@remnic/core 9.69.45 → 9.69.47

package/dist/external-wiki-access.js

@@ -1,74 +1,75 @@
 import {
   externalWikiSearchOperation
-} from "./chunk-Z5YNVWRD.js";
+} from "./chunk-BMENHAJL.js";
 import "./chunk-7T4TOGMS.js";
 import "./chunk-7YQ6ESEA.js";
-import "./chunk-NKDQXDFL.js";
+import "./chunk-AS4YKT75.js";
 import "./chunk-W4F3C7N7.js";
 import "./chunk-MPC7TYTZ.js";
 import "./chunk-ZHXSOMYH.js";
 import "./chunk-IFBSZGW3.js";
-import "./chunk-QKCXRS5A.js";
 import "./chunk-C3QXITIP.js";
 import "./chunk-VQ7B2Q6M.js";
-import "./chunk-NGAFYIHQ.js";
+import "./chunk-QKCXRS5A.js";
+import "./chunk-PPJLJD2D.js";
 import "./chunk-PJSK6OJM.js";
 import "./chunk-GNVZQ5JN.js";
 import "./chunk-YN2UN7N3.js";
 import "./chunk-ROBHL3GL.js";
-import "./chunk-5ZXGH2ZL.js";
+import "./chunk-BXOPUJ3W.js";
 import "./chunk-6DNMUYEE.js";
 import "./chunk-P5FPO2BR.js";
 import "./chunk-S4DDLTPX.js";
 import "./chunk-5UBH37SL.js";
-import "./chunk-EC5SVM6H.js";
 import "./chunk-KIW3OOZE.js";
 import "./chunk-YE4JBZO5.js";
 import "./chunk-5KVT6G5U.js";
 import "./chunk-VYDGHJIN.js";
-import "./chunk-AS2NOPDM.js";
+import "./chunk-V7IONNTJ.js";
 import "./chunk-7O5EW7KX.js";
 import "./chunk-H7XKCNR6.js";
-import "./chunk-PW4HTWXL.js";
+import "./chunk-55XWRL6F.js";
 import "./chunk-SOBJ6NEY.js";
-import "./chunk-VW5TGNJN.js";
-import "./chunk-BOWAP64Q.js";
+import "./chunk-XXLH6KFO.js";
+import "./chunk-QB4VXCFN.js";
 import "./chunk-CVILPI77.js";
 import "./chunk-6WHJ2EAB.js";
 import "./chunk-AQEJKOKI.js";
 import "./chunk-HM7RHKS4.js";
 import "./chunk-UD7UNYRD.js";
 import "./chunk-IISBCCWR.js";
+import "./chunk-P3YNEMYY.js";
+import "./chunk-DE4ZGH2N.js";
 import "./chunk-2YA5N2BY.js";
 import "./chunk-HWLIMQE2.js";
-import "./chunk-E5VOKZQV.js";
+import "./chunk-5KBI2MOC.js";
 import "./chunk-EI6V5UXY.js";
 import "./chunk-CEO4DONG.js";
 import "./chunk-SGUDMW2K.js";
 import "./chunk-7IRZK6MM.js";
 import "./chunk-NLE6TSLG.js";
 import "./chunk-WLZYGLJ4.js";
-import "./chunk-WGZHSQDV.js";
-import "./chunk-JUXOTY6J.js";
+import "./chunk-G2XZFGYN.js";
 import "./chunk-QM2SPLKQ.js";
+import "./chunk-JUXOTY6J.js";
 import "./chunk-LTHVM4XN.js";
-import "./chunk-LQVXSRAJ.js";
+import "./chunk-B4EGAHHS.js";
 import "./chunk-C37ZRXX7.js";
 import "./chunk-7ZNJN5WZ.js";
 import "./chunk-NAFPHFDM.js";
 import "./chunk-RF2SMMPP.js";
 import "./chunk-AJBWVDRV.js";
-import "./chunk-WUUGE7QC.js";
-import "./chunk-HRATODNO.js";
+import "./chunk-HS75MCQF.js";
 import "./chunk-WTWQA7BB.js";
 import "./chunk-VZIAVM72.js";
-import "./chunk-K75H7FSO.js";
-import "./chunk-AOMUIF3R.js";
-import "./chunk-46A4RGBC.js";
-import "./chunk-WMTYEQO5.js";
+import "./chunk-HRATODNO.js";
+import "./chunk-YXWMZAAN.js";
+import "./chunk-MQT3WP3F.js";
+import "./chunk-OS4JVTHR.js";
+import "./chunk-XZUHXKM3.js";
 import "./chunk-UFGFMWAD.js";
 import "./chunk-BMWN7B3Y.js";
-import "./chunk-MDYZCPNQ.js";
+import "./chunk-WL3PGPGU.js";
 import "./chunk-3UXOZBHV.js";
 import "./chunk-PIWFNPQT.js";
 import "./chunk-5FAGCOZD.js";
@@ -77,43 +78,43 @@ import "./chunk-2LSZVONP.js";
 import "./chunk-DEUNUKTD.js";
 import "./chunk-LXY5VVGM.js";
 import "./chunk-GKCXTSFF.js";
-import "./chunk-EUP4AXIW.js";
-import "./chunk-K4KE5MYE.js";
+import "./chunk-B6VDWDFN.js";
+import "./chunk-Y5VT7BIT.js";
 import "./chunk-CSAKJVXW.js";
 import "./chunk-K2XUWZBM.js";
 import "./chunk-OD4FM2U7.js";
 import "./chunk-ZY2MNJR6.js";
 import "./chunk-TBBDFYXW.js";
-import "./chunk-YHSEUZV5.js";
-import "./chunk-IAT5WFEU.js";
+import "./chunk-QLCMOHRE.js";
+import "./chunk-MNG536IS.js";
 import "./chunk-46WM6JX2.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-D5F7TKMH.js";
-import "./chunk-T3F2HWIG.js";
-import "./chunk-C3YEB7CR.js";
-import "./chunk-G6NQ3L4T.js";
+import "./chunk-IO7K7GES.js";
+import "./chunk-PA67GXYJ.js";
 import "./chunk-WPGR3RW4.js";
 import "./chunk-6KTXE6A3.js";
 import "./chunk-D7MAYFQP.js";
 import "./chunk-KVO2BTA4.js";
+import "./chunk-CYEPCZN5.js";
+import "./chunk-G6NQ3L4T.js";
 import "./chunk-4O6WRBGE.js";
 import "./chunk-GUMZC2BO.js";
-import "./chunk-CYEPCZN5.js";
 import "./chunk-TFA6HPOA.js";
 import "./chunk-F4TWWUMP.js";
 import "./chunk-72A4L5JJ.js";
 import "./chunk-A7Q43EUZ.js";
 import "./chunk-S2V7RUCL.js";
-import "./chunk-PCEYGOSL.js";
-import "./chunk-66YUOI53.js";
-import "./chunk-SCU65EZI.js";
+import "./chunk-WQW6KPVC.js";
 import "./chunk-MRPOZBJC.js";
 import "./chunk-S2HLHAZ4.js";
+import "./chunk-PCEYGOSL.js";
+import "./chunk-SCU65EZI.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-J3IWHCMF.js";
 import "./chunk-AAD2ZS6P.js";
-import "./chunk-SHEHQBCG.js";
+import "./chunk-DUJYRVUD.js";
 import "./chunk-3ONXXHQO.js";
 import "./chunk-YXZG5TVN.js";
 import "./chunk-5GINB5LC.js";
@@ -125,10 +126,10 @@ import "./chunk-RBOJCG4T.js";
 import "./chunk-R7QY5ZVB.js";
 import "./chunk-5WITETWU.js";
 import "./chunk-6CIAGZ6X.js";
-import "./chunk-KG2OOAFF.js";
+import "./chunk-TQSCR5DU.js";
 import "./chunk-U2VDCFXW.js";
-import "./chunk-ZLQ37WJX.js";
 import "./chunk-IUM3VSHI.js";
+import "./chunk-ZLQ37WJX.js";
 import "./chunk-C64XATK7.js";
 import "./chunk-42JKGUFJ.js";
 import "./chunk-ZTHGFTMW.js";
@@ -154,7 +155,7 @@ import "./chunk-236PXYG7.js";
 import "./chunk-ZCUTSMR2.js";
 import "./chunk-QDW3E4RD.js";
 import "./chunk-L63GFNKL.js";
-import "./chunk-RW4QNB4J.js";
+import "./chunk-S45INSV3.js";
 import "./chunk-ZIKENA2C.js";
 import "./chunk-6Q3ZTEF6.js";
 import "./chunk-YCVB7X56.js";
@@ -185,8 +186,8 @@ import "./chunk-FP2373TW.js";
 import "./chunk-Z2YFLXHU.js";
 import "./chunk-I4WBNM3M.js";
 import "./chunk-SOAU2OE2.js";
-import "./chunk-4HTQ76O4.js";
-import "./chunk-TNQR7N52.js";
+import "./chunk-7SJCSDQ3.js";
+import "./chunk-S3YM4SZQ.js";
 import "./chunk-PAAJWQH5.js";
 import "./chunk-RFIJH2OE.js";
 import "./chunk-OQQXGYMX.js";
@@ -234,9 +235,9 @@ import "./chunk-46EST7JO.js";
 import "./chunk-G73MCJKL.js";
 import "./chunk-A2IYSXDQ.js";
 import "./chunk-B6O2YLUR.js";
-import "./chunk-7K5Q6COX.js";
-import "./chunk-LBLXEFWK.js";
+import "./chunk-TVVEYCNW.js";
 import "./chunk-RFYAYKTD.js";
+import "./chunk-LBLXEFWK.js";
 import "./chunk-YRLHEEQT.js";
 import "./chunk-FF4KLI5W.js";
 import "./chunk-JN72EPOE.js";

package/dist/external-wiki-collection-registration.d.ts

@@ -1,6 +1,6 @@
 import { ExternalWikiCollectionRoot, ExternalWikiCollectionStatus } from './external-wiki-collection.js';
 import { SearchExecutionOptions } from './search/port.js';
-import './types-nmhnJpxx.js';
+import './types-DgDaoY61.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';

package/dist/external-wiki-collection.d.ts

@@ -1,5 +1,5 @@
 import { SearchBackend, SearchExecutionOptions, SearchResult } from './search/port.js';
-import './types-nmhnJpxx.js';
+import './types-DgDaoY61.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';

package/dist/external-wiki-mcp-tools.d.ts

@@ -1,5 +1,5 @@
-import { l as McpTool } from './access-service-CDteK_Gt.js';
-import './types-nmhnJpxx.js';
+import { l as McpTool } from './access-service-BXYrJ3pO.js';
+import './types-DgDaoY61.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';
@@ -16,13 +16,13 @@ import './active-context-config.js';
 import './local-llm-config.js';
 import './semantic-merge-config.js';
 import './types-continuity.js';
-import './orchestrator-BCvQavIS.js';
+import './orchestrator-Cirjo3ZB.js';
 import './recall-state.js';
 import './utils/serialize-mutations.js';
 import './search/port.js';
 import './included-memories.js';
 import './briefing.js';
-import './storage-ClkHCQSE.js';
+import './storage-mD2YQ8_2.js';
 import './corpus-read-cancellation.js';
 import './artifact-search.js';
 import './active-context-transform.js';
@@ -38,7 +38,7 @@ import './write-envelope.js';
 import './structured-attributes.js';
 import './buffer.js';
 import './extraction-faithfulness.js';
-import './local-llm-DdrhmecM.js';
+import './local-llm-DH4tWtck.js';
 import './model-registry.js';
 import './fallback-llm.js';
 import './fallback-llm-codex-subscription.js';
@@ -47,8 +47,8 @@ import './resolve-provider-secret.js';
 import './transcript.js';
 import './session-integrity.js';
 import './summarizer.js';
-import './maintenance-B813YFWJ.js';
-import './catalog-Dl2hYqpS.js';
+import './maintenance-n6yeTQhR.js';
+import './catalog-Bns9zpl3.js';
 import './namespaces/search.js';
 import './compounding/engine.js';
 import './shared-context/manager.js';
@@ -58,7 +58,7 @@ import './utility-runtime.js';
 import './tier-routing.js';
 import './lifecycle.js';
 import './orchestration/compression-guideline-coordinator.js';
-import './semantic-consolidation-B09JI9WM.js';
+import './semantic-consolidation-BrAWKVcm.js';
 import './connectors/codex-materialize.js';
 import './logger.js';
 import './embedding-fallback.js';
@@ -80,17 +80,17 @@ import './conversation-index/chunker.js';
 import './conversation-index/backend.js';
 import './faiss-adapter-BHecI1fF.js';
 import './runtime/child-process.js';
-import './dependency-propagation-delivery-BXaUoVUf.js';
+import './dependency-propagation-delivery-B-LvcDaq.js';
 import './namespaces/storage.js';
 import './threading.js';
-import './scope-profiles-crazXegZ.js';
+import './scope-profiles-BgPQx9iE.js';
 import './graph-DRkl22KE.js';
 import './graph-write-lock.js';
 import './recall-xray.js';
 import './memory-provenance.js';
 import './user-model.js';
 import './recall-context-composition.js';
-import './generic-recall-paths-BkVVEoeO.js';
+import './generic-recall-paths-Bfc7zigS.js';
 import './live-connectors-runner.js';
 import './framework-CNDn2164.js';
 import './relevance.js';
@@ -98,7 +98,7 @@ import './negative.js';
 import './session-observer-state.js';
 import './semantic-BalR6EXU.js';
 import './replay/types.js';
-import './service-Echc5Xso.js';
+import './service-CqHOTg87.js';
 import './extraction-judge.js';
 import './lcm/engine.js';
 import './lcm/archive.js';
@@ -121,7 +121,7 @@ import './types-B1VHaf2w.js';
 import './transfer/capsule-import.js';
 import './transfer/types.js';
 import './recall-navigation.js';
-import './access-namespace-preflight-DDnsN22V.js';
+import './access-namespace-preflight-CetF9ziA.js';
 import './access-token-capabilities.js';
 import 'node:async_hooks';
 import './recall-explain-renderer.js';
@@ -129,10 +129,11 @@ import './access-citation.js';
 import './access-health-types.js';
 import './corpus-watermark.js';
 import './replica-divergence.js';
-import './tagging-ksktJ60G.js';
+import './tagging-CiAVA-ID.js';
 import './explicit-capture.js';
 import './access-wearables-meetings-surface.js';
 import './deep-recall.js';
+import './memory-browse.js';
 import './graph-snapshot.js';
 import './access-offline-manifest.js';
 import 'node:fs/promises';

package/dist/extraction-error-classification.d.ts

@@ -1,4 +1,4 @@
-import { a1 as ExtractionFailureClass } from './types-nmhnJpxx.js';
+import { a1 as ExtractionFailureClass } from './types-DgDaoY61.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';

package/dist/extraction-evidence-class.d.ts

@@ -0,0 +1,142 @@
+import { N as MemorySubject } from './types-DgDaoY61.js';
+import './message-parts/index.js';
+import './bounded-jsonl-state.js';
+import './operator-doctor-types.js';
+import './external-wiki-config.js';
+import './recall-state-view.js';
+import './contradiction-config.js';
+import './graph-path-scoring-config.js';
+import './background-generation-config.js';
+import './deep-recall-config.js';
+import './recall-navigation-config.js';
+import './causal-trajectory.js';
+import './objective-state.js';
+import './active-context-config.js';
+import './local-llm-config.js';
+import './semantic-merge-config.js';
+import './types-continuity.js';
+
+/**
+ * Deterministic evidence provenance classes (issue #2973).
+ *
+ * Every extracted candidate is backed by spans located in buffered turns.
+ * The CLASS of a span — whose words it records — decides what the span can
+ * license (learned from distill-kura's measured self-reinforcing assertion
+ * loop: an agent asserts, the extractor records, the next agent reads it back
+ * as ground truth and repeats it with more confidence):
+ *
+ *   - `user`:   the human's own words. Licenses user attributions.
+ *   - `tool`:   machine output. The ONLY licit source for numbers.
+ *   - `action`: a tool was invoked. Weaker than reading its output.
+ *   - `agent`:  agent prose. Licenses a first-person judgement, never a
+ *               bare fact.
+ *
+ * Derivation is pure and total: turn role plus tool-part flags in, one class
+ * out, no clock, no randomness, no I/O. The same input always yields the
+ * same class. Span matching reuses `locateQuoteOffsets` /
+ * `stripLeadingRolePrefix` from `provenance.ts` so class location and
+ * provenance building can never disagree (issue #1575 pitfall: one matcher,
+ * not two).
+ *
+ * The post-extraction rules (`applyEvidenceClassRules`) are deterministic
+ * string/flag checks — no LLM — designed to run before the judge. Each
+ * returns a stable rule id for shadow-mode telemetry. Not yet wired into the
+ * extraction pipeline; see the issue's rollout plan.
+ */
+
+type EvidenceClass = "user" | "tool" | "action" | "agent";
+/** Canonical class order: strongest license first. Fixed; never reorder. */
+declare const EVIDENCE_CLASSES: readonly EvidenceClass[];
+/**
+ * A buffered turn reduced to what class derivation needs. Callers map
+ * `BufferTurn`s via {@link evidenceTurnInput}; `role` and the tool flags are
+ * the only fields that influence the class.
+ */
+interface EvidenceClassTurnInput {
+    content: string;
+    role: "user" | "assistant";
+    /** Turn carries machine output (a tool_result part). */
+    toolResult?: boolean;
+    /** Turn records a tool invocation (a tool_call part). */
+    toolCall?: boolean;
+}
+/**
+ * Derive a turn's evidence class. Total and deterministic:
+ *   - `role: "user"` → `"user"` (the human's words, regardless of stray
+ *     part flags a connector may attach).
+ *   - `role: "assistant"` with `toolResult` → `"tool"`; machine output
+ *     outranks the invocation that produced it.
+ *   - else with `toolCall` → `"action"`.
+ *   - else → `"agent"` (agent prose — the weakest license).
+ */
+declare function deriveTurnEvidenceClass(turnInput: EvidenceClassTurnInput): EvidenceClass;
+/**
+ * Map a buffered turn (structural subset of `BufferTurn`) to
+ * {@link EvidenceClassTurnInput}. Tool flags derive mechanically from part
+ * kinds — no content inspection, no heuristics.
+ */
+declare function evidenceTurnInput(bufferTurn: {
+    role: "user" | "assistant";
+    content: string;
+    parts?: ReadonlyArray<{
+        kind: string;
+    }>;
+}): EvidenceClassTurnInput;
+/**
+ * Classify the evidence backing a fact: the classes of every turn in which
+ * its quote was located, in canonical `EVIDENCE_CLASSES` order regardless of
+ * turn order. Deterministic — the same `(quote, turns)` pair always yields
+ * the same array. An absent or unlocatable quote yields `[]` (no evidence
+ * class; the extractor's own assertion is all that backs the fact).
+ */
+declare function classifyEvidenceClasses(input: {
+    quote: string | null | undefined;
+    turns: ReadonlyArray<EvidenceClassTurnInput>;
+}): EvidenceClass[];
+/**
+ * Collapse a fact's evidence classes to the single strongest license present.
+ * No located span (`[]`) collapses to `"agent"`: the fact is agent-asserted.
+ */
+declare function deriveFactEvidenceClass(classes: readonly EvidenceClass[]): EvidenceClass;
+type EvidenceRuleId = "numeric_without_tool_evidence" | "user_attribution_without_user_span" | "echo_of_existing_content";
+interface EvidenceRuleFinding {
+    rule: EvidenceRuleId;
+    /** `demote` routes the fact to `pending_review`; `refuse` drops it. */
+    action: "demote" | "refuse";
+    reason: string;
+}
+/**
+ * Normalize a quote for echo comparison. Casefold plus whitespace collapse —
+ * the same normalization `locateQuoteOffsets` matches with, via the single
+ * shared normalizer in `whitespace.ts`.
+ */
+declare function echoQuoteKey(quote: string): string;
+/**
+ * Apply the three deterministic evidence rules to one extracted fact.
+ * Pure; findings come back in canonical rule-id order. A fact triggers:
+ *
+ *   1. `numeric_without_tool_evidence` — content carries a digit but no
+ *      `tool`/`action` span backs it. The human and the agent are both
+ *      illicit sources for numbers; demote to review rather than refuse
+ *      (the number may be real — it is just unproven).
+ *   2. `user_attribution_without_user_span` — a decision-like fact about the
+ *      user (absent `subject` reads as `"user"`, mirroring the promotion
+ *      guard's fail-closed default) with no `user` span. This is the
+ *      assertion-loop gate: an agent-asserted "the user decided X" is
+ *      refused, never promoted to active.
+ *   3. `echo_of_existing_content` — every quote backing the fact already
+ *      exists in the store index, so the "evidence" is the store reading
+ *      itself back through a tool result. Refused: not new material.
+ */
+declare function applyEvidenceClassRules(input: {
+    content: string;
+    category?: string;
+    subject?: MemorySubject;
+    evidenceClasses?: readonly EvidenceClass[];
+    /** Normalized keys (`echoQuoteKey`) of the fact's surviving quotes. */
+    quoteKeys?: readonly string[];
+    /** Normalized keys of quotes already present in the content-hash index. */
+    existingQuoteKeys?: ReadonlySet<string>;
+}): EvidenceRuleFinding[];
+
+export { EVIDENCE_CLASSES, type EvidenceClass, type EvidenceClassTurnInput, type EvidenceRuleFinding, type EvidenceRuleId, applyEvidenceClassRules, classifyEvidenceClasses, deriveFactEvidenceClass, deriveTurnEvidenceClass, echoQuoteKey, evidenceTurnInput };

package/dist/extraction-evidence-class.js

@@ -0,0 +1,113 @@
+import {
+  locateQuoteOffsets,
+  stripLeadingRolePrefix
+} from "./chunk-S45INSV3.js";
+import {
+  collapseWhitespace
+} from "./chunk-PJKTFXE2.js";
+import "./chunk-PQVCH2AE.js";
+import "./chunk-5GKPFL3S.js";
+import "./chunk-JAKIDQB2.js";
+import "./chunk-P2QRMMVQ.js";
+import "./chunk-3WCASNQZ.js";
+import "./chunk-PZ5AY32C.js";
+
+// src/extraction-evidence-class.ts
+var EVIDENCE_CLASSES = ["user", "tool", "action", "agent"];
+function deriveTurnEvidenceClass(turnInput) {
+  if (turnInput.role === "user") return "user";
+  if (turnInput.toolResult === true) return "tool";
+  if (turnInput.toolCall === true) return "action";
+  return "agent";
+}
+function evidenceTurnInput(bufferTurn) {
+  let toolResult = false;
+  let toolCall = false;
+  if (bufferTurn.parts) {
+    for (const part of bufferTurn.parts) {
+      if (part.kind === "tool_result") toolResult = true;
+      else if (part.kind === "tool_call") toolCall = true;
+    }
+  }
+  return {
+    role: bufferTurn.role,
+    content: bufferTurn.content,
+    ...toolResult ? { toolResult: true } : {},
+    ...toolCall ? { toolCall: true } : {}
+  };
+}
+function resolveSearchableQuote(quote, turns) {
+  const rawQuote = typeof quote === "string" ? quote.trim() : "";
+  if (rawQuote.length === 0) return "";
+  const stripped = stripLeadingRolePrefix(rawQuote);
+  if (rawQuote === stripped) return rawQuote;
+  const rawMatches = turns.some(
+    (t) => typeof t?.content === "string" && t.content.length > 0 && locateQuoteOffsets(rawQuote, t.content).matched
+  );
+  return rawMatches ? rawQuote : stripped;
+}
+function classifyEvidenceClasses(input) {
+  const quote = resolveSearchableQuote(input.quote, input.turns);
+  if (quote.length === 0) return [];
+  const present = /* @__PURE__ */ new Set();
+  for (const turn of input.turns) {
+    if (!turn || typeof turn.content !== "string" || turn.content.length === 0) continue;
+    if (locateQuoteOffsets(quote, turn.content).matched) {
+      present.add(deriveTurnEvidenceClass(turn));
+    }
+  }
+  return EVIDENCE_CLASSES.filter((cls) => present.has(cls));
+}
+function deriveFactEvidenceClass(classes) {
+  for (const cls of EVIDENCE_CLASSES) {
+    if (classes.includes(cls)) return cls;
+  }
+  return "agent";
+}
+var DECISION_LIKE_CATEGORIES = {
+  decision: true,
+  preference: true,
+  commitment: true
+};
+function echoQuoteKey(quote) {
+  return collapseWhitespace(quote.toLowerCase());
+}
+function applyEvidenceClassRules(input) {
+  const classes = input.evidenceClasses ?? [];
+  const findings = [];
+  if (/\d/.test(input.content) && !classes.some((c) => c === "tool" || c === "action")) {
+    findings.push({
+      rule: "numeric_without_tool_evidence",
+      action: "demote",
+      reason: "content carries a number but no tool or action evidence span backs it"
+    });
+  }
+  const decisionLike = input.category !== void 0 && DECISION_LIKE_CATEGORIES[input.category] === true;
+  const subject = input.subject ?? "user";
+  if (decisionLike && subject === "user" && !classes.includes("user")) {
+    findings.push({
+      rule: "user_attribution_without_user_span",
+      action: "refuse",
+      reason: "decision-like fact about the user with no user-role evidence span"
+    });
+  }
+  const quoteKeys = input.quoteKeys ?? [];
+  if (quoteKeys.length > 0 && input.existingQuoteKeys !== void 0 && quoteKeys.every((key) => input.existingQuoteKeys.has(key))) {
+    findings.push({
+      rule: "echo_of_existing_content",
+      action: "refuse",
+      reason: "every evidence quote already exists in the store (echo, not new material)"
+    });
+  }
+  return findings;
+}
+export {
+  EVIDENCE_CLASSES,
+  applyEvidenceClassRules,
+  classifyEvidenceClasses,
+  deriveFactEvidenceClass,
+  deriveTurnEvidenceClass,
+  echoQuoteKey,
+  evidenceTurnInput
+};
+//# sourceMappingURL=extraction-evidence-class.js.map

package/dist/extraction-evidence-class.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/extraction-evidence-class.ts"],"sourcesContent":["/**\n * Deterministic evidence provenance classes (issue #2973).\n *\n * Every extracted candidate is backed by spans located in buffered turns.\n * The CLASS of a span — whose words it records — decides what the span can\n * license (learned from distill-kura's measured self-reinforcing assertion\n * loop: an agent asserts, the extractor records, the next agent reads it back\n * as ground truth and repeats it with more confidence):\n *\n *   - `user`:   the human's own words. Licenses user attributions.\n *   - `tool`:   machine output. The ONLY licit source for numbers.\n *   - `action`: a tool was invoked. Weaker than reading its output.\n *   - `agent`:  agent prose. Licenses a first-person judgement, never a\n *               bare fact.\n *\n * Derivation is pure and total: turn role plus tool-part flags in, one class\n * out, no clock, no randomness, no I/O. The same input always yields the\n * same class. Span matching reuses `locateQuoteOffsets` /\n * `stripLeadingRolePrefix` from `provenance.ts` so class location and\n * provenance building can never disagree (issue #1575 pitfall: one matcher,\n * not two).\n *\n * The post-extraction rules (`applyEvidenceClassRules`) are deterministic\n * string/flag checks — no LLM — designed to run before the judge. Each\n * returns a stable rule id for shadow-mode telemetry. Not yet wired into the\n * extraction pipeline; see the issue's rollout plan.\n */\n\nimport { locateQuoteOffsets, stripLeadingRolePrefix } from \"./provenance.js\";\nimport type { MemorySubject } from \"./types.js\";\nimport { collapseWhitespace } from \"./whitespace.js\";\n\nexport type EvidenceClass = \"user\" | \"tool\" | \"action\" | \"agent\";\n\n/** Canonical class order: strongest license first. Fixed; never reorder. */\nexport const EVIDENCE_CLASSES: readonly EvidenceClass[] = [\"user\", \"tool\", \"action\", \"agent\"];\n\n/**\n * A buffered turn reduced to what class derivation needs. Callers map\n * `BufferTurn`s via {@link evidenceTurnInput}; `role` and the tool flags are\n * the only fields that influence the class.\n */\nexport interface EvidenceClassTurnInput {\n  content: string;\n  role: \"user\" | \"assistant\";\n  /** Turn carries machine output (a tool_result part). */\n  toolResult?: boolean;\n  /** Turn records a tool invocation (a tool_call part). */\n  toolCall?: boolean;\n}\n\n/**\n * Derive a turn's evidence class. Total and deterministic:\n *   - `role: \"user\"` → `\"user\"` (the human's words, regardless of stray\n *     part flags a connector may attach).\n *   - `role: \"assistant\"` with `toolResult` → `\"tool\"`; machine output\n *     outranks the invocation that produced it.\n *   - else with `toolCall` → `\"action\"`.\n *   - else → `\"agent\"` (agent prose — the weakest license).\n */\nexport function deriveTurnEvidenceClass(turnInput: EvidenceClassTurnInput): EvidenceClass {\n  if (turnInput.role === \"user\") return \"user\";\n  if (turnInput.toolResult === true) return \"tool\";\n  if (turnInput.toolCall === true) return \"action\";\n  return \"agent\";\n}\n\n/**\n * Map a buffered turn (structural subset of `BufferTurn`) to\n * {@link EvidenceClassTurnInput}. Tool flags derive mechanically from part\n * kinds — no content inspection, no heuristics.\n */\nexport function evidenceTurnInput(bufferTurn: {\n  role: \"user\" | \"assistant\";\n  content: string;\n  parts?: ReadonlyArray<{ kind: string }>;\n}): EvidenceClassTurnInput {\n  let toolResult = false;\n  let toolCall = false;\n  if (bufferTurn.parts) {\n    for (const part of bufferTurn.parts) {\n      if (part.kind === \"tool_result\") toolResult = true;\n      else if (part.kind === \"tool_call\") toolCall = true;\n    }\n  }\n  return {\n    role: bufferTurn.role,\n    content: bufferTurn.content,\n    ...(toolResult ? { toolResult: true } : {}),\n    ...(toolCall ? { toolCall: true } : {}),\n  };\n}\n\n/**\n * Resolve which quote `buildFactProvenance` would search for: the raw quote\n * when it matches at least one turn, else the leading prompt role label\n * stripped (mirrors the raw-preferred contract in `provenance.ts`).\n */\nfunction resolveSearchableQuote(\n  quote: string | null | undefined,\n  turns: ReadonlyArray<EvidenceClassTurnInput>,\n): string {\n  const rawQuote = typeof quote === \"string\" ? quote.trim() : \"\";\n  if (rawQuote.length === 0) return \"\";\n  const stripped = stripLeadingRolePrefix(rawQuote);\n  if (rawQuote === stripped) return rawQuote;\n  const rawMatches = turns.some(\n    (t) => typeof t?.content === \"string\" && t.content.length > 0 && locateQuoteOffsets(rawQuote, t.content).matched,\n  );\n  return rawMatches ? rawQuote : stripped;\n}\n\n/**\n * Classify the evidence backing a fact: the classes of every turn in which\n * its quote was located, in canonical `EVIDENCE_CLASSES` order regardless of\n * turn order. Deterministic — the same `(quote, turns)` pair always yields\n * the same array. An absent or unlocatable quote yields `[]` (no evidence\n * class; the extractor's own assertion is all that backs the fact).\n */\nexport function classifyEvidenceClasses(input: {\n  quote: string | null | undefined;\n  turns: ReadonlyArray<EvidenceClassTurnInput>;\n}): EvidenceClass[] {\n  const quote = resolveSearchableQuote(input.quote, input.turns);\n  if (quote.length === 0) return [];\n  const present = new Set<EvidenceClass>();\n  for (const turn of input.turns) {\n    if (!turn || typeof turn.content !== \"string\" || turn.content.length === 0) continue;\n    if (locateQuoteOffsets(quote, turn.content).matched) {\n      present.add(deriveTurnEvidenceClass(turn));\n    }\n  }\n  return EVIDENCE_CLASSES.filter((cls) => present.has(cls));\n}\n\n/**\n * Collapse a fact's evidence classes to the single strongest license present.\n * No located span (`[]`) collapses to `\"agent\"`: the fact is agent-asserted.\n */\nexport function deriveFactEvidenceClass(classes: readonly EvidenceClass[]): EvidenceClass {\n  for (const cls of EVIDENCE_CLASSES) {\n    if (classes.includes(cls)) return cls;\n  }\n  return \"agent\";\n}\n\n// ---------------------------------------------------------------------------\n// Deterministic post-extraction rules (no LLM; run before the judge)\n// ---------------------------------------------------------------------------\n\nexport type EvidenceRuleId =\n  | \"numeric_without_tool_evidence\"\n  | \"user_attribution_without_user_span\"\n  | \"echo_of_existing_content\";\n\nexport interface EvidenceRuleFinding {\n  rule: EvidenceRuleId;\n  /** `demote` routes the fact to `pending_review`; `refuse` drops it. */\n  action: \"demote\" | \"refuse\";\n  reason: string;\n}\n\n/** Categories that attribute a choice or commitment to the modeled subject. */\nconst DECISION_LIKE_CATEGORIES: Record<string, true> = {\n  decision: true,\n  preference: true,\n  commitment: true,\n};\n\n/**\n * Normalize a quote for echo comparison. Casefold plus whitespace collapse —\n * the same normalization `locateQuoteOffsets` matches with, via the single\n * shared normalizer in `whitespace.ts`.\n */\nexport function echoQuoteKey(quote: string): string {\n  return collapseWhitespace(quote.toLowerCase());\n}\n\n/**\n * Apply the three deterministic evidence rules to one extracted fact.\n * Pure; findings come back in canonical rule-id order. A fact triggers:\n *\n *   1. `numeric_without_tool_evidence` — content carries a digit but no\n *      `tool`/`action` span backs it. The human and the agent are both\n *      illicit sources for numbers; demote to review rather than refuse\n *      (the number may be real — it is just unproven).\n *   2. `user_attribution_without_user_span` — a decision-like fact about the\n *      user (absent `subject` reads as `\"user\"`, mirroring the promotion\n *      guard's fail-closed default) with no `user` span. This is the\n *      assertion-loop gate: an agent-asserted \"the user decided X\" is\n *      refused, never promoted to active.\n *   3. `echo_of_existing_content` — every quote backing the fact already\n *      exists in the store index, so the \"evidence\" is the store reading\n *      itself back through a tool result. Refused: not new material.\n */\nexport function applyEvidenceClassRules(input: {\n  content: string;\n  category?: string;\n  subject?: MemorySubject;\n  evidenceClasses?: readonly EvidenceClass[];\n  /** Normalized keys (`echoQuoteKey`) of the fact's surviving quotes. */\n  quoteKeys?: readonly string[];\n  /** Normalized keys of quotes already present in the content-hash index. */\n  existingQuoteKeys?: ReadonlySet<string>;\n}): EvidenceRuleFinding[] {\n  const classes = input.evidenceClasses ?? [];\n  const findings: EvidenceRuleFinding[] = [];\n\n  if (/\\d/.test(input.content) && !classes.some((c) => c === \"tool\" || c === \"action\")) {\n    findings.push({\n      rule: \"numeric_without_tool_evidence\",\n      action: \"demote\",\n      reason: \"content carries a number but no tool or action evidence span backs it\",\n    });\n  }\n\n  const decisionLike = input.category !== undefined && DECISION_LIKE_CATEGORIES[input.category] === true;\n  const subject = input.subject ?? \"user\";\n  if (decisionLike && subject === \"user\" && !classes.includes(\"user\")) {\n    findings.push({\n      rule: \"user_attribution_without_user_span\",\n      action: \"refuse\",\n      reason: \"decision-like fact about the user with no user-role evidence span\",\n    });\n  }\n\n  const quoteKeys = input.quoteKeys ?? [];\n  if (\n    quoteKeys.length > 0\n    && input.existingQuoteKeys !== undefined\n    && quoteKeys.every((key) => input.existingQuoteKeys!.has(key))\n  ) {\n    findings.push({\n      rule: \"echo_of_existing_content\",\n      action: \"refuse\",\n      reason: \"every evidence quote already exists in the store (echo, not new material)\",\n    });\n  }\n\n  return findings;\n}\n"],"mappings":";;;;;;;;;;;;;;;AAmCO,IAAM,mBAA6C,CAAC,QAAQ,QAAQ,UAAU,OAAO;AAyBrF,SAAS,wBAAwB,WAAkD;AACxF,MAAI,UAAU,SAAS,OAAQ,QAAO;AACtC,MAAI,UAAU,eAAe,KAAM,QAAO;AAC1C,MAAI,UAAU,aAAa,KAAM,QAAO;AACxC,SAAO;AACT;AAOO,SAAS,kBAAkB,YAIP;AACzB,MAAI,aAAa;AACjB,MAAI,WAAW;AACf,MAAI,WAAW,OAAO;AACpB,eAAW,QAAQ,WAAW,OAAO;AACnC,UAAI,KAAK,SAAS,cAAe,cAAa;AAAA,eACrC,KAAK,SAAS,YAAa,YAAW;AAAA,IACjD;AAAA,EACF;AACA,SAAO;AAAA,IACL,MAAM,WAAW;AAAA,IACjB,SAAS,WAAW;AAAA,IACpB,GAAI,aAAa,EAAE,YAAY,KAAK,IAAI,CAAC;AAAA,IACzC,GAAI,WAAW,EAAE,UAAU,KAAK,IAAI,CAAC;AAAA,EACvC;AACF;AAOA,SAAS,uBACP,OACA,OACQ;AACR,QAAM,WAAW,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI;AAC5D,MAAI,SAAS,WAAW,EAAG,QAAO;AAClC,QAAM,WAAW,uBAAuB,QAAQ;AAChD,MAAI,aAAa,SAAU,QAAO;AAClC,QAAM,aAAa,MAAM;AAAA,IACvB,CAAC,MAAM,OAAO,GAAG,YAAY,YAAY,EAAE,QAAQ,SAAS,KAAK,mBAAmB,UAAU,EAAE,OAAO,EAAE;AAAA,EAC3G;AACA,SAAO,aAAa,WAAW;AACjC;AASO,SAAS,wBAAwB,OAGpB;AAClB,QAAM,QAAQ,uBAAuB,MAAM,OAAO,MAAM,KAAK;AAC7D,MAAI,MAAM,WAAW,EAAG,QAAO,CAAC;AAChC,QAAM,UAAU,oBAAI,IAAmB;AACvC,aAAW,QAAQ,MAAM,OAAO;AAC9B,QAAI,CAAC,QAAQ,OAAO,KAAK,YAAY,YAAY,KAAK,QAAQ,WAAW,EAAG;AAC5E,QAAI,mBAAmB,OAAO,KAAK,OAAO,EAAE,SAAS;AACnD,cAAQ,IAAI,wBAAwB,IAAI,CAAC;AAAA,IAC3C;AAAA,EACF;AACA,SAAO,iBAAiB,OAAO,CAAC,QAAQ,QAAQ,IAAI,GAAG,CAAC;AAC1D;AAMO,SAAS,wBAAwB,SAAkD;AACxF,aAAW,OAAO,kBAAkB;AAClC,QAAI,QAAQ,SAAS,GAAG,EAAG,QAAO;AAAA,EACpC;AACA,SAAO;AACT;AAmBA,IAAM,2BAAiD;AAAA,EACrD,UAAU;AAAA,EACV,YAAY;AAAA,EACZ,YAAY;AACd;AAOO,SAAS,aAAa,OAAuB;AAClD,SAAO,mBAAmB,MAAM,YAAY,CAAC;AAC/C;AAmBO,SAAS,wBAAwB,OASd;AACxB,QAAM,UAAU,MAAM,mBAAmB,CAAC;AAC1C,QAAM,WAAkC,CAAC;AAEzC,MAAI,KAAK,KAAK,MAAM,OAAO,KAAK,CAAC,QAAQ,KAAK,CAAC,MAAM,MAAM,UAAU,MAAM,QAAQ,GAAG;AACpF,aAAS,KAAK;AAAA,MACZ,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AAEA,QAAM,eAAe,MAAM,aAAa,UAAa,yBAAyB,MAAM,QAAQ,MAAM;AAClG,QAAM,UAAU,MAAM,WAAW;AACjC,MAAI,gBAAgB,YAAY,UAAU,CAAC,QAAQ,SAAS,MAAM,GAAG;AACnE,aAAS,KAAK;AAAA,MACZ,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AAEA,QAAM,YAAY,MAAM,aAAa,CAAC;AACtC,MACE,UAAU,SAAS,KAChB,MAAM,sBAAsB,UAC5B,UAAU,MAAM,CAAC,QAAQ,MAAM,kBAAmB,IAAI,GAAG,CAAC,GAC7D;AACA,aAAS,KAAK;AAAA,MACZ,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AAEA,SAAO;AACT;","names":[]}

package/dist/extraction-faithfulness.d.ts

@@ -1,5 +1,5 @@
-import { F as FaithfulnessFrontmatter, P as PluginConfig, m as MemoryFrontmatter } from './types-nmhnJpxx.js';
-import { L as LocalLlmClient } from './local-llm-DdrhmecM.js';
+import { F as FaithfulnessFrontmatter, P as PluginConfig, m as MemoryFrontmatter } from './types-DgDaoY61.js';
+import { L as LocalLlmClient } from './local-llm-DH4tWtck.js';
 import { FallbackLlmClient } from './fallback-llm.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';

package/dist/extraction-judge-telemetry.d.ts

@@ -1,5 +1,5 @@
 import { JudgeVerdictKind } from './extraction-judge.js';
-import './types-nmhnJpxx.js';
+import './types-DgDaoY61.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';
@@ -16,7 +16,7 @@ import './active-context-config.js';
 import './local-llm-config.js';
 import './semantic-merge-config.js';
 import './types-continuity.js';
-import './local-llm-DdrhmecM.js';
+import './local-llm-DH4tWtck.js';
 import './model-registry.js';
 import './fallback-llm.js';
 import './fallback-llm-codex-subscription.js';

package/dist/extraction-judge-training.d.ts

@@ -1,5 +1,5 @@
 import { JudgeVerdictKind } from './extraction-judge.js';
-import './types-nmhnJpxx.js';
+import './types-DgDaoY61.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';
@@ -16,7 +16,7 @@ import './active-context-config.js';
 import './local-llm-config.js';
 import './semantic-merge-config.js';
 import './types-continuity.js';
-import './local-llm-DdrhmecM.js';
+import './local-llm-DH4tWtck.js';
 import './model-registry.js';
 import './fallback-llm.js';
 import './fallback-llm-codex-subscription.js';

package/dist/extraction-judge.d.ts

@@ -1,5 +1,5 @@
-import { a2 as ImportanceLevel, P as PluginConfig } from './types-nmhnJpxx.js';
-import { L as LocalLlmClient } from './local-llm-DdrhmecM.js';
+import { a2 as ImportanceLevel, P as PluginConfig } from './types-DgDaoY61.js';
+import { L as LocalLlmClient } from './local-llm-DH4tWtck.js';
 import { FallbackLlmClient } from './fallback-llm.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';