@remnic/core 9.7.12 → 9.7.13

package/dist/transfer/types.d.ts

@@ -20,26 +20,26 @@ declare const ExportManifestV1Schema: z.ZodObject<{
         bytes: number;
     }>, "many">;
 }, "strip", z.ZodTypeAny, {
-    format: "openclaw-engram-export";
+    schemaVersion: 1;
     createdAt: string;
-    pluginVersion: string;
     files: {
         path: string;
         sha256: string;
         bytes: number;
     }[];
-    schemaVersion: 1;
+    format: "openclaw-engram-export";
+    pluginVersion: string;
     includesTranscripts: boolean;
 }, {
-    format: "openclaw-engram-export";
+    schemaVersion: 1;
     createdAt: string;
-    pluginVersion: string;
     files: {
         path: string;
         sha256: string;
         bytes: number;
     }[];
-    schemaVersion: 1;
+    format: "openclaw-engram-export";
+    pluginVersion: string;
     includesTranscripts: boolean;
 }>;
 type ExportManifestV1 = z.infer<typeof ExportManifestV1Schema>;
@@ -75,26 +75,26 @@ declare const ExportBundleV1Schema: z.ZodObject<{
             bytes: number;
         }>, "many">;
     }, "strip", z.ZodTypeAny, {
-        format: "openclaw-engram-export";
+        schemaVersion: 1;
         createdAt: string;
-        pluginVersion: string;
         files: {
             path: string;
             sha256: string;
             bytes: number;
         }[];
-        schemaVersion: 1;
+        format: "openclaw-engram-export";
+        pluginVersion: string;
         includesTranscripts: boolean;
     }, {
-        format: "openclaw-engram-export";
+        schemaVersion: 1;
         createdAt: string;
-        pluginVersion: string;
         files: {
             path: string;
             sha256: string;
             bytes: number;
         }[];
-        schemaVersion: 1;
+        format: "openclaw-engram-export";
+        pluginVersion: string;
         includesTranscripts: boolean;
     }>;
     records: z.ZodArray<z.ZodObject<{
@@ -109,15 +109,15 @@ declare const ExportBundleV1Schema: z.ZodObject<{
     }>, "many">;
 }, "strip", z.ZodTypeAny, {
     manifest: {
-        format: "openclaw-engram-export";
+        schemaVersion: 1;
         createdAt: string;
-        pluginVersion: string;
         files: {
             path: string;
             sha256: string;
             bytes: number;
         }[];
-        schemaVersion: 1;
+        format: "openclaw-engram-export";
+        pluginVersion: string;
         includesTranscripts: boolean;
     };
     records: {
@@ -126,15 +126,15 @@ declare const ExportBundleV1Schema: z.ZodObject<{
     }[];
 }, {
     manifest: {
-        format: "openclaw-engram-export";
+        schemaVersion: 1;
         createdAt: string;
-        pluginVersion: string;
         files: {
             path: string;
             sha256: string;
             bytes: number;
         }[];
-        schemaVersion: 1;
+        format: "openclaw-engram-export";
+        pluginVersion: string;
         includesTranscripts: boolean;
     };
     records: {
@@ -313,16 +313,16 @@ declare const CapsuleBlockSchema: z.ZodObject<{
         peerProfiles: boolean;
     }>;
 }, "strip", z.ZodTypeAny, {
+    schemaVersion: string;
     includes: {
         procedural: boolean;
         taxonomy: boolean;
         identityAnchors: boolean;
         peerProfiles: boolean;
     };
-    description: string;
     id: string;
-    schemaVersion: string;
     version: string;
+    description: string;
     parentCapsule: string | null;
     retrievalPolicy: {
         tierWeights: Record<string, number>;
@@ -334,16 +334,16 @@ declare const CapsuleBlockSchema: z.ZodObject<{
         forkRoot: string;
     } | null;
 }, {
+    schemaVersion: string;
     includes: {
         procedural: boolean;
         taxonomy: boolean;
         identityAnchors: boolean;
         peerProfiles: boolean;
     };
-    description: string;
     id: string;
-    schemaVersion: string;
     version: string;
+    description: string;
     parentCapsule: string | null;
     retrievalPolicy: {
         tierWeights: Record<string, number>;
@@ -464,16 +464,16 @@ declare const ExportManifestV2Schema: z.ZodObject<{
             peerProfiles: boolean;
         }>;
     }, "strip", z.ZodTypeAny, {
+        schemaVersion: string;
         includes: {
             procedural: boolean;
             taxonomy: boolean;
             identityAnchors: boolean;
             peerProfiles: boolean;
         };
-        description: string;
         id: string;
-        schemaVersion: string;
         version: string;
+        description: string;
         parentCapsule: string | null;
         retrievalPolicy: {
             tierWeights: Record<string, number>;
@@ -485,16 +485,16 @@ declare const ExportManifestV2Schema: z.ZodObject<{
             forkRoot: string;
         } | null;
     }, {
+        schemaVersion: string;
         includes: {
             procedural: boolean;
             taxonomy: boolean;
             identityAnchors: boolean;
             peerProfiles: boolean;
         };
-        description: string;
         id: string;
-        schemaVersion: string;
         version: string;
+        description: string;
         parentCapsule: string | null;
         retrievalPolicy: {
             tierWeights: Record<string, number>;
@@ -507,25 +507,27 @@ declare const ExportManifestV2Schema: z.ZodObject<{
         } | null | undefined;
     }>;
 }, "strip", z.ZodTypeAny, {
-    format: "openclaw-engram-export";
+    schemaVersion: 2;
     createdAt: string;
-    pluginVersion: string;
     files: {
         path: string;
         sha256: string;
         bytes: number;
     }[];
+    format: "openclaw-engram-export";
+    pluginVersion: string;
+    includesTranscripts: boolean;
     capsule: {
+        schemaVersion: string;
         includes: {
             procedural: boolean;
             taxonomy: boolean;
             identityAnchors: boolean;
             peerProfiles: boolean;
         };
-        description: string;
         id: string;
-        schemaVersion: string;
         version: string;
+        description: string;
         parentCapsule: string | null;
         retrievalPolicy: {
             tierWeights: Record<string, number>;
@@ -537,28 +539,28 @@ declare const ExportManifestV2Schema: z.ZodObject<{
             forkRoot: string;
         } | null;
     };
-    schemaVersion: 2;
-    includesTranscripts: boolean;
 }, {
-    format: "openclaw-engram-export";
+    schemaVersion: 2;
     createdAt: string;
-    pluginVersion: string;
     files: {
         path: string;
         sha256: string;
         bytes: number;
     }[];
+    format: "openclaw-engram-export";
+    pluginVersion: string;
+    includesTranscripts: boolean;
     capsule: {
+        schemaVersion: string;
         includes: {
             procedural: boolean;
             taxonomy: boolean;
             identityAnchors: boolean;
             peerProfiles: boolean;
         };
-        description: string;
         id: string;
-        schemaVersion: string;
         version: string;
+        description: string;
         parentCapsule: string | null;
         retrievalPolicy: {
             tierWeights: Record<string, number>;
@@ -570,8 +572,6 @@ declare const ExportManifestV2Schema: z.ZodObject<{
             forkRoot: string;
         } | null | undefined;
     };
-    schemaVersion: 2;
-    includesTranscripts: boolean;
 }>;
 type ExportManifestV2 = z.infer<typeof ExportManifestV2Schema>;
 declare const ExportBundleV2Schema: z.ZodObject<{
@@ -683,16 +683,16 @@ declare const ExportBundleV2Schema: z.ZodObject<{
                 peerProfiles: boolean;
             }>;
         }, "strip", z.ZodTypeAny, {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            description: string;
             id: string;
-            schemaVersion: string;
             version: string;
+            description: string;
             parentCapsule: string | null;
             retrievalPolicy: {
                 tierWeights: Record<string, number>;
@@ -704,16 +704,16 @@ declare const ExportBundleV2Schema: z.ZodObject<{
                 forkRoot: string;
             } | null;
         }, {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            description: string;
             id: string;
-            schemaVersion: string;
             version: string;
+            description: string;
             parentCapsule: string | null;
             retrievalPolicy: {
                 tierWeights: Record<string, number>;
@@ -726,25 +726,27 @@ declare const ExportBundleV2Schema: z.ZodObject<{
             } | null | undefined;
         }>;
     }, "strip", z.ZodTypeAny, {
-        format: "openclaw-engram-export";
+        schemaVersion: 2;
         createdAt: string;
-        pluginVersion: string;
         files: {
             path: string;
             sha256: string;
             bytes: number;
         }[];
+        format: "openclaw-engram-export";
+        pluginVersion: string;
+        includesTranscripts: boolean;
         capsule: {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            description: string;
             id: string;
-            schemaVersion: string;
             version: string;
+            description: string;
             parentCapsule: string | null;
             retrievalPolicy: {
                 tierWeights: Record<string, number>;
@@ -756,28 +758,28 @@ declare const ExportBundleV2Schema: z.ZodObject<{
                 forkRoot: string;
             } | null;
         };
-        schemaVersion: 2;
-        includesTranscripts: boolean;
     }, {
-        format: "openclaw-engram-export";
+        schemaVersion: 2;
         createdAt: string;
-        pluginVersion: string;
         files: {
             path: string;
             sha256: string;
             bytes: number;
         }[];
+        format: "openclaw-engram-export";
+        pluginVersion: string;
+        includesTranscripts: boolean;
         capsule: {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            description: string;
             id: string;
-            schemaVersion: string;
             version: string;
+            description: string;
             parentCapsule: string | null;
             retrievalPolicy: {
                 tierWeights: Record<string, number>;
@@ -789,8 +791,6 @@ declare const ExportBundleV2Schema: z.ZodObject<{
                 forkRoot: string;
             } | null | undefined;
         };
-        schemaVersion: 2;
-        includesTranscripts: boolean;
     }>;
     records: z.ZodArray<z.ZodObject<{
         path: z.ZodString;
@@ -804,25 +804,27 @@ declare const ExportBundleV2Schema: z.ZodObject<{
     }>, "many">;
 }, "strip", z.ZodTypeAny, {
     manifest: {
-        format: "openclaw-engram-export";
+        schemaVersion: 2;
         createdAt: string;
-        pluginVersion: string;
         files: {
             path: string;
             sha256: string;
             bytes: number;
         }[];
+        format: "openclaw-engram-export";
+        pluginVersion: string;
+        includesTranscripts: boolean;
         capsule: {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            description: string;
             id: string;
-            schemaVersion: string;
             version: string;
+            description: string;
             parentCapsule: string | null;
             retrievalPolicy: {
                 tierWeights: Record<string, number>;
@@ -834,8 +836,6 @@ declare const ExportBundleV2Schema: z.ZodObject<{
                 forkRoot: string;
             } | null;
         };
-        schemaVersion: 2;
-        includesTranscripts: boolean;
     };
     records: {
         content: string;
@@ -843,25 +843,27 @@ declare const ExportBundleV2Schema: z.ZodObject<{
     }[];
 }, {
     manifest: {
-        format: "openclaw-engram-export";
+        schemaVersion: 2;
         createdAt: string;
-        pluginVersion: string;
         files: {
             path: string;
             sha256: string;
             bytes: number;
         }[];
+        format: "openclaw-engram-export";
+        pluginVersion: string;
+        includesTranscripts: boolean;
         capsule: {
+            schemaVersion: string;
             includes: {
                 procedural: boolean;
                 taxonomy: boolean;
                 identityAnchors: boolean;
                 peerProfiles: boolean;
             };
-            description: string;
             id: string;
-            schemaVersion: string;
             version: string;
+            description: string;
             parentCapsule: string | null;
             retrievalPolicy: {
                 tierWeights: Record<string, number>;
@@ -873,8 +875,6 @@ declare const ExportBundleV2Schema: z.ZodObject<{
                 forkRoot: string;
             } | null | undefined;
         };
-        schemaVersion: 2;
-        includesTranscripts: boolean;
     };
     records: {
         content: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.7.12",
+  "version": "9.7.13",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -3010,7 +3010,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.7.12"
+    "@remnic/coding-graph": "^9.7.13"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/access-http.ts

@@ -213,6 +213,12 @@ function resolveDefaultAdminConsolePublicDir(): string {
 
 const defaultAdminConsolePublicDir = resolveDefaultAdminConsolePublicDir();
 const correlationIdStore = new AsyncLocalStorage<string>();
+const RELAY_ADMIN_CONSOLE_ASSETS = new Map<string, string>([
+  ["relay.css", "text/css; charset=utf-8"],
+  ["relay-model.js", "application/javascript; charset=utf-8"],
+  ["relay.js", "application/javascript; charset=utf-8"],
+  ["replay.json", "application/json; charset=utf-8"],
+]);
 
 // Defaults for the write rate limit; overridable per instance via
 // `writeRateLimitWindowMs` / `writeRateLimitMaxRequests` (issue #1937).
@@ -1780,6 +1786,7 @@ export class EngramAccessHttpServer {
       if (!op) {
         throw new Error("access-boundary: operation not registered: relay_mission_read");
       }
+      const authenticatedPrincipal = this.resolveRequestPrincipal(req)?.trim() || undefined;
       const output = (await op.run(
         {
           missionId,
@@ -1790,10 +1797,21 @@ export class EngramAccessHttpServer {
         },
         {
           service: this.service,
-          authenticatedPrincipal: this.resolveRequestPrincipal(req),
+          authenticatedPrincipal,
         },
       )) as { result: unknown };
       res.setHeader("cache-control", "no-store");
+      if (authenticatedPrincipal !== undefined) {
+        try {
+          // Percent-encode so every configured principal remains a valid HTTP
+          // header value. Mission Control decodes this before constructing the
+          // server-validated human approval envelope.
+          res.setHeader("x-remnic-authenticated-principal", encodeURIComponent(authenticatedPrincipal));
+        } catch {
+          // An invalid Unicode principal cannot be represented as a Relay actor
+          // identifier. Omit it so Mission Control fails closed at the gate.
+        }
+      }
       this.respondJson(res, 200, output.result);
       return;
     }
@@ -3420,14 +3438,33 @@ export class EngramAccessHttpServer {
       res.end();
       return true;
     }
+    if (pathname === "/remnic/ui/relay" || pathname === "/engram/ui/relay") {
+      res.statusCode = 301;
+      res.setHeader("location", pathname + "/");
+      res.end();
+      return true;
+    }
     if (pathname === "/remnic/ui/" || pathname === "/engram/ui/") {
       await this.respondAdminConsoleShell(req, res, pathname);
       return true;
     }
+    if (pathname === "/remnic/ui/relay/" || pathname === "/engram/ui/relay/") {
+      await this.respondAdminConsoleShell(req, res, pathname, "relay/index.html");
+      return true;
+    }
     if (pathname === "/remnic/ui/app.js" || pathname === "/engram/ui/app.js") {
       await this.respondStatic(res, path.join(this.adminConsolePublicDir, "app.js"), "application/javascript; charset=utf-8");
       return true;
     }
+    const relayAsset = RELAY_ADMIN_CONSOLE_ASSETS.get(pathname.split("/").at(-1) ?? "");
+    const isRelayAsset = pathname.startsWith("/remnic/ui/relay/") || pathname.startsWith("/engram/ui/relay/");
+    if (isRelayAsset && relayAsset && pathname.split("/").length === 5) {
+      const fileName = pathname.split("/").at(-1);
+      if (fileName) {
+        await this.respondStatic(res, path.join(this.adminConsolePublicDir, "relay", fileName), relayAsset);
+        return true;
+      }
+    }
     return false;
   }
 
@@ -3435,9 +3472,10 @@ export class EngramAccessHttpServer {
     req: IncomingMessage,
     res: ServerResponse,
     pathname: string,
+    relativePath = "index.html",
   ): Promise<void> {
     try {
-      let body = await readFile(path.join(this.adminConsolePublicDir, "index.html"), "utf-8");
+      let body = await readFile(path.join(this.adminConsolePublicDir, relativePath), "utf-8");
       const canPrefillToken = this.adminConsolePrefillToken && this.isAuthorized(req, pathname);
       if (canPrefillToken) {
         const script = `<script>window.__REMNIC_ADMIN_CONSOLE_PREFILL_TOKEN__=${JSON.stringify(this.adminConsolePrefillToken)};</script>`;

package/src/relay/mission-access.test.ts

@@ -60,13 +60,33 @@ test("HTTP fixture endpoint returns one complete, namespace-authorized Relay rec
       service: fakeService(root, calls),
       port: 0,
       authToken: "relay-token",
-      principal: "relay-operator",
+      principal: "operator-build-week",
       adminConsoleEnabled: false,
     });
     const status = await server.start();
     const base = `http://127.0.0.1:${status.port}/engram/v1/relay/missions/${RELAY_DEMO_MISSION_ID}`;
     try {
       const fixture = createRelayMissionFixture();
+      const approval = fixture.find((event) => event.payload.kind === "correction_approved");
+      assert.ok(approval && approval.payload.kind === "correction_approved");
+      const mismatchedApproval = await fetch(`${base}/events`, {
+        method: "POST",
+        headers: authHeaders(),
+        body: JSON.stringify({
+          namespace: RELAY_DEMO_NAMESPACE,
+          event: {
+            ...approval,
+            idempotencyKey: "mismatched-human-approval",
+            payload: {
+              ...approval.payload,
+              approvedBy: { ...approval.payload.approvedBy, id: "different-operator" },
+            },
+          },
+        }),
+      });
+      assert.equal(mismatchedApproval.status, 400);
+      assert.equal(((await mismatchedApproval.json()) as { code: string }).code, "input_error");
+
       const blankNamespace = await fetch(`${base}/events`, {
         method: "POST",
         headers: authHeaders(),
@@ -91,7 +111,7 @@ test("HTTP fixture endpoint returns one complete, namespace-authorized Relay rec
         assert.equal(response.status, 201, responseBody);
         assert.equal(
           (JSON.parse(responseBody) as { event: { authenticatedPrincipal?: string } }).event.authenticatedPrincipal,
-          "relay-operator"
+          "operator-build-week"
         );
       }
 
@@ -108,6 +128,7 @@ test("HTTP fixture endpoint returns one complete, namespace-authorized Relay rec
       });
       assert.equal(response.status, 200);
       assert.equal(response.headers.get("cache-control"), "no-store");
+      assert.equal(response.headers.get("x-remnic-authenticated-principal"), "operator-build-week");
       const snapshot = (await response.json()) as RelayMissionSnapshot;
       assert.equal(snapshot.receipt.complete, true);
       assert.deepEqual(snapshot.receipt.activeDecisionIds, ["decision-refresh-after-expiry"]);
@@ -115,7 +136,40 @@ test("HTTP fixture endpoint returns one complete, namespace-authorized Relay rec
       assert.equal(snapshot.agents.length, 3);
       assert.equal(snapshot.tests.at(-1)?.status, "passed");
       assert.ok(calls.every((call) => call.namespace === RELAY_DEMO_NAMESPACE));
-      assert.ok(calls.every((call) => call.principal === "relay-operator"));
+      assert.ok(calls.every((call) => call.principal === "operator-build-week"));
+    } finally {
+      await server.stop();
+    }
+  });
+});
+
+test("HTTP Relay rejects human approval without a server-resolved principal before persistence", async () => {
+  await withTempRoot(async (root) => {
+    const server = new EngramAccessHttpServer({
+      service: fakeService(root, []),
+      port: 0,
+      authToken: "relay-token",
+      adminConsoleEnabled: false,
+    });
+    const status = await server.start();
+    const base = `http://127.0.0.1:${status.port}/engram/v1/relay/missions/${RELAY_DEMO_MISSION_ID}`;
+    try {
+      const approval = createRelayMissionFixture().find((event) => event.payload.kind === "correction_approved");
+      assert.ok(approval);
+      const rejected = await fetch(`${base}/events`, {
+        method: "POST",
+        headers: authHeaders(),
+        body: JSON.stringify({ namespace: RELAY_DEMO_NAMESPACE, event: approval }),
+      });
+      assert.equal(rejected.status, 400);
+      assert.equal(((await rejected.json()) as { code: string }).code, "input_error");
+
+      const snapshotResponse = await fetch(`${base}?namespace=${RELAY_DEMO_NAMESPACE}`, {
+        headers: authHeaders(),
+      });
+      assert.equal(snapshotResponse.status, 200);
+      assert.equal(snapshotResponse.headers.get("x-remnic-authenticated-principal"), null);
+      assert.equal(((await snapshotResponse.json()) as RelayMissionSnapshot).found, false);
     } finally {
       await server.stop();
     }
@@ -150,6 +204,7 @@ test("HTTP Relay surface distinguishes empty, invalid, unauthorized, and backend
 
       const empty = await fetch(emptyUrl, { headers: authHeaders("read-token") });
       assert.equal(empty.status, 200);
+      assert.equal(empty.headers.get("x-remnic-authenticated-principal"), null);
       assert.deepEqual(await empty.json(), assertEmptyMissionShape());
 
       const badLimit = await fetch(`${emptyUrl}&limit=501`, {

package/src/relay/mission-access.ts

@@ -1,7 +1,7 @@
 import { z } from "zod";
 
 import { type OperationContext, defineOperation } from "../access-boundary.js";
-import type { EngramAccessService } from "../access-service.js";
+import { EngramAccessInputError, type EngramAccessService } from "../access-service.js";
 import {
   RELAY_MISSION_MAX_EVENT_LIMIT,
   RelayIsoDateTimeSchema,
@@ -76,12 +76,26 @@ export async function appendRelayMissionEvent(
   authenticatedPrincipal?: string,
   beforeAppend?: () => void | Promise<void>
 ): Promise<RelayMissionAppendResult> {
-  const resolved = await service.getWritableStorageForNamespace(input.namespace ?? undefined, authenticatedPrincipal);
+  const event = RelayMissionEventInputSchema.parse(input.event);
+  const approvalPrincipal = authenticatedPrincipal?.trim() || undefined;
+  if (event.payload.kind === "correction_approved" && event.payload.approvedBy.kind === "human") {
+    if (!approvalPrincipal) {
+      throw new EngramAccessInputError(
+        "Relay human approval requires a server-resolved authenticated principal"
+      );
+    }
+    if (event.payload.approvedBy.id !== approvalPrincipal) {
+      throw new EngramAccessInputError(
+        "Relay human approval identity must match the server-resolved authenticated principal"
+      );
+    }
+  }
+  const resolved = await service.getWritableStorageForNamespace(input.namespace ?? undefined, approvalPrincipal);
   const store = new RelayMissionStore({
     rootDir: resolved.storage.dir,
     namespace: resolved.namespace,
   });
-  return store.append(input.missionId, input.event, { authenticatedPrincipal, beforeAppend });
+  return store.append(input.missionId, event, { authenticatedPrincipal: approvalPrincipal, beforeAppend });
 }
 
 /** Namespace-authorized, bounded Relay snapshot read shared by HTTP and UI. */