signetai 0.207.2 → 0.208.0

package/dist/mcp-stdio.js

@@ -14818,6 +14818,34 @@ function up135(db) {
 			ON memory_head_publications(agent_id, status, revision DESC);
 	`);
 }
+function up136(db) {
+  const cols = new Set(db.prepare("PRAGMA table_info(memory_head_revisions)").all().map((r2) => r2.name));
+  for (const [name, type] of [
+    ["entry_id", "TEXT"],
+    ["entry_text", "TEXT"],
+    ["operation", "TEXT"],
+    ["source_refs_json", "TEXT"],
+    ["supporting_quotes_json", "TEXT"]
+  ]) {
+    if (!cols.has(name))
+      db.exec(`ALTER TABLE memory_head_revisions ADD COLUMN ${name} ${type}`);
+  }
+  db.exec("CREATE UNIQUE INDEX IF NOT EXISTS idx_memory_head_revisions_entry ON memory_head_revisions(agent_id, revision, entry_id)");
+}
+function up137(db) {
+  const cols = new Set(db.prepare("PRAGMA table_info(dreaming_passes)").all().map((r2) => r2.name));
+  for (const [name, type] of [
+    ["head_revision", "INTEGER"],
+    ["head_hash", "TEXT"],
+    ["head_added", "INTEGER NOT NULL DEFAULT 0"],
+    ["head_updated", "INTEGER NOT NULL DEFAULT 0"],
+    ["head_removed", "INTEGER NOT NULL DEFAULT 0"],
+    ["head_deferred", "INTEGER NOT NULL DEFAULT 0"],
+    ["head_no_op", "INTEGER NOT NULL DEFAULT 0"]
+  ])
+    if (!cols.has(name))
+      db.exec(`ALTER TABLE dreaming_passes ADD COLUMN ${name} ${type}`);
+}
 function resolveDefaultBasePath() {
   return process.env.SIGNET_PATH || join2(homedir2(), ".agents");
 }
@@ -15130,6 +15158,14 @@ function normalizeLoopbackHost(host) {
   const normalized = host.trim().toLowerCase().replace(/^\[|\]$/g, "");
   return normalized === "localhost" || normalized === "::1" || normalized === "0:0:0:0:0:0:0:1" ? LOOPBACK_HOST : host;
 }
+function parseSimpleYaml(text) {
+  try {
+    const parsed = import_yaml2.default.parse(text);
+    return typeof parsed === "object" && parsed !== null ? parsed : {};
+  } catch {
+    return {};
+  }
+}
 function readEnv(env, name) {
   const value = env[name];
   if (typeof value !== "string")
@@ -15303,7 +15339,7 @@ var __create2, __getProtoOf2, __defProp2, __getOwnPropNames2, __hasOwnProp2, __t
       configurable: true,
       set: __exportSetter2.bind(all, name)
     });
-}, __esm2 = (fn, res) => () => (fn && (res = fn(fn = 0)), res), __require, require_identity, require_visit, require_directives, require_anchors, require_applyReviver, require_toJS, require_Node, require_Alias, require_Scalar, require_createNode, require_Collection, require_stringifyComment, require_foldFlowLines, require_stringifyString, require_stringify, require_stringifyPair, require_log, require_merge, require_addPairToJSMap, require_Pair, require_stringifyCollection, require_YAMLMap, require_map, require_YAMLSeq, require_seq, require_string, require_null, require_bool, require_stringifyNumber, require_float, require_int, require_schema, require_schema2, require_binary, require_pairs, require_omap, require_bool2, require_float2, require_int2, require_set, require_timestamp, require_schema3, require_tags, require_Schema, require_stringifyDocument, require_Document, require_errors2, require_resolve_props, require_util_contains_newline, require_util_flow_indent_check, require_util_map_includes, require_resolve_block_map, require_resolve_block_seq, require_resolve_end, require_resolve_flow_collection, require_compose_collection, require_resolve_block_scalar, require_resolve_flow_scalar, require_compose_scalar, require_util_empty_scalar_position, require_compose_node, require_compose_doc, require_composer, require_cst_scalar, require_cst_stringify, require_cst_visit, require_cst, require_lexer, require_line_counter, require_parser, require_public_api, require_dist2, require_keyring_linux_x64_musl, require_package, require_keyring_linux_x64_gnu, require_package2, require_keyring, libsodium_default, init_libsodium, exports_libsodium_wrappers, r, t, a, _, n, s, m, libsodium_wrappers_default, init_libsodium_wrappers, PIPELINE_PROVIDER_CHOICES, SYNTHESIS_PROVIDER_CHOICES, DEFAULT_PIPELINE_TIMEOUT_MS = 90000, PIPELINE_PROVIDER_SET, SYNTHESIS_PROVIDER_SET, MEMORY_CONTENT_SAFETY_POLICY_VERSION = "memory-content-safety-v1", MEMORY_CONTENT_WITHHELD_NOTICE = "[memory content withheld by safety policy]", MEMORY_CONTENT_SAFETY_REASONS, INVISIBLE_UNICODE_RE, STRONG_DEFENSIVE_CONTEXT_RE, REPORTING_CONTEXT_RE, REPORTING_BEFORE_RE, REPORTING_AFTER_RE, NEGATED_DIRECTIVE_RE, PROMPT_INJECTION_RES, TOOL_DIRECTIVE_RES, EXFILTRATION_RE, EXFILTRATION_REVERSE, CREDENTIAL_HARVESTING_RE, DANGEROUS_SHELL_RE, DAEMON_DERIVED_MEMORY_SOURCE_TYPES, MEMORIES_FTS_TOKENIZER = "unicode61", FTS_STATE_TABLE = "memories_fts_state", COLUMNS, DEPENDENCY_TYPES, DERIVED_SOURCE_TYPES, TOKEN_COLUMNS, COLUMNS2, COMPLETION_BOUNDARY_REASONS, MIGRATIONS, LATEST_SCHEMA_VERSION, NETWORK_FILESYSTEM_TYPES, __filename2, __dirname2, import_yaml, SERVICE = "ai.signet.secrets", require2, modulePromise = null, syncModule, adapterForTests = null, secretEventRecorder = () => {}, SECRET_STORE_TEMP_PREFIX = "secrets.enc.tmp-", NATIVE_STORE_VERSION = 2, DEGRADED_WARNING_FILE = ".degraded-warning", KEYRING_ACCOUNT_SCOPE = "workspace", SecretKeyringError, NAME_RE, DEFAULT_TELEMETRY_POSTHOG_HOST = "https://us.i.posthog.com", DEFAULT_TELEMETRY_POSTHOG_API_KEY = "phc_mLsvJmbmp6e9UarrX9Cq5QtTjVNiiphM9mvi5Xnddd8Q", DEFAULT_TELEMETRY_FLUSH_INTERVAL_MS = 60000, DEFAULT_TELEMETRY_FLUSH_BATCH_SIZE = 50, ENTITY_TYPES, ATTRIBUTE_KINDS, DEPENDENCY_TYPES2, ONTOLOGY_PROPOSAL_OPERATIONS, LOOPBACK_HOST = "127.0.0.1", LOCAL_BINDS, import_yaml2, native = null, SIGNET_SECRETS_PLUGIN_ID = "signet.secrets", SIGNET_GRAPHIQ_PLUGIN_ID = "signet.graphiq", SIGNET_PLUGIN_REGISTRY_DIR = ".daemon/plugins", SIGNET_PLUGIN_REGISTRY_FILE = "registry-v1.json", SIGNET_GRAPHIQ_STATE_FILE = ".daemon/graphiq/state.json", GRAPHIQ_DEFAULT_INSTALL_DIR, SIGNET_SOURCE_CHECKOUT_DIRNAME = "signetai", SIGNET_GIT_ALLOWED_DIRECTORIES, SIGNET_GIT_PROTECTED_PATHS, SIGNET_GIT_TRACKED_PATHS, SIGNET_GITIGNORE_PROTECTED_PATTERNS, DEFAULT_DISCORD_DESKTOP_CACHE_PATH, DEFAULT_GITHUB_RESOURCE_TYPES, VALID_GITHUB_RESOURCE_TYPES, IDENTITY_FILES, REQUIRED_IDENTITY_KEYS, OPTIONAL_IDENTITY_KEYS, home, SOURCE_NATIVE_TOPOLOGY_ENTITY_TYPES;
+}, __esm2 = (fn, res) => () => (fn && (res = fn(fn = 0)), res), __require, require_identity, require_visit, require_directives, require_anchors, require_applyReviver, require_toJS, require_Node, require_Alias, require_Scalar, require_createNode, require_Collection, require_stringifyComment, require_foldFlowLines, require_stringifyString, require_stringify, require_stringifyPair, require_log, require_merge, require_addPairToJSMap, require_Pair, require_stringifyCollection, require_YAMLMap, require_map, require_YAMLSeq, require_seq, require_string, require_null, require_bool, require_stringifyNumber, require_float, require_int, require_schema, require_schema2, require_binary, require_pairs, require_omap, require_bool2, require_float2, require_int2, require_set, require_timestamp, require_schema3, require_tags, require_Schema, require_stringifyDocument, require_Document, require_errors2, require_resolve_props, require_util_contains_newline, require_util_flow_indent_check, require_util_map_includes, require_resolve_block_map, require_resolve_block_seq, require_resolve_end, require_resolve_flow_collection, require_compose_collection, require_resolve_block_scalar, require_resolve_flow_scalar, require_compose_scalar, require_util_empty_scalar_position, require_compose_node, require_compose_doc, require_composer, require_cst_scalar, require_cst_stringify, require_cst_visit, require_cst, require_lexer, require_line_counter, require_parser, require_public_api, require_dist2, require_keyring_linux_x64_musl, require_package, require_keyring_linux_x64_gnu, require_package2, require_keyring, libsodium_default, init_libsodium, exports_libsodium_wrappers, r, t, a, _, n, s, m, libsodium_wrappers_default, init_libsodium_wrappers, PIPELINE_PROVIDER_CHOICES, SYNTHESIS_PROVIDER_CHOICES, DEFAULT_PIPELINE_TIMEOUT_MS = 90000, PIPELINE_PROVIDER_SET, SYNTHESIS_PROVIDER_SET, MEMORY_CONTENT_SAFETY_POLICY_VERSION = "memory-content-safety-v1", MEMORY_CONTENT_WITHHELD_NOTICE = "[memory content withheld by safety policy]", MEMORY_CONTENT_SAFETY_REASONS, INVISIBLE_UNICODE_RE, STRONG_DEFENSIVE_CONTEXT_RE, REPORTING_CONTEXT_RE, REPORTING_BEFORE_RE, REPORTING_AFTER_RE, NEGATED_DIRECTIVE_RE, PROMPT_INJECTION_RES, TOOL_DIRECTIVE_RES, EXFILTRATION_RE, EXFILTRATION_REVERSE, CREDENTIAL_HARVESTING_RE, DANGEROUS_SHELL_RE, DAEMON_DERIVED_MEMORY_SOURCE_TYPES, MEMORIES_FTS_TOKENIZER = "unicode61", FTS_STATE_TABLE = "memories_fts_state", COLUMNS, DEPENDENCY_TYPES, DERIVED_SOURCE_TYPES, TOKEN_COLUMNS, COLUMNS2, COMPLETION_BOUNDARY_REASONS, MIGRATIONS, LATEST_SCHEMA_VERSION, NETWORK_FILESYSTEM_TYPES, __filename2, __dirname2, import_yaml, SERVICE = "ai.signet.secrets", require2, modulePromise = null, syncModule, adapterForTests = null, secretEventRecorder = () => {}, SECRET_STORE_TEMP_PREFIX = "secrets.enc.tmp-", NATIVE_STORE_VERSION = 2, DEGRADED_WARNING_FILE = ".degraded-warning", KEYRING_ACCOUNT_SCOPE = "workspace", SecretKeyringError, NAME_RE, DEFAULT_TELEMETRY_POSTHOG_HOST = "https://us.i.posthog.com", DEFAULT_TELEMETRY_POSTHOG_API_KEY = "phc_mLsvJmbmp6e9UarrX9Cq5QtTjVNiiphM9mvi5Xnddd8Q", DEFAULT_TELEMETRY_FLUSH_INTERVAL_MS = 60000, DEFAULT_TELEMETRY_FLUSH_BATCH_SIZE = 50, DEFAULT_PROVIDER_RATE_LIMIT, TELEMETRY_DEPLOYMENT_ROLES, TELEMETRY_INSTALL_CHANNELS, ENTITY_TYPES, ATTRIBUTE_KINDS, DEPENDENCY_TYPES2, ONTOLOGY_PROPOSAL_OPERATIONS, LOOPBACK_HOST = "127.0.0.1", LOCAL_BINDS, import_yaml2, native = null, SIGNET_SECRETS_PLUGIN_ID = "signet.secrets", SIGNET_GRAPHIQ_PLUGIN_ID = "signet.graphiq", SIGNET_PLUGIN_REGISTRY_DIR = ".daemon/plugins", SIGNET_PLUGIN_REGISTRY_FILE = "registry-v1.json", SIGNET_GRAPHIQ_STATE_FILE = ".daemon/graphiq/state.json", GRAPHIQ_DEFAULT_INSTALL_DIR, SIGNET_SOURCE_CHECKOUT_DIRNAME = "signetai", SIGNET_GIT_ALLOWED_DIRECTORIES, SIGNET_GIT_PROTECTED_PATHS, SIGNET_GIT_TRACKED_PATHS, SIGNET_GITIGNORE_PROTECTED_PATTERNS, DEFAULT_DISCORD_DESKTOP_CACHE_PATH, DEFAULT_GITHUB_RESOURCE_TYPES, VALID_GITHUB_RESOURCE_TYPES, IDENTITY_FILES, REQUIRED_IDENTITY_KEYS, OPTIONAL_IDENTITY_KEYS, home, SOURCE_NATIVE_TOPOLOGY_ENTITY_TYPES;
 var init_dist = __esm(() => {
   __create2 = Object.create;
   __getProtoOf2 = Object.getPrototypeOf;
@@ -24104,6 +24140,23 @@ ${end.comment}` : end.comment;
       name: "memory-head-publication",
       up: up135,
       artifacts: { tables: ["memory_head_publications"] }
+    },
+    {
+      version: 136,
+      name: "memory-head-revisions",
+      up: up136,
+      artifacts: { tables: ["memory_head_revisions"] }
+    },
+    {
+      version: 137,
+      name: "dreaming-head-manifest",
+      up: up137,
+      artifacts: {
+        columns: [
+          { table: "dreaming_passes", column: "head_revision" },
+          { table: "dreaming_passes", column: "head_hash" }
+        ]
+      }
     }
   ];
   LATEST_SCHEMA_VERSION = MIGRATIONS[MIGRATIONS.length - 1]?.version ?? 0;
@@ -24123,6 +24176,20 @@ ${end.comment}` : end.comment;
     }
   };
   NAME_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
+  DEFAULT_PROVIDER_RATE_LIMIT = {
+    maxCallsPerHour: 200,
+    burstSize: 20,
+    waitTimeoutMs: 5000
+  };
+  TELEMETRY_DEPLOYMENT_ROLES = [
+    "personal",
+    "service",
+    "automation",
+    "development",
+    "ci",
+    "unknown"
+  ];
+  TELEMETRY_INSTALL_CHANNELS = ["desktop", "package-manager", "source", "container", "unknown"];
   ENTITY_TYPES = [
     "person",
     "project",
@@ -24866,6 +24933,63 @@ var init_rate_limiter = __esm(() => {
 });
 
 // ../../platform/daemon/src/auth/config.ts
+import { join as join5 } from "node:path";
+function isValidMode(val) {
+  return val === "local" || val === "team" || val === "hybrid";
+}
+function parseRateLimit(raw, fallback) {
+  if (!raw || typeof raw !== "object")
+    return fallback;
+  const obj = raw;
+  return {
+    windowMs: typeof obj.windowMs === "number" && obj.windowMs > 0 ? obj.windowMs : fallback.windowMs,
+    max: typeof obj.max === "number" && obj.max > 0 ? obj.max : fallback.max
+  };
+}
+function nonEmptyString(value) {
+  return typeof value === "string" && value.trim().length > 0 ? value.trim() : null;
+}
+function parseLoginConfig(raw) {
+  const login = raw.login && typeof raw.login === "object" ? raw.login : {};
+  const password = login.password && typeof login.password === "object" ? login.password : {};
+  const sso = login.sso && typeof login.sso === "object" ? login.sso : {};
+  const saml = login.saml && typeof login.saml === "object" ? login.saml : {};
+  const legacyAdmin = raw.adminUser && typeof raw.adminUser === "object" ? raw.adminUser : {};
+  return {
+    password: {
+      username: nonEmptyString(password.username) ?? nonEmptyString(legacyAdmin.username) ?? DEFAULT_LOGIN_CONFIG.password.username,
+      passwordHash: nonEmptyString(password.passwordHash) ?? nonEmptyString(legacyAdmin.passwordHash)
+    },
+    sso: { enabled: sso.enabled === true },
+    saml: { enabled: saml.enabled === true }
+  };
+}
+function parseAuthConfig(raw, agentsDir) {
+  if (!raw || typeof raw !== "object") {
+    return {
+      ...DEFAULT_AUTH_CONFIG,
+      secretPath: join5(agentsDir, ".daemon", "auth-secret")
+    };
+  }
+  const obj = raw;
+  const mode = isValidMode(obj.mode) ? obj.mode : "local";
+  const secretPath = join5(agentsDir, ".daemon", "auth-secret");
+  const rawLimits = obj.rateLimits;
+  const rateLimits = {};
+  for (const [key, fallback] of Object.entries(DEFAULT_RATE_LIMITS)) {
+    rateLimits[key] = parseRateLimit(rawLimits?.[key], fallback);
+  }
+  const defaultTtl = typeof obj.defaultTokenTtlSeconds === "number" && obj.defaultTokenTtlSeconds > 0 ? obj.defaultTokenTtlSeconds : DEFAULT_AUTH_CONFIG.defaultTokenTtlSeconds;
+  const sessionTtl = typeof obj.sessionTokenTtlSeconds === "number" && obj.sessionTokenTtlSeconds > 0 ? obj.sessionTokenTtlSeconds : DEFAULT_AUTH_CONFIG.sessionTokenTtlSeconds;
+  return {
+    mode,
+    secretPath,
+    rateLimits,
+    defaultTokenTtlSeconds: defaultTtl,
+    sessionTokenTtlSeconds: sessionTtl,
+    login: parseLoginConfig(obj)
+  };
+}
 var DEFAULT_LOGIN_CONFIG, DEFAULT_AUTH_CONFIG;
 var init_config = __esm(() => {
   init_rate_limiter();
@@ -24909,6 +25033,8 @@ var init_auth = __esm(() => {
 });
 
 // ../../platform/daemon/src/memory-config.ts
+import { existsSync as existsSync2, readFileSync as readFileSync3 } from "node:fs";
+import { join as join6 } from "node:path";
 function detectLocalTimeZone() {
   try {
     return Intl.DateTimeFormat().resolvedOptions().timeZone || "UTC";
@@ -24916,7 +25042,496 @@ function detectLocalTimeZone() {
     return "UTC";
   }
 }
-var DEFAULT_DREAMING_SURPRISAL, DEFAULT_DREAMING, DEFAULT_PIPELINE_V2, DEFAULT_OLLAMA_BASE_URL, DEFAULT_LLAMACPP_BASE_URL;
+function isValidTimeZone(timeZone) {
+  try {
+    new Intl.DateTimeFormat("en-US", { timeZone });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function clampPositive(raw, min, max, fallback) {
+  if (typeof raw !== "number" || !Number.isFinite(raw))
+    return fallback;
+  return Math.max(min, Math.min(max, raw));
+}
+function resolveTelemetryValue(raw, allowed, fallback) {
+  if (typeof raw !== "string")
+    return fallback;
+  const normalized = raw.trim().toLowerCase();
+  return allowed.includes(normalized) ? normalized : fallback;
+}
+function clampNonNegative(raw, max, fallback) {
+  if (typeof raw !== "number" || !Number.isFinite(raw) || raw < 0)
+    return fallback;
+  return Math.min(max, raw);
+}
+function parseOptionalPositive(raw, min, max) {
+  if (typeof raw !== "number" || !Number.isFinite(raw))
+    return;
+  return Math.max(min, Math.min(max, raw));
+}
+function parseEmbeddingCostRates(raw) {
+  if (raw === null || typeof raw !== "object" || Array.isArray(raw))
+    return;
+  const source = raw;
+  const rates = {};
+  for (const provider of EMBEDDING_COST_PROVIDERS) {
+    const value = source[provider];
+    if (typeof value === "number" && Number.isFinite(value) && value >= 0)
+      rates[provider] = value;
+  }
+  return Object.keys(rates).length > 0 ? rates : undefined;
+}
+function clampFraction(raw, fallback) {
+  if (typeof raw !== "number" || !Number.isFinite(raw))
+    return fallback;
+  return Math.max(0, Math.min(1, raw));
+}
+function isExtractionStrength(v2) {
+  return typeof v2 === "string" && ["low", "medium", "high"].includes(v2);
+}
+function isRecord3(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function rejectRetiredEmbeddingConfig(yaml) {
+  if (Object.hasOwn(yaml, "embeddings")) {
+    throw new MemoryConfigValidationError("embeddings is retired; configure provider, model, and dimensions under the canonical embedding block instead.");
+  }
+  const memory = yaml.memory;
+  if (isRecord3(memory) && Object.hasOwn(memory, "embeddings")) {
+    throw new MemoryConfigValidationError("memory.embeddings is retired; configure provider, model, and dimensions under the canonical embedding block instead.");
+  }
+}
+function parseRateLimitConfig(raw) {
+  if (!isRecord3(raw))
+    return;
+  const maxCallsPerHour = parseOptionalPositive(raw.maxCallsPerHour, 0, 1e4);
+  const burstSize = parseOptionalPositive(raw.burstSize, 1, 1000);
+  const waitTimeoutMs = parseOptionalPositive(raw.waitTimeoutMs, 0, 60000);
+  if (maxCallsPerHour === undefined && burstSize === undefined && waitTimeoutMs === undefined)
+    return;
+  return {
+    maxCallsPerHour: maxCallsPerHour ?? DEFAULT_PROVIDER_RATE_LIMIT.maxCallsPerHour,
+    burstSize: burstSize ?? DEFAULT_PROVIDER_RATE_LIMIT.burstSize,
+    waitTimeoutMs: waitTimeoutMs ?? DEFAULT_PROVIDER_RATE_LIMIT.waitTimeoutMs
+  };
+}
+function resolveMaxLlmConcurrency(rawValue, defaultValue) {
+  const env = process.env.SIGNET_MAX_LLM_CONCURRENCY;
+  const candidate = env !== undefined ? Number(env) : rawValue;
+  const isValidCandidate = typeof candidate === "number" && Number.isSafeInteger(candidate) && candidate >= 1;
+  if (env !== undefined && !isValidCandidate) {
+    logger.warn("pipeline", "SIGNET_MAX_LLM_CONCURRENCY is not a valid positive integer, using config/default", {
+      value: env
+    });
+    return clampPositive(rawValue, 1, 16, defaultValue);
+  }
+  return clampPositive(candidate, 1, 16, defaultValue);
+}
+function envBool(name) {
+  const value = process.env[name];
+  if (value === undefined)
+    return;
+  const normalized = value.trim().toLowerCase();
+  if (["1", "true", "yes", "on"].includes(normalized))
+    return true;
+  if (["0", "false", "no", "off"].includes(normalized))
+    return false;
+  return;
+}
+function parseClaudeCodeConfig(raw, fallback) {
+  if (!isRecord3(raw))
+    return fallback;
+  const allowApiKeyEnv = typeof raw.allowApiKeyEnv === "boolean" ? raw.allowApiKeyEnv : raw.billingMode === "api-key" ? true : raw.billingMode === "subscription" ? false : fallback.allowApiKeyEnv;
+  const maxBudgetUsd = parseOptionalPositive(raw.maxBudgetUsd, 0.01, 1000);
+  const cooldownMs = clampPositive(raw.cooldownMs, 1000, 3600000, fallback.cooldownMs);
+  return {
+    allowApiKeyEnv,
+    ...maxBudgetUsd !== undefined ? { maxBudgetUsd } : {},
+    cooldownMs
+  };
+}
+function loadPipelineConfig(yaml) {
+  const mem = yaml.memory;
+  const raw = mem?.pipelineV2;
+  if (mem?.synthesis !== undefined) {
+    throw new PipelineConfigValidationError("memory.synthesis is retired; MEMORY.md synthesis follows the canonical inference workload instead.");
+  }
+  if (!raw)
+    return { ...DEFAULT_PIPELINE_V2 };
+  const extractionRaw = raw.extraction;
+  const workerRaw = raw.worker;
+  const claudeCodeRaw = raw.claudeCode;
+  const graphRaw = raw.graph;
+  const traversalRaw = raw.traversal;
+  const rerankerRaw = raw.reranker;
+  const autonomousRaw = raw.autonomous;
+  const repairRaw = raw.repair;
+  const documentsRaw = raw.documents;
+  const guardrailsRaw = raw.guardrails;
+  const telemetryRaw = raw.telemetry;
+  const continuityRaw = raw.continuity;
+  const subagentsRaw = raw.subagents;
+  const embeddingTrackerRaw = raw.embeddingTracker;
+  const synthesisValue = raw.synthesis;
+  const synthesisRaw = isRecord3(synthesisValue) ? synthesisValue : undefined;
+  const proceduralRaw = raw.procedural;
+  const feedbackRaw = raw.feedback;
+  const significanceRaw = raw.significance;
+  const modelRegistryRaw = raw.modelRegistry;
+  const hintsRaw = raw.hints;
+  const reflectionsRaw = raw.reflections;
+  const d2 = DEFAULT_PIPELINE_V2;
+  function resolveBool(nested, flat, fallback) {
+    if (typeof nested === "boolean")
+      return nested;
+    if (typeof flat === "boolean")
+      return flat;
+    return fallback;
+  }
+  const legacyRoutingKeys = [
+    ["memory.pipelineV2.extractionProvider", raw.extractionProvider],
+    ["memory.pipelineV2.extractionModel", raw.extractionModel],
+    ["memory.pipelineV2.extractionEndpoint", raw.extractionEndpoint],
+    ["memory.pipelineV2.extractionBaseUrl", raw.extractionBaseUrl],
+    ["memory.pipelineV2.extractionFallbackProvider", raw.extractionFallbackProvider],
+    ["memory.pipelineV2.allowRemoteProviders", raw.allowRemoteProviders],
+    ["memory.pipelineV2.extraction.provider", extractionRaw?.provider],
+    ["memory.pipelineV2.extraction.model", extractionRaw?.model],
+    ["memory.pipelineV2.extraction.endpoint", extractionRaw?.endpoint],
+    ["memory.pipelineV2.extraction.base_url", extractionRaw?.base_url],
+    ["memory.pipelineV2.extraction.baseUrl", extractionRaw?.baseUrl],
+    ["memory.pipelineV2.extraction.fallbackProvider", extractionRaw?.fallbackProvider],
+    ["memory.pipelineV2.extraction.allowRemoteProviders", extractionRaw?.allowRemoteProviders],
+    ["memory.pipelineV2.synthesis.provider", synthesisRaw?.provider],
+    ["memory.pipelineV2.synthesis.model", synthesisRaw?.model],
+    ["memory.pipelineV2.synthesis.endpoint", synthesisRaw?.endpoint],
+    ["memory.pipelineV2.synthesis.base_url", synthesisRaw?.base_url],
+    ["memory.pipelineV2.synthesis.baseUrl", synthesisRaw?.baseUrl]
+  ];
+  const legacyRoutingKey = legacyRoutingKeys.find(([, value]) => value !== undefined);
+  if (legacyRoutingKey) {
+    throw new PipelineConfigValidationError(`${legacyRoutingKey[0]} is retired; configure the canonical inference workload instead.`);
+  }
+  if (extractionRaw?.command !== undefined || raw.extractionCommand !== undefined) {
+    throw new PipelineConfigValidationError("memory.pipelineV2.extraction command configuration is retired; configure the canonical inference workload instead.");
+  }
+  if (synthesisValue !== undefined) {
+    throw new PipelineConfigValidationError("memory.pipelineV2.synthesis is retired; configure the canonical inference workload instead.");
+  }
+  if (raw.writeGate !== undefined || raw.durability !== undefined || raw.writeGateEnabled !== undefined || raw.writeGateThreshold !== undefined || raw.writeGateContinuityDiscount !== undefined) {
+    throw new PipelineConfigValidationError("memory.pipelineV2.writeGate and durability configuration is retired; Dreaming is the sole semantic writer.");
+  }
+  if (proceduralRaw?.enrichOnInstall !== undefined || proceduralRaw?.enrichMinDescription !== undefined) {
+    throw new PipelineConfigValidationError("memory.pipelineV2.procedural enrichment configuration is retired; skill frontmatter is used as authored.");
+  }
+  const resolvedTimeout = clampPositive(extractionRaw?.timeout ?? raw.extractionTimeout, 5000, 300000, d2.extraction.timeout);
+  const maxAW = clampFraction(feedbackRaw?.maxAspectWeight, d2.feedback.maxAspectWeight);
+  const minAW = clampFraction(feedbackRaw?.minAspectWeight, d2.feedback.minAspectWeight);
+  const validatedMinAW = minAW > maxAW ? maxAW : minAW;
+  return {
+    enabled: typeof raw.enabled === "boolean" ? raw.enabled : d2.enabled,
+    paused: typeof raw.paused === "boolean" ? raw.paused : d2.paused,
+    shadowMode: typeof raw.shadowMode === "boolean" ? raw.shadowMode : d2.shadowMode,
+    mutationsFrozen: typeof raw.mutationsFrozen === "boolean" ? raw.mutationsFrozen : d2.mutationsFrozen,
+    semanticContradictionEnabled: typeof raw.semanticContradictionEnabled === "boolean" ? raw.semanticContradictionEnabled : d2.semanticContradictionEnabled,
+    semanticContradictionTimeoutMs: clampPositive(raw.semanticContradictionTimeoutMs, 5000, 300000, d2.semanticContradictionTimeoutMs),
+    extraction: {
+      strength: (() => {
+        const candidate = raw.extractionStrength ?? extractionRaw?.strength;
+        return isExtractionStrength(candidate) ? candidate : d2.extraction.strength;
+      })(),
+      timeout: resolvedTimeout,
+      minConfidence: clampFraction(extractionRaw?.minConfidence ?? raw.minFactConfidenceForWrite, d2.extraction.minConfidence),
+      rateLimit: parseRateLimitConfig(extractionRaw?.rateLimit),
+      structuredOutput: (() => {
+        const candidate = extractionRaw?.structuredOutput;
+        return typeof candidate === "boolean" ? candidate : undefined;
+      })()
+    },
+    worker: {
+      maxRetries: clampPositive(workerRaw?.maxRetries ?? raw.workerMaxRetries, 1, 10, d2.worker.maxRetries),
+      leaseTimeoutMs: clampPositive(workerRaw?.leaseTimeoutMs ?? raw.leaseTimeoutMs, 1e4, 600000, d2.worker.leaseTimeoutMs),
+      maxLlmConcurrency: resolveMaxLlmConcurrency(workerRaw?.maxLlmConcurrency, d2.worker.maxLlmConcurrency)
+    },
+    claudeCode: parseClaudeCodeConfig(claudeCodeRaw, d2.claudeCode),
+    graph: {
+      enabled: resolveBool(graphRaw?.enabled, raw.graphEnabled, d2.graph.enabled),
+      boostWeight: clampFraction(graphRaw?.boostWeight ?? raw.graphBoostWeight, d2.graph.boostWeight),
+      boostTimeoutMs: clampPositive(graphRaw?.boostTimeoutMs ?? raw.graphBoostTimeoutMs, 50, 5000, d2.graph.boostTimeoutMs)
+    },
+    traversal: {
+      enabled: resolveBool(traversalRaw?.enabled, undefined, d2.traversal?.enabled ?? true),
+      primary: resolveBool(traversalRaw?.primary, undefined, d2.traversal?.primary ?? true),
+      maxAspectsPerEntity: clampPositive(traversalRaw?.maxAspectsPerEntity, 1, 100, d2.traversal?.maxAspectsPerEntity ?? 20),
+      maxAttributesPerAspect: clampPositive(traversalRaw?.maxAttributesPerAspect, 1, 200, d2.traversal?.maxAttributesPerAspect ?? 50),
+      maxWriteAspectsPerEntity: clampPositive(traversalRaw?.maxWriteAspectsPerEntity, 1, 50, d2.traversal?.maxWriteAspectsPerEntity ?? 20),
+      maxWriteAttributesPerAspect: clampPositive(traversalRaw?.maxWriteAttributesPerAspect, 1, 100, d2.traversal?.maxWriteAttributesPerAspect ?? 50),
+      maxDependencyHops: clampPositive(traversalRaw?.maxDependencyHops, 1, 200, d2.traversal?.maxDependencyHops ?? 10),
+      minDependencyStrength: clampFraction(traversalRaw?.minDependencyStrength, d2.traversal?.minDependencyStrength ?? 0.3),
+      maxBranching: clampPositive(traversalRaw?.maxBranching, 1, 50, d2.traversal?.maxBranching ?? 4),
+      maxTraversalPaths: clampPositive(traversalRaw?.maxTraversalPaths, 1, 500, d2.traversal?.maxTraversalPaths ?? 50),
+      minConfidence: clampFraction(traversalRaw?.minConfidence, d2.traversal?.minConfidence ?? 0.5),
+      timeoutMs: clampPositive(traversalRaw?.timeoutMs, 50, 5000, d2.traversal?.timeoutMs ?? 500),
+      boostWeight: clampFraction(traversalRaw?.boostWeight, d2.traversal?.boostWeight ?? 0.2),
+      constraintBudgetChars: clampPositive(traversalRaw?.constraintBudgetChars, 200, 1e4, d2.traversal?.constraintBudgetChars ?? 1000)
+    },
+    reranker: {
+      enabled: resolveBool(rerankerRaw?.enabled, raw.rerankerEnabled, d2.reranker.enabled),
+      model: typeof rerankerRaw?.model === "string" ? rerankerRaw.model : typeof raw.rerankerModel === "string" ? raw.rerankerModel : d2.reranker.model,
+      useExtractionModel: resolveBool(rerankerRaw?.useExtractionModel, raw.rerankerUseExtractionModel, d2.reranker.useExtractionModel),
+      topN: clampPositive(rerankerRaw?.topN ?? raw.rerankerTopN, 1, 100, d2.reranker.topN),
+      timeoutMs: clampPositive(rerankerRaw?.timeoutMs ?? raw.rerankerTimeoutMs, 100, 30000, d2.reranker.timeoutMs)
+    },
+    autonomous: {
+      enabled: resolveBool(autonomousRaw?.enabled, raw.autonomousEnabled, d2.autonomous.enabled),
+      frozen: resolveBool(autonomousRaw?.frozen, raw.autonomousFrozen, d2.autonomous.frozen),
+      allowUpdateDelete: resolveBool(autonomousRaw?.allowUpdateDelete, raw.allowUpdateDelete, d2.autonomous.allowUpdateDelete),
+      maintenanceIntervalMs: clampPositive(autonomousRaw?.maintenanceIntervalMs ?? raw.maintenanceIntervalMs, 60000, 86400000, d2.autonomous.maintenanceIntervalMs),
+      maintenanceMode: (() => {
+        const v2 = autonomousRaw?.maintenanceMode ?? raw.maintenanceMode;
+        if (v2 === "execute" || v2 === "observe")
+          return v2;
+        return d2.autonomous.maintenanceMode;
+      })()
+    },
+    repair: {
+      reembedCooldownMs: clampPositive(repairRaw?.reembedCooldownMs ?? raw.repairReembedCooldownMs, 1e4, 3600000, d2.repair.reembedCooldownMs),
+      reembedHourlyBudget: clampPositive(repairRaw?.reembedHourlyBudget ?? raw.repairReembedHourlyBudget, 1, 1000, d2.repair.reembedHourlyBudget),
+      requeueCooldownMs: clampPositive(repairRaw?.requeueCooldownMs ?? raw.repairRequeueCooldownMs, 5000, 3600000, d2.repair.requeueCooldownMs),
+      requeueHourlyBudget: clampPositive(repairRaw?.requeueHourlyBudget ?? raw.repairRequeueHourlyBudget, 1, 1000, d2.repair.requeueHourlyBudget),
+      dedupCooldownMs: clampPositive(repairRaw?.dedupCooldownMs ?? raw.repairDedupCooldownMs, 1e4, 3600000, d2.repair.dedupCooldownMs),
+      dedupHourlyBudget: clampPositive(repairRaw?.dedupHourlyBudget ?? raw.repairDedupHourlyBudget, 1, 100, d2.repair.dedupHourlyBudget),
+      dedupSemanticThreshold: clampFraction(repairRaw?.dedupSemanticThreshold ?? raw.repairDedupSemanticThreshold, d2.repair.dedupSemanticThreshold),
+      dedupBatchSize: clampPositive(repairRaw?.dedupBatchSize ?? raw.repairDedupBatchSize, 10, 1000, d2.repair.dedupBatchSize)
+    },
+    documents: {
+      workerIntervalMs: clampPositive(documentsRaw?.workerIntervalMs ?? raw.documentWorkerIntervalMs, 1000, 300000, d2.documents.workerIntervalMs),
+      chunkSize: clampPositive(documentsRaw?.chunkSize ?? raw.documentChunkSize, 200, 50000, d2.documents.chunkSize),
+      chunkOverlap: clampPositive(documentsRaw?.chunkOverlap ?? raw.documentChunkOverlap, 0, 1e4, d2.documents.chunkOverlap),
+      maxContentBytes: clampPositive(documentsRaw?.maxContentBytes ?? raw.documentMaxContentBytes, 1024, 100 * 1024 * 1024, d2.documents.maxContentBytes)
+    },
+    guardrails: {
+      maxContentChars: clampPositive(guardrailsRaw?.maxContentChars, 50, 1e5, d2.guardrails.maxContentChars),
+      chunkTargetChars: clampPositive(guardrailsRaw?.chunkTargetChars, 50, 50000, d2.guardrails.chunkTargetChars),
+      recallTruncateChars: clampPositive(guardrailsRaw?.recallTruncateChars, 50, 1e5, d2.guardrails.recallTruncateChars),
+      contextBudgetChars: clampPositive(guardrailsRaw?.contextBudgetChars, 200, 1e5, d2.guardrails.contextBudgetChars)
+    },
+    continuity: {
+      enabled: resolveBool(continuityRaw?.enabled, undefined, d2.continuity.enabled),
+      promptInterval: clampPositive(continuityRaw?.promptInterval, 1, 1000, d2.continuity.promptInterval),
+      timeIntervalMs: clampPositive(continuityRaw?.timeIntervalMs, 60000, 3600000, d2.continuity.timeIntervalMs),
+      maxCheckpointsPerSession: clampPositive(continuityRaw?.maxCheckpointsPerSession, 1, 500, d2.continuity.maxCheckpointsPerSession),
+      retentionDays: clampPositive(continuityRaw?.retentionDays, 1, 90, d2.continuity.retentionDays),
+      recoveryBudgetChars: clampPositive(continuityRaw?.recoveryBudgetChars, 200, 1e4, d2.continuity.recoveryBudgetChars)
+    },
+    subagents: {
+      inheritContext: resolveBool(subagentsRaw?.inheritContext, undefined, d2.subagents?.inheritContext ?? true),
+      tailChars: clampNonNegative(subagentsRaw?.tailChars, 20000, d2.subagents?.tailChars ?? 3000)
+    },
+    telemetryEnabled: typeof raw.telemetryEnabled === "boolean" ? raw.telemetryEnabled : d2.telemetryEnabled,
+    telemetry: {
+      posthogHost: typeof telemetryRaw?.posthogHost === "string" ? telemetryRaw.posthogHost : d2.telemetry.posthogHost,
+      posthogApiKey: typeof telemetryRaw?.posthogApiKey === "string" ? telemetryRaw.posthogApiKey : d2.telemetry.posthogApiKey,
+      flushIntervalMs: clampPositive(telemetryRaw?.flushIntervalMs, 5000, 600000, d2.telemetry.flushIntervalMs),
+      flushBatchSize: clampPositive(telemetryRaw?.flushBatchSize, 1, 500, d2.telemetry.flushBatchSize),
+      retentionDays: clampPositive(telemetryRaw?.retentionDays, 1, 365, d2.telemetry.retentionDays),
+      memorySearchQaEnabled: resolveBool(telemetryRaw?.memorySearchQaEnabled, undefined, d2.telemetry.memorySearchQaEnabled),
+      deploymentRole: resolveTelemetryValue(telemetryRaw?.deploymentRole, TELEMETRY_DEPLOYMENT_ROLES, d2.telemetry.deploymentRole ?? "unknown"),
+      installChannel: resolveTelemetryValue(telemetryRaw?.installChannel, TELEMETRY_INSTALL_CHANNELS, d2.telemetry.installChannel ?? "unknown")
+    },
+    embeddingTracker: {
+      enabled: resolveBool(embeddingTrackerRaw?.enabled, undefined, d2.embeddingTracker.enabled),
+      pollMs: clampPositive(embeddingTrackerRaw?.pollMs, 1000, 60000, d2.embeddingTracker.pollMs),
+      batchSize: clampPositive(embeddingTrackerRaw?.batchSize, 1, 20, d2.embeddingTracker.batchSize)
+    },
+    procedural: {
+      enabled: resolveBool(proceduralRaw?.enabled, undefined, d2.procedural.enabled),
+      decayRate: clampFraction(proceduralRaw?.decayRate, d2.procedural.decayRate),
+      minImportance: clampFraction(proceduralRaw?.minImportance, d2.procedural.minImportance),
+      importanceOnInstall: clampFraction(proceduralRaw?.importanceOnInstall, d2.procedural.importanceOnInstall),
+      reconcileIntervalMs: clampPositive(proceduralRaw?.reconcileIntervalMs, 1e4, 600000, d2.procedural.reconcileIntervalMs)
+    },
+    feedback: {
+      enabled: resolveBool(feedbackRaw?.enabled, undefined, d2.feedback.enabled),
+      ftsWeightDelta: clampFraction(feedbackRaw?.ftsWeightDelta, d2.feedback.ftsWeightDelta),
+      maxAspectWeight: maxAW,
+      minAspectWeight: validatedMinAW,
+      decayEnabled: resolveBool(feedbackRaw?.decayEnabled, undefined, d2.feedback.decayEnabled),
+      decayRate: clampFraction(feedbackRaw?.decayRate, d2.feedback.decayRate),
+      staleDays: clampPositive(feedbackRaw?.staleDays, 1, 365, d2.feedback.staleDays),
+      decayIntervalSessions: clampPositive(feedbackRaw?.decayIntervalSessions, 1, 1000, d2.feedback.decayIntervalSessions)
+    },
+    significance: {
+      enabled: resolveBool(significanceRaw?.enabled, undefined, d2.significance?.enabled ?? true),
+      minTurns: clampPositive(significanceRaw?.minTurns, 1, 100, d2.significance?.minTurns ?? 5),
+      minEntityOverlap: clampPositive(significanceRaw?.minEntityOverlap, 0, 100, d2.significance?.minEntityOverlap ?? 1),
+      noveltyThreshold: clampFraction(significanceRaw?.noveltyThreshold, d2.significance?.noveltyThreshold ?? 0.15)
+    },
+    modelRegistry: {
+      enabled: resolveBool(modelRegistryRaw?.enabled, undefined, d2.modelRegistry.enabled),
+      refreshIntervalMs: clampPositive(modelRegistryRaw?.refreshIntervalMs, 60000, 86400000, d2.modelRegistry.refreshIntervalMs)
+    },
+    hints: {
+      enabled: resolveBool(hintsRaw?.enabled, undefined, d2.hints?.enabled ?? true),
+      max: clampPositive(hintsRaw?.max, 1, 10, d2.hints?.max ?? 5),
+      timeout: clampPositive(hintsRaw?.timeout, 5000, 120000, d2.hints?.timeout ?? 60000),
+      maxTokens: clampPositive(hintsRaw?.maxTokens, 64, 1024, d2.hints?.maxTokens ?? 256),
+      poll: clampPositive(hintsRaw?.poll, 1000, 60000, d2.hints?.poll ?? 5000)
+    },
+    reflections: {
+      enabled: resolveBool(reflectionsRaw?.enabled, undefined, d2.reflections.enabled),
+      model: typeof reflectionsRaw?.model === "string" && reflectionsRaw.model.trim().length > 0 ? reflectionsRaw.model : d2.reflections.model,
+      timeout: clampPositive(reflectionsRaw?.timeout, 5000, 300000, d2.reflections.timeout),
+      maxTokens: clampPositive(reflectionsRaw?.maxTokens, 500, 16000, d2.reflections.maxTokens),
+      schedule: typeof reflectionsRaw?.schedule === "string" && reflectionsRaw.schedule.trim().length > 0 ? reflectionsRaw.schedule : d2.reflections.schedule,
+      timezone: typeof reflectionsRaw?.timezone === "string" && isValidTimeZone(reflectionsRaw.timezone) ? reflectionsRaw.timezone : d2.reflections.timezone,
+      count: clampPositive(reflectionsRaw?.count, 1, 6, d2.reflections.count),
+      timeWindowHours: clampPositive(reflectionsRaw?.timeWindowHours, 1, 168, d2.reflections.timeWindowHours),
+      maxMemories: clampPositive(reflectionsRaw?.maxMemories, 5, 500, d2.reflections.maxMemories),
+      maxSummaries: clampPositive(reflectionsRaw?.maxSummaries, 1, 50, d2.reflections.maxSummaries)
+    }
+  };
+}
+function clampWarn(field, raw, min, max, fallback) {
+  if (typeof raw !== "number" || !Number.isFinite(raw))
+    return fallback;
+  const clamped = Math.max(min, Math.min(max, raw));
+  if (clamped !== raw) {
+    logger.warn("config", `dreaming.${field} out of range [${min}, ${max}]: ${raw} → clamped to ${clamped}`);
+  }
+  return clamped;
+}
+function loadDreamingConfig(yaml) {
+  const mem = yaml.memory;
+  const raw = mem?.dreaming;
+  if (!raw)
+    return { ...DEFAULT_DREAMING };
+  const dd = DEFAULT_DREAMING;
+  const defaultSurprisal = dd.surprisal ?? DEFAULT_DREAMING_SURPRISAL;
+  const surprisal = raw.surprisal;
+  return {
+    tokenThreshold: clampWarn("tokenThreshold", raw.tokenThreshold, 1e4, 1e6, dd.tokenThreshold),
+    maxInterval: clampWarn("maxInterval", raw.maxInterval, 5 * 60 * 1000, 7 * 24 * 60 * 60 * 1000, dd.maxInterval),
+    timeout: clampWarn("timeout", raw.timeout, 30000, 1800000, dd.timeout),
+    maxInputTokens: clampWarn("maxInputTokens", raw.maxInputTokens, 8000, 1e6, dd.maxInputTokens),
+    maxOutputTokens: clampWarn("maxOutputTokens", raw.maxOutputTokens, 1000, 128000, dd.maxOutputTokens),
+    backfillOnFirstRun: typeof raw.backfillOnFirstRun === "boolean" ? raw.backfillOnFirstRun : dd.backfillOnFirstRun,
+    surprisal: {
+      enabled: typeof surprisal?.enabled === "boolean" ? surprisal.enabled : defaultSurprisal.enabled,
+      sampleSize: clampWarn("surprisal.sampleSize", surprisal?.sampleSize, 20, 500, defaultSurprisal.sampleSize),
+      maxCandidates: clampWarn("surprisal.maxCandidates", surprisal?.maxCandidates, 1, 20, defaultSurprisal.maxCandidates),
+      minObservations: clampWarn("surprisal.minObservations", surprisal?.minObservations, 8, 500, defaultSurprisal.minObservations),
+      neighborCount: clampWarn("surprisal.neighborCount", surprisal?.neighborCount, 1, 32, defaultSurprisal.neighborCount),
+      treeLeafSize: clampWarn("surprisal.treeLeafSize", surprisal?.treeLeafSize, 2, 64, defaultSurprisal.treeLeafSize),
+      minScore: clampWarn("surprisal.minScore", surprisal?.minScore, 0, 1, defaultSurprisal.minScore)
+    }
+  };
+}
+function loadMemoryConfig(agentsDir) {
+  const defaults = {
+    embedding: {
+      provider: "native",
+      model: "nomic-embed-text-v1.5",
+      dimensions: 768,
+      base_url: "",
+      promptSubmitTimeoutMs: DEFAULT_PROMPT_SUBMIT_EMBEDDING_TIMEOUT_MS,
+      llamaCppMaxInputTokens: DEFAULT_LLAMACPP_MAX_INPUT_TOKENS,
+      warmNative: true
+    },
+    search: {
+      alpha: 0.7,
+      top_k: 20,
+      min_score: 0.1,
+      rehearsal_enabled: true,
+      rehearsal_weight: 0.1,
+      rehearsal_half_life_days: 30,
+      temporal_prior_enabled: true,
+      temporal_prior_weight: 0.15,
+      temporal_prior_half_life_days: 14
+    },
+    pipelineV2: { ...DEFAULT_PIPELINE_V2 },
+    dreaming: { ...DEFAULT_DREAMING },
+    auth: parseAuthConfig(undefined, agentsDir)
+  };
+  const paths = [join6(agentsDir, "agent.yaml"), join6(agentsDir, "AGENT.yaml"), join6(agentsDir, "config.yaml")];
+  const envWarmNative = envBool("SIGNET_EMBEDDING_WARM_NATIVE");
+  for (const path of paths) {
+    if (!existsSync2(path))
+      continue;
+    try {
+      const yaml = parseSimpleYaml(readFileSync3(path, "utf-8"));
+      if (isRecord3(yaml))
+        rejectRetiredEmbeddingConfig(yaml);
+      const emb = yaml.embedding ?? {};
+      const configuredCostRates = parseEmbeddingCostRates(emb.costRates ?? emb.cost_rates);
+      if (configuredCostRates)
+        defaults.embedding.costRates = configuredCostRates;
+      const srch = yaml.search ?? {};
+      defaults.embedding.promptSubmitTimeoutMs = clampPositive(emb.promptSubmitTimeoutMs, MIN_PROMPT_SUBMIT_EMBEDDING_TIMEOUT_MS, MAX_PROMPT_SUBMIT_EMBEDDING_TIMEOUT_MS, defaults.embedding.promptSubmitTimeoutMs ?? DEFAULT_PROMPT_SUBMIT_EMBEDDING_TIMEOUT_MS);
+      defaults.embedding.llamaCppMaxInputTokens = clampPositive(emb.llamaCppMaxInputTokens, MIN_LLAMACPP_MAX_INPUT_TOKENS, MAX_LLAMACPP_MAX_INPUT_TOKENS, defaults.embedding.llamaCppMaxInputTokens ?? DEFAULT_LLAMACPP_MAX_INPUT_TOKENS);
+      if (typeof emb.warmNative === "boolean") {
+        defaults.embedding.warmNative = emb.warmNative;
+      }
+      if (emb.provider === "none") {
+        defaults.embedding.provider = "none";
+      } else if (emb.provider) {
+        const rawProvider = String(emb.provider);
+        defaults.embedding.provider = rawProvider === "local" ? "native" : rawProvider;
+        defaults.embedding.model = emb.model ?? defaults.embedding.model;
+        defaults.embedding.dimensions = Number.parseInt(String(emb.dimensions ?? "768"), 10);
+        const explicitBaseUrl = (typeof emb.base_url === "string" ? emb.base_url : undefined) ?? (typeof emb.endpoint === "string" ? emb.endpoint : undefined);
+        if (defaults.embedding.provider === "ollama") {
+          defaults.embedding.base_url = typeof explicitBaseUrl === "string" && explicitBaseUrl.trim().length > 0 ? explicitBaseUrl : DEFAULT_OLLAMA_BASE_URL;
+        } else if (defaults.embedding.provider === "llama-cpp") {
+          defaults.embedding.base_url = typeof explicitBaseUrl === "string" && explicitBaseUrl.trim().length > 0 ? explicitBaseUrl : DEFAULT_LLAMACPP_BASE_URL;
+        } else if (defaults.embedding.provider === "openai") {
+          defaults.embedding.base_url = typeof explicitBaseUrl === "string" && explicitBaseUrl.trim().length > 0 ? explicitBaseUrl : DEFAULT_OPENAI_BASE_URL;
+        } else {
+          defaults.embedding.base_url = explicitBaseUrl ?? defaults.embedding.base_url;
+        }
+        defaults.embedding.api_key = emb.api_key;
+      }
+      if (srch.alpha !== undefined) {
+        defaults.search.alpha = Number.parseFloat(String(srch.alpha));
+        defaults.search.top_k = Number.parseInt(String(srch.top_k ?? "20"), 10);
+        defaults.search.min_score = Number.parseFloat(String(srch.min_score ?? "0.3"));
+      }
+      if (srch.rehearsal_enabled !== undefined) {
+        defaults.search.rehearsal_enabled = srch.rehearsal_enabled === true;
+      }
+      if (typeof srch.rehearsal_weight === "number") {
+        defaults.search.rehearsal_weight = Math.max(0, Math.min(1, srch.rehearsal_weight));
+      }
+      if (typeof srch.rehearsal_half_life_days === "number") {
+        defaults.search.rehearsal_half_life_days = Math.max(1, srch.rehearsal_half_life_days);
+      }
+      if (srch.temporal_prior_enabled !== undefined) {
+        defaults.search.temporal_prior_enabled = srch.temporal_prior_enabled === true;
+      }
+      if (typeof srch.temporal_prior_weight === "number") {
+        defaults.search.temporal_prior_weight = Math.max(0, Math.min(1, srch.temporal_prior_weight));
+      }
+      if (typeof srch.temporal_prior_half_life_days === "number") {
+        defaults.search.temporal_prior_half_life_days = Math.max(1, Math.min(365, srch.temporal_prior_half_life_days));
+      }
+      defaults.pipelineV2 = loadPipelineConfig(yaml);
+      defaults.dreaming = loadDreamingConfig(yaml);
+      defaults.auth = parseAuthConfig(yaml.auth, agentsDir);
+      break;
+    } catch (error51) {
+      if (error51 instanceof MemoryConfigValidationError || error51 instanceof PipelineConfigValidationError) {
+        throw error51;
+      }
+    }
+  }
+  if (envWarmNative !== undefined) {
+    defaults.embedding.warmNative = envWarmNative;
+  }
+  return defaults;
+}
+var DEFAULT_DREAMING_SURPRISAL, DEFAULT_DREAMING, PipelineConfigValidationError, DEFAULT_PIPELINE_V2, DEFAULT_OLLAMA_BASE_URL, DEFAULT_LLAMACPP_BASE_URL, DEFAULT_LLAMACPP_MAX_INPUT_TOKENS = 1400, MIN_LLAMACPP_MAX_INPUT_TOKENS = 128, MAX_LLAMACPP_MAX_INPUT_TOKENS = 131072, DEFAULT_OPENAI_BASE_URL = "https://api.openai.com/v1", DEFAULT_PROMPT_SUBMIT_EMBEDDING_TIMEOUT_MS = 1000, MIN_PROMPT_SUBMIT_EMBEDDING_TIMEOUT_MS = 1000, MAX_PROMPT_SUBMIT_EMBEDDING_TIMEOUT_MS = 300000, MemoryConfigValidationError, EMBEDDING_COST_PROVIDERS;
 var init_memory_config = __esm(() => {
   init_dist();
   init_auth();
@@ -24939,6 +25554,12 @@ var init_memory_config = __esm(() => {
     backfillOnFirstRun: true,
     surprisal: DEFAULT_DREAMING_SURPRISAL
   };
+  PipelineConfigValidationError = class PipelineConfigValidationError extends Error {
+    constructor(message) {
+      super(message);
+      this.name = "PipelineConfigValidationError";
+    }
+  };
   DEFAULT_PIPELINE_V2 = {
     enabled: true,
     paused: false,
@@ -25094,6 +25715,15 @@ var init_memory_config = __esm(() => {
   };
   DEFAULT_OLLAMA_BASE_URL = `http://${LOOPBACK_HOST}:11434`;
   DEFAULT_LLAMACPP_BASE_URL = `http://${LOOPBACK_HOST}:8080`;
+  MemoryConfigValidationError = class MemoryConfigValidationError extends Error {
+  };
+  EMBEDDING_COST_PROVIDERS = [
+    "native",
+    "llama-cpp",
+    "ollama",
+    "openai",
+    "openrouter"
+  ];
 });
 
 // ../../platform/daemon/src/db-observability.ts
@@ -25104,9 +25734,9 @@ var init_runtime_pressure = () => {};
 // ../../platform/daemon/src/db-accessor.ts
 import {
   copyFileSync,
-  existsSync as existsSync2,
+  existsSync as existsSync4,
   mkdirSync as mkdirSync3,
-  readFileSync as readFileSync3,
+  readFileSync as readFileSync6,
   readdirSync as readdirSync3,
   statSync as statSync3,
   statfsSync,
@@ -25151,10 +25781,10 @@ var init_db_accessor = __esm(() => {
 import { createHash as createHash3 } from "node:crypto";
 import {
   chmodSync as chmodSync2,
-  existsSync as existsSync4,
+  existsSync as existsSync7,
   mkdirSync as mkdirSync5,
   mkdtempSync,
-  readFileSync as readFileSync6,
+  readFileSync as readFileSync8,
   readdirSync as readdirSync5,
   renameSync as renameSync4,
   rmSync,
@@ -25162,7 +25792,7 @@ import {
   writeFileSync
 } from "node:fs";
 import { tmpdir } from "node:os";
-import { dirname as dirname3, join as join5 } from "node:path";
+import { dirname as dirname3, join as join7 } from "node:path";
 function nativeRuntimeAssets() {
   return globalThis.__SIGNET_NATIVE_RUNTIME_ASSETS__ ?? {};
 }
@@ -25171,10 +25801,10 @@ function resolveEmbeddedWorkerPath(name) {
   if (!worker)
     return null;
   const hash2 = createHash3("sha256").update(worker.contentBase64).digest("hex").slice(0, 16);
-  const dir = join5(tmpdir(), "signet-native-workers");
-  const path = join5(dir, `${name.replace(/[^a-zA-Z0-9_.-]/g, "_")}-${hash2}.mjs`);
+  const dir = join7(tmpdir(), "signet-native-workers");
+  const path = join7(dir, `${name.replace(/[^a-zA-Z0-9_.-]/g, "_")}-${hash2}.mjs`);
   mkdirSync5(dir, { recursive: true });
-  if (!existsSync4(path)) {
+  if (!existsSync7(path)) {
     writeFileSync(path, Buffer.from(worker.contentBase64, "base64"));
   }
   return path;
@@ -25277,7 +25907,7 @@ var require_base64_js = __commonJS((exports) => {
 });
 
 // ../../platform/daemon/src/mcp-stdio.ts
-import { existsSync as existsSync13, statSync as statSync4 } from "node:fs";
+import { existsSync as existsSync15, statSync as statSync4 } from "node:fs";
 import { isAbsolute } from "node:path";
 
 // ../../node_modules/.bun/@modelcontextprotocol+sdk@1.30.0/node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
@@ -48116,6 +48746,12 @@ try {
   const esmRequire = createRequire6(import.meta.url);
   native2 = esmRequire("@signet/native");
 } catch {}
+function countChanges(result) {
+  if (typeof result !== "object" || result === null)
+    return 0;
+  const row = result;
+  return typeof row.changes === "number" ? row.changes : 0;
+}
 function tableExists4(db, name) {
   return db.prepare("SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?").get(name) != null;
 }
@@ -49204,15 +49840,15 @@ function pendingDreamingEvidenceContinuations(db, agentId, limit, kind) {
 
 // ../../platform/daemon/src/pipeline/dreaming-token-cache.ts
 init_native_runtime_assets();
-import { existsSync as existsSync7 } from "node:fs";
-import { join as join6 } from "node:path";
+import { existsSync as existsSync9 } from "node:fs";
+import { join as join9 } from "node:path";
 import { dirname as dirname6 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { Worker } from "node:worker_threads";
 function resolveWorkerPath() {
   const moduleDir = dirname6(fileURLToPath2(import.meta.url));
-  const bundled = join6(moduleDir, "dreaming-token-worker.js");
-  return existsSync7(bundled) ? bundled : resolveEmbeddedWorkerPath("dreaming-token-worker") ?? join6(moduleDir, "dreaming-token-worker.ts");
+  const bundled = join9(moduleDir, "dreaming-token-worker.js");
+  return existsSync9(bundled) ? bundled : resolveEmbeddedWorkerPath("dreaming-token-worker") ?? join9(moduleDir, "dreaming-token-worker.ts");
 }
 
 class DreamingBacklogTokenCache {
@@ -50258,7 +50894,7 @@ async function getStructuralDensity(accessor2, entityId, agentId) {
 init_dist();
 
 // ../../platform/daemon/src/ontology-evidence.ts
-function isRecord3(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function readString(record5, key) {
@@ -50308,7 +50944,7 @@ function readOntologyEvidenceRef(value) {
     const trimmed = value.trim();
     return trimmed.length > 0 ? { sourceKind: null, sourceId: trimmed, sourcePath: null, memoryId: null, quote: null, reference: value } : null;
   }
-  if (!isRecord3(value))
+  if (!isRecord5(value))
     return null;
   const transcriptId = readString(value, "transcript_id");
   const sessionKey = readString(value, "session_key");
@@ -51483,12 +52119,12 @@ function now() {
 function canonical(value) {
   return value.trim().toLowerCase().replace(/\s+/g, " ");
 }
-function isRecord5(value) {
+function isRecord7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseJsonRecord(value) {
   const parsed = JSON.parse(value);
-  return isRecord5(parsed) ? parsed : {};
+  return isRecord7(parsed) ? parsed : {};
 }
 function parseJsonArray3(value) {
   const parsed = JSON.parse(value);
@@ -51615,7 +52251,7 @@ function isDreamingAttentionEvidenceInTx(db, agentId, value) {
 function validateProposalEvidenceSourcesInTx(db, agentId, evidence) {
   for (const value of evidence) {
     const ref3 = readOntologyEvidenceRef(value);
-    if (ref3 === null || !isRecord5(ref3.reference) || !("source_ref" in ref3.reference))
+    if (ref3 === null || !isRecord7(ref3.reference) || !("source_ref" in ref3.reference))
       continue;
     if (isDreamingAttentionEvidenceInTx(db, agentId, ref3.reference))
       continue;
@@ -52842,7 +53478,7 @@ function wasEntityMergeApplied(db, agentId, sourceId, targetId, sourceSelector)
       if (!Array.isArray(merged))
         continue;
       if (merged.some((item) => {
-        if (!isRecord5(item))
+        if (!isRecord7(item))
           return false;
         if (sourceId !== null)
           return readString2(item, "entityId") === sourceId;
@@ -54177,11 +54813,11 @@ function collectReviewDueClaims(accessor2, now2, options = {}) {
 init_dist();
 init_db_accessor();
 import { createHash as createHash5, randomUUID as randomUUID2 } from "node:crypto";
-import { mkdirSync as mkdirSync6, renameSync as renameSync6, writeFileSync as writeFileSync4, readFileSync as readFileSync8 } from "node:fs";
-import { dirname as dirname8, join as join7 } from "node:path";
+import { mkdirSync as mkdirSync6, renameSync as renameSync6, writeFileSync as writeFileSync4, readFileSync as readFileSync9 } from "node:fs";
+import { dirname as dirname8, join as join11 } from "node:path";
 var CURATED_MEMORY_HEAD_MAX_TOKENS = 1000;
 var hash2 = (text2) => createHash5("sha256").update(text2).digest("hex");
-var pathFor = (agentId) => agentId === "default" ? join7(resolveDefaultBasePath(), "MEMORY.md") : join7(resolveDefaultBasePath(), "agents", agentId, "MEMORY.md");
+var pathFor = (agentId) => agentId === "default" ? join11(resolveDefaultBasePath(), "MEMORY.md") : join11(resolveDefaultBasePath(), "agents", agentId, "MEMORY.md");
 var render = (entries) => entries.map((entry) => `- ${entry.text.trim()}`).join(`
 `);
 async function readCuratedMemoryHead(agentId) {
@@ -54201,7 +54837,7 @@ async function readCuratedMemoryHead(agentId) {
     mkdirSync6(dirname8(target2), { recursive: true });
     let existing = "";
     try {
-      existing = readFileSync8(target2, "utf8");
+      existing = readFileSync9(target2, "utf8");
     } catch {}
     if (existing !== `${content}
 `) {
@@ -54338,6 +54974,138 @@ async function commitCuratedMemoryHead(input) {
   return committed;
 }
 
+// ../../platform/daemon/src/memory-head.ts
+init_dist();
+init_db_accessor();
+import { createHash as createHash6, randomUUID as randomUUID3 } from "node:crypto";
+import { existsSync as existsSync10, mkdirSync as mkdirSync7, readFileSync as readFileSync10, rmSync as rmSync3, writeFileSync as writeFileSync6 } from "node:fs";
+import { dirname as dirname9, join as join12 } from "node:path";
+init_memory_config();
+var MEMORY_HEAD_MAX_TOKENS = 1000;
+function getAgentsDir2() {
+  return resolveDefaultBasePath();
+}
+function hashContent(content) {
+  return createHash6("sha256").update(content).digest("hex");
+}
+function projectMemoryMd(content) {
+  const stamp = new Date().toISOString().slice(0, 16).replace("T", " ");
+  const prefix = `<!-- generated ${stamp} -->
+
+`;
+  const body = content.trim();
+  if (countTokens(`${prefix}${body}`) > MEMORY_HEAD_MAX_TOKENS) {
+    throw new Error(`MEMORY.md candidate exceeds the ${MEMORY_HEAD_MAX_TOKENS}-token limit`);
+  }
+  return { body, file: `${prefix}${body}` };
+}
+function resolveMemoryHeadPath(agentsDir, agentId) {
+  if (agentId === "default")
+    return join12(agentsDir, "MEMORY.md");
+  return join12(agentsDir, "agents", agentId, "MEMORY.md");
+}
+function acquireHeadLease(agentId, owner, ttlMs) {
+  try {
+    return getDbAccessor().withWriteTx((db) => {
+      const table = db.prepare(`SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'memory_md_heads'`).get();
+      if (!table) {
+        return { ok: false, error: "memory_md_heads table unavailable", code: "unavailable" };
+      }
+      const now2 = new Date().toISOString();
+      db.prepare(`INSERT OR IGNORE INTO memory_md_heads
+				 (agent_id, content, content_hash, revision, updated_at)
+				 VALUES (?, '', '', 0, ?)`).run(agentId, now2);
+      const active = db.prepare(`SELECT revision, content_hash, lease_token, lease_expires_at
+					 FROM memory_md_heads
+					 WHERE agent_id = ?`).get(agentId);
+      if (!active) {
+        return { ok: false, error: "memory head state missing", code: "unavailable" };
+      }
+      const expiresAt = active.lease_expires_at ? Date.parse(active.lease_expires_at) : 0;
+      if (active.lease_token && Number.isFinite(expiresAt) && expiresAt > Date.now()) {
+        return { ok: false, error: "MEMORY.md write busy", code: "busy" };
+      }
+      const token = randomUUID3();
+      const leaseUntil = new Date(Date.now() + ttlMs).toISOString();
+      const result = db.prepare(`UPDATE memory_md_heads
+					 SET lease_token = ?, lease_owner = ?, lease_expires_at = ?
+					 WHERE agent_id = ?`).run(token, owner, leaseUntil, agentId);
+      if (countChanges(result) === 0) {
+        return { ok: false, error: "MEMORY.md write busy", code: "busy" };
+      }
+      return {
+        ok: true,
+        row: {
+          token,
+          revision: active.revision,
+          hash: active.content_hash
+        }
+      };
+    });
+  } catch {
+    return { ok: false, error: "memory head db unavailable", code: "unavailable" };
+  }
+}
+function writeProjection(file2, agentId) {
+  const agentsDir = getAgentsDir2();
+  const path = resolveMemoryHeadPath(agentsDir, agentId);
+  const dir = dirname9(path);
+  mkdirSync7(dir, { recursive: true });
+  if (existsSync10(path)) {
+    const stamp = new Date().toISOString().replace(/[:.]/g, "-").slice(0, 19);
+    const backup = join12(dir, "memory", `MEMORY.backup-${stamp}.md`);
+    mkdirSync7(dirname9(backup), { recursive: true });
+    writeFileSync6(backup, readFileSync10(path, "utf-8"));
+  }
+  writeFileSync6(path, file2);
+}
+async function curateMemoryHead(input) {
+  if (!input.passId.trim() || !input.agentId.trim())
+    return { ok: false, error: "passId and agentId are required", code: "invalid" };
+  for (const entry of input.entries) {
+    if (!entry.id.trim() || !entry.text.trim())
+      return { ok: false, error: "Memory head entries require id and text", code: "invalid" };
+    if (entry.operation !== "deferred" && entry.operation !== "no-op" && (!entry.sourceRefs.length || !entry.supportingQuotes.length))
+      return { ok: false, error: `Entry ${entry.id} requires provenance`, code: "invalid" };
+  }
+  let projected;
+  try {
+    projected = projectMemoryMd(input.content.trim());
+  } catch (error51) {
+    return { ok: false, error: error51 instanceof Error ? error51.message : String(error51), code: "invalid" };
+  }
+  const lease = acquireHeadLease(input.agentId, `dreaming:${input.passId}`, loadMemoryConfig(getAgentsDir2()).pipelineV2.worker.leaseTimeoutMs);
+  if (!lease.ok)
+    return { ok: false, error: lease.error, code: lease.code === "busy" ? "busy" : "invalid" };
+  const hash3 = hashContent(projected.body);
+  const next = lease.row.hash === hash3 ? lease.row.revision : lease.row.revision + 1;
+  const path = resolveMemoryHeadPath(getAgentsDir2(), input.agentId);
+  const previous = existsSync10(path) ? readFileSync10(path, "utf-8") : undefined;
+  try {
+    await getDbAccessor().withWriteTxAsync((db) => {
+      db.prepare(`UPDATE memory_md_heads SET content = ?, content_hash = ?, revision = ?, updated_at = ?, lease_token = NULL, lease_owner = NULL, lease_expires_at = NULL WHERE agent_id = ? AND lease_token = ?`).run(projected.body, hash3, next, new Date().toISOString(), input.agentId, lease.row.token);
+      for (const entry of input.entries)
+        db.prepare(`INSERT INTO memory_head_revisions (id, agent_id, revision, content, content_hash, rendered_token_count, pass_id, base_revision, base_hash, created_at, entry_id, entry_text, operation, source_refs_json, supporting_quotes_json) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(randomUUID3(), input.agentId, next, input.content.trim(), hash3, countTokens(input.content.trim()), input.passId, input.baseRevision, input.baseHash, new Date().toISOString(), entry.id, entry.text, entry.operation, JSON.stringify(entry.sourceRefs), JSON.stringify(entry.supportingQuotes));
+      writeProjection(projected.file, input.agentId);
+    });
+  } catch (error51) {
+    try {
+      if (previous === undefined) {
+        if (existsSync10(path))
+          rmSync3(path);
+      } else
+        writeFileSync6(path, previous);
+    } catch {}
+    return { ok: false, error: error51 instanceof Error ? error51.message : String(error51), code: "invalid" };
+  }
+  return {
+    ok: true,
+    revision: next,
+    hash: hash3,
+    changed: next !== input.baseRevision || hash3 !== input.baseHash
+  };
+}
+
 // ../../platform/daemon/src/pipeline/dreaming-capabilities.ts
 var bounded = (value, fallback, max) => Math.min(Math.max(Math.floor(value ?? fallback), 1), max);
 var MAX_EVIDENCE_EXCERPT_CHARS = 2000;
@@ -54813,14 +55581,41 @@ function createDreamingCapabilities(params) {
         ...result.retryFrom !== undefined ? { retryFrom: result.retryFrom } : {},
         items: result.items
       };
-    })
+    }),
+    ...params.mode !== "incremental-content" ? [] : [
+      capability("curate_memory_head", "Curate MEMORY.md head", "Content-pass-only audited MEMORY.md curation; hygiene passes cannot invoke this capability.", false, exports_external.object({
+        passId: exports_external.string().min(1),
+        agentId: exports_external.string().min(1),
+        baseRevision: exports_external.number().int().nonnegative(),
+        baseHash: exports_external.string().length(64),
+        content: exports_external.string().trim().min(1),
+        entries: exports_external.array(exports_external.object({
+          id: exports_external.string().trim().min(1),
+          text: exports_external.string().trim().min(1),
+          operation: exports_external.enum(["added", "updated", "removed", "deferred", "no-op"]),
+          sourceRefs: exports_external.array(exports_external.string()),
+          supportingQuotes: exports_external.array(exports_external.string())
+        })).max(200)
+      }), async (input) => {
+        if (!params.passId || input.passId !== params.passId)
+          return { ok: false, error: "Head curation requires the active Dreaming pass" };
+        const result = await curateMemoryHead(input);
+        if (result.ok) {
+          if (!params.accessor.withWriteTxAsync)
+            throw new Error("Head curation requires the async write transaction accessor to record its pass manifest");
+          await params.accessor.withWriteTxAsync((db) => db.prepare(`UPDATE dreaming_passes SET head_revision = ?, head_hash = ?, head_added = ?, head_updated = ?, head_removed = ?, head_deferred = ?, head_no_op = ? WHERE id = ? AND agent_id = ?`).run(result.revision, result.hash, input.entries.filter((entry) => entry.operation === "added").length, input.entries.filter((entry) => entry.operation === "updated").length, input.entries.filter((entry) => entry.operation === "removed").length, input.entries.filter((entry) => entry.operation === "deferred").length, input.entries.filter((entry) => entry.operation === "no-op").length, input.passId, input.agentId));
+        }
+        return result;
+      })
+    ]
   ];
 }
 function getDreamingCapabilityManifest() {
   return createDreamingCapabilities({
     accessor: undefined,
     agentId: "manifest",
-    actor: "manifest"
+    actor: "manifest",
+    mode: "incremental-content"
   }).map((capability2) => ({
     id: capability2.id,
     title: capability2.title,
@@ -54836,14 +55631,14 @@ init_dist();
 // ../../platform/daemon/src/graphiq.ts
 init_dist();
 import { spawn } from "node:child_process";
-import { constants, accessSync, existsSync as existsSync9 } from "node:fs";
+import { constants, accessSync, existsSync as existsSync11 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
-import { delimiter, join as join9 } from "node:path";
-function getAgentsDir2() {
+import { delimiter, join as join13 } from "node:path";
+function getAgentsDir3() {
   return resolveDefaultBasePath();
 }
 function getActiveGraphiqDbPath() {
-  const state = readGraphiqState(getAgentsDir2());
+  const state = readGraphiqState(getAgentsDir3());
   if (!state.enabled || !state.activeProject)
     return null;
   const project = state.indexedProjects.find((entry) => entry.path === state.activeProject);
@@ -54853,8 +55648,8 @@ function getActiveGraphiqDbPath() {
 }
 function resolveGraphiqBinary() {
   const path = process.env.PATH ?? "";
-  const candidates2 = path.split(delimiter).filter((entry) => entry.length > 0).map((entry) => join9(entry, "graphiq"));
-  candidates2.push(join9(homedir3(), ".local", "bin", "graphiq"));
+  const candidates2 = path.split(delimiter).filter((entry) => entry.length > 0).map((entry) => join13(entry, "graphiq"));
+  candidates2.push(join13(homedir3(), ".local", "bin", "graphiq"));
   for (const candidate of candidates2) {
     try {
       accessSync(candidate, constants.X_OK);
@@ -54868,7 +55663,7 @@ async function runGraphiqCli(args, timeoutMs = 15000) {
   if (!active) {
     throw new Error("GraphIQ has no active indexed project. Run `signet index <path>` first.");
   }
-  if (!existsSync9(active.dbPath)) {
+  if (!existsSync11(active.dbPath)) {
     throw new Error(`GraphIQ database not found for active project: ${active.dbPath}`);
   }
   const binary = resolveGraphiqBinary();
@@ -54939,7 +55734,7 @@ function runCommand(command, args, timeoutMs, extraEnv) {
 
 // ../../platform/daemon/src/plugins/index.ts
 init_dist();
-import { existsSync as existsSync12, readFileSync as readFileSync11 } from "node:fs";
+import { existsSync as existsSync14, readFileSync as readFileSync13 } from "node:fs";
 
 // ../../platform/daemon/src/secrets.ts
 init_logger();
@@ -54948,13 +55743,13 @@ init_dist();
 // ../../platform/daemon/src/plugins/audit.ts
 init_dist();
 init_logger();
-import { appendFileSync as appendFileSync2, existsSync as existsSync10, mkdirSync as mkdirSync7, readFileSync as readFileSync9 } from "node:fs";
-import { dirname as dirname9, join as join11 } from "node:path";
+import { appendFileSync as appendFileSync2, existsSync as existsSync12, mkdirSync as mkdirSync8, readFileSync as readFileSync11 } from "node:fs";
+import { dirname as dirname10, join as join14 } from "node:path";
 var SENSITIVE_KEY_RE = /(^|[_-])(api-key|apikey|auth-token|authorization|bearer|client-secret|credential|credentials|password|private-key|refresh-token|secret|secret-value|token|value)([_-]|$)/i;
 var SENSITIVE_ASSIGNMENT_RE = /\b((?:access[_-]?token|api[_-]?key|auth(?:orization)?|bearer|client[_-]?secret|credential|password|refresh[_-]?token|secret|token)\s*[:=]\s*)(["']?)([^"'\s,;&]+)/gi;
 var KNOWN_SECRET_VALUE_RE = /\b(AKIA[0-9A-Z]{16}|github_pat_[A-Za-z0-9_]{20,}|gh[pousr]_[A-Za-z0-9_]{20,}|sk-[A-Za-z0-9_-]{12,}|xox[baprs]-[A-Za-z0-9-]{10,})\b/g;
 function getDefaultPluginAuditPath() {
-  return join11(resolveDefaultBasePath(), ".daemon", "plugins", "audit-v1.ndjson");
+  return join14(resolveDefaultBasePath(), ".daemon", "plugins", "audit-v1.ndjson");
 }
 function recordPluginAuditEvent(input, auditPath) {
   if (auditPath === null)
@@ -54971,7 +55766,7 @@ function recordPluginAuditEvent(input, auditPath) {
     data: sanitizeAuditData(input.data ?? {})
   };
   try {
-    mkdirSync7(dirname9(path), { recursive: true });
+    mkdirSync8(dirname10(path), { recursive: true });
     appendFileSync2(path, `${JSON.stringify(event)}
 `, { mode: 384 });
   } catch (err) {
@@ -55004,7 +55799,7 @@ function sanitizeAuditValue(value) {
     return sanitizeAuditString(value);
   if (Array.isArray(value))
     return value.map((entry) => sanitizeAuditValue(entry));
-  if (isRecord7(value))
+  if (isRecord9(value))
     return sanitizeAuditData(value);
   return String(value);
 }
@@ -55014,7 +55809,7 @@ function sanitizeAuditString(value) {
 function makeAuditId() {
   return `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;
 }
-function isRecord7(value) {
+function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
@@ -55546,8 +56341,8 @@ var signetGraphiqManifest = {
 // ../../platform/daemon/src/plugins/host.ts
 init_dist();
 init_logger();
-import { existsSync as existsSync11, mkdirSync as mkdirSync8, readFileSync as readFileSync10, writeFileSync as writeFileSync6 } from "node:fs";
-import { dirname as dirname10, join as join12 } from "node:path";
+import { existsSync as existsSync13, mkdirSync as mkdirSync9, readFileSync as readFileSync12, writeFileSync as writeFileSync7 } from "node:fs";
+import { dirname as dirname11, join as join15 } from "node:path";
 
 // ../../platform/daemon/src/plugins/manifest.ts
 var PLUGIN_ID_RE = /^[a-z][a-z0-9-]*(\.[a-z][a-z0-9-]*)+$/;
@@ -55895,11 +56690,11 @@ class PluginHostV1 {
     };
   }
   loadStore() {
-    if (!this.storagePath || !existsSync11(this.storagePath)) {
+    if (!this.storagePath || !existsSync13(this.storagePath)) {
       return { version: 1, plugins: {} };
     }
     try {
-      const parsed = JSON.parse(readFileSync10(this.storagePath, "utf-8"));
+      const parsed = JSON.parse(readFileSync12(this.storagePath, "utf-8"));
       return parseStore(parsed);
     } catch (err) {
       this.storeWritable = false;
@@ -55923,13 +56718,13 @@ class PluginHostV1 {
       });
       return;
     }
-    mkdirSync8(dirname10(this.storagePath), { recursive: true });
-    writeFileSync6(this.storagePath, `${JSON.stringify(this.store, null, 2)}
+    mkdirSync9(dirname11(this.storagePath), { recursive: true });
+    writeFileSync7(this.storagePath, `${JSON.stringify(this.store, null, 2)}
 `, { mode: 384 });
   }
 }
 function getDefaultPluginRegistryPath() {
-  return join12(resolveDefaultBasePath(), SIGNET_PLUGIN_REGISTRY_DIR, SIGNET_PLUGIN_REGISTRY_FILE);
+  return join15(resolveDefaultBasePath(), SIGNET_PLUGIN_REGISTRY_DIR, SIGNET_PLUGIN_REGISTRY_FILE);
 }
 function resolveState(manifest, enabled, health, validationErrors) {
   if (validationErrors.length > 0) {
@@ -55966,12 +56761,12 @@ function filterSurfacesByCapabilities(surfaces3, grantedCapabilities) {
   };
 }
 function parseStore(value) {
-  if (!isRecord9(value) || value.version !== 1 || !isRecord9(value.plugins)) {
+  if (!isRecord10(value) || value.version !== 1 || !isRecord10(value.plugins)) {
     throw new Error("expected plugin registry version 1 with a plugins object");
   }
   const plugins = {};
   for (const [id, raw] of Object.entries(value.plugins)) {
-    if (!isRecord9(raw)) {
+    if (!isRecord10(raw)) {
       throw new Error(`expected plugin registry entry ${id} to be an object`);
     }
     plugins[id] = {
@@ -55989,7 +56784,7 @@ function parseStringArray(value) {
     return;
   return value.every((entry) => typeof entry === "string") ? value : undefined;
 }
-function isRecord9(value) {
+function isRecord10(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function clipPromptContribution(contribution) {
@@ -56051,10 +56846,10 @@ function auditResultForRecord(record5) {
 }
 // ../../platform/daemon/src/plugins/index.ts
 function resolveGraphiqEnabled() {
-  const statePath = getGraphiqStatePath(getAgentsDir2());
-  if (existsSync12(statePath)) {
+  const statePath = getGraphiqStatePath(getAgentsDir3());
+  if (existsSync14(statePath)) {
     try {
-      const parsed = JSON.parse(readFileSync11(statePath, "utf-8"));
+      const parsed = JSON.parse(readFileSync13(statePath, "utf-8"));
       if (typeof parsed === "object" && parsed !== null && typeof parsed.enabled === "boolean") {
         return parsed.enabled;
       }
@@ -58148,7 +58943,7 @@ function isLocalDaemonUrl(url2) {
 }
 function isValidAgentsDir(dir) {
   try {
-    return isAbsolute(dir) && existsSync13(dir) && statSync4(dir).isDirectory();
+    return isAbsolute(dir) && existsSync15(dir) && statSync4(dir).isDirectory();
   } catch {
     return false;
   }

package/native-manifest.json

@@ -1,43 +1,43 @@
 {
   "schemaVersion": 1,
-  "version": "0.207.2",
+  "version": "0.208.0",
   "assets": [
     {
       "name": "signet-darwin-arm64",
       "platform": "darwin-arm64",
-      "sha256": "b1a8eef52a59fdb8e13d41a584448ca06139c8822c644876e4b0262fbefb20d7",
-      "size": 161313568
+      "sha256": "7af6ebd6f560d27d4f0ea92cceb076820a428e22583860a3fee9bca4bc38dea5",
+      "size": 161363104
     },
     {
       "name": "signet-darwin-x64",
       "platform": "darwin-x64",
-      "sha256": "a56cd76e130de3c54a8719bd61f3f00d86604b9519786706a9c902bd8706b33c",
-      "size": 166038080
+      "sha256": "88806e38e41813ecc660a1a0c657713169754c9a0cf4752dc58866c339b4c345",
+      "size": 166103616
     },
     {
       "name": "signet-linux-arm64",
       "platform": "linux-arm64",
-      "sha256": "4f88604f48b65cf4ce984dfc9f88c9c3823b6110cc717c527cc136a8a3faec44",
-      "size": 208608209
+      "sha256": "183a5e4c215c0659fa56e432c001f2120d8fbf5faee6afd33a68335aef2a1f09",
+      "size": 208664011
     },
     {
       "name": "signet-linux-x64",
       "platform": "linux-x64",
-      "sha256": "3915683a845c4ad389cd7a97a7fd36ceba47d1680f6f38bb09b0bc5d263c6150",
-      "size": 211396960
+      "sha256": "6870400c0c22722835f81ae33a3d7d44ce61e18b7371ea9dc7b9a7c16062ea98",
+      "size": 211452762
     },
     {
       "name": "signet-win32-x64.exe",
       "platform": "win32-x64",
-      "sha256": "15b049eedab383b22249973630304ece285c048657896126fab5871ebea68397",
-      "size": 217883136
+      "sha256": "7d6d123fcf71f129eaa4701d6f018e66d8df83d27210fb57a768742107673ea5",
+      "size": 217938944
     }
   ],
   "components": {
     "connectors": {
-      "url": "signet-connectors-0.207.2.tar.gz",
-      "sha256": "2d7c61f0d1bf6eae45b248a7da232f24a9e6fd9a84045ced9c77ae49c5d552d2",
-      "size": 21942
+      "url": "signet-connectors-0.208.0.tar.gz",
+      "sha256": "7bea667a5cd76ae34d1d2388b6fc7a4a84ef6e376e0cd4de387ff3e52ea6e374",
+      "size": 21945
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "signetai",
-  "version": "0.207.2",
+  "version": "0.208.0",
   "description": "Signet native CLI installer wrapper",
   "type": "module",
   "bin": {
@@ -65,10 +65,10 @@
     "access": "public"
   },
   "optionalDependencies": {
-    "signetai-darwin-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.207.2/signetai-darwin-arm64-0.207.2.tgz",
-    "signetai-darwin-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.207.2/signetai-darwin-x64-0.207.2.tgz",
-    "signetai-linux-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.207.2/signetai-linux-arm64-0.207.2.tgz",
-    "signetai-linux-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.207.2/signetai-linux-x64-0.207.2.tgz",
-    "signetai-win32-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.207.2/signetai-win32-x64-0.207.2.tgz"
+    "signetai-darwin-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.208.0/signetai-darwin-arm64-0.208.0.tgz",
+    "signetai-darwin-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.208.0/signetai-darwin-x64-0.208.0.tgz",
+    "signetai-linux-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.208.0/signetai-linux-arm64-0.208.0.tgz",
+    "signetai-linux-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.208.0/signetai-linux-x64-0.208.0.tgz",
+    "signetai-win32-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.208.0/signetai-win32-x64-0.208.0.tgz"
   }
 }