@remnic/core 9.3.680 → 9.3.681

package/dist/access-boundary.d.ts

@@ -0,0 +1,178 @@
+import { z } from 'zod';
+import { b as EngramAccessService } from './access-service-DvA6jyHL.js';
+import './storage.js';
+import './page-versioning.js';
+import './consolidation-operator.js';
+import './types-D3pm4NhH.js';
+import './types-ByK7T3L6.js';
+import './index-DJ9QWMw-.js';
+import './memory-projection-store.js';
+import './maintenance/memory-governance.js';
+import './runtime/better-sqlite.js';
+import 'better-sqlite3';
+import './types-B1VHaf2w.js';
+import './recall-explain-renderer.js';
+import './recall-state.js';
+import './search/port.js';
+import './recall-xray.js';
+import './memory-provenance.js';
+import './user-model.js';
+import './recall-audit-anomaly.js';
+import './recall-audit.js';
+import './explicit-capture.js';
+import './orchestrator-7zPqGupX.js';
+import './briefing.js';
+import './buffer.js';
+import './transcript.js';
+import './session-integrity.js';
+import './summarizer.js';
+import './model-registry.js';
+import './local-llm.js';
+import './fallback-llm.js';
+import './resolve-provider-secret.js';
+import './live-connectors-runner.js';
+import './framework-CNDn2164.js';
+import './relevance.js';
+import './negative.js';
+import './session-observer-state.js';
+import './embedding-fallback.js';
+import './semantic-DJR8_DMQ.js';
+import './capabilities.js';
+import './replay/types.js';
+import './extraction-judge.js';
+import './lcm/engine.js';
+import './lcm/archive.js';
+import './lcm/summarizer.js';
+import './lcm/dag.js';
+import './lcm/queue.js';
+import './semantic-consolidation-BX9Z9_aK.js';
+import './connectors/codex-materialize.js';
+import './logger.js';
+import './conversation-index/backend.js';
+import './conversation-index/chunker.js';
+import './faiss-adapter-BHecI1fF.js';
+import './runtime/child-process.js';
+import './namespaces/search.js';
+import './shared-context/manager.js';
+import './compounding/engine.js';
+import './policy-runtime.js';
+import './profiling.js';
+import './cross-namespace-budget.js';
+import './graph-snapshot.js';
+import './graph.js';
+import './trust-zones.js';
+import './memory-worth-outcomes.js';
+import './transfer/capsule-import.js';
+import './transfer/types.js';
+import './transfer/capsule-export.js';
+import './capsule-cli.js';
+import './offline-sync.js';
+import './action-confidence.js';
+
+/**
+ * Single input-validation and error boundary for the CLI/MCP/HTTP access
+ * surfaces (issue #1525, epic #1520 Phase 1).
+ *
+ * Every operation that crosses the access-service facade passes through ONE
+ * registry entry: a zod-validated request envelope, a shared error mapper,
+ * and the "reject invalid input and list valid options" behavior that
+ * CLAUDE.md rules 14/17/24/28/36/48/51 previously had to be re-implemented
+ * per handler. The three surfaces become thin adapters — one operation
+ * definition, three transports — so a validation fix lands everywhere at
+ * once.
+ *
+ * Host-agnostic (rule 31): operation names carry no `openclaw-*`/`engram-*`
+ * prefix. Session/namespace tenancy stays in the handler layer (resolved via
+ * ScopePlan #1521); the boundary validates SHAPE, not tenancy.
+ */
+
+/**
+ * Canonical operation ids. One id is shared by the MCP tool, the HTTP route,
+ * and the CLI command that expose the same operation. Add to this union as
+ * each domain-group migration PR (memory ops → connectors → namespaces …)
+ * lands; the fitness test in `access-surface-catalog.test.ts` treats the
+ * registered set as the migration state.
+ */
+type OperationName = "memory_get" | "memory_search" | "memory_store";
+/**
+ * Per-call context. `service` is the facade the handler delegates to; the
+ * boundary never reaches past it. `authenticatedPrincipal` is resolved by
+ * the SURFACE (MCP header / HTTP identity / CLI flag) before the boundary
+ * runs, so handlers stay principal-source-agnostic. `hooks` carries
+ * transport-level callbacks (e.g. HTTP write-quota enforcement) that must
+ * fire atomically inside the service call; surfaces that have no such hook
+ * leave it undefined.
+ */
+interface OperationContext {
+    readonly service: EngramAccessService;
+    readonly authenticatedPrincipal?: string;
+    readonly hooks?: OperationHooks;
+}
+/**
+ * Transport-level callbacks a handler forwards into the service call. Kept
+ * narrow on purpose: the boundary owns validation + dispatch shape, not
+ * transport policy. Add fields here only when a surface genuinely needs a
+ * callback the service itself consumes.
+ */
+interface OperationHooks {
+    /** HTTP write-quota gate; throws to reject the write when exhausted. */
+    readonly enforceWriteQuota?: () => void | Promise<void>;
+}
+interface OperationSpec<In, Out> {
+    /** Canonical operation id; matches an {@link OperationName}. */
+    readonly name: OperationName;
+    readonly description: string;
+    /** Zod schema validating the raw request envelope. */
+    readonly schema: z.ZodType<In>;
+    /** Handler invoked with the parsed input; throws EngramAccessInputError for domain faults. */
+    readonly handler: (input: In, ctx: OperationContext) => Promise<Out>;
+}
+interface BoundOperation<In = unknown, Out = unknown> {
+    readonly spec: OperationSpec<In, Out>;
+    /** Validate the raw envelope, then invoke the handler. Throws EngramAccessInputError on any validation failure. */
+    readonly run: (rawInput: unknown, ctx: OperationContext) => Promise<Out>;
+}
+/**
+ * Coerce boolean-like strings at the edge (rule 36). Accepts actual booleans
+ * and the string spellings clients send ("true"/"false"/"1"/"0"/"yes"/"no"/
+ * "on"/"off", case-insensitive). Rejects anything else loudly — `Boolean("false")`
+ * would silently be `true`, which is the bug rule 36 exists to prevent.
+ *
+ * `undefined`/`null`/`""` → `undefined`, so callers can keep treating an
+ * absent flag as "use the default" without a separate presence check.
+ */
+declare function coerceBooleanLike(value: unknown): boolean | undefined;
+/**
+ * Coerce + validate a positive integer from a numeric string or number
+ * (rule 28). Loosely-typed MCP/CLI clients send `"5"`; `typeof saved === "number"`
+ * on read-back would reject it later, so we coerce at the edge and reject
+ * booleans/objects loudly (`Number(true) === 1` would silently pass otherwise).
+ *
+ * `undefined`/`null`/`""` → `undefined`.
+ */
+declare function coercePositiveInteger(value: unknown, label: string): number | undefined;
+/**
+ * Expand `~` in a path-shaped input (rule 17). Node `fs` does NOT expand `~`;
+ * ad-hoc regex drifts. `undefined`/`null`/`""` → `undefined`.
+ */
+declare function normalizeOptionalPath(value: unknown): string | undefined;
+/**
+ * Turn a zod failure into an {@link EngramAccessInputError} whose message
+ * names the offending field and — for enum/union issues — lists the valid
+ * options, so the caller can correct rather than guess (rule 51).
+ */
+declare function formatZodIssues(error: z.ZodError): string;
+/**
+ * Register an operation. Throws if the name is already registered — duplicate
+ * registration is a programming error, not a runtime input fault, so it throws
+ * a plain Error (not the input-error class surfaces translate for clients).
+ */
+declare function defineOperation<In, Out>(spec: OperationSpec<In, Out>): BoundOperation<In, Out>;
+/** Look up a registered operation by canonical name. */
+declare function getOperation(name: OperationName): BoundOperation | undefined;
+/** All registered operation names. */
+declare function listRegisteredOperations(): readonly OperationName[];
+/** Test-only: clear the registry so pilot definitions can be re-registered. */
+declare function __resetRegistryForTest(): void;
+
+export { type BoundOperation, type OperationContext, type OperationHooks, type OperationName, type OperationSpec, __resetRegistryForTest, coerceBooleanLike, coercePositiveInteger, defineOperation, formatZodIssues, getOperation, listRegisteredOperations, normalizeOptionalPath };

package/dist/access-boundary.js

@@ -0,0 +1,121 @@
+import {
+  __resetRegistryForTest,
+  coerceBooleanLike,
+  coercePositiveInteger,
+  defineOperation,
+  formatZodIssues,
+  getOperation,
+  listRegisteredOperations,
+  normalizeOptionalPath
+} from "./chunk-NHFXF4ZO.js";
+import "./chunk-H4BDNIKQ.js";
+import "./chunk-GDASG7NC.js";
+import "./chunk-GDB4J2H3.js";
+import "./chunk-ARV3AUOM.js";
+import "./chunk-BT7NVCML.js";
+import "./chunk-H7XKCNR6.js";
+import "./chunk-OHX52AOS.js";
+import "./chunk-SOBJ6NEY.js";
+import "./chunk-7MOTEVAA.js";
+import "./chunk-RS25QOKZ.js";
+import "./chunk-JGSKJHF7.js";
+import "./chunk-FF4KLI5W.js";
+import "./chunk-6VP3YUCS.js";
+import "./chunk-BMFZLLNI.js";
+import "./chunk-CI7RKSRE.js";
+import "./chunk-6HMYUWXR.js";
+import "./chunk-L5MUA6Q7.js";
+import "./chunk-EG4TCVMU.js";
+import "./chunk-UJDV2NLT.js";
+import "./chunk-CYEPCZN5.js";
+import "./chunk-Q5ZU3RNY.js";
+import "./chunk-JOASJWQR.js";
+import "./chunk-RN7MUWON.js";
+import "./chunk-OUWAQVDJ.js";
+import "./chunk-DOCTITOP.js";
+import "./chunk-AER6MT24.js";
+import "./chunk-CINZGPSJ.js";
+import "./chunk-ZFXCQPNO.js";
+import "./chunk-7OGJQP7T.js";
+import "./chunk-E6ZDCOHM.js";
+import "./chunk-OIF36KGD.js";
+import "./chunk-7DTASS5T.js";
+import "./chunk-6RHNCKHG.js";
+import "./chunk-YNQ6DFSV.js";
+import "./chunk-EIR5VLIH.js";
+import "./chunk-YXWAILM4.js";
+import "./chunk-GKKAXVAJ.js";
+import "./chunk-EI6V5UXY.js";
+import "./chunk-QY7YA7OL.js";
+import "./chunk-O75CRYGF.js";
+import "./chunk-QDW3E4RD.js";
+import "./chunk-3ONXXHQO.js";
+import "./chunk-ODPLEWB6.js";
+import "./chunk-ZY2MNJR6.js";
+import "./chunk-2LDBXPLB.js";
+import "./chunk-2LSZVONP.js";
+import "./chunk-DEUNUKTD.js";
+import "./chunk-JD4SCARD.js";
+import "./chunk-KV6CX4ON.js";
+import "./chunk-TY5NT3T3.js";
+import "./chunk-M7XQSUBB.js";
+import "./chunk-5UZXUTVO.js";
+import "./chunk-5GPPACXK.js";
+import "./chunk-J6A3CX5N.js";
+import "./chunk-FMSDA2D3.js";
+import "./chunk-MB5RSUW6.js";
+import "./chunk-6KYMPV2O.js";
+import "./chunk-AWJ2FHCF.js";
+import "./chunk-42JKGUFJ.js";
+import "./chunk-RULE4VG5.js";
+import "./chunk-SCU65EZI.js";
+import "./chunk-DM2T26WE.js";
+import "./chunk-LDXUBPMO.js";
+import "./chunk-FVQJYWH7.js";
+import "./chunk-G7D6GZ5J.js";
+import "./chunk-VF4XKTX3.js";
+import "./chunk-RGMVMVMF.js";
+import "./chunk-KQAFEZQX.js";
+import "./chunk-WEHSQBFR.js";
+import "./chunk-X7Y7WX73.js";
+import "./chunk-J4EB7DNW.js";
+import "./chunk-BJMBJZ2Y.js";
+import "./chunk-UKJAGEXH.js";
+import "./chunk-FP2373TW.js";
+import "./chunk-PWWWLD7D.js";
+import "./chunk-UI3NYK34.js";
+import "./chunk-GCGJW34D.js";
+import "./chunk-J2HSAU72.js";
+import "./chunk-A6XUJE5D.js";
+import "./chunk-P7FMDTKL.js";
+import "./chunk-VS2IYZRU.js";
+import "./chunk-AH2JUU6X.js";
+import "./chunk-AC5LO7IU.js";
+import "./chunk-SOAU2OE2.js";
+import "./chunk-UZYLX7M6.js";
+import "./chunk-U3PN77QT.js";
+import "./chunk-4DJQYKMN.js";
+import "./chunk-EYIEWJNI.js";
+import "./chunk-JUC24CTX.js";
+import "./chunk-2ODBA7MQ.js";
+import "./chunk-TBBDFYXW.js";
+import "./chunk-ZBJMUXZH.js";
+import "./chunk-PVGDJXVK.js";
+import "./chunk-A2IYSXDQ.js";
+import "./chunk-LPSF4OQH.js";
+import "./chunk-TVVEYCNW.js";
+import "./chunk-RFYAYKTD.js";
+import "./chunk-LBLXEFWK.js";
+import "./chunk-VFUEZZBS.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  __resetRegistryForTest,
+  coerceBooleanLike,
+  coercePositiveInteger,
+  defineOperation,
+  formatZodIssues,
+  getOperation,
+  listRegisteredOperations,
+  normalizeOptionalPath
+};
+//# sourceMappingURL=access-boundary.js.map

package/dist/access-cli.js

@@ -1,113 +1,117 @@
 import {
   Orchestrator
-} from "./chunk-7AAKSHDG.js";
+} from "./chunk-I3HSKQT7.js";
 import "./chunk-4SKKVWLQ.js";
 import "./chunk-7HYPN2GC.js";
 import "./chunk-666A3MOW.js";
 import "./chunk-HHLLAQGZ.js";
-import "./chunk-3IE22DJ2.js";
+import "./chunk-UWK5OXUJ.js";
+import "./chunk-WEPMT6SC.js";
+import "./chunk-5VDJMYTF.js";
+import "./chunk-HP5FMB6L.js";
+import "./chunk-7N4KAIGN.js";
 import "./chunk-TPDBFYEG.js";
 import "./chunk-KCYE2MZM.js";
 import "./chunk-MAV46GWQ.js";
-import "./chunk-5VDJMYTF.js";
-import "./chunk-UWK5OXUJ.js";
+import "./chunk-TECVW3JP.js";
 import "./chunk-T2PO5MUF.js";
-import "./chunk-HP5FMB6L.js";
-import "./chunk-7N4KAIGN.js";
-import "./chunk-Q2H5U37U.js";
+import "./chunk-B2B2IHUH.js";
 import "./chunk-DRD2Q7HQ.js";
-import "./chunk-TECVW3JP.js";
-import "./chunk-UHGBNIOS.js";
 import "./chunk-LXOM6IQU.js";
+import "./chunk-S75M5ZRK.js";
+import "./chunk-ECZU5BJH.js";
+import "./chunk-UHGBNIOS.js";
+import "./chunk-R5DB26G6.js";
 import "./chunk-YTWNKQ2G.js";
 import "./chunk-MDYG7VI7.js";
 import "./chunk-VOUOLGIP.js";
-import "./chunk-S75M5ZRK.js";
-import "./chunk-ECZU5BJH.js";
 import "./chunk-QWRC7GIO.js";
 import "./chunk-XJNBEDFE.js";
-import "./chunk-R5DB26G6.js";
 import "./chunk-MHQC2WU2.js";
+import "./chunk-6GC5SGFE.js";
+import "./chunk-MGN7VHWQ.js";
 import "./chunk-5IZL4DCV.js";
+import "./chunk-X7XN6YU4.js";
 import "./chunk-452WDNFO.js";
 import "./chunk-E3VODCC3.js";
 import "./chunk-EC2AYKRX.js";
-import "./chunk-6GC5SGFE.js";
-import "./chunk-MGN7VHWQ.js";
-import "./chunk-44VFF3BB.js";
-import "./chunk-X7XN6YU4.js";
-import "./chunk-YDBIWGNI.js";
 import "./chunk-7DHTMOND.js";
+import "./chunk-44VFF3BB.js";
 import "./chunk-ZZTOURJI.js";
+import "./chunk-YDBIWGNI.js";
 import "./chunk-XKXKSQU7.js";
-import "./chunk-H63EDPFJ.js";
 import "./chunk-3GPTTA4J.js";
 import "./chunk-IISBCCWR.js";
 import "./chunk-VU3SVYMA.js";
-import "./chunk-YAZNBMNF.js";
+import "./chunk-H63EDPFJ.js";
 import "./chunk-PD6O7AXF.js";
+import "./chunk-YAZNBMNF.js";
+import "./chunk-LZTFCAKE.js";
+import "./chunk-UU6MVCJ6.js";
 import "./chunk-YXLT4EMM.js";
+import "./chunk-YVVQUAOO.js";
+import "./chunk-PYPOFEMK.js";
 import "./chunk-7YX23JBA.js";
 import "./chunk-Z2OXSMZK.js";
-import "./chunk-SLTKP5WJ.js";
+import "./chunk-EW5KFXHL.js";
 import "./chunk-4RA3C3EV.js";
 import "./chunk-ROZJACKP.js";
 import "./chunk-54V4BZWP.js";
 import "./chunk-XZ4WBBB5.js";
 import "./chunk-H3HDXD3U.js";
-import "./chunk-LZTFCAKE.js";
-import "./chunk-YVVQUAOO.js";
-import "./chunk-XCAZF7KQ.js";
-import "./chunk-MNUPGYIV.js";
-import "./chunk-UU6MVCJ6.js";
-import "./chunk-PYPOFEMK.js";
-import "./chunk-WLEB7WCG.js";
 import "./chunk-VEWZZM3H.js";
 import "./chunk-OQH5XUH3.js";
 import "./chunk-6HEM6HTQ.js";
-import "./chunk-3PG3H5TD.js";
-import "./chunk-OD4FM2U7.js";
-import "./chunk-V4ZHKCGA.js";
-import "./chunk-CTCPB57O.js";
-import "./chunk-LN4YGHTM.js";
-import "./chunk-JLNBQWZ2.js";
-import {
-  resolvePluginEntry
-} from "./chunk-CMTINOFS.js";
+import "./chunk-XCAZF7KQ.js";
+import "./chunk-NQMBSSWW.js";
+import "./chunk-WLEB7WCG.js";
 import "./chunk-2PRQG7PV.js";
 import "./chunk-X6IRLNOO.js";
-import "./chunk-NXBXM7Q6.js";
 import "./chunk-2F6NP3NT.js";
 import "./chunk-TERNBNJB.js";
+import "./chunk-I75DF4FZ.js";
 import "./chunk-W4RVMTHR.js";
-import "./chunk-LVTTO3VC.js";
+import "./chunk-KACIOX42.js";
 import "./chunk-ZRWB5D4H.js";
 import "./chunk-AGRPGAKR.js";
 import "./chunk-S4DDLTPX.js";
 import "./chunk-SFQ6QNL7.js";
 import "./chunk-33JBK2XP.js";
-import "./chunk-LZSMQHXC.js";
+import "./chunk-ARLRTZZZ.js";
 import "./chunk-KFY3SGN7.js";
+import {
+  resolvePluginEntry
+} from "./chunk-CMTINOFS.js";
 import "./chunk-TQNRI55H.js";
 import "./chunk-6GUG4YNM.js";
-import "./chunk-AV5ZEH4M.js";
 import "./chunk-JXS5PDQ7.js";
+import "./chunk-AV5ZEH4M.js";
 import "./chunk-AJU4PJGY.js";
 import "./chunk-BEUDU7Y4.js";
 import "./chunk-3PY7VHV7.js";
+import "./chunk-OKTXM5H4.js";
 import "./chunk-FZZ2QTJI.js";
+import "./chunk-3PG3H5TD.js";
 import "./chunk-LMDRGRJ2.js";
-import "./chunk-OKTXM5H4.js";
+import "./chunk-OD4FM2U7.js";
+import "./chunk-PBH4JUAB.js";
+import "./chunk-O2WELT5C.js";
+import "./chunk-G7Z3C2X6.js";
+import "./chunk-LN4YGHTM.js";
+import "./chunk-JLNBQWZ2.js";
 import "./chunk-3UXOZBHV.js";
+import "./chunk-KD3QD3A5.js";
+import "./chunk-6VF75M3X.js";
+import "./chunk-HQ6NIBL6.js";
 import "./chunk-P4BC54KI.js";
 import "./chunk-UQ7RN5HK.js";
 import "./chunk-IBTZEBUD.js";
+import "./chunk-H3FZVNRN.js";
 import "./chunk-LCC5EZTT.js";
 import "./chunk-B5XMS73R.js";
 import "./chunk-L2EXJQJP.js";
 import "./chunk-7SI52C65.js";
 import "./chunk-RK6F44Y6.js";
-import "./chunk-PBH4JUAB.js";
 import {
   parseConfig
 } from "./chunk-IUZWBCJX.js";
@@ -117,38 +121,42 @@ import "./chunk-Z5LAYHGJ.js";
 import "./chunk-QO3AILZN.js";
 import "./chunk-3BQOQYRB.js";
 import "./chunk-LBJBNWS2.js";
-import "./chunk-KD3QD3A5.js";
-import "./chunk-6VF75M3X.js";
-import "./chunk-H3FZVNRN.js";
-import "./chunk-HQ6NIBL6.js";
 import "./chunk-OADWQ5CR.js";
 import "./chunk-7WV3F5DQ.js";
+import "./chunk-V254FAT5.js";
+import "./chunk-UDJLF3BO.js";
+import {
+  getOperation
+} from "./chunk-NHFXF4ZO.js";
 import {
   EngramAccessService
-} from "./chunk-OBM7EVFU.js";
+} from "./chunk-H4BDNIKQ.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
-import "./chunk-DL6H3D7S.js";
+import "./chunk-ARV3AUOM.js";
 import "./chunk-BT7NVCML.js";
 import "./chunk-H7XKCNR6.js";
 import "./chunk-OHX52AOS.js";
 import "./chunk-SOBJ6NEY.js";
-import "./chunk-VL5JJOOY.js";
-import "./chunk-GYSYLGNE.js";
+import "./chunk-7MOTEVAA.js";
 import "./chunk-RS25QOKZ.js";
 import "./chunk-JGSKJHF7.js";
 import "./chunk-FF4KLI5W.js";
 import "./chunk-6VP3YUCS.js";
-import "./chunk-EQYP3HA6.js";
-import "./chunk-YJ4J2JJ2.js";
+import "./chunk-BMFZLLNI.js";
+import "./chunk-CI7RKSRE.js";
+import "./chunk-6HMYUWXR.js";
+import "./chunk-L5MUA6Q7.js";
+import "./chunk-EG4TCVMU.js";
+import "./chunk-UJDV2NLT.js";
+import "./chunk-CYEPCZN5.js";
+import "./chunk-Q5ZU3RNY.js";
 import "./chunk-JOASJWQR.js";
 import "./chunk-RN7MUWON.js";
-import "./chunk-Z6SEG36L.js";
-import "./chunk-DGEZKYVI.js";
-import "./chunk-CYEPCZN5.js";
-import "./chunk-57ME5VSI.js";
-import "./chunk-CINZGPSJ.js";
+import "./chunk-OUWAQVDJ.js";
+import "./chunk-DOCTITOP.js";
 import "./chunk-AER6MT24.js";
+import "./chunk-CINZGPSJ.js";
 import "./chunk-ZFXCQPNO.js";
 import "./chunk-7OGJQP7T.js";
 import "./chunk-E6ZDCOHM.js";
@@ -157,41 +165,55 @@ import "./chunk-7DTASS5T.js";
 import "./chunk-6RHNCKHG.js";
 import "./chunk-YNQ6DFSV.js";
 import "./chunk-EIR5VLIH.js";
-import "./chunk-BMFZLLNI.js";
-import "./chunk-CI7RKSRE.js";
-import "./chunk-6HMYUWXR.js";
 import "./chunk-YXWAILM4.js";
+import "./chunk-GKKAXVAJ.js";
 import "./chunk-EI6V5UXY.js";
 import "./chunk-QY7YA7OL.js";
 import "./chunk-O75CRYGF.js";
 import "./chunk-QDW3E4RD.js";
 import "./chunk-3ONXXHQO.js";
-import "./chunk-GKKAXVAJ.js";
 import "./chunk-ODPLEWB6.js";
+import "./chunk-ZY2MNJR6.js";
 import "./chunk-2LDBXPLB.js";
 import "./chunk-2LSZVONP.js";
 import "./chunk-DEUNUKTD.js";
-import "./chunk-ATRB6Q25.js";
-import "./chunk-EUM7CZFM.js";
+import "./chunk-JD4SCARD.js";
+import "./chunk-KV6CX4ON.js";
+import "./chunk-TY5NT3T3.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
 import "./chunk-J6A3CX5N.js";
 import "./chunk-FMSDA2D3.js";
+import "./chunk-MB5RSUW6.js";
+import "./chunk-6KYMPV2O.js";
 import "./chunk-AWJ2FHCF.js";
 import "./chunk-42JKGUFJ.js";
 import "./chunk-RULE4VG5.js";
 import "./chunk-SCU65EZI.js";
-import "./chunk-MB5RSUW6.js";
-import "./chunk-6KYMPV2O.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-FVQJYWH7.js";
-import "./chunk-VF4XKTX3.js";
 import "./chunk-G7D6GZ5J.js";
+import "./chunk-VF4XKTX3.js";
 import "./chunk-RGMVMVMF.js";
-import "./chunk-ZY2MNJR6.js";
-import "./chunk-RC3AFF6Z.js";
+import "./chunk-KQAFEZQX.js";
+import "./chunk-WEHSQBFR.js";
+import "./chunk-X7Y7WX73.js";
+import "./chunk-J4EB7DNW.js";
+import "./chunk-BJMBJZ2Y.js";
+import "./chunk-UKJAGEXH.js";
+import "./chunk-FP2373TW.js";
+import "./chunk-PWWWLD7D.js";
+import "./chunk-UI3NYK34.js";
+import "./chunk-GCGJW34D.js";
+import "./chunk-J2HSAU72.js";
+import "./chunk-A6XUJE5D.js";
+import "./chunk-P7FMDTKL.js";
+import "./chunk-VS2IYZRU.js";
+import "./chunk-AH2JUU6X.js";
+import "./chunk-AC5LO7IU.js";
+import "./chunk-SOAU2OE2.js";
 import "./chunk-UZYLX7M6.js";
 import "./chunk-U3PN77QT.js";
 import "./chunk-4DJQYKMN.js";
@@ -202,9 +224,9 @@ import {
   readEnvVar,
   resolveHomeDir
 } from "./chunk-JUC24CTX.js";
+import "./chunk-2ODBA7MQ.js";
 import "./chunk-TBBDFYXW.js";
 import "./chunk-ZBJMUXZH.js";
-import "./chunk-2ODBA7MQ.js";
 import "./chunk-PVGDJXVK.js";
 import "./chunk-A2IYSXDQ.js";
 import "./chunk-LPSF4OQH.js";
@@ -212,23 +234,6 @@ import "./chunk-TVVEYCNW.js";
 import "./chunk-RFYAYKTD.js";
 import "./chunk-LBLXEFWK.js";
 import "./chunk-VFUEZZBS.js";
-import "./chunk-VDX2J7OX.js";
-import "./chunk-WEHSQBFR.js";
-import "./chunk-DQEMWVMT.js";
-import "./chunk-J4EB7DNW.js";
-import "./chunk-PWWWLD7D.js";
-import "./chunk-UI3NYK34.js";
-import "./chunk-GCGJW34D.js";
-import "./chunk-BJMBJZ2Y.js";
-import "./chunk-UKJAGEXH.js";
-import "./chunk-FP2373TW.js";
-import "./chunk-J2HSAU72.js";
-import "./chunk-A6XUJE5D.js";
-import "./chunk-P7FMDTKL.js";
-import "./chunk-VS2IYZRU.js";
-import "./chunk-AH2JUU6X.js";
-import "./chunk-AC5LO7IU.js";
-import "./chunk-SOAU2OE2.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/access-cli.ts
@@ -553,21 +558,30 @@ async function runStore(args, preferredId) {
     dryRun: args.flags.has("dry-run")
   };
   const { config, service } = buildRuntime(preferredId);
-  const result = await service.memoryStore({
-    namespace: storeArgs.namespace,
-    sessionKey: storeArgs.sessionKey,
-    authenticatedPrincipal: getLastOption(args, "principal") ?? config.agentAccessHttp.principal,
-    content: storeArgs.content,
-    category: storeArgs.category,
-    confidence: storeArgs.confidence,
-    tags: storeArgs.tags,
-    entityRef: storeArgs.entityRef,
-    ttl: storeArgs.ttl,
-    sourceReason: storeArgs.sourceReason,
-    idempotencyKey: storeArgs.idempotencyKey,
-    dryRun: storeArgs.dryRun
-  });
-  console.log(JSON.stringify(result, null, 2));
+  const op = getOperation("memory_store");
+  if (!op) {
+    throw new Error("access-boundary: operation not registered: memory_store");
+  }
+  const output = await op.run(
+    {
+      namespace: storeArgs.namespace,
+      sessionKey: storeArgs.sessionKey,
+      content: storeArgs.content,
+      category: storeArgs.category,
+      confidence: storeArgs.confidence,
+      tags: storeArgs.tags,
+      entityRef: storeArgs.entityRef,
+      ttl: storeArgs.ttl,
+      sourceReason: storeArgs.sourceReason,
+      idempotencyKey: storeArgs.idempotencyKey,
+      dryRun: storeArgs.dryRun
+    },
+    {
+      service,
+      authenticatedPrincipal: getLastOption(args, "principal") ?? config.agentAccessHttp.principal
+    }
+  );
+  console.log(JSON.stringify(output.result, null, 2));
 }
 function expandOptionalPath(value) {
   return value === void 0 ? void 0 : expandTildePath(value);