@remnic/core 1.0.0

package/dist/abstraction-nodes.d.ts

@@ -0,0 +1,52 @@
+type AbstractionNodeKind = "episode" | "topic" | "project" | "workflow" | "constraint";
+type AbstractionLevel = "micro" | "meso" | "macro";
+interface AbstractionNode {
+    schemaVersion: 1;
+    nodeId: string;
+    recordedAt: string;
+    sessionKey: string;
+    kind: AbstractionNodeKind;
+    abstractionLevel: AbstractionLevel;
+    title: string;
+    summary: string;
+    sourceMemoryIds?: string[];
+    entityRefs?: string[];
+    tags?: string[];
+    metadata?: Record<string, string>;
+}
+interface AbstractionNodeStoreStatus {
+    enabled: boolean;
+    anchorsEnabled: boolean;
+    rootDir: string;
+    nodesDir: string;
+    nodes: {
+        total: number;
+        valid: number;
+        invalid: number;
+        byKind: Partial<Record<AbstractionNodeKind, number>>;
+        byLevel: Partial<Record<AbstractionLevel, number>>;
+        latestNodeId?: string;
+        latestRecordedAt?: string;
+        latestSessionKey?: string;
+    };
+    latestNode?: AbstractionNode;
+    invalidNodes: Array<{
+        path: string;
+        error: string;
+    }>;
+}
+declare function resolveAbstractionNodeStoreDir(memoryDir: string, overrideDir?: string): string;
+declare function validateAbstractionNode(raw: unknown): AbstractionNode;
+declare function recordAbstractionNode(options: {
+    memoryDir: string;
+    abstractionNodeStoreDir?: string;
+    node: AbstractionNode;
+}): Promise<string>;
+declare function getAbstractionNodeStoreStatus(options: {
+    memoryDir: string;
+    abstractionNodeStoreDir?: string;
+    enabled: boolean;
+    anchorsEnabled: boolean;
+}): Promise<AbstractionNodeStoreStatus>;
+
+export { type AbstractionLevel, type AbstractionNode, type AbstractionNodeKind, type AbstractionNodeStoreStatus, getAbstractionNodeStoreStatus, recordAbstractionNode, resolveAbstractionNodeStoreDir, validateAbstractionNode };

package/dist/abstraction-nodes.js

@@ -0,0 +1,15 @@
+import {
+  getAbstractionNodeStoreStatus,
+  recordAbstractionNode,
+  resolveAbstractionNodeStoreDir,
+  validateAbstractionNode
+} from "./chunk-NGAVDO7E.js";
+import "./chunk-DGXUHMOV.js";
+import "./chunk-LPSF4OQH.js";
+export {
+  getAbstractionNodeStoreStatus,
+  recordAbstractionNode,
+  resolveAbstractionNodeStoreDir,
+  validateAbstractionNode
+};
+//# sourceMappingURL=abstraction-nodes.js.map

package/dist/abstraction-nodes.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/access-cli.d.ts

@@ -0,0 +1,5 @@
+declare function main(argv?: string[]): Promise<void>;
+declare function printUsage(): void;
+declare function runCli(argv?: string[]): Promise<void>;
+
+export { main, printUsage, runCli };

package/dist/access-cli.js

@@ -0,0 +1,308 @@
+import {
+  Orchestrator
+} from "./chunk-YAPUAHAY.js";
+import "./chunk-IFFFR3MR.js";
+import "./chunk-TKO4HZCK.js";
+import "./chunk-Z5AAYHUC.js";
+import "./chunk-4A24LIM2.js";
+import "./chunk-TPB3I2AC.js";
+import "./chunk-UHGBNIOS.js";
+import "./chunk-ZKYI7UVO.js";
+import "./chunk-CDW777AI.js";
+import "./chunk-ETOW6ACV.js";
+import "./chunk-G3AG3KZN.js";
+import "./chunk-2CJCWDMR.js";
+import "./chunk-X7XN6YU4.js";
+import "./chunk-BRK4ODMI.js";
+import "./chunk-C7VW7C3F.js";
+import "./chunk-GPGBSNKM.js";
+import "./chunk-V3RXWQIE.js";
+import "./chunk-YCN4BVDK.js";
+import "./chunk-L5RPWGFK.js";
+import "./chunk-HG2NKWR2.js";
+import "./chunk-GJR6D6KC.js";
+import "./chunk-H63EDPFJ.js";
+import "./chunk-WWIQTB2Y.js";
+import "./chunk-QFQVZOGA.js";
+import "./chunk-MWGVGUIS.js";
+import "./chunk-763GUIOU.js";
+import "./chunk-ONRU4L2N.js";
+import "./chunk-MDDAA2AO.js";
+import "./chunk-YAZNBMNF.js";
+import "./chunk-2PO5ZRKV.js";
+import "./chunk-VEWZZM3H.js";
+import "./chunk-QPKFPHOO.js";
+import "./chunk-V4YC4LUK.js";
+import "./chunk-HLBYLYRD.js";
+import "./chunk-OTAVQCSF.js";
+import "./chunk-3QKK7QOS.js";
+import "./chunk-UIYZ5T3I.js";
+import "./chunk-UCYSTFZR.js";
+import "./chunk-J47FNDR7.js";
+import "./chunk-CULXMQJH.js";
+import "./chunk-UV2FO7J4.js";
+import "./chunk-T4WRIV2C.js";
+import "./chunk-LOBRX7VD.js";
+import "./chunk-IZME7KW2.js";
+import "./chunk-YRMVARQP.js";
+import "./chunk-TVVVQQAK.js";
+import "./chunk-BDFZXRSO.js";
+import "./chunk-LK6SGL53.js";
+import "./chunk-AAI7JARD.js";
+import "./chunk-C6QPK5GG.js";
+import "./chunk-Q6FETXJA.js";
+import "./chunk-K6WK37A6.js";
+import "./chunk-SCHEKPYH.js";
+import "./chunk-ORZMT74A.js";
+import "./chunk-B7LOFDVE.js";
+import "./chunk-FYIYMQ5N.js";
+import "./chunk-2NMMFZ5T.js";
+import {
+  parseConfig
+} from "./chunk-ISY75RLM.js";
+import "./chunk-Z5LAYHGJ.js";
+import "./chunk-JWPLJLDU.js";
+import "./chunk-YNI4S5WT.js";
+import "./chunk-DORBM6OB.js";
+import "./chunk-XYIK4LF6.js";
+import "./chunk-KT4NEUNF.js";
+import "./chunk-LU3GQNDQ.js";
+import "./chunk-Y27UJK6V.js";
+import "./chunk-UZB5KHKX.js";
+import "./chunk-M5KEYE5E.js";
+import "./chunk-NGAVDO7E.js";
+import {
+  readEnvVar,
+  resolveHomeDir
+} from "./chunk-MARWOCVP.js";
+import {
+  EngramAccessService
+} from "./chunk-QY2BHY5O.js";
+import "./chunk-N5AKDXAI.js";
+import "./chunk-EQINRHYR.js";
+import "./chunk-J3BT33K7.js";
+import "./chunk-EEQLFRUM.js";
+import "./chunk-QWUUMMIK.js";
+import "./chunk-U4PV25RD.js";
+import "./chunk-ESSMF2FR.js";
+import "./chunk-TP4FZJIZ.js";
+import "./chunk-SCU65EZI.js";
+import "./chunk-BOUYNNYD.js";
+import "./chunk-DM2T26WE.js";
+import "./chunk-QSVPYQPG.js";
+import "./chunk-YNCQ7E4M.js";
+import "./chunk-HLXVTBF3.js";
+import "./chunk-M62O4P4T.js";
+import "./chunk-DT5TVLJE.js";
+import "./chunk-KWBU5S5U.js";
+import "./chunk-DGXUHMOV.js";
+import "./chunk-LPSF4OQH.js";
+import "./chunk-XKECPATV.js";
+import "./chunk-6HZ6AO2P.js";
+import "./chunk-QCCCQT3O.js";
+
+// src/access-cli.ts
+import fs from "fs";
+import path from "path";
+var UsageError = class extends Error {
+  constructor(kind, optionName) {
+    super("invalid access-cli arguments");
+    this.kind = kind;
+    this.optionName = optionName;
+  }
+  kind;
+  optionName;
+};
+function formatUsageError(error) {
+  switch (error.kind) {
+    case "unsupported-command":
+      return "unsupported command";
+    case "unexpected-positional":
+      return "unexpected positional argument";
+    case "missing-option":
+      return `missing required option: --${error.optionName ?? "unknown"}`;
+    case "missing-content":
+      return "missing required option: --content or --content-file";
+    case "invalid-integer":
+      return `invalid integer for --${error.optionName ?? "unknown"}`;
+    case "invalid-number":
+      return `invalid number for --${error.optionName ?? "unknown"}`;
+  }
+}
+function writeCliOutput(text = "") {
+  process.stdout.write(`${text}
+`);
+}
+function usage() {
+  return [
+    "Usage:",
+    "  engram-access browse [options]",
+    "  engram-access store [options]",
+    "",
+    "Browse options:",
+    "  --namespace <name>",
+    "  --query <text>",
+    "  --category <name>",
+    "  --status <name>",
+    "  --sort <updated_desc|updated_asc|created_desc|created_asc>",
+    "  --limit <n>",
+    "  --offset <n>",
+    "",
+    "Store options:",
+    "  --namespace <name>",
+    "  --session-key <key>",
+    "  --principal <principal>",
+    "  --content <text> | --content-file <path>",
+    "  --category <name>",
+    "  --confidence <0-1>",
+    "  --tag <tag> (repeatable)",
+    "  --entity-ref <ref>",
+    "  --ttl <duration>",
+    "  --source-reason <text>",
+    "  --idempotency-key <key>",
+    "  --dry-run"
+  ].join("\n");
+}
+function parseArgs(argv) {
+  const [commandRaw, ...rest] = argv;
+  if (commandRaw !== "browse" && commandRaw !== "store") {
+    throw new UsageError("unsupported-command");
+  }
+  const options = {};
+  const flags = /* @__PURE__ */ new Set();
+  for (let i = 0; i < rest.length; i += 1) {
+    const token = rest[i];
+    if (!token.startsWith("--")) {
+      throw new UsageError("unexpected-positional");
+    }
+    const key = token.slice(2);
+    const next = rest[i + 1];
+    if (!next || next.startsWith("--")) {
+      flags.add(key);
+      continue;
+    }
+    if (!options[key]) {
+      options[key] = [];
+    }
+    options[key].push(next);
+    i += 1;
+  }
+  return {
+    command: commandRaw,
+    options,
+    flags
+  };
+}
+function getLastOption(args, name) {
+  const values = args.options[name];
+  if (!values || values.length === 0) return void 0;
+  return values[values.length - 1];
+}
+function getAllOptions(args, name) {
+  return args.options[name] ?? [];
+}
+function requireOption(args, name) {
+  const value = getLastOption(args, name);
+  if (!value || value.trim().length === 0) {
+    throw new UsageError("missing-option", name);
+  }
+  return value;
+}
+function parseIntegerOption(args, name) {
+  const raw = getLastOption(args, name);
+  if (!raw) return void 0;
+  const value = parseInt(raw, 10);
+  if (!Number.isFinite(value)) {
+    throw new UsageError("invalid-integer", name);
+  }
+  return value;
+}
+function parseFloatOption(args, name) {
+  const raw = getLastOption(args, name);
+  if (!raw) return void 0;
+  const value = Number.parseFloat(raw);
+  if (!Number.isFinite(value)) {
+    throw new UsageError("invalid-number", name);
+  }
+  return value;
+}
+function loadPluginConfig() {
+  const configPath = readEnvVar("OPENCLAW_ENGRAM_CONFIG_PATH") || readEnvVar("OPENCLAW_CONFIG_PATH") || path.join(resolveHomeDir(), ".openclaw", "openclaw.json");
+  const raw = JSON.parse(fs.readFileSync(configPath, "utf8"));
+  return raw?.plugins?.entries?.["openclaw-engram"]?.config ?? {};
+}
+function buildRuntime() {
+  const config = parseConfig(loadPluginConfig());
+  return {
+    config,
+    service: new EngramAccessService(new Orchestrator(config))
+  };
+}
+async function runBrowse(args) {
+  const { service } = buildRuntime();
+  const result = await service.memoryBrowse({
+    namespace: getLastOption(args, "namespace"),
+    query: getLastOption(args, "query"),
+    category: getLastOption(args, "category"),
+    status: getLastOption(args, "status"),
+    sort: getLastOption(args, "sort"),
+    limit: parseIntegerOption(args, "limit"),
+    offset: parseIntegerOption(args, "offset")
+  });
+  console.log(JSON.stringify(result, null, 2));
+}
+async function runStore(args) {
+  const { config, service } = buildRuntime();
+  const contentFile = getLastOption(args, "content-file");
+  const inlineContent = getLastOption(args, "content");
+  const content = contentFile ? fs.readFileSync(contentFile, "utf8") : inlineContent;
+  if (!content || content.trim().length === 0) {
+    throw new UsageError("missing-content");
+  }
+  const result = await service.memoryStore({
+    namespace: getLastOption(args, "namespace"),
+    sessionKey: getLastOption(args, "session-key"),
+    authenticatedPrincipal: getLastOption(args, "principal") ?? config.agentAccessHttp.principal,
+    content,
+    category: requireOption(args, "category"),
+    confidence: parseFloatOption(args, "confidence"),
+    tags: getAllOptions(args, "tag"),
+    entityRef: getLastOption(args, "entity-ref"),
+    ttl: getLastOption(args, "ttl"),
+    sourceReason: getLastOption(args, "source-reason"),
+    idempotencyKey: getLastOption(args, "idempotency-key"),
+    dryRun: args.flags.has("dry-run")
+  });
+  console.log(JSON.stringify(result, null, 2));
+}
+async function main(argv = process.argv.slice(2)) {
+  const args = parseArgs(argv);
+  if (args.command === "browse") {
+    await runBrowse(args);
+    return;
+  }
+  await runStore(args);
+}
+function printUsage() {
+  writeCliOutput(usage());
+}
+async function runCli(argv = process.argv.slice(2)) {
+  try {
+    await main(argv);
+  } catch (error) {
+    if (error instanceof UsageError) {
+      writeCliOutput(formatUsageError(error));
+      writeCliOutput();
+      printUsage();
+      process.exit(1);
+    }
+    console.error("access-cli failed");
+    process.exit(1);
+  }
+}
+export {
+  main,
+  printUsage,
+  runCli
+};
+//# sourceMappingURL=access-cli.js.map

package/dist/access-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/access-cli.ts"],"sourcesContent":["import fs from \"node:fs\";\nimport path from \"node:path\";\nimport { parseConfig } from \"./config.js\";\nimport type { PluginConfig } from \"./types.js\";\nimport { Orchestrator } from \"./orchestrator.js\";\nimport { EngramAccessService } from \"./access-service.js\";\nimport { readEnvVar, resolveHomeDir } from \"./runtime/env.js\";\n\ntype CommandName = \"browse\" | \"store\";\n\ntype ParsedArgs = {\n  command: CommandName;\n  options: Record<string, string[]>;\n  flags: Set<string>;\n};\n\ntype Runtime = {\n  config: PluginConfig;\n  service: EngramAccessService;\n};\n\ntype UsageErrorKind =\n  | \"unsupported-command\"\n  | \"unexpected-positional\"\n  | \"missing-option\"\n  | \"missing-content\"\n  | \"invalid-integer\"\n  | \"invalid-number\";\n\nclass UsageError extends Error {\n  constructor(\n    readonly kind: UsageErrorKind,\n    readonly optionName?: string,\n  ) {\n    super(\"invalid access-cli arguments\");\n  }\n}\n\nfunction formatUsageError(error: UsageError): string {\n  switch (error.kind) {\n    case \"unsupported-command\":\n      return \"unsupported command\";\n    case \"unexpected-positional\":\n      return \"unexpected positional argument\";\n    case \"missing-option\":\n      return `missing required option: --${error.optionName ?? \"unknown\"}`;\n    case \"missing-content\":\n      return \"missing required option: --content or --content-file\";\n    case \"invalid-integer\":\n      return `invalid integer for --${error.optionName ?? \"unknown\"}`;\n    case \"invalid-number\":\n      return `invalid number for --${error.optionName ?? \"unknown\"}`;\n  }\n}\n\nfunction writeCliOutput(text: string = \"\"): void {\n  process.stdout.write(`${text}\\n`);\n}\n\nfunction usage(): string {\n  return [\n    \"Usage:\",\n    \"  engram-access browse [options]\",\n    \"  engram-access store [options]\",\n    \"\",\n    \"Browse options:\",\n    \"  --namespace <name>\",\n    \"  --query <text>\",\n    \"  --category <name>\",\n    \"  --status <name>\",\n    \"  --sort <updated_desc|updated_asc|created_desc|created_asc>\",\n    \"  --limit <n>\",\n    \"  --offset <n>\",\n    \"\",\n    \"Store options:\",\n    \"  --namespace <name>\",\n    \"  --session-key <key>\",\n    \"  --principal <principal>\",\n    \"  --content <text> | --content-file <path>\",\n    \"  --category <name>\",\n    \"  --confidence <0-1>\",\n    \"  --tag <tag> (repeatable)\",\n    \"  --entity-ref <ref>\",\n    \"  --ttl <duration>\",\n    \"  --source-reason <text>\",\n    \"  --idempotency-key <key>\",\n    \"  --dry-run\",\n  ].join(\"\\n\");\n}\n\nfunction parseArgs(argv: string[]): ParsedArgs {\n  const [commandRaw, ...rest] = argv;\n  if (commandRaw !== \"browse\" && commandRaw !== \"store\") {\n    throw new UsageError(\"unsupported-command\");\n  }\n\n  const options: Record<string, string[]> = {};\n  const flags = new Set<string>();\n\n  for (let i = 0; i < rest.length; i += 1) {\n    const token = rest[i];\n    if (!token.startsWith(\"--\")) {\n      throw new UsageError(\"unexpected-positional\");\n    }\n    const key = token.slice(2);\n    const next = rest[i + 1];\n    if (!next || next.startsWith(\"--\")) {\n      flags.add(key);\n      continue;\n    }\n    if (!options[key]) {\n      options[key] = [];\n    }\n    options[key].push(next);\n    i += 1;\n  }\n\n  return {\n    command: commandRaw,\n    options,\n    flags,\n  };\n}\n\nfunction getLastOption(args: ParsedArgs, name: string): string | undefined {\n  const values = args.options[name];\n  if (!values || values.length === 0) return undefined;\n  return values[values.length - 1];\n}\n\nfunction getAllOptions(args: ParsedArgs, name: string): string[] {\n  return args.options[name] ?? [];\n}\n\nfunction requireOption(args: ParsedArgs, name: string): string {\n  const value = getLastOption(args, name);\n  if (!value || value.trim().length === 0) {\n    throw new UsageError(\"missing-option\", name);\n  }\n  return value;\n}\n\nfunction parseIntegerOption(args: ParsedArgs, name: string): number | undefined {\n  const raw = getLastOption(args, name);\n  if (!raw) return undefined;\n  const value = parseInt(raw, 10);\n  if (!Number.isFinite(value)) {\n    throw new UsageError(\"invalid-integer\", name);\n  }\n  return value;\n}\n\nfunction parseFloatOption(args: ParsedArgs, name: string): number | undefined {\n  const raw = getLastOption(args, name);\n  if (!raw) return undefined;\n  const value = Number.parseFloat(raw);\n  if (!Number.isFinite(value)) {\n    throw new UsageError(\"invalid-number\", name);\n  }\n  return value;\n}\n\nfunction loadPluginConfig(): Record<string, unknown> {\n  const configPath =\n    readEnvVar(\"OPENCLAW_ENGRAM_CONFIG_PATH\") ||\n    readEnvVar(\"OPENCLAW_CONFIG_PATH\") ||\n    path.join(resolveHomeDir(), \".openclaw\", \"openclaw.json\");\n  const raw = JSON.parse(fs.readFileSync(configPath, \"utf8\"));\n  return raw?.plugins?.entries?.[\"openclaw-engram\"]?.config ?? {};\n}\n\nfunction buildRuntime(): Runtime {\n  const config = parseConfig(loadPluginConfig());\n  return {\n    config,\n    service: new EngramAccessService(new Orchestrator(config)),\n  };\n}\n\nasync function runBrowse(args: ParsedArgs): Promise<void> {\n  const { service } = buildRuntime();\n  const result = await service.memoryBrowse({\n    namespace: getLastOption(args, \"namespace\"),\n    query: getLastOption(args, \"query\"),\n    category: getLastOption(args, \"category\"),\n    status: getLastOption(args, \"status\"),\n    sort: getLastOption(args, \"sort\") as \"updated_desc\" | \"updated_asc\" | \"created_desc\" | \"created_asc\" | undefined,\n    limit: parseIntegerOption(args, \"limit\"),\n    offset: parseIntegerOption(args, \"offset\"),\n  });\n  console.log(JSON.stringify(result, null, 2));\n}\n\nasync function runStore(args: ParsedArgs): Promise<void> {\n  const { config, service } = buildRuntime();\n  const contentFile = getLastOption(args, \"content-file\");\n  const inlineContent = getLastOption(args, \"content\");\n  const content = contentFile ? fs.readFileSync(contentFile, \"utf8\") : inlineContent;\n  if (!content || content.trim().length === 0) {\n    throw new UsageError(\"missing-content\");\n  }\n\n  const result = await service.memoryStore({\n    namespace: getLastOption(args, \"namespace\"),\n    sessionKey: getLastOption(args, \"session-key\"),\n    authenticatedPrincipal: getLastOption(args, \"principal\") ?? config.agentAccessHttp.principal,\n    content,\n    category: requireOption(args, \"category\"),\n    confidence: parseFloatOption(args, \"confidence\"),\n    tags: getAllOptions(args, \"tag\"),\n    entityRef: getLastOption(args, \"entity-ref\"),\n    ttl: getLastOption(args, \"ttl\"),\n    sourceReason: getLastOption(args, \"source-reason\"),\n    idempotencyKey: getLastOption(args, \"idempotency-key\"),\n    dryRun: args.flags.has(\"dry-run\"),\n  });\n  console.log(JSON.stringify(result, null, 2));\n}\n\nexport async function main(argv: string[] = process.argv.slice(2)): Promise<void> {\n  const args = parseArgs(argv);\n  if (args.command === \"browse\") {\n    await runBrowse(args);\n    return;\n  }\n  await runStore(args);\n}\n\nexport function printUsage(): void {\n  writeCliOutput(usage());\n}\n\nexport async function runCli(argv: string[] = process.argv.slice(2)): Promise<void> {\n  try {\n    await main(argv);\n  } catch (error) {\n    if (error instanceof UsageError) {\n      writeCliOutput(formatUsageError(error));\n      writeCliOutput();\n      printUsage();\n      process.exit(1);\n    }\n\n    console.error(\"access-cli failed\");\n    process.exit(1);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,QAAQ;AACf,OAAO,UAAU;AA4BjB,IAAM,aAAN,cAAyB,MAAM;AAAA,EAC7B,YACW,MACA,YACT;AACA,UAAM,8BAA8B;AAH3B;AACA;AAAA,EAGX;AAAA,EAJW;AAAA,EACA;AAIb;AAEA,SAAS,iBAAiB,OAA2B;AACnD,UAAQ,MAAM,MAAM;AAAA,IAClB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,8BAA8B,MAAM,cAAc,SAAS;AAAA,IACpE,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,yBAAyB,MAAM,cAAc,SAAS;AAAA,IAC/D,KAAK;AACH,aAAO,wBAAwB,MAAM,cAAc,SAAS;AAAA,EAChE;AACF;AAEA,SAAS,eAAe,OAAe,IAAU;AAC/C,UAAQ,OAAO,MAAM,GAAG,IAAI;AAAA,CAAI;AAClC;AAEA,SAAS,QAAgB;AACvB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEA,SAAS,UAAU,MAA4B;AAC7C,QAAM,CAAC,YAAY,GAAG,IAAI,IAAI;AAC9B,MAAI,eAAe,YAAY,eAAe,SAAS;AACrD,UAAM,IAAI,WAAW,qBAAqB;AAAA,EAC5C;AAEA,QAAM,UAAoC,CAAC;AAC3C,QAAM,QAAQ,oBAAI,IAAY;AAE9B,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,GAAG;AACvC,UAAM,QAAQ,KAAK,CAAC;AACpB,QAAI,CAAC,MAAM,WAAW,IAAI,GAAG;AAC3B,YAAM,IAAI,WAAW,uBAAuB;AAAA,IAC9C;AACA,UAAM,MAAM,MAAM,MAAM,CAAC;AACzB,UAAM,OAAO,KAAK,IAAI,CAAC;AACvB,QAAI,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG;AAClC,YAAM,IAAI,GAAG;AACb;AAAA,IACF;AACA,QAAI,CAAC,QAAQ,GAAG,GAAG;AACjB,cAAQ,GAAG,IAAI,CAAC;AAAA,IAClB;AACA,YAAQ,GAAG,EAAE,KAAK,IAAI;AACtB,SAAK;AAAA,EACP;AAEA,SAAO;AAAA,IACL,SAAS;AAAA,IACT;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,cAAc,MAAkB,MAAkC;AACzE,QAAM,SAAS,KAAK,QAAQ,IAAI;AAChC,MAAI,CAAC,UAAU,OAAO,WAAW,EAAG,QAAO;AAC3C,SAAO,OAAO,OAAO,SAAS,CAAC;AACjC;AAEA,SAAS,cAAc,MAAkB,MAAwB;AAC/D,SAAO,KAAK,QAAQ,IAAI,KAAK,CAAC;AAChC;AAEA,SAAS,cAAc,MAAkB,MAAsB;AAC7D,QAAM,QAAQ,cAAc,MAAM,IAAI;AACtC,MAAI,CAAC,SAAS,MAAM,KAAK,EAAE,WAAW,GAAG;AACvC,UAAM,IAAI,WAAW,kBAAkB,IAAI;AAAA,EAC7C;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,MAAkB,MAAkC;AAC9E,QAAM,MAAM,cAAc,MAAM,IAAI;AACpC,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,QAAQ,SAAS,KAAK,EAAE;AAC9B,MAAI,CAAC,OAAO,SAAS,KAAK,GAAG;AAC3B,UAAM,IAAI,WAAW,mBAAmB,IAAI;AAAA,EAC9C;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,MAAkB,MAAkC;AAC5E,QAAM,MAAM,cAAc,MAAM,IAAI;AACpC,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,QAAQ,OAAO,WAAW,GAAG;AACnC,MAAI,CAAC,OAAO,SAAS,KAAK,GAAG;AAC3B,UAAM,IAAI,WAAW,kBAAkB,IAAI;AAAA,EAC7C;AACA,SAAO;AACT;AAEA,SAAS,mBAA4C;AACnD,QAAM,aACJ,WAAW,6BAA6B,KACxC,WAAW,sBAAsB,KACjC,KAAK,KAAK,eAAe,GAAG,aAAa,eAAe;AAC1D,QAAM,MAAM,KAAK,MAAM,GAAG,aAAa,YAAY,MAAM,CAAC;AAC1D,SAAO,KAAK,SAAS,UAAU,iBAAiB,GAAG,UAAU,CAAC;AAChE;AAEA,SAAS,eAAwB;AAC/B,QAAM,SAAS,YAAY,iBAAiB,CAAC;AAC7C,SAAO;AAAA,IACL;AAAA,IACA,SAAS,IAAI,oBAAoB,IAAI,aAAa,MAAM,CAAC;AAAA,EAC3D;AACF;AAEA,eAAe,UAAU,MAAiC;AACxD,QAAM,EAAE,QAAQ,IAAI,aAAa;AACjC,QAAM,SAAS,MAAM,QAAQ,aAAa;AAAA,IACxC,WAAW,cAAc,MAAM,WAAW;AAAA,IAC1C,OAAO,cAAc,MAAM,OAAO;AAAA,IAClC,UAAU,cAAc,MAAM,UAAU;AAAA,IACxC,QAAQ,cAAc,MAAM,QAAQ;AAAA,IACpC,MAAM,cAAc,MAAM,MAAM;AAAA,IAChC,OAAO,mBAAmB,MAAM,OAAO;AAAA,IACvC,QAAQ,mBAAmB,MAAM,QAAQ;AAAA,EAC3C,CAAC;AACD,UAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAC7C;AAEA,eAAe,SAAS,MAAiC;AACvD,QAAM,EAAE,QAAQ,QAAQ,IAAI,aAAa;AACzC,QAAM,cAAc,cAAc,MAAM,cAAc;AACtD,QAAM,gBAAgB,cAAc,MAAM,SAAS;AACnD,QAAM,UAAU,cAAc,GAAG,aAAa,aAAa,MAAM,IAAI;AACrE,MAAI,CAAC,WAAW,QAAQ,KAAK,EAAE,WAAW,GAAG;AAC3C,UAAM,IAAI,WAAW,iBAAiB;AAAA,EACxC;AAEA,QAAM,SAAS,MAAM,QAAQ,YAAY;AAAA,IACvC,WAAW,cAAc,MAAM,WAAW;AAAA,IAC1C,YAAY,cAAc,MAAM,aAAa;AAAA,IAC7C,wBAAwB,cAAc,MAAM,WAAW,KAAK,OAAO,gBAAgB;AAAA,IACnF;AAAA,IACA,UAAU,cAAc,MAAM,UAAU;AAAA,IACxC,YAAY,iBAAiB,MAAM,YAAY;AAAA,IAC/C,MAAM,cAAc,MAAM,KAAK;AAAA,IAC/B,WAAW,cAAc,MAAM,YAAY;AAAA,IAC3C,KAAK,cAAc,MAAM,KAAK;AAAA,IAC9B,cAAc,cAAc,MAAM,eAAe;AAAA,IACjD,gBAAgB,cAAc,MAAM,iBAAiB;AAAA,IACrD,QAAQ,KAAK,MAAM,IAAI,SAAS;AAAA,EAClC,CAAC;AACD,UAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAC7C;AAEA,eAAsB,KAAK,OAAiB,QAAQ,KAAK,MAAM,CAAC,GAAkB;AAChF,QAAM,OAAO,UAAU,IAAI;AAC3B,MAAI,KAAK,YAAY,UAAU;AAC7B,UAAM,UAAU,IAAI;AACpB;AAAA,EACF;AACA,QAAM,SAAS,IAAI;AACrB;AAEO,SAAS,aAAmB;AACjC,iBAAe,MAAM,CAAC;AACxB;AAEA,eAAsB,OAAO,OAAiB,QAAQ,KAAK,MAAM,CAAC,GAAkB;AAClF,MAAI;AACF,UAAM,KAAK,IAAI;AAAA,EACjB,SAAS,OAAO;AACd,QAAI,iBAAiB,YAAY;AAC/B,qBAAe,iBAAiB,KAAK,CAAC;AACtC,qBAAe;AACf,iBAAW;AACX,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,YAAQ,MAAM,mBAAmB;AACjC,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;","names":[]}

package/dist/access-http.d.ts

@@ -0,0 +1,158 @@
+import { IncomingMessage } from 'node:http';
+import { EngramAccessService } from './access-service.js';
+import './types.js';
+import './explicit-capture.js';
+import './orchestrator-zTa-Qo-1.js';
+import './buffer.js';
+import './storage.js';
+import './memory-projection-store-NxMkbocT.js';
+import 'better-sqlite3';
+import './port-C1GZFv8h.js';
+import './transcript.js';
+import './session-integrity.js';
+import './summarizer.js';
+import './model-registry.js';
+import './local-llm.js';
+import './relevance.js';
+import './negative.js';
+import './recall-state.js';
+import './session-observer-state.js';
+import './embedding-fallback.js';
+import './semantic-consolidation.js';
+import 'zod';
+import './policy-runtime.js';
+import './profiling.js';
+import './trust-zones.js';
+
+/**
+ * Adapter interface for external system identity resolution.
+ *
+ * Each adapter maps an external system's session/identity conventions
+ * to Engram's namespace + principal model. Adapters are stateless and
+ * lightweight — they don't manage lifecycles or load plugins.
+ */
+interface AdapterContext {
+    /** Raw HTTP headers from the incoming request */
+    headers: Record<string, string | string[] | undefined>;
+    /** MCP client info (from initialize handshake, if available) */
+    clientInfo?: {
+        name: string;
+        version?: string;
+    };
+    /** Explicit session key from request args */
+    sessionKey?: string;
+}
+interface ResolvedIdentity {
+    /** Engram namespace (scopes memory access) */
+    namespace: string;
+    /** Engram principal (authorization subject) */
+    principal: string;
+    /** Session key for continuity tracking */
+    sessionKey?: string;
+    /** Which adapter resolved this identity */
+    adapterId: string;
+}
+interface EngramAdapter {
+    /** Adapter identifier (e.g., "claude-code", "codex", "hermes", "replit") */
+    readonly id: string;
+    /** Whether this adapter recognizes the given request context */
+    matches(context: AdapterContext): boolean;
+    /** Map external session/identity to Engram namespace + principal */
+    resolveIdentity(context: AdapterContext): ResolvedIdentity;
+}
+
+/**
+ * Adapter registry. Attempts to identify which external system is
+ * connecting by checking each registered adapter in order. Falls back
+ * to explicit namespace/principal from the request args.
+ */
+declare class AdapterRegistry {
+    private readonly adapters;
+    constructor(adapters?: EngramAdapter[]);
+    /**
+     * Try each adapter in order. Return the first match, or null if
+     * no adapter recognizes the request context.
+     */
+    resolve(context: AdapterContext): ResolvedIdentity | null;
+    /** List registered adapter IDs */
+    list(): string[];
+}
+
+interface EngramAccessHttpServerOptions {
+    service: EngramAccessService;
+    host?: string;
+    port?: number;
+    authToken?: string;
+    /** Additional valid tokens (for multi-connector auth). Checked alongside authToken. */
+    authTokens?: string[];
+    /** Dynamic token loader — called on each auth check so new/revoked tokens take effect without restart. */
+    authTokensGetter?: () => string[];
+    principal?: string;
+    maxBodyBytes?: number;
+    adminConsoleEnabled?: boolean;
+    adminConsolePublicDir?: string;
+    trustPrincipalHeader?: boolean;
+    /** Enable adapter-based identity resolution from request headers */
+    enableAdapters?: boolean;
+    /** Custom adapter registry (defaults to built-in adapters) */
+    adapterRegistry?: AdapterRegistry;
+}
+interface EngramAccessHttpServerStatus {
+    running: boolean;
+    host: string;
+    port: number;
+    maxBodyBytes: number;
+}
+declare class EngramAccessHttpServer {
+    private readonly service;
+    private readonly host;
+    private readonly requestedPort;
+    private readonly authToken?;
+    private readonly authTokens;
+    private readonly authTokensGetter?;
+    private readonly authenticatedPrincipal?;
+    private readonly maxBodyBytes;
+    private readonly adminConsoleEnabled;
+    private readonly adminConsolePublicDir;
+    private readonly trustPrincipalHeader;
+    private readonly adapterRegistry;
+    private readonly writeRequestTimestamps;
+    private readonly mcpServer;
+    private server;
+    private boundPort;
+    constructor(options: EngramAccessHttpServerOptions);
+    start(): Promise<EngramAccessHttpServerStatus>;
+    stop(): Promise<void>;
+    status(): EngramAccessHttpServerStatus;
+    /**
+     * Resolve the adapter identity for the incoming request.
+     * Includes MCP clientInfo from the last initialize handshake if available.
+     * Returns null if no adapter matches or adapters are disabled.
+     */
+    resolveAdapterIdentity(req: IncomingMessage): ResolvedIdentity | null;
+    /** Cache for per-request identity resolution (avoids double adapter resolution) */
+    private identityCache;
+    /** Resolve principal and namespace from request headers and adapter identity */
+    private resolveRequestIdentity;
+    private resolveRequestPrincipal;
+    /** Resolve namespace: only use the explicit body value. Adapter-inferred namespace
+     *  is intentionally NOT used as a fallback for REST requests — omitting namespace
+     *  should default to the server's global namespace, not silently scope to an adapter. */
+    private resolveNamespace;
+    private handle;
+    private handleMcpRequest;
+    private respondJson;
+    private handleAdminConsole;
+    private respondStatic;
+    private readJsonBody;
+    private readValidatedBody;
+    private isAuthorized;
+    private timingSafeStringEqual;
+    private encodeSecret;
+    private writeResponseStatus;
+    private ensureWriteRateLimitAvailable;
+    private recordWriteRateLimitHit;
+    private shouldCountWriteRateLimit;
+}
+
+export { EngramAccessHttpServer, type EngramAccessHttpServerOptions, type EngramAccessHttpServerStatus };

package/dist/access-http.js

@@ -0,0 +1,32 @@
+import {
+  EngramAccessHttpServer
+} from "./chunk-ZJLY4QSU.js";
+import "./chunk-CXWFUJR2.js";
+import "./chunk-MARWOCVP.js";
+import "./chunk-PGK3VUHN.js";
+import "./chunk-QY2BHY5O.js";
+import "./chunk-N5AKDXAI.js";
+import "./chunk-EQINRHYR.js";
+import "./chunk-J3BT33K7.js";
+import "./chunk-EEQLFRUM.js";
+import "./chunk-QWUUMMIK.js";
+import "./chunk-U4PV25RD.js";
+import "./chunk-ESSMF2FR.js";
+import "./chunk-TP4FZJIZ.js";
+import "./chunk-SCU65EZI.js";
+import "./chunk-BOUYNNYD.js";
+import "./chunk-DM2T26WE.js";
+import "./chunk-QSVPYQPG.js";
+import "./chunk-YNCQ7E4M.js";
+import "./chunk-HLXVTBF3.js";
+import "./chunk-M62O4P4T.js";
+import "./chunk-DT5TVLJE.js";
+import "./chunk-KWBU5S5U.js";
+import "./chunk-DGXUHMOV.js";
+import "./chunk-LPSF4OQH.js";
+import "./chunk-XKECPATV.js";
+import "./chunk-QCCCQT3O.js";
+export {
+  EngramAccessHttpServer
+};
+//# sourceMappingURL=access-http.js.map

package/dist/access-http.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/access-idempotency.d.ts

@@ -0,0 +1,31 @@
+type AccessIdempotencyTestHooks = {
+    beforeFlushWrite?: () => Promise<void> | void;
+    lockTimeoutMs?: number;
+    staleLockMs?: number;
+    lockHeartbeatMs?: number;
+};
+declare function hashAccessIdempotencyPayload(payload: unknown): string;
+declare function setAccessIdempotencyTestHooks(hooks: AccessIdempotencyTestHooks | null): void;
+declare class AccessIdempotencyStore {
+    private readonly statePath;
+    private readonly lockPath;
+    private readonly keyLockDir;
+    private loadedMtimeMs;
+    private state;
+    private writeQueue;
+    constructor(memoryDir: string);
+    get(key: string, requestHash: string): Promise<{
+        response?: unknown;
+        conflict: boolean;
+    }>;
+    put(key: string, requestHash: string, response: unknown): Promise<void>;
+    withKeyLock<T>(key: string, callback: () => Promise<T>): Promise<T>;
+    private reload;
+    private prune;
+    private flush;
+    private readMtimeMs;
+    private withExclusiveFileLock;
+    private withWriteQueue;
+}
+
+export { AccessIdempotencyStore, hashAccessIdempotencyPayload, setAccessIdempotencyTestHooks };

package/dist/access-idempotency.js

@@ -0,0 +1,11 @@
+import {
+  AccessIdempotencyStore,
+  hashAccessIdempotencyPayload,
+  setAccessIdempotencyTestHooks
+} from "./chunk-XKECPATV.js";
+export {
+  AccessIdempotencyStore,
+  hashAccessIdempotencyPayload,
+  setAccessIdempotencyTestHooks
+};
+//# sourceMappingURL=access-idempotency.js.map

package/dist/access-idempotency.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}