@remnic/core 9.65.7 → 9.66.0

package/dist/{chunk-I7EX6KSH.js → chunk-6QDXA26G.js}

@@ -1,6 +1,3 @@
-import {
-  openclawReplayNormalizer
-} from "./chunk-H4CKS5B2.js";
 import {
   chatgptReplayNormalizer
 } from "./chunk-MMACM5G2.js";
@@ -8,29 +5,42 @@ import {
   claudeReplayNormalizer
 } from "./chunk-54BGIBCR.js";
 import {
-  exportSqlite
-} from "./chunk-BV2TIZ4F.js";
+  openclawReplayNormalizer
+} from "./chunk-H4CKS5B2.js";
 import {
   importMarkdownBundle
 } from "./chunk-HDDRVXX4.js";
 import {
   importSqlite
 } from "./chunk-PYHOAXTI.js";
+import {
+  backupMemoryDir
+} from "./chunk-2NLLXCJG.js";
+import {
+  exportJsonBundle
+} from "./chunk-UP6MOYCB.js";
+import {
+  exportOkfBundle,
+  parseIncludeStatus
+} from "./chunk-GSKINLAK.js";
+import {
+  exportSqlite
+} from "./chunk-BV2TIZ4F.js";
 import {
   detectImportFormat
 } from "./chunk-OZKVVUJB.js";
 import {
   importJsonBundle
 } from "./chunk-2DL3OFLD.js";
-import {
-  backupMemoryDir
-} from "./chunk-2NLLXCJG.js";
 import {
   exportMarkdownBundle
 } from "./chunk-765K3SAT.js";
 import {
-  exportJsonBundle
-} from "./chunk-UP6MOYCB.js";
+  RoutingRulesStore
+} from "./chunk-TBUEE7XF.js";
+import {
+  WebDavServer
+} from "./chunk-PYIFUBRK.js";
 import {
   buildReplayNormalizerRegistry,
   clampBatchSize,
@@ -41,35 +51,32 @@ import {
   normalizeReplaySessionKey
 } from "./chunk-AJVLDJU6.js";
 import {
-  RoutingRulesStore
-} from "./chunk-TBUEE7XF.js";
+  rebuildObservations
+} from "./chunk-DQTCGVFK.js";
 import {
   TailscaleHelper
 } from "./chunk-EEC4PCG5.js";
-import {
-  WebDavServer
-} from "./chunk-PYIFUBRK.js";
 import {
   migrateObservations
 } from "./chunk-IIFFC3RL.js";
 import {
   rebuildMemoryLifecycleLedger
-} from "./chunk-7WR462EM.js";
-import {
-  rebuildObservations
-} from "./chunk-DQTCGVFK.js";
+} from "./chunk-J3OND5QT.js";
 import {
   archiveObservations
 } from "./chunk-YLBE6PLR.js";
+import {
+  lintOkfDir
+} from "./chunk-K66OY4EI.js";
+import {
+  runCompatChecks
+} from "./chunk-CDKHKZL5.js";
 import {
   getBulkImportSource,
   listBulkImportSources,
   registerBulkImportSource,
   runBulkImportPipeline
 } from "./chunk-HSSERO3E.js";
-import {
-  runCompatChecks
-} from "./chunk-CDKHKZL5.js";
 import {
   getUtilityLearningStatus,
   learnUtilityPromotionWeights
@@ -80,21 +87,21 @@ import {
 } from "./chunk-6FC3IZ26.js";
 import {
   searchVerifiedEpisodes
-} from "./chunk-YWSQD2IB.js";
+} from "./chunk-ZJPM7GZ3.js";
 import {
   ThreadingManager
 } from "./chunk-OJP3N7UK.js";
 import {
   promoteSemanticRuleFromMemory
-} from "./chunk-5DH6PG4B.js";
+} from "./chunk-RZ3IZIJG.js";
 import {
   searchVerifiedSemanticRules
-} from "./chunk-SEA6M7SS.js";
+} from "./chunk-I5VB44ZK.js";
 import {
   buildResumeBundleFromState,
   getResumeBundleStatus,
   recordResumeBundle
-} from "./chunk-IY7UXD3J.js";
+} from "./chunk-O57GM3FR.js";
 import {
   getWorkProductLedgerStatus,
   recordWorkProductLedgerEntry,
@@ -105,7 +112,11 @@ import {
 } from "./chunk-AM4T6CHX.js";
 import {
   parseXrayCliOptions
-} from "./chunk-R2MZCYA6.js";
+} from "./chunk-UNUMFURP.js";
+import {
+  readRuntimePolicySnapshot,
+  sanitizeRuntimePolicyValues
+} from "./chunk-2LA3H54D.js";
 import {
   formatNamespaceMaintenanceHealthText,
   runBenchmarkRecall,
@@ -114,7 +125,7 @@ import {
   runOperatorInventory,
   runOperatorRepair,
   runOperatorSetup
-} from "./chunk-6CPUQ5D6.js";
+} from "./chunk-2LBAFHOQ.js";
 import {
   analyzeSessionIntegrity,
   applySessionRepair,
@@ -129,10 +140,6 @@ import {
   renderPatternExplain,
   renderPatternsList
 } from "./chunk-3T74IZB3.js";
-import {
-  readRuntimePolicySnapshot,
-  sanitizeRuntimePolicyValues
-} from "./chunk-2LA3H54D.js";
 import {
   GITHUB_CONNECTOR_ID,
   GMAIL_CONNECTOR_ID,
@@ -155,7 +162,7 @@ import {
 } from "./chunk-UOBPK2OS.js";
 import {
   searchHarmonicRetrieval
-} from "./chunk-YRVAKONL.js";
+} from "./chunk-VQ4AMTGZ.js";
 import {
   createEvalBaselineSnapshot,
   getEvalHarnessStatus,
@@ -170,12 +177,18 @@ import {
 } from "./chunk-ACPCA4NO.js";
 import {
   GraphDashboardServer
-} from "./chunk-EZ25VE3G.js";
+} from "./chunk-YNDLCWXS.js";
 import {
   rebuildMemoryProjection,
   repairMemoryProjection,
   verifyMemoryProjection
-} from "./chunk-WTOZBZNN.js";
+} from "./chunk-DMEHOEC7.js";
+import {
+  applyCommitmentLedgerLifecycle,
+  getCommitmentLedgerStatus,
+  recordCommitmentLedgerEntry,
+  transitionCommitmentLedgerEntryState
+} from "./chunk-NOB2T2FC.js";
 import {
   buildConnectorRowsFromDefinitions,
   parseConnectorsListOptions,
@@ -185,22 +198,16 @@ import {
   renderConnectorsRunResult,
   runConnectorPollOnce
 } from "./chunk-OKTXM5H4.js";
-import {
-  applyCommitmentLedgerLifecycle,
-  getCommitmentLedgerStatus,
-  recordCommitmentLedgerEntry,
-  transitionCommitmentLedgerEntryState
-} from "./chunk-NOB2T2FC.js";
 import {
   chunkContent
 } from "./chunk-6TBIWIAG.js";
 import {
   parseConfig
-} from "./chunk-D4QVPP3G.js";
+} from "./chunk-PEBH5DCK.js";
 import {
   EngramAccessHttpServer,
   MeetingsInputError
-} from "./chunk-FMQ4MOQO.js";
+} from "./chunk-KXIXO76C.js";
 import {
   WearablesInputError
 } from "./chunk-V7IZKJI3.js";
@@ -210,13 +217,13 @@ import {
   loadChatSession,
   processChatMessage,
   sessionBelongsToPrincipal
-} from "./chunk-I4343FIA.js";
+} from "./chunk-MAH64N55.js";
 import {
   getAbstractionNodeStoreStatus
 } from "./chunk-DJUKBGAD.js";
 import {
   EngramAccessService
-} from "./chunk-RQE4TITU.js";
+} from "./chunk-IHGMRDEE.js";
 import {
   WorkStorage
 } from "./chunk-GDB4J2H3.js";
@@ -233,51 +240,54 @@ import {
   parseRecallExplainFormat,
   renderRecallExplain,
   renderXray
-} from "./chunk-YOXVZJFM.js";
+} from "./chunk-CFVTRUR3.js";
 import {
   readAggregateExtractionWatermark
-} from "./chunk-5S4LQOPE.js";
+} from "./chunk-ZW4VXELZ.js";
 import {
   getObjectiveStateStoreStatus
 } from "./chunk-HTP6XRUI.js";
+import {
+  listNamespaces,
+  runNamespaceMigration,
+  verifyNamespaces
+} from "./chunk-4STAANV7.js";
 import {
   listMemoryGovernanceRuns,
   readMemoryGovernanceRunArtifact,
   restoreMemoryGovernanceRun,
   runMemoryGovernance
-} from "./chunk-SVVIASVX.js";
+} from "./chunk-EFQCDJZ2.js";
 import {
-  listNamespaces,
-  runNamespaceMigration,
-  verifyNamespaces
-} from "./chunk-5VPQSRQO.js";
+  resolveNamespaceChildRoot
+} from "./chunk-6RUHELWR.js";
 import {
   analyzeGraphHealth
 } from "./chunk-YMOPYG3K.js";
-import {
-  resolveNamespaceChildRoot
-} from "./chunk-GEPACVWN.js";
 import {
   OKF_RESERVED_BASENAMES,
   meetingIdDate,
   okfTypeForCategory
-} from "./chunk-BJTHRFFC.js";
+} from "./chunk-GEJKYA7D.js";
 import {
   isValidTranscriptDate
 } from "./chunk-UHVXE24Y.js";
 import {
   RECALL_DISCLOSURE_LEVELS,
   isRecallDisclosure
-} from "./chunk-LBFFNDFM.js";
+} from "./chunk-MINHJ55X.js";
 import {
-  composeMemoryEnvelope
-} from "./chunk-RAIUTAZZ.js";
+  normalizeProjectionPreview
+} from "./chunk-SCU65EZI.js";
 import {
   bumpMemoryCorpusVersionForDir
 } from "./chunk-XCB6QDL6.js";
 import {
   renderQmdBacklogStatus
 } from "./chunk-IUM3VSHI.js";
+import {
+  composeMemoryEnvelope
+} from "./chunk-WKAXBXVA.js";
 import {
   hostSecretRefResolver,
   loadHostSecretRefResolver,
@@ -313,20 +323,23 @@ import {
   renderActionConfidenceText
 } from "./chunk-Z2YFLXHU.js";
 import {
-  STATE_FILE_MAX_DECRYPT_BYTES
-} from "./chunk-DVYRD4HY.js";
+  writeFileAtomically
+} from "./chunk-AW4QUFQF.js";
 import {
-  assertPathInsideRoot,
-  pathIsInside
-} from "./chunk-GCASGYIO.js";
+  STATE_FILE_MAX_DECRYPT_BYTES
+} from "./chunk-JRRQ747T.js";
 import {
   inferMemoryStatus,
   isArchivedMemoryPath,
   toMemoryPathRel
 } from "./chunk-7RJUVTVF.js";
+import {
+  assertPathInsideRoot,
+  pathIsInside
+} from "./chunk-GCASGYIO.js";
 import {
   isSupportPassportPrivateMemory
-} from "./chunk-XDL5CYZN.js";
+} from "./chunk-EEOUMG3J.js";
 import {
   selectRouteRule,
   validateRouteTarget
@@ -355,10 +368,9 @@ import {
   resolveHomeDir
 } from "./chunk-JUC24CTX.js";
 import {
-  MAGIC_BYTES,
   SECURE_STORE_ENVELOPE_OVERHEAD_BYTES,
   probeEncryptedRegularFileHeader
-} from "./chunk-XQ3HXAQH.js";
+} from "./chunk-ET2CNMLD.js";
 import {
   RECALL_FALLBACK_DIRS
 } from "./chunk-VS2IYZRU.js";
@@ -367,7 +379,7 @@ import {
 } from "./chunk-3WCASNQZ.js";
 
 // src/cli.ts
-import path6 from "path";
+import path7 from "path";
 import { access, lstat as lstat3, readFile as readFile2, readdir as readdir3, realpath as realpath3, unlink } from "fs/promises";
 import { createHash } from "crypto";
 
@@ -1165,99 +1177,12 @@ function registerMeetingsCommands(cmd, orchestrator) {
   });
 }
 
-// src/okf/lint.ts
-import fs from "fs";
-import path from "path";
-function isEncryptedBlob(raw) {
-  return raw.startsWith(MAGIC_BYTES.toString("ascii"));
-}
-function hasFrontmatter(raw) {
-  return raw.startsWith("---\n") || raw.startsWith("---\r\n");
-}
-function readType(raw) {
-  const close = raw.indexOf("\n---", 4);
-  if (close === -1) return void 0;
-  const block = raw.slice(4, close);
-  const match = /^type:[ \t]*(.*)$/m.exec(block);
-  if (!match) return void 0;
-  const value = match[1].trim().replace(/^["']|["']$/g, "");
-  return value;
-}
-function walkMarkdown(root, out) {
-  let entries;
-  try {
-    entries = fs.readdirSync(root, { withFileTypes: true });
-  } catch {
-    return;
-  }
-  for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {
-    if (entry.name === "state" || entry.name === ".git") continue;
-    const full = path.join(root, entry.name);
-    let stat;
-    try {
-      stat = fs.lstatSync(full);
-    } catch {
-      continue;
-    }
-    if (stat.isSymbolicLink()) continue;
-    if (stat.isDirectory()) {
-      walkMarkdown(full, out);
-      continue;
-    }
-    if (stat.isFile() && entry.name.endsWith(".md")) out.push(full);
-  }
-}
-function lintOkfDir(memoryDir) {
-  const files = [];
-  walkMarkdown(memoryDir, files);
-  const findings = [];
-  for (const file of files) {
-    const rel = path.relative(memoryDir, file);
-    const base = path.basename(file);
-    if (OKF_RESERVED_BASENAMES[base] === true) {
-      findings.push({
-        file: rel,
-        code: "reserved_basename",
-        message: `${base} is reserved by OKF \xA76/\xA77`
-      });
-      continue;
-    }
-    let raw;
-    try {
-      raw = fs.readFileSync(file, "utf8");
-    } catch {
-      continue;
-    }
-    if (isEncryptedBlob(raw)) {
-      findings.push({
-        file: rel,
-        code: "skipped_encrypted",
-        message: "skipped (encrypted)"
-      });
-      continue;
-    }
-    if (!hasFrontmatter(raw)) {
-      findings.push({
-        file: rel,
-        code: "missing_frontmatter",
-        message: "missing YAML frontmatter"
-      });
-      continue;
-    }
-    const type = readType(raw);
-    if (type === void 0) {
-      findings.push({ file: rel, code: "missing_type", message: "missing type" });
-    } else if (type.length === 0) {
-      findings.push({ file: rel, code: "empty_type", message: "empty type" });
-    }
-  }
-  const actionable = findings.filter((f) => f.code !== "skipped_encrypted");
-  return { ok: actionable.length === 0, scanned: files.length, findings };
-}
+// src/cli/okf-commands.ts
+import path3 from "path";
 
 // src/okf/sweep.ts
-import fs2 from "fs";
-import path2 from "path";
+import fs from "fs";
+import path from "path";
 function insertType(raw, type) {
   const crlf = raw.startsWith("---\r\n");
   if (!crlf && !raw.startsWith("---\n")) return null;
@@ -1295,37 +1220,137 @@ function runOkfConformanceSweep(memoryDir, options) {
   let written = 0;
   for (const finding of lint.findings) {
     if (finding.code !== "missing_type" && finding.code !== "empty_type") continue;
-    const file = path2.join(memoryDir, finding.file);
-    const raw = fs2.readFileSync(file, "utf8");
+    const file = path.join(memoryDir, finding.file);
+    const raw = fs.readFileSync(file, "utf8");
     const next = insertType(raw, "");
     if (next === null || next === raw) continue;
-    fs2.writeFileSync(file, next);
+    fs.writeFileSync(file, next);
     written += 1;
   }
   return { scanned: lint.scanned, written };
 }
 
+// src/okf/index-files.ts
+import { readdirSync, readFileSync, statSync, unlinkSync } from "fs";
+import path2 from "path";
+var OKF_INDEX_MARKER = "<!-- remnic-okf-index -->";
+var INDEXED_ROOTS = ["entities", "facts", "corrections", "summaries"];
+async function runOkfIndexMaintenance(memoryDir, enabled) {
+  const written = [];
+  const removed = [];
+  const dirs = collectIndexDirs(memoryDir);
+  for (const dir of dirs) {
+    const indexPath = path2.join(dir, "index.md");
+    if (!enabled) {
+      if (isGeneratedIndex(indexPath)) {
+        unlinkSync(indexPath);
+        removed.push(indexPath);
+      }
+      continue;
+    }
+    const next = renderIndex(dir);
+    if (next === null) continue;
+    if (isUnchangedGenerated(indexPath, next)) continue;
+    await writeFileAtomically(indexPath, next);
+    written.push(indexPath);
+  }
+  return { written, removed };
+}
+function collectIndexDirs(memoryDir) {
+  const dirs = [memoryDir];
+  for (const root of INDEXED_ROOTS) {
+    const full = path2.join(memoryDir, root);
+    if (!isDir(full)) continue;
+    dirs.push(full);
+    if (root === "facts") {
+      for (const entry of safeList(full)) {
+        const child = path2.join(full, entry);
+        if (isDir(child) && /^\d{4}-\d{2}-\d{2}$/.test(entry)) dirs.push(child);
+      }
+    }
+  }
+  return dirs;
+}
+function renderIndex(dir) {
+  const entries = safeList(dir).filter((name) => name.endsWith(".md") && OKF_RESERVED_BASENAMES[name] !== true).sort((a, b) => a.localeCompare(b));
+  if (entries.length === 0) return null;
+  const lines = [OKF_INDEX_MARKER, "", `# ${path2.basename(dir)}`, ""];
+  for (const name of entries) {
+    const preview = previewFile(path2.join(dir, name));
+    lines.push(`* [${titleFrom(name, preview)}](${name}) - ${preview}`);
+  }
+  lines.push("");
+  return lines.join("\n");
+}
+function previewFile(filePath) {
+  try {
+    return normalizeProjectionPreview(readFileSync(filePath, "utf8"), 120);
+  } catch {
+    return "";
+  }
+}
+function titleFrom(name, preview) {
+  return preview.split(" ").slice(0, 8).join(" ") || name.replace(/\.md$/, "");
+}
+function isGeneratedIndex(filePath) {
+  try {
+    return readFileSync(filePath, "utf8").includes(OKF_INDEX_MARKER);
+  } catch {
+    return false;
+  }
+}
+function isUnchangedGenerated(filePath, next) {
+  try {
+    return readFileSync(filePath, "utf8") === next;
+  } catch {
+    return false;
+  }
+}
+function isDir(dir) {
+  try {
+    return statSync(dir).isDirectory();
+  } catch {
+    return false;
+  }
+}
+function safeList(dir) {
+  try {
+    return readdirSync(dir);
+  } catch {
+    return [];
+  }
+}
+
 // src/okf/cli.ts
 async function runOkfCliCommand(argv, io, ctx) {
   const [subcommand, ...rest] = argv;
   if (subcommand === "help" || subcommand === "--help" || subcommand === "-h") {
-    io.stdout.write(`usage: remnic okf <lint|sweep> [--json]
+    io.stdout.write(`usage: remnic okf <lint|sweep|index> [--json]
   lint   report OKF conformance findings (exit 1 when findings remain)
   sweep  backfill missing type values (requires okf.sweepEnabled)
+  index  generate or remove index.md files (okf.indexFilesEnabled)
 `);
     return 0;
   }
-  if (subcommand !== "lint" && subcommand !== "sweep") {
-    io.stderr.write("okf: expected lint or sweep\n");
+  if (subcommand !== "lint" && subcommand !== "sweep" && subcommand !== "index") {
+    io.stderr.write("okf: expected lint, sweep, or index\n");
     return 1;
   }
   for (const token of rest) {
     if (token === "--json") continue;
-    io.stderr.write(`okf: unexpected argument '${token}' \u2014 usage: remnic okf <lint|sweep> [--json]
+    io.stderr.write(`okf: unexpected argument '${token}' \u2014 usage: remnic okf <lint|sweep|index> [--json]
 `);
     return 1;
   }
   const json = rest.includes("--json");
+  if (subcommand === "index") {
+    const result2 = await runOkfIndexMaintenance(ctx.memoryDir, ctx.indexFilesEnabled);
+    if (json) io.stdout.write(`${JSON.stringify(result2)}
+`);
+    else io.stdout.write(`okf index: wrote ${result2.written.length}, removed ${result2.removed.length}
+`);
+    return 0;
+  }
   if (subcommand === "sweep") {
     const result2 = runOkfConformanceSweep(ctx.memoryDir, ctx);
     if (json) io.stdout.write(`${JSON.stringify(result2)}
@@ -1355,7 +1380,8 @@ function registerOkfCommands(cmd, orchestrator) {
     const code = await runOkfCliCommand(argv, { stdout: process.stdout, stderr: process.stderr }, {
       memoryDir: orchestrator.config.memoryDir,
       conformanceEnabled: orchestrator.config.okf.conformanceEnabled,
-      sweepEnabled: orchestrator.config.okf.sweepEnabled
+      sweepEnabled: orchestrator.config.okf.sweepEnabled,
+      indexFilesEnabled: orchestrator.config.okf.indexFilesEnabled
     });
     if (code !== 0) process.exitCode = code;
   };
@@ -1368,16 +1394,43 @@ function registerOkfCommands(cmd, orchestrator) {
     await forward(["sweep", ...options.json === true ? ["--json"] : []]);
   });
 }
+function registerExportOkfCommand(exportCmd, orchestrator) {
+  exportCmd.command("okf").description("Export a portable OKF v0.1 knowledge bundle").requiredOption("--out <path>", "Output directory").option("--namespace <ns>", "Namespace to export").option("--include-status <status>", "Repeatable status allow-list (default: active)").option("--include-categories <categories>", "Comma-separated category allow-list").option("--exclude-tags <tags>", "Comma-separated tags to drop").option("--include-profile", "Include profile.md (default off)").option("--include-wearables", "Include wearable day transcripts (default off)").option("--log", "Write log.md from the lifecycle ledger").option("--force", "Replace a non-empty output directory").action(async (...args) => {
+    const options = args[0] ?? {};
+    const out = options.out ? String(options.out) : "";
+    if (!out) throw new Error("Missing --out");
+    const includeStatus = parseIncludeStatus(options.includeStatus);
+    const namespace = options.namespace ? String(options.namespace) : "";
+    const memoryDir = namespace ? path3.join(orchestrator.config.memoryDir, "namespaces", namespace) : orchestrator.config.memoryDir;
+    const result = await exportOkfBundle({
+      memoryDir,
+      outDir: out,
+      includeStatus,
+      includeCategories: options.includeCategories ? String(options.includeCategories).split(",") : void 0,
+      excludeTags: options.excludeTags ? String(options.excludeTags).split(",") : void 0,
+      includeProfile: options.includeProfile === true,
+      includeWearables: options.includeWearables === true,
+      includeLog: options.log === true,
+      force: options.force === true
+    });
+    if (result.plaintextWarning) {
+      console.log("PLAINTEXT EXPORT: the OKF bundle is unencrypted.");
+    }
+    console.log(
+      `OKF export: ${result.exported} concepts, ${result.excluded} excluded`
+    );
+  });
+}
 
 // src/procedural/skill-io.ts
 import { lstat, mkdir, readdir, readFile, realpath, writeFile } from "fs/promises";
-import path3 from "path";
+import path4 from "path";
 async function exportSkillBundles(options) {
-  const outDir = path3.resolve(options.outDir);
+  const outDir = path4.resolve(options.outDir);
   await mkdir(outDir, { recursive: true });
   const slugs = [];
   for (const bundle of options.bundles) {
-    const dir = path3.join(outDir, bundle.slug);
+    const dir = path4.join(outDir, bundle.slug);
     if (!pathIsInside(outDir, dir)) {
       throw new Error(`skill export: refusing to write outside ${outDir} (slug ${bundle.slug})`);
     }
@@ -1390,7 +1443,7 @@ async function exportSkillBundles(options) {
       if (err.code !== "ENOENT") throw err;
     }
     await mkdir(dir, { recursive: true });
-    const skillPath = path3.join(dir, SKILL_FILE_NAME);
+    const skillPath = path4.join(dir, SKILL_FILE_NAME);
     try {
       const existingSkill = await lstat(skillPath);
       if (existingSkill.isSymbolicLink()) {
@@ -1405,7 +1458,7 @@ async function exportSkillBundles(options) {
   return { outDir, slugs };
 }
 async function readSkillBundlesFromDir(dir) {
-  const root = path3.resolve(dir);
+  const root = path4.resolve(dir);
   const rootStat = await lstat(root);
   if (rootStat.isSymbolicLink()) {
     throw new Error(`skill import: refusing to walk symlinked directory ${root}`);
@@ -1425,13 +1478,13 @@ async function readSkillBundlesFromDir(dir) {
         continue;
       }
       if (!entry.isDirectory()) continue;
-      const bundleDir = path3.join(root, entry.name);
+      const bundleDir = path4.join(root, entry.name);
       const bundleReal = await realpath(bundleDir);
       if (!pathIsInside(rootReal, bundleReal)) {
         skipped.push({ entry: entry.name, reason: "resolves outside the import root" });
         continue;
       }
-      const skillPath = path3.join(bundleDir, SKILL_FILE_NAME);
+      const skillPath = path4.join(bundleDir, SKILL_FILE_NAME);
       let skillStat;
       try {
         skillStat = await lstat(skillPath);
@@ -1968,10 +2021,10 @@ function registerCreationLedgerCommands(cmd, orchestrator) {
 }
 
 // src/maintenance/rebuild-memory-lifecycle-ledger-cli.ts
-import path4 from "path";
+import path5 from "path";
 async function runRebuildMemoryLifecycleLedgerCliCommand(options) {
   const storage = options.storage;
-  const ledgerPath = path4.join(options.memoryDir, "state", "memory-lifecycle-ledger.jsonl");
+  const ledgerPath = path5.join(options.memoryDir, "state", "memory-lifecycle-ledger.jsonl");
   const encrypted = await probeEncryptedRegularFileHeader(ledgerPath);
   if (encrypted && !(storage?.isSecureStoreUnlocked() ?? false)) {
     throw new Error(
@@ -2469,7 +2522,7 @@ assistant> ${result.reply}
 // src/training-export/converter.ts
 import { constants } from "fs";
 import { lstat as lstat2, open, readdir as readdir2, realpath as realpath2 } from "fs/promises";
-import path5 from "path";
+import path6 from "path";
 function parseFrontmatter(raw) {
   const match = raw.match(/^---\n([\s\S]*?)\n---\n?([\s\S]*)$/);
   if (!match) return null;
@@ -2509,7 +2562,7 @@ async function safeRealpath(p) {
   }
 }
 function isContainedPath(real, containmentRoot) {
-  return real === containmentRoot || real.startsWith(containmentRoot + path5.sep);
+  return real === containmentRoot || real.startsWith(containmentRoot + path6.sep);
 }
 async function collectMarkdownFiles(dir, containmentRoot) {
   const files = [];
@@ -2529,7 +2582,7 @@ async function collectMarkdownFiles(dir, containmentRoot) {
     }
     const sorted = [...entries].sort((a, b) => a.name.localeCompare(b.name));
     for (const entry of sorted) {
-      const full = path5.join(d, entry.name);
+      const full = path6.join(d, entry.name);
       if (entry.isSymbolicLink()) continue;
       if (entry.isDirectory()) {
         await walk(full);
@@ -2611,9 +2664,9 @@ async function convertMemoriesToRecords(options) {
   const { memoryDir } = options;
   const containmentRoot = await safeRealpath(memoryDir);
   if (!containmentRoot) return [];
-  const dirs = RECALL_FALLBACK_DIRS.map((dir) => path5.join(memoryDir, dir));
+  const dirs = RECALL_FALLBACK_DIRS.map((dir) => path6.join(memoryDir, dir));
   if (options.includeEntities) {
-    dirs.push(path5.join(memoryDir, "entities"));
+    dirs.push(path6.join(memoryDir, "entities"));
   }
   const allFiles = [];
   for (const dir of dirs) {
@@ -2876,14 +2929,14 @@ async function runTrainingExportCliCommand(opts) {
       `Unknown training-export format "${opts.format}". ${validList}`
     );
   }
-  const { statSync, existsSync } = await import("fs");
+  const { statSync: statSync2, existsSync } = await import("fs");
   if (!existsSync(expandedMemoryDir)) {
     throw new Error(
       `--memory-dir "${opts.memoryDir}" does not exist. Provide the path to an existing memory directory.`
     );
   }
   try {
-    if (!statSync(expandedMemoryDir).isDirectory()) {
+    if (!statSync2(expandedMemoryDir).isDirectory()) {
       throw new Error(
         `--memory-dir "${opts.memoryDir}" is not a directory. Provide the path to a memory directory, not a file.`
       );
@@ -3621,7 +3674,7 @@ function policyVersionForValues(values, config) {
   return createHash("sha256").update(JSON.stringify(normalized)).digest("hex").slice(0, 12);
 }
 async function readRuntimePolicySnapshot2(config, fileName) {
-  const filePath = path6.join(config.memoryDir, "state", fileName);
+  const filePath = path7.join(config.memoryDir, "state", fileName);
   const snapshot = await readRuntimePolicySnapshot(filePath, {
     maxStaleDecayThreshold: config.lifecycleArchiveDecayThreshold
   });
@@ -4398,7 +4451,7 @@ async function exists(p) {
   }
 }
 function assertSafeNamespaceSegment(namespace) {
-  if (namespace.length === 0 || namespace === "." || namespace === ".." || namespace.includes("/") || namespace.includes("\\") || path6.isAbsolute(namespace) || path6.win32.isAbsolute(namespace)) {
+  if (namespace.length === 0 || namespace === "." || namespace === ".." || namespace.includes("/") || namespace.includes("\\") || path7.isAbsolute(namespace) || path7.win32.isAbsolute(namespace)) {
     throw new Error(`invalid namespace: ${namespace}`);
   }
 }
@@ -4448,7 +4501,7 @@ async function walkMemoryMarkdownFiles(memoryDir, visit) {
     for (const entry of entries) {
       if (entry.isSymbolicLink()) continue;
       const entryName = typeof entry.name === "string" ? entry.name : entry.name.toString("utf-8");
-      const fullPath = path6.join(dir, entryName);
+      const fullPath = path7.join(dir, entryName);
       try {
         assertPathInsideRoot(memoryRootReal, await realpath3(fullPath), fullPath);
       } catch (err) {
@@ -4463,7 +4516,7 @@ async function walkMemoryMarkdownFiles(memoryDir, visit) {
       await visit(fullPath);
     }
   };
-  for (const root of RECALL_FALLBACK_DIRS.map((dir) => path6.join(memoryDir, dir))) {
+  for (const root of RECALL_FALLBACK_DIRS.map((dir) => path7.join(memoryDir, dir))) {
     await walk(root);
   }
 }
@@ -4791,7 +4844,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
       );
       tierCmd.command("list").description("Summarize tier distribution across all memories").option("--json", "Emit machine-readable JSON only").action(async (...args) => {
         const options = args[0] ?? {};
-        const { summarizeTiers, formatTierSummaryText } = await import("./tier-stats-4B5IJ3NE.js");
+        const { summarizeTiers, formatTierSummaryText } = await import("./tier-stats-2TOW3QNL.js");
         const summary = await summarizeTiers(orchestrator.storage);
         if (reportHasMachineReadableOutput(options)) {
           console.log(JSON.stringify(summary, null, 2));
@@ -4802,7 +4855,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
       tierCmd.command("explain").description("Explain the tier-transition decision for a single memory").argument("<id>", "Memory id to explain").option("--json", "Emit machine-readable JSON only").action(async (...args) => {
         const idArg = typeof args[0] === "string" ? args[0] : "";
         const options = args[1] ?? {};
-        const { explainTierForMemory, formatTierExplainText } = await import("./tier-stats-4B5IJ3NE.js");
+        const { explainTierForMemory, formatTierExplainText } = await import("./tier-stats-2TOW3QNL.js");
         try {
           const explain = await explainTierForMemory(
             orchestrator.storage,
@@ -4835,7 +4888,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
         const idArg = typeof args[0] === "string" ? args[0] : "";
         const options = args[1] ?? {};
         const reason = typeof options.reason === "string" && options.reason.trim().length > 0 ? options.reason.trim() : void 0;
-        const { forgetMemory } = await import("./forget-SZ2BXDGF.js");
+        const { forgetMemory } = await import("./forget-2AE4MDK3.js");
         try {
           const result = await forgetMemory(orchestrator.storage, {
             id: idArg,
@@ -4928,7 +4981,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
         }
         const confirmed = confirmValue === "yes";
         const dryRun = hasDryRunFlag || !confirmed;
-        const { purgeMemories } = await import("./purge-GB7PZHT2.js");
+        const { purgeMemories } = await import("./purge-OP6BEDFY.js");
         try {
           const result = await purgeMemories({
             storage: orchestrator.storage,
@@ -5073,7 +5126,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
         if (plan.moved.length > 0) {
           console.log("\nEntries:");
           for (const move of plan.moved) {
-            console.log(`- ${path6.basename(move.from)}`);
+            console.log(`- ${path7.basename(move.from)}`);
           }
         }
         if (dryRun) {
@@ -5198,6 +5251,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
         }
         console.log("OK");
       });
+      registerExportOkfCommand(exportCmd, orchestrator);
       const importCmd = cmd.command("import").description("Import Remnic memory from JSON bundle, Markdown bundle, or SQLite").option("--from <path>", "Import source path (dir or file)").option("--format <format>", "Import format: auto|json|md|sqlite", "auto").option("--conflict <mode>", "Conflict policy: skip|overwrite|dedupe", "skip").option("--dry-run", "Validate import without writing files").option("--namespace <ns>", "Namespace to import into (v3.0+, default: config defaultNamespace)", "").action(async (...args) => {
         const options = args[0] ?? {};
         const from = options.from ? String(options.from) : "";
@@ -5373,15 +5427,15 @@ function registerCli(api, orchestrator, registerOptions = {}) {
         const capsulesDir = defaultCapsulesDir(memoryDir);
         const { stat: statMerge } = await import("fs/promises");
         let sourceArchive = expandTildePath(parsed.archive);
-        const looksLikePath = sourceArchive.startsWith("/") || sourceArchive.startsWith("./") || sourceArchive.startsWith("../") || sourceArchive.includes(path6.sep);
+        const looksLikePath = sourceArchive.startsWith("/") || sourceArchive.startsWith("./") || sourceArchive.startsWith("../") || sourceArchive.includes(path7.sep);
         if (!looksLikePath) {
-          const cwdResolved = path6.resolve(sourceArchive);
+          const cwdResolved = path7.resolve(sourceArchive);
           const cwdSt = await statMerge(cwdResolved).catch(() => null);
           if (cwdSt && cwdSt.isFile()) {
             sourceArchive = cwdResolved;
           } else {
-            const byId = path6.join(capsulesDir, `${sourceArchive}.capsule.json.gz`);
-            const byIdEnc = path6.join(capsulesDir, `${sourceArchive}.capsule.json.gz.enc`);
+            const byId = path7.join(capsulesDir, `${sourceArchive}.capsule.json.gz`);
+            const byIdEnc = path7.join(capsulesDir, `${sourceArchive}.capsule.json.gz.enc`);
             const stId = await statMerge(byId).catch(() => null);
             if (stId && stId.isFile()) {
               sourceArchive = byId;
@@ -5402,7 +5456,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
             );
           }
         }
-        const { mergeCapsule } = await import("./capsule-merge-SGIVB3WA.js");
+        const { mergeCapsule } = await import("./capsule-merge-SEHERWWP.js");
         const result = await mergeCapsule({
           sourceArchive,
           targetRoot: memoryDir,
@@ -5462,10 +5516,10 @@ function registerCli(api, orchestrator, registerOptions = {}) {
         ).sort();
         const entries = [];
         for (const archiveName of archives) {
-          const archivePath = path6.join(capsulesDir, archiveName);
+          const archivePath = path7.join(capsulesDir, archiveName);
           const id = archiveName.replace(/\.capsule\.json\.gz\.enc$/, "").replace(/\.capsule\.json\.gz$/, "");
           const manifestName = `${id}.manifest.json`;
-          const manifestPath = path6.join(capsulesDir, manifestName);
+          const manifestPath = path7.join(capsulesDir, manifestName);
           let createdAt = null;
           let pluginVersion = null;
           let fileCount = null;
@@ -5520,15 +5574,15 @@ function registerCli(api, orchestrator, registerOptions = {}) {
         const parsed = parseCapsuleInspectOptions(archiveArg, opts);
         const { stat } = await import("fs/promises");
         let archivePath = expandTildePath(parsed.archive);
-        const looksLikePath = archivePath.startsWith("/") || archivePath.startsWith("./") || archivePath.startsWith("../") || archivePath.includes(path6.sep);
+        const looksLikePath = archivePath.startsWith("/") || archivePath.startsWith("./") || archivePath.startsWith("../") || archivePath.includes(path7.sep);
         if (!looksLikePath) {
-          const cwdResolved = path6.resolve(archivePath);
+          const cwdResolved = path7.resolve(archivePath);
           const cwdSt = await stat(cwdResolved).catch(() => null);
           if (cwdSt && cwdSt.isFile()) {
             archivePath = cwdResolved;
           } else {
-            const byId = path6.join(capsulesDir, `${archivePath}.capsule.json.gz`);
-            const byIdEnc = path6.join(capsulesDir, `${archivePath}.capsule.json.gz.enc`);
+            const byId = path7.join(capsulesDir, `${archivePath}.capsule.json.gz`);
+            const byIdEnc = path7.join(capsulesDir, `${archivePath}.capsule.json.gz.enc`);
             const st = await stat(byId).catch(() => null);
             if (st && st.isFile()) {
               archivePath = byId;
@@ -7519,7 +7573,7 @@ Semantic consolidation complete. clusters=${result.clustersFound}, consolidated=
           return;
         }
         const expandedTarget = expandTildePath(rawTarget);
-        const targetPath = path6.isAbsolute(expandedTarget) ? expandedTarget : path6.join(orchestrator.config.memoryDir, expandedTarget);
+        const targetPath = path7.isAbsolute(expandedTarget) ? expandedTarget : path7.join(orchestrator.config.memoryDir, expandedTarget);
         const { runConsolidationUndo, formatConsolidationUndoResult } = await import("./consolidation-undo.js");
         const result = await runConsolidationUndo({
           storage: orchestrator.storage,
@@ -7557,7 +7611,7 @@ Semantic consolidation complete. clusters=${result.clustersFound}, consolidated=
         }
       });
       cmd.command("identity").description("Show agent identity reflections").action(async () => {
-        const workspaceDir = path6.join(resolveHomeDir(), ".openclaw", "workspace");
+        const workspaceDir = path7.join(resolveHomeDir(), ".openclaw", "workspace");
         const identity = await orchestrator.storage.readIdentity(workspaceDir);
         if (!identity) {
           console.log("No identity file found.");
@@ -7780,8 +7834,8 @@ Semantic consolidation complete. clusters=${result.clustersFound}, consolidated=
         const options = args[0] ?? {};
         const threadId = options.thread;
         const top = parseInt(options.top ?? "10", 10);
-        const memoryDir = path6.join(resolveHomeDir(), ".openclaw", "workspace", "memory", "local");
-        const threading = new ThreadingManager(path6.join(memoryDir, "threads"));
+        const memoryDir = path7.join(resolveHomeDir(), ".openclaw", "workspace", "memory", "local");
+        const threading = new ThreadingManager(path7.join(memoryDir, "threads"));
         if (threadId) {
           const thread = await threading.loadThread(threadId);
           if (!thread) {
@@ -8043,7 +8097,7 @@ Semantic consolidation complete. clusters=${result.clustersFound}, consolidated=
           console.error("--verb is required. Must be one of: keep-a, keep-b, merge, both-valid, needs-more-context");
           process.exit(1);
         }
-        const { isValidResolutionVerb, executeResolution } = await import("./resolution-4552BNRV.js");
+        const { isValidResolutionVerb, executeResolution } = await import("./resolution-4DLI3IOR.js");
         if (!isValidResolutionVerb(verb)) {
           console.error(`Invalid verb: ${verb}. Must be one of: keep-a, keep-b, merge, both-valid, needs-more-context`);
           process.exit(1);
@@ -8075,7 +8129,7 @@ Semantic consolidation complete. clusters=${result.clustersFound}, consolidated=
       });
       reviewCmd.command("scan").description("Run an on-demand contradiction scan").option("--namespace <ns>", "Namespace to scan").action(async (...args) => {
         const options = args[0] ?? {};
-        const { runContradictionScan } = await import("./contradiction-scan-AKUWPX5N.js");
+        const { runContradictionScan } = await import("./contradiction-scan-NOYMFG66.js");
         console.log("Running contradiction scan...");
         const result = await runContradictionScan({
           storage: orchestrator.storage,
@@ -8811,4 +8865,4 @@ export {
   listMemoryMarkdownFilePaths,
   registerCli
 };
-//# sourceMappingURL=chunk-I7EX6KSH.js.map
+//# sourceMappingURL=chunk-6QDXA26G.js.map