@remnic/core 9.69.40 → 9.69.41

package/dist/chunk-YTK5MVNF.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/deep-recall-http-glue.ts"],"sourcesContent":["/**\n * Deep-recall HTTP glue (issue #2332) — route body lives here so\n * access-http.ts stays at its structural ceiling (same seam as\n * meetings/http-glue.ts and location/http-glue.ts).\n *\n * Input errors map to 400; everything else rethrows so backend faults keep\n * flowing to the global 500 handler. `deepRecall.enabled` gating lives in\n * EngramAccessService — this module only translates transport shape.\n */\n\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { deepRecallRequestSchema } from \"./access-schema.js\";\nimport { EngramAccessInputError } from \"./access-errors.js\";\nimport type { EngramAccessService } from \"./access-service.js\";\n\ntype RespondJson = (res: ServerResponse, status: number, payload: unknown) => void;\ntype ReadJsonBody = (req: IncomingMessage) => Promise<unknown>;\n\nfunction coerceMaxSteps(raw: unknown): number | undefined {\n  if (raw === undefined || raw === null) return undefined;\n  const value = typeof raw === \"string\" ? Number(raw) : raw;\n  if (typeof value !== \"number\" || !Number.isFinite(value) || !Number.isInteger(value) || value < 0) {\n    throw new EngramAccessInputError(\"maxSteps must be a non-negative integer\");\n  }\n  return value;\n}\n\nexport async function respondDeepRecall(\n  req: IncomingMessage,\n  res: ServerResponse,\n  respondJson: RespondJson,\n  readJsonBody: ReadJsonBody,\n  service: EngramAccessService,\n  /**\n   * Resolve the caller scope for a body-supplied namespace/sessionKey. The\n   * body `namespace` is user-controlled, so it MUST flow through the SAME\n   * effective-namespace allow-list gate as the query-string value (issue\n   * #1850 finding 2 / #2332 review): a scoped bearer that passes an allowed\n   * `?namespace=` while setting a different `namespace` in the body would\n   * otherwise read another tenant. access-http supplies the gate and applies\n   * the query-string fallback, so this module never selects a namespace of\n   * its own. Throws 403 when the effective namespace is not permitted.\n   *\n   * `authenticatedPrincipal` is the identity the transport authenticated, and\n   * it MUST reach the service: authorization and the audit trail derive from\n   * the presenting principal, never from the client-supplied `sessionKey`.\n   * Dropping it let a crafted key matching another principal rule read that\n   * principal's namespaces, and made a legitimate namespace-enabled request\n   * with no session key fail as unauthenticated.\n   */\n  scopeFor: (\n    bodyNamespace?: string,\n    bodySessionKey?: string,\n  ) => { namespace?: string; sessionKey?: string; authenticatedPrincipal?: string },\n): Promise<void> {\n  const parsed = deepRecallRequestSchema.safeParse(await readJsonBody(req));\n  if (!parsed.success) {\n    respondJson(\n      res,\n      400,\n      { error: \"invalid_request\", detail: parsed.error.issues.map((i) => `${i.path.join(\".\")}: ${i.message}`).join(\"; \") },\n    );\n    return;\n  }\n  const maxSteps = coerceMaxSteps(parsed.data.maxSteps);\n  const scope = scopeFor(parsed.data.namespace, parsed.data.sessionKey);\n  const result = await service.deepRecall({\n    query: parsed.data.query,\n    ...(maxSteps !== undefined ? { maxSteps } : {}),\n    namespace: scope.namespace,\n    sessionKey: scope.sessionKey,\n    authenticatedPrincipal: scope.authenticatedPrincipal,\n  });\n  respondJson(res, 200, result);\n}\n"],"mappings":";;;;;;;;AAkBA,SAAS,eAAe,KAAkC;AACxD,MAAI,QAAQ,UAAa,QAAQ,KAAM,QAAO;AAC9C,QAAM,QAAQ,OAAO,QAAQ,WAAW,OAAO,GAAG,IAAI;AACtD,MAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,KAAK,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,GAAG;AACjG,UAAM,IAAI,uBAAuB,yCAAyC;AAAA,EAC5E;AACA,SAAO;AACT;AAEA,eAAsB,kBACpB,KACA,KACA,aACA,cACA,SAkBA,UAIe;AACf,QAAM,SAAS,wBAAwB,UAAU,MAAM,aAAa,GAAG,CAAC;AACxE,MAAI,CAAC,OAAO,SAAS;AACnB;AAAA,MACE;AAAA,MACA;AAAA,MACA,EAAE,OAAO,mBAAmB,QAAQ,OAAO,MAAM,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI,EAAE;AAAA,IACrH;AACA;AAAA,EACF;AACA,QAAM,WAAW,eAAe,OAAO,KAAK,QAAQ;AACpD,QAAM,QAAQ,SAAS,OAAO,KAAK,WAAW,OAAO,KAAK,UAAU;AACpE,QAAM,SAAS,MAAM,QAAQ,WAAW;AAAA,IACtC,OAAO,OAAO,KAAK;AAAA,IACnB,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,IAC7C,WAAW,MAAM;AAAA,IACjB,YAAY,MAAM;AAAA,IAClB,wBAAwB,MAAM;AAAA,EAChC,CAAC;AACD,cAAY,KAAK,KAAK,MAAM;AAC9B;","names":[]}

package/dist/chunk-ZRMMXWYI.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/deep-recall-policy-llm.ts"],"sourcesContent":["/**\n * Policy-call LLM routing for deep recall (issue #2332).\n *\n * Mirrors `extraction-judge.ts` `callJudgeLlm` exactly: local client first\n * (json_object response format) unless modelSource is \"gateway\", then the\n * fallback client with the shared background-task chain options. Never a\n * raw OpenAI client. Returns null when both legs fail — the loop treats\n * that as a stop, never a crash.\n */\n\nimport { gatewayTaskChainOptions, type FallbackLlmClient } from \"./fallback-llm.js\";\nimport type { LocalLlmClient } from \"./local-llm.js\";\nimport type { PluginConfig } from \"./types.js\";\n\nexport const DEEP_RECALL_POLICY_SYSTEM_PROMPT =\n  \"You are the retrieval policy for a long-term memory system. Given the question, the current working set of retrieved memories, and the frontier of anchor-linked candidates, choose exactly one action: REFINE (rewrite the query), EXPAND (follow named frontier nodes), or STOP. Respond with JSON only.\";\n\nexport async function callDeepRecallPolicyLlm(input: {\n  statePrompt: string;\n  config: PluginConfig;\n  localLlm: LocalLlmClient | null;\n  fallbackLlm: FallbackLlmClient | null;\n  timeoutMs: number;\n}): Promise<string | null> {\n  const messages: Array<{ role: \"system\" | \"user\"; content: string }> = [\n    { role: \"system\", content: DEEP_RECALL_POLICY_SYSTEM_PROMPT },\n    { role: \"user\", content: input.statePrompt },\n  ];\n  const timeout = input.timeoutMs > 0 ? input.timeoutMs : undefined;\n  const skipLocal = input.config.modelSource === \"gateway\";\n  const gatewayChain = gatewayTaskChainOptions(input.config);\n\n  if (input.localLlm && !skipLocal) {\n    try {\n      const result = await input.localLlm.chatCompletion(messages, {\n        temperature: 0.1,\n        maxTokens: 1024,\n        ...(timeout ? { timeoutMs: timeout } : {}),\n        responseFormat: { type: \"json_object\" },\n        operation: \"deep-recall-policy\",\n      });\n      if (result?.content) return result.content;\n    } catch {\n      // fall through to the gateway leg\n    }\n  }\n\n  if (input.fallbackLlm) {\n    try {\n      const result = await input.fallbackLlm.chatCompletion(\n        messages as Array<{ role: \"system\" | \"user\" | \"assistant\"; content: string }>,\n        {\n          temperature: 0.1,\n          maxTokens: 1024,\n          ...(timeout ? { timeoutMs: timeout } : {}),\n          ...gatewayChain,\n        },\n      );\n      if (result?.content) return result.content;\n    } catch {\n      // both legs failed — caller treats null as a stop\n    }\n  }\n  return null;\n}\n"],"mappings":";;;;;AAcO,IAAM,mCACX;AAEF,eAAsB,wBAAwB,OAMnB;AACzB,QAAM,WAAgE;AAAA,IACpE,EAAE,MAAM,UAAU,SAAS,iCAAiC;AAAA,IAC5D,EAAE,MAAM,QAAQ,SAAS,MAAM,YAAY;AAAA,EAC7C;AACA,QAAM,UAAU,MAAM,YAAY,IAAI,MAAM,YAAY;AACxD,QAAM,YAAY,MAAM,OAAO,gBAAgB;AAC/C,QAAM,eAAe,wBAAwB,MAAM,MAAM;AAEzD,MAAI,MAAM,YAAY,CAAC,WAAW;AAChC,QAAI;AACF,YAAM,SAAS,MAAM,MAAM,SAAS,eAAe,UAAU;AAAA,QAC3D,aAAa;AAAA,QACb,WAAW;AAAA,QACX,GAAI,UAAU,EAAE,WAAW,QAAQ,IAAI,CAAC;AAAA,QACxC,gBAAgB,EAAE,MAAM,cAAc;AAAA,QACtC,WAAW;AAAA,MACb,CAAC;AACD,UAAI,QAAQ,QAAS,QAAO,OAAO;AAAA,IACrC,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,MAAI,MAAM,aAAa;AACrB,QAAI;AACF,YAAM,SAAS,MAAM,MAAM,YAAY;AAAA,QACrC;AAAA,QACA;AAAA,UACE,aAAa;AAAA,UACb,WAAW;AAAA,UACX,GAAI,UAAU,EAAE,WAAW,QAAQ,IAAI,CAAC;AAAA,UACxC,GAAG;AAAA,QACL;AAAA,MACF;AACA,UAAI,QAAQ,QAAS,QAAO,OAAO;AAAA,IACrC,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;","names":[]}