@remnic/core 9.3.700 → 9.3.702

package/dist/{chunk-CCOXIDRM.js → chunk-5VXVXJH6.js}

@@ -6,19 +6,19 @@ import {
 } from "./chunk-7WV3F5DQ.js";
 import {
   EngramMcpServer
-} from "./chunk-YMTGXDN6.js";
+} from "./chunk-KC6TCAWV.js";
 import {
   validateRequest
 } from "./chunk-Q4O3ET6F.js";
 import {
   getOperation
-} from "./chunk-EOBJRBLC.js";
+} from "./chunk-QGJAGC2J.js";
 import {
   EngramAccessInputError
-} from "./chunk-3E5WRQNQ.js";
+} from "./chunk-OXEAMU42.js";
 import {
   projectTagProjectId
-} from "./chunk-HRUULBBV.js";
+} from "./chunk-SHRRWOVY.js";
 import {
   isTrustZoneName
 } from "./chunk-JGSKJHF7.js";
@@ -27,7 +27,7 @@ import {
 } from "./chunk-DEUNUKTD.js";
 import {
   isRecallDisclosure
-} from "./chunk-IKNQAGBV.js";
+} from "./chunk-IX3UQT4H.js";
 import {
   OFFLINE_SYNC_APPLY_MAX_BODY_BYTES,
   OFFLINE_SYNC_FILE_CONTENT_MAX_CHUNK_BYTES,
@@ -1601,6 +1601,149 @@ var EngramAccessHttpServer = class {
       this.respondJson(res, 200, result);
       return;
     }
+    if (pathname.startsWith("/engram/v1/admin/scope/inspect")) {
+      if (req.method !== "GET" && req.method !== "POST") {
+        this.respondJson(res, 405, { error: "method_not_allowed", code: "method_not_allowed" });
+        return;
+      }
+      const principal = this.resolveRequestPrincipal(req);
+      let sessionKey;
+      let namespaceOverride;
+      let operation;
+      if (req.method === "GET") {
+        sessionKey = parsed.searchParams.get("session") ?? void 0;
+        namespaceOverride = parsed.searchParams.get("namespace") ?? void 0;
+        operation = parsed.searchParams.get("operation") ?? void 0;
+      } else {
+        const body = await this.readJsonBody(req);
+        sessionKey = typeof body.sessionKey === "string" ? body.sessionKey : void 0;
+        namespaceOverride = typeof body.namespace === "string" ? body.namespace : void 0;
+        operation = typeof body.operation === "string" ? body.operation : void 0;
+      }
+      const inspection = await this.service.adminInspectScope({
+        sessionKey: sessionKey && sessionKey.length > 0 ? sessionKey : void 0,
+        namespace: namespaceOverride && namespaceOverride.length > 0 ? namespaceOverride : void 0,
+        principalOverride: principal,
+        operation
+      });
+      this.respondJson(res, 200, inspection);
+      return;
+    }
+    if (pathname === "/engram/v1/admin/namespaces") {
+      if (req.method !== "GET") {
+        this.respondJson(res, 405, { error: "method_not_allowed", code: "method_not_allowed" });
+        return;
+      }
+      const kind = parsed.searchParams.get("kind");
+      const principal = parsed.searchParams.get("principal");
+      const projectId = parsed.searchParams.get("projectId");
+      const discoveredBy = parsed.searchParams.get("discoveredBy");
+      const result = await this.service.adminListNamespaces({
+        ...kind ? { kind } : {},
+        ...principal && principal.length > 0 ? { principal } : {},
+        ...projectId && projectId.length > 0 ? { projectId } : {},
+        ...discoveredBy ? { discoveredBy } : {}
+      });
+      this.respondJson(res, 200, result);
+      return;
+    }
+    if (pathname === "/engram/v1/admin/maintenance-health") {
+      if (req.method !== "GET") {
+        this.respondJson(res, 405, { error: "method_not_allowed", code: "method_not_allowed" });
+        return;
+      }
+      const report = await this.service.adminMaintenanceHealth();
+      this.respondJson(res, 200, report);
+      return;
+    }
+    if (pathname === "/engram/v1/admin/transcript-audit") {
+      if (req.method !== "GET") {
+        this.respondJson(res, 405, { error: "method_not_allowed", code: "method_not_allowed" });
+        return;
+      }
+      const report = await this.service.adminTranscriptAudit();
+      this.respondJson(res, 200, report);
+      return;
+    }
+    if (pathname === "/engram/v1/admin/promote") {
+      if (req.method !== "POST") {
+        this.respondJson(res, 405, { error: "method_not_allowed", code: "method_not_allowed" });
+        return;
+      }
+      const body = await this.readJsonBody(req);
+      if (typeof body.sourceMemoryId !== "string" || body.sourceMemoryId.trim().length === 0) {
+        this.respondJson(res, 400, {
+          error: "invalid_request",
+          code: "invalid_request",
+          message: "sourceMemoryId is required"
+        });
+        return;
+      }
+      if (typeof body.reason !== "string" || body.reason.trim().length === 0) {
+        this.respondJson(res, 400, {
+          error: "invalid_request",
+          code: "invalid_request",
+          message: "reason is required for promotion"
+        });
+        return;
+      }
+      if (!Array.isArray(body.targets) || body.targets.length === 0) {
+        this.respondJson(res, 400, {
+          error: "invalid_request",
+          code: "invalid_request",
+          message: "targets must be a non-empty array"
+        });
+        return;
+      }
+      const VALID_TARGETS = ["teamProject", "serverShared", "userProject", "userGlobal", "explicit"];
+      const targets = [];
+      for (const entry of body.targets) {
+        if (typeof entry !== "object" || entry === null || typeof entry.kind !== "string") {
+          this.respondJson(res, 400, {
+            error: "invalid_request",
+            code: "invalid_request",
+            message: "each target must be an object with a 'kind' string"
+          });
+          return;
+        }
+        if (!VALID_TARGETS.includes(entry.kind)) {
+          this.respondJson(res, 400, {
+            error: "invalid_request",
+            code: "invalid_request",
+            message: `target.kind must be one of: ${VALID_TARGETS.join(", ")}`
+          });
+          return;
+        }
+        targets.push({
+          kind: entry.kind,
+          namespace: typeof entry.namespace === "string" ? entry.namespace : void 0
+        });
+      }
+      try {
+        this.ensureWriteRateLimitAvailable();
+        const result = await this.service.adminPromoteMemory({
+          sourceMemoryId: body.sourceMemoryId,
+          namespace: typeof body.namespace === "string" ? body.namespace : void 0,
+          principal: this.resolveRequestPrincipal(req),
+          sessionKey: typeof body.sessionKey === "string" ? body.sessionKey : void 0,
+          targets,
+          reason: body.reason
+        });
+        this.recordWriteRateLimitHit();
+        this.respondJson(res, 200, result);
+      } catch (err) {
+        if (err instanceof EngramAccessInputError) {
+          this.respondJson(res, 400, {
+            error: "invalid_request",
+            code: "invalid_request",
+            message: err.message
+          });
+          return;
+        }
+        throw err;
+      }
+      return;
+    }
     this.respondJson(res, 404, { error: "not_found", code: "not_found" });
   }
   createRequestAbortSignal(req, res) {
@@ -2105,4 +2248,4 @@ function positiveIntQueryParam(value, label) {
 export {
   EngramAccessHttpServer
 };
-//# sourceMappingURL=chunk-CCOXIDRM.js.map
+//# sourceMappingURL=chunk-5VXVXJH6.js.map