@remnic/core 9.63.2 → 9.63.4

package/dist/orchestrator.js

@@ -3,10 +3,10 @@ import {
   blendGraphExpandedRecallScore,
   graphPathRelativeToStorage,
   mergeGraphExpandedResults
-} from "./chunk-44KHFMCM.js";
+} from "./chunk-VG6DC2GO.js";
 import "./chunk-Y7COCXY2.js";
-import "./chunk-KWN6NOHQ.js";
-import "./chunk-R74NCKEY.js";
+import "./chunk-BXOZALJ6.js";
+import "./chunk-LNFYISZ6.js";
 import "./chunk-I74SUMNI.js";
 import "./chunk-ILNPU5W5.js";
 import "./chunk-7HYPN2GC.js";
@@ -101,7 +101,7 @@ import "./chunk-PYIR4SSB.js";
 import "./chunk-DFEODULB.js";
 import "./chunk-FKJVEW6O.js";
 import "./chunk-3I4FUAVJ.js";
-import "./chunk-5UFQCU6M.js";
+import "./chunk-ZUZD2DRV.js";
 import "./chunk-MMACM5G2.js";
 import "./chunk-54BGIBCR.js";
 import "./chunk-H4CKS5B2.js";
@@ -142,8 +142,8 @@ import "./chunk-AM4T6CHX.js";
 import "./chunk-7DRSWPUV.js";
 import "./chunk-3T74IZB3.js";
 import "./chunk-2LA3H54D.js";
-import "./chunk-6F2UMP4H.js";
-import "./chunk-5W5N7XJZ.js";
+import "./chunk-CKWOMJDY.js";
+import "./chunk-RSLRGRBJ.js";
 import "./chunk-KFY3SGN7.js";
 import "./chunk-CMTINOFS.js";
 import "./chunk-B2OOJCUX.js";
@@ -166,7 +166,7 @@ import "./chunk-ACPCA4NO.js";
 import "./chunk-OKTXM5H4.js";
 import "./chunk-2ASAS3CQ.js";
 import "./chunk-NOB2T2FC.js";
-import "./chunk-6UZR7KEK.js";
+import "./chunk-DQV3LUQL.js";
 import "./chunk-PADG72LJ.js";
 import "./chunk-5JMAGU26.js";
 import "./chunk-MYVPLJOO.js";
@@ -196,7 +196,7 @@ import "./chunk-KFZY2OFH.js";
 import "./chunk-QW27DOHG.js";
 import "./chunk-C6WMSXCJ.js";
 import "./chunk-KD3QD3A5.js";
-import "./chunk-TRPX6F2G.js";
+import "./chunk-GNKY5JEP.js";
 import "./chunk-V7IZKJI3.js";
 import "./chunk-SEDEKFYQ.js";
 import "./chunk-2QSZNTDO.js";
@@ -207,20 +207,21 @@ import "./chunk-TB6CBZ5V.js";
 import "./chunk-J64TK33U.js";
 import "./chunk-7RXCMVFQ.js";
 import "./chunk-3HSRWJTC.js";
-import "./chunk-4NMVX5U7.js";
-import "./chunk-XZPSBGHA.js";
-import "./chunk-6ZYQ36IB.js";
-import "./chunk-IM56VPKO.js";
+import "./chunk-JSH2TV34.js";
+import "./chunk-ISFUFLFM.js";
+import "./chunk-MRJ43KSG.js";
+import "./chunk-A4HXWNST.js";
+import "./chunk-OR7KEGLR.js";
 import "./chunk-HIEWDJ2O.js";
 import "./chunk-A5KNZSNA.js";
 import "./chunk-D24OXEPB.js";
-import "./chunk-EJQXDKYK.js";
-import "./chunk-MR5HWQHS.js";
-import "./chunk-A73QHOZP.js";
+import "./chunk-EJCN5ATI.js";
+import "./chunk-DFEYRCG2.js";
+import "./chunk-QOMUE4FS.js";
 import "./chunk-7T4TOGMS.js";
 import "./chunk-7YQ6ESEA.js";
 import "./chunk-CIAI24TQ.js";
-import "./chunk-AJSZ2EK6.js";
+import "./chunk-3USQWITL.js";
 import "./chunk-LTBKKSCX.js";
 import "./chunk-EQWEIIKQ.js";
 import "./chunk-7BY7V4YX.js";
@@ -235,12 +236,12 @@ import "./chunk-GZ3R6XOE.js";
 import "./chunk-CK5KOVHW.js";
 import "./chunk-DJUKBGAD.js";
 import "./chunk-G73MCJKL.js";
-import "./chunk-RYGJGXL6.js";
+import "./chunk-4EDAHS6D.js";
 import {
   filterRecallCandidates,
   hasIdentityRecoveryIntent,
   resolveEffectiveIdentityInjectionMode
-} from "./chunk-JJ7JW62R.js";
+} from "./chunk-2JL7WPXL.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import "./chunk-QYN5PXDZ.js";

package/dist/{public-http-43z1YT-k.d.ts → public-http-DusietP2.d.ts}

@@ -1,5 +1,5 @@
 import { IncomingMessage, ServerResponse } from 'node:http';
-import { f as EngramAccessService } from './access-service-DBpEnlzA.js';
+import { f as EngramAccessService } from './access-service-D-bi3r01.js';
 
 declare const SUPPORT_PASSPORT_PUBLIC_HTTP_ROUTES: readonly [{
     readonly method: "GET";

package/dist/support-passport/index.d.ts

@@ -1,9 +1,9 @@
-import { S as SupportPassportExternalRequestHandler } from '../public-http-43z1YT-k.js';
-export { a as SUPPORT_PASSPORT_PUBLIC_HTTP_ROUTES, b as SupportPassportPublicHandlerOptions, c as buildSupportPassportPublicRequestHandler, d as composeSupportPassportExternalRequestHandlers, n as normalizeSupportPassportNetworkAddress } from '../public-http-43z1YT-k.js';
+import { S as SupportPassportExternalRequestHandler } from '../public-http-DusietP2.js';
+export { a as SUPPORT_PASSPORT_PUBLIC_HTTP_ROUTES, b as SupportPassportPublicHandlerOptions, c as buildSupportPassportPublicRequestHandler, d as composeSupportPassportExternalRequestHandlers, n as normalizeSupportPassportNetworkAddress } from '../public-http-DusietP2.js';
 import { OfflineSyncExcludeFile } from '../offline-sync-file-io.js';
 import { M as MemoryFile, c3 as SupportPassportConfig } from '../types-DWHOxlZP.js';
-import { $ as SupportPassportCard, a6 as SupportPassportCardServiceDependencies, av as SupportPassportManualDraftInput, ah as SupportPassportDraftCard, aT as SupportPassportOwnerScope, aX as SupportPassportReplaceCardInput, a3 as SupportPassportCardMutationInput, ap as SupportPassportGrantCardRef, ar as SupportPassportGrantState, aa as SupportPassportCreateGrantInput, af as SupportPassportCreatedGrant, aR as SupportPassportOwnerGrant, aZ as SupportPassportRevokeGrantInput, aV as SupportPassportPublicGuide, aK as SupportPassportModelRoute, az as SupportPassportModelAdapter, aD as SupportPassportModelAuditSink, Y as SupportPassportAnswerOutput } from '../access-service-DBpEnlzA.js';
-export { S as SUPPORT_PASSPORT_CARD_CATEGORIES, N as SUPPORT_PASSPORT_CARD_STATUSES, O as SUPPORT_PASSPORT_DRAFT_MAX_CONTENT_CHARACTERS, Q as SUPPORT_PASSPORT_DRAFT_MAX_MEMORIES, R as SUPPORT_PASSPORT_NOT_IN_GUIDE_ANSWER, T as SUPPORT_PASSPORT_SOURCE_MEMORY_ID_MAX_LENGTH, U as SupportPassportAccessSurface, V as SupportPassportAccessSurfaceDependencies, W as SupportPassportAnswerModelInput, X as SupportPassportAnswerModelInputSchema, Z as SupportPassportAnswerOutputSchema, _ as SupportPassportAnswerResult, a0 as SupportPassportCardCategory, a1 as SupportPassportCardCategorySchema, a2 as SupportPassportCardListSchema, a4 as SupportPassportCardMutationInputSchema, a5 as SupportPassportCardSchema, a7 as SupportPassportCardStatus, a8 as SupportPassportCardStatusSchema, a9 as SupportPassportCardTitleSchema, ab as SupportPassportCreateGrantInputSchema, ac as SupportPassportCreateGrantRequest, ad as SupportPassportCreateGrantRequestSchema, ae as SupportPassportCreateGrantResult, ag as SupportPassportCreatedGrantSchema, ai as SupportPassportDraftCardSchema, aj as SupportPassportDraftModelInput, ak as SupportPassportDraftModelInputSchema, al as SupportPassportDraftOutputSchema, am as SupportPassportDraftResult, an as SupportPassportError, ao as SupportPassportErrorCode, aq as SupportPassportGrantCardRefSchema, as as SupportPassportGrantStateSchema, at as SupportPassportListCardsInputSchema, au as SupportPassportListGrantsInputSchema, aw as SupportPassportManualDraftInputSchema, ax as SupportPassportMemoryIdSchema, ay as SupportPassportMemoryPreview, aA as SupportPassportModelAdapterOptions, aB as SupportPassportModelAuditRecord, aC as SupportPassportModelAuditRecordSchema, aE as SupportPassportModelAuditStore, aF as SupportPassportModelCallError, aG as SupportPassportModelClients, aH as SupportPassportModelFailureMetadata, aI as SupportPassportModelMessage, aJ as SupportPassportModelResultMetadata, aL as SupportPassportModelRouteKind, aM as SupportPassportModelRouteResult, aN as SupportPassportModelUsage, aO as SupportPassportNamespaceSchema, aP as SupportPassportOwnerCreateGrantRequest, aQ as SupportPassportOwnerCreateGrantRequestSchema, aS as SupportPassportOwnerGrantSchema, aU as SupportPassportPublicCardSchema, aW as SupportPassportPublicGuideSchema, aY as SupportPassportReplaceCardInputSchema, a_ as SupportPassportRevokeGrantInputSchema, a$ as SupportPassportRevokeGrantResult, b0 as SupportPassportSourceMemoryIdSchema, b1 as acceptsSupportPassportModelResponse, b2 as buildSupportPassportDirectGatewayConfig, b4 as computeSupportPassportCardRevision, b5 as createSupportPassportModelAdapter, b7 as hashSupportPassportAuditValues, b8 as resolveSupportPassportModelRoutePlan } from '../access-service-DBpEnlzA.js';
+import { $ as SupportPassportCard, a6 as SupportPassportCardServiceDependencies, av as SupportPassportManualDraftInput, ah as SupportPassportDraftCard, aT as SupportPassportOwnerScope, aX as SupportPassportReplaceCardInput, a3 as SupportPassportCardMutationInput, ap as SupportPassportGrantCardRef, ar as SupportPassportGrantState, aa as SupportPassportCreateGrantInput, af as SupportPassportCreatedGrant, aR as SupportPassportOwnerGrant, aZ as SupportPassportRevokeGrantInput, aV as SupportPassportPublicGuide, aK as SupportPassportModelRoute, az as SupportPassportModelAdapter, aD as SupportPassportModelAuditSink, Y as SupportPassportAnswerOutput } from '../access-service-D-bi3r01.js';
+export { S as SUPPORT_PASSPORT_CARD_CATEGORIES, N as SUPPORT_PASSPORT_CARD_STATUSES, O as SUPPORT_PASSPORT_DRAFT_MAX_CONTENT_CHARACTERS, Q as SUPPORT_PASSPORT_DRAFT_MAX_MEMORIES, R as SUPPORT_PASSPORT_NOT_IN_GUIDE_ANSWER, T as SUPPORT_PASSPORT_SOURCE_MEMORY_ID_MAX_LENGTH, U as SupportPassportAccessSurface, V as SupportPassportAccessSurfaceDependencies, W as SupportPassportAnswerModelInput, X as SupportPassportAnswerModelInputSchema, Z as SupportPassportAnswerOutputSchema, _ as SupportPassportAnswerResult, a0 as SupportPassportCardCategory, a1 as SupportPassportCardCategorySchema, a2 as SupportPassportCardListSchema, a4 as SupportPassportCardMutationInputSchema, a5 as SupportPassportCardSchema, a7 as SupportPassportCardStatus, a8 as SupportPassportCardStatusSchema, a9 as SupportPassportCardTitleSchema, ab as SupportPassportCreateGrantInputSchema, ac as SupportPassportCreateGrantRequest, ad as SupportPassportCreateGrantRequestSchema, ae as SupportPassportCreateGrantResult, ag as SupportPassportCreatedGrantSchema, ai as SupportPassportDraftCardSchema, aj as SupportPassportDraftModelInput, ak as SupportPassportDraftModelInputSchema, al as SupportPassportDraftOutputSchema, am as SupportPassportDraftResult, an as SupportPassportError, ao as SupportPassportErrorCode, aq as SupportPassportGrantCardRefSchema, as as SupportPassportGrantStateSchema, at as SupportPassportListCardsInputSchema, au as SupportPassportListGrantsInputSchema, aw as SupportPassportManualDraftInputSchema, ax as SupportPassportMemoryIdSchema, ay as SupportPassportMemoryPreview, aA as SupportPassportModelAdapterOptions, aB as SupportPassportModelAuditRecord, aC as SupportPassportModelAuditRecordSchema, aE as SupportPassportModelAuditStore, aF as SupportPassportModelCallError, aG as SupportPassportModelClients, aH as SupportPassportModelFailureMetadata, aI as SupportPassportModelMessage, aJ as SupportPassportModelResultMetadata, aL as SupportPassportModelRouteKind, aM as SupportPassportModelRouteResult, aN as SupportPassportModelUsage, aO as SupportPassportNamespaceSchema, aP as SupportPassportOwnerCreateGrantRequest, aQ as SupportPassportOwnerCreateGrantRequestSchema, aS as SupportPassportOwnerGrantSchema, aU as SupportPassportPublicCardSchema, aW as SupportPassportPublicGuideSchema, aY as SupportPassportReplaceCardInputSchema, a_ as SupportPassportRevokeGrantInputSchema, a$ as SupportPassportRevokeGrantResult, b0 as SupportPassportSourceMemoryIdSchema, b1 as acceptsSupportPassportModelResponse, b2 as buildSupportPassportDirectGatewayConfig, b4 as computeSupportPassportCardRevision, b5 as createSupportPassportModelAdapter, b7 as hashSupportPassportAuditValues, b8 as resolveSupportPassportModelRoutePlan } from '../access-service-D-bi3r01.js';
 import { S as StorageManager } from '../storage-BVAVitkO.js';
 import { FileHandle } from 'node:fs/promises';
 import { withHeldFileLock } from '../utils/serialize-mutations.js';
@@ -16,7 +16,7 @@ import '../external-wiki-config.js';
 import '../contradiction-config.js';
 import '../graph-path-scoring-config.js';
 import '../types-continuity.js';
-import '../catalog-CyYTf_ok.js';
+import '../catalog-BYIHQw1l.js';
 import '../access-namespace-preflight-yO4LMGFH.js';
 import '../access-token-capabilities.js';
 import 'node:async_hooks';
@@ -33,7 +33,7 @@ import '../access-health-types.js';
 import '../corpus-watermark.js';
 import '../replica-divergence.js';
 import '../resolve-auth-token.js';
-import '../orchestrator-CFi-5JSR.js';
+import '../orchestrator-ByLrpav4.js';
 import '../briefing.js';
 import '../corpus-read-cancellation.js';
 import '../artifact-search.js';
@@ -55,7 +55,7 @@ import '../resolve-provider-secret.js';
 import '../transcript.js';
 import '../session-integrity.js';
 import '../summarizer.js';
-import '../maintenance-uJb74j64.js';
+import '../maintenance-N5ur13Al.js';
 import '../namespaces/search.js';
 import '../compounding/engine.js';
 import '../shared-context/manager.js';

package/dist/support-passport/index.js

@@ -4,7 +4,7 @@ import {
   SUPPORT_PASSPORT_MODEL_RESULT_PATH,
   SupportPassportModelBridge,
   parseSupportPassportModelJob
-} from "../chunk-KWN6NOHQ.js";
+} from "../chunk-BXOZALJ6.js";
 import {
   DEFAULT_SUPPORT_PASSPORT_CONFIG,
   parseSupportPassportConfig
@@ -14,8 +14,8 @@ import {
   buildSupportPassportPublicRequestHandler,
   composeSupportPassportExternalRequestHandlers,
   normalizeSupportPassportNetworkAddress
-} from "../chunk-XZPSBGHA.js";
-import "../chunk-MR5HWQHS.js";
+} from "../chunk-ISFUFLFM.js";
+import "../chunk-DFEYRCG2.js";
 import {
   SUPPORT_PASSPORT_DRAFT_MAX_CONTENT_CHARACTERS,
   SUPPORT_PASSPORT_DRAFT_MAX_MEMORIES,
@@ -56,7 +56,7 @@ import {
   notifySupportPassportCommitted,
   resolveSupportPassportModelRoutePlan,
   syncDirectoryForDurability
-} from "../chunk-JJ7JW62R.js";
+} from "../chunk-2JL7WPXL.js";
 import "../chunk-GDASG7NC.js";
 import "../chunk-GDB4J2H3.js";
 import "../chunk-QYN5PXDZ.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.63.2",
+  "version": "9.63.4",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -3156,7 +3156,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.63.2"
+    "@remnic/coding-graph": "^9.63.4"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/access-http-query.ts

@@ -1,4 +1,5 @@
 import { EngramAccessInputError } from "./access-service.js";
+import { isNamespaceKind, type NamespaceKind } from "./namespaces/catalog.js";
 
 /** Optional string field from a JSON body: absent/null/"" → undefined. */
 export function optionalQueryString(value: unknown, label: string): string | undefined {
@@ -23,3 +24,14 @@ export function positiveIntQueryParam(value: string | null, label: string): numb
   }
   return parsed;
 }
+
+/** Optional namespace-kind query param; rejects dead or unknown kinds. */
+export function optionalNamespaceKindQueryParam(value: string | null): NamespaceKind | undefined {
+  if (value === null || value.length === 0) return undefined;
+  if (!isNamespaceKind(value)) {
+    throw new EngramAccessInputError(
+      "kind must be one of: default, shared, project, branch, team-project, explicit",
+    );
+  }
+  return value;
+}

package/src/access-http.test.ts

@@ -728,6 +728,38 @@ test("HTTP admin dashboard endpoints require bearer authentication and apply con
   }
 });
 
+test("HTTP admin namespaces rejects dead kinds and accepts live kinds", async () => {
+  const filters: unknown[] = [];
+  const service = {
+    adminListNamespaces: async (filter: unknown) => {
+      filters.push(filter);
+      return { enabled: true, entries: [] };
+    },
+  } as unknown as EngramAccessService;
+  const server = new EngramAccessHttpServer({
+    service,
+    port: 0,
+    authToken: "test-token",
+    adminConsoleEnabled: false,
+  });
+  const status = await server.start();
+  try {
+    const rejected = await fetch(
+      `http://127.0.0.1:${status.port}/engram/v1/admin/namespaces?kind=self`,
+      { headers: { authorization: "Bearer test-token" } },
+    );
+    assert.equal(rejected.status, 400);
+    const accepted = await fetch(
+      `http://127.0.0.1:${status.port}/engram/v1/admin/namespaces?kind=default`,
+      { headers: { authorization: "Bearer test-token" } },
+    );
+    assert.equal(accepted.status, 200);
+    assert.deepEqual(filters, [{ kind: "default" }]);
+  } finally {
+    await server.stop();
+  }
+});
+
 test("HTTP coding-context endpoint accepts projectTag shorthand", async () => {
   const calls: unknown[] = [];
   const service = {

package/src/access-http.ts

@@ -22,7 +22,7 @@ import {
   respondOfflineManifestStream,
   respondOfflineSnapshotStream,
 } from "./access-http-offline-stream.js";
-import { nonEmptyQueryParam, optionalQueryString, positiveIntQueryParam } from "./access-http-query.js";
+import { nonEmptyQueryParam, optionalNamespaceKindQueryParam, optionalQueryString, positiveIntQueryParam } from "./access-http-query.js";
 import { CorrectionContractError } from "./correction/correction-contract.js";
 import { WearablesInputError } from "./wearables/errors.js"; import { respondMeetingsList, respondMeetingsGet, respondMeetingsBuild } from "./meetings/http-glue.js";
 import { EngramMcpServer, MCP_SUPPORTED_PROTOCOL_VERSIONS } from "./access-mcp.js";
@@ -2988,14 +2988,10 @@ export class EngramAccessHttpServer extends SupportPassportAccessHttpBase {
         return;
       }
       this.requireOperatorToken();
-      const kind = parsed.searchParams.get("kind");
-      const principal = parsed.searchParams.get("principal");
-      const projectId = parsed.searchParams.get("projectId");
+      const kind = optionalNamespaceKindQueryParam(parsed.searchParams.get("kind"));
       const discoveredBy = parsed.searchParams.get("discoveredBy");
       const result = await this.service.adminListNamespaces({
-        ...(kind ? { kind: kind as "default" | "self" | "shared" | "project" | "branch" | "team-project" | "explicit" | "legacy" } : {}),
-        ...(principal && principal.length > 0 ? { principal } : {}),
-        ...(projectId && projectId.length > 0 ? { projectId } : {}),
+        ...(kind ? { kind } : {}),
         ...(discoveredBy
           ? { discoveredBy: discoveredBy as "config" | "write" | "read" | "scan" | "migration" }
           : {}),

package/src/admin/admin-surfaces.test.ts

@@ -200,20 +200,15 @@ test("listAdminNamespaces lists configured + discovered namespaces and marks sta
   }
 });
 
-test("listAdminNamespaces filters by principal", async () => {
+test("listAdminNamespaces filters by kind", async () => {
   const memoryDir = await makeTempDir();
   try {
-    const config = makeConfig({
-      memoryDir,
-      namespacePolicies: [
-        { name: "alice", readPrincipals: ["alice"], writePrincipals: ["alice"] },
-        { name: "bob", readPrincipals: ["bob"], writePrincipals: ["bob"] },
-      ],
-    });
+    const config = makeConfig({ memoryDir });
     const catalog = new NamespaceCatalog(config);
     await catalog.registerConfiguredNamespaces();
-    const result = await listAdminNamespaces({ catalog, filter: { principal: "alice" } });
-    assert.ok(result.entries.every((entry) => entry.principal === "alice"));
+    const result = await listAdminNamespaces({ catalog, filter: { kind: "default" } });
+    assert.ok(result.entries.length > 0, "default kind filter must return the default namespace");
+    assert.ok(result.entries.every((entry) => entry.kind === "default"));
   } finally {
     await rm(memoryDir, { recursive: true, force: true });
   }

package/src/admin/admin-surfaces.ts

@@ -322,8 +322,6 @@ export function inspectScope(options: InspectScopeOptions): ScopeInspection {
 /** Filters the namespace browser accepts (superset of {@link NamespaceCatalogFilter}). */
 export interface AdminNamespaceFilter {
   kind?: NamespaceRecord["kind"];
-  principal?: string;
-  projectId?: string;
   discoveredBy?: NamespaceRecord["discoveredBy"];
   /** Only namespaces with a write at/after this instant. */
   writtenSince?: Date;
@@ -336,10 +334,6 @@ export interface AdminNamespaceEntry {
   namespace: string;
   identityToken: string;
   kind: NamespaceRecord["kind"];
-  principal?: string;
-  projectId?: string;
-  branch?: string;
-  parentNamespace?: string;
   createdAt: string;
   lastReadAt?: string;
   lastWriteAt?: string;
@@ -386,12 +380,6 @@ export async function listAdminNamespaces(options: ListAdminNamespacesOptions):
 
   let entries: AdminNamespaceEntry[] = records.map((record) => toAdminEntry(record, staleBefore));
 
-  if (filter?.principal) {
-    entries = entries.filter((entry) => entry.principal === filter.principal);
-  }
-  if (filter?.projectId) {
-    entries = entries.filter((entry) => entry.projectId === filter.projectId);
-  }
   if (filter?.staleBefore) {
     const cutoff = filter.staleBefore.getTime();
     entries = entries.filter((entry) => {
@@ -411,10 +399,6 @@ function toAdminEntry(record: NamespaceRecord, staleBefore: Date): AdminNamespac
     namespace: record.namespace,
     identityToken: record.identityToken,
     kind: record.kind,
-    principal: record.principal,
-    projectId: record.projectId,
-    branch: record.branch,
-    parentNamespace: record.parentNamespace,
     createdAt: record.createdAt,
     lastReadAt: record.lastReadAt,
     lastWriteAt: record.lastWriteAt,

package/src/binary-lifecycle/pipeline.test.ts

@@ -587,7 +587,7 @@ test("binary lifecycle resumes redirects after verification read failures", asyn
     assert.match(firstResult.errors.join("\n"), /injected verification read failure/);
     assert.equal(await readFile(notePath, "utf8"), "![img](remote/image.png)");
     assert.equal(manifest.assets[0]?.status, "error");
-    assert.equal(typeof manifest.assets[0]?.redirectedAt, "string");
+    assert.equal(manifest.assets[0]?.redirectedAt, undefined);
 
     const secondResult = await runBinaryLifecyclePipeline(memoryDir, baseConfig, nestedRemoteBackend, noopLogger);
     manifest = JSON.parse(

package/src/binary-lifecycle/pipeline.ts

@@ -294,11 +294,25 @@ async function stageRedirect(
         }
 
         if (asset.redirectedAt === undefined) {
-          if (!dryRun) {
-            asset.status = "mirrored";
+          let remoteSeen = false;
+          for (const mdPath of mdFiles) {
+            try {
+              const content = await readMarkdownFile(mdPath);
+              if (content.includes(asset.mirroredPath)) {
+                remoteSeen = true;
+                break;
+              }
+            } catch {
+              // Verify already succeeded; a later read error is not a local ref.
+            }
+          }
+          if (!remoteSeen) {
+            if (!dryRun) {
+              asset.status = "mirrored";
+            }
+            log.info(`[binary-lifecycle] preserved mirrored asset without redirected marker: ${asset.originalPath}${dryRun ? " [dry-run]" : ""}`);
+            continue;
           }
-          log.info(`[binary-lifecycle] preserved mirrored asset without redirected marker: ${asset.originalPath}${dryRun ? " [dry-run]" : ""}`);
-          continue;
         }
 
         if (!Number.isFinite(new Date(asset.mirroredAt).getTime())) {
@@ -400,9 +414,6 @@ async function stageRedirect(
       continue;
     }
 
-    const redirectedAt = new Date().toISOString();
-    asset.redirectedAt = redirectedAt;
-
     const verifyResult = await countRemainingLocalReferences(
       memoryDir,
       asset,
@@ -411,7 +422,10 @@ async function stageRedirect(
       readMarkdownFile,
     );
     if (verifyResult.errors.length > 0 || verifyResult.remaining > 0) {
-      asset.status = "error";
+asset.status = "error";
+// Failed verify must not read as a completed redirect (#2471); this also
+// clears stale stamps written by manifests from before that fix.
+delete asset.redirectedAt;
       for (const msg of verifyResult.errors) {
         log.error(`[binary-lifecycle] ${msg}`);
         errors.push(msg);
@@ -424,7 +438,7 @@ async function stageRedirect(
       continue;
     }
     asset.status = "redirected";
-    asset.redirectedAt = redirectedAt;
+asset.redirectedAt = new Date().toISOString();
     redirected++;
     log.info(`[binary-lifecycle] redirected: ${asset.originalPath}`);
   }

package/src/buffer.ts

@@ -619,6 +619,12 @@ export class SmartBuffer {
     log.debug(
       `buffer[${bufferKey}]: ${mutation.turnCountInWindow} turns, signal=${mutation.signalLevel}, decision=${decision}`,
     );
+    if (decision !== "keep_buffering" && extractionTurns === undefined) {
+      extractionTurns = [
+        ...mutation.retainedTurnsSnapshot,
+        ...mutation.activeTurnsSnapshot,
+      ];
+    }
     return extractionTurns ? { decision, extractionTurns } : { decision };
   }
 

package/src/maintenance/namespace-planner.ts

@@ -177,8 +177,6 @@ function candidatePriority(candidate: NamespaceMaintenanceCandidate): number {
   if (candidate.source === "configured") return 2;
   if (candidate.kind === "team-project") return 3;
   if (candidate.kind === "project") return 4;
-  if (candidate.kind === "self") return 5;
-  if (candidate.kind === "legacy") return 6;
   if (candidate.kind === "branch") return 8;
   return 7;
 }

package/src/namespaces/catalog.test.ts

@@ -600,15 +600,16 @@ test("catalog quarantines malformed JSONL record fields at the parse boundary",
 
     assert.deepEqual(
       list.map((r) => r.namespace),
-      ["valid"],
-      "invalid enum/token/timestamp records must not surface",
+      ["bad-kind", "valid"],
+      "unknown kinds coerce to explicit; other malformed records stay quarantined",
     );
-    assert.equal(list[0]?.identityToken, validToken);
-    assert.equal(list[0]?.kind, "project");
-    assert.equal(list[0]?.discoveredBy, "write");
-    assert.equal(list[0]?.lastReadAt, undefined);
-    assert.equal(list[0]?.lastWriteAt, undefined);
-    assert.deepEqual(list[0]?.lastMaintenanceAt, { ok: now });
+    assert.equal(list.find((r) => r.namespace === "bad-kind")?.kind, "explicit");
+    const valid = list.find((r) => r.namespace === "valid");
+    assert.equal(valid?.kind, "project");
+    assert.equal(valid?.discoveredBy, "write");
+    assert.equal(valid?.lastReadAt, undefined);
+    assert.equal(valid?.lastWriteAt, undefined);
+    assert.deepEqual(valid?.lastMaintenanceAt, { ok: now });
   } finally {
     await rm(memoryDir, { recursive: true, force: true });
   }
@@ -3952,3 +3953,47 @@ test("#1903 cross-instance compaction never drops another instance's rows", asyn
     await rm(memoryDir, { recursive: true, force: true });
   }
 });
+
+test("#2469 persisted self/legacy kinds coerce to explicit and drop unused hints", async () => {
+  const memoryDir = await mkMemoryDir();
+  try {
+    const ns = "project-origin-dead-kind";
+    const token = namespaceIdentityToken(ns);
+    const stateDir = path.join(memoryDir, "state");
+    await mkdir(stateDir, { recursive: true });
+    const line = JSON.stringify({
+      namespace: ns,
+      identityToken: token,
+      kind: "self",
+      principal: "unused",
+      projectId: "unused",
+      branch: "unused",
+      parentNamespace: "unused",
+      createdAt: "2026-08-17T00:00:00.000Z",
+      storageDir: path.join(memoryDir, "namespaces", token),
+      discoveredBy: "write",
+    });
+    const legacyLine = JSON.stringify({
+      namespace: "shared",
+      identityToken: namespaceIdentityToken("shared"),
+      kind: "legacy",
+      createdAt: "2026-08-17T00:00:00.000Z",
+      storageDir: path.join(memoryDir, "namespaces", namespaceIdentityToken("shared")),
+      discoveredBy: "config",
+    });
+    await writeFile(path.join(stateDir, "namespaces.jsonl"), `${line}\n${legacyLine}\n`, "utf8");
+
+    const catalog = new NamespaceCatalog(makeConfig(memoryDir));
+    const selfRecord = await catalog.getNamespaceRecord(ns);
+    assert.equal(selfRecord?.kind, "explicit");
+    assert.equal(
+      (selfRecord as { principal?: string } | null)?.principal,
+      undefined,
+    );
+    const legacyRecord = await catalog.getNamespaceRecord("shared");
+    assert.equal(legacyRecord?.kind, "explicit");
+  } finally {
+    await rm(memoryDir, { recursive: true, force: true });
+  }
+});
+

package/src/namespaces/catalog.ts

@@ -59,13 +59,11 @@ import { ALL_CATEGORY_DIRS } from "../utils/category-dir.js";
 
 export type NamespaceKind =
   | "default"
-  | "self"
   | "shared"
   | "project"
   | "branch"
   | "team-project"
-  | "explicit"
-  | "legacy";
+  | "explicit";
 
 export type NamespaceDiscoverySource = "config" | "write" | "read" | "scan" | "migration";
 
@@ -73,10 +71,6 @@ export interface NamespaceRecord {
   namespace: string;
   identityToken: string;
   kind: NamespaceKind;
-  principal?: string;
-  projectId?: string;
-  branch?: string;
-  parentNamespace?: string;
   createdAt: string;
   lastReadAt?: string;
   lastWriteAt?: string;
@@ -95,10 +89,6 @@ export interface NamespaceCatalogFilter {
 export interface NamespaceTouchMetadata {
   discoveredBy?: NamespaceDiscoverySource;
   kind?: NamespaceKind;
-  principal?: string;
-  projectId?: string;
-  branch?: string;
-  parentNamespace?: string;
   /** Explicit storage dir (when the caller already resolved it). */
   storageDir?: string;
   /** Override the touch timestamp (mainly for tests / migration replay). */
@@ -129,13 +119,11 @@ export interface NamespaceCatalogRebuildResult {
 
 const NAMESPACE_KINDS: readonly NamespaceKind[] = [
   "default",
-  "self",
   "shared",
   "project",
   "branch",
   "team-project",
   "explicit",
-  "legacy",
 ];
 
 const NAMESPACE_DISCOVERY_SOURCES: readonly NamespaceDiscoverySource[] = [
@@ -275,7 +263,7 @@ function isValidIsoTimestamp(value: string): boolean {
   return Number.isFinite(ms);
 }
 
-function isNamespaceKind(value: unknown): value is NamespaceKind {
+export function isNamespaceKind(value: unknown): value is NamespaceKind {
   return typeof value === "string" && (NAMESPACE_KINDS as readonly string[]).includes(value);
 }
 
@@ -301,8 +289,7 @@ function coerceRecord(value: unknown): NamespaceRecord | null {
   if (typeof v.storageDir !== "string" || v.storageDir.length === 0) return null;
   if (typeof v.createdAt !== "string" || v.createdAt.length === 0) return null;
   if (!isValidIsoTimestamp(v.createdAt)) return null;
-  const kind = v.kind === undefined ? "explicit" : isNamespaceKind(v.kind) ? v.kind : null;
-  if (!kind) return null;
+  const kind = isNamespaceKind(v.kind) ? v.kind : "explicit";
   const discoveredBy =
     v.discoveredBy === undefined
       ? "scan"
@@ -318,10 +305,6 @@ function coerceRecord(value: unknown): NamespaceRecord | null {
     storageDir: v.storageDir,
     discoveredBy,
   };
-  if (typeof v.principal === "string") record.principal = v.principal;
-  if (typeof v.projectId === "string") record.projectId = v.projectId;
-  if (typeof v.branch === "string") record.branch = v.branch;
-  if (typeof v.parentNamespace === "string") record.parentNamespace = v.parentNamespace;
   if (typeof v.lastReadAt === "string" && isValidIsoTimestamp(v.lastReadAt)) {
     record.lastReadAt = v.lastReadAt;
   }
@@ -792,12 +775,6 @@ export class NamespaceCatalog {
     if (kind === "read" && cached.lastReadAt === undefined) return true;
     if (!metadata) return false;
     if (metadata.kind !== undefined && metadata.kind !== cached.kind) return true;
-    if (metadata.principal !== undefined && metadata.principal !== cached.principal) return true;
-    if (metadata.projectId !== undefined && metadata.projectId !== cached.projectId) return true;
-    if (metadata.branch !== undefined && metadata.branch !== cached.branch) return true;
-    if (metadata.parentNamespace !== undefined && metadata.parentNamespace !== cached.parentNamespace) {
-      return true;
-    }
     // A changed storageDir repoints routing/containment for this namespace —
     // must be observable at once, not held stale by the coalesce window (#1903, Cursor).
     if (metadata.storageDir !== undefined && metadata.storageDir !== cached.storageDir) return true;
@@ -1399,15 +1376,10 @@ export class NamespaceCatalog {
                 (kind === "register" ? "config" : kind === "maintenance" ? "scan" : kind),
             };
 
-        // Update mutable fields. storageDir, kind, and the principal/project hints
-        // may legitimately change over a namespace's lifetime, so they upsert.
+        // Update mutable fields. storageDir and kind may change over a
+        // namespace's lifetime, so they upsert.
         record.storageDir = storageDir;
         if (metadata?.kind) record.kind = metadata.kind;
-        if (metadata?.principal !== undefined) record.principal = metadata.principal;
-        if (metadata?.projectId !== undefined) record.projectId = metadata.projectId;
-        if (metadata?.branch !== undefined) record.branch = metadata.branch;
-        if (metadata?.parentNamespace !== undefined)
-          record.parentNamespace = metadata.parentNamespace;
         // PROVENANCE (creation-only, with one upgrade — round 6, codex P2 NBPmT):
         // `discoveredBy` is otherwise preserved for existing records (a routine
         // read/register/resolve never relabels it). The single exception is a real
@@ -2109,10 +2081,6 @@ export class NamespaceCatalog {
     if (prior.lastReadAt) merged.lastReadAt = prior.lastReadAt;
     if (prior.lastWriteAt) merged.lastWriteAt = prior.lastWriteAt;
     if (prior.lastMaintenanceAt) merged.lastMaintenanceAt = { ...prior.lastMaintenanceAt };
-    if (prior.principal !== undefined) merged.principal = prior.principal;
-    if (prior.projectId !== undefined) merged.projectId = prior.projectId;
-    if (prior.branch !== undefined) merged.branch = prior.branch;
-    if (prior.parentNamespace !== undefined) merged.parentNamespace = prior.parentNamespace;
     return merged;
   }
   // ── Persistence ──────────────────────────────────────────────────────────