@remnic/core 9.65.1 → 9.65.2

package/dist/access-boundary.d.ts

@@ -1,7 +1,7 @@
-import { z } from 'zod';
-import { f as EngramAccessService } from './access-service-B1Lbb-nQ.js';
-import './catalog-DjVhJoRM.js';
-import './types-BrEzuxPA.js';
+import 'zod';
+export { B as BoundOperation, N as OPERATION_NAMES, bY as OperationContext, bZ as OperationHooks, O as OperationName, b_ as OperationSpec, b$ as __resetRegistryForTest, c0 as coerceBooleanLike, c1 as coercePositiveInteger, c2 as defineOperation, c3 as formatZodIssues, c4 as getOperation, c5 as listRegisteredOperations, c6 as normalizeOptionalPath, c7 as operationRequiresAuthorizedNamespace, c8 as operationUsesPrincipalNamespace } from './access-service-Bke1alZO.js';
+import './catalog-DV6qnbr7.js';
+import './types-Pi0lfaEt.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './types-CM86alG1.js';
@@ -10,11 +10,11 @@ import './external-wiki-config.js';
 import './contradiction-config.js';
 import './graph-path-scoring-config.js';
 import './types-continuity.js';
-import './access-namespace-preflight-BKUnKsBv.js';
+import './access-namespace-preflight-Dhvcl-T0.js';
 import './access-token-capabilities.js';
 import 'node:async_hooks';
-import './scope-profiles-CEMZz0t5.js';
-import './storage-B9lbNTYE.js';
+import './scope-profiles-B9xMoFO-.js';
+import './storage-CcKmEjL8.js';
 import './corpus-read-cancellation.js';
 import './artifact-search.js';
 import './entity-id-normalization.js';
@@ -40,7 +40,7 @@ import './access-health-types.js';
 import './corpus-watermark.js';
 import './replica-divergence.js';
 import './resolve-auth-token.js';
-import './orchestrator-DzCaxNS4.js';
+import './orchestrator-DyGUC7re.js';
 import './briefing.js';
 import './buffer.js';
 import './extraction-faithfulness.js';
@@ -51,7 +51,7 @@ import './resolve-provider-secret.js';
 import './transcript.js';
 import './session-integrity.js';
 import './summarizer.js';
-import './maintenance-DiSLtVN7.js';
+import './maintenance-jhMpeGne.js';
 import './namespaces/search.js';
 import './compounding/engine.js';
 import './shared-context/manager.js';
@@ -60,7 +60,7 @@ import './utility-runtime.js';
 import './tier-routing.js';
 import './lifecycle.js';
 import './orchestration/compression-guideline-coordinator.js';
-import './semantic-consolidation-D9dYj6vu.js';
+import './semantic-consolidation-C4uykW84.js';
 import './connectors/codex-materialize.js';
 import './logger.js';
 import './embedding-fallback.js';
@@ -84,7 +84,7 @@ import './conversation-index/chunker.js';
 import './conversation-index/backend.js';
 import './faiss-adapter-BHecI1fF.js';
 import './runtime/child-process.js';
-import './dependency-propagation-delivery-Co17gxYb.js';
+import './dependency-propagation-delivery-CsGg-VwS.js';
 import './namespaces/storage.js';
 import './threading.js';
 import './graph-444E-DrF.js';
@@ -96,7 +96,7 @@ import './negative.js';
 import './session-observer-state.js';
 import './semantic-TddhF0y7.js';
 import './replay/types.js';
-import './service-_qgST_0y.js';
+import './service-DCZDZNcV.js';
 import './extraction-judge.js';
 import './lcm/engine.js';
 import './lcm/archive.js';
@@ -126,147 +126,3 @@ import './transfer/capsule-export.js';
 import './transfer/types.js';
 import './transfer/capsule-import.js';
 import './access-errors.js';
-
-/**
- * Single input-validation and error boundary for the CLI/MCP/HTTP access
- * surfaces (issue #1525, epic #1520 Phase 1).
- *
- * Every operation that crosses the access-service facade passes through ONE
- * registry entry: a zod-validated request envelope, a shared error mapper,
- * and the "reject invalid input and list valid options" behavior that
- * CLAUDE.md rules 14/17/24/28/36/48/51 previously had to be re-implemented
- * per handler. The three surfaces become thin adapters — one operation
- * definition, three transports — so a validation fix lands everywhere at
- * once.
- *
- * Host-agnostic (rule 31): operation names carry no `openclaw-*`/`engram-*`
- * prefix. Session/namespace tenancy stays in the handler layer (resolved via
- * ScopePlan #1521); the boundary validates SHAPE, not tenancy.
- */
-
-/**
- * Canonical operation ids. One id is shared by the MCP tool, the HTTP route,
- * and the CLI command that expose the same operation. Add to this union as
- * each domain-group migration PR (memory ops → connectors → namespaces …)
- * lands; the fitness test in `access-surface-catalog.test.ts` treats the
- * registered set as the migration state.
- */
-declare const OPERATION_NAMES: readonly ["memory_get", "memory_search", "external_wiki_search", "memory_store", "coding_decision", "coding_architecture", "codegraph_index", "codegraph_list_projects", "codegraph_delete_project", "codegraph_index_status", "codegraph_search_graph", "codegraph_trace_path", "codegraph_detect_changes", "codegraph_query_graph", "codegraph_get_schema", "codegraph_get_snippet", "codegraph_get_architecture", "codegraph_search_code", "codegraph_manage_adr", "codegraph_ingest_traces", "memory_correct_plan", "memory_correct_apply", "coding_delta", "recall", "recall_explain", "set_coding_context", "recall_tier_explain", "recall_xray", "who_knows", "namespace_writable", "wearables_status", "wearables_sync", "transcript_day", "transcript_search", "transcript_memories", "meetings_list", "meetings_get", "meetings_build", "action_confidence", "chatgpt_memory_inspector", "day_summary", "capsule_export", "capsule_import", "capsule_list", "memory_governance_run", "entity_synthesis_run", "procedure_mining_run", "pattern_reinforcement_run", "procedural_stats", "memory_timeline", "suggestion_submit", "entity_get", "review_queue_list", "correction_pending", "observe", "lcm_search", "lcm_compaction_flush", "extraction_force_flush", "lcm_compaction_record", "continuity_audit_generate", "continuity_incident_open", "continuity_incident_close", "continuity_incident_list", "continuity_loop_add_or_update", "continuity_loop_review", "identity_anchor_get", "identity_anchor_update", "memory_identity", "work_task", "work_project", "work_board", "shared_context_write_output", "shared_feedback_record", "shared_priorities_append", "relay_mission_append", "relay_mission_read", "shared_context_cross_signals_run", "shared_context_curate_daily", "compounding_weekly_synthesize", "compounding_promote_candidate", "compression_guidelines_optimize", "compression_guidelines_activate", "memory_profile", "memory_entities_list", "memory_questions", "memory_last_recall", "memory_intent_debug", "memory_qmd_debug", "memory_graph_explain", "graph_snapshot", "memory_feedback", "memory_promote", "memory_outcome", "memory_action_apply", "context_checkpoint", "briefing", "review_list", "review_resolve", "contradiction_scan_run", "memory_summarize_hourly", "conversation_index_update", "profiling_report", "graph_edge_decay_run", "live_connectors_run", "peer_list", "peer_get", "peer_set", "peer_delete", "peer_profile_get", "peer_forget", "console_state", "dreams_status", "dreams_run", "support_passport_memory_preview", "support_passport_cards_list", "support_passport_draft_create", "support_passport_drafts_generate", "support_passport_card_replace", "support_passport_card_approve", "support_passport_card_reject", "support_passport_card_withdraw", "support_passport_grant_create", "support_passport_grants_list", "support_passport_grant_revoke", "support_passport_grant_read", "support_passport_grant_ask", "adapters_status", "offline_sync_snapshot", "offline_sync_snapshot_stream", "offline_sync_files", "offline_sync_file_content", "offline_sync_apply_file_content", "offline_sync_apply", "lcm_status", "memory_list", "recall_timings", "entity_list", "maintenance_status", "quality_status", "trust_zones_status", "trust_zones_records", "review_disposition", "trust_zones_promote", "trust_zones_demo_seed", "citations_observed", "contradiction_detail", "graph_events", "chat_message", "chat_events"];
-/**
- * Canonical operation ids. One id is shared by the MCP tool, the HTTP route,
- * and the CLI command that expose the same operation. Derived from
- * {@link OPERATION_NAMES} (single source of truth) so the runtime catalog
- * used for token-capability validation cannot drift from the type. The
- * fitness test in `access-surface-catalog.test.ts` treats the registered set
- * as the migration state.
- */
-type OperationName = (typeof OPERATION_NAMES)[number];
-/**
- * Per-call context. `service` is the facade the handler delegates to; the
- * boundary never reaches past it. `authenticatedPrincipal` is resolved by
- * the SURFACE (MCP header / HTTP identity / CLI flag) before the boundary
- * runs, so handlers stay principal-source-agnostic. `hooks` carries
- * transport-level callbacks (e.g. HTTP write-quota enforcement) that must
- * fire atomically inside the service call; surfaces that have no such hook
- * leave it undefined.
- */
-interface OperationContext {
-    readonly service: EngramAccessService;
-    readonly authenticatedPrincipal?: string;
-    readonly operatorPrincipal?: string;
-    /** Per-request cancellation supplied by transports that own a request lifecycle. */
-    readonly abortSignal?: AbortSignal;
-    /** Server-resolved connector identity (Phase 1 provenance). Set by the HTTP auth boundary from the matched token's connector; flows to write handlers so frontmatter records which connector submitted the memory. Client-supplied values are always overridden. */
-    readonly sourceConnector?: string;
-    readonly hooks?: OperationHooks;
-}
-/**
- * Transport-level callbacks a handler forwards into the service call. Kept
- * narrow on purpose: the boundary owns validation + dispatch shape, not
- * transport policy. Add fields here only when a surface genuinely needs a
- * callback the service itself consumes.
- */
-interface OperationHooks {
-    /** HTTP write-quota gate; throws to reject the write when exhausted. */
-    readonly enforceWriteQuota?: () => void | Promise<void>;
-    /** Commit-boundary accounting for writes that can fail after durability. */
-    readonly recordWriteCommit?: () => void;
-}
-interface OperationSpec<In, Out> {
-    /** Canonical operation id; matches an {@link OperationName}. */
-    readonly name: OperationName;
-    readonly description: string;
-    /** Zod schema validating the raw request envelope. */
-    readonly schema: z.ZodType<In>;
-    /** Handler invoked with the parsed input; throws EngramAccessInputError for domain faults. */
-    readonly handler: (input: In, ctx: OperationContext) => Promise<Out>;
-    /**
-     * Marks an operation as inherently FLEET-WIDE / global — it runs across ALL
-     * namespaces (or against a single non-namespaced global layer) and carries no
-     * `namespace` argument, so the MCP `tools/call` effective-namespace chokepoint
-     * never applies. When set, {@link defineOperation}'s run wrapper rejects any
-     * namespace-SCOPED token (fail closed) via assertFleetWideOperationAllowed
-     * BEFORE the handler — no side effect on denial. Unrestricted/legacy tokens
-     * (cron, internal callers, no capability record) are unaffected (issue #1850).
-     */
-    readonly fleetWide?: boolean;
-    /**
-     * Alternate op allow-list: when set, the token may invoke this operation if
-     * its ops allow-list permits ANY of these ops (instead of the default rule
-     * that requires the op's own {@link name}). Lets a read-only diagnostic be
-     * granted by the write ops it diagnoses — e.g. `namespace_writable` is
-     * runnable by any token permitted to `observe`/`memory_store`, so a token
-     * minted before the diagnostic op existed can still call it. Unrestricted /
-     * legacy tokens (no ops axis) are unaffected. Keeps the boundary and any HTTP
-     * transport for the same op enforcing ONE policy.
-     */
-    readonly allowedByOps?: readonly OperationName[];
-}
-interface BoundOperation<In = unknown, Out = unknown> {
-    readonly spec: OperationSpec<In, Out>;
-    /** Validate the raw envelope, then invoke the handler. Throws EngramAccessInputError on any validation failure. */
-    readonly run: (rawInput: unknown, ctx: OperationContext) => Promise<Out>;
-}
-/**
- * Coerce boolean-like strings at the edge (rule 36). Accepts actual booleans
- * and the string spellings clients send ("true"/"false"/"1"/"0"/"yes"/"no"/
- * "on"/"off", case-insensitive). Rejects anything else loudly — `Boolean("false")`
- * would silently be `true`, which is the bug rule 36 exists to prevent.
- *
- * `undefined`/`null`/`""` → `undefined`, so callers can keep treating an
- * absent flag as "use the default" without a separate presence check.
- */
-declare function coerceBooleanLike(value: unknown): boolean | undefined;
-/**
- * Coerce + validate a positive integer from a numeric string or number
- * (rule 28). Loosely-typed MCP/CLI clients send `"5"`; `typeof saved === "number"`
- * on read-back would reject it later, so we coerce at the edge and reject
- * booleans/objects loudly (`Number(true) === 1` would silently pass otherwise).
- *
- * `undefined`/`null`/`""` → `undefined`.
- */
-declare function coercePositiveInteger(value: unknown, label: string): number | undefined;
-/**
- * Expand `~` in a path-shaped input (rule 17). Node `fs` does NOT expand `~`;
- * ad-hoc regex drifts. `undefined`/`null`/`""` → `undefined`.
- */
-declare function normalizeOptionalPath(value: unknown): string | undefined;
-/**
- * Turn a zod failure into an {@link EngramAccessInputError} whose message
- * names the offending field and — for enum/union issues — lists the valid
- * options, so the caller can correct rather than guess (rule 51).
- */
-declare function formatZodIssues(error: z.ZodError): string;
-declare function defineOperation<In, Out>(spec: OperationSpec<In, Out>): BoundOperation<In, Out>;
-/** Look up a registered operation by canonical name. */
-declare function getOperation(name: OperationName): BoundOperation | undefined;
-/** Whether a probe must authorize an operation's effective namespace. */
-declare function operationRequiresAuthorizedNamespace(name: OperationName): boolean;
-/** Whether an operation resolves its namespace from the authenticated principal. */
-declare function operationUsesPrincipalNamespace(name: OperationName): boolean;
-/** All registered operation names. */
-declare function listRegisteredOperations(): readonly OperationName[];
-/** Test-only: clear the registry so pilot definitions can be re-registered. */
-declare function __resetRegistryForTest(): void;
-
-export { type BoundOperation, OPERATION_NAMES, type OperationContext, type OperationHooks, type OperationName, type OperationSpec, __resetRegistryForTest, coerceBooleanLike, coercePositiveInteger, defineOperation, formatZodIssues, getOperation, listRegisteredOperations, normalizeOptionalPath, operationRequiresAuthorizedNamespace, operationUsesPrincipalNamespace };

package/dist/access-boundary.js

@@ -10,13 +10,13 @@ import {
   normalizeOptionalPath,
   operationRequiresAuthorizedNamespace,
   operationUsesPrincipalNamespace
-} from "./chunk-3PXVYJMC.js";
+} from "./chunk-SB7D4BT7.js";
 import "./chunk-GDASG7NC.js";
 import "./chunk-GDB4J2H3.js";
-import "./chunk-PMVPCZJZ.js";
+import "./chunk-6433HV72.js";
 import "./chunk-VQ7B2Q6M.js";
+import "./chunk-SPUJNJJC.js";
 import "./chunk-PJSK6OJM.js";
-import "./chunk-R3AAOKR2.js";
 import "./chunk-GNVZQ5JN.js";
 import "./chunk-YN2UN7N3.js";
 import "./chunk-5QZR2RA3.js";
@@ -24,15 +24,15 @@ import "./chunk-P5FPO2BR.js";
 import "./chunk-S4DDLTPX.js";
 import "./chunk-ZVZHG7AI.js";
 import "./chunk-H7XKCNR6.js";
-import "./chunk-W6TSGWYS.js";
+import "./chunk-7YQ4IYS2.js";
 import "./chunk-SOBJ6NEY.js";
-import "./chunk-VPGRXEAB.js";
-import "./chunk-4W6INNXO.js";
+import "./chunk-3I7ASZN3.js";
+import "./chunk-PE255F4T.js";
+import "./chunk-CVILPI77.js";
 import "./chunk-2HIJHXB3.js";
 import "./chunk-AQEJKOKI.js";
 import "./chunk-HTP6XRUI.js";
-import "./chunk-CVILPI77.js";
-import "./chunk-EIR5VLIH.js";
+import "./chunk-4K7IW3F7.js";
 import "./chunk-IISBCCWR.js";
 import "./chunk-2YA5N2BY.js";
 import "./chunk-OUKBMQ2O.js";
@@ -46,47 +46,47 @@ import "./chunk-IVKIODHO.js";
 import "./chunk-WKDFJXW5.js";
 import "./chunk-JUXOTY6J.js";
 import "./chunk-QDW3E4RD.js";
-import "./chunk-NS5ETDYD.js";
+import "./chunk-7BEPVIH3.js";
 import "./chunk-7ZNJN5WZ.js";
 import "./chunk-C37ZRXX7.js";
 import "./chunk-UFGFMWAD.js";
-import "./chunk-SYJ6EKKE.js";
-import "./chunk-53ENM6F6.js";
-import "./chunk-7QFBLYFP.js";
-import "./chunk-2572MRP2.js";
+import "./chunk-JYYBA7TF.js";
+import "./chunk-XRYZRW54.js";
+import "./chunk-2XDWWPTN.js";
+import "./chunk-LZH5FR2W.js";
 import "./chunk-BIJAWZYW.js";
 import "./chunk-LXY5VVGM.js";
 import "./chunk-2LSZVONP.js";
 import "./chunk-DEUNUKTD.js";
-import "./chunk-S2VBSTTA.js";
+import "./chunk-THG4GYIE.js";
 import "./chunk-CSAKJVXW.js";
 import "./chunk-K2XUWZBM.js";
 import "./chunk-OD4FM2U7.js";
 import "./chunk-ZY2MNJR6.js";
-import "./chunk-6L27N6YI.js";
+import "./chunk-QOS5LBZN.js";
 import "./chunk-RDFF2NAU.js";
 import "./chunk-PP7R754B.js";
-import "./chunk-3TMYV3LP.js";
-import "./chunk-DEFI2QBT.js";
-import "./chunk-46WM6JX2.js";
+import "./chunk-NTWN6HB2.js";
+import "./chunk-J275IYMG.js";
 import "./chunk-UHVXE24Y.js";
+import "./chunk-46WM6JX2.js";
 import "./chunk-SXIMQLGV.js";
-import "./chunk-X5SDZMO7.js";
-import "./chunk-HJQZQUPC.js";
+import "./chunk-YHCBJULX.js";
+import "./chunk-DJZWNKFO.js";
+import "./chunk-N37X5RU7.js";
 import "./chunk-NNBZS3DY.js";
 import "./chunk-CYEPCZN5.js";
 import "./chunk-GIC6BASP.js";
 import "./chunk-YQNNHLCG.js";
-import "./chunk-6KTXE6A3.js";
-import "./chunk-N37X5RU7.js";
 import "./chunk-W7IGLX4G.js";
+import "./chunk-6KTXE6A3.js";
 import "./chunk-GUMZC2BO.js";
 import "./chunk-227UFSEQ.js";
 import "./chunk-ET356KSB.js";
 import "./chunk-72A4L5JJ.js";
 import "./chunk-A7Q43EUZ.js";
 import "./chunk-S2V7RUCL.js";
-import "./chunk-JFJ3MHGV.js";
+import "./chunk-SBDCZ2AX.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-PO7NXBG2.js";
 import "./chunk-S2HLHAZ4.js";
@@ -94,8 +94,8 @@ import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-UG6VXIOK.js";
 import "./chunk-AAD2ZS6P.js";
-import "./chunk-MUJ4QFUQ.js";
-import "./chunk-LCU5R6TQ.js";
+import "./chunk-W4BMEGQA.js";
+import "./chunk-RAIUTAZZ.js";
 import "./chunk-BT7NVCML.js";
 import "./chunk-3ONXXHQO.js";
 import "./chunk-YXZG5TVN.js";
@@ -108,10 +108,10 @@ import "./chunk-ZVPVTPGI.js";
 import "./chunk-5WITETWU.js";
 import "./chunk-6CIAGZ6X.js";
 import "./chunk-G7D6GZ5J.js";
-import "./chunk-CEH2AFXG.js";
+import "./chunk-C24UZSFW.js";
 import "./chunk-JXN77SGO.js";
-import "./chunk-IUM3VSHI.js";
 import "./chunk-ZLQ37WJX.js";
+import "./chunk-IUM3VSHI.js";
 import "./chunk-C64XATK7.js";
 import "./chunk-42JKGUFJ.js";
 import "./chunk-UW5NPZJ2.js";
@@ -130,6 +130,7 @@ import "./chunk-3SG4FGDV.js";
 import "./chunk-JV3C2MNQ.js";
 import "./chunk-K6MV3TRQ.js";
 import "./chunk-NXH34IPL.js";
+import "./chunk-RIAM7DND.js";
 import "./chunk-ZIKENA2C.js";
 import "./chunk-PQVCH2AE.js";
 import "./chunk-6Q3ZTEF6.js";
@@ -139,9 +140,9 @@ import "./chunk-Z7L72ZHL.js";
 import "./chunk-4O4TKIXQ.js";
 import "./chunk-TBBDFYXW.js";
 import "./chunk-YCVB7X56.js";
-import "./chunk-KQAFEZQX.js";
+import "./chunk-VDX2J7OX.js";
 import "./chunk-WEHSQBFR.js";
-import "./chunk-X7Y7WX73.js";
+import "./chunk-DQEMWVMT.js";
 import "./chunk-J4EB7DNW.js";
 import "./chunk-BJMBJZ2Y.js";
 import "./chunk-UKJAGEXH.js";
@@ -153,8 +154,8 @@ import "./chunk-3QL24R5Y.js";
 import "./chunk-SYOIVK7K.js";
 import "./chunk-ZN7SMKAK.js";
 import "./chunk-LNEWDF2A.js";
-import "./chunk-I2HTKOOP.js";
-import "./chunk-T42L3S6A.js";
+import "./chunk-ODZG724P.js";
+import "./chunk-LBWQ65SX.js";
 import "./chunk-ZRUEP4IK.js";
 import "./chunk-HZNYJN77.js";
 import "./chunk-Q57GOHLF.js";
@@ -165,14 +166,14 @@ import "./chunk-DVYRD4HY.js";
 import "./chunk-ZA53AZND.js";
 import "./chunk-GCASGYIO.js";
 import "./chunk-7RJUVTVF.js";
-import "./chunk-JOEJG4SD.js";
 import "./chunk-2LWQSV6A.js";
 import "./chunk-RL6NEVXT.js";
-import "./chunk-5FVVY2EB.js";
-import "./chunk-FFAZ2XFU.js";
 import "./chunk-XDL5CYZN.js";
 import "./chunk-JDSVLVCG.js";
 import "./chunk-HBVPYRDW.js";
+import "./chunk-JOEJG4SD.js";
+import "./chunk-5FVVY2EB.js";
+import "./chunk-FFAZ2XFU.js";
 import "./chunk-5GKPFL3S.js";
 import "./chunk-JAKIDQB2.js";
 import "./chunk-FZEEWOI2.js";