@remnic/core 9.22.0 → 9.22.2

package/dist/{chunk-7S5OMI76.js → chunk-WS32QRLO.js}

@@ -1,12 +1,12 @@
 import {
   WearablesInputError
 } from "./chunk-V7IZKJI3.js";
-import {
-  WriteRateLimiter
-} from "./chunk-MKQBXQKU.js";
 import {
   AdapterRegistry
 } from "./chunk-JBPKEARU.js";
+import {
+  WriteRateLimiter
+} from "./chunk-MKQBXQKU.js";
 import {
   EngramMcpServer,
   MCP_SUPPORTED_PROTOCOL_VERSIONS,
@@ -16,10 +16,10 @@ import {
   processChatMessage,
   sessionBelongsToPrincipal,
   subscribeChatTranscript
-} from "./chunk-QTO2FGBT.js";
+} from "./chunk-OUW4PAY4.js";
 import {
   RelayMissionStoreError
-} from "./chunk-N47ZWQBO.js";
+} from "./chunk-G2NSSQES.js";
 import {
   validateRequest
 } from "./chunk-HBYQAOED.js";
@@ -36,7 +36,7 @@ import {
   CorrectionContractError,
   getOperation,
   resolveQueryNamespaceWritablePreflight
-} from "./chunk-6ANPNUVL.js";
+} from "./chunk-IIXLB5E7.js";
 import {
   isTrustZoneName
 } from "./chunk-JGSKJHF7.js";
@@ -48,7 +48,7 @@ import {
 } from "./chunk-DEUNUKTD.js";
 import {
   isRecallDisclosure
-} from "./chunk-6NZ7U4R4.js";
+} from "./chunk-SCOT5DTA.js";
 import {
   assertOperationAllowed,
   enforceNamespaceAllowList,
@@ -85,6 +85,70 @@ import path from "path";
 import { fileURLToPath, URL } from "url";
 import { gunzipSync } from "zlib";
 
+// src/meetings/errors.ts
+var MeetingsInputError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "MeetingsInputError";
+  }
+};
+
+// src/meetings/http-glue.ts
+function respondMeetingsError(respondJson2, res, err) {
+  if (err instanceof MeetingsInputError) {
+    respondJson2(res, 400, { error: "invalid_request", code: "invalid_request", message: err.message });
+    return true;
+  }
+  return false;
+}
+function decodeMeetingIdSegment(raw) {
+  try {
+    return decodeURIComponent(raw);
+  } catch {
+    throw new MeetingsInputError("meeting id path segment is not valid percent-encoded input");
+  }
+}
+async function respondMeetingsList(res, respondJson2, service, date, scope) {
+  try {
+    respondJson2(res, 200, await service.meetingsList(date, scope));
+  } catch (err) {
+    if (respondMeetingsError(respondJson2, res, err)) return;
+    throw err;
+  }
+}
+async function respondMeetingsGet(res, respondJson2, service, rawId, scope) {
+  try {
+    respondJson2(res, 200, await service.meetingsGet(decodeMeetingIdSegment(rawId), scope));
+  } catch (err) {
+    if (respondMeetingsError(respondJson2, res, err)) return;
+    throw err;
+  }
+}
+async function respondMeetingsBuild(req, res, respondJson2, readJsonBody, service, quota, scopeFor) {
+  const body = await readJsonBody(req);
+  const raw = body.date;
+  if (raw !== void 0 && raw !== null && raw !== "" && typeof raw !== "string") {
+    throw new EngramAccessInputError(`date must be a string (got ${JSON.stringify(raw)})`);
+  }
+  const date = raw === void 0 || raw === null || raw === "" ? void 0 : raw;
+  if (date === void 0) {
+    throw new EngramAccessInputError("date is required (YYYY-MM-DD)");
+  }
+  quota.enforceQuota();
+  const scope = scopeFor?.(
+    typeof body.namespace === "string" ? body.namespace : void 0,
+    typeof body.sessionKey === "string" ? body.sessionKey : void 0
+  );
+  try {
+    const result = await service.meetingsBuild(date, scope);
+    quota.recordHit();
+    respondJson2(res, 200, result);
+  } catch (err) {
+    if (respondMeetingsError(respondJson2, res, err)) return;
+    throw err;
+  }
+}
+
 // src/chat/chat-http.ts
 import { createHash } from "crypto";
 var chatInFlight = /* @__PURE__ */ new Map();
@@ -387,9 +451,7 @@ function decodeRelayMissionIdSegment(raw) {
   try {
     return decodeURIComponent(raw);
   } catch {
-    throw new EngramAccessInputError(
-      "missionId path segment is not valid percent-encoded input"
-    );
+    throw new EngramAccessInputError("missionId path segment is not valid percent-encoded input");
   }
 }
 function rejectBlankRelayNamespace(value) {
@@ -692,16 +754,18 @@ var EngramAccessHttpServer = class {
   resolveRequestPrincipal(req) {
     return this.resolveRequestIdentity(req).principal;
   }
+  /** Caller scope for wearables/meetings ops (issue #2123): request principal +
+   *  gated namespace + optional sessionKey, so reads/writes resolve to the caller
+   *  namespace instead of the machine default. */
+  wearablesScope(req, namespace, sessionKey) {
+    return { authenticatedPrincipal: this.resolveRequestPrincipal(req), namespace: this.resolveNamespace(req, namespace), ...sessionKey ? { sessionKey } : {} };
+  }
   /** Resolve namespace: only use the explicit body value. Adapter-inferred namespace
    *  is intentionally NOT used as a fallback for REST requests — omitting namespace
    *  should default to the server's global namespace, not silently scope to an adapter. */
   resolveNamespace(_req, bodyNamespace) {
     const namespace = bodyNamespace || void 0;
-    enforceNamespaceAllowList(
-      tokenCapabilityStore.getStore(),
-      namespace,
-      this.service.configRef?.defaultNamespace
-    );
+    enforceNamespaceAllowList(tokenCapabilityStore.getStore(), namespace, this.service.configRef?.defaultNamespace);
     return namespace;
   }
   /**
@@ -1128,11 +1192,7 @@ var EngramAccessHttpServer = class {
         req,
         namespaceParam && namespaceParam.length > 0 ? namespaceParam : void 0
       );
-      const payload = await this.service.recallTierExplain(
-        sessionKey,
-        namespace,
-        this.resolveRequestPrincipal(req)
-      );
+      const payload = await this.service.recallTierExplain(sessionKey, namespace, this.resolveRequestPrincipal(req));
       this.respondJson(res, 200, payload);
       return;
     }
@@ -1222,7 +1282,7 @@ var EngramAccessHttpServer = class {
     }
     if (req.method === "GET" && (pathname === "/engram/v1/wearables/status" || pathname === "/remnic/v1/wearables/status")) {
       this.enforceTokenOp("wearables_status");
-      this.respondJson(res, 200, await this.service.wearablesStatus());
+      this.respondJson(res, 200, await this.service.wearablesStatus(this.wearablesScope(req, parsed.searchParams.get("namespace") ?? void 0, parsed.searchParams.get("sessionKey") ?? void 0)));
       return;
     }
     if (req.method === "POST" && (pathname === "/engram/v1/wearables/sync" || pathname === "/remnic/v1/wearables/sync")) {
@@ -1245,12 +1305,7 @@ var EngramAccessHttpServer = class {
         );
       }
       try {
-        const summaries = await this.service.wearablesSync({
-          source,
-          date,
-          days,
-          forceMemories: body.forceMemories === true
-        });
+        const summaries = await this.service.wearablesSync({ source, date, days, forceMemories: body.forceMemories === true, ...this.wearablesScope(req, optionalQueryString(body.namespace, "namespace"), optionalQueryString(body.sessionKey, "sessionKey")) });
         this.respondJson(res, 200, { summaries });
       } catch (err) {
         if (this.respondWearablesError(res, err)) return;
@@ -1268,10 +1323,7 @@ var EngramAccessHttpServer = class {
       }
       const sourceParam = parsed.searchParams.get("source");
       try {
-        const transcripts = await this.service.wearablesTranscriptDay({
-          date,
-          source: sourceParam && sourceParam.length > 0 ? sourceParam : void 0
-        });
+        const transcripts = await this.service.wearablesTranscriptDay({ date, source: sourceParam && sourceParam.length > 0 ? sourceParam : void 0, ...this.wearablesScope(req, parsed.searchParams.get("namespace") ?? void 0, parsed.searchParams.get("sessionKey") ?? void 0) });
         this.respondJson(res, 200, { transcripts });
       } catch (err) {
         if (this.respondWearablesError(res, err)) return;
@@ -1288,13 +1340,7 @@ var EngramAccessHttpServer = class {
         );
       }
       try {
-        const results = await this.service.wearablesTranscriptSearch({
-          query: queryParam,
-          source: nonEmptyQueryParam(parsed.searchParams.get("source")),
-          from: nonEmptyQueryParam(parsed.searchParams.get("from")),
-          to: nonEmptyQueryParam(parsed.searchParams.get("to")),
-          limit: positiveIntQueryParam(parsed.searchParams.get("limit"), "limit")
-        });
+        const results = await this.service.wearablesTranscriptSearch({ query: queryParam, source: nonEmptyQueryParam(parsed.searchParams.get("source")), from: nonEmptyQueryParam(parsed.searchParams.get("from")), to: nonEmptyQueryParam(parsed.searchParams.get("to")), limit: positiveIntQueryParam(parsed.searchParams.get("limit"), "limit"), ...this.wearablesScope(req, parsed.searchParams.get("namespace") ?? void 0, parsed.searchParams.get("sessionKey") ?? void 0) });
         this.respondJson(res, 200, { results });
       } catch (err) {
         if (this.respondWearablesError(res, err)) return;
@@ -1305,11 +1351,7 @@ var EngramAccessHttpServer = class {
     if (req.method === "GET" && (pathname === "/engram/v1/wearables/memories" || pathname === "/remnic/v1/wearables/memories")) {
       this.enforceTokenOp("transcript_memories");
       try {
-        const memories = await this.service.wearablesTranscriptMemories({
-          source: nonEmptyQueryParam(parsed.searchParams.get("source")),
-          date: nonEmptyQueryParam(parsed.searchParams.get("date")),
-          limit: positiveIntQueryParam(parsed.searchParams.get("limit"), "limit")
-        });
+        const memories = await this.service.wearablesTranscriptMemories({ source: nonEmptyQueryParam(parsed.searchParams.get("source")), date: nonEmptyQueryParam(parsed.searchParams.get("date")), limit: positiveIntQueryParam(parsed.searchParams.get("limit"), "limit"), ...this.wearablesScope(req, parsed.searchParams.get("namespace") ?? void 0, parsed.searchParams.get("sessionKey") ?? void 0) });
         this.respondJson(res, 200, { memories });
       } catch (err) {
         if (this.respondWearablesError(res, err)) return;
@@ -1317,6 +1359,28 @@ var EngramAccessHttpServer = class {
       }
       return;
     }
+    if (req.method === "GET" && (pathname === "/engram/v1/meetings" || pathname === "/remnic/v1/meetings")) {
+      this.enforceTokenOp("meetings_list");
+      await respondMeetingsList(res, this.respondJson.bind(this), this.service, nonEmptyQueryParam(parsed.searchParams.get("date")), this.wearablesScope(req, parsed.searchParams.get("namespace") ?? void 0, parsed.searchParams.get("sessionKey") ?? void 0));
+      return;
+    }
+    if (req.method === "POST" && (pathname === "/engram/v1/meetings/build" || pathname === "/remnic/v1/meetings/build")) {
+      this.enforceTokenOp("meetings_build");
+      await respondMeetingsBuild(req, res, this.respondJson.bind(this), this.readJsonBody.bind(this), this.service, { enforceQuota: () => this.ensureWriteRateLimitAvailable(req), recordHit: () => this.recordWriteRateLimitHit(req) }, (ns, sk) => this.wearablesScope(req, ns, sk));
+      return;
+    }
+    const meetingGetEngram = /^\/engram\/v1\/meetings\/([^/]+)$/.exec(pathname);
+    if (req.method === "GET" && meetingGetEngram) {
+      this.enforceTokenOp("meetings_get");
+      await respondMeetingsGet(res, this.respondJson.bind(this), this.service, meetingGetEngram[1] ?? "", this.wearablesScope(req, parsed.searchParams.get("namespace") ?? void 0, parsed.searchParams.get("sessionKey") ?? void 0));
+      return;
+    }
+    const meetingGetRemnic = /^\/remnic\/v1\/meetings\/([^/]+)$/.exec(pathname);
+    if (req.method === "GET" && meetingGetRemnic) {
+      this.enforceTokenOp("meetings_get");
+      await respondMeetingsGet(res, this.respondJson.bind(this), this.service, meetingGetRemnic[1] ?? "", this.wearablesScope(req, parsed.searchParams.get("namespace") ?? void 0, parsed.searchParams.get("sessionKey") ?? void 0));
+      return;
+    }
     if (req.method === "POST" && pathname === "/engram/v1/observe") {
       this.enforceTokenOp("observe");
       const body = await this.readValidatedBody(req, "observe");
@@ -3130,6 +3194,7 @@ function positiveIntQueryParam(value, label) {
 }
 
 export {
+  MeetingsInputError,
   EngramAccessHttpServer
 };
-//# sourceMappingURL=chunk-7S5OMI76.js.map
+//# sourceMappingURL=chunk-WS32QRLO.js.map