@remnic/core 9.7.12 → 9.7.14

package/dist/{chunk-IQULRIZM.js → chunk-IKSELOIV.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-ZBJMUXZH.js";
 import {
   StorageManager
-} from "./chunk-TRH533CA.js";
+} from "./chunk-7ICYQUOL.js";
 import {
   getCachedRuleMemories,
   setCachedRuleMemories
@@ -119,4 +119,4 @@ export {
   compareVerifiedSemanticRuleResults,
   searchVerifiedSemanticRules
 };
-//# sourceMappingURL=chunk-IQULRIZM.js.map
+//# sourceMappingURL=chunk-IKSELOIV.js.map

package/dist/{chunk-ZC3HG22I.js → chunk-JMBVCAR4.js}

@@ -1,6 +1,6 @@
 import {
   StorageManager
-} from "./chunk-TRH533CA.js";
+} from "./chunk-7ICYQUOL.js";
 
 // src/semantic-rule-promotion.ts
 import { createHash, randomUUID } from "crypto";
@@ -535,4 +535,4 @@ export {
   setSemanticRulePromotionTestHooks,
   promoteSemanticRuleFromMemory
 };
-//# sourceMappingURL=chunk-ZC3HG22I.js.map
+//# sourceMappingURL=chunk-JMBVCAR4.js.map

package/dist/{chunk-CLFY35ED.js → chunk-KGWXHWAH.js}

@@ -1,10 +1,10 @@
 import {
   parseXrayFormat
-} from "./chunk-675YU5IK.js";
+} from "./chunk-DDGV7NAX.js";
 import {
   RECALL_DISCLOSURE_LEVELS,
   isRecallDisclosure
-} from "./chunk-G5PVJJRA.js";
+} from "./chunk-B3F4CWQR.js";
 
 // src/recall-xray-cli.ts
 function parseXrayDisclosureFlag(value) {
@@ -50,4 +50,4 @@ export {
   parseXrayBudgetFlag,
   parseXrayCliOptions
 };
-//# sourceMappingURL=chunk-CLFY35ED.js.map
+//# sourceMappingURL=chunk-KGWXHWAH.js.map

package/dist/{chunk-RT7IP3D3.js → chunk-KSNVDPDF.js}

@@ -18,7 +18,7 @@ import {
 } from "./chunk-KAWTOYAW.js";
 import {
   LocalLlmClient
-} from "./chunk-VY6LKKVN.js";
+} from "./chunk-NWTGD4AN.js";
 import {
   buildExtensionsFooterForSummary,
   formatDaySummaryMemories,
@@ -2476,4 +2476,4 @@ export {
   classifyFallbackParseFailure,
   ExtractionEngine
 };
-//# sourceMappingURL=chunk-RT7IP3D3.js.map
+//# sourceMappingURL=chunk-KSNVDPDF.js.map

package/dist/{chunk-TWGGNUWJ.js → chunk-MKDRQAA3.js}

@@ -1,7 +1,7 @@
 import {
   StorageManager,
   normalizeEntityName
-} from "./chunk-TRH533CA.js";
+} from "./chunk-7ICYQUOL.js";
 import {
   serializeMutations
 } from "./chunk-LTJAMRGI.js";
@@ -956,4 +956,4 @@ export {
   resolveBriefingSaveDir,
   briefingFilename
 };
-//# sourceMappingURL=chunk-TWGGNUWJ.js.map
+//# sourceMappingURL=chunk-MKDRQAA3.js.map

package/dist/{chunk-ZASJ53ML.js → chunk-ND5M64JJ.js}

@@ -13,10 +13,10 @@ import {
   processChatMessage,
   sessionBelongsToPrincipal,
   subscribeChatTranscript
-} from "./chunk-OCY3CRPG.js";
+} from "./chunk-A7B4RMQG.js";
 import {
   RelayMissionStoreError
-} from "./chunk-TITSEN2M.js";
+} from "./chunk-ANADNYWK.js";
 import {
   validateRequest
 } from "./chunk-2MR3MFQB.js";
@@ -31,7 +31,7 @@ import {
 } from "./chunk-35NN3ZFA.js";
 import {
   getOperation
-} from "./chunk-CE3GMHT4.js";
+} from "./chunk-EEARRVZ2.js";
 import {
   assertOperationAllowed,
   enforceNamespaceAllowList,
@@ -41,7 +41,7 @@ import {
 import {
   CorrectionContractError,
   EngramAccessInputError
-} from "./chunk-QPZCAVDC.js";
+} from "./chunk-GMSDQUCR.js";
 import {
   isTrustZoneName
 } from "./chunk-JGSKJHF7.js";
@@ -53,7 +53,7 @@ import {
 } from "./chunk-DEUNUKTD.js";
 import {
   isRecallDisclosure
-} from "./chunk-G5PVJJRA.js";
+} from "./chunk-B3F4CWQR.js";
 import {
   expandTildePath
 } from "./chunk-EYIEWJNI.js";
@@ -277,6 +277,12 @@ function resolveDefaultAdminConsolePublicDir() {
 }
 var defaultAdminConsolePublicDir = resolveDefaultAdminConsolePublicDir();
 var correlationIdStore = new AsyncLocalStorage();
+var RELAY_ADMIN_CONSOLE_ASSETS = /* @__PURE__ */ new Map([
+  ["relay.css", "text/css; charset=utf-8"],
+  ["relay-model.js", "application/javascript; charset=utf-8"],
+  ["relay.js", "application/javascript; charset=utf-8"],
+  ["replay.json", "application/json; charset=utf-8"]
+]);
 var WRITE_RATE_LIMIT_WINDOW_MS = 6e4;
 var WRITE_RATE_LIMIT_MAX_REQUESTS = 30;
 var TRUST_ZONE_RECORD_KINDS = ["memory", "artifact", "state", "trajectory", "external"];
@@ -1447,6 +1453,7 @@ var EngramAccessHttpServer = class {
       if (!op) {
         throw new Error("access-boundary: operation not registered: relay_mission_read");
       }
+      const authenticatedPrincipal = this.resolveRequestPrincipal(req)?.trim() || void 0;
       const output = await op.run(
         {
           missionId,
@@ -1457,10 +1464,16 @@ var EngramAccessHttpServer = class {
         },
         {
           service: this.service,
-          authenticatedPrincipal: this.resolveRequestPrincipal(req)
+          authenticatedPrincipal
         }
       );
       res.setHeader("cache-control", "no-store");
+      if (authenticatedPrincipal !== void 0) {
+        try {
+          res.setHeader("x-remnic-authenticated-principal", encodeURIComponent(authenticatedPrincipal));
+        } catch {
+        }
+      }
       this.respondJson(res, 200, output.result);
       return;
     }
@@ -2691,19 +2704,38 @@ var EngramAccessHttpServer = class {
       res.end();
       return true;
     }
+    if (pathname === "/remnic/ui/relay" || pathname === "/engram/ui/relay") {
+      res.statusCode = 301;
+      res.setHeader("location", pathname + "/");
+      res.end();
+      return true;
+    }
     if (pathname === "/remnic/ui/" || pathname === "/engram/ui/") {
       await this.respondAdminConsoleShell(req, res, pathname);
       return true;
     }
+    if (pathname === "/remnic/ui/relay/" || pathname === "/engram/ui/relay/") {
+      await this.respondAdminConsoleShell(req, res, pathname, "relay/index.html");
+      return true;
+    }
     if (pathname === "/remnic/ui/app.js" || pathname === "/engram/ui/app.js") {
       await this.respondStatic(res, path.join(this.adminConsolePublicDir, "app.js"), "application/javascript; charset=utf-8");
       return true;
     }
+    const relayAsset = RELAY_ADMIN_CONSOLE_ASSETS.get(pathname.split("/").at(-1) ?? "");
+    const isRelayAsset = pathname.startsWith("/remnic/ui/relay/") || pathname.startsWith("/engram/ui/relay/");
+    if (isRelayAsset && relayAsset && pathname.split("/").length === 5) {
+      const fileName = pathname.split("/").at(-1);
+      if (fileName) {
+        await this.respondStatic(res, path.join(this.adminConsolePublicDir, "relay", fileName), relayAsset);
+        return true;
+      }
+    }
     return false;
   }
-  async respondAdminConsoleShell(req, res, pathname) {
+  async respondAdminConsoleShell(req, res, pathname, relativePath = "index.html") {
     try {
-      let body = await readFile(path.join(this.adminConsolePublicDir, "index.html"), "utf-8");
+      let body = await readFile(path.join(this.adminConsolePublicDir, relativePath), "utf-8");
       const canPrefillToken = this.adminConsolePrefillToken && this.isAuthorized(req, pathname);
       if (canPrefillToken) {
         const script = `<script>window.__REMNIC_ADMIN_CONSOLE_PREFILL_TOKEN__=${JSON.stringify(this.adminConsolePrefillToken)};</script>`;
@@ -3090,4 +3122,4 @@ function positiveIntQueryParam(value, label) {
 export {
   EngramAccessHttpServer
 };
-//# sourceMappingURL=chunk-ZASJ53ML.js.map
+//# sourceMappingURL=chunk-ND5M64JJ.js.map