@remnic/core 1.1.31 → 9.3.515

package/dist/{chunk-MZH6EHNR.js → chunk-7H6CFEBJ.js}

@@ -9,10 +9,13 @@ import {
 import {
   normalizeEntitySchemas
 } from "./chunk-4DJQYKMN.js";
+import {
+  expandTildePath
+} from "./chunk-EYIEWJNI.js";
 import {
   readEnvVar,
   resolveHomeDir
-} from "./chunk-XIG5PDM7.js";
+} from "./chunk-JUC24CTX.js";
 import {
   log
 } from "./chunk-2ODBA7MQ.js";
@@ -108,6 +111,26 @@ function parseIntegerAtLeast(value, fallback, min, keyName) {
   }
   return coerced;
 }
+function parseOptionalIntegerAtLeast(value, min, keyName) {
+  if (value === void 0 || value === null) return void 0;
+  const coerced = coerceNumber(value);
+  if (coerced === void 0 || !Number.isFinite(coerced) || !Number.isInteger(coerced) || coerced < min) {
+    throw new Error(
+      `${keyName} must be an integer greater than or equal to ${min}; got ${JSON.stringify(value)}`
+    );
+  }
+  return coerced;
+}
+function parsePortNumber(value, fallback, keyName) {
+  if (value === void 0 || value === null) return fallback;
+  const coerced = coerceNumber(value);
+  if (coerced === void 0 || !Number.isInteger(coerced) || coerced < 0 || coerced > 65535) {
+    throw new Error(
+      `${keyName} must be an integer from 0 to 65535; got ${JSON.stringify(value)}`
+    );
+  }
+  return coerced;
+}
 function coerceBooleanLike(value) {
   if (typeof value === "boolean") return value;
   if (typeof value === "number") {
@@ -151,6 +174,12 @@ function parseAgentAccessAuthToken(raw) {
     "unsupported SecretRef shape for agentAccessHttp.authToken \u2014 expected a string or an object with a non-empty `source` field (see https://github.com/joshuaswarren/remnic/issues/757)"
   );
 }
+function parseAgentAccessPrincipal(raw) {
+  if (typeof raw === "string" && raw.trim().length > 0) {
+    return resolveEnvVars(raw);
+  }
+  return readEnvVar("OPENCLAW_REMNIC_ACCESS_PRINCIPAL")?.trim() || readEnvVar("OPENCLAW_ENGRAM_ACCESS_PRINCIPAL")?.trim() || void 0;
+}
 function resolveEnvVars(value) {
   const resolved = value.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g, (_, envVar) => {
     const envValue = readEnvVar(envVar);
@@ -557,7 +586,7 @@ function parseConfig(raw) {
     // read fallbacks so globally useful memories remain visible. CLAUDE.md #30.
     globalFallback: codingGlobalFallbackRaw === void 0 ? true : codingGlobalFallbackRaw
   };
-  const memoryDir = typeof cfg.memoryDir === "string" && cfg.memoryDir.length > 0 ? cfg.memoryDir : DEFAULT_MEMORY_DIR;
+  const memoryDir = typeof cfg.memoryDir === "string" && cfg.memoryDir.length > 0 ? expandTildePath(cfg.memoryDir) : DEFAULT_MEMORY_DIR;
   const rawIdentityInjectionMode = cfg.identityInjectionMode;
   const identityInjectionMode = rawIdentityInjectionMode && VALID_IDENTITY_INJECTION_MODES.includes(rawIdentityInjectionMode) ? rawIdentityInjectionMode : "recovery_only";
   const identityContinuityEnabled = cfg.identityContinuityEnabled === true;
@@ -643,9 +672,9 @@ function parseConfig(raw) {
   const agentAccessHttp = {
     enabled: rawAgentAccessHttp?.enabled === true,
     host: typeof rawAgentAccessHttp?.host === "string" && rawAgentAccessHttp.host.trim().length > 0 ? rawAgentAccessHttp.host.trim() : "127.0.0.1",
-    port: typeof rawAgentAccessHttp?.port === "number" ? Math.max(0, Math.floor(rawAgentAccessHttp.port)) : 4318,
+    port: parsePortNumber(rawAgentAccessHttp?.port, 4318, "agentAccessHttp.port"),
     [["auth", "Token"].join("")]: agentAccessAuthToken,
-    principal: typeof rawAgentAccessHttp?.principal === "string" && rawAgentAccessHttp.principal.trim().length > 0 ? resolveEnvVars(rawAgentAccessHttp.principal) : readEnvVar("OPENCLAW_ENGRAM_ACCESS_PRINCIPAL")?.trim() || void 0,
+    principal: parseAgentAccessPrincipal(rawAgentAccessHttp?.principal),
     maxBodyBytes: typeof rawAgentAccessHttp?.maxBodyBytes === "number" ? Math.max(1, Math.floor(rawAgentAccessHttp.maxBodyBytes)) : 131072
   };
   let baseUrl;
@@ -760,7 +789,7 @@ function parseConfig(raw) {
       1,
       "commitmentDecayDays"
     ),
-    workspaceDir: typeof cfg.workspaceDir === "string" && cfg.workspaceDir.length > 0 ? cfg.workspaceDir : DEFAULT_WORKSPACE_DIR,
+    workspaceDir: typeof cfg.workspaceDir === "string" && cfg.workspaceDir.length > 0 ? expandTildePath(cfg.workspaceDir) : DEFAULT_WORKSPACE_DIR,
     captureMode,
     fileHygiene,
     nativeKnowledge,
@@ -809,12 +838,10 @@ function parseConfig(raw) {
     // On by default
     temporalSupersessionIncludeInRecall: cfg.temporalSupersessionIncludeInRecall === true,
     // Off by default
-    // Direct-answer retrieval tier (issue #518).  Default on — the
-    // tier runs in observation mode: it annotates
-    // LastRecallSnapshot.tierExplain but never short-circuits the
-    // QMD path.  Operators can opt out with
-    // recallDirectAnswerEnabled=false.
-    recallDirectAnswerEnabled: coerceBool(cfg.recallDirectAnswerEnabled) ?? true,
+    // Direct-answer retrieval tier (issue #518).  Default off so the
+    // recall path keeps least-privileged behavior unless operators
+    // explicitly opt in.
+    recallDirectAnswerEnabled: coerceBool(cfg.recallDirectAnswerEnabled) ?? false,
     // Disclosure auto-escalation (issue #677 PR 4/4).  Default `manual`
     // so pre-#677 callers see unchanged behavior.  Reject anything
     // outside the allow-list rather than silently defaulting (CLAUDE.md
@@ -1269,7 +1296,7 @@ function parseConfig(raw) {
     localLmsCliPath: typeof cfg.localLmsCliPath === "string" && cfg.localLmsCliPath.length > 0 ? cfg.localLmsCliPath : void 0,
     localLmsBinDir: typeof cfg.localLmsBinDir === "string" && cfg.localLmsBinDir.length > 0 ? cfg.localLmsBinDir : void 0,
     localLlmTimeoutMs: parseBoundedIntegerMs(cfg.localLlmTimeoutMs, 18e4, 1, 864e5),
-    localLlmMaxContext: typeof cfg.localLlmMaxContext === "number" ? cfg.localLlmMaxContext : void 0,
+    localLlmMaxContext: parseOptionalIntegerAtLeast(cfg.localLlmMaxContext, 1024, "localLlmMaxContext"),
     // Observability (disabled by default to avoid log spam)
     slowLogEnabled: cfg.slowLogEnabled === true,
     slowLogThresholdMs: typeof cfg.slowLogThresholdMs === "number" ? cfg.slowLogThresholdMs : 3e4,
@@ -1996,7 +2023,7 @@ function parseConfig(raw) {
     enrichmentMaxCandidatesPerEntity: typeof cfg.enrichmentMaxCandidatesPerEntity === "number" ? Math.max(0, Math.floor(cfg.enrichmentMaxCandidatesPerEntity)) : 20,
     // Memory extensions discovery (#382)
     memoryExtensionsEnabled: cfg.memoryExtensionsEnabled !== false,
-    memoryExtensionsRoot: typeof cfg.memoryExtensionsRoot === "string" && cfg.memoryExtensionsRoot.trim().length > 0 ? cfg.memoryExtensionsRoot.trim() : ""
+    memoryExtensionsRoot: typeof cfg.memoryExtensionsRoot === "string" && cfg.memoryExtensionsRoot.trim().length > 0 ? expandTildePath(cfg.memoryExtensionsRoot.trim()) : ""
   };
 }
 function parseBriefingConfig(raw) {
@@ -2269,4 +2296,4 @@ export {
   VALID_MEMORY_CATEGORIES,
   parseConfig
 };
-//# sourceMappingURL=chunk-MZH6EHNR.js.map
+//# sourceMappingURL=chunk-7H6CFEBJ.js.map