@remnic/core 9.14.0 → 9.15.1

package/dist/{chunk-7HZMTXXB.js → chunk-RWSLO24I.js}

@@ -38,7 +38,7 @@ import {
   readMaybeEncryptedLines,
   readMemoryActionEventRowsFromLines,
   serializeLifecycleAppendPayload
-} from "./chunk-AVPXXV6J.js";
+} from "./chunk-XKGPIWGI.js";
 import {
   namespaceIdentityFromToken
 } from "./chunk-EGGE52UU.js";
@@ -49,6 +49,11 @@ import {
 import {
   withHeldFileLock
 } from "./chunk-WL5EBRDH.js";
+import {
+  inferMemoryStatus,
+  isArchivedMemoryPath,
+  toMemoryPathRel
+} from "./chunk-ILGC6JH6.js";
 import {
   normalizeProjectionPreview,
   normalizeProjectionTags
@@ -61,11 +66,6 @@ import {
   readProjectedMemoryTimeline,
   updateProjectedMemoryPath
 } from "./chunk-347WD2LE.js";
-import {
-  inferMemoryStatus,
-  isArchivedMemoryPath,
-  toMemoryPathRel
-} from "./chunk-ILGC6JH6.js";
 import {
   rotateMarkdownFileToArchive
 } from "./chunk-DM2T26WE.js";
@@ -128,14 +128,14 @@ import {
   reconcileProvenanceRead,
   serializeProvenanceFields
 } from "./chunk-5I4M26Q7.js";
-import {
-  sanitizeMemoryContent
-} from "./chunk-5GKPFL3S.js";
 import {
   matchEntitySchemaSection,
   normalizeEntityStructuredSection,
   sortStructuredSectionsBySchema
 } from "./chunk-4DJQYKMN.js";
+import {
+  sanitizeMemoryContent
+} from "./chunk-5GKPFL3S.js";
 import {
   parseFlexibleIsoTimestamp
 } from "./chunk-P7FMDTKL.js";
@@ -8506,4 +8506,4 @@ export {
   isValidBufferSurpriseEvent,
   StorageManager3 as StorageManager
 };
-//# sourceMappingURL=chunk-7HZMTXXB.js.map
+//# sourceMappingURL=chunk-RWSLO24I.js.map

package/dist/{chunk-UDIJMITR.js → chunk-SDZWOEZH.js}

@@ -16,10 +16,10 @@ import {
   processChatMessage,
   sessionBelongsToPrincipal,
   subscribeChatTranscript
-} from "./chunk-XRNU7OEQ.js";
+} from "./chunk-ZNFVYUYF.js";
 import {
   RelayMissionStoreError
-} from "./chunk-I4NJ2CDY.js";
+} from "./chunk-RRHEV5HA.js";
 import {
   executeResolution,
   isValidResolutionVerb
@@ -31,20 +31,18 @@ import {
 } from "./chunk-35NN3ZFA.js";
 import {
   validateRequest
-} from "./chunk-TC5HBIIT.js";
+} from "./chunk-HBYQAOED.js";
 import {
-  getOperation
-} from "./chunk-KF5EUVKQ.js";
-import {
-  CorrectionContractError
-} from "./chunk-3HYWNJDA.js";
+  CorrectionContractError,
+  getOperation,
+  resolveQueryNamespaceWritablePreflight
+} from "./chunk-HWFK24UD.js";
 import {
   isTrustZoneName
 } from "./chunk-JGSKJHF7.js";
 import {
-  projectTagProjectId,
-  resolveNamespacePreflight
-} from "./chunk-MMGGVZ4Q.js";
+  projectTagProjectId
+} from "./chunk-7VZWZVYG.js";
 import {
   subscribeGraphEvents
 } from "./chunk-DEUNUKTD.js";
@@ -53,7 +51,6 @@ import {
 } from "./chunk-YVKF3HEW.js";
 import {
   assertOperationAllowed,
-  capabilityAllowsOp,
   enforceNamespaceAllowList,
   isCapabilityRestricted,
   tokenCapabilityStore
@@ -1209,15 +1206,18 @@ var EngramAccessHttpServer = class {
       return;
     }
     if (req.method === "GET" && pathname === "/engram/v1/namespace/writable") {
-      const preflightOp = getOperation("namespace_writable");
-      const caps = tokenCapabilityStore.getStore();
-      if (!(preflightOp?.spec.allowedByOps ?? []).some((op) => capabilityAllowsOp(caps, op))) {
-        throw new EngramAccessForbiddenError("token is not permitted to run the namespace preflight");
-      }
-      const ns = parsed.searchParams.get("namespace") || void 0;
-      const sk = parsed.searchParams.get("session") || void 0;
-      const writeOp = parsed.searchParams.get("op") === "memory_store" ? "memory_store" : "observe";
-      this.respondJson(res, 200, resolveNamespacePreflight(caps, ns, sk, this.resolveRequestPrincipal(req), this.service.configRef, writeOp));
+      if (!getOperation("namespace_writable")) throw new Error("namespace_writable operation is not registered");
+      this.respondJson(
+        res,
+        200,
+        await resolveQueryNamespaceWritablePreflight(
+          tokenCapabilityStore.getStore(),
+          parsed.searchParams,
+          this.resolveRequestPrincipal(req),
+          this.service.configRef.defaultNamespace,
+          (request) => this.service.namespaceWritablePreflight(request)
+        )
+      );
       return;
     }
     if (req.method === "GET" && (pathname === "/engram/v1/wearables/status" || pathname === "/remnic/v1/wearables/status")) {
@@ -3132,4 +3132,4 @@ function positiveIntQueryParam(value, label) {
 export {
   EngramAccessHttpServer
 };
-//# sourceMappingURL=chunk-UDIJMITR.js.map
+//# sourceMappingURL=chunk-SDZWOEZH.js.map