@remnic/core 9.7.15 → 9.9.0

package/dist/{chunk-DCFV7A7H.js → chunk-ZVAYK7GU.js}

@@ -3,7 +3,10 @@ import {
 } from "./chunk-V7IZKJI3.js";
 import {
   AdapterRegistry
-} from "./chunk-JBPKEARU.js";
+} from "./chunk-RKNJBZ55.js";
+import {
+  WriteRateLimiter
+} from "./chunk-MKQBXQKU.js";
 import {
   EngramMcpServer,
   MCP_SUPPORTED_PROTOCOL_VERSIONS,
@@ -13,65 +16,67 @@ import {
   processChatMessage,
   sessionBelongsToPrincipal,
   subscribeChatTranscript
-} from "./chunk-PBNZVPFS.js";
+} from "./chunk-CXZQOVIE.js";
 import {
   RelayMissionStoreError
-} from "./chunk-OAZVR2BV.js";
-import {
-  validateRequest
-} from "./chunk-2MR3MFQB.js";
+} from "./chunk-OGCAYLNA.js";
 import {
   executeResolution,
   isValidResolutionVerb
-} from "./chunk-KQDNAXOM.js";
+} from "./chunk-WG5HSQ4P.js";
 import {
   isDefaultReviewNamespace,
   listPairs,
   readPair
 } from "./chunk-35NN3ZFA.js";
 import {
-  getOperation
-} from "./chunk-BS4SGLWV.js";
+  validateRequest
+} from "./chunk-2VEOKUPP.js";
 import {
-  assertOperationAllowed,
-  enforceNamespaceAllowList,
-  isCapabilityRestricted,
-  tokenCapabilityStore
-} from "./chunk-D7FOKIY5.js";
+  getOperation
+} from "./chunk-KF5EUVKQ.js";
 import {
-  CorrectionContractError,
-  EngramAccessInputError
-} from "./chunk-LZOV7MX7.js";
+  CorrectionContractError
+} from "./chunk-XQDRKZ7V.js";
 import {
   isTrustZoneName
 } from "./chunk-JGSKJHF7.js";
 import {
-  projectTagProjectId
-} from "./chunk-7PND4PUC.js";
+  projectTagProjectId,
+  resolveNamespacePreflight
+} from "./chunk-MMGGVZ4Q.js";
 import {
   subscribeGraphEvents
 } from "./chunk-DEUNUKTD.js";
 import {
   isRecallDisclosure
-} from "./chunk-PBSAPHHA.js";
+} from "./chunk-YVKF3HEW.js";
+import {
+  assertOperationAllowed,
+  capabilityAllowsOp,
+  enforceNamespaceAllowList,
+  isCapabilityRestricted,
+  tokenCapabilityStore
+} from "./chunk-7AMFUATK.js";
 import {
   expandTildePath
 } from "./chunk-EYIEWJNI.js";
-import {
-  log
-} from "./chunk-37CTGERM.js";
 import {
   OFFLINE_SYNC_APPLY_MAX_BODY_BYTES,
   OFFLINE_SYNC_FILE_CONTENT_MAX_CHUNK_BYTES,
   OFFLINE_SYNC_SNAPSHOT_BASE_MAX_BODY_BYTES
-} from "./chunk-X64YLC24.js";
+} from "./chunk-72VAXGEI.js";
 import {
   abortError,
   isAbortError
 } from "./chunk-PVGDJXVK.js";
 import {
-  EngramAccessForbiddenError
-} from "./chunk-RANHFI3P.js";
+  log
+} from "./chunk-3WCASNQZ.js";
+import {
+  EngramAccessForbiddenError,
+  EngramAccessInputError
+} from "./chunk-2Z24E5W2.js";
 
 // src/access-http.ts
 import { createServer } from "http";
@@ -283,8 +288,6 @@ var RELAY_ADMIN_CONSOLE_ASSETS = /* @__PURE__ */ new Map([
   ["relay.js", "application/javascript; charset=utf-8"],
   ["replay.json", "application/json; charset=utf-8"]
 ]);
-var WRITE_RATE_LIMIT_WINDOW_MS = 6e4;
-var WRITE_RATE_LIMIT_MAX_REQUESTS = 30;
 var TRUST_ZONE_RECORD_KINDS = ["memory", "artifact", "state", "trajectory", "external"];
 var TRUST_ZONE_SOURCE_CLASSES = ["tool_output", "web_content", "subagent_trace", "system_memory", "user_input", "manual"];
 var HttpError = class extends Error {
@@ -426,9 +429,7 @@ var EngramAccessHttpServer = class {
   readiness;
   resourceMetadataUrl;
   externalRequestHandler;
-  writeRequestSlots = [];
-  writeRateLimitMaxRequests;
-  writeRateLimitWindowMs;
+  writeLimiter;
   mcpServer;
   server = null;
   boundPort = 0;
@@ -461,8 +462,10 @@ var EngramAccessHttpServer = class {
     this.tokenPathPolicy = options.tokenPathPolicy;
     this.authenticatedPrincipal = options.principal?.trim() || void 0;
     this.maxBodyBytes = Number.isFinite(options.maxBodyBytes) ? Math.max(1, Math.floor(options.maxBodyBytes ?? 131072)) : 131072;
-    this.writeRateLimitMaxRequests = typeof options.writeRateLimitMaxRequests === "number" && Number.isInteger(options.writeRateLimitMaxRequests) && options.writeRateLimitMaxRequests >= 1 ? options.writeRateLimitMaxRequests : WRITE_RATE_LIMIT_MAX_REQUESTS;
-    this.writeRateLimitWindowMs = typeof options.writeRateLimitWindowMs === "number" && Number.isInteger(options.writeRateLimitWindowMs) && options.writeRateLimitWindowMs >= 1 ? options.writeRateLimitWindowMs : WRITE_RATE_LIMIT_WINDOW_MS;
+    this.writeLimiter = new WriteRateLimiter(
+      options.writeRateLimitMaxRequests,
+      options.writeRateLimitWindowMs
+    );
     this.adminConsoleEnabled = options.adminConsoleEnabled !== false;
     this.adminConsolePublicDir = options.adminConsolePublicDir ?? defaultAdminConsolePublicDir;
     this.adminConsolePrefillToken = options.adminConsolePrefillToken === true ? this.authToken : void 0;
@@ -925,7 +928,7 @@ var EngramAccessHttpServer = class {
     if (req.method === "POST" && (pathname === "/engram/v1/capsules/export" || pathname === "/remnic/v1/capsules/export")) {
       this.enforceTokenOp("capsule_export");
       const body = await this.readValidatedBody(req, "capsuleExport");
-      this.ensureWriteRateLimitAvailable();
+      this.ensureWriteRateLimitAvailable(req);
       const result = await this.service.capsuleExport({
         name: body.name,
         namespace: this.resolveNamespace(req, body.namespace),
@@ -936,14 +939,14 @@ var EngramAccessHttpServer = class {
         includeTranscripts: body.includeTranscripts,
         encrypt: body.encrypt
       });
-      this.recordWriteRateLimitHit();
+      this.recordWriteRateLimitHit(req);
       this.respondJson(res, 200, result);
       return;
     }
     if (req.method === "POST" && (pathname === "/engram/v1/capsules/import" || pathname === "/remnic/v1/capsules/import")) {
       this.enforceTokenOp("capsule_import");
       const body = await this.readValidatedBody(req, "capsuleImport");
-      this.ensureWriteRateLimitAvailable();
+      this.ensureWriteRateLimitAvailable(req);
       const result = await this.service.capsuleImport({
         archivePath: expandTildePath(body.archivePath),
         namespace: this.resolveNamespace(req, body.namespace),
@@ -951,7 +954,7 @@ var EngramAccessHttpServer = class {
         mode: body.mode,
         passphrase: body.passphrase
       });
-      this.recordWriteRateLimitHit();
+      this.recordWriteRateLimitHit(req);
       this.respondJson(res, 200, result);
       return;
     }
@@ -1205,6 +1208,18 @@ var EngramAccessHttpServer = class {
       this.respondJson(res, 200, payload);
       return;
     }
+    if (req.method === "GET" && pathname === "/engram/v1/namespace/writable") {
+      const preflightOp = getOperation("namespace_writable");
+      const caps = tokenCapabilityStore.getStore();
+      if (!(preflightOp?.spec.allowedByOps ?? []).some((op) => capabilityAllowsOp(caps, op))) {
+        throw new EngramAccessForbiddenError("token is not permitted to run the namespace preflight");
+      }
+      const ns = parsed.searchParams.get("namespace") || void 0;
+      const sk = parsed.searchParams.get("session") || void 0;
+      const writeOp = parsed.searchParams.get("op") === "memory_store" ? "memory_store" : "observe";
+      this.respondJson(res, 200, resolveNamespacePreflight(caps, ns, sk, this.resolveRequestPrincipal(req), this.service.configRef, writeOp));
+      return;
+    }
     if (req.method === "GET" && (pathname === "/engram/v1/wearables/status" || pathname === "/remnic/v1/wearables/status")) {
       this.enforceTokenOp("wearables_status");
       this.respondJson(res, 200, await this.service.wearablesStatus());
@@ -1334,10 +1349,10 @@ var EngramAccessHttpServer = class {
         // attempt may have consumed the last quota slot; the retry returns the
         // cached response without requiring another. Matches memory_store's
         // hook-in-the-lock pattern (#1434 invariant).
-        { enforceWriteQuota: () => this.ensureWriteRateLimitAvailable() }
+        { enforceWriteQuota: () => this.ensureWriteRateLimitAvailable(req) }
       );
       if (this.shouldCountWriteRateLimit(response)) {
-        this.recordWriteRateLimitHit();
+        this.recordWriteRateLimitHit(req);
       }
       this.respondJson(res, 202, response);
       return;
@@ -1359,20 +1374,20 @@ var EngramAccessHttpServer = class {
     if (req.method === "POST" && (pathname === "/engram/v1/lcm/compaction/flush" || pathname === "/remnic/v1/lcm/compaction/flush")) {
       this.enforceTokenOp("lcm_compaction_flush");
       const body = await this.readValidatedBody(req, "lcmCompactionFlush");
-      this.ensureWriteRateLimitAvailable();
+      this.ensureWriteRateLimitAvailable(req);
       const response = await this.service.lcmCompactionFlush({
         sessionKey: body.sessionKey,
         namespace: this.resolveNamespace(req, body.namespace),
         authenticatedPrincipal: this.resolveRequestPrincipal(req)
       });
-      this.recordWriteRateLimitHit();
+      this.recordWriteRateLimitHit(req);
       this.respondJson(res, 200, response);
       return;
     }
     if (req.method === "POST" && (pathname === "/engram/v1/lcm/compaction/record" || pathname === "/remnic/v1/lcm/compaction/record")) {
       this.enforceTokenOp("lcm_compaction_record");
       const body = await this.readValidatedBody(req, "lcmCompactionRecord");
-      this.ensureWriteRateLimitAvailable();
+      this.ensureWriteRateLimitAvailable(req);
       const response = await this.service.lcmCompactionRecord({
         sessionKey: body.sessionKey,
         namespace: this.resolveNamespace(req, body.namespace),
@@ -1380,7 +1395,7 @@ var EngramAccessHttpServer = class {
         tokensAfter: body.tokensAfter,
         authenticatedPrincipal: this.resolveRequestPrincipal(req)
       });
-      this.recordWriteRateLimitHit();
+      this.recordWriteRateLimitHit(req);
       this.respondJson(res, 200, response);
       return;
     }
@@ -1427,7 +1442,7 @@ var EngramAccessHttpServer = class {
             authenticatedPrincipal: this.resolveRequestPrincipal(req),
             hooks: {
               enforceWriteQuota: () => {
-                releaseWriteQuota ??= this.reserveWriteRateLimitSlot();
+                releaseWriteQuota ??= this.reserveWriteRateLimitSlot(req);
               }
             }
           }
@@ -1490,14 +1505,14 @@ var EngramAccessHttpServer = class {
       const output = await op.run(envelope, {
         service: this.service,
         authenticatedPrincipal: this.resolveRequestPrincipal(req),
-        hooks: { enforceWriteQuota: () => this.ensureWriteRateLimitAvailable() },
+        hooks: { enforceWriteQuota: () => this.ensureWriteRateLimitAvailable(req) },
         // Phase 1 provenance: server-resolved connector identity from the
         // bearer token (REST path, mirroring the MCP tools/call dispatch).
         sourceConnector: this.resolveConnector(req)
       });
       const response = output.result;
       if (this.shouldCountWriteRateLimit(response)) {
-        this.recordWriteRateLimitHit();
+        this.recordWriteRateLimitHit(req);
       }
       this.respondJson(res, this.writeResponseStatus(response), response);
       return;
@@ -1506,7 +1521,7 @@ var EngramAccessHttpServer = class {
       const body = await this.readJsonBody(req);
       const isWriteSubcommand = body.subcommand === "record" || body.subcommand === "supersede";
       if (isWriteSubcommand) {
-        this.ensureWriteRateLimitAvailable();
+        this.ensureWriteRateLimitAvailable(req);
       }
       const op = getOperation("coding_decision");
       if (!op) {
@@ -1518,7 +1533,7 @@ var EngramAccessHttpServer = class {
         sourceConnector: this.resolveConnector(req)
       });
       if (isWriteSubcommand) {
-        this.recordWriteRateLimitHit();
+        this.recordWriteRateLimitHit(req);
       }
       this.respondJson(res, 200, output.result);
       return;
@@ -1527,7 +1542,7 @@ var EngramAccessHttpServer = class {
       const body = await this.readJsonBody(req);
       const isWriteSubcommand = body.subcommand === "refresh";
       if (isWriteSubcommand) {
-        this.ensureWriteRateLimitAvailable();
+        this.ensureWriteRateLimitAvailable(req);
       }
       const op = getOperation("coding_architecture");
       if (!op) {
@@ -1539,7 +1554,7 @@ var EngramAccessHttpServer = class {
         sourceConnector: this.resolveConnector(req)
       });
       if (isWriteSubcommand) {
-        this.recordWriteRateLimitHit();
+        this.recordWriteRateLimitHit(req);
       }
       this.respondJson(res, 200, output.result);
       return;
@@ -1558,7 +1573,7 @@ var EngramAccessHttpServer = class {
       return;
     }
     if (req.method === "POST" && pathname === "/engram/v1/correction/plan") {
-      this.ensureWriteRateLimitAvailable();
+      this.ensureWriteRateLimitAvailable(req);
       const body = await this.readJsonBody(req);
       const op = getOperation("memory_correct_plan");
       if (!op) {
@@ -1568,12 +1583,12 @@ var EngramAccessHttpServer = class {
         service: this.service,
         authenticatedPrincipal: this.resolveRequestPrincipal(req)
       });
-      this.recordWriteRateLimitHit();
+      this.recordWriteRateLimitHit(req);
       this.respondJson(res, 200, output.result);
       return;
     }
     if (req.method === "POST" && pathname === "/engram/v1/correction/apply") {
-      this.ensureWriteRateLimitAvailable();
+      this.ensureWriteRateLimitAvailable(req);
       const body = await this.readJsonBody(req);
       const op = getOperation("memory_correct_apply");
       if (!op) {
@@ -1583,7 +1598,7 @@ var EngramAccessHttpServer = class {
         service: this.service,
         authenticatedPrincipal: this.resolveRequestPrincipal(req)
       });
-      this.recordWriteRateLimitHit();
+      this.recordWriteRateLimitHit(req);
       this.respondJson(res, 200, output.result);
       return;
     }
@@ -1631,10 +1646,10 @@ var EngramAccessHttpServer = class {
         sourceConnector: this.resolveConnector(req)
       };
       const response = await this.service.suggestionSubmit(request, {
-        enforceWriteQuota: () => this.ensureWriteRateLimitAvailable()
+        enforceWriteQuota: () => this.ensureWriteRateLimitAvailable(req)
       });
       if (this.shouldCountWriteRateLimit(response)) {
-        this.recordWriteRateLimitHit();
+        this.recordWriteRateLimitHit(req);
       }
       this.respondJson(res, this.writeResponseStatus(response), response);
       return;
@@ -1788,7 +1803,7 @@ var EngramAccessHttpServer = class {
     if (req.method === "POST" && pathname === "/engram/v1/review-disposition") {
       this.enforceTokenOp("review_disposition");
       const body = await this.readValidatedBody(req, "reviewDisposition");
-      this.ensureWriteRateLimitAvailable();
+      this.ensureWriteRateLimitAvailable(req);
       const response = await this.service.reviewDisposition({
         memoryId: body.memoryId,
         status: body.status,
@@ -1797,7 +1812,7 @@ var EngramAccessHttpServer = class {
         authenticatedPrincipal: this.resolveRequestPrincipal(req)
       });
       if (this.shouldCountWriteRateLimit(response)) {
-        this.recordWriteRateLimitHit();
+        this.recordWriteRateLimitHit(req);
       }
       this.respondJson(res, 200, response);
       return;
@@ -1807,7 +1822,7 @@ var EngramAccessHttpServer = class {
       const body = await this.readValidatedBody(req, "trustZonePromote");
       const dryRun = body.dryRun === true;
       if (!dryRun) {
-        this.ensureWriteRateLimitAvailable();
+        this.ensureWriteRateLimitAvailable(req);
       }
       const response = await this.service.trustZonePromote({
         recordId: body.recordId,
@@ -1820,7 +1835,7 @@ var EngramAccessHttpServer = class {
         authenticatedPrincipal: this.resolveRequestPrincipal(req)
       });
       if (this.shouldCountWriteRateLimit(response)) {
-        this.recordWriteRateLimitHit();
+        this.recordWriteRateLimitHit(req);
       }
       this.respondJson(res, response.dryRun ? 200 : 201, response);
       return;
@@ -1830,7 +1845,7 @@ var EngramAccessHttpServer = class {
       const body = await this.readValidatedBody(req, "trustZoneDemoSeed");
       const dryRun = body.dryRun === true;
       if (!dryRun) {
-        this.ensureWriteRateLimitAvailable();
+        this.ensureWriteRateLimitAvailable(req);
       }
       const response = await this.service.trustZoneDemoSeed({
         scenario: body.scenario,
@@ -1840,7 +1855,7 @@ var EngramAccessHttpServer = class {
         authenticatedPrincipal: this.resolveRequestPrincipal(req)
       });
       if (this.shouldCountWriteRateLimit(response)) {
-        this.recordWriteRateLimitHit();
+        this.recordWriteRateLimitHit(req);
       }
       this.respondJson(res, response.dryRun ? 200 : 201, response);
       return;
@@ -2068,7 +2083,7 @@ var EngramAccessHttpServer = class {
     if (req.method === "POST" && pathname === "/engram/v1/contradiction-scan") {
       this.enforceTokenOp("contradiction_scan_run");
       const body = await this.readJsonBody(req);
-      const { runContradictionScan } = await import("./contradiction-scan-J57T5QV7.js");
+      const { runContradictionScan } = await import("./contradiction-scan-RJBABNRH.js");
       const principal = this.resolveRequestPrincipal(req);
       const result = await runContradictionScan({
         storage: this.service.storageRef,
@@ -2228,7 +2243,7 @@ var EngramAccessHttpServer = class {
     }
     if (req.method === "GET" && pathname === "/engram/v1/dreams/status") {
       this.enforceTokenOp("dreams_status");
-      const { normalizeDreamsStatusWindowHours } = await import("./dreams-ledger-6UODQOX6.js");
+      const { normalizeDreamsStatusWindowHours } = await import("./dreams-ledger-567VKVOU.js");
       const windowHoursRaw = parsed.searchParams.get("windowHours");
       let windowHours;
       try {
@@ -2275,7 +2290,7 @@ var EngramAccessHttpServer = class {
       const dryRun = body.dryRun === true;
       const namespace = this.resolveNamespace(req, typeof body.namespace === "string" ? body.namespace : void 0);
       if (!dryRun) {
-        this.ensureWriteRateLimitAvailable();
+        this.ensureWriteRateLimitAvailable(req);
       }
       const result = await this.service.dreamsRun({
         phase,
@@ -2284,7 +2299,7 @@ var EngramAccessHttpServer = class {
         authenticatedPrincipal: this.resolveRequestPrincipal(req)
       });
       if (this.shouldCountWriteRateLimit(result)) {
-        this.recordWriteRateLimitHit();
+        this.recordWriteRateLimitHit(req);
       }
       this.respondJson(res, 200, result);
       return;
@@ -2413,7 +2428,7 @@ var EngramAccessHttpServer = class {
         });
       }
       try {
-        this.ensureWriteRateLimitAvailable();
+        this.ensureWriteRateLimitAvailable(req);
         const result = await this.service.adminPromoteMemory({
           sourceMemoryId: body.sourceMemoryId,
           namespace: typeof body.namespace === "string" ? body.namespace : void 0,
@@ -2422,7 +2437,7 @@ var EngramAccessHttpServer = class {
           targets,
           reason: body.reason
         });
-        this.recordWriteRateLimitHit();
+        this.recordWriteRateLimitHit(req);
         this.respondJson(res, 200, result);
       } catch (err) {
         if (err instanceof EngramAccessInputError) {
@@ -2569,7 +2584,7 @@ var EngramAccessHttpServer = class {
     const isMcpWrite = request.method === "tools/call" && (toolName === "engram.memory_store" || toolName === "remnic.memory_store" || toolName === "engram.suggestion_submit" || toolName === "remnic.suggestion_submit" || toolName === "engram.observe" || toolName === "remnic.observe" || toolName === "engram.lcm_compaction_flush" || toolName === "remnic.lcm_compaction_flush" || toolName === "engram.lcm_compaction_record" || toolName === "remnic.lcm_compaction_record" || toolName === "engram.capsule_export" || toolName === "remnic.capsule_export" || toolName === "engram.capsule_import" || toolName === "remnic.capsule_import" || !dreamsRunDryRun && (toolName === "engram.dreams_run" || toolName === "remnic.dreams_run") || !memoryActionApplyDryRun && (toolName === "engram.memory_action_apply" || toolName === "remnic.memory_action_apply") || (toolName === "engram.memory_correct_apply" || toolName === "remnic.memory_correct_apply" || toolName === "engram.memory_correct_plan" || toolName === "remnic.memory_correct_plan") || codingDecisionWrite || codingArchitectureWrite || codegraphWrite);
     const observeSelfEnforcesQuota = toolName === "engram.observe" || toolName === "remnic.observe";
     if (isMcpWrite && !observeSelfEnforcesQuota) {
-      this.ensureWriteRateLimitAvailable();
+      this.ensureWriteRateLimitAvailable(req);
     }
     const sessionId = (() => {
       const raw = req.headers["mcp-session-id"];
@@ -2591,7 +2606,7 @@ var EngramAccessHttpServer = class {
       sessionKeyOverride: requestIdentity.sessionKey,
       sessionId,
       correlationId: mcpCorrelationId,
-      enforceWriteQuota: observeSelfEnforcesQuota ? () => this.ensureWriteRateLimitAvailable() : void 0,
+      enforceWriteQuota: observeSelfEnforcesQuota ? () => this.ensureWriteRateLimitAvailable(req) : void 0,
       sourceConnector: this.resolveConnector(req),
       abortSignal
     });
@@ -2602,7 +2617,7 @@ var EngramAccessHttpServer = class {
       const isRejectedCodegraph = structured?.ok === false;
       const counts = structured ? this.shouldCountWriteRateLimit(structured) : true;
       if (!isError && !isRejectedCodegraph && counts) {
-        this.recordWriteRateLimitHit();
+        this.recordWriteRateLimitHit(req);
       }
     }
     if (abortSignal.aborted) {
@@ -3053,29 +3068,24 @@ var EngramAccessHttpServer = class {
     if (response.status === "stored" || response.status === "queued_for_review") return 201;
     return 200;
   }
-  ensureWriteRateLimitAvailable() {
-    const now = Date.now();
-    while (this.writeRequestSlots.length > 0 && now - (this.writeRequestSlots[0]?.recordedAt ?? 0) > this.writeRateLimitWindowMs) {
-      this.writeRequestSlots.shift();
-    }
-    if (this.writeRequestSlots.length >= this.writeRateLimitMaxRequests) {
+  ensureWriteRateLimitAvailable(req) {
+    if (!this.writeLimiter.hasCapacity(this.principalForRateLimit(req))) {
       throw new HttpError(429, "write_rate_limited", "write_rate_limited");
     }
   }
-  recordWriteRateLimitHit() {
-    this.writeRequestSlots.push({ recordedAt: Date.now() });
+  recordWriteRateLimitHit(req) {
+    this.writeLimiter.record(this.principalForRateLimit(req));
   }
-  reserveWriteRateLimitSlot() {
-    this.ensureWriteRateLimitAvailable();
-    const slot = { recordedAt: Date.now() };
-    this.writeRequestSlots.push(slot);
-    let active = true;
-    return () => {
-      if (!active) return;
-      active = false;
-      const index = this.writeRequestSlots.indexOf(slot);
-      if (index >= 0) this.writeRequestSlots.splice(index, 1);
-    };
+  reserveWriteRateLimitSlot(req) {
+    const release = this.writeLimiter.reserve(this.principalForRateLimit(req));
+    if (!release) {
+      throw new HttpError(429, "write_rate_limited", "write_rate_limited");
+    }
+    return release;
+  }
+  principalForRateLimit(req) {
+    if (!req) return void 0;
+    return this.resolveRequestPrincipal(req) ?? this.resolveConnector(req);
   }
   shouldCountWriteRateLimit(response) {
     return response.dryRun !== true && response.idempotencyReplay !== true;
@@ -3122,4 +3132,4 @@ function positiveIntQueryParam(value, label) {
 export {
   EngramAccessHttpServer
 };
-//# sourceMappingURL=chunk-DCFV7A7H.js.map
+//# sourceMappingURL=chunk-ZVAYK7GU.js.map