@remnic/core 9.65.2 → 9.65.3

package/dist/utility-runtime.d.ts

@@ -1,6 +1,6 @@
 import { TierRoutingPolicy } from './tier-routing.js';
 import './lifecycle.js';
-import './types-Pi0lfaEt.js';
+import './types-BxAcOl5Q.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './types-CM86alG1.js';
@@ -8,6 +8,8 @@ import './operator-doctor-types.js';
 import './external-wiki-config.js';
 import './contradiction-config.js';
 import './graph-path-scoring-config.js';
+import './causal-trajectory.js';
+import './objective-state.js';
 import './types-continuity.js';
 
 interface UtilityRuntimeValues {

package/dist/verified-recall.js

@@ -1,9 +1,9 @@
 import {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
-} from "./chunk-2E36UXVW.js";
+} from "./chunk-7KFIMGMP.js";
 import "./chunk-B7RWBZXW.js";
-import "./chunk-J275IYMG.js";
+import "./chunk-PAYGC3BD.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-46WM6JX2.js";
 import "./chunk-SXIMQLGV.js";
@@ -22,7 +22,7 @@ import "./chunk-ET356KSB.js";
 import "./chunk-72A4L5JJ.js";
 import "./chunk-A7Q43EUZ.js";
 import "./chunk-S2V7RUCL.js";
-import "./chunk-SBDCZ2AX.js";
+import "./chunk-NXKJHSDN.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-PO7NXBG2.js";
 import "./chunk-S2HLHAZ4.js";

package/dist/who-knows-cli.d.ts

@@ -1,6 +1,5 @@
-import { W as WhoKnowsResult } from './access-service-Bke1alZO.js';
-import './catalog-DV6qnbr7.js';
-import './types-Pi0lfaEt.js';
+import { W as WhoKnowsResult } from './access-service-DkaIG3n8.js';
+import './types-BxAcOl5Q.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './types-CM86alG1.js';
@@ -8,39 +7,27 @@ import './operator-doctor-types.js';
 import './external-wiki-config.js';
 import './contradiction-config.js';
 import './graph-path-scoring-config.js';
+import './causal-trajectory.js';
+import './objective-state.js';
 import './types-continuity.js';
-import './access-namespace-preflight-Dhvcl-T0.js';
-import './access-token-capabilities.js';
-import 'node:async_hooks';
-import './scope-profiles-B9xMoFO-.js';
-import './storage-CcKmEjL8.js';
+import './orchestrator-Bvq1-RQs.js';
+import './recall-state.js';
+import './utils/serialize-mutations.js';
+import './search/port.js';
+import './included-memories.js';
+import './briefing.js';
+import './storage-BIDzuKIn.js';
 import './corpus-read-cancellation.js';
 import './artifact-search.js';
 import './entity-id-normalization.js';
 import './page-versioning.js';
 import './consolidation-operator.js';
-import './utils/serialize-mutations.js';
 import './memory-projection-store.js';
 import './maintenance/memory-governance.js';
 import './runtime/better-sqlite.js';
 import 'better-sqlite3';
 import './write-envelope.js';
 import './structured-attributes.js';
-import './types-B1VHaf2w.js';
-import './recall-explain-renderer.js';
-import './recall-state.js';
-import './search/port.js';
-import './included-memories.js';
-import './recall-xray.js';
-import './memory-provenance.js';
-import './user-model.js';
-import './access-citation.js';
-import './access-health-types.js';
-import './corpus-watermark.js';
-import './replica-divergence.js';
-import './resolve-auth-token.js';
-import './orchestrator-DyGUC7re.js';
-import './briefing.js';
 import './buffer.js';
 import './extraction-faithfulness.js';
 import './local-llm.js';
@@ -50,7 +37,8 @@ import './resolve-provider-secret.js';
 import './transcript.js';
 import './session-integrity.js';
 import './summarizer.js';
-import './maintenance-jhMpeGne.js';
+import './maintenance-nkdtSrVr.js';
+import './catalog-CX2BZEJh.js';
 import './namespaces/search.js';
 import './compounding/engine.js';
 import './shared-context/manager.js';
@@ -60,7 +48,7 @@ import './utility-runtime.js';
 import './tier-routing.js';
 import './lifecycle.js';
 import './orchestration/compression-guideline-coordinator.js';
-import './semantic-consolidation-C4uykW84.js';
+import './semantic-consolidation-DlN6xe20.js';
 import './connectors/codex-materialize.js';
 import './logger.js';
 import './embedding-fallback.js';
@@ -68,8 +56,6 @@ import './extraction.js';
 import './schemas.js';
 import './profiling.js';
 import './extraction-error-classification.js';
-import './objective-state.js';
-import './causal-trajectory.js';
 import './trust-zones.js';
 import './harmonic-retrieval.js';
 import './abstraction-nodes.js';
@@ -84,19 +70,23 @@ import './conversation-index/chunker.js';
 import './conversation-index/backend.js';
 import './faiss-adapter-BHecI1fF.js';
 import './runtime/child-process.js';
-import './dependency-propagation-delivery-CsGg-VwS.js';
+import './dependency-propagation-delivery-B8ZMBBCY.js';
 import './namespaces/storage.js';
 import './threading.js';
+import './scope-profiles-DLrRxFWR.js';
 import './graph-444E-DrF.js';
+import './recall-xray.js';
+import './memory-provenance.js';
+import './user-model.js';
 import './recall-context-composition.js';
 import './live-connectors-runner.js';
 import './framework-CNDn2164.js';
 import './relevance.js';
 import './negative.js';
 import './session-observer-state.js';
-import './semantic-TddhF0y7.js';
+import './semantic-BalR6EXU.js';
 import './replay/types.js';
-import './service-DCZDZNcV.js';
+import './service-GkYyVfm9.js';
 import './extraction-judge.js';
 import './lcm/engine.js';
 import './lcm/archive.js';
@@ -106,25 +96,35 @@ import './lcm/dag.js';
 import './lcm/recall.js';
 import './lcm/queue.js';
 import './policy-runtime.js';
+import './access-schema.js';
+import './resolve-auth-token.js';
+import 'node:stream';
+import './action-confidence.js';
+import './offline-sync.js';
+import './offline-sync-file-io.js';
+import './memory-worth-outcomes.js';
 import './cross-namespace-budget.js';
-import './explicit-capture.js';
 import './recall-audit-anomaly.js';
 import './recall-audit.js';
+import './types-B1VHaf2w.js';
+import './transfer/capsule-import.js';
+import './transfer/types.js';
+import './access-namespace-preflight-B7Usyz-K.js';
+import './access-token-capabilities.js';
+import 'node:async_hooks';
+import './recall-explain-renderer.js';
+import './access-citation.js';
+import './access-health-types.js';
+import './corpus-watermark.js';
+import './replica-divergence.js';
+import './explicit-capture.js';
 import './access-wearables-meetings-surface.js';
 import './graph-snapshot.js';
 import './access-offline-manifest.js';
 import './reconcile/manifest.js';
 import './reconcile/plan.js';
-import './offline-sync.js';
-import './offline-sync-file-io.js';
-import './action-confidence.js';
 import './capsule-cli.js';
-import './memory-worth-outcomes.js';
-import './access-schema.js';
-import 'node:stream';
 import './transfer/capsule-export.js';
-import './transfer/types.js';
-import './transfer/capsule-import.js';
 import './access-errors.js';
 
 /**

package/dist/who-knows-cli.js

@@ -4,9 +4,9 @@ import {
   renderWhoKnows,
   renderWhoKnowsJson,
   renderWhoKnowsText
-} from "./chunk-YB42WZCY.js";
-import "./chunk-SPUJNJJC.js";
-import "./chunk-J275IYMG.js";
+} from "./chunk-IQSC3V2E.js";
+import "./chunk-NZWEEALH.js";
+import "./chunk-PAYGC3BD.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-46WM6JX2.js";
 import "./chunk-SXIMQLGV.js";
@@ -25,7 +25,7 @@ import "./chunk-ET356KSB.js";
 import "./chunk-72A4L5JJ.js";
 import "./chunk-A7Q43EUZ.js";
 import "./chunk-S2V7RUCL.js";
-import "./chunk-SBDCZ2AX.js";
+import "./chunk-NXKJHSDN.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-PO7NXBG2.js";
 import "./chunk-S2HLHAZ4.js";

package/dist/who-knows.d.ts

@@ -1,13 +1,9 @@
-export { bo as WHO_KNOWS_AUTHORSHIP_BONUS, bp as WHO_KNOWS_DEFAULT_LIMIT, bq as WHO_KNOWS_MAX_EVIDENCE, br as WHO_KNOWS_MAX_LIMIT, bs as WHO_KNOWS_MCP_TOOLS, bt as WhoKnowsEntity, bu as WhoKnowsEvidence, bv as WhoKnowsHit, bw as WhoKnowsHttpOutcome, W as WhoKnowsResult, bx as WhoKnowsStorage, bE as computeWhoKnows, bI as handleWhoKnowsHttpQuery, bN as loadWhoKnowsEntities, bT as tokenizeTopic, bU as validateWhoKnowsInput } from './access-service-Bke1alZO.js';
-import './types-Pi0lfaEt.js';
-import './catalog-DV6qnbr7.js';
-import './access-namespace-preflight-Dhvcl-T0.js';
-import './access-token-capabilities.js';
-import 'node:async_hooks';
-import './scope-profiles-B9xMoFO-.js';
-import './storage-CcKmEjL8.js';
-import './corpus-read-cancellation.js';
-import './artifact-search.js';
+export { bA as WHO_KNOWS_AUTHORSHIP_BONUS, bB as WHO_KNOWS_DEFAULT_LIMIT, bC as WHO_KNOWS_MAX_EVIDENCE, bD as WHO_KNOWS_MAX_LIMIT, bE as WHO_KNOWS_MCP_TOOLS, bF as WhoKnowsEntity, bG as WhoKnowsEvidence, bH as WhoKnowsHit, bI as WhoKnowsHttpOutcome, W as WhoKnowsResult, bJ as WhoKnowsStorage, bT as computeWhoKnows, bZ as handleWhoKnowsHttpQuery, c2 as loadWhoKnowsEntities, c9 as tokenizeTopic, ca as validateWhoKnowsInput } from './access-service-DkaIG3n8.js';
+import './types-BxAcOl5Q.js';
+import './orchestrator-Bvq1-RQs.js';
+import './recall-state.js';
+import './utils/serialize-mutations.js';
+import './search/port.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './types-CM86alG1.js';
@@ -15,32 +11,23 @@ import './operator-doctor-types.js';
 import './external-wiki-config.js';
 import './contradiction-config.js';
 import './graph-path-scoring-config.js';
+import './causal-trajectory.js';
+import './objective-state.js';
 import './types-continuity.js';
+import './included-memories.js';
+import './briefing.js';
+import './storage-BIDzuKIn.js';
+import './corpus-read-cancellation.js';
+import './artifact-search.js';
 import './entity-id-normalization.js';
 import './page-versioning.js';
 import './consolidation-operator.js';
-import './utils/serialize-mutations.js';
 import './memory-projection-store.js';
 import './maintenance/memory-governance.js';
 import './runtime/better-sqlite.js';
 import 'better-sqlite3';
 import './write-envelope.js';
 import './structured-attributes.js';
-import './types-B1VHaf2w.js';
-import './recall-explain-renderer.js';
-import './recall-state.js';
-import './search/port.js';
-import './included-memories.js';
-import './recall-xray.js';
-import './memory-provenance.js';
-import './user-model.js';
-import './access-citation.js';
-import './access-health-types.js';
-import './corpus-watermark.js';
-import './replica-divergence.js';
-import './resolve-auth-token.js';
-import './orchestrator-DyGUC7re.js';
-import './briefing.js';
 import './buffer.js';
 import './extraction-faithfulness.js';
 import './local-llm.js';
@@ -50,7 +37,8 @@ import './resolve-provider-secret.js';
 import './transcript.js';
 import './session-integrity.js';
 import './summarizer.js';
-import './maintenance-jhMpeGne.js';
+import './maintenance-nkdtSrVr.js';
+import './catalog-CX2BZEJh.js';
 import './namespaces/search.js';
 import './compounding/engine.js';
 import './shared-context/manager.js';
@@ -60,7 +48,7 @@ import './utility-runtime.js';
 import './tier-routing.js';
 import './lifecycle.js';
 import './orchestration/compression-guideline-coordinator.js';
-import './semantic-consolidation-C4uykW84.js';
+import './semantic-consolidation-DlN6xe20.js';
 import './connectors/codex-materialize.js';
 import './logger.js';
 import './embedding-fallback.js';
@@ -68,8 +56,6 @@ import './extraction.js';
 import './schemas.js';
 import './profiling.js';
 import './extraction-error-classification.js';
-import './objective-state.js';
-import './causal-trajectory.js';
 import './trust-zones.js';
 import './harmonic-retrieval.js';
 import './abstraction-nodes.js';
@@ -84,19 +70,23 @@ import './conversation-index/chunker.js';
 import './conversation-index/backend.js';
 import './faiss-adapter-BHecI1fF.js';
 import './runtime/child-process.js';
-import './dependency-propagation-delivery-CsGg-VwS.js';
+import './dependency-propagation-delivery-B8ZMBBCY.js';
 import './namespaces/storage.js';
 import './threading.js';
+import './scope-profiles-DLrRxFWR.js';
 import './graph-444E-DrF.js';
+import './recall-xray.js';
+import './memory-provenance.js';
+import './user-model.js';
 import './recall-context-composition.js';
 import './live-connectors-runner.js';
 import './framework-CNDn2164.js';
 import './relevance.js';
 import './negative.js';
 import './session-observer-state.js';
-import './semantic-TddhF0y7.js';
+import './semantic-BalR6EXU.js';
 import './replay/types.js';
-import './service-DCZDZNcV.js';
+import './service-GkYyVfm9.js';
 import './extraction-judge.js';
 import './lcm/engine.js';
 import './lcm/archive.js';
@@ -106,23 +96,33 @@ import './lcm/dag.js';
 import './lcm/recall.js';
 import './lcm/queue.js';
 import './policy-runtime.js';
+import './access-schema.js';
+import './resolve-auth-token.js';
+import 'node:stream';
+import './action-confidence.js';
+import './offline-sync.js';
+import './offline-sync-file-io.js';
+import './memory-worth-outcomes.js';
 import './cross-namespace-budget.js';
-import './explicit-capture.js';
 import './recall-audit-anomaly.js';
 import './recall-audit.js';
+import './types-B1VHaf2w.js';
+import './transfer/capsule-import.js';
+import './transfer/types.js';
+import './access-namespace-preflight-B7Usyz-K.js';
+import './access-token-capabilities.js';
+import 'node:async_hooks';
+import './recall-explain-renderer.js';
+import './access-citation.js';
+import './access-health-types.js';
+import './corpus-watermark.js';
+import './replica-divergence.js';
+import './explicit-capture.js';
 import './access-wearables-meetings-surface.js';
 import './graph-snapshot.js';
 import './access-offline-manifest.js';
 import './reconcile/manifest.js';
 import './reconcile/plan.js';
-import './offline-sync.js';
-import './offline-sync-file-io.js';
-import './action-confidence.js';
 import './capsule-cli.js';
-import './memory-worth-outcomes.js';
-import './access-schema.js';
-import 'node:stream';
 import './transfer/capsule-export.js';
-import './transfer/types.js';
-import './transfer/capsule-import.js';
 import './access-errors.js';

package/dist/who-knows.js

@@ -9,8 +9,8 @@ import {
   loadWhoKnowsEntities,
   tokenizeTopic,
   validateWhoKnowsInput
-} from "./chunk-SPUJNJJC.js";
-import "./chunk-J275IYMG.js";
+} from "./chunk-NZWEEALH.js";
+import "./chunk-PAYGC3BD.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-46WM6JX2.js";
 import "./chunk-SXIMQLGV.js";
@@ -29,7 +29,7 @@ import "./chunk-ET356KSB.js";
 import "./chunk-72A4L5JJ.js";
 import "./chunk-A7Q43EUZ.js";
 import "./chunk-S2V7RUCL.js";
-import "./chunk-SBDCZ2AX.js";
+import "./chunk-NXKJHSDN.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-PO7NXBG2.js";
 import "./chunk-S2HLHAZ4.js";

package/dist/write-envelope.d.ts

@@ -1,4 +1,4 @@
-import { x as MemoryCategory, N as MemorySubject } from './types-Pi0lfaEt.js';
+import { y as MemoryCategory, N as MemorySubject } from './types-BxAcOl5Q.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './types-CM86alG1.js';
@@ -6,6 +6,8 @@ import './operator-doctor-types.js';
 import './external-wiki-config.js';
 import './contradiction-config.js';
 import './graph-path-scoring-config.js';
+import './causal-trajectory.js';
+import './objective-state.js';
 import './types-continuity.js';
 
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.65.2",
+  "version": "9.65.3",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -3166,7 +3166,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.65.2"
+    "@remnic/coding-graph": "^9.65.3"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/access-boundary.ts

@@ -140,6 +140,7 @@ export const OPERATION_NAMES = [
   "review_list",
   "review_resolve",
   "contradiction_scan_run",
+  "preference_drift_scan",
   "memory_summarize_hourly",
   "conversation_index_update",
   "profiling_report",
@@ -184,6 +185,9 @@ export const OPERATION_NAMES = [
   "trust_zones_status",
   "trust_zones_records",
   "review_disposition",
+  "review_deck_list",
+  "review_deck_action",
+  "review_deck_undo",
   "trust_zones_promote",
   "trust_zones_demo_seed",
   "citations_observed",

package/src/access-http.ts

@@ -68,7 +68,7 @@ import { cleanupExpiredChatSessions, enforceChatSessionNamespace } from "./chat/
 import { isDefaultReviewNamespace, listPairs, readPair } from "./contradiction/contradiction-review.js";
 import { isValidResolutionVerb, executeResolution } from "./contradiction/resolution.js";
 import { RelayMissionStoreError } from "./relay/mission.js";
-import { SupportPassportAccessHttpBase } from "./support-passport/access-http-base.js";
+import { ReviewDeckAccessHttpBase } from "./review/review-deck-http-base.js";
 import { serializeInlineScriptValue } from "./inline-script.js";
 import type { SupportPassportExternalRequestHandler } from "./support-passport/public-http.js";
 export interface AccessHttpReadinessState {
@@ -386,7 +386,7 @@ function codingContextFromProjectTag(projectTag: string): {
   };
 }
 
-export class EngramAccessHttpServer extends SupportPassportAccessHttpBase {
+export class EngramAccessHttpServer extends ReviewDeckAccessHttpBase {
   protected readonly service: EngramAccessService;
   private readonly host: string;
   private readonly requestedPort: number;
@@ -396,7 +396,7 @@ export class EngramAccessHttpServer extends SupportPassportAccessHttpBase {
   private readonly authTokenEntriesGetter?: () => ReadonlyArray<{ token: string; connector?: string; capabilities?: TokenCapabilities }>;
   private readonly tokenPathPolicy?: (connector: string, pathname: string | undefined) => boolean;
   private readonly authenticatedPrincipal?: string;
-  private readonly maxBodyBytes: number;
+  protected readonly maxBodyBytes: number;
   private readonly adminConsoleEnabled: boolean;
   protected readonly adminConsolePublicDir: string;
   private readonly adminConsolePrefillToken?: string;
@@ -730,7 +730,7 @@ export class EngramAccessHttpServer extends SupportPassportAccessHttpBase {
   /** Resolve namespace: only use the explicit body value. Adapter-inferred namespace
    *  is intentionally NOT used as a fallback for REST requests — omitting namespace
    *  should default to the server's global namespace, not silently scope to an adapter. */
-  private resolveNamespace(_req: IncomingMessage, bodyNamespace?: string): string | undefined {
+  protected resolveNamespace(_req: IncomingMessage, bodyNamespace?: string): string | undefined {
     const namespace = bodyNamespace || undefined;
     // Per-token namespace enforcement (issues #1837/#1850): every HTTP
     // namespace-scoped route routes through this helper so none can dodge the
@@ -901,6 +901,7 @@ export class EngramAccessHttpServer extends SupportPassportAccessHttpBase {
     if (req.method === "POST" && pathname === "/mcp") return this.handleMcpRequest(req, res, abortSignal);
 
     if (await this.handleSupportPassportOwnerRequest(req, res, pathname, parsed.search.length > 0, abortSignal)) return;
+    if (await this.handleReviewDeckRequest(req, res, pathname, abortSignal)) return;
 
     if (req.method === "GET" && pathname === "/engram/v1/live") return this.respondJson(res, 200, { ok: true, ready: true });
     if (req.method === "GET" && pathname === "/engram/v1/health") {
@@ -3906,7 +3907,7 @@ export class EngramAccessHttpServer extends SupportPassportAccessHttpBase {
    * pass. Throws {@link EngramAccessForbiddenError} (→ 403) when a scoped
    * token calls a non-permitted op (issue #1837).
    */
-  private enforceTokenOp(op: OperationName): void {
+  protected enforceTokenOp(op: OperationName): void {
     void getOperation(op); // preserve the registration side-effect assertion
     assertOperationAllowed(tokenCapabilityStore.getStore(), op);
   }

package/src/access-mcp-admin-tools.ts

@@ -182,4 +182,28 @@ export const MCP_ADMIN_OPS_TOOLS: Array<{
     additionalProperties: false,
   },
 },
+{
+  name: "engram.preference_drift_scan",
+  description:
+    "Run a preference drift scan (issue #2371): classify aging preference memories as corroborated / stale / drifted from recent same-namespace evidence. Shadow-first — the default run reports only. apply=true (and driftDetection.enabled) stamps lastCorroborated / driftState and opens one review item per drifted preference. Never auto-deletes and never auto-supersedes.",
+  inputSchema: {
+    type: "object",
+    properties: {
+      namespace: { type: "string" },
+      apply: { type: "boolean" },
+    },
+    additionalProperties: false,
+  },
+},
 ];
+
+/**
+ * Tool-name → operation-name entries contributed by this module, spread into
+ * `MCP_MIGRATED_OPERATIONS` in access-mcp.ts. Declared here (rather than
+ * inline in the transport) for the same structural-ratchet reason the tool
+ * table above lives here. `remnic.*` aliases resolve by suffix, so only the
+ * `engram.*` name is listed.
+ */
+export const MCP_ADMIN_OPS_MIGRATED_OPERATIONS: Readonly<Record<string, string>> = {
+  "engram.preference_drift_scan": "preference_drift_scan",
+};

package/src/access-mcp-output-schemas.ts

@@ -387,6 +387,20 @@ const TOOL_OUTPUT_SCHEMAS: Readonly<Record<string, Record<string, unknown>>> = {
     cooledDown: T_NUMBER,
     elapsedMs: T_NUMBER,
   }),
+  preference_drift_scan: objectSchema({
+    schemaVersion: T_NUMBER,
+    generatedAt: T_STRING,
+    mode: T_STRING,
+    namespace: T_STRING,
+    scanned: T_NUMBER,
+    eligible: T_NUMBER,
+    findings: T_ARRAY,
+    counts: T_OBJECT,
+    appliedCount: T_NUMBER,
+    reviewItemsOpened: T_NUMBER,
+    elapsedMs: T_NUMBER,
+    skippedReason: T_STRING,
+  }),
   memory_summarize_hourly: objectSchema({ ok: T_BOOLEAN, message: T_STRING }),
   conversation_index_update: objectSchema({
     enabled: T_BOOLEAN,

package/src/access-mcp.ts

@@ -1,6 +1,6 @@
 import { randomUUID } from "node:crypto";
 import {
-  MCP_ADMIN_OPS_TOOLS,
+  MCP_ADMIN_OPS_MIGRATED_OPERATIONS, MCP_ADMIN_OPS_TOOLS,
   MCP_GIT_CONTEXT_SCHEMA_PROPS_IGNORED,
 } from "./access-mcp-admin-tools.js";
 import { readFile } from "node:fs/promises";
@@ -265,7 +265,7 @@ export const MCP_MIGRATED_OPERATIONS: Readonly<Record<string, OperationName>> =
   "engram.console_state": "console_state",
   "engram.dreams_status": "dreams_status",
   "engram.dreams_run": "dreams_run",
-  ...SUPPORT_PASSPORT_MCP_MIGRATED_OPERATIONS,
+  ...SUPPORT_PASSPORT_MCP_MIGRATED_OPERATIONS, ...MCP_ADMIN_OPS_MIGRATED_OPERATIONS,
   "engram.memory_chat": "chat_message",
 };
 

package/src/access-operations-batch.ts

@@ -35,6 +35,7 @@ import {
 import { listPairs, isDefaultReviewNamespace, readPair } from "./contradiction/contradiction-review.js";
 import { executeResolution, isValidResolutionVerb } from "./contradiction/resolution.js";
 import { runContradictionScan } from "./contradiction/contradiction-scan.js";
+import { runPreferenceDriftScan } from "./preferences/preference-drift.js";
 import { runGraphEdgeDecayMaintenanceAcrossNamespaces } from "./maintenance/graph-edge-decay.js";
 import { normalizeDreamsStatusWindowHours } from "./maintenance/dreams-ledger.js";
 
@@ -347,6 +348,7 @@ defineOperation({ name: "review_resolve", description: "Resolve pair.", schema:
   },
 });
 defineOperation({ name: "contradiction_scan_run", description: "Run scan.", schema: strictSchema({ namespace: S.str }), handler: async (input, ctx) => ({ result: await runContradictionScan({ storage: ctx.service.storageRef, config: ctx.service.configRef, memoryDir: ctx.service.memoryDir, embeddingLookupFactory: ctx.service.embeddingLookupFactoryRef, storageForNamespace: (ns) => ctx.service.getWritableStorageForNamespace(ns ?? undefined, ctx.authenticatedPrincipal), localLlm: ctx.service.localLlmRef, fallbackLlm: ctx.service.fallbackLlmRef, namespace: optStr(input.namespace) }) }) });
+defineOperation({ name: "preference_drift_scan", description: "Run preference drift scan.", schema: strictSchema({ namespace: S.str, apply: S.bool }), handler: async (input, ctx) => ({ result: await runPreferenceDriftScan({ storage: ctx.service.storageRef, config: ctx.service.configRef, memoryDir: ctx.service.memoryDir, embeddingLookupFactory: ctx.service.embeddingLookupFactoryRef, storageForNamespace: (ns) => ctx.service.getWritableStorageForNamespace(ns ?? undefined, ctx.authenticatedPrincipal), localLlm: ctx.service.localLlmRef, fallbackLlm: ctx.service.fallbackLlmRef, namespace: optStr(input.namespace), apply: input.apply === true }) }) });
 defineOperation({ name: "graph_edge_decay_run", description: "Run edge decay.", fleetWide: true, schema: strictSchema({ dryRun: S.bool }), handler: async (input, ctx) => { const cfg = ctx.service.configRef; if (!cfg.graphEdgeDecayEnabled) return { result: { ranAt: new Date().toISOString(), disabled: true, reason: "graphEdgeDecayEnabled is false" } }; return { result: { results: await runGraphEdgeDecayMaintenanceAcrossNamespaces(ctx.service.memoryDir, { windowMs: cfg.graphEdgeDecayWindowMs, perWindow: cfg.graphEdgeDecayPerWindow, floor: cfg.graphEdgeDecayFloor, visibilityThreshold: cfg.graphEdgeDecayVisibilityThreshold, dryRun: input.dryRun === true, namespacesEnabled: cfg.namespacesEnabled === true, defaultNamespace: cfg.defaultNamespace }) } }; } });
 
 // === SUMMARIZE/PROFILING/PEERS/CONSOLE/DREAMS ===
@@ -397,6 +399,9 @@ defineOperation({ name: "quality_status", description: "Quality status.", schema
 defineOperation({ name: "trust_zones_status", description: "Trust-zone status.", schema: strictSchema({}), handler: async (_i, ctx) => ({ result: await ctx.service.trustZoneStatus() }) });
 defineOperation({ name: "trust_zones_records", description: "Browse trust-zone records.", schema: strictSchema({ namespace: S.str, limit: S.num, offset: S.num }), handler: async (input, ctx) => ({ result: await ctx.service.trustZoneBrowse({ namespace: optStr(input.namespace), limit: optNum(input.limit), offset: optNum(input.offset) }, ctx.authenticatedPrincipal) }) });
 defineOperation({ name: "review_disposition", description: "Review disposition.", schema: strictSchema({ memoryId: S.str, status: S.str, reasonCode: S.str, namespace: S.str }), handler: async (input, ctx) => ({ result: await ctx.service.reviewDisposition({ memoryId: optStr(input.memoryId) ?? "", status: (optStr(input.status) ?? "archived") as never, reasonCode: optStr(input.reasonCode) ?? "", namespace: optStr(input.namespace), authenticatedPrincipal: ctx.authenticatedPrincipal }) }) });
+defineOperation({ name: "review_deck_list", description: "List review deck.", schema: strictSchema({ namespace: S.str, cursor: S.str, limit: S.num }), handler: async (input, ctx) => ({ result: await ctx.service.reviewDeckList({ namespace: optStr(input.namespace), principal: ctx.authenticatedPrincipal, cursor: optStr(input.cursor), limit: optNum(input.limit) ?? 1 }) }) });
+defineOperation({ name: "review_deck_action", description: "Apply review deck action.", schema: strictSchema({ itemId: S.str, revision: S.str, action: S.str, correctionText: S.str, idempotencyKey: S.str }), handler: async (input, ctx) => ({ result: await ctx.service.reviewDeckAction({ schemaVersion: 1, itemId: reqStr(input.itemId, "itemId"), revision: reqStr(input.revision, "revision"), action: reqStr(input.action, "action") as "keep", idempotencyKey: reqStr(input.idempotencyKey, "idempotencyKey"), ...(optStr(input.correctionText) ? { correctionText: optStr(input.correctionText)! } : {}) } as never, { principal: ctx.authenticatedPrincipal, signal: ctx.abortSignal }) }) });
+defineOperation({ name: "review_deck_undo", description: "Undo review deck action.", schema: strictSchema({ receiptId: S.str, expectedRevision: S.str, idempotencyKey: S.str }), handler: async (input, ctx) => ({ result: await ctx.service.reviewDeckUndo({ schemaVersion: 1, receiptId: reqStr(input.receiptId, "receiptId"), expectedRevision: reqStr(input.expectedRevision, "expectedRevision"), idempotencyKey: reqStr(input.idempotencyKey, "idempotencyKey") }, { principal: ctx.authenticatedPrincipal, signal: ctx.abortSignal }) }) });
 defineOperation({ name: "trust_zones_promote", description: "Promote trust-zone.", schema: strictSchema({ recordId: S.str, targetZone: S.str, promotionReason: S.str, dryRun: S.bool, namespace: S.str }), handler: async (input, ctx) => ({ result: await ctx.service.trustZonePromote({ recordId: optStr(input.recordId) ?? "", targetZone: (optStr(input.targetZone) ?? "working") as never, promotionReason: optStr(input.promotionReason) ?? "", dryRun: input.dryRun === true, namespace: optStr(input.namespace), authenticatedPrincipal: ctx.authenticatedPrincipal }) }) });
 defineOperation({ name: "trust_zones_demo_seed", description: "Demo seed.", schema: strictSchema({ scenario: S.str, dryRun: S.bool, namespace: S.str }), handler: async (input, ctx) => ({ result: await ctx.service.trustZoneDemoSeed({ scenario: optStr(input.scenario), dryRun: input.dryRun === true, namespace: optStr(input.namespace), authenticatedPrincipal: ctx.authenticatedPrincipal }) }) });
 defineOperation({ name: "citations_observed", description: "Record citations.", schema: strictSchema({}), handler: async (_i, _ctx) => ({ result: { ok: true } }) });