@remnic/core 1.1.0 → 1.1.2

package/dist/access-audit.d.ts

@@ -0,0 +1,56 @@
+import { RecallAuditEntry } from './recall-audit.js';
+import { AnomalyDetectorConfig, AnomalyDetectorResult } from './recall-audit-anomaly.js';
+
+/**
+ * Access-layer audit adapter (issue #565 PR 5/5).
+ *
+ * Wraps `appendRecallAuditEntry` + `detectRecallAnomalies` into a single
+ * entry point that MCP (`access-mcp.ts`) and HTTP (`access-http.ts`)
+ * surfaces can call once per recall. Closes the gap called out in the
+ * memory-extraction threat model §5: recall-audit previously only ran
+ * on the Openclaw hook, so MCP/HTTP callers bypassed the trail entirely.
+ *
+ * The adapter is a per-instance class so the tail-of-trail buffer
+ * (used by the anomaly detector) is scoped per-service, not global.
+ *
+ * No I/O unless `audit.enabled` is true; no detector invocation unless
+ * `detection.enabled` is true. Either flag may be enabled independently.
+ */
+
+interface AccessAuditConfig {
+    audit: {
+        enabled: boolean;
+        /** Root directory the audit adapter writes JSONL shards into. */
+        rootDir: string;
+    };
+    detection: AnomalyDetectorConfig;
+    /**
+     * How many entries the adapter retains in memory for the detector.
+     * Defaults to 256 — enough to cover the threat model's default 5-minute
+     * window at high recall rates without unbounded growth.
+     */
+    trailBufferSize?: number;
+}
+interface AccessAuditResult {
+    /** Path of the JSONL shard the entry was appended to (only when audit enabled). */
+    appendedAt?: string;
+    /** Result of the anomaly detector (only when detection enabled). */
+    anomalies?: AnomalyDetectorResult;
+}
+declare class AccessAuditAdapter {
+    private readonly config;
+    private readonly trails;
+    private readonly trailBufferSize;
+    constructor(config: AccessAuditConfig);
+    /**
+     * Record an audit entry and (when enabled) run the anomaly detector
+     * over the principal's tail of entries. The principal key is used
+     * purely for tail-buffer bucketing — it need not match the production
+     * namespace resolver; sessionKey is the safe default.
+     */
+    record(principalKey: string, entry: RecallAuditEntry, now?: number): Promise<AccessAuditResult>;
+    /** Clear all in-memory tail state. Intended for tests / before_reset. */
+    reset(): void;
+}
+
+export { AccessAuditAdapter, type AccessAuditConfig, type AccessAuditResult };

package/dist/access-audit.js

@@ -0,0 +1,9 @@
+import {
+  AccessAuditAdapter
+} from "./chunk-TVVEYCNW.js";
+import "./chunk-RFYAYKTD.js";
+import "./chunk-LBLXEFWK.js";
+export {
+  AccessAuditAdapter
+};
+//# sourceMappingURL=access-audit.js.map

package/dist/access-cli.js

@@ -1,121 +1,138 @@
 import {
   Orchestrator
-} from "./chunk-DEPL3635.js";
-import "./chunk-DHHP2Z4X.js";
+} from "./chunk-3YGHKTBF.js";
+import "./chunk-XXVWLXSG.js";
 import "./chunk-UHGBNIOS.js";
 import "./chunk-FSFEQI74.js";
-import "./chunk-N42IWANG.js";
-import "./chunk-ETOW6ACV.js";
 import "./chunk-W6SL7OFG.js";
 import "./chunk-Z5AAYHUC.js";
 import "./chunk-S75M5ZRK.js";
 import "./chunk-TPB3I2AC.js";
 import "./chunk-JR4ZC3G4.js";
-import "./chunk-KVE7R4CG.js";
-import "./chunk-X7XN6YU4.js";
+import "./chunk-DG6YMRDC.js";
+import "./chunk-ETOW6ACV.js";
 import "./chunk-5NPGSAVB.js";
 import "./chunk-C7VW7C3F.js";
 import "./chunk-K4FLSOR5.js";
 import "./chunk-V3RXWQIE.js";
 import "./chunk-5IZL4DCV.js";
-import "./chunk-YCN4BVDK.js";
+import "./chunk-VBVG2M5G.js";
+import "./chunk-KVBLZUKV.js";
+import "./chunk-X7XN6YU4.js";
+import "./chunk-ZZTOURJI.js";
 import "./chunk-YDBIWGNI.js";
 import "./chunk-7DHTMOND.js";
-import "./chunk-47UU5PU2.js";
+import "./chunk-YCN4BVDK.js";
 import "./chunk-D654IBA6.js";
 import "./chunk-H63EDPFJ.js";
-import "./chunk-YAZNBMNF.js";
+import "./chunk-3GPTTA4J.js";
+import "./chunk-IISBCCWR.js";
 import "./chunk-GGD5W7TB.js";
-import "./chunk-LAYN4LDC.js";
-import "./chunk-3SV6CQHO.js";
-import "./chunk-UEYA6UC7.js";
+import "./chunk-YAZNBMNF.js";
+import "./chunk-AJU4PJGY.js";
+import "./chunk-DF3RVK3X.js";
+import "./chunk-C4SQJZAF.js";
+import "./chunk-DIXB44VE.js";
+import "./chunk-NZLQTHS5.js";
+import "./chunk-54V4BZWP.js";
 import "./chunk-NBNN5GOB.js";
 import "./chunk-FEMOX5AD.js";
-import "./chunk-JL2PU6AI.js";
-import "./chunk-GZCUW5IC.js";
+import "./chunk-R2XRID2N.js";
 import "./chunk-VEWZZM3H.js";
-import "./chunk-ALXMCZEU.js";
-import "./chunk-7WQ6SLIE.js";
-import "./chunk-PAORGQRI.js";
-import "./chunk-6UJ47TVX.js";
+import "./chunk-6AUUAZEX.js";
+import "./chunk-Y4FHOFJ2.js";
+import "./chunk-Z2E7VW55.js";
+import "./chunk-FVA6TGI3.js";
+import "./chunk-GZCUW5IC.js";
+import "./chunk-GA5P7RST.js";
 import "./chunk-PYXS46O7.js";
 import "./chunk-3QKK7QOS.js";
+import "./chunk-CUPFXL3J.js";
 import "./chunk-JRNQ3RNA.js";
-import "./chunk-JIU55F3X.js";
+import "./chunk-SPI27QT6.js";
 import "./chunk-CULXMQJH.js";
 import "./chunk-E6K4NIEU.js";
-import "./chunk-ZVBB3T7V.js";
+import "./chunk-NBVAS5MT.js";
 import "./chunk-YRMVARQP.js";
-import "./chunk-BLKTA7MM.js";
+import "./chunk-4HQS2HPX.js";
 import {
   resolveRemnicPluginEntry
 } from "./chunk-U66YHYC7.js";
 import "./chunk-EABGC2TL.js";
 import "./chunk-LOBRX7VD.js";
 import "./chunk-HMDCOMYU.js";
-import "./chunk-J4IYOZZ5.js";
-import "./chunk-LK6SGL53.js";
+import "./chunk-JXS5PDQ7.js";
+import "./chunk-OR64ZGRZ.js";
 import "./chunk-7SEAZFFB.js";
 import "./chunk-K6WK37A6.js";
-import "./chunk-3PG3H5TD.js";
-import "./chunk-FYIYMQ5N.js";
-import "./chunk-2NMMFZ5T.js";
 import {
   parseConfig
-} from "./chunk-MBJHSA7F.js";
+} from "./chunk-BECYBZLX.js";
 import "./chunk-Z5LAYHGJ.js";
 import "./chunk-C6QPK5GG.js";
-import "./chunk-SYUK3VLY.js";
+import "./chunk-C2EFFULQ.js";
+import "./chunk-3PG3H5TD.js";
+import "./chunk-FYIYMQ5N.js";
+import "./chunk-2NMMFZ5T.js";
+import "./chunk-KVE7R4CG.js";
+import "./chunk-4WMCPJWX.js";
+import "./chunk-JBMSGZEQ.js";
+import "./chunk-PVICZTKG.js";
 import "./chunk-EJI5XIBB.js";
-import "./chunk-44ICJRF3.js";
-import "./chunk-XZ2TIKGC.js";
-import "./chunk-Y27UJK6V.js";
+import "./chunk-AYXIPSZO.js";
+import "./chunk-Y7R2XJ5Q.js";
 import "./chunk-ODWDQNRE.js";
+import "./chunk-Y27UJK6V.js";
 import "./chunk-UZB5KHKX.js";
-import "./chunk-C2EFFULQ.js";
-import "./chunk-4WMCPJWX.js";
 import "./chunk-6HZ6AO2P.js";
 import "./chunk-JWPLJLDU.js";
 import "./chunk-N53K2EXC.js";
-import "./chunk-URB2WSKZ.js";
-import "./chunk-UVJFDP7P.js";
 import "./chunk-XYIK4LF6.js";
+import "./chunk-URB2WSKZ.js";
 import "./chunk-PVGDJXVK.js";
 import "./chunk-NGAVDO7E.js";
-import {
-  readEnvVar,
-  resolveHomeDir
-} from "./chunk-MARWOCVP.js";
 import {
   EngramAccessService
-} from "./chunk-MVTHXUBX.js";
-import "./chunk-ITRLGI2T.js";
+} from "./chunk-STGWEHYR.js";
+import "./chunk-ZAIM4TUE.js";
+import "./chunk-SOBJ6NEY.js";
+import "./chunk-3OGMS3PE.js";
 import "./chunk-EQINRHYR.js";
-import "./chunk-QDYXG4CS.js";
-import "./chunk-QNJMBKFK.js";
+import "./chunk-EIR5VLIH.js";
 import "./chunk-EEQLFRUM.js";
 import "./chunk-QDW3E4RD.js";
-import "./chunk-4NRAJUDS.js";
+import "./chunk-3FPTCC3Z.js";
+import "./chunk-2LGMW3DJ.js";
+import "./chunk-GDFS42HT.js";
+import "./chunk-RBBWYEFJ.js";
 import "./chunk-DT5TVLJE.js";
 import "./chunk-N5AKDXAI.js";
 import "./chunk-TBBDFYXW.js";
-import "./chunk-DGXUHMOV.js";
-import "./chunk-LPSF4OQH.js";
-import "./chunk-XKECPATV.js";
-import "./chunk-4LACOVZX.js";
-import "./chunk-GV6NLQ4X.js";
-import "./chunk-3WHVNEN7.js";
+import "./chunk-L7IXWRYE.js";
+import "./chunk-F5VP6YCB.js";
+import "./chunk-LTCGGW2D.js";
 import "./chunk-4KAN3GZ3.js";
-import "./chunk-6ZH4TU6I.js";
-import "./chunk-SCU65EZI.js";
-import "./chunk-BOUYNNYD.js";
 import "./chunk-6PFRXT4K.js";
 import "./chunk-TP4FZJIZ.js";
+import "./chunk-SCU65EZI.js";
+import "./chunk-BOUYNNYD.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-QSVPYQPG.js";
 import "./chunk-M62O4P4T.js";
 import "./chunk-4DJQYKMN.js";
+import "./chunk-X6GF3FX2.js";
+import "./chunk-FAAFWE4G.js";
+import {
+  readEnvVar,
+  resolveHomeDir
+} from "./chunk-MARWOCVP.js";
 import "./chunk-2ODBA7MQ.js";
+import "./chunk-DGXUHMOV.js";
+import "./chunk-LPSF4OQH.js";
+import "./chunk-TVVEYCNW.js";
+import "./chunk-RFYAYKTD.js";
+import "./chunk-LBLXEFWK.js";
+import "./chunk-XKECPATV.js";
 
 // src/access-cli.ts
 import fs from "fs";

package/dist/access-cli.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/access-cli.ts"],"sourcesContent":["import fs from \"node:fs\";\nimport path from \"node:path\";\nimport { parseConfig } from \"./config.js\";\nimport type { PluginConfig } from \"./types.js\";\nimport { Orchestrator } from \"./orchestrator.js\";\nimport { EngramAccessService } from \"./access-service.js\";\nimport { readEnvVar, resolveHomeDir } from \"./runtime/env.js\";\nimport { resolveRemnicPluginEntry } from \"./plugin-id.js\";\n\ntype CommandName = \"browse\" | \"store\";\n\ntype ParsedArgs = {\n  command: CommandName;\n  options: Record<string, string[]>;\n  flags: Set<string>;\n};\n\ntype Runtime = {\n  config: PluginConfig;\n  service: EngramAccessService;\n};\n\nexport type AccessCliOptions = {\n  /**\n   * The calling plugin's own id (e.g. `\"openclaw-engram\"` when invoked by the\n   * shim binary).  Forwarded to {@link resolveRemnicPluginEntry} so shim CLI\n   * users target their own `plugins.entries[\"openclaw-engram\"]` block instead\n   * of accidentally resolving to the canonical `\"openclaw-remnic\"` entry when\n   * `plugins.slots.memory` is unset (#403).\n   */\n  preferredId?: string;\n};\n\ntype UsageErrorKind =\n  | \"unsupported-command\"\n  | \"unexpected-positional\"\n  | \"missing-option\"\n  | \"missing-content\"\n  | \"invalid-integer\"\n  | \"invalid-number\";\n\nclass UsageError extends Error {\n  constructor(\n    readonly kind: UsageErrorKind,\n    readonly optionName?: string,\n  ) {\n    super(\"invalid access-cli arguments\");\n  }\n}\n\nfunction formatUsageError(error: UsageError): string {\n  switch (error.kind) {\n    case \"unsupported-command\":\n      return \"unsupported command\";\n    case \"unexpected-positional\":\n      return \"unexpected positional argument\";\n    case \"missing-option\":\n      return `missing required option: --${error.optionName ?? \"unknown\"}`;\n    case \"missing-content\":\n      return \"missing required option: --content or --content-file\";\n    case \"invalid-integer\":\n      return `invalid integer for --${error.optionName ?? \"unknown\"}`;\n    case \"invalid-number\":\n      return `invalid number for --${error.optionName ?? \"unknown\"}`;\n  }\n}\n\nfunction writeCliOutput(text: string = \"\"): void {\n  process.stdout.write(`${text}\\n`);\n}\n\nfunction usage(): string {\n  return [\n    \"Usage:\",\n    \"  engram-access browse [options]\",\n    \"  engram-access store [options]\",\n    \"\",\n    \"Browse options:\",\n    \"  --namespace <name>\",\n    \"  --query <text>\",\n    \"  --category <name>\",\n    \"  --status <name>\",\n    \"  --sort <updated_desc|updated_asc|created_desc|created_asc>\",\n    \"  --limit <n>\",\n    \"  --offset <n>\",\n    \"\",\n    \"Store options:\",\n    \"  --namespace <name>\",\n    \"  --session-key <key>\",\n    \"  --principal <principal>\",\n    \"  --content <text> | --content-file <path>\",\n    \"  --category <name>\",\n    \"  --confidence <0-1>\",\n    \"  --tag <tag> (repeatable)\",\n    \"  --entity-ref <ref>\",\n    \"  --ttl <duration>\",\n    \"  --source-reason <text>\",\n    \"  --idempotency-key <key>\",\n    \"  --dry-run\",\n  ].join(\"\\n\");\n}\n\nfunction parseArgs(argv: string[]): ParsedArgs {\n  const [commandRaw, ...rest] = argv;\n  if (commandRaw !== \"browse\" && commandRaw !== \"store\") {\n    throw new UsageError(\"unsupported-command\");\n  }\n\n  const options: Record<string, string[]> = {};\n  const flags = new Set<string>();\n\n  for (let i = 0; i < rest.length; i += 1) {\n    const token = rest[i];\n    if (!token.startsWith(\"--\")) {\n      throw new UsageError(\"unexpected-positional\");\n    }\n    const key = token.slice(2);\n    const next = rest[i + 1];\n    if (!next || next.startsWith(\"--\")) {\n      flags.add(key);\n      continue;\n    }\n    if (!options[key]) {\n      options[key] = [];\n    }\n    options[key].push(next);\n    i += 1;\n  }\n\n  return {\n    command: commandRaw,\n    options,\n    flags,\n  };\n}\n\nfunction getLastOption(args: ParsedArgs, name: string): string | undefined {\n  const values = args.options[name];\n  if (!values || values.length === 0) return undefined;\n  return values[values.length - 1];\n}\n\nfunction getAllOptions(args: ParsedArgs, name: string): string[] {\n  return args.options[name] ?? [];\n}\n\nfunction requireOption(args: ParsedArgs, name: string): string {\n  const value = getLastOption(args, name);\n  if (!value || value.trim().length === 0) {\n    throw new UsageError(\"missing-option\", name);\n  }\n  return value;\n}\n\nfunction parseIntegerOption(args: ParsedArgs, name: string): number | undefined {\n  const raw = getLastOption(args, name);\n  if (!raw) return undefined;\n  const value = parseInt(raw, 10);\n  if (!Number.isFinite(value)) {\n    throw new UsageError(\"invalid-integer\", name);\n  }\n  return value;\n}\n\nfunction parseFloatOption(args: ParsedArgs, name: string): number | undefined {\n  const raw = getLastOption(args, name);\n  if (!raw) return undefined;\n  const value = Number.parseFloat(raw);\n  if (!Number.isFinite(value)) {\n    throw new UsageError(\"invalid-number\", name);\n  }\n  return value;\n}\n\nfunction loadPluginConfig(preferredId?: string): Record<string, unknown> {\n  const configPath =\n    readEnvVar(\"OPENCLAW_ENGRAM_CONFIG_PATH\") ||\n    readEnvVar(\"OPENCLAW_CONFIG_PATH\") ||\n    path.join(resolveHomeDir(), \".openclaw\", \"openclaw.json\");\n  const raw = JSON.parse(fs.readFileSync(configPath, \"utf8\"));\n  // Delegate slot → preferredId → PLUGIN_ID → LEGACY_PLUGIN_ID resolution to\n  // the shared helper so all config loaders stay in sync (#403).  Shim CLI\n  // callers pass `preferredId: \"openclaw-engram\"` so legacy shim installs\n  // target their own config block instead of falling through to the canonical\n  // \"openclaw-remnic\" entry.\n  const entry = resolveRemnicPluginEntry(raw, preferredId);\n  return (entry?.[\"config\"] as Record<string, unknown> | undefined) ?? {};\n}\n\nfunction buildRuntime(preferredId?: string): Runtime {\n  const config = parseConfig(loadPluginConfig(preferredId));\n  return {\n    config,\n    service: new EngramAccessService(new Orchestrator(config)),\n  };\n}\n\nasync function runBrowse(args: ParsedArgs, preferredId?: string): Promise<void> {\n  const { service } = buildRuntime(preferredId);\n  const result = await service.memoryBrowse({\n    namespace: getLastOption(args, \"namespace\"),\n    query: getLastOption(args, \"query\"),\n    category: getLastOption(args, \"category\"),\n    status: getLastOption(args, \"status\"),\n    sort: getLastOption(args, \"sort\") as \"updated_desc\" | \"updated_asc\" | \"created_desc\" | \"created_asc\" | undefined,\n    limit: parseIntegerOption(args, \"limit\"),\n    offset: parseIntegerOption(args, \"offset\"),\n  });\n  console.log(JSON.stringify(result, null, 2));\n}\n\nasync function runStore(args: ParsedArgs, preferredId?: string): Promise<void> {\n  const { config, service } = buildRuntime(preferredId);\n  const contentFile = getLastOption(args, \"content-file\");\n  const inlineContent = getLastOption(args, \"content\");\n  const content = contentFile ? fs.readFileSync(contentFile, \"utf8\") : inlineContent;\n  if (!content || content.trim().length === 0) {\n    throw new UsageError(\"missing-content\");\n  }\n\n  const result = await service.memoryStore({\n    namespace: getLastOption(args, \"namespace\"),\n    sessionKey: getLastOption(args, \"session-key\"),\n    authenticatedPrincipal: getLastOption(args, \"principal\") ?? config.agentAccessHttp.principal,\n    content,\n    category: requireOption(args, \"category\"),\n    confidence: parseFloatOption(args, \"confidence\"),\n    tags: getAllOptions(args, \"tag\"),\n    entityRef: getLastOption(args, \"entity-ref\"),\n    ttl: getLastOption(args, \"ttl\"),\n    sourceReason: getLastOption(args, \"source-reason\"),\n    idempotencyKey: getLastOption(args, \"idempotency-key\"),\n    dryRun: args.flags.has(\"dry-run\"),\n  });\n  console.log(JSON.stringify(result, null, 2));\n}\n\nexport async function main(\n  argv: string[] = process.argv.slice(2),\n  options: AccessCliOptions = {},\n): Promise<void> {\n  const args = parseArgs(argv);\n  if (args.command === \"browse\") {\n    await runBrowse(args, options.preferredId);\n    return;\n  }\n  await runStore(args, options.preferredId);\n}\n\nexport function printUsage(): void {\n  writeCliOutput(usage());\n}\n\nexport async function runCli(\n  argv: string[] = process.argv.slice(2),\n  options: AccessCliOptions = {},\n): Promise<void> {\n  try {\n    await main(argv, options);\n  } catch (error) {\n    if (error instanceof UsageError) {\n      writeCliOutput(formatUsageError(error));\n      writeCliOutput();\n      printUsage();\n      process.exit(1);\n    }\n\n    console.error(\"access-cli failed\");\n    process.exit(1);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,QAAQ;AACf,OAAO,UAAU;AAwCjB,IAAM,aAAN,cAAyB,MAAM;AAAA,EAC7B,YACW,MACA,YACT;AACA,UAAM,8BAA8B;AAH3B;AACA;AAAA,EAGX;AAAA,EAJW;AAAA,EACA;AAIb;AAEA,SAAS,iBAAiB,OAA2B;AACnD,UAAQ,MAAM,MAAM;AAAA,IAClB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,8BAA8B,MAAM,cAAc,SAAS;AAAA,IACpE,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,yBAAyB,MAAM,cAAc,SAAS;AAAA,IAC/D,KAAK;AACH,aAAO,wBAAwB,MAAM,cAAc,SAAS;AAAA,EAChE;AACF;AAEA,SAAS,eAAe,OAAe,IAAU;AAC/C,UAAQ,OAAO,MAAM,GAAG,IAAI;AAAA,CAAI;AAClC;AAEA,SAAS,QAAgB;AACvB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEA,SAAS,UAAU,MAA4B;AAC7C,QAAM,CAAC,YAAY,GAAG,IAAI,IAAI;AAC9B,MAAI,eAAe,YAAY,eAAe,SAAS;AACrD,UAAM,IAAI,WAAW,qBAAqB;AAAA,EAC5C;AAEA,QAAM,UAAoC,CAAC;AAC3C,QAAM,QAAQ,oBAAI,IAAY;AAE9B,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,GAAG;AACvC,UAAM,QAAQ,KAAK,CAAC;AACpB,QAAI,CAAC,MAAM,WAAW,IAAI,GAAG;AAC3B,YAAM,IAAI,WAAW,uBAAuB;AAAA,IAC9C;AACA,UAAM,MAAM,MAAM,MAAM,CAAC;AACzB,UAAM,OAAO,KAAK,IAAI,CAAC;AACvB,QAAI,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG;AAClC,YAAM,IAAI,GAAG;AACb;AAAA,IACF;AACA,QAAI,CAAC,QAAQ,GAAG,GAAG;AACjB,cAAQ,GAAG,IAAI,CAAC;AAAA,IAClB;AACA,YAAQ,GAAG,EAAE,KAAK,IAAI;AACtB,SAAK;AAAA,EACP;AAEA,SAAO;AAAA,IACL,SAAS;AAAA,IACT;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,cAAc,MAAkB,MAAkC;AACzE,QAAM,SAAS,KAAK,QAAQ,IAAI;AAChC,MAAI,CAAC,UAAU,OAAO,WAAW,EAAG,QAAO;AAC3C,SAAO,OAAO,OAAO,SAAS,CAAC;AACjC;AAEA,SAAS,cAAc,MAAkB,MAAwB;AAC/D,SAAO,KAAK,QAAQ,IAAI,KAAK,CAAC;AAChC;AAEA,SAAS,cAAc,MAAkB,MAAsB;AAC7D,QAAM,QAAQ,cAAc,MAAM,IAAI;AACtC,MAAI,CAAC,SAAS,MAAM,KAAK,EAAE,WAAW,GAAG;AACvC,UAAM,IAAI,WAAW,kBAAkB,IAAI;AAAA,EAC7C;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,MAAkB,MAAkC;AAC9E,QAAM,MAAM,cAAc,MAAM,IAAI;AACpC,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,QAAQ,SAAS,KAAK,EAAE;AAC9B,MAAI,CAAC,OAAO,SAAS,KAAK,GAAG;AAC3B,UAAM,IAAI,WAAW,mBAAmB,IAAI;AAAA,EAC9C;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,MAAkB,MAAkC;AAC5E,QAAM,MAAM,cAAc,MAAM,IAAI;AACpC,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,QAAQ,OAAO,WAAW,GAAG;AACnC,MAAI,CAAC,OAAO,SAAS,KAAK,GAAG;AAC3B,UAAM,IAAI,WAAW,kBAAkB,IAAI;AAAA,EAC7C;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,aAA+C;AACvE,QAAM,aACJ,WAAW,6BAA6B,KACxC,WAAW,sBAAsB,KACjC,KAAK,KAAK,eAAe,GAAG,aAAa,eAAe;AAC1D,QAAM,MAAM,KAAK,MAAM,GAAG,aAAa,YAAY,MAAM,CAAC;AAM1D,QAAM,QAAQ,yBAAyB,KAAK,WAAW;AACvD,SAAQ,QAAQ,QAAQ,KAA6C,CAAC;AACxE;AAEA,SAAS,aAAa,aAA+B;AACnD,QAAM,SAAS,YAAY,iBAAiB,WAAW,CAAC;AACxD,SAAO;AAAA,IACL;AAAA,IACA,SAAS,IAAI,oBAAoB,IAAI,aAAa,MAAM,CAAC;AAAA,EAC3D;AACF;AAEA,eAAe,UAAU,MAAkB,aAAqC;AAC9E,QAAM,EAAE,QAAQ,IAAI,aAAa,WAAW;AAC5C,QAAM,SAAS,MAAM,QAAQ,aAAa;AAAA,IACxC,WAAW,cAAc,MAAM,WAAW;AAAA,IAC1C,OAAO,cAAc,MAAM,OAAO;AAAA,IAClC,UAAU,cAAc,MAAM,UAAU;AAAA,IACxC,QAAQ,cAAc,MAAM,QAAQ;AAAA,IACpC,MAAM,cAAc,MAAM,MAAM;AAAA,IAChC,OAAO,mBAAmB,MAAM,OAAO;AAAA,IACvC,QAAQ,mBAAmB,MAAM,QAAQ;AAAA,EAC3C,CAAC;AACD,UAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAC7C;AAEA,eAAe,SAAS,MAAkB,aAAqC;AAC7E,QAAM,EAAE,QAAQ,QAAQ,IAAI,aAAa,WAAW;AACpD,QAAM,cAAc,cAAc,MAAM,cAAc;AACtD,QAAM,gBAAgB,cAAc,MAAM,SAAS;AACnD,QAAM,UAAU,cAAc,GAAG,aAAa,aAAa,MAAM,IAAI;AACrE,MAAI,CAAC,WAAW,QAAQ,KAAK,EAAE,WAAW,GAAG;AAC3C,UAAM,IAAI,WAAW,iBAAiB;AAAA,EACxC;AAEA,QAAM,SAAS,MAAM,QAAQ,YAAY;AAAA,IACvC,WAAW,cAAc,MAAM,WAAW;AAAA,IAC1C,YAAY,cAAc,MAAM,aAAa;AAAA,IAC7C,wBAAwB,cAAc,MAAM,WAAW,KAAK,OAAO,gBAAgB;AAAA,IACnF;AAAA,IACA,UAAU,cAAc,MAAM,UAAU;AAAA,IACxC,YAAY,iBAAiB,MAAM,YAAY;AAAA,IAC/C,MAAM,cAAc,MAAM,KAAK;AAAA,IAC/B,WAAW,cAAc,MAAM,YAAY;AAAA,IAC3C,KAAK,cAAc,MAAM,KAAK;AAAA,IAC9B,cAAc,cAAc,MAAM,eAAe;AAAA,IACjD,gBAAgB,cAAc,MAAM,iBAAiB;AAAA,IACrD,QAAQ,KAAK,MAAM,IAAI,SAAS;AAAA,EAClC,CAAC;AACD,UAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAC7C;AAEA,eAAsB,KACpB,OAAiB,QAAQ,KAAK,MAAM,CAAC,GACrC,UAA4B,CAAC,GACd;AACf,QAAM,OAAO,UAAU,IAAI;AAC3B,MAAI,KAAK,YAAY,UAAU;AAC7B,UAAM,UAAU,MAAM,QAAQ,WAAW;AACzC;AAAA,EACF;AACA,QAAM,SAAS,MAAM,QAAQ,WAAW;AAC1C;AAEO,SAAS,aAAmB;AACjC,iBAAe,MAAM,CAAC;AACxB;AAEA,eAAsB,OACpB,OAAiB,QAAQ,KAAK,MAAM,CAAC,GACrC,UAA4B,CAAC,GACd;AACf,MAAI;AACF,UAAM,KAAK,MAAM,OAAO;AAAA,EAC1B,SAAS,OAAO;AACd,QAAI,iBAAiB,YAAY;AAC/B,qBAAe,iBAAiB,KAAK,CAAC;AACtC,qBAAe;AACf,iBAAW;AACX,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,YAAQ,MAAM,mBAAmB;AACjC,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;","names":[]}
+{"version":3,"sources":["../src/access-cli.ts"],"sourcesContent":["import fs from \"node:fs\";\nimport path from \"node:path\";\nimport { parseConfig } from \"./config.js\";\nimport type { PluginConfig } from \"./types.js\";\nimport { Orchestrator } from \"./orchestrator.js\";\nimport { EngramAccessService } from \"./access-service.js\";\nimport { readEnvVar, resolveHomeDir } from \"./runtime/env.js\";\nimport { resolveRemnicPluginEntry } from \"./plugin-id.js\";\n\ntype CommandName = \"browse\" | \"store\";\n\ntype ParsedArgs = {\n  command: CommandName;\n  options: Record<string, string[]>;\n  flags: Set<string>;\n};\n\ntype Runtime = {\n  config: PluginConfig;\n  service: EngramAccessService;\n};\n\nexport type AccessCliOptions = {\n  /**\n   * The calling plugin's own id (e.g. `\"openclaw-engram\"` when invoked by the\n   * shim binary).  Forwarded to {@link resolveRemnicPluginEntry} so shim CLI\n   * users target their own `plugins.entries[\"openclaw-engram\"]` block instead\n   * of accidentally resolving to the canonical `\"openclaw-remnic\"` entry when\n   * `plugins.slots.memory` is unset (#403).\n   */\n  preferredId?: string;\n};\n\ntype UsageErrorKind =\n  | \"unsupported-command\"\n  | \"unexpected-positional\"\n  | \"missing-option\"\n  | \"missing-content\"\n  | \"invalid-integer\"\n  | \"invalid-number\";\n\nclass UsageError extends Error {\n  constructor(\n    readonly kind: UsageErrorKind,\n    readonly optionName?: string,\n  ) {\n    super(\"invalid access-cli arguments\");\n  }\n}\n\nfunction formatUsageError(error: UsageError): string {\n  switch (error.kind) {\n    case \"unsupported-command\":\n      return \"unsupported command\";\n    case \"unexpected-positional\":\n      return \"unexpected positional argument\";\n    case \"missing-option\":\n      return `missing required option: --${error.optionName ?? \"unknown\"}`;\n    case \"missing-content\":\n      return \"missing required option: --content or --content-file\";\n    case \"invalid-integer\":\n      return `invalid integer for --${error.optionName ?? \"unknown\"}`;\n    case \"invalid-number\":\n      return `invalid number for --${error.optionName ?? \"unknown\"}`;\n  }\n}\n\nfunction writeCliOutput(text: string = \"\"): void {\n  process.stdout.write(`${text}\\n`);\n}\n\nfunction usage(): string {\n  return [\n    \"Usage:\",\n    \"  engram-access browse [options]\",\n    \"  engram-access store [options]\",\n    \"\",\n    \"Browse options:\",\n    \"  --namespace <name>\",\n    \"  --query <text>\",\n    \"  --category <name>\",\n    \"  --status <name>\",\n    \"  --sort <updated_desc|updated_asc|created_desc|created_asc>\",\n    \"  --limit <n>\",\n    \"  --offset <n>\",\n    \"\",\n    \"Store options:\",\n    \"  --namespace <name>\",\n    \"  --session-key <key>\",\n    \"  --principal <principal>\",\n    \"  --content <text> | --content-file <path>\",\n    \"  --category <name>\",\n    \"  --confidence <0-1>\",\n    \"  --tag <tag> (repeatable)\",\n    \"  --entity-ref <ref>\",\n    \"  --ttl <duration>\",\n    \"  --source-reason <text>\",\n    \"  --idempotency-key <key>\",\n    \"  --dry-run\",\n  ].join(\"\\n\");\n}\n\nfunction parseArgs(argv: string[]): ParsedArgs {\n  const [commandRaw, ...rest] = argv;\n  if (commandRaw !== \"browse\" && commandRaw !== \"store\") {\n    throw new UsageError(\"unsupported-command\");\n  }\n\n  const options: Record<string, string[]> = {};\n  const flags = new Set<string>();\n\n  for (let i = 0; i < rest.length; i += 1) {\n    const token = rest[i];\n    if (!token.startsWith(\"--\")) {\n      throw new UsageError(\"unexpected-positional\");\n    }\n    const key = token.slice(2);\n    const next = rest[i + 1];\n    if (!next || next.startsWith(\"--\")) {\n      flags.add(key);\n      continue;\n    }\n    if (!options[key]) {\n      options[key] = [];\n    }\n    options[key].push(next);\n    i += 1;\n  }\n\n  return {\n    command: commandRaw,\n    options,\n    flags,\n  };\n}\n\nfunction getLastOption(args: ParsedArgs, name: string): string | undefined {\n  const values = args.options[name];\n  if (!values || values.length === 0) return undefined;\n  return values[values.length - 1];\n}\n\nfunction getAllOptions(args: ParsedArgs, name: string): string[] {\n  return args.options[name] ?? [];\n}\n\nfunction requireOption(args: ParsedArgs, name: string): string {\n  const value = getLastOption(args, name);\n  if (!value || value.trim().length === 0) {\n    throw new UsageError(\"missing-option\", name);\n  }\n  return value;\n}\n\nfunction parseIntegerOption(args: ParsedArgs, name: string): number | undefined {\n  const raw = getLastOption(args, name);\n  if (!raw) return undefined;\n  const value = parseInt(raw, 10);\n  if (!Number.isFinite(value)) {\n    throw new UsageError(\"invalid-integer\", name);\n  }\n  return value;\n}\n\nfunction parseFloatOption(args: ParsedArgs, name: string): number | undefined {\n  const raw = getLastOption(args, name);\n  if (!raw) return undefined;\n  const value = Number.parseFloat(raw);\n  if (!Number.isFinite(value)) {\n    throw new UsageError(\"invalid-number\", name);\n  }\n  return value;\n}\n\nfunction loadPluginConfig(preferredId?: string): Record<string, unknown> {\n  const configPath =\n    readEnvVar(\"OPENCLAW_ENGRAM_CONFIG_PATH\") ||\n    readEnvVar(\"OPENCLAW_CONFIG_PATH\") ||\n    path.join(resolveHomeDir(), \".openclaw\", \"openclaw.json\");\n  const raw = JSON.parse(fs.readFileSync(configPath, \"utf8\"));\n  // Delegate slot → preferredId → PLUGIN_ID → LEGACY_PLUGIN_ID resolution to\n  // the shared helper so all config loaders stay in sync (#403).  Shim CLI\n  // callers pass `preferredId: \"openclaw-engram\"` so legacy shim installs\n  // target their own config block instead of falling through to the canonical\n  // \"openclaw-remnic\" entry.\n  const entry = resolveRemnicPluginEntry(raw, preferredId);\n  return (entry?.[\"config\"] as Record<string, unknown> | undefined) ?? {};\n}\n\nfunction buildRuntime(preferredId?: string): Runtime {\n  const config = parseConfig(loadPluginConfig(preferredId));\n  return {\n    config,\n    service: new EngramAccessService(new Orchestrator(config)),\n  };\n}\n\nasync function runBrowse(args: ParsedArgs, preferredId?: string): Promise<void> {\n  const { service } = buildRuntime(preferredId);\n  const result = await service.memoryBrowse({\n    namespace: getLastOption(args, \"namespace\"),\n    query: getLastOption(args, \"query\"),\n    category: getLastOption(args, \"category\"),\n    status: getLastOption(args, \"status\"),\n    sort: getLastOption(args, \"sort\") as \"updated_desc\" | \"updated_asc\" | \"created_desc\" | \"created_asc\" | undefined,\n    limit: parseIntegerOption(args, \"limit\"),\n    offset: parseIntegerOption(args, \"offset\"),\n  });\n  console.log(JSON.stringify(result, null, 2));\n}\n\nasync function runStore(args: ParsedArgs, preferredId?: string): Promise<void> {\n  const { config, service } = buildRuntime(preferredId);\n  const contentFile = getLastOption(args, \"content-file\");\n  const inlineContent = getLastOption(args, \"content\");\n  const content = contentFile ? fs.readFileSync(contentFile, \"utf8\") : inlineContent;\n  if (!content || content.trim().length === 0) {\n    throw new UsageError(\"missing-content\");\n  }\n\n  const result = await service.memoryStore({\n    namespace: getLastOption(args, \"namespace\"),\n    sessionKey: getLastOption(args, \"session-key\"),\n    authenticatedPrincipal: getLastOption(args, \"principal\") ?? config.agentAccessHttp.principal,\n    content,\n    category: requireOption(args, \"category\"),\n    confidence: parseFloatOption(args, \"confidence\"),\n    tags: getAllOptions(args, \"tag\"),\n    entityRef: getLastOption(args, \"entity-ref\"),\n    ttl: getLastOption(args, \"ttl\"),\n    sourceReason: getLastOption(args, \"source-reason\"),\n    idempotencyKey: getLastOption(args, \"idempotency-key\"),\n    dryRun: args.flags.has(\"dry-run\"),\n  });\n  console.log(JSON.stringify(result, null, 2));\n}\n\nexport async function main(\n  argv: string[] = process.argv.slice(2),\n  options: AccessCliOptions = {},\n): Promise<void> {\n  const args = parseArgs(argv);\n  if (args.command === \"browse\") {\n    await runBrowse(args, options.preferredId);\n    return;\n  }\n  await runStore(args, options.preferredId);\n}\n\nexport function printUsage(): void {\n  writeCliOutput(usage());\n}\n\nexport async function runCli(\n  argv: string[] = process.argv.slice(2),\n  options: AccessCliOptions = {},\n): Promise<void> {\n  try {\n    await main(argv, options);\n  } catch (error) {\n    if (error instanceof UsageError) {\n      writeCliOutput(formatUsageError(error));\n      writeCliOutput();\n      printUsage();\n      process.exit(1);\n    }\n\n    console.error(\"access-cli failed\");\n    process.exit(1);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,QAAQ;AACf,OAAO,UAAU;AAwCjB,IAAM,aAAN,cAAyB,MAAM;AAAA,EAC7B,YACW,MACA,YACT;AACA,UAAM,8BAA8B;AAH3B;AACA;AAAA,EAGX;AAAA,EAJW;AAAA,EACA;AAIb;AAEA,SAAS,iBAAiB,OAA2B;AACnD,UAAQ,MAAM,MAAM;AAAA,IAClB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,8BAA8B,MAAM,cAAc,SAAS;AAAA,IACpE,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,yBAAyB,MAAM,cAAc,SAAS;AAAA,IAC/D,KAAK;AACH,aAAO,wBAAwB,MAAM,cAAc,SAAS;AAAA,EAChE;AACF;AAEA,SAAS,eAAe,OAAe,IAAU;AAC/C,UAAQ,OAAO,MAAM,GAAG,IAAI;AAAA,CAAI;AAClC;AAEA,SAAS,QAAgB;AACvB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEA,SAAS,UAAU,MAA4B;AAC7C,QAAM,CAAC,YAAY,GAAG,IAAI,IAAI;AAC9B,MAAI,eAAe,YAAY,eAAe,SAAS;AACrD,UAAM,IAAI,WAAW,qBAAqB;AAAA,EAC5C;AAEA,QAAM,UAAoC,CAAC;AAC3C,QAAM,QAAQ,oBAAI,IAAY;AAE9B,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,GAAG;AACvC,UAAM,QAAQ,KAAK,CAAC;AACpB,QAAI,CAAC,MAAM,WAAW,IAAI,GAAG;AAC3B,YAAM,IAAI,WAAW,uBAAuB;AAAA,IAC9C;AACA,UAAM,MAAM,MAAM,MAAM,CAAC;AACzB,UAAM,OAAO,KAAK,IAAI,CAAC;AACvB,QAAI,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG;AAClC,YAAM,IAAI,GAAG;AACb;AAAA,IACF;AACA,QAAI,CAAC,QAAQ,GAAG,GAAG;AACjB,cAAQ,GAAG,IAAI,CAAC;AAAA,IAClB;AACA,YAAQ,GAAG,EAAE,KAAK,IAAI;AACtB,SAAK;AAAA,EACP;AAEA,SAAO;AAAA,IACL,SAAS;AAAA,IACT;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,cAAc,MAAkB,MAAkC;AACzE,QAAM,SAAS,KAAK,QAAQ,IAAI;AAChC,MAAI,CAAC,UAAU,OAAO,WAAW,EAAG,QAAO;AAC3C,SAAO,OAAO,OAAO,SAAS,CAAC;AACjC;AAEA,SAAS,cAAc,MAAkB,MAAwB;AAC/D,SAAO,KAAK,QAAQ,IAAI,KAAK,CAAC;AAChC;AAEA,SAAS,cAAc,MAAkB,MAAsB;AAC7D,QAAM,QAAQ,cAAc,MAAM,IAAI;AACtC,MAAI,CAAC,SAAS,MAAM,KAAK,EAAE,WAAW,GAAG;AACvC,UAAM,IAAI,WAAW,kBAAkB,IAAI;AAAA,EAC7C;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,MAAkB,MAAkC;AAC9E,QAAM,MAAM,cAAc,MAAM,IAAI;AACpC,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,QAAQ,SAAS,KAAK,EAAE;AAC9B,MAAI,CAAC,OAAO,SAAS,KAAK,GAAG;AAC3B,UAAM,IAAI,WAAW,mBAAmB,IAAI;AAAA,EAC9C;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,MAAkB,MAAkC;AAC5E,QAAM,MAAM,cAAc,MAAM,IAAI;AACpC,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,QAAQ,OAAO,WAAW,GAAG;AACnC,MAAI,CAAC,OAAO,SAAS,KAAK,GAAG;AAC3B,UAAM,IAAI,WAAW,kBAAkB,IAAI;AAAA,EAC7C;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,aAA+C;AACvE,QAAM,aACJ,WAAW,6BAA6B,KACxC,WAAW,sBAAsB,KACjC,KAAK,KAAK,eAAe,GAAG,aAAa,eAAe;AAC1D,QAAM,MAAM,KAAK,MAAM,GAAG,aAAa,YAAY,MAAM,CAAC;AAM1D,QAAM,QAAQ,yBAAyB,KAAK,WAAW;AACvD,SAAQ,QAAQ,QAAQ,KAA6C,CAAC;AACxE;AAEA,SAAS,aAAa,aAA+B;AACnD,QAAM,SAAS,YAAY,iBAAiB,WAAW,CAAC;AACxD,SAAO;AAAA,IACL;AAAA,IACA,SAAS,IAAI,oBAAoB,IAAI,aAAa,MAAM,CAAC;AAAA,EAC3D;AACF;AAEA,eAAe,UAAU,MAAkB,aAAqC;AAC9E,QAAM,EAAE,QAAQ,IAAI,aAAa,WAAW;AAC5C,QAAM,SAAS,MAAM,QAAQ,aAAa;AAAA,IACxC,WAAW,cAAc,MAAM,WAAW;AAAA,IAC1C,OAAO,cAAc,MAAM,OAAO;AAAA,IAClC,UAAU,cAAc,MAAM,UAAU;AAAA,IACxC,QAAQ,cAAc,MAAM,QAAQ;AAAA,IACpC,MAAM,cAAc,MAAM,MAAM;AAAA,IAChC,OAAO,mBAAmB,MAAM,OAAO;AAAA,IACvC,QAAQ,mBAAmB,MAAM,QAAQ;AAAA,EAC3C,CAAC;AACD,UAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAC7C;AAEA,eAAe,SAAS,MAAkB,aAAqC;AAC7E,QAAM,EAAE,QAAQ,QAAQ,IAAI,aAAa,WAAW;AACpD,QAAM,cAAc,cAAc,MAAM,cAAc;AACtD,QAAM,gBAAgB,cAAc,MAAM,SAAS;AACnD,QAAM,UAAU,cAAc,GAAG,aAAa,aAAa,MAAM,IAAI;AACrE,MAAI,CAAC,WAAW,QAAQ,KAAK,EAAE,WAAW,GAAG;AAC3C,UAAM,IAAI,WAAW,iBAAiB;AAAA,EACxC;AAEA,QAAM,SAAS,MAAM,QAAQ,YAAY;AAAA,IACvC,WAAW,cAAc,MAAM,WAAW;AAAA,IAC1C,YAAY,cAAc,MAAM,aAAa;AAAA,IAC7C,wBAAwB,cAAc,MAAM,WAAW,KAAK,OAAO,gBAAgB;AAAA,IACnF;AAAA,IACA,UAAU,cAAc,MAAM,UAAU;AAAA,IACxC,YAAY,iBAAiB,MAAM,YAAY;AAAA,IAC/C,MAAM,cAAc,MAAM,KAAK;AAAA,IAC/B,WAAW,cAAc,MAAM,YAAY;AAAA,IAC3C,KAAK,cAAc,MAAM,KAAK;AAAA,IAC9B,cAAc,cAAc,MAAM,eAAe;AAAA,IACjD,gBAAgB,cAAc,MAAM,iBAAiB;AAAA,IACrD,QAAQ,KAAK,MAAM,IAAI,SAAS;AAAA,EAClC,CAAC;AACD,UAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAC7C;AAEA,eAAsB,KACpB,OAAiB,QAAQ,KAAK,MAAM,CAAC,GACrC,UAA4B,CAAC,GACd;AACf,QAAM,OAAO,UAAU,IAAI;AAC3B,MAAI,KAAK,YAAY,UAAU;AAC7B,UAAM,UAAU,MAAM,QAAQ,WAAW;AACzC;AAAA,EACF;AACA,QAAM,SAAS,MAAM,QAAQ,WAAW;AAC1C;AAEO,SAAS,aAAmB;AACjC,iBAAe,MAAM,CAAC;AACxB;AAEA,eAAsB,OACpB,OAAiB,QAAQ,KAAK,MAAM,CAAC,GACrC,UAA4B,CAAC,GACd;AACf,MAAI;AACF,UAAM,KAAK,MAAM,OAAO;AAAA,EAC1B,SAAS,OAAO;AACd,QAAI,iBAAiB,YAAY;AAC/B,qBAAe,iBAAiB,KAAK,CAAC;AACtC,qBAAe;AACf,iBAAW;AACX,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,YAAQ,MAAM,mBAAmB;AACjC,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;","names":[]}

package/dist/access-http.d.ts

@@ -1,32 +1,39 @@
 import { IncomingMessage } from 'node:http';
-import { E as EngramAccessService } from './access-service-HmO1Trrx.js';
-import './types.js';
-import './explicit-capture.js';
-import './orchestrator-DRYA6_lW.js';
-import './buffer.js';
+import { E as EngramAccessService } from './access-service-Br8ZydTK.js';
 import './storage.js';
 import './page-versioning.js';
+import './consolidation-operator.js';
+import './types.js';
 import './memory-projection-store-DeSXPh1j.js';
 import 'better-sqlite3';
-import './port-C1GZFv8h.js';
+import './recall-xray.js';
+import './recall-explain-renderer.js';
+import './recall-state.js';
+import './recall-audit-anomaly.js';
+import './recall-audit.js';
+import './explicit-capture.js';
+import './orchestrator-CmJ-NTdJ.js';
+import './buffer.js';
+import './port-BADbLZU5.js';
 import './transcript.js';
 import './session-integrity.js';
 import './summarizer.js';
 import './model-registry.js';
 import './local-llm.js';
+import './fallback-llm.js';
 import './relevance.js';
 import './negative.js';
-import './recall-state.js';
 import './session-observer-state.js';
 import './embedding-fallback.js';
-import './semantic-consolidation-DrvSYRdB.js';
+import './semantic-consolidation-CxJU6MJk.js';
 import './codex-materialize-CQlLTzke.js';
 import './logger.js';
 import 'zod';
 import './policy-runtime.js';
 import './profiling.js';
+import './cross-namespace-budget.js';
 import './trust-zones.js';
-import './fallback-llm.js';
+import './memory-worth-outcomes.js';
 
 /**
  * Adapter interface for external system identity resolution.

package/dist/access-http.js

@@ -1,38 +1,46 @@
 import {
   EngramAccessHttpServer
-} from "./chunk-37UIFYWO.js";
-import "./chunk-NQEVYWX6.js";
+} from "./chunk-UWB5LMWY.js";
+import "./chunk-OC5OXUQ4.js";
 import "./chunk-IQT3XTKW.js";
-import "./chunk-MARWOCVP.js";
-import "./chunk-MTLYEMJB.js";
-import "./chunk-MVTHXUBX.js";
-import "./chunk-ITRLGI2T.js";
+import "./chunk-STGWEHYR.js";
+import "./chunk-ZAIM4TUE.js";
+import "./chunk-SOBJ6NEY.js";
+import "./chunk-3OGMS3PE.js";
 import "./chunk-EQINRHYR.js";
-import "./chunk-QDYXG4CS.js";
-import "./chunk-QNJMBKFK.js";
+import "./chunk-EIR5VLIH.js";
 import "./chunk-EEQLFRUM.js";
 import "./chunk-QDW3E4RD.js";
-import "./chunk-4NRAJUDS.js";
+import "./chunk-3FPTCC3Z.js";
+import "./chunk-2LGMW3DJ.js";
+import "./chunk-GDFS42HT.js";
+import "./chunk-RBBWYEFJ.js";
 import "./chunk-DT5TVLJE.js";
 import "./chunk-N5AKDXAI.js";
 import "./chunk-TBBDFYXW.js";
-import "./chunk-DGXUHMOV.js";
-import "./chunk-LPSF4OQH.js";
-import "./chunk-XKECPATV.js";
-import "./chunk-4LACOVZX.js";
-import "./chunk-GV6NLQ4X.js";
-import "./chunk-3WHVNEN7.js";
+import "./chunk-L7IXWRYE.js";
+import "./chunk-F5VP6YCB.js";
+import "./chunk-LTCGGW2D.js";
 import "./chunk-4KAN3GZ3.js";
-import "./chunk-6ZH4TU6I.js";
-import "./chunk-SCU65EZI.js";
-import "./chunk-BOUYNNYD.js";
 import "./chunk-6PFRXT4K.js";
 import "./chunk-TP4FZJIZ.js";
+import "./chunk-SCU65EZI.js";
+import "./chunk-BOUYNNYD.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-QSVPYQPG.js";
 import "./chunk-M62O4P4T.js";
 import "./chunk-4DJQYKMN.js";
+import "./chunk-X6GF3FX2.js";
+import "./chunk-FAAFWE4G.js";
+import "./chunk-MARWOCVP.js";
 import "./chunk-2ODBA7MQ.js";
+import "./chunk-DGXUHMOV.js";
+import "./chunk-LPSF4OQH.js";
+import "./chunk-TVVEYCNW.js";
+import "./chunk-RFYAYKTD.js";
+import "./chunk-LBLXEFWK.js";
+import "./chunk-XKECPATV.js";
+import "./chunk-WCLICCGB.js";
 export {
   EngramAccessHttpServer
 };

package/dist/access-mcp.d.ts

@@ -1,32 +1,39 @@
 import { Readable, Writable } from 'node:stream';
-import { E as EngramAccessService } from './access-service-HmO1Trrx.js';
-import './types.js';
-import './explicit-capture.js';
-import './orchestrator-DRYA6_lW.js';
-import './buffer.js';
+import { E as EngramAccessService } from './access-service-Br8ZydTK.js';
 import './storage.js';
 import './page-versioning.js';
+import './consolidation-operator.js';
+import './types.js';
 import './memory-projection-store-DeSXPh1j.js';
 import 'better-sqlite3';
-import './port-C1GZFv8h.js';
+import './recall-xray.js';
+import './recall-explain-renderer.js';
+import './recall-state.js';
+import './recall-audit-anomaly.js';
+import './recall-audit.js';
+import './explicit-capture.js';
+import './orchestrator-CmJ-NTdJ.js';
+import './buffer.js';
+import './port-BADbLZU5.js';
 import './transcript.js';
 import './session-integrity.js';
 import './summarizer.js';
 import './model-registry.js';
 import './local-llm.js';
+import './fallback-llm.js';
 import './relevance.js';
 import './negative.js';
-import './recall-state.js';
 import './session-observer-state.js';
 import './embedding-fallback.js';
-import './semantic-consolidation-DrvSYRdB.js';
+import './semantic-consolidation-CxJU6MJk.js';
 import './codex-materialize-CQlLTzke.js';
 import './logger.js';
 import 'zod';
 import './policy-runtime.js';
 import './profiling.js';
+import './cross-namespace-budget.js';
 import './trust-zones.js';
-import './fallback-llm.js';
+import './memory-worth-outcomes.js';
 
 type JsonRpcId = string | number | null;
 type JsonRpcRequest = {

package/dist/access-mcp.js

@@ -1,22 +1,44 @@
 import {
   EngramMcpServer
-} from "./chunk-NQEVYWX6.js";
+} from "./chunk-OC5OXUQ4.js";
 import "./chunk-IQT3XTKW.js";
-import "./chunk-MARWOCVP.js";
-import "./chunk-4LACOVZX.js";
-import "./chunk-GV6NLQ4X.js";
-import "./chunk-3WHVNEN7.js";
+import "./chunk-STGWEHYR.js";
+import "./chunk-ZAIM4TUE.js";
+import "./chunk-SOBJ6NEY.js";
+import "./chunk-3OGMS3PE.js";
+import "./chunk-EQINRHYR.js";
+import "./chunk-EIR5VLIH.js";
+import "./chunk-EEQLFRUM.js";
+import "./chunk-QDW3E4RD.js";
+import "./chunk-3FPTCC3Z.js";
+import "./chunk-2LGMW3DJ.js";
+import "./chunk-GDFS42HT.js";
+import "./chunk-RBBWYEFJ.js";
+import "./chunk-DT5TVLJE.js";
+import "./chunk-N5AKDXAI.js";
+import "./chunk-TBBDFYXW.js";
+import "./chunk-L7IXWRYE.js";
+import "./chunk-F5VP6YCB.js";
+import "./chunk-LTCGGW2D.js";
 import "./chunk-4KAN3GZ3.js";
-import "./chunk-6ZH4TU6I.js";
-import "./chunk-SCU65EZI.js";
-import "./chunk-BOUYNNYD.js";
 import "./chunk-6PFRXT4K.js";
 import "./chunk-TP4FZJIZ.js";
+import "./chunk-SCU65EZI.js";
+import "./chunk-BOUYNNYD.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-QSVPYQPG.js";
 import "./chunk-M62O4P4T.js";
 import "./chunk-4DJQYKMN.js";
+import "./chunk-X6GF3FX2.js";
+import "./chunk-FAAFWE4G.js";
+import "./chunk-MARWOCVP.js";
 import "./chunk-2ODBA7MQ.js";
+import "./chunk-DGXUHMOV.js";
+import "./chunk-LPSF4OQH.js";
+import "./chunk-TVVEYCNW.js";
+import "./chunk-RFYAYKTD.js";
+import "./chunk-LBLXEFWK.js";
+import "./chunk-XKECPATV.js";
 export {
   EngramMcpServer
 };