@remnic/core 9.54.5 → 9.54.7

package/dist/{types-BnQza1y8.d.ts → types-ed-SvS2t.d.ts}

@@ -1750,6 +1750,10 @@ interface ChatConfig {
     /** Hours after which idle chat session state is cleaned up. */
     sessionTtlHours: number;
 }
+interface SupportPassportConfig {
+    enabled: boolean;
+    trustedProxyAddresses: string[];
+}
 /**
  * Session-scoped coding context. Produced by `resolveGitContext()` in the
  * connector layer and attached to a session so that recall + write paths can
@@ -2398,6 +2402,8 @@ interface PluginConfig extends BoundedJsonlStateConfig {
     codingKnowledge: CodingKnowledgeConfig;
     heartbeat: HeartbeatConfig;
     chat: ChatConfig;
+    /** Owner-controlled support passport. Off by default. */
+    supportPassport: SupportPassportConfig;
     slotBehavior: SlotBehaviorConfig;
     /** OpenClaw bridge mode (#2120): `"embedded"` (default) or `"delegate"`. */
     bridgeMode: string;
@@ -4732,4 +4738,4 @@ interface HourlySummary {
     generatedAt: string;
 }
 
-export { type ConvergeConflictPolicy as $, type AgentPersonaModelConfig as A, type BriefingSections as B, type CodingContext as C, type DreamsPhase as D, type EntityFile as E, type FaithfulnessFrontmatter as F, type GatewayConfig as G, type HourlySummary as H, type IdentityInjectionMode as I, type MemoryLifecycleEvent as J, type ProvenanceSource as K, type LiveConnectorsConfig as L, type MemoryFile as M, type TrustWeights as N, type ConversationThread as O, type PluginConfig as P, type QmdSearchResult as Q, type RecallPlanMode as R, type SessionObserverBandConfig as S, type TranscriptEntry as T, type LifecycleState as U, type VerificationState as V, type PolicyClass as W, type ReplicaPeersConfig as X, type ReplicaPeerConfig as Y, type ExtractionFailureClass as Z, type ImportanceLevel as _, type DreamsRunResult as a, type FusionConversationInput as a$, type ActiveRecallChatType as a0, type ActiveRecallQueryMode as a1, type ActiveRecallPromptStyle as a2, type ActiveRecallThinking as a3, type ActiveRecallModelFallbackPolicy as a4, type ExtractionResult as a5, type BehaviorSignalEvent as a6, type BufferSurpriseEvent as a7, type ImportTurn as a8, type BulkImportOptions as a9, summarizeExtractionLiveness as aA, type RetrievalTier as aB, type SignalScanResult as aC, type TopicScore as aD, type ConsolidationResult as aE, type DaySummaryResult as aF, type QmdSearchExplain as aG, type ActivitySnapshot as aH, type ActivityConfig as aI, type ActivitySourceConfig as aJ, type ActivitySourceClient as aK, type WearableConversation as aL, type WearableSourceSettings as aM, type WearableNativeMemory as aN, type WearableMemoryMode as aO, type WearableSourceConnector as aP, type WearablesConfig as aQ, type WearableSyncSummary as aR, type WearableSourceStatus as aS, type WearableDayTranscript as aT, type FusedWearableConversation as aU, type WearableCorrectionRule as aV, type MeetingBuildInput as aW, type MeetingsConfig as aX, type FusedMeeting as aY, type MeetingRecord as aZ, type MeetingsDetectionInput as a_, type BulkImportSource as aa, type BulkImportResult as ab, type CompressionGuidelineOptimizerEventCounts as ac, type CompressionGuidelineOptimizerActionSummary as ad, type CompressionGuidelineOptimizerRuleUpdate as ae, type MemoryActionType as af, type MemoryActionEvent as ag, type CompressionGuidelineOptimizerState as ah, type ConvergeConfig as ai, type EntityMention as aj, type DependencyPropagationConfig as ak, type EntitySchemaDefinition as al, type EntitySchemaSectionDefinition as am, type EntityStructuredSection as an, type ExtractedFact as ao, type ProvenanceConfig as ap, type ImportanceScore as aq, type MemoryIntent as ar, type MemoryActionEligibilityContext as as, type MemoryActionPolicyResult as at, type MemoryLifecycleEventType as au, type MemoryLifecycleStateSummary as av, type ModelProviderConfig as aw, type NativeKnowledgeConfig as ax, type ExtractionBufferSource as ay, type MetaState as az, type RecallTierExplain as b, isImportRole as b$, type MeetingActivitySnapshot as b0, type DetectedMeeting as b1, type FusedDayMeta as b2, type FusedDayFile as b3, type MeetingDetectionSource as b4, type EntityTimelineEntry as b5, type MemoryLink as b6, type BufferState as b7, type FileHygieneConfig as b8, type EntityRelationship as b9, type ActivityExtractionMode as bA, type BriefingConfig as bB, type BriefingOpenCommitment as bC, type BriefingWindow as bD, type BulkImportError as bE, type BulkImportSourceAdapter as bF, type CodexCompatConfig as bG, DEFAULT_RECALL_DISCLOSURE as bH, type DisagreementKind as bI, type FusedContribution as bJ, type FusedConversationProvenance as bK, type FusedSegmentProvenance as bL, type FusionSegmentInput as bM, type ImportSourceRole as bN, type ImportTurnValidationIssue as bO, type MeetingScreenContextEvent as bP, type MeetingSummaryMode as bQ, type MemoryActionEligibilitySource as bR, type MemoryObservation as bS, type MemoryScope as bT, RECALL_DISCLOSURE_LEVELS as bU, type SegmentPickReason as bV, type WearableAuthCheck as bW, type WearableFetchOptions as bX, type WearableFetchPage as bY, type WearableNativeMemoryPage as bZ, type WearableTranscriptSegment as b_, type EntityActivityEntry as ba, type AccessTrackingEntry as bb, type MemorySummary as bc, type DreamsStatusResult as bd, type RecallSectionConfig as be, type BootstrapOptions as bf, type BootstrapResult as bg, type ConsolidationObservation as bh, type CodingModeConfig as bi, type FusedSpeaker as bj, type FusedSegment as bk, type FusedDisagreement as bl, type FusionOptions as bm, type FusionDayResult as bn, type CodingKnowledgeConfig as bo, type WearableCleanupSettings as bp, type WearableFusionConfig as bq, type OffTheRecordMarkerSettings as br, type WearableDayTranscriptMeta as bs, type ActivityDayMeta as bt, type ActivityDayDigest as bu, type ActivitySourceCheck as bv, type ActivitySnapshotPage as bw, type MeetingsDetectionConfig as bx, type MeetingAudioWindow as by, type MeetingAppSpan as bz, type BriefingFollowup as c, type GitHubLiveConnectorConfig as c$, isRecallDisclosure as c0, parseIsoTimestamp as c1, validateImportTurn as c2, type ExtractionLivenessConfig as c3, ExtractionLivenessWarnThrottle as c4, type ExtractionRootStats as c5, type ExtractionWatermarkOrStorage as c6, type ExtractionWatermarkRead as c7, coerceExtractionWatermark as c8, computeExtractionLivenessStatus as c9, type BufferEntryState as cA, type ChatConfig as cB, type CodexCliReasoningEffort as cC, type CodexCompactionFlushMode as cD, type CodexConnectorConfig as cE, type CodingGraphLspConfig as cF, type CompressionGuidelineActivationState as cG, type CompressionGuidelineOptimizerSourceWindow as cH, type ConfidenceTier as cI, type ConsolidationAction as cJ, type ConsolidationItem as cK, type CronConversationRecallMode as cL, type CronRecallMode as cM, type DreamingConfig as cN, type DreamingNarrativePromptStyle as cO, type DreamsDeepSleepConfig as cP, type DreamsLightSleepConfig as cQ, type DreamsPhaseStatus as cR, type DreamsPhasesConfig as cS, type DreamsRemConfig as cT, type EngramTraceEvent as cU, type ExtractedProcedureStep as cV, type ExtractedQuestion as cW, type ExtractedReasoningTrace as cX, type ExtractedReasoningTraceStep as cY, type ExtractedRelationship as cZ, type ExtractionPassSource as c_, evaluateExtractionLiveness as ca, formatAgeMs as cb, gatherExtractionLivenessStatus as cc, parseExtractionLivenessConfig as cd, renderExtractionLivenessStats as ce, resolveExtractionLivenessConfig as cf, parseReplicaPeersConfig as cg, resolveReplicaPeersConfig as ch, type AmbientCaptureProvenance as ci, type BufferTurnOwner as cj, ProbeTimeoutError as ck, bufferTurnArrayIsSuffixOfSnapshot as cl, bufferTurnArraysEqual as cm, bufferTurnsEqual as cn, copyBufferTurn as co, describeError as cp, liveTurnsFromExtractionSnapshot as cq, matchingQueuedExtractionPrefixLength as cr, probeWithTimeout as cs, type AgentAccessHttpConfig as ct, type AgentDefaultsConfig as cu, type AgentPersona as cv, type BehaviorLoopAdjustment as cw, type BehaviorSignalDirection as cx, type BehaviorSignalType as cy, type BriefingCalendarSourceError as cz, type BriefingFocus as d, type GmailLiveConnectorConfig as d0, type GoogleDriveLiveConnectorConfig as d1, type HeartbeatConfig as d2, type HeartbeatDetectionMode as d3, type LlmTraceCallback as d4, type LlmTraceEvent as d5, type MemoryActionOutcome as d6, type MemoryActionPolicyDecision as d7, type MemoryActionStatus as d8, type MemoryLinkType as d9, type SlotMismatchMode as dA, type TriggerMode as dB, confidenceTier as dC, type MemoryOsPresetName as da, type ModelApi as db, type ModelDefinitionConfig as dc, type ModelProviderAuthMode as dd, type NamespacePolicy as de, type NativeKnowledgeFolderRuleConfig as df, type NativeKnowledgeObsidianVaultConfig as dg, type NativeKnowledgeOpenClawWorkspaceConfig as dh, type NotionLiveConnectorConfig as di, type PrincipalFromSessionKeyMode as dj, type PrincipalRule as dk, type ProceduralConfig as dl, type QuestionEntry as dm, type ReasoningEffort as dn, type RecallPipelineConfig as dp, type RecallTraceEvent as dq, type RelevanceFeedback as dr, SPECULATIVE_TTL_DAYS as ds, type ScopeProfileAutoPromoteConfig as dt, type ScopeProfileTeamProjectConfig as du, type ScopeTeamConfig as dv, type ScoredEntity as dw, type SemanticChunkingConfigShape as dx, type SignalLevel as dy, type SlotBehaviorConfig as dz, type CalendarSource as e, type CalendarEvent as f, type BriefingActiveThread as g, type BriefingResult as h, type BriefingRecentEntity as i, type BufferTurn as j, type ExtractionBufferSnapshot as k, type MemoryFrontmatter as l, type Checkpoint as m, type RecallDisclosure as n, type SourceConnectorProvenance as o, type ScopeProfileConfig as p, type ScopeProfileLayerId as q, type ScopeProfilePromotionTarget as r, type BehaviorLoopPolicyState as s, type SecretRef as t, type AgentAccessAuthToken as u, type ExtractionLivenessStatus as v, type MemoryCategory as w, type CaptureMode as x, type MemoryStatus as y, type MemoryProjectionCurrentState as z };
+export { type ConvergeConflictPolicy as $, type AgentPersonaModelConfig as A, type BriefingSections as B, type CodingContext as C, type DreamsPhase as D, type EntityFile as E, type FaithfulnessFrontmatter as F, type GatewayConfig as G, type HourlySummary as H, type IdentityInjectionMode as I, type MemoryLifecycleEvent as J, type ProvenanceSource as K, type LiveConnectorsConfig as L, type MemoryFile as M, type TrustWeights as N, type ConversationThread as O, type PluginConfig as P, type QmdSearchResult as Q, type RecallPlanMode as R, type SessionObserverBandConfig as S, type TranscriptEntry as T, type LifecycleState as U, type VerificationState as V, type PolicyClass as W, type ReplicaPeersConfig as X, type ReplicaPeerConfig as Y, type ExtractionFailureClass as Z, type ImportanceLevel as _, type DreamsRunResult as a, type WearableDayTranscript as a$, type ActiveRecallChatType as a0, type ActiveRecallQueryMode as a1, type ActiveRecallPromptStyle as a2, type ActiveRecallThinking as a3, type ActiveRecallModelFallbackPolicy as a4, type ExtractionResult as a5, type BehaviorSignalEvent as a6, type BufferSurpriseEvent as a7, type ImportTurn as a8, type BulkImportOptions as a9, summarizeExtractionLiveness as aA, type RetrievalTier as aB, type SignalScanResult as aC, type TopicScore as aD, type ConsolidationResult as aE, type DaySummaryResult as aF, type QmdSearchExplain as aG, type ActivitySnapshot as aH, type ActivityConfig as aI, type ActivitySourceConfig as aJ, type ActivitySourceClient as aK, type MeetingBuildInput as aL, type MeetingsConfig as aM, type FusedMeeting as aN, type MeetingRecord as aO, type MeetingsDetectionInput as aP, type FusionConversationInput as aQ, type MeetingActivitySnapshot as aR, type DetectedMeeting as aS, type WearableConversation as aT, type WearableSourceSettings as aU, type WearableNativeMemory as aV, type WearableMemoryMode as aW, type WearableSourceConnector as aX, type WearablesConfig as aY, type WearableSyncSummary as aZ, type WearableSourceStatus as a_, type BulkImportSource as aa, type BulkImportResult as ab, type CompressionGuidelineOptimizerEventCounts as ac, type CompressionGuidelineOptimizerActionSummary as ad, type CompressionGuidelineOptimizerRuleUpdate as ae, type MemoryActionType as af, type MemoryActionEvent as ag, type CompressionGuidelineOptimizerState as ah, type ConvergeConfig as ai, type EntityMention as aj, type DependencyPropagationConfig as ak, type EntitySchemaDefinition as al, type EntitySchemaSectionDefinition as am, type EntityStructuredSection as an, type ExtractedFact as ao, type ProvenanceConfig as ap, type ImportanceScore as aq, type MemoryIntent as ar, type MemoryActionEligibilityContext as as, type MemoryActionPolicyResult as at, type MemoryLifecycleEventType as au, type MemoryLifecycleStateSummary as av, type ModelProviderConfig as aw, type NativeKnowledgeConfig as ax, type ExtractionBufferSource as ay, type MetaState as az, type RecallTierExplain as b, isImportRole as b$, type FusedWearableConversation as b0, type WearableCorrectionRule as b1, type FusedDayMeta as b2, type FusedDayFile as b3, type MeetingDetectionSource as b4, type EntityTimelineEntry as b5, type MemoryLink as b6, type BufferState as b7, type FileHygieneConfig as b8, type EntityRelationship as b9, type ActivityExtractionMode as bA, type BriefingConfig as bB, type BriefingOpenCommitment as bC, type BriefingWindow as bD, type BulkImportError as bE, type BulkImportSourceAdapter as bF, type CodexCompatConfig as bG, DEFAULT_RECALL_DISCLOSURE as bH, type DisagreementKind as bI, type FusedContribution as bJ, type FusedConversationProvenance as bK, type FusedSegmentProvenance as bL, type FusionSegmentInput as bM, type ImportSourceRole as bN, type ImportTurnValidationIssue as bO, type MeetingScreenContextEvent as bP, type MeetingSummaryMode as bQ, type MemoryActionEligibilitySource as bR, type MemoryObservation as bS, type MemoryScope as bT, RECALL_DISCLOSURE_LEVELS as bU, type SegmentPickReason as bV, type WearableAuthCheck as bW, type WearableFetchOptions as bX, type WearableFetchPage as bY, type WearableNativeMemoryPage as bZ, type WearableTranscriptSegment as b_, type EntityActivityEntry as ba, type AccessTrackingEntry as bb, type MemorySummary as bc, type DreamsStatusResult as bd, type RecallSectionConfig as be, type BootstrapOptions as bf, type BootstrapResult as bg, type ConsolidationObservation as bh, type CodingModeConfig as bi, type FusedSpeaker as bj, type FusedSegment as bk, type FusedDisagreement as bl, type FusionOptions as bm, type FusionDayResult as bn, type CodingKnowledgeConfig as bo, type WearableCleanupSettings as bp, type WearableFusionConfig as bq, type OffTheRecordMarkerSettings as br, type WearableDayTranscriptMeta as bs, type ActivityDayMeta as bt, type ActivityDayDigest as bu, type ActivitySourceCheck as bv, type ActivitySnapshotPage as bw, type MeetingsDetectionConfig as bx, type MeetingAudioWindow as by, type MeetingAppSpan as bz, type BriefingFollowup as c, type ExtractionPassSource as c$, isRecallDisclosure as c0, parseIsoTimestamp as c1, validateImportTurn as c2, type SupportPassportConfig as c3, type ExtractionLivenessConfig as c4, ExtractionLivenessWarnThrottle as c5, type ExtractionRootStats as c6, type ExtractionWatermarkOrStorage as c7, type ExtractionWatermarkRead as c8, coerceExtractionWatermark as c9, type BriefingCalendarSourceError as cA, type BufferEntryState as cB, type ChatConfig as cC, type CodexCliReasoningEffort as cD, type CodexCompactionFlushMode as cE, type CodexConnectorConfig as cF, type CodingGraphLspConfig as cG, type CompressionGuidelineActivationState as cH, type CompressionGuidelineOptimizerSourceWindow as cI, type ConfidenceTier as cJ, type ConsolidationAction as cK, type ConsolidationItem as cL, type CronConversationRecallMode as cM, type CronRecallMode as cN, type DreamingConfig as cO, type DreamingNarrativePromptStyle as cP, type DreamsDeepSleepConfig as cQ, type DreamsLightSleepConfig as cR, type DreamsPhaseStatus as cS, type DreamsPhasesConfig as cT, type DreamsRemConfig as cU, type EngramTraceEvent as cV, type ExtractedProcedureStep as cW, type ExtractedQuestion as cX, type ExtractedReasoningTrace as cY, type ExtractedReasoningTraceStep as cZ, type ExtractedRelationship as c_, computeExtractionLivenessStatus as ca, evaluateExtractionLiveness as cb, formatAgeMs as cc, gatherExtractionLivenessStatus as cd, parseExtractionLivenessConfig as ce, renderExtractionLivenessStats as cf, resolveExtractionLivenessConfig as cg, parseReplicaPeersConfig as ch, resolveReplicaPeersConfig as ci, type AmbientCaptureProvenance as cj, type BufferTurnOwner as ck, ProbeTimeoutError as cl, bufferTurnArrayIsSuffixOfSnapshot as cm, bufferTurnArraysEqual as cn, bufferTurnsEqual as co, copyBufferTurn as cp, describeError as cq, liveTurnsFromExtractionSnapshot as cr, matchingQueuedExtractionPrefixLength as cs, probeWithTimeout as ct, type AgentAccessHttpConfig as cu, type AgentDefaultsConfig as cv, type AgentPersona as cw, type BehaviorLoopAdjustment as cx, type BehaviorSignalDirection as cy, type BehaviorSignalType as cz, type BriefingFocus as d, type GitHubLiveConnectorConfig as d0, type GmailLiveConnectorConfig as d1, type GoogleDriveLiveConnectorConfig as d2, type HeartbeatConfig as d3, type HeartbeatDetectionMode as d4, type LlmTraceCallback as d5, type LlmTraceEvent as d6, type MemoryActionOutcome as d7, type MemoryActionPolicyDecision as d8, type MemoryActionStatus as d9, type SlotBehaviorConfig as dA, type SlotMismatchMode as dB, type TriggerMode as dC, confidenceTier as dD, type MemoryLinkType as da, type MemoryOsPresetName as db, type ModelApi as dc, type ModelDefinitionConfig as dd, type ModelProviderAuthMode as de, type NamespacePolicy as df, type NativeKnowledgeFolderRuleConfig as dg, type NativeKnowledgeObsidianVaultConfig as dh, type NativeKnowledgeOpenClawWorkspaceConfig as di, type NotionLiveConnectorConfig as dj, type PrincipalFromSessionKeyMode as dk, type PrincipalRule as dl, type ProceduralConfig as dm, type QuestionEntry as dn, type ReasoningEffort as dp, type RecallPipelineConfig as dq, type RecallTraceEvent as dr, type RelevanceFeedback as ds, SPECULATIVE_TTL_DAYS as dt, type ScopeProfileAutoPromoteConfig as du, type ScopeProfileTeamProjectConfig as dv, type ScopeTeamConfig as dw, type ScoredEntity as dx, type SemanticChunkingConfigShape as dy, type SignalLevel as dz, type CalendarSource as e, type CalendarEvent as f, type BriefingActiveThread as g, type BriefingResult as h, type BriefingRecentEntity as i, type BufferTurn as j, type ExtractionBufferSnapshot as k, type MemoryFrontmatter as l, type Checkpoint as m, type RecallDisclosure as n, type SourceConnectorProvenance as o, type ScopeProfileConfig as p, type ScopeProfileLayerId as q, type ScopeProfilePromotionTarget as r, type BehaviorLoopPolicyState as s, type ExtractionLivenessStatus as t, type SecretRef as u, type AgentAccessAuthToken as v, type MemoryCategory as w, type CaptureMode as x, type MemoryStatus as y, type MemoryProjectionCurrentState as z };

package/dist/types.d.ts

@@ -1,4 +1,4 @@
-export { bb as AccessTrackingEntry, a0 as ActiveRecallChatType, a4 as ActiveRecallModelFallbackPolicy, a2 as ActiveRecallPromptStyle, a1 as ActiveRecallQueryMode, a3 as ActiveRecallThinking, u as AgentAccessAuthToken, ct as AgentAccessHttpConfig, cu as AgentDefaultsConfig, cv as AgentPersona, A as AgentPersonaModelConfig, cw as BehaviorLoopAdjustment, s as BehaviorLoopPolicyState, cx as BehaviorSignalDirection, a6 as BehaviorSignalEvent, cy as BehaviorSignalType, bf as BootstrapOptions, bg as BootstrapResult, g as BriefingActiveThread, cz as BriefingCalendarSourceError, bB as BriefingConfig, d as BriefingFocus, c as BriefingFollowup, bC as BriefingOpenCommitment, i as BriefingRecentEntity, h as BriefingResult, B as BriefingSections, bD as BriefingWindow, cA as BufferEntryState, b7 as BufferState, a7 as BufferSurpriseEvent, j as BufferTurn, f as CalendarEvent, e as CalendarSource, x as CaptureMode, cB as ChatConfig, m as Checkpoint, cC as CodexCliReasoningEffort, cD as CodexCompactionFlushMode, bG as CodexCompatConfig, cE as CodexConnectorConfig, C as CodingContext, cF as CodingGraphLspConfig, bo as CodingKnowledgeConfig, bi as CodingModeConfig, cG as CompressionGuidelineActivationState, ad as CompressionGuidelineOptimizerActionSummary, ac as CompressionGuidelineOptimizerEventCounts, ae as CompressionGuidelineOptimizerRuleUpdate, cH as CompressionGuidelineOptimizerSourceWindow, ah as CompressionGuidelineOptimizerState, cI as ConfidenceTier, cJ as ConsolidationAction, cK as ConsolidationItem, bh as ConsolidationObservation, aE as ConsolidationResult, ai as ConvergeConfig, $ as ConvergeConflictPolicy, O as ConversationThread, cL as CronConversationRecallMode, cM as CronRecallMode, bH as DEFAULT_RECALL_DISCLOSURE, aF as DaySummaryResult, ak as DependencyPropagationConfig, cN as DreamingConfig, cO as DreamingNarrativePromptStyle, cP as DreamsDeepSleepConfig, cQ as DreamsLightSleepConfig, D as DreamsPhase, cR as DreamsPhaseStatus, cS as DreamsPhasesConfig, cT as DreamsRemConfig, a as DreamsRunResult, bd as DreamsStatusResult, cU as EngramTraceEvent, ba as EntityActivityEntry, E as EntityFile, aj as EntityMention, b9 as EntityRelationship, al as EntitySchemaDefinition, am as EntitySchemaSectionDefinition, an as EntityStructuredSection, b5 as EntityTimelineEntry, ao as ExtractedFact, cV as ExtractedProcedureStep, cW as ExtractedQuestion, cX as ExtractedReasoningTrace, cY as ExtractedReasoningTraceStep, cZ as ExtractedRelationship, Z as ExtractionFailureClass, c_ as ExtractionPassSource, a5 as ExtractionResult, F as FaithfulnessFrontmatter, b8 as FileHygieneConfig, G as GatewayConfig, c$ as GitHubLiveConnectorConfig, d0 as GmailLiveConnectorConfig, d1 as GoogleDriveLiveConnectorConfig, d2 as HeartbeatConfig, d3 as HeartbeatDetectionMode, H as HourlySummary, I as IdentityInjectionMode, _ as ImportanceLevel, aq as ImportanceScore, U as LifecycleState, L as LiveConnectorsConfig, d4 as LlmTraceCallback, d5 as LlmTraceEvent, as as MemoryActionEligibilityContext, bR as MemoryActionEligibilitySource, ag as MemoryActionEvent, d6 as MemoryActionOutcome, d7 as MemoryActionPolicyDecision, at as MemoryActionPolicyResult, d8 as MemoryActionStatus, af as MemoryActionType, w as MemoryCategory, M as MemoryFile, l as MemoryFrontmatter, ar as MemoryIntent, J as MemoryLifecycleEvent, au as MemoryLifecycleEventType, av as MemoryLifecycleStateSummary, b6 as MemoryLink, d9 as MemoryLinkType, bS as MemoryObservation, da as MemoryOsPresetName, z as MemoryProjectionCurrentState, bT as MemoryScope, y as MemoryStatus, bc as MemorySummary, az as MetaState, db as ModelApi, dc as ModelDefinitionConfig, dd as ModelProviderAuthMode, aw as ModelProviderConfig, de as NamespacePolicy, ax as NativeKnowledgeConfig, df as NativeKnowledgeFolderRuleConfig, dg as NativeKnowledgeObsidianVaultConfig, dh as NativeKnowledgeOpenClawWorkspaceConfig, di as NotionLiveConnectorConfig, P as PluginConfig, W as PolicyClass, dj as PrincipalFromSessionKeyMode, dk as PrincipalRule, dl as ProceduralConfig, ap as ProvenanceConfig, K as ProvenanceSource, aG as QmdSearchExplain, Q as QmdSearchResult, dm as QuestionEntry, bU as RECALL_DISCLOSURE_LEVELS, dn as ReasoningEffort, n as RecallDisclosure, dp as RecallPipelineConfig, R as RecallPlanMode, be as RecallSectionConfig, b as RecallTierExplain, dq as RecallTraceEvent, dr as RelevanceFeedback, aB as RetrievalTier, ds as SPECULATIVE_TTL_DAYS, dt as ScopeProfileAutoPromoteConfig, p as ScopeProfileConfig, q as ScopeProfileLayerId, r as ScopeProfilePromotionTarget, du as ScopeProfileTeamProjectConfig, dv as ScopeTeamConfig, dw as ScoredEntity, t as SecretRef, dx as SemanticChunkingConfigShape, S as SessionObserverBandConfig, dy as SignalLevel, aC as SignalScanResult, dz as SlotBehaviorConfig, dA as SlotMismatchMode, o as SourceConnectorProvenance, aD as TopicScore, T as TranscriptEntry, dB as TriggerMode, N as TrustWeights, V as VerificationState, dC as confidenceTier, c0 as isRecallDisclosure } from './types-BnQza1y8.js';
+export { bb as AccessTrackingEntry, a0 as ActiveRecallChatType, a4 as ActiveRecallModelFallbackPolicy, a2 as ActiveRecallPromptStyle, a1 as ActiveRecallQueryMode, a3 as ActiveRecallThinking, v as AgentAccessAuthToken, cu as AgentAccessHttpConfig, cv as AgentDefaultsConfig, cw as AgentPersona, A as AgentPersonaModelConfig, cx as BehaviorLoopAdjustment, s as BehaviorLoopPolicyState, cy as BehaviorSignalDirection, a6 as BehaviorSignalEvent, cz as BehaviorSignalType, bf as BootstrapOptions, bg as BootstrapResult, g as BriefingActiveThread, cA as BriefingCalendarSourceError, bB as BriefingConfig, d as BriefingFocus, c as BriefingFollowup, bC as BriefingOpenCommitment, i as BriefingRecentEntity, h as BriefingResult, B as BriefingSections, bD as BriefingWindow, cB as BufferEntryState, b7 as BufferState, a7 as BufferSurpriseEvent, j as BufferTurn, f as CalendarEvent, e as CalendarSource, x as CaptureMode, cC as ChatConfig, m as Checkpoint, cD as CodexCliReasoningEffort, cE as CodexCompactionFlushMode, bG as CodexCompatConfig, cF as CodexConnectorConfig, C as CodingContext, cG as CodingGraphLspConfig, bo as CodingKnowledgeConfig, bi as CodingModeConfig, cH as CompressionGuidelineActivationState, ad as CompressionGuidelineOptimizerActionSummary, ac as CompressionGuidelineOptimizerEventCounts, ae as CompressionGuidelineOptimizerRuleUpdate, cI as CompressionGuidelineOptimizerSourceWindow, ah as CompressionGuidelineOptimizerState, cJ as ConfidenceTier, cK as ConsolidationAction, cL as ConsolidationItem, bh as ConsolidationObservation, aE as ConsolidationResult, ai as ConvergeConfig, $ as ConvergeConflictPolicy, O as ConversationThread, cM as CronConversationRecallMode, cN as CronRecallMode, bH as DEFAULT_RECALL_DISCLOSURE, aF as DaySummaryResult, ak as DependencyPropagationConfig, cO as DreamingConfig, cP as DreamingNarrativePromptStyle, cQ as DreamsDeepSleepConfig, cR as DreamsLightSleepConfig, D as DreamsPhase, cS as DreamsPhaseStatus, cT as DreamsPhasesConfig, cU as DreamsRemConfig, a as DreamsRunResult, bd as DreamsStatusResult, cV as EngramTraceEvent, ba as EntityActivityEntry, E as EntityFile, aj as EntityMention, b9 as EntityRelationship, al as EntitySchemaDefinition, am as EntitySchemaSectionDefinition, an as EntityStructuredSection, b5 as EntityTimelineEntry, ao as ExtractedFact, cW as ExtractedProcedureStep, cX as ExtractedQuestion, cY as ExtractedReasoningTrace, cZ as ExtractedReasoningTraceStep, c_ as ExtractedRelationship, Z as ExtractionFailureClass, c$ as ExtractionPassSource, a5 as ExtractionResult, F as FaithfulnessFrontmatter, b8 as FileHygieneConfig, G as GatewayConfig, d0 as GitHubLiveConnectorConfig, d1 as GmailLiveConnectorConfig, d2 as GoogleDriveLiveConnectorConfig, d3 as HeartbeatConfig, d4 as HeartbeatDetectionMode, H as HourlySummary, I as IdentityInjectionMode, _ as ImportanceLevel, aq as ImportanceScore, U as LifecycleState, L as LiveConnectorsConfig, d5 as LlmTraceCallback, d6 as LlmTraceEvent, as as MemoryActionEligibilityContext, bR as MemoryActionEligibilitySource, ag as MemoryActionEvent, d7 as MemoryActionOutcome, d8 as MemoryActionPolicyDecision, at as MemoryActionPolicyResult, d9 as MemoryActionStatus, af as MemoryActionType, w as MemoryCategory, M as MemoryFile, l as MemoryFrontmatter, ar as MemoryIntent, J as MemoryLifecycleEvent, au as MemoryLifecycleEventType, av as MemoryLifecycleStateSummary, b6 as MemoryLink, da as MemoryLinkType, bS as MemoryObservation, db as MemoryOsPresetName, z as MemoryProjectionCurrentState, bT as MemoryScope, y as MemoryStatus, bc as MemorySummary, az as MetaState, dc as ModelApi, dd as ModelDefinitionConfig, de as ModelProviderAuthMode, aw as ModelProviderConfig, df as NamespacePolicy, ax as NativeKnowledgeConfig, dg as NativeKnowledgeFolderRuleConfig, dh as NativeKnowledgeObsidianVaultConfig, di as NativeKnowledgeOpenClawWorkspaceConfig, dj as NotionLiveConnectorConfig, P as PluginConfig, W as PolicyClass, dk as PrincipalFromSessionKeyMode, dl as PrincipalRule, dm as ProceduralConfig, ap as ProvenanceConfig, K as ProvenanceSource, aG as QmdSearchExplain, Q as QmdSearchResult, dn as QuestionEntry, bU as RECALL_DISCLOSURE_LEVELS, dp as ReasoningEffort, n as RecallDisclosure, dq as RecallPipelineConfig, R as RecallPlanMode, be as RecallSectionConfig, b as RecallTierExplain, dr as RecallTraceEvent, ds as RelevanceFeedback, aB as RetrievalTier, dt as SPECULATIVE_TTL_DAYS, du as ScopeProfileAutoPromoteConfig, p as ScopeProfileConfig, q as ScopeProfileLayerId, r as ScopeProfilePromotionTarget, dv as ScopeProfileTeamProjectConfig, dw as ScopeTeamConfig, dx as ScoredEntity, u as SecretRef, dy as SemanticChunkingConfigShape, S as SessionObserverBandConfig, dz as SignalLevel, aC as SignalScanResult, dA as SlotBehaviorConfig, dB as SlotMismatchMode, o as SourceConnectorProvenance, c3 as SupportPassportConfig, aD as TopicScore, T as TranscriptEntry, dC as TriggerMode, N as TrustWeights, V as VerificationState, dD as confidenceTier, c0 as isRecallDisclosure } from './types-ed-SvS2t.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './external-wiki-config.js';

package/dist/types.js

@@ -4,7 +4,7 @@ import {
   SPECULATIVE_TTL_DAYS,
   confidenceTier,
   isRecallDisclosure
-} from "./chunk-BIF4SHMD.js";
+} from "./chunk-76JJSXK7.js";
 import "./chunk-PZ5AY32C.js";
 export {
   DEFAULT_RECALL_DISCLOSURE,

package/dist/utility-runtime.d.ts

@@ -1,6 +1,6 @@
 import { TierRoutingPolicy } from './tier-routing.js';
 import './lifecycle.js';
-import './types-BnQza1y8.js';
+import './types-ed-SvS2t.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';

package/dist/verified-recall.js

@@ -1,36 +1,36 @@
 import {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
-} from "./chunk-YKZLOPTC.js";
+} from "./chunk-5FD7JMTX.js";
 import "./chunk-B7RWBZXW.js";
-import "./chunk-QQXWFDRD.js";
-import "./chunk-UHVXE24Y.js";
+import "./chunk-M4YHAODQ.js";
 import "./chunk-MLPTFODV.js";
+import "./chunk-UHVXE24Y.js";
 import "./chunk-SXIMQLGV.js";
-import "./chunk-DN2IDKI5.js";
-import "./chunk-UWJNKGBA.js";
+import "./chunk-TO7ZTWJW.js";
+import "./chunk-QZLDRQ4I.js";
+import "./chunk-XL3TATMJ.js";
 import "./chunk-VANZKHTN.js";
 import "./chunk-CYEPCZN5.js";
 import "./chunk-YLHM5BQQ.js";
 import "./chunk-VYISFWVX.js";
-import "./chunk-GWFSVJ4P.js";
-import "./chunk-XL3TATMJ.js";
 import "./chunk-W7IGLX4G.js";
+import "./chunk-GWFSVJ4P.js";
 import "./chunk-GUMZC2BO.js";
-import "./chunk-7RZJWZ46.js";
+import "./chunk-LEPOP46W.js";
+import "./chunk-72A4L5JJ.js";
 import "./chunk-A7Q43EUZ.js";
 import "./chunk-ET356KSB.js";
-import "./chunk-72A4L5JJ.js";
 import "./chunk-S2V7RUCL.js";
-import "./chunk-BIF4SHMD.js";
+import "./chunk-76JJSXK7.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-PO7NXBG2.js";
 import "./chunk-S2HLHAZ4.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
-import "./chunk-JYIJNNN3.js";
+import "./chunk-UG6VXIOK.js";
 import "./chunk-AAD2ZS6P.js";
-import "./chunk-WZWZRZ2V.js";
+import "./chunk-K2UGPTYY.js";
 import "./chunk-NSVDUN76.js";
 import "./chunk-BT7NVCML.js";
 import "./chunk-3ONXXHQO.js";
@@ -43,7 +43,7 @@ import "./chunk-RBOJCG4T.js";
 import "./chunk-GSTIBXBW.js";
 import "./chunk-5WITETWU.js";
 import "./chunk-6CIAGZ6X.js";
-import "./chunk-C23BYTJV.js";
+import "./chunk-UW5NPZJ2.js";
 import "./chunk-QIEUU4UK.js";
 import "./chunk-L2EXJQJP.js";
 import "./chunk-45GF7Y3V.js";
@@ -76,7 +76,7 @@ import "./chunk-2LWQSV6A.js";
 import "./chunk-RL6NEVXT.js";
 import "./chunk-FFAZ2XFU.js";
 import "./chunk-5FVVY2EB.js";
-import "./chunk-HNDIND7P.js";
+import "./chunk-XX4HPFFM.js";
 import "./chunk-EGGE52UU.js";
 import "./chunk-JDSVLVCG.js";
 import "./chunk-5GKPFL3S.js";

package/dist/write-envelope.d.ts

@@ -1,4 +1,4 @@
-import { w as MemoryCategory } from './types-BnQza1y8.js';
+import { w as MemoryCategory } from './types-ed-SvS2t.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';

package/dist/write-rate-limiter.d.ts

@@ -15,10 +15,15 @@
 type Slot = {
     readonly recordedAt: number;
 };
+interface WriteRateLimitReservation {
+    commit(): void;
+    release(): void;
+}
 declare class WriteRateLimiter {
     readonly maxRequests: number;
     readonly windowMs: number;
     private readonly buckets;
+    private readonly inFlight;
     private lastLogAt;
     private suppressed;
     constructor(maxRequests?: number, windowMs?: number);
@@ -26,8 +31,9 @@ declare class WriteRateLimiter {
     private prune;
     /** Prune every bucket to the current window; drop buckets that go empty. */
     private sweep;
-    /** Live reservation/record count for a principal (test/introspection). */
+    /** Committed slots for a principal (test/introspection). */
     slotsFor(principal?: string): ReadonlyArray<Slot>;
+    inFlightFor(principal?: string): number;
     /** Total live reservations across all principals (test/introspection). */
     totalSlots(): number;
     /** True if a write may proceed for the principal. Logs (sampled) when not. */
@@ -35,11 +41,11 @@ declare class WriteRateLimiter {
     /** Record a committed write against the principal's rolling window. */
     record(principal?: string): void;
     /**
-     * Reserve a slot for an in-flight write. Returns a release function, or
-     * `null` when the principal is already at the limit (caller raises its 429).
+     * Reserve a slot for an in-flight write. Commit starts the rolling window
+     * when persistence finishes. Release restores capacity after a failed write.
      */
-    reserve(principal?: string): (() => void) | null;
+    reserve(principal?: string): WriteRateLimitReservation | null;
     private logRejected;
 }
 
-export { WriteRateLimiter };
+export { type WriteRateLimitReservation, WriteRateLimiter };

package/dist/write-rate-limiter.js

@@ -1,6 +1,6 @@
 import {
   WriteRateLimiter
-} from "./chunk-MKQBXQKU.js";
+} from "./chunk-TB6CBZ5V.js";
 import "./chunk-3WCASNQZ.js";
 import "./chunk-PZ5AY32C.js";
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.54.5",
+  "version": "9.54.7",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -2600,6 +2600,16 @@
       "remnic-source": "./src/summarizer.ts",
       "import": "./dist/summarizer.js"
     },
+    "./support-passport": {
+      "types": "./dist/support-passport/index.d.ts",
+      "remnic-source": "./src/support-passport/index.ts",
+      "import": "./dist/support-passport/index.js"
+    },
+    "./support-passport.js": {
+      "types": "./dist/support-passport/index.d.ts",
+      "remnic-source": "./src/support-passport/index.ts",
+      "import": "./dist/support-passport/index.js"
+    },
     "./summary-snapshot": {
       "types": "./dist/summary-snapshot.d.ts",
       "remnic-source": "./src/summary-snapshot.ts",
@@ -3126,7 +3136,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.54.5"
+    "@remnic/coding-graph": "^9.54.7"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/scripts/build-with-heap.mjs

@@ -5,6 +5,9 @@
 // A Node wrapper (not a NODE_OPTIONS= shell prefix) keeps the build
 // script portable to Windows' cmd.exe script shell.
 import { spawnSync } from "node:child_process";
+import { cp, mkdir, rm } from "node:fs/promises";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
 
 const HEAP_DEFAULT = "--max-old-space-size=8192";
 const existing = process.env.NODE_OPTIONS?.trim();
@@ -22,4 +25,11 @@ const result = spawnSync("tsup", process.argv.slice(2), {
 if (result.error) {
   console.error(`[build-with-heap] failed to launch tsup: ${result.error.message}`);
 }
-process.exit(result.status ?? 1);
+if (result.status !== 0) process.exit(result.status ?? 1);
+
+const packageRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+const sourceDir = path.resolve(packageRoot, "../../admin-console/public/what-helps-me");
+const targetDir = path.resolve(packageRoot, "dist/admin-console/public/what-helps-me");
+await rm(targetDir, { recursive: true, force: true });
+await mkdir(path.dirname(targetDir), { recursive: true });
+await cp(sourceDir, targetDir, { recursive: true });

package/src/access-authorization-probe.ts

@@ -1,6 +1,7 @@
 import {
   getOperation,
   operationRequiresAuthorizedNamespace,
+  operationUsesPrincipalNamespace,
   OPERATION_NAMES,
   type OperationName,
 } from "./access-boundary.js";
@@ -17,6 +18,11 @@ const UNRESOLVABLE_RESOURCE_OPERATIONS = new Set<OperationName>([
   "chat_events",
 ]);
 
+const HELPER_ONLY_OPERATIONS = new Set<OperationName>([
+  "support_passport_grant_read",
+  "support_passport_grant_ask",
+]);
+
 export interface AuthorizationProbeResponse {
   readonly authorized: true;
   readonly operations: readonly OperationName[];
@@ -32,7 +38,10 @@ export function probeOperationAuthorization(
 ): AuthorizationProbeResponse {
   const operations: OperationName[] = [];
   for (const candidate of requestedOperations) {
-    if (!OPERATION_NAMES.includes(candidate as OperationName)) {
+    if (
+      !OPERATION_NAMES.includes(candidate as OperationName) ||
+      HELPER_ONLY_OPERATIONS.has(candidate as OperationName)
+    ) {
       throw new EngramAccessInputError(`unsupported operation: ${candidate}`);
     }
     const operation = candidate as OperationName;
@@ -46,7 +55,9 @@ export function probeOperationAuthorization(
   for (const operation of operations) {
     const boundOperation = getOperation(operation);
     if (!boundOperation) {
-      throw new Error(`authorization probe operation is not registered: ${operation}`);
+      throw new Error(
+        `authorization probe operation is not registered: ${operation}`,
+      );
     }
     assertOperationAuthorizationAllowed(capabilities, boundOperation.spec);
   }
@@ -70,3 +81,10 @@ export function authorizationProbeNamespaces(
   );
   return namespaceOperations.length > 0 ? [requestedNamespace] : [];
 }
+
+/** Whether a probe must resolve the authenticated principal's owner namespace. */
+export function authorizationProbeRequiresPrincipalNamespace(
+  operations: readonly OperationName[],
+): boolean {
+  return operations.some(operationUsesPrincipalNamespace);
+}

package/src/access-boundary.ts

@@ -151,6 +151,19 @@ export const OPERATION_NAMES = [
   "console_state",
   "dreams_status",
   "dreams_run",
+  "support_passport_memory_preview",
+  "support_passport_cards_list",
+  "support_passport_draft_create",
+  "support_passport_drafts_generate",
+  "support_passport_card_replace",
+  "support_passport_card_approve",
+  "support_passport_card_reject",
+  "support_passport_card_withdraw",
+  "support_passport_grant_create",
+  "support_passport_grants_list",
+  "support_passport_grant_revoke",
+  "support_passport_grant_read",
+  "support_passport_grant_ask",
   // HTTP-only routes (no direct MCP tool equivalent).
   "adapters_status",
   "offline_sync_snapshot",
@@ -200,6 +213,20 @@ const IMPLICIT_HTTP_NAMESPACE_OPERATIONS = new Set<OperationName>([
   "citations_observed",
 ]);
 
+const PRINCIPAL_NAMESPACE_OPERATIONS = new Set<OperationName>([
+  "support_passport_memory_preview",
+  "support_passport_cards_list",
+  "support_passport_draft_create",
+  "support_passport_drafts_generate",
+  "support_passport_card_replace",
+  "support_passport_card_approve",
+  "support_passport_card_reject",
+  "support_passport_card_withdraw",
+  "support_passport_grant_create",
+  "support_passport_grants_list",
+  "support_passport_grant_revoke",
+]);
+
 // ---------------------------------------------------------------------------
 // Operation context — what every handler receives
 // ---------------------------------------------------------------------------
@@ -460,6 +487,11 @@ export function operationRequiresAuthorizedNamespace(name: OperationName): boole
   return objectSchema instanceof z.ZodObject && Object.hasOwn(objectSchema.shape, "namespace");
 }
 
+/** Whether an operation resolves its namespace from the authenticated principal. */
+export function operationUsesPrincipalNamespace(name: OperationName): boolean {
+  return PRINCIPAL_NAMESPACE_OPERATIONS.has(name);
+}
+
 /** All registered operation names. */
 export function listRegisteredOperations(): readonly OperationName[] {
   return [...registry.keys()];