@remnic/core 9.63.9 → 9.63.11

package/dist/{chunk-LTYH2L6E.js → chunk-NWHKHBL4.js}

@@ -12,16 +12,16 @@ import {
 } from "./chunk-3HSRWJTC.js";
 import {
   handleSupportPassportOwnerHttp
-} from "./chunk-O52TB5SL.js";
+} from "./chunk-IUSV4XJC.js";
 import {
   buildSupportPassportPublicRequestHandler
-} from "./chunk-N7V3P4V5.js";
+} from "./chunk-VCEE4YNA.js";
 import {
   nonEmptyQueryParam,
   optionalNamespaceKindQueryParam,
   optionalQueryString,
   positiveIntQueryParam
-} from "./chunk-JPWSYHLB.js";
+} from "./chunk-YGSDWO3U.js";
 import {
   EngramMcpServer,
   MCP_SUPPORTED_PROTOCOL_VERSIONS,
@@ -31,13 +31,10 @@ import {
   processChatMessage,
   sessionBelongsToPrincipal,
   subscribeChatTranscript
-} from "./chunk-PQHNZ63P.js";
+} from "./chunk-R5AWIILH.js";
 import {
   RelayMissionStoreError
-} from "./chunk-5TF5STAV.js";
-import {
-  validateRequest
-} from "./chunk-DGUVXXAU.js";
+} from "./chunk-JASFZQ76.js";
 import {
   executeResolution,
   isValidResolutionVerb
@@ -47,6 +44,9 @@ import {
   listPairs,
   readPair
 } from "./chunk-35NN3ZFA.js";
+import {
+  validateRequest
+} from "./chunk-IRXMJLTW.js";
 import {
   maybeHandleLifecycleFlush
 } from "./chunk-TIDEL77O.js";
@@ -61,12 +61,12 @@ import {
   authorizationProbeNamespaces,
   authorizationProbeRequiresPrincipalNamespace,
   probeOperationAuthorization
-} from "./chunk-PHKU6BZ2.js";
+} from "./chunk-36XS2ASP.js";
 import {
   CorrectionContractError,
   getOperation,
   resolveQueryNamespaceWritablePreflight
-} from "./chunk-BPQ7L27U.js";
+} from "./chunk-YI25J2JD.js";
 import {
   isTrustZoneName
 } from "./chunk-5QZR2RA3.js";
@@ -1099,7 +1099,6 @@ var EngramAccessHttpServer = class extends SupportPassportAccessHttpBase {
     if (req.method === "POST" && pathname === "/engram/v1/recall") {
       this.enforceTokenOp("recall");
       const body = await this.readValidatedBody(req, "recall");
-      const codingContext = "codingContext" in body ? body.codingContext : void 0;
       const disclosure = this.resolveRecallDisclosure(body.disclosure, parsed);
       const asOfQueryRaw = parsed.searchParams.get("as_of");
       const bodyHasAsOf = typeof body.asOf === "string" && body.asOf.length > 0;
@@ -1139,31 +1138,28 @@ var EngramAccessHttpServer = class extends SupportPassportAccessHttpBase {
         );
       }
       const includeLowConfidence = bodyIncludeLowConfidence === true || bodyIncludeLowConfidence === void 0 && queryIncludeLowConfidence === "true";
-      const response = await this.service.recall({
-        query: body.query ?? "",
-        sessionKey: body.sessionKey,
-        authenticatedPrincipal: this.resolveRequestPrincipal(req),
-        sourceConnector: this.resolveConnector(req),
-        idempotencyKey: body.idempotencyKey,
-        namespace: this.resolveNamespace(req, body.namespace),
-        topK: body.topK,
-        mode: body.mode,
-        includeDebug: body.includeDebug === true,
-        // Forward the validated disclosure depth to the service layer
-        // (issue #677).  The zod schema accepts/rejects body values;
-        // `resolveRecallDisclosure()` validates the query-param fallback.
-        disclosure,
-        codingContext,
-        // Forward cwd/projectTag for auto git-context resolution (issue #569).
-        cwd: body.cwd,
-        projectTag: body.projectTag,
-        ...asOf !== void 0 ? { asOf } : {},
-        ...tags !== void 0 ? { tags } : {},
-        ...tagMatch !== void 0 ? { tagMatch } : {},
-        ...includeLowConfidence ? { includeLowConfidence: true } : {},
-        abortSignal
-      });
-      this.respondJson(res, 200, response);
+      const op = getOperation("recall");
+      if (!op) {
+        throw new EngramAccessInputError("access-boundary: operation not registered: recall");
+      }
+      const output = await op.run(
+        {
+          ...body,
+          namespace: this.resolveNamespace(req, body.namespace),
+          ...disclosure !== void 0 ? { disclosure } : {},
+          ...asOf !== void 0 ? { asOf } : {},
+          ...tags !== void 0 ? { tags } : {},
+          ...tagMatch !== void 0 ? { tagMatch } : {},
+          ...includeLowConfidence ? { includeLowConfidence: true } : {}
+        },
+        {
+          service: this.service,
+          authenticatedPrincipal: this.resolveRequestPrincipal(req),
+          sourceConnector: this.resolveConnector(req),
+          ...abortSignal ? { abortSignal } : {}
+        }
+      );
+      this.respondJson(res, 200, output.result);
       return;
     }
     if (req.method === "POST" && pathname === "/engram/v1/coding-context") {
@@ -1628,41 +1624,25 @@ var EngramAccessHttpServer = class extends SupportPassportAccessHttpBase {
     if (req.method === "POST" && pathname === "/engram/v1/observe") {
       this.enforceTokenOp("observe");
       const body = await this.readValidatedBody(req, "observe");
-      const response = await this.service.observe(
+      const op = getOperation("observe");
+      if (!op) {
+        throw new EngramAccessInputError("access-boundary: operation not registered: observe");
+      }
+      const output = await op.run(
+        { ...body, namespace: this.resolveNamespace(req, body.namespace) },
         {
-          sessionKey: body.sessionKey,
-          messages: body.messages.map((message) => ({
-            role: message.role,
-            content: message.content,
-            sourceFormat: message.sourceFormat ?? void 0,
-            rawContent: message.rawContent ?? void 0,
-            parts: message.parts ?? void 0
-          })),
-          namespace: this.resolveNamespace(req, body.namespace),
+          service: this.service,
           authenticatedPrincipal: this.resolveRequestPrincipal(req),
-          skipExtraction: body.skipExtraction === true,
-          // Issue #1649: optional server-side dedup key for retried POSTs.
-          idempotencyKey: body.idempotencyKey,
-          // Forward cwd/projectTag for auto git-context resolution (issue #569).
-          cwd: body.cwd,
-          projectTag: body.projectTag,
+          hooks: { enforceWriteQuota: () => this.ensureWriteRateLimitAvailable(req) },
           // Phase 1 provenance: server-resolved connector identity from the
           // bearer token (REST path, mirroring the MCP tools/call dispatch).
           sourceConnector: this.resolveConnector(req)
-        },
-        // Enforce the write-quota INSIDE the service's idempotency lock
-        // (beforeExecute, only on a real miss). A retried observe that hits the
-        // replay path must NOT be rejected with 429 — that is exactly the
-        // response-lost-after-process case the dedup exists for. The original
-        // attempt may have consumed the last quota slot; the retry returns the
-        // cached response without requiring another. Matches memory_store's
-        // hook-in-the-lock pattern (#1434 invariant).
-        { enforceWriteQuota: () => this.ensureWriteRateLimitAvailable(req) }
+        }
       );
-      if (this.shouldCountWriteRateLimit(response)) {
+      if (this.shouldCountWriteRateLimit(output.result)) {
         this.recordWriteRateLimitHit(req);
       }
-      this.respondJson(res, 202, response);
+      this.respondJson(res, 202, output.result);
       return;
     }
     if (req.method === "POST" && pathname === "/engram/v1/lcm/search") {
@@ -3394,4 +3374,4 @@ export {
   resolveDefaultAdminConsolePublicDir,
   EngramAccessHttpServer
 };
-//# sourceMappingURL=chunk-LTYH2L6E.js.map
+//# sourceMappingURL=chunk-NWHKHBL4.js.map