@remnic/core 9.54.7 → 9.55.0

package/dist/{chunk-W5ZKPI34.js → chunk-IFFW25NG.js}

@@ -6,41 +6,44 @@ import {
   loadSyncState,
   syncWearableSource,
   wearableSourceLabel
-} from "./chunk-L6Z5OAS4.js";
+} from "./chunk-RL3EGL7A.js";
+import {
+  CompressionGuidelineCoordinator
+} from "./chunk-UXREWVW4.js";
 import {
   ActivityStore,
   MaintenanceScheduler
-} from "./chunk-K26NWEOC.js";
+} from "./chunk-QSDPVZPD.js";
 import {
   runPeerProfileReasoner
 } from "./chunk-I74SUMNI.js";
 import {
   migrateFromEngram
 } from "./chunk-7HYPN2GC.js";
-import {
-  CompressionGuidelineCoordinator
-} from "./chunk-6LKEUCEM.js";
 import {
   LcmEngine
 } from "./chunk-Z54EM5YZ.js";
-import {
-  chunkTranscriptEntries
-} from "./chunk-TECVW3JP.js";
 import {
   cleanupConversationChunks
 } from "./chunk-C5JF6EZ7.js";
 import {
   CompoundingEngine,
   defaultTierMigrationCycleBudget
-} from "./chunk-ZRZVLB7O.js";
+} from "./chunk-HYVBJLEK.js";
 import {
   SharedContextManager
-} from "./chunk-M23RF3LJ.js";
+} from "./chunk-ER4BLWI6.js";
+import {
+  chunkTranscriptEntries
+} from "./chunk-TECVW3JP.js";
 import {
   applyUtilityPromotionRuntimePolicy,
   applyUtilityRankingRuntimeDelta,
   loadUtilityRuntimeValues
 } from "./chunk-SEF4IOFE.js";
+import {
+  CODEX_THREAD_KEY_PREFIX
+} from "./chunk-4EX5WZ4M.js";
 import {
   TierMigrationExecutor
 } from "./chunk-YRFAYOFQ.js";
@@ -53,22 +56,23 @@ import {
 import {
   extractTopics
 } from "./chunk-UHGBNIOS.js";
-import {
-  buildTemporalTimelineRecallSection
-} from "./chunk-I6WYQSX4.js";
-import {
-  CODEX_THREAD_KEY_PREFIX
-} from "./chunk-4EX5WZ4M.js";
-import {
-  HourlySummarizer
-} from "./chunk-2FKEIPIT.js";
 import {
   buildTargetedFactRecallSection,
   shouldRecallTargetedFactEvidence
 } from "./chunk-T67LUYCR.js";
+import {
+  buildTemporalTimelineRecallSection
+} from "./chunk-2NKY7OC6.js";
+import {
+  HourlySummarizer
+} from "./chunk-JOA4Q765.js";
 import {
   SessionObserverState
 } from "./chunk-QFN4U7AG.js";
+import {
+  buildResponseGuidanceRecallSection,
+  shouldRecallResponseGuidance
+} from "./chunk-6TCXIRP5.js";
 import {
   mergeWithAgentResults,
   runDirectAgent,
@@ -93,6 +97,9 @@ import {
 import {
   applyRuntimeRetrievalPolicy
 } from "./chunk-5IZL4DCV.js";
+import {
+  findUnresolvedEntityRefs
+} from "./chunk-X7XN6YU4.js";
 import {
   RelevanceStore
 } from "./chunk-KATEWTQJ.js";
@@ -101,19 +108,12 @@ import {
   reorderByRankedKeys,
   rerankLocalOrNoop
 } from "./chunk-LUDXM7MD.js";
-import {
-  buildResponseGuidanceRecallSection,
-  shouldRecallResponseGuidance
-} from "./chunk-6TCXIRP5.js";
 import {
   LastRecallStore,
   RecallHandleHistoryStore,
   TierMigrationStatusStore,
   clampGraphRecallExpandedEntries
 } from "./chunk-PRDJMOST.js";
-import {
-  findUnresolvedEntityRefs
-} from "./chunk-X7XN6YU4.js";
 import {
   dedupeResultsByNamespace,
   hasMemoryForResult,
@@ -144,12 +144,6 @@ import {
 import {
   runLiveConnectorsOnce
 } from "./chunk-HTIIXNJQ.js";
-import {
-  classifyMemoryKind
-} from "./chunk-YAZNBMNF.js";
-import {
-  scoreEvidencePathDetail
-} from "./chunk-XXSOVESA.js";
 import {
   deriveHarmonicRecords,
   harmonicEntityReferenceMatches,
@@ -158,18 +152,24 @@ import {
   persistHarmonicRecords
 } from "./chunk-5WQMORU5.js";
 import {
-  buildFocusedListRecallSection,
-  shouldRecallFocusedListEvidence
-} from "./chunk-OH7QLI6W.js";
+  classifyMemoryKind
+} from "./chunk-YAZNBMNF.js";
+import {
+  scoreEvidencePathDetail
+} from "./chunk-XXSOVESA.js";
 import {
   ExtractionEngine
-} from "./chunk-GN3WRFJY.js";
+} from "./chunk-7PKNOXYB.js";
 import {
   parseMemoryActionEligibilityContext
 } from "./chunk-WFLBP5GC.js";
 import {
   ModelRegistry
 } from "./chunk-WLZYGLJ4.js";
+import {
+  buildFocusedListRecallSection,
+  shouldRecallFocusedListEvidence
+} from "./chunk-OH7QLI6W.js";
 import {
   recordJudgeTrainingPair
 } from "./chunk-PWFCHOB3.js";
@@ -180,6 +180,10 @@ import {
   judgeFactDurability,
   validateProcedureExtraction
 } from "./chunk-TWTUGCTY.js";
+import {
+  pickFactEventTimeAnchor,
+  resolveFactEventTime
+} from "./chunk-IAIPNEHD.js";
 import {
   buildExplicitCueRecallSection
 } from "./chunk-TVIVY7KU.js";
@@ -187,33 +191,30 @@ import {
   buildEntityRecallSection,
   entityRecentTranscriptLookbackHours,
   readRecentEntityTranscriptEntries
-} from "./chunk-FPLM2TKD.js";
+} from "./chunk-6P2NUVM5.js";
 import {
   buildEventOrderRecallSection,
   shouldRecallEventOrderEvidence
 } from "./chunk-DEOYTFA6.js";
 import {
-  pickFactEventTimeAnchor,
-  resolveFactEventTime
-} from "./chunk-IAIPNEHD.js";
+  formatDaySummaryMemories
+} from "./chunk-BPWZDHFM.js";
 import {
   tryDirectAnswer
 } from "./chunk-CSOYVTRX.js";
 import {
   EmbeddingFallback
-} from "./chunk-YK6BDDHP.js";
+} from "./chunk-DFEODULB.js";
 import {
   refreshConvergedNamespaces
-} from "./chunk-IKP5OYQQ.js";
-import {
-  formatDaySummaryMemories
-} from "./chunk-RPSYDM6C.js";
+} from "./chunk-VWP5DEHU.js";
 import {
   builtInConnectorPackageSpecifier,
   ensureBuiltInWearableConnectors,
   getWearableConnector,
-  listWearableConnectors
-} from "./chunk-RZQ6W2W4.js";
+  listWearableConnectors,
+  screenCandidateFact
+} from "./chunk-4THNU7OF.js";
 import {
   RoutingRulesStore
 } from "./chunk-XL24QQ63.js";
@@ -223,14 +224,14 @@ import {
 import {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
-} from "./chunk-5FD7JMTX.js";
+} from "./chunk-FONW766A.js";
 import {
   ThreadingManager
 } from "./chunk-OJP3N7UK.js";
 import {
   compareVerifiedSemanticRuleResults,
   searchVerifiedSemanticRules
-} from "./chunk-FWX7W5PM.js";
+} from "./chunk-TAMY4NKO.js";
 import {
   searchWorkProductLedgerEntries
 } from "./chunk-WT6UL3UA.js";
@@ -243,14 +244,14 @@ import {
 import {
   runNamespaceMaintenanceFanout,
   summarizeNamespaceMaintenanceHealth
-} from "./chunk-ZUKIUXHQ.js";
+} from "./chunk-TFXYQNBH.js";
 import {
   NamespaceCatalog,
   planNamespaceMaintenance
-} from "./chunk-FFRTNF3L.js";
+} from "./chunk-T6EQPZ6E.js";
 import {
   searchHarmonicRetrieval
-} from "./chunk-43SEBY2M.js";
+} from "./chunk-4QFCAKNM.js";
 import {
   isAboveImportanceThreshold,
   scoreImportance
@@ -273,6 +274,9 @@ import {
 import {
   applyCommitmentLedgerLifecycle
 } from "./chunk-NOB2T2FC.js";
+import {
+  SmartBuffer
+} from "./chunk-N655QIA2.js";
 import {
   buildConsolidationPrompt,
   buildExtensionsBlockForConsolidation,
@@ -282,10 +286,13 @@ import {
   materializeAfterSemanticConsolidation,
   parseConsolidationResponse,
   parseOperatorAwareConsolidationResponse
-} from "./chunk-UKYS3NU5.js";
+} from "./chunk-ONCWJBWV.js";
 import {
   BootstrapEngine
 } from "./chunk-MYVPLJOO.js";
+import {
+  isDisagreementPrompt
+} from "./chunk-H3FZVNRN.js";
 import {
   BoxBuilder
 } from "./chunk-B7RWBZXW.js";
@@ -295,15 +302,9 @@ import {
 import {
   chunkContent
 } from "./chunk-UQ7RN5HK.js";
-import {
-  SmartBuffer
-} from "./chunk-UCTS3DDH.js";
-import {
-  isDisagreementPrompt
-} from "./chunk-H3FZVNRN.js";
 import {
   detectMeetings
-} from "./chunk-PG4QBPVG.js";
+} from "./chunk-3VFVQDZO.js";
 import {
   compileCorrectionRule,
   correctionsFilePath,
@@ -328,7 +329,7 @@ import {
 } from "./chunk-KD3QD3A5.js";
 import {
   MeetingsInputError
-} from "./chunk-PT54WISF.js";
+} from "./chunk-HQ2VGCGP.js";
 import {
   WearablesInputError,
   describeErrorForOperator
@@ -349,17 +350,13 @@ import {
   filterRecallCandidates,
   isGenericRecallExcludedPath,
   isTopLevelArchivePath
-} from "./chunk-D3LBIUWV.js";
+} from "./chunk-FK7T55BA.js";
 import {
   importCapsule
-} from "./chunk-QYN5PXDZ.js";
+} from "./chunk-PPUTUOC3.js";
 import {
   isCodingGraphInstalled
 } from "./chunk-VQ7B2Q6M.js";
-import {
-  listTrustZoneRecords,
-  searchTrustZoneRecords
-} from "./chunk-KQS72GCR.js";
 import {
   applyTrustScoreStage,
   buildTrustSignalsForRerank,
@@ -368,47 +365,99 @@ import {
   trustResultKey
 } from "./chunk-GNVZQ5JN.js";
 import {
-  buildXraySnapshot
-} from "./chunk-MK5VEWCR.js";
+  listTrustZoneRecords,
+  searchTrustZoneRecords
+} from "./chunk-KQS72GCR.js";
 import {
-  boundRecallContextComposition,
-  composeRecallContext,
-  contextBudgetForFooter,
-  formatCuriosityFooter,
-  selectCuriosityQuestion
-} from "./chunk-AHVEHR6K.js";
+  buildXraySnapshot
+} from "./chunk-QKPDN325.js";
 import {
   objectiveStateStoreOverrideForNamespace,
   searchObjectiveStateSnapshots
 } from "./chunk-HTP6XRUI.js";
-import {
-  contentMatchesRedactionRules,
-  loadRedactionRules
-} from "./chunk-LTHVM4XN.js";
 import {
   ProfilingCollector
 } from "./chunk-NLE6TSLG.js";
 import {
   LocalLlmClient
-} from "./chunk-KFBOPMF6.js";
+} from "./chunk-5ZIWRMZM.js";
 import {
   buildProcedurePersistBody
 } from "./chunk-QDW3E4RD.js";
+import {
+  contentMatchesRedactionRules,
+  loadRedactionRules
+} from "./chunk-LTHVM4XN.js";
 import {
   shouldSkipImplicitExtraction
-} from "./chunk-SMNYAMJD.js";
+} from "./chunk-JKL53MOY.js";
 import {
-  NamespaceStorageRouter
-} from "./chunk-UPLZNJKN.js";
+  boundRecallContextComposition,
+  composeRecallContext,
+  contextBudgetForFooter,
+  formatCuriosityFooter,
+  renderAuthorityBoundContent,
+  selectCuriosityQuestion
+} from "./chunk-7ZNJN5WZ.js";
 import {
-  searchCausalTrajectories
-} from "./chunk-AHZOMHWN.js";
+  NamespaceStorageRouter
+} from "./chunk-JFPZEWY3.js";
 import {
   GraphIndex
-} from "./chunk-BIJAWZYW.js";
+} from "./chunk-YMOPYG3K.js";
+import {
+  BulkImportBatchPartialFailureError,
+  COMPACTION_SIGNAL_MAX_AGE_MS,
+  ExtractionDeadlineError,
+  ExtractionRunCoordinator,
+  abortRecallError,
+  appendMemoryToGraphContext,
+  applyQueryAwareCandidateFilter,
+  buildMemoryPathById,
+  buildQmdIntentHint,
+  classifyExtractionOrigin,
+  computeArtifactCandidateFetchLimit,
+  computeArtifactRecallLimit,
+  computeQmdHybridFetchLimit,
+  defaultWorkspaceDir,
+  filterHourlySummaryMarkdownForLocalDay,
+  formatDateInTimeZone,
+  isActivityDigestPath,
+  lifecycleRecallScoreAdjustment,
+  mapRecallSourceToXrayServedBy,
+  mergeArtifactRecallCandidates,
+  normalizeIanaTimeZone,
+  parseFiniteDate,
+  parseGraphRecallRankedResults,
+  parseMemoryIntentSnapshot,
+  parseQmdRecallResults,
+  qmdStartupCollectionCheckWithTimeout,
+  raceRecallAbort,
+  resolvePersistedMemoryRelativePath,
+  resolveRecallModeDecision,
+  resolveRecallModeDecisionAsync,
+  resolveRecentThreadMemoryPaths,
+  sanitizeSessionKeyForFilename,
+  shouldFilterLifecycleRecallCandidate,
+  splitTurnsBySourceValidAt,
+  summarizeGraphShadowComparison,
+  targetSourceValidAtSortMs,
+  throwIfRecallAborted,
+  tokenizeRecallQuery,
+  utcDateKeysForLocalDay
+} from "./chunk-UTDMY476.js";
+import {
+  inferIntentFromText,
+  intentCompatibilityScore,
+  isTaskInitiationIntent,
+  planRecallMode
+} from "./chunk-PD6O7AXF.js";
+import {
+  searchCausalTrajectories
+} from "./chunk-HXXGZ4KV.js";
 import {
   buildChainFollowupGenerator
-} from "./chunk-RUNORG2P.js";
+} from "./chunk-TF3LMM5E.js";
 import {
   QmdResultResolver,
   StorageManager,
@@ -427,10 +476,7 @@ import {
   reconstructFusionInputs,
   selfDeps,
   serializeFusionDay
-} from "./chunk-M4YHAODQ.js";
-import {
-  buildRetiredFactTombstoneInputs
-} from "./chunk-MLPTFODV.js";
+} from "./chunk-BWJMBJCY.js";
 import {
   bodyIsEscaped,
   decodeTranscriptBody,
@@ -441,15 +487,18 @@ import {
   saveSpeakerRegistry,
   speakerRegistryKey
 } from "./chunk-UHVXE24Y.js";
+import {
+  buildRetiredFactTombstoneInputs
+} from "./chunk-KHQ57QLJ.js";
 import {
   NamespaceSearchRouter,
   namespaceCollectionName
-} from "./chunk-TO7ZTWJW.js";
+} from "./chunk-ION47U3Z.js";
 import {
   createConversationIndexRuntime,
   createSearchBackend,
   isSearchBackendEnabled
-} from "./chunk-QZLDRQ4I.js";
+} from "./chunk-F7M36OG2.js";
 import {
   NoopSearchBackend
 } from "./chunk-CYEPCZN5.js";
@@ -463,7 +512,7 @@ import {
 } from "./chunk-S2V7RUCL.js";
 import {
   confidenceTier
-} from "./chunk-76JJSXK7.js";
+} from "./chunk-5QHDXMXP.js";
 import {
   lintWorkspaceFiles,
   rotateMarkdownFileToArchive
@@ -477,7 +526,7 @@ import {
   TAG_LIMITS,
   composeMemoryEnvelope,
   isMemoryCategory
-} from "./chunk-NSVDUN76.js";
+} from "./chunk-LCU5R6TQ.js";
 import {
   normalizeTags
 } from "./chunk-BT7NVCML.js";
@@ -510,62 +559,16 @@ import {
   isValidAsOf,
   isValidityExpiredNow
 } from "./chunk-6CIAGZ6X.js";
-import {
-  FallbackLlmClient,
-  fallbackLlmRuntimeContextFromConfig,
-  gatewayTaskChainOptions
-} from "./chunk-UW5NPZJ2.js";
-import {
-  BulkImportBatchPartialFailureError,
-  COMPACTION_SIGNAL_MAX_AGE_MS,
-  ExtractionDeadlineError,
-  ExtractionRunCoordinator,
-  abortRecallError,
-  appendMemoryToGraphContext,
-  applyQueryAwareCandidateFilter,
-  buildMemoryPathById,
-  buildQmdIntentHint,
-  computeArtifactCandidateFetchLimit,
-  computeArtifactRecallLimit,
-  computeQmdHybridFetchLimit,
-  defaultWorkspaceDir,
-  filterHourlySummaryMarkdownForLocalDay,
-  formatDateInTimeZone,
-  isActivityDigestPath,
-  lifecycleRecallScoreAdjustment,
-  mapRecallSourceToXrayServedBy,
-  mergeArtifactRecallCandidates,
-  normalizeIanaTimeZone,
-  parseFiniteDate,
-  parseGraphRecallRankedResults,
-  parseMemoryIntentSnapshot,
-  parseQmdRecallResults,
-  qmdStartupCollectionCheckWithTimeout,
-  raceRecallAbort,
-  resolvePersistedMemoryRelativePath,
-  resolveRecallModeDecision,
-  resolveRecallModeDecisionAsync,
-  resolveRecentThreadMemoryPaths,
-  sanitizeSessionKeyForFilename,
-  shouldFilterLifecycleRecallCandidate,
-  splitTurnsBySourceValidAt,
-  summarizeGraphShadowComparison,
-  targetSourceValidAtSortMs,
-  throwIfRecallAborted,
-  tokenizeRecallQuery,
-  utcDateKeysForLocalDay
-} from "./chunk-XZHE2DEN.js";
-import {
-  inferIntentFromText,
-  intentCompatibilityScore,
-  isTaskInitiationIntent,
-  planRecallMode
-} from "./chunk-PD6O7AXF.js";
 import {
   buildQmdRecallCacheKey,
   getCachedQmdRecall,
   setCachedQmdRecall
 } from "./chunk-42JKGUFJ.js";
+import {
+  FallbackLlmClient,
+  fallbackLlmRuntimeContextFromConfig,
+  gatewayTaskChainOptions
+} from "./chunk-UW5NPZJ2.js";
 import {
   assertExternalWikiRootOutsideMemoryDirCanonical
 } from "./chunk-JV3C2MNQ.js";
@@ -576,13 +579,13 @@ import {
   createBoundedCoreSectionRunner,
   createRecallSectionMetricRecorder
 } from "./chunk-4O4TKIXQ.js";
-import {
-  normalizeRecallTokenSet
-} from "./chunk-ZBJMUXZH.js";
 import {
   decideLifecycleTransition,
   resolveLifecycleState
 } from "./chunk-TBBDFYXW.js";
+import {
+  normalizeRecallTokenSet
+} from "./chunk-ZBJMUXZH.js";
 import {
   CAPSULE_ID_PATTERN
 } from "./chunk-WEHSQBFR.js";
@@ -597,7 +600,7 @@ import {
   getConfiguredNamespaces,
   resolveNamespaceFromStorageDir,
   resolveScopePlan
-} from "./chunk-6QPI2ITJ.js";
+} from "./chunk-TVKWT2CY.js";
 import {
   attachCitation,
   hasCitationForTemplate,
@@ -613,7 +616,7 @@ import {
 } from "./chunk-7RJUVTVF.js";
 import {
   ContentHashIndex
-} from "./chunk-CX5SW2EW.js";
+} from "./chunk-NRFU5MVH.js";
 import {
   excludeSupportPassportPrivateMemories,
   isSupportPassportPrivateMemory
@@ -644,7 +647,7 @@ import {
   canReadNamespace,
   defaultNamespaceForPrincipal,
   resolvePrincipal
-} from "./chunk-3GD2HFR6.js";
+} from "./chunk-IGWVMA4Y.js";
 import {
   isSafeRouteNamespace,
   selectRouteRule
@@ -670,7 +673,7 @@ import {
   resolveRecallEnhancementCapabilities,
   resolveSecurityCapabilities,
   resolveUtilityLearningCapabilities
-} from "./chunk-2XRE6FLM.js";
+} from "./chunk-JUOZ62Y7.js";
 import {
   resolveCodingNamespaceOverlay
 } from "./chunk-J2WC5LF4.js";
@@ -1806,12 +1809,14 @@ import { readdir } from "fs/promises";
 import path3 from "path";
 var ConversationIndexCoordinator = class {
   config;
+  originAuthorityEnabled;
   getTranscript;
   getBackend;
   indexDir;
   lastUpdateAtMs = /* @__PURE__ */ new Map();
   constructor(options) {
     this.config = options.config;
+    this.originAuthorityEnabled = resolveSecurityCapabilities(this.config).originAuthority;
     this.getTranscript = options.getTranscript;
     this.getBackend = options.getBackend;
     this.indexDir = options.indexDir;
@@ -1831,10 +1836,18 @@ var ConversationIndexCoordinator = class {
     let used = 0;
     for (const r of results) {
       if (!r?.snippet) continue;
+      const body = renderAuthorityBoundContent(
+        r.snippet.trim(),
+        void 0,
+        {
+          enabled: this.originAuthorityEnabled,
+          untrustedOrigins: this.config.untrustedOrigins
+        }
+      );
       const chunk = `### ${r.path}
 Score: ${r.score.toFixed(3)}
 
-${r.snippet.trim()}
+${body}
 `;
       if (used + chunk.length > maxChars) break;
       lines.push(chunk);
@@ -4425,6 +4438,77 @@ ${texts.map((t, i) => `[${i + 1}] ${t}`).join("\n\n")}`;
   }
 };
 
+// src/orchestration/extraction-injection-gate.ts
+function serializeInjectionScreenCandidate(candidate) {
+  const body = candidate.category === "procedure" ? buildProcedurePersistBody(candidate.content, candidate.procedureSteps) : candidate.content;
+  const attrs = Object.fromEntries(
+    Object.entries(candidate.structuredAttributes ?? {}).flatMap(([key, value]) => {
+      if (typeof value === "string") return [[key, value]];
+      if (typeof value === "number" || typeof value === "boolean") return [[key, String(value)]];
+      return [];
+    })
+  );
+  return Object.keys(attrs).length > 0 ? `${body}
+[Attributes: ${normalizeAttributePairs(attrs)}]` : body;
+}
+function evaluateInjectionScreen(candidate, enabled) {
+  if (!enabled) return { tags: [] };
+  const content = typeof candidate === "string" ? candidate : serializeInjectionScreenCandidate(candidate);
+  const result = screenCandidateFact(content);
+  return {
+    status: result.quarantine === true ? "pending_review" : void 0,
+    tags: result.quarantine === true ? result.findings.map((finding) => `injection-screen:${finding.rule}`) : []
+  };
+}
+function withholdScreenedStrings(values, enabled) {
+  const kept = [];
+  const withheldRules = [];
+  for (const value of values) {
+    if (typeof value !== "string") continue;
+    if (!enabled) {
+      kept.push(value);
+      continue;
+    }
+    const screened = screenCandidateFact(value);
+    if (screened.quarantine) {
+      withheldRules.push(...screened.findings.map((finding) => `injection-screen:${finding.rule}`));
+    } else {
+      kept.push(value);
+    }
+  }
+  return { kept, withheldRules };
+}
+function screenEntityForIndex(entity, enabled) {
+  const record = entity;
+  const name = record?.name;
+  const type = record?.type;
+  if (typeof name !== "string" || !name.trim() || typeof type !== "string" || !type.trim()) return null;
+  const nameScreen = withholdScreenedStrings([name], enabled);
+  const factScreen = withholdScreenedStrings(Array.isArray(record?.facts) ? record.facts : [], enabled);
+  const rawSections = Array.isArray(record?.structuredSections) ? record.structuredSections : void 0;
+  const sectionScreens = enabled && rawSections ? rawSections.map((section) => ({ section, screen: withholdScreenedStrings(section?.facts ?? [], true) })) : void 0;
+  return {
+    name,
+    type,
+    source: typeof record?.source === "string" ? record.source : "extraction",
+    facts: factScreen.kept,
+    ...sectionScreens ? { structuredSections: sectionScreens.map(({ section, screen }) => ({ ...section, facts: screen.kept })) } : rawSections ? { structuredSections: rawSections } : {},
+    withheldRules: [
+      ...nameScreen.withheldRules,
+      ...factScreen.withheldRules,
+      ...(sectionScreens ?? []).flatMap(({ screen }) => screen.withheldRules)
+    ],
+    withheld: nameScreen.withheldRules.length > 0
+  };
+}
+function screenPersistStrings(values, enabled) {
+  const screen = withholdScreenedStrings(values, enabled);
+  return {
+    kept: screen.kept,
+    ...screen.withheldRules.length > 0 ? { warning: `injection screen withheld ${values.length - screen.kept.length} candidate(s) [${screen.withheldRules.join(", ")}]` } : {}
+  };
+}
+
 // src/orchestration/extraction-envelope.ts
 function composeSalvagedExtractionEnvelope(input, ctx) {
   const envelope = composeMemoryEnvelope(input, ctx, { salvage: true });
@@ -4844,6 +4928,7 @@ var ExtractionPersistCoordinator = class {
     );
     const namespacesEnabled = resolveNamespaceCapabilities(this.deps.config).namespaces;
     const sourceConnector = sourceContext?.sourceConnector;
+    const origin = classifyExtractionOrigin(sourceContext);
     const promoteMemoryToProfileTargets = async (options) => {
       if (!scopeProfileWritePlan || !profileAutoPromotionAllows(scopeProfileWritePlan, options.category, options.confidence))
         return;
@@ -4864,6 +4949,7 @@ var ExtractionPersistCoordinator = class {
             {
               content: citedContent,
               category: options.category,
+              origin,
               confidence: options.confidence,
               tags: withReservedMarkerTag(options.tags, `${target.target}-promotion`),
               entityRef: options.entityRef,
@@ -5005,6 +5091,7 @@ var ExtractionPersistCoordinator = class {
           {
             content: citedContent,
             category: options.category,
+            origin,
             confidence: options.confidence,
             tags: withReservedMarkerTag(options.tags, "shared-promotion"),
             entityRef: options.entityRef,
@@ -5579,6 +5666,7 @@ var ExtractionPersistCoordinator = class {
         entityRef: fact.entityRef,
         validAt: biTemporal?.validFrom ?? sourceContext?.validAt
       };
+      const { status: injectionScreenStatus, tags: injectionScreenTags } = evaluateInjectionScreen({ content: fact.content, category: writeCategory, structuredAttributes: fact.structuredAttributes, procedureSteps: fact.procedureSteps }, resolveSecurityCapabilities(this.deps.config).injectionScreen);
       try {
         const redactionRules = await redactionRulesFor(sourceStorageDir, targetStorage.dir);
         const redactionCandidate = fact.content + (fact.structuredAttributes ? " " + JSON.stringify(fact.structuredAttributes) : "") + (fact.procedureSteps ? " " + fact.procedureSteps.map((s) => `${s.intent} ${s.expectedOutcome ?? ""} ${s.toolCall ? `${s.toolCall.kind} ${s.toolCall.signature}` : ""}`.trim()).join(" ") : "");
@@ -5635,7 +5723,7 @@ var ExtractionPersistCoordinator = class {
           exactDuplicate = false;
         }
       }
-      if (exactDuplicate) {
+      if (exactDuplicate && injectionScreenStatus !== "pending_review") {
         if (biTemporal && writeCategory === "fact" && (biTemporal.validUntil || biTemporal.validFrom)) {
           const fr = faithfulnessResultsByFactIndex?.get(factLoopIndex);
           const faithfulnessWouldPending = faithfulnessMode === "enforce" && fr?.ok === true && (fr.verdict === "unsupported" || fr.verdict === "contradicted");
@@ -5679,11 +5767,11 @@ var ExtractionPersistCoordinator = class {
         dedupedCount++;
         continue;
       }
-      if (writeCategory === "procedure" && this.deps.config.procedural?.enabled !== true) {
+      if (writeCategory === "procedure" && this.deps.config.procedural?.enabled !== true && injectionScreenStatus !== "pending_review") {
         log.debug("persistExtraction: skip procedure memory (procedural.enabled is false)");
         continue;
       }
-      if (!isAboveImportanceThreshold(
+      if (injectionScreenStatus !== "pending_review" && !isAboveImportanceThreshold(
         importance.level,
         this.deps.config.extractionMinImportanceLevel
       )) {
@@ -5695,7 +5783,7 @@ var ExtractionPersistCoordinator = class {
         );
         continue;
       }
-      if (judgeVerdictsByFactIndex) {
+      if (judgeVerdictsByFactIndex && injectionScreenStatus !== "pending_review") {
         const verdict = judgeVerdictsByFactIndex.get(factLoopIndex);
         if (verdict && !verdict.durable) {
           const verdictKind = getVerdictKind(verdict);
@@ -5718,7 +5806,7 @@ var ExtractionPersistCoordinator = class {
           }
         }
       }
-      if (writeCategory === "procedure") {
+      if (writeCategory === "procedure" && injectionScreenStatus !== "pending_review") {
         const procGate = validateProcedureExtraction({
           content: fact.content,
           procedureSteps: fact.procedureSteps
@@ -5738,9 +5826,9 @@ var ExtractionPersistCoordinator = class {
         this.deps.getFaithfulnessCounters()
       );
       const requireSpansPendingStatus = this.deps.config.provenance?.requireSpans === true && fact.requireSpansPending === true ? "pending_review" : void 0;
-      const faithfulnessEnforceStatus = faithfulnessGateStatus ?? requireSpansPendingStatus;
+      const faithfulnessEnforceStatus = faithfulnessGateStatus ?? requireSpansPendingStatus ?? injectionScreenStatus;
       let pendingSemanticSkip = null;
-      if (resolvePipelineProcessingCapabilities(this.deps.config).semanticDedup) {
+      if (resolvePipelineProcessingCapabilities(this.deps.config).semanticDedup && injectionScreenStatus !== "pending_review") {
         let semanticDecision;
         if (batchBackendUnavailable) {
           semanticDecision = { action: "keep", reason: "backend_unavailable" };
@@ -5856,8 +5944,9 @@ var ExtractionPersistCoordinator = class {
             {
               content: citedChunkedContent,
               category: writeCategory,
+              origin,
               confidence: fact.confidence,
-              tags: withReservedMarkerTag(fact.tags, "chunked"),
+              tags: withReservedMarkerTag([...fact.tags, ...injectionScreenTags], "chunked"),
               entityRef: fact.entityRef,
               structuredAttributes: fact.structuredAttributes,
               validAt: biTemporal ? biTemporal.validFrom : sourceContext?.validAt,
@@ -5948,6 +6037,7 @@ var ExtractionPersistCoordinator = class {
                   ...fact.sources && fact.sources.length > 0 ? { sources: fact.sources } : {},
                   ...fact.provenance ? { provenance: fact.provenance } : {},
                   ...extractionSourceConnector ? { sourceConnector: extractionSourceConnector } : {},
+                  ...origin ? { origin } : {},
                   ...factToolScoped ? { toolScoped: true } : {}
                 }
               );
@@ -6050,6 +6140,7 @@ var ExtractionPersistCoordinator = class {
                 intentActionType: inferredIntent?.actionType,
                 intentEntityTypes: inferredIntent?.entityTypes,
                 ...extractionSourceConnector ? { sourceConnector: extractionSourceConnector } : {},
+                ...origin ? { origin } : {},
                 ...factToolScoped ? { toolScoped: true } : {}
               });
             }
@@ -6123,8 +6214,9 @@ var ExtractionPersistCoordinator = class {
         {
           content: citedFactContent,
           category: writeCategory,
+          origin,
           confidence: fact.confidence,
-          tags: fact.tags,
+          tags: [...fact.tags, ...injectionScreenTags],
           entityRef: typeof fact.entityRef === "string" ? fact.entityRef : void 0,
           structuredAttributes: fact.structuredAttributes,
           validAt: biTemporal ? biTemporal.validFrom : sourceContext?.validAt,
@@ -6293,6 +6385,7 @@ var ExtractionPersistCoordinator = class {
             intentActionType: inferredIntent?.actionType,
             intentEntityTypes: inferredIntent?.entityTypes,
             ...extractionSourceConnector ? { sourceConnector: extractionSourceConnector } : {},
+            ...origin ? { origin } : {},
             ...factToolScoped ? { toolScoped: true } : {}
           });
         }
@@ -6324,20 +6417,19 @@ var ExtractionPersistCoordinator = class {
       durableNonFactTouchRecorded = true;
       touchBaseNonFactNamespace();
     };
+    const entityScreenOn = resolveSecurityCapabilities(this.deps.config).injectionScreen;
     for (const entity of entities) {
       try {
-        const name = entity?.name;
-        const type = entity?.type;
-        if (typeof name !== "string" || !name.trim() || typeof type !== "string" || !type.trim()) {
-          continue;
-        }
-        const safeFacts = Array.isArray(entity?.facts) ? entity.facts.filter((f) => typeof f === "string") : [];
-        const id = await storage.writeEntity(name, type, safeFacts, {
-          source: typeof entity?.source === "string" ? entity.source : "extraction",
+        const screened = screenEntityForIndex(entity, entityScreenOn);
+        if (!screened) continue;
+        if (screened.withheldRules.length > 0) log.warn(`persistExtraction: injection screen withheld ${screened.withheldRules.length} entity field(s) for "${screened.name}" [${screened.withheldRules.join(", ")}]`);
+        if (screened.withheld) continue;
+        const id = await storage.writeEntity(screened.name, screened.type, screened.facts, {
+          source: screened.source,
           timestamp: sourceContext?.validAt,
           sessionKey: sourceContext?.sessionKey,
           principal: sourceContext?.principal,
-          structuredSections: Array.isArray(entity?.structuredSections) ? entity.structuredSections : void 0
+          structuredSections: screened.structuredSections
         });
         if (id) {
           trackPersistedId(storage, id);
@@ -6350,16 +6442,22 @@ var ExtractionPersistCoordinator = class {
     if (resolveRecallEnhancementCapabilities(this.deps.config).entityRelationships && Array.isArray(result.relationships)) {
       for (const rel of result.relationships.slice(0, 5)) {
         if (!rel.source || !rel.target || !rel.label) continue;
+        const relScreen = screenPersistStrings([
+          `${rel.source}
+${rel.label}
+${rel.target}`,
+          `${rel.target}
+${rel.label} (reverse)
+${rel.source}`
+        ], entityScreenOn);
+        if (relScreen.warning) {
+          log.warn(`persistExtraction(relationship): ${relScreen.warning}`);
+          continue;
+        }
         try {
-          await storage.addEntityRelationship(rel.source, {
-            target: rel.target,
-            label: rel.label
-          });
+          await storage.addEntityRelationship(rel.source, { target: rel.target, label: rel.label });
           recordDurableNonFactWrite();
-          await storage.addEntityRelationship(rel.target, {
-            target: rel.source,
-            label: `${rel.label} (reverse)`
-          });
+          await storage.addEntityRelationship(rel.target, { target: rel.source, label: `${rel.label} (reverse)` });
           recordDurableNonFactWrite();
         } catch (err) {
           log.debug(`relationship persist failed: ${err}`);
@@ -6384,11 +6482,19 @@ var ExtractionPersistCoordinator = class {
         }
       }
     }
-    if (profileUpdates.length > 0) {
-      await storage.appendToProfile(profileUpdates);
+    const profileScreen = screenPersistStrings(profileUpdates, entityScreenOn);
+    if (profileScreen.warning) log.warn(`persistExtraction(profile): ${profileScreen.warning}`);
+    if (profileScreen.kept.length > 0) {
+      await storage.appendToProfile(profileScreen.kept);
       recordDurableNonFactWrite();
     }
     for (const q of questions) {
+      const qScreen = screenPersistStrings([`${q.question}
+${q.context ?? ""}`], entityScreenOn);
+      if (qScreen.warning) {
+        log.warn(`persistExtraction(question): ${qScreen.warning}`);
+        continue;
+      }
       const id = await storage.writeQuestion(q.question, q.context, q.priority);
       if (id) {
         trackPersistedId(storage, id);
@@ -6396,11 +6502,15 @@ var ExtractionPersistCoordinator = class {
       }
     }
     if (resolveRecallEnhancementCapabilities(this.deps.config).identity && result.identityReflection) {
-      try {
-        await storage.appendIdentityReflection(result.identityReflection);
-        recordDurableNonFactWrite();
-      } catch (err) {
-        log.debug(`identity reflection write failed: ${err}`);
+      const idScreen = screenPersistStrings([result.identityReflection], entityScreenOn);
+      if (idScreen.warning) log.warn(`persistExtraction(identity): ${idScreen.warning}`);
+      else {
+        try {
+          await storage.appendIdentityReflection(result.identityReflection);
+          recordDurableNonFactWrite();
+        } catch (err) {
+          log.debug(`identity reflection write failed: ${err}`);
+        }
       }
     }
     if (durableNonFactWritten) {
@@ -7989,7 +8099,8 @@ var GraphRecallCoordinator = class {
             path: memory.path,
             namespace,
             snippet: memory.content.slice(0, 400),
-            score
+            score,
+            ...memory.frontmatter.origin !== void 0 ? { origin: memory.frontmatter.origin } : {}
           });
           expandedPaths.push({
             path: memory.path,
@@ -8089,6 +8200,7 @@ var GraphRecallCoordinator = class {
             namespace,
             snippet: memory.content.slice(0, 400),
             score,
+            ...memory.frontmatter.origin !== void 0 ? { origin: memory.frontmatter.origin } : {},
             pathPenaltyApplied: pathScoreDetail.pathPenaltyApplied,
             ...config.graphPathScoring.includePathInProvenance && candidate.activationPath ? { pathNodeIds: candidate.activationPath.nodeIds } : {}
           },
@@ -8221,14 +8333,19 @@ async function buildProcedureRecallSection(storage, prompt, config, options) {
     (m) => m.frontmatter.category === "procedure" && isActiveMemoryStatus(m.frontmatter.status) && (options?.partitionToolScoped !== true || canRecallToolScopedMemory(m.frontmatter, options.requestingConnector))
   ).map((m) => ({ m, score: scoreProcedureForPrompt(m, trimmed, queryIntent) })).filter((x) => x.score > 0.04).sort((a, b) => b.score - a.score).slice(0, maxN);
   if (scored.length === 0) return null;
+  const security = resolveSecurityCapabilities(config);
   const blocks = scored.map(({ m, score }) => {
     const id = m.frontmatter.id;
     const flat = m.content.replace(/\s+/g, " ").trim();
     const preview = flat.slice(0, 320);
     const suffix = flat.length > 320 ? "\u2026" : "";
+    const body = renderAuthorityBoundContent(`${preview}${suffix}`, m.frontmatter.origin, {
+      enabled: security.originAuthority,
+      untrustedOrigins: config.untrustedOrigins
+    });
     return `### ${id} (match ${score.toFixed(2)})
 
-${preview}${suffix}`;
+${body}`;
   });
   return `## Relevant procedures
 
@@ -8391,8 +8508,10 @@ function resolveCompositeProfileStorage(options) {
 var RecallInternalCoordinator = class {
   constructor(deps) {
     this.deps = deps;
+    this.securityCapabilities = resolveSecurityCapabilities(deps.config);
   }
   deps;
+  securityCapabilities;
   async recallInternal(prompt, sessionKey, options = {}, caps = resolveCapabilities(this.deps.config), graphCaps = resolveGraphConstructionCapabilities(this.deps.config), lifecycleCaps = resolveMemoryLifecycleCapabilities(this.deps.config)) {
     const recallStart = Date.now();
     const backendDegradations = [];
@@ -9003,6 +9122,8 @@ ${lines.join("\n\n")}`;
               maxRelatedEntities,
               maxChars,
               transcriptEntries,
+              originAuthorityEnabled: this.securityCapabilities.originAuthority,
+              untrustedOrigins: this.deps.config.untrustedOrigins,
               abortSignal: sectionSignal
             }).catch((err) => {
               if (isAbortError(err)) throw err;
@@ -10783,7 +10904,9 @@ ${formatted}`;
               items: timelineItems,
               query: retrievalQuery,
               maxChars: eventOrderMaxChars,
-              maxItems
+              maxItems,
+              originAuthorityEnabled: this.securityCapabilities.originAuthority,
+              untrustedOrigins: this.deps.config.untrustedOrigins
             });
           }
           if (!eventOrderSection && this.deps.lcmEngine?.enabled) {
@@ -10862,11 +10985,8 @@ ${profile}`
         );
       }
       if (kiResult?.result) {
-        this.deps.appendRecallSection(
-          sectionBuckets,
-          "knowledge-index",
-          kiResult.result
-        );
+        const kiBody = this.securityCapabilities.originAuthority ? renderAuthorityBoundContent(kiResult.result, void 0, { enabled: true, untrustedOrigins: this.deps.config.untrustedOrigins }) : kiResult.result;
+        this.deps.appendRecallSection(sectionBuckets, "knowledge-index", kiBody);
         log.debug(
           `Knowledge Index: ${kiResult.result.split("\n").length - 4} entities, ${kiResult.result.length} chars${kiResult.cached ? " (cached)" : ""}`
         );
@@ -10887,7 +11007,11 @@ ${profile}`
           const artifactType = a.frontmatter.artifactType ?? "fact";
           const createdRaw = typeof a.frontmatter.created === "string" ? a.frontmatter.created : "";
           const created = createdRaw ? createdRaw.slice(0, 19).replace("T", " ") : "unknown-time";
-          return `- [${artifactType}] "${this.deps.truncateArtifactForRecall(a.content)}" (${created})`;
+          const content = renderAuthorityBoundContent(this.deps.truncateArtifactForRecall(a.content), a.frontmatter.origin, {
+            enabled: this.securityCapabilities.originAuthority,
+            untrustedOrigins: this.deps.config.untrustedOrigins
+          });
+          return `- [${artifactType}] "${content}" (${created})`;
         });
         this.deps.appendRecallSection(
           sectionBuckets,
@@ -11728,7 +11852,8 @@ ${tmtNode.summary}`
                         path: m.path,
                         namespace: this.deps.namespaceFromPath(m.path),
                         snippet: m.content,
-                        score: 1 - i / Math.max(recentSorted.length, 1)
+                        score: 1 - i / Math.max(recentSorted.length, 1),
+                        origin: m.frontmatter.origin
                       })
                     );
                     const boostedRecent = (await this.deps.boostSearchResults(
@@ -12512,7 +12637,8 @@ async function searchEmbeddingFallback(deps, query, limit) {
       docid: hit.id,
       path: fullPath,
       score: hit.score,
-      snippet: memory.content.slice(0, 400).replace(/\n/g, " ")
+      snippet: memory.content.slice(0, 400).replace(/\n/g, " "),
+      origin: memory.frontmatter.origin
     });
   }
   return results;
@@ -13217,7 +13343,8 @@ var RecallSearchPipelineCoordinator = class {
       }
       filtered.push({
         ...r,
-        sourceConnector: memory ? memory.frontmatter.sourceConnector : void 0
+        sourceConnector: memory ? memory.frontmatter.sourceConnector : void 0,
+        origin: memory ? memory.frontmatter.origin : void 0
       });
     }
     if (connectorPartitionFilteredCount > 0) {
@@ -15021,7 +15148,7 @@ var OrchestratorInitCoordinator = class {
     if (signal.aborted) return;
     if (lifecycleCaps.lifecyclePolicy && resolveQmdCapabilities(this.deps.config).qmdTierMigration) {
       try {
-        const { runFirstStartMigration } = await import("./first-start-migration-CRZCZAJN.js");
+        const { runFirstStartMigration } = await import("./first-start-migration-HZ4VPRFQ.js");
         const result = await runFirstStartMigration({
           storage: this.deps.storage,
           config: this.deps.config,
@@ -15044,7 +15171,7 @@ var OrchestratorInitCoordinator = class {
     if (signal.aborted) return;
     if (!this.deps.wearablesAutoSyncHandle && this.deps.config.wearables.enabled && this.deps.config.wearables.autoSyncEnabled && Object.values(this.deps.config.wearables.sources).some((source) => source.enabled)) {
       try {
-        const { startWearablesAutoSync } = await import("./auto-sync-NR3GPCOA.js");
+        const { startWearablesAutoSync } = await import("./auto-sync-5HVRCMGZ.js");
         if (signal.aborted) return;
         this.deps.wearablesAutoSyncHandle = startWearablesAutoSync(
           {
@@ -18370,6 +18497,7 @@ var NamespaceReadFanoutCoordinator = class {
         path: memory.path,
         score,
         snippet: memory.content.slice(0, 400).replace(/\n/g, " "),
+        origin: memory.frontmatter.origin,
         transport: "scoped_prefilter"
       });
     }
@@ -26999,4 +27127,4 @@ export {
   blendGraphExpandedRecallScore,
   Orchestrator
 };
-//# sourceMappingURL=chunk-W5ZKPI34.js.map
+//# sourceMappingURL=chunk-IFFW25NG.js.map