@remnic/core 9.69.88 → 9.69.90

package/dist/{chunk-QB57WIS6.js → chunk-GXETU7AE.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-MPC7TYTZ.js";
 import {
   importCapsule
-} from "./chunk-VVX5PZFS.js";
+} from "./chunk-ZHXSOMYH.js";
 import {
   isSharedContextWriteInputError
 } from "./chunk-IFBSZGW3.js";
@@ -33,15 +33,21 @@ import {
   resolveCodegraphProjectId,
   serializeDecisionRecord
 } from "./chunk-EQUD7FP4.js";
+import {
+  WriteQuarantineStore
+} from "./chunk-PJSK6OJM.js";
 import {
   WHO_KNOWS_DEFAULT_LIMIT,
   computeWhoKnows,
   loadWhoKnowsEntities,
   validateWhoKnowsInput
-} from "./chunk-6UQFJULG.js";
+} from "./chunk-VBNA2JEN.js";
 import {
-  WriteQuarantineStore
-} from "./chunk-PJSK6OJM.js";
+  trustResultFor
+} from "./chunk-GNVZQ5JN.js";
+import {
+  renderEpistemicHedge
+} from "./chunk-YN2UN7N3.js";
 import {
   getTrustZoneStoreStatus,
   isTrustZoneName,
@@ -51,15 +57,9 @@ import {
   seedTrustZoneDemoDataset,
   summarizeTrustZonePromotionReadiness
 } from "./chunk-ROBHL3GL.js";
-import {
-  trustResultFor
-} from "./chunk-GNVZQ5JN.js";
-import {
-  renderEpistemicHedge
-} from "./chunk-YN2UN7N3.js";
 import {
   summarizeHourlyStatus
-} from "./chunk-XOV7NRY5.js";
+} from "./chunk-U46P4UAR.js";
 import {
   planSessionTranscriptMigration
 } from "./chunk-P5FPO2BR.js";
@@ -68,42 +68,42 @@ import {
 } from "./chunk-JYG2334B.js";
 import {
   runRecallWhy
-} from "./chunk-RDJ6C7NZ.js";
-import {
-  assertIdInNavigationWindow
-} from "./chunk-5KVT6G5U.js";
+} from "./chunk-2IWBHZ3H.js";
 import {
   renderNavigationResult
 } from "./chunk-KIW3OOZE.js";
-import {
-  planDisclosureStep
-} from "./chunk-JLPNONPH.js";
 import {
   DEFAULT_TRAVERSE_LIMIT,
   selectTraverseNeighbors
 } from "./chunk-YE4JBZO5.js";
+import {
+  assertIdInNavigationWindow
+} from "./chunk-5KVT6G5U.js";
+import {
+  takeNavigateBudget
+} from "./chunk-VYDGHJIN.js";
+import {
+  planDisclosureStep
+} from "./chunk-35A7GCHG.js";
 import {
   parseNavigateLinkType
 } from "./chunk-7O5EW7KX.js";
+import {
+  decideDisclosureEscalation
+} from "./chunk-H7XKCNR6.js";
 import {
   toRecallExplainJson
-} from "./chunk-KN6CIN7I.js";
+} from "./chunk-32HO62I4.js";
 import {
   estimateRecallTokens,
   summarizeDisclosureTokens
-} from "./chunk-SSUDD72S.js";
+} from "./chunk-QPWUG2S3.js";
 import {
-  takeNavigateBudget
-} from "./chunk-VYDGHJIN.js";
-import {
-  decideDisclosureEscalation
-} from "./chunk-H7XKCNR6.js";
+  readAggregateExtractionWatermark
+} from "./chunk-R36IBI2M.js";
 import {
   buildEmbeddingAwareSnapshotStream
-} from "./chunk-5X4MXNEU.js";
-import {
-  readAggregateExtractionWatermark
-} from "./chunk-GZDTVYK2.js";
+} from "./chunk-C6HPNPNK.js";
 import {
   ReplicaDivergenceMonitor
 } from "./chunk-E6UNM67F.js";
@@ -118,10 +118,10 @@ import {
 } from "./chunk-UD7UNYRD.js";
 import {
   runMemoryBrowse
-} from "./chunk-EDIH6X2P.js";
+} from "./chunk-JZ66PN72.js";
 import {
   isSearchExcludedPath
-} from "./chunk-66DKTOBY.js";
+} from "./chunk-OGZC2WUX.js";
 import {
   coerceIncludedMemories
 } from "./chunk-2YA5N2BY.js";
@@ -130,22 +130,22 @@ import {
 } from "./chunk-HWLIMQE2.js";
 import {
   readProjectedHarmonicGraph
-} from "./chunk-AEU4EQGV.js";
+} from "./chunk-T7R5HI6A.js";
 import {
   wrapWorkLayerContext
 } from "./chunk-EI6V5UXY.js";
 import {
   CONNECTOR_LABEL_MAX_LENGTH
-} from "./chunk-KKNZ7PUZ.js";
+} from "./chunk-QAIKLICT.js";
 import {
   isValidConnectorId
-} from "./chunk-AERXJCOG.js";
+} from "./chunk-WL7N5VGG.js";
 import {
   formatProfileTraceAscii
 } from "./chunk-BLVHDY2U.js";
 import {
   LocalLlmClient
-} from "./chunk-RBITPCMK.js";
+} from "./chunk-IDSSDL4W.js";
 import {
   REDACTION_RULES_SUBDIR
 } from "./chunk-LTHVM4XN.js";
@@ -153,7 +153,7 @@ import {
   persistExplicitCapture,
   queueExplicitCaptureForReview,
   validateExplicitCaptureInput
-} from "./chunk-4O4XCBOS.js";
+} from "./chunk-NUSQ3YEL.js";
 import {
   lcmEvidenceIdentity
 } from "./chunk-C37ZRXX7.js";
@@ -163,18 +163,22 @@ import {
   composeRecallContext,
   renderAuthorityBoundContent
 } from "./chunk-NVKO5YKP.js";
+import {
+  renderDeepRecallResult
+} from "./chunk-RF2SMMPP.js";
 import {
   createDeepRecallSeedSearch
 } from "./chunk-3X5OPDPF.js";
 import {
   runBudgetedDeepRecall
 } from "./chunk-YRULQW5J.js";
+import {
+  CrossNamespaceBudget,
+  toBudgetWarning
+} from "./chunk-UFGFMWAD.js";
 import {
   callDeepRecallPolicyLlm
 } from "./chunk-JNLEJE4A.js";
-import {
-  renderDeepRecallResult
-} from "./chunk-RF2SMMPP.js";
 import {
   buildProposedActions,
   buildQualityScore,
@@ -182,28 +186,24 @@ import {
   listMemoryGovernanceRuns,
   readMemoryGovernanceRunArtifact,
   runMemoryGovernance
-} from "./chunk-AWG3TIAY.js";
+} from "./chunk-ACCOC6UM.js";
 import {
   CorpusWatermarkCache,
   computeServiceCorpusCensus
-} from "./chunk-5MNUBT7T.js";
+} from "./chunk-ZFTODDTX.js";
 import {
-  CrossNamespaceBudget,
-  toBudgetWarning
-} from "./chunk-UFGFMWAD.js";
+  defaultCapsulesDir
+} from "./chunk-ZY2MNJR6.js";
 import {
   FileCalendarSource,
   buildBriefing,
   enqueuePassiveCorrectionNotification,
   parseBriefingFocus,
   parseBriefingWindow
-} from "./chunk-JVPWRNHA.js";
+} from "./chunk-5YR4UGF2.js";
 import {
   ExtractionDeadlineError
-} from "./chunk-BUQKSQXL.js";
-import {
-  defaultCapsulesDir
-} from "./chunk-ZY2MNJR6.js";
+} from "./chunk-S533KGX6.js";
 import {
   CORRECTION_TEXT_MAX,
   CorrectionContractError,
@@ -244,10 +244,10 @@ import {
   qmdCollectionPathParts,
   qmdResultPathCandidates,
   selfDeps
-} from "./chunk-STEOT4DI.js";
+} from "./chunk-SCPHU3RW.js";
 import {
   namespaceCollectionName
-} from "./chunk-LV5H6FTN.js";
+} from "./chunk-SFSD5Q6O.js";
 import {
   normalizeProjectionPreview,
   normalizeProjectionTags
@@ -287,7 +287,7 @@ import {
 } from "./chunk-SYOIVK7K.js";
 import {
   splitCanonicalWriteRequest
-} from "./chunk-FKD656D2.js";
+} from "./chunk-PH2V7EXZ.js";
 import {
   applyBriefingLocationContext,
   daySummaryAutoOptions
@@ -309,28 +309,28 @@ import {
 } from "./chunk-PO7NXNGC.js";
 import {
   reapplyCategoryCoercion
-} from "./chunk-LW3HKRL7.js";
+} from "./chunk-3BTHXB7Z.js";
 import {
   exportCapsule
-} from "./chunk-VDX2J7OX.js";
+} from "./chunk-KQAFEZQX.js";
 import {
   evaluateActionConfidence
 } from "./chunk-Z2YFLXHU.js";
 import {
   createOfflineSyncManifestStream
-} from "./chunk-C6U57KG4.js";
+} from "./chunk-AF5PW35O.js";
 import {
   offlineSyncStorageForSnapshot
-} from "./chunk-UP75KL3L.js";
+} from "./chunk-2JRB3Z5N.js";
 import {
   resolveScopePlan,
   resolveScopedWritableNamespaceValue,
   resolveWritableNamespaceValue
-} from "./chunk-OWYHHW67.js";
+} from "./chunk-7XI2UJHL.js";
 import {
   expandScopeProfileReadNamespaces,
   resolveScopeProfilePlan
-} from "./chunk-WBYQA3VN.js";
+} from "./chunk-E5H4TM4Y.js";
 import {
   inferMemoryStatus,
   isActiveMemoryStatus,
@@ -363,7 +363,7 @@ import {
   buildOfflineSyncSnapshotFromBase,
   normalizeOfflineSyncChangeset,
   readOfflineSyncFileContentChunk
-} from "./chunk-OCFXVDBZ.js";
+} from "./chunk-IVEHY2VT.js";
 import {
   compileOfflineSyncExcludeGlobs
 } from "./chunk-4NSLQ7EU.js";
@@ -374,10 +374,14 @@ import {
   serializeMutations,
   withHeldFileLock
 } from "./chunk-FFAZ2XFU.js";
+import {
+  createRecallCorpusVersionCapture,
+  mergeRecallCorpusVersions
+} from "./chunk-YVRQ5JRA.js";
 import {
   DEFAULT_RECALL_DISCLOSURE,
   isRecallDisclosure
-} from "./chunk-PWF4JXKD.js";
+} from "./chunk-RKDSELA3.js";
 import {
   extractJsonCandidates
 } from "./chunk-YBA52OKG.js";
@@ -424,7 +428,7 @@ import {
   memorySearchThroughScope,
   mergeMemorySearchDefaultFallback,
   resolveMemorySearchDefaultFallback
-} from "./chunk-HXCJF4XU.js";
+} from "./chunk-BFIZXFUG.js";
 import {
   canReadNamespace,
   canWriteNamespace,
@@ -432,7 +436,7 @@ import {
   defaultNamespaceForPrincipal,
   recallNamespacesForPrincipal,
   resolvePrincipal
-} from "./chunk-Y23L4YJV.js";
+} from "./chunk-OEIA4IHU.js";
 import {
   namespaceIdentityFromToken
 } from "./chunk-VUFL7X3H.js";
@@ -452,7 +456,7 @@ import {
   resolveRecallAuxiliaryCapabilities,
   resolveRecallEnhancementCapabilities,
   resolveSecurityCapabilities
-} from "./chunk-BMXEBWBT.js";
+} from "./chunk-2EMROIXS.js";
 import {
   PendingObserveExtractionTracker,
   pendingObserveScopeHint
@@ -3776,6 +3780,14 @@ async function applySupportPassportOfflineSyncChangeset(storage, options) {
       guard.assertContentAllowed(target.path, target.content);
       await storage.writeOfflineSyncFile(target.filePath, target.content);
     },
+    // Secure staging for embedding-generation replacement (#3150): staged
+    // ciphertext binds the FINAL published path, matching the snapshot apply.
+    writeStagingFile: async ({ filePath, content, finalAadFilePath }) => storage.writeOfflineSyncStagingFile(
+      filePath,
+      content,
+      finalAadFilePath === void 0 ? void 0 : { aadFilePath: finalAadFilePath }
+    ),
+    readStagingFile: async ({ filePath, finalAadFilePath }) => storage.readOfflineSyncFile(filePath, finalAadFilePath === void 0 ? void 0 : { aadFilePath: finalAadFilePath }),
     deleteFile: async (target) => {
       await guard.assertTargetAllowed(target);
       await storage.deleteOfflineSyncFile(target.filePath, target.mtimeMs ?? null);
@@ -8354,6 +8366,7 @@ async function assembleRecallResponse(deps, params) {
     request,
     context,
     contextComposition,
+    storageCorpusVersionsAtRecallStart,
     query,
     mode,
     namespace,
@@ -8495,6 +8508,7 @@ async function assembleRecallResponse(deps, params) {
       namespace: effectiveNamespace,
       context: effectiveContext,
       contextComposition: effectiveComposition,
+      storageCorpusVersionsAtRecallStart,
       ...retrievalFailure ? { retrievalFailure } : {},
       count: filterTags && filterTags.length > 0 ? results.length : snapshot?.memoryIds.length ?? results.length,
       memoryIds: filteredMemoryIds,
@@ -8585,6 +8599,7 @@ var AccessRecallSurface = class {
       sourcesUsed,
       disclosure: options.disclosure,
       budgetsApplied: snapshotForSerialization.budgetsApplied,
+      storageCorpusVersionsAtRecallStart: options.storageCorpusVersionsAtRecallStart,
       latencyMs: snapshotForSerialization.latencyMs
     };
   }
@@ -8872,16 +8887,16 @@ var AccessRecallSurface = class {
       codingContext: profileCodingContext,
       codingOverlay: profileCodingOverlay
     });
-    const modeSkipsBudget = mode === "no_recall";
-    const legacyRecallNamespaces = Array.isArray(this.deps.orchestrator.config.defaultRecallNamespaces) ? recallNamespacesForPrincipal(principal, this.deps.orchestrator.config) : [];
-    const effectiveNamespaces = namespaceOverride ? [namespaceOverride] : profilePlan ? expandScopeProfileReadNamespaces({
-      profilePlan,
-      principalSelfNamespace: profilePlan.baseNamespace,
+    const recallScopePlan = resolveScopePlan({
       config: this.deps.orchestrator.config,
-      principal,
-      codingOverlay: profileCodingOverlay,
-      legacyRecallNamespaces
-    }) : legacyRecallNamespaces;
+      sessionKey: request.sessionKey,
+      namespace: namespaceOverride,
+      principalOverride: authenticatedPrincipal,
+      codingContext: profileCodingContext,
+      namespacesEnabled: resolveNamespaceCapabilities(this.deps.orchestrator.config).namespaces
+    });
+    const modeSkipsBudget = mode === "no_recall";
+    const effectiveNamespaces = recallScopePlan.readNamespaces;
     const budgetPrincipalNamespace = profilePlan?.baseNamespace ?? principalNamespace;
     let budgetDecision;
     let willReserveBudget = false;
@@ -8972,6 +8987,9 @@ var AccessRecallSurface = class {
       onContextComposition: (composition) => {
         contextComposition = composition;
       },
+      onRecallPlanResolved: createRecallCorpusVersionCapture(this.deps.orchestrator, request.abortSignal, (versions) => {
+        storageCorpusVersionsAtRecallStart = mergeRecallCorpusVersions(storageCorpusVersionsAtRecallStart, versions);
+      }, true),
       ...authenticatedPrincipal ? { principalOverride: authenticatedPrincipal } : {},
       ...request.sourceConnector ? { sourceConnector: request.sourceConnector } : {},
       ...request.stateView !== void 0 ? { stateView: request.stateView } : {},
@@ -8997,6 +9015,7 @@ var AccessRecallSurface = class {
       reservedBudgetPrincipal = principal;
       reservedBudget = reserveDecision.reservation;
     }
+    let storageCorpusVersionsAtRecallStart = [];
     try {
       const context = await this.deps.orchestrator.recall(
         query,
@@ -9007,6 +9026,7 @@ var AccessRecallSurface = class {
         request,
         context,
         contextComposition,
+        storageCorpusVersionsAtRecallStart,
         query,
         mode,
         namespace,
@@ -9073,6 +9093,7 @@ var AccessRecallSurface = class {
     const disclosure = request.disclosure ?? DEFAULT_RECALL_DISCLOSURE;
     let recallStartedAt = Date.now();
     const recallSessionKey = request.sessionKey?.trim() || void 0;
+    let storageCorpusVersionsAtRecallStart = [];
     let xrayResponse = { snapshotFound: false };
     {
       const {
@@ -9085,6 +9106,9 @@ var AccessRecallSurface = class {
           ...requestedNamespace ? { namespace: requestedNamespace } : {},
           ...budgetOverride !== void 0 ? { budgetCharsOverride: budgetOverride } : {},
           ...mode !== void 0 ? { mode } : {},
+          onRecallPlanResolved: createRecallCorpusVersionCapture(this.deps.orchestrator, request.abortSignal, (versions) => {
+            storageCorpusVersionsAtRecallStart = mergeRecallCorpusVersions(storageCorpusVersionsAtRecallStart, versions);
+          }, true),
           // When the caller supplies an authenticated principal, forward
           // it via the dedicated override channel so orchestrator-side
           // ACL decisions use the SAME principal the access-surface
@@ -9242,6 +9266,7 @@ var AccessRecallSurface = class {
           startedAt: recallStartedAt,
           requestedMode: request.mode,
           normalizedMode: mode,
+          storageCorpusVersionsAtRecallStart,
           ...xrayRawExcerptNamespace ? { rawExcerptNamespace: xrayRawExcerptNamespace } : {},
           ...xrayRawExcerptSessionIds !== void 0 ? { rawExcerptSessionIds: xrayRawExcerptSessionIds } : {},
           ...xrayRawExcerptsSuppressed ? { rawExcerptsSuppressed: xrayRawExcerptsSuppressed } : {}
@@ -18540,4 +18565,4 @@ export {
   EngramAccessService,
   AccessAdminOpsSurface
 };
-//# sourceMappingURL=chunk-QB57WIS6.js.map
+//# sourceMappingURL=chunk-GXETU7AE.js.map