@remnic/core 9.3.769 → 9.3.771

package/dist/semantic-rule-verifier.js

@@ -1,18 +1,18 @@
 import {
   compareVerifiedSemanticRuleResults,
   searchVerifiedSemanticRules
-} from "./chunk-VKHZFF5P.js";
-import "./chunk-DTTVX6EO.js";
-import "./chunk-M7XQSUBB.js";
+} from "./chunk-44YXWE35.js";
+import "./chunk-EGLUVV6B.js";
 import "./chunk-L2B3EE7B.js";
+import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
-import "./chunk-LTJAMRGI.js";
 import "./chunk-TKZ3AL5V.js";
 import "./chunk-6CIAGZ6X.js";
+import "./chunk-SVOZFLIQ.js";
+import "./chunk-LTJAMRGI.js";
 import "./chunk-J6A3CX5N.js";
 import "./chunk-DQC3ZZYM.js";
-import "./chunk-SVOZFLIQ.js";
 import "./chunk-JS2HKKOK.js";
 import "./chunk-AWJ2FHCF.js";
 import "./chunk-42JKGUFJ.js";
@@ -24,9 +24,9 @@ import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-YTU7WKYN.js";
 import "./chunk-AAD2ZS6P.js";
+import "./chunk-G7D6GZ5J.js";
 import "./chunk-VF4XKTX3.js";
 import "./chunk-W5H6ZRPT.js";
-import "./chunk-G7D6GZ5J.js";
 import "./chunk-VUA4S7P6.js";
 import "./chunk-IQVQJJL7.js";
 import "./chunk-L2EXJQJP.js";
@@ -39,14 +39,14 @@ import "./chunk-5GKPFL3S.js";
 import "./chunk-4DJQYKMN.js";
 import "./chunk-EYIEWJNI.js";
 import "./chunk-JUC24CTX.js";
-import "./chunk-6MKAMLQL.js";
-import "./chunk-JAKIDQB2.js";
-import "./chunk-ZBJMUXZH.js";
 import "./chunk-NU3CSQ4H.js";
 import "./chunk-J2HSAU72.js";
 import "./chunk-A6XUJE5D.js";
 import "./chunk-P7FMDTKL.js";
 import "./chunk-VS2IYZRU.js";
+import "./chunk-6MKAMLQL.js";
+import "./chunk-JAKIDQB2.js";
+import "./chunk-ZBJMUXZH.js";
 import "./chunk-PZ5AY32C.js";
 export {
   compareVerifiedSemanticRuleResults,

package/dist/storage.js

@@ -16,19 +16,19 @@ import {
   parseFrontmatter,
   parseFrontmatterStringValue,
   serializeEntityFile
-} from "./chunk-DTTVX6EO.js";
-import "./chunk-M7XQSUBB.js";
+} from "./chunk-EGLUVV6B.js";
 import "./chunk-L2B3EE7B.js";
+import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
-import "./chunk-LTJAMRGI.js";
 import "./chunk-TKZ3AL5V.js";
 import "./chunk-6CIAGZ6X.js";
-import "./chunk-J6A3CX5N.js";
-import "./chunk-DQC3ZZYM.js";
 import {
   stripAttributesSuffix
 } from "./chunk-SVOZFLIQ.js";
+import "./chunk-LTJAMRGI.js";
+import "./chunk-J6A3CX5N.js";
+import "./chunk-DQC3ZZYM.js";
 import "./chunk-JS2HKKOK.js";
 import "./chunk-AWJ2FHCF.js";
 import "./chunk-42JKGUFJ.js";
@@ -40,9 +40,9 @@ import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-YTU7WKYN.js";
 import "./chunk-AAD2ZS6P.js";
+import "./chunk-G7D6GZ5J.js";
 import "./chunk-VF4XKTX3.js";
 import "./chunk-W5H6ZRPT.js";
-import "./chunk-G7D6GZ5J.js";
 import "./chunk-VUA4S7P6.js";
 import "./chunk-IQVQJJL7.js";
 import "./chunk-L2EXJQJP.js";
@@ -55,13 +55,13 @@ import "./chunk-5GKPFL3S.js";
 import "./chunk-4DJQYKMN.js";
 import "./chunk-EYIEWJNI.js";
 import "./chunk-JUC24CTX.js";
-import "./chunk-6MKAMLQL.js";
-import "./chunk-JAKIDQB2.js";
 import "./chunk-NU3CSQ4H.js";
 import "./chunk-J2HSAU72.js";
 import "./chunk-A6XUJE5D.js";
 import "./chunk-P7FMDTKL.js";
 import "./chunk-VS2IYZRU.js";
+import "./chunk-6MKAMLQL.js";
+import "./chunk-JAKIDQB2.js";
 import "./chunk-PZ5AY32C.js";
 export {
   ContentHashIndex,

package/dist/transfer/autodetect.js

@@ -4,8 +4,8 @@ import {
 import "../chunk-2DL3OFLD.js";
 import "../chunk-G4IAEX6D.js";
 import "../chunk-765K3SAT.js";
-import "../chunk-WEHSQBFR.js";
 import "../chunk-J4EB7DNW.js";
+import "../chunk-WEHSQBFR.js";
 import "../chunk-UI3NYK34.js";
 import "../chunk-GCGJW34D.js";
 import "../chunk-PZ5AY32C.js";

package/dist/transfer/backup.js

@@ -2,8 +2,8 @@ import {
   backupMemoryDir
 } from "../chunk-2BFLDH5F.js";
 import "../chunk-765K3SAT.js";
-import "../chunk-437S3G37.js";
 import "../chunk-J4EB7DNW.js";
+import "../chunk-437S3G37.js";
 import "../chunk-GWTFLF2P.js";
 import "../chunk-UKJAGEXH.js";
 import "../chunk-FP2373TW.js";

package/dist/transfer/capsule-export.js

@@ -1,10 +1,10 @@
 import {
   exportCapsule,
   isValidCapsuleSince
-} from "../chunk-FLVL4L3L.js";
+} from "../chunk-OUXPVWTZ.js";
+import "../chunk-J4EB7DNW.js";
 import "../chunk-WEHSQBFR.js";
 import "../chunk-437S3G37.js";
-import "../chunk-J4EB7DNW.js";
 import "../chunk-GWTFLF2P.js";
 import "../chunk-UKJAGEXH.js";
 import "../chunk-FP2373TW.js";

package/dist/verified-recall.js

@@ -1,19 +1,19 @@
 import {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
-} from "./chunk-N4ZA2I7M.js";
+} from "./chunk-OTMAYEY5.js";
 import "./chunk-7FL4CNPV.js";
-import "./chunk-DTTVX6EO.js";
-import "./chunk-M7XQSUBB.js";
+import "./chunk-EGLUVV6B.js";
 import "./chunk-L2B3EE7B.js";
+import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
-import "./chunk-LTJAMRGI.js";
 import "./chunk-TKZ3AL5V.js";
 import "./chunk-6CIAGZ6X.js";
+import "./chunk-SVOZFLIQ.js";
+import "./chunk-LTJAMRGI.js";
 import "./chunk-J6A3CX5N.js";
 import "./chunk-DQC3ZZYM.js";
-import "./chunk-SVOZFLIQ.js";
 import "./chunk-JS2HKKOK.js";
 import "./chunk-AWJ2FHCF.js";
 import "./chunk-42JKGUFJ.js";
@@ -25,9 +25,9 @@ import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-YTU7WKYN.js";
 import "./chunk-AAD2ZS6P.js";
+import "./chunk-G7D6GZ5J.js";
 import "./chunk-VF4XKTX3.js";
 import "./chunk-W5H6ZRPT.js";
-import "./chunk-G7D6GZ5J.js";
 import "./chunk-VUA4S7P6.js";
 import "./chunk-IQVQJJL7.js";
 import "./chunk-L2EXJQJP.js";
@@ -40,14 +40,14 @@ import "./chunk-5GKPFL3S.js";
 import "./chunk-4DJQYKMN.js";
 import "./chunk-EYIEWJNI.js";
 import "./chunk-JUC24CTX.js";
-import "./chunk-6MKAMLQL.js";
-import "./chunk-JAKIDQB2.js";
-import "./chunk-ZBJMUXZH.js";
 import "./chunk-NU3CSQ4H.js";
 import "./chunk-J2HSAU72.js";
 import "./chunk-A6XUJE5D.js";
 import "./chunk-P7FMDTKL.js";
 import "./chunk-VS2IYZRU.js";
+import "./chunk-6MKAMLQL.js";
+import "./chunk-JAKIDQB2.js";
+import "./chunk-ZBJMUXZH.js";
 import "./chunk-PZ5AY32C.js";
 export {
   compareVerifiedEpisodeResults,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.3.769",
+  "version": "9.3.771",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -3000,7 +3000,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.3.769"
+    "@remnic/coding-graph": "^9.3.771"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/access-boundary.ts

@@ -147,6 +147,7 @@ export type OperationName =
   | "offline_sync_apply"
   | "lcm_status"
   | "memory_list"
+  | "recall_timings"
   | "entity_list"
   | "maintenance_status"
   | "quality_status"
@@ -178,6 +179,7 @@ export type OperationName =
 export interface OperationContext {
   readonly service: EngramAccessService;
   readonly authenticatedPrincipal?: string;
+  readonly operatorPrincipal?: string;
   readonly hooks?: OperationHooks;
 }
 

package/src/access-errors.ts

@@ -0,0 +1,2 @@
+/** Authenticated caller lacks the required authorization (HTTP 403). */
+export class EngramAccessForbiddenError extends Error {}

package/src/access-http.ts

@@ -8,7 +8,13 @@ import { fileURLToPath, URL } from "node:url";
 import { gunzipSync } from "node:zlib";
 import { log } from "./logger.js";
 import { abortError, isAbortError } from "./abort-error.js";
-import { EngramAccessInputError, type EngramAccessService, type EngramAccessMemoryResponse, type EngramAccessWriteResponse } from "./access-service.js";
+import { EngramAccessForbiddenError } from "./access-errors.js";
+import {
+  EngramAccessInputError,
+  type EngramAccessService,
+  type EngramAccessMemoryResponse,
+  type EngramAccessWriteResponse,
+} from "./access-service.js";
 import { CorrectionContractError } from "./correction/correction-contract.js";
 import { WearablesInputError } from "./wearables/errors.js";
 import { EngramMcpServer, MCP_SUPPORTED_PROTOCOL_VERSIONS } from "./access-mcp.js";
@@ -451,6 +457,10 @@ export class EngramAccessHttpServer {
             this.respondJson(res, 400, { error: err.message, code: "input_error" });
             return;
           }
+          if (err instanceof EngramAccessForbiddenError) {
+            this.respondJson(res, 403, { error: err.message, code: "forbidden" });
+            return;
+          }
           if (err instanceof CorrectionContractError) {
             this.respondJson(res, 400, { error: err.message, code: "correction_contract_error" });
             return;
@@ -1769,6 +1779,27 @@ export class EngramAccessHttpServer {
       return;
     }
 
+    if (req.method === "GET" && pathname === "/engram/v1/recall/timings") {
+      const op = getOperation("recall_timings"); // boundary dispatch (issue #1830)
+      if (!op) {
+        throw new Error("access-boundary: operation not registered: recall_timings");
+      }
+      // Live diagnostic route; no response (success or denial) is cacheable.
+      // Set before dispatch so the 403 path carries the header too.
+      res.setHeader("cache-control", "no-store");
+      // Dispatch through the registered operation so the HTTP route and the
+      // boundary registration share one gate. The server's own principal is
+      // the transport-level operator fallback; a configured
+      // agentAccessHttp.principal outranks it.
+      const output = (await op.run({}, {
+        service: this.service,
+        authenticatedPrincipal: this.resolveRequestPrincipal(req),
+        operatorPrincipal: this.authenticatedPrincipal,
+      })) as { result: unknown };
+      this.respondJson(res, 200, output.result);
+      return;
+    }
+
     const memoryMatch = pathname.match(/^\/engram\/v1\/memories\/([^/]+)$/);
     if (req.method === "GET" && memoryMatch) {
       const memoryId = decodeURIComponent(memoryMatch[1] ?? "");