@remnic/core 9.69.10 → 9.69.12

package/dist/{chunk-FJMIQTMH.js → chunk-5YQ7RFSO.js}

@@ -1,6 +1,6 @@
 import {
   isNamespaceKind
-} from "./chunk-Y3BWCIY2.js";
+} from "./chunk-2EHDPHMD.js";
 import {
   EngramAccessInputError
 } from "./chunk-2Z24E5W2.js";
@@ -40,4 +40,4 @@ export {
   positiveIntQueryParam,
   optionalNamespaceKindQueryParam
 };
-//# sourceMappingURL=chunk-FJMIQTMH.js.map
+//# sourceMappingURL=chunk-5YQ7RFSO.js.map

package/dist/{chunk-KQAFEZQX.js → chunk-7LCGFUMB.js}

@@ -1,12 +1,12 @@
+import {
+  encryptCapsuleFile
+} from "./chunk-X7Y7WX73.js";
 import {
   CAPSULE_ID_PATTERN,
   CapsuleBlockSchema,
   ExportBundleV2Schema,
   ExportManifestV2Schema
 } from "./chunk-WEHSQBFR.js";
-import {
-  encryptCapsuleFile
-} from "./chunk-X7Y7WX73.js";
 import {
   CAPSULE_SCHEMA_VERSION,
   EXPORT_FORMAT
@@ -261,4 +261,4 @@ export {
   exportCapsule,
   isValidCapsuleSince
 };
-//# sourceMappingURL=chunk-KQAFEZQX.js.map
+//# sourceMappingURL=chunk-7LCGFUMB.js.map

package/dist/{chunk-EESYTBXV.js → chunk-7NCUHD5U.js}

@@ -1,6 +1,6 @@
 import {
   parseFrontmatter
-} from "./chunk-GS5IFIVE.js";
+} from "./chunk-VYD63IFH.js";
 import {
   activityDigestPath,
   isValidActivityDate
@@ -199,4 +199,4 @@ export {
   buildStandup,
   standupHelp
 };
-//# sourceMappingURL=chunk-EESYTBXV.js.map
+//# sourceMappingURL=chunk-7NCUHD5U.js.map

package/dist/{chunk-X574KX52.js → chunk-7ZMU4XQT.js}

@@ -4,7 +4,7 @@ import {
 import {
   computeCorpusWatermarks,
   resolveCorpusNamespaceRoots
-} from "./chunk-I6DURYZI.js";
+} from "./chunk-XMIAU4CO.js";
 
 // src/operator-doctor-corpus.ts
 var DIGEST_PREFIX_LENGTH = 12;
@@ -78,4 +78,4 @@ export {
   corpusWatermarksFromCheck,
   summarizeCorpusAndReplica
 };
-//# sourceMappingURL=chunk-X574KX52.js.map
+//# sourceMappingURL=chunk-7ZMU4XQT.js.map

package/dist/{chunk-SG3Z67FB.js → chunk-APZXA4WI.js}

@@ -1,6 +1,6 @@
 import {
   StorageManager
-} from "./chunk-GS5IFIVE.js";
+} from "./chunk-VYD63IFH.js";
 import {
   getCachedRuleMemories,
   setCachedRuleMemories
@@ -119,4 +119,4 @@ export {
   compareVerifiedSemanticRuleResults,
   searchVerifiedSemanticRules
 };
-//# sourceMappingURL=chunk-SG3Z67FB.js.map
+//# sourceMappingURL=chunk-APZXA4WI.js.map

package/dist/{chunk-2QSZNTDO.js → chunk-AU7Q3LSC.js}

@@ -1,6 +1,3 @@
-import {
-  CodexAdapter
-} from "./chunk-RSUYKGGZ.js";
 import {
   HermesAdapter
 } from "./chunk-42NQ7AVG.js";
@@ -10,6 +7,9 @@ import {
 import {
   ClaudeCodeAdapter
 } from "./chunk-J64TK33U.js";
+import {
+  CodexAdapter
+} from "./chunk-RSUYKGGZ.js";
 
 // src/adapters/registry.ts
 var AdapterRegistry = class {
@@ -53,4 +53,4 @@ var AdapterRegistry = class {
 export {
   AdapterRegistry
 };
-//# sourceMappingURL=chunk-2QSZNTDO.js.map
+//# sourceMappingURL=chunk-AU7Q3LSC.js.map

package/dist/{chunk-VGMRI4J6.js → chunk-B75VCEX5.js}

@@ -37,14 +37,14 @@ import {
   classifyExtractionThrownError,
   classifyFallbackParseFailure
 } from "./chunk-BLDBT6HZ.js";
+import {
+  delinearize
+} from "./chunk-VEWZZM3H.js";
 import {
   buildExtensionsFooterForSummary,
   formatDaySummaryMemories,
   loadDaySummaryPrompt
 } from "./chunk-LVXBC6YB.js";
-import {
-  delinearize
-} from "./chunk-VEWZZM3H.js";
 import {
   CONSOLIDATION_RESPONSE_SCHEMA,
   CUE_ANCHOR_PROMPT_INSTRUCTION,
@@ -2387,4 +2387,4 @@ export {
   shouldEnableLocalExtractionThinking,
   ExtractionEngine
 };
-//# sourceMappingURL=chunk-VGMRI4J6.js.map
+//# sourceMappingURL=chunk-B75VCEX5.js.map

package/dist/{chunk-D35XLYQ7.js → chunk-BE4Y6GK6.js}

@@ -1,24 +1,24 @@
-import {
-  RemoteSearchBackend
-} from "./chunk-YQNNHLCG.js";
-import {
-  EmbedHelper
-} from "./chunk-6KTXE6A3.js";
 import {
   LanceDbBackend
-} from "./chunk-RACZB5HT.js";
+} from "./chunk-N37X5RU7.js";
 import {
   MeilisearchBackend
-} from "./chunk-AG46P24C.js";
+} from "./chunk-NNBZS3DY.js";
 import {
   NoopSearchBackend
 } from "./chunk-CYEPCZN5.js";
 import {
   OramaBackend
-} from "./chunk-XZBXINXZ.js";
+} from "./chunk-GIC6BASP.js";
+import {
+  RemoteSearchBackend
+} from "./chunk-YQNNHLCG.js";
+import {
+  EmbedHelper
+} from "./chunk-6KTXE6A3.js";
 import {
   createConversationIndexBackend
-} from "./chunk-227UFSEQ.js";
+} from "./chunk-LEPOP46W.js";
 import {
   FaissConversationIndexAdapter
 } from "./chunk-ET356KSB.js";
@@ -179,4 +179,4 @@ export {
   createConversationSearchBackend,
   createConversationIndexRuntime
 };
-//# sourceMappingURL=chunk-D35XLYQ7.js.map
+//# sourceMappingURL=chunk-BE4Y6GK6.js.map

package/dist/{chunk-ELKD5PCD.js → chunk-BEXFNGQ3.js}

@@ -7,10 +7,10 @@ import {
 import {
   listMemoryGovernanceRuns,
   readMemoryGovernanceRunArtifact
-} from "./chunk-DZ3CNJPB.js";
+} from "./chunk-LDOQE34V.js";
 import {
   StorageManager
-} from "./chunk-GS5IFIVE.js";
+} from "./chunk-VYD63IFH.js";
 import {
   normalizeProjectionPreview,
   normalizeProjectionTags
@@ -1005,4 +1005,4 @@ export {
   verifyMemoryProjection,
   repairMemoryProjection
 };
-//# sourceMappingURL=chunk-ELKD5PCD.js.map
+//# sourceMappingURL=chunk-BEXFNGQ3.js.map

package/dist/{chunk-U5SRTYFS.js → chunk-BFDOBESV.js}

@@ -1,6 +1,6 @@
 import {
   StorageManager
-} from "./chunk-GS5IFIVE.js";
+} from "./chunk-VYD63IFH.js";
 import {
   composeMemoryEnvelope
 } from "./chunk-WKAXBXVA.js";
@@ -546,4 +546,4 @@ export {
   setSemanticRulePromotionTestHooks,
   promoteSemanticRuleFromMemory
 };
-//# sourceMappingURL=chunk-U5SRTYFS.js.map
+//# sourceMappingURL=chunk-BFDOBESV.js.map

package/dist/{chunk-OLT3YTDH.js → chunk-BIJAWZYW.js}

@@ -1,6 +1,3 @@
-import {
-  emitGraphEvent
-} from "./chunk-DEUNUKTD.js";
 import {
   ActivationPathTracker,
   compareActivationPathCandidates,
@@ -9,6 +6,9 @@ import {
 import {
   readEdgeConfidence
 } from "./chunk-2LSZVONP.js";
+import {
+  emitGraphEvent
+} from "./chunk-DEUNUKTD.js";
 
 // src/graph.ts
 import { appendFile, mkdir, readFile, stat } from "fs/promises";
@@ -745,4 +745,4 @@ export {
   applyPageRankRefinement,
   applyLateralInhibition
 };
-//# sourceMappingURL=chunk-OLT3YTDH.js.map
+//# sourceMappingURL=chunk-BIJAWZYW.js.map

package/dist/{chunk-FU2NYFX6.js → chunk-BO4PWIJY.js}

@@ -1,9 +1,9 @@
 import {
   hasMemoryData
-} from "./chunk-Y3BWCIY2.js";
+} from "./chunk-2EHDPHMD.js";
 import {
   resolveNamespaceStorageRoot
-} from "./chunk-NGP2FPB2.js";
+} from "./chunk-4UVDLNHQ.js";
 import {
   getConfiguredNamespaces
 } from "./chunk-EGALNSZ4.js";
@@ -724,4 +724,4 @@ export {
   runNamespaceMaintenancePlan,
   runNamespaceMaintenanceBatchPlan
 };
-//# sourceMappingURL=chunk-FU2NYFX6.js.map
+//# sourceMappingURL=chunk-BO4PWIJY.js.map

package/dist/{chunk-JMAG7WZ7.js → chunk-BX6GW4KC.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-B7RWBZXW.js";
 import {
   resolveCausalTrajectoryStoreDir
-} from "./chunk-2Z3DG5CQ.js";
+} from "./chunk-P6GKRT2H.js";
 import {
   normalizeRecallTokens
 } from "./chunk-YCVB7X56.js";
@@ -339,4 +339,4 @@ export {
   scoreStitchCandidate,
   stitchCausalChain
 };
-//# sourceMappingURL=chunk-JMAG7WZ7.js.map
+//# sourceMappingURL=chunk-BX6GW4KC.js.map

package/dist/chunk-CC37E3QM.js

@@ -0,0 +1,198 @@
+// src/shared-context/governance.ts
+var SHARED_AUTHORITIES = ["informational", "advisory", "binding"];
+function isSharedAuthority(value) {
+  return SHARED_AUTHORITIES.includes(value);
+}
+function optionalString(value) {
+  if (typeof value !== "string") return void 0;
+  const trimmed = value.trim();
+  return trimmed.length > 0 ? trimmed : void 0;
+}
+function readExactAuthority(value) {
+  if (typeof value !== "string" || value.length === 0) return { kind: "absent" };
+  if (!isSharedAuthority(value)) return { kind: "invalid", raw: value };
+  return { kind: "valid", authority: value };
+}
+function withOptionalFields(authority, source) {
+  const envelope = { authority };
+  const sharedBy = optionalString(source.sharedBy);
+  const expiresAt = optionalString(source.expiresAt);
+  const supersedes = optionalString(source.supersedes);
+  if (sharedBy) envelope.sharedBy = sharedBy;
+  if (expiresAt) envelope.expiresAt = expiresAt;
+  if (supersedes) envelope.supersedes = supersedes;
+  return envelope;
+}
+function applyDefaultEnvelope(input = {}, options = {}) {
+  const requested = readExactAuthority(input.authority);
+  if (requested.kind === "invalid") {
+    throw new Error(
+      `applyDefaultEnvelope: authority must be informational, advisory, or binding; got ${JSON.stringify(requested.raw)}`
+    );
+  }
+  if (requested.kind === "valid" && requested.authority === "binding" && options.binding !== true) {
+    throw new Error('applyDefaultEnvelope: authority "binding" requires an explicit binding flag');
+  }
+  return withOptionalFields(requested.kind === "valid" ? requested.authority : "informational", input);
+}
+function parseSharedEnvelope(raw) {
+  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
+    return { authority: "informational" };
+  }
+  const record = raw;
+  const requested = readExactAuthority(record.authority);
+  const authority = requested.kind === "valid" ? requested.authority : "informational";
+  return withOptionalFields(authority, record);
+}
+
+// src/shared-context/authority-precedence.ts
+function isKnownAuthority(value) {
+  return SHARED_AUTHORITIES.includes(value);
+}
+function resolveSharedAuthority(input) {
+  const allowBinding = input.allowBinding;
+  if (allowBinding !== void 0 && typeof allowBinding !== "boolean") {
+    throw new TypeError(
+      `resolveSharedAuthority: allowBinding must be a boolean when supplied, got ${typeof allowBinding}`
+    );
+  }
+  const authority = input.authority;
+  if (typeof authority !== "string") return "informational";
+  if (!isKnownAuthority(authority)) return "informational";
+  if (authority === "binding" && allowBinding !== true) {
+    return "advisory";
+  }
+  return authority;
+}
+
+// src/shared-context/envelope-actor.ts
+function parseEnvelopeActor(value) {
+  const actor = value.trim();
+  if (actor.length === 0) return { ok: false, error: "missing_actor" };
+  if (actor.includes("\n")) return { ok: false, error: "invalid_actor" };
+  return { ok: true, actor };
+}
+
+// src/shared-context/iso-instant.ts
+var ISO_INSTANT = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.\d+)?(?:Z|[+-]\d{2}:\d{2})$/;
+function isStrictIsoInstant(value) {
+  if (typeof value !== "string") return false;
+  const match = ISO_INSTANT.exec(value);
+  if (!match) return false;
+  const year = Number(match[1]);
+  const month = Number(match[2]);
+  const day = Number(match[3]);
+  const hour = Number(match[4]);
+  const minute = Number(match[5]);
+  const second = Number(match[6]);
+  const utc = new Date(Date.UTC(year, month - 1, day, hour, minute, second));
+  return Number.isFinite(Date.parse(value)) && utc.getUTCFullYear() === year && utc.getUTCMonth() === month - 1 && utc.getUTCDate() === day && utc.getUTCHours() === hour && utc.getUTCMinutes() === minute && utc.getUTCSeconds() === second;
+}
+
+// src/shared-context/envelope-at.ts
+function parseEnvelopeAt(value) {
+  if (typeof value !== "string") return { ok: false, error: "invalid_at" };
+  if (value.trim().length === 0) return { ok: false, error: "missing_at" };
+  if (!isStrictIsoInstant(value)) return { ok: false, error: "invalid_at" };
+  return { ok: true, at: new Date(Date.parse(value)).toISOString() };
+}
+
+// src/shared-context/envelope-id.ts
+function parseEnvelopeId(value) {
+  const id = value.trim();
+  if (id.length === 0) return { ok: false, error: "missing_id" };
+  if (id.includes("\n")) return { ok: false, error: "invalid_id" };
+  return { ok: true, id };
+}
+
+// src/shared-context/envelope-io.ts
+function requireEnvelopeActor(agentId) {
+  const parsed = parseEnvelopeActor(agentId);
+  if (!parsed.ok) {
+    throw new Error(`composeWriteEnvelope: agentId must be a non-blank single-line string (${parsed.error})`);
+  }
+  return parsed.actor;
+}
+function optionalEnvelopeAt(expiresAt) {
+  if (expiresAt === void 0) return void 0;
+  const parsed = parseEnvelopeAt(expiresAt);
+  if (!parsed.ok) {
+    throw new Error(`composeWriteEnvelope: expiresAt must be a valid ISO-8601 timestamp (${parsed.error})`);
+  }
+  return parsed.at;
+}
+function optionalEnvelopeId(supersedes) {
+  if (supersedes === void 0) return void 0;
+  const parsed = parseEnvelopeId(supersedes);
+  if (!parsed.ok) {
+    throw new Error(`composeWriteEnvelope: supersedes must be a non-blank single-line id (${parsed.error})`);
+  }
+  return parsed.id;
+}
+var UNATTRIBUTED_ACCESS_WRITE_ORIGIN = "unattributed:access-surface";
+function resolveWriteOrigin(input) {
+  const identity = input.authenticatedIdentity?.trim() ?? "";
+  if (identity.length > 0) {
+    const requested = input.agentId.trim();
+    if (requested.length > 0 && requested !== identity) {
+      throw new Error(
+        `shared-context write origin mismatch: authenticated identity ${JSON.stringify(identity)} cannot publish as ${JSON.stringify(requested)}`
+      );
+    }
+    return { agent: identity, origin: identity };
+  }
+  const unattributed = input.unattributedOrigin?.trim() ?? "";
+  if (unattributed.length > 0) {
+    const label = input.agentId.trim();
+    return {
+      agent: label.length > 0 ? requireProducer(label) : requireProducer(unattributed),
+      origin: requireProducer(unattributed)
+    };
+  }
+  const actor = requireProducer(input.agentId);
+  return { agent: actor, origin: actor };
+}
+function requireProducer(value) {
+  const parsed = parseEnvelopeActor(value);
+  if (!parsed.ok) {
+    throw new Error(`shared-context write producer must be a non-blank single-line string (${parsed.error})`);
+  }
+  return parsed.actor;
+}
+function composeWriteEnvelope(input) {
+  const sharedBy = requireEnvelopeActor(input.origin);
+  const expiresAt = optionalEnvelopeAt(input.expiresAt);
+  const supersedes = optionalEnvelopeId(input.supersedes);
+  return applyDefaultEnvelope(
+    { sharedBy, authority: input.authority, expiresAt, supersedes },
+    { binding: input.allowBinding }
+  );
+}
+function envelopeToFrontmatterLines(envelope) {
+  const line = (key, value) => `${key}: ${JSON.stringify(value)}`;
+  const lines = [line("sharedBy", envelope.sharedBy ?? ""), line("authority", envelope.authority)];
+  if (envelope.expiresAt !== void 0) lines.push(line("expiresAt", envelope.expiresAt));
+  if (envelope.supersedes !== void 0) lines.push(line("supersedes", envelope.supersedes));
+  return lines;
+}
+function envelopeFromScalars(scalars) {
+  const record = {};
+  if (scalars.sharedBy !== null) record.sharedBy = scalars.sharedBy;
+  if (scalars.authority !== null) record.authority = scalars.authority;
+  if (scalars.expiresAt !== null) record.expiresAt = scalars.expiresAt;
+  if (scalars.supersedes !== null) record.supersedes = scalars.supersedes;
+  return parseSharedEnvelope(record);
+}
+function resolveReadAuthority(envelope, allowBinding) {
+  return resolveSharedAuthority({ authority: envelope.authority, allowBinding });
+}
+
+export {
+  UNATTRIBUTED_ACCESS_WRITE_ORIGIN,
+  resolveWriteOrigin,
+  composeWriteEnvelope,
+  envelopeToFrontmatterLines,
+  envelopeFromScalars,
+  resolveReadAuthority
+};
+//# sourceMappingURL=chunk-CC37E3QM.js.map

package/dist/chunk-CC37E3QM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/shared-context/governance.ts","../src/shared-context/authority-precedence.ts","../src/shared-context/envelope-actor.ts","../src/shared-context/iso-instant.ts","../src/shared-context/envelope-at.ts","../src/shared-context/envelope-id.ts","../src/shared-context/envelope-io.ts"],"sourcesContent":["/**\n * Shared-item authority envelope (issue #1957).\n *\n * Pure parse/default/expiry helpers over the authority classes. Binding is\n * never inferred, and the authority token is validated exactly as supplied\n * or stored — a padded value never resolves to a privileged class.\n */\n\nexport const SHARED_AUTHORITIES = [\"informational\", \"advisory\", \"binding\"] as const;\nexport type SharedAuthority = (typeof SHARED_AUTHORITIES)[number];\n\nexport interface SharedEnvelope {\n  sharedBy?: string;\n  authority: SharedAuthority;\n  expiresAt?: string;\n  supersedes?: string;\n}\n\nexport interface SharedEnvelopeInput {\n  sharedBy?: string;\n  authority?: string;\n  expiresAt?: string;\n  supersedes?: string;\n}\n\nexport interface ApplyDefaultEnvelopeOptions {\n  binding?: boolean;\n}\n\nfunction isSharedAuthority(value: string): value is SharedAuthority {\n  return (SHARED_AUTHORITIES as readonly string[]).includes(value);\n}\n\nfunction optionalString(value: unknown): string | undefined {\n  if (typeof value !== \"string\") return undefined;\n  const trimmed = value.trim();\n  return trimmed.length > 0 ? trimmed : undefined;\n}\n\ntype AuthorityToken =\n  | { kind: \"absent\" }\n  | { kind: \"invalid\"; raw: string }\n  | { kind: \"valid\"; authority: SharedAuthority };\n\n/**\n * Read the authority token EXACTLY as supplied or stored. A padded value\n * such as `\" binding \"` is malformed data, never a normalized match for a\n * privileged class: trimming first would let stored whitespace resolve as\n * binding/advisory (AGENTS.md rule 45). Only the empty string counts as\n * \"unspecified\"; whitespace-only is invalid.\n */\nfunction readExactAuthority(value: unknown): AuthorityToken {\n  if (typeof value !== \"string\" || value.length === 0) return { kind: \"absent\" };\n  if (!isSharedAuthority(value)) return { kind: \"invalid\", raw: value };\n  return { kind: \"valid\", authority: value };\n}\n\nfunction withOptionalFields(\n  authority: SharedAuthority,\n  source: { sharedBy?: unknown; expiresAt?: unknown; supersedes?: unknown },\n): SharedEnvelope {\n  const envelope: SharedEnvelope = { authority };\n  const sharedBy = optionalString(source.sharedBy);\n  const expiresAt = optionalString(source.expiresAt);\n  const supersedes = optionalString(source.supersedes);\n  if (sharedBy) envelope.sharedBy = sharedBy;\n  if (expiresAt) envelope.expiresAt = expiresAt;\n  if (supersedes) envelope.supersedes = supersedes;\n  return envelope;\n}\n\nexport function applyDefaultEnvelope(\n  input: SharedEnvelopeInput = {},\n  options: ApplyDefaultEnvelopeOptions = {},\n): SharedEnvelope {\n  const requested = readExactAuthority(input.authority);\n  if (requested.kind === \"invalid\") {\n    throw new Error(\n      `applyDefaultEnvelope: authority must be informational, advisory, or binding; got ${JSON.stringify(requested.raw)}`,\n    );\n  }\n  if (requested.kind === \"valid\" && requested.authority === \"binding\" && options.binding !== true) {\n    throw new Error(\"applyDefaultEnvelope: authority \\\"binding\\\" requires an explicit binding flag\");\n  }\n  return withOptionalFields(requested.kind === \"valid\" ? requested.authority : \"informational\", input);\n}\n\nexport function parseSharedEnvelope(raw: unknown): SharedEnvelope {\n  if (typeof raw !== \"object\" || raw === null || Array.isArray(raw)) {\n    return { authority: \"informational\" };\n  }\n  const record = raw as Record<string, unknown>;\n  const requested = readExactAuthority(record.authority);\n  const authority = requested.kind === \"valid\" ? requested.authority : \"informational\";\n  return withOptionalFields(authority, record);\n}\n\nexport function isExpired(envelope: Pick<SharedEnvelope, \"expiresAt\">, nowMs: number): boolean {\n  if (!Number.isFinite(nowMs)) return false;\n  const expiresAt = envelope.expiresAt?.trim();\n  if (!expiresAt) return false;\n  const expiresAtMs = Date.parse(expiresAt);\n  if (!Number.isFinite(expiresAtMs)) return false;\n  return expiresAtMs <= nowMs;\n}\n","/**\n * Shared-item authority precedence (issue #1957).\n *\n * Pure helpers over the authority classes owned by `governance.ts`\n * (`SHARED_AUTHORITIES`). Resolution is least-privilege: an absent,\n * malformed, or unrecognized authority never resolves above\n * `informational`, and `binding` additionally requires the explicit\n * `allowBinding` flag. The helpers are exported for callers; wiring them\n * into the shared-context read and write paths is a later slice.\n */\n\nimport { SHARED_AUTHORITIES, type SharedAuthority } from \"./governance.js\";\n\nexport { SHARED_AUTHORITIES as SHARED_AUTHORITY_CLASSES };\nexport type { SharedAuthority as SharedAuthorityClass };\n\nexport interface ResolveSharedAuthorityInput {\n  /** Raw authority value from an item's envelope, if any. */\n  authority?: unknown;\n  /** Explicit opt-in required before \"binding\" is honored. */\n  allowBinding?: boolean;\n}\n\nconst AUTHORITY_RANK: Readonly<Record<SharedAuthority, number>> = {\n  informational: 0,\n  advisory: 1,\n  binding: 2,\n};\n\nfunction isKnownAuthority(value: string): value is SharedAuthority {\n  return (SHARED_AUTHORITIES as readonly string[]).includes(value);\n}\n\n\nexport function resolveSharedAuthority(input: ResolveSharedAuthorityInput): SharedAuthority {\n  // Read the security switch ONCE. A getter (or a Proxy) can return undefined\n  // during validation and true at the decision, which would let binding\n  // through without a validated opt-in.\n  const allowBinding = input.allowBinding;\n  if (allowBinding !== undefined && typeof allowBinding !== \"boolean\") {\n    // The flag is the security switch, so a truthy string or number must\n    // not enable binding: reject it instead of coercing.\n    throw new TypeError(\n      `resolveSharedAuthority: allowBinding must be a boolean when supplied, got ${typeof allowBinding}`,\n    );\n  }\n  const authority = input.authority;\n  // Absent (missing key, undefined, null) and present-but-invalid both land\n  // on informational — the least-privileged class — so an unmarked or\n  // malformed legacy item can never be treated as binding. Validate the\n  // exact value: no trim, no case-fold, because \" binding\" and \"BINDING\"\n  // are unrecognized data, not normalized matches for a known class.\n  if (typeof authority !== \"string\") return \"informational\";\n  if (!isKnownAuthority(authority)) return \"informational\";\n  if (authority === \"binding\" && allowBinding !== true) {\n    // Downgrade rather than throw: a legacy item already carrying \"binding\"\n    // is stored data, not a caller bug, so it resolves to the highest class\n    // that does not require the explicit opt-in.\n    return \"advisory\";\n  }\n  return authority;\n}\n\nexport function compareSharedAuthority(a: string, b: string): number {\n  const rankA = isKnownAuthority(a) ? AUTHORITY_RANK[a] : AUTHORITY_RANK.informational;\n  const rankB = isKnownAuthority(b) ? AUTHORITY_RANK[b] : AUTHORITY_RANK.informational;\n  return Math.sign(rankA - rankB);\n}\n","/**\n * Shared-item envelope actor parse (issue #1957 leftover).\n *\n * Pure. Empty is missing_actor. Newline is invalid_actor.\n */\n\nexport type ParseEnvelopeActorResult =\n  | { ok: true; actor: string }\n  | { ok: false; error: \"missing_actor\" | \"invalid_actor\" };\n\nexport function parseEnvelopeActor(value: string): ParseEnvelopeActorResult {\n  const actor = value.trim();\n  if (actor.length === 0) return { ok: false, error: \"missing_actor\" };\n  if (actor.includes(\"\\n\")) return { ok: false, error: \"invalid_actor\" };\n  return { ok: true, actor };\n}\n","/**\n * Strict ISO-8601 instant validation for shared-context envelopes\n * (issue #1957 review round 3).\n *\n * `Date.parse` is permissive: under the supported Node runtime it reads\n * `\"2026-02-30\"` as March 2 and `\"1\"` as January 1 2001. A caller-supplied\n * expiry would therefore be silently reinterpreted into a governance deadline\n * the caller never asked for. Validate the ISO shape AND the calendar\n * components against the exact input, and reject rather than normalize.\n *\n * Extracted from `provenance.ts` so the envelope write path and the\n * provenance stamp share one validator instead of two copies.\n */\n\n// Linear ISO instant. No nested quantifiers.\nconst ISO_INSTANT =\n  /^(\\d{4})-(\\d{2})-(\\d{2})T(\\d{2}):(\\d{2}):(\\d{2})(?:\\.\\d+)?(?:Z|[+-]\\d{2}:\\d{2})$/;\n\n/**\n * True only for a calendar-valid ISO-8601 instant carrying an explicit zone.\n * Non-strings and non-finite parses are rejected explicitly, never coerced.\n */\nexport function isStrictIsoInstant(value: unknown): boolean {\n  if (typeof value !== \"string\") return false;\n  const match = ISO_INSTANT.exec(value);\n  if (!match) return false;\n  const year = Number(match[1]);\n  const month = Number(match[2]);\n  const day = Number(match[3]);\n  const hour = Number(match[4]);\n  const minute = Number(match[5]);\n  const second = Number(match[6]);\n  const utc = new Date(Date.UTC(year, month - 1, day, hour, minute, second));\n  return (\n    Number.isFinite(Date.parse(value)) &&\n    utc.getUTCFullYear() === year &&\n    utc.getUTCMonth() === month - 1 &&\n    utc.getUTCDate() === day &&\n    utc.getUTCHours() === hour &&\n    utc.getUTCMinutes() === minute &&\n    utc.getUTCSeconds() === second\n  );\n}\n","/**\n * Shared-item envelope at parse (issue #1957 leftover).\n *\n * Pure. Blank is missing_at. Anything that is not a calendar-valid ISO-8601\n * instant is invalid_at — including values permissive `Date.parse` would\n * silently reinterpret (`\"2026-02-30\"` -> March 2, `\"1\"` -> January 1 2001),\n * a whitespace-padded timestamp, and any non-string or non-finite input\n * (review round 3). `trim()` only detects blankness; validation reads the\n * exact value, so normalization can never widen what passes.\n */\n\nimport { isStrictIsoInstant } from \"./iso-instant.js\";\n\nexport type ParseEnvelopeAtResult =\n  | { ok: true; at: string }\n  | { ok: false; error: \"missing_at\" | \"invalid_at\" };\n\nexport function parseEnvelopeAt(value: string): ParseEnvelopeAtResult {\n  if (typeof value !== \"string\") return { ok: false, error: \"invalid_at\" };\n  if (value.trim().length === 0) return { ok: false, error: \"missing_at\" };\n  if (!isStrictIsoInstant(value)) return { ok: false, error: \"invalid_at\" };\n  return { ok: true, at: new Date(Date.parse(value)).toISOString() };\n}\n","/**\n * Shared-item envelope id parse (issue #1957 leftover).\n *\n * Pure. Empty is missing_id. Newline is invalid_id.\n */\n\nexport type ParseEnvelopeIdResult =\n  | { ok: true; id: string }\n  | { ok: false; error: \"missing_id\" | \"invalid_id\" };\n\nexport function parseEnvelopeId(value: string): ParseEnvelopeIdResult {\n  const id = value.trim();\n  if (id.length === 0) return { ok: false, error: \"missing_id\" };\n  if (id.includes(\"\\n\")) return { ok: false, error: \"invalid_id\" };\n  return { ok: true, id };\n}\n","/**\n * Shared-item envelope wiring (issue #1957, control 1: origin + authority).\n *\n * Bridges the pure envelope helpers onto the markdown frontmatter the\n * shared-context manager reads and writes.\n *\n * Write side rejects invalid input (an unrecognized authority or a binding\n * request without the config opt-in throws — never silently reinterpreted).\n * Read side resolves least privilege: a missing, malformed, or unrecognized\n * authority never resolves above informational, and stored binding\n * downgrades to advisory unless config opted in.\n */\n\nimport { applyDefaultEnvelope, parseSharedEnvelope, type SharedEnvelope } from \"./governance.js\";\nimport { resolveSharedAuthority } from \"./authority-precedence.js\";\nimport type { SharedAuthority } from \"./governance.js\";\nimport { parseEnvelopeActor } from \"./envelope-actor.js\";\nimport { parseEnvelopeAt } from \"./envelope-at.js\";\nimport { parseEnvelopeId } from \"./envelope-id.js\";\n\nexport interface ComposeWriteEnvelopeInput {\n  /** Governance origin. Becomes the envelope's `sharedBy`. */\n  origin: string;\n  /** Requested authority class. Unrecognized values throw. */\n  authority?: string;\n  /** Optional ISO-8601 expiry. Invalid timestamps throw. */\n  expiresAt?: string;\n  /** Optional id of the item this one supersedes. */\n  supersedes?: string;\n  /** Config opt-in (`sharedContextAllowBindingAuthority`). Binding throws without it. */\n  allowBinding: boolean;\n}\n\nfunction requireEnvelopeActor(agentId: string): string {\n  const parsed = parseEnvelopeActor(agentId);\n  if (!parsed.ok) {\n    throw new Error(`composeWriteEnvelope: agentId must be a non-blank single-line string (${parsed.error})`);\n  }\n  return parsed.actor;\n}\n\nfunction optionalEnvelopeAt(expiresAt: string | undefined): string | undefined {\n  if (expiresAt === undefined) return undefined;\n  const parsed = parseEnvelopeAt(expiresAt);\n  if (!parsed.ok) {\n    throw new Error(`composeWriteEnvelope: expiresAt must be a valid ISO-8601 timestamp (${parsed.error})`);\n  }\n  return parsed.at;\n}\n\nfunction optionalEnvelopeId(supersedes: string | undefined): string | undefined {\n  if (supersedes === undefined) return undefined;\n  const parsed = parseEnvelopeId(supersedes);\n  if (!parsed.ok) {\n    throw new Error(`composeWriteEnvelope: supersedes must be a non-blank single-line id (${parsed.error})`);\n  }\n  return parsed.id;\n}\n\n/**\n * Reserved governance origin for an authenticated external access write that\n * resolved no principal (`agentAccessHttp.principal` unset, no adapter\n * identity). Server-owned: the caller cannot mint or influence it, and the\n * caller-supplied `agentId` never becomes audit metadata on that path.\n */\nexport const UNATTRIBUTED_ACCESS_WRITE_ORIGIN = \"unattributed:access-surface\";\n\nexport interface ResolvedWriteIdentity {\n  /**\n   * Producer identity: frontmatter `agent`, on-disk segment, and the\n   * cross-signals grouping key. Self-declared by the caller only on\n   * surfaces that resolved no server identity; never decides authority.\n   */\n  agent: string;\n  /** Governance origin stamped as the envelope's `sharedBy`. */\n  origin: string;\n}\n\n/**\n * Resolve the producer identity and governance origin for a shared-context\n * write. They are different fields with different trust requirements:\n *\n * - The origin (`sharedBy`) is audit metadata and is always server-derived.\n *   When the surface resolved an authenticated identity, that identity IS the\n *   origin; when it resolved none but the write crosses an external\n *   boundary, the caller-supplied `unattributedOrigin` token is stamped\n *   instead — never the caller's value. Only a trusted in-process caller\n *   (no identity, no token) may stamp its own id as the origin.\n * - The producer (`agent`) drives grouping and display only. When an\n *   authenticated identity exists it is also the producer, and a\n *   caller-supplied `agentId` naming a different agent is REJECTED, so a\n *   caller can never publish an item attributed to another agent. Without a\n *   server identity the caller's label stands as the producer — collapsing\n *   it instead would merge every writer into one agent and erase\n *   multi-agent overlaps from `synthesizeCrossSignals`.\n */\nexport function resolveWriteOrigin(input: {\n  agentId: string;\n  authenticatedIdentity?: string;\n  unattributedOrigin?: string;\n}): ResolvedWriteIdentity {\n  const identity = input.authenticatedIdentity?.trim() ?? \"\";\n  if (identity.length > 0) {\n    const requested = input.agentId.trim();\n    if (requested.length > 0 && requested !== identity) {\n      throw new Error(\n        `shared-context write origin mismatch: authenticated identity ${JSON.stringify(identity)} cannot publish as ${JSON.stringify(requested)}`,\n      );\n    }\n    return { agent: identity, origin: identity };\n  }\n  const unattributed = input.unattributedOrigin?.trim() ?? \"\";\n  if (unattributed.length > 0) {\n    const label = input.agentId.trim();\n    return {\n      agent: label.length > 0 ? requireProducer(label) : requireProducer(unattributed),\n      origin: requireProducer(unattributed),\n    };\n  }\n  const actor = requireProducer(input.agentId);\n  return { agent: actor, origin: actor };\n}\n\nfunction requireProducer(value: string): string {\n  const parsed = parseEnvelopeActor(value);\n  if (!parsed.ok) {\n    throw new Error(`shared-context write producer must be a non-blank single-line string (${parsed.error})`);\n  }\n  return parsed.actor;\n}\n\n/**\n * Validate and compose the envelope for a shared-context write.\n * `sharedBy` is stamped from the server-derived origin — provenance is\n * never injected through item content or the caller's producer label.\n */\nexport function composeWriteEnvelope(input: ComposeWriteEnvelopeInput): SharedEnvelope {\n  const sharedBy = requireEnvelopeActor(input.origin);\n  const expiresAt = optionalEnvelopeAt(input.expiresAt);\n  const supersedes = optionalEnvelopeId(input.supersedes);\n  return applyDefaultEnvelope(\n    { sharedBy, authority: input.authority, expiresAt, supersedes },\n    { binding: input.allowBinding },\n  );\n}\n\n/** Serialize an envelope into frontmatter lines (caller adds the `---` fences). */\nexport function envelopeToFrontmatterLines(envelope: SharedEnvelope): string[] {\n  const line = (key: string, value: string) => `${key}: ${JSON.stringify(value)}`;\n  const lines = [line(\"sharedBy\", envelope.sharedBy ?? \"\"), line(\"authority\", envelope.authority)];\n  if (envelope.expiresAt !== undefined) lines.push(line(\"expiresAt\", envelope.expiresAt));\n  if (envelope.supersedes !== undefined) lines.push(line(\"supersedes\", envelope.supersedes));\n  return lines;\n}\n\n/**\n * Build an envelope from frontmatter scalars already read off a stored item.\n * Missing scalars (legacy items) compose to informational with no expiry.\n */\nexport function envelopeFromScalars(scalars: {\n  sharedBy: string | null;\n  authority: string | null;\n  expiresAt: string | null;\n  supersedes: string | null;\n}): SharedEnvelope {\n  const record: Record<string, string> = {};\n  if (scalars.sharedBy !== null) record.sharedBy = scalars.sharedBy;\n  if (scalars.authority !== null) record.authority = scalars.authority;\n  if (scalars.expiresAt !== null) record.expiresAt = scalars.expiresAt;\n  if (scalars.supersedes !== null) record.supersedes = scalars.supersedes;\n  return parseSharedEnvelope(record);\n}\n\n/**\n * Resolve a stored envelope's authority for read-side consumption.\n * Least privilege: unrecognized/missing stays informational; binding\n * requires the config opt-in or downgrades to advisory.\n */\nexport function resolveReadAuthority(\n  envelope: Pick<SharedEnvelope, \"authority\">,\n  allowBinding: boolean,\n): SharedAuthority {\n  return resolveSharedAuthority({ authority: envelope.authority, allowBinding });\n}\n"],"mappings":";AAQO,IAAM,qBAAqB,CAAC,iBAAiB,YAAY,SAAS;AAqBzE,SAAS,kBAAkB,OAAyC;AAClE,SAAQ,mBAAyC,SAAS,KAAK;AACjE;AAEA,SAAS,eAAe,OAAoC;AAC1D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAcA,SAAS,mBAAmB,OAAgC;AAC1D,MAAI,OAAO,UAAU,YAAY,MAAM,WAAW,EAAG,QAAO,EAAE,MAAM,SAAS;AAC7E,MAAI,CAAC,kBAAkB,KAAK,EAAG,QAAO,EAAE,MAAM,WAAW,KAAK,MAAM;AACpE,SAAO,EAAE,MAAM,SAAS,WAAW,MAAM;AAC3C;AAEA,SAAS,mBACP,WACA,QACgB;AAChB,QAAM,WAA2B,EAAE,UAAU;AAC7C,QAAM,WAAW,eAAe,OAAO,QAAQ;AAC/C,QAAM,YAAY,eAAe,OAAO,SAAS;AACjD,QAAM,aAAa,eAAe,OAAO,UAAU;AACnD,MAAI,SAAU,UAAS,WAAW;AAClC,MAAI,UAAW,UAAS,YAAY;AACpC,MAAI,WAAY,UAAS,aAAa;AACtC,SAAO;AACT;AAEO,SAAS,qBACd,QAA6B,CAAC,GAC9B,UAAuC,CAAC,GACxB;AAChB,QAAM,YAAY,mBAAmB,MAAM,SAAS;AACpD,MAAI,UAAU,SAAS,WAAW;AAChC,UAAM,IAAI;AAAA,MACR,oFAAoF,KAAK,UAAU,UAAU,GAAG,CAAC;AAAA,IACnH;AAAA,EACF;AACA,MAAI,UAAU,SAAS,WAAW,UAAU,cAAc,aAAa,QAAQ,YAAY,MAAM;AAC/F,UAAM,IAAI,MAAM,6EAA+E;AAAA,EACjG;AACA,SAAO,mBAAmB,UAAU,SAAS,UAAU,UAAU,YAAY,iBAAiB,KAAK;AACrG;AAEO,SAAS,oBAAoB,KAA8B;AAChE,MAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,MAAM,QAAQ,GAAG,GAAG;AACjE,WAAO,EAAE,WAAW,gBAAgB;AAAA,EACtC;AACA,QAAM,SAAS;AACf,QAAM,YAAY,mBAAmB,OAAO,SAAS;AACrD,QAAM,YAAY,UAAU,SAAS,UAAU,UAAU,YAAY;AACrE,SAAO,mBAAmB,WAAW,MAAM;AAC7C;;;AClEA,SAAS,iBAAiB,OAAyC;AACjE,SAAQ,mBAAyC,SAAS,KAAK;AACjE;AAGO,SAAS,uBAAuB,OAAqD;AAI1F,QAAM,eAAe,MAAM;AAC3B,MAAI,iBAAiB,UAAa,OAAO,iBAAiB,WAAW;AAGnE,UAAM,IAAI;AAAA,MACR,6EAA6E,OAAO,YAAY;AAAA,IAClG;AAAA,EACF;AACA,QAAM,YAAY,MAAM;AAMxB,MAAI,OAAO,cAAc,SAAU,QAAO;AAC1C,MAAI,CAAC,iBAAiB,SAAS,EAAG,QAAO;AACzC,MAAI,cAAc,aAAa,iBAAiB,MAAM;AAIpD,WAAO;AAAA,EACT;AACA,SAAO;AACT;;;ACnDO,SAAS,mBAAmB,OAAyC;AAC1E,QAAM,QAAQ,MAAM,KAAK;AACzB,MAAI,MAAM,WAAW,EAAG,QAAO,EAAE,IAAI,OAAO,OAAO,gBAAgB;AACnE,MAAI,MAAM,SAAS,IAAI,EAAG,QAAO,EAAE,IAAI,OAAO,OAAO,gBAAgB;AACrE,SAAO,EAAE,IAAI,MAAM,MAAM;AAC3B;;;ACAA,IAAM,cACJ;AAMK,SAAS,mBAAmB,OAAyB;AAC1D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,QAAQ,YAAY,KAAK,KAAK;AACpC,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,OAAO,OAAO,MAAM,CAAC,CAAC;AAC5B,QAAM,QAAQ,OAAO,MAAM,CAAC,CAAC;AAC7B,QAAM,MAAM,OAAO,MAAM,CAAC,CAAC;AAC3B,QAAM,OAAO,OAAO,MAAM,CAAC,CAAC;AAC5B,QAAM,SAAS,OAAO,MAAM,CAAC,CAAC;AAC9B,QAAM,SAAS,OAAO,MAAM,CAAC,CAAC;AAC9B,QAAM,MAAM,IAAI,KAAK,KAAK,IAAI,MAAM,QAAQ,GAAG,KAAK,MAAM,QAAQ,MAAM,CAAC;AACzE,SACE,OAAO,SAAS,KAAK,MAAM,KAAK,CAAC,KACjC,IAAI,eAAe,MAAM,QACzB,IAAI,YAAY,MAAM,QAAQ,KAC9B,IAAI,WAAW,MAAM,OACrB,IAAI,YAAY,MAAM,QACtB,IAAI,cAAc,MAAM,UACxB,IAAI,cAAc,MAAM;AAE5B;;;ACzBO,SAAS,gBAAgB,OAAsC;AACpE,MAAI,OAAO,UAAU,SAAU,QAAO,EAAE,IAAI,OAAO,OAAO,aAAa;AACvE,MAAI,MAAM,KAAK,EAAE,WAAW,EAAG,QAAO,EAAE,IAAI,OAAO,OAAO,aAAa;AACvE,MAAI,CAAC,mBAAmB,KAAK,EAAG,QAAO,EAAE,IAAI,OAAO,OAAO,aAAa;AACxE,SAAO,EAAE,IAAI,MAAM,IAAI,IAAI,KAAK,KAAK,MAAM,KAAK,CAAC,EAAE,YAAY,EAAE;AACnE;;;ACZO,SAAS,gBAAgB,OAAsC;AACpE,QAAM,KAAK,MAAM,KAAK;AACtB,MAAI,GAAG,WAAW,EAAG,QAAO,EAAE,IAAI,OAAO,OAAO,aAAa;AAC7D,MAAI,GAAG,SAAS,IAAI,EAAG,QAAO,EAAE,IAAI,OAAO,OAAO,aAAa;AAC/D,SAAO,EAAE,IAAI,MAAM,GAAG;AACxB;;;ACkBA,SAAS,qBAAqB,SAAyB;AACrD,QAAM,SAAS,mBAAmB,OAAO;AACzC,MAAI,CAAC,OAAO,IAAI;AACd,UAAM,IAAI,MAAM,yEAAyE,OAAO,KAAK,GAAG;AAAA,EAC1G;AACA,SAAO,OAAO;AAChB;AAEA,SAAS,mBAAmB,WAAmD;AAC7E,MAAI,cAAc,OAAW,QAAO;AACpC,QAAM,SAAS,gBAAgB,SAAS;AACxC,MAAI,CAAC,OAAO,IAAI;AACd,UAAM,IAAI,MAAM,uEAAuE,OAAO,KAAK,GAAG;AAAA,EACxG;AACA,SAAO,OAAO;AAChB;AAEA,SAAS,mBAAmB,YAAoD;AAC9E,MAAI,eAAe,OAAW,QAAO;AACrC,QAAM,SAAS,gBAAgB,UAAU;AACzC,MAAI,CAAC,OAAO,IAAI;AACd,UAAM,IAAI,MAAM,wEAAwE,OAAO,KAAK,GAAG;AAAA,EACzG;AACA,SAAO,OAAO;AAChB;AAQO,IAAM,mCAAmC;AA+BzC,SAAS,mBAAmB,OAIT;AACxB,QAAM,WAAW,MAAM,uBAAuB,KAAK,KAAK;AACxD,MAAI,SAAS,SAAS,GAAG;AACvB,UAAM,YAAY,MAAM,QAAQ,KAAK;AACrC,QAAI,UAAU,SAAS,KAAK,cAAc,UAAU;AAClD,YAAM,IAAI;AAAA,QACR,gEAAgE,KAAK,UAAU,QAAQ,CAAC,sBAAsB,KAAK,UAAU,SAAS,CAAC;AAAA,MACzI;AAAA,IACF;AACA,WAAO,EAAE,OAAO,UAAU,QAAQ,SAAS;AAAA,EAC7C;AACA,QAAM,eAAe,MAAM,oBAAoB,KAAK,KAAK;AACzD,MAAI,aAAa,SAAS,GAAG;AAC3B,UAAM,QAAQ,MAAM,QAAQ,KAAK;AACjC,WAAO;AAAA,MACL,OAAO,MAAM,SAAS,IAAI,gBAAgB,KAAK,IAAI,gBAAgB,YAAY;AAAA,MAC/E,QAAQ,gBAAgB,YAAY;AAAA,IACtC;AAAA,EACF;AACA,QAAM,QAAQ,gBAAgB,MAAM,OAAO;AAC3C,SAAO,EAAE,OAAO,OAAO,QAAQ,MAAM;AACvC;AAEA,SAAS,gBAAgB,OAAuB;AAC9C,QAAM,SAAS,mBAAmB,KAAK;AACvC,MAAI,CAAC,OAAO,IAAI;AACd,UAAM,IAAI,MAAM,yEAAyE,OAAO,KAAK,GAAG;AAAA,EAC1G;AACA,SAAO,OAAO;AAChB;AAOO,SAAS,qBAAqB,OAAkD;AACrF,QAAM,WAAW,qBAAqB,MAAM,MAAM;AAClD,QAAM,YAAY,mBAAmB,MAAM,SAAS;AACpD,QAAM,aAAa,mBAAmB,MAAM,UAAU;AACtD,SAAO;AAAA,IACL,EAAE,UAAU,WAAW,MAAM,WAAW,WAAW,WAAW;AAAA,IAC9D,EAAE,SAAS,MAAM,aAAa;AAAA,EAChC;AACF;AAGO,SAAS,2BAA2B,UAAoC;AAC7E,QAAM,OAAO,CAAC,KAAa,UAAkB,GAAG,GAAG,KAAK,KAAK,UAAU,KAAK,CAAC;AAC7E,QAAM,QAAQ,CAAC,KAAK,YAAY,SAAS,YAAY,EAAE,GAAG,KAAK,aAAa,SAAS,SAAS,CAAC;AAC/F,MAAI,SAAS,cAAc,OAAW,OAAM,KAAK,KAAK,aAAa,SAAS,SAAS,CAAC;AACtF,MAAI,SAAS,eAAe,OAAW,OAAM,KAAK,KAAK,cAAc,SAAS,UAAU,CAAC;AACzF,SAAO;AACT;AAMO,SAAS,oBAAoB,SAKjB;AACjB,QAAM,SAAiC,CAAC;AACxC,MAAI,QAAQ,aAAa,KAAM,QAAO,WAAW,QAAQ;AACzD,MAAI,QAAQ,cAAc,KAAM,QAAO,YAAY,QAAQ;AAC3D,MAAI,QAAQ,cAAc,KAAM,QAAO,YAAY,QAAQ;AAC3D,MAAI,QAAQ,eAAe,KAAM,QAAO,aAAa,QAAQ;AAC7D,SAAO,oBAAoB,MAAM;AACnC;AAOO,SAAS,qBACd,UACA,cACiB;AACjB,SAAO,uBAAuB,EAAE,WAAW,SAAS,WAAW,aAAa,CAAC;AAC/E;","names":[]}

package/dist/{chunk-J2R275FN.js → chunk-CTCGHNWN.js}

@@ -13,13 +13,13 @@ import {
   requestEntityCanonicalIdReconcile,
   withRawEntityPageMutation
 } from "./chunk-NNZFPYYX.js";
-import {
-  parseExportBundle
-} from "./chunk-WEHSQBFR.js";
 import {
   decryptCapsuleFileInMemory,
   isEncryptedCapsuleFile
 } from "./chunk-X7Y7WX73.js";
+import {
+  parseExportBundle
+} from "./chunk-WEHSQBFR.js";
 import {
   assertIsDirectoryNotSymlink,
   assertRealpathInsideRoot,
@@ -294,4 +294,4 @@ function mintForkId(capsuleId, originalId, now) {
 export {
   importCapsule
 };
-//# sourceMappingURL=chunk-J2R275FN.js.map
+//# sourceMappingURL=chunk-CTCGHNWN.js.map

package/dist/{chunk-X5PIDJ3L.js → chunk-DA4ZMCBU.js}

@@ -1,10 +1,10 @@
 import {
   parseXrayFormat
-} from "./chunk-H6RSANGQ.js";
+} from "./chunk-ETZ7KKOS.js";
 import {
   RECALL_DISCLOSURE_LEVELS,
   isRecallDisclosure
-} from "./chunk-XXW32OL7.js";
+} from "./chunk-OYV6RKPM.js";
 
 // src/recall-xray-cli.ts
 function parseXrayDisclosureFlag(value) {
@@ -50,4 +50,4 @@ export {
   parseXrayBudgetFlag,
   parseXrayCliOptions
 };
-//# sourceMappingURL=chunk-X5PIDJ3L.js.map
+//# sourceMappingURL=chunk-DA4ZMCBU.js.map

package/dist/{chunk-IVAW3HBF.js → chunk-DH3V7RCQ.js}

@@ -3,19 +3,22 @@ import {
 } from "./chunk-V7IZKJI3.js";
 import {
   AdapterRegistry
-} from "./chunk-2QSZNTDO.js";
+} from "./chunk-AU7Q3LSC.js";
 import {
   WriteRateLimiter
 } from "./chunk-TB6CBZ5V.js";
 import {
   serializeInlineScriptValue
 } from "./chunk-3HSRWJTC.js";
+import {
+  respondDeepRecall
+} from "./chunk-NN5CQTAJ.js";
 import {
   handleSupportPassportOwnerHttp
-} from "./chunk-D5VPIJN3.js";
+} from "./chunk-227WJVPY.js";
 import {
   buildSupportPassportPublicRequestHandler
-} from "./chunk-WSFPNCRA.js";
+} from "./chunk-XFPHV65N.js";
 import {
   EngramMcpServer,
   MCP_SUPPORTED_PROTOCOL_VERSIONS,
@@ -25,10 +28,10 @@ import {
   processChatMessage,
   sessionBelongsToPrincipal,
   subscribeChatTranscript
-} from "./chunk-6RPB2TDG.js";
+} from "./chunk-5HO3QBAD.js";
 import {
   RelayMissionStoreError
-} from "./chunk-PCH2CVCS.js";
+} from "./chunk-LWBSEYW3.js";
 import {
   toDottedRemnicName
 } from "./chunk-ZQUVBZI4.js";
@@ -43,13 +46,13 @@ import {
 } from "./chunk-CTVWELNK.js";
 import {
   validateRequest
-} from "./chunk-QL4U3SJA.js";
+} from "./chunk-NHLEFBE2.js";
 import {
   nonEmptyQueryParam,
   optionalNamespaceKindQueryParam,
   optionalQueryString,
   positiveIntQueryParam
-} from "./chunk-FJMIQTMH.js";
+} from "./chunk-5YQ7RFSO.js";
 import {
   handleMcpGetSse
 } from "./chunk-SRT6SHVZ.js";
@@ -67,15 +70,15 @@ import {
   authorizationProbeNamespaces,
   authorizationProbeRequiresPrincipalNamespace,
   probeOperationAuthorization
-} from "./chunk-KMIAD7JR.js";
+} from "./chunk-VHAKBUBD.js";
 import {
   CorrectionContractError,
   getOperation,
   resolveQueryNamespaceWritablePreflight
-} from "./chunk-AYWPIH4M.js";
+} from "./chunk-5P2KNFJZ.js";
 import {
   handleWhoKnowsHttpQuery
-} from "./chunk-FFFZEF6B.js";
+} from "./chunk-LUDXSSTW.js";
 import {
   isTrustZoneName
 } from "./chunk-5QZR2RA3.js";
@@ -84,7 +87,7 @@ import {
 } from "./chunk-DEUNUKTD.js";
 import {
   isRecallDisclosure
-} from "./chunk-XXW32OL7.js";
+} from "./chunk-OYV6RKPM.js";
 import {
   assertOperationAllowed,
   capabilityAllowsOp,
@@ -96,7 +99,7 @@ import {
   OFFLINE_SYNC_APPLY_MAX_BODY_BYTES,
   OFFLINE_SYNC_FILE_CONTENT_MAX_CHUNK_BYTES,
   OFFLINE_SYNC_SNAPSHOT_BASE_MAX_BODY_BYTES
-} from "./chunk-JCUG7AXZ.js";
+} from "./chunk-XJJYSX6F.js";
 import {
   projectTagProjectId
 } from "./chunk-QBC33MPY.js";
@@ -1809,6 +1812,11 @@ var EngramAccessHttpServer = class extends ReviewDeckAccessHttpBase {
       await respondMeetingsGet(res, this.respondJson.bind(this), this.service, meetingGetRemnic[1] ?? "", this.wearablesScope(req, parsed.searchParams.get("namespace") ?? void 0, parsed.searchParams.get("sessionKey") ?? void 0));
       return;
     }
+    if (req.method === "POST" && (pathname === "/engram/v1/recall/deep" || pathname === "/remnic/v1/recall/deep")) {
+      this.enforceTokenOp("deep_recall");
+      await respondDeepRecall(req, res, this.respondJson.bind(this), this.readJsonBody.bind(this), this.service, (ns, sk) => this.wearablesScope(req, ns ?? parsed.searchParams.get("namespace") ?? void 0, sk ?? parsed.searchParams.get("sessionKey") ?? void 0));
+      return;
+    }
     if (req.method === "GET" && (pathname === "/engram/v1/location/status" || pathname === "/remnic/v1/location/status")) {
       this.enforceTokenOp("location_status");
       await respondLocationStatus(res, this.respondJson.bind(this), this.service);
@@ -3579,4 +3587,4 @@ export {
   resolveDefaultAdminConsolePublicDir,
   EngramAccessHttpServer
 };
-//# sourceMappingURL=chunk-IVAW3HBF.js.map
+//# sourceMappingURL=chunk-DH3V7RCQ.js.map