@remnic/core 9.69.37 → 9.69.39

package/dist/{chunk-M3MYMWXG.js → chunk-FXHOZGSE.js}

@@ -1,6 +1,6 @@
 import {
   formatSupersededPrefix
-} from "./chunk-255PC37A.js";
+} from "./chunk-YDVAM7S4.js";
 
 // src/recall-state-view-render.ts
 function renderStateViewLine(result, options = {}) {
@@ -17,4 +17,4 @@ function renderStateViewLine(result, options = {}) {
 export {
   renderStateViewLine
 };
-//# sourceMappingURL=chunk-M3MYMWXG.js.map
+//# sourceMappingURL=chunk-FXHOZGSE.js.map

package/dist/{chunk-SAKA6PPL.js → chunk-GAS7KYC7.js}

@@ -1,6 +1,6 @@
 import {
   getVerdictKind
-} from "./chunk-BLHX5FQW.js";
+} from "./chunk-YUW66UAH.js";
 import {
   scoreImportance
 } from "./chunk-UOBPK2OS.js";
@@ -31,13 +31,13 @@ import {
   resolveSpeaker,
   serializeDayTranscript
 } from "./chunk-UHVXE24Y.js";
+import {
+  composeMemoryEnvelope
+} from "./chunk-GDYU6VF4.js";
 import {
   countRecallTokenOverlap,
   normalizeRecallTokens
 } from "./chunk-YCVB7X56.js";
-import {
-  composeMemoryEnvelope
-} from "./chunk-LSLCFCCQ.js";
 import {
   log
 } from "./chunk-3WCASNQZ.js";
@@ -1320,4 +1320,4 @@ export {
   syncWearableSource,
   defaultTimezone
 };
-//# sourceMappingURL=chunk-SAKA6PPL.js.map
+//# sourceMappingURL=chunk-GAS7KYC7.js.map

package/dist/{chunk-LSLCFCCQ.js → chunk-GDYU6VF4.js}

@@ -443,4 +443,4 @@ export {
   buildAccessWriteRequestFingerprint,
   buildObserveRequestFingerprint
 };
-//# sourceMappingURL=chunk-LSLCFCCQ.js.map
+//# sourceMappingURL=chunk-GDYU6VF4.js.map

package/dist/chunk-GDYU6VF4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/write-envelope.ts"],"sourcesContent":["/**\n * Sealed memory-write envelope (issue #1989, umbrella #1988).\n *\n * THE single stamping point for cross-cutting memory-creation fields.\n *\n * Why this exists: PR #1852 needed 27 rework commits because adding one\n * cross-cutting field (`sourceConnector`) required hand-editing every\n * write call site and every idempotency payload, and reviewers discovered\n * missed sites one round at a time. This module removes the fan-out:\n *\n *   1. `composeMemoryEnvelope()` is the only way to mint a\n *      `SealedMemoryEnvelope` — the brand is a non-exported `unique symbol`,\n *      so a hand-built object literal fails `tsc` (`npm run check-types`\n *      is already a required repo-wide gate; the type system IS the fence).\n *   2. `buildWriteIdempotencyPayload()` derives every access-surface\n *      idempotency payload from ONE ordered field registry\n *      (`WRITE_FINGERPRINT_FIELDS`). Adding a fingerprint-relevant field is\n *      a one-line registry change picked up by every surface; forgetting to\n *      classify a new `MemoryWriteInput` field is a compile error (see the\n *      exhaustiveness guards at the bottom of this file).\n *\n * PR1 scope (no call-site changes): the composer, the registry, and the\n * payload builder, fully tested. PR2–PR4 migrate storage entry points and\n * the write call sites onto this module (see #1989 for the slicing).\n */\n\nimport { isMemorySubject } from \"./memory-subject.js\";\nimport type { MemoryCategory, MemorySubject } from \"./types.js\";\nimport { normalizeTags } from \"./recall-tag-filter.js\";\nimport { parseFlexibleIsoTimestamp } from \"./utils/iso-timestamp.js\";\nimport { assemblePersistedBody } from \"./structured-attributes.js\";\n\n// ---------------------------------------------------------------------------\n// Input surface\n// ---------------------------------------------------------------------------\n\n/**\n * Every cross-cutting memory-creation field lives HERE and only here.\n *\n * When you add a field you MUST also add it to either\n * `WRITE_FINGERPRINT_FIELDS` or `FINGERPRINT_EXEMPT_FIELDS` — the\n * exhaustiveness guard below makes forgetting a compile error.\n */\nexport interface MemoryWriteInput {\n  /** Raw memory content. Must be non-empty after trimming. */\n  content: string;\n  /** Memory category — validated against the canonical category set. */\n  category: MemoryCategory;\n  /** Free-form labels; normalized (trim/dedupe) and capped, see TAG_LIMITS. */\n  tags?: string[];\n  /** String→string structured attributes; non-string values are rejected. */\n  structuredAttributes?: Record<string, string>;\n  /** Entity file reference (e.g. `person-jane-doe`). */\n  entityRef?: string;\n  /** Extraction confidence in [0, 1]. */\n  confidence?: number;\n  /** Opaque TTL expression (e.g. `90d` or an ISO date) — validated non-empty. */\n  ttl?: string;\n  /** Event-time validity start (ISO 8601). */\n  validAt?: string;\n  /** Connector identity that produced this write (issue #1852). */\n  sourceConnector?: string;\n  /** Origin class stamped at creation time (issue #1955). */\n  origin?: string;\n  /** Whom the memory models (issue #2372): \"user\" or \"agent\". */\n  subject?: MemorySubject;\n  /** Human-readable provenance note. */\n  sourceReason?: string;\n}\n\n/** Context supplied by the write path, not by the payload author. */\nexport interface WriteContext {\n  /** Frontmatter `source` string (e.g. `extraction`, `wearable:bee`). */\n  source: string;\n  /** Clock override for tests. */\n  now?: () => Date;\n}\n\n/** Scope facts that participate in idempotency but never in frontmatter. */\nexport interface FingerprintScope {\n  /** Access surface performing the write (e.g. `memory_store`, `observe`). */\n  surface: string;\n  namespace?: string;\n  principal?: string;\n  codingContext?: string;\n}\n\n// ---------------------------------------------------------------------------\n// Normalization limits (single source of truth — docs/tags.md contract)\n// ---------------------------------------------------------------------------\n\nexport const TAG_LIMITS = Object.freeze({\n  /** Maximum number of tags persisted per memory. */\n  maxTags: 50,\n  /** Maximum length of a single tag. */\n  maxTagLength: 256,\n});\n\nexport const STRUCTURED_ATTRIBUTE_LIMITS = Object.freeze({\n  /** Maximum number of structured attributes per memory. */\n  maxEntries: 64,\n  /** Maximum length of one attribute key. */\n  maxKeyLength: 128,\n  /** Maximum length of one attribute value. */\n  maxValueLength: 1024,\n});\n\nconst MEMORY_CATEGORY_TABLE: Record<MemoryCategory, true> = {\n  fact: true,\n  preference: true,\n  correction: true,\n  entity: true,\n  decision: true,\n  relationship: true,\n  principle: true,\n  commitment: true,\n  moment: true,\n  skill: true,\n  rule: true,\n  procedure: true,\n  reasoning_trace: true,\n};\n\n/**\n * Canonical category spellings, sorted. Runtime counterpart of the\n * `MemoryCategory` union for error messages and cross-module consistency\n * checks (issue #2829).\n */\nexport const MEMORY_CATEGORY_NAMES = Object.keys(MEMORY_CATEGORY_TABLE).sort();\n\nexport function isMemoryCategory(value: string): value is MemoryCategory {\n  return Object.prototype.hasOwnProperty.call(MEMORY_CATEGORY_TABLE, value);\n}\n\n// ---------------------------------------------------------------------------\n// Sealed envelope\n// ---------------------------------------------------------------------------\n\ndeclare const sealed: unique symbol;\n\n/**\n * A normalized, validated memory-write envelope.\n *\n * Opaque: only `composeMemoryEnvelope()` can mint one. Storage creation\n * entry points accept this type (PR2), so every write path is forced\n * through the composer at compile time.\n */\nexport interface SealedMemoryEnvelope {\n  readonly [sealed]: true;\n  /**\n   * Caller-supplied content VERBATIM (validated non-empty-after-trim).\n   * `StorageManager.writeMemory` persists content byte-for-byte (callers\n   * that trim, e.g. explicit capture, do so before composing), so the\n   * envelope must not transform it — the earlier compose-time trim/sanitize\n   * broke byte-parity with extraction writes and was removed in PR2.\n   */\n  readonly content: string;\n  /**\n   * The exact body persistence will write: attribute-suffix enrichment then\n   * combined sanitization, produced by the SAME `assemblePersistedBody`\n   * helper `writeMemory` uses (issue #1989 PR2; AGENTS.md §13). This is the\n   * form write-idempotency fingerprints hash.\n   */\n  readonly persistedBody: string;\n  /** Injection patterns matched during body assembly (empty = clean). */\n  readonly sanitizeViolations: readonly string[];\n  /**\n   * Salvage-mode hygiene notes (empty in strict mode): each dropped/clamped\n   * invalid optional field is recorded here — visible, never silent\n   * (repo rule 34). Callers persisting machine-generated input log these.\n   */\n  readonly salvageNotes: readonly string[];\n  readonly category: MemoryCategory;\n  readonly tags: readonly string[];\n  /**\n   * CANONICAL attributes (keys trim+lowercase, values trim) — the form\n   * fingerprints and downstream consumers use; stable across caller casing.\n   */\n  readonly structuredAttributes: Readonly<Record<string, string>> | undefined;\n  /**\n   * The validated ORIGINAL attribute map, byte-preserved. `writeMemory`\n   * persists frontmatter attributes raw (canonicalizing only the body\n   * suffix via normalizeAttributePairs) — a pre-existing raw/canonical\n   * inconsistency (supersession keys read the raw form). The sealed path\n   * preserves those bytes; canonicalizing the frontmatter at the storage\n   * boundary is a follow-up once the legacy path retires (#1989 PR4).\n   */\n  readonly rawStructuredAttributes: Readonly<Record<string, string>> | undefined;\n  readonly entityRef: string | undefined;\n  readonly confidence: number | undefined;\n  readonly ttl: string | undefined;\n  readonly validAt: string | undefined;\n  readonly sourceConnector: string | undefined;\n  readonly origin: string | undefined;\n  readonly subject: MemorySubject | undefined;\n  readonly sourceReason: string | undefined;\n  readonly source: string;\n  /** ISO timestamp the envelope was composed (from ctx.now). */\n  readonly composedAt: string;\n}\n\nfunction fail(field: string, message: string): never {\n  throw new Error(`composeMemoryEnvelope: ${field} ${message}`);\n}\n\n/**\n * Compose-time input hygiene mode (issue #1989 PR2, review round on #2014).\n *\n * - `strict` (default): every invalid field throws — correct for OPERATOR\n *   and API input (explicit capture, memory_store), where a bad value is a\n *   caller bug that must surface.\n * - `salvage`: for MACHINE-GENERATED input (LLM extraction, wearable\n *   ingestion). One malformed fact from an extractor must not abort a whole\n *   persistence batch that legacy `writeMemory` would have accepted.\n *   Invalid tags/attributes/optional fields are DROPPED with a note pushed\n *   to `envelope.salvageNotes` — visible, never silent (repo rule 34);\n *   callers log the notes. Content, category, ctx.source, and validAt stay\n *   FATAL in both modes (legacy writeMemory also throws on bad validAt, and\n *   a write without valid content/category cannot proceed).\n */\nexport interface ComposeEnvelopeOptions {\n  salvage?: boolean;\n}\n\n/** Internal reporter: throws in strict mode, records a note in salvage. */\ninterface Hygiene {\n  salvage: boolean;\n  notes: string[];\n  flag(field: string, message: string): void;\n}\n\nfunction makeHygiene(salvage: boolean): Hygiene {\n  const notes: string[] = [];\n  return {\n    salvage,\n    notes,\n    flag(field: string, message: string): void {\n      if (!salvage) fail(field, message);\n      notes.push(`${field} ${message}`);\n    },\n  };\n}\n\n/**\n * Validate and CANONICALIZE `validAt` via the repo's shared flexible ISO\n * parser (`utils/iso-timestamp.ts`) — the same family durable writes use, so\n * the envelope can never accept a value storage would reject or reinterpret\n * (review findings on #1998: no second validation convention; reduced\n * precision like `2026-07-17T09:30Z` is valid; offsets are bounded ±14:00;\n * `Date.parse` alone is not an ISO validator).\n *\n * Canonical form is the epoch round-trip (`Date.toISOString()`), so\n * fingerprints are identical for `...T09:30Z`, `...T09:30:00.000Z`, and the\n * same instant expressed with an offset (§13 hash-consistency).\n */\nfunction validateIsoTimestamp(field: string, value: string): string {\n  const trimmed = value.trim();\n  if (trimmed.length === 0) fail(field, \"must be a non-empty ISO 8601 timestamp\");\n  const epochMs = parseFlexibleIsoTimestamp(trimmed);\n  if (epochMs === null) {\n    fail(\n      field,\n      `is not a valid ISO 8601 date/timestamp: ${JSON.stringify(value)} (date-only, reduced precision, Z, and ±HH:MM offsets up to ±14:00 are accepted; calendar overflow is not)`,\n    );\n  }\n  return new Date(epochMs).toISOString();\n}\n\nfunction normalizeEnvelopeTags(raw: string[] | undefined, hygiene: Hygiene): readonly string[] {\n  if (raw === undefined) return Object.freeze([]);\n  if (!Array.isArray(raw)) {\n    hygiene.flag(\"tags\", \"must be an array of strings — dropped\");\n    return Object.freeze([]);\n  }\n  const usable: string[] = [];\n  for (const tag of raw) {\n    if (typeof tag !== \"string\") {\n      hygiene.flag(\"tags\", `entries must be strings (got ${typeof tag})`);\n      continue;\n    }\n    if (tag.trim().length > TAG_LIMITS.maxTagLength) {\n      hygiene.flag(\"tags\", `entry exceeds ${TAG_LIMITS.maxTagLength} characters: ${JSON.stringify(tag.slice(0, 40))}…`);\n      continue;\n    }\n    usable.push(tag);\n  }\n  let normalized = normalizeTags(usable) ?? [];\n  if (normalized.length > TAG_LIMITS.maxTags) {\n    hygiene.flag(\"tags\", `exceed the ${TAG_LIMITS.maxTags}-tag limit (got ${normalized.length}) — keeping the first ${TAG_LIMITS.maxTags}`);\n    normalized = normalized.slice(0, TAG_LIMITS.maxTags);\n  }\n  return Object.freeze(normalized);\n}\n\nfunction normalizeStructuredAttributes(\n  raw: Record<string, string> | undefined,\n  hygiene: Hygiene,\n): { canonical: Readonly<Record<string, string>>; raw: Readonly<Record<string, string>> } | undefined {\n  if (raw === undefined) return undefined;\n  if (\n    raw === null ||\n    typeof raw !== \"object\" ||\n    Array.isArray(raw) ||\n    (Object.getPrototypeOf(raw) !== Object.prototype && Object.getPrototypeOf(raw) !== null)\n  ) {\n    // Map/Date/class instances have empty Object.entries() and would\n    // silently normalize to \"no attributes\" (review finding on #1998\n    // round 5) — never a plain pass-through.\n    hygiene.flag(\"structuredAttributes\", \"must be a plain object of string values (Map, Date, and class instances are rejected) — dropped\");\n    return undefined;\n  }\n  let entries = Object.entries(raw);\n  if (entries.length === 0) return undefined;\n  if (entries.length > STRUCTURED_ATTRIBUTE_LIMITS.maxEntries) {\n    hygiene.flag(\n      \"structuredAttributes\",\n      `exceed the ${STRUCTURED_ATTRIBUTE_LIMITS.maxEntries}-entry limit (got ${entries.length}) — keeping the first ${STRUCTURED_ATTRIBUTE_LIMITS.maxEntries} in insertion order`,\n    );\n    entries = entries.slice(0, STRUCTURED_ATTRIBUTE_LIMITS.maxEntries);\n  }\n  // Keys that collide with Object.prototype machinery are REJECTED outright:\n  // `hashAccessIdempotencyPayload`'s stableStringify rebuilds objects with\n  // plain assignment, where a \"__proto__\" own property silently vanishes —\n  // so such a key can never round-trip through the fingerprint faithfully\n  // (review finding on #1998 round 3). Rejection beats smuggling (§1/§39).\n  const FORBIDDEN_ATTRIBUTE_KEYS = [\"__proto__\", \"constructor\", \"prototype\"];\n  const out: Record<string, string> = Object.create(null);\n  const survivingOriginal: Array<[string, string]> = [];\n  for (const [key, value] of entries) {\n    // Canonicalize exactly like storage's normalizeAttributePairs\n    // (storage.ts:1277): keys trim+lowercase, values trim — so the\n    // fingerprint and the persisted searchable form can never diverge\n    // (review finding on #1998; AGENTS.md §13 hash-consistency).\n    const cleanKey = key.trim().toLowerCase();\n    if (cleanKey.length === 0) {\n      hygiene.flag(\"structuredAttributes\", \"contain an empty key\");\n      continue;\n    }\n    if (cleanKey.length > STRUCTURED_ATTRIBUTE_LIMITS.maxKeyLength) {\n      hygiene.flag(\"structuredAttributes\", `key exceeds ${STRUCTURED_ATTRIBUTE_LIMITS.maxKeyLength} characters: ${JSON.stringify(cleanKey.slice(0, 40))}…`);\n      continue;\n    }\n    if (typeof value !== \"string\") {\n      hygiene.flag(\"structuredAttributes\", `value for ${JSON.stringify(cleanKey)} must be a string (got ${typeof value}) — stringify numbers/booleans at the call site`);\n      continue;\n    }\n    const cleanValue = value.trim();\n    if (FORBIDDEN_ATTRIBUTE_KEYS.includes(cleanKey)) {\n      hygiene.flag(\n        \"structuredAttributes\",\n        `contain the reserved key ${JSON.stringify(cleanKey)} — prototype-machinery names cannot round-trip through fingerprint serialization`,\n      );\n      continue;\n    }\n    if (cleanValue.length > STRUCTURED_ATTRIBUTE_LIMITS.maxValueLength) {\n      hygiene.flag(\"structuredAttributes\", `value for ${JSON.stringify(cleanKey)} exceeds ${STRUCTURED_ATTRIBUTE_LIMITS.maxValueLength} characters`);\n      continue;\n    }\n    if (Object.hasOwn(out, cleanKey)) {\n      hygiene.flag(\"structuredAttributes\", `contain duplicate key after canonicalization (trim + lowercase): ${JSON.stringify(cleanKey)}`);\n      continue;\n    }\n    out[cleanKey] = cleanValue;\n    survivingOriginal.push([key, value]);\n  }\n  if (Object.keys(out).length === 0) return undefined;\n  // Copy onto a normal object so downstream JSON/stableStringify behavior is\n  // unchanged; keys are already validated. The RAW map carries only the\n  // SURVIVING original pairs — dropped entries must not reach frontmatter.\n  return {\n    canonical: Object.freeze({ ...out }),\n    raw: Object.freeze(Object.fromEntries(survivingOriginal)),\n  };\n}\n\nfunction normalizeOptionalString(\n  field: string,\n  value: string | undefined,\n  hygiene: Hygiene,\n): string | undefined {\n  if (value === undefined) return undefined;\n  if (typeof value !== \"string\") {\n    hygiene.flag(field, `must be a string (got ${typeof value}) — dropped`);\n    return undefined;\n  }\n  const trimmed = value.trim();\n  if (trimmed.length === 0) {\n    hygiene.flag(field, \"must be non-empty when provided — dropped\");\n    return undefined;\n  }\n  return trimmed;\n}\n\n/**\n * Compose (normalize + validate + seal) a memory-write envelope.\n *\n * Strict mode (default) throws on any invalid input — never silently\n * defaults (AGENTS.md §1/§39). Salvage mode (`{ salvage: true }`, for\n * machine-generated input like LLM extraction) drops invalid OPTIONAL\n * fields with notes on `envelope.salvageNotes` instead of aborting the\n * batch; content/category/source/validAt stay fatal in both modes.\n */\nexport function composeMemoryEnvelope(\n  input: MemoryWriteInput,\n  ctx: WriteContext,\n  opts: ComposeEnvelopeOptions = {},\n): SealedMemoryEnvelope {\n  if (input === null || typeof input !== \"object\") fail(\"input\", \"must be an object\");\n  if (ctx === null || typeof ctx !== \"object\") fail(\"ctx\", \"must be an object\");\n  const hygiene = makeHygiene(opts.salvage === true);\n\n  if (typeof input.content !== \"string\" || input.content.trim().length === 0) {\n    fail(\"content\", \"must be a non-empty string\");\n  }\n  if (typeof input.category !== \"string\" || !isMemoryCategory(input.category)) {\n    fail(\n      \"category\",\n      `must be one of: ${MEMORY_CATEGORY_NAMES.join(\", \")} (got ${JSON.stringify(input.category)})`,\n    );\n  }\n  if (typeof ctx.source !== \"string\" || ctx.source.trim().length === 0) {\n    fail(\"ctx.source\", \"must be a non-empty string\");\n  }\n\n  let confidence: number | undefined;\n  if (input.confidence !== undefined) {\n    if (\n      typeof input.confidence !== \"number\" ||\n      !Number.isFinite(input.confidence) ||\n      input.confidence < 0 ||\n      input.confidence > 1\n    ) {\n      hygiene.flag(\n        \"confidence\",\n        `must be a finite number within [0, 1] (got ${String(input.confidence)}) — dropped (storage defaults apply)`,\n      );\n    } else {\n      confidence = input.confidence;\n    }\n  }\n\n  let subject: MemorySubject | undefined;\n  if (input.subject !== undefined) {\n    if (!isMemorySubject(input.subject)) {\n      hygiene.flag(\n        \"subject\",\n        `must be \"user\" or \"agent\" (got ${JSON.stringify(input.subject)}) — dropped`,\n      );\n    } else {\n      subject = input.subject;\n    }\n  }\n\n  // validAt stays FATAL in salvage too: legacy writeMemory throws on an\n  // invalid validAt (normalizeMemoryWriteTimestamp), so salvage-dropping it\n  // would CHANGE behavior rather than preserve it.\n  const validAt =\n    input.validAt === undefined ? undefined : validateIsoTimestamp(\"validAt\", input.validAt);\n\n  const now = ctx.now ? ctx.now() : new Date();\n  if (!(now instanceof Date) || Number.isNaN(now.getTime())) {\n    fail(\"ctx.now\", \"must return a valid Date\");\n  }\n\n  const attributes = normalizeStructuredAttributes(input.structuredAttributes, hygiene);\n  // Assemble the EXACT persisted form (attribute suffix + combined sanitize)\n  // with the same helper writeMemory uses — fingerprints hash this form, so\n  // envelope and storage cannot diverge (§13; #1998 round-8 thread resolved\n  // here in PR2 as promised). writeMemory assembles from the RAW map;\n  // normalizeAttributePairs canonicalizes internally, so raw and canonical\n  // maps yield the same suffix — asserted by the parity suite.\n  const assembled = assemblePersistedBody(\n    input.content,\n    attributes ? { ...attributes.raw } : undefined,\n  );\n  if (assembled.text.trim().length === 0) {\n    fail(\"content\", \"is empty after sanitization\");\n  }\n\n  const body = {\n    content: input.content,\n    persistedBody: assembled.text,\n    sanitizeViolations: Object.freeze([...assembled.violations]),\n    category: input.category,\n    tags: normalizeEnvelopeTags(input.tags, hygiene),\n    structuredAttributes: attributes?.canonical,\n    rawStructuredAttributes: attributes?.raw,\n    entityRef: normalizeOptionalString(\"entityRef\", input.entityRef, hygiene),\n    origin: normalizeOptionalString(\"origin\", input.origin, hygiene),\n    subject,\n    confidence,\n    ttl: normalizeOptionalString(\"ttl\", input.ttl, hygiene),\n    validAt,\n    sourceConnector: normalizeOptionalString(\"sourceConnector\", input.sourceConnector, hygiene),\n    sourceReason: normalizeOptionalString(\"sourceReason\", input.sourceReason, hygiene),\n    source: ctx.source.trim(),\n    composedAt: now.toISOString(),\n    salvageNotes: Object.freeze([...hygiene.notes]),\n  };\n  const envelope = Object.freeze(body) as unknown as SealedMemoryEnvelope;\n  SEALED_ENVELOPES.add(envelope);\n  return envelope;\n}\n\n// The runtime seal registry. The declared `sealed` unique symbol exists only\n// at the type level (compile-time fence); this WeakSet is the runtime fence.\nconst SEALED_ENVELOPES = new WeakSet<object>();\n\n/**\n * TOCTOU guard for the structural arm (#2014 round 4): a frozen object may\n * still carry ACCESSOR properties whose getters return different values on\n * each read — valid data during re-composition, forged data when the write\n * path reads the field again. Frozen DATA properties are immutable, so\n * requiring data-only descriptors (on the envelope and its array/map\n * fields) makes every later read provably identical to the validated one.\n */\nfunction hasOnlyFrozenDataProperties(value: object): boolean {\n  if (!Object.isFrozen(value)) return false;\n  // Inherited accessors are as dangerous as own ones (round 5): a frozen\n  // object can inherit a `tags` getter from a custom prototype. Composer\n  // envelopes are plain object literals and plain arrays — require exactly\n  // those prototypes so prototype-supplied getters cannot serve fields.\n  const proto = Object.getPrototypeOf(value);\n  if (Array.isArray(value)) {\n    if (proto !== Array.prototype) return false;\n  } else if (proto !== Object.prototype && proto !== null) {\n    return false;\n  }\n  for (const key of Reflect.ownKeys(value)) {\n    const descriptor = Object.getOwnPropertyDescriptor(value, key);\n    if (!descriptor || descriptor.get !== undefined || descriptor.set !== undefined) {\n      return false;\n    }\n  }\n  return true;\n}\n\n/**\n * Runtime check (belt) — the compile-time brand is the real fence.\n *\n * Fast path: WeakSet membership (same module graph). Fallback: RE-COMPOSITION\n * EQUIVALENCE — Node resolves `@remnic/core` through `dist/` for built\n * consumers and `src/` for tsx-loaded tests, and each graph gets its OWN\n * WeakSet, so identity alone would reject genuinely-sealed envelopes that\n * crossed a build boundary. The structural arm requires frozen DATA-only\n * properties (no accessors — TOCTOU guard, round 4), then re-runs the\n * STRICT composer on the candidate's own inputs and demands every envelope\n * field reproduce exactly (#2014 round 2: shape-only validation admitted\n * lookalikes with 51 tags or out-of-range confidence). A value that\n * survives has, by construction, passed every composer invariant, and its\n * fields cannot change between validation and the write that follows.\n *\n * `salvageNotes` is deliberately NOT compared: a legitimately salvage-minted\n * envelope carries notes while the strict re-composition of its (already\n * clean) surviving fields yields none. Notes are advisory provenance, not\n * identity — every load-bearing field is still verified.\n */\n\nexport function isSealedMemoryEnvelope(value: unknown): value is SealedMemoryEnvelope {\n  if (typeof value !== \"object\" || value === null) return false;\n  if (SEALED_ENVELOPES.has(value)) return true;\n  if (!hasOnlyFrozenDataProperties(value)) return false;\n  const v = value as Partial<SealedMemoryEnvelope>;\n  if (\n    typeof v.content !== \"string\" ||\n    typeof v.persistedBody !== \"string\" ||\n    typeof v.source !== \"string\" ||\n    typeof v.composedAt !== \"string\" ||\n    typeof v.category !== \"string\" ||\n    !isMemoryCategory(v.category) ||\n    !Array.isArray(v.tags) ||\n    !hasOnlyFrozenDataProperties(v.tags) ||\n    !Array.isArray(v.sanitizeViolations) ||\n    !hasOnlyFrozenDataProperties(v.sanitizeViolations) ||\n    !Array.isArray(v.salvageNotes) ||\n    !hasOnlyFrozenDataProperties(v.salvageNotes)\n  ) {\n    return false;\n  }\n  const attrs = v.rawStructuredAttributes;\n  if (\n    attrs !== undefined &&\n    (attrs === null || typeof attrs !== \"object\" || Array.isArray(attrs) || !hasOnlyFrozenDataProperties(attrs))\n  ) {\n    return false;\n  }\n  const canonicalAttrs = v.structuredAttributes;\n  if (\n    canonicalAttrs !== undefined &&\n    (canonicalAttrs === null ||\n      typeof canonicalAttrs !== \"object\" ||\n      Array.isArray(canonicalAttrs) ||\n      !hasOnlyFrozenDataProperties(canonicalAttrs))\n  ) {\n    return false;\n  }\n  let rebuilt: SealedMemoryEnvelope;\n  try {\n    rebuilt = composeMemoryEnvelope(\n      {\n        content: v.content,\n        category: v.category,\n        ...(v.tags.length > 0 ? { tags: [...(v.tags as string[])] } : {}),\n        ...(attrs !== undefined ? { structuredAttributes: { ...attrs } } : {}),\n        ...(v.entityRef !== undefined ? { entityRef: v.entityRef } : {}),\n        ...(v.confidence !== undefined ? { confidence: v.confidence } : {}),\n        ...(v.ttl !== undefined ? { ttl: v.ttl } : {}),\n        ...(v.validAt !== undefined ? { validAt: v.validAt } : {}),\n        ...(v.sourceConnector !== undefined ? { sourceConnector: v.sourceConnector } : {}),\n        ...(v.origin !== undefined ? { origin: v.origin } : {}),\n        ...(v.sourceReason !== undefined ? { sourceReason: v.sourceReason } : {}),\n      },\n      { source: v.source, now: () => new Date(v.composedAt as string) },\n    );\n  } catch {\n    // Strict re-composition rejected an input — the candidate carries a\n    // value the composer would never have minted.\n    return false;\n  }\n  const sameArray = (a: readonly string[], b: readonly string[]): boolean =>\n    a.length === b.length && a.every((entry, i) => entry === b[i]);\n  const sameMap = (\n    a: Readonly<Record<string, string>> | undefined,\n    b: Readonly<Record<string, string>> | undefined,\n  ): boolean => {\n    if (a === undefined || b === undefined) return a === b;\n    const ak = Object.keys(a);\n    const bk = Object.keys(b);\n    return ak.length === bk.length && ak.every((k) => Object.hasOwn(b, k) && a[k] === b[k]);\n  };\n  return (\n    rebuilt.content === v.content &&\n    rebuilt.persistedBody === v.persistedBody &&\n    rebuilt.category === v.category &&\n    rebuilt.source === v.source &&\n    rebuilt.composedAt === v.composedAt &&\n    rebuilt.confidence === v.confidence &&\n    rebuilt.entityRef === v.entityRef &&\n    rebuilt.ttl === v.ttl &&\n    rebuilt.validAt === v.validAt &&\n    rebuilt.sourceConnector === v.sourceConnector &&\n    rebuilt.origin === v.origin &&\n    rebuilt.sourceReason === v.sourceReason &&\n    sameArray(rebuilt.tags, v.tags as string[]) &&\n    sameArray(rebuilt.sanitizeViolations, v.sanitizeViolations as string[]) &&\n    sameMap(rebuilt.structuredAttributes, v.structuredAttributes) &&\n    sameMap(rebuilt.rawStructuredAttributes, attrs)\n  );\n}\n\n/**\n * The ONE mapping from a sealed envelope (+ extras) to the legacy\n * `writeMemory(category, content, options)` argument shape. Used by\n * `StorageManager.writeSealedMemory` AND by test doubles that stub storage —\n * so mock fidelity (AGENTS.md §21) cannot drift from production.\n */\nexport function sealedWriteToLegacyArgs(\n  envelope: SealedMemoryEnvelope,\n  extras: Record<string, unknown> = {},\n): { category: MemoryCategory; content: string; options: Record<string, unknown> } {\n  return {\n    category: envelope.category,\n    content: envelope.content,\n    options: {\n      ...extras,\n      confidence: envelope.confidence,\n      tags: envelope.tags.length > 0 ? [...envelope.tags] : undefined,\n      entityRef: envelope.entityRef,\n      source: envelope.source,\n      expiresAt: envelope.ttl,\n      validAt: envelope.validAt,\n      // RAW map for frontmatter byte-parity with the legacy path; the body\n      // suffix canonicalizes identically from either form.\n      structuredAttributes: envelope.rawStructuredAttributes\n        ? { ...envelope.rawStructuredAttributes }\n        : undefined,\n      // Unconditional (round 3): envelope-owned fields must ALWAYS overwrite\n      // extras — a conditional spread let extras.sourceConnector smuggle\n      // unvalidated connector provenance past the sealed envelope when the\n      // envelope had none.\n      origin: envelope.origin,\n      sourceConnector: envelope.sourceConnector,\n      subject: envelope.subject,\n    },\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Idempotency field registry\n// ---------------------------------------------------------------------------\n\n/**\n * Ordered registry of envelope fields that participate in write-idempotency\n * fingerprints. Adding a fingerprint-relevant field = one entry here; every\n * surface that builds its payload via `buildWriteIdempotencyPayload()` picks\n * it up automatically.\n */\nexport const WRITE_FINGERPRINT_FIELDS = [\n  \"content\",\n  \"category\",\n  \"tags\",\n  \"structuredAttributes\",\n  \"entityRef\",\n  \"ttl\",\n  \"validAt\",\n  \"sourceConnector\",\n] as const satisfies readonly (keyof MemoryWriteInput)[];\n\n/**\n * Envelope fields deliberately EXCLUDED from fingerprints. Exempting a field\n * is a visible, reviewable decision — this list exists so the exhaustiveness\n * guard can force every new `MemoryWriteInput` field to be classified.\n */\nexport const FINGERPRINT_EXEMPT_FIELDS = [\n  // Confidence is a scoring detail: two extractions of the same fact with\n  // slightly different confidence are the same write for dedup purposes.\n  \"confidence\",\n  // Free-text provenance note; carries no identity.\n  // Origin is provenance metadata, not write identity (#1955).\n  \"origin\",\n  // Subject is derived classification metadata (#2372): two writes identical\n  // except subject are the same memory for dedup purposes.\n  \"subject\",\n  \"sourceReason\",\n] as const satisfies readonly (keyof MemoryWriteInput)[];\n\n/** Scope keys always folded into the fingerprint payload. */\nexport const FINGERPRINT_SCOPE_FIELDS = [\n  \"surface\",\n  \"namespace\",\n  \"principal\",\n  \"codingContext\",\n] as const satisfies readonly (keyof FingerprintScope)[];\n\n// --- compile-time exhaustiveness guards ------------------------------------\n// A new MemoryWriteInput field that is in NEITHER list is a compile error;\n// a registry entry that names a non-existent field is a compile error; a\n// field in BOTH lists is a compile error.\n\ntype RegistryField = (typeof WRITE_FINGERPRINT_FIELDS)[number];\ntype ExemptField = (typeof FINGERPRINT_EXEMPT_FIELDS)[number];\ntype UnclassifiedField = Exclude<keyof MemoryWriteInput, RegistryField | ExemptField>;\ntype DoublyClassifiedField = RegistryField & ExemptField;\n\nconst assertEveryFieldClassified: UnclassifiedField extends never ? true : never = true;\nconst assertNoDoubleClassification: DoublyClassifiedField extends never ? true : never = true;\nvoid assertEveryFieldClassified;\nvoid assertNoDoubleClassification;\n\n// ---------------------------------------------------------------------------\n// Payload builder\n// ---------------------------------------------------------------------------\n\n/**\n * Build the canonical write-idempotency payload for a sealed envelope.\n *\n * Determinism guarantees (AGENTS.md §26):\n *   - tags are SORTED in the payload (tag order never changes identity);\n *   - structured attributes are serialized key-sorted by the existing\n *     `stableStringify` inside `hashAccessIdempotencyPayload`;\n *   - the payload shape is versioned (`v: 1`) so a future field-semantics\n *     change can migrate stored idempotency state explicitly instead of\n *     silently colliding.\n *\n * Feed the result to `hashAccessIdempotencyPayload()` — this module does\n * not hash so surfaces keep a single hashing implementation.\n */\nexport function buildWriteIdempotencyPayload(\n  envelope: SealedMemoryEnvelope,\n  scope: FingerprintScope,\n): Record<string, unknown> {\n  if (!isSealedMemoryEnvelope(envelope)) {\n    throw new Error(\n      \"buildWriteIdempotencyPayload: envelope must be minted by composeMemoryEnvelope\",\n    );\n  }\n  if (scope === null || typeof scope !== \"object\") {\n    throw new Error(\"buildWriteIdempotencyPayload: scope must be an object\");\n  }\n  if (typeof scope.surface !== \"string\" || scope.surface.trim().length === 0) {\n    throw new Error(\"buildWriteIdempotencyPayload: scope.surface must be a non-empty string\");\n  }\n\n  const fields: Record<string, unknown> = {};\n  for (const field of WRITE_FINGERPRINT_FIELDS) {\n    const value = envelope[field];\n    if (value === undefined) continue;\n    if (field === \"tags\") {\n      const tags = value as readonly string[];\n      if (tags.length === 0) continue;\n      fields.tags = [...tags].sort();\n      continue;\n    }\n    if (field === \"content\") {\n      // Fingerprints hash the PERSISTED form (attribute suffix + combined\n      // sanitize), not the raw input — one instant of stored state, one\n      // fingerprint (§13; issue #1989 PR2).\n      fields.content = envelope.persistedBody;\n      continue;\n    }\n    fields[field] = value;\n  }\n  // The write source (extraction vs wearable:bee vs observe replay, ...) is\n  // identity: the same content arriving from two different sources must not\n  // dedupe into one write (review finding on #1998). Not a MemoryWriteInput\n  // key, so it rides beside the registry fields explicitly.\n  fields.source = envelope.source;\n\n  const scopeOut: Record<string, string> = {};\n  for (const key of FINGERPRINT_SCOPE_FIELDS) {\n    const value = scope[key];\n    if (value === undefined) continue;\n    if (typeof value !== \"string\") {\n      throw new Error(`buildWriteIdempotencyPayload: scope.${key} must be a string`);\n    }\n    // Trimmed: \"ns\" and \"ns \" must not mint distinct fingerprints (review\n    // finding on #1998). Empty-after-trim optional scope values are dropped.\n    const cleanValue = value.trim();\n    if (key === \"surface\" || cleanValue.length > 0) {\n      scopeOut[key] = cleanValue;\n    }\n  }\n\n  return { v: 1, kind: \"memory-write\", fields, scope: scopeOut };\n}\n\n// ---------------------------------------------------------------------------\n// Access-surface request fingerprints (issue #1989 PR3)\n// ---------------------------------------------------------------------------\n//\n// The access surfaces (memory_store / suggestion_submit writes, their peek\n// twins, and observe) key their idempotency dedup on a hash of the RAW\n// request — computed BEFORE validation, and persisted indefinitely in\n// `AccessIdempotencyStore` (last-512 LRU, no time TTL). Those stored hashes\n// are load-bearing state: changing the payload shape would silently break\n// replay/conflict detection for every in-flight key. So these builders\n// REPRODUCE each surface's historical shape byte-for-byte (asserted by the\n// parity suite) instead of adopting the versioned envelope payload above —\n// a versioned migration of stored state is the explicit prerequisite for\n// unifying them (#1989 PR3 scope note).\n//\n// What centralizing buys even under byte-parity: one module now owns every\n// fingerprint shape, and the compile-time assertion below ties the write\n// shape to WRITE_FINGERPRINT_FIELDS — adding a fingerprint-relevant field\n// to MemoryWriteInput fails compilation here until the author decides how\n// the access surfaces represent it.\n\n/** The raw request fields the write surfaces fingerprint (legacy shape). */\nexport interface AccessWriteFingerprintParts {\n  schemaVersion: number;\n  namespace: string;\n  content: string;\n  category?: string;\n  confidence?: number;\n  tags?: string[];\n  entityRef?: string;\n  ttl?: string;\n  sourceReason?: string;\n  sourceConnector?: string;\n}\n\n// Registry coupling: every fingerprint-relevant MemoryWriteInput field must\n// either appear in AccessWriteFingerprintParts or be named in this explicit\n// exemption list. `structuredAttributes` and `validAt` are exempt because\n// the access write requests cannot express them today (ExplicitCaptureInput\n// has no such fields) — the moment they become representable, this type\n// stops compiling and forces a fingerprint decision (+ versioned state\n// migration) instead of a silent dedup gap.\ntype AccessSurfaceUnrepresentable = \"structuredAttributes\" | \"validAt\";\ntype UncoveredAccessFingerprintField = Exclude<\n  Extract<RegistryField, keyof MemoryWriteInput>,\n  keyof AccessWriteFingerprintParts | AccessSurfaceUnrepresentable\n>;\nconst assertAccessFingerprintCoversRegistry: UncoveredAccessFingerprintField extends never\n  ? true\n  : never = true;\nvoid assertAccessFingerprintCoversRegistry;\n\n/**\n * Fingerprint payload for `memory_store` / `suggestion_submit` (write AND\n * peek paths — both MUST call this so peek can never diverge from the\n * write it predicts). Key set and values reproduce the historical inline\n * literals exactly; `hashAccessIdempotencyPayload`'s stableStringify sorts\n * keys and drops `undefined`, so optional absent fields hash identically\n * to the old shape.\n */\nexport function buildAccessWriteRequestFingerprint(\n  parts: AccessWriteFingerprintParts,\n): Record<string, unknown> {\n  return {\n    schemaVersion: parts.schemaVersion,\n    content: parts.content,\n    category: parts.category,\n    confidence: parts.confidence,\n    namespace: parts.namespace,\n    tags: parts.tags,\n    entityRef: parts.entityRef,\n    ttl: parts.ttl,\n    sourceReason: parts.sourceReason,\n    sourceConnector: parts.sourceConnector,\n  };\n}\n\n/** The raw request fields the observe surface fingerprints (legacy shape). */\nexport interface ObserveFingerprintParts {\n  sessionKey: string;\n  messages: unknown;\n  namespace?: string;\n  skipExtraction?: boolean;\n  authenticatedPrincipal?: string;\n  cwd?: string;\n  projectTag?: string;\n  /** Resolved coding context — `null` (not undefined) when absent, matching the historical literal. */\n  effectiveCodingContext: unknown;\n  sourceConnector?: string;\n}\n\n/**\n * Fingerprint payload for `observe` — turn ingestion, not a memory write,\n * so it fingerprints session/message identity rather than MemoryWriteInput\n * fields. Shape reproduces the historical inline literal exactly.\n */\nexport function buildObserveRequestFingerprint(\n  parts: ObserveFingerprintParts,\n): Record<string, unknown> {\n  return {\n    sessionKey: parts.sessionKey,\n    messages: parts.messages,\n    namespace: parts.namespace,\n    skipExtraction: parts.skipExtraction,\n    authenticatedPrincipal: parts.authenticatedPrincipal,\n    cwd: parts.cwd,\n    projectTag: parts.projectTag,\n    effectiveCodingContext: parts.effectiveCodingContext,\n    sourceConnector: parts.sourceConnector,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;AA2FO,IAAM,aAAa,OAAO,OAAO;AAAA;AAAA,EAEtC,SAAS;AAAA;AAAA,EAET,cAAc;AAChB,CAAC;AAEM,IAAM,8BAA8B,OAAO,OAAO;AAAA;AAAA,EAEvD,YAAY;AAAA;AAAA,EAEZ,cAAc;AAAA;AAAA,EAEd,gBAAgB;AAClB,CAAC;AAED,IAAM,wBAAsD;AAAA,EAC1D,MAAM;AAAA,EACN,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,cAAc;AAAA,EACd,WAAW;AAAA,EACX,YAAY;AAAA,EACZ,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,MAAM;AAAA,EACN,WAAW;AAAA,EACX,iBAAiB;AACnB;AAOO,IAAM,wBAAwB,OAAO,KAAK,qBAAqB,EAAE,KAAK;AAEtE,SAAS,iBAAiB,OAAwC;AACvE,SAAO,OAAO,UAAU,eAAe,KAAK,uBAAuB,KAAK;AAC1E;AAqEA,SAAS,KAAK,OAAe,SAAwB;AACnD,QAAM,IAAI,MAAM,0BAA0B,KAAK,IAAI,OAAO,EAAE;AAC9D;AA4BA,SAAS,YAAY,SAA2B;AAC9C,QAAM,QAAkB,CAAC;AACzB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,KAAK,OAAe,SAAuB;AACzC,UAAI,CAAC,QAAS,MAAK,OAAO,OAAO;AACjC,YAAM,KAAK,GAAG,KAAK,IAAI,OAAO,EAAE;AAAA,IAClC;AAAA,EACF;AACF;AAcA,SAAS,qBAAqB,OAAe,OAAuB;AAClE,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,QAAQ,WAAW,EAAG,MAAK,OAAO,wCAAwC;AAC9E,QAAM,UAAU,0BAA0B,OAAO;AACjD,MAAI,YAAY,MAAM;AACpB;AAAA,MACE;AAAA,MACA,2CAA2C,KAAK,UAAU,KAAK,CAAC;AAAA,IAClE;AAAA,EACF;AACA,SAAO,IAAI,KAAK,OAAO,EAAE,YAAY;AACvC;AAEA,SAAS,sBAAsB,KAA2B,SAAqC;AAC7F,MAAI,QAAQ,OAAW,QAAO,OAAO,OAAO,CAAC,CAAC;AAC9C,MAAI,CAAC,MAAM,QAAQ,GAAG,GAAG;AACvB,YAAQ,KAAK,QAAQ,4CAAuC;AAC5D,WAAO,OAAO,OAAO,CAAC,CAAC;AAAA,EACzB;AACA,QAAM,SAAmB,CAAC;AAC1B,aAAW,OAAO,KAAK;AACrB,QAAI,OAAO,QAAQ,UAAU;AAC3B,cAAQ,KAAK,QAAQ,gCAAgC,OAAO,GAAG,GAAG;AAClE;AAAA,IACF;AACA,QAAI,IAAI,KAAK,EAAE,SAAS,WAAW,cAAc;AAC/C,cAAQ,KAAK,QAAQ,iBAAiB,WAAW,YAAY,gBAAgB,KAAK,UAAU,IAAI,MAAM,GAAG,EAAE,CAAC,CAAC,QAAG;AAChH;AAAA,IACF;AACA,WAAO,KAAK,GAAG;AAAA,EACjB;AACA,MAAI,aAAa,cAAc,MAAM,KAAK,CAAC;AAC3C,MAAI,WAAW,SAAS,WAAW,SAAS;AAC1C,YAAQ,KAAK,QAAQ,cAAc,WAAW,OAAO,mBAAmB,WAAW,MAAM,8BAAyB,WAAW,OAAO,EAAE;AACtI,iBAAa,WAAW,MAAM,GAAG,WAAW,OAAO;AAAA,EACrD;AACA,SAAO,OAAO,OAAO,UAAU;AACjC;AAEA,SAAS,8BACP,KACA,SACoG;AACpG,MAAI,QAAQ,OAAW,QAAO;AAC9B,MACE,QAAQ,QACR,OAAO,QAAQ,YACf,MAAM,QAAQ,GAAG,KAChB,OAAO,eAAe,GAAG,MAAM,OAAO,aAAa,OAAO,eAAe,GAAG,MAAM,MACnF;AAIA,YAAQ,KAAK,wBAAwB,sGAAiG;AACtI,WAAO;AAAA,EACT;AACA,MAAI,UAAU,OAAO,QAAQ,GAAG;AAChC,MAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,MAAI,QAAQ,SAAS,4BAA4B,YAAY;AAC3D,YAAQ;AAAA,MACN;AAAA,MACA,cAAc,4BAA4B,UAAU,qBAAqB,QAAQ,MAAM,8BAAyB,4BAA4B,UAAU;AAAA,IACxJ;AACA,cAAU,QAAQ,MAAM,GAAG,4BAA4B,UAAU;AAAA,EACnE;AAMA,QAAM,2BAA2B,CAAC,aAAa,eAAe,WAAW;AACzE,QAAM,MAA8B,uBAAO,OAAO,IAAI;AACtD,QAAM,oBAA6C,CAAC;AACpD,aAAW,CAAC,KAAK,KAAK,KAAK,SAAS;AAKlC,UAAM,WAAW,IAAI,KAAK,EAAE,YAAY;AACxC,QAAI,SAAS,WAAW,GAAG;AACzB,cAAQ,KAAK,wBAAwB,sBAAsB;AAC3D;AAAA,IACF;AACA,QAAI,SAAS,SAAS,4BAA4B,cAAc;AAC9D,cAAQ,KAAK,wBAAwB,eAAe,4BAA4B,YAAY,gBAAgB,KAAK,UAAU,SAAS,MAAM,GAAG,EAAE,CAAC,CAAC,QAAG;AACpJ;AAAA,IACF;AACA,QAAI,OAAO,UAAU,UAAU;AAC7B,cAAQ,KAAK,wBAAwB,aAAa,KAAK,UAAU,QAAQ,CAAC,0BAA0B,OAAO,KAAK,sDAAiD;AACjK;AAAA,IACF;AACA,UAAM,aAAa,MAAM,KAAK;AAC9B,QAAI,yBAAyB,SAAS,QAAQ,GAAG;AAC/C,cAAQ;AAAA,QACN;AAAA,QACA,4BAA4B,KAAK,UAAU,QAAQ,CAAC;AAAA,MACtD;AACA;AAAA,IACF;AACA,QAAI,WAAW,SAAS,4BAA4B,gBAAgB;AAClE,cAAQ,KAAK,wBAAwB,aAAa,KAAK,UAAU,QAAQ,CAAC,YAAY,4BAA4B,cAAc,aAAa;AAC7I;AAAA,IACF;AACA,QAAI,OAAO,OAAO,KAAK,QAAQ,GAAG;AAChC,cAAQ,KAAK,wBAAwB,oEAAoE,KAAK,UAAU,QAAQ,CAAC,EAAE;AACnI;AAAA,IACF;AACA,QAAI,QAAQ,IAAI;AAChB,sBAAkB,KAAK,CAAC,KAAK,KAAK,CAAC;AAAA,EACrC;AACA,MAAI,OAAO,KAAK,GAAG,EAAE,WAAW,EAAG,QAAO;AAI1C,SAAO;AAAA,IACL,WAAW,OAAO,OAAO,EAAE,GAAG,IAAI,CAAC;AAAA,IACnC,KAAK,OAAO,OAAO,OAAO,YAAY,iBAAiB,CAAC;AAAA,EAC1D;AACF;AAEA,SAAS,wBACP,OACA,OACA,SACoB;AACpB,MAAI,UAAU,OAAW,QAAO;AAChC,MAAI,OAAO,UAAU,UAAU;AAC7B,YAAQ,KAAK,OAAO,yBAAyB,OAAO,KAAK,kBAAa;AACtE,WAAO;AAAA,EACT;AACA,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,QAAQ,WAAW,GAAG;AACxB,YAAQ,KAAK,OAAO,gDAA2C;AAC/D,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAWO,SAAS,sBACd,OACA,KACA,OAA+B,CAAC,GACV;AACtB,MAAI,UAAU,QAAQ,OAAO,UAAU,SAAU,MAAK,SAAS,mBAAmB;AAClF,MAAI,QAAQ,QAAQ,OAAO,QAAQ,SAAU,MAAK,OAAO,mBAAmB;AAC5E,QAAM,UAAU,YAAY,KAAK,YAAY,IAAI;AAEjD,MAAI,OAAO,MAAM,YAAY,YAAY,MAAM,QAAQ,KAAK,EAAE,WAAW,GAAG;AAC1E,SAAK,WAAW,4BAA4B;AAAA,EAC9C;AACA,MAAI,OAAO,MAAM,aAAa,YAAY,CAAC,iBAAiB,MAAM,QAAQ,GAAG;AAC3E;AAAA,MACE;AAAA,MACA,mBAAmB,sBAAsB,KAAK,IAAI,CAAC,SAAS,KAAK,UAAU,MAAM,QAAQ,CAAC;AAAA,IAC5F;AAAA,EACF;AACA,MAAI,OAAO,IAAI,WAAW,YAAY,IAAI,OAAO,KAAK,EAAE,WAAW,GAAG;AACpE,SAAK,cAAc,4BAA4B;AAAA,EACjD;AAEA,MAAI;AACJ,MAAI,MAAM,eAAe,QAAW;AAClC,QACE,OAAO,MAAM,eAAe,YAC5B,CAAC,OAAO,SAAS,MAAM,UAAU,KACjC,MAAM,aAAa,KACnB,MAAM,aAAa,GACnB;AACA,cAAQ;AAAA,QACN;AAAA,QACA,8CAA8C,OAAO,MAAM,UAAU,CAAC;AAAA,MACxE;AAAA,IACF,OAAO;AACL,mBAAa,MAAM;AAAA,IACrB;AAAA,EACF;AAEA,MAAI;AACJ,MAAI,MAAM,YAAY,QAAW;AAC/B,QAAI,CAAC,gBAAgB,MAAM,OAAO,GAAG;AACnC,cAAQ;AAAA,QACN;AAAA,QACA,kCAAkC,KAAK,UAAU,MAAM,OAAO,CAAC;AAAA,MACjE;AAAA,IACF,OAAO;AACL,gBAAU,MAAM;AAAA,IAClB;AAAA,EACF;AAKA,QAAM,UACJ,MAAM,YAAY,SAAY,SAAY,qBAAqB,WAAW,MAAM,OAAO;AAEzF,QAAM,MAAM,IAAI,MAAM,IAAI,IAAI,IAAI,oBAAI,KAAK;AAC3C,MAAI,EAAE,eAAe,SAAS,OAAO,MAAM,IAAI,QAAQ,CAAC,GAAG;AACzD,SAAK,WAAW,0BAA0B;AAAA,EAC5C;AAEA,QAAM,aAAa,8BAA8B,MAAM,sBAAsB,OAAO;AAOpF,QAAM,YAAY;AAAA,IAChB,MAAM;AAAA,IACN,aAAa,EAAE,GAAG,WAAW,IAAI,IAAI;AAAA,EACvC;AACA,MAAI,UAAU,KAAK,KAAK,EAAE,WAAW,GAAG;AACtC,SAAK,WAAW,6BAA6B;AAAA,EAC/C;AAEA,QAAM,OAAO;AAAA,IACX,SAAS,MAAM;AAAA,IACf,eAAe,UAAU;AAAA,IACzB,oBAAoB,OAAO,OAAO,CAAC,GAAG,UAAU,UAAU,CAAC;AAAA,IAC3D,UAAU,MAAM;AAAA,IAChB,MAAM,sBAAsB,MAAM,MAAM,OAAO;AAAA,IAC/C,sBAAsB,YAAY;AAAA,IAClC,yBAAyB,YAAY;AAAA,IACrC,WAAW,wBAAwB,aAAa,MAAM,WAAW,OAAO;AAAA,IACxE,QAAQ,wBAAwB,UAAU,MAAM,QAAQ,OAAO;AAAA,IAC/D;AAAA,IACA;AAAA,IACA,KAAK,wBAAwB,OAAO,MAAM,KAAK,OAAO;AAAA,IACtD;AAAA,IACA,iBAAiB,wBAAwB,mBAAmB,MAAM,iBAAiB,OAAO;AAAA,IAC1F,cAAc,wBAAwB,gBAAgB,MAAM,cAAc,OAAO;AAAA,IACjF,QAAQ,IAAI,OAAO,KAAK;AAAA,IACxB,YAAY,IAAI,YAAY;AAAA,IAC5B,cAAc,OAAO,OAAO,CAAC,GAAG,QAAQ,KAAK,CAAC;AAAA,EAChD;AACA,QAAM,WAAW,OAAO,OAAO,IAAI;AACnC,mBAAiB,IAAI,QAAQ;AAC7B,SAAO;AACT;AAIA,IAAM,mBAAmB,oBAAI,QAAgB;AAU7C,SAAS,4BAA4B,OAAwB;AAC3D,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AAKpC,QAAM,QAAQ,OAAO,eAAe,KAAK;AACzC,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,QAAI,UAAU,MAAM,UAAW,QAAO;AAAA,EACxC,WAAW,UAAU,OAAO,aAAa,UAAU,MAAM;AACvD,WAAO;AAAA,EACT;AACA,aAAW,OAAO,QAAQ,QAAQ,KAAK,GAAG;AACxC,UAAM,aAAa,OAAO,yBAAyB,OAAO,GAAG;AAC7D,QAAI,CAAC,cAAc,WAAW,QAAQ,UAAa,WAAW,QAAQ,QAAW;AAC/E,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAuBO,SAAS,uBAAuB,OAA+C;AACpF,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,MAAI,iBAAiB,IAAI,KAAK,EAAG,QAAO;AACxC,MAAI,CAAC,4BAA4B,KAAK,EAAG,QAAO;AAChD,QAAM,IAAI;AACV,MACE,OAAO,EAAE,YAAY,YACrB,OAAO,EAAE,kBAAkB,YAC3B,OAAO,EAAE,WAAW,YACpB,OAAO,EAAE,eAAe,YACxB,OAAO,EAAE,aAAa,YACtB,CAAC,iBAAiB,EAAE,QAAQ,KAC5B,CAAC,MAAM,QAAQ,EAAE,IAAI,KACrB,CAAC,4BAA4B,EAAE,IAAI,KACnC,CAAC,MAAM,QAAQ,EAAE,kBAAkB,KACnC,CAAC,4BAA4B,EAAE,kBAAkB,KACjD,CAAC,MAAM,QAAQ,EAAE,YAAY,KAC7B,CAAC,4BAA4B,EAAE,YAAY,GAC3C;AACA,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,EAAE;AAChB,MACE,UAAU,WACT,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,KAAK,CAAC,4BAA4B,KAAK,IAC1G;AACA,WAAO;AAAA,EACT;AACA,QAAM,iBAAiB,EAAE;AACzB,MACE,mBAAmB,WAClB,mBAAmB,QAClB,OAAO,mBAAmB,YAC1B,MAAM,QAAQ,cAAc,KAC5B,CAAC,4BAA4B,cAAc,IAC7C;AACA,WAAO;AAAA,EACT;AACA,MAAI;AACJ,MAAI;AACF,cAAU;AAAA,MACR;AAAA,QACE,SAAS,EAAE;AAAA,QACX,UAAU,EAAE;AAAA,QACZ,GAAI,EAAE,KAAK,SAAS,IAAI,EAAE,MAAM,CAAC,GAAI,EAAE,IAAiB,EAAE,IAAI,CAAC;AAAA,QAC/D,GAAI,UAAU,SAAY,EAAE,sBAAsB,EAAE,GAAG,MAAM,EAAE,IAAI,CAAC;AAAA,QACpE,GAAI,EAAE,cAAc,SAAY,EAAE,WAAW,EAAE,UAAU,IAAI,CAAC;AAAA,QAC9D,GAAI,EAAE,eAAe,SAAY,EAAE,YAAY,EAAE,WAAW,IAAI,CAAC;AAAA,QACjE,GAAI,EAAE,QAAQ,SAAY,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC;AAAA,QAC5C,GAAI,EAAE,YAAY,SAAY,EAAE,SAAS,EAAE,QAAQ,IAAI,CAAC;AAAA,QACxD,GAAI,EAAE,oBAAoB,SAAY,EAAE,iBAAiB,EAAE,gBAAgB,IAAI,CAAC;AAAA,QAChF,GAAI,EAAE,WAAW,SAAY,EAAE,QAAQ,EAAE,OAAO,IAAI,CAAC;AAAA,QACrD,GAAI,EAAE,iBAAiB,SAAY,EAAE,cAAc,EAAE,aAAa,IAAI,CAAC;AAAA,MACzE;AAAA,MACA,EAAE,QAAQ,EAAE,QAAQ,KAAK,MAAM,IAAI,KAAK,EAAE,UAAoB,EAAE;AAAA,IAClE;AAAA,EACF,QAAQ;AAGN,WAAO;AAAA,EACT;AACA,QAAM,YAAY,CAAC,GAAsB,MACvC,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,OAAO,MAAM,UAAU,EAAE,CAAC,CAAC;AAC/D,QAAM,UAAU,CACd,GACA,MACY;AACZ,QAAI,MAAM,UAAa,MAAM,OAAW,QAAO,MAAM;AACrD,UAAM,KAAK,OAAO,KAAK,CAAC;AACxB,UAAM,KAAK,OAAO,KAAK,CAAC;AACxB,WAAO,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC,MAAM,OAAO,OAAO,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;AAAA,EACxF;AACA,SACE,QAAQ,YAAY,EAAE,WACtB,QAAQ,kBAAkB,EAAE,iBAC5B,QAAQ,aAAa,EAAE,YACvB,QAAQ,WAAW,EAAE,UACrB,QAAQ,eAAe,EAAE,cACzB,QAAQ,eAAe,EAAE,cACzB,QAAQ,cAAc,EAAE,aACxB,QAAQ,QAAQ,EAAE,OAClB,QAAQ,YAAY,EAAE,WACtB,QAAQ,oBAAoB,EAAE,mBAC9B,QAAQ,WAAW,EAAE,UACrB,QAAQ,iBAAiB,EAAE,gBAC3B,UAAU,QAAQ,MAAM,EAAE,IAAgB,KAC1C,UAAU,QAAQ,oBAAoB,EAAE,kBAA8B,KACtE,QAAQ,QAAQ,sBAAsB,EAAE,oBAAoB,KAC5D,QAAQ,QAAQ,yBAAyB,KAAK;AAElD;AAQO,SAAS,wBACd,UACA,SAAkC,CAAC,GAC8C;AACjF,SAAO;AAAA,IACL,UAAU,SAAS;AAAA,IACnB,SAAS,SAAS;AAAA,IAClB,SAAS;AAAA,MACP,GAAG;AAAA,MACH,YAAY,SAAS;AAAA,MACrB,MAAM,SAAS,KAAK,SAAS,IAAI,CAAC,GAAG,SAAS,IAAI,IAAI;AAAA,MACtD,WAAW,SAAS;AAAA,MACpB,QAAQ,SAAS;AAAA,MACjB,WAAW,SAAS;AAAA,MACpB,SAAS,SAAS;AAAA;AAAA;AAAA,MAGlB,sBAAsB,SAAS,0BAC3B,EAAE,GAAG,SAAS,wBAAwB,IACtC;AAAA;AAAA;AAAA;AAAA;AAAA,MAKJ,QAAQ,SAAS;AAAA,MACjB,iBAAiB,SAAS;AAAA,MAC1B,SAAS,SAAS;AAAA,IACpB;AAAA,EACF;AACF;AAYO,IAAM,2BAA2B;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAOO,IAAM,4BAA4B;AAAA;AAAA;AAAA,EAGvC;AAAA;AAAA;AAAA,EAGA;AAAA;AAAA;AAAA,EAGA;AAAA,EACA;AACF;AAGO,IAAM,2BAA2B;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAmCO,SAAS,6BACd,UACA,OACyB;AACzB,MAAI,CAAC,uBAAuB,QAAQ,GAAG;AACrC,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,MAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAC/C,UAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AACA,MAAI,OAAO,MAAM,YAAY,YAAY,MAAM,QAAQ,KAAK,EAAE,WAAW,GAAG;AAC1E,UAAM,IAAI,MAAM,wEAAwE;AAAA,EAC1F;AAEA,QAAM,SAAkC,CAAC;AACzC,aAAW,SAAS,0BAA0B;AAC5C,UAAM,QAAQ,SAAS,KAAK;AAC5B,QAAI,UAAU,OAAW;AACzB,QAAI,UAAU,QAAQ;AACpB,YAAM,OAAO;AACb,UAAI,KAAK,WAAW,EAAG;AACvB,aAAO,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK;AAC7B;AAAA,IACF;AACA,QAAI,UAAU,WAAW;AAIvB,aAAO,UAAU,SAAS;AAC1B;AAAA,IACF;AACA,WAAO,KAAK,IAAI;AAAA,EAClB;AAKA,SAAO,SAAS,SAAS;AAEzB,QAAM,WAAmC,CAAC;AAC1C,aAAW,OAAO,0BAA0B;AAC1C,UAAM,QAAQ,MAAM,GAAG;AACvB,QAAI,UAAU,OAAW;AACzB,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,IAAI,MAAM,uCAAuC,GAAG,mBAAmB;AAAA,IAC/E;AAGA,UAAM,aAAa,MAAM,KAAK;AAC9B,QAAI,QAAQ,aAAa,WAAW,SAAS,GAAG;AAC9C,eAAS,GAAG,IAAI;AAAA,IAClB;AAAA,EACF;AAEA,SAAO,EAAE,GAAG,GAAG,MAAM,gBAAgB,QAAQ,OAAO,SAAS;AAC/D;AA8DO,SAAS,mCACd,OACyB;AACzB,SAAO;AAAA,IACL,eAAe,MAAM;AAAA,IACrB,SAAS,MAAM;AAAA,IACf,UAAU,MAAM;AAAA,IAChB,YAAY,MAAM;AAAA,IAClB,WAAW,MAAM;AAAA,IACjB,MAAM,MAAM;AAAA,IACZ,WAAW,MAAM;AAAA,IACjB,KAAK,MAAM;AAAA,IACX,cAAc,MAAM;AAAA,IACpB,iBAAiB,MAAM;AAAA,EACzB;AACF;AAqBO,SAAS,+BACd,OACyB;AACzB,SAAO;AAAA,IACL,YAAY,MAAM;AAAA,IAClB,UAAU,MAAM;AAAA,IAChB,WAAW,MAAM;AAAA,IACjB,gBAAgB,MAAM;AAAA,IACtB,wBAAwB,MAAM;AAAA,IAC9B,KAAK,MAAM;AAAA,IACX,YAAY,MAAM;AAAA,IAClB,wBAAwB,MAAM;AAAA,IAC9B,iBAAiB,MAAM;AAAA,EACzB;AACF;","names":[]}

package/dist/{chunk-2AR5JFD7.js → chunk-GG5FHZJJ.js}

@@ -1,10 +1,6 @@
 import {
   StorageManager
-} from "./chunk-ZEPVWLCN.js";
-import {
-  keyring_exports,
-  secureStoreDir
-} from "./chunk-BJMBJZ2Y.js";
+} from "./chunk-CZTPU65V.js";
 import {
   MutationSerializer
 } from "./chunk-FFAZ2XFU.js";
@@ -20,6 +16,10 @@ import {
   resolveNamespaceCapabilities,
   resolveRecallAuxiliaryCapabilities
 } from "./chunk-JUOZ62Y7.js";
+import {
+  keyring_exports,
+  secureStoreDir
+} from "./chunk-BJMBJZ2Y.js";
 import {
   ALL_CATEGORY_DIRS
 } from "./chunk-VS2IYZRU.js";
@@ -412,4 +412,4 @@ export {
   resolveNamespaceStorageRoot,
   NamespaceStorageRouter
 };
-//# sourceMappingURL=chunk-2AR5JFD7.js.map
+//# sourceMappingURL=chunk-GG5FHZJJ.js.map

package/dist/{chunk-WS3WNLST.js → chunk-GI4ZBWPQ.js}

@@ -1,9 +1,9 @@
 import {
   NamespaceStorageRouter
-} from "./chunk-2AR5JFD7.js";
+} from "./chunk-GG5FHZJJ.js";
 import {
   namespaceCollectionName
-} from "./chunk-7RKBPXY6.js";
+} from "./chunk-6YAIN5XJ.js";
 import {
   isSafeRouteNamespace
 } from "./chunk-PCXDUHQH.js";
@@ -213,4 +213,4 @@ export {
   verifyNamespaces,
   runNamespaceMigration
 };
-//# sourceMappingURL=chunk-WS3WNLST.js.map
+//# sourceMappingURL=chunk-GI4ZBWPQ.js.map

package/dist/{chunk-JYR4LH76.js → chunk-GMIQV6DD.js}

@@ -3,7 +3,7 @@ import {
   getOperation,
   operationRequiresAuthorizedNamespace,
   operationUsesPrincipalNamespace
-} from "./chunk-JLXWRQNR.js";
+} from "./chunk-UZEHHXYC.js";
 import {
   assertOperationAuthorizationAllowed
 } from "./chunk-MZWSOLMT.js";
@@ -60,4 +60,4 @@ export {
   authorizationProbeNamespaces,
   authorizationProbeRequiresPrincipalNamespace
 };
-//# sourceMappingURL=chunk-JYR4LH76.js.map
+//# sourceMappingURL=chunk-GMIQV6DD.js.map

package/dist/{chunk-WIKO4SCR.js → chunk-H3TKENU4.js}

@@ -1,11 +1,11 @@
-import {
-  coerceBool,
-  coerceNumber
-} from "./chunk-PQVCH2AE.js";
 import {
   PROMOTION_CANDIDATES_DEFAULT_MIN_ACCESS,
   isSubjectGuardMode
 } from "./chunk-VYCOJKSX.js";
+import {
+  coerceBool,
+  coerceNumber
+} from "./chunk-PQVCH2AE.js";
 
 // src/subject-config.ts
 function assertObjectBlock(value, key, shape) {
@@ -52,4 +52,4 @@ function parseSubjectRuntimeConfig(cfg) {
 export {
   parseSubjectRuntimeConfig
 };
-//# sourceMappingURL=chunk-WIKO4SCR.js.map
+//# sourceMappingURL=chunk-H3TKENU4.js.map

package/dist/{chunk-ZLN7AROH.js → chunk-HIP6DKJJ.js}

@@ -3,13 +3,13 @@ import {
   isTombstoneBlockedCaptureWriteLockBusy,
   normalizeExplicitCaptureContent
 } from "./chunk-SHEHQBCG.js";
-import {
-  isSupportPassportPrivateMemory
-} from "./chunk-PWPIERBM.js";
 import {
   TAG_LIMITS,
   composeMemoryEnvelope
-} from "./chunk-LSLCFCCQ.js";
+} from "./chunk-GDYU6VF4.js";
+import {
+  isSupportPassportPrivateMemory
+} from "./chunk-37CAEC7E.js";
 import {
   sanitizeMemoryContent
 } from "./chunk-5GKPFL3S.js";
@@ -787,4 +787,4 @@ export {
   shouldProcessInlineExplicitCapture,
   InlineExplicitCaptureProcessor
 };
-//# sourceMappingURL=chunk-ZLN7AROH.js.map
+//# sourceMappingURL=chunk-HIP6DKJJ.js.map

package/dist/{chunk-SF6RFI5Z.js → chunk-HWLIMQE2.js}

@@ -1,6 +1,6 @@
 import {
   readAllEdges
-} from "./chunk-GWK7FEUL.js";
+} from "./chunk-5FAGCOZD.js";
 import {
   readEdgeConfidence
 } from "./chunk-2LSZVONP.js";
@@ -162,4 +162,4 @@ export {
   parseGraphSnapshotSince,
   buildGraphSnapshot
 };
-//# sourceMappingURL=chunk-SF6RFI5Z.js.map
+//# sourceMappingURL=chunk-HWLIMQE2.js.map

package/dist/{chunk-JZYECQWN.js → chunk-IL6ODG6M.js}

@@ -1,6 +1,6 @@
 import {
   listNamespaces
-} from "./chunk-WS3WNLST.js";
+} from "./chunk-GI4ZBWPQ.js";
 import {
   capabilityAllowsNamespace
 } from "./chunk-MZWSOLMT.js";
@@ -282,4 +282,4 @@ export {
   computeServiceCorpusWatermarks,
   computeServiceCorpusCensus
 };
-//# sourceMappingURL=chunk-JZYECQWN.js.map
+//# sourceMappingURL=chunk-IL6ODG6M.js.map

package/dist/{chunk-GNR6YEWZ.js → chunk-IQEJIOEU.js}

@@ -1,6 +1,6 @@
 import {
   startLocationAutoSync
-} from "./chunk-CD3C4BJN.js";
+} from "./chunk-WIWLX65T.js";
 import {
   ensureContradictionScanCron,
   ensureDaySummaryCron,
@@ -12,14 +12,14 @@ import {
 } from "./chunk-666A3MOW.js";
 import {
   rebuildMemoryLifecycleLedger
-} from "./chunk-LSDEIZ76.js";
+} from "./chunk-TA4C3XB7.js";
 import {
   planNamespaceMaintenance,
   runNamespaceMaintenanceBatchPlan
-} from "./chunk-JPKZTCWZ.js";
+} from "./chunk-FNHLI2RE.js";
 import {
   rebuildMemoryProjection
-} from "./chunk-3K6UFW5B.js";
+} from "./chunk-UHRZ324M.js";
 import {
   DEFAULT_TIMELINE_CATEGORIES,
   TIMELINE_RESERVED_IDLE,
@@ -37,7 +37,7 @@ import {
 import {
   FallbackLlmClient,
   fallbackLlmRuntimeContextFromConfig
-} from "./chunk-YEN4TREG.js";
+} from "./chunk-LQNRVPTV.js";
 import {
   activityDateInTimezone,
   activityDayWindow,
@@ -2442,4 +2442,4 @@ export {
   ActivitySyncScheduler,
   MaintenanceScheduler
 };
-//# sourceMappingURL=chunk-GNR6YEWZ.js.map
+//# sourceMappingURL=chunk-IQEJIOEU.js.map

package/dist/{chunk-BICNRVEC.js → chunk-IWO6QXWJ.js}

@@ -2,7 +2,7 @@ import {
   readCausalTrajectoryRecordsStrict,
   readCausalTrajectoryRevisionToken,
   resolveCausalTrajectoryStoreDir
-} from "./chunk-LMMQKZK3.js";
+} from "./chunk-L63GFNKL.js";
 
 // src/coding/pre-action-gate.ts
 import { createHash } from "crypto";
@@ -221,4 +221,4 @@ export {
   normalizeActionIntent,
   PreActionFailureGate
 };
-//# sourceMappingURL=chunk-BICNRVEC.js.map
+//# sourceMappingURL=chunk-IWO6QXWJ.js.map

package/dist/{chunk-RN3MVLW3.js → chunk-IYKZJVL5.js}

@@ -19,4 +19,4 @@ export {
   confidenceTier,
   SPECULATIVE_TTL_DAYS
 };
-//# sourceMappingURL=chunk-RN3MVLW3.js.map
+//# sourceMappingURL=chunk-IYKZJVL5.js.map