTWJW.js.map

package/dist/{chunk-K2TDK7GG.js → chunk-TWTUGCTY.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-QDW3E4RD.js";
 import {
   gatewayTaskChainOptions
-} from "./chunk-C23BYTJV.js";
+} from "./chunk-UW5NPZJ2.js";
 import {
   extractJsonCandidates
 } from "./chunk-RGMVMVMF.js";
@@ -486,4 +486,4 @@ export {
   createVerdictCache,
   createDeferCountMap
 };
-//# sourceMappingURL=chunk-K2TDK7GG.js.map
+//# sourceMappingURL=chunk-TWTUGCTY.js.map

package/dist/{chunk-CUTFSLSD.js → chunk-UCTS3DDH.js}

@@ -13,7 +13,7 @@ import {
 } from "./chunk-2AD5SXO4.js";
 import {
   ExtractionDeadlineError
-} from "./chunk-N7CXQ5TA.js";
+} from "./chunk-XZHE2DEN.js";
 import {
   resolvePrincipal
 } from "./chunk-3GD2HFR6.js";
@@ -792,4 +792,4 @@ var SmartBuffer = class {
 export {
   SmartBuffer
 };
-//# sourceMappingURL=chunk-CUTFSLSD.js.map
+//# sourceMappingURL=chunk-UCTS3DDH.js.map

package/dist/{chunk-JYIJNNN3.js → chunk-UG6VXIOK.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-AAD2ZS6P.js";
 import {
   gatewayTaskChainOptions
-} from "./chunk-C23BYTJV.js";
+} from "./chunk-UW5NPZJ2.js";
 import {
   extractJsonCandidates
 } from "./chunk-RGMVMVMF.js";
@@ -685,4 +685,4 @@ export {
   serializeFaithfulnessFields,
   parseFaithfulnessField
 };
-//# sourceMappingURL=chunk-JYIJNNN3.js.map
+//# sourceMappingURL=chunk-UG6VXIOK.js.map

package/dist/{chunk-QOQQMVR2.js → chunk-UKYS3NU5.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-JLNBQWZ2.js";
 import {
   runPostConsolidationMaterialize
-} from "./chunk-YR65W7BV.js";
+} from "./chunk-BRR5EUTF.js";
 import {
   isSemanticConsolidationLlmOperator
 } from "./chunk-G7D6GZ5J.js";
@@ -220,4 +220,4 @@ export {
   buildExtensionsBlockForConsolidation,
   materializeAfterSemanticConsolidation
 };
-//# sourceMappingURL=chunk-QOQQMVR2.js.map
+//# sourceMappingURL=chunk-UKYS3NU5.js.map

package/dist/{chunk-VZRFGJCH.js → chunk-UPLZNJKN.js}

@@ -1,6 +1,6 @@
 import {
   StorageManager
-} from "./chunk-QQXWFDRD.js";
+} from "./chunk-M4YHAODQ.js";
 import {
   keyring_exports,
   secureStoreDir
@@ -388,4 +388,4 @@ export {
   resolveNamespaceStorageRoot,
   NamespaceStorageRouter
 };
-//# sourceMappingURL=chunk-VZRFGJCH.js.map
+//# sourceMappingURL=chunk-UPLZNJKN.js.map

package/dist/{chunk-C23BYTJV.js → chunk-UW5NPZJ2.js}

@@ -87,12 +87,18 @@ var FallbackLlmClient = class {
    * When agentId is provided, uses that agent persona's model chain instead of defaults.
    */
   async chatCompletion(messages, options = {}) {
-    const models = this.getModelChain(options.agentId, options.model, options.modelChain);
+    const models = this.getModelChain(
+      options.agentId,
+      options.model,
+      options.modelChain,
+      options.includeDefaultModelFallback
+    );
     if (models.length === 0) {
       log.warn("fallback LLM: no models configured in gateway");
       return null;
     }
     const runChain = async (runOptions) => {
+      let lastRejectedResponse = null;
       for (let i = 0; i < models.length; i++) {
         if (runOptions.signal?.aborted) {
           throw abortReason(runOptions.signal);
@@ -102,25 +108,31 @@ var FallbackLlmClient = class {
         try {
           const result = await this.tryModel(model, messages, runOptions);
           if (result) {
-            if (isFallback) {
-              log.debug(`fallback LLM: succeeded using ${model.modelString} (fallback ${i})`);
-            }
-            return {
+            const response = {
               content: result.content,
               modelUsed: model.modelString,
               usage: result.usage
             };
+            if (runOptions.acceptResponse && !runOptions.acceptResponse(response)) {
+              lastRejectedResponse = response;
+              log.debug(`fallback LLM: ${model.modelString} returned rejected output, trying next...`);
+              continue;
+            }
+            if (isFallback) {
+              log.debug(`fallback LLM: succeeded using ${model.modelString} (fallback ${i})`);
+            }
+            return response;
           }
         } catch (err) {
           if (runOptions.signal?.aborted) {
             throw abortReason(runOptions.signal);
           }
-          const errorMsg = err instanceof Error ? err.message : String(err);
+          const errorMsg = runOptions.redactProviderErrors ? "provider error details redacted" : err instanceof Error ? err.message : String(err);
           log.debug(`fallback LLM: ${model.modelString} failed (${errorMsg}), trying next...`);
         }
       }
       log.warn(`fallback LLM: all ${models.length} models in chain failed`);
-      return null;
+      return lastRejectedResponse;
     };
     if (typeof options.timeoutMs === "number") {
       if (options.timeoutMs <= 0) {
@@ -182,7 +194,12 @@ var FallbackLlmClient = class {
       return { result: null, failureReason: "http_error" };
     }
     if (!response?.content) {
-      const hasModels = this.getModelChain(options.agentId, options.model, options.modelChain).length > 0;
+      const hasModels = this.getModelChain(
+        options.agentId,
+        options.model,
+        options.modelChain,
+        options.includeDefaultModelFallback
+      ).length > 0;
       return { result: null, failureReason: hasModels ? "http_error" : "no_models" };
     }
     try {
@@ -209,7 +226,7 @@ var FallbackLlmClient = class {
    * matching entry in agents.list[] and uses that persona's model chain.
    * Falls back to agents.defaults.model if agentId is not found or not provided.
    */
-  getModelChain(agentId, modelOverride, modelChainOverride) {
+  getModelChain(agentId, modelOverride, modelChainOverride, includeDefaultModelFallback = true) {
     const chain = [];
     const providers = this.gatewayConfig?.models?.providers ?? {};
     let modelConfig;
@@ -256,7 +273,7 @@ var FallbackLlmClient = class {
         chain.push(modelRef);
       }
     }
-    if (modelChainOverride?.primary && modelStrings.length > 0) {
+    if (includeDefaultModelFallback && modelChainOverride?.primary && modelStrings.length > 0) {
       const defaults = this.gatewayConfig?.agents?.defaults?.model;
       const defaultStrings = [
         ...typeof defaults?.primary === "string" ? [defaults.primary] : [],
@@ -584,7 +601,18 @@ var FallbackLlmClient = class {
       max_output_tokens: Math.max(0, Math.floor(options.maxTokens ?? 4096)),
       ...buildChatCompletionTemperature(modelId, options.temperature ?? 0.3, {
         assumeOpenAI: shouldAssumeOpenAiChatCompletions(config.baseUrl)
-      })
+      }),
+      ...options.store === void 0 ? {} : { store: options.store },
+      ...options.responsesJsonSchema ? {
+        text: {
+          format: {
+            type: "json_schema",
+            name: options.responsesJsonSchema.name,
+            strict: true,
+            schema: options.responsesJsonSchema.schema
+          }
+        }
+      } : {}
     };
     if (instructions.length > 0) {
       body.instructions = instructions;
@@ -708,4 +736,4 @@ export {
   fallbackLlmRuntimeContextFromConfig,
   FallbackLlmClient
 };
-//# sourceMappingURL=chunk-C23BYTJV.js.map
+//# sourceMappingURL=chunk-UW5NPZJ2.js.map