@remnic/core 9.6.0 → 9.6.2

package/dist/{chunk-Y7UNNAZD.js → chunk-7ZYBDQ7V.js}

@@ -1,7 +1,7 @@
 import {
   StorageManager,
   normalizeEntityName
-} from "./chunk-SVOHGUMI.js";
+} from "./chunk-H4FHR4UM.js";
 import {
   serializeMutations
 } from "./chunk-LTJAMRGI.js";
@@ -956,4 +956,4 @@ export {
   resolveBriefingSaveDir,
   briefingFilename
 };
-//# sourceMappingURL=chunk-Y7UNNAZD.js.map
+//# sourceMappingURL=chunk-7ZYBDQ7V.js.map

package/dist/{chunk-2PRQG7PV.js → chunk-AJVLDJU6.js}

@@ -83,4 +83,4 @@ export {
   parseIsoTimestamp,
   validateReplayTurn
 };
-//# sourceMappingURL=chunk-2PRQG7PV.js.map
+//# sourceMappingURL=chunk-AJVLDJU6.js.map

package/dist/chunk-AJVLDJU6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/replay/types.ts"],"sourcesContent":["import { parseIsoUtcTimestamp } from \"../utils/iso-timestamp.js\";\nimport type { SourceConnectorProvenance } from \"../types.js\";\n\nexport type ReplaySource = \"openclaw\" | \"claude\" | \"chatgpt\";\nexport type ReplayRole = \"user\" | \"assistant\";\n\nexport interface ReplayTurn extends SourceConnectorProvenance {\n  source: ReplaySource;\n  sessionKey: string;\n  role: ReplayRole;\n  content: string;\n  timestamp: string;\n  sourceValidAt?: string;\n  externalId?: string;\n  metadata?: Record<string, unknown>;\n  parts?: import(\"../message-parts/index.js\").LcmMessagePartInput[];\n  rawContent?: unknown;\n  sourceFormat?: import(\"../message-parts/index.js\").MessagePartSourceFormat;\n}\n\nexport interface ReplayWarning {\n  code: string;\n  message: string;\n  index?: number;\n}\n\nexport interface ReplayValidationIssue {\n  code: string;\n  message: string;\n  index?: number;\n}\n\nexport interface ReplayParseOptions {\n  from?: string;\n  to?: string;\n  defaultSessionKey?: string;\n  strict?: boolean;\n}\n\nexport interface ReplayParseResult {\n  turns: ReplayTurn[];\n  warnings: ReplayWarning[];\n}\n\nexport interface ReplayNormalizer {\n  source: ReplaySource;\n  parse(input: unknown, options?: ReplayParseOptions): Promise<ReplayParseResult> | ReplayParseResult;\n}\n\nconst VALID_SOURCES: ReadonlySet<string> = new Set([\"openclaw\", \"claude\", \"chatgpt\"]);\nconst VALID_ROLES: ReadonlySet<string> = new Set([\"user\", \"assistant\"]);\nexport const REPLAY_UNKNOWN_SESSION_KEY = \"replay:unknown\";\n\nexport function isReplaySource(value: unknown): value is ReplaySource {\n  return typeof value === \"string\" && VALID_SOURCES.has(value);\n}\n\nexport function isReplayRole(value: unknown): value is ReplayRole {\n  return typeof value === \"string\" && VALID_ROLES.has(value);\n}\n\nexport function normalizeReplaySessionKey(value: unknown): string {\n  if (typeof value !== \"string\") return REPLAY_UNKNOWN_SESSION_KEY;\n  const trimmed = value.trim();\n  return trimmed.length > 0 ? trimmed : REPLAY_UNKNOWN_SESSION_KEY;\n}\n\n/**\n * Strict UTC-only ISO-8601 parser used by the replay pipeline.\n *\n * Delegates to the shared parser in `utils/iso-timestamp.ts` — do not\n * reimplement locally; extend that helper instead. Replay intentionally\n * rejects timezone-offset timestamps to keep canonical form consistent\n * across recorded transcripts.\n */\nexport function parseIsoTimestamp(value: string): number | null {\n  return parseIsoUtcTimestamp(value);\n}\n\nexport function validateReplayTurn(turn: ReplayTurn, index?: number): ReplayValidationIssue[] {\n  const issues: ReplayValidationIssue[] = [];\n  if (!turn || typeof turn !== \"object\") {\n    issues.push({\n      code: \"turn.invalid\",\n      message: \"Replay turn must be an object.\",\n      index,\n    });\n    return issues;\n  }\n\n  if (!isReplayRole(turn.role)) {\n    issues.push({\n      code: \"turn.role.invalid\",\n      message: `Replay role must be 'user' or 'assistant', received '${String(turn.role)}'.`,\n      index,\n    });\n  }\n\n  if (!isReplaySource(turn.source)) {\n    issues.push({\n      code: \"turn.source.invalid\",\n      message: `Replay source must be 'openclaw', 'claude', or 'chatgpt', received '${String(turn.source)}'.`,\n      index,\n    });\n  }\n\n  if (!turn.sessionKey || typeof turn.sessionKey !== \"string\" || turn.sessionKey.trim().length === 0) {\n    issues.push({\n      code: \"turn.sessionKey.invalid\",\n      message: \"Replay sessionKey is required.\",\n      index,\n    });\n  }\n\n  if (!turn.content || typeof turn.content !== \"string\" || turn.content.trim().length === 0) {\n    issues.push({\n      code: \"turn.content.invalid\",\n      message: \"Replay content must be a non-empty string.\",\n      index,\n    });\n  }\n\n  if (!turn.timestamp || typeof turn.timestamp !== \"string\" || parseIsoTimestamp(turn.timestamp) === null) {\n    issues.push({\n      code: \"turn.timestamp.invalid\",\n      message: `Replay timestamp must be a valid ISO timestamp, received '${String(turn.timestamp)}'.`,\n      index,\n    });\n  }\n\n  if (\n    turn.sourceValidAt !== undefined &&\n    (typeof turn.sourceValidAt !== \"string\" ||\n      parseIsoTimestamp(turn.sourceValidAt) === null)\n  ) {\n    issues.push({\n      code: \"turn.sourceValidAt.invalid\",\n      message: `Replay sourceValidAt must be a valid ISO timestamp when provided, received '${String(turn.sourceValidAt)}'.`,\n      index,\n    });\n  }\n\n  return issues;\n}\n"],"mappings":";;;;;AAiDA,IAAM,gBAAqC,oBAAI,IAAI,CAAC,YAAY,UAAU,SAAS,CAAC;AACpF,IAAM,cAAmC,oBAAI,IAAI,CAAC,QAAQ,WAAW,CAAC;AAC/D,IAAM,6BAA6B;AAEnC,SAAS,eAAe,OAAuC;AACpE,SAAO,OAAO,UAAU,YAAY,cAAc,IAAI,KAAK;AAC7D;AAEO,SAAS,aAAa,OAAqC;AAChE,SAAO,OAAO,UAAU,YAAY,YAAY,IAAI,KAAK;AAC3D;AAEO,SAAS,0BAA0B,OAAwB;AAChE,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAUO,SAAS,kBAAkB,OAA8B;AAC9D,SAAO,qBAAqB,KAAK;AACnC;AAEO,SAAS,mBAAmB,MAAkB,OAAyC;AAC5F,QAAM,SAAkC,CAAC;AACzC,MAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT;AAAA,IACF,CAAC;AACD,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,aAAa,KAAK,IAAI,GAAG;AAC5B,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,wDAAwD,OAAO,KAAK,IAAI,CAAC;AAAA,MAClF;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,CAAC,eAAe,KAAK,MAAM,GAAG;AAChC,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,uEAAuE,OAAO,KAAK,MAAM,CAAC;AAAA,MACnG;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,CAAC,KAAK,cAAc,OAAO,KAAK,eAAe,YAAY,KAAK,WAAW,KAAK,EAAE,WAAW,GAAG;AAClG,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,CAAC,KAAK,WAAW,OAAO,KAAK,YAAY,YAAY,KAAK,QAAQ,KAAK,EAAE,WAAW,GAAG;AACzF,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,CAAC,KAAK,aAAa,OAAO,KAAK,cAAc,YAAY,kBAAkB,KAAK,SAAS,MAAM,MAAM;AACvG,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,6DAA6D,OAAO,KAAK,SAAS,CAAC;AAAA,MAC5F;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MACE,KAAK,kBAAkB,WACtB,OAAO,KAAK,kBAAkB,YAC7B,kBAAkB,KAAK,aAAa,MAAM,OAC5C;AACA,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,+EAA+E,OAAO,KAAK,aAAa,CAAC;AAAA,MAClH;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO;AACT;","names":[]}

package/dist/{chunk-LR5DZ56F.js → chunk-AXALUFAH.js}

@@ -1,6 +1,6 @@
 import {
   runPostConsolidationMaterialize
-} from "./chunk-JSNVWNGX.js";
+} from "./chunk-KVSVVKHA.js";
 import {
   discoverMemoryExtensions,
   renderExtensionsBlock,
@@ -220,4 +220,4 @@ export {
   buildExtensionsBlockForConsolidation,
   materializeAfterSemanticConsolidation
 };
-//# sourceMappingURL=chunk-LR5DZ56F.js.map
+//# sourceMappingURL=chunk-AXALUFAH.js.map

package/dist/{chunk-AYZJID4S.js → chunk-B5GBWBCZ.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-UI4FVU6T.js";
 import {
   StorageManager
-} from "./chunk-SVOHGUMI.js";
+} from "./chunk-H4FHR4UM.js";
 import {
   parseContinuityImprovementLoops
 } from "./chunk-LDXUBPMO.js";
@@ -1276,4 +1276,4 @@ export {
   defaultTierMigrationCycleBudget,
   CompoundingEngine
 };
-//# sourceMappingURL=chunk-AYZJID4S.js.map
+//# sourceMappingURL=chunk-B5GBWBCZ.js.map

package/dist/{chunk-TLUDFPZL.js → chunk-CAZ3Z5M6.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-SFQ6QNL7.js";
 import {
   StorageManager
-} from "./chunk-SVOHGUMI.js";
+} from "./chunk-H4FHR4UM.js";
 import {
   buildLifecycleEventsForMemory,
   sortMemoryLifecycleEvents
@@ -115,4 +115,4 @@ export {
   backupExistingLedger,
   rebuildMemoryLifecycleLedger
 };
-//# sourceMappingURL=chunk-TLUDFPZL.js.map
+//# sourceMappingURL=chunk-CAZ3Z5M6.js.map

package/dist/{chunk-RGK27ELN.js → chunk-DEKIXXIG.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-ZBJMUXZH.js";
 import {
   StorageManager
-} from "./chunk-SVOHGUMI.js";
+} from "./chunk-H4FHR4UM.js";
 import {
   getCachedRuleMemories,
   setCachedRuleMemories
@@ -117,4 +117,4 @@ export {
   compareVerifiedSemanticRuleResults,
   searchVerifiedSemanticRules
 };
-//# sourceMappingURL=chunk-RGK27ELN.js.map
+//# sourceMappingURL=chunk-DEKIXXIG.js.map

package/dist/{chunk-2KK5WNQB.js → chunk-DQ42IQSK.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-SOBJ6NEY.js";
 import {
   summarizeDisclosureTokens
-} from "./chunk-6MMONPHM.js";
+} from "./chunk-W2AHSCKY.js";
 import {
   summarizeRetrievedMemoryProvenance
 } from "./chunk-I4WBNM3M.js";
@@ -587,4 +587,4 @@ export {
   renderRecallExplain,
   parseRecallExplainFormat
 };
-//# sourceMappingURL=chunk-2KK5WNQB.js.map
+//# sourceMappingURL=chunk-DQ42IQSK.js.map

package/dist/{chunk-UFUKHGZD.js → chunk-F4I5NYBI.js}

@@ -13,7 +13,7 @@ import {
   processChatMessage,
   sessionBelongsToPrincipal,
   subscribeChatTranscript
-} from "./chunk-PCLIWBGD.js";
+} from "./chunk-7ARV32PI.js";
 import {
   validateRequest
 } from "./chunk-UPSAT4PY.js";
@@ -28,7 +28,7 @@ import {
 } from "./chunk-35NN3ZFA.js";
 import {
   getOperation
-} from "./chunk-4GNEDXDI.js";
+} from "./chunk-M67TLMP6.js";
 import {
   assertOperationAllowed,
   enforceNamespaceAllowList,
@@ -38,7 +38,7 @@ import {
 import {
   CorrectionContractError,
   EngramAccessInputError
-} from "./chunk-H2DXDQCQ.js";
+} from "./chunk-VRJG3HIZ.js";
 import {
   isTrustZoneName
 } from "./chunk-JGSKJHF7.js";
@@ -50,7 +50,7 @@ import {
 } from "./chunk-DEUNUKTD.js";
 import {
   isRecallDisclosure
-} from "./chunk-JS2HKKOK.js";
+} from "./chunk-3AC5UYKI.js";
 import {
   expandTildePath
 } from "./chunk-EYIEWJNI.js";
@@ -1277,7 +1277,10 @@ var EngramAccessHttpServer = class {
           idempotencyKey: body.idempotencyKey,
           // Forward cwd/projectTag for auto git-context resolution (issue #569).
           cwd: body.cwd,
-          projectTag: body.projectTag
+          projectTag: body.projectTag,
+          // Phase 1 provenance: server-resolved connector identity from the
+          // bearer token (REST path, mirroring the MCP tools/call dispatch).
+          sourceConnector: this.resolveConnector(req)
         },
         // Enforce the write-quota INSIDE the service's idempotency lock
         // (beforeExecute, only on a real miss). A retried observe that hits the
@@ -1354,7 +1357,10 @@ var EngramAccessHttpServer = class {
       const output = await op.run(envelope, {
         service: this.service,
         authenticatedPrincipal: this.resolveRequestPrincipal(req),
-        hooks: { enforceWriteQuota: () => this.ensureWriteRateLimitAvailable() }
+        hooks: { enforceWriteQuota: () => this.ensureWriteRateLimitAvailable() },
+        // Phase 1 provenance: server-resolved connector identity from the
+        // bearer token (REST path, mirroring the MCP tools/call dispatch).
+        sourceConnector: this.resolveConnector(req)
       });
       const response = output.result;
       if (this.shouldCountWriteRateLimit(response)) {
@@ -1375,7 +1381,8 @@ var EngramAccessHttpServer = class {
       }
       const output = await op.run(this.gatedBodyNamespace(req, body), {
         service: this.service,
-        authenticatedPrincipal: this.resolveRequestPrincipal(req)
+        authenticatedPrincipal: this.resolveRequestPrincipal(req),
+        sourceConnector: this.resolveConnector(req)
       });
       if (isWriteSubcommand) {
         this.recordWriteRateLimitHit();
@@ -1395,7 +1402,8 @@ var EngramAccessHttpServer = class {
       }
       const output = await op.run(this.gatedBodyNamespace(req, body), {
         service: this.service,
-        authenticatedPrincipal: this.resolveRequestPrincipal(req)
+        authenticatedPrincipal: this.resolveRequestPrincipal(req),
+        sourceConnector: this.resolveConnector(req)
       });
       if (isWriteSubcommand) {
         this.recordWriteRateLimitHit();
@@ -1484,7 +1492,10 @@ var EngramAccessHttpServer = class {
         ttl: body.ttl,
         sourceReason: body.sourceReason,
         cwd: body.cwd,
-        projectTag: body.projectTag
+        projectTag: body.projectTag,
+        // Phase 1 provenance: server-resolved connector identity from the
+        // bearer token (REST path, mirroring the MCP tools/call dispatch).
+        sourceConnector: this.resolveConnector(req)
       };
       const response = await this.service.suggestionSubmit(request, {
         enforceWriteQuota: () => this.ensureWriteRateLimitAvailable()
@@ -2447,7 +2458,8 @@ var EngramAccessHttpServer = class {
       sessionKeyOverride: requestIdentity.sessionKey,
       sessionId,
       correlationId: mcpCorrelationId,
-      enforceWriteQuota: observeSelfEnforcesQuota ? () => this.ensureWriteRateLimitAvailable() : void 0
+      enforceWriteQuota: observeSelfEnforcesQuota ? () => this.ensureWriteRateLimitAvailable() : void 0,
+      sourceConnector: this.resolveConnector(req)
     });
     if (isMcpWrite && response !== null) {
       const result = response.result;
@@ -2727,13 +2739,36 @@ var EngramAccessHttpServer = class {
     return this.resolveAuthorizedEntry(req, pathname) !== null;
   }
   /**
-   * Resolve the presenting token's entry for an authorized request, or null.
-   * Captures the matched entry — including its capabilities record — so the
-   * op/namespace capability enforcement (issue #1837) uses the SAME entry
-   * that validated. Static operator tokens (`authToken`/`authTokens`) and
-   * the string-token getter carry no capabilities ⇒ unrestricted.
+   * Per-request cache of the matched token entry (the entry whose token
+   * matched the bearer credential, BEFORE any path-policy check). Pinning
+   * the entry to the first read means authorization, capability
+   * enforcement, and connector provenance all observe the SAME token-store
+   * snapshot — a rotation between the auth check and the write handler can
+   * no longer stamp the wrong connector (PR #1852 race).
    */
-  resolveAuthorizedEntry(req, pathname) {
+  matchedEntryCache = /* @__PURE__ */ new WeakMap();
+  /**
+   * Resolve the matched token entry for this request, caching the result so
+   * every downstream consumer (authorization, capability enforcement,
+   * connector provenance) sees the same snapshot entry (PR #1852).
+   */
+  resolveMatchedEntry(req, pathname) {
+    if (this.matchedEntryCache.has(req)) {
+      return this.matchedEntryCache.get(req) ?? null;
+    }
+    const entry = this.computeMatchedEntry(req, pathname);
+    this.matchedEntryCache.set(req, entry);
+    return entry;
+  }
+  /**
+   * Find the entry whose token matches the request's bearer credential.
+   * Static operator tokens (`authToken`/`authTokens`) and the string-token
+   * getter carry no capabilities ⇒ unrestricted. Dynamic entry-based tokens
+   * capture connector identity and capabilities. A corrupt or unreadable
+   * token store returns null rather than propagating an error — provenance
+   * must never block an already-authenticated request.
+   */
+  computeMatchedEntry(req, pathname) {
     if (!this.authToken && this.authTokens.length === 0 && !this.authTokensGetter && !this.authTokenEntriesGetter) {
       return null;
     }
@@ -2767,12 +2802,12 @@ var EngramAccessHttpServer = class {
       if (this.timingSafeStringEqual(token, valid)) return { token: valid };
     }
     if (this.authTokenEntriesGetter) {
-      for (const entry of this.authTokenEntriesGetter()) {
-        if (!this.timingSafeStringEqual(token, entry.token)) continue;
-        const matched = { token: entry.token, connector: entry.connector, capabilities: entry.capabilities };
-        if (!this.tokenPathPolicy) return matched;
-        if (typeof entry.connector !== "string" || entry.connector.length === 0) return null;
-        return this.tokenPathPolicy(entry.connector, pathname) ? matched : null;
+      try {
+        for (const entry of this.authTokenEntriesGetter()) {
+          if (!this.timingSafeStringEqual(token, entry.token)) continue;
+          return { token: entry.token, connector: entry.connector, capabilities: entry.capabilities };
+        }
+      } catch {
       }
       return null;
     }
@@ -2783,21 +2818,31 @@ var EngramAccessHttpServer = class {
     }
     return null;
   }
-  /** Cache for per-request capability resolution (avoids re-resolving). */
-  capabilityCache = /* @__PURE__ */ new WeakMap();
+  /**
+   * Resolve the presenting token's entry for an authorized request, or null.
+   * Applies the path-policy gate (if configured) on top of the per-request
+   * cached matched entry so the identity that is authorized is the same one
+   * whose connector later stamps frontmatter. Static operator tokens and the
+   * string-token getter carry no capabilities ⇒ unrestricted.
+   */
+  resolveAuthorizedEntry(req, pathname) {
+    const matched = this.resolveMatchedEntry(req, pathname);
+    if (!matched) return null;
+    if ("connector" in matched && this.tokenPathPolicy) {
+      if (typeof matched.connector !== "string" || matched.connector.length === 0) return null;
+      return this.tokenPathPolicy(matched.connector, pathname) ? matched : null;
+    }
+    return matched;
+  }
   /**
    * Resolve the presenting token's capabilities for this request, or
    * undefined when the token is unrestricted (legacy / static operator /
-   * explicit-unrestricted record). Cached per-request. `null` sentinel
-   * distinguishes "resolved as unrestricted" from "not yet resolved".
+   * explicit-unrestricted record). Reads from the per-request cached matched
+   * entry so capabilities come from the same snapshot as authorization and
+   * connector provenance (PR #1852).
    */
   resolveTokenCapabilities(req, pathname) {
-    if (this.capabilityCache.has(req)) {
-      return this.capabilityCache.get(req) ?? void 0;
-    }
-    const caps = this.resolveAuthorizedEntry(req, pathname)?.capabilities;
-    this.capabilityCache.set(req, caps ?? null);
-    return caps;
+    return this.resolveMatchedEntry(req, pathname)?.capabilities;
   }
   /**
    * Enforce the presenting token's ops allow-list for an HTTP route that
@@ -2822,6 +2867,17 @@ var EngramAccessHttpServer = class {
       );
     }
   }
+  /**
+   * Resolve the connector identity for the request's bearer token (Phase 1
+   * provenance). Reuses the per-request cached matched entry so a token
+   * rotation between the auth check and the write handler cannot stamp the
+   * wrong connector (PR #1852 race). Returns `undefined` for operator-
+   * supplied static tokens or when no entry getter is configured — those
+   * writes are operator-initiated.
+   */
+  resolveConnector(req) {
+    return this.resolveMatchedEntry(req)?.connector;
+  }
   timingSafeStringEqual(a, b) {
     const left = this.encodeSecret(a);
     const right = this.encodeSecret(b);
@@ -2898,4 +2954,4 @@ function positiveIntQueryParam(value, label) {
 export {
   EngramAccessHttpServer
 };
-//# sourceMappingURL=chunk-UFUKHGZD.js.map
+//# sourceMappingURL=chunk-F4I5NYBI.js.map