@remnic/core 9.6.28 → 9.6.29

package/dist/{chunk-N6VIXDT7.js → chunk-C2SEH754.js}

@@ -13,7 +13,7 @@ import {
   processChatMessage,
   sessionBelongsToPrincipal,
   subscribeChatTranscript
-} from "./chunk-QLYLTKUG.js";
+} from "./chunk-XA4PWKBW.js";
 import {
   validateRequest
 } from "./chunk-2MR3MFQB.js";
@@ -28,7 +28,7 @@ import {
 } from "./chunk-35NN3ZFA.js";
 import {
   getOperation
-} from "./chunk-MRQN5Q3I.js";
+} from "./chunk-EAREADWV.js";
 import {
   assertOperationAllowed,
   enforceNamespaceAllowList,
@@ -38,7 +38,7 @@ import {
 import {
   CorrectionContractError,
   EngramAccessInputError
-} from "./chunk-YDF4HL3W.js";
+} from "./chunk-5BHIGBHQ.js";
 import {
   isTrustZoneName
 } from "./chunk-JGSKJHF7.js";
@@ -2964,4 +2964,4 @@ function positiveIntQueryParam(value, label) {
 export {
   EngramAccessHttpServer
 };
-//# sourceMappingURL=chunk-N6VIXDT7.js.map
+//# sourceMappingURL=chunk-C2SEH754.js.map

package/dist/{chunk-MRQN5Q3I.js → chunk-EAREADWV.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-D7FOKIY5.js";
 import {
   EngramAccessInputError
-} from "./chunk-YDF4HL3W.js";
+} from "./chunk-5BHIGBHQ.js";
 import {
   expandTildePath
 } from "./chunk-EYIEWJNI.js";
@@ -274,4 +274,4 @@ export {
   listRegisteredOperations,
   __resetRegistryForTest
 };
-//# sourceMappingURL=chunk-MRQN5Q3I.js.map
+//# sourceMappingURL=chunk-EAREADWV.js.map

package/dist/{chunk-GXLFDLX2.js → chunk-IF7THCGJ.js}

@@ -26,14 +26,14 @@ import {
 } from "./chunk-T4WDJPEZ.js";
 import {
   defineOperation
-} from "./chunk-MRQN5Q3I.js";
+} from "./chunk-EAREADWV.js";
 import {
   enforceNamespaceAllowList,
   tokenCapabilityStore
 } from "./chunk-D7FOKIY5.js";
 import {
   EngramAccessInputError
-} from "./chunk-YDF4HL3W.js";
+} from "./chunk-5BHIGBHQ.js";
 import {
   projectTagProjectId
 } from "./chunk-BAVVI5GP.js";
@@ -453,4 +453,4 @@ defineOperation({ name: "graph_events", description: "SSE graph events.", schema
 defineOperation({ name: "chat_message", description: "Chat message.", schema: strictSchema({ message: S.str, chatSessionId: S.str }), handler: async (_i, _ctx) => ({ result: { ok: true } }) });
 defineOperation({ name: "chat_events", description: "SSE chat events.", schema: strictSchema({}), handler: async (_i, _ctx) => ({ result: { stream: "sse" } }) });
 defineOperation({ name: "adapters_status", description: "Adapter registry metadata (issue #1850 round 5). Marker op: the HTTP transport builds the response from its own adapterRegistry, but the op still must be registered so it appears in listRegisteredOperations and enforceTokenOp can gate it for scoped tokens.", schema: strictSchema({}), handler: async (_i, _ctx) => ({ result: { ok: true } }) });
-//# sourceMappingURL=chunk-GXLFDLX2.js.map
+//# sourceMappingURL=chunk-IF7THCGJ.js.map

package/dist/{chunk-ARDRBJHD.js → chunk-SGYTQKC2.js}

@@ -3,14 +3,14 @@ import {
 } from "./chunk-2MR3MFQB.js";
 import {
   defineOperation
-} from "./chunk-MRQN5Q3I.js";
+} from "./chunk-EAREADWV.js";
 import {
   CorrectionContractError,
   DECISION_SUBCOMMANDS,
   DELTA_SUBCOMMANDS,
   EngramAccessInputError,
   isCodegraphToolName
-} from "./chunk-YDF4HL3W.js";
+} from "./chunk-5BHIGBHQ.js";
 
 // src/access-operations.ts
 import { z } from "zod";
@@ -464,4 +464,4 @@ export {
   codegraphIngestTracesOperation,
   REGISTERED_OPERATIONS
 };
-//# sourceMappingURL=chunk-ARDRBJHD.js.map
+//# sourceMappingURL=chunk-SGYTQKC2.js.map

package/dist/{chunk-QLYLTKUG.js → chunk-XA4PWKBW.js}

@@ -18,7 +18,7 @@ import {
 } from "./chunk-T4WDJPEZ.js";
 import {
   getOperation
-} from "./chunk-MRQN5Q3I.js";
+} from "./chunk-EAREADWV.js";
 import {
   assertOperationAllowed,
   capabilityAllowsOp,
@@ -27,7 +27,7 @@ import {
 } from "./chunk-D7FOKIY5.js";
 import {
   EngramAccessInputError
-} from "./chunk-YDF4HL3W.js";
+} from "./chunk-5BHIGBHQ.js";
 import {
   readEnvVar
 } from "./chunk-JUC24CTX.js";
@@ -3771,4 +3771,4 @@ export {
   MCP_SUPPORTED_PROTOCOL_VERSIONS,
   EngramMcpServer
 };
-//# sourceMappingURL=chunk-QLYLTKUG.js.map
+//# sourceMappingURL=chunk-XA4PWKBW.js.map

package/dist/{cli-CLSdmOVU.d.ts → cli-3_x5sJTL.d.ts}

@@ -8,7 +8,7 @@ import { RebuildMemoryLifecycleLedgerResult } from './maintenance/rebuild-memory
 import { RebuildObservationsResult } from './maintenance/rebuild-observations.js';
 import { ArchiveObservationsResult } from './maintenance/archive-observations.js';
 import { Writable, Readable } from 'node:stream';
-import { C as ConversationIndexCoordinator, T as TierMigrationCoordinator, O as Orchestrator } from './orchestrator-BzXGNHco.js';
+import { C as ConversationIndexCoordinator, T as TierMigrationCoordinator, O as Orchestrator } from './orchestrator-CAH5-PKN.js';
 import { ReplayRunSummary } from './replay/runner.js';
 import { ReplaySource, ReplayTurn } from './replay/types.js';
 import { P as ProcessBatchFn } from './pipeline-CiD86zIk.js';
@@ -16,7 +16,7 @@ import { WorkProjectStatus, WorkTaskStatus, WorkTaskPriority } from './work/type
 import { RoutePatternType } from './routing/engine.js';
 import { TailscaleSyncOptions } from './network/tailscale.js';
 import { DashboardStatus } from './dashboard-runtime.js';
-import { F as EngramAccessService } from './access-service-DK7s3wMj.js';
+import { F as EngramAccessService } from './access-service-BofDzaPT.js';
 import { ResolveSecretRefFn } from './resolve-auth-token.js';
 import { CompatRunner, CompatReport } from './compat/types.js';
 import { EvalBaselineDeltaReport, EvalBaselineSnapshot, EvalCiGateReport, EvalBenchmarkPackSummary, EvalHarnessStatus, EvalStoredBaselineCiGateReport } from './evals.js';

package/dist/cli.d.ts

@@ -8,7 +8,7 @@ import './maintenance/rebuild-memory-lifecycle-ledger.js';
 import './maintenance/rebuild-observations.js';
 import './maintenance/archive-observations.js';
 import 'node:stream';
-import './orchestrator-BzXGNHco.js';
+import './orchestrator-CAH5-PKN.js';
 import './replay/runner.js';
 import './replay/types.js';
 import './pipeline-CiD86zIk.js';
@@ -16,7 +16,7 @@ import './work/types.js';
 import './routing/engine.js';
 import './network/tailscale.js';
 import './dashboard-runtime.js';
-import './access-service-DK7s3wMj.js';
+import './access-service-BofDzaPT.js';
 import './resolve-auth-token.js';
 import './compat/types.js';
 import './evals.js';
@@ -39,7 +39,7 @@ import './session-integrity.js';
 import './recall-state.js';
 import './storage-DxPDAiU9.js';
 import './connectors-cli-2iaQ5tX2.js';
-export { A as AccessHttpServeCliCommandOptions, a as ArchiveObservationsCliCommandOptions, B as BulkImportCliCommandOptions, C as CliApi, b as CliCommand, c as CliProgram, d as CompatCliCommandOptions, e as ConnectorsRunCliOutputOptions, f as ConversationIndexHealthCliOrchestrator, D as DashboardStartCliCommandOptions, g as DedupeCandidate, E as ExactDedupePlan, G as GraphHealthCliCommandOptions, M as MemoryActionAuditCliCommandOptions, h as MemoryActionAuditCliNamespaceSummary, i as MemoryActionAuditCliReport, j as MemoryGovernanceCliCommandOptions, k as MemoryGovernanceReportCliCommandOptions, l as MemoryGovernanceRestoreCliCommandOptions, m as MemoryReviewDispositionCliCommandOptions, n as MemoryTimelineCliCommandOptions, o as MigrateCliOrchestrator, q as MigrateCliReport, s as MigrateObservationsCliCommandOptions, P as PolicyDiffCliReport, t as PolicyDiffEntry, u as PolicyRollbackCliReport, v as PolicyStatusCliReport, w as PolicyTuningCliOrchestrator, R as RebuildMemoryLifecycleLedgerCliCommandOptions, x as RebuildMemoryProjectionCliCommandOptions, y as RebuildObservationsCliCommandOptions, z as RepairMemoryProjectionCliCommandOptions, F as ReplayCliCommandOptions, H as ReplayCliOrchestrator, I as RouteCliCommandOptions, S as SessionIntegrityCliCommandOptions, J as SessionRepairCliCommandOptions, T as TailscaleStatusCliCommandOptions, K as TailscaleSyncCliCommandOptions, L as TierMigrateCliAdapter, N as TierMigrateCoordinatorCliAdapter, O as TierMigrateLegacyCliAdapter, Q as TierStatusCliAdapter, U as TierStatusCoordinatorCliAdapter, V as TierStatusLegacyCliAdapter, W as TrainingExportCliCommandOptions, X as VerifyMemoryProjectionCliCommandOptions, Y as WebDavServeCliCommandOptions, Z as WorkProjectCliCommandOptions, _ as WorkTaskCliCommandOptions, $ as emitConnectorsRunCliResult, a0 as filterNormalMemorySearchResults, a1 as hasDestructivePurgeFailures, a2 as isNormalRetrievalVisibleMemory, a3 as listMemoryMarkdownFilePaths, a4 as parseDurationToMs, a5 as parseStrictCliDate, a6 as planAggressiveDuplicateDeletions, a7 as planExactDuplicateDeletions, a8 as registerCli, a9 as resolveAccessPrincipalOverride, aa as resolveMemoryDirForNamespace, ab as runAbstractionNodeStatusCliCommand, ac as runAccessHttpServeCliCommand, ad as runAccessHttpStatusCliCommand, ae as runAccessHttpStopCliCommand, af as runAccessMcpServeCliCommand, ag as runArchiveObservationsCliCommand, ah as runBenchmarkBaselineReportCliCommand, ai as runBenchmarkBaselineSnapshotCliCommand, aj as runBenchmarkCiGateCliCommand, ak as runBenchmarkImportCliCommand, al as runBenchmarkStatusCliCommand, am as runBenchmarkStoredBaselineCiGateCliCommand, an as runBenchmarkValidateCliCommand, r as runBulkImportCliCommand, ao as runCausalTrajectoryStatusCliCommand, ap as runCommitmentLifecycleCliCommand, aq as runCommitmentRecordCliCommand, ar as runCommitmentSetStateCliCommand, as as runCommitmentStatusCliCommand, at as runCompatCliCommand, au as runCompoundingPromoteCliCommand, av as runConversationIndexHealthCliCommand, aw as runConversationIndexInspectCliCommand, ax as runConversationIndexRebuildCliCommand, ay as runCueAnchorStatusCliCommand, az as runDashboardStartCliCommand, aA as runDashboardStatusCliCommand, aB as runDashboardStopCliCommand, aC as runGraphHealthCliCommand, aD as runHarmonicSearchCliCommand, aE as runMemoryActionAuditCliCommand, aF as runMemoryGovernanceCliCommand, aG as runMemoryGovernanceReportCliCommand, aH as runMemoryGovernanceRestoreCliCommand, aI as runMemoryReviewDispositionCliCommand, aJ as runMemoryTimelineCliCommand, aK as runMigrateNormalizeFrontmatterCliCommand, aL as runMigrateObservationsCliCommand, aM as runMigrateRechunkCliCommand, aN as runMigrateReextractCliCommand, aO as runMigrateRescoreImportanceCliCommand, aP as runObjectiveStateStatusCliCommand, aQ as runPolicyDiffCliCommand, aR as runPolicyRollbackCliCommand, aS as runPolicyStatusCliCommand, aT as runRebuildMemoryLifecycleLedgerCliCommand, aU as runRebuildMemoryProjectionCliCommand, aV as runRebuildObservationsCliCommand, aW as runRepairMemoryProjectionCliCommand, aX as runReplayCliCommand, aY as runResumeBundleBuildCliCommand, aZ as runResumeBundleRecordCliCommand, a_ as runResumeBundleStatusCliCommand, a$ as runRouteCliCommand, b0 as runSemanticRulePromoteCliCommand, b1 as runSemanticRuleVerifyCliCommand, b2 as runSessionCheckCliCommand, b3 as runSessionRepairCliCommand, b4 as runTailscaleStatusCliCommand, b5 as runTailscaleSyncCliCommand, b6 as runTierMigrateCliCommand, b7 as runTierStatusCliCommand, b8 as runTrainingExportCliCommand, b9 as runTrustZoneDemoSeedCliCommand, ba as runTrustZonePromoteCliCommand, bb as runTrustZoneStatusCliCommand, bc as runUtilityLearningCliCommand, bd as runUtilityLearningStatusCliCommand, be as runUtilityTelemetryRecordCliCommand, bf as runUtilityTelemetryStatusCliCommand, bg as runVerifiedRecallSearchCliCommand, bh as runVerifyMemoryProjectionCliCommand, bi as runWebDavServeCliCommand, bj as runWebDavStopCliCommand, bk as runWorkProductRecallSearchCliCommand, bl as runWorkProductRecordCliCommand, bm as runWorkProductStatusCliCommand, bn as runWorkProjectCliCommand, bo as runWorkTaskCliCommand } from './cli-CLSdmOVU.js';
+export { A as AccessHttpServeCliCommandOptions, a as ArchiveObservationsCliCommandOptions, B as BulkImportCliCommandOptions, C as CliApi, b as CliCommand, c as CliProgram, d as CompatCliCommandOptions, e as ConnectorsRunCliOutputOptions, f as ConversationIndexHealthCliOrchestrator, D as DashboardStartCliCommandOptions, g as DedupeCandidate, E as ExactDedupePlan, G as GraphHealthCliCommandOptions, M as MemoryActionAuditCliCommandOptions, h as MemoryActionAuditCliNamespaceSummary, i as MemoryActionAuditCliReport, j as MemoryGovernanceCliCommandOptions, k as MemoryGovernanceReportCliCommandOptions, l as MemoryGovernanceRestoreCliCommandOptions, m as MemoryReviewDispositionCliCommandOptions, n as MemoryTimelineCliCommandOptions, o as MigrateCliOrchestrator, q as MigrateCliReport, s as MigrateObservationsCliCommandOptions, P as PolicyDiffCliReport, t as PolicyDiffEntry, u as PolicyRollbackCliReport, v as PolicyStatusCliReport, w as PolicyTuningCliOrchestrator, R as RebuildMemoryLifecycleLedgerCliCommandOptions, x as RebuildMemoryProjectionCliCommandOptions, y as RebuildObservationsCliCommandOptions, z as RepairMemoryProjectionCliCommandOptions, F as ReplayCliCommandOptions, H as ReplayCliOrchestrator, I as RouteCliCommandOptions, S as SessionIntegrityCliCommandOptions, J as SessionRepairCliCommandOptions, T as TailscaleStatusCliCommandOptions, K as TailscaleSyncCliCommandOptions, L as TierMigrateCliAdapter, N as TierMigrateCoordinatorCliAdapter, O as TierMigrateLegacyCliAdapter, Q as TierStatusCliAdapter, U as TierStatusCoordinatorCliAdapter, V as TierStatusLegacyCliAdapter, W as TrainingExportCliCommandOptions, X as VerifyMemoryProjectionCliCommandOptions, Y as WebDavServeCliCommandOptions, Z as WorkProjectCliCommandOptions, _ as WorkTaskCliCommandOptions, $ as emitConnectorsRunCliResult, a0 as filterNormalMemorySearchResults, a1 as hasDestructivePurgeFailures, a2 as isNormalRetrievalVisibleMemory, a3 as listMemoryMarkdownFilePaths, a4 as parseDurationToMs, a5 as parseStrictCliDate, a6 as planAggressiveDuplicateDeletions, a7 as planExactDuplicateDeletions, a8 as registerCli, a9 as resolveAccessPrincipalOverride, aa as resolveMemoryDirForNamespace, ab as runAbstractionNodeStatusCliCommand, ac as runAccessHttpServeCliCommand, ad as runAccessHttpStatusCliCommand, ae as runAccessHttpStopCliCommand, af as runAccessMcpServeCliCommand, ag as runArchiveObservationsCliCommand, ah as runBenchmarkBaselineReportCliCommand, ai as runBenchmarkBaselineSnapshotCliCommand, aj as runBenchmarkCiGateCliCommand, ak as runBenchmarkImportCliCommand, al as runBenchmarkStatusCliCommand, am as runBenchmarkStoredBaselineCiGateCliCommand, an as runBenchmarkValidateCliCommand, r as runBulkImportCliCommand, ao as runCausalTrajectoryStatusCliCommand, ap as runCommitmentLifecycleCliCommand, aq as runCommitmentRecordCliCommand, ar as runCommitmentSetStateCliCommand, as as runCommitmentStatusCliCommand, at as runCompatCliCommand, au as runCompoundingPromoteCliCommand, av as runConversationIndexHealthCliCommand, aw as runConversationIndexInspectCliCommand, ax as runConversationIndexRebuildCliCommand, ay as runCueAnchorStatusCliCommand, az as runDashboardStartCliCommand, aA as runDashboardStatusCliCommand, aB as runDashboardStopCliCommand, aC as runGraphHealthCliCommand, aD as runHarmonicSearchCliCommand, aE as runMemoryActionAuditCliCommand, aF as runMemoryGovernanceCliCommand, aG as runMemoryGovernanceReportCliCommand, aH as runMemoryGovernanceRestoreCliCommand, aI as runMemoryReviewDispositionCliCommand, aJ as runMemoryTimelineCliCommand, aK as runMigrateNormalizeFrontmatterCliCommand, aL as runMigrateObservationsCliCommand, aM as runMigrateRechunkCliCommand, aN as runMigrateReextractCliCommand, aO as runMigrateRescoreImportanceCliCommand, aP as runObjectiveStateStatusCliCommand, aQ as runPolicyDiffCliCommand, aR as runPolicyRollbackCliCommand, aS as runPolicyStatusCliCommand, aT as runRebuildMemoryLifecycleLedgerCliCommand, aU as runRebuildMemoryProjectionCliCommand, aV as runRebuildObservationsCliCommand, aW as runRepairMemoryProjectionCliCommand, aX as runReplayCliCommand, aY as runResumeBundleBuildCliCommand, aZ as runResumeBundleRecordCliCommand, a_ as runResumeBundleStatusCliCommand, a$ as runRouteCliCommand, b0 as runSemanticRulePromoteCliCommand, b1 as runSemanticRuleVerifyCliCommand, b2 as runSessionCheckCliCommand, b3 as runSessionRepairCliCommand, b4 as runTailscaleStatusCliCommand, b5 as runTailscaleSyncCliCommand, b6 as runTierMigrateCliCommand, b7 as runTierStatusCliCommand, b8 as runTrainingExportCliCommand, b9 as runTrustZoneDemoSeedCliCommand, ba as runTrustZonePromoteCliCommand, bb as runTrustZoneStatusCliCommand, bc as runUtilityLearningCliCommand, bd as runUtilityLearningStatusCliCommand, be as runUtilityTelemetryRecordCliCommand, bf as runUtilityTelemetryStatusCliCommand, bg as runVerifiedRecallSearchCliCommand, bh as runVerifyMemoryProjectionCliCommand, bi as runWebDavServeCliCommand, bj as runWebDavStopCliCommand, bk as runWorkProductRecallSearchCliCommand, bl as runWorkProductRecordCliCommand, bm as runWorkProductStatusCliCommand, bn as runWorkProjectCliCommand, bo as runWorkTaskCliCommand } from './cli-3_x5sJTL.js';
 import './policy-runtime.js';
 import './shared-context/manager.js';
 import 'zod';

package/dist/cli.js

@@ -90,7 +90,7 @@ import {
   runWorkProductStatusCliCommand,
   runWorkProjectCliCommand,
   runWorkTaskCliCommand
-} from "./chunk-43VNWTBB.js";
+} from "./chunk-3RROR5KV.js";
 import "./chunk-MMACM5G2.js";
 import "./chunk-54BGIBCR.js";
 import "./chunk-H4CKS5B2.js";
@@ -168,7 +168,7 @@ import "./chunk-G6NKALRN.js";
 import "./chunk-OO42R444.js";
 import "./chunk-K6MV3TRQ.js";
 import "./chunk-OADWQ5CR.js";
-import "./chunk-N6VIXDT7.js";
+import "./chunk-C2SEH754.js";
 import "./chunk-V7IZKJI3.js";
 import "./chunk-SEDEKFYQ.js";
 import "./chunk-RKNJBZ55.js";
@@ -177,13 +177,13 @@ import "./chunk-RSUYKGGZ.js";
 import "./chunk-42NQ7AVG.js";
 import "./chunk-TMSXWOBZ.js";
 import "./chunk-7RXCMVFQ.js";
-import "./chunk-QLYLTKUG.js";
+import "./chunk-XA4PWKBW.js";
 import "./chunk-IC2TCZJ2.js";
 import "./chunk-D24OXEPB.js";
 import "./chunk-5RUE3GHQ.js";
-import "./chunk-ARDRBJHD.js";
+import "./chunk-SGYTQKC2.js";
 import "./chunk-2MR3MFQB.js";
-import "./chunk-GXLFDLX2.js";
+import "./chunk-IF7THCGJ.js";
 import "./chunk-HLTAPHZZ.js";
 import "./chunk-YF6FMLBT.js";
 import "./chunk-PRTA6444.js";
@@ -191,9 +191,9 @@ import "./chunk-KQDNAXOM.js";
 import "./chunk-35NN3ZFA.js";
 import "./chunk-FTYDWKO6.js";
 import "./chunk-T4WDJPEZ.js";
-import "./chunk-MRQN5Q3I.js";
+import "./chunk-EAREADWV.js";
 import "./chunk-D7FOKIY5.js";
-import "./chunk-YDF4HL3W.js";
+import "./chunk-5BHIGBHQ.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import "./chunk-M5QKGHCR.js";

package/dist/explicit-capture.d.ts

@@ -1,4 +1,4 @@
-import { O as Orchestrator } from './orchestrator-BzXGNHco.js';
+import { O as Orchestrator } from './orchestrator-CAH5-PKN.js';
 import { u as MemoryCategory, P as PluginConfig } from './types-DDUDgd7T.js';
 import './briefing.js';
 import './storage-DxPDAiU9.js';

package/dist/index.d.ts

@@ -2,8 +2,8 @@ export { PluginEntryResolverOptions, resolvePluginEntry } from './plugin-entry-r
 export { isOpenaiApiKeyDisabled, parseConfig, resolveEnvVars } from './config.js';
 export { resolveRemnicConfigRecord } from './config-record.js';
 export { MigrationOptions, MigrationResult, RollbackResult, migrateFromEngram, rollbackFromEngramMigration } from './migrate/from-engram.js';
-import { b as SpeakerRegistry, W as WearablesService } from './orchestrator-BzXGNHco.js';
-export { D as DEFAULT_SELF_NAME, O as Orchestrator, c as ResolvedSpeaker, d as SpeakerOverride, e as WEARABLE_SOURCE_PREFIX, f as WearableDayTranscriptView, g as WearableMemoryGenDeps, h as WearableMemoryGenResult, i as WearableMemorySearchResult, j as WearableMemoryWriter, k as WearableSearchBackend, l as WearableStorageIo, m as WearableSyncDeps, n as WearableSyncOptions, o as WearableTranscriptSearchResult, p as WearablesServiceDeps, q as buildExtractionTurns, r as dateInTimezone, s as defaultTimezone, t as defaultWorkspaceDir, u as distinctSpeakerLabels, v as emptySpeakerRegistry, w as generateWearableMemories, x as importNativeMemories, y as loadSpeakerRegistry, z as locateTranscriptPath, A as memoryStatusForMode, B as resolveSpeaker, E as resolveSyncDates, F as sanitizeSessionKeyForFilename, H as saveSpeakerRegistry, J as speakerRegistryKey, K as speakersFilePath, L as syncWearableSource, M as wearableDayTag, N as wearableSourceLabel, Q as writeDailyDigestMemory } from './orchestrator-BzXGNHco.js';
+import { b as SpeakerRegistry, W as WearablesService } from './orchestrator-CAH5-PKN.js';
+export { D as DEFAULT_SELF_NAME, O as Orchestrator, c as ResolvedSpeaker, d as SpeakerOverride, e as WEARABLE_SOURCE_PREFIX, f as WearableDayTranscriptView, g as WearableMemoryGenDeps, h as WearableMemoryGenResult, i as WearableMemorySearchResult, j as WearableMemoryWriter, k as WearableSearchBackend, l as WearableStorageIo, m as WearableSyncDeps, n as WearableSyncOptions, o as WearableTranscriptSearchResult, p as WearablesServiceDeps, q as buildExtractionTurns, r as dateInTimezone, s as defaultTimezone, t as defaultWorkspaceDir, u as distinctSpeakerLabels, v as emptySpeakerRegistry, w as generateWearableMemories, x as importNativeMemories, y as loadSpeakerRegistry, z as locateTranscriptPath, A as memoryStatusForMode, B as resolveSpeaker, E as resolveSyncDates, F as sanitizeSessionKeyForFilename, H as saveSpeakerRegistry, J as speakerRegistryKey, K as speakersFilePath, L as syncWearableSource, M as wearableDayTag, N as wearableSourceLabel, Q as writeDailyDigestMemory } from './orchestrator-CAH5-PKN.js';
 export { normalizeProjectionPreview, normalizeProjectionTags } from './memory-projection-format.js';
 export { ModelCapabilities, ModelRegistry } from './model-registry.js';
 export { ACTIVE_STATUSES, ContradictionFilter, ContradictionJudgeBatchResult, ContradictionJudgeInput, ContradictionJudgeResult, ContradictionListResult, ContradictionVerdict, ResolutionResult, ResolutionVerb, ScanDependencies, ScanResult, computePairId, executeResolution, isCoolingDown, isValidResolutionVerb, judgeContradictionPairs, listPairs, readPair, resolvePair, runContradictionScan, writePair, writePairs } from './contradiction/index.js';
@@ -25,7 +25,7 @@ import { aF as CodingContext, aY as CodingModeConfig, aK as WearableConversation
 export { a2 as AgentAccessAuthToken, l as BriefingActiveThread, b1 as BriefingConfig, j as BriefingFocus, i as BriefingFollowup, b2 as BriefingOpenCommitment, n as BriefingRecentEntity, m as BriefingResult, h as BriefingSections, b3 as BriefingWindow, Y as BufferSurpriseEvent, b4 as BulkImportError, _ as BulkImportOptions, a0 as BulkImportResult, $ as BulkImportSource, b5 as BulkImportSourceAdapter, k as CalendarEvent, C as CalendarSource, b6 as CodexCompatConfig, aX as ConsolidationObservation, ag as ContinuityImprovementLoop, b7 as DEFAULT_RECALL_DISCLOSURE, E as EntityFile, ac as EntityStructuredSection, b8 as ExtractedFact, G as GatewayConfig, b9 as ImportSourceRole, Z as ImportTurn, ba as ImportTurnValidationIssue, al as MemoryActionEligibilityContext, bb as MemoryActionEligibilitySource, a6 as MemoryActionType, M as MemoryFile, p as MemoryFrontmatter, bc as MemoryObservation, bd as MemoryScope, be as RECALL_DISCLOSURE_LEVELS, R as RecallDisclosure, a1 as SecretRef, bf as WearableAuthCheck, bg as WearableFetchOptions, bh as WearableFetchPage, aN as WearableMemoryMode, aM as WearableNativeMemory, bi as WearableNativeMemoryPage, aR as WearableSourceStatus, aQ as WearableSyncSummary, bj as WearableTranscriptSegment, bk as isImportRole, bl as isRecallDisclosure, bm as parseIsoTimestamp, bn as validateImportTurn } from './types-DDUDgd7T.js';
 export { JudgeBatchResult, JudgeCandidate, JudgeVerdict, JudgeVerdictKind, clearVerdictCache, createVerdictCache, getVerdictKind, isDurableVerdict, isValidCachedVerdict, judgeFactDurability, normalizeCachedVerdict, verdictCacheSize } from './extraction-judge.js';
 export { hasBroadGraphIntent, inferIntentFromText, intentCompatibilityScore, isTaskInitiationIntent, planRecallMode } from './intent.js';
-export { G as EngramAccessInputError, F as EngramAccessService, P as ProcedureStatsConfigSnapshot, H as ProcedureStatsRecent, I as ProcedureStatsReport, J as ProcedureStatusCounts, K as computeProcedureStats, L as formatProcedureStatsText } from './access-service-DK7s3wMj.js';
+export { G as EngramAccessInputError, F as EngramAccessService, P as ProcedureStatsConfigSnapshot, H as ProcedureStatsRecent, I as ProcedureStatsReport, J as ProcedureStatusCounts, K as computeProcedureStats, L as formatProcedureStatsText } from './access-service-BofDzaPT.js';
 export { FILTER_LABELS as DIRECT_ANSWER_FILTER_LABELS, DirectAnswerCandidate, DirectAnswerConfig, DirectAnswerInput, DirectAnswerReason, DirectAnswerResult, isDirectAnswerEligible } from './direct-answer.js';
 export { MemoryTier, TierRoutingPolicy, TierTransitionDecision, computeTierValueScore, decideTierTransition } from './tier-routing.js';
 export { ApplyReasoningTraceBoostOptions, BoostableResult, DEFAULT_REASONING_TRACE_BOOST, applyReasoningTraceBoost, isReasoningTracePath, looksLikeProblemSolvingQuery } from './reasoning-trace-recall.js';
@@ -81,7 +81,7 @@ export { a as TaxonomyCategory } from './types-DJhqDJUV.js';
 export { EnrichmentAuditEntry, EnrichmentCandidate, EnrichmentCostTier, EnrichmentPipelineConfig, EnrichmentProvider, EnrichmentProviderConfig, EnrichmentProviderRegistry, EnrichmentResult, EntityEnrichmentInput, WebSearchFn, WebSearchProvider, WebSearchProviderOptions, appendAuditEntry, defaultEnrichmentPipelineConfig, readAuditLog, runEnrichmentPipeline } from './enrichment/index.js';
 export { clearBulkImportSources, getBulkImportSource, listBulkImportSources, registerBulkImportSource } from './bulk-import/index.js';
 export { a as ProcessBatchContext, P as ProcessBatchFn, b as ProcessBatchResult, f as formatBatchTranscript, r as resolveBulkImportContext, c as runBulkImportPipeline, v as validateBatchSize } from './pipeline-CiD86zIk.js';
-export { B as BulkImportCliCommandOptions, p as parseStrictCliDate, r as runBulkImportCliCommand } from './cli-CLSdmOVU.js';
+export { B as BulkImportCliCommandOptions, p as parseStrictCliDate, r as runBulkImportCliCommand } from './cli-3_x5sJTL.js';
 export { DEFAULT_IMPORT_BATCH_SIZE, ImportProgress, ImportedMemory, ImporterAdapter, ImporterParseOptions, ImporterTransformOptions, ImporterWriteResult, ImporterWriteTarget, RunImportOptions, RunImporterResult, defaultWriteMemoriesToOrchestrator, importedMemoryToTurn, runImporter, validateImportBatchSize, validateImportRateLimit } from './importers/index.js';
 export { FallbackLlmClient, FallbackLlmOptions, FallbackLlmResponse, FallbackLlmRuntimeContext } from './fallback-llm.js';
 export { ComputeMemoryWorthInput, MemoryWorthResult, computeMemoryWorth } from './memory-worth.js';

package/dist/index.js

@@ -93,7 +93,7 @@ import {
   validateTaxonomy,
   watchForChanges,
   writeManifest
-} from "./chunk-4273YO6I.js";
+} from "./chunk-5WJ4LBFR.js";
 import {
   WEARABLE_SOURCE_PREFIX,
   buildExtractionTurns,
@@ -348,7 +348,7 @@ import {
   registerTrainingExportAdapter,
   runBulkImportCliCommand,
   runWearablesCliCommand
-} from "./chunk-43VNWTBB.js";
+} from "./chunk-3RROR5KV.js";
 import "./chunk-MMACM5G2.js";
 import "./chunk-54BGIBCR.js";
 import "./chunk-H4CKS5B2.js";
@@ -550,7 +550,7 @@ import "./chunk-K6MV3TRQ.js";
 import "./chunk-OADWQ5CR.js";
 import {
   EngramAccessHttpServer
-} from "./chunk-N6VIXDT7.js";
+} from "./chunk-C2SEH754.js";
 import {
   WearablesInputError,
   describeErrorForOperator
@@ -564,7 +564,7 @@ import "./chunk-TMSXWOBZ.js";
 import "./chunk-7RXCMVFQ.js";
 import {
   EngramMcpServer
-} from "./chunk-QLYLTKUG.js";
+} from "./chunk-XA4PWKBW.js";
 import "./chunk-IC2TCZJ2.js";
 import {
   buildCitationGuidance,
@@ -573,7 +573,7 @@ import {
   sanitizeNoteForCitation
 } from "./chunk-D24OXEPB.js";
 import "./chunk-5RUE3GHQ.js";
-import "./chunk-ARDRBJHD.js";
+import "./chunk-SGYTQKC2.js";
 import {
   formatZodError,
   memoryStoreRequestSchema,
@@ -582,7 +582,7 @@ import {
   suggestionSubmitRequestSchema,
   validateRequest
 } from "./chunk-2MR3MFQB.js";
-import "./chunk-GXLFDLX2.js";
+import "./chunk-IF7THCGJ.js";
 import "./chunk-HLTAPHZZ.js";
 import "./chunk-YF6FMLBT.js";
 import {
@@ -615,7 +615,7 @@ import {
 } from "./chunk-T4WDJPEZ.js";
 import {
   OPERATION_NAMES
-} from "./chunk-MRQN5Q3I.js";
+} from "./chunk-EAREADWV.js";
 import {
   TOKEN_CAPABILITIES_VERSION,
   capabilityAllowsNamespace,
@@ -631,7 +631,7 @@ import {
   EngramAccessService,
   computeProcedureStats,
   formatProcedureStatsText
-} from "./chunk-YDF4HL3W.js";
+} from "./chunk-5BHIGBHQ.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import "./chunk-M5QKGHCR.js";

package/dist/mcp-memory-inspector-app.d.ts

@@ -1,11 +1,11 @@
-import { x as EngramAccessRecallResponse } from './access-service-DK7s3wMj.js';
+import { x as EngramAccessRecallResponse } from './access-service-BofDzaPT.js';
 import { ActionConfidenceRequest } from './access-schema.js';
 import { RecallXraySnapshot } from './recall-xray.js';
 import { ActionConfidenceResult } from './action-confidence.js';
 import './catalog-9WanSGtt.js';
 import './types-DDUDgd7T.js';
 import './message-parts/index.js';
-import './orchestrator-BzXGNHco.js';
+import './orchestrator-CAH5-PKN.js';
 import './briefing.js';
 import './storage-DxPDAiU9.js';
 import './page-versioning.js';

package/dist/{orchestrator-BzXGNHco.d.ts → orchestrator-CAH5-PKN.d.ts}

@@ -2243,6 +2243,8 @@ declare class Orchestrator {
      * capturing caller can still read their snapshot back.
      */
     private lastXraySnapshot;
+    /** Per-instance ordering domain for every writer of `lastXraySnapshot`. */
+    private readonly xrayCaptureQueue;
     readonly embeddingFallback: EmbeddingFallback;
     private readonly conversationIndexDir;
     private readonly extraction;
@@ -2638,17 +2640,32 @@ declare class Orchestrator {
         checkpointHealthy: boolean;
     }>;
     private validateLocalLlmModel;
+    private invokeRecall;
     recall(prompt: string, sessionKey?: string, options?: RecallInvocationOptions): Promise<string>;
     /**
-     * Return the most recent X-ray snapshot captured during a
-     * `recall()` call that passed `xrayCapture: true` (issue #570 PR 1).
+     * Return the most recent X-ray snapshot captured during a recall.
      * Returns `null` when no such capture has occurred on this
      * orchestrator instance.  Returned snapshot is a deep copy so
      * caller mutation cannot tear the stored value.
+     *
+     * @deprecated Reading this after a separate `recall()` is not atomic. Use
+     * `recallWithXrayCapture()` when the snapshot must belong to that call.
      */
     getLastXraySnapshot(): RecallXraySnapshot | null;
-    /** Clear the captured X-ray snapshot.  Exposed for tests / explicit reset. */
+    /**
+     * Clear the captured X-ray snapshot. Exposed for tests / explicit reset.
+     *
+     * @deprecated A separate clear → recall → get sequence is not atomic. Use
+     * `recallWithXrayCapture()` for capture operations.
+     */
     clearLastXraySnapshot(): void;
+    /** Atomically run recall and return the cloned X-ray snapshot it published. */
+    recallWithXrayCapture(prompt: string, sessionKey?: string, options?: Omit<RecallInvocationOptions, "xrayCapture">): Promise<{
+        result: string;
+        snapshot: RecallXraySnapshot | null;
+        recallStartedAt: number;
+    }>;
+    private runRecallWithXrayCapture;
     waitForDirectAnswerObservationIdle(timeoutMs?: number): Promise<boolean>;
     private enqueueDirectAnswerObservation;
     private annotateDirectAnswerTier;

package/dist/orchestrator.d.ts

@@ -8,7 +8,7 @@ import './summarizer.js';
 import './local-llm.js';
 import './fallback-llm.js';
 import './orchestration/maintenance.js';
-export { U as BulkImportBatchIngestResult, V as BulkImportBatchPartialFailureError, X as COMPACTION_SIGNAL_MAX_AGE_MS, Y as DaySummaryGatherOptions, Z as ExtractionRunResult, _ as GraphRecallRankedResult, $ as GraphRecallShadowComparison, G as GraphRecallSnapshot, I as IntentDebugSnapshot, O as Orchestrator, a0 as QmdRecallSnapshot, a1 as QueryAwarePrefilter, a2 as RecallInvocationOptions, a3 as RecallModeDecision, a4 as appendMemoryToGraphContext, a5 as applyQueryAwareCandidateFilter, a6 as blendGraphExpandedRecallScore, a7 as buildCompressionGuidelinesMarkdown, a8 as buildMemoryPathById, a9 as computeArtifactCandidateFetchLimit, aa as computeArtifactRecallLimit, ab as computeQmdHybridFetchLimit, t as defaultWorkspaceDir, ac as deriveTopicsFromExtraction, ad as filterHourlySummaryMarkdownForLocalDay, ae as filterRecallCandidates, af as formatDateInTimeZone, ag as graphPathRelativeToStorage, ah as hasIdentityRecoveryIntent, ai as isArtifactMemoryPath, aj as lifecycleRecallScoreAdjustment, ak as mapRecallSourceToXrayServedBy, al as mergeArtifactRecallCandidates, am as mergeGraphExpandedResults, an as normalizeIanaTimeZone, ao as parseFiniteDate, ap as parseGraphRecallRankedResults, aq as parseMemoryIntentSnapshot, ar as parseQmdRecallResults, as as qmdStartupCollectionCheckWithTimeout, at as raceRecallAbort, au as resolveEffectiveIdentityInjectionMode, av as resolveEffectiveRecallMode, aw as resolvePersistedMemoryRelativePath, ax as resolveRecallModeDecision, ay as resolveRecallModeDecisionAsync, az as resolveRecentThreadMemoryPaths, F as sanitizeSessionKeyForFilename, aA as shouldFilterLifecycleRecallCandidate, aB as splitTurnsBySourceValidAt, aC as summarizeGraphShadowComparison, aD as targetSourceValidAtSortMs, aE as throwIfRecallAborted, aF as tokenizeRecallQuery, aG as utcDateKeysForLocalDay } from './orchestrator-BzXGNHco.js';
+export { U as BulkImportBatchIngestResult, V as BulkImportBatchPartialFailureError, X as COMPACTION_SIGNAL_MAX_AGE_MS, Y as DaySummaryGatherOptions, Z as ExtractionRunResult, _ as GraphRecallRankedResult, $ as GraphRecallShadowComparison, G as GraphRecallSnapshot, I as IntentDebugSnapshot, O as Orchestrator, a0 as QmdRecallSnapshot, a1 as QueryAwarePrefilter, a2 as RecallInvocationOptions, a3 as RecallModeDecision, a4 as appendMemoryToGraphContext, a5 as applyQueryAwareCandidateFilter, a6 as blendGraphExpandedRecallScore, a7 as buildCompressionGuidelinesMarkdown, a8 as buildMemoryPathById, a9 as computeArtifactCandidateFetchLimit, aa as computeArtifactRecallLimit, ab as computeQmdHybridFetchLimit, t as defaultWorkspaceDir, ac as deriveTopicsFromExtraction, ad as filterHourlySummaryMarkdownForLocalDay, ae as filterRecallCandidates, af as formatDateInTimeZone, ag as graphPathRelativeToStorage, ah as hasIdentityRecoveryIntent, ai as isArtifactMemoryPath, aj as lifecycleRecallScoreAdjustment, ak as mapRecallSourceToXrayServedBy, al as mergeArtifactRecallCandidates, am as mergeGraphExpandedResults, an as normalizeIanaTimeZone, ao as parseFiniteDate, ap as parseGraphRecallRankedResults, aq as parseMemoryIntentSnapshot, ar as parseQmdRecallResults, as as qmdStartupCollectionCheckWithTimeout, at as raceRecallAbort, au as resolveEffectiveIdentityInjectionMode, av as resolveEffectiveRecallMode, aw as resolvePersistedMemoryRelativePath, ax as resolveRecallModeDecision, ay as resolveRecallModeDecisionAsync, az as resolveRecentThreadMemoryPaths, F as sanitizeSessionKeyForFilename, aA as shouldFilterLifecycleRecallCandidate, aB as splitTurnsBySourceValidAt, aC as summarizeGraphShadowComparison, aD as targetSourceValidAtSortMs, aE as throwIfRecallAborted, aF as tokenizeRecallQuery, aG as utcDateKeysForLocalDay } from './orchestrator-CAH5-PKN.js';
 export { formatCompressionGuidelinesForRecall } from './orchestration/compression-guideline-coordinator.js';
 import './live-connectors-runner.js';
 import './model-registry.js';

package/dist/orchestrator.js

@@ -43,7 +43,7 @@ import {
   throwIfRecallAborted,
   tokenizeRecallQuery,
   utcDateKeysForLocalDay
-} from "./chunk-4273YO6I.js";
+} from "./chunk-5WJ4LBFR.js";
 import "./chunk-J3XHPFEU.js";
 import {
   formatCompressionGuidelinesForRecall
@@ -126,7 +126,7 @@ import "./chunk-Q6IP2ARR.js";
 import "./chunk-6HEM6HTQ.js";
 import "./chunk-O2EL7EGG.js";
 import "./chunk-FVTLSFWU.js";
-import "./chunk-43VNWTBB.js";
+import "./chunk-3RROR5KV.js";
 import "./chunk-MMACM5G2.js";
 import "./chunk-54BGIBCR.js";
 import "./chunk-H4CKS5B2.js";
@@ -217,7 +217,7 @@ import "./chunk-G6NKALRN.js";
 import "./chunk-OO42R444.js";
 import "./chunk-K6MV3TRQ.js";
 import "./chunk-OADWQ5CR.js";
-import "./chunk-N6VIXDT7.js";
+import "./chunk-C2SEH754.js";
 import "./chunk-V7IZKJI3.js";
 import "./chunk-SEDEKFYQ.js";
 import "./chunk-RKNJBZ55.js";
@@ -226,13 +226,13 @@ import "./chunk-RSUYKGGZ.js";
 import "./chunk-42NQ7AVG.js";
 import "./chunk-TMSXWOBZ.js";
 import "./chunk-7RXCMVFQ.js";
-import "./chunk-QLYLTKUG.js";
+import "./chunk-XA4PWKBW.js";
 import "./chunk-IC2TCZJ2.js";
 import "./chunk-D24OXEPB.js";
 import "./chunk-5RUE3GHQ.js";
-import "./chunk-ARDRBJHD.js";
+import "./chunk-SGYTQKC2.js";
 import "./chunk-2MR3MFQB.js";
-import "./chunk-GXLFDLX2.js";
+import "./chunk-IF7THCGJ.js";
 import "./chunk-HLTAPHZZ.js";
 import "./chunk-YF6FMLBT.js";
 import "./chunk-PRTA6444.js";
@@ -240,9 +240,9 @@ import "./chunk-KQDNAXOM.js";
 import "./chunk-35NN3ZFA.js";
 import "./chunk-FTYDWKO6.js";
 import "./chunk-T4WDJPEZ.js";
-import "./chunk-MRQN5Q3I.js";
+import "./chunk-EAREADWV.js";
 import "./chunk-D7FOKIY5.js";
-import "./chunk-YDF4HL3W.js";
+import "./chunk-5BHIGBHQ.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import "./chunk-M5QKGHCR.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.6.28",
+  "version": "9.6.29",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -3000,7 +3000,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.6.28"
+    "@remnic/coding-graph": "^9.6.29"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/access-recall-surface.ts

@@ -14,6 +14,7 @@
 import { createHash } from "node:crypto";
 import * as nodePath from "node:path";
 import { AccessAuditAdapter, type AccessAuditResult } from "./access-audit.js";
+import { throwIfAborted } from "./abort-error.js";
 import { resolveNamespaceCapabilities } from "./capabilities.js";
 import { resolveCodingNamespaceOverlay } from "./coding/coding-namespace.js";
 import { type BudgetDecision, CrossNamespaceBudget } from "./cross-namespace-budget.js";
@@ -173,7 +174,6 @@ export interface AccessRecallSurfaceDeps {
     primaryNamespace: string,
     recallNamespaces?: readonly string[],
   ): Promise<{ storage: StorageManager; dir: string } | null>;
-  xrayQueue: Promise<void>;
 }
 
 export class AccessRecallSurface {
@@ -1117,6 +1117,8 @@ export class AccessRecallSurface {
      * regular X-ray API/CLI/MCP surfaces keep their existing payload shape.
      */
     includeRecall?: boolean;
+    /** Cancel the capture before it starts and propagate cancellation to recall. */
+    abortSignal?: AbortSignal;
   }): Promise<{
     snapshotFound: boolean;
     snapshot?: RecallXraySnapshot;
@@ -1195,21 +1197,9 @@ export class AccessRecallSurface {
     const mode = this.deps.normalizeRecallMode(request.mode);
     const disclosure = request.disclosure ?? DEFAULT_RECALL_DISCLOSURE;
 
-    // Serialize x-ray invocations behind a per-service mutex so the
-    // per-process `getLastXraySnapshot()` slot cannot be clobbered by
-    // a concurrent capturing call before this caller reads it back.
-    // Budget and principal are now threaded through
-    // `RecallInvocationOptions`, so global config mutation is gone
-    // (CLAUDE.md rule 47: no shared mutable state across async
-    // boundaries).  The mutex stays only for the snapshot-slot
-    // ordering guarantee.
-    const previousQueue = this.deps.xrayQueue;
-    let release: () => void = () => {};
-    this.deps.xrayQueue = new Promise<void>((resolve) => {
-      release = resolve;
-    });
-    await previousQueue;
-    const recallStartedAt = Date.now();
+    // Reset when the orchestrator-owned snapshot lock is actually acquired so
+    // queue wait is not misreported as recall latency.
+    let recallStartedAt = Date.now();
 
     const recallSessionKey = request.sessionKey?.trim() || undefined;
     let xrayResponse: {
@@ -1217,37 +1207,46 @@ export class AccessRecallSurface {
       snapshot?: RecallXraySnapshot;
     } = { snapshotFound: false };
 
-    try {
-      // Clear any prior snapshot so a capture failure surfaces as
-      // `{snapshotFound: false}` rather than returning stale data
-      // from an earlier call on the same orchestrator.
-      this.deps.orchestrator.clearLastXraySnapshot();
-      await this.deps.orchestrator.recall(query, recallSessionKey, {
-        xrayCapture: true,
-        ...(requestedNamespace ? { namespace: requestedNamespace } : {}),
-        ...(budgetOverride !== undefined
-          ? { budgetCharsOverride: budgetOverride }
-          : {}),
-        ...(mode !== undefined ? { mode } : {}),
-        // When the caller supplies an authenticated principal, forward
-        // it via the dedicated override channel so orchestrator-side
-        // ACL decisions use the SAME principal the access-surface
-        // pre-check above authorized.  Threading an
-        // `authenticatedPrincipal` through `sessionKey` would be wrong:
-        // `resolvePrincipal(sessionKey)` only maps configured raw
-        // session keys and otherwise collapses to `"default"`, which
-        // in namespace-enabled deployments produces false denials /
-        // wrong-scope serving despite the pre-check passing
-        // (CLAUDE.md rule 42).
-        ...(authenticatedPrincipal
-          ? { principalOverride: authenticatedPrincipal }
-          : {}),
-        ...(request.currentContextScopes !== undefined
-          ? { currentContextScopes: request.currentContextScopes }
-          : {}),
-      });
-
-      const rawSnapshot = this.deps.orchestrator.getLastXraySnapshot();
+    {
+      // Capture through the orchestrator-owned critical section so every
+      // consumer of its mutable snapshot slot shares the same queue. The
+      // returned clone remains owned by this call after the lock is released.
+      const {
+        snapshot: rawSnapshot,
+        recallStartedAt: capturedRecallStartedAt,
+      } = await this.deps.orchestrator.recallWithXrayCapture(
+        query,
+        recallSessionKey,
+        {
+          ...(requestedNamespace ? { namespace: requestedNamespace } : {}),
+          ...(budgetOverride !== undefined
+            ? { budgetCharsOverride: budgetOverride }
+            : {}),
+          ...(mode !== undefined ? { mode } : {}),
+          // When the caller supplies an authenticated principal, forward
+          // it via the dedicated override channel so orchestrator-side
+          // ACL decisions use the SAME principal the access-surface
+          // pre-check above authorized.  Threading an
+          // `authenticatedPrincipal` through `sessionKey` would be wrong:
+          // `resolvePrincipal(sessionKey)` only maps configured raw
+          // session keys and otherwise collapses to `"default"`, which
+          // in namespace-enabled deployments produces false denials /
+          // wrong-scope serving despite the pre-check passing
+          // (CLAUDE.md rule 42).
+          ...(authenticatedPrincipal
+            ? { principalOverride: authenticatedPrincipal }
+            : {}),
+          ...(request.currentContextScopes !== undefined
+            ? { currentContextScopes: request.currentContextScopes }
+            : {}),
+          ...(request.abortSignal ? { abortSignal: request.abortSignal } : {}),
+        },
+      );
+      recallStartedAt = capturedRecallStartedAt;
+      // Cancellation covers queueing + recall/capture. Post-capture shaping is
+      // intentionally not wired for mid-I/O abort in this change, but do not
+      // begin that work after the caller has already canceled.
+      throwIfAborted(request.abortSignal, "recall X-ray aborted before postprocessing");
       // Re-check namespace after capture: the recall may have served
       // from a different namespace than the caller requested.  Drop
       // the snapshot rather than leak cross-tenant data (CLAUDE.md
@@ -1483,8 +1482,6 @@ export class AccessRecallSurface {
           };
         }
       }
-    } finally {
-      release();
     }
 
     if (