@remnic/core 9.4.2 → 9.6.0

package/dist/{chunk-DR6PEJU3.js → chunk-PCLIWBGD.js}

@@ -1,3 +1,6 @@
+import {
+  MCP_READ_ONLY_TOOL_SUFFIXES
+} from "./chunk-IC2TCZJ2.js";
 import {
   buildCitationGuidance
 } from "./chunk-D24OXEPB.js";
@@ -6,7 +9,7 @@ import {
 } from "./chunk-5RUE3GHQ.js";
 import {
   validateRequest
-} from "./chunk-2MR3MFQB.js";
+} from "./chunk-UPSAT4PY.js";
 import {
   REMNIC_CHATGPT_MEMORY_INSPECTOR_MIME_TYPE,
   REMNIC_CHATGPT_MEMORY_INSPECTOR_TOOL,
@@ -15,10 +18,16 @@ import {
 } from "./chunk-T4WDJPEZ.js";
 import {
   getOperation
-} from "./chunk-FZGGZAAU.js";
+} from "./chunk-4GNEDXDI.js";
+import {
+  assertOperationAllowed,
+  capabilityAllowsOp,
+  enforceNamespaceAllowList,
+  tokenCapabilityStore
+} from "./chunk-D7FOKIY5.js";
 import {
   EngramAccessInputError
-} from "./chunk-X4A62ET7.js";
+} from "./chunk-H2DXDQCQ.js";
 import {
   readEnvVar
 } from "./chunk-JUC24CTX.js";
@@ -923,6 +932,11 @@ async function loadChatSession(memoryDir, chatSessionId) {
     createdAt
   };
 }
+async function enforceChatSessionNamespace(service, chatSessionId) {
+  const session = await loadChatSession(service.memoryDir, chatSessionId);
+  if (!session) return;
+  enforceNamespaceAllowList(tokenCapabilityStore.getStore(), session.namespace, service.configRef?.defaultNamespace);
+}
 async function appendTranscriptEntry(memoryDir, chatSessionId, entry) {
   const filePath = chatSessionFile(memoryDir, chatSessionId);
   const full = {
@@ -1122,54 +1136,6 @@ async function processChatMessage(opts) {
 }
 
 // src/access-mcp.ts
-var MCP_READ_ONLY_TOOL_SUFFIXES = {
-  recall: true,
-  recall_explain: true,
-  recall_tier_explain: true,
-  recall_xray: true,
-  briefing: true,
-  wearables_status: true,
-  transcript_day: true,
-  transcript_search: true,
-  transcript_memories: true,
-  action_confidence: true,
-  capsule_list: true,
-  procedural_stats: true,
-  memory_get: true,
-  memory_timeline: true,
-  entity_get: true,
-  review_queue_list: true,
-  lcm_search: true,
-  continuity_incident_list: true,
-  identity_anchor_get: true,
-  memory_identity: true,
-  memory_search: true,
-  memory_profile: true,
-  memory_entities_list: true,
-  memory_questions: true,
-  memory_last_recall: true,
-  memory_intent_debug: true,
-  memory_qmd_debug: true,
-  memory_graph_explain: true,
-  graph_snapshot: true,
-  review_list: true,
-  profiling_report: true,
-  peer_list: true,
-  peer_get: true,
-  peer_profile_get: true,
-  console_state: true,
-  dreams_status: true,
-  codegraph_list_projects: true,
-  codegraph_index_status: true,
-  codegraph_search_graph: true,
-  codegraph_trace_path: true,
-  codegraph_detect_changes: true,
-  codegraph_query_graph: true,
-  codegraph_get_schema: true,
-  codegraph_get_snippet: true,
-  codegraph_get_architecture: true,
-  codegraph_search_code: true
-};
 var MCP_SUPPORTED_PROTOCOL_VERSIONS = ["2025-06-18", "2025-03-26", "2024-11-05"];
 var MCP_DEFAULT_PROTOCOL_VERSION = MCP_SUPPORTED_PROTOCOL_VERSIONS[0] ?? "2025-06-18";
 var LEGACY_MCP_PREFIX = "engram.";
@@ -3427,13 +3393,9 @@ var EngramMcpServer = class {
       };
     }
     if (method === "tools/list") {
-      return {
-        jsonrpc: "2.0",
-        id,
-        result: {
-          tools: this.tools
-        }
-      };
+      const caps = tokenCapabilityStore.getStore();
+      const tools = caps?.ops === void 0 ? this.tools : this.tools.filter((t) => capabilityAllowsOp(caps, MCP_MIGRATED_OPERATIONS[toLegacyToolName(t.name)] ?? ""));
+      return { jsonrpc: "2.0", id, result: { tools } };
     }
     if (method === "resources/list") {
       return {
@@ -3646,6 +3608,18 @@ ${body}`;
     }
     return inputSchema?.additionalProperties === true;
   }
+  /**
+   * Whether a tool accepts a `namespace` argument — i.e. it is a
+   * namespace-scoped operation whose effective namespace MUST be gated by the
+   * per-token allow-list. Exposed (public) so the HTTP MCP transport can run
+   * the SAME effective-namespace enforcement the REST surface runs, without
+   * duplicating the tool-schema introspection (issue #1850). Namespace-
+   * agnostic tools (peer/wearables/etc.) return false and stay ungated,
+   * matching the REST surface where those routes never call resolveNamespace.
+   */
+  toolAcceptsNamespace(name) {
+    return this.toolAcceptsArgument(name, "namespace");
+  }
   /**
    * Determine whether oai-mem-citation guidance should be appended to recall.
    * Returns true when explicitly enabled via config OR when auto-detect is
@@ -3721,9 +3695,19 @@ ${body}`;
     } else if (migrated.startsWith("codegraph_")) {
       envelope = { ...args, tool: migrated.slice("codegraph_".length) };
     } else if (migrated === "chat_message") {
+      assertOperationAllowed(tokenCapabilityStore.getStore(), migrated);
       const message = typeof args.message === "string" ? args.message : "";
       if (!message) throw new EngramAccessInputError("message is required");
       const chatSessionId = typeof args.chatSessionId === "string" ? args.chatSessionId : void 0;
+      if (chatSessionId) {
+        await enforceChatSessionNamespace(this.service, chatSessionId);
+      } else {
+        enforceNamespaceAllowList(
+          tokenCapabilityStore.getStore(),
+          scope?.namespace,
+          this.service.configRef?.defaultNamespace
+        );
+      }
       const chatResult = await processChatMessage({
         service: this.service,
         config: this.service.configRef?.chat,
@@ -3776,6 +3760,7 @@ export {
   createChatExecutor,
   createChatSession,
   loadChatSession,
+  enforceChatSessionNamespace,
   appendTranscriptEntry,
   subscribeChatTranscript,
   cleanupExpiredChatSessions,
@@ -3784,4 +3769,4 @@ export {
   MCP_SUPPORTED_PROTOCOL_VERSIONS,
   EngramMcpServer
 };
-//# sourceMappingURL=chunk-DR6PEJU3.js.map
+//# sourceMappingURL=chunk-PCLIWBGD.js.map