@agfpd/iapeer-memory-core 0.2.8 → 0.3.0

package/src/human-edit-detect.ts

@@ -10,15 +10,15 @@
  * hash persistence) arrives with the memoryd stage; everything
  * load-bearing (the anti-loop decision core) lives here, pure.
  *
- * PERMANENT mode (the five canonical folders):
+ * Canon folders (the five typed + project notes) — the human writes there
+ * directly from an external editor:
  *   - `last_edited_by == human` AND `updated` fresh → echo of our own
  *     write — skip;
  *   - `last_edited_by` is an agent AND fresh → the post-write hook just
  *     ran — skip (the hook's zone);
- *   - otherwise → an external-editor edit: stamp
- *     `last_edited_by: <human>` + `updated` + `needs_review: true`.
- *
- * HUMAN-INBOX mode: anti-loop as above, then the idempotent 4-field fill.
+ *   - otherwise → an external-editor edit: the shared `fillPermanentFull`
+ *     completes a bare-body note and stamps `last_edited_by: <human>` +
+ *     `updated` + `needs_review: true`.
  *
  * `freshEditWindowS` is CONFIG (the stage-7 review note): default 90s —
  * the reference VALUE IS 90 (bumped from the historical 30: second-
@@ -32,6 +32,12 @@
 import crypto from "node:crypto";
 import path from "node:path";
 import type { TaxonomyPreset } from "./taxonomy.js";
+import {
+  fillPermanentFull,
+  stripEmptyArrays,
+  normalizeAllScalars,
+  normalizeLinksBlock,
+} from "./frontmatter-fill.js";
 
 export const DEFAULT_FRESH_EDIT_WINDOW_S = 90;
 
@@ -84,9 +90,11 @@ export function setIfMissing(fm: string, key: string, value: string): string {
   return `${fm}${tail}${key}: ${value}\n`;
 }
 
-export type HumanEditZone = "permanent" | "human-inbox";
+export type HumanEditZone = "permanent";
 
-/** Zone of a file for the detector: permanent / human-inbox / null. */
+/** Zone of a file for the detector: permanent (the typed canon folders) /
+ *  null. The human writes straight into canon from Obsidian — the страж
+ *  completes a bare-body note via fillPermanentFull. */
 export function getZone(
   filepath: string,
   vault: string,
@@ -95,7 +103,6 @@ export function getZone(
   const rel = path.relative(vault, filepath);
   const first = rel.split(path.sep)[0];
   const f = taxonomy.folders;
-  if (first === f.inboxHuman) return "human-inbox";
   if (
     first === f.knowledge ||
     first === f.decisions ||
@@ -116,6 +123,11 @@ export type DecideUpdateInput = {
   birthtimeMs: number;
   mtimeMs: number;
   basename: string;
+  /** Absolute file path — the permanent branch derives the folder's genre
+   *  (type/status) from it via the shared `fillPermanentFull` (lean §2.1). */
+  path: string;
+  /** Vault root — folder resolution for the genre lookup. */
+  vault: string;
   lastHash: string | null;
   taxonomy: TaxonomyPreset;
   /** Config (default DEFAULT_FRESH_EDIT_WINDOW_S). */
@@ -147,12 +159,14 @@ export function decideUpdate(input: DecideUpdateInput): DecideUpdateResult {
   if (fmMatch) {
     fmBlock = fmMatch[1];
     body = input.content.slice(fmMatch[0].length);
-  } else if (input.zone === "human-inbox") {
+  } else {
+    // Bare body (no frontmatter) — both zones BUILD it now. In lean the guard
+    // must complete a human's bare canon note, not skip it (§2.2: «голое тело
+    // человека страж должен ДОСТРОИТЬ»; the pre-lean «permanent-no-frontmatter
+    // → skip» is removed — canon frontmatter is the guard's job now, not the
+    // Index's on placement).
     fmBlock = "";
     body = input.content;
-  } else {
-    // PERMANENT without frontmatter — not our zone.
-    return { action: "skip", recordHash: null, reason: "permanent-no-frontmatter" };
   }
 
   const lebMatch = /^last_edited_by\s*:\s*(.+?)\s*$/m.exec(fmBlock);
@@ -172,42 +186,43 @@ export function decideUpdate(input: DecideUpdateInput): DecideUpdateResult {
     return { action: "skip", recordHash: currentHash, reason: "echo-agent" };
   }
 
-  // Otherwise — an external-editor edit (or a new human-inbox file).
+  // Otherwise — an external-editor edit of a canon note. The SHARED guard
+  // fill (mandate §2: identical to the hook path). Existing notes: stamp-only
+  // no-op on the constants; a human's bare-body canon note: full frontmatter
+  // (title/type-from-folder/status/created/author). `created` ← birthtime
+  // (file creation, not edit time).
   const nowStamp = formatStamp(new Date(input.nowMs));
-  let newFm = fmBlock;
-
-  if (input.zone === "human-inbox") {
-    const titleDefault = input.basename.endsWith(".md")
-      ? input.basename.slice(0, -3)
-      : input.basename;
-    // `created` — file creation date. birthtime is the real creation on
-    // APFS; mtime creeps with edits. birthtime 0 (non-APFS) → mtime.
-    const createdSource =
-      input.birthtimeMs > 0 ? new Date(input.birthtimeMs) : new Date(input.mtimeMs);
-    const createdDate = createdSource.toISOString().slice(0, 10);
-
-    newFm = setIfMissing(newFm, "title", titleDefault);
-    newFm = setIfMissing(newFm, "status", input.taxonomy.statusTokens.draft);
-    newFm = setIfMissing(newFm, "created", createdDate);
-    newFm = setIfMissing(newFm, "author", input.human);
-    newFm = setIfMissing(newFm, "needs_review", "true");
-  } else {
-    newFm = upsertField(newFm, "last_edited_by", input.human);
-    newFm = upsertField(newFm, "updated", nowStamp);
-    newFm = upsertField(newFm, "needs_review", "true");
-  }
+  const createdSource =
+    input.birthtimeMs > 0 ? new Date(input.birthtimeMs) : new Date(input.mtimeMs);
+  // LOCAL date (symmetric with the hook path's localDateIso) — `.toISOString()`
+  // is UTC and would shift `created` by a day for early-local-time creations.
+  const createdDate = `${createdSource.getFullYear()}-${pad(createdSource.getMonth() + 1)}-${pad(createdSource.getDate())}`;
+  let newFm = fillPermanentFull(fmBlock, {
+    path: input.path,
+    agent: input.human,
+    vault: input.vault,
+    today: createdDate,
+    nowStamp,
+    ctx: { taxonomy: input.taxonomy },
+  });
 
   if (newFm === fmBlock) {
     return { action: "skip", recordHash: currentHash, reason: "noop" };
   }
 
+  // Mirror the hook path's normalization (mandate §2: the страж is IDENTICAL on
+  // both paths) — YAML-safety on every scalar + ## Связи structural validity, so
+  // a human's colon-bearing scalar never produces unparseable YAML that silently
+  // drops the note from the index.
+  newFm = normalizeAllScalars(stripEmptyArrays(newFm));
+  const newBody = normalizeLinksBlock(body, input.taxonomy);
   const fmTail = newFm.endsWith("\n") ? "" : "\n";
-  const bodyPrefix = body.startsWith("\n") ? "" : "\n";
-  const newContent = `---\n${newFm}${fmTail}---${bodyPrefix}${body}`;
+  const bodyPrefix = newBody.startsWith("\n") ? "" : "\n";
+  const newContent = `---\n${newFm}${fmTail}---${bodyPrefix}${newBody}`;
   return {
     action: "write",
     newContent,
     recordHash: sha256(newContent),
-    reason: input.zone === "human-inbox" ? "fill" : "stamp",
+    reason: "stamp",
   };
 }

package/src/index-render.ts

@@ -8,7 +8,7 @@
  * - **taxonomy/ranking config instead of constants** (ADR-002/011): folder
  *   names, type/subtype tokens, status boost GROUPS and coefficients come
  *   from the same config the search pipeline uses — bucket synchronisation
- *   with `vault_search` holds BY CONSTRUCTION (one source), where the
+ *   with `memory_search` holds BY CONSTRUCTION (one source), where the
  *   reference kept two hand-synchronised constant sets.
  * - **personality is a parameter**: identity resolution (PEER_PERSONALITY
  *   first) happens at the call level, never inside the renderer.

package/src/index.ts

@@ -20,17 +20,69 @@ export {
   getTaxonomy,
   isLocaleId,
   defaultExcludeFolders,
+  genreForFolder,
+  isStale,
+  statusGroup,
   DEFAULT_CURATOR_SET,
   DEFAULT_RANKING,
   type LocaleId,
   type RankingConfig,
   type TaxonomyPreset,
+  type TaxonomyInitialStatus,
 } from "./taxonomy.js";
 
 // frontmatter: post-write fill + structural fm-update (CLI contract in module header)
-export { processFile, resolveAgentName, splitFrontmatter, type ProcessOptions } from "./frontmatter-fill.js";
+export {
+  processFile,
+  resolveAgentName,
+  splitFrontmatter,
+  resolveZone,
+  type ProcessOptions,
+  type Zone,
+} from "./frontmatter-fill.js";
 export { fmUpdate, collectOps, yamlSafeScalar, type FmUpdateOptions, type Op } from "./fm-update.js";
 
+// mode + per-role proactivity (lean §7/§7.1)
+export {
+  resolveMode,
+  curationPlan,
+  type MemoryMode,
+  type RoleSet,
+  type CurationPlan,
+} from "./mode.js";
+
+// dedup + link-hint bands (lean §3a/§3b)
+export {
+  runDedup,
+  DEFAULT_DEDUP_THRESHOLD,
+  DEFAULT_LINK_HINT_THRESHOLD,
+  type DedupMatch,
+} from "./search.js";
+
+// deterministic archiving (lean §2.2a)
+export {
+  isArchivableZone,
+  statusOf,
+  shouldArchive,
+  archiveTargetRel,
+} from "./archive.js";
+export { snapshotVault } from "./permanent-detect.js";
+
+// tag gate + injected dictionary projection (lean §3)
+export { tagsDictionarySourceRel } from "./tags-mirror.js";
+export {
+  parseDictionaryEntries,
+  parseDictionaryTags,
+  isTagAllowed,
+  parseNoteTags,
+  tagGateProblems,
+  renderTagsProjection,
+  DEFAULT_TAGS_BOUNDARY_MAXLEN,
+  type DictionaryEntry,
+  type TagGateOptions,
+  type ProjectionOptions,
+} from "./tags-gate.js";
+
 // author index rendering
 export { regenerateVaultIndex, fullIndexPathFor, type RenderContext } from "./index-render.js";
 

package/src/indexer.ts

@@ -70,7 +70,7 @@ export function addTitlePath(
  * bare basename resolves only when exactly one note has it — never the last
  * indexed one. Unresolvable links are NOT silently dropped (Audit #5): they
  * move to `unresolved_links` with a reason (`missing` | `ambiguous`) so the
- * vault_map / nightly health-check can see vault rot. The map carries ALL
+ * memory_map / nightly health-check can see vault rot. The map carries ALL
  * indexed files including unchanged ones (Audit #1), so a link to a note that
  * simply wasn't re-parsed this run still resolves instead of being dropped.
  *

package/src/mcp-tools.ts

@@ -19,7 +19,7 @@ import { agentMemoryFolderMarker } from "./taxonomy.js";
 // синхронный fetch с iCloud, без таймаута Node event loop замораживается
 // на минуты. 30 секунд — большой запас, на нормальной сети iCloud
 // укладывается за 5-15 секунд. При срабатывании пишем warn в stderr и
-// возвращаем not-found, чтобы caller мог упасть на vault_search fallback.
+// возвращаем not-found, чтобы caller мог упасть на memory_search fallback.
 const READ_TIMEOUT_MS = 30000;
 
 function isAbortError(err: unknown): boolean {
@@ -28,7 +28,7 @@ function isAbortError(err: unknown): boolean {
   return e.name === "AbortError" || e.code === "ABORT_ERR";
 }
 
-// ---- vault_search ----
+// ---- memory_search ----
 
 export async function runSearch(
   db: CoreDb,
@@ -47,12 +47,12 @@ export async function runSearch(
 /**
  * Public MCP tool surface (ADR-008): exactly three read-only tools.
  * `vault_read` is deliberately NOT part of the surface — in-session reading
- * is the harness's native Read (after vault_search the path is known), and
- * backlinks are covered by vault_graph(depth=1, incoming). `runRead` below
+ * is the harness's native Read (after memory_search the path is known), and
+ * backlinks are covered by memory_related(depth=1, incoming). `runRead` below
  * stays a LIBRARY function of core — for memoryd, the Index runtime, CLI and
  * programmatic consumers outside harness sessions.
  */
-export const MCP_TOOL_SURFACE = ["vault_search", "vault_graph", "vault_map"] as const;
+export const MCP_TOOL_SURFACE = ["memory_search", "memory_related", "memory_map"] as const;
 
 // ---- vault_read — library read function (NOT on the MCP surface, ADR-008) ----
 
@@ -60,7 +60,7 @@ export const MCP_TOOL_SURFACE = ["vault_search", "vault_graph", "vault_map"] as
  * Validate and resolve a user-supplied vault path before any disk access.
  *
  * vault_read is reachable from any agent that loads the reference plugin,
- * including ones whose context can be poisoned by inbox drafts (prompt
+ * including ones whose context can be poisoned by untrusted note content (prompt
  * injection). Without containment, an attacker-controlled `path` like
  * `../../.ssh/id_rsa`, `../../.mergemind/env`, or `/etc/passwd` would
  * exfiltrate arbitrary files the MCP process can read.
@@ -110,8 +110,8 @@ function validateVaultPath(
     throw new Error("Path must not contain empty, '.' or '..' segments");
   }
 
-  // Respect excludeFolders even for direct disk reads. Inbox drafts and
-  // system folders are intentionally hidden from search — leaking them
+  // Respect excludeFolders even for direct disk reads. The system folder is
+  // intentionally hidden from search — leaking it
   // through vault_read would defeat the privacy contract excludeFolders
   // is supposed to provide. Same "Document not found" wording as the
   // not-in-index branch so we don't reveal whether the path exists.
@@ -145,8 +145,8 @@ export async function runRead(
   const meta = getDocumentMeta(db, docPath);
 
   // Fallback path: the requested document is not in the index (typically
-  // because it lives in an excluded folder like `99_System/` or `00_Inbox/`,
-  // or the watcher hasn't picked it up yet). Read it directly from disk and
+  // because it lives in an excluded folder like `99_System/`, or the watcher
+  // hasn't picked it up yet). Read it directly from disk and
   // parse it on the fly — without backlinks, since those depend on the index.
   if (!meta) {
     let text: string;
@@ -234,7 +234,7 @@ export async function runRead(
   };
 }
 
-// ---- vault_graph ----
+// ---- memory_related ----
 
 // Oneway-фильтр графа: backlinks из `06_Оперативка_агентов/` **не**
 // показываются при запросе графа канонической заметки — граф референса не
@@ -257,7 +257,11 @@ export function runGraph(
   const centerMeta = getDocumentMeta(db, docPath);
 
   if (!centerMeta) {
-    return { found: false, error: `Document not found: ${docPath}` };
+    return {
+      found: false,
+      error: `Document not found: ${docPath}`,
+      hint: "If you don't have the exact path, find the note first with memory_search, then pass its `path` here.",
+    };
   }
 
   type Node = {
@@ -354,7 +358,7 @@ export function runGraph(
   };
 }
 
-// ---- vault_map ----
+// ---- memory_map ----
 
 // Summary-mode caps. Full topology of a 300+ note vault crosses 25KB JSON
 // before it reaches the agent — most of that is per-cluster node lists and