@remnic/core 9.65.2 → 9.65.4

package/dist/{chunk-QOS5LBZN.js → chunk-TJFI3K2O.js}

@@ -1,10 +1,16 @@
 import {
   hasCodexMaterializeSentinel,
   materializeForNamespace
-} from "./chunk-RDFF2NAU.js";
+} from "./chunk-ZXBTTMGZ.js";
 import {
   StorageManager
-} from "./chunk-J275IYMG.js";
+} from "./chunk-THVI4Y7X.js";
+import {
+  projectProceduresToSkills
+} from "./chunk-236PXYG7.js";
+import {
+  BUILTIN_SKILLS
+} from "./chunk-ZCUTSMR2.js";
 import {
   excludeSupportPassportPrivateMemories
 } from "./chunk-XDL5CYZN.js";
@@ -73,12 +79,18 @@ async function runCodexMaterialize(options) {
     memories = await storage.readAllMemories();
   }
   memories = excludeSupportPassportPrivateMemories(memories);
+  const skillProjection = cfg.procedural?.skillProjection;
+  const skills = cfg.procedural?.enabled === true && skillProjection?.enabled === true ? projectProceduresToSkills(memories, {
+    maxSkills: skillProjection.maxSkills,
+    reservedSlugs: BUILTIN_SKILLS.map((skill) => skill.slug)
+  }) : void 0;
   const result = materializeForNamespace(namespace, {
     memories,
     codexHome,
     maxSummaryTokens: cfg.codexMaterializeMaxSummaryTokens,
     rolloutRetentionDays: cfg.codexMaterializeRolloutRetentionDays,
     rolloutSummaries: options.rolloutSummaries,
+    skills,
     now: options.now
   });
   if (options.reason) {
@@ -138,4 +150,4 @@ export {
   runCodexMaterialize,
   runPostConsolidationMaterialize
 };
-//# sourceMappingURL=chunk-QOS5LBZN.js.map
+//# sourceMappingURL=chunk-TJFI3K2O.js.map

package/dist/chunk-TJFI3K2O.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/connectors/codex-materialize-runner.ts","../src/namespaces/path.ts"],"sourcesContent":["/**\n * codex-materialize-runner.ts — Thin I/O bridge for the Codex materializer.\n *\n * The pure rendering logic lives in {@link ./codex-materialize.js}. This file\n * is the place callers (consolidation hooks, CLI, session-end hook) go when\n * they want the whole \"load memories from storage → render → write\" flow.\n *\n * Kept deliberately small so #378 never has to reach into orchestrator.ts /\n * importance.ts — the two files Wave 1 agents are editing concurrently.\n */\n\nimport { existsSync } from \"node:fs\";\n\nimport { log } from \"../logger.js\";\nimport { resolveNamespaceChildRoot } from \"../namespaces/path.js\";\nimport { isSafeRouteNamespace } from \"../routing/engine.js\";\nimport { projectProceduresToSkills } from \"../procedural/skill-projection.js\";\nimport { BUILTIN_SKILLS } from \"../skills-registry.js\";\nimport { StorageManager } from \"../storage.js\";\nimport { excludeSupportPassportPrivateMemories } from \"../support-passport/card-projection.js\";\nimport type { PluginConfig, MemoryFile } from \"../types.js\";\nimport {\n  hasCodexMaterializeSentinel,\n  materializeForNamespace,\n  type MaterializeResult,\n  type RolloutSummaryInput,\n} from \"./codex-materialize.js\";\n\n/** Options accepted by the shared post-consolidation materialize helper. */\nexport interface PostConsolidationMaterializeOptions {\n  config: PluginConfig;\n  namespace?: string;\n  memories?: MemoryFile[];\n  memoryDir?: string;\n  codexHome?: string;\n  rolloutSummaries?: RolloutSummaryInput[];\n  now?: Date;\n}\n\n/** Options accepted by the runner. */\nexport interface RunMaterializeOptions {\n  /** Remnic config — we only read the `codexMaterialize*` fields. */\n  config: PluginConfig;\n  /** Namespace to materialize. Overrides the config's `codexMaterializeNamespace`. */\n  namespace?: string;\n  /** Override the memory directory (defaults to `config.memoryDir`). */\n  memoryDir?: string;\n  /** Override `<codex_home>` (useful for tests). */\n  codexHome?: string;\n  /** Optional pre-loaded memories (bypasses disk read — used in tests). */\n  memories?: MemoryFile[];\n  /** Optional rollout summaries supplied by the caller. */\n  rolloutSummaries?: RolloutSummaryInput[];\n  /** Current time injection for deterministic runs. */\n  now?: Date;\n  /** Reason string — logged for observability. */\n  reason?: \"consolidation\" | \"session_end\" | \"manual\" | \"cli\";\n}\n\n/**\n * Run the Codex materialization end-to-end. Returns `null` when the feature\n * is disabled in config or when the user hasn't opted in via the sentinel.\n * Never throws for \"expected\" skips; only throws on schema validation or I/O\n * errors that callers actually need to surface.\n */\nexport async function runCodexMaterialize(\n  options: RunMaterializeOptions,\n): Promise<MaterializeResult | null> {\n  const cfg = options.config;\n  if (!cfg.codexMaterializeMemories) {\n    log.debug(`[codex-materialize] skipped — codexMaterializeMemories=false`);\n    return null;\n  }\n\n  // Per-trigger gate: session-end runs must honor codexMaterializeOnSessionEnd.\n  // The Codex Stop hook (remnic-codex-hook.cjs, session-end event) passes\n  // reason=\"session_end\"; when the user has turned off the session-end trigger\n  // we short-circuit here without touching disk.\n  if (options.reason === \"session_end\" && cfg.codexMaterializeOnSessionEnd === false) {\n    log.debug(\n      `[codex-materialize] skipped — session-end disabled via codexMaterializeOnSessionEnd=false`,\n    );\n    return null;\n  }\n\n  const namespace = resolveNamespace(options.namespace, cfg);\n  const memoryDir = options.memoryDir ?? cfg.memoryDir;\n  const codexHome = options.codexHome ?? cfg.codex?.codexHome ?? undefined;\n  if (!memoryDir) {\n    log.warn(`[codex-materialize] skipped — no memoryDir available`);\n    return null;\n  }\n\n  let memories: MemoryFile[];\n  if (options.memories) {\n    memories = options.memories;\n  } else {\n    if (!hasCodexMaterializeSentinel(codexHome)) {\n      return materializeForNamespace(namespace, {\n        memories: [],\n        codexHome,\n        maxSummaryTokens: cfg.codexMaterializeMaxSummaryTokens,\n        rolloutRetentionDays: cfg.codexMaterializeRolloutRetentionDays,\n        rolloutSummaries: options.rolloutSummaries,\n        now: options.now,\n      });\n    }\n    const nsDir = resolveNamespaceDir(memoryDir, namespace, cfg);\n    const storage = new StorageManager(nsDir);\n    memories = await storage.readAllMemories();\n  }\n  memories = excludeSupportPassportPrivateMemories(memories);\n\n  // Skill projection (issue #2369). Gated on `procedural.enabled` AND\n  // `procedural.skillProjection.enabled`; `maxSkills: 0` disables it too.\n  // Passing `undefined` leaves `skills/` untouched, so a disabled gate never\n  // deletes a folder the user curated.\n  const skillProjection = cfg.procedural?.skillProjection;\n  const skills =\n    cfg.procedural?.enabled === true && skillProjection?.enabled === true\n      ? projectProceduresToSkills(memories, {\n          maxSkills: skillProjection.maxSkills,\n          reservedSlugs: BUILTIN_SKILLS.map((skill) => skill.slug),\n        })\n      : undefined;\n\n  // Intentionally NOT catching here: per the JSDoc contract above,\n  // schema-validation and I/O errors from `materializeForNamespace` must\n  // surface to callers so they can exit non-zero (CLI) or log + recover\n  // (consolidation post-hook, which has its own narrower try/catch).\n  // Catching everything would make a broken MEMORY.md render look like a\n  // successful skip, and invisible failures are strictly worse than loud\n  // ones for a feature that writes to `~/.codex/memories`.\n  const result = materializeForNamespace(namespace, {\n    memories,\n    codexHome,\n    maxSummaryTokens: cfg.codexMaterializeMaxSummaryTokens,\n    rolloutRetentionDays: cfg.codexMaterializeRolloutRetentionDays,\n    rolloutSummaries: options.rolloutSummaries,\n    skills,\n    now: options.now,\n  });\n  if (options.reason) {\n    log.debug(\n      `[codex-materialize] ran reason=${options.reason} wrote=${result.wrote} files=${result.filesWritten.length}`,\n    );\n  }\n  return result;\n}\n\n/**\n * Shared helper for post-consolidation materialize hooks.\n *\n * `materializeAfterSemanticConsolidation` and `materializeAfterCausalConsolidation`\n * used to be two nearly-identical copies of this logic; keeping the actual\n * body here means any future guard/logging change happens in one place.\n *\n * The only per-caller knob is `logPrefix`, which is used to tag the\n * non-fatal warning emitted when the materializer throws.\n */\nexport async function runPostConsolidationMaterialize(\n  logPrefix: string,\n  options: PostConsolidationMaterializeOptions,\n): Promise<MaterializeResult | null> {\n  if (!options.config.codexMaterializeMemories) return null;\n  if (!options.config.codexMaterializeOnConsolidation) return null;\n  try {\n    return await runCodexMaterialize({\n      config: options.config,\n      namespace: options.namespace,\n      memories: options.memories,\n      memoryDir: options.memoryDir,\n      codexHome: options.codexHome,\n      rolloutSummaries: options.rolloutSummaries,\n      now: options.now,\n      reason: \"consolidation\",\n    });\n  } catch (error) {\n    log.warn(\n      `${logPrefix} Codex materialize post-hook failed (non-fatal): ${\n        error instanceof Error ? error.message : String(error)\n      }`,\n    );\n    return null;\n  }\n}\n\nfunction resolveNamespace(override: string | undefined, cfg: PluginConfig): string {\n  const requested = (override ?? cfg.codexMaterializeNamespace ?? \"auto\").trim();\n  const defaultNamespace = (cfg.defaultNamespace ?? \"\").trim();\n  const namespace =\n    requested.length === 0 || requested === \"auto\"\n      ? (defaultNamespace.length > 0 ? defaultNamespace : \"default\")\n      : requested;\n  if (!isSafeRouteNamespace(namespace)) {\n    throw new Error(`invalid materialize namespace: ${namespace}`);\n  }\n  return namespace;\n}\n\n/**\n * Resolve the on-disk storage root for a namespace, matching\n * `NamespaceStorageRouter` in `packages/remnic-core/src/namespaces/storage.ts`.\n *\n * Contract:\n *  - When namespaces are disabled, every namespace maps to `memoryDir` itself.\n *  - When namespaces are enabled, non-default namespaces always live under\n *    `memoryDir/namespaces/<namespace>`.\n *  - The default namespace prefers `memoryDir/namespaces/<defaultNamespace>`\n *    when that directory already exists (migrated install); otherwise it\n *    falls back to the legacy `memoryDir` root so materialization does not\n *    silently switch directories out from under an existing install.\n */\nfunction resolveNamespaceDir(\n  memoryDir: string,\n  namespace: string,\n  cfg: PluginConfig,\n): string {\n  if (!cfg.namespacesEnabled) return memoryDir;\n\n  const configuredDefaultNamespace = (cfg.defaultNamespace ?? \"\").trim();\n  const defaultNamespace =\n    configuredDefaultNamespace.length > 0 ? configuredDefaultNamespace : \"default\";\n  const ns = (namespace || defaultNamespace).trim();\n  if (!isSafeRouteNamespace(ns)) {\n    throw new Error(`invalid materialize namespace: ${ns}`);\n  }\n  const namespacedRoot = resolveNamespaceChildRoot(memoryDir, ns, \"materialize namespace path\");\n\n  if (ns === defaultNamespace) {\n    return existsSync(namespacedRoot) ? namespacedRoot : memoryDir;\n  }\n  return namespacedRoot;\n}\n","import path from \"node:path\";\n\nexport function assertNamespacePathInsideRoot(\n  root: string,\n  candidate: string,\n  namespace: string,\n  label = \"namespace path\",\n): void {\n  const relative = path.relative(root, candidate);\n  if (relative === \"\" || (!relative.startsWith(\"..\") && !path.isAbsolute(relative))) {\n    return;\n  }\n  throw new Error(`invalid ${label}: ${namespace}`);\n}\n\nexport function resolveNamespaceChildRoot(\n  memoryDir: string,\n  namespace: string,\n  label = \"namespace path\",\n): string {\n  const namespaceRoot = path.resolve(memoryDir, \"namespaces\");\n  const candidate = path.resolve(namespaceRoot, namespace);\n  assertNamespacePathInsideRoot(namespaceRoot, candidate, namespace, label);\n  return candidate;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAWA,SAAS,kBAAkB;;;ACX3B,OAAO,UAAU;AAEV,SAAS,8BACd,MACA,WACA,WACA,QAAQ,kBACF;AACN,QAAM,WAAW,KAAK,SAAS,MAAM,SAAS;AAC9C,MAAI,aAAa,MAAO,CAAC,SAAS,WAAW,IAAI,KAAK,CAAC,KAAK,WAAW,QAAQ,GAAI;AACjF;AAAA,EACF;AACA,QAAM,IAAI,MAAM,WAAW,KAAK,KAAK,SAAS,EAAE;AAClD;AAEO,SAAS,0BACd,WACA,WACA,QAAQ,kBACA;AACR,QAAM,gBAAgB,KAAK,QAAQ,WAAW,YAAY;AAC1D,QAAM,YAAY,KAAK,QAAQ,eAAe,SAAS;AACvD,gCAA8B,eAAe,WAAW,WAAW,KAAK;AACxE,SAAO;AACT;;;ADyCA,eAAsB,oBACpB,SACmC;AACnC,QAAM,MAAM,QAAQ;AACpB,MAAI,CAAC,IAAI,0BAA0B;AACjC,QAAI,MAAM,mEAA8D;AACxE,WAAO;AAAA,EACT;AAMA,MAAI,QAAQ,WAAW,iBAAiB,IAAI,iCAAiC,OAAO;AAClF,QAAI;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,QAAM,YAAY,iBAAiB,QAAQ,WAAW,GAAG;AACzD,QAAM,YAAY,QAAQ,aAAa,IAAI;AAC3C,QAAM,YAAY,QAAQ,aAAa,IAAI,OAAO,aAAa;AAC/D,MAAI,CAAC,WAAW;AACd,QAAI,KAAK,2DAAsD;AAC/D,WAAO;AAAA,EACT;AAEA,MAAI;AACJ,MAAI,QAAQ,UAAU;AACpB,eAAW,QAAQ;AAAA,EACrB,OAAO;AACL,QAAI,CAAC,4BAA4B,SAAS,GAAG;AAC3C,aAAO,wBAAwB,WAAW;AAAA,QACxC,UAAU,CAAC;AAAA,QACX;AAAA,QACA,kBAAkB,IAAI;AAAA,QACtB,sBAAsB,IAAI;AAAA,QAC1B,kBAAkB,QAAQ;AAAA,QAC1B,KAAK,QAAQ;AAAA,MACf,CAAC;AAAA,IACH;AACA,UAAM,QAAQ,oBAAoB,WAAW,WAAW,GAAG;AAC3D,UAAM,UAAU,IAAI,eAAe,KAAK;AACxC,eAAW,MAAM,QAAQ,gBAAgB;AAAA,EAC3C;AACA,aAAW,sCAAsC,QAAQ;AAMzD,QAAM,kBAAkB,IAAI,YAAY;AACxC,QAAM,SACJ,IAAI,YAAY,YAAY,QAAQ,iBAAiB,YAAY,OAC7D,0BAA0B,UAAU;AAAA,IAClC,WAAW,gBAAgB;AAAA,IAC3B,eAAe,eAAe,IAAI,CAAC,UAAU,MAAM,IAAI;AAAA,EACzD,CAAC,IACD;AASN,QAAM,SAAS,wBAAwB,WAAW;AAAA,IAChD;AAAA,IACA;AAAA,IACA,kBAAkB,IAAI;AAAA,IACtB,sBAAsB,IAAI;AAAA,IAC1B,kBAAkB,QAAQ;AAAA,IAC1B;AAAA,IACA,KAAK,QAAQ;AAAA,EACf,CAAC;AACD,MAAI,QAAQ,QAAQ;AAClB,QAAI;AAAA,MACF,kCAAkC,QAAQ,MAAM,UAAU,OAAO,KAAK,UAAU,OAAO,aAAa,MAAM;AAAA,IAC5G;AAAA,EACF;AACA,SAAO;AACT;AAYA,eAAsB,gCACpB,WACA,SACmC;AACnC,MAAI,CAAC,QAAQ,OAAO,yBAA0B,QAAO;AACrD,MAAI,CAAC,QAAQ,OAAO,gCAAiC,QAAO;AAC5D,MAAI;AACF,WAAO,MAAM,oBAAoB;AAAA,MAC/B,QAAQ,QAAQ;AAAA,MAChB,WAAW,QAAQ;AAAA,MACnB,UAAU,QAAQ;AAAA,MAClB,WAAW,QAAQ;AAAA,MACnB,WAAW,QAAQ;AAAA,MACnB,kBAAkB,QAAQ;AAAA,MAC1B,KAAK,QAAQ;AAAA,MACb,QAAQ;AAAA,IACV,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI;AAAA,MACF,GAAG,SAAS,oDACV,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CACvD;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AAEA,SAAS,iBAAiB,UAA8B,KAA2B;AACjF,QAAM,aAAa,YAAY,IAAI,6BAA6B,QAAQ,KAAK;AAC7E,QAAM,oBAAoB,IAAI,oBAAoB,IAAI,KAAK;AAC3D,QAAM,YACJ,UAAU,WAAW,KAAK,cAAc,SACnC,iBAAiB,SAAS,IAAI,mBAAmB,YAClD;AACN,MAAI,CAAC,qBAAqB,SAAS,GAAG;AACpC,UAAM,IAAI,MAAM,kCAAkC,SAAS,EAAE;AAAA,EAC/D;AACA,SAAO;AACT;AAeA,SAAS,oBACP,WACA,WACA,KACQ;AACR,MAAI,CAAC,IAAI,kBAAmB,QAAO;AAEnC,QAAM,8BAA8B,IAAI,oBAAoB,IAAI,KAAK;AACrE,QAAM,mBACJ,2BAA2B,SAAS,IAAI,6BAA6B;AACvE,QAAM,MAAM,aAAa,kBAAkB,KAAK;AAChD,MAAI,CAAC,qBAAqB,EAAE,GAAG;AAC7B,UAAM,IAAI,MAAM,kCAAkC,EAAE,EAAE;AAAA,EACxD;AACA,QAAM,iBAAiB,0BAA0B,WAAW,IAAI,4BAA4B;AAE5F,MAAI,OAAO,kBAAkB;AAC3B,WAAO,WAAW,cAAc,IAAI,iBAAiB;AAAA,EACvD;AACA,SAAO;AACT;","names":[]}

package/dist/{chunk-2YI72KM3.js → chunk-UCKG36HO.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-JCWY73FK.js";
 import {
   StorageManager
-} from "./chunk-J275IYMG.js";
+} from "./chunk-THVI4Y7X.js";
 import {
   parseContinuityImprovementLoops
 } from "./chunk-LDXUBPMO.js";
@@ -1283,4 +1283,4 @@ export {
   defaultTierMigrationCycleBudget,
   CompoundingEngine
 };
-//# sourceMappingURL=chunk-2YI72KM3.js.map
+//# sourceMappingURL=chunk-UCKG36HO.js.map

package/dist/{chunk-SIHSCCUQ.js → chunk-UFR6HX7A.js}

@@ -296,4 +296,4 @@ async function searchHarmonicRetrieval(options) {
 export {
   searchHarmonicRetrieval
 };
-//# sourceMappingURL=chunk-SIHSCCUQ.js.map
+//# sourceMappingURL=chunk-UFR6HX7A.js.map

package/dist/{chunk-CDUUDBWJ.js → chunk-VFYRYFLL.js}

@@ -1,6 +1,6 @@
 import {
   getVerdictKind
-} from "./chunk-3DVBKTSO.js";
+} from "./chunk-HSZMX3ZJ.js";
 import {
   scoreImportance
 } from "./chunk-UOBPK2OS.js";
@@ -1320,4 +1320,4 @@ export {
   syncWearableSource,
   defaultTimezone
 };
-//# sourceMappingURL=chunk-CDUUDBWJ.js.map
+//# sourceMappingURL=chunk-VFYRYFLL.js.map

package/dist/{chunk-XRYZRW54.js → chunk-WDXD6ITO.js}

@@ -1,6 +1,6 @@
 import {
   listNamespaces
-} from "./chunk-2XDWWPTN.js";
+} from "./chunk-OZDFB22S.js";
 import {
   capabilityAllowsNamespace
 } from "./chunk-MZWSOLMT.js";
@@ -282,4 +282,4 @@ export {
   computeServiceCorpusWatermarks,
   computeServiceCorpusCensus
 };
-//# sourceMappingURL=chunk-XRYZRW54.js.map
+//# sourceMappingURL=chunk-WDXD6ITO.js.map

package/dist/{chunk-4KYOLI6M.js → chunk-XGM3VQWG.js}

@@ -12,16 +12,16 @@ import {
 } from "./chunk-3HSRWJTC.js";
 import {
   handleSupportPassportOwnerHttp
-} from "./chunk-S2DPMJXH.js";
+} from "./chunk-I23ZHYSL.js";
 import {
   buildSupportPassportPublicRequestHandler
-} from "./chunk-Z7PBQPJ4.js";
+} from "./chunk-QJW4MZSW.js";
 import {
   nonEmptyQueryParam,
   optionalNamespaceKindQueryParam,
   optionalQueryString,
   positiveIntQueryParam
-} from "./chunk-5YQ63T4B.js";
+} from "./chunk-BK5G2MHO.js";
 import {
   EngramMcpServer,
   MCP_SUPPORTED_PROTOCOL_VERSIONS,
@@ -31,19 +31,19 @@ import {
   processChatMessage,
   sessionBelongsToPrincipal,
   subscribeChatTranscript
-} from "./chunk-TF77C7SV.js";
+} from "./chunk-SR5LNI6Q.js";
 import {
   RelayMissionStoreError
-} from "./chunk-OCZIYAE5.js";
+} from "./chunk-IWKGOCL6.js";
 import {
   executeResolution,
   isValidResolutionVerb
-} from "./chunk-XCTXS7VY.js";
+} from "./chunk-I32NKXE2.js";
 import {
   isDefaultReviewNamespace,
   listPairs,
   readPair
-} from "./chunk-35NN3ZFA.js";
+} from "./chunk-CTVWELNK.js";
 import {
   validateRequest
 } from "./chunk-W675UJCZ.js";
@@ -61,15 +61,15 @@ import {
   authorizationProbeNamespaces,
   authorizationProbeRequiresPrincipalNamespace,
   probeOperationAuthorization
-} from "./chunk-UIN2BWDD.js";
+} from "./chunk-PTZQYCJ4.js";
 import {
   CorrectionContractError,
   getOperation,
   resolveQueryNamespaceWritablePreflight
-} from "./chunk-SB7D4BT7.js";
+} from "./chunk-AZLLH6YA.js";
 import {
   handleWhoKnowsHttpQuery
-} from "./chunk-SPUJNJJC.js";
+} from "./chunk-KFIOPZ25.js";
 import {
   isTrustZoneName
 } from "./chunk-5QZR2RA3.js";
@@ -78,7 +78,7 @@ import {
 } from "./chunk-DEUNUKTD.js";
 import {
   isRecallDisclosure
-} from "./chunk-SBDCZ2AX.js";
+} from "./chunk-LBFFNDFM.js";
 import {
   OFFLINE_SYNC_APPLY_MAX_BODY_BYTES,
   OFFLINE_SYNC_FILE_CONTENT_MAX_CHUNK_BYTES,
@@ -464,6 +464,111 @@ var SupportPassportAccessHttpBase = class {
   }
 };
 
+// src/review/review-deck-http-base.ts
+var LIST_PATHS = ["/remnic/v1/review/deck", "/engram/v1/review/deck"];
+var ACTION_PATHS = ["/remnic/v1/review/deck/action", "/engram/v1/review/deck/action"];
+var UNDO_PATHS = ["/remnic/v1/review/deck/undo", "/engram/v1/review/deck/undo"];
+var LIMIT_MIN = 1;
+var LIMIT_MAX = 100;
+var CURSOR_RE = /^[^\s%]{1,2048}$/;
+function requiredString(body, field) {
+  const value = body[field];
+  if (typeof value !== "string" || value.trim().length === 0) {
+    throw new EngramAccessInputError(`${field} is required`);
+  }
+  return value.trim();
+}
+function parseLimit(raw) {
+  if (raw === null || raw.length === 0) {
+    throw new EngramAccessInputError("limit is required and must be an integer");
+  }
+  if (!/^(?:0|[1-9]\d*)$/.test(raw)) {
+    throw new EngramAccessInputError("limit must be an integer");
+  }
+  const value = Number(raw);
+  if (!Number.isInteger(value) || value < LIMIT_MIN || value > LIMIT_MAX) {
+    throw new EngramAccessInputError(`limit must be an integer from ${LIMIT_MIN} to ${LIMIT_MAX}`);
+  }
+  return value;
+}
+function parseCursor(raw) {
+  if (raw === null) return void 0;
+  if (!CURSOR_RE.test(raw)) {
+    throw new EngramAccessInputError("cursor is malformed");
+  }
+  return raw;
+}
+function parseActionBody(body) {
+  const action = body.action;
+  if (action !== "keep" && action !== "not_true" && action !== "prepare_fix") {
+    throw new EngramAccessInputError("action must be one of: keep, not_true, prepare_fix");
+  }
+  const itemId = requiredString(body, "itemId");
+  const revision = requiredString(body, "revision");
+  const idempotencyKey = requiredString(body, "idempotencyKey");
+  if (action === "prepare_fix") {
+    const correctionText = requiredString(body, "correctionText");
+    return { schemaVersion: 1, itemId, revision, action, correctionText, idempotencyKey };
+  }
+  return { schemaVersion: 1, itemId, revision, action, idempotencyKey };
+}
+function parseUndoBody(body) {
+  return {
+    schemaVersion: 1,
+    receiptId: requiredString(body, "receiptId"),
+    expectedRevision: requiredString(body, "expectedRevision"),
+    idempotencyKey: requiredString(body, "idempotencyKey")
+  };
+}
+var ReviewDeckAccessHttpBase = class extends SupportPassportAccessHttpBase {
+  async handleReviewDeckRequest(req, res, pathname, abortSignal) {
+    const method = req.method;
+    const isList = method === "GET" && (pathname === LIST_PATHS[0] || pathname === LIST_PATHS[1]);
+    const isAction = method === "POST" && (pathname === ACTION_PATHS[0] || pathname === ACTION_PATHS[1]);
+    const isUndo = method === "POST" && (pathname === UNDO_PATHS[0] || pathname === UNDO_PATHS[1]);
+    if (!isList && !isAction && !isUndo) return false;
+    if (!this.service.reviewDeckEnabled) {
+      this.respondJson(res, 404, { error: "not_found", code: "not_found" });
+      return true;
+    }
+    const parsed = new URL(req.url ?? "/", "http://127.0.0.1");
+    const namespace = this.resolveNamespace(req, parsed.searchParams.get("namespace") ?? void 0);
+    const principal = this.resolveRequestPrincipal(req);
+    if (isList) {
+      this.enforceTokenOp("review_deck_list");
+      const page = await this.service.reviewDeckList({
+        namespace,
+        principal,
+        cursor: parseCursor(parsed.searchParams.get("cursor")),
+        limit: parseLimit(parsed.searchParams.get("limit"))
+      });
+      this.respondJson(res, 200, page);
+      return true;
+    }
+    if (isAction) this.enforceTokenOp("review_deck_action");
+    else this.enforceTokenOp("review_deck_undo");
+    const writeQuota = this.reserveWriteRateLimitSlot(req);
+    try {
+      const body = await this.readJsonBody(req, this.maxBodyBytes);
+      const result = isAction ? await this.service.reviewDeckAction(parseActionBody(body), {
+        namespace,
+        principal,
+        signal: abortSignal
+      }) : await this.service.reviewDeckUndo(parseUndoBody(body), {
+        namespace,
+        principal,
+        signal: abortSignal
+      });
+      writeQuota.commit();
+      this.respondJson(res, 200, result);
+    } catch (error) {
+      writeQuota.release();
+      throw error;
+    }
+    return true;
+  }
+};
+
 // src/access-http.ts
 function resolveDefaultAdminConsolePublicDir(sourceUrl = import.meta.url) {
   const thisDir = path2.dirname(fileURLToPath(sourceUrl));
@@ -602,7 +707,7 @@ function codingContextFromProjectTag(projectTag) {
     defaultBranch: null
   };
 }
-var EngramAccessHttpServer = class extends SupportPassportAccessHttpBase {
+var EngramAccessHttpServer = class extends ReviewDeckAccessHttpBase {
   service;
   host;
   requestedPort;
@@ -1010,6 +1115,7 @@ var EngramAccessHttpServer = class extends SupportPassportAccessHttpBase {
     }
     if (req.method === "POST" && pathname === "/mcp") return this.handleMcpRequest(req, res, abortSignal);
     if (await this.handleSupportPassportOwnerRequest(req, res, pathname, parsed.search.length > 0, abortSignal)) return;
+    if (await this.handleReviewDeckRequest(req, res, pathname, abortSignal)) return;
     if (req.method === "GET" && pathname === "/engram/v1/live") return this.respondJson(res, 200, { ok: true, ready: true });
     if (req.method === "GET" && pathname === "/engram/v1/health") {
       const { degraded, warmupAttempts, lastError } = this.readiness();
@@ -2364,7 +2470,7 @@ var EngramAccessHttpServer = class extends SupportPassportAccessHttpBase {
     if (req.method === "POST" && pathname === "/engram/v1/contradiction-scan") {
       this.enforceTokenOp("contradiction_scan_run");
       const body = await this.readJsonBody(req);
-      const { runContradictionScan } = await import("./contradiction-scan-VOTQRRSX.js");
+      const { runContradictionScan } = await import("./contradiction-scan-AKUWPX5N.js");
       const principal = this.resolveRequestPrincipal(req);
       const result = await runContradictionScan({
         storage: this.service.storageRef,
@@ -3388,4 +3494,4 @@ export {
   resolveDefaultAdminConsolePublicDir,
   EngramAccessHttpServer
 };
-//# sourceMappingURL=chunk-4KYOLI6M.js.map
+//# sourceMappingURL=chunk-XGM3VQWG.js.map