@remnic/core 9.57.4 → 9.57.5

package/dist/reconcile/manifest.js

@@ -4,14 +4,13 @@ import {
   buildReconcileManifest,
   buildReconcileManifestFile,
   collapseActiveFactDuplicates
-} from "../chunk-XRPPHIRI.js";
-import "../chunk-KJH6W2I7.js";
+} from "../chunk-VUDALPI5.js";
+import "../chunk-L3CHRBHE.js";
 import "../chunk-J6A3CX5N.js";
 import "../chunk-7RJUVTVF.js";
 import "../chunk-NRFU5MVH.js";
 import "../chunk-5FVVY2EB.js";
 import "../chunk-FFAZ2XFU.js";
-import "../chunk-EGGE52UU.js";
 import "../chunk-JDSVLVCG.js";
 import "../chunk-HBVPYRDW.js";
 import "../chunk-5GKPFL3S.js";
@@ -22,6 +21,7 @@ import "../chunk-GCGJW34D.js";
 import "../chunk-AREGMX2J.js";
 import "../chunk-LC2BDILZ.js";
 import "../chunk-P7FMDTKL.js";
+import "../chunk-VUFL7X3H.js";
 import "../chunk-XQ3HXAQH.js";
 import "../chunk-A6XUJE5D.js";
 import "../chunk-5UZXUTVO.js";

package/dist/reconcile/plan.js

@@ -3,8 +3,7 @@ import {
   planNamespaceReconciliation,
   planReconciliation,
   summarizeReconcilePlan
-} from "../chunk-KJH6W2I7.js";
-import "../chunk-EGGE52UU.js";
+} from "../chunk-L3CHRBHE.js";
 import "../chunk-HBVPYRDW.js";
 import "../chunk-Z4N7SVVF.js";
 import "../chunk-UI3NYK34.js";
@@ -12,6 +11,7 @@ import "../chunk-GCGJW34D.js";
 import "../chunk-AREGMX2J.js";
 import "../chunk-LC2BDILZ.js";
 import "../chunk-P7FMDTKL.js";
+import "../chunk-VUFL7X3H.js";
 import "../chunk-XQ3HXAQH.js";
 import "../chunk-A6XUJE5D.js";
 import "../chunk-5UZXUTVO.js";

package/dist/routing/engine.js

@@ -4,7 +4,8 @@ import {
   isSafeRouteNamespace,
   selectRouteRule,
   validateRouteTarget
-} from "../chunk-U3PN77QT.js";
+} from "../chunk-PCXDUHQH.js";
+import "../chunk-VUFL7X3H.js";
 import "../chunk-PZ5AY32C.js";
 export {
   doesRuleMatch,

package/dist/routing/store.js

@@ -1,7 +1,8 @@
 import {
   RoutingRulesStore
-} from "../chunk-XL24QQ63.js";
-import "../chunk-U3PN77QT.js";
+} from "../chunk-TBUEE7XF.js";
+import "../chunk-PCXDUHQH.js";
+import "../chunk-VUFL7X3H.js";
 import "../chunk-3WCASNQZ.js";
 import "../chunk-PZ5AY32C.js";
 export {

package/dist/semantic-consolidation.js

@@ -7,17 +7,17 @@ import {
   materializeAfterSemanticConsolidation,
   parseConsolidationResponse,
   parseOperatorAwareConsolidationResponse
-} from "./chunk-ONCWJBWV.js";
+} from "./chunk-3AJOJOFP.js";
 import {
   resolveExtensionsRoot
 } from "./chunk-JLNBQWZ2.js";
-import "./chunk-HC55YCNK.js";
+import "./chunk-VYIXCMUP.js";
 import "./chunk-KSXJOC4F.js";
-import "./chunk-BWJMBJCY.js";
+import "./chunk-YTZA7U6Q.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-KHQ57QLJ.js";
 import "./chunk-SXIMQLGV.js";
-import "./chunk-ION47U3Z.js";
+import "./chunk-SNW3YRO6.js";
 import "./chunk-F7M36OG2.js";
 import "./chunk-XL3TATMJ.js";
 import "./chunk-VANZKHTN.js";
@@ -92,13 +92,13 @@ import "./chunk-2LWQSV6A.js";
 import "./chunk-RL6NEVXT.js";
 import "./chunk-5FVVY2EB.js";
 import "./chunk-FFAZ2XFU.js";
-import "./chunk-XX4HPFFM.js";
-import "./chunk-EGGE52UU.js";
+import "./chunk-XDL5CYZN.js";
 import "./chunk-JDSVLVCG.js";
 import "./chunk-5GKPFL3S.js";
 import "./chunk-JAKIDQB2.js";
 import "./chunk-P7FMDTKL.js";
-import "./chunk-U3PN77QT.js";
+import "./chunk-PCXDUHQH.js";
+import "./chunk-VUFL7X3H.js";
 import "./chunk-JUOZ62Y7.js";
 import "./chunk-O75CRYGF.js";
 import "./chunk-EYIEWJNI.js";

package/dist/semantic-rule-promotion.js

@@ -1,12 +1,12 @@
 import {
   promoteSemanticRuleFromMemory,
   setSemanticRulePromotionTestHooks
-} from "./chunk-LYPG7GOO.js";
-import "./chunk-BWJMBJCY.js";
+} from "./chunk-I2GIYTRU.js";
+import "./chunk-YTZA7U6Q.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-KHQ57QLJ.js";
 import "./chunk-SXIMQLGV.js";
-import "./chunk-ION47U3Z.js";
+import "./chunk-SNW3YRO6.js";
 import "./chunk-F7M36OG2.js";
 import "./chunk-XL3TATMJ.js";
 import "./chunk-VANZKHTN.js";
@@ -75,12 +75,12 @@ import "./chunk-2LWQSV6A.js";
 import "./chunk-RL6NEVXT.js";
 import "./chunk-5FVVY2EB.js";
 import "./chunk-FFAZ2XFU.js";
-import "./chunk-XX4HPFFM.js";
-import "./chunk-EGGE52UU.js";
+import "./chunk-XDL5CYZN.js";
 import "./chunk-JDSVLVCG.js";
 import "./chunk-5GKPFL3S.js";
 import "./chunk-JAKIDQB2.js";
 import "./chunk-P7FMDTKL.js";
+import "./chunk-VUFL7X3H.js";
 import "./chunk-JUOZ62Y7.js";
 import "./chunk-O75CRYGF.js";
 import "./chunk-EYIEWJNI.js";

package/dist/semantic-rule-verifier.js

@@ -1,12 +1,12 @@
 import {
   compareVerifiedSemanticRuleResults,
   searchVerifiedSemanticRules
-} from "./chunk-TAMY4NKO.js";
-import "./chunk-BWJMBJCY.js";
+} from "./chunk-USGKHF36.js";
+import "./chunk-YTZA7U6Q.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-KHQ57QLJ.js";
 import "./chunk-SXIMQLGV.js";
-import "./chunk-ION47U3Z.js";
+import "./chunk-SNW3YRO6.js";
 import "./chunk-F7M36OG2.js";
 import "./chunk-XL3TATMJ.js";
 import "./chunk-VANZKHTN.js";
@@ -76,12 +76,12 @@ import "./chunk-2LWQSV6A.js";
 import "./chunk-RL6NEVXT.js";
 import "./chunk-5FVVY2EB.js";
 import "./chunk-FFAZ2XFU.js";
-import "./chunk-XX4HPFFM.js";
-import "./chunk-EGGE52UU.js";
+import "./chunk-XDL5CYZN.js";
 import "./chunk-JDSVLVCG.js";
 import "./chunk-5GKPFL3S.js";
 import "./chunk-JAKIDQB2.js";
 import "./chunk-P7FMDTKL.js";
+import "./chunk-VUFL7X3H.js";
 import "./chunk-JUOZ62Y7.js";
 import "./chunk-O75CRYGF.js";
 import "./chunk-EYIEWJNI.js";

package/dist/source-agent-qualifier.js

@@ -3,7 +3,7 @@ import {
   headerConnector,
   renderExtractionConversation,
   resolveSourceConnector
-} from "./chunk-SFCJCMZQ.js";
+} from "./chunk-A7266TRJ.js";
 import "./chunk-L4DLLKPN.js";
 import "./chunk-4POAMKV6.js";
 import "./chunk-WAS4HV46.js";
@@ -11,16 +11,16 @@ import "./chunk-VEWZZM3H.js";
 import "./chunk-4OW2T32G.js";
 import "./chunk-ANMIOQPU.js";
 import "./chunk-EMDLM3LW.js";
-import "./chunk-UTDMY476.js";
+import "./chunk-4UUF2EX3.js";
 import "./chunk-PD6O7AXF.js";
 import "./chunk-OD4FM2U7.js";
-import "./chunk-HC55YCNK.js";
+import "./chunk-VYIXCMUP.js";
 import "./chunk-KSXJOC4F.js";
-import "./chunk-BWJMBJCY.js";
+import "./chunk-YTZA7U6Q.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-KHQ57QLJ.js";
 import "./chunk-SXIMQLGV.js";
-import "./chunk-ION47U3Z.js";
+import "./chunk-SNW3YRO6.js";
 import "./chunk-F7M36OG2.js";
 import "./chunk-XL3TATMJ.js";
 import "./chunk-VANZKHTN.js";
@@ -81,7 +81,7 @@ import "./chunk-TBBDFYXW.js";
 import "./chunk-BJMBJZ2Y.js";
 import "./chunk-UKJAGEXH.js";
 import "./chunk-FP2373TW.js";
-import "./chunk-CMRUIKVA.js";
+import "./chunk-KCT36JAW.js";
 import "./chunk-J6A3CX5N.js";
 import "./chunk-DVYRD4HY.js";
 import "./chunk-ZA53AZND.js";
@@ -92,15 +92,15 @@ import "./chunk-2LWQSV6A.js";
 import "./chunk-RL6NEVXT.js";
 import "./chunk-5FVVY2EB.js";
 import "./chunk-FFAZ2XFU.js";
-import "./chunk-XX4HPFFM.js";
-import "./chunk-EGGE52UU.js";
+import "./chunk-XDL5CYZN.js";
 import "./chunk-JDSVLVCG.js";
 import "./chunk-5GKPFL3S.js";
 import "./chunk-JAKIDQB2.js";
 import "./chunk-P7FMDTKL.js";
 import "./chunk-MZWSOLMT.js";
-import "./chunk-IGWVMA4Y.js";
-import "./chunk-U3PN77QT.js";
+import "./chunk-MRV7VSQK.js";
+import "./chunk-PCXDUHQH.js";
+import "./chunk-VUFL7X3H.js";
 import "./chunk-JUOZ62Y7.js";
 import "./chunk-J2WC5LF4.js";
 import "./chunk-O75CRYGF.js";

package/dist/storage.js

@@ -13,11 +13,11 @@ import {
   parseFrontmatter,
   parseFrontmatterStringValue,
   serializeEntityFile
-} from "./chunk-BWJMBJCY.js";
+} from "./chunk-YTZA7U6Q.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-KHQ57QLJ.js";
 import "./chunk-SXIMQLGV.js";
-import "./chunk-ION47U3Z.js";
+import "./chunk-SNW3YRO6.js";
 import "./chunk-F7M36OG2.js";
 import "./chunk-XL3TATMJ.js";
 import "./chunk-VANZKHTN.js";
@@ -91,8 +91,7 @@ import "./chunk-2LWQSV6A.js";
 import "./chunk-RL6NEVXT.js";
 import "./chunk-5FVVY2EB.js";
 import "./chunk-FFAZ2XFU.js";
-import "./chunk-XX4HPFFM.js";
-import "./chunk-EGGE52UU.js";
+import "./chunk-XDL5CYZN.js";
 import {
   normalizeAttributePairs,
   stripAttributesSuffix
@@ -100,6 +99,7 @@ import {
 import "./chunk-5GKPFL3S.js";
 import "./chunk-JAKIDQB2.js";
 import "./chunk-P7FMDTKL.js";
+import "./chunk-VUFL7X3H.js";
 import "./chunk-JUOZ62Y7.js";
 import "./chunk-O75CRYGF.js";
 import "./chunk-EYIEWJNI.js";

package/dist/support-passport/index.js

@@ -4,7 +4,7 @@ import {
   SUPPORT_PASSPORT_MODEL_RESULT_PATH,
   SupportPassportModelBridge,
   parseSupportPassportModelJob
-} from "../chunk-TAPFJ3ET.js";
+} from "../chunk-U7XLOSG2.js";
 import {
   DEFAULT_SUPPORT_PASSPORT_CONFIG,
   parseSupportPassportConfig
@@ -14,8 +14,8 @@ import {
   buildSupportPassportPublicRequestHandler,
   composeSupportPassportExternalRequestHandlers,
   normalizeSupportPassportNetworkAddress
-} from "../chunk-TLVLJSWS.js";
-import "../chunk-R7UHWPYI.js";
+} from "../chunk-LRDP2AC2.js";
+import "../chunk-7PJARJS4.js";
 import {
   SUPPORT_PASSPORT_DRAFT_MAX_CONTENT_CHARACTERS,
   SUPPORT_PASSPORT_DRAFT_MAX_MEMORIES,
@@ -56,7 +56,7 @@ import {
   notifySupportPassportCommitted,
   resolveSupportPassportModelRoutePlan,
   syncDirectoryForDurability
-} from "../chunk-FK7T55BA.js";
+} from "../chunk-CZUHNJHX.js";
 import "../chunk-GDASG7NC.js";
 import "../chunk-GDB4J2H3.js";
 import "../chunk-PPUTUOC3.js";
@@ -71,7 +71,7 @@ import "../chunk-H7XKCNR6.js";
 import "../chunk-U7BMN33M.js";
 import "../chunk-SOBJ6NEY.js";
 import "../chunk-QKPDN325.js";
-import "../chunk-S6AH7WSF.js";
+import "../chunk-5PGYCWA7.js";
 import "../chunk-CVILPI77.js";
 import "../chunk-2HIJHXB3.js";
 import "../chunk-AQEJKOKI.js";
@@ -89,31 +89,31 @@ import "../chunk-WKDFJXW5.js";
 import "../chunk-JUXOTY6J.js";
 import "../chunk-QDW3E4RD.js";
 import "../chunk-LTHVM4XN.js";
-import "../chunk-JKL53MOY.js";
+import "../chunk-DLQQU4EG.js";
 import "../chunk-7ZNJN5WZ.js";
 import "../chunk-C37ZRXX7.js";
-import "../chunk-7NSC4IVA.js";
-import "../chunk-QZR3WT3L.js";
-import "../chunk-PSH3VFZ7.js";
-import "../chunk-JFPZEWY3.js";
+import "../chunk-6RK2X7BR.js";
+import "../chunk-LJJWFV2Q.js";
+import "../chunk-L3LRWDJW.js";
+import "../chunk-LIF6DO6U.js";
 import "../chunk-UFGFMWAD.js";
 import "../chunk-YMOPYG3K.js";
 import "../chunk-2LSZVONP.js";
 import "../chunk-DEUNUKTD.js";
 import "../chunk-LXY5VVGM.js";
-import "../chunk-UTDMY476.js";
+import "../chunk-4UUF2EX3.js";
 import "../chunk-PD6O7AXF.js";
 import "../chunk-OD4FM2U7.js";
 import "../chunk-ZY2MNJR6.js";
-import "../chunk-HC55YCNK.js";
+import "../chunk-VYIXCMUP.js";
 import "../chunk-KSXJOC4F.js";
 import "../chunk-HXXGZ4KV.js";
-import "../chunk-TF3LMM5E.js";
-import "../chunk-BWJMBJCY.js";
+import "../chunk-CSV34HIW.js";
+import "../chunk-YTZA7U6Q.js";
 import "../chunk-UHVXE24Y.js";
 import "../chunk-KHQ57QLJ.js";
 import "../chunk-SXIMQLGV.js";
-import "../chunk-ION47U3Z.js";
+import "../chunk-SNW3YRO6.js";
 import "../chunk-F7M36OG2.js";
 import "../chunk-XL3TATMJ.js";
 import "../chunk-VANZKHTN.js";
@@ -190,15 +190,15 @@ import "../chunk-I4WBNM3M.js";
 import "../chunk-SOAU2OE2.js";
 import "../chunk-3QL24R5Y.js";
 import "../chunk-SYOIVK7K.js";
-import "../chunk-4KM3V6VS.js";
+import "../chunk-ZN7SMKAK.js";
 import "../chunk-LNEWDF2A.js";
-import "../chunk-IXGQP4RZ.js";
-import "../chunk-XRPPHIRI.js";
-import "../chunk-KJH6W2I7.js";
-import "../chunk-X5OIPQME.js";
-import "../chunk-TVKWT2CY.js";
+import "../chunk-4SGDYYWV.js";
+import "../chunk-VUDALPI5.js";
+import "../chunk-L3CHRBHE.js";
+import "../chunk-HZNYJN77.js";
+import "../chunk-Q57GOHLF.js";
 import "../chunk-AW4QUFQF.js";
-import "../chunk-CMRUIKVA.js";
+import "../chunk-KCT36JAW.js";
 import "../chunk-J6A3CX5N.js";
 import "../chunk-DVYRD4HY.js";
 import "../chunk-ZA53AZND.js";
@@ -238,8 +238,7 @@ import {
   hasLiveSupportPassportCard,
   isSupportPassportPrivateMemory,
   projectSupportPassportCard
-} from "../chunk-XX4HPFFM.js";
-import "../chunk-EGGE52UU.js";
+} from "../chunk-XDL5CYZN.js";
 import "../chunk-JDSVLVCG.js";
 import "../chunk-HBVPYRDW.js";
 import "../chunk-5GKPFL3S.js";
@@ -251,8 +250,9 @@ import "../chunk-AREGMX2J.js";
 import "../chunk-LC2BDILZ.js";
 import "../chunk-P7FMDTKL.js";
 import "../chunk-MZWSOLMT.js";
-import "../chunk-IGWVMA4Y.js";
-import "../chunk-U3PN77QT.js";
+import "../chunk-MRV7VSQK.js";
+import "../chunk-PCXDUHQH.js";
+import "../chunk-VUFL7X3H.js";
 import "../chunk-JUOZ62Y7.js";
 import "../chunk-VFUEZZBS.js";
 import "../chunk-773TRRGT.js";

package/dist/tier-routing.js

@@ -1,14 +1,14 @@
 import {
   computeTierValueScore,
   decideTierTransition
-} from "./chunk-F2JRDPON.js";
+} from "./chunk-EGBDFJ36.js";
 import "./chunk-TBBDFYXW.js";
-import "./chunk-XX4HPFFM.js";
-import "./chunk-EGGE52UU.js";
+import "./chunk-XDL5CYZN.js";
 import "./chunk-JDSVLVCG.js";
 import "./chunk-5GKPFL3S.js";
 import "./chunk-JAKIDQB2.js";
 import "./chunk-P7FMDTKL.js";
+import "./chunk-VUFL7X3H.js";
 import "./chunk-PZ5AY32C.js";
 export {
   computeTierValueScore,

package/dist/{tier-stats-7E6OBUSD.js → tier-stats-4B5IJ3NE.js}

@@ -5,18 +5,18 @@ import {
 import {
   computeTierValueScore,
   decideTierTransition
-} from "./chunk-F2JRDPON.js";
+} from "./chunk-EGBDFJ36.js";
 import "./chunk-HDQUQBPW.js";
 import "./chunk-6FC3IZ26.js";
 import {
   computeLifecycleValueInputs
 } from "./chunk-TBBDFYXW.js";
-import "./chunk-XX4HPFFM.js";
-import "./chunk-EGGE52UU.js";
+import "./chunk-XDL5CYZN.js";
 import "./chunk-JDSVLVCG.js";
 import "./chunk-5GKPFL3S.js";
 import "./chunk-JAKIDQB2.js";
 import "./chunk-P7FMDTKL.js";
+import "./chunk-VUFL7X3H.js";
 import {
   resolveQmdCapabilities,
   resolveUtilityLearningCapabilities
@@ -159,4 +159,4 @@ export {
   formatTierSummaryText,
   summarizeTiers
 };
-//# sourceMappingURL=tier-stats-7E6OBUSD.js.map
+//# sourceMappingURL=tier-stats-4B5IJ3NE.js.map

package/dist/verified-recall.js

@@ -1,13 +1,13 @@
 import {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
-} from "./chunk-FONW766A.js";
+} from "./chunk-GXIY65UH.js";
 import "./chunk-B7RWBZXW.js";
-import "./chunk-BWJMBJCY.js";
+import "./chunk-YTZA7U6Q.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-KHQ57QLJ.js";
 import "./chunk-SXIMQLGV.js";
-import "./chunk-ION47U3Z.js";
+import "./chunk-SNW3YRO6.js";
 import "./chunk-F7M36OG2.js";
 import "./chunk-XL3TATMJ.js";
 import "./chunk-VANZKHTN.js";
@@ -77,12 +77,12 @@ import "./chunk-2LWQSV6A.js";
 import "./chunk-RL6NEVXT.js";
 import "./chunk-5FVVY2EB.js";
 import "./chunk-FFAZ2XFU.js";
-import "./chunk-XX4HPFFM.js";
-import "./chunk-EGGE52UU.js";
+import "./chunk-XDL5CYZN.js";
 import "./chunk-JDSVLVCG.js";
 import "./chunk-5GKPFL3S.js";
 import "./chunk-JAKIDQB2.js";
 import "./chunk-P7FMDTKL.js";
+import "./chunk-VUFL7X3H.js";
 import "./chunk-JUOZ62Y7.js";
 import "./chunk-O75CRYGF.js";
 import "./chunk-EYIEWJNI.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.57.4",
+  "version": "9.57.5",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -3136,7 +3136,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.57.4"
+    "@remnic/coding-graph": "^9.57.5"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/namespaces/catalog.ts

@@ -19,7 +19,7 @@ import {
   withHeldFileLock,
 } from "../utils/serialize-mutations.js";
 import { isSafeRouteNamespace } from "../routing/engine.js";
-import { namespaceIdentityFromToken, namespaceIdentityToken, normalizeNamespaceIdentity } from "./identity.js";
+import { namespaceIdentityFromToken, namespaceIdentityLegacyToken, namespaceIdentityToken, normalizeNamespaceIdentity } from "./identity.js";
 import { resolveDefaultNamespaceRoot, resolveNamespaceStorageRoot } from "./storage.js";
 import { ALL_CATEGORY_DIRS } from "../utils/category-dir.js";
 
@@ -1721,8 +1721,7 @@ export class NamespaceCatalog {
     // sourced from their tokenized dir so a later legacy-named `readdir` entry
     // cannot overwrite the tokenized record (and vice-versa: a tokenized entry
     // always wins over a previously-set legacy one).
-    const scannedFromTokenized = new Set<string>();
-
+    const scannedFromTokenized = new Map<string, number>();
     for (const entry of entries) {
       const token = entry.name;
       const fullPath = path.join(namespacesDir, token);
@@ -1798,7 +1797,7 @@ export class NamespaceCatalog {
       const tokenDecoded = literalOwnsRoot ? null : namespaceIdentityFromToken(token);
       const rawDecoded = tokenDecoded && tokenDecoded.length > 0 ? tokenDecoded : token;
       const decoded = normalizeNamespaceIdentity(rawDecoded);
-      if (decoded.length === 0 || rawDecoded !== decoded) {
+      if (decoded.length === 0 || (rawDecoded !== decoded && rawDecoded.normalize("NFC") !== decoded)) {
         skipped.push({ token, reason: "unsafe", detail: rawDecoded });
         continue;
       }
@@ -1841,11 +1840,12 @@ export class NamespaceCatalog {
       // is the on-disk dir name; it is the tokenized dir iff it equals the
       // namespace's identity token. If we already recorded this namespace from
       // its tokenized dir, a later legacy-named entry must not clobber it.
-      const isTokenizedEntry = token === namespaceIdentityToken(decoded);
-      if (rebuilt.has(decoded) && scannedFromTokenized.has(decoded) && !isTokenizedEntry) {
-        continue;
-      }
-      if (isTokenizedEntry) scannedFromTokenized.add(decoded);
+      const canonicalToken = namespaceIdentityToken(decoded);
+      const legacyToken = namespaceIdentityLegacyToken(decoded.normalize("NFD"));
+      const tokenKind = token === canonicalToken ? 2 : token === legacyToken ? 1 : 0;
+      const priorTokenKind = scannedFromTokenized.get(decoded) ?? 0;
+      if (rebuilt.has(decoded) && priorTokenKind > tokenKind) continue;
+      if (tokenKind > 0) scannedFromTokenized.set(decoded, tokenKind);
 
       const prior = existing.get(decoded);
       rebuilt.set(

package/src/namespaces/identity.ts

@@ -1,14 +1,21 @@
 export function normalizeNamespaceIdentity(namespace: string | null | undefined): string {
-  return namespace?.trim() ?? "";
+  return namespace?.trim().normalize("NFC") ?? "";
 }
 
-export function namespaceIdentityToken(namespace: string): string {
-  const normalized = normalizeNamespaceIdentity(namespace);
-  const bytes = new TextEncoder().encode(normalized);
+function encodeNamespaceIdentityToken(namespace: string): string {
+  const bytes = new TextEncoder().encode(namespace);
   const hex = Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
   return `ns-${hex || "default"}`;
 }
 
+export function namespaceIdentityToken(namespace: string): string {
+  return encodeNamespaceIdentityToken(normalizeNamespaceIdentity(namespace));
+}
+
+export function namespaceIdentityLegacyToken(namespace: string): string {
+  return encodeNamespaceIdentityToken(namespace.trim());
+}
+
 export function namespaceIdentityFromToken(token: string): string | null {
   if (!token.startsWith("ns-")) return null;
   const hex = token.slice(3);
@@ -17,7 +24,9 @@ export function namespaceIdentityFromToken(token: string): string | null {
     return null;
   }
   const decoded = Buffer.from(hex, "hex").toString("utf8");
-  return namespaceIdentityToken(decoded).toLowerCase() === token.toLowerCase()
-    ? decoded
+  const normalized = normalizeNamespaceIdentity(decoded);
+  return namespaceIdentityToken(decoded).toLowerCase() === token.toLowerCase() ||
+    namespaceIdentityLegacyToken(decoded).toLowerCase() === token.toLowerCase()
+    ? normalized
     : null;
 }

package/src/namespaces/principal.test.ts

@@ -12,8 +12,8 @@
 import assert from "node:assert/strict";
 import test from "node:test";
 
-import { canReadNamespace, isNamespacePolicyCovered, resolvePrincipal } from "./principal.js";
 import type { PluginConfig } from "../types.js";
+import { canReadNamespace, canWriteNamespace, isNamespacePolicyCovered, resolvePrincipal } from "./principal.js";
 
 // ──────────────────────────────────────────────────────────────────────────
 // Helpers
@@ -285,3 +285,12 @@ test("isNamespacePolicyCovered: an explicit default-namespace policy overrides t
   const grantedDefault = makeConfig(true, [{ name: "default", readPrincipals: [], writePrincipals: ["alice"] }]);
   assert.equal(isNamespacePolicyCovered("default", grantedDefault), true);
 });
+
+test("namespace ACL matches canonically equivalent Unicode identities", () => {
+  const config = makeConfig(true, [
+    { name: "Cafe\u0301", readPrincipals: ["reader"], writePrincipals: ["writer"] },
+  ]);
+
+  assert.equal(canReadNamespace("reader", "Café", config), true);
+  assert.equal(canWriteNamespace("writer", "Café", config), true);
+});

package/src/namespaces/principal.ts

@@ -1,7 +1,7 @@
 import { resolveNamespaceCapabilities } from "../capabilities.js";
 import type { PluginConfig } from "../types.js";
 import { isLikelyUnsafeRegex } from "../routing/engine.js";
-
+import { normalizeNamespaceIdentity } from "./identity.js";
 const MAX_REGEX_SESSION_KEY_LENGTH = 512;
 
 function compileSafePrincipalRegex(pattern: string): RegExp | null {
@@ -54,16 +54,21 @@ export function resolvePrincipal(sessionKey: string | undefined, config: PluginC
 export function canReadNamespace(principal: string | undefined, namespace: string, config: PluginConfig): boolean {
   if (!resolveNamespaceCapabilities(config).namespaces) return true;
   if (!principal) return false;
-  const policy = config.namespacePolicies.find((p) => p.name === namespace);
-  if (!policy) return namespace === config.defaultNamespace || namespace === config.sharedNamespace;
+  const identity = normalizeNamespaceIdentity(namespace);
+  const policy = config.namespacePolicies.find((p) => normalizeNamespaceIdentity(p.name) === identity);
+  if (!policy) {
+    return identity === normalizeNamespaceIdentity(config.defaultNamespace) ||
+      identity === normalizeNamespaceIdentity(config.sharedNamespace);
+  }
   return policy.readPrincipals.includes(principal) || policy.readPrincipals.includes("*");
 }
 
 export function canWriteNamespace(principal: string | undefined, namespace: string, config: PluginConfig): boolean {
   if (!resolveNamespaceCapabilities(config).namespaces) return true;
   if (!principal) return false;
-  const policy = config.namespacePolicies.find((p) => p.name === namespace);
-  if (!policy) return namespace === config.defaultNamespace;
+  const identity = normalizeNamespaceIdentity(namespace);
+  const policy = config.namespacePolicies.find((p) => normalizeNamespaceIdentity(p.name) === identity);
+  if (!policy) return identity === normalizeNamespaceIdentity(config.defaultNamespace);
   return policy.writePrincipals.includes(principal) || policy.writePrincipals.includes("*");
 }
 
@@ -87,8 +92,9 @@ export function isNamespacePolicyCovered(namespace: string, config: PluginConfig
   // An explicit policy wins over the default fallback (exactly as
   // canWriteNamespace), so a policy naming the default with no writers is NOT
   // covered. Only fall back to defaultNamespace when no policy matches.
-  const policy = config.namespacePolicies.find((p) => p.name === namespace);
-  if (!policy) return namespace === config.defaultNamespace;
+  const identity = normalizeNamespaceIdentity(namespace);
+  const policy = config.namespacePolicies.find((p) => normalizeNamespaceIdentity(p.name) === identity);
+  if (!policy) return identity === normalizeNamespaceIdentity(config.defaultNamespace);
   return policy.writePrincipals.some((w) => w.trim().length > 0);
 }
 
@@ -102,8 +108,10 @@ export function isNamespacePolicyCovered(namespace: string, config: PluginConfig
 export function defaultNamespaceForPrincipal(principal: string | undefined, config: PluginConfig): string {
   if (!resolveNamespaceCapabilities(config).namespaces) return config.defaultNamespace;
   if (!principal) return config.defaultNamespace;
-  const exists = config.namespacePolicies.some((p) => p.name === principal);
-  return exists ? principal : config.defaultNamespace;
+  const policy = config.namespacePolicies.find(
+    (p) => normalizeNamespaceIdentity(p.name) === normalizeNamespaceIdentity(principal),
+  );
+  return policy ? normalizeNamespaceIdentity(policy.name) : config.defaultNamespace;
 }
 
 export function recallNamespacesForPrincipal(principal: string | undefined, config: PluginConfig): string[] {