@remnic/core 9.69.55 → 9.69.57

package/dist/causal-trajectory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"causal-trajectory.d.ts","sourceRoot":"","sources":["../src/causal-trajectory.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAalE,MAAM,MAAM,gBAAgB,GACxB,WAAW,GACX,uBAAuB,GACvB,aAAa,GACb,sBAAsB,GACtB,mBAAmB,GACnB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC;AAEpB,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEjE,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,aAAa,GAAG,UAAU,CAAC;AAEtD,MAAM,WAAW,cAAc;IAC7B,kBAAkB,EAAE,CAAC,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,gBAAgB,CAAC;CAC9B;AAED,MAAM,WAAW,6BAA6B;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,CAAC,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,qBAAqB,CAAC;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,aAAa,CAAC,EAAE,6BAA6B,CAAC;IAC9C,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1D,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,mBAAmB,EAAE,KAAK,CAAC;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,sBAAsB,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAMD,wBAAgB,+BAA+B,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAK/F;AAED,wBAAsB,iCAAiC,CAAC,OAAO,EAAE;IAC/D,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC,GAAG,OAAO,CAAC,MAAM,CAAC,CAiBlB;AAED,wBAAsB,oCAAoC,CAAC,OAAO,EAAE;IAClE,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC,GAAG,OAAO,CAAC,MAAM,CAAC,CAelB;AA6CD,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,OAAO,GAAG,sBAAsB,CA2BnF;AAED,wBAAsB,sBAAsB,CAAC,OAAO,EAAE;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,MAAM,EAAE,sBAAsB,CAAC;CAChC,GAAG,OAAO,CAAC,MAAM,CAAC,CA6ElB;AAED,wBAAsB,2BAA2B,CAAC,OAAO,EAAE;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC,GAAG,OAAO,CAAC;IACV,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,YAAY,EAAE,sBAAsB,EAAE,CAAC;IACvC,mBAAmB,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7D,CAAC,CAgBD;AAED,MAAM,WAAW,gCAAgC;IAC/C,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,IAAI,CAAC;IAClC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,YAAY,EAAE,sBAAsB,EAAE,CAAC;IACvC,mBAAmB,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7D;AAED,wBAAsB,iCAAiC,CAAC,OAAO,EAAE;IAC/D,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,gCAAgC,CAAC,CA6E5C;AAED,wBAAgB,gCAAgC,CAC9C,YAAY,EAAE,sBAAsB,EAAE,EACtC,YAAY,EAAE,MAAM,EACpB,KAAK,GAAE,MAAmB,GACzB,sBAAsB,EAAE,CAO1B;AAED,wBAAsB,8BAA8B,CAAC,OAAO,EAAE;IAC5D,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,OAAO,EAAE,OAAO,CAAC;CAClB,GAAG,OAAO,CAAC,2BAA2B,CAAC,CA2BvC;AA4CD,wBAAsB,wBAAwB,CAAC,OAAO,EAAE;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,4BAA4B,EAAE,CAAC,CA+B1C"}

package/dist/causal-trajectory.js

@@ -9,7 +9,7 @@ import {
   resolveCausalTrajectoryStoreDir,
   searchCausalTrajectories,
   validateCausalTrajectoryRecord
-} from "./chunk-L63GFNKL.js";
+} from "./chunk-LMMQKZK3.js";
 import "./chunk-YCVB7X56.js";
 import "./chunk-A2IYSXDQ.js";
 import "./chunk-B6O2YLUR.js";

package/dist/census-validation.d.ts

@@ -6,14 +6,13 @@
  * thin wrapper that picks its own error type and message.
  */
 /** 64-character sha256 hex, either case; the canonical stored form is lowercase. */
-declare const SHA256_HEX_PATTERN: RegExp;
+export declare const SHA256_HEX_PATTERN: RegExp;
 /** Largest `mtimeMs` a census may carry: `new Date(ms)` must stay a valid Date. */
-declare const CENSUS_MAX_MTIME_MS = 8640000000000000;
-declare function isSha256Hex(value: unknown): value is string;
+export declare const CENSUS_MAX_MTIME_MS = 8640000000000000;
+export declare function isSha256Hex(value: unknown): value is string;
 /**
  * Fractional values are valid: `fs.stat()` reports sub-millisecond mtimes on
  * common filesystems, so this deliberately does not require an integer.
  */
-declare function isCensusMtimeMs(value: unknown): value is number;
-
-export { CENSUS_MAX_MTIME_MS, SHA256_HEX_PATTERN, isCensusMtimeMs, isSha256Hex };
+export declare function isCensusMtimeMs(value: unknown): value is number;
+//# sourceMappingURL=census-validation.d.ts.map

package/dist/census-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"census-validation.d.ts","sourceRoot":"","sources":["../src/census-validation.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,oFAAoF;AACpF,eAAO,MAAM,kBAAkB,QAAoB,CAAC;AAEpD,mFAAmF;AACnF,eAAO,MAAM,mBAAmB,mBAAwB,CAAC;AAEzD,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE3D;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE/D"}

package/dist/chat/chat-cli.d.ts

@@ -0,0 +1,38 @@
+/**
+ * `remnic chat` CLI implementation (issue #1583 PR 2).
+ *
+ * Interactive readline loop that streams assistant text and renders diffs.
+ * Supports `--daemon-url` for remote daemon over HTTP (Tailscale fleet case)
+ * and `--once` / non-TTY mode for scripting/tests
+ * (`echo "question" | remnic chat --once`).
+ *
+ * Every turn routes through the shared `processChatMessage` factory
+ * (issue #2479) so session lifecycle, transcript persistence, and
+ * pending-plan/promotion markers behave identically to the HTTP/MCP
+ * surfaces.
+ *
+ * This module is imported by cli.ts with a single thin registration line —
+ * the god-file ratchet (#1520) tracks cli.ts LOC.
+ */
+import type { EngramAccessService } from "../access-service.js";
+import type { ChatConfig } from "./chat-types.js";
+export interface ChatCliOptions {
+    service: EngramAccessService;
+    config: ChatConfig | undefined;
+    memoryDir: string;
+    principal?: string;
+    namespace?: string;
+    sessionKey?: string;
+    /** Existing chat session id to resume. */
+    sessionId?: string;
+    /** Run a single message and exit (non-TTY / scripting mode). */
+    once?: boolean;
+    /** Input text for --once mode. */
+    input?: string;
+}
+/**
+ * Run the chat CLI.  In interactive mode, enters a readline loop.  In
+ * `--once` mode, processes a single message and prints the reply to stdout.
+ */
+export declare function runChatCli(opts: ChatCliOptions): Promise<void>;
+//# sourceMappingURL=chat-cli.d.ts.map

package/dist/chat/chat-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-cli.d.ts","sourceRoot":"","sources":["../../src/chat/chat-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAkB,MAAM,iBAAiB,CAAC;AAmBlE,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,mBAAmB,CAAC;IAC7B,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0CAA0C;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,kCAAkC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA+GpE"}

package/dist/chat/chat-config.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Config parsing for the chat feature (issue #1583).
+ *
+ * Kept in a dedicated module so config.ts gains only an import + one call
+ * site — the god-file ratchet (#1520) tracks config.ts LOC.
+ */
+import type { ChatConfig } from "../types.js";
+export declare const DEFAULT_CHAT_CONFIG: ChatConfig;
+/**
+ * Parse the `chat` config section from the raw config object.
+ *
+ * ```
+ * "chat": {
+ *   "enabled": true,
+ *   "model": "ollama/llama3",
+ *   "maxToolCallsPerTurn": 8,
+ *   "sessionTtlHours": 72
+ * }
+ * ```
+ *
+ * Missing fields default to {@link DEFAULT_CHAT_CONFIG} (rule 48 — explicit
+ * opt-in; `enabled` defaults to `false`).
+ */
+export declare function parseChatConfig(raw: unknown): ChatConfig;
+//# sourceMappingURL=chat-config.d.ts.map

package/dist/chat/chat-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-config.d.ts","sourceRoot":"","sources":["../../src/chat/chat-config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAG9C,eAAO,MAAM,mBAAmB,EAAE,UAKjC,CAAC;AAaF;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,OAAO,GACX,UAAU,CAWZ"}

package/dist/chat/chat-engine.d.ts

@@ -0,0 +1,82 @@
+/**
+ * Chat engine — the bounded tool-loop agent (issue #1583).
+ *
+ * Loop: user message → LLM (with tool schema) → execute tool calls → feed
+ * results back → final reply.  Max `chat.maxToolCallsPerTurn` tool calls per
+ * user turn; budget exhausted → reply with partial results + what was
+ * skipped (rule 34 — never a silent stall).
+ *
+ * Confirmation protocol (the safety core): mutating tools
+ * (correction_apply, memory_promote) are two-phase in the engine itself,
+ * independent of the LLM's judgment.  The engine intercepts a mutation tool
+ * call, checks the session's confirmedPlanIds set; absent → the engine
+ * returns the plan preview to the user with a confirmation prompt; the
+ * user's affirmative (exact-match: yes/y/apply/confirm — deterministic, not
+ * LLM-interpreted) marks it confirmed for ONE apply.
+ */
+import type { ChatLlmAdapter, ChatSessionState, ChatTurnResult } from "./chat-types.js";
+/**
+ * The executor interface the engine calls for each tool.  Each implementation
+ * is a thin adapter over the corresponding access-service method — zero new
+ * business logic lives in the engine.
+ */
+export interface ChatToolExecutor {
+    memorySearch(query: string, maxResults?: number): Promise<string>;
+    memoryGet(memoryId: string): Promise<string>;
+    memoryTimeline(memoryId: string, limit?: number): Promise<string>;
+    recallExplain(query: string): Promise<string>;
+    entityGet(name: string): Promise<string>;
+    stats(): Promise<string>;
+    reviewList(runId?: string): Promise<string>;
+    scopeInspect(): Promise<string>;
+    /**
+     * Generate a correction plan.  Returns a JSON string with a planId and
+     * a diff preview.  When the Correction Contract (#1580) is not merged,
+     * this is a stub that returns a not-available marker.
+     */
+    correctionPlan(request: string): Promise<{
+        planId: string;
+        preview: string;
+    }>;
+    /**
+     * Apply a correction plan.  Returns a JSON result string.
+     */
+    correctionApply(planId: string): Promise<string>;
+    /**
+     * Promote a memory's tier.  Returns a JSON result string.
+     */
+    memoryPromote(memoryId: string): Promise<string>;
+}
+export interface ChatEngineOptions {
+    llm: ChatLlmAdapter;
+    executor: ChatToolExecutor;
+    maxToolCallsPerTurn: number;
+    model?: string;
+    /** Whether the Correction Contract (#1580) plan/apply is available. */
+    correctionAvailable: boolean;
+    /** Whether the scope resolver (#1494) is available. */
+    scopeInspectAvailable: boolean;
+}
+export declare function isConfirmationMessage(text: string): boolean;
+export declare class ChatEngine {
+    private readonly llm;
+    private readonly executor;
+    private readonly maxToolCallsPerTurn;
+    private readonly model?;
+    private readonly correctionAvailable;
+    private readonly scopeInspectAvailable;
+    private readonly systemPrompt;
+    private readonly toolSchemas;
+    private readonly allowedToolNames;
+    constructor(opts: ChatEngineOptions);
+    /**
+     * Process a single user message.  The session state is mutated in place
+     * (confirmedPlanIds, pendingPlanId) — the caller persists the transcript.
+     */
+    processMessage(userMessage: string, session: ChatSessionState): Promise<ChatTurnResult>;
+    /**
+     * Execute a single tool by name, delegating to the executor.
+     */
+    private executeTool;
+}
+//# sourceMappingURL=chat-engine.d.ts.map

package/dist/chat/chat-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-engine.d.ts","sourceRoot":"","sources":["../../src/chat/chat-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,KAAK,EACV,cAAc,EAEd,gBAAgB,EAGhB,cAAc,EACf,MAAM,iBAAiB,CAAC;AAYzB;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClE,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClE,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACzB,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC;;;;OAIG;IACH,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9E;;OAEG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD;;OAEG;IACH,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAClD;AAMD,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,cAAc,CAAC;IACpB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,mBAAmB,EAAE,OAAO,CAAC;IAC7B,uDAAuD;IACvD,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAmBD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAMD,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAiB;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmB;IAC5C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IAC7C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAU;IAC9C,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAU;IAChD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmB;IAC/C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAc;gBAEnC,IAAI,EAAE,iBAAiB;IAmBnC;;;OAGG;IACG,cAAc,CAClB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,cAAc,CAAC;IA0R1B;;OAEG;YACW,WAAW;CAuD1B"}

package/dist/chat/chat-executor.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Production chat-tool executor (issue #1583).
+ *
+ * Each method is a thin adapter over the corresponding EngramAccessService
+ * method — zero new business logic (rule 22).  The executor carries the
+ * session's principal/namespace/sessionKey so every tool call flows through
+ * access-service with the caller's identity (rule 42).
+ *
+ * Correction tools (correction_plan / correction_apply / memory_promote) are
+ * stubbed behind the same interface until the Correction Contract (#1580)
+ * merges.  The stub returns a clear not-available marker so the engine and
+ * surfaces degrade gracefully.
+ */
+import type { EngramAccessService } from "../access-service.js";
+import type { ChatToolExecutor } from "./chat-engine.js";
+export interface ChatExecutorBindings {
+    service: EngramAccessService;
+    principal?: string;
+    namespace?: string;
+    sessionKey?: string;
+}
+/**
+ * Create a production executor bound to the caller's identity.
+ */
+export declare function createChatExecutor(bindings: ChatExecutorBindings): ChatToolExecutor;
+//# sourceMappingURL=chat-executor.d.ts.map

package/dist/chat/chat-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-executor.d.ts","sourceRoot":"","sources":["../../src/chat/chat-executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,mBAAmB,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,gBAAgB,CAyGnF"}

package/dist/chat/chat-factory.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Chat engine factory + message processor (issue #1583).
+ *
+ * Wires the LLM adapter, executor, and engine from config + access-service.
+ * Used by all three surfaces (CLI, HTTP, MCP) so they share identical
+ * engine construction and session lifecycle.
+ */
+import type { EngramAccessService } from "../access-service.js";
+import type { FallbackLlmClient } from "../fallback-llm.js";
+import type { LocalLlmClient } from "../local-llm.js";
+import type { ChatConfig, ChatTurnResult } from "./chat-types.js";
+import { ChatEngine } from "./chat-engine.js";
+export interface ChatEngineFactoryOptions {
+    service: EngramAccessService;
+    config: ChatConfig;
+    fallbackLlm: FallbackLlmClient | null;
+    localLlm: LocalLlmClient | null;
+    principal?: string;
+    namespace?: string;
+    sessionKey?: string;
+}
+/**
+ * Create a {@link ChatEngine} from the factory options.  Returns `null` when
+ * no LLM client is available.  The engine uses the fallback LLM chain first
+ * (cloud/gateway), then the local LLM chain — both fully supported (gotcha 1).
+ */
+export declare function createChatEngine(opts: ChatEngineFactoryOptions): ChatEngine | null;
+/**
+ * Process a single chat message end-to-end.  Shared by MCP and HTTP surfaces
+ * so session lifecycle, transcript persistence, and error handling are
+ * identical across transports.
+ *
+ * Throws when chat is disabled or no LLM is available.
+ */
+export declare function processChatMessage(opts: {
+    service: EngramAccessService;
+    config: ChatConfig | undefined;
+    memoryDir: string;
+    message: string;
+    chatSessionId?: string;
+    principal?: string;
+    /** Namespace/sessionKey forwarded from the MCP request scope (Thread 17). */
+    namespace?: string;
+    sessionKey?: string;
+}): Promise<ChatTurnResult>;
+//# sourceMappingURL=chat-factory.d.ts.map

package/dist/chat/chat-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-factory.d.ts","sourceRoot":"","sources":["../../src/chat/chat-factory.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAc9C,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,mBAAmB,CAAC;IAC7B,MAAM,EAAE,UAAU,CAAC;IACnB,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACtC,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,wBAAwB,GAAG,UAAU,GAAG,IAAI,CA0BlF;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,OAAO,EAAE,mBAAmB,CAAC;IAC7B,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,cAAc,CAAC,CA0E1B"}

package/dist/chat/chat-http.d.ts

@@ -0,0 +1,83 @@
+/**
+ * Chat HTTP handler (issue #1583 PR 3; deferred items #1685 / #1687).
+ *
+ * Implements the HTTP backend for the admin console Chat pane:
+ * - POST /engram/v1/chat/message — send a message, get a reply
+ * - GET  /engram/v1/chat/events/:chatSessionId — SSE stream for replies
+ *
+ * Auth: same Bearer token as every other admin endpoint (loopback bearer).
+ * Per-session isolation: every request verifies the session's principal
+ * matches the caller (rule 42/47).
+ *
+ * Deferred items wired here (issues #1685 / #1687):
+ *  - The HTTP message handler delegates to the shared `processChatMessage`
+ *    (Thread 18) so session/engine/transcript construction is identical to
+ *    the MCP surface, instead of re-implementing it.
+ *  - Concurrent identical POSTs are coalesced by an in-flight dedup keyed on
+ *    `memoryDir + chatSessionId + principal + message` so a double-submit
+ *    processes exactly once (issue #1687 Thread 18 / #1685). The memoryDir
+ *    scopes the key per store (AGENTS.md State Scoping); an absent principal
+ *    is encoded distinctly so it can never alias a real principal string.
+ *  - The SSE stream subscribes to live transcript appends and pushes new
+ *    entries to connected clients (issue #1685 item 2 / #1687 Thread 8).
+ *    Subscription is established before the transcript snapshot is read so no
+ *    concurrent append is missed (cursor Bugbot race fix); the burst drains
+ *    the buffer only after switching to live mode so no buffered entry is
+ *    dropped. The disconnect cleanup is registered immediately and guarded
+ *    by a `closed` flag so an early close cannot leak the heartbeat or write
+ *    to an ended response.
+ *
+ * This module is imported by access-http.ts with thin route registration —
+ * the god-file ratchet (#1520) tracks access-http.ts LOC.
+ */
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { EngramAccessService } from "../access-service.js";
+import type { ChatConfig } from "./chat-types.js";
+export interface ChatHttpHandlerOptions {
+    service: EngramAccessService;
+    config: ChatConfig | undefined;
+    memoryDir: string;
+    /**
+     * Optional hook the host server supplies so the SSE handler can register
+     * its disconnect cleanup with the server's stop() set (cursor Medium
+     * review). Returns an unregister function the handler calls on normal
+     * client disconnect. When omitted, cleanup runs only on req 'close'.
+     */
+    registerSseCleanup?: (cleanup: () => void) => () => void;
+}
+/**
+ * Handle POST /engram/v1/chat/message.
+ *
+ * Body: `{ message: string, chatSessionId?: string }`
+ * Response: `{ reply: string, chatSessionId: string, pendingPlan?: {...} }`
+ *
+ * Boundary checks (chat-disabled / missing message / no-LLM) run before
+ * delegation so each maps to a precise HTTP status without spinning up a
+ * session.  Session/engine work is delegated to `processChatMessage`
+ * (Thread 18), wrapped in {@link processChatMessageDedup} for double-submit
+ * protection.
+ */
+export declare function handleChatMessage(req: IncomingMessage, res: ServerResponse, body: Record<string, unknown>, opts: ChatHttpHandlerOptions, principal?: string): Promise<void>;
+/**
+ * Handle GET /engram/v1/chat/events/:chatSessionId.
+ *
+ * SSE stream.  Sends the existing transcript as an initial burst, then keeps
+ * the connection open and **pushes new transcript entries live** as they are
+ * appended (issue #1685 item 2 / #1687 Thread 8) via the per-session pub/sub
+ * in `chat-session.ts`.  A heartbeat is emitted every 25 s so proxies do not
+ * time out.  A `retry:` directive asks reconnecting clients to wait 5 s, and
+ * because the initial burst always replays the full transcript (entries carry
+ * a strictly-monotonic `seq`), clients dedupe on reconnect — the stream is
+ * reconnect-safe.
+ *
+ * Race-free ordering (cursor Bugbot): the subscription is established BEFORE
+ * the transcript snapshot is read; entries appended concurrently during the
+ * snapshot read are buffered, then the buffer is drained AFTER switching to
+ * live mode (so an append landing between the drain and the mode switch is
+ * never dropped — cursor review). Every write goes through a `closed`-guarded
+ * helper so a disconnect during the burst cannot write to an ended response
+ * (cursor/kilo review). The disconnect cleanup is registered immediately and
+ * guarded by `closed` so an early close cannot leak the heartbeat.
+ */
+export declare function handleChatEventsSSE(req: IncomingMessage, res: ServerResponse, chatSessionId: string, opts: ChatHttpHandlerOptions, principal?: string): Promise<void>;
+//# sourceMappingURL=chat-http.d.ts.map

package/dist/chat/chat-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-http.d.ts","sourceRoot":"","sources":["../../src/chat/chat-http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAGjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAuC,MAAM,iBAAiB,CAAC;AAQvF,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,mBAAmB,CAAC;IAC7B,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;CAC1D;AAuED;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,IAAI,EAAE,sBAAsB,EAC5B,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CA4Ef;AAMD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,sBAAsB,EAC5B,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAyHf"}

package/dist/chat/chat-llm.d.ts

@@ -0,0 +1,77 @@
+/**
+ * LLM adapter for the chat engine (issue #1583).
+ *
+ * The adapter exposes the production {@link ChatLlmAdapter} interface so the
+ * engine is decoupled from the routing chain.  Two implementations:
+ *
+ * - {@link createProductionChatLlmAdapter}: wraps the existing
+ *   FallbackLlmClient / LocalLlmClient routing chain so local Ollama/vLLM
+ *   models are fully supported (gotcha 1).  Memory chat must not require
+ *   cloud.
+ *
+ * - {@link StubChatLlmAdapter}: test-only adapter that drives scripted
+ *   tool-call sequences.  PR 1 tests use this to verify the engine loop,
+ *   confirmation protocol, budget exhaustion, and citation guard without
+ *   real LLM calls.
+ */
+import type { ChatLlmAdapter, ChatLlmMessage, ChatLlmResponse, ChatLlmToolCall, ChatToolSchema } from "./chat-types.js";
+interface LlmLikeClient {
+    chatCompletion(messages: Array<{
+        role: string;
+        content: string;
+    }>, options?: {
+        model?: string;
+        signal?: AbortSignal;
+        [k: string]: unknown;
+    }): Promise<{
+        content: string;
+        modelUsed?: string;
+    } | null>;
+}
+/**
+ * Create a production LLM adapter from an existing routing-chain client
+ * (FallbackLlmClient or LocalLlmClient).
+ *
+ * The adapter maps the chat engine's message format to the client's
+ * chatCompletion signature, injects the tool schema as a system-level
+ * instruction (OpenAI function-calling compat), and parses tool-call requests
+ * from the model's response.
+ */
+export declare function createProductionChatLlmAdapter(client: LlmLikeClient): ChatLlmAdapter;
+/**
+ * Parse a tool-call JSON block from the model's response content.
+ * Tolerates leading/trailing text and code fences.
+ */
+export declare function parseToolCalls(content: string): ChatLlmToolCall[];
+/**
+ * A scripted step in the stub adapter.  Each step is consumed in order for
+ * each LLM call; the last step repeats if the engine loops beyond the
+ * script length.
+ */
+export interface StubLlmStep {
+    content?: string;
+    toolCalls?: Array<{
+        name: string;
+        arguments: Record<string, unknown>;
+    }>;
+}
+export declare class StubChatLlmAdapter implements ChatLlmAdapter {
+    private steps;
+    private callIndex;
+    constructor(steps: StubLlmStep[]);
+    complete(_messages: ChatLlmMessage[], _options: {
+        tools: ChatToolSchema[];
+        model?: string;
+        signal?: AbortSignal;
+    }): Promise<ChatLlmResponse | null>;
+    /** Reset the call index (for test reuse). */
+    reset(): void;
+}
+/**
+ * A stub adapter that always returns null (simulates LLM outage, rule 13).
+ */
+export declare class NullChatLlmAdapter implements ChatLlmAdapter {
+    complete(): Promise<null>;
+}
+export {};
+//# sourceMappingURL=chat-llm.d.ts.map

package/dist/chat/chat-llm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-llm.d.ts","sourceRoot":"","sources":["../../src/chat/chat-llm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAOxH,UAAU,aAAa;IACrB,cAAc,CACZ,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,EAClD,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,GACvE,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;CAC5D;AAED;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,aAAa,GACpB,cAAc,CAmChB;AA+BD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,EAAE,CA0CjE;AA0BD;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;CACzE;AAED,qBAAa,kBAAmB,YAAW,cAAc;IACvD,OAAO,CAAC,KAAK,CAAgB;IAC7B,OAAO,CAAC,SAAS,CAAK;gBAEV,KAAK,EAAE,WAAW,EAAE;IAI1B,QAAQ,CACZ,SAAS,EAAE,cAAc,EAAE,EAC3B,QAAQ,EAAE;QAAE,KAAK,EAAE,cAAc,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC1E,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAclC,6CAA6C;IAC7C,KAAK,IAAI,IAAI;CAGd;AAED;;GAEG;AACH,qBAAa,kBAAmB,YAAW,cAAc;IACjD,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAGhC"}

package/dist/chat/chat-session.d.ts

@@ -0,0 +1,118 @@
+/**
+ * Chat session state — transcript + pending-plan pointer persisted under
+ * `<memoryDir>/state/chat/<chatSessionId>.jsonl` (issue #1583).
+ *
+ * Atomic appends (rule 54).  Chat transcripts are excluded from memory
+ * extraction — the work-task exclusion tag is stamped on creation so talking
+ * *about* memories does not create memories of the conversation itself.
+ */
+import type { ChatSessionState, ChatTranscriptEntry } from "./chat-types.js";
+/**
+ * Resolve the chat-session directory for a given memory dir.
+ */
+export declare function chatSessionDir(memoryDir: string): string;
+/**
+ * Resolve the transcript file path for a chat session id.
+ */
+/**
+ * Validate a chat session id is safe for filesystem use (no path traversal).
+ * Accepts UUIDs and alphanumeric+dash identifiers only (P1 — path safety).
+ */
+export declare function isSafeChatSessionId(chatSessionId: string): boolean;
+export declare function chatSessionFile(memoryDir: string, chatSessionId: string): string;
+/**
+ * Test-only: reset the module-level transcript seq counter so a regression
+ * test can deterministically simulate a fresh process restart (issue #1718).
+ */
+export declare function __resetTranscriptSeqForTest(): void;
+/**
+ * Create a new chat session.  The session binds the caller's principal and
+ * sessionKey at creation (rule 42); every tool call flows through
+ * access-service with that identity.
+ */
+export declare function createChatSession(memoryDir: string, opts: {
+    principal?: string;
+    sessionKey?: string;
+    namespace?: string;
+}): Promise<ChatSessionState>;
+/**
+ * Load a chat session from disk, including its full transcript.
+ * Returns `null` if the session file does not exist.
+ *
+ * Per-session isolation: the caller MUST verify that the loaded session's
+ * principal matches the requesting principal before operating on it.
+ */
+export declare function loadChatSession(memoryDir: string, chatSessionId: string): Promise<ChatSessionState | null>;
+/**
+ * Structural shape {@link enforceChatSessionNamespace} reads from a service —
+ * `memoryDir` to locate the session file and `configRef.defaultNamespace` to
+ * resolve the effective namespace. Kept structural so the chat module need not
+ * depend on the full {@link EngramAccessService} type.
+ */
+export interface ChatSessionNamespaceHost {
+    memoryDir: string;
+    configRef?: {
+        defaultNamespace?: string;
+    } | undefined;
+}
+/**
+ * The shared effective-namespace chokepoint for a resumed chat session
+ * (issue #1850 round 6). A chat session is an id-loaded record whose stored
+ * namespace bypassed the per-token allow-list; BOTH the HTTP dispatch
+ * (`/engram/v1/chat/message`, `/engram/v1/chat/events/:id`) and the MCP
+ * dispatch (`memory_chat` → processChatMessage) call this ONE function so
+ * neither surface can dodge it. Loads the session and runs
+ * `enforceNamespaceAllowList` (which maps undefined → the server default).
+ * FAIL CLOSED: a scoped token whose allow-list does not cover the session's
+ * effective namespace is rejected; no-op for unrestricted/legacy tokens. A
+ * missing session is left to the downstream handler (404 /
+ * chat_session_not_found) — only FOUND sessions carry a namespace to gate.
+ */
+export declare function enforceChatSessionNamespace(service: ChatSessionNamespaceHost, chatSessionId: string): Promise<void>;
+/**
+ * Append a transcript entry to the session file (atomic append, rule 54).
+ *
+ * After the append resolves, in-process subscribers (open SSE connections —
+ * issue #1687) are notified synchronously so live clients receive the new
+ * entry without polling.  Listener errors are swallowed so a misbehaving
+ * subscriber can never break a transcript append (rule 54 — atomic + safe).
+ */
+export declare function appendTranscriptEntry(memoryDir: string, chatSessionId: string, entry: Omit<ChatTranscriptEntry, "seq" | "ts">): Promise<ChatTranscriptEntry>;
+/**
+ * Subscribe to live transcript entries for a chat session in a given memory
+ * store.  Returns an unsubscribe function that removes the listener and
+ * prunes the session's set when it becomes empty.  Used by the SSE handler
+ * to push new user/assistant entries to connected clients (issue #1687).
+ *
+ * The `memoryDir` scopes the subscription to its store so a process hosting
+ * two Remnic services cannot cross-deliver transcript entries (AGENTS.md
+ * State Scoping).
+ */
+export declare function subscribeChatTranscript(memoryDir: string, chatSessionId: string, listener: (entry: ChatTranscriptEntry) => void): () => void;
+/**
+ * Append a pending-plan marker so a later turn can confirm the plan
+ * (append-only state — loadChatSession scans for the latest unresolved one).
+ */
+export declare function markPendingPlan(memoryDir: string, chatSessionId: string, planId: string): Promise<void>;
+/**
+ * Append a pending-promotion marker so a later turn can confirm the promotion.
+ */
+export declare function markPendingPromotion(memoryDir: string, chatSessionId: string, memoryId: string): Promise<void>;
+/**
+ * Record that a pending plan was applied or cancelled.
+ */
+export declare function markPlanResolved(memoryDir: string, chatSessionId: string, planId: string): Promise<void>;
+/**
+ * Record that a pending promotion was applied or cancelled.
+ */
+export declare function markPromotionResolved(memoryDir: string, chatSessionId: string, memoryId: string): Promise<void>;
+/**
+ * Clean up expired chat sessions based on TTL.
+ */
+export declare function cleanupExpiredChatSessions(memoryDir: string, ttlHours: number): Promise<number>;
+/**
+ * Verify that a session belongs to the given principal (rule 42/47 —
+ * per-session isolation, no cross-visibility).
+ */
+export declare function sessionBelongsToPrincipal(session: ChatSessionState, principal?: string): boolean;
+//# sourceMappingURL=chat-session.d.ts.map

package/dist/chat/chat-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-session.d.ts","sourceRoot":"","sources":["../../src/chat/chat-session.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAQH,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAI7E;;GAEG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;GAEG;AACH;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAElE;AAED,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAKhF;AAwBD;;;GAGG;AACH,wBAAgB,2BAA2B,IAAI,IAAI,CAElD;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GACpE,OAAO,CAAC,gBAAgB,CAAC,CAgC3B;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAsFlC;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;CACvD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,wBAAwB,EACjC,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CAIf;AAED;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,IAAI,CAAC,mBAAmB,EAAE,KAAK,GAAG,IAAI,CAAC,GAC7C,OAAO,CAAC,mBAAmB,CAAC,CAiD9B;AAiCD;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,GAC7C,MAAM,IAAI,CAgBZ;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAKf;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAKf;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAKf;AAED;;GAEG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAKf;AAED;;GAEG;AACH,wBAAsB,0BAA0B,CAC9C,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,CAsCjB;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,gBAAgB,EACzB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAKT"}

package/dist/chat/chat-system-prompt.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Sealed system prompt for the chat engine (issue #1583).
+ *
+ * The prompt encodes the core rules that every turn enforces:
+ * - Always cite memory ids/handles and source quotes when asserting what's
+ *   remembered.
+ * - NEVER apply a mutation without explicit user confirmation in the
+ *   conversation.
+ * - Render plans as the diff the Correction Contract returns.
+ * - Prefer "I found nothing" over speculation.
+ *
+ * The engine supplements the prompt with a tool-citation guard at runtime
+ * (the model must ground assertions in tool results from the current turn).
+ */
+/**
+ * Build the system prompt for the chat engine.  Parameterised by whether the
+ * correction (mutation) tools are available — when #1580 is not yet merged,
+ * correction_plan/apply are omitted and the prompt reflects that.
+ */
+export declare function buildChatSystemPrompt(opts: {
+    correctionAvailable: boolean;
+}): string;
+//# sourceMappingURL=chat-system-prompt.d.ts.map

package/dist/chat/chat-system-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-system-prompt.d.ts","sourceRoot":"","sources":["../../src/chat/chat-system-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,mBAAmB,EAAE,OAAO,CAAC;CAC9B,GAAG,MAAM,CAqDT"}

package/dist/chat/chat-tools.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Chat tools — the ONLY tools available to the chat engine (issue #1583).
+ *
+ * Each tool is a thin adapter over an existing access-service method (rule 22
+ * — zero new business logic here).  Mutating tools (correction_apply,
+ * memory_promote) are marked and go through the confirmation protocol in the
+ * engine before reaching the executor.
+ */
+import type { ChatToolSchema } from "./chat-types.js";
+export type ChatToolName = "memory_search" | "memory_get" | "memory_timeline" | "recall_explain" | "entity_get" | "stats" | "correction_plan" | "correction_apply" | "memory_promote" | "review_list" | "scope_inspect";
+/** Tools that mutate memory — require confirmation before execution. */
+export declare const MUTATING_TOOLS: ReadonlySet<ChatToolName>;
+/**
+ * Build the tool schema list for the LLM.  The correction tools are only
+ * included when the Correction Contract (#1580) is available; scope_inspect
+ * is only included when the scope resolver (#1494) is available.
+ */
+export declare function buildChatToolSchemas(opts: {
+    correctionAvailable: boolean;
+    scopeInspectAvailable: boolean;
+}): ChatToolSchema[];
+//# sourceMappingURL=chat-tools.d.ts.map

package/dist/chat/chat-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-tools.d.ts","sourceRoot":"","sources":["../../src/chat/chat-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAMtD,MAAM,MAAM,YAAY,GACpB,eAAe,GACf,YAAY,GACZ,iBAAiB,GACjB,gBAAgB,GAChB,YAAY,GACZ,OAAO,GACP,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,GAChB,aAAa,GACb,eAAe,CAAC;AAEpB,wEAAwE;AACxE,eAAO,MAAM,cAAc,EAAE,WAAW,CAAC,YAAY,CAGnD,CAAC;AA6MH;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,qBAAqB,EAAE,OAAO,CAAC;CAChC,GAAG,cAAc,EAAE,CASnB"}