@remnic/core 9.69.96 → 9.69.97

package/dist/{chunk-TMSXWOBZ.js → chunk-SI36RWC3.js}

@@ -1,6 +1,6 @@
 import {
   headerValue
-} from "./chunk-7RXCMVFQ.js";
+} from "./chunk-NJAIR57U.js";
 
 // src/adapters/replit.ts
 var ReplitAdapter = class {
@@ -14,9 +14,10 @@ var ReplitAdapter = class {
   }
   resolveIdentity(context) {
     const mcpSessionId = headerValue(context.headers, "mcp-session-id");
-    const namespace = headerValue(context.headers, "x-engram-namespace") || "replit";
+    const namespaceHeader = headerValue(context.headers, "x-engram-namespace");
     return {
-      namespace,
+      namespace: namespaceHeader ?? "replit",
+      namespaceExplicit: namespaceHeader !== void 0,
       principal: "replit-agent",
       sessionKey: mcpSessionId ?? context.sessionKey,
       adapterId: this.id
@@ -27,4 +28,4 @@ var ReplitAdapter = class {
 export {
   ReplitAdapter
 };
-//# sourceMappingURL=chunk-TMSXWOBZ.js.map
+//# sourceMappingURL=chunk-SI36RWC3.js.map

package/dist/{chunk-TMSXWOBZ.js.map → chunk-SI36RWC3.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/adapters/replit.ts"],"sourcesContent":["import { headerValue, type AdapterContext, type EngramAdapter, type ResolvedIdentity } from \"./types.js\";\n\n/**\n * Replit Agent adapter.\n *\n * Detection: Replit Agent supports MCP natively (HTTP-only, configured\n * via the Integrations pane). It does NOT send identifying headers\n * automatically — detection relies on user-configured custom headers\n * in Replit's MCP Integrations UI.\n *\n * Replit provides env vars to running code (REPL_ID, REPL_OWNER,\n * REPL_SLUG) but these are NOT sent as HTTP headers to MCP servers.\n *\n * To identify Replit connections, users should configure a custom header\n * in the Replit Integrations pane when adding the Engram MCP server:\n *   Header Name: X-Engram-Client-Id\n *   Header Value: replit\n *\n * Optionally also set X-Engram-Namespace for project scoping. Principal\n * overrides are intentionally handled only by the HTTP server's\n * trustPrincipalHeader gate. Adapters must not independently trust\n * X-Engram-Principal.\n */\nexport class ReplitAdapter implements EngramAdapter {\n  readonly id = \"replit\";\n\n  matches(context: AdapterContext): boolean {\n    // Primary: user-configured client identifier header\n    const clientId = headerValue(context.headers, \"x-engram-client-id\");\n    if (clientId?.toLowerCase() === \"replit\") return true;\n\n    // MCP clientInfo (Replit's MCP client name is not publicly documented,\n    // but check for it in case it becomes available)\n    const clientName = context.clientInfo?.name?.toLowerCase() ?? \"\";\n    if (clientName.includes(\"replit\")) return true;\n\n    return false;\n  }\n\n  resolveIdentity(context: AdapterContext): ResolvedIdentity {\n    const mcpSessionId = headerValue(context.headers, \"mcp-session-id\");\n\n    const namespace = headerValue(context.headers, \"x-engram-namespace\")\n      || \"replit\";\n\n    return {\n      namespace,\n      principal: \"replit-agent\",\n      sessionKey: mcpSessionId ?? context.sessionKey,\n      adapterId: this.id,\n    };\n  }\n}\n"],"mappings":";;;;;AAuBO,IAAM,gBAAN,MAA6C;AAAA,EACzC,KAAK;AAAA,EAEd,QAAQ,SAAkC;AAExC,UAAM,WAAW,YAAY,QAAQ,SAAS,oBAAoB;AAClE,QAAI,UAAU,YAAY,MAAM,SAAU,QAAO;AAIjD,UAAM,aAAa,QAAQ,YAAY,MAAM,YAAY,KAAK;AAC9D,QAAI,WAAW,SAAS,QAAQ,EAAG,QAAO;AAE1C,WAAO;AAAA,EACT;AAAA,EAEA,gBAAgB,SAA2C;AACzD,UAAM,eAAe,YAAY,QAAQ,SAAS,gBAAgB;AAElE,UAAM,YAAY,YAAY,QAAQ,SAAS,oBAAoB,KAC9D;AAEL,WAAO;AAAA,MACL;AAAA,MACA,WAAW;AAAA,MACX,YAAY,gBAAgB,QAAQ;AAAA,MACpC,WAAW,KAAK;AAAA,IAClB;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../src/adapters/replit.ts"],"sourcesContent":["import { headerValue, type AdapterContext, type EngramAdapter, type ResolvedIdentity } from \"./types.js\";\n\n/**\n * Replit Agent adapter.\n *\n * Detection: Replit Agent supports MCP natively (HTTP-only, configured\n * via the Integrations pane). It does NOT send identifying headers\n * automatically — detection relies on user-configured custom headers\n * in Replit's MCP Integrations UI.\n *\n * Replit provides env vars to running code (REPL_ID, REPL_OWNER,\n * REPL_SLUG) but these are NOT sent as HTTP headers to MCP servers.\n *\n * To identify Replit connections, users should configure a custom header\n * in the Replit Integrations pane when adding the Engram MCP server:\n *   Header Name: X-Engram-Client-Id\n *   Header Value: replit\n *\n * Optionally also set X-Engram-Namespace for project scoping. Principal\n * overrides are intentionally handled only by the HTTP server's\n * trustPrincipalHeader gate. Adapters must not independently trust\n * X-Engram-Principal.\n */\nexport class ReplitAdapter implements EngramAdapter {\n  readonly id = \"replit\";\n\n  matches(context: AdapterContext): boolean {\n    // Primary: user-configured client identifier header\n    const clientId = headerValue(context.headers, \"x-engram-client-id\");\n    if (clientId?.toLowerCase() === \"replit\") return true;\n\n    // MCP clientInfo (Replit's MCP client name is not publicly documented,\n    // but check for it in case it becomes available)\n    const clientName = context.clientInfo?.name?.toLowerCase() ?? \"\";\n    if (clientName.includes(\"replit\")) return true;\n\n    return false;\n  }\n\n  resolveIdentity(context: AdapterContext): ResolvedIdentity {\n    const mcpSessionId = headerValue(context.headers, \"mcp-session-id\");\n\n    const namespaceHeader = headerValue(context.headers, \"x-engram-namespace\");\n\n    return {\n      namespace: namespaceHeader ?? \"replit\",\n      namespaceExplicit: namespaceHeader !== undefined,\n      principal: \"replit-agent\",\n      sessionKey: mcpSessionId ?? context.sessionKey,\n      adapterId: this.id,\n    };\n  }\n}\n"],"mappings":";;;;;AAuBO,IAAM,gBAAN,MAA6C;AAAA,EACzC,KAAK;AAAA,EAEd,QAAQ,SAAkC;AAExC,UAAM,WAAW,YAAY,QAAQ,SAAS,oBAAoB;AAClE,QAAI,UAAU,YAAY,MAAM,SAAU,QAAO;AAIjD,UAAM,aAAa,QAAQ,YAAY,MAAM,YAAY,KAAK;AAC9D,QAAI,WAAW,SAAS,QAAQ,EAAG,QAAO;AAE1C,WAAO;AAAA,EACT;AAAA,EAEA,gBAAgB,SAA2C;AACzD,UAAM,eAAe,YAAY,QAAQ,SAAS,gBAAgB;AAElE,UAAM,kBAAkB,YAAY,QAAQ,SAAS,oBAAoB;AAEzE,WAAO;AAAA,MACL,WAAW,mBAAmB;AAAA,MAC9B,mBAAmB,oBAAoB;AAAA,MACvC,WAAW;AAAA,MACX,YAAY,gBAAgB,QAAQ;AAAA,MACpC,WAAW,KAAK;AAAA,IAClB;AAAA,EACF;AACF;","names":[]}

package/dist/cli.js

@@ -91,7 +91,7 @@ import {
   runWorkProductStatusCliCommand,
   runWorkProjectCliCommand,
   runWorkTaskCliCommand
-} from "./chunk-R5B3OWI4.js";
+} from "./chunk-HJ3CBZIG.js";
 import "./chunk-H4CKS5B2.js";
 import "./chunk-MMACM5G2.js";
 import "./chunk-54BGIBCR.js";
@@ -189,16 +189,16 @@ import "./chunk-UHESJ6TQ.js";
 import "./chunk-27NO2KVB.js";
 import "./chunk-KFZY2OFH.js";
 import "./chunk-B32WYRXX.js";
-import "./chunk-HQCUUVG2.js";
+import "./chunk-RMV2JYOT.js";
 import "./chunk-V7IZKJI3.js";
 import "./chunk-XW2T4QAW.js";
-import "./chunk-F23U5YE7.js";
-import "./chunk-42NQ7AVG.js";
-import "./chunk-TMSXWOBZ.js";
+import "./chunk-2KB7TTAP.js";
+import "./chunk-HCAGBFE7.js";
+import "./chunk-SI36RWC3.js";
 import "./chunk-TB6CBZ5V.js";
-import "./chunk-J64TK33U.js";
-import "./chunk-RSUYKGGZ.js";
-import "./chunk-7RXCMVFQ.js";
+import "./chunk-3JKYQBLC.js";
+import "./chunk-7RKSJVOQ.js";
+import "./chunk-NJAIR57U.js";
 import "./chunk-ZSEFGDCI.js";
 import "./chunk-P6P35FY4.js";
 import "./chunk-3HSRWJTC.js";

package/dist/index.js

@@ -181,7 +181,7 @@ import {
   writeManifest,
   writeMeetingEpisodeMemory,
   writeTimelineState
-} from "./chunk-KNI4SGQE.js";
+} from "./chunk-CTEUPJMV.js";
 import {
   WEARABLE_SOURCE_PREFIX,
   buildExtractionTurns,
@@ -558,7 +558,7 @@ import {
   setVaultPublisherTestHooks,
   summarizeVaultPublish,
   validateVaultProperties
-} from "./chunk-R5B3OWI4.js";
+} from "./chunk-HJ3CBZIG.js";
 import "./chunk-H4CKS5B2.js";
 import "./chunk-MMACM5G2.js";
 import "./chunk-54BGIBCR.js";
@@ -895,19 +895,19 @@ import "./chunk-QW27DOHG.js";
 import {
   EngramAccessHttpServer,
   MeetingsInputError
-} from "./chunk-HQCUUVG2.js";
+} from "./chunk-RMV2JYOT.js";
 import {
   WearablesInputError,
   describeErrorForOperator
 } from "./chunk-V7IZKJI3.js";
 import "./chunk-XW2T4QAW.js";
-import "./chunk-F23U5YE7.js";
-import "./chunk-42NQ7AVG.js";
-import "./chunk-TMSXWOBZ.js";
+import "./chunk-2KB7TTAP.js";
+import "./chunk-HCAGBFE7.js";
+import "./chunk-SI36RWC3.js";
 import "./chunk-TB6CBZ5V.js";
-import "./chunk-J64TK33U.js";
-import "./chunk-RSUYKGGZ.js";
-import "./chunk-7RXCMVFQ.js";
+import "./chunk-3JKYQBLC.js";
+import "./chunk-7RKSJVOQ.js";
+import "./chunk-NJAIR57U.js";
 import "./chunk-ZSEFGDCI.js";
 import "./chunk-P6P35FY4.js";
 import "./chunk-3HSRWJTC.js";

package/dist/orchestrator.js

@@ -4,7 +4,7 @@ import {
   graphPathRelativeToStorage,
   mergeGraphExpandedResults,
   qmdStartupCollectionChecksWithTimeout
-} from "./chunk-KNI4SGQE.js";
+} from "./chunk-CTEUPJMV.js";
 import "./chunk-JDOBIFBK.js";
 import "./chunk-KYOZ5E6V.js";
 import {
@@ -116,7 +116,7 @@ import "./chunk-PYIR4SSB.js";
 import "./chunk-4G2YCKLT.js";
 import "./chunk-GDVORIFM.js";
 import "./chunk-3I4FUAVJ.js";
-import "./chunk-R5B3OWI4.js";
+import "./chunk-HJ3CBZIG.js";
 import "./chunk-H4CKS5B2.js";
 import "./chunk-MMACM5G2.js";
 import "./chunk-54BGIBCR.js";
@@ -231,16 +231,16 @@ import "./chunk-27NO2KVB.js";
 import "./chunk-KFZY2OFH.js";
 import "./chunk-B32WYRXX.js";
 import "./chunk-QW27DOHG.js";
-import "./chunk-HQCUUVG2.js";
+import "./chunk-RMV2JYOT.js";
 import "./chunk-V7IZKJI3.js";
 import "./chunk-XW2T4QAW.js";
-import "./chunk-F23U5YE7.js";
-import "./chunk-42NQ7AVG.js";
-import "./chunk-TMSXWOBZ.js";
+import "./chunk-2KB7TTAP.js";
+import "./chunk-HCAGBFE7.js";
+import "./chunk-SI36RWC3.js";
 import "./chunk-TB6CBZ5V.js";
-import "./chunk-J64TK33U.js";
-import "./chunk-RSUYKGGZ.js";
-import "./chunk-7RXCMVFQ.js";
+import "./chunk-3JKYQBLC.js";
+import "./chunk-7RKSJVOQ.js";
+import "./chunk-NJAIR57U.js";
 import "./chunk-ZSEFGDCI.js";
 import "./chunk-P6P35FY4.js";
 import "./chunk-3HSRWJTC.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.69.96",
+  "version": "9.69.97",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -3327,7 +3327,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.69.96"
+    "@remnic/coding-graph": "^9.69.97"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/access-http-adapter-namespace.test.ts

@@ -0,0 +1,217 @@
+import assert from "node:assert/strict";
+import { mkdtemp, rm } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import test from "node:test";
+
+import { EngramAccessHttpServer } from "./access-http.js";
+import { EngramAccessService, type EngramAccessRecallRequest, type EngramAccessRecallResponse } from "./access-service.js";
+import { parseConfig } from "./config.js";
+import { Orchestrator } from "./orchestrator.js";
+import type { PluginConfig } from "./types.js";
+
+const FLAT_ADAPTER_IDS = ["claude-code", "codex", "replit", "grok", "opencode", "hermes"];
+
+const NAMESPACED_ADAPTERS = [
+  { clientId: "claude-code", principal: "claude-code" },
+  { clientId: "codex", principal: "codex" },
+  { clientId: "replit", principal: "replit-agent" },
+  { clientId: "grok", principal: "grok" },
+  { clientId: "opencode", principal: "opencode" },
+  { clientId: "hermes", principal: "hermes-agent" },
+];
+
+interface TestDaemon {
+  service: EngramAccessService;
+  port: number;
+  close(): Promise<void>;
+}
+
+function makeConfig(memoryDir: string, overrides: Partial<PluginConfig> = {}) {
+  return parseConfig({
+    openaiApiKey: "sk-test",
+    memoryDir,
+    workspaceDir: path.join(memoryDir, "workspace"),
+    qmdEnabled: false,
+    embeddingFallbackEnabled: false,
+    recallPlannerEnabled: false,
+    sharedContextEnabled: false,
+    initGateTimeoutMs: 1000,
+    ...overrides,
+  });
+}
+
+async function startServer(overrides: Partial<PluginConfig> = {}): Promise<TestDaemon> {
+  const memoryDir = await mkdtemp(path.join(os.tmpdir(), "remnic-3166-"));
+  const orchestrator = new Orchestrator(makeConfig(memoryDir, overrides));
+  const service = new EngramAccessService(orchestrator);
+  const server = new EngramAccessHttpServer({
+    service,
+    host: "127.0.0.1",
+    port: 0,
+    authToken: "secret-token",
+    adminConsoleEnabled: false,
+  });
+  const { port } = await server.start();
+  return {
+    service,
+    port,
+    async close() {
+      await server.stop();
+      await rm(memoryDir, { recursive: true, force: true });
+    },
+  };
+}
+
+interface RecallOutcome {
+  status: number;
+  isError: boolean;
+  text: string;
+  payload?: EngramAccessRecallResponse;
+}
+
+interface McpToolReply {
+  result?: { content?: Array<{ text?: string }>; isError?: boolean };
+}
+
+async function mcpRecall(
+  port: number,
+  args: EngramAccessRecallRequest,
+  headers: Record<string, string> = {},
+): Promise<RecallOutcome> {
+  const res = await fetch(`http://127.0.0.1:${port}/mcp`, {
+    method: "POST",
+    headers: {
+      authorization: "Bearer secret-token",
+      "content-type": "application/json",
+      ...headers,
+    },
+    body: JSON.stringify({
+      jsonrpc: "2.0",
+      id: 1,
+      method: "tools/call",
+      params: { name: "engram.recall", arguments: args },
+    }),
+  });
+  const body: McpToolReply = JSON.parse(await res.text());
+  const text = body.result?.content?.[0]?.text ?? "";
+  const outcome: RecallOutcome = {
+    status: res.status,
+    isError: body.result?.isError === true,
+    text,
+  };
+  if (!outcome.isError) outcome.payload = JSON.parse(text);
+  return outcome;
+}
+
+test("flat daemon: all six built-in adapters resolve the configured default namespace over MCP recall", async () => {
+  const daemon = await startServer({
+    namespacesEnabled: false,
+    defaultNamespace: "flat-tenant",
+  });
+  try {
+    await daemon.service.memoryStore({ content: "the launch codeword is PERIHELION" });
+    for (const clientId of FLAT_ADAPTER_IDS) {
+      const outcome = await mcpRecall(
+        daemon.port,
+        { query: "launch codeword" },
+        { "x-engram-client-id": clientId },
+      );
+      assert.equal(outcome.status, 200, `${clientId}: recall must reach the op`);
+      assert.equal(outcome.isError, false, `${clientId}: ${outcome.text}`);
+      assert.equal(outcome.payload?.namespace, "flat-tenant", `${clientId}: default namespace`);
+      assert.ok(
+        outcome.payload?.context.includes("PERIHELION"),
+        `${clientId}: default-namespace memory must be recalled`,
+      );
+    }
+  } finally {
+    await daemon.close();
+  }
+});
+
+test("flat daemon: explicit X-Engram-Namespace is enforced, not silently dropped", async () => {
+  const daemon = await startServer({
+    namespacesEnabled: false,
+    defaultNamespace: "flat-tenant",
+  });
+  try {
+    await daemon.service.memoryStore({ content: "the launch codeword is PERIHELION" });
+
+    const validDefault = await mcpRecall(daemon.port, { query: "launch codeword" }, {
+      "x-engram-client-id": "claude-code",
+      "x-engram-namespace": "flat-tenant",
+    });
+    assert.equal(validDefault.isError, false, validDefault.text);
+    assert.equal(validDefault.payload?.namespace, "flat-tenant");
+    assert.ok(validDefault.payload?.context.includes("PERIHELION"));
+
+    for (const outcome of [
+      await mcpRecall(daemon.port, { query: "launch codeword" }, {
+        "x-engram-client-id": "claude-code",
+        "x-engram-namespace": "off-books",
+      }),
+      await mcpRecall(daemon.port, { query: "launch codeword", namespace: "off-books" }, {
+        "x-engram-client-id": "claude-code",
+      }),
+    ]) {
+      assert.equal(outcome.isError, true, "non-default namespace must be rejected");
+      assert.match(outcome.text, /unsupported namespace: off-books/);
+    }
+  } finally {
+    await daemon.close();
+  }
+});
+
+test("namespaced daemon: adapters keep their self-namespaces over MCP recall", async () => {
+  const daemon = await startServer({
+    namespacesEnabled: true,
+    defaultNamespace: "main",
+    namespacePolicies: NAMESPACED_ADAPTERS.map(({ clientId, principal }) => ({
+      name: clientId,
+      readPrincipals: [principal],
+      writePrincipals: [principal],
+    })),
+  });
+  try {
+    await daemon.service.memoryStore({
+      content: "main vault code is QUASAR-main",
+      namespace: "main",
+      authenticatedPrincipal: "operator",
+    });
+    for (const { clientId, principal } of NAMESPACED_ADAPTERS) {
+      await daemon.service.memoryStore({
+        content: `the ${clientId} vault code is NOVA-${clientId}`,
+        namespace: clientId,
+        authenticatedPrincipal: principal,
+      });
+    }
+
+    for (const { clientId } of NAMESPACED_ADAPTERS) {
+      const outcome = await mcpRecall(daemon.port, { query: "vault code" }, {
+        "x-engram-client-id": clientId,
+      });
+      assert.equal(outcome.status, 200, `${clientId}: recall must reach the op`);
+      assert.equal(outcome.isError, false, `${clientId}: ${outcome.text}`);
+      assert.equal(outcome.payload?.namespace, clientId, `${clientId}: self-namespace kept`);
+      assert.ok(
+        outcome.payload?.context.includes(`NOVA-${clientId}`),
+        `${clientId}: own namespace memory must be recalled`,
+      );
+      assert.ok(
+        !outcome.payload?.context.includes("QUASAR-main"),
+        `${clientId}: default namespace must stay isolated`,
+      );
+    }
+
+    const crossTenant = await mcpRecall(daemon.port, { query: "vault code" }, {
+      "x-engram-client-id": "claude-code",
+    });
+    assert.ok(
+      !crossTenant.payload?.context.includes("NOVA-codex"),
+      "one adapter's namespace must not leak into another's recall",
+    );
+  } finally {
+    await daemon.close();
+  }
+});

package/src/access-http.ts

@@ -7,6 +7,7 @@ import path from "node:path";
 import { fileURLToPath, URL } from "node:url";
 import { gunzipSync } from "node:zlib";
 import { log } from "./logger.js";
+import { resolveNamespaceCapabilities } from "./capabilities.js";
 import { WriteRateLimiter, type WriteRateLimitReservation } from "./write-rate-limiter.js";
 import { abortError, isAbortError } from "./abort-error.js";
 import { EngramAccessForbiddenError } from "./access-errors.js";
@@ -716,6 +717,13 @@ export class EngramAccessHttpServer extends ReviewDeckAccessHttpBase {
         principal = adapterIdentity.principal;
       }
       namespace = adapterIdentity.namespace;
+      const config = this.service.configRef;
+      if (
+        adapterIdentity.namespaceExplicit === false &&
+        !(config && resolveNamespaceCapabilities(config).namespaces)
+      ) {
+        namespace = undefined;
+      }
       sessionKey = adapterIdentity.sessionKey;
     }
 

package/src/adapters/claude-code.ts

@@ -41,12 +41,12 @@ export class ClaudeCodeAdapter implements EngramAdapter {
     // MCP session ID (standard MCP header, server-assigned)
     const mcpSessionId = headerValue(context.headers, "mcp-session-id");
 
-    // Namespace: explicit header > default
-    const namespace = headerValue(context.headers, "x-engram-namespace")
-      || "claude-code";
+    // Namespace: explicit header > adapter default
+    const namespaceHeader = headerValue(context.headers, "x-engram-namespace");
 
     return {
-      namespace,
+      namespace: namespaceHeader ?? "claude-code",
+      namespaceExplicit: namespaceHeader !== undefined,
       principal: "claude-code",
       sessionKey: mcpSessionId ?? context.sessionKey,
       adapterId: this.id,

package/src/adapters/codex.ts

@@ -43,11 +43,11 @@ export class CodexAdapter implements EngramAdapter {
     const mcpSessionId = headerValue(context.headers, "mcp-session-id");
 
     // Namespace: explicit header > default
-    const namespace = headerValue(context.headers, "x-engram-namespace")
-      || "codex";
+    const namespaceHeader = headerValue(context.headers, "x-engram-namespace");
 
     return {
-      namespace,
+      namespace: namespaceHeader ?? "codex",
+      namespaceExplicit: namespaceHeader !== undefined,
       principal: "codex",
       sessionKey: mcpSessionId ?? context.sessionKey,
       adapterId: this.id,

package/src/adapters/grok-opencode.test.ts

@@ -49,6 +49,7 @@ test("GrokAdapter resolves identity with adapter-owned principal and header name
     })),
     {
       namespace: "my-project",
+      namespaceExplicit: true,
       principal: "grok",
       sessionKey: "sess-grok-1",
       adapterId: "grok",
@@ -91,6 +92,7 @@ test("OpenCodeAdapter resolves identity with adapter-owned principal", () => {
   }));
   assert.deepEqual(resolved, {
     namespace: "opencode",
+    namespaceExplicit: false,
     principal: "opencode",
     sessionKey: "sess-oc-1",
     adapterId: "opencode",

package/src/adapters/grok.ts

@@ -40,11 +40,11 @@ export class GrokAdapter implements EngramAdapter {
     const mcpSessionId = headerValue(context.headers, "mcp-session-id");
 
     // Namespace: explicit header > default
-    const namespace = headerValue(context.headers, "x-engram-namespace")
-      || "grok";
+    const namespaceHeader = headerValue(context.headers, "x-engram-namespace");
 
     return {
-      namespace,
+      namespace: namespaceHeader ?? "grok",
+      namespaceExplicit: namespaceHeader !== undefined,
       principal: "grok",
       sessionKey: mcpSessionId ?? context.sessionKey,
       adapterId: this.id,

package/src/adapters/hermes.ts

@@ -47,11 +47,11 @@ export class HermesAdapter implements EngramAdapter {
   resolveIdentity(context: AdapterContext): ResolvedIdentity {
     const sessionId = headerValue(context.headers, "x-hermes-session-id");
 
-    const namespace = headerValue(context.headers, "x-engram-namespace")
-      || "hermes";
+    const namespaceHeader = headerValue(context.headers, "x-engram-namespace");
 
     return {
-      namespace,
+      namespace: namespaceHeader ?? "hermes",
+      namespaceExplicit: namespaceHeader !== undefined,
       principal: "hermes-agent",
       sessionKey: sessionId ?? context.sessionKey,
       adapterId: this.id,

package/src/adapters/opencode.ts

@@ -39,11 +39,11 @@ export class OpenCodeAdapter implements EngramAdapter {
     const mcpSessionId = headerValue(context.headers, "mcp-session-id");
 
     // Namespace: explicit header > default
-    const namespace = headerValue(context.headers, "x-engram-namespace")
-      || "opencode";
+    const namespaceHeader = headerValue(context.headers, "x-engram-namespace");
 
     return {
-      namespace,
+      namespace: namespaceHeader ?? "opencode",
+      namespaceExplicit: namespaceHeader !== undefined,
       principal: "opencode",
       sessionKey: mcpSessionId ?? context.sessionKey,
       adapterId: this.id,

package/src/adapters/replit.ts

@@ -40,11 +40,11 @@ export class ReplitAdapter implements EngramAdapter {
   resolveIdentity(context: AdapterContext): ResolvedIdentity {
     const mcpSessionId = headerValue(context.headers, "mcp-session-id");
 
-    const namespace = headerValue(context.headers, "x-engram-namespace")
-      || "replit";
+    const namespaceHeader = headerValue(context.headers, "x-engram-namespace");
 
     return {
-      namespace,
+      namespace: namespaceHeader ?? "replit",
+      namespaceExplicit: namespaceHeader !== undefined,
       principal: "replit-agent",
       sessionKey: mcpSessionId ?? context.sessionKey,
       adapterId: this.id,

package/src/adapters/types.ts

@@ -22,6 +22,8 @@ export interface AdapterContext {
 export interface ResolvedIdentity {
   /** Engram namespace (scopes memory access) */
   namespace: string;
+  /** False for an inferred namespace; omitted values retain explicit-namespace validation. */
+  namespaceExplicit?: boolean;
   /** Engram principal (authorization subject) */
   principal: string;
   /** Session key for continuity tracking */

package/dist/chunk-F23U5YE7.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/adapters/grok.ts","../src/adapters/opencode.ts","../src/adapters/registry.ts"],"sourcesContent":["import { headerValue, type AdapterContext, type EngramAdapter, type ResolvedIdentity } from \"./types.js\";\n\n/**\n * Grok adapter.\n *\n * Detection: Grok clients identify themselves with a clientInfo name\n * containing \"grok\" in the MCP initialize handshake, and send\n * User-Agent: grok/<version> on HTTP requests. The exact clientInfo\n * name is not yet stable across Grok surfaces (desktop app, CLI), so\n * detection uses a contains-match for forward compatibility.\n *\n * User-configured identification is also supported via headers:\n *      \"headers\": { \"X-Engram-Client-Id\": \"grok\" }\n *\n * Principal overrides are intentionally handled only by the HTTP server's\n * trustPrincipalHeader gate. Adapters must not independently trust\n * X-Engram-Principal.\n */\nexport class GrokAdapter implements EngramAdapter {\n  readonly id = \"grok\";\n\n  matches(context: AdapterContext): boolean {\n    // Primary: MCP clientInfo from initialize handshake\n    const clientName = context.clientInfo?.name?.toLowerCase() ?? \"\";\n    if (clientName.includes(\"grok\")) return true;\n\n    // Fallback: User-Agent header (\"grok/<version>\")\n    const ua = headerValue(context.headers, \"user-agent\");\n    if (ua && ua.toLowerCase().startsWith(\"grok/\")) return true;\n\n    // Fallback: user-configured client identifier header\n    const clientId = headerValue(context.headers, \"x-engram-client-id\");\n    if (clientId?.toLowerCase() === \"grok\") return true;\n\n    return false;\n  }\n\n  resolveIdentity(context: AdapterContext): ResolvedIdentity {\n    // MCP session ID (standard MCP header, server-assigned)\n    const mcpSessionId = headerValue(context.headers, \"mcp-session-id\");\n\n    // Namespace: explicit header > default\n    const namespace = headerValue(context.headers, \"x-engram-namespace\")\n      || \"grok\";\n\n    return {\n      namespace,\n      principal: \"grok\",\n      sessionKey: mcpSessionId ?? context.sessionKey,\n      adapterId: this.id,\n    };\n  }\n}\n","import { headerValue, type AdapterContext, type EngramAdapter, type ResolvedIdentity } from \"./types.js\";\n\n/**\n * OpenCode adapter.\n *\n * Detection: OpenCode identifies itself as \"opencode\" in the MCP\n * clientInfo of its initialize handshake, and sends\n * User-Agent: opencode/<version> on HTTP requests.\n *\n * User-configured identification is also supported via headers in the\n * OpenCode MCP server config:\n *      \"headers\": { \"X-Engram-Client-Id\": \"opencode\" }\n *\n * Principal overrides are intentionally handled only by the HTTP server's\n * trustPrincipalHeader gate. Adapters must not independently trust\n * X-Engram-Principal.\n */\nexport class OpenCodeAdapter implements EngramAdapter {\n  readonly id = \"opencode\";\n\n  matches(context: AdapterContext): boolean {\n    // Primary: MCP clientInfo from initialize handshake\n    const clientName = context.clientInfo?.name?.toLowerCase() ?? \"\";\n    if (clientName.includes(\"opencode\")) return true;\n\n    // Fallback: User-Agent header (\"opencode/<version>\")\n    const ua = headerValue(context.headers, \"user-agent\");\n    if (ua && ua.toLowerCase().startsWith(\"opencode/\")) return true;\n\n    // Fallback: user-configured client identifier header\n    const clientId = headerValue(context.headers, \"x-engram-client-id\");\n    if (clientId?.toLowerCase() === \"opencode\") return true;\n\n    return false;\n  }\n\n  resolveIdentity(context: AdapterContext): ResolvedIdentity {\n    // MCP session ID (standard MCP header, server-assigned)\n    const mcpSessionId = headerValue(context.headers, \"mcp-session-id\");\n\n    // Namespace: explicit header > default\n    const namespace = headerValue(context.headers, \"x-engram-namespace\")\n      || \"opencode\";\n\n    return {\n      namespace,\n      principal: \"opencode\",\n      sessionKey: mcpSessionId ?? context.sessionKey,\n      adapterId: this.id,\n    };\n  }\n}\n","import type { AdapterContext, EngramAdapter, ResolvedIdentity } from \"./types.js\";\nimport { ClaudeCodeAdapter } from \"./claude-code.js\";\nimport { CodexAdapter } from \"./codex.js\";\nimport { GrokAdapter } from \"./grok.js\";\nimport { OpenCodeAdapter } from \"./opencode.js\";\nimport { ReplitAdapter } from \"./replit.js\";\nimport { HermesAdapter } from \"./hermes.js\";\n\n/**\n * Adapter registry. Attempts to identify which external system is\n * connecting by checking each registered adapter in order. Falls back\n * to explicit namespace/principal from the request args.\n */\nexport class AdapterRegistry {\n  private readonly adapters: EngramAdapter[];\n\n  constructor(adapters?: EngramAdapter[]) {\n    this.adapters = adapters ?? [\n      new HermesAdapter(),\n      new ReplitAdapter(),\n      new CodexAdapter(),\n      new ClaudeCodeAdapter(),\n      new GrokAdapter(),\n      new OpenCodeAdapter(),\n    ];\n  }\n\n  /**\n   * Try each adapter in order. Return the first match, or null if\n   * no adapter recognizes the request context.\n   */\n  resolve(context: AdapterContext): ResolvedIdentity | null {\n    for (const adapter of this.adapters) {\n      if (adapter.matches(context)) {\n        return adapter.resolveIdentity(context);\n      }\n    }\n    const namespace = context.namespace?.trim();\n    const principal = context.principal?.trim();\n    if (namespace && principal) {\n      return {\n        namespace,\n        principal,\n        sessionKey: context.sessionKey,\n        adapterId: \"explicit\",\n      };\n    }\n    return null;\n  }\n\n  /** List registered adapter IDs */\n  list(): string[] {\n    return this.adapters.map((a) => a.id);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAkBO,IAAM,cAAN,MAA2C;AAAA,EACvC,KAAK;AAAA,EAEd,QAAQ,SAAkC;AAExC,UAAM,aAAa,QAAQ,YAAY,MAAM,YAAY,KAAK;AAC9D,QAAI,WAAW,SAAS,MAAM,EAAG,QAAO;AAGxC,UAAM,KAAK,YAAY,QAAQ,SAAS,YAAY;AACpD,QAAI,MAAM,GAAG,YAAY,EAAE,WAAW,OAAO,EAAG,QAAO;AAGvD,UAAM,WAAW,YAAY,QAAQ,SAAS,oBAAoB;AAClE,QAAI,UAAU,YAAY,MAAM,OAAQ,QAAO;AAE/C,WAAO;AAAA,EACT;AAAA,EAEA,gBAAgB,SAA2C;AAEzD,UAAM,eAAe,YAAY,QAAQ,SAAS,gBAAgB;AAGlE,UAAM,YAAY,YAAY,QAAQ,SAAS,oBAAoB,KAC9D;AAEL,WAAO;AAAA,MACL;AAAA,MACA,WAAW;AAAA,MACX,YAAY,gBAAgB,QAAQ;AAAA,MACpC,WAAW,KAAK;AAAA,IAClB;AAAA,EACF;AACF;;;ACnCO,IAAM,kBAAN,MAA+C;AAAA,EAC3C,KAAK;AAAA,EAEd,QAAQ,SAAkC;AAExC,UAAM,aAAa,QAAQ,YAAY,MAAM,YAAY,KAAK;AAC9D,QAAI,WAAW,SAAS,UAAU,EAAG,QAAO;AAG5C,UAAM,KAAK,YAAY,QAAQ,SAAS,YAAY;AACpD,QAAI,MAAM,GAAG,YAAY,EAAE,WAAW,WAAW,EAAG,QAAO;AAG3D,UAAM,WAAW,YAAY,QAAQ,SAAS,oBAAoB;AAClE,QAAI,UAAU,YAAY,MAAM,WAAY,QAAO;AAEnD,WAAO;AAAA,EACT;AAAA,EAEA,gBAAgB,SAA2C;AAEzD,UAAM,eAAe,YAAY,QAAQ,SAAS,gBAAgB;AAGlE,UAAM,YAAY,YAAY,QAAQ,SAAS,oBAAoB,KAC9D;AAEL,WAAO;AAAA,MACL;AAAA,MACA,WAAW;AAAA,MACX,YAAY,gBAAgB,QAAQ;AAAA,MACpC,WAAW,KAAK;AAAA,IAClB;AAAA,EACF;AACF;;;ACtCO,IAAM,kBAAN,MAAsB;AAAA,EACV;AAAA,EAEjB,YAAY,UAA4B;AACtC,SAAK,WAAW,YAAY;AAAA,MAC1B,IAAI,cAAc;AAAA,MAClB,IAAI,cAAc;AAAA,MAClB,IAAI,aAAa;AAAA,MACjB,IAAI,kBAAkB;AAAA,MACtB,IAAI,YAAY;AAAA,MAChB,IAAI,gBAAgB;AAAA,IACtB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,QAAQ,SAAkD;AACxD,eAAW,WAAW,KAAK,UAAU;AACnC,UAAI,QAAQ,QAAQ,OAAO,GAAG;AAC5B,eAAO,QAAQ,gBAAgB,OAAO;AAAA,MACxC;AAAA,IACF;AACA,UAAM,YAAY,QAAQ,WAAW,KAAK;AAC1C,UAAM,YAAY,QAAQ,WAAW,KAAK;AAC1C,QAAI,aAAa,WAAW;AAC1B,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA,YAAY,QAAQ;AAAA,QACpB,WAAW;AAAA,MACb;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,OAAiB;AACf,WAAO,KAAK,SAAS,IAAI,CAAC,MAAM,EAAE,EAAE;AAAA,EACtC;AACF;","names":[]}