@remnic/core 9.69.87 → 9.69.89

package/dist/{chunk-FOH7AMMI.js → chunk-CALBQ2NG.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-MPC7TYTZ.js";
 import {
   importCapsule
-} from "./chunk-TDYAIXHK.js";
+} from "./chunk-H36X4NRH.js";
 import {
   isSharedContextWriteInputError
 } from "./chunk-IFBSZGW3.js";
@@ -32,7 +32,7 @@ import {
   parseDecisionRecord,
   resolveCodegraphProjectId,
   serializeDecisionRecord
-} from "./chunk-C3QXITIP.js";
+} from "./chunk-EQUD7FP4.js";
 import {
   WriteQuarantineStore
 } from "./chunk-PJSK6OJM.js";
@@ -41,13 +41,7 @@ import {
   computeWhoKnows,
   loadWhoKnowsEntities,
   validateWhoKnowsInput
-} from "./chunk-CS52MFDV.js";
-import {
-  trustResultFor
-} from "./chunk-GNVZQ5JN.js";
-import {
-  renderEpistemicHedge
-} from "./chunk-YN2UN7N3.js";
+} from "./chunk-SZG4WFAG.js";
 import {
   getTrustZoneStoreStatus,
   isTrustZoneName,
@@ -57,21 +51,24 @@ import {
   seedTrustZoneDemoDataset,
   summarizeTrustZonePromotionReadiness
 } from "./chunk-ROBHL3GL.js";
+import {
+  trustResultFor
+} from "./chunk-GNVZQ5JN.js";
+import {
+  renderEpistemicHedge
+} from "./chunk-YN2UN7N3.js";
 import {
   summarizeHourlyStatus
-} from "./chunk-NR2ASHBL.js";
+} from "./chunk-XOV7NRY5.js";
 import {
   planSessionTranscriptMigration
 } from "./chunk-P5FPO2BR.js";
 import {
   composeSalvagedEnvelope
-} from "./chunk-6ET2VII7.js";
+} from "./chunk-JYG2334B.js";
 import {
   runRecallWhy
 } from "./chunk-RDJ6C7NZ.js";
-import {
-  renderNavigationResult
-} from "./chunk-KIW3OOZE.js";
 import {
   DEFAULT_TRAVERSE_LIMIT,
   selectTraverseNeighbors
@@ -80,8 +77,8 @@ import {
   assertIdInNavigationWindow
 } from "./chunk-5KVT6G5U.js";
 import {
-  takeNavigateBudget
-} from "./chunk-VYDGHJIN.js";
+  renderNavigationResult
+} from "./chunk-KIW3OOZE.js";
 import {
   planDisclosureStep
 } from "./chunk-JLPNONPH.js";
@@ -98,21 +95,27 @@ import {
   estimateRecallTokens,
   summarizeDisclosureTokens
 } from "./chunk-SSUDD72S.js";
+import {
+  takeNavigateBudget
+} from "./chunk-VYDGHJIN.js";
 import {
   readAggregateExtractionWatermark
-} from "./chunk-UA5DX5C3.js";
+} from "./chunk-AZIOEOK4.js";
+import {
+  buildEmbeddingAwareSnapshotStream
+} from "./chunk-C6HPNPNK.js";
 import {
   ReplicaDivergenceMonitor
 } from "./chunk-E6UNM67F.js";
-import {
-  recordMemoryOutcome
-} from "./chunk-UD7UNYRD.js";
 import {
   recordObjectiveStateSnapshotsFromObservedMessages
 } from "./chunk-6WHJ2EAB.js";
 import {
   objectiveStateStoreOverrideForNamespace
 } from "./chunk-HM7RHKS4.js";
+import {
+  recordMemoryOutcome
+} from "./chunk-UD7UNYRD.js";
 import {
   runMemoryBrowse
 } from "./chunk-EDIH6X2P.js";
@@ -122,12 +125,12 @@ import {
 import {
   coerceIncludedMemories
 } from "./chunk-2YA5N2BY.js";
-import {
-  readProjectedHarmonicGraph
-} from "./chunk-DZ525SNQ.js";
 import {
   buildGraphSnapshot
-} from "./chunk-PUKTBULQ.js";
+} from "./chunk-HWLIMQE2.js";
+import {
+  readProjectedHarmonicGraph
+} from "./chunk-7QE46QXI.js";
 import {
   wrapWorkLayerContext
 } from "./chunk-EI6V5UXY.js";
@@ -142,7 +145,7 @@ import {
 } from "./chunk-BLVHDY2U.js";
 import {
   LocalLlmClient
-} from "./chunk-S7GCT7NU.js";
+} from "./chunk-RBITPCMK.js";
 import {
   REDACTION_RULES_SUBDIR
 } from "./chunk-LTHVM4XN.js";
@@ -150,7 +153,7 @@ import {
   persistExplicitCapture,
   queueExplicitCaptureForReview,
   validateExplicitCaptureInput
-} from "./chunk-7DE2NOON.js";
+} from "./chunk-4O4XCBOS.js";
 import {
   lcmEvidenceIdentity
 } from "./chunk-C37ZRXX7.js";
@@ -179,11 +182,11 @@ import {
   listMemoryGovernanceRuns,
   readMemoryGovernanceRunArtifact,
   runMemoryGovernance
-} from "./chunk-VLLD4TOB.js";
+} from "./chunk-NMZVDRVP.js";
 import {
   CorpusWatermarkCache,
   computeServiceCorpusCensus
-} from "./chunk-4IEOGIPB.js";
+} from "./chunk-DO4C4AXD.js";
 import {
   CrossNamespaceBudget,
   toBudgetWarning
@@ -194,10 +197,10 @@ import {
   enqueuePassiveCorrectionNotification,
   parseBriefingFocus,
   parseBriefingWindow
-} from "./chunk-P2WZHLUF.js";
+} from "./chunk-NOL7SEWN.js";
 import {
   ExtractionDeadlineError
-} from "./chunk-TM3RXL4G.js";
+} from "./chunk-BUQKSQXL.js";
 import {
   defaultCapsulesDir
 } from "./chunk-ZY2MNJR6.js";
@@ -234,14 +237,14 @@ import {
 import {
   filterTrajectoriesByLookbackDays,
   readCausalTrajectoryRecords
-} from "./chunk-N4S4NUX5.js";
+} from "./chunk-B3O3IRZN.js";
 import {
   parseEntityFile,
   parseFrontmatter,
   qmdCollectionPathParts,
   qmdResultPathCandidates,
   selfDeps
-} from "./chunk-FRCESVV6.js";
+} from "./chunk-4HUCP4R4.js";
 import {
   namespaceCollectionName
 } from "./chunk-RJLV4BKR.js";
@@ -284,18 +287,18 @@ import {
 } from "./chunk-SYOIVK7K.js";
 import {
   splitCanonicalWriteRequest
-} from "./chunk-SRZW7FNU.js";
+} from "./chunk-64ZUALXK.js";
 import {
   applyBriefingLocationContext,
   daySummaryAutoOptions
-} from "./chunk-BMYZTZ5D.js";
+} from "./chunk-MY7B3HYC.js";
 import {
   STRUCTURED_ATTRIBUTE_LIMITS,
   buildAccessWriteRequestFingerprint,
   buildObserveRequestFingerprint,
   composeMemoryEnvelope,
   isMemoryCategory
-} from "./chunk-GDYU6VF4.js";
+} from "./chunk-5AYUHSAU.js";
 import {
   applyTagFilter,
   normalizeTags,
@@ -303,22 +306,22 @@ import {
 } from "./chunk-BT7NVCML.js";
 import {
   computePromotionCandidates
-} from "./chunk-VYCOJKSX.js";
+} from "./chunk-PO7NXNGC.js";
 import {
   reapplyCategoryCoercion
-} from "./chunk-3C3J243X.js";
+} from "./chunk-3QKO4QN7.js";
 import {
   exportCapsule
-} from "./chunk-7LCGFUMB.js";
+} from "./chunk-BUKK5SWA.js";
 import {
   evaluateActionConfidence
 } from "./chunk-Z2YFLXHU.js";
 import {
   createOfflineSyncManifestStream
-} from "./chunk-EVBI7S4J.js";
+} from "./chunk-RMDGAAZF.js";
 import {
   offlineSyncStorageForSnapshot
-} from "./chunk-MOQPEFLN.js";
+} from "./chunk-UP75KL3L.js";
 import {
   resolveScopePlan,
   resolveScopedWritableNamespaceValue,
@@ -353,25 +356,24 @@ import {
   computeContentHash
 } from "./chunk-5FVVY2EB.js";
 import {
-  serializeMutations,
-  withHeldFileLock
-} from "./chunk-FFAZ2XFU.js";
-import {
-  OFFLINE_SYNC_SNAPSHOT_FORMAT,
   applyOfflineSyncChangeset,
   applyOfflineSyncFileContentChunk,
   buildOfflineSyncSnapshot,
   buildOfflineSyncSnapshotForPaths,
   buildOfflineSyncSnapshotFromBase,
-  compileOfflineSyncExcludeGlobs,
-  filterOfflineSyncDeletionRevisions,
-  iterateOfflineSyncSnapshotFileRecords,
   normalizeOfflineSyncChangeset,
   readOfflineSyncFileContentChunk
-} from "./chunk-WQZZDN5M.js";
+} from "./chunk-IVEHY2VT.js";
+import {
+  compileOfflineSyncExcludeGlobs
+} from "./chunk-4NSLQ7EU.js";
 import {
   validateArchiveRelativePath
 } from "./chunk-GCGJW34D.js";
+import {
+  serializeMutations,
+  withHeldFileLock
+} from "./chunk-FFAZ2XFU.js";
 import {
   DEFAULT_RECALL_DISCLOSURE,
   isRecallDisclosure
@@ -498,13 +500,13 @@ import {
 } from "./chunk-DAOMWGO2.js";
 import {
   decodeCitationNamespace
-} from "./chunk-YRLHEEQT.js";
+} from "./chunk-U6VC6RP3.js";
 import {
   isPathInsideStorageRoot
 } from "./chunk-FF4KLI5W.js";
 import {
   SecureStoreLockedError
-} from "./chunk-JN72EPOE.js";
+} from "./chunk-MAAL6OZV.js";
 import {
   ALL_CATEGORY_DIRS,
   getCategoryDir
@@ -3774,6 +3776,14 @@ async function applySupportPassportOfflineSyncChangeset(storage, options) {
       guard.assertContentAllowed(target.path, target.content);
       await storage.writeOfflineSyncFile(target.filePath, target.content);
     },
+    // Secure staging for embedding-generation replacement (#3150): staged
+    // ciphertext binds the FINAL published path, matching the snapshot apply.
+    writeStagingFile: async ({ filePath, content, finalAadFilePath }) => storage.writeOfflineSyncStagingFile(
+      filePath,
+      content,
+      finalAadFilePath === void 0 ? void 0 : { aadFilePath: finalAadFilePath }
+    ),
+    readStagingFile: async ({ filePath, finalAadFilePath }) => storage.readOfflineSyncFile(filePath, finalAadFilePath === void 0 ? void 0 : { aadFilePath: finalAadFilePath }),
     deleteFile: async (target) => {
       await guard.assertTargetAllowed(target);
       await storage.deleteOfflineSyncFile(target.filePath, target.mtimeMs ?? null);
@@ -17490,7 +17500,7 @@ var EngramAccessService = class extends SupportPassportAccessServiceBase {
   async consoleState(namespace, principal) {
     const resolvedNamespace = this.resolveReadableNamespace(namespace, principal);
     const storage = await this.orchestrator.getStorage(resolvedNamespace);
-    const { gatherConsoleState } = await import("./state-ITXJKXRE.js");
+    const { gatherConsoleState } = await import("./state-JB47KHYV.js");
     const orchestratorProxy = Object.create(this.orchestrator, {
       config: {
         value: { ...this.orchestrator.config, memoryDir: storage.dir },
@@ -17834,31 +17844,20 @@ var EngramAccessService = class extends SupportPassportAccessServiceBase {
   async offlineSyncSnapshotStream(options = {}) {
     const resolvedNamespace = this.resolveReadableNamespace(options.namespace, options.principal);
     const storage = await offlineSyncStorageForSnapshot(this.orchestrator, resolvedNamespace);
-    const storageHash = createHash13("sha256").update(storage.dir).digest("hex").slice(0, 16);
-    const deletions = await filterOfflineSyncDeletionRevisions({
-      root: storage.dir,
-      deletions: [...await storage.readDeletionRevisions()].map(([path17, mtimeMs]) => ({ path: path17, mtimeMs })),
-      includeTranscripts: options.includeTranscripts !== false,
-      userExcludeRegexps: this.offlineSyncUserExcludes
-    });
     return {
-      namespace: resolvedNamespace,
-      format: OFFLINE_SYNC_SNAPSHOT_FORMAT,
-      schemaVersion: 1,
-      createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-      sourceId: `remnic:${resolvedNamespace}:${storageHash}`,
-      includeTranscripts: options.includeTranscripts !== false,
-      deletions,
-      files: iterateOfflineSyncSnapshotFileRecords({
+      ...await buildEmbeddingAwareSnapshotStream({
         root: storage.dir,
+        namespace: resolvedNamespace,
         includeContent: options.includeContent === true,
         includeTranscripts: options.includeTranscripts !== false,
+        userExcludeRegexps: this.offlineSyncUserExcludes,
+        excludeFile: createSupportPassportPrivateFileExclusion(storage),
         readFile: async ({ filePath }) => storage.readOfflineSyncFile(filePath),
         readFileDigest: async ({ filePath }) => storage.digestOfflineSyncFile(filePath),
-        signal: options.signal,
-        userExcludeRegexps: this.offlineSyncUserExcludes,
-        excludeFile: createSupportPassportPrivateFileExclusion(storage)
-      })
+        deletions: [...await storage.readDeletionRevisions()].map(([path17, mtimeMs]) => ({ path: path17, mtimeMs })),
+        signal: options.signal
+      }),
+      namespace: resolvedNamespace
     };
   }
   async offlineSyncManifestStream(options = {}) {
@@ -18549,4 +18548,4 @@ export {
   EngramAccessService,
   AccessAdminOpsSurface
 };
-//# sourceMappingURL=chunk-FOH7AMMI.js.map
+//# sourceMappingURL=chunk-CALBQ2NG.js.map