@remnic/core 9.25.4 → 9.25.6

package/dist/{chunk-JMDZDT24.js → chunk-D7MAWMMK.js}

@@ -1,7 +1,8 @@
 import {
   OPERATION_NAMES,
-  getOperation
-} from "./chunk-RROMWDDC.js";
+  getOperation,
+  operationRequiresAuthorizedNamespace
+} from "./chunk-BL4JHZSO.js";
 import {
   assertOperationAuthorizationAllowed
 } from "./chunk-MZWSOLMT.js";
@@ -10,6 +11,12 @@ import {
 } from "./chunk-2Z24E5W2.js";
 
 // src/access-authorization-probe.ts
+var UNRESOLVABLE_RESOURCE_OPERATIONS = /* @__PURE__ */ new Set([
+  "review_resolve",
+  "contradiction_detail",
+  "chat_message",
+  "chat_events"
+]);
 function probeOperationAuthorization(capabilities, requestedOperations) {
   const operations = [];
   for (const candidate of requestedOperations) {
@@ -31,8 +38,15 @@ function probeOperationAuthorization(capabilities, requestedOperations) {
   }
   return { authorized: true, operations };
 }
+function authorizationProbeNamespaces(operations, requestedNamespace) {
+  const namespaceOperations = operations.filter(
+    (operation) => operationRequiresAuthorizedNamespace(operation) && !UNRESOLVABLE_RESOURCE_OPERATIONS.has(operation)
+  );
+  return namespaceOperations.length > 0 ? [requestedNamespace] : [];
+}
 
 export {
-  probeOperationAuthorization
+  probeOperationAuthorization,
+  authorizationProbeNamespaces
 };
-//# sourceMappingURL=chunk-JMDZDT24.js.map
+//# sourceMappingURL=chunk-D7MAWMMK.js.map

package/dist/chunk-D7MAWMMK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/access-authorization-probe.ts"],"sourcesContent":["import {\n  getOperation,\n  operationRequiresAuthorizedNamespace,\n  OPERATION_NAMES,\n  type OperationName,\n} from \"./access-boundary.js\";\nimport { EngramAccessInputError } from \"./access-errors.js\";\nimport {\n  assertOperationAuthorizationAllowed,\n  type TokenCapabilities,\n} from \"./access-token-capabilities.js\";\n\nconst UNRESOLVABLE_RESOURCE_OPERATIONS = new Set<OperationName>([\n  \"review_resolve\",\n  \"contradiction_detail\",\n  \"chat_message\",\n  \"chat_events\",\n]);\n\nexport interface AuthorizationProbeResponse {\n  readonly authorized: true;\n  readonly operations: readonly OperationName[];\n}\n\n/**\n * Verify that the presenting token may call every requested operation without\n * invoking any operation handler.\n */\nexport function probeOperationAuthorization(\n  capabilities: TokenCapabilities | undefined | null,\n  requestedOperations: readonly string[],\n): AuthorizationProbeResponse {\n  const operations: OperationName[] = [];\n  for (const candidate of requestedOperations) {\n    if (!OPERATION_NAMES.includes(candidate as OperationName)) {\n      throw new EngramAccessInputError(`unsupported operation: ${candidate}`);\n    }\n    const operation = candidate as OperationName;\n    if (!operations.includes(operation)) operations.push(operation);\n  }\n\n  if (operations.length === 0) {\n    throw new EngramAccessInputError(\"at least one operation is required\");\n  }\n\n  for (const operation of operations) {\n    const boundOperation = getOperation(operation);\n    if (!boundOperation) {\n      throw new Error(`authorization probe operation is not registered: ${operation}`);\n    }\n    assertOperationAuthorizationAllowed(capabilities, boundOperation.spec);\n  }\n\n  return { authorized: true, operations };\n}\n\n/**\n * Resolve every namespace an authorization probe can verify from the request.\n * Resource-scoped routes resolve their stored target only after a resource id\n * is supplied, so probes validate only request-resolvable namespaces.\n */\nexport function authorizationProbeNamespaces(\n  operations: readonly OperationName[],\n  requestedNamespace: string | undefined,\n): readonly (string | undefined)[] {\n  const namespaceOperations = operations.filter(\n    (operation) =>\n      operationRequiresAuthorizedNamespace(operation) &&\n      !UNRESOLVABLE_RESOURCE_OPERATIONS.has(operation),\n  );\n  return namespaceOperations.length > 0 ? [requestedNamespace] : [];\n}\n"],"mappings":";;;;;;;;;;;;;AAYA,IAAM,mCAAmC,oBAAI,IAAmB;AAAA,EAC9D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAWM,SAAS,4BACd,cACA,qBAC4B;AAC5B,QAAM,aAA8B,CAAC;AACrC,aAAW,aAAa,qBAAqB;AAC3C,QAAI,CAAC,gBAAgB,SAAS,SAA0B,GAAG;AACzD,YAAM,IAAI,uBAAuB,0BAA0B,SAAS,EAAE;AAAA,IACxE;AACA,UAAM,YAAY;AAClB,QAAI,CAAC,WAAW,SAAS,SAAS,EAAG,YAAW,KAAK,SAAS;AAAA,EAChE;AAEA,MAAI,WAAW,WAAW,GAAG;AAC3B,UAAM,IAAI,uBAAuB,oCAAoC;AAAA,EACvE;AAEA,aAAW,aAAa,YAAY;AAClC,UAAM,iBAAiB,aAAa,SAAS;AAC7C,QAAI,CAAC,gBAAgB;AACnB,YAAM,IAAI,MAAM,oDAAoD,SAAS,EAAE;AAAA,IACjF;AACA,wCAAoC,cAAc,eAAe,IAAI;AAAA,EACvE;AAEA,SAAO,EAAE,YAAY,MAAM,WAAW;AACxC;AAOO,SAAS,6BACd,YACA,oBACiC;AACjC,QAAM,sBAAsB,WAAW;AAAA,IACrC,CAAC,cACC,qCAAqC,SAAS,KAC9C,CAAC,iCAAiC,IAAI,SAAS;AAAA,EACnD;AACA,SAAO,oBAAoB,SAAS,IAAI,CAAC,kBAAkB,IAAI,CAAC;AAClE;","names":[]}

package/dist/{chunk-TG2DJFH7.js → chunk-E5A6C4A5.js}

@@ -1,3 +1,6 @@
+import {
+  claudeReplayNormalizer
+} from "./chunk-54BGIBCR.js";
 import {
   openclawReplayNormalizer
 } from "./chunk-H4CKS5B2.js";
@@ -5,8 +8,8 @@ import {
   chatgptReplayNormalizer
 } from "./chunk-MMACM5G2.js";
 import {
-  claudeReplayNormalizer
-} from "./chunk-54BGIBCR.js";
+  exportJsonBundle
+} from "./chunk-UP6MOYCB.js";
 import {
   exportSqlite
 } from "./chunk-BV2TIZ4F.js";
@@ -28,9 +31,6 @@ import {
 import {
   exportMarkdownBundle
 } from "./chunk-765K3SAT.js";
-import {
-  exportJsonBundle
-} from "./chunk-UP6MOYCB.js";
 import {
   RoutingRulesStore
 } from "./chunk-XL24QQ63.js";
@@ -49,11 +49,14 @@ import {
   isReplaySource,
   normalizeReplaySessionKey
 } from "./chunk-AJVLDJU6.js";
+import {
+  rebuildMemoryLifecycleLedger
+} from "./chunk-UOURUMBN.js";
 import {
   rebuildMemoryProjection,
   repairMemoryProjection,
   verifyMemoryProjection
-} from "./chunk-IE4HB6O5.js";
+} from "./chunk-TPYZ727G.js";
 import {
   rebuildObservations
 } from "./chunk-DX3XRGLH.js";
@@ -63,9 +66,6 @@ import {
 import {
   migrateObservations
 } from "./chunk-MNB5RMAY.js";
-import {
-  rebuildMemoryLifecycleLedger
-} from "./chunk-THHPDPMS.js";
 import {
   getBulkImportSource,
   listBulkImportSources,
@@ -85,16 +85,16 @@ import {
 } from "./chunk-TERNBNJB.js";
 import {
   searchVerifiedEpisodes
-} from "./chunk-VY6SDKWZ.js";
+} from "./chunk-SSYBI43M.js";
 import {
   ThreadingManager
 } from "./chunk-OJP3N7UK.js";
 import {
   promoteSemanticRuleFromMemory
-} from "./chunk-GNFZFJBJ.js";
+} from "./chunk-IR4LGIH6.js";
 import {
   searchVerifiedSemanticRules
-} from "./chunk-LXKJNUND.js";
+} from "./chunk-37VPMR4E.js";
 import {
   buildResumeBundleFromState,
   getResumeBundleStatus,
@@ -135,7 +135,7 @@ import {
   runOperatorInventory,
   runOperatorRepair,
   runOperatorSetup
-} from "./chunk-5ZGWA4AG.js";
+} from "./chunk-UMFLAACL.js";
 import {
   analyzeSessionIntegrity,
   applySessionRepair,
@@ -206,7 +206,7 @@ import {
 import {
   EngramAccessHttpServer,
   MeetingsInputError
-} from "./chunk-3I35RLJW.js";
+} from "./chunk-32XTXKIA.js";
 import {
   WearablesInputError
 } from "./chunk-V7IZKJI3.js";
@@ -219,13 +219,13 @@ import {
   createProductionChatLlmAdapter,
   loadChatSession,
   sessionBelongsToPrincipal
-} from "./chunk-6LRTGCRV.js";
+} from "./chunk-VPSAVXHM.js";
 import {
   getAbstractionNodeStoreStatus
 } from "./chunk-OADWQ5CR.js";
 import {
   EngramAccessService
-} from "./chunk-RROMWDDC.js";
+} from "./chunk-BL4JHZSO.js";
 import {
   WorkStorage
 } from "./chunk-GDB4J2H3.js";
@@ -248,7 +248,7 @@ import {
   readMemoryGovernanceRunArtifact,
   restoreMemoryGovernanceRun,
   runMemoryGovernance
-} from "./chunk-3CDMIR3C.js";
+} from "./chunk-3CHQZVAL.js";
 import {
   getObjectiveStateStoreStatus
 } from "./chunk-6HMYUWXR.js";
@@ -256,7 +256,7 @@ import {
   listNamespaces,
   runNamespaceMigration,
   verifyNamespaces
-} from "./chunk-LARPWF3S.js";
+} from "./chunk-ZPUFQGUF.js";
 import {
   renderQmdBacklogStatus
 } from "./chunk-IUM3VSHI.js";
@@ -271,7 +271,7 @@ import {
 } from "./chunk-443XCR34.js";
 import {
   meetingIdDate
-} from "./chunk-XTAAG4SQ.js";
+} from "./chunk-K4DP5KZA.js";
 import {
   isValidTranscriptDate
 } from "./chunk-UHVXE24Y.js";
@@ -7976,4 +7976,4 @@ export {
   listMemoryMarkdownFilePaths,
   registerCli
 };
-//# sourceMappingURL=chunk-TG2DJFH7.js.map
+//# sourceMappingURL=chunk-E5A6C4A5.js.map

package/dist/{chunk-FDAPXLRC.js → chunk-FR75B4UU.js}

@@ -13,7 +13,7 @@ import {
 import {
   ActivityStore,
   MaintenanceScheduler
-} from "./chunk-DPYYSG6F.js";
+} from "./chunk-G6MGAE36.js";
 import {
   runPeerProfileReasoner
 } from "./chunk-I74SUMNI.js";
@@ -22,7 +22,7 @@ import {
 } from "./chunk-7HYPN2GC.js";
 import {
   LcmEngine
-} from "./chunk-GF22HWS2.js";
+} from "./chunk-2PHX3I5C.js";
 import {
   chunkTranscriptEntries
 } from "./chunk-TECVW3JP.js";
@@ -32,7 +32,7 @@ import {
 import {
   CompoundingEngine,
   defaultTierMigrationCycleBudget
-} from "./chunk-U37RGPJT.js";
+} from "./chunk-5J7HJ7RT.js";
 import {
   SharedContextManager
 } from "./chunk-JGUXPJUQ.js";
@@ -41,6 +41,9 @@ import {
   applyUtilityRankingRuntimeDelta,
   loadUtilityRuntimeValues
 } from "./chunk-LXOM6IQU.js";
+import {
+  decideTierTransition
+} from "./chunk-S75M5ZRK.js";
 import {
   TmtBuilder
 } from "./chunk-ECZU5BJH.js";
@@ -56,9 +59,6 @@ import {
 import {
   TierMigrationExecutor
 } from "./chunk-VOUOLGIP.js";
-import {
-  decideTierTransition
-} from "./chunk-S75M5ZRK.js";
 import {
   HourlySummarizer
 } from "./chunk-FGBJBYWP.js";
@@ -69,6 +69,10 @@ import {
 import {
   SessionObserverState
 } from "./chunk-QFN4U7AG.js";
+import {
+  buildResponseGuidanceRecallSection,
+  shouldRecallResponseGuidance
+} from "./chunk-6TCXIRP5.js";
 import {
   mergeWithAgentResults,
   runDirectAgent,
@@ -104,10 +108,6 @@ import {
   reorderByRankedKeys,
   rerankLocalOrNoop
 } from "./chunk-LUDXM7MD.js";
-import {
-  buildResponseGuidanceRecallSection,
-  shouldRecallResponseGuidance
-} from "./chunk-6TCXIRP5.js";
 import {
   createRecallSectionMetricRecorder
 } from "./chunk-C3AKM55W.js";
@@ -204,7 +204,7 @@ import {
   buildEntityRecallSection,
   entityRecentTranscriptLookbackHours,
   readRecentEntityTranscriptEntries
-} from "./chunk-AT6DNUCM.js";
+} from "./chunk-NY6W6CJW.js";
 import {
   buildEventOrderRecallSection,
   shouldRecallEventOrderEvidence
@@ -224,13 +224,13 @@ import {
   materializeAfterSemanticConsolidation,
   parseConsolidationResponse,
   parseOperatorAwareConsolidationResponse
-} from "./chunk-FIGDB2HR.js";
+} from "./chunk-7KXQ44PA.js";
 import {
   builtInConnectorPackageSpecifier,
   ensureBuiltInWearableConnectors,
   getWearableConnector,
   listWearableConnectors
-} from "./chunk-TG2DJFH7.js";
+} from "./chunk-E5A6C4A5.js";
 import {
   RoutingRulesStore
 } from "./chunk-XL24QQ63.js";
@@ -240,14 +240,14 @@ import {
 import {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
-} from "./chunk-VY6SDKWZ.js";
+} from "./chunk-SSYBI43M.js";
 import {
   ThreadingManager
 } from "./chunk-OJP3N7UK.js";
 import {
   compareVerifiedSemanticRuleResults,
   searchVerifiedSemanticRules
-} from "./chunk-LXKJNUND.js";
+} from "./chunk-37VPMR4E.js";
 import {
   searchWorkProductLedgerEntries
 } from "./chunk-ZRWB5D4H.js";
@@ -260,11 +260,11 @@ import {
 import {
   runNamespaceMaintenanceFanout,
   summarizeNamespaceMaintenanceHealth
-} from "./chunk-5ZGWA4AG.js";
+} from "./chunk-UMFLAACL.js";
 import {
   NamespaceCatalog,
   planNamespaceMaintenance
-} from "./chunk-AGR7MGUX.js";
+} from "./chunk-7IGWPXVC.js";
 import {
   searchHarmonicRetrieval
 } from "./chunk-AV5ZEH4M.js";
@@ -328,7 +328,7 @@ import {
 } from "./chunk-B7RWBZXW.js";
 import {
   MeetingsInputError
-} from "./chunk-3I35RLJW.js";
+} from "./chunk-32XTXKIA.js";
 import {
   WearablesInputError,
   describeErrorForOperator
@@ -346,7 +346,7 @@ import {
   clusterByKey,
   createCorrectionService,
   detectPassiveCorrections
-} from "./chunk-RROMWDDC.js";
+} from "./chunk-BL4JHZSO.js";
 import {
   importCapsule
 } from "./chunk-7CPOZH6Y.js";
@@ -364,6 +364,13 @@ import {
   listTrustZoneRecords,
   searchTrustZoneRecords
 } from "./chunk-JGSKJHF7.js";
+import {
+  boundRecallContextComposition,
+  composeRecallContext,
+  contextBudgetForFooter,
+  formatCuriosityFooter,
+  selectCuriosityQuestion
+} from "./chunk-AHVEHR6K.js";
 import {
   buildXraySnapshot
 } from "./chunk-X3SQYAPP.js";
@@ -388,6 +395,9 @@ import {
 import {
   shouldSkipImplicitExtraction
 } from "./chunk-IKMAO55B.js";
+import {
+  NamespaceStorageRouter
+} from "./chunk-WSEA52RI.js";
 import {
   NamespaceSearchRouter,
   namespaceCollectionName
@@ -399,9 +409,6 @@ import {
 import {
   NoopSearchBackend
 } from "./chunk-CYEPCZN5.js";
-import {
-  NamespaceStorageRouter
-} from "./chunk-NVYCTASB.js";
 import {
   writeConversationChunks
 } from "./chunk-72A4L5JJ.js";
@@ -420,7 +427,7 @@ import {
 } from "./chunk-TBBDFYXW.js";
 import {
   buildChainFollowupGenerator
-} from "./chunk-SZN6XVFC.js";
+} from "./chunk-PS5OG75R.js";
 import {
   ContentHashIndex,
   QmdResultResolver,
@@ -440,7 +447,10 @@ import {
   reconstructFusionInputs,
   selfDeps,
   serializeFusionDay
-} from "./chunk-XTAAG4SQ.js";
+} from "./chunk-K4DP5KZA.js";
+import {
+  buildRetiredFactTombstoneInputs
+} from "./chunk-2QMKMVHH.js";
 import {
   bodyIsEscaped,
   decodeTranscriptBody,
@@ -451,9 +461,6 @@ import {
   saveSpeakerRegistry,
   speakerRegistryKey
 } from "./chunk-UHVXE24Y.js";
-import {
-  buildRetiredFactTombstoneInputs
-} from "./chunk-2QMKMVHH.js";
 import {
   applyTemporalSupersession,
   normalizeSupersessionKey,
@@ -10267,21 +10274,15 @@ ${tmtNode.summary}`
           compoundingSection
         );
       }
-      if (this.deps.config.injectQuestions && this.deps.isRecallSectionEnabled("questions", true)) {
-        const questions = await profileStorage.readQuestions({
-          unresolvedOnly: true
-        });
-        if (questions.length > 0) {
-          const topQuestion = questions[0];
-          this.deps.appendRecallSection(
-            sectionBuckets,
-            "questions",
-            `## Open Question
-
-Something I've been curious about: ${topQuestion.question}
-
-_Context: ${topQuestion.context}_`
-          );
+      let curiosityFooter, curiosityQuestionSelected = false, curiosityFooterTruncated = false;
+      const topQuestion = this.deps.config.injectQuestions && this.deps.isRecallSectionEnabled("questions", true) ? selectCuriosityQuestion(await profileStorage.readQuestions({ unresolvedOnly: true })) : void 0;
+      if (topQuestion) {
+        curiosityQuestionSelected = true;
+        const formattedFooter = formatCuriosityFooter(topQuestion);
+        const questionMaxChars = this.deps.getRecallSectionMaxChars("questions");
+        if (questionMaxChars !== 0) {
+          curiosityFooter = typeof questionMaxChars === "number" ? this.deps.truncateRecallSectionToBudget(formattedFooter, questionMaxChars) : formattedFooter;
+          curiosityFooterTruncated = curiosityFooter.length < formattedFooter.length;
         }
       }
       const phase2QuestionsDoneMs = Date.now() - recallStart;
@@ -10309,9 +10310,10 @@ _Context: ${topQuestion.context}_`
         recallPlan: timings.recallPlan,
         queryPolicy: timings.queryPolicy
       });
+      const recallBudgetChars = this.deps.getRecallBudgetChars(options.budgetCharsOverride);
       const assembledRecall = this.deps.assembleRecallSections(
         sectionBuckets,
-        options.budgetCharsOverride
+        contextBudgetForFooter(recallBudgetChars, curiosityFooter)
       );
       recalledMemoryIds = assembledRecall.includedMemoryIds;
       recalledMemoryPaths = assembledRecall.includedMemoryPaths;
@@ -10322,20 +10324,44 @@ _Context: ${topQuestion.context}_`
         assembledRecall.includedMemoryPaths,
         assembledRecall.includedMemoryNamespaces
       );
-      const context = assembledRecall.sections.length === 0 ? "" : assembledRecall.sections.join("\n\n---\n\n");
-      const sourcesUsed = this.deps.collectLastRecallSources(
-        sectionBuckets,
-        recallSource
-      );
+      const recalledContext = assembledRecall.sections.join("\n\n---\n\n");
+      const composition = boundRecallContextComposition({
+        context: recalledContext,
+        footer: curiosityFooter,
+        maxChars: recallBudgetChars
+      });
+      const context = composeRecallContext(composition);
+      try {
+        const observerResult = options.onContextComposition?.(composition);
+        if (observerResult && typeof observerResult.then === "function") {
+          void Promise.resolve(observerResult).catch((err) => log.warn(
+            "recall: context composition observer rejected",
+            err
+          ));
+        }
+      } catch (err) {
+        log.warn("recall: context composition observer failed open", err);
+      }
+      const compositionTruncated = context.length < composeRecallContext({
+        context: recalledContext,
+        footer: curiosityFooter
+      }).length;
+      const includedSections = [...assembledRecall.includedIds];
+      const omittedSections = [...assembledRecall.omittedIds];
+      if (composition.footer && !includedSections.includes("questions")) includedSections.push("questions");
+      else if (!composition.footer && curiosityQuestionSelected && !omittedSections.includes("questions"))
+        omittedSections.push("questions");
+      const sourcesUsed = this.deps.collectLastRecallSources(sectionBuckets, recallSource);
+      if (composition.footer && !sourcesUsed.includes("questions")) sourcesUsed.push("questions");
       const budgetsApplied = this.deps.buildLastRecallBudgetSummary({
         requestedTopK,
         recallResultLimit,
         qmdFetchLimit,
         qmdHybridFetchLimit,
-        finalContextChars: assembledRecall.finalChars,
-        truncated: assembledRecall.truncated,
-        includedSections: assembledRecall.includedIds,
-        omittedSections: assembledRecall.omittedIds,
+        finalContextChars: context.length,
+        truncated: assembledRecall.truncated || compositionTruncated || curiosityFooterTruncated,
+        includedSections,
+        omittedSections,
         includedMemoryIds: assembledRecall.includedMemoryIds,
         includedMemoryPaths: assembledRecall.includedMemoryPaths,
         includedMemoryNamespaces: assembledRecall.includedMemoryNamespaces,
@@ -10461,7 +10487,7 @@ _Context: ${topQuestion.context}_`
             filters,
             budget: {
               chars: this.deps.getRecallBudgetChars(options.budgetCharsOverride),
-              used: assembledRecall.finalChars
+              used: context.length
             },
             sessionKey,
             namespace: selfNamespace,
@@ -13452,7 +13478,7 @@ var OrchestratorInitCoordinator = class {
     if (signal.aborted) return;
     if (lifecycleCaps.lifecyclePolicy && resolveQmdCapabilities(this.deps.config).qmdTierMigration) {
       try {
-        const { runFirstStartMigration } = await import("./first-start-migration-LEXL3XYL.js");
+        const { runFirstStartMigration } = await import("./first-start-migration-BKNGOFED.js");
         const result = await runFirstStartMigration({
           storage: this.deps.storage,
           config: this.deps.config,
@@ -25507,4 +25533,4 @@ export {
   blendGraphExpandedRecallScore,
   Orchestrator
 };
-//# sourceMappingURL=chunk-FDAPXLRC.js.map
+//# sourceMappingURL=chunk-FR75B4UU.js.map