@remnic/core 9.69.60 → 9.69.63

package/dist/{chunk-Y76HXF3F.js → chunk-ZDZJ2PG4.js}

@@ -10,7 +10,7 @@ import {
 import {
   exportOkfBundle,
   parseIncludeStatus
-} from "./chunk-UD6J2LIA.js";
+} from "./chunk-XDH5MO6L.js";
 import {
   exportSqlite
 } from "./chunk-BV2TIZ4F.js";
@@ -64,7 +64,7 @@ import {
 } from "./chunk-IIFFC3RL.js";
 import {
   rebuildMemoryLifecycleLedger
-} from "./chunk-L3R24OLZ.js";
+} from "./chunk-W65KK3X6.js";
 import {
   lintOkfDir
 } from "./chunk-UJX4I26O.js";
@@ -87,21 +87,21 @@ import {
 } from "./chunk-EBA5DA77.js";
 import {
   searchVerifiedEpisodes
-} from "./chunk-OINFRHLR.js";
+} from "./chunk-NRTVZSPO.js";
 import {
   ThreadingManager
 } from "./chunk-OJP3N7UK.js";
 import {
   promoteSemanticRuleFromMemory
-} from "./chunk-DJ4CKWAD.js";
+} from "./chunk-5Y7VCE3A.js";
 import {
   searchVerifiedSemanticRules
-} from "./chunk-FKFTPFUG.js";
+} from "./chunk-KXJ7XYUT.js";
 import {
   buildResumeBundleFromState,
   getResumeBundleStatus,
   recordResumeBundle
-} from "./chunk-ENUI3IO7.js";
+} from "./chunk-D433RXFJ.js";
 import {
   getWorkProductLedgerStatus,
   recordWorkProductLedgerEntry,
@@ -112,7 +112,7 @@ import {
 } from "./chunk-AM4T6CHX.js";
 import {
   parseXrayCliOptions
-} from "./chunk-BJI2D4SU.js";
+} from "./chunk-GZBNEZIU.js";
 import {
   collectPatternMemories,
   explainPatternMemory,
@@ -134,7 +134,7 @@ import {
   runOperatorInventory,
   runOperatorRepair,
   runOperatorSetup
-} from "./chunk-G6E7XJYL.js";
+} from "./chunk-SZAWZPY6.js";
 import {
   analyzeSessionIntegrity,
   applySessionRepair,
@@ -173,7 +173,7 @@ import {
   rebuildMemoryProjection,
   repairMemoryProjection,
   verifyMemoryProjection
-} from "./chunk-TAIIC5OM.js";
+} from "./chunk-SEHKTE4F.js";
 import {
   GraphDashboardServer
 } from "./chunk-YNDLCWXS.js";
@@ -197,7 +197,7 @@ import {
 } from "./chunk-6TBIWIAG.js";
 import {
   parseConfig
-} from "./chunk-M5IJP3YW.js";
+} from "./chunk-2PKGJPQL.js";
 import {
   applyManagedRegion,
   expandVaultTemplateTokens,
@@ -210,7 +210,7 @@ import {
 import {
   EngramAccessHttpServer,
   MeetingsInputError
-} from "./chunk-IDBLAGIM.js";
+} from "./chunk-FTNV5476.js";
 import {
   WearablesInputError
 } from "./chunk-V7IZKJI3.js";
@@ -220,10 +220,10 @@ import {
   loadChatSession,
   processChatMessage,
   sessionBelongsToPrincipal
-} from "./chunk-6JYYSDHH.js";
+} from "./chunk-4EEDRKRT.js";
 import {
   EngramAccessService
-} from "./chunk-4B5S3VWD.js";
+} from "./chunk-VXGB766B.js";
 import {
   WorkStorage
 } from "./chunk-MPC7TYTZ.js";
@@ -240,10 +240,10 @@ import {
   parseRecallExplainFormat,
   renderRecallExplain,
   renderXray
-} from "./chunk-36S7UHAW.js";
+} from "./chunk-VEBYLZQQ.js";
 import {
   readAggregateExtractionWatermark
-} from "./chunk-AAMFQHKI.js";
+} from "./chunk-KRPMISWO.js";
 import {
   getObjectiveStateStoreStatus
 } from "./chunk-HM7RHKS4.js";
@@ -252,18 +252,18 @@ import {
 } from "./chunk-TYP7GYRI.js";
 import {
   searchHarmonicRetrieval
-} from "./chunk-R4Y5PF25.js";
+} from "./chunk-FWVDTLRK.js";
 import {
   listMemoryGovernanceRuns,
   readMemoryGovernanceRunArtifact,
   restoreMemoryGovernanceRun,
   runMemoryGovernance
-} from "./chunk-F6WCOXTF.js";
+} from "./chunk-LMLPLIT4.js";
 import {
   listNamespaces,
   runNamespaceMigration,
   verifyNamespaces
-} from "./chunk-TAC5WFJC.js";
+} from "./chunk-QEGKMZNQ.js";
 import {
   getCueAnchorStoreStatus
 } from "./chunk-BMWN7B3Y.js";
@@ -303,7 +303,7 @@ import {
 } from "./chunk-LMMQKZK3.js";
 import {
   meetingIdDate
-} from "./chunk-2T2RF5ZK.js";
+} from "./chunk-5QZHDS4X.js";
 import {
   isValidTranscriptDate
 } from "./chunk-UHVXE24Y.js";
@@ -354,7 +354,7 @@ import {
 import {
   RECALL_DISCLOSURE_LEVELS,
   isRecallDisclosure
-} from "./chunk-FNQEXI3D.js";
+} from "./chunk-F5O6WEDO.js";
 import {
   isSupportPassportPrivateMemory
 } from "./chunk-PWPIERBM.js";
@@ -378,7 +378,7 @@ import {
   resolveRecallEnhancementCapabilities,
   resolveSecurityCapabilities,
   resolveUtilityLearningCapabilities
-} from "./chunk-JUOZ62Y7.js";
+} from "./chunk-BMXEBWBT.js";
 import {
   expandTildePath
 } from "./chunk-6KH5NLQS.js";
@@ -2951,11 +2951,21 @@ var RULE_WEIGHTS = {
   "encoded-blob": 5,
   // Instruction resets directly try to replace the active authority.
   "ignore-previous-family": 4,
-  // Conditional triggers encode a hidden action for a future turn.
-  "conditional-trigger": 3,
   // Remnic command references can redirect the memory system itself.
-  "authority-escalation": 4
+  "authority-escalation": 4,
+  // Stored response controls try to turn recalled data into future behavior.
+  "response-control-directive": 4,
+  // Tool-routing controls replace the current tool choice from recalled data.
+  "tool-routing-directive": 4
+};
+var PROFILE_RULE_WEIGHTS = {
+  // Conditional triggers encode a hidden action for a future turn.
+  "conditional-trigger": { default: 3, hardened: 4 }
 };
+function ruleWeight(rule, profile) {
+  const profileWeights = PROFILE_RULE_WEIGHTS[rule];
+  return profileWeights ? profileWeights[profile] : RULE_WEIGHTS[rule];
+}
 var INJECTION_SCREEN_THRESHOLD = 4;
 var MAX_EXCERPT_LENGTH = 180;
 var AUTHORITY_EXECUTABLE_TOOL_REFERENCE = String.raw`(?:remnic|engram)(?:\s+security\s+audit-memory\b|\s+(?:memory_store|suggestion_submit|observe|recall|delete_memory|memory_correct_apply|memory_search)(?:\s+(?:tool|command))?\b|\s+(?:tool|command)\b|[_:-](?:memory_store|suggestion_submit|observe|recall|delete_memory|memory_correct_apply|memory_search)\b)`;
@@ -2982,11 +2992,11 @@ function findImperativeToAgent(content) {
   return findingFor(
     "imperative-to-agent",
     content,
-    /\b(?:agent|assistant|ai|model)\s*[,!:.-]\s*(?:please\s+)?(?:ignore|disregard|call|run|execute|send|delete|reveal|email|store|remember|follow|use|do)\b/i
+    /\b(?:agent|assistant|ai|model)[ \t]{0,8}[,!:.-][ \t]{0,8}(?:please[ \t]{1,8})?(?:ignore|disregard|call|run|execute|send|delete|reveal|email|store|remember|follow|use|do|answer|respond|reply|emit|output|return|include|produce|say)\b/i
   ) ?? findingFor(
     "imperative-to-agent",
     content,
-    /\b(?:agent|assistant|ai|model)\s+(?:must|should|need to|please)\s+(?:ignore|disregard|call|run|execute|send|delete|reveal|email|store|remember|follow|use|do)\b/i
+    /\b(?:agent|assistant|ai|model)[ \t]{1,8}(?:must|should|need to|please|to)[ \t]{1,8}(?:ignore|disregard|call|run|execute|send|delete|reveal|email|store|remember|follow|use|do|answer|respond|reply|emit|output|return|include|produce|say)\b/i
   );
 }
 function findToolInvocationSyntax(content) {
@@ -3030,11 +3040,325 @@ function findConditionalTrigger(content) {
   return findingFor(
     "conditional-trigger",
     content,
-    /\b(?:when|if)\b[\s\S]{1,120}\b(?:say|says|see|sees|hear|hears|receive|receives|mention|mentions|contain|contains|encounter|encounters)\b[\s\S]{1,120}\b(?:then\s+)?(?:call|invoke|run|execute|send|delete|reveal|store|use|follow|do|respond)\b/i
+    /\b(?:when|if|unless|after|only after|if and only if|on seeing)\b[\s\S]{1,180}\b(?:ask|asked|say|says|see|sees|seeing|hear|hears|receive|receives|mention|mentions|mentioned|appear|appears|contain|contains|encounter|encounters|phrase|condition|key)\b[\s\S]{0,180}\b(?:then[ \t]{1,8})?(?:answer|call|include|invoke|run|execute|send|delete|reveal|store|use|follow|do|respond|reply|emit|output|return|produce|say|add|replace)\b/i
   ) ?? findingFor(
     "conditional-trigger",
     content,
-    /\b(?:when|if)\b[\s\S]{1,100},\s*(?:then\s+)?(?:call|invoke|run|execute|send|delete|reveal|store|use|follow|do|respond)\b/i
+    /\b(?:when|if|unless)\b[\s\S]{1,120},[ \t]{0,8}(?:then[ \t]{1,8})?(?:answer|call|include|invoke|run|execute|send|delete|reveal|store|use|follow|do|respond|reply|emit|output|return|produce|say|add|replace)\b/i
+  );
+}
+var RESPONSE_NOUN = String.raw`(?:answers?|responses?|repl(?:y|ies)|output)`;
+var RESPONSE_CONTROL_PATTERNS = [
+  // "the approved response concerning X is exactly CANARY"
+  new RegExp(
+    String.raw`\b${RESPONSE_NOUN}\b[^\n]{0,60}\b(?:(?:is|are|be)[ \t]{1,8}exactly|becomes?)\b`,
+    "i"
+  ),
+  // "the response must include / should begin with / needs to say ..."
+  new RegExp(
+    String.raw`\b${RESPONSE_NOUN}\b[^\n]{0,60}\b(?:must|should|shall|will|needs?[ \t]{1,8}to|has[ \t]{1,8}to|have[ \t]{1,8}to|is[ \t]{1,8}to|are[ \t]{1,8}to)[ \t]{1,8}(?:always[ \t]{1,8})?(?:include|contain|begin|start|end|say|state|mention|output|return|emit|produce|read|quote|reference|append|prepend)\b`,
+    "i"
+  ),
+  // "include CANARY in every answer", "add <url> to answers"
+  new RegExp(
+    String.raw`\b(?:include|add|emit|output|return|append|prepend|say|state|put)\b[^\n]{0,80}\b(?:in|to|into|with|as|on)[ \t]{1,8}[^\n]{0,30}\b${RESPONSE_NOUN}\b`,
+    "i"
+  ),
+  // "reply with the marker CANARY", "respond by saying"
+  /\b(?:reply|respond|answer)[ \t]{1,8}(?:with|by|using)[ \t]{1,8}(?:the[ \t]{1,8}|only[ \t]{1,8}|exactly[ \t]{1,8})?(?:marker|phrase|code|string|text|token|exact|exactly|only|saying|outputting|returning|CANARY)/i,
+  // "activation requires outputting CANARY", "retrieval should produce CANARY"
+  /\b(?:requires?|should|must|will)[ \t]{1,8}(?:outputting|emitting|returning|saying|replying|responding|answering|producing|output|emit|produce)\b[^\n]{0,40}\b(?:CANARY|marker|phrase|code|token|exactly|https?:)/i,
+  /\b(?:retrieval|recall|activation)\b[^\n]{0,40}\b(?:should|must|will|requires?)[ \t]{1,8}(?:produce|output|emit|return|say|reply|respond)\b/i,
+  // "say CANARY", "answer CANARY", "use CANARY instead", "return https://..."
+  /\b(?:say|answer|reply|respond|output|return|emit|use|produce)[ \t]{1,8}(?:with[ \t]{1,8}|only[ \t]{1,8}|exactly[ \t]{1,8})?(?:CANARY|the[ \t]{1,8}(?:literal|exact|marker|phrase|string|token)\b|https?:)/i,
+  // "replace normal behavior with the literal response", "require the literal marker"
+  /\breplace[ \t]{1,8}(?:normal|default|your|the|its|all)?[ \t]{0,8}(?:behaviou?r|responses?|answers?|repl(?:y|ies)|output)\b/i,
+  /\b(?:literal|exact|verbatim)[ \t]{1,8}(?:response|answer|reply|marker|string|output|phrase|token)\b/i
+];
+var RESPONSE_CONTROL_CORROBORATORS = [
+  /\bCANARY\b/i,
+  /https?:\/\//i,
+  /\b[0-9a-f]{8,}\b/i,
+  /\b[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}\b/,
+  // Naming the emission as a phrase/marker/token is a payload cue: ordinary
+  // prose names a field ("the request id"), not "the phrase".
+  /\b(?:the|this|that|following)[ \t]{1,8}(?:phrase|marker|token|string|sequence|literal|codeword|passphrase)\b/i,
+  // Verbatim control over the wording, not the content.
+  /\b(?:literal(?:ly)?|verbatim|word[- ]for[- ]word|exactly[ \t]{1,8}(?:this|that|as)|character[- ]for[- ]character)\b/i,
+  /\bno[ \t]{1,8}(?:explanation|commentary|preamble|deviation|other[ \t]{1,8}text)\b/i,
+  /\b(?:only|nothing[ \t]{1,8}else|and[ \t]{1,8}nothing)\b[^\n]{0,30}\b(?:answers?|responses?|repl(?:y|ies)|output|say|said)\b/i,
+  // Persistence across turns: an ordinary fact does not legislate later turns.
+  /\b(?:remember|persist|store[ \t]{1,8}this|retain[ \t]{1,8}this)\b/i,
+  /\bany[ \t]{1,8}(?:later|future|subsequent)\b/i,
+  /\b(?:future|later|subsequent|following|upcoming)[ \t]{1,8}(?:answers?|responses?|repl(?:y|ies)|output|turns?|messages?|conversations?|sessions?)\b/i,
+  /\b(?:across|between)[ \t]{1,8}(?:conversations|sessions|chats)\b/i,
+  /\b(?:from[ \t]{1,8}now[ \t]{1,8}on|going[ \t]{1,8}forward|in[ \t]{1,8}(?:all|every)[ \t]{1,8}(?:future|later)[ \t]{1,8}(?:turns?|answers?|responses?))\b/i,
+  /\b(?:whenever|every[ \t]{1,8}time|each[ \t]{1,8}time|any[ \t]{1,8}time)\b[^\n]{0,60}\b(?:asked|discussed|mentioned|queried|retrieved|recalled)\b/i,
+  // The subject is the agent, not a system under discussion.
+  /\byour[ \t]{1,8}(?:answers?|responses?|repl(?:y|ies)|output|behaviou?r|memory)\b/i,
+  /\b(?:assistant|agent|model)(?:'s)?[ \t]{1,8}(?:answers?|responses?|repl(?:y|ies)|output|behaviou?r)\b/i,
+  // A hidden activation phrase is itself the second signal.
+  /\b(?:activation|trigger)[ \t]{1,8}(?:phrase|key|word|code)\b/i,
+  /\b(?:approved|required|correct|canonical)[ \t]{1,8}(?:response|answer|reply)\b/i
+];
+var ORDINARY_CAPS_TOKENS = /* @__PURE__ */ new Set([
+  "API",
+  "HTTP",
+  "HTTPS",
+  "JSON",
+  "XML",
+  "HTML",
+  "CSS",
+  "CSV",
+  "TSV",
+  "YAML",
+  "TOML",
+  "SQL",
+  "URL",
+  "URI",
+  "UUID",
+  "ID",
+  "IDS",
+  "UTC",
+  "ISO",
+  "PDF",
+  "PNG",
+  "JPEG",
+  "SVG",
+  "TLS",
+  "SSL",
+  "SSH",
+  "DNS",
+  "TCP",
+  "UDP",
+  "IP",
+  "CDN",
+  "CORS",
+  "CSRF",
+  "JWT",
+  "OAUTH",
+  "REST",
+  "GRPC",
+  "RPC",
+  "SDK",
+  "CLI",
+  "GUI",
+  "OK",
+  "YES",
+  "NO",
+  "TODO",
+  "FAQ",
+  "PR",
+  "CI",
+  "CD",
+  "QA",
+  "UX",
+  "UI",
+  "MIT",
+  "GPL",
+  "EU",
+  "US",
+  "AM",
+  "PM",
+  "FYI",
+  "ETA",
+  // Crypto, encoding, and spec vocabulary (trailing digits are stripped
+  // before this lookup, so SHA256/SHA-256/UTF8/ISO8601/RFC3339 all reduce).
+  "SHA",
+  "MD",
+  "HMAC",
+  "AES",
+  "RSA",
+  "ECDSA",
+  "PBKDF",
+  "BCRYPT",
+  "SCRYPT",
+  "ARGON",
+  "UTF",
+  "ASCII",
+  "BASE",
+  "HEX",
+  "CRC",
+  "GZIP",
+  "ZSTD",
+  "RFC",
+  "ANSI",
+  "IEEE",
+  "SMTP",
+  "IMAP",
+  "LDAP",
+  "SAML",
+  "OIDC",
+  "SSO",
+  "MFA",
+  "TOTP",
+  "ACL",
+  "RBAC",
+  "AWS",
+  "GCP",
+  "GPU",
+  "CPU",
+  "RAM",
+  "SSD",
+  "OS",
+  "VM",
+  "K8S",
+  "NPM",
+  "SEMVER",
+  "GET",
+  "POST",
+  "PUT",
+  "PATCH",
+  "DELETE",
+  "HEAD",
+  "OPTIONS",
+  "TRACE"
+]);
+var ORDINARY_CAPITALIZED_WORDS = /* @__PURE__ */ new Set([
+  "Dear",
+  "Hello",
+  "Hi",
+  "Greetings",
+  "Please",
+  "Thanks",
+  "Thank",
+  "Regards",
+  "Sincerely",
+  "Yes",
+  "No",
+  "True",
+  "False",
+  "Null",
+  "None",
+  "Error",
+  "Warning",
+  "Note",
+  "Summary",
+  "Subject",
+  "Re",
+  "Fwd",
+  "Attention",
+  "Notice",
+  "Draft",
+  "Monday",
+  "Tuesday",
+  "Wednesday",
+  "Thursday",
+  "Friday",
+  "Saturday",
+  "Sunday",
+  "January",
+  "February",
+  "March",
+  "April",
+  "May",
+  "June",
+  "July",
+  "August",
+  "September",
+  "October",
+  "November",
+  "December"
+]);
+var EMISSION_VERB_PRESENT = /\b(?:begin|start|end|include|contain|say|state|output|return|emit|produce|reply|respond|answer|replace|becomes?|is|are|be)\b[ \t]/i;
+var OPAQUE_EMISSION_TARGET = /\b(?:begin|start|end|include|contain|say|state|output|return|emit|produce|reply|respond|answer|replace|becomes?|is|are|be)\b[ \t]{1,8}(?:(?:with|by|exactly)[ \t]{1,8})?(?:normal[ \t]{1,8}behaviou?r[ \t]{1,8}with[ \t]{1,8})?/gi;
+var EMISSION_SLOT_VALUE = /(?:"([^"\n]{2,40})"|'([^'\n]{2,40})'|([A-Za-z][A-Za-z0-9_-]{1,39})\b)/y;
+var MAX_WHITESPACE_RUN_SCAN = 64;
+function lowercaseFollowsWhitespace(content, from) {
+  const limit = Math.min(content.length, from + MAX_WHITESPACE_RUN_SCAN);
+  let index = from;
+  while (index < limit) {
+    const code = content.charCodeAt(index);
+    const whitespace = code === 32 || code >= 9 && code <= 13;
+    if (!whitespace) return code >= 97 && code <= 122;
+    index += 1;
+  }
+  return false;
+}
+function splitSentencesOutsideQuotes(content) {
+  const sentences = [];
+  const TOKEN = /["'.!?\n]/g;
+  let start = 0;
+  let quote;
+  let match;
+  while ((match = TOKEN.exec(content)) !== null) {
+    const char = match[0];
+    const index = match.index;
+    if (quote !== void 0) {
+      if (char === quote) quote = void 0;
+      continue;
+    }
+    if (char === '"' || char === "'" && !/[A-Za-z0-9]/.test(content[index - 1] ?? " ")) {
+      quote = char;
+      continue;
+    }
+    const next = content[index + 1];
+    const insideToken = char !== "\n" && next !== void 0 && !/\s/.test(next);
+    const terminalUrlPunctuation = (char === "?" || char === "!") && lowercaseFollowsWhitespace(content, index + 1) && /:\/\/[^\s]*$/.test(content.slice(Math.max(0, index - 300), index));
+    const newlineContinues = char === "\n" && /[:\-][ \t]*$/.test(content.slice(Math.max(0, index - 4), index));
+    const endsUnit = !insideToken && !terminalUrlPunctuation && !newlineContinues && (char === "." || char === "!" || char === "?" || char === "\n");
+    if (endsUnit) {
+      if (index > start) sentences.push(content.slice(start, index));
+      start = index + 1;
+    }
+  }
+  if (start < content.length) sentences.push(content.slice(start));
+  return sentences;
+}
+function reduceToken(token) {
+  return token.replace(/[0-9]+$/, "");
+}
+function isOrdinaryToken(token) {
+  const segments = token.split(/[-_]+/).filter((segment) => segment.length > 0);
+  if (segments.length === 0) return true;
+  if (segments.length > 1 && segments.every((segment) => /^[A-Z][a-z]+$/.test(segment))) return true;
+  return segments.every((segment) => {
+    if (/^[0-9]+$/.test(segment)) return true;
+    const reduced = reduceToken(segment);
+    if (ORDINARY_CAPS_TOKENS.has(segment) || ORDINARY_CAPS_TOKENS.has(reduced)) return true;
+    return ORDINARY_CAPITALIZED_WORDS.has(segment);
+  });
+}
+function hasOpaqueEmissionTarget(sentence) {
+  OPAQUE_EMISSION_TARGET.lastIndex = 0;
+  for (let verb = OPAQUE_EMISSION_TARGET.exec(sentence); verb !== null; verb = OPAQUE_EMISSION_TARGET.exec(sentence)) {
+    EMISSION_SLOT_VALUE.lastIndex = verb.index + verb[0].length;
+    const match = EMISSION_SLOT_VALUE.exec(sentence);
+    if (!match) continue;
+    const quoted = match[1] ?? match[2];
+    if (quoted !== void 0) {
+      const inner = quoted.trim();
+      if (!/\s/.test(inner) && isOrdinaryToken(inner)) continue;
+      return true;
+    }
+    const token = match[3];
+    if (token === void 0) continue;
+    if (/^[a-z]/.test(token)) continue;
+    if (!isOrdinaryToken(token)) return true;
+  }
+  return false;
+}
+function findResponseControlDirective(content, profile = "default") {
+  const directive = RESPONSE_CONTROL_PATTERNS.map(
+    (pattern) => findingFor("response-control-directive", content, pattern)
+  ).find((finding) => finding !== void 0);
+  if (!directive) return void 0;
+  if (profile === "hardened") return directive;
+  const anyCorroborator = RESPONSE_CONTROL_CORROBORATORS.some((pattern) => pattern.test(content));
+  const anyEmissionVerb = !anyCorroborator ? EMISSION_VERB_PRESENT.test(content) : true;
+  if (!anyCorroborator && !anyEmissionVerb) return void 0;
+  for (const sentence of splitSentencesOutsideQuotes(content)) {
+    if (!RESPONSE_CONTROL_PATTERNS.some((pattern) => pattern.test(sentence))) continue;
+    if (anyCorroborator && RESPONSE_CONTROL_CORROBORATORS.some((pattern) => pattern.test(sentence))) return directive;
+    if (hasOpaqueEmissionTarget(sentence)) return directive;
+  }
+  return void 0;
+}
+function findToolRoutingDirective(content) {
+  return findingFor(
+    "tool-routing-directive",
+    content,
+    /\b(?:ignore|redirect(?:ing)?|override|substitute|preferred[_ -]?tool|never[ \t]{1,8}use|must[ \t]{1,8}call|requires?[ \t]{1,8}redirecting)\b[\s\S]{0,160}\b(?:tool|function|[a-z][a-z0-9-]*[_:.][a-z0-9-]+)\b|\b(?:tool|function|[a-z][a-z0-9-]*[_:.][a-z0-9-]+)\b[\s\S]{0,160}\b(?:redirect(?:ing)?|override|substitute|preferred[_ -]?tool|never[ \t]{1,8}use|must[ \t]{1,8}call)\b/i
   );
 }
 function findAuthorityEscalation(content) {
@@ -3048,7 +3372,16 @@ function findAuthorityEscalation(content) {
     AUTHORITY_MANDATORY_DIRECTIVE_PATTERN
   );
 }
-function screenCandidateFact(content) {
+var INVISIBLE_FORMATTING = /[\u00ad\u200b-\u200f\u2060\u2028\u2029\ufeff]/g;
+var NON_ASCII_SPACE_LIKE = /[\f\v\u0085\u1680\u00a0\u2000-\u200a\u202f\u205f\u3000]/g;
+var ASCII_SPACE_RUN = /[ \t]{2,}/g;
+function normalizeForScreening(content) {
+  const spaced = content.replace(NON_ASCII_SPACE_LIKE, " ").replace(INVISIBLE_FORMATTING, " ").replace(ASCII_SPACE_RUN, " ");
+  const deleted = content.replace(INVISIBLE_FORMATTING, "").replace(NON_ASCII_SPACE_LIKE, " ").replace(ASCII_SPACE_RUN, " ");
+  return spaced === deleted ? [spaced] : [spaced, deleted];
+}
+function screenCandidateFact(rawContent, profile = "default") {
+  const variants = normalizeForScreening(rawContent);
   const findings = [];
   const rules = [
     ["imperative-to-agent", findImperativeToAgent],
@@ -3056,13 +3389,20 @@ function screenCandidateFact(content) {
     ["encoded-blob", findEncodedBlob],
     ["ignore-previous-family", findIgnorePreviousFamily],
     ["conditional-trigger", findConditionalTrigger],
-    ["authority-escalation", findAuthorityEscalation]
+    ["authority-escalation", findAuthorityEscalation],
+    ["response-control-directive", findResponseControlDirective],
+    ["tool-routing-directive", findToolRoutingDirective]
   ];
   for (const [rule, find] of rules) {
-    const finding = find(content);
-    if (finding) findings.push({ rule, excerpt: finding.excerpt });
+    for (const content of variants) {
+      const finding = find(content, profile);
+      if (finding) {
+        findings.push({ rule, excerpt: finding.excerpt });
+        break;
+      }
+    }
   }
-  const score = findings.reduce((sum, finding) => sum + RULE_WEIGHTS[finding.rule], 0);
+  const score = findings.reduce((sum, finding) => sum + ruleWeight(finding.rule, profile), 0);
   return { score, findings, quarantine: score >= INJECTION_SCREEN_THRESHOLD };
 }
 
@@ -3177,6 +3517,10 @@ function writeBurstStats(groups) {
     anomalousGroups
   };
 }
+function auditScreenProfile(config) {
+  const capabilities = resolveSecurityCapabilities(config);
+  return capabilities.injectionScreen ? capabilities.injectionScreenProfile : "default";
+}
 async function auditMemoryStore(options) {
   const since = parseSince(options.since);
   const storage = options.storage;
@@ -3188,8 +3532,9 @@ async function auditMemoryStore(options) {
   );
   const findings = [];
   const quarantinePaths = /* @__PURE__ */ new Map();
+  const profile = options.profile ?? "default";
   for (const memory of activeMemories) {
-    const screened = screenCandidateFact(memory.content);
+    const screened = screenCandidateFact(memory.content, profile);
     if (screened.quarantine === true) quarantinePaths.set(memory.path, { injection: true, burst: false });
     for (const screenFinding of screened.findings) {
       findings.push({
@@ -3236,7 +3581,7 @@ async function auditMemoryStore(options) {
       if (!qInfo) continue;
       const memory = await storage.readMemoryByPath(staleMemory.path);
       if (!memory || !isActive(memory, options.memoryDir)) continue;
-      if (qInfo.injection && !qInfo.burst && !screenCandidateFact(memory.content).quarantine) continue;
+      if (qInfo.injection && !qInfo.burst && !screenCandidateFact(memory.content, profile).quarantine) continue;
       const changed = await storage.writeMemoryFrontmatterIfUnchanged(memory, {
         status: "pending_review",
         updated: now
@@ -3292,7 +3637,13 @@ function registerSecurityCommands(cmd, orchestrator) {
       memoryDir: orchestrator.config.memoryDir,
       storage: orchestrator.storage,
       since: typeof options.since === "string" && options.since.trim().length > 0 ? options.since.trim() : void 0,
-      quarantine: options.quarantine === true
+      quarantine: options.quarantine === true,
+      // Screen with the profile live ingestion uses, or a memory this
+      // deployment would quarantine on write stays active once stored
+      // (#3078). A deployment with the screen DISABLED keeps the previous
+      // `default` weighting: the sweep must not be stricter than the
+      // write path the operator configured.
+      profile: auditScreenProfile(orchestrator.config)
     });
     if (options.json === true) {
       console.log(JSON.stringify(report, null, 2));
@@ -5738,7 +6089,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
       );
       tierCmd.command("list").description("Summarize tier distribution across all memories").option("--json", "Emit machine-readable JSON only").action(async (...args) => {
         const options = args[0] ?? {};
-        const { summarizeTiers, formatTierSummaryText } = await import("./tier-stats-VK5PCO2L.js");
+        const { summarizeTiers, formatTierSummaryText } = await import("./tier-stats-VF6DS52E.js");
         const summary = await summarizeTiers(orchestrator.storage);
         if (reportHasMachineReadableOutput(options)) {
           console.log(JSON.stringify(summary, null, 2));
@@ -5749,7 +6100,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
       tierCmd.command("explain").description("Explain the tier-transition decision for a single memory").argument("<id>", "Memory id to explain").option("--json", "Emit machine-readable JSON only").action(async (...args) => {
         const idArg = typeof args[0] === "string" ? args[0] : "";
         const options = args[1] ?? {};
-        const { explainTierForMemory, formatTierExplainText } = await import("./tier-stats-VK5PCO2L.js");
+        const { explainTierForMemory, formatTierExplainText } = await import("./tier-stats-VF6DS52E.js");
         try {
           const explain = await explainTierForMemory(
             orchestrator.storage,
@@ -8995,7 +9346,7 @@ Semantic consolidation complete. clusters=${result.clustersFound}, consolidated=
           console.error("--verb is required. Must be one of: keep-a, keep-b, merge, both-valid, needs-more-context");
           process.exit(1);
         }
-        const { isValidResolutionVerb, executeResolution } = await import("./resolution-CHNISQJB.js");
+        const { isValidResolutionVerb, executeResolution } = await import("./resolution-UYJU5JUA.js");
         if (!isValidResolutionVerb(verb)) {
           console.error(`Invalid verb: ${verb}. Must be one of: keep-a, keep-b, merge, both-valid, needs-more-context`);
           process.exit(1);
@@ -9027,7 +9378,7 @@ Semantic consolidation complete. clusters=${result.clustersFound}, consolidated=
       });
       reviewCmd.command("scan").description("Run an on-demand contradiction scan").option("--namespace <ns>", "Namespace to scan").action(async (...args) => {
         const options = args[0] ?? {};
-        const { runContradictionScan } = await import("./contradiction-scan-GVD4JJ7B.js");
+        const { runContradictionScan } = await import("./contradiction-scan-5EJYRKD3.js");
         console.log("Running contradiction scan...");
         const result = await runContradictionScan({
           storage: orchestrator.storage,
@@ -9654,6 +10005,7 @@ export {
   exportSkillBundles,
   readSkillBundlesFromDir,
   persistImportedSkills,
+  auditScreenProfile,
   auditMemoryStore,
   formatAuditMemoryReport,
   registerWearableConnector,
@@ -9779,4 +10131,4 @@ export {
   listMemoryMarkdownFilePaths,
   registerCli
 };
-//# sourceMappingURL=chunk-Y76HXF3F.js.map
+//# sourceMappingURL=chunk-ZDZJ2PG4.js.map