@remnic/core 9.69.96 → 9.69.98

package/dist/{chunk-KNI4SGQE.js → chunk-3SNJMRC7.js}

@@ -228,7 +228,7 @@ import {
   runTimelinePublishCli,
   screenCandidateFact,
   summarizeVaultPublish
-} from "./chunk-R5B3OWI4.js";
+} from "./chunk-OYQAYIGE.js";
 import {
   RoutingRulesStore
 } from "./chunk-TBUEE7XF.js";
@@ -258,7 +258,7 @@ import {
 import {
   runNamespaceMaintenanceFanout,
   summarizeNamespaceMaintenanceHealth
-} from "./chunk-OEBUAC3O.js";
+} from "./chunk-76GQBIVX.js";
 import {
   planNamespaceMaintenance
 } from "./chunk-WTZQM74L.js";
@@ -329,7 +329,7 @@ import {
   embeddingsFromCosineHits,
   normalizeConnectorScope,
   runSeedGraduationPass
-} from "./chunk-U36GYZ2P.js";
+} from "./chunk-55NZVUNI.js";
 import {
   compileCorrectionRule,
   correctionsFilePath,
@@ -367,7 +367,7 @@ import {
 } from "./chunk-QW27DOHG.js";
 import {
   MeetingsInputError
-} from "./chunk-HQCUUVG2.js";
+} from "./chunk-J3GJ23IP.js";
 import {
   WearablesInputError,
   describeErrorForOperator
@@ -394,7 +394,7 @@ import {
   detectPassiveCorrections,
   renderSessionExperiencePreview,
   scoreSessionExperienceForPrompt
-} from "./chunk-GXETU7AE.js";
+} from "./chunk-QVYXXOTR.js";
 import {
   importCapsule
 } from "./chunk-ZHXSOMYH.js";
@@ -754,7 +754,7 @@ import {
 } from "./chunk-N4PYB235.js";
 import {
   storageBackedIndexStoreIo
-} from "./chunk-AXGJMDBS.js";
+} from "./chunk-KO4X4WRJ.js";
 import {
   assertIsDirectoryNotSymlink,
   assertRealpathInsideRoot
@@ -31096,4 +31096,4 @@ export {
   qmdStartupCollectionChecksWithTimeout,
   Orchestrator
 };
-//# sourceMappingURL=chunk-KNI4SGQE.js.map
+//# sourceMappingURL=chunk-3SNJMRC7.js.map

package/dist/{chunk-WHIGRW7T.js → chunk-4HUMF74S.js}

@@ -1,6 +1,6 @@
 import {
   defineOperation
-} from "./chunk-GXETU7AE.js";
+} from "./chunk-QVYXXOTR.js";
 import {
   EngramAccessInputError
 } from "./chunk-3MUKQQ7A.js";
@@ -71,4 +71,4 @@ defineOperation({
     })
   })
 });
-//# sourceMappingURL=chunk-WHIGRW7T.js.map
+//# sourceMappingURL=chunk-4HUMF74S.js.map

package/dist/{chunk-U36GYZ2P.js → chunk-55NZVUNI.js}

@@ -141,7 +141,7 @@ import {
 } from "./chunk-7RJUVTVF.js";
 import {
   parseOfflineSyncExcludes
-} from "./chunk-4NSLQ7EU.js";
+} from "./chunk-ANPRNTPT.js";
 import {
   excludeSupportPassportPrivateMemories
 } from "./chunk-PWPIERBM.js";
@@ -5515,4 +5515,4 @@ export {
   VALID_MEMORY_CATEGORIES,
   parseConfig
 };
-//# sourceMappingURL=chunk-U36GYZ2P.js.map
+//# sourceMappingURL=chunk-55NZVUNI.js.map

package/dist/{chunk-UG5V3Z3R.js → chunk-6MWPIWPF.js}

@@ -21,7 +21,7 @@ import {
   defineOperation,
   parseNamespacePreflightWriteOp,
   resolveAuthorizedNamespaceWritablePreflight
-} from "./chunk-GXETU7AE.js";
+} from "./chunk-QVYXXOTR.js";
 import {
   parseSharedWriteOutputControls
 } from "./chunk-IFBSZGW3.js";
@@ -36,7 +36,7 @@ import {
   recallRequestSchema,
   retainedCategoryAlias,
   suggestionSubmitRequestSchema
-} from "./chunk-3BTHXB7Z.js";
+} from "./chunk-JAQXKNQV.js";
 import {
   enforceNamespaceAllowList,
   tokenCapabilityStore
@@ -603,4 +603,4 @@ defineOperation({ name: "graph_events", description: "SSE graph events.", schema
 defineOperation({ name: "chat_message", description: "Chat message.", schema: strictSchema({ message: S.str, chatSessionId: S.str }), handler: async (_i, _ctx) => ({ result: { ok: true } }) });
 defineOperation({ name: "chat_events", description: "SSE chat events.", schema: strictSchema({}), handler: async (_i, _ctx) => ({ result: { stream: "sse" } }) });
 defineOperation({ name: "adapters_status", description: "Adapter registry metadata (issue #1850 round 5). Marker op: the HTTP transport builds the response from its own adapterRegistry, but the op still must be registered so it appears in listRegisteredOperations and enforceTokenOp can gate it for scoped tokens.", schema: strictSchema({}), handler: async (_i, _ctx) => ({ result: { ok: true } }) });
-//# sourceMappingURL=chunk-UG5V3Z3R.js.map
+//# sourceMappingURL=chunk-6MWPIWPF.js.map

package/dist/{chunk-OEBUAC3O.js → chunk-76GQBIVX.js}

@@ -38,7 +38,7 @@ import {
 } from "./chunk-YBPYIAA5.js";
 import {
   parseConfig
-} from "./chunk-U36GYZ2P.js";
+} from "./chunk-55NZVUNI.js";
 import {
   readAggregateExtractionWatermark
 } from "./chunk-R36IBI2M.js";
@@ -1683,4 +1683,4 @@ export {
   runBenchmarkRecall,
   runOperatorRepair
 };
-//# sourceMappingURL=chunk-OEBUAC3O.js.map
+//# sourceMappingURL=chunk-76GQBIVX.js.map

package/dist/{chunk-RSUYKGGZ.js → chunk-7RKSJVOQ.js}

@@ -1,6 +1,6 @@
 import {
   headerValue
-} from "./chunk-7RXCMVFQ.js";
+} from "./chunk-NJAIR57U.js";
 
 // src/adapters/codex.ts
 var CodexAdapter = class {
@@ -15,9 +15,10 @@ var CodexAdapter = class {
   }
   resolveIdentity(context) {
     const mcpSessionId = headerValue(context.headers, "mcp-session-id");
-    const namespace = headerValue(context.headers, "x-engram-namespace") || "codex";
+    const namespaceHeader = headerValue(context.headers, "x-engram-namespace");
     return {
-      namespace,
+      namespace: namespaceHeader ?? "codex",
+      namespaceExplicit: namespaceHeader !== void 0,
       principal: "codex",
       sessionKey: mcpSessionId ?? context.sessionKey,
       adapterId: this.id
@@ -28,4 +29,4 @@ var CodexAdapter = class {
 export {
   CodexAdapter
 };
-//# sourceMappingURL=chunk-RSUYKGGZ.js.map
+//# sourceMappingURL=chunk-7RKSJVOQ.js.map

package/dist/{chunk-RSUYKGGZ.js.map → chunk-7RKSJVOQ.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/adapters/codex.ts"],"sourcesContent":["import { headerValue, type AdapterContext, type EngramAdapter, type ResolvedIdentity } from \"./types.js\";\n\n/**\n * Codex CLI adapter.\n *\n * Detection: Codex CLI sends clientInfo.name = \"codex-mcp-client\" and\n * clientInfo.title = \"Codex\" in the MCP initialize handshake. It does\n * NOT send agent names, session IDs, or project context automatically.\n *\n * For Streamable HTTP transport, Codex supports custom headers via\n * http_headers in ~/.codex/config.toml:\n *   [mcp_servers.engram]\n *   url = \"http://localhost:4318/mcp\"\n *   http_headers = { \"X-Engram-Namespace\" = \"my-project\" }\n *\n * Principal overrides are intentionally handled only by the HTTP server's\n * trustPrincipalHeader gate. Adapters must not independently trust\n * X-Engram-Principal.\n *\n * Codex also sends a custom \"sandbox_state\" RPC notification after\n * init with sandbox policy info (read-only/writable paths).\n */\nexport class CodexAdapter implements EngramAdapter {\n  readonly id = \"codex\";\n\n  matches(context: AdapterContext): boolean {\n    // Primary: MCP clientInfo from initialize handshake (exact match)\n    if (context.clientInfo?.name === \"codex-mcp-client\") return true;\n\n    // Also match on clientInfo name containing \"codex\" for forward compat\n    const clientName = context.clientInfo?.name?.toLowerCase() ?? \"\";\n    if (clientName.includes(\"codex\") && clientName !== \"codex-mcp-client\") return true;\n\n    // Fallback: user-configured client identifier header\n    const clientId = headerValue(context.headers, \"x-engram-client-id\");\n    if (clientId?.toLowerCase() === \"codex\") return true;\n\n    return false;\n  }\n\n  resolveIdentity(context: AdapterContext): ResolvedIdentity {\n    // MCP session ID (standard MCP header, server-assigned)\n    const mcpSessionId = headerValue(context.headers, \"mcp-session-id\");\n\n    // Namespace: explicit header > default\n    const namespace = headerValue(context.headers, \"x-engram-namespace\")\n      || \"codex\";\n\n    return {\n      namespace,\n      principal: \"codex\",\n      sessionKey: mcpSessionId ?? context.sessionKey,\n      adapterId: this.id,\n    };\n  }\n}\n"],"mappings":";;;;;AAsBO,IAAM,eAAN,MAA4C;AAAA,EACxC,KAAK;AAAA,EAEd,QAAQ,SAAkC;AAExC,QAAI,QAAQ,YAAY,SAAS,mBAAoB,QAAO;AAG5D,UAAM,aAAa,QAAQ,YAAY,MAAM,YAAY,KAAK;AAC9D,QAAI,WAAW,SAAS,OAAO,KAAK,eAAe,mBAAoB,QAAO;AAG9E,UAAM,WAAW,YAAY,QAAQ,SAAS,oBAAoB;AAClE,QAAI,UAAU,YAAY,MAAM,QAAS,QAAO;AAEhD,WAAO;AAAA,EACT;AAAA,EAEA,gBAAgB,SAA2C;AAEzD,UAAM,eAAe,YAAY,QAAQ,SAAS,gBAAgB;AAGlE,UAAM,YAAY,YAAY,QAAQ,SAAS,oBAAoB,KAC9D;AAEL,WAAO;AAAA,MACL;AAAA,MACA,WAAW;AAAA,MACX,YAAY,gBAAgB,QAAQ;AAAA,MACpC,WAAW,KAAK;AAAA,IAClB;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../src/adapters/codex.ts"],"sourcesContent":["import { headerValue, type AdapterContext, type EngramAdapter, type ResolvedIdentity } from \"./types.js\";\n\n/**\n * Codex CLI adapter.\n *\n * Detection: Codex CLI sends clientInfo.name = \"codex-mcp-client\" and\n * clientInfo.title = \"Codex\" in the MCP initialize handshake. It does\n * NOT send agent names, session IDs, or project context automatically.\n *\n * For Streamable HTTP transport, Codex supports custom headers via\n * http_headers in ~/.codex/config.toml:\n *   [mcp_servers.engram]\n *   url = \"http://localhost:4318/mcp\"\n *   http_headers = { \"X-Engram-Namespace\" = \"my-project\" }\n *\n * Principal overrides are intentionally handled only by the HTTP server's\n * trustPrincipalHeader gate. Adapters must not independently trust\n * X-Engram-Principal.\n *\n * Codex also sends a custom \"sandbox_state\" RPC notification after\n * init with sandbox policy info (read-only/writable paths).\n */\nexport class CodexAdapter implements EngramAdapter {\n  readonly id = \"codex\";\n\n  matches(context: AdapterContext): boolean {\n    // Primary: MCP clientInfo from initialize handshake (exact match)\n    if (context.clientInfo?.name === \"codex-mcp-client\") return true;\n\n    // Also match on clientInfo name containing \"codex\" for forward compat\n    const clientName = context.clientInfo?.name?.toLowerCase() ?? \"\";\n    if (clientName.includes(\"codex\") && clientName !== \"codex-mcp-client\") return true;\n\n    // Fallback: user-configured client identifier header\n    const clientId = headerValue(context.headers, \"x-engram-client-id\");\n    if (clientId?.toLowerCase() === \"codex\") return true;\n\n    return false;\n  }\n\n  resolveIdentity(context: AdapterContext): ResolvedIdentity {\n    // MCP session ID (standard MCP header, server-assigned)\n    const mcpSessionId = headerValue(context.headers, \"mcp-session-id\");\n\n    // Namespace: explicit header > default\n    const namespaceHeader = headerValue(context.headers, \"x-engram-namespace\");\n\n    return {\n      namespace: namespaceHeader ?? \"codex\",\n      namespaceExplicit: namespaceHeader !== undefined,\n      principal: \"codex\",\n      sessionKey: mcpSessionId ?? context.sessionKey,\n      adapterId: this.id,\n    };\n  }\n}\n"],"mappings":";;;;;AAsBO,IAAM,eAAN,MAA4C;AAAA,EACxC,KAAK;AAAA,EAEd,QAAQ,SAAkC;AAExC,QAAI,QAAQ,YAAY,SAAS,mBAAoB,QAAO;AAG5D,UAAM,aAAa,QAAQ,YAAY,MAAM,YAAY,KAAK;AAC9D,QAAI,WAAW,SAAS,OAAO,KAAK,eAAe,mBAAoB,QAAO;AAG9E,UAAM,WAAW,YAAY,QAAQ,SAAS,oBAAoB;AAClE,QAAI,UAAU,YAAY,MAAM,QAAS,QAAO;AAEhD,WAAO;AAAA,EACT;AAAA,EAEA,gBAAgB,SAA2C;AAEzD,UAAM,eAAe,YAAY,QAAQ,SAAS,gBAAgB;AAGlE,UAAM,kBAAkB,YAAY,QAAQ,SAAS,oBAAoB;AAEzE,WAAO;AAAA,MACL,WAAW,mBAAmB;AAAA,MAC9B,mBAAmB,oBAAoB;AAAA,MACvC,WAAW;AAAA,MACX,YAAY,gBAAgB,QAAQ;AAAA,MACpC,WAAW,KAAK;AAAA,IAClB;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-4NSLQ7EU.js → chunk-ANPRNTPT.js}

@@ -74,11 +74,11 @@ function globToRegExp(glob) {
     if (ch === "*") {
       if (glob[i + 1] === "*") {
         if (glob[i + 2] === "/") {
-          source += "(?:.*/)?";
+          source += "(?:[\\s\\S]*/)?";
           i += 2;
           continue;
         }
-        source += ".*";
+        source += "[\\s\\S]*";
         i += 1;
         continue;
       }
@@ -134,4 +134,4 @@ export {
   compileOfflineSyncExcludeGlobs,
   parseOfflineSyncExcludes
 };
-//# sourceMappingURL=chunk-4NSLQ7EU.js.map
+//# sourceMappingURL=chunk-ANPRNTPT.js.map

package/dist/{chunk-4NSLQ7EU.js.map → chunk-ANPRNTPT.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/offline-sync-exclude-globs.ts"],"sourcesContent":["// Issue #1786: node-local runtime state that each node rebuilds from synced\n// records. Pushing these wastes bandwidth, corrupts the remote's live state\n// dir, and trips the large-file push retry loop on a live SQLite database.\n// Extracted from offline-sync.ts (issue #1995) so the god-file line-count\n// ratchet does not grow when the list gains entries; behavior is unchanged.\n/**\n * Directory-name prefix for the transient plaintext staging dir the CLI offline\n * decrypt path (`offline-storage-io.ts`) creates under the memory root when it\n * must materialize a decrypted secure-store file before hashing/pushing (#2033\n * P1). Shared here so the hard-exclude glob below and the CLI's `mkdtemp` prefix\n * can never drift apart: a crash-orphaned staging dir must NEVER be enumerated\n * into an offline snapshot, or decrypted secure-store plaintext would leak into\n * the remote push.\n */\nexport const OFFLINE_DECRYPT_STAGING_DIR_PREFIX = \".remnic-offline-decrypt-\";\n\nexport const DEFAULT_OFFLINE_SYNC_EXCLUDE_GLOBS: readonly string[] = [\n  // Leading `**/` matches zero or more segments, so each pattern covers both\n  // the root `state/` dir AND per-namespace `namespaces/<ns>/state/` dirs\n  // (Cursor review on PR #1793: multi-namespace deployments previously kept\n  // pushing their namespaced live sqlite files).\n  \"**/state/*.sqlite\",\n  \"**/state/*.sqlite-*\",\n  \"**/state/index_tags.json\",\n  \"**/state/entity-mention-index.json\",\n  \"**/state/memory-governance/runs/**\",\n  // Rotated recall-impression archives (issue #1910). The active\n  // recall_impressions.jsonl stays remote-authoritative; only the .1..N\n  // archives and the .lock are node-local and never pushed/hashed.\n  \"**/state/recall_impressions.jsonl.*\",\n  // Durable recall-impression pending spill directory (issue #2033). Node-local:\n  // an impression spills a per-event file here when its rotation lock cannot be\n  // acquired, and the next lock holder folds them back into the synced active\n  // recall_impressions.jsonl. The `.*` glob above matches the directory name but\n  // not its children, so exclude the contents explicitly.\n  \"**/state/recall_impressions.jsonl.pending.d/**\",\n  // Durable lifecycle-append pending spill directory (issue #2033). Node-local:\n  // an append spills a per-event file here when it cannot get the ledger lock,\n  // and the next lock holder folds them back into the synced\n  // memory-lifecycle-ledger.jsonl. Pushing them would duplicate rows remotely.\n  // The offline-sync snapshot entrypoints drain this queue first (access-service\n  // `drainPendingLifecycleForSync` -> `StorageManager.drainPendingMemoryLifecycleEventsForSync`),\n  // aborting the snapshot when durable rows cannot be folded, so excluding the\n  // dir never silently drops append-only lifecycle history (promotions/imports).\n  \"**/state/memory-lifecycle-ledger.jsonl.pending.d/**\",\n  // The active lifecycle ledger lock is node-local and must never be\n  // transferred to another node during an offline snapshot.\n  \"**/state/memory-lifecycle-ledger.jsonl.lock\",\n  // Transient plaintext decrypt staging (issue #2033 P1). The CLI offline\n  // decrypt path materializes a decrypted secure-store file under an owner-only\n  // `<OFFLINE_DECRYPT_STAGING_DIR_PREFIX>*` dir before hashing/pushing, removing\n  // it in a `finally`. A hard crash between create and cleanup would otherwise\n  // let a later snapshot walk `<prefix>*/content` and push decrypted secure-store\n  // plaintext to the remote. Exclude the dir and its contents unconditionally so\n  // a crash-orphan can never be enumerated into a snapshot; the leading `**/`\n  // matches the root-level dir (zero segments) and any nested placement.\n  \"**/.remnic-offline-decrypt-*/**\",\n  // Embedding-index transaction leftovers (issue #3146, PR #3148). The\n  // identity-replacement backup (`embeddings.pre-replace.tmp`) can hold a\n  // full obsolete generation and `embeddings.staging.tmp-*` holds a\n  // partially staged one; both are node-local recovery state that must\n  // never be enumerated into a snapshot. The demoted legacy recovery file\n  // (`embeddings.json.pre-migration.tmp-*`) is likewise node-local.\n  \"**/state/embeddings.pre-replace.tmp/**\",\n  \"**/state/embeddings.staging.tmp-*/**\",\n  \"**/state/embeddings.json.pre-migration.tmp-*\",\n  \"**/namespaces/*/state/embeddings.pre-replace.tmp/**\",\n  \"**/namespaces/*/state/embeddings.staging.tmp-*/**\",\n  \"**/namespaces/*/state/embeddings.json.pre-migration.tmp-*\",\n];\n\n\nconst DEFAULT_OFFLINE_SYNC_EXCLUDE_REGEXPS: readonly RegExp[] =\n  DEFAULT_OFFLINE_SYNC_EXCLUDE_GLOBS.map((glob) => globToRegExp(glob));\n\n/**\n * Precompiled-once default-exclude check for the snapshot enumeration hot\n * path (Kilo review, PR #1793). Moved here from offline-sync.ts with the\n * glob list so the two can never drift (issue #1995).\n */\nexport function matchesOfflineSyncDefaultExclude(relPosix: string): boolean {\n  for (const regexp of DEFAULT_OFFLINE_SYNC_EXCLUDE_REGEXPS) {\n    if (regexp.test(relPosix)) return true;\n  }\n  return false;\n}\n\nexport function globToRegExp(glob: string): RegExp {\n  if (typeof glob !== \"string\" || glob.length === 0) {\n    throw new Error(\"offlineSyncExcludes entry must be a non-empty string\");\n  }\n  if (glob.includes(\"\\0\")) {\n    throw new Error(\"offlineSyncExcludes entry must not contain NUL bytes\");\n  }\n  let source = \"\";\n  for (let i = 0; i < glob.length; i += 1) {\n    const ch = glob[i];\n    if (ch === \"*\") {\n      if (glob[i + 1] === \"*\") {\n        // `**` is cross-segment wherever it appears:\n        //   leading `**/`  -> zero or more whole segments\n        //   `/**` at end   -> everything under the directory\n        //   `a/**/b`       -> any depth between segments\n        // (Cursor review on PR #1793: trailing `scratch/**` must match\n        // nested `scratch/a/b.md`, matching the offline-mode guide.)\n        if (glob[i + 2] === \"/\") {\n          source += \"(?:.*/)?\";\n          i += 2;\n          continue;\n        }\n        source += \".*\";\n        i += 1;\n        continue;\n      }\n      source += \"[^/]*\";\n      continue;\n    }\n    if (ch === \"?\") {\n      source += \"[^/]\";\n      continue;\n    }\n    if (ch === \"/\") {\n      source += \"/\";\n      continue;\n    }\n    source += ch.replace(/[\\\\^$.+()|{}\\[\\]]/g, \"\\\\$&\");\n  }\n  return new RegExp(`^${source}$`);\n}\n\nexport function compileOfflineSyncExcludeGlobs(\n  globs: readonly unknown[],\n): RegExp[] {\n  const out: RegExp[] = [];\n  for (const entry of globs) {\n    if (typeof entry !== \"string\" || entry.length === 0) {\n      throw new Error(\"offlineSyncExcludes must contain only non-empty strings\");\n    }\n    out.push(globToRegExp(entry));\n  }\n  return out;\n}\n\n/**\n * Validate the operator-supplied offline-sync exclude list (#1786).\n * Rejects loudly instead of silently defaulting (CLAUDE.md rule 39):\n * a misspelled key value must fail config parse, not be ignored.\n * Lives next to the glob compiler so config.ts only carries the call.\n */\nexport function parseOfflineSyncExcludes(raw: unknown): string[] {\n  if (raw === undefined || raw === null) return [];\n  if (!Array.isArray(raw)) {\n    throw new Error(\n      `offlineSyncExcludes must be an array of non-empty glob strings; got ${typeof raw}`,\n    );\n  }\n  for (const entry of raw) {\n    if (typeof entry !== \"string\" || entry.trim().length === 0) {\n      throw new Error(\n        \"offlineSyncExcludes must contain only non-empty glob strings\",\n      );\n    }\n  }\n  const globs = raw.map((entry) => (entry as string).trim());\n  // Compile-check every glob now so a bad pattern fails at parse time\n  // rather than mid-sync. compileOfflineSyncExcludeGlobs throws with a\n  // per-entry message.\n  compileOfflineSyncExcludeGlobs(globs);\n  return globs;\n}\n"],"mappings":";AAcO,IAAM,qCAAqC;AAE3C,IAAM,qCAAwD;AAAA;AAAA;AAAA;AAAA;AAAA,EAKnE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA;AAAA,EAIA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA;AAAA;AAAA;AAAA,EAGA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGA,IAAM,uCACJ,mCAAmC,IAAI,CAAC,SAAS,aAAa,IAAI,CAAC;AAO9D,SAAS,iCAAiC,UAA2B;AAC1E,aAAW,UAAU,sCAAsC;AACzD,QAAI,OAAO,KAAK,QAAQ,EAAG,QAAO;AAAA,EACpC;AACA,SAAO;AACT;AAEO,SAAS,aAAa,MAAsB;AACjD,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,GAAG;AACjD,UAAM,IAAI,MAAM,sDAAsD;AAAA,EACxE;AACA,MAAI,KAAK,SAAS,IAAI,GAAG;AACvB,UAAM,IAAI,MAAM,sDAAsD;AAAA,EACxE;AACA,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,GAAG;AACvC,UAAM,KAAK,KAAK,CAAC;AACjB,QAAI,OAAO,KAAK;AACd,UAAI,KAAK,IAAI,CAAC,MAAM,KAAK;AAOvB,YAAI,KAAK,IAAI,CAAC,MAAM,KAAK;AACvB,oBAAU;AACV,eAAK;AACL;AAAA,QACF;AACA,kBAAU;AACV,aAAK;AACL;AAAA,MACF;AACA,gBAAU;AACV;AAAA,IACF;AACA,QAAI,OAAO,KAAK;AACd,gBAAU;AACV;AAAA,IACF;AACA,QAAI,OAAO,KAAK;AACd,gBAAU;AACV;AAAA,IACF;AACA,cAAU,GAAG,QAAQ,sBAAsB,MAAM;AAAA,EACnD;AACA,SAAO,IAAI,OAAO,IAAI,MAAM,GAAG;AACjC;AAEO,SAAS,+BACd,OACU;AACV,QAAM,MAAgB,CAAC;AACvB,aAAW,SAAS,OAAO;AACzB,QAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG;AACnD,YAAM,IAAI,MAAM,yDAAyD;AAAA,IAC3E;AACA,QAAI,KAAK,aAAa,KAAK,CAAC;AAAA,EAC9B;AACA,SAAO;AACT;AAQO,SAAS,yBAAyB,KAAwB;AAC/D,MAAI,QAAQ,UAAa,QAAQ,KAAM,QAAO,CAAC;AAC/C,MAAI,CAAC,MAAM,QAAQ,GAAG,GAAG;AACvB,UAAM,IAAI;AAAA,MACR,uEAAuE,OAAO,GAAG;AAAA,IACnF;AAAA,EACF;AACA,aAAW,SAAS,KAAK;AACvB,QAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,WAAW,GAAG;AAC1D,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,QAAM,QAAQ,IAAI,IAAI,CAAC,UAAW,MAAiB,KAAK,CAAC;AAIzD,iCAA+B,KAAK;AACpC,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/offline-sync-exclude-globs.ts"],"sourcesContent":["// Issue #1786: node-local runtime state that each node rebuilds from synced\n// records. Pushing these wastes bandwidth, corrupts the remote's live state\n// dir, and trips the large-file push retry loop on a live SQLite database.\n// Extracted from offline-sync.ts (issue #1995) so the god-file line-count\n// ratchet does not grow when the list gains entries; behavior is unchanged.\n/**\n * Directory-name prefix for the transient plaintext staging dir the CLI offline\n * decrypt path (`offline-storage-io.ts`) creates under the memory root when it\n * must materialize a decrypted secure-store file before hashing/pushing (#2033\n * P1). Shared here so the hard-exclude glob below and the CLI's `mkdtemp` prefix\n * can never drift apart: a crash-orphaned staging dir must NEVER be enumerated\n * into an offline snapshot, or decrypted secure-store plaintext would leak into\n * the remote push.\n */\nexport const OFFLINE_DECRYPT_STAGING_DIR_PREFIX = \".remnic-offline-decrypt-\";\n\nexport const DEFAULT_OFFLINE_SYNC_EXCLUDE_GLOBS: readonly string[] = [\n  // Leading `**/` matches zero or more segments, so each pattern covers both\n  // the root `state/` dir AND per-namespace `namespaces/<ns>/state/` dirs\n  // (Cursor review on PR #1793: multi-namespace deployments previously kept\n  // pushing their namespaced live sqlite files).\n  \"**/state/*.sqlite\",\n  \"**/state/*.sqlite-*\",\n  \"**/state/index_tags.json\",\n  \"**/state/entity-mention-index.json\",\n  \"**/state/memory-governance/runs/**\",\n  // Rotated recall-impression archives (issue #1910). The active\n  // recall_impressions.jsonl stays remote-authoritative; only the .1..N\n  // archives and the .lock are node-local and never pushed/hashed.\n  \"**/state/recall_impressions.jsonl.*\",\n  // Durable recall-impression pending spill directory (issue #2033). Node-local:\n  // an impression spills a per-event file here when its rotation lock cannot be\n  // acquired, and the next lock holder folds them back into the synced active\n  // recall_impressions.jsonl. The `.*` glob above matches the directory name but\n  // not its children, so exclude the contents explicitly.\n  \"**/state/recall_impressions.jsonl.pending.d/**\",\n  // Durable lifecycle-append pending spill directory (issue #2033). Node-local:\n  // an append spills a per-event file here when it cannot get the ledger lock,\n  // and the next lock holder folds them back into the synced\n  // memory-lifecycle-ledger.jsonl. Pushing them would duplicate rows remotely.\n  // The offline-sync snapshot entrypoints drain this queue first (access-service\n  // `drainPendingLifecycleForSync` -> `StorageManager.drainPendingMemoryLifecycleEventsForSync`),\n  // aborting the snapshot when durable rows cannot be folded, so excluding the\n  // dir never silently drops append-only lifecycle history (promotions/imports).\n  \"**/state/memory-lifecycle-ledger.jsonl.pending.d/**\",\n  // The active lifecycle ledger lock is node-local and must never be\n  // transferred to another node during an offline snapshot.\n  \"**/state/memory-lifecycle-ledger.jsonl.lock\",\n  // Transient plaintext decrypt staging (issue #2033 P1). The CLI offline\n  // decrypt path materializes a decrypted secure-store file under an owner-only\n  // `<OFFLINE_DECRYPT_STAGING_DIR_PREFIX>*` dir before hashing/pushing, removing\n  // it in a `finally`. A hard crash between create and cleanup would otherwise\n  // let a later snapshot walk `<prefix>*/content` and push decrypted secure-store\n  // plaintext to the remote. Exclude the dir and its contents unconditionally so\n  // a crash-orphan can never be enumerated into a snapshot; the leading `**/`\n  // matches the root-level dir (zero segments) and any nested placement.\n  \"**/.remnic-offline-decrypt-*/**\",\n  // Embedding-index transaction leftovers (issue #3146, PR #3148). The\n  // identity-replacement backup (`embeddings.pre-replace.tmp`) can hold a\n  // full obsolete generation and `embeddings.staging.tmp-*` holds a\n  // partially staged one; both are node-local recovery state that must\n  // never be enumerated into a snapshot. The demoted legacy recovery file\n  // (`embeddings.json.pre-migration.tmp-*`) is likewise node-local.\n  \"**/state/embeddings.pre-replace.tmp/**\",\n  \"**/state/embeddings.staging.tmp-*/**\",\n  \"**/state/embeddings.json.pre-migration.tmp-*\",\n  \"**/namespaces/*/state/embeddings.pre-replace.tmp/**\",\n  \"**/namespaces/*/state/embeddings.staging.tmp-*/**\",\n  \"**/namespaces/*/state/embeddings.json.pre-migration.tmp-*\",\n];\n\n\nconst DEFAULT_OFFLINE_SYNC_EXCLUDE_REGEXPS: readonly RegExp[] =\n  DEFAULT_OFFLINE_SYNC_EXCLUDE_GLOBS.map((glob) => globToRegExp(glob));\n\n/**\n * Precompiled-once default-exclude check for the snapshot enumeration hot\n * path (Kilo review, PR #1793). Moved here from offline-sync.ts with the\n * glob list so the two can never drift (issue #1995).\n */\nexport function matchesOfflineSyncDefaultExclude(relPosix: string): boolean {\n  for (const regexp of DEFAULT_OFFLINE_SYNC_EXCLUDE_REGEXPS) {\n    if (regexp.test(relPosix)) return true;\n  }\n  return false;\n}\n\nexport function globToRegExp(glob: string): RegExp {\n  if (typeof glob !== \"string\" || glob.length === 0) {\n    throw new Error(\"offlineSyncExcludes entry must be a non-empty string\");\n  }\n  if (glob.includes(\"\\0\")) {\n    throw new Error(\"offlineSyncExcludes entry must not contain NUL bytes\");\n  }\n  let source = \"\";\n  for (let i = 0; i < glob.length; i += 1) {\n    const ch = glob[i];\n    if (ch === \"*\") {\n      if (glob[i + 1] === \"*\") {\n        // `**` is cross-segment wherever it appears:\n        //   leading `**/`  -> zero or more whole segments\n        //   `/**` at end   -> everything under the directory\n        //   `a/**/b`       -> any depth between segments\n        // (Cursor review on PR #1793: trailing `scratch/**` must match\n        // nested `scratch/a/b.md`, matching the offline-mode guide.)\n        if (glob[i + 2] === \"/\") {\n          source += \"(?:[\\\\s\\\\S]*/)?\";\n          i += 2;\n          continue;\n        }\n        source += \"[\\\\s\\\\S]*\";\n        i += 1;\n        continue;\n      }\n      source += \"[^/]*\";\n      continue;\n    }\n    if (ch === \"?\") {\n      source += \"[^/]\";\n      continue;\n    }\n    if (ch === \"/\") {\n      source += \"/\";\n      continue;\n    }\n    source += ch.replace(/[\\\\^$.+()|{}\\[\\]]/g, \"\\\\$&\");\n  }\n  return new RegExp(`^${source}$`);\n}\n\n/** Match relative POSIX paths: `*` stays within a segment; `**` crosses separators and matches every path alone. */\nexport function compileOfflineSyncExcludeGlobs(\n  globs: readonly unknown[],\n): RegExp[] {\n  const out: RegExp[] = [];\n  for (const entry of globs) {\n    if (typeof entry !== \"string\" || entry.length === 0) {\n      throw new Error(\"offlineSyncExcludes must contain only non-empty strings\");\n    }\n    out.push(globToRegExp(entry));\n  }\n  return out;\n}\n\n/**\n * Validate the operator-supplied offline-sync exclude list (#1786).\n * Rejects loudly instead of silently defaulting (CLAUDE.md rule 39):\n * a misspelled key value must fail config parse, not be ignored.\n * Lives next to the glob compiler so config.ts only carries the call.\n */\nexport function parseOfflineSyncExcludes(raw: unknown): string[] {\n  if (raw === undefined || raw === null) return [];\n  if (!Array.isArray(raw)) {\n    throw new Error(\n      `offlineSyncExcludes must be an array of non-empty glob strings; got ${typeof raw}`,\n    );\n  }\n  for (const entry of raw) {\n    if (typeof entry !== \"string\" || entry.trim().length === 0) {\n      throw new Error(\n        \"offlineSyncExcludes must contain only non-empty glob strings\",\n      );\n    }\n  }\n  const globs = raw.map((entry) => (entry as string).trim());\n  // Compile-check every glob now so a bad pattern fails at parse time\n  // rather than mid-sync. compileOfflineSyncExcludeGlobs throws with a\n  // per-entry message.\n  compileOfflineSyncExcludeGlobs(globs);\n  return globs;\n}\n"],"mappings":";AAcO,IAAM,qCAAqC;AAE3C,IAAM,qCAAwD;AAAA;AAAA;AAAA;AAAA;AAAA,EAKnE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA;AAAA,EAIA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA;AAAA;AAAA;AAAA,EAGA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGA,IAAM,uCACJ,mCAAmC,IAAI,CAAC,SAAS,aAAa,IAAI,CAAC;AAO9D,SAAS,iCAAiC,UAA2B;AAC1E,aAAW,UAAU,sCAAsC;AACzD,QAAI,OAAO,KAAK,QAAQ,EAAG,QAAO;AAAA,EACpC;AACA,SAAO;AACT;AAEO,SAAS,aAAa,MAAsB;AACjD,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,GAAG;AACjD,UAAM,IAAI,MAAM,sDAAsD;AAAA,EACxE;AACA,MAAI,KAAK,SAAS,IAAI,GAAG;AACvB,UAAM,IAAI,MAAM,sDAAsD;AAAA,EACxE;AACA,MAAI,SAAS;AACb,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,GAAG;AACvC,UAAM,KAAK,KAAK,CAAC;AACjB,QAAI,OAAO,KAAK;AACd,UAAI,KAAK,IAAI,CAAC,MAAM,KAAK;AAOvB,YAAI,KAAK,IAAI,CAAC,MAAM,KAAK;AACvB,oBAAU;AACV,eAAK;AACL;AAAA,QACF;AACA,kBAAU;AACV,aAAK;AACL;AAAA,MACF;AACA,gBAAU;AACV;AAAA,IACF;AACA,QAAI,OAAO,KAAK;AACd,gBAAU;AACV;AAAA,IACF;AACA,QAAI,OAAO,KAAK;AACd,gBAAU;AACV;AAAA,IACF;AACA,cAAU,GAAG,QAAQ,sBAAsB,MAAM;AAAA,EACnD;AACA,SAAO,IAAI,OAAO,IAAI,MAAM,GAAG;AACjC;AAGO,SAAS,+BACd,OACU;AACV,QAAM,MAAgB,CAAC;AACvB,aAAW,SAAS,OAAO;AACzB,QAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG;AACnD,YAAM,IAAI,MAAM,yDAAyD;AAAA,IAC3E;AACA,QAAI,KAAK,aAAa,KAAK,CAAC;AAAA,EAC9B;AACA,SAAO;AACT;AAQO,SAAS,yBAAyB,KAAwB;AAC/D,MAAI,QAAQ,UAAa,QAAQ,KAAM,QAAO,CAAC;AAC/C,MAAI,CAAC,MAAM,QAAQ,GAAG,GAAG;AACvB,UAAM,IAAI;AAAA,MACR,uEAAuE,OAAO,GAAG;AAAA,IACnF;AAAA,EACF;AACA,aAAW,SAAS,KAAK;AACvB,QAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,WAAW,GAAG;AAC1D,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,QAAM,QAAQ,IAAI,IAAI,CAAC,UAAW,MAAiB,KAAK,CAAC;AAIzD,iCAA+B,KAAK;AACpC,SAAO;AACT;","names":[]}

package/dist/{chunk-6BG364RN.js → chunk-AWEHMKIO.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-A7AISUJI.js";
 import {
   deepRecallRequestSchema
-} from "./chunk-3BTHXB7Z.js";
+} from "./chunk-JAQXKNQV.js";
 import {
   EngramAccessInputError
 } from "./chunk-3MUKQQ7A.js";
@@ -40,4 +40,4 @@ async function respondDeepRecall(req, res, respondJson, readJsonBody, service, s
 export {
   respondDeepRecall
 };
-//# sourceMappingURL=chunk-6BG364RN.js.map
+//# sourceMappingURL=chunk-AWEHMKIO.js.map

package/dist/{chunk-AF5PW35O.js → chunk-FQJ4YXJO.js}

@@ -11,7 +11,7 @@ import {
 } from "./chunk-2JRB3Z5N.js";
 import {
   iterateOfflineSyncSnapshotFileRecords
-} from "./chunk-IVEHY2VT.js";
+} from "./chunk-VQEOBVF2.js";
 import {
   createPersistedSupportPassportPrivateFileExclusion
 } from "./chunk-PWPIERBM.js";
@@ -250,4 +250,4 @@ export {
   retainExcludedClassifications,
   createOfflineSyncManifestStream
 };
-//# sourceMappingURL=chunk-AF5PW35O.js.map
+//# sourceMappingURL=chunk-FQJ4YXJO.js.map

package/dist/{chunk-42NQ7AVG.js → chunk-HCAGBFE7.js}

@@ -1,6 +1,6 @@
 import {
   headerValue
-} from "./chunk-7RXCMVFQ.js";
+} from "./chunk-NJAIR57U.js";
 
 // src/adapters/hermes.ts
 var HermesAdapter = class {
@@ -15,9 +15,10 @@ var HermesAdapter = class {
   }
   resolveIdentity(context) {
     const sessionId = headerValue(context.headers, "x-hermes-session-id");
-    const namespace = headerValue(context.headers, "x-engram-namespace") || "hermes";
+    const namespaceHeader = headerValue(context.headers, "x-engram-namespace");
     return {
-      namespace,
+      namespace: namespaceHeader ?? "hermes",
+      namespaceExplicit: namespaceHeader !== void 0,
       principal: "hermes-agent",
       sessionKey: sessionId ?? context.sessionKey,
       adapterId: this.id
@@ -28,4 +29,4 @@ var HermesAdapter = class {
 export {
   HermesAdapter
 };
-//# sourceMappingURL=chunk-42NQ7AVG.js.map
+//# sourceMappingURL=chunk-HCAGBFE7.js.map

package/dist/{chunk-42NQ7AVG.js.map → chunk-HCAGBFE7.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/adapters/hermes.ts"],"sourcesContent":["import { headerValue, type AdapterContext, type EngramAdapter, type ResolvedIdentity } from \"./types.js\";\n\n/**\n * Hermes Agent adapter.\n *\n * Detection: Hermes supports both MCP (via config.yaml mcp_servers)\n * and a dedicated MemoryProvider plugin protocol (Python). The MCP\n * client name is not yet publicly documented, so detection uses:\n *\n * 1. X-Hermes-Session-Id header — confirmed in v0.7.0 API server\n * 2. User-configured headers in Hermes MCP config:\n *      mcp_servers:\n *        engram:\n *          url: \"http://localhost:4318/mcp\"\n *          headers:\n *            X-Engram-Client-Id: \"hermes\"\n *            X-Engram-Namespace: \"my-profile\"\n * 3. MCP clientInfo name containing \"hermes\" (for forward compat)\n *\n * Hermes profiles isolate agent state under ~/.hermes/profiles/<name>/.\n * Each profile can map to a separate Engram namespace via the\n * X-Engram-Namespace header.\n *\n * For deeper integration, Hermes v0.7.0+ supports MemoryProvider\n * plugins (Python protocol with initialize/enrich_turn/sync_turn/\n * shutdown). A Python Engram MemoryProvider plugin would be the\n * optimal integration path — see docs/integration/hermes-setup.md.\n */\nexport class HermesAdapter implements EngramAdapter {\n  readonly id = \"hermes\";\n\n  matches(context: AdapterContext): boolean {\n    // Confirmed header from Hermes v0.7.0 API server\n    if (headerValue(context.headers, \"x-hermes-session-id\")) return true;\n\n    // User-configured client identifier header\n    const clientId = headerValue(context.headers, \"x-engram-client-id\");\n    if (clientId?.toLowerCase() === \"hermes\") return true;\n\n    // MCP clientInfo (for forward compat when Hermes documents its name)\n    const clientName = context.clientInfo?.name?.toLowerCase() ?? \"\";\n    if (clientName.includes(\"hermes\")) return true;\n\n    return false;\n  }\n\n  resolveIdentity(context: AdapterContext): ResolvedIdentity {\n    const sessionId = headerValue(context.headers, \"x-hermes-session-id\");\n\n    const namespace = headerValue(context.headers, \"x-engram-namespace\")\n      || \"hermes\";\n\n    return {\n      namespace,\n      principal: \"hermes-agent\",\n      sessionKey: sessionId ?? context.sessionKey,\n      adapterId: this.id,\n    };\n  }\n}\n"],"mappings":";;;;;AA4BO,IAAM,gBAAN,MAA6C;AAAA,EACzC,KAAK;AAAA,EAEd,QAAQ,SAAkC;AAExC,QAAI,YAAY,QAAQ,SAAS,qBAAqB,EAAG,QAAO;AAGhE,UAAM,WAAW,YAAY,QAAQ,SAAS,oBAAoB;AAClE,QAAI,UAAU,YAAY,MAAM,SAAU,QAAO;AAGjD,UAAM,aAAa,QAAQ,YAAY,MAAM,YAAY,KAAK;AAC9D,QAAI,WAAW,SAAS,QAAQ,EAAG,QAAO;AAE1C,WAAO;AAAA,EACT;AAAA,EAEA,gBAAgB,SAA2C;AACzD,UAAM,YAAY,YAAY,QAAQ,SAAS,qBAAqB;AAEpE,UAAM,YAAY,YAAY,QAAQ,SAAS,oBAAoB,KAC9D;AAEL,WAAO;AAAA,MACL;AAAA,MACA,WAAW;AAAA,MACX,YAAY,aAAa,QAAQ;AAAA,MACjC,WAAW,KAAK;AAAA,IAClB;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../src/adapters/hermes.ts"],"sourcesContent":["import { headerValue, type AdapterContext, type EngramAdapter, type ResolvedIdentity } from \"./types.js\";\n\n/**\n * Hermes Agent adapter.\n *\n * Detection: Hermes supports both MCP (via config.yaml mcp_servers)\n * and a dedicated MemoryProvider plugin protocol (Python). The MCP\n * client name is not yet publicly documented, so detection uses:\n *\n * 1. X-Hermes-Session-Id header — confirmed in v0.7.0 API server\n * 2. User-configured headers in Hermes MCP config:\n *      mcp_servers:\n *        engram:\n *          url: \"http://localhost:4318/mcp\"\n *          headers:\n *            X-Engram-Client-Id: \"hermes\"\n *            X-Engram-Namespace: \"my-profile\"\n * 3. MCP clientInfo name containing \"hermes\" (for forward compat)\n *\n * Hermes profiles isolate agent state under ~/.hermes/profiles/<name>/.\n * Each profile can map to a separate Engram namespace via the\n * X-Engram-Namespace header.\n *\n * For deeper integration, Hermes v0.7.0+ supports MemoryProvider\n * plugins (Python protocol with initialize/enrich_turn/sync_turn/\n * shutdown). A Python Engram MemoryProvider plugin would be the\n * optimal integration path — see docs/integration/hermes-setup.md.\n */\nexport class HermesAdapter implements EngramAdapter {\n  readonly id = \"hermes\";\n\n  matches(context: AdapterContext): boolean {\n    // Confirmed header from Hermes v0.7.0 API server\n    if (headerValue(context.headers, \"x-hermes-session-id\")) return true;\n\n    // User-configured client identifier header\n    const clientId = headerValue(context.headers, \"x-engram-client-id\");\n    if (clientId?.toLowerCase() === \"hermes\") return true;\n\n    // MCP clientInfo (for forward compat when Hermes documents its name)\n    const clientName = context.clientInfo?.name?.toLowerCase() ?? \"\";\n    if (clientName.includes(\"hermes\")) return true;\n\n    return false;\n  }\n\n  resolveIdentity(context: AdapterContext): ResolvedIdentity {\n    const sessionId = headerValue(context.headers, \"x-hermes-session-id\");\n\n    const namespaceHeader = headerValue(context.headers, \"x-engram-namespace\");\n\n    return {\n      namespace: namespaceHeader ?? \"hermes\",\n      namespaceExplicit: namespaceHeader !== undefined,\n      principal: \"hermes-agent\",\n      sessionKey: sessionId ?? context.sessionKey,\n      adapterId: this.id,\n    };\n  }\n}\n"],"mappings":";;;;;AA4BO,IAAM,gBAAN,MAA6C;AAAA,EACzC,KAAK;AAAA,EAEd,QAAQ,SAAkC;AAExC,QAAI,YAAY,QAAQ,SAAS,qBAAqB,EAAG,QAAO;AAGhE,UAAM,WAAW,YAAY,QAAQ,SAAS,oBAAoB;AAClE,QAAI,UAAU,YAAY,MAAM,SAAU,QAAO;AAGjD,UAAM,aAAa,QAAQ,YAAY,MAAM,YAAY,KAAK;AAC9D,QAAI,WAAW,SAAS,QAAQ,EAAG,QAAO;AAE1C,WAAO;AAAA,EACT;AAAA,EAEA,gBAAgB,SAA2C;AACzD,UAAM,YAAY,YAAY,QAAQ,SAAS,qBAAqB;AAEpE,UAAM,kBAAkB,YAAY,QAAQ,SAAS,oBAAoB;AAEzE,WAAO;AAAA,MACL,WAAW,mBAAmB;AAAA,MAC9B,mBAAmB,oBAAoB;AAAA,MACvC,WAAW;AAAA,MACX,YAAY,aAAa,QAAQ;AAAA,MACjC,WAAW,KAAK;AAAA,IAClB;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-KYOZ5E6V.js → chunk-HDOWMJKD.js}

@@ -1,7 +1,7 @@
 import {
   SUPPORT_PASSPORT_DRAFT_MAX_CONTENT_CHARACTERS,
   SUPPORT_PASSPORT_DRAFT_MAX_MEMORIES
-} from "./chunk-GXETU7AE.js";
+} from "./chunk-QVYXXOTR.js";
 import {
   SUPPORT_PASSPORT_SOURCE_MEMORY_ID_MAX_LENGTH
 } from "./chunk-PWPIERBM.js";
@@ -343,4 +343,4 @@ export {
   parseSupportPassportModelJob,
   SupportPassportModelBridge
 };
-//# sourceMappingURL=chunk-KYOZ5E6V.js.map
+//# sourceMappingURL=chunk-HDOWMJKD.js.map

package/dist/{chunk-ANGZWYL2.js → chunk-I7BRU753.js}

@@ -46,7 +46,7 @@ import {
 } from "./chunk-2FLFJTCI.js";
 import {
   getOperation
-} from "./chunk-GXETU7AE.js";
+} from "./chunk-QVYXXOTR.js";
 import {
   WHO_KNOWS_MCP_TOOLS
 } from "./chunk-VBNA2JEN.js";
@@ -55,7 +55,7 @@ import {
 } from "./chunk-PO7NXNGC.js";
 import {
   validateRequest
-} from "./chunk-3BTHXB7Z.js";
+} from "./chunk-JAQXKNQV.js";
 import {
   assertOperationAllowed,
   capabilityAllowsOp,
@@ -4023,4 +4023,4 @@ export {
   MCP_MIGRATED_OPERATIONS,
   EngramMcpServer
 };
-//# sourceMappingURL=chunk-ANGZWYL2.js.map
+//# sourceMappingURL=chunk-I7BRU753.js.map

package/dist/{chunk-MZAH3CBT.js → chunk-IKWD4VP7.js}

@@ -1,6 +1,6 @@
 import {
   defineOperation
-} from "./chunk-GXETU7AE.js";
+} from "./chunk-QVYXXOTR.js";
 import {
   EngramAccessInputError
 } from "./chunk-3MUKQQ7A.js";
@@ -92,4 +92,4 @@ defineOperation({
     };
   }
 });
-//# sourceMappingURL=chunk-MZAH3CBT.js.map
+//# sourceMappingURL=chunk-IKWD4VP7.js.map

package/dist/{chunk-HQCUUVG2.js → chunk-J3GJ23IP.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-V7IZKJI3.js";
 import {
   AdapterRegistry
-} from "./chunk-F23U5YE7.js";
+} from "./chunk-2KB7TTAP.js";
 import {
   WriteRateLimiter
 } from "./chunk-TB6CBZ5V.js";
@@ -18,13 +18,13 @@ import {
 } from "./chunk-3HSRWJTC.js";
 import {
   respondDeepRecall
-} from "./chunk-6BG364RN.js";
+} from "./chunk-AWEHMKIO.js";
 import {
   handleSupportPassportOwnerHttp
-} from "./chunk-ZQTYWSO3.js";
+} from "./chunk-ZNEA255W.js";
 import {
   buildSupportPassportPublicRequestHandler
-} from "./chunk-VOZNBQNL.js";
+} from "./chunk-LBU623X7.js";
 import {
   handleMcpGetSse
 } from "./chunk-SRT6SHVZ.js";
@@ -37,10 +37,10 @@ import {
   processChatMessage,
   sessionBelongsToPrincipal,
   subscribeChatTranscript
-} from "./chunk-ANGZWYL2.js";
+} from "./chunk-I7BRU753.js";
 import {
   RelayMissionStoreError
-} from "./chunk-P62DSJUK.js";
+} from "./chunk-3RMJLDMS.js";
 import {
   executeResolution,
   isValidResolutionVerb
@@ -64,7 +64,7 @@ import {
 } from "./chunk-BCGMG2RD.js";
 import {
   respondBriefingHttp
-} from "./chunk-NSKXRTVZ.js";
+} from "./chunk-ST4IBSPL.js";
 import {
   maybeHandleLifecycleFlush
 } from "./chunk-2BPPGNAQ.js";
@@ -75,11 +75,11 @@ import {
   authorizationProbeNamespaces,
   authorizationProbeRequiresPrincipalNamespace,
   probeOperationAuthorization
-} from "./chunk-YHZWVDP7.js";
+} from "./chunk-YHDA3DSO.js";
 import {
   getOperation,
   resolveQueryNamespaceWritablePreflight
-} from "./chunk-GXETU7AE.js";
+} from "./chunk-QVYXXOTR.js";
 import {
   handleWhoKnowsHttpQuery
 } from "./chunk-VBNA2JEN.js";
@@ -94,7 +94,7 @@ import {
 } from "./chunk-QLK3SL7Q.js";
 import {
   validateRequest
-} from "./chunk-3BTHXB7Z.js";
+} from "./chunk-JAQXKNQV.js";
 import {
   peerManifestRevision
 } from "./chunk-N7QV3CMX.js";
@@ -109,7 +109,7 @@ import {
   OFFLINE_SYNC_APPLY_MAX_BODY_BYTES,
   OFFLINE_SYNC_FILE_CONTENT_MAX_CHUNK_BYTES,
   OFFLINE_SYNC_SNAPSHOT_BASE_MAX_BODY_BYTES
-} from "./chunk-IVEHY2VT.js";
+} from "./chunk-VQEOBVF2.js";
 import {
   isDefaultReviewNamespace,
   listPairs,
@@ -118,6 +118,9 @@ import {
 import {
   isRecallDisclosure
 } from "./chunk-RKDSELA3.js";
+import {
+  resolveNamespaceCapabilities
+} from "./chunk-2EMROIXS.js";
 import {
   projectTagProjectId
 } from "./chunk-3Q3N35W7.js";
@@ -1071,6 +1074,10 @@ var EngramAccessHttpServer = class extends ReviewDeckAccessHttpBase {
         principal = adapterIdentity.principal;
       }
       namespace = adapterIdentity.namespace;
+      const config = this.service.configRef;
+      if (adapterIdentity.namespaceExplicit === false && !(config && resolveNamespaceCapabilities(config).namespaces)) {
+        namespace = void 0;
+      }
       sessionKey = adapterIdentity.sessionKey;
     }
     const result = { principal, namespace, sessionKey };
@@ -3557,4 +3564,4 @@ export {
   resolveDefaultAdminConsolePublicDir,
   EngramAccessHttpServer
 };
-//# sourceMappingURL=chunk-HQCUUVG2.js.map
+//# sourceMappingURL=chunk-J3GJ23IP.js.map