@remnic/core 9.66.9 → 9.66.11

package/dist/{chunk-KVXMN33W.js → chunk-C6TMLF3A.js}

@@ -23,7 +23,7 @@ import {
 } from "./chunk-E4RMZGRS.js";
 import {
   validateRequest
-} from "./chunk-D6Q5EPOV.js";
+} from "./chunk-HCERYDRI.js";
 import {
   MCP_ADMIN_OPS_MIGRATED_OPERATIONS,
   MCP_ADMIN_OPS_TOOLS,
@@ -34,10 +34,10 @@ import {
 } from "./chunk-K4E3Y3ZX.js";
 import {
   getOperation
-} from "./chunk-FNYVWAIK.js";
+} from "./chunk-G3B3LP6A.js";
 import {
   WHO_KNOWS_MCP_TOOLS
-} from "./chunk-AAJK3PZ6.js";
+} from "./chunk-QB66LBXA.js";
 import {
   PROMOTION_CANDIDATES_MCP_TOOLS
 } from "./chunk-ME35HVDJ.js";
@@ -4045,4 +4045,4 @@ export {
   MCP_MIGRATED_OPERATIONS,
   EngramMcpServer
 };
-//# sourceMappingURL=chunk-KVXMN33W.js.map
+//# sourceMappingURL=chunk-C6TMLF3A.js.map

package/dist/{chunk-47BX23NA.js → chunk-D3AUQXTJ.js}

@@ -1,6 +1,6 @@
 import {
   listNamespaces
-} from "./chunk-ZC5L6ME2.js";
+} from "./chunk-7MOYAT4Y.js";
 import {
   capabilityAllowsNamespace
 } from "./chunk-MZWSOLMT.js";
@@ -282,4 +282,4 @@ export {
   computeServiceCorpusWatermarks,
   computeServiceCorpusCensus
 };
-//# sourceMappingURL=chunk-47BX23NA.js.map
+//# sourceMappingURL=chunk-D3AUQXTJ.js.map

package/dist/{chunk-3HHLOKKU.js → chunk-DJLH3XWM.js}

@@ -1,6 +1,6 @@
 import {
   isNamespaceKind
-} from "./chunk-MFI4QPW5.js";
+} from "./chunk-54BRW3BL.js";
 import {
   EngramAccessInputError
 } from "./chunk-2Z24E5W2.js";
@@ -40,4 +40,4 @@ export {
   positiveIntQueryParam,
   optionalNamespaceKindQueryParam
 };
-//# sourceMappingURL=chunk-3HHLOKKU.js.map
+//# sourceMappingURL=chunk-DJLH3XWM.js.map

package/dist/{chunk-SRILZVR4.js → chunk-E2PORO7O.js}

@@ -2,7 +2,7 @@ import {
   SupportPassportError,
   SupportPassportOwnerCreateGrantRequestSchema,
   getOperation
-} from "./chunk-FNYVWAIK.js";
+} from "./chunk-G3B3LP6A.js";
 
 // src/support-passport/access-http.ts
 var OWNER_ROOT = "/engram/v1/support-passport";
@@ -137,4 +137,4 @@ export {
   SUPPORT_PASSPORT_OWNER_HTTP_ROUTES,
   handleSupportPassportOwnerHttp
 };
-//# sourceMappingURL=chunk-SRILZVR4.js.map
+//# sourceMappingURL=chunk-E2PORO7O.js.map

package/dist/{chunk-G3TUQJFU.js → chunk-E62M4H4M.js}

@@ -1,6 +1,6 @@
 import {
   StorageManager
-} from "./chunk-G775FE2E.js";
+} from "./chunk-4PHT7KE2.js";
 import {
   normalizeEntityName
 } from "./chunk-YXZG5TVN.js";
@@ -957,4 +957,4 @@ export {
   resolveBriefingSaveDir,
   briefingFilename
 };
-//# sourceMappingURL=chunk-G3TUQJFU.js.map
+//# sourceMappingURL=chunk-E62M4H4M.js.map

package/dist/{chunk-GB4R6B5M.js → chunk-EG4FHU5C.js}

@@ -1,6 +1,6 @@
 import {
   rebuildMemoryProjection
-} from "./chunk-Q3UMNZRK.js";
+} from "./chunk-ZIGSNLYI.js";
 
 // src/convergence-refresh.ts
 async function refreshConvergedNamespaces(namespaces, namespaceSearchRouter, getStorage, searchEnabled) {
@@ -32,4 +32,4 @@ async function refreshConvergedNamespaces(namespaces, namespaceSearchRouter, get
 export {
   refreshConvergedNamespaces
 };
-//# sourceMappingURL=chunk-GB4R6B5M.js.map
+//# sourceMappingURL=chunk-EG4FHU5C.js.map

package/dist/{chunk-QU2V4IO3.js → chunk-EMAEDM2J.js}

@@ -1,6 +1,6 @@
 import {
   StorageManager
-} from "./chunk-G775FE2E.js";
+} from "./chunk-4PHT7KE2.js";
 import {
   getCachedRuleMemories,
   setCachedRuleMemories
@@ -119,4 +119,4 @@ export {
   compareVerifiedSemanticRuleResults,
   searchVerifiedSemanticRules
 };
-//# sourceMappingURL=chunk-QU2V4IO3.js.map
+//# sourceMappingURL=chunk-EMAEDM2J.js.map

package/dist/{chunk-FNYVWAIK.js → chunk-G3B3LP6A.js}

@@ -35,7 +35,13 @@ import {
   computeWhoKnows,
   loadWhoKnowsEntities,
   validateWhoKnowsInput
-} from "./chunk-AAJK3PZ6.js";
+} from "./chunk-QB66LBXA.js";
+import {
+  trustResultFor
+} from "./chunk-GNVZQ5JN.js";
+import {
+  renderEpistemicHedge
+} from "./chunk-YN2UN7N3.js";
 import {
   getTrustZoneStoreStatus,
   isTrustZoneName,
@@ -45,12 +51,6 @@ import {
   seedTrustZoneDemoDataset,
   summarizeTrustZonePromotionReadiness
 } from "./chunk-5QZR2RA3.js";
-import {
-  trustResultFor
-} from "./chunk-GNVZQ5JN.js";
-import {
-  renderEpistemicHedge
-} from "./chunk-YN2UN7N3.js";
 import {
   planSessionTranscriptMigration
 } from "./chunk-P5FPO2BR.js";
@@ -65,16 +65,16 @@ import {
 } from "./chunk-LK4TOYPU.js";
 import {
   readAggregateExtractionWatermark
-} from "./chunk-J67E4JNT.js";
+} from "./chunk-TGKLVAML.js";
+import {
+  ReplicaDivergenceMonitor
+} from "./chunk-CVILPI77.js";
 import {
   recordObjectiveStateSnapshotsFromObservedMessages
 } from "./chunk-2HIJHXB3.js";
 import {
   objectiveStateStoreOverrideForNamespace
 } from "./chunk-HTP6XRUI.js";
-import {
-  ReplicaDivergenceMonitor
-} from "./chunk-CVILPI77.js";
 import {
   recordMemoryOutcome
 } from "./chunk-UD7UNYRD.js";
@@ -122,11 +122,11 @@ import {
   listMemoryGovernanceRuns,
   readMemoryGovernanceRunArtifact,
   runMemoryGovernance
-} from "./chunk-Q5YKVBIV.js";
+} from "./chunk-7FLINMUE.js";
 import {
   CorpusWatermarkCache,
   computeServiceCorpusCensus
-} from "./chunk-47BX23NA.js";
+} from "./chunk-D3AUQXTJ.js";
 import {
   CrossNamespaceBudget,
   toBudgetWarning
@@ -137,7 +137,7 @@ import {
   enqueuePassiveCorrectionNotification,
   parseBriefingFocus,
   parseBriefingWindow
-} from "./chunk-G3TUQJFU.js";
+} from "./chunk-E62M4H4M.js";
 import {
   OKF_RESERVED_BASENAMES,
   parseEntityFile,
@@ -145,10 +145,10 @@ import {
   qmdCollectionPathParts,
   qmdResultPathCandidates,
   selfDeps
-} from "./chunk-G775FE2E.js";
+} from "./chunk-4PHT7KE2.js";
 import {
   namespaceCollectionName
-} from "./chunk-B3TZLAO4.js";
+} from "./chunk-X5SDZMO7.js";
 import {
   DEFAULT_RECALL_DISCLOSURE,
   isRecallDisclosure
@@ -239,7 +239,7 @@ import {
 } from "./chunk-ME35HVDJ.js";
 import {
   exportCapsule
-} from "./chunk-KQAFEZQX.js";
+} from "./chunk-IPLYGWQF.js";
 import {
   evaluateActionConfidence
 } from "./chunk-Z2YFLXHU.js";
@@ -18248,4 +18248,4 @@ export {
   EngramAccessService,
   AccessAdminOpsSurface
 };
-//# sourceMappingURL=chunk-FNYVWAIK.js.map
+//# sourceMappingURL=chunk-G3B3LP6A.js.map

package/dist/{chunk-D6Q5EPOV.js → chunk-HCERYDRI.js}

@@ -1,6 +1,6 @@
 import {
   isValidCapsuleSince
-} from "./chunk-KQAFEZQX.js";
+} from "./chunk-IPLYGWQF.js";
 import {
   CAPSULE_ID_PATTERN
 } from "./chunk-WEHSQBFR.js";
@@ -484,4 +484,4 @@ export {
   actionConfidenceRequestSchema,
   validateRequest
 };
-//# sourceMappingURL=chunk-D6Q5EPOV.js.map
+//# sourceMappingURL=chunk-HCERYDRI.js.map

package/dist/{chunk-5NZIRM4Q.js → chunk-HJQZQUPC.js}

@@ -1,3 +1,9 @@
+import {
+  MeilisearchBackend
+} from "./chunk-NNBZS3DY.js";
+import {
+  NoopSearchBackend
+} from "./chunk-CYEPCZN5.js";
 import {
   OramaBackend
 } from "./chunk-GIC6BASP.js";
@@ -10,12 +16,6 @@ import {
 import {
   LanceDbBackend
 } from "./chunk-N37X5RU7.js";
-import {
-  MeilisearchBackend
-} from "./chunk-NNBZS3DY.js";
-import {
-  NoopSearchBackend
-} from "./chunk-CYEPCZN5.js";
 import {
   createConversationIndexBackend
 } from "./chunk-227UFSEQ.js";
@@ -179,4 +179,4 @@ export {
   createConversationSearchBackend,
   createConversationIndexRuntime
 };
-//# sourceMappingURL=chunk-5NZIRM4Q.js.map
+//# sourceMappingURL=chunk-HJQZQUPC.js.map

package/dist/{chunk-CIWOW2FH.js → chunk-HPGXB56F.js}

@@ -1,6 +1,6 @@
 import {
   runLocationSync
-} from "./chunk-5CSKIWEB.js";
+} from "./chunk-7BS5UVXA.js";
 import {
   log
 } from "./chunk-3WCASNQZ.js";
@@ -58,4 +58,4 @@ export {
   LOCATION_SYNC_DEFAULT_INTERVAL_MS,
   startLocationAutoSync
 };
-//# sourceMappingURL=chunk-CIWOW2FH.js.map
+//# sourceMappingURL=chunk-HPGXB56F.js.map

package/dist/{chunk-KQAFEZQX.js → chunk-IPLYGWQF.js}

@@ -1,3 +1,7 @@
+import {
+  CAPSULE_SCHEMA_VERSION,
+  EXPORT_FORMAT
+} from "./chunk-J4EB7DNW.js";
 import {
   CAPSULE_ID_PATTERN,
   CapsuleBlockSchema,
@@ -7,10 +11,6 @@ import {
 import {
   encryptCapsuleFile
 } from "./chunk-X7Y7WX73.js";
-import {
-  CAPSULE_SCHEMA_VERSION,
-  EXPORT_FORMAT
-} from "./chunk-J4EB7DNW.js";
 import {
   DEFAULT_TRANSFER_EXCLUDE_DIRS,
   computeTransferOutputRel
@@ -261,4 +261,4 @@ export {
   exportCapsule,
   isValidCapsuleSince
 };
-//# sourceMappingURL=chunk-KQAFEZQX.js.map
+//# sourceMappingURL=chunk-IPLYGWQF.js.map

package/dist/{chunk-UAWSKMWQ.js → chunk-ISX7JODR.js}

@@ -3,7 +3,7 @@ import {
   getOperation,
   operationRequiresAuthorizedNamespace,
   operationUsesPrincipalNamespace
-} from "./chunk-FNYVWAIK.js";
+} from "./chunk-G3B3LP6A.js";
 import {
   assertOperationAuthorizationAllowed
 } from "./chunk-MZWSOLMT.js";
@@ -60,4 +60,4 @@ export {
   authorizationProbeNamespaces,
   authorizationProbeRequiresPrincipalNamespace
 };
-//# sourceMappingURL=chunk-UAWSKMWQ.js.map
+//# sourceMappingURL=chunk-ISX7JODR.js.map

package/dist/{chunk-RKNJBZ55.js → chunk-JBPKEARU.js}

@@ -1,3 +1,6 @@
+import {
+  ReplitAdapter
+} from "./chunk-TMSXWOBZ.js";
 import {
   ClaudeCodeAdapter
 } from "./chunk-J64TK33U.js";
@@ -7,9 +10,6 @@ import {
 import {
   HermesAdapter
 } from "./chunk-42NQ7AVG.js";
-import {
-  ReplitAdapter
-} from "./chunk-TMSXWOBZ.js";
 
 // src/adapters/registry.ts
 var AdapterRegistry = class {
@@ -53,4 +53,4 @@ var AdapterRegistry = class {
 export {
   AdapterRegistry
 };
-//# sourceMappingURL=chunk-RKNJBZ55.js.map
+//# sourceMappingURL=chunk-JBPKEARU.js.map

package/dist/{chunk-HWWGPS2N.js → chunk-JNZSNJ43.js}

@@ -1,7 +1,7 @@
 import {
   SUPPORT_PASSPORT_DRAFT_MAX_CONTENT_CHARACTERS,
   SUPPORT_PASSPORT_DRAFT_MAX_MEMORIES
-} from "./chunk-FNYVWAIK.js";
+} from "./chunk-G3B3LP6A.js";
 import {
   SUPPORT_PASSPORT_SOURCE_MEMORY_ID_MAX_LENGTH
 } from "./chunk-EEOUMG3J.js";
@@ -343,4 +343,4 @@ export {
   parseSupportPassportModelJob,
   SupportPassportModelBridge
 };
-//# sourceMappingURL=chunk-HWWGPS2N.js.map
+//# sourceMappingURL=chunk-JNZSNJ43.js.map

package/dist/{chunk-JHU543UU.js → chunk-K6PWPC7O.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-5JMAGU26.js";
 import {
   runPostConsolidationMaterialize
-} from "./chunk-MBDUNO7J.js";
+} from "./chunk-XZ7QLOTJ.js";
 import {
   isSemanticConsolidationLlmOperator
 } from "./chunk-G7D6GZ5J.js";
@@ -220,4 +220,4 @@ export {
   buildExtensionsBlockForConsolidation,
   materializeAfterSemanticConsolidation
 };
-//# sourceMappingURL=chunk-JHU543UU.js.map
+//# sourceMappingURL=chunk-K6PWPC7O.js.map

package/dist/{chunk-JVGBDNXA.js → chunk-KT3ERTF6.js}

@@ -4,7 +4,7 @@ import {
 import {
   computeCorpusWatermarks,
   resolveCorpusNamespaceRoots
-} from "./chunk-47BX23NA.js";
+} from "./chunk-D3AUQXTJ.js";
 
 // src/operator-doctor-corpus.ts
 var DIGEST_PREFIX_LENGTH = 12;
@@ -78,4 +78,4 @@ export {
   corpusWatermarksFromCheck,
   summarizeCorpusAndReplica
 };
-//# sourceMappingURL=chunk-JVGBDNXA.js.map
+//# sourceMappingURL=chunk-KT3ERTF6.js.map

package/dist/{chunk-SOQLXIQX.js → chunk-KWLDB64F.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-B7RWBZXW.js";
 import {
   StorageManager
-} from "./chunk-G775FE2E.js";
+} from "./chunk-4PHT7KE2.js";
 import {
   getCachedEpisodeMap,
   setCachedEpisodeMap
@@ -109,4 +109,4 @@ export {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
 };
-//# sourceMappingURL=chunk-SOQLXIQX.js.map
+//# sourceMappingURL=chunk-KWLDB64F.js.map

package/dist/{chunk-7JPKRZD5.js → chunk-LPSTQR26.js}

@@ -23,7 +23,7 @@ import {
 } from "./chunk-7ZNJN5WZ.js";
 import {
   compareEntityTimestamps
-} from "./chunk-G775FE2E.js";
+} from "./chunk-4PHT7KE2.js";
 import {
   normalizeEntityName
 } from "./chunk-YXZG5TVN.js";
@@ -918,4 +918,4 @@ export {
   entityIndexVersion,
   entityRecentTranscriptLookbackHours
 };
-//# sourceMappingURL=chunk-7JPKRZD5.js.map
+//# sourceMappingURL=chunk-LPSTQR26.js.map

package/dist/{chunk-OT7WQ2I3.js → chunk-LTWFU6VJ.js}

@@ -1,6 +1,6 @@
 import {
   StorageManager
-} from "./chunk-G775FE2E.js";
+} from "./chunk-4PHT7KE2.js";
 import {
   keyring_exports,
   secureStoreDir
@@ -412,4 +412,4 @@ export {
   resolveNamespaceStorageRoot,
   NamespaceStorageRouter
 };
-//# sourceMappingURL=chunk-OT7WQ2I3.js.map
+//# sourceMappingURL=chunk-LTWFU6VJ.js.map

package/dist/{chunk-NSP3HFJZ.js → chunk-PVV42HM4.js}

@@ -1,6 +1,6 @@
 import {
   OKF_RESERVED_BASENAMES
-} from "./chunk-G775FE2E.js";
+} from "./chunk-4PHT7KE2.js";
 import {
   MAGIC_BYTES
 } from "./chunk-ET2CNMLD.js";
@@ -96,6 +96,7 @@ function lintOkfDir(memoryDir) {
 }
 
 // src/okf/render.ts
+import { randomUUID } from "crypto";
 import { lstatSync, mkdirSync, readdirSync, renameSync, rmSync, writeFileSync } from "fs";
 import path2 from "path";
 var OKF_EXPORT_VERSION = "0.1";
@@ -143,6 +144,7 @@ function publishBundle(staging, outDir, force) {
   try {
     const stat = lstatSync(outDir);
     if (stat.isSymbolicLink()) throw new Error(`--out must not be a symlink: ${outDir}`);
+    if (!stat.isDirectory()) throw new Error(`--out exists and is not a directory: ${outDir}`);
     exists = true;
     const entries = readdirSync(outDir).filter((name) => name !== "." && name !== "..");
     if (entries.length > 0 && !force) {
@@ -154,7 +156,7 @@ function publishBundle(staging, outDir, force) {
   }
   mkdirSync(path2.dirname(outDir), { recursive: true });
   if (exists && force) {
-    const backup = `${outDir}.okf-prev`;
+    const backup = `${outDir}.okf-prev-${randomUUID().slice(0, 8)}`;
     try {
       renameSync(outDir, backup);
     } catch {
@@ -167,6 +169,7 @@ function publishBundle(staging, outDir, force) {
     } catch (err) {
       try {
         renameSync(backup, outDir);
+        rmSync(staging, { recursive: true, force: true });
       } catch {
       }
       throw err;
@@ -199,4 +202,4 @@ export {
   publishBundle,
   rejectSymlinkPath
 };
-//# sourceMappingURL=chunk-NSP3HFJZ.js.map
+//# sourceMappingURL=chunk-PVV42HM4.js.map

package/dist/chunk-PVV42HM4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/okf/lint.ts","../src/okf/render.ts"],"sourcesContent":["import fs from \"node:fs\";\nimport path from \"node:path\";\n\nimport { MAGIC_BYTES } from \"../secure-store/secure-fs.js\";\nimport { OKF_RESERVED_BASENAMES } from \"./type-mapping.js\";\n\nexport interface OkfLintFinding {\n  file: string;\n  code: \"missing_frontmatter\" | \"missing_type\" | \"empty_type\" | \"reserved_basename\" | \"skipped_encrypted\";\n  message: string;\n}\n\nexport interface OkfLintResult {\n  ok: boolean;\n  scanned: number;\n  findings: OkfLintFinding[];\n}\n\nfunction isEncryptedBlob(raw: string): boolean {\n  // secure-store writes a binary envelope starting with MAGIC_BYTES at offset\n  // 0 — match that fixed position, never a substring anywhere in the file.\n  return raw.startsWith(MAGIC_BYTES.toString(\"ascii\"));\n}\n\nfunction hasFrontmatter(raw: string): boolean {\n  return raw.startsWith(\"---\\n\") || raw.startsWith(\"---\\r\\n\");\n}\n\nfunction readType(raw: string): string | undefined {\n  const close = raw.indexOf(\"\\n---\", 4);\n  if (close === -1) return undefined;\n  const block = raw.slice(4, close);\n  const match = /^type:[ \\t]*(.*)$/m.exec(block);\n  if (!match) return undefined;\n  const value = match[1]!.trim().replace(/^[\"']|[\"']$/g, \"\");\n  return value;\n}\n\nfunction walkMarkdown(root: string, out: string[]): void {\n  let entries: fs.Dirent[];\n  try {\n    entries = fs.readdirSync(root, { withFileTypes: true });\n  } catch {\n    return;\n  }\n  for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {\n    if (entry.name === \"state\" || entry.name === \".git\") continue;\n    const full = path.join(root, entry.name);\n    let stat: fs.Stats;\n    try {\n      stat = fs.lstatSync(full);\n    } catch {\n      continue;\n    }\n    if (stat.isSymbolicLink()) continue;\n    if (stat.isDirectory()) {\n      walkMarkdown(full, out);\n      continue;\n    }\n    if (stat.isFile() && entry.name.endsWith(\".md\")) out.push(full);\n  }\n}\n\nexport function lintOkfDir(memoryDir: string): OkfLintResult {\n  const files: string[] = [];\n  walkMarkdown(memoryDir, files);\n  const findings: OkfLintFinding[] = [];\n  for (const file of files) {\n    const rel = path.relative(memoryDir, file);\n    const base = path.basename(file);\n    if (OKF_RESERVED_BASENAMES[base] === true) {\n      findings.push({\n        file: rel,\n        code: \"reserved_basename\",\n        message: `${base} is reserved by OKF §6/§7`,\n      });\n      continue;\n    }\n    let raw: string;\n    try {\n      raw = fs.readFileSync(file, \"utf8\");\n    } catch {\n      continue;\n    }\n    if (isEncryptedBlob(raw)) {\n      findings.push({\n        file: rel,\n        code: \"skipped_encrypted\",\n        message: \"skipped (encrypted)\",\n      });\n      continue;\n    }\n    if (!hasFrontmatter(raw)) {\n      findings.push({\n        file: rel,\n        code: \"missing_frontmatter\",\n        message: \"missing YAML frontmatter\",\n      });\n      continue;\n    }\n    const type = readType(raw);\n    if (type === undefined) {\n      findings.push({ file: rel, code: \"missing_type\", message: \"missing type\" });\n    } else if (type.length === 0) {\n      findings.push({ file: rel, code: \"empty_type\", message: \"empty type\" });\n    }\n  }\n  const actionable = findings.filter((f) => f.code !== \"skipped_encrypted\");\n  return { ok: actionable.length === 0, scanned: files.length, findings };\n}\n","/**\n * Shared OKF bundle-rendering helpers (issues #1948 + #1950).\n *\n * One source of truth for the mechanics every OKF bundle exporter uses:\n * deterministic frontmatter rendering, staging-directory file writes, the\n * symlink-guarded atomic publish, and the bundle version stamp. The memory\n * exporter (transfer/export-okf.ts) and the codegraph exporter\n * (coding/export-okf-codegraph.ts) both consume this module so their\n * bundles are byte-compatible in convention (rule 38 — deterministic\n * rendering discipline; rule 9 — stable seam over shared mechanics).\n */\nimport { randomUUID } from \"node:crypto\";\nimport { lstatSync, mkdirSync, readdirSync, renameSync, rmSync, writeFileSync } from \"node:fs\";\nimport path from \"node:path\";\n\n/** OKF spec version emitted in every bundle root index. */\nexport const OKF_EXPORT_VERSION = \"0.1\";\n\n/**\n * Render a YAML frontmatter block from a flat field map.\n *\n * Key order: the canonical OKF keys first (`type`, `title`, `description`,\n * `tags`, `timestamp`), everything else alphabetical — one deterministic\n * layout so identical inputs always render byte-identical files. A key set\n * to `undefined` is omitted; callers must not pass a key twice.\n */\nexport function renderFrontmatter(fields: Record<string, unknown>): string {\n  const keys = Object.keys(fields).sort((a, b) => {\n    const order = [\"type\", \"title\", \"description\", \"tags\", \"timestamp\"];\n    const ai = order.indexOf(a);\n    const bi = order.indexOf(b);\n    if (ai >= 0 || bi >= 0) return (ai < 0 ? 99 : ai) - (bi < 0 ? 99 : bi);\n    return a.localeCompare(b);\n  });\n  const lines = keys.flatMap((key) => yamlLine(key, fields[key]));\n  return `---\\n${lines.join(\"\\n\")}\\n---\\n\\n`;\n}\n\nfunction yamlLine(key: string, value: unknown): string[] {\n  if (value === undefined) return [];\n  if (Array.isArray(value)) {\n    if (value.length === 0) return [`${key}: []`];\n    if (value.every((item) => typeof item !== \"object\" || item === null)) {\n      return [`${key}:`, ...value.map((item) => `  - ${yamlScalar(item)}`)];\n    }\n    return [`${key}: ${JSON.stringify(value)}`];\n  }\n  if (typeof value === \"object\" && value !== null) return [`${key}: ${JSON.stringify(value)}`];\n  return [`${key}: ${yamlScalar(value)}`];\n}\n\nfunction yamlScalar(value: unknown): string {\n  if (typeof value === \"string\") {\n    if (value === \"\" || /[:#\\n]/.test(value) || value !== value.trim()) return JSON.stringify(value);\n    return value;\n  }\n  return String(value);\n}\n\n/**\n * Write one file into a bundle staging tree. `rel` is a POSIX-style\n * bundle-relative path; parent directories are created as needed.\n */\nexport function writeBundleFile(root: string, rel: string, content: string): void {\n  const dest = path.join(root, ...rel.split(\"/\"));\n  mkdirSync(path.dirname(dest), { recursive: true });\n  writeFileSync(dest, content, \"utf8\");\n}\n\n/**\n * Publish a staged bundle: refuse a non-empty target without `--force`,\n * swap via rename so the target is never observed half-written, and keep a\n * restorable backup when replacing an existing tree.\n */\nexport function publishBundle(staging: string, outDir: string, force: boolean): void {\n  let exists = false;\n  try {\n    const stat = lstatSync(outDir);\n    if (stat.isSymbolicLink()) throw new Error(`--out must not be a symlink: ${outDir}`);\n    if (!stat.isDirectory()) throw new Error(`--out exists and is not a directory: ${outDir}`);\n    exists = true;\n    const entries = readdirSync(outDir).filter((name) => name !== \".\" && name !== \"..\");\n    if (entries.length > 0 && !force) {\n      rmSync(staging, { recursive: true, force: true });\n      throw new Error(`--out ${outDir} is not empty; pass --force to replace it`);\n    }\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code !== \"ENOENT\") throw err;\n  }\n  mkdirSync(path.dirname(outDir), { recursive: true });\n  if (exists && force) {\n    // A fixed backup name is not reusable: an earlier crash between the two\n    // renames, or an unrelated directory a user created, leaves the path\n    // occupied and every later --force export fails on the rename. Each\n    // attempt takes its own name and removes it on both the success and the\n    // rollback path.\n    const backup = `${outDir}.okf-prev-${randomUUID().slice(0, 8)}`;\n    try {\n      renameSync(outDir, backup);\n    } catch {\n      rmSync(staging, { recursive: true, force: true });\n      throw new Error(`cannot replace --out ${outDir}`);\n    }\n    try {\n      renameSync(staging, outDir);\n      rmSync(backup, { recursive: true, force: true });\n    } catch (err) {\n      try {\n        renameSync(backup, outDir);\n        rmSync(staging, { recursive: true, force: true });\n      } catch {\n        // Keep the backup when the restore itself fails: it is the only\n        // surviving copy of the operator's previous bundle.\n      }\n      throw err;\n    }\n    return;\n  }\n  renameSync(staging, outDir);\n}\n\n/**\n * Reject a --out path with a symlink anywhere in its component chain\n * (pattern 42 + hermes-shim precedent): a symlinked component could aim\n * the atomic rename outside the operator's chosen directory.\n */\nexport function rejectSymlinkPath(target: string): void {\n  let current = path.resolve(target);\n  while (true) {\n    try {\n      if (lstatSync(current).isSymbolicLink()) {\n        throw new Error(`--out path component is a symlink: ${current}`);\n      }\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException).code !== \"ENOENT\") throw err;\n    }\n    const parent = path.dirname(current);\n    if (parent === current) break;\n    current = parent;\n  }\n}\n\n"],"mappings":";;;;;;;;AAAA,OAAO,QAAQ;AACf,OAAO,UAAU;AAiBjB,SAAS,gBAAgB,KAAsB;AAG7C,SAAO,IAAI,WAAW,YAAY,SAAS,OAAO,CAAC;AACrD;AAEA,SAAS,eAAe,KAAsB;AAC5C,SAAO,IAAI,WAAW,OAAO,KAAK,IAAI,WAAW,SAAS;AAC5D;AAEA,SAAS,SAAS,KAAiC;AACjD,QAAM,QAAQ,IAAI,QAAQ,SAAS,CAAC;AACpC,MAAI,UAAU,GAAI,QAAO;AACzB,QAAM,QAAQ,IAAI,MAAM,GAAG,KAAK;AAChC,QAAM,QAAQ,qBAAqB,KAAK,KAAK;AAC7C,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,MAAM,CAAC,EAAG,KAAK,EAAE,QAAQ,gBAAgB,EAAE;AACzD,SAAO;AACT;AAEA,SAAS,aAAa,MAAc,KAAqB;AACvD,MAAI;AACJ,MAAI;AACF,cAAU,GAAG,YAAY,MAAM,EAAE,eAAe,KAAK,CAAC;AAAA,EACxD,QAAQ;AACN;AAAA,EACF;AACA,aAAW,SAAS,QAAQ,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC,GAAG;AACxE,QAAI,MAAM,SAAS,WAAW,MAAM,SAAS,OAAQ;AACrD,UAAM,OAAO,KAAK,KAAK,MAAM,MAAM,IAAI;AACvC,QAAI;AACJ,QAAI;AACF,aAAO,GAAG,UAAU,IAAI;AAAA,IAC1B,QAAQ;AACN;AAAA,IACF;AACA,QAAI,KAAK,eAAe,EAAG;AAC3B,QAAI,KAAK,YAAY,GAAG;AACtB,mBAAa,MAAM,GAAG;AACtB;AAAA,IACF;AACA,QAAI,KAAK,OAAO,KAAK,MAAM,KAAK,SAAS,KAAK,EAAG,KAAI,KAAK,IAAI;AAAA,EAChE;AACF;AAEO,SAAS,WAAW,WAAkC;AAC3D,QAAM,QAAkB,CAAC;AACzB,eAAa,WAAW,KAAK;AAC7B,QAAM,WAA6B,CAAC;AACpC,aAAW,QAAQ,OAAO;AACxB,UAAM,MAAM,KAAK,SAAS,WAAW,IAAI;AACzC,UAAM,OAAO,KAAK,SAAS,IAAI;AAC/B,QAAI,uBAAuB,IAAI,MAAM,MAAM;AACzC,eAAS,KAAK;AAAA,QACZ,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS,GAAG,IAAI;AAAA,MAClB,CAAC;AACD;AAAA,IACF;AACA,QAAI;AACJ,QAAI;AACF,YAAM,GAAG,aAAa,MAAM,MAAM;AAAA,IACpC,QAAQ;AACN;AAAA,IACF;AACA,QAAI,gBAAgB,GAAG,GAAG;AACxB,eAAS,KAAK;AAAA,QACZ,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AACD;AAAA,IACF;AACA,QAAI,CAAC,eAAe,GAAG,GAAG;AACxB,eAAS,KAAK;AAAA,QACZ,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AACD;AAAA,IACF;AACA,UAAM,OAAO,SAAS,GAAG;AACzB,QAAI,SAAS,QAAW;AACtB,eAAS,KAAK,EAAE,MAAM,KAAK,MAAM,gBAAgB,SAAS,eAAe,CAAC;AAAA,IAC5E,WAAW,KAAK,WAAW,GAAG;AAC5B,eAAS,KAAK,EAAE,MAAM,KAAK,MAAM,cAAc,SAAS,aAAa,CAAC;AAAA,IACxE;AAAA,EACF;AACA,QAAM,aAAa,SAAS,OAAO,CAAC,MAAM,EAAE,SAAS,mBAAmB;AACxE,SAAO,EAAE,IAAI,WAAW,WAAW,GAAG,SAAS,MAAM,QAAQ,SAAS;AACxE;;;AClGA,SAAS,kBAAkB;AAC3B,SAAS,WAAW,WAAW,aAAa,YAAY,QAAQ,qBAAqB;AACrF,OAAOA,WAAU;AAGV,IAAM,qBAAqB;AAU3B,SAAS,kBAAkB,QAAyC;AACzE,QAAM,OAAO,OAAO,KAAK,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM;AAC9C,UAAM,QAAQ,CAAC,QAAQ,SAAS,eAAe,QAAQ,WAAW;AAClE,UAAM,KAAK,MAAM,QAAQ,CAAC;AAC1B,UAAM,KAAK,MAAM,QAAQ,CAAC;AAC1B,QAAI,MAAM,KAAK,MAAM,EAAG,SAAQ,KAAK,IAAI,KAAK,OAAO,KAAK,IAAI,KAAK;AACnE,WAAO,EAAE,cAAc,CAAC;AAAA,EAC1B,CAAC;AACD,QAAM,QAAQ,KAAK,QAAQ,CAAC,QAAQ,SAAS,KAAK,OAAO,GAAG,CAAC,CAAC;AAC9D,SAAO;AAAA,EAAQ,MAAM,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA;AACjC;AAEA,SAAS,SAAS,KAAa,OAA0B;AACvD,MAAI,UAAU,OAAW,QAAO,CAAC;AACjC,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,QAAI,MAAM,WAAW,EAAG,QAAO,CAAC,GAAG,GAAG,MAAM;AAC5C,QAAI,MAAM,MAAM,CAAC,SAAS,OAAO,SAAS,YAAY,SAAS,IAAI,GAAG;AACpE,aAAO,CAAC,GAAG,GAAG,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,OAAO,WAAW,IAAI,CAAC,EAAE,CAAC;AAAA,IACtE;AACA,WAAO,CAAC,GAAG,GAAG,KAAK,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,EAC5C;AACA,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO,CAAC,GAAG,GAAG,KAAK,KAAK,UAAU,KAAK,CAAC,EAAE;AAC3F,SAAO,CAAC,GAAG,GAAG,KAAK,WAAW,KAAK,CAAC,EAAE;AACxC;AAEA,SAAS,WAAW,OAAwB;AAC1C,MAAI,OAAO,UAAU,UAAU;AAC7B,QAAI,UAAU,MAAM,SAAS,KAAK,KAAK,KAAK,UAAU,MAAM,KAAK,EAAG,QAAO,KAAK,UAAU,KAAK;AAC/F,WAAO;AAAA,EACT;AACA,SAAO,OAAO,KAAK;AACrB;AAMO,SAAS,gBAAgB,MAAc,KAAa,SAAuB;AAChF,QAAM,OAAOA,MAAK,KAAK,MAAM,GAAG,IAAI,MAAM,GAAG,CAAC;AAC9C,YAAUA,MAAK,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AACjD,gBAAc,MAAM,SAAS,MAAM;AACrC;AAOO,SAAS,cAAc,SAAiB,QAAgB,OAAsB;AACnF,MAAI,SAAS;AACb,MAAI;AACF,UAAM,OAAO,UAAU,MAAM;AAC7B,QAAI,KAAK,eAAe,EAAG,OAAM,IAAI,MAAM,gCAAgC,MAAM,EAAE;AACnF,QAAI,CAAC,KAAK,YAAY,EAAG,OAAM,IAAI,MAAM,wCAAwC,MAAM,EAAE;AACzF,aAAS;AACT,UAAM,UAAU,YAAY,MAAM,EAAE,OAAO,CAAC,SAAS,SAAS,OAAO,SAAS,IAAI;AAClF,QAAI,QAAQ,SAAS,KAAK,CAAC,OAAO;AAChC,aAAO,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAChD,YAAM,IAAI,MAAM,SAAS,MAAM,2CAA2C;AAAA,IAC5E;AAAA,EACF,SAAS,KAAK;AACZ,QAAK,IAA8B,SAAS,SAAU,OAAM;AAAA,EAC9D;AACA,YAAUA,MAAK,QAAQ,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;AACnD,MAAI,UAAU,OAAO;AAMnB,UAAM,SAAS,GAAG,MAAM,aAAa,WAAW,EAAE,MAAM,GAAG,CAAC,CAAC;AAC7D,QAAI;AACF,iBAAW,QAAQ,MAAM;AAAA,IAC3B,QAAQ;AACN,aAAO,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAChD,YAAM,IAAI,MAAM,wBAAwB,MAAM,EAAE;AAAA,IAClD;AACA,QAAI;AACF,iBAAW,SAAS,MAAM;AAC1B,aAAO,QAAQ,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,IACjD,SAAS,KAAK;AACZ,UAAI;AACF,mBAAW,QAAQ,MAAM;AACzB,eAAO,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,MAClD,QAAQ;AAAA,MAGR;AACA,YAAM;AAAA,IACR;AACA;AAAA,EACF;AACA,aAAW,SAAS,MAAM;AAC5B;AAOO,SAAS,kBAAkB,QAAsB;AACtD,MAAI,UAAUA,MAAK,QAAQ,MAAM;AACjC,SAAO,MAAM;AACX,QAAI;AACF,UAAI,UAAU,OAAO,EAAE,eAAe,GAAG;AACvC,cAAM,IAAI,MAAM,sCAAsC,OAAO,EAAE;AAAA,MACjE;AAAA,IACF,SAAS,KAAK;AACZ,UAAK,IAA8B,SAAS,SAAU,OAAM;AAAA,IAC9D;AACA,UAAM,SAASA,MAAK,QAAQ,OAAO;AACnC,QAAI,WAAW,QAAS;AACxB,cAAU;AAAA,EACZ;AACF;","names":["path"]}

package/dist/{chunk-TWMGWLHD.js → chunk-PWVRMD37.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-N4F7ZSSG.js";
 import {
   StorageManager
-} from "./chunk-G775FE2E.js";
+} from "./chunk-4PHT7KE2.js";
 import {
   parseContinuityImprovementLoops
 } from "./chunk-LDXUBPMO.js";
@@ -1283,4 +1283,4 @@ export {
   defaultTierMigrationCycleBudget,
   CompoundingEngine
 };
-//# sourceMappingURL=chunk-TWMGWLHD.js.map
+//# sourceMappingURL=chunk-PWVRMD37.js.map

package/dist/{chunk-AAJK3PZ6.js → chunk-QB66LBXA.js}

@@ -1,6 +1,6 @@
 import {
   parseEntityFile
-} from "./chunk-G775FE2E.js";
+} from "./chunk-4PHT7KE2.js";
 import {
   inferMemoryStatus
 } from "./chunk-7RJUVTVF.js";
@@ -253,4 +253,4 @@ export {
   WHO_KNOWS_MCP_TOOLS,
   handleWhoKnowsHttpQuery
 };
-//# sourceMappingURL=chunk-AAJK3PZ6.js.map
+//# sourceMappingURL=chunk-QB66LBXA.js.map

package/dist/{chunk-XVNDP3RO.js → chunk-QKTGCL6M.js}

@@ -1,7 +1,7 @@
 import {
   SupportPassportError,
   getOperation
-} from "./chunk-FNYVWAIK.js";
+} from "./chunk-G3B3LP6A.js";
 import {
   abortError,
   isAbortError
@@ -499,4 +499,4 @@ export {
   buildSupportPassportPublicRequestHandler,
   composeSupportPassportExternalRequestHandlers
 };
-//# sourceMappingURL=chunk-XVNDP3RO.js.map
+//# sourceMappingURL=chunk-QKTGCL6M.js.map

package/dist/{chunk-LTDN5WYF.js → chunk-S47XNAWD.js}

@@ -1,6 +1,6 @@
 import {
   parseFrontmatter
-} from "./chunk-G775FE2E.js";
+} from "./chunk-4PHT7KE2.js";
 import {
   activityDigestPath,
   isValidActivityDate
@@ -199,4 +199,4 @@ export {
   buildStandup,
   standupHelp
 };
-//# sourceMappingURL=chunk-LTDN5WYF.js.map
+//# sourceMappingURL=chunk-S47XNAWD.js.map

package/dist/{chunk-IBHUZEKL.js → chunk-SQEIPTDV.js}

@@ -1,6 +1,6 @@
 import {
   StorageManager
-} from "./chunk-G775FE2E.js";
+} from "./chunk-4PHT7KE2.js";
 import {
   composeMemoryEnvelope
 } from "./chunk-WKAXBXVA.js";
@@ -546,4 +546,4 @@ export {
   setSemanticRulePromotionTestHooks,
   promoteSemanticRuleFromMemory
 };
-//# sourceMappingURL=chunk-IBHUZEKL.js.map
+//# sourceMappingURL=chunk-SQEIPTDV.js.map

package/dist/{chunk-J67E4JNT.js → chunk-TGKLVAML.js}

@@ -1,6 +1,6 @@
 import {
   resolveCorpusNamespaceRoots
-} from "./chunk-47BX23NA.js";
+} from "./chunk-D3AUQXTJ.js";
 import {
   capabilityAllowsNamespace
 } from "./chunk-MZWSOLMT.js";
@@ -200,4 +200,4 @@ async function readAggregateExtractionWatermark(options) {
 export {
   readAggregateExtractionWatermark
 };
-//# sourceMappingURL=chunk-J67E4JNT.js.map
+//# sourceMappingURL=chunk-TGKLVAML.js.map

package/dist/{chunk-VCYY7XEL.js → chunk-TS37MXC7.js}

@@ -1,7 +1,7 @@
 import {
   SupportPassportCreateGrantRequestSchema,
   defineOperation
-} from "./chunk-FNYVWAIK.js";
+} from "./chunk-G3B3LP6A.js";
 import {
   SupportPassportCardCategorySchema,
   SupportPassportMemoryIdSchema,
@@ -220,4 +220,4 @@ var supportPassportGrantAskOperation = defineOperation({
     result: await ctx.service.supportPassportAskGrant(grantId, secret, question, ctx.abortSignal)
   })
 });
-//# sourceMappingURL=chunk-VCYY7XEL.js.map
+//# sourceMappingURL=chunk-TS37MXC7.js.map