@remnic/core 9.69.6 → 9.69.8

package/dist/coding/export-okf-codegraph.js

@@ -5,7 +5,7 @@ import {
   rejectSymlinkPath,
   renderFrontmatter,
   writeBundleFile
-} from "../chunk-SKVSBTFQ.js";
+} from "../chunk-IWO4HEOL.js";
 import {
   ACTIVE_DECISION_STATUSES,
   CodegraphRuntimeError,
@@ -25,12 +25,12 @@ import {
   OKF_CODE_MODULE_TYPE,
   OKF_DECISION_RECORD_TYPE,
   StorageManager
-} from "../chunk-IFHT77WK.js";
+} from "../chunk-WF2WCZCR.js";
 import "../chunk-UHVXE24Y.js";
 import "../chunk-4ZWCQJNM.js";
 import "../chunk-WVGXCBOC.js";
-import "../chunk-ZET6A3OF.js";
-import "../chunk-JJAOVJ3E.js";
+import "../chunk-YHCBJULX.js";
+import "../chunk-DJZWNKFO.js";
 import "../chunk-N37X5RU7.js";
 import "../chunk-NNBZS3DY.js";
 import "../chunk-CYEPCZN5.js";
@@ -39,10 +39,10 @@ import "../chunk-YQNNHLCG.js";
 import "../chunk-W7IGLX4G.js";
 import "../chunk-6KTXE6A3.js";
 import "../chunk-GUMZC2BO.js";
-import "../chunk-7RZJWZ46.js";
-import "../chunk-A7Q43EUZ.js";
+import "../chunk-227UFSEQ.js";
 import "../chunk-ET356KSB.js";
 import "../chunk-72A4L5JJ.js";
+import "../chunk-A7Q43EUZ.js";
 import "../chunk-S2V7RUCL.js";
 import "../chunk-XXW32OL7.js";
 import "../chunk-S2HLHAZ4.js";

package/dist/coding/pre-action-gate.js

@@ -5,8 +5,8 @@ import {
   PreActionFailureGate,
   normalizeActionIntent,
   sanitizePayloadString
-} from "../chunk-JHTF22NQ.js";
-import "../chunk-P6GKRT2H.js";
+} from "../chunk-TA7UZZMW.js";
+import "../chunk-2Z3DG5CQ.js";
 import "../chunk-YCVB7X56.js";
 import "../chunk-A2IYSXDQ.js";
 import "../chunk-P77QX3ID.js";

package/dist/compounding/engine.js

@@ -1,15 +1,15 @@
 import {
   CompoundingEngine,
   defaultTierMigrationCycleBudget
-} from "../chunk-GM35IHF7.js";
+} from "../chunk-PRK4WTPU.js";
 import "../chunk-VI637ILW.js";
 import "../chunk-N4F7ZSSG.js";
-import "../chunk-IFHT77WK.js";
+import "../chunk-WF2WCZCR.js";
 import "../chunk-UHVXE24Y.js";
 import "../chunk-4ZWCQJNM.js";
 import "../chunk-WVGXCBOC.js";
-import "../chunk-ZET6A3OF.js";
-import "../chunk-JJAOVJ3E.js";
+import "../chunk-YHCBJULX.js";
+import "../chunk-DJZWNKFO.js";
 import "../chunk-N37X5RU7.js";
 import "../chunk-NNBZS3DY.js";
 import "../chunk-CYEPCZN5.js";
@@ -18,10 +18,10 @@ import "../chunk-YQNNHLCG.js";
 import "../chunk-W7IGLX4G.js";
 import "../chunk-6KTXE6A3.js";
 import "../chunk-GUMZC2BO.js";
-import "../chunk-7RZJWZ46.js";
-import "../chunk-A7Q43EUZ.js";
+import "../chunk-227UFSEQ.js";
 import "../chunk-ET356KSB.js";
 import "../chunk-72A4L5JJ.js";
+import "../chunk-A7Q43EUZ.js";
 import "../chunk-S2V7RUCL.js";
 import "../chunk-XXW32OL7.js";
 import "../chunk-S2HLHAZ4.js";

package/dist/config.js

@@ -4,12 +4,12 @@ import {
   isOpenaiApiKeyDisabled,
   parseConfig,
   resolveEnvVars
-} from "./chunk-QA6H4PIO.js";
+} from "./chunk-26JWBSWD.js";
 import "./chunk-ZKOPY4WW.js";
 import "./chunk-62OKGIJA.js";
 import "./chunk-KJUWWN3T.js";
 import "./chunk-TEZ2HTC7.js";
-import "./chunk-JHTF22NQ.js";
+import "./chunk-TA7UZZMW.js";
 import "./chunk-SN4JXNLL.js";
 import "./chunk-Z5LAYHGJ.js";
 import "./chunk-6ZMAMSHS.js";
@@ -33,7 +33,7 @@ import "./chunk-K6MV3TRQ.js";
 import "./chunk-236PXYG7.js";
 import "./chunk-ZCUTSMR2.js";
 import "./chunk-QDW3E4RD.js";
-import "./chunk-P6GKRT2H.js";
+import "./chunk-2Z3DG5CQ.js";
 import "./chunk-NXH34IPL.js";
 import "./chunk-ZIKENA2C.js";
 import "./chunk-M6L7HI7R.js";
@@ -49,11 +49,11 @@ import "./chunk-5FVVY2EB.js";
 import "./chunk-JDSVLVCG.js";
 import "./chunk-5GKPFL3S.js";
 import "./chunk-JAKIDQB2.js";
-import "./chunk-XJJYSX6F.js";
+import "./chunk-JCUG7AXZ.js";
 import "./chunk-UI3NYK34.js";
 import "./chunk-GCGJW34D.js";
-import "./chunk-AREGMX2J.js";
 import "./chunk-NBP4EX5N.js";
+import "./chunk-AREGMX2J.js";
 import "./chunk-LQWOFU6L.js";
 import "./chunk-P7FMDTKL.js";
 import "./chunk-EYIEWJNI.js";

package/dist/connectors/codex-materialize-runner.js

@@ -1,15 +1,15 @@
 import {
   runCodexMaterialize,
   runPostConsolidationMaterialize
-} from "../chunk-6KQLDPKA.js";
+} from "../chunk-S6AHHQ6C.js";
 import "../chunk-3UXOZBHV.js";
 import "../chunk-ZXBTTMGZ.js";
-import "../chunk-IFHT77WK.js";
+import "../chunk-WF2WCZCR.js";
 import "../chunk-UHVXE24Y.js";
 import "../chunk-4ZWCQJNM.js";
 import "../chunk-WVGXCBOC.js";
-import "../chunk-ZET6A3OF.js";
-import "../chunk-JJAOVJ3E.js";
+import "../chunk-YHCBJULX.js";
+import "../chunk-DJZWNKFO.js";
 import "../chunk-N37X5RU7.js";
 import "../chunk-NNBZS3DY.js";
 import "../chunk-CYEPCZN5.js";
@@ -18,10 +18,10 @@ import "../chunk-YQNNHLCG.js";
 import "../chunk-W7IGLX4G.js";
 import "../chunk-6KTXE6A3.js";
 import "../chunk-GUMZC2BO.js";
-import "../chunk-7RZJWZ46.js";
-import "../chunk-A7Q43EUZ.js";
+import "../chunk-227UFSEQ.js";
 import "../chunk-ET356KSB.js";
 import "../chunk-72A4L5JJ.js";
+import "../chunk-A7Q43EUZ.js";
 import "../chunk-S2V7RUCL.js";
 import "../chunk-XXW32OL7.js";
 import "../chunk-S2HLHAZ4.js";

package/dist/connectors/index.js

@@ -33,7 +33,7 @@ import {
 import "../chunk-EMDLM3LW.js";
 import {
   runCodexMaterialize
-} from "../chunk-6KQLDPKA.js";
+} from "../chunk-S6AHHQ6C.js";
 import "../chunk-3UXOZBHV.js";
 import {
   MATERIALIZE_VERSION,
@@ -50,12 +50,12 @@ import {
   truncateToTokenBudget,
   validateMemoryMd
 } from "../chunk-ZXBTTMGZ.js";
-import "../chunk-IFHT77WK.js";
+import "../chunk-WF2WCZCR.js";
 import "../chunk-UHVXE24Y.js";
 import "../chunk-4ZWCQJNM.js";
 import "../chunk-WVGXCBOC.js";
-import "../chunk-ZET6A3OF.js";
-import "../chunk-JJAOVJ3E.js";
+import "../chunk-YHCBJULX.js";
+import "../chunk-DJZWNKFO.js";
 import "../chunk-N37X5RU7.js";
 import "../chunk-NNBZS3DY.js";
 import "../chunk-CYEPCZN5.js";
@@ -64,10 +64,10 @@ import "../chunk-YQNNHLCG.js";
 import "../chunk-W7IGLX4G.js";
 import "../chunk-6KTXE6A3.js";
 import "../chunk-GUMZC2BO.js";
-import "../chunk-7RZJWZ46.js";
-import "../chunk-A7Q43EUZ.js";
+import "../chunk-227UFSEQ.js";
 import "../chunk-ET356KSB.js";
 import "../chunk-72A4L5JJ.js";
+import "../chunk-A7Q43EUZ.js";
 import "../chunk-S2V7RUCL.js";
 import "../chunk-XXW32OL7.js";
 import "../chunk-S2HLHAZ4.js";

package/dist/convergence-refresh.js

@@ -1,16 +1,16 @@
 import {
   refreshConvergedNamespaces
-} from "./chunk-FGV7V2N4.js";
-import "./chunk-6JYTP3JP.js";
+} from "./chunk-Y3WMJAZ3.js";
+import "./chunk-E5WTGEWX.js";
 import "./chunk-KJTKLXTH.js";
 import "./chunk-2DQ2XREU.js";
-import "./chunk-SZZGVXKC.js";
-import "./chunk-IFHT77WK.js";
+import "./chunk-ANN5VMHT.js";
+import "./chunk-WF2WCZCR.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-4ZWCQJNM.js";
 import "./chunk-WVGXCBOC.js";
-import "./chunk-ZET6A3OF.js";
-import "./chunk-JJAOVJ3E.js";
+import "./chunk-YHCBJULX.js";
+import "./chunk-DJZWNKFO.js";
 import "./chunk-N37X5RU7.js";
 import "./chunk-NNBZS3DY.js";
 import "./chunk-CYEPCZN5.js";
@@ -19,10 +19,10 @@ import "./chunk-YQNNHLCG.js";
 import "./chunk-W7IGLX4G.js";
 import "./chunk-6KTXE6A3.js";
 import "./chunk-GUMZC2BO.js";
-import "./chunk-7RZJWZ46.js";
-import "./chunk-A7Q43EUZ.js";
+import "./chunk-227UFSEQ.js";
 import "./chunk-ET356KSB.js";
 import "./chunk-72A4L5JJ.js";
+import "./chunk-A7Q43EUZ.js";
 import "./chunk-S2V7RUCL.js";
 import "./chunk-XXW32OL7.js";
 import "./chunk-S2HLHAZ4.js";

package/dist/conversation-index/backend.js

@@ -1,9 +1,9 @@
 import {
   createConversationIndexBackend
-} from "../chunk-7RZJWZ46.js";
-import "../chunk-A7Q43EUZ.js";
+} from "../chunk-227UFSEQ.js";
 import "../chunk-ET356KSB.js";
 import "../chunk-72A4L5JJ.js";
+import "../chunk-A7Q43EUZ.js";
 import "../chunk-O75CRYGF.js";
 import "../chunk-3WCASNQZ.js";
 import "../chunk-PZ5AY32C.js";

package/dist/corpus-watermark.js

@@ -9,15 +9,15 @@ import {
   computeServiceCorpusWatermarks,
   digestPartitionCensus,
   resolveCorpusNamespaceRoots
-} from "./chunk-HDEQRI2O.js";
-import "./chunk-YPNTBYEV.js";
-import "./chunk-EJJ57PTY.js";
-import "./chunk-IFHT77WK.js";
+} from "./chunk-NAZROP6I.js";
+import "./chunk-A3WMMQAH.js";
+import "./chunk-GD7D7WP2.js";
+import "./chunk-WF2WCZCR.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-4ZWCQJNM.js";
 import "./chunk-WVGXCBOC.js";
-import "./chunk-ZET6A3OF.js";
-import "./chunk-JJAOVJ3E.js";
+import "./chunk-YHCBJULX.js";
+import "./chunk-DJZWNKFO.js";
 import "./chunk-N37X5RU7.js";
 import "./chunk-NNBZS3DY.js";
 import "./chunk-CYEPCZN5.js";
@@ -26,10 +26,10 @@ import "./chunk-YQNNHLCG.js";
 import "./chunk-W7IGLX4G.js";
 import "./chunk-6KTXE6A3.js";
 import "./chunk-GUMZC2BO.js";
-import "./chunk-7RZJWZ46.js";
-import "./chunk-A7Q43EUZ.js";
+import "./chunk-227UFSEQ.js";
 import "./chunk-ET356KSB.js";
 import "./chunk-72A4L5JJ.js";
+import "./chunk-A7Q43EUZ.js";
 import "./chunk-S2V7RUCL.js";
 import "./chunk-XXW32OL7.js";
 import "./chunk-S2HLHAZ4.js";

package/dist/entity-retrieval.js

@@ -3,19 +3,19 @@ import {
   entityIndexVersion,
   entityRecentTranscriptLookbackHours,
   readRecentEntityTranscriptEntries
-} from "./chunk-C5FRCM4B.js";
+} from "./chunk-LHGIBXVX.js";
 import "./chunk-GKUA4MGB.js";
 import "./chunk-5AUY5Z5E.js";
 import "./chunk-SVH57F5Z.js";
 import "./chunk-MKYRCCSN.js";
 import "./chunk-2DQ2XREU.js";
 import "./chunk-7ZNJN5WZ.js";
-import "./chunk-IFHT77WK.js";
+import "./chunk-WF2WCZCR.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-4ZWCQJNM.js";
 import "./chunk-WVGXCBOC.js";
-import "./chunk-ZET6A3OF.js";
-import "./chunk-JJAOVJ3E.js";
+import "./chunk-YHCBJULX.js";
+import "./chunk-DJZWNKFO.js";
 import "./chunk-N37X5RU7.js";
 import "./chunk-NNBZS3DY.js";
 import "./chunk-CYEPCZN5.js";
@@ -24,10 +24,10 @@ import "./chunk-YQNNHLCG.js";
 import "./chunk-W7IGLX4G.js";
 import "./chunk-6KTXE6A3.js";
 import "./chunk-GUMZC2BO.js";
-import "./chunk-7RZJWZ46.js";
-import "./chunk-A7Q43EUZ.js";
+import "./chunk-227UFSEQ.js";
 import "./chunk-ET356KSB.js";
 import "./chunk-72A4L5JJ.js";
+import "./chunk-A7Q43EUZ.js";
 import "./chunk-S2V7RUCL.js";
 import "./chunk-XXW32OL7.js";
 import "./chunk-S2HLHAZ4.js";

package/dist/external-wiki-access.js

@@ -1,16 +1,16 @@
 import {
   externalWikiSearchOperation
-} from "./chunk-TP3N5364.js";
+} from "./chunk-M5GBTETG.js";
 import "./chunk-7T4TOGMS.js";
 import "./chunk-7YQ6ESEA.js";
-import "./chunk-XOGYSWQZ.js";
+import "./chunk-3QWF54M4.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
-import "./chunk-7DXW5V2W.js";
+import "./chunk-CTCGHNWN.js";
 import "./chunk-QJCWK2A7.js";
 import "./chunk-VQ7B2Q6M.js";
+import "./chunk-6C57JBJ3.js";
 import "./chunk-PJSK6OJM.js";
-import "./chunk-NM5EOKN7.js";
 import "./chunk-GNVZQ5JN.js";
 import "./chunk-YN2UN7N3.js";
 import "./chunk-5QZR2RA3.js";
@@ -21,7 +21,7 @@ import "./chunk-H7XKCNR6.js";
 import "./chunk-H6RSANGQ.js";
 import "./chunk-SOBJ6NEY.js";
 import "./chunk-LK4TOYPU.js";
-import "./chunk-R3YVNAJB.js";
+import "./chunk-NDE7CH6C.js";
 import "./chunk-CVILPI77.js";
 import "./chunk-2HIJHXB3.js";
 import "./chunk-AQEJKOKI.js";
@@ -29,7 +29,7 @@ import "./chunk-HTP6XRUI.js";
 import "./chunk-UD7UNYRD.js";
 import "./chunk-IISBCCWR.js";
 import "./chunk-2YA5N2BY.js";
-import "./chunk-OUKBMQ2O.js";
+import "./chunk-Z3SQEEB6.js";
 import "./chunk-EI6V5UXY.js";
 import "./chunk-J3JEW5CT.js";
 import "./chunk-5TBO7CDR.js";
@@ -42,25 +42,25 @@ import "./chunk-LTHVM4XN.js";
 import "./chunk-X5YYSAZX.js";
 import "./chunk-C37ZRXX7.js";
 import "./chunk-7ZNJN5WZ.js";
-import "./chunk-SZZGVXKC.js";
-import "./chunk-HDEQRI2O.js";
-import "./chunk-YPNTBYEV.js";
-import "./chunk-EJJ57PTY.js";
+import "./chunk-ANN5VMHT.js";
+import "./chunk-NAZROP6I.js";
+import "./chunk-A3WMMQAH.js";
+import "./chunk-GD7D7WP2.js";
 import "./chunk-UFGFMWAD.js";
-import "./chunk-6KQLDPKA.js";
+import "./chunk-S6AHHQ6C.js";
 import "./chunk-3UXOZBHV.js";
 import "./chunk-ZXBTTMGZ.js";
-import "./chunk-BIJAWZYW.js";
+import "./chunk-OLT3YTDH.js";
+import "./chunk-DEUNUKTD.js";
 import "./chunk-LXY5VVGM.js";
 import "./chunk-2LSZVONP.js";
-import "./chunk-DEUNUKTD.js";
-import "./chunk-MVH7YAWY.js";
-import "./chunk-IFHT77WK.js";
+import "./chunk-ZPN6SSWA.js";
+import "./chunk-WF2WCZCR.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-4ZWCQJNM.js";
 import "./chunk-WVGXCBOC.js";
-import "./chunk-ZET6A3OF.js";
-import "./chunk-JJAOVJ3E.js";
+import "./chunk-YHCBJULX.js";
+import "./chunk-DJZWNKFO.js";
 import "./chunk-N37X5RU7.js";
 import "./chunk-NNBZS3DY.js";
 import "./chunk-CYEPCZN5.js";
@@ -69,10 +69,10 @@ import "./chunk-YQNNHLCG.js";
 import "./chunk-W7IGLX4G.js";
 import "./chunk-6KTXE6A3.js";
 import "./chunk-GUMZC2BO.js";
-import "./chunk-7RZJWZ46.js";
-import "./chunk-A7Q43EUZ.js";
+import "./chunk-227UFSEQ.js";
 import "./chunk-ET356KSB.js";
 import "./chunk-72A4L5JJ.js";
+import "./chunk-A7Q43EUZ.js";
 import "./chunk-S2V7RUCL.js";
 import "./chunk-XXW32OL7.js";
 import "./chunk-S2HLHAZ4.js";
@@ -94,8 +94,8 @@ import "./chunk-RBOJCG4T.js";
 import "./chunk-NNZFPYYX.js";
 import "./chunk-5WITETWU.js";
 import "./chunk-6CIAGZ6X.js";
-import "./chunk-UJICQ77Y.js";
-import "./chunk-TB2MJRI6.js";
+import "./chunk-UCNQV43K.js";
+import "./chunk-J3NGQ5SC.js";
 import "./chunk-CSAKJVXW.js";
 import "./chunk-K2XUWZBM.js";
 import "./chunk-OD4FM2U7.js";
@@ -131,7 +131,7 @@ import "./chunk-K6MV3TRQ.js";
 import "./chunk-236PXYG7.js";
 import "./chunk-ZCUTSMR2.js";
 import "./chunk-QDW3E4RD.js";
-import "./chunk-P6GKRT2H.js";
+import "./chunk-2Z3DG5CQ.js";
 import "./chunk-NXH34IPL.js";
 import "./chunk-ZIKENA2C.js";
 import "./chunk-M6L7HI7R.js";
@@ -140,9 +140,9 @@ import "./chunk-6Q3ZTEF6.js";
 import "./chunk-YCVB7X56.js";
 import "./chunk-PQVCH2AE.js";
 import "./chunk-PJKTFXE2.js";
-import "./chunk-VDX2J7OX.js";
+import "./chunk-7LCGFUMB.js";
+import "./chunk-X7Y7WX73.js";
 import "./chunk-WEHSQBFR.js";
-import "./chunk-DQEMWVMT.js";
 import "./chunk-J4EB7DNW.js";
 import "./chunk-BJMBJZ2Y.js";
 import "./chunk-UKJAGEXH.js";
@@ -153,7 +153,7 @@ import "./chunk-SOAU2OE2.js";
 import "./chunk-3QL24R5Y.js";
 import "./chunk-ZN7SMKAK.js";
 import "./chunk-LNEWDF2A.js";
-import "./chunk-RJ57OOCD.js";
+import "./chunk-X66BHMAU.js";
 import "./chunk-DDX6KIXF.js";
 import "./chunk-ZRUEP4IK.js";
 import "./chunk-2OXIPF3A.js";
@@ -176,11 +176,11 @@ import "./chunk-5FVVY2EB.js";
 import "./chunk-JDSVLVCG.js";
 import "./chunk-5GKPFL3S.js";
 import "./chunk-JAKIDQB2.js";
-import "./chunk-XJJYSX6F.js";
+import "./chunk-JCUG7AXZ.js";
 import "./chunk-UI3NYK34.js";
 import "./chunk-GCGJW34D.js";
-import "./chunk-AREGMX2J.js";
 import "./chunk-NBP4EX5N.js";
+import "./chunk-AREGMX2J.js";
 import "./chunk-LQWOFU6L.js";
 import "./chunk-P7FMDTKL.js";
 import "./chunk-MRV7VSQK.js";

package/dist/extraction-span-source-hash.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Span source stamp/verify (issue #2333).
+ *
+ * Offsets index the exact normalized string sent to the model. If that string
+ * drifts before materialization, the offsets point at different characters and
+ * a wrong quote is persisted as verbatim source. The stamp lets materialization
+ * detect the drift without carrying the source text alongside it.
+ *
+ * Pure apart from hashing: no I/O, no clock, no randomness. The input text is
+ * never mutated and never appears in a result or error message.
+ */
+interface SpanSourceStamp {
+    /** Hex digest of the exact string the model was shown. */
+    hash: string;
+    /** Length of that string, so a mismatch reports which dimension drifted. */
+    length: number;
+}
+type SpanSourceCheck = {
+    ok: true;
+} | {
+    ok: false;
+    error: "length_mismatch" | "hash_mismatch";
+    expected: SpanSourceStamp;
+    actual: SpanSourceStamp;
+};
+/**
+ * Hash the exact string. No trimming, no newline normalization.
+ *
+ * The digest covers UTF-16LE code units, not UTF-8 bytes: Node's UTF-8
+ * encoder replaces an unpaired surrogate with U+FFFD before hashing, so
+ * "\ud800", "\ud801", and "\ufffd" all produce ONE digest under utf8 and
+ * drift between them would verify as unchanged. Unpaired surrogates reach
+ * real memory text through JSON escapes, and this stamp exists to catch
+ * exactly that class of silent substitution, so it hashes a lossless
+ * representation of the string instead.
+ */
+declare function stampSpanSource(text: string): SpanSourceStamp;
+/**
+ * Verify the materialized string against its stamp. Length is compared first:
+ * it is the cheaper, more diagnostic dimension. Mismatch results carry both
+ * stamps and never the text itself.
+ */
+declare function verifySpanSource(text: string, expected: SpanSourceStamp): SpanSourceCheck;
+
+export { type SpanSourceCheck, type SpanSourceStamp, stampSpanSource, verifySpanSource };

package/dist/extraction-span-source-hash.js

@@ -0,0 +1,52 @@
+import "./chunk-PZ5AY32C.js";
+
+// src/extraction-span-source-hash.ts
+import { createHash } from "crypto";
+var HASH_PATTERN = /^[0-9a-f]{64}$/;
+function requireText(text) {
+  if (typeof text !== "string") {
+    throw new TypeError(`text must be a string, got ${typeof text}`);
+  }
+}
+function requireStamp(expected) {
+  if (!Object.hasOwn(expected, "hash")) {
+    throw new RangeError("expected stamp is missing field hash");
+  }
+  if (!Object.hasOwn(expected, "length")) {
+    throw new RangeError("expected stamp is missing field length");
+  }
+  const { hash, length } = expected;
+  if (typeof hash !== "string" || !HASH_PATTERN.test(hash)) {
+    throw new RangeError(
+      "expected stamp field hash must be 64 lowercase hex characters"
+    );
+  }
+  if (!Number.isInteger(length) || length < 0) {
+    throw new RangeError(
+      "expected stamp field length must be a non-negative integer"
+    );
+  }
+}
+function stampSpanSource(text) {
+  requireText(text);
+  const hash = createHash("sha256").update(Buffer.from(text, "utf16le")).digest("hex");
+  return { hash, length: text.length };
+}
+function verifySpanSource(text, expected) {
+  requireText(text);
+  requireStamp(expected);
+  const actual = stampSpanSource(text);
+  const safeExpected = { hash: expected.hash, length: expected.length };
+  if (actual.length !== safeExpected.length) {
+    return { ok: false, error: "length_mismatch", expected: safeExpected, actual };
+  }
+  if (actual.hash !== safeExpected.hash) {
+    return { ok: false, error: "hash_mismatch", expected: safeExpected, actual };
+  }
+  return { ok: true };
+}
+export {
+  stampSpanSource,
+  verifySpanSource
+};
+//# sourceMappingURL=extraction-span-source-hash.js.map

package/dist/extraction-span-source-hash.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/extraction-span-source-hash.ts"],"sourcesContent":["/**\n * Span source stamp/verify (issue #2333).\n *\n * Offsets index the exact normalized string sent to the model. If that string\n * drifts before materialization, the offsets point at different characters and\n * a wrong quote is persisted as verbatim source. The stamp lets materialization\n * detect the drift without carrying the source text alongside it.\n *\n * Pure apart from hashing: no I/O, no clock, no randomness. The input text is\n * never mutated and never appears in a result or error message.\n */\n\nimport { createHash } from \"node:crypto\";\n\nexport interface SpanSourceStamp {\n  /** Hex digest of the exact string the model was shown. */\n  hash: string;\n  /** Length of that string, so a mismatch reports which dimension drifted. */\n  length: number;\n}\n\nexport type SpanSourceCheck =\n  | { ok: true }\n  | {\n      ok: false;\n      error: \"length_mismatch\" | \"hash_mismatch\";\n      expected: SpanSourceStamp;\n      actual: SpanSourceStamp;\n    };\n\nconst HASH_PATTERN = /^[0-9a-f]{64}$/;\n\nfunction requireText(text: string): void {\n  if (typeof text !== \"string\") {\n    throw new TypeError(`text must be a string, got ${typeof text}`);\n  }\n}\n\nfunction requireStamp(expected: SpanSourceStamp): void {\n  if (!Object.hasOwn(expected, \"hash\")) {\n    throw new RangeError(\"expected stamp is missing field hash\");\n  }\n  if (!Object.hasOwn(expected, \"length\")) {\n    throw new RangeError(\"expected stamp is missing field length\");\n  }\n  const { hash, length } = expected;\n  if (typeof hash !== \"string\" || !HASH_PATTERN.test(hash)) {\n    throw new RangeError(\n      \"expected stamp field hash must be 64 lowercase hex characters\",\n    );\n  }\n  if (!Number.isInteger(length) || length < 0) {\n    throw new RangeError(\n      \"expected stamp field length must be a non-negative integer\",\n    );\n  }\n}\n\n/**\n * Hash the exact string. No trimming, no newline normalization.\n *\n * The digest covers UTF-16LE code units, not UTF-8 bytes: Node's UTF-8\n * encoder replaces an unpaired surrogate with U+FFFD before hashing, so\n * \"\\ud800\", \"\\ud801\", and \"\\ufffd\" all produce ONE digest under utf8 and\n * drift between them would verify as unchanged. Unpaired surrogates reach\n * real memory text through JSON escapes, and this stamp exists to catch\n * exactly that class of silent substitution, so it hashes a lossless\n * representation of the string instead.\n */\nexport function stampSpanSource(text: string): SpanSourceStamp {\n  requireText(text);\n  const hash = createHash(\"sha256\").update(Buffer.from(text, \"utf16le\")).digest(\"hex\");\n  return { hash, length: text.length };\n}\n\n/**\n * Verify the materialized string against its stamp. Length is compared first:\n * it is the cheaper, more diagnostic dimension. Mismatch results carry both\n * stamps and never the text itself.\n */\nexport function verifySpanSource(\n  text: string,\n  expected: SpanSourceStamp,\n): SpanSourceCheck {\n  requireText(text);\n  requireStamp(expected);\n  const actual = stampSpanSource(text);\n  // Project the caller's stamp down to exactly the two stamp fields. Echoing\n  // the original object would re-export any extra property it carries — a\n  // `source` field holding the text defeats the whole point of a stamp, which\n  // exists so the content does not have to travel.\n  const safeExpected: SpanSourceStamp = { hash: expected.hash, length: expected.length };\n  if (actual.length !== safeExpected.length) {\n    return { ok: false, error: \"length_mismatch\", expected: safeExpected, actual };\n  }\n  if (actual.hash !== safeExpected.hash) {\n    return { ok: false, error: \"hash_mismatch\", expected: safeExpected, actual };\n  }\n  return { ok: true };\n}\n"],"mappings":";;;AAYA,SAAS,kBAAkB;AAkB3B,IAAM,eAAe;AAErB,SAAS,YAAY,MAAoB;AACvC,MAAI,OAAO,SAAS,UAAU;AAC5B,UAAM,IAAI,UAAU,8BAA8B,OAAO,IAAI,EAAE;AAAA,EACjE;AACF;AAEA,SAAS,aAAa,UAAiC;AACrD,MAAI,CAAC,OAAO,OAAO,UAAU,MAAM,GAAG;AACpC,UAAM,IAAI,WAAW,sCAAsC;AAAA,EAC7D;AACA,MAAI,CAAC,OAAO,OAAO,UAAU,QAAQ,GAAG;AACtC,UAAM,IAAI,WAAW,wCAAwC;AAAA,EAC/D;AACA,QAAM,EAAE,MAAM,OAAO,IAAI;AACzB,MAAI,OAAO,SAAS,YAAY,CAAC,aAAa,KAAK,IAAI,GAAG;AACxD,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,OAAO,UAAU,MAAM,KAAK,SAAS,GAAG;AAC3C,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;AAaO,SAAS,gBAAgB,MAA+B;AAC7D,cAAY,IAAI;AAChB,QAAM,OAAO,WAAW,QAAQ,EAAE,OAAO,OAAO,KAAK,MAAM,SAAS,CAAC,EAAE,OAAO,KAAK;AACnF,SAAO,EAAE,MAAM,QAAQ,KAAK,OAAO;AACrC;AAOO,SAAS,iBACd,MACA,UACiB;AACjB,cAAY,IAAI;AAChB,eAAa,QAAQ;AACrB,QAAM,SAAS,gBAAgB,IAAI;AAKnC,QAAM,eAAgC,EAAE,MAAM,SAAS,MAAM,QAAQ,SAAS,OAAO;AACrF,MAAI,OAAO,WAAW,aAAa,QAAQ;AACzC,WAAO,EAAE,IAAI,OAAO,OAAO,mBAAmB,UAAU,cAAc,OAAO;AAAA,EAC/E;AACA,MAAI,OAAO,SAAS,aAAa,MAAM;AACrC,WAAO,EAAE,IAAI,OAAO,OAAO,iBAAiB,UAAU,cAAc,OAAO;AAAA,EAC7E;AACA,SAAO,EAAE,IAAI,KAAK;AACpB;","names":[]}

package/dist/extraction.js

@@ -1,8 +1,8 @@
 import {
   ExtractionEngine,
   shouldEnableLocalExtractionThinking
-} from "./chunk-OMA2B7GY.js";
-import "./chunk-IE7N2YK6.js";
+} from "./chunk-G4MCAHMF.js";
+import "./chunk-4PJYD2L3.js";
 import "./chunk-AJTG3CP7.js";
 import "./chunk-54V4BZWP.js";
 import "./chunk-2CGLBUW3.js";
@@ -30,15 +30,15 @@ import "./chunk-NLE6TSLG.js";
 import "./chunk-IVKIODHO.js";
 import "./chunk-WKDFJXW5.js";
 import "./chunk-JUXOTY6J.js";
-import "./chunk-6KQLDPKA.js";
+import "./chunk-S6AHHQ6C.js";
 import "./chunk-3UXOZBHV.js";
 import "./chunk-ZXBTTMGZ.js";
-import "./chunk-IFHT77WK.js";
+import "./chunk-WF2WCZCR.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-4ZWCQJNM.js";
 import "./chunk-WVGXCBOC.js";
-import "./chunk-ZET6A3OF.js";
-import "./chunk-JJAOVJ3E.js";
+import "./chunk-YHCBJULX.js";
+import "./chunk-DJZWNKFO.js";
 import "./chunk-N37X5RU7.js";
 import "./chunk-NNBZS3DY.js";
 import "./chunk-CYEPCZN5.js";
@@ -47,10 +47,10 @@ import "./chunk-YQNNHLCG.js";
 import "./chunk-W7IGLX4G.js";
 import "./chunk-6KTXE6A3.js";
 import "./chunk-GUMZC2BO.js";
-import "./chunk-7RZJWZ46.js";
-import "./chunk-A7Q43EUZ.js";
+import "./chunk-227UFSEQ.js";
 import "./chunk-ET356KSB.js";
 import "./chunk-72A4L5JJ.js";
+import "./chunk-A7Q43EUZ.js";
 import "./chunk-S2V7RUCL.js";
 import "./chunk-XXW32OL7.js";
 import "./chunk-S2HLHAZ4.js";
@@ -72,8 +72,8 @@ import "./chunk-RBOJCG4T.js";
 import "./chunk-NNZFPYYX.js";
 import "./chunk-5WITETWU.js";
 import "./chunk-6CIAGZ6X.js";
-import "./chunk-UJICQ77Y.js";
-import "./chunk-TB2MJRI6.js";
+import "./chunk-UCNQV43K.js";
+import "./chunk-J3NGQ5SC.js";
 import "./chunk-CSAKJVXW.js";
 import "./chunk-K2XUWZBM.js";
 import "./chunk-OD4FM2U7.js";

package/dist/{graph-edge-decay-FXGELBFA.js → graph-edge-decay-DGTBFALQ.js}

@@ -5,11 +5,11 @@ import {
   readGraphEdgeDecayStatus,
   runGraphEdgeDecayMaintenance,
   runGraphEdgeDecayMaintenanceAcrossNamespaces
-} from "./chunk-OLBZ2WGG.js";
-import "./chunk-BIJAWZYW.js";
+} from "./chunk-C2JCVZWX.js";
+import "./chunk-OLT3YTDH.js";
+import "./chunk-DEUNUKTD.js";
 import "./chunk-LXY5VVGM.js";
 import "./chunk-2LSZVONP.js";
-import "./chunk-DEUNUKTD.js";
 import "./chunk-PCXDUHQH.js";
 import "./chunk-VUFL7X3H.js";
 import "./chunk-PZ5AY32C.js";
@@ -21,4 +21,4 @@ export {
   runGraphEdgeDecayMaintenance,
   runGraphEdgeDecayMaintenanceAcrossNamespaces
 };
-//# sourceMappingURL=graph-edge-decay-FXGELBFA.js.map
+//# sourceMappingURL=graph-edge-decay-DGTBFALQ.js.map

package/dist/graph-snapshot.js

@@ -4,11 +4,11 @@ import {
   buildGraphSnapshot,
   normalizeGraphSnapshotLimit,
   parseGraphSnapshotSince
-} from "./chunk-OUKBMQ2O.js";
-import "./chunk-BIJAWZYW.js";
+} from "./chunk-Z3SQEEB6.js";
+import "./chunk-OLT3YTDH.js";
+import "./chunk-DEUNUKTD.js";
 import "./chunk-LXY5VVGM.js";
 import "./chunk-2LSZVONP.js";
-import "./chunk-DEUNUKTD.js";
 import "./chunk-PZ5AY32C.js";
 export {
   GRAPH_SNAPSHOT_DEFAULT_LIMIT,