@remnic/core 9.63.6 → 9.63.8

package/dist/support-passport/index.js

@@ -4,7 +4,7 @@ import {
   SUPPORT_PASSPORT_MODEL_RESULT_PATH,
   SupportPassportModelBridge,
   parseSupportPassportModelJob
-} from "../chunk-PB4WVYGC.js";
+} from "../chunk-3IMYRX3W.js";
 import {
   DEFAULT_SUPPORT_PASSPORT_CONFIG,
   parseSupportPassportConfig
@@ -14,8 +14,8 @@ import {
   buildSupportPassportPublicRequestHandler,
   composeSupportPassportExternalRequestHandlers,
   normalizeSupportPassportNetworkAddress
-} from "../chunk-UCLMKNHA.js";
-import "../chunk-NKB43PGI.js";
+} from "../chunk-N7V3P4V5.js";
+import "../chunk-VYMICVRA.js";
 import {
   SUPPORT_PASSPORT_DRAFT_MAX_CONTENT_CHARACTERS,
   SUPPORT_PASSPORT_DRAFT_MAX_MEMORIES,
@@ -56,28 +56,30 @@ import {
   notifySupportPassportCommitted,
   resolveSupportPassportModelRoutePlan,
   syncDirectoryForDurability
-} from "../chunk-IVXVLDNT.js";
+} from "../chunk-BPQ7L27U.js";
 import "../chunk-GDASG7NC.js";
 import "../chunk-GDB4J2H3.js";
-import "../chunk-PMVPCZJZ.js";
+import "../chunk-6433HV72.js";
 import "../chunk-VQ7B2Q6M.js";
 import "../chunk-PJSK6OJM.js";
-import "../chunk-5QZR2RA3.js";
 import "../chunk-GNVZQ5JN.js";
 import "../chunk-YN2UN7N3.js";
+import "../chunk-5QZR2RA3.js";
 import "../chunk-P5FPO2BR.js";
 import "../chunk-S4DDLTPX.js";
+import "../chunk-ZVZHG7AI.js";
 import "../chunk-H7XKCNR6.js";
 import "../chunk-3F3CVVDS.js";
 import "../chunk-SOBJ6NEY.js";
 import "../chunk-QICOU4RY.js";
-import "../chunk-YFCEBB5P.js";
+import "../chunk-QTXNS3HB.js";
 import "../chunk-CVILPI77.js";
+import "../chunk-EIR5VLIH.js";
 import "../chunk-2HIJHXB3.js";
 import "../chunk-AQEJKOKI.js";
 import "../chunk-HTP6XRUI.js";
-import "../chunk-EIR5VLIH.js";
 import "../chunk-IISBCCWR.js";
+import "../chunk-2YA5N2BY.js";
 import "../chunk-PD66CVSD.js";
 import "../chunk-LTHVM4XN.js";
 import "../chunk-EI6V5UXY.js";
@@ -92,10 +94,10 @@ import "../chunk-QDW3E4RD.js";
 import "../chunk-NS5ETDYD.js";
 import "../chunk-C37ZRXX7.js";
 import "../chunk-7ZNJN5WZ.js";
-import "../chunk-77QZW2D6.js";
-import "../chunk-EJY3HJMT.js";
-import "../chunk-ZUPKNWRZ.js";
-import "../chunk-KYTRF64R.js";
+import "../chunk-3TDAA7VA.js";
+import "../chunk-MYI3RKI6.js";
+import "../chunk-MIUL6AUZ.js";
+import "../chunk-5SCFDQEJ.js";
 import "../chunk-UFGFMWAD.js";
 import "../chunk-YMOPYG3K.js";
 import "../chunk-2LSZVONP.js";
@@ -106,16 +108,16 @@ import "../chunk-CSAKJVXW.js";
 import "../chunk-K2XUWZBM.js";
 import "../chunk-OD4FM2U7.js";
 import "../chunk-ZY2MNJR6.js";
-import "../chunk-YEQCMA5L.js";
+import "../chunk-BOSIHHOH.js";
 import "../chunk-RDFF2NAU.js";
 import "../chunk-GPFZFCRN.js";
-import "../chunk-AYVCKGA6.js";
-import "../chunk-FHKXVTM5.js";
-import "../chunk-46WM6JX2.js";
+import "../chunk-YTXNDEUS.js";
+import "../chunk-Q5XKKDFQ.js";
 import "../chunk-UHVXE24Y.js";
+import "../chunk-46WM6JX2.js";
 import "../chunk-SXIMQLGV.js";
-import "../chunk-GF7RQWXC.js";
-import "../chunk-GG4DN63W.js";
+import "../chunk-AJRJDXYR.js";
+import "../chunk-62Y5AGCM.js";
 import "../chunk-OQIRBGUU.js";
 import "../chunk-VANZKHTN.js";
 import "../chunk-CYEPCZN5.js";
@@ -124,15 +126,15 @@ import "../chunk-VYISFWVX.js";
 import "../chunk-W7IGLX4G.js";
 import "../chunk-6KTXE6A3.js";
 import "../chunk-GUMZC2BO.js";
-import "../chunk-LEPOP46W.js";
+import "../chunk-227UFSEQ.js";
+import "../chunk-ET356KSB.js";
 import "../chunk-72A4L5JJ.js";
 import "../chunk-A7Q43EUZ.js";
-import "../chunk-ET356KSB.js";
 import "../chunk-S2V7RUCL.js";
 import "../chunk-AR253JBM.js";
+import "../chunk-SCU65EZI.js";
 import "../chunk-PO7NXBG2.js";
 import "../chunk-S2HLHAZ4.js";
-import "../chunk-SCU65EZI.js";
 import "../chunk-DM2T26WE.js";
 import "../chunk-LDXUBPMO.js";
 import "../chunk-UG6VXIOK.js";
@@ -140,16 +142,16 @@ import "../chunk-AAD2ZS6P.js";
 import "../chunk-MUJ4QFUQ.js";
 import "../chunk-LCU5R6TQ.js";
 import "../chunk-BT7NVCML.js";
-import "../chunk-YXZG5TVN.js";
 import "../chunk-3ONXXHQO.js";
+import "../chunk-YXZG5TVN.js";
 import "../chunk-5GINB5LC.js";
-import "../chunk-G7D6GZ5J.js";
 import "../chunk-UFKPQBXH.js";
 import "../chunk-XCB6QDL6.js";
 import "../chunk-RBOJCG4T.js";
 import "../chunk-ZVPVTPGI.js";
 import "../chunk-5WITETWU.js";
 import "../chunk-6CIAGZ6X.js";
+import "../chunk-G7D6GZ5J.js";
 import "../chunk-VYEPACWY.js";
 import "../chunk-URS5GSM7.js";
 import "../chunk-ZLQ37WJX.js";
@@ -164,6 +166,7 @@ import "../chunk-RGMVMVMF.js";
 import "../chunk-N7RWREIQ.js";
 import "../chunk-UBCBDJOB.js";
 import "../chunk-TOTT6S2V.js";
+import "../chunk-FEHIOYML.js";
 import "../chunk-P32IDSHD.js";
 import "../chunk-WNIUPHWV.js";
 import "../chunk-IJ6WHMFB.js";
@@ -180,10 +183,10 @@ import "../chunk-Z7L72ZHL.js";
 import "../chunk-4O4TKIXQ.js";
 import "../chunk-TBBDFYXW.js";
 import "../chunk-YCVB7X56.js";
-import "../chunk-IPLYGWQF.js";
-import "../chunk-J4EB7DNW.js";
+import "../chunk-VDX2J7OX.js";
 import "../chunk-WEHSQBFR.js";
-import "../chunk-X7Y7WX73.js";
+import "../chunk-DQEMWVMT.js";
+import "../chunk-J4EB7DNW.js";
 import "../chunk-BJMBJZ2Y.js";
 import "../chunk-UKJAGEXH.js";
 import "../chunk-FP2373TW.js";
@@ -194,9 +197,9 @@ import "../chunk-3QL24R5Y.js";
 import "../chunk-SYOIVK7K.js";
 import "../chunk-ZN7SMKAK.js";
 import "../chunk-LNEWDF2A.js";
-import "../chunk-FPEZ74F7.js";
-import "../chunk-EFKZT6AY.js";
-import "../chunk-L3CHRBHE.js";
+import "../chunk-I2HTKOOP.js";
+import "../chunk-T42L3S6A.js";
+import "../chunk-ZRUEP4IK.js";
 import "../chunk-HZNYJN77.js";
 import "../chunk-Q57GOHLF.js";
 import "../chunk-AW4QUFQF.js";
@@ -245,11 +248,12 @@ import "../chunk-JDSVLVCG.js";
 import "../chunk-HBVPYRDW.js";
 import "../chunk-5GKPFL3S.js";
 import "../chunk-JAKIDQB2.js";
-import "../chunk-Z4N7SVVF.js";
+import "../chunk-FZEEWOI2.js";
 import "../chunk-UI3NYK34.js";
 import "../chunk-GCGJW34D.js";
 import "../chunk-AREGMX2J.js";
 import "../chunk-LC2BDILZ.js";
+import "../chunk-LQWOFU6L.js";
 import "../chunk-P7FMDTKL.js";
 import "../chunk-MZWSOLMT.js";
 import "../chunk-MRV7VSQK.js";

package/dist/transfer/autodetect.js

@@ -4,8 +4,8 @@ import {
 import "../chunk-2DL3OFLD.js";
 import "../chunk-G4IAEX6D.js";
 import "../chunk-765K3SAT.js";
-import "../chunk-J4EB7DNW.js";
 import "../chunk-WEHSQBFR.js";
+import "../chunk-J4EB7DNW.js";
 import "../chunk-UI3NYK34.js";
 import "../chunk-GCGJW34D.js";
 import "../chunk-PZ5AY32C.js";

package/dist/transfer/backup.js

@@ -1,9 +1,9 @@
 import {
   backupMemoryDir
-} from "../chunk-2NLLXCJG.js";
+} from "../chunk-BXLOS5AJ.js";
 import "../chunk-765K3SAT.js";
+import "../chunk-DQEMWVMT.js";
 import "../chunk-J4EB7DNW.js";
-import "../chunk-X7Y7WX73.js";
 import "../chunk-BJMBJZ2Y.js";
 import "../chunk-UKJAGEXH.js";
 import "../chunk-FP2373TW.js";

package/dist/transfer/capsule-export.js

@@ -1,10 +1,10 @@
 import {
   exportCapsule,
   isValidCapsuleSince
-} from "../chunk-IPLYGWQF.js";
-import "../chunk-J4EB7DNW.js";
+} from "../chunk-VDX2J7OX.js";
 import "../chunk-WEHSQBFR.js";
-import "../chunk-X7Y7WX73.js";
+import "../chunk-DQEMWVMT.js";
+import "../chunk-J4EB7DNW.js";
 import "../chunk-BJMBJZ2Y.js";
 import "../chunk-UKJAGEXH.js";
 import "../chunk-FP2373TW.js";

package/dist/transfer/capsule-import.js

@@ -1,6 +1,6 @@
 import {
   importCapsule
-} from "../chunk-PMVPCZJZ.js";
+} from "../chunk-6433HV72.js";
 import "../chunk-UFKPQBXH.js";
 import "../chunk-XCB6QDL6.js";
 import "../chunk-RBOJCG4T.js";
@@ -10,7 +10,7 @@ import "../chunk-6CIAGZ6X.js";
 import "../chunk-C64XATK7.js";
 import "../chunk-42JKGUFJ.js";
 import "../chunk-WEHSQBFR.js";
-import "../chunk-X7Y7WX73.js";
+import "../chunk-DQEMWVMT.js";
 import "../chunk-BJMBJZ2Y.js";
 import "../chunk-UKJAGEXH.js";
 import "../chunk-FP2373TW.js";

package/dist/verified-recall.js

@@ -1,14 +1,14 @@
 import {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
-} from "./chunk-2UM6WHME.js";
+} from "./chunk-XE2QCCT2.js";
 import "./chunk-B7RWBZXW.js";
-import "./chunk-FHKXVTM5.js";
-import "./chunk-46WM6JX2.js";
+import "./chunk-Q5XKKDFQ.js";
 import "./chunk-UHVXE24Y.js";
+import "./chunk-46WM6JX2.js";
 import "./chunk-SXIMQLGV.js";
-import "./chunk-GF7RQWXC.js";
-import "./chunk-GG4DN63W.js";
+import "./chunk-AJRJDXYR.js";
+import "./chunk-62Y5AGCM.js";
 import "./chunk-OQIRBGUU.js";
 import "./chunk-VANZKHTN.js";
 import "./chunk-CYEPCZN5.js";
@@ -17,15 +17,15 @@ import "./chunk-VYISFWVX.js";
 import "./chunk-W7IGLX4G.js";
 import "./chunk-6KTXE6A3.js";
 import "./chunk-GUMZC2BO.js";
-import "./chunk-LEPOP46W.js";
+import "./chunk-227UFSEQ.js";
+import "./chunk-ET356KSB.js";
 import "./chunk-72A4L5JJ.js";
 import "./chunk-A7Q43EUZ.js";
-import "./chunk-ET356KSB.js";
 import "./chunk-S2V7RUCL.js";
 import "./chunk-AR253JBM.js";
+import "./chunk-SCU65EZI.js";
 import "./chunk-PO7NXBG2.js";
 import "./chunk-S2HLHAZ4.js";
-import "./chunk-SCU65EZI.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-UG6VXIOK.js";
@@ -33,16 +33,16 @@ import "./chunk-AAD2ZS6P.js";
 import "./chunk-MUJ4QFUQ.js";
 import "./chunk-LCU5R6TQ.js";
 import "./chunk-BT7NVCML.js";
-import "./chunk-YXZG5TVN.js";
 import "./chunk-3ONXXHQO.js";
+import "./chunk-YXZG5TVN.js";
 import "./chunk-5GINB5LC.js";
-import "./chunk-G7D6GZ5J.js";
 import "./chunk-UFKPQBXH.js";
 import "./chunk-XCB6QDL6.js";
 import "./chunk-RBOJCG4T.js";
 import "./chunk-ZVPVTPGI.js";
 import "./chunk-5WITETWU.js";
 import "./chunk-6CIAGZ6X.js";
+import "./chunk-G7D6GZ5J.js";
 import "./chunk-VYEPACWY.js";
 import "./chunk-URS5GSM7.js";
 import "./chunk-ZLQ37WJX.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.63.6",
+  "version": "9.63.8",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -3156,7 +3156,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.63.6"
+    "@remnic/coding-graph": "^9.63.8"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/access-mcp-output-schemas.ts

@@ -313,7 +313,7 @@ const TOOL_OUTPUT_SCHEMAS: Readonly<Record<string, Record<string, unknown>>> = {
     fallbackUsed: T_BOOLEAN,
     sourcesUsed: T_ARRAY,
     latencyMs: T_NUMBER,
-    resultPaths: T_ARRAY,
+    includedMemories: T_ARRAY,
     message: T_NULLABLE_STRING,
   }),
   memory_intent_debug: objectSchema({

package/src/access-recall-response.ts

@@ -15,7 +15,7 @@ import { type BudgetDecision, toBudgetWarning } from "./cross-namespace-budget.j
 import { decideDisclosureEscalation } from "./recall-disclosure-escalation.js";
 import { type TagMatchMode, applyTagFilter, normalizeTags, parseTagMatch } from "./recall-tag-filter.js";
 import type { RecallDisclosure, RecallPlanMode } from "./types.js";
-import { displaySafeBudgetsApplied, displaySafeRecallSnapshot } from "./orchestration/recall-result-formatter.js";
+import { displaySafeRecallSnapshot } from "./orchestration/recall-result-formatter.js";
 import {
   boundRecallContextComposition,
   composeRecallContext,
@@ -305,7 +305,9 @@ export async function assembleRecallResponse(
       fallbackUsed: snapshot?.fallbackUsed ?? false,
       sourcesUsed: snapshot?.sourcesUsed ?? [],
       disclosure,
-      budgetsApplied: displaySafeBudgetsApplied(snapshot?.budgetsApplied, deps.orchestrator.config.memoryDir),
+      budgetsApplied: snapshot
+        ? displaySafeRecallSnapshot(snapshot, deps.orchestrator.config.memoryDir).budgetsApplied
+        : undefined,
       auditAnomalies,
       budgetWarning: toBudgetWarning(budgetDecision),
       latencyMs: snapshot?.latencyMs ?? (Date.now() - startedAt),

package/src/access-recall-surface.ts

@@ -26,7 +26,7 @@ import { expandScopeProfileReadNamespaces, resolveScopeProfilePlan } from "./nam
 import type { Orchestrator, RecallInvocationOptions } from "./orchestrator.js";
 import { decideDisclosureEscalation } from "./recall-disclosure-escalation.js";
 import { assembleRecallResponse } from "./access-recall-response.js";
-import type { LastRecallSnapshot } from "./recall-state.js";
+import { coerceIncludedMemories, type LastRecallSnapshot } from "./recall-state.js";
 import type { RecallContextComposition } from "./recall-context-composition.js";
 import { type TagMatchMode, applyTagFilter, normalizeTags, parseTagMatch } from "./recall-tag-filter.js";
 import { type RecallXraySnapshot, estimateRecallTokens } from "./recall-xray.js";
@@ -44,7 +44,6 @@ import {
 // Canonical copies (access-service.ts still carries private duplicates for
 // its remaining callers; dedupe tracked separately).
 import { qmdCollectionPathParts, qmdResultPathCandidates } from "./orchestration/qmd-result-resolver.js";
-
 export interface AccessRecallSurfaceDeps {
   readonly auditAdapter: AccessAuditAdapter | null;
   readonly budget: CrossNamespaceBudget;
@@ -214,7 +213,10 @@ export class AccessRecallSurface {
     rawExcerptsSuppressed?: boolean;
   }): Promise<EngramAccessRecallResponse> {
     const memoryIds = options.snapshot.results.map((result) => result.memoryId);
-    const resultPaths = options.snapshot.results.map((result) => result.path);
+    const includedMemories = options.snapshot.results.map((result) => ({
+      id: result.memoryId,
+      path: result.path,
+    }));
     const namespace = options.snapshot.namespace
       ? this.deps.resolveNamespace(options.snapshot.namespace)
       : this.deps.orchestrator.config.defaultNamespace;
@@ -243,7 +245,7 @@ export class AccessRecallSurface {
         finalContextChars: options.snapshot.budget.used,
       },
       latencyMs: Date.now() - options.startedAt,
-      resultPaths,
+      includedMemories,
     };
     const results = await this.deps.serializeRecallResults(
       snapshotForSerialization,
@@ -515,12 +517,10 @@ export class AccessRecallSurface {
               : null,
           );
     const rawExcerpts = rawExcerptsResult ?? undefined;
-
-    const resultNamespaces = snapshot.resultNamespaces ?? [];
-    for (let index = 0; index < (snapshot.resultPaths ?? []).length; index += 1) {
-      const memoryPath = snapshot.resultPaths?.[index];
-      const memoryNamespace = resultNamespaces[index];
+    for (const included of coerceIncludedMemories(snapshot)) {
+      const memoryPath = included.path;
       if (!memoryPath) continue;
+      const memoryNamespace = included.namespace;
       const seenKey = `${memoryNamespace ?? ""}\0${memoryPath}`;
       if (seen.has(seenKey)) continue;
       const resolved = await readResultPath(memoryPath, memoryNamespace);

package/src/access-service-namespace.test.ts

@@ -259,7 +259,7 @@ test("last recall serialization resolves namespace collection-prefixed result pa
       queryLen: 4,
       memoryIds: [],
       namespace: "default",
-      resultPaths: [`${collection}/archive/facts/2026-06-16/fact-001.md`],
+      includedMemories: [{ id: "", path: `${collection}/archive/facts/2026-06-16/fact-001.md` }],
     },
     "summary",
   );
@@ -355,7 +355,7 @@ test("last recall serialization does not fall back after namespace collection mi
       queryLen: 4,
       memoryIds: [],
       namespace: "default",
-      resultPaths: [`${collection}/2026-06-16/fact-001.md`],
+      includedMemories: [{ id: "", path: `${collection}/2026-06-16/fact-001.md` }],
     },
     "summary",
   );
@@ -428,7 +428,7 @@ test("last recall serialization resolves cold collection paths through snapshot
       queryLen: 4,
       memoryIds: [],
       namespace: "default",
-      resultPaths: ["test-memory-cold/facts/2026-06-16/fact-001.md"],
+      includedMemories: [{ id: "", path: "test-memory-cold/facts/2026-06-16/fact-001.md" }],
     },
     "summary",
   );
@@ -503,7 +503,7 @@ test("last recall serialization propagates locked namespace collection errors",
           queryLen: 4,
           memoryIds: [],
           namespace: "default",
-          resultPaths: [`${collection}/2026-06-16/fact-001.md`],
+          includedMemories: [{ id: "", path: `${collection}/2026-06-16/fact-001.md` }],
         },
         "summary",
       ),
@@ -563,7 +563,7 @@ test("last recall serialization does not treat date paths as collection prefixes
       queryLen: 4,
       memoryIds: [],
       namespace: "default",
-      resultPaths: ["2026-06-16/fact-001.md"],
+      includedMemories: [{ id: "", path: "2026-06-16/fact-001.md" }],
     },
     "summary",
   );
@@ -632,7 +632,7 @@ test("last recall serialization does not strip invalid collection prefixes", asy
       queryLen: 4,
       memoryIds: [],
       namespace: "default",
-      resultPaths: ["test-memory--not-a-token/2026-06-16/fact-001.md"],
+      includedMemories: [{ id: "", path: "test-memory--not-a-token/2026-06-16/fact-001.md" }],
     },
     "summary",
   );
@@ -733,7 +733,7 @@ test("last recall serialization preserves absolute paths from readable namespace
       queryLen: 4,
       memoryIds: [],
       namespace: "team",
-      resultPaths: [sharedMemoryPath],
+      includedMemories: [{ id: "", path: sharedMemoryPath }],
     },
     "summary",
   );
@@ -817,7 +817,7 @@ test("last recall serialization preserves absolute paths from dynamic namespace
       queryLen: 4,
       memoryIds: [],
       namespace: "team",
-      resultPaths: [dynamicMemoryPath],
+      includedMemories: [{ id: "", path: dynamicMemoryPath }],
     },
     "summary",
   );
@@ -905,7 +905,7 @@ test("last recall serialization rejects traversing collection paths", async () =
       queryLen: 4,
       memoryIds: [],
       namespace: "default",
-      resultPaths: [`${collection}/../../facts/2026-06-16/fact-001.md`],
+      includedMemories: [{ id: "", path: `${collection}/../../facts/2026-06-16/fact-001.md` }],
     },
     "summary",
   );

package/src/access-service-raw-excerpt-read-gate.test.ts

@@ -92,7 +92,7 @@ function makeRawExcerptProbe(options: {
     memoryIds: [],
     namespace: options.snapshotNamespace,
     recallNamespaces: [options.snapshotNamespace],
-    resultPaths: [],
+    includedMemories: [],
   };
 
   const storage = {

package/src/calibration.ts

@@ -20,6 +20,7 @@ import type { AgentPersonaModelConfig, GatewayConfig, MemoryFile } from "./types
 import { listJsonFiles, readJsonFile } from "./json-store.js";
 import { isRecord } from "./store-contract.js";
 import { log } from "./logger.js";
+import { OUTPUT_LANGUAGE_POLICY } from "./extraction-prompt.js";
 
 // ─── Types ───────────────────────────────────────────────────────────────────
 
@@ -193,7 +194,7 @@ async function readCorrectionsImpl(memoryDir: string): Promise<CorrectionMemory[
 
 // ─── LLM-Assisted Clustering and Replay ──────────────────────────────────────
 
-const CLUSTER_PROMPT = `You are analyzing user corrections to an AI assistant. Each correction represents a moment where the assistant's prediction of what the user wanted was WRONG.
+export const CLUSTER_PROMPT = `You are analyzing user corrections to an AI assistant. Each correction represents a moment where the assistant's prediction of what the user wanted was WRONG.
 
 Your job: Group these corrections into clusters where the SAME TYPE of misunderstanding is happening. Then for each cluster, synthesize a CalibrationRule.
 
@@ -205,6 +206,7 @@ A CalibrationRule describes:
 - ruleType: One of "model_tendency", "user_expectation", "scope_boundary", "verification_required"
 
 Focus on PATTERNS, not individual corrections. A cluster needs at least 2 corrections to be worth a rule.
+${OUTPUT_LANGUAGE_POLICY}
 
 Output valid JSON only:
 {

package/src/census-validation.ts

@@ -0,0 +1,25 @@
+/**
+ * Census field acceptance shared by offline-sync and the reconcile planner
+ * (issue #2477). Both surfaces parse untrusted peer censuses and must accept
+ * and reject exactly the same values; when these checks lived as two copies
+ * they could drift silently and break convergence. Each surface keeps only a
+ * thin wrapper that picks its own error type and message.
+ */
+
+/** 64-character sha256 hex, either case; the canonical stored form is lowercase. */
+export const SHA256_HEX_PATTERN = /^[a-f0-9]{64}$/i;
+
+/** Largest `mtimeMs` a census may carry: `new Date(ms)` must stay a valid Date. */
+export const CENSUS_MAX_MTIME_MS = 8_640_000_000_000_000;
+
+export function isSha256Hex(value: unknown): value is string {
+  return typeof value === "string" && SHA256_HEX_PATTERN.test(value);
+}
+
+/**
+ * Fractional values are valid: `fs.stat()` reports sub-millisecond mtimes on
+ * common filesystems, so this deliberately does not require an integer.
+ */
+export function isCensusMtimeMs(value: unknown): value is number {
+  return typeof value === "number" && Number.isFinite(value) && value >= 0 && value <= CENSUS_MAX_MTIME_MS;
+}

package/src/coding/architecture-surfaces.test.ts

@@ -22,8 +22,6 @@ import {
   ARCHITECTURE_CARD_TAG,
   ARCHITECTURE_CARD_KIND,
   handleCodingArchitecture,
-  isArchitectureCardSurfaceEnabled,
-  isArchitectureCardSurfaceVisible,
   isArchitectureSubcommand,
   formatArchitectureSubcommands,
   findArchitectureCardMemory,
@@ -31,6 +29,7 @@ import {
   type ArchitectureSurfaceRequest,
   type ArchitectureSurfaceStorage,
 } from "./architecture-surfaces.js";
+import { isCodingKnowledgeFeatureEnabled, isCodingKnowledgeFeatureVisible } from "./coding-knowledge-config.js";
 import { sealedWriteToLegacyArgs } from "../write-envelope.js";
 import type { ArchitectureCardBuildResult } from "./architecture-card.js";
 import type {
@@ -183,28 +182,28 @@ test("subcommands: formatArchitectureSubcommands lists valid options", () => {
 // ──────────────────────────────────────────────────────────────────────────
 
 test("gate: surface enabled when config + architectureCard + coding context all true", () => {
-  assert.equal(isArchitectureCardSurfaceEnabled(DEFAULT_CONFIG, CODING_CONTEXT), true);
+  assert.equal(isCodingKnowledgeFeatureEnabled(DEFAULT_CONFIG, "architectureCard", CODING_CONTEXT), true);
 });
 
 test("gate: surface disabled when master gate off", () => {
   const config: CodingKnowledgeConfig = { ...DEFAULT_CONFIG, enabled: false };
-  assert.equal(isArchitectureCardSurfaceEnabled(config, CODING_CONTEXT), false);
+  assert.equal(isCodingKnowledgeFeatureEnabled(config, "architectureCard", CODING_CONTEXT), false);
 });
 
 test("gate: surface disabled when architectureCard off", () => {
   const config: CodingKnowledgeConfig = { ...DEFAULT_CONFIG, architectureCard: false };
-  assert.equal(isArchitectureCardSurfaceEnabled(config, CODING_CONTEXT), false);
+  assert.equal(isCodingKnowledgeFeatureEnabled(config, "architectureCard", CODING_CONTEXT), false);
 });
 
 test("gate: surface disabled when no coding context", () => {
-  assert.equal(isArchitectureCardSurfaceEnabled(DEFAULT_CONFIG, null), false);
-  assert.equal(isArchitectureCardSurfaceEnabled(DEFAULT_CONFIG, undefined), false);
+  assert.equal(isCodingKnowledgeFeatureEnabled(DEFAULT_CONFIG, "architectureCard", null), false);
+  assert.equal(isCodingKnowledgeFeatureEnabled(DEFAULT_CONFIG, "architectureCard", undefined), false);
 });
 
 test("gate: visibility (tools/list) matches config-only check", () => {
-  assert.equal(isArchitectureCardSurfaceVisible(DEFAULT_CONFIG), true);
-  assert.equal(isArchitectureCardSurfaceVisible({ ...DEFAULT_CONFIG, enabled: false }), false);
-  assert.equal(isArchitectureCardSurfaceVisible({ ...DEFAULT_CONFIG, architectureCard: false }), false);
+  assert.equal(isCodingKnowledgeFeatureVisible(DEFAULT_CONFIG, "architectureCard"), true);
+  assert.equal(isCodingKnowledgeFeatureVisible({ ...DEFAULT_CONFIG, enabled: false }, "architectureCard"), false);
+  assert.equal(isCodingKnowledgeFeatureVisible({ ...DEFAULT_CONFIG, architectureCard: false }, "architectureCard"), false);
 });
 
 // ──────────────────────────────────────────────────────────────────────────

package/src/coding/architecture-surfaces.ts

@@ -35,6 +35,7 @@ import { stripAttributesSuffix } from "../structured-attributes.js";
 import { ARCHITECTURE_CARD_TRUNCATION_MARKER, type ArchitectureCardBuildResult } from "./architecture-card.js";
 import { log } from "../logger.js";
 import { composeMemoryEnvelope, type SealedMemoryEnvelope } from "../write-envelope.js";
+import { isCodingKnowledgeFeatureEnabled } from "./coding-knowledge-config.js";
 
 // ──────────────────────────────────────────────────────────────────────────
 // Subcommands
@@ -56,40 +57,6 @@ export function formatArchitectureSubcommands(): string {
   return ARCHITECTURE_SUBCOMMANDS.join(", ");
 }
 
-// ──────────────────────────────────────────────────────────────────────────
-// Gate predicates — rule 39: one predicate, identical on every surface
-// ──────────────────────────────────────────────────────────────────────────
-
-/**
- * The single architecture-card surface gate. Returns `true` only when:
- *  1. `codingKnowledge.enabled` is true,
- *  2. `codingKnowledge.architectureCard` is true,
- *  3. a coding context is attached (so a repo root is available).
- */
-export function isArchitectureCardSurfaceEnabled(
-  config: CodingKnowledgeConfig,
-  codingContext: CodingContext | null | undefined,
-): boolean {
-  return (
-    config.enabled === true &&
-    config.architectureCard === true &&
-    codingContext !== null &&
-    codingContext !== undefined
-  );
-}
-
-/**
- * Config-only visibility gate — used by the MCP constructor to decide
- * whether to advertise `engram.coding_architecture` in `tools/list`.
- * When this returns `false` the tools array is byte-identical to
- * pre-feature (rule 39).
- */
-export function isArchitectureCardSurfaceVisible(
-  config: CodingKnowledgeConfig,
-): boolean {
-  return config.enabled === true && config.architectureCard === true;
-}
-
 // ──────────────────────────────────────────────────────────────────────────
 // Surface request / response shapes
 // ──────────────────────────────────────────────────────────────────────────
@@ -228,7 +195,7 @@ export async function handleCodingArchitecture(
   // narrows it to CodingContext here, with no non-null assertion cast.
   if (
     codingContext === null ||
-    !isArchitectureCardSurfaceEnabled(ctx.codingKnowledge, codingContext)
+    !isCodingKnowledgeFeatureEnabled(ctx.codingKnowledge, "architectureCard", codingContext)
   ) {
     ctx.throwInputError(
       "coding_architecture requires codingKnowledge.enabled, codingKnowledge.architectureCard, and an attached coding context",