@remnic/core 9.4.1 → 9.5.0

package/dist/temporal-supersession.d.ts

@@ -1,4 +1,4 @@
-import { q as MemoryFrontmatter } from './types-ljkd82rn.js';
+import { p as MemoryFrontmatter } from './types-C7HUgOuA.js';
 import { StorageManager } from './storage.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';

package/dist/temporal-validity.d.ts

@@ -1,4 +1,4 @@
-import { q as MemoryFrontmatter } from './types-ljkd82rn.js';
+import { p as MemoryFrontmatter } from './types-C7HUgOuA.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
 

package/dist/threading.d.ts

@@ -1,4 +1,4 @@
-import { p as BufferTurn, N as ConversationThread } from './types-ljkd82rn.js';
+import { o as BufferTurn, N as ConversationThread } from './types-C7HUgOuA.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
 

package/dist/tier-migration.d.ts

@@ -1,4 +1,4 @@
-import { M as MemoryFile } from './types-ljkd82rn.js';
+import { M as MemoryFile } from './types-C7HUgOuA.js';
 import { StorageManager } from './storage.js';
 import { MemoryTier } from './tier-routing.js';
 import { SearchBackend } from './search/port.js';

package/dist/tier-routing.d.ts

@@ -1,4 +1,4 @@
-import { M as MemoryFile } from './types-ljkd82rn.js';
+import { M as MemoryFile } from './types-C7HUgOuA.js';
 import { LifecycleSignals } from './lifecycle.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';

package/dist/{tier-stats-TG6GUZ6N.js → tier-stats-5XF4UBRQ.js}

@@ -8,13 +8,13 @@ import {
 } from "./chunk-S75M5ZRK.js";
 import "./chunk-2F6NP3NT.js";
 import "./chunk-TERNBNJB.js";
+import {
+  computeLifecycleValueInputs
+} from "./chunk-TBBDFYXW.js";
 import {
   resolveQmdCapabilities,
   resolveUtilityLearningCapabilities
 } from "./chunk-VSF7AAGE.js";
-import {
-  computeLifecycleValueInputs
-} from "./chunk-TBBDFYXW.js";
 import "./chunk-A2IYSXDQ.js";
 import "./chunk-LPSF4OQH.js";
 import "./chunk-PZ5AY32C.js";
@@ -153,4 +153,4 @@ export {
   formatTierSummaryText,
   summarizeTiers
 };
-//# sourceMappingURL=tier-stats-TG6GUZ6N.js.map
+//# sourceMappingURL=tier-stats-5XF4UBRQ.js.map

package/dist/tokens.d.ts

@@ -1,13 +1,28 @@
+import { TokenCapabilities } from './access-token-capabilities.js';
+import 'node:async_hooks';
+
 /**
  * Token management for Remnic multi-connector auth.
  *
  * Manages per-connector tokens in ~/.remnic/tokens.json.
  * Each connector gets a unique token with a recognizable prefix.
  */
+
 interface TokenEntry {
     token: string;
     connector: string;
     createdAt: string;
+    /**
+     * Versioned capabilities record (issue #1837). PRESENT ⇒ the token was
+     * minted by the capability-aware path; its ops/namespaces axes are
+     * enforced (absent axis ⇒ unrestricted on that axis; empty array ⇒ deny
+     * all; non-empty ⇒ allow-list). ABSENT ⇒ a pre-feature legacy entry ⇒
+     * unrestricted (full access), purely for backward compatibility — this is
+     * the ONLY path by which full access is granted by omission. Every new
+     * token carries an explicit record (even `{ version: 1 }` for a deliberate
+     * unrestricted mint), so a new token can never silently gain full access.
+     */
+    capabilities?: TokenCapabilities;
 }
 interface TokenStore {
     tokens: TokenEntry[];
@@ -20,7 +35,7 @@ declare function saveTokenStore(store: TokenStore, tokensPath?: string): void;
  * dependent write (e.g. Hermes config.yaml) succeeds — see
  * commitTokenEntry() to persist the candidate.
  */
-declare function buildTokenEntry(connector: string): TokenEntry;
+declare function buildTokenEntry(connector: string, capabilities?: TokenCapabilities): TokenEntry;
 /**
  * Persist a pre-built TokenEntry into the store, replacing any existing
  * entry for the same connector. Used together with buildTokenEntry() when
@@ -34,7 +49,7 @@ declare function buildTokenEntry(connector: string): TokenEntry;
  * return statement never executes (UXJI/UXJT fix).
  */
 declare function commitTokenEntry(entry: TokenEntry, tokensPath?: string): void;
-declare function generateToken(connector: string, tokensPath?: string): TokenEntry;
+declare function generateToken(connector: string, tokensPath?: string, capabilities?: TokenCapabilities): TokenEntry;
 declare function listTokens(tokensPath?: string): TokenEntry[];
 declare function revokeToken(connector: string, tokensPath?: string): boolean;
 declare function getAllValidTokens(tokensPath?: string): string[];

package/dist/tokens.js

@@ -10,8 +10,10 @@ import {
   resolveConnectorFromToken,
   revokeToken,
   saveTokenStore
-} from "./chunk-E2SPGGUI.js";
+} from "./chunk-4OKLXWDZ.js";
+import "./chunk-D7FOKIY5.js";
 import "./chunk-JUC24CTX.js";
+import "./chunk-RANHFI3P.js";
 import "./chunk-PZ5AY32C.js";
 export {
   buildTokenEntry,

package/dist/topics.d.ts

@@ -1,4 +1,4 @@
-import { M as MemoryFile, ap as TopicScore } from './types-ljkd82rn.js';
+import { M as MemoryFile, ap as TopicScore } from './types-C7HUgOuA.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
 

package/dist/transcript.d.ts

@@ -1,4 +1,4 @@
-import { P as PluginConfig, T as TranscriptEntry, r as Checkpoint } from './types-ljkd82rn.js';
+import { P as PluginConfig, T as TranscriptEntry, q as Checkpoint } from './types-C7HUgOuA.js';
 import { SessionIntegrityReport } from './session-integrity.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';

package/dist/transfer/backup.js

@@ -1,8 +1,8 @@
 import {
   backupMemoryDir
-} from "../chunk-2BFLDH5F.js";
+} from "../chunk-EEIROWEG.js";
 import "../chunk-765K3SAT.js";
-import "../chunk-437S3G37.js";
+import "../chunk-LNQUAJNC.js";
 import "../chunk-GWTFLF2P.js";
 import "../chunk-UKJAGEXH.js";
 import "../chunk-FP2373TW.js";

package/dist/transfer/capsule-export.js

@@ -1,12 +1,12 @@
 import {
   exportCapsule,
   isValidCapsuleSince
-} from "../chunk-FLVL4L3L.js";
-import "../chunk-WEHSQBFR.js";
-import "../chunk-437S3G37.js";
+} from "../chunk-KTULX4YO.js";
+import "../chunk-LNQUAJNC.js";
 import "../chunk-GWTFLF2P.js";
 import "../chunk-UKJAGEXH.js";
 import "../chunk-FP2373TW.js";
+import "../chunk-WEHSQBFR.js";
 import "../chunk-J4EB7DNW.js";
 import "../chunk-UI3NYK34.js";
 import "../chunk-GCGJW34D.js";

package/dist/transfer/capsule-import.js

@@ -1,12 +1,12 @@
 import {
   importCapsule
-} from "../chunk-M5QKGHCR.js";
+} from "../chunk-CYWCKFCL.js";
 import "../chunk-VF4XKTX3.js";
-import "../chunk-WEHSQBFR.js";
-import "../chunk-437S3G37.js";
+import "../chunk-LNQUAJNC.js";
 import "../chunk-GWTFLF2P.js";
 import "../chunk-UKJAGEXH.js";
 import "../chunk-FP2373TW.js";
+import "../chunk-WEHSQBFR.js";
 import "../chunk-GCGJW34D.js";
 import "../chunk-A6XUJE5D.js";
 import "../chunk-VS2IYZRU.js";

package/dist/transfer/types.d.ts

@@ -313,13 +313,13 @@ declare const CapsuleBlockSchema: z.ZodObject<{
         peerProfiles: boolean;
     }>;
 }, "strip", z.ZodTypeAny, {
+    schemaVersion: string;
     includes: {
         procedural: boolean;
         taxonomy: boolean;
         identityAnchors: boolean;
         peerProfiles: boolean;
     };
-    schemaVersion: string;
     id: string;
     version: string;
     description: string;
@@ -334,13 +334,13 @@ declare const CapsuleBlockSchema: z.ZodObject<{
         forkRoot: string;
     } | null;
 }, {
+    schemaVersion: string;
     includes: {
         procedural: boolean;
         taxonomy: boolean;
         identityAnchors: boolean;
         peerProfiles: boolean;
     };
-    schemaVersion: string;
     id: string;
     version: string;
     description: string;
@@ -464,13 +464,13 @@ declare const ExportManifestV2Schema: z.ZodObject<{
             peerProfiles: boolean;
         }>;
     }, "strip", z.ZodTypeAny, {
+        schemaVersion: string;
         includes: {
             procedural: boolean;
             taxonomy: boolean;
             identityAnchors: boolean;
             peerProfiles: boolean;
         };
-        schemaVersion: string;
         id: string;
         version: string;
         description: string;
@@ -485,13 +485,13 @@ declare const ExportManifestV2Schema: z.ZodObject<{
             forkRoot: string;
         } | null;
     }, {
+        schemaVersion: string;
         includes: {
             procedural: boolean;
             taxonomy: boolean;
             identityAnchors: boolean;
             peerProfiles: boolean;
         };
-        schemaVersion: string;
         id: string;
         version: string;
         description: string;
@@ -518,13 +518,13 @@ declare const ExportManifestV2Schema: z.ZodObject<{
     pluginVersion: string;
     includesTranscripts: boolean;
     capsule: {
+        schemaVersion: string;
         includes: {
             procedural: boolean;
             taxonomy: boolean;
             identityAnchors: boolean;
             peerProfiles: boolean;
         };
-        schemaVersion: string;
         id: string;
         version: string;
         description: string;
@@ -551,13 +551,13 @@ declare const ExportManifestV2Schema: z.ZodObject<{
     pluginVersion: string;
     includesTranscripts: boolean;
     capsule: {
+        schemaVersion: string;
         includes: {
             procedural: boolean;
             taxonomy: boolean;
             identityAnchors: boolean;
             peerProfiles: boolean;
         };
-        schemaVersion: string;
         id: string;
         version: string;
         description: string;
@@ -683,13 +683,13 @@ declare const ExportBundleV2Schema: z.ZodObject<{
                 peerProfiles: boolean;
             }>;
         }, "strip", z.ZodTypeAny, {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            schemaVersion: string;
             id: string;
             version: string;
             description: string;
@@ -704,13 +704,13 @@ declare const ExportBundleV2Schema: z.ZodObject<{
                 forkRoot: string;
             } | null;
         }, {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            schemaVersion: string;
             id: string;
             version: string;
             description: string;
@@ -737,13 +737,13 @@ declare const ExportBundleV2Schema: z.ZodObject<{
         pluginVersion: string;
         includesTranscripts: boolean;
         capsule: {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            schemaVersion: string;
             id: string;
             version: string;
             description: string;
@@ -770,13 +770,13 @@ declare const ExportBundleV2Schema: z.ZodObject<{
         pluginVersion: string;
         includesTranscripts: boolean;
         capsule: {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            schemaVersion: string;
             id: string;
             version: string;
             description: string;
@@ -815,13 +815,13 @@ declare const ExportBundleV2Schema: z.ZodObject<{
         pluginVersion: string;
         includesTranscripts: boolean;
         capsule: {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            schemaVersion: string;
             id: string;
             version: string;
             description: string;
@@ -854,13 +854,13 @@ declare const ExportBundleV2Schema: z.ZodObject<{
         pluginVersion: string;
         includesTranscripts: boolean;
         capsule: {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            schemaVersion: string;
             id: string;
             version: string;
             description: string;

package/dist/trust-score-stage.d.ts

@@ -1,5 +1,5 @@
 import { TrustScoreResult, TrustSignals, TrustBand, TrustScoreComponent } from './trust-score.js';
-import { F as FaithfulnessFrontmatter, J as ProvenanceSource, K as TrustWeights } from './types-ljkd82rn.js';
+import { F as FaithfulnessFrontmatter, J as ProvenanceSource, K as TrustWeights } from './types-C7HUgOuA.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
 

package/dist/trust-score.d.ts

@@ -1,4 +1,4 @@
-import { K as TrustWeights } from './types-ljkd82rn.js';
+import { K as TrustWeights } from './types-C7HUgOuA.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
 

package/dist/{types-ljkd82rn.d.ts → types-C7HUgOuA.d.ts}

@@ -3678,4 +3678,4 @@ interface HourlySummary {
     generatedAt: string;
 }
 
-export { type CompressionGuidelineOptimizerActionSummary as $, type ActiveRecallChatType as A, type BehaviorSignalEvent as B, type CalendarSource as C, type DreamsPhase as D, type EntityFile as E, type FaithfulnessFrontmatter as F, type GatewayConfig as G, type HourlySummary as H, type IdentityInjectionMode as I, type ProvenanceSource as J, type TrustWeights as K, type LiveConnectorsConfig as L, type MemoryFile as M, type ConversationThread as N, type LifecycleState as O, type PluginConfig as P, type QmdSearchResult as Q, type RecallDisclosure as R, type SessionObserverBandConfig as S, type TranscriptEntry as T, type PolicyClass as U, type VerificationState as V, type ImportanceLevel as W, type BufferSurpriseEvent as X, type SecretRef as Y, type AgentAccessAuthToken as Z, type CompressionGuidelineOptimizerEventCounts as _, type DreamsRunResult as a, DEFAULT_RECALL_DISCLOSURE as a$, type CompressionGuidelineOptimizerRuleUpdate as a0, type MemoryActionType as a1, type MemoryActionEvent as a2, type CompressionGuidelineOptimizerState as a3, type EntityMention as a4, type EntitySchemaDefinition as a5, type EntitySchemaSectionDefinition as a6, type EntityStructuredSection as a7, type ContinuityIncidentRecord as a8, type ContinuityIncidentCloseInput as a9, type CodingContext as aA, type DreamsStatusResult as aB, type ScopeProfileConfig as aC, type ScopeProfileLayerId as aD, type ScopeProfilePromotionTarget as aE, type WearableConversation as aF, type WearableSourceSettings as aG, type WearableNativeMemory as aH, type WearableMemoryMode as aI, type WearableSourceConnector as aJ, type WearablesConfig as aK, type WearableSyncSummary as aL, type WearableSourceStatus as aM, type WearableDayTranscript as aN, type WearableCorrectionRule as aO, type RecallSectionConfig as aP, type BootstrapOptions as aQ, type BootstrapResult as aR, type ConsolidationObservation as aS, type CodingModeConfig as aT, type CodingKnowledgeConfig as aU, type WearableCleanupSettings as aV, type WearableDayTranscriptMeta as aW, type BriefingConfig as aX, type BriefingOpenCommitment as aY, type BriefingWindow as aZ, type CodexCompatConfig as a_, type ContinuityIncidentOpenInput as aa, type ContinuityImprovementLoop as ab, type ContinuityLoopReviewInput as ac, type ContinuityLoopUpsertInput as ad, type ImportanceScore as ae, type MemoryIntent as af, type MemoryActionEligibilityContext as ag, type MemoryActionPolicyResult as ah, type MemoryLifecycleEventType as ai, type MemoryLifecycleStateSummary as aj, type ModelProviderConfig as ak, type NativeKnowledgeConfig as al, type ProvenanceConfig as am, type RetrievalTier as an, type SignalScanResult as ao, type TopicScore as ap, type MemoryLink as aq, type BufferState as ar, type MetaState as as, type FileHygieneConfig as at, type EntityRelationship as au, type EntityActivityEntry as av, type AccessTrackingEntry as aw, type MemorySummary as ax, type EntityTimelineEntry as ay, type QmdSearchExplain as az, type RecallPlanMode as b, type ModelProviderAuthMode as b$, type ExtractedFact as b0, type MemoryActionEligibilitySource as b1, type MemoryObservation as b2, type MemoryScope as b3, RECALL_DISCLOSURE_LEVELS as b4, type WearableAuthCheck as b5, type WearableFetchOptions as b6, type WearableFetchPage as b7, type WearableNativeMemoryPage as b8, type WearableTranscriptSegment as b9, type DreamingNarrativePromptStyle as bA, type DreamsDeepSleepConfig as bB, type DreamsLightSleepConfig as bC, type DreamsPhaseStatus as bD, type DreamsPhasesConfig as bE, type DreamsRemConfig as bF, type EngramTraceEvent as bG, type ExtractedProcedureStep as bH, type ExtractedQuestion as bI, type ExtractedReasoningTrace as bJ, type ExtractedReasoningTraceStep as bK, type ExtractedRelationship as bL, type ExtractionPassSource as bM, type GitHubLiveConnectorConfig as bN, type GmailLiveConnectorConfig as bO, type GoogleDriveLiveConnectorConfig as bP, type HeartbeatConfig as bQ, type HeartbeatDetectionMode as bR, type LlmTraceCallback as bS, type LlmTraceEvent as bT, type MemoryActionOutcome as bU, type MemoryActionPolicyDecision as bV, type MemoryActionStatus as bW, type MemoryLinkType as bX, type MemoryOsPresetName as bY, type ModelApi as bZ, type ModelDefinitionConfig as b_, isRecallDisclosure as ba, type AgentAccessHttpConfig as bb, type AgentDefaultsConfig as bc, type AgentPersona as bd, type BehaviorLoopAdjustment as be, type BehaviorSignalDirection as bf, type BehaviorSignalType as bg, type BriefingCalendarSourceError as bh, type BufferEntryState as bi, type CaptureMode as bj, type ChatConfig as bk, type CodexCliReasoningEffort as bl, type CodexCompactionFlushMode as bm, type CodexConnectorConfig as bn, type CompressionGuidelineActivationState as bo, type CompressionGuidelineOptimizerSourceWindow as bp, type ConfidenceTier as bq, type ConsolidationAction as br, type ConsolidationItem as bs, type ContinuityIncidentState as bt, type ContinuityLoopCadence as bu, type ContinuityLoopStatus as bv, type ContradictionScanConfig as bw, type CronConversationRecallMode as bx, type CronRecallMode as by, type DreamingConfig as bz, type ActiveRecallQueryMode as c, type NamespacePolicy as c0, type NativeKnowledgeFolderRuleConfig as c1, type NativeKnowledgeObsidianVaultConfig as c2, type NativeKnowledgeOpenClawWorkspaceConfig as c3, type NotionLiveConnectorConfig as c4, type PrincipalFromSessionKeyMode as c5, type PrincipalRule as c6, type ProceduralConfig as c7, type QuestionEntry as c8, type ReasoningEffort as c9, type RecallPipelineConfig as ca, type RecallTraceEvent as cb, type RelevanceFeedback as cc, SPECULATIVE_TTL_DAYS as cd, type ScopeProfileAutoPromoteConfig as ce, type ScopeProfileTeamProjectConfig as cf, type ScopeTeamConfig as cg, type ScoredEntity as ch, type SemanticChunkingConfigShape as ci, type SignalLevel as cj, type SlotBehaviorConfig as ck, type SlotMismatchMode as cl, type TriggerMode as cm, confidenceTier as cn, type ActiveRecallPromptStyle as d, type ActiveRecallThinking as e, type ActiveRecallModelFallbackPolicy as f, type BehaviorLoopPolicyState as g, type MemoryCategory as h, type BriefingSections as i, type BriefingFollowup as j, type BriefingFocus as k, type CalendarEvent as l, type BriefingActiveThread as m, type BriefingResult as n, type BriefingRecentEntity as o, type BufferTurn as p, type MemoryFrontmatter as q, type Checkpoint as r, type AgentPersonaModelConfig as s, type RecallTierExplain as t, type MemoryStatus as u, type MemoryProjectionCurrentState as v, type MemoryLifecycleEvent as w, type ExtractionResult as x, type ConsolidationResult as y, type DaySummaryResult as z };
+export { type CompressionGuidelineOptimizerActionSummary as $, type ActiveRecallChatType as A, type BehaviorSignalEvent as B, type CalendarSource as C, type DreamsPhase as D, type EntityFile as E, type FaithfulnessFrontmatter as F, type GatewayConfig as G, type HourlySummary as H, type IdentityInjectionMode as I, type ProvenanceSource as J, type TrustWeights as K, type LiveConnectorsConfig as L, type MemoryFile as M, type ConversationThread as N, type LifecycleState as O, type PluginConfig as P, type QmdSearchResult as Q, type RecallDisclosure as R, type SessionObserverBandConfig as S, type TranscriptEntry as T, type PolicyClass as U, type VerificationState as V, type ImportanceLevel as W, type BufferSurpriseEvent as X, type SecretRef as Y, type AgentAccessAuthToken as Z, type CompressionGuidelineOptimizerEventCounts as _, type DreamsRunResult as a, DEFAULT_RECALL_DISCLOSURE as a$, type CompressionGuidelineOptimizerRuleUpdate as a0, type MemoryActionType as a1, type MemoryActionEvent as a2, type CompressionGuidelineOptimizerState as a3, type EntityMention as a4, type EntitySchemaDefinition as a5, type EntitySchemaSectionDefinition as a6, type EntityStructuredSection as a7, type ContinuityIncidentRecord as a8, type ContinuityIncidentCloseInput as a9, type CodingContext as aA, type DreamsStatusResult as aB, type ScopeProfileConfig as aC, type ScopeProfileLayerId as aD, type ScopeProfilePromotionTarget as aE, type WearableConversation as aF, type WearableSourceSettings as aG, type WearableNativeMemory as aH, type WearableMemoryMode as aI, type WearableSourceConnector as aJ, type WearablesConfig as aK, type WearableSyncSummary as aL, type WearableSourceStatus as aM, type WearableDayTranscript as aN, type WearableCorrectionRule as aO, type RecallSectionConfig as aP, type BootstrapOptions as aQ, type BootstrapResult as aR, type ConsolidationObservation as aS, type CodingModeConfig as aT, type CodingKnowledgeConfig as aU, type WearableCleanupSettings as aV, type WearableDayTranscriptMeta as aW, type BriefingConfig as aX, type BriefingOpenCommitment as aY, type BriefingWindow as aZ, type CodexCompatConfig as a_, type ContinuityIncidentOpenInput as aa, type ContinuityImprovementLoop as ab, type ContinuityLoopReviewInput as ac, type ContinuityLoopUpsertInput as ad, type ImportanceScore as ae, type MemoryIntent as af, type MemoryActionEligibilityContext as ag, type MemoryActionPolicyResult as ah, type MemoryLifecycleEventType as ai, type MemoryLifecycleStateSummary as aj, type ModelProviderConfig as ak, type NativeKnowledgeConfig as al, type ProvenanceConfig as am, type RetrievalTier as an, type SignalScanResult as ao, type TopicScore as ap, type MemoryLink as aq, type BufferState as ar, type MetaState as as, type FileHygieneConfig as at, type EntityRelationship as au, type EntityActivityEntry as av, type AccessTrackingEntry as aw, type MemorySummary as ax, type EntityTimelineEntry as ay, type QmdSearchExplain as az, type RecallPlanMode as b, type ModelProviderAuthMode as b$, type ExtractedFact as b0, type MemoryActionEligibilitySource as b1, type MemoryObservation as b2, type MemoryScope as b3, RECALL_DISCLOSURE_LEVELS as b4, type WearableAuthCheck as b5, type WearableFetchOptions as b6, type WearableFetchPage as b7, type WearableNativeMemoryPage as b8, type WearableTranscriptSegment as b9, type DreamingNarrativePromptStyle as bA, type DreamsDeepSleepConfig as bB, type DreamsLightSleepConfig as bC, type DreamsPhaseStatus as bD, type DreamsPhasesConfig as bE, type DreamsRemConfig as bF, type EngramTraceEvent as bG, type ExtractedProcedureStep as bH, type ExtractedQuestion as bI, type ExtractedReasoningTrace as bJ, type ExtractedReasoningTraceStep as bK, type ExtractedRelationship as bL, type ExtractionPassSource as bM, type GitHubLiveConnectorConfig as bN, type GmailLiveConnectorConfig as bO, type GoogleDriveLiveConnectorConfig as bP, type HeartbeatConfig as bQ, type HeartbeatDetectionMode as bR, type LlmTraceCallback as bS, type LlmTraceEvent as bT, type MemoryActionOutcome as bU, type MemoryActionPolicyDecision as bV, type MemoryActionStatus as bW, type MemoryLinkType as bX, type MemoryOsPresetName as bY, type ModelApi as bZ, type ModelDefinitionConfig as b_, isRecallDisclosure as ba, type AgentAccessHttpConfig as bb, type AgentDefaultsConfig as bc, type AgentPersona as bd, type BehaviorLoopAdjustment as be, type BehaviorSignalDirection as bf, type BehaviorSignalType as bg, type BriefingCalendarSourceError as bh, type BufferEntryState as bi, type CaptureMode as bj, type ChatConfig as bk, type CodexCliReasoningEffort as bl, type CodexCompactionFlushMode as bm, type CodexConnectorConfig as bn, type CompressionGuidelineActivationState as bo, type CompressionGuidelineOptimizerSourceWindow as bp, type ConfidenceTier as bq, type ConsolidationAction as br, type ConsolidationItem as bs, type ContinuityIncidentState as bt, type ContinuityLoopCadence as bu, type ContinuityLoopStatus as bv, type ContradictionScanConfig as bw, type CronConversationRecallMode as bx, type CronRecallMode as by, type DreamingConfig as bz, type ActiveRecallQueryMode as c, type NamespacePolicy as c0, type NativeKnowledgeFolderRuleConfig as c1, type NativeKnowledgeObsidianVaultConfig as c2, type NativeKnowledgeOpenClawWorkspaceConfig as c3, type NotionLiveConnectorConfig as c4, type PrincipalFromSessionKeyMode as c5, type PrincipalRule as c6, type ProceduralConfig as c7, type QuestionEntry as c8, type ReasoningEffort as c9, type RecallPipelineConfig as ca, type RecallTraceEvent as cb, type RelevanceFeedback as cc, SPECULATIVE_TTL_DAYS as cd, type ScopeProfileAutoPromoteConfig as ce, type ScopeProfileTeamProjectConfig as cf, type ScopeTeamConfig as cg, type ScoredEntity as ch, type SemanticChunkingConfigShape as ci, type SignalLevel as cj, type SlotBehaviorConfig as ck, type SlotMismatchMode as cl, type TriggerMode as cm, confidenceTier as cn, type ActiveRecallPromptStyle as d, type ActiveRecallThinking as e, type ActiveRecallModelFallbackPolicy as f, type BehaviorLoopPolicyState as g, type BriefingSections as h, type BriefingFollowup as i, type BriefingFocus as j, type CalendarEvent as k, type BriefingActiveThread as l, type BriefingResult as m, type BriefingRecentEntity as n, type BufferTurn as o, type MemoryFrontmatter as p, type Checkpoint as q, type AgentPersonaModelConfig as r, type RecallTierExplain as s, type MemoryCategory as t, type MemoryStatus as u, type MemoryProjectionCurrentState as v, type MemoryLifecycleEvent as w, type ExtractionResult as x, type ConsolidationResult as y, type DaySummaryResult as z };

package/dist/types.d.ts

@@ -1,3 +1,3 @@
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
-export { aw as AccessTrackingEntry, A as ActiveRecallChatType, f as ActiveRecallModelFallbackPolicy, d as ActiveRecallPromptStyle, c as ActiveRecallQueryMode, e as ActiveRecallThinking, Z as AgentAccessAuthToken, bb as AgentAccessHttpConfig, bc as AgentDefaultsConfig, bd as AgentPersona, s as AgentPersonaModelConfig, be as BehaviorLoopAdjustment, g as BehaviorLoopPolicyState, bf as BehaviorSignalDirection, B as BehaviorSignalEvent, bg as BehaviorSignalType, aQ as BootstrapOptions, aR as BootstrapResult, m as BriefingActiveThread, bh as BriefingCalendarSourceError, aX as BriefingConfig, k as BriefingFocus, j as BriefingFollowup, aY as BriefingOpenCommitment, o as BriefingRecentEntity, n as BriefingResult, i as BriefingSections, aZ as BriefingWindow, bi as BufferEntryState, ar as BufferState, X as BufferSurpriseEvent, p as BufferTurn, l as CalendarEvent, C as CalendarSource, bj as CaptureMode, bk as ChatConfig, r as Checkpoint, bl as CodexCliReasoningEffort, bm as CodexCompactionFlushMode, a_ as CodexCompatConfig, bn as CodexConnectorConfig, aA as CodingContext, aU as CodingKnowledgeConfig, aT as CodingModeConfig, bo as CompressionGuidelineActivationState, $ as CompressionGuidelineOptimizerActionSummary, _ as CompressionGuidelineOptimizerEventCounts, a0 as CompressionGuidelineOptimizerRuleUpdate, bp as CompressionGuidelineOptimizerSourceWindow, a3 as CompressionGuidelineOptimizerState, bq as ConfidenceTier, br as ConsolidationAction, bs as ConsolidationItem, aS as ConsolidationObservation, y as ConsolidationResult, ab as ContinuityImprovementLoop, a9 as ContinuityIncidentCloseInput, aa as ContinuityIncidentOpenInput, a8 as ContinuityIncidentRecord, bt as ContinuityIncidentState, bu as ContinuityLoopCadence, ac as ContinuityLoopReviewInput, bv as ContinuityLoopStatus, ad as ContinuityLoopUpsertInput, bw as ContradictionScanConfig, N as ConversationThread, bx as CronConversationRecallMode, by as CronRecallMode, a$ as DEFAULT_RECALL_DISCLOSURE, z as DaySummaryResult, bz as DreamingConfig, bA as DreamingNarrativePromptStyle, bB as DreamsDeepSleepConfig, bC as DreamsLightSleepConfig, D as DreamsPhase, bD as DreamsPhaseStatus, bE as DreamsPhasesConfig, bF as DreamsRemConfig, a as DreamsRunResult, aB as DreamsStatusResult, bG as EngramTraceEvent, av as EntityActivityEntry, E as EntityFile, a4 as EntityMention, au as EntityRelationship, a5 as EntitySchemaDefinition, a6 as EntitySchemaSectionDefinition, a7 as EntityStructuredSection, ay as EntityTimelineEntry, b0 as ExtractedFact, bH as ExtractedProcedureStep, bI as ExtractedQuestion, bJ as ExtractedReasoningTrace, bK as ExtractedReasoningTraceStep, bL as ExtractedRelationship, bM as ExtractionPassSource, x as ExtractionResult, F as FaithfulnessFrontmatter, at as FileHygieneConfig, G as GatewayConfig, bN as GitHubLiveConnectorConfig, bO as GmailLiveConnectorConfig, bP as GoogleDriveLiveConnectorConfig, bQ as HeartbeatConfig, bR as HeartbeatDetectionMode, H as HourlySummary, I as IdentityInjectionMode, W as ImportanceLevel, ae as ImportanceScore, O as LifecycleState, L as LiveConnectorsConfig, bS as LlmTraceCallback, bT as LlmTraceEvent, ag as MemoryActionEligibilityContext, b1 as MemoryActionEligibilitySource, a2 as MemoryActionEvent, bU as MemoryActionOutcome, bV as MemoryActionPolicyDecision, ah as MemoryActionPolicyResult, bW as MemoryActionStatus, a1 as MemoryActionType, h as MemoryCategory, M as MemoryFile, q as MemoryFrontmatter, af as MemoryIntent, w as MemoryLifecycleEvent, ai as MemoryLifecycleEventType, aj as MemoryLifecycleStateSummary, aq as MemoryLink, bX as MemoryLinkType, b2 as MemoryObservation, bY as MemoryOsPresetName, v as MemoryProjectionCurrentState, b3 as MemoryScope, u as MemoryStatus, ax as MemorySummary, as as MetaState, bZ as ModelApi, b_ as ModelDefinitionConfig, b$ as ModelProviderAuthMode, ak as ModelProviderConfig, c0 as NamespacePolicy, al as NativeKnowledgeConfig, c1 as NativeKnowledgeFolderRuleConfig, c2 as NativeKnowledgeObsidianVaultConfig, c3 as NativeKnowledgeOpenClawWorkspaceConfig, c4 as NotionLiveConnectorConfig, P as PluginConfig, U as PolicyClass, c5 as PrincipalFromSessionKeyMode, c6 as PrincipalRule, c7 as ProceduralConfig, am as ProvenanceConfig, J as ProvenanceSource, az as QmdSearchExplain, Q as QmdSearchResult, c8 as QuestionEntry, b4 as RECALL_DISCLOSURE_LEVELS, c9 as ReasoningEffort, R as RecallDisclosure, ca as RecallPipelineConfig, b as RecallPlanMode, aP as RecallSectionConfig, t as RecallTierExplain, cb as RecallTraceEvent, cc as RelevanceFeedback, an as RetrievalTier, cd as SPECULATIVE_TTL_DAYS, ce as ScopeProfileAutoPromoteConfig, aC as ScopeProfileConfig, aD as ScopeProfileLayerId, aE as ScopeProfilePromotionTarget, cf as ScopeProfileTeamProjectConfig, cg as ScopeTeamConfig, ch as ScoredEntity, Y as SecretRef, ci as SemanticChunkingConfigShape, S as SessionObserverBandConfig, cj as SignalLevel, ao as SignalScanResult, ck as SlotBehaviorConfig, cl as SlotMismatchMode, ap as TopicScore, T as TranscriptEntry, cm as TriggerMode, K as TrustWeights, V as VerificationState, cn as confidenceTier, ba as isRecallDisclosure } from './types-ljkd82rn.js';
+export { aw as AccessTrackingEntry, A as ActiveRecallChatType, f as ActiveRecallModelFallbackPolicy, d as ActiveRecallPromptStyle, c as ActiveRecallQueryMode, e as ActiveRecallThinking, Z as AgentAccessAuthToken, bb as AgentAccessHttpConfig, bc as AgentDefaultsConfig, bd as AgentPersona, r as AgentPersonaModelConfig, be as BehaviorLoopAdjustment, g as BehaviorLoopPolicyState, bf as BehaviorSignalDirection, B as BehaviorSignalEvent, bg as BehaviorSignalType, aQ as BootstrapOptions, aR as BootstrapResult, l as BriefingActiveThread, bh as BriefingCalendarSourceError, aX as BriefingConfig, j as BriefingFocus, i as BriefingFollowup, aY as BriefingOpenCommitment, n as BriefingRecentEntity, m as BriefingResult, h as BriefingSections, aZ as BriefingWindow, bi as BufferEntryState, ar as BufferState, X as BufferSurpriseEvent, o as BufferTurn, k as CalendarEvent, C as CalendarSource, bj as CaptureMode, bk as ChatConfig, q as Checkpoint, bl as CodexCliReasoningEffort, bm as CodexCompactionFlushMode, a_ as CodexCompatConfig, bn as CodexConnectorConfig, aA as CodingContext, aU as CodingKnowledgeConfig, aT as CodingModeConfig, bo as CompressionGuidelineActivationState, $ as CompressionGuidelineOptimizerActionSummary, _ as CompressionGuidelineOptimizerEventCounts, a0 as CompressionGuidelineOptimizerRuleUpdate, bp as CompressionGuidelineOptimizerSourceWindow, a3 as CompressionGuidelineOptimizerState, bq as ConfidenceTier, br as ConsolidationAction, bs as ConsolidationItem, aS as ConsolidationObservation, y as ConsolidationResult, ab as ContinuityImprovementLoop, a9 as ContinuityIncidentCloseInput, aa as ContinuityIncidentOpenInput, a8 as ContinuityIncidentRecord, bt as ContinuityIncidentState, bu as ContinuityLoopCadence, ac as ContinuityLoopReviewInput, bv as ContinuityLoopStatus, ad as ContinuityLoopUpsertInput, bw as ContradictionScanConfig, N as ConversationThread, bx as CronConversationRecallMode, by as CronRecallMode, a$ as DEFAULT_RECALL_DISCLOSURE, z as DaySummaryResult, bz as DreamingConfig, bA as DreamingNarrativePromptStyle, bB as DreamsDeepSleepConfig, bC as DreamsLightSleepConfig, D as DreamsPhase, bD as DreamsPhaseStatus, bE as DreamsPhasesConfig, bF as DreamsRemConfig, a as DreamsRunResult, aB as DreamsStatusResult, bG as EngramTraceEvent, av as EntityActivityEntry, E as EntityFile, a4 as EntityMention, au as EntityRelationship, a5 as EntitySchemaDefinition, a6 as EntitySchemaSectionDefinition, a7 as EntityStructuredSection, ay as EntityTimelineEntry, b0 as ExtractedFact, bH as ExtractedProcedureStep, bI as ExtractedQuestion, bJ as ExtractedReasoningTrace, bK as ExtractedReasoningTraceStep, bL as ExtractedRelationship, bM as ExtractionPassSource, x as ExtractionResult, F as FaithfulnessFrontmatter, at as FileHygieneConfig, G as GatewayConfig, bN as GitHubLiveConnectorConfig, bO as GmailLiveConnectorConfig, bP as GoogleDriveLiveConnectorConfig, bQ as HeartbeatConfig, bR as HeartbeatDetectionMode, H as HourlySummary, I as IdentityInjectionMode, W as ImportanceLevel, ae as ImportanceScore, O as LifecycleState, L as LiveConnectorsConfig, bS as LlmTraceCallback, bT as LlmTraceEvent, ag as MemoryActionEligibilityContext, b1 as MemoryActionEligibilitySource, a2 as MemoryActionEvent, bU as MemoryActionOutcome, bV as MemoryActionPolicyDecision, ah as MemoryActionPolicyResult, bW as MemoryActionStatus, a1 as MemoryActionType, t as MemoryCategory, M as MemoryFile, p as MemoryFrontmatter, af as MemoryIntent, w as MemoryLifecycleEvent, ai as MemoryLifecycleEventType, aj as MemoryLifecycleStateSummary, aq as MemoryLink, bX as MemoryLinkType, b2 as MemoryObservation, bY as MemoryOsPresetName, v as MemoryProjectionCurrentState, b3 as MemoryScope, u as MemoryStatus, ax as MemorySummary, as as MetaState, bZ as ModelApi, b_ as ModelDefinitionConfig, b$ as ModelProviderAuthMode, ak as ModelProviderConfig, c0 as NamespacePolicy, al as NativeKnowledgeConfig, c1 as NativeKnowledgeFolderRuleConfig, c2 as NativeKnowledgeObsidianVaultConfig, c3 as NativeKnowledgeOpenClawWorkspaceConfig, c4 as NotionLiveConnectorConfig, P as PluginConfig, U as PolicyClass, c5 as PrincipalFromSessionKeyMode, c6 as PrincipalRule, c7 as ProceduralConfig, am as ProvenanceConfig, J as ProvenanceSource, az as QmdSearchExplain, Q as QmdSearchResult, c8 as QuestionEntry, b4 as RECALL_DISCLOSURE_LEVELS, c9 as ReasoningEffort, R as RecallDisclosure, ca as RecallPipelineConfig, b as RecallPlanMode, aP as RecallSectionConfig, s as RecallTierExplain, cb as RecallTraceEvent, cc as RelevanceFeedback, an as RetrievalTier, cd as SPECULATIVE_TTL_DAYS, ce as ScopeProfileAutoPromoteConfig, aC as ScopeProfileConfig, aD as ScopeProfileLayerId, aE as ScopeProfilePromotionTarget, cf as ScopeProfileTeamProjectConfig, cg as ScopeTeamConfig, ch as ScoredEntity, Y as SecretRef, ci as SemanticChunkingConfigShape, S as SessionObserverBandConfig, cj as SignalLevel, ao as SignalScanResult, ck as SlotBehaviorConfig, cl as SlotMismatchMode, ap as TopicScore, T as TranscriptEntry, cm as TriggerMode, K as TrustWeights, V as VerificationState, cn as confidenceTier, ba as isRecallDisclosure } from './types-C7HUgOuA.js';

package/dist/utility-runtime.d.ts

@@ -1,5 +1,5 @@
 import { TierRoutingPolicy } from './tier-routing.js';
-import './types-ljkd82rn.js';
+import './types-C7HUgOuA.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
 import './lifecycle.js';

package/dist/verified-recall.js

@@ -1,26 +1,27 @@
 import {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
-} from "./chunk-66FLU5BT.js";
+} from "./chunk-II6WHCCW.js";
 import "./chunk-2A3OXAP2.js";
-import "./chunk-M7GGMGMZ.js";
+import "./chunk-ZBJMUXZH.js";
+import "./chunk-UDCDGP6A.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-L2B3EE7B.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
 import "./chunk-EHK6KZHK.js";
 import "./chunk-6CIAGZ6X.js";
-import "./chunk-SVOZFLIQ.js";
-import "./chunk-LTJAMRGI.js";
 import "./chunk-J6A3CX5N.js";
 import "./chunk-4KJLYTLS.js";
+import "./chunk-SVOZFLIQ.js";
+import "./chunk-LTJAMRGI.js";
 import "./chunk-JS2HKKOK.js";
+import "./chunk-RHOZ5LLO.js";
+import "./chunk-RL6NEVXT.js";
 import "./chunk-AWJ2FHCF.js";
 import "./chunk-42JKGUFJ.js";
 import "./chunk-RULE4VG5.js";
 import "./chunk-SCU65EZI.js";
-import "./chunk-RHOZ5LLO.js";
-import "./chunk-RL6NEVXT.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-MNUHL34L.js";
@@ -36,8 +37,8 @@ import "./chunk-RGMVMVMF.js";
 import "./chunk-N7RWREIQ.js";
 import "./chunk-OEHCMALU.js";
 import "./chunk-PHK3HARR.js";
-import "./chunk-5GKPFL3S.js";
 import "./chunk-4DJQYKMN.js";
+import "./chunk-5GKPFL3S.js";
 import "./chunk-EYIEWJNI.js";
 import "./chunk-JUC24CTX.js";
 import "./chunk-37CTGERM.js";
@@ -47,7 +48,6 @@ import "./chunk-P7FMDTKL.js";
 import "./chunk-VS2IYZRU.js";
 import "./chunk-6MKAMLQL.js";
 import "./chunk-JAKIDQB2.js";
-import "./chunk-ZBJMUXZH.js";
 import "./chunk-PZ5AY32C.js";
 export {
   compareVerifiedEpisodeResults,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.4.1",
+  "version": "9.5.0",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -3000,7 +3000,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.4.1"
+    "@remnic/coding-graph": "^9.5.0"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/access-boundary.test.ts

@@ -22,6 +22,9 @@ import {
   type OperationContext,
 } from "./access-boundary.js";
 import { EngramAccessInputError, type EngramAccessService } from "./access-service.js";
+import { EngramAccessForbiddenError } from "./access-errors.js";
+import { tokenCapabilityStore } from "./access-token-capabilities.js";
+import { z } from "zod";
 
 // ---------------------------------------------------------------------------
 // Test fixtures
@@ -210,3 +213,62 @@ test("getOperation / listRegisteredOperations: round-trip a registration", async
   assert.ok(getOperation("memory_search"));
   assert.ok(listRegisteredOperations().includes("memory_search"));
 });
+
+// ---------------------------------------------------------------------------
+// fleetWide flag — fail-closed for namespace-scoped tokens (issue #1850 round 10)
+// Maintenance ops that run ACROSS ALL namespaces carry no `namespace` arg, so
+// the MCP tools/call effective-namespace gate never fires. The fleetWide flag
+// makes defineOperation's run wrapper reject a namespace-scoped token BEFORE
+// the handler — no side effect on denial; unrestricted/legacy unaffected.
+// ---------------------------------------------------------------------------
+
+test("fleetWide op: namespace-scoped token is rejected BEFORE the handler runs (no side effect)", async () => {
+  let ran = false;
+  __resetRegistryForTest();
+  const op = defineOperation({
+    name: "memory_get",
+    description: "test fleet-wide op",
+    fleetWide: true,
+    schema: z.object({}),
+    handler: async () => { ran = true; return { ok: true }; },
+  });
+  await assert.rejects(
+    () => tokenCapabilityStore.run({ version: 1, namespaces: ["ns_a"] }, () => op.run({}, ctx(makeMockService()))),
+    (err: unknown) => err instanceof EngramAccessForbiddenError && /across all namespaces/.test(err.message),
+  );
+  assert.equal(ran, false, "fleet-wide handler must NOT run for a namespace-scoped token (no side effect)");
+});
+
+test("fleetWide op: unrestricted and legacy tokens reach the handler", async () => {
+  let ran = false;
+  __resetRegistryForTest();
+  const op = defineOperation({
+    name: "memory_get",
+    description: "test fleet-wide op",
+    fleetWide: true,
+    schema: z.object({}),
+    handler: async () => { ran = true; return { ok: true }; },
+  });
+  // Explicit-unrestricted record (version present, no namespaces axis).
+  const result = await tokenCapabilityStore.run({ version: 1 }, () => op.run({}, ctx(makeMockService())));
+  assert.deepEqual(result, { ok: true });
+  assert.equal(ran, true, "unrestricted token reaches the handler");
+  // Legacy (no ALS bound at all — cron / internal callers).
+  ran = false;
+  assert.deepEqual(await op.run({}, ctx(makeMockService())), { ok: true });
+  assert.equal(ran, true, "legacy token reaches the handler");
+});
+
+test("fleetWide flag is inert for normal (non-fleet-wide) ops under a scoped token", async () => {
+  let ran = false;
+  __resetRegistryForTest();
+  const op = defineOperation({
+    name: "memory_get",
+    description: "normal op (not fleet-wide)",
+    schema: z.object({}),
+    handler: async () => { ran = true; return { ok: true }; },
+  });
+  const result = await tokenCapabilityStore.run({ version: 1, namespaces: ["ns_a"] }, () => op.run({}, ctx(makeMockService())));
+  assert.deepEqual(result, { ok: true });
+  assert.equal(ran, true, "a non-fleet-wide op runs normally for a scoped token");
+});