@remnic/core 9.4.2 → 9.5.0

package/dist/trust-score.d.ts

@@ -1,4 +1,4 @@
-import { K as TrustWeights } from './types-ljkd82rn.js';
+import { K as TrustWeights } from './types-C7HUgOuA.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
 

package/dist/{types-ljkd82rn.d.ts → types-C7HUgOuA.d.ts}

@@ -3678,4 +3678,4 @@ interface HourlySummary {
     generatedAt: string;
 }
 
-export { type CompressionGuidelineOptimizerActionSummary as $, type ActiveRecallChatType as A, type BehaviorSignalEvent as B, type CalendarSource as C, type DreamsPhase as D, type EntityFile as E, type FaithfulnessFrontmatter as F, type GatewayConfig as G, type HourlySummary as H, type IdentityInjectionMode as I, type ProvenanceSource as J, type TrustWeights as K, type LiveConnectorsConfig as L, type MemoryFile as M, type ConversationThread as N, type LifecycleState as O, type PluginConfig as P, type QmdSearchResult as Q, type RecallDisclosure as R, type SessionObserverBandConfig as S, type TranscriptEntry as T, type PolicyClass as U, type VerificationState as V, type ImportanceLevel as W, type BufferSurpriseEvent as X, type SecretRef as Y, type AgentAccessAuthToken as Z, type CompressionGuidelineOptimizerEventCounts as _, type DreamsRunResult as a, DEFAULT_RECALL_DISCLOSURE as a$, type CompressionGuidelineOptimizerRuleUpdate as a0, type MemoryActionType as a1, type MemoryActionEvent as a2, type CompressionGuidelineOptimizerState as a3, type EntityMention as a4, type EntitySchemaDefinition as a5, type EntitySchemaSectionDefinition as a6, type EntityStructuredSection as a7, type ContinuityIncidentRecord as a8, type ContinuityIncidentCloseInput as a9, type CodingContext as aA, type DreamsStatusResult as aB, type ScopeProfileConfig as aC, type ScopeProfileLayerId as aD, type ScopeProfilePromotionTarget as aE, type WearableConversation as aF, type WearableSourceSettings as aG, type WearableNativeMemory as aH, type WearableMemoryMode as aI, type WearableSourceConnector as aJ, type WearablesConfig as aK, type WearableSyncSummary as aL, type WearableSourceStatus as aM, type WearableDayTranscript as aN, type WearableCorrectionRule as aO, type RecallSectionConfig as aP, type BootstrapOptions as aQ, type BootstrapResult as aR, type ConsolidationObservation as aS, type CodingModeConfig as aT, type CodingKnowledgeConfig as aU, type WearableCleanupSettings as aV, type WearableDayTranscriptMeta as aW, type BriefingConfig as aX, type BriefingOpenCommitment as aY, type BriefingWindow as aZ, type CodexCompatConfig as a_, type ContinuityIncidentOpenInput as aa, type ContinuityImprovementLoop as ab, type ContinuityLoopReviewInput as ac, type ContinuityLoopUpsertInput as ad, type ImportanceScore as ae, type MemoryIntent as af, type MemoryActionEligibilityContext as ag, type MemoryActionPolicyResult as ah, type MemoryLifecycleEventType as ai, type MemoryLifecycleStateSummary as aj, type ModelProviderConfig as ak, type NativeKnowledgeConfig as al, type ProvenanceConfig as am, type RetrievalTier as an, type SignalScanResult as ao, type TopicScore as ap, type MemoryLink as aq, type BufferState as ar, type MetaState as as, type FileHygieneConfig as at, type EntityRelationship as au, type EntityActivityEntry as av, type AccessTrackingEntry as aw, type MemorySummary as ax, type EntityTimelineEntry as ay, type QmdSearchExplain as az, type RecallPlanMode as b, type ModelProviderAuthMode as b$, type ExtractedFact as b0, type MemoryActionEligibilitySource as b1, type MemoryObservation as b2, type MemoryScope as b3, RECALL_DISCLOSURE_LEVELS as b4, type WearableAuthCheck as b5, type WearableFetchOptions as b6, type WearableFetchPage as b7, type WearableNativeMemoryPage as b8, type WearableTranscriptSegment as b9, type DreamingNarrativePromptStyle as bA, type DreamsDeepSleepConfig as bB, type DreamsLightSleepConfig as bC, type DreamsPhaseStatus as bD, type DreamsPhasesConfig as bE, type DreamsRemConfig as bF, type EngramTraceEvent as bG, type ExtractedProcedureStep as bH, type ExtractedQuestion as bI, type ExtractedReasoningTrace as bJ, type ExtractedReasoningTraceStep as bK, type ExtractedRelationship as bL, type ExtractionPassSource as bM, type GitHubLiveConnectorConfig as bN, type GmailLiveConnectorConfig as bO, type GoogleDriveLiveConnectorConfig as bP, type HeartbeatConfig as bQ, type HeartbeatDetectionMode as bR, type LlmTraceCallback as bS, type LlmTraceEvent as bT, type MemoryActionOutcome as bU, type MemoryActionPolicyDecision as bV, type MemoryActionStatus as bW, type MemoryLinkType as bX, type MemoryOsPresetName as bY, type ModelApi as bZ, type ModelDefinitionConfig as b_, isRecallDisclosure as ba, type AgentAccessHttpConfig as bb, type AgentDefaultsConfig as bc, type AgentPersona as bd, type BehaviorLoopAdjustment as be, type BehaviorSignalDirection as bf, type BehaviorSignalType as bg, type BriefingCalendarSourceError as bh, type BufferEntryState as bi, type CaptureMode as bj, type ChatConfig as bk, type CodexCliReasoningEffort as bl, type CodexCompactionFlushMode as bm, type CodexConnectorConfig as bn, type CompressionGuidelineActivationState as bo, type CompressionGuidelineOptimizerSourceWindow as bp, type ConfidenceTier as bq, type ConsolidationAction as br, type ConsolidationItem as bs, type ContinuityIncidentState as bt, type ContinuityLoopCadence as bu, type ContinuityLoopStatus as bv, type ContradictionScanConfig as bw, type CronConversationRecallMode as bx, type CronRecallMode as by, type DreamingConfig as bz, type ActiveRecallQueryMode as c, type NamespacePolicy as c0, type NativeKnowledgeFolderRuleConfig as c1, type NativeKnowledgeObsidianVaultConfig as c2, type NativeKnowledgeOpenClawWorkspaceConfig as c3, type NotionLiveConnectorConfig as c4, type PrincipalFromSessionKeyMode as c5, type PrincipalRule as c6, type ProceduralConfig as c7, type QuestionEntry as c8, type ReasoningEffort as c9, type RecallPipelineConfig as ca, type RecallTraceEvent as cb, type RelevanceFeedback as cc, SPECULATIVE_TTL_DAYS as cd, type ScopeProfileAutoPromoteConfig as ce, type ScopeProfileTeamProjectConfig as cf, type ScopeTeamConfig as cg, type ScoredEntity as ch, type SemanticChunkingConfigShape as ci, type SignalLevel as cj, type SlotBehaviorConfig as ck, type SlotMismatchMode as cl, type TriggerMode as cm, confidenceTier as cn, type ActiveRecallPromptStyle as d, type ActiveRecallThinking as e, type ActiveRecallModelFallbackPolicy as f, type BehaviorLoopPolicyState as g, type MemoryCategory as h, type BriefingSections as i, type BriefingFollowup as j, type BriefingFocus as k, type CalendarEvent as l, type BriefingActiveThread as m, type BriefingResult as n, type BriefingRecentEntity as o, type BufferTurn as p, type MemoryFrontmatter as q, type Checkpoint as r, type AgentPersonaModelConfig as s, type RecallTierExplain as t, type MemoryStatus as u, type MemoryProjectionCurrentState as v, type MemoryLifecycleEvent as w, type ExtractionResult as x, type ConsolidationResult as y, type DaySummaryResult as z };
+export { type CompressionGuidelineOptimizerActionSummary as $, type ActiveRecallChatType as A, type BehaviorSignalEvent as B, type CalendarSource as C, type DreamsPhase as D, type EntityFile as E, type FaithfulnessFrontmatter as F, type GatewayConfig as G, type HourlySummary as H, type IdentityInjectionMode as I, type ProvenanceSource as J, type TrustWeights as K, type LiveConnectorsConfig as L, type MemoryFile as M, type ConversationThread as N, type LifecycleState as O, type PluginConfig as P, type QmdSearchResult as Q, type RecallDisclosure as R, type SessionObserverBandConfig as S, type TranscriptEntry as T, type PolicyClass as U, type VerificationState as V, type ImportanceLevel as W, type BufferSurpriseEvent as X, type SecretRef as Y, type AgentAccessAuthToken as Z, type CompressionGuidelineOptimizerEventCounts as _, type DreamsRunResult as a, DEFAULT_RECALL_DISCLOSURE as a$, type CompressionGuidelineOptimizerRuleUpdate as a0, type MemoryActionType as a1, type MemoryActionEvent as a2, type CompressionGuidelineOptimizerState as a3, type EntityMention as a4, type EntitySchemaDefinition as a5, type EntitySchemaSectionDefinition as a6, type EntityStructuredSection as a7, type ContinuityIncidentRecord as a8, type ContinuityIncidentCloseInput as a9, type CodingContext as aA, type DreamsStatusResult as aB, type ScopeProfileConfig as aC, type ScopeProfileLayerId as aD, type ScopeProfilePromotionTarget as aE, type WearableConversation as aF, type WearableSourceSettings as aG, type WearableNativeMemory as aH, type WearableMemoryMode as aI, type WearableSourceConnector as aJ, type WearablesConfig as aK, type WearableSyncSummary as aL, type WearableSourceStatus as aM, type WearableDayTranscript as aN, type WearableCorrectionRule as aO, type RecallSectionConfig as aP, type BootstrapOptions as aQ, type BootstrapResult as aR, type ConsolidationObservation as aS, type CodingModeConfig as aT, type CodingKnowledgeConfig as aU, type WearableCleanupSettings as aV, type WearableDayTranscriptMeta as aW, type BriefingConfig as aX, type BriefingOpenCommitment as aY, type BriefingWindow as aZ, type CodexCompatConfig as a_, type ContinuityIncidentOpenInput as aa, type ContinuityImprovementLoop as ab, type ContinuityLoopReviewInput as ac, type ContinuityLoopUpsertInput as ad, type ImportanceScore as ae, type MemoryIntent as af, type MemoryActionEligibilityContext as ag, type MemoryActionPolicyResult as ah, type MemoryLifecycleEventType as ai, type MemoryLifecycleStateSummary as aj, type ModelProviderConfig as ak, type NativeKnowledgeConfig as al, type ProvenanceConfig as am, type RetrievalTier as an, type SignalScanResult as ao, type TopicScore as ap, type MemoryLink as aq, type BufferState as ar, type MetaState as as, type FileHygieneConfig as at, type EntityRelationship as au, type EntityActivityEntry as av, type AccessTrackingEntry as aw, type MemorySummary as ax, type EntityTimelineEntry as ay, type QmdSearchExplain as az, type RecallPlanMode as b, type ModelProviderAuthMode as b$, type ExtractedFact as b0, type MemoryActionEligibilitySource as b1, type MemoryObservation as b2, type MemoryScope as b3, RECALL_DISCLOSURE_LEVELS as b4, type WearableAuthCheck as b5, type WearableFetchOptions as b6, type WearableFetchPage as b7, type WearableNativeMemoryPage as b8, type WearableTranscriptSegment as b9, type DreamingNarrativePromptStyle as bA, type DreamsDeepSleepConfig as bB, type DreamsLightSleepConfig as bC, type DreamsPhaseStatus as bD, type DreamsPhasesConfig as bE, type DreamsRemConfig as bF, type EngramTraceEvent as bG, type ExtractedProcedureStep as bH, type ExtractedQuestion as bI, type ExtractedReasoningTrace as bJ, type ExtractedReasoningTraceStep as bK, type ExtractedRelationship as bL, type ExtractionPassSource as bM, type GitHubLiveConnectorConfig as bN, type GmailLiveConnectorConfig as bO, type GoogleDriveLiveConnectorConfig as bP, type HeartbeatConfig as bQ, type HeartbeatDetectionMode as bR, type LlmTraceCallback as bS, type LlmTraceEvent as bT, type MemoryActionOutcome as bU, type MemoryActionPolicyDecision as bV, type MemoryActionStatus as bW, type MemoryLinkType as bX, type MemoryOsPresetName as bY, type ModelApi as bZ, type ModelDefinitionConfig as b_, isRecallDisclosure as ba, type AgentAccessHttpConfig as bb, type AgentDefaultsConfig as bc, type AgentPersona as bd, type BehaviorLoopAdjustment as be, type BehaviorSignalDirection as bf, type BehaviorSignalType as bg, type BriefingCalendarSourceError as bh, type BufferEntryState as bi, type CaptureMode as bj, type ChatConfig as bk, type CodexCliReasoningEffort as bl, type CodexCompactionFlushMode as bm, type CodexConnectorConfig as bn, type CompressionGuidelineActivationState as bo, type CompressionGuidelineOptimizerSourceWindow as bp, type ConfidenceTier as bq, type ConsolidationAction as br, type ConsolidationItem as bs, type ContinuityIncidentState as bt, type ContinuityLoopCadence as bu, type ContinuityLoopStatus as bv, type ContradictionScanConfig as bw, type CronConversationRecallMode as bx, type CronRecallMode as by, type DreamingConfig as bz, type ActiveRecallQueryMode as c, type NamespacePolicy as c0, type NativeKnowledgeFolderRuleConfig as c1, type NativeKnowledgeObsidianVaultConfig as c2, type NativeKnowledgeOpenClawWorkspaceConfig as c3, type NotionLiveConnectorConfig as c4, type PrincipalFromSessionKeyMode as c5, type PrincipalRule as c6, type ProceduralConfig as c7, type QuestionEntry as c8, type ReasoningEffort as c9, type RecallPipelineConfig as ca, type RecallTraceEvent as cb, type RelevanceFeedback as cc, SPECULATIVE_TTL_DAYS as cd, type ScopeProfileAutoPromoteConfig as ce, type ScopeProfileTeamProjectConfig as cf, type ScopeTeamConfig as cg, type ScoredEntity as ch, type SemanticChunkingConfigShape as ci, type SignalLevel as cj, type SlotBehaviorConfig as ck, type SlotMismatchMode as cl, type TriggerMode as cm, confidenceTier as cn, type ActiveRecallPromptStyle as d, type ActiveRecallThinking as e, type ActiveRecallModelFallbackPolicy as f, type BehaviorLoopPolicyState as g, type BriefingSections as h, type BriefingFollowup as i, type BriefingFocus as j, type CalendarEvent as k, type BriefingActiveThread as l, type BriefingResult as m, type BriefingRecentEntity as n, type BufferTurn as o, type MemoryFrontmatter as p, type Checkpoint as q, type AgentPersonaModelConfig as r, type RecallTierExplain as s, type MemoryCategory as t, type MemoryStatus as u, type MemoryProjectionCurrentState as v, type MemoryLifecycleEvent as w, type ExtractionResult as x, type ConsolidationResult as y, type DaySummaryResult as z };

package/dist/types.d.ts

@@ -1,3 +1,3 @@
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
-export { aw as AccessTrackingEntry, A as ActiveRecallChatType, f as ActiveRecallModelFallbackPolicy, d as ActiveRecallPromptStyle, c as ActiveRecallQueryMode, e as ActiveRecallThinking, Z as AgentAccessAuthToken, bb as AgentAccessHttpConfig, bc as AgentDefaultsConfig, bd as AgentPersona, s as AgentPersonaModelConfig, be as BehaviorLoopAdjustment, g as BehaviorLoopPolicyState, bf as BehaviorSignalDirection, B as BehaviorSignalEvent, bg as BehaviorSignalType, aQ as BootstrapOptions, aR as BootstrapResult, m as BriefingActiveThread, bh as BriefingCalendarSourceError, aX as BriefingConfig, k as BriefingFocus, j as BriefingFollowup, aY as BriefingOpenCommitment, o as BriefingRecentEntity, n as BriefingResult, i as BriefingSections, aZ as BriefingWindow, bi as BufferEntryState, ar as BufferState, X as BufferSurpriseEvent, p as BufferTurn, l as CalendarEvent, C as CalendarSource, bj as CaptureMode, bk as ChatConfig, r as Checkpoint, bl as CodexCliReasoningEffort, bm as CodexCompactionFlushMode, a_ as CodexCompatConfig, bn as CodexConnectorConfig, aA as CodingContext, aU as CodingKnowledgeConfig, aT as CodingModeConfig, bo as CompressionGuidelineActivationState, $ as CompressionGuidelineOptimizerActionSummary, _ as CompressionGuidelineOptimizerEventCounts, a0 as CompressionGuidelineOptimizerRuleUpdate, bp as CompressionGuidelineOptimizerSourceWindow, a3 as CompressionGuidelineOptimizerState, bq as ConfidenceTier, br as ConsolidationAction, bs as ConsolidationItem, aS as ConsolidationObservation, y as ConsolidationResult, ab as ContinuityImprovementLoop, a9 as ContinuityIncidentCloseInput, aa as ContinuityIncidentOpenInput, a8 as ContinuityIncidentRecord, bt as ContinuityIncidentState, bu as ContinuityLoopCadence, ac as ContinuityLoopReviewInput, bv as ContinuityLoopStatus, ad as ContinuityLoopUpsertInput, bw as ContradictionScanConfig, N as ConversationThread, bx as CronConversationRecallMode, by as CronRecallMode, a$ as DEFAULT_RECALL_DISCLOSURE, z as DaySummaryResult, bz as DreamingConfig, bA as DreamingNarrativePromptStyle, bB as DreamsDeepSleepConfig, bC as DreamsLightSleepConfig, D as DreamsPhase, bD as DreamsPhaseStatus, bE as DreamsPhasesConfig, bF as DreamsRemConfig, a as DreamsRunResult, aB as DreamsStatusResult, bG as EngramTraceEvent, av as EntityActivityEntry, E as EntityFile, a4 as EntityMention, au as EntityRelationship, a5 as EntitySchemaDefinition, a6 as EntitySchemaSectionDefinition, a7 as EntityStructuredSection, ay as EntityTimelineEntry, b0 as ExtractedFact, bH as ExtractedProcedureStep, bI as ExtractedQuestion, bJ as ExtractedReasoningTrace, bK as ExtractedReasoningTraceStep, bL as ExtractedRelationship, bM as ExtractionPassSource, x as ExtractionResult, F as FaithfulnessFrontmatter, at as FileHygieneConfig, G as GatewayConfig, bN as GitHubLiveConnectorConfig, bO as GmailLiveConnectorConfig, bP as GoogleDriveLiveConnectorConfig, bQ as HeartbeatConfig, bR as HeartbeatDetectionMode, H as HourlySummary, I as IdentityInjectionMode, W as ImportanceLevel, ae as ImportanceScore, O as LifecycleState, L as LiveConnectorsConfig, bS as LlmTraceCallback, bT as LlmTraceEvent, ag as MemoryActionEligibilityContext, b1 as MemoryActionEligibilitySource, a2 as MemoryActionEvent, bU as MemoryActionOutcome, bV as MemoryActionPolicyDecision, ah as MemoryActionPolicyResult, bW as MemoryActionStatus, a1 as MemoryActionType, h as MemoryCategory, M as MemoryFile, q as MemoryFrontmatter, af as MemoryIntent, w as MemoryLifecycleEvent, ai as MemoryLifecycleEventType, aj as MemoryLifecycleStateSummary, aq as MemoryLink, bX as MemoryLinkType, b2 as MemoryObservation, bY as MemoryOsPresetName, v as MemoryProjectionCurrentState, b3 as MemoryScope, u as MemoryStatus, ax as MemorySummary, as as MetaState, bZ as ModelApi, b_ as ModelDefinitionConfig, b$ as ModelProviderAuthMode, ak as ModelProviderConfig, c0 as NamespacePolicy, al as NativeKnowledgeConfig, c1 as NativeKnowledgeFolderRuleConfig, c2 as NativeKnowledgeObsidianVaultConfig, c3 as NativeKnowledgeOpenClawWorkspaceConfig, c4 as NotionLiveConnectorConfig, P as PluginConfig, U as PolicyClass, c5 as PrincipalFromSessionKeyMode, c6 as PrincipalRule, c7 as ProceduralConfig, am as ProvenanceConfig, J as ProvenanceSource, az as QmdSearchExplain, Q as QmdSearchResult, c8 as QuestionEntry, b4 as RECALL_DISCLOSURE_LEVELS, c9 as ReasoningEffort, R as RecallDisclosure, ca as RecallPipelineConfig, b as RecallPlanMode, aP as RecallSectionConfig, t as RecallTierExplain, cb as RecallTraceEvent, cc as RelevanceFeedback, an as RetrievalTier, cd as SPECULATIVE_TTL_DAYS, ce as ScopeProfileAutoPromoteConfig, aC as ScopeProfileConfig, aD as ScopeProfileLayerId, aE as ScopeProfilePromotionTarget, cf as ScopeProfileTeamProjectConfig, cg as ScopeTeamConfig, ch as ScoredEntity, Y as SecretRef, ci as SemanticChunkingConfigShape, S as SessionObserverBandConfig, cj as SignalLevel, ao as SignalScanResult, ck as SlotBehaviorConfig, cl as SlotMismatchMode, ap as TopicScore, T as TranscriptEntry, cm as TriggerMode, K as TrustWeights, V as VerificationState, cn as confidenceTier, ba as isRecallDisclosure } from './types-ljkd82rn.js';
+export { aw as AccessTrackingEntry, A as ActiveRecallChatType, f as ActiveRecallModelFallbackPolicy, d as ActiveRecallPromptStyle, c as ActiveRecallQueryMode, e as ActiveRecallThinking, Z as AgentAccessAuthToken, bb as AgentAccessHttpConfig, bc as AgentDefaultsConfig, bd as AgentPersona, r as AgentPersonaModelConfig, be as BehaviorLoopAdjustment, g as BehaviorLoopPolicyState, bf as BehaviorSignalDirection, B as BehaviorSignalEvent, bg as BehaviorSignalType, aQ as BootstrapOptions, aR as BootstrapResult, l as BriefingActiveThread, bh as BriefingCalendarSourceError, aX as BriefingConfig, j as BriefingFocus, i as BriefingFollowup, aY as BriefingOpenCommitment, n as BriefingRecentEntity, m as BriefingResult, h as BriefingSections, aZ as BriefingWindow, bi as BufferEntryState, ar as BufferState, X as BufferSurpriseEvent, o as BufferTurn, k as CalendarEvent, C as CalendarSource, bj as CaptureMode, bk as ChatConfig, q as Checkpoint, bl as CodexCliReasoningEffort, bm as CodexCompactionFlushMode, a_ as CodexCompatConfig, bn as CodexConnectorConfig, aA as CodingContext, aU as CodingKnowledgeConfig, aT as CodingModeConfig, bo as CompressionGuidelineActivationState, $ as CompressionGuidelineOptimizerActionSummary, _ as CompressionGuidelineOptimizerEventCounts, a0 as CompressionGuidelineOptimizerRuleUpdate, bp as CompressionGuidelineOptimizerSourceWindow, a3 as CompressionGuidelineOptimizerState, bq as ConfidenceTier, br as ConsolidationAction, bs as ConsolidationItem, aS as ConsolidationObservation, y as ConsolidationResult, ab as ContinuityImprovementLoop, a9 as ContinuityIncidentCloseInput, aa as ContinuityIncidentOpenInput, a8 as ContinuityIncidentRecord, bt as ContinuityIncidentState, bu as ContinuityLoopCadence, ac as ContinuityLoopReviewInput, bv as ContinuityLoopStatus, ad as ContinuityLoopUpsertInput, bw as ContradictionScanConfig, N as ConversationThread, bx as CronConversationRecallMode, by as CronRecallMode, a$ as DEFAULT_RECALL_DISCLOSURE, z as DaySummaryResult, bz as DreamingConfig, bA as DreamingNarrativePromptStyle, bB as DreamsDeepSleepConfig, bC as DreamsLightSleepConfig, D as DreamsPhase, bD as DreamsPhaseStatus, bE as DreamsPhasesConfig, bF as DreamsRemConfig, a as DreamsRunResult, aB as DreamsStatusResult, bG as EngramTraceEvent, av as EntityActivityEntry, E as EntityFile, a4 as EntityMention, au as EntityRelationship, a5 as EntitySchemaDefinition, a6 as EntitySchemaSectionDefinition, a7 as EntityStructuredSection, ay as EntityTimelineEntry, b0 as ExtractedFact, bH as ExtractedProcedureStep, bI as ExtractedQuestion, bJ as ExtractedReasoningTrace, bK as ExtractedReasoningTraceStep, bL as ExtractedRelationship, bM as ExtractionPassSource, x as ExtractionResult, F as FaithfulnessFrontmatter, at as FileHygieneConfig, G as GatewayConfig, bN as GitHubLiveConnectorConfig, bO as GmailLiveConnectorConfig, bP as GoogleDriveLiveConnectorConfig, bQ as HeartbeatConfig, bR as HeartbeatDetectionMode, H as HourlySummary, I as IdentityInjectionMode, W as ImportanceLevel, ae as ImportanceScore, O as LifecycleState, L as LiveConnectorsConfig, bS as LlmTraceCallback, bT as LlmTraceEvent, ag as MemoryActionEligibilityContext, b1 as MemoryActionEligibilitySource, a2 as MemoryActionEvent, bU as MemoryActionOutcome, bV as MemoryActionPolicyDecision, ah as MemoryActionPolicyResult, bW as MemoryActionStatus, a1 as MemoryActionType, t as MemoryCategory, M as MemoryFile, p as MemoryFrontmatter, af as MemoryIntent, w as MemoryLifecycleEvent, ai as MemoryLifecycleEventType, aj as MemoryLifecycleStateSummary, aq as MemoryLink, bX as MemoryLinkType, b2 as MemoryObservation, bY as MemoryOsPresetName, v as MemoryProjectionCurrentState, b3 as MemoryScope, u as MemoryStatus, ax as MemorySummary, as as MetaState, bZ as ModelApi, b_ as ModelDefinitionConfig, b$ as ModelProviderAuthMode, ak as ModelProviderConfig, c0 as NamespacePolicy, al as NativeKnowledgeConfig, c1 as NativeKnowledgeFolderRuleConfig, c2 as NativeKnowledgeObsidianVaultConfig, c3 as NativeKnowledgeOpenClawWorkspaceConfig, c4 as NotionLiveConnectorConfig, P as PluginConfig, U as PolicyClass, c5 as PrincipalFromSessionKeyMode, c6 as PrincipalRule, c7 as ProceduralConfig, am as ProvenanceConfig, J as ProvenanceSource, az as QmdSearchExplain, Q as QmdSearchResult, c8 as QuestionEntry, b4 as RECALL_DISCLOSURE_LEVELS, c9 as ReasoningEffort, R as RecallDisclosure, ca as RecallPipelineConfig, b as RecallPlanMode, aP as RecallSectionConfig, s as RecallTierExplain, cb as RecallTraceEvent, cc as RelevanceFeedback, an as RetrievalTier, cd as SPECULATIVE_TTL_DAYS, ce as ScopeProfileAutoPromoteConfig, aC as ScopeProfileConfig, aD as ScopeProfileLayerId, aE as ScopeProfilePromotionTarget, cf as ScopeProfileTeamProjectConfig, cg as ScopeTeamConfig, ch as ScoredEntity, Y as SecretRef, ci as SemanticChunkingConfigShape, S as SessionObserverBandConfig, cj as SignalLevel, ao as SignalScanResult, ck as SlotBehaviorConfig, cl as SlotMismatchMode, ap as TopicScore, T as TranscriptEntry, cm as TriggerMode, K as TrustWeights, V as VerificationState, cn as confidenceTier, ba as isRecallDisclosure } from './types-C7HUgOuA.js';

package/dist/utility-runtime.d.ts

@@ -1,5 +1,5 @@
 import { TierRoutingPolicy } from './tier-routing.js';
-import './types-ljkd82rn.js';
+import './types-C7HUgOuA.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
 import './lifecycle.js';

package/dist/verified-recall.js

@@ -1,26 +1,27 @@
 import {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
-} from "./chunk-66FLU5BT.js";
+} from "./chunk-II6WHCCW.js";
 import "./chunk-2A3OXAP2.js";
-import "./chunk-M7GGMGMZ.js";
+import "./chunk-ZBJMUXZH.js";
+import "./chunk-UDCDGP6A.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-L2B3EE7B.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
 import "./chunk-EHK6KZHK.js";
 import "./chunk-6CIAGZ6X.js";
-import "./chunk-SVOZFLIQ.js";
-import "./chunk-LTJAMRGI.js";
 import "./chunk-J6A3CX5N.js";
 import "./chunk-4KJLYTLS.js";
+import "./chunk-SVOZFLIQ.js";
+import "./chunk-LTJAMRGI.js";
 import "./chunk-JS2HKKOK.js";
+import "./chunk-RHOZ5LLO.js";
+import "./chunk-RL6NEVXT.js";
 import "./chunk-AWJ2FHCF.js";
 import "./chunk-42JKGUFJ.js";
 import "./chunk-RULE4VG5.js";
 import "./chunk-SCU65EZI.js";
-import "./chunk-RHOZ5LLO.js";
-import "./chunk-RL6NEVXT.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-MNUHL34L.js";
@@ -36,8 +37,8 @@ import "./chunk-RGMVMVMF.js";
 import "./chunk-N7RWREIQ.js";
 import "./chunk-OEHCMALU.js";
 import "./chunk-PHK3HARR.js";
-import "./chunk-5GKPFL3S.js";
 import "./chunk-4DJQYKMN.js";
+import "./chunk-5GKPFL3S.js";
 import "./chunk-EYIEWJNI.js";
 import "./chunk-JUC24CTX.js";
 import "./chunk-37CTGERM.js";
@@ -47,7 +48,6 @@ import "./chunk-P7FMDTKL.js";
 import "./chunk-VS2IYZRU.js";
 import "./chunk-6MKAMLQL.js";
 import "./chunk-JAKIDQB2.js";
-import "./chunk-ZBJMUXZH.js";
 import "./chunk-PZ5AY32C.js";
 export {
   compareVerifiedEpisodeResults,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.4.2",
+  "version": "9.5.0",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -3000,7 +3000,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.4.2"
+    "@remnic/coding-graph": "^9.5.0"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/access-boundary.test.ts

@@ -22,6 +22,9 @@ import {
   type OperationContext,
 } from "./access-boundary.js";
 import { EngramAccessInputError, type EngramAccessService } from "./access-service.js";
+import { EngramAccessForbiddenError } from "./access-errors.js";
+import { tokenCapabilityStore } from "./access-token-capabilities.js";
+import { z } from "zod";
 
 // ---------------------------------------------------------------------------
 // Test fixtures
@@ -210,3 +213,62 @@ test("getOperation / listRegisteredOperations: round-trip a registration", async
   assert.ok(getOperation("memory_search"));
   assert.ok(listRegisteredOperations().includes("memory_search"));
 });
+
+// ---------------------------------------------------------------------------
+// fleetWide flag — fail-closed for namespace-scoped tokens (issue #1850 round 10)
+// Maintenance ops that run ACROSS ALL namespaces carry no `namespace` arg, so
+// the MCP tools/call effective-namespace gate never fires. The fleetWide flag
+// makes defineOperation's run wrapper reject a namespace-scoped token BEFORE
+// the handler — no side effect on denial; unrestricted/legacy unaffected.
+// ---------------------------------------------------------------------------
+
+test("fleetWide op: namespace-scoped token is rejected BEFORE the handler runs (no side effect)", async () => {
+  let ran = false;
+  __resetRegistryForTest();
+  const op = defineOperation({
+    name: "memory_get",
+    description: "test fleet-wide op",
+    fleetWide: true,
+    schema: z.object({}),
+    handler: async () => { ran = true; return { ok: true }; },
+  });
+  await assert.rejects(
+    () => tokenCapabilityStore.run({ version: 1, namespaces: ["ns_a"] }, () => op.run({}, ctx(makeMockService()))),
+    (err: unknown) => err instanceof EngramAccessForbiddenError && /across all namespaces/.test(err.message),
+  );
+  assert.equal(ran, false, "fleet-wide handler must NOT run for a namespace-scoped token (no side effect)");
+});
+
+test("fleetWide op: unrestricted and legacy tokens reach the handler", async () => {
+  let ran = false;
+  __resetRegistryForTest();
+  const op = defineOperation({
+    name: "memory_get",
+    description: "test fleet-wide op",
+    fleetWide: true,
+    schema: z.object({}),
+    handler: async () => { ran = true; return { ok: true }; },
+  });
+  // Explicit-unrestricted record (version present, no namespaces axis).
+  const result = await tokenCapabilityStore.run({ version: 1 }, () => op.run({}, ctx(makeMockService())));
+  assert.deepEqual(result, { ok: true });
+  assert.equal(ran, true, "unrestricted token reaches the handler");
+  // Legacy (no ALS bound at all — cron / internal callers).
+  ran = false;
+  assert.deepEqual(await op.run({}, ctx(makeMockService())), { ok: true });
+  assert.equal(ran, true, "legacy token reaches the handler");
+});
+
+test("fleetWide flag is inert for normal (non-fleet-wide) ops under a scoped token", async () => {
+  let ran = false;
+  __resetRegistryForTest();
+  const op = defineOperation({
+    name: "memory_get",
+    description: "normal op (not fleet-wide)",
+    schema: z.object({}),
+    handler: async () => { ran = true; return { ok: true }; },
+  });
+  const result = await tokenCapabilityStore.run({ version: 1, namespaces: ["ns_a"] }, () => op.run({}, ctx(makeMockService())));
+  assert.deepEqual(result, { ok: true });
+  assert.equal(ran, true, "a non-fleet-wide op runs normally for a scoped token");
+});

package/src/access-boundary.ts

@@ -17,6 +17,7 @@
 
 import { z } from "zod";
 import { EngramAccessInputError, type EngramAccessService } from "./access-service.js";
+import { assertFleetWideOperationAllowed, assertOperationAllowed, tokenCapabilityStore } from "./access-token-capabilities.js";
 import { expandTildePath } from "./utils/path.js";
 
 // ---------------------------------------------------------------------------
@@ -30,138 +31,150 @@ import { expandTildePath } from "./utils/path.js";
  * lands; the fitness test in `access-surface-catalog.test.ts` treats the
  * registered set as the migration state.
  */
-export type OperationName =
-  | "memory_get"
-  | "memory_search"
-  | "memory_store"
-  | "coding_decision"
-  | "coding_architecture"
+export const OPERATION_NAMES = [
+  "memory_get",
+  "memory_search",
+  "memory_store",
+  "coding_decision",
+  "coding_architecture",
   // codegraph parity tools (issue #1554) -- each maps to one codegraph_*
   // boundary operation that delegates to the surface handler in
   // coding/codegraph-surfaces.ts. Names match the external tool suffixes.
-  | "codegraph_index"
-  | "codegraph_list_projects"
-  | "codegraph_delete_project"
-  | "codegraph_index_status"
-  | "codegraph_search_graph"
-  | "codegraph_trace_path"
-  | "codegraph_detect_changes"
-  | "codegraph_query_graph"
-  | "codegraph_get_schema"
-  | "codegraph_get_snippet"
-  | "codegraph_get_architecture"
-  | "codegraph_search_code"
-  | "codegraph_manage_adr"
-  | "codegraph_ingest_traces"
-  | "memory_correct_plan"
-  | "memory_correct_apply"
-  | "coding_delta"
+  "codegraph_index",
+  "codegraph_list_projects",
+  "codegraph_delete_project",
+  "codegraph_index_status",
+  "codegraph_search_graph",
+  "codegraph_trace_path",
+  "codegraph_detect_changes",
+  "codegraph_query_graph",
+  "codegraph_get_schema",
+  "codegraph_get_snippet",
+  "codegraph_get_architecture",
+  "codegraph_search_code",
+  "codegraph_manage_adr",
+  "codegraph_ingest_traces",
+  "memory_correct_plan",
+  "memory_correct_apply",
+  "coding_delta",
   // Remaining MCP/HTTP handlers migrated through the boundary (issue #1525).
-  | "recall"
-  | "recall_explain"
-  | "set_coding_context"
-  | "recall_tier_explain"
-  | "recall_xray"
-  | "wearables_status"
-  | "wearables_sync"
-  | "transcript_day"
-  | "transcript_search"
-  | "transcript_memories"
-  | "action_confidence"
-  | "chatgpt_memory_inspector"
-  | "day_summary"
-  | "capsule_export"
-  | "capsule_import"
-  | "capsule_list"
-  | "memory_governance_run"
-  | "procedure_mining_run"
-  | "pattern_reinforcement_run"
-  | "procedural_stats"
-  | "memory_timeline"
-  | "suggestion_submit"
-  | "entity_get"
-  | "review_queue_list"
-  | "correction_pending"
-  | "observe"
-  | "lcm_search"
-  | "lcm_compaction_flush"
-  | "lcm_compaction_record"
-  | "continuity_audit_generate"
-  | "continuity_incident_open"
-  | "continuity_incident_close"
-  | "continuity_incident_list"
-  | "continuity_loop_add_or_update"
-  | "continuity_loop_review"
-  | "identity_anchor_get"
-  | "identity_anchor_update"
-  | "memory_identity"
-  | "work_task"
-  | "work_project"
-  | "work_board"
-  | "shared_context_write_output"
-  | "shared_feedback_record"
-  | "shared_priorities_append"
-  | "shared_context_cross_signals_run"
-  | "shared_context_curate_daily"
-  | "compounding_weekly_synthesize"
-  | "compounding_promote_candidate"
-  | "compression_guidelines_optimize"
-  | "compression_guidelines_activate"
-  | "memory_profile"
-  | "memory_entities_list"
-  | "memory_questions"
-  | "memory_last_recall"
-  | "memory_intent_debug"
-  | "memory_qmd_debug"
-  | "memory_graph_explain"
-  | "graph_snapshot"
-  | "memory_feedback"
-  | "memory_promote"
-  | "memory_outcome"
-  | "memory_action_apply"
-  | "context_checkpoint"
-  | "briefing"
-  | "review_list"
-  | "review_resolve"
-  | "contradiction_scan_run"
-  | "memory_summarize_hourly"
-  | "conversation_index_update"
-  | "profiling_report"
-  | "graph_edge_decay_run"
-  | "live_connectors_run"
-  | "peer_list"
-  | "peer_get"
-  | "peer_set"
-  | "peer_delete"
-  | "peer_profile_get"
-  | "peer_forget"
-  | "console_state"
-  | "dreams_status"
-  | "dreams_run"
+  "recall",
+  "recall_explain",
+  "set_coding_context",
+  "recall_tier_explain",
+  "recall_xray",
+  "wearables_status",
+  "wearables_sync",
+  "transcript_day",
+  "transcript_search",
+  "transcript_memories",
+  "action_confidence",
+  "chatgpt_memory_inspector",
+  "day_summary",
+  "capsule_export",
+  "capsule_import",
+  "capsule_list",
+  "memory_governance_run",
+  "procedure_mining_run",
+  "pattern_reinforcement_run",
+  "procedural_stats",
+  "memory_timeline",
+  "suggestion_submit",
+  "entity_get",
+  "review_queue_list",
+  "correction_pending",
+  "observe",
+  "lcm_search",
+  "lcm_compaction_flush",
+  "lcm_compaction_record",
+  "continuity_audit_generate",
+  "continuity_incident_open",
+  "continuity_incident_close",
+  "continuity_incident_list",
+  "continuity_loop_add_or_update",
+  "continuity_loop_review",
+  "identity_anchor_get",
+  "identity_anchor_update",
+  "memory_identity",
+  "work_task",
+  "work_project",
+  "work_board",
+  "shared_context_write_output",
+  "shared_feedback_record",
+  "shared_priorities_append",
+  "shared_context_cross_signals_run",
+  "shared_context_curate_daily",
+  "compounding_weekly_synthesize",
+  "compounding_promote_candidate",
+  "compression_guidelines_optimize",
+  "compression_guidelines_activate",
+  "memory_profile",
+  "memory_entities_list",
+  "memory_questions",
+  "memory_last_recall",
+  "memory_intent_debug",
+  "memory_qmd_debug",
+  "memory_graph_explain",
+  "graph_snapshot",
+  "memory_feedback",
+  "memory_promote",
+  "memory_outcome",
+  "memory_action_apply",
+  "context_checkpoint",
+  "briefing",
+  "review_list",
+  "review_resolve",
+  "contradiction_scan_run",
+  "memory_summarize_hourly",
+  "conversation_index_update",
+  "profiling_report",
+  "graph_edge_decay_run",
+  "live_connectors_run",
+  "peer_list",
+  "peer_get",
+  "peer_set",
+  "peer_delete",
+  "peer_profile_get",
+  "peer_forget",
+  "console_state",
+  "dreams_status",
+  "dreams_run",
   // HTTP-only routes (no direct MCP tool equivalent).
-  | "offline_sync_snapshot"
-  | "offline_sync_snapshot_stream"
-  | "offline_sync_files"
-  | "offline_sync_file_content"
-  | "offline_sync_apply_file_content"
-  | "offline_sync_apply"
-  | "lcm_status"
-  | "memory_list"
-  | "recall_timings"
-  | "entity_list"
-  | "maintenance_status"
-  | "quality_status"
-  | "trust_zones_status"
-  | "trust_zones_records"
-  | "review_disposition"
-  | "trust_zones_promote"
-  | "trust_zones_demo_seed"
-  | "citations_observed"
-  | "contradiction_detail"
-  | "graph_events"
+  "adapters_status",
+  "offline_sync_snapshot",
+  "offline_sync_snapshot_stream",
+  "offline_sync_files",
+  "offline_sync_file_content",
+  "offline_sync_apply_file_content",
+  "offline_sync_apply",
+  "lcm_status",
+  "memory_list",
+  "recall_timings",
+  "entity_list",
+  "maintenance_status",
+  "quality_status",
+  "trust_zones_status",
+  "trust_zones_records",
+  "review_disposition",
+  "trust_zones_promote",
+  "trust_zones_demo_seed",
+  "citations_observed",
+  "contradiction_detail",
+  "graph_events",
   // Chat surface — conversational memory inspection/correction (issue #1583).
-  | "chat_message"
-  | "chat_events";
+  "chat_message",
+  "chat_events",
+] as const;
+
+/**
+ * Canonical operation ids. One id is shared by the MCP tool, the HTTP route,
+ * and the CLI command that expose the same operation. Derived from
+ * {@link OPERATION_NAMES} (single source of truth) so the runtime catalog
+ * used for token-capability validation cannot drift from the type. The
+ * fitness test in `access-surface-catalog.test.ts` treats the registered set
+ * as the migration state.
+ */
+export type OperationName = (typeof OPERATION_NAMES)[number];
 
 // ---------------------------------------------------------------------------
 // Operation context — what every handler receives
@@ -206,6 +219,16 @@ export interface OperationSpec<In, Out> {
   readonly schema: z.ZodType<In>;
   /** Handler invoked with the parsed input; throws EngramAccessInputError for domain faults. */
   readonly handler: (input: In, ctx: OperationContext) => Promise<Out>;
+  /**
+   * Marks an operation as inherently FLEET-WIDE / global — it runs across ALL
+   * namespaces (or against a single non-namespaced global layer) and carries no
+   * `namespace` argument, so the MCP `tools/call` effective-namespace chokepoint
+   * never applies. When set, {@link defineOperation}'s run wrapper rejects any
+   * namespace-SCOPED token (fail closed) via assertFleetWideOperationAllowed
+   * BEFORE the handler — no side effect on denial. Unrestricted/legacy tokens
+   * (cron, internal callers, no capability record) are unaffected (issue #1850).
+   */
+  readonly fleetWide?: boolean;
 }
 
 export interface BoundOperation<In = unknown, Out = unknown> {
@@ -372,6 +395,22 @@ export function defineOperation<In, Out>(spec: OperationSpec<In, Out>): BoundOpe
       if (!parseResult.success) {
         throw new EngramAccessInputError(formatZodIssues(parseResult.error));
       }
+      // Per-token capability enforcement (issue #1837): when the presenting
+      // token carries an ops allow-list, reject operations not in it. The
+      // capability record is carried via AsyncLocalStorage, set once per
+      // authorized HTTP/MCP request; absent (CLI/tests/direct callers) ⇒
+      // unrestricted. Default-deny ONLY when an ops axis is present — legacy
+      // tokens (absent record) and explicit-unrestricted new tokens are
+      // unaffected.
+      assertOperationAllowed(tokenCapabilityStore.getStore(), spec.name);
+      // Fleet-wide / global maintenance ops (issue #1850 round 10): these run
+      // across all namespaces with no `namespace` arg, so the tools/call
+      // effective-namespace gate never fires. A namespace-SCOPED token must not
+      // trigger cross-namespace maintenance — fail closed BEFORE the handler so
+      // a denial never leaks a partial mutation. No-op for unrestricted/legacy.
+      if (spec.fleetWide) {
+        assertFleetWideOperationAllowed(tokenCapabilityStore.getStore());
+      }
       return spec.handler(parseResult.data, ctx);
     },
   };