@remnic/core 9.3.633 → 9.3.635

package/dist/orchestrator.js

@@ -27,7 +27,7 @@ import {
   sanitizeSessionKeyForFilename,
   shouldFilterLifecycleRecallCandidate,
   summarizeGraphShadowComparison
-} from "./chunk-WLZBVYC6.js";
+} from "./chunk-TFICNXXU.js";
 import "./chunk-KVDUDYEN.js";
 import "./chunk-5RIRL3XL.js";
 import "./chunk-4HFJQCJZ.js";
@@ -57,7 +57,7 @@ import "./chunk-HZVIYZYN.js";
 import "./chunk-XJNBEDFE.js";
 import "./chunk-MHQC2WU2.js";
 import "./chunk-OZKZ2TRP.js";
-import "./chunk-2ROPI5OE.js";
+import "./chunk-6GC5SGFE.js";
 import "./chunk-MGN7VHWQ.js";
 import "./chunk-5IZL4DCV.js";
 import "./chunk-X7XN6YU4.js";
@@ -90,7 +90,7 @@ import "./chunk-OAZ5MFUB.js";
 import "./chunk-PYPOFEMK.js";
 import "./chunk-WLEB7WCG.js";
 import "./chunk-VEWZZM3H.js";
-import "./chunk-WR64DQFE.js";
+import "./chunk-SQZ42MKH.js";
 import "./chunk-6HEM6HTQ.js";
 import "./chunk-XCAZF7KQ.js";
 import "./chunk-3PG3H5TD.js";
@@ -110,35 +110,17 @@ import "./chunk-ZRWB5D4H.js";
 import "./chunk-A6D7A2FW.js";
 import "./chunk-FF4KLI5W.js";
 import "./chunk-SFQ6QNL7.js";
-import "./chunk-ZJR7VG5L.js";
-import "./chunk-YRMKDTKF.js";
-import "./chunk-JOASJWQR.js";
-import "./chunk-EWLQPEO6.js";
-import "./chunk-3MAONBX3.js";
-import "./chunk-RG3LBSGH.js";
-import "./chunk-CYEPCZN5.js";
-import "./chunk-DCGT4FPP.js";
-import "./chunk-Q4CAQGKQ.js";
-import "./chunk-CINZGPSJ.js";
 import "./chunk-LEG7XWS2.js";
-import "./chunk-ZFXCQPNO.js";
-import "./chunk-Q6YIJGXJ.js";
-import "./chunk-ORFGK3XI.js";
-import "./chunk-OIF36KGD.js";
-import "./chunk-7DTASS5T.js";
 import "./chunk-KFY3SGN7.js";
-import "./chunk-TZVQQTG4.js";
-import "./chunk-FAV25DUZ.js";
 import "./chunk-33JBK2XP.js";
 import "./chunk-TQNRI55H.js";
 import "./chunk-6GUG4YNM.js";
 import "./chunk-JXS5PDQ7.js";
-import "./chunk-6GDHLVJC.js";
+import "./chunk-AV5ZEH4M.js";
 import "./chunk-BEUDU7Y4.js";
 import "./chunk-3PY7VHV7.js";
 import "./chunk-AJU4PJGY.js";
 import "./chunk-FZZ2QTJI.js";
-import "./chunk-3ONXXHQO.js";
 import "./chunk-LMDRGRJ2.js";
 import "./chunk-OKTXM5H4.js";
 import "./chunk-3UXOZBHV.js";
@@ -157,12 +139,28 @@ import "./chunk-KD3QD3A5.js";
 import "./chunk-6VF75M3X.js";
 import "./chunk-H3FZVNRN.js";
 import "./chunk-HQ6NIBL6.js";
-import "./chunk-PVGDJXVK.js";
 import "./chunk-OADWQ5CR.js";
 import "./chunk-7WV3F5DQ.js";
 import "./chunk-EDQVAMQI.js";
 import "./chunk-JGSKJHF7.js";
 import "./chunk-YQNADJCT.js";
+import "./chunk-LASA46TQ.js";
+import "./chunk-RAGXUVQW.js";
+import "./chunk-JOASJWQR.js";
+import "./chunk-RN7MUWON.js";
+import "./chunk-3MAONBX3.js";
+import "./chunk-RG3LBSGH.js";
+import "./chunk-CYEPCZN5.js";
+import "./chunk-DCGT4FPP.js";
+import "./chunk-Q4CAQGKQ.js";
+import "./chunk-CINZGPSJ.js";
+import "./chunk-ZFXCQPNO.js";
+import "./chunk-Q6YIJGXJ.js";
+import "./chunk-ORFGK3XI.js";
+import "./chunk-OIF36KGD.js";
+import "./chunk-7DTASS5T.js";
+import "./chunk-DEDTFRH2.js";
+import "./chunk-FAV25DUZ.js";
 import "./chunk-CI7RKSRE.js";
 import "./chunk-6HMYUWXR.js";
 import "./chunk-EI6V5UXY.js";
@@ -170,6 +168,7 @@ import "./chunk-QY7YA7OL.js";
 import "./chunk-NNVTUXEB.js";
 import "./chunk-QDW3E4RD.js";
 import "./chunk-H3PHZLMF.js";
+import "./chunk-3ONXXHQO.js";
 import "./chunk-XL7FK7PJ.js";
 import "./chunk-2LSZVONP.js";
 import "./chunk-DEUNUKTD.js";
@@ -199,6 +198,7 @@ import "./chunk-JUC24CTX.js";
 import "./chunk-TBBDFYXW.js";
 import "./chunk-ZBJMUXZH.js";
 import "./chunk-2ODBA7MQ.js";
+import "./chunk-PVGDJXVK.js";
 import "./chunk-A2IYSXDQ.js";
 import "./chunk-LPSF4OQH.js";
 import "./chunk-BJMBJZ2Y.js";

package/dist/qmd.js

@@ -11,13 +11,13 @@ import {
   resolveQmdCapabilities,
   shouldAutoUpgradeQmd,
   versionAtLeast
-} from "./chunk-TZVQQTG4.js";
+} from "./chunk-DEDTFRH2.js";
 import "./chunk-FAV25DUZ.js";
-import "./chunk-PVGDJXVK.js";
 import "./chunk-NNVTUXEB.js";
 import "./chunk-CPPS65WS.js";
 import "./chunk-JUC24CTX.js";
 import "./chunk-2ODBA7MQ.js";
+import "./chunk-PVGDJXVK.js";
 import "./chunk-PZ5AY32C.js";
 export {
   QMD_SUPPORTED_VERSION,

package/dist/retrieval-agents.js

@@ -7,10 +7,10 @@ import {
   runDirectAgent,
   runTemporalAgent,
   shouldRunAgent
-} from "./chunk-2ROPI5OE.js";
+} from "./chunk-6GC5SGFE.js";
 import "./chunk-MGN7VHWQ.js";
-import "./chunk-PVGDJXVK.js";
 import "./chunk-2ODBA7MQ.js";
+import "./chunk-PVGDJXVK.js";
 import "./chunk-PZ5AY32C.js";
 export {
   PARALLEL_AGENT_WEIGHTS,

package/dist/search/embed-helper.js

@@ -1,10 +1,10 @@
 import {
   EmbedHelper
-} from "../chunk-EWLQPEO6.js";
+} from "../chunk-RN7MUWON.js";
 import "../chunk-CINZGPSJ.js";
 import "../chunk-3ONXXHQO.js";
-import "../chunk-PVGDJXVK.js";
 import "../chunk-2ODBA7MQ.js";
+import "../chunk-PVGDJXVK.js";
 import "../chunk-PZ5AY32C.js";
 export {
   EmbedHelper

package/dist/search/factory.js

@@ -2,9 +2,9 @@ import {
   createConversationIndexRuntime,
   createConversationSearchBackend,
   createSearchBackend
-} from "../chunk-YRMKDTKF.js";
+} from "../chunk-RAGXUVQW.js";
 import "../chunk-JOASJWQR.js";
-import "../chunk-EWLQPEO6.js";
+import "../chunk-RN7MUWON.js";
 import "../chunk-3MAONBX3.js";
 import "../chunk-RG3LBSGH.js";
 import "../chunk-CYEPCZN5.js";
@@ -15,14 +15,14 @@ import "../chunk-Q6YIJGXJ.js";
 import "../chunk-ORFGK3XI.js";
 import "../chunk-OIF36KGD.js";
 import "../chunk-7DTASS5T.js";
-import "../chunk-TZVQQTG4.js";
+import "../chunk-DEDTFRH2.js";
 import "../chunk-FAV25DUZ.js";
-import "../chunk-3ONXXHQO.js";
-import "../chunk-PVGDJXVK.js";
 import "../chunk-NNVTUXEB.js";
+import "../chunk-3ONXXHQO.js";
 import "../chunk-CPPS65WS.js";
 import "../chunk-JUC24CTX.js";
 import "../chunk-2ODBA7MQ.js";
+import "../chunk-PVGDJXVK.js";
 import "../chunk-PZ5AY32C.js";
 export {
   createConversationIndexRuntime,

package/dist/search/index.js

@@ -2,13 +2,13 @@ import {
   createConversationIndexRuntime,
   createConversationSearchBackend,
   createSearchBackend
-} from "../chunk-YRMKDTKF.js";
+} from "../chunk-RAGXUVQW.js";
 import {
   RemoteSearchBackend
 } from "../chunk-JOASJWQR.js";
 import {
   EmbedHelper
-} from "../chunk-EWLQPEO6.js";
+} from "../chunk-RN7MUWON.js";
 import {
   LanceDbBackend
 } from "../chunk-3MAONBX3.js";
@@ -29,14 +29,14 @@ import "../chunk-Q6YIJGXJ.js";
 import "../chunk-ORFGK3XI.js";
 import "../chunk-OIF36KGD.js";
 import "../chunk-7DTASS5T.js";
-import "../chunk-TZVQQTG4.js";
+import "../chunk-DEDTFRH2.js";
 import "../chunk-FAV25DUZ.js";
-import "../chunk-3ONXXHQO.js";
-import "../chunk-PVGDJXVK.js";
 import "../chunk-NNVTUXEB.js";
+import "../chunk-3ONXXHQO.js";
 import "../chunk-CPPS65WS.js";
 import "../chunk-JUC24CTX.js";
 import "../chunk-2ODBA7MQ.js";
+import "../chunk-PVGDJXVK.js";
 import "../chunk-PZ5AY32C.js";
 export {
   EmbedHelper,

package/dist/search/lancedb-backend.js

@@ -4,8 +4,8 @@ import {
 import "../chunk-Q4CAQGKQ.js";
 import "../chunk-CINZGPSJ.js";
 import "../chunk-FAV25DUZ.js";
-import "../chunk-PVGDJXVK.js";
 import "../chunk-2ODBA7MQ.js";
+import "../chunk-PVGDJXVK.js";
 import "../chunk-PZ5AY32C.js";
 export {
   LanceDbBackend

package/dist/search/meilisearch-backend.js

@@ -4,8 +4,8 @@ import {
 import "../chunk-Q4CAQGKQ.js";
 import "../chunk-CINZGPSJ.js";
 import "../chunk-FAV25DUZ.js";
-import "../chunk-PVGDJXVK.js";
 import "../chunk-2ODBA7MQ.js";
+import "../chunk-PVGDJXVK.js";
 import "../chunk-PZ5AY32C.js";
 export {
   MeilisearchBackend

package/dist/search/orama-backend.js

@@ -5,8 +5,8 @@ import {
 import "../chunk-Q4CAQGKQ.js";
 import "../chunk-CINZGPSJ.js";
 import "../chunk-FAV25DUZ.js";
-import "../chunk-PVGDJXVK.js";
 import "../chunk-2ODBA7MQ.js";
+import "../chunk-PVGDJXVK.js";
 import "../chunk-PZ5AY32C.js";
 export {
   OramaBackend,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.3.633",
+  "version": "9.3.635",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",

package/src/access-mcp.ts

@@ -1433,7 +1433,7 @@ export class EngramMcpServer {
             query: { type: "string" },
             namespace: { type: "string" },
             maxResults: { type: "number" },
-            collection: { type: "string", description: "QMD collection (omit for memory, 'global' for all)" },
+            collection: { type: "string", description: "QMD collection. With namespaces enabled, omitted, base, and 'global' searches stay scoped to readable namespaces; namespace-derived collections require matching namespace access." },
           },
           required: ["query"],
           additionalProperties: false,

package/src/access-service-namespace.test.ts

@@ -6,6 +6,7 @@ import path from "node:path";
 import test from "node:test";
 
 import { EngramAccessInputError, EngramAccessService } from "./access-service.js";
+import { namespaceCollectionName } from "./namespaces/search.js";
 import type { StorageManager } from "./storage.js";
 import type { PluginConfig } from "./types.js";
 
@@ -25,6 +26,8 @@ function makeConfig(): PluginConfig {
     daySum: { enabled: false },
     searchBackend: "orama",
     qmd: { enabled: false },
+    qmdCollection: "test-memory",
+    qmdMaxResults: 10,
     nativeKnowledge: { enabled: false },
     recall: { budget: {} },
     consolidation: { enabled: false },
@@ -50,14 +53,35 @@ function makeService(): {
   (service as unknown as {
     orchestrator: {
       config: PluginConfig;
+      qmd: {
+        search(query: string, collection?: string, maxResults?: number): Promise<unknown[]>;
+        searchGlobal(query: string, maxResults?: number): Promise<unknown[]>;
+      };
       getStorage(namespace: string): Promise<StorageManager>;
+      searchAcrossNamespaces(params: {
+        query: string;
+        namespaces?: string[];
+        maxResults?: number;
+        mode?: string;
+      }): Promise<unknown[]>;
     };
   }).orchestrator = {
     config: makeConfig(),
+    qmd: {
+      async search() {
+        throw new Error("qmd.search should not run in namespace mode");
+      },
+      async searchGlobal() {
+        throw new Error("qmd.searchGlobal should not run in namespace mode");
+      },
+    },
     async getStorage(namespace: string): Promise<StorageManager> {
       getStorageCalls.push(namespace);
       return storage;
     },
+    async searchAcrossNamespaces() {
+      return [];
+    },
   };
 
   return { service, storage, getStorageCalls };
@@ -126,6 +150,294 @@ test("memoryBrowse resolves namespace storage for read principals", async () =>
   assert.deepEqual(getStorageCalls, ["team"]);
 });
 
+test("memorySearch without an explicit namespace uses readable recall namespaces", async () => {
+  const { service } = makeService();
+  let searchParams: unknown;
+  (service as unknown as {
+    orchestrator: {
+      searchAcrossNamespaces(params: unknown): Promise<Array<{ path: string; score: number; snippet: string }>>;
+    };
+  }).orchestrator.searchAcrossNamespaces = async (params) => {
+    searchParams = params;
+    return [{ path: "default/facts/a.md", score: 0.7, snippet: "matched" }];
+  };
+
+  const result = await service.memorySearch({
+    query: "deployment notes",
+    maxResults: 3,
+    principal: "reader",
+  });
+
+  assert.deepEqual(searchParams, {
+    query: "deployment notes",
+    namespaces: ["default", "shared"],
+    maxResults: 3,
+    mode: "search",
+  });
+  assert.equal(result.count, 1);
+});
+
+test("memorySearch with an explicit namespace searches only that readable namespace", async () => {
+  const { service } = makeService();
+  let searchParams: unknown;
+  (service as unknown as {
+    orchestrator: {
+      searchAcrossNamespaces(params: unknown): Promise<unknown[]>;
+    };
+  }).orchestrator.searchAcrossNamespaces = async (params) => {
+    searchParams = params;
+    return [];
+  };
+
+  await service.memorySearch({
+    query: "release note",
+    namespace: "team",
+    maxResults: 2,
+    principal: "reader",
+  });
+
+  assert.deepEqual(searchParams, {
+    query: "release note",
+    namespaces: ["team"],
+    maxResults: 2,
+    mode: "search",
+  });
+});
+
+test("memorySearch rejects unreadable namespaces before collection routing", async () => {
+  const { service } = makeService();
+  let searchCalls = 0;
+  (service as unknown as {
+    orchestrator: {
+      searchAcrossNamespaces(params: unknown): Promise<unknown[]>;
+    };
+  }).orchestrator.searchAcrossNamespaces = async () => {
+    searchCalls += 1;
+    return [];
+  };
+
+  await assert.rejects(
+    () =>
+      service.memorySearch({
+        query: "release note",
+        namespace: "team",
+        collection: namespaceCollectionName("test-memory", "team", {
+          defaultNamespace: "default",
+          useLegacyDefaultCollection: false,
+        }),
+        principal: "stranger",
+      }),
+    /namespace is not readable: team/,
+  );
+  assert.equal(searchCalls, 0);
+});
+
+test("memorySearch rejects empty collection names", async () => {
+  const { service } = makeService();
+  let searchCalls = 0;
+  (service as unknown as {
+    orchestrator: {
+      searchAcrossNamespaces(params: unknown): Promise<unknown[]>;
+    };
+  }).orchestrator.searchAcrossNamespaces = async () => {
+    searchCalls += 1;
+    return [];
+  };
+
+  await assert.rejects(
+    () =>
+      service.memorySearch({
+        query: "deployment notes",
+        collection: "   ",
+        principal: "reader",
+      }),
+    /collection must be a non-empty string/,
+  );
+  assert.equal(searchCalls, 0);
+});
+
+test("memorySearch treats global collection as ACL-scoped when namespaces are enabled", async () => {
+  const { service } = makeService();
+  let globalSearchCalls = 0;
+  let searchParams: unknown;
+  (service as unknown as {
+    orchestrator: {
+      qmd: {
+        searchGlobal(query: string, maxResults?: number): Promise<unknown[]>;
+      };
+      searchAcrossNamespaces(params: unknown): Promise<unknown[]>;
+    };
+  }).orchestrator.qmd.searchGlobal = async () => {
+    globalSearchCalls += 1;
+    return [];
+  };
+  (service as unknown as {
+    orchestrator: {
+      searchAcrossNamespaces(params: unknown): Promise<unknown[]>;
+    };
+  }).orchestrator.searchAcrossNamespaces = async (params) => {
+    searchParams = params;
+    return [];
+  };
+
+  await service.memorySearch({
+    query: "runbook",
+    collection: "global",
+    principal: "reader",
+  });
+
+  assert.equal(globalSearchCalls, 0);
+  assert.deepEqual(searchParams, {
+    query: "runbook",
+    namespaces: ["default", "shared"],
+    maxResults: undefined,
+    mode: "search",
+  });
+});
+
+test("memorySearch accepts a namespace-scoped collection for the requested namespace", async () => {
+  const { service } = makeService();
+  let searchParams: unknown;
+  (service as unknown as {
+    orchestrator: {
+      searchAcrossNamespaces(params: unknown): Promise<unknown[]>;
+    };
+  }).orchestrator.searchAcrossNamespaces = async (params) => {
+    searchParams = params;
+    return [];
+  };
+
+  await service.memorySearch({
+    query: "release note",
+    namespace: "team",
+    collection: namespaceCollectionName("test-memory", "team", {
+      defaultNamespace: "default",
+      useLegacyDefaultCollection: false,
+    }),
+    principal: "reader",
+  });
+
+  assert.deepEqual(searchParams, {
+    query: "release note",
+    namespaces: ["team"],
+    maxResults: undefined,
+    mode: "search",
+  });
+});
+
+test("memorySearch accepts a readable namespace-scoped collection without duplicate namespace", async () => {
+  const { service } = makeService();
+  let searchParams: unknown;
+  (service as unknown as {
+    orchestrator: {
+      searchAcrossNamespaces(params: unknown): Promise<unknown[]>;
+    };
+  }).orchestrator.searchAcrossNamespaces = async (params) => {
+    searchParams = params;
+    return [];
+  };
+
+  await service.memorySearch({
+    query: "release note",
+    collection: namespaceCollectionName("test-memory", "team", {
+      defaultNamespace: "default",
+      useLegacyDefaultCollection: false,
+    }),
+    principal: "reader",
+  });
+
+  assert.deepEqual(searchParams, {
+    query: "release note",
+    namespaces: ["team"],
+    maxResults: undefined,
+    mode: "search",
+  });
+});
+
+test("memorySearch rejects arbitrary custom collections when namespaces are enabled", async () => {
+  const { service } = makeService();
+  let qmdSearchCalls = 0;
+  (service as unknown as {
+    orchestrator: {
+      qmd: {
+        search(query: string, collection?: string, maxResults?: number): Promise<unknown[]>;
+      };
+    };
+  }).orchestrator.qmd.search = async () => {
+    qmdSearchCalls += 1;
+    return [];
+  };
+
+  await assert.rejects(
+    () =>
+      service.memorySearch({
+        query: "deployment notes",
+        collection: "custom-collection",
+        principal: "reader",
+      }),
+    /collection is not namespace-scoped for the requested principal/,
+  );
+  assert.equal(qmdSearchCalls, 0);
+});
+
+test("memorySearch honors custom collections when namespaces are disabled", async () => {
+  const { service } = makeService();
+  (service as unknown as { orchestrator: { config: PluginConfig } }).orchestrator.config = {
+    ...makeConfig(),
+    namespacesEnabled: false,
+  };
+  let qmdSearchArgs: unknown[] | undefined;
+  (service as unknown as {
+    orchestrator: {
+      qmd: {
+        search(query: string, collection?: string, maxResults?: number): Promise<unknown[]>;
+      };
+    };
+  }).orchestrator.qmd.search = async (...args) => {
+    qmdSearchArgs = args;
+    return [{ path: "facts/a.md", score: 0.5, snippet: "matched" }];
+  };
+
+  const result = await service.memorySearch({
+    query: "deployment notes",
+    collection: "custom-collection",
+    maxResults: 4,
+  });
+
+  assert.deepEqual(qmdSearchArgs, ["deployment notes", "custom-collection", 4]);
+  assert.equal(result.count, 1);
+});
+
+test("memorySearch rejects unsupported namespaces when namespaces are disabled", async () => {
+  const { service } = makeService();
+  (service as unknown as { orchestrator: { config: PluginConfig } }).orchestrator.config = {
+    ...makeConfig(),
+    namespacesEnabled: false,
+  };
+  let qmdSearchCalls = 0;
+  (service as unknown as {
+    orchestrator: {
+      qmd: {
+        search(query: string, collection?: string, maxResults?: number): Promise<unknown[]>;
+      };
+    };
+  }).orchestrator.qmd.search = async () => {
+    qmdSearchCalls += 1;
+    return [];
+  };
+
+  await assert.rejects(
+    () =>
+      service.memorySearch({
+        query: "deployment notes",
+        namespace: "team",
+        collection: "custom-collection",
+      }),
+    /unsupported namespace: team/,
+  );
+  assert.equal(qmdSearchCalls, 0);
+});
+
 test("offlineSyncFiles reports invalid requested paths as input errors", async () => {
   const { service } = makeService();
   (service as unknown as {