@remnic/core 1.1.31 → 9.3.516

package/dist/abstraction-nodes.js

@@ -3,8 +3,8 @@ import {
   recordAbstractionNode,
   resolveAbstractionNodeStoreDir,
   validateAbstractionNode
-} from "./chunk-NGAVDO7E.js";
-import "./chunk-DGXUHMOV.js";
+} from "./chunk-OADWQ5CR.js";
+import "./chunk-A2IYSXDQ.js";
 import "./chunk-LPSF4OQH.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/access-cli.d.ts

@@ -1,7 +1,7 @@
 type AccessCliOptions = {
     /**
      * The calling plugin's own id (e.g. `"openclaw-engram"` when invoked by the
-     * shim binary).  Forwarded to {@link resolveRemnicPluginEntry} so shim CLI
+     * shim binary).  Forwarded to the plugin-entry resolver so shim CLI
      * users target their own `plugins.entries["openclaw-engram"]` block instead
      * of accidentally resolving to the canonical `"openclaw-remnic"` entry when
      * `plugins.slots.memory` is unset (#403).

package/dist/access-cli.js

@@ -1,213 +1,216 @@
 import {
   Orchestrator
-} from "./chunk-QLLBRHAT.js";
-import "./chunk-WNARATI3.js";
-import "./chunk-KOSORCJG.js";
+} from "./chunk-YDMVYYD2.js";
+import "./chunk-Y2SXZ5KZ.js";
 import "./chunk-BFBF3XEF.js";
+import "./chunk-S53PKKWK.js";
 import "./chunk-HHLLAQGZ.js";
 import "./chunk-UWK5OXUJ.js";
-import "./chunk-2PRLKQAH.js";
+import "./chunk-RLV3PQGH.js";
+import "./chunk-TPDBFYEG.js";
+import "./chunk-KCYE2MZM.js";
 import "./chunk-7XYTQGCC.js";
-import "./chunk-34DQE4KF.js";
-import "./chunk-56K5QLHX.js";
+import "./chunk-CO7ZO4TU.js";
+import "./chunk-4HP7HIE3.js";
 import "./chunk-7N4KAIGN.js";
-import "./chunk-TPDBFYEG.js";
-import "./chunk-ZTFCYYEZ.js";
 import "./chunk-TECVW3JP.js";
-import "./chunk-RYED3SPJ.js";
-import "./chunk-A6KTB5R6.js";
-import "./chunk-U4SCL7B7.js";
+import "./chunk-T2PO5MUF.js";
+import "./chunk-IQ3OI2RR.js";
+import "./chunk-DRD2Q7HQ.js";
 import "./chunk-UHGBNIOS.js";
-import "./chunk-FSFEQI74.js";
-import "./chunk-OIGNEXKZ.js";
+import "./chunk-W7L6HXUC.js";
+import "./chunk-K5O2QY6T.js";
 import "./chunk-MDYG7VI7.js";
 import "./chunk-Z5AAYHUC.js";
 import "./chunk-S75M5ZRK.js";
-import "./chunk-TPB3I2AC.js";
-import "./chunk-H3ME6L6D.js";
+import "./chunk-ECZU5BJH.js";
+import "./chunk-46GJIW5M.js";
 import "./chunk-XJNBEDFE.js";
 import "./chunk-VWT3F4IV.js";
-import "./chunk-JR4ZC3G4.js";
-import "./chunk-K4FLSOR5.js";
+import "./chunk-DLJ4IR6M.js";
+import "./chunk-USYGGIJZ.js";
 import "./chunk-V3RXWQIE.js";
 import "./chunk-5IZL4DCV.js";
 import "./chunk-X7XN6YU4.js";
-import "./chunk-5NPGSAVB.js";
-import "./chunk-C7VW7C3F.js";
+import "./chunk-XEKAG3FM.js";
+import "./chunk-TDKQGLJW.js";
 import "./chunk-OZKZ2TRP.js";
-import "./chunk-7DHTMOND.js";
-import "./chunk-WPGJYVUH.js";
-import "./chunk-ZZTOURJI.js";
 import "./chunk-YDBIWGNI.js";
+import "./chunk-7DHTMOND.js";
+import "./chunk-MGVIEM2O.js";
 import "./chunk-YCN4BVDK.js";
-import "./chunk-D654IBA6.js";
+import "./chunk-ZZTOURJI.js";
+import "./chunk-XKXKSQU7.js";
 import "./chunk-3GPTTA4J.js";
 import "./chunk-IISBCCWR.js";
-import "./chunk-U3WSW6PZ.js";
+import "./chunk-QMYXNM4P.js";
 import "./chunk-H63EDPFJ.js";
 import "./chunk-PD6O7AXF.js";
 import "./chunk-YAZNBMNF.js";
 import "./chunk-LCR46JY5.js";
 import "./chunk-C4SQJZAF.js";
-import "./chunk-W3LR522O.js";
+import "./chunk-KM2A35EO.js";
 import "./chunk-4RA3C3EV.js";
-import "./chunk-WW3QQF4H.js";
+import "./chunk-ROZJACKP.js";
 import "./chunk-54V4BZWP.js";
-import "./chunk-QR3C7BKQ.js";
-import "./chunk-EDTHC6UD.js";
+import "./chunk-XZ4WBBB5.js";
+import "./chunk-77NAFXUD.js";
 import "./chunk-DB5A3NHS.js";
-import "./chunk-43PJZYGL.js";
+import "./chunk-FPGE5NVO.js";
 import "./chunk-6NKAQ74D.js";
 import "./chunk-OAZ5MFUB.js";
 import "./chunk-PYPOFEMK.js";
-import "./chunk-3IQ2TR4N.js";
+import "./chunk-WLEB7WCG.js";
 import "./chunk-VEWZZM3H.js";
 import "./chunk-5NXIJZFX.js";
 import "./chunk-Y4FHOFJ2.js";
-import "./chunk-NMZY542O.js";
+import "./chunk-6URPAY2D.js";
 import "./chunk-3PG3H5TD.js";
-import "./chunk-2NMMFZ5T.js";
-import "./chunk-XSZEP4SF.js";
-import "./chunk-4KGVTPGD.js";
-import "./chunk-RHY3HH7P.js";
-import "./chunk-EJI5XIBB.js";
+import "./chunk-OD4FM2U7.js";
+import "./chunk-6XSPNR6L.js";
+import "./chunk-6F6BXB7A.js";
+import "./chunk-JFEKNTX7.js";
+import "./chunk-JLNBQWZ2.js";
+import "./chunk-HPWVAEET.js";
 import "./chunk-2PRQG7PV.js";
-import "./chunk-LUDTDZLK.js";
-import "./chunk-JA3AK3PT.js";
-import "./chunk-PYXS46O7.js";
-import "./chunk-3QKK7QOS.js";
+import "./chunk-XNLXAWHX.js";
+import "./chunk-3BP57I6J.js";
+import "./chunk-TERNBNJB.js";
 import "./chunk-W4RVMTHR.js";
-import "./chunk-SAZS2QZB.js";
-import "./chunk-CULXMQJH.js";
-import "./chunk-5375UYTQ.js";
+import "./chunk-23UORJ4S.js";
+import "./chunk-XPXEJRUB.js";
+import "./chunk-A6D7A2FW.js";
 import "./chunk-FF4KLI5W.js";
-import "./chunk-EABGC2TL.js";
-import "./chunk-RR2PKP3I.js";
-import "./chunk-575RMLWN.js";
-import "./chunk-I5GLV3VE.js";
-import "./chunk-NJ3MJQZX.js";
-import "./chunk-XVVIG67A.js";
-import "./chunk-PIRJPV5T.js";
-import "./chunk-RXDLTSWT.js";
-import "./chunk-3VAL7ZL2.js";
-import "./chunk-TMQLARTH.js";
-import "./chunk-MJFNCJXV.js";
-import "./chunk-CYFQJMUV.js";
+import "./chunk-4426WSWL.js";
+import "./chunk-A2Z6UCWT.js";
+import "./chunk-KXULCVOC.js";
+import "./chunk-SML26KED.js";
+import "./chunk-FUC4LZMD.js";
+import "./chunk-FK556DDH.js";
+import "./chunk-2I5JGH3M.js";
+import "./chunk-QVJ4NWL2.js";
+import "./chunk-JNANKJLN.js";
+import "./chunk-Q4CAQGKQ.js";
+import "./chunk-ONPLNAPX.js";
+import "./chunk-CINZGPSJ.js";
+import "./chunk-CHBI22MI.js";
+import "./chunk-ZFXCQPNO.js";
+import "./chunk-KIB7SDIJ.js";
+import "./chunk-ORFGK3XI.js";
+import "./chunk-HENLZHIT.js";
 import "./chunk-7DTASS5T.js";
-import "./chunk-FJ43PRLT.js";
-import "./chunk-LLQ2LLWF.js";
-import "./chunk-YRMVARQP.js";
-import "./chunk-3TNBOMQT.js";
+import "./chunk-KFY3SGN7.js";
+import "./chunk-PCI747N2.js";
 import {
-  resolveRemnicPluginEntry
-} from "./chunk-U66YHYC7.js";
-import "./chunk-HXXBL2KD.js";
-import "./chunk-LPMVBPA3.js";
+  resolvePluginEntry
+} from "./chunk-CMTINOFS.js";
+import "./chunk-BECQDWBA.js";
+import "./chunk-CWWMTTQE.js";
 import "./chunk-JXS5PDQ7.js";
-import "./chunk-HMDCOMYU.js";
-import "./chunk-7SEAZFFB.js";
-import "./chunk-D46YSIYX.js";
+import "./chunk-SKGV326D.js";
+import "./chunk-BEUDU7Y4.js";
+import "./chunk-G3Z3QEF5.js";
 import "./chunk-AJU4PJGY.js";
-import "./chunk-C6QPK5GG.js";
-import "./chunk-2KI4QFHU.js";
-import "./chunk-OZHRDTDX.js";
+import "./chunk-FZZ2QTJI.js";
+import "./chunk-LMDRGRJ2.js";
+import "./chunk-OKTXM5H4.js";
 import "./chunk-3UXOZBHV.js";
 import "./chunk-KVE7R4CG.js";
 import "./chunk-4WMCPJWX.js";
-import "./chunk-5RGLBDQF.js";
-import "./chunk-DINWEURR.js";
-import "./chunk-FLTNHQK6.js";
+import "./chunk-EVZFIAPG.js";
+import "./chunk-CSKLPDN6.js";
+import "./chunk-B5XMS73R.js";
 import "./chunk-7SI52C65.js";
 import "./chunk-L2EXJQJP.js";
 import "./chunk-UZB5KHKX.js";
 import "./chunk-RK6F44Y6.js";
 import {
   parseConfig
-} from "./chunk-MZH6EHNR.js";
+} from "./chunk-7H6CFEBJ.js";
 import "./chunk-PHK3HARR.js";
 import "./chunk-Z5LAYHGJ.js";
 import "./chunk-6HZ6AO2P.js";
-import "./chunk-JWPLJLDU.js";
-import "./chunk-N53K2EXC.js";
-import "./chunk-XYIK4LF6.js";
-import "./chunk-NZL6GGQE.js";
+import "./chunk-KD3QD3A5.js";
+import "./chunk-6VF75M3X.js";
+import "./chunk-H3FZVNRN.js";
+import "./chunk-HQ6NIBL6.js";
 import "./chunk-PVGDJXVK.js";
-import "./chunk-NGAVDO7E.js";
+import "./chunk-OADWQ5CR.js";
 import {
   EngramAccessService
-} from "./chunk-ZAVUCJ4H.js";
-import "./chunk-ZKSK55RC.js";
-import "./chunk-WELDCG6C.js";
-import "./chunk-ZYVPLJ4T.js";
+} from "./chunk-5V456VRV.js";
+import "./chunk-ETUPBUHB.js";
+import "./chunk-L227SKTB.js";
+import "./chunk-DHGSZ3UD.js";
 import "./chunk-BT7NVCML.js";
 import "./chunk-H7XKCNR6.js";
-import "./chunk-FBYESMQ2.js";
+import "./chunk-3C5RPJAX.js";
 import "./chunk-SOBJ6NEY.js";
-import "./chunk-FDU6HUUL.js";
-import "./chunk-QDZ2RLEC.js";
-import "./chunk-MGKYQQYF.js";
-import "./chunk-GL6I6MEQ.js";
-import "./chunk-3APJ5EVB.js";
-import "./chunk-5UM2VJ6D.js";
-import "./chunk-76FLAAUC.js";
+import "./chunk-EDQVAMQI.js";
+import "./chunk-472U7RDF.js";
+import "./chunk-7Q3RCKAQ.js";
+import "./chunk-WSGF57U2.js";
+import "./chunk-XKIQZXUB.js";
+import "./chunk-UEY3VB6W.js";
+import "./chunk-2AN2L4NL.js";
 import "./chunk-EIR5VLIH.js";
-import "./chunk-PCUKNJAZ.js";
-import "./chunk-RRF5UOBJ.js";
-import "./chunk-NBNN5GOB.js";
+import "./chunk-JKV57BTN.js";
+import "./chunk-EI6V5UXY.js";
+import "./chunk-QY7YA7OL.js";
 import "./chunk-NNVTUXEB.js";
 import "./chunk-QDW3E4RD.js";
-import "./chunk-25MQ7IHJ.js";
-import "./chunk-GDFS42HT.js";
-import "./chunk-U3PN77QT.js";
-import "./chunk-RK2Y4XOM.js";
+import "./chunk-EUML3N6B.js";
+import "./chunk-CHCA44C3.js";
+import "./chunk-4JRRISLU.js";
 import "./chunk-2LSZVONP.js";
-import "./chunk-WIICJPET.js";
-import "./chunk-SIC6U3GZ.js";
-import "./chunk-VBJ7V5SK.js";
+import "./chunk-DEUNUKTD.js";
+import "./chunk-YHV3KRKS.js";
+import "./chunk-UIPDNLXA.js";
 import "./chunk-5UZXUTVO.js";
-import "./chunk-NN2DKE4T.js";
-import "./chunk-Q7P4WJDP.js";
+import "./chunk-4H5ZJHEN.js";
+import "./chunk-M5T4Q2ZU.js";
 import "./chunk-SCU65EZI.js";
-import "./chunk-3KW65B36.js";
+import "./chunk-KILOTVIF.js";
 import "./chunk-3HPAPHUK.js";
-import "./chunk-PFV5C235.js";
+import "./chunk-CPPS65WS.js";
 import "./chunk-RULE4VG5.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-QSVPYQPG.js";
 import "./chunk-FVQJYWH7.js";
 import "./chunk-G7D6GZ5J.js";
-import "./chunk-FAAFWE4G.js";
-import {
-  expandTildePath
-} from "./chunk-QRNI5JBH.js";
+import "./chunk-ALEPI75L.js";
 import "./chunk-ZY2MNJR6.js";
-import "./chunk-MY6TPVXW.js";
+import "./chunk-LMPHTYJC.js";
 import "./chunk-DT5TVLJE.js";
-import "./chunk-UWVJF25J.js";
+import "./chunk-HWVTS5NO.js";
+import "./chunk-U3PN77QT.js";
 import "./chunk-4DJQYKMN.js";
+import {
+  expandTildePath
+} from "./chunk-EYIEWJNI.js";
 import {
   readEnvVar,
   resolveHomeDir
-} from "./chunk-XIG5PDM7.js";
+} from "./chunk-JUC24CTX.js";
 import "./chunk-TBBDFYXW.js";
 import "./chunk-2ODBA7MQ.js";
-import "./chunk-DGXUHMOV.js";
+import "./chunk-A2IYSXDQ.js";
 import "./chunk-LPSF4OQH.js";
 import "./chunk-TVVEYCNW.js";
 import "./chunk-RFYAYKTD.js";
 import "./chunk-LBLXEFWK.js";
-import "./chunk-XKECPATV.js";
-import "./chunk-QA2ZAPBU.js";
-import "./chunk-WEHSQBFR.js";
-import "./chunk-KNKUID7G.js";
+import "./chunk-VFUEZZBS.js";
+import "./chunk-IPLYGWQF.js";
 import "./chunk-J4EB7DNW.js";
+import "./chunk-WEHSQBFR.js";
+import "./chunk-X7Y7WX73.js";
 import "./chunk-BJMBJZ2Y.js";
 import "./chunk-UKJAGEXH.js";
 import "./chunk-FP2373TW.js";
-import "./chunk-U7EJOMFC.js";
-import "./chunk-I6K5FBRQ.js";
-import "./chunk-AGZQD76C.js";
-import "./chunk-MXFBBHJU.js";
+import "./chunk-ZEY4KYRQ.js";
+import "./chunk-UI3NYK34.js";
+import "./chunk-GCGJW34D.js";
+import "./chunk-KJMYHC7K.js";
 import "./chunk-A6XUJE5D.js";
 import "./chunk-P7FMDTKL.js";
 import "./chunk-AH2JUU6X.js";
@@ -218,6 +221,29 @@ import "./chunk-PZ5AY32C.js";
 // src/access-cli.ts
 import fs from "fs";
 import path from "path";
+var OPENCLAW_REMNIC_PLUGIN_IDS = ["openclaw-remnic", "openclaw-engram"];
+function getOpenClawPluginEntries(raw) {
+  const plugins = raw["plugins"] && typeof raw["plugins"] === "object" && !Array.isArray(raw["plugins"]) ? raw["plugins"] : void 0;
+  const entries = plugins && plugins["entries"] && typeof plugins["entries"] === "object" && !Array.isArray(plugins["entries"]) ? plugins["entries"] : void 0;
+  return entries;
+}
+function getOpenClawMemorySlotId(raw) {
+  const plugins = raw["plugins"] && typeof raw["plugins"] === "object" && !Array.isArray(raw["plugins"]) ? raw["plugins"] : void 0;
+  const slots = plugins && plugins["slots"] && typeof plugins["slots"] === "object" && !Array.isArray(plugins["slots"]) ? plugins["slots"] : void 0;
+  const slotId = slots?.["memory"];
+  return typeof slotId === "string" ? slotId : void 0;
+}
+function resolveOpenClawRemnicPluginEntry(raw, preferredId) {
+  return resolvePluginEntry(raw, {
+    candidateIds: OPENCLAW_REMNIC_PLUGIN_IDS,
+    preferredId,
+    getEntries: getOpenClawPluginEntries,
+    getSlotId: getOpenClawMemorySlotId
+  });
+}
+function hasAllowedOpenClawRemnicPluginId(value) {
+  return OPENCLAW_REMNIC_PLUGIN_IDS.includes(value);
+}
 var UsageError = class extends Error {
   constructor(kind, optionName, acceptedValues) {
     super("invalid access-cli arguments");
@@ -447,7 +473,18 @@ function parseFloatOption(args, name, options = {}) {
 function loadPluginConfig(preferredId) {
   const configPath = expandOptionalPath(readEnvVar("OPENCLAW_CONFIG_PATH")) || expandOptionalPath(readEnvVar("OPENCLAW_ENGRAM_CONFIG_PATH")) || path.join(resolveHomeDir(), ".openclaw", "openclaw.json");
   const raw = JSON.parse(fs.readFileSync(configPath, "utf8"));
-  const entry = resolveRemnicPluginEntry(raw, preferredId);
+  const slotId = raw && typeof raw === "object" && !Array.isArray(raw) ? getOpenClawMemorySlotId(raw) : void 0;
+  if (typeof slotId === "string" && !hasAllowedOpenClawRemnicPluginId(slotId)) {
+    throw new Error(
+      `OpenClaw memory slot points to non-Remnic plugin "${slotId}"; refusing to use default Remnic access config.`
+    );
+  }
+  const entry = resolveOpenClawRemnicPluginEntry(raw, preferredId);
+  if (!entry) {
+    throw new Error(
+      "OpenClaw config does not contain an allowed Remnic plugin entry; refusing to use default Remnic access config."
+    );
+  }
   return entry?.["config"] ?? {};
 }
 function buildRuntime(preferredId) {

package/dist/access-cli.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/access-cli.ts"],"sourcesContent":["import fs from \"node:fs\";\nimport path from \"node:path\";\nimport { parseConfig } from \"./config.js\";\nimport type { PluginConfig } from \"./types.js\";\nimport { Orchestrator } from \"./orchestrator.js\";\nimport { EngramAccessService } from \"./access-service.js\";\nimport { readEnvVar, resolveHomeDir } from \"./runtime/env.js\";\nimport { resolveRemnicPluginEntry } from \"./plugin-id.js\";\nimport { expandTildePath } from \"./utils/path.js\";\n\ntype CommandName = \"browse\" | \"store\";\n\ntype ParsedArgs = {\n  command: CommandName;\n  options: Record<string, string[]>;\n  flags: Set<string>;\n};\n\ntype CommandSpec = {\n  valueOptions: ReadonlySet<string>;\n  flagOptions: ReadonlySet<string>;\n};\n\ntype Runtime = {\n  config: PluginConfig;\n  service: EngramAccessService;\n};\n\nexport type AccessCliOptions = {\n  /**\n   * The calling plugin's own id (e.g. `\"openclaw-engram\"` when invoked by the\n   * shim binary).  Forwarded to {@link resolveRemnicPluginEntry} so shim CLI\n   * users target their own `plugins.entries[\"openclaw-engram\"]` block instead\n   * of accidentally resolving to the canonical `\"openclaw-remnic\"` entry when\n   * `plugins.slots.memory` is unset (#403).\n   */\n  preferredId?: string;\n};\n\ntype UsageErrorKind =\n  | \"unsupported-command\"\n  | \"unexpected-positional\"\n  | \"unknown-option\"\n  | \"invalid-option\"\n  | \"option-does-not-take-value\"\n  | \"missing-option\"\n  | \"missing-content\"\n  | \"invalid-integer\"\n  | \"invalid-number\";\n\nclass UsageError extends Error {\n  constructor(\n    readonly kind: UsageErrorKind,\n    readonly optionName?: string,\n    readonly acceptedValues?: readonly string[],\n  ) {\n    super(\"invalid access-cli arguments\");\n  }\n}\n\nfunction formatUsageError(error: UsageError): string {\n  switch (error.kind) {\n    case \"unsupported-command\":\n      return \"unsupported command\";\n    case \"unexpected-positional\":\n      return \"unexpected positional argument\";\n    case \"unknown-option\":\n      return `unknown option: --${error.optionName ?? \"unknown\"}`;\n    case \"invalid-option\": {\n      const accepted = error.acceptedValues?.length ? `. Accepted: ${error.acceptedValues.join(\", \")}.` : \"\";\n      return `invalid value for --${error.optionName ?? \"unknown\"}${accepted}`;\n    }\n    case \"option-does-not-take-value\":\n      return `option does not accept a value: --${error.optionName ?? \"unknown\"}`;\n    case \"missing-option\":\n      return `missing required option: --${error.optionName ?? \"unknown\"}`;\n    case \"missing-content\":\n      return \"missing required option: --content or --content-file\";\n    case \"invalid-integer\":\n      return `invalid integer for --${error.optionName ?? \"unknown\"}`;\n    case \"invalid-number\":\n      return `invalid number for --${error.optionName ?? \"unknown\"}`;\n  }\n}\n\nfunction writeCliOutput(text: string = \"\"): void {\n  process.stdout.write(`${text}\\n`);\n}\n\nfunction usage(): string {\n  return [\n    \"Usage:\",\n    \"  engram-access browse [options]\",\n    \"  engram-access store [options]\",\n    \"\",\n    \"Browse options:\",\n    \"  --namespace <name>\",\n    \"  --principal <principal>\",\n    \"  --query <text>\",\n    \"  --category <name>\",\n    \"  --status <name>\",\n    \"  --sort <updated_desc|updated_asc|created_desc|created_asc>\",\n    \"  --limit <n>\",\n    \"  --offset <n>\",\n    \"\",\n    \"Store options:\",\n    \"  --namespace <name>\",\n    \"  --session-key <key>\",\n    \"  --principal <principal>\",\n    \"  --content <text> | --content-file <path>\",\n    \"  --category <name>\",\n    \"  --confidence <0-1>\",\n    \"  --tag <tag> (repeatable)\",\n    \"  --entity-ref <ref>\",\n    \"  --ttl <duration>\",\n    \"  --source-reason <text>\",\n    \"  --idempotency-key <key>\",\n    \"  --dry-run\",\n  ].join(\"\\n\");\n}\n\nconst COMMAND_SPECS: Record<CommandName, CommandSpec> = {\n  browse: {\n    valueOptions: new Set([\n      \"namespace\",\n      \"principal\",\n      \"query\",\n      \"category\",\n      \"status\",\n      \"sort\",\n      \"limit\",\n      \"offset\",\n    ]),\n    flagOptions: new Set(),\n  },\n  store: {\n    valueOptions: new Set([\n      \"namespace\",\n      \"session-key\",\n      \"principal\",\n      \"content\",\n      \"content-file\",\n      \"category\",\n      \"confidence\",\n      \"tag\",\n      \"entity-ref\",\n      \"ttl\",\n      \"source-reason\",\n      \"idempotency-key\",\n    ]),\n    flagOptions: new Set([\"dry-run\"]),\n  },\n};\n\nconst BROWSE_SORT_VALUES = Object.freeze([\n  \"updated_desc\",\n  \"updated_asc\",\n  \"created_desc\",\n  \"created_asc\",\n] as const);\n\ntype BrowseSort = (typeof BROWSE_SORT_VALUES)[number];\n\nfunction parseArgs(argv: string[]): ParsedArgs {\n  const [commandRaw, ...rest] = argv;\n  if (commandRaw !== \"browse\" && commandRaw !== \"store\") {\n    throw new UsageError(\"unsupported-command\");\n  }\n  const spec = COMMAND_SPECS[commandRaw];\n\n  const options: Record<string, string[]> = {};\n  const flags = new Set<string>();\n\n  for (let i = 0; i < rest.length; i += 1) {\n    const token = rest[i];\n    if (!token.startsWith(\"--\")) {\n      throw new UsageError(\"unexpected-positional\");\n    }\n    const rawKey = token.slice(2);\n    if (!rawKey) {\n      throw new UsageError(\"unknown-option\", rawKey);\n    }\n    const equalsIndex = rawKey.indexOf(\"=\");\n    const key = equalsIndex === -1 ? rawKey : rawKey.slice(0, equalsIndex);\n    const inlineValue = equalsIndex === -1 ? undefined : rawKey.slice(equalsIndex + 1);\n\n    if (!spec.valueOptions.has(key) && !spec.flagOptions.has(key)) {\n      throw new UsageError(\"unknown-option\", key);\n    }\n\n    if (spec.flagOptions.has(key)) {\n      if (inlineValue !== undefined) {\n        throw new UsageError(\"option-does-not-take-value\", key);\n      }\n      const next = rest[i + 1];\n      if (next && !next.startsWith(\"--\")) {\n        throw new UsageError(\"option-does-not-take-value\", key);\n      }\n      flags.add(key);\n      continue;\n    }\n\n    if (inlineValue !== undefined) {\n      if (inlineValue.length === 0) {\n        throw new UsageError(\"missing-option\", key);\n      }\n      if (!options[key]) {\n        options[key] = [];\n      }\n      options[key].push(inlineValue);\n      continue;\n    }\n\n    const next = rest[i + 1];\n    if (next === undefined || next.length === 0 || next.startsWith(\"--\")) {\n      throw new UsageError(\"missing-option\", key);\n    }\n    if (!options[key]) {\n      options[key] = [];\n    }\n    options[key].push(next);\n    i += 1;\n  }\n\n  return {\n    command: commandRaw,\n    options,\n    flags,\n  };\n}\n\nfunction getLastOption(args: ParsedArgs, name: string): string | undefined {\n  const values = args.options[name];\n  if (!values || values.length === 0) return undefined;\n  return values[values.length - 1];\n}\n\nfunction getAllOptions(args: ParsedArgs, name: string): string[] {\n  return args.options[name] ?? [];\n}\n\nfunction requireOption(args: ParsedArgs, name: string): string {\n  const value = getLastOption(args, name);\n  if (!value || value.trim().length === 0) {\n    throw new UsageError(\"missing-option\", name);\n  }\n  return value;\n}\n\nfunction parseIntegerOption(\n  args: ParsedArgs,\n  name: string,\n  options: { min?: number } = {},\n): number | undefined {\n  const raw = getLastOption(args, name);\n  if (!raw) return undefined;\n  const trimmed = raw.trim();\n  if (!/^[+-]?\\d+$/.test(trimmed)) {\n    throw new UsageError(\"invalid-integer\", name);\n  }\n  const value = Number(trimmed);\n  if (!Number.isSafeInteger(value)) {\n    throw new UsageError(\"invalid-integer\", name);\n  }\n  if (options.min !== undefined && value < options.min) {\n    throw new UsageError(\"invalid-option\", name, [`integer >= ${options.min}`]);\n  }\n  return value;\n}\n\nfunction parseBrowseSortOption(args: ParsedArgs, name: string): BrowseSort | undefined {\n  const raw = getLastOption(args, name);\n  if (!raw) return undefined;\n  if ((BROWSE_SORT_VALUES as readonly string[]).includes(raw)) {\n    return raw as BrowseSort;\n  }\n  throw new UsageError(\"invalid-option\", name, BROWSE_SORT_VALUES);\n}\n\nfunction parseFloatOption(\n  args: ParsedArgs,\n  name: string,\n  options: { min?: number; max?: number } = {},\n): number | undefined {\n  const raw = getLastOption(args, name);\n  if (!raw) return undefined;\n  const trimmed = raw.trim();\n  if (!/^[+-]?(?:(?:\\d+\\.?\\d*)|(?:\\.\\d+))(?:e[+-]?\\d+)?$/i.test(trimmed)) {\n    throw new UsageError(\"invalid-number\", name);\n  }\n  const value = Number(trimmed);\n  if (!Number.isFinite(value)) {\n    throw new UsageError(\"invalid-number\", name);\n  }\n  if (options.min !== undefined && value < options.min) {\n    throw new UsageError(\"invalid-number\", name);\n  }\n  if (options.max !== undefined && value > options.max) {\n    throw new UsageError(\"invalid-number\", name);\n  }\n  return value;\n}\n\nfunction loadPluginConfig(preferredId?: string): Record<string, unknown> {\n  const configPath =\n    expandOptionalPath(readEnvVar(\"OPENCLAW_CONFIG_PATH\")) ||\n    expandOptionalPath(readEnvVar(\"OPENCLAW_ENGRAM_CONFIG_PATH\")) ||\n    path.join(resolveHomeDir(), \".openclaw\", \"openclaw.json\");\n  const raw = JSON.parse(fs.readFileSync(configPath, \"utf8\"));\n  // Delegate slot → preferredId → PLUGIN_ID → LEGACY_PLUGIN_ID resolution to\n  // the shared helper so all config loaders stay in sync (#403).  Shim CLI\n  // callers pass `preferredId: \"openclaw-engram\"` so legacy shim installs\n  // target their own config block instead of falling through to the canonical\n  // \"openclaw-remnic\" entry.\n  const entry = resolveRemnicPluginEntry(raw, preferredId);\n  return (entry?.[\"config\"] as Record<string, unknown> | undefined) ?? {};\n}\n\nfunction buildRuntime(preferredId?: string): Runtime {\n  const config = parseConfig(loadPluginConfig(preferredId));\n  return {\n    config,\n    service: new EngramAccessService(new Orchestrator(config)),\n  };\n}\n\nasync function runBrowse(args: ParsedArgs, preferredId?: string): Promise<void> {\n  const browseArgs = {\n    namespace: getLastOption(args, \"namespace\"),\n    principal: getLastOption(args, \"principal\"),\n    query: getLastOption(args, \"query\"),\n    category: getLastOption(args, \"category\"),\n    status: getLastOption(args, \"status\"),\n    sort: parseBrowseSortOption(args, \"sort\"),\n    limit: parseIntegerOption(args, \"limit\", { min: 1 }),\n    offset: parseIntegerOption(args, \"offset\", { min: 0 }),\n  };\n  const { config, service } = buildRuntime(preferredId);\n  const request = {\n    namespace: browseArgs.namespace,\n    authenticatedPrincipal: browseArgs.principal ?? config.agentAccessHttp.principal,\n    query: browseArgs.query,\n    category: browseArgs.category,\n    status: browseArgs.status,\n    sort: browseArgs.sort,\n    limit: browseArgs.limit,\n    offset: browseArgs.offset,\n  };\n  const result = await service.memoryBrowse(request);\n  console.log(JSON.stringify(result, null, 2));\n}\n\nasync function runStore(args: ParsedArgs, preferredId?: string): Promise<void> {\n  const contentFile = getLastOption(args, \"content-file\");\n  const inlineContent = getLastOption(args, \"content\");\n  const content = contentFile\n    ? fs.readFileSync(expandTildePath(contentFile), \"utf8\")\n    : inlineContent;\n  if (!content || content.trim().length === 0) {\n    throw new UsageError(\"missing-content\");\n  }\n  const storeArgs = {\n    namespace: getLastOption(args, \"namespace\"),\n    sessionKey: getLastOption(args, \"session-key\"),\n    content,\n    category: requireOption(args, \"category\"),\n    confidence: parseFloatOption(args, \"confidence\", { min: 0, max: 1 }),\n    tags: getAllOptions(args, \"tag\"),\n    entityRef: getLastOption(args, \"entity-ref\"),\n    ttl: getLastOption(args, \"ttl\"),\n    sourceReason: getLastOption(args, \"source-reason\"),\n    idempotencyKey: getLastOption(args, \"idempotency-key\"),\n    dryRun: args.flags.has(\"dry-run\"),\n  };\n\n  const { config, service } = buildRuntime(preferredId);\n  const result = await service.memoryStore({\n    namespace: storeArgs.namespace,\n    sessionKey: storeArgs.sessionKey,\n    authenticatedPrincipal: getLastOption(args, \"principal\") ?? config.agentAccessHttp.principal,\n    content: storeArgs.content,\n    category: storeArgs.category,\n    confidence: storeArgs.confidence,\n    tags: storeArgs.tags,\n    entityRef: storeArgs.entityRef,\n    ttl: storeArgs.ttl,\n    sourceReason: storeArgs.sourceReason,\n    idempotencyKey: storeArgs.idempotencyKey,\n    dryRun: storeArgs.dryRun,\n  });\n  console.log(JSON.stringify(result, null, 2));\n}\n\nfunction expandOptionalPath(value: string | undefined): string | undefined {\n  return value === undefined ? undefined : expandTildePath(value);\n}\n\nexport async function main(\n  argv: string[] = process.argv.slice(2),\n  options: AccessCliOptions = {},\n): Promise<void> {\n  const args = parseArgs(argv);\n  if (args.command === \"browse\") {\n    await runBrowse(args, options.preferredId);\n    return;\n  }\n  await runStore(args, options.preferredId);\n}\n\nexport function sanitizeAccessCliErrorMessage(message: string): string {\n  return message.replace(\n    /\\b(openaiApiKey|localLlmApiKey)\\b(\\s*[:=]\\s*)(?:\"[^\"]*\"|'[^']*'|[^\\s,}\\]]+)/gi,\n    (_match, name: string, separator: string) => `${name}${separator}[redacted]`,\n  );\n}\n\nexport function printUsage(): void {\n  writeCliOutput(usage());\n}\n\nexport async function runCli(\n  argv: string[] = process.argv.slice(2),\n  options: AccessCliOptions = {},\n): Promise<void> {\n  try {\n    await main(argv, options);\n  } catch (error) {\n    if (error instanceof UsageError) {\n      writeCliOutput(formatUsageError(error));\n      writeCliOutput();\n      printUsage();\n      process.exit(1);\n    }\n\n    console.error(\"access-cli failed: runtime error\");\n    process.exit(1);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,QAAQ;AACf,OAAO,UAAU;AAiDjB,IAAM,aAAN,cAAyB,MAAM;AAAA,EAC7B,YACW,MACA,YACA,gBACT;AACA,UAAM,8BAA8B;AAJ3B;AACA;AACA;AAAA,EAGX;AAAA,EALW;AAAA,EACA;AAAA,EACA;AAIb;AAEA,SAAS,iBAAiB,OAA2B;AACnD,UAAQ,MAAM,MAAM;AAAA,IAClB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,qBAAqB,MAAM,cAAc,SAAS;AAAA,IAC3D,KAAK,kBAAkB;AACrB,YAAM,WAAW,MAAM,gBAAgB,SAAS,eAAe,MAAM,eAAe,KAAK,IAAI,CAAC,MAAM;AACpG,aAAO,uBAAuB,MAAM,cAAc,SAAS,GAAG,QAAQ;AAAA,IACxE;AAAA,IACA,KAAK;AACH,aAAO,qCAAqC,MAAM,cAAc,SAAS;AAAA,IAC3E,KAAK;AACH,aAAO,8BAA8B,MAAM,cAAc,SAAS;AAAA,IACpE,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,yBAAyB,MAAM,cAAc,SAAS;AAAA,IAC/D,KAAK;AACH,aAAO,wBAAwB,MAAM,cAAc,SAAS;AAAA,EAChE;AACF;AAEA,SAAS,eAAe,OAAe,IAAU;AAC/C,UAAQ,OAAO,MAAM,GAAG,IAAI;AAAA,CAAI;AAClC;AAEA,SAAS,QAAgB;AACvB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEA,IAAM,gBAAkD;AAAA,EACtD,QAAQ;AAAA,IACN,cAAc,oBAAI,IAAI;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,IACD,aAAa,oBAAI,IAAI;AAAA,EACvB;AAAA,EACA,OAAO;AAAA,IACL,cAAc,oBAAI,IAAI;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,IACD,aAAa,oBAAI,IAAI,CAAC,SAAS,CAAC;AAAA,EAClC;AACF;AAEA,IAAM,qBAAqB,OAAO,OAAO;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAU;AAIV,SAAS,UAAU,MAA4B;AAC7C,QAAM,CAAC,YAAY,GAAG,IAAI,IAAI;AAC9B,MAAI,eAAe,YAAY,eAAe,SAAS;AACrD,UAAM,IAAI,WAAW,qBAAqB;AAAA,EAC5C;AACA,QAAM,OAAO,cAAc,UAAU;AAErC,QAAM,UAAoC,CAAC;AAC3C,QAAM,QAAQ,oBAAI,IAAY;AAE9B,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,GAAG;AACvC,UAAM,QAAQ,KAAK,CAAC;AACpB,QAAI,CAAC,MAAM,WAAW,IAAI,GAAG;AAC3B,YAAM,IAAI,WAAW,uBAAuB;AAAA,IAC9C;AACA,UAAM,SAAS,MAAM,MAAM,CAAC;AAC5B,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,WAAW,kBAAkB,MAAM;AAAA,IAC/C;AACA,UAAM,cAAc,OAAO,QAAQ,GAAG;AACtC,UAAM,MAAM,gBAAgB,KAAK,SAAS,OAAO,MAAM,GAAG,WAAW;AACrE,UAAM,cAAc,gBAAgB,KAAK,SAAY,OAAO,MAAM,cAAc,CAAC;AAEjF,QAAI,CAAC,KAAK,aAAa,IAAI,GAAG,KAAK,CAAC,KAAK,YAAY,IAAI,GAAG,GAAG;AAC7D,YAAM,IAAI,WAAW,kBAAkB,GAAG;AAAA,IAC5C;AAEA,QAAI,KAAK,YAAY,IAAI,GAAG,GAAG;AAC7B,UAAI,gBAAgB,QAAW;AAC7B,cAAM,IAAI,WAAW,8BAA8B,GAAG;AAAA,MACxD;AACA,YAAMA,QAAO,KAAK,IAAI,CAAC;AACvB,UAAIA,SAAQ,CAACA,MAAK,WAAW,IAAI,GAAG;AAClC,cAAM,IAAI,WAAW,8BAA8B,GAAG;AAAA,MACxD;AACA,YAAM,IAAI,GAAG;AACb;AAAA,IACF;AAEA,QAAI,gBAAgB,QAAW;AAC7B,UAAI,YAAY,WAAW,GAAG;AAC5B,cAAM,IAAI,WAAW,kBAAkB,GAAG;AAAA,MAC5C;AACA,UAAI,CAAC,QAAQ,GAAG,GAAG;AACjB,gBAAQ,GAAG,IAAI,CAAC;AAAA,MAClB;AACA,cAAQ,GAAG,EAAE,KAAK,WAAW;AAC7B;AAAA,IACF;AAEA,UAAM,OAAO,KAAK,IAAI,CAAC;AACvB,QAAI,SAAS,UAAa,KAAK,WAAW,KAAK,KAAK,WAAW,IAAI,GAAG;AACpE,YAAM,IAAI,WAAW,kBAAkB,GAAG;AAAA,IAC5C;AACA,QAAI,CAAC,QAAQ,GAAG,GAAG;AACjB,cAAQ,GAAG,IAAI,CAAC;AAAA,IAClB;AACA,YAAQ,GAAG,EAAE,KAAK,IAAI;AACtB,SAAK;AAAA,EACP;AAEA,SAAO;AAAA,IACL,SAAS;AAAA,IACT;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,cAAc,MAAkB,MAAkC;AACzE,QAAM,SAAS,KAAK,QAAQ,IAAI;AAChC,MAAI,CAAC,UAAU,OAAO,WAAW,EAAG,QAAO;AAC3C,SAAO,OAAO,OAAO,SAAS,CAAC;AACjC;AAEA,SAAS,cAAc,MAAkB,MAAwB;AAC/D,SAAO,KAAK,QAAQ,IAAI,KAAK,CAAC;AAChC;AAEA,SAAS,cAAc,MAAkB,MAAsB;AAC7D,QAAM,QAAQ,cAAc,MAAM,IAAI;AACtC,MAAI,CAAC,SAAS,MAAM,KAAK,EAAE,WAAW,GAAG;AACvC,UAAM,IAAI,WAAW,kBAAkB,IAAI;AAAA,EAC7C;AACA,SAAO;AACT;AAEA,SAAS,mBACP,MACA,MACA,UAA4B,CAAC,GACT;AACpB,QAAM,MAAM,cAAc,MAAM,IAAI;AACpC,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,UAAU,IAAI,KAAK;AACzB,MAAI,CAAC,aAAa,KAAK,OAAO,GAAG;AAC/B,UAAM,IAAI,WAAW,mBAAmB,IAAI;AAAA,EAC9C;AACA,QAAM,QAAQ,OAAO,OAAO;AAC5B,MAAI,CAAC,OAAO,cAAc,KAAK,GAAG;AAChC,UAAM,IAAI,WAAW,mBAAmB,IAAI;AAAA,EAC9C;AACA,MAAI,QAAQ,QAAQ,UAAa,QAAQ,QAAQ,KAAK;AACpD,UAAM,IAAI,WAAW,kBAAkB,MAAM,CAAC,cAAc,QAAQ,GAAG,EAAE,CAAC;AAAA,EAC5E;AACA,SAAO;AACT;AAEA,SAAS,sBAAsB,MAAkB,MAAsC;AACrF,QAAM,MAAM,cAAc,MAAM,IAAI;AACpC,MAAI,CAAC,IAAK,QAAO;AACjB,MAAK,mBAAyC,SAAS,GAAG,GAAG;AAC3D,WAAO;AAAA,EACT;AACA,QAAM,IAAI,WAAW,kBAAkB,MAAM,kBAAkB;AACjE;AAEA,SAAS,iBACP,MACA,MACA,UAA0C,CAAC,GACvB;AACpB,QAAM,MAAM,cAAc,MAAM,IAAI;AACpC,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,UAAU,IAAI,KAAK;AACzB,MAAI,CAAC,oDAAoD,KAAK,OAAO,GAAG;AACtE,UAAM,IAAI,WAAW,kBAAkB,IAAI;AAAA,EAC7C;AACA,QAAM,QAAQ,OAAO,OAAO;AAC5B,MAAI,CAAC,OAAO,SAAS,KAAK,GAAG;AAC3B,UAAM,IAAI,WAAW,kBAAkB,IAAI;AAAA,EAC7C;AACA,MAAI,QAAQ,QAAQ,UAAa,QAAQ,QAAQ,KAAK;AACpD,UAAM,IAAI,WAAW,kBAAkB,IAAI;AAAA,EAC7C;AACA,MAAI,QAAQ,QAAQ,UAAa,QAAQ,QAAQ,KAAK;AACpD,UAAM,IAAI,WAAW,kBAAkB,IAAI;AAAA,EAC7C;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,aAA+C;AACvE,QAAM,aACJ,mBAAmB,WAAW,sBAAsB,CAAC,KACrD,mBAAmB,WAAW,6BAA6B,CAAC,KAC5D,KAAK,KAAK,eAAe,GAAG,aAAa,eAAe;AAC1D,QAAM,MAAM,KAAK,MAAM,GAAG,aAAa,YAAY,MAAM,CAAC;AAM1D,QAAM,QAAQ,yBAAyB,KAAK,WAAW;AACvD,SAAQ,QAAQ,QAAQ,KAA6C,CAAC;AACxE;AAEA,SAAS,aAAa,aAA+B;AACnD,QAAM,SAAS,YAAY,iBAAiB,WAAW,CAAC;AACxD,SAAO;AAAA,IACL;AAAA,IACA,SAAS,IAAI,oBAAoB,IAAI,aAAa,MAAM,CAAC;AAAA,EAC3D;AACF;AAEA,eAAe,UAAU,MAAkB,aAAqC;AAC9E,QAAM,aAAa;AAAA,IACjB,WAAW,cAAc,MAAM,WAAW;AAAA,IAC1C,WAAW,cAAc,MAAM,WAAW;AAAA,IAC1C,OAAO,cAAc,MAAM,OAAO;AAAA,IAClC,UAAU,cAAc,MAAM,UAAU;AAAA,IACxC,QAAQ,cAAc,MAAM,QAAQ;AAAA,IACpC,MAAM,sBAAsB,MAAM,MAAM;AAAA,IACxC,OAAO,mBAAmB,MAAM,SAAS,EAAE,KAAK,EAAE,CAAC;AAAA,IACnD,QAAQ,mBAAmB,MAAM,UAAU,EAAE,KAAK,EAAE,CAAC;AAAA,EACvD;AACA,QAAM,EAAE,QAAQ,QAAQ,IAAI,aAAa,WAAW;AACpD,QAAM,UAAU;AAAA,IACd,WAAW,WAAW;AAAA,IACtB,wBAAwB,WAAW,aAAa,OAAO,gBAAgB;AAAA,IACvE,OAAO,WAAW;AAAA,IAClB,UAAU,WAAW;AAAA,IACrB,QAAQ,WAAW;AAAA,IACnB,MAAM,WAAW;AAAA,IACjB,OAAO,WAAW;AAAA,IAClB,QAAQ,WAAW;AAAA,EACrB;AACA,QAAM,SAAS,MAAM,QAAQ,aAAa,OAAO;AACjD,UAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAC7C;AAEA,eAAe,SAAS,MAAkB,aAAqC;AAC7E,QAAM,cAAc,cAAc,MAAM,cAAc;AACtD,QAAM,gBAAgB,cAAc,MAAM,SAAS;AACnD,QAAM,UAAU,cACZ,GAAG,aAAa,gBAAgB,WAAW,GAAG,MAAM,IACpD;AACJ,MAAI,CAAC,WAAW,QAAQ,KAAK,EAAE,WAAW,GAAG;AAC3C,UAAM,IAAI,WAAW,iBAAiB;AAAA,EACxC;AACA,QAAM,YAAY;AAAA,IAChB,WAAW,cAAc,MAAM,WAAW;AAAA,IAC1C,YAAY,cAAc,MAAM,aAAa;AAAA,IAC7C;AAAA,IACA,UAAU,cAAc,MAAM,UAAU;AAAA,IACxC,YAAY,iBAAiB,MAAM,cAAc,EAAE,KAAK,GAAG,KAAK,EAAE,CAAC;AAAA,IACnE,MAAM,cAAc,MAAM,KAAK;AAAA,IAC/B,WAAW,cAAc,MAAM,YAAY;AAAA,IAC3C,KAAK,cAAc,MAAM,KAAK;AAAA,IAC9B,cAAc,cAAc,MAAM,eAAe;AAAA,IACjD,gBAAgB,cAAc,MAAM,iBAAiB;AAAA,IACrD,QAAQ,KAAK,MAAM,IAAI,SAAS;AAAA,EAClC;AAEA,QAAM,EAAE,QAAQ,QAAQ,IAAI,aAAa,WAAW;AACpD,QAAM,SAAS,MAAM,QAAQ,YAAY;AAAA,IACvC,WAAW,UAAU;AAAA,IACrB,YAAY,UAAU;AAAA,IACtB,wBAAwB,cAAc,MAAM,WAAW,KAAK,OAAO,gBAAgB;AAAA,IACnF,SAAS,UAAU;AAAA,IACnB,UAAU,UAAU;AAAA,IACpB,YAAY,UAAU;AAAA,IACtB,MAAM,UAAU;AAAA,IAChB,WAAW,UAAU;AAAA,IACrB,KAAK,UAAU;AAAA,IACf,cAAc,UAAU;AAAA,IACxB,gBAAgB,UAAU;AAAA,IAC1B,QAAQ,UAAU;AAAA,EACpB,CAAC;AACD,UAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAC7C;AAEA,SAAS,mBAAmB,OAA+C;AACzE,SAAO,UAAU,SAAY,SAAY,gBAAgB,KAAK;AAChE;AAEA,eAAsB,KACpB,OAAiB,QAAQ,KAAK,MAAM,CAAC,GACrC,UAA4B,CAAC,GACd;AACf,QAAM,OAAO,UAAU,IAAI;AAC3B,MAAI,KAAK,YAAY,UAAU;AAC7B,UAAM,UAAU,MAAM,QAAQ,WAAW;AACzC;AAAA,EACF;AACA,QAAM,SAAS,MAAM,QAAQ,WAAW;AAC1C;AAEO,SAAS,8BAA8B,SAAyB;AACrE,SAAO,QAAQ;AAAA,IACb;AAAA,IACA,CAAC,QAAQ,MAAc,cAAsB,GAAG,IAAI,GAAG,SAAS;AAAA,EAClE;AACF;AAEO,SAAS,aAAmB;AACjC,iBAAe,MAAM,CAAC;AACxB;AAEA,eAAsB,OACpB,OAAiB,QAAQ,KAAK,MAAM,CAAC,GACrC,UAA4B,CAAC,GACd;AACf,MAAI;AACF,UAAM,KAAK,MAAM,OAAO;AAAA,EAC1B,SAAS,OAAO;AACd,QAAI,iBAAiB,YAAY;AAC/B,qBAAe,iBAAiB,KAAK,CAAC;AACtC,qBAAe;AACf,iBAAW;AACX,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,YAAQ,MAAM,kCAAkC;AAChD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;","names":["next"]}
+{"version":3,"sources":["../src/access-cli.ts"],"sourcesContent":["import fs from \"node:fs\";\nimport path from \"node:path\";\nimport { parseConfig } from \"./config.js\";\nimport type { PluginConfig } from \"./types.js\";\nimport { Orchestrator } from \"./orchestrator.js\";\nimport { EngramAccessService } from \"./access-service.js\";\nimport { readEnvVar, resolveHomeDir } from \"./runtime/env.js\";\nimport { resolvePluginEntry } from \"./plugin-entry-resolver.js\";\nimport { expandTildePath } from \"./utils/path.js\";\n\nconst OPENCLAW_REMNIC_PLUGIN_IDS = [\"openclaw-remnic\", \"openclaw-engram\"] as const;\n\ntype CommandName = \"browse\" | \"store\";\n\ntype ParsedArgs = {\n  command: CommandName;\n  options: Record<string, string[]>;\n  flags: Set<string>;\n};\n\ntype CommandSpec = {\n  valueOptions: ReadonlySet<string>;\n  flagOptions: ReadonlySet<string>;\n};\n\ntype Runtime = {\n  config: PluginConfig;\n  service: EngramAccessService;\n};\n\nexport type AccessCliOptions = {\n  /**\n   * The calling plugin's own id (e.g. `\"openclaw-engram\"` when invoked by the\n   * shim binary).  Forwarded to the plugin-entry resolver so shim CLI\n   * users target their own `plugins.entries[\"openclaw-engram\"]` block instead\n   * of accidentally resolving to the canonical `\"openclaw-remnic\"` entry when\n   * `plugins.slots.memory` is unset (#403).\n   */\n  preferredId?: string;\n};\n\nfunction getOpenClawPluginEntries(raw: Record<string, unknown>): Record<string, unknown> | undefined {\n  const plugins =\n    raw[\"plugins\"] && typeof raw[\"plugins\"] === \"object\" && !Array.isArray(raw[\"plugins\"])\n      ? (raw[\"plugins\"] as Record<string, unknown>)\n      : undefined;\n  const entries =\n    plugins && plugins[\"entries\"] && typeof plugins[\"entries\"] === \"object\" && !Array.isArray(plugins[\"entries\"])\n      ? (plugins[\"entries\"] as Record<string, unknown>)\n      : undefined;\n  return entries;\n}\n\nfunction getOpenClawMemorySlotId(raw: Record<string, unknown>): string | undefined {\n  const plugins =\n    raw[\"plugins\"] && typeof raw[\"plugins\"] === \"object\" && !Array.isArray(raw[\"plugins\"])\n      ? (raw[\"plugins\"] as Record<string, unknown>)\n      : undefined;\n  const slots =\n    plugins && plugins[\"slots\"] && typeof plugins[\"slots\"] === \"object\" && !Array.isArray(plugins[\"slots\"])\n      ? (plugins[\"slots\"] as Record<string, unknown>)\n      : undefined;\n  const slotId = slots?.[\"memory\"];\n  return typeof slotId === \"string\" ? slotId : undefined;\n}\n\nfunction resolveOpenClawRemnicPluginEntry(raw: unknown, preferredId?: string): Record<string, unknown> | undefined {\n  return resolvePluginEntry(raw, {\n    candidateIds: OPENCLAW_REMNIC_PLUGIN_IDS,\n    preferredId,\n    getEntries: getOpenClawPluginEntries,\n    getSlotId: getOpenClawMemorySlotId,\n  });\n}\n\nfunction hasAllowedOpenClawRemnicPluginId(value: string): boolean {\n  return (OPENCLAW_REMNIC_PLUGIN_IDS as readonly string[]).includes(value);\n}\n\ntype UsageErrorKind =\n  | \"unsupported-command\"\n  | \"unexpected-positional\"\n  | \"unknown-option\"\n  | \"invalid-option\"\n  | \"option-does-not-take-value\"\n  | \"missing-option\"\n  | \"missing-content\"\n  | \"invalid-integer\"\n  | \"invalid-number\";\n\nclass UsageError extends Error {\n  constructor(\n    readonly kind: UsageErrorKind,\n    readonly optionName?: string,\n    readonly acceptedValues?: readonly string[],\n  ) {\n    super(\"invalid access-cli arguments\");\n  }\n}\n\nfunction formatUsageError(error: UsageError): string {\n  switch (error.kind) {\n    case \"unsupported-command\":\n      return \"unsupported command\";\n    case \"unexpected-positional\":\n      return \"unexpected positional argument\";\n    case \"unknown-option\":\n      return `unknown option: --${error.optionName ?? \"unknown\"}`;\n    case \"invalid-option\": {\n      const accepted = error.acceptedValues?.length ? `. Accepted: ${error.acceptedValues.join(\", \")}.` : \"\";\n      return `invalid value for --${error.optionName ?? \"unknown\"}${accepted}`;\n    }\n    case \"option-does-not-take-value\":\n      return `option does not accept a value: --${error.optionName ?? \"unknown\"}`;\n    case \"missing-option\":\n      return `missing required option: --${error.optionName ?? \"unknown\"}`;\n    case \"missing-content\":\n      return \"missing required option: --content or --content-file\";\n    case \"invalid-integer\":\n      return `invalid integer for --${error.optionName ?? \"unknown\"}`;\n    case \"invalid-number\":\n      return `invalid number for --${error.optionName ?? \"unknown\"}`;\n  }\n}\n\nfunction writeCliOutput(text: string = \"\"): void {\n  process.stdout.write(`${text}\\n`);\n}\n\nfunction usage(): string {\n  return [\n    \"Usage:\",\n    \"  engram-access browse [options]\",\n    \"  engram-access store [options]\",\n    \"\",\n    \"Browse options:\",\n    \"  --namespace <name>\",\n    \"  --principal <principal>\",\n    \"  --query <text>\",\n    \"  --category <name>\",\n    \"  --status <name>\",\n    \"  --sort <updated_desc|updated_asc|created_desc|created_asc>\",\n    \"  --limit <n>\",\n    \"  --offset <n>\",\n    \"\",\n    \"Store options:\",\n    \"  --namespace <name>\",\n    \"  --session-key <key>\",\n    \"  --principal <principal>\",\n    \"  --content <text> | --content-file <path>\",\n    \"  --category <name>\",\n    \"  --confidence <0-1>\",\n    \"  --tag <tag> (repeatable)\",\n    \"  --entity-ref <ref>\",\n    \"  --ttl <duration>\",\n    \"  --source-reason <text>\",\n    \"  --idempotency-key <key>\",\n    \"  --dry-run\",\n  ].join(\"\\n\");\n}\n\nconst COMMAND_SPECS: Record<CommandName, CommandSpec> = {\n  browse: {\n    valueOptions: new Set([\n      \"namespace\",\n      \"principal\",\n      \"query\",\n      \"category\",\n      \"status\",\n      \"sort\",\n      \"limit\",\n      \"offset\",\n    ]),\n    flagOptions: new Set(),\n  },\n  store: {\n    valueOptions: new Set([\n      \"namespace\",\n      \"session-key\",\n      \"principal\",\n      \"content\",\n      \"content-file\",\n      \"category\",\n      \"confidence\",\n      \"tag\",\n      \"entity-ref\",\n      \"ttl\",\n      \"source-reason\",\n      \"idempotency-key\",\n    ]),\n    flagOptions: new Set([\"dry-run\"]),\n  },\n};\n\nconst BROWSE_SORT_VALUES = Object.freeze([\n  \"updated_desc\",\n  \"updated_asc\",\n  \"created_desc\",\n  \"created_asc\",\n] as const);\n\ntype BrowseSort = (typeof BROWSE_SORT_VALUES)[number];\n\nfunction parseArgs(argv: string[]): ParsedArgs {\n  const [commandRaw, ...rest] = argv;\n  if (commandRaw !== \"browse\" && commandRaw !== \"store\") {\n    throw new UsageError(\"unsupported-command\");\n  }\n  const spec = COMMAND_SPECS[commandRaw];\n\n  const options: Record<string, string[]> = {};\n  const flags = new Set<string>();\n\n  for (let i = 0; i < rest.length; i += 1) {\n    const token = rest[i];\n    if (!token.startsWith(\"--\")) {\n      throw new UsageError(\"unexpected-positional\");\n    }\n    const rawKey = token.slice(2);\n    if (!rawKey) {\n      throw new UsageError(\"unknown-option\", rawKey);\n    }\n    const equalsIndex = rawKey.indexOf(\"=\");\n    const key = equalsIndex === -1 ? rawKey : rawKey.slice(0, equalsIndex);\n    const inlineValue = equalsIndex === -1 ? undefined : rawKey.slice(equalsIndex + 1);\n\n    if (!spec.valueOptions.has(key) && !spec.flagOptions.has(key)) {\n      throw new UsageError(\"unknown-option\", key);\n    }\n\n    if (spec.flagOptions.has(key)) {\n      if (inlineValue !== undefined) {\n        throw new UsageError(\"option-does-not-take-value\", key);\n      }\n      const next = rest[i + 1];\n      if (next && !next.startsWith(\"--\")) {\n        throw new UsageError(\"option-does-not-take-value\", key);\n      }\n      flags.add(key);\n      continue;\n    }\n\n    if (inlineValue !== undefined) {\n      if (inlineValue.length === 0) {\n        throw new UsageError(\"missing-option\", key);\n      }\n      if (!options[key]) {\n        options[key] = [];\n      }\n      options[key].push(inlineValue);\n      continue;\n    }\n\n    const next = rest[i + 1];\n    if (next === undefined || next.length === 0 || next.startsWith(\"--\")) {\n      throw new UsageError(\"missing-option\", key);\n    }\n    if (!options[key]) {\n      options[key] = [];\n    }\n    options[key].push(next);\n    i += 1;\n  }\n\n  return {\n    command: commandRaw,\n    options,\n    flags,\n  };\n}\n\nfunction getLastOption(args: ParsedArgs, name: string): string | undefined {\n  const values = args.options[name];\n  if (!values || values.length === 0) return undefined;\n  return values[values.length - 1];\n}\n\nfunction getAllOptions(args: ParsedArgs, name: string): string[] {\n  return args.options[name] ?? [];\n}\n\nfunction requireOption(args: ParsedArgs, name: string): string {\n  const value = getLastOption(args, name);\n  if (!value || value.trim().length === 0) {\n    throw new UsageError(\"missing-option\", name);\n  }\n  return value;\n}\n\nfunction parseIntegerOption(\n  args: ParsedArgs,\n  name: string,\n  options: { min?: number } = {},\n): number | undefined {\n  const raw = getLastOption(args, name);\n  if (!raw) return undefined;\n  const trimmed = raw.trim();\n  if (!/^[+-]?\\d+$/.test(trimmed)) {\n    throw new UsageError(\"invalid-integer\", name);\n  }\n  const value = Number(trimmed);\n  if (!Number.isSafeInteger(value)) {\n    throw new UsageError(\"invalid-integer\", name);\n  }\n  if (options.min !== undefined && value < options.min) {\n    throw new UsageError(\"invalid-option\", name, [`integer >= ${options.min}`]);\n  }\n  return value;\n}\n\nfunction parseBrowseSortOption(args: ParsedArgs, name: string): BrowseSort | undefined {\n  const raw = getLastOption(args, name);\n  if (!raw) return undefined;\n  if ((BROWSE_SORT_VALUES as readonly string[]).includes(raw)) {\n    return raw as BrowseSort;\n  }\n  throw new UsageError(\"invalid-option\", name, BROWSE_SORT_VALUES);\n}\n\nfunction parseFloatOption(\n  args: ParsedArgs,\n  name: string,\n  options: { min?: number; max?: number } = {},\n): number | undefined {\n  const raw = getLastOption(args, name);\n  if (!raw) return undefined;\n  const trimmed = raw.trim();\n  if (!/^[+-]?(?:(?:\\d+\\.?\\d*)|(?:\\.\\d+))(?:e[+-]?\\d+)?$/i.test(trimmed)) {\n    throw new UsageError(\"invalid-number\", name);\n  }\n  const value = Number(trimmed);\n  if (!Number.isFinite(value)) {\n    throw new UsageError(\"invalid-number\", name);\n  }\n  if (options.min !== undefined && value < options.min) {\n    throw new UsageError(\"invalid-number\", name);\n  }\n  if (options.max !== undefined && value > options.max) {\n    throw new UsageError(\"invalid-number\", name);\n  }\n  return value;\n}\n\nfunction loadPluginConfig(preferredId?: string): Record<string, unknown> {\n  const configPath =\n    expandOptionalPath(readEnvVar(\"OPENCLAW_CONFIG_PATH\")) ||\n    expandOptionalPath(readEnvVar(\"OPENCLAW_ENGRAM_CONFIG_PATH\")) ||\n    path.join(resolveHomeDir(), \".openclaw\", \"openclaw.json\");\n  const raw = JSON.parse(fs.readFileSync(configPath, \"utf8\"));\n  const slotId =\n    raw && typeof raw === \"object\" && !Array.isArray(raw)\n      ? getOpenClawMemorySlotId(raw as Record<string, unknown>)\n      : undefined;\n  if (typeof slotId === \"string\" && !hasAllowedOpenClawRemnicPluginId(slotId)) {\n    throw new Error(\n      `OpenClaw memory slot points to non-Remnic plugin \"${slotId}\"; refusing to use default Remnic access config.`,\n    );\n  }\n  // Delegate slot → preferredId → canonical → legacy resolution to the\n  // generic helper so all config loaders stay in sync (#403).  Shim CLI\n  // callers pass `preferredId: \"openclaw-engram\"` so legacy shim installs\n  // target their own config block instead of falling through to the canonical\n  // \"openclaw-remnic\" entry.\n  const entry = resolveOpenClawRemnicPluginEntry(raw, preferredId);\n  if (!entry) {\n    throw new Error(\n      \"OpenClaw config does not contain an allowed Remnic plugin entry; refusing to use default Remnic access config.\",\n    );\n  }\n  return (entry?.[\"config\"] as Record<string, unknown> | undefined) ?? {};\n}\n\nfunction buildRuntime(preferredId?: string): Runtime {\n  const config = parseConfig(loadPluginConfig(preferredId));\n  return {\n    config,\n    service: new EngramAccessService(new Orchestrator(config)),\n  };\n}\n\nasync function runBrowse(args: ParsedArgs, preferredId?: string): Promise<void> {\n  const browseArgs = {\n    namespace: getLastOption(args, \"namespace\"),\n    principal: getLastOption(args, \"principal\"),\n    query: getLastOption(args, \"query\"),\n    category: getLastOption(args, \"category\"),\n    status: getLastOption(args, \"status\"),\n    sort: parseBrowseSortOption(args, \"sort\"),\n    limit: parseIntegerOption(args, \"limit\", { min: 1 }),\n    offset: parseIntegerOption(args, \"offset\", { min: 0 }),\n  };\n  const { config, service } = buildRuntime(preferredId);\n  const request = {\n    namespace: browseArgs.namespace,\n    authenticatedPrincipal: browseArgs.principal ?? config.agentAccessHttp.principal,\n    query: browseArgs.query,\n    category: browseArgs.category,\n    status: browseArgs.status,\n    sort: browseArgs.sort,\n    limit: browseArgs.limit,\n    offset: browseArgs.offset,\n  };\n  const result = await service.memoryBrowse(request);\n  console.log(JSON.stringify(result, null, 2));\n}\n\nasync function runStore(args: ParsedArgs, preferredId?: string): Promise<void> {\n  const contentFile = getLastOption(args, \"content-file\");\n  const inlineContent = getLastOption(args, \"content\");\n  const content = contentFile\n    ? fs.readFileSync(expandTildePath(contentFile), \"utf8\")\n    : inlineContent;\n  if (!content || content.trim().length === 0) {\n    throw new UsageError(\"missing-content\");\n  }\n  const storeArgs = {\n    namespace: getLastOption(args, \"namespace\"),\n    sessionKey: getLastOption(args, \"session-key\"),\n    content,\n    category: requireOption(args, \"category\"),\n    confidence: parseFloatOption(args, \"confidence\", { min: 0, max: 1 }),\n    tags: getAllOptions(args, \"tag\"),\n    entityRef: getLastOption(args, \"entity-ref\"),\n    ttl: getLastOption(args, \"ttl\"),\n    sourceReason: getLastOption(args, \"source-reason\"),\n    idempotencyKey: getLastOption(args, \"idempotency-key\"),\n    dryRun: args.flags.has(\"dry-run\"),\n  };\n\n  const { config, service } = buildRuntime(preferredId);\n  const result = await service.memoryStore({\n    namespace: storeArgs.namespace,\n    sessionKey: storeArgs.sessionKey,\n    authenticatedPrincipal: getLastOption(args, \"principal\") ?? config.agentAccessHttp.principal,\n    content: storeArgs.content,\n    category: storeArgs.category,\n    confidence: storeArgs.confidence,\n    tags: storeArgs.tags,\n    entityRef: storeArgs.entityRef,\n    ttl: storeArgs.ttl,\n    sourceReason: storeArgs.sourceReason,\n    idempotencyKey: storeArgs.idempotencyKey,\n    dryRun: storeArgs.dryRun,\n  });\n  console.log(JSON.stringify(result, null, 2));\n}\n\nfunction expandOptionalPath(value: string | undefined): string | undefined {\n  return value === undefined ? undefined : expandTildePath(value);\n}\n\nexport async function main(\n  argv: string[] = process.argv.slice(2),\n  options: AccessCliOptions = {},\n): Promise<void> {\n  const args = parseArgs(argv);\n  if (args.command === \"browse\") {\n    await runBrowse(args, options.preferredId);\n    return;\n  }\n  await runStore(args, options.preferredId);\n}\n\nexport function sanitizeAccessCliErrorMessage(message: string): string {\n  return message.replace(\n    /\\b(openaiApiKey|localLlmApiKey)\\b(\\s*[:=]\\s*)(?:\"[^\"]*\"|'[^']*'|[^\\s,}\\]]+)/gi,\n    (_match, name: string, separator: string) => `${name}${separator}[redacted]`,\n  );\n}\n\nexport function printUsage(): void {\n  writeCliOutput(usage());\n}\n\nexport async function runCli(\n  argv: string[] = process.argv.slice(2),\n  options: AccessCliOptions = {},\n): Promise<void> {\n  try {\n    await main(argv, options);\n  } catch (error) {\n    if (error instanceof UsageError) {\n      writeCliOutput(formatUsageError(error));\n      writeCliOutput();\n      printUsage();\n      process.exit(1);\n    }\n\n    console.error(\"access-cli failed: runtime error\");\n    process.exit(1);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,QAAQ;AACf,OAAO,UAAU;AASjB,IAAM,6BAA6B,CAAC,mBAAmB,iBAAiB;AA+BxE,SAAS,yBAAyB,KAAmE;AACnG,QAAM,UACJ,IAAI,SAAS,KAAK,OAAO,IAAI,SAAS,MAAM,YAAY,CAAC,MAAM,QAAQ,IAAI,SAAS,CAAC,IAChF,IAAI,SAAS,IACd;AACN,QAAM,UACJ,WAAW,QAAQ,SAAS,KAAK,OAAO,QAAQ,SAAS,MAAM,YAAY,CAAC,MAAM,QAAQ,QAAQ,SAAS,CAAC,IACvG,QAAQ,SAAS,IAClB;AACN,SAAO;AACT;AAEA,SAAS,wBAAwB,KAAkD;AACjF,QAAM,UACJ,IAAI,SAAS,KAAK,OAAO,IAAI,SAAS,MAAM,YAAY,CAAC,MAAM,QAAQ,IAAI,SAAS,CAAC,IAChF,IAAI,SAAS,IACd;AACN,QAAM,QACJ,WAAW,QAAQ,OAAO,KAAK,OAAO,QAAQ,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,QAAQ,OAAO,CAAC,IACjG,QAAQ,OAAO,IAChB;AACN,QAAM,SAAS,QAAQ,QAAQ;AAC/B,SAAO,OAAO,WAAW,WAAW,SAAS;AAC/C;AAEA,SAAS,iCAAiC,KAAc,aAA2D;AACjH,SAAO,mBAAmB,KAAK;AAAA,IAC7B,cAAc;AAAA,IACd;AAAA,IACA,YAAY;AAAA,IACZ,WAAW;AAAA,EACb,CAAC;AACH;AAEA,SAAS,iCAAiC,OAAwB;AAChE,SAAQ,2BAAiD,SAAS,KAAK;AACzE;AAaA,IAAM,aAAN,cAAyB,MAAM;AAAA,EAC7B,YACW,MACA,YACA,gBACT;AACA,UAAM,8BAA8B;AAJ3B;AACA;AACA;AAAA,EAGX;AAAA,EALW;AAAA,EACA;AAAA,EACA;AAIb;AAEA,SAAS,iBAAiB,OAA2B;AACnD,UAAQ,MAAM,MAAM;AAAA,IAClB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,qBAAqB,MAAM,cAAc,SAAS;AAAA,IAC3D,KAAK,kBAAkB;AACrB,YAAM,WAAW,MAAM,gBAAgB,SAAS,eAAe,MAAM,eAAe,KAAK,IAAI,CAAC,MAAM;AACpG,aAAO,uBAAuB,MAAM,cAAc,SAAS,GAAG,QAAQ;AAAA,IACxE;AAAA,IACA,KAAK;AACH,aAAO,qCAAqC,MAAM,cAAc,SAAS;AAAA,IAC3E,KAAK;AACH,aAAO,8BAA8B,MAAM,cAAc,SAAS;AAAA,IACpE,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,yBAAyB,MAAM,cAAc,SAAS;AAAA,IAC/D,KAAK;AACH,aAAO,wBAAwB,MAAM,cAAc,SAAS;AAAA,EAChE;AACF;AAEA,SAAS,eAAe,OAAe,IAAU;AAC/C,UAAQ,OAAO,MAAM,GAAG,IAAI;AAAA,CAAI;AAClC;AAEA,SAAS,QAAgB;AACvB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEA,IAAM,gBAAkD;AAAA,EACtD,QAAQ;AAAA,IACN,cAAc,oBAAI,IAAI;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,IACD,aAAa,oBAAI,IAAI;AAAA,EACvB;AAAA,EACA,OAAO;AAAA,IACL,cAAc,oBAAI,IAAI;AAAA,MACpB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,IACD,aAAa,oBAAI,IAAI,CAAC,SAAS,CAAC;AAAA,EAClC;AACF;AAEA,IAAM,qBAAqB,OAAO,OAAO;AAAA,EACvC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAU;AAIV,SAAS,UAAU,MAA4B;AAC7C,QAAM,CAAC,YAAY,GAAG,IAAI,IAAI;AAC9B,MAAI,eAAe,YAAY,eAAe,SAAS;AACrD,UAAM,IAAI,WAAW,qBAAqB;AAAA,EAC5C;AACA,QAAM,OAAO,cAAc,UAAU;AAErC,QAAM,UAAoC,CAAC;AAC3C,QAAM,QAAQ,oBAAI,IAAY;AAE9B,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK,GAAG;AACvC,UAAM,QAAQ,KAAK,CAAC;AACpB,QAAI,CAAC,MAAM,WAAW,IAAI,GAAG;AAC3B,YAAM,IAAI,WAAW,uBAAuB;AAAA,IAC9C;AACA,UAAM,SAAS,MAAM,MAAM,CAAC;AAC5B,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,WAAW,kBAAkB,MAAM;AAAA,IAC/C;AACA,UAAM,cAAc,OAAO,QAAQ,GAAG;AACtC,UAAM,MAAM,gBAAgB,KAAK,SAAS,OAAO,MAAM,GAAG,WAAW;AACrE,UAAM,cAAc,gBAAgB,KAAK,SAAY,OAAO,MAAM,cAAc,CAAC;AAEjF,QAAI,CAAC,KAAK,aAAa,IAAI,GAAG,KAAK,CAAC,KAAK,YAAY,IAAI,GAAG,GAAG;AAC7D,YAAM,IAAI,WAAW,kBAAkB,GAAG;AAAA,IAC5C;AAEA,QAAI,KAAK,YAAY,IAAI,GAAG,GAAG;AAC7B,UAAI,gBAAgB,QAAW;AAC7B,cAAM,IAAI,WAAW,8BAA8B,GAAG;AAAA,MACxD;AACA,YAAMA,QAAO,KAAK,IAAI,CAAC;AACvB,UAAIA,SAAQ,CAACA,MAAK,WAAW,IAAI,GAAG;AAClC,cAAM,IAAI,WAAW,8BAA8B,GAAG;AAAA,MACxD;AACA,YAAM,IAAI,GAAG;AACb;AAAA,IACF;AAEA,QAAI,gBAAgB,QAAW;AAC7B,UAAI,YAAY,WAAW,GAAG;AAC5B,cAAM,IAAI,WAAW,kBAAkB,GAAG;AAAA,MAC5C;AACA,UAAI,CAAC,QAAQ,GAAG,GAAG;AACjB,gBAAQ,GAAG,IAAI,CAAC;AAAA,MAClB;AACA,cAAQ,GAAG,EAAE,KAAK,WAAW;AAC7B;AAAA,IACF;AAEA,UAAM,OAAO,KAAK,IAAI,CAAC;AACvB,QAAI,SAAS,UAAa,KAAK,WAAW,KAAK,KAAK,WAAW,IAAI,GAAG;AACpE,YAAM,IAAI,WAAW,kBAAkB,GAAG;AAAA,IAC5C;AACA,QAAI,CAAC,QAAQ,GAAG,GAAG;AACjB,cAAQ,GAAG,IAAI,CAAC;AAAA,IAClB;AACA,YAAQ,GAAG,EAAE,KAAK,IAAI;AACtB,SAAK;AAAA,EACP;AAEA,SAAO;AAAA,IACL,SAAS;AAAA,IACT;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,cAAc,MAAkB,MAAkC;AACzE,QAAM,SAAS,KAAK,QAAQ,IAAI;AAChC,MAAI,CAAC,UAAU,OAAO,WAAW,EAAG,QAAO;AAC3C,SAAO,OAAO,OAAO,SAAS,CAAC;AACjC;AAEA,SAAS,cAAc,MAAkB,MAAwB;AAC/D,SAAO,KAAK,QAAQ,IAAI,KAAK,CAAC;AAChC;AAEA,SAAS,cAAc,MAAkB,MAAsB;AAC7D,QAAM,QAAQ,cAAc,MAAM,IAAI;AACtC,MAAI,CAAC,SAAS,MAAM,KAAK,EAAE,WAAW,GAAG;AACvC,UAAM,IAAI,WAAW,kBAAkB,IAAI;AAAA,EAC7C;AACA,SAAO;AACT;AAEA,SAAS,mBACP,MACA,MACA,UAA4B,CAAC,GACT;AACpB,QAAM,MAAM,cAAc,MAAM,IAAI;AACpC,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,UAAU,IAAI,KAAK;AACzB,MAAI,CAAC,aAAa,KAAK,OAAO,GAAG;AAC/B,UAAM,IAAI,WAAW,mBAAmB,IAAI;AAAA,EAC9C;AACA,QAAM,QAAQ,OAAO,OAAO;AAC5B,MAAI,CAAC,OAAO,cAAc,KAAK,GAAG;AAChC,UAAM,IAAI,WAAW,mBAAmB,IAAI;AAAA,EAC9C;AACA,MAAI,QAAQ,QAAQ,UAAa,QAAQ,QAAQ,KAAK;AACpD,UAAM,IAAI,WAAW,kBAAkB,MAAM,CAAC,cAAc,QAAQ,GAAG,EAAE,CAAC;AAAA,EAC5E;AACA,SAAO;AACT;AAEA,SAAS,sBAAsB,MAAkB,MAAsC;AACrF,QAAM,MAAM,cAAc,MAAM,IAAI;AACpC,MAAI,CAAC,IAAK,QAAO;AACjB,MAAK,mBAAyC,SAAS,GAAG,GAAG;AAC3D,WAAO;AAAA,EACT;AACA,QAAM,IAAI,WAAW,kBAAkB,MAAM,kBAAkB;AACjE;AAEA,SAAS,iBACP,MACA,MACA,UAA0C,CAAC,GACvB;AACpB,QAAM,MAAM,cAAc,MAAM,IAAI;AACpC,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,UAAU,IAAI,KAAK;AACzB,MAAI,CAAC,oDAAoD,KAAK,OAAO,GAAG;AACtE,UAAM,IAAI,WAAW,kBAAkB,IAAI;AAAA,EAC7C;AACA,QAAM,QAAQ,OAAO,OAAO;AAC5B,MAAI,CAAC,OAAO,SAAS,KAAK,GAAG;AAC3B,UAAM,IAAI,WAAW,kBAAkB,IAAI;AAAA,EAC7C;AACA,MAAI,QAAQ,QAAQ,UAAa,QAAQ,QAAQ,KAAK;AACpD,UAAM,IAAI,WAAW,kBAAkB,IAAI;AAAA,EAC7C;AACA,MAAI,QAAQ,QAAQ,UAAa,QAAQ,QAAQ,KAAK;AACpD,UAAM,IAAI,WAAW,kBAAkB,IAAI;AAAA,EAC7C;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,aAA+C;AACvE,QAAM,aACJ,mBAAmB,WAAW,sBAAsB,CAAC,KACrD,mBAAmB,WAAW,6BAA6B,CAAC,KAC5D,KAAK,KAAK,eAAe,GAAG,aAAa,eAAe;AAC1D,QAAM,MAAM,KAAK,MAAM,GAAG,aAAa,YAAY,MAAM,CAAC;AAC1D,QAAM,SACJ,OAAO,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,GAAG,IAChD,wBAAwB,GAA8B,IACtD;AACN,MAAI,OAAO,WAAW,YAAY,CAAC,iCAAiC,MAAM,GAAG;AAC3E,UAAM,IAAI;AAAA,MACR,qDAAqD,MAAM;AAAA,IAC7D;AAAA,EACF;AAMA,QAAM,QAAQ,iCAAiC,KAAK,WAAW;AAC/D,MAAI,CAAC,OAAO;AACV,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,SAAQ,QAAQ,QAAQ,KAA6C,CAAC;AACxE;AAEA,SAAS,aAAa,aAA+B;AACnD,QAAM,SAAS,YAAY,iBAAiB,WAAW,CAAC;AACxD,SAAO;AAAA,IACL;AAAA,IACA,SAAS,IAAI,oBAAoB,IAAI,aAAa,MAAM,CAAC;AAAA,EAC3D;AACF;AAEA,eAAe,UAAU,MAAkB,aAAqC;AAC9E,QAAM,aAAa;AAAA,IACjB,WAAW,cAAc,MAAM,WAAW;AAAA,IAC1C,WAAW,cAAc,MAAM,WAAW;AAAA,IAC1C,OAAO,cAAc,MAAM,OAAO;AAAA,IAClC,UAAU,cAAc,MAAM,UAAU;AAAA,IACxC,QAAQ,cAAc,MAAM,QAAQ;AAAA,IACpC,MAAM,sBAAsB,MAAM,MAAM;AAAA,IACxC,OAAO,mBAAmB,MAAM,SAAS,EAAE,KAAK,EAAE,CAAC;AAAA,IACnD,QAAQ,mBAAmB,MAAM,UAAU,EAAE,KAAK,EAAE,CAAC;AAAA,EACvD;AACA,QAAM,EAAE,QAAQ,QAAQ,IAAI,aAAa,WAAW;AACpD,QAAM,UAAU;AAAA,IACd,WAAW,WAAW;AAAA,IACtB,wBAAwB,WAAW,aAAa,OAAO,gBAAgB;AAAA,IACvE,OAAO,WAAW;AAAA,IAClB,UAAU,WAAW;AAAA,IACrB,QAAQ,WAAW;AAAA,IACnB,MAAM,WAAW;AAAA,IACjB,OAAO,WAAW;AAAA,IAClB,QAAQ,WAAW;AAAA,EACrB;AACA,QAAM,SAAS,MAAM,QAAQ,aAAa,OAAO;AACjD,UAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAC7C;AAEA,eAAe,SAAS,MAAkB,aAAqC;AAC7E,QAAM,cAAc,cAAc,MAAM,cAAc;AACtD,QAAM,gBAAgB,cAAc,MAAM,SAAS;AACnD,QAAM,UAAU,cACZ,GAAG,aAAa,gBAAgB,WAAW,GAAG,MAAM,IACpD;AACJ,MAAI,CAAC,WAAW,QAAQ,KAAK,EAAE,WAAW,GAAG;AAC3C,UAAM,IAAI,WAAW,iBAAiB;AAAA,EACxC;AACA,QAAM,YAAY;AAAA,IAChB,WAAW,cAAc,MAAM,WAAW;AAAA,IAC1C,YAAY,cAAc,MAAM,aAAa;AAAA,IAC7C;AAAA,IACA,UAAU,cAAc,MAAM,UAAU;AAAA,IACxC,YAAY,iBAAiB,MAAM,cAAc,EAAE,KAAK,GAAG,KAAK,EAAE,CAAC;AAAA,IACnE,MAAM,cAAc,MAAM,KAAK;AAAA,IAC/B,WAAW,cAAc,MAAM,YAAY;AAAA,IAC3C,KAAK,cAAc,MAAM,KAAK;AAAA,IAC9B,cAAc,cAAc,MAAM,eAAe;AAAA,IACjD,gBAAgB,cAAc,MAAM,iBAAiB;AAAA,IACrD,QAAQ,KAAK,MAAM,IAAI,SAAS;AAAA,EAClC;AAEA,QAAM,EAAE,QAAQ,QAAQ,IAAI,aAAa,WAAW;AACpD,QAAM,SAAS,MAAM,QAAQ,YAAY;AAAA,IACvC,WAAW,UAAU;AAAA,IACrB,YAAY,UAAU;AAAA,IACtB,wBAAwB,cAAc,MAAM,WAAW,KAAK,OAAO,gBAAgB;AAAA,IACnF,SAAS,UAAU;AAAA,IACnB,UAAU,UAAU;AAAA,IACpB,YAAY,UAAU;AAAA,IACtB,MAAM,UAAU;AAAA,IAChB,WAAW,UAAU;AAAA,IACrB,KAAK,UAAU;AAAA,IACf,cAAc,UAAU;AAAA,IACxB,gBAAgB,UAAU;AAAA,IAC1B,QAAQ,UAAU;AAAA,EACpB,CAAC;AACD,UAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAC7C;AAEA,SAAS,mBAAmB,OAA+C;AACzE,SAAO,UAAU,SAAY,SAAY,gBAAgB,KAAK;AAChE;AAEA,eAAsB,KACpB,OAAiB,QAAQ,KAAK,MAAM,CAAC,GACrC,UAA4B,CAAC,GACd;AACf,QAAM,OAAO,UAAU,IAAI;AAC3B,MAAI,KAAK,YAAY,UAAU;AAC7B,UAAM,UAAU,MAAM,QAAQ,WAAW;AACzC;AAAA,EACF;AACA,QAAM,SAAS,MAAM,QAAQ,WAAW;AAC1C;AAEO,SAAS,8BAA8B,SAAyB;AACrE,SAAO,QAAQ;AAAA,IACb;AAAA,IACA,CAAC,QAAQ,MAAc,cAAsB,GAAG,IAAI,GAAG,SAAS;AAAA,EAClE;AACF;AAEO,SAAS,aAAmB;AACjC,iBAAe,MAAM,CAAC;AACxB;AAEA,eAAsB,OACpB,OAAiB,QAAQ,KAAK,MAAM,CAAC,GACrC,UAA4B,CAAC,GACd;AACf,MAAI;AACF,UAAM,KAAK,MAAM,OAAO;AAAA,EAC1B,SAAS,OAAO;AACd,QAAI,iBAAiB,YAAY;AAC/B,qBAAe,iBAAiB,KAAK,CAAC;AACtC,qBAAe;AACf,iBAAW;AACX,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,YAAQ,MAAM,kCAAkC;AAChD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;","names":["next"]}

package/dist/access-http.d.ts

@@ -1,16 +1,18 @@
 import { IncomingMessage } from 'node:http';
-import { E as EngramAccessService } from './access-service-CkZyb35d.js';
+import { E as EngramAccessService } from './access-service-CZfksQuS.js';
 import { ResolvedIdentity } from './adapters/types.js';
 import { AdapterRegistry } from './adapters/registry.js';
 import './storage.js';
 import './page-versioning.js';
 import './consolidation-operator.js';
 import './types.js';
+import './types-BliCnURB.js';
 import './index-DJ9QWMw-.js';
 import './memory-projection-store.js';
 import './maintenance/memory-governance.js';
 import './runtime/better-sqlite.js';
 import 'better-sqlite3';
+import './types-B1VHaf2w.js';
 import './recall-explain-renderer.js';
 import './recall-state.js';
 import './recall-xray.js';
@@ -19,7 +21,7 @@ import './user-model.js';
 import './recall-audit-anomaly.js';
 import './recall-audit.js';
 import './explicit-capture.js';
-import './orchestrator-DuWl9Hwx.js';
+import './orchestrator-Co9nxRLF.js';
 import './buffer.js';
 import './search/port.js';
 import './transcript.js';
@@ -28,13 +30,14 @@ import './summarizer.js';
 import './model-registry.js';
 import './local-llm.js';
 import './fallback-llm.js';
+import './resolve-provider-secret.js';
 import './live-connectors-runner.js';
 import './framework-CyHYDcri.js';
 import './relevance.js';
 import './negative.js';
 import './session-observer-state.js';
 import './embedding-fallback.js';
-import './semantic-VwGI14Ok.js';
+import './semantic-SLAa_prH.js';
 import './replay/types.js';
 import './lcm/engine.js';
 import './lcm/archive.js';
@@ -46,7 +49,7 @@ import './connectors/codex-materialize.js';
 import './logger.js';
 import './conversation-index/backend.js';
 import './conversation-index/chunker.js';
-import './faiss-adapter-CzPghc4C.js';
+import './faiss-adapter-BHecI1fF.js';
 import './runtime/child-process.js';
 import './shared-context/manager.js';
 import 'zod';
@@ -135,7 +138,7 @@ declare class EngramAccessHttpServer {
     resolveAdapterIdentity(req: IncomingMessage): ResolvedIdentity | null;
     /** Cache for per-request identity resolution (avoids double adapter resolution) */
     private identityCache;
-    /** Resolve principal and namespace from request headers and adapter identity */
+    /** Resolve principal, namespace, and session key from request headers and adapter identity */
     private resolveRequestIdentity;
     private resolveRequestPrincipal;
     /** Resolve namespace: only use the explicit body value. Adapter-inferred namespace
@@ -153,6 +156,7 @@ declare class EngramAccessHttpServer {
      */
     private resolveRecallDisclosure;
     private handle;
+    private createRequestAbortSignal;
     /**
      * SSE handler for /engram/v1/graph/events.
      *