@remnic/core 9.27.0 → 9.28.0

package/dist/{chunk-HORJVJ6K.js → chunk-2TQ2UFKH.js}

@@ -7,18 +7,18 @@ import {
 import {
   openclawReplayNormalizer
 } from "./chunk-H4CKS5B2.js";
-import {
-  importMarkdownBundle
-} from "./chunk-HDDRVXX4.js";
-import {
-  importSqlite
-} from "./chunk-PYHOAXTI.js";
 import {
   exportJsonBundle
 } from "./chunk-UP6MOYCB.js";
 import {
   exportSqlite
 } from "./chunk-BV2TIZ4F.js";
+import {
+  importMarkdownBundle
+} from "./chunk-HDDRVXX4.js";
+import {
+  importSqlite
+} from "./chunk-PYHOAXTI.js";
 import {
   detectImportFormat
 } from "./chunk-OZKVVUJB.js";
@@ -27,19 +27,10 @@ import {
 } from "./chunk-2DL3OFLD.js";
 import {
   backupMemoryDir
-} from "./chunk-BXLOS5AJ.js";
+} from "./chunk-2NLLXCJG.js";
 import {
   exportMarkdownBundle
 } from "./chunk-765K3SAT.js";
-import {
-  buildReplayNormalizerRegistry,
-  clampBatchSize,
-  runReplay
-} from "./chunk-FGDKJJZS.js";
-import {
-  isReplaySource,
-  normalizeReplaySessionKey
-} from "./chunk-AJVLDJU6.js";
 import {
   RoutingRulesStore
 } from "./chunk-XL24QQ63.js";
@@ -50,16 +41,22 @@ import {
   WebDavServer
 } from "./chunk-PYIFUBRK.js";
 import {
-  migrateObservations
-} from "./chunk-MNB5RMAY.js";
+  buildReplayNormalizerRegistry,
+  clampBatchSize,
+  runReplay
+} from "./chunk-FGDKJJZS.js";
+import {
+  isReplaySource,
+  normalizeReplaySessionKey
+} from "./chunk-AJVLDJU6.js";
 import {
   rebuildMemoryLifecycleLedger
-} from "./chunk-EUSLKI4X.js";
+} from "./chunk-KKBTBUVT.js";
 import {
   rebuildMemoryProjection,
   repairMemoryProjection,
   verifyMemoryProjection
-} from "./chunk-BHLN7L7M.js";
+} from "./chunk-WVVK2RFM.js";
 import {
   rebuildObservations
 } from "./chunk-DX3XRGLH.js";
@@ -67,8 +64,8 @@ import {
   archiveObservations
 } from "./chunk-MC6XO7T4.js";
 import {
-  runCompatChecks
-} from "./chunk-GQL52GQ5.js";
+  migrateObservations
+} from "./chunk-MNB5RMAY.js";
 import {
   getBulkImportSource,
   listBulkImportSources,
@@ -76,8 +73,8 @@ import {
   runBulkImportPipeline
 } from "./chunk-HSSERO3E.js";
 import {
-  searchVerifiedEpisodes
-} from "./chunk-UT3OQPFA.js";
+  runCompatChecks
+} from "./chunk-GQL52GQ5.js";
 import {
   getUtilityLearningStatus,
   learnUtilityPromotionWeights
@@ -86,20 +83,23 @@ import {
   getUtilityTelemetryStatus,
   recordUtilityTelemetryEvent
 } from "./chunk-TERNBNJB.js";
+import {
+  searchVerifiedEpisodes
+} from "./chunk-2BEJ4XCF.js";
 import {
   ThreadingManager
 } from "./chunk-OJP3N7UK.js";
 import {
   promoteSemanticRuleFromMemory
-} from "./chunk-5BRT4Z2I.js";
+} from "./chunk-EZWWCN7I.js";
 import {
   searchVerifiedSemanticRules
-} from "./chunk-JDOJZTFF.js";
+} from "./chunk-VFNI3RPT.js";
 import {
   buildResumeBundleFromState,
   getResumeBundleStatus,
   recordResumeBundle
-} from "./chunk-LLISELSY.js";
+} from "./chunk-TBMRQZDY.js";
 import {
   getWorkProductLedgerStatus,
   recordWorkProductLedgerEntry,
@@ -110,19 +110,7 @@ import {
 } from "./chunk-HYQJQGD3.js";
 import {
   parseXrayCliOptions
-} from "./chunk-CSXHRAJJ.js";
-import {
-  resolveAgentAccessAuthToken
-} from "./chunk-TGQ2NTWH.js";
-import {
-  collectPatternMemories,
-  explainPatternMemory,
-  parsePatternsExplainOptions,
-  parsePatternsListOptions,
-  parseStrictCliDate,
-  renderPatternExplain,
-  renderPatternsList
-} from "./chunk-3T74IZB3.js";
+} from "./chunk-EG64LXKL.js";
 import {
   readRuntimePolicySnapshot,
   sanitizeRuntimePolicyValues
@@ -135,12 +123,21 @@ import {
   runOperatorInventory,
   runOperatorRepair,
   runOperatorSetup
-} from "./chunk-2RAC4JIG.js";
+} from "./chunk-S24E4MBQ.js";
 import {
   analyzeSessionIntegrity,
   applySessionRepair,
   planSessionRepair
 } from "./chunk-KFY3SGN7.js";
+import {
+  collectPatternMemories,
+  explainPatternMemory,
+  parsePatternsExplainOptions,
+  parsePatternsListOptions,
+  parseStrictCliDate,
+  renderPatternExplain,
+  renderPatternsList
+} from "./chunk-3T74IZB3.js";
 import {
   GITHUB_CONNECTOR_ID,
   GMAIL_CONNECTOR_ID,
@@ -158,12 +155,12 @@ import {
 import {
   listConnectorStates
 } from "./chunk-6GUG4YNM.js";
-import {
-  searchHarmonicRetrieval
-} from "./chunk-AV5ZEH4M.js";
 import {
   rescoreMemoryImportance
 } from "./chunk-JXS5PDQ7.js";
+import {
+  searchHarmonicRetrieval
+} from "./chunk-AV5ZEH4M.js";
 import {
   createEvalBaselineSnapshot,
   getEvalHarnessStatus,
@@ -202,11 +199,11 @@ import {
 } from "./chunk-UQ7RN5HK.js";
 import {
   parseConfig
-} from "./chunk-GJJBPI6I.js";
+} from "./chunk-FOCEI3TN.js";
 import {
   EngramAccessHttpServer,
   MeetingsInputError
-} from "./chunk-RSYJV25N.js";
+} from "./chunk-JIF3VRKQ.js";
 import {
   WearablesInputError
 } from "./chunk-V7IZKJI3.js";
@@ -219,13 +216,13 @@ import {
   createProductionChatLlmAdapter,
   loadChatSession,
   sessionBelongsToPrincipal
-} from "./chunk-YSGBD3QN.js";
+} from "./chunk-IYT632D5.js";
 import {
   getAbstractionNodeStoreStatus
 } from "./chunk-OADWQ5CR.js";
 import {
   EngramAccessService
-} from "./chunk-NUWMZIYZ.js";
+} from "./chunk-UR5SIN7H.js";
 import {
   WorkStorage
 } from "./chunk-GDB4J2H3.js";
@@ -242,13 +239,13 @@ import {
   parseRecallExplainFormat,
   renderRecallExplain,
   renderXray
-} from "./chunk-M5EPMNS4.js";
+} from "./chunk-P2CLYN6H.js";
 import {
   listMemoryGovernanceRuns,
   readMemoryGovernanceRunArtifact,
   restoreMemoryGovernanceRun,
   runMemoryGovernance
-} from "./chunk-FRVTCCGD.js";
+} from "./chunk-GJPCP5CA.js";
 import {
   getObjectiveStateStoreStatus
 } from "./chunk-6HMYUWXR.js";
@@ -256,7 +253,7 @@ import {
   listNamespaces,
   runNamespaceMigration,
   verifyNamespaces
-} from "./chunk-EYJSW2RV.js";
+} from "./chunk-VYYNBJXH.js";
 import {
   renderQmdBacklogStatus
 } from "./chunk-IUM3VSHI.js";
@@ -265,17 +262,17 @@ import {
 } from "./chunk-L2DPF4DF.js";
 import {
   meetingIdDate
-} from "./chunk-CIQXI47W.js";
+} from "./chunk-Q5VJUNXA.js";
 import {
   isValidTranscriptDate
 } from "./chunk-UHVXE24Y.js";
 import {
   RECALL_DISCLOSURE_LEVELS,
   isRecallDisclosure
-} from "./chunk-V25OWXAC.js";
+} from "./chunk-JQ7T5VDC.js";
 import {
   STATE_FILE_MAX_DECRYPT_BYTES
-} from "./chunk-XKGPIWGI.js";
+} from "./chunk-FBZTWUK5.js";
 import {
   assertPathInsideRoot
 } from "./chunk-GCASGYIO.js";
@@ -285,6 +282,11 @@ import {
 import {
   getCausalTrajectoryStoreStatus
 } from "./chunk-W4FBGYGK.js";
+import {
+  hostSecretRefResolver,
+  loadHostSecretRefResolver,
+  resolveAgentAccessAuthToken
+} from "./chunk-IJ6WHMFB.js";
 import {
   renderExtractionLivenessStats
 } from "./chunk-443XCR34.js";
@@ -3953,7 +3955,8 @@ function registerCli(api, orchestrator, registerOptions = {}) {
       });
       cmd.command("doctor").description("Run safe Engram health diagnostics with remediation guidance").option("--json", "Emit machine-readable JSON only").action(async (...args) => {
         const options = args[0] ?? {};
-        const report = await runOperatorDoctor({ orchestrator });
+        const resolveSecretRef = await loadHostSecretRefResolver(registerOptions);
+        const report = await runOperatorDoctor({ orchestrator, resolveSecretRef });
         if (reportHasMachineReadableOutput(options)) {
           console.log(JSON.stringify(report, null, 2));
         } else {
@@ -4572,7 +4575,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
           }
         }
         if (sourceArchive.endsWith(".enc")) {
-          const { isEncryptedCapsuleFile } = await import("./capsule-crypto-YO5QJ6L3.js");
+          const { isEncryptedCapsuleFile } = await import("./capsule-crypto-7FJQINUR.js");
           const encDetected = await isEncryptedCapsuleFile(sourceArchive).catch(() => true);
           if (encDetected) {
             throw new Error(
@@ -4735,7 +4738,7 @@ function registerCli(api, orchestrator, registerOptions = {}) {
           const { parseExportBundle } = await import("./transfer/types.js");
           let decryptedBuf;
           try {
-            const { decryptCapsuleFileInMemory } = await import("./capsule-crypto-YO5QJ6L3.js");
+            const { decryptCapsuleFileInMemory } = await import("./capsule-crypto-7FJQINUR.js");
             decryptedBuf = await decryptCapsuleFileInMemory(archivePath, memoryDir);
           } catch (decErr) {
             const msg = decErr instanceof Error ? decErr.message : String(decErr);
@@ -5967,14 +5970,16 @@ ${doc.content}` : doc.content,
         console.log(JSON.stringify(status, null, 2));
         console.log("OK");
       });
-      const accessService = new EngramAccessService(orchestrator);
+      const accessService = new EngramAccessService(orchestrator, {
+        resolveSecretRef: hostSecretRefResolver(registerOptions)
+      });
       const accessCmd = cmd.command("access").description("Manage Engram HTTP and MCP access surfaces");
       accessCmd.command("http-serve").description("Start local authenticated HTTP access server").option("--host <host>", "Bind host", "127.0.0.1").option("--port <n>", "Bind port", "4318").option("--token <token>", "Bearer token (defaults to config/env)").option("--principal <principal>", "Trusted principal (defaults to config/env)").option("--max-body-bytes <n>", "Maximum request body size", "131072").option("--trust-principal-header", "Trust the X-Engram-Principal header for per-request principal resolution. Only enable when the server is behind a trusted proxy or when the auth token provides sufficient trust.").action(async (...args) => {
         const options = args[0] ?? {};
         const portRaw = parseInt(String(options.port ?? "4318"), 10);
         const maxBodyBytesRaw = parseInt(String(options.maxBodyBytes ?? "131072"), 10);
         const cliTokenOverride = typeof options.token === "string" && options.token.trim().length > 0 ? options.token : void 0;
-        const resolveSecretRef = registerOptions.resolveSecretRef ?? (registerOptions.loadResolveSecretRef ? await registerOptions.loadResolveSecretRef() : null);
+        const resolveSecretRef = await loadHostSecretRefResolver(registerOptions);
         const resolvedConfigAuthToken = cliTokenOverride ? void 0 : await resolveAgentAccessAuthToken(
           orchestrator.config.agentAccessHttp.authToken,
           { resolveSecretRef }
@@ -7976,4 +7981,4 @@ export {
   listMemoryMarkdownFilePaths,
   registerCli
 };
-//# sourceMappingURL=chunk-HORJVJ6K.js.map
+//# sourceMappingURL=chunk-2TQ2UFKH.js.map