@remnic/core 9.65.7 → 9.66.0

package/dist/who-knows.d.ts

@@ -1,24 +1,26 @@
-export { bA as WHO_KNOWS_AUTHORSHIP_BONUS, bB as WHO_KNOWS_DEFAULT_LIMIT, bC as WHO_KNOWS_MAX_EVIDENCE, bD as WHO_KNOWS_MAX_LIMIT, bE as WHO_KNOWS_MCP_TOOLS, bF as WhoKnowsEntity, bG as WhoKnowsEvidence, bH as WhoKnowsHit, bI as WhoKnowsHttpOutcome, W as WhoKnowsResult, bJ as WhoKnowsStorage, bT as computeWhoKnows, bZ as handleWhoKnowsHttpQuery, c2 as loadWhoKnowsEntities, c9 as tokenizeTopic, ca as validateWhoKnowsInput } from './access-service-Crk__Git.js';
-import './types-BHDNxGTT.js';
-import './orchestrator-Co1DyfuP.js';
+export { bA as WHO_KNOWS_AUTHORSHIP_BONUS, bB as WHO_KNOWS_DEFAULT_LIMIT, bC as WHO_KNOWS_MAX_EVIDENCE, bD as WHO_KNOWS_MAX_LIMIT, bE as WHO_KNOWS_MCP_TOOLS, bF as WhoKnowsEntity, bG as WhoKnowsEvidence, bH as WhoKnowsHit, bI as WhoKnowsHttpOutcome, W as WhoKnowsResult, bJ as WhoKnowsStorage, bT as computeWhoKnows, bZ as handleWhoKnowsHttpQuery, c2 as loadWhoKnowsEntities, c9 as tokenizeTopic, ca as validateWhoKnowsInput } from './access-service-CEUE1Isj.js';
+import './types-BRpcNjHZ.js';
+import './orchestrator-3F4jihCo.js';
 import './recall-state.js';
 import './utils/serialize-mutations.js';
 import './search/port.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
-import './types-CM86alG1.js';
 import './operator-doctor-types.js';
 import './external-wiki-config.js';
 import './contradiction-config.js';
 import './graph-path-scoring-config.js';
 import './causal-trajectory.js';
 import './objective-state.js';
+import './active-context-config.js';
 import './types-continuity.js';
 import './included-memories.js';
 import './briefing.js';
-import './storage-B1hEx8Xg.js';
+import './storage-BQn-xnxm.js';
 import './corpus-read-cancellation.js';
 import './artifact-search.js';
+import './active-context-transform.js';
+import './context-summary.js';
 import './entity-id-normalization.js';
 import './page-versioning.js';
 import './consolidation-operator.js';
@@ -37,8 +39,8 @@ import './resolve-provider-secret.js';
 import './transcript.js';
 import './session-integrity.js';
 import './summarizer.js';
-import './maintenance-Dm2McrIx.js';
-import './catalog-DybwVNW3.js';
+import './maintenance-DDUX9d6D.js';
+import './catalog-D1HgugTA.js';
 import './namespaces/search.js';
 import './compounding/engine.js';
 import './shared-context/manager.js';
@@ -48,7 +50,7 @@ import './utility-runtime.js';
 import './tier-routing.js';
 import './lifecycle.js';
 import './orchestration/compression-guideline-coordinator.js';
-import './semantic-consolidation-DziYcW5J.js';
+import './semantic-consolidation-5OuWXBRt.js';
 import './connectors/codex-materialize.js';
 import './logger.js';
 import './embedding-fallback.js';
@@ -70,10 +72,10 @@ import './conversation-index/chunker.js';
 import './conversation-index/backend.js';
 import './faiss-adapter-BHecI1fF.js';
 import './runtime/child-process.js';
-import './dependency-propagation-delivery-BGcNairQ.js';
+import './dependency-propagation-delivery-BCpeo14F.js';
 import './namespaces/storage.js';
 import './threading.js';
-import './scope-profiles-6ChZKTy-.js';
+import './scope-profiles-BF2lu81V.js';
 import './graph-444E-DrF.js';
 import './recall-xray.js';
 import './memory-provenance.js';
@@ -86,14 +88,13 @@ import './negative.js';
 import './session-observer-state.js';
 import './semantic-BalR6EXU.js';
 import './replay/types.js';
-import './service-C7rIBuK_.js';
+import './service-CrqEhLXD.js';
 import './extraction-judge.js';
 import './lcm/engine.js';
 import './lcm/archive.js';
 import './token-estimate.js';
-import './lcm/summarizer.js';
-import './lcm/dag.js';
 import './lcm/recall.js';
+import './lcm/dag.js';
 import './lcm/queue.js';
 import './policy-runtime.js';
 import './access-schema.js';
@@ -109,7 +110,7 @@ import './recall-audit.js';
 import './types-B1VHaf2w.js';
 import './transfer/capsule-import.js';
 import './transfer/types.js';
-import './access-namespace-preflight-8VYKmRX0.js';
+import './access-namespace-preflight-CLWUoMyW.js';
 import './access-token-capabilities.js';
 import 'node:async_hooks';
 import './recall-explain-renderer.js';

package/dist/who-knows.js

@@ -9,84 +9,84 @@ import {
   loadWhoKnowsEntities,
   tokenizeTopic,
   validateWhoKnowsInput
-} from "./chunk-ZIJDI4CP.js";
-import "./chunk-BJTHRFFC.js";
+} from "./chunk-WKJFIMVN.js";
+import "./chunk-GEJKYA7D.js";
 import "./chunk-UHVXE24Y.js";
-import "./chunk-46WM6JX2.js";
-import "./chunk-SXIMQLGV.js";
-import "./chunk-JAQXUGLN.js";
-import "./chunk-RGCF4XNH.js";
+import "./chunk-4ZWCQJNM.js";
+import "./chunk-WVGXCBOC.js";
+import "./chunk-FYWLSFFS.js";
+import "./chunk-HNPE66LB.js";
+import "./chunk-N37X5RU7.js";
+import "./chunk-NNBZS3DY.js";
 import "./chunk-CYEPCZN5.js";
 import "./chunk-GIC6BASP.js";
 import "./chunk-YQNNHLCG.js";
-import "./chunk-6KTXE6A3.js";
-import "./chunk-N37X5RU7.js";
-import "./chunk-NNBZS3DY.js";
 import "./chunk-W7IGLX4G.js";
+import "./chunk-6KTXE6A3.js";
 import "./chunk-GUMZC2BO.js";
 import "./chunk-227UFSEQ.js";
 import "./chunk-ET356KSB.js";
 import "./chunk-72A4L5JJ.js";
 import "./chunk-A7Q43EUZ.js";
 import "./chunk-S2V7RUCL.js";
-import "./chunk-LBFFNDFM.js";
-import "./chunk-PO7NXBG2.js";
-import "./chunk-S2HLHAZ4.js";
+import "./chunk-MINHJ55X.js";
 import "./chunk-SCU65EZI.js";
+import "./chunk-2GF27PGH.js";
+import "./chunk-S2HLHAZ4.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
-import "./chunk-UG6VXIOK.js";
+import "./chunk-XSTNGNJP.js";
 import "./chunk-AAD2ZS6P.js";
-import "./chunk-W4BMEGQA.js";
-import "./chunk-RAIUTAZZ.js";
-import "./chunk-BT7NVCML.js";
+import "./chunk-LUDBXTBJ.js";
 import "./chunk-3ONXXHQO.js";
 import "./chunk-YXZG5TVN.js";
 import "./chunk-5GINB5LC.js";
 import "./chunk-3WU7XOFN.js";
-import "./chunk-UFKPQBXH.js";
+import "./chunk-G7D6GZ5J.js";
+import "./chunk-U62OK7BB.js";
 import "./chunk-XCB6QDL6.js";
 import "./chunk-RBOJCG4T.js";
-import "./chunk-ZVPVTPGI.js";
+import "./chunk-NNZFPYYX.js";
 import "./chunk-5WITETWU.js";
 import "./chunk-6CIAGZ6X.js";
-import "./chunk-G7D6GZ5J.js";
-import "./chunk-C24UZSFW.js";
+import "./chunk-CEH2AFXG.js";
 import "./chunk-JXN77SGO.js";
-import "./chunk-ZLQ37WJX.js";
 import "./chunk-IUM3VSHI.js";
+import "./chunk-ZLQ37WJX.js";
+import "./chunk-WKAXBXVA.js";
+import "./chunk-BT7NVCML.js";
 import "./chunk-C64XATK7.js";
 import "./chunk-42JKGUFJ.js";
-import "./chunk-UW5NPZJ2.js";
+import "./chunk-JALOAKSZ.js";
 import "./chunk-QIEUU4UK.js";
 import "./chunk-L2EXJQJP.js";
 import "./chunk-45GF7Y3V.js";
 import "./chunk-RGMVMVMF.js";
 import "./chunk-N7RWREIQ.js";
 import "./chunk-NXH34IPL.js";
-import "./chunk-RIAM7DND.js";
 import "./chunk-ZIKENA2C.js";
-import "./chunk-PQVCH2AE.js";
+import "./chunk-ME35HVDJ.js";
 import "./chunk-6Q3ZTEF6.js";
+import "./chunk-YCVB7X56.js";
+import "./chunk-PQVCH2AE.js";
 import "./chunk-PJKTFXE2.js";
 import "./chunk-W5BIQOAJ.js";
 import "./chunk-Z7L72ZHL.js";
 import "./chunk-4O4TKIXQ.js";
-import "./chunk-YCVB7X56.js";
 import "./chunk-BJMBJZ2Y.js";
 import "./chunk-UKJAGEXH.js";
 import "./chunk-FP2373TW.js";
 import "./chunk-J6A3CX5N.js";
-import "./chunk-DVYRD4HY.js";
+import "./chunk-JRRQ747T.js";
 import "./chunk-ZA53AZND.js";
-import "./chunk-GCASGYIO.js";
 import "./chunk-7RJUVTVF.js";
-import "./chunk-2LWQSV6A.js";
+import "./chunk-AL3UYZ5N.js";
 import "./chunk-RL6NEVXT.js";
-import "./chunk-XDL5CYZN.js";
-import "./chunk-JOEJG4SD.js";
-import "./chunk-5FVVY2EB.js";
+import "./chunk-GCASGYIO.js";
+import "./chunk-EEOUMG3J.js";
+import "./chunk-TVW4C7PV.js";
 import "./chunk-FFAZ2XFU.js";
+import "./chunk-5FVVY2EB.js";
 import "./chunk-JDSVLVCG.js";
 import "./chunk-5GKPFL3S.js";
 import "./chunk-JAKIDQB2.js";
@@ -99,10 +99,10 @@ import "./chunk-JUC24CTX.js";
 import "./chunk-2Z24E5W2.js";
 import "./chunk-BTTPKDIL.js";
 import "./chunk-FF4KLI5W.js";
-import "./chunk-XQ3HXAQH.js";
+import "./chunk-ET2CNMLD.js";
 import "./chunk-A6XUJE5D.js";
-import "./chunk-5UZXUTVO.js";
 import "./chunk-VS2IYZRU.js";
+import "./chunk-5UZXUTVO.js";
 import "./chunk-3WCASNQZ.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/write-envelope.d.ts

@@ -1,13 +1,13 @@
-import { y as MemoryCategory, N as MemorySubject } from './types-BHDNxGTT.js';
+import { y as MemoryCategory, N as MemorySubject } from './types-BRpcNjHZ.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
-import './types-CM86alG1.js';
 import './operator-doctor-types.js';
 import './external-wiki-config.js';
 import './contradiction-config.js';
 import './graph-path-scoring-config.js';
 import './causal-trajectory.js';
 import './objective-state.js';
+import './active-context-config.js';
 import './types-continuity.js';
 
 /**

package/dist/write-envelope.js

@@ -11,20 +11,20 @@ import {
   isMemoryCategory,
   isSealedMemoryEnvelope,
   sealedWriteToLegacyArgs
-} from "./chunk-RAIUTAZZ.js";
+} from "./chunk-WKAXBXVA.js";
 import "./chunk-BT7NVCML.js";
-import "./chunk-RIAM7DND.js";
-import "./chunk-JOEJG4SD.js";
-import "./chunk-5FVVY2EB.js";
+import "./chunk-ME35HVDJ.js";
+import "./chunk-TVW4C7PV.js";
 import "./chunk-FFAZ2XFU.js";
+import "./chunk-5FVVY2EB.js";
 import "./chunk-JDSVLVCG.js";
 import "./chunk-5GKPFL3S.js";
 import "./chunk-JAKIDQB2.js";
 import "./chunk-P7FMDTKL.js";
-import "./chunk-XQ3HXAQH.js";
+import "./chunk-ET2CNMLD.js";
 import "./chunk-A6XUJE5D.js";
-import "./chunk-5UZXUTVO.js";
 import "./chunk-VS2IYZRU.js";
+import "./chunk-5UZXUTVO.js";
 import "./chunk-3WCASNQZ.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.65.7",
+  "version": "9.66.0",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -2030,6 +2030,56 @@
       "remnic-source": "./src/token-estimate.ts",
       "import": "./dist/token-estimate.js"
     },
+    "./export-okf": {
+      "types": "./dist/transfer/export-okf.d.ts",
+      "remnic-source": "./src/transfer/export-okf.ts",
+      "import": "./dist/transfer/export-okf.js"
+    },
+    "./export-okf.js": {
+      "types": "./dist/transfer/export-okf.d.ts",
+      "remnic-source": "./src/transfer/export-okf.ts",
+      "import": "./dist/transfer/export-okf.js"
+    },
+    "./export-okf-codegraph": {
+      "types": "./dist/coding/export-okf-codegraph.d.ts",
+      "remnic-source": "./src/coding/export-okf-codegraph.ts",
+      "import": "./dist/coding/export-okf-codegraph.js"
+    },
+    "./export-okf-codegraph.js": {
+      "types": "./dist/coding/export-okf-codegraph.d.ts",
+      "remnic-source": "./src/coding/export-okf-codegraph.ts",
+      "import": "./dist/coding/export-okf-codegraph.js"
+    },
+    "./standup": {
+      "types": "./dist/standup/build.d.ts",
+      "remnic-source": "./src/standup/build.ts",
+      "import": "./dist/standup/build.js"
+    },
+    "./standup.js": {
+      "types": "./dist/standup/build.d.ts",
+      "remnic-source": "./src/standup/build.ts",
+      "import": "./dist/standup/build.js"
+    },
+    "./active-context-transform": {
+      "types": "./dist/active-context-transform.d.ts",
+      "remnic-source": "./src/active-context-transform.ts",
+      "import": "./dist/active-context-transform.js"
+    },
+    "./active-context-transform.js": {
+      "types": "./dist/active-context-transform.d.ts",
+      "remnic-source": "./src/active-context-transform.ts",
+      "import": "./dist/active-context-transform.js"
+    },
+    "./context-summary": {
+      "types": "./dist/context-summary.d.ts",
+      "remnic-source": "./src/context-summary.ts",
+      "import": "./dist/context-summary.js"
+    },
+    "./context-summary.js": {
+      "types": "./dist/context-summary.d.ts",
+      "remnic-source": "./src/context-summary.ts",
+      "import": "./dist/context-summary.js"
+    },
     "./recall-xray": {
       "types": "./dist/recall-xray.d.ts",
       "remnic-source": "./src/recall-xray.ts",
@@ -3138,7 +3188,8 @@
     "node-gyp": "^12.3.0",
     "openai": "^6.0.0",
     "undici": "^6.28.0",
-    "zod": "^3.24.0"
+    "zod": "^3.25.28",
+    "zod-to-json-schema": "^3.25.2"
   },
   "optionalDependencies": {
     "@lancedb/lancedb-darwin-arm64": "^0.26.2",
@@ -3166,7 +3217,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.65.7"
+    "@remnic/coding-graph": "^9.66.0"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/access-admin-ops-surface.ts

@@ -23,6 +23,7 @@ import { resolveScopeProfilePlan } from "./namespaces/scope-profiles.js";
 import type { Orchestrator } from "./orchestrator.js";
 import { formatProfileTraceAscii } from "./profiling.js";
 import { resolveScopePlan } from "./scopes/scope-plan.js";
+import { isSupportPassportPrivateMemory } from "./support-passport/card-projection.js";
 import {
   EngramAccessInputError,
   buildProjectedGovernanceProposedActions,
@@ -818,7 +819,11 @@ export class AccessAdminOpsSurface {
       readMemory: async (namespace, memoryId) => {
         const resolved = await this.deps.orchestrator.getStorage(namespace);
         const memory = await resolved.getMemoryById(memoryId);
-        if (!memory) return null;
+        // Owner-private support-passport records must not cross their
+        // storage boundary through a copy-based promotion; reported as not
+        // found so the route never confirms a private record's existence
+        // (#2387).
+        if (!memory || isSupportPassportPrivateMemory(memory)) return null;
         return {
           category: memory.frontmatter.category,
           content: memory.content,

package/src/access-boundary.ts

@@ -83,6 +83,7 @@ export const OPERATION_NAMES = [
   "meetings_list",
   "meetings_get",
   "meetings_build",
+  "standup",
   "action_confidence",
   "chatgpt_memory_inspector",
   "day_summary",

package/src/access-http.ts

@@ -25,7 +25,7 @@ import {
 } from "./access-http-offline-stream.js";
 import { nonEmptyQueryParam, optionalNamespaceKindQueryParam, optionalQueryString, positiveIntQueryParam } from "./access-http-query.js";
 import { CorrectionContractError } from "./correction/correction-contract.js";
-import { respondWearablesErrorGlue } from "./wearables/http-glue.js"; import { respondMeetingsList, respondMeetingsGet, respondMeetingsBuild } from "./meetings/http-glue.js"; import { respondLocationStatus, respondLocationCheck, respondLocationSync, respondLocationBackfill, respondLocationDay } from "./location/http-glue.js";
+import { respondWearablesErrorGlue } from "./wearables/http-glue.js"; import { respondMeetingsList, respondMeetingsGet, respondMeetingsBuild } from "./meetings/http-glue.js"; import { respondLocationStatus, respondLocationCheck, respondLocationSync, respondLocationBackfill, respondLocationDay } from "./location/http-glue.js"; import { respondStandup } from "./standup/http-glue.js";
 import { EngramMcpServer, MCP_SUPPORTED_PROTOCOL_VERSIONS } from "./access-mcp.js";
 import { validateRequest, type SchemaName, type SchemaTypeFor } from "./access-schema.js";
 import {
@@ -1765,6 +1765,8 @@ export class EngramAccessHttpServer extends ReviewDeckAccessHttpBase {
       this.enforceTokenOp("location_backfill"); await respondLocationBackfill((await this.readJsonBody(req)) as Record<string, unknown>, res, this.respondJson.bind(this), this.service); return; }
     if (req.method === "GET" && (pathname === "/engram/v1/location/day" || pathname === "/remnic/v1/location/day")) {
       this.enforceTokenOp("location_day"); await respondLocationDay(parsed.searchParams.get("date"), res, this.respondJson.bind(this), this.service); return; }
+    if (req.method === "GET" && (pathname === "/engram/v1/standup" || pathname === "/remnic/v1/standup")) {
+      this.enforceTokenOp("standup"); await respondStandup(parsed.searchParams.get("date"), res, this.respondJson.bind(this), this.service); return; }
 
     if (req.method === "POST" && pathname === "/engram/v1/observe") {
       this.enforceTokenOp("observe"); // boundary dispatch (issue #1525)

package/src/access-mcp-output-schemas.ts

@@ -82,6 +82,7 @@ const TOOL_OUTPUT_SCHEMAS: Readonly<Record<string, Record<string, unknown>>> = {
     skipped: T_NUMBER,
     removed: T_ARRAY,
   }),
+  standup: objectSchema({ date: T_STRING, yesterday: T_STRING, today: T_STRING, highlights: T_ARRAY, blockers: T_ARRAY, activityGrid: T_STRING, markdown: T_STRING }),
   action_confidence: objectSchema({
     schemaVersion: T_NUMBER,
     decision: T_STRING,

package/src/access-mcp.ts

@@ -45,7 +45,7 @@ import { applyToolOutputSchemas } from "./access-mcp-output-schemas.js";
 import { MCP_READ_ONLY_TOOL_SUFFIXES } from "./mcp-read-only-tools.js";
 import { MEETINGS_MCP_TOOLS } from "./meetings/mcp-tools.js";
 import { WEARABLES_MCP_TOOLS } from "./wearables/mcp-tools.js";
-import { WHO_KNOWS_MCP_TOOLS } from "./who-knows.js"; import { LOCATION_MCP_TOOLS } from "./location/mcp-tools.js";
+import { WHO_KNOWS_MCP_TOOLS } from "./who-knows.js"; import { LOCATION_MCP_TOOLS } from "./location/mcp-tools.js"; import { STANDUP_MCP_TOOLS } from "./standup/mcp-tools.js";
 import { PROMOTION_CANDIDATES_MCP_TOOLS } from "./memory-subject.js";
 import { EXTERNAL_WIKI_MCP_TOOLS } from "./external-wiki-mcp-tools.js";
 import { abortError, isAbortError } from "./abort-error.js";
@@ -192,7 +192,7 @@ export const MCP_MIGRATED_OPERATIONS: Readonly<Record<string, OperationName>> =
   "engram.location_status": "location_status", "engram.location_check": "location_check", "engram.location_sync": "location_sync",
   "engram.location_backfill": "location_backfill", "engram.location_day": "location_day",
   "engram.transcript_day": "transcript_day", "engram.transcript_search": "transcript_search",
-  "engram.transcript_memories": "transcript_memories", "engram.meetings_list": "meetings_list", "engram.meetings_get": "meetings_get", "engram.meetings_build": "meetings_build",
+  "engram.transcript_memories": "transcript_memories", "engram.meetings_list": "meetings_list", "engram.meetings_get": "meetings_get", "engram.meetings_build": "meetings_build", "engram.standup": "standup",
   "engram.action_confidence": "action_confidence",
   "engram.chatgpt_memory_inspector": "chatgpt_memory_inspector",
   "engram.day_summary": "day_summary",
@@ -706,7 +706,7 @@ export class EngramMcpServer {
           additionalProperties: false,
         },
       },
-      ...WEARABLES_MCP_TOOLS, ...MEETINGS_MCP_TOOLS, ...WHO_KNOWS_MCP_TOOLS, ...PROMOTION_CANDIDATES_MCP_TOOLS, ...LOCATION_MCP_TOOLS,
+      ...WEARABLES_MCP_TOOLS, ...MEETINGS_MCP_TOOLS, ...WHO_KNOWS_MCP_TOOLS, ...PROMOTION_CANDIDATES_MCP_TOOLS, ...LOCATION_MCP_TOOLS, ...STANDUP_MCP_TOOLS,
       ...(service.supportPassportEnabled ? SUPPORT_PASSPORT_MCP_TOOLS : []),
       {
         name: "engram.action_confidence",

package/src/access-operations.ts

@@ -695,6 +695,7 @@ import "./support-passport/access-operations.js";
 import "./relay/mission-access.js";
 // Location sync surfaces (issue #2047).
 import "./location/access-operations.js";
+import "./standup/access-operations.js";
 
 export const REGISTERED_OPERATIONS = [
   memoryGetOperation.spec.name,

package/src/access-service-offline-file-content.test.ts

@@ -516,6 +516,69 @@ test("offline apply routes reject forged support-passport metadata and allow pub
   }
 });
 
+test("offline apply rejects JSON-escaped support-passport markers (#2387)", async () => {
+  const root = await mkdtemp(path.join(os.tmpdir(), "remnic-access-escaped-marker-"));
+  try {
+    const storage = new StorageManager(root);
+    await storage.ensureDirectories();
+    const { service } = createManifestService({ root, storage });
+    // The raw frontmatter text never contains the literal marker substring;
+    // only JSON.parse of the structured-attribute value reconstructs it.
+    const escaped = Buffer.from([
+      "---",
+      "id: escaped-marker",
+      "category: fact",
+      `structuredAttributes: {"support\\u002dpassport-owner":"${"a".repeat(64)}"}`,
+      "---",
+      "Ordinary-looking body",
+    ].join("\n"));
+
+    const chunkPath = "facts/2026-08-13/escaped-chunk.md";
+    await assert.rejects(
+      () => service.offlineSyncApplyFileContent({
+        sourceId: "peer",
+        path: chunkPath,
+        sha256: sha256(escaped),
+        bytes: escaped.length,
+        mtimeMs: 0,
+        offset: 0,
+        content: escaped,
+      }),
+      (error) => error instanceof EngramAccessInputError && /private support-passport record/.test(error.message),
+    );
+    await assert.rejects(() => readFile(path.join(root, chunkPath)));
+
+    const changesetPath = "facts/2026-08-13/escaped-changeset.md";
+    await assert.rejects(
+      () => service.offlineSyncApply({
+        returnCurrentFiles: false,
+        changeset: {
+          format: OFFLINE_SYNC_CHANGESET_FORMAT,
+          schemaVersion: 1,
+          createdAt: new Date().toISOString(),
+          sourceId: "peer",
+          includeTranscripts: true,
+          changes: [{
+            type: "upsert",
+            path: changesetPath,
+            file: {
+              path: changesetPath,
+              sha256: sha256(escaped),
+              bytes: escaped.length,
+              mtimeMs: 0,
+              contentBase64: escaped.toString("base64"),
+            },
+          }],
+        },
+      }),
+      (error) => error instanceof EngramAccessInputError && /private support-passport record/.test(error.message),
+    );
+    await assert.rejects(() => readFile(path.join(root, changesetPath)));
+  } finally {
+    await rm(root, { recursive: true, force: true });
+  }
+});
+
 test("offline apply-file-content reports invalid metadata as input errors", async () => {
   const service = createOfflineService();
   await assert.rejects(

package/src/access-surface-catalog.ts

@@ -71,6 +71,7 @@ export const MCP_TOOLS: readonly McpToolEntry[] = [
   { tool: "meetings_list", operation: "meetings_list" },
   { tool: "meetings_get", operation: "meetings_get" },
   { tool: "meetings_build", operation: "meetings_build" },
+  { tool: "standup", operation: "standup" },
   { tool: "action_confidence", operation: "action_confidence" },
   { tool: "chatgpt_memory_inspector", operation: "chatgpt_memory_inspector" },
   { tool: "day_summary", operation: "day_summary" },
@@ -234,6 +235,7 @@ export const HTTP_ROUTES: readonly HttpRouteEntry[] = [
   { method: "GET", pathname: "/engram/v1/meetings", operation: "meetings_list" },
   { method: "POST", pathname: "/engram/v1/meetings/build", operation: "meetings_build" },
   { method: "GET", pathname: "/engram/v1/meetings/:id", operation: "meetings_get" },
+  { method: "GET", pathname: "/engram/v1/standup", operation: "standup" },
   { method: "POST", pathname: "/engram/v1/observe", operation: "observe" },
   { method: "POST", pathname: "/engram/v1/lcm/search", operation: "lcm_search" },
   { method: "POST", pathname: "/engram/v1/lcm/compaction/flush", operation: "lcm_compaction_flush" },

package/src/active-context-config.ts

@@ -0,0 +1,98 @@
+import { coerceBooleanLike, coerceNumber } from "./connectors/coerce.js";
+
+export interface ActiveContextConfigFields {
+  activeContextTransformLlmEnabled: boolean;
+  activeContextMaxMessages: number;
+  activeContextMaxSnapshotChars: number;
+  activeContextSummaryMaxTokens: number;
+  activeContextMinRetainedMessages: number;
+  activeContextPlanTtlMinutes: number;
+  activeContextRetentionMaxBytes: number;
+}
+
+export interface ActiveContextCapabilitySet {
+  readonly activeContextTransforms: boolean;
+  readonly activeContextMaxMessages: number;
+  readonly activeContextMaxSnapshotChars: number;
+  readonly activeContextSummaryMaxTokens: number;
+  readonly activeContextMinRetainedMessages: number;
+  readonly activeContextPlanTtlMinutes: number;
+  readonly activeContextRetentionMaxBytes: number;
+  readonly activeContextLlm: boolean;
+}
+
+export const DEFAULT_ACTIVE_CONTEXT_CAPS: Readonly<
+  Omit<ActiveContextCapabilitySet, "activeContextTransforms" | "activeContextLlm">
+> = Object.freeze({
+  activeContextMaxMessages: 200,
+  activeContextMaxSnapshotChars: 200_000,
+  activeContextSummaryMaxTokens: 512,
+  activeContextMinRetainedMessages: 3,
+  activeContextPlanTtlMinutes: 15,
+  activeContextRetentionMaxBytes: 1_000_000,
+});
+
+export type ActiveContextConfigProjection = ActiveContextConfigFields & {
+  contextCompressionActionsEnabled: boolean;
+};
+
+export function resolveActiveContextCapabilities(
+  projection: ActiveContextConfigProjection,
+): ActiveContextCapabilitySet {
+  return Object.freeze({
+    activeContextTransforms: projection.contextCompressionActionsEnabled,
+    activeContextMaxMessages: projection.activeContextMaxMessages,
+    activeContextMaxSnapshotChars: projection.activeContextMaxSnapshotChars,
+    activeContextSummaryMaxTokens: projection.activeContextSummaryMaxTokens,
+    activeContextMinRetainedMessages: projection.activeContextMinRetainedMessages,
+    activeContextPlanTtlMinutes: projection.activeContextPlanTtlMinutes,
+    activeContextRetentionMaxBytes: projection.activeContextRetentionMaxBytes,
+    activeContextLlm: projection.activeContextTransformLlmEnabled,
+  });
+}
+
+function activeContextCap(raw: unknown, key: string, fallback: number, hardCap: number): number {
+  if (raw === undefined || raw === null) return fallback;
+  const value = coerceNumber(raw, key);
+  if (value === undefined || value <= 0 || value > hardCap) {
+    throw new Error(`${key} must be a finite number in (0, ${hardCap}]; got ${JSON.stringify(raw)}`);
+  }
+  return Math.floor(value);
+}
+
+export function parseActiveContextFields(cfg: Record<string, unknown>): ActiveContextConfigFields {
+  return {
+    activeContextTransformLlmEnabled: coerceBooleanLike(cfg.activeContextTransformLlmEnabled) ?? false,
+    activeContextMaxMessages: activeContextCap(cfg.activeContextMaxMessages, "activeContextMaxMessages", 200, 1000),
+    activeContextMaxSnapshotChars: activeContextCap(
+      cfg.activeContextMaxSnapshotChars,
+      "activeContextMaxSnapshotChars",
+      200_000,
+      1_000_000,
+    ),
+    activeContextSummaryMaxTokens: activeContextCap(
+      cfg.activeContextSummaryMaxTokens,
+      "activeContextSummaryMaxTokens",
+      512,
+      4096,
+    ),
+    activeContextMinRetainedMessages: activeContextCap(
+      cfg.activeContextMinRetainedMessages,
+      "activeContextMinRetainedMessages",
+      3,
+      50,
+    ),
+    activeContextPlanTtlMinutes: activeContextCap(
+      cfg.activeContextPlanTtlMinutes,
+      "activeContextPlanTtlMinutes",
+      15,
+      1440,
+    ),
+    activeContextRetentionMaxBytes: activeContextCap(
+      cfg.activeContextRetentionMaxBytes,
+      "activeContextRetentionMaxBytes",
+      1_000_000,
+      10_000_000,
+    ),
+  };
+}