@atomicmemory/hermes-plugin 0.1.18 → 0.2.0

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 0.2.0 - 2026-07-29
+
+### Changed
+
+- **Breaking (tool contract):** `atomicmemory_conclude` now requires a `content_class` parameter (`summary`, `redacted`, or `raw`) describing the sensitivity of the text being stored. A call that omits it, or passes an unrecognized value, is rejected at the tool boundary with a message naming the parameter.
+
+  This is required to store facts against AtomicMemory Core 1.2.0 and later. Core defaults to `RAW_CONTENT_POLICY=reject`, which refuses a verbatim write carrying no content class — previously `conclude` sent an unclassified write and received `422 raw_content_rejected`, with nothing indicating which tool call caused it. The class is never chosen on the caller's behalf: guessing it could label a raw transcript as hosted-safe.
+
+  Existing deployments need no configuration change, but a model that calls `conclude` without the new parameter will get a tool error instead of a stored fact until it adapts.
+
 ## 0.1.13 - 2026-05-15
 
 ### Fixed

package/client.py

@@ -158,4 +158,5 @@ class AtomicMemoryClient(Protocol):
         scope: Scope,
         provenance: Provenance,
         metadata: dict[str, Any] | None = None,
+        content_class: str | None = None,
     ) -> IngestResult: ...

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atomicmemory/hermes-plugin",
-  "version": "0.1.18",
+  "version": "0.2.0",
   "description": "AtomicMemory native Hermes memory provider — Python SDK-backed, cross-tool memory by default.",
   "publishConfig": {
     "access": "public",

package/plugin.yaml

@@ -1,5 +1,5 @@
 name: atomicmemory
-version: 0.1.18
+version: 0.2.0
 description: "AtomicMemory native Hermes memory provider — Python SDK-backed, cross-tool memory by default."
 pip_dependencies:
   - "atomicmemory>=1.1.2,<2.0.0"

package/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "atomicmemory-hermes"
-version = "0.1.18"
+version = "0.2.0"
 description = "AtomicMemory native Hermes memory provider."
 readme = "README.md"
 requires-python = ">=3.10"

package/python_sdk.py

@@ -175,16 +175,21 @@ class PythonSdkAtomicMemoryClient:
         scope: Scope,
         provenance: Provenance,
         metadata: dict[str, Any] | None = None,
+        content_class: str | None = None,
     ) -> IngestResult:
-        raw = self._require_client().ingest(
-            {
-                "mode": "verbatim",
-                "content": content,
-                "scope": scope,
-                "provenance": _provenance_dict(provenance),
-                "metadata": metadata,
-            }
-        )
+        payload: dict[str, Any] = {
+            "mode": "verbatim",
+            "content": content,
+            "scope": scope,
+            "provenance": _provenance_dict(provenance),
+            "metadata": metadata,
+        }
+        # Only sent when the caller chose one. Never defaulted here: an
+        # unclassified write must fail closed at core rather than be relabeled
+        # safe by the bridge.
+        if content_class is not None:
+            payload["content_class"] = content_class
+        raw = self._require_client().ingest(payload)
         return _ingest_result(raw)
 
     def _require_client(self) -> Any:

package/tools.py

@@ -64,8 +64,19 @@ CONCLUDE_SCHEMA = {
         "type": "object",
         "properties": {
             "conclusion": {"type": "string", "description": "The fact to store verbatim."},
+            "content_class": {
+                "type": "string",
+                "enum": ["summary", "redacted", "raw"],
+                "description": (
+                    "Sensitivity of the text you are storing: 'summary' if you distilled it "
+                    "yourself, 'redacted' if you removed sensitive spans, 'raw' if it is a "
+                    "verbatim prompt, response, diff, or source excerpt. Required: a core "
+                    "running the default raw-content policy refuses raw or unclassified "
+                    "writes, and this tool will not guess on your behalf."
+                ),
+            },
         },
-        "required": ["conclusion"],
+        "required": ["conclusion", "content_class"],
     },
 }
 
@@ -127,15 +138,33 @@ def _handle_context(provider: AtomicMemoryMemoryProvider, args: dict[str, Any])
     )
 
 
+# Mirrors the v1 ContentClass enum. Kept local so a malformed tool call is
+# rejected at this boundary rather than surfacing later as a core 422 with no
+# indication of which tool produced it.
+CONTENT_CLASSES = ("summary", "redacted", "raw")
+
+
 def _handle_conclude(provider: AtomicMemoryMemoryProvider, args: dict[str, Any]) -> str:
     conclusion = _clean_str(args.get("conclusion"))
     if not conclusion:
         return tool_error("Missing required parameter: conclusion")
+    content_class = _clean_str(args.get("content_class"))
+    if not content_class:
+        return tool_error(
+            "Missing required parameter: content_class (one of "
+            f"{', '.join(CONTENT_CLASSES)}). A core running the default raw-content "
+            "policy rejects unclassified writes; this tool does not choose for you."
+        )
+    if content_class not in CONTENT_CLASSES:
+        return tool_error(
+            f"Invalid content_class {content_class!r}; expected one of {', '.join(CONTENT_CLASSES)}."
+        )
     provider._require_client().ingest_verbatim(
         content=conclusion,
         scope=ingest_scope_dict(user_id=provider._user_id),
         provenance=provider._ingest_provenance(session_id=provider._session_id),
         metadata={"kind": "fact"},
+        content_class=content_class,
     )
     return json.dumps({"result": "Fact stored."})