@remnic/core 9.8.0 → 9.9.0

package/dist/{chunk-IYNGIMVG.js → chunk-ZVAYK7GU.js}

@@ -19,7 +19,7 @@ import {
 } from "./chunk-CXZQOVIE.js";
 import {
   RelayMissionStoreError
-} from "./chunk-IDZFBSHN.js";
+} from "./chunk-OGCAYLNA.js";
 import {
   executeResolution,
   isValidResolutionVerb
@@ -37,7 +37,7 @@ import {
 } from "./chunk-KF5EUVKQ.js";
 import {
   CorrectionContractError
-} from "./chunk-TDTXKOAJ.js";
+} from "./chunk-XQDRKZ7V.js";
 import {
   isTrustZoneName
 } from "./chunk-JGSKJHF7.js";
@@ -3132,4 +3132,4 @@ function positiveIntQueryParam(value, label) {
 export {
   EngramAccessHttpServer
 };
-//# sourceMappingURL=chunk-IYNGIMVG.js.map
+//# sourceMappingURL=chunk-ZVAYK7GU.js.map

package/dist/{cli-C_pqqTCw.d.ts → cli-5tNLVTvJ.d.ts}

@@ -17,7 +17,7 @@ import { WorkProjectStatus, WorkTaskStatus, WorkTaskPriority } from './work/type
 import { RoutePatternType } from './routing/engine.js';
 import { TailscaleSyncOptions } from './network/tailscale.js';
 import { DashboardStatus } from './dashboard-runtime.js';
-import { F as EngramAccessService } from './access-service-DEL4qCrc.js';
+import { F as EngramAccessService } from './access-service-DbZ1G3zV.js';
 import { ResolveSecretRefFn } from './resolve-auth-token.js';
 import { CompatRunner, CompatReport } from './compat/types.js';
 import { EvalBaselineDeltaReport, EvalBaselineSnapshot, EvalCiGateReport, EvalBenchmarkPackSummary, EvalHarnessStatus, EvalStoredBaselineCiGateReport } from './evals.js';

package/dist/cli.d.ts

@@ -11,12 +11,12 @@ import './orchestrator-CQJ8U7En.js';
 import './replay/runner.js';
 import './replay/types.js';
 import './pipeline-Cn-kvYeV.js';
-export { A as AccessHttpServeCliCommandOptions, a as ArchiveObservationsCliCommandOptions, B as BulkImportCliCommandOptions, C as CliApi, b as CliCommand, c as CliProgram, d as CompatCliCommandOptions, e as ConnectorsRunCliOutputOptions, f as ConversationIndexHealthCliOrchestrator, D as DashboardStartCliCommandOptions, g as DedupeCandidate, E as ExactDedupePlan, G as GraphHealthCliCommandOptions, M as MemoryActionAuditCliCommandOptions, h as MemoryActionAuditCliNamespaceSummary, i as MemoryActionAuditCliReport, j as MemoryGovernanceCliCommandOptions, k as MemoryGovernanceReportCliCommandOptions, l as MemoryGovernanceRestoreCliCommandOptions, m as MemoryReviewDispositionCliCommandOptions, n as MemoryTimelineCliCommandOptions, o as MigrateCliOrchestrator, q as MigrateCliReport, s as MigrateObservationsCliCommandOptions, P as PolicyDiffCliReport, t as PolicyDiffEntry, u as PolicyRollbackCliReport, v as PolicyStatusCliReport, w as PolicyTuningCliOrchestrator, R as RebuildMemoryLifecycleLedgerCliCommandOptions, x as RebuildMemoryProjectionCliCommandOptions, y as RebuildObservationsCliCommandOptions, z as RepairMemoryProjectionCliCommandOptions, F as ReplayCliCommandOptions, H as ReplayCliOrchestrator, I as RouteCliCommandOptions, S as SessionIntegrityCliCommandOptions, J as SessionRepairCliCommandOptions, T as TailscaleStatusCliCommandOptions, K as TailscaleSyncCliCommandOptions, L as TierMigrateCliAdapter, N as TierMigrateCoordinatorCliAdapter, O as TierMigrateLegacyCliAdapter, Q as TierStatusCliAdapter, U as TierStatusCoordinatorCliAdapter, V as TierStatusLegacyCliAdapter, W as TrainingExportCliCommandOptions, X as VerifyMemoryProjectionCliCommandOptions, Y as WebDavServeCliCommandOptions, Z as WorkProjectCliCommandOptions, _ as WorkTaskCliCommandOptions, $ as emitConnectorsRunCliResult, a0 as filterNormalMemorySearchResults, a1 as hasDestructivePurgeFailures, a2 as isNormalRetrievalVisibleMemory, a3 as listMemoryMarkdownFilePaths, a4 as parseDurationToMs, a5 as parseStrictCliDate, a6 as planAggressiveDuplicateDeletions, a7 as planExactDuplicateDeletions, a8 as registerCli, a9 as resolveAccessPrincipalOverride, aa as resolveMemoryDirForNamespace, ab as runAbstractionNodeStatusCliCommand, ac as runAccessHttpServeCliCommand, ad as runAccessHttpStatusCliCommand, ae as runAccessHttpStopCliCommand, af as runAccessMcpServeCliCommand, ag as runArchiveObservationsCliCommand, ah as runBenchmarkBaselineReportCliCommand, ai as runBenchmarkBaselineSnapshotCliCommand, aj as runBenchmarkCiGateCliCommand, ak as runBenchmarkImportCliCommand, al as runBenchmarkStatusCliCommand, am as runBenchmarkStoredBaselineCiGateCliCommand, an as runBenchmarkValidateCliCommand, r as runBulkImportCliCommand, ao as runCausalTrajectoryStatusCliCommand, ap as runCommitmentLifecycleCliCommand, aq as runCommitmentRecordCliCommand, ar as runCommitmentSetStateCliCommand, as as runCommitmentStatusCliCommand, at as runCompatCliCommand, au as runCompoundingPromoteCliCommand, av as runConversationIndexHealthCliCommand, aw as runConversationIndexInspectCliCommand, ax as runConversationIndexRebuildCliCommand, ay as runCueAnchorStatusCliCommand, az as runDashboardStartCliCommand, aA as runDashboardStatusCliCommand, aB as runDashboardStopCliCommand, aC as runGraphHealthCliCommand, aD as runHarmonicSearchCliCommand, aE as runMemoryActionAuditCliCommand, aF as runMemoryGovernanceCliCommand, aG as runMemoryGovernanceReportCliCommand, aH as runMemoryGovernanceRestoreCliCommand, aI as runMemoryReviewDispositionCliCommand, aJ as runMemoryTimelineCliCommand, aK as runMigrateNormalizeFrontmatterCliCommand, aL as runMigrateObservationsCliCommand, aM as runMigrateRechunkCliCommand, aN as runMigrateReextractCliCommand, aO as runMigrateRescoreImportanceCliCommand, aP as runObjectiveStateStatusCliCommand, aQ as runPolicyDiffCliCommand, aR as runPolicyRollbackCliCommand, aS as runPolicyStatusCliCommand, aT as runRebuildMemoryLifecycleLedgerCliCommand, aU as runRebuildMemoryProjectionCliCommand, aV as runRebuildObservationsCliCommand, aW as runRepairMemoryProjectionCliCommand, aX as runReplayCliCommand, aY as runResumeBundleBuildCliCommand, aZ as runResumeBundleRecordCliCommand, a_ as runResumeBundleStatusCliCommand, a$ as runRouteCliCommand, b0 as runSemanticRulePromoteCliCommand, b1 as runSemanticRuleVerifyCliCommand, b2 as runSessionCheckCliCommand, b3 as runSessionRepairCliCommand, b4 as runTailscaleStatusCliCommand, b5 as runTailscaleSyncCliCommand, b6 as runTierMigrateCliCommand, b7 as runTierStatusCliCommand, b8 as runTrainingExportCliCommand, b9 as runTrustZoneDemoSeedCliCommand, ba as runTrustZonePromoteCliCommand, bb as runTrustZoneStatusCliCommand, bc as runUtilityLearningCliCommand, bd as runUtilityLearningStatusCliCommand, be as runUtilityTelemetryRecordCliCommand, bf as runUtilityTelemetryStatusCliCommand, bg as runVerifiedRecallSearchCliCommand, bh as runVerifyMemoryProjectionCliCommand, bi as runWebDavServeCliCommand, bj as runWebDavStopCliCommand, bk as runWorkProductRecallSearchCliCommand, bl as runWorkProductRecordCliCommand, bm as runWorkProductStatusCliCommand, bn as runWorkProjectCliCommand, bo as runWorkTaskCliCommand } from './cli-C_pqqTCw.js';
+export { A as AccessHttpServeCliCommandOptions, a as ArchiveObservationsCliCommandOptions, B as BulkImportCliCommandOptions, C as CliApi, b as CliCommand, c as CliProgram, d as CompatCliCommandOptions, e as ConnectorsRunCliOutputOptions, f as ConversationIndexHealthCliOrchestrator, D as DashboardStartCliCommandOptions, g as DedupeCandidate, E as ExactDedupePlan, G as GraphHealthCliCommandOptions, M as MemoryActionAuditCliCommandOptions, h as MemoryActionAuditCliNamespaceSummary, i as MemoryActionAuditCliReport, j as MemoryGovernanceCliCommandOptions, k as MemoryGovernanceReportCliCommandOptions, l as MemoryGovernanceRestoreCliCommandOptions, m as MemoryReviewDispositionCliCommandOptions, n as MemoryTimelineCliCommandOptions, o as MigrateCliOrchestrator, q as MigrateCliReport, s as MigrateObservationsCliCommandOptions, P as PolicyDiffCliReport, t as PolicyDiffEntry, u as PolicyRollbackCliReport, v as PolicyStatusCliReport, w as PolicyTuningCliOrchestrator, R as RebuildMemoryLifecycleLedgerCliCommandOptions, x as RebuildMemoryProjectionCliCommandOptions, y as RebuildObservationsCliCommandOptions, z as RepairMemoryProjectionCliCommandOptions, F as ReplayCliCommandOptions, H as ReplayCliOrchestrator, I as RouteCliCommandOptions, S as SessionIntegrityCliCommandOptions, J as SessionRepairCliCommandOptions, T as TailscaleStatusCliCommandOptions, K as TailscaleSyncCliCommandOptions, L as TierMigrateCliAdapter, N as TierMigrateCoordinatorCliAdapter, O as TierMigrateLegacyCliAdapter, Q as TierStatusCliAdapter, U as TierStatusCoordinatorCliAdapter, V as TierStatusLegacyCliAdapter, W as TrainingExportCliCommandOptions, X as VerifyMemoryProjectionCliCommandOptions, Y as WebDavServeCliCommandOptions, Z as WorkProjectCliCommandOptions, _ as WorkTaskCliCommandOptions, $ as emitConnectorsRunCliResult, a0 as filterNormalMemorySearchResults, a1 as hasDestructivePurgeFailures, a2 as isNormalRetrievalVisibleMemory, a3 as listMemoryMarkdownFilePaths, a4 as parseDurationToMs, a5 as parseStrictCliDate, a6 as planAggressiveDuplicateDeletions, a7 as planExactDuplicateDeletions, a8 as registerCli, a9 as resolveAccessPrincipalOverride, aa as resolveMemoryDirForNamespace, ab as runAbstractionNodeStatusCliCommand, ac as runAccessHttpServeCliCommand, ad as runAccessHttpStatusCliCommand, ae as runAccessHttpStopCliCommand, af as runAccessMcpServeCliCommand, ag as runArchiveObservationsCliCommand, ah as runBenchmarkBaselineReportCliCommand, ai as runBenchmarkBaselineSnapshotCliCommand, aj as runBenchmarkCiGateCliCommand, ak as runBenchmarkImportCliCommand, al as runBenchmarkStatusCliCommand, am as runBenchmarkStoredBaselineCiGateCliCommand, an as runBenchmarkValidateCliCommand, r as runBulkImportCliCommand, ao as runCausalTrajectoryStatusCliCommand, ap as runCommitmentLifecycleCliCommand, aq as runCommitmentRecordCliCommand, ar as runCommitmentSetStateCliCommand, as as runCommitmentStatusCliCommand, at as runCompatCliCommand, au as runCompoundingPromoteCliCommand, av as runConversationIndexHealthCliCommand, aw as runConversationIndexInspectCliCommand, ax as runConversationIndexRebuildCliCommand, ay as runCueAnchorStatusCliCommand, az as runDashboardStartCliCommand, aA as runDashboardStatusCliCommand, aB as runDashboardStopCliCommand, aC as runGraphHealthCliCommand, aD as runHarmonicSearchCliCommand, aE as runMemoryActionAuditCliCommand, aF as runMemoryGovernanceCliCommand, aG as runMemoryGovernanceReportCliCommand, aH as runMemoryGovernanceRestoreCliCommand, aI as runMemoryReviewDispositionCliCommand, aJ as runMemoryTimelineCliCommand, aK as runMigrateNormalizeFrontmatterCliCommand, aL as runMigrateObservationsCliCommand, aM as runMigrateRechunkCliCommand, aN as runMigrateReextractCliCommand, aO as runMigrateRescoreImportanceCliCommand, aP as runObjectiveStateStatusCliCommand, aQ as runPolicyDiffCliCommand, aR as runPolicyRollbackCliCommand, aS as runPolicyStatusCliCommand, aT as runRebuildMemoryLifecycleLedgerCliCommand, aU as runRebuildMemoryProjectionCliCommand, aV as runRebuildObservationsCliCommand, aW as runRepairMemoryProjectionCliCommand, aX as runReplayCliCommand, aY as runResumeBundleBuildCliCommand, aZ as runResumeBundleRecordCliCommand, a_ as runResumeBundleStatusCliCommand, a$ as runRouteCliCommand, b0 as runSemanticRulePromoteCliCommand, b1 as runSemanticRuleVerifyCliCommand, b2 as runSessionCheckCliCommand, b3 as runSessionRepairCliCommand, b4 as runTailscaleStatusCliCommand, b5 as runTailscaleSyncCliCommand, b6 as runTierMigrateCliCommand, b7 as runTierStatusCliCommand, b8 as runTrainingExportCliCommand, b9 as runTrustZoneDemoSeedCliCommand, ba as runTrustZonePromoteCliCommand, bb as runTrustZoneStatusCliCommand, bc as runUtilityLearningCliCommand, bd as runUtilityLearningStatusCliCommand, be as runUtilityTelemetryRecordCliCommand, bf as runUtilityTelemetryStatusCliCommand, bg as runVerifiedRecallSearchCliCommand, bh as runVerifyMemoryProjectionCliCommand, bi as runWebDavServeCliCommand, bj as runWebDavStopCliCommand, bk as runWorkProductRecallSearchCliCommand, bl as runWorkProductRecordCliCommand, bm as runWorkProductStatusCliCommand, bn as runWorkProjectCliCommand, bo as runWorkTaskCliCommand } from './cli-5tNLVTvJ.js';
 import './work/types.js';
 import './routing/engine.js';
 import './network/tailscale.js';
 import './dashboard-runtime.js';
-import './access-service-DEL4qCrc.js';
+import './access-service-DbZ1G3zV.js';
 import './resolve-auth-token.js';
 import './compat/types.js';
 import './evals.js';

package/dist/cli.js

@@ -90,7 +90,7 @@ import {
   runWorkProductStatusCliCommand,
   runWorkProjectCliCommand,
   runWorkTaskCliCommand
-} from "./chunk-76GLCM57.js";
+} from "./chunk-PMUD7ERF.js";
 import "./chunk-MMACM5G2.js";
 import "./chunk-54BGIBCR.js";
 import "./chunk-H4CKS5B2.js";
@@ -170,7 +170,7 @@ import "./chunk-K6MV3TRQ.js";
 import "./chunk-PIG4WJFQ.js";
 import "./chunk-LBJBNWS2.js";
 import "./chunk-KFZY2OFH.js";
-import "./chunk-IYNGIMVG.js";
+import "./chunk-ZVAYK7GU.js";
 import "./chunk-V7IZKJI3.js";
 import "./chunk-SEDEKFYQ.js";
 import "./chunk-RKNJBZ55.js";
@@ -183,7 +183,7 @@ import "./chunk-MKQBXQKU.js";
 import "./chunk-CXZQOVIE.js";
 import "./chunk-IC2TCZJ2.js";
 import "./chunk-D24OXEPB.js";
-import "./chunk-IDZFBSHN.js";
+import "./chunk-OGCAYLNA.js";
 import "./chunk-OQJIB32H.js";
 import "./chunk-HNZKVLAN.js";
 import "./chunk-EQWEIIKQ.js";
@@ -196,12 +196,12 @@ import "./chunk-2VEOKUPP.js";
 import "./chunk-5RUE3GHQ.js";
 import "./chunk-OADWQ5CR.js";
 import "./chunk-KF5EUVKQ.js";
-import "./chunk-TDTXKOAJ.js";
+import "./chunk-XQDRKZ7V.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import "./chunk-AJ7QCSIS.js";
 import "./chunk-VQ7B2Q6M.js";
-import "./chunk-SICXL4MK.js";
+import "./chunk-PJSK6OJM.js";
 import "./chunk-GNVZQ5JN.js";
 import "./chunk-YN2UN7N3.js";
 import "./chunk-JGSKJHF7.js";

package/dist/index.d.ts

@@ -26,8 +26,8 @@ import { aD as CodingContext, aT as CodingModeConfig, aF as WearableConversation
 export { a6 as AgentAccessAuthToken, k as BriefingActiveThread, aY as BriefingConfig, i as BriefingFocus, h as BriefingFollowup, aZ as BriefingOpenCommitment, m as BriefingRecentEntity, l as BriefingResult, B as BriefingSections, a_ as BriefingWindow, a0 as BufferSurpriseEvent, a$ as BulkImportError, a2 as BulkImportOptions, a4 as BulkImportResult, a3 as BulkImportSource, b0 as BulkImportSourceAdapter, j as CalendarEvent, C as CalendarSource, b1 as CodexCompatConfig, aS as ConsolidationObservation, b2 as DEFAULT_RECALL_DISCLOSURE, E as EntityFile, ag as EntityStructuredSection, b3 as ExtractedFact, G as GatewayConfig, b4 as ImportSourceRole, a1 as ImportTurn, b5 as ImportTurnValidationIssue, aj as MemoryActionEligibilityContext, b6 as MemoryActionEligibilitySource, aa as MemoryActionType, M as MemoryFile, o as MemoryFrontmatter, b7 as MemoryObservation, b8 as MemoryScope, b9 as RECALL_DISCLOSURE_LEVELS, b as RecallDisclosure, a5 as SecretRef, ba as WearableAuthCheck, bb as WearableFetchOptions, bc as WearableFetchPage, aI as WearableMemoryMode, aH as WearableNativeMemory, bd as WearableNativeMemoryPage, aM as WearableSourceStatus, aL as WearableSyncSummary, be as WearableTranscriptSegment, bf as isImportRole, bg as isRecallDisclosure, bh as parseIsoTimestamp, bi as validateImportTurn } from './types-D_fG2ix8.js';
 export { JudgeBatchResult, JudgeCandidate, JudgeVerdict, JudgeVerdictKind, clearVerdictCache, createVerdictCache, getVerdictKind, isDurableVerdict, isValidCachedVerdict, judgeFactDurability, normalizeCachedVerdict, verdictCacheSize } from './extraction-judge.js';
 export { hasBroadGraphIntent, inferIntentFromText, intentCompatibilityScore, isTaskInitiationIntent, planRecallMode } from './intent.js';
-import { F as EngramAccessService } from './access-service-DEL4qCrc.js';
-export { P as ProcedureStatsConfigSnapshot, G as ProcedureStatsRecent, H as ProcedureStatsReport, I as ProcedureStatusCounts, J as computeProcedureStats, K as formatProcedureStatsText } from './access-service-DEL4qCrc.js';
+import { F as EngramAccessService } from './access-service-DbZ1G3zV.js';
+export { P as ProcedureStatsConfigSnapshot, G as ProcedureStatsRecent, H as ProcedureStatsReport, I as ProcedureStatusCounts, J as computeProcedureStats, K as formatProcedureStatsText } from './access-service-DbZ1G3zV.js';
 export { FILTER_LABELS as DIRECT_ANSWER_FILTER_LABELS, DirectAnswerCandidate, DirectAnswerConfig, DirectAnswerInput, DirectAnswerReason, DirectAnswerResult, isDirectAnswerEligible } from './direct-answer.js';
 export { MemoryTier, TierRoutingPolicy, TierTransitionDecision, computeTierValueScore, decideTierTransition } from './tier-routing.js';
 export { ApplyReasoningTraceBoostOptions, BoostableResult, DEFAULT_REASONING_TRACE_BOOST, applyReasoningTraceBoost, isReasoningTracePath, looksLikeProblemSolvingQuery } from './reasoning-trace-recall.js';
@@ -86,7 +86,7 @@ export { a as TaxonomyCategory } from './types-DJhqDJUV.js';
 export { EnrichmentAuditEntry, EnrichmentCandidate, EnrichmentCostTier, EnrichmentPipelineConfig, EnrichmentProvider, EnrichmentProviderConfig, EnrichmentProviderRegistry, EnrichmentResult, EntityEnrichmentInput, WebSearchFn, WebSearchProvider, WebSearchProviderOptions, appendAuditEntry, defaultEnrichmentPipelineConfig, readAuditLog, runEnrichmentPipeline } from './enrichment/index.js';
 export { clearBulkImportSources, getBulkImportSource, listBulkImportSources, registerBulkImportSource } from './bulk-import/index.js';
 export { a as ProcessBatchContext, P as ProcessBatchFn, b as ProcessBatchResult, f as formatBatchTranscript, r as resolveBulkImportContext, c as runBulkImportPipeline, v as validateBatchSize } from './pipeline-Cn-kvYeV.js';
-export { B as BulkImportCliCommandOptions, p as parseStrictCliDate, r as runBulkImportCliCommand } from './cli-C_pqqTCw.js';
+export { B as BulkImportCliCommandOptions, p as parseStrictCliDate, r as runBulkImportCliCommand } from './cli-5tNLVTvJ.js';
 export { DEFAULT_IMPORT_BATCH_SIZE, ImportProgress, ImportedMemory, ImporterAdapter, ImporterParseOptions, ImporterTransformOptions, ImporterWriteResult, ImporterWriteTarget, RunImportOptions, RunImporterResult, defaultWriteMemoriesToOrchestrator, importedMemoryToTurn, runImporter, validateImportBatchSize, validateImportRateLimit } from './importers/index.js';
 export { FallbackLlmClient, FallbackLlmOptions, FallbackLlmResponse, FallbackLlmRuntimeContext } from './fallback-llm.js';
 export { ComputeMemoryWorthInput, MemoryWorthResult, computeMemoryWorth } from './memory-worth.js';

package/dist/index.js

@@ -96,7 +96,7 @@ import {
   validateTaxonomy,
   watchForChanges,
   writeManifest
-} from "./chunk-2EJOEICD.js";
+} from "./chunk-BI2OJF6J.js";
 import {
   WEARABLE_SOURCE_PREFIX,
   buildExtractionTurns,
@@ -350,7 +350,7 @@ import {
   registerTrainingExportAdapter,
   runBulkImportCliCommand,
   runWearablesCliCommand
-} from "./chunk-76GLCM57.js";
+} from "./chunk-PMUD7ERF.js";
 import "./chunk-MMACM5G2.js";
 import "./chunk-54BGIBCR.js";
 import "./chunk-H4CKS5B2.js";
@@ -554,7 +554,7 @@ import "./chunk-H3FZVNRN.js";
 import "./chunk-KFZY2OFH.js";
 import {
   EngramAccessHttpServer
-} from "./chunk-IYNGIMVG.js";
+} from "./chunk-ZVAYK7GU.js";
 import {
   WearablesInputError,
   describeErrorForOperator
@@ -598,7 +598,7 @@ import {
   relayMissionAppendOperation,
   relayMissionReadOperation,
   relayMissionReceiptDigest
-} from "./chunk-IDZFBSHN.js";
+} from "./chunk-OGCAYLNA.js";
 import "./chunk-OQJIB32H.js";
 import "./chunk-HNZKVLAN.js";
 import "./chunk-EQWEIIKQ.js";
@@ -647,12 +647,12 @@ import {
   EngramAccessService,
   computeProcedureStats,
   formatProcedureStatsText
-} from "./chunk-TDTXKOAJ.js";
+} from "./chunk-XQDRKZ7V.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import "./chunk-AJ7QCSIS.js";
 import "./chunk-VQ7B2Q6M.js";
-import "./chunk-SICXL4MK.js";
+import "./chunk-PJSK6OJM.js";
 import "./chunk-GNVZQ5JN.js";
 import "./chunk-YN2UN7N3.js";
 import {

package/dist/mcp-memory-inspector-app.d.ts

@@ -1,4 +1,4 @@
-import { x as EngramAccessRecallResponse } from './access-service-DEL4qCrc.js';
+import { x as EngramAccessRecallResponse } from './access-service-DbZ1G3zV.js';
 import { ActionConfidenceRequest } from './access-schema.js';
 import { RecallXraySnapshot } from './recall-xray.js';
 import { ActionConfidenceResult } from './action-confidence.js';

package/dist/orchestrator.js

@@ -41,7 +41,7 @@ import {
   throwIfRecallAborted,
   tokenizeRecallQuery,
   utcDateKeysForLocalDay
-} from "./chunk-2EJOEICD.js";
+} from "./chunk-BI2OJF6J.js";
 import "./chunk-5SB7SC2G.js";
 import "./chunk-I74SUMNI.js";
 import "./chunk-ILNPU5W5.js";
@@ -125,7 +125,7 @@ import "./chunk-6HEM6HTQ.js";
 import "./chunk-6QYST5XN.js";
 import "./chunk-YROFNEG5.js";
 import "./chunk-S2FSBU4H.js";
-import "./chunk-76GLCM57.js";
+import "./chunk-PMUD7ERF.js";
 import "./chunk-MMACM5G2.js";
 import "./chunk-54BGIBCR.js";
 import "./chunk-H4CKS5B2.js";
@@ -218,7 +218,7 @@ import "./chunk-KD3QD3A5.js";
 import "./chunk-MYVPLJOO.js";
 import "./chunk-H3FZVNRN.js";
 import "./chunk-KFZY2OFH.js";
-import "./chunk-IYNGIMVG.js";
+import "./chunk-ZVAYK7GU.js";
 import "./chunk-V7IZKJI3.js";
 import "./chunk-SEDEKFYQ.js";
 import "./chunk-RKNJBZ55.js";
@@ -231,7 +231,7 @@ import "./chunk-MKQBXQKU.js";
 import "./chunk-CXZQOVIE.js";
 import "./chunk-IC2TCZJ2.js";
 import "./chunk-D24OXEPB.js";
-import "./chunk-IDZFBSHN.js";
+import "./chunk-OGCAYLNA.js";
 import "./chunk-OQJIB32H.js";
 import "./chunk-HNZKVLAN.js";
 import "./chunk-EQWEIIKQ.js";
@@ -247,12 +247,12 @@ import "./chunk-KF5EUVKQ.js";
 import {
   hasIdentityRecoveryIntent,
   resolveEffectiveIdentityInjectionMode
-} from "./chunk-TDTXKOAJ.js";
+} from "./chunk-XQDRKZ7V.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import "./chunk-AJ7QCSIS.js";
 import "./chunk-VQ7B2Q6M.js";
-import "./chunk-SICXL4MK.js";
+import "./chunk-PJSK6OJM.js";
 import "./chunk-GNVZQ5JN.js";
 import "./chunk-YN2UN7N3.js";
 import "./chunk-JGSKJHF7.js";

package/dist/write-quarantine.d.ts

@@ -37,6 +37,11 @@ interface QuarantinedRecord {
     timestamp: string;
     payload: unknown;
 }
+/** A quarantined record paired with the absolute on-disk path it was read from. */
+interface QuarantineEntry {
+    record: QuarantinedRecord;
+    path: string;
+}
 interface QuarantineCaps {
     /** Keep at most this many records per principal (newest win). */
     maxEntriesPerPrincipal: number;
@@ -63,10 +68,20 @@ declare class WriteQuarantineStore {
     quarantine(input: QuarantineEntryInput): Promise<string>;
     /**
      * All valid, non-expired quarantined records across every principal, oldest
-     * first. Expired records are deleted on read (lazy GC), so an inactive
-     * principal bucket with no follow-up write is still bounded by age.
+     * first, each paired with its absolute on-disk path. Expired records are
+     * deleted on read (lazy GC), so an inactive principal bucket with no
+     * follow-up write is still bounded by age.
      */
+    entries(): Promise<QuarantineEntry[]>;
+    /** As {@link entries} but projected to records only (backward-compatible view). */
     list(): Promise<QuarantinedRecord[]>;
+    /**
+     * Delete one quarantined entry by its absolute on-disk path (as returned by
+     * {@link entries}). The path MUST resolve inside the quarantine root, mirroring
+     * the store's containment posture; a path outside the root — or one already
+     * absent — removes nothing. Returns true only when a file was actually deleted.
+     */
+    removeEntry(entryPath: string): Promise<boolean>;
     /** Total valid, non-expired quarantined record count across every principal. */
     count(): Promise<number>;
     /** lstat (no symlink follow): true only for a real directory. */
@@ -76,4 +91,4 @@ declare class WriteQuarantineStore {
     private pruneDir;
 }
 
-export { DEFAULT_QUARANTINE_CAPS, type QuarantineCaps, type QuarantineEntryInput, type QuarantineOperation, type QuarantinedRecord, WriteQuarantineStore };
+export { DEFAULT_QUARANTINE_CAPS, type QuarantineCaps, type QuarantineEntry, type QuarantineEntryInput, type QuarantineOperation, type QuarantinedRecord, WriteQuarantineStore };

package/dist/write-quarantine.js

@@ -1,7 +1,7 @@
 import {
   DEFAULT_QUARANTINE_CAPS,
   WriteQuarantineStore
-} from "./chunk-SICXL4MK.js";
+} from "./chunk-PJSK6OJM.js";
 import "./chunk-FF4KLI5W.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.8.0",
+  "version": "9.9.0",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -3045,7 +3045,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.8.0"
+    "@remnic/coding-graph": "^9.9.0"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/access-observe-quarantine.test.ts

@@ -10,6 +10,7 @@ import { tmpdir } from "node:os";
 import path from "node:path";
 import test from "node:test";
 
+import { memoryStoreRequestSchema, observeRequestSchema } from "./access-schema.js";
 import { EngramAccessService, NamespaceNotWritableError } from "./access-service.js";
 import { Orchestrator } from "./orchestrator.js";
 import type { CodingContext, PluginConfig } from "./types.js";
@@ -118,3 +119,54 @@ test("a dry-run rejected write is NOT quarantined (#1888)", async () => {
     assert.equal(await new WriteQuarantineStore(dir).count(), 0);
   });
 });
+
+test("suppressQuarantine skips dead-lettering an ACL-rejected write; without it it is parked (#1888 replay)", async () => {
+  await withService(async (service, dir) => {
+    const store = new WriteQuarantineStore(dir);
+    // Replay re-submits with suppressQuarantine set: the ACL rejection still
+    // throws, but the attempt is NOT re-parked, so replay cannot duplicate it.
+    await assert.rejects(
+      service.memoryStore({
+        content: "replayed",
+        namespace: "victim-secret",
+        authenticatedPrincipal: "alice",
+        sessionKey: "s-5",
+        suppressQuarantine: true,
+      } as unknown as Parameters<EngramAccessService["memoryStore"]>[0]),
+      NamespaceNotWritableError
+    );
+    assert.equal(await store.count(), 0);
+
+    // The identical write WITHOUT the flag is dead-lettered as before.
+    await assert.rejects(
+      service.memoryStore({
+        content: "replayed",
+        namespace: "victim-secret",
+        authenticatedPrincipal: "alice",
+        sessionKey: "s-5",
+      } as unknown as Parameters<EngramAccessService["memoryStore"]>[0]),
+      NamespaceNotWritableError
+    );
+    assert.equal(await store.count(), 1);
+  });
+});
+
+test("public write schemas strip suppressQuarantine — external callers cannot skip quarantine", () => {
+  // The write surface honors suppressQuarantine (in-process replay sets it), but
+  // it is NOT a field on the public HTTP/MCP request schemas. zod strips unknown
+  // keys, so a body carrying it is scrubbed before the service — and the access
+  // boundary re-validates the cleaned envelope — keeping ACL-rejected external
+  // writes parked rather than silently discarded.
+  const stored = memoryStoreRequestSchema.parse({
+    sessionKey: "s",
+    content: "hello",
+    suppressQuarantine: true,
+  } as Record<string, unknown>);
+  assert.equal("suppressQuarantine" in stored, false);
+  const observed = observeRequestSchema.parse({
+    sessionKey: "s",
+    messages: [{ role: "user", content: "hi" }],
+    suppressQuarantine: true,
+  } as Record<string, unknown>);
+  assert.equal("suppressQuarantine" in observed, false);
+});

package/src/access-observe-write-surface.ts

@@ -463,8 +463,10 @@ export class AccessObserveWriteSurface {
     try {
       namespace = await this.deps.resolveCodingScopedWriteNamespace(request);
     } catch (err) {
-      // A dry run is a no-persist validation, so never dead-letter it.
-      if (request.dryRun !== true) {
+      // A dry run is a no-persist validation, and a replay re-submit sets
+      // suppressQuarantine so a still-unwritable target propagates instead of
+      // re-parking (issue #1888): never dead-letter either.
+      if (request.dryRun !== true && request.suppressQuarantine !== true) {
         await this.parkRejectedWrite(err, "memory_store", request);
       }
       throw err;
@@ -548,8 +550,9 @@ export class AccessObserveWriteSurface {
     try {
       namespace = await this.deps.resolveCodingScopedWriteNamespace(request);
     } catch (err) {
-      // A dry run is a no-persist validation, so never dead-letter it.
-      if (request.dryRun !== true) {
+      // A dry run never persists, and a replay re-submit sets suppressQuarantine
+      // so a still-unwritable target propagates instead of re-parking (#1888).
+      if (request.dryRun !== true && request.suppressQuarantine !== true) {
         await this.parkRejectedWrite(err, "suggestion_submit", request);
       }
       throw err;
@@ -655,7 +658,11 @@ export class AccessObserveWriteSurface {
     try {
       scope = await this.deps.resolveMemoryScopePlan(request);
     } catch (err) {
-      await this.parkRejectedWrite(err, "observe", request);
+      // A replay re-submit sets suppressQuarantine so a still-unwritable target
+      // propagates instead of re-parking (#1888); observe has no dryRun path.
+      if (request.suppressQuarantine !== true) {
+        await this.parkRejectedWrite(err, "observe", request);
+      }
       throw err;
     }
     const writeNamespace = scope.writeNamespace;

package/src/access-service.ts

@@ -943,11 +943,10 @@ export interface EngramAccessWriteEnvelope {
   idempotencyKey?: string;
   dryRun?: boolean;
   sessionKey?: string;
-  /**
-   * Trusted transport-bound principal. This must never come from untrusted client payloads.
-   * When present, write authorization is evaluated against this principal instead of sessionKey.
-   */
+  /** Trusted transport-bound principal (never from client payloads); authorizes writes instead of sessionKey. */
   authenticatedPrincipal?: string;
+  /** When set, an ACL rejection is NOT dead-lettered (#1888) so `remnic quarantine replay` can re-submit through this same surface without re-quarantining and duplicating the parked record. */
+  readonly suppressQuarantine?: boolean;
 }
 
 /**
@@ -1068,6 +1067,7 @@ export interface EngramAccessObserveRequest extends SourceConnectorProvenance {
    * Creates a `CodingContext` with `projectId: "tag:<projectTag>"`.
    */
   projectTag?: string;
+  readonly suppressQuarantine?: boolean; // #1888: mirrors EngramAccessWriteEnvelope.suppressQuarantine (replay re-submit skips dead-lettering).
 }
 
 /**

package/src/write-quarantine.test.ts

@@ -191,3 +191,55 @@ test("list() surfaces a symlink-escaping root instead of reporting empty", async
     }
   });
 });
+
+test("entries() pairs each record with its on-disk path and list() projects records", async () => {
+  await withTempDir(async (dir) => {
+    const store = new WriteQuarantineStore(dir);
+    const written = await store.quarantine({
+      operation: "memory_store",
+      principal: "alice",
+      attemptedNamespace: "victim-secret",
+      payload: { content: "hi" },
+    });
+    const entries = await store.entries();
+    assert.equal(entries.length, 1);
+    assert.equal(entries[0]?.path, written);
+    assert.ok(isInside(store.root, entries[0]?.path ?? ""));
+    assert.equal(entries[0]?.record.operation, "memory_store");
+    assert.deepEqual(entries[0]?.record.payload, { content: "hi" });
+    assert.deepEqual(
+      await store.list(),
+      entries.map((entry) => entry.record)
+    );
+  });
+});
+
+test("removeEntry deletes an entry by its path and is idempotent", async () => {
+  await withTempDir(async (dir) => {
+    const store = new WriteQuarantineStore(dir);
+    await store.quarantine({ operation: "observe", principal: "alice", attemptedNamespace: "ns", payload: 1 });
+    const [entry] = await store.entries();
+    assert.ok(entry);
+    assert.equal(await store.removeEntry(entry.path), true);
+    assert.equal(await store.count(), 0);
+    // An already-absent path removes nothing.
+    assert.equal(await store.removeEntry(entry.path), false);
+  });
+});
+
+test("removeEntry refuses a path outside the quarantine root", async () => {
+  await withTempDir(async (dir) => {
+    const store = new WriteQuarantineStore(dir);
+    await store.quarantine({ operation: "observe", principal: "alice", attemptedNamespace: "ns", payload: 1 });
+    const outside = await mkdtemp(path.join(tmpdir(), "remnic-quarantine-outside-"));
+    const victim = path.join(outside, "keep.json");
+    await writeFile(victim, "{}", "utf8");
+    try {
+      assert.equal(await store.removeEntry(victim), false);
+      assert.equal((await readdir(outside)).length, 1, "file outside root must survive");
+      assert.equal(await store.count(), 1, "in-root entry untouched");
+    } finally {
+      await rm(outside, { recursive: true, force: true });
+    }
+  });
+});

package/src/write-quarantine.ts

@@ -48,6 +48,12 @@ export interface QuarantinedRecord {
   payload: unknown;
 }
 
+/** A quarantined record paired with the absolute on-disk path it was read from. */
+export interface QuarantineEntry {
+  record: QuarantinedRecord;
+  path: string;
+}
+
 export interface QuarantineCaps {
   /** Keep at most this many records per principal (newest win). */
   maxEntriesPerPrincipal: number;
@@ -145,12 +151,13 @@ export class WriteQuarantineStore {
 
   /**
    * All valid, non-expired quarantined records across every principal, oldest
-   * first. Expired records are deleted on read (lazy GC), so an inactive
-   * principal bucket with no follow-up write is still bounded by age.
+   * first, each paired with its absolute on-disk path. Expired records are
+   * deleted on read (lazy GC), so an inactive principal bucket with no
+   * follow-up write is still bounded by age.
    */
-  async list(): Promise<QuarantinedRecord[]> {
+  async entries(): Promise<QuarantineEntry[]> {
     const now = Date.now();
-    const records: QuarantinedRecord[] = [];
+    const entries: QuarantineEntry[] = [];
     for (const dir of await this.principalDirs()) {
       for (const file of await this.entryFiles(dir)) {
         const info = await stat(file).catch(() => null);
@@ -165,11 +172,53 @@ export class WriteQuarantineStore {
         } catch {
           continue;
         }
-        if (isQuarantinedRecord(parsed)) records.push(parsed);
+        if (isQuarantinedRecord(parsed)) entries.push({ record: parsed, path: file });
       }
     }
-    records.sort((a, b) => (a.timestamp < b.timestamp ? -1 : a.timestamp > b.timestamp ? 1 : 0));
-    return records;
+    entries.sort((a, b) => {
+      const at = a.record.timestamp;
+      const bt = b.record.timestamp;
+      return at < bt ? -1 : at > bt ? 1 : 0;
+    });
+    return entries;
+  }
+
+  /** As {@link entries} but projected to records only (backward-compatible view). */
+  async list(): Promise<QuarantinedRecord[]> {
+    return (await this.entries()).map((entry) => entry.record);
+  }
+
+  /**
+   * Delete one quarantined entry by its absolute on-disk path (as returned by
+   * {@link entries}). The path MUST resolve inside the quarantine root, mirroring
+   * the store's containment posture; a path outside the root — or one already
+   * absent — removes nothing. Returns true only when a file was actually deleted.
+   */
+  async removeEntry(entryPath: string): Promise<boolean> {
+    const rootAbs = path.resolve(this.root);
+    const rel = path.relative(rootAbs, path.resolve(entryPath));
+    if (rel === "" || rel === ".." || rel.startsWith(`..${path.sep}`) || path.isAbsolute(rel)) {
+      return false;
+    }
+    // Symlink-race-safe resolution (issue #1888): resolveSafeStoragePath rejects
+    // any symlinked path component and verifies the REAL path stays inside the
+    // real quarantine root before we touch it, so a swapped component cannot
+    // redirect the deletion outside the store — lexical containment alone is not
+    // sufficient against a TOCTOU symlink swap.
+    let safe: string;
+    try {
+      safe = await resolveSafeStoragePath(rootAbs, rel);
+    } catch {
+      return false;
+    }
+    try {
+      await rm(safe, { force: false });
+      return true;
+    } catch (err) {
+      const errno = err as NodeJS.ErrnoException;
+      if (errno?.code === "ENOENT") return false;
+      throw err;
+    }
   }
 
   /** Total valid, non-expired quarantined record count across every principal. */

package/dist/chunk-SICXL4MK.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/write-quarantine.ts"],"sourcesContent":["/**\n * Dead-letter quarantine for writes rejected by the namespace write-ACL\n * (issue #1888).\n *\n * When `observe` / `memory_store` / `suggestion_submit` fail namespace\n * authorization, the payload used to be dropped with no recoverable copy: a\n * client configured with a namespace that matches no policy (and is not the\n * default/shared namespace) had every write in the window silently destroyed.\n * The ACL rejection is CORRECT and stays fail-closed; this store only\n * preserves the payload so it can be replayed after the config is fixed,\n * following the AGENTS.md \"reject loudly but never destroy state\" posture\n * (patterns 14/42).\n *\n * Records live OUTSIDE any memory namespace at\n * `<memoryDir>/state/quarantine/<principalSafe>/<timestamp>-<id>.json`, keyed\n * by the encoded principal, and are bounded per principal by count and age.\n * Every path is resolved from `memoryDir` through `resolveSafeStoragePath`, so\n * a symlinked `state`/`quarantine` cannot redirect writes outside the memory\n * directory. The store never re-routes a payload into a writable namespace.\n */\n\nimport { randomUUID } from \"node:crypto\";\nimport type { Dirent } from \"node:fs\";\nimport { lstat, mkdir, readFile, readdir, rename, rm, stat, writeFile } from \"node:fs/promises\";\nimport path from \"node:path\";\n\nimport { encodeStoragePathSegment, resolveSafeStoragePath } from \"./storage-paths.js\";\n\nexport type QuarantineOperation = \"observe\" | \"memory_store\" | \"suggestion_submit\";\n\nexport interface QuarantineEntryInput {\n  operation: QuarantineOperation;\n  /** Authenticated principal the write was attributed to, if any. */\n  principal: string | undefined;\n  /** Namespace the caller attempted to write and was denied. */\n  attemptedNamespace: string;\n  /** The original request payload, preserved verbatim for replay. */\n  payload: unknown;\n  /** ISO timestamp; defaults to now. Injectable for deterministic tests. */\n  timestamp?: string;\n}\n\nexport interface QuarantinedRecord {\n  operation: QuarantineOperation;\n  principal: string | null;\n  attemptedNamespace: string;\n  timestamp: string;\n  payload: unknown;\n}\n\nexport interface QuarantineCaps {\n  /** Keep at most this many records per principal (newest win). */\n  maxEntriesPerPrincipal: number;\n  /** Drop records older than this many milliseconds. */\n  maxAgeMs: number;\n}\n\nexport const DEFAULT_QUARANTINE_CAPS: QuarantineCaps = {\n  maxEntriesPerPrincipal: 500,\n  maxAgeMs: 14 * 24 * 60 * 60 * 1000,\n};\n\nconst QUARANTINE_DIRNAME = \"quarantine\";\n\nfunction validateCaps(caps: QuarantineCaps): void {\n  if (!Number.isInteger(caps.maxEntriesPerPrincipal) || caps.maxEntriesPerPrincipal < 1) {\n    throw new Error(\n      `WriteQuarantineStore: maxEntriesPerPrincipal must be a positive integer (got ${caps.maxEntriesPerPrincipal})`\n    );\n  }\n  if (!Number.isFinite(caps.maxAgeMs) || caps.maxAgeMs <= 0) {\n    throw new Error(\n      `WriteQuarantineStore: maxAgeMs must be a positive finite number of milliseconds (got ${caps.maxAgeMs})`\n    );\n  }\n}\n\nfunction isQuarantinedRecord(value: unknown): value is QuarantinedRecord {\n  if (!value || typeof value !== \"object\") return false;\n  const record = value as Record<string, unknown>;\n  return (\n    (record.operation === \"observe\" ||\n      record.operation === \"memory_store\" ||\n      record.operation === \"suggestion_submit\") &&\n    (record.principal === null || typeof record.principal === \"string\") &&\n    typeof record.attemptedNamespace === \"string\" &&\n    typeof record.timestamp === \"string\" &&\n    \"payload\" in record\n  );\n}\n\nexport class WriteQuarantineStore {\n  private readonly memoryDir: string;\n\n  constructor(\n    memoryDir: string,\n    private readonly caps: QuarantineCaps = DEFAULT_QUARANTINE_CAPS\n  ) {\n    validateCaps(caps);\n    this.memoryDir = path.resolve(memoryDir);\n  }\n\n  /** Absolute quarantine root (`<memoryDir>/state/quarantine`). */\n  get root(): string {\n    return path.join(this.memoryDir, \"state\", QUARANTINE_DIRNAME);\n  }\n\n  /**\n   * Resolve a path under the quarantine root, checked for containment and\n   * symlink traversal from `memoryDir` down — so a symlinked `state` or\n   * `quarantine` component that escapes the memory directory is rejected.\n   */\n  private safeDir(...segments: string[]): Promise<string> {\n    return resolveSafeStoragePath(this.memoryDir, \"state\", QUARANTINE_DIRNAME, ...segments);\n  }\n\n  /**\n   * Park a rejected write. Returns the absolute path of the record written.\n   * Prunes the principal's bucket to the configured caps afterward.\n   */\n  async quarantine(input: QuarantineEntryInput): Promise<string> {\n    const timestamp = input.timestamp ?? new Date().toISOString();\n    const record: QuarantinedRecord = {\n      operation: input.operation,\n      principal: input.principal ?? null,\n      attemptedNamespace: input.attemptedNamespace,\n      timestamp,\n      payload: input.payload,\n    };\n    const principalSegment = encodeStoragePathSegment(input.principal ?? \"unknown\");\n    const fileName = `${timestamp.replace(/[:.]/g, \"-\")}-${randomUUID().slice(0, 8)}.json`;\n\n    const dir = await this.safeDir(principalSegment);\n    await mkdir(dir, { recursive: true });\n    // The temp write uses the exclusive `wx` flag so a pre-planted symlink at\n    // the temp name can never be followed (O_EXCL); rename is atomic (rule 42).\n    const finalPath = await this.safeDir(principalSegment, fileName);\n    const tmpPath = await this.safeDir(principalSegment, `${fileName}.tmp`);\n    await writeFile(tmpPath, JSON.stringify(record, null, 2), { encoding: \"utf8\", flag: \"wx\" });\n    await rename(tmpPath, finalPath);\n\n    await this.pruneDir(dir);\n    return finalPath;\n  }\n\n  /**\n   * All valid, non-expired quarantined records across every principal, oldest\n   * first. Expired records are deleted on read (lazy GC), so an inactive\n   * principal bucket with no follow-up write is still bounded by age.\n   */\n  async list(): Promise<QuarantinedRecord[]> {\n    const now = Date.now();\n    const records: QuarantinedRecord[] = [];\n    for (const dir of await this.principalDirs()) {\n      for (const file of await this.entryFiles(dir)) {\n        const info = await stat(file).catch(() => null);\n        if (!info) continue;\n        if (now - info.mtimeMs > this.caps.maxAgeMs) {\n          await rm(file, { force: true }).catch(() => {});\n          continue;\n        }\n        let parsed: unknown;\n        try {\n          parsed = JSON.parse(await readFile(file, \"utf8\"));\n        } catch {\n          continue;\n        }\n        if (isQuarantinedRecord(parsed)) records.push(parsed);\n      }\n    }\n    records.sort((a, b) => (a.timestamp < b.timestamp ? -1 : a.timestamp > b.timestamp ? 1 : 0));\n    return records;\n  }\n\n  /** Total valid, non-expired quarantined record count across every principal. */\n  async count(): Promise<number> {\n    return (await this.list()).length;\n  }\n\n  /** lstat (no symlink follow): true only for a real directory. */\n  private async isRealDir(dir: string): Promise<boolean> {\n    const info = await lstat(dir).catch(() => null);\n    return info?.isDirectory() === true;\n  }\n\n  private async principalDirs(): Promise<string[]> {\n    // safeDir() rejects a symlinked/containment-escaping root — let that\n    // propagate instead of masquerading as an empty store.\n    const root = await this.safeDir();\n    if (!(await this.isRealDir(root))) return [];\n    let entries: Dirent[];\n    try {\n      entries = await readdir(root, { withFileTypes: true });\n    } catch (err) {\n      // Root vanished mid-scan → legitimately empty. Any other failure\n      // (permissions, IO) is a genuine inspection failure and must surface.\n      if ((err as NodeJS.ErrnoException)?.code === \"ENOENT\") return [];\n      throw err;\n    }\n    return entries\n      .filter((entry) => entry.isDirectory())\n      .map((entry) => path.join(root, entry.name))\n      .sort();\n  }\n\n  private async entryFiles(dir: string): Promise<string[]> {\n    if (!(await this.isRealDir(dir))) return [];\n    let entries: Dirent[];\n    try {\n      entries = await readdir(dir, { withFileTypes: true });\n    } catch (err) {\n      if ((err as NodeJS.ErrnoException)?.code === \"ENOENT\") return [];\n      throw err;\n    }\n    return entries\n      .filter((entry) => entry.isFile() && entry.name.endsWith(\".json\"))\n      .map((entry) => path.join(dir, entry.name))\n      .sort();\n  }\n\n  private async pruneDir(dir: string): Promise<void> {\n    const files = await this.entryFiles(dir);\n    const now = Date.now();\n    const survivors: Array<{ path: string; mtimeMs: number }> = [];\n    for (const file of files) {\n      const info = await stat(file).catch(() => null);\n      if (!info) continue;\n      if (now - info.mtimeMs > this.caps.maxAgeMs) {\n        await rm(file, { force: true }).catch(() => {});\n        continue;\n      }\n      survivors.push({ path: file, mtimeMs: info.mtimeMs });\n    }\n    const surplus = survivors.length - this.caps.maxEntriesPerPrincipal;\n    if (surplus <= 0) return;\n    survivors.sort((a, b) => a.mtimeMs - b.mtimeMs || (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));\n    for (const victim of survivors.slice(0, surplus)) {\n      await rm(victim.path, { force: true }).catch(() => {});\n    }\n  }\n}\n"],"mappings":";;;;;;AAqBA,SAAS,kBAAkB;AAE3B,SAAS,OAAO,OAAO,UAAU,SAAS,QAAQ,IAAI,MAAM,iBAAiB;AAC7E,OAAO,UAAU;AAiCV,IAAM,0BAA0C;AAAA,EACrD,wBAAwB;AAAA,EACxB,UAAU,KAAK,KAAK,KAAK,KAAK;AAChC;AAEA,IAAM,qBAAqB;AAE3B,SAAS,aAAa,MAA4B;AAChD,MAAI,CAAC,OAAO,UAAU,KAAK,sBAAsB,KAAK,KAAK,yBAAyB,GAAG;AACrF,UAAM,IAAI;AAAA,MACR,gFAAgF,KAAK,sBAAsB;AAAA,IAC7G;AAAA,EACF;AACA,MAAI,CAAC,OAAO,SAAS,KAAK,QAAQ,KAAK,KAAK,YAAY,GAAG;AACzD,UAAM,IAAI;AAAA,MACR,wFAAwF,KAAK,QAAQ;AAAA,IACvG;AAAA,EACF;AACF;AAEA,SAAS,oBAAoB,OAA4C;AACvE,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,SAAS;AACf,UACG,OAAO,cAAc,aACpB,OAAO,cAAc,kBACrB,OAAO,cAAc,yBACtB,OAAO,cAAc,QAAQ,OAAO,OAAO,cAAc,aAC1D,OAAO,OAAO,uBAAuB,YACrC,OAAO,OAAO,cAAc,YAC5B,aAAa;AAEjB;AAEO,IAAM,uBAAN,MAA2B;AAAA,EAGhC,YACE,WACiB,OAAuB,yBACxC;AADiB;AAEjB,iBAAa,IAAI;AACjB,SAAK,YAAY,KAAK,QAAQ,SAAS;AAAA,EACzC;AAAA,EAJmB;AAAA,EAJF;AAAA;AAAA,EAWjB,IAAI,OAAe;AACjB,WAAO,KAAK,KAAK,KAAK,WAAW,SAAS,kBAAkB;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,WAAW,UAAqC;AACtD,WAAO,uBAAuB,KAAK,WAAW,SAAS,oBAAoB,GAAG,QAAQ;AAAA,EACxF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,WAAW,OAA8C;AAC7D,UAAM,YAAY,MAAM,cAAa,oBAAI,KAAK,GAAE,YAAY;AAC5D,UAAM,SAA4B;AAAA,MAChC,WAAW,MAAM;AAAA,MACjB,WAAW,MAAM,aAAa;AAAA,MAC9B,oBAAoB,MAAM;AAAA,MAC1B;AAAA,MACA,SAAS,MAAM;AAAA,IACjB;AACA,UAAM,mBAAmB,yBAAyB,MAAM,aAAa,SAAS;AAC9E,UAAM,WAAW,GAAG,UAAU,QAAQ,SAAS,GAAG,CAAC,IAAI,WAAW,EAAE,MAAM,GAAG,CAAC,CAAC;AAE/E,UAAM,MAAM,MAAM,KAAK,QAAQ,gBAAgB;AAC/C,UAAM,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AAGpC,UAAM,YAAY,MAAM,KAAK,QAAQ,kBAAkB,QAAQ;AAC/D,UAAM,UAAU,MAAM,KAAK,QAAQ,kBAAkB,GAAG,QAAQ,MAAM;AACtE,UAAM,UAAU,SAAS,KAAK,UAAU,QAAQ,MAAM,CAAC,GAAG,EAAE,UAAU,QAAQ,MAAM,KAAK,CAAC;AAC1F,UAAM,OAAO,SAAS,SAAS;AAE/B,UAAM,KAAK,SAAS,GAAG;AACvB,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,OAAqC;AACzC,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,UAA+B,CAAC;AACtC,eAAW,OAAO,MAAM,KAAK,cAAc,GAAG;AAC5C,iBAAW,QAAQ,MAAM,KAAK,WAAW,GAAG,GAAG;AAC7C,cAAM,OAAO,MAAM,KAAK,IAAI,EAAE,MAAM,MAAM,IAAI;AAC9C,YAAI,CAAC,KAAM;AACX,YAAI,MAAM,KAAK,UAAU,KAAK,KAAK,UAAU;AAC3C,gBAAM,GAAG,MAAM,EAAE,OAAO,KAAK,CAAC,EAAE,MAAM,MAAM;AAAA,UAAC,CAAC;AAC9C;AAAA,QACF;AACA,YAAI;AACJ,YAAI;AACF,mBAAS,KAAK,MAAM,MAAM,SAAS,MAAM,MAAM,CAAC;AAAA,QAClD,QAAQ;AACN;AAAA,QACF;AACA,YAAI,oBAAoB,MAAM,EAAG,SAAQ,KAAK,MAAM;AAAA,MACtD;AAAA,IACF;AACA,YAAQ,KAAK,CAAC,GAAG,MAAO,EAAE,YAAY,EAAE,YAAY,KAAK,EAAE,YAAY,EAAE,YAAY,IAAI,CAAE;AAC3F,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,MAAM,QAAyB;AAC7B,YAAQ,MAAM,KAAK,KAAK,GAAG;AAAA,EAC7B;AAAA;AAAA,EAGA,MAAc,UAAU,KAA+B;AACrD,UAAM,OAAO,MAAM,MAAM,GAAG,EAAE,MAAM,MAAM,IAAI;AAC9C,WAAO,MAAM,YAAY,MAAM;AAAA,EACjC;AAAA,EAEA,MAAc,gBAAmC;AAG/C,UAAM,OAAO,MAAM,KAAK,QAAQ;AAChC,QAAI,CAAE,MAAM,KAAK,UAAU,IAAI,EAAI,QAAO,CAAC;AAC3C,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,QAAQ,MAAM,EAAE,eAAe,KAAK,CAAC;AAAA,IACvD,SAAS,KAAK;AAGZ,UAAK,KAA+B,SAAS,SAAU,QAAO,CAAC;AAC/D,YAAM;AAAA,IACR;AACA,WAAO,QACJ,OAAO,CAAC,UAAU,MAAM,YAAY,CAAC,EACrC,IAAI,CAAC,UAAU,KAAK,KAAK,MAAM,MAAM,IAAI,CAAC,EAC1C,KAAK;AAAA,EACV;AAAA,EAEA,MAAc,WAAW,KAAgC;AACvD,QAAI,CAAE,MAAM,KAAK,UAAU,GAAG,EAAI,QAAO,CAAC;AAC1C,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IACtD,SAAS,KAAK;AACZ,UAAK,KAA+B,SAAS,SAAU,QAAO,CAAC;AAC/D,YAAM;AAAA,IACR;AACA,WAAO,QACJ,OAAO,CAAC,UAAU,MAAM,OAAO,KAAK,MAAM,KAAK,SAAS,OAAO,CAAC,EAChE,IAAI,CAAC,UAAU,KAAK,KAAK,KAAK,MAAM,IAAI,CAAC,EACzC,KAAK;AAAA,EACV;AAAA,EAEA,MAAc,SAAS,KAA4B;AACjD,UAAM,QAAQ,MAAM,KAAK,WAAW,GAAG;AACvC,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,YAAsD,CAAC;AAC7D,eAAW,QAAQ,OAAO;AACxB,YAAM,OAAO,MAAM,KAAK,IAAI,EAAE,MAAM,MAAM,IAAI;AAC9C,UAAI,CAAC,KAAM;AACX,UAAI,MAAM,KAAK,UAAU,KAAK,KAAK,UAAU;AAC3C,cAAM,GAAG,MAAM,EAAE,OAAO,KAAK,CAAC,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAC9C;AAAA,MACF;AACA,gBAAU,KAAK,EAAE,MAAM,MAAM,SAAS,KAAK,QAAQ,CAAC;AAAA,IACtD;AACA,UAAM,UAAU,UAAU,SAAS,KAAK,KAAK;AAC7C,QAAI,WAAW,EAAG;AAClB,cAAU,KAAK,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE;AAClG,eAAW,UAAU,UAAU,MAAM,GAAG,OAAO,GAAG;AAChD,YAAM,GAAG,OAAO,MAAM,EAAE,OAAO,KAAK,CAAC,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA,IACvD;AAAA,EACF;AACF;","names":[]}