@remnic/core 9.69.34 → 9.69.36

package/dist/who-knows-cli.d.ts

@@ -1,5 +1,5 @@
-import { W as WhoKnowsResult } from './access-service-WUm2LnXZ.js';
-import './types-BGxTvLBO.js';
+import { W as WhoKnowsResult } from './access-service-Cl_x57xR.js';
+import './types-yDgWDkrJ.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';
@@ -11,15 +11,16 @@ import './deep-recall-config.js';
 import './causal-trajectory.js';
 import './objective-state.js';
 import './active-context-config.js';
+import './local-llm-config.js';
 import './semantic-merge-config.js';
 import './types-continuity.js';
-import './orchestrator-BUd_3Q86.js';
+import './orchestrator-Cf3G-3Ed.js';
 import './recall-state.js';
 import './utils/serialize-mutations.js';
 import './search/port.js';
 import './included-memories.js';
 import './briefing.js';
-import './storage-CU_hZUgP.js';
+import './storage-Ca0MbTfm.js';
 import './corpus-read-cancellation.js';
 import './artifact-search.js';
 import './active-context-transform.js';
@@ -42,8 +43,8 @@ import './resolve-provider-secret.js';
 import './transcript.js';
 import './session-integrity.js';
 import './summarizer.js';
-import './maintenance-8hmWOMY_.js';
-import './catalog-BaCx29iv.js';
+import './maintenance-ag1gYztC.js';
+import './catalog-Bq1AxZwF.js';
 import './namespaces/search.js';
 import './compounding/engine.js';
 import './shared-context/manager.js';
@@ -53,7 +54,7 @@ import './utility-runtime.js';
 import './tier-routing.js';
 import './lifecycle.js';
 import './orchestration/compression-guideline-coordinator.js';
-import './semantic-consolidation-J-598F5M.js';
+import './semantic-consolidation-C83DVakV.js';
 import './connectors/codex-materialize.js';
 import './logger.js';
 import './embedding-fallback.js';
@@ -75,17 +76,17 @@ import './conversation-index/chunker.js';
 import './conversation-index/backend.js';
 import './faiss-adapter-BHecI1fF.js';
 import './runtime/child-process.js';
-import './dependency-propagation-delivery-CDQCxNll.js';
+import './dependency-propagation-delivery-DLiAtj25.js';
 import './namespaces/storage.js';
 import './threading.js';
-import './scope-profiles-B6BGVbxm.js';
+import './scope-profiles-nxTKvjE-.js';
 import './graph-DRkl22KE.js';
 import './graph-write-lock.js';
 import './recall-xray.js';
 import './memory-provenance.js';
 import './user-model.js';
 import './recall-context-composition.js';
-import './generic-recall-paths-CqAZyXKX.js';
+import './generic-recall-paths-DbitKJI5.js';
 import './live-connectors-runner.js';
 import './framework-CNDn2164.js';
 import './relevance.js';
@@ -93,7 +94,7 @@ import './negative.js';
 import './session-observer-state.js';
 import './semantic-BalR6EXU.js';
 import './replay/types.js';
-import './service-ZQkJ52cz.js';
+import './service-q-xtOoAr.js';
 import './extraction-judge.js';
 import './lcm/engine.js';
 import './lcm/archive.js';
@@ -115,7 +116,7 @@ import './recall-audit.js';
 import './types-B1VHaf2w.js';
 import './transfer/capsule-import.js';
 import './transfer/types.js';
-import './access-namespace-preflight-kXG8MvYx.js';
+import './access-namespace-preflight-D8qri11P.js';
 import './access-token-capabilities.js';
 import 'node:async_hooks';
 import './recall-explain-renderer.js';

package/dist/who-knows-cli.js

@@ -4,14 +4,15 @@ import {
   renderWhoKnows,
   renderWhoKnowsJson,
   renderWhoKnowsText
-} from "./chunk-34QW2LK2.js";
-import "./chunk-UEZKN6VR.js";
-import "./chunk-ZMKYCFJ7.js";
+} from "./chunk-QATYVTP7.js";
+import "./chunk-3FJKJ5UZ.js";
+import "./chunk-5VAF4ID4.js";
 import "./chunk-46WM6JX2.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-D5F7TKMH.js";
-import "./chunk-6YAIN5XJ.js";
-import "./chunk-4JVQRFZD.js";
+import "./chunk-Y63ZFP4X.js";
+import "./chunk-JRWW7GM6.js";
+import "./chunk-CYEPCZN5.js";
 import "./chunk-TNSCIPBQ.js";
 import "./chunk-YQNNHLCG.js";
 import "./chunk-6KTXE6A3.js";
@@ -19,17 +20,16 @@ import "./chunk-BD7JTBYP.js";
 import "./chunk-OB3XMWX5.js";
 import "./chunk-4O6WRBGE.js";
 import "./chunk-GUMZC2BO.js";
-import "./chunk-CYEPCZN5.js";
 import "./chunk-TFA6HPOA.js";
 import "./chunk-F4TWWUMP.js";
 import "./chunk-72A4L5JJ.js";
 import "./chunk-A7Q43EUZ.js";
 import "./chunk-S2V7RUCL.js";
 import "./chunk-PCEYGOSL.js";
-import "./chunk-Q6LCCIZN.js";
+import "./chunk-4MDKNUV4.js";
+import "./chunk-S2HLHAZ4.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-MRPOZBJC.js";
-import "./chunk-S2HLHAZ4.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-S2ULTQZR.js";

package/dist/who-knows.d.ts

@@ -1,6 +1,6 @@
-export { bA as WHO_KNOWS_AUTHORSHIP_BONUS, bB as WHO_KNOWS_DEFAULT_LIMIT, bC as WHO_KNOWS_MAX_EVIDENCE, bD as WHO_KNOWS_MAX_LIMIT, bE as WHO_KNOWS_MCP_TOOLS, bF as WhoKnowsEntity, bG as WhoKnowsEvidence, bH as WhoKnowsHit, bI as WhoKnowsHttpOutcome, W as WhoKnowsResult, bJ as WhoKnowsStorage, bT as computeWhoKnows, bZ as handleWhoKnowsHttpQuery, c2 as loadWhoKnowsEntities, c9 as tokenizeTopic, ca as validateWhoKnowsInput } from './access-service-WUm2LnXZ.js';
-import './types-BGxTvLBO.js';
-import './orchestrator-BUd_3Q86.js';
+export { bA as WHO_KNOWS_AUTHORSHIP_BONUS, bB as WHO_KNOWS_DEFAULT_LIMIT, bC as WHO_KNOWS_MAX_EVIDENCE, bD as WHO_KNOWS_MAX_LIMIT, bE as WHO_KNOWS_MCP_TOOLS, bF as WhoKnowsEntity, bG as WhoKnowsEvidence, bH as WhoKnowsHit, bI as WhoKnowsHttpOutcome, W as WhoKnowsResult, bJ as WhoKnowsStorage, bT as computeWhoKnows, bZ as handleWhoKnowsHttpQuery, c2 as loadWhoKnowsEntities, c9 as tokenizeTopic, ca as validateWhoKnowsInput } from './access-service-Cl_x57xR.js';
+import './types-yDgWDkrJ.js';
+import './orchestrator-Cf3G-3Ed.js';
 import './recall-state.js';
 import './utils/serialize-mutations.js';
 import './search/port.js';
@@ -15,11 +15,12 @@ import './deep-recall-config.js';
 import './causal-trajectory.js';
 import './objective-state.js';
 import './active-context-config.js';
+import './local-llm-config.js';
 import './semantic-merge-config.js';
 import './types-continuity.js';
 import './included-memories.js';
 import './briefing.js';
-import './storage-CU_hZUgP.js';
+import './storage-Ca0MbTfm.js';
 import './corpus-read-cancellation.js';
 import './artifact-search.js';
 import './active-context-transform.js';
@@ -42,8 +43,8 @@ import './resolve-provider-secret.js';
 import './transcript.js';
 import './session-integrity.js';
 import './summarizer.js';
-import './maintenance-8hmWOMY_.js';
-import './catalog-BaCx29iv.js';
+import './maintenance-ag1gYztC.js';
+import './catalog-Bq1AxZwF.js';
 import './namespaces/search.js';
 import './compounding/engine.js';
 import './shared-context/manager.js';
@@ -53,7 +54,7 @@ import './utility-runtime.js';
 import './tier-routing.js';
 import './lifecycle.js';
 import './orchestration/compression-guideline-coordinator.js';
-import './semantic-consolidation-J-598F5M.js';
+import './semantic-consolidation-C83DVakV.js';
 import './connectors/codex-materialize.js';
 import './logger.js';
 import './embedding-fallback.js';
@@ -75,17 +76,17 @@ import './conversation-index/chunker.js';
 import './conversation-index/backend.js';
 import './faiss-adapter-BHecI1fF.js';
 import './runtime/child-process.js';
-import './dependency-propagation-delivery-CDQCxNll.js';
+import './dependency-propagation-delivery-DLiAtj25.js';
 import './namespaces/storage.js';
 import './threading.js';
-import './scope-profiles-B6BGVbxm.js';
+import './scope-profiles-nxTKvjE-.js';
 import './graph-DRkl22KE.js';
 import './graph-write-lock.js';
 import './recall-xray.js';
 import './memory-provenance.js';
 import './user-model.js';
 import './recall-context-composition.js';
-import './generic-recall-paths-CqAZyXKX.js';
+import './generic-recall-paths-DbitKJI5.js';
 import './live-connectors-runner.js';
 import './framework-CNDn2164.js';
 import './relevance.js';
@@ -93,7 +94,7 @@ import './negative.js';
 import './session-observer-state.js';
 import './semantic-BalR6EXU.js';
 import './replay/types.js';
-import './service-ZQkJ52cz.js';
+import './service-q-xtOoAr.js';
 import './extraction-judge.js';
 import './lcm/engine.js';
 import './lcm/archive.js';
@@ -115,7 +116,7 @@ import './recall-audit.js';
 import './types-B1VHaf2w.js';
 import './transfer/capsule-import.js';
 import './transfer/types.js';
-import './access-namespace-preflight-kXG8MvYx.js';
+import './access-namespace-preflight-D8qri11P.js';
 import './access-token-capabilities.js';
 import 'node:async_hooks';
 import './recall-explain-renderer.js';

package/dist/who-knows.js

@@ -9,13 +9,14 @@ import {
   loadWhoKnowsEntities,
   tokenizeTopic,
   validateWhoKnowsInput
-} from "./chunk-UEZKN6VR.js";
-import "./chunk-ZMKYCFJ7.js";
+} from "./chunk-3FJKJ5UZ.js";
+import "./chunk-5VAF4ID4.js";
 import "./chunk-46WM6JX2.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-D5F7TKMH.js";
-import "./chunk-6YAIN5XJ.js";
-import "./chunk-4JVQRFZD.js";
+import "./chunk-Y63ZFP4X.js";
+import "./chunk-JRWW7GM6.js";
+import "./chunk-CYEPCZN5.js";
 import "./chunk-TNSCIPBQ.js";
 import "./chunk-YQNNHLCG.js";
 import "./chunk-6KTXE6A3.js";
@@ -23,17 +24,16 @@ import "./chunk-BD7JTBYP.js";
 import "./chunk-OB3XMWX5.js";
 import "./chunk-4O6WRBGE.js";
 import "./chunk-GUMZC2BO.js";
-import "./chunk-CYEPCZN5.js";
 import "./chunk-TFA6HPOA.js";
 import "./chunk-F4TWWUMP.js";
 import "./chunk-72A4L5JJ.js";
 import "./chunk-A7Q43EUZ.js";
 import "./chunk-S2V7RUCL.js";
 import "./chunk-PCEYGOSL.js";
-import "./chunk-Q6LCCIZN.js";
+import "./chunk-4MDKNUV4.js";
+import "./chunk-S2HLHAZ4.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-MRPOZBJC.js";
-import "./chunk-S2HLHAZ4.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
 import "./chunk-S2ULTQZR.js";

package/dist/write-envelope.d.ts

@@ -1,4 +1,4 @@
-import { u as MemoryCategory, N as MemorySubject } from './types-BGxTvLBO.js';
+import { u as MemoryCategory, N as MemorySubject } from './types-yDgWDkrJ.js';
 import './message-parts/index.js';
 import './bounded-jsonl-state.js';
 import './operator-doctor-types.js';
@@ -10,6 +10,7 @@ import './deep-recall-config.js';
 import './causal-trajectory.js';
 import './objective-state.js';
 import './active-context-config.js';
+import './local-llm-config.js';
 import './semantic-merge-config.js';
 import './types-continuity.js';
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.69.34",
+  "version": "9.69.36",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -3257,7 +3257,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.69.34"
+    "@remnic/coding-graph": "^9.69.36"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/config.test.ts

@@ -969,6 +969,30 @@ test("parseConfig openaiApiKey string 0 is not treated as a direct OpenAI opt-ou
   }
 });
 
+test("parseConfig localLlmApiKeyEnv resolves a present launch token but tolerates its absence", () => {
+  const variable = "REMNIC_TEST_LOCAL_LLM_TOKEN";
+  const previous = process.env[variable];
+  try {
+    delete process.env[variable];
+    const absent = parseConfig({ localLlmApiKeyEnv: variable });
+    assert.equal(absent.localLlmApiKey, undefined);
+    assert.equal(absent.localLlmApiKeyEnv, variable);
+
+    process.env[variable] = "launch-scoped-local-token";
+    const present = parseConfig({ localLlmApiKeyEnv: variable });
+    assert.equal(present.localLlmApiKey, "launch-scoped-local-token");
+    assert.equal(present.localLlmApiKeyEnv, variable);
+
+    assert.throws(
+      () => parseConfig({ localLlmApiKeyEnv: "not-an-environment-variable" }),
+      /localLlmApiKeyEnv must name a conventional environment variable/,
+    );
+  } finally {
+    if (previous === undefined) delete process.env[variable];
+    else process.env[variable] = previous;
+  }
+});
+
 test("parseConfig localLlmTimeoutMs accepts CLI-style numeric strings for gateway fallback", () => {
   const cfg = parseConfig({ localLlmTimeoutMs: "600000" });
   assert.equal(cfg.localLlmTimeoutMs, 600_000);

package/src/config.ts

@@ -461,6 +461,14 @@ function parseAgentAccessPrincipal(raw: unknown): string | undefined {
   );
 }
 
+function parseOptionalEnvName(raw: unknown, property: string): string | undefined {
+  if (raw === undefined || raw === null || raw === "") return undefined;
+  if (typeof raw !== "string" || !/^[A-Z_][A-Z0-9_]*$/.test(raw)) {
+    throw new Error(`${property} must name a conventional environment variable`);
+  }
+  return raw;
+}
+
 export function resolveEnvVars(value: string): string {
   const resolved = value.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g, (_, envVar: string) => {
     const envValue = readEnvVar(envVar);
@@ -1546,6 +1554,7 @@ export function parseConfig(
 
   const { wikiMergeIntoRecall, qmdCollection, qmdColdCollection } =
     parseExternalWikiRecallGuard(cfg);
+  const localLlmApiKeyEnv = parseOptionalEnvName(cfg.localLlmApiKeyEnv, "localLlmApiKeyEnv");
 
   return {
     openaiApiKey: apiKey,
@@ -2684,7 +2693,10 @@ export function parseConfig(
     localLlmApiKey:
       typeof cfg.localLlmApiKey === "string" && cfg.localLlmApiKey.length > 0
         ? resolveEnvVars(cfg.localLlmApiKey)
-        : undefined,
+        : localLlmApiKeyEnv === undefined
+          ? undefined
+          : readEnvVar(localLlmApiKeyEnv),
+    localLlmApiKeyEnv,
     localLlmHeaders:
       cfg.localLlmHeaders && typeof cfg.localLlmHeaders === "object" && !Array.isArray(cfg.localLlmHeaders)
         ? Object.fromEntries(

package/src/local-llm-config.ts

@@ -0,0 +1,25 @@
+export interface LocalLlmConfig {
+  // Local LLM Provider (v2.1)
+  localLlmEnabled: boolean;
+  localLlmUrl: string;
+  localLlmModel: string;
+  /** Optional API key for authenticated OpenAI-compatible endpoints. */
+  localLlmApiKey?: string;
+  /** Optional environment-variable name that supplies localLlmApiKey at runtime. */
+  localLlmApiKeyEnv?: string;
+  /** Additional headers for local/compatible endpoint requests. */
+  localLlmHeaders?: Record<string, string>;
+  /** If false, do not send Authorization header even when localLlmApiKey is set. */
+  localLlmAuthHeader: boolean;
+  localLlmFallback: boolean;
+  /** Optional home directory override for local LLM helpers (LM Studio settings, CLI PATH). */
+  localLlmHomeDir?: string;
+  /** Optional absolute path to LMS CLI binary (preferred over auto-detection). */
+  localLmsCliPath?: string;
+  /** Optional bin directory prepended to PATH for LMS CLI execution. */
+  localLmsBinDir?: string;
+  /** Hard timeout for local LLM and gateway fallback requests (ms). */
+  localLlmTimeoutMs: number;
+  /** Max context window for local LLM (override auto-detection). Set lower if your LLM server defaults to smaller contexts. */
+  localLlmMaxContext?: number;
+}

package/src/types.ts

@@ -22,6 +22,7 @@ import type { ProceduralMaintenanceConfig } from "./procedural/maintenance-confi
 import type { SkillProjectionConfig } from "./procedural/skill-projection.js";
 import type { ActionGateConfig } from "./coding/action-gate.js";
 import type { ActiveContextConfigFields } from "./active-context-config.js";
+import type { LocalLlmConfig } from "./local-llm-config.js";
 import type { AmbientCaptureProvenance, BufferTurnOwner, SecurityConfig, OriginMetadata } from "./security/types.js";
 export type MemorySubject = "user" | "agent";
 export type SubjectGuardMode = "off" | "warn" | "enforce";
@@ -689,7 +690,8 @@ export interface PluginConfig
     SecurityConfig,
     DriftDetectionSettings,
     ActiveContextConfigFields,
-    DeepRecallSettings {
+    DeepRecallSettings,
+    LocalLlmConfig {
   openaiApiKey: string | undefined;
   openaiBaseUrl: string | undefined;
   model: string;
@@ -1534,27 +1536,6 @@ export interface PluginConfig
   workProjectIndexEnabled: boolean;
   workIndexAutoRebuildEnabled: boolean;
   workIndexAutoRebuildDebounceMs: number;
-  // Local LLM Provider (v2.1)
-  localLlmEnabled: boolean;
-  localLlmUrl: string;
-  localLlmModel: string;
-  /** Optional API key for authenticated OpenAI-compatible endpoints. */
-  localLlmApiKey?: string;
-  /** Additional headers for local/compatible endpoint requests. */
-  localLlmHeaders?: Record<string, string>;
-  /** If false, do not send Authorization header even when localLlmApiKey is set. */
-  localLlmAuthHeader: boolean;
-  localLlmFallback: boolean;
-  /** Optional home directory override for local LLM helpers (LM Studio settings, CLI PATH). */
-  localLlmHomeDir?: string;
-  /** Optional absolute path to LMS CLI binary (preferred over auto-detection). */
-  localLmsCliPath?: string;
-  /** Optional bin directory prepended to PATH for LMS CLI execution. */
-  localLmsBinDir?: string;
-  /** Hard timeout for local LLM and gateway fallback requests (ms). */
-  localLlmTimeoutMs: number;
-  /** Max context window for local LLM (override auto-detection). Set lower if your LLM server defaults to smaller contexts. */
-  localLlmMaxContext?: number;
   // Observability
   /** If true, log slow operations (local LLM + related I/O) with durations and metadata (no content). */
   slowLogEnabled: boolean;