@remnic/core 9.54.7 → 9.55.0

package/dist/{chunk-2NLLXCJG.js → chunk-BXLOS5AJ.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-765K3SAT.js";
 import {
   encryptCapsuleFile
-} from "./chunk-X7Y7WX73.js";
+} from "./chunk-DQEMWVMT.js";
 import {
   computeTransferOutputRel,
   isTransferPathExcluded
@@ -109,4 +109,4 @@ async function enforceRetention(outDirAbs, retentionDays) {
 export {
   backupMemoryDir
 };
-//# sourceMappingURL=chunk-2NLLXCJG.js.map
+//# sourceMappingURL=chunk-BXLOS5AJ.js.map

package/dist/{chunk-I3MSGFGD.js → chunk-CKSEJD7K.js}

@@ -3,7 +3,7 @@ import {
   getOperation,
   operationRequiresAuthorizedNamespace,
   operationUsesPrincipalNamespace
-} from "./chunk-D3LBIUWV.js";
+} from "./chunk-FK7T55BA.js";
 import {
   assertOperationAuthorizationAllowed
 } from "./chunk-MZWSOLMT.js";
@@ -60,4 +60,4 @@ export {
   authorizationProbeNamespaces,
   authorizationProbeRequiresPrincipalNamespace
 };
-//# sourceMappingURL=chunk-I3MSGFGD.js.map
+//# sourceMappingURL=chunk-CKSEJD7K.js.map

package/dist/{chunk-46SZBVDS.js → chunk-CME347TM.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-KJTKLXTH.js";
 import {
   StorageManager
-} from "./chunk-M4YHAODQ.js";
+} from "./chunk-BWJMBJCY.js";
 import {
   copyExistingFileToBackup,
   writeFileAtomically
@@ -260,4 +260,4 @@ export {
   backupExistingLedger,
   rebuildMemoryLifecycleLedger
 };
-//# sourceMappingURL=chunk-46SZBVDS.js.map
+//# sourceMappingURL=chunk-CME347TM.js.map

package/dist/{chunk-BGLY7EEM.js → chunk-CMRUIKVA.js}

@@ -2,13 +2,13 @@ import {
   canReadNamespace,
   canWriteNamespace,
   defaultNamespaceForPrincipal
-} from "./chunk-3GD2HFR6.js";
+} from "./chunk-IGWVMA4Y.js";
 import {
   isSafeRouteNamespace
 } from "./chunk-U3PN77QT.js";
 import {
   resolveNamespaceCapabilities
-} from "./chunk-2XRE6FLM.js";
+} from "./chunk-JUOZ62Y7.js";
 import {
   combineNamespaces,
   stableHash
@@ -322,4 +322,4 @@ export {
   resolveScopeProfilePlan,
   expandScopeProfileReadNamespaces
 };
-//# sourceMappingURL=chunk-BGLY7EEM.js.map
+//# sourceMappingURL=chunk-CMRUIKVA.js.map

package/dist/{chunk-HGJ6NJ4E.js → chunk-D4LVHPOA.js}

@@ -11,7 +11,7 @@ import {
 } from "./chunk-NOB2T2FC.js";
 import {
   parseConfig
-} from "./chunk-PG4QBPVG.js";
+} from "./chunk-3VFVQDZO.js";
 import {
   resolveObjectiveStateStoreDir,
   validateObjectiveStateSnapshot
@@ -268,4 +268,4 @@ export {
   recordResumeBundle,
   getResumeBundleStatus
 };
-//# sourceMappingURL=chunk-HGJ6NJ4E.js.map
+//# sourceMappingURL=chunk-D4LVHPOA.js.map

package/dist/{chunk-YK6BDDHP.js → chunk-DFEODULB.js}

@@ -6,7 +6,7 @@ import {
   resolveLocalLlmCapabilities,
   resolveMemoryLifecycleCapabilities,
   resolvePipelineProcessingCapabilities
-} from "./chunk-2XRE6FLM.js";
+} from "./chunk-JUOZ62Y7.js";
 import {
   readEnvVar
 } from "./chunk-JUC24CTX.js";
@@ -515,4 +515,4 @@ export {
   EmbeddingProviderUnavailableError,
   EmbeddingFallback
 };
-//# sourceMappingURL=chunk-YK6BDDHP.js.map
+//# sourceMappingURL=chunk-DFEODULB.js.map

package/dist/{chunk-X7Y7WX73.js → chunk-DQEMWVMT.js}

@@ -246,4 +246,4 @@ export {
   decryptCapsuleFile,
   decryptCapsuleFileInMemory
 };
-//# sourceMappingURL=chunk-X7Y7WX73.js.map
+//# sourceMappingURL=chunk-DQEMWVMT.js.map

package/dist/{chunk-W6FNX2LP.js → chunk-E57E5SCS.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-B7RWBZXW.js";
 import {
   resolveCausalTrajectoryStoreDir
-} from "./chunk-AHZOMHWN.js";
+} from "./chunk-HXXGZ4KV.js";
 import {
   normalizeRecallTokens
 } from "./chunk-ZBJMUXZH.js";
@@ -339,4 +339,4 @@ export {
   scoreStitchCandidate,
   stitchCausalChain
 };
-//# sourceMappingURL=chunk-W6FNX2LP.js.map
+//# sourceMappingURL=chunk-E57E5SCS.js.map

package/dist/{chunk-M23RF3LJ.js → chunk-ER4BLWI6.js}

@@ -1,6 +1,6 @@
 import {
   resolveConversationContextCapabilities
-} from "./chunk-2XRE6FLM.js";
+} from "./chunk-JUOZ62Y7.js";
 import {
   expandTildePath
 } from "./chunk-EYIEWJNI.js";
@@ -704,4 +704,4 @@ export {
   resolveSharedContextDir,
   SharedContextManager
 };
-//# sourceMappingURL=chunk-M23RF3LJ.js.map
+//# sourceMappingURL=chunk-ER4BLWI6.js.map

package/dist/{chunk-QZLDRQ4I.js → chunk-F7M36OG2.js}

@@ -15,21 +15,21 @@ import {
 } from "./chunk-VYISFWVX.js";
 import {
   EmbedHelper
-} from "./chunk-GWFSVJ4P.js";
+} from "./chunk-6KTXE6A3.js";
 import {
   createConversationIndexBackend
-} from "./chunk-LEPOP46W.js";
+} from "./chunk-227UFSEQ.js";
 import {
   FaissConversationIndexAdapter
 } from "./chunk-ET356KSB.js";
 import {
   QmdClient
-} from "./chunk-QCECHYZL.js";
+} from "./chunk-RVO6TCTU.js";
 import {
   resolveIndexingCapabilities,
   resolvePipelineProcessingCapabilities,
   resolveQmdCapabilities
-} from "./chunk-2XRE6FLM.js";
+} from "./chunk-JUOZ62Y7.js";
 import {
   log
 } from "./chunk-3WCASNQZ.js";
@@ -178,4 +178,4 @@ export {
   createConversationSearchBackend,
   createConversationIndexRuntime
 };
-//# sourceMappingURL=chunk-QZLDRQ4I.js.map
+//# sourceMappingURL=chunk-F7M36OG2.js.map

package/dist/{chunk-D3LBIUWV.js → chunk-FK7T55BA.js}

@@ -8,10 +8,16 @@ import {
 } from "./chunk-GDB4J2H3.js";
 import {
   importCapsule
-} from "./chunk-QYN5PXDZ.js";
+} from "./chunk-PPUTUOC3.js";
 import {
   WriteQuarantineStore
 } from "./chunk-PJSK6OJM.js";
+import {
+  trustResultFor
+} from "./chunk-GNVZQ5JN.js";
+import {
+  renderEpistemicHedge
+} from "./chunk-YN2UN7N3.js";
 import {
   getTrustZoneStoreStatus,
   isTrustZoneName,
@@ -21,37 +27,24 @@ import {
   seedTrustZoneDemoDataset,
   summarizeTrustZonePromotionReadiness
 } from "./chunk-KQS72GCR.js";
-import {
-  trustResultFor
-} from "./chunk-GNVZQ5JN.js";
-import {
-  renderEpistemicHedge
-} from "./chunk-YN2UN7N3.js";
 import {
   planSessionTranscriptMigration
 } from "./chunk-P5FPO2BR.js";
+import {
+  decideDisclosureEscalation
+} from "./chunk-H7XKCNR6.js";
 import {
   toRecallExplainJson
-} from "./chunk-H7NAZ3UB.js";
+} from "./chunk-U7BMN33M.js";
 import {
   estimateRecallTokens
-} from "./chunk-MK5VEWCR.js";
-import {
-  boundRecallContextComposition,
-  composeRecallContext
-} from "./chunk-AHVEHR6K.js";
-import {
-  decideDisclosureEscalation
-} from "./chunk-H7XKCNR6.js";
+} from "./chunk-QKPDN325.js";
 import {
   readAggregateExtractionWatermark
-} from "./chunk-JYG4OLWH.js";
+} from "./chunk-S6AH7WSF.js";
 import {
   ReplicaDivergenceMonitor
 } from "./chunk-CVILPI77.js";
-import {
-  recordMemoryOutcome
-} from "./chunk-EIR5VLIH.js";
 import {
   recordObjectiveStateSnapshotsFromObservedMessages
 } from "./chunk-2HIJHXB3.js";
@@ -59,35 +52,43 @@ import {
   objectiveStateStoreOverrideForNamespace
 } from "./chunk-HTP6XRUI.js";
 import {
-  buildGraphSnapshot
-} from "./chunk-OUKBMQ2O.js";
+  recordMemoryOutcome
+} from "./chunk-EIR5VLIH.js";
 import {
-  REDACTION_RULES_SUBDIR
-} from "./chunk-LTHVM4XN.js";
+  buildGraphSnapshot
+} from "./chunk-PD66CVSD.js";
 import {
   wrapWorkLayerContext
 } from "./chunk-EI6V5UXY.js";
 import {
   CONNECTOR_LABEL_MAX_LENGTH
-} from "./chunk-HAEU3ZW7.js";
+} from "./chunk-4OW2T32G.js";
 import {
   isValidConnectorId
-} from "./chunk-RZRUV6N2.js";
+} from "./chunk-ANMIOQPU.js";
 import {
   formatProfileTraceAscii
 } from "./chunk-NLE6TSLG.js";
 import {
   LocalLlmClient
-} from "./chunk-KFBOPMF6.js";
+} from "./chunk-5ZIWRMZM.js";
 import {
   buildProcedurePersistBody,
   normalizeProcedureSteps
 } from "./chunk-QDW3E4RD.js";
+import {
+  REDACTION_RULES_SUBDIR
+} from "./chunk-LTHVM4XN.js";
 import {
   persistExplicitCapture,
   queueExplicitCaptureForReview,
   validateExplicitCaptureInput
-} from "./chunk-SMNYAMJD.js";
+} from "./chunk-JKL53MOY.js";
+import {
+  boundRecallContextComposition,
+  composeRecallContext,
+  renderAuthorityBoundContent
+} from "./chunk-7ZNJN5WZ.js";
 import {
   lcmEvidenceIdentity
 } from "./chunk-C37ZRXX7.js";
@@ -98,43 +99,49 @@ import {
   listMemoryGovernanceRuns,
   readMemoryGovernanceRunArtifact,
   runMemoryGovernance
-} from "./chunk-GJ776BC2.js";
+} from "./chunk-7NSC4IVA.js";
 import {
   CorpusWatermarkCache,
   computeServiceCorpusCensus
-} from "./chunk-HBUFQRIM.js";
+} from "./chunk-QZR3WT3L.js";
 import {
   CrossNamespaceBudget,
   toBudgetWarning
 } from "./chunk-UFGFMWAD.js";
+import {
+  ExtractionDeadlineError,
+  isActivityDigestPath,
+  isArtifactMemoryPath,
+  isMeetingRecordPath
+} from "./chunk-UTDMY476.js";
 import {
   defaultCapsulesDir
 } from "./chunk-ZY2MNJR6.js";
 import {
   filterTrajectoriesByLookbackDays,
   readCausalTrajectoryRecords
-} from "./chunk-AHZOMHWN.js";
+} from "./chunk-HXXGZ4KV.js";
 import {
   FileCalendarSource,
   buildBriefing,
   enqueuePassiveCorrectionNotification,
   parseBriefingFocus,
   parseBriefingWindow
-} from "./chunk-RUNORG2P.js";
+} from "./chunk-TF3LMM5E.js";
 import {
   parseEntityFile,
   parseFrontmatter,
   qmdCollectionPathParts,
   qmdResultPathCandidates,
   selfDeps
-} from "./chunk-M4YHAODQ.js";
+} from "./chunk-BWJMBJCY.js";
 import {
   namespaceCollectionName
-} from "./chunk-TO7ZTWJW.js";
+} from "./chunk-ION47U3Z.js";
 import {
   DEFAULT_RECALL_DISCLOSURE,
   isRecallDisclosure
-} from "./chunk-76JJSXK7.js";
+} from "./chunk-5QHDXMXP.js";
 import {
   normalizeProjectionPreview,
   normalizeProjectionTags
@@ -145,7 +152,7 @@ import {
   buildObserveRequestFingerprint,
   composeMemoryEnvelope,
   isMemoryCategory
-} from "./chunk-NSVDUN76.js";
+} from "./chunk-LCU5R6TQ.js";
 import {
   applyTagFilter,
   normalizeTags,
@@ -163,12 +170,6 @@ import {
 import {
   extractJsonCandidates
 } from "./chunk-RGMVMVMF.js";
-import {
-  ExtractionDeadlineError,
-  isActivityDigestPath,
-  isArtifactMemoryPath,
-  isMeetingRecordPath
-} from "./chunk-XZHE2DEN.js";
 import {
   ExtractionLivenessWarnThrottle,
   computeExtractionLivenessStatus
@@ -178,7 +179,7 @@ import {
 } from "./chunk-JV3C2MNQ.js";
 import {
   exportCapsule
-} from "./chunk-IPLYGWQF.js";
+} from "./chunk-VDX2J7OX.js";
 import {
   evaluateActionConfidence
 } from "./chunk-Z2YFLXHU.js";
@@ -200,25 +201,29 @@ import {
   memorySearchThroughScope,
   mergeMemorySearchDefaultFallback,
   resolveMemorySearchDefaultFallback
-} from "./chunk-KM55SMLG.js";
+} from "./chunk-4KM3V6VS.js";
 import {
   PendingObserveExtractionTracker,
   pendingObserveScopeHint
 } from "./chunk-LNEWDF2A.js";
 import {
   createOfflineSyncManifestStream
-} from "./chunk-OCIP6YMD.js";
+} from "./chunk-IXGQP4RZ.js";
 import {
   offlineSyncStorageForSnapshot
-} from "./chunk-NQMSEB5D.js";
+} from "./chunk-X5OIPQME.js";
 import {
   resolveScopePlan,
   resolveScopedWritableNamespaceValue,
   resolveWritableNamespaceValue
-} from "./chunk-6QPI2ITJ.js";
+} from "./chunk-TVKWT2CY.js";
 import {
   writeFileAtomically
 } from "./chunk-AW4QUFQF.js";
+import {
+  expandScopeProfileReadNamespaces,
+  resolveScopeProfilePlan
+} from "./chunk-CMRUIKVA.js";
 import {
   inferMemoryStatus,
   toMemoryPathRel
@@ -229,17 +234,13 @@ import {
 import {
   displayErrorDetail
 } from "./chunk-RL6NEVXT.js";
-import {
-  serializeMutations,
-  withHeldFileLock
-} from "./chunk-FFAZ2XFU.js";
 import {
   computeContentHash
 } from "./chunk-5FVVY2EB.js";
 import {
-  expandScopeProfileReadNamespaces,
-  resolveScopeProfilePlan
-} from "./chunk-BGLY7EEM.js";
+  serializeMutations,
+  withHeldFileLock
+} from "./chunk-FFAZ2XFU.js";
 import {
   SUPPORT_PASSPORT_ATTRIBUTE_KEYS,
   SUPPORT_PASSPORT_CARD_TAG,
@@ -309,7 +310,7 @@ import {
   defaultNamespaceForPrincipal,
   recallNamespacesForPrincipal,
   resolvePrincipal
-} from "./chunk-3GD2HFR6.js";
+} from "./chunk-IGWVMA4Y.js";
 import {
   resolveAccessSetupCapabilities,
   resolveCompressionCapabilities,
@@ -325,7 +326,7 @@ import {
   resolveRecallAuxiliaryCapabilities,
   resolveRecallEnhancementCapabilities,
   resolveSecurityCapabilities
-} from "./chunk-2XRE6FLM.js";
+} from "./chunk-JUOZ62Y7.js";
 import {
   AccessIdempotencyStore,
   hashAccessIdempotencyPayload
@@ -8769,8 +8770,10 @@ function displaySafeRecallSnapshot(snapshot, memoryDir) {
 var RecallResultFormatter = class {
   constructor(config) {
     this.config = config;
+    this.originAuthorityEnabled = resolveSecurityCapabilities(config).originAuthority;
   }
   config;
+  originAuthorityEnabled;
   // ── QMD results (memory handles + epistemic hedge) ──────────────────────
   formatQmdResultEntries(title, results, sessionKey, trustByPath) {
     const handleByIndex = buildHandleIndexForResults(
@@ -8780,7 +8783,15 @@ var RecallResultFormatter = class {
     const renderHedge = this.config.trustScoreEpistemicRendering && trustByPath !== null && trustByPath !== void 0;
     const hedgeMap = renderHedge ? trustByPath : null;
     const entries = results.map((r, i) => {
-      const snippet = r.snippet ? r.snippet.slice(0, 500).replace(/\n/g, " ") : "(no preview)";
+      const snippetBody = r.snippet ? r.snippet.slice(0, 500).replace(/\n/g, " ") : "(no preview)";
+      const snippet = renderAuthorityBoundContent(
+        snippetBody,
+        r.origin,
+        {
+          enabled: this.originAuthorityEnabled,
+          untrustedOrigins: this.config.untrustedOrigins
+        }
+      );
       const displayPath = displayResultPath(r.path, this.config.memoryDir, r.namespace);
       const source = typeof r.line === "number" ? `${displayPath}:${r.line}` : displayPath;
       const head = `[${i + 1}] ${source} (score: ${r.score.toFixed(3)})
@@ -8887,9 +8898,13 @@ ${lines.join("\n\n")}`;
           `${node.kind}/${node.abstractionLevel}`,
           node.sessionKey
         ].join(" | ");
+        const bodyParts = this.originAuthorityEnabled ? [renderAuthorityBoundContent(
+          [node.title, node.summary].filter(Boolean).join("\n"),
+          void 0,
+          { enabled: true, untrustedOrigins: this.config.untrustedOrigins }
+        )] : [node.title, node.summary];
         const details = [
-          node.title,
-          node.summary,
+          ...bodyParts,
           `scores: node=${nodeScore.toFixed(1)} anchor=${anchorScore.toFixed(1)}`
         ];
         if (matchedAnchors.length > 0) {
@@ -8967,7 +8982,11 @@ ${lines.join("\n\n")}`;
           verificationStatus,
           `confidence:${effectiveConfidence.toFixed(2)}`
         ].join(" | ");
-        const details = [rule.content, `source memory: ${sourceMemoryId}`];
+        const ruleBody = renderAuthorityBoundContent(rule.content, rule.frontmatter.origin, {
+          enabled: this.originAuthorityEnabled,
+          untrustedOrigins: this.config.untrustedOrigins
+        });
+        const details = [ruleBody, `source memory: ${sourceMemoryId}`];
         if (matchedFields.length > 0) {
           details.push(`matched: ${matchedFields.join(", ")}`);
         }
@@ -17653,4 +17672,4 @@ export {
   EngramAccessService,
   AccessAdminOpsSurface
 };
-//# sourceMappingURL=chunk-D3LBIUWV.js.map
+//# sourceMappingURL=chunk-FK7T55BA.js.map