@remnic/core 9.3.637 → 9.3.639

package/dist/semantic-consolidation.js

@@ -7,18 +7,18 @@ import {
   materializeAfterSemanticConsolidation,
   parseConsolidationResponse,
   parseOperatorAwareConsolidationResponse
-} from "./chunk-X7EJF46S.js";
-import "./chunk-7A2QKUUA.js";
+} from "./chunk-H4RWKZE2.js";
+import "./chunk-7XRSLMUD.js";
 import "./chunk-LN4YGHTM.js";
 import {
   resolveExtensionsRoot
 } from "./chunk-JLNBQWZ2.js";
 import "./chunk-3UXOZBHV.js";
-import "./chunk-QYGIQ5NM.js";
+import "./chunk-SHHT4JTC.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-J6A3CX5N.js";
-import "./chunk-FPNQF475.js";
+import "./chunk-3F7RMHC4.js";
 import "./chunk-RULE4VG5.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-MB5RSUW6.js";

package/dist/semantic-rule-promotion.js

@@ -1,12 +1,12 @@
 import {
   promoteSemanticRuleFromMemory,
   setSemanticRulePromotionTestHooks
-} from "./chunk-PUEAEQSN.js";
-import "./chunk-QYGIQ5NM.js";
+} from "./chunk-ISMZIMD3.js";
+import "./chunk-SHHT4JTC.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-J6A3CX5N.js";
-import "./chunk-FPNQF475.js";
+import "./chunk-3F7RMHC4.js";
 import "./chunk-RULE4VG5.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-MB5RSUW6.js";

package/dist/semantic-rule-verifier.d.ts

@@ -1,4 +1,4 @@
-import { g as MemoryFile } from './types-CpMPD8xl.js';
+import { g as MemoryFile } from './types-BzA1FKbg.js';
 import './types-BliCnURB.js';
 import './index-DJ9QWMw-.js';
 

package/dist/semantic-rule-verifier.js

@@ -1,11 +1,11 @@
 import {
   searchVerifiedSemanticRules
-} from "./chunk-4S3N6HFG.js";
-import "./chunk-QYGIQ5NM.js";
+} from "./chunk-C6XO6ONP.js";
+import "./chunk-SHHT4JTC.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-J6A3CX5N.js";
-import "./chunk-FPNQF475.js";
+import "./chunk-3F7RMHC4.js";
 import "./chunk-RULE4VG5.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-MB5RSUW6.js";

package/dist/session-observer-bands.d.ts

@@ -1,4 +1,4 @@
-import { a1 as SessionObserverBandConfig } from './types-CpMPD8xl.js';
+import { a1 as SessionObserverBandConfig } from './types-BzA1FKbg.js';
 import './types-BliCnURB.js';
 import './index-DJ9QWMw-.js';
 

package/dist/session-observer-state.d.ts

@@ -1,4 +1,4 @@
-import { a1 as SessionObserverBandConfig } from './types-CpMPD8xl.js';
+import { a1 as SessionObserverBandConfig } from './types-BzA1FKbg.js';
 import './types-BliCnURB.js';
 import './index-DJ9QWMw-.js';
 

package/dist/shared-context/manager.d.ts

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { P as PluginConfig } from '../types-CpMPD8xl.js';
+import { P as PluginConfig } from '../types-BzA1FKbg.js';
 import '../types-BliCnURB.js';
 import '../index-DJ9QWMw-.js';
 

package/dist/signal.d.ts

@@ -1,4 +1,4 @@
-import { ar as SignalScanResult } from './types-CpMPD8xl.js';
+import { ar as SignalScanResult } from './types-BzA1FKbg.js';
 import './types-BliCnURB.js';
 import './index-DJ9QWMw-.js';
 

package/dist/storage.d.ts

@@ -1,6 +1,6 @@
 import { VersioningConfig } from './page-versioning.js';
 import { ConsolidationOperator } from './consolidation-operator.js';
-import { P as PluginConfig, h as MemoryStatus, M as MemoryCategory, I as ImportanceScore, i as MemoryLink, j as MemoryFrontmatter, g as MemoryFile, E as EntityStructuredSection, k as BufferState, l as MetaState, m as MemoryActionEvent, n as MemoryLifecycleEvent, o as BufferSurpriseEvent, B as BehaviorSignalEvent, C as CompressionGuidelineOptimizerState, p as ContinuityIncidentOpenInput, q as ContinuityIncidentRecord, r as ContinuityIncidentCloseInput, s as ContinuityImprovementLoop, t as ContinuityLoopUpsertInput, u as ContinuityLoopReviewInput, F as FileHygieneConfig, v as EntityRelationship, w as EntityActivityEntry, x as EntityFile, y as AccessTrackingEntry, z as MemoryProjectionCurrentState, D as MemorySummary, T as TopicScore } from './types-CpMPD8xl.js';
+import { P as PluginConfig, h as MemoryStatus, M as MemoryCategory, I as ImportanceScore, i as MemoryLink, j as MemoryFrontmatter, g as MemoryFile, E as EntityStructuredSection, k as BufferState, l as MetaState, m as MemoryActionEvent, n as MemoryLifecycleEvent, o as BufferSurpriseEvent, B as BehaviorSignalEvent, C as CompressionGuidelineOptimizerState, p as ContinuityIncidentOpenInput, q as ContinuityIncidentRecord, r as ContinuityIncidentCloseInput, s as ContinuityImprovementLoop, t as ContinuityLoopUpsertInput, u as ContinuityLoopReviewInput, F as FileHygieneConfig, v as EntityRelationship, w as EntityActivityEntry, x as EntityFile, y as AccessTrackingEntry, z as MemoryProjectionCurrentState, D as MemorySummary, T as TopicScore } from './types-BzA1FKbg.js';
 import { ProjectedMemoryBrowseOptions, ProjectedMemoryBrowsePage, readProjectedGovernanceRecord } from './memory-projection-store.js';
 import './types-BliCnURB.js';
 import './index-DJ9QWMw-.js';

package/dist/storage.js

@@ -9,11 +9,11 @@ import {
   parseEntityFile,
   serializeEntityFile,
   stripAttributesSuffix
-} from "./chunk-QYGIQ5NM.js";
+} from "./chunk-SHHT4JTC.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-J6A3CX5N.js";
-import "./chunk-FPNQF475.js";
+import "./chunk-3F7RMHC4.js";
 import "./chunk-RULE4VG5.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-MB5RSUW6.js";

package/dist/summarizer.d.ts

@@ -1,5 +1,5 @@
 import { ModelRegistry } from './model-registry.js';
-import { P as PluginConfig, G as GatewayConfig, _ as TranscriptEntry, a0 as HourlySummary } from './types-CpMPD8xl.js';
+import { P as PluginConfig, G as GatewayConfig, _ as TranscriptEntry, a0 as HourlySummary } from './types-BzA1FKbg.js';
 import { TranscriptManager } from './transcript.js';
 import './types-BliCnURB.js';
 import './index-DJ9QWMw-.js';

package/dist/summarizer.js

@@ -1,15 +1,15 @@
 import {
   HourlySummarizer
-} from "./chunk-HZVIYZYN.js";
+} from "./chunk-7R37SOT4.js";
 import "./chunk-XJNBEDFE.js";
 import "./chunk-XZ4WBBB5.js";
 import "./chunk-77NAFXUD.js";
-import "./chunk-FF4KLI5W.js";
-import "./chunk-723OMPUI.js";
+import "./chunk-A3BS64GV.js";
 import "./chunk-B5XMS73R.js";
 import "./chunk-7SI52C65.js";
 import "./chunk-L2EXJQJP.js";
 import "./chunk-RK6F44Y6.js";
+import "./chunk-FF4KLI5W.js";
 import "./chunk-NNVTUXEB.js";
 import "./chunk-RGMVMVMF.js";
 import "./chunk-EYIEWJNI.js";

package/dist/summary-snapshot.d.ts

@@ -1,4 +1,4 @@
-import { a0 as HourlySummary } from './types-CpMPD8xl.js';
+import { a0 as HourlySummary } from './types-BzA1FKbg.js';
 import './types-BliCnURB.js';
 import './index-DJ9QWMw-.js';
 

package/dist/temporal-supersession.d.ts

@@ -1,4 +1,4 @@
-import { j as MemoryFrontmatter } from './types-CpMPD8xl.js';
+import { j as MemoryFrontmatter } from './types-BzA1FKbg.js';
 import { StorageManager } from './storage.js';
 import './types-BliCnURB.js';
 import './index-DJ9QWMw-.js';

package/dist/temporal-validity.d.ts

@@ -1,4 +1,4 @@
-import { j as MemoryFrontmatter } from './types-CpMPD8xl.js';
+import { j as MemoryFrontmatter } from './types-BzA1FKbg.js';
 import './types-BliCnURB.js';
 import './index-DJ9QWMw-.js';
 

package/dist/threading.d.ts

@@ -1,4 +1,4 @@
-import { Y as BufferTurn, as as ConversationThread } from './types-CpMPD8xl.js';
+import { Y as BufferTurn, as as ConversationThread } from './types-BzA1FKbg.js';
 import './types-BliCnURB.js';
 import './index-DJ9QWMw-.js';
 

package/dist/tier-migration.d.ts

@@ -1,4 +1,4 @@
-import { g as MemoryFile } from './types-CpMPD8xl.js';
+import { g as MemoryFile } from './types-BzA1FKbg.js';
 import { StorageManager } from './storage.js';
 import { MemoryTier } from './tier-routing.js';
 import { SearchBackend } from './search/port.js';

package/dist/tier-routing.d.ts

@@ -1,4 +1,4 @@
-import { g as MemoryFile } from './types-CpMPD8xl.js';
+import { g as MemoryFile } from './types-BzA1FKbg.js';
 import { LifecycleSignals } from './lifecycle.js';
 import './types-BliCnURB.js';
 import './index-DJ9QWMw-.js';

package/dist/topics.d.ts

@@ -1,4 +1,4 @@
-import { g as MemoryFile, T as TopicScore } from './types-CpMPD8xl.js';
+import { g as MemoryFile, T as TopicScore } from './types-BzA1FKbg.js';
 import './types-BliCnURB.js';
 import './index-DJ9QWMw-.js';
 

package/dist/transcript.d.ts

@@ -1,4 +1,4 @@
-import { P as PluginConfig, _ as TranscriptEntry, $ as Checkpoint } from './types-CpMPD8xl.js';
+import { P as PluginConfig, _ as TranscriptEntry, $ as Checkpoint } from './types-BzA1FKbg.js';
 import { SessionIntegrityReport } from './session-integrity.js';
 import './types-BliCnURB.js';
 import './index-DJ9QWMw-.js';

package/dist/transcript.js

@@ -1,8 +1,8 @@
 import {
   TranscriptManager
-} from "./chunk-A6D7A2FW.js";
-import "./chunk-FF4KLI5W.js";
+} from "./chunk-IHG27THY.js";
 import "./chunk-KFY3SGN7.js";
+import "./chunk-FF4KLI5W.js";
 import "./chunk-2ODBA7MQ.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/dist/{types-CpMPD8xl.d.ts → types-BzA1FKbg.d.ts}

@@ -1222,6 +1222,8 @@ interface PluginConfig {
     judgeTrainingDir: string;
     hourlySummariesEnabled: boolean;
     daySummaryEnabled: boolean;
+    /** Timezone override for the day summary cron (issue #1475). */
+    daySummaryTimezone?: string;
     /** If true, Engram may attempt to auto-register an hourly summary cron job (default off). */
     hourlySummaryCronAutoRegister: boolean;
     /** If true, Engram may attempt to auto-register the nightly governance cron job (default off). */
@@ -1547,6 +1549,8 @@ interface PluginConfig {
      * consolidation. When set, this chain is resolved through gateway providers
      * instead of using gatewayAgentId or agents.defaults.model. All task paths
      * route through the shared `gatewayTaskChainOptions` helper.
+     * LCM summarization is the one fast-tier exception: if `fastGatewayAgentId`
+     * is configured, LCM uses that persona before falling back to this chain.
      *
      * Only takes effect when `modelSource: "gateway"`; ignored (with a startup
      * warning) under `modelSource: "plugin"`. See issue #1365 / PR #1370.

package/dist/types.d.ts

@@ -1,3 +1,3 @@
 import './types-BliCnURB.js';
 import './index-DJ9QWMw-.js';
-export { y as AccessTrackingEntry, A as ActiveRecallChatType, d as ActiveRecallModelFallbackPolicy, b as ActiveRecallPromptStyle, a as ActiveRecallQueryMode, c as ActiveRecallThinking, a7 as AgentAccessAuthToken, b2 as AgentAccessHttpConfig, b3 as AgentDefaultsConfig, b4 as AgentPersona, f as AgentPersonaModelConfig, b5 as BehaviorLoopAdjustment, e as BehaviorLoopPolicyState, b6 as BehaviorSignalDirection, B as BehaviorSignalEvent, b7 as BehaviorSignalType, aH as BootstrapOptions, aI as BootstrapResult, V as BriefingActiveThread, b8 as BriefingCalendarSourceError, aO as BriefingConfig, Q as BriefingFocus, O as BriefingFollowup, aP as BriefingOpenCommitment, X as BriefingRecentEntity, W as BriefingResult, N as BriefingSections, aQ as BriefingWindow, b9 as BufferEntryState, k as BufferState, o as BufferSurpriseEvent, Y as BufferTurn, U as CalendarEvent, S as CalendarSource, ba as CaptureMode, $ as Checkpoint, bb as CodexCliReasoningEffort, bc as CodexCompactionFlushMode, aR as CodexCompatConfig, bd as CodexConnectorConfig, aG as CodingContext, aL as CodingModeConfig, be as CompressionGuidelineActivationState, a9 as CompressionGuidelineOptimizerActionSummary, a8 as CompressionGuidelineOptimizerEventCounts, aa as CompressionGuidelineOptimizerRuleUpdate, bf as CompressionGuidelineOptimizerSourceWindow, C as CompressionGuidelineOptimizerState, bg as ConfidenceTier, bh as ConsolidationAction, bi as ConsolidationItem, aJ as ConsolidationObservation, ag as ConsolidationResult, s as ContinuityImprovementLoop, r as ContinuityIncidentCloseInput, p as ContinuityIncidentOpenInput, q as ContinuityIncidentRecord, bj as ContinuityIncidentState, bk as ContinuityLoopCadence, u as ContinuityLoopReviewInput, bl as ContinuityLoopStatus, t as ContinuityLoopUpsertInput, bm as ContradictionScanConfig, as as ConversationThread, bn as CronConversationRecallMode, bo as CronRecallMode, aS as DEFAULT_RECALL_DISCLOSURE, ah as DaySummaryResult, bp as DreamingConfig, bq as DreamingNarrativePromptStyle, br as DreamsDeepSleepConfig, bs as DreamsLightSleepConfig, au as DreamsPhase, bt as DreamsPhaseStatus, bu as DreamsPhasesConfig, bv as DreamsRemConfig, av as DreamsRunResult, at as DreamsStatusResult, bw as EngramTraceEvent, w as EntityActivityEntry, x as EntityFile, ac as EntityMention, v as EntityRelationship, ad as EntitySchemaDefinition, ae as EntitySchemaSectionDefinition, E as EntityStructuredSection, aK as EntityTimelineEntry, aT as ExtractedFact, bx as ExtractedProcedureStep, by as ExtractedQuestion, bz as ExtractedReasoningTrace, bA as ExtractedReasoningTraceStep, bB as ExtractedRelationship, bC as ExtractionPassSource, af as ExtractionResult, F as FileHygieneConfig, G as GatewayConfig, bD as GitHubLiveConnectorConfig, bE as GmailLiveConnectorConfig, bF as GoogleDriveLiveConnectorConfig, bG as HeartbeatConfig, bH as HeartbeatDetectionMode, a0 as HourlySummary, J as IdentityInjectionMode, a5 as ImportanceLevel, I as ImportanceScore, a2 as LifecycleState, L as LiveConnectorsConfig, bI as LlmTraceCallback, bJ as LlmTraceEvent, ak as MemoryActionEligibilityContext, aU as MemoryActionEligibilitySource, m as MemoryActionEvent, bK as MemoryActionOutcome, bL as MemoryActionPolicyDecision, al as MemoryActionPolicyResult, bM as MemoryActionStatus, ab as MemoryActionType, M as MemoryCategory, g as MemoryFile, j as MemoryFrontmatter, ai as MemoryIntent, n as MemoryLifecycleEvent, am as MemoryLifecycleEventType, an as MemoryLifecycleStateSummary, i as MemoryLink, bN as MemoryLinkType, aV as MemoryObservation, bO as MemoryOsPresetName, z as MemoryProjectionCurrentState, aW as MemoryScope, h as MemoryStatus, D as MemorySummary, l as MetaState, bP as ModelApi, bQ as ModelDefinitionConfig, bR as ModelProviderAuthMode, ao as ModelProviderConfig, bS as NamespacePolicy, ap as NativeKnowledgeConfig, bT as NativeKnowledgeFolderRuleConfig, bU as NativeKnowledgeObsidianVaultConfig, bV as NativeKnowledgeOpenClawWorkspaceConfig, bW as NotionLiveConnectorConfig, P as PluginConfig, a4 as PolicyClass, bX as PrincipalFromSessionKeyMode, bY as PrincipalRule, bZ as ProceduralConfig, aj as QmdSearchExplain, Z as QmdSearchResult, b_ as QuestionEntry, aX as RECALL_DISCLOSURE_LEVELS, b$ as ReasoningEffort, K as RecallDisclosure, c0 as RecallPipelineConfig, H as RecallPlanMode, c1 as RecallSectionConfig, R as RecallTierExplain, c2 as RecallTraceEvent, c3 as RelevanceFeedback, aq as RetrievalTier, c4 as SPECULATIVE_TTL_DAYS, c5 as ScoredEntity, a6 as SecretRef, c6 as SemanticChunkingConfigShape, a1 as SessionObserverBandConfig, c7 as SignalLevel, ar as SignalScanResult, c8 as SlotBehaviorConfig, c9 as SlotMismatchMode, T as TopicScore, _ as TranscriptEntry, ca as TriggerMode, a3 as VerificationState, cb as confidenceTier, b1 as isRecallDisclosure } from './types-CpMPD8xl.js';
+export { y as AccessTrackingEntry, A as ActiveRecallChatType, d as ActiveRecallModelFallbackPolicy, b as ActiveRecallPromptStyle, a as ActiveRecallQueryMode, c as ActiveRecallThinking, a7 as AgentAccessAuthToken, b2 as AgentAccessHttpConfig, b3 as AgentDefaultsConfig, b4 as AgentPersona, f as AgentPersonaModelConfig, b5 as BehaviorLoopAdjustment, e as BehaviorLoopPolicyState, b6 as BehaviorSignalDirection, B as BehaviorSignalEvent, b7 as BehaviorSignalType, aH as BootstrapOptions, aI as BootstrapResult, V as BriefingActiveThread, b8 as BriefingCalendarSourceError, aO as BriefingConfig, Q as BriefingFocus, O as BriefingFollowup, aP as BriefingOpenCommitment, X as BriefingRecentEntity, W as BriefingResult, N as BriefingSections, aQ as BriefingWindow, b9 as BufferEntryState, k as BufferState, o as BufferSurpriseEvent, Y as BufferTurn, U as CalendarEvent, S as CalendarSource, ba as CaptureMode, $ as Checkpoint, bb as CodexCliReasoningEffort, bc as CodexCompactionFlushMode, aR as CodexCompatConfig, bd as CodexConnectorConfig, aG as CodingContext, aL as CodingModeConfig, be as CompressionGuidelineActivationState, a9 as CompressionGuidelineOptimizerActionSummary, a8 as CompressionGuidelineOptimizerEventCounts, aa as CompressionGuidelineOptimizerRuleUpdate, bf as CompressionGuidelineOptimizerSourceWindow, C as CompressionGuidelineOptimizerState, bg as ConfidenceTier, bh as ConsolidationAction, bi as ConsolidationItem, aJ as ConsolidationObservation, ag as ConsolidationResult, s as ContinuityImprovementLoop, r as ContinuityIncidentCloseInput, p as ContinuityIncidentOpenInput, q as ContinuityIncidentRecord, bj as ContinuityIncidentState, bk as ContinuityLoopCadence, u as ContinuityLoopReviewInput, bl as ContinuityLoopStatus, t as ContinuityLoopUpsertInput, bm as ContradictionScanConfig, as as ConversationThread, bn as CronConversationRecallMode, bo as CronRecallMode, aS as DEFAULT_RECALL_DISCLOSURE, ah as DaySummaryResult, bp as DreamingConfig, bq as DreamingNarrativePromptStyle, br as DreamsDeepSleepConfig, bs as DreamsLightSleepConfig, au as DreamsPhase, bt as DreamsPhaseStatus, bu as DreamsPhasesConfig, bv as DreamsRemConfig, av as DreamsRunResult, at as DreamsStatusResult, bw as EngramTraceEvent, w as EntityActivityEntry, x as EntityFile, ac as EntityMention, v as EntityRelationship, ad as EntitySchemaDefinition, ae as EntitySchemaSectionDefinition, E as EntityStructuredSection, aK as EntityTimelineEntry, aT as ExtractedFact, bx as ExtractedProcedureStep, by as ExtractedQuestion, bz as ExtractedReasoningTrace, bA as ExtractedReasoningTraceStep, bB as ExtractedRelationship, bC as ExtractionPassSource, af as ExtractionResult, F as FileHygieneConfig, G as GatewayConfig, bD as GitHubLiveConnectorConfig, bE as GmailLiveConnectorConfig, bF as GoogleDriveLiveConnectorConfig, bG as HeartbeatConfig, bH as HeartbeatDetectionMode, a0 as HourlySummary, J as IdentityInjectionMode, a5 as ImportanceLevel, I as ImportanceScore, a2 as LifecycleState, L as LiveConnectorsConfig, bI as LlmTraceCallback, bJ as LlmTraceEvent, ak as MemoryActionEligibilityContext, aU as MemoryActionEligibilitySource, m as MemoryActionEvent, bK as MemoryActionOutcome, bL as MemoryActionPolicyDecision, al as MemoryActionPolicyResult, bM as MemoryActionStatus, ab as MemoryActionType, M as MemoryCategory, g as MemoryFile, j as MemoryFrontmatter, ai as MemoryIntent, n as MemoryLifecycleEvent, am as MemoryLifecycleEventType, an as MemoryLifecycleStateSummary, i as MemoryLink, bN as MemoryLinkType, aV as MemoryObservation, bO as MemoryOsPresetName, z as MemoryProjectionCurrentState, aW as MemoryScope, h as MemoryStatus, D as MemorySummary, l as MetaState, bP as ModelApi, bQ as ModelDefinitionConfig, bR as ModelProviderAuthMode, ao as ModelProviderConfig, bS as NamespacePolicy, ap as NativeKnowledgeConfig, bT as NativeKnowledgeFolderRuleConfig, bU as NativeKnowledgeObsidianVaultConfig, bV as NativeKnowledgeOpenClawWorkspaceConfig, bW as NotionLiveConnectorConfig, P as PluginConfig, a4 as PolicyClass, bX as PrincipalFromSessionKeyMode, bY as PrincipalRule, bZ as ProceduralConfig, aj as QmdSearchExplain, Z as QmdSearchResult, b_ as QuestionEntry, aX as RECALL_DISCLOSURE_LEVELS, b$ as ReasoningEffort, K as RecallDisclosure, c0 as RecallPipelineConfig, H as RecallPlanMode, c1 as RecallSectionConfig, R as RecallTierExplain, c2 as RecallTraceEvent, c3 as RelevanceFeedback, aq as RetrievalTier, c4 as SPECULATIVE_TTL_DAYS, c5 as ScoredEntity, a6 as SecretRef, c6 as SemanticChunkingConfigShape, a1 as SessionObserverBandConfig, c7 as SignalLevel, ar as SignalScanResult, c8 as SlotBehaviorConfig, c9 as SlotMismatchMode, T as TopicScore, _ as TranscriptEntry, ca as TriggerMode, a3 as VerificationState, cb as confidenceTier, b1 as isRecallDisclosure } from './types-BzA1FKbg.js';

package/dist/types.js

@@ -4,7 +4,7 @@ import {
   SPECULATIVE_TTL_DAYS,
   confidenceTier,
   isRecallDisclosure
-} from "./chunk-FPNQF475.js";
+} from "./chunk-3F7RMHC4.js";
 import "./chunk-PZ5AY32C.js";
 export {
   DEFAULT_RECALL_DISCLOSURE,

package/dist/utility-runtime.d.ts

@@ -1,5 +1,5 @@
 import { TierRoutingPolicy } from './tier-routing.js';
-import './types-CpMPD8xl.js';
+import './types-BzA1FKbg.js';
 import './types-BliCnURB.js';
 import './index-DJ9QWMw-.js';
 import './lifecycle.js';

package/dist/verified-recall.js

@@ -1,12 +1,12 @@
 import {
   searchVerifiedEpisodes
-} from "./chunk-YROCXMCK.js";
+} from "./chunk-RJGPH2Q3.js";
 import "./chunk-HQ6NIBL6.js";
-import "./chunk-QYGIQ5NM.js";
+import "./chunk-SHHT4JTC.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-J6A3CX5N.js";
-import "./chunk-FPNQF475.js";
+import "./chunk-3F7RMHC4.js";
 import "./chunk-RULE4VG5.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-MB5RSUW6.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.3.637",
+  "version": "9.3.639",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",

package/src/access-http.test.ts

@@ -5,7 +5,7 @@ import path from "node:path";
 import test from "node:test";
 import { gzipSync } from "node:zlib";
 
-import { EngramAccessHttpServer } from "./access-http.js";
+import { EngramAccessHttpServer, type RemnicAdminControls, type RemnicAdminDashboardStatus } from "./access-http.js";
 import { EngramAccessInputError, type EngramAccessService } from "./access-service.js";
 import { parseConfig } from "./config.js";
 import { readPair, writePair } from "./contradiction/contradiction-review.js";
@@ -117,7 +117,9 @@ test("HTTP admin console assets are public but API routes require bearer authent
   try {
     const shell = await fetch(`http://127.0.0.1:${status.port}/remnic/ui/`);
     assert.equal(shell.status, 200);
-    assert.match(await shell.text(), /Remnic Admin Console/);
+    const shellText = await shell.text();
+    assert.match(shellText, /Remnic Admin Console/);
+    assert.doesNotMatch(shellText, /test-token/);
 
     const app = await fetch(`http://127.0.0.1:${status.port}/remnic/ui/app.js`);
     assert.equal(app.status, 200);
@@ -133,6 +135,112 @@ test("HTTP admin console assets are public but API routes require bearer authent
   }
 });
 
+test("HTTP admin console can prefill the primary bearer token when explicitly enabled", async () => {
+  const service = {} as EngramAccessService;
+  const server = new EngramAccessHttpServer({
+    service,
+    port: 0,
+    authToken: "test-token",
+    adminConsolePrefillToken: true,
+  });
+
+  const status = await server.start();
+  try {
+    const unauthenticatedShell = await fetch(`http://127.0.0.1:${status.port}/engram/ui/`);
+    assert.equal(unauthenticatedShell.status, 200);
+    assert.doesNotMatch(await unauthenticatedShell.text(), /test-token/);
+
+    const shell = await fetch(`http://127.0.0.1:${status.port}/engram/ui/`, {
+      headers: { authorization: "Bearer test-token" },
+    });
+    assert.equal(shell.status, 200);
+    assert.equal(shell.headers.get("cache-control"), "private, no-store");
+    assert.equal(shell.headers.get("vary"), "authorization");
+    const shellText = await shell.text();
+    assert.match(
+      shellText,
+      /window\.__REMNIC_ADMIN_CONSOLE_PREFILL_TOKEN__="test-token"/,
+    );
+
+    const app = await fetch(`http://127.0.0.1:${status.port}/engram/ui/app.js`);
+    assert.equal(app.status, 200);
+    assert.doesNotMatch(await app.text(), /test-token/);
+  } finally {
+    await server.stop();
+  }
+});
+
+test("HTTP admin dashboard endpoints require bearer authentication and apply config patches", async () => {
+  const service = {} as EngramAccessService;
+  const patches: unknown[] = [];
+  const dashboard: RemnicAdminDashboardStatus = {
+    config: {
+      path: "/tmp/remnic/config.json",
+      exists: true,
+      writable: true,
+      restartRequired: false,
+      values: {
+        modelSource: "plugin",
+        model: "gpt-4.1-mini",
+      },
+    },
+    harnesses: [],
+    models: [],
+    features: [],
+  };
+  const adminControls: RemnicAdminControls = {
+    status: async () => dashboard,
+    update: async (patch) => {
+      patches.push(patch);
+      return {
+        ...dashboard,
+        config: {
+          ...dashboard.config,
+          restartRequired: true,
+          values: {
+            ...dashboard.config.values,
+            modelSource: "gateway",
+            gatewayAgentId: "sage-router",
+          },
+        },
+      };
+    },
+  };
+  const server = new EngramAccessHttpServer({
+    service,
+    port: 0,
+    authToken: "test-token",
+    adminControls,
+  });
+
+  const status = await server.start();
+  try {
+    const unauthorized = await fetch(`http://127.0.0.1:${status.port}/engram/v1/admin/dashboard`);
+    assert.equal(unauthorized.status, 401);
+
+    const dashboardResponse = await fetch(`http://127.0.0.1:${status.port}/engram/v1/admin/dashboard`, {
+      headers: { authorization: "Bearer test-token" },
+    });
+    assert.equal(dashboardResponse.status, 200);
+    assert.deepEqual(await dashboardResponse.json(), dashboard);
+
+    const patchResponse = await fetch(`http://127.0.0.1:${status.port}/remnic/v1/admin/config`, {
+      method: "PATCH",
+      headers: {
+        authorization: "Bearer test-token",
+        "content-type": "application/json",
+      },
+      body: JSON.stringify({ modelSource: "gateway", gatewayAgentId: "sage-router" }),
+    });
+    assert.equal(patchResponse.status, 200);
+    const body = await patchResponse.json() as RemnicAdminDashboardStatus;
+    assert.equal(body.config.restartRequired, true);
+    assert.deepEqual(patches, [{ modelSource: "gateway", gatewayAgentId: "sage-router" }]);
+  } finally {
+    await server.stop();
+  }
+});
+
 test("HTTP coding-context endpoint accepts projectTag shorthand", async () => {
   const calls: unknown[] = [];
   const service = {

package/src/access-http.ts

@@ -41,6 +41,8 @@ export interface EngramAccessHttpServerOptions {
   maxBodyBytes?: number;
   adminConsoleEnabled?: boolean;
   adminConsolePublicDir?: string;
+  /** Inject the primary auth token into the admin console shell for trusted launch surfaces. */
+  adminConsolePrefillToken?: boolean;
   trustPrincipalHeader?: boolean;
   /** Enable adapter-based identity resolution from request headers */
   enableAdapters?: boolean;
@@ -52,6 +54,8 @@ export interface EngramAccessHttpServerOptions {
   citationsAutoDetect?: boolean;
   /** Advertise legacy engram.* tool aliases on tools/list (issue #1427). Default true. */
   emitLegacyTools?: boolean;
+  /** Optional authenticated admin dashboard/config controls supplied by the host server. */
+  adminControls?: RemnicAdminControls;
 }
 
 export interface EngramAccessHttpServerStatus {
@@ -61,6 +65,57 @@ export interface EngramAccessHttpServerStatus {
   maxBodyBytes: number;
 }
 
+export interface RemnicAdminHarnessStatus {
+  id: string;
+  label: string;
+  detected: boolean;
+  enabled: boolean;
+  source?: string;
+  detail?: string;
+}
+
+export interface RemnicAdminModelOption {
+  id: string;
+  label: string;
+  provider: string;
+  detected: boolean;
+  enabled: boolean;
+  default?: boolean;
+  source?: string;
+  endpoint?: string;
+}
+
+export interface RemnicAdminFeatureStatus {
+  key: string;
+  label: string;
+  enabled: boolean;
+  writable: boolean;
+  restartRequired?: boolean;
+}
+
+export interface RemnicAdminConfigStatus {
+  path: string;
+  exists: boolean;
+  writable: boolean;
+  restartRequired: boolean;
+  values: Record<string, string | number | boolean | null>;
+}
+
+export interface RemnicAdminDashboardStatus {
+  config: RemnicAdminConfigStatus;
+  harnesses: RemnicAdminHarnessStatus[];
+  providers?: RemnicAdminHarnessStatus[];
+  models: RemnicAdminModelOption[];
+  features: RemnicAdminFeatureStatus[];
+}
+
+export type RemnicAdminConfigPatch = Record<string, unknown>;
+
+export interface RemnicAdminControls {
+  status: () => Promise<RemnicAdminDashboardStatus>;
+  update?: (patch: RemnicAdminConfigPatch) => Promise<RemnicAdminDashboardStatus>;
+}
+
 function resolveDefaultAdminConsolePublicDir(): string {
   const thisDir = path.dirname(fileURLToPath(import.meta.url));
   const candidates = [
@@ -210,6 +265,8 @@ export class EngramAccessHttpServer {
   private readonly maxBodyBytes: number;
   private readonly adminConsoleEnabled: boolean;
   private readonly adminConsolePublicDir: string;
+  private readonly adminConsolePrefillToken?: string;
+  private readonly adminControls?: RemnicAdminControls;
   private readonly trustPrincipalHeader: boolean;
   private readonly adapterRegistry: AdapterRegistry | null;
   private readonly writeRequestTimestamps: number[] = [];
@@ -242,6 +299,8 @@ export class EngramAccessHttpServer {
       : 131072;
     this.adminConsoleEnabled = options.adminConsoleEnabled !== false;
     this.adminConsolePublicDir = options.adminConsolePublicDir ?? defaultAdminConsolePublicDir;
+    this.adminConsolePrefillToken = options.adminConsolePrefillToken === true ? this.authToken : undefined;
+    this.adminControls = options.adminControls;
     this.trustPrincipalHeader = options.trustPrincipalHeader === true;
     this.adapterRegistry = options.enableAdapters !== false
       ? (options.adapterRegistry ?? new AdapterRegistry())
@@ -492,6 +551,38 @@ export class EngramAccessHttpServer {
       return;
     }
 
+    if (
+      req.method === "GET" &&
+      (pathname === "/engram/v1/admin/dashboard" || pathname === "/remnic/v1/admin/dashboard")
+    ) {
+      if (!this.adminControls) {
+        this.respondJson(res, 404, { error: "admin_controls_unavailable", code: "admin_controls_unavailable" });
+        return;
+      }
+      this.respondJson(res, 200, await this.adminControls.status());
+      return;
+    }
+
+    if (
+      req.method === "PATCH" &&
+      (pathname === "/engram/v1/admin/config" || pathname === "/remnic/v1/admin/config")
+    ) {
+      if (!this.adminControls?.update) {
+        this.respondJson(res, 404, { error: "admin_controls_unavailable", code: "admin_controls_unavailable" });
+        return;
+      }
+      try {
+        this.respondJson(res, 200, await this.adminControls.update(await this.readJsonBody(req)));
+      } catch (error) {
+        throw new HttpError(
+          400,
+          error instanceof Error ? error.message : "invalid_admin_config_patch",
+          "invalid_admin_config_patch",
+        );
+      }
+      return;
+    }
+
     if (req.method === "POST" && pathname === "/engram/v1/recall") {
       const body = await this.readValidatedBody(req, "recall");
       // Preserve the distinction between `codingContext: null` (explicit
@@ -2244,7 +2335,7 @@ export class EngramAccessHttpServer {
       return true;
     }
     if (pathname === "/remnic/ui/" || pathname === "/engram/ui/") {
-      await this.respondStatic(res, path.join(this.adminConsolePublicDir, "index.html"), "text/html; charset=utf-8");
+      await this.respondAdminConsoleShell(req, res, pathname);
       return true;
     }
     if (pathname === "/remnic/ui/app.js" || pathname === "/engram/ui/app.js") {
@@ -2254,6 +2345,31 @@ export class EngramAccessHttpServer {
     return false;
   }
 
+  private async respondAdminConsoleShell(
+    req: IncomingMessage,
+    res: ServerResponse,
+    pathname: string,
+  ): Promise<void> {
+    try {
+      let body = await readFile(path.join(this.adminConsolePublicDir, "index.html"), "utf-8");
+      const canPrefillToken = this.adminConsolePrefillToken && this.isAuthorized(req, pathname);
+      if (canPrefillToken) {
+        const script = `<script>window.__REMNIC_ADMIN_CONSOLE_PREFILL_TOKEN__=${JSON.stringify(this.adminConsolePrefillToken)};</script>`;
+        body = body.includes("</head>")
+          ? body.replace("</head>", `${script}</head>`)
+          : `${script}${body}`;
+        res.setHeader("cache-control", "private, no-store");
+      }
+      res.setHeader("vary", "authorization");
+      res.statusCode = 200;
+      res.setHeader("content-type", "text/html; charset=utf-8");
+      res.setHeader("content-length", String(Buffer.byteLength(body)));
+      res.end(body);
+    } catch {
+      this.respondJson(res, 404, { error: "not_found" });
+    }
+  }
+
   private async respondStatic(res: ServerResponse, filePath: string, contentType: string): Promise<void> {
     try {
       const body = await readFile(filePath, "utf-8");