@remnic/core 9.69.38 → 9.69.40

package/dist/recall-navigate-access.d.ts

@@ -1,5 +1,5 @@
 import { RecallNavNode, RecallNavExpandResult, RecallNavTraverseResult } from './recall-navigate.js';
-import './types-Cyr32ABj.js';
+import './types-nJV23pa3.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';

package/dist/recall-navigate-access.js

@@ -1,8 +1,8 @@
 import {
   expandRecallNode,
   traverseRecallLink
-} from "./chunk-AECJY3GJ.js";
-import "./chunk-IYKZJVL5.js";
+} from "./chunk-GSSDHAYH.js";
+import "./chunk-MDIEES23.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/recall-navigate-access.ts

package/dist/recall-navigate-disclosure.d.ts

@@ -1,4 +1,4 @@
-import { o as RecallDisclosure } from './types-Cyr32ABj.js';
+import { o as RecallDisclosure } from './types-nJV23pa3.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';

package/dist/recall-navigate-disclosure.js

@@ -1,7 +1,7 @@
 import {
   RECALL_DISCLOSURE_LEVELS,
   isRecallDisclosure
-} from "./chunk-IYKZJVL5.js";
+} from "./chunk-MDIEES23.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/recall-navigate-disclosure.ts

package/dist/recall-navigate.d.ts

@@ -1,4 +1,4 @@
-import { o as RecallDisclosure } from './types-Cyr32ABj.js';
+import { o as RecallDisclosure } from './types-nJV23pa3.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';

package/dist/recall-navigate.js

@@ -3,8 +3,8 @@ import {
   expandRecallNode,
   isRecallNavLinkType,
   traverseRecallLink
-} from "./chunk-AECJY3GJ.js";
-import "./chunk-IYKZJVL5.js";
+} from "./chunk-GSSDHAYH.js";
+import "./chunk-MDIEES23.js";
 import "./chunk-PZ5AY32C.js";
 export {
   RECALL_NAV_LINK_TYPES,

package/dist/recall-planner-llm.d.ts

@@ -1,4 +1,4 @@
-import { R as RecallPlanMode, P as PluginConfig } from './types-Cyr32ABj.js';
+import { R as RecallPlanMode, P as PluginConfig } from './types-nJV23pa3.js';
 import { CapabilitySet } from './capabilities.js';
 import { FallbackLlmClient, FallbackLlmOptions } from './fallback-llm.js';
 import './message-parts/index.js';
@@ -16,8 +16,9 @@ import './active-context-config.js';
 import './local-llm-config.js';
 import './semantic-merge-config.js';
 import './types-continuity.js';
-import './resolve-provider-secret.js';
+import './fallback-llm-codex-subscription.js';
 import './cli-fallback.js';
+import './resolve-provider-secret.js';
 
 /**
  * LLM-based recall planning (issue #1367, Option C).

package/dist/recall-planner-llm.js

@@ -4,13 +4,14 @@ import {
 import "./chunk-K2XUWZBM.js";
 import {
   FallbackLlmClient,
-  fallbackLlmRuntimeContextFromConfig,
   gatewayTaskChainOptions
-} from "./chunk-LQNRVPTV.js";
+} from "./chunk-THTF2W7M.js";
 import "./chunk-I55KAVET.js";
 import "./chunk-L2EXJQJP.js";
 import "./chunk-45GF7Y3V.js";
-import "./chunk-CWTCMZGE.js";
+import {
+  fallbackLlmRuntimeContextFromConfig
+} from "./chunk-KTOXQMW3.js";
 import "./chunk-E2AWJ7KQ.js";
 import "./chunk-RGMVMVMF.js";
 import "./chunk-ZEFVK7XC.js";

package/dist/recall-planner-llm.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/recall-planner-llm.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport type { PluginConfig, RecallPlanMode } from \"./types.js\";\nimport type { CapabilitySet } from \"./capabilities.js\";\nimport { planRecallMode } from \"./intent.js\";\nimport {\n  FallbackLlmClient,\n  fallbackLlmRuntimeContextFromConfig,\n  gatewayTaskChainOptions,\n  type FallbackLlmOptions,\n} from \"./fallback-llm.js\";\nimport { log } from \"./logger.js\";\n\n/**\n * LLM-based recall planning (issue #1367, Option C).\n *\n * Classifies an incoming prompt into a {@link RecallPlanMode} using an LLM\n * instead of (or alongside) the regex heuristic in {@link planRecallMode}.\n *\n * Provider-agnostic by construction: it routes through {@link FallbackLlmClient},\n * which resolves the model chain from gateway providers (OpenAI, Anthropic,\n * Ollama, Codex, …) or gateway agent personas / `taskModelChain`. Nothing here\n * is hard-coded to a single provider or to OpenAI's Responses API — the API\n * dialect is chosen per-provider by the client based on each provider's `api`\n * field. The configured `recallPlannerModel` is tried first, with the broader\n * task chain (and the gateway default) as resilient fallbacks.\n *\n * Invariants:\n *  - Never throws to the caller (gotcha #13). Any LLM failure, timeout, empty\n *    response, or unavailable backend falls back to the heuristic result and\n *    sets `fallbackUsed: true` (gotcha #34 — failures are distinct from a valid\n *    classification).\n *  - When `recallPlannerLlmEnabled` is false the LLM is never contacted.\n */\n\nexport type RecallPlannerSource = \"llm\" | \"heuristic\" | \"heuristic-fallback\";\n\nexport interface RecallPlannerLlmResult {\n  /** The mode to act on. */\n  mode: RecallPlanMode;\n  /** The heuristic mode, always computed (the fallback floor / shadow baseline). */\n  heuristicMode: RecallPlanMode;\n  /** Where `mode` came from. */\n  source: RecallPlannerSource;\n  /** Short human-readable rationale (LLM reason, or why we fell back). */\n  reason: string;\n  /** Model that actually served the classification, when an LLM was used. */\n  modelUsed?: string;\n  /** Wall-clock spent in the LLM call (0 when no call was made). */\n  latencyMs: number;\n  /** True when the LLM was enabled but we had to fall back to the heuristic. */\n  fallbackUsed: boolean;\n}\n\nconst PLANNER_SCHEMA = z.object({\n  // gotcha #2: optional fields use .optional().nullable()\n  mode: z.enum([\"no_recall\", \"minimal\", \"full\", \"graph_mode\"]),\n  reason: z.string().max(280).optional().nullable(),\n});\n\nconst SYSTEM_PROMPT = [\n  \"You are a recall-planning classifier for a long-term memory system.\",\n  \"Given the user's latest message, decide how much stored memory should be retrieved before the assistant responds.\",\n  \"Reply with a single JSON object: {\\\"mode\\\": <one of no_recall|minimal|full|graph_mode>, \\\"reason\\\": <short string>}.\",\n  \"\",\n  \"Modes:\",\n  '- \"no_recall\": low-information acknowledgements or chit-chat with nothing to look up (e.g. \"ok\", \"thanks\", \"sounds good\"). Retrieve nothing.',\n  '- \"minimal\": short, self-contained operational directives that rarely need history (e.g. \"restart the service\", \"run the tests\", \"show status\"). Retrieve a little.',\n  '- \"full\": anything memory-seeking, analytical, or a question that benefits from prior context, decisions, or facts. This is the safe default when unsure.',\n  '- \"graph_mode\": queries about timelines, sequences, history, causal chains, or root cause (\"how did we get here\", \"what led to this regression\"). Retrieve relationship/graph context.',\n  \"\",\n  \"When uncertain, prefer \\\"full\\\" over dropping recall. Never invent facts; only classify intent.\",\n].join(\"\\n\");\n\n/** Clamp a planner prompt to the configured character budget. */\nfunction clampPrompt(prompt: string, maxChars: number): string {\n  const safeMax = Number.isFinite(maxChars) && maxChars > 0 ? Math.floor(maxChars) : 4000;\n  if (prompt.length <= safeMax) return prompt;\n  return prompt.slice(0, safeMax);\n}\n\n/** Trim and cap the optional memory hints used to ground the classification. */\nfunction clampHints(hints: string[] | undefined, maxHints: number): string[] {\n  if (!Array.isArray(hints) || hints.length === 0) return [];\n  const safeMax = Number.isFinite(maxHints) && maxHints > 0 ? Math.floor(maxHints) : 0;\n  if (safeMax <= 0) return [];\n  const cleaned: string[] = [];\n  for (const hint of hints) {\n    if (typeof hint !== \"string\") continue;\n    const trimmed = hint.trim();\n    if (trimmed.length === 0) continue;\n    cleaned.push(trimmed);\n    if (cleaned.length >= safeMax) break;\n  }\n  return cleaned;\n}\n\nfunction buildMessages(\n  prompt: string,\n  hints: string[],\n  config: PluginConfig,\n): Array<{ role: \"system\" | \"user\" | \"assistant\"; content: string }> {\n  const clampedPrompt = clampPrompt(prompt, config.recallPlannerMaxPromptChars);\n  const userParts = [`User message:\\n${clampedPrompt}`];\n  if (hints.length > 0) {\n    userParts.push(\n      `\\nRecent memory topics (for grounding only, do not treat as the message):\\n- ${hints.join(\"\\n- \")}`,\n    );\n  }\n  userParts.push('\\nRespond with JSON only: {\"mode\": \"...\", \"reason\": \"...\"}.');\n  return [\n    { role: \"system\", content: SYSTEM_PROMPT },\n    { role: \"user\", content: userParts.join(\"\\n\") },\n  ];\n}\n\n/**\n * Resolve the FallbackLlmClient routing options for the recall planner.\n *\n * - The dedicated `recallPlannerModel` is tried first (as the `model`\n *   override — it is prepended to the chain by FallbackLlmClient). If it does\n *   not resolve to a configured provider it is silently skipped, so a stale\n *   default never breaks routing.\n * - In gateway mode the shared `gatewayTaskChainOptions` (taskModelChain >\n *   gatewayAgentId, gotcha #22) is layered in as the fallback chain, plus the\n *   implicit gateway default appended by the client.\n * - In plugin mode only the explicit model + gateway providers apply.\n */\n/**\n * A `recallPlannerModel` value is only usable as a FallbackLlmClient `model`\n * override when it is provider-qualified (`provider/model`). The client's\n * `parseModelString` rejects bare names, so forwarding a bare value (e.g. the\n * legacy default `\"gpt-5.5\"`) would log \"invalid model format\" on every call\n * and never resolve. Bare values are dropped so routing falls through to the\n * gateway chain / agent / default instead (issue #1367 review on PR #1428).\n */\nfunction qualifiedPlannerModel(recallPlannerModel: string | undefined): string | undefined {\n  if (typeof recallPlannerModel !== \"string\") return undefined;\n  const trimmed = recallPlannerModel.trim();\n  return trimmed.includes(\"/\") ? trimmed : undefined;\n}\n\nexport function resolveRecallPlannerLlmOptions(\n  config: Pick<\n    PluginConfig,\n    \"modelSource\" | \"taskModelChain\" | \"gatewayAgentId\" | \"recallPlannerModel\" | \"recallPlannerTimeoutMs\"\n  >,\n): FallbackLlmOptions {\n  const chainOptions =\n    config.modelSource === \"gateway\" ? gatewayTaskChainOptions(config) : {};\n  return {\n    ...chainOptions,\n    model: qualifiedPlannerModel(config.recallPlannerModel),\n    temperature: 0,\n    maxTokens: 64,\n    timeoutMs:\n      typeof config.recallPlannerTimeoutMs === \"number\" && config.recallPlannerTimeoutMs > 0\n        ? config.recallPlannerTimeoutMs\n        : 1500,\n  };\n}\n\n// One-time warning per distinct routing signature so an opted-in operator with\n// no usable model learns why planning silently uses the heuristic, without\n// spamming a line on every recall.\nconst warnedNoRoutingSignatures = new Set<string>();\n\nfunction heuristicResult(\n  heuristicMode: RecallPlanMode,\n  source: RecallPlannerSource,\n  reason: string,\n  latencyMs: number,\n  fallbackUsed: boolean,\n): RecallPlannerLlmResult {\n  return { mode: heuristicMode, heuristicMode, source, reason, latencyMs, fallbackUsed };\n}\n\n/**\n * Plan the recall mode for `prompt`, optionally consulting an LLM.\n *\n * Always safe to call: returns the heuristic result when the LLM is disabled,\n * unavailable, or fails.\n *\n * @param llm  injectable client (tests pass a stub); constructed from gateway\n *             config when omitted.\n */\nexport async function planRecallModeLLM(\n  prompt: string,\n  hints: string[] | undefined,\n  config: PluginConfig,\n  caps: CapabilitySet,\n  llm?: FallbackLlmClient,\n  signal?: AbortSignal,\n): Promise<RecallPlannerLlmResult> {\n  const heuristicMode = planRecallMode(prompt);\n\n  // The recall-operation entry resolved this gate once (issue #1523); read the\n  // capability, never re-derive it from raw config here.\n  const plannerLlmEnabled = caps.recallPlannerLlm;\n  if (!plannerLlmEnabled) {\n    return heuristicResult(heuristicMode, \"heuristic\", \"llm-disabled\", 0, false);\n  }\n\n  // Participate in the recall cancellation contract: if the outer recall is\n  // already aborted (outer timeout / reset / session abort), don't start an LLM\n  // round-trip — fall back to the heuristic immediately (#1428 review).\n  if (signal?.aborted) {\n    return heuristicResult(heuristicMode, \"heuristic-fallback\", \"aborted\", 0, true);\n  }\n\n  const safePrompt = typeof prompt === \"string\" ? prompt.trim() : \"\";\n  if (safePrompt.length === 0) {\n    // Empty prompts never need an LLM round-trip.\n    return heuristicResult(heuristicMode, \"heuristic\", \"empty-prompt\", 0, false);\n  }\n\n  const client =\n    llm ??\n    new FallbackLlmClient(\n      config.gatewayConfig,\n      fallbackLlmRuntimeContextFromConfig(config),\n    );\n\n  // Forward the recall abort signal so an aborted/timed-out outer recall can\n  // cancel an in-flight planner call (FallbackLlmClient honors `signal`).\n  const options = { ...resolveRecallPlannerLlmOptions(config), signal };\n\n  // Availability check uses the same routing options so plugin-mode / empty\n  // chains short-circuit to the heuristic without a network attempt. `model`\n  // here is already provider-qualified (bare names were dropped), so a present\n  // model means the override is genuinely routable.\n  const availabilityProbe = {\n    agentId: options.agentId,\n    modelChain: options.modelChain,\n  };\n  if (!client.isAvailable(availabilityProbe) && !options.model) {\n    // Opted-in but nothing routable resolves (e.g. plugin mode with the bare\n    // default `recallPlannerModel` and no gateway chain). Warn once so it's not\n    // a silent no-op, then fall back to the heuristic.\n    const signature = `${config.modelSource}:${config.recallPlannerModel ?? \"\"}`;\n    if (!warnedNoRoutingSignatures.has(signature)) {\n      warnedNoRoutingSignatures.add(signature);\n      log.warn(\n        \"[recall-planner] recallPlannerLlmEnabled is on but no routable model resolves — \" +\n          \"set recallPlannerModel to a 'provider/model' value or configure a gateway model chain. \" +\n          \"Falling back to the heuristic planner.\",\n      );\n    }\n    return heuristicResult(heuristicMode, \"heuristic-fallback\", \"llm-no-model\", 0, true);\n  }\n\n  const clampedHints = clampHints(hints, config.recallPlannerMaxMemoryHints);\n  const messages = buildMessages(safePrompt, clampedHints, config);\n\n  const start = Date.now();\n  try {\n    const detailed = await client.parseWithSchemaDetailed(messages, PLANNER_SCHEMA, options);\n    const latencyMs = Date.now() - start;\n    if (!detailed?.result) {\n      // Distinguish failure from a valid empty (gotcha #34): a null here means\n      // no parseable classification, so fall back to the heuristic.\n      return heuristicResult(heuristicMode, \"heuristic-fallback\", \"llm-empty\", latencyMs, true);\n    }\n    const mode = detailed.result.mode;\n    const reason =\n      typeof detailed.result.reason === \"string\" && detailed.result.reason.trim().length > 0\n        ? detailed.result.reason.trim()\n        : \"llm-classified\";\n    return {\n      mode,\n      heuristicMode,\n      source: \"llm\",\n      reason,\n      modelUsed: detailed.modelUsed,\n      latencyMs,\n      fallbackUsed: false,\n    };\n  } catch (err) {\n    const latencyMs = Date.now() - start;\n    if (signal?.aborted) {\n      // Cancelled by the outer recall — expected, not an error worth warning on.\n      return heuristicResult(heuristicMode, \"heuristic-fallback\", \"aborted\", latencyMs, true);\n    }\n    const message = err instanceof Error ? err.message : String(err);\n    log.warn(`[recall-planner] LLM failed, falling back to heuristic: ${message}`);\n    return heuristicResult(\n      heuristicMode,\n      \"heuristic-fallback\",\n      `llm-error:${message}`,\n      latencyMs,\n      true,\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,SAAS;AAsDlB,IAAM,iBAAiB,EAAE,OAAO;AAAA;AAAA,EAE9B,MAAM,EAAE,KAAK,CAAC,aAAa,WAAW,QAAQ,YAAY,CAAC;AAAA,EAC3D,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AAClD,CAAC;AAED,IAAM,gBAAgB;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,EAAE,KAAK,IAAI;AAGX,SAAS,YAAY,QAAgB,UAA0B;AAC7D,QAAM,UAAU,OAAO,SAAS,QAAQ,KAAK,WAAW,IAAI,KAAK,MAAM,QAAQ,IAAI;AACnF,MAAI,OAAO,UAAU,QAAS,QAAO;AACrC,SAAO,OAAO,MAAM,GAAG,OAAO;AAChC;AAGA,SAAS,WAAW,OAA6B,UAA4B;AAC3E,MAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,EAAG,QAAO,CAAC;AACzD,QAAM,UAAU,OAAO,SAAS,QAAQ,KAAK,WAAW,IAAI,KAAK,MAAM,QAAQ,IAAI;AACnF,MAAI,WAAW,EAAG,QAAO,CAAC;AAC1B,QAAM,UAAoB,CAAC;AAC3B,aAAW,QAAQ,OAAO;AACxB,QAAI,OAAO,SAAS,SAAU;AAC9B,UAAM,UAAU,KAAK,KAAK;AAC1B,QAAI,QAAQ,WAAW,EAAG;AAC1B,YAAQ,KAAK,OAAO;AACpB,QAAI,QAAQ,UAAU,QAAS;AAAA,EACjC;AACA,SAAO;AACT;AAEA,SAAS,cACP,QACA,OACA,QACmE;AACnE,QAAM,gBAAgB,YAAY,QAAQ,OAAO,2BAA2B;AAC5E,QAAM,YAAY,CAAC;AAAA,EAAkB,aAAa,EAAE;AACpD,MAAI,MAAM,SAAS,GAAG;AACpB,cAAU;AAAA,MACR;AAAA;AAAA,IAAgF,MAAM,KAAK,MAAM,CAAC;AAAA,IACpG;AAAA,EACF;AACA,YAAU,KAAK,6DAA6D;AAC5E,SAAO;AAAA,IACL,EAAE,MAAM,UAAU,SAAS,cAAc;AAAA,IACzC,EAAE,MAAM,QAAQ,SAAS,UAAU,KAAK,IAAI,EAAE;AAAA,EAChD;AACF;AAsBA,SAAS,sBAAsB,oBAA4D;AACzF,MAAI,OAAO,uBAAuB,SAAU,QAAO;AACnD,QAAM,UAAU,mBAAmB,KAAK;AACxC,SAAO,QAAQ,SAAS,GAAG,IAAI,UAAU;AAC3C;AAEO,SAAS,+BACd,QAIoB;AACpB,QAAM,eACJ,OAAO,gBAAgB,YAAY,wBAAwB,MAAM,IAAI,CAAC;AACxE,SAAO;AAAA,IACL,GAAG;AAAA,IACH,OAAO,sBAAsB,OAAO,kBAAkB;AAAA,IACtD,aAAa;AAAA,IACb,WAAW;AAAA,IACX,WACE,OAAO,OAAO,2BAA2B,YAAY,OAAO,yBAAyB,IACjF,OAAO,yBACP;AAAA,EACR;AACF;AAKA,IAAM,4BAA4B,oBAAI,IAAY;AAElD,SAAS,gBACP,eACA,QACA,QACA,WACA,cACwB;AACxB,SAAO,EAAE,MAAM,eAAe,eAAe,QAAQ,QAAQ,WAAW,aAAa;AACvF;AAWA,eAAsB,kBACpB,QACA,OACA,QACA,MACA,KACA,QACiC;AACjC,QAAM,gBAAgB,eAAe,MAAM;AAI3C,QAAM,oBAAoB,KAAK;AAC/B,MAAI,CAAC,mBAAmB;AACtB,WAAO,gBAAgB,eAAe,aAAa,gBAAgB,GAAG,KAAK;AAAA,EAC7E;AAKA,MAAI,QAAQ,SAAS;AACnB,WAAO,gBAAgB,eAAe,sBAAsB,WAAW,GAAG,IAAI;AAAA,EAChF;AAEA,QAAM,aAAa,OAAO,WAAW,WAAW,OAAO,KAAK,IAAI;AAChE,MAAI,WAAW,WAAW,GAAG;AAE3B,WAAO,gBAAgB,eAAe,aAAa,gBAAgB,GAAG,KAAK;AAAA,EAC7E;AAEA,QAAM,SACJ,OACA,IAAI;AAAA,IACF,OAAO;AAAA,IACP,oCAAoC,MAAM;AAAA,EAC5C;AAIF,QAAM,UAAU,EAAE,GAAG,+BAA+B,MAAM,GAAG,OAAO;AAMpE,QAAM,oBAAoB;AAAA,IACxB,SAAS,QAAQ;AAAA,IACjB,YAAY,QAAQ;AAAA,EACtB;AACA,MAAI,CAAC,OAAO,YAAY,iBAAiB,KAAK,CAAC,QAAQ,OAAO;AAI5D,UAAM,YAAY,GAAG,OAAO,WAAW,IAAI,OAAO,sBAAsB,EAAE;AAC1E,QAAI,CAAC,0BAA0B,IAAI,SAAS,GAAG;AAC7C,gCAA0B,IAAI,SAAS;AACvC,UAAI;AAAA,QACF;AAAA,MAGF;AAAA,IACF;AACA,WAAO,gBAAgB,eAAe,sBAAsB,gBAAgB,GAAG,IAAI;AAAA,EACrF;AAEA,QAAM,eAAe,WAAW,OAAO,OAAO,2BAA2B;AACzE,QAAM,WAAW,cAAc,YAAY,cAAc,MAAM;AAE/D,QAAM,QAAQ,KAAK,IAAI;AACvB,MAAI;AACF,UAAM,WAAW,MAAM,OAAO,wBAAwB,UAAU,gBAAgB,OAAO;AACvF,UAAM,YAAY,KAAK,IAAI,IAAI;AAC/B,QAAI,CAAC,UAAU,QAAQ;AAGrB,aAAO,gBAAgB,eAAe,sBAAsB,aAAa,WAAW,IAAI;AAAA,IAC1F;AACA,UAAM,OAAO,SAAS,OAAO;AAC7B,UAAM,SACJ,OAAO,SAAS,OAAO,WAAW,YAAY,SAAS,OAAO,OAAO,KAAK,EAAE,SAAS,IACjF,SAAS,OAAO,OAAO,KAAK,IAC5B;AACN,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,MACR;AAAA,MACA,WAAW,SAAS;AAAA,MACpB;AAAA,MACA,cAAc;AAAA,IAChB;AAAA,EACF,SAAS,KAAK;AACZ,UAAM,YAAY,KAAK,IAAI,IAAI;AAC/B,QAAI,QAAQ,SAAS;AAEnB,aAAO,gBAAgB,eAAe,sBAAsB,WAAW,WAAW,IAAI;AAAA,IACxF;AACA,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,QAAI,KAAK,2DAA2D,OAAO,EAAE;AAC7E,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,aAAa,OAAO;AAAA,MACpB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../src/recall-planner-llm.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport type { PluginConfig, RecallPlanMode } from \"./types.js\";\nimport type { CapabilitySet } from \"./capabilities.js\";\nimport { planRecallMode } from \"./intent.js\";\nimport {\n  FallbackLlmClient,\n  fallbackLlmRuntimeContextFromConfig,\n  gatewayTaskChainOptions,\n  type FallbackLlmOptions,\n} from \"./fallback-llm.js\";\nimport { log } from \"./logger.js\";\n\n/**\n * LLM-based recall planning (issue #1367, Option C).\n *\n * Classifies an incoming prompt into a {@link RecallPlanMode} using an LLM\n * instead of (or alongside) the regex heuristic in {@link planRecallMode}.\n *\n * Provider-agnostic by construction: it routes through {@link FallbackLlmClient},\n * which resolves the model chain from gateway providers (OpenAI, Anthropic,\n * Ollama, Codex, …) or gateway agent personas / `taskModelChain`. Nothing here\n * is hard-coded to a single provider or to OpenAI's Responses API — the API\n * dialect is chosen per-provider by the client based on each provider's `api`\n * field. The configured `recallPlannerModel` is tried first, with the broader\n * task chain (and the gateway default) as resilient fallbacks.\n *\n * Invariants:\n *  - Never throws to the caller (gotcha #13). Any LLM failure, timeout, empty\n *    response, or unavailable backend falls back to the heuristic result and\n *    sets `fallbackUsed: true` (gotcha #34 — failures are distinct from a valid\n *    classification).\n *  - When `recallPlannerLlmEnabled` is false the LLM is never contacted.\n */\n\nexport type RecallPlannerSource = \"llm\" | \"heuristic\" | \"heuristic-fallback\";\n\nexport interface RecallPlannerLlmResult {\n  /** The mode to act on. */\n  mode: RecallPlanMode;\n  /** The heuristic mode, always computed (the fallback floor / shadow baseline). */\n  heuristicMode: RecallPlanMode;\n  /** Where `mode` came from. */\n  source: RecallPlannerSource;\n  /** Short human-readable rationale (LLM reason, or why we fell back). */\n  reason: string;\n  /** Model that actually served the classification, when an LLM was used. */\n  modelUsed?: string;\n  /** Wall-clock spent in the LLM call (0 when no call was made). */\n  latencyMs: number;\n  /** True when the LLM was enabled but we had to fall back to the heuristic. */\n  fallbackUsed: boolean;\n}\n\nconst PLANNER_SCHEMA = z.object({\n  // gotcha #2: optional fields use .optional().nullable()\n  mode: z.enum([\"no_recall\", \"minimal\", \"full\", \"graph_mode\"]),\n  reason: z.string().max(280).optional().nullable(),\n});\n\nconst SYSTEM_PROMPT = [\n  \"You are a recall-planning classifier for a long-term memory system.\",\n  \"Given the user's latest message, decide how much stored memory should be retrieved before the assistant responds.\",\n  \"Reply with a single JSON object: {\\\"mode\\\": <one of no_recall|minimal|full|graph_mode>, \\\"reason\\\": <short string>}.\",\n  \"\",\n  \"Modes:\",\n  '- \"no_recall\": low-information acknowledgements or chit-chat with nothing to look up (e.g. \"ok\", \"thanks\", \"sounds good\"). Retrieve nothing.',\n  '- \"minimal\": short, self-contained operational directives that rarely need history (e.g. \"restart the service\", \"run the tests\", \"show status\"). Retrieve a little.',\n  '- \"full\": anything memory-seeking, analytical, or a question that benefits from prior context, decisions, or facts. This is the safe default when unsure.',\n  '- \"graph_mode\": queries about timelines, sequences, history, causal chains, or root cause (\"how did we get here\", \"what led to this regression\"). Retrieve relationship/graph context.',\n  \"\",\n  \"When uncertain, prefer \\\"full\\\" over dropping recall. Never invent facts; only classify intent.\",\n].join(\"\\n\");\n\n/** Clamp a planner prompt to the configured character budget. */\nfunction clampPrompt(prompt: string, maxChars: number): string {\n  const safeMax = Number.isFinite(maxChars) && maxChars > 0 ? Math.floor(maxChars) : 4000;\n  if (prompt.length <= safeMax) return prompt;\n  return prompt.slice(0, safeMax);\n}\n\n/** Trim and cap the optional memory hints used to ground the classification. */\nfunction clampHints(hints: string[] | undefined, maxHints: number): string[] {\n  if (!Array.isArray(hints) || hints.length === 0) return [];\n  const safeMax = Number.isFinite(maxHints) && maxHints > 0 ? Math.floor(maxHints) : 0;\n  if (safeMax <= 0) return [];\n  const cleaned: string[] = [];\n  for (const hint of hints) {\n    if (typeof hint !== \"string\") continue;\n    const trimmed = hint.trim();\n    if (trimmed.length === 0) continue;\n    cleaned.push(trimmed);\n    if (cleaned.length >= safeMax) break;\n  }\n  return cleaned;\n}\n\nfunction buildMessages(\n  prompt: string,\n  hints: string[],\n  config: PluginConfig,\n): Array<{ role: \"system\" | \"user\" | \"assistant\"; content: string }> {\n  const clampedPrompt = clampPrompt(prompt, config.recallPlannerMaxPromptChars);\n  const userParts = [`User message:\\n${clampedPrompt}`];\n  if (hints.length > 0) {\n    userParts.push(\n      `\\nRecent memory topics (for grounding only, do not treat as the message):\\n- ${hints.join(\"\\n- \")}`,\n    );\n  }\n  userParts.push('\\nRespond with JSON only: {\"mode\": \"...\", \"reason\": \"...\"}.');\n  return [\n    { role: \"system\", content: SYSTEM_PROMPT },\n    { role: \"user\", content: userParts.join(\"\\n\") },\n  ];\n}\n\n/**\n * Resolve the FallbackLlmClient routing options for the recall planner.\n *\n * - The dedicated `recallPlannerModel` is tried first (as the `model`\n *   override — it is prepended to the chain by FallbackLlmClient). If it does\n *   not resolve to a configured provider it is silently skipped, so a stale\n *   default never breaks routing.\n * - In gateway mode the shared `gatewayTaskChainOptions` (taskModelChain >\n *   gatewayAgentId, gotcha #22) is layered in as the fallback chain, plus the\n *   implicit gateway default appended by the client.\n * - In plugin mode only the explicit model + gateway providers apply.\n */\n/**\n * A `recallPlannerModel` value is only usable as a FallbackLlmClient `model`\n * override when it is provider-qualified (`provider/model`). The client's\n * `parseModelString` rejects bare names, so forwarding a bare value (e.g. the\n * legacy default `\"gpt-5.5\"`) would log \"invalid model format\" on every call\n * and never resolve. Bare values are dropped so routing falls through to the\n * gateway chain / agent / default instead (issue #1367 review on PR #1428).\n */\nfunction qualifiedPlannerModel(recallPlannerModel: string | undefined): string | undefined {\n  if (typeof recallPlannerModel !== \"string\") return undefined;\n  const trimmed = recallPlannerModel.trim();\n  return trimmed.includes(\"/\") ? trimmed : undefined;\n}\n\nexport function resolveRecallPlannerLlmOptions(\n  config: Pick<\n    PluginConfig,\n    \"modelSource\" | \"taskModelChain\" | \"gatewayAgentId\" | \"recallPlannerModel\" | \"recallPlannerTimeoutMs\"\n  >,\n): FallbackLlmOptions {\n  const chainOptions =\n    config.modelSource === \"gateway\" ? gatewayTaskChainOptions(config) : {};\n  return {\n    ...chainOptions,\n    model: qualifiedPlannerModel(config.recallPlannerModel),\n    temperature: 0,\n    maxTokens: 64,\n    timeoutMs:\n      typeof config.recallPlannerTimeoutMs === \"number\" && config.recallPlannerTimeoutMs > 0\n        ? config.recallPlannerTimeoutMs\n        : 1500,\n  };\n}\n\n// One-time warning per distinct routing signature so an opted-in operator with\n// no usable model learns why planning silently uses the heuristic, without\n// spamming a line on every recall.\nconst warnedNoRoutingSignatures = new Set<string>();\n\nfunction heuristicResult(\n  heuristicMode: RecallPlanMode,\n  source: RecallPlannerSource,\n  reason: string,\n  latencyMs: number,\n  fallbackUsed: boolean,\n): RecallPlannerLlmResult {\n  return { mode: heuristicMode, heuristicMode, source, reason, latencyMs, fallbackUsed };\n}\n\n/**\n * Plan the recall mode for `prompt`, optionally consulting an LLM.\n *\n * Always safe to call: returns the heuristic result when the LLM is disabled,\n * unavailable, or fails.\n *\n * @param llm  injectable client (tests pass a stub); constructed from gateway\n *             config when omitted.\n */\nexport async function planRecallModeLLM(\n  prompt: string,\n  hints: string[] | undefined,\n  config: PluginConfig,\n  caps: CapabilitySet,\n  llm?: FallbackLlmClient,\n  signal?: AbortSignal,\n): Promise<RecallPlannerLlmResult> {\n  const heuristicMode = planRecallMode(prompt);\n\n  // The recall-operation entry resolved this gate once (issue #1523); read the\n  // capability, never re-derive it from raw config here.\n  const plannerLlmEnabled = caps.recallPlannerLlm;\n  if (!plannerLlmEnabled) {\n    return heuristicResult(heuristicMode, \"heuristic\", \"llm-disabled\", 0, false);\n  }\n\n  // Participate in the recall cancellation contract: if the outer recall is\n  // already aborted (outer timeout / reset / session abort), don't start an LLM\n  // round-trip — fall back to the heuristic immediately (#1428 review).\n  if (signal?.aborted) {\n    return heuristicResult(heuristicMode, \"heuristic-fallback\", \"aborted\", 0, true);\n  }\n\n  const safePrompt = typeof prompt === \"string\" ? prompt.trim() : \"\";\n  if (safePrompt.length === 0) {\n    // Empty prompts never need an LLM round-trip.\n    return heuristicResult(heuristicMode, \"heuristic\", \"empty-prompt\", 0, false);\n  }\n\n  const client =\n    llm ??\n    new FallbackLlmClient(\n      config.gatewayConfig,\n      fallbackLlmRuntimeContextFromConfig(config),\n    );\n\n  // Forward the recall abort signal so an aborted/timed-out outer recall can\n  // cancel an in-flight planner call (FallbackLlmClient honors `signal`).\n  const options = { ...resolveRecallPlannerLlmOptions(config), signal };\n\n  // Availability check uses the same routing options so plugin-mode / empty\n  // chains short-circuit to the heuristic without a network attempt. `model`\n  // here is already provider-qualified (bare names were dropped), so a present\n  // model means the override is genuinely routable.\n  const availabilityProbe = {\n    agentId: options.agentId,\n    modelChain: options.modelChain,\n  };\n  if (!client.isAvailable(availabilityProbe) && !options.model) {\n    // Opted-in but nothing routable resolves (e.g. plugin mode with the bare\n    // default `recallPlannerModel` and no gateway chain). Warn once so it's not\n    // a silent no-op, then fall back to the heuristic.\n    const signature = `${config.modelSource}:${config.recallPlannerModel ?? \"\"}`;\n    if (!warnedNoRoutingSignatures.has(signature)) {\n      warnedNoRoutingSignatures.add(signature);\n      log.warn(\n        \"[recall-planner] recallPlannerLlmEnabled is on but no routable model resolves — \" +\n          \"set recallPlannerModel to a 'provider/model' value or configure a gateway model chain. \" +\n          \"Falling back to the heuristic planner.\",\n      );\n    }\n    return heuristicResult(heuristicMode, \"heuristic-fallback\", \"llm-no-model\", 0, true);\n  }\n\n  const clampedHints = clampHints(hints, config.recallPlannerMaxMemoryHints);\n  const messages = buildMessages(safePrompt, clampedHints, config);\n\n  const start = Date.now();\n  try {\n    const detailed = await client.parseWithSchemaDetailed(messages, PLANNER_SCHEMA, options);\n    const latencyMs = Date.now() - start;\n    if (!detailed?.result) {\n      // Distinguish failure from a valid empty (gotcha #34): a null here means\n      // no parseable classification, so fall back to the heuristic.\n      return heuristicResult(heuristicMode, \"heuristic-fallback\", \"llm-empty\", latencyMs, true);\n    }\n    const mode = detailed.result.mode;\n    const reason =\n      typeof detailed.result.reason === \"string\" && detailed.result.reason.trim().length > 0\n        ? detailed.result.reason.trim()\n        : \"llm-classified\";\n    return {\n      mode,\n      heuristicMode,\n      source: \"llm\",\n      reason,\n      modelUsed: detailed.modelUsed,\n      latencyMs,\n      fallbackUsed: false,\n    };\n  } catch (err) {\n    const latencyMs = Date.now() - start;\n    if (signal?.aborted) {\n      // Cancelled by the outer recall — expected, not an error worth warning on.\n      return heuristicResult(heuristicMode, \"heuristic-fallback\", \"aborted\", latencyMs, true);\n    }\n    const message = err instanceof Error ? err.message : String(err);\n    log.warn(`[recall-planner] LLM failed, falling back to heuristic: ${message}`);\n    return heuristicResult(\n      heuristicMode,\n      \"heuristic-fallback\",\n      `llm-error:${message}`,\n      latencyMs,\n      true,\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,SAAS;AAsDlB,IAAM,iBAAiB,EAAE,OAAO;AAAA;AAAA,EAE9B,MAAM,EAAE,KAAK,CAAC,aAAa,WAAW,QAAQ,YAAY,CAAC;AAAA,EAC3D,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS;AAClD,CAAC;AAED,IAAM,gBAAgB;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,EAAE,KAAK,IAAI;AAGX,SAAS,YAAY,QAAgB,UAA0B;AAC7D,QAAM,UAAU,OAAO,SAAS,QAAQ,KAAK,WAAW,IAAI,KAAK,MAAM,QAAQ,IAAI;AACnF,MAAI,OAAO,UAAU,QAAS,QAAO;AACrC,SAAO,OAAO,MAAM,GAAG,OAAO;AAChC;AAGA,SAAS,WAAW,OAA6B,UAA4B;AAC3E,MAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,EAAG,QAAO,CAAC;AACzD,QAAM,UAAU,OAAO,SAAS,QAAQ,KAAK,WAAW,IAAI,KAAK,MAAM,QAAQ,IAAI;AACnF,MAAI,WAAW,EAAG,QAAO,CAAC;AAC1B,QAAM,UAAoB,CAAC;AAC3B,aAAW,QAAQ,OAAO;AACxB,QAAI,OAAO,SAAS,SAAU;AAC9B,UAAM,UAAU,KAAK,KAAK;AAC1B,QAAI,QAAQ,WAAW,EAAG;AAC1B,YAAQ,KAAK,OAAO;AACpB,QAAI,QAAQ,UAAU,QAAS;AAAA,EACjC;AACA,SAAO;AACT;AAEA,SAAS,cACP,QACA,OACA,QACmE;AACnE,QAAM,gBAAgB,YAAY,QAAQ,OAAO,2BAA2B;AAC5E,QAAM,YAAY,CAAC;AAAA,EAAkB,aAAa,EAAE;AACpD,MAAI,MAAM,SAAS,GAAG;AACpB,cAAU;AAAA,MACR;AAAA;AAAA,IAAgF,MAAM,KAAK,MAAM,CAAC;AAAA,IACpG;AAAA,EACF;AACA,YAAU,KAAK,6DAA6D;AAC5E,SAAO;AAAA,IACL,EAAE,MAAM,UAAU,SAAS,cAAc;AAAA,IACzC,EAAE,MAAM,QAAQ,SAAS,UAAU,KAAK,IAAI,EAAE;AAAA,EAChD;AACF;AAsBA,SAAS,sBAAsB,oBAA4D;AACzF,MAAI,OAAO,uBAAuB,SAAU,QAAO;AACnD,QAAM,UAAU,mBAAmB,KAAK;AACxC,SAAO,QAAQ,SAAS,GAAG,IAAI,UAAU;AAC3C;AAEO,SAAS,+BACd,QAIoB;AACpB,QAAM,eACJ,OAAO,gBAAgB,YAAY,wBAAwB,MAAM,IAAI,CAAC;AACxE,SAAO;AAAA,IACL,GAAG;AAAA,IACH,OAAO,sBAAsB,OAAO,kBAAkB;AAAA,IACtD,aAAa;AAAA,IACb,WAAW;AAAA,IACX,WACE,OAAO,OAAO,2BAA2B,YAAY,OAAO,yBAAyB,IACjF,OAAO,yBACP;AAAA,EACR;AACF;AAKA,IAAM,4BAA4B,oBAAI,IAAY;AAElD,SAAS,gBACP,eACA,QACA,QACA,WACA,cACwB;AACxB,SAAO,EAAE,MAAM,eAAe,eAAe,QAAQ,QAAQ,WAAW,aAAa;AACvF;AAWA,eAAsB,kBACpB,QACA,OACA,QACA,MACA,KACA,QACiC;AACjC,QAAM,gBAAgB,eAAe,MAAM;AAI3C,QAAM,oBAAoB,KAAK;AAC/B,MAAI,CAAC,mBAAmB;AACtB,WAAO,gBAAgB,eAAe,aAAa,gBAAgB,GAAG,KAAK;AAAA,EAC7E;AAKA,MAAI,QAAQ,SAAS;AACnB,WAAO,gBAAgB,eAAe,sBAAsB,WAAW,GAAG,IAAI;AAAA,EAChF;AAEA,QAAM,aAAa,OAAO,WAAW,WAAW,OAAO,KAAK,IAAI;AAChE,MAAI,WAAW,WAAW,GAAG;AAE3B,WAAO,gBAAgB,eAAe,aAAa,gBAAgB,GAAG,KAAK;AAAA,EAC7E;AAEA,QAAM,SACJ,OACA,IAAI;AAAA,IACF,OAAO;AAAA,IACP,oCAAoC,MAAM;AAAA,EAC5C;AAIF,QAAM,UAAU,EAAE,GAAG,+BAA+B,MAAM,GAAG,OAAO;AAMpE,QAAM,oBAAoB;AAAA,IACxB,SAAS,QAAQ;AAAA,IACjB,YAAY,QAAQ;AAAA,EACtB;AACA,MAAI,CAAC,OAAO,YAAY,iBAAiB,KAAK,CAAC,QAAQ,OAAO;AAI5D,UAAM,YAAY,GAAG,OAAO,WAAW,IAAI,OAAO,sBAAsB,EAAE;AAC1E,QAAI,CAAC,0BAA0B,IAAI,SAAS,GAAG;AAC7C,gCAA0B,IAAI,SAAS;AACvC,UAAI;AAAA,QACF;AAAA,MAGF;AAAA,IACF;AACA,WAAO,gBAAgB,eAAe,sBAAsB,gBAAgB,GAAG,IAAI;AAAA,EACrF;AAEA,QAAM,eAAe,WAAW,OAAO,OAAO,2BAA2B;AACzE,QAAM,WAAW,cAAc,YAAY,cAAc,MAAM;AAE/D,QAAM,QAAQ,KAAK,IAAI;AACvB,MAAI;AACF,UAAM,WAAW,MAAM,OAAO,wBAAwB,UAAU,gBAAgB,OAAO;AACvF,UAAM,YAAY,KAAK,IAAI,IAAI;AAC/B,QAAI,CAAC,UAAU,QAAQ;AAGrB,aAAO,gBAAgB,eAAe,sBAAsB,aAAa,WAAW,IAAI;AAAA,IAC1F;AACA,UAAM,OAAO,SAAS,OAAO;AAC7B,UAAM,SACJ,OAAO,SAAS,OAAO,WAAW,YAAY,SAAS,OAAO,OAAO,KAAK,EAAE,SAAS,IACjF,SAAS,OAAO,OAAO,KAAK,IAC5B;AACN,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,MACR;AAAA,MACA,WAAW,SAAS;AAAA,MACpB;AAAA,MACA,cAAc;AAAA,IAChB;AAAA,EACF,SAAS,KAAK;AACZ,UAAM,YAAY,KAAK,IAAI,IAAI;AAC/B,QAAI,QAAQ,SAAS;AAEnB,aAAO,gBAAgB,eAAe,sBAAsB,WAAW,WAAW,IAAI;AAAA,IACxF;AACA,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,QAAI,KAAK,2DAA2D,OAAO,EAAE;AAC7E,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,aAAa,OAAO;AAAA,MACpB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/recall-state-view-admission.d.ts

@@ -1,6 +1,6 @@
-import { G as GenericRecallPathPolicy } from './generic-recall-paths-BcySh_f9.js';
+import { G as GenericRecallPathPolicy } from './generic-recall-paths-CpyVmA88.js';
 import { StateViewResult } from './recall-state-view.js';
-import { M as MemoryFile } from './types-Cyr32ABj.js';
+import { M as MemoryFile } from './types-nJV23pa3.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';
@@ -24,7 +24,17 @@ import './types-continuity.js';
  * ratchet ceiling. Callers keep one-line sites.
  */
 
-/** Config flag OR per-call override, gated on change intent; computed once for all branches. */
+/**
+ * Config flag OR per-call override, gated on change intent; computed once
+ * for all branches.
+ *
+ * #2893: `query` MUST be the ORIGINAL prompt, not the cron-normalized
+ * retrievalQuery — buildRecallQueryPolicy truncates standard prompts at
+ * maxChars and strips stop-words ("when", "before", "after") from
+ * instruction-heavy ones, either of which can erase the change-intent
+ * signal before retrieval. Only the resulting boolean flows downstream;
+ * retrieval itself keeps using the normalized query.
+ */
 declare function resolveRecallStateViewActive(options: {
     stateView?: boolean;
 }, config: {

package/dist/recall-state-view-admission.js

@@ -2,24 +2,24 @@ import {
   filterRecentScanMemoriesForStateView,
   indexStateViewAnnotatedResults,
   resolveRecallStateViewActive
-} from "./chunk-5AERZWJD.js";
-import "./chunk-BRZWWUCJ.js";
-import "./chunk-VELCIWJZ.js";
-import "./chunk-UZZ7SQT3.js";
-import "./chunk-BV4ZKIZH.js";
+} from "./chunk-RLU2Y5GV.js";
+import "./chunk-DFVSJFHK.js";
+import "./chunk-6L2II3KS.js";
+import "./chunk-NVVZPBKI.js";
+import "./chunk-K75A5XWU.js";
 import "./chunk-CSAKJVXW.js";
 import "./chunk-K2XUWZBM.js";
 import "./chunk-OD4FM2U7.js";
 import "./chunk-PCEYGOSL.js";
 import "./chunk-5WITETWU.js";
 import "./chunk-6CIAGZ6X.js";
-import "./chunk-3CBI2ZSA.js";
-import "./chunk-JXN77SGO.js";
+import "./chunk-KG2OOAFF.js";
+import "./chunk-U2VDCFXW.js";
 import "./chunk-ZLQ37WJX.js";
 import "./chunk-IUM3VSHI.js";
 import "./chunk-C64XATK7.js";
 import "./chunk-42JKGUFJ.js";
-import "./chunk-255PC37A.js";
+import "./chunk-NETQXOPY.js";
 import "./chunk-JV3C2MNQ.js";
 import "./chunk-353C5UNV.js";
 import "./chunk-TBBDFYXW.js";

package/dist/recall-state-view-anchors.d.ts

@@ -0,0 +1,85 @@
+import { M as MemoryFile } from './types-nJV23pa3.js';
+import './message-parts/index.js';
+import './bounded-jsonl-state.js';
+import './operator-doctor-types.js';
+import './external-wiki-config.js';
+import './recall-state-view.js';
+import './contradiction-config.js';
+import './graph-path-scoring-config.js';
+import './background-generation-config.js';
+import './deep-recall-config.js';
+import './causal-trajectory.js';
+import './objective-state.js';
+import './active-context-config.js';
+import './local-llm-config.js';
+import './semantic-merge-config.js';
+import './types-continuity.js';
+
+interface StateViewAnchorFrontmatter {
+    id?: string;
+    supersedes?: string;
+    supersededBy?: string;
+}
+/**
+ * #2859 — pair reconciliation and packet-counting caps apply only WITHOUT
+ * a historical pin: under asOf the validity filter legitimately orphans
+ * predecessors (see annotateStateView's asOf mode).
+ */
+declare function stateViewPacketActive(stateViewActive: boolean | undefined, asOfMs: number | undefined): boolean;
+/**
+ * #1952/#2859 — config flag OR per-call override, gated on change intent.
+ * Packet semantics are off under a historical asOf pin (see stateViewPacketActive).
+ */
+declare function resolveRecallStateViewFlags(optionFlag: boolean | undefined, configFlag: boolean | undefined, retrievalQuery: string, asOfMs: number | undefined): {
+    stateViewActive: boolean;
+    stateViewPacketActive: boolean;
+};
+declare class StateViewAnchorTracker {
+    private readonly admitted;
+    private readonly supersedesAnchors;
+    has(namespace: string | undefined, frontmatter: StateViewAnchorFrontmatter): boolean;
+    /**
+     * Register a row as admitted (a survivor of every gate, or a deferred
+     * row whose successor anchored it). The row's `supersedes` back-pointer
+     * then anchors its own predecessor.
+     */
+    admit(namespace: string | undefined, frontmatter: StateViewAnchorFrontmatter): void;
+    /** True when an admitted successor anchors this superseded row. */
+    anchored(namespace: string | undefined, frontmatter: StateViewAnchorFrontmatter): boolean;
+}
+interface StateViewRecentAdmissionDeps {
+    namespaceOf: (path: string) => string;
+    isExcluded: (path: string) => boolean;
+    supersessionOptions: {
+        enabled: boolean;
+        includeInRecall: boolean;
+    };
+}
+/**
+ * #2859 — recent-scan admission: seed the tracker with every memory that
+ * survives the supersession gate, then admit superseded rows anchored by
+ * an in-set successor (fixpoint — an admitted link anchors the next).
+ */
+declare function admitStateViewRecentMemories(memories: readonly MemoryFile[], deps: StateViewRecentAdmissionDeps): StateViewAnchorTracker;
+interface RecentScanMemoryFilterDeps extends StateViewRecentAdmissionDeps {
+    stateViewActive: boolean;
+    asOfMs: number | undefined;
+}
+/**
+ * Recent-scan admission for the fallback path.
+ *
+ * Superseded-status filtering delegates to
+ * shouldFilterSupersededFromRecall so recent-scan and the QMD
+ * safety filter share semantics (kill switch, audit mode, PR #402).
+ * #1952: an active state view admits a superseded memory whose
+ * successor ALSO survives this admission filter (fixpoint below).
+ * PR #713: when `as_of` is active, pass superseded candidates
+ * through here — boostSearchResults's `[valid_at, invalid_at)`
+ * evaluation is the authoritative historical gate. Other
+ * non-active statuses stay excluded.
+ * #2859: namespace-qualified anchors with the supersedes
+ * back-pointer — mirrors the safety-filter fixpoint.
+ */
+declare function filterRecentScanMemories(memories: readonly MemoryFile[], deps: RecentScanMemoryFilterDeps): MemoryFile[];
+
+export { type RecentScanMemoryFilterDeps, type StateViewAnchorFrontmatter, StateViewAnchorTracker, type StateViewRecentAdmissionDeps, admitStateViewRecentMemories, filterRecentScanMemories, resolveRecallStateViewFlags, stateViewPacketActive };

package/dist/recall-state-view-anchors.js

@@ -0,0 +1,21 @@
+import {
+  StateViewAnchorTracker,
+  admitStateViewRecentMemories,
+  filterRecentScanMemories,
+  resolveRecallStateViewFlags,
+  stateViewPacketActive
+} from "./chunk-Z4GUX2M6.js";
+import "./chunk-5WITETWU.js";
+import "./chunk-6CIAGZ6X.js";
+import "./chunk-NETQXOPY.js";
+import "./chunk-PQVCH2AE.js";
+import "./chunk-3WCASNQZ.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  StateViewAnchorTracker,
+  admitStateViewRecentMemories,
+  filterRecentScanMemories,
+  resolveRecallStateViewFlags,
+  stateViewPacketActive
+};
+//# sourceMappingURL=recall-state-view-anchors.js.map

package/dist/recall-state-view-anchors.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/recall-state-view-inject.js

@@ -1,7 +1,7 @@
 import {
   renderStateViewLine
-} from "./chunk-M3MYMWXG.js";
-import "./chunk-255PC37A.js";
+} from "./chunk-V2ZA4YWE.js";
+import "./chunk-NETQXOPY.js";
 import "./chunk-PQVCH2AE.js";
 import "./chunk-3WCASNQZ.js";
 import "./chunk-PZ5AY32C.js";

package/dist/recall-state-view-render.js

@@ -1,7 +1,7 @@
 import {
   renderStateViewLine
-} from "./chunk-M3MYMWXG.js";
-import "./chunk-255PC37A.js";
+} from "./chunk-V2ZA4YWE.js";
+import "./chunk-NETQXOPY.js";
 import "./chunk-PQVCH2AE.js";
 import "./chunk-3WCASNQZ.js";
 import "./chunk-PZ5AY32C.js";

package/dist/recall-state-view-widen.js

@@ -1,7 +1,7 @@
 import {
   widenRecallStateViews
-} from "./chunk-VELCIWJZ.js";
-import "./chunk-255PC37A.js";
+} from "./chunk-6L2II3KS.js";
+import "./chunk-NETQXOPY.js";
 import "./chunk-PQVCH2AE.js";
 import "./chunk-3WCASNQZ.js";
 import "./chunk-PZ5AY32C.js";

package/dist/recall-state-view-wire.js

@@ -1,8 +1,8 @@
 import {
   applyRecallStateViews
-} from "./chunk-BRZWWUCJ.js";
-import "./chunk-VELCIWJZ.js";
-import "./chunk-255PC37A.js";
+} from "./chunk-DFVSJFHK.js";
+import "./chunk-6L2II3KS.js";
+import "./chunk-NETQXOPY.js";
 import "./chunk-PQVCH2AE.js";
 import "./chunk-3WCASNQZ.js";
 import "./chunk-PZ5AY32C.js";

package/dist/recall-state-view.d.ts

@@ -3,13 +3,23 @@ interface StateViewChain {
     predecessorId: string;
     successorId: string;
     supersededAt?: string;
+    /** #2859 — namespace scope; a chain link never crosses namespaces. */
+    namespace?: string;
 }
 interface StateViewResult {
     id?: string;
     docid?: string;
     status?: string;
+    /** #2859 — namespace that owns this row; qualifies every chain identity. */
+    namespace?: string;
+    /** #2859 — back-pointer: id of the row this one replaced. */
+    supersedes?: string;
     supersededBy?: string;
     supersededAt?: string;
+    /** #2859 — fact validity start (frontmatter `valid_at`). */
+    validAt?: string;
+    /** #2859 — fact validity end (frontmatter `invalid_at`). */
+    invalidAt?: string;
     stateLabel?: StateLabel;
 }
 declare const DEFAULT_RECALL_STATE_VIEWS = false;
@@ -18,9 +28,36 @@ declare function isChangeOrientedQuery(query: string): boolean;
 declare function shouldWidenSuperseded(successorId: string | undefined, candidateIds: ReadonlySet<string>): boolean;
 declare function formatSupersededPrefix(date: string, successorId: string): string;
 declare function resultStateViewId(result: StateViewResult): string;
+/**
+ * #2859 — namespace-qualified chain identity. Namespace fanout can surface
+ * the same id from two namespaces; every successor/admission match runs on
+ * `namespace\0id` keys so a row in one namespace can never anchor (or be
+ * anchored by) an identically-named row in another.
+ */
+declare function stateViewKey(namespace: string | undefined, id: string): string;
+declare function resultStateViewKey(result: StateViewResult): string;
 declare function annotateStateView<T extends StateViewResult>(results: T[], query: string, chains: readonly StateViewChain[], options?: {
     enabled?: boolean;
     asOfMs?: number;
+    changeIntent?: boolean;
 }): T[];
+/**
+ * #2859 — drop superseded rows whose successor is not in the pool BEFORE
+ * the user cap/MMR runs, so post-cap orphan removal can never underfill
+ * the result set. Reconciles to a fixpoint (a dropped successor orphans
+ * its own predecessors). Rows with no successor links pass through in
+ * order. ponytail: repeated full-pool passes are O(n²) on one long chain;
+ * recall pools stay small, memoize per-key if pools ever grow.
+ */
+declare function reconcileStateViewPairs<T extends StateViewResult>(results: readonly T[]): T[];
+/**
+ * #2859 — packet-counting cap. A predecessor/successor chain admitted
+ * together is ONE complete evidence packet: it consumes a single slot of
+ * the user cap, and the slice never splits a packet at the boundary (no
+ * underfill from post-cap orphan removal). Rows keep their incoming
+ * (MMR) order; packets are ordered by first appearance. Call
+ * reconcileStateViewPairs first so orphans never consume a slot.
+ */
+declare function capStateViewPackets<T extends StateViewResult>(ordered: readonly T[], limit: number): T[];
 
-export { DEFAULT_RECALL_STATE_VIEWS, type StateLabel, type StateViewChain, type StateViewResult, annotateStateView, formatSupersededPrefix, isChangeOrientedQuery, parseRecallStateViews, resultStateViewId, shouldWidenSuperseded };
+export { DEFAULT_RECALL_STATE_VIEWS, type StateLabel, type StateViewChain, type StateViewResult, annotateStateView, capStateViewPackets, formatSupersededPrefix, isChangeOrientedQuery, parseRecallStateViews, reconcileStateViewPairs, resultStateViewId, resultStateViewKey, shouldWidenSuperseded, stateViewKey };

package/dist/recall-state-view.js

@@ -1,22 +1,30 @@
 import {
   DEFAULT_RECALL_STATE_VIEWS,
   annotateStateView,
+  capStateViewPackets,
   formatSupersededPrefix,
   isChangeOrientedQuery,
   parseRecallStateViews,
+  reconcileStateViewPairs,
   resultStateViewId,
-  shouldWidenSuperseded
-} from "./chunk-255PC37A.js";
+  resultStateViewKey,
+  shouldWidenSuperseded,
+  stateViewKey
+} from "./chunk-NETQXOPY.js";
 import "./chunk-PQVCH2AE.js";
 import "./chunk-3WCASNQZ.js";
 import "./chunk-PZ5AY32C.js";
 export {
   DEFAULT_RECALL_STATE_VIEWS,
   annotateStateView,
+  capStateViewPackets,
   formatSupersededPrefix,
   isChangeOrientedQuery,
   parseRecallStateViews,
+  reconcileStateViewPairs,
   resultStateViewId,
-  shouldWidenSuperseded
+  resultStateViewKey,
+  shouldWidenSuperseded,
+  stateViewKey
 };
 //# sourceMappingURL=recall-state-view.js.map

package/dist/recall-state.d.ts

@@ -1,6 +1,6 @@
 import { HeldFileLockOptions } from './utils/serialize-mutations.js';
 import { SearchDegradation } from './search/port.js';
-import { R as RecallPlanMode, I as IdentityInjectionMode, b as RecallTierExplain } from './types-Cyr32ABj.js';
+import { R as RecallPlanMode, I as IdentityInjectionMode, b as RecallTierExplain } from './types-nJV23pa3.js';
 import { IncludedMemory } from './included-memories.js';
 export { coerceIncludedMemories } from './included-memories.js';
 import './message-parts/index.js';

package/dist/recall-tag-filter.d.ts

@@ -1,6 +1,6 @@
 import { RecallFilterTrace } from './recall-xray.js';
 import './memory-provenance.js';
-import './types-Cyr32ABj.js';
+import './types-nJV23pa3.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';

package/dist/recall-timings.d.ts

@@ -1,4 +1,4 @@
-import { P as PluginConfig } from './types-Cyr32ABj.js';
+import { P as PluginConfig } from './types-nJV23pa3.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';

package/dist/recall-xray-cli.d.ts

@@ -1,5 +1,5 @@
 import { RecallXrayFormat } from './recall-xray-renderer.js';
-import { o as RecallDisclosure } from './types-Cyr32ABj.js';
+import { o as RecallDisclosure } from './types-nJV23pa3.js';
 import './recall-xray.js';
 import './memory-provenance.js';
 import './user-model.js';

package/dist/recall-xray-cli.js

@@ -2,11 +2,11 @@ import {
   parseXrayBudgetFlag,
   parseXrayCliOptions,
   parseXrayDisclosureFlag
-} from "./chunk-4BCHFSC7.js";
-import "./chunk-M6HBPLBA.js";
+} from "./chunk-LFVZD5EC.js";
+import "./chunk-KOTG3RXE.js";
 import "./chunk-SOBJ6NEY.js";
-import "./chunk-ZEGL7YCC.js";
-import "./chunk-IYKZJVL5.js";
+import "./chunk-BXIJSPCL.js";
+import "./chunk-MDIEES23.js";
 import "./chunk-TOTT6S2V.js";
 import "./chunk-I4WBNM3M.js";
 import "./chunk-SOAU2OE2.js";

package/dist/recall-xray-renderer.d.ts

@@ -1,6 +1,6 @@
 import { RecallXraySnapshot } from './recall-xray.js';
 import './memory-provenance.js';
-import './types-Cyr32ABj.js';
+import './types-nJV23pa3.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';

package/dist/recall-xray-renderer.js

@@ -5,10 +5,10 @@ import {
   renderXrayJson,
   renderXrayMarkdown,
   renderXrayText
-} from "./chunk-M6HBPLBA.js";
+} from "./chunk-KOTG3RXE.js";
 import "./chunk-SOBJ6NEY.js";
-import "./chunk-ZEGL7YCC.js";
-import "./chunk-IYKZJVL5.js";
+import "./chunk-BXIJSPCL.js";
+import "./chunk-MDIEES23.js";
 import "./chunk-TOTT6S2V.js";
 import "./chunk-I4WBNM3M.js";
 import "./chunk-SOAU2OE2.js";

package/dist/recall-xray.d.ts

@@ -1,5 +1,5 @@
 import { RetrievedMemoryProvenance } from './memory-provenance.js';
-import { b as RecallTierExplain, o as RecallDisclosure } from './types-Cyr32ABj.js';
+import { b as RecallTierExplain, o as RecallDisclosure } from './types-nJV23pa3.js';
 import { StateLabel } from './recall-state-view.js';
 import './user-model.js';
 import './message-parts/index.js';

package/dist/recall-xray.js

@@ -5,8 +5,8 @@ import {
   estimateRecallTokens,
   isRecallXrayServedBy,
   summarizeDisclosureTokens
-} from "./chunk-ZEGL7YCC.js";
-import "./chunk-IYKZJVL5.js";
+} from "./chunk-BXIJSPCL.js";
+import "./chunk-MDIEES23.js";
 import "./chunk-TOTT6S2V.js";
 import "./chunk-I4WBNM3M.js";
 import "./chunk-SOAU2OE2.js";

package/dist/reconcile/cursor.d.ts

@@ -1,7 +1,7 @@
 import { ReconcileSemanticAgreement, ReconcilePlanEntry } from './plan.js';
 import '../offline-sync.js';
 import '../offline-sync-file-io.js';
-import '../types-Cyr32ABj.js';
+import '../types-nJV23pa3.js';
 import '../message-parts/index.js';
 import '../bounded-jsonl-state.js';
 import '../operator-doctor-types.js';

package/dist/reconcile/manifest.d.ts

@@ -1,4 +1,4 @@
-import { x as MemoryStatus, m as MemoryFrontmatter } from '../types-Cyr32ABj.js';
+import { x as MemoryStatus, m as MemoryFrontmatter } from '../types-nJV23pa3.js';
 import { ReconcileFileState, ReconcilePlan, ReconcileSemanticAgreement } from './plan.js';
 import '../message-parts/index.js';
 import '../bounded-jsonl-state.js';

package/dist/reconcile/plan.d.ts

@@ -1,5 +1,5 @@
 import { OfflineSyncFileState } from '../offline-sync.js';
-import { a2 as ConvergeConflictPolicy } from '../types-Cyr32ABj.js';
+import { a3 as ConvergeConflictPolicy } from '../types-nJV23pa3.js';
 import '../offline-sync-file-io.js';
 import '../message-parts/index.js';
 import '../bounded-jsonl-state.js';

package/dist/replay/normalizers/chatgpt.d.ts

@@ -1,6 +1,6 @@
 import { ReplayNormalizer } from '../types.js';
 import '../../message-parts/index.js';
-import '../../types-Cyr32ABj.js';
+import '../../types-nJV23pa3.js';
 import '../../bounded-jsonl-state.js';
 import '../../operator-doctor-types.js';
 import '../../external-wiki-config.js';

package/dist/replay/normalizers/claude.d.ts

@@ -1,6 +1,6 @@
 import { ReplayNormalizer } from '../types.js';
 import '../../message-parts/index.js';
-import '../../types-Cyr32ABj.js';
+import '../../types-nJV23pa3.js';
 import '../../bounded-jsonl-state.js';
 import '../../operator-doctor-types.js';
 import '../../external-wiki-config.js';