@remnic/core 9.69.96 → 9.69.98

package/dist/recall-navigation-operations.js

@@ -1,5 +1,5 @@
-import "./chunk-MZAH3CBT.js";
-import "./chunk-GXETU7AE.js";
+import "./chunk-IKWD4VP7.js";
+import "./chunk-QVYXXOTR.js";
 import "./chunk-W4F3C7N7.js";
 import "./chunk-MPC7TYTZ.js";
 import "./chunk-ZHXSOMYH.js";
@@ -31,7 +31,7 @@ import "./chunk-32HO62I4.js";
 import "./chunk-SOBJ6NEY.js";
 import "./chunk-QPWUG2S3.js";
 import "./chunk-R36IBI2M.js";
-import "./chunk-C6HPNPNK.js";
+import "./chunk-ZK4XGNJ3.js";
 import "./chunk-E6UNM67F.js";
 import "./chunk-6WHJ2EAB.js";
 import "./chunk-AQEJKOKI.js";
@@ -170,13 +170,13 @@ import "./chunk-Z7L72ZHL.js";
 import "./chunk-4O4TKIXQ.js";
 import "./chunk-RMMA44HE.js";
 import "./chunk-SYOIVK7K.js";
-import "./chunk-PH2V7EXZ.js";
+import "./chunk-NWXGLTWN.js";
 import "./chunk-MY7B3HYC.js";
 import "./chunk-353C5UNV.js";
 import "./chunk-5AYUHSAU.js";
 import "./chunk-BT7NVCML.js";
 import "./chunk-PO7NXNGC.js";
-import "./chunk-3BTHXB7Z.js";
+import "./chunk-JAQXKNQV.js";
 import "./chunk-KQAFEZQX.js";
 import "./chunk-WEHSQBFR.js";
 import "./chunk-X7Y7WX73.js";
@@ -187,7 +187,7 @@ import "./chunk-SOAU2OE2.js";
 import "./chunk-BJMBJZ2Y.js";
 import "./chunk-UKJAGEXH.js";
 import "./chunk-FP2373TW.js";
-import "./chunk-AF5PW35O.js";
+import "./chunk-FQJ4YXJO.js";
 import "./chunk-N7QV3CMX.js";
 import "./chunk-PAAJWQH5.js";
 import "./chunk-2JRB3Z5N.js";
@@ -205,13 +205,13 @@ import "./chunk-C7HJ3NEI.js";
 import "./chunk-N4PYB235.js";
 import "./chunk-AW4QUFQF.js";
 import "./chunk-5FVVY2EB.js";
-import "./chunk-IVEHY2VT.js";
+import "./chunk-VQEOBVF2.js";
 import "./chunk-UI3NYK34.js";
 import "./chunk-ETUZFFPU.js";
-import "./chunk-MSAI3Q7D.js";
-import "./chunk-AXGJMDBS.js";
+import "./chunk-3QH4NT72.js";
+import "./chunk-KO4X4WRJ.js";
 import "./chunk-TYT4TEQV.js";
-import "./chunk-4NSLQ7EU.js";
+import "./chunk-ANPRNTPT.js";
 import "./chunk-EFHNFTWB.js";
 import "./chunk-GCGJW34D.js";
 import "./chunk-75PT4N7Q.js";

package/dist/recall-navigation.js

@@ -1,6 +1,6 @@
 import {
   runRecallNavigation
-} from "./chunk-GXETU7AE.js";
+} from "./chunk-QVYXXOTR.js";
 import "./chunk-W4F3C7N7.js";
 import "./chunk-MPC7TYTZ.js";
 import "./chunk-ZHXSOMYH.js";
@@ -32,7 +32,7 @@ import "./chunk-32HO62I4.js";
 import "./chunk-SOBJ6NEY.js";
 import "./chunk-QPWUG2S3.js";
 import "./chunk-R36IBI2M.js";
-import "./chunk-C6HPNPNK.js";
+import "./chunk-ZK4XGNJ3.js";
 import "./chunk-E6UNM67F.js";
 import "./chunk-6WHJ2EAB.js";
 import "./chunk-AQEJKOKI.js";
@@ -171,13 +171,13 @@ import "./chunk-Z7L72ZHL.js";
 import "./chunk-4O4TKIXQ.js";
 import "./chunk-RMMA44HE.js";
 import "./chunk-SYOIVK7K.js";
-import "./chunk-PH2V7EXZ.js";
+import "./chunk-NWXGLTWN.js";
 import "./chunk-MY7B3HYC.js";
 import "./chunk-353C5UNV.js";
 import "./chunk-5AYUHSAU.js";
 import "./chunk-BT7NVCML.js";
 import "./chunk-PO7NXNGC.js";
-import "./chunk-3BTHXB7Z.js";
+import "./chunk-JAQXKNQV.js";
 import "./chunk-KQAFEZQX.js";
 import "./chunk-WEHSQBFR.js";
 import "./chunk-X7Y7WX73.js";
@@ -188,7 +188,7 @@ import "./chunk-SOAU2OE2.js";
 import "./chunk-BJMBJZ2Y.js";
 import "./chunk-UKJAGEXH.js";
 import "./chunk-FP2373TW.js";
-import "./chunk-AF5PW35O.js";
+import "./chunk-FQJ4YXJO.js";
 import "./chunk-N7QV3CMX.js";
 import "./chunk-PAAJWQH5.js";
 import "./chunk-2JRB3Z5N.js";
@@ -206,13 +206,13 @@ import "./chunk-C7HJ3NEI.js";
 import "./chunk-N4PYB235.js";
 import "./chunk-AW4QUFQF.js";
 import "./chunk-5FVVY2EB.js";
-import "./chunk-IVEHY2VT.js";
+import "./chunk-VQEOBVF2.js";
 import "./chunk-UI3NYK34.js";
 import "./chunk-ETUZFFPU.js";
-import "./chunk-MSAI3Q7D.js";
-import "./chunk-AXGJMDBS.js";
+import "./chunk-3QH4NT72.js";
+import "./chunk-KO4X4WRJ.js";
 import "./chunk-TYT4TEQV.js";
-import "./chunk-4NSLQ7EU.js";
+import "./chunk-ANPRNTPT.js";
 import "./chunk-EFHNFTWB.js";
 import "./chunk-GCGJW34D.js";
 import "./chunk-75PT4N7Q.js";

package/dist/resume-bundles.js

@@ -4,12 +4,12 @@ import {
   recordResumeBundle,
   resolveResumeBundleDir,
   validateResumeBundle
-} from "./chunk-A3K2KKSG.js";
+} from "./chunk-PYYQCHJC.js";
 import "./chunk-G7NYVKD6.js";
 import "./chunk-AM4T6CHX.js";
 import "./chunk-KFY3SGN7.js";
 import "./chunk-NHLLKEKK.js";
-import "./chunk-U36GYZ2P.js";
+import "./chunk-55NZVUNI.js";
 import "./chunk-ZKOPY4WW.js";
 import "./chunk-62OKGIJA.js";
 import "./chunk-EUL3S3LE.js";
@@ -135,13 +135,13 @@ import "./chunk-C7HJ3NEI.js";
 import "./chunk-N4PYB235.js";
 import "./chunk-AW4QUFQF.js";
 import "./chunk-5FVVY2EB.js";
-import "./chunk-IVEHY2VT.js";
+import "./chunk-VQEOBVF2.js";
 import "./chunk-UI3NYK34.js";
 import "./chunk-ETUZFFPU.js";
-import "./chunk-MSAI3Q7D.js";
-import "./chunk-AXGJMDBS.js";
+import "./chunk-3QH4NT72.js";
+import "./chunk-KO4X4WRJ.js";
 import "./chunk-TYT4TEQV.js";
-import "./chunk-4NSLQ7EU.js";
+import "./chunk-ANPRNTPT.js";
 import "./chunk-EFHNFTWB.js";
 import "./chunk-GCGJW34D.js";
 import "./chunk-75PT4N7Q.js";

package/dist/support-passport/index.js

@@ -4,7 +4,7 @@ import {
   SUPPORT_PASSPORT_MODEL_RESULT_PATH,
   SupportPassportModelBridge,
   parseSupportPassportModelJob
-} from "../chunk-KYOZ5E6V.js";
+} from "../chunk-HDOWMJKD.js";
 import {
   DEFAULT_SUPPORT_PASSPORT_CONFIG,
   parseSupportPassportConfig
@@ -14,8 +14,8 @@ import {
   buildSupportPassportPublicRequestHandler,
   composeSupportPassportExternalRequestHandlers,
   normalizeSupportPassportNetworkAddress
-} from "../chunk-VOZNBQNL.js";
-import "../chunk-SMLKHXPF.js";
+} from "../chunk-LBU623X7.js";
+import "../chunk-UKWQSPUU.js";
 import {
   SUPPORT_PASSPORT_DRAFT_MAX_CONTENT_CHARACTERS,
   SUPPORT_PASSPORT_DRAFT_MAX_MEMORIES,
@@ -56,7 +56,7 @@ import {
   notifySupportPassportCommitted,
   resolveSupportPassportModelRoutePlan,
   syncDirectoryForDurability
-} from "../chunk-GXETU7AE.js";
+} from "../chunk-QVYXXOTR.js";
 import "../chunk-W4F3C7N7.js";
 import "../chunk-MPC7TYTZ.js";
 import "../chunk-ZHXSOMYH.js";
@@ -88,7 +88,7 @@ import "../chunk-32HO62I4.js";
 import "../chunk-SOBJ6NEY.js";
 import "../chunk-QPWUG2S3.js";
 import "../chunk-R36IBI2M.js";
-import "../chunk-C6HPNPNK.js";
+import "../chunk-ZK4XGNJ3.js";
 import "../chunk-E6UNM67F.js";
 import "../chunk-6WHJ2EAB.js";
 import "../chunk-AQEJKOKI.js";
@@ -227,13 +227,13 @@ import "../chunk-Z7L72ZHL.js";
 import "../chunk-4O4TKIXQ.js";
 import "../chunk-RMMA44HE.js";
 import "../chunk-SYOIVK7K.js";
-import "../chunk-PH2V7EXZ.js";
+import "../chunk-NWXGLTWN.js";
 import "../chunk-MY7B3HYC.js";
 import "../chunk-353C5UNV.js";
 import "../chunk-5AYUHSAU.js";
 import "../chunk-BT7NVCML.js";
 import "../chunk-PO7NXNGC.js";
-import "../chunk-3BTHXB7Z.js";
+import "../chunk-JAQXKNQV.js";
 import "../chunk-KQAFEZQX.js";
 import "../chunk-WEHSQBFR.js";
 import "../chunk-X7Y7WX73.js";
@@ -244,7 +244,7 @@ import "../chunk-SOAU2OE2.js";
 import "../chunk-BJMBJZ2Y.js";
 import "../chunk-UKJAGEXH.js";
 import "../chunk-FP2373TW.js";
-import "../chunk-AF5PW35O.js";
+import "../chunk-FQJ4YXJO.js";
 import "../chunk-N7QV3CMX.js";
 import "../chunk-PAAJWQH5.js";
 import "../chunk-2JRB3Z5N.js";
@@ -262,13 +262,13 @@ import "../chunk-C7HJ3NEI.js";
 import "../chunk-N4PYB235.js";
 import "../chunk-AW4QUFQF.js";
 import "../chunk-5FVVY2EB.js";
-import "../chunk-IVEHY2VT.js";
+import "../chunk-VQEOBVF2.js";
 import "../chunk-UI3NYK34.js";
 import "../chunk-ETUZFFPU.js";
-import "../chunk-MSAI3Q7D.js";
-import "../chunk-AXGJMDBS.js";
+import "../chunk-3QH4NT72.js";
+import "../chunk-KO4X4WRJ.js";
 import "../chunk-TYT4TEQV.js";
-import "../chunk-4NSLQ7EU.js";
+import "../chunk-ANPRNTPT.js";
 import "../chunk-EFHNFTWB.js";
 import "../chunk-GCGJW34D.js";
 import "../chunk-75PT4N7Q.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.69.96",
+  "version": "9.69.98",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -3327,7 +3327,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.69.96"
+    "@remnic/coding-graph": "^9.69.98"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/access-http-adapter-namespace.test.ts

@@ -0,0 +1,217 @@
+import assert from "node:assert/strict";
+import { mkdtemp, rm } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import test from "node:test";
+
+import { EngramAccessHttpServer } from "./access-http.js";
+import { EngramAccessService, type EngramAccessRecallRequest, type EngramAccessRecallResponse } from "./access-service.js";
+import { parseConfig } from "./config.js";
+import { Orchestrator } from "./orchestrator.js";
+import type { PluginConfig } from "./types.js";
+
+const FLAT_ADAPTER_IDS = ["claude-code", "codex", "replit", "grok", "opencode", "hermes"];
+
+const NAMESPACED_ADAPTERS = [
+  { clientId: "claude-code", principal: "claude-code" },
+  { clientId: "codex", principal: "codex" },
+  { clientId: "replit", principal: "replit-agent" },
+  { clientId: "grok", principal: "grok" },
+  { clientId: "opencode", principal: "opencode" },
+  { clientId: "hermes", principal: "hermes-agent" },
+];
+
+interface TestDaemon {
+  service: EngramAccessService;
+  port: number;
+  close(): Promise<void>;
+}
+
+function makeConfig(memoryDir: string, overrides: Partial<PluginConfig> = {}) {
+  return parseConfig({
+    openaiApiKey: "sk-test",
+    memoryDir,
+    workspaceDir: path.join(memoryDir, "workspace"),
+    qmdEnabled: false,
+    embeddingFallbackEnabled: false,
+    recallPlannerEnabled: false,
+    sharedContextEnabled: false,
+    initGateTimeoutMs: 1000,
+    ...overrides,
+  });
+}
+
+async function startServer(overrides: Partial<PluginConfig> = {}): Promise<TestDaemon> {
+  const memoryDir = await mkdtemp(path.join(os.tmpdir(), "remnic-3166-"));
+  const orchestrator = new Orchestrator(makeConfig(memoryDir, overrides));
+  const service = new EngramAccessService(orchestrator);
+  const server = new EngramAccessHttpServer({
+    service,
+    host: "127.0.0.1",
+    port: 0,
+    authToken: "secret-token",
+    adminConsoleEnabled: false,
+  });
+  const { port } = await server.start();
+  return {
+    service,
+    port,
+    async close() {
+      await server.stop();
+      await rm(memoryDir, { recursive: true, force: true });
+    },
+  };
+}
+
+interface RecallOutcome {
+  status: number;
+  isError: boolean;
+  text: string;
+  payload?: EngramAccessRecallResponse;
+}
+
+interface McpToolReply {
+  result?: { content?: Array<{ text?: string }>; isError?: boolean };
+}
+
+async function mcpRecall(
+  port: number,
+  args: EngramAccessRecallRequest,
+  headers: Record<string, string> = {},
+): Promise<RecallOutcome> {
+  const res = await fetch(`http://127.0.0.1:${port}/mcp`, {
+    method: "POST",
+    headers: {
+      authorization: "Bearer secret-token",
+      "content-type": "application/json",
+      ...headers,
+    },
+    body: JSON.stringify({
+      jsonrpc: "2.0",
+      id: 1,
+      method: "tools/call",
+      params: { name: "engram.recall", arguments: args },
+    }),
+  });
+  const body: McpToolReply = JSON.parse(await res.text());
+  const text = body.result?.content?.[0]?.text ?? "";
+  const outcome: RecallOutcome = {
+    status: res.status,
+    isError: body.result?.isError === true,
+    text,
+  };
+  if (!outcome.isError) outcome.payload = JSON.parse(text);
+  return outcome;
+}
+
+test("flat daemon: all six built-in adapters resolve the configured default namespace over MCP recall", async () => {
+  const daemon = await startServer({
+    namespacesEnabled: false,
+    defaultNamespace: "flat-tenant",
+  });
+  try {
+    await daemon.service.memoryStore({ content: "the launch codeword is PERIHELION" });
+    for (const clientId of FLAT_ADAPTER_IDS) {
+      const outcome = await mcpRecall(
+        daemon.port,
+        { query: "launch codeword" },
+        { "x-engram-client-id": clientId },
+      );
+      assert.equal(outcome.status, 200, `${clientId}: recall must reach the op`);
+      assert.equal(outcome.isError, false, `${clientId}: ${outcome.text}`);
+      assert.equal(outcome.payload?.namespace, "flat-tenant", `${clientId}: default namespace`);
+      assert.ok(
+        outcome.payload?.context.includes("PERIHELION"),
+        `${clientId}: default-namespace memory must be recalled`,
+      );
+    }
+  } finally {
+    await daemon.close();
+  }
+});
+
+test("flat daemon: explicit X-Engram-Namespace is enforced, not silently dropped", async () => {
+  const daemon = await startServer({
+    namespacesEnabled: false,
+    defaultNamespace: "flat-tenant",
+  });
+  try {
+    await daemon.service.memoryStore({ content: "the launch codeword is PERIHELION" });
+
+    const validDefault = await mcpRecall(daemon.port, { query: "launch codeword" }, {
+      "x-engram-client-id": "claude-code",
+      "x-engram-namespace": "flat-tenant",
+    });
+    assert.equal(validDefault.isError, false, validDefault.text);
+    assert.equal(validDefault.payload?.namespace, "flat-tenant");
+    assert.ok(validDefault.payload?.context.includes("PERIHELION"));
+
+    for (const outcome of [
+      await mcpRecall(daemon.port, { query: "launch codeword" }, {
+        "x-engram-client-id": "claude-code",
+        "x-engram-namespace": "off-books",
+      }),
+      await mcpRecall(daemon.port, { query: "launch codeword", namespace: "off-books" }, {
+        "x-engram-client-id": "claude-code",
+      }),
+    ]) {
+      assert.equal(outcome.isError, true, "non-default namespace must be rejected");
+      assert.match(outcome.text, /unsupported namespace: off-books/);
+    }
+  } finally {
+    await daemon.close();
+  }
+});
+
+test("namespaced daemon: adapters keep their self-namespaces over MCP recall", async () => {
+  const daemon = await startServer({
+    namespacesEnabled: true,
+    defaultNamespace: "main",
+    namespacePolicies: NAMESPACED_ADAPTERS.map(({ clientId, principal }) => ({
+      name: clientId,
+      readPrincipals: [principal],
+      writePrincipals: [principal],
+    })),
+  });
+  try {
+    await daemon.service.memoryStore({
+      content: "main vault code is QUASAR-main",
+      namespace: "main",
+      authenticatedPrincipal: "operator",
+    });
+    for (const { clientId, principal } of NAMESPACED_ADAPTERS) {
+      await daemon.service.memoryStore({
+        content: `the ${clientId} vault code is NOVA-${clientId}`,
+        namespace: clientId,
+        authenticatedPrincipal: principal,
+      });
+    }
+
+    for (const { clientId } of NAMESPACED_ADAPTERS) {
+      const outcome = await mcpRecall(daemon.port, { query: "vault code" }, {
+        "x-engram-client-id": clientId,
+      });
+      assert.equal(outcome.status, 200, `${clientId}: recall must reach the op`);
+      assert.equal(outcome.isError, false, `${clientId}: ${outcome.text}`);
+      assert.equal(outcome.payload?.namespace, clientId, `${clientId}: self-namespace kept`);
+      assert.ok(
+        outcome.payload?.context.includes(`NOVA-${clientId}`),
+        `${clientId}: own namespace memory must be recalled`,
+      );
+      assert.ok(
+        !outcome.payload?.context.includes("QUASAR-main"),
+        `${clientId}: default namespace must stay isolated`,
+      );
+    }
+
+    const crossTenant = await mcpRecall(daemon.port, { query: "vault code" }, {
+      "x-engram-client-id": "claude-code",
+    });
+    assert.ok(
+      !crossTenant.payload?.context.includes("NOVA-codex"),
+      "one adapter's namespace must not leak into another's recall",
+    );
+  } finally {
+    await daemon.close();
+  }
+});

package/src/access-http.ts

@@ -7,6 +7,7 @@ import path from "node:path";
 import { fileURLToPath, URL } from "node:url";
 import { gunzipSync } from "node:zlib";
 import { log } from "./logger.js";
+import { resolveNamespaceCapabilities } from "./capabilities.js";
 import { WriteRateLimiter, type WriteRateLimitReservation } from "./write-rate-limiter.js";
 import { abortError, isAbortError } from "./abort-error.js";
 import { EngramAccessForbiddenError } from "./access-errors.js";
@@ -716,6 +717,13 @@ export class EngramAccessHttpServer extends ReviewDeckAccessHttpBase {
         principal = adapterIdentity.principal;
       }
       namespace = adapterIdentity.namespace;
+      const config = this.service.configRef;
+      if (
+        adapterIdentity.namespaceExplicit === false &&
+        !(config && resolveNamespaceCapabilities(config).namespaces)
+      ) {
+        namespace = undefined;
+      }
       sessionKey = adapterIdentity.sessionKey;
     }
 

package/src/adapters/claude-code.ts

@@ -41,12 +41,12 @@ export class ClaudeCodeAdapter implements EngramAdapter {
     // MCP session ID (standard MCP header, server-assigned)
     const mcpSessionId = headerValue(context.headers, "mcp-session-id");
 
-    // Namespace: explicit header > default
-    const namespace = headerValue(context.headers, "x-engram-namespace")
-      || "claude-code";
+    // Namespace: explicit header > adapter default
+    const namespaceHeader = headerValue(context.headers, "x-engram-namespace");
 
     return {
-      namespace,
+      namespace: namespaceHeader ?? "claude-code",
+      namespaceExplicit: namespaceHeader !== undefined,
       principal: "claude-code",
       sessionKey: mcpSessionId ?? context.sessionKey,
       adapterId: this.id,

package/src/adapters/codex.ts

@@ -43,11 +43,11 @@ export class CodexAdapter implements EngramAdapter {
     const mcpSessionId = headerValue(context.headers, "mcp-session-id");
 
     // Namespace: explicit header > default
-    const namespace = headerValue(context.headers, "x-engram-namespace")
-      || "codex";
+    const namespaceHeader = headerValue(context.headers, "x-engram-namespace");
 
     return {
-      namespace,
+      namespace: namespaceHeader ?? "codex",
+      namespaceExplicit: namespaceHeader !== undefined,
       principal: "codex",
       sessionKey: mcpSessionId ?? context.sessionKey,
       adapterId: this.id,

package/src/adapters/grok-opencode.test.ts

@@ -49,6 +49,7 @@ test("GrokAdapter resolves identity with adapter-owned principal and header name
     })),
     {
       namespace: "my-project",
+      namespaceExplicit: true,
       principal: "grok",
       sessionKey: "sess-grok-1",
       adapterId: "grok",
@@ -91,6 +92,7 @@ test("OpenCodeAdapter resolves identity with adapter-owned principal", () => {
   }));
   assert.deepEqual(resolved, {
     namespace: "opencode",
+    namespaceExplicit: false,
     principal: "opencode",
     sessionKey: "sess-oc-1",
     adapterId: "opencode",

package/src/adapters/grok.ts

@@ -40,11 +40,11 @@ export class GrokAdapter implements EngramAdapter {
     const mcpSessionId = headerValue(context.headers, "mcp-session-id");
 
     // Namespace: explicit header > default
-    const namespace = headerValue(context.headers, "x-engram-namespace")
-      || "grok";
+    const namespaceHeader = headerValue(context.headers, "x-engram-namespace");
 
     return {
-      namespace,
+      namespace: namespaceHeader ?? "grok",
+      namespaceExplicit: namespaceHeader !== undefined,
       principal: "grok",
       sessionKey: mcpSessionId ?? context.sessionKey,
       adapterId: this.id,

package/src/adapters/hermes.ts

@@ -47,11 +47,11 @@ export class HermesAdapter implements EngramAdapter {
   resolveIdentity(context: AdapterContext): ResolvedIdentity {
     const sessionId = headerValue(context.headers, "x-hermes-session-id");
 
-    const namespace = headerValue(context.headers, "x-engram-namespace")
-      || "hermes";
+    const namespaceHeader = headerValue(context.headers, "x-engram-namespace");
 
     return {
-      namespace,
+      namespace: namespaceHeader ?? "hermes",
+      namespaceExplicit: namespaceHeader !== undefined,
       principal: "hermes-agent",
       sessionKey: sessionId ?? context.sessionKey,
       adapterId: this.id,

package/src/adapters/opencode.ts

@@ -39,11 +39,11 @@ export class OpenCodeAdapter implements EngramAdapter {
     const mcpSessionId = headerValue(context.headers, "mcp-session-id");
 
     // Namespace: explicit header > default
-    const namespace = headerValue(context.headers, "x-engram-namespace")
-      || "opencode";
+    const namespaceHeader = headerValue(context.headers, "x-engram-namespace");
 
     return {
-      namespace,
+      namespace: namespaceHeader ?? "opencode",
+      namespaceExplicit: namespaceHeader !== undefined,
       principal: "opencode",
       sessionKey: mcpSessionId ?? context.sessionKey,
       adapterId: this.id,

package/src/adapters/replit.ts

@@ -40,11 +40,11 @@ export class ReplitAdapter implements EngramAdapter {
   resolveIdentity(context: AdapterContext): ResolvedIdentity {
     const mcpSessionId = headerValue(context.headers, "mcp-session-id");
 
-    const namespace = headerValue(context.headers, "x-engram-namespace")
-      || "replit";
+    const namespaceHeader = headerValue(context.headers, "x-engram-namespace");
 
     return {
-      namespace,
+      namespace: namespaceHeader ?? "replit",
+      namespaceExplicit: namespaceHeader !== undefined,
       principal: "replit-agent",
       sessionKey: mcpSessionId ?? context.sessionKey,
       adapterId: this.id,

package/src/adapters/types.ts

@@ -22,6 +22,8 @@ export interface AdapterContext {
 export interface ResolvedIdentity {
   /** Engram namespace (scopes memory access) */
   namespace: string;
+  /** False for an inferred namespace; omitted values retain explicit-namespace validation. */
+  namespaceExplicit?: boolean;
   /** Engram principal (authorization subject) */
   principal: string;
   /** Session key for continuity tracking */

package/src/offline-sync-exclude-globs.ts

@@ -104,11 +104,11 @@ export function globToRegExp(glob: string): RegExp {
         // (Cursor review on PR #1793: trailing `scratch/**` must match
         // nested `scratch/a/b.md`, matching the offline-mode guide.)
         if (glob[i + 2] === "/") {
-          source += "(?:.*/)?";
+          source += "(?:[\\s\\S]*/)?";
           i += 2;
           continue;
         }
-        source += ".*";
+        source += "[\\s\\S]*";
         i += 1;
         continue;
       }
@@ -128,6 +128,7 @@ export function globToRegExp(glob: string): RegExp {
   return new RegExp(`^${source}$`);
 }
 
+/** Match relative POSIX paths: `*` stays within a segment; `**` crosses separators and matches every path alone. */
 export function compileOfflineSyncExcludeGlobs(
   globs: readonly unknown[],
 ): RegExp[] {

package/src/offline-sync.test.ts

@@ -3077,6 +3077,18 @@ test("globToRegExp treats ** as cross-segment in trailing and embedded positions
   assert.equal(embedded.test("state/a/b/other.json"), false);
 });
 
+test("globToRegExp ** spans line terminators that valid archive paths may contain (#3172)", () => {
+  const trailing = globToRegExp("scratch/**");
+  assert.equal(trailing.test("scratch/a\nb.md"), true);
+  assert.equal(trailing.test("scratch/a\nb/c.md"), true);
+  const embedded = globToRegExp("state/**/runs.json");
+  assert.equal(embedded.test("state/a\nb/runs.json"), true);
+  assert.equal(globToRegExp("**/state/*.sqlite").test("a\nb/state/lcm.sqlite"), true);
+  const single = globToRegExp("state/*.sqlite");
+  assert.equal(single.test("state/a\nb.sqlite"), true);
+  assert.equal(single.test("state/a/b.sqlite"), false);
+});
+
 test("default excludes cover per-namespace state dirs (#1793 review)", () => {
   const sqlite = globToRegExp("**/state/*.sqlite");
   assert.equal(sqlite.test("state/lcm.sqlite"), true);