@remnic/core 9.24.0 → 9.25.1

package/dist/access-service.js

@@ -4,7 +4,7 @@ import {
   buildProjectedGovernanceProposedActions,
   hasGroupedGovernanceActions,
   shapeMemorySummary
-} from "./chunk-GCKIDUHE.js";
+} from "./chunk-RROMWDDC.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
 import "./chunk-7CPOZH6Y.js";
@@ -19,11 +19,11 @@ import "./chunk-H7XKCNR6.js";
 import "./chunk-M5EPMNS4.js";
 import "./chunk-SOBJ6NEY.js";
 import "./chunk-X3SQYAPP.js";
-import "./chunk-NM7SKDZM.js";
+import "./chunk-3CDMIR3C.js";
 import "./chunk-ICP53SKG.js";
 import "./chunk-AQEJKOKI.js";
 import "./chunk-6HMYUWXR.js";
-import "./chunk-FHH6R3QI.js";
+import "./chunk-UGH6VPPO.js";
 import "./chunk-R6YJI3HE.js";
 import "./chunk-MQVINOJQ.js";
 import "./chunk-EIR5VLIH.js";
@@ -31,30 +31,30 @@ import "./chunk-IISBCCWR.js";
 import "./chunk-JYIFGGEM.js";
 import "./chunk-EI6V5UXY.js";
 import "./chunk-NLE6TSLG.js";
-import "./chunk-IKMAO55B.js";
 import "./chunk-QDW3E4RD.js";
+import "./chunk-IKMAO55B.js";
 import "./chunk-C37ZRXX7.js";
-import "./chunk-NQ7E27HN.js";
-import "./chunk-TGHUJC64.js";
-import "./chunk-A5N6ISRK.js";
-import "./chunk-XBRPEGXF.js";
+import "./chunk-W4ZDTHWZ.js";
+import "./chunk-LARPWF3S.js";
+import "./chunk-ZN4UZWMT.js";
+import "./chunk-3UOSVTFR.js";
+import "./chunk-BLAKS3CP.js";
 import "./chunk-S2BBISHU.js";
 import "./chunk-CYEPCZN5.js";
 import "./chunk-ES36HTSC.js";
 import "./chunk-3Y224NYC.js";
-import "./chunk-QH6CS6XJ.js";
-import "./chunk-BLAKS3CP.js";
 import "./chunk-W7IGLX4G.js";
+import "./chunk-QH6CS6XJ.js";
 import "./chunk-CINZGPSJ.js";
-import "./chunk-XHYCPA5C.js";
+import "./chunk-NVYCTASB.js";
 import "./chunk-227UFSEQ.js";
 import "./chunk-ET356KSB.js";
 import "./chunk-72A4L5JJ.js";
 import "./chunk-A7Q43EUZ.js";
-import "./chunk-ONHRRJZM.js";
+import "./chunk-QJAQNXWI.js";
 import "./chunk-YV32N67O.js";
-import "./chunk-IUM3VSHI.js";
 import "./chunk-64UDOIMI.js";
+import "./chunk-IUM3VSHI.js";
 import "./chunk-O75CRYGF.js";
 import "./chunk-3ONXXHQO.js";
 import "./chunk-UFGFMWAD.js";
@@ -67,8 +67,8 @@ import "./chunk-P32IDSHD.js";
 import "./chunk-443XCR34.js";
 import "./chunk-TBBDFYXW.js";
 import "./chunk-ZBJMUXZH.js";
-import "./chunk-4KAIGQVU.js";
-import "./chunk-7CP7SO32.js";
+import "./chunk-SZN6XVFC.js";
+import "./chunk-XTAAG4SQ.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-2QMKMVHH.js";
 import "./chunk-DEBHXHJR.js";
@@ -77,14 +77,14 @@ import "./chunk-6CIAGZ6X.js";
 import "./chunk-J6A3CX5N.js";
 import "./chunk-HKF5VASQ.js";
 import "./chunk-V25OWXAC.js";
-import "./chunk-AVPXXV6J.js";
+import "./chunk-XKGPIWGI.js";
 import "./chunk-EGGE52UU.js";
 import "./chunk-GCASGYIO.js";
 import "./chunk-WL5EBRDH.js";
+import "./chunk-ILGC6JH6.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-3CSX3ETE.js";
 import "./chunk-RL6NEVXT.js";
-import "./chunk-ILGC6JH6.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-CGASUJVP.js";
@@ -93,12 +93,12 @@ import "./chunk-BT7NVCML.js";
 import "./chunk-JYIJNNN3.js";
 import "./chunk-AAD2ZS6P.js";
 import "./chunk-W5H6ZRPT.js";
-import "./chunk-G7D6GZ5J.js";
 import "./chunk-5VQJBH2G.js";
 import "./chunk-AITCS2RC.js";
 import "./chunk-XMMESCPD.js";
 import "./chunk-42JKGUFJ.js";
 import "./chunk-PDJTHRAW.js";
+import "./chunk-G7D6GZ5J.js";
 import "./chunk-C23BYTJV.js";
 import "./chunk-QIEUU4UK.js";
 import "./chunk-L2EXJQJP.js";
@@ -111,6 +111,8 @@ import "./chunk-4DJQYKMN.js";
 import "./chunk-PQVCH2AE.js";
 import "./chunk-EYIEWJNI.js";
 import "./chunk-JUC24CTX.js";
+import "./chunk-6MKAMLQL.js";
+import "./chunk-JAKIDQB2.js";
 import "./chunk-KQAFEZQX.js";
 import "./chunk-WEHSQBFR.js";
 import "./chunk-X7Y7WX73.js";
@@ -123,13 +125,11 @@ import "./chunk-BJMBJZ2Y.js";
 import "./chunk-UKJAGEXH.js";
 import "./chunk-FP2373TW.js";
 import "./chunk-P7FMDTKL.js";
-import "./chunk-7AMFUATK.js";
+import "./chunk-MZWSOLMT.js";
 import "./chunk-SYOIVK7K.js";
 import "./chunk-Z2YFLXHU.js";
 import "./chunk-I4WBNM3M.js";
 import "./chunk-SOAU2OE2.js";
-import "./chunk-6MKAMLQL.js";
-import "./chunk-JAKIDQB2.js";
 import "./chunk-44DUJETW.js";
 import "./chunk-2H7OEVPO.js";
 import "./chunk-U3PN77QT.js";

package/dist/access-token-capabilities.d.ts

@@ -94,6 +94,20 @@ declare function isCapabilityRestricted(caps: TokenCapabilities | undefined | nu
  *   - ops axis PRESENT       ⇒ `op` must be listed; `[]` ⇒ false (deny all).
  */
 declare function capabilityAllowsOp(caps: TokenCapabilities | undefined | null, op: string): boolean;
+/**
+ * The operation policy that all access surfaces use to decide whether a token
+ * can invoke an operation.
+ */
+interface OperationAuthorizationPolicy {
+    readonly name: string;
+    readonly allowedByOps?: readonly string[];
+    readonly fleetWide?: boolean;
+}
+/**
+ * Apply an operation's alternate grant and fleet-wide restrictions without
+ * invoking its handler.
+ */
+declare function assertOperationAuthorizationAllowed(caps: TokenCapabilities | undefined | null, operation: OperationAuthorizationPolicy): void;
 /**
  * True when `caps` permits `namespace`.
  *   - record ABSENT / namespaces axis ABSENT ⇒ unrestricted (true).
@@ -172,4 +186,4 @@ declare function assertFleetWideOperationAllowed(caps: TokenCapabilities | undef
  */
 declare const tokenCapabilityStore: AsyncLocalStorage<TokenCapabilities | undefined>;
 
-export { TOKEN_CAPABILITIES_VERSION, type TokenCapabilities, assertFleetWideOperationAllowed, assertNamespaceAllowed, assertOperationAllowed, capabilityAllowsNamespace, capabilityAllowsOp, enforceNamespaceAllowList, isCapabilityRestricted, isNamespaceAllowed, isValidNamespaceValue, normalizeCapabilities, resolveEffectiveNamespace, tokenCapabilityStore, validateCapabilitiesForMint };
+export { type OperationAuthorizationPolicy, TOKEN_CAPABILITIES_VERSION, type TokenCapabilities, assertFleetWideOperationAllowed, assertNamespaceAllowed, assertOperationAllowed, assertOperationAuthorizationAllowed, capabilityAllowsNamespace, capabilityAllowsOp, enforceNamespaceAllowList, isCapabilityRestricted, isNamespaceAllowed, isValidNamespaceValue, normalizeCapabilities, resolveEffectiveNamespace, tokenCapabilityStore, validateCapabilitiesForMint };

package/dist/access-token-capabilities.js

@@ -3,6 +3,7 @@ import {
   assertFleetWideOperationAllowed,
   assertNamespaceAllowed,
   assertOperationAllowed,
+  assertOperationAuthorizationAllowed,
   capabilityAllowsNamespace,
   capabilityAllowsOp,
   enforceNamespaceAllowList,
@@ -13,7 +14,7 @@ import {
   resolveEffectiveNamespace,
   tokenCapabilityStore,
   validateCapabilitiesForMint
-} from "./chunk-7AMFUATK.js";
+} from "./chunk-MZWSOLMT.js";
 import "./chunk-2Z24E5W2.js";
 import "./chunk-PZ5AY32C.js";
 export {
@@ -21,6 +22,7 @@ export {
   assertFleetWideOperationAllowed,
   assertNamespaceAllowed,
   assertOperationAllowed,
+  assertOperationAuthorizationAllowed,
   capabilityAllowsNamespace,
   capabilityAllowsOp,
   enforceNamespaceAllowList,

package/dist/active-recall.js

@@ -18,16 +18,16 @@ import "./chunk-4DJQYKMN.js";
 import "./chunk-PQVCH2AE.js";
 import "./chunk-EYIEWJNI.js";
 import "./chunk-JUC24CTX.js";
-import "./chunk-E4OCKU67.js";
-import "./chunk-UI3NYK34.js";
-import "./chunk-GCGJW34D.js";
-import "./chunk-AREGMX2J.js";
-import "./chunk-P7FMDTKL.js";
 import {
   collapseWhitespace,
   truncateCodePointSafe
 } from "./chunk-6MKAMLQL.js";
 import "./chunk-JAKIDQB2.js";
+import "./chunk-E4OCKU67.js";
+import "./chunk-UI3NYK34.js";
+import "./chunk-GCGJW34D.js";
+import "./chunk-AREGMX2J.js";
+import "./chunk-P7FMDTKL.js";
 import "./chunk-AIK5W3IW.js";
 import "./chunk-A6XUJE5D.js";
 import "./chunk-5UZXUTVO.js";

package/dist/auto-sync-5OE5QOZB.js

@@ -24,8 +24,8 @@ import "./chunk-N7RWREIQ.js";
 import "./chunk-5GKPFL3S.js";
 import "./chunk-EYIEWJNI.js";
 import "./chunk-JUC24CTX.js";
-import "./chunk-P7FMDTKL.js";
 import "./chunk-JAKIDQB2.js";
+import "./chunk-P7FMDTKL.js";
 import "./chunk-3WCASNQZ.js";
 import "./chunk-PZ5AY32C.js";
 

package/dist/briefing.js

@@ -17,8 +17,8 @@ import {
   renderBriefingMarkdown,
   resolveBriefingSaveDir,
   validateBriefingFormat
-} from "./chunk-4KAIGQVU.js";
-import "./chunk-7CP7SO32.js";
+} from "./chunk-SZN6XVFC.js";
+import "./chunk-XTAAG4SQ.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-2QMKMVHH.js";
 import "./chunk-DEBHXHJR.js";
@@ -27,14 +27,14 @@ import "./chunk-6CIAGZ6X.js";
 import "./chunk-J6A3CX5N.js";
 import "./chunk-HKF5VASQ.js";
 import "./chunk-V25OWXAC.js";
-import "./chunk-AVPXXV6J.js";
+import "./chunk-XKGPIWGI.js";
 import "./chunk-EGGE52UU.js";
 import "./chunk-GCASGYIO.js";
 import "./chunk-WL5EBRDH.js";
+import "./chunk-ILGC6JH6.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-3CSX3ETE.js";
 import "./chunk-RL6NEVXT.js";
-import "./chunk-ILGC6JH6.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-CGASUJVP.js";
@@ -43,12 +43,12 @@ import "./chunk-BT7NVCML.js";
 import "./chunk-JYIJNNN3.js";
 import "./chunk-AAD2ZS6P.js";
 import "./chunk-W5H6ZRPT.js";
-import "./chunk-G7D6GZ5J.js";
 import "./chunk-5VQJBH2G.js";
 import "./chunk-AITCS2RC.js";
 import "./chunk-XMMESCPD.js";
 import "./chunk-42JKGUFJ.js";
 import "./chunk-PDJTHRAW.js";
+import "./chunk-G7D6GZ5J.js";
 import "./chunk-C23BYTJV.js";
 import "./chunk-QIEUU4UK.js";
 import "./chunk-L2EXJQJP.js";
@@ -61,12 +61,12 @@ import "./chunk-4DJQYKMN.js";
 import "./chunk-PQVCH2AE.js";
 import "./chunk-EYIEWJNI.js";
 import "./chunk-JUC24CTX.js";
+import "./chunk-6MKAMLQL.js";
+import "./chunk-JAKIDQB2.js";
 import "./chunk-BJMBJZ2Y.js";
 import "./chunk-UKJAGEXH.js";
 import "./chunk-FP2373TW.js";
 import "./chunk-P7FMDTKL.js";
-import "./chunk-6MKAMLQL.js";
-import "./chunk-JAKIDQB2.js";
 import "./chunk-RDQGLJRR.js";
 import "./chunk-FF4KLI5W.js";
 import "./chunk-AIK5W3IW.js";

package/dist/causal-consolidation.js

@@ -4,10 +4,10 @@ import {
 } from "./chunk-MU7ZHSZE.js";
 import {
   buildExtensionsBlockForConsolidation
-} from "./chunk-MX4TUDMB.js";
+} from "./chunk-FIGDB2HR.js";
 import {
   runPostConsolidationMaterialize
-} from "./chunk-3FLPLDIL.js";
+} from "./chunk-MPDX5QMH.js";
 import "./chunk-KSXJOC4F.js";
 import "./chunk-JLNBQWZ2.js";
 import "./chunk-3UXOZBHV.js";
@@ -16,7 +16,7 @@ import {
   resolveCausalTrajectoryStoreDir
 } from "./chunk-NRV4Y3PM.js";
 import "./chunk-ZBJMUXZH.js";
-import "./chunk-7CP7SO32.js";
+import "./chunk-XTAAG4SQ.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-2QMKMVHH.js";
 import "./chunk-DEBHXHJR.js";
@@ -25,14 +25,14 @@ import "./chunk-6CIAGZ6X.js";
 import "./chunk-J6A3CX5N.js";
 import "./chunk-HKF5VASQ.js";
 import "./chunk-V25OWXAC.js";
-import "./chunk-AVPXXV6J.js";
+import "./chunk-XKGPIWGI.js";
 import "./chunk-EGGE52UU.js";
 import "./chunk-GCASGYIO.js";
 import "./chunk-WL5EBRDH.js";
+import "./chunk-ILGC6JH6.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-3CSX3ETE.js";
 import "./chunk-RL6NEVXT.js";
-import "./chunk-ILGC6JH6.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-CGASUJVP.js";
@@ -41,12 +41,12 @@ import "./chunk-BT7NVCML.js";
 import "./chunk-JYIJNNN3.js";
 import "./chunk-AAD2ZS6P.js";
 import "./chunk-W5H6ZRPT.js";
-import "./chunk-G7D6GZ5J.js";
 import "./chunk-5VQJBH2G.js";
 import "./chunk-AITCS2RC.js";
 import "./chunk-XMMESCPD.js";
 import "./chunk-42JKGUFJ.js";
 import "./chunk-PDJTHRAW.js";
+import "./chunk-G7D6GZ5J.js";
 import {
   FallbackLlmClient,
   fallbackLlmRuntimeContextFromConfig
@@ -62,12 +62,12 @@ import "./chunk-4DJQYKMN.js";
 import "./chunk-PQVCH2AE.js";
 import "./chunk-EYIEWJNI.js";
 import "./chunk-JUC24CTX.js";
+import "./chunk-6MKAMLQL.js";
+import "./chunk-JAKIDQB2.js";
 import "./chunk-BJMBJZ2Y.js";
 import "./chunk-UKJAGEXH.js";
 import "./chunk-FP2373TW.js";
 import "./chunk-P7FMDTKL.js";
-import "./chunk-6MKAMLQL.js";
-import "./chunk-JAKIDQB2.js";
 import "./chunk-U3PN77QT.js";
 import "./chunk-RDQGLJRR.js";
 import {

package/dist/{chunk-34RC5RT7.js → chunk-2SA56WMI.js}

@@ -1,10 +1,10 @@
+import {
+  sidecarKey
+} from "./chunk-5VQJBH2G.js";
 import {
   DERIVED_FROM_MEMORY_ID_RE,
   isConsolidationOperator
 } from "./chunk-G7D6GZ5J.js";
-import {
-  sidecarKey
-} from "./chunk-5VQJBH2G.js";
 import {
   RECALL_FALLBACK_DIRS
 } from "./chunk-VS2IYZRU.js";
@@ -342,4 +342,4 @@ function isPathWithin(candidate, root) {
 export {
   runConsolidationProvenanceCheck
 };
-//# sourceMappingURL=chunk-34RC5RT7.js.map
+//# sourceMappingURL=chunk-2SA56WMI.js.map

package/dist/{chunk-NM7SKDZM.js → chunk-3CDMIR3C.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-TBBDFYXW.js";
 import {
   StorageManager
-} from "./chunk-7CP7SO32.js";
+} from "./chunk-XTAAG4SQ.js";
 import {
   assertPathInsideRoot
 } from "./chunk-GCASGYIO.js";
@@ -755,4 +755,4 @@ export {
   listMemoryGovernanceRuns,
   readMemoryGovernanceRunArtifact
 };
-//# sourceMappingURL=chunk-NM7SKDZM.js.map
+//# sourceMappingURL=chunk-3CDMIR3C.js.map

package/dist/{chunk-V4MAO2Y4.js → chunk-3I35RLJW.js}

@@ -16,10 +16,10 @@ import {
   processChatMessage,
   sessionBelongsToPrincipal,
   subscribeChatTranscript
-} from "./chunk-WNSQOXWS.js";
+} from "./chunk-6LRTGCRV.js";
 import {
   RelayMissionStoreError
-} from "./chunk-SGMORUEU.js";
+} from "./chunk-NMGO2HAZ.js";
 import {
   validateRequest
 } from "./chunk-P25IPRXP.js";
@@ -32,11 +32,14 @@ import {
   listPairs,
   readPair
 } from "./chunk-35NN3ZFA.js";
+import {
+  probeOperationAuthorization
+} from "./chunk-JMDZDT24.js";
 import {
   CorrectionContractError,
   getOperation,
   resolveQueryNamespaceWritablePreflight
-} from "./chunk-GCKIDUHE.js";
+} from "./chunk-RROMWDDC.js";
 import {
   isTrustZoneName
 } from "./chunk-JGSKJHF7.js";
@@ -62,7 +65,7 @@ import {
   enforceNamespaceAllowList,
   isCapabilityRestricted,
   tokenCapabilityStore
-} from "./chunk-7AMFUATK.js";
+} from "./chunk-MZWSOLMT.js";
 import {
   EngramAccessForbiddenError,
   EngramAccessInputError
@@ -868,6 +871,15 @@ var EngramAccessHttpServer = class {
       this.respondJson(res, 200, await this.service.health());
       return;
     }
+    if (req.method === "GET" && pathname === "/engram/v1/authorization") {
+      res.setHeader("cache-control", "no-store");
+      this.respondJson(
+        res,
+        200,
+        probeOperationAuthorization(tokenCapabilityStore.getStore(), parsed.searchParams.getAll("op"))
+      );
+      return;
+    }
     if (req.method === "GET" && pathname === "/engram/v1/adapters") {
       this.enforceTokenOp("adapters_status");
       const identity = this.resolveAdapterIdentity(req);
@@ -3197,4 +3209,4 @@ export {
   MeetingsInputError,
   EngramAccessHttpServer
 };
-//# sourceMappingURL=chunk-V4MAO2Y4.js.map
+//# sourceMappingURL=chunk-3I35RLJW.js.map