@remnic/core 9.3.751 → 9.3.753

package/dist/access-recall-surface.d.ts

@@ -0,0 +1,363 @@
+import { AccessAuditAdapter } from './access-audit.js';
+import { CrossNamespaceBudget } from './cross-namespace-budget.js';
+import { O as Orchestrator } from './orchestrator-D7ZGOQLX.js';
+import { LastRecallSnapshot } from './recall-state.js';
+import { RecallXraySnapshot } from './recall-xray.js';
+import { R as RecallDisclosure, b as RecallPlanMode, M as MemoryFile } from './types-DTEFxFuL.js';
+import { StorageManager } from './storage.js';
+import { l as EngramAccessRecallResponse, m as EngramAccessMemorySummary, n as EngramAccessSetCodingContextRequest, o as EngramAccessRecallRequest } from './access-service-MitduesD.js';
+import './recall-audit.js';
+import './recall-audit-anomaly.js';
+import './briefing.js';
+import './buffer.js';
+import './extraction-faithfulness.js';
+import './local-llm.js';
+import './model-registry.js';
+import './fallback-llm.js';
+import './resolve-provider-secret.js';
+import './search/port.js';
+import './transcript.js';
+import './session-integrity.js';
+import './summarizer.js';
+import './orchestration/maintenance.js';
+import './namespaces/search.js';
+import './catalog-BEmNVRN0.js';
+import './compounding/engine.js';
+import './shared-context/manager.js';
+import 'zod';
+import './capabilities.js';
+import './utility-runtime.js';
+import './tier-routing.js';
+import './lifecycle.js';
+import './orchestration/compression-guideline-coordinator.js';
+import './semantic-consolidation-7Sndms2M.js';
+import './connectors/codex-materialize.js';
+import './logger.js';
+import './consolidation-operator.js';
+import './embedding-fallback.js';
+import './extraction.js';
+import './schemas.js';
+import './profiling.js';
+import './objective-state.js';
+import './causal-trajectory.js';
+import './trust-zones.js';
+import './harmonic-retrieval.js';
+import './abstraction-nodes.js';
+import './cue-anchors.js';
+import './verified-recall.js';
+import './boxes.js';
+import './semantic-rule-verifier.js';
+import './work-product-ledger.js';
+import './trust-score-stage.js';
+import './trust-score.js';
+import './conversation-index/chunker.js';
+import './conversation-index/backend.js';
+import './faiss-adapter-BHecI1fF.js';
+import './runtime/child-process.js';
+import './namespaces/storage.js';
+import './threading.js';
+import './graph.js';
+import './live-connectors-runner.js';
+import './framework-CNDn2164.js';
+import './relevance.js';
+import './negative.js';
+import './session-observer-state.js';
+import './semantic-DJR8_DMQ.js';
+import './replay/types.js';
+import './message-parts/index.js';
+import './types-gb_SNtjR.js';
+import './extraction-judge.js';
+import './lcm/engine.js';
+import './lcm/archive.js';
+import 'better-sqlite3';
+import './lcm/summarizer.js';
+import './lcm/dag.js';
+import './lcm/queue.js';
+import './policy-runtime.js';
+import './memory-provenance.js';
+import './user-model.js';
+import './page-versioning.js';
+import './memory-projection-store.js';
+import './maintenance/memory-governance.js';
+import './runtime/better-sqlite.js';
+import './structured-attributes.js';
+import './types-B1VHaf2w.js';
+import './recall-explain-renderer.js';
+import './explicit-capture.js';
+import './graph-snapshot.js';
+import './memory-worth-outcomes.js';
+import './transfer/capsule-import.js';
+import './transfer/types.js';
+import './transfer/capsule-export.js';
+import './capsule-cli.js';
+import './offline-sync.js';
+import './action-confidence.js';
+
+/**
+ * Access recall read-surface (extracted from access-service.ts; god-file
+ * decomposition follow-through of #1526, same playbook: verbatim move +
+ * live selfDeps wiring so Object.create(prototype) fakes and instance
+ * stubs keep working).
+ *
+ * Owns the recall read pipeline of the access layer:
+ *   - executeRecall (budget/audit-gated recall + serialization)
+ *   - recallXray (X-ray capture surface, #570)
+ *   - serializeRecallResults / buildRecallResponseFromXraySnapshot
+ *   - fetchRawExcerpts (raw-excerpt read gate)
+ */
+
+interface AccessRecallSurfaceDeps {
+    readonly auditAdapter: AccessAuditAdapter | null;
+    readonly budget: CrossNamespaceBudget;
+    buildRecallDebug(snapshot: LastRecallSnapshot | null, namespace: string, includeDebug: boolean, sessionKey?: string): Promise<EngramAccessRecallResponse["debug"] | undefined>;
+    buildRecallResponseFromXraySnapshot(options: {
+        query: string;
+        sessionKey?: string;
+        snapshot: RecallXraySnapshot;
+        disclosure: RecallDisclosure;
+        startedAt: number;
+        requestedMode?: RecallPlanMode | "auto";
+        normalizedMode?: RecallPlanMode;
+        /**
+         * Read-authorization-gated namespace for the raw-excerpt LCM lookup (#1505
+         * thread 2f7). Threaded through to `serializeRecallResults` so the
+         * `includeRecall` x-ray path honours the SAME read gate as normal recall and
+         * never attaches overlay transcript rows the gate excludes.
+         */
+        rawExcerptNamespace?: string;
+        /**
+         * Ordered, read-authorized LCM read session_id SET (#1505 fallback
+         * unification). Threaded through to `serializeRecallResults` so the x-ray raw
+         * disclosure path also finds excerpts archived at the coding read fallbacks.
+         */
+        rawExcerptSessionIds?: string[];
+        /**
+         * Force NO raw excerpts (#1505 thread NBHWz). Set when the IMPLICIT
+         * raw-excerpt read gate found NO readable LCM namespace, so the x-ray
+         * includeRecall path degrades to empty excerpts rather than falling back to
+         * the write/overlay namespace the read gate excludes.
+         */
+        rawExcerptsSuppressed?: boolean;
+    }): Promise<EngramAccessRecallResponse>;
+    fetchRawExcerpts(disclosure: RecallDisclosure, context: {
+        query: string;
+        sessionKey?: string;
+        namespace?: string;
+        /**
+         * Pre-resolved, ordered, read-authorized LCM read session_id SET (#1505
+         * fallback unification). When supplied, raw disclosure queries each key in
+         * order (primary coding overlay → read fallbacks) and merges rows, exactly
+         * as the orchestrator recall path and `lcmSearch` do, so a branch-scoped
+         * session finds excerpts archived at project/root scope. Already
+         * read-gated by `resolveLcmReadSessionIds`, so an unauthorized
+         * `<principal>-project-*` key is never present. Falls back to the legacy
+         * single `namespace`-prefixed key when absent (sessionless / legacy
+         * callers).
+         */
+        lcmSessionIds?: string[];
+    } | null): Promise<EngramAccessMemorySummary["rawExcerpts"] | null>;
+    maybeAttachCodingContext(sessionKey: string | undefined, options: {
+        cwd?: string;
+        projectTag?: string;
+    }): Promise<void>;
+    normalizeRecallMode(mode?: RecallPlanMode | "auto"): RecallPlanMode | undefined;
+    readonly orchestrator: Orchestrator;
+    resolveLcmReadSessionIds(explicitNamespace: string | undefined, resolvedNamespace: string, sessionKey: string, authenticatedPrincipal: string | undefined): string[];
+    resolveNamespace(namespace?: string): string;
+    resolveRawExcerptReadNamespace(explicitNamespace: string | undefined, sessionKey: string | undefined, authenticatedPrincipal: string | undefined): string | undefined;
+    resolveRecallNamespace(namespace: string | undefined, sessionKey: string | undefined, authenticatedPrincipal?: string): string | undefined;
+    resolveRequestPrincipal(sessionKey: string | undefined, authenticatedPrincipal?: string): string | undefined;
+    serializeMemorySummary(memory: MemoryFile, baseDir: string, disclosure?: RecallDisclosure, rawExcerpts?: EngramAccessMemorySummary["rawExcerpts"]): EngramAccessMemorySummary;
+    serializeRecallResults(snapshot: LastRecallSnapshot | null, disclosure: RecallDisclosure, rawContext?: {
+        query: string;
+        sessionKey?: string;
+        /**
+         * Read-authorization-gated namespace for the raw-excerpt LCM lookup
+         * (#1505 thread 2f7). When the caller supplies it, the raw lookup uses
+         * THIS namespace prefix instead of `snapshot.namespace` (the
+         * write/overlay namespace), so raw disclosure honours the SAME read
+         * gate as normal recall + `lcmSearch`. Omitted ⇒ falls back to the
+         * snapshot namespace (single-store / sessionless callers, unchanged).
+         */
+        rawExcerptNamespace?: string;
+        /**
+         * Ordered, read-authorized LCM read session_id SET (#1505 fallback
+         * unification). When supplied, raw disclosure queries each key (primary
+         * coding overlay → read fallbacks) and merges rows so a branch-scoped
+         * session finds excerpts archived at project/root scope. Already
+         * read-gated, so no unauthorized overlay key is present. Omitted ⇒ the
+         * legacy single `rawExcerptNamespace`-prefixed key (unchanged).
+         */
+        rawExcerptSessionIds?: string[];
+        /**
+         * Force NO raw excerpts even when `disclosure === "raw"` (#1505 thread
+         * NBHWz). Set by callers when the IMPLICIT raw-excerpt read gate found
+         * NO readable LCM namespace (a restrictive `default` READ policy with
+         * no readable overlay/self namespace). The lookup must NOT fall back to
+         * `snapshot.namespace` (the write/overlay namespace the read gate
+         * excludes) — it returns empty excerpts so raw recall degrades
+         * gracefully instead of leaking unreadable rows or throwing.
+         */
+        rawExcerptsSuppressed?: boolean;
+    } | null): Promise<EngramAccessMemorySummary[]>;
+    setCodingContext(request: EngramAccessSetCodingContextRequest): void;
+    storageForAbsoluteRecallPath(memoryPath: string, primaryNamespace: string, recallNamespaces?: readonly string[]): Promise<{
+        storage: StorageManager;
+        dir: string;
+    } | null>;
+    xrayQueue: Promise<void>;
+}
+declare class AccessRecallSurface {
+    private readonly deps;
+    constructor(deps: AccessRecallSurfaceDeps);
+    buildRecallResponseFromXraySnapshot(options: {
+        query: string;
+        sessionKey?: string;
+        snapshot: RecallXraySnapshot;
+        disclosure: RecallDisclosure;
+        startedAt: number;
+        requestedMode?: RecallPlanMode | "auto";
+        normalizedMode?: RecallPlanMode;
+        /**
+         * Read-authorization-gated namespace for the raw-excerpt LCM lookup (#1505
+         * thread 2f7). Threaded through to `serializeRecallResults` so the
+         * `includeRecall` x-ray path honours the SAME read gate as normal recall and
+         * never attaches overlay transcript rows the gate excludes.
+         */
+        rawExcerptNamespace?: string;
+        /**
+         * Ordered, read-authorized LCM read session_id SET (#1505 fallback
+         * unification). Threaded through to `serializeRecallResults` so the x-ray raw
+         * disclosure path also finds excerpts archived at the coding read fallbacks.
+         */
+        rawExcerptSessionIds?: string[];
+        /**
+         * Force NO raw excerpts (#1505 thread NBHWz). Set when the IMPLICIT
+         * raw-excerpt read gate found NO readable LCM namespace, so the x-ray
+         * includeRecall path degrades to empty excerpts rather than falling back to
+         * the write/overlay namespace the read gate excludes.
+         */
+        rawExcerptsSuppressed?: boolean;
+    }): Promise<EngramAccessRecallResponse>;
+    serializeRecallResults(snapshot: LastRecallSnapshot | null, disclosure: RecallDisclosure, rawContext?: {
+        query: string;
+        sessionKey?: string;
+        /**
+         * Read-authorization-gated namespace for the raw-excerpt LCM lookup
+         * (#1505 thread 2f7). When the caller supplies it, the raw lookup uses
+         * THIS namespace prefix instead of `snapshot.namespace` (the
+         * write/overlay namespace), so raw disclosure honours the SAME read
+         * gate as normal recall + `lcmSearch`. Omitted ⇒ falls back to the
+         * snapshot namespace (single-store / sessionless callers, unchanged).
+         */
+        rawExcerptNamespace?: string;
+        /**
+         * Ordered, read-authorized LCM read session_id SET (#1505 fallback
+         * unification). When supplied, raw disclosure queries each key (primary
+         * coding overlay → read fallbacks) and merges rows so a branch-scoped
+         * session finds excerpts archived at project/root scope. Already
+         * read-gated, so no unauthorized overlay key is present. Omitted ⇒ the
+         * legacy single `rawExcerptNamespace`-prefixed key (unchanged).
+         */
+        rawExcerptSessionIds?: string[];
+        /**
+         * Force NO raw excerpts even when `disclosure === "raw"` (#1505 thread
+         * NBHWz). Set by callers when the IMPLICIT raw-excerpt read gate found
+         * NO readable LCM namespace (a restrictive `default` READ policy with
+         * no readable overlay/self namespace). The lookup must NOT fall back to
+         * `snapshot.namespace` (the write/overlay namespace the read gate
+         * excludes) — it returns empty excerpts so raw recall degrades
+         * gracefully instead of leaking unreadable rows or throwing.
+         */
+        rawExcerptsSuppressed?: boolean;
+    } | null): Promise<EngramAccessMemorySummary[]>;
+    /**
+     * Fetch raw transcript excerpts from the LCM archive for `disclosure ===
+     * "raw"` recalls (issue #677 PR 2/4).  Returns `null` for non-raw recall
+     * depths, an empty array when LCM is disabled / not initialized / has no
+     * matches, and an array of LCM-side excerpts otherwise.  Errors are
+     * swallowed and treated as "no excerpts" so a failing LCM never breaks
+     * the recall response.
+     *
+     * Namespace handling: LCM archival prefixes non-default-namespace
+     * sessions with `${namespace}:${sessionKey}` (see `observe()` around
+     * line 2498), so the lookup must mirror that prefix or raw recalls in
+     * non-default namespaces miss their own excerpts.
+     */
+    fetchRawExcerpts(disclosure: RecallDisclosure, context: {
+        query: string;
+        sessionKey?: string;
+        namespace?: string;
+        /**
+         * Pre-resolved, ordered, read-authorized LCM read session_id SET (#1505
+         * fallback unification). When supplied, raw disclosure queries each key in
+         * order (primary coding overlay → read fallbacks) and merges rows, exactly
+         * as the orchestrator recall path and `lcmSearch` do, so a branch-scoped
+         * session finds excerpts archived at project/root scope. Already
+         * read-gated by `resolveLcmReadSessionIds`, so an unauthorized
+         * `<principal>-project-*` key is never present. Falls back to the legacy
+         * single `namespace`-prefixed key when absent (sessionless / legacy
+         * callers).
+         */
+        lcmSessionIds?: string[];
+    } | null): Promise<EngramAccessMemorySummary["rawExcerpts"] | null>;
+    executeRecall(request: EngramAccessRecallRequest): Promise<{
+        response: EngramAccessRecallResponse;
+        budgetRecordPrincipal: string | null;
+    }>;
+    /**
+     * Recall X-ray (issue #570).  Runs a recall with `xrayCapture: true`
+     * and returns the resulting snapshot as structured JSON so every
+     * surface (CLI / HTTP / MCP) gets the same payload.  Namespace scope
+     * is enforced before the recall fires (CLAUDE.md rule 42 — read and
+     * write paths must resolve through the same namespace layer) so an
+     * unauthorized principal cannot capture an x-ray for a namespace it
+     * cannot read.
+     */
+    recallXray(request: {
+        query: string;
+        sessionKey?: string;
+        namespace?: string;
+        budget?: number;
+        authenticatedPrincipal?: string;
+        /**
+         * Disclosure depth used to shape per-result payload (issue #677
+         * PR 3/4).  When set, each X-ray result is decorated with the
+         * matching `disclosure` field and `estimatedTokens` computed from
+         * the actual rendered content at that depth, so the renderer's
+         * "Token spend by disclosure" summary reflects real spend rather
+         * than staying empty when no caller wires the depth knob through.
+         */
+        disclosure?: RecallDisclosure;
+        /**
+         * Free-form recall tag filter (issue #689). Mirrors the field on
+         * `EngramAccessRecallRequest`. When non-empty, the captured X-ray
+         * snapshot's `results` are filtered down to memories whose
+         * frontmatter tags satisfy `tagMatch` ("any" by default), and a
+         * `tag-filter` entry is appended to `filters`.
+         */
+        tags?: string[];
+        /** Match mode for `tags`. See `EngramAccessRecallRequest.tagMatch`. */
+        tagMatch?: "any" | "all";
+        /** Recall planner mode override. Mirrors `EngramAccessRecallRequest.mode`. */
+        mode?: RecallPlanMode | "auto";
+        /**
+         * User-aware context scopes active for this recall. Forwarded into
+         * provenance construction so boundary scopes are evaluated against
+         * the caller's real context instead of an empty-context default.
+         */
+        currentContextScopes?: readonly unknown[];
+        /**
+         * Internal inspector affordance: include a recall-shaped response
+         * derived from the same X-ray snapshot. Left off by default so the
+         * regular X-ray API/CLI/MCP surfaces keep their existing payload shape.
+         */
+        includeRecall?: boolean;
+    }): Promise<{
+        snapshotFound: boolean;
+        snapshot?: RecallXraySnapshot;
+        recall?: EngramAccessRecallResponse;
+    }>;
+}
+
+export { AccessRecallSurface, type AccessRecallSurfaceDeps };

package/dist/access-recall-surface.js

@@ -0,0 +1,128 @@
+import {
+  AccessRecallSurface
+} from "./chunk-ZECLLIMX.js";
+import "./chunk-GDASG7NC.js";
+import "./chunk-GDB4J2H3.js";
+import "./chunk-64SE4X5G.js";
+import "./chunk-M5QKGHCR.js";
+import "./chunk-VQ7B2Q6M.js";
+import "./chunk-ERA5RSMZ.js";
+import "./chunk-JGSKJHF7.js";
+import "./chunk-IQ7WCZRW.js";
+import "./chunk-S4DDLTPX.js";
+import "./chunk-FF4KLI5W.js";
+import "./chunk-BT7NVCML.js";
+import "./chunk-H7XKCNR6.js";
+import "./chunk-2KK5WNQB.js";
+import "./chunk-SOBJ6NEY.js";
+import "./chunk-6MMONPHM.js";
+import "./chunk-ICP53SKG.js";
+import "./chunk-AQEJKOKI.js";
+import "./chunk-6HMYUWXR.js";
+import "./chunk-W3M34XT4.js";
+import "./chunk-HAZVVOYT.js";
+import "./chunk-RNWWAS5V.js";
+import "./chunk-5CEJH5ZN.js";
+import "./chunk-WRFKZEO6.js";
+import "./chunk-CYEPCZN5.js";
+import "./chunk-LQ6JI4VH.js";
+import "./chunk-SANZHXY2.js";
+import "./chunk-AER6MT24.js";
+import "./chunk-HM6UJPPO.js";
+import "./chunk-CINZGPSJ.js";
+import "./chunk-ZFXCQPNO.js";
+import "./chunk-YNBEHUZH.js";
+import "./chunk-DCWIQFNA.js";
+import "./chunk-XBZQRZ6G.js";
+import "./chunk-KCQA46NR.js";
+import "./chunk-SJHM6I4J.js";
+import "./chunk-K43PI6DQ.js";
+import "./chunk-YNQ6DFSV.js";
+import "./chunk-EIR5VLIH.js";
+import "./chunk-TQT3USCG.js";
+import "./chunk-EI6V5UXY.js";
+import "./chunk-PNLCEFE4.js";
+import "./chunk-O75CRYGF.js";
+import "./chunk-QDW3E4RD.js";
+import "./chunk-K5LLP4CY.js";
+import "./chunk-3ONXXHQO.js";
+import "./chunk-ODPLEWB6.js";
+import "./chunk-EHQ5HO5T.js";
+import "./chunk-2LSZVONP.js";
+import "./chunk-DEUNUKTD.js";
+import "./chunk-ZY2MNJR6.js";
+import "./chunk-V5UV7BOA.js";
+import "./chunk-PE6XR4GG.js";
+import "./chunk-U3PN77QT.js";
+import "./chunk-VSF7AAGE.js";
+import "./chunk-TBBDFYXW.js";
+import "./chunk-ZBJMUXZH.js";
+import "./chunk-E6LENGYV.js";
+import "./chunk-34THARMH.js";
+import "./chunk-L2B3EE7B.js";
+import "./chunk-M7XQSUBB.js";
+import "./chunk-5UZXUTVO.js";
+import "./chunk-5GPPACXK.js";
+import "./chunk-TKZ3AL5V.js";
+import "./chunk-6CIAGZ6X.js";
+import "./chunk-SVOZFLIQ.js";
+import "./chunk-LTJAMRGI.js";
+import "./chunk-J6A3CX5N.js";
+import "./chunk-JS2HKKOK.js";
+import "./chunk-MB5RSUW6.js";
+import "./chunk-6KYMPV2O.js";
+import "./chunk-AWJ2FHCF.js";
+import "./chunk-42JKGUFJ.js";
+import "./chunk-RULE4VG5.js";
+import "./chunk-SCU65EZI.js";
+import "./chunk-DM2T26WE.js";
+import "./chunk-LDXUBPMO.js";
+import "./chunk-YTU7WKYN.js";
+import "./chunk-AAD2ZS6P.js";
+import "./chunk-G7D6GZ5J.js";
+import "./chunk-VF4XKTX3.js";
+import "./chunk-W5H6ZRPT.js";
+import "./chunk-VUA4S7P6.js";
+import "./chunk-IQVQJJL7.js";
+import "./chunk-L2EXJQJP.js";
+import "./chunk-VL7DP3OW.js";
+import "./chunk-RGMVMVMF.js";
+import "./chunk-N7RWREIQ.js";
+import "./chunk-OEHCMALU.js";
+import "./chunk-PHK3HARR.js";
+import "./chunk-4DJQYKMN.js";
+import "./chunk-5GKPFL3S.js";
+import "./chunk-EYIEWJNI.js";
+import "./chunk-JUC24CTX.js";
+import "./chunk-6MKAMLQL.js";
+import "./chunk-JAKIDQB2.js";
+import "./chunk-NU3CSQ4H.js";
+import "./chunk-OUXPVWTZ.js";
+import "./chunk-J4EB7DNW.js";
+import "./chunk-WEHSQBFR.js";
+import "./chunk-437S3G37.js";
+import "./chunk-GWTFLF2P.js";
+import "./chunk-UKJAGEXH.js";
+import "./chunk-FP2373TW.js";
+import "./chunk-X64YLC24.js";
+import "./chunk-UI3NYK34.js";
+import "./chunk-GCGJW34D.js";
+import "./chunk-J2HSAU72.js";
+import "./chunk-A6XUJE5D.js";
+import "./chunk-P7FMDTKL.js";
+import "./chunk-VS2IYZRU.js";
+import "./chunk-Z2YFLXHU.js";
+import "./chunk-I4WBNM3M.js";
+import "./chunk-SOAU2OE2.js";
+import "./chunk-PVGDJXVK.js";
+import "./chunk-A2IYSXDQ.js";
+import "./chunk-LPSF4OQH.js";
+import "./chunk-TVVEYCNW.js";
+import "./chunk-RFYAYKTD.js";
+import "./chunk-LBLXEFWK.js";
+import "./chunk-VFUEZZBS.js";
+import "./chunk-PZ5AY32C.js";
+export {
+  AccessRecallSurface
+};
+//# sourceMappingURL=access-recall-surface.js.map