@remnic/core 9.69.9 → 9.69.11

package/dist/{chunk-3QWF54M4.js → chunk-5P2KNFJZ.js}

@@ -9,6 +9,9 @@ import {
 import {
   importCapsule
 } from "./chunk-CTCGHNWN.js";
+import {
+  UNATTRIBUTED_ACCESS_WRITE_ORIGIN
+} from "./chunk-CC37E3QM.js";
 import {
   ACTIVE_DECISION_STATUSES,
   CodegraphRuntimeError,
@@ -32,7 +35,7 @@ import {
   computeWhoKnows,
   loadWhoKnowsEntities,
   validateWhoKnowsInput
-} from "./chunk-6C57JBJ3.js";
+} from "./chunk-LUDXSSTW.js";
 import {
   WriteQuarantineStore
 } from "./chunk-PJSK6OJM.js";
@@ -59,13 +62,13 @@ import {
 } from "./chunk-H7XKCNR6.js";
 import {
   toRecallExplainJson
-} from "./chunk-H6RSANGQ.js";
+} from "./chunk-ETZ7KKOS.js";
 import {
   estimateRecallTokens
-} from "./chunk-LK4TOYPU.js";
+} from "./chunk-NF3NMAG7.js";
 import {
   readAggregateExtractionWatermark
-} from "./chunk-NDE7CH6C.js";
+} from "./chunk-QUVWFZOU.js";
 import {
   ReplicaDivergenceMonitor
 } from "./chunk-CVILPI77.js";
@@ -78,21 +81,24 @@ import {
 import {
   recordMemoryOutcome
 } from "./chunk-UD7UNYRD.js";
+import {
+  readProjectedHarmonicGraph
+} from "./chunk-4WIKMOE3.js";
 import {
   coerceIncludedMemories
 } from "./chunk-2YA5N2BY.js";
 import {
   buildGraphSnapshot
-} from "./chunk-Z3SQEEB6.js";
+} from "./chunk-OUKBMQ2O.js";
 import {
   wrapWorkLayerContext
 } from "./chunk-EI6V5UXY.js";
 import {
   CONNECTOR_LABEL_MAX_LENGTH
-} from "./chunk-J3JEW5CT.js";
+} from "./chunk-3GCK6ONU.js";
 import {
   isValidConnectorId
-} from "./chunk-5TBO7CDR.js";
+} from "./chunk-YSSAGB2O.js";
 import {
   formatProfileTraceAscii
 } from "./chunk-NLE6TSLG.js";
@@ -102,19 +108,31 @@ import {
 import {
   REDACTION_RULES_SUBDIR
 } from "./chunk-LTHVM4XN.js";
+import {
+  lcmEvidenceIdentity
+} from "./chunk-C37ZRXX7.js";
 import {
   persistExplicitCapture,
   queueExplicitCaptureForReview,
   validateExplicitCaptureInput
 } from "./chunk-X5YYSAZX.js";
-import {
-  lcmEvidenceIdentity
-} from "./chunk-C37ZRXX7.js";
 import {
   boundRecallContextComposition,
   composeRecallContext,
   renderAuthorityBoundContent
 } from "./chunk-7ZNJN5WZ.js";
+import {
+  callDeepRecallPolicyLlm
+} from "./chunk-DXFG2VGN.js";
+import {
+  renderDeepRecallResult
+} from "./chunk-RF2SMMPP.js";
+import {
+  createDeepRecallSeedSearch
+} from "./chunk-OEDW4ER7.js";
+import {
+  runBudgetedDeepRecall
+} from "./chunk-S5G2LAL7.js";
 import {
   buildProposedActions,
   buildQualityScore,
@@ -122,11 +140,11 @@ import {
   listMemoryGovernanceRuns,
   readMemoryGovernanceRunArtifact,
   runMemoryGovernance
-} from "./chunk-ANN5VMHT.js";
+} from "./chunk-LDOQE34V.js";
 import {
   CorpusWatermarkCache,
   computeServiceCorpusCensus
-} from "./chunk-NAZROP6I.js";
+} from "./chunk-XMIAU4CO.js";
 import {
   CrossNamespaceBudget,
   toBudgetWarning
@@ -137,7 +155,7 @@ import {
   enqueuePassiveCorrectionNotification,
   parseBriefingFocus,
   parseBriefingWindow
-} from "./chunk-ZPN6SSWA.js";
+} from "./chunk-2XJDAEAM.js";
 import {
   OKF_RESERVED_BASENAMES,
   parseEntityFile,
@@ -145,14 +163,14 @@ import {
   qmdCollectionPathParts,
   qmdResultPathCandidates,
   selfDeps
-} from "./chunk-WF2WCZCR.js";
+} from "./chunk-VYD63IFH.js";
 import {
   namespaceCollectionName
-} from "./chunk-YHCBJULX.js";
+} from "./chunk-JGXMA6HL.js";
 import {
   DEFAULT_RECALL_DISCLOSURE,
   isRecallDisclosure
-} from "./chunk-XXW32OL7.js";
+} from "./chunk-OYV6RKPM.js";
 import {
   normalizeProjectionPreview,
   normalizeProjectionTags
@@ -230,7 +248,7 @@ import {
 import {
   filterTrajectoriesByLookbackDays,
   readCausalTrajectoryRecords
-} from "./chunk-2Z3DG5CQ.js";
+} from "./chunk-P6GKRT2H.js";
 import {
   isValidActivityDate
 } from "./chunk-M6L7HI7R.js";
@@ -258,7 +276,7 @@ import {
 } from "./chunk-LNEWDF2A.js";
 import {
   createOfflineSyncManifestStream
-} from "./chunk-X66BHMAU.js";
+} from "./chunk-RJ57OOCD.js";
 import {
   offlineSyncStorageForSnapshot
 } from "./chunk-2OXIPF3A.js";
@@ -344,7 +362,7 @@ import {
   iterateOfflineSyncSnapshotFileRecords,
   normalizeOfflineSyncChangeset,
   readOfflineSyncFileContentChunk
-} from "./chunk-JCUG7AXZ.js";
+} from "./chunk-XJJYSX6F.js";
 import {
   validateArchiveRelativePath
 } from "./chunk-GCGJW34D.js";
@@ -4077,6 +4095,7 @@ var OPERATION_NAMES = [
   "meetings_list",
   "meetings_get",
   "meetings_build",
+  "deep_recall",
   "standup",
   "action_confidence",
   "chatgpt_memory_inspector",
@@ -15658,6 +15677,95 @@ var EngramAccessService = class extends SupportPassportAccessServiceBase {
     })();
     return toRecallExplainJson(snapshot);
   }
+  /**
+   * Budgeted REFINE/EXPAND/STOP deep recall (issue #2332). Deep surface
+   * only — never called from the recall hot path. Single implementation
+   * for MCP, HTTP, and CLI (rule 22: one renderer, one service method).
+   */
+  async deepRecall(request) {
+    const cfg = this.orchestrator.config.deepRecall;
+    if (!cfg.enabled) {
+      return {
+        ok: false,
+        error: "disabled",
+        entries: [],
+        trace: [],
+        rendered: "deep recall is disabled; set deepRecall.enabled"
+      };
+    }
+    const query = typeof request.query === "string" ? request.query.trim() : "";
+    if (query.length === 0) {
+      throw new EngramAccessInputError("deepRecall: query is required");
+    }
+    let effective = cfg;
+    const requestedSteps = request.maxSteps;
+    if (requestedSteps !== void 0) {
+      if (typeof requestedSteps !== "number" || !Number.isInteger(requestedSteps) || requestedSteps < 0) {
+        throw new EngramAccessInputError("deepRecall: maxSteps must be a non-negative integer");
+      }
+      if (cfg.maxSteps <= 0) {
+        if (requestedSteps > 0) {
+          throw new EngramAccessInputError(
+            "deepRecall: the policy loop is disabled (deepRecall.maxSteps=0); maxSteps must be 0"
+          );
+        }
+      } else if (requestedSteps > cfg.maxSteps) {
+        throw new EngramAccessInputError(
+          `deepRecall: maxSteps ${requestedSteps} exceeds the configured ceiling ${cfg.maxSteps}`
+        );
+      }
+      effective = { ...cfg, maxSteps: requestedSteps };
+    }
+    const principal = request.authenticatedPrincipal?.trim() || resolvePrincipal(request.sessionKey, this.orchestrator.config);
+    const resolvedNamespace = this.resolveReadableNamespace(request.namespace, principal);
+    const storage = await this.orchestrator.getStorage(resolvedNamespace);
+    const config = this.orchestrator.config;
+    const graphStoreDir = resolvedNamespace === config.defaultNamespace ? config.abstractionNodeStoreDir : void 0;
+    const result = await runBudgetedDeepRecall(
+      {
+        config: effective,
+        searchSeed: createDeepRecallSeedSearch({
+          namespace: resolvedNamespace,
+          storage,
+          router: this.orchestrator,
+          resolver: this.orchestrator.qmdResultResolver
+        }),
+        // Nodes and anchors are projected against the namespace's CURRENT
+        // active memories through the SAME helper searchHarmonicRetrieval
+        // uses. A raw read still carries the stored title, summary, and
+        // anchor value of a memory that was later rejected or quarantined,
+        // and the deep-recall state prompt hands those to the policy LLM long
+        // before `loadMemory(...).active` can exclude the memory itself.
+        loadGraph: async () => readProjectedHarmonicGraph({
+          memoryDir: storage.dir,
+          abstractionNodeStoreDir: graphStoreDir,
+          anchorsEnabled: true
+        }),
+        loadMemory: async (memoryId) => {
+          const memory = await storage.getMemoryById(memoryId);
+          if (!memory || isSupportPassportPrivateMemory(memory)) return null;
+          return {
+            memoryId,
+            content: memory.frontmatter.structuredAttributes ? stripAttributesSuffix(memory.content) : memory.content,
+            // Enumerate the active set — never an exclusion list (§41).
+            active: inferMemoryStatus(
+              memory.frontmatter,
+              toMemoryPathRel(storage.dir, memory.path)
+            ) === "active"
+          };
+        },
+        callPolicy: (statePrompt, timeoutMs) => callDeepRecallPolicyLlm({
+          statePrompt,
+          config,
+          localLlm: this.orchestrator.localLlm ?? null,
+          fallbackLlm: this.orchestrator.fastGatewayLlm ?? null,
+          timeoutMs
+        })
+      },
+      query
+    );
+    return { ...result, rendered: renderDeepRecallResult(result) };
+  }
   async recallXray(request) {
     return this.accessRecallSurface.recallXray(request);
   }
@@ -16864,11 +16972,27 @@ var EngramAccessService = class extends SupportPassportAccessServiceBase {
     if (!this.orchestrator.sharedContext) {
       return { enabled: false, reason: "Shared context is disabled. Enable `sharedContextEnabled: true`." };
     }
-    const fp = await this.orchestrator.sharedContext.writeAgentOutput({
-      agentId: request.agentId,
-      title: request.title,
-      content: request.content
-    });
+    let fp;
+    try {
+      fp = await this.orchestrator.sharedContext.writeAgentOutput({
+        agentId: request.agentId,
+        title: request.title,
+        content: request.content,
+        // The origin is server-owned in BOTH cases (issue #1957 review
+        // round 4): the authenticated principal when one resolved, and a
+        // reserved unattributed token otherwise — a principal-less
+        // authenticated request must never stamp the client's `agentId`
+        // as audit metadata. The client label survives only as the
+        // producer, which feeds grouping and display, never authority.
+        ...request.principal ? { authenticatedIdentity: request.principal } : { unattributedOrigin: UNATTRIBUTED_ACCESS_WRITE_ORIGIN }
+      });
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      if (message.startsWith("shared-context write origin mismatch")) {
+        throw new EngramAccessInputError(message);
+      }
+      throw error;
+    }
     return { written: true, path: fp };
   }
   async sharedFeedbackRecord(request) {
@@ -18248,4 +18372,4 @@ export {
   EngramAccessService,
   AccessAdminOpsSurface
 };
-//# sourceMappingURL=chunk-3QWF54M4.js.map
+//# sourceMappingURL=chunk-5P2KNFJZ.js.map